@fusengine/harness 0.1.33 → 0.1.34

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-BatVYnAf.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-3PqBGt_7.mjs";
 export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-BatVYnAf.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-3PqBGt_7.mjs";
 export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/{claude-BatVYnAf.mjs → claude-3PqBGt_7.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";

package/dist/cli/bin.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CQbtlAKa.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { t as handleHook } from "../handle-Cxgzd4pZ.mjs";
+import { t as handleHook } from "../handle-DMHjTY1E.mjs";
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CQbtlAKa.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/{evaluate-9ch1K2kt.mjs → evaluate-zyxeVZPB.mjs}

@@ -192,24 +192,58 @@ function securityGuard(ctx) {
 }
 //#endregion
 //#region src/policy/guards/protected-path.ts
-/** Path fragments that mark a location as internal/generated state (off-limits to Write/Edit). */
+/** Path fragments that mark a location as internal/generated state. */
 const PROTECTED_FRAGMENTS = [
 	".claude/plugins/marketplaces",
 	".claude/plugins/cache",
 	".claude/logs/00-apex",
 	".claude/fusengine-cache",
-	".git/"
+	".git/",
+	".claude/apex/",
+	"/fuse-harness/",
+	".harness/track",
+	".harness/memory/state"
 ];
-/** Blocks direct edits to internal/generated state directories. */
+/** Standard block response for any protected-path violation. */
+const BLOCK = {
+	kind: "block",
+	title: "Protected path",
+	reason: "This is internal/generated enforcement state — do not edit it directly.",
+	actions: ["Edit the source, not the generated/cache/state copy"]
+};
+/** Returns true if `str` contains any protected fragment. */
+function containsProtected(str) {
+	return PROTECTED_FRAGMENTS.some((f) => str.includes(f));
+}
+/**
+* Returns true if `cmd` contains a recognisable shell write operation.
+*
+* Best-effort: matches `>` / `>>` redirections, `tee`, `cp`, `mv`, `dd`, `sed -i`.
+* Obfuscated shell (base64-decoded payloads, variable indirection, process
+* substitution) can still evade this check — residual risk, documented. The
+* real guarantee against a forged track is the transcript-grounded freshness
+* gate (see `freshness/agent-evidence`), not this guard.
+*/
+function bashHasWriteOp(cmd) {
+	return />/.test(cmd) || /\btee\b/.test(cmd) || /\bcp\b/.test(cmd) || /\bmv\b/.test(cmd) || /\bdd\b/.test(cmd) || /\bsed\s+-[a-zA-Z]*i/.test(cmd);
+}
+/**
+* Blocks direct edits to internal/generated state directories.
+*
+* Covers:
+*  - Write / Edit tool calls whose `filePath` targets a protected fragment.
+*  - Bash commands that both reference a protected fragment *and* contain a
+*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*
+* @param ctx - The guard context (tool, filePath, command).
+* @returns A blocking {@link Prompt}, or null to allow.
+*/
 function protectedPathGuard(ctx) {
 	if ((ctx.tool === "Write" || ctx.tool === "Edit") && ctx.filePath) {
-		const path = ctx.filePath;
-		if (PROTECTED_FRAGMENTS.some((fragment) => path.includes(fragment))) return {
-			kind: "block",
-			title: "Protected path",
-			reason: "This is internal/generated state — do not edit it directly.",
-			actions: ["Edit the source, not the generated/cache copy"]
-		};
+		if (containsProtected(ctx.filePath)) return BLOCK;
+	}
+	if (ctx.tool === "Bash" && ctx.command) {
+		if (containsProtected(ctx.command) && bashHasWriteOp(ctx.command)) return BLOCK;
 	}
 	return null;
 }

package/dist/freshness/index.mjs

@@ -1,3 +1,3 @@
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-Dd_x1-tZ.mjs";
-import { t as incrementTrivialEditCounter } from "../freshness-otdUpuvP.mjs";
+import { t as incrementTrivialEditCounter } from "../freshness-43gxYpiX.mjs";
 export { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/{freshness-otdUpuvP.mjs → freshness-43gxYpiX.mjs}

@@ -1,4 +1,4 @@
-import { i as writeJsonFile, n as ensureDir, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, n as ensureDir } from "./json-io-CvSumjtz.mjs";
 import { dirname } from "node:path";
 //#region src/freshness/trivial-edit-counter.ts
 /**

