@fusengine/harness 0.1.81 → 0.1.83

package/dist/cli/bin.mjs

@@ -5,7 +5,7 @@ import { t as detectHarness } from "../harness-BMuLJ9lm.mjs";
 import { t as claudeHome } from "../home-state-oUGFB4ds.mjs";
 import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D_WchZ3R.mjs";
 import { n as writeInitFile, t as initFor } from "../run-TAXNRSpD.mjs";
-import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, i as respond, t as handleHook, zt as todayUtc } from "../handle-J5r2f_O_.mjs";
+import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, i as respond, t as handleHook, zt as todayUtc } from "../handle-F35Gx-QS.mjs";
 import { delimiter, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/{handle-J5r2f_O_.mjs → handle-F35Gx-QS.mjs}

@@ -12,13 +12,13 @@ import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-IhHk2KlT.mjs";
 import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
-import { _ as trivialCount, a as LOCK_TTL_MS, c as writeLastNonce, d as recordAgent, f as recordBrainstormRequired, g as recordTrivialEdit, h as recordTarget, i as LOCK_FAILED, l as agentsFresh, m as recordRefRead, o as signTrack, p as recordDoc, r as withTrack, s as verifyTrack, t as loadTrack, u as emptyTrack, v as apexAuthorizationGate } from "./store-yr_QFsZY.mjs";
+import { C as apexAuthorizationGate, S as trivialCount, _ as recordBrainstormRequired, a as journalLogPath, b as recordTarget, c as appendEvent, d as signTrack, f as verifyTrack, g as recordAgent, h as emptyTrack, i as withTrack, l as withTrackLockSync, m as agentsFresh, o as readTrackSync, p as writeLastNonce, r as trackJournalEnabled, s as diffTrackEvents, t as loadTrack, u as LOCK_FAILED, v as recordDoc, x as recordTrivialEdit, y as recordRefRead } from "./store-Dw08Amqh.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "./permission-mode-BN3MNgbm.mjs";
 import { _ as commandToString, d as collectFiles, f as pathExists, g as writeText, h as spawnCapture, i as denyResponse, l as systemMessage, m as sleep, n as blockResponse, p as readText$1, r as contextResponse, s as informResponse, t as attachSystemMessage } from "./claude-D93HY8dq.mjs";
 import { i as toKimiResponse, n as kimiDenyResponse } from "./kimi-ChbcU2uI.mjs";
 import { r as toHermesResponse } from "./hermes-1PUEoY8q.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
-import { appendFileSync, closeSync, copyFileSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
+import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { mkdir, rmdir } from "node:fs/promises";
 import { createHash } from "node:crypto";
@@ -1248,15 +1248,13 @@ function freshPassingReceipt(track, windowMs, now) {
 	return hits.length ? hits.reduce((a, b) => b.ts > a.ts ? b : a) : null;
 }
 /**
-* Sync variant reading the signed track file directly — for the sync gates
-* (TaskCompleted / SubagentStop). Returns the newest passing receipt, or `null`
-* on any read/verify failure (fail-closed: no proof ⇒ treated as unverified).
+* Sync variant reading the track directly (snapshot ⊕ journal) — for the sync
+* gates (TaskCompleted / SubagentStop). Returns the newest passing receipt, or
+* `null` on any read/verify failure (fail-closed: no proof ⇒ unverified).
 */
 function freshReceiptFromFile(file, windowMs, now) {
 	try {
-		if (!existsSync(file)) return null;
-		const track = verifyTrack(JSON.parse(readFileSync(file, "utf-8")));
-		return track ? freshPassingReceipt(track, windowMs, now) : null;
+		return freshPassingReceipt(readTrackSync(file, trackJournalEnabled()), windowMs, now);
 	} catch {
 		return null;
 	}
@@ -2115,62 +2113,6 @@ function harvestAgentEvidence(transcriptPath, track, now) {
 	return uses.reduce((acc, u) => applyToolUse(acc, u, now), track);
 }
 //#endregion
-//#region src/tracking/track-lock-sync.ts
-/**
-* Synchronous twin of {@link withTrackLock} for lifecycle paths that CANNOT
-* float async work (the SubagentStop dispatch runs synchronously in a
-* short-lived hook process — an async write could be dropped before exit,
-* see `evidence-harvest-io.ts`). Same semantics: `wx` lockfile, bounded total
-* retry, named skipped write on contention, stale reclamation. The wait uses
-* `Atomics.wait` (allowed on the main thread in both Node and Bun).
-*/
-/** Block the thread for `ms` (bounded by the caller's total budget). */
-function sleepSync(ms) {
-	Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-}
-/** True when the lockfile is older than the TTL (orphaned by a dead process). */
-function isStale(lock) {
-	try {
-		return Date.now() - statSync(lock).mtimeMs > LOCK_TTL_MS;
-	} catch {
-		return false;
-	}
-}
-/**
-* Run `fn` under the track lock of `dir`, synchronously.
-* @param dir - The track state directory (lockfile lives inside).
-* @param fn - The protected read-modify-write.
-* @returns `fn`'s result, or {@link LOCK_FAILED} when the lock stayed busy.
-*/
-function withTrackLockSync(dir, fn) {
-	mkdirSync(dir, { recursive: true });
-	const lock = join(dir, "track.lock");
-	const deadline = Date.now() + 400;
-	for (;;) try {
-		closeSync(openSync(lock, "wx"));
-		break;
-	} catch {
-		if (isStale(lock)) {
-			try {
-				unlinkSync(lock);
-			} catch {}
-			continue;
-		}
-		if (Date.now() >= deadline) {
-			process.stderr.write(`harness: track lock busy, write skipped (${lock})\n`);
-			return LOCK_FAILED;
-		}
-		sleepSync(8);
-	}
-	try {
-		return fn();
-	} finally {
-		try {
-			unlinkSync(lock);
-		} catch {}
-	}
-}
-//#endregion
 //#region src/freshness/evidence-harvest-io.ts
 /**
 * SubagentStop wiring for {@link harvestAgentEvidence}. The core SubagentStop
@@ -2204,6 +2146,14 @@ function harvestSubagentTrack(payload, cwd, now, baseDir = defaultStateDir(cwd))
 	const transcriptPath = typeof payload.agent_transcript_path === "string" ? payload.agent_transcript_path : void 0;
 	if (!transcriptPath) return;
 	const file = trackFile(typeof payload.session_id === "string" ? payload.session_id : "unknown", baseDir);
+	if (trackJournalEnabled()) {
+		const track = readTrackSync(file, true);
+		const next = harvestAgentEvidence(transcriptPath, track, now);
+		if (next === track) return;
+		const log = journalLogPath(file);
+		for (const ev of diffTrackEvents(track, next, now)) appendEvent(log, ev.field, ev.op, ev.value, ev.ts);
+		return;
+	}
 	if (withTrackLockSync(dirname(file), () => {
 		const track = loadTrackSync(file);
 		const next = harvestAgentEvidence(transcriptPath, track, now);
@@ -7752,15 +7702,9 @@ function uiDesignSkillGate(tool, filePath, content, ev) {
 //#endregion
 //#region src/policy/design/skill-evidence.ts
 /**
-* @module design/skill-evidence
-* IO side of the UI design-skill gate: read the verified session track and
-* derive {@link DesignEvidence} (read references + doc-consulted) for
-* {@link uiDesignSkillGate}. Kept separate from the pure gate logic (SRP).
-* @packageDocumentation
-*/
-/**
-* Read the verified session track and derive {@link DesignEvidence}. Fail-closed
-* on a missing/corrupt/tampered track (no evidence → the gate blocks).
+* Read the verified session track (snapshot ⊕ journal) and derive
+* {@link DesignEvidence}. Fail-closed on a missing/corrupt/tampered track (no
+* evidence → the gate blocks).
 * @param sessionId - the Claude session id.
 * @param cwd - the project root (selects the per-project state dir).
 * @param baseDir - override the track base dir (tests); defaults to the project state dir.
@@ -7768,7 +7712,7 @@ function uiDesignSkillGate(tool, filePath, content, ev) {
 function collectDesignEvidence(sessionId, cwd, baseDir = defaultStateDir(cwd)) {
 	let track = null;
 	try {
-		track = verifyTrack(JSON.parse(readFileSync(trackFile(sessionId, baseDir), "utf8")));
+		track = readTrackSync(trackFile(sessionId, baseDir), trackJournalEnabled());
 	} catch {
 		track = null;
 	}

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-KWoE_Mqn.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-oUGFB4ds.mjs";
-import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-J5r2f_O_.mjs";
+import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-F35Gx-QS.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,