@fusengine/harness 0.1.39 → 0.1.41

package/README.md

@@ -26,7 +26,9 @@ bun add @fusengine/harness      # Bun reads the TS source directly — no build
 ```sh
 cd your-project
 harness init                              # detects the harness, writes its pre+post hooks
-export FUSE_HARNESS_REFS=.claude/skills   # (optional) activate the SOLID-read gate
+# The SOLID-read gate auto-activates from discovered skills (default marketplace: fusengine-plugins).
+export FUSE_HARNESS_MARKETPLACES=fusengine-plugins   # (optional) which marketplaces to auto-scan
+export FUSE_HARNESS_REFS=.claude/skills              # (optional) explicit refs dir, overrides auto-discovery
 ```
 
 That's it. `init` writes the wiring file for the detected harness
@@ -65,8 +67,8 @@ Ten portable guards + the APEX gate chain, all evaluated before a tool runs:
 | interface-separation | top-level interface/type/protocol in a component/controller |
 | protected-path | edits to `.claude/plugins\|logs\|cache`, `.git/` |
 | APEX freshness | `explore-codebase` + `research-expert` not run within the window |
-| APEX doc-consulted | Context7 **and** Exa not consulted this session |
-| APEX solid-read | required SOLID refs (from `FUSE_HARNESS_REFS`) not read |
+| APEX doc-consulted | no doc source (Context7 / Exa / fuse-browser / WebSearch / WebFetch) consulted this session |
+| APEX solid-read | required SOLID refs (auto-discovered, or `FUSE_HARNESS_REFS`) not read |
 | brainstorm | creating a new file without brainstorming (when flagged) |
 | MCP verbosity / cache | caps exa `numResults`; serves a fresh cached MCP/WebFetch result |
 
@@ -78,7 +80,8 @@ through per window without the full APEX gates.
 | Var | Effect |
 |---|---|
 | `FUSE_SOLID_MAX_LINES` | SOLID file-size limit (default `100`). |
-| `FUSE_HARNESS_REFS` | Directory of `.md` SOLID references → activates `solidReadGate`. |
+| `FUSE_HARNESS_REFS` | Explicit `path.delimiter`-list of `.md` SOLID-reference dirs → activates `solidReadGate`. Overrides auto-discovery. |
+| `FUSE_HARNESS_MARKETPLACES` | Comma-list of marketplace names whose `solid-*` skill refs are auto-discovered when `FUSE_HARNESS_REFS` is unset (default `fusengine-plugins`; an absent marketplace contributes nothing). Standalone `.claude`/`.codex`/`.cursor`/`.agents` skills are always scanned. |
 | `FUSE_ENFORCE_TTL_SEC` | APEX freshness window in seconds. |
 | `FUSE_LESSONS_THROTTLE_MIN` | Lessons-injection throttle (memory module). |
 

package/dist/adapters/claude/index.d.mts

@@ -1,2 +1,2 @@
-import { a as guard, i as fileSizeGuard, n as contextResponse, o as readClaudeInput, r as denyResponse, s as toClaudeResponse, t as ClaudeHookInput } from "../../index-FrWgmkbP.mjs";
-export { ClaudeHookInput, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };
+import { a as fileSizeGuard, c as toClaudeResponse, i as denyResponse, n as blockResponse, o as guard, r as contextResponse, s as readClaudeInput, t as ClaudeHookInput } from "../../index-CwOdFBOr.mjs";
+export { ClaudeHookInput, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-ZgTC5yDS.mjs";
-export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };
+import { a as guard, i as fileSizeGuard, n as contextResponse, o as readClaudeInput, r as denyResponse, s as toClaudeResponse, t as blockResponse } from "../../claude-BnFrSfMo.mjs";
+export { blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "../../evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.d.mts

@@ -1,2 +1,2 @@
-import { a as guard, n as contextResponse, o as readClaudeInput, r as denyResponse, t as ClaudeHookInput } from "../../index-FrWgmkbP.mjs";
+import { i as denyResponse, o as guard, r as contextResponse, s as readClaudeInput, t as ClaudeHookInput } from "../../index-CwOdFBOr.mjs";
 export { type ClaudeHookInput as CodexHookInput, contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/codex/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-ZgTC5yDS.mjs";
+import { a as guard, n as contextResponse, o as readClaudeInput, r as denyResponse } from "../../claude-BnFrSfMo.mjs";
 export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "../../evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "../../evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/cache/index.d.mts

@@ -1,2 +1,2 @@
-import { a as extractText, c as summarizeIndex, d as queryHash, i as mcpCacheKey, l as compactMarkdown, n as cachePath, o as IndexSummary, r as cacheStore, s as loadIndex, t as cacheLookup, u as jaccardSimilar } from "../index-DPkCX_AR.mjs";
-export { IndexSummary, cacheLookup, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, queryHash, summarizeIndex };
+import { a as mcpCacheKey, c as extractText, d as summarizeIndex, f as compactMarkdown, i as cacheStore, l as IndexSummary, m as queryHash, n as cacheLookupSubstring, o as mcpCacheWrite, p as jaccardSimilar, r as cachePath, s as webfetchCacheWrite, t as cacheLookup, u as loadIndex } from "../index-BX-xcvhY.mjs";
+export { IndexSummary, cacheLookup, cacheLookupSubstring, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, mcpCacheWrite, queryHash, summarizeIndex, webfetchCacheWrite };

package/dist/cache/index.mjs

@@ -1,3 +1,3 @@
-import { n as jaccardSimilar, r as queryHash, t as compactMarkdown } from "../cache-C9z9LclL.mjs";
-import { a as extractText, i as mcpCacheKey, n as cachePath, o as loadIndex, r as cacheStore, s as summarizeIndex, t as cacheLookup } from "../store-PrNPm6So.mjs";
-export { cacheLookup, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, queryHash, summarizeIndex };
+import { a as cachePath, c as extractText, d as compactMarkdown, f as jaccardSimilar, i as cacheLookupSubstring, l as loadIndex, n as webfetchCacheWrite, o as cacheStore, p as queryHash, r as cacheLookup, s as mcpCacheKey, t as mcpCacheWrite, u as summarizeIndex } from "../mcp-store-CDUVqtJ0.mjs";
+import "../cache-la_KkjCS.mjs";
+export { cacheLookup, cacheLookupSubstring, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, mcpCacheWrite, queryHash, summarizeIndex, webfetchCacheWrite };

package/dist/cache-la_KkjCS.mjs

@@ -0,0 +1 @@
+export {};

package/dist/{claude-ZgTC5yDS.mjs → claude-BnFrSfMo.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "./evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
@@ -87,7 +87,7 @@ async function readClaudeInput() {
 		return {};
 	}
 }
-/** A `deny` hook response for a given event. */
+/** A `deny` hook response for a given event. PreToolUse-only field. */
 function denyResponse(event, reason) {
 	return JSON.stringify({ hookSpecificOutput: {
 		hookEventName: event,
@@ -95,6 +95,20 @@ function denyResponse(event, reason) {
 		permissionDecisionReason: reason
 	} });
 }
+/**
+* A PostToolUse (and Stop/UserPromptSubmit) `block` response. These events
+* ignore `hookSpecificOutput.permissionDecision` (a PreToolUse-only field) and
+* only honor the top-level `decision`/`reason` keys, which feed the reason back
+* to Claude as automated feedback.
+* @param reason - The block feedback shown to Claude.
+* @returns The native `{decision:"block",reason}` response string.
+*/
+function blockResponse(reason) {
+	return JSON.stringify({
+		decision: "block",
+		reason
+	});
+}
 /** An `additionalContext` injection response. */
 function contextResponse(event, text) {
 	return JSON.stringify({ hookSpecificOutput: {
@@ -134,4 +148,4 @@ function guard(input) {
 /** @deprecated use {@link guard}. Kept for back-compat. */
 const fileSizeGuard = guard;
 //#endregion
-export { readClaudeInput as a, pathExists as c, spawnCapture as d, writeText as f, guard as i, readText as l, denyResponse as n, toClaudeResponse as o, fileSizeGuard as r, collectFiles as s, contextResponse as t, sleep as u };
+export { guard as a, collectFiles as c, sleep as d, spawnCapture as f, fileSizeGuard as i, pathExists as l, contextResponse as n, readClaudeInput as o, writeText as p, denyResponse as r, toClaudeResponse as s, blockResponse as t, readText as u };

package/dist/cli/bin.mjs

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
-import { n as loadDotenv, o as resolveTtlSec } from "../dotenv-TLNMiSjP.mjs";
+import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
+import { r as loadDotenv } from "../dotenv-DGyLln7U.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-DOARDruz.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D-Ydrw3D.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { Dt as claudeHome, Et as todayUtc, t as handleHook } from "../handle-t-lQuQc7.mjs";
-import { join } from "node:path";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { Ot as todayUtc, kt as claudeHome, t as handleHook } from "../handle-VhWQxvyN.mjs";
+import { delimiter, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/changelog/fetch.ts
 /**
@@ -75,6 +76,67 @@ async function scanChangelog(now = Date.now(), home = homedir()) {
 	};
 }
 //#endregion
+//#region src/refs/discover.ts
+/** Immediate subdirectory names of `p`, or `[]` when it is missing/inaccessible. */
+function subdirs(p) {
+	try {
+		return readdirSync(p, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+	} catch {
+		return [];
+	}
+}
+/**
+* Every `skills/` parent dir across the Open-Agent-Skills layouts
+* (agentskills.io) of Claude Code, Codex and Cursor: the standalone skill roots
+* (`<base>/{.claude,.codex,.cursor,.agents}/skills` + `/etc/codex/skills`) plus
+* installed-plugin roots (`<plugin>/skills` under the Claude marketplace and the
+* Claude/Codex version caches). Shallow `readdir` only — no deep walk — so it is
+* cheap enough to run on every hook.
+*/
+function skillParents(home, cwd, marketplaces) {
+	const out = [];
+	for (const base of [cwd, home]) for (const tool of [
+		".claude",
+		".codex",
+		".cursor",
+		".agents"
+	]) out.push(join(base, tool, "skills"));
+	out.push(join("/etc", "codex", "skills"));
+	const mktRoot = join(home, ".claude", "plugins", "marketplaces");
+	for (const mkt of subdirs(mktRoot)) {
+		if (!marketplaces.includes(mkt)) continue;
+		const pluginsDir = join(mktRoot, mkt, "plugins");
+		for (const plugin of subdirs(pluginsDir)) out.push(join(pluginsDir, plugin, "skills"));
+	}
+	for (const cacheRoot of [join(home, ".claude", "plugins", "cache"), join(home, ".codex", "plugins", "cache")]) for (const mkt of subdirs(cacheRoot)) {
+		if (!marketplaces.includes(mkt)) continue;
+		for (const plugin of subdirs(join(cacheRoot, mkt))) for (const ver of subdirs(join(cacheRoot, mkt, plugin))) out.push(join(cacheRoot, mkt, plugin, ver, "skills"));
+	}
+	return out;
+}
+/**
+* Auto-discover SOLID reference dirs (`<skill>/references` for every `solid-*`
+* skill) across the Claude/Codex/Cursor skill layouts — the fallback used when
+* `FUSE_HARNESS_REFS` is unset. Deduped by skill name (first source wins, so a
+* marketplace skill shadows its version-cache copy). Returns a path-delimiter
+* list, or `""` when none is found — with no refs the SOLID-read gate stays off.
+* @param home - User home dir (`os.homedir()`).
+* @param cwd - Current project dir (`process.cwd()`).
+* @param marketplaces - Allowlist of marketplace names to scan (env
+*   `FUSE_HARNESS_MARKETPLACES`, default `["fusengine-plugins"]`); a marketplace
+*   absent from disk simply contributes nothing. Standalone
+*   `.claude`/`.codex`/`.cursor`/`.agents` skill roots are always scanned.
+* @returns A `path.delimiter`-joined list of `references` dirs, or `""`.
+*/
+function discoverRefs(home, cwd, marketplaces) {
+	const bySkill = /* @__PURE__ */ new Map();
+	for (const parent of skillParents(home, cwd, marketplaces)) for (const skill of subdirs(parent)) {
+		if (!skill.startsWith("solid-") || bySkill.has(skill)) continue;
+		if (subdirs(join(parent, skill)).includes("references")) bySkill.set(skill, join(parent, skill, "references"));
+	}
+	return [...bySkill.values()].join(delimiter);
+}
+//#endregion
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.
@@ -111,10 +173,12 @@ if (cmd === "hook") {
 		"seo",
 		"memory"
 	])).has(scopeArg) ? scopeArg : "core";
+	const marketplaces = (process.env.FUSE_HARNESS_MARKETPLACES ?? "fusengine-plugins").split(",").map((s) => s.trim()).filter(Boolean);
+	const refsDir = process.env.FUSE_HARNESS_REFS || discoverRefs(homedir(), process.cwd(), marketplaces) || void 0;
 	const outcome = await handleHook(id, await readStdin(), {
 		now: Date.now(),
 		cwd: process.cwd(),
-		refsDir: process.env.FUSE_HARNESS_REFS,
+		refsDir,
 		windowMs: resolveTtlSec(process.env) * 1e3,
 		scope
 	});

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-DOARDruz.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D-Ydrw3D.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/config/index.d.mts

@@ -1,2 +1,2 @@
-import { a as STATE_GITIGNORE, c as DEFAULT_MAX_LINES, d as splitTarget, f as DEFAULT_TTL_SEC, g as parseEnvInt, h as ttlLabel, i as ProjectLayout, l as MAX_LINES_ENV_KEY, m as resolveTtlSec, n as loadDotenv, o as STATE_ROOT, p as TTL_ENV_KEY, r as parseEnvFile, s as projectLayout, t as envCandidates, u as resolveMaxLines } from "../index-DLUfyYmU.mjs";
-export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, MAX_LINES_ENV_KEY, ProjectLayout, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };
+import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "../index-COBvvc3L.mjs";
+export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, ProjectLayout, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };

package/dist/config/index.mjs

@@ -1,5 +1,6 @@
 import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "../limits-CHn8AIL1.mjs";
-import { a as TTL_ENV_KEY, i as DEFAULT_TTL_SEC, n as loadDotenv, o as resolveTtlSec, r as parseEnvFile, s as ttlLabel, t as envCandidates } from "../dotenv-TLNMiSjP.mjs";
+import { i as ttlLabel, n as TTL_ENV_KEY, r as resolveTtlSec, t as DEFAULT_TTL_SEC } from "../ttl-BG55s6HZ.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "../layout-C0jaaCQC.mjs";
+import { i as parseEnvFile, n as envCandidates, r as loadDotenv, t as HOME_DIR } from "../dotenv-DGyLln7U.mjs";
 import "../config-la_KkjCS.mjs";
-export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };
+export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };

package/dist/{doc-helpers-Dd_x1-tZ.mjs → doc-helpers-BhzDmJ18.mjs}

@@ -11,20 +11,22 @@ function sessionAuthsFor(authorizations, sessionId) {
 function evaluateDoc(auths) {
 	const sources = auths.flatMap((a) => a.sources ?? [a.source ?? ""]);
 	const readPaths = auths.flatMap((a) => a.read_paths ?? []);
-	const liveC7 = sources.some((s) => /context7/.test(s));
-	const liveExa = sources.some((s) => /exa/.test(s));
+	const liveC7 = sources.some((s) => /context7/i.test(s));
+	const liveExa = sources.some((s) => /exa/i.test(s));
+	const liveWeb = sources.some((s) => /web(search|fetch)|fuse-browser/i.test(s));
 	const cacheC7 = readPaths.some((p) => /\/context\/mcp\/context7-/.test(p));
 	const cacheExa = readPaths.some((p) => /\/context\/mcp\/(exa-search|exa-code-context)-/.test(p));
 	return {
 		context7: liveC7 || cacheC7,
 		exa: liveExa || cacheExa,
+		web: liveWeb,
 		viaCache: !liveC7 && cacheC7 || !liveExa && cacheExa
 	};
 }
-/** True when BOTH Context7 and Exa were satisfied for the session. */
+/** True when ANY documentation source (Context7, Exa, or web) was satisfied for the session. */
 function isDocConsulted(authorizations, sessionId) {
 	const s = evaluateDoc(sessionAuthsFor(authorizations, sessionId));
-	return s.context7 && s.exa;
+	return s.context7 || s.exa || s.web;
 }
 /** Report how each doc source was satisfied for a session. */
 function formatDocSatisfactionStatus(authorizations, sessionId) {
@@ -34,8 +36,8 @@ function formatDocSatisfactionStatus(authorizations, sessionId) {
 function formatDocDeny(framework) {
 	return [
 		`APEX: Online documentation not consulted for ${framework}!`,
-		"Use BOTH: 1) mcp__context7__query-docs AND 2) mcp__exa__web_search_exa.",
-		"This check is once per session — after consulting both, Write/Edit will be allowed."
+		"Use ANY ONE of: mcp__context7__query-docs, mcp__exa__web_search_exa (or — if Exa is down — mcp__fuse-browser__browser_fetch / browser_crawl / browser_serp_batch), WebSearch, or WebFetch.",
+		"This check is once per session — after consulting one source, Write/Edit will be allowed."
 	].join("\n");
 }
 //#endregion

package/dist/{doc-helpers-CG1nuf-c.d.mts → doc-helpers-D14nkD5D.d.mts}

@@ -1,7 +1,8 @@
 //#region src/freshness/doc-helpers.d.ts
 /**
-* Documentation-consultation freshness: was Context7 AND Exa consulted this
-* session (via live MCP query, or a Read on a cached MCP result file)?
+* Documentation-consultation freshness: was ANY documentation source consulted
+* this session — Context7, Exa, or WebSearch/WebFetch — via a live call or a
+* Read on a cached MCP result file?
 */
 /** Authorization entry from APEX state (legacy session + new sessions[]). */
 interface AuthEntry {
@@ -18,9 +19,10 @@ declare function resolveSessions(auth: AuthEntry | undefined): string[];
 interface DocSatisfactionStatus {
   context7: boolean;
   exa: boolean;
+  web: boolean;
   viaCache: boolean;
 }
-/** True when BOTH Context7 and Exa were satisfied for the session. */
+/** True when ANY documentation source (Context7, Exa, or web) was satisfied for the session. */
 declare function isDocConsulted(authorizations: Record<string, AuthEntry> | undefined, sessionId: string): boolean;
 /** Report how each doc source was satisfied for a session. */
 declare function formatDocSatisfactionStatus(authorizations: Record<string, AuthEntry> | undefined, sessionId: string): DocSatisfactionStatus;

package/dist/{dotenv-TLNMiSjP.mjs → dotenv-DGyLln7U.mjs}

@@ -1,25 +1,6 @@
-import { a as parseEnvInt } from "./limits-CHn8AIL1.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
-//#region src/config/ttl.ts
-/** Default enforcement-freshness window, in seconds (2 minutes). */
-const DEFAULT_TTL_SEC = 120;
-/** Default env var name carrying the TTL override. */
-const TTL_ENV_KEY = "FUSE_ENFORCE_TTL_SEC";
-/**
-* Resolve the enforcement TTL (seconds) from an env map.
-* @param env - environment map (defaults to `process.env`)
-* @param key - env var name (defaults to `FUSE_ENFORCE_TTL_SEC`)
-*/
-function resolveTtlSec(env = process.env, key = TTL_ENV_KEY) {
-	return parseEnvInt(env[key], 120);
-}
-/** Human label for a TTL: 120 -> "2min", 240 -> "4min", 90 -> "90s". */
-function ttlLabel(sec) {
-	return sec % 60 === 0 ? `${sec / 60}min` : `${sec}s`;
-}
-//#endregion
 //#region src/config/dotenv.ts
 /**
 * Native .env loader. Ports the claude-plugins `services/env-file.ts`
@@ -71,4 +52,4 @@ function loadDotenv(id, env = process.env, home = homedir(), cwd = process.cwd()
 	for (const path of envCandidates(id, home, cwd)) for (const [k, v] of Object.entries(parseEnvFile(path))) if (env[k] === void 0) env[k] = v;
 }
 //#endregion
-export { TTL_ENV_KEY as a, DEFAULT_TTL_SEC as i, loadDotenv as n, resolveTtlSec as o, parseEnvFile as r, ttlLabel as s, envCandidates as t };
+export { parseEnvFile as i, envCandidates as n, loadDotenv as r, HOME_DIR as t };

package/dist/{evaluate-za4vT-p7.mjs → evaluate-B1n1ti0N.mjs}

@@ -23,20 +23,14 @@ function detectFramework(filePath, content) {
 //#endregion
 //#region src/policy/file-size.ts
 /**
-* Count substantive (code-only) lines — blank lines and comment-only lines
-* (`//`, `*`, `/*` block-comment bodies) don't count toward the SOLID limit, so a
-* well-documented file isn't penalized for its JSDoc. (`#` is intentionally NOT
-* skipped: it is code in Rust `#[derive]` and C `#include`, not a comment.)
+* Count physical lines — parity with the Python `enforce-file-size.py`
+* (`sum(1 for _ in f)`): every line counts (blanks and comments included), and a
+* single trailing newline does not add a phantom line. The SOLID ceiling is
+* measured on raw file length, not substantive code, to match the upstream plugin.
 */
 function countLines(content) {
 	if (content === "") return 0;
-	let n = 0;
-	for (const line of content.split("\n")) {
-		const s = line.trim();
-		if (!s || s.startsWith("//") || s.startsWith("*") || s.startsWith("/*")) continue;
-		n++;
-	}
-	return n;
+	return content.split("\n").length - (content.endsWith("\n") ? 1 : 0);
 }
 /**
 * Evaluate a file's line count against the SOLID limit.
@@ -135,21 +129,21 @@ const CRITICAL_PATTERNS = [
 	/\bfdisk\b/,
 	/\bdiskutil\s+(?:erase|partitionDisk)/i,
 	/(?:>|>>)\s*\/dev\/(?:sda|hda|nvme)/,
-	/\brm\s+(?:-[a-z]*\s+)*-[a-z]*[rf][a-z]*\s+(?:-[a-z]+\s+)*\/(?:etc|usr|var|bin|sbin|boot|lib)\b/
+	/\brm\s+(?:-[a-z]*\s+)*-[a-z]*[rf][a-z]*\s+(?:-[a-z]+\s+)*\/(?:etc|usr|var|bin|sbin|boot|lib)\b/,
+	/(?:^|[\s;|&])sudo(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])su(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])doas(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])passwd(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])del(?:[\s;|&]|$)/
 ];
 /** Patterns that warrant explicit confirmation before running. */
 const ASK_PATTERNS = [
-	/\bsudo\s/,
 	/\bchmod\s+(?:-[a-zA-Z]+\s+)*777\b/,
 	/\bchown\s+-R\b/,
 	/\beval\s/,
 	/(?:>|>>|\btee\b)\s*\/etc\//,
-	/\bsu\s/,
-	/\bdoas\s/,
-	/\bpasswd\b/,
 	/\brm\s/,
-	/\bunlink\s/,
-	/\bdel\s/
+	/\bunlink\s/
 ];
 /**
 * Strip heredoc bodies so their content isn't matched as a command (false positives).
@@ -179,7 +173,7 @@ function securityGuard(ctx) {
 	for (const re of CRITICAL_PATTERNS) if (re.test(cmd)) return {
 		kind: "block",
 		title: "Dangerous command",
-		reason: "Command matches a destructive pattern (recursive root delete, fork bomb, remote-script piped to a shell, world-writable root, filesystem format, or disk overwrite).",
+		reason: "Command matches a destructive pattern (recursive root delete, fork bomb, remote-script piped to a shell, world-writable root, filesystem format, disk overwrite, or privilege escalation: sudo/su/doas/passwd).",
 		actions: ["Remove the destructive command", "Scope the operation to a specific safe path"]
 	};
 	for (const re of ASK_PATTERNS) if (re.test(cmd)) return {
@@ -192,17 +186,28 @@ function securityGuard(ctx) {
 }
 //#endregion
 //#region src/policy/guards/protected-path.ts
-/** Path fragments that mark a location as internal/generated state. */
+/**
+* Path fragments that mark a location as internal/generated state.
+*
+* Parity with safe_paths.py: `~/.claude/fusengine-cache` is a *writable* cache
+* the harness owns (lessons, MCP cache, per-type state) — only the
+* `fusengine-cache/sessions` subtree is protected, not the whole cache.
+*/
 const PROTECTED_FRAGMENTS = [
 	".claude/plugins/marketplaces",
 	".claude/plugins/cache",
 	".claude/logs/00-apex",
-	".claude/fusengine-cache",
-	".git/",
+	".claude/fusengine-cache/sessions",
 	".claude/apex/",
 	".harness/track",
 	".harness/memory/state"
 ];
+/**
+* Matches a real `.git` directory segment (`/.git/`, `~/.git`, leading or
+* trailing `.git`) without matching unrelated names like `foo.git/` or
+* `.github/`. Kept separate from the substring fragments for precise scoping.
+*/
+const PROTECTED_GIT_RE = /(?:^|[/~\s])\.git(?:\/|$)/;
 /** Standard block response for any protected-path violation. */
 const BLOCK = {
 	kind: "block",
@@ -210,29 +215,48 @@ const BLOCK = {
 	reason: "This is internal/generated enforcement state — do not edit it directly.",
 	actions: ["Edit the source, not the generated/cache/state copy"]
 };
-/** Returns true if `str` contains any protected fragment. */
+/** Returns true if `str` references a protected fragment or a real `.git` segment. */
 function containsProtected(str) {
-	return PROTECTED_FRAGMENTS.some((f) => str.includes(f));
+	return PROTECTED_FRAGMENTS.some((f) => str.includes(f)) || PROTECTED_GIT_RE.test(str);
+}
+/** Strips surrounding quotes from a captured shell token. */
+function unquote(t) {
+	return t.replace(/^['"]|['"]$/g, "");
 }
 /**
-* Returns true if `cmd` contains a recognisable shell write operation.
+* Extracts the genuine write *targets* of a shell command, so a protected path
+* appearing only as a *read source* (e.g. `grep x .claude/apex/ > out.txt`,
+* `cat .git/config > /dev/null`) is not mistaken for a write.
 *
-* Best-effort: matches `>` / `>>` redirections, `tee`, `cp`, `mv`, `dd`, `sed -i`.
-* Obfuscated shell (base64-decoded payloads, variable indirection, process
-* substitution) can still evade this check — residual risk, documented. The
-* real guarantee against a forged track is the transcript-grounded freshness
-* gate (see `freshness/agent-evidence`), not this guard.
+* Covers `>` / `>>` redirects (skipping `2>`, `&>`, `1>` fd-redirects and
+* `/dev/null`), `tee`, `dd of=`, and the destination / in-place file of
+* `cp` / `mv` / `sed -i` / `perl -i` (last path token of the segment).
+* Best-effort: obfuscated shell (base64, indirection, process substitution)
+* can still evade this — residual risk, mitigated by the freshness gate.
 */
-function bashHasWriteOp(cmd) {
-	return />/.test(cmd) || /\btee\b/.test(cmd) || /\bcp\b/.test(cmd) || /\bmv\b/.test(cmd) || /\bdd\b/.test(cmd) || /\bsed\s+-[a-zA-Z]*i/.test(cmd);
+function extractWriteTargets(cmd) {
+	const out = [];
+	const push = (t) => {
+		const v = unquote((t ?? "").trim());
+		if (v && v !== "/dev/null") out.push(v);
+	};
+	for (const m of cmd.matchAll(/(?<![2&\d])>{1,2}\s*('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const m of cmd.matchAll(/\btee\b(?:\s+-\S+)*\s+('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const m of cmd.matchAll(/\bdd\b[^|;&]*\bof=('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const seg of cmd.split(/[;&|]+/)) {
+		if (!/\b(?:cp|mv)\b|\b(?:sed|perl)\b[^|;&]*\s-i/.test(seg)) continue;
+		const toks = (seg.split(/[<>]/)[0] ?? "").trim().split(/\s+/).filter((t) => Boolean(t) && !t.startsWith("-"));
+		push(toks[toks.length - 1]);
+	}
+	return out;
 }
 /**
 * Blocks direct edits to internal/generated state directories.
 *
 * Covers:
 *  - Write / Edit tool calls whose `filePath` targets a protected fragment.
-*  - Bash commands that both reference a protected fragment *and* contain a
-*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*  - Bash commands whose actual write *target* is a protected fragment
+*    (read sources are ignored; see `extractWriteTargets`).
 *
 * @param ctx - The guard context (tool, filePath, command).
 * @returns A blocking {@link Prompt}, or null to allow.
@@ -242,18 +266,25 @@ function protectedPathGuard(ctx) {
 		if (containsProtected(ctx.filePath)) return BLOCK;
 	}
 	if (ctx.tool === "Bash" && ctx.command) {
-		if (containsProtected(ctx.command) && bashHasWriteOp(ctx.command)) return BLOCK;
+		if (extractWriteTargets(ctx.command).some(containsProtected)) return BLOCK;
 	}
 	return null;
 }
 //#endregion
 //#region src/policy/guards/bash-write.ts
 /** Redirect (`>`/`>>`) targeting a code-file extension. */
-const CODE_REDIRECT = /(?:>>?)\s*[^\s|;&]*\.(?:ts|tsx|js|jsx|py|go|rb|rs|java|kt|php|swift|vue|svelte|c|cpp|h)\b/;
-/** Interpreters / tools that mutate source in place, plus heredoc-into-file. */
-const CODE_MUTATORS = /\bpython3?\s+-c\b|\bsed\s+-i\b|\bperl\s+-i\b|\bawk\s+-i\s+inplace\b|\bpatch\s+|<<[-~]?\s*['"]?\w+['"]?[\s\S]*?>/;
-/** Redirect to a non-code file, or other ambiguous file writers (ASK). */
-const ASK_WRITERS = /(?:>>?\s*[^\s|;&]+)|\btee\s+|\bdd\s+of=|\bnode\s+-e\b.*(?:writeFile|appendFile)|\bruby\s+-e\b.*File\.write/;
+const CODE_REDIRECT = /(?:>>?)\s*[^\s|;&]*\.(?:ts|tsx|js|jsx|py|go|rb|rs|java|kt|php|swift|vue|svelte|astro|css|c|cpp|h)\b/;
+/** Interpreters / tools that mutate source in place, plus heredoc-into-file.
+* `sed`/`perl`/`awk` allow intervening flags before `-i` (parity bash-write-guard.py). */
+const CODE_MUTATORS = /\bpython3?\s+-c\b|\bpython3?\s+-\s*<<|\bsed\b[^|]*\s-i|\bperl\b[^|]*\s-[pi]i?\b|\bawk\b[^|]*-i\s*inplace|\bpatch\b|<<[-~]?\s*['"]?\w+['"]?[\s\S]*?>/;
+/** File-mutating one-liners via `node -e` / `ruby -e` (parity NODE_WRITES/RUBY_WRITES). */
+const NODE_WRITES = /writeFile|appendFile|createWriteStream|fs\.(?:write|rename|unlink|mkdir|rmdir|copyFile)|execSync|spawnSync|child_process/;
+const RUBY_WRITES = /File\.(?:write|open|delete|rename)|IO\.write|FileUtils|\bsystem\b|\bexec\b|`[^`]/;
+/** Redirect to a non-code file. Excludes `/dev/null`, `2>`/`N>` and `>&N` fd
+* redirects via the `(?<![0-9&])` lookbehind + `(?!…|&)` (parity has_file_redirect). */
+const FILE_REDIRECT = /(?<![0-9&])\s*>>?\s*(?!\/dev\/null|&)[a-zA-Z./~$]/;
+/** Other ambiguous file writers (ASK): `tee <file>` (not `tee -a`/path) and `dd … of=`. */
+const ASK_WRITERS = /\btee\s+[^-/\s]|\bdd\b[^|]*\bof=/;
 /**
 * Blocks shell commands that mutate code files in place (and heredocs/redirects
 * to source files); asks before other file-writing shell commands. Forces use
@@ -268,7 +299,7 @@ function bashWriteGuard(ctx) {
 		reason: "Shell in-place edits / redirects to source files bypass APEX/SOLID checks.",
 		actions: ["Use the Write/Edit tool instead"]
 	};
-	if (ASK_WRITERS.test(cmd)) return {
+	if (FILE_REDIRECT.test(cmd) || ASK_WRITERS.test(cmd) || /\bnode\s+-e\b/.test(cmd) && NODE_WRITES.test(cmd) || /\bruby\s+-e\b/.test(cmd) && RUBY_WRITES.test(cmd)) return {
 		kind: "ask",
 		title: "Bash file write",
 		reason: "This command writes a file from the shell; confirm it is intended.",
@@ -282,8 +313,12 @@ function bashWriteGuard(ctx) {
 const TS_DECL_RE = /^\s*(export\s+)?(interface|type)\s+[A-Z]/m;
 /** Python view models: class subclassing a schema/protocol base. */
 const PY_MODEL_RE = /^\s*class\s+\w+\((BaseModel|TypedDict|Protocol)\)/m;
-/** PHP controllers: top-level `interface` / `abstract class`. */
-const PHP_DECL_RE = /^\s*(interface|abstract class)\b/m;
+/**
+* PHP controllers: top-level `interface`, `abstract class`, or a concrete
+* `class …Interface/DTO/Request`. Union of the TS-only `abstract class` rule
+* and the Python rule (`class [A-Z].*(Interface|DTO|Request)`, enforce-interfaces.py:16).
+*/
+const PHP_DECL_RE = /^\s*(?:abstract\s+class\b|interface\b|class\s+[A-Z].*(?:Interface|DTO|Request))/m;
 /** Swift views: top-level `protocol Foo`. */
 const SWIFT_PROTO_RE = /^\s*protocol\s+[A-Z]/m;
 /** Go handlers/controllers: top-level `type Foo interface`. */
@@ -294,6 +329,11 @@ const JAVA_DECL_RE = /^\s*(?:public\s+|private\s+|protected\s+|internal\s+)?(?:i
 * Blocks top-level interface/type/protocol declarations in component, view or
 * controller files (Interface Segregation). Fires only when BOTH the path
 * category AND the content pattern match.
+*
+* Parity note: enforce-interfaces.py only inspects `Write` (tool_input.content).
+* We deliberately also fire on `Edit` — an in-place edit can introduce the same
+* violation — and the path fragments accept singular *and* plural directory
+* names (`view/` + `views/`), mirroring the Python `s?` regexes.
 */
 function interfaceSeparationGuard(ctx) {
 	if (ctx.tool !== "Write" && ctx.tool !== "Edit") return null;
@@ -308,11 +348,11 @@ function interfaceSeparationGuard(ctx) {
 	};
 	const inAny = (...frags) => frags.some((f) => path.includes(f));
 	if (/\.(tsx|jsx|vue|svelte)$/.test(path) && TS_DECL_RE.test(content)) return block;
-	if (/\.py$/.test(path) && inAny("views/", "controllers/", "routes/") && PY_MODEL_RE.test(content)) return block;
-	if (/\.go$/.test(path) && inAny("handlers/", "controllers/") && GO_DECL_RE.test(content)) return block;
-	if (/\.(java|kt)$/.test(path) && inAny("controllers/", "handlers/") && JAVA_DECL_RE.test(content)) return block;
-	if (/\.php$/.test(path) && inAny("Controllers/", "Handlers/") && PHP_DECL_RE.test(content)) return block;
-	if (/\.swift$/.test(path) && inAny("Views/", "Components/") && SWIFT_PROTO_RE.test(content)) return block;
+	if (/\.py$/.test(path) && inAny("view/", "views/", "controller/", "controllers/", "route/", "routes/") && PY_MODEL_RE.test(content)) return block;
+	if (/\.go$/.test(path) && inAny("handler/", "handlers/", "controller/", "controllers/") && GO_DECL_RE.test(content)) return block;
+	if (/\.(java|kt)$/.test(path) && inAny("controller/", "controllers/", "handler/", "handlers/") && JAVA_DECL_RE.test(content)) return block;
+	if (/\.php$/.test(path) && inAny("Controller/", "Controllers/", "Handler/", "Handlers/") && PHP_DECL_RE.test(content)) return block;
+	if (/\.swift$/.test(path) && inAny("View/", "Views/", "Component/", "Components/") && SWIFT_PROTO_RE.test(content)) return block;
 	return null;
 }
 //#endregion
@@ -434,4 +474,4 @@ function evaluate(ctx) {
 	};
 }
 //#endregion
-export { evaluateFileSize as A, securityGuard as C, SYSTEM_INSTALL as D, PROJECT_INSTALL as E, matchPatterns as O, CRITICAL_PATTERNS as S, GIT_BLOCKED as T, CODE_REDIRECT as _, registerGuard as a, protectedPathGuard as b, GO_DECL_RE as c, PY_MODEL_RE as d, SWIFT_PROTO_RE as f, CODE_MUTATORS as g, ASK_WRITERS as h, clearUserGuards as i, detectFramework as j, countLines as k, JAVA_DECL_RE as l, interfaceSeparationGuard as m, FAIL_CLOSED as n, runGuards as o, TS_DECL_RE as p, GUARDS as r, installGuard as s, evaluate as t, PHP_DECL_RE as u, bashWriteGuard as v, GIT_ASK as w, ASK_PATTERNS as x, PROTECTED_FRAGMENTS as y };
+export { matchPatterns as A, ASK_PATTERNS as C, GIT_BLOCKED as D, GIT_ASK as E, evaluateFileSize as M, detectFramework as N, PROJECT_INSTALL as O, protectedPathGuard as S, securityGuard as T, CODE_REDIRECT as _, registerGuard as a, PROTECTED_FRAGMENTS as b, GO_DECL_RE as c, PY_MODEL_RE as d, SWIFT_PROTO_RE as f, CODE_MUTATORS as g, ASK_WRITERS as h, clearUserGuards as i, countLines as j, SYSTEM_INSTALL as k, JAVA_DECL_RE as l, interfaceSeparationGuard as m, FAIL_CLOSED as n, runGuards as o, TS_DECL_RE as p, GUARDS as r, installGuard as s, evaluate as t, PHP_DECL_RE as u, FILE_REDIRECT as v, CRITICAL_PATTERNS as w, PROTECTED_GIT_RE as x, bashWriteGuard as y };

package/dist/freshness/index.d.mts

@@ -1,3 +1,3 @@
-import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-CG1nuf-c.mjs";
+import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-D14nkD5D.mjs";
 import { t as incrementTrivialEditCounter } from "../index-BOBXQ91y.mjs";
 export { AuthEntry, DocSatisfactionStatus, formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };