@fusengine/harness 0.1.33 → 0.1.35

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-BatVYnAf.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-3PqBGt_7.mjs";
 export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-BatVYnAf.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-3PqBGt_7.mjs";
 export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/{claude-BatVYnAf.mjs → claude-3PqBGt_7.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";

package/dist/cli/bin.mjs

@@ -1,15 +1,87 @@
 #!/usr/bin/env node
 import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CQbtlAKa.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { t as handleHook } from "../handle-Cxgzd4pZ.mjs";
+import { Et as claudeHome, Tt as todayUtc, t as handleHook } from "../handle-CYlA6TeF.mjs";
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+//#region src/changelog/fetch.ts
+/**
+* Changelog scanner — ports the changelog-watcher plugin's `fetch-changelog`
+* into the harness (exposed as the `harness changelog` CLI verb). Fetches the
+* official Claude Code changelog, detects how many versions are new since the
+* last check, persists per-day state, and returns a JSON summary. Dual-runtime:
+* global `fetch` + `node:fs` (works under Node 20+ and Bun, no imports needed).
+*/
+const CHANGELOG_URL = "https://code.claude.com/docs/en/changelog.md";
+/**
+* Parse up to 10 semver versions from the changelog, newest first. Matches the
+* current docs format (`<Update label="X.Y.Z" …>` MDX blocks) AND the legacy
+* markdown headers (`## vX.Y.Z` / `## X.Y.Z`) so it survives a format rollback.
+*/
+function parseVersions(md) {
+	return [...md.matchAll(/<Update\s+label="v?(\d+\.\d+\.\d+)"|^##\s+v?(\d+\.\d+\.\d+)/gm)].map((m) => m[1] ?? m[2] ?? "").filter(Boolean).slice(0, 10);
+}
+/** Count versions newer than `lastKnown` (stops at the first match). */
+function countNew(versions, lastKnown) {
+	if (!lastKnown) return 0;
+	let n = 0;
+	for (const v of versions) {
+		if (v === lastKnown) break;
+		n++;
+	}
+	return n;
+}
+/** Read the saved `last_version` for today's state file ("" when absent/corrupt). */
+function lastKnownVersion(stateFile) {
+	if (!existsSync(stateFile)) return "";
+	try {
+		return JSON.parse(readFileSync(stateFile, "utf8")).last_version ?? "";
+	} catch {
+		return "";
+	}
+}
+/**
+* Fetch + parse the changelog, diff against the saved state, persist, and return
+* the scan summary. Throws on network failure (the CLI maps it to exit 1).
+* @param now - Clock (ms).
+* @param home - Home dir.
+*/
+async function scanChangelog(now = Date.now(), home = homedir()) {
+	const res = await fetch(CHANGELOG_URL, { signal: AbortSignal.timeout(1e4) });
+	if (!res.ok) throw new Error(`changelog fetch failed: ${res.status}`);
+	const versions = parseVersions(await res.text());
+	const latest = versions[0] ?? "";
+	const dir = join(claudeHome(home), "logs", "00-changelog");
+	const today = todayUtc(now);
+	const stateFile = join(dir, `${today}-state.json`);
+	const lastKnown = lastKnownVersion(stateFile);
+	const newCount = countNew(versions, lastKnown);
+	try {
+		mkdirSync(dir, { recursive: true });
+		writeFileSync(stateFile, JSON.stringify({
+			last_version: latest,
+			previous: lastKnown,
+			new_versions: newCount,
+			checked: today
+		}, null, 2));
+	} catch {}
+	return {
+		latest,
+		new_since_last_check: newCount,
+		recent_versions: versions
+	};
+}
+//#endregion
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.
 *   harness check          cli-mode: check staged files (pre-commit), exit non-zero on a violation
 *   harness init [id]      write the wiring file for a harness (defaults to the detected one)
 *   harness hook <id>      runtime: read a hook payload on stdin, route to the adapter, print the response
+*   harness changelog      fetch + diff the Claude Code changelog, print a JSON summary (changelog-watcher)
 */
 async function readStdin() {
 	const chunks = [];
@@ -56,7 +128,17 @@ if (cmd === "hook") {
 	const written = files.map((f) => writeInitFile(process.cwd(), f));
 	process.stdout.write(`harness: wired ${id} -> ${written.join(", ")}\n`);
 	process.exit(0);
-} else {
+} else if (cmd === "changelog") try {
+	process.stdout.write(JSON.stringify(await scanChangelog()) + "\n");
+	process.exit(0);
+} catch (e) {
+	process.stdout.write(JSON.stringify({
+		status: "error",
+		message: e instanceof Error ? e.message : "changelog fetch failed"
+	}) + "\n");
+	process.exit(1);
+}
+else {
 	const files = stagedFiles();
 	if (files.length === 0) process.exit(0);
 	const violations = checkStaged(files, stagedContent);

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CQbtlAKa.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/{evaluate-9ch1K2kt.mjs → evaluate-zyxeVZPB.mjs}

@@ -192,24 +192,58 @@ function securityGuard(ctx) {
 }
 //#endregion
 //#region src/policy/guards/protected-path.ts
-/** Path fragments that mark a location as internal/generated state (off-limits to Write/Edit). */
+/** Path fragments that mark a location as internal/generated state. */
 const PROTECTED_FRAGMENTS = [
 	".claude/plugins/marketplaces",
 	".claude/plugins/cache",
 	".claude/logs/00-apex",
 	".claude/fusengine-cache",
-	".git/"
+	".git/",
+	".claude/apex/",
+	"/fuse-harness/",
+	".harness/track",
+	".harness/memory/state"
 ];
-/** Blocks direct edits to internal/generated state directories. */
+/** Standard block response for any protected-path violation. */
+const BLOCK = {
+	kind: "block",
+	title: "Protected path",
+	reason: "This is internal/generated enforcement state — do not edit it directly.",
+	actions: ["Edit the source, not the generated/cache/state copy"]
+};
+/** Returns true if `str` contains any protected fragment. */
+function containsProtected(str) {
+	return PROTECTED_FRAGMENTS.some((f) => str.includes(f));
+}
+/**
+* Returns true if `cmd` contains a recognisable shell write operation.
+*
+* Best-effort: matches `>` / `>>` redirections, `tee`, `cp`, `mv`, `dd`, `sed -i`.
+* Obfuscated shell (base64-decoded payloads, variable indirection, process
+* substitution) can still evade this check — residual risk, documented. The
+* real guarantee against a forged track is the transcript-grounded freshness
+* gate (see `freshness/agent-evidence`), not this guard.
+*/
+function bashHasWriteOp(cmd) {
+	return />/.test(cmd) || /\btee\b/.test(cmd) || /\bcp\b/.test(cmd) || /\bmv\b/.test(cmd) || /\bdd\b/.test(cmd) || /\bsed\s+-[a-zA-Z]*i/.test(cmd);
+}
+/**
+* Blocks direct edits to internal/generated state directories.
+*
+* Covers:
+*  - Write / Edit tool calls whose `filePath` targets a protected fragment.
+*  - Bash commands that both reference a protected fragment *and* contain a
+*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*
+* @param ctx - The guard context (tool, filePath, command).
+* @returns A blocking {@link Prompt}, or null to allow.
+*/
 function protectedPathGuard(ctx) {
 	if ((ctx.tool === "Write" || ctx.tool === "Edit") && ctx.filePath) {
-		const path = ctx.filePath;
-		if (PROTECTED_FRAGMENTS.some((fragment) => path.includes(fragment))) return {
-			kind: "block",
-			title: "Protected path",
-			reason: "This is internal/generated state — do not edit it directly.",
-			actions: ["Edit the source, not the generated/cache copy"]
-		};
+		if (containsProtected(ctx.filePath)) return BLOCK;
+	}
+	if (ctx.tool === "Bash" && ctx.command) {
+		if (containsProtected(ctx.command) && bashHasWriteOp(ctx.command)) return BLOCK;
 	}
 	return null;
 }

package/dist/freshness/index.mjs

@@ -1,3 +1,3 @@
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-Dd_x1-tZ.mjs";
-import { t as incrementTrivialEditCounter } from "../freshness-otdUpuvP.mjs";
+import { t as incrementTrivialEditCounter } from "../freshness-43gxYpiX.mjs";
 export { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/{freshness-otdUpuvP.mjs → freshness-43gxYpiX.mjs}

