@fusengine/harness 0.1.32 → 0.1.34

package/dist/{handle-DJqHZcml.mjs → handle-DMHjTY1E.mjs}

@@ -1,22 +1,21 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
 import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-CccewDwk.mjs";
-import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-DLrWtaDR.mjs";
+import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-BkoEbdec.mjs";
 import { a as extractText, o as loadIndex, r as cacheStore, t as cacheLookup } from "./store-PrNPm6So.mjs";
-import { i as writeJsonFile, r as readJsonFile, t as atomicWrite } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-CvSumjtz.mjs";
 import { t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-D-ge2ZPI.mjs";
-import { n as denyResponse, t as contextResponse } from "./claude-BWZcrZbS.mjs";
+import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-7j02oGjt.mjs";
+import { c as pathExists, d as spawnCapture, f as writeText, l as readText, n as denyResponse, s as collectFiles, t as contextResponse, u as sleep } from "./claude-3PqBGt_7.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
+import { homedir } from "node:os";
 import { createHash } from "node:crypto";
 import { mkdir, rmdir } from "node:fs/promises";
 import { execFileSync } from "node:child_process";
-import { Glob } from "bun";
 //#region src/runtime/activity.ts
 /** Min response length (chars) for a lead agent call to count as `sufficient`. */
 const AGENT_QUALITY_MIN = 500;
@@ -170,9 +169,54 @@ function normalizeEvent(id, payload) {
 }
 //#endregion
 //#region src/runtime/paths.ts
-/** Path to a session's track file (under a per-tool base dir). */
-function trackFile(sessionId, baseDir = join(tmpdir(), "fuse-harness")) {
-	return join(baseDir, `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
+/**
+* @module paths
+* Runtime path helpers — per-project, out-of-tree harness state.
+*
+* Default base: ~/.claude/fuse-harness/state/<projectHash>/
+* where projectHash = 8-char MD5 of CLAUDE_PROJECT_DIR (or cwd).
+* Persistent and not world-writable (unlike /tmp), and OUTSIDE the repo so the
+* agent has no "legitimate" reason to write it (the protected-path guard denies
+* it, and the gate verifies freshness from the transcript, not this file).
+*
+* @packageDocumentation
+*/
+/** Resolve the project root from the environment or fall back to cwd. */
+function resolveProjectDir() {
+	return process.env["CLAUDE_PROJECT_DIR"] ?? process.cwd();
+}
+/**
+* Compute a stable 8-char hex hash for a project directory path.
+* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+*
+* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns 8-char lowercase hex string.
+*/
+function projectHash$1(projectDir) {
+	return hashText(projectDir ?? resolveProjectDir());
+}
+/**
+* Canonical base directory for per-project harness state.
+* Resolves to: ~/.claude/fuse-harness/state/<projectHash>/
+*
+* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns Absolute directory path (not yet created on disk).
+*/
+function defaultStateDir(projectDir) {
+	return join(homedir(), ".claude", "fuse-harness", "state", projectHash$1(projectDir));
+}
+/**
+* Absolute path to a session's track JSON file.
+*
+* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+*
+* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+* @param baseDir   - Override the base directory. Omit in production; pass an explicit
+*                    temp path in unit tests to avoid touching $HOME.
+* @returns Absolute path, e.g. ~/.claude/fuse-harness/state/a1b2c3d4/track-abc123.json
+*/
+function trackFile(sessionId, baseDir) {
+	return join(baseDir ?? defaultStateDir(), `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
 }
 //#endregion
 //#region src/runtime/record.ts
@@ -1910,8 +1954,8 @@ function cartographerContext() {
 async function injectApexSubagentContext(cwd, home = homedir()) {
 	const apexDir = join(process.env.CLAUDE_PROJECT_DIR ?? cwd, ".claude", "apex");
 	if (!existsSync(apexDir)) return "";
-	const agentsFile = Bun.file(join(apexDir, "AGENTS.md"));
-	const agents = await agentsFile.exists() ? (await agentsFile.text()).slice(0, 4e3) : "";
+	const agentsPath = join(apexDir, "AGENTS.md");
+	const agents = existsSync(agentsPath) ? readText(agentsPath).slice(0, 4e3) : "";
 	const taskData = await readJsonFile(join(apexDir, "task.json"));
 	return contextResponse("SubagentStart", `## APEX Sub-Agent Instructions
 
@@ -1967,7 +2011,7 @@ function cacheAge(ts, now = Date.now()) {
 /** Full SHA-256 hex checksum of a file's text; "" when unreadable. */
 async function fileChecksum(path) {
 	try {
-		return createHash("sha256").update(await Bun.file(path).text()).digest("hex");
+		return createHash("sha256").update(readText(path)).digest("hex");
 	} catch {
 		return "";
 	}
@@ -2036,9 +2080,8 @@ function parseEntries(raw) {
 async function cacheAnalyticsSave(home = homedir(), now = Date.now()) {
 	const dir = join(cacheBaseDir(home), "analytics");
 	const sessionsFile = join(dir, "sessions.jsonl");
-	const file = Bun.file(sessionsFile);
-	if (!await file.exists()) return;
-	const raw = await file.text();
+	if (!pathExists(sessionsFile)) return;
+	const raw = readText(sessionsFile);
 	if (!raw.trim()) return;
 	const entries = parseEntries(raw);
 	if (entries.length === 0) return;
@@ -2066,8 +2109,7 @@ async function cacheAnalyticsSave(home = homedir(), now = Date.now()) {
 	}
 	await writeJsonFile(join(dir, "summary.json"), merged, true);
 	const cutoff = (/* @__PURE__ */ new Date(now - 30 * 864e5)).toISOString();
-	const kept = entries.filter((e) => e.ts >= cutoff);
-	await Bun.write(sessionsFile, kept.map((e) => JSON.stringify(e)).join("\n") + "\n");
+	writeText(sessionsFile, entries.filter((e) => e.ts >= cutoff).map((e) => JSON.stringify(e)).join("\n") + "\n");
 }
 //#endregion
 //#region src/runtime/lifecycle/aipilot/inject-explore.ts
@@ -2091,17 +2133,11 @@ const CONFIG_FILES = [
 /** Compute a config hash from git-tracked config files; "noconfig" on failure. */
 async function configHash(cwd) {
 	try {
-		const proc = Bun.spawn([
-			"git",
+		const output = spawnCapture("git", [
 			"ls-tree",
 			"HEAD",
 			...CONFIG_FILES
-		], {
-			cwd,
-			stdout: "pipe",
-			stderr: "ignore"
-		});
-		const output = await new Response(proc.stdout).text();
+		], cwd);
 		return output.trim() ? hashText16(output) : "noconfig";
 	} catch {
 		return "noconfig";
@@ -2127,8 +2163,7 @@ async function injectExploreCache(cwd, home = homedir(), now = Date.now()) {
 	const cfgHash = await configHash(projPath);
 	let context = "";
 	const meta = await readJsonFile(metaFile);
-	const snapBunFile = Bun.file(snapFile);
-	const snapshot = await snapBunFile.exists() ? await snapBunFile.text() : "";
+	const snapshot = pathExists(snapFile) ? readText(snapFile) : "";
 	if (meta?.timestamp && snapshot) {
 		const age = cacheAge(meta.timestamp, now);
 		if (age < TTL_SECONDS$2 && meta.config_hash === cfgHash) {
@@ -2164,9 +2199,9 @@ async function buildDocsContext(entries, docsDir, now) {
 		if (age > maxAge) maxAge = age;
 		if (!entry.hash || seen.has(entry.hash)) continue;
 		seen.add(entry.hash);
-		const file = Bun.file(join(docsDir, `${entry.hash}.md`));
-		if (!await file.exists()) continue;
-		const content = await file.text();
+		const docPath = join(docsDir, `${entry.hash}.md`);
+		if (!pathExists(docPath)) continue;
+		const content = readText(docPath);
 		if (!content) continue;
 		ctx += `\n${content}\n`;
 		count++;
@@ -2202,32 +2237,36 @@ async function injectDocCache(cwd, home = homedir(), now = Date.now()) {
 * Ported from the ai-pilot plugin's `cache/source-collector.ts` +
 * the stack detection in `cache/lesson-helpers.ts` (now removed).
 */
-/** Source file glob patterns (monorepo-aware; separate to avoid brace-wildcards). */
-const SRC_PATTERNS = [
-	"src/**/*.{ts,tsx,js,jsx}",
-	"app/**/*.{ts,tsx,js,jsx}",
-	"apps/*/src/**/*.{ts,tsx,js,jsx}",
-	"packages/*/src/**/*.{ts,tsx,js,jsx}"
-];
+/** Source extensions to collect (monorepo-aware, dot-prefixed for matching). */
+const SRC_EXTS = /* @__PURE__ */ new Set([
+	".ts",
+	".tsx",
+	".js",
+	".jsx"
+]);
+/** Roots walked: `src`, `app`, plus each child `src` under `apps/` and `packages/`. */
+const TOP_DIRS = ["src", "app"];
+const NESTED_PARENTS = ["apps", "packages"];
+/** Collect the existing monorepo `src` roots nested under `apps/` and `packages/`. */
+function nestedRoots(projectPath) {
+	const roots = [];
+	for (const parent of NESTED_PARENTS) try {
+		for (const e of readdirSync(join(projectPath, parent), { withFileTypes: true })) if (e.isDirectory()) roots.push(join(projectPath, parent, e.name, "src"));
+	} catch {}
+	return roots;
+}
 /**
 * Scan source files in `projectPath` (monorepo-aware), capped at `maxFiles`.
+* Node+Bun portable: walks `node:fs` recursively (replaces the Bun `Glob`).
 * @param projectPath - Absolute project root.
 * @param maxFiles - Max files to collect (default 200).
-* @returns Absolute paths matching the source patterns.
+* @returns Absolute paths matching the source extensions.
 */
 async function scanSourceFiles(projectPath, maxFiles = 200) {
 	const files = [];
-	for (const pattern of SRC_PATTERNS) {
-		try {
-			for await (const p of new Glob(pattern).scan({
-				cwd: projectPath,
-				absolute: true
-			})) {
-				if (p.includes("node_modules")) continue;
-				files.push(p);
-				if (files.length >= maxFiles) break;
-			}
-		} catch {}
+	const roots = [...TOP_DIRS.map((d) => join(projectPath, d)), ...nestedRoots(projectPath)];
+	for (const root of roots) {
+		collectFiles(root, SRC_EXTS, files, maxFiles);
 		if (files.length >= maxFiles) break;
 	}
 	return files;
@@ -2455,7 +2494,7 @@ function projectRootFromPaths(filePaths) {
 }
 /** Extract all absolute file paths from tool_use entries in a JSONL transcript. */
 async function transcriptFilePaths(transcriptPath) {
-	const text = await Bun.file(transcriptPath).text();
+	const text = readText(transcriptPath);
 	const paths = /* @__PURE__ */ new Set();
 	for (const line of text.split("\n").filter(Boolean)) try {
 		const content = JSON.parse(line)?.message?.content;
@@ -2470,7 +2509,7 @@ async function transcriptFilePaths(transcriptPath) {
 }
 /** Extract deduplicated Edit tool_use entries (keyed by basename) from a transcript. */
 async function transcriptEdits(transcriptPath) {
-	const text = await Bun.file(transcriptPath).text();
+	const text = readText(transcriptPath);
 	const edits = [];
 	for (const line of text.split("\n").filter(Boolean)) try {
 		const content = JSON.parse(line)?.message?.content;
@@ -2487,7 +2526,7 @@ async function transcriptEdits(transcriptPath) {
 }
 /** Extract the last assistant text report (first 500 lines) from a transcript. */
 async function transcriptReport(transcriptPath) {
-	const text = await Bun.file(transcriptPath).text();
+	const text = readText(transcriptPath);
 	let lastReport = "";
 	for (const line of text.split("\n").filter(Boolean)) try {
 		const entry = JSON.parse(line);
@@ -2515,7 +2554,7 @@ const RETRY_DELAYS = [
 ];
 /** Extract the longest assistant synthesis + queried library ids from a transcript. */
 async function extractSynthesis(path) {
-	const lines = (await Bun.file(path).text()).split("\n").filter(Boolean);
+	const lines = readText(path).split("\n").filter(Boolean);
 	const libraries = [];
 	let synthesis = "";
 	for (const line of lines) try {
@@ -2543,14 +2582,14 @@ async function extractSynthesis(path) {
 * @param home - Home dir (defaults to `~`).
 */
 async function cacheDocFromTranscript(transcript, cwd, home = homedir()) {
-	if (!transcript || !await Bun.file(transcript).exists()) return;
+	if (!transcript || !pathExists(transcript)) return;
 	const projPath = projectRootFromPaths(await transcriptFilePaths(transcript)) ?? process.env.CLAUDE_PROJECT_DIR ?? cwd;
 	const cacheDir = cacheDirFor("doc", projPath, home);
 	const docsDir = join(cacheDir, "docs");
 	let result = await extractSynthesis(transcript);
 	for (const delay of RETRY_DELAYS) {
 		if (result.text.length >= MIN_TEXT_SIZE && result.libraries.length > 0) break;
-		await Bun.sleep(delay);
+		await sleep(delay);
 		result = await extractSynthesis(transcript);
 	}
 	const { text, libraries } = result;
@@ -2564,7 +2603,7 @@ async function cacheDocFromTranscript(transcript, cwd, home = homedir()) {
 	const content = text.slice(0, MAX_DOC_SIZE);
 	const topic = libraries.join(", ");
 	const docHash = hashText16(topic);
-	await Bun.write(join(docsDir, `${docHash}.md`), content);
+	writeText(join(docsDir, `${docHash}.md`), content);
 	const sizeKb = Math.floor(content.length / 1024);
 	for (const lib of libraries) {
 		index.docs = index.docs.filter((d) => d.library !== lib);
@@ -2594,7 +2633,7 @@ async function cacheDocFromTranscript(transcript, cwd, home = homedir()) {
 * @param home - Home dir (defaults to `~`).
 */
 async function cacheSniperLessons(transcript, cwd, home = homedir()) {
-	if (!transcript || !await Bun.file(transcript).exists()) return;
+	if (!transcript || !pathExists(transcript)) return;
 	const edits = await transcriptEdits(transcript);
 	if (edits.length === 0) return;
 	const projectPath = projectRootFromPaths(edits.map((e) => e.file)) ?? process.env.CLAUDE_PROJECT_DIR ?? cwd;
@@ -2633,7 +2672,7 @@ async function cacheSniperLessons(transcript, cwd, home = homedir()) {
 */
 /** Extract linter-related command/output text from a JSONL transcript. */
 async function extractLinterOutput(path) {
-	const text = await Bun.file(path).text();
+	const text = readText(path);
 	const outputs = [];
 	for (const line of text.split("\n").filter(Boolean)) try {
 		const content = JSON.parse(line)?.message?.content;
@@ -2655,7 +2694,7 @@ async function extractLinterOutput(path) {
 * @param home - Home dir (defaults to `~`).
 */
 async function cacheTestResults(transcript, cwd, home = homedir()) {
-	if (!transcript || !await Bun.file(transcript).exists()) return;
+	if (!transcript || !pathExists(transcript)) return;
 	const projectPath = projectRootFromPaths(await transcriptFilePaths(transcript)) ?? process.env.CLAUDE_PROJECT_DIR ?? cwd;
 	const pHash = projectHash(projectPath);
 	const cacheDir = cacheDirFor("tests", projectPath, home);
@@ -2715,7 +2754,7 @@ async function acquireLock(lockDir, timeoutMs = 5e3) {
 			} catch {}
 		};
 	} catch {
-		await Bun.sleep(100);
+		await sleep(100);
 	}
 	return null;
 }
@@ -2781,16 +2820,7 @@ async function taskComplete(file, id) {
 /** True when the project has uncommitted git changes. */
 async function hasGitChanges(cwd) {
 	try {
-		const proc = Bun.spawn([
-			"git",
-			"status",
-			"--porcelain"
-		], {
-			cwd,
-			stdout: "pipe",
-			stderr: "ignore"
-		});
-		return (await new Response(proc.stdout).text()).trim().length > 0;
+		return spawnCapture("git", ["status", "--porcelain"], cwd).trim().length > 0;
 	} catch {
 		return false;
 	}
@@ -3250,6 +3280,90 @@ function postEditContext(scope, event, now) {
 	return trackSessionChanges(event.sessionId, event.filePath, void 0, now) || postEditTypescript(event.filePath);
 }
 //#endregion
+//#region src/runtime/gate-helpers.ts
+/**
+* Code-only line count of the existing on-disk file (undefined if
+* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) so a
+* partial Edit judges the full file by the SAME metric as the incoming snippet —
+* a raw `split("\n").length` would over-count JSDoc/blank lines (and add a
+* trailing-newline off-by-one), falsely blocking well-documented files.
+* @param path - Absolute path of the file being edited (or undefined).
+* @returns Code-only line count, or undefined when the file is absent/unreadable.
+*/
+function existingLineCount(path) {
+	if (!path) return void 0;
+	try {
+		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
+	} catch {
+		return;
+	}
+}
+//#endregion
+//#region src/freshness/agent-evidence.ts
+/**
+* Platform-authored transcript evidence for APEX agent freshness.
+* Parses the Claude Code session JSONL transcript to find genuine Task
+* tool_use entries — forging this requires writing into the transcript file
+* which the Claude Code platform controls, unlike the self-recorded track.
+*/
+/** Parse a raw `timestamp` field to epoch ms; `undefined` when absent or invalid. */
+function parseTs(raw) {
+	if (raw === void 0) return void 0;
+	if (typeof raw === "number") return raw;
+	const ms = Date.parse(raw);
+	return Number.isFinite(ms) ? ms : void 0;
+}
+/**
+* Return `true` ONLY when, for EVERY name in `names`, the Claude Code
+* transcript at `transcriptPath` contains a genuine `tool_use` of the `Task`
+* tool whose `subagent_type` (or `name`) input field matches, with the entry
+* timestamp within `windowMs` of `now`.
+*
+* **Timestamp note:** when a transcript entry carries no `timestamp` field it
+* is counted as within-window (we cannot prove staleness). This is
+* intentionally lenient to stay robust across transcript-format evolution; the
+* tamper-resistance guarantee derives from the platform authoring the file —
+* not from the timestamp alone.
+*
+* @param transcriptPath - Absolute path to the session `.jsonl` transcript
+*   (hook payload field: `transcript_path`). Returns `false` when `undefined`.
+* @param names - Required agent `subagent_type` values — ALL must appear.
+* @param windowMs - Freshness window in milliseconds.
+* @param now - Current epoch ms (pass `Date.now()` at the call-site).
+* @returns `true` when ALL agents have real, within-window transcript evidence.
+*/
+function agentsRanFromTranscript(transcriptPath, names, windowMs, now) {
+	if (!transcriptPath || names.length === 0) return false;
+	let text;
+	try {
+		text = readText(transcriptPath);
+	} catch {
+		return false;
+	}
+	const cutoff = now - windowMs;
+	const found = /* @__PURE__ */ new Set();
+	for (const line of text.split("\n")) {
+		if (!line.trim()) continue;
+		let entry;
+		try {
+			entry = JSON.parse(line);
+		} catch {
+			continue;
+		}
+		const ts = parseTs(entry.timestamp);
+		if (ts !== void 0 && ts <= cutoff) continue;
+		const content = entry.message?.content;
+		if (!Array.isArray(content)) continue;
+		for (const block of content) {
+			if (block?.type !== "tool_use" || block.name !== "Task") continue;
+			const agent = block.input?.subagent_type ?? block.input?.name;
+			if (typeof agent === "string" && names.includes(agent)) found.add(agent);
+		}
+		if (found.size === names.length) return true;
+	}
+	return names.every((n) => found.has(n));
+}
+//#endregion
 //#region src/runtime/dry-patterns.ts
 /** Short identifiers never worth a duplication check (control flow, tiny names). */
 const DRY_KEYWORDS = /* @__PURE__ */ new Set([
@@ -3585,22 +3699,6 @@ const DEFAULT_WINDOW_MS = 12e4;
 /** Trivial edits allowed within the window before the full APEX gates apply. */
 const TRIVIAL_BUDGET = 4;
 /**
-* Code-only line count of the existing on-disk file (undefined if
-* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) to
-* mirror the Python `count_code_lines(get_full_file_content(...))`, so a partial
-* Edit judges the full file by the SAME metric as the incoming snippet — a raw
-* `split("\n").length` would over-count JSDoc/blank lines (and add a
-* trailing-newline off-by-one), falsely blocking well-documented files.
-*/
-function existingLineCount(path) {
-	if (!path) return void 0;
-	try {
-		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
-	} catch {
-		return;
-	}
-}
-/**
 * Full gate: the stateless guards (file-size, git, security...) first, then a
 * trivial-edit fast path, then the stateful APEX gates fed from the session
 * track. Returns the first blocking prompt, or null to allow.
@@ -3635,6 +3733,7 @@ async function gate(input) {
 		await saveTrack(input.trackFile, recordTrivialEdit(track, input.now, window, input.now));
 		return null;
 	}
+	const freshnessFor = (names) => input.transcriptPath ? agentsRanFromTranscript(input.transcriptPath, names, window, input.now) : agentsFresh(track, names, window, input.now);
 	const ctx = {
 		sessionId: input.sessionId,
 		framework: input.framework,
@@ -3643,9 +3742,9 @@ async function gate(input) {
 		authorizations: track.authorizations,
 		refs: input.refs,
 		refsRead: track.refsRead,
-		agentsFresh: agentsFresh(track, [...REQUIRED_AGENTS], window, input.now),
+		agentsFresh: freshnessFor([...REQUIRED_AGENTS]),
 		brainstormRequired: track.brainstormRequired,
-		brainstormFresh: agentsFresh(track, ["brainstorming"], window, input.now)
+		brainstormFresh: freshnessFor(["brainstorming"])
 	};
 	try {
 		const apex = evaluateApex(ctx);
@@ -3708,7 +3807,8 @@ async function handlePre(ctx) {
 		agentType: event.agentType,
 		windowMs: opts.windowMs,
 		now: opts.now,
-		trackFile: file
+		trackFile: file,
+		transcriptPath: typeof payload.transcript_path === "string" ? payload.transcript_path : void 0
 	});
 	return prompt ? {
 		stdout: respond(id, prompt),
@@ -3733,7 +3833,7 @@ function rawEventName(payload) {
 async function handleHook(id, payload, opts) {
 	const event = normalizeEvent(id, payload);
 	const layout = projectLayout(opts.cwd);
-	const file = trackFile(event.sessionId, layout.trackDir);
+	const file = trackFile(event.sessionId, defaultStateDir(opts.cwd));
 	const mcpDir = layout.cacheDir;
 	const framework = detectFramework(event.filePath ?? "", event.content ?? "");
 	if (designLifecycle(payload, mcpDir, opts.cwd, String(opts.now), opts.now)) return {
@@ -3803,4 +3903,4 @@ async function handleHook(id, payload, opts) {
 	});
 }
 //#endregion
-export { detectSolidProfile as $, dispatchLessons as A, activityFor as At, mergeLines as B, securityStateDir as C, trackFile as Ct, dispatchLifecycle as D, mcpPostStore as Dt, trackEnrichment as E, isMcpTool as Et, writePluginMap as F, trackSessionChanges as G, getFileDesc as H, generateProjectMap as I, saveApexState as J, validateRulesLoaded as K, isProject as L, lessonsStateFileFor as M, cartoSessionStart as N, aipilotPostToolUse as O, mcpPreIntercept as Ot, generateEcosystemMap as P, subagentCacheContext as Q, writeTree as R, saveSecurityState as S, recordActivity as St, todayUtc as T, MCP_TTL_MS as Tt, listChildren as U, countFiles as V, postEditTypescript as W, validateTeammateOutput as X, logToolFailure as Y, trackAgentMemory as Z, trackWatchResearch as _, sessionStatePath as _t, TRIVIAL_BUDGET as a, pruneEmptyDirs as at, isoUtc as b, taskContext as bt, detectDuplication as c, trimLogFile as ct, lifecycleStdout as d, projectContext as dt, solidDetectStart as et, postEditContext as f, claudeHome as ft, postTrackingSideEffects as g, saveSessionState as gt, securityAdvisory as h, sanitizeSessionId as ht, REQUIRED_AGENTS as i, sessionStartCore as it, lessonsFileFor as j, dispatchAipilot as k, queryOf as kt, dryGate as l, devContext as lt, seoPostToolUseResponse as m, loadSessionState as mt, handlePre as n, readRules as nt, gate as o, purgeTtlTree as ot, seoPostToolUse as p, fusengineCache as pt, cleanupSession as q, DEFAULT_WINDOW_MS as r, runSessionStartCleanups as rt, preCommitGate as s, removeOldFiles as st, handleHook as t, injectRules as tt, extractSymbols as u, gitContext as ut, trackMcpResearch as v, sessionsDir as vt, securityStatePath as w, normalizeEvent as wt, loadSecurityState as x, respond as xt, trackSkillRead as y, promptSubmitContext as yt, loadEnriched as z };
+export { detectSolidProfile as $, dispatchLessons as A, mcpPreIntercept as At, mergeLines as B, securityStateDir as C, defaultStateDir as Ct, dispatchLifecycle as D, MCP_TTL_MS as Dt, trackEnrichment as E, normalizeEvent as Et, writePluginMap as F, trackSessionChanges as G, getFileDesc as H, generateProjectMap as I, saveApexState as J, validateRulesLoaded as K, isProject as L, lessonsStateFileFor as M, activityFor as Mt, cartoSessionStart as N, aipilotPostToolUse as O, isMcpTool as Ot, generateEcosystemMap as P, subagentCacheContext as Q, writeTree as R, saveSecurityState as S, recordActivity as St, todayUtc as T, trackFile as Tt, listChildren as U, countFiles as V, postEditTypescript as W, validateTeammateOutput as X, logToolFailure as Y, trackAgentMemory as Z, trackWatchResearch as _, sessionStatePath as _t, TRIVIAL_BUDGET as a, pruneEmptyDirs as at, isoUtc as b, taskContext as bt, detectDuplication as c, trimLogFile as ct, lifecycleStdout as d, projectContext as dt, solidDetectStart as et, postEditContext as f, claudeHome as ft, postTrackingSideEffects as g, saveSessionState as gt, securityAdvisory as h, sanitizeSessionId as ht, REQUIRED_AGENTS as i, sessionStartCore as it, lessonsFileFor as j, queryOf as jt, dispatchAipilot as k, mcpPostStore as kt, dryGate as l, devContext as lt, seoPostToolUseResponse as m, loadSessionState as mt, handlePre as n, readRules as nt, gate as o, purgeTtlTree as ot, seoPostToolUse as p, fusengineCache as pt, cleanupSession as q, DEFAULT_WINDOW_MS as r, runSessionStartCleanups as rt, preCommitGate as s, removeOldFiles as st, handleHook as t, injectRules as tt, extractSymbols as u, gitContext as ut, trackMcpResearch as v, sessionsDir as vt, securityStatePath as w, projectHash$1 as wt, loadSecurityState as x, respond as xt, trackSkillRead as y, promptSubmitContext as yt, loadEnriched as z };

package/dist/{index-DmbOUJK8.d.mts → index-QzK2dv0V.d.mts}

@@ -170,9 +170,19 @@ declare const ASK_PATTERNS: RegExp[];
 declare function securityGuard(ctx: GuardContext): Prompt | null;
 //#endregion
 //#region src/policy/guards/protected-path.d.ts
-/** Path fragments that mark a location as internal/generated state (off-limits to Write/Edit). */
+/** Path fragments that mark a location as internal/generated state. */
 declare const PROTECTED_FRAGMENTS: readonly string[];
-/** Blocks direct edits to internal/generated state directories. */
+/**
+* Blocks direct edits to internal/generated state directories.
+*
+* Covers:
+*  - Write / Edit tool calls whose `filePath` targets a protected fragment.
+*  - Bash commands that both reference a protected fragment *and* contain a
+*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*
+* @param ctx - The guard context (tool, filePath, command).
+* @returns A blocking {@link Prompt}, or null to allow.
+*/
 declare function protectedPathGuard(ctx: GuardContext): Prompt | null;
 //#endregion
 //#region src/policy/guards/bash-write.d.ts

package/dist/index.d.mts

@@ -5,7 +5,7 @@ import { a as detectHarness, i as HarnessVia, n as HarnessInfo, o as detectMode,
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-CG1nuf-c.mjs";
 import { t as incrementTrivialEditCounter } from "./index-BOBXQ91y.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-BEMumjOw.mjs";
-import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "./index-DmbOUJK8.mjs";
+import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "./index-QzK2dv0V.mjs";
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "./types-CY5qT2X1.mjs";
 import { a as ReminderState, c as readState, d as throttleMs, i as registryFile, l as setStateField, n as addRoot, o as lessonsFileFor, r as readRoots, s as nowStamp, t as ensureMemoryGitignore, u as stateFileFor } from "./index-DLYhervv.mjs";
 import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "./index-DL8MxjuP.mjs";

package/dist/index.mjs

@@ -4,16 +4,16 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-C8Nxxyn_.mjs";
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-CccewDwk.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-DLrWtaDR.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-zyxeVZPB.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-D8cVrI-s.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-BkoEbdec.mjs";
 import { n as jaccardSimilar, r as queryHash, t as compactMarkdown } from "./cache-C9z9LclL.mjs";
 import { a as extractText, i as mcpCacheKey, n as cachePath, o as loadIndex, r as cacheStore, s as summarizeIndex, t as cacheLookup } from "./store-PrNPm6So.mjs";
-import { t as incrementTrivialEditCounter } from "./freshness-otdUpuvP.mjs";
+import { t as incrementTrivialEditCounter } from "./freshness-43gxYpiX.mjs";
 import { n as toRefMeta, t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-ByhLeKyD.mjs";
+import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-BthKK4Jj.mjs";
 import { a as formatPath, c as colors, d as GRADIENT_BLOCKS, f as PROGRESS_BAR_DEFAULTS, i as formatCost, l as progressiveColor, m as TIME_INTERVALS, n as generateProgressBar, o as formatTimeLeft, p as PROGRESS_CHARS, r as formatBasename, s as formatTokens, t as generateGradientBar, u as COLOR_THRESHOLDS } from "./statusline-D87eUNXl.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, COLOR_THRESHOLDS, CRITICAL_PATTERNS, DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GRADIENT_BLOCKS, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_LINES_ENV_KEY, MAX_TOKENS, PHP_DECL_RE, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, STATE_GITIGNORE, STATE_ROOT, SWIFT_PROTO_RE, SYSTEM_INSTALL, TIME_INTERVALS, TS_DECL_RE, TTL_ENV_KEY, acquireLock, addRoot, apexStateDir, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, cacheLookup, cachePath, cacheStore, capVerbosity, clearUserGuards, colors, compactJson, compactMarkdown, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectHarness, detectMode, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, ensureMemoryGitignore, ensureStateDir, evaluate, evaluateApex, evaluateFileSize, extractText, firstComment, firstHeading, formatBasename, formatCost, formatDocDeny, formatDocSatisfactionStatus, formatPath, formatPrompt, formatTimeLeft, formatTokens, frameworkSolidGate, freshnessGate, generateGradientBar, generateProgressBar, globToRe, incrementTrivialEditCounter, installGuard, interfaceSeparationGuard, isApexCommand, isCodeFile, isDocConsulted, isHtmlLike, jaccardSimilar, lessonsFileFor, loadApexTaskState, loadIndex, loadRefs, loadState, matchPatterns, mcpCacheKey, missingSeoElements, modeFor, nowStamp, parseBodyDesc, parseEnrichment, parseEntry, parseEnvInt, parseField, parseFrontmatter, progressiveColor, projectLayout, projectRoot, projectRootOrNull, protectedPathGuard, queryHash, readRoots, readState, registerGuard, registryFile, requiredArchSkill, resolveMaxLines, resolveSessions, resolveTtlSec, routeReferences, runGuards, saveState, scoreReferences, securityGuard, setStateField, skillTriggerGate, solidReadGate, splitTarget, stateFileFor, stateFilePath, summarizeIndex, taskComplete, taskCreate, taskStart, throttleMs, toRefMeta, ttlLabel, walkUpFor };

package/dist/init/index.mjs

@@ -1,2 +1,2 @@
-import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-D91N4ul1.mjs";
+import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-Do2JltgU.mjs";
 export { claudeInit, clineInit, codexInit, cursorInit, geminiInit, initFor, writeInitFile };

package/dist/{json-io-CAn72gI4.mjs → json-io-CvSumjtz.mjs}

@@ -1,7 +1,7 @@
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { dirname } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { mkdir } from "node:fs/promises";
 //#region src/util/json-io.ts
 /** Atomically write `data` to `path` (temp + rename, 0o600). Cross-FS safe on macOS/Linux. */
@@ -36,5 +36,9 @@ async function readJsonFile(path) {
 async function writeJsonFile(path, data, compact = false) {
 	atomicWrite(path, compact ? compactJson(data) : JSON.stringify(data, null, 2));
 }
+/** 8-char MD5 of text (cache key; non-cryptographic). Portable Node+Bun. */
+function hashText(text) {
+	return createHash("md5").update(text).digest("hex").slice(0, 8);
+}
 //#endregion
-export { writeJsonFile as i, ensureDir as n, readJsonFile as r, atomicWrite as t };
+export { writeJsonFile as a, readJsonFile as i, ensureDir as n, hashText as r, atomicWrite as t };

package/dist/policy/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "../index-DmbOUJK8.mjs";
+import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "../index-QzK2dv0V.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, ApexContext, ApexGate, ApexTaskState, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, Guard, GuardContext, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, ModularArchitecture, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, PolicyContext, PolicyResult, ProjectType, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, TreeEntry, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/policy/index.mjs

@@ -1,4 +1,4 @@
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-CccewDwk.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-DLrWtaDR.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-zyxeVZPB.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/{run-CQbtlAKa.mjs → run-CUL70W0k.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts