@harness-engineering/cli 1.25.5 → 1.25.7

package/dist/{chunk-5R2LFUU3.js → chunk-TQRCODRJ.js}

@@ -1,7 +1,7 @@
 import {
   ArchConfigSchema,
   init_dist
-} from "./chunk-KHMKAC6E.js";
+} from "./chunk-ZIYLIYN4.js";
 import {
   Err,
   Ok

package/dist/{chunk-KVK3KAFQ.js → chunk-XVJRFP7W.js}

@@ -50,7 +50,7 @@ async function handleAssessProject(input) {
   let validateResult = null;
   if (checksToRun.has("validate")) {
     try {
-      const { handleValidateProject } = await import("./validate-ACIP5BUO.js");
+      const { handleValidateProject } = await import("./validate-BFFHYHY7.js");
       const result = await handleValidateProject({ path: projectPath });
       const first = result.content[0];
       const parsed = first ? JSON.parse(first.text) : {};
@@ -75,7 +75,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDependencies } = await import("./architecture-EYPG4ZMC.js");
+          const { handleCheckDependencies } = await import("./architecture-IJLXRHZA.js");
           const result = await handleCheckDependencies({ path: projectPath });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -102,7 +102,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDocs } = await import("./docs-T5J2AJH6.js");
+          const { handleCheckDocs } = await import("./docs-7DW3DI4Z.js");
           const result = await handleCheckDocs({ path: projectPath, scope: "coverage" });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -129,7 +129,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleDetectEntropy } = await import("./entropy-GEBHWBPR.js");
+          const { handleDetectEntropy } = await import("./entropy-HCXRTDFU.js");
           const result = await handleDetectEntropy({ path: projectPath, type: "all" });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -156,7 +156,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleRunSecurityScan } = await import("./security-OVTGS7DL.js");
+          const { handleRunSecurityScan } = await import("./security-5XWINYVB.js");
           const result = await handleRunSecurityScan({ path: projectPath });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -188,7 +188,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckPerformance } = await import("./performance-7I5MCEFP.js");
+          const { handleCheckPerformance } = await import("./performance-ADWH5NJY.js");
           const result = await handleCheckPerformance({ path: projectPath });
           if ("isError" in result && result.isError) {
             const msg = result.content[0]?.text ?? "Performance check failed";

package/dist/{chunk-JD4FGVHH.js → chunk-YRBNAHH4.js}

@@ -1,6 +1,6 @@
 import {
   resolveProjectConfig
-} from "./chunk-UI6NWJJK.js";
+} from "./chunk-IQO7IINR.js";
 import {
   resultToMcpResponse
 } from "./chunk-EPUKTTJZ.js";
@@ -38,7 +38,7 @@ async function handleCheckDependencies(input) {
   const configResult = resolveProjectConfig(projectPath);
   if (!configResult.ok) return resultToMcpResponse(configResult);
   try {
-    const { validateDependencies, TypeScriptParser } = await import("./dist-UMONICND.js");
+    const { validateDependencies, TypeScriptParser } = await import("./dist-ZV6GO6FA.js");
     const config = configResult.value;
     const rawLayers = Array.isArray(config.layers) ? config.layers : [];
     const layers = rawLayers.map((l) => ({
@@ -47,11 +47,11 @@ async function handleCheckDependencies(input) {
       allowedDependencies: l.allowedDependencies
     }));
     const parser = new TypeScriptParser();
-    const { loadGraphStore } = await import("./graph-loader-JHQVQRUS.js");
+    const { loadGraphStore } = await import("./graph-loader-KXVS3YK3.js");
     const store = await loadGraphStore(projectPath);
     let graphDependencyData;
     if (store) {
-      const { GraphConstraintAdapter } = await import("./dist-RADHOOXG.js");
+      const { GraphConstraintAdapter } = await import("./dist-HPWNWCT6.js");
       const adapter = new GraphConstraintAdapter(store);
       const graphData = adapter.computeDependencyGraph();
       graphDependencyData = {

package/dist/{chunk-KHMKAC6E.js → chunk-ZIYLIYN4.js}

@@ -13,13 +13,13 @@ import {
   NODE_STABILITY,
   init_dist as init_dist2,
   queryTraceability
-} from "./chunk-K2SON7TI.js";
+} from "./chunk-NKQEMWGT.js";
 import {
   __esm,
   __export
 } from "./chunk-KFQGP6VL.js";
 
