@harness-engineering/cli 1.26.1 → 1.27.1

package/dist/{chunk-YC4EYIER.js → chunk-IBTHD2UA.js}

@@ -13,13 +13,13 @@ import {
   NODE_STABILITY,
   init_dist as init_dist2,
   queryTraceability
-} from "./chunk-2FPUPRCY.js";
+} from "./chunk-GAIOIINV.js";
 import {
   __esm,
   __export
 } from "./chunk-KFQGP6VL.js";
 
-// ../core/dist/chunk-UWAI34RR.mjs
+// ../core/dist/chunk-H73442AZ.mjs
 import { z } from "zod";
 import { createHash } from "crypto";
 import { minimatch } from "minimatch";
@@ -1734,8 +1734,8 @@ async function toHaveMaxDepDepth(received, maxDepth) {
   };
 }
 var ArchMetricCategorySchema, ViolationSchema, MetricResultSchema, CategoryBaselineSchema, ArchBaselineSchema, CategoryRegressionSchema, ArchDiffResultSchema, ThresholdConfigSchema, ArchConfigSchema, ConstraintRuleSchema, ViolationSnapshotSchema, ViolationHistorySchema, EmergenceConfidenceSchema, EmergentConstraintSuggestionSchema, EmergenceResultSchema, accessAsync, readFileAsync, EXTENSION_BY_LANG, CircularDepsCollector, TypeScriptParser, EXTENSION_MAP, parserCache, initialized, GRAMMAR_MAP, TOP_LEVEL_TYPES, METHOD_TYPES, IDENTIFIER_TYPES, NAME_EXTRACTORS, pythonStrategy, goStrategy, RUST_USE_ARG_TYPES, RUST_PUB_ITEM_TYPES, rustStrategy, JAVA_IMPORT_TYPES, JAVA_EXPORT_TYPES, javaStrategy, STRATEGIES, TreeSitterParser, ParserRegistry, defaultRegistry, LayerViolationCollector, ArchBaselineManager, DEFAULT_THRESHOLDS, FUNCTION_PATTERNS, DECISION_PATTERNS, ComplexityCollector, DEFAULT_THRESHOLDS2, CouplingCollector, ForbiddenImportCollector, ModuleSizeCollector, DepDepthCollector, defaultCollectors, archMatchers;
-var init_chunk_UWAI34RR = __esm({
-  "../core/dist/chunk-UWAI34RR.mjs"() {
+var init_chunk_H73442AZ = __esm({
+  "../core/dist/chunk-H73442AZ.mjs"() {
     "use strict";
     init_dist();
     ArchMetricCategorySchema = z.enum([
@@ -2402,6 +2402,9 @@ var init_chunk_UWAI34RR = __esm({
             };
           }
         }
+        for (const baseline of Object.values(metrics)) {
+          baseline.violationIds = [...new Set(baseline.violationIds)];
+        }
         return {
           version: 1,
           updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -3289,11 +3292,11 @@ import { minimatch as minimatch4 } from "minimatch";
 import { z as z8 } from "zod";
 import * as fs24 from "fs";
 import * as path21 from "path";
-import { readFileSync as readFileSync222, writeFileSync as writeFileSync15, unlinkSync, mkdirSync as mkdirSync14, readdirSync as readdirSync3 } from "fs";
+import { readFileSync as readFileSync222, writeFileSync as writeFileSync15, unlinkSync as unlinkSync2, mkdirSync as mkdirSync14, readdirSync as readdirSync3 } from "fs";
 import { join as join362, dirname as dirname12 } from "path";
 import { createHash as createHash32 } from "crypto";
 import { z as z9 } from "zod";
-import { readFileSync as readFileSync23, writeFileSync as writeFileSync16, renameSync as renameSync52, mkdirSync as mkdirSync15, existsSync as existsSync332 } from "fs";
+import { readFileSync as readFileSync23, writeFileSync as writeFileSync16, renameSync as renameSync82, mkdirSync as mkdirSync15, existsSync as existsSync332 } from "fs";
 import { execSync as execSync3 } from "child_process";
 import { randomBytes as randomBytes22 } from "crypto";
 import { join as join372, dirname as dirname13 } from "path";
@@ -6092,45 +6095,54 @@ async function detectDocDrift(snapshot, config, graphDriftData) {
     severity
   });
 }
-function resolveImportToFile(importSource, fromFile, snapshot) {
+function buildFileIndex(snapshot) {
+  const index = /* @__PURE__ */ new Map();
+  for (const file of snapshot.files) {
+    index.set(file.path, file);
+  }
+  return index;
+}
+function resolveImportToFile(importSource, fromFile, snapshot, fileIndex) {
   if (!importSource.startsWith(".")) {
     return null;
   }
+  const hasFile = fileIndex ? (p) => fileIndex.has(p) : (p) => snapshot.files.some((f) => f.path === p);
   const fromDir = dirname6(fromFile);
   let resolved = resolve5(fromDir, importSource);
   if (!resolved.endsWith(".ts") && !resolved.endsWith(".tsx")) {
     const withTs = resolved + ".ts";
-    if (snapshot.files.some((f) => f.path === withTs)) {
+    if (hasFile(withTs)) {
       return withTs;
     }
     const withIndex = resolve5(resolved, "index.ts");
-    if (snapshot.files.some((f) => f.path === withIndex)) {
+    if (hasFile(withIndex)) {
       return withIndex;
     }
   }
-  if (snapshot.files.some((f) => f.path === resolved)) {
+  if (hasFile(resolved)) {
     return resolved;
   }
   return null;
 }
-function enqueueResolved(sources, current, snapshot, visited, queue) {
+function enqueueResolved(sources, current, snapshot, visited, queue, fileIndex) {
   for (const item of sources) {
     if (!item.source) continue;
-    const resolved = resolveImportToFile(item.source, current, snapshot);
+    const resolved = resolveImportToFile(item.source, current, snapshot, fileIndex);
     if (resolved && !visited.has(resolved)) {
       queue.push(resolved);
     }
   }
 }
-function processReachabilityNode(current, snapshot, reachability, visited, queue) {
+function processReachabilityNode(current, snapshot, reachability, visited, queue, fileIndex) {
   reachability.set(current, true);
-  const sourceFile = snapshot.files.find((f) => f.path === current);
+  const sourceFile = fileIndex ? fileIndex.get(current) : snapshot.files.find((f) => f.path === current);
   if (!sourceFile) return;
-  enqueueResolved(sourceFile.imports, current, snapshot, visited, queue);
+  enqueueResolved(sourceFile.imports, current, snapshot, visited, queue, fileIndex);
   const reExports = sourceFile.exports.filter((e) => e.isReExport);
-  enqueueResolved(reExports, current, snapshot, visited, queue);
+  enqueueResolved(reExports, current, snapshot, visited, queue, fileIndex);
 }
 function buildReachabilityMap(snapshot) {
+  const fileIndex = buildFileIndex(snapshot);
   const reachability = /* @__PURE__ */ new Map();
   for (const file of snapshot.files) {
     reachability.set(file.path, false);
@@ -6141,11 +6153,12 @@ function buildReachabilityMap(snapshot) {
     const current = queue.shift();
     if (visited.has(current)) continue;
     visited.add(current);
-    processReachabilityNode(current, snapshot, reachability, visited, queue);
+    processReachabilityNode(current, snapshot, reachability, visited, queue, fileIndex);
   }
   return reachability;
 }
 function buildExportUsageMap(snapshot) {
+  const fileIndex = buildFileIndex(snapshot);
   const usageMap = /* @__PURE__ */ new Map();
   for (const file of snapshot.files) {
     for (const exp of file.exports) {
@@ -6155,9 +6168,9 @@ function buildExportUsageMap(snapshot) {
   }
   for (const file of snapshot.files) {
     for (const imp of file.imports) {
-      const resolvedFile = resolveImportToFile(imp.source, file.path, snapshot);
+      const resolvedFile = resolveImportToFile(imp.source, file.path, snapshot, fileIndex);
       if (!resolvedFile) continue;
-      const sourceFile = snapshot.files.find((f) => f.path === resolvedFile);
+      const sourceFile = fileIndex.get(resolvedFile);
       if (!sourceFile) continue;
       for (const specifier of imp.specifiers) {
         const matchingExport = sourceFile.exports.find(
@@ -8364,7 +8377,9 @@ async function saveState(projectPath, state, stream, session) {
     const stateDir = dirResult.value;
     const statePath = path8.join(stateDir, STATE_FILE);
     fs11.mkdirSync(stateDir, { recursive: true });
-    fs11.writeFileSync(statePath, JSON.stringify(state, null, 2));
+    const tmpPath = statePath + ".tmp";
+    fs11.writeFileSync(tmpPath, JSON.stringify(state, null, 2));
+    fs11.renameSync(tmpPath, statePath);
     return Ok(void 0);
   } catch (error) {
     return Err(
@@ -8463,7 +8478,9 @@ function loadContentHashes(stateDir) {
 }
 function saveContentHashes(stateDir, index) {
   const hashesPath = path9.join(stateDir, CONTENT_HASHES_FILE);
-  fs12.writeFileSync(hashesPath, JSON.stringify(index, null, 2) + "\n");
+  const tmpPath = hashesPath + ".tmp";
+  fs12.writeFileSync(tmpPath, JSON.stringify(index, null, 2) + "\n");
+  fs12.renameSync(tmpPath, hashesPath);
 }
 function rebuildContentHashes(stateDir, learningsFile) {
   const learningsPath = path9.join(stateDir, learningsFile);
@@ -8673,6 +8690,34 @@ function checkOverlap(newEntry, existingEntries, options) {
     ...bestScore >= threshold && bestEntry ? { matchedEntry: bestEntry, matchedHash: computeEntryHash(bestEntry) } : {}
   };
 }
+function sleep(ms) {
+  return new Promise((resolve8) => setTimeout(resolve8, ms));
+}
+async function acquireFileLock(lockPath) {
+  for (let attempt = 0; attempt < LOCK_RETRIES; attempt++) {
+    try {
+      const fd = fs14.openSync(
+        lockPath,
+        fs14.constants.O_CREAT | fs14.constants.O_EXCL | fs14.constants.O_WRONLY
+      );
+      fs14.closeSync(fd);
+      return;
+    } catch (err) {
+      const isExist = err instanceof Error && "code" in err && err.code === "EEXIST";
+      if (!isExist) throw err;
+      if (attempt < LOCK_RETRIES - 1) {
+        await sleep(LOCK_BACKOFFS[attempt]);
+      }
+    }
+  }
+  throw new Error(`Failed to acquire lock after ${LOCK_RETRIES} attempts: ${lockPath}`);
+}
+function releaseFileLock(lockPath) {
+  try {
+    fs14.unlinkSync(lockPath);
+  } catch {
+  }
+}
 function loadOrRebuildHashes(stateDir, learningsPath) {
   const hashesPath = path11.join(stateDir, CONTENT_HASHES_FILE);
   if (fs14.existsSync(hashesPath)) {
@@ -8708,52 +8753,58 @@ async function appendLearning(projectPath, learning, skillName, outcome, stream,
     const stateDir = dirResult.value;
     const learningsPath = path11.join(stateDir, LEARNINGS_FILE);
     fs14.mkdirSync(stateDir, { recursive: true });
-    const normalizedContent = normalizeLearningContent(learning);
-    const contentHash = computeContentHash(normalizedContent);
-    const contentHashes = loadOrRebuildHashes(stateDir, learningsPath);
-    if (contentHashes[contentHash]) {
-      return Ok({ appended: false });
-    }
-    const timestamp = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-    const bulletLine = formatBulletLine(
-      timestamp,
-      learning,
-      skillName,
-      outcome,
-      rootCause,
-      triedAndFailed
-    );
-    const fmTags = [];
-    if (skillName) fmTags.push(skillName);
-    if (outcome) fmTags.push(outcome);
-    const hash = crypto3.createHash("sha256").update(bulletLine).digest("hex").slice(0, 8);
-    const tagsStr = fmTags.length > 0 ? ` tags:${fmTags.join(",")}` : "";
-    const entry = `
+    const lockPath = learningsPath + ".lock";
+    await acquireFileLock(lockPath);
+    try {
+      const normalizedContent = normalizeLearningContent(learning);
+      const contentHash = computeContentHash(normalizedContent);
+      const contentHashes = loadOrRebuildHashes(stateDir, learningsPath);
+      if (contentHashes[contentHash]) {
+        return Ok({ appended: false });
+      }
+      const timestamp = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
+      const bulletLine = formatBulletLine(
+        timestamp,
+        learning,
+        skillName,
+        outcome,
+        rootCause,
+        triedAndFailed
+      );
+      const fmTags = [];
+      if (skillName) fmTags.push(skillName);
+      if (outcome) fmTags.push(outcome);
+      const hash = crypto3.createHash("sha256").update(bulletLine).digest("hex").slice(0, 8);
+      const tagsStr = fmTags.length > 0 ? ` tags:${fmTags.join(",")}` : "";
+      const entry = `
 <!-- hash:${hash}${tagsStr} -->
 ${bulletLine}
 `;
-    let overlapResult;
-    let existingLineCount;
-    if (!fs14.existsSync(learningsPath)) {
-      fs14.writeFileSync(learningsPath, `# Learnings
+      let overlapResult;
+      let existingLineCount;
+      if (!fs14.existsSync(learningsPath)) {
+        fs14.writeFileSync(learningsPath, `# Learnings
 ${entry}`);
-      existingLineCount = 1;
-    } else {
-      const existingContent = fs14.readFileSync(learningsPath, "utf-8");
-      const existingEntries = existingContent.split("\n").filter((line) => /^- \*\*\d{4}-\d{2}-\d{2}/.test(line));
-      const overlap = checkOverlap(bulletLine, existingEntries);
-      if (overlap.score >= 0.7) overlapResult = overlap;
-      existingLineCount = existingContent.split("\n").length;
-      fs14.appendFileSync(learningsPath, entry);
-    }
-    const bulletLineNum = existingLineCount + 2;
-    contentHashes[contentHash] = { date: timestamp ?? "", line: bulletLineNum };
-    saveContentHashes(stateDir, contentHashes);
-    invalidateLearningsCacheEntry(learningsPath);
-    return Ok({
-      appended: true,
-      ...overlapResult ? { overlap: overlapResult } : {}
-    });
+        existingLineCount = 1;
+      } else {
+        const existingContent = fs14.readFileSync(learningsPath, "utf-8");
+        const existingEntries = existingContent.split("\n").filter((line) => /^- \*\*\d{4}-\d{2}-\d{2}/.test(line));
+        const overlap = checkOverlap(bulletLine, existingEntries);
+        if (overlap.score >= 0.7) overlapResult = overlap;
+        existingLineCount = existingContent.split("\n").length;
+        fs14.appendFileSync(learningsPath, entry);
+      }
+      const bulletLineNum = existingLineCount + 2;
+      contentHashes[contentHash] = { date: timestamp ?? "", line: bulletLineNum };
+      saveContentHashes(stateDir, contentHashes);
+      invalidateLearningsCacheEntry(learningsPath);
+      return Ok({
+        appended: true,
+        ...overlapResult ? { overlap: overlapResult } : {}
+      });
+    } finally {
+      releaseFileLock(lockPath);
+    }
   } catch (error) {
     return Err(
       new Error(
@@ -9181,7 +9232,9 @@ async function saveHandoff(projectPath, handoff, stream, session) {
     const stateDir = dirResult.value;
     const handoffPath = path15.join(stateDir, HANDOFF_FILE);
     fs18.mkdirSync(stateDir, { recursive: true });
-    fs18.writeFileSync(handoffPath, JSON.stringify(handoff, null, 2));
+    const tmpPath = handoffPath + ".tmp";
+    fs18.writeFileSync(tmpPath, JSON.stringify(handoff, null, 2));
+    fs18.renameSync(tmpPath, handoffPath);
     return Ok(void 0);
   } catch (error) {
     return Err(
@@ -9895,14 +9948,14 @@ function readTaint(projectRoot, sessionId) {
     state = JSON.parse(content);
   } catch {
     try {
-      unlinkSync(filePath);
+      unlinkSync2(filePath);
     } catch {
     }
     return null;
   }
   if (!state.sessionId || !state.taintedAt || !state.expiresAt || !state.findings) {
     try {
-      unlinkSync(filePath);
+      unlinkSync2(filePath);
     } catch {
     }
     return null;
@@ -9919,7 +9972,7 @@ function checkTaint(projectRoot, sessionId) {
   if (now >= expiresAt) {
     const filePath = getTaintFilePath(projectRoot, sessionId);
     try {
-      unlinkSync(filePath);
+      unlinkSync2(filePath);
     } catch {
     }
     return { tainted: false, expired: true, state };
@@ -9956,7 +10009,7 @@ function clearTaint(projectRoot, sessionId) {
   if (sessionId) {
     const filePath = getTaintFilePath(projectRoot, sessionId);
     try {
-      unlinkSync(filePath);
+      unlinkSync2(filePath);
       return 1;
     } catch {
       return 0;
@@ -9969,7 +10022,7 @@ function clearTaint(projectRoot, sessionId) {
     for (const file of files) {
       if (file.startsWith("session-taint-") && file.endsWith(".json")) {
         try {
-          unlinkSync(join362(harnessDir, file));
+          unlinkSync2(join362(harnessDir, file));
           count++;
         } catch {
         }
@@ -12700,7 +12753,7 @@ function parseRepoParts(repo) {
   }
   return { owner: parts[0], repo: parts[1] };
 }
-function sleep(ms) {
+function sleep2(ms) {
   return new Promise((resolve8) => setTimeout(resolve8, ms));
 }
 async function fetchWithRetry(fetchFn, input, init, opts = RETRY_DEFAULTS) {
@@ -12718,7 +12771,7 @@ async function fetchWithRetry(fetchFn, input, init, opts = RETRY_DEFAULTS) {
     } else {
       delayMs = opts.baseDelayMs * Math.pow(2, attempt) + Math.random() * 500;
     }
-    await sleep(delayMs);
+    await sleep2(delayMs);
   }
   return lastResponse;
 }
@@ -13947,7 +14000,7 @@ function collectEvents(projectRoot, consent) {
     })
   );
 }
-function sleep2(ms) {
+function sleep3(ms) {
   return new Promise((resolve8) => setTimeout(resolve8, ms));
 }
 async function send(events, apiKey) {
@@ -13967,14 +14020,14 @@ async function send(events, apiKey) {
     } catch {
     }
     if (attempt < MAX_ATTEMPTS - 1) {
-      await sleep2(1e3 * (attempt + 1));
+      await sleep3(1e3 * (attempt + 1));
     }
   }
 }
-var VALID_TYPES, CONVENTIONAL_PATTERN, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile42, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SKIP_DIRS, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS;
+var VALID_TYPES, CONVENTIONAL_PATTERN, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile42, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SKIP_DIRS, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS;
 var init_dist3 = __esm({
   "../core/dist/index.mjs"() {
-    init_chunk_UWAI34RR();
+    init_chunk_H73442AZ();
     init_dist();
     init_dist();
     init_dist();
@@ -16319,6 +16372,8 @@ var init_dist3 = __esm({
       temporal: 0.1,
       codeReference: 0.15
     };
+    LOCK_RETRIES = 3;
+    LOCK_BACKOFFS = [50, 100, 200];
     PROMOTABLE_OUTCOMES = ["gotcha", "decision", "observation"];
     failuresCacheMap = /* @__PURE__ */ new Map();
     FAILURE_LINE_REGEX = /^- \*\*(\d{4}-\d{2}-\d{2}) \[skill:([^\]]+)\] \[type:([^\]]+)\]:\*\* (.+)$/;
@@ -17618,7 +17673,7 @@ var init_dist3 = __esm({
         }
         const tmp = this.timelinePath + "." + randomBytes22(4).toString("hex") + ".tmp";
         writeFileSync16(tmp, JSON.stringify(timeline, null, 2));
-        renameSync52(tmp, this.timelinePath);
+        renameSync82(tmp, this.timelinePath);
       }
       /**
        * Capture a new snapshot from a scan result.
@@ -18979,7 +19034,7 @@ console.log('Blueprint player initialized.');
         };
       }
     };
-    VERSION = "0.21.3";
+    VERSION = "0.23.3";
     POSTHOG_BATCH_URL = "https://app.posthog.com/batch";
     MAX_ATTEMPTS = 3;
     TIMEOUT_MS = 5e3;

package/dist/{chunk-RC5ZY3EV.js → chunk-IOW3MW2K.js}

@@ -53,12 +53,12 @@ async function findMarkdownFiles(dir) {
   return results;
 }
 function parseFrontmatter(raw) {
-  const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
+  const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/);
   if (!match) return null;
   const yamlBlock = match[1];
   const body = match[2];
   const fm = {};
-  for (const line of yamlBlock.split("\n")) {
+  for (const line of yamlBlock.split(/\r?\n/)) {
     const kvMatch = line.match(/^(\w+):\s*(.+)$/);
     if (!kvMatch) continue;
     const key = kvMatch[1];

package/dist/{chunk-B66LRB5M.js → chunk-L3Y7L4EG.js}

@@ -1,6 +1,6 @@
 import {
   init_dist
-} from "./chunk-YC4EYIER.js";
+} from "./chunk-IBTHD2UA.js";
 import {
   Err,
   Ok

package/dist/{chunk-BK4DJIIY.js → chunk-MGPVA2EM.js}

@@ -1,6 +1,6 @@
 import {
   resolveProjectConfig
-} from "./chunk-TSVYBDDE.js";
+} from "./chunk-YZH4I4JO.js";
 import {
   resultToMcpResponse
 } from "./chunk-EPUKTTJZ.js";
@@ -38,7 +38,7 @@ async function handleCheckDependencies(input) {
   const configResult = resolveProjectConfig(projectPath);
   if (!configResult.ok) return resultToMcpResponse(configResult);
   try {
-    const { validateDependencies, TypeScriptParser } = await import("./dist-CJDGASPP.js");
+    const { validateDependencies, TypeScriptParser } = await import("./dist-CPKL5Y2R.js");
     const config = configResult.value;
     const rawLayers = Array.isArray(config.layers) ? config.layers : [];
     const layers = rawLayers.map((l) => ({
@@ -47,11 +47,11 @@ async function handleCheckDependencies(input) {
       allowedDependencies: l.allowedDependencies
     }));
     const parser = new TypeScriptParser();
-    const { loadGraphStore } = await import("./graph-loader-RDXSEBD7.js");
+    const { loadGraphStore } = await import("./graph-loader-QEI7SYOQ.js");
     const store = await loadGraphStore(projectPath);
     let graphDependencyData;
     if (store) {
-      const { GraphConstraintAdapter } = await import("./dist-NCNAXUFD.js");
+      const { GraphConstraintAdapter } = await import("./dist-BZS2XRLG.js");
       const adapter = new GraphConstraintAdapter(store);
       const graphData = adapter.computeDependencyGraph();
       graphDependencyData = {
@@ -65,6 +65,29 @@ async function handleCheckDependencies(input) {
       parser,
       ...graphDependencyData !== void 0 && { graphDependencyData }
     });
+    let designViolations = [];
+    if (store) {
+      const designTokenNodes = store.findNodes({ type: "design_token" });
+      if (designTokenNodes.length > 0) {
+        const { DesignConstraintAdapter } = await import("./dist-BZS2XRLG.js");
+        const designAdapter = new DesignConstraintAdapter(store);
+        const fileNodes = store.findNodes({ type: "file" });
+        for (const fileNode of fileNodes) {
+          const filePath = fileNode.path ?? fileNode.id;
+          if (!/\.(tsx?|jsx?|css|scss|less|vue|svelte)$/.test(filePath)) continue;
+          const source = typeof fileNode.metadata?.source === "string" ? fileNode.metadata.source : "";
+          if (!source) continue;
+          designViolations.push(...designAdapter.checkAll(source, filePath));
+        }
+      }
+    }
+    if (result.ok && designViolations.length > 0) {
+      const merged = {
+        ...result.value,
+        designViolations
+      };
+      return resultToMcpResponse({ ok: true, value: merged });
+    }
     return resultToMcpResponse(result);
   } catch (error) {
     return {

package/dist/{chunk-NY7DTZ6K.js → chunk-Q5DKIL46.js}

@@ -1,6 +1,6 @@
 import {
   resolveProjectConfig
-} from "./chunk-TSVYBDDE.js";
+} from "./chunk-YZH4I4JO.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
@@ -49,7 +49,7 @@ async function handleValidateProject(input) {
   checks.config = "pass";
   const config = configResult.value;
   try {
-    const core = await import("./dist-CJDGASPP.js");
+    const core = await import("./dist-CPKL5Y2R.js");
     if (typeof core.validateFileStructure === "function" && Array.isArray(config.conventions)) {
       const conventions = config.conventions;
       const structureResult = await core.validateFileStructure(projectPath, conventions);
@@ -68,7 +68,7 @@ async function handleValidateProject(input) {
   } catch {
   }
   try {
-    const core = await import("./dist-CJDGASPP.js");
+    const core = await import("./dist-CPKL5Y2R.js");
     if (typeof core.validateAgentsMap === "function") {
       const agentsMapPath = path.join(projectPath, "AGENTS.md");
       const agentsResult = await core.validateAgentsMap(agentsMapPath);

package/dist/{chunk-TY2ESLVL.js → chunk-SDDQPMZK.js}

@@ -4,7 +4,7 @@ import {
 import {
   listPersonas,
   loadPersona
-} from "./chunk-JV4Y2U5F.js";
+} from "./chunk-BO4AJZRE.js";
 import {
   GENERATED_HEADER_AGENT,
   VALID_PLATFORMS,

package/dist/{chunk-7GY6WNEI.js → chunk-SDPHFDQS.js}

@@ -1,6 +1,6 @@
 import {
   init_dist
-} from "./chunk-YC4EYIER.js";
+} from "./chunk-IBTHD2UA.js";
 import {
   Ok
 } from "./chunk-RL4VMEXL.js";

package/dist/{chunk-56A6OXVA.js → chunk-T7UZOJF4.js}

@@ -7,10 +7,10 @@ import {
 import {
   findConfigFile,
   loadConfig
-} from "./chunk-VKS3F46M.js";
+} from "./chunk-A4ETL34H.js";
 import {
   init_dist
-} from "./chunk-YC4EYIER.js";
+} from "./chunk-IBTHD2UA.js";
 import {
   Ok
 } from "./chunk-RL4VMEXL.js";
@@ -50,18 +50,18 @@ async function handleCheckDocs(input) {
     const projectPath = sanitizePath(input.path);
     const scope = input.scope ?? "coverage";
     if (scope === "integrity") {
-      const { validateKnowledgeMap } = await import("./dist-CJDGASPP.js");
+      const { validateKnowledgeMap } = await import("./dist-CPKL5Y2R.js");
       const result2 = await validateKnowledgeMap(projectPath);
       return resultToMcpResponse(result2);
     }
     if (scope === "all") {
-      const { checkDocCoverage: checkDocCoverage2, validateKnowledgeMap } = await import("./dist-CJDGASPP.js");
+      const { checkDocCoverage: checkDocCoverage2, validateKnowledgeMap } = await import("./dist-CPKL5Y2R.js");
       const domain2 = input.domain ?? "src";
-      const { loadGraphStore: loadGraphStore2 } = await import("./graph-loader-RDXSEBD7.js");
+      const { loadGraphStore: loadGraphStore2 } = await import("./graph-loader-QEI7SYOQ.js");
       const store2 = await loadGraphStore2(projectPath);
       let graphCoverage2;
       if (store2) {
-        const { Assembler } = await import("./dist-NCNAXUFD.js");
+        const { Assembler } = await import("./dist-BZS2XRLG.js");
         const assembler = new Assembler(store2);
         const report = assembler.checkCoverage();
         graphCoverage2 = {
@@ -94,13 +94,13 @@ async function handleCheckDocs(input) {
       }
       return resultToMcpResponse(Ok({ coverage, integrity }));
     }
-    const { checkDocCoverage } = await import("./dist-CJDGASPP.js");
+    const { checkDocCoverage } = await import("./dist-CPKL5Y2R.js");
     const domain = input.domain ?? "src";
-    const { loadGraphStore } = await import("./graph-loader-RDXSEBD7.js");
+    const { loadGraphStore } = await import("./graph-loader-QEI7SYOQ.js");
     const store = await loadGraphStore(projectPath);
     let graphCoverage;
     if (store) {
-      const { Assembler } = await import("./dist-NCNAXUFD.js");
+      const { Assembler } = await import("./dist-BZS2XRLG.js");
       const assembler = new Assembler(store);
       const report = assembler.checkCoverage();
       graphCoverage = {