package/dist/{handle-Cxgzd4pZ.mjs → handle-DMHjTY1E.mjs}

@@ -1,18 +1,18 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
 import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-CccewDwk.mjs";
-import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-DLrWtaDR.mjs";
+import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-BkoEbdec.mjs";
 import { a as extractText, o as loadIndex, r as cacheStore, t as cacheLookup } from "./store-PrNPm6So.mjs";
-import { i as writeJsonFile, r as readJsonFile, t as atomicWrite } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-CvSumjtz.mjs";
 import { t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-D-ge2ZPI.mjs";
-import { c as pathExists, d as spawnCapture, f as writeText, l as readText, n as denyResponse, s as collectFiles, t as contextResponse, u as sleep } from "./claude-BatVYnAf.mjs";
+import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-7j02oGjt.mjs";
+import { c as pathExists, d as spawnCapture, f as writeText, l as readText, n as denyResponse, s as collectFiles, t as contextResponse, u as sleep } from "./claude-3PqBGt_7.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
+import { homedir } from "node:os";
 import { createHash } from "node:crypto";
 import { mkdir, rmdir } from "node:fs/promises";
 import { execFileSync } from "node:child_process";
@@ -169,9 +169,54 @@ function normalizeEvent(id, payload) {
 }
 //#endregion
 //#region src/runtime/paths.ts
-/** Path to a session's track file (under a per-tool base dir). */
-function trackFile(sessionId, baseDir = join(tmpdir(), "fuse-harness")) {
-	return join(baseDir, `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
+/**
+* @module paths
+* Runtime path helpers — per-project, out-of-tree harness state.
+*
+* Default base: ~/.claude/fuse-harness/state/<projectHash>/
+* where projectHash = 8-char MD5 of CLAUDE_PROJECT_DIR (or cwd).
+* Persistent and not world-writable (unlike /tmp), and OUTSIDE the repo so the
+* agent has no "legitimate" reason to write it (the protected-path guard denies
+* it, and the gate verifies freshness from the transcript, not this file).
+*
+* @packageDocumentation
+*/
+/** Resolve the project root from the environment or fall back to cwd. */
+function resolveProjectDir() {
+	return process.env["CLAUDE_PROJECT_DIR"] ?? process.cwd();
+}
+/**
+* Compute a stable 8-char hex hash for a project directory path.
+* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+*
+* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns 8-char lowercase hex string.
+*/
+function projectHash$1(projectDir) {
+	return hashText(projectDir ?? resolveProjectDir());
+}
+/**
+* Canonical base directory for per-project harness state.
+* Resolves to: ~/.claude/fuse-harness/state/<projectHash>/
+*
+* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns Absolute directory path (not yet created on disk).
+*/
+function defaultStateDir(projectDir) {
+	return join(homedir(), ".claude", "fuse-harness", "state", projectHash$1(projectDir));
+}
+/**
+* Absolute path to a session's track JSON file.
+*
+* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+*
+* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+* @param baseDir   - Override the base directory. Omit in production; pass an explicit
+*                    temp path in unit tests to avoid touching $HOME.
+* @returns Absolute path, e.g. ~/.claude/fuse-harness/state/a1b2c3d4/track-abc123.json
+*/
+function trackFile(sessionId, baseDir) {
+	return join(baseDir ?? defaultStateDir(), `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
 }
 //#endregion
 //#region src/runtime/record.ts
@@ -3235,6 +3280,90 @@ function postEditContext(scope, event, now) {
 	return trackSessionChanges(event.sessionId, event.filePath, void 0, now) || postEditTypescript(event.filePath);
 }
 //#endregion
+//#region src/runtime/gate-helpers.ts
+/**
+* Code-only line count of the existing on-disk file (undefined if
+* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) so a
+* partial Edit judges the full file by the SAME metric as the incoming snippet —
+* a raw `split("\n").length` would over-count JSDoc/blank lines (and add a
+* trailing-newline off-by-one), falsely blocking well-documented files.
+* @param path - Absolute path of the file being edited (or undefined).
+* @returns Code-only line count, or undefined when the file is absent/unreadable.
+*/
+function existingLineCount(path) {
+	if (!path) return void 0;
+	try {
+		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
+	} catch {
+		return;
+	}
+}
+//#endregion
+//#region src/freshness/agent-evidence.ts
+/**
+* Platform-authored transcript evidence for APEX agent freshness.
+* Parses the Claude Code session JSONL transcript to find genuine Task
+* tool_use entries — forging this requires writing into the transcript file
+* which the Claude Code platform controls, unlike the self-recorded track.
+*/
+/** Parse a raw `timestamp` field to epoch ms; `undefined` when absent or invalid. */
+function parseTs(raw) {
+	if (raw === void 0) return void 0;
+	if (typeof raw === "number") return raw;
+	const ms = Date.parse(raw);
+	return Number.isFinite(ms) ? ms : void 0;
+}
+/**
+* Return `true` ONLY when, for EVERY name in `names`, the Claude Code
+* transcript at `transcriptPath` contains a genuine `tool_use` of the `Task`
+* tool whose `subagent_type` (or `name`) input field matches, with the entry
+* timestamp within `windowMs` of `now`.
+*
+* **Timestamp note:** when a transcript entry carries no `timestamp` field it
+* is counted as within-window (we cannot prove staleness). This is
+* intentionally lenient to stay robust across transcript-format evolution; the
+* tamper-resistance guarantee derives from the platform authoring the file —
+* not from the timestamp alone.
+*
+* @param transcriptPath - Absolute path to the session `.jsonl` transcript
+*   (hook payload field: `transcript_path`). Returns `false` when `undefined`.
+* @param names - Required agent `subagent_type` values — ALL must appear.
+* @param windowMs - Freshness window in milliseconds.
+* @param now - Current epoch ms (pass `Date.now()` at the call-site).
+* @returns `true` when ALL agents have real, within-window transcript evidence.
+*/
+function agentsRanFromTranscript(transcriptPath, names, windowMs, now) {
+	if (!transcriptPath || names.length === 0) return false;
+	let text;
+	try {
+		text = readText(transcriptPath);
+	} catch {
+		return false;
+	}
+	const cutoff = now - windowMs;
+	const found = /* @__PURE__ */ new Set();
+	for (const line of text.split("\n")) {
+		if (!line.trim()) continue;
+		let entry;
+		try {
+			entry = JSON.parse(line);
+		} catch {
+			continue;
+		}
+		const ts = parseTs(entry.timestamp);
+		if (ts !== void 0 && ts <= cutoff) continue;
+		const content = entry.message?.content;
+		if (!Array.isArray(content)) continue;
+		for (const block of content) {
+			if (block?.type !== "tool_use" || block.name !== "Task") continue;
+			const agent = block.input?.subagent_type ?? block.input?.name;
+			if (typeof agent === "string" && names.includes(agent)) found.add(agent);
+		}
+		if (found.size === names.length) return true;
+	}
+	return names.every((n) => found.has(n));
+}
+//#endregion
 //#region src/runtime/dry-patterns.ts
 /** Short identifiers never worth a duplication check (control flow, tiny names). */
 const DRY_KEYWORDS = /* @__PURE__ */ new Set([
@@ -3570,22 +3699,6 @@ const DEFAULT_WINDOW_MS = 12e4;
 /** Trivial edits allowed within the window before the full APEX gates apply. */
 const TRIVIAL_BUDGET = 4;
 /**
-* Code-only line count of the existing on-disk file (undefined if
-* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) to
-* mirror the Python `count_code_lines(get_full_file_content(...))`, so a partial
-* Edit judges the full file by the SAME metric as the incoming snippet — a raw
-* `split("\n").length` would over-count JSDoc/blank lines (and add a
-* trailing-newline off-by-one), falsely blocking well-documented files.
-*/
-function existingLineCount(path) {
-	if (!path) return void 0;
-	try {
-		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
-	} catch {
-		return;
-	}
-}
-/**
 * Full gate: the stateless guards (file-size, git, security...) first, then a
 * trivial-edit fast path, then the stateful APEX gates fed from the session
 * track. Returns the first blocking prompt, or null to allow.
@@ -3620,6 +3733,7 @@ async function gate(input) {
 		await saveTrack(input.trackFile, recordTrivialEdit(track, input.now, window, input.now));
 		return null;
 	}
+	const freshnessFor = (names) => input.transcriptPath ? agentsRanFromTranscript(input.transcriptPath, names, window, input.now) : agentsFresh(track, names, window, input.now);
 	const ctx = {
 		sessionId: input.sessionId,
 		framework: input.framework,
@@ -3628,9 +3742,9 @@ async function gate(input) {
 		authorizations: track.authorizations,
 		refs: input.refs,
 		refsRead: track.refsRead,
-		agentsFresh: agentsFresh(track, [...REQUIRED_AGENTS], window, input.now),
+		agentsFresh: freshnessFor([...REQUIRED_AGENTS]),
 		brainstormRequired: track.brainstormRequired,
-		brainstormFresh: agentsFresh(track, ["brainstorming"], window, input.now)
+		brainstormFresh: freshnessFor(["brainstorming"])
 	};
 	try {
 		const apex = evaluateApex(ctx);
@@ -3693,7 +3807,8 @@ async function handlePre(ctx) {
 		agentType: event.agentType,
 		windowMs: opts.windowMs,
 		now: opts.now,
-		trackFile: file
+		trackFile: file,
+		transcriptPath: typeof payload.transcript_path === "string" ? payload.transcript_path : void 0
 	});
 	return prompt ? {
 		stdout: respond(id, prompt),
@@ -3718,7 +3833,7 @@ function rawEventName(payload) {
 async function handleHook(id, payload, opts) {
 	const event = normalizeEvent(id, payload);
 	const layout = projectLayout(opts.cwd);
-	const file = trackFile(event.sessionId, layout.trackDir);
+	const file = trackFile(event.sessionId, defaultStateDir(opts.cwd));
 	const mcpDir = layout.cacheDir;
 	const framework = detectFramework(event.filePath ?? "", event.content ?? "");
 	if (designLifecycle(payload, mcpDir, opts.cwd, String(opts.now), opts.now)) return {
@@ -3788,4 +3903,4 @@ async function handleHook(id, payload, opts) {
 	});
 }
 //#endregion
-export { detectSolidProfile as $, dispatchLessons as A, activityFor as At, mergeLines as B, securityStateDir as C, trackFile as Ct, dispatchLifecycle as D, mcpPostStore as Dt, trackEnrichment as E, isMcpTool as Et, writePluginMap as F, trackSessionChanges as G, getFileDesc as H, generateProjectMap as I, saveApexState as J, validateRulesLoaded as K, isProject as L, lessonsStateFileFor as M, cartoSessionStart as N, aipilotPostToolUse as O, mcpPreIntercept as Ot, generateEcosystemMap as P, subagentCacheContext as Q, writeTree as R, saveSecurityState as S, recordActivity as St, todayUtc as T, MCP_TTL_MS as Tt, listChildren as U, countFiles as V, postEditTypescript as W, validateTeammateOutput as X, logToolFailure as Y, trackAgentMemory as Z, trackWatchResearch as _, sessionStatePath as _t, TRIVIAL_BUDGET as a, pruneEmptyDirs as at, isoUtc as b, taskContext as bt, detectDuplication as c, trimLogFile as ct, lifecycleStdout as d, projectContext as dt, solidDetectStart as et, postEditContext as f, claudeHome as ft, postTrackingSideEffects as g, saveSessionState as gt, securityAdvisory as h, sanitizeSessionId as ht, REQUIRED_AGENTS as i, sessionStartCore as it, lessonsFileFor as j, dispatchAipilot as k, queryOf as kt, dryGate as l, devContext as lt, seoPostToolUseResponse as m, loadSessionState as mt, handlePre as n, readRules as nt, gate as o, purgeTtlTree as ot, seoPostToolUse as p, fusengineCache as pt, cleanupSession as q, DEFAULT_WINDOW_MS as r, runSessionStartCleanups as rt, preCommitGate as s, removeOldFiles as st, handleHook as t, injectRules as tt, extractSymbols as u, gitContext as ut, trackMcpResearch as v, sessionsDir as vt, securityStatePath as w, normalizeEvent as wt, loadSecurityState as x, respond as xt, trackSkillRead as y, promptSubmitContext as yt, loadEnriched as z };
+export { detectSolidProfile as $, dispatchLessons as A, mcpPreIntercept as At, mergeLines as B, securityStateDir as C, defaultStateDir as Ct, dispatchLifecycle as D, MCP_TTL_MS as Dt, trackEnrichment as E, normalizeEvent as Et, writePluginMap as F, trackSessionChanges as G, getFileDesc as H, generateProjectMap as I, saveApexState as J, validateRulesLoaded as K, isProject as L, lessonsStateFileFor as M, activityFor as Mt, cartoSessionStart as N, aipilotPostToolUse as O, isMcpTool as Ot, generateEcosystemMap as P, subagentCacheContext as Q, writeTree as R, saveSecurityState as S, recordActivity as St, todayUtc as T, trackFile as Tt, listChildren as U, countFiles as V, postEditTypescript as W, validateTeammateOutput as X, logToolFailure as Y, trackAgentMemory as Z, trackWatchResearch as _, sessionStatePath as _t, TRIVIAL_BUDGET as a, pruneEmptyDirs as at, isoUtc as b, taskContext as bt, detectDuplication as c, trimLogFile as ct, lifecycleStdout as d, projectContext as dt, solidDetectStart as et, postEditContext as f, claudeHome as ft, postTrackingSideEffects as g, saveSessionState as gt, securityAdvisory as h, sanitizeSessionId as ht, REQUIRED_AGENTS as i, sessionStartCore as it, lessonsFileFor as j, queryOf as jt, dispatchAipilot as k, mcpPostStore as kt, dryGate as l, devContext as lt, seoPostToolUseResponse as m, loadSessionState as mt, handlePre as n, readRules as nt, gate as o, purgeTtlTree as ot, seoPostToolUse as p, fusengineCache as pt, cleanupSession as q, DEFAULT_WINDOW_MS as r, runSessionStartCleanups as rt, preCommitGate as s, removeOldFiles as st, handleHook as t, injectRules as tt, extractSymbols as u, gitContext as ut, trackMcpResearch as v, sessionsDir as vt, securityStatePath as w, projectHash$1 as wt, loadSecurityState as x, respond as xt, trackSkillRead as y, promptSubmitContext as yt, loadEnriched as z };

package/dist/{index-DmbOUJK8.d.mts → index-QzK2dv0V.d.mts}

@@ -170,9 +170,19 @@ declare const ASK_PATTERNS: RegExp[];
 declare function securityGuard(ctx: GuardContext): Prompt | null;
 //#endregion
 //#region src/policy/guards/protected-path.d.ts
-/** Path fragments that mark a location as internal/generated state (off-limits to Write/Edit). */
+/** Path fragments that mark a location as internal/generated state. */
 declare const PROTECTED_FRAGMENTS: readonly string[];
-/** Blocks direct edits to internal/generated state directories. */
+/**
+* Blocks direct edits to internal/generated state directories.
+*
+* Covers:
+*  - Write / Edit tool calls whose `filePath` targets a protected fragment.
+*  - Bash commands that both reference a protected fragment *and* contain a
+*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*
+* @param ctx - The guard context (tool, filePath, command).
+* @returns A blocking {@link Prompt}, or null to allow.
+*/
 declare function protectedPathGuard(ctx: GuardContext): Prompt | null;
 //#endregion
 //#region src/policy/guards/bash-write.d.ts

package/dist/index.d.mts

@@ -5,7 +5,7 @@ import { a as detectHarness, i as HarnessVia, n as HarnessInfo, o as detectMode,
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-CG1nuf-c.mjs";
 import { t as incrementTrivialEditCounter } from "./index-BOBXQ91y.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-BEMumjOw.mjs";
-import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "./index-DmbOUJK8.mjs";
+import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "./index-QzK2dv0V.mjs";
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "./types-CY5qT2X1.mjs";
 import { a as ReminderState, c as readState, d as throttleMs, i as registryFile, l as setStateField, n as addRoot, o as lessonsFileFor, r as readRoots, s as nowStamp, t as ensureMemoryGitignore, u as stateFileFor } from "./index-DLYhervv.mjs";
 import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "./index-DL8MxjuP.mjs";

package/dist/index.mjs

@@ -4,16 +4,16 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-C8Nxxyn_.mjs";
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-CccewDwk.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-DLrWtaDR.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-zyxeVZPB.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-D8cVrI-s.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-BkoEbdec.mjs";
 import { n as jaccardSimilar, r as queryHash, t as compactMarkdown } from "./cache-C9z9LclL.mjs";
 import { a as extractText, i as mcpCacheKey, n as cachePath, o as loadIndex, r as cacheStore, s as summarizeIndex, t as cacheLookup } from "./store-PrNPm6So.mjs";
-import { t as incrementTrivialEditCounter } from "./freshness-otdUpuvP.mjs";
+import { t as incrementTrivialEditCounter } from "./freshness-43gxYpiX.mjs";
 import { n as toRefMeta, t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-ByhLeKyD.mjs";
+import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-BthKK4Jj.mjs";
 import { a as formatPath, c as colors, d as GRADIENT_BLOCKS, f as PROGRESS_BAR_DEFAULTS, i as formatCost, l as progressiveColor, m as TIME_INTERVALS, n as generateProgressBar, o as formatTimeLeft, p as PROGRESS_CHARS, r as formatBasename, s as formatTokens, t as generateGradientBar, u as COLOR_THRESHOLDS } from "./statusline-D87eUNXl.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, COLOR_THRESHOLDS, CRITICAL_PATTERNS, DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GRADIENT_BLOCKS, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_LINES_ENV_KEY, MAX_TOKENS, PHP_DECL_RE, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, STATE_GITIGNORE, STATE_ROOT, SWIFT_PROTO_RE, SYSTEM_INSTALL, TIME_INTERVALS, TS_DECL_RE, TTL_ENV_KEY, acquireLock, addRoot, apexStateDir, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, cacheLookup, cachePath, cacheStore, capVerbosity, clearUserGuards, colors, compactJson, compactMarkdown, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectHarness, detectMode, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, ensureMemoryGitignore, ensureStateDir, evaluate, evaluateApex, evaluateFileSize, extractText, firstComment, firstHeading, formatBasename, formatCost, formatDocDeny, formatDocSatisfactionStatus, formatPath, formatPrompt, formatTimeLeft, formatTokens, frameworkSolidGate, freshnessGate, generateGradientBar, generateProgressBar, globToRe, incrementTrivialEditCounter, installGuard, interfaceSeparationGuard, isApexCommand, isCodeFile, isDocConsulted, isHtmlLike, jaccardSimilar, lessonsFileFor, loadApexTaskState, loadIndex, loadRefs, loadState, matchPatterns, mcpCacheKey, missingSeoElements, modeFor, nowStamp, parseBodyDesc, parseEnrichment, parseEntry, parseEnvInt, parseField, parseFrontmatter, progressiveColor, projectLayout, projectRoot, projectRootOrNull, protectedPathGuard, queryHash, readRoots, readState, registerGuard, registryFile, requiredArchSkill, resolveMaxLines, resolveSessions, resolveTtlSec, routeReferences, runGuards, saveState, scoreReferences, securityGuard, setStateField, skillTriggerGate, solidReadGate, splitTarget, stateFileFor, stateFilePath, summarizeIndex, taskComplete, taskCreate, taskStart, throttleMs, toRefMeta, ttlLabel, walkUpFor };

package/dist/{json-io-CAn72gI4.mjs → json-io-CvSumjtz.mjs}

@@ -1,7 +1,7 @@
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { dirname } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { mkdir } from "node:fs/promises";
 //#region src/util/json-io.ts
 /** Atomically write `data` to `path` (temp + rename, 0o600). Cross-FS safe on macOS/Linux. */
@@ -36,5 +36,9 @@ async function readJsonFile(path) {
 async function writeJsonFile(path, data, compact = false) {
 	atomicWrite(path, compact ? compactJson(data) : JSON.stringify(data, null, 2));
 }
+/** 8-char MD5 of text (cache key; non-cryptographic). Portable Node+Bun. */
+function hashText(text) {
+	return createHash("md5").update(text).digest("hex").slice(0, 8);
+}
 //#endregion
-export { writeJsonFile as i, ensureDir as n, readJsonFile as r, atomicWrite as t };
+export { writeJsonFile as a, readJsonFile as i, ensureDir as n, hashText as r, atomicWrite as t };

package/dist/policy/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "../index-DmbOUJK8.mjs";
+import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "../index-QzK2dv0V.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, ApexContext, ApexGate, ApexTaskState, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, Guard, GuardContext, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, ModularArchitecture, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, PolicyContext, PolicyResult, ProjectType, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, TreeEntry, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/policy/index.mjs

@@ -1,4 +1,4 @@
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-CccewDwk.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-DLrWtaDR.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-zyxeVZPB.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/{run-CQbtlAKa.mjs → run-CUL70W0k.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/runtime/index.d.mts

@@ -3,7 +3,32 @@ import { t as RefMeta } from "../types-CY5qT2X1.mjs";
 import { t as AgentQuality } from "../session-state-DxNkIBZ2.mjs";
 
 //#region src/runtime/paths.d.ts
-/** Path to a session's track file (under a per-tool base dir). */
+/**
+* Compute a stable 8-char hex hash for a project directory path.
+* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+*
+* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns 8-char lowercase hex string.
+*/
+declare function projectHash(projectDir?: string): string;
+/**
+* Canonical base directory for per-project harness state.
+* Resolves to: ~/.claude/fuse-harness/state/<projectHash>/
+*
+* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns Absolute directory path (not yet created on disk).
+*/
+declare function defaultStateDir(projectDir?: string): string;
+/**
+* Absolute path to a session's track JSON file.
+*
+* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+*
+* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+* @param baseDir   - Override the base directory. Omit in production; pass an explicit
+*                    temp path in unit tests to avoid touching $HOME.
+* @returns Absolute path, e.g. ~/.claude/fuse-harness/state/a1b2c3d4/track-abc123.json
+*/
 declare function trackFile(sessionId: string, baseDir?: string): string;
 //#endregion
 //#region src/runtime/storage.d.ts
@@ -69,6 +94,8 @@ interface GateInput {
   windowMs?: number;
   isReplaceAll?: boolean;
   agentType?: string;
+  /** Absolute path to the session transcript (Claude `transcript_path`) for evidence-based freshness. */
+  transcriptPath?: string;
 }
 //#endregion
 //#region src/runtime/gate.d.ts
@@ -678,4 +705,4 @@ interface PreContext {
 */
 declare function handlePre(ctx: PreContext): Promise<HandleOutcome>;
 //#endregion
-export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { $ as detectSolidProfile, A as dispatchLessons, At as activityFor, B as mergeLines, C as securityStateDir, Ct as trackFile, D as dispatchLifecycle, Dt as mcpPostStore, E as trackEnrichment, Et as isMcpTool, F as writePluginMap, G as trackSessionChanges, H as getFileDesc, I as generateProjectMap, J as saveApexState, K as validateRulesLoaded, L as isProject, M as lessonsStateFileFor, N as cartoSessionStart, O as aipilotPostToolUse, Ot as mcpPreIntercept, P as generateEcosystemMap, Q as subagentCacheContext, R as writeTree, S as saveSecurityState, St as recordActivity, T as todayUtc, Tt as MCP_TTL_MS, U as listChildren, V as countFiles, W as postEditTypescript, X as validateTeammateOutput, Y as logToolFailure, Z as trackAgentMemory, _ as trackWatchResearch, _t as sessionStatePath, a as TRIVIAL_BUDGET, at as pruneEmptyDirs, b as isoUtc, bt as taskContext, c as detectDuplication, ct as trimLogFile, d as lifecycleStdout, dt as projectContext, et as solidDetectStart, f as postEditContext, ft as claudeHome, g as postTrackingSideEffects, gt as saveSessionState, h as securityAdvisory, ht as sanitizeSessionId, i as REQUIRED_AGENTS, it as sessionStartCore, j as lessonsFileFor, k as dispatchAipilot, kt as queryOf, l as dryGate, lt as devContext, m as seoPostToolUseResponse, mt as loadSessionState, n as handlePre, nt as readRules, o as gate, ot as purgeTtlTree, p as seoPostToolUse, pt as fusengineCache, q as cleanupSession, r as DEFAULT_WINDOW_MS, rt as runSessionStartCleanups, s as preCommitGate, st as removeOldFiles, t as handleHook, tt as injectRules, u as extractSymbols, ut as gitContext, v as trackMcpResearch, vt as sessionsDir, w as securityStatePath, wt as normalizeEvent, x as loadSecurityState, xt as respond, y as trackSkillRead, yt as promptSubmitContext, z as loadEnriched } from "../handle-Cxgzd4pZ.mjs";
+import { $ as detectSolidProfile, A as dispatchLessons, At as mcpPreIntercept, B as mergeLines, C as securityStateDir, Ct as defaultStateDir, D as dispatchLifecycle, Dt as MCP_TTL_MS, E as trackEnrichment, Et as normalizeEvent, F as writePluginMap, G as trackSessionChanges, H as getFileDesc, I as generateProjectMap, J as saveApexState, K as validateRulesLoaded, L as isProject, M as lessonsStateFileFor, Mt as activityFor, N as cartoSessionStart, O as aipilotPostToolUse, Ot as isMcpTool, P as generateEcosystemMap, Q as subagentCacheContext, R as writeTree, S as saveSecurityState, St as recordActivity, T as todayUtc, Tt as trackFile, U as listChildren, V as countFiles, W as postEditTypescript, X as validateTeammateOutput, Y as logToolFailure, Z as trackAgentMemory, _ as trackWatchResearch, _t as sessionStatePath, a as TRIVIAL_BUDGET, at as pruneEmptyDirs, b as isoUtc, bt as taskContext, c as detectDuplication, ct as trimLogFile, d as lifecycleStdout, dt as projectContext, et as solidDetectStart, f as postEditContext, ft as claudeHome, g as postTrackingSideEffects, gt as saveSessionState, h as securityAdvisory, ht as sanitizeSessionId, i as REQUIRED_AGENTS, it as sessionStartCore, j as lessonsFileFor, jt as queryOf, k as dispatchAipilot, kt as mcpPostStore, l as dryGate, lt as devContext, m as seoPostToolUseResponse, mt as loadSessionState, n as handlePre, nt as readRules, o as gate, ot as purgeTtlTree, p as seoPostToolUse, pt as fusengineCache, q as cleanupSession, r as DEFAULT_WINDOW_MS, rt as runSessionStartCleanups, s as preCommitGate, st as removeOldFiles, t as handleHook, tt as injectRules, u as extractSymbols, ut as gitContext, v as trackMcpResearch, vt as sessionsDir, w as securityStatePath, wt as projectHash, x as loadSecurityState, xt as respond, y as trackSkillRead, yt as promptSubmitContext, z as loadEnriched } from "../handle-DMHjTY1E.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,
@@ -9,4 +9,4 @@ function harnessStateDir(root) {
 	return projectLayout(root).stateDir;
 }
 //#endregion
-export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/state/index.mjs

@@ -1,2 +1,2 @@
-import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "../state-ByhLeKyD.mjs";
+import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "../state-BthKK4Jj.mjs";
 export { acquireLock, apexStateDir, ensureStateDir, loadState, saveState, stateFilePath, taskComplete, taskCreate, taskStart };

package/dist/{state-ByhLeKyD.mjs → state-BthKK4Jj.mjs}

@@ -1,4 +1,4 @@
-import { i as writeJsonFile, n as ensureDir, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, n as ensureDir } from "./json-io-CvSumjtz.mjs";
 import { mkdir, rmdir } from "node:fs/promises";
 //#region src/state/lock.ts
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));

package/dist/store-7j02oGjt.mjs

@@ -0,0 +1,184 @@
+import { a as writeJsonFile, i as readJsonFile } from "./json-io-CvSumjtz.mjs";
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { createHmac, randomBytes } from "node:crypto";
+//#region src/tracking/session-state.ts
+/** A fresh, empty track. */
+function emptyTrack() {
+	return {
+		authorizations: {},
+		refsRead: [],
+		agents: [],
+		trivialEdits: []
+	};
+}
+/** Record a doc consultation (Context7/Exa) for a framework in this session. Immutable. */
+function recordDoc(track, framework, sessionId, source) {
+	const prev = track.authorizations[framework] ?? {};
+	const sessions = new Set(prev.doc_sessions ?? []);
+	sessions.add(sessionId);
+	const sources = new Set(prev.sources ?? (prev.source ? [prev.source] : []));
+	sources.add(source);
+	return {
+		...track,
+		authorizations: {
+			...track.authorizations,
+			[framework]: {
+				...prev,
+				doc_sessions: [...sessions],
+				sources: [...sources]
+			}
+		}
+	};
+}
+/** Record that a SOLID reference file was read (deduped). Immutable. */
+function recordRefRead(track, path) {
+	return track.refsRead.includes(path) ? track : {
+		...track,
+		refsRead: [...track.refsRead, path]
+	};
+}
+/** Record an agent/tool call with a timestamp + optional quality. Immutable. */
+function recordAgent(track, name, ts, quality) {
+	const entry = quality ? {
+		name,
+		ts,
+		quality
+	} : {
+		name,
+		ts
+	};
+	return {
+		...track,
+		agents: [...track.agents, entry]
+	};
+}
+/** True when ALL of `names` ran within `windowMs` with non-insufficient quality. */
+function agentsFresh(track, names, windowMs, now) {
+	const cutoff = now - windowMs;
+	return names.every((n) => track.agents.some((a) => a.name === n && a.ts > cutoff && a.quality !== "insufficient"));
+}
+/** Record a trivial edit timestamp (sliding window; old evicted). Immutable. */
+function recordTrivialEdit(track, ts, windowMs, now) {
+	const cutoff = now - windowMs;
+	return {
+		...track,
+		trivialEdits: [...(track.trivialEdits ?? []).filter((t) => t > cutoff), ts]
+	};
+}
+/** Count trivial edits within the sliding window. */
+function trivialCount(track, windowMs, now) {
+	const cutoff = now - windowMs;
+	return (track.trivialEdits ?? []).filter((t) => t > cutoff).length;
+}
+/** Set the brainstorm-required flag (from creation-intent detection). Immutable. */
+function recordBrainstormRequired(track, required) {
+	return {
+		...track,
+		brainstormRequired: required
+	};
+}
+//#endregion
+//#region src/tracking/integrity.ts
+/**
+* @module integrity
+* HMAC-SHA256 tamper-evident wrapping for {@link SessionTrack}.
+*
+* Failure policy: ONLY a MAC mismatch causes fail-closed (returns null).
+* The nonce is included in the signed payload and written to disk for advisory
+* diagnostics, but is NOT checked during verification — concurrent hook
+* invocations (PostToolUse, SubagentStop, …) legitimately load the same
+* envelope after the nonce watermark advances; a monotonic check would trigger
+* spurious fail-closed behaviour mid-session.
+*
+* The machine key is readable by the same agent process, so this deters naive
+* out-of-band tampering — not a determined re-sign. Item B (transcript-grounded
+* freshness) is the primary guarantee.
+* @packageDocumentation
+*/
+const HARNESS_DIR = join(homedir(), ".claude", "fuse-harness");
+const KEY_PATH = join(HARNESS_DIR, ".key");
+const NONCE_PATH = join(HARNESS_DIR, ".nonce");
+/** Load (or create on first use) the per-machine HMAC key stored at mode 0600. */
+function loadOrCreateKey() {
+	mkdirSync(HARNESS_DIR, { recursive: true });
+	if (!existsSync(KEY_PATH)) {
+		const key = randomBytes(32).toString("hex");
+		writeFileSync(KEY_PATH, key, {
+			encoding: "utf8",
+			mode: 384
+		});
+		return key;
+	}
+	return readFileSync(KEY_PATH, "utf8").trim();
+}
+/**
+* Persist the last-seen nonce for advisory diagnostics (mode 0600).
+* Never read during {@link verifyTrack} — see module JSDoc for rationale.
+*/
+function writeLastNonce(nonce) {
+	mkdirSync(HARNESS_DIR, { recursive: true });
+	writeFileSync(NONCE_PATH, String(nonce), {
+		encoding: "utf8",
+		mode: 384
+	});
+}
+/** Compute HMAC-SHA256 over the canonical message `"${nonce}:${data}"`. */
+function computeMac(key, data, nonce) {
+	return createHmac("sha256", key).update(`${nonce}:${data}`).digest("hex");
+}
+/**
+* Sign a {@link SessionTrack} into a tamper-evident envelope. The nonce
+* (`Date.now()`) is embedded in the MAC to bind the timestamp to the payload.
+*/
+function signTrack(track) {
+	const key = loadOrCreateKey();
+	const data = JSON.stringify(track);
+	const nonce = Date.now();
+	return {
+		data,
+		nonce,
+		mac: computeMac(key, data, nonce)
+	};
+}
+/**
+* Verify a {@link TrackEnvelope}. Returns the parsed {@link SessionTrack} on
+* success, or `null` ONLY on MAC mismatch / parse failure (fail-closed on
+* tampering). The nonce is NOT checked — see module JSDoc.
+*/
+function verifyTrack(envelope) {
+	try {
+		const key = loadOrCreateKey();
+		if (envelope.mac !== computeMac(key, envelope.data, envelope.nonce)) return null;
+		return JSON.parse(envelope.data);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/tracking/store.ts
+/**
+* Load and verify a session track from a signed envelope file.
+*
+* Returns {@link emptyTrack} (fail closed) when the file is absent, corrupt, or
+* fails MAC validation — so the gates re-require real agents rather than trust a
+* forged track. Only a MAC mismatch triggers fail-closed; the nonce is advisory
+* and is never checked during load.
+*/
+async function loadTrack(file) {
+	const envelope = await readJsonFile(file);
+	if (!envelope) return emptyTrack();
+	return verifyTrack(envelope) ?? emptyTrack();
+}
+/**
+* Sign and persist a session track as a tamper-evident envelope, then write the
+* advisory nonce watermark.
+*/
+async function saveTrack(file, track) {
+	const envelope = signTrack(track);
+	await writeJsonFile(file, envelope);
+	writeLastNonce(envelope.nonce);
+}
+//#endregion
+export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };

package/dist/tracking/index.d.mts

@@ -1,9 +1,19 @@
 import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as SessionTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as AgentQuality, u as trivialCount } from "../session-state-DxNkIBZ2.mjs";
 
 //#region src/tracking/store.d.ts
-/** Load a session track from a file (an empty track if absent/corrupt). */
+/**
+* Load and verify a session track from a signed envelope file.
+*
+* Returns {@link emptyTrack} (fail closed) when the file is absent, corrupt, or
+* fails MAC validation — so the gates re-require real agents rather than trust a
+* forged track. Only a MAC mismatch triggers fail-closed; the nonce is advisory
+* and is never checked during load.
+*/
 declare function loadTrack(file: string): Promise<SessionTrack>;
-/** Persist a session track. */
+/**
+* Sign and persist a session track as a tamper-evident envelope, then write the
+* advisory nonce watermark.
+*/
 declare function saveTrack(file: string, track: SessionTrack): Promise<void>;
 //#endregion
 export { AgentQuality, SessionTrack, agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-D-ge2ZPI.mjs";
+import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-7j02oGjt.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/{validate-CccewDwk.mjs → validate-DLrWtaDR.mjs}

@@ -1,5 +1,5 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { k as countLines } from "./evaluate-9ch1K2kt.mjs";
+import { k as countLines } from "./evaluate-zyxeVZPB.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
 import { t as routeReferences } from "./router-D8cVrI-s.mjs";
 import { join } from "node:path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.33",
+  "version": "0.1.34",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",

package/dist/store-D-ge2ZPI.mjs

@@ -1,89 +0,0 @@
-import { i as writeJsonFile, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
-//#region src/tracking/session-state.ts
-/** A fresh, empty track. */
-function emptyTrack() {
-	return {
-		authorizations: {},
-		refsRead: [],
-		agents: [],
-		trivialEdits: []
-	};
-}
-/** Record a doc consultation (Context7/Exa) for a framework in this session. Immutable. */
-function recordDoc(track, framework, sessionId, source) {
-	const prev = track.authorizations[framework] ?? {};
-	const sessions = new Set(prev.doc_sessions ?? []);
-	sessions.add(sessionId);
-	const sources = new Set(prev.sources ?? (prev.source ? [prev.source] : []));
-	sources.add(source);
-	return {
-		...track,
-		authorizations: {
-			...track.authorizations,
-			[framework]: {
-				...prev,
-				doc_sessions: [...sessions],
-				sources: [...sources]
-			}
-		}
-	};
-}
-/** Record that a SOLID reference file was read (deduped). Immutable. */
-function recordRefRead(track, path) {
-	return track.refsRead.includes(path) ? track : {
-		...track,
-		refsRead: [...track.refsRead, path]
-	};
-}
-/** Record an agent/tool call with a timestamp + optional quality. Immutable. */
-function recordAgent(track, name, ts, quality) {
-	const entry = quality ? {
-		name,
-		ts,
-		quality
-	} : {
-		name,
-		ts
-	};
-	return {
-		...track,
-		agents: [...track.agents, entry]
-	};
-}
-/** True when ALL of `names` ran within `windowMs` with non-insufficient quality. */
-function agentsFresh(track, names, windowMs, now) {
-	const cutoff = now - windowMs;
-	return names.every((n) => track.agents.some((a) => a.name === n && a.ts > cutoff && a.quality !== "insufficient"));
-}
-/** Record a trivial edit timestamp (sliding window; old evicted). Immutable. */
-function recordTrivialEdit(track, ts, windowMs, now) {
-	const cutoff = now - windowMs;
-	return {
-		...track,
-		trivialEdits: [...(track.trivialEdits ?? []).filter((t) => t > cutoff), ts]
-	};
-}
-/** Count trivial edits within the sliding window. */
-function trivialCount(track, windowMs, now) {
-	const cutoff = now - windowMs;
-	return (track.trivialEdits ?? []).filter((t) => t > cutoff).length;
-}
-/** Set the brainstorm-required flag (from creation-intent detection). Immutable. */
-function recordBrainstormRequired(track, required) {
-	return {
-		...track,
-		brainstormRequired: required
-	};
-}
-//#endregion
-//#region src/tracking/store.ts
-/** Load a session track from a file (an empty track if absent/corrupt). */
-async function loadTrack(file) {
-	return await readJsonFile(file) ?? emptyTrack();
-}
-/** Persist a session track. */
-async function saveTrack(file, track) {
-	await writeJsonFile(file, track);
-}
-//#endregion
-export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };