@fusengine/harness 0.1.39 → 0.1.41

package/dist/policy/index.mjs

@@ -1,4 +1,4 @@
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-osn-huLZ.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-za4vT-p7.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-B3wkqEoN.mjs";
+import { A as matchPatterns, C as ASK_PATTERNS, D as GIT_BLOCKED, E as GIT_ASK, M as evaluateFileSize, N as detectFramework, O as PROJECT_INSTALL, S as protectedPathGuard, T as securityGuard, _ as CODE_REDIRECT, a as registerGuard, b as PROTECTED_FRAGMENTS, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as countLines, k as SYSTEM_INSTALL, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as FILE_REDIRECT, w as CRITICAL_PATTERNS, x as PROTECTED_GIT_RE, y as bashWriteGuard } from "../evaluate-B1n1ti0N.mjs";
 import "../policy-la_KkjCS.mjs";
-export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };
+export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/refs/index.d.mts

@@ -1,3 +1,3 @@
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "../types-CY5qT2X1.mjs";
-import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "../index-DL8MxjuP.mjs";
+import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "../index-mmRF3KNp.mjs";
 export { RefMeta, RouteResult, ScoredRef, globToRe, loadRefs, parseFrontmatter, routeReferences, scoreReferences, toRefMeta };

package/dist/refs/index.mjs

@@ -1,4 +1,4 @@
-import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "../router-D8cVrI-s.mjs";
-import { n as toRefMeta, t as loadRefs } from "../loader-CyAoJv2W.mjs";
+import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "../router-BfX0hJg8.mjs";
+import { n as toRefMeta, t as loadRefs } from "../loader-Bn-DbZmt.mjs";
 import "../refs-la_KkjCS.mjs";
 export { globToRe, loadRefs, parseFrontmatter, routeReferences, scoreReferences, toRefMeta };

package/dist/{router-D8cVrI-s.mjs → router-BfX0hJg8.mjs}

@@ -17,32 +17,25 @@ function globToRe(g) {
 }
 //#endregion
 //#region src/refs/router.ts
-/** Literal (non-wildcard) path segments in a glob — more = more specific. */
-function specificity(glob) {
-	return glob.split("/").filter((s) => s && s !== "**" && !s.includes("*")).length;
-}
 /**
-* Score references against a file edit (pure):
-* +10 per `applies-to` glob match, weighted by glob SPECIFICITY (+5 per literal path
-* segment) so a more specific skill wins (an app-router glob beats a bare extension
-* glob beats a plain TS glob). +5 per `trigger-on-edit` fragment, +1 per keyword.
+* Score references against a file edit (pure) — flat scoring, parity with the
+* Python `ref_router._score_ref` (comma-split, single award per category):
+* +10 once if ANY `applies-to` glob matches, +5 once if ANY `trigger-on-edit`
+* fragment (trailing `/` stripped) is a substring of the path, +1 per keyword.
 */
 function scoreReferences(refs, filePath, content) {
 	const scored = [];
+	const hay = `${filePath} ${content}`.toLowerCase();
 	for (const meta of refs) {
 		let score = 0;
-		if (meta.appliesTo) {
-			for (const g of meta.appliesTo.split(", ")) if (globToRe(g).test(filePath)) score += 10 + specificity(g) * 5;
-		}
-		if (meta.triggerOnEdit) {
-			for (const frag of meta.triggerOnEdit.split(", ")) if (filePath.includes(frag.trim())) score += 5;
-		}
-		if (meta.keywords) {
-			const hay = `${filePath} ${content}`.toLowerCase();
-			for (const kw of meta.keywords.split(", ")) {
-				const k = kw.trim().toLowerCase();
-				if (k && hay.includes(k)) score += 1;
-			}
+		if (meta.appliesTo?.split(",").some((g) => g.trim() && globToRe(g.trim()).test(filePath))) score += 10;
+		if (meta.triggerOnEdit?.split(",").some((f) => {
+			const t = f.trim().replace(/\/+$/, "");
+			return t && filePath.includes(t);
+		})) score += 5;
+		if (meta.keywords) for (const kw of meta.keywords.split(",")) {
+			const k = kw.trim().toLowerCase();
+			if (k && hay.includes(k)) score += 1;
 		}
 		if (score > 0) scored.push({
 			meta,

package/dist/{run-DOARDruz.mjs → run-D-Ydrw3D.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "./evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/runtime/index.d.mts

@@ -1,6 +1,6 @@
 import { t as Prompt } from "../types-D56jSgD9.mjs";
 import { t as RefMeta } from "../types-CY5qT2X1.mjs";
-import { t as AgentQuality } from "../session-state-DxNkIBZ2.mjs";
+import { t as AgentQuality } from "../session-state-Dzq6yrw7.mjs";
 
 //#region src/runtime/paths.d.ts
 /**
@@ -73,10 +73,12 @@ interface ToolEvent {
 * Map a live tool-use to the activity to record, or null when nothing is
 * tracked. Works across harnesses — tool names are globally distinct:
 * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
+* - `Task`/`Agent` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
+* - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
+*   → `agent` credited to the matching REQUIRED_AGENTS phase
 * - a read tool opening a `.md` reference → `ref`
 */
-declare function activityFor(event: ToolEvent): Activity | null;
+declare function activityFor(event: ToolEvent): Activity[];
 //#endregion
 //#region src/runtime/gate-input.d.ts
 /** A tool-use to gate, plus the session pointers needed for the stateful gates. */
@@ -162,13 +164,24 @@ declare function normalizeEvent(id: string, payload: Record<string, unknown>): N
 */
 declare function respond(id: string, prompt: Prompt): string;
 //#endregion
-//#region src/runtime/mcp.d.ts
-/** Default freshness for cached MCP/WebFetch results (48h). */
+//#region src/runtime/mcp-key.d.ts
+/** Cache-key + tool-class helpers for the MCP/WebFetch interception pipeline. */
+/** Default freshness for cached MCP doc results (48h). */
 declare const MCP_TTL_MS = 1728e5;
+/** WebFetch freshness — pages go stale faster than docs (24h, parity with Python). */
+declare const WEBFETCH_TTL_MS = 864e5;
 /** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
 declare function isMcpTool(tool: string): boolean;
 /** The query/url that keys the cache. */
 declare function queryOf(input: Record<string, unknown>): string;
+/**
+* The string that keys the cache for `tool`. WebFetch folds `url + "\n" +
+* prompt[:500]` (parity with Python) so distinct prompts on the same URL never
+* collide; every other tool keys on {@link queryOf}.
+*/
+declare function cacheQueryOf(tool: string, input: Record<string, unknown>): string;
+//#endregion
+//#region src/runtime/mcp.d.ts
 /** A pre-event MCP interception: the native response + any doc source it satisfied. */
 interface McpIntercept {
   stdout: string;
@@ -180,8 +193,13 @@ interface McpIntercept {
 * Harnesses without input-mutation/cache support fall through to null.
 */
 declare function mcpPreIntercept(id: string, tool: string, input: Record<string, unknown>, dir: string, ttlMs: number, now: number): McpIntercept | null;
-/** Post-event: store the MCP/WebFetch response (extracted to markdown) in the cache. */
-declare function mcpPostStore(tool: string, input: Record<string, unknown>, response: unknown, dir: string): void;
+/**
+* Post-event: persist the MCP/WebFetch response (extracted to markdown). MCP docs
+* go through {@link mcpCacheWrite} (compact + Jaccard-dedup + `index.json`);
+* WebFetch uses {@link webfetchCacheWrite} (compact, exact key, no index).
+* @param now - Current epoch ms (timestamp source; defaults to `Date.now()`).
+*/
+declare function mcpPostStore(tool: string, input: Record<string, unknown>, response: unknown, dir: string, now?: number): void;
 //#endregion
 //#region src/runtime/inject-context.d.ts
 /**
@@ -602,18 +620,20 @@ declare function dispatchMemory(event: string, payload: Record<string, unknown>,
 //#endregion
 //#region src/runtime/lifecycle/seo/post-tool-use.d.ts
 /**
-* Validate the edited file's SEO completeness. Returns a deny message (for a
-* `permissionDecision: deny` response) when HTML-like, opted-in, and missing
+* Validate the edited file's SEO completeness. Returns a block message (for a
+* top-level `decision: block` response) when HTML-like, opted-in, and missing
 * elements; otherwise `null` (allow).
 * @param payload - The raw PostToolUse payload.
-* @returns The deny reason string, or `null` to allow.
+* @returns The block reason string, or `null` to allow.
 */
 declare function seoPostToolUse(payload: Record<string, unknown>): string | null;
 /**
-* SEO PostToolUse as a ready native response: a `permissionDecision: deny`
+* SEO PostToolUse as a ready native response: a top-level `decision: block`
 * string when the edited file is missing SEO elements, else `null` (allow).
+* PostToolUse ignores `permissionDecision` (PreToolUse-only), so this must use
+* the `decision`/`reason` keys to actually feed the failure back to Claude.
 * @param payload - The raw PostToolUse payload.
-* @returns The deny response string, or `null` to allow.
+* @returns The block response string, or `null` to allow.
 */
 declare function seoPostToolUseResponse(payload: Record<string, unknown>): string | null;
 //#endregion
@@ -716,4 +736,4 @@ interface PreContext {
 */
 declare function handlePre(ctx: PreContext): Promise<HandleOutcome>;
 //#endregion
-export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, HandleOptions, HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, WEBFETCH_TTL_MS, activityFor, aipilotPostToolUse, cacheQueryOf, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { $ as sessionStartCore, A as writePluginMap, At as sanitizeSessionId, B as trackSessionChanges, C as aipilotPostToolUse, Ct as saveSecurityState, D as lessonsStateFileFor, Dt as claudeHome, E as lessonsFileFor, Et as todayUtc, F as mergeLines, G as validateTeammateOutput, H as cleanupSession, I as countFiles, J as detectSolidProfile, K as trackAgentMemory, L as getFileDesc, M as isProject, Mt as sessionStatePath, N as writeTree, Nt as sessionsDir, O as cartoSessionStart, Ot as fusengineCache, P as loadEnriched, Q as runSessionStartCleanups, R as listChildren, S as dispatchLifecycle, St as loadSecurityState, T as dispatchLessons, Tt as securityStatePath, U as saveApexState, V as validateRulesLoaded, W as logToolFailure, X as injectRules, Y as solidDetectStart, Z as readRules, _ as postTrackingSideEffects, _t as mcpPostStore, a as TRIVIAL_BUDGET, at as gitContext, b as trackSkillRead, bt as activityFor, c as detectDuplication, ct as taskContext, d as lifecycleStdout, dt as defaultStateDir, et as pruneEmptyDirs, f as postEditContext, ft as projectHash, g as securityAdvisory, gt as isMcpTool, h as dispatchMemory, ht as MCP_TTL_MS, i as REQUIRED_AGENTS, it as devContext, j as generateProjectMap, jt as saveSessionState, k as generateEcosystemMap, kt as loadSessionState, l as dryGate, lt as respond, m as seoPostToolUseResponse, mt as normalizeEvent, n as handlePre, nt as removeOldFiles, o as gate, ot as projectContext, p as seoPostToolUse, pt as trackFile, q as subagentCacheContext, r as DEFAULT_WINDOW_MS, rt as trimLogFile, s as preCommitGate, st as promptSubmitContext, t as handleHook, tt as purgeTtlTree, u as extractSymbols, ut as recordActivity, v as trackWatchResearch, vt as mcpPreIntercept, w as dispatchAipilot, wt as securityStateDir, x as trackEnrichment, xt as isoUtc, y as trackMcpResearch, yt as queryOf, z as postEditTypescript } from "../handle-t-lQuQc7.mjs";
+import { $ as sessionStartCore, A as writePluginMap, At as fusengineCache, B as trackSessionChanges, C as aipilotPostToolUse, Ct as isoUtc, D as lessonsStateFileFor, Dt as securityStatePath, E as lessonsFileFor, Et as securityStateDir, F as mergeLines, Ft as sessionsDir, G as validateTeammateOutput, H as cleanupSession, I as countFiles, J as detectSolidProfile, K as trackAgentMemory, L as getFileDesc, M as isProject, Mt as sanitizeSessionId, N as writeTree, Nt as saveSessionState, O as cartoSessionStart, Ot as todayUtc, P as loadEnriched, Pt as sessionStatePath, Q as runSessionStartCleanups, R as listChildren, S as dispatchLifecycle, St as activityFor, T as dispatchLessons, Tt as saveSecurityState, U as saveApexState, V as validateRulesLoaded, W as logToolFailure, X as injectRules, Y as solidDetectStart, Z as readRules, _ as postTrackingSideEffects, _t as MCP_TTL_MS, a as TRIVIAL_BUDGET, at as gitContext, b as trackSkillRead, bt as isMcpTool, c as detectDuplication, ct as taskContext, d as lifecycleStdout, dt as defaultStateDir, et as pruneEmptyDirs, f as postEditContext, ft as projectHash, g as securityAdvisory, gt as mcpPreIntercept, h as dispatchMemory, ht as mcpPostStore, i as REQUIRED_AGENTS, it as devContext, j as generateProjectMap, jt as loadSessionState, k as generateEcosystemMap, kt as claudeHome, l as dryGate, lt as respond, m as seoPostToolUseResponse, mt as normalizeEvent, n as handlePre, nt as removeOldFiles, o as gate, ot as projectContext, p as seoPostToolUse, pt as trackFile, q as subagentCacheContext, r as DEFAULT_WINDOW_MS, rt as trimLogFile, s as preCommitGate, st as promptSubmitContext, t as handleHook, tt as purgeTtlTree, u as extractSymbols, ut as recordActivity, v as trackWatchResearch, vt as WEBFETCH_TTL_MS, w as dispatchAipilot, wt as loadSecurityState, x as trackEnrichment, xt as queryOf, y as trackMcpResearch, yt as cacheQueryOf, z as postEditTypescript } from "../handle-VhWQxvyN.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,
@@ -9,4 +9,4 @@ function harnessStateDir(root) {
 	return projectLayout(root).stateDir;
 }
 //#endregion
-export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, activityFor, aipilotPostToolUse, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };
+export { DEFAULT_WINDOW_MS, MCP_TTL_MS, REQUIRED_AGENTS, TRIVIAL_BUDGET, WEBFETCH_TTL_MS, activityFor, aipilotPostToolUse, cacheQueryOf, cartoSessionStart, claudeHome, cleanupSession, countFiles, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateTeammateOutput, writePluginMap, writeTree };

package/dist/{session-state-DxNkIBZ2.d.mts → session-state-Dzq6yrw7.d.mts}

@@ -1,4 +1,4 @@
-import { t as AuthEntry } from "./doc-helpers-CG1nuf-c.mjs";
+import { t as AuthEntry } from "./doc-helpers-D14nkD5D.mjs";
 
 //#region src/tracking/session-state.d.ts
 /** Quality of a recorded agent call (the freshness gate ignores insufficient ones). */

package/dist/state/index.d.mts

@@ -1,2 +1,2 @@
-import { a as taskStart, c as ensureStateDir, d as stateFilePath, f as acquireLock, i as taskCreate, l as loadState, n as ApexTaskFile, o as ApexState, r as taskComplete, s as apexStateDir, t as ApexTask, u as saveState } from "../index-CPoF_hLP.mjs";
+import { a as taskStart, c as ensureStateDir, d as stateFilePath, f as acquireLock, i as taskCreate, l as loadState, n as ApexTaskFile, o as ApexState, r as taskComplete, s as apexStateDir, t as ApexTask, u as saveState } from "../index-D7GpOmkl.mjs";
 export { ApexState, ApexTask, ApexTaskFile, acquireLock, apexStateDir, ensureStateDir, loadState, saveState, stateFilePath, taskComplete, taskCreate, taskStart };

package/dist/{store-7j02oGjt.mjs → store-3WBr37Xz.mjs}

@@ -181,4 +181,4 @@ async function saveTrack(file, track) {
 	writeLastNonce(envelope.nonce);
 }
 //#endregion
-export { recordAgent as a, recordRefRead as c, emptyTrack as i, recordTrivialEdit as l, saveTrack as n, recordBrainstormRequired as o, agentsFresh as r, recordDoc as s, loadTrack as t, trivialCount as u };
+export { emptyTrack as a, recordDoc as c, trivialCount as d, agentsFresh as i, recordRefRead as l, saveTrack as n, recordAgent as o, verifyTrack as r, recordBrainstormRequired as s, loadTrack as t, recordTrivialEdit as u };

package/dist/tracking/index.d.mts

@@ -1,4 +1,4 @@
-import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as SessionTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as AgentQuality, u as trivialCount } from "../session-state-DxNkIBZ2.mjs";
+import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as SessionTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as AgentQuality, u as trivialCount } from "../session-state-Dzq6yrw7.mjs";
 
 //#region src/tracking/store.d.ts
 /**

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { a as recordAgent, c as recordRefRead, i as emptyTrack, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "../store-7j02oGjt.mjs";
+import { a as emptyTrack, c as recordDoc, d as trivialCount, i as agentsFresh, l as recordRefRead, n as saveTrack, o as recordAgent, s as recordBrainstormRequired, t as loadTrack, u as recordTrivialEdit } from "../store-3WBr37Xz.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTrivialEdit, saveTrack, trivialCount };

package/dist/ttl-BG55s6HZ.mjs

@@ -0,0 +1,20 @@
+import { a as parseEnvInt } from "./limits-CHn8AIL1.mjs";
+//#region src/config/ttl.ts
+/** Default enforcement-freshness window, in seconds (2 minutes). */
+const DEFAULT_TTL_SEC = 120;
+/** Default env var name carrying the TTL override. */
+const TTL_ENV_KEY = "FUSE_ENFORCE_TTL_SEC";
+/**
+* Resolve the enforcement TTL (seconds) from an env map.
+* @param env - environment map (defaults to `process.env`)
+* @param key - env var name (defaults to `FUSE_ENFORCE_TTL_SEC`)
+*/
+function resolveTtlSec(env = process.env, key = TTL_ENV_KEY) {
+	return parseEnvInt(env[key], 120);
+}
+/** Human label for a TTL: 120 -> "2min", 240 -> "4min", 90 -> "90s". */
+function ttlLabel(sec) {
+	return sec % 60 === 0 ? `${sec / 60}min` : `${sec}s`;
+}
+//#endregion
+export { ttlLabel as i, TTL_ENV_KEY as n, resolveTtlSec as r, DEFAULT_TTL_SEC as t };

package/dist/{validate-osn-huLZ.mjs → validate-B3wkqEoN.mjs}

@@ -1,7 +1,7 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { k as countLines } from "./evaluate-za4vT-p7.mjs";
-import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
-import { t as routeReferences } from "./router-D8cVrI-s.mjs";
+import { j as countLines } from "./evaluate-B1n1ti0N.mjs";
+import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-BhzDmJ18.mjs";
+import { t as routeReferences } from "./router-BfX0hJg8.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { homedir } from "node:os";
@@ -65,12 +65,12 @@ function detectProjectType(dir) {
 }
 //#endregion
 //#region src/policy/apex.ts
-/** Gate: Context7 + Exa must have been consulted this session. */
+/** Gate: any one documentation source (Context7, Exa, or web) must have been consulted this session. */
 const docConsultedGate = (ctx) => isDocConsulted(ctx.authorizations, ctx.sessionId) ? null : {
 	kind: "block",
 	title: "APEX: documentation not consulted",
 	reason: formatDocDeny(ctx.framework),
-	actions: ["Call mcp__context7__query-docs", "Call mcp__exa__web_search_exa"]
+	actions: ["Use ANY ONE of: mcp__context7__query-docs, mcp__exa__web_search_exa, WebSearch, or WebFetch"]
 };
 /** Gate: the routed SOLID references for this edit must have been read. */
 const solidReadGate = (ctx) => {
@@ -118,7 +118,7 @@ function evaluateApex(ctx, gates = APEX_GATES) {
 //#endregion
 //#region src/policy/creation-intent.ts
 const CREATE_RE = /\b(?:create|implement|add|build|new|feature|component|generate|make|develop|scaffold)\b/i;
-const SKIP_RE = /\b(?:fix|bug|debug|update|refactor|rename|move|delete|remove|commit|push|edit|modify|change)\b/i;
+const SKIP_RE = /\b(?:fix|bug|debug|update|refactor|rename|move|delete|remove|commit|push|status|edit|modify|change|adjust|tweak|existing|current)\b/i;
 /**
 * True when a prompt expresses creation intent (a new feature/component) and is
 * not a fix/refactor — the signal that brainstorming should precede creation.
@@ -129,8 +129,11 @@ function detectCreationIntent(prompt) {
 }
 //#endregion
 //#region src/policy/verbosity.ts
-/** Exa MCP tools whose result count + token budget are capped. */
-const EXA_TOOLS = /exa__web_search|exa__get_code_context|exa_web_search|exa_get_code_context/i;
+/** Exa search tool — result count force-capped + token budget capped. */
+const EXA_SEARCH = /exa__web_search|exa_web_search/i;
+/** Exa code-context tool — token budget capped; `numResults` capped only when
+* already present (parity: limit-mcp-verbosity.py never injects it). */
+const EXA_CODE = /exa__get_code_context|exa_get_code_context/i;
 /** Context7 doc tool whose token budget is capped. */
 const CONTEXT7_TOOLS = /context7__query-docs|context7_query-docs|query-docs/i;
 /** Max results an exa MCP call may request. */
@@ -152,9 +155,12 @@ function capVerbosity(tool, input) {
 			changed = true;
 		}
 	};
-	if (EXA_TOOLS.test(tool)) {
+	if (EXA_SEARCH.test(tool)) {
 		cap("numResults", 3, true);
 		cap("tokensNum", MAX_TOKENS, false);
+	} else if (EXA_CODE.test(tool)) {
+		cap("numResults", 3, false);
+		cap("tokensNum", MAX_TOKENS, false);
 	} else if (CONTEXT7_TOOLS.test(tool)) cap("tokens", MAX_TOKENS, false);
 	return changed ? out : null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",

package/dist/cache-C9z9LclL.mjs

@@ -1,56 +0,0 @@
-import { createHash } from "node:crypto";
-//#region src/cache/compact.ts
-const HTML_ENTITIES = {
-	"&": "&",
-	"&lt;": "<",
-	"&gt;": ">",
-	"&quot;": "\"",
-	"&#x27;": "'",
-	"&#39;": "'",
-	"&nbsp;": " ",
-	"&apos;": "'"
-};
-const BOILERPLATE = [
-	/^.*cookie.*(accept|consent|banner).*$/gim,
-	/^.*was this (helpful|page helpful|article helpful).*$/gim,
-	/^.*©\s*\d{4}.*all rights reserved.*$/gim,
-	/^\s*(home|about|contact|privacy|terms)\s*\|\s*.*$/gim,
-	/^.*subscribe to (our )?newsletter.*$/gim,
-	/^.*follow us on (twitter|facebook|linkedin).*$/gim
-];
-const MAX_BYTES = 5 * 1024;
-function decodeEntities(text) {
-	let out = text;
-	for (const [ent, ch] of Object.entries(HTML_ENTITIES)) out = out.split(ent).join(ch);
-	out = out.replace(/&#x([0-9a-fA-F]+);/g, (_m, h) => String.fromCodePoint(parseInt(h, 16)));
-	out = out.replace(/&#(\d+);/g, (_m, d) => String.fromCodePoint(parseInt(d, 10)));
-	return out;
-}
-/** Strip HTML entities + boilerplate, normalize blank lines, truncate to ~5KB. */
-function compactMarkdown(content) {
-	let text = decodeEntities(content);
-	for (const re of BOILERPLATE) text = text.replace(re, "");
-	text = text.replace(/\n{3,}/g, "\n\n").trim();
-	const enc = new TextEncoder().encode(text);
-	if (enc.length > MAX_BYTES) {
-		const truncated = new TextDecoder().decode(enc.slice(0, MAX_BYTES));
-		text = `${truncated}\n\n[... truncated, ${text.slice(truncated.length).split("\n").length - 1} lines]`;
-	}
-	return text;
-}
-/** 8-char MD5 of `${toolName}::${query}`. */
-function queryHash(toolName, query) {
-	return createHash("md5").update(`${toolName}::${query}`).digest("hex").slice(0, 8);
-}
-/** Bag-of-words Jaccard similarity strictly greater than `threshold`. */
-function jaccardSimilar(a, b, threshold = .8) {
-	const ta = new Set(a.toLowerCase().split(/\s+/).filter(Boolean));
-	const tb = new Set(b.toLowerCase().split(/\s+/).filter(Boolean));
-	if (ta.size === 0 || tb.size === 0) return false;
-	let inter = 0;
-	for (const t of ta) if (tb.has(t)) inter++;
-	const union = ta.size + tb.size - inter;
-	return inter / union > threshold;
-}
-//#endregion
-export { jaccardSimilar as n, queryHash as r, compactMarkdown as t };

package/dist/index-DPkCX_AR.d.mts

@@ -1,40 +0,0 @@
-//#region src/cache/compact.d.ts
-/** Strip HTML entities + boilerplate, normalize blank lines, truncate to ~5KB. */
-declare function compactMarkdown(content: string): string;
-/** 8-char MD5 of `${toolName}::${query}`. */
-declare function queryHash(toolName: string, query: string): string;
-/** Bag-of-words Jaccard similarity strictly greater than `threshold`. */
-declare function jaccardSimilar(a: string, b: string, threshold?: number): boolean;
-//#endregion
-//#region src/cache/io.d.ts
-/** Read a JSON array from `path`; [] on missing/corrupt/non-array. */
-declare function loadIndex(path: string): unknown[];
-/** Summary of a cache index. */
-interface IndexSummary {
-  total: number;
-  byTool: Record<string, number>;
-  oldestTs: string | null;
-  newestTs: string | null;
-}
-/** Summarize an index of `{ tool?, ts? }` entries. */
-declare function summarizeIndex(index: unknown[]): IndexSummary;
-//#endregion
-//#region src/cache/mcp-response.d.ts
-/**
-* Extract usable markdown from an MCP `tool_response`: a string, a list of
-* content blocks (non-text blocks skipped), or any JSON structure (fallback).
-* Recurses up to depth 5 to guard against pathological/cyclic structures.
-*/
-declare function extractText(resp: unknown, depth?: number): string;
-//#endregion
-//#region src/cache/store.d.ts
-/** Stable 16-char key from a tool name + query (FNV-1a, non-crypto). */
-declare function mcpCacheKey(tool: string, query: string): string;
-/** Path of a cache entry under `dir`. */
-declare function cachePath(dir: string, tool: string, query: string): string;
-/** Read a cached entry if it exists and is fresh (mtime within `ttlMs`), else null. */
-declare function cacheLookup(dir: string, tool: string, query: string, ttlMs: number, now: number): string | null;
-/** Store a cache entry (creates the dir; no-op on empty content). */
-declare function cacheStore(dir: string, tool: string, query: string, content: string): void;
-//#endregion
-export { extractText as a, summarizeIndex as c, queryHash as d, mcpCacheKey as i, compactMarkdown as l, cachePath as n, IndexSummary as o, cacheStore as r, loadIndex as s, cacheLookup as t, jaccardSimilar as u };

package/dist/store-PrNPm6So.mjs

@@ -1,89 +0,0 @@
-import { dirname, join } from "node:path";
-import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
-//#region src/cache/io.ts
-/** Read a JSON array from `path`; [] on missing/corrupt/non-array. */
-function loadIndex(path) {
-	try {
-		if (!existsSync(path)) return [];
-		const data = JSON.parse(readFileSync(path, "utf8"));
-		return Array.isArray(data) ? data : [];
-	} catch {
-		return [];
-	}
-}
-/** Summarize an index of `{ tool?, ts? }` entries. */
-function summarizeIndex(index) {
-	const byTool = {};
-	const timestamps = [];
-	for (const entry of index) {
-		if (typeof entry !== "object" || entry === null) continue;
-		const e = entry;
-		if (typeof e.tool === "string") byTool[e.tool] = (byTool[e.tool] ?? 0) + 1;
-		if (typeof e.ts === "string") timestamps.push(e.ts);
-	}
-	return {
-		total: index.length,
-		byTool,
-		oldestTs: timestamps.length ? timestamps.reduce((a, b) => a < b ? a : b) : null,
-		newestTs: timestamps.length ? timestamps.reduce((a, b) => a > b ? a : b) : null
-	};
-}
-//#endregion
-//#region src/cache/mcp-response.ts
-const MAX_DEPTH = 5;
-/**
-* Extract usable markdown from an MCP `tool_response`: a string, a list of
-* content blocks (non-text blocks skipped), or any JSON structure (fallback).
-* Recurses up to depth 5 to guard against pathological/cyclic structures.
-*/
-function extractText(resp, depth = 0) {
-	if (depth >= MAX_DEPTH) return "";
-	if (typeof resp === "string") return resp;
-	if (Array.isArray(resp)) {
-		const parts = resp.filter((b) => typeof b === "object" && b !== null).filter((b) => b.type === "text").map((b) => b.text ?? "");
-		if (parts.length) return parts.join("\n\n");
-		const joined = resp.filter((b) => Array.isArray(b) || typeof b === "object" && b !== null).map((b) => extractText(b, depth + 1)).filter(Boolean).join("\n\n");
-		if (joined) return joined;
-	}
-	if (!resp) return "";
-	try {
-		return JSON.stringify(resp);
-	} catch {
-		return "";
-	}
-}
-//#endregion
-//#region src/cache/store.ts
-/** Stable 16-char key from a tool name + query (FNV-1a, non-crypto). */
-function mcpCacheKey(tool, query) {
-	const s = `${tool}\n${query}`;
-	let h = 2166136261;
-	for (let i = 0; i < s.length; i++) {
-		h ^= s.charCodeAt(i);
-		h = Math.imul(h, 16777619);
-	}
-	return (h >>> 0).toString(16).padStart(8, "0") + (s.length >>> 0).toString(16).padStart(8, "0");
-}
-/** Path of a cache entry under `dir`. */
-function cachePath(dir, tool, query) {
-	return join(dir, `${mcpCacheKey(tool, query)}.md`);
-}
-/** Read a cached entry if it exists and is fresh (mtime within `ttlMs`), else null. */
-function cacheLookup(dir, tool, query, ttlMs, now) {
-	const path = cachePath(dir, tool, query);
-	try {
-		if (!existsSync(path) || now - statSync(path).mtimeMs > ttlMs) return null;
-		return readFileSync(path, "utf8");
-	} catch {
-		return null;
-	}
-}
-/** Store a cache entry (creates the dir; no-op on empty content). */
-function cacheStore(dir, tool, query, content) {
-	if (!content) return;
-	const path = cachePath(dir, tool, query);
-	mkdirSync(dirname(path), { recursive: true });
-	writeFileSync(path, content);
-}
-//#endregion
-export { extractText as a, mcpCacheKey as i, cachePath as n, loadIndex as o, cacheStore as r, summarizeIndex as s, cacheLookup as t };