@fusengine/harness 0.1.79 → 0.1.80

package/README.md

@@ -130,6 +130,7 @@ also works elsewhere.
 | **gemini-cli** | `BeforeTool` denies via `{decision:"deny",reason}` (`gemini/index.ts:22-36`) | none | Thin stateless adapter — no session track, no APEX gates wired through it. |
 | **cline** | `PreToolUse` only; block → `{cancel:true}`, non-block → `contextModification` (`cline/index.ts:24-36`) | none | Same as gemini-cli: stateless guard only. |
 | **hermes** | `pre_tool_call` proven: reuses the Claude stdin reader, blocks via `{decision:"block",reason}` (`hermes/index.ts:12-36`) | untested — no lifecycle dispatch wired for Hermes in this repo | `ask`/`inform` degrade to non-blocking `{context}` — Hermes "has no interactive ask state" (`hermes/index.ts:27-28`). |
+| **kimi** | `PreToolUse` denies via the camelCase JSON channel `{"hookSpecificOutput":{"permissionDecision":"deny","permissionDecisionReason":"…"}}` on stdout at **exit 0** (verified live against kimi-code v0.27.0 — exit 2 with stderr = reason also blocks, but is not required) — only `deny` is documented. `ask` is **downgraded to deny** prefixed `[downgraded from ask — Kimi Code has no interactive approval]`; `inform` rides plain stdout text at exit 0, never wrapped in JSON. Blocking events: `UserPromptSubmit`, `PreToolUse`, `Stop` (`kimi/index.ts`). | Observation only: `PostToolUse`, `PostToolUseFailure`, `PermissionRequest`, `PermissionResult`, `SessionStart`, `SessionEnd`, `SubagentStart`, `SubagentStop`, `StopFailure`, `Interrupt`, `PreCompact`, `PostCompact`, `Notification` — Kimi delivers them but **ignores any response**, so no verdict can be returned from them. | A **hook** cannot request approval — Kimi's `ask` lives in a parallel, hook-unreachable system (`[[permission.rules]] decision = "ask"` in `config.toml`), hence the ask→deny downgrade. Hooks are configured **only** in the global `~/.kimi-code/config.toml` (no project-local hooks file), so `harness init` writes no kimi wiring — copy the TOML snippet from [docs/adapters.md](docs/adapters.md#kimi-code--manual-wiring), and emit **no field** beyond `event`/`matcher`/`command`/`timeout` or the whole config fails to load. **Fail-open by design**: any exit code other than 0/2, a timeout, or a crash lets the call through. Stdin payload is snake_case and carries only `hook_event_name`, `session_id`, `cwd`, `tool_name`, `tool_input.command` and an undocumented `tool_call_id` (unused here) — no `transcript_path`, no `permission_mode`, no `tool_response`. Verified live against kimi-code v0.27.0 for `PreToolUse`/`Bash`; validate hand-written config with `kimi doctor`. Instructions file is `AGENTS.md`, not `CLAUDE.md`. |
 
 ## What it enforces
 
@@ -191,6 +192,14 @@ Features shipped since 0.1.44, each with its own test:
   version + drift vs. npm, `.claude/BOARD.md`, and the one-shot summary, each
   collector isolated so one failure can't blank the rest
   (`src/runtime/lifecycle/snapshot/index.ts`, `test/snapshot.test.ts`).
+- **Target-aware root-doc injection** — `SessionStart` and `UserPromptSubmit`
+  inject the target's own root instructions doc, not a hardcoded `CLAUDE.md`:
+  `apexDocName(id)` + `harnessHomeSegment(id)` (`src/policy/apex-target.ts`)
+  resolve `AGENTS.md` under `.codex`/`.kimi-code` for Codex/Kimi, `CLAUDE.md`
+  under `.claude` for every other target (byte-identical to the pre-target-aware
+  default). The `systemMessage` label follows suit (`"AGENTS.md injected"`
+  under Codex/Kimi) (`src/runtime/lifecycle/session-start.ts`,
+  `src/runtime/inject-context.ts`).
 - **Injection budget cap** — harness-produced context fragments (lessons,
   snapshot, APEX task context) are capped at ~8000 chars each; owner-authored
   content (CLAUDE.md/rules) is never capped
@@ -202,7 +211,11 @@ Features shipped since 0.1.44, each with its own test:
   carrying `tool_input.agent_type` is recorded as `subagent-<agent_type>` in the
   same SessionTrack as Claude Task evidence, so a Codex explore-codebase/sniper
   satisfies the APEX freshness gates exactly like a Claude subagent
-  (`src/tracking/session-state.ts`, sim scenario 32b).
+  (`src/tracking/session-state.ts`, sim scenario 32b). Recognized
+  agent-launcher tools across targets: `Task` (Claude), `Agent`/`AgentSwarm`
+  (Kimi Code) — each credits its `subagent_type`/`agent_type` toward the same
+  freshness evidence (`src/runtime/activity.ts`,
+  `src/freshness/agent-evidence-record.ts`).
 - **File-size gate judges the real Edit outcome, not the on-disk count** — an
   Edit on a file already over `FUSE_SOLID_MAX_LINES` used to be denied
   unconditionally (the on-disk count always won); the gate now computes the

package/dist/adapters/kimi/index.d.mts

@@ -0,0 +1,79 @@
+import { t as Prompt } from "../../types-DVbIl9md.mjs";
+
+//#region src/adapters/kimi/interfaces/types.d.ts
+/**
+* Kimi Code CLI shell-hook wire types. Verified 2026 against
+* kimi.com/code/docs/en/kimi-code-cli/customization/hooks.html (v0.27.0):
+* hooks are configured in `~/.kimi-code/config.toml` under `[[hooks]]`,
+* receive a snake_case JSON payload on stdin, and answer with a camelCase
+* JSON envelope on stdout (a real, documented casing inconsistency).
+*/
+/**
+* `PreToolUse`/`UserPromptSubmit`/`Stop` stdin payload (subset). Same base
+* wire shape as Claude Code (`hook_event_name`/`tool_name`/`tool_input`/
+* `cwd`); `tool_input.command` is confirmed for `Bash` by the docs' example
+* script (`payload.tool_input?.command`). Verified live against kimi-code
+* v0.27.0 on `PreToolUse`/`Bash`: `tool_name` is present at top level (the
+* docs never name it as a stdin key) and `tool_input.command` carries the
+* shell string. The live payload also carries an UNDOCUMENTED `tool_call_id`
+* (e.g. `"tool_LsTnl0gBxM62XuWvKw0GFGHs"`); the harness does not consume it,
+* so it is deliberately absent from this interface. `cwd` is the
+* symlink-resolved path (macOS: `/private/tmp/…` for a shell in `/tmp/…`).
+*/
+interface KimiHookInput {
+  hook_event_name?: string;
+  tool_name?: string;
+  /**
+  * Verified against the official tool reference (`docs/en/reference/tools.md`,
+  * moonshotai/kimi-code) AND live against kimi-code v0.27.0: `Write` sends
+  * `{ path, content, mode? }`, `Edit` sends
+  * `{ path, old_string, new_string, replace_all? }` — the path key is `path`,
+  * NOT Claude's `file_path`. `file_path` is kept as a tolerated alias (read
+  * second) for Claude-shaped replay payloads, mirroring
+  * `runtime/normalize.ts` which resolves both on the CLI path.
+  */
+  tool_input?: {
+    path?: string;
+    file_path?: string;
+    content?: string;
+    new_string?: string;
+    command?: string | string[];
+  };
+  session_id?: string;
+  cwd?: string;
+}
+/**
+* Hook stdout response. Only `"deny"` is documented for `permissionDecision`
+* — no `"ask"`/`"allow"` value, and no `additionalContext` field exists on
+* this envelope. Blocking events are `UserPromptSubmit`, `PreToolUse`, and
+* `Stop` only; every other event's return value is ignored.
+*/
+interface KimiResponse {
+  hookSpecificOutput?: {
+    permissionDecision?: "deny";
+    permissionDecisionReason?: string;
+  };
+}
+//#endregion
+//#region src/adapters/kimi/index.d.ts
+/** Read & parse the Kimi hook stdin payload (same wire shape as Claude for the fields we consume). */
+declare function readKimiInput(): Promise<KimiHookInput>;
+/**
+* Render a portable {@link Prompt} as a Kimi hook response string:
+* `block`/`ask` -> `{hookSpecificOutput:{permissionDecision:"deny",...}}`
+* (only `"deny"` is documented; `ask` is downgraded with {@link ASK_PREFIX});
+* `inform` -> raw text (Kimi appends stdout to context on exit 0 — no
+* documented JSON envelope for non-blocking context injection).
+* @param prompt - The portable policy prompt.
+* @returns The native Kimi response string.
+*/
+declare function toKimiResponse(prompt: Prompt): string;
+/**
+* Run the bundled policy over a Kimi hook payload and return the native
+* response string, or null to allow (the hook then exits 0 with empty stdout).
+* @param input - Parsed hook stdin payload.
+* @returns Native response string, or null when the tool use is allowed.
+*/
+declare function guard(input: KimiHookInput): string | null;
+//#endregion
+export { type KimiHookInput, type KimiResponse, guard, readKimiInput, toKimiResponse };

package/dist/adapters/kimi/index.mjs

@@ -0,0 +1,2 @@
+import { n as readKimiInput, r as toKimiResponse, t as guard } from "../../kimi-C7FGprQz.mjs";
+export { guard, readKimiInput, toKimiResponse };

package/dist/cli/bin.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { r as loadDotenv, s as resolveTtlSec } from "../dotenv-Jj8aL1FL.mjs";
-import { t as detectHarness } from "../harness-Cb9xR8dC.mjs";
+import { r as loadDotenv, s as resolveTtlSec } from "../dotenv-B26N_uGr.mjs";
+import { t as detectHarness } from "../harness-BMuLJ9lm.mjs";
 import { t as claudeHome } from "../home-state-BXf38Zi1.mjs";
 import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-3tyTW9Ud.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, t as handleHook, zt as todayUtc } from "../handle-Dthtlp7Z.mjs";
+import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, t as handleHook, zt as todayUtc } from "../handle-B7YufFz9.mjs";
 import { p as readStdin$1 } from "../claude-51RSspJ1.mjs";
 import { delimiter, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
@@ -1032,7 +1032,7 @@ function maybePlaySound(argv) {
 *   harness changelog      fetch + diff the Claude Code changelog, print a JSON summary (changelog-watcher)
 *   harness codex-rules    generate a Codex execpolicy .rules (Starlark) file from security.ts; stdout or --out <path>
 */
-const hookDebug = process.env.FUSE_HARNESS_DEBUG === "1";
+const hookDebug = process.env.FUSE_HARNESS_DEBUG === "1" && process.env.CI === "true";
 function traceHook(label, data) {
 	if (hookDebug) process.stderr.write(`[hook-debug] ${label}: ${typeof data === "string" ? data : JSON.stringify(data)}\n`);
 }

package/dist/config/index.d.mts

@@ -1,2 +1,2 @@
-import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "../index-jj_EzZRv.mjs";
+import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "../index-B_VHbsaJ.mjs";
 export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, ProjectLayout, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };

package/dist/config/index.mjs

@@ -1,5 +1,5 @@
 import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "../limits-CHn8AIL1.mjs";
-import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "../dotenv-Jj8aL1FL.mjs";
+import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "../dotenv-B26N_uGr.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "../layout-C0jaaCQC.mjs";
 import "../config-la_KkjCS.mjs";
 export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };

package/dist/detect/index.d.mts

@@ -1,2 +1,2 @@
-import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "../harness-s1Fce_dL.mjs";
+import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "../harness-BQ5_Wnva.mjs";
 export { type HarnessId, type HarnessInfo, type HarnessMode, type HarnessVia, detectHarness, detectMode, modeFor };

package/dist/detect/index.mjs

@@ -1,3 +1,3 @@
-import { n as detectMode, r as modeFor, t as detectHarness } from "../harness-Cb9xR8dC.mjs";
+import { n as detectMode, r as modeFor, t as detectHarness } from "../harness-BMuLJ9lm.mjs";
 import "../detect-la_KkjCS.mjs";
 export { detectHarness, detectMode, modeFor };

package/dist/{dotenv-Jj8aL1FL.mjs → dotenv-B26N_uGr.mjs}

@@ -42,7 +42,8 @@ const HOME_DIR = {
 	cline: ".clinerules",
 	"gemini-cli": ".gemini",
 	opencode: ".opencode",
-	hermes: ".hermes"
+	hermes: ".hermes",
+	kimi: ".kimi-code"
 };
 /** Parse a `.env` file into a key→value map (`export KEY="v"` or `KEY=v`). */
 function parseEnvFile(path) {

package/dist/{handle-Dthtlp7Z.mjs → handle-B7YufFz9.mjs}

@@ -1,21 +1,22 @@
 import { a as parseEnvInt, i as splitTarget, r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { s as resolveTtlSec } from "./dotenv-Jj8aL1FL.mjs";
+import { s as resolveTtlSec } from "./dotenv-B26N_uGr.mjs";
 import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { B as detectProjectType$1, H as requiredArchSkill, L as detectFramework, n as FAIL_CLOSED, t as evaluate, z as detectModularArchitecture } from "./evaluate-ClfbCDiY.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, d as countFrameworkCodeLines, f as countLines, i as loadSessionState, l as PLUGINS_DIR, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, t as claudeHome } from "./home-state-BXf38Zi1.mjs";
 import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-DisYd2fb.mjs";
 import { r as isDocConsulted } from "./doc-helpers-CWZegVdR.mjs";
-import { A as capVerbosity, C as usesTailwindUtilities, D as isExcludedSwiftPath, E as isExcludedJsPath, I as docConsultedGate, L as evaluateApex, N as POST_AUTH_GATES, P as PRE_AUTH_GATES, S as skillTriggerGate, T as frameworkSolidGate, _ as harnessHomeSegment, b as parseField, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, h as buildClaudeMdContext, j as detectCreationIntent, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, r as descFromText, s as parseEntry, t as isHtmlLike, v as scanPlugin } from "./validate-DhOX5hDK.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
+import { D as frameworkSolidGate, F as POST_AUTH_GATES, I as PRE_AUTH_GATES, M as capVerbosity, N as detectCreationIntent, O as isExcludedJsPath, R as docConsultedGate, S as parseField, T as usesTailwindUtilities, b as scanPlugin, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, g as buildClaudeMdContext, k as isExcludedSwiftPath, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, p as apexAgentSteps, r as descFromText, s as parseEntry, t as isHtmlLike, v as apexDocName, w as skillTriggerGate, y as harnessHomeSegment, z as evaluateApex } from "./validate-CkmquRDV.mjs";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-CDvR4bbF.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-CymilZiZ.mjs";
 import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
-import { a as writeLastNonce, c as recordAgent, d as recordRefRead, f as recordTarget, h as apexAuthorizationGate, i as verifyTrack, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, r as signTrack, s as emptyTrack, t as loadTrack, u as recordDoc } from "./store-Bcn08y9m.mjs";
+import { a as writeLastNonce, c as recordAgent, d as recordRefRead, f as recordTarget, h as apexAuthorizationGate, i as verifyTrack, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, r as signTrack, s as emptyTrack, t as loadTrack, u as recordDoc } from "./store-nDZ3eLBQ.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "./permission-mode-BN3MNgbm.mjs";
 import { _ as writeText, d as collectFiles, f as pathExists, g as spawnCapture, h as sleep, i as denyResponse, l as systemMessage, m as readText, n as blockResponse, r as contextResponse, s as informResponse, t as attachSystemMessage, v as commandToString } from "./claude-51RSspJ1.mjs";
 import { r as toHermesResponse } from "./hermes-rTmVdhUL.mjs";
+import { r as toKimiResponse } from "./kimi-C7FGprQz.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -598,7 +599,7 @@ function promptSubmitContext(prompt, cwd, id = "claude-code") {
 	const ctx = buildClaudeMdContext(prompt, cwd, id);
 	if (!ctx) return "";
 	if (!oncePerWindow(claudeMdKey(prompt, ctx), 3e3)) return "";
-	return attachSystemMessage(contextResponse("UserPromptSubmit", ctx), "CLAUDE.md injected");
+	return attachSystemMessage(contextResponse("UserPromptSubmit", ctx), `${apexDocName(id)} injected`);
 }
 /**
 * PreToolUse Task context injection: render the APEX sub-agent context as a
@@ -738,9 +739,15 @@ const PURGEABLE = {
 	doc: 48 * 3600,
 	explore: 48 * 3600
 };
-/** Read `~/.claude/CLAUDE.md`, or "" when missing/unreadable. */
-function claudeMd(home) {
-	const path = join(claudeHome(home), "CLAUDE.md");
+/**
+* Read the target's root instructions doc (`~/.claude/CLAUDE.md`,
+* `~/.codex/AGENTS.md`, `~/.kimi-code/AGENTS.md`, ...), or "" when
+* missing/unreadable.
+* @param home - Home dir.
+* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+*/
+function claudeMd(home, id = "claude-code") {
+	const path = join(home, harnessHomeSegment(id), apexDocName(id));
 	try {
 		return existsSync(path) ? readFileSync(path, "utf-8") : "";
 	} catch {
@@ -765,14 +772,15 @@ function runSessionStartCleanups(home = homedir(), now = Date.now()) {
 * @param cwd - Project root for dev-context detection.
 * @param home - Home dir (defaults to `~`).
 * @param now - Clock for TTL cleanup (defaults to `Date.now()`).
+* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
 * @returns The native hook stdout (possibly empty).
 */
-function sessionStartCore(cwd, home = homedir(), now = Date.now()) {
-	const md = claudeMd(home);
+function sessionStartCore(cwd, home = homedir(), now = Date.now(), id = "claude-code") {
+	const md = claudeMd(home, id);
 	const dev = devContext(cwd);
 	runSessionStartCleanups(home, now);
 	const ctx = [md, dev].filter(Boolean).join("\n");
-	return ctx ? attachSystemMessage(contextResponse("SessionStart", ctx), "CLAUDE.md injected") : "";
+	return ctx ? attachSystemMessage(contextResponse("SessionStart", ctx), `${apexDocName(id)} injected`) : "";
 }
 //#endregion
 //#region src/runtime/lifecycle/inject-rules.ts
@@ -1724,6 +1732,7 @@ const RESEARCH_TOOLS = /* @__PURE__ */ new Set([
 	"mcp__exa__deep_researcher_start",
 	"WebSearch",
 	"WebFetch",
+	"FetchURL",
 	"mcp__fuse-browser__browser_fetch",
 	"mcp__fuse-browser__browser_fetch_batch",
 	"mcp__fuse-browser__browser_crawl",
@@ -1808,8 +1817,17 @@ function classifyExplore(tool, input) {
 * session track the freshness gate scans FIRST — sidechain research and
 * Workflow-spawned agents count, unlike the lead-transcript scan.
 */
-/** Tools the existing Task tracking already credits as agent LAUNCHES. */
-const AGENT_LAUNCH_TOOLS = /* @__PURE__ */ new Set(["Task", "Agent"]);
+/**
+* Tools the existing Task tracking already credits as agent LAUNCHES.
+* `AgentSwarm` is Kimi Code's batch launcher (`prompt_template` + `items`,
+* one `subagent_type` applied to every spawned sub-agent) — same launch
+* semantics as `Task`/`Agent`, so it is excluded here too (anti-double-count).
+*/
+const AGENT_LAUNCH_TOOLS = /* @__PURE__ */ new Set([
+	"Task",
+	"Agent",
+	"AgentSwarm"
+]);
 /**
 * `JSON.stringify` length of the raw `tool_response` OBJECT (parity Python
 * `len(str(tool_response))`); 0 when absent or unserializable (circular).
@@ -4095,9 +4113,7 @@ async function injectApexSubagentContext(cwd, home = homedir(), id = "claude-cod
 	const taskData = await readJsonFile(join(apexDir, "task.json"));
 	const completed = taskData ? completedTasks(taskData.tasks) : "none";
 	const pending = taskData ? pendingTasks(taskData.tasks) : "none";
-	const isCodex = id === "codex";
-	const beforeStart = isCodex ? "Use update_plan → mark the active step in_progress before starting" : "Use TaskUpdate(taskId, status: in_progress) before starting";
-	const whenDone = isCodex ? "update_plan → mark the step completed when done" : "TaskUpdate(taskId, status: completed) triggers auto-commit";
+	const { beforeStart, whenDone } = apexAgentSteps(id);
 	return contextResponse("SubagentStart", capFragment("apex-subagent", `## APEX Sub-Agent Instructions
 
 You are a sub-agent in APEX workflow. Follow these rules:
@@ -5325,7 +5341,7 @@ function sessionStart(input) {
 	if (input.scope === "rules") return injectRules(process.env.CLAUDE_PLUGIN_ROOT ?? input.cwd, input.event);
 	if (input.scope === "carto") return cartoSessionStart(input.cwd, input.now);
 	if (input.scope === "lessons") return dispatchLessons("SessionStart", input.payload, input.cwd, input.now);
-	const core = sessionStartCore(input.cwd, void 0, input.now);
+	const core = sessionStartCore(input.cwd, void 0, input.now, input.id ?? "claude-code");
 	return input.scope === "core" ? withSnapshot(core, input.cwd, import.meta.url) : core;
 }
 /**
@@ -7071,13 +7087,13 @@ const MCP_TTL_MS = parseEnvInt(process.env.FUSE_MCP_TTL_SEC, MCP_TTL_DEFAULT_SEC
 const WEBFETCH_TTL_MS = parseEnvInt(process.env.FUSE_WEBFETCH_TTL_SEC, WEBFETCH_TTL_DEFAULT_SEC) * 1e3;
 /** WebFetch prompt slice folded into its cache key (parity with Python prompt[:500]). */
 const PROMPT_TRUNC = 500;
-/** True for the WebFetch tool (exact name). */
+/** True for the WebFetch tool (exact name) or Kimi Code CLI's `FetchURL` equivalent. */
 function isWebFetch(tool) {
-	return tool === "WebFetch";
+	return tool === "WebFetch" || tool === "FetchURL";
 }
-/** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
+/** MCP doc tools + WebFetch/FetchURL whose calls are cached / verbosity-capped. */
 function isMcpTool(tool) {
-	return /context7|exa|webfetch|web_fetch/i.test(tool) || tool === "WebFetch";
+	return /context7|exa|webfetch|web_fetch/i.test(tool) || isWebFetch(tool);
 }
 /** The query/url that keys the cache. */
 function queryOf(input) {
@@ -7195,6 +7211,12 @@ async function recordActivity(file, activity) {
 * - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
 *   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
 *   `{context}` (Hermes has no interactive "ask" state).
+* - kimi: delegated to the adapter's `toKimiResponse` — `block`/`ask` ->
+*   `hookSpecificOutput.permissionDecision:"deny"` (Kimi Code CLI's hooks
+*   contract documents only "deny"; `ask` downgrades with a prefix, mirroring
+*   the codex branch above), `inform` -> raw text on stdout (Kimi appends
+*   stdout to context on exit 0 — no `hookSpecificOutput` envelope documented
+*   for non-blocking context injection).
 *
 * User-visible pass notices (`prompt.userMessage`, Python `hook_output.allow_pass`
 * / `post_pass` parity), by harness:
@@ -7259,6 +7281,7 @@ function respond(id, prompt, event = "PreToolUse") {
 				agent_message: message
 			});
 		case "hermes": return toHermesResponse(prompt);
+		case "kimi": return toKimiResponse(prompt);
 		case "cline":
 			if (kind === "block") return JSON.stringify({
 				cancel: true,
@@ -8163,7 +8186,7 @@ function docSourceOf(tool) {
 * Map a live tool-use to the activity to record, or null when nothing is
 * tracked. Works across harnesses — tool names are globally distinct:
 * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task`/`Agent` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
+* - `Task`/`Agent`/`AgentSwarm` + `subagent_type` (Claude/Cursor/Kimi) → `agent` (bare agent name)
 * - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
 *   → `agent` credited to the matching REQUIRED_AGENTS phase
 * - a read tool opening a `.md` reference → `ref`
@@ -8178,7 +8201,7 @@ function activityFor(event) {
 		source: docSource,
 		ts: event.now
 	});
-	if (event.tool === "Task" || event.tool === "Agent") {
+	if (event.tool === "Task" || event.tool === "Agent" || event.tool === "AgentSwarm") {
 		const name = String(event.input?.subagent_type ?? event.input?.name ?? "").split(":").pop() ?? "";
 		if (name) out.push(agentActivity(name, event.now, qualityFor(event.responseLength, AGENT_QUALITY_MIN)));
 		return out;

package/dist/{harness-Cb9xR8dC.mjs → harness-BMuLJ9lm.mjs}

@@ -31,7 +31,8 @@ const STD_NAMES = {
 	gemini: "gemini-cli",
 	copilot: "copilot",
 	kiro: "kiro",
-	hermes: "hermes"
+	hermes: "hermes",
+	kimi: "kimi"
 };
 /** Harnesses exposing a native hook system (vs CLI-only integration). */
 const HOOK_CAPABLE = /* @__PURE__ */ new Set([
@@ -41,7 +42,8 @@ const HOOK_CAPABLE = /* @__PURE__ */ new Set([
 	"cline",
 	"gemini-cli",
 	"opencode",
-	"hermes"
+	"hermes",
+	"kimi"
 ]);
 /** Integration mode for a harness id. */
 function modeFor(id) {

package/dist/{harness-s1Fce_dL.d.mts → harness-BQ5_Wnva.d.mts}

@@ -1,6 +1,6 @@
 //#region src/detect/interfaces/types.d.ts
 /** Known AI coding harnesses detectable at runtime. */
-type HarnessId = "claude-code" | "codex" | "cursor" | "cline" | "gemini-cli" | "opencode" | "windsurf" | "copilot" | "aider" | "kiro" | "goose" | "amp" | "hermes" | "unknown";
+type HarnessId = "claude-code" | "codex" | "cursor" | "cline" | "gemini-cli" | "opencode" | "windsurf" | "copilot" | "aider" | "kiro" | "goose" | "amp" | "hermes" | "kimi" | "unknown";
 /** Integration mode: `hook` = native lifecycle hooks; `cli` = run as an external step. */
 type HarnessMode = "hook" | "cli";
 /** How the harness was identified. */

package/dist/{index-jj_EzZRv.d.mts → index-B_VHbsaJ.d.mts}

@@ -1,4 +1,4 @@
-import { i as HarnessId } from "./harness-s1Fce_dL.mjs";
+import { i as HarnessId } from "./harness-BQ5_Wnva.mjs";
 
 //#region src/config/env.d.ts
 /**

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-DVbIl9md.mjs";
 import { _ as queryHash, a as cacheLookupSubstringMeta, c as mcpCacheKey, d as extractText, f as IndexSummary, g as jaccardSimilar, h as compactMarkdown, i as cacheLookupSubstring, l as mcpCacheWrite, m as summarizeIndex, n as cacheLookup, o as cachePath, p as loadIndex, r as cacheLookupMeta, s as cacheStore, t as CacheHit, u as webfetchCacheWrite } from "./index-BUwEmIK-.mjs";
-import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "./index-jj_EzZRv.mjs";
-import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "./harness-s1Fce_dL.mjs";
+import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "./index-B_VHbsaJ.mjs";
+import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "./harness-BQ5_Wnva.mjs";
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-CEKzGg2u.mjs";
 import { t as incrementTrivialEditCounter } from "./index-BOBXQ91y.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-BEMumjOw.mjs";

package/dist/index.mjs

@@ -1,14 +1,14 @@
 import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "./limits-CHn8AIL1.mjs";
-import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
+import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "./dotenv-B26N_uGr.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./layout-C0jaaCQC.mjs";
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-Cb9xR8dC.mjs";
+import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
 import { A as GIT_ASK, B as detectProjectType, C as SESSION_STATE_FRAGMENT, D as ASK_PATTERNS, E as protectedPathGuard, F as isRalphMode, H as requiredArchSkill, I as matchPatterns, L as detectFramework, M as PROJECT_INSTALL, N as RALPH_SAFE, O as CRITICAL_PATTERNS, P as SYSTEM_INSTALL, R as DEV_KEYWORDS, S as SAFE_PREFIXES, T as PROTECTED_GIT_RE, V as isApexCommand, _ as bashWriteGuard, a as registerGuard, b as CODE_REDIRECT, c as GO_DECL_RE, d as PY_MODEL_RE, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, j as GIT_BLOCKED, k as securityGuard, l as JAVA_DECL_RE, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as ASK_WRITERS, w as PROTECTED_FRAGMENTS, x as FILE_REDIRECT, y as CODE_MUTATORS, z as detectModularArchitecture } from "./evaluate-ClfbCDiY.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-BXf38Zi1.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as capVerbosity, C as usesTailwindUtilities, F as brainstormGate, I as docConsultedGate, L as evaluateApex, M as APEX_GATES, N as POST_AUTH_GATES, O as MAX_EXA_RESULTS, P as PRE_AUTH_GATES, R as freshnessGate, S as skillTriggerGate, T as frameworkSolidGate, a as firstHeading, b as parseField, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as detectClaudeMdProjectType, h as buildClaudeMdContext, i as firstComment, j as detectCreationIntent, k as MAX_TOKENS, l as PROJECT_INDICATORS, m as buildApexInstruction, n as missingSeoElements, o as parseEnrichment, p as DEV_VERBS, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as SKILL_TRIGGERS, x as detectRequiredSkills, y as parseBodyDesc, z as solidReadGate } from "./validate-DhOX5hDK.mjs";
+import { A as MAX_EXA_RESULTS, B as freshnessGate, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, F as POST_AUTH_GATES, I as PRE_AUTH_GATES, L as brainstormGate, M as capVerbosity, N as detectCreationIntent, P as APEX_GATES, R as docConsultedGate, S as parseField, T as usesTailwindUtilities, V as solidReadGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as MAX_TOKENS, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as evaluateApex } from "./validate-CkmquRDV.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-CymilZiZ.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/init/index.d.mts

@@ -1,4 +1,4 @@
-import { i as HarnessId } from "../harness-s1Fce_dL.mjs";
+import { i as HarnessId } from "../harness-BQ5_Wnva.mjs";
 
 //#region src/init/templates.d.ts
 /**

package/dist/kimi-C7FGprQz.mjs

@@ -0,0 +1,80 @@
+import { t as evaluate } from "./evaluate-ClfbCDiY.mjs";
+import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
+import { c as readClaudeInput, v as commandToString } from "./claude-51RSspJ1.mjs";
+//#region src/adapters/kimi/index.ts
+/**
+* Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,
+* 2026) configures hooks in `~/.kimi-code/config.toml` (`[[hooks]]`: event,
+* matcher, command, timeout — exactly 4 fields, any extra breaks config
+* loading) and pipes a JSON payload to `command` on stdin, reading JSON back
+* on stdout. Verified against kimi.com/code/docs/en/kimi-code-cli/
+* customization/hooks.html (2026): the INPUT base shape
+* (`hook_event_name`/`session_id`/`cwd`, `PreToolUse`/`Bash` carrying
+* `tool_name` + `tool_input.command`) matches Claude Code's snake_case wire
+* shape, so the Claude reader is reused — verified live against kimi-code
+* v0.27.0 for both `PreToolUse`/`Bash` and `PreToolUse`/`Write`. Tool fields
+* verified: `Bash` takes `command`; `Write` takes `path` + `content`; `Edit`
+* takes `path` + `old_string`/`new_string` (per `docs/en/reference/tools.md`,
+* moonshotai/kimi-code). The path key is `path`, NOT Claude's `file_path`
+* (see interfaces/types.ts).
+*
+* OUTPUT does not match Claude: only `UserPromptSubmit`, `PreToolUse`, `Stop`
+* are blockable, and the only documented decision is
+* `{"hookSpecificOutput":{"permissionDecision":"deny","permissionDecisionReason"}}`
+* (camelCase, despite the snake_case input — a real Kimi inconsistency). No
+* `"ask"`/`"allow"`/`additionalContext` is documented. Verified live against
+* kimi-code v0.27.0: that deny envelope on stdout at exit 0 blocks the call
+* (exit 2 is NOT required) and `permissionDecisionReason` is re-injected to
+* the model; empty stdout at exit 0 lets the call run. Exit 2 = block, stderr
+* = reason; any other exit/timeout/crash fails open (allow). Whether raw-text
+* stdout at exit 0 (the `inform` case) reaches the context is documented only
+* as "may be" — unverified, needs live test.
+*/
+/**
+* Downgrade prefix for `ask` — Kimi has no interactive approval channel
+* reachable from a hook. Kimi DOES have an `ask` decision, but only via
+* `[[permission.rules]] decision = "ask"` in config.toml, a separate system
+* a hook's return value cannot invoke.
+*/
+const ASK_PREFIX = "[downgraded from ask — Kimi Code has no interactive approval]";
+/** Read & parse the Kimi hook stdin payload (same wire shape as Claude for the fields we consume). */
+async function readKimiInput() {
+	return await readClaudeInput();
+}
+/**
+* Render a portable {@link Prompt} as a Kimi hook response string:
+* `block`/`ask` -> `{hookSpecificOutput:{permissionDecision:"deny",...}}`
+* (only `"deny"` is documented; `ask` is downgraded with {@link ASK_PREFIX});
+* `inform` -> raw text (Kimi appends stdout to context on exit 0 — no
+* documented JSON envelope for non-blocking context injection).
+* @param prompt - The portable policy prompt.
+* @returns The native Kimi response string.
+*/
+function toKimiResponse(prompt) {
+	const msg = formatPrompt(prompt);
+	if (prompt.kind === "inform") return msg;
+	const res = { hookSpecificOutput: {
+		permissionDecision: "deny",
+		permissionDecisionReason: prompt.kind === "ask" ? `${ASK_PREFIX}\n${msg}` : msg
+	} };
+	return JSON.stringify(res);
+}
+/**
+* Run the bundled policy over a Kimi hook payload and return the native
+* response string, or null to allow (the hook then exits 0 with empty stdout).
+* @param input - Parsed hook stdin payload.
+* @returns Native response string, or null when the tool use is allowed.
+*/
+function guard(input) {
+	const t = input.tool_input;
+	const r = evaluate({
+		tool: input.tool_name ?? "Write",
+		filePath: t?.path ?? t?.file_path,
+		content: t?.content ?? t?.new_string,
+		command: commandToString(t?.command)
+	});
+	if (r.decision === "allow" || !r.prompt) return null;
+	return toKimiResponse(r.prompt);
+}
+//#endregion
+export { readKimiInput as n, toKimiResponse as r, guard as t };

package/dist/policy/index.mjs

@@ -1,5 +1,5 @@
 import { A as GIT_ASK, B as detectProjectType, C as SESSION_STATE_FRAGMENT, D as ASK_PATTERNS, E as protectedPathGuard, F as isRalphMode, H as requiredArchSkill, I as matchPatterns, L as detectFramework, M as PROJECT_INSTALL, N as RALPH_SAFE, O as CRITICAL_PATTERNS, P as SYSTEM_INSTALL, R as DEV_KEYWORDS, S as SAFE_PREFIXES, T as PROTECTED_GIT_RE, V as isApexCommand, _ as bashWriteGuard, a as registerGuard, b as CODE_REDIRECT, c as GO_DECL_RE, d as PY_MODEL_RE, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, j as GIT_BLOCKED, k as securityGuard, l as JAVA_DECL_RE, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as ASK_WRITERS, w as PROTECTED_FRAGMENTS, x as FILE_REDIRECT, y as CODE_MUTATORS, z as detectModularArchitecture } from "../evaluate-ClfbCDiY.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "../home-state-BXf38Zi1.mjs";
-import { A as capVerbosity, C as usesTailwindUtilities, F as brainstormGate, I as docConsultedGate, L as evaluateApex, M as APEX_GATES, N as POST_AUTH_GATES, O as MAX_EXA_RESULTS, P as PRE_AUTH_GATES, R as freshnessGate, S as skillTriggerGate, T as frameworkSolidGate, a as firstHeading, b as parseField, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as detectClaudeMdProjectType, h as buildClaudeMdContext, i as firstComment, j as detectCreationIntent, k as MAX_TOKENS, l as PROJECT_INDICATORS, m as buildApexInstruction, n as missingSeoElements, o as parseEnrichment, p as DEV_VERBS, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as SKILL_TRIGGERS, x as detectRequiredSkills, y as parseBodyDesc, z as solidReadGate } from "../validate-DhOX5hDK.mjs";
+import { A as MAX_EXA_RESULTS, B as freshnessGate, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, F as POST_AUTH_GATES, I as PRE_AUTH_GATES, L as brainstormGate, M as capVerbosity, N as detectCreationIntent, P as APEX_GATES, R as docConsultedGate, S as parseField, T as usesTailwindUtilities, V as solidReadGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as MAX_TOKENS, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as evaluateApex } from "../validate-CkmquRDV.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, isHtmlLike, isRalphMode, loadApexTaskState, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/runtime/index.d.mts

@@ -75,7 +75,7 @@ interface ToolEvent {
 * Map a live tool-use to the activity to record, or null when nothing is
 * tracked. Works across harnesses — tool names are globally distinct:
 * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task`/`Agent` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
+* - `Task`/`Agent`/`AgentSwarm` + `subagent_type` (Claude/Cursor/Kimi) → `agent` (bare agent name)
 * - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
 *   → `agent` credited to the matching REQUIRED_AGENTS phase
 * - a read tool opening a `.md` reference → `ref`
@@ -207,6 +207,12 @@ declare function normalizeEvent(id: string, payload: Record<string, unknown>): N
 * - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
 *   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
 *   `{context}` (Hermes has no interactive "ask" state).
+* - kimi: delegated to the adapter's `toKimiResponse` — `block`/`ask` ->
+*   `hookSpecificOutput.permissionDecision:"deny"` (Kimi Code CLI's hooks
+*   contract documents only "deny"; `ask` downgrades with a prefix, mirroring
+*   the codex branch above), `inform` -> raw text on stdout (Kimi appends
+*   stdout to context on exit 0 — no `hookSpecificOutput` envelope documented
+*   for non-blocking context injection).
 *
 * User-visible pass notices (`prompt.userMessage`, Python `hook_output.allow_pass`
 * / `post_pass` parity), by harness:
@@ -234,7 +240,7 @@ declare function respond(id: string, prompt: Prompt, event?: string): string;
 declare const MCP_TTL_MS: number;
 /** WebFetch freshness (ms) from `FUSE_WEBFETCH_TTL_SEC` (default 24h; pages stale faster than docs). */
 declare const WEBFETCH_TTL_MS: number;
-/** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
+/** MCP doc tools + WebFetch/FetchURL whose calls are cached / verbosity-capped. */
 declare function isMcpTool(tool: string): boolean;
 /** The query/url that keys the cache. */
 declare function queryOf(input: Record<string, unknown>): string;
@@ -353,9 +359,10 @@ declare function runSessionStartCleanups(home?: string, now?: number): void;
 * @param cwd - Project root for dev-context detection.
 * @param home - Home dir (defaults to `~`).
 * @param now - Clock for TTL cleanup (defaults to `Date.now()`).
+* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
 * @returns The native hook stdout (possibly empty).
 */
-declare function sessionStartCore(cwd: string, home?: string, now?: number): string;
+declare function sessionStartCore(cwd: string, home?: string, now?: number, id?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/inject-rules.d.ts
 /** Read & concatenate all `*.md` files (sorted) under `rulesDir`. */

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-BXf38Zi1.mjs";
-import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-Dthtlp7Z.mjs";
+import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-B7YufFz9.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/dist/{skill-path-BO2N0XvB.mjs → skill-path-CDvR4bbF.mjs}

@@ -1,5 +1,5 @@
-import { t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
-import { t as detectHarness } from "./harness-Cb9xR8dC.mjs";
+import { t as HOME_DIR } from "./dotenv-B26N_uGr.mjs";
+import { t as detectHarness } from "./harness-BMuLJ9lm.mjs";
 import { l as PLUGINS_DIR } from "./home-state-BXf38Zi1.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync, readdirSync } from "node:fs";

package/dist/{store-Bcn08y9m.mjs → store-nDZ3eLBQ.mjs}

@@ -1,9 +1,9 @@
-import { c as ttlLabel } from "./dotenv-Jj8aL1FL.mjs";
+import { c as ttlLabel } from "./dotenv-B26N_uGr.mjs";
 import { n as fuseHarnessHome } from "./home-state-BXf38Zi1.mjs";
 import { a as writeJsonFile, i as readJsonFile } from "./json-io-DisYd2fb.mjs";
 import { i as resolveSessions } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
+import { t as resolveSkillPath } from "./skill-path-CDvR4bbF.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { createHmac, randomBytes } from "node:crypto";

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { c as recordAgent, d as recordRefRead, f as recordTarget, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, s as emptyTrack, t as loadTrack, u as recordDoc } from "../store-Bcn08y9m.mjs";
+import { c as recordAgent, d as recordRefRead, f as recordTarget, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, s as emptyTrack, t as loadTrack, u as recordDoc } from "../store-nDZ3eLBQ.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTarget, recordTrivialEdit, saveTrack, trivialCount };

package/dist/{validate-DhOX5hDK.mjs → validate-CkmquRDV.mjs}

@@ -1,10 +1,10 @@
 import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { c as ttlLabel, t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
+import { c as ttlLabel, t as HOME_DIR } from "./dotenv-B26N_uGr.mjs";
 import { R as DEV_KEYWORDS, g as moduleAwarePath } from "./evaluate-ClfbCDiY.mjs";
 import { d as countFrameworkCodeLines, l as PLUGINS_DIR, u as SOLID_REF } from "./home-state-BXf38Zi1.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-CDvR4bbF.mjs";
 import { extname, join } from "node:path";
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { homedir } from "node:os";
@@ -1208,24 +1208,29 @@ function harnessHomeSegment(id) {
 	return HOME_DIR[id] ?? ".claude";
 }
 /**
-* Root instructions doc name for a harness target: "AGENTS.md" for Codex,
-* "CLAUDE.md" for every other target (including the default/unknown fallback).
+* Root instructions doc name for a harness target: "AGENTS.md" for Codex and
+* Kimi Code CLI (both documented conventions), "CLAUDE.md" for every other
+* target (including the default/unknown fallback).
 * @param id - Harness id.
 * @returns The doc file name.
 */
 function apexDocName(id) {
-	return id === "codex" ? "AGENTS.md" : "CLAUDE.md";
+	return id === "codex" || id === "kimi" ? "AGENTS.md" : "CLAUDE.md";
 }
 /**
-* Native plan/track tool name for a harness target: Codex's `update_plan` vs
-* Claude's `TaskCreate`. Covers only the PLAN-step line — other Claude-only
-* tool references (`TaskList`, `TaskUpdate`) are branched inline by the
-* builders since their surrounding prose differs structurally, not just by token.
+* Native plan/track tool name for a harness target: Codex's `update_plan`,
+* Kimi Code CLI's `TodoList`, or Claude's `TaskCreate` (default). Covers only
+* the PLAN-step line — other target-specific tool references (`TaskList`,
+* `TaskUpdate`) are resolved via `apexTaskSteps`/`apexAgentSteps` in
+* `apex-target-steps.ts` since their surrounding prose differs structurally,
+* not just by token.
 * @param id - Harness id.
 * @returns The plan-tool name.
 */
 function apexPlanTool(id) {
-	return id === "codex" ? "update_plan" : "TaskCreate";
+	if (id === "codex") return "update_plan";
+	if (id === "kimi") return "TodoList";
+	return "TaskCreate";
 }
 //#endregion
 //#region src/policy/detect-claude-md-project-type.ts
@@ -1291,6 +1296,61 @@ function buildClaudeMdContext(prompt, cwd, id = "claude-code") {
 	return `${buildApexInstruction(detectClaudeMdProjectType(cwd), resolveMaxLines(), id)}\n\n# ${docName}\n${claudeContent}`;
 }
 //#endregion
+//#region src/policy/apex-target-steps.ts
+/** Codex/Kimi step-trio overrides; any other target falls back to {@link DEFAULT_TASK_STEPS}. */
+const TASK_STEPS = {
+	codex: {
+		step3: "update_plan → review the current plan",
+		step4: "update_plan → mark the active step in_progress before starting",
+		step7: "update_plan → mark the step completed when done"
+	},
+	kimi: {
+		step3: "TodoList → review the current list (omit todos to query)",
+		step4: "TodoList → mark the active item in_progress before starting",
+		step7: "TodoList → mark the item done when finished"
+	}
+};
+/** Default (Claude Code) step trio — zero-regression fallback for any unlisted target. */
+const DEFAULT_TASK_STEPS = {
+	step3: "TaskList → see pending tasks",
+	step4: "TaskUpdate(in_progress) → before starting",
+	step7: "TaskUpdate(completed) → triggers auto-commit"
+};
+/**
+* Resolve the step3/step4/step7 phrasing for a harness target (APEX
+* task-context injection). Replaces the former `isCodex` binary ternary.
+* @param id - Harness id.
+* @returns The {@link ApexTaskSteps} for that target.
+*/
+function apexTaskSteps(id) {
+	return TASK_STEPS[id] ?? DEFAULT_TASK_STEPS;
+}
+/** Codex/Kimi before/done overrides; any other target falls back to {@link DEFAULT_AGENT_STEPS}. */
+const AGENT_STEPS = {
+	codex: {
+		beforeStart: "Use update_plan → mark the active step in_progress before starting",
+		whenDone: "update_plan → mark the step completed when done"
+	},
+	kimi: {
+		beforeStart: "Use TodoList → mark the active item in_progress before starting",
+		whenDone: "TodoList → mark the item done when finished"
+	}
+};
+/** Default (Claude Code) before/done pair — zero-regression fallback for any unlisted target. */
+const DEFAULT_AGENT_STEPS = {
+	beforeStart: "Use TaskUpdate(taskId, status: in_progress) before starting",
+	whenDone: "TaskUpdate(taskId, status: completed) triggers auto-commit"
+};
+/**
+* Resolve the beforeStart/whenDone phrasing for a harness target (APEX
+* sub-agent injection). Replaces the former `isCodex` binary ternary.
+* @param id - Harness id.
+* @returns The {@link ApexAgentSteps} for that target.
+*/
+function apexAgentSteps(id) {
+	return AGENT_STEPS[id] ?? DEFAULT_AGENT_STEPS;
+}
+//#endregion
 //#region src/policy/apex-task-context.ts
 /**
 * Read the current task state from `task.json`, reproducing the legacy Python
@@ -1330,10 +1390,7 @@ function loadApexTaskState(taskFile) {
 */
 function buildApexTaskContext(state, maxLines, id = "claude-code") {
 	const seg = harnessHomeSegment(id);
-	const isCodex = id === "codex";
-	const step3 = isCodex ? "update_plan → review the current plan" : "TaskList → see pending tasks";
-	const step4 = isCodex ? "update_plan → mark the active step in_progress before starting" : "TaskUpdate(in_progress) → before starting";
-	const step7 = isCodex ? "update_plan → mark the step completed when done" : "TaskUpdate(completed) → triggers auto-commit";
+	const { step3, step4, step7 } = apexTaskSteps(id);
 	return `⚠️ APEX MODE - Read ${seg}/apex/AGENTS.md for rules\n\nCurrent: Task #${state.id} - ${state.subject} (Phase: ${state.phase})\nDocs consulted: ${state.docs}\n\nAgent must:\n1. Read task.json → find last 3 completed tasks\n2. Read their notes in docs/ (task-{ID}-{subject}.md)\n3. ${step3}\n4. ${step4}\n5. Apply SOLID (files < ${maxLines} lines)\n6. Write notes to docs/task-{ID}-{subject}.md\n7. ${step7}`;
 }
 /**
@@ -1591,4 +1648,4 @@ function missingSeoElements(html) {
 	return missing;
 }
 //#endregion
-export { capVerbosity as A, usesTailwindUtilities as C, isExcludedSwiftPath as D, isExcludedJsPath as E, brainstormGate as F, docConsultedGate as I, evaluateApex as L, APEX_GATES as M, POST_AUTH_GATES as N, MAX_EXA_RESULTS as O, PRE_AUTH_GATES as P, freshnessGate as R, skillTriggerGate as S, frameworkSolidGate as T, harnessHomeSegment as _, firstHeading as a, parseField as b, EXCLUDE_DIRS as c, buildApexTaskInjection as d, loadApexTaskState as f, detectClaudeMdProjectType as g, buildClaudeMdContext as h, firstComment as i, detectCreationIntent as j, MAX_TOKENS as k, PROJECT_INDICATORS as l, buildApexInstruction as m, missingSeoElements as n, parseEnrichment as o, DEV_VERBS as p, descFromText as r, parseEntry as s, isHtmlLike as t, buildApexTaskContext as u, scanPlugin as v, SKILL_TRIGGERS as w, detectRequiredSkills as x, parseBodyDesc as y, solidReadGate as z };
+export { MAX_EXA_RESULTS as A, freshnessGate as B, detectRequiredSkills as C, frameworkSolidGate as D, SKILL_TRIGGERS as E, POST_AUTH_GATES as F, PRE_AUTH_GATES as I, brainstormGate as L, capVerbosity as M, detectCreationIntent as N, isExcludedJsPath as O, APEX_GATES as P, docConsultedGate as R, parseField as S, usesTailwindUtilities as T, solidReadGate as V, detectClaudeMdProjectType as _, firstHeading as a, scanPlugin as b, EXCLUDE_DIRS as c, buildApexTaskInjection as d, loadApexTaskState as f, buildClaudeMdContext as g, buildApexInstruction as h, firstComment as i, MAX_TOKENS as j, isExcludedSwiftPath as k, PROJECT_INDICATORS as l, DEV_VERBS as m, missingSeoElements as n, parseEnrichment as o, apexAgentSteps as p, descFromText as r, parseEntry as s, isHtmlLike as t, buildApexTaskContext as u, apexDocName as v, skillTriggerGate as w, parseBodyDesc as x, harnessHomeSegment as y, evaluateApex as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.79",
+  "version": "0.1.80",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",
@@ -113,6 +113,11 @@
       "bun": "./src/adapters/hermes/index.ts",
       "types": "./dist/adapters/hermes/index.d.mts",
       "import": "./dist/adapters/hermes/index.mjs"
+    },
+    "./adapters/kimi": {
+      "bun": "./src/adapters/kimi/index.ts",
+      "types": "./dist/adapters/kimi/index.d.mts",
+      "import": "./dist/adapters/kimi/index.mjs"
     }
   },
   "files": [
@@ -134,7 +139,7 @@
     "sim": "bun test test/sim/",
     "typecheck": "tsc --noEmit",
     "docs:api": "typedoc",
-    "build": "tsdown src/index.ts src/config/index.ts src/util/index.ts src/detect/index.ts src/policy/index.ts src/prompt/index.ts src/memory/index.ts src/cache/index.ts src/freshness/index.ts src/refs/index.ts src/statusline/index.ts src/cli/index.ts src/cli/bin.ts src/init/index.ts src/tracking/index.ts src/runtime/index.ts src/adapters/claude/index.ts src/adapters/codex/index.ts src/adapters/cursor/index.ts src/adapters/cline/index.ts src/adapters/gemini/index.ts src/adapters/hermes/index.ts --dts --format esm --clean --out-dir dist",
+    "build": "tsdown src/index.ts src/config/index.ts src/util/index.ts src/detect/index.ts src/policy/index.ts src/prompt/index.ts src/memory/index.ts src/cache/index.ts src/freshness/index.ts src/refs/index.ts src/statusline/index.ts src/cli/index.ts src/cli/bin.ts src/init/index.ts src/tracking/index.ts src/runtime/index.ts src/adapters/claude/index.ts src/adapters/codex/index.ts src/adapters/cursor/index.ts src/adapters/cline/index.ts src/adapters/gemini/index.ts src/adapters/hermes/index.ts src/adapters/kimi/index.ts --dts --format esm --clean --out-dir dist",
     "prepublishOnly": "bun test && tsc --noEmit && bun run build"
   },
   "publishConfig": {