@fusengine/harness 0.1.78 → 0.1.80

package/dist/detect/index.mjs

@@ -1,3 +1,3 @@
-import { n as detectMode, r as modeFor, t as detectHarness } from "../harness-Cb9xR8dC.mjs";
+import { n as detectMode, r as modeFor, t as detectHarness } from "../harness-BMuLJ9lm.mjs";
 import "../detect-la_KkjCS.mjs";
 export { detectHarness, detectMode, modeFor };

package/dist/{dotenv-Jj8aL1FL.mjs → dotenv-B26N_uGr.mjs}

@@ -42,7 +42,8 @@ const HOME_DIR = {
 	cline: ".clinerules",
 	"gemini-cli": ".gemini",
 	opencode: ".opencode",
-	hermes: ".hermes"
+	hermes: ".hermes",
+	kimi: ".kimi-code"
 };
 /** Parse a `.env` file into a key→value map (`export KEY="v"` or `KEY=v`). */
 function parseEnvFile(path) {

package/dist/{handle-Dthtlp7Z.mjs → handle-B7YufFz9.mjs}

@@ -1,21 +1,22 @@
 import { a as parseEnvInt, i as splitTarget, r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { s as resolveTtlSec } from "./dotenv-Jj8aL1FL.mjs";
+import { s as resolveTtlSec } from "./dotenv-B26N_uGr.mjs";
 import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { B as detectProjectType$1, H as requiredArchSkill, L as detectFramework, n as FAIL_CLOSED, t as evaluate, z as detectModularArchitecture } from "./evaluate-ClfbCDiY.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, d as countFrameworkCodeLines, f as countLines, i as loadSessionState, l as PLUGINS_DIR, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, t as claudeHome } from "./home-state-BXf38Zi1.mjs";
 import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-DisYd2fb.mjs";
 import { r as isDocConsulted } from "./doc-helpers-CWZegVdR.mjs";
-import { A as capVerbosity, C as usesTailwindUtilities, D as isExcludedSwiftPath, E as isExcludedJsPath, I as docConsultedGate, L as evaluateApex, N as POST_AUTH_GATES, P as PRE_AUTH_GATES, S as skillTriggerGate, T as frameworkSolidGate, _ as harnessHomeSegment, b as parseField, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, h as buildClaudeMdContext, j as detectCreationIntent, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, r as descFromText, s as parseEntry, t as isHtmlLike, v as scanPlugin } from "./validate-DhOX5hDK.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
+import { D as frameworkSolidGate, F as POST_AUTH_GATES, I as PRE_AUTH_GATES, M as capVerbosity, N as detectCreationIntent, O as isExcludedJsPath, R as docConsultedGate, S as parseField, T as usesTailwindUtilities, b as scanPlugin, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, g as buildClaudeMdContext, k as isExcludedSwiftPath, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, p as apexAgentSteps, r as descFromText, s as parseEntry, t as isHtmlLike, v as apexDocName, w as skillTriggerGate, y as harnessHomeSegment, z as evaluateApex } from "./validate-CkmquRDV.mjs";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-CDvR4bbF.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-CymilZiZ.mjs";
 import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
-import { a as writeLastNonce, c as recordAgent, d as recordRefRead, f as recordTarget, h as apexAuthorizationGate, i as verifyTrack, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, r as signTrack, s as emptyTrack, t as loadTrack, u as recordDoc } from "./store-Bcn08y9m.mjs";
+import { a as writeLastNonce, c as recordAgent, d as recordRefRead, f as recordTarget, h as apexAuthorizationGate, i as verifyTrack, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, r as signTrack, s as emptyTrack, t as loadTrack, u as recordDoc } from "./store-nDZ3eLBQ.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "./permission-mode-BN3MNgbm.mjs";
 import { _ as writeText, d as collectFiles, f as pathExists, g as spawnCapture, h as sleep, i as denyResponse, l as systemMessage, m as readText, n as blockResponse, r as contextResponse, s as informResponse, t as attachSystemMessage, v as commandToString } from "./claude-51RSspJ1.mjs";
 import { r as toHermesResponse } from "./hermes-rTmVdhUL.mjs";
+import { r as toKimiResponse } from "./kimi-C7FGprQz.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -598,7 +599,7 @@ function promptSubmitContext(prompt, cwd, id = "claude-code") {
 	const ctx = buildClaudeMdContext(prompt, cwd, id);
 	if (!ctx) return "";
 	if (!oncePerWindow(claudeMdKey(prompt, ctx), 3e3)) return "";
-	return attachSystemMessage(contextResponse("UserPromptSubmit", ctx), "CLAUDE.md injected");
+	return attachSystemMessage(contextResponse("UserPromptSubmit", ctx), `${apexDocName(id)} injected`);
 }
 /**
 * PreToolUse Task context injection: render the APEX sub-agent context as a
@@ -738,9 +739,15 @@ const PURGEABLE = {
 	doc: 48 * 3600,
 	explore: 48 * 3600
 };
-/** Read `~/.claude/CLAUDE.md`, or "" when missing/unreadable. */
-function claudeMd(home) {
-	const path = join(claudeHome(home), "CLAUDE.md");
+/**
+* Read the target's root instructions doc (`~/.claude/CLAUDE.md`,
+* `~/.codex/AGENTS.md`, `~/.kimi-code/AGENTS.md`, ...), or "" when
+* missing/unreadable.
+* @param home - Home dir.
+* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+*/
+function claudeMd(home, id = "claude-code") {
+	const path = join(home, harnessHomeSegment(id), apexDocName(id));
 	try {
 		return existsSync(path) ? readFileSync(path, "utf-8") : "";
 	} catch {
@@ -765,14 +772,15 @@ function runSessionStartCleanups(home = homedir(), now = Date.now()) {
 * @param cwd - Project root for dev-context detection.
 * @param home - Home dir (defaults to `~`).
 * @param now - Clock for TTL cleanup (defaults to `Date.now()`).
+* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
 * @returns The native hook stdout (possibly empty).
 */
-function sessionStartCore(cwd, home = homedir(), now = Date.now()) {
-	const md = claudeMd(home);
+function sessionStartCore(cwd, home = homedir(), now = Date.now(), id = "claude-code") {
+	const md = claudeMd(home, id);
 	const dev = devContext(cwd);
 	runSessionStartCleanups(home, now);
 	const ctx = [md, dev].filter(Boolean).join("\n");
-	return ctx ? attachSystemMessage(contextResponse("SessionStart", ctx), "CLAUDE.md injected") : "";
+	return ctx ? attachSystemMessage(contextResponse("SessionStart", ctx), `${apexDocName(id)} injected`) : "";
 }
 //#endregion
 //#region src/runtime/lifecycle/inject-rules.ts
@@ -1724,6 +1732,7 @@ const RESEARCH_TOOLS = /* @__PURE__ */ new Set([
 	"mcp__exa__deep_researcher_start",
 	"WebSearch",
 	"WebFetch",
+	"FetchURL",
 	"mcp__fuse-browser__browser_fetch",
 	"mcp__fuse-browser__browser_fetch_batch",
 	"mcp__fuse-browser__browser_crawl",
@@ -1808,8 +1817,17 @@ function classifyExplore(tool, input) {
 * session track the freshness gate scans FIRST — sidechain research and
 * Workflow-spawned agents count, unlike the lead-transcript scan.
 */
-/** Tools the existing Task tracking already credits as agent LAUNCHES. */
-const AGENT_LAUNCH_TOOLS = /* @__PURE__ */ new Set(["Task", "Agent"]);
+/**
+* Tools the existing Task tracking already credits as agent LAUNCHES.
+* `AgentSwarm` is Kimi Code's batch launcher (`prompt_template` + `items`,
+* one `subagent_type` applied to every spawned sub-agent) — same launch
+* semantics as `Task`/`Agent`, so it is excluded here too (anti-double-count).
+*/
+const AGENT_LAUNCH_TOOLS = /* @__PURE__ */ new Set([
+	"Task",
+	"Agent",
+	"AgentSwarm"
+]);
 /**
 * `JSON.stringify` length of the raw `tool_response` OBJECT (parity Python
 * `len(str(tool_response))`); 0 when absent or unserializable (circular).
@@ -4095,9 +4113,7 @@ async function injectApexSubagentContext(cwd, home = homedir(), id = "claude-cod
 	const taskData = await readJsonFile(join(apexDir, "task.json"));
 	const completed = taskData ? completedTasks(taskData.tasks) : "none";
 	const pending = taskData ? pendingTasks(taskData.tasks) : "none";
-	const isCodex = id === "codex";
-	const beforeStart = isCodex ? "Use update_plan → mark the active step in_progress before starting" : "Use TaskUpdate(taskId, status: in_progress) before starting";
-	const whenDone = isCodex ? "update_plan → mark the step completed when done" : "TaskUpdate(taskId, status: completed) triggers auto-commit";
+	const { beforeStart, whenDone } = apexAgentSteps(id);
 	return contextResponse("SubagentStart", capFragment("apex-subagent", `## APEX Sub-Agent Instructions
 
 You are a sub-agent in APEX workflow. Follow these rules:
@@ -5325,7 +5341,7 @@ function sessionStart(input) {
 	if (input.scope === "rules") return injectRules(process.env.CLAUDE_PLUGIN_ROOT ?? input.cwd, input.event);
 	if (input.scope === "carto") return cartoSessionStart(input.cwd, input.now);
 	if (input.scope === "lessons") return dispatchLessons("SessionStart", input.payload, input.cwd, input.now);
-	const core = sessionStartCore(input.cwd, void 0, input.now);
+	const core = sessionStartCore(input.cwd, void 0, input.now, input.id ?? "claude-code");
 	return input.scope === "core" ? withSnapshot(core, input.cwd, import.meta.url) : core;
 }
 /**
@@ -7071,13 +7087,13 @@ const MCP_TTL_MS = parseEnvInt(process.env.FUSE_MCP_TTL_SEC, MCP_TTL_DEFAULT_SEC
 const WEBFETCH_TTL_MS = parseEnvInt(process.env.FUSE_WEBFETCH_TTL_SEC, WEBFETCH_TTL_DEFAULT_SEC) * 1e3;
 /** WebFetch prompt slice folded into its cache key (parity with Python prompt[:500]). */
 const PROMPT_TRUNC = 500;
-/** True for the WebFetch tool (exact name). */
+/** True for the WebFetch tool (exact name) or Kimi Code CLI's `FetchURL` equivalent. */
 function isWebFetch(tool) {
-	return tool === "WebFetch";
+	return tool === "WebFetch" || tool === "FetchURL";
 }
-/** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
+/** MCP doc tools + WebFetch/FetchURL whose calls are cached / verbosity-capped. */
 function isMcpTool(tool) {
-	return /context7|exa|webfetch|web_fetch/i.test(tool) || tool === "WebFetch";
+	return /context7|exa|webfetch|web_fetch/i.test(tool) || isWebFetch(tool);
 }
 /** The query/url that keys the cache. */
 function queryOf(input) {
@@ -7195,6 +7211,12 @@ async function recordActivity(file, activity) {
 * - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
 *   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
 *   `{context}` (Hermes has no interactive "ask" state).
+* - kimi: delegated to the adapter's `toKimiResponse` — `block`/`ask` ->
+*   `hookSpecificOutput.permissionDecision:"deny"` (Kimi Code CLI's hooks
+*   contract documents only "deny"; `ask` downgrades with a prefix, mirroring
+*   the codex branch above), `inform` -> raw text on stdout (Kimi appends
+*   stdout to context on exit 0 — no `hookSpecificOutput` envelope documented
+*   for non-blocking context injection).
 *
 * User-visible pass notices (`prompt.userMessage`, Python `hook_output.allow_pass`
 * / `post_pass` parity), by harness:
@@ -7259,6 +7281,7 @@ function respond(id, prompt, event = "PreToolUse") {
 				agent_message: message
 			});
 		case "hermes": return toHermesResponse(prompt);
+		case "kimi": return toKimiResponse(prompt);
 		case "cline":
 			if (kind === "block") return JSON.stringify({
 				cancel: true,
@@ -8163,7 +8186,7 @@ function docSourceOf(tool) {
 * Map a live tool-use to the activity to record, or null when nothing is
 * tracked. Works across harnesses — tool names are globally distinct:
 * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task`/`Agent` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
+* - `Task`/`Agent`/`AgentSwarm` + `subagent_type` (Claude/Cursor/Kimi) → `agent` (bare agent name)
 * - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
 *   → `agent` credited to the matching REQUIRED_AGENTS phase
 * - a read tool opening a `.md` reference → `ref`
@@ -8178,7 +8201,7 @@ function activityFor(event) {
 		source: docSource,
 		ts: event.now
 	});
-	if (event.tool === "Task" || event.tool === "Agent") {
+	if (event.tool === "Task" || event.tool === "Agent" || event.tool === "AgentSwarm") {
 		const name = String(event.input?.subagent_type ?? event.input?.name ?? "").split(":").pop() ?? "";
 		if (name) out.push(agentActivity(name, event.now, qualityFor(event.responseLength, AGENT_QUALITY_MIN)));
 		return out;

package/dist/{harness-Cb9xR8dC.mjs → harness-BMuLJ9lm.mjs}

@@ -31,7 +31,8 @@ const STD_NAMES = {
 	gemini: "gemini-cli",
 	copilot: "copilot",
 	kiro: "kiro",
-	hermes: "hermes"
+	hermes: "hermes",
+	kimi: "kimi"
 };
 /** Harnesses exposing a native hook system (vs CLI-only integration). */
 const HOOK_CAPABLE = /* @__PURE__ */ new Set([
@@ -41,7 +42,8 @@ const HOOK_CAPABLE = /* @__PURE__ */ new Set([
 	"cline",
 	"gemini-cli",
 	"opencode",
-	"hermes"
+	"hermes",
+	"kimi"
 ]);
 /** Integration mode for a harness id. */
 function modeFor(id) {

package/dist/{harness-s1Fce_dL.d.mts → harness-BQ5_Wnva.d.mts}

@@ -1,6 +1,6 @@
 //#region src/detect/interfaces/types.d.ts
 /** Known AI coding harnesses detectable at runtime. */
-type HarnessId = "claude-code" | "codex" | "cursor" | "cline" | "gemini-cli" | "opencode" | "windsurf" | "copilot" | "aider" | "kiro" | "goose" | "amp" | "hermes" | "unknown";
+type HarnessId = "claude-code" | "codex" | "cursor" | "cline" | "gemini-cli" | "opencode" | "windsurf" | "copilot" | "aider" | "kiro" | "goose" | "amp" | "hermes" | "kimi" | "unknown";
 /** Integration mode: `hook` = native lifecycle hooks; `cli` = run as an external step. */
 type HarnessMode = "hook" | "cli";
 /** How the harness was identified. */

package/dist/{index-jj_EzZRv.d.mts → index-B_VHbsaJ.d.mts}

@@ -1,4 +1,4 @@
-import { i as HarnessId } from "./harness-s1Fce_dL.mjs";
+import { i as HarnessId } from "./harness-BQ5_Wnva.mjs";
 
 //#region src/config/env.d.ts
 /**

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-DVbIl9md.mjs";
 import { _ as queryHash, a as cacheLookupSubstringMeta, c as mcpCacheKey, d as extractText, f as IndexSummary, g as jaccardSimilar, h as compactMarkdown, i as cacheLookupSubstring, l as mcpCacheWrite, m as summarizeIndex, n as cacheLookup, o as cachePath, p as loadIndex, r as cacheLookupMeta, s as cacheStore, t as CacheHit, u as webfetchCacheWrite } from "./index-BUwEmIK-.mjs";
-import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "./index-jj_EzZRv.mjs";
-import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "./harness-s1Fce_dL.mjs";
+import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "./index-B_VHbsaJ.mjs";
+import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "./harness-BQ5_Wnva.mjs";
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-CEKzGg2u.mjs";
 import { t as incrementTrivialEditCounter } from "./index-BOBXQ91y.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-BEMumjOw.mjs";

package/dist/index.mjs

@@ -1,14 +1,14 @@
 import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "./limits-CHn8AIL1.mjs";
-import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
+import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "./dotenv-B26N_uGr.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./layout-C0jaaCQC.mjs";
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-Cb9xR8dC.mjs";
+import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
 import { A as GIT_ASK, B as detectProjectType, C as SESSION_STATE_FRAGMENT, D as ASK_PATTERNS, E as protectedPathGuard, F as isRalphMode, H as requiredArchSkill, I as matchPatterns, L as detectFramework, M as PROJECT_INSTALL, N as RALPH_SAFE, O as CRITICAL_PATTERNS, P as SYSTEM_INSTALL, R as DEV_KEYWORDS, S as SAFE_PREFIXES, T as PROTECTED_GIT_RE, V as isApexCommand, _ as bashWriteGuard, a as registerGuard, b as CODE_REDIRECT, c as GO_DECL_RE, d as PY_MODEL_RE, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, j as GIT_BLOCKED, k as securityGuard, l as JAVA_DECL_RE, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as ASK_WRITERS, w as PROTECTED_FRAGMENTS, x as FILE_REDIRECT, y as CODE_MUTATORS, z as detectModularArchitecture } from "./evaluate-ClfbCDiY.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-BXf38Zi1.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as capVerbosity, C as usesTailwindUtilities, F as brainstormGate, I as docConsultedGate, L as evaluateApex, M as APEX_GATES, N as POST_AUTH_GATES, O as MAX_EXA_RESULTS, P as PRE_AUTH_GATES, R as freshnessGate, S as skillTriggerGate, T as frameworkSolidGate, a as firstHeading, b as parseField, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as detectClaudeMdProjectType, h as buildClaudeMdContext, i as firstComment, j as detectCreationIntent, k as MAX_TOKENS, l as PROJECT_INDICATORS, m as buildApexInstruction, n as missingSeoElements, o as parseEnrichment, p as DEV_VERBS, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as SKILL_TRIGGERS, x as detectRequiredSkills, y as parseBodyDesc, z as solidReadGate } from "./validate-DhOX5hDK.mjs";
+import { A as MAX_EXA_RESULTS, B as freshnessGate, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, F as POST_AUTH_GATES, I as PRE_AUTH_GATES, L as brainstormGate, M as capVerbosity, N as detectCreationIntent, P as APEX_GATES, R as docConsultedGate, S as parseField, T as usesTailwindUtilities, V as solidReadGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as MAX_TOKENS, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as evaluateApex } from "./validate-CkmquRDV.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-CymilZiZ.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/init/index.d.mts

@@ -1,4 +1,4 @@
-import { i as HarnessId } from "../harness-s1Fce_dL.mjs";
+import { i as HarnessId } from "../harness-BQ5_Wnva.mjs";
 
 //#region src/init/templates.d.ts
 /**

package/dist/kimi-C7FGprQz.mjs

@@ -0,0 +1,80 @@
+import { t as evaluate } from "./evaluate-ClfbCDiY.mjs";
+import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
+import { c as readClaudeInput, v as commandToString } from "./claude-51RSspJ1.mjs";
+//#region src/adapters/kimi/index.ts
+/**
+* Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,
+* 2026) configures hooks in `~/.kimi-code/config.toml` (`[[hooks]]`: event,
+* matcher, command, timeout — exactly 4 fields, any extra breaks config
+* loading) and pipes a JSON payload to `command` on stdin, reading JSON back
+* on stdout. Verified against kimi.com/code/docs/en/kimi-code-cli/
+* customization/hooks.html (2026): the INPUT base shape
+* (`hook_event_name`/`session_id`/`cwd`, `PreToolUse`/`Bash` carrying
+* `tool_name` + `tool_input.command`) matches Claude Code's snake_case wire
+* shape, so the Claude reader is reused — verified live against kimi-code
+* v0.27.0 for both `PreToolUse`/`Bash` and `PreToolUse`/`Write`. Tool fields
+* verified: `Bash` takes `command`; `Write` takes `path` + `content`; `Edit`
+* takes `path` + `old_string`/`new_string` (per `docs/en/reference/tools.md`,
+* moonshotai/kimi-code). The path key is `path`, NOT Claude's `file_path`
+* (see interfaces/types.ts).
+*
+* OUTPUT does not match Claude: only `UserPromptSubmit`, `PreToolUse`, `Stop`
+* are blockable, and the only documented decision is
+* `{"hookSpecificOutput":{"permissionDecision":"deny","permissionDecisionReason"}}`
+* (camelCase, despite the snake_case input — a real Kimi inconsistency). No
+* `"ask"`/`"allow"`/`additionalContext` is documented. Verified live against
+* kimi-code v0.27.0: that deny envelope on stdout at exit 0 blocks the call
+* (exit 2 is NOT required) and `permissionDecisionReason` is re-injected to
+* the model; empty stdout at exit 0 lets the call run. Exit 2 = block, stderr
+* = reason; any other exit/timeout/crash fails open (allow). Whether raw-text
+* stdout at exit 0 (the `inform` case) reaches the context is documented only
+* as "may be" — unverified, needs live test.
+*/
+/**
+* Downgrade prefix for `ask` — Kimi has no interactive approval channel
+* reachable from a hook. Kimi DOES have an `ask` decision, but only via
+* `[[permission.rules]] decision = "ask"` in config.toml, a separate system
+* a hook's return value cannot invoke.
+*/
+const ASK_PREFIX = "[downgraded from ask — Kimi Code has no interactive approval]";
+/** Read & parse the Kimi hook stdin payload (same wire shape as Claude for the fields we consume). */
+async function readKimiInput() {
+	return await readClaudeInput();
+}
+/**
+* Render a portable {@link Prompt} as a Kimi hook response string:
+* `block`/`ask` -> `{hookSpecificOutput:{permissionDecision:"deny",...}}`
+* (only `"deny"` is documented; `ask` is downgraded with {@link ASK_PREFIX});
+* `inform` -> raw text (Kimi appends stdout to context on exit 0 — no
+* documented JSON envelope for non-blocking context injection).
+* @param prompt - The portable policy prompt.
+* @returns The native Kimi response string.
+*/
+function toKimiResponse(prompt) {
+	const msg = formatPrompt(prompt);
+	if (prompt.kind === "inform") return msg;
+	const res = { hookSpecificOutput: {
+		permissionDecision: "deny",
+		permissionDecisionReason: prompt.kind === "ask" ? `${ASK_PREFIX}\n${msg}` : msg
+	} };
+	return JSON.stringify(res);
+}
+/**
+* Run the bundled policy over a Kimi hook payload and return the native
+* response string, or null to allow (the hook then exits 0 with empty stdout).
+* @param input - Parsed hook stdin payload.
+* @returns Native response string, or null when the tool use is allowed.
+*/
+function guard(input) {
+	const t = input.tool_input;
+	const r = evaluate({
+		tool: input.tool_name ?? "Write",
+		filePath: t?.path ?? t?.file_path,
+		content: t?.content ?? t?.new_string,
+		command: commandToString(t?.command)
+	});
+	if (r.decision === "allow" || !r.prompt) return null;
+	return toKimiResponse(r.prompt);
+}
+//#endregion
+export { readKimiInput as n, toKimiResponse as r, guard as t };

package/dist/policy/index.mjs

@@ -1,5 +1,5 @@
 import { A as GIT_ASK, B as detectProjectType, C as SESSION_STATE_FRAGMENT, D as ASK_PATTERNS, E as protectedPathGuard, F as isRalphMode, H as requiredArchSkill, I as matchPatterns, L as detectFramework, M as PROJECT_INSTALL, N as RALPH_SAFE, O as CRITICAL_PATTERNS, P as SYSTEM_INSTALL, R as DEV_KEYWORDS, S as SAFE_PREFIXES, T as PROTECTED_GIT_RE, V as isApexCommand, _ as bashWriteGuard, a as registerGuard, b as CODE_REDIRECT, c as GO_DECL_RE, d as PY_MODEL_RE, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, j as GIT_BLOCKED, k as securityGuard, l as JAVA_DECL_RE, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as ASK_WRITERS, w as PROTECTED_FRAGMENTS, x as FILE_REDIRECT, y as CODE_MUTATORS, z as detectModularArchitecture } from "../evaluate-ClfbCDiY.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "../home-state-BXf38Zi1.mjs";
-import { A as capVerbosity, C as usesTailwindUtilities, F as brainstormGate, I as docConsultedGate, L as evaluateApex, M as APEX_GATES, N as POST_AUTH_GATES, O as MAX_EXA_RESULTS, P as PRE_AUTH_GATES, R as freshnessGate, S as skillTriggerGate, T as frameworkSolidGate, a as firstHeading, b as parseField, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as detectClaudeMdProjectType, h as buildClaudeMdContext, i as firstComment, j as detectCreationIntent, k as MAX_TOKENS, l as PROJECT_INDICATORS, m as buildApexInstruction, n as missingSeoElements, o as parseEnrichment, p as DEV_VERBS, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as SKILL_TRIGGERS, x as detectRequiredSkills, y as parseBodyDesc, z as solidReadGate } from "../validate-DhOX5hDK.mjs";
+import { A as MAX_EXA_RESULTS, B as freshnessGate, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, F as POST_AUTH_GATES, I as PRE_AUTH_GATES, L as brainstormGate, M as capVerbosity, N as detectCreationIntent, P as APEX_GATES, R as docConsultedGate, S as parseField, T as usesTailwindUtilities, V as solidReadGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as MAX_TOKENS, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as evaluateApex } from "../validate-CkmquRDV.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, isRalphMode, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/runtime/index.d.mts

@@ -75,7 +75,7 @@ interface ToolEvent {
 * Map a live tool-use to the activity to record, or null when nothing is
 * tracked. Works across harnesses — tool names are globally distinct:
 * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task`/`Agent` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
+* - `Task`/`Agent`/`AgentSwarm` + `subagent_type` (Claude/Cursor/Kimi) → `agent` (bare agent name)
 * - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
 *   → `agent` credited to the matching REQUIRED_AGENTS phase
 * - a read tool opening a `.md` reference → `ref`
@@ -207,6 +207,12 @@ declare function normalizeEvent(id: string, payload: Record<string, unknown>): N
 * - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
 *   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
 *   `{context}` (Hermes has no interactive "ask" state).
+* - kimi: delegated to the adapter's `toKimiResponse` — `block`/`ask` ->
+*   `hookSpecificOutput.permissionDecision:"deny"` (Kimi Code CLI's hooks
+*   contract documents only "deny"; `ask` downgrades with a prefix, mirroring
+*   the codex branch above), `inform` -> raw text on stdout (Kimi appends
+*   stdout to context on exit 0 — no `hookSpecificOutput` envelope documented
+*   for non-blocking context injection).
 *
 * User-visible pass notices (`prompt.userMessage`, Python `hook_output.allow_pass`
 * / `post_pass` parity), by harness:
@@ -234,7 +240,7 @@ declare function respond(id: string, prompt: Prompt, event?: string): string;
 declare const MCP_TTL_MS: number;
 /** WebFetch freshness (ms) from `FUSE_WEBFETCH_TTL_SEC` (default 24h; pages stale faster than docs). */
 declare const WEBFETCH_TTL_MS: number;
-/** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
+/** MCP doc tools + WebFetch/FetchURL whose calls are cached / verbosity-capped. */
 declare function isMcpTool(tool: string): boolean;
 /** The query/url that keys the cache. */
 declare function queryOf(input: Record<string, unknown>): string;
@@ -353,9 +359,10 @@ declare function runSessionStartCleanups(home?: string, now?: number): void;
 * @param cwd - Project root for dev-context detection.
 * @param home - Home dir (defaults to `~`).
 * @param now - Clock for TTL cleanup (defaults to `Date.now()`).
+* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
 * @returns The native hook stdout (possibly empty).
 */
-declare function sessionStartCore(cwd: string, home?: string, now?: number): string;
+declare function sessionStartCore(cwd: string, home?: string, now?: number, id?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/inject-rules.d.ts
 /** Read & concatenate all `*.md` files (sorted) under `rulesDir`. */

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-BXf38Zi1.mjs";
-import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-Dthtlp7Z.mjs";
+import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-B7YufFz9.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/dist/{skill-path-BO2N0XvB.mjs → skill-path-CDvR4bbF.mjs}

@@ -1,5 +1,5 @@
-import { t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
-import { t as detectHarness } from "./harness-Cb9xR8dC.mjs";
+import { t as HOME_DIR } from "./dotenv-B26N_uGr.mjs";
+import { t as detectHarness } from "./harness-BMuLJ9lm.mjs";
 import { l as PLUGINS_DIR } from "./home-state-BXf38Zi1.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync } from "node:fs";

package/dist/{store-Bcn08y9m.mjs → store-nDZ3eLBQ.mjs}

@@ -1,9 +1,9 @@
-import { c as ttlLabel } from "./dotenv-Jj8aL1FL.mjs";
+import { c as ttlLabel } from "./dotenv-B26N_uGr.mjs";
 import { n as fuseHarnessHome } from "./home-state-BXf38Zi1.mjs";
 import { a as writeJsonFile, i as readJsonFile } from "./json-io-DisYd2fb.mjs";
 import { i as resolveSessions } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
+import { t as resolveSkillPath } from "./skill-path-CDvR4bbF.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { createHmac, randomBytes } from "node:crypto";

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { c as recordAgent, d as recordRefRead, f as recordTarget, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, s as emptyTrack, t as loadTrack, u as recordDoc } from "../store-Bcn08y9m.mjs";
+import { c as recordAgent, d as recordRefRead, f as recordTarget, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, s as emptyTrack, t as loadTrack, u as recordDoc } from "../store-nDZ3eLBQ.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTarget, recordTrivialEdit, saveTrack, trivialCount };

package/dist/{validate-DhOX5hDK.mjs → validate-CkmquRDV.mjs}

@@ -1,10 +1,10 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { c as ttlLabel, t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
+import { c as ttlLabel, t as HOME_DIR } from "./dotenv-B26N_uGr.mjs";
 import { R as DEV_KEYWORDS, g as moduleAwarePath } from "./evaluate-ClfbCDiY.mjs";
 import { d as countFrameworkCodeLines, l as PLUGINS_DIR, u as SOLID_REF } from "./home-state-BXf38Zi1.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-CDvR4bbF.mjs";
 import { extname, join } from "node:path";
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { homedir } from "node:os";
@@ -1208,24 +1208,29 @@ function harnessHomeSegment(id) {
 	return HOME_DIR[id] ?? ".claude";
 }
 /**
-* Root instructions doc name for a harness target: "AGENTS.md" for Codex,
-* "CLAUDE.md" for every other target (including the default/unknown fallback).
+* Root instructions doc name for a harness target: "AGENTS.md" for Codex and
+* Kimi Code CLI (both documented conventions), "CLAUDE.md" for every other
+* target (including the default/unknown fallback).
 * @param id - Harness id.
 * @returns The doc file name.
 */
 function apexDocName(id) {
-	return id === "codex" ? "AGENTS.md" : "CLAUDE.md";
+	return id === "codex" || id === "kimi" ? "AGENTS.md" : "CLAUDE.md";
 }
 /**
-* Native plan/track tool name for a harness target: Codex's `update_plan` vs
-* Claude's `TaskCreate`. Covers only the PLAN-step line — other Claude-only
-* tool references (`TaskList`, `TaskUpdate`) are branched inline by the
-* builders since their surrounding prose differs structurally, not just by token.
+* Native plan/track tool name for a harness target: Codex's `update_plan`,
+* Kimi Code CLI's `TodoList`, or Claude's `TaskCreate` (default). Covers only
+* the PLAN-step line — other target-specific tool references (`TaskList`,
+* `TaskUpdate`) are resolved via `apexTaskSteps`/`apexAgentSteps` in
+* `apex-target-steps.ts` since their surrounding prose differs structurally,
+* not just by token.
 * @param id - Harness id.
 * @returns The plan-tool name.
 */
 function apexPlanTool(id) {
-	return id === "codex" ? "update_plan" : "TaskCreate";
+	if (id === "codex") return "update_plan";
+	if (id === "kimi") return "TodoList";
+	return "TaskCreate";
 }
 //#endregion
 //#region src/policy/detect-claude-md-project-type.ts
@@ -1291,6 +1296,61 @@ function buildClaudeMdContext(prompt, cwd, id = "claude-code") {
 	return `${buildApexInstruction(detectClaudeMdProjectType(cwd), resolveMaxLines(), id)}\n\n# ${docName}\n${claudeContent}`;
 }
 //#endregion
+//#region src/policy/apex-target-steps.ts
+/** Codex/Kimi step-trio overrides; any other target falls back to {@link DEFAULT_TASK_STEPS}. */
+const TASK_STEPS = {
+	codex: {
+		step3: "update_plan → review the current plan",
+		step4: "update_plan → mark the active step in_progress before starting",
+		step7: "update_plan → mark the step completed when done"
+	},
+	kimi: {
+		step3: "TodoList → review the current list (omit todos to query)",
+		step4: "TodoList → mark the active item in_progress before starting",
+		step7: "TodoList → mark the item done when finished"
+	}
+};
+/** Default (Claude Code) step trio — zero-regression fallback for any unlisted target. */
+const DEFAULT_TASK_STEPS = {
+	step3: "TaskList → see pending tasks",
+	step4: "TaskUpdate(in_progress) → before starting",
+	step7: "TaskUpdate(completed) → triggers auto-commit"
+};
+/**
+* Resolve the step3/step4/step7 phrasing for a harness target (APEX
+* task-context injection). Replaces the former `isCodex` binary ternary.
+* @param id - Harness id.
+* @returns The {@link ApexTaskSteps} for that target.
+*/
+function apexTaskSteps(id) {
+	return TASK_STEPS[id] ?? DEFAULT_TASK_STEPS;
+}
+/** Codex/Kimi before/done overrides; any other target falls back to {@link DEFAULT_AGENT_STEPS}. */
+const AGENT_STEPS = {
+	codex: {
+		beforeStart: "Use update_plan → mark the active step in_progress before starting",
+		whenDone: "update_plan → mark the step completed when done"
+	},
+	kimi: {
+		beforeStart: "Use TodoList → mark the active item in_progress before starting",
+		whenDone: "TodoList → mark the item done when finished"
+	}
+};
+/** Default (Claude Code) before/done pair — zero-regression fallback for any unlisted target. */
+const DEFAULT_AGENT_STEPS = {
+	beforeStart: "Use TaskUpdate(taskId, status: in_progress) before starting",
+	whenDone: "TaskUpdate(taskId, status: completed) triggers auto-commit"
+};
+/**
+* Resolve the beforeStart/whenDone phrasing for a harness target (APEX
+* sub-agent injection). Replaces the former `isCodex` binary ternary.
+* @param id - Harness id.
+* @returns The {@link ApexAgentSteps} for that target.
+*/
+function apexAgentSteps(id) {
+	return AGENT_STEPS[id] ?? DEFAULT_AGENT_STEPS;
+}
+//#endregion
 //#region src/policy/apex-task-context.ts
 /**
 * Read the current task state from `task.json`, reproducing the legacy Python
@@ -1330,10 +1390,7 @@ function loadApexTaskState(taskFile) {
 */
 function buildApexTaskContext(state, maxLines, id = "claude-code") {
 	const seg = harnessHomeSegment(id);
-	const isCodex = id === "codex";
-	const step3 = isCodex ? "update_plan → review the current plan" : "TaskList → see pending tasks";
-	const step4 = isCodex ? "update_plan → mark the active step in_progress before starting" : "TaskUpdate(in_progress) → before starting";
-	const step7 = isCodex ? "update_plan → mark the step completed when done" : "TaskUpdate(completed) → triggers auto-commit";
+	const { step3, step4, step7 } = apexTaskSteps(id);
 	return `⚠️ APEX MODE - Read ${seg}/apex/AGENTS.md for rules\n\nCurrent: Task #${state.id} - ${state.subject} (Phase: ${state.phase})\nDocs consulted: ${state.docs}\n\nAgent must:\n1. Read task.json → find last 3 completed tasks\n2. Read their notes in docs/ (task-{ID}-{subject}.md)\n3. ${step3}\n4. ${step4}\n5. Apply SOLID (files < ${maxLines} lines)\n6. Write notes to docs/task-{ID}-{subject}.md\n7. ${step7}`;
 }
 /**
@@ -1591,4 +1648,4 @@ function missingSeoElements(html) {
 	return missing;
 }
 //#endregion
-export { capVerbosity as A, usesTailwindUtilities as C, isExcludedSwiftPath as D, isExcludedJsPath as E, brainstormGate as F, docConsultedGate as I, evaluateApex as L, APEX_GATES as M, POST_AUTH_GATES as N, MAX_EXA_RESULTS as O, PRE_AUTH_GATES as P, freshnessGate as R, skillTriggerGate as S, frameworkSolidGate as T, harnessHomeSegment as _, firstHeading as a, parseField as b, EXCLUDE_DIRS as c, buildApexTaskInjection as d, loadApexTaskState as f, detectClaudeMdProjectType as g, buildClaudeMdContext as h, firstComment as i, detectCreationIntent as j, MAX_TOKENS as k, PROJECT_INDICATORS as l, buildApexInstruction as m, missingSeoElements as n, parseEnrichment as o, DEV_VERBS as p, descFromText as r, parseEntry as s, isHtmlLike as t, buildApexTaskContext as u, scanPlugin as v, SKILL_TRIGGERS as w, detectRequiredSkills as x, parseBodyDesc as y, solidReadGate as z };
+export { MAX_EXA_RESULTS as A, freshnessGate as B, detectRequiredSkills as C, frameworkSolidGate as D, SKILL_TRIGGERS as E, POST_AUTH_GATES as F, PRE_AUTH_GATES as I, brainstormGate as L, capVerbosity as M, detectCreationIntent as N, isExcludedJsPath as O, APEX_GATES as P, docConsultedGate as R, parseField as S, usesTailwindUtilities as T, solidReadGate as V, detectClaudeMdProjectType as _, firstHeading as a, scanPlugin as b, EXCLUDE_DIRS as c, buildApexTaskInjection as d, loadApexTaskState as f, buildClaudeMdContext as g, buildApexInstruction as h, firstComment as i, MAX_TOKENS as j, isExcludedSwiftPath as k, PROJECT_INDICATORS as l, DEV_VERBS as m, missingSeoElements as n, parseEnrichment as o, apexAgentSteps as p, descFromText as r, parseEntry as s, isHtmlLike as t, buildApexTaskContext as u, apexDocName as v, skillTriggerGate as w, parseBodyDesc as x, harnessHomeSegment as y, evaluateApex as z };