@fusengine/harness 0.1.32 → 0.1.34

package/dist/{run-D91N4ul1.mjs → run-Do2JltgU.mjs}

@@ -11,7 +11,7 @@ function claudeInit(command) {
 		path: ".claude/settings.json",
 		content: json({ hooks: {
 			PreToolUse: [{
-				matcher: "Write|Edit",
+				matcher: "Write|Edit|Bash",
 				hooks: [{
 					type: "command",
 					command
@@ -113,7 +113,7 @@ const RUNNERS = {
 * Build the wiring file(s) for a harness, or null when it has no hook
 * integration (cli-mode harnesses use `harness check` in a pre-commit step).
 */
-function initFor(id, command = `npx harness hook ${id}`) {
+function initFor(id, command = `npx -y @fusengine/harness hook ${id}`) {
 	const make = RUNNERS[id];
 	if (!make) return null;
 	return [...make(command), {

package/dist/runtime/index.d.mts

@@ -3,7 +3,32 @@ import { t as RefMeta } from "../types-CY5qT2X1.mjs";
 import { t as AgentQuality } from "../session-state-DxNkIBZ2.mjs";
 
 //#region src/runtime/paths.d.ts
-/** Path to a session's track file (under a per-tool base dir). */
+/**
+* Compute a stable 8-char hex hash for a project directory path.
+* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+*
+* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns 8-char lowercase hex string.
+*/
+declare function projectHash(projectDir?: string): string;
+/**
+* Canonical base directory for per-project harness state.
+* Resolves to: ~/.claude/fuse-harness/state/<projectHash>/
+*
+* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns Absolute directory path (not yet created on disk).
+*/
+declare function defaultStateDir(projectDir?: string): string;
+/**
+* Absolute path to a session's track JSON file.
+*
+* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+*
+* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+* @param baseDir   - Override the base directory. Omit in production; pass an explicit
+*                    temp path in unit tests to avoid touching $HOME.
+* @returns Absolute path, e.g. ~/.claude/fuse-harness/state/a1b2c3d4/track-abc123.json
+*/
 declare function trackFile(sessionId: string, baseDir?: string): string;
 //#endregion
 //#region src/runtime/storage.d.ts
@@ -69,6 +94,8 @@ interface GateInput {
   windowMs?: number;
   isReplaceAll?: boolean;
   agentType?: string;
+  /** Absolute path to the session transcript (Claude `transcript_path`) for evidence-based freshness. */
+  transcriptPath?: string;
 }
 //#endregion
 //#region src/runtime/gate.d.ts
@@ -678,4 +705,4 @@ interface PreContext {
 */
 declare function handlePre(ctx: PreContext): Promise<HandleOutcome>;
 //#endregion
-export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { $ as detectSolidProfile, A as dispatchLessons, At as activityFor, B as mergeLines, C as securityStateDir, Ct as trackFile, D as dispatchLifecycle, Dt as mcpPostStore, E as trackEnrichment, Et as isMcpTool, F as writePluginMap, G as trackSessionChanges, H as getFileDesc, I as generateProjectMap, J as saveApexState, K as validateRulesLoaded, L as isProject, M as lessonsStateFileFor, N as cartoSessionStart, O as aipilotPostToolUse, Ot as mcpPreIntercept, P as generateEcosystemMap, Q as subagentCacheContext, R as writeTree, S as saveSecurityState, St as recordActivity, T as todayUtc, Tt as MCP_TTL_MS, U as listChildren, V as countFiles, W as postEditTypescript, X as validateTeammateOutput, Y as logToolFailure, Z as trackAgentMemory, _ as trackWatchResearch, _t as sessionStatePath, a as TRIVIAL_BUDGET, at as pruneEmptyDirs, b as isoUtc, bt as taskContext, c as detectDuplication, ct as trimLogFile, d as lifecycleStdout, dt as projectContext, et as solidDetectStart, f as postEditContext, ft as claudeHome, g as postTrackingSideEffects, gt as saveSessionState, h as securityAdvisory, ht as sanitizeSessionId, i as REQUIRED_AGENTS, it as sessionStartCore, j as lessonsFileFor, k as dispatchAipilot, kt as queryOf, l as dryGate, lt as devContext, m as seoPostToolUseResponse, mt as loadSessionState, n as handlePre, nt as readRules, o as gate, ot as purgeTtlTree, p as seoPostToolUse, pt as fusengineCache, q as cleanupSession, r as DEFAULT_WINDOW_MS, rt as runSessionStartCleanups, s as preCommitGate, st as removeOldFiles, t as handleHook, tt as injectRules, u as extractSymbols, ut as gitContext, v as trackMcpResearch, vt as sessionsDir, w as securityStatePath, wt as normalizeEvent, x as loadSecurityState, xt as respond, y as trackSkillRead, yt as promptSubmitContext, z as loadEnriched } from "../handle-DJqHZcml.mjs";
+import { $ as detectSolidProfile, A as dispatchLessons, At as mcpPreIntercept, B as mergeLines, C as securityStateDir, Ct as defaultStateDir, D as dispatchLifecycle, Dt as MCP_TTL_MS, E as trackEnrichment, Et as normalizeEvent, F as writePluginMap, G as trackSessionChanges, H as getFileDesc, I as generateProjectMap, J as saveApexState, K as validateRulesLoaded, L as isProject, M as lessonsStateFileFor, Mt as activityFor, N as cartoSessionStart, O as aipilotPostToolUse, Ot as isMcpTool, P as generateEcosystemMap, Q as subagentCacheContext, R as writeTree, S as saveSecurityState, St as recordActivity, T as todayUtc, Tt as trackFile, U as listChildren, V as countFiles, W as postEditTypescript, X as validateTeammateOutput, Y as logToolFailure, Z as trackAgentMemory, _ as trackWatchResearch, _t as sessionStatePath, a as TRIVIAL_BUDGET, at as pruneEmptyDirs, b as isoUtc, bt as taskContext, c as detectDuplication, ct as trimLogFile, d as lifecycleStdout, dt as projectContext, et as solidDetectStart, f as postEditContext, ft as claudeHome, g as postTrackingSideEffects, gt as saveSessionState, h as securityAdvisory, ht as sanitizeSessionId, i as REQUIRED_AGENTS, it as sessionStartCore, j as lessonsFileFor, jt as queryOf, k as dispatchAipilot, kt as mcpPostStore, l as dryGate, lt as devContext, m as seoPostToolUseResponse, mt as loadSessionState, n as handlePre, nt as readRules, o as gate, ot as purgeTtlTree, p as seoPostToolUse, pt as fusengineCache, q as cleanupSession, r as DEFAULT_WINDOW_MS, rt as runSessionStartCleanups, s as preCommitGate, st as removeOldFiles, t as handleHook, tt as injectRules, u as extractSymbols, ut as gitContext, v as trackMcpResearch, vt as sessionsDir, w as securityStatePath, wt as projectHash, x as loadSecurityState, xt as respond, y as trackSkillRead, yt as promptSubmitContext, z as loadEnriched } from "../handle-DMHjTY1E.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,
@@ -9,4 +9,4 @@ function harnessStateDir(root) {
 	return projectLayout(root).stateDir;
 }
 //#endregion
-export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/state/index.mjs

@@ -1,2 +1,2 @@
-import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "../state-ByhLeKyD.mjs";
+import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "../state-BthKK4Jj.mjs";
 export { acquireLock, apexStateDir, ensureStateDir, loadState, saveState, stateFilePath, taskComplete, taskCreate, taskStart };

package/dist/{state-ByhLeKyD.mjs → state-BthKK4Jj.mjs}

@@ -1,4 +1,4 @@
-import { i as writeJsonFile, n as ensureDir, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, n as ensureDir } from "./json-io-CvSumjtz.mjs";
 import { mkdir, rmdir } from "node:fs/promises";
 //#region src/state/lock.ts
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));

package/dist/store-7j02oGjt.mjs

@@ -0,0 +1,184 @@
+import { a as writeJsonFile, i as readJsonFile } from "./json-io-CvSumjtz.mjs";
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { createHmac, randomBytes } from "node:crypto";
+//#region src/tracking/session-state.ts
+/** A fresh, empty track. */
+function emptyTrack() {
+	return {
+		authorizations: {},
+		refsRead: [],
+		agents: [],
+		trivialEdits: []
+	};
+}
+/** Record a doc consultation (Context7/Exa) for a framework in this session. Immutable. */
+function recordDoc(track, framework, sessionId, source) {
+	const prev = track.authorizations[framework] ?? {};
+	const sessions = new Set(prev.doc_sessions ?? []);
+	sessions.add(sessionId);
+	const sources = new Set(prev.sources ?? (prev.source ? [prev.source] : []));
+	sources.add(source);
+	return {
+		...track,
+		authorizations: {
+			...track.authorizations,
+			[framework]: {
+				...prev,
+				doc_sessions: [...sessions],
+				sources: [...sources]
+			}
+		}
+	};
+}
+/** Record that a SOLID reference file was read (deduped). Immutable. */
+function recordRefRead(track, path) {
+	return track.refsRead.includes(path) ? track : {
+		...track,
+		refsRead: [...track.refsRead, path]
+	};
+}
+/** Record an agent/tool call with a timestamp + optional quality. Immutable. */
+function recordAgent(track, name, ts, quality) {
+	const entry = quality ? {
+		name,
+		ts,
+		quality
+	} : {
+		name,
+		ts
+	};
+	return {
+		...track,
+		agents: [...track.agents, entry]
+	};
+}
+/** True when ALL of `names` ran within `windowMs` with non-insufficient quality. */
+function agentsFresh(track, names, windowMs, now) {
+	const cutoff = now - windowMs;
+	return names.every((n) => track.agents.some((a) => a.name === n && a.ts > cutoff && a.quality !== "insufficient"));
+}
+/** Record a trivial edit timestamp (sliding window; old evicted). Immutable. */
+function recordTrivialEdit(track, ts, windowMs, now) {
+	const cutoff = now - windowMs;
+	return {
+		...track,
+		trivialEdits: [...(track.trivialEdits ?? []).filter((t) => t > cutoff), ts]
+	};
+}
+/** Count trivial edits within the sliding window. */
+function trivialCount(track, windowMs, now) {
+	const cutoff = now - windowMs;
+	return (track.trivialEdits ?? []).filter((t) => t > cutoff).length;
+}
+/** Set the brainstorm-required flag (from creation-intent detection). Immutable. */
+function recordBrainstormRequired(track, required) {
+	return {
+		...track,
+		brainstormRequired: required
+	};
+}
+//#endregion
+//#region src/tracking/integrity.ts
+/**
+* @module integrity
+* HMAC-SHA256 tamper-evident wrapping for {@link SessionTrack}.
+*
+* Failure policy: ONLY a MAC mismatch causes fail-closed (returns null).
+* The nonce is included in the signed payload and written to disk for advisory
+* diagnostics, but is NOT checked during verification — concurrent hook
+* invocations (PostToolUse, SubagentStop, …) legitimately load the same
+* envelope after the nonce watermark advances; a monotonic check would trigger
+* spurious fail-closed behaviour mid-session.
+*
+* The machine key is readable by the same agent process, so this deters naive
+* out-of-band tampering — not a determined re-sign. Item B (transcript-grounded
+* freshness) is the primary guarantee.
+* @packageDocumentation
+*/
+const HARNESS_DIR = join(homedir(), ".claude", "fuse-harness");
+const KEY_PATH = join(HARNESS_DIR, ".key");
+const NONCE_PATH = join(HARNESS_DIR, ".nonce");
+/** Load (or create on first use) the per-machine HMAC key stored at mode 0600. */
+function loadOrCreateKey() {
+	mkdirSync(HARNESS_DIR, { recursive: true });
+	if (!existsSync(KEY_PATH)) {
+		const key = randomBytes(32).toString("hex");
+		writeFileSync(KEY_PATH, key, {
+			encoding: "utf8",
+			mode: 384
+		});
+		return key;
+	}
+	return readFileSync(KEY_PATH, "utf8").trim();
+}
+/**
+* Persist the last-seen nonce for advisory diagnostics (mode 0600).
+* Never read during {@link verifyTrack} — see module JSDoc for rationale.
+*/
+function writeLastNonce(nonce) {
+	mkdirSync(HARNESS_DIR, { recursive: true });
+	writeFileSync(NONCE_PATH, String(nonce), {
+		encoding: "utf8",
+		mode: 384
+	});
+}
+/** Compute HMAC-SHA256 over the canonical message `"${nonce}:${data}"`. */
+function computeMac(key, data, nonce) {
+	return createHmac("sha256", key).update(`${nonce}:${data}`).digest("hex");
+}
+/**
+* Sign a {@link SessionTrack} into a tamper-evident envelope. The nonce
+* (`Date.now()`) is embedded in the MAC to bind the timestamp to the payload.
+*/
+function signTrack(track) {
+	const key = loadOrCreateKey();
+	const data = JSON.stringify(track);
+	const nonce = Date.now();
+	return {
+		data,
+		nonce,
+		mac: computeMac(key, data, nonce)
+	};
+}
+/**
+* Verify a {@link TrackEnvelope}. Returns the parsed {@link SessionTrack} on
+* success, or `null` ONLY on MAC mismatch / parse failure (fail-closed on
+* tampering). The nonce is NOT checked — see module JSDoc.
+*/
+function verifyTrack(envelope) {
+	try {
+		const key = loadOrCreateKey();
+		if (envelope.mac !== computeMac(key, envelope.data, envelope.nonce)) return null;
+		return JSON.parse(envelope.data);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/tracking/store.ts
+/**
+* Load and verify a session track from a signed envelope file.
+*
+* Returns {@link emptyTrack} (fail closed) when the file is absent, corrupt, or
+* fails MAC validation — so the gates re-require real agents rather than trust a
+* forged track. Only a MAC mismatch triggers fail-closed; the nonce is advisory
+* and is never checked during load.
+*/
+async function loadTrack(file) {
+	const envelope = await readJsonFile(file);
+	if (!envelope) return emptyTrack();
+	return verifyTrack(envelope) ?? emptyTrack();
+}
+/**
+* Sign and persist a session track as a tamper-evident envelope, then write the
+* advisory nonce watermark.
+*/
+async function saveTrack(file, track) {
+	const envelope = signTrack(track);
+	await writeJsonFile(file, envelope);
+	writeLastNonce(envelope.nonce);
+}
+//#endregion
+export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };

package/dist/tracking/index.d.mts

@@ -1,9 +1,19 @@
 import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as SessionTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as AgentQuality, u as trivialCount } from "../session-state-DxNkIBZ2.mjs";
 
 //#region src/tracking/store.d.ts
-/** Load a session track from a file (an empty track if absent/corrupt). */
+/**
+* Load and verify a session track from a signed envelope file.
+*
+* Returns {@link emptyTrack} (fail closed) when the file is absent, corrupt, or
+* fails MAC validation — so the gates re-require real agents rather than trust a
+* forged track. Only a MAC mismatch triggers fail-closed; the nonce is advisory
+* and is never checked during load.
+*/
 declare function loadTrack(file: string): Promise<SessionTrack>;
-/** Persist a session track. */
+/**
+* Sign and persist a session track as a tamper-evident envelope, then write the
+* advisory nonce watermark.
+*/
 declare function saveTrack(file: string, track: SessionTrack): Promise<void>;
 //#endregion
 export { AgentQuality, SessionTrack, agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-D-ge2ZPI.mjs";
+import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-7j02oGjt.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/{validate-CccewDwk.mjs → validate-DLrWtaDR.mjs}

@@ -1,5 +1,5 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { k as countLines } from "./evaluate-9ch1K2kt.mjs";
+import { k as countLines } from "./evaluate-zyxeVZPB.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
 import { t as routeReferences } from "./router-D8cVrI-s.mjs";
 import { join } from "node:path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",

package/dist/claude-BWZcrZbS.mjs

@@ -1,66 +0,0 @@
-import { t as evaluate } from "./evaluate-9ch1K2kt.mjs";
-import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-//#region src/adapters/claude/index.ts
-/**
-* Claude Code adapter — the thin Claude-only shim over the portable policy core.
-* Reads the hook stdin payload and emits hookSpecificOutput responses.
-*/
-/** Read & parse the Claude hook payload from stdin (empty object on bad input). */
-async function readClaudeInput() {
-	const text = await Bun.stdin.text();
-	if (!text.trim()) return {};
-	try {
-		const parsed = JSON.parse(text);
-		return typeof parsed === "object" && parsed !== null ? parsed : {};
-	} catch {
-		return {};
-	}
-}
-/** A `deny` hook response for a given event. */
-function denyResponse(event, reason) {
-	return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: event,
-		permissionDecision: "deny",
-		permissionDecisionReason: reason
-	} });
-}
-/** An `additionalContext` injection response. */
-function contextResponse(event, text) {
-	return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: event,
-		additionalContext: text
-	} });
-}
-/**
-* Render a portable {@link Prompt} as a Claude Code hook response:
-* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
-* (interactive confirm), `inform` → `additionalContext`.
-*/
-function toClaudeResponse(event, prompt) {
-	const reason = formatPrompt(prompt);
-	if (prompt.kind === "block") return denyResponse(event, reason);
-	if (prompt.kind === "ask") return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: event,
-		permissionDecision: "ask",
-		permissionDecisionReason: reason
-	} });
-	return contextResponse(event, reason);
-}
-/**
-* Run the bundled policy over a Claude payload and return the native response
-* string (deny/ask/additionalContext), or null to allow.
-*/
-function guard(input) {
-	const result = evaluate({
-		tool: input.tool_name ?? "Write",
-		filePath: input.tool_input?.file_path,
-		content: input.tool_input?.content ?? input.tool_input?.new_string,
-		command: input.tool_input?.command
-	});
-	if (result.decision === "allow" || !result.prompt) return null;
-	return toClaudeResponse(input.hook_event_name ?? "PreToolUse", result.prompt);
-}
-/** @deprecated use {@link guard}. Kept for back-compat. */
-const fileSizeGuard = guard;
-//#endregion
-export { readClaudeInput as a, guard as i, denyResponse as n, toClaudeResponse as o, fileSizeGuard as r, contextResponse as t };

package/dist/store-D-ge2ZPI.mjs

@@ -1,89 +0,0 @@
-import { i as writeJsonFile, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
-//#region src/tracking/session-state.ts
-/** A fresh, empty track. */
-function emptyTrack() {
-	return {
-		authorizations: {},
-		refsRead: [],
-		agents: [],
-		trivialEdits: []
-	};
-}
-/** Record a doc consultation (Context7/Exa) for a framework in this session. Immutable. */
-function recordDoc(track, framework, sessionId, source) {
-	const prev = track.authorizations[framework] ?? {};
-	const sessions = new Set(prev.doc_sessions ?? []);
-	sessions.add(sessionId);
-	const sources = new Set(prev.sources ?? (prev.source ? [prev.source] : []));
-	sources.add(source);
-	return {
-		...track,
-		authorizations: {
-			...track.authorizations,
-			[framework]: {
-				...prev,
-				doc_sessions: [...sessions],
-				sources: [...sources]
-			}
-		}
-	};
-}
-/** Record that a SOLID reference file was read (deduped). Immutable. */
-function recordRefRead(track, path) {
-	return track.refsRead.includes(path) ? track : {
-		...track,
-		refsRead: [...track.refsRead, path]
-	};
-}
-/** Record an agent/tool call with a timestamp + optional quality. Immutable. */
-function recordAgent(track, name, ts, quality) {
-	const entry = quality ? {
-		name,
-		ts,
-		quality
-	} : {
-		name,
-		ts
-	};
-	return {
-		...track,
-		agents: [...track.agents, entry]
-	};
-}
-/** True when ALL of `names` ran within `windowMs` with non-insufficient quality. */
-function agentsFresh(track, names, windowMs, now) {
-	const cutoff = now - windowMs;
-	return names.every((n) => track.agents.some((a) => a.name === n && a.ts > cutoff && a.quality !== "insufficient"));
-}
-/** Record a trivial edit timestamp (sliding window; old evicted). Immutable. */
-function recordTrivialEdit(track, ts, windowMs, now) {
-	const cutoff = now - windowMs;
-	return {
-		...track,
-		trivialEdits: [...(track.trivialEdits ?? []).filter((t) => t > cutoff), ts]
-	};
-}
-/** Count trivial edits within the sliding window. */
-function trivialCount(track, windowMs, now) {
-	const cutoff = now - windowMs;
-	return (track.trivialEdits ?? []).filter((t) => t > cutoff).length;
-}
-/** Set the brainstorm-required flag (from creation-intent detection). Immutable. */
-function recordBrainstormRequired(track, required) {
-	return {
-		...track,
-		brainstormRequired: required
-	};
-}
-//#endregion
-//#region src/tracking/store.ts
-/** Load a session track from a file (an empty track if absent/corrupt). */
-async function loadTrack(file) {
-	return await readJsonFile(file) ?? emptyTrack();
-}
-/** Persist a session track. */
-async function saveTrack(file, track) {
-	await writeJsonFile(file, track);
-}
-//#endregion
-export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };