@fusengine/harness 0.1.79 → 0.1.81

package/dist/runtime/index.d.mts

@@ -1,41 +1,40 @@
-import { t as Prompt } from "../types-DVbIl9md.mjs";
+import { t as Prompt } from "../types-C0-igRKr.mjs";
 import { t as RefMeta } from "../types-CY5qT2X1.mjs";
-import { t as AgentQuality } from "../session-state-CY4iohn_.mjs";
-
+import { t as AgentQuality } from "../session-state-D5gLr66m.mjs";
 //#region src/runtime/paths.d.ts
 /**
-* Compute a stable 8-char hex hash for a project directory path.
-* Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
-*
-* @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
-* @returns 8-char lowercase hex string.
-*/
+ * Compute a stable 8-char hex hash for a project directory path.
+ * Delegates to `hashText` (MD5, non-cryptographic — used as a stable dir key only).
+ *
+ * @param projectDir - Absolute path to the project root; defaults to CLAUDE_PROJECT_DIR/cwd.
+ * @returns 8-char lowercase hex string.
+ */
 declare function projectHash(projectDir?: string): string;
 /**
-* Canonical base directory for per-project harness state.
-* Resolves to: ~/.fuse-harness/state/<projectHash>/
-*
-* @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
-* @returns Absolute directory path (not yet created on disk).
-*/
+ * Canonical base directory for per-project harness state.
+ * Resolves to: ~/.fuse-harness/state/<projectHash>/
+ *
+ * @param projectDir - Optional override for hashing; defaults to CLAUDE_PROJECT_DIR/cwd.
+ * @returns Absolute directory path (not yet created on disk).
+ */
 declare function defaultStateDir(projectDir?: string): string;
 /**
-* Absolute path to a session's track JSON file.
-*
-* The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
-*
-* @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
-* @param baseDir   - Override the base directory. Omit in production; pass an explicit
-*                    temp path in unit tests to avoid touching $HOME.
-* @returns Absolute path, e.g. ~/.fuse-harness/state/a1b2c3d4/track-abc123.json
-*/
+ * Absolute path to a session's track JSON file.
+ *
+ * The session identifier is sanitised to `[A-Za-z0-9_-]` before use in the filename.
+ *
+ * @param sessionId - Claude session identifier (raw value accepted; sanitised internally).
+ * @param baseDir   - Override the base directory. Omit in production; pass an explicit
+ *                    temp path in unit tests to avoid touching $HOME.
+ * @returns Absolute path, e.g. ~/.fuse-harness/state/a1b2c3d4/track-abc123.json
+ */
 declare function trackFile(sessionId: string, baseDir?: string): string;
 //#endregion
 //#region src/runtime/storage.d.ts
 /**
-* The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,
-* derived from {@link projectLayout}. (Was the per-harness `.claude/harness`.)
-*/
+ * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,
+ * derived from {@link projectLayout}. (Was the per-harness `.claude/harness`.)
+ */
 declare function harnessStateDir(root: string): string;
 //#endregion
 //#region src/runtime/record.d.ts
@@ -72,14 +71,14 @@ interface ToolEvent {
   responseLength?: number;
 }
 /**
-* Map a live tool-use to the activity to record, or null when nothing is
-* tracked. Works across harnesses — tool names are globally distinct:
-* - MCP doc calls (`context7` / `exa`, any separator) → `doc`
-* - `Task`/`Agent` + `subagent_type` (Claude/Cursor) → `agent` (bare agent name)
-* - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
-*   → `agent` credited to the matching REQUIRED_AGENTS phase
-* - a read tool opening a `.md` reference → `ref`
-*/
+ * Map a live tool-use to the activity to record, or null when nothing is
+ * tracked. Works across harnesses — tool names are globally distinct:
+ * - MCP doc calls (`context7` / `exa`, any separator) → `doc`
+ * - `Task`/`Agent`/`AgentSwarm` + `subagent_type` (Claude/Cursor/Kimi) → `agent` (bare agent name)
+ * - direct exploration/research (Glob/Grep, explore Bash, web, MCP cache reads)
+ *   → `agent` credited to the matching REQUIRED_AGENTS phase
+ * - a read tool opening a `.md` reference → `ref`
+ */
 declare function activityFor(event: ToolEvent): Activity[];
 //#endregion
 //#region src/runtime/gate-input.d.ts
@@ -112,18 +111,18 @@ interface GateInput {
 /** Prior agents the freshness gate requires before a code edit. */
 declare const REQUIRED_AGENTS: ReadonlyArray<string>;
 /**
-* Default freshness window (ms). Matches the plugin's `FUSE_ENFORCE_TTL_SEC`
-* default (120s); only a fallback for callers that omit `windowMs` (e.g. tests) —
-* the real CLI path always supplies it from `resolveTtlSec()` (`src/config/ttl.ts`).
-*/
+ * Default freshness window (ms). Matches the plugin's `FUSE_ENFORCE_TTL_SEC`
+ * default (120s); only a fallback for callers that omit `windowMs` (e.g. tests) —
+ * the real CLI path always supplies it from `resolveTtlSec()` (`src/config/ttl.ts`).
+ */
 declare const DEFAULT_WINDOW_MS = 12e4;
 /** Trivial edits allowed within the window before the full APEX gates apply. */
 declare const TRIVIAL_BUDGET = 4;
 /**
-* Full gate: {@link runGates} yields the first blocking prompt (or null); the tail
-* records the one-shot metric ({@link recordOneShot}, observation-only) then lets
-* {@link withDenyLoop} rewrite an identical retried deny (decision unchanged).
-*/
+ * Full gate: {@link runGates} yields the first blocking prompt (or null); the tail
+ * records the one-shot metric ({@link recordOneShot}, observation-only) then lets
+ * {@link withDenyLoop} rewrite an identical retried deny (decision unchanged).
+ */
 declare function gate(input: GateInput): Promise<Prompt | null>;
 //#endregion
 //#region src/runtime/dry.d.ts
@@ -135,18 +134,18 @@ interface DuplicationVerdict {
   duplicates: string[];
 }
 /**
-* Grep the codebase for existing declarations of the symbols a write introduces,
-* honoring module boundaries (cross-`modules/` matches are ignored). Effectful:
-* shells out to `grep`. Fails open (returns no duplicates) on any grep error,
-* timeout, or no-match — matching the original Python hook.
-*/
+ * Grep the codebase for existing declarations of the symbols a write introduces,
+ * honoring module boundaries (cross-`modules/` matches are ignored). Effectful:
+ * shells out to `grep`. Fails open (returns no duplicates) on any grep error,
+ * timeout, or no-match — matching the original Python hook.
+ */
 declare function detectDuplication(filePath: string, content: string, cwd: string): DuplicationVerdict;
 /**
-* Prompt when a Write/Edit re-declares an existing symbol: a single match is a
-* softer non-blocking "inform" (could be a false positive / same-name coincidence),
-* escalating to a hard "block" once 2+ existing declarations are found. Returns
-* `null` when no duplicate symbol is found at all.
-*/
+ * Prompt when a Write/Edit re-declares an existing symbol: a single match is a
+ * softer non-blocking "inform" (could be a false positive / same-name coincidence),
+ * escalating to a hard "block" once 2+ existing declarations are found. Returns
+ * `null` when no duplicate symbol is found at all.
+ */
 declare function dryGate(tool: string, filePath: string, content: string | undefined, cwd: string | undefined): Prompt | null;
 //#endregion
 //#region src/runtime/precommit.d.ts
@@ -176,57 +175,63 @@ interface NormalizedEvent {
   /** Harness-resolved permission mode (Claude emits it natively; Codex maps `AskForApproval::Never` to the same "bypassPermissions" string — see adapters/codex/permission-mode.ts). Generic field, Codex-only consumer today. */
   permissionMode?: string;
   /**
-  * Per-file changes when the tool is a multi-file edit primitive (Codex
-  * `apply_patch`). Present ONLY for `apply_patch`; the file gates OR each
-  * entry's verdict so one violating hunk blocks the whole envelope. Left
-  * undefined for every other tool/harness (single-file `filePath`/`content`).
