@fusengine/harness 0.1.75 → 0.1.77

package/dist/adapters/claude/index.d.mts

@@ -1,2 +1,2 @@
-import { a as denyResponse, c as informResponse, d as toClaudeResponse, i as contextResponse, l as readClaudeInput, n as attachSystemMessage, o as fileSizeGuard, r as blockResponse, s as guard, t as ClaudeHookInput, u as systemMessage } from "../../index-a6kvHEPa.mjs";
+import { a as denyResponse, c as informResponse, d as toClaudeResponse, i as contextResponse, l as readClaudeInput, n as attachSystemMessage, o as fileSizeGuard, r as blockResponse, s as guard, t as ClaudeHookInput, u as systemMessage } from "../../index-DGxNjXW7.mjs";
 export { ClaudeHookInput, attachSystemMessage, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, informResponse, readClaudeInput, systemMessage, toClaudeResponse };

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-BxQwhdZB.mjs";
+import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-51RSspJ1.mjs";
 export { attachSystemMessage, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, informResponse, readClaudeInput, systemMessage, toClaudeResponse };

package/dist/adapters/codex/index.d.mts

@@ -1,5 +1,5 @@
 import { t as Prompt } from "../../types-DVbIl9md.mjs";
-import { a as denyResponse, c as informResponse, i as contextResponse, l as readClaudeInput, t as ClaudeHookInput } from "../../index-a6kvHEPa.mjs";
+import { a as denyResponse, c as informResponse, i as contextResponse, l as readClaudeInput, t as ClaudeHookInput } from "../../index-DGxNjXW7.mjs";
 
 //#region src/adapters/codex/index.d.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -2,7 +2,7 @@ import { t as evaluate } from "../../evaluate-ClfbCDiY.mjs";
 import { f as countLines } from "../../home-state-BXf38Zi1.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "../../permission-mode-BN3MNgbm.mjs";
-import { c as readClaudeInput, i as denyResponse, r as contextResponse, s as informResponse, v as commandToString } from "../../claude-BxQwhdZB.mjs";
+import { c as readClaudeInput, i as denyResponse, r as contextResponse, s as informResponse, v as commandToString } from "../../claude-51RSspJ1.mjs";
 //#region src/adapters/codex/index.ts
 /**
 * OpenAI Codex CLI adapter (hook-mode). Codex's `PreToolUse` hook (since 2026)

package/dist/adapters/hermes/index.mjs

@@ -1,2 +1,2 @@
-import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-OVoZtUzT.mjs";
+import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-rTmVdhUL.mjs";
 export { guard, readHermesInput, toHermesResponse };

package/dist/{claude-BxQwhdZB.mjs → claude-51RSspJ1.mjs}

@@ -178,23 +178,19 @@ function informResponse(event, notice, context) {
 		}
 	});
 }
-/** Attach a user-visible `systemMessage` onto an already-rendered hook stdout JSON ({@link systemMessage} alone when empty/unparseable). */
+/** Attach a `systemMessage`, MERGING it with any already present (`\n`-joined) instead of overwriting — several producers may each call this on the same stdout in one hook invocation. */
 function attachSystemMessage(stdout, notice) {
 	try {
+		const parsed = JSON.parse(stdout), prev = typeof parsed.systemMessage === "string" ? parsed.systemMessage : "";
 		return JSON.stringify({
-			...JSON.parse(stdout),
-			systemMessage: notice
+			...parsed,
+			systemMessage: prev ? `${prev}\n${notice}` : notice
 		});
 	} catch {
 		return systemMessage(notice);
 	}
 }
-/**
-* Render a portable {@link Prompt} as a Claude Code hook response:
-* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
-* (interactive confirm), `inform` → `additionalContext` — plus the user-visible
-* `systemMessage` channel when the prompt carries a `userMessage`.
-*/
+/** Render a portable {@link Prompt} as a Claude Code hook response: `block` → deny, `ask` → interactive `permissionDecision`, `inform` → `additionalContext` (+ `systemMessage` when `userMessage` is set). */
 function toClaudeResponse(event, prompt) {
 	const reason = formatPrompt(prompt);
 	if (prompt.kind === "block") return denyResponse(event, reason);
@@ -206,10 +202,7 @@ function toClaudeResponse(event, prompt) {
 	if (prompt.userMessage) return informResponse(event, prompt.userMessage, prompt.reason ? reason : "");
 	return contextResponse(event, reason);
 }
-/**
-* Run the bundled policy over a Claude payload and return the native response
-* string (deny/ask/additionalContext), or null to allow.
-*/
+/** Run the bundled policy over a Claude payload and return the native response string (deny/ask/additionalContext), or null to allow. */
 function guard(input) {
 	const result = evaluate({
 		tool: input.tool_name ?? "Write",

package/dist/cli/bin.mjs

@@ -4,8 +4,8 @@ import { t as detectHarness } from "../harness-Cb9xR8dC.mjs";
 import { t as claudeHome } from "../home-state-BXf38Zi1.mjs";
 import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-3tyTW9Ud.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, t as handleHook, zt as todayUtc } from "../handle-Cn6v5UpD.mjs";
-import { p as readStdin$1 } from "../claude-BxQwhdZB.mjs";
+import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, t as handleHook, zt as todayUtc } from "../handle-BDlk2utY.mjs";
+import { p as readStdin$1 } from "../claude-51RSspJ1.mjs";
 import { delimiter, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{handle-Cn6v5UpD.mjs → handle-BDlk2utY.mjs}

@@ -14,8 +14,8 @@ import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cac
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
 import { a as writeLastNonce, c as recordAgent, d as recordRefRead, f as recordTarget, h as apexAuthorizationGate, i as verifyTrack, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, r as signTrack, s as emptyTrack, t as loadTrack, u as recordDoc } from "./store-Bcn08y9m.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "./permission-mode-BN3MNgbm.mjs";
-import { _ as writeText, d as collectFiles, f as pathExists, g as spawnCapture, h as sleep, i as denyResponse, l as systemMessage, m as readText, n as blockResponse, r as contextResponse, s as informResponse, t as attachSystemMessage, v as commandToString } from "./claude-BxQwhdZB.mjs";
-import { r as toHermesResponse } from "./hermes-OVoZtUzT.mjs";
+import { _ as writeText, d as collectFiles, f as pathExists, g as spawnCapture, h as sleep, i as denyResponse, l as systemMessage, m as readText, n as blockResponse, r as contextResponse, s as informResponse, t as attachSystemMessage, v as commandToString } from "./claude-51RSspJ1.mjs";
+import { r as toHermesResponse } from "./hermes-rTmVdhUL.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -597,7 +597,7 @@ function promptSubmitContext(prompt, cwd) {
 	const ctx = buildClaudeMdContext(prompt, cwd);
 	if (!ctx) return "";
 	if (!oncePerWindow(claudeMdKey(prompt, ctx), 3e3)) return "";
-	return contextResponse("UserPromptSubmit", ctx);
+	return attachSystemMessage(contextResponse("UserPromptSubmit", ctx), "CLAUDE.md injected");
 }
 /**
 * PreToolUse Task context injection: render the APEX sub-agent context as a
@@ -770,7 +770,7 @@ function sessionStartCore(cwd, home = homedir(), now = Date.now()) {
 	const dev = devContext(cwd);
 	runSessionStartCleanups(home, now);
 	const ctx = [md, dev].filter(Boolean).join("\n");
-	return ctx ? contextResponse("SessionStart", ctx) : "";
+	return ctx ? attachSystemMessage(contextResponse("SessionStart", ctx), "CLAUDE.md injected") : "";
 }
 //#endregion
 //#region src/runtime/lifecycle/inject-rules.ts
@@ -801,7 +801,7 @@ function readRules(rulesDir) {
 */
 function injectRules(pluginRoot, event) {
 	const content = readRules(join(pluginRoot, "rules"));
-	return content ? contextResponse(event, content) : "";
+	return content ? attachSystemMessage(contextResponse(event, content), "rules 00-08 injected") : "";
 }
 //#endregion
 //#region src/runtime/lifecycle/solid-detect.ts
@@ -1393,18 +1393,20 @@ function trackAgentMemory(data, home = homedir(), now = Date.now()) {
 //#region src/runtime/lifecycle/teammate-idle.ts
 /**
 * Handle TeammateIdle: when the teammate's session-changes file shows code was
-* modified, suggest sniper validation as `additionalContext`. Ports
-* `teammate-idle/validate-teammate-output.py`.
+* modified, suggest sniper validation as plain text — TeammateIdle has no
+* `additionalContext` channel (rejects `hookSpecificOutput`), so the caller
+* ({@link module:teammate-idle-check.teammateIdleContext}) rides this text on
+* the `systemMessage` channel instead. Ports `teammate-idle/validate-teammate-output.py`.
 * @param data - The raw hook payload.
 * @param home - Home dir (defaults to `~`).
-* @returns The native hook stdout (possibly empty).
+* @returns The plain notice text, or "" when no code file was modified.
 */
 function validateTeammateOutput(data, home = homedir()) {
 	const teammate = String(data.teammate_name ?? "unknown");
 	const changes = loadSessionState(sanitizeSessionId(data.session_id) ?? "unknown", home).changes;
 	const count = changes?.cumulativeCodeFiles ?? 0;
-	if (count > 0) return contextResponse("TeammateIdle", `Teammate '${teammate}' going idle after modifying ${count} code file(s): ${(changes?.modifiedFiles ?? []).slice(0, 5).join(", ")}. Consider running sniper validation.`);
-	return "";
+	if (count === 0) return "";
+	return `Teammate '${teammate}' going idle after modifying ${count} code file(s): ${(changes?.modifiedFiles ?? []).slice(0, 5).join(", ")}. Consider running sniper validation.`;
 }
 //#endregion
 //#region src/runtime/lifecycle/tool-failure.ts
@@ -2210,19 +2212,12 @@ const IDLE_DEDUP_MS = 3e4;
 function missingDeliverables(sessionId, home) {
 	return (loadSessionState(sessionId, home).changes?.modifiedFiles ?? []).filter((f) => typeof f === "string" && f !== "" && !existsSync(f));
 }
-/** Pull the `additionalContext` body out of a `contextResponse` stdout ("" when empty/unparseable). */
-function bodyOf(stdout) {
-	if (!stdout) return "";
-	try {
-		return JSON.parse(stdout).hookSpecificOutput?.additionalContext ?? "";
-	} catch {
-		return "";
-	}
-}
 /**
 * Handle TeammateIdle: merge the existing sniper suggestion with a missing-
-* deliverable warning (deduped) into one `additionalContext` response, or "" when
-* neither fires.
+* deliverable warning (deduped) into one advisory `systemMessage`, or "" when
+* neither fires. TeammateIdle rejects `hookSpecificOutput` (no `additionalContext`
+* channel) — `systemMessage` is the only user-visible, non-blocking channel it
+* accepts.
 * @param data - The raw TeammateIdle payload (`teammate_name`, `session_id`).
 * @param cwd - Project root (state dir for the dedup sidecar).
 * @param home - Home dir (defaults to `~`).
@@ -2230,7 +2225,7 @@ function bodyOf(stdout) {
 * @returns The native hook stdout, or "".
 */
 function teammateIdleContext(data, cwd, home = homedir(), now = Date.now()) {
-	const sniper = bodyOf(validateTeammateOutput(data, home));
+	const sniper = validateTeammateOutput(data, home);
 	const sessionId = sanitizeSessionId(data.session_id);
 	const teammate = String(data.teammate_name ?? data.team_name ?? "unknown");
 	let notice = "";
@@ -2244,7 +2239,7 @@ function teammateIdleContext(data, cwd, home = homedir(), now = Date.now()) {
 	const merged = [sniper, notice].filter(Boolean).join("\n\n");
 	if (!merged) return "";
 	notify("human");
-	return contextResponse("TeammateIdle", merged);
+	return systemMessage(merged);
 }
 //#endregion
 //#region src/policy/lessons/trigger-index.ts
@@ -3148,17 +3143,10 @@ function collectViolations(files, max) {
 	return violations;
 }
 /**
-* Handle TaskCompleted (ports `task-completed/validate-task-solid.py`, plus the
-* receipt gate). SOLID violations surface first as `SOLID VIOLATION`
-* additionalContext; once the files comply, {@link receiptGate} refuses a "done"
-* that has no fresh passing tsc/test receipt. Also reused verbatim from `Stop`
-* for Codex's core scope ({@link stopCore}): Codex never emits `TaskCompleted`
-* (codex-plugins/docs/reference/hooks.md) so this is its only completion check;
-* `event` lets that caller stamp the real hook name instead of a false one.
+* Handle TaskCompleted (ports `task-completed/validate-task-solid.py` + the
+* receipt gate); also reused verbatim for Codex's `Stop` via {@link stopCore}
+* (Codex never emits `TaskCompleted`) — `event` stamps the real hook name.
 * @param payload - The TaskCompleted/Stop payload (`task_id`, `task_subject`, `session_id`).
-* @param home - Home dir (defaults to `~`).
-* @param now - Clock (defaults to `Date.now()`).
-* @param stateDir - Track base dir (defaults to the cwd-derived state dir; matches `handleHook`).
 * @param event - The hook event name to stamp on the SOLID-violation response (default `TaskCompleted`).
 * @returns The native hook stdout, or `""` when the session is clean.
 */
@@ -3171,7 +3159,8 @@ function validateTaskSolid(payload, home = homedir(), now = Date.now(), stateDir
 	const violations = collectViolations(files, max);
 	if (violations.length === 0) return receiptGate(sid, files, now, stateDir) ?? "";
 	const taskId = String(payload.task_id ?? "");
-	return contextResponse(event, `SOLID VIOLATION in task '${String(payload.task_subject ?? "")}' (${taskId}): ${violations.length} file(s) exceed ${max} lines: ` + violations.slice(0, 5).join("; "));
+	const msg = `SOLID VIOLATION in task '${String(payload.task_subject ?? "")}' (${taskId}): ${violations.length} file(s) exceed ${max} lines: ` + violations.slice(0, 5).join("; ");
+	return event === "TaskCompleted" ? systemMessage(msg) : contextResponse(event, msg);
 }
 //#endregion
 //#region src/runtime/lifecycle/cartographer/fs-util.ts
@@ -4003,13 +3992,13 @@ function injectMemory(cwd, event, now) {
 	if (!content) return "";
 	const { content: curated, archive, report } = curateLessons(content, now, root);
 	if (curated !== content) content = persistCuration(file, root, curated, archive, content);
-	const ctx = `Project lessons — never reproduce these:\n${capFragment("lessons", compressInjection(content))}\nYou may append OR refine/merge/dedupe bullets in MEMORY/LESSON.md — keep it terse.`;
-	return report ? attachSystemMessage(contextResponse(event, ctx), `LESSON.md curation:\n${report}`) : contextResponse(event, ctx);
+	const withNotice = attachSystemMessage(contextResponse(event, `Project lessons — never reproduce these:\n${capFragment("lessons", compressInjection(content))}\nYou may append OR refine/merge/dedupe bullets in MEMORY/LESSON.md — keep it terse.`), "lessons injected");
+	return report ? attachSystemMessage(withNotice, `LESSON.md curation:\n${report}`) : withNotice;
 }
 /**
 * Route a fuse-lessons event to its handler. Returns the native stdout for
-* context-injecting events (SessionStart/SubagentStart/Stop) or "" for the
-* side-effect-only PostToolUse mark.
+* context-injecting events (SessionStart/SubagentStart/UserPromptSubmit inject
+* MEMORY/LESSON.md, Stop reminds) or "" for the side-effect-only PostToolUse mark.
 * @param event - The raw hook event name.
 * @param payload - The raw hook payload.
 * @param cwd - Project root for memory injection.
@@ -4019,7 +4008,8 @@ function injectMemory(cwd, event, now) {
 function dispatchLessons(event, payload, cwd, now) {
 	switch (event) {
 		case "SessionStart":
-		case "SubagentStart": return injectMemory(cwd, event, now);
+		case "SubagentStart":
+		case "UserPromptSubmit": return injectMemory(cwd, event, now);
 		case "Stop": return remindWrite(payload, now);
 		case "PostToolUse":
 			markWrite(payload, now);
@@ -5332,7 +5322,10 @@ function sessionStart(input) {
 function dispatchLifecycle(input) {
 	switch (input.event) {
 		case "SessionStart": return sessionStart(input);
-		case "UserPromptSubmit": return input.scope === "rules" ? injectRules(process.env.CLAUDE_PLUGIN_ROOT ?? input.cwd, input.event) : null;
+		case "UserPromptSubmit":
+			if (input.scope === "rules") return injectRules(process.env.CLAUDE_PLUGIN_ROOT ?? input.cwd, input.event);
+			if (input.scope === "lessons") return dispatchLessons("UserPromptSubmit", input.payload, input.cwd, input.now);
+			return null;
 		case "SubagentStart":
 			if (input.scope === "rules") return injectRules(process.env.CLAUDE_PLUGIN_ROOT ?? input.cwd, input.event);
 			if (input.scope === "aipilot") return "";
@@ -7192,18 +7185,25 @@ async function recordActivity(file, activity) {
 * - cline: NO user-visible channel (`cancel`/`contextModification`/
 *   `errorMessage`-on-cancel only) — the notice is dropped silently (a pure
 *   notice returns "" = plain allow).
-*/
-function respond(id, prompt) {
+* @param id - Harness id.
+* @param prompt - The portable prompt to render.
+* @param event - The firing hook event name for the claude-code/codex branch
+* (defaults to `"PreToolUse"`, the only phase every existing caller but
+* `handle-post.ts` renders) — a POST-phase caller MUST pass `"PostToolUse"`
+* (or its real raw event name) so `hookEventName` matches the event that
+* actually fired instead of a hardcoded, wrong `"PreToolUse"`.
+*/
+function respond(id, prompt, event = "PreToolUse") {
 	const message = formatPrompt(prompt);
 	const { kind, userMessage, reason } = prompt;
 	switch (id) {
 		case "claude-code":
 		case "codex":
-			if (kind === "block") return denyResponse("PreToolUse", message);
-			if (kind === "inform") return userMessage ? informResponse("PreToolUse", userMessage, reason ? message : "") : contextResponse("PreToolUse", message);
-			if (id === "codex") return denyResponse("PreToolUse", `[downgraded from ask — Codex has no interactive approval]\n${message}`);
+			if (kind === "block") return denyResponse(event, message);
+			if (kind === "inform") return userMessage ? informResponse(event, userMessage, reason ? message : "") : contextResponse(event, message);
+			if (id === "codex") return denyResponse(event, `[downgraded from ask — Codex has no interactive approval]\n${message}`);
 			return JSON.stringify({ hookSpecificOutput: {
-				hookEventName: "PreToolUse",
+				hookEventName: event,
 				permissionDecision: "ask",
 				permissionDecisionReason: message
 			} });
@@ -7616,9 +7616,9 @@ const KNOWN_DOMAINS = [
 /** Gate writing design-system.md: requires phase >= 2 and the per-mode screenshot quota. */
 function designSystemWriteGate(filePath, state) {
 	if (!filePath.endsWith("design-system.md")) return null;
-	if (state.currentPhase < 2) return deny(`BLOCKED: Cannot write design-system.md at phase ${state.currentPhase}. RECOVERY: 1) Read identity templates from skills/design-system/ 2) Read design-inspiration.md 3) Browse and screenshot sites 4) Then write design-system.md`);
+	if (state.currentPhase < 2) return deny(`BLOCKED: Cannot write design-system.md at phase ${state.currentPhase}. RECOVERY: 1) Read identity templates from skills/design-system/ 2) Read design-inspiration.md 3) Browse sites and take a screenshot with mcp__fuse-browser__browser_screenshot on a LIVE session (note: browser_shots_batch/browser_site_shots do NOT advance the phase) 4) Then write design-system.md`);
 	const needed = MIN_SCREENSHOTS[state.mode];
-	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} screenshots for mode '${state.mode}'. RECOVERY: 1) Take ${needed - state.screenshotsCount} more fuse-browser screenshots 2) Use browser_open + browser_navigate + browser_screenshot fullPage:true 3) Then write design-system.md`);
+	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} screenshots for mode '${state.mode}'. RECOVERY: 1) Take ${needed - state.screenshotsCount} more screenshots with mcp__fuse-browser__browser_screenshot (browser_shots_batch/browser_site_shots do NOT count) 2) Use browser_open + browser_navigate + browser_screenshot fullPage:true 3) Then write design-system.md`);
 	return null;
 }
 /** Gate Gemini create_frontend: requires phase >= 3 and a validated design system. */
@@ -8465,7 +8465,7 @@ async function handlePost(ctx) {
 		stdout: respond(id, userMessage ? {
 			...designWarn,
 			userMessage
-		} : designWarn),
+		} : designWarn, "PostToolUse"),
 		exit: 0
 	};
 	if (!userMessage) return {
@@ -8482,7 +8482,7 @@ async function handlePost(ctx) {
 		userMessage
 	};
 	if (!extra) return {
-		stdout: respond(id, withUserMessage),
+		stdout: respond(id, withUserMessage, "PostToolUse"),
 		exit: 0
 	};
 	if (id === "claude-code" || id === "codex") return {
@@ -8490,7 +8490,7 @@ async function handlePost(ctx) {
 		exit: 0
 	};
 	return {
-		stdout: respond(id, withUserMessage) || extra,
+		stdout: respond(id, withUserMessage, "PostToolUse") || extra,
 		exit: 0
 	};
 }

package/dist/{hermes-OVoZtUzT.mjs → hermes-rTmVdhUL.mjs}

@@ -1,6 +1,6 @@
 import { t as evaluate } from "./evaluate-ClfbCDiY.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { c as readClaudeInput, v as commandToString } from "./claude-BxQwhdZB.mjs";
+import { c as readClaudeInput, v as commandToString } from "./claude-51RSspJ1.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/{index-a6kvHEPa.d.mts → index-DGxNjXW7.d.mts}

@@ -31,19 +31,11 @@ declare function contextResponse(event: string, text: string): string;
 declare function systemMessage(text: string): string;
 /** An `inform` response with a user-visible notice (Python `allow_pass`/`post_pass` parity): a pure pass reuses {@link systemMessage} alone; with agent-facing `context` both channels merge in one JSON. */
 declare function informResponse(event: string, notice: string, context: string): string;
-/** Attach a user-visible `systemMessage` onto an already-rendered hook stdout JSON ({@link systemMessage} alone when empty/unparseable). */
+/** Attach a `systemMessage`, MERGING it with any already present (`\n`-joined) instead of overwriting — several producers may each call this on the same stdout in one hook invocation. */
 declare function attachSystemMessage(stdout: string, notice: string): string;
-/**
-* Render a portable {@link Prompt} as a Claude Code hook response:
-* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
-* (interactive confirm), `inform` → `additionalContext` — plus the user-visible
-* `systemMessage` channel when the prompt carries a `userMessage`.
-*/
+/** Render a portable {@link Prompt} as a Claude Code hook response: `block` → deny, `ask` → interactive `permissionDecision`, `inform` → `additionalContext` (+ `systemMessage` when `userMessage` is set). */
 declare function toClaudeResponse(event: string, prompt: Prompt): string;
-/**
-* Run the bundled policy over a Claude payload and return the native response
-* string (deny/ask/additionalContext), or null to allow.
-*/
+/** Run the bundled policy over a Claude payload and return the native response string (deny/ask/additionalContext), or null to allow. */
 declare function guard(input: ClaudeHookInput): string | null;
 /** @deprecated use {@link guard}. Kept for back-compat. */
 declare const fileSizeGuard: typeof guard;

package/dist/runtime/index.d.mts

@@ -219,8 +219,15 @@ declare function normalizeEvent(id: string, payload: Record<string, unknown>): N
 * - cline: NO user-visible channel (`cancel`/`contextModification`/
 *   `errorMessage`-on-cancel only) — the notice is dropped silently (a pure
 *   notice returns "" = plain allow).
+* @param id - Harness id.
+* @param prompt - The portable prompt to render.
+* @param event - The firing hook event name for the claude-code/codex branch
+* (defaults to `"PreToolUse"`, the only phase every existing caller but
+* `handle-post.ts` renders) — a POST-phase caller MUST pass `"PostToolUse"`
+* (or its real raw event name) so `hookEventName` matches the event that
+* actually fired instead of a hardcoded, wrong `"PreToolUse"`.
 */
-declare function respond(id: string, prompt: Prompt): string;
+declare function respond(id: string, prompt: Prompt, event?: string): string;
 //#endregion
 //#region src/runtime/mcp-key.d.ts
 /** Cached-MCP freshness (ms) from `FUSE_MCP_TTL_SEC` (default 48h). */
@@ -442,11 +449,13 @@ declare function trackAgentMemory(data: Record<string, unknown>, home?: string,
 //#region src/runtime/lifecycle/teammate-idle.d.ts
 /**
 * Handle TeammateIdle: when the teammate's session-changes file shows code was
-* modified, suggest sniper validation as `additionalContext`. Ports
-* `teammate-idle/validate-teammate-output.py`.
+* modified, suggest sniper validation as plain text — TeammateIdle has no
+* `additionalContext` channel (rejects `hookSpecificOutput`), so the caller
+* ({@link module:teammate-idle-check.teammateIdleContext}) rides this text on
+* the `systemMessage` channel instead. Ports `teammate-idle/validate-teammate-output.py`.
 * @param data - The raw hook payload.
 * @param home - Home dir (defaults to `~`).
-* @returns The native hook stdout (possibly empty).
+* @returns The plain notice text, or "" when no code file was modified.
 */
 declare function validateTeammateOutput(data: Record<string, unknown>, home?: string): string;
 //#endregion
@@ -719,8 +728,8 @@ declare function saveSecurityState(state: Record<string, unknown>, now?: number,
 //#region src/runtime/lifecycle/lessons/dispatch.d.ts
 /**
 * Route a fuse-lessons event to its handler. Returns the native stdout for
-* context-injecting events (SessionStart/SubagentStart/Stop) or "" for the
-* side-effect-only PostToolUse mark.
+* context-injecting events (SessionStart/SubagentStart/UserPromptSubmit inject
+* MEMORY/LESSON.md, Stop reminds) or "" for the side-effect-only PostToolUse mark.
 * @param event - The raw hook event name.
 * @param payload - The raw hook payload.
 * @param cwd - Project root for memory injection.

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-BXf38Zi1.mjs";
-import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-Cn6v5UpD.mjs";
+import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-BDlk2utY.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.75",
+  "version": "0.1.77",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",