@fusengine/harness 0.1.89 → 0.1.91

package/dist/{hermes-kP6NUQlG.mjs → hermes-B9-p_3IF.mjs}

@@ -1,6 +1,7 @@
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-5bC8TDAz.mjs";
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { c as readClaudeInput } from "./claude-Ckv2_TgP.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/{index-DBgnIZn9.d.mts → index-B8PG82su.d.mts}

@@ -1,4 +1,4 @@
-import { t as Prompt } from "./types-C0-igRKr.mjs";
+import { t as Prompt } from "./types-Bh0jEF3_.mjs";
 import { t as AuthEntry } from "./doc-helpers-BGCzP9VF.mjs";
 import { t as RefMeta } from "./types-CY5qT2X1.mjs";
 //#region src/policy/detect-project.d.ts

package/dist/{index-D4C2-IIc.d.mts → index-SmKYkk2N.d.mts}

@@ -1,4 +1,4 @@
-import { t as Prompt } from "./types-C0-igRKr.mjs";
+import { t as Prompt } from "./types-Bh0jEF3_.mjs";
 //#region src/adapters/claude/index.d.ts
 /** Subset of the Claude Code hook stdin payload we consume. */
 interface ClaudeHookInput {

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-C0-igRKr.mjs";
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-Bh0jEF3_.mjs";
 import { _ as queryHash, a as cacheLookupSubstringMeta, c as mcpCacheKey, d as extractText, f as IndexSummary, g as jaccardSimilar, h as compactMarkdown, i as cacheLookupSubstring, l as mcpCacheWrite, m as summarizeIndex, n as cacheLookup, o as cachePath, p as loadIndex, r as cacheLookupMeta, s as cacheStore, t as CacheHit, u as webfetchCacheWrite } from "./index-DhmV2MPh.mjs";
 import { _ as DEFAULT_TTL_SEC, a as ProjectLayout, b as ttlLabel, c as projectLayout, d as MAX_LINES_ENV_KEY, f as hookBudget, g as storeBudget, h as splitTarget, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as resolveStdinMaxBytes, n as envCandidates, o as STATE_GITIGNORE, p as resolveMaxLines, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as DEFAULT_STDIN_MAX_BYTES, v as TTL_ENV_KEY, x as parseEnvInt, y as resolveTtlSec } from "./index-oXXPs2xl.mjs";
 import { i as HarnessVia, n as HarnessInfo, r as HarnessMode, t as HarnessId } from "./types-DvXTI71X.mjs";
@@ -6,7 +6,7 @@ import { n as detectMode, r as modeFor, t as detectHarness } from "./index-CigBu
 import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-BGCzP9VF.mjs";
 import { t as incrementTrivialEditCounter } from "./index-84heAAm_.mjs";
 import { a as compactJson, i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./index-p9fLrSOD.mjs";
-import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "./index-DBgnIZn9.mjs";
+import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "./index-B8PG82su.mjs";
 import { n as RouteResult, r as ScoredRef, t as RefMeta } from "./types-CY5qT2X1.mjs";
 import { a as ReminderState, c as readState, d as throttleMs, i as registryFile, l as setStateField, n as addRoot, o as lessonsFileFor, r as readRoots, s as nowStamp, t as ensureMemoryGitignore, u as stateFileFor } from "./index-DLYhervv.mjs";
 import { a as globToRe, i as scoreReferences, n as toRefMeta, o as parseFrontmatter, r as routeReferences, t as loadRefs } from "./index-DEfz82BP.mjs";