-// ../core/dist/chunk-QLTIBLN5.mjs
+// ../core/dist/chunk-UWAI34RR.mjs
 import { z } from "zod";
 import { createHash } from "crypto";
 import { minimatch } from "minimatch";
@@ -1734,8 +1734,8 @@ async function toHaveMaxDepDepth(received, maxDepth) {
   };
 }
 var ArchMetricCategorySchema, ViolationSchema, MetricResultSchema, CategoryBaselineSchema, ArchBaselineSchema, CategoryRegressionSchema, ArchDiffResultSchema, ThresholdConfigSchema, ArchConfigSchema, ConstraintRuleSchema, ViolationSnapshotSchema, ViolationHistorySchema, EmergenceConfidenceSchema, EmergentConstraintSuggestionSchema, EmergenceResultSchema, accessAsync, readFileAsync, EXTENSION_BY_LANG, CircularDepsCollector, TypeScriptParser, EXTENSION_MAP, parserCache, initialized, GRAMMAR_MAP, TOP_LEVEL_TYPES, METHOD_TYPES, IDENTIFIER_TYPES, NAME_EXTRACTORS, pythonStrategy, goStrategy, RUST_USE_ARG_TYPES, RUST_PUB_ITEM_TYPES, rustStrategy, JAVA_IMPORT_TYPES, JAVA_EXPORT_TYPES, javaStrategy, STRATEGIES, TreeSitterParser, ParserRegistry, defaultRegistry, LayerViolationCollector, ArchBaselineManager, DEFAULT_THRESHOLDS, FUNCTION_PATTERNS, DECISION_PATTERNS, ComplexityCollector, DEFAULT_THRESHOLDS2, CouplingCollector, ForbiddenImportCollector, ModuleSizeCollector, DepDepthCollector, defaultCollectors, archMatchers;
-var init_chunk_QLTIBLN5 = __esm({
-  "../core/dist/chunk-QLTIBLN5.mjs"() {
+var init_chunk_UWAI34RR = __esm({
+  "../core/dist/chunk-UWAI34RR.mjs"() {
     "use strict";
     init_dist();
     ArchMetricCategorySchema = z.enum([
@@ -8820,6 +8820,27 @@ async function loadBudgetedLearnings(projectPath, options) {
   }
   return Ok(budgeted);
 }
+function buildEntryFromFrontmatter(line, fm) {
+  const rootCauseMatch = line.match(/\[root_cause:([^\]]+)\]/);
+  const triedMatch = line.match(/\[tried:([^\]]+)\]/);
+  return {
+    hash: fm.hash,
+    tags: fm.tags,
+    summary: line,
+    fullText: "",
+    ...rootCauseMatch?.[1] ? { rootCause: rootCauseMatch[1] } : {},
+    ...triedMatch?.[1] ? { triedAndFailed: triedMatch[1].split(",").map((s) => s.trim()) } : {}
+  };
+}
+function buildEntryFromLine(line) {
+  const idx = extractIndexEntry(line);
+  return {
+    hash: idx.hash,
+    tags: idx.tags,
+    summary: line,
+    fullText: ""
+  };
+}
 async function loadIndexEntries(projectPath, skillName, stream, session) {
   try {
     const dirResult = await getStateDir(projectPath, stream, session);
@@ -8841,31 +8862,11 @@ async function loadIndexEntries(projectPath, skillName, stream, session) {
         pendingFrontmatter = fm;
         continue;
       }
-      const isDatedBullet = /^- \*\*\d{4}-\d{2}-\d{2}/.test(line);
-      const isHeading = /^## \d{4}-\d{2}-\d{2}/.test(line);
-      if (isDatedBullet || isHeading) {
-        if (pendingFrontmatter) {
-          const rootCauseMatch = line.match(/\[root_cause:([^\]]+)\]/);
-          const triedMatch = line.match(/\[tried:([^\]]+)\]/);
-          indexEntries.push({
-            hash: pendingFrontmatter.hash,
-            tags: pendingFrontmatter.tags,
-            summary: line,
-            fullText: "",
-            // Placeholder — full text not loaded in index mode
-            ...rootCauseMatch?.[1] ? { rootCause: rootCauseMatch[1] } : {},
-            ...triedMatch?.[1] ? { triedAndFailed: triedMatch[1].split(",").map((s) => s.trim()) } : {}
-          });
-          pendingFrontmatter = null;
-        } else {
-          const idx = extractIndexEntry(line);
-          indexEntries.push({
-            hash: idx.hash,
-            tags: idx.tags,
-            summary: line,
-            fullText: ""
-          });
-        }
+      const isEntryStart = /^- \*\*\d{4}-\d{2}-\d{2}/.test(line) || /^## \d{4}-\d{2}-\d{2}/.test(line);
+      if (isEntryStart) {
+        const entry = pendingFrontmatter ? buildEntryFromFrontmatter(line, pendingFrontmatter) : buildEntryFromLine(line);
+        indexEntries.push(entry);
+        pendingFrontmatter = null;
         currentBlock = [line];
       } else if (line.trim() !== "" && currentBlock.length > 0) {
         currentBlock.push(line);
@@ -11622,50 +11623,48 @@ function buildMergedTitle(a, b, domains) {
   const cleanTitle = primaryFinding.title.replace(/^\[.*?\]\s*/, "");
   return { title: `[${domainList}] ${cleanTitle}`, primaryFinding };
 }
+function setIfDefined(target, key, value) {
+  if (value !== void 0) target[key] = value;
+}
 function mergeSecurityFields(merged, primary, a, b) {
-  const cweId = primary.cweId ?? a.cweId ?? b.cweId;
-  const owaspCategory = primary.owaspCategory ?? a.owaspCategory ?? b.owaspCategory;
-  const confidence = primary.confidence ?? a.confidence ?? b.confidence;
-  const remediation = pickLongest(a.remediation, b.remediation);
+  setIfDefined(merged, "cweId", primary.cweId ?? a.cweId ?? b.cweId);
+  setIfDefined(
+    merged,
+    "owaspCategory",
+    primary.owaspCategory ?? a.owaspCategory ?? b.owaspCategory
+  );
+  setIfDefined(merged, "confidence", primary.confidence ?? a.confidence ?? b.confidence);
+  setIfDefined(merged, "remediation", pickLongest(a.remediation, b.remediation));
   const mergedRefs = [.../* @__PURE__ */ new Set([...a.references ?? [], ...b.references ?? []])];
-  if (cweId !== void 0) merged.cweId = cweId;
-  if (owaspCategory !== void 0) merged.owaspCategory = owaspCategory;
-  if (confidence !== void 0) merged.confidence = confidence;
-  if (remediation !== void 0) merged.remediation = remediation;
   if (mergedRefs.length > 0) merged.references = mergedRefs;
 }
+function pickHigherRank(aVal, bVal, rankMap) {
+  return (rankMap[aVal] ?? 0) >= (rankMap[bVal] ?? 0) ? aVal : bVal;
+}
+function mergedLineRange(a, b) {
+  return [Math.min(a[0], b[0]), Math.max(a[1], b[1])];
+}
+function mergeTrustScore(a, b) {
+  const max = Math.max(a.trustScore ?? 0, b.trustScore ?? 0);
+  return max > 0 ? max : void 0;
+}
 function mergeFindings(a, b) {
-  const highestSeverity = SEVERITY_RANK[a.severity] >= SEVERITY_RANK[b.severity] ? a.severity : b.severity;
-  const highestValidatedBy = (VALIDATED_BY_RANK[a.validatedBy] ?? 0) >= (VALIDATED_BY_RANK[b.validatedBy] ?? 0) ? a.validatedBy : b.validatedBy;
-  const longestRationale = a.rationale.length >= b.rationale.length ? a.rationale : b.rationale;
-  const evidenceSet = /* @__PURE__ */ new Set([...a.evidence, ...b.evidence]);
-  const lineRange = [
-    Math.min(a.lineRange[0], b.lineRange[0]),
-    Math.max(a.lineRange[1], b.lineRange[1])
-  ];
   const domains = /* @__PURE__ */ new Set([a.domain, b.domain]);
-  const suggestion = pickLongest(a.suggestion, b.suggestion);
   const { title, primaryFinding } = buildMergedTitle(a, b, domains);
   const merged = {
     id: primaryFinding.id,
     file: a.file,
-    lineRange,
+    lineRange: mergedLineRange(a.lineRange, b.lineRange),
     domain: primaryFinding.domain,
-    severity: highestSeverity,
+    severity: pickHigherRank(a.severity, b.severity, SEVERITY_RANK),
     title,
-    rationale: longestRationale,
-    evidence: [...evidenceSet],
-    validatedBy: highestValidatedBy
+    rationale: a.rationale.length >= b.rationale.length ? a.rationale : b.rationale,
+    evidence: [.../* @__PURE__ */ new Set([...a.evidence, ...b.evidence])],
+    validatedBy: pickHigherRank(a.validatedBy, b.validatedBy, VALIDATED_BY_RANK)
   };
-  if (suggestion !== void 0) {
-    merged.suggestion = suggestion;
-  }
+  setIfDefined(merged, "suggestion", pickLongest(a.suggestion, b.suggestion));
+  setIfDefined(merged, "trustScore", mergeTrustScore(a, b));
   mergeSecurityFields(merged, primaryFinding, a, b);
-  const trustA = a.trustScore ?? 0;
-  const trustB = b.trustScore ?? 0;
-  if (trustA > 0 || trustB > 0) {
-    merged.trustScore = Math.max(trustA, trustB);
-  }
   return merged;
 }
 function deduplicateFindings(options) {
@@ -13862,40 +13861,52 @@ function getOrCreateInstallId(projectRoot) {
   fs36.writeFileSync(installIdFile, id, { encoding: "utf-8", mode: 384 });
   return id;
 }
-function readIdentity(projectRoot) {
+function parseIdentityFromTelemetryFile(filePath) {
   const identity = {};
-  const filePath = path36.join(projectRoot, ".harness", "telemetry.json");
   try {
     const raw = fs37.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed === "object" && parsed.identity) {
-      const { project, team, alias } = parsed.identity;
-      if (typeof project === "string") identity.project = project;
-      if (typeof team === "string") identity.team = team;
-      if (typeof alias === "string") identity.alias = alias;
-    }
+    const src = parsed?.identity;
+    if (!src || typeof src !== "object") return identity;
+    if (typeof src.project === "string") identity.project = src.project;
+    if (typeof src.team === "string") identity.team = src.team;
+    if (typeof src.alias === "string") identity.alias = src.alias;
+  } catch {
+  }
+  return identity;
+}
+function readProjectNameFallback(configPath) {
+  try {
+    const raw = fs37.readFileSync(configPath, "utf-8");
+    const config = JSON.parse(raw);
+    return typeof config?.name === "string" ? config.name : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function readGitAliasFallback(cwd) {
+  try {
+    const gitName = execFileSync2("git", ["config", "user.name"], {
+      cwd,
+      encoding: "utf-8",
+      timeout: 2e3,
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    return gitName || void 0;
   } catch {
+    return void 0;
   }
+}
+function readIdentity(projectRoot) {
+  const filePath = path36.join(projectRoot, ".harness", "telemetry.json");
+  const identity = parseIdentityFromTelemetryFile(filePath);
   if (!identity.project) {
-    try {
-      const configPath = path36.join(projectRoot, "harness.config.json");
-      const raw = fs37.readFileSync(configPath, "utf-8");
-      const config = JSON.parse(raw);
-      if (typeof config?.name === "string") identity.project = config.name;
-    } catch {
-    }
+    const fallbackProject = readProjectNameFallback(path36.join(projectRoot, "harness.config.json"));
+    if (fallbackProject) identity.project = fallbackProject;
   }
   if (!identity.alias) {
-    try {
-      const gitName = execFileSync2("git", ["config", "user.name"], {
-        cwd: projectRoot,
-        encoding: "utf-8",
-        timeout: 2e3,
-        stdio: ["pipe", "pipe", "pipe"]
-      }).trim();
-      if (gitName) identity.alias = gitName;
-    } catch {
-    }
+    const fallbackAlias = readGitAliasFallback(projectRoot);
+    if (fallbackAlias) identity.alias = fallbackAlias;
   }
   return identity;
 }
@@ -13963,7 +13974,7 @@ async function send(events, apiKey) {
 var VALID_TYPES, CONVENTIONAL_PATTERN, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile42, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SKIP_DIRS, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS;
 var init_dist3 = __esm({
   "../core/dist/index.mjs"() {
-    init_chunk_QLTIBLN5();
+    init_chunk_UWAI34RR();
     init_dist();
     init_dist();
     init_dist();
@@ -17559,7 +17570,7 @@ var init_dist3 = __esm({
       info: 0,
       total: 0
     };
-    SecurityTimelineManager = class {
+    SecurityTimelineManager = class _SecurityTimelineManager {
       rootDir;
       timelinePath;
       constructor(rootDir) {
@@ -17831,6 +17842,11 @@ var init_dist3 = __esm({
           }
         }
       }
+      static SEVERITY_COUNT_KEY = {
+        error: "errorCount",
+        warning: "warningCount",
+        info: "infoCount"
+      };
       aggregateByCategory(findings) {
         const result = {};
         for (const finding of findings) {
@@ -17844,9 +17860,8 @@ var init_dist3 = __esm({
           }
           const cat = result[finding.category];
           cat.findingCount++;
-          if (finding.severity === "error") cat.errorCount++;
-          else if (finding.severity === "warning") cat.warningCount++;
-          else cat.infoCount++;
+          const key = _SecurityTimelineManager.SEVERITY_COUNT_KEY[finding.severity] ?? "infoCount";
+          cat[key]++;
         }
         return result;
       }
@@ -17874,26 +17889,23 @@ var init_dist3 = __esm({
         return { current, previous, delta, direction };
       }
       computeAttribution(first, last) {
-        const attribution = [];
         const allCategories = /* @__PURE__ */ new Set([
           ...Object.keys(first.byCategory),
           ...Object.keys(last.byCategory)
         ]);
+        const results = [];
         for (const category of allCategories) {
-          const prevCount = first.byCategory[category]?.findingCount ?? 0;
-          const currCount = last.byCategory[category]?.findingCount ?? 0;
-          const delta = currCount - prevCount;
-          if (delta === 0) continue;
-          const direction = delta < 0 ? "improving" : "declining";
-          const sign = delta > 0 ? "+" : "";
-          attribution.push({
-            category,
-            delta,
-            direction,
-            description: `${sign}${delta} ${category} findings`
-          });
+          const attr = this.categoryAttribution(category, first.byCategory, last.byCategory);
+          if (attr) results.push(attr);
         }
-        return attribution;
+        return results;
+      }
+      categoryAttribution(category, prev, curr) {
+        const delta = (curr[category]?.findingCount ?? 0) - (prev[category]?.findingCount ?? 0);
+        if (delta === 0) return null;
+        const direction = delta < 0 ? "improving" : "declining";
+        const sign = delta > 0 ? "+" : "";
+        return { category, delta, direction, description: `${sign}${delta} ${category} findings` };
       }
       computeStats(values) {
         if (values.length === 0) {

package/dist/{ci-workflow-35KBJC2U.js → ci-workflow-FJYRFZYQ.js}

@@ -1,9 +1,9 @@
 import {
   generateCIWorkflow
-} from "./chunk-WN6YIQ66.js";
-import "./chunk-KHMKAC6E.js";
+} from "./chunk-KVJZQ2MV.js";
+import "./chunk-ZIYLIYN4.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-NKQEMWGT.js";
 import "./chunk-KFQGP6VL.js";
 export {
   generateCIWorkflow

package/dist/{dist-RADHOOXG.js → dist-HPWNWCT6.js}

@@ -1,5 +1,6 @@
 import {
   Assembler,
+  BusinessKnowledgeIngestor,
   CIConnector,
   CURRENT_SCHEMA_VERSION,
   CascadeSimulator,
@@ -50,11 +51,12 @@ import {
   project,
   queryTraceability,
   saveGraph
-} from "./chunk-K2SON7TI.js";
+} from "./chunk-NKQEMWGT.js";
 import "./chunk-KFQGP6VL.js";
 init_dist();
 export {
   Assembler,
+  BusinessKnowledgeIngestor,
   CIConnector,
   CURRENT_SCHEMA_VERSION,
   CascadeSimulator,

package/dist/{dist-UMONICND.js → dist-ZV6GO6FA.js}

@@ -395,7 +395,7 @@ import {
   writeSessionSummary,
   writeTaint,
   xssRules
-} from "./chunk-KHMKAC6E.js";
+} from "./chunk-ZIYLIYN4.js";
 import {
   DEFAULT_SKILL_CONTEXT_BUDGET,
   Err,
@@ -405,7 +405,7 @@ import {
   isErr,
   isOk
 } from "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-NKQEMWGT.js";
 import "./chunk-KFQGP6VL.js";
 init_dist();
 export {

package/dist/{docs-T5J2AJH6.js → docs-7DW3DI4Z.js}

@@ -1,13 +1,13 @@
 import {
   checkDocsDefinition,
   handleCheckDocs
-} from "./chunk-2OIPQMU5.js";
+} from "./chunk-AS5DQT4S.js";
 import "./chunk-EPUKTTJZ.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-5R2LFUU3.js";
-import "./chunk-KHMKAC6E.js";
+import "./chunk-TQRCODRJ.js";
+import "./chunk-ZIYLIYN4.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-NKQEMWGT.js";
 import "./chunk-3WGJMBKH.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{engine-KWHV2LUX.js → engine-P7EE2IWO.js}

@@ -1,9 +1,9 @@
 import {
   TemplateEngine
-} from "./chunk-KDHZAL4B.js";
-import "./chunk-KHMKAC6E.js";
+} from "./chunk-K533WNZG.js";
+import "./chunk-ZIYLIYN4.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-NKQEMWGT.js";
 import "./chunk-KFQGP6VL.js";
 export {
   TemplateEngine

package/dist/{entropy-GEBHWBPR.js → entropy-HCXRTDFU.js}

@@ -1,12 +1,12 @@
 import {
   detectEntropyDefinition,
   handleDetectEntropy
-} from "./chunk-YFIALHGI.js";
+} from "./chunk-D3XL2FLX.js";
 import "./chunk-EPUKTTJZ.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-KHMKAC6E.js";
+import "./chunk-ZIYLIYN4.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-NKQEMWGT.js";
 import "./chunk-KFQGP6VL.js";
 export {
   detectEntropyDefinition,

package/dist/{feedback-I4QPE3RI.js → feedback-Y4FYN3NR.js}

@@ -5,7 +5,7 @@ import {
   handleCreateSelfReview,
   handleRequestPeerReview,
   requestPeerReviewDefinition
-} from "./chunk-2TFT7XRX.js";
+} from "./chunk-GVNT2YC7.js";
 import "./chunk-EPUKTTJZ.js";
 import "./chunk-W6Y7ZW3Y.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{generate-agent-definitions-3XNR77ET.js → generate-agent-definitions-3EHPIWBO.js}

@@ -1,14 +1,14 @@
 import {
   createGenerateAgentDefinitionsCommand,
   generateAgentDefinitions
-} from "./chunk-2X336Q7J.js";
+} from "./chunk-MCDCZMKN.js";
 import "./chunk-KET4QQZB.js";
-import "./chunk-KWQTMJ3B.js";
+import "./chunk-FRDS4XGD.js";
 import "./chunk-3ISINLYT.js";
 import "./chunk-6B6UN6SG.js";
-import "./chunk-KHMKAC6E.js";
+import "./chunk-ZIYLIYN4.js";
 import "./chunk-RL4VMEXL.js";
-import "./chunk-K2SON7TI.js";
+import "./chunk-NKQEMWGT.js";
 import "./chunk-3WGJMBKH.js";
 import "./chunk-KFQGP6VL.js";
 export {

package/dist/{graph-loader-JHQVQRUS.js → graph-loader-KXVS3YK3.js}

@@ -1,7 +1,7 @@
 import {
   clearGraphStoreCache,
   loadGraphStore
-} from "./chunk-BOQRTARD.js";
+} from "./chunk-JPZY7ZQX.js";
 import "./chunk-KFQGP6VL.js";
 export {
   clearGraphStoreCache,

package/dist/index.d.ts

@@ -732,15 +732,15 @@ declare const HarnessConfigSchema: z.ZodObject<{
         thresholds: z.ZodDefault<z.ZodRecord<z.ZodEnum<["circular-deps", "layer-violations", "complexity", "coupling", "forbidden-imports", "module-size", "dependency-depth"]>, z.ZodUnion<[z.ZodNumber, z.ZodRecord<z.ZodString, z.ZodNumber>]>>>;
         modules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodEnum<["circular-deps", "layer-violations", "complexity", "coupling", "forbidden-imports", "module-size", "dependency-depth"]>, z.ZodUnion<[z.ZodNumber, z.ZodRecord<z.ZodString, z.ZodNumber>]>>>>;
     }, "strip", z.ZodTypeAny, {
-        thresholds: Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>;
-        modules: Record<string, Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>>;
         enabled: boolean;
         baselinePath: string;
+        thresholds: Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>;
+        modules: Record<string, Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>>;
     }, {
-        thresholds?: Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>> | undefined;
-        modules?: Record<string, Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>> | undefined;
         enabled?: boolean | undefined;
         baselinePath?: string | undefined;
+        thresholds?: Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>> | undefined;
+        modules?: Record<string, Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>> | undefined;
     }>>;
     /** Skill loading, suggestion, and tier override settings */
     skills: z.ZodOptional<z.ZodObject<{
@@ -964,10 +964,10 @@ declare const HarnessConfigSchema: z.ZodObject<{
         dismissed: string[];
     } | undefined;
     architecture?: {
-        thresholds: Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>;
-        modules: Record<string, Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>>;
         enabled: boolean;
         baselinePath: string;
+        thresholds: Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>;
+        modules: Record<string, Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>>;
     } | undefined;
     traceability?: {
         enabled: boolean;
@@ -1108,10 +1108,10 @@ declare const HarnessConfigSchema: z.ZodObject<{
         dismissed?: string[] | undefined;
     } | undefined;
     architecture?: {
-        thresholds?: Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>> | undefined;
-        modules?: Record<string, Partial<Record<"complexity" | "coupling" | "circular-deps" | "layer-violations" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>> | undefined;
         enabled?: boolean | undefined;
         baselinePath?: string | undefined;
+        thresholds?: Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>> | undefined;
+        modules?: Record<string, Partial<Record<"circular-deps" | "layer-violations" | "complexity" | "coupling" | "forbidden-imports" | "module-size" | "dependency-depth", number | Record<string, number>>>> | undefined;
     } | undefined;
     traceability?: {
         enabled?: boolean | undefined;
@@ -1304,6 +1304,7 @@ interface DetectedFramework {
 interface WriteOptions {
     overwrite: boolean;
     language?: string;
+    existingProject?: boolean;
 }
 interface WriteResult {
     written: string[];
@@ -1317,6 +1318,11 @@ declare class TemplateEngine {
     render(template: ResolvedTemplate, context: TemplateContext): Result<RenderedFiles, Error>;
     private renderFile;
     write(files: RenderedFiles, targetDir: string, options: WriteOptions): Result<WriteResult, Error>;
+    /**
+     * Check whether the target directory already contains a project by looking for
+     * common build/package configuration files. Returns true if any marker is found.
+     */
+    isExistingProject(targetDir: string): boolean;
     detectFramework(targetDir: string): Result<DetectedFramework[], Error>;
     private resolveLanguageTemplate;
     private findTemplateDir;