@fusengine/harness 0.1.80 → 0.1.83

package/dist/config/index.mjs

@@ -1,5 +1,5 @@
-import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "../limits-CHn8AIL1.mjs";
-import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "../dotenv-B26N_uGr.mjs";
-import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "../layout-C0jaaCQC.mjs";
+import { a as resolveMaxLines, c as storeBudget, i as hookBudget, l as parseEnvInt, n as DEFAULT_STDIN_MAX_BYTES, o as resolveStdinMaxBytes, r as MAX_LINES_ENV_KEY, s as splitTarget, t as DEFAULT_MAX_LINES } from "../limits-DG5pl-5s.mjs";
+import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "../dotenv-DoqNlALG.mjs";
+import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "../layout-KWoE_Mqn.mjs";
 import "../config-la_KkjCS.mjs";
-export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };
+export { DEFAULT_MAX_LINES, DEFAULT_STDIN_MAX_BYTES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, hookBudget, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveStdinMaxBytes, resolveTtlSec, splitTarget, storeBudget, ttlLabel };

package/dist/detect/index.d.mts

@@ -1,2 +1,3 @@
-import { a as HarnessInfo, i as HarnessId, n as detectMode, o as HarnessMode, r as modeFor, s as HarnessVia, t as detectHarness } from "../harness-BQ5_Wnva.mjs";
+import { i as HarnessVia, n as HarnessInfo, r as HarnessMode, t as HarnessId } from "../types-DvXTI71X.mjs";
+import { n as detectMode, r as modeFor, t as detectHarness } from "../index-CigBu4K9.mjs";
 export { type HarnessId, type HarnessInfo, type HarnessMode, type HarnessVia, detectHarness, detectMode, modeFor };

package/dist/{doc-helpers-CEKzGg2u.d.mts → doc-helpers-BGCzP9VF.d.mts}

@@ -1,9 +1,9 @@
 //#region src/freshness/doc-helpers.d.ts
 /**
-* Documentation-consultation freshness: was ANY documentation source consulted
-* this session — Context7, Exa, or WebSearch/WebFetch — via a live call or a
-* Read on a cached MCP result file?
-*/
+ * Documentation-consultation freshness: was ANY documentation source consulted
+ * this session — Context7, Exa, or WebSearch/WebFetch — via a live call or a
+ * Read on a cached MCP result file?
+ */
 /** Authorization entry from APEX state (legacy session + new sessions[]). */
 interface AuthEntry {
   source?: string;
@@ -25,14 +25,14 @@ interface DocSatisfactionStatus {
   viaCache: boolean;
 }
 /**
-* True when documentation research is satisfied for the session. Primary path
-* is parity with the Python `mcp_research_done`
-* (`_shared/scripts/check_skill_common.py`): `"context7:" in content and
-* "exa:" in content`, a strict AND (the Python source has no web-alone path).
-* `web` (WebSearch/WebFetch/fuse-browser) is a deliberate TS-side addition —
-* it alone satisfies the gate, since fuse-browser is this harness's preferred
-* doc-research fast-path (see CLAUDE.md) and Context7/Exa can be unavailable.
-*/
+ * True when documentation research is satisfied for the session. Primary path
+ * is parity with the Python `mcp_research_done`
+ * (`_shared/scripts/check_skill_common.py`): `"context7:" in content and
+ * "exa:" in content`, a strict AND (the Python source has no web-alone path).
+ * `web` (WebSearch/WebFetch/fuse-browser) is a deliberate TS-side addition —
+ * it alone satisfies the gate, since fuse-browser is this harness's preferred
+ * doc-research fast-path (see CLAUDE.md) and Context7/Exa can be unavailable.
+ */
 declare function isDocConsulted(authorizations: Record<string, AuthEntry> | undefined, sessionId: string): boolean;
 /** Report how each doc source was satisfied for a session. */
 declare function formatDocSatisfactionStatus(authorizations: Record<string, AuthEntry> | undefined, sessionId: string): DocSatisfactionStatus;

package/dist/{dotenv-B26N_uGr.mjs → dotenv-DoqNlALG.mjs}

@@ -1,4 +1,4 @@
-import { a as parseEnvInt } from "./limits-CHn8AIL1.mjs";
+import { l as parseEnvInt } from "./limits-DG5pl-5s.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -26,6 +26,33 @@ function ttlLabel(sec) {
 	return sec % 60 === 0 ? `${sec / 60}min` : `${sec}s`;
 }
 //#endregion
+//#region src/config/home-dir.ts
+/**
+* Harness home-dir resolution with env overrides. `dotenv.ts`'s static
+* `HOME_DIR` table knows every harness's default config dir but cannot move
+* with the user's data root — Kimi Code CLI documents `KIMI_CODE_HOME` for
+* exactly that (isolated data roots get isolated skills/agents/hooks), so the
+* override is honored here instead of hardcoding `~/.kimi-code`.
+*
+* Deliberately consumed only where a USER-HOME path is built (`envCandidates`
+* today): `harnessHomeSegment` (`policy/apex-target.ts`) also serves
+* project-relative joins (`<project>/.kimi-code/apex`), which an absolute
+* override would corrupt — those sites stay segment-based.
+*/
+/** Documented env var relocating a harness home dir, when one exists. */
+const HOME_ENV = { kimi: "KIMI_CODE_HOME" };
+/**
+* Resolve a harness's home config dir as an absolute path.
+* @param id - Harness id.
+* @param env - Environment (defaults to `process.env`).
+* @param home - OS home dir (injectable for tests).
+* @returns The override path when set, else `join(home, HOME_DIR[id])`.
+*/
+function harnessHome(id, env = process.env, home = homedir()) {
+	const key = HOME_ENV[id];
+	return (key ? env[key] : void 0) ?? join(home, HOME_DIR[id] ?? ".claude");
+}
+//#endregion
 //#region src/config/dotenv.ts
 /**
 * Native .env loader. Ports the claude-plugins `services/env-file.ts`
@@ -64,7 +91,7 @@ function parseEnvFile(path) {
 }
 /** The `.env` paths probed for a harness: home `.env` then `<cwd>/.env`. */
 function envCandidates(id, home = homedir(), cwd = process.cwd()) {
-	return [join(home, HOME_DIR[id] ?? ".claude", ".env"), join(cwd, ".env")];
+	return [join(harnessHome(id, process.env, home), ".env"), join(cwd, ".env")];
 }
 /**
 * Load `.env` files into `env` without overwriting existing keys. Reads the

package/dist/{evaluate-ClfbCDiY.mjs → evaluate-B4-MhOy_.mjs}

@@ -1,5 +1,5 @@
-import { r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
-import { f as countLines, p as evaluateFileSize, r as fusengineCache, t as claudeHome } from "./home-state-BXf38Zi1.mjs";
+import { a as resolveMaxLines } from "./limits-DG5pl-5s.mjs";
+import { f as countLines, p as evaluateFileSize, r as fusengineCache, t as claudeHome } from "./home-state-oUGFB4ds.mjs";
 import { dirname, join, normalize, resolve } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -83,6 +83,106 @@ function detectProjectType(dir) {
 	return "generic";
 }
 //#endregion
+//#region src/policy/conventions/strip.ts
+/** Mask PHP heredoc/nowdoc blocks (`<<<TAG` … terminator line), offsets kept. */
+function maskHeredocs(content) {
+	return content.replace(/<<<['"]?(\w+)['"]?\r?\n[\s\S]*?^\1;?$/gm, (block) => block.replace(/[^\n]/g, " "));
+}
+/**
+* Mask comments and strings of `content` according to its lexical profile.
+* @param content - Source text.
+* @param profile - Lexical family (see `langs.ts` `lexProfileOf`).
+* @returns Same-length text with comment/string interiors blanked.
+*/
+function maskCommentsAndStrings(content, profile) {
+	return maskScan(content, profile, false);
+}
+/**
+* Mask COMMENTS only (strings kept) — for detectors whose signal IS a string
+* literal (module imports like `from "zustand"`): a `// import …` comment
+* cannot match, while the real import line stays readable.
+* @param content - Source text.
+* @param profile - Lexical family.
+* @returns Same-length text with comment interiors blanked.
+*/
+function maskCommentsOnly(content, profile) {
+	return maskScan(content, profile, true);
+}
+/** Shared scanner; `keepStrings` skips the string-masking branch. */
+function maskScan(content, profile, keepStrings) {
+	if (profile === "php") content = maskHeredocs(content);
+	const out = content.split("");
+	const blank = (i) => {
+		if (out[i] !== "\n") out[i] = " ";
+	};
+	const isPy = profile === "py" || profile === "rb";
+	let i = 0;
+	while (i < out.length) {
+		const two = content.slice(i, i + 2);
+		if (!isPy && two === "//") {
+			while (i < out.length && out[i] !== "\n") blank(i++);
+			continue;
+		}
+		if (isPy && out[i] === "#") {
+			while (i < out.length && out[i] !== "\n") blank(i++);
+			continue;
+		}
+		if (profile === "php" && out[i] === "#") {
+			while (i < out.length && out[i] !== "\n") blank(i++);
+			continue;
+		}
+		if (!isPy && two === "/*") {
+			const end = content.indexOf("*/", i + 2);
+			const stop = end === -1 ? out.length : end + 2;
+			while (i < stop) blank(i++);
+			continue;
+		}
+		if (isPy && (content.startsWith("'''", i) || content.startsWith("\"\"\"", i))) {
+			const q = content.slice(i, i + 3);
+			const end = content.indexOf(q, i + 3);
+			const stop = end === -1 ? out.length : end + 3;
+			while (i < stop) blank(i++);
+			continue;
+		}
+		if (!keepStrings && (out[i] === "'" || out[i] === "\"" || profile === "c" && out[i] === "`")) {
+			const q = out[i];
+			let j = i + 1, closed = -1;
+			while (j < out.length && out[j] !== "\n") {
+				if (out[j] === "\\") {
+					j += 2;
+					continue;
+				}
+				if (out[j] === q) {
+					closed = j;
+					break;
+				}
+				j++;
+			}
+			if (q === "`") {
+				if (closed !== -1) {
+					while (i <= closed) blank(i++);
+					continue;
+				}
+				const end = content.indexOf("`", i + 1);
+				if (end !== -1) {
+					while (i <= end) blank(i++);
+					continue;
+				}
+				i++;
+				continue;
+			}
+			if (closed === -1) {
+				i++;
+				continue;
+			}
+			while (i <= closed) blank(i++);
+			continue;
+		}
+		i++;
+	}
+	return out.join("");
+}
+//#endregion
 //#region src/policy/nearest-manifest.ts
 /** Manifest filenames that anchor a project root (any one marks the dir). */
 const MANIFESTS = [
@@ -137,6 +237,12 @@ function projectCaps(dir) {
 			if ("@angular/core" in deps) caps.add("angular");
 			if ("nuxt" in deps) caps.add("nuxt");
 			if ("tailwindcss" in deps) caps.add("tailwind");
+			if ("@tanstack/react-start" in deps) caps.add("tanstack-start");
+			if ("@tanstack/react-router" in deps) caps.add("tanstack-router");
+			if ("@tanstack/react-query" in deps) caps.add("tanstack-query");
+			if ("@tanstack/vue-query" in deps) caps.add("vue-query");
+			if ("zustand" in deps) caps.add("zustand");
+			if ("pinia" in deps) caps.add("pinia");
 		}
 		const type = detectProjectType(dir);
 		if (type === "laravel") caps.add("laravel");
@@ -153,6 +259,8 @@ const REACT_CONTENT = /from ['"]react['"]|\buse(State|Effect|Context|Ref|Memo|Ca
 const NEXT_CONTENT = /use client|use server|NextRequest|NextResponse|from ['"]next|getServerSideProps|getStaticProps/;
 /** next.js route-file conventions. */
 const NEXT_ROUTE = /(page|layout|loading|error|route|middleware)\.(ts|tsx|js|jsx)$/;
+/** TanStack Start markers (file routes, server fns, start/router imports). */
+const TANSTACK_CONTENT = /createFileRoute|createServerFn|from ['"]@tanstack\/react-(start|router)/;
 /** Derive the raw signal an extension + content carry (no filesystem access). */
 function fileSignal(filePath, content) {
 	if (/\.swift$/.test(filePath)) return { definitive: "swift" };
@@ -162,11 +270,14 @@ function fileSignal(filePath, content) {
 	if (/\.rb$/.test(filePath)) return { definitive: "ruby" };
 	if (/\.rs$/.test(filePath)) return { definitive: "rust" };
 	if (/\.css$/.test(filePath) || /@tailwind|@apply/.test(content)) return { definitive: "tailwind" };
-	const isNext = NEXT_ROUTE.test(filePath) || NEXT_CONTENT.test(content);
-	if (/\.(tsx|jsx)$/.test(filePath)) return { jsHint: isNext ? "nextjs" : "react" };
+	const masked = maskCommentsAndStrings(content, "c");
+	const isTs = TANSTACK_CONTENT.test(masked);
+	const isNext = !isTs && (NEXT_ROUTE.test(filePath) || NEXT_CONTENT.test(masked));
+	if (/\.(tsx|jsx)$/.test(filePath)) return { jsHint: isTs ? "tanstack-start" : isNext ? "nextjs" : "react" };
 	if (/\.(ts|js)$/.test(filePath)) {
+		if (isTs) return { jsHint: "tanstack-start" };
 		if (isNext) return { jsHint: "nextjs" };
-		if (REACT_CONTENT.test(content)) return { jsHint: "react" };
+		if (REACT_CONTENT.test(masked)) return { jsHint: "react" };
 	}
 	return {};
 }
@@ -174,6 +285,7 @@ function fileSignal(filePath, content) {
 function reconcile(caps, hint) {
 	const nextCap = caps.has("nextjs");
 	const reactCap = caps.has("react") || nextCap;
+	if (hint === "tanstack-start") return caps.has("tanstack-start") || caps.has("tanstack-router") ? "tanstack-start" : reactCap ? "react" : "generic";
 	if (hint === "nextjs") return nextCap ? "nextjs" : reactCap ? "react" : "generic";
 	return reactCap ? "react" : "generic";
 }
@@ -182,13 +294,14 @@ function reconcile(caps, hint) {
 * manifest's capabilities) and the file's own extension/content signal. A
 * backend `.ts` in a react project is `generic` (no react signal) — fixing the
 * old extension-only default that flagged every `.ts` as react. Fail-open: any
-* error yields `"generic"`, never throws. Return values stay within the existing
-* union ("react" | "nextjs" | "laravel" | "swift" | "tailwind" | "java" | "go" |
-* "ruby" | "rust" | "generic") — no new labels.
+* error yields `"generic"`, never throws. Return values stay within the label
+* union ("react" | "nextjs" | "tanstack-start" | "laravel" | "swift" |
+* "tailwind" | "java" | "go" | "ruby" | "rust" | "generic") — `tanstack-start`
+* added 2026-07 (owner spec: first-class framework, Next.js-equivalent).
 * @param filePath - Path of the file being written/edited.
 * @param content - Its (incoming) content, for JS content signals.
 * @param cwd - Root to resolve a relative `filePath` against (default cwd).
-* @returns A framework label from the existing union.
+* @returns A framework label from the union.
 */
 function detectFramework(filePath, content, cwd = process.cwd()) {
 	try {
@@ -886,6 +999,179 @@ function moduleAwarePath(filePath, subpath, fallback) {
 	return name ? `modules/${name}/${subpath}` : fallback;
 }
 //#endregion
+//#region src/policy/conventions/langs.ts
+const EXT_LANG = {
+	ts: "ts",
+	tsx: "ts",
+	js: "ts",
+	jsx: "ts",
+	mts: "ts",
+	mjs: "ts",
+	astro: "ts",
+	svelte: "ts",
+	py: "py",
+	go: "go",
+	rs: "rs",
+	java: "java",
+	kt: "java",
+	php: "php",
+	swift: "swift",
+	rb: "rb",
+	vue: "vue"
+};
+/** Language family for a file path (by extension), or null when unsupported. */
+function langOfPath(filePath) {
+	const ext = filePath.split(".").pop()?.toLowerCase() ?? "";
+	return EXT_LANG[ext] ?? null;
+}
+/** Lexical profile for masking, derived from the language family. */
+function lexProfileOf(lang) {
+	if (lang === "py") return "py";
+	if (lang === "rb") return "rb";
+	if (lang === "php") return "php";
+	return "c";
+}
+/** True for dotfiles/dependency dirs never subject to conventions. */
+function isVendorPath(filePath) {
+	return /(^|\/)(node_modules|vendor|dist|build|\.next|coverage)\//.test(filePath);
+}
+/** Path predicates — canonical convention directories. */
+const isInterfacesPath = (p) => /\/(interfaces|Contracts|Protocols|traits)\//.test(p) || p.endsWith("traits.rs");
+const isTypesPath = (p) => p.includes("/types/") || p.endsWith(".d.ts");
+const isHooksPath = (p) => p.includes("/hooks/") || p.includes("/composables/");
+const isStoresPath = (p) => p.includes("/stores/");
+const isQueryPath = (p) => p.includes("/query/");
+const isComponentsPath = (p) => p.includes("/components/");
+//#endregion
+//#region src/policy/conventions/interfaces.ts
+/**
+* Interface/type-contract declaration detection, per language, over MASKED
+* content (see `strip.ts` — comments and strings never match). Single source
+* consumed by every interface gate; the four historical layers each carried
+* their own regexes (alias `type X =` false positives, unanchored
+* `class.*ABC`, missed `public protocol`/`sealed interface`/generics).
+*
+* Rule symmetry (owner spec): an EXPORTED contract belongs to its directory
+* (interfaces/ resp. types/); a non-exported local declaration is allowed.
+*
+* Each detection carries a LEVEL: `"legacy"` (the exact historical semantics,
+* hard deny byte-identical) vs `"extended"` (syntax widenings — Go
+* `interface{` without the space, Python `Protocol` — advisory-first via
+* `FUSE_CONVENTIONS_MODE`, owner Amendment 5). Go anchors at column 0: an
+* interface declared INSIDE a function (indented, a true false positive — a
+* local type cannot move to internal/interfaces/) never matches.
+*/
+const LEGACY_RE = {
+	ts: /^\s*export\s+(?:declare\s+)?interface\s+\w+/m,
+	py: /^\s*class\s+\w+\s*\([^)]*\b(?:ABC|ABCMeta)\b/m,
+	go: /^type\s+\w+\s+interface\s+\{/m,
+	rs: /^\s*(?:pub\s+)?trait\s+\w+/m,
+	java: /^\s*(?:(?:public|sealed|final|abstract)\s+)*(?:interface|@FunctionalInterface)\s*\w*|^\s*fun\s+interface\s+\w+/m,
+	php: /^\s*(?:abstract\s+class|interface)\s+\w+/m,
+	swift: /^\s*(?:(?:public|open|internal|private|fileprivate)\s+)?protocol\s+\w+/m
+};
+const EXTENDED_RE = {
+	py: /^\s*class\s+\w+\s*\([^)]*\bProtocol\b/m,
+	go: /^type\s+\w+\s+interface\b/m
+};
+/** Exported TS type alias (`export type X = …`) — belongs in `src/types/`. */
+const TYPE_ALIAS_RE = /^\s*export\s+type\s+\w+\s*[=<]/m;
+/**
+* Classify the interface declaration level of a file (masked scan), or null.
+* @param filePath - File path (extension selects the language).
+* @param content - Raw file content (masked internally).
+*/
+function interfaceDeclLevel(filePath, content) {
+	const lang = langOfPath(filePath);
+	if (!lang) return null;
+	const masked = maskCommentsAndStrings(content, lexProfileOf(lang));
+	if (LEGACY_RE[lang]?.test(masked)) return "legacy";
+	if (EXTENDED_RE[lang]?.test(masked)) return "extended";
+	return null;
+}
+/**
+* True when the file declares an interface-like contract at any level.
+* @param filePath - File path (extension selects the language).
+* @param content - Raw file content (masked internally).
+*/
+function declaresInterface(filePath, content) {
+	return interfaceDeclLevel(filePath, content) !== null;
+}
+/**
+* True when a TS-family file declares an EXPORTED type alias (masked scan).
+* @param content - Raw file content.
+*/
+function declaresExportedTypeAlias(content) {
+	return TYPE_ALIAS_RE.test(maskCommentsAndStrings(content, "c"));
+}
+//#endregion
+//#region src/policy/conventions/verdict.ts
+/**
+* Current rollout mode: `advisory` ONLY on the exact explicit value —
+* anything else (absent, typo, empty) is `deny` (owner decision: deny-first).
+* @param env - Environment (defaults to `process.env`).
+*/
+function conventionsMode(env = process.env) {
+	return env.FUSE_CONVENTIONS_MODE === "advisory" ? "advisory" : "deny";
+}
+/**
+* Resolve a convention verdict under the rollout flag: a NEW rule yields an
+* `inform` prompt in advisory mode (explicit opt-out), the blocking prompt
+* otherwise; an EXISTING rule always yields the blocking prompt unchanged.
+* @param prompt - The blocking prompt the rule would emit.
+* @param isNew - True when the rule is new (post-conventions module).
+* @param env - Environment (defaults to `process.env`).
+*/
+function rolloutVerdict(prompt, isNew, env = process.env) {
+	if (!isNew || conventionsMode(env) === "deny") return prompt;
+	return {
+		kind: "inform",
+		title: prompt.title,
+		reason: prompt.reason,
+		actions: prompt.actions
+	};
+}
+//#endregion
+//#region src/policy/guards/interface-separation-ext.ts
+/**
+* Extended interface-syntax violations (owner E3, advisory-first): the
+* syntaxes the guard's legacy regexes miss — Swift `public protocol`,
+* Java/Kotlin `sealed`/`fun interface`, Go unexported top-level interface
+* (`type foo interface {` at column 0 — indented locals stay excluded, D0.2
+* invariant). Detection rides the conventions module on MASKED content; the
+* caller wraps the verdict with `rolloutVerdict`, so these surface as
+* `inform` until `FUSE_CONVENTIONS_MODE=deny`. Legacy cases never reach this
+* file (the guard's hard-deny branches return first).
+*/
+/** Legacy anchors (kept in sync with interface-separation.ts by test). */
+const SWIFT_LEGACY_RE = /^\s*protocol\s+[A-Z]/m;
+const JAVA_LEGACY_RE = /^\s*(?:public\s+|private\s+|protected\s+|internal\s+)?(?:interface|record)\s+[A-Z]/m;
+const GO_LEGACY_RE = /^\s*type\s+[A-Z]\w*\s+interface\b/m;
+const inAny = (path, ...frags) => frags.some((f) => path.includes(f));
+/**
+* The extended-syntax violation for a file, or null when clean/legacy.
+* @param path - The written/edited file's path.
+* @param content - Its raw content (masked internally).
+* @returns Message + action for the advisory prompt.
+*/
+function extendedInterfaceViolation(path, content) {
+	if (!declaresInterface(path, content)) return null;
+	const masked = maskCommentsAndStrings(content, lexProfileOf(langOfPath(path) ?? "ts"));
+	if (/\.swift$/.test(path) && inAny(path, "View/", "Views/", "Component/", "Components/") && !SWIFT_LEGACY_RE.test(masked)) return {
+		msg: "Protocol in view file. Move to Sources/Interfaces/",
+		action: "Move the protocol to Sources/Interfaces/"
+	};
+	if (/\.(java|kt)$/.test(path) && inAny(path, "controller/", "controllers/", "handler/", "handlers/") && !JAVA_LEGACY_RE.test(masked)) return {
+		msg: "Interface in controller file. Move to interfaces/ package",
+		action: "Move the interface to the interfaces/ package"
+	};
+	if (/\.go$/.test(path) && inAny(path, "handler/", "handlers/", "controller/", "controllers/") && !GO_LEGACY_RE.test(masked)) return {
+		msg: "Interface in handler file. Move to internal/interfaces/",
+		action: "Move the interface to internal/interfaces/"
+	};
+	return null;
+}
+//#endregion
 //#region src/policy/guards/interface-separation.ts
 /** TS/JS component files: top-level `interface`/`type Foo`. */
 const TS_DECL_RE = /^\s*(export\s+)?(interface|type)\s+[A-Z]/m;
@@ -907,45 +1193,49 @@ const JAVA_DECL_RE = /^\s*(?:public\s+|private\s+|protected\s+|internal\s+)?(?:i
 const RUST_DECL_RE = /^\s*(?:pub(?:\(\w+\))?\s+)?trait\s+([A-Z]\w*)/m;
 /**
 * Blocks top-level interface/type/protocol declarations in component, view or
-* controller files (Interface Segregation). Fires only when BOTH the path
-* category AND the content pattern match.
-*
-* Destination text for TS/JS/Vue/Svelte, PHP and Swift matches the user's own
-* `claude-rules/rules/04-solid-dry-rules.md` ("SOLID Skill per Stack" table),
-* the current authoritative convention — NOT the older `enforce-interfaces.py`
-* text, which this guard originally ported. Go/Python/Java/Kotlin aren't
-* covered by that table, so their destinations stay as a reasonable default.
-*
-* Parity note: enforce-interfaces.py only inspects `Write` (tool_input.content).
-* We deliberately also fire on `Edit` — an in-place edit can introduce the same
-* violation — and the path fragments accept singular *and* plural directory
-* names (`view/` + `views/`), mirroring the Python `s?` regexes.
+* controller files (Interface Segregation), when BOTH the path category AND
+* the content pattern match. Content is MASKED first (conventions/strip.ts):
+* declarations in comments/strings/templates/heredocs never trigger. Legacy
+* regexes keep their exact values (parity tests) — every case that blocked
+* before still blocks with the same message (byte-parity). Two extension
+* classes ship ADVISORY via {@link rolloutVerdict} (`FUSE_CONVENTIONS_MODE`,
+* Amendment 5): exported type aliases redirected to `src/types/` (Amendment 2),
+* and the widenings of `interface-separation-ext.ts` (public protocol,
+* sealed/fun interface, unexported Go top-level). Rust `impl<T>` stays a
+* known FN. Parity: the Python port inspected `Write` only; we also fire on
+* `Edit`, and fragments accept singular+plural dirs (`view/` + `views/`).
 */
 function interfaceSeparationGuard(ctx) {
 	if (ctx.tool !== "Write" && ctx.tool !== "Edit") return null;
 	const path = ctx.filePath;
 	const content = ctx.content;
 	if (!path || !content) return null;
+	const masked = maskCommentsAndStrings(content, lexProfileOf(langOfPath(path) ?? "ts"));
 	const blockWith = (msg, action) => ({
 		kind: "block",
 		title: "Separate the interface",
 		reason: `SOLID VIOLATION: ${msg}`,
 		actions: [action]
 	});
-	const inAny = (...frags) => frags.some((f) => path.includes(f));
-	if (/\.(tsx|jsx|vue|svelte)$/.test(path) && TS_DECL_RE.test(content)) return blockWith("Interface/type in component file. Move to modules/[feature]/src/interfaces/", "Move the interface/type to modules/[feature]/src/interfaces/");
-	if (/\.py$/.test(path) && inAny("view/", "views/", "controller/", "controllers/", "route/", "routes/") && PY_MODEL_RE.test(content)) return blockWith("Type class in view file. Move to src/interfaces/", "Move the type class to src/interfaces/");
-	if (/\.go$/.test(path) && inAny("handler/", "handlers/", "controller/", "controllers/") && GO_DECL_RE.test(content)) return blockWith("Interface in handler file. Move to internal/interfaces/", "Move the interface to internal/interfaces/");
-	if (/\.(java|kt)$/.test(path) && inAny("controller/", "controllers/", "handler/", "handlers/") && JAVA_DECL_RE.test(content)) return blockWith("Interface in controller file. Move to interfaces/ package", "Move the interface to the interfaces/ package");
-	if (/\.php$/.test(path) && inAny("Controller/", "Controllers/", "Handler/", "Handlers/") && PHP_DECL_RE.test(content)) return blockWith("Interface in controller file. Move to app/Contracts/", "Move the interface to app/Contracts/");
-	if (/\.swift$/.test(path) && inAny("View/", "Views/", "Component/", "Components/") && SWIFT_PROTO_RE.test(content)) return blockWith("Protocol in view file. Move to Sources/Interfaces/", "Move the protocol to Sources/Interfaces/");
+	const inAny = (...frags) => frags.some((f) => path.includes(`/${f}`) || path.startsWith(f));
+	if (/\.(tsx|jsx|vue|svelte)$/.test(path) && TS_DECL_RE.test(masked)) {
+		if (!/^\s*(export\s+)?(declare\s+)?interface\s+\w/.test(masked) && declaresExportedTypeAlias(content)) return rolloutVerdict(blockWith("Type alias in component file. Move to modules/[feature]/src/types/", "Move the type alias to modules/[feature]/src/types/"), true);
+		return blockWith("Interface/type in component file. Move to modules/[feature]/src/interfaces/", "Move the interface/type to modules/[feature]/src/interfaces/");
+	}
+	if (/\.py$/.test(path) && inAny("view/", "views/", "controller/", "controllers/", "route/", "routes/") && PY_MODEL_RE.test(masked)) return blockWith("Type class in view file. Move to src/interfaces/", "Move the type class to src/interfaces/");
+	if (/\.go$/.test(path) && inAny("handler/", "handlers/", "controller/", "controllers/") && GO_DECL_RE.test(masked)) return blockWith("Interface in handler file. Move to internal/interfaces/", "Move the interface to internal/interfaces/");
+	if (/\.(java|kt)$/.test(path) && inAny("controller/", "controllers/", "handler/", "handlers/") && JAVA_DECL_RE.test(masked)) return blockWith("Interface in controller file. Move to interfaces/ package", "Move the interface to the interfaces/ package");
+	if (/\.php$/.test(path) && inAny("Controller/", "Controllers/", "Handler/", "Handlers/") && PHP_DECL_RE.test(masked)) return blockWith("Interface in controller file. Move to app/Contracts/", "Move the interface to app/Contracts/");
+	if (/\.swift$/.test(path) && inAny("View/", "Views/", "Component/", "Components/") && SWIFT_PROTO_RE.test(masked)) return blockWith("Protocol in view file. Move to Sources/Interfaces/", "Move the protocol to Sources/Interfaces/");
 	if (/\.rs$/.test(path) && !inAny("traits/", "interfaces/") && !path.endsWith("traits.rs")) {
-		const name = RUST_DECL_RE.exec(content)?.[1];
-		if (name && new RegExp(`impl\\s+${name}\\s+for\\s+\\w+`).test(content)) {
+		const name = RUST_DECL_RE.exec(masked)?.[1];
+		if (name && new RegExp(`impl\\s+${name}\\s+for\\s+\\w+`).test(masked)) {
 			const dest = moduleAwarePath(path, "traits.rs", "a dedicated traits.rs / interfaces module");
 			return blockWith(`Trait declared alongside its implementation. Move the trait to ${dest}`, `Move the trait to ${dest}`);
 		}
 	}
+	const ext = extendedInterfaceViolation(path, content);
+	if (ext) return rolloutVerdict(blockWith(ext.msg, ext.action), true);
 	return null;
 }
 //#endregion
@@ -1196,4 +1486,4 @@ function evaluate(ctx) {
 	};
 }
 //#endregion
-export { GIT_ASK as A, detectProjectType as B, SESSION_STATE_FRAGMENT as C, ASK_PATTERNS as D, protectedPathGuard as E, isRalphMode as F, requiredArchSkill as H, matchPatterns as I, detectFramework as L, PROJECT_INSTALL as M, RALPH_SAFE as N, CRITICAL_PATTERNS as O, SYSTEM_INSTALL as P, DEV_KEYWORDS as R, SAFE_PREFIXES as S, PROTECTED_GIT_RE as T, isApexCommand as V, bashWriteGuard as _, registerGuard as a, CODE_REDIRECT as b, GO_DECL_RE as c, PY_MODEL_RE as d, RUST_DECL_RE as f, moduleAwarePath as g, interfaceSeparationGuard as h, clearUserGuards as i, GIT_BLOCKED as j, securityGuard as k, JAVA_DECL_RE as l, TS_DECL_RE as m, FAIL_CLOSED as n, runGuards as o, SWIFT_PROTO_RE as p, GUARDS as r, installGuard as s, evaluate as t, PHP_DECL_RE as u, ASK_WRITERS as v, PROTECTED_FRAGMENTS as w, FILE_REDIRECT as x, CODE_MUTATORS as y, detectModularArchitecture as z };
+export { matchPatterns as $, moduleAwarePath as A, protectedPathGuard as B, isInterfacesPath as C, isVendorPath as D, isTypesPath as E, FILE_REDIRECT as F, isFileSizeScoped as G, CRITICAL_PATTERNS as H, SAFE_PREFIXES as I, GIT_BLOCKED as J, resolveSolidRefFramework as K, SESSION_STATE_FRAGMENT as L, ASK_WRITERS as M, CODE_MUTATORS as N, langOfPath as O, CODE_REDIRECT as P, isRalphMode as Q, PROTECTED_FRAGMENTS as R, isHooksPath as S, isStoresPath as T, securityGuard as U, ASK_PATTERNS as V, computeEditResultLines as W, RALPH_SAFE as X, PROJECT_INSTALL as Y, SYSTEM_INSTALL as Z, rolloutVerdict as _, registerGuard as a, DEV_KEYWORDS as at, interfaceDeclLevel as b, GO_DECL_RE as c, isApexCommand as ct, PY_MODEL_RE as d, detectFramework as et, RUST_DECL_RE as f, conventionsMode as g, interfaceSeparationGuard as h, clearUserGuards as i, maskCommentsOnly as it, bashWriteGuard as j, lexProfileOf as k, JAVA_DECL_RE as l, requiredArchSkill as lt, TS_DECL_RE as m, FAIL_CLOSED as n, projectCaps as nt, runGuards as o, detectModularArchitecture as ot, SWIFT_PROTO_RE as p, GIT_ASK as q, GUARDS as r, maskCommentsAndStrings as rt, installGuard as s, detectProjectType as st, evaluate as t, nearestManifestDir as tt, PHP_DECL_RE as u, declaresExportedTypeAlias as v, isQueryPath as w, isComponentsPath as x, declaresInterface as y, PROTECTED_GIT_RE as z };

package/dist/freshness/index.d.mts

@@ -1,3 +1,3 @@
-import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-CEKzGg2u.mjs";
-import { t as incrementTrivialEditCounter } from "../index-BOBXQ91y.mjs";
+import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-BGCzP9VF.mjs";
+import { t as incrementTrivialEditCounter } from "../index-84heAAm_.mjs";
 export { AuthEntry, DocSatisfactionStatus, formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };