@fusengine/harness 0.1.29 → 0.1.30

package/dist/handle-nu3GYVek.mjs

@@ -1,1090 +0,0 @@
-import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
-import { c as detectCreationIntent, f as evaluateApex, g as detectModularArchitecture, i as frameworkSolidGate, n as skillTriggerGate, s as capVerbosity, y as requiredArchSkill } from "./skill-triggers-BZxov1es.mjs";
-import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-j3gRJ_ng.mjs";
-import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { a as extractText, r as cacheStore, t as cacheLookup } from "./store-DeIsfMg5.mjs";
-import { t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-BnHpq2ZB.mjs";
-import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
-import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { execFileSync } from "node:child_process";
-import { tmpdir } from "node:os";
-//#region src/runtime/activity.ts
-/** Min response length (chars) for a lead agent call to count as `sufficient`. */
-const AGENT_QUALITY_MIN = 500;
-/** Read tools across harnesses (Claude `Read`, Gemini/Cline `read_file`, …). */
-const READ_TOOLS = /* @__PURE__ */ new Set([
-	"Read",
-	"read_file",
-	"read_many_files"
-]);
-/**
-* Map a live tool-use to the activity to record, or null when nothing is
-* tracked. Works across harnesses — tool names are globally distinct:
-* - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
-* - a read tool opening a `.md` reference → `ref`
-*/
-function activityFor(event) {
-	if (/context7|exa/i.test(event.tool)) return {
-		kind: "doc",
-		framework: event.framework,
-		sessionId: event.sessionId,
-		source: /exa/i.test(event.tool) ? "exa" : "context7"
-	};
-	if (event.tool === "Task") {
-		const name = String(event.input?.subagent_type ?? "").split(":").pop() ?? "";
-		if (!name) return null;
-		const quality = event.responseLength === void 0 ? void 0 : event.responseLength > AGENT_QUALITY_MIN ? "sufficient" : "insufficient";
-		return quality ? {
-			kind: "agent",
-			name,
-			ts: event.now,
-			quality
-		} : {
-			kind: "agent",
-			name,
-			ts: event.now
-		};
-	}
-	if (READ_TOOLS.has(event.tool)) {
-		const path = String(event.input?.file_path ?? event.input?.path ?? "");
-		if (path.endsWith(".md")) return {
-			kind: "ref",
-			path
-		};
-	}
-	return null;
-}
-//#endregion
-//#region src/runtime/dry-patterns.ts
-/** Short identifiers never worth a duplication check (control flow, tiny names). */
-const DRY_KEYWORDS = /* @__PURE__ */ new Set([
-	"if",
-	"for",
-	"while",
-	"switch",
-	"catch",
-	"return",
-	"async",
-	"new",
-	"get",
-	"set",
-	"map",
-	"run",
-	"use",
-	"test",
-	"main"
-]);
-/** Extensions treated as TS/JS-family for symbol extraction. */
-const TS_EXT = /* @__PURE__ */ new Set([
-	".ts",
-	".tsx",
-	".js",
-	".jsx",
-	".astro"
-]);
-/** Declaration patterns whose capture group 1 is the declared symbol name (TS/JS). */
-const TS_PATTERNS = [
-	/(?:export\s+)?(?:async\s+)?function\s+(\w+)\s*[(<]/g,
-	/(?:export\s+)?(?:const|let)\s+(\w+)\s*=\s*(?:async\s*)?\(/g,
-	/class\s+(\w+)\b/g
-];
-/**
-* Declaration patterns for PHP (capture group 1 = symbol name). The modifier run
-* is bounded (`{0,6}`) on purpose: an unbounded `(?:…\s+)*` is quadratic (O(n²))
-* on a long whitespace/keyword run with no trailing `function`, which would block
-* the hook for seconds on a crafted file. A real PHP signature has at most a few
-* leading keywords, so the bound is behavior-equivalent and keeps matching linear.
-*/
-const PHP_PATTERNS = [/(?:(?:public|protected|private|static|final|abstract|readonly)\s+){0,6}function\s+(\w+)\s*\(/g, /(?:class|interface|trait)\s+(\w+)\b/g];
-/** Directories grep skips when scanning for existing declarations. */
-const EXCLUDE_DIRS = [
-	"vendor",
-	"node_modules",
-	".next",
-	".git",
-	"dist",
-	"build",
-	"coverage",
-	".turbo"
-];
-//#endregion
-//#region src/runtime/dry.ts
-/** Extract long (>12 char) declared symbol names from new file content. */
-function extractSymbols(content, ext) {
-	const pats = TS_EXT.has(ext) ? TS_PATTERNS : ext === ".php" ? PHP_PATTERNS : [];
-	const names = /* @__PURE__ */ new Set();
-	for (const re of pats) for (const m of content.matchAll(re)) {
-		const n = m[1];
-		if (n && !DRY_KEYWORDS.has(n) && n.length > 12) names.add(n);
-	}
-	return [...names];
-}
-/** `modules/X/...` -> `"X"`, else `""` (module-boundary key). */
-function moduleOf(path) {
-	const parts = path.split(sep);
-	const i = parts.indexOf("modules");
-	return i >= 0 && i + 1 < parts.length ? parts[i + 1] ?? "" : "";
-}
-/**
-* Grep the codebase for existing declarations of the symbols a write introduces,
-* honoring module boundaries (cross-`modules/` matches are ignored). Effectful:
-* shells out to `grep`. Fails open (returns no duplicates) on any grep error,
-* timeout, or no-match — matching the original Python hook.
-*/
-function detectDuplication(filePath, content, cwd) {
-	const ext = extname(filePath).toLowerCase();
-	if (!TS_EXT.has(ext) && ext !== ".php") return {
-		names: [],
-		duplicates: []
-	};
-	const names = extractSymbols(content, ext);
-	if (!names.length) return {
-		names,
-		duplicates: []
-	};
-	const include = TS_EXT.has(ext) ? [
-		"--include=*.ts",
-		"--include=*.tsx",
-		"--include=*.js",
-		"--include=*.jsx"
-	] : ["--include=*.php"];
-	const pattern = `${TS_EXT.has(ext) ? "(function|const|let|class|interface)\\s+" : "(function|class|interface|trait)\\s+"}(${names.map((n) => n.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})\\b`;
-	let out = "";
-	try {
-		out = execFileSync("grep", [
-			"-rEl",
-			...EXCLUDE_DIRS.map((d) => `--exclude-dir=${d}`),
-			...include,
-			"--",
-			pattern,
-			cwd
-		], {
-			encoding: "utf8",
-			timeout: 1500
-		});
-	} catch {
-		return {
-			names,
-			duplicates: []
-		};
-	}
-	const self = resolve(filePath);
-	const targetMod = moduleOf(filePath);
-	const duplicates = [];
-	for (const line of out.split("\n")) {
-		const f = line.trim();
-		if (!f || resolve(f) === self) continue;
-		const dupMod = moduleOf(f);
-		if (targetMod && dupMod && dupMod !== targetMod) continue;
-		duplicates.push(f);
-	}
-	return {
-		names,
-		duplicates
-	};
-}
-/** Blocking prompt when a Write/Edit re-declares 2+ existing symbols, else null. */
-function dryGate(tool, filePath, content, cwd) {
-	if (!cwd || tool !== "Write" && tool !== "Edit" || !content) return null;
-	const dup = detectDuplication(filePath, content, cwd);
-	if (dup.duplicates.length < 2) return null;
-	return {
-		kind: "block",
-		title: "Duplicate code (DRY)",
-		reason: `[${dup.names.slice(0, 5).join(", ")}] already declared in: ${dup.duplicates.slice(0, 3).join(", ")}. Import and reuse instead of re-declaring.`,
-		actions: ["Import the existing symbol instead of re-declaring it", "Extend the existing module"]
-	};
-}
-//#endregion
-//#region src/runtime/precommit.ts
-const TIMEOUT_MS = 3e4;
-const ESLINT_CONFIGS = [
-	".eslintrc.json",
-	".eslintrc.js",
-	"eslint.config.js",
-	"eslint.config.mjs",
-	"eslint.config.ts"
-];
-const PRETTIER_CONFIGS = [
-	".prettierrc",
-	".prettierrc.json",
-	"prettier.config.js"
-];
-/** Run a linter; returns its error output, or "" if it passed / spawn-failed / timed out (fail-open). */
-function runLinter(file, args, label, cwd) {
-	try {
-		execFileSync(file, args, {
-			cwd,
-			timeout: TIMEOUT_MS,
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe"
-			]
-		});
-		return "";
-	} catch (e) {
-		const err = e;
-		if (err.status === void 0 || err.status === null) return "";
-		const out = (err.stdout?.toString() ?? err.stderr?.toString() ?? "").trim();
-		return out ? `[${label}]\n${out}` : "";
-	}
-}
-/** Run the applicable linters in `cwd`, returning a block of errors per failing tool. */
-function collectErrors(cwd) {
-	const has = (f) => existsSync(join(cwd, f));
-	const errors = [];
-	if (has("package.json")) {
-		if (ESLINT_CONFIGS.some(has)) {
-			const m = runLinter("bunx", [
-				"eslint",
-				".",
-				"--max-warnings",
-				"0"
-			], "ESLint", cwd);
-			if (m) errors.push(m);
-		}
-		if (has("tsconfig.json")) {
-			const m = runLinter("bunx", ["tsc", "--noEmit"], "TypeScript", cwd);
-			if (m) errors.push(m);
-		}
-		if (PRETTIER_CONFIGS.some(has)) {
-			const m = runLinter("bunx", [
-				"prettier",
-				"--check",
-				"."
-			], "Prettier", cwd);
-			if (m) errors.push(m);
-		}
-	}
-	if (has("requirements.txt") || has("pyproject.toml")) {
-		const m = runLinter("ruff", ["check", "."], "Ruff", cwd);
-		if (m) errors.push(m);
-	}
-	return errors;
-}
-/** Block a `git commit` when linters fail (effectful: runs eslint/tsc/prettier/ruff, never auto-fixes). */
-function preCommitGate(tool, command, cwd) {
-	if (tool !== "Bash" || !command || !cwd) return null;
-	if (!command.startsWith("git") || !command.includes("commit")) return null;
-	const errors = collectErrors(cwd);
-	if (!errors.length) return null;
-	return {
-		kind: "block",
-		title: "Pre-commit checks failed",
-		reason: `COMMIT BLOCKED — fix then retry:\n\n${errors.join("\n\n")}`,
-		actions: ["Fix the linter/type errors above", "Re-run the commit"]
-	};
-}
-//#endregion
-//#region src/runtime/modular.ts
-const NEXT_CONVENTION = /^(page|layout|loading|error|not-found|route|template|default|global-error|opengraph-image|twitter-image|icon|apple-icon|sitemap|robots|manifest|middleware)\.(tsx|ts|js|jsx)$/;
-const NEXT_STATIC = /\.(css|ico|png|jpg|svg|json)$/;
-const PHP_BLOCKED_IN_APP = [
-	"/app/Models/",
-	"/app/Services/",
-	"/app/Actions/",
-	"/app/Http/Controllers/",
-	"/app/Http/Requests/",
-	"/app/Http/Resources/",
-	"/app/Contracts/",
-	"/app/DTOs/",
-	"/app/Repositories/",
-	"/app/Events/",
-	"/app/Listeners/",
-	"/app/Jobs/",
-	"/app/Notifications/",
-	"/app/Policies/"
-];
-const block = (reason) => ({
-	kind: "block",
-	title: "Modular architecture",
-	reason,
-	actions: ["Move the code into the correct feature module", "Import only from the shared core module"]
-});
-/** Next.js `modules/` architecture: `app/` convention + cross-module import rules. */
-function nextModular(filePath, content, cwd) {
-	const rel = relative(cwd, filePath);
-	const bn = basename(filePath);
-	if ((rel.startsWith("app/") || rel.startsWith("src/app/")) && !NEXT_CONVENTION.test(bn) && !NEXT_STATIC.test(bn)) return block(`BLOCKED: modular Next.js — '${bn}' is not an app/ convention file. Move business logic to modules/[feature]/.`);
-	const mod = filePath.match(/\/modules\/([^/]+)\//);
-	if (!mod) return null;
-	const current = mod[1] ?? "";
-	for (const m of content.matchAll(/from\s+['"][@.][^'"]*?\/modules\/([^/]+)\//g)) {
-		const imported = m[1] ?? "";
-		if (current === "cores") {
-			if (imported !== "cores" && imported !== "core") return block(`BLOCKED: modules/cores/ must not import from modules/${imported}/.`);
-		} else if (imported !== current && imported !== "cores" && imported !== "core") return block(`BLOCKED: cross-module import — '${current}' imports '${imported}'. Only modules/cores/ is shared.`);
-	}
-	return null;
-}
-/** Laravel FuseCore architecture: `app/` domain ban + module.json + cross-module `use` rules. */
-function fusecore(filePath, content, cwd) {
-	for (const b of PHP_BLOCKED_IN_APP) if (filePath.includes(b)) return block(`BLOCKED: FuseCore — domain code in '${b}' must move to FuseCore/{Module}/App/.`);
-	const mod = filePath.match(/\/FuseCore\/([A-Za-z]+)\//);
-	if (!mod) return null;
-	const name = mod[1] ?? "";
-	if (!existsSync(join(cwd, "FuseCore", name, "module.json"))) return block(`BLOCKED: FuseCore module '${name}' is missing module.json — create it first.`);
-	for (const m of content.matchAll(/use\s+FuseCore\\(\w+)\\/g)) {
-		const imported = m[1] ?? "";
-		if (name === "Core") {
-			if (imported !== "Core") return block(`BLOCKED: FuseCore\\Core\\ must not use FuseCore\\${imported}\\.`);
-		} else if (imported !== name && imported !== "Core") return block(`BLOCKED: cross-module use — '${name}' uses '${imported}'. Only FuseCore\\Core\\ is shared.`);
-	}
-	return null;
-}
-/** Enforce the project's modular architecture (Next.js `modules/` or Laravel FuseCore) on a Write/Edit. */
-function modularGate(tool, filePath, content, cwd) {
-	if (tool !== "Write" && tool !== "Edit" || !filePath || !cwd) return null;
-	if (/\/(node_modules|dist|build|\.next|vendor|storage)\//.test(filePath)) return null;
-	const arch = detectModularArchitecture(cwd);
-	if (arch === "nextjs-modular" && /\.(tsx|ts|jsx|js)$/.test(filePath)) return nextModular(filePath, content ?? "", cwd);
-	if (arch === "fusecore" && filePath.endsWith(".php")) return fusecore(filePath, content ?? "", cwd);
-	return null;
-}
-//#endregion
-//#region src/runtime/framework-skill-gate.ts
-/**
-* Effective line count for the SOLID size check. On an Edit, `content` is only
-* the `new_string` snippet, so judge the larger of the snippet and the full
-* on-disk file (`existingLines`) — mirroring the base file-size guard and the
-* Python `get_full_file_content`. On Write, `content` IS the full file, so the
-* snippet count stands (undefined → the gate falls back to `countLines`).
-* @param tool - the tool name ("Edit" | "Write" | ...).
-* @param content - the written content (snippet on Edit, full file on Write).
-* @param existingLines - full on-disk line count, when known.
-*/
-function effectiveLines(tool, content, existingLines) {
-	if (tool !== "Edit" || existingLines === void 0) return void 0;
-	return Math.max(countLines(content), existingLines);
-}
-/**
-* Framework-aware SOLID + sub-skill gate, run on the Write/Edit path once a
-* `filePath` is present. Combines:
-*  - {@link frameworkSolidGate}: framework-specific SOLID rules (line limits,
-*    interface/protocol separation, `'use client'`, @MainActor...).
-*  - {@link skillTriggerGate}: blocks when written APIs need a sub-skill that
-*    was not read this session, also forcing the modular-architecture skill
-*    resolved from disk via {@link requiredArchSkill}.
-*
-* @param input - the gated tool-use (filePath + content + framework + cwd).
-* @param refsRead - in-session read reference paths (from the loaded track).
-* @param existingLines - full on-disk line count (so an Edit on an oversized
-*   file still fires the framework SOLID size rule). Omit on Write.
-* @returns the first blocking {@link Prompt}, or `null` to allow.
-*/
-function frameworkSkillGate(input, refsRead, existingLines) {
-	if (!input.filePath) return null;
-	const content = input.content ?? "";
-	const solid = frameworkSolidGate(input.filePath, content, effectiveLines(input.tool, content, existingLines));
-	if (solid) return solid;
-	const forced = input.cwd ? requiredArchSkill(input.cwd) : null;
-	return skillTriggerGate(input.framework, content, refsRead, forced, input.cwd);
-}
-//#endregion
-//#region src/runtime/gate.ts
-/** Prior agents the freshness gate requires before a code edit. */
-const REQUIRED_AGENTS = ["explore-codebase", "research-expert"];
-/** Default freshness window for {@link REQUIRED_AGENTS} (2 min — matches the plugin's `FUSE_ENFORCE_TTL_SEC` default). */
-const DEFAULT_WINDOW_MS = 12e4;
-/** Trivial edits allowed within the window before the full APEX gates apply. */
-const TRIVIAL_BUDGET = 4;
-/**
-* Code-only line count of the existing on-disk file (undefined if
-* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) to
-* mirror the Python `count_code_lines(get_full_file_content(...))`, so a partial
-* Edit judges the full file by the SAME metric as the incoming snippet — a raw
-* `split("\n").length` would over-count JSDoc/blank lines (and add a
-* trailing-newline off-by-one), falsely blocking well-documented files.
-*/
-function existingLineCount(path) {
-	if (!path) return void 0;
-	try {
-		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
-	} catch {
-		return;
-	}
-}
-/**
-* Full gate: the stateless guards (file-size, git, security...) first, then a
-* trivial-edit fast path, then the stateful APEX gates fed from the session
-* track. Returns the first blocking prompt, or null to allow.
-*/
-async function gate(input) {
-	const existingLines = existingLineCount(input.filePath);
-	let quick;
-	try {
-		quick = evaluate({
-			tool: input.tool,
-			filePath: input.filePath,
-			content: input.content,
-			command: input.command,
-			agentType: input.agentType,
-			existingLines
-		});
-	} catch {
-		return FAIL_CLOSED;
-	}
-	if (quick.decision !== "allow" && quick.prompt) return quick.prompt;
-	const precommit = preCommitGate(input.tool, input.command, input.cwd);
-	if (precommit) return precommit;
-	const modular = modularGate(input.tool, input.filePath, input.content, input.cwd);
-	if (modular) return modular;
-	if (!input.filePath) return null;
-	const window = input.windowMs ?? 12e4;
-	const track = await loadTrack(input.trackFile);
-	const solidOrSkill = frameworkSkillGate(input, track.refsRead, existingLines);
-	if (solidOrSkill) return solidOrSkill;
-	const lineCount = input.content === void 0 ? Number.POSITIVE_INFINITY : input.content.split("\n").length;
-	if (!input.isReplaceAll && lineCount < 5 && trivialCount(track, window, input.now) < 4) {
-		await saveTrack(input.trackFile, recordTrivialEdit(track, input.now, window, input.now));
-		return null;
-	}
-	const ctx = {
-		sessionId: input.sessionId,
-		framework: input.framework,
-		filePath: input.filePath,
-		content: input.content ?? "",
-		authorizations: track.authorizations,
-		refs: input.refs,
-		refsRead: track.refsRead,
-		agentsFresh: agentsFresh(track, [...REQUIRED_AGENTS], window, input.now),
-		brainstormRequired: track.brainstormRequired,
-		brainstormFresh: agentsFresh(track, ["brainstorming"], window, input.now)
-	};
-	try {
-		const apex = evaluateApex(ctx);
-		if (apex) return apex;
-	} catch {
-		return FAIL_CLOSED;
-	}
-	return dryGate(input.tool, input.filePath, input.content, input.cwd);
-}
-//#endregion
-//#region src/runtime/mcp.ts
-/** Default freshness for cached MCP/WebFetch results (48h). */
-const MCP_TTL_MS = 1728e5;
-/** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
-function isMcpTool(tool) {
-	return /context7|exa|webfetch|web_fetch/i.test(tool) || tool === "WebFetch";
-}
-/** The query/url that keys the cache. */
-function queryOf(input) {
-	const q = input.query ?? input.url ?? input.libraryId ?? "";
-	return typeof q === "string" ? q : JSON.stringify(q);
-}
-function denyWith(id, content) {
-	if (id === "claude-code" || id === "codex") return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: "PreToolUse",
-		permissionDecision: "deny",
-		permissionDecisionReason: content
-	} });
-	if (id === "gemini-cli") return JSON.stringify({
-		decision: "deny",
-		reason: content
-	});
-	return "";
-}
-function mutateWith(id, input) {
-	if (id === "claude-code" || id === "codex") return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: "PreToolUse",
-		permissionDecision: "allow",
-		updatedInput: input
-	} });
-	if (id === "gemini-cli") return JSON.stringify({ hookSpecificOutput: { tool_input: input } });
-	return "";
-}
-/** The doc provider a served cache-hit satisfies (`exa`/`context7`), else undefined. */
-function docSourceOf(tool) {
-	if (/exa/i.test(tool)) return "exa";
-	if (/context7/i.test(tool)) return "context7";
-}
-/**
-* Pre-event MCP interception: serve a fresh cache hit (deny + cached content),
-* else cap exa verbosity (allow + mutated input), else null to allow normally.
-* Harnesses without input-mutation/cache support fall through to null.
-*/
-function mcpPreIntercept(id, tool, input, dir, ttlMs, now) {
-	if (!isMcpTool(tool)) return null;
-	const cached = cacheLookup(dir, tool, queryOf(input), ttlMs, now);
-	if (cached) {
-		const served = denyWith(id, cached);
-		if (served) return {
-			stdout: served,
-			docSource: docSourceOf(tool)
-		};
-	}
-	const capped = capVerbosity(tool, input);
-	if (capped) {
-		const mutated = mutateWith(id, capped);
-		if (mutated) return { stdout: mutated };
-	}
-	return null;
-}
-/** Post-event: store the MCP/WebFetch response (extracted to markdown) in the cache. */
-function mcpPostStore(tool, input, response, dir) {
-	if (!isMcpTool(tool)) return;
-	cacheStore(dir, tool, queryOf(input), extractText(response));
-}
-//#endregion
-//#region src/runtime/normalize.ts
-function str(v) {
-	return typeof v === "string" ? v : void 0;
-}
-/**
-* Normalize a harness hook payload into a uniform event. Handles Cline's nested
-* `preToolUse`/`postToolUse` shape and the top-level `tool_name`/`tool_input`
-* shape used by Claude, Codex, Gemini, and Cursor.
-*/
-function normalizeEvent(id, payload) {
-	if (id === "cline") {
-		const post = payload.postToolUse;
-		const node = post ?? payload.preToolUse ?? {};
-		const params = node.parameters ?? {};
-		return {
-			phase: post ? "post" : "pre",
-			tool: str(node.toolName) ?? "",
-			input: params,
-			sessionId: str(payload.taskId) ?? "",
-			filePath: str(params.path),
-			content: str(params.content),
-			command: str(params.command)
-		};
-	}
-	const event = str(payload.hook_event_name) ?? "";
-	const input = payload.tool_input ?? payload;
-	return {
-		phase: /post|after/i.test(event) ? "post" : "pre",
-		tool: str(payload.tool_name) ?? "",
-		input,
-		sessionId: str(payload.session_id) ?? str(payload.conversation_id) ?? "",
-		filePath: str(input.file_path) ?? str(input.path) ?? str(payload.file_path),
-		content: str(input.content) ?? str(input.new_string),
-		command: str(input.command) ?? str(payload.command),
-		agentType: str(payload.agent_type) ?? str(input.subagent_type)
-	};
-}
-//#endregion
-//#region src/runtime/paths.ts
-/** Path to a session's track file (under a per-tool base dir). */
-function trackFile(sessionId, baseDir = join(tmpdir(), "fuse-harness")) {
-	return join(baseDir, `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
-}
-//#endregion
-//#region src/runtime/record.ts
-/** Apply an activity to a session's track and persist it (PostToolUse path). */
-async function recordActivity(file, activity) {
-	const track = await loadTrack(file);
-	await saveTrack(file, activity.kind === "agent" ? recordAgent(track, activity.name, activity.ts, activity.quality) : activity.kind === "doc" ? recordDoc(track, activity.framework, activity.sessionId, activity.source) : recordRefRead(track, activity.path));
-}
-//#endregion
-//#region src/runtime/respond.ts
-/**
-* Map a portable {@link Prompt} to a harness's native hook response. `block`
-* denies; anything else asks/injects context. (Codex/Cursor parse but ignore
-* `ask` — they only honor deny.)
-*/
-function respond(id, prompt) {
-	const message = formatPrompt(prompt);
-	const deny = prompt.kind === "block";
-	switch (id) {
-		case "claude-code":
-		case "codex": return JSON.stringify({ hookSpecificOutput: {
-			hookEventName: "PreToolUse",
-			permissionDecision: deny ? "deny" : "ask",
-			permissionDecisionReason: message
-		} });
-		case "gemini-cli": return JSON.stringify(deny ? {
-			decision: "deny",
-			reason: message
-		} : { hookSpecificOutput: { additionalContext: message } });
-		case "cursor": return JSON.stringify({
-			permission: deny ? "deny" : "ask",
-			continue: false,
-			userMessage: message,
-			agentMessage: message
-		});
-		case "cline": return JSON.stringify(deny ? {
-			cancel: true,
-			errorMessage: message
-		} : { contextModification: message });
-		default: return "";
-	}
-}
-//#endregion
-//#region src/policy/design/state.ts
-/** Minimum fuse-browser screenshots required before writing design-system.md, per mode. */
-const MIN_SCREENSHOTS = {
-	full: 4,
-	page: 2,
-	component: 0
-};
-const stateFile = (cacheDir, agentId) => join(cacheDir, `.design-state-${agentId}.json`);
-/** Load the design state for `agentId`, or null when absent/corrupt (fail-open). */
-function loadDesignState(cacheDir, agentId) {
-	const path = stateFile(cacheDir, agentId);
-	if (!existsSync(path)) return null;
-	try {
-		return JSON.parse(readFileSync(path, "utf8"));
-	} catch {
-		return null;
-	}
-}
-/** Persist the design state under its agent id. */
-function saveDesignState(cacheDir, state) {
-	mkdirSync(cacheDir, { recursive: true });
-	writeFileSync(stateFile(cacheDir, state.agentId), JSON.stringify(state, null, 2));
-}
-/** Build the initial state for a design agent starting a run. */
-function initDesignState(agentId, mode, designSystemExists) {
-	return {
-		agentId,
-		mode,
-		currentPhase: 0,
-		phasesCompleted: [],
-		inspirationRead: false,
-		scrolledSinceNav: false,
-		screenshotsCount: 0,
-		designSystemExists,
-		designSystemValid: false,
-		geminiCalls: 0
-	};
-}
-/** Archive the active state file (timestamp suffix) and drop archives older than 7 days. */
-function cleanupDesignStates(cacheDir, agentId, stamp, now) {
-	if (agentId) {
-		const src = stateFile(cacheDir, agentId);
-		if (existsSync(src)) renameSync(src, join(cacheDir, `.design-state-${agentId}-${stamp}.json`));
-	}
-	let entries;
-	try {
-		entries = readdirSync(cacheDir);
-	} catch {
-		return;
-	}
-	const cutoff = now - 7 * 864e5;
-	for (const name of entries) {
-		if (!name.startsWith(".design-state-")) continue;
-		const path = join(cacheDir, name);
-		try {
-			if (statSync(path).mtimeMs < cutoff) rmSync(path);
-		} catch {}
-	}
-}
-//#endregion
-//#region src/policy/design/transitions.ts
-/** Infer the pipeline mode from the launch prompt + whether a design-system.md already exists. */
-function detectMode(prompt, designSystemExists) {
-	const p = prompt.toLowerCase();
-	if ([
-		"component",
-		"composant",
-		"snippet"
-	].some((k) => p.includes(k))) return "component";
-	return designSystemExists ? "page" : "full";
-}
-/** Record a screenshot: bump the count and advance to phase 2 once the quota is met. */
-function recordScreenshot(state, needed) {
-	const screenshotsCount = state.screenshotsCount + 1;
-	const next = {
-		...state,
-		screenshotsCount
-	};
-	if (screenshotsCount >= needed && state.currentPhase < 2) {
-		next.currentPhase = 2;
-		next.phasesCompleted = [.../* @__PURE__ */ new Set([
-			...state.phasesCompleted,
-			"identity",
-			"research"
-		])];
-	}
-	return next;
-}
-/** Record a fuse-browser navigate (resets the scroll-before-screenshot guard). */
-function recordNavigate(state) {
-	return {
-		...state,
-		scrolledSinceNav: false
-	};
-}
-/** Record a fuse-browser scroll (satisfies the scroll-before-screenshot guard). */
-function recordScroll(state) {
-	return {
-		...state,
-		scrolledSinceNav: true
-	};
-}
-/** Mark the design system validated and advance to phase 3 (after a passing create_frontend check). */
-function recordValidDesignSystem(state) {
-	return {
-		...state,
-		designSystemExists: true,
-		designSystemValid: true,
-		currentPhase: Math.max(state.currentPhase, 3),
-		phasesCompleted: [.../* @__PURE__ */ new Set([...state.phasesCompleted, "design-system"])]
-	};
-}
-/**
-* Record a skill-file Read: reading the identity templates enters phase 1 (browsing
-* allowed); reading the inspiration catalog satisfies the browse prerequisite.
-*/
-function recordRead(state, filePath) {
-	const next = { ...state };
-	if (filePath.includes("identity-system")) {
-		next.currentPhase = Math.max(state.currentPhase, 1);
-		next.phasesCompleted = [.../* @__PURE__ */ new Set([...state.phasesCompleted, "identity"])];
-	}
-	if (filePath.includes("design-inspiration")) next.inspirationRead = true;
-	return next;
-}
-//#endregion
-//#region src/policy/design/flag.ts
-const flagPath = (cacheDir) => join(cacheDir, "design-agent-active");
-/** The active design agent id (the flag), or "" when no design agent is running. */
-function activeDesignAgent(cacheDir) {
-	const path = flagPath(cacheDir);
-	if (!existsSync(path)) return "";
-	try {
-		return readFileSync(path, "utf8").trim();
-	} catch {
-		return "";
-	}
-}
-/** Mark a design agent active (writes its id to the flag file). */
-function setActiveDesignAgent(cacheDir, agentId) {
-	mkdirSync(cacheDir, { recursive: true });
-	writeFileSync(flagPath(cacheDir), agentId);
-}
-/** Clear the active-design-agent flag. */
-function clearActiveDesignAgent(cacheDir) {
-	try {
-		rmSync(flagPath(cacheDir));
-	} catch {}
-}
-//#endregion
-//#region src/policy/design/content-checks.ts
-/** Accessibility warnings: icon buttons need aria-label, images need alt. */
-function checkAccessibility(content) {
-	const w = [];
-	if (!/<(button|a|input|img)/.test(content)) return w;
-	if (/<button[^>]*>/.test(content) && !/aria-label|aria-labelledby/.test(content) && /<button[^>]*>[^<]*<[^>]*Icon/.test(content)) w.push("Accessibility: icon buttons need an aria-label.");
-	for (const m of content.matchAll(/<img[^>]*?>/g)) if (!m[0].includes("alt=")) {
-		w.push("Accessibility: images need an alt attribute.");
-		break;
-	}
-	return w;
-}
-/** Anti-pattern warnings: colored left borders, AI-slop gradients, emoji-as-icons. */
-function checkPatterns(content) {
-	const w = [];
-	if (/border-l-[0-9]+ border-l-(blue|green|red|purple)/.test(content)) w.push("Design: avoid colored left borders — use shadow/gradient.");
-	if (/from-purple|to-purple|via-purple|from-pink.*to-purple/.test(content)) w.push("Design: avoid purple/pink gradients (AI slop) — use brand colors.");
-	if (/>[^\x00-\x7F]+</.test(content)) w.push("Design: avoid emojis as icons — use a real icon set.");
-	return w;
-}
-/** Forbidden-font warnings (CSS font-family + Google Fonts import). */
-function checkFonts(content) {
-	const w = [];
-	if (/font-family:\s*['"]?(Roboto|Inter|Arial|Open Sans|Lato)\b/i.test(content)) w.push("Font: forbidden family (Roboto/Inter/Arial/Open Sans/Lato) — use identity fonts.");
-	if (/@import.*fonts\.googleapis.*family=(Roboto|Inter)\b/.test(content)) w.push("Font: Google Fonts import for a forbidden family.");
-	return w;
-}
-/** Hard-coded-color warnings (hex in className or inline style). */
-function checkColors(content) {
-	const w = [];
-	if (/className="[^"]*#[0-9a-fA-F]{3,8}[^"]*"/.test(content)) w.push("Color: hard-coded hex in className — use CSS variables.");
-	if (/(?:color|background(?:-color)?|fill|stroke):\s*['"]?#[0-9a-fA-F]{3,8}/.test(content)) w.push("Color: hard-coded hex in style — use var(--color-*).");
-	return w;
-}
-/** Run all design content checks → non-blocking warnings (empty = clean). */
-function runDesignChecks(content) {
-	return [
-		...checkAccessibility(content),
-		...checkPatterns(content),
-		...checkFonts(content),
-		...checkColors(content)
-	];
-}
-//#endregion
-//#region src/policy/design/gates.ts
-const ALLOWED_WRITE = /\.(html|css|md|json)$/;
-const EXEMPT_DIRS = [
-	"node_modules/",
-	"dist/",
-	"build/",
-	".claude/"
-];
-const FORBIDDEN_FONTS = [
-	"Inter",
-	"Roboto",
-	"Arial",
-	"Open Sans"
-];
-const OKLCH_RE = /oklch\(\s*[\d.]+%?\s+0\.0*[1-9]/;
-const KNOWN_DOMAINS = [
-	"framer.website",
-	"webflow.io",
-	"awwwards.com",
-	"godly.website",
-	"lapa.ninja",
-	"onepagelove.com",
-	"saasframe.io",
-	"bestwebsite.gallery",
-	"landingfolio.com"
-];
-const deny = (reason) => ({
-	kind: "block",
-	title: "Design pipeline",
-	reason,
-	actions: ["Follow the design pipeline phases (0→identity, 1→inspiration, 2→screenshots, 3→design-system, 4→generate) in order"]
-});
-/** Block the design agent from writing anything but .html/.css/.md/.json. */
-function htmlCssOnlyGate(filePath) {
-	if (EXEMPT_DIRS.some((d) => filePath.includes(d)) || ALLOWED_WRITE.test(filePath)) return null;
-	return deny("BLOCKED: design-expert can only write .html, .css, .md, and .json files.");
-}
-/** Block edits to the harness-managed `.design-state-*` files (read-only to the agent). */
-function stateFileGate(filePath) {
-	return filePath.includes(".design-state-") ? deny("BLOCKED: .design-state files are read-only; the hooks update them as you progress.") : null;
-}
-/** Gate writing design-system.md: requires phase ≥ 2 and the per-mode screenshot quota. */
-function designSystemWriteGate(filePath, state) {
-	if (!filePath.endsWith("design-system.md")) return null;
-	if (state.currentPhase < 2) return deny(`BLOCKED: cannot write design-system.md at phase ${state.currentPhase}. Read identity + inspiration, then browse & screenshot first.`);
-	const needed = MIN_SCREENSHOTS[state.mode];
-	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} fuse-browser screenshots for mode '${state.mode}'. Take ${needed - state.screenshotsCount} more (fullPage).`);
-	return null;
-}
-/** Return the requirements missing from a design-system.md (empty = valid). */
-function validateDesignSystem(content) {
-	const missing = [];
-	if (!content.includes("## Design Reference")) missing.push("## Design Reference section");
-	if (!/https?:\/\//.test(content)) missing.push("reference URL (https://…)");
-	if (!OKLCH_RE.test(content)) missing.push("oklch() color with chroma > 0");
-	if (FORBIDDEN_FONTS.some((f) => content.includes(f))) missing.push("forbidden font (Inter/Roboto/Arial/Open Sans)");
-	return missing;
-}
-/** Gate Gemini create_frontend: requires phase ≥ 3 and a validated design system. */
-function geminiCreateGate(state) {
-	if (state.currentPhase < 3) return deny("BLOCKED: cannot call create_frontend before phase 3. Finish screenshots and write a valid design-system.md.");
-	if (!state.designSystemValid) return deny("BLOCKED: design-system.md not validated (needs ## Design Reference, OKLCH, typography, reference URL).");
-	return null;
-}
-/** Gate fuse-browser navigate: phase ≥ 1, inspiration read, URL in the catalog. */
-function browserNavigateGate(state, url) {
-	if (state.currentPhase < 1) return deny("BLOCKED: read identity templates + design-inspiration.md before browsing.");
-	if (!state.inspirationRead) return deny("BLOCKED: design-inspiration.md not read yet — read it then pick catalog URLs.");
-	if (url && !KNOWN_DOMAINS.some((d) => url.includes(d))) return deny(`BLOCKED: '${url}' is not in the catalog. Use design-inspiration-urls.md domains.`);
-	return null;
-}
-/** Gate a screenshot: require a scroll since the last navigate (lazy-load content). */
-function screenshotScrollGate(state) {
-	return state.scrolledSinceNav ? null : deny("BLOCKED: scroll the page before a screenshot — browser_scroll to:'end', wait, scroll back, then fullPage screenshot.");
-}
-/** The Gemini design gates are OPT-IN: off unless `FUSE_DESIGN_GEMINI` is `1`/`true`. */
-function geminiEnabled() {
-	const v = process.env.FUSE_DESIGN_GEMINI;
-	return v === "1" || v === "true";
-}
-//#endregion
-//#region src/runtime/design.ts
-const NAV = "mcp__fuse-browser__browser_navigate";
-const SHOT = "mcp__fuse-browser__browser_screenshot";
-const SCROLL = "mcp__fuse-browser__browser_scroll";
-const GEMINI = "mcp__gemini-design__create_frontend";
-/** Read design-system.md walking up to 6 parents from `cwd` ("" if absent/unreadable). */
-function findDesignSystem(cwd) {
-	let dir = cwd;
-	for (let i = 0; i < 6; i++) {
-		const p = join(dir, "design-system.md");
-		if (existsSync(p)) try {
-			return readFileSync(p, "utf8");
-		} catch {
-			return "";
-		}
-		const parent = dirname(dir);
-		if (parent === dir) break;
-		dir = parent;
-	}
-	return "";
-}
-/** Apply a PostToolUse fuse-browser transition to the design state. */
-function recordPost(event, cacheDir, state) {
-	if (event.tool === SHOT) saveDesignState(cacheDir, recordScreenshot(state, MIN_SCREENSHOTS[state.mode]));
-	else if (event.tool === NAV) saveDesignState(cacheDir, recordNavigate(state));
-	else if (event.tool === SCROLL) saveDesignState(cacheDir, recordScroll(state));
-	else if (event.tool === GEMINI) saveDesignState(cacheDir, {
-		...state,
-		geminiCalls: state.geminiCalls + 1
-	});
-	else if (event.tool === "Read") saveDesignState(cacheDir, recordRead(state, event.filePath ?? ""));
-	else if ((event.tool === "Write" || event.tool === "Edit") && (event.filePath ?? "").endsWith("design-system.md")) saveDesignState(cacheDir, recordValidDesignSystem(state));
-}
-/**
-* Design-pipeline gate (effectful: reads/writes the design state + design-system.md).
-* Returns a Prompt to block, or null when this isn't a design-agent context / nothing fires.
-*/
-function designGate(payload, event, cacheDir, cwd) {
-	const agentId = typeof payload.agent_id === "string" ? payload.agent_id : "";
-	const active = activeDesignAgent(cacheDir);
-	if (active && agentId && agentId !== active) return null;
-	const id = active || agentId;
-	if (!id) return null;
-	const state = loadDesignState(cacheDir, id);
-	if (!state) return null;
-	if (event.phase === "post") {
-		recordPost(event, cacheDir, state);
-		if ((event.tool === "Write" || event.tool === "Edit") && /\.(tsx|jsx|css)$/.test(event.filePath ?? "")) {
-			const warnings = runDesignChecks(event.content ?? "");
-			if (warnings.length) return {
-				kind: "inform",
-				title: "Design review",
-				reason: warnings.join(" "),
-				actions: []
-			};
-		}
-		return null;
-	}
-	if (event.tool === "Write" || event.tool === "Edit") {
-		const fp = event.filePath ?? "";
-		const base = stateFileGate(fp) ?? htmlCssOnlyGate(fp) ?? designSystemWriteGate(fp, state);
-		if (base) return base;
-		if (geminiEnabled() && state.geminiCalls === 0 && /\.(html|css)$/.test(fp)) return {
-			kind: "block",
-			title: "Design pipeline",
-			reason: "BLOCKED: generate the frontend via create_frontend before hand-writing HTML/CSS.",
-			actions: ["Call mcp__gemini-design__create_frontend first"]
-		};
-		return null;
-	}
-	if (event.tool === NAV) return browserNavigateGate(state, typeof event.input.url === "string" ? event.input.url : "");
-	if (event.tool === SHOT) return screenshotScrollGate(state);
-	if (event.tool === GEMINI) {
-		if (!geminiEnabled()) return null;
-		const block = geminiCreateGate(state);
-		if (block) return block;
-		const missing = validateDesignSystem(findDesignSystem(cwd));
-		if (missing.length) return {
-			kind: "block",
-			title: "Design pipeline",
-			reason: `BLOCKED: design-system.md too generic. Missing: ${missing.join(", ")}.`,
-			actions: ["Fix design-system.md, then retry create_frontend"]
-		};
-		saveDesignState(cacheDir, recordValidDesignSystem(state));
-	}
-	return null;
-}
-//#endregion
-//#region src/runtime/design-lifecycle.ts
-/**
-* Handle the design-agent SubagentStart/Stop lifecycle: init the pipeline state +
-* raise the active flag on start, archive/cleanup + clear the flag on stop.
-* Returns true when it handled the event (caller should respond and stop).
-*/
-function designLifecycle(payload, cacheDir, cwd, stamp, now) {
-	const event = typeof payload.hook_event_name === "string" ? payload.hook_event_name : "";
-	if (!(typeof payload.agent_type === "string" ? payload.agent_type : "").includes("design")) return false;
-	const agentId = typeof payload.agent_id === "string" ? payload.agent_id : "";
-	if (event === "SubagentStart") {
-		if (!agentId) return false;
-		const dsExists = existsSync(join(cwd, "design-system.md"));
-		saveDesignState(cacheDir, initDesignState(agentId, detectMode(typeof payload.prompt === "string" ? payload.prompt : "", dsExists), dsExists));
-		setActiveDesignAgent(cacheDir, agentId);
-		return true;
-	}
-	if (event === "SubagentStop") {
-		cleanupDesignStates(cacheDir, agentId, stamp, now);
-		clearActiveDesignAgent(cacheDir);
-		return true;
-	}
-	return false;
-}
-//#endregion
-//#region src/runtime/handle.ts
-/**
-* The full hook handler: on a PRE event it gates the tool-use (stateless guards
-* then APEX gates from the session track) and returns the native response; on a
-* POST event it records the activity into the track. The loop that makes the
-* package behave like the Claude plugin, on any harness.
-*/
-async function handleHook(id, payload, opts) {
-	const event = normalizeEvent(id, payload);
-	const layout = projectLayout(opts.cwd);
-	const file = trackFile(event.sessionId, layout.trackDir);
-	const mcpDir = layout.cacheDir;
-	const framework = detectFramework(event.filePath ?? "", event.content ?? "");
-	if (designLifecycle(payload, mcpDir, opts.cwd, String(opts.now), opts.now)) return {
-		stdout: "",
-		exit: 0
-	};
-	const userPrompt = typeof payload.prompt === "string" ? payload.prompt : void 0;
-	if (userPrompt !== void 0) {
-		await saveTrack(file, recordBrainstormRequired(await loadTrack(file), detectCreationIntent(userPrompt)));
-		return {
-			stdout: "",
-			exit: 0
-		};
-	}
-	if (event.phase === "post") {
-		const response = payload.tool_response ?? payload.tool_output;
-		mcpPostStore(event.tool, event.input, response, mcpDir);
-		const designWarn = designGate(payload, event, mcpDir, opts.cwd);
-		const activity = activityFor({
-			tool: event.tool,
-			input: event.input,
-			sessionId: event.sessionId,
-			framework,
-			now: opts.now,
-			responseLength: extractText(response).length
-		});
-		if (activity) await recordActivity(file, activity);
-		return {
-			stdout: designWarn ? respond(id, designWarn) : "",
-			exit: 0
-		};
-	}
-	const intercept = mcpPreIntercept(id, event.tool, event.input, mcpDir, MCP_TTL_MS, opts.now);
-	if (intercept !== null) {
-		if (intercept.docSource) await recordActivity(file, {
-			kind: "doc",
-			framework,
-			sessionId: event.sessionId,
-			source: intercept.docSource
-		});
-		return {
-			stdout: intercept.stdout,
-			exit: 0
-		};
-	}
-	const designBlock = designGate(payload, event, mcpDir, opts.cwd);
-	if (designBlock) return {
-		stdout: respond(id, designBlock),
-		exit: 0
-	};
-	const prompt = await gate({
-		sessionId: event.sessionId,
-		framework,
-		tool: event.tool,
-		filePath: event.filePath,
-		content: event.content,
-		command: event.command,
-		cwd: opts.cwd,
-		refs: opts.refsDir ? await loadRefs(opts.refsDir) : void 0,
-		isReplaceAll: event.input.replace_all === true,
-		agentType: event.agentType,
-		windowMs: opts.windowMs,
-		now: opts.now,
-		trackFile: file
-	});
-	return prompt ? {
-		stdout: respond(id, prompt),
-		exit: 0
-	} : {
-		stdout: "",
-		exit: 0
-	};
-}
-//#endregion
-export { dryGate as _, normalizeEvent as a, mcpPostStore as c, DEFAULT_WINDOW_MS as d, REQUIRED_AGENTS as f, detectDuplication as g, preCommitGate as h, trackFile as i, mcpPreIntercept as l, gate as m, respond as n, MCP_TTL_MS as o, TRIVIAL_BUDGET as p, recordActivity as r, isMcpTool as s, handleHook as t, queryOf as u, extractSymbols as v, activityFor as y };