@@ -1,4 +1,4 @@
-import { i as writeJsonFile, n as ensureDir, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, n as ensureDir } from "./json-io-CvSumjtz.mjs";
 import { dirname } from "node:path";
 //#region src/freshness/trivial-edit-counter.ts
 /**

package/dist/{handle-Cxgzd4pZ.mjs → handle-CYlA6TeF.mjs}

@@ -1,21 +1,103 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
 import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-CccewDwk.mjs";
-import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-DLrWtaDR.mjs";
+import { j as detectFramework, k as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-BkoEbdec.mjs";
 import { a as extractText, o as loadIndex, r as cacheStore, t as cacheLookup } from "./store-PrNPm6So.mjs";
-import { i as writeJsonFile, r as readJsonFile, t as atomicWrite } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-CvSumjtz.mjs";
 import { t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-D-ge2ZPI.mjs";
-import { c as pathExists, d as spawnCapture, f as writeText, l as readText, n as denyResponse, s as collectFiles, t as contextResponse, u as sleep } from "./claude-BatVYnAf.mjs";
+import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-7j02oGjt.mjs";
+import { c as pathExists, d as spawnCapture, f as writeText, l as readText, n as denyResponse, s as collectFiles, t as contextResponse, u as sleep } from "./claude-3PqBGt_7.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
+import { homedir } from "node:os";
 import { createHash } from "node:crypto";
 import { mkdir, rmdir } from "node:fs/promises";
 import { execFileSync } from "node:child_process";
+//#region src/runtime/home-state.ts
+/** Home `~/.claude` dir (single source for every home-based hook path). */
+function claudeHome(home = homedir()) {
+	return join(home, ".claude");
+}
+/** `~/.claude/fusengine-cache` base dir for legacy session/cache state. */
+function fusengineCache(home = homedir()) {
+	return join(claudeHome(home), "fusengine-cache");
+}
+/** `~/.claude/fusengine-cache/sessions` — per-session JSON state dir. */
+function sessionsDir(home = homedir()) {
+	return join(fusengineCache(home), "sessions");
+}
+const SID_RE = /^[a-zA-Z0-9_-]{1,128}$/;
+/** Validate a session id (1-128 url-safe chars); null when invalid. */
+function sanitizeSessionId(sid) {
+	const s = String(sid ?? "").trim();
+	return SID_RE.test(s) ? s : null;
+}
+/** Unified per-session state file path: `sessions/session-<sid>.json`. */
+function sessionStatePath(sid, home = homedir()) {
+	return join(sessionsDir(home), `session-${sid}.json`);
+}
+/** Load a session-state dict, or `{}` when missing/corrupt (mirrors Python). */
+function loadSessionState(sid, home = homedir()) {
+	const path = sessionStatePath(sid, home);
+	try {
+		if (!existsSync(path)) return {};
+		const data = JSON.parse(readFileSync(path, "utf-8"));
+		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
+	} catch {
+		return {};
+	}
+}
+/** Atomically persist a session-state dict (0o600 via atomicWrite, indent 2). */
+function saveSessionState(sid, state, home = homedir()) {
+	mkdirSync(sessionsDir(home), {
+		recursive: true,
+		mode: 448
+	});
+	atomicWrite(sessionStatePath(sid, home), JSON.stringify(state, null, 2));
+}
+//#endregion
+//#region src/runtime/lifecycle/security/skill-state.ts
+/**
+* Shared security-tracker state: per-UTC-day JSON under
+* `~/.claude/logs/00-security`. Ports the state helpers of
+* `check-security-skill.py` / `track-skill-read.py` / `track-mcp-research.py`.
+*/
+/** `~/.claude/logs/00-security` state directory. */
+function securityStateDir(home = homedir()) {
+	return join(claudeHome(home), "logs", "00-security");
+}
+/** Current UTC date as `YYYY-MM-DD`. */
+function todayUtc(now = Date.now()) {
+	return new Date(now).toISOString().slice(0, 10);
+}
+/** Current UTC instant as `YYYY-MM-DDTHH:MM:SSZ` (seconds, no millis). */
+function isoUtc(now = Date.now()) {
+	return new Date(now).toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+/** Today's security-state file path. */
+function securityStatePath(now = Date.now(), home = homedir()) {
+	return join(securityStateDir(home), `${todayUtc(now)}-state.json`);
+}
+/** Load today's security state, or `{}` when missing/corrupt. */
+function loadSecurityState(now = Date.now(), home = homedir()) {
+	const path = securityStatePath(now, home);
+	try {
+		if (!existsSync(path)) return {};
+		const data = JSON.parse(readFileSync(path, "utf-8"));
+		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
+	} catch {
+		return {};
+	}
+}
+/** Persist today's security state (indent 2, no trailing newline). */
+function saveSecurityState(state, now = Date.now(), home = homedir()) {
+	mkdirSync(securityStateDir(home), { recursive: true });
+	writeFileSync(securityStatePath(now, home), JSON.stringify(state, null, 2), "utf-8");
+}
+//#endregion
 //#region src/runtime/activity.ts
 /** Min response length (chars) for a lead agent call to count as `sufficient`. */
 const AGENT_QUALITY_MIN = 500;
@@ -169,9 +251,54 @@ function normalizeEvent(id, payload) {
 }
 //#endregion
 //#region src/runtime/paths.ts
-/** Path to a session's track file (under a per-tool base dir). */
-function trackFile(sessionId, baseDir = join(tmpdir(), "fuse-harness")) {
-	return join(baseDir, `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
+/**
+* @module paths
+* Runtime path helpers — per-project, out-of-tree harness state.
+*
+* Default base: ~/.claude/fuse-harness/state/<projectHash>/
+* where projectHash = 8-char MD5 of CLAUDE_PROJECT_DIR (or cwd).
+* Persistent and not world-writable (unlike /tmp), and OUTSIDE the repo so the
+* agent has no "legitimate" reason to write it (the protected-path guard denies
+* it, and the gate verifies freshness from the transcript, not this file).
+*
+* @packageDocumentation
+*/
+/** Resolve the project root from the environment or fall back to cwd. */
+function resolveProjectDir() {
+	return process.env["CLAUDE_PROJECT_DIR"] ?? process.cwd();
+}
+/**
+* Compute a stable 8-char hex hash for a project directory path.
+* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+*
+* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns 8-char lowercase hex string.
+*/
+function projectHash$1(projectDir) {
+	return hashText(projectDir ?? resolveProjectDir());
+}
+/**
+* Canonical base directory for per-project harness state.
+* Resolves to: ~/.claude/fuse-harness/state/<projectHash>/
+*
+* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns Absolute directory path (not yet created on disk).
+*/
+function defaultStateDir(projectDir) {
+	return join(homedir(), ".claude", "fuse-harness", "state", projectHash$1(projectDir));
+}
+/**
+* Absolute path to a session's track JSON file.
+*
+* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+*
+* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+* @param baseDir   - Override the base directory. Omit in production; pass an explicit
+*                    temp path in unit tests to avoid touching $HOME.
+* @returns Absolute path, e.g. ~/.claude/fuse-harness/state/a1b2c3d4/track-abc123.json
+*/
+function trackFile(sessionId, baseDir) {
+	return join(baseDir ?? defaultStateDir(), `track-${sessionId.replace(/[^A-Za-z0-9_-]/g, "_") || "default"}.json`);
 }
 //#endregion
 //#region src/runtime/record.ts
@@ -626,49 +753,6 @@ function taskContext(cwd) {
 	return ctx ? contextResponse("PreToolUse", ctx) : "";
 }
 //#endregion
-//#region src/runtime/home-state.ts
-/** Home `~/.claude` dir (single source for every home-based hook path). */
-function claudeHome(home = homedir()) {
-	return join(home, ".claude");
-}
-/** `~/.claude/fusengine-cache` base dir for legacy session/cache state. */
-function fusengineCache(home = homedir()) {
-	return join(claudeHome(home), "fusengine-cache");
-}
-/** `~/.claude/fusengine-cache/sessions` — per-session JSON state dir. */
-function sessionsDir(home = homedir()) {
-	return join(fusengineCache(home), "sessions");
-}
-const SID_RE = /^[a-zA-Z0-9_-]{1,128}$/;
-/** Validate a session id (1-128 url-safe chars); null when invalid. */
-function sanitizeSessionId(sid) {
-	const s = String(sid ?? "").trim();
-	return SID_RE.test(s) ? s : null;
-}
-/** Unified per-session state file path: `sessions/session-<sid>.json`. */
-function sessionStatePath(sid, home = homedir()) {
-	return join(sessionsDir(home), `session-${sid}.json`);
-}
-/** Load a session-state dict, or `{}` when missing/corrupt (mirrors Python). */
-function loadSessionState(sid, home = homedir()) {
-	const path = sessionStatePath(sid, home);
-	try {
-		if (!existsSync(path)) return {};
-		const data = JSON.parse(readFileSync(path, "utf-8"));
-		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
-	} catch {
-		return {};
-	}
-}
-/** Atomically persist a session-state dict (0o600 via atomicWrite, indent 2). */
-function saveSessionState(sid, state, home = homedir()) {
-	mkdirSync(sessionsDir(home), {
-		recursive: true,
-		mode: 448
-	});
-	atomicWrite(sessionStatePath(sid, home), JSON.stringify(state, null, 2));
-}
-//#endregion
 //#region src/runtime/dev-context.ts
 /** Run a git subcommand in `cwd`, returning trimmed stdout or "" on error. */
 function git(cwd, args) {
@@ -2972,45 +3056,6 @@ function trackEnrichment(filePath) {
 	} catch {}
 }
 //#endregion
-//#region src/runtime/lifecycle/security/skill-state.ts
-/**
-* Shared security-tracker state: per-UTC-day JSON under
-* `~/.claude/logs/00-security`. Ports the state helpers of
-* `check-security-skill.py` / `track-skill-read.py` / `track-mcp-research.py`.
-*/
-/** `~/.claude/logs/00-security` state directory. */
-function securityStateDir(home = homedir()) {
-	return join(claudeHome(home), "logs", "00-security");
-}
-/** Current UTC date as `YYYY-MM-DD`. */
-function todayUtc(now = Date.now()) {
-	return new Date(now).toISOString().slice(0, 10);
-}
-/** Current UTC instant as `YYYY-MM-DDTHH:MM:SSZ` (seconds, no millis). */
-function isoUtc(now = Date.now()) {
-	return new Date(now).toISOString().replace(/\.\d{3}Z$/, "Z");
-}
-/** Today's security-state file path. */
-function securityStatePath(now = Date.now(), home = homedir()) {
-	return join(securityStateDir(home), `${todayUtc(now)}-state.json`);
-}
-/** Load today's security state, or `{}` when missing/corrupt. */
-function loadSecurityState(now = Date.now(), home = homedir()) {
-	const path = securityStatePath(now, home);
-	try {
-		if (!existsSync(path)) return {};
-		const data = JSON.parse(readFileSync(path, "utf-8"));
-		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
-	} catch {
-		return {};
-	}
-}
-/** Persist today's security state (indent 2, no trailing newline). */
-function saveSecurityState(state, now = Date.now(), home = homedir()) {
-	mkdirSync(securityStateDir(home), { recursive: true });
-	writeFileSync(securityStatePath(now, home), JSON.stringify(state, null, 2), "utf-8");
-}
-//#endregion
 //#region src/runtime/lifecycle/security/track-skill-read.ts
 /**
 * Security skill-read tracker (PostToolUse Read). Ports `track-skill-read.py`:
@@ -3235,6 +3280,90 @@ function postEditContext(scope, event, now) {
 	return trackSessionChanges(event.sessionId, event.filePath, void 0, now) || postEditTypescript(event.filePath);
 }
 //#endregion
+//#region src/runtime/gate-helpers.ts
+/**
+* Code-only line count of the existing on-disk file (undefined if
+* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) so a
+* partial Edit judges the full file by the SAME metric as the incoming snippet —
+* a raw `split("\n").length` would over-count JSDoc/blank lines (and add a
+* trailing-newline off-by-one), falsely blocking well-documented files.
+* @param path - Absolute path of the file being edited (or undefined).
+* @returns Code-only line count, or undefined when the file is absent/unreadable.
+*/
+function existingLineCount(path) {
+	if (!path) return void 0;
+	try {
+		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
+	} catch {
+		return;
+	}
+}
+//#endregion
+//#region src/freshness/agent-evidence.ts
+/**
+* Platform-authored transcript evidence for APEX agent freshness.
+* Parses the Claude Code session JSONL transcript to find genuine Task
+* tool_use entries — forging this requires writing into the transcript file
+* which the Claude Code platform controls, unlike the self-recorded track.
+*/
+/** Parse a raw `timestamp` field to epoch ms; `undefined` when absent or invalid. */
+function parseTs(raw) {
+	if (raw === void 0) return void 0;
+	if (typeof raw === "number") return raw;
+	const ms = Date.parse(raw);
+	return Number.isFinite(ms) ? ms : void 0;
+}
+/**
+* Return `true` ONLY when, for EVERY name in `names`, the Claude Code
+* transcript at `transcriptPath` contains a genuine `tool_use` of the `Task`
+* tool whose `subagent_type` (or `name`) input field matches, with the entry
+* timestamp within `windowMs` of `now`.
+*
+* **Timestamp note:** when a transcript entry carries no `timestamp` field it
+* is counted as within-window (we cannot prove staleness). This is
+* intentionally lenient to stay robust across transcript-format evolution; the
+* tamper-resistance guarantee derives from the platform authoring the file —
+* not from the timestamp alone.
+*
+* @param transcriptPath - Absolute path to the session `.jsonl` transcript
+*   (hook payload field: `transcript_path`). Returns `false` when `undefined`.
+* @param names - Required agent `subagent_type` values — ALL must appear.
+* @param windowMs - Freshness window in milliseconds.
+* @param now - Current epoch ms (pass `Date.now()` at the call-site).
+* @returns `true` when ALL agents have real, within-window transcript evidence.
+*/
+function agentsRanFromTranscript(transcriptPath, names, windowMs, now) {
+	if (!transcriptPath || names.length === 0) return false;
+	let text;
+	try {
+		text = readText(transcriptPath);
+	} catch {
+		return false;
+	}
+	const cutoff = now - windowMs;
+	const found = /* @__PURE__ */ new Set();
+	for (const line of text.split("\n")) {
+		if (!line.trim()) continue;
+		let entry;
+		try {
+			entry = JSON.parse(line);
+		} catch {
+			continue;
+		}
+		const ts = parseTs(entry.timestamp);
+		if (ts !== void 0 && ts <= cutoff) continue;
+		const content = entry.message?.content;
+		if (!Array.isArray(content)) continue;
+		for (const block of content) {
+			if (block?.type !== "tool_use" || block.name !== "Task") continue;
+			const agent = block.input?.subagent_type ?? block.input?.name;
+			if (typeof agent === "string" && names.includes(agent)) found.add(agent);
+		}
+		if (found.size === names.length) return true;
+	}
+	return names.every((n) => found.has(n));
+}
+//#endregion
 //#region src/runtime/dry-patterns.ts
 /** Short identifiers never worth a duplication check (control flow, tiny names). */
 const DRY_KEYWORDS = /* @__PURE__ */ new Set([
@@ -3570,22 +3699,6 @@ const DEFAULT_WINDOW_MS = 12e4;
 /** Trivial edits allowed within the window before the full APEX gates apply. */
 const TRIVIAL_BUDGET = 4;
 /**
-* Code-only line count of the existing on-disk file (undefined if
-* absent/unreadable). Uses {@link countLines} (skips blank/comment lines) to
-* mirror the Python `count_code_lines(get_full_file_content(...))`, so a partial
-* Edit judges the full file by the SAME metric as the incoming snippet — a raw
-* `split("\n").length` would over-count JSDoc/blank lines (and add a
-* trailing-newline off-by-one), falsely blocking well-documented files.
-*/
-function existingLineCount(path) {
-	if (!path) return void 0;
-	try {
-		return existsSync(path) ? countLines(readFileSync(path, "utf8")) : void 0;
-	} catch {
-		return;
-	}
-}
-/**
 * Full gate: the stateless guards (file-size, git, security...) first, then a
 * trivial-edit fast path, then the stateful APEX gates fed from the session
 * track. Returns the first blocking prompt, or null to allow.
@@ -3620,6 +3733,7 @@ async function gate(input) {
 		await saveTrack(input.trackFile, recordTrivialEdit(track, input.now, window, input.now));
 		return null;
 	}
+	const freshnessFor = (names) => input.transcriptPath ? agentsRanFromTranscript(input.transcriptPath, names, window, input.now) : agentsFresh(track, names, window, input.now);
 	const ctx = {
 		sessionId: input.sessionId,
 		framework: input.framework,
@@ -3628,9 +3742,9 @@ async function gate(input) {
 		authorizations: track.authorizations,
 		refs: input.refs,
 		refsRead: track.refsRead,
-		agentsFresh: agentsFresh(track, [...REQUIRED_AGENTS], window, input.now),
+		agentsFresh: freshnessFor([...REQUIRED_AGENTS]),
 		brainstormRequired: track.brainstormRequired,
-		brainstormFresh: agentsFresh(track, ["brainstorming"], window, input.now)
+		brainstormFresh: freshnessFor(["brainstorming"])
 	};
 	try {
 		const apex = evaluateApex(ctx);
@@ -3693,7 +3807,8 @@ async function handlePre(ctx) {
 		agentType: event.agentType,
 		windowMs: opts.windowMs,
 		now: opts.now,
-		trackFile: file
+		trackFile: file,
+		transcriptPath: typeof payload.transcript_path === "string" ? payload.transcript_path : void 0
 	});
 	return prompt ? {
 		stdout: respond(id, prompt),
@@ -3718,7 +3833,7 @@ function rawEventName(payload) {
 async function handleHook(id, payload, opts) {
 	const event = normalizeEvent(id, payload);
 	const layout = projectLayout(opts.cwd);
-	const file = trackFile(event.sessionId, layout.trackDir);
+	const file = trackFile(event.sessionId, defaultStateDir(opts.cwd));
 	const mcpDir = layout.cacheDir;
 	const framework = detectFramework(event.filePath ?? "", event.content ?? "");
 	if (designLifecycle(payload, mcpDir, opts.cwd, String(opts.now), opts.now)) return {
@@ -3788,4 +3903,4 @@ async function handleHook(id, payload, opts) {
 	});
 }
 //#endregion
-export { detectSolidProfile as $, dispatchLessons as A, activityFor as At, mergeLines as B, securityStateDir as C, trackFile as Ct, dispatchLifecycle as D, mcpPostStore as Dt, trackEnrichment as E, isMcpTool as Et, writePluginMap as F, trackSessionChanges as G, getFileDesc as H, generateProjectMap as I, saveApexState as J, validateRulesLoaded as K, isProject as L, lessonsStateFileFor as M, cartoSessionStart as N, aipilotPostToolUse as O, mcpPreIntercept as Ot, generateEcosystemMap as P, subagentCacheContext as Q, writeTree as R, saveSecurityState as S, recordActivity as St, todayUtc as T, MCP_TTL_MS as Tt, listChildren as U, countFiles as V, postEditTypescript as W, validateTeammateOutput as X, logToolFailure as Y, trackAgentMemory as Z, trackWatchResearch as _, sessionStatePath as _t, TRIVIAL_BUDGET as a, pruneEmptyDirs as at, isoUtc as b, taskContext as bt, detectDuplication as c, trimLogFile as ct, lifecycleStdout as d, projectContext as dt, solidDetectStart as et, postEditContext as f, claudeHome as ft, postTrackingSideEffects as g, saveSessionState as gt, securityAdvisory as h, sanitizeSessionId as ht, REQUIRED_AGENTS as i, sessionStartCore as it, lessonsFileFor as j, dispatchAipilot as k, queryOf as kt, dryGate as l, devContext as lt, seoPostToolUseResponse as m, loadSessionState as mt, handlePre as n, readRules as nt, gate as o, purgeTtlTree as ot, seoPostToolUse as p, fusengineCache as pt, cleanupSession as q, DEFAULT_WINDOW_MS as r, runSessionStartCleanups as rt, preCommitGate as s, removeOldFiles as st, handleHook as t, injectRules as tt, extractSymbols as u, gitContext as ut, trackMcpResearch as v, sessionsDir as vt, securityStatePath as w, normalizeEvent as wt, loadSecurityState as x, respond as xt, trackSkillRead as y, promptSubmitContext as yt, loadEnriched as z };
+export { pruneEmptyDirs as $, generateProjectMap as A, saveSessionState as At, validateRulesLoaded as B, dispatchAipilot as C, securityStateDir as Ct, cartoSessionStart as D, fusengineCache as Dt, lessonsStateFileFor as E, claudeHome as Et, countFiles as F, trackAgentMemory as G, saveApexState as H, getFileDesc as I, solidDetectStart as J, subagentCacheContext as K, listChildren as L, writeTree as M, sessionsDir as Mt, loadEnriched as N, generateEcosystemMap as O, loadSessionState as Ot, mergeLines as P, sessionStartCore as Q, postEditTypescript as R, aipilotPostToolUse as S, saveSecurityState as St, lessonsFileFor as T, todayUtc as Tt, logToolFailure as U, cleanupSession as V, validateTeammateOutput as W, readRules as X, injectRules as Y, runSessionStartCleanups as Z, trackWatchResearch as _, mcpPreIntercept as _t, TRIVIAL_BUDGET as a, projectContext as at, trackEnrichment as b, isoUtc as bt, detectDuplication as c, respond as ct, lifecycleStdout as d, projectHash$1 as dt, purgeTtlTree as et, postEditContext as f, trackFile as ft, postTrackingSideEffects as g, mcpPostStore as gt, securityAdvisory as h, isMcpTool as ht, REQUIRED_AGENTS as i, gitContext as it, isProject as j, sessionStatePath as jt, writePluginMap as k, sanitizeSessionId as kt, dryGate as l, recordActivity as lt, seoPostToolUseResponse as m, MCP_TTL_MS as mt, handlePre as n, trimLogFile as nt, gate as o, promptSubmitContext as ot, seoPostToolUse as p, normalizeEvent as pt, detectSolidProfile as q, DEFAULT_WINDOW_MS as r, devContext as rt, preCommitGate as s, taskContext as st, handleHook as t, removeOldFiles as tt, extractSymbols as u, defaultStateDir as ut, trackMcpResearch as v, queryOf as vt, dispatchLessons as w, securityStatePath as wt, dispatchLifecycle as x, loadSecurityState as xt, trackSkillRead as y, activityFor as yt, trackSessionChanges as z };

package/dist/{index-DmbOUJK8.d.mts → index-QzK2dv0V.d.mts}

@@ -170,9 +170,19 @@ declare const ASK_PATTERNS: RegExp[];
 declare function securityGuard(ctx: GuardContext): Prompt | null;
 //#endregion
 //#region src/policy/guards/protected-path.d.ts
-/** Path fragments that mark a location as internal/generated state (off-limits to Write/Edit). */
+/** Path fragments that mark a location as internal/generated state. */
 declare const PROTECTED_FRAGMENTS: readonly string[];
-/** Blocks direct edits to internal/generated state directories. */
+/**
+* Blocks direct edits to internal/generated state directories.
+*
+* Covers:
+*  - Write / Edit tool calls whose `filePath` targets a protected fragment.
+*  - Bash commands that both reference a protected fragment *and* contain a
+*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*
+* @param ctx - The guard context (tool, filePath, command).
+* @returns A blocking {@link Prompt}, or null to allow.
+*/
 declare function protectedPathGuard(ctx: GuardContext): Prompt | null;
 //#endregion
 //#region src/policy/guards/bash-write.d.ts

package/dist/index.d.mts

@@ -5,7 +5,7 @@ import { a as detectHarness, i as HarnessVia, n as HarnessInfo, o as detectMode,
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-CG1nuf-c.mjs";
 import { t as incrementTrivialEditCounter } from "./index-BOBXQ91y.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-BEMumjOw.mjs";
-import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "./index-DmbOUJK8.mjs";
+import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "./index-QzK2dv0V.mjs";
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "./types-CY5qT2X1.mjs";
 import { a as ReminderState, c as readState, d as throttleMs, i as registryFile, l as setStateField, n as addRoot, o as lessonsFileFor, r as readRoots, s as nowStamp, t as ensureMemoryGitignore, u as stateFileFor } from "./index-DLYhervv.mjs";
 import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "./index-DL8MxjuP.mjs";

package/dist/index.mjs

@@ -4,16 +4,16 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-C8Nxxyn_.mjs";
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-CccewDwk.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-DLrWtaDR.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-zyxeVZPB.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-D8cVrI-s.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-BkoEbdec.mjs";
 import { n as jaccardSimilar, r as queryHash, t as compactMarkdown } from "./cache-C9z9LclL.mjs";
 import { a as extractText, i as mcpCacheKey, n as cachePath, o as loadIndex, r as cacheStore, s as summarizeIndex, t as cacheLookup } from "./store-PrNPm6So.mjs";
-import { t as incrementTrivialEditCounter } from "./freshness-otdUpuvP.mjs";
+import { t as incrementTrivialEditCounter } from "./freshness-43gxYpiX.mjs";
 import { n as toRefMeta, t as loadRefs } from "./loader-CyAoJv2W.mjs";
-import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-ByhLeKyD.mjs";
+import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-BthKK4Jj.mjs";
 import { a as formatPath, c as colors, d as GRADIENT_BLOCKS, f as PROGRESS_BAR_DEFAULTS, i as formatCost, l as progressiveColor, m as TIME_INTERVALS, n as generateProgressBar, o as formatTimeLeft, p as PROGRESS_CHARS, r as formatBasename, s as formatTokens, t as generateGradientBar, u as COLOR_THRESHOLDS } from "./statusline-D87eUNXl.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, COLOR_THRESHOLDS, CRITICAL_PATTERNS, DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GRADIENT_BLOCKS, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_LINES_ENV_KEY, MAX_TOKENS, PHP_DECL_RE, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, STATE_GITIGNORE, STATE_ROOT, SWIFT_PROTO_RE, SYSTEM_INSTALL, TIME_INTERVALS, TS_DECL_RE, TTL_ENV_KEY, acquireLock, addRoot, apexStateDir, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, cacheLookup, cachePath, cacheStore, capVerbosity, clearUserGuards, colors, compactJson, compactMarkdown, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectHarness, detectMode, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, ensureMemoryGitignore, ensureStateDir, evaluate, evaluateApex, evaluateFileSize, extractText, firstComment, firstHeading, formatBasename, formatCost, formatDocDeny, formatDocSatisfactionStatus, formatPath, formatPrompt, formatTimeLeft, formatTokens, frameworkSolidGate, freshnessGate, generateGradientBar, generateProgressBar, globToRe, incrementTrivialEditCounter, installGuard, interfaceSeparationGuard, isApexCommand, isCodeFile, isDocConsulted, isHtmlLike, jaccardSimilar, lessonsFileFor, loadApexTaskState, loadIndex, loadRefs, loadState, matchPatterns, mcpCacheKey, missingSeoElements, modeFor, nowStamp, parseBodyDesc, parseEnrichment, parseEntry, parseEnvInt, parseField, parseFrontmatter, progressiveColor, projectLayout, projectRoot, projectRootOrNull, protectedPathGuard, queryHash, readRoots, readState, registerGuard, registryFile, requiredArchSkill, resolveMaxLines, resolveSessions, resolveTtlSec, routeReferences, runGuards, saveState, scoreReferences, securityGuard, setStateField, skillTriggerGate, solidReadGate, splitTarget, stateFileFor, stateFilePath, summarizeIndex, taskComplete, taskCreate, taskStart, throttleMs, toRefMeta, ttlLabel, walkUpFor };

package/dist/{json-io-CAn72gI4.mjs → json-io-CvSumjtz.mjs}

@@ -1,7 +1,7 @@
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { dirname } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { mkdir } from "node:fs/promises";
 //#region src/util/json-io.ts
 /** Atomically write `data` to `path` (temp + rename, 0o600). Cross-FS safe on macOS/Linux. */
@@ -36,5 +36,9 @@ async function readJsonFile(path) {
 async function writeJsonFile(path, data, compact = false) {
 	atomicWrite(path, compact ? compactJson(data) : JSON.stringify(data, null, 2));
 }
+/** 8-char MD5 of text (cache key; non-cryptographic). Portable Node+Bun. */
+function hashText(text) {
+	return createHash("md5").update(text).digest("hex").slice(0, 8);
+}
 //#endregion
-export { writeJsonFile as i, ensureDir as n, readJsonFile as r, atomicWrite as t };
+export { writeJsonFile as a, readJsonFile as i, ensureDir as n, hashText as r, atomicWrite as t };

package/dist/policy/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "../index-DmbOUJK8.mjs";
+import { $ as APEX_GATES, A as GUARDS, B as TS_DECL_RE, C as SKILL_TRIGGERS, Ct as detectProjectType, D as capVerbosity, E as MAX_TOKENS, F as GO_DECL_RE, G as bashWriteGuard, H as ASK_WRITERS, I as JAVA_DECL_RE, J as ASK_PATTERNS, K as PROTECTED_FRAGMENTS, L as PHP_DECL_RE, M as registerGuard, N as runGuards, O as detectCreationIntent, P as installGuard, Q as GuardContext, R as PY_MODEL_RE, S as skillTriggerGate, St as detectModularArchitecture, T as MAX_EXA_RESULTS, Tt as requiredArchSkill, U as CODE_MUTATORS, V as interfaceSeparationGuard, W as CODE_REDIRECT, X as securityGuard, Y as CRITICAL_PATTERNS, Z as Guard, _ as DEV_VERBS, _t as evaluateFileSize, a as firstHeading, at as freshnessGate, b as detectClaudeMdProjectType, bt as ModularArchitecture, c as parseEntry, ct as PolicyResult, d as EXCLUDE_DIRS, dt as GIT_BLOCKED, et as ApexContext, f as PROJECT_INDICATORS, ft as PROJECT_INSTALL, g as loadApexTaskState, gt as countLines, h as buildApexTaskInjection, ht as FileSizeVerdict, i as firstComment, it as evaluateApex, j as clearUserGuards, k as FAIL_CLOSED, l as parseBodyDesc, lt as evaluate, m as buildApexTaskContext, mt as matchPatterns, n as missingSeoElements, nt as brainstormGate, o as TreeEntry, ot as solidReadGate, p as ApexTaskState, pt as SYSTEM_INSTALL, q as protectedPathGuard, r as descFromText, rt as docConsultedGate, s as parseEnrichment, st as PolicyContext, t as isHtmlLike, tt as ApexGate, u as parseField, ut as GIT_ASK, v as buildApexInstruction, vt as detectFramework, w as frameworkSolidGate, wt as isApexCommand, x as detectRequiredSkills, xt as ProjectType, y as buildClaudeMdContext, yt as DEV_KEYWORDS, z as SWIFT_PROTO_RE } from "../index-QzK2dv0V.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, ApexContext, ApexGate, ApexTaskState, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, Guard, GuardContext, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, ModularArchitecture, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, PolicyContext, PolicyResult, ProjectType, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, TreeEntry, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/policy/index.mjs

@@ -1,4 +1,4 @@
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-CccewDwk.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-9ch1K2kt.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-DLrWtaDR.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-zyxeVZPB.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/{run-CQbtlAKa.mjs → run-CUL70W0k.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "./evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/runtime/index.d.mts

@@ -3,7 +3,32 @@ import { t as RefMeta } from "../types-CY5qT2X1.mjs";
 import { t as AgentQuality } from "../session-state-DxNkIBZ2.mjs";
 
 //#region src/runtime/paths.d.ts
-/** Path to a session's track file (under a per-tool base dir). */
+/**
+* Compute a stable 8-char hex hash for a project directory path.
+* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+*
+* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns 8-char lowercase hex string.
+*/
+declare function projectHash(projectDir?: string): string;
+/**
+* Canonical base directory for per-project harness state.
+* Resolves to: ~/.claude/fuse-harness/state/<projectHash>/
+*
+* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+* @returns Absolute directory path (not yet created on disk).
+*/
+declare function defaultStateDir(projectDir?: string): string;
+/**
+* Absolute path to a session's track JSON file.
+*
+* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+*
+* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+* @param baseDir   - Override the base directory. Omit in production; pass an explicit
+*                    temp path in unit tests to avoid touching $HOME.
+* @returns Absolute path, e.g. ~/.claude/fuse-harness/state/a1b2c3d4/track-abc123.json
+*/
 declare function trackFile(sessionId: string, baseDir?: string): string;
 //#endregion
 //#region src/runtime/storage.d.ts
@@ -69,6 +94,8 @@ interface GateInput {
   windowMs?: number;
   isReplaceAll?: boolean;
   agentType?: string;
+  /** Absolute path to the session transcript (Claude `transcript_path`) for evidence-based freshness. */
+  transcriptPath?: string;
 }
 //#endregion
 //#region src/runtime/gate.d.ts
@@ -678,4 +705,4 @@ interface PreContext {
 */
 declare function handlePre(ctx: PreContext): Promise<HandleOutcome>;
 //#endregion
-export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { $ as detectSolidProfile, A as dispatchLessons, At as activityFor, B as mergeLines, C as securityStateDir, Ct as trackFile, D as dispatchLifecycle, Dt as mcpPostStore, E as trackEnrichment, Et as isMcpTool, F as writePluginMap, G as trackSessionChanges, H as getFileDesc, I as generateProjectMap, J as saveApexState, K as validateRulesLoaded, L as isProject, M as lessonsStateFileFor, N as cartoSessionStart, O as aipilotPostToolUse, Ot as mcpPreIntercept, P as generateEcosystemMap, Q as subagentCacheContext, R as writeTree, S as saveSecurityState, St as recordActivity, T as todayUtc, Tt as MCP_TTL_MS, U as listChildren, V as countFiles, W as postEditTypescript, X as validateTeammateOutput, Y as logToolFailure, Z as trackAgentMemory, _ as trackWatchResearch, _t as sessionStatePath, a as TRIVIAL_BUDGET, at as pruneEmptyDirs, b as isoUtc, bt as taskContext, c as detectDuplication, ct as trimLogFile, d as lifecycleStdout, dt as projectContext, et as solidDetectStart, f as postEditContext, ft as claudeHome, g as postTrackingSideEffects, gt as saveSessionState, h as securityAdvisory, ht as sanitizeSessionId, i as REQUIRED_AGENTS, it as sessionStartCore, j as lessonsFileFor, k as dispatchAipilot, kt as queryOf, l as dryGate, lt as devContext, m as seoPostToolUseResponse, mt as loadSessionState, n as handlePre, nt as readRules, o as gate, ot as purgeTtlTree, p as seoPostToolUse, pt as fusengineCache, q as cleanupSession, r as DEFAULT_WINDOW_MS, rt as runSessionStartCleanups, s as preCommitGate, st as removeOldFiles, t as handleHook, tt as injectRules, u as extractSymbols, ut as gitContext, v as trackMcpResearch, vt as sessionsDir, w as securityStatePath, wt as normalizeEvent, x as loadSecurityState, xt as respond, y as trackSkillRead, yt as promptSubmitContext, z as loadEnriched } from "../handle-Cxgzd4pZ.mjs";
+import { $ as pruneEmptyDirs, A as generateProjectMap, At as saveSessionState, B as validateRulesLoaded, C as dispatchAipilot, Ct as securityStateDir, D as cartoSessionStart, Dt as fusengineCache, E as lessonsStateFileFor, Et as claudeHome, F as countFiles, G as trackAgentMemory, H as saveApexState, I as getFileDesc, J as solidDetectStart, K as subagentCacheContext, L as listChildren, M as writeTree, Mt as sessionsDir, N as loadEnriched, O as generateEcosystemMap, Ot as loadSessionState, P as mergeLines, Q as sessionStartCore, R as postEditTypescript, S as aipilotPostToolUse, St as saveSecurityState, T as lessonsFileFor, Tt as todayUtc, U as logToolFailure, V as cleanupSession, W as validateTeammateOutput, X as readRules, Y as injectRules, Z as runSessionStartCleanups, _ as trackWatchResearch, _t as mcpPreIntercept, a as TRIVIAL_BUDGET, at as projectContext, b as trackEnrichment, bt as isoUtc, c as detectDuplication, ct as respond, d as lifecycleStdout, dt as projectHash, et as purgeTtlTree, f as postEditContext, ft as trackFile, g as postTrackingSideEffects, gt as mcpPostStore, h as securityAdvisory, ht as isMcpTool, i as REQUIRED_AGENTS, it as gitContext, j as isProject, jt as sessionStatePath, k as writePluginMap, kt as sanitizeSessionId, l as dryGate, lt as recordActivity, m as seoPostToolUseResponse, mt as MCP_TTL_MS, n as handlePre, nt as trimLogFile, o as gate, ot as promptSubmitContext, p as seoPostToolUse, pt as normalizeEvent, q as detectSolidProfile, r as DEFAULT_WINDOW_MS, rt as devContext, s as preCommitGate, st as taskContext, t as handleHook, tt as removeOldFiles, u as extractSymbols, ut as defaultStateDir, v as trackMcpResearch, vt as queryOf, w as dispatchLessons, wt as securityStatePath, x as dispatchLifecycle, xt as loadSecurityState, y as trackSkillRead, yt as activityFor, z as trackSessionChanges } from "../handle-CYlA6TeF.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,
@@ -9,4 +9,4 @@ function harnessStateDir(root) {
 	return projectLayout(root).stateDir;
 }
 //#endregion
-export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/state/index.mjs

