@fusengine/harness 0.1.85 → 0.1.87

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-D93HY8dq.mjs";
+import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-CEWX-8m9.mjs";
 export { attachSystemMessage, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, informResponse, readClaudeInput, systemMessage, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -1,8 +1,8 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { f as countLines } from "../../home-state-oUGFB4ds.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "../../permission-mode-BN3MNgbm.mjs";
-import { _ as commandToString, c as readClaudeInput, i as denyResponse, r as contextResponse, s as informResponse } from "../../claude-D93HY8dq.mjs";
+import { _ as commandToString, c as readClaudeInput, i as denyResponse, r as contextResponse, s as informResponse } from "../../claude-CEWX-8m9.mjs";
 //#region src/adapters/codex/index.ts
 /**
 * OpenAI Codex CLI adapter (hook-mode). Codex's `PreToolUse` hook (since 2026)

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "../../evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/adapters/hermes/index.mjs

@@ -1,2 +1,2 @@
-import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-1PUEoY8q.mjs";
+import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-H6qePmBC.mjs";
 export { guard, readHermesInput, toHermesResponse };

package/dist/adapters/kimi/index.mjs

@@ -1,2 +1,2 @@
-import { i as toKimiResponse, n as kimiDenyResponse, r as readKimiInput, t as guard } from "../../kimi-ChbcU2uI.mjs";
+import { i as toKimiResponse, n as kimiDenyResponse, r as readKimiInput, t as guard } from "../../kimi-CqLkpg1A.mjs";
 export { guard, kimiDenyResponse, readKimiInput, toKimiResponse };

package/dist/{claude-D93HY8dq.mjs → claude-CEWX-8m9.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";

package/dist/cli/bin.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { o as resolveStdinMaxBytes } from "../limits-DG5pl-5s.mjs";
-import { r as loadDotenv, s as resolveTtlSec } from "../dotenv-DoqNlALG.mjs";
+import { c as resolveTtlSec, r as loadDotenv } from "../dotenv-BLBkBTww.mjs";
 import { t as detectHarness } from "../harness-BMuLJ9lm.mjs";
 import { t as claudeHome } from "../home-state-oUGFB4ds.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D_WchZ3R.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-B4kqWMA3.mjs";
 import { n as writeInitFile, t as initFor } from "../run-TAXNRSpD.mjs";
-import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, i as respond, t as handleHook, zt as todayUtc } from "../handle-DptZbyMP.mjs";
+import { $ as runningVersion, Q as runDoctor, Z as notify, et as versionBanner, i as respond, t as handleHook, zt as todayUtc } from "../handle-Boj3vnxD.mjs";
 import { delimiter, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D_WchZ3R.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-B4kqWMA3.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/config/index.mjs

@@ -1,5 +1,5 @@
 import { a as resolveMaxLines, c as storeBudget, i as hookBudget, l as parseEnvInt, n as DEFAULT_STDIN_MAX_BYTES, o as resolveStdinMaxBytes, r as MAX_LINES_ENV_KEY, s as splitTarget, t as DEFAULT_MAX_LINES } from "../limits-DG5pl-5s.mjs";
-import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "../dotenv-DoqNlALG.mjs";
+import { c as resolveTtlSec, i as parseEnvFile, l as ttlLabel, n as envCandidates, o as DEFAULT_TTL_SEC, r as loadDotenv, s as TTL_ENV_KEY, t as HOME_DIR } from "../dotenv-BLBkBTww.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "../layout-KWoE_Mqn.mjs";
 import "../config-la_KkjCS.mjs";
 export { DEFAULT_MAX_LINES, DEFAULT_STDIN_MAX_BYTES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, hookBudget, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveStdinMaxBytes, resolveTtlSec, splitTarget, storeBudget, ttlLabel };

package/dist/{dotenv-DoqNlALG.mjs → dotenv-BLBkBTww.mjs}

@@ -106,4 +106,4 @@ function loadDotenv(id, env = process.env, home = homedir(), cwd = process.cwd()
 	for (const path of envCandidates(id, home, cwd)) for (const [k, v] of Object.entries(parseEnvFile(path))) if (env[k] === void 0) env[k] = v;
 }
 //#endregion
-export { DEFAULT_TTL_SEC as a, ttlLabel as c, parseEnvFile as i, envCandidates as n, TTL_ENV_KEY as o, loadDotenv as r, resolveTtlSec as s, HOME_DIR as t };
+export { harnessHome as a, resolveTtlSec as c, parseEnvFile as i, ttlLabel as l, envCandidates as n, DEFAULT_TTL_SEC as o, loadDotenv as r, TTL_ENV_KEY as s, HOME_DIR as t };

package/dist/{evaluate-B4-MhOy_.mjs → evaluate-9bUzRquQ.mjs}

@@ -261,6 +261,17 @@ const NEXT_CONTENT = /use client|use server|NextRequest|NextResponse|from ['"]ne
 const NEXT_ROUTE = /(page|layout|loading|error|route|middleware)\.(ts|tsx|js|jsx)$/;
 /** TanStack Start markers (file routes, server fns, start/router imports). */
 const TANSTACK_CONTENT = /createFileRoute|createServerFn|from ['"]@tanstack\/react-(start|router)/;
+/**
+* C7: Tailwind CSS-file signals, verified against official docs (v3 + v4) —
+* `@tailwind` (v3 layer directive, removed in v4), `@apply` (both versions),
+* `@config` (v3 native / v4 compat, JS config path), `@source` (v4 content
+* globbing), `@theme` (v4 design-token block), `theme(` (the function, both
+* versions' syntax). Deliberately NOT a bare utility-class-in-selector scan
+* (e.g. `.flex{}`) — an ordinary hand-written class named `.flex` is exactly
+* the false-positive shape this fix removes; only genuine Tailwind-specific
+* at-rules/functions count.
+*/
+const TAILWIND_CSS_CONTENT = /@tailwind\b|@apply\b|@config\b|@source\b|@theme\b|\btheme\(/;
 /** Derive the raw signal an extension + content carry (no filesystem access). */
 function fileSignal(filePath, content) {
 	if (/\.swift$/.test(filePath)) return { definitive: "swift" };
@@ -269,7 +280,7 @@ function fileSignal(filePath, content) {
 	if (/\.go$/.test(filePath)) return { definitive: "go" };
 	if (/\.rb$/.test(filePath)) return { definitive: "ruby" };
 	if (/\.rs$/.test(filePath)) return { definitive: "rust" };
-	if (/\.css$/.test(filePath) || /@tailwind|@apply/.test(content)) return { definitive: "tailwind" };
+	if (/\.css$/.test(filePath) && TAILWIND_CSS_CONTENT.test(content)) return { definitive: "tailwind" };
 	const masked = maskCommentsAndStrings(content, "c");
 	const isTs = TANSTACK_CONTENT.test(masked);
 	const isNext = !isTs && (NEXT_ROUTE.test(filePath) || NEXT_CONTENT.test(masked));

package/dist/{handle-DptZbyMP.mjs → handle-Boj3vnxD.mjs}

@@ -1,23 +1,23 @@
 import { a as resolveMaxLines, l as parseEnvInt, s as splitTarget } from "./limits-DG5pl-5s.mjs";
-import { s as resolveTtlSec } from "./dotenv-DoqNlALG.mjs";
+import { a as harnessHome, c as resolveTtlSec } from "./dotenv-BLBkBTww.mjs";
 import { r as projectLayout } from "./layout-KWoE_Mqn.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { D as isVendorPath, G as isFileSizeScoped, K as resolveSolidRefFramework, W as computeEditResultLines, b as interfaceDeclLevel, et as detectFramework, g as conventionsMode, lt as requiredArchSkill, n as FAIL_CLOSED, ot as detectModularArchitecture, rt as maskCommentsAndStrings, st as detectProjectType$1, t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { D as isVendorPath, G as isFileSizeScoped, K as resolveSolidRefFramework, W as computeEditResultLines, b as interfaceDeclLevel, et as detectFramework, g as conventionsMode, lt as requiredArchSkill, n as FAIL_CLOSED, ot as detectModularArchitecture, rt as maskCommentsAndStrings, st as detectProjectType$1, t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, d as countFrameworkCodeLines, f as countLines, i as loadSessionState, l as PLUGINS_DIR, n as fuseHarnessHome, o as saveSessionState, p as evaluateFileSize, r as fusengineCache, t as claudeHome } from "./home-state-oUGFB4ds.mjs";
 import { a as writeJsonFile, i as readJsonFile, r as hashText, t as atomicWrite } from "./json-io-DisYd2fb.mjs";
 import { r as isDocConsulted } from "./doc-helpers-CWZegVdR.mjs";
-import { D as frameworkSolidGate, F as isExcludedSwiftPath, G as evaluateApex, H as PRE_AUTH_GATES, P as isExcludedJsPath, R as capVerbosity, S as parseField, T as usesTailwindUtilities, V as POST_AUTH_GATES, W as docConsultedGate, b as scanPlugin, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, g as buildClaudeMdContext, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, p as apexAgentSteps, r as descFromText, s as parseEntry, t as isHtmlLike, v as apexDocName, w as skillTriggerGate, y as harnessHomeSegment, z as detectCreationIntent } from "./validate-Bf-EsbDh.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-DhBGlQe3.mjs";
+import { D as frameworkSolidGate, F as isExcludedSwiftPath, G as evaluateApex, H as PRE_AUTH_GATES, P as isExcludedJsPath, R as capVerbosity, S as parseField, T as usesTailwindUtilities, V as POST_AUTH_GATES, W as docConsultedGate, b as scanPlugin, c as EXCLUDE_DIRS$1, d as buildApexTaskInjection, g as buildClaudeMdContext, l as PROJECT_INDICATORS, n as missingSeoElements, o as parseEnrichment, p as apexAgentSteps, r as descFromText, s as parseEntry, t as isHtmlLike, v as apexDocName, w as skillTriggerGate, y as harnessHomeSegment, z as detectCreationIntent } from "./validate-DYPT8NY-.mjs";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-DVML3zfp.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, l as throttleMs, n as readRoots, o as readState, s as setStateField, t as addRoot } from "./registry-IhHk2KlT.mjs";
 import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
-import { C as apexAuthorizationGate, S as trivialCount, _ as recordBrainstormRequired, a as journalLogPath, b as recordTarget, c as appendEvent, d as signTrack, f as verifyTrack, g as recordAgent, h as emptyTrack, i as withTrack, l as withTrackLockSync, m as agentsFresh, o as readTrackSync, p as writeLastNonce, r as trackJournalEnabled, s as diffTrackEvents, t as loadTrack, u as LOCK_FAILED, v as recordDoc, x as recordTrivialEdit, y as recordRefRead } from "./store-Dw08Amqh.mjs";
+import { C as apexAuthorizationGate, S as trivialCount, _ as recordBrainstormRequired, a as journalLogPath, b as recordTarget, c as appendEvent, d as signTrack, f as verifyTrack, g as recordAgent, h as emptyTrack, i as withTrack, l as withTrackLockSync, m as agentsFresh, o as readTrackSync, p as writeLastNonce, r as trackJournalEnabled, s as diffTrackEvents, t as loadTrack, u as LOCK_FAILED, v as recordDoc, x as recordTrivialEdit, y as recordRefRead } from "./store-5-ZPKb0u.mjs";
 import { n as parseApplyPatch, t as isBypassPermissions } from "./permission-mode-BN3MNgbm.mjs";
-import { _ as commandToString, d as collectFiles, f as pathExists, g as writeText, h as spawnCapture, i as denyResponse, l as systemMessage, m as sleep, n as blockResponse, p as readText$1, r as contextResponse, s as informResponse, t as attachSystemMessage } from "./claude-D93HY8dq.mjs";
-import { i as toKimiResponse, n as kimiDenyResponse } from "./kimi-ChbcU2uI.mjs";
-import { r as toHermesResponse } from "./hermes-1PUEoY8q.mjs";
+import { _ as commandToString, d as collectFiles, f as pathExists, g as writeText, h as spawnCapture, i as denyResponse, l as systemMessage, m as sleep, n as blockResponse, p as readText$1, r as contextResponse, s as informResponse, t as attachSystemMessage } from "./claude-CEWX-8m9.mjs";
+import { i as toKimiResponse, n as kimiDenyResponse } from "./kimi-CqLkpg1A.mjs";
+import { r as toHermesResponse } from "./hermes-H6qePmBC.mjs";
 import { basename, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -280,17 +280,17 @@ function maxSemver(versions) {
 	return versions.length === 0 ? null : versions.reduce((a, b) => compareSemver(a, b) >= 0 ? a : b);
 }
 //#endregion
-//#region src/policy/design/corpus-resolve.ts
+//#region src/policy/design/corpus-fs.ts
 /**
