@fusengine/harness 0.1.79 → 0.1.81

package/dist/{validate-DhOX5hDK.mjs → validate-Bf-EsbDh.mjs}

@@ -1,11 +1,11 @@
-import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { c as ttlLabel, t as HOME_DIR } from "./dotenv-Jj8aL1FL.mjs";
-import { R as DEV_KEYWORDS, g as moduleAwarePath } from "./evaluate-ClfbCDiY.mjs";
-import { d as countFrameworkCodeLines, l as PLUGINS_DIR, u as SOLID_REF } from "./home-state-BXf38Zi1.mjs";
+import { a as resolveMaxLines, c as storeBudget, i as hookBudget } from "./limits-DG5pl-5s.mjs";
+import { c as ttlLabel, t as HOME_DIR } from "./dotenv-DoqNlALG.mjs";
+import { A as moduleAwarePath, S as isHooksPath, T as isStoresPath, _ as rolloutVerdict, at as DEV_KEYWORDS, it as maskCommentsOnly, nt as projectCaps, rt as maskCommentsAndStrings, tt as nearestManifestDir, x as isComponentsPath, y as declaresInterface } from "./evaluate-B4-MhOy_.mjs";
+import { d as countFrameworkCodeLines, l as PLUGINS_DIR, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-BO2N0XvB.mjs";
-import { extname, join } from "node:path";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-DhBGlQe3.mjs";
+import { dirname, extname, join, resolve } from "node:path";
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/refs/ref-key.ts
@@ -90,7 +90,7 @@ const solidReadGate = (ctx) => {
 	if (missing.length === 0) return null;
 	const optional = routed.optional.map((r) => r.meta.filePath);
 	const reason = [
-		`Read these before editing ${ctx.filePath} (expires every ${ttl}):`,
+		`Read ALL references below (including Optional), then retry — required before editing ${ctx.filePath} (expires every ${ttl}):`,
 		...optional.length ? [`Optional: ${optional.join(", ")}`] : [],
 		`Full skill: ${routed.skillPath}`
 	].join("\n");
@@ -229,12 +229,13 @@ function isExcludedSwiftPath(filePath) {
 /**
 * This harness's own gate-detection source files. They hold the React/Next
 * detection literals as regex source text (client-directive string, hook/
-* event names) — scanning them as JS/TS would self-match the very heuristics
-* they define. Exempt by exact filename, not by directory, so a genuine SOLID
-* violation elsewhere in src/policy/ stays gated by the framework-agnostic
-* line-size check in policy/evaluate.ts, untouched by this exemption.
+* event names, store/query/route signals) — scanning them as JS/TS would
+* self-match the very heuristics they define. Exempt by exact filename or by
+* the conventions/ detector directory, not by broad directory, so a genuine
+* SOLID violation elsewhere in src/policy/ stays gated by the
+* framework-agnostic line-size check in policy/evaluate.ts, untouched.
 */
-const SELF_GATE_EXCLUDE_RE = /(^|\/)src\/policy\/framework-solid-gates(-systems)?\.ts$/;
+const SELF_GATE_EXCLUDE_RE = /(^|\/)src\/policy\/(framework-solid-gates(-systems)?\.ts|framework-solid-extended\.ts|detect-framework\.ts|conventions\/[^/]+\.ts|guards\/interface-separation-ext\.ts)$/;
 /**
 * Whether a JS/TS file path is this harness's own gate-detection source —
 * exempt from the pattern heuristics (not the line-size ceiling) to avoid
@@ -245,13 +246,125 @@ function isSelfGateSourcePath(filePath) {
 	return SELF_GATE_EXCLUDE_RE.test(filePath);
 }
 //#endregion
+//#region src/policy/conventions/stores.ts
+/**
+* State-store declaration detection over MASKED content — Zustand (React
+* family) and Pinia (Vue family), per the owner's framework scoping: a rule
+* only fires inside its own family (the gate checks the project deps, this
+* module only reads content). Canonical home: `src/stores/`, `*.store.ts`,
+* one store per domain, budget = ratio 0.4 of the global line limit.
+*
+* Signature-strict (audit lesson): `Object.create(` and home-made
+* `create(` factories never match — Zustand requires the `zustand` import
+* (or the v5 curried `create<T>()(...)` call), Pinia requires the `pinia`
+* import alongside `defineStore(`.
+*/
+/** Import line of the store package — comments masked (a `// import …` line
+* never matches), strings KEPT (masking would blank the module literal). */
+const STORE_IMPORT_RE = {
+	zustand: /^\s*import\s+[^;]*from\s+['"]zustand/m,
+	pinia: /^\s*import\s+[^;]*from\s+['"]pinia/m
+};
+/** Zustand v5 curried declaration: `export const useX = create<S>()(`. */
+const ZUSTAND_CURRIED_RE = /^\s*export\s+const\s+\w+\s*=\s*create\s*<[^=]*>\s*\(\s*\)\s*\(/m;
+/** Zustand declaration with import context: `export const useX = create(`. */
+const ZUSTAND_DECL_RE = /^\s*export\s+const\s+\w+\s*=\s*create(?:Store)?\s*(?:<[^(]+>)?\s*\(/m;
+/** Pinia declaration: `export const useX = defineStore(`. */
+const PINIA_DECL_RE = /^\s*export\s+const\s+\w+\s*=\s*defineStore\s*\(/m;
+/**
+* True when the file declares a store of the given library (masked scan,
+* signature-strict).
+* @param content - Raw file content.
+* @param lib - Store library to detect.
+*/
+function declaresStore(content, lib) {
+	const masked = maskCommentsAndStrings(content, "c");
+	const importable = maskCommentsOnly(content, "c");
+	if (lib === "pinia") return STORE_IMPORT_RE.pinia.test(importable) && PINIA_DECL_RE.test(masked);
+	return ZUSTAND_CURRIED_RE.test(masked) || STORE_IMPORT_RE.zustand.test(importable) && ZUSTAND_DECL_RE.test(masked);
+}
+/**
+* Count store declarations in one file (multi-store advisory: one per domain).
+* @param content - Raw file content.
+* @param lib - Store library to count.
+*/
+function countStores(content, lib) {
+	const masked = maskCommentsAndStrings(content, "c");
+	const re = lib === "pinia" ? PINIA_DECL_RE : ZUSTAND_DECL_RE;
+	const curried = masked.match(new RegExp(ZUSTAND_CURRIED_RE.source, "gm"))?.length ?? 0;
+	const plain = masked.match(new RegExp(re.source, "gm"))?.length ?? 0;
+	return lib === "pinia" ? plain : Math.max(curried, plain);
+}
+//#endregion
+//#region src/policy/conventions/query.ts
+/**
+* TanStack Query definition detection over MASKED content (React and Vue
+* variants share the call names; the family scoping is the gate's job, via
+* project deps). Canonical home: `src/query/` — one file per domain. Only
+* DEFINITIONS are gated; inline consumption of a hook defined in `query/`
+* stays allowed.
+*/
+/** Import line of a TanStack Query package (raw scan: masking blanks the module string). */
+const QUERY_IMPORT_RE = /^\s*import\s+[^;]*@tanstack\/[\w-]*query[\w-]*/m;
+/** A TanStack Query definition call. */
+const QUERY_CALL_RE = /\b(?:useQuery|useMutation|useInfiniteQuery|queryOptions)\s*(?:<[^()]*>)?\s*\(/;
+/** Exported declaration (`export const|function`) — a defined query hook. */
+const EXPORT_DECL_RE = /^\s*export\s+(?:const|function)\s+\w+/m;
+/**
+* True when the file imports a TanStack Query package (raw scan, anchored to
+* real import lines so `// import …` comments cannot match).
+* @param content - Raw file content.
+*/
+function importsTanstackQuery(content) {
+	return QUERY_IMPORT_RE.test(content);
+}
+/**
+* True when the file DEFINES an exported query/mutation hook (export +
+* query call, masked scan) — as opposed to merely consuming one inline.
+* @param content - Raw file content.
+*/
+function declaresQueryHook(content) {
+	const masked = maskCommentsAndStrings(content, "c");
+	return QUERY_CALL_RE.test(masked) && EXPORT_DECL_RE.test(masked);
+}
+/**
+* True when the nearest manifest of `filePath` declares a TanStack Query
+* dependency (`@tanstack/react-query` or `@tanstack/vue-query`) — the
+* cap gate of every query convention (owner: no cap, no query rule).
+* @param filePath - The file being judged (its nearest manifest wins).
+*/
+function queryCapActive(filePath) {
+	const caps = projectCaps(nearestManifestDir(dirname(resolve(filePath))));
+	return caps.has("tanstack-query") || caps.has("vue-query");
+}
+//#endregion
+//#region src/policy/conventions/store-or-query.ts
+/**
+* Shared store/query-definition exemption (owner F0.2): a file is governed
+* by the store/query conventions — NOT by the hook-location rule — ONLY when
+* its signature is validated AND its ecosystem is confirmed:
+* - store: the real `zustand`/`pinia` import (or the v5 curried signature);
+* - query: a TanStack Query definition AND the `@tanstack/*-query` cap in
+*   the nearest manifest. Without the cap, a fake `useQuery(` caller is just
+*   a hook — the legacy hook rule applies, byte-identical.
+*/
+/**
+* True when the file is a store or query definition (exempt from hook rules).
+* @param filePath - The file being judged (manifest resolution for the cap).
+* @param content - Its RAW content (detectors mask internally).
+*/
+function isStoreOrQueryDefinition(filePath, content) {
+	if (declaresStore(content, "zustand") || declaresStore(content, "pinia")) return true;
+	return declaresQueryHook(content) && queryCapActive(filePath);
+}
+//#endregion
 //#region src/policy/framework-solid-gates.ts
 /** Custom hook export (React): `export function/const use[A-Z]`. */
 const HOOK_RE = /^export (function|const) use[A-Z]/m;
 /** Top-level TS interface/type declaration. */
 const TS_DECL_RE = /^(export )?(interface|type) [A-Z]/m;
 /** Client-only React hooks that require the `'use client'` directive. */
-const CLIENT_HOOK_RE = /(useState|useEffect|useRef|onClick|onChange)/;
+const CLIENT_HOOK_RE = /\b(useState|useEffect|useRef|onClick|onChange)\b/;
 /** PHP top-level `interface` declaration. */
 const PHP_INTERFACE_RE = /^interface /m;
 /** Swift top-level `protocol` declaration. */
@@ -261,6 +374,8 @@ const SWIFT_TYPE_RE = /^(class|struct) [^\n{]* \{/m;
 /** React: line limit, interface separation, custom hooks under `/hooks/`. */
 function reactGate(filePath, content, fileLines) {
 	const v = [];
+	const raw = content;
+	content = maskCommentsAndStrings(content, "c");
 	const max = resolveMaxLines();
 	const lines = fileLines ?? countFrameworkCodeLines(content);
 	if (lines > max) v.push(`File has ${lines} lines (limit: ${max}). Split to hooks/, components/, or utils/.`);
@@ -268,13 +383,16 @@ function reactGate(filePath, content, fileLines) {
 		const dest = moduleAwarePath(filePath, "src/interfaces/", "src/interfaces/ or src/types/");
 		v.push(`Interface/type in component. Move to ${dest}.`);
 	}
-	if (HOOK_RE.test(content) && !filePath.includes("/hooks/")) v.push("Custom hook defined outside hooks/ directory. Move to hooks/.");
+	if (HOOK_RE.test(content) && !filePath.includes("/hooks/") && !isStoreOrQueryDefinition(filePath, raw)) v.push("Custom hook defined outside hooks/ directory. Move to hooks/.");
 	return v;
 }
 /** Next.js: adaptive line limit, interface separation, `'use client'`. */
 function nextGate(filePath, content, fileLines) {
 	const v = [];
-	const max = /(page|layout|loading|error|not-found)\.(tsx|ts)$/.test(filePath) ? 150 : 100;
+	const raw = content;
+	content = maskCommentsAndStrings(content, "c");
+	const base = resolveMaxLines();
+	const max = /(page|layout|loading|error|not-found)\.(tsx|ts)$/.test(filePath) ? base + 50 : base;
 	const lines = fileLines ?? countFrameworkCodeLines(content);
 	if (lines > max) v.push(`File has ${lines} lines (limit: ${max}). Split to lib/, hooks/, or components/.`);
 	if (/\/(app|components|modules)\//.test(filePath) && !filePath.includes("/interfaces/") && TS_DECL_RE.test(content)) {
@@ -282,7 +400,7 @@ function nextGate(filePath, content, fileLines) {
 		v.push(`Interface/type in component. Move to ${dest}.`);
 	}
 	if (CLIENT_HOOK_RE.test(content)) {
-		const head = content.split("\n").slice(0, 5).join("\n");
+		const head = maskCommentsOnly(raw, "c").split("\n").slice(0, 5).join("\n");
 		if (!head.includes("'use client'") && !head.includes("\"use client\"")) v.push("Client hooks detected but 'use client' directive missing at top.");
 	}
 	return v;
@@ -290,6 +408,7 @@ function nextGate(filePath, content, fileLines) {
 /** Laravel/PHP: line limit, interface outside `/Contracts/`, fat controller (>80). */
 function laravelGate(filePath, content, fileLines) {
 	const v = [];
+	content = maskCommentsAndStrings(content, "php");
 	const lines = fileLines ?? countFrameworkCodeLines(content);
 	const max = resolveMaxLines();
 	if (lines > max) v.push(`File has ${lines} lines (limit: ${max}). Split using Services, Actions, or Traits.`);
@@ -303,7 +422,9 @@ function laravelGate(filePath, content, fileLines) {
 /** Swift: adaptive limit, protocol separation, @MainActor, Sendable. */
 function swiftGate(filePath, content, fileLines) {
 	const v = [];
-	const max = /(View|Screen)\.swift$/.test(filePath) ? 150 : 100;
+	content = maskCommentsAndStrings(content, "c");
+	const base = resolveMaxLines();
+	const max = /(View|Screen)\.swift$/.test(filePath) ? base + 50 : base;
 	const lines = fileLines ?? countFrameworkCodeLines(content);
 	if (lines > max) v.push(`File has ${lines} lines (limit: ${max}). Extract to ViewModels, Services, or subviews.`);
 	if (SWIFT_PROTOCOL_RE.test(content) && !filePath.includes("/Protocols/")) {
@@ -347,6 +468,7 @@ const RUST_DERIVE_PARSER_RE = /#\[derive\([^)]*Parser[^)]*\)\]/;
 /** Go: line limit, interface co-located with its (pointer-receiver) implementation. */
 function goGate(filePath, content, fileLines) {
 	const v = [];
+	content = maskCommentsAndStrings(content, "c");
 	const max = resolveMaxLines();
 	const lines = fileLines ?? countFrameworkCodeLines(content);
 	if (lines > max) {
@@ -381,6 +503,8 @@ function isClapArgsOnly(content) {
 /** Rust: line limit, trait co-location, god-main.rs, unsafe without `// SAFETY:`. */
 function rustGate(filePath, content, fileLines) {
 	const v = [];
+	const raw = content;
+	content = maskCommentsAndStrings(content, "c");
 	const max = resolveMaxLines();
 	const lines = fileLines ?? countFrameworkCodeLines(content);
 	if (lines > max) {
@@ -395,9 +519,132 @@ function rustGate(filePath, content, fileLines) {
 		}
 	}
 	if ((RUST_MAIN_RE.test(filePath) || RUST_BIN_RE.test(filePath)) && (RUST_TYPE_DECL_RE.test(content) || RUST_IMPL_RE.test(content)) && !isClapArgsOnly(content)) v.push("Entry point contains business logic — keep main.rs to wiring only (parse args, init, call lib.rs/app::run()).");
-	if (RUST_UNSAFE_RE.test(content) && !RUST_SAFETY_COMMENT_RE.test(content)) v.push("unsafe without a // SAFETY: comment. Justify the invariant above each unsafe block.");
+	if (RUST_UNSAFE_RE.test(content) && !RUST_SAFETY_COMMENT_RE.test(raw)) v.push("unsafe without a // SAFETY: comment. Justify the invariant above each unsafe block.");
+	return v;
+}
+//#endregion
+//#region src/policy/js-gate-route.ts
+/**
+* Per-process memo of manifest-dir → capabilities. Hook invocations are
+* short-lived processes, so a stale manifest is impossible in production; the
+* memo only saves a re-read when one process judges several files (tests).
+*/
+const capsCache = /* @__PURE__ */ new Map();
+/** Resolve the nearest manifest's capabilities for `filePath` (memoized per dir). */
+function capsFor(filePath, cwd) {
+	const dir = nearestManifestDir(dirname(resolve(cwd, filePath)));
+	if (!dir) return /* @__PURE__ */ new Set();
+	const hit = capsCache.get(dir);
+	if (hit) return hit;
+	const caps = projectCaps(dir);
+	capsCache.set(dir, caps);
+	return caps;
+}
+/**
+* Pick the JS gate from the PROJECT's declared framework, not the file's
+* content markers (H1): a bare client component (hooks but no `next` marker)
+* in a Next.js app must still hit nextGate's `'use client'` rule — content
+* routing sent it to reactGate and the file landed, crashing at runtime.
+* `nextjs` wins over `react` (every Next app ships react); a TanStack
+* Start/Router or plain-react project routes to reactGate. Fail-open: any
+* error, or no JS-framework capability (no manifest, backend, vue), yields
+* `null` so the legacy NEXT_RE content routing applies, byte-identical.
+* @param filePath - Path of the file being written/edited.
+* @param cwd - Root to resolve a relative `filePath` against (default cwd).
+* @returns The gate route, or null for the legacy content-based fallback.
+*/
+function jsGateRoute(filePath, cwd = process.cwd()) {
+	try {
+		const caps = capsFor(filePath, cwd);
+		if (caps.has("nextjs")) return "nextjs";
+		if (caps.has("react") || caps.has("tanstack-start") || caps.has("tanstack-router")) return "react";
+		return null;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+//#region src/policy/conventions/react-hooks.ts
+/**
+* Custom React hook declaration detection over MASKED content. Historical
+* rule (`framework-solid-gates.ts`): an exported custom hook belongs in
+* `hooks/` — the regex was naive (`^export (function|const) use[A-Z]`,
+* missing `export default`, `async`, and matching inside comments/strings).
+*/
+/** Exported custom hook: `export [default] [async] function|const useX`. */
+const HOOK_DECL_RE = /^\s*export\s+(?:default\s+)?(?:async\s+)?(?:function|const)\s+use[A-Z]\w*/m;
+/**
+* True when the file declares an exported custom `use*` hook (masked scan).
+* @param content - Raw file content.
+*/
+function declaresCustomHook(content) {
+	return HOOK_DECL_RE.test(maskCommentsAndStrings(content, "c"));
+}
+//#endregion
+//#region src/policy/framework-solid-extended.ts
+/**
+* Extended convention violations — the NEW rules of the conventions module
+* (owner Amendments 3-5), all advisory-first: the caller wraps them with
+* {@link rolloutVerdict}, so they surface as non-blocking `inform` until
+* `FUSE_CONVENTIONS_MODE=deny`. Only fires when the legacy gates found
+* nothing (no double-reporting of cases the legacy reactGate already blocks).
+*
+* Rules: (1) custom hook outside `hooks/` — widened to `export default`/
+* `async` syntaxes and to the nextjs/tanstack family (legacy covered react
+* only); (2) hook file over its line budget — `hookBudget`, ratio 0.3 of the
+* global `FUSE_SOLID_MAX_LINES` limit (default 30; one variable drives every
+* budget, owner decision — no per-file-kind env vars); (3) TanStack Start
+* route files kept routing-only (no interface declarations in `src/routes/`);
+* (4) store declared outside `stores/` or over `storeBudget` (ratio 0.4);
+* (5) TanStack Query hook defined in a component/page (only when the
+* `@tanstack/*-query` cap is detected in the nearest manifest — `query/` or
+* `hooks/` are both accepted homes); (6) component file misplaced inside
+* `src/hooks|stores|query|interfaces|types/` (deterministic case only).
+*/
+/** TanStack Start content signal (file routes, server fns, start/router imports). */
+const TANSTACK_RE = /createFileRoute|createServerFn|from ['"]@tanstack\/react-(start|router)/;
+/** A custom-hook source file under a hooks directory. */
+const HOOK_FILE_RE = /(^|\/)use[A-Z][^/]*\.(ts|tsx|js|jsx)$/;
+/**
+* Collect the extended convention violations for a JS/TS-family file.
+* @param filePath - The written/edited file's path.
+* @param content - Its raw content (masked internally).
+* @returns The violation messages (empty when clean or out of scope).
+*/
+function extendedViolations(filePath, content) {
+	const v = [];
+	if (!/\.(tsx|ts|jsx|js|vue)$/.test(filePath)) return v;
+	const masked = maskCommentsAndStrings(content, "c");
+	if (declaresCustomHook(content) && !isHooksPath(filePath) && !isStoreOrQueryDefinition(filePath, content)) v.push("Custom hook defined outside hooks/ directory. Move to modules/[feature]/src/hooks/.");
+	if (isHooksPath(filePath) && HOOK_FILE_RE.test(filePath)) {
+		const max = hookBudget(resolveMaxLines());
+		const lines = countFrameworkCodeLines(masked);
+		if (lines > max) v.push(`Hook file has ${lines} lines (limit: ${max}). Extract smaller hooks.`);
+	}
+	if (filePath.includes("/routes/") && TANSTACK_RE.test(masked) && declaresInterface(filePath, content)) v.push("Route files are routing-only. Move the interface to src/modules/[feature]/src/interfaces/.");
+	const storeLib = declaresStore(content, "zustand") ? "zustand" : declaresStore(content, "pinia") ? "pinia" : null;
+	if (storeLib && !isStoresPath(filePath)) v.push("Store defined outside stores/ directory. Move to modules/[feature]/src/stores/.");
+	if (storeLib && isStoresPath(filePath)) {
+		const max = storeBudget(resolveMaxLines());
+		const lines = countFrameworkCodeLines(masked);
+		if (lines > max) v.push(`Store file has ${lines} lines (limit: ${max}).`);
+	}
+	if (isComponentOrPagePath(filePath) && declaresQueryHook(content) && queryCapActive(filePath)) v.push("Query hook defined outside query/ directory. Move to modules/[feature]/src/query/.");
+	if (/\.(tsx|vue)$/.test(filePath)) {
+		const m = /\/src\/(hooks|stores|query|interfaces|types)\//.exec(filePath);
+		if (m && declaresComponent(masked)) v.push(`Component does not belong in ${m[1]}/. Move to modules/[feature]/components/.`);
+	}
 	return v;
 }
+/** Component/page directories where a store or query DEFINITION is a violation. */
+function isComponentOrPagePath(filePath) {
+	return isComponentsPath(filePath) || /\/(pages|app|routes)\//.test(filePath);
+}
+/** True when the file declares an exported component (function/const, Vue SFC
+* `export default {}` or `defineComponent(` included — audit F0 option). */
+function declaresComponent(masked) {
+	return /^\s*export\s+(?:default\s+)?(?:function|const)\s+[A-Z]\w*/m.test(masked) || /^\s*export\s+default\s*\{/m.test(masked) || /defineComponent\s*\(/.test(masked);
+}
 //#endregion
 //#region src/policy/framework-solid.ts
 /** Next.js detection: directive, runtime types, or a `next` import. */
@@ -414,6 +661,9 @@ function block(filePath, violations) {
 /** Run the JS/TS gate (React or Next.js), honoring build-artifact exclusions. */
 function jsViolations(filePath, content, fileLines) {
 	if (isExcludedJsPath(filePath) || isSelfGateSourcePath(filePath)) return [];
+	const route = jsGateRoute(filePath);
+	if (route === "nextjs") return nextGate(filePath, content, fileLines);
+	if (route === "react") return reactGate(filePath, content, fileLines);
 	return NEXT_RE.test(content) ? nextGate(filePath, content, fileLines) : reactGate(filePath, content, fileLines);
 }
 /**
@@ -431,6 +681,12 @@ function jsViolations(filePath, content, fileLines) {
 */
 function frameworkSolidGate(filePath, content, fileLines) {
 	if (!filePath || !content) return null;
+	if (filePath.endsWith("routeTree.gen.ts")) return {
+		kind: "block",
+		title: "Generated file",
+		reason: `SOLID VIOLATION in ${filePath}: routeTree.gen.ts is generated by TanStack Router — never edit it directly.`,
+		actions: ["Edit the source route files instead, then regenerate"]
+	};
 	let violations = [];
 	if (filePath.endsWith(".php")) {
 		if (isExcludedPhpPath(filePath)) return null;
@@ -441,7 +697,10 @@ function frameworkSolidGate(filePath, content, fileLines) {
 	} else if (/\.(tsx|ts|jsx|js)$/.test(filePath)) violations = jsViolations(filePath, content, fileLines);
 	else if (filePath.endsWith(".go")) violations = goGate(filePath, content, fileLines);
 	else if (filePath.endsWith(".rs")) violations = rustGate(filePath, content, fileLines);
-	return violations.length ? block(filePath, violations) : null;
+	if (violations.length) return block(filePath, violations);
+	if (!/\.(tsx|ts|jsx|js|vue)$/.test(filePath) || isExcludedJsPath(filePath) || isSelfGateSourcePath(filePath)) return null;
+	const extended = extendedViolations(filePath, content);
+	return extended.length ? rolloutVerdict(block(filePath, extended), true) : null;
 }
 //#endregion
 //#region src/policy/skill-patterns/shadcn.ts
@@ -1208,24 +1467,29 @@ function harnessHomeSegment(id) {
 	return HOME_DIR[id] ?? ".claude";
 }
 /**
-* Root instructions doc name for a harness target: "AGENTS.md" for Codex,
-* "CLAUDE.md" for every other target (including the default/unknown fallback).
+* Root instructions doc name for a harness target: "AGENTS.md" for Codex and
+* Kimi Code CLI (both documented conventions), "CLAUDE.md" for every other
+* target (including the default/unknown fallback).
 * @param id - Harness id.
 * @returns The doc file name.
 */
 function apexDocName(id) {
-	return id === "codex" ? "AGENTS.md" : "CLAUDE.md";
+	return id === "codex" || id === "kimi" ? "AGENTS.md" : "CLAUDE.md";
 }
 /**
-* Native plan/track tool name for a harness target: Codex's `update_plan` vs
-* Claude's `TaskCreate`. Covers only the PLAN-step line — other Claude-only
-* tool references (`TaskList`, `TaskUpdate`) are branched inline by the
-* builders since their surrounding prose differs structurally, not just by token.
+* Native plan/track tool name for a harness target: Codex's `update_plan`,
+* Kimi Code CLI's `TodoList`, or Claude's `TaskCreate` (default). Covers only
+* the PLAN-step line — other target-specific tool references (`TaskList`,
+* `TaskUpdate`) are resolved via `apexTaskSteps`/`apexAgentSteps` in
+* `apex-target-steps.ts` since their surrounding prose differs structurally,
+* not just by token.
 * @param id - Harness id.
 * @returns The plan-tool name.
 */
 function apexPlanTool(id) {
-	return id === "codex" ? "update_plan" : "TaskCreate";
+	if (id === "codex") return "update_plan";
+	if (id === "kimi") return "TodoList";
+	return "TaskCreate";
 }
 //#endregion
 //#region src/policy/detect-claude-md-project-type.ts
@@ -1291,6 +1555,61 @@ function buildClaudeMdContext(prompt, cwd, id = "claude-code") {
 	return `${buildApexInstruction(detectClaudeMdProjectType(cwd), resolveMaxLines(), id)}\n\n# ${docName}\n${claudeContent}`;
 }
 //#endregion
+//#region src/policy/apex-target-steps.ts
+/** Codex/Kimi step-trio overrides; any other target falls back to {@link DEFAULT_TASK_STEPS}. */
+const TASK_STEPS = {
+	codex: {
+		step3: "update_plan → review the current plan",
+		step4: "update_plan → mark the active step in_progress before starting",
+		step7: "update_plan → mark the step completed when done"
+	},
+	kimi: {
+		step3: "TodoList → review the current list (omit todos to query)",
+		step4: "TodoList → mark the active item in_progress before starting",
+		step7: "TodoList → mark the item done when finished"
+	}
+};
+/** Default (Claude Code) step trio — zero-regression fallback for any unlisted target. */
+const DEFAULT_TASK_STEPS = {
+	step3: "TaskList → see pending tasks",
+	step4: "TaskUpdate(in_progress) → before starting",
+	step7: "TaskUpdate(completed) → triggers auto-commit"
+};
+/**
+* Resolve the step3/step4/step7 phrasing for a harness target (APEX
+* task-context injection). Replaces the former `isCodex` binary ternary.
+* @param id - Harness id.
+* @returns The {@link ApexTaskSteps} for that target.
+*/
+function apexTaskSteps(id) {
+	return TASK_STEPS[id] ?? DEFAULT_TASK_STEPS;
+}
+/** Codex/Kimi before/done overrides; any other target falls back to {@link DEFAULT_AGENT_STEPS}. */
+const AGENT_STEPS = {
+	codex: {
+		beforeStart: "Use update_plan → mark the active step in_progress before starting",
+		whenDone: "update_plan → mark the step completed when done"
+	},
+	kimi: {
+		beforeStart: "Use TodoList → mark the active item in_progress before starting",
+		whenDone: "TodoList → mark the item done when finished"
+	}
+};
+/** Default (Claude Code) before/done pair — zero-regression fallback for any unlisted target. */
+const DEFAULT_AGENT_STEPS = {
+	beforeStart: "Use TaskUpdate(taskId, status: in_progress) before starting",
+	whenDone: "TaskUpdate(taskId, status: completed) triggers auto-commit"
+};
+/**
+* Resolve the beforeStart/whenDone phrasing for a harness target (APEX
+* sub-agent injection). Replaces the former `isCodex` binary ternary.
+* @param id - Harness id.
+* @returns The {@link ApexAgentSteps} for that target.
+*/
+function apexAgentSteps(id) {
+	return AGENT_STEPS[id] ?? DEFAULT_AGENT_STEPS;
+}
+//#endregion
 //#region src/policy/apex-task-context.ts
 /**
 * Read the current task state from `task.json`, reproducing the legacy Python
@@ -1330,10 +1649,7 @@ function loadApexTaskState(taskFile) {
 */
 function buildApexTaskContext(state, maxLines, id = "claude-code") {
 	const seg = harnessHomeSegment(id);
-	const isCodex = id === "codex";
-	const step3 = isCodex ? "update_plan → review the current plan" : "TaskList → see pending tasks";
-	const step4 = isCodex ? "update_plan → mark the active step in_progress before starting" : "TaskUpdate(in_progress) → before starting";
-	const step7 = isCodex ? "update_plan → mark the step completed when done" : "TaskUpdate(completed) → triggers auto-commit";
+	const { step3, step4, step7 } = apexTaskSteps(id);
 	return `⚠️ APEX MODE - Read ${seg}/apex/AGENTS.md for rules\n\nCurrent: Task #${state.id} - ${state.subject} (Phase: ${state.phase})\nDocs consulted: ${state.docs}\n\nAgent must:\n1. Read task.json → find last 3 completed tasks\n2. Read their notes in docs/ (task-{ID}-{subject}.md)\n3. ${step3}\n4. ${step4}\n5. Apply SOLID (files < ${maxLines} lines)\n6. Write notes to docs/task-{ID}-{subject}.md\n7. ${step7}`;
 }
 /**
@@ -1591,4 +1907,4 @@ function missingSeoElements(html) {
 	return missing;
 }
 //#endregion
-export { capVerbosity as A, usesTailwindUtilities as C, isExcludedSwiftPath as D, isExcludedJsPath as E, brainstormGate as F, docConsultedGate as I, evaluateApex as L, APEX_GATES as M, POST_AUTH_GATES as N, MAX_EXA_RESULTS as O, PRE_AUTH_GATES as P, freshnessGate as R, skillTriggerGate as S, frameworkSolidGate as T, harnessHomeSegment as _, firstHeading as a, parseField as b, EXCLUDE_DIRS as c, buildApexTaskInjection as d, loadApexTaskState as f, detectClaudeMdProjectType as g, buildClaudeMdContext as h, firstComment as i, detectCreationIntent as j, MAX_TOKENS as k, PROJECT_INDICATORS as l, buildApexInstruction as m, missingSeoElements as n, parseEnrichment as o, DEV_VERBS as p, descFromText as r, parseEntry as s, isHtmlLike as t, buildApexTaskContext as u, scanPlugin as v, SKILL_TRIGGERS as w, detectRequiredSkills as x, parseBodyDesc as y, solidReadGate as z };
+export { importsTanstackQuery as A, APEX_GATES as B, detectRequiredSkills as C, frameworkSolidGate as D, SKILL_TRIGGERS as E, isExcludedSwiftPath as F, evaluateApex as G, PRE_AUTH_GATES as H, MAX_EXA_RESULTS as I, freshnessGate as K, MAX_TOKENS as L, countStores as M, declaresStore as N, declaresCustomHook as O, isExcludedJsPath as P, capVerbosity as R, parseField as S, usesTailwindUtilities as T, brainstormGate as U, POST_AUTH_GATES as V, docConsultedGate as W, detectClaudeMdProjectType as _, firstHeading as a, scanPlugin as b, EXCLUDE_DIRS as c, buildApexTaskInjection as d, loadApexTaskState as f, buildClaudeMdContext as g, buildApexInstruction as h, firstComment as i, queryCapActive as j, declaresQueryHook as k, PROJECT_INDICATORS as l, DEV_VERBS as m, missingSeoElements as n, parseEnrichment as o, apexAgentSteps as p, solidReadGate as q, descFromText as r, parseEntry as s, isHtmlLike as t, buildApexTaskContext as u, apexDocName as v, skillTriggerGate as w, parseBodyDesc as x, harnessHomeSegment as y, detectCreationIntent as z };