@harness-engineering/cli 1.25.5 → 1.25.6

package/dist/{agents-md-COWXFHR5.js → agents-md-2PYJM2MK.js}

@@ -1,9 +1,9 @@
 import {
   generateAgentsMd
-} from "./chunk-ZYYVDA5K.js";
-import "./chunk-KHMKAC6E.js";
+} from "./chunk-7BAGSY5Q.js";
+import "./chunk-42ZZLMYD.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-RDQGCHKD.js";
 import "./chunk-KFQGP6VL.js";
 export {
   generateAgentsMd

package/dist/{architecture-EYPG4ZMC.js → architecture-VCLB7A23.js}

@@ -1,13 +1,13 @@
 import {
   checkDependenciesDefinition,
   handleCheckDependencies
-} from "./chunk-JD4FGVHH.js";
-import "./chunk-UI6NWJJK.js";
+} from "./chunk-JQCS75DY.js";
+import "./chunk-XMEEYMGE.js";
 import "./chunk-EPUKTTJZ.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-KHMKAC6E.js";
+import "./chunk-42ZZLMYD.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-RDQGCHKD.js";
 import "./chunk-KFQGP6VL.js";
 export {
   checkDependenciesDefinition,

package/dist/{assess-project-JQPEVJIA.js → assess-project-64C6LIKN.js}

@@ -1,7 +1,7 @@
 import {
   assessProjectDefinition,
   handleAssessProject
-} from "./chunk-KVK3KAFQ.js";
+} from "./chunk-SZZ5UQL7.js";
 import "./chunk-W6Y7ZW3Y.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/bin/harness-mcp.js

@@ -1,26 +1,27 @@
 #!/usr/bin/env node
 import {
   startServer
-} from "../chunk-2X42NMPD.js";
-import "../chunk-2TFT7XRX.js";
-import "../chunk-UB6NZNJJ.js";
-import "../chunk-HWLHJSJQ.js";
-import "../chunk-KVK3KAFQ.js";
-import "../chunk-Q6ZEUMOF.js";
-import "../chunk-JD4FGVHH.js";
-import "../chunk-UI6NWJJK.js";
-import "../chunk-2OIPQMU5.js";
-import "../chunk-YFIALHGI.js";
-import "../chunk-PVRKHUTA.js";
+} from "../chunk-43VBX44J.js";
+import "../chunk-SZZ5UQL7.js";
+import "../chunk-RC5ZY3EV.js";
+import "../chunk-KJC4SE7C.js";
+import "../chunk-4YEBV2FT.js";
+import "../chunk-ZAKUCM7O.js";
+import "../chunk-WEOGCL7B.js";
+import "../chunk-JQCS75DY.js";
+import "../chunk-XMEEYMGE.js";
+import "../chunk-XLO4AXXM.js";
+import "../chunk-CBZECDCW.js";
+import "../chunk-X2JJ3CPG.js";
 import "../chunk-EPUKTTJZ.js";
 import "../chunk-W6Y7ZW3Y.js";
-import "../chunk-5R2LFUU3.js";
+import "../chunk-JUXFYB2K.js";
 import "../chunk-3ISINLYT.js";
 import "../chunk-6B6UN6SG.js";
-import "../chunk-BOQRTARD.js";
-import "../chunk-KHMKAC6E.js";
+import "../chunk-SMY35HJM.js";
+import "../chunk-42ZZLMYD.js";
 import "../chunk-RL4VMEXL.js";
-import "../chunk-K2SON7TI.js";
+import "../chunk-RDQGCHKD.js";
 import "../chunk-HIK6OEUF.js";
 import "../chunk-3WGJMBKH.js";
 import "../chunk-KFQGP6VL.js";

package/dist/bin/harness.js

@@ -3,43 +3,44 @@ import {
   createProgram,
   installCommandTelemetry,
   printFirstRunWelcome
-} from "../chunk-2OM5TA56.js";
-import "../chunk-ZYYVDA5K.js";
-import "../chunk-WN6YIQ66.js";
-import "../chunk-KXUCIAM4.js";
-import "../chunk-KDHZAL4B.js";
+} from "../chunk-R7P2FMJT.js";
+import "../chunk-7BAGSY5Q.js";
+import "../chunk-RKZW3FDF.js";
+import "../chunk-EY6F2QXW.js";
+import "../chunk-BUJOMC3O.js";
 import "../chunk-CQ553GZO.js";
-import "../chunk-24ZGGCIW.js";
+import "../chunk-FL6A72LV.js";
 import "../chunk-GISMXMVL.js";
 import "../chunk-WWACIIBA.js";
 import "../chunk-TEFCFC4H.js";
-import "../chunk-BVRWLK5U.js";
-import "../chunk-2X336Q7J.js";
+import "../chunk-Y5JA4J2M.js";
+import "../chunk-U2OMWI7Z.js";
 import "../chunk-KET4QQZB.js";
-import "../chunk-KWQTMJ3B.js";
-import "../chunk-4NK7Z3BP.js";
+import "../chunk-VELT5VAG.js";
+import "../chunk-R2BI5UPK.js";
 import {
   dispatchSkillsFromGit
-} from "../chunk-2X42NMPD.js";
-import "../chunk-2TFT7XRX.js";
-import "../chunk-UB6NZNJJ.js";
-import "../chunk-HWLHJSJQ.js";
-import "../chunk-KVK3KAFQ.js";
-import "../chunk-Q6ZEUMOF.js";
-import "../chunk-JD4FGVHH.js";
-import "../chunk-UI6NWJJK.js";
-import "../chunk-2OIPQMU5.js";
-import "../chunk-YFIALHGI.js";
-import "../chunk-PVRKHUTA.js";
+} from "../chunk-43VBX44J.js";
+import "../chunk-SZZ5UQL7.js";
+import "../chunk-RC5ZY3EV.js";
+import "../chunk-KJC4SE7C.js";
+import "../chunk-4YEBV2FT.js";
+import "../chunk-ZAKUCM7O.js";
+import "../chunk-WEOGCL7B.js";
+import "../chunk-JQCS75DY.js";
+import "../chunk-XMEEYMGE.js";
+import "../chunk-XLO4AXXM.js";
+import "../chunk-CBZECDCW.js";
+import "../chunk-X2JJ3CPG.js";
 import "../chunk-EPUKTTJZ.js";
 import "../chunk-W6Y7ZW3Y.js";
 import {
   findConfigFile,
   loadConfig
-} from "../chunk-5R2LFUU3.js";
+} from "../chunk-JUXFYB2K.js";
 import "../chunk-3ISINLYT.js";
 import "../chunk-6B6UN6SG.js";
-import "../chunk-BOQRTARD.js";
+import "../chunk-SMY35HJM.js";
 import {
   CLI_VERSION
 } from "../chunk-BM3PWGXQ.js";
@@ -50,9 +51,9 @@ import {
   readCheckState,
   shouldRunCheck,
   spawnBackgroundCheck
-} from "../chunk-KHMKAC6E.js";
+} from "../chunk-42ZZLMYD.js";
 import "../chunk-RL4VMEXL.js";
-import "../chunk-K2SON7TI.js";
+import "../chunk-RDQGCHKD.js";
 import "../chunk-RRHUCDRD.js";
 import "../chunk-EBJQ6N4M.js";
 import "../chunk-HIK6OEUF.js";

package/dist/business-knowledge-6RHYJOB3.js

@@ -0,0 +1,7 @@
+import {
+  getBusinessKnowledgeResource
+} from "./chunk-RC5ZY3EV.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  getBusinessKnowledgeResource
+};

package/dist/{check-phase-gate-AJRMDGYW.js → check-phase-gate-RT6PGEHY.js}

@@ -1,11 +1,11 @@
 import {
   createCheckPhaseGateCommand,
   runCheckPhaseGate
-} from "./chunk-BVRWLK5U.js";
-import "./chunk-5R2LFUU3.js";
-import "./chunk-KHMKAC6E.js";
+} from "./chunk-Y5JA4J2M.js";
+import "./chunk-JUXFYB2K.js";
+import "./chunk-42ZZLMYD.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-RDQGCHKD.js";
 import "./chunk-EBJQ6N4M.js";
 import "./chunk-3WGJMBKH.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{chunk-KHMKAC6E.js → chunk-42ZZLMYD.js}

@@ -13,13 +13,13 @@ import {
   NODE_STABILITY,
   init_dist as init_dist2,
   queryTraceability
-} from "./chunk-K2SON7TI.js";
+} from "./chunk-RDQGCHKD.js";
 import {
   __esm,
   __export
 } from "./chunk-KFQGP6VL.js";
 
-// ../core/dist/chunk-QLTIBLN5.mjs
+// ../core/dist/chunk-UWAI34RR.mjs
 import { z } from "zod";
 import { createHash } from "crypto";
 import { minimatch } from "minimatch";
@@ -1734,8 +1734,8 @@ async function toHaveMaxDepDepth(received, maxDepth) {
   };
 }
 var ArchMetricCategorySchema, ViolationSchema, MetricResultSchema, CategoryBaselineSchema, ArchBaselineSchema, CategoryRegressionSchema, ArchDiffResultSchema, ThresholdConfigSchema, ArchConfigSchema, ConstraintRuleSchema, ViolationSnapshotSchema, ViolationHistorySchema, EmergenceConfidenceSchema, EmergentConstraintSuggestionSchema, EmergenceResultSchema, accessAsync, readFileAsync, EXTENSION_BY_LANG, CircularDepsCollector, TypeScriptParser, EXTENSION_MAP, parserCache, initialized, GRAMMAR_MAP, TOP_LEVEL_TYPES, METHOD_TYPES, IDENTIFIER_TYPES, NAME_EXTRACTORS, pythonStrategy, goStrategy, RUST_USE_ARG_TYPES, RUST_PUB_ITEM_TYPES, rustStrategy, JAVA_IMPORT_TYPES, JAVA_EXPORT_TYPES, javaStrategy, STRATEGIES, TreeSitterParser, ParserRegistry, defaultRegistry, LayerViolationCollector, ArchBaselineManager, DEFAULT_THRESHOLDS, FUNCTION_PATTERNS, DECISION_PATTERNS, ComplexityCollector, DEFAULT_THRESHOLDS2, CouplingCollector, ForbiddenImportCollector, ModuleSizeCollector, DepDepthCollector, defaultCollectors, archMatchers;
-var init_chunk_QLTIBLN5 = __esm({
-  "../core/dist/chunk-QLTIBLN5.mjs"() {
+var init_chunk_UWAI34RR = __esm({
+  "../core/dist/chunk-UWAI34RR.mjs"() {
     "use strict";
     init_dist();
     ArchMetricCategorySchema = z.enum([
@@ -8820,6 +8820,27 @@ async function loadBudgetedLearnings(projectPath, options) {
   }
   return Ok(budgeted);
 }
+function buildEntryFromFrontmatter(line, fm) {
+  const rootCauseMatch = line.match(/\[root_cause:([^\]]+)\]/);
+  const triedMatch = line.match(/\[tried:([^\]]+)\]/);
+  return {
+    hash: fm.hash,
+    tags: fm.tags,
+    summary: line,
+    fullText: "",
+    ...rootCauseMatch?.[1] ? { rootCause: rootCauseMatch[1] } : {},
+    ...triedMatch?.[1] ? { triedAndFailed: triedMatch[1].split(",").map((s) => s.trim()) } : {}
+  };
+}
+function buildEntryFromLine(line) {
+  const idx = extractIndexEntry(line);
+  return {
+    hash: idx.hash,
+    tags: idx.tags,
+    summary: line,
+    fullText: ""
+  };
+}
 async function loadIndexEntries(projectPath, skillName, stream, session) {
   try {
     const dirResult = await getStateDir(projectPath, stream, session);
@@ -8841,31 +8862,11 @@ async function loadIndexEntries(projectPath, skillName, stream, session) {
         pendingFrontmatter = fm;
         continue;
       }
-      const isDatedBullet = /^- \*\*\d{4}-\d{2}-\d{2}/.test(line);
-      const isHeading = /^## \d{4}-\d{2}-\d{2}/.test(line);
-      if (isDatedBullet || isHeading) {
-        if (pendingFrontmatter) {
-          const rootCauseMatch = line.match(/\[root_cause:([^\]]+)\]/);
-          const triedMatch = line.match(/\[tried:([^\]]+)\]/);
-          indexEntries.push({
-            hash: pendingFrontmatter.hash,
-            tags: pendingFrontmatter.tags,
-            summary: line,
-            fullText: "",
-            // Placeholder — full text not loaded in index mode
-            ...rootCauseMatch?.[1] ? { rootCause: rootCauseMatch[1] } : {},
-            ...triedMatch?.[1] ? { triedAndFailed: triedMatch[1].split(",").map((s) => s.trim()) } : {}
-          });
-          pendingFrontmatter = null;
-        } else {
-          const idx = extractIndexEntry(line);
-          indexEntries.push({
-            hash: idx.hash,
-            tags: idx.tags,
-            summary: line,
-            fullText: ""
-          });
-        }
+      const isEntryStart = /^- \*\*\d{4}-\d{2}-\d{2}/.test(line) || /^## \d{4}-\d{2}-\d{2}/.test(line);
+      if (isEntryStart) {
+        const entry = pendingFrontmatter ? buildEntryFromFrontmatter(line, pendingFrontmatter) : buildEntryFromLine(line);
+        indexEntries.push(entry);
+        pendingFrontmatter = null;
         currentBlock = [line];
       } else if (line.trim() !== "" && currentBlock.length > 0) {
         currentBlock.push(line);
@@ -11622,50 +11623,48 @@ function buildMergedTitle(a, b, domains) {
   const cleanTitle = primaryFinding.title.replace(/^\[.*?\]\s*/, "");
   return { title: `[${domainList}] ${cleanTitle}`, primaryFinding };
 }
+function setIfDefined(target, key, value) {
+  if (value !== void 0) target[key] = value;
+}
 function mergeSecurityFields(merged, primary, a, b) {
-  const cweId = primary.cweId ?? a.cweId ?? b.cweId;
-  const owaspCategory = primary.owaspCategory ?? a.owaspCategory ?? b.owaspCategory;
-  const confidence = primary.confidence ?? a.confidence ?? b.confidence;
-  const remediation = pickLongest(a.remediation, b.remediation);
+  setIfDefined(merged, "cweId", primary.cweId ?? a.cweId ?? b.cweId);
+  setIfDefined(
+    merged,
+    "owaspCategory",
+    primary.owaspCategory ?? a.owaspCategory ?? b.owaspCategory
+  );
+  setIfDefined(merged, "confidence", primary.confidence ?? a.confidence ?? b.confidence);
+  setIfDefined(merged, "remediation", pickLongest(a.remediation, b.remediation));
   const mergedRefs = [.../* @__PURE__ */ new Set([...a.references ?? [], ...b.references ?? []])];
-  if (cweId !== void 0) merged.cweId = cweId;
-  if (owaspCategory !== void 0) merged.owaspCategory = owaspCategory;
-  if (confidence !== void 0) merged.confidence = confidence;
-  if (remediation !== void 0) merged.remediation = remediation;
   if (mergedRefs.length > 0) merged.references = mergedRefs;
 }
+function pickHigherRank(aVal, bVal, rankMap) {
+  return (rankMap[aVal] ?? 0) >= (rankMap[bVal] ?? 0) ? aVal : bVal;
+}
+function mergedLineRange(a, b) {
+  return [Math.min(a[0], b[0]), Math.max(a[1], b[1])];
+}
+function mergeTrustScore(a, b) {
+  const max = Math.max(a.trustScore ?? 0, b.trustScore ?? 0);
+  return max > 0 ? max : void 0;
+}
 function mergeFindings(a, b) {
-  const highestSeverity = SEVERITY_RANK[a.severity] >= SEVERITY_RANK[b.severity] ? a.severity : b.severity;
-  const highestValidatedBy = (VALIDATED_BY_RANK[a.validatedBy] ?? 0) >= (VALIDATED_BY_RANK[b.validatedBy] ?? 0) ? a.validatedBy : b.validatedBy;
-  const longestRationale = a.rationale.length >= b.rationale.length ? a.rationale : b.rationale;
-  const evidenceSet = /* @__PURE__ */ new Set([...a.evidence, ...b.evidence]);
-  const lineRange = [
-    Math.min(a.lineRange[0], b.lineRange[0]),
-    Math.max(a.lineRange[1], b.lineRange[1])
-  ];
   const domains = /* @__PURE__ */ new Set([a.domain, b.domain]);
-  const suggestion = pickLongest(a.suggestion, b.suggestion);
   const { title, primaryFinding } = buildMergedTitle(a, b, domains);
   const merged = {
     id: primaryFinding.id,
     file: a.file,
-    lineRange,
+    lineRange: mergedLineRange(a.lineRange, b.lineRange),
     domain: primaryFinding.domain,
-    severity: highestSeverity,
+    severity: pickHigherRank(a.severity, b.severity, SEVERITY_RANK),
     title,
-    rationale: longestRationale,
-    evidence: [...evidenceSet],
-    validatedBy: highestValidatedBy
+    rationale: a.rationale.length >= b.rationale.length ? a.rationale : b.rationale,
+    evidence: [.../* @__PURE__ */ new Set([...a.evidence, ...b.evidence])],
+    validatedBy: pickHigherRank(a.validatedBy, b.validatedBy, VALIDATED_BY_RANK)
   };
-  if (suggestion !== void 0) {
-    merged.suggestion = suggestion;
-  }
+  setIfDefined(merged, "suggestion", pickLongest(a.suggestion, b.suggestion));
+  setIfDefined(merged, "trustScore", mergeTrustScore(a, b));
   mergeSecurityFields(merged, primaryFinding, a, b);
-  const trustA = a.trustScore ?? 0;
-  const trustB = b.trustScore ?? 0;
-  if (trustA > 0 || trustB > 0) {
-    merged.trustScore = Math.max(trustA, trustB);
-  }
   return merged;
 }
 function deduplicateFindings(options) {
@@ -13862,40 +13861,52 @@ function getOrCreateInstallId(projectRoot) {
   fs36.writeFileSync(installIdFile, id, { encoding: "utf-8", mode: 384 });
   return id;
 }
-function readIdentity(projectRoot) {
+function parseIdentityFromTelemetryFile(filePath) {
   const identity = {};
-  const filePath = path36.join(projectRoot, ".harness", "telemetry.json");
   try {
     const raw = fs37.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed === "object" && parsed.identity) {
-      const { project, team, alias } = parsed.identity;
-      if (typeof project === "string") identity.project = project;
-      if (typeof team === "string") identity.team = team;
-      if (typeof alias === "string") identity.alias = alias;
-    }
+    const src = parsed?.identity;
+    if (!src || typeof src !== "object") return identity;
+    if (typeof src.project === "string") identity.project = src.project;
+    if (typeof src.team === "string") identity.team = src.team;
+    if (typeof src.alias === "string") identity.alias = src.alias;
+  } catch {
+  }
+  return identity;
+}
+function readProjectNameFallback(configPath) {
+  try {
+    const raw = fs37.readFileSync(configPath, "utf-8");
+    const config = JSON.parse(raw);
+    return typeof config?.name === "string" ? config.name : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function readGitAliasFallback(cwd) {
+  try {
+    const gitName = execFileSync2("git", ["config", "user.name"], {
+      cwd,
+      encoding: "utf-8",
+      timeout: 2e3,
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    return gitName || void 0;
   } catch {
+    return void 0;
   }
+}
+function readIdentity(projectRoot) {
+  const filePath = path36.join(projectRoot, ".harness", "telemetry.json");
+  const identity = parseIdentityFromTelemetryFile(filePath);
   if (!identity.project) {
-    try {
-      const configPath = path36.join(projectRoot, "harness.config.json");
-      const raw = fs37.readFileSync(configPath, "utf-8");
-      const config = JSON.parse(raw);
-      if (typeof config?.name === "string") identity.project = config.name;
-    } catch {
-    }
+    const fallbackProject = readProjectNameFallback(path36.join(projectRoot, "harness.config.json"));
+    if (fallbackProject) identity.project = fallbackProject;
   }
   if (!identity.alias) {
-    try {
-      const gitName = execFileSync2("git", ["config", "user.name"], {
-        cwd: projectRoot,
-        encoding: "utf-8",
-        timeout: 2e3,
-        stdio: ["pipe", "pipe", "pipe"]
-      }).trim();
-      if (gitName) identity.alias = gitName;
-    } catch {
-    }
+    const fallbackAlias = readGitAliasFallback(projectRoot);
+    if (fallbackAlias) identity.alias = fallbackAlias;
   }
   return identity;
 }
@@ -13963,7 +13974,7 @@ async function send(events, apiKey) {
 var VALID_TYPES, CONVENTIONAL_PATTERN, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile42, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SKIP_DIRS, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS;
 var init_dist3 = __esm({
   "../core/dist/index.mjs"() {
-    init_chunk_QLTIBLN5();
+    init_chunk_UWAI34RR();
     init_dist();
     init_dist();
     init_dist();
@@ -17559,7 +17570,7 @@ var init_dist3 = __esm({
       info: 0,
       total: 0
     };
-    SecurityTimelineManager = class {
+    SecurityTimelineManager = class _SecurityTimelineManager {
       rootDir;
       timelinePath;
       constructor(rootDir) {
@@ -17831,6 +17842,11 @@ var init_dist3 = __esm({
           }
         }
       }
+      static SEVERITY_COUNT_KEY = {
+        error: "errorCount",
+        warning: "warningCount",
+        info: "infoCount"
+      };
       aggregateByCategory(findings) {
         const result = {};
         for (const finding of findings) {
@@ -17844,9 +17860,8 @@ var init_dist3 = __esm({
           }
           const cat = result[finding.category];
           cat.findingCount++;
-          if (finding.severity === "error") cat.errorCount++;
-          else if (finding.severity === "warning") cat.warningCount++;
-          else cat.infoCount++;
+          const key = _SecurityTimelineManager.SEVERITY_COUNT_KEY[finding.severity] ?? "infoCount";
+          cat[key]++;
         }
         return result;
       }
@@ -17874,26 +17889,23 @@ var init_dist3 = __esm({
         return { current, previous, delta, direction };
       }
       computeAttribution(first, last) {
-        const attribution = [];
         const allCategories = /* @__PURE__ */ new Set([
           ...Object.keys(first.byCategory),
           ...Object.keys(last.byCategory)
         ]);
+        const results = [];
         for (const category of allCategories) {
-          const prevCount = first.byCategory[category]?.findingCount ?? 0;
-          const currCount = last.byCategory[category]?.findingCount ?? 0;
-          const delta = currCount - prevCount;
-          if (delta === 0) continue;
-          const direction = delta < 0 ? "improving" : "declining";
-          const sign = delta > 0 ? "+" : "";
-          attribution.push({
-            category,
-            delta,
-            direction,
-            description: `${sign}${delta} ${category} findings`
-          });
+          const attr = this.categoryAttribution(category, first.byCategory, last.byCategory);
+          if (attr) results.push(attr);
         }
-        return attribution;
+        return results;
+      }
+      categoryAttribution(category, prev, curr) {
+        const delta = (curr[category]?.findingCount ?? 0) - (prev[category]?.findingCount ?? 0);
+        if (delta === 0) return null;
+        const direction = delta < 0 ? "improving" : "declining";
+        const sign = delta > 0 ? "+" : "";
+        return { category, delta, direction, description: `${sign}${delta} ${category} findings` };
       }
       computeStats(values) {
         if (values.length === 0) {