package/dist/index.mjs

@@ -4,11 +4,11 @@ import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "./lay
 import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { i as walkUpFor, n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-3kk7gCOp.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-BMuLJ9lm.mjs";
-import { $ as matchPatterns, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as CRITICAL_PATTERNS, I as SAFE_PREFIXES, J as GIT_BLOCKED, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as isRalphMode, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as securityGuard, V as ASK_PATTERNS, X as RALPH_SAFE, Y as PROJECT_INSTALL, Z as SYSTEM_INSTALL, a as registerGuard, at as DEV_KEYWORDS, b as interfaceDeclLevel, c as GO_DECL_RE, ct as isApexCommand, d as PY_MODEL_RE, et as detectFramework, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsOnly, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as requiredArchSkill, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as detectModularArchitecture, p as SWIFT_PROTO_RE, q as GIT_ASK, r as GUARDS, rt as maskCommentsAndStrings, s as installGuard, st as detectProjectType, t as evaluate, u as PHP_DECL_RE, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-C1VSI5pb.mjs";
+import { $ as isRalphMode, B as protectedPathGuard, C as isInterfacesPath, D as isVendorPath, E as isTypesPath, F as FILE_REDIRECT, H as ASK_PATTERNS, I as SAFE_PREFIXES, J as GIT_ASK, L as SESSION_STATE_FRAGMENT, M as ASK_WRITERS, N as CODE_MUTATORS, O as langOfPath, P as CODE_REDIRECT, Q as SYSTEM_INSTALL, R as PROTECTED_FRAGMENTS, S as isHooksPath, T as isStoresPath, U as CRITICAL_PATTERNS, W as securityGuard, X as PROJECT_INSTALL, Y as GIT_BLOCKED, Z as RALPH_SAFE, a as registerGuard, at as maskCommentsOnly, b as interfaceDeclLevel, c as GO_DECL_RE, ct as detectProjectType, d as PY_MODEL_RE, et as matchPatterns, f as RUST_DECL_RE, h as interfaceSeparationGuard, i as clearUserGuards, it as maskCommentsAndStrings, j as bashWriteGuard, k as lexProfileOf, l as JAVA_DECL_RE, lt as isApexCommand, m as TS_DECL_RE, n as FAIL_CLOSED, o as runGuards, ot as DEV_KEYWORDS, p as SWIFT_PROTO_RE, r as GUARDS, s as installGuard, st as detectModularArchitecture, t as evaluate, tt as detectFramework, u as PHP_DECL_RE, ut as requiredArchSkill, v as declaresExportedTypeAlias, w as isQueryPath, x as isComponentsPath, y as declaresInterface, z as PROTECTED_GIT_RE } from "./evaluate-CMiIqHeH.mjs";
 import { d as countFrameworkCodeLines, f as countLines, l as PLUGINS_DIR, p as evaluateFileSize, u as SOLID_REF } from "./home-state-oUGFB4ds.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-CWZegVdR.mjs";
 import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-PKVNBHge.mjs";
-import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-DZFtAbLP.mjs";
+import { A as importsTanstackQuery, B as APEX_GATES, C as detectRequiredSkills, D as frameworkSolidGate, E as SKILL_TRIGGERS, G as evaluateApex, H as PRE_AUTH_GATES, I as MAX_EXA_RESULTS, K as freshnessGate, L as MAX_TOKENS, M as countStores, N as declaresStore, O as declaresCustomHook, R as capVerbosity, S as parseField, T as usesTailwindUtilities, U as brainstormGate, V as POST_AUTH_GATES, W as docConsultedGate, _ as detectClaudeMdProjectType, a as firstHeading, c as EXCLUDE_DIRS, d as buildApexTaskInjection, f as loadApexTaskState, g as buildClaudeMdContext, h as buildApexInstruction, i as firstComment, j as queryCapActive, k as declaresQueryHook, l as PROJECT_INDICATORS, m as DEV_VERBS, n as missingSeoElements, o as parseEnrichment, q as solidReadGate, r as descFromText, s as parseEntry, t as isHtmlLike, u as buildApexTaskContext, w as skillTriggerGate, x as parseBodyDesc, z as detectCreationIntent } from "./validate-KjZ1X9tH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./registry-IhHk2KlT.mjs";
 import { a as cacheLookupSubstring, c as cacheStore, d as loadIndex, f as summarizeIndex, h as queryHash, i as cacheLookupMeta, l as mcpCacheKey, m as jaccardSimilar, n as webfetchCacheWrite, o as cacheLookupSubstringMeta, p as compactMarkdown, r as cacheLookup, s as cachePath, t as mcpCacheWrite, u as extractText } from "./mcp-store-BkBDmuxN.mjs";

package/dist/init/index.d.mts

@@ -15,7 +15,7 @@ interface InitFile {
 declare function claudeInit(command: string): InitFile[];
 /** Codex CLI: `.codex/hooks.json` (Claude-compatible shape). */
 declare function codexInit(command: string): InitFile[];
-/** Cursor: `.cursor/hooks.json` (version 1) — shell + tool gate + file-edit observe. */
+/** Cursor: `.cursor/hooks.json` (version 1) — supported pre gates and post observers. */
 declare function cursorInit(command: string): InitFile[];
 /** Gemini CLI: `.gemini/settings.json` — BeforeTool(edits) + AfterTool(all, regex). */
 declare function geminiInit(command: string): InitFile[];

package/dist/init/index.mjs

@@ -1,2 +1,2 @@
-import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-TAXNRSpD.mjs";
+import { a as codexInit, i as clineInit, n as writeInitFile, o as cursorInit, r as claudeInit, s as geminiInit, t as initFor } from "../run-GHAMqcOn.mjs";
 export { claudeInit, clineInit, codexInit, cursorInit, geminiInit, initFor, writeInitFile };

package/dist/{kimi-D6X7b8wF.mjs → kimi-G2wcSh5-.mjs}

@@ -1,6 +1,7 @@
-import { t as evaluate } from "./evaluate-C1VSI5pb.mjs";
+import { t as evaluate } from "./evaluate-CMiIqHeH.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-5bC8TDAz.mjs";
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { c as readClaudeInput } from "./claude-Ckv2_TgP.mjs";
 //#region src/adapters/kimi/index.ts
 /**
 * Kimi Code CLI adapter (hook-mode). Moonshot AI's Kimi Code CLI (v0.27.0,

package/dist/normalize-BjG6unTj.mjs

@@ -0,0 +1,317 @@
+import { t as commandToString } from "./command-string-CALMTnwN.mjs";
+import { isAbsolute, normalize, relative } from "node:path";
+import { realpathSync } from "node:fs";
+//#region src/adapters/cursor/events.ts
+const EVENT_CONTRACTS = {
+	sessionStart: {
+		phase: "pre",
+		lifecycle: "SessionStart",
+		response: "session-context",
+		blockable: false,
+		known: true
+	},
+	sessionEnd: {
+		phase: "post",
+		lifecycle: "SessionEnd",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeSubmitPrompt: {
+		phase: "pre",
+		lifecycle: "UserPromptSubmit",
+		response: "submit-control",
+		blockable: true,
+		known: true
+	},
+	preCompact: {
+		phase: "pre",
+		lifecycle: "PreCompact",
+		response: "compact-notice",
+		blockable: false,
+		known: true
+	},
+	subagentStart: {
+		phase: "pre",
+		lifecycle: "SubagentStart",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	subagentStop: {
+		phase: "post",
+		lifecycle: "SubagentStop",
+		response: "followup",
+		blockable: false,
+		known: true
+	},
+	preToolUse: {
+		phase: "pre",
+		lifecycle: "PreToolUse",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	postToolUse: {
+		phase: "post",
+		lifecycle: "PostToolUse",
+		response: "post-context",
+		blockable: false,
+		known: true
+	},
+	postToolUseFailure: {
+		phase: "post",
+		lifecycle: "PostToolUseFailure",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeShellExecution: {
+		phase: "pre",
+		lifecycle: "BeforeShellExecution",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterShellExecution: {
+		phase: "post",
+		lifecycle: "AfterShellExecution",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeMCPExecution: {
+		phase: "pre",
+		lifecycle: "BeforeMCPExecution",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterMCPExecution: {
+		phase: "post",
+		lifecycle: "AfterMCPExecution",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeReadFile: {
+		phase: "pre",
+		lifecycle: "BeforeReadFile",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterFileEdit: {
+		phase: "post",
+		lifecycle: "AfterFileEdit",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	beforeTabFileRead: {
+		phase: "pre",
+		lifecycle: "BeforeTabFileRead",
+		response: "permission",
+		blockable: true,
+		known: true
+	},
+	afterTabFileEdit: {
+		phase: "post",
+		lifecycle: "AfterTabFileEdit",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	afterAgentResponse: {
+		phase: "post",
+		lifecycle: "AfterAgentResponse",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	afterAgentThought: {
+		phase: "post",
+		lifecycle: "AfterAgentThought",
+		response: "neutral",
+		blockable: false,
+		known: true
+	},
+	stop: {
+		phase: "post",
+		lifecycle: "Stop",
+		response: "followup",
+		blockable: false,
+		known: true
+	},
+	workspaceOpen: {
+		phase: "pre",
+		lifecycle: "WorkspaceOpen",
+		response: "plugin-paths",
+		blockable: false,
+		known: true
+	}
+};
+const UNKNOWN_EVENT = {
+	phase: "post",
+	lifecycle: null,
+	response: "neutral",
+	blockable: false,
+	known: false
+};
+/** Return explicit routing and response metadata for a Cursor event name. */
+function cursorEventContract(eventName) {
+	return EVENT_CONTRACTS[eventName] ?? UNKNOWN_EVENT;
+}
+//#endregion
+//#region src/adapters/cursor/context.ts
+/** Preserve a Cursor path value only when it is non-empty and NUL-free. */
+function cursorPath(value) {
+	return typeof value === "string" && value.length > 0 && !value.includes("\0") ? value : void 0;
+}
+/** Validate and normalize an absolute path supplied by Cursor. */
+function cursorAbsolutePath(value) {
+	const candidate = cursorPath(value);
+	if (!candidate || !isAbsolute(candidate)) return void 0;
+	const path = normalize(candidate);
+	try {
+		return realpathSync.native(path);
+	} catch {
+		return path;
+	}
+}
+/** Preserve distinct, validated Cursor workspace roots in wire order. */
+function cursorWorkspaceRoots(value) {
+	if (!Array.isArray(value)) return [];
+	const roots = value.map(cursorAbsolutePath).filter((root) => root !== void 0);
+	return [...new Set(roots)];
+}
+function contains(root, filePath) {
+	const rel = relative(root, filePath);
+	return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+/** Select Cursor's project scope without replacing a valid payload cwd. */
+function cursorProjectCwd(cwd, workspaceRoots, filePath, fallback) {
+	if (cwd) return cwd;
+	if (filePath) {
+		const matches = workspaceRoots.filter((root) => contains(root, filePath));
+		if (matches.length > 0) return matches.sort((a, b) => b.length - a.length)[0];
+	}
+	return workspaceRoots[0] ?? fallback;
+}
+//#endregion
+//#region src/adapters/cursor/normalize.ts
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function str(value) {
+	return typeof value === "string" ? value : void 0;
+}
+function inputRecord(value) {
+	const direct = record(value);
+	if (direct || typeof value !== "string") return direct;
+	try {
+		return record(JSON.parse(value));
+	} catch {
+		return;
+	}
+}
+const MCP_ROOT_FIELDS = [
+	"mcp_server_name",
+	"mcp_server_url",
+	"url",
+	"result_json",
+	"duration"
+];
+function cursorMcpInput(raw, input) {
+	const merged = { ...input };
+	for (const field of MCP_ROOT_FIELDS) if (Object.hasOwn(raw, field)) merged[field] = raw[field];
+	return merged;
+}
+function sanitizedCursorInput(input) {
+	const safe = { ...input };
+	if (typeof safe.file_path === "string" && cursorPath(safe.file_path) === void 0) delete safe.file_path;
+	if (typeof safe.path === "string" && cursorPath(safe.path) === void 0) delete safe.path;
+	if (Object.hasOwn(safe, "cwd")) {
+		const cwd = cursorAbsolutePath(safe.cwd);
+		if (cwd) safe.cwd = cwd;
+		else delete safe.cwd;
+	}
+	if (Object.hasOwn(safe, "workspace_roots")) if (Array.isArray(safe.workspace_roots)) safe.workspace_roots = cursorWorkspaceRoots(safe.workspace_roots);
+	else delete safe.workspace_roots;
+	return safe;
+}
+function cursorToolName(raw, event, tool, hasCommand) {
+	if (hasCommand) return "Bash";
+	const server = str(raw.mcp_server_name)?.trim().replace(/[^A-Za-z0-9_-]+/g, "_");
+	if (/^(before|after)MCPExecution$/i.test(event) && server && tool && !tool.startsWith("mcp__")) return `mcp__${server}__${tool}`;
+	if (tool === "Write") return "Edit";
+	return tool ?? "";
+}
+function cursorCommands(raw, input) {
+	const candidates = [commandToString(raw.command), commandToString(input.command)].filter((candidate) => candidate !== void 0);
+	return [...new Set(candidates)];
+}
+/**
+* Extract one Cursor hook payload into the shared runtime shape.
+*
+* @param payload - Cursor hook stdin payload.
+* @returns Cursor-specific phase, tool, command, and edit fields.
+*/
+function extractCursorEvent(payload) {
+	const raw = payload;
+	const hookEvent = str(raw.hook_event_name) ?? "";
+	const parsedInput = inputRecord(raw.tool_input);
+	const input = sanitizedCursorInput((parsedInput && /^(before|after)MCPExecution$/i.test(hookEvent) ? cursorMcpInput(raw, parsedInput) : parsedInput) ?? raw);
+	const contract = cursorEventContract(hookEvent);
+	const metadata = {
+		eventName: hookEvent,
+		lifecycleEvent: contract.lifecycle,
+		responseKind: contract.response,
+		blockable: contract.blockable,
+		cwd: cursorAbsolutePath(raw.cwd),
+		workspaceRoots: cursorWorkspaceRoots(raw.workspace_roots)
+	};
+	if (!contract.known) return {
+		...metadata,
+		phase: contract.phase,
+		tool: "",
+		input
+	};
+	const afterFileEdit = /^afterFileEdit$/i.test(hookEvent);
+	const beforeReadFile = /^beforeReadFile$/i.test(hookEvent);
+	const beforeTabFileRead = /^beforeTabFileRead$/i.test(hookEvent);
+	const edits = Array.isArray(raw.edits) ? raw.edits.map(record).filter((edit) => edit !== void 0) : [];
+	const filePath = cursorPath(raw.file_path);
+	if (filePath && edits.length > 0) {
+		const files = edits.map((edit) => ({
+			filePath,
+			oldString: str(edit.old_string),
+			content: str(edit.new_string) ?? "",
+			op: "update"
+		}));
+		return {
+			...metadata,
+			phase: contract.phase,
+			tool: "Edit",
+			input,
+			filePath,
+			content: files.map((file) => file.content).join("\n"),
+			files
+		};
+	}
+	const commands = cursorCommands(raw, input);
+	const command = commands[0];
+	return {
+		...metadata,
+		phase: contract.phase,
+		tool: afterFileEdit ? "Edit" : beforeReadFile || beforeTabFileRead ? "Read" : cursorToolName(raw, hookEvent, str(raw.tool_name), command !== void 0),
+		input,
+		filePath: cursorPath(input.file_path) ?? cursorPath(input.path),
+		content: str(input.content) ?? str(input.new_string),
+		oldString: str(input.old_string),
+		command,
+		commandCandidates: /^beforeMCPExecution$/i.test(hookEvent) && commands.length > 0 ? commands : void 0
+	};
+}
+//#endregion
+export { cursorProjectCwd as n, cursorEventContract as r, extractCursorEvent as t };

package/dist/permission-mode-B-SFyR0X.mjs

@@ -0,0 +1,226 @@
+//#region src/adapters/codex/apply-patch.ts
+const BEGIN = "*** Begin Patch";
+const END = "*** End Patch";
+const ADD = "*** Add File: ";
+const DEL = "*** Delete File: ";
+const UPD = "*** Update File: ";
+const MOVE = "*** Move to: ";
+const EOF = "*** End of File";
+const ENV = "*** Environment ID: ";
+/**
+* Parse a Codex freeform patch into its per-file changes. Lenient on whitespace
+* around structural markers (as Codex's own parser is); returns `[]` when no
+* recognizable hunk is present (malformed input fails open, not closed).
+* @param text - Raw patch body from `tool_input.command`.
+* @returns One {@link PatchedFile} per Add/Update/Delete hunk, in order.
+*/
+function parseApplyPatch(text) {
+	const files = [];
+	let cur = null;
+	let buf = [];
+	const flush = () => {
+		if (cur) {
+			cur.content = buf.join("\n");
+			files.push(cur);
+		}
+		cur = null;
+		buf = [];
+	};
+	for (const line of text.split("\n")) {
+		const marker = line.trimStart();
+		if (marker === BEGIN || marker.startsWith(ENV)) continue;
+		if (marker === END) {
+			flush();
+			continue;
+		}
+		if (marker.startsWith(ADD)) {
+			flush();
+			cur = {
+				path: marker.slice(14).trim(),
+				content: "",
+				op: "add"
+			};
+			continue;
+		}
+		if (marker.startsWith(DEL)) {
+			flush();
+			files.push({
+				path: marker.slice(17).trim(),
+				content: "",
+				op: "delete"
+			});
+			continue;
+		}
+		if (marker.startsWith(UPD)) {
+			flush();
+			cur = {
+				path: marker.slice(17).trim(),
+				content: "",
+				op: "update"
+			};
+			continue;
+		}
+		if (marker.startsWith(MOVE)) {
+			if (cur) cur.path = marker.slice(13).trim();
+			continue;
+		}
+		if (marker === EOF || !cur) continue;
+		if (cur.op === "add") {
+			if (line.startsWith("+")) buf.push(line.slice(1));
+			continue;
+		}
+		if (line.startsWith("@@")) continue;
+		if (line.startsWith("+")) buf.push(line.slice(1));
+		else if (line.startsWith("-")) continue;
+		else buf.push(line.startsWith(" ") ? line.slice(1) : line);
+	}
+	flush();
+	return files;
+}
+//#endregion
+//#region src/runtime/codex-shell-tool.ts
+/**
+* @module codex-shell-tool
+* Canonicalizes a Codex-only shell `tool_name` alias to `"Bash"`, so every
+* existing `tool === "Bash"` consumer (activity credit, explore-tools
+* classification, the protected-path guard, the design corpus read gate, …)
+* treats a Code Mode exec dispatch exactly like a native Bash call — no
+* per-consumer change needed.
+*
+* A Code Mode-wrapped call (`functions.exec` -> `tools.exec_command(...)`)
+* surfaces via the generic `CoreToolRuntime` hook default (openai/codex#23757,
+* commit 5c20513), which keeps the raw function-tool name `"exec_command"`
+* verbatim — unlike a DIRECT `exec_command` dispatch, which
+* `ExecCommandHandler`'s own `pre_tool_use_payload` override re-labels
+* `"Bash"` (`tool_name: HookToolName::bash()`). This is the exact call chain
+* a real Codex CLI 0.146.0 session was observed emitting for a `sed -n` skill
+* read. Only ONE alias is confirmed here — `ToolName::plain("exec_command")`
+* in `core/src/tools/handlers/unified_exec/exec_command.rs`; `shell`,
+* `unified_exec`, `local_shell`, and `shell_command` were audited but not
+* evidenced as a distinct hook `tool_name` value, so they are deliberately
+* left out rather than guessed.
+* @packageDocumentation
+*/
+/** Codex `tool_name` values that are a shell execution but not literally `"Bash"`. */
+const CODEX_SHELL_TOOL_ALIASES = /* @__PURE__ */ new Set(["exec_command"]);
+/**
+* Canonicalize a Codex-only shell tool alias to `"Bash"`. Scoped to
+* `id === "codex"` — every other harness id, and every non-aliased tool
+* name, passes through unchanged (see `test/codex-shell-read-credit.test.ts`
+* for the non-regression proof).
+* @param id - Harness adapter id (e.g. "codex", "claude-code", "kimi").
+* @param tool - Raw `tool_name` from the hook payload.
+*/
+function canonicalizeCodexShellTool(id, tool) {
+	return id === "codex" && CODEX_SHELL_TOOL_ALIASES.has(tool) ? "Bash" : tool;
+}
+//#endregion
+//#region src/runtime/mcp-tool-name.ts
+/**
+* @module mcp-tool-name
+* Canonicalizes a Codex-only MCP `tool_name` alias back to its original
+* hyphenated form, so every existing dash-keyed consumer (`SHOT_TOOLS`,
+* `RESEARCH_TOOLS`/`classifyExplore`, `docSourceOf`, the design-pipeline
+* `NAV`/`SCROLL`/`GEMINI` constants, …) recognizes a Codex MCP call exactly
+* like the same call on Claude/Kimi/Cursor/Cline/Gemini — no per-consumer
+* change needed.
+*
+* Codex CLI globally rewrites every `-` to `_` across the FULL qualified MCP
+* tool identifier before it ever reaches a hook, in `sanitize_responses_api_tool_name()`
+* (`codex-rs/core/src/mcp_connection_manager.rs`, introduced by
+* openai/codex#14605 — "Normalize MCP tool names to code-mode safe form",
+* code-mode forbids `-` in identifiers). openai/codex#18385's own
+* `SCENARIO_DASH_TOOL` test proves the REWRITTEN form is what reaches hooks:
+* the `echo-tool` tool of server `rmcp` is delivered to hooks as
+* `mcp__rmcp__echo_tool`. Confirmed independently in THIS repo's terrain:
+* `~/.codex/config.toml` declares `[mcp_servers.fuse-browser]` (dash) while
+* Codex session logs and this harness's own dual-marketplace hook payloads
+* (`~/.codex/plugins/.../hooks.json` matchers) observe `mcp__fuse_browser__*`
+* (underscore) — Claude never emits that form (0 occurrences across its
+* transcripts vs 137x the dash form).
+*
+* The rewrite is deliberately NOT undone with a generic `_` -> `-` regex:
+* openai/codex#15832 and #15565 document it as NON-INVERSIBLE — a server
+* literally named `autok_local` collides with a dash-named `autok-local`
+* once both pass through the same rewrite, and OpenAI's own fix was a closed
+* canonical table, never a general regex. The SAME ambiguity exists on our
+* side: a generic reversal would corrupt tool segments that legitimately
+* contain an underscore already (`browser_screenshot`, `node_repl`,
+* `build_sim`, …). So this module only reverses the FOUR entries proven
+* above to matter to this repo's gates — every other segment passes through
+* untouched.
+* @packageDocumentation
+*/
+/**
+* Codex-mangled MCP server segment -> its real (dash) server name. Closed set
+* — see module doc. `Object.create(null)` (never a `{}` literal): `serverKey`
+* is an attacker-influenced string (an MCP server can register itself as
+* `"__proto__"`/`"constructor"`/`"toString"`), and a `{}`-literal lookup by
+* such a key returns the INHERITED `Object.prototype` member instead of
+* `undefined` — an object/function, so `?? serverKey` never falls back and
+* the result silently corrupts to `"mcp__[object Object]__…"` (proven in
+* `test/mcp-tool-name.test.ts`, prototype-pollution-read case). A null-
+* prototype object has no inherited members, so every lookup outside the two
+* literal keys below is a clean miss.
+*/
+const SERVER_ALIASES = Object.assign(Object.create(null), {
+	fuse_browser: "fuse-browser",
+	gemini_design: "gemini-design"
+});
+/**
+* Codex-mangled MCP tool segment -> its real (dash) tool name. Both entries
+* are `context7`-exclusive tool names — applied ONLY when the canonical
+* server is `"context7"` (see the explicit guard in
+* {@link canonicalizeMcpToolName}), never globally. A same-named tool on any
+* other server (e.g. a hypothetical `exa__query_docs`) passes through
+* untouched: openai/codex#15832 documents exactly this class of collision as
+* the reason the rewrite must stay a closed, scoped table, never a blanket
+* one. Closed set, same null-prototype rationale as {@link SERVER_ALIASES}.
+*/
+const TOOL_ALIASES = Object.assign(Object.create(null), {
+	query_docs: "query-docs",
+	resolve_library_id: "resolve-library-id"
+});
+/**
+* Canonicalize a Codex-only MCP tool-name alias to its dash form. Scoped to
+* `id === "codex"` — every other harness id passes through unchanged. The
+* server segment is rewritten via the closed {@link SERVER_ALIASES} table;
+* the tool segment is rewritten via {@link TOOL_ALIASES} ONLY when the
+* (already-resolved) canonical server is `"context7"` — every other server's
+* tool segment is left untouched even if it happens to share a name with a
+* context7 tool. Every other `mcp__<server>__<tool>` segment (or non-MCP
+* tool name) is returned byte-identical (see `test/mcp-tool-name.test.ts`
+* for the non-regression proof across ids, trap tool names, and the
+* server-scoping cases).
+* @param id - Harness adapter id (e.g. "codex", "claude-code", "kimi").
+* @param tool - Raw `tool_name` from the hook payload.
+*/
+function canonicalizeMcpToolName(id, tool) {
+	if (id !== "codex") return tool;
+	const parts = tool.split("__");
+	if (parts.length < 3 || parts[0] !== "mcp") return tool;
+	const serverKey = parts[1] ?? "";
+	const toolKey = parts.slice(2).join("__");
+	const server = SERVER_ALIASES[serverKey] ?? serverKey;
+	return `mcp__${server}__${server === "context7" ? TOOL_ALIASES[toolKey] ?? toolKey : toolKey}`;
+}
+//#endregion
+//#region src/adapters/codex/permission-mode.ts
+/**
+* Codex maps `AskForApproval::Never` -> `permission_mode: "bypassPermissions"`
+* in its hook payload (codex-rs/core/src/hook_runtime.rs::hook_permission_mode)
+* — the only value that isolates `never`; the other three approval policies
+* (`untrusted`, `on-failure`, `on-request`) all collapse to `"default"`.
+* Verified at openai/codex@342e4d4b, hook_runtime.rs run_pre_tool_use_hooks +
+* pre_tool_use.rs PreToolUseRequest. Undocumented implementation detail, not
+* a public contract — see the mapping-regression test that pins this string.
+* @param permissionMode - The payload's `permission_mode` field, if present.
+* @returns True only on an EXACT match — fail-closed. A near-miss
+* (`"BypassPermissions"`, `"bypassPermissions "`, or a substring match) must
+* never accidentally grant the neverApproval exemption.
+*/
+function isBypassPermissions(permissionMode) {
+	return permissionMode === "bypassPermissions";
+}
+//#endregion
+export { parseApplyPatch as i, canonicalizeMcpToolName as n, canonicalizeCodexShellTool as r, isBypassPermissions as t };

package/dist/policy/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "../index-DBgnIZn9.mjs";
+import { $ as detectCreationIntent, $t as countFrameworkCodeLines, A as TreeEntry, At as APEX_GATES, B as loadApexTaskState, Bt as evaluate, C as maskCommentsAndStrings, Ct as protectedPathGuard, D as descFromText, Dt as securityGuard, E as missingSeoElements, Et as LabeledPattern, F as EXCLUDE_DIRS, Ft as brainstormGate, G as detectRequiredSkills, Gt as PROJECT_INSTALL, H as buildApexInstruction, Ht as PolicyResult, I as PROJECT_INDICATORS, It as docConsultedGate, J as SKILL_TRIGGERS, Jt as isRalphMode, K as skillTriggerGate, Kt as RALPH_SAFE, L as ApexTaskState, Lt as evaluateApex, M as parseEntry, Mt as ApexGate, N as parseBodyDesc, Nt as POST_AUTH_GATES, O as firstComment, Ot as Guard, P as parseField, Pt as PRE_AUTH_GATES, Q as capVerbosity, Qt as SOLID_REF, R as buildApexTaskContext, Rt as freshnessGate, S as LexProfile, St as PROTECTED_GIT_RE, T as isHtmlLike, Tt as CRITICAL_PATTERNS, U as buildClaudeMdContext, Ut as GIT_ASK, V as DEV_VERBS, Vt as PolicyContext, W as detectClaudeMdProjectType, Wt as GIT_BLOCKED, X as MAX_EXA_RESULTS, Xt as FileSizeVerdict, Y as frameworkSolidGate, Yt as matchPatterns, Z as MAX_TOKENS, Zt as PLUGINS_DIR, _ as isStoresPath, _t as CODE_REDIRECT, a as countStores, an as ProjectType, at as installGuard, b as langOfPath, bt as SESSION_STATE_FRAGMENT, c as InterfaceDeclLevel, cn as isApexCommand, ct as PHP_DECL_RE, d as interfaceDeclLevel, dt as SWIFT_PROTO_RE, en as countLines, et as FAIL_CLOSED, f as LangFamily, ft as TS_DECL_RE, g as isQueryPath, gt as CODE_MUTATORS, h as isInterfacesPath, ht as ASK_WRITERS, i as StoreLib, in as ModularArchitecture, it as runGuards, j as parseEnrichment, jt as ApexContext, k as firstHeading, kt as GuardContext, l as declaresExportedTypeAlias, ln as requiredArchSkill, lt as PY_MODEL_RE, m as isHooksPath, mt as bashWriteGuard, n as importsTanstackQuery, nn as detectFramework, nt as clearUserGuards, o as declaresStore, on as detectModularArchitecture, ot as GO_DECL_RE, p as isComponentsPath, pt as interfaceSeparationGuard, q as usesTailwindUtilities, qt as SYSTEM_INSTALL, r as queryCapActive, rn as DEV_KEYWORDS, rt as registerGuard, s as declaresCustomHook, sn as detectProjectType, st as JAVA_DECL_RE, t as declaresQueryHook, tn as evaluateFileSize, tt as GUARDS, u as declaresInterface, ut as RUST_DECL_RE, v as isTypesPath, vt as FILE_REDIRECT, w as maskCommentsOnly, wt as ASK_PATTERNS, x as lexProfileOf, xt as PROTECTED_FRAGMENTS, y as isVendorPath, yt as SAFE_PREFIXES, z as buildApexTaskInjection, zt as solidReadGate } from "../index-B8PG82su.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, ApexContext, ApexGate, ApexTaskState, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, DEV_VERBS, EXCLUDE_DIRS, FAIL_CLOSED, FILE_REDIRECT, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, Guard, GuardContext, InterfaceDeclLevel, JAVA_DECL_RE, LabeledPattern, LangFamily, LexProfile, MAX_EXA_RESULTS, MAX_TOKENS, ModularArchitecture, PHP_DECL_RE, PLUGINS_DIR, POST_AUTH_GATES, PRE_AUTH_GATES, PROJECT_INDICATORS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PROTECTED_GIT_RE, PY_MODEL_RE, type PolicyContext, type PolicyResult, ProjectType, RALPH_SAFE, RUST_DECL_RE, SAFE_PREFIXES, SESSION_STATE_FRAGMENT, SKILL_TRIGGERS, SOLID_REF, SWIFT_PROTO_RE, SYSTEM_INSTALL, StoreLib, TS_DECL_RE, TreeEntry, bashWriteGuard, brainstormGate, buildApexInstruction, buildApexTaskContext, buildApexTaskInjection, buildClaudeMdContext, capVerbosity, clearUserGuards, countFrameworkCodeLines, countLines, countStores, declaresCustomHook, declaresExportedTypeAlias, declaresInterface, declaresQueryHook, declaresStore, descFromText, detectClaudeMdProjectType, detectCreationIntent, detectFramework, detectModularArchitecture, detectProjectType, detectRequiredSkills, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, firstComment, firstHeading, frameworkSolidGate, freshnessGate, importsTanstackQuery, installGuard, interfaceDeclLevel, interfaceSeparationGuard, isApexCommand, isComponentsPath, isHooksPath, isHtmlLike, isInterfacesPath, isQueryPath, isRalphMode, isStoresPath, isTypesPath, isVendorPath, langOfPath, lexProfileOf, loadApexTaskState, maskCommentsAndStrings, maskCommentsOnly, matchPatterns, missingSeoElements, parseBodyDesc, parseEnrichment, parseEntry, parseField, protectedPathGuard, queryCapActive, registerGuard, requiredArchSkill, runGuards, securityGuard, skillTriggerGate, solidReadGate, usesTailwindUtilities };