-* Corpus/plugins root resolution (fs) and the write guard over it. Resolution
-* is PER RUNTIME (Claude marketplaces, Codex versioned plugin cache — same
-* pattern as rules-root.ts); runtimes without a plugin structure (kimi today)
-* resolve to "" and the corpus gates stay dormant. There is NO cwd fallback
-* anywhere: an agent-controlled directory can never become its own taste
-* reference (self-attested proof — the failure this gate exists to prevent).
+* @module corpus-fs
+* Shared fs primitives for corpus/plugins root resolution, split out of
+* `corpus-resolve.ts` so `corpus-resolve-cache.ts` can reuse them without a
+* circular import (both modules feed `corpus-resolve.ts`'s `probeClaude`).
+* @packageDocumentation
 */
+/** The refs-design/ path suffix common to every design-corpus-bearing plugin tree. */
 const CORPUS_SUFFIX = join("skills", "design-web", "references", "refs-design");
-/** Immediate child dir names of `dir`, or [] when unreadable. */
+/** Immediate child dir names of `dir`, alphabetically sorted, or [] when unreadable. */
 function children$2(dir) {
 	try {
 		return readdirSync(dir).sort();
@@ -298,8 +298,60 @@ function children$2(dir) {
 		return [];
 	}
 }
-/** Claude: `<home>/.claude/plugins/marketplaces/<mkt>/plugins/design-expert` ("" when absent). */
-function probeClaude$1(home) {
+//#endregion
+//#region src/policy/design/corpus-resolve-cache.ts
+/**
+* @module corpus-resolve-cache
+* Claude Code's per-plugin VERSIONED CACHE tree, split out of
+* `corpus-resolve.ts` to keep that file within the SOLID size budget (SRP).
+*
+* Claude Code caches every installed marketplace plugin at
+* `~/.claude/plugins/cache/<mkt>/<plugin>/<version>/` — a tree SEPARATE from
+* `~/.claude/plugins/marketplaces/<mkt>/plugins/<plugin>/` (the marketplace's
+* own checkout), one version dir per `plugin.json` version bump, orphaned
+* versions pruned ~14 days after being superseded (docs: "Plugin caching and
+* file resolution"). The design corpus can ship under EITHER tree, and under
+* a DIFFERENT plugin id in each: a machine observed 2026-07-29 has the corpus
+* at `cache/fusengine-plugins/fuse-design/2.2.3/...` while the marketplace
+* checkout is `marketplaces/fusengine-plugins/plugins/design-expert/...`.
+* Identification here is therefore STRUCTURAL, never by plugin name: a
+* candidate `<mkt>/<plugin>/<version>/` dir qualifies iff it itself contains
+* `CORPUS_SUFFIX` — matching a hardcoded name would silently miss a
+* renamed/relocated corpus (the exact defect this module fixes).
+* @packageDocumentation
+*/
+/** Real (non-prerelease) semver dirs, same filter `probeCodex` uses. */
+const SEMVER_RE = /^\d+\.\d+(\.\d+)?$/;
+/**
+* Claude: `<home>/.claude/plugins/cache/<mkt>/<plugin>/<highest STABLE semver
+* containing refs-design>` ("" when no plugin under any marketplace cache
+* ships the corpus). Marketplaces and plugin ids are both walked — neither is
+* assumed — so a corpus shipped under any plugin name is found.
+*/
+function probeClaudeCache(home) {
+	const cacheRoot = join(home, ".claude", "plugins", "cache");
+	for (const mkt of children$2(cacheRoot)) {
+		const mktDir = join(cacheRoot, mkt);
+		for (const plugin of children$2(mktDir)) {
+			const pluginDir = join(mktDir, plugin);
+			const latest = maxSemver(children$2(pluginDir).filter((v) => SEMVER_RE.test(v) && existsSync(join(pluginDir, v, CORPUS_SUFFIX))));
+			if (latest) return join(pluginDir, latest);
+		}
+	}
+	return "";
+}
+//#endregion
+//#region src/policy/design/corpus-resolve.ts
+/**
+* Corpus/plugins root resolution (fs) and the write guard over it. Resolution
+* is PER RUNTIME (Claude marketplaces, Codex versioned plugin cache — same
+* pattern as rules-root.ts); runtimes without a plugin structure (kimi today)
+* resolve to "" and the corpus gates stay dormant. There is NO cwd fallback
+* anywhere: an agent-controlled directory can never become its own taste
+* reference (self-attested proof — the failure this gate exists to prevent).
+*/
+/** Claude marketplace checkout: `<home>/.claude/plugins/marketplaces/<mkt>/plugins/design-expert` ("" when absent). */
+function probeClaudeMarketplace(home) {
 	const markets = join(home, ".claude", "plugins", "marketplaces");
 	for (const m of children$2(markets)) {
 		const de = join(markets, m, "plugins", "design-expert");
@@ -307,6 +359,14 @@ function probeClaude$1(home) {
 	}
 	return "";
 }
+/**
+* Claude: the marketplace checkout WINS when present (a single unambiguous
+* live git checkout); the versioned plugin CACHE tree is the fallback, since
+* Claude Code keeps orphaned prior-version cache dirs ~14 days after a bump.
+*/
+function probeClaude$1(home) {
+	return probeClaudeMarketplace(home) || probeClaudeCache(home);
+}
 /** Codex: `<CODEX_HOME|~/.codex>/plugins/cache/<mkt>/design-expert/<highest STABLE semver>` ("" when absent). */
 function probeCodex$1(env, home) {
 	const cache = join(env.CODEX_HOME ?? join(home, ".codex"), "plugins", "cache");
@@ -373,14 +433,22 @@ const CORPUS_LINE_RE = /^[-*]\s*Corpus:\s*(.+)$/gim;
 function classifyCorpusRead(filePath, corpusRoot) {
 	if (!corpusRoot) return null;
 	if (filePath === join(corpusRoot, "README.md")) return "index";
-	if (filePath.startsWith(`${corpusRoot}/`) && TOKENS_RE.test(basename(filePath))) return "tokens";
+	if (!filePath.startsWith(`${corpusRoot}/`)) return null;
+	if (TOKENS_RE.test(basename(filePath))) return "tokens";
+	if (basename(filePath) === "design-system.md") return "sheet";
 	return null;
 }
-/** Per-mode corpus-read threshold (component >= 1 file, page >= 2 files, full = index + 2 tokens). */
+/**
+* Per-mode corpus-read threshold (component >= 1 file, page >= 2 files,
+* full = index + 3 tokens — C5: raised from 2, since 2 references still let
+* an agent pattern-match by tonal affinity without ever opening the one
+* reference that actually answered the brief). `"sheet"` reads (C6,
+* `design-system.md`) never count toward this — only `TOKENS_RE` matches do.
+*/
 function corpusReady(reads, mode) {
 	if (mode === "component") return reads.length >= 1;
 	if (mode === "page") return reads.length >= 2;
-	return reads.includes("README.md") && reads.filter((r) => TOKENS_RE.test(basename(r))).length >= 2;
+	return reads.includes("README.md") && reads.filter((r) => TOKENS_RE.test(basename(r))).length >= 3;
 }
 /** True when the content carries a `- Corpus: ref/section` citation line (form only). */
 function hasCorpusCitation(content) {
@@ -825,12 +893,35 @@ function claudeMdKey(prompt, ctx) {
 	return `claude-md:${hashText(prompt)}:${hashText(ctx)}`;
 }
 /**
+* Extract the APEX preamble portion of a `buildClaudeMdContext` result, i.e.
+* everything BEFORE the `# <docName>\n` root-doc block it prepends on dev
+* prompts. Returns "" when `ctx` has no preamble (plain prompt: `ctx` starts
+* directly with the root-doc heading).
+* @param ctx - The full `buildClaudeMdContext` return value.
+* @param docName - Root doc file name (e.g. "AGENTS.md").
+* @returns The preamble text, or "" when absent.
+*/
+function extractApexPreamble(ctx, docName) {
+	const heading = `# ${docName}\n`;
+	if (ctx.startsWith(heading)) return "";
+	const sep = `\n\n${heading}`;
+	const idx = ctx.indexOf(sep);
+	return idx === -1 ? "" : ctx.slice(0, idx);
+}
+/**
 * UserPromptSubmit context injection: render the CLAUDE.md (+ optional APEX)
 * preamble as a Claude `additionalContext` response, or "" when nothing to emit.
 * Guarded by {@link oncePerWindow} via {@link claudeMdKey}: only a
 * near-simultaneous double-fire of the SAME turn (identical prompt AND identical
 * block, within {@link DEDUP_WINDOW_MS}) is suppressed. The invariant "CLAUDE.md
 * is emitted on EVERY message" is thus preserved.
+*
+* On kimi specifically, the root doc body is dropped from the emitted text:
+* Kimi loads `<kimiHome>/AGENTS.md` natively at session start (`apex-target.ts`),
+* so re-injecting its full body on every prompt is redundant terminal noise
+* (kimi has no model-only hook channel — `runtime/inform.ts`). The APEX
+* preamble, which is NOT part of `AGENTS.md`, is still emitted in full when the
+* prompt is dev-shaped; a plain prompt leaves only the notice.
 * @param prompt - The raw user prompt.
 * @param cwd - Project root (for project-type detection).
 * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
@@ -840,7 +931,12 @@ function promptSubmitContext(prompt, cwd, id = "claude-code") {
 	const ctx = buildClaudeMdContext(prompt, cwd, id);
 	if (!ctx) return "";
 	if (!oncePerWindow(claudeMdKey(prompt, ctx), 3e3)) return "";
-	return renderInform(id, "UserPromptSubmit", ctx, `${apexDocName(id)} injected`);
+	const notice = `${apexDocName(id)} injected`;
+	if (id === "kimi") {
+		const preamble = extractApexPreamble(ctx, apexDocName(id));
+		return preamble ? renderInform(id, "UserPromptSubmit", preamble, notice) : notice;
+	}
+	return renderInform(id, "UserPromptSubmit", ctx, notice);
 }
 /**
 * PreToolUse Task context injection: render the APEX sub-agent context as a
@@ -1024,6 +1120,45 @@ function sessionStartCore(cwd, home = homedir(), now = Date.now(), id = "claude-
 	return ctx ? attachSystemMessage(contextResponse("SessionStart", ctx), `${apexDocName(id)} injected`) : "";
 }
 //#endregion
+//#region src/runtime/lifecycle/kimi-rules-native.ts
+/**
+* Guard for the kimi notice-only rules injection. Kimi Code CLI has no
+* model-only hook channel (`src/runtime/inform.ts`) — every `UserPromptSubmit`
+* stdout is BOTH appended to the model's context AND rendered raw in the
+* user's terminal. `injectRules` (`inject-rules.ts`) normally re-injects the
+* full ~18 Ko rules corpus on every prompt; when the installer has already
+* merged that same corpus into `<kimiHome>/AGENTS.md` — which Kimi loads
+* natively at session start via its documented `${agents_md}` mechanism,
+* independent of hooks — the re-injection is pure noise the user has to
+* scroll past. Confirmed present, fenced, in the local install:
+* `~/.kimi-code/AGENTS.md:87` / `:335`.
+*
+* Fail-safe semantics: fences absent, file absent, or any read error ⟹
+* `false` — the caller then falls back to the full corpus. A dump is
+* verbose but never wrong; a false `true` would silently drop the rules.
+*/
+/** Opening fence the fusengine installer writes around the merged corpus. */
+const FENCE_START = "<!-- fusengine:kimi-rules:start -->";
+/** Closing fence the fusengine installer writes around the merged corpus. */
+const FENCE_END = "<!-- fusengine:kimi-rules:end -->";
+/**
+* Check whether the kimi rules corpus is already present, fenced, inside
+* `<kimiHome>/AGENTS.md`.
+* @param home - Kimi home dir override (defaults to `harnessHome("kimi")`,
+* which honors `KIMI_CODE_HOME`).
+* @returns `true` only when both fences are found in a readable file.
+*/
+function rulesInAgentsMd(home) {
+	try {
+		const agentsMd = join(home ?? harnessHome("kimi"), "AGENTS.md");
+		if (!existsSync(agentsMd)) return false;
+		const content = readFileSync(agentsMd, "utf-8");
+		return content.includes(FENCE_START) && content.includes(FENCE_END);
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/runtime/lifecycle/inject-rules.ts
 /** Read & concatenate all `*.md` files (sorted) under `rulesDir`. */
 function readRules(rulesDir) {
@@ -1047,6 +1182,13 @@ function readRules(rulesDir) {
 * with the *actual* `hookEventName` — the spec requires it to match the firing
 * event (a hardcoded "SessionStart" is non-conforming and may be dropped on
 * UserPromptSubmit/SubagentStart).
+*
+* On kimi's `UserPromptSubmit` specifically, when the corpus is already fenced
+* inside `<kimiHome>/AGENTS.md` (native load, {@link rulesInAgentsMd}), only the
+* notice is emitted — the re-injected corpus would otherwise dump into the
+* user's terminal on every single prompt for no model-context benefit.
+* `SessionStart`/`SubagentStart` always keep the full corpus (session bootstrap
+* / sub-agent contexts need it regardless of the native AGENTS.md load).
 * @param pluginRoot - `CLAUDE_PLUGIN_ROOT` of the claude-rules plugin.
 * @param event - The firing hook event name (e.g. "SessionStart").
 * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
@@ -1054,7 +1196,9 @@ function readRules(rulesDir) {
 */
 function injectRules(pluginRoot, event, id = "claude-code") {
 	const content = readRules(join(pluginRoot, "rules"));
-	return content ? renderInform(id, event, content, "rules 00-08 injected") : "";
+	if (!content) return "";
+	if (id === "kimi" && event === "UserPromptSubmit" && rulesInAgentsMd()) return "rules 00-08 injected";
+	return renderInform(id, event, content, "rules 00-08 injected");
 }
 //#endregion
 //#region src/runtime/lifecycle/solid-detect.ts
@@ -7905,6 +8049,57 @@ function collectDesignEvidence(sessionId, cwd, baseDir = defaultStateDir(cwd)) {
 	};
 }
 //#endregion
+//#region src/policy/design/screenshot-tools.ts
+/**
+* @module screenshot-tools
+* Screenshot-credit tool set (C1), split out of `runtime/design-helpers.ts` to
+* keep that file within the SOLID size budget (SRP).
+* @packageDocumentation
+*/
+/**
+* Screenshot-credit tools: the single-shot capture PLUS the two fuse-browser
+* batch capture primitives (`browser_shots_batch`, `browser_site_shots`) — a
+* batch call that captures N urls/viewports must credit the quota too, or
+* capturing efficiently would make the quota infranchissable. LIMITATION
+* (deliberate, documented): this repo's cross-harness `NormalizedEvent` (see
+* `runtime/normalize.ts`) never surfaces `tool_response` for any tool — by
+* design, since its shape is undocumented for MCP tools and harness-specific
+* for built-ins — so no per-call item count reaches this gate. A batch call
+* therefore credits EXACTLY 1, same as a unit screenshot, never the N it may
+* have captured.
+*/
+const SHOT_TOOLS = /* @__PURE__ */ new Set([
+	"mcp__fuse-browser__browser_screenshot",
+	"mcp__fuse-browser__browser_shots_batch",
+	"mcp__fuse-browser__browser_site_shots"
+]);
+//#endregion
+//#region src/policy/design/allowed-write.ts
+/**
+* @module allowed-write
+* The design-agent write allowlist, split out of `gates.ts` to keep that file
+* within the SOLID size budget (SRP).
+* @packageDocumentation
+*/
+/** Extensions the design agent may always write: .html/.css/.md/.json. */
+const ALLOWED_WRITE = /\.(html|css|md|json)$/;
+/**
+* C4: `motion*.js` ONLY, matched on the BASENAME — every one of the 11
+* corpus references ships its animation as a separate `motion.js` /
+* `motion-nav.js` / `motion-scroll.js` file, so banning every `.js` forced
+* the agent to inline scripts the corpus explicitly teaches out-of-band.
+* Deliberately NOT `\.js$` in general (that would open arbitrary app code,
+* the exact thing this gate exists to block) — after the `motion` prefix,
+* either nothing (`motion.js`) or `.`/`-` then more (`motion-nav.js`) must
+* lead into `.js`; `app.js` and `motionless-app.js` — a bare `^motion`
+* prefix would wrongly pass this — do not match.
+*/
+const MOTION_JS = /^motion([.-].*)?\.js$/;
+/** True when `filePath` is a write the design agent may make: .html/.css/.md/.json, or a `motion*.js` file. */
+function isAllowedWrite(filePath) {
+	return ALLOWED_WRITE.test(filePath) || MOTION_JS.test(basename(filePath));
+}
+//#endregion
 //#region src/policy/design/design-system-rules.ts
 /**
 * Content rules for design-system.md — the four hard requirements the
@@ -7949,7 +8144,6 @@ function validateDesignSystem(content, corpusCitationOk = false) {
 }
 //#endregion
 //#region src/policy/design/gates.ts
-const ALLOWED_WRITE = /\.(html|css|md|json)$/;
 const EXEMPT_DIRS = [
 	"node_modules/",
 	"dist/",
@@ -7957,7 +8151,7 @@ const EXEMPT_DIRS = [
 	".claude/"
 ];
 const NAV$2 = "mcp__fuse-browser__browser_navigate";
-const SHOT$2 = "mcp__fuse-browser__browser_screenshot";
+const SHOT$1 = "mcp__fuse-browser__browser_screenshot";
 const GEMINI$2 = "mcp__gemini-design__create_frontend";
 const deny = (reason) => ({
 	kind: "block",
@@ -7965,10 +8159,10 @@ const deny = (reason) => ({
 	reason,
 	actions: ["Follow the design pipeline phases (0→identity, 1→inspiration, 2→screenshots, 3→design-system, 4→generate) in order"]
 });
-/** Block the design agent from writing anything but .html/.css/.md/.json. */
+/** Block the design agent from writing anything but .html/.css/.md/.json (+ motion*.js). */
 function htmlCssOnlyGate(filePath) {
-	if (EXEMPT_DIRS.some((d) => filePath.includes(d)) || ALLOWED_WRITE.test(filePath)) return null;
-	return deny("BLOCKED: design-expert can only write .html, .css, .md, and .json files. Framework files (.tsx, .astro, .vue, .swift, .php) must be written by the domain expert (astro-expert, react-expert, etc.) AFTER design validation.");
+	if (EXEMPT_DIRS.some((d) => filePath.includes(d)) || isAllowedWrite(filePath)) return null;
+	return deny("BLOCKED: design-expert can only write .html, .css, .json, .md, and motion*.js files. Framework files (.tsx, .astro, .vue, .swift, .php) must be written by the domain expert (astro-expert, react-expert, etc.) AFTER design validation.");
 }
 /** Block edits to the harness-managed `.design-state-*` files (read-only to the agent). */
 function stateFileGate(filePath) {
@@ -8005,7 +8199,7 @@ function designPassNotice(i, cacheDir) {
 		if (isWrite && fp && !EXEMPT_DIRS.some((d) => fp.includes(d)) && ALLOWED_WRITE.test(fp)) lines.push(`enforce-html-css-only: allowed: ${basename(fp)}`);
 		if (i.tool === NAV$2) lines.push(`check-inspiration-read: pass (${i.url})`);
 		if (i.tool === GEMINI$2 && geminiEnabled()) lines.push("validate-design-system: design-system.md ok");
-		if (isWrite || i.tool === NAV$2 || i.tool === SHOT$2 || i.tool === GEMINI$2) lines.push(`pipeline-gate: phase ${state.currentPhase} ok`);
+		if (isWrite || i.tool === NAV$2 || i.tool === SHOT$1 || i.tool === GEMINI$2) lines.push(`pipeline-gate: phase ${state.currentPhase} ok`);
 	}
 	if (state && i.phase === "post" && isWrite) {
 		if (basename(fp) === "design-system.md") lines.push("validate-design: design-system.md → phase 3");
@@ -8089,9 +8283,9 @@ const SKILLS = `${PLUGINS_DIR}/design-expert/skills`;
 /** Gate writing design-system.md: requires phase >= 2 and the per-mode screenshot quota. */
 function designSystemWriteGate(filePath, state, corpusRequired = false) {
 	if (!filePath.endsWith("design-system.md")) return null;
-	if (state.currentPhase < 2) return deny(`BLOCKED: Cannot write design-system.md at phase ${state.currentPhase}. RECOVERY: 1) Read identity templates from skills/design-system/ 2) Read design-inspiration.md 3) Read the refs-design corpus (README.md + relevant tokens-*.md) with the Read tool 4) Screenshot real sector sites with mcp__fuse-browser__browser_screenshot on a LIVE session (note: browser_shots_batch/browser_site_shots do NOT advance the phase) 5) Then write design-system.md`);
+	if (state.currentPhase < 2) return deny(`BLOCKED: Cannot write design-system.md at phase ${state.currentPhase}. RECOVERY: 1) Read identity templates from skills/design-system/ 2) Read design-inspiration.md 3) Read the refs-design corpus (README.md + relevant tokens-*.md) with the Read tool 4) Screenshot real sector sites with mcp__fuse-browser__browser_screenshot on a LIVE session (browser_shots_batch/browser_site_shots also count, 1 credit per call) 5) Then write design-system.md`);
 	const needed = quotaFor(state.mode, corpusRequired);
-	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} screenshots for mode '${state.mode}'. RECOVERY: 1) Read the refs-design corpus (README.md + tokens-*.md) if not done 2) Take ${needed - state.screenshotsCount} more screenshots of REAL sector sites with mcp__fuse-browser__browser_screenshot (browser_shots_batch/browser_site_shots do NOT count) 3) Use browser_open + browser_navigate + browser_screenshot fullPage:true 4) Then write design-system.md`);
+	if (state.screenshotsCount < needed) return deny(`BLOCKED: ${state.screenshotsCount}/${needed} screenshots for mode '${state.mode}'. RECOVERY: 1) Read the refs-design corpus (README.md + tokens-*.md) if not done 2) Take ${needed - state.screenshotsCount} more screenshots of REAL sector sites with mcp__fuse-browser__browser_screenshot (browser_shots_batch/browser_site_shots also count, 1 credit per call) 3) Use browser_open + browser_navigate + browser_screenshot fullPage:true 4) Then write design-system.md`);
 	return null;
 }
 /** Gate Gemini create_frontend: requires phase >= 3 and a validated design system. */
@@ -8238,7 +8432,6 @@ function designSystemContentGate(i) {
 * @packageDocumentation
 */
 const NAV$1 = "mcp__fuse-browser__browser_navigate";
-const SHOT$1 = "mcp__fuse-browser__browser_screenshot";
 const SCROLL = "mcp__fuse-browser__browser_scroll";
 const GEMINI$1 = "mcp__gemini-design__create_frontend";
 /** Read design-system.md walking up to 6 parents from `cwd` ("" if absent/unreadable). */
@@ -8259,7 +8452,7 @@ function findDesignSystem(cwd) {
 }
 /** Apply a PostToolUse fuse-browser transition to the design state. */
 function recordPost(event, cacheDir, state, corpusRoot = "", corpusRequired = false, cwd = "") {
-	if (event.tool === SHOT$1) saveDesignState(cacheDir, recordScreenshot(state, corpusRequired));
+	if (SHOT_TOOLS.has(event.tool)) saveDesignState(cacheDir, recordScreenshot(state, corpusRequired));
 	else if (event.tool === NAV$1) saveDesignState(cacheDir, recordNavigate(state));
 	else if (event.tool === SCROLL) saveDesignState(cacheDir, recordScroll(state));
 	else if (event.tool === GEMINI$1) saveDesignState(cacheDir, {

package/dist/{hermes-1PUEoY8q.mjs → hermes-H6qePmBC.mjs}

@@ -1,6 +1,6 @@
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-D93HY8dq.mjs";
+import { _ as commandToString, c as readClaudeInput } from "./claude-CEWX-8m9.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/index.mjs

@@ -1,14 +1,14 @@
 import { a as resolveMaxLines, c as storeBudget, i as hookBudget, l as parseEnvInt, n as DEFAULT_STDIN_MAX_BYTES, o as resolveStdinMaxBytes, r as MAX_LINES_ENV_KEY, s as splitTarget, t as DEFAULT_MAX_LINES } from "./limits-DG5pl-5s.mjs";
-import { a as DEFAULT_TTL_SEC, c as ttlLabel, i as parseEnvFile, n as envCandidates, o as TTL_ENV_KEY, r as loadDotenv, s as resolveTtlSec, t as HOME_DIR } from "./dotenv-DoqNlALG.mjs";
+import { c as resolveTtlSec, i as parseEnvFile, l as ttlLabel, n as envCandidates, o as DEFAULT_TTL_SEC, r as loadDotenv, s as TTL_ENV_KEY, t as HOME_DIR } from "./dotenv-BLBkBTww.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./layout-KWoE_Mqn.mjs";
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-B4-MhOy_.mjs";
+import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-9bUzRquQ.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-Bf-EsbDh.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-DYPT8NY-.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-IhHk2KlT.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/{kimi-ChbcU2uI.mjs → kimi-CqLkpg1A.mjs}

@@ -1,6 +1,6 @@
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-D93HY8dq.mjs";
+import { _ as commandToString, c as readClaudeInput } from "./claude-CEWX-8m9.mjs";
 //#region src/adapters/kimi/index.ts
 /**
 * Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,

package/dist/policy/index.mjs

@@ -1,5 +1,5 @@
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-B4-MhOy_.mjs";
+import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "../evaluate-9bUzRquQ.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "../home-state-oUGFB4ds.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-Bf-EsbDh.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "../validate-DYPT8NY-.mjs";
 import "../policy-la_KkjCS.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };

package/dist/{run-D_WchZ3R.mjs → run-B4kqWMA3.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
-import { t as evaluate } from "./evaluate-B4-MhOy_.mjs";
+import { t as evaluate } from "./evaluate-9bUzRquQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/runtime/index.d.mts

@@ -290,6 +290,13 @@ declare function claudeMdKey(prompt: string, ctx: string): string;
  * near-simultaneous double-fire of the SAME turn (identical prompt AND identical
  * block, within {@link DEDUP_WINDOW_MS}) is suppressed. The invariant "CLAUDE.md
  * is emitted on EVERY message" is thus preserved.
+ *
+ * On kimi specifically, the root doc body is dropped from the emitted text:
+ * Kimi loads `<kimiHome>/AGENTS.md` natively at session start (`apex-target.ts`),
+ * so re-injecting its full body on every prompt is redundant terminal noise
+ * (kimi has no model-only hook channel — `runtime/inform.ts`). The APEX
+ * preamble, which is NOT part of `AGENTS.md`, is still emitted in full when the
+ * prompt is dev-shaped; a plain prompt leaves only the notice.
  * @param prompt - The raw user prompt.
  * @param cwd - Project root (for project-type detection).
  * @param id - Harness target id (defaults to "claude-code" — zero-regression default).
@@ -373,6 +380,13 @@ declare function readRules(rulesDir: string): string;
  * with the *actual* `hookEventName` — the spec requires it to match the firing
  * event (a hardcoded "SessionStart" is non-conforming and may be dropped on
  * UserPromptSubmit/SubagentStart).
+ *
+ * On kimi's `UserPromptSubmit` specifically, when the corpus is already fenced
+ * inside `<kimiHome>/AGENTS.md` (native load, {@link rulesInAgentsMd}), only the
+ * notice is emitted — the re-injected corpus would otherwise dump into the
+ * user's terminal on every single prompt for no model-context benefit.
+ * `SessionStart`/`SubagentStart` always keep the full corpus (session bootstrap
+ * / sub-agent contexts need it regardless of the native AGENTS.md load).
  * @param pluginRoot - `CLAUDE_PLUGIN_ROOT` of the claude-rules plugin.
  * @param event - The firing hook event name (e.g. "SessionStart").
  * @param id - Harness target id (defaults to "claude-code" — zero-regression default).

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-KWoE_Mqn.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-oUGFB4ds.mjs";
-import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-DptZbyMP.mjs";
+import { A as trackMcpResearch, At as defaultStateDir, B as generateProjectMap, C as seoPostToolUse, Ct as trimLogFile, D as securityAdvisoryForPatch, Dt as claudeMdKey, E as securityAdvisory, Et as projectContext, F as dispatchAipilot, Ft as loadSecurityState, G as countFiles, H as writeTree, I as dispatchLessons, It as saveSecurityState, J as lessonsArchiveFileFor, K as getFileDesc, L as cartoSessionStart, Lt as securityStateDir, M as trackEnrichment, Mt as trackFile, N as dispatchLifecycle, Nt as normalizeEvent, O as postTrackingSideEffects, Ot as promptSubmitContext, P as aipilotPostToolUse, Pt as isoUtc, R as generateEcosystemMap, Rt as securityStatePath, S as postEditContext, St as removeOldFiles, T as dispatchMemory, Tt as gitContext, U as loadEnriched, V as isProject, W as mergeLines, X as lessonsStateFileFor, Y as lessonsFileFor, _ as preCommitGate, _t as readRules, a as recordActivity, at as saveApexState, b as extractSymbols, bt as pruneEmptyDirs, c as MCP_TTL_MS, ct as trackAgentMemory, d as isMcpTool, dt as validateSolidGate, f as queryOf, ft as checkFileSize, g as gate, gt as injectRules, h as TRIVIAL_BUDGET, ht as solidDetectStart, i as respond, it as cleanupSession, j as trackSkillRead, jt as projectHash, k as trackWatchResearch, kt as taskContext, l as WEBFETCH_TTL_MS, lt as subagentCacheContext, m as REQUIRED_AGENTS, mt as detectSolidProfile, n as activityFor, nt as trackSessionChanges, o as mcpPostStore, ot as logToolFailure, p as DEFAULT_WINDOW_MS, pt as countLoc, q as listChildren, r as handlePre, rt as validateRulesLoaded, s as mcpPreIntercept, st as validateTeammateOutput, t as handleHook, tt as postEditTypescript, u as cacheQueryOf, ut as validateTailwind, v as detectDuplication, vt as runSessionStartCleanups, w as seoPostToolUseResponse, wt as devContext, x as lifecycleStdout, xt as purgeTtlTree, y as dryGate, yt as sessionStartCore, z as writePluginMap, zt as todayUtc } from "../handle-Boj3vnxD.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/dist/{skill-path-DhBGlQe3.mjs → skill-path-DVML3zfp.mjs}

@@ -1,4 +1,4 @@
-import { t as HOME_DIR } from "./dotenv-DoqNlALG.mjs";
+import { t as HOME_DIR } from "./dotenv-BLBkBTww.mjs";
 import { t as detectHarness } from "./harness-BMuLJ9lm.mjs";
 import { l as PLUGINS_DIR } from "./home-state-oUGFB4ds.mjs";
 import { join } from "node:path";

package/dist/{store-Dw08Amqh.mjs → store-5-ZPKb0u.mjs}

@@ -1,9 +1,9 @@
-import { c as ttlLabel } from "./dotenv-DoqNlALG.mjs";
+import { l as ttlLabel } from "./dotenv-BLBkBTww.mjs";
 import { n as fuseHarnessHome } from "./home-state-oUGFB4ds.mjs";
 import { a as writeJsonFile, i as readJsonFile, t as atomicWrite } from "./json-io-DisYd2fb.mjs";
 import { i as resolveSessions } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { t as resolveSkillPath } from "./skill-path-DhBGlQe3.mjs";
+import { t as resolveSkillPath } from "./skill-path-DVML3zfp.mjs";
 import { dirname, join } from "node:path";
 import { appendFileSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHmac, randomBytes } from "node:crypto";

package/dist/tracking/index.mjs

@@ -1,2 +1,2 @@
-import { S as trivialCount, _ as recordBrainstormRequired, b as recordTarget, g as recordAgent, h as emptyTrack, i as withTrack, m as agentsFresh, n as saveTrack, r as trackJournalEnabled, t as loadTrack, v as recordDoc, x as recordTrivialEdit, y as recordRefRead } from "../store-Dw08Amqh.mjs";
+import { S as trivialCount, _ as recordBrainstormRequired, b as recordTarget, g as recordAgent, h as emptyTrack, i as withTrack, m as agentsFresh, n as saveTrack, r as trackJournalEnabled, t as loadTrack, v as recordDoc, x as recordTrivialEdit, y as recordRefRead } from "../store-5-ZPKb0u.mjs";
 export { agentsFresh, emptyTrack, loadTrack, recordAgent, recordBrainstormRequired, recordDoc, recordRefRead, recordTarget, recordTrivialEdit, saveTrack, trackJournalEnabled, trivialCount, withTrack };

package/dist/{validate-Bf-EsbDh.mjs → validate-DYPT8NY-.mjs}

@@ -1,10 +1,10 @@
 import { a as resolveMaxLines, c as storeBudget, i as hookBudget } from "./limits-DG5pl-5s.mjs";
-import { c as ttlLabel, t as HOME_DIR } from "./dotenv-DoqNlALG.mjs";
-import { A as moduleAwarePath, S as isHooksPath, T as isStoresPath, _ as rolloutVerdict, at as DEV_KEYWORDS, it as maskCommentsOnly, nt as projectCaps, rt as maskCommentsAndStrings, tt as nearestManifestDir, x as isComponentsPath, y as declaresInterface } from "./evaluate-B4-MhOy_.mjs";
+import { l as ttlLabel, t as HOME_DIR } from "./dotenv-BLBkBTww.mjs";
+import { A as moduleAwarePath, S as isHooksPath, T as isStoresPath, _ as rolloutVerdict, at as DEV_KEYWORDS, it as maskCommentsOnly, nt as projectCaps, rt as maskCommentsAndStrings, tt as nearestManifestDir, x as isComponentsPath, y as declaresInterface } from "./evaluate-9bUzRquQ.mjs";
 import { d as countFrameworkCodeLines, l as PLUGINS_DIR, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { t as routeReferences } from "./router-PKVNBHge.mjs";
-import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-DhBGlQe3.mjs";
+import { n as findMarketplacePlugins, r as readPluginMeta, t as resolveSkillPath } from "./skill-path-DVML3zfp.mjs";
 import { dirname, extname, join, resolve } from "node:path";
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { homedir } from "node:os";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fusengine/harness",
-	"version": "0.1.85",
+	"version": "0.1.87",
 	"description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
 	"type": "module",
 	"module": "src/index.ts",