@harness-engineering/cli 1.6.2 → 1.7.0

package/dist/agents/skills/shared/design-knowledge/typography/pairings.yaml

@@ -0,0 +1,274 @@
+description: "Curated font pairings with complete fallback stacks and usage guidance"
+
+pairings:
+  - name: "Modern Editorial"
+    tags: ["editorial", "creative", "premium"]
+    display:
+      family: "Instrument Serif"
+      fallback: "Georgia, 'Times New Roman', serif"
+      weights: [400, 700]
+      variable: false
+      source: "Google Fonts"
+    body:
+      family: "Geist"
+      fallback: "system-ui, -apple-system, sans-serif"
+      weights: [400, 500, 600]
+      variable: true
+      source: "Vercel"
+    mono:
+      family: "Geist Mono"
+      fallback: "'SF Mono', 'Fira Code', 'Cascadia Code', monospace"
+      weights: [400, 500]
+      source: "Vercel"
+    scale:
+      base: "1rem"
+      ratio: 1.25
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.25rem"
+        "2xl": "1.5rem"
+        "3xl": "1.875rem"
+        "4xl": "2.25rem"
+        "5xl": "3rem"
+    usage: "Best for editorial, blog, and content-heavy sites that want to feel premium and literary."
+
+  - name: "Clean Tech"
+    tags: ["tech", "saas", "dashboard", "modern"]
+    display:
+      family: "Inter"
+      fallback: "system-ui, -apple-system, 'Segoe UI', sans-serif"
+      weights: [500, 600, 700]
+      variable: true
+      source: "Google Fonts"
+    body:
+      family: "Inter"
+      fallback: "system-ui, -apple-system, 'Segoe UI', sans-serif"
+      weights: [400, 500, 600]
+      variable: true
+      source: "Google Fonts"
+    mono:
+      family: "JetBrains Mono"
+      fallback: "'SF Mono', 'Fira Code', 'Cascadia Code', monospace"
+      weights: [400, 500]
+      source: "Google Fonts"
+    scale:
+      base: "1rem"
+      ratio: 1.2
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.25rem"
+        "2xl": "1.5rem"
+        "3xl": "1.8rem"
+        "4xl": "2.16rem"
+        "5xl": "2.592rem"
+    usage: "Ideal for SaaS dashboards, developer tools, and data-heavy interfaces where clarity and density matter."
+
+  - name: "Traditional Pro"
+    tags: ["professional", "corporate", "legal", "finance"]
+    display:
+      family: "Playfair Display"
+      fallback: "Georgia, 'Times New Roman', 'Palatino Linotype', serif"
+      weights: [400, 700, 900]
+      variable: true
+      source: "Google Fonts"
+    body:
+      family: "Source Sans 3"
+      fallback: "'Segoe UI', 'Helvetica Neue', Arial, sans-serif"
+      weights: [400, 600, 700]
+      variable: true
+      source: "Google Fonts"
+    mono:
+      family: "Source Code Pro"
+      fallback: "'SF Mono', 'Courier New', monospace"
+      weights: [400, 500]
+      source: "Google Fonts"
+    scale:
+      base: "1rem"
+      ratio: 1.333
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.333rem"
+        "2xl": "1.777rem"
+        "3xl": "2.369rem"
+        "4xl": "3.157rem"
+        "5xl": "4.209rem"
+    usage: "Best for corporate sites, law firms, financial services, and publications that need gravitas and authority."
+
+  - name: "Friendly Rounded"
+    tags: ["friendly", "approachable", "lifestyle", "consumer"]
+    display:
+      family: "Nunito"
+      fallback: "'Varela Round', 'Helvetica Neue', Arial, sans-serif"
+      weights: [600, 700, 800]
+      variable: true
+      source: "Google Fonts"
+    body:
+      family: "DM Sans"
+      fallback: "'Helvetica Neue', Arial, sans-serif"
+      weights: [400, 500, 700]
+      variable: true
+      source: "Google Fonts"
+    mono:
+      family: "DM Mono"
+      fallback: "'SF Mono', 'Fira Code', monospace"
+      weights: [400, 500]
+      source: "Google Fonts"
+    scale:
+      base: "1rem"
+      ratio: 1.25
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.25rem"
+        "2xl": "1.5rem"
+        "3xl": "1.875rem"
+        "4xl": "2.25rem"
+        "5xl": "3rem"
+    usage: "Perfect for consumer apps, lifestyle brands, and friendly SaaS products that want to feel warm and approachable."
+
+  - name: "Geometric Minimal"
+    tags: ["minimal", "geometric", "startup", "clean"]
+    display:
+      family: "Space Grotesk"
+      fallback: "'Helvetica Neue', Arial, sans-serif"
+      weights: [500, 700]
+      variable: true
+      source: "Google Fonts"
+    body:
+      family: "Work Sans"
+      fallback: "'Helvetica Neue', Arial, sans-serif"
+      weights: [400, 500, 600]
+      variable: true
+      source: "Google Fonts"
+    mono:
+      family: "Space Mono"
+      fallback: "'SF Mono', 'Courier New', monospace"
+      weights: [400, 700]
+      source: "Google Fonts"
+    scale:
+      base: "1rem"
+      ratio: 1.2
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.25rem"
+        "2xl": "1.5rem"
+        "3xl": "1.8rem"
+        "4xl": "2.16rem"
+        "5xl": "2.592rem"
+    usage: "Great for startups, portfolios, and minimal landing pages that favor geometric precision over ornamentation."
+
+  - name: "Monospace Forward"
+    tags: ["developer", "technical", "code", "hacker"]
+    display:
+      family: "JetBrains Mono"
+      fallback: "'SF Mono', 'Fira Code', 'Cascadia Code', monospace"
+      weights: [500, 700, 800]
+      variable: true
+      source: "Google Fonts"
+    body:
+      family: "IBM Plex Sans"
+      fallback: "'Helvetica Neue', Arial, sans-serif"
+      weights: [400, 500, 600]
+      variable: false
+      source: "Google Fonts"
+    mono:
+      family: "JetBrains Mono"
+      fallback: "'SF Mono', 'Fira Code', 'Cascadia Code', monospace"
+      weights: [400, 500]
+      source: "Google Fonts"
+    scale:
+      base: "1rem"
+      ratio: 1.2
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.25rem"
+        "2xl": "1.5rem"
+        "3xl": "1.8rem"
+        "4xl": "2.16rem"
+        "5xl": "2.592rem"
+    usage: "Tailored for developer tools, documentation sites, and technical blogs where code is a first-class citizen."
+
+  - name: "High Contrast A11y"
+    tags: ["accessible", "healthcare", "government", "high-contrast"]
+    display:
+      family: "Atkinson Hyperlegible"
+      fallback: "Arial, 'Helvetica Neue', sans-serif"
+      weights: [400, 700]
+      variable: false
+      source: "Google Fonts"
+    body:
+      family: "Atkinson Hyperlegible"
+      fallback: "Arial, 'Helvetica Neue', sans-serif"
+      weights: [400, 700]
+      variable: false
+      source: "Google Fonts"
+    mono:
+      family: "Red Hat Mono"
+      fallback: "'SF Mono', 'Courier New', monospace"
+      weights: [400, 700]
+      source: "Google Fonts"
+    scale:
+      base: "1.125rem"
+      ratio: 1.25
+      sizes:
+        xs: "0.875rem"
+        sm: "1rem"
+        base: "1.125rem"
+        lg: "1.25rem"
+        xl: "1.5rem"
+        "2xl": "1.875rem"
+        "3xl": "2.25rem"
+        "4xl": "3rem"
+        "5xl": "3.75rem"
+    usage: "Designed for maximum legibility. Ideal for healthcare, government, education, and any context where accessibility is paramount."
+
+  - name: "System Native"
+    tags: ["system", "performance", "native", "zero-download"]
+    display:
+      family: "system-ui"
+      fallback: "-apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif"
+      weights: [500, 600, 700]
+      variable: false
+      source: "System"
+    body:
+      family: "system-ui"
+      fallback: "-apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif"
+      weights: [400, 500, 600]
+      variable: false
+      source: "System"
+    mono:
+      family: "ui-monospace"
+      fallback: "'SF Mono', 'Cascadia Code', 'Fira Code', 'JetBrains Mono', 'Courier New', monospace"
+      weights: [400, 500]
+      source: "System"
+    scale:
+      base: "1rem"
+      ratio: 1.25
+      sizes:
+        xs: "0.75rem"
+        sm: "0.875rem"
+        base: "1rem"
+        lg: "1.125rem"
+        xl: "1.25rem"
+        "2xl": "1.5rem"
+        "3xl": "1.875rem"
+        "4xl": "2.25rem"
+        "5xl": "3rem"
+    usage: "Zero font downloads, instant rendering. Best for performance-critical apps, internal tools, and native-feeling web applications."

package/dist/bin/harness.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   createProgram
-} from "../chunk-IUFFBBYV.js";
-import "../chunk-UDWGSL3T.js";
-import "../chunk-USEYPS7F.js";
+} from "../chunk-FFIX3QVG.js";
+import "../chunk-4WUGOJQ7.js";
+import "../chunk-GA6GN5J2.js";
 import {
   handleError
 } from "../chunk-ACMDUQJG.js";

package/dist/{chunk-UDWGSL3T.js → chunk-4WUGOJQ7.js}

@@ -1,11 +1,11 @@
 import {
   Ok
-} from "./chunk-USEYPS7F.js";
+} from "./chunk-GA6GN5J2.js";
 
 // src/commands/validate-cross-check.ts
 import * as fs from "fs";
 import * as path from "path";
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 function findFiles(dir, ext) {
   if (!fs.existsSync(dir)) return [];
   return fs.readdirSync(dir).filter((f) => f.endsWith(ext)).map((f) => path.join(dir, f));
@@ -21,7 +21,7 @@ function extractPlannedFiles(planContent) {
 }
 function getFileModTime(filePath, projectPath) {
   try {
-    const output = execSync(`git log -1 --format=%aI -- "${filePath}"`, {
+    const output = execFileSync("git", ["log", "-1", "--format=%aI", "--", filePath], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]

package/dist/{chunk-IUFFBBYV.js → chunk-FFIX3QVG.js}

@@ -32,7 +32,7 @@ import {
   validateAgentsMap,
   validateDependencies,
   validateKnowledgeMap
-} from "./chunk-USEYPS7F.js";
+} from "./chunk-GA6GN5J2.js";
 import {
   CLIError,
   ExitCode,
@@ -86,6 +86,23 @@ var PhaseGatesConfigSchema = z.object({
   severity: z.enum(["error", "warning"]).default("error"),
   mappings: z.array(PhaseGateMappingSchema).default([{ implPattern: "src/**/*.ts", specPattern: "docs/specs/{feature}.md" }])
 });
+var SecurityConfigSchema = z.object({
+  enabled: z.boolean().default(true),
+  strict: z.boolean().default(false),
+  rules: z.record(z.string(), z.enum(["off", "error", "warning", "info"])).optional(),
+  exclude: z.array(z.string()).optional()
+}).passthrough();
+var PerformanceConfigSchema = z.object({
+  complexity: z.record(z.unknown()).optional(),
+  coupling: z.record(z.unknown()).optional(),
+  sizeBudget: z.record(z.unknown()).optional()
+}).passthrough();
+var DesignConfigSchema = z.object({
+  strictness: z.enum(["strict", "standard", "permissive"]).default("standard"),
+  platforms: z.array(z.enum(["web", "mobile"])).default([]),
+  tokenPath: z.string().optional(),
+  aestheticIntent: z.string().optional()
+});
 var HarnessConfigSchema = z.object({
   version: z.literal(1),
   name: z.string().optional(),
@@ -97,12 +114,15 @@ var HarnessConfigSchema = z.object({
   docsDir: z.string().default("./docs"),
   agent: AgentConfigSchema.optional(),
   entropy: EntropyConfigSchema.optional(),
+  security: SecurityConfigSchema.optional(),
+  performance: PerformanceConfigSchema.optional(),
   template: z.object({
     level: z.enum(["basic", "intermediate", "advanced"]),
     framework: z.string().optional(),
     version: z.number()
   }).optional(),
-  phaseGates: PhaseGatesConfigSchema.optional()
+  phaseGates: PhaseGatesConfigSchema.optional(),
+  design: DesignConfigSchema.optional()
 });
 
 // src/config/loader.ts
@@ -294,7 +314,7 @@ function createValidateCommand() {
       process.exit(result.error.exitCode);
     }
     if (opts.crossCheck) {
-      const { runCrossCheck: runCrossCheck2 } = await import("./validate-cross-check-CPEPNLOD.js");
+      const { runCrossCheck: runCrossCheck2 } = await import("./validate-cross-check-WGXQ7K62.js");
       const cwd = process.cwd();
       const specsDir = path2.join(cwd, "docs", "specs");
       const plansDir = path2.join(cwd, "docs", "plans");
@@ -660,7 +680,7 @@ function createPerfCommand() {
   perf.command("bench [glob]").description("Run benchmarks via vitest bench").action(async (glob2, _opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const cwd = process.cwd();
-    const { BenchmarkRunner } = await import("./dist-RBZXXJHG.js");
+    const { BenchmarkRunner } = await import("./dist-C4J67MPP.js");
     const runner = new BenchmarkRunner();
     const benchFiles = runner.discover(cwd, glob2);
     if (benchFiles.length === 0) {
@@ -729,7 +749,7 @@ Results (${result.results.length} benchmarks):`);
   baselines.command("update").description("Update baselines from latest benchmark run").action(async (_opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const cwd = process.cwd();
-    const { BenchmarkRunner } = await import("./dist-RBZXXJHG.js");
+    const { BenchmarkRunner } = await import("./dist-C4J67MPP.js");
     const runner = new BenchmarkRunner();
     const manager = new BaselineManager(cwd);
     logger.info("Running benchmarks to update baselines...");
@@ -742,8 +762,8 @@ Results (${result.results.length} benchmarks):`);
     }
     let commitHash = "unknown";
     try {
-      const { execSync: execSync5 } = await import("child_process");
-      commitHash = execSync5("git rev-parse --short HEAD", { cwd, encoding: "utf-8" }).trim();
+      const { execSync: execSync3 } = await import("child_process");
+      commitHash = execSync3("git rev-parse --short HEAD", { cwd, encoding: "utf-8" }).trim();
     } catch {
     }
     manager.save(benchResult.results, commitHash);
@@ -757,7 +777,7 @@ Results (${result.results.length} benchmarks):`);
   perf.command("report").description("Full performance report with metrics, trends, and hotspots").action(async (_opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
     const cwd = process.cwd();
-    const { EntropyAnalyzer: EntropyAnalyzer2 } = await import("./dist-RBZXXJHG.js");
+    const { EntropyAnalyzer: EntropyAnalyzer2 } = await import("./dist-C4J67MPP.js");
     const analyzer = new EntropyAnalyzer2({
       rootDir: path6.resolve(cwd),
       analyze: { complexity: true, coupling: true }
@@ -1230,8 +1250,7 @@ import * as path10 from "path";
 import * as os from "os";
 import chalk2 from "chalk";
 var HARNESS_MCP_ENTRY = {
-  command: "npx",
-  args: ["@harness-engineering/mcp-server"]
+  command: "harness-mcp"
 };
 function readJsonFile(filePath) {
   if (!fs4.existsSync(filePath)) return null;
@@ -3211,7 +3230,7 @@ import * as path24 from "path";
 import { parse as parse5 } from "yaml";
 
 // src/skill/complexity.ts
-import { execSync as execSync3 } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 function evaluateSignals(signals) {
   if (signals.fileCount >= 3) return "full";
   if (signals.newDir) return "full";
@@ -3223,17 +3242,17 @@ function evaluateSignals(signals) {
 }
 function detectComplexity(projectPath) {
   try {
-    const base = execSync3("git merge-base HEAD main", {
+    const base = execFileSync2("git", ["merge-base", "HEAD", "main"], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim();
-    const diffFiles = execSync3(`git diff --name-only ${base}`, {
+    const diffFiles = execFileSync2("git", ["diff", "--name-only", base], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim().split("\n").filter(Boolean);
-    const diffStat = execSync3(`git diff --stat ${base}`, {
+    const diffStat = execFileSync2("git", ["diff", "--stat", base], {
       cwd: projectPath,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
@@ -4526,7 +4545,7 @@ function createCICommand() {
 
 // src/commands/update.ts
 import { Command as Command36 } from "commander";
-import { execSync as execSync4 } from "child_process";
+import { execFileSync as execFileSync3 } from "child_process";
 import { realpathSync } from "fs";
 import readline3 from "readline";
 import chalk4 from "chalk";
@@ -4546,7 +4565,7 @@ function detectPackageManager() {
   return "npm";
 }
 function getLatestVersion(pkg = "@harness-engineering/cli") {
-  const output = execSync4(`npm view ${pkg} dist-tags.latest`, {
+  const output = execFileSync3("npm", ["view", pkg, "dist-tags.latest"], {
     encoding: "utf-8",
     timeout: 15e3
   });
@@ -4554,7 +4573,7 @@ function getLatestVersion(pkg = "@harness-engineering/cli") {
 }
 function getInstalledVersion(pm) {
   try {
-    const output = execSync4(`${pm} list -g @harness-engineering/cli --json`, {
+    const output = execFileSync3(pm, ["list", "-g", "@harness-engineering/cli", "--json"], {
       encoding: "utf-8",
       timeout: 15e3
     });
@@ -4567,7 +4586,7 @@ function getInstalledVersion(pm) {
 }
 function getInstalledPackages(pm) {
   try {
-    const output = execSync4(`${pm} list -g --json`, {
+    const output = execFileSync3(pm, ["list", "-g", "--json"], {
       encoding: "utf-8",
       timeout: 15e3
     });
@@ -4622,19 +4641,19 @@ function createUpdateCommand() {
     if (globalOpts.verbose) {
       logger.info(`Installed packages: ${packages.join(", ")}`);
     }
-    const installArgs = packages.map((pkg) => {
+    const installPkgs = packages.map((pkg) => {
       if (opts.version && pkg === "@harness-engineering/cli") {
         return `${pkg}@${opts.version}`;
       }
       return `${pkg}@latest`;
-    }).join(" ");
-    const installCmd = `${pm} install -g ${installArgs}`;
+    });
+    const installCmd = `${pm} install -g ${installPkgs.join(" ")}`;
     if (globalOpts.verbose) {
       logger.info(`Running: ${installCmd}`);
     }
     try {
       logger.info("Updating packages...");
-      execSync4(installCmd, { stdio: "inherit", timeout: 12e4 });
+      execFileSync3(pm, ["install", "-g", ...installPkgs], { stdio: "inherit", timeout: 12e4 });
       console.log("");
       logger.success("Update complete");
     } catch {
@@ -4647,12 +4666,14 @@ function createUpdateCommand() {
     const regenAnswer = await prompt("Regenerate slash commands and agent definitions? (y/N) ");
     if (regenAnswer === "y" || regenAnswer === "yes") {
       const scopeAnswer = await prompt("Generate for (g)lobal or (l)ocal project? (g/l) ");
-      const globalFlag = scopeAnswer === "g" || scopeAnswer === "global" ? " --global" : "";
+      const isGlobal = scopeAnswer === "g" || scopeAnswer === "global";
       try {
-        execSync4(`harness generate${globalFlag}`, { stdio: "inherit" });
+        execFileSync3("harness", ["generate", ...isGlobal ? ["--global"] : []], {
+          stdio: "inherit"
+        });
       } catch {
         logger.warn("Generation failed. Run manually:");
-        console.log(`  ${chalk4.cyan(`harness generate${globalFlag}`)}`);
+        console.log(`  ${chalk4.cyan(`harness generate${isGlobal ? " --global" : ""}`)}`);
       }
     }
     process.exit(ExitCode.SUCCESS);
@@ -4672,7 +4693,9 @@ var AGENT_DESCRIPTIONS = {
   "parallel-coordinator": "Dispatch independent tasks across isolated agents for parallel execution. Use when multiple independent tasks need to run concurrently, splitting work across agents, or coordinating parallel implementation.",
   "architecture-enforcer": "Validate architectural constraints and dependency rules. Use when checking layer boundaries, detecting circular dependencies, or verifying import direction compliance.",
   "documentation-maintainer": "Keep documentation in sync with source code. Use when detecting documentation drift, validating doc coverage, or aligning docs with code changes.",
-  "entropy-cleaner": "Detect and fix codebase entropy including drift, dead code, and pattern violations. Use when running cleanup, detecting dead code, or fixing pattern violations."
+  "entropy-cleaner": "Detect and fix codebase entropy including drift, dead code, and pattern violations. Use when running cleanup, detecting dead code, or fixing pattern violations.",
+  planner: "Create detailed implementation plans from specs with task breakdown, dependency ordering, and checkpoint placement. Use when planning a phase, breaking a spec into tasks, or creating an execution plan.",
+  verifier: "Verify implementation completeness against spec and plan at three tiers (EXISTS, SUBSTANTIVE, WIRED). Use when checking if built code matches what was planned, validating phase completion, or auditing implementation quality."
 };
 var DEFAULT_TOOLS = ["Bash", "Read", "Write", "Edit", "Glob", "Grep"];
 function generateAgentDefinition(persona, skillContents) {
@@ -4765,7 +4788,12 @@ function renderGeminiAgent(def) {
   lines.push(`name: ${def.name}`);
   lines.push(`description: >`);
   lines.push(`  ${def.description}`);
-  lines.push(`tools: ${def.tools.join(", ")}`);
+  if (def.tools.length > 0) {
+    lines.push("tools:");
+    for (const tool of def.tools) {
+      lines.push(`  - ${tool}`);
+    }
+  }
   lines.push("---");
   lines.push("");
   lines.push(GENERATED_HEADER_AGENT);
@@ -4966,7 +4994,7 @@ function createGenerateCommand3() {
 import { Command as Command39 } from "commander";
 import * as path37 from "path";
 async function runScan(projectPath) {
-  const { GraphStore, CodeIngestor, TopologicalLinker, KnowledgeIngestor, GitIngestor } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore, CodeIngestor, TopologicalLinker, KnowledgeIngestor, GitIngestor } = await import("./dist-N4D4QWFV.js");
   const store = new GraphStore();
   const start = Date.now();
   await new CodeIngestor(store).ingest(projectPath);
@@ -5047,7 +5075,7 @@ async function runIngest(projectPath, source, opts) {
     SyncManager,
     JiraConnector,
     SlackConnector
-  } = await import("./dist-4MYPT3OE.js");
+  } = await import("./dist-N4D4QWFV.js");
   const graphDir = path38.join(projectPath, ".harness", "graph");
   const store = new GraphStore();
   await store.load(graphDir);
@@ -5140,7 +5168,7 @@ function createIngestCommand() {
 import { Command as Command41 } from "commander";
 import * as path39 from "path";
 async function runQuery(projectPath, rootNodeId, opts) {
-  const { GraphStore, ContextQL } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore, ContextQL } = await import("./dist-N4D4QWFV.js");
   const store = new GraphStore();
   const graphDir = path39.join(projectPath, ".harness", "graph");
   const loaded = await store.load(graphDir);
@@ -5189,7 +5217,7 @@ import { Command as Command42 } from "commander";
 // src/commands/graph/status.ts
 import * as path40 from "path";
 async function runGraphStatus(projectPath) {
-  const { GraphStore } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore } = await import("./dist-N4D4QWFV.js");
   const graphDir = path40.join(projectPath, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);
@@ -5229,7 +5257,7 @@ async function runGraphStatus(projectPath) {
 // src/commands/graph/export.ts
 import * as path41 from "path";
 async function runGraphExport(projectPath, format) {
-  const { GraphStore } = await import("./dist-4MYPT3OE.js");
+  const { GraphStore } = await import("./dist-N4D4QWFV.js");
   const graphDir = path41.join(projectPath, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);

package/dist/{chunk-USEYPS7F.js → chunk-GA6GN5J2.js}

@@ -46,7 +46,7 @@ import { dirname as dirname6, basename as basename4, join as join5 } from "path"
 import { z } from "zod";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join as join6, dirname as dirname7 } from "path";
-import { execFileSync, execSync } from "child_process";
+import { execFileSync } from "child_process";
 import * as fs2 from "fs";
 import * as path from "path";
 import { appendFileSync, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2 } from "fs";
@@ -54,10 +54,10 @@ import { dirname as dirname8 } from "path";
 import { z as z2 } from "zod";
 import * as fs4 from "fs";
 import * as path3 from "path";
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync2 } from "child_process";
 import * as fs3 from "fs";
 import * as path2 from "path";
-import { execSync as execSync2 } from "child_process";
+import { execSync } from "child_process";
 import { z as z3 } from "zod";
 import * as fs6 from "fs/promises";
 import { z as z4 } from "zod";
@@ -3492,7 +3492,7 @@ var BenchmarkRunner = class {
     }
     args.push("--reporter=json");
     try {
-      const rawOutput = execSync(`npx ${args.join(" ")}`, {
+      const rawOutput = execFileSync("npx", args, {
         cwd,
         encoding: "utf-8",
         timeout,
@@ -4612,7 +4612,7 @@ function getCurrentBranch(projectPath) {
     return cached.branch;
   }
   try {
-    const branch = execSync2("git rev-parse --abbrev-ref HEAD", {
+    const branch = execSync("git rev-parse --abbrev-ref HEAD", {
       cwd: projectPath,
       stdio: "pipe"
     }).toString().trim();
@@ -5071,7 +5071,7 @@ async function runMechanicalGate(projectPath) {
     for (const check of checks) {
       const start = Date.now();
       try {
-        execSync3(check.command, {
+        execSync2(check.command, {
           cwd: projectPath,
           stdio: "pipe",
           timeout: 12e4

package/dist/{dist-RBZXXJHG.js → dist-C4J67MPP.js}

@@ -118,7 +118,7 @@ import {
   validateKnowledgeMap,
   validatePatternConfig,
   xssRules
-} from "./chunk-USEYPS7F.js";
+} from "./chunk-GA6GN5J2.js";
 export {
   AgentActionEmitter,
   BaselineManager,