-  */
+   * Per-file changes when the tool is a multi-file edit primitive (Codex
+   * `apply_patch`). Present ONLY for `apply_patch`; the file gates OR each
+   * entry's verdict so one violating hunk blocks the whole envelope. Left
+   * undefined for every other tool/harness (single-file `filePath`/`content`).
+   */
   files?: NormalizedFile[];
 }
 /**
-* Normalize a harness hook payload into a uniform event. Handles Cline's nested
-* `preToolUse`/`postToolUse` shape and the top-level `tool_name`/`tool_input`
-* shape used by Claude, Codex, Gemini, and Cursor.
-*/
+ * Normalize a harness hook payload into a uniform event. Handles Cline's nested
+ * `preToolUse`/`postToolUse` shape and the top-level `tool_name`/`tool_input`
+ * shape used by Claude, Codex, Gemini, and Cursor.
+ */
 declare function normalizeEvent(id: string, payload: Record<string, unknown>): NormalizedEvent;
 //#endregion
 //#region src/runtime/respond.d.ts
 /**
-* Map a portable {@link Prompt} to a harness's native hook response, honoring
-* all 3 prompt kinds (`block`/`ask`/`inform`) instead of collapsing `ask` and
-* `inform` together. Reuses the Claude adapter's `denyResponse`/
-* `contextResponse`/`informResponse` builders for claude-code/codex (same hook
-* shape) to avoid duplicating the JSON.
-* - claude-code/codex: `block` -> deny, `ask` -> interactive
-*   `permissionDecision:"ask"`, `inform` -> non-blocking `additionalContext`.
-* - gemini-cli/cline: their real hook schemas have no interactive "ask"
-*   state (deny is the only blocking outcome), so `ask` and `inform` already
-*   both resolve to non-blocking context injection — unchanged.
-* - cursor: `ask` keeps its current best-effort `permission:"ask"` shape;
-*   only `inform` is fixed to a non-blocking `permission:"allow"` note.
-* - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
-*   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
-*   `{context}` (Hermes has no interactive "ask" state).
-*
-* User-visible pass notices (`prompt.userMessage`, Python `hook_output.allow_pass`
-* / `post_pass` parity), by harness:
-* - claude-code/codex: top-level `systemMessage` ("warning message shown to the
-*   user"); a pure notice (empty `reason`) emits `{systemMessage}` alone. Codex
-*   consumes the Claude hook schema, so it rides the same field.
-* - gemini-cli: common `systemMessage` output field ("displayed immediately to
-*   the user in the terminal") — the notice rides there.
-* - cursor: `user_message` is its user-visible channel (see case comment).
-* - cline: NO user-visible channel (`cancel`/`contextModification`/
-*   `errorMessage`-on-cancel only) — the notice is dropped silently (a pure
-*   notice returns "" = plain allow).
-* @param id - Harness id.
-* @param prompt - The portable prompt to render.
-* @param event - The firing hook event name for the claude-code/codex branch
-* (defaults to `"PreToolUse"`, the only phase every existing caller but
-* `handle-post.ts` renders) — a POST-phase caller MUST pass `"PostToolUse"`
-* (or its real raw event name) so `hookEventName` matches the event that
-* actually fired instead of a hardcoded, wrong `"PreToolUse"`.
-*/
+ * Map a portable {@link Prompt} to a harness's native hook response, honoring
+ * all 3 prompt kinds (`block`/`ask`/`inform`) instead of collapsing `ask` and
+ * `inform` together. Reuses the Claude adapter's `denyResponse`/
+ * `contextResponse`/`informResponse` builders for claude-code/codex (same hook
+ * shape) to avoid duplicating the JSON.
+ * - claude-code/codex: `block` -> deny, `ask` -> interactive
+ *   `permissionDecision:"ask"`, `inform` -> non-blocking `additionalContext`.
+ * - gemini-cli/cline: their real hook schemas have no interactive "ask"
+ *   state (deny is the only blocking outcome), so `ask` and `inform` already
+ *   both resolve to non-blocking context injection — unchanged.
+ * - cursor: `ask` keeps its current best-effort `permission:"ask"` shape;
+ *   only `inform` is fixed to a non-blocking `permission:"allow"` note.
+ * - hermes: delegated to the adapter's `toHermesResponse` — `block` ->
+ *   `{decision:"block",reason}`; `ask`/`inform` degrade to non-blocking
+ *   `{context}` (Hermes has no interactive "ask" state).
+ * - kimi: delegated to the adapter's `toKimiResponse` — `block`/`ask` ->
+ *   `hookSpecificOutput.permissionDecision:"deny"` (Kimi Code CLI's hooks
+ *   contract documents only "deny"; `ask` downgrades with a prefix, mirroring
+ *   the codex branch above), `inform` -> raw text on stdout (Kimi appends
+ *   stdout to context on exit 0 — no `hookSpecificOutput` envelope documented
+ *   for non-blocking context injection).
+ *
+ * User-visible pass notices (`prompt.userMessage`, Python `hook_output.allow_pass`
+ * / `post_pass` parity), by harness:
+ * - claude-code/codex: top-level `systemMessage` ("warning message shown to the
+ *   user"); a pure notice (empty `reason`) emits `{systemMessage}` alone. Codex
+ *   consumes the Claude hook schema, so it rides the same field.
+ * - gemini-cli: common `systemMessage` output field ("displayed immediately to
+ *   the user in the terminal") — the notice rides there.
+ * - cursor: `user_message` is its user-visible channel (see case comment).
+ * - cline: NO user-visible channel (`cancel`/`contextModification`/
+ *   `errorMessage`-on-cancel only) — the notice is dropped silently (a pure
+ *   notice returns "" = plain allow).
+ * @param id - Harness id.
+ * @param prompt - The portable prompt to render.
+ * @param event - The firing hook event name for the claude-code/codex branch
+ * (defaults to `"PreToolUse"`, the only phase every existing caller but
+ * `handle-post.ts` renders) — a POST-phase caller MUST pass `"PostToolUse"`
+ * (or its real raw event name) so `hookEventName` matches the event that
+ * actually fired instead of a hardcoded, wrong `"PreToolUse"`.
+ */
 declare function respond(id: string, prompt: Prompt, event?: string): string;
 //#endregion
 //#region src/runtime/mcp-key.d.ts
@@ -234,15 +239,15 @@ declare function respond(id: string, prompt: Prompt, event?: string): string;
 declare const MCP_TTL_MS: number;
 /** WebFetch freshness (ms) from `FUSE_WEBFETCH_TTL_SEC` (default 24h; pages stale faster than docs). */
 declare const WEBFETCH_TTL_MS: number;
-/** MCP doc tools + WebFetch whose calls are cached / verbosity-capped. */
+/** MCP doc tools + WebFetch/FetchURL whose calls are cached / verbosity-capped. */
 declare function isMcpTool(tool: string): boolean;
 /** The query/url that keys the cache. */
 declare function queryOf(input: Record<string, unknown>): string;
 /**
-* The string that keys the cache for `tool`. WebFetch folds `url + "\n" +
-* prompt[:500]` (parity with Python) so distinct prompts on the same URL never
-* collide; every other tool keys on {@link queryOf}.
-*/
+ * The string that keys the cache for `tool`. WebFetch folds `url + "\n" +
+ * prompt[:500]` (parity with Python) so distinct prompts on the same URL never
+ * collide; every other tool keys on {@link queryOf}.
+ */
 declare function cacheQueryOf(tool: string, input: Record<string, unknown>): string;
 //#endregion
 //#region src/runtime/mcp.d.ts
@@ -252,54 +257,54 @@ interface McpIntercept {
   docSource?: string;
 }
 /**
-* Pre-event MCP interception: serve a fresh cache hit (deny + cached content),
-* else cap exa verbosity (allow + mutated input), else null to allow normally.
-* Harnesses without input-mutation/cache support fall through to null.
-*/
+ * Pre-event MCP interception: serve a fresh cache hit (deny + cached content),
+ * else cap exa verbosity (allow + mutated input), else null to allow normally.
+ * Harnesses without input-mutation/cache support fall through to null.
+ */
 declare function mcpPreIntercept(id: string, tool: string, input: Record<string, unknown>, dir: string, ttlMs: number, now: number): McpIntercept | null;
 /**
-* Post-event: persist the MCP/WebFetch response (extracted to markdown). MCP docs
-* go through {@link mcpCacheWrite} (compact + Jaccard-dedup + `index.json`);
-* WebFetch uses {@link webfetchCacheWrite} (compact, exact key, no index).
-* @param now - Current epoch ms (timestamp source; defaults to `Date.now()`).
-*/
+ * Post-event: persist the MCP/WebFetch response (extracted to markdown). MCP docs
+ * go through {@link mcpCacheWrite} (compact + Jaccard-dedup + `index.json`);
+ * WebFetch uses {@link webfetchCacheWrite} (compact, exact key, no index).
+ * @param now - Current epoch ms (timestamp source; defaults to `Date.now()`).
+ */
 declare function mcpPostStore(tool: string, input: Record<string, unknown>, response: unknown, dir: string, now?: number): void;
 //#endregion
 //#region src/runtime/inject-context.d.ts
 /**
-* Build the {@link oncePerWindow} key for the CLAUDE.md preamble gate. The
-* prompt hash keeps two distinct legitimate turns from colliding — even non-dev
-* prompts, whose block is prompt-independent (just CLAUDE.md) and would
-* otherwise hash-collide within the window — while the content hash still lets a
-* same-turn double-fire of an identical block be suppressed. Single source of
-* truth so the owner invariant test guards the real production key.
-* @param prompt - The raw user prompt.
-* @param ctx - The rendered CLAUDE.md (+ optional APEX) block.
-* @returns The namespaced dedup key.
-*/
+ * Build the {@link oncePerWindow} key for the CLAUDE.md preamble gate. The
+ * prompt hash keeps two distinct legitimate turns from colliding — even non-dev
+ * prompts, whose block is prompt-independent (just CLAUDE.md) and would
+ * otherwise hash-collide within the window — while the content hash still lets a
+ * same-turn double-fire of an identical block be suppressed. Single source of
+ * truth so the owner invariant test guards the real production key.
+ * @param prompt - The raw user prompt.
+ * @param ctx - The rendered CLAUDE.md (+ optional APEX) block.
+ * @returns The namespaced dedup key.
+ */
 declare function claudeMdKey(prompt: string, ctx: string): string;
 /**
-* UserPromptSubmit context injection: render the CLAUDE.md (+ optional APEX)
-* preamble as a Claude `additionalContext` response, or "" when nothing to emit.
-* Guarded by {@link oncePerWindow} via {@link claudeMdKey}: only a
-* near-simultaneous double-fire of the SAME turn (identical prompt AND identical
-* block, within {@link DEDUP_WINDOW_MS}) is suppressed. The invariant "CLAUDE.md
-* is emitted on EVERY message" is thus preserved.
-* @param prompt - The raw user prompt.
-* @param cwd - Project root (for project-type detection).
-* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
-* @returns The native hook stdout (possibly empty).
-*/
+ * UserPromptSubmit context injection: render the CLAUDE.md (+ optional APEX)
+ * preamble as a Claude `additionalContext` response, or "" when nothing to emit.
+ * Guarded by {@link oncePerWindow} via {@link claudeMdKey}: only a
+ * near-simultaneous double-fire of the SAME turn (identical prompt AND identical
+ * block, within {@link DEDUP_WINDOW_MS}) is suppressed. The invariant "CLAUDE.md
+ * is emitted on EVERY message" is thus preserved.
+ * @param prompt - The raw user prompt.
+ * @param cwd - Project root (for project-type detection).
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native hook stdout (possibly empty).
+ */
 declare function promptSubmitContext(prompt: string, cwd: string, id?: string): string;
 /**
-* PreToolUse Task context injection: render the APEX sub-agent context as a
-* Claude `additionalContext` response when `.claude/apex/` exists, else "".
-* Harness-produced (not owner CLAUDE.md content), so it is subject to the
-* per-fragment {@link capFragment} budget — unlike {@link promptSubmitContext}.
-* @param cwd - Fallback project root when `CLAUDE_PROJECT_DIR` is unset.
-* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
-* @returns The native hook stdout (possibly empty).
-*/
+ * PreToolUse Task context injection: render the APEX sub-agent context as a
+ * Claude `additionalContext` response when `.claude/apex/` exists, else "".
+ * Harness-produced (not owner CLAUDE.md content), so it is subject to the
+ * per-fragment {@link capFragment} budget — unlike {@link promptSubmitContext}.
+ * @param cwd - Fallback project root when `CLAUDE_PROJECT_DIR` is unset.
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native hook stdout (possibly empty).
+ */
 declare function taskContext(cwd: string, id?: string): string;
 //#endregion
 //#region src/runtime/home-state.d.ts
@@ -336,41 +341,44 @@ declare function gitContext(cwd: string): string[];
 /** Build the project-type portion (mirrors load-dev-context.py exactly). */
 declare function projectContext(cwd: string): string[];
 /**
-* Build the SessionStart dev-context block (git + project type), or "" when
-* nothing applies. Ports `core-guards/scripts/session-start/load-dev-context.py`.
-* @param cwd - Project root to inspect.
-* @returns The joined additionalContext text (possibly empty).
-*/
+ * Build the SessionStart dev-context block (git + project type), or "" when
+ * nothing applies. Ports `core-guards/scripts/session-start/load-dev-context.py`.
+ * @param cwd - Project root to inspect.
+ * @returns The joined additionalContext text (possibly empty).
+ */
 declare function devContext(cwd: string): string;
 //#endregion
 //#region src/runtime/lifecycle/session-start.d.ts
 /** Run the legacy SessionStart cleanups (stale states, caches, log trim). */
 declare function runSessionStartCleanups(home?: string, now?: number): void;
 /**
-* Handle core-guards SessionStart: inject CLAUDE.md + dev context as
-* `additionalContext`, then run the cache/state cleanups. Ports the four
-* `session-start/*.py` scripts into one harness call.
-* @param cwd - Project root for dev-context detection.
-* @param home - Home dir (defaults to `~`).
-* @param now - Clock for TTL cleanup (defaults to `Date.now()`).
-* @returns The native hook stdout (possibly empty).
-*/
-declare function sessionStartCore(cwd: string, home?: string, now?: number): string;
+ * Handle core-guards SessionStart: inject CLAUDE.md + dev context as
+ * `additionalContext`, then run the cache/state cleanups. Ports the four
+ * `session-start/*.py` scripts into one harness call.
+ * @param cwd - Project root for dev-context detection.
+ * @param home - Home dir (defaults to `~`).
+ * @param now - Clock for TTL cleanup (defaults to `Date.now()`).
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native hook stdout (possibly empty).
+ */
+declare function sessionStartCore(cwd: string, home?: string, now?: number, id?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/inject-rules.d.ts
 /** Read & concatenate all `*.md` files (sorted) under `rulesDir`. */
 declare function readRules(rulesDir: string): string;
 /**
-* Build the rules injection for claude-rules (SessionStart, UserPromptSubmit,
-* SubagentStart): read `<pluginRoot>/rules/*.md` and emit as `additionalContext`,
-* or "" when no rules. Tags the output with the *actual* `hookEventName` — the
-* spec requires it to match the firing event (a hardcoded "SessionStart" is
-* non-conforming and may be dropped on UserPromptSubmit/SubagentStart).
-* @param pluginRoot - `CLAUDE_PLUGIN_ROOT` of the claude-rules plugin.
-* @param event - The firing hook event name (e.g. "SessionStart").
-* @returns The native hook stdout (possibly empty).
-*/
-declare function injectRules(pluginRoot: string, event: string): string;
+ * Build the rules injection for claude-rules (SessionStart, UserPromptSubmit,
+ * SubagentStart): read `<pluginRoot>/rules/*.md` and emit via {@link renderInform}
+ * (Claude-shaped `additionalContext`, or raw text for kimi). Tags the output
+ * with the *actual* `hookEventName` — the spec requires it to match the firing
+ * event (a hardcoded "SessionStart" is non-conforming and may be dropped on
+ * UserPromptSubmit/SubagentStart).
+ * @param pluginRoot - `CLAUDE_PLUGIN_ROOT` of the claude-rules plugin.
+ * @param event - The firing hook event name (e.g. "SessionStart").
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native hook stdout (possibly empty).
+ */
+declare function injectRules(pluginRoot: string, event: string, id?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/solid-detect.d.ts
 /** A SOLID project profile: type label, per-file line limit, interface dir. */
@@ -382,156 +390,156 @@ interface SolidProfile {
 /** Detect the SOLID profile for `projectDir`, defaulting to `unknown`. */
 declare function detectSolidProfile(projectDir: string): SolidProfile;
 /**
-* Handle solid SessionStart: detect the profile, append SOLID_* exports to
-* `CLAUDE_ENV_FILE`, and return the `SOLID: …` stdout line (or "" for unknown).
-* Ports `solid/scripts/detect-project.py`.
-* @param env - Environment (defaults to `process.env`).
-* @returns The plain-text stdout line (possibly empty).
-*/
+ * Handle solid SessionStart: detect the profile, append SOLID_* exports to
+ * `CLAUDE_ENV_FILE`, and return the `SOLID: …` stdout line (or "" for unknown).
+ * Ports `solid/scripts/detect-project.py`.
+ * @param env - Environment (defaults to `process.env`).
+ * @returns The plain-text stdout line (possibly empty).
+ */
 declare function solidDetectStart(env?: Record<string, string | undefined>): string;
 //#endregion
 //#region src/runtime/lifecycle/check-file-size.d.ts
 /** Count lines of code excluding comments/blanks for `filePath`'s extension (raw length when unmapped). */
 declare function countLoc(filePath: string, content: string): number;
 /**
-* Warn when a written/edited file exceeds `SOLID_FILE_LIMIT` (default 100).
-* Inert when `SOLID_PROJECT_TYPE` is absent/"unknown" (parity: the Python hook
-* no-ops outside a detected project).
-* @param tool - The tool name (only "Write"/"Edit" are checked).
-* @param filePath - The written file's absolute path.
-* @param env - Environment (defaults to `process.env`).
-* @returns The PostToolUse `additionalContext` response, or `""` when clean/inert.
-*/
+ * Warn when a written/edited file exceeds `SOLID_FILE_LIMIT` (default 100).
+ * Inert when `SOLID_PROJECT_TYPE` is absent/"unknown" (parity: the Python hook
+ * no-ops outside a detected project).
+ * @param tool - The tool name (only "Write"/"Edit" are checked).
+ * @param filePath - The written file's absolute path.
+ * @param env - Environment (defaults to `process.env`).
+ * @returns The PostToolUse `additionalContext` response, or `""` when clean/inert.
+ */
 declare function checkFileSize(tool: string, filePath: string, env?: Record<string, string | undefined>): string;
 //#endregion
 //#region src/runtime/lifecycle/validate-solid.d.ts
 /**
-* Deny a Write/Edit that violates the Go/Python interface-location SOLID rule.
-* @param tool - The tool name (only "Write"/"Edit" are checked).
-* @param filePath - The written file's absolute path.
-* @param content - The written/edited content (`new_string` snippet on Edit).
-* @param env - Environment (defaults to `process.env`).
-* @returns The PreToolUse deny response, or `""` when clean/inert.
-*/
+ * Deny (or advise on) a Write/Edit that violates the Go/Python interface-location SOLID rule.
+ * @param tool - The tool name (only "Write"/"Edit" are checked).
+ * @param filePath - The written file's absolute path.
+ * @param content - The written/edited content (`new_string` snippet on Edit).
+ * @param env - Environment (defaults to `process.env`).
+ * @returns The PreToolUse response, or `""` when clean/inert.
+ */
 declare function validateSolidGate(tool: string, filePath: string, content: string, env?: Record<string, string | undefined>): string;
 //#endregion
 //#region src/runtime/lifecycle/validate-tailwind.d.ts
 /**
-* Validate Tailwind best practices on a just-written file.
-* @param tool - The tool name (only "Write"/"Edit" are checked).
-* @param filePath - The written file's absolute path.
-* @returns The PostToolUse `additionalContext` response, or `""` when clean/inert.
-*/
+ * Validate Tailwind best practices on a just-written file.
+ * @param tool - The tool name (only "Write"/"Edit" are checked).
+ * @param filePath - The written file's absolute path.
+ * @returns The PostToolUse `additionalContext` response, or `""` when clean/inert.
+ */
 declare function validateTailwind(tool: string, filePath: string): string;
 //#endregion
 //#region src/runtime/lifecycle/subagent-cache.d.ts
 /**
-* Handle SubagentStart: surface fresh MCP cache entries for the session as
-* `additionalContext`. Ports `subagent-start/inject-context-cache.py`.
-* @param sessionIdRaw - Raw session id from the payload.
-* @param home - Home dir (defaults to `~`).
-* @param env - Environment (defaults to `process.env`).
-* @param now - Clock (defaults to `Date.now()`).
-* @returns The native hook stdout (possibly empty).
-*/
+ * Handle SubagentStart: surface fresh MCP cache entries for the session as
+ * `additionalContext`. Ports `subagent-start/inject-context-cache.py`.
+ * @param sessionIdRaw - Raw session id from the payload.
+ * @param home - Home dir (defaults to `~`).
+ * @param env - Environment (defaults to `process.env`).
+ * @param now - Clock (defaults to `Date.now()`).
+ * @returns The native hook stdout (possibly empty).
+ */
 declare function subagentCacheContext(sessionIdRaw: unknown, home?: string, env?: Record<string, string | undefined>, now?: number): string;
 //#endregion
 //#region src/runtime/lifecycle/agent-memory.d.ts
 /**
-* Handle SubagentStop: append the completion to agent-history.jsonl and, for a
-* non-skipped agent that touched code, emit the sniper reminder + reset the
-* counter. Ports `subagent-stop/track-agent-memory.py`.
-* @param data - The raw hook payload.
-* @param home - Home dir (defaults to `~`).
-* @param now - Clock (defaults to `Date.now()`).
-* @returns The native hook stdout (always a JSON message).
-*/
+ * Handle SubagentStop: append the completion to agent-history.jsonl and, for a
+ * non-skipped agent that touched code, emit the sniper reminder + reset the
+ * counter. Ports `subagent-stop/track-agent-memory.py`.
+ * @param data - The raw hook payload.
+ * @param home - Home dir (defaults to `~`).
+ * @param now - Clock (defaults to `Date.now()`).
+ * @returns The native hook stdout (always a JSON message).
+ */
 declare function trackAgentMemory(data: Record<string, unknown>, home?: string, now?: number): string;
 //#endregion
 //#region src/runtime/lifecycle/teammate-idle.d.ts
 /**
-* Handle TeammateIdle: when the teammate's session-changes file shows code was
-* modified, suggest sniper validation as plain text — TeammateIdle has no
-* `additionalContext` channel (rejects `hookSpecificOutput`), so the caller
-* ({@link module:teammate-idle-check.teammateIdleContext}) rides this text on
-* the `systemMessage` channel instead. Ports `teammate-idle/validate-teammate-output.py`.
-* @param data - The raw hook payload.
-* @param home - Home dir (defaults to `~`).
-* @returns The plain notice text, or "" when no code file was modified.
-*/
+ * Handle TeammateIdle: when the teammate's session-changes file shows code was
+ * modified, suggest sniper validation as plain text — TeammateIdle has no
+ * `additionalContext` channel (rejects `hookSpecificOutput`), so the caller
+ * ({@link module:teammate-idle-check.teammateIdleContext}) rides this text on
+ * the `systemMessage` channel instead. Ports `teammate-idle/validate-teammate-output.py`.
+ * @param data - The raw hook payload.
+ * @param home - Home dir (defaults to `~`).
+ * @returns The plain notice text, or "" when no code file was modified.
+ */
 declare function validateTeammateOutput(data: Record<string, unknown>, home?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/tool-failure.d.ts
 /**
-* Handle PostToolUseFailure: append a `TOOL_FAILURE` line to
-* `~/.claude/logs/tool-failures.log`, skipping user interrupts. Ports
-* `post-tool-use/log-tool-failure.py`. No stdout (logging only).
-* @param data - The raw hook payload.
-* @param home - Home dir (defaults to `~`).
-* @param now - Clock (defaults to `Date.now()`).
-*/
+ * Handle PostToolUseFailure: append a `TOOL_FAILURE` line to
+ * `~/.claude/logs/tool-failures.log`, skipping user interrupts. Ports
+ * `post-tool-use/log-tool-failure.py`. No stdout (logging only).
+ * @param data - The raw hook payload.
+ * @param home - Home dir (defaults to `~`).
+ * @param now - Clock (defaults to `Date.now()`).
+ */
 declare function logToolFailure(data: Record<string, unknown>, home?: string, now?: number): void;
 //#endregion
 //#region src/runtime/lifecycle/pre-compact.d.ts
 /**
-* Handle PreCompact: back up the target apex `task.json` (`.claude/apex/`,
-* `.codex/apex/`, ...) to `backups/`, keep only the 5 newest, and emit a
-* confirmation. Ports `pre-compact/save-apex-state.py`.
-* @param cwd - Project root.
-* @param now - Clock (defaults to `Date.now()`).
-* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
-* @returns The native hook stdout (possibly empty when no task.json).
-*/
+ * Handle PreCompact: back up the target apex `task.json` (`.claude/apex/`,
+ * `.codex/apex/`, ...) to `backups/`, keep only the 5 newest, and emit a
+ * confirmation. Ports `pre-compact/save-apex-state.py`.
+ * @param cwd - Project root.
+ * @param now - Clock (defaults to `Date.now()`).
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native hook stdout (possibly empty when no task.json).
+ */
 declare function saveApexState(cwd: string, now?: number, id?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/session-end.d.ts
 /**
-* Handle SessionEnd: remove stale `*.tmp` (>1h) under `session-tmp/` and stale
-* legacy `claude_solid_reads_*` / `claude_session_changes_*` files (>2h) under
-* `cache`. Ports `session-end/cleanup-session.py`. No stdout.
-* @param home - Home dir (defaults to `~`).
-* @param now - Clock (defaults to `Date.now()`).
-*/
+ * Handle SessionEnd: remove stale `*.tmp` (>1h) under `session-tmp/` and stale
+ * legacy `claude_solid_reads_*` / `claude_session_changes_*` files (>2h) under
+ * `cache`. Ports `session-end/cleanup-session.py`. No stdout.
+ * @param home - Home dir (defaults to `~`).
+ * @param now - Clock (defaults to `Date.now()`).
+ */
 declare function cleanupSession(home?: string, now?: number): void;
 //#endregion
 //#region src/runtime/lifecycle/instructions-loaded.d.ts
 /**
-* Handle InstructionsLoaded: append `load_reason | memory_type | file_path` to
-* the per-session debug log. Ports `instructions-loaded/validate-rules-loaded.py`.
-* No stdout (logging only; InstructionsLoaded has no decision control).
-* @param data - The raw hook payload.
-* @param home - Home dir (defaults to `~`).
-*/
+ * Handle InstructionsLoaded: append `load_reason | memory_type | file_path` to
+ * the per-session debug log. Ports `instructions-loaded/validate-rules-loaded.py`.
+ * No stdout (logging only; InstructionsLoaded has no decision control).
+ * @param data - The raw hook payload.
+ * @param home - Home dir (defaults to `~`).
+ */
 declare function validateRulesLoaded(data: Record<string, unknown>, home?: string): void;
 //#endregion
 //#region src/runtime/lifecycle/track-changes.d.ts
 /**
-* Handle PostToolUse Write/Edit: track the cumulative set of modified code
-* files per session and emit the mandatory "SNIPER VALIDATION REQUIRED"
-* additionalContext. Ports `post-tool-use/track-session-changes.py`.
-* @param sessionIdRaw - Raw session id from the payload.
-* @param filePath - The edited file path.
-* @param home - Home dir (defaults to `~`).
-* @param now - Clock (defaults to `Date.now()`).
-* @returns The native hook stdout (possibly empty when not a code file).
-*/
+ * Handle PostToolUse Write/Edit: track the cumulative set of modified code
+ * files per session and emit the mandatory "SNIPER VALIDATION REQUIRED"
+ * additionalContext. Ports `post-tool-use/track-session-changes.py`.
+ * @param sessionIdRaw - Raw session id from the payload.
+ * @param filePath - The edited file path.
+ * @param home - Home dir (defaults to `~`).
+ * @param now - Clock (defaults to `Date.now()`).
+ * @returns The native hook stdout (possibly empty when not a code file).
+ */
 declare function trackSessionChanges(sessionIdRaw: unknown, filePath: string, home?: string, now?: number): string;
 //#endregion
 //#region src/runtime/lifecycle/post-edit-ts.d.ts
 /**
-* Handle PostToolUse for TS/TSX: report eslint/prettier issues (never fixes) as
-* additionalContext. Ports `post-tool-use/post-edit-typescript.py`.
-* @param filePath - The edited file path.
-* @returns The native hook stdout (possibly empty).
-*/
+ * Handle PostToolUse for TS/TSX: report eslint/prettier issues (never fixes) as
+ * additionalContext. Ports `post-tool-use/post-edit-typescript.py`.
+ * @param filePath - The edited file path.
+ * @returns The native hook stdout (possibly empty).
+ */
 declare function postEditTypescript(filePath: string): string;
 //#endregion
 //#region src/runtime/lifecycle/aipilot/dispatch-aipilot.d.ts
 /**
-* Dispatch an ai-pilot-scope lifecycle event. Returns the native stdout, or
-* `null` when unhandled (caller falls through to the default pipeline).
-* @param home - Home dir for cache resolution (defaults to `~`; injectable for test isolation); `id` selects the harness target (defaults to "claude-code").
-*/
+ * Dispatch an ai-pilot-scope lifecycle event. Returns the native stdout, or
+ * `null` when unhandled (caller falls through to the default pipeline).
+ * @param home - Home dir for cache resolution (defaults to `~`; injectable for test isolation); `id` selects the harness target (defaults to "claude-code").
+ */
 declare function dispatchAipilot(event: string, payload: Record<string, unknown>, cwd: string, now: number, home?: string, id?: string): Promise<string | null>;
 /** PostToolUse (Write/Edit SOLID check, else TaskCreate/TaskUpdate sync) for the ai-pilot scope; `id` selects the harness target (defaults to "claude-code"). */
 declare function aipilotPostToolUse(payload: Record<string, unknown>, cwd: string, id?: string): Promise<string>;
@@ -550,118 +558,118 @@ interface LifecycleInput {
   id?: string;
 }
 /**
-* Route a lifecycle/session/context hook event to its ported handler. Returns
-* the native stdout when handled, or `null` when the event is not a lifecycle
-* event (so the caller falls through to the PreToolUse/PostToolUse pipeline).
-* @param input - The dispatch input.
-* @returns The native hook stdout, or `null` when unhandled.
-*/
+ * Route a lifecycle/session/context hook event to its ported handler. Returns
+ * the native stdout when handled, or `null` when the event is not a lifecycle
+ * event (so the caller falls through to the PreToolUse/PostToolUse pipeline).
+ * @param input - The dispatch input.
+ * @returns The native hook stdout, or `null` when unhandled.
+ */
 declare function dispatchLifecycle(input: LifecycleInput): string | null;
 //#endregion
 //#region src/runtime/lifecycle/post-tracking.d.ts
 /**
-* Dispatch the appropriate PostToolUse tracker for the invoking scope. Carto
-* persists manual enrichments; security records skill reads + MCP research;
-* changelog records watch research; lessons arms the per-project throttle.
-* Side-effect only.
-* @param scope - The invoking plugin scope.
-* @param event - The normalized event.
-* @param input - The raw tool input.
-* @param now - Clock.
-* @param payload - The raw hook payload (for the lessons mark).
-* @param cwd - The project root (for the lessons mark).
-*/
+ * Dispatch the appropriate PostToolUse tracker for the invoking scope. Carto
+ * persists manual enrichments; security records skill reads + MCP research;
+ * changelog records watch research; lessons arms the per-project throttle.
+ * Side-effect only.
+ * @param scope - The invoking plugin scope.
+ * @param event - The normalized event.
+ * @param input - The raw tool input.
+ * @param now - Clock.
+ * @param payload - The raw hook payload (for the lessons mark).
+ * @param cwd - The project root (for the lessons mark).
+ */
 declare function postTrackingSideEffects(scope: PluginScope, event: NormalizedEvent, input: Record<string, unknown>, now: number, payload?: Record<string, unknown>, cwd?: string): void;
 //#endregion
 //#region src/runtime/lifecycle/changelog-research.d.ts
 /**
-* Append an exa/WebFetch/WebSearch query to today's changelog research log.
-* No-op for other tools. No stdout (errors swallowed).
-* @param tool - The tool name.
-* @param input - The tool input (query/url/prompt).
-* @param now - Clock.
-* @param home - Home dir.
-*/
+ * Append an exa/WebFetch/WebSearch query to today's changelog research log.
+ * No-op for other tools. No stdout (errors swallowed).
+ * @param tool - The tool name.
+ * @param input - The tool input (query/url/prompt).
+ * @param now - Clock.
+ * @param home - Home dir.
+ */
 declare function trackWatchResearch(tool: string, input: Record<string, unknown>, now?: number, home?: string): void;
 //#endregion
 //#region src/runtime/lifecycle/cartographer/session-start.d.ts
 /**
-* Regenerate the project map + plugin ecosystem map for `cwd` on SessionStart.
-* Emits the ecosystem navigation context as additionalContext (or "").
-* @param cwd - The working directory.
-* @param now - Clock for the ecosystem map banner timestamp.
-* @returns The SessionStart additionalContext response, or "".
-*/
+ * Regenerate the project map + plugin ecosystem map for `cwd` on SessionStart.
+ * Emits the ecosystem navigation context as additionalContext (or "").
+ * @param cwd - The working directory.
+ * @param now - Clock for the ecosystem map banner timestamp.
+ * @returns The SessionStart additionalContext response, or "".
+ */
 declare function cartoSessionStart(cwd: string, now?: number): string;
 //#endregion
 //#region src/runtime/lifecycle/cartographer/project-map.d.ts
 /**
-* True when `dir` looks like a project root (has an indicator file) and is not
-* the home directory or filesystem root.
-* @param dir - Directory to test.
-* @returns Whether `dir` is a project root.
-*/
+ * True when `dir` looks like a project root (has an indicator file) and is not
+ * the home directory or filesystem root.
+ * @param dir - Directory to test.
+ * @returns Whether `dir` is a project root.
+ */
 declare function isProject(dir: string): boolean;
 /**
-* Generate the `.cartographer/project` index tree for `cwd` when it is a real
-* project directory. Always returns "" (no additionalContext emitted).
-* @param cwd - The working directory.
-* @param outputDir - Override for the output tree root.
-* @returns "" (side-effect only).
-*/
+ * Generate the `.cartographer/project` index tree for `cwd` when it is a real
+ * project directory. Always returns "" (no additionalContext emitted).
+ * @param cwd - The working directory.
+ * @param outputDir - Override for the output tree root.
+ * @returns "" (side-effect only).
+ */
 declare function generateProjectMap(cwd: string, outputDir?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/cartographer/track-enrichment.d.ts
 /**
-* Record manually-edited descriptions from a cartographer `index.md` into the
-* adjacent `.enriched.json` sidecar. No-op for unrelated paths. No stdout.
-* @param filePath - The edited file path.
-*/
+ * Record manually-edited descriptions from a cartographer `index.md` into the
+ * adjacent `.enriched.json` sidecar. No-op for unrelated paths. No stdout.
+ * @param filePath - The edited file path.
+ */
 declare function trackEnrichment(filePath: string): void;
 //#endregion
 //#region src/runtime/lifecycle/cartographer/write-tree.d.ts
 /**
-* Write `index.md` files mirroring `source` under `output`, recursing into
-* subdirectories. Directory lines carry a file-count hint; file lines carry a
-* derived description and link to the real absolute source path.
-* @param source - Absolute source directory.
-* @param output - Absolute output directory for the index tree.
-* @param back - Relative `← back` link target ("" at the root).
-* @param exclude - Directory/name set to skip.
-*/
+ * Write `index.md` files mirroring `source` under `output`, recursing into
+ * subdirectories. Directory lines carry a file-count hint; file lines carry a
+ * derived description and link to the real absolute source path.
+ * @param source - Absolute source directory.
+ * @param output - Absolute output directory for the index tree.
+ * @param back - Relative `← back` link target ("" at the root).
+ * @param exclude - Directory/name set to skip.
+ */
 declare function writeTree(source: string, output: string, back?: string, exclude?: ReadonlySet<string>): void;
 //#endregion
 //#region src/runtime/lifecycle/cartographer/merge.d.ts
 /**
-* Load the `.enriched.json` sidecar's `entries` map for an output index.
-* @param outputIndexPath - Path to the index.md being written.
-* @returns The path→desc enrichment map (possibly empty).
-*/
+ * Load the `.enriched.json` sidecar's `entries` map for an output index.
+ * @param outputIndexPath - Path to the index.md being written.
+ * @returns The path→desc enrichment map (possibly empty).
+ */
 declare function loadEnriched(outputIndexPath: string): Record<string, string>;
 /**
-* Merge freshly generated lines with prior descriptions: enriched sidecar wins,
-* else a longer pre-existing description is preserved.
-* @param newLines - The freshly generated index lines.
-* @param outputIndexPath - Path to the existing index.md (if any).
-* @returns The merged lines.
-*/
+ * Merge freshly generated lines with prior descriptions: enriched sidecar wins,
+ * else a longer pre-existing description is preserved.
+ * @param newLines - The freshly generated index lines.
+ * @param outputIndexPath - Path to the existing index.md (if any).
+ * @returns The merged lines.
+ */
 declare function mergeLines(newLines: string[], outputIndexPath: string): string[];
 //#endregion
 //#region src/runtime/lifecycle/cartographer/fs-util.d.ts
 /**
-* Read a file and derive its one-line description (frontmatter / heading /
-* comment). "" on any error or when nothing is found.
-* @param filePath - Absolute path to the file.
-* @returns The description, or "".
-*/
+ * Read a file and derive its one-line description (frontmatter / heading /
+ * comment). "" on any error or when nothing is found.
+ * @param filePath - Absolute path to the file.
+ * @returns The description, or "".
+ */
 declare function getFileDesc(filePath: string): string;
 /**
-* Recursively count files whose relative path parts are all visible (no leading
-* "." or "_") and none excluded. Best-effort (partial count on errors).
-* @param dir - Directory to count under.
-* @param exclude - Directory/name set to skip.
-* @returns The file count.
-*/
+ * Recursively count files whose relative path parts are all visible (no leading
+ * "." or "_") and none excluded. Best-effort (partial count on errors).
+ * @param dir - Directory to count under.
+ * @param exclude - Directory/name set to skip.
+ * @returns The file count.
+ */
 declare function countFiles(dir: string, exclude: ReadonlySet<string>): number;
 /** Absolute children of `source`, split into dirs/files, sorted by full path. */
 declare function listChildren(source: string, exclude: ReadonlySet<string>): {
@@ -671,50 +679,50 @@ declare function listChildren(source: string, exclude: ReadonlySet<string>): {
 //#endregion
 //#region src/runtime/lifecycle/security/check-skill.d.ts
 /**
-* Build a non-blocking PreToolUse advisory when editing a code file before the
-* security skill has been read, "" otherwise. Renders through the shared
-* {@link contextResponse} builder (`additionalContext` only) — NEVER a naked
-* `permissionDecision: "allow"`, which the Codex adapter's own hook shape
-* (`src/adapters/claude/index.ts`) never emits and which Codex rejects.
-* @param tool - The tool name (`Write`/`Edit`).
-* @param filePath - The target file path.
-* @param now - Clock.
-* @param home - Home dir.
-* @returns The advisory response JSON, or "".
-*/
+ * Build a non-blocking PreToolUse advisory when editing a code file before the
+ * security skill has been read, "" otherwise. Renders through the shared
+ * {@link contextResponse} builder (`additionalContext` only) — NEVER a naked
+ * `permissionDecision: "allow"`, which the Codex adapter's own hook shape
+ * (`src/adapters/claude/index.ts`) never emits and which Codex rejects.
+ * @param tool - The tool name (`Write`/`Edit`).
+ * @param filePath - The target file path.
+ * @param now - Clock.
+ * @param home - Home dir.
+ * @returns The advisory response JSON, or "".
+ */
 declare function securityAdvisory(tool: string, filePath: string, now?: number, home?: string): string;
 /**
-* Multi-file counterpart for a Codex `apply_patch` envelope: evaluate EACH
-* add/update file (delete ignored outright; non-code filtered by the same
-* `CODE_RE` inside {@link securityAdvisory}) and return the advisory
-* triggered by the FIRST qualifying file, or "" once the skill has been read
-* or no file qualifies.
-* @param files - The patch's per-file changes ({@link NormalizedFile}).
-* @param now - Clock.
-* @param home - Home dir.
-*/
+ * Multi-file counterpart for a Codex `apply_patch` envelope: evaluate EACH
+ * add/update file (delete ignored outright; non-code filtered by the same
+ * `CODE_RE` inside {@link securityAdvisory}) and return the advisory
+ * triggered by the FIRST qualifying file, or "" once the skill has been read
+ * or no file qualifies.
+ * @param files - The patch's per-file changes ({@link NormalizedFile}).
+ * @param now - Clock.
+ * @param home - Home dir.
+ */
 declare function securityAdvisoryForPatch(files: readonly NormalizedFile[], now?: number, home?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/security/track-skill-read.d.ts
 /**
-* Mark the security skill as read when a Read hits a security skill reference.
-* No-op for other tools/paths. No stdout.
-* @param tool - The tool name.
-* @param filePath - The read file path.
-* @param now - Clock.
-* @param home - Home dir.
-*/
+ * Mark the security skill as read when a Read hits a security skill reference.
+ * No-op for other tools/paths. No stdout.
+ * @param tool - The tool name.
+ * @param filePath - The read file path.
+ * @param now - Clock.
+ * @param home - Home dir.
+ */
 declare function trackSkillRead(tool: string, filePath: string, now?: number, home?: string): void;
 //#endregion
 //#region src/runtime/lifecycle/security/track-mcp.d.ts
 /**
-* Append a context7/exa research call to today's security state. No-op for other
-* tools. No stdout.
-* @param tool - The tool name.
-* @param input - The tool input (query/libraryId/libraryName).
-* @param now - Clock.
-* @param home - Home dir.
-*/
+ * Append a context7/exa research call to today's security state. No-op for other
+ * tools. No stdout.
+ * @param tool - The tool name.
+ * @param input - The tool input (query/libraryId/libraryName).
+ * @param now - Clock.
+ * @param home - Home dir.
+ */
 declare function trackMcpResearch(tool: string, input: Record<string, unknown>, now?: number, home?: string): void;
 //#endregion
 //#region src/runtime/lifecycle/security/skill-state.d.ts
@@ -733,16 +741,17 @@ declare function saveSecurityState(state: Record<string, unknown>, now?: number,
 //#endregion
 //#region src/runtime/lifecycle/lessons/dispatch.d.ts
 /**
-* Route a fuse-lessons event to its handler. Returns the native stdout for
-* context-injecting events (SessionStart/SubagentStart/UserPromptSubmit inject
-* MEMORY/LESSON.md, Stop reminds) or "" for the side-effect-only PostToolUse mark.
-* @param event - The raw hook event name.
-* @param payload - The raw hook payload.
-* @param cwd - Project root for memory injection.
-* @param now - Clock.
-* @returns The native stdout (possibly empty).
-*/
-declare function dispatchLessons(event: string, payload: Record<string, unknown>, cwd: string, now: number): string;
+ * Route a fuse-lessons event to its handler. Returns the native stdout for
+ * context-injecting events (SessionStart/SubagentStart/UserPromptSubmit inject
+ * MEMORY/LESSON.md, Stop reminds) or "" for the side-effect-only PostToolUse mark.
+ * @param event - The raw hook event name.
+ * @param payload - The raw hook payload.
+ * @param cwd - Project root for memory injection.
+ * @param now - Clock.
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native stdout (possibly empty).
+ */
+declare function dispatchLessons(event: string, payload: Record<string, unknown>, cwd: string, now: number, id?: string): string;
 //#endregion
 //#region src/runtime/lifecycle/lessons/state.d.ts
 /** Absolute `<root>/MEMORY/LESSON.md` — the curated, committable lessons file. */
@@ -754,90 +763,90 @@ declare function lessonsStateFileFor(root: string): string;
 //#endregion
 //#region src/runtime/lifecycle/memory/dispatch.d.ts
 /**
-* Dispatch a memory-scope lifecycle event to its ported handler.
-* @param event - Raw hook event name.
-* @param payload - Raw hook payload.
-* @param cwd - Project root.
-* @param now - Clock.
-* @returns The native stdout, or `null` when unhandled.
-*/
+ * Dispatch a memory-scope lifecycle event to its ported handler.
+ * @param event - Raw hook event name.
+ * @param payload - Raw hook payload.
+ * @param cwd - Project root.
+ * @param now - Clock.
+ * @returns The native stdout, or `null` when unhandled.
+ */
 declare function dispatchMemory(event: string, payload: Record<string, unknown>, cwd: string, now: number): Promise<string | null>;
 //#endregion
 //#region src/runtime/lifecycle/seo/post-tool-use.d.ts
 /**
-* Validate the edited file's SEO completeness. Returns a block message (for a
-* top-level `decision: block` response) when HTML-like, opted-in, and missing
-* elements; otherwise `null` (allow).
-* @param payload - The raw PostToolUse payload.
-* @returns The block reason string, or `null` to allow.
-*/
+ * Validate the edited file's SEO completeness. Returns a block message (for a
+ * top-level `decision: block` response) when HTML-like, opted-in, and missing
+ * elements; otherwise `null` (allow).
+ * @param payload - The raw PostToolUse payload.
+ * @returns The block reason string, or `null` to allow.
+ */
 declare function seoPostToolUse(payload: Record<string, unknown>): string | null;
 /**
-* SEO PostToolUse as a ready native response: a top-level `decision: block`
-* string when the edited file is missing SEO elements, else `null` (allow).
-* PostToolUse ignores `permissionDecision` (PreToolUse-only), so this must use
-* the `decision`/`reason` keys to actually feed the failure back to Claude.
-* @param payload - The raw PostToolUse payload.
-* @returns The block response string, or `null` to allow.
-*/
+ * SEO PostToolUse as a ready native response: a top-level `decision: block`
+ * string when the edited file is missing SEO elements, else `null` (allow).
+ * PostToolUse ignores `permissionDecision` (PreToolUse-only), so this must use
+ * the `decision`/`reason` keys to actually feed the failure back to Claude.
+ * @param payload - The raw PostToolUse payload.
+ * @returns The block response string, or `null` to allow.
+ */
 declare function seoPostToolUseResponse(payload: Record<string, unknown>): string | null;
 //#endregion
 //#region src/runtime/lifecycle/cartographer/ecosystem-map.d.ts
 /**
-* Generate the plugin ecosystem map under `<pluginsDir>/.cartographer`.
-* @param now - Clock for the banner timestamp.
-* @param pluginsDirOverride - Override for the marketplace plugins directory.
-* @returns The map navigation context, or "".
-*/
+ * Generate the plugin ecosystem map under `<pluginsDir>/.cartographer`.
+ * @param now - Clock for the banner timestamp.
+ * @param pluginsDirOverride - Override for the marketplace plugins directory.
+ * @returns The map navigation context, or "".
+ */
 declare function generateEcosystemMap(now: number, pluginsDirOverride?: string): string;
 //#endregion
 //#region src/policy/cartographer/build-tree.d.ts
 /**
-* Indented Unicode tree from scanned plugin items — pure text in, markdown out
-* (no fs). Ports `build_tree.py`.
-*/
+ * Indented Unicode tree from scanned plugin items — pure text in, markdown out
+ * (no fs). Ports `build_tree.py`.
+ */
 /** A scanned `[type, name, desc]` plugin item (agent/skill/command/hooks). */
 type ScanRow = readonly [type: string, name: string, desc: string];
 //#endregion
 //#region src/runtime/lifecycle/cartographer/write-plugin-map.d.ts
 /**
-* Write `<outputDir>/<pluginName>/index.md` (indented linked tree) and recurse
-* agents/skills/commands into their own index trees rooted there.
-* @param outputDir - The map root directory.
-* @param pluginName - Display name of the plugin (the index subfolder).
-* @param version - Plugin version ("" to omit).
-* @param items - The scanned `[type, name, desc]` rows.
-* @param pluginPath - Absolute source plugin directory (for recursion).
-*/
+ * Write `<outputDir>/<pluginName>/index.md` (indented linked tree) and recurse
+ * agents/skills/commands into their own index trees rooted there.
+ * @param outputDir - The map root directory.
+ * @param pluginName - Display name of the plugin (the index subfolder).
+ * @param version - Plugin version ("" to omit).
+ * @param items - The scanned `[type, name, desc]` rows.
+ * @param pluginPath - Absolute source plugin directory (for recursion).
+ */
 declare function writePluginMap(outputDir: string, pluginName: string, version: string, items: ReadonlyArray<ScanRow>, pluginPath: string): void;
 //#endregion
 //#region src/runtime/lifecycle-bridge.d.ts
 /**
-* Run the ported lifecycle/session/context hooks (SessionStart, SubagentStart/
-* Stop, TeammateIdle, PostToolUseFailure, PreCompact, SessionEnd,
-* InstructionsLoaded, rules-scope UserPromptSubmit). Returns the native stdout
-* when handled, or `null` to fall through to the tool-use pipeline.
-* @param payload - The raw hook payload.
-* @param cwd - Project root.
-* @param scope - The invoking plugin scope (defaults to `core`).
-* @param now - Clock.
-* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
-* @returns The native stdout, or `null` when unhandled.
-*/
+ * Run the ported lifecycle/session/context hooks (SessionStart, SubagentStart/
+ * Stop, TeammateIdle, PostToolUseFailure, PreCompact, SessionEnd,
+ * InstructionsLoaded, rules-scope UserPromptSubmit). Returns the native stdout
+ * when handled, or `null` to fall through to the tool-use pipeline.
+ * @param payload - The raw hook payload.
+ * @param cwd - Project root.
+ * @param scope - The invoking plugin scope (defaults to `core`).
+ * @param now - Clock.
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The native stdout, or `null` when unhandled.
+ */
 declare function lifecycleStdout(payload: Record<string, unknown>, cwd: string, scope: PluginScope, now: number, id?: string): string | null;
 /**
-* Post-edit additions for core-scope PostToolUse: auto-document a Read of a
-* SKILL.md/README/docs file; else (Write/Edit) track cumulative session
-* changes (sniper reminder) AND report eslint/prettier issues — parity
-* core-guards hooks.json, which runs both as independent PostToolUse commands
-* rather than short-circuiting one on the other. Returns the combined extra
-* stdout, or "" when nothing to emit.
-* @param scope - The invoking plugin scope.
-* @param event - The normalized event.
-* @param now - Clock.
-* @param id - Harness target id (defaults to "claude-code" — zero-regression default).
-* @returns The extra stdout (possibly empty).
-*/
+ * Post-edit additions for core-scope PostToolUse: auto-document a Read of a
+ * SKILL.md/README/docs file; else (Write/Edit) track cumulative session
+ * changes (sniper reminder) AND report eslint/prettier issues — parity
+ * core-guards hooks.json, which runs both as independent PostToolUse commands
+ * rather than short-circuiting one on the other. Returns the combined extra
+ * stdout, or "" when nothing to emit.
+ * @param scope - The invoking plugin scope.
+ * @param event - The normalized event.
+ * @param now - Clock.
+ * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
+ * @returns The extra stdout (possibly empty).
+ */
 declare function postEditContext(scope: PluginScope, event: NormalizedEvent, now: number, id?: string): Promise<string>;
 //#endregion
 //#region src/runtime/handle-types.d.ts
@@ -860,11 +869,11 @@ interface HandleOutcome {
 //#endregion
 //#region src/runtime/handle.d.ts
 /**
-* The full hook handler: on a PRE event it gates the tool-use (stateless guards
-* then APEX gates from the session track) and returns the native response; on a
-* POST event it records the activity into the track. The loop that makes the
-* package behave like the Claude plugin, on any harness.
-*/
+ * The full hook handler: on a PRE event it gates the tool-use (stateless guards
+ * then APEX gates from the session track) and returns the native response; on a
+ * POST event it records the activity into the track. The loop that makes the
+ * package behave like the Claude plugin, on any harness.
+ */
 declare function handleHook(id: string, payload: Record<string, unknown>, opts: HandleOptions): Promise<HandleOutcome>;
 //#endregion
 //#region src/runtime/handle-pre.d.ts
@@ -879,10 +888,10 @@ interface PreContext {
   opts: HandleOptions;
 }
 /**
-* Run the PreToolUse pipeline: MCP/WebFetch cache intercept, design gate, APEX Task context injection, then the stateless+APEX gate chain, returning the native hook outcome (deny/ask/inject or allow).
-* @param ctx - The resolved pre-context.
-* @returns The hook outcome.
-*/
+ * Run the PreToolUse pipeline: MCP/WebFetch cache intercept, design gate, APEX Task context injection, then the stateless+APEX gate chain, returning the native hook outcome (deny/ask/inject or allow).
+ * @param ctx - The resolved pre-context.
+ * @returns The hook outcome.
+ */
 declare function handlePre(ctx: PreContext): Promise<HandleOutcome>;
 //#endregion
 export { Activity, DEFAULT_WINDOW_MS, DuplicationVerdict, type GateInput, type HandleOptions, type HandleOutcome, LifecycleInput, MCP_TTL_MS, McpIntercept, NormalizedEvent, NormalizedFile, PluginScope, PreContext, REQUIRED_AGENTS, SolidProfile, TRIVIAL_BUDGET, ToolEvent, WEBFETCH_TTL_MS, activityFor, aipilotPostToolUse, cacheQueryOf, cartoSessionStart, checkFileSize, claudeHome, claudeMdKey, cleanupSession, countFiles, countLoc, defaultStateDir, detectDuplication, detectSolidProfile, devContext, dispatchAipilot, dispatchLessons, dispatchLifecycle, dispatchMemory, dryGate, extractSymbols, fuseHarnessHome, fusengineCache, gate, generateEcosystemMap, generateProjectMap, getFileDesc, gitContext, handleHook, handlePre, harnessStateDir, injectRules, isMcpTool, isProject, isoUtc, lessonsArchiveFileFor, lessonsFileFor, lessonsStateFileFor, lifecycleStdout, listChildren, loadEnriched, loadSecurityState, loadSessionState, logToolFailure, mcpPostStore, mcpPreIntercept, mergeLines, normalizeEvent, postEditContext, postEditTypescript, postTrackingSideEffects, preCommitGate, projectContext, projectHash, promptSubmitContext, pruneEmptyDirs, purgeTtlTree, queryOf, readRules, recordActivity, removeOldFiles, respond, runSessionStartCleanups, sanitizeSessionId, saveApexState, saveSecurityState, saveSessionState, securityAdvisory, securityAdvisoryForPatch, securityStateDir, securityStatePath, seoPostToolUse, seoPostToolUseResponse, sessionStartCore, sessionStatePath, sessionsDir, solidDetectStart, subagentCacheContext, taskContext, todayUtc, trackAgentMemory, trackEnrichment, trackFile, trackMcpResearch, trackSessionChanges, trackSkillRead, trackWatchResearch, trimLogFile, validateRulesLoaded, validateSolidGate, validateTailwind, validateTeammateOutput, writePluginMap, writeTree };