@fusengine/harness 0.1.84 → 0.1.86

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-D93HY8dq.mjs";
+import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-CEWX-8m9.mjs";
 export { attachSystemMessage, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, informResponse, readClaudeInput, systemMessage, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -1,8 +1,8 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { f as countLines } from "../../home-state-oUGFB4ds.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "../../permission-mode-BN3MNgbm.mjs";
-import { _ as commandToString, c as readClaudeInput, i as denyResponse, r as contextResponse, s as informResponse } from "../../claude-D93HY8dq.mjs";
+import { _ as commandToString, c as readClaudeInput, i as denyResponse, r as contextResponse, s as informResponse } from "../../claude-CEWX-8m9.mjs";
 //#region src/adapters/codex/index.ts
 /**
 * OpenAI Codex CLI adapter (hook-mode). Codex's `PreToolUse` hook (since 2026)

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/adapters/hermes/index.mjs

@@ -1,2 +1,2 @@
-import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-1PUEoY8q.mjs";
+import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-H6qePmBC.mjs";
 export { guard, readHermesInput, toHermesResponse };

package/dist/adapters/kimi/index.mjs

@@ -1,2 +1,2 @@
-import { i as toKimiResponse, n as kimiDenyResponse, r as readKimiInput, t as guard } from "../../kimi-ChbcU2uI.mjs";
+import { i as toKimiResponse, n as kimiDenyResponse, r as readKimiInput, t as guard } from "../../kimi-CqLkpg1A.mjs";
 export { guard, kimiDenyResponse, readKimiInput, toKimiResponse };

package/dist/{claude-D93HY8dq.mjs → claude-CEWX-8m9.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";

package/dist/cli/bin.mjs

@@ -3,9 +3,9 @@ import { o as resolveStdinMaxBytes } from "../limits-DG5pl-5s.mjs";
 import { r as loadDotenv, s as resolveTtlSec } from "../dotenv-DoqNlALG.mjs";
 import { t as detectHarness } from "../harness-BMuLJ9lm.mjs";
 import { t as claudeHome } from "../home-state-oUGFB4ds.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D_WchZ3R.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-B4kqWMA3.mjs";
 import { n as writeInitFile, t as initFor } from "../run-TAXNRSpD.mjs";
-import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, i as respond, t as handleHook, zt as todayUtc } from "../handle-DsP67KZ4.mjs";
+import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, i as respond, t as handleHook, zt as todayUtc } from "../handle-Dzf4JbrL.mjs";
 import { delimiter, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D_WchZ3R.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-B4kqWMA3.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/{evaluate-B4-MhOy_.mjs → evaluate-9bUzRquQ.mjs}

@@ -261,6 +261,17 @@ const NEXT_CONTENT = /use client|use server|NextRequest|NextResponse|from ['"]ne
 const NEXT_ROUTE = /(page|layout|loading|error|route|middleware)\.(ts|tsx|js|jsx)$/;
 /** TanStack Start markers (file routes, server fns, start/router imports). */
 const TANSTACK_CONTENT = /createFileRoute|createServerFn|from ['"]@tanstack\/react-(start|router)/;
+/**
+* C7: Tailwind CSS-file signals, verified against official docs (v3 + v4) —
+* `@tailwind` (v3 layer directive, removed in v4), `@apply` (both versions),
+* `@config` (v3 native / v4 compat, JS config path), `@source` (v4 content
+* globbing), `@theme` (v4 design-token block), `theme(` (the function, both
+* versions' syntax). Deliberately NOT a bare utility-class-in-selector scan
+* (e.g. `.flex{}`) — an ordinary hand-written class named `.flex` is exactly
+* the false-positive shape this fix removes; only genuine Tailwind-specific
+* at-rules/functions count.
+*/
+const TAILWIND_CSS_CONTENT = /@tailwind\b|@apply\b|@config\b|@source\b|@theme\b|\btheme\(/;
 /** Derive the raw signal an extension + content carry (no filesystem access). */
 function fileSignal(filePath, content) {
 	if (/\.swift$/.test(filePath)) return { definitive: "swift" };
@@ -269,7 +280,7 @@ function fileSignal(filePath, content) {
 	if (/\.go$/.test(filePath)) return { definitive: "go" };
 	if (/\.rb$/.test(filePath)) return { definitive: "ruby" };
 	if (/\.rs$/.test(filePath)) return { definitive: "rust" };
-	if (/\.css$/.test(filePath) || /@tailwind|@apply/.test(content)) return { definitive: "tailwind" };
+	if (/\.css$/.test(filePath) && TAILWIND_CSS_CONTENT.test(content)) return { definitive: "tailwind" };
 	const masked = maskCommentsAndStrings(content, "c");
 	const isTs = TANSTACK_CONTENT.test(masked);
 	const isNext = !isTs && (NEXT_ROUTE.test(filePath) || NEXT_CONTENT.test(masked));

package/dist/{handle-DsP67KZ4.mjs → handle-Dzf4JbrL.mjs}

@@ -3,11 +3,11 @@ import { s as resolveTtlSec } from "./dotenv-DoqNlALG.mjs";
 import { r as projectLayout } from "./layout-KWoE_Mqn.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { D as isVendorPath, G as isFileSizeScoped, K as resolveSolidRefFramework, W as computeEditResultLines, b as interfaceDeclLevel, et as detectFramework, g as conventionsMode, lt as requiredArchSkill, n as FAIL_CLOSED, ot as detectModularArchitecture, rt as maskCommentsAndStrings, st as detectProjectType$1, t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { D as isVendorPath, G as isFileSizeScoped, K as resolveSolidRefFramework, W as computeEditResultLines, b as interfaceDeclLevel, et as detectFramework, g as conventionsMode, lt as requiredArchSkill, n as FAIL_CLOSED, ot as detectModularArchitecture, rt as maskCommentsAndStrings, st as detectProjectType$1, t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, d as countFrameworkCodeLines, f as countLines, i as loadSessionState, l as PLUGINS_DIR, n as fuseHarnessHome, o as saveSessionState, p as evaluateFileSize, r as fusengineCache, t as claudeHome } from "./home-state-oUGFB4ds.mjs";
 import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-DisYd2fb.mjs";
 import { r as isDocConsulted } from "./doc-helpers-CWZegVdR.mjs";
-import { D as frameworkSolidGate, F as isExcludedSwiftPath, G as evaluateApex, H as PRE_AUTH_GATES, P as isExcludedJsPath, R as capVerbosity, S as parseField, T as usesTailwindUtilities, V as POST_AUTH_GATES, W as docConsultedGate, b as scanPlugin, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, g as buildClaudeMdContext, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, p as apexAgentSteps, r as descFromText, s as parseEntry, t as isHtmlLike, v as apexDocName, w as skillTriggerGate, y as harnessHomeSegment, z as detectCreationIntent } from "./validate-Bf-EsbDh.mjs";
+import { D as frameworkSolidGate, F as isExcludedSwiftPath, G as evaluateApex, H as PRE_AUTH_GATES, P as isExcludedJsPath, R as capVerbosity, S as parseField, T as usesTailwindUtilities, V as POST_AUTH_GATES, W as docConsultedGate, b as scanPlugin, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, g as buildClaudeMdContext, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, p as apexAgentSteps, r as descFromText, s as parseEntry, t as isHtmlLike, v as apexDocName, w as skillTriggerGate, y as harnessHomeSegment, z as detectCreationIntent } from "./validate-C-TB06Mw.mjs";
 import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-DhBGlQe3.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-IhHk2KlT.mjs";
@@ -15,9 +15,9 @@ import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cac
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
 import { C as apexAuthorizationGate, S as trivialCount, _ as recordBrainstormRequired, a as journalLogPath, b as recordTarget, c as appendEvent, d as signTrack, f as verifyTrack, g as recordAgent, h as emptyTrack, i as withTrack, l as withTrackLockSync, m as agentsFresh, o as readTrackSync, p as writeLastNonce, r as trackJournalEnabled, s as diffTrackEvents, t as loadTrack, u as LOCK_FAILED, v as recordDoc, x as recordTrivialEdit, y as recordRefRead } from "./store-Dw08Amqh.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "./permission-mode-BN3MNgbm.mjs";
-import { _ as commandToString, d as collectFiles, f as pathExists, g as writeText, h as spawnCapture, i as denyResponse, l as systemMessage, m as sleep, n as blockResponse, p as readText$1, r as contextResponse, s as informResponse, t as attachSystemMessage } from "./claude-D93HY8dq.mjs";
-import { i as toKimiResponse, n as kimiDenyResponse } from "./kimi-ChbcU2uI.mjs";
-import { r as toHermesResponse } from "./hermes-1PUEoY8q.mjs";
+import { _ as commandToString, d as collectFiles, f as pathExists, g as writeText, h as spawnCapture, i as denyResponse, l as systemMessage, m as sleep, n as blockResponse, p as readText$1, r as contextResponse, s as informResponse, t as attachSystemMessage } from "./claude-CEWX-8m9.mjs";
+import { i as toKimiResponse, n as kimiDenyResponse } from "./kimi-CqLkpg1A.mjs";
+import { r as toHermesResponse } from "./hermes-H6qePmBC.mjs";
 import { basename, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -280,17 +280,17 @@ function maxSemver(versions) {
 	return versions.length === 0 ? null : versions.reduce((a, b) => compareSemver(a, b) >= 0 ? a : b);
 }
 //#endregion
-//#region src/policy/design/corpus-resolve.ts
+//#region src/policy/design/corpus-fs.ts
 /**
-* Corpus/plugins root resolution (fs) and the write guard over it. Resolution
-* is PER RUNTIME (Claude marketplaces, Codex versioned plugin cache — same
-* pattern as rules-root.ts); runtimes without a plugin structure (kimi today)
-* resolve to "" and the corpus gates stay dormant. There is NO cwd fallback
-* anywhere: an agent-controlled directory can never become its own taste
-* reference (self-attested proof — the failure this gate exists to prevent).
+* @module corpus-fs
+* Shared fs primitives for corpus/plugins root resolution, split out of
+* `corpus-resolve.ts` so `corpus-resolve-cache.ts` can reuse them without a
+* circular import (both modules feed `corpus-resolve.ts`'s `probeClaude`).
+* @packageDocumentation
 */
+/** The refs-design/ path suffix common to every design-corpus-bearing plugin tree. */
 const CORPUS_SUFFIX = join("skills", "design-web", "references", "refs-design");
-/** Immediate child dir names of `dir`, or [] when unreadable. */
+/** Immediate child dir names of `dir`, alphabetically sorted, or [] when unreadable. */
 function children$2(dir) {
 	try {
 		return readdirSync(dir).sort();
@@ -298,8 +298,60 @@ function children$2(dir) {
 		return [];
 	}
 }
-/** Claude: `<home>/.claude/plugins/marketplaces/<mkt>/plugins/design-expert` ("" when absent). */
-function probeClaude$1(home) {
+//#endregion
+//#region src/policy/design/corpus-resolve-cache.ts
+/**
+* @module corpus-resolve-cache
+* Claude Code's per-plugin VERSIONED CACHE tree, split out of
+* `corpus-resolve.ts` to keep that file within the SOLID size budget (SRP).
+*
+* Claude Code caches every installed marketplace plugin at
+* `~/.claude/plugins/cache/<mkt>/<plugin>/<version>/` — a tree SEPARATE from
+* `~/.claude/plugins/marketplaces/<mkt>/plugins/<plugin>/` (the marketplace's
+* own checkout), one version dir per `plugin.json` version bump, orphaned
+* versions pruned ~14 days after being superseded (docs: "Plugin caching and
+* file resolution"). The design corpus can ship under EITHER tree, and under
+* a DIFFERENT plugin id in each: a machine observed 2026-07-29 has the corpus
+* at `cache/fusengine-plugins/fuse-design/2.2.3/...` while the marketplace
+* checkout is `marketplaces/fusengine-plugins/plugins/design-expert/...`.
+* Identification here is therefore STRUCTURAL, never by plugin name: a
+* candidate `<mkt>/<plugin>/<version>/` dir qualifies iff it itself contains
+* `CORPUS_SUFFIX` — matching a hardcoded name would silently miss a
+* renamed/relocated corpus (the exact defect this module fixes).
+* @packageDocumentation
+*/
+/** Real (non-prerelease) semver dirs, same filter `probeCodex` uses. */
+const SEMVER_RE = /^\d+\.\d+(\.\d+)?$/;
+/**
+* Claude: `<home>/.claude/plugins/cache/<mkt>/<plugin>/<highest STABLE semver
+* containing refs-design>` ("" when no plugin under any marketplace cache
+* ships the corpus). Marketplaces and plugin ids are both walked — neither is
+* assumed — so a corpus shipped under any plugin name is found.
+*/
+function probeClaudeCache(home) {
+	const cacheRoot = join(home, ".claude", "plugins", "cache");
+	for (const mkt of children$2(cacheRoot)) {
+		const mktDir = join(cacheRoot, mkt);
+		for (const plugin of children$2(mktDir)) {
+			const pluginDir = join(mktDir, plugin);
+			const latest = maxSemver(children$2(pluginDir).filter((v) => SEMVER_RE.test(v) && existsSync(join(pluginDir, v, CORPUS_SUFFIX))));
+			if (latest) return join(pluginDir, latest);
+		}
+	}
+	return "";
+}
+//#endregion
+//#region src/policy/design/corpus-resolve.ts
+/**
+* Corpus/plugins root resolution (fs) and the write guard over it. Resolution
+* is PER RUNTIME (Claude marketplaces, Codex versioned plugin cache — same
+* pattern as rules-root.ts); runtimes without a plugin structure (kimi today)
+* resolve to "" and the corpus gates stay dormant. There is NO cwd fallback
+* anywhere: an agent-controlled directory can never become its own taste
+* reference (self-attested proof — the failure this gate exists to prevent).
+*/
+/** Claude marketplace checkout: `<home>/.claude/plugins/marketplaces/<mkt>/plugins/design-expert` ("" when absent). */
+function probeClaudeMarketplace(home) {
 	const markets = join(home, ".claude", "plugins", "marketplaces");
 	for (const m of children$2(markets)) {
 		const de = join(markets, m, "plugins", "design-expert");
@@ -307,6 +359,14 @@ function probeClaude$1(home) {
 	}
 	return "";
 }
+/**
+* Claude: the marketplace checkout WINS when present (a single unambiguous
+* live git checkout); the versioned plugin CACHE tree is the fallback, since
+* Claude Code keeps orphaned prior-version cache dirs ~14 days after a bump.
+*/
+function probeClaude$1(home) {
+	return probeClaudeMarketplace(home) || probeClaudeCache(home);
+}
 /** Codex: `<CODEX_HOME|~/.codex>/plugins/cache/<mkt>/design-expert/<highest STABLE semver>` ("" when absent). */
 function probeCodex$1(env, home) {
 	const cache = join(env.CODEX_HOME ?? join(home, ".codex"), "plugins", "cache");
@@ -373,14 +433,22 @@ const CORPUS_LINE_RE = /^[-*]\s*Corpus:\s*(.+)$/gim;
 function classifyCorpusRead(filePath, corpusRoot) {
 	if (!corpusRoot) return null;
 	if (filePath === join(corpusRoot, "README.md")) return "index";
-	if (filePath.startsWith(`${corpusRoot}/`) && TOKENS_RE.test(basename(filePath))) return "tokens";
+	if (!filePath.startsWith(`${corpusRoot}/`)) return null;
+	if (TOKENS_RE.test(basename(filePath))) return "tokens";
+	if (basename(filePath) === "design-system.md") return "sheet";
 	return null;
 }
-/** Per-mode corpus-read threshold (component >= 1 file, page >= 2 files, full = index + 2 tokens). */
+/**
+* Per-mode corpus-read threshold (component >= 1 file, page >= 2 files,
+* full = index + 3 tokens — C5: raised from 2, since 2 references still let
+* an agent pattern-match by tonal affinity without ever opening the one
+* reference that actually answered the brief). `"sheet"` reads (C6,
+* `design-system.md`) never count toward this — only `TOKENS_RE` matches do.
+*/
 function corpusReady(reads, mode) {
 	if (mode === "component") return reads.length >= 1;
 	if (mode === "page") return reads.length >= 2;
-	return reads.includes("README.md") && reads.filter((r) => TOKENS_RE.test(basename(r))).length >= 2;
+	return reads.includes("README.md") && reads.filter((r) => TOKENS_RE.test(basename(r))).length >= 3;
 }
 /** True when the content carries a `- Corpus: ref/section` citation line (form only). */
 function hasCorpusCitation(content) {
@@ -7905,6 +7973,57 @@ function collectDesignEvidence(sessionId, cwd, baseDir = defaultStateDir(cwd)) {
 	};
 }
 //#endregion
+//#region src/policy/design/screenshot-tools.ts
+/**
+* @module screenshot-tools
+* Screenshot-credit tool set (C1), split out of `runtime/design-helpers.ts` to
+* keep that file within the SOLID size budget (SRP).
+* @packageDocumentation
+*/
+/**
+* Screenshot-credit tools: the single-shot capture PLUS the two fuse-browser
+* batch capture primitives (`browser_shots_batch`, `browser_site_shots`) — a
+* batch call that captures N urls/viewports must credit the quota too, or
+* capturing efficiently would make the quota infranchissable. LIMITATION
+* (deliberate, documented): this repo's cross-harness `NormalizedEvent` (see
+* `runtime/normalize.ts`) never surfaces `tool_response` for any tool — by
+* design, since its shape is undocumented for MCP tools and harness-specific
+* for built-ins — so no per-call item count reaches this gate. A batch call
+* therefore credits EXACTLY 1, same as a unit screenshot, never the N it may
+* have captured.
+*/
+const SHOT_TOOLS = /* @__PURE__ */ new Set([
+	"mcp__fuse-browser__browser_screenshot",
+	"mcp__fuse-browser__browser_shots_batch",
+	"mcp__fuse-browser__browser_site_shots"
+]);
+//#endregion
+//#region src/policy/design/allowed-write.ts
+/**
+* @module allowed-write
+* The design-agent write allowlist, split out of `gates.ts` to keep that file
+* within the SOLID size budget (SRP).
+* @packageDocumentation
+*/
+/** Extensions the design agent may always write: .html/.css/.md/.json. */
+const ALLOWED_WRITE = /\.(html|css|md|json)$/;
+/**
+* C4: `motion*.js` ONLY, matched on the BASENAME — every one of the 11
+* corpus references ships its animation as a separate `motion.js` /
+* `motion-nav.js` / `motion-scroll.js` file, so banning every `.js` forced
+* the agent to inline scripts the corpus explicitly teaches out-of-band.
+* Deliberately NOT `\.js$` in general (that would open arbitrary app code,
+* the exact thing this gate exists to block) — after the `motion` prefix,
+* either nothing (`motion.js`) or `.`/`-` then more (`motion-nav.js`) must
+* lead into `.js`; `app.js` and `motionless-app.js` — a bare `^motion`
+* prefix would wrongly pass this — do not match.
+*/
+const MOTION_JS = /^motion([.-].*)?\.js$/;
+/** True when `filePath` is a write the design agent may make: .html/.css/.md/.json, or a `motion*.js` file. */
+function isAllowedWrite(filePath) {
+	return ALLOWED_WRITE.test(filePath) || MOTION_JS.test(basename(filePath));
+}
+//#endregion
 //#region src/policy/design/design-system-rules.ts
 /**
 * Content rules for design-system.md — the four hard requirements the
@@ -7917,14 +8036,22 @@ const OKLCH_RE = /oklch\(\s*[\d.]+%?\s+0\.0*[1-9]/;
 * system may SAY "Inter" ("## Interaction states", "we never use Inter"), it
 * may not USE it as a font. Covered forms: CSS declarations (`font:`,
 * `font-family:` in any case, multiline values), JS config (`fontFamily:`),
-* custom properties (`--*font*`/`--*ff*`/`--*type*`), `@import` URLs, and
-* Markdown table cells (`| Body | Inter |`). Explicitly OUT of scope (chosen,
-* not overlooked): unquoted prose in bullet lines — distinguishing "usage"
-* from "mention" there is prose parsing, not a regex's job.
+* custom properties named in English (`--*font*`/`--*ff*`/`--*type*`, value
+* unquoted or quoted), ANY custom property whose value quotes a forbidden
+* name (`--police-texte: "Inter", …` — a non-English property name has no
+* keyword to key off, so the quote itself is the usage signal: a quoted
+* token in a `--*` value is a font-family entry, not prose), `@import`
+* URLs, and Markdown table cells (`| Body | Inter |`). Explicitly OUT of
+* scope (chosen, not overlooked): unquoted prose in bullet lines —
+* distinguishing "usage" from "mention" there is prose parsing, not a
+* regex's job. Accepted trade-off of the quote signal: `--comment: "we
+* never use Inter"` is flagged too — a quoted mention reads identically to
+* a quoted usage once the property name carries no keyword to disambiguate.
 */
 const FONT_DECL_RE = /(?:font(?:-family)?|fontFamily|--[\w-]*(?:font|ff|type)[\w-]*)\s*:[^;\n]*(?:\n\s*)?[^;\n]*\b(?:Inter|Roboto|Arial|Open Sans)\b/i;
 const FONT_IMPORT_RE = /family=[^&"')]*\b(?:Inter|Roboto|Arial|Open Sans)\b/i;
 const FONT_TABLE_RE = /\|\s*\*{0,2}(?:Inter|Roboto|Arial|Open Sans)\*{0,2}\s*\|/;
+const FONT_QUOTED_PROP_RE = /--[\w-]+\s*:[^;\n]*["'][^;\n]*(?:\n\s*)?[^;\n]*\b(?:Inter|Roboto|Arial|Open Sans)\b/i;
 /**
 * Return the requirements missing from a design-system.md (empty = valid).
 * The corpus citation satisfies the source requirement ONLY when the corpus
@@ -7936,12 +8063,11 @@ function validateDesignSystem(content, corpusCitationOk = false) {
 	if (!content.includes("## Design Reference")) missing.push("## Design Reference section");
 	if (!/https?:\/\//.test(content) && !(corpusCitationOk && hasCorpusCitation(content))) missing.push("reference URL (https://…) or Corpus citation");
 	if (!OKLCH_RE.test(content)) missing.push("oklch() color with chroma > 0");
-	if (FONT_DECL_RE.test(content) || FONT_IMPORT_RE.test(content) || FONT_TABLE_RE.test(content)) missing.push("forbidden font (Inter/Roboto/Arial/Open Sans)");
+	if (FONT_DECL_RE.test(content) || FONT_IMPORT_RE.test(content) || FONT_TABLE_RE.test(content) || FONT_QUOTED_PROP_RE.test(content)) missing.push("forbidden font (Inter/Roboto/Arial/Open Sans)");
 	return missing;
 }
 //#endregion
 //#region src/policy/design/gates.ts
-const ALLOWED_WRITE = /\.(html|css|md|json)$/;
 const EXEMPT_DIRS = [
 	"node_modules/",
 	"dist/",
@@ -7949,7 +8075,7 @@ const EXEMPT_DIRS = [
 	".claude/"
 ];
 const NAV$2 = "mcp__fuse-browser__browser_navigate";
-const SHOT$2 = "mcp__fuse-browser__browser_screenshot";
+const SHOT$1 = "mcp__fuse-browser__browser_screenshot";
 const GEMINI$2 = "mcp__gemini-design__create_frontend";
 const deny = (reason) => ({
 	kind: "block",
@@ -7957,10 +8083,10 @@ const deny = (reason) => ({
 	reason,
 	actions: ["Follow the design pipeline phases (0→identity, 1→inspiration, 2→screenshots, 3→design-system, 4→generate) in order"]
 });
-/** Block the design agent from writing anything but .html/.css/.md/.json. */
+/** Block the design agent from writing anything but .html/.css/.md/.json (+ motion*.js). */
 function htmlCssOnlyGate(filePath) {
-	if (EXEMPT_DIRS.some((d) => filePath.includes(d)) || ALLOWED_WRITE.test(filePath)) return null;
-	return deny("BLOCKED: design-expert can only write .html, .css, .md, and .json files. Framework files (.tsx, .astro, .vue, .swift, .php) must be written by the domain expert (astro-expert, react-expert, etc.) AFTER design validation.");
+	if (EXEMPT_DIRS.some((d) => filePath.includes(d)) || isAllowedWrite(filePath)) return null;
+	return deny("BLOCKED: design-expert can only write .html, .css, .json, .md, and motion*.js files. Framework files (.tsx, .astro, .vue, .swift, .php) must be written by the domain expert (astro-expert, react-expert, etc.) AFTER design validation.");
 }
 /** Block edits to the harness-managed `.design-state-*` files (read-only to the agent). */
 function stateFileGate(filePath) {
@@ -7997,7 +8123,7 @@ function designPassNotice(i, cacheDir) {
 		if (isWrite && fp && !EXEMPT_DIRS.some((d) => fp.includes(d)) && ALLOWED_WRITE.test(fp)) lines.push(`enforce-html-css-only: allowed: ${basename(fp)}`);
 		if (i.tool === NAV$2) lines.push(`check-inspiration-read: pass (${i.url})`);
 		if (i.tool === GEMINI$2 && geminiEnabled()) lines.push("validate-design-system: design-system.md ok");
-		if (isWrite || i.tool === NAV$2 || i.tool === SHOT$2 || i.tool === GEMINI$2) lines.push(`pipeline-gate: phase ${state.currentPhase} ok`);
+		if (isWrite || i.tool === NAV$2 || i.tool === SHOT$1 || i.tool === GEMINI$2) lines.push(`pipeline-gate: phase ${state.currentPhase} ok`);
 	}
 	if (state && i.phase === "post" && isWrite) {
 		if (basename(fp) === "design-system.md") lines.push("validate-design: design-system.md → phase 3");
@@ -8081,9 +8207,9 @@ const SKILLS = `${PLUGINS_DIR}/design-expert/skills`;
 /** Gate writing design-system.md: requires phase >= 2 and the per-mode screenshot quota. */
 function designSystemWriteGate(filePath, state, corpusRequired = false) {
 	if (!filePath.endsWith("design-system.md")) return null;
-	if (state.currentPhase < 2) return deny(`BLOCKED: Cannot write design-system.md at phase ${state.currentPhase}. RECOVERY: 1) Read identity templates from skills/design-system/ 2) Read design-inspiration.md 3) Read the refs-design corpus (README.md + relevant tokens-*.md) with the Read tool 4) Screenshot real sector sites with mcp__fuse-browser__browser_screenshot on a LIVE session (note: browser_shots_batch/browser_site_shots do NOT advance the phase) 5) Then write design-system.md`);
+	if (state.currentPhase < 2) return deny(`BLOCKED: Cannot write design-system.md at phase ${state.currentPhase}. RECOVERY: 1) Read identity templates from skills/design-system/ 2) Read design-inspiration.md 3) Read the refs-design corpus (README.md + relevant tokens-*.md) with the Read tool 4) Screenshot real sector sites with mcp__fuse-browser__browser_screenshot on a LIVE session (browser_shots_batch/browser_site_shots also count, 1 credit per call) 5) Then write design-system.md`);
 	const needed = quotaFor(state.mode, corpusRequired);
-	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} screenshots for mode '${state.mode}'. RECOVERY: 1) Read the refs-design corpus (README.md + tokens-*.md) if not done 2) Take ${needed - state.screenshotsCount} more screenshots of REAL sector sites with mcp__fuse-browser__browser_screenshot (browser_shots_batch/browser_site_shots do NOT count) 3) Use browser_open + browser_navigate + browser_screenshot fullPage:true 4) Then write design-system.md`);
+	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} screenshots for mode '${state.mode}'. RECOVERY: 1) Read the refs-design corpus (README.md + tokens-*.md) if not done 2) Take ${needed - state.screenshotsCount} more screenshots of REAL sector sites with mcp__fuse-browser__browser_screenshot (browser_shots_batch/browser_site_shots also count, 1 credit per call) 3) Use browser_open + browser_navigate + browser_screenshot fullPage:true 4) Then write design-system.md`);
 	return null;
 }
 /** Gate Gemini create_frontend: requires phase >= 3 and a validated design system. */
@@ -8230,7 +8356,6 @@ function designSystemContentGate(i) {
 * @packageDocumentation
 */
 const NAV$1 = "mcp__fuse-browser__browser_navigate";
-const SHOT$1 = "mcp__fuse-browser__browser_screenshot";
 const SCROLL = "mcp__fuse-browser__browser_scroll";
 const GEMINI$1 = "mcp__gemini-design__create_frontend";
 /** Read design-system.md walking up to 6 parents from `cwd` ("" if absent/unreadable). */
@@ -8251,7 +8376,7 @@ function findDesignSystem(cwd) {
 }
 /** Apply a PostToolUse fuse-browser transition to the design state. */
 function recordPost(event, cacheDir, state, corpusRoot = "", corpusRequired = false, cwd = "") {
-	if (event.tool === SHOT$1) saveDesignState(cacheDir, recordScreenshot(state, corpusRequired));
+	if (SHOT_TOOLS.has(event.tool)) saveDesignState(cacheDir, recordScreenshot(state, corpusRequired));
 	else if (event.tool === NAV$1) saveDesignState(cacheDir, recordNavigate(state));
 	else if (event.tool === SCROLL) saveDesignState(cacheDir, recordScroll(state));
 	else if (event.tool === GEMINI$1) saveDesignState(cacheDir, {

package/dist/{hermes-1PUEoY8q.mjs → hermes-H6qePmBC.mjs}

@@ -1,6 +1,6 @@
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-D93HY8dq.mjs";
+import { _ as commandToString, c as readClaudeInput } from "./claude-CEWX-8m9.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/index.mjs

@@ -4,11 +4,11 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-B4-MhOy_.mjs";
+import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-9bUzRquQ.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-Bf-EsbDh.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-C-TB06Mw.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-IhHk2KlT.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/{kimi-ChbcU2uI.mjs → kimi-CqLkpg1A.mjs}

@@ -1,6 +1,6 @@
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-D93HY8dq.mjs";
+import { _ as commandToString, c as readClaudeInput } from "./claude-CEWX-8m9.mjs";
 //#region src/adapters/kimi/index.ts
 /**
 * Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,

package/dist/policy/index.mjs

@@ -1,5 +1,5 @@
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-B4-MhOy_.mjs";
+import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-9bUzRquQ.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "../home-state-oUGFB4ds.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-Bf-EsbDh.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-C-TB06Mw.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/{run-D_WchZ3R.mjs → run-B4kqWMA3.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-KWoE_Mqn.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-oUGFB4ds.mjs";
-import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-DsP67KZ4.mjs";
+import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-Dzf4JbrL.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/dist/{validate-Bf-EsbDh.mjs → validate-C-TB06Mw.mjs}

@@ -1,6 +1,6 @@
 import { a as resolveMaxLines, c as storeBudget, i as hookBudget } from "./limits-DG5pl-5s.mjs";
 import { c as ttlLabel, t as HOME_DIR } from "./dotenv-DoqNlALG.mjs";
-import { A as moduleAwarePath, S as isHooksPath, T as isStoresPath, _ as rolloutVerdict, at as DEV_KEYWORDS, it as maskCommentsOnly, nt as projectCaps, rt as maskCommentsAndStrings, tt as nearestManifestDir, x as isComponentsPath, y as declaresInterface } from "./evaluate-B4-MhOy_.mjs";
+import { A as moduleAwarePath, S as isHooksPath, T as isStoresPath, _ as rolloutVerdict, at as DEV_KEYWORDS, it as maskCommentsOnly, nt as projectCaps, rt as maskCommentsAndStrings, tt as nearestManifestDir, x as isComponentsPath, y as declaresInterface } from "./evaluate-9bUzRquQ.mjs";
 import { d as countFrameworkCodeLines, l as PLUGINS_DIR, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fusengine/harness",
-	"version": "0.1.84",
+	"version": "0.1.86",
 	"description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
 	"type": "module",
 	"module": "src/index.ts",