@fusengine/harness 0.1.40 → 0.1.41

package/README.md

@@ -26,7 +26,9 @@ bun add @fusengine/harness      # Bun reads the TS source directly — no build
 ```sh
 cd your-project
 harness init                              # detects the harness, writes its pre+post hooks
-export FUSE_HARNESS_REFS=.claude/skills   # (optional) activate the SOLID-read gate
+# The SOLID-read gate auto-activates from discovered skills (default marketplace: fusengine-plugins).
+export FUSE_HARNESS_MARKETPLACES=fusengine-plugins   # (optional) which marketplaces to auto-scan
+export FUSE_HARNESS_REFS=.claude/skills              # (optional) explicit refs dir, overrides auto-discovery
 ```
 
 That's it. `init` writes the wiring file for the detected harness
@@ -65,8 +67,8 @@ Ten portable guards + the APEX gate chain, all evaluated before a tool runs:
 | interface-separation | top-level interface/type/protocol in a component/controller |
 | protected-path | edits to `.claude/plugins\|logs\|cache`, `.git/` |
 | APEX freshness | `explore-codebase` + `research-expert` not run within the window |
-| APEX doc-consulted | Context7 **and** Exa not consulted this session |
-| APEX solid-read | required SOLID refs (from `FUSE_HARNESS_REFS`) not read |
+| APEX doc-consulted | no doc source (Context7 / Exa / fuse-browser / WebSearch / WebFetch) consulted this session |
+| APEX solid-read | required SOLID refs (auto-discovered, or `FUSE_HARNESS_REFS`) not read |
 | brainstorm | creating a new file without brainstorming (when flagged) |
 | MCP verbosity / cache | caps exa `numResults`; serves a fresh cached MCP/WebFetch result |
 
@@ -78,7 +80,8 @@ through per window without the full APEX gates.
 | Var | Effect |
 |---|---|
 | `FUSE_SOLID_MAX_LINES` | SOLID file-size limit (default `100`). |
-| `FUSE_HARNESS_REFS` | Directory of `.md` SOLID references → activates `solidReadGate`. |
+| `FUSE_HARNESS_REFS` | Explicit `path.delimiter`-list of `.md` SOLID-reference dirs → activates `solidReadGate`. Overrides auto-discovery. |
+| `FUSE_HARNESS_MARKETPLACES` | Comma-list of marketplace names whose `solid-*` skill refs are auto-discovered when `FUSE_HARNESS_REFS` is unset (default `fusengine-plugins`; an absent marketplace contributes nothing). Standalone `.claude`/`.codex`/`.cursor`/`.agents` skills are always scanned. |
 | `FUSE_ENFORCE_TTL_SEC` | APEX freshness window in seconds. |
 | `FUSE_LESSONS_THROTTLE_MIN` | Lessons-injection throttle (memory module). |
 

package/dist/cli/bin.mjs

@@ -4,9 +4,9 @@ import { r as loadDotenv } from "../dotenv-DGyLln7U.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
 import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D-Ydrw3D.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { Ot as todayUtc, kt as claudeHome, t as handleHook } from "../handle-gYSq5znf.mjs";
-import { join } from "node:path";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { Ot as todayUtc, kt as claudeHome, t as handleHook } from "../handle-VhWQxvyN.mjs";
+import { delimiter, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/changelog/fetch.ts
 /**
@@ -76,6 +76,67 @@ async function scanChangelog(now = Date.now(), home = homedir()) {
 	};
 }
 //#endregion
+//#region src/refs/discover.ts
+/** Immediate subdirectory names of `p`, or `[]` when it is missing/inaccessible. */
+function subdirs(p) {
+	try {
+		return readdirSync(p, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+	} catch {
+		return [];
+	}
+}
+/**
+* Every `skills/` parent dir across the Open-Agent-Skills layouts
+* (agentskills.io) of Claude Code, Codex and Cursor: the standalone skill roots
+* (`<base>/{.claude,.codex,.cursor,.agents}/skills` + `/etc/codex/skills`) plus
+* installed-plugin roots (`<plugin>/skills` under the Claude marketplace and the
+* Claude/Codex version caches). Shallow `readdir` only — no deep walk — so it is
+* cheap enough to run on every hook.
+*/
+function skillParents(home, cwd, marketplaces) {
+	const out = [];
+	for (const base of [cwd, home]) for (const tool of [
+		".claude",
+		".codex",
+		".cursor",
+		".agents"
+	]) out.push(join(base, tool, "skills"));
+	out.push(join("/etc", "codex", "skills"));
+	const mktRoot = join(home, ".claude", "plugins", "marketplaces");
+	for (const mkt of subdirs(mktRoot)) {
+		if (!marketplaces.includes(mkt)) continue;
+		const pluginsDir = join(mktRoot, mkt, "plugins");
+		for (const plugin of subdirs(pluginsDir)) out.push(join(pluginsDir, plugin, "skills"));
+	}
+	for (const cacheRoot of [join(home, ".claude", "plugins", "cache"), join(home, ".codex", "plugins", "cache")]) for (const mkt of subdirs(cacheRoot)) {
+		if (!marketplaces.includes(mkt)) continue;
+		for (const plugin of subdirs(join(cacheRoot, mkt))) for (const ver of subdirs(join(cacheRoot, mkt, plugin))) out.push(join(cacheRoot, mkt, plugin, ver, "skills"));
+	}
+	return out;
+}
+/**
+* Auto-discover SOLID reference dirs (`<skill>/references` for every `solid-*`
+* skill) across the Claude/Codex/Cursor skill layouts — the fallback used when
+* `FUSE_HARNESS_REFS` is unset. Deduped by skill name (first source wins, so a
+* marketplace skill shadows its version-cache copy). Returns a path-delimiter
+* list, or `""` when none is found — with no refs the SOLID-read gate stays off.
+* @param home - User home dir (`os.homedir()`).
+* @param cwd - Current project dir (`process.cwd()`).
+* @param marketplaces - Allowlist of marketplace names to scan (env
+*   `FUSE_HARNESS_MARKETPLACES`, default `["fusengine-plugins"]`); a marketplace
+*   absent from disk simply contributes nothing. Standalone
+*   `.claude`/`.codex`/`.cursor`/`.agents` skill roots are always scanned.
+* @returns A `path.delimiter`-joined list of `references` dirs, or `""`.
+*/
+function discoverRefs(home, cwd, marketplaces) {
+	const bySkill = /* @__PURE__ */ new Map();
+	for (const parent of skillParents(home, cwd, marketplaces)) for (const skill of subdirs(parent)) {
+		if (!skill.startsWith("solid-") || bySkill.has(skill)) continue;
+		if (subdirs(join(parent, skill)).includes("references")) bySkill.set(skill, join(parent, skill, "references"));
+	}
+	return [...bySkill.values()].join(delimiter);
+}
+//#endregion
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.
@@ -112,10 +173,12 @@ if (cmd === "hook") {
 		"seo",
 		"memory"
 	])).has(scopeArg) ? scopeArg : "core";
+	const marketplaces = (process.env.FUSE_HARNESS_MARKETPLACES ?? "fusengine-plugins").split(",").map((s) => s.trim()).filter(Boolean);
+	const refsDir = process.env.FUSE_HARNESS_REFS || discoverRefs(homedir(), process.cwd(), marketplaces) || void 0;
 	const outcome = await handleHook(id, await readStdin(), {
 		now: Date.now(),
 		cwd: process.cwd(),
-		refsDir: process.env.FUSE_HARNESS_REFS,
+		refsDir,
 		windowMs: resolveTtlSec(process.env) * 1e3,
 		scope
 	});

package/dist/{doc-helpers-B4XYL1v8.mjs → doc-helpers-BhzDmJ18.mjs}

@@ -13,7 +13,7 @@ function evaluateDoc(auths) {
 	const readPaths = auths.flatMap((a) => a.read_paths ?? []);
 	const liveC7 = sources.some((s) => /context7/i.test(s));
 	const liveExa = sources.some((s) => /exa/i.test(s));
-	const liveWeb = sources.some((s) => /web(search|fetch)/i.test(s));
+	const liveWeb = sources.some((s) => /web(search|fetch)|fuse-browser/i.test(s));
 	const cacheC7 = readPaths.some((p) => /\/context\/mcp\/context7-/.test(p));
 	const cacheExa = readPaths.some((p) => /\/context\/mcp\/(exa-search|exa-code-context)-/.test(p));
 	return {
@@ -36,7 +36,7 @@ function formatDocSatisfactionStatus(authorizations, sessionId) {
 function formatDocDeny(framework) {
 	return [
 		`APEX: Online documentation not consulted for ${framework}!`,
-		"Use ANY ONE of: mcp__context7__query-docs, mcp__exa__web_search_exa, WebSearch, or WebFetch.",
+		"Use ANY ONE of: mcp__context7__query-docs, mcp__exa__web_search_exa (or — if Exa is down — mcp__fuse-browser__browser_fetch / browser_crawl / browser_serp_batch), WebSearch, or WebFetch.",
 		"This check is once per session — after consulting one source, Write/Edit will be allowed."
 	].join("\n");
 }

package/dist/freshness/index.mjs

@@ -1,3 +1,3 @@
-import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-B4XYL1v8.mjs";
+import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-BhzDmJ18.mjs";
 import { t as incrementTrivialEditCounter } from "../freshness-43gxYpiX.mjs";
 export { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/{handle-gYSq5znf.mjs → handle-VhWQxvyN.mjs}

@@ -3,9 +3,9 @@ import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
 import { t as HOME_DIR } from "./dotenv-DGyLln7U.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { t as detectHarness } from "./harness-C8Nxxyn_.mjs";
-import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-BCRqp9XG.mjs";
+import { A as evaluateApex, E as detectCreationIntent, L as requiredArchSkill, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, l as parseField, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS$1 } from "./validate-B3wkqEoN.mjs";
 import { N as detectFramework, j as countLines, n as FAIL_CLOSED, t as evaluate } from "./evaluate-B1n1ti0N.mjs";
-import { r as isDocConsulted } from "./doc-helpers-B4XYL1v8.mjs";
+import { r as isDocConsulted } from "./doc-helpers-BhzDmJ18.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-BkoEbdec.mjs";
 import { c as extractText, i as cacheLookupSubstring, l as loadIndex, n as webfetchCacheWrite, r as cacheLookup, t as mcpCacheWrite } from "./mcp-store-CDUVqtJ0.mjs";
@@ -206,6 +206,20 @@ function agentActivity(name, ts, quality) {
 	};
 }
 /**
+* The documentation source a tool satisfies for the doc-consultation gate, or
+* undefined. Context7/Exa are the primary sources; fuse-browser is the fallback
+* when Exa is down (`browser_fetch`/`browser_crawl`/`browser_serp_batch`); the
+* built-in WebSearch/WebFetch also count.
+* @param tool - The harness tool name.
+*/
+function docSourceOf$1(tool) {
+	if (/context7/i.test(tool)) return "context7";
+	if (/exa/i.test(tool)) return "exa";
+	if (/browser_(fetch|crawl|serp)/i.test(tool)) return "fuse-browser";
+	if (tool === "WebSearch") return "websearch";
+	if (tool === "WebFetch") return "webfetch";
+}
+/**
 * Map a live tool-use to the activity to record, or null when nothing is
 * tracked. Works across harnesses — tool names are globally distinct:
 * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
@@ -215,30 +229,31 @@ function agentActivity(name, ts, quality) {
 * - a read tool opening a `.md` reference → `ref`
 */
 function activityFor(event) {
-	if (/context7|exa/i.test(event.tool)) return {
+	const out = [];
+	const docSource = docSourceOf$1(event.tool);
+	if (docSource) out.push({
 		kind: "doc",
 		framework: event.framework,
 		sessionId: event.sessionId,
-		source: /exa/i.test(event.tool) ? "exa" : "context7"
-	};
+		source: docSource
+	});
 	if (event.tool === "Task" || event.tool === "Agent") {
 		const name = String(event.input?.subagent_type ?? event.input?.name ?? "").split(":").pop() ?? "";
-		if (!name) return null;
-		return agentActivity(name, event.now, qualityFor(event.responseLength, AGENT_QUALITY_MIN));
+		if (name) out.push(agentActivity(name, event.now, qualityFor(event.responseLength, AGENT_QUALITY_MIN)));
+		return out;
 	}
 	const hit = classifyExplore(event.tool, event.input);
 	if (hit) {
 		const quality = hit.cacheHit ? "sufficient" : qualityFor(event.responseLength, EXPLORE_QUALITY_MIN);
-		return agentActivity(hit.phase, event.now, quality);
-	}
-	if (READ_TOOLS.has(event.tool)) {
+		out.push(agentActivity(hit.phase, event.now, quality));
+	} else if (READ_TOOLS.has(event.tool)) {
 		const path = String(event.input?.file_path ?? event.input?.path ?? "");
-		if (path.endsWith(".md")) return {
+		if (path.endsWith(".md")) out.push({
 			kind: "ref",
 			path
-		};
+		});
 	}
-	return null;
+	return out;
 }
 //#endregion
 //#region src/runtime/mcp-key.ts
@@ -4571,7 +4586,7 @@ async function handleHook(id, payload, opts) {
 		const response = payload.tool_response ?? payload.tool_output;
 		mcpPostStore(event.tool, event.input, response, mcpDir);
 		const designWarn = designGate(payload, event, mcpDir, opts.cwd);
-		const activity = activityFor({
+		const activities = activityFor({
 			tool: event.tool,
 			input: event.input,
 			sessionId: event.sessionId,
@@ -4579,7 +4594,7 @@ async function handleHook(id, payload, opts) {
 			now: opts.now,
 			responseLength: extractText(response).length
 		});
-		if (activity) await recordActivity(file, activity);
+		for (const activity of activities) await recordActivity(file, activity);
 		postTrackingSideEffects(opts.scope ?? "core", event, event.input, opts.now, payload, opts.cwd);
 		const seoDeny = opts.scope === "seo" ? seoPostToolUseResponse(payload) : null;
 		if (seoDeny) return {

package/dist/index.mjs

@@ -5,9 +5,9 @@ import { i as parseEnvFile, n as envCandidates, r as loadDotenv, t as HOME_DIR }
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-C8Nxxyn_.mjs";
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-BCRqp9XG.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "./validate-B3wkqEoN.mjs";
 import { A as matchPatterns, C as ASK_PATTERNS, D as GIT_BLOCKED, E as GIT_ASK, M as evaluateFileSize, N as detectFramework, O as PROJECT_INSTALL, S as protectedPathGuard, T as securityGuard, _ as CODE_REDIRECT, a as registerGuard, b as PROTECTED_FRAGMENTS, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as countLines, k as SYSTEM_INSTALL, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as FILE_REDIRECT, w as CRITICAL_PATTERNS, x as PROTECTED_GIT_RE, y as bashWriteGuard } from "./evaluate-B1n1ti0N.mjs";
-import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-B4XYL1v8.mjs";
+import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-BhzDmJ18.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-BfX0hJg8.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-BkoEbdec.mjs";

package/dist/policy/index.mjs

@@ -1,4 +1,4 @@
-import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-BCRqp9XG.mjs";
+import { A as evaluateApex, C as MAX_EXA_RESULTS, D as APEX_GATES, E as detectCreationIntent, F as detectProjectType, I as isApexCommand, L as requiredArchSkill, M as solidReadGate, N as DEV_KEYWORDS, O as brainstormGate, P as detectModularArchitecture, S as frameworkSolidGate, T as capVerbosity, _ as buildClaudeMdContext, a as firstHeading, b as skillTriggerGate, c as parseBodyDesc, d as PROJECT_INDICATORS, f as buildApexTaskContext, g as buildApexInstruction, h as DEV_VERBS, i as firstComment, j as freshnessGate, k as docConsultedGate, l as parseField, m as loadApexTaskState, n as missingSeoElements, o as parseEnrichment, p as buildApexTaskInjection, r as descFromText, s as parseEntry, t as isHtmlLike, u as EXCLUDE_DIRS, v as detectClaudeMdProjectType, w as MAX_TOKENS, x as SKILL_TRIGGERS, y as detectRequiredSkills } from "../validate-B3wkqEoN.mjs";
 import { A as matchPatterns, C as ASK_PATTERNS, D as GIT_BLOCKED, E as GIT_ASK, M as evaluateFileSize, N as detectFramework, O as PROJECT_INSTALL, S as protectedPathGuard, T as securityGuard, _ as CODE_REDIRECT, a as registerGuard, b as PROTECTED_FRAGMENTS, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as countLines, k as SYSTEM_INSTALL, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as FILE_REDIRECT, w as CRITICAL_PATTERNS, x as PROTECTED_GIT_RE, y as bashWriteGuard } from "../evaluate-B1n1ti0N.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, SKILL_TRIGGERS, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate };

package/dist/runtime/index.d.mts

@@ -78,7 +78,7 @@ interface ToolEvent {
 *   → `agent` credited to the matching REQUIRED_AGENTS phase
 * - a read tool opening a `.md` reference → `ref`
 */
-declare function activityFor(event: ToolEvent): Activity | null;
+declare function activityFor(event: ToolEvent): Activity[];
 //#endregion
 //#region src/runtime/gate-input.d.ts
 /** A tool-use to gate, plus the session pointers needed for the stateful gates. */

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { $ as sessionStartCore, A as writePluginMap, At as fusengineCache, B as trackSessionChanges, C as aipilotPostToolUse, Ct as isoUtc, D as lessonsStateFileFor, Dt as securityStatePath, E as lessonsFileFor, Et as securityStateDir, F as mergeLines, Ft as sessionsDir, G as validateTeammateOutput, H as cleanupSession, I as countFiles, J as detectSolidProfile, K as trackAgentMemory, L as getFileDesc, M as isProject, Mt as sanitizeSessionId, N as writeTree, Nt as saveSessionState, O as cartoSessionStart, Ot as todayUtc, P as loadEnriched, Pt as sessionStatePath, Q as runSessionStartCleanups, R as listChildren, S as dispatchLifecycle, St as activityFor, T as dispatchLessons, Tt as saveSecurityState, U as saveApexState, V as validateRulesLoaded, W as logToolFailure, X as injectRules, Y as solidDetectStart, Z as readRules, _ as postTrackingSideEffects, _t as MCP_TTL_MS, a as TRIVIAL_BUDGET, at as gitContext, b as trackSkillRead, bt as isMcpTool, c as detectDuplication, ct as taskContext, d as lifecycleStdout, dt as defaultStateDir, et as pruneEmptyDirs, f as postEditContext, ft as projectHash, g as securityAdvisory, gt as mcpPreIntercept, h as dispatchMemory, ht as mcpPostStore, i as REQUIRED_AGENTS, it as devContext, j as generateProjectMap, jt as loadSessionState, k as generateEcosystemMap, kt as claudeHome, l as dryGate, lt as respond, m as seoPostToolUseResponse, mt as normalizeEvent, n as handlePre, nt as removeOldFiles, o as gate, ot as projectContext, p as seoPostToolUse, pt as trackFile, q as subagentCacheContext, r as DEFAULT_WINDOW_MS, rt as trimLogFile, s as preCommitGate, st as promptSubmitContext, t as handleHook, tt as purgeTtlTree, u as extractSymbols, ut as recordActivity, v as trackWatchResearch, vt as WEBFETCH_TTL_MS, w as dispatchAipilot, wt as loadSecurityState, x as trackEnrichment, xt as queryOf, y as trackMcpResearch, yt as cacheQueryOf, z as postEditTypescript } from "../handle-gYSq5znf.mjs";
+import { $ as sessionStartCore, A as writePluginMap, At as fusengineCache, B as trackSessionChanges, C as aipilotPostToolUse, Ct as isoUtc, D as lessonsStateFileFor, Dt as securityStatePath, E as lessonsFileFor, Et as securityStateDir, F as mergeLines, Ft as sessionsDir, G as validateTeammateOutput, H as cleanupSession, I as countFiles, J as detectSolidProfile, K as trackAgentMemory, L as getFileDesc, M as isProject, Mt as sanitizeSessionId, N as writeTree, Nt as saveSessionState, O as cartoSessionStart, Ot as todayUtc, P as loadEnriched, Pt as sessionStatePath, Q as runSessionStartCleanups, R as listChildren, S as dispatchLifecycle, St as activityFor, T as dispatchLessons, Tt as saveSecurityState, U as saveApexState, V as validateRulesLoaded, W as logToolFailure, X as injectRules, Y as solidDetectStart, Z as readRules, _ as postTrackingSideEffects, _t as MCP_TTL_MS, a as TRIVIAL_BUDGET, at as gitContext, b as trackSkillRead, bt as isMcpTool, c as detectDuplication, ct as taskContext, d as lifecycleStdout, dt as defaultStateDir, et as pruneEmptyDirs, f as postEditContext, ft as projectHash, g as securityAdvisory, gt as mcpPreIntercept, h as dispatchMemory, ht as mcpPostStore, i as REQUIRED_AGENTS, it as devContext, j as generateProjectMap, jt as loadSessionState, k as generateEcosystemMap, kt as claudeHome, l as dryGate, lt as respond, m as seoPostToolUseResponse, mt as normalizeEvent, n as handlePre, nt as removeOldFiles, o as gate, ot as projectContext, p as seoPostToolUse, pt as trackFile, q as subagentCacheContext, r as DEFAULT_WINDOW_MS, rt as trimLogFile, s as preCommitGate, st as promptSubmitContext, t as handleHook, tt as purgeTtlTree, u as extractSymbols, ut as recordActivity, v as trackWatchResearch, vt as WEBFETCH_TTL_MS, w as dispatchAipilot, wt as loadSecurityState, x as trackEnrichment, xt as queryOf, y as trackMcpResearch, yt as cacheQueryOf, z as postEditTypescript } from "../handle-VhWQxvyN.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/dist/{validate-BCRqp9XG.mjs → validate-B3wkqEoN.mjs}

@@ -1,6 +1,6 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
 import { j as countLines } from "./evaluate-B1n1ti0N.mjs";
-import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-B4XYL1v8.mjs";
+import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-BhzDmJ18.mjs";
 import { t as routeReferences } from "./router-BfX0hJg8.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync } from "node:fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",