@@ -1,2 +1,2 @@
-import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "../state-ByhLeKyD.mjs";
+import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "../state-BthKK4Jj.mjs";
 export { acquireLock, apexStateDir, ensureStateDir, loadState, saveState, stateFilePath, taskComplete, taskCreate, taskStart };

package/dist/{state-ByhLeKyD.mjs → state-BthKK4Jj.mjs}

@@ -1,4 +1,4 @@
-import { i as writeJsonFile, n as ensureDir, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, n as ensureDir } from "./json-io-CvSumjtz.mjs";
 import { mkdir, rmdir } from "node:fs/promises";
 //#region src/state/lock.ts
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));

package/dist/store-7j02oGjt.mjs

@@ -0,0 +1,184 @@
+import { a as writeJsonFile, i as readJsonFile } from "./json-io-CvSumjtz.mjs";
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { createHmac, randomBytes } from "node:crypto";
+//#region src/tracking/session-state.ts
+/** A fresh, empty track. */
+function emptyTrack() {
+	return {
+		authorizations: {},
+		refsRead: [],
+		agents: [],
+		trivialEdits: []
+	};
+}
+/** Record a doc consultation (Context7/Exa) for a framework in this session. Immutable. */
+function recordDoc(track, framework, sessionId, source) {
+	const prev = track.authorizations[framework] ?? {};
+	const sessions = new Set(prev.doc_sessions ?? []);
+	sessions.add(sessionId);
+	const sources = new Set(prev.sources ?? (prev.source ? [prev.source] : []));
+	sources.add(source);
+	return {
+		...track,
+		authorizations: {
+			...track.authorizations,
+			[framework]: {
+				...prev,
+				doc_sessions: [...sessions],
+				sources: [...sources]
+			}
+		}
+	};
+}
+/** Record that a SOLID reference file was read (deduped). Immutable. */
+function recordRefRead(track, path) {
+	return track.refsRead.includes(path) ? track : {
+		...track,
+		refsRead: [...track.refsRead, path]
+	};
+}
+/** Record an agent/tool call with a timestamp + optional quality. Immutable. */
+function recordAgent(track, name, ts, quality) {
+	const entry = quality ? {
+		name,
+		ts,
+		quality
+	} : {
+		name,
+		ts
+	};
+	return {
+		...track,
+		agents: [...track.agents, entry]
+	};
+}
+/** True when ALL of `names` ran within `windowMs` with non-insufficient quality. */
+function agentsFresh(track, names, windowMs, now) {
+	const cutoff = now - windowMs;
+	return names.every((n) => track.agents.some((a) => a.name === n && a.ts > cutoff && a.quality !== "insufficient"));
+}
+/** Record a trivial edit timestamp (sliding window; old evicted). Immutable. */
+function recordTrivialEdit(track, ts, windowMs, now) {
+	const cutoff = now - windowMs;
+	return {
+		...track,
+		trivialEdits: [...(track.trivialEdits ?? []).filter((t) => t > cutoff), ts]
+	};
+}
+/** Count trivial edits within the sliding window. */
+function trivialCount(track, windowMs, now) {
+	const cutoff = now - windowMs;
+	return (track.trivialEdits ?? []).filter((t) => t > cutoff).length;
+}
+/** Set the brainstorm-required flag (from creation-intent detection). Immutable. */
+function recordBrainstormRequired(track, required) {
+	return {
+		...track,
+		brainstormRequired: required
+	};
+}
+//#endregion
+//#region src/tracking/integrity.ts
+/**
+* @module integrity
+* HMAC-SHA256 tamper-evident wrapping for {@link SessionTrack}.
+*
+* Failure policy: ONLY a MAC mismatch causes fail-closed (returns null).
+* The nonce is included in the signed payload and written to disk for advisory
+* diagnostics, but is NOT checked during verification — concurrent hook
+* invocations (PostToolUse, SubagentStop, …) legitimately load the same
+* envelope after the nonce watermark advances; a monotonic check would trigger
+* spurious fail-closed behaviour mid-session.
+*
+* The machine key is readable by the same agent process, so this deters naive
+* out-of-band tampering — not a determined re-sign. Item B (transcript-grounded
+* freshness) is the primary guarantee.
+* @packageDocumentation
+*/
+const HARNESS_DIR = join(homedir(), ".claude", "fuse-harness");
+const KEY_PATH = join(HARNESS_DIR, ".key");
+const NONCE_PATH = join(HARNESS_DIR, ".nonce");
+/** Load (or create on first use) the per-machine HMAC key stored at mode 0600. */
+function loadOrCreateKey() {
+	mkdirSync(HARNESS_DIR, { recursive: true });
+	if (!existsSync(KEY_PATH)) {
+		const key = randomBytes(32).toString("hex");
+		writeFileSync(KEY_PATH, key, {
+			encoding: "utf8",
+			mode: 384
+		});
+		return key;
+	}
+	return readFileSync(KEY_PATH, "utf8").trim();
+}
+/**
+* Persist the last-seen nonce for advisory diagnostics (mode 0600).
+* Never read during {@link verifyTrack} — see module JSDoc for rationale.
+*/
+function writeLastNonce(nonce) {
+	mkdirSync(HARNESS_DIR, { recursive: true });
+	writeFileSync(NONCE_PATH, String(nonce), {
+		encoding: "utf8",
+		mode: 384
+	});
+}
+/** Compute HMAC-SHA256 over the canonical message `"${nonce}:${data}"`. */
+function computeMac(key, data, nonce) {
+	return createHmac("sha256", key).update(`${nonce}:${data}`).digest("hex");
+}
+/**
+* Sign a {@link SessionTrack} into a tamper-evident envelope. The nonce
+* (`Date.now()`) is embedded in the MAC to bind the timestamp to the payload.
+*/
+function signTrack(track) {
+	const key = loadOrCreateKey();
+	const data = JSON.stringify(track);
+	const nonce = Date.now();
+	return {
+		data,
+		nonce,
+		mac: computeMac(key, data, nonce)
+	};
+}
+/**
+* Verify a {@link TrackEnvelope}. Returns the parsed {@link SessionTrack} on
+* success, or `null` ONLY on MAC mismatch / parse failure (fail-closed on
+* tampering). The nonce is NOT checked — see module JSDoc.
+*/
+function verifyTrack(envelope) {
+	try {
+		const key = loadOrCreateKey();
+		if (envelope.mac !== computeMac(key, envelope.data, envelope.nonce)) return null;
+		return JSON.parse(envelope.data);
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/tracking/store.ts
+/**
+* Load and verify a session track from a signed envelope file.
+*
+* Returns {@link emptyTrack} (fail closed) when the file is absent, corrupt, or
+* fails MAC validation — so the gates re-require real agents rather than trust a
+* forged track. Only a MAC mismatch triggers fail-closed; the nonce is advisory
+* and is never checked during load.
+*/
+async function loadTrack(file) {
+	const envelope = await readJsonFile(file);
+	if (!envelope) return emptyTrack();
+	return verifyTrack(envelope) ?? emptyTrack();
+}
+/**
+* Sign and persist a session track as a tamper-evident envelope, then write the
+* advisory nonce watermark.
+*/
+async function saveTrack(file, track) {
+	const envelope = signTrack(track);
+	await writeJsonFile(file, envelope);
+	writeLastNonce(envelope.nonce);
+}
+//#endregion
+export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };

package/dist/tracking/index.d.mts

@@ -1,9 +1,19 @@
 import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as SessionTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as AgentQuality, u as trivialCount } from "../session-state-DxNkIBZ2.mjs";
 
 //#region src/tracking/store.d.ts
-/** Load a session track from a file (an empty track if absent/corrupt). */
+/**
+* Load and verify a session track from a signed envelope file.
+*
+* Returns {@link emptyTrack} (fail closed) when the file is absent, corrupt, or
+* fails MAC validation — so the gates re-require real agents rather than trust a
+* forged track. Only a MAC mismatch triggers fail-closed; the nonce is advisory
+* and is never checked during load.
+*/
 declare function loadTrack(file: string): Promise<SessionTrack>;
-/** Persist a session track. */
+/**
+* Sign and persist a session track as a tamper-evident envelope, then write the
+* advisory nonce watermark.
+*/
 declare function saveTrack(file: string, track: SessionTrack): Promise<void>;
 //#endregion
 export { AgentQuality, SessionTrack, agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-D-ge2ZPI.mjs";
+import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-7j02oGjt.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/{validate-CccewDwk.mjs → validate-DLrWtaDR.mjs}

@@ -1,5 +1,5 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { k as countLines } from "./evaluate-9ch1K2kt.mjs";
+import { k as countLines } from "./evaluate-zyxeVZPB.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
 import { t as routeReferences } from "./router-D8cVrI-s.mjs";
 import { join } from "node:path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.33",
+  "version": "0.1.35",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",

package/dist/store-D-ge2ZPI.mjs

@@ -1,89 +0,0 @@
-import { i as writeJsonFile, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
-//#region src/tracking/session-state.ts
-/** A fresh, empty track. */
-function emptyTrack() {
-	return {
-		authorizations: {},
-		refsRead: [],
-		agents: [],
-		trivialEdits: []
-	};
-}
-/** Record a doc consultation (Context7/Exa) for a framework in this session. Immutable. */
-function recordDoc(track, framework, sessionId, source) {
-	const prev = track.authorizations[framework] ?? {};
-	const sessions = new Set(prev.doc_sessions ?? []);
-	sessions.add(sessionId);
-	const sources = new Set(prev.sources ?? (prev.source ? [prev.source] : []));
-	sources.add(source);
-	return {
-		...track,
-		authorizations: {
-			...track.authorizations,
-			[framework]: {
-				...prev,
-				doc_sessions: [...sessions],
-				sources: [...sources]
-			}
-		}
-	};
-}
-/** Record that a SOLID reference file was read (deduped). Immutable. */
-function recordRefRead(track, path) {
-	return track.refsRead.includes(path) ? track : {
-		...track,
-		refsRead: [...track.refsRead, path]
-	};
-}
-/** Record an agent/tool call with a timestamp + optional quality. Immutable. */
-function recordAgent(track, name, ts, quality) {
-	const entry = quality ? {
-		name,
-		ts,
-		quality
-	} : {
-		name,
-		ts
-	};
-	return {
-		...track,
-		agents: [...track.agents, entry]
-	};
-}
-/** True when ALL of `names` ran within `windowMs` with non-insufficient quality. */
-function agentsFresh(track, names, windowMs, now) {
-	const cutoff = now - windowMs;
-	return names.every((n) => track.agents.some((a) => a.name === n && a.ts > cutoff && a.quality !== "insufficient"));
-}
-/** Record a trivial edit timestamp (sliding window; old evicted). Immutable. */
-function recordTrivialEdit(track, ts, windowMs, now) {
-	const cutoff = now - windowMs;
-	return {
-		...track,
-		trivialEdits: [...(track.trivialEdits ?? []).filter((t) => t > cutoff), ts]
-	};
-}
-/** Count trivial edits within the sliding window. */
-function trivialCount(track, windowMs, now) {
-	const cutoff = now - windowMs;
-	return (track.trivialEdits ?? []).filter((t) => t > cutoff).length;
-}
-/** Set the brainstorm-required flag (from creation-intent detection). Immutable. */
-function recordBrainstormRequired(track, required) {
-	return {
-		...track,
-		brainstormRequired: required
-	};
-}
-//#endregion
-//#region src/tracking/store.ts
-/** Load a session track from a file (an empty track if absent/corrupt). */
-async function loadTrack(file) {
-	return await readJsonFile(file) ?? emptyTrack();
-}
-/** Persist a session track. */
-async function saveTrack(file, track) {
-	await writeJsonFile(file, track);
-}
-//#endregion
-export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };