@harness-engineering/cli 2.3.1 → 2.4.1

package/dist/{chunk-YNG7BWGB.js → chunk-2TGCYJMT.js}

@@ -1,13 +1,27 @@
 import {
+  AuthAuditEntrySchema,
+  AuthTokenPublicSchema,
+  AuthTokenSchema,
+  BridgeKindSchema,
   DEFAULT_SKILL_CONTEXT_BUDGET,
   Err,
+  GatewayEventSchema,
+  OTLPKeyValueSchema,
+  OTLPSpanSchema,
   Ok,
+  PromptCacheStatsSchema,
   SESSION_SECTION_NAMES,
   STANDARD_COGNITIVE_MODES,
+  TokenScopeSchema,
+  TrajectoryMetadataSchema,
+  WebhookDeliverySchema,
+  WebhookDeliveryStatusSchema,
+  WebhookSubscriptionPublicSchema,
+  WebhookSubscriptionSchema,
   init_dist,
   isErr,
   isOk
-} from "./chunk-RL4VMEXL.js";
+} from "./chunk-O63AAPIZ.js";
 import {
   DEFAULT_SKIP_DIRS,
   GraphStore,
@@ -15,7 +29,7 @@ import {
   init_dist as init_dist2,
   queryTraceability,
   skipDirGlobs
-} from "./chunk-XPRGWHBL.js";
+} from "./chunk-BCFDGOMA.js";
 import {
   __esm,
   __export
@@ -2841,17 +2855,22 @@ __export(dist_exports, {
   ArchConfigSchema: () => ArchConfigSchema,
   ArchDiffResultSchema: () => ArchDiffResultSchema,
   ArchMetricCategorySchema: () => ArchMetricCategorySchema,
+  AuthAuditEntrySchema: () => AuthAuditEntrySchema,
+  AuthTokenPublicSchema: () => AuthTokenPublicSchema,
+  AuthTokenSchema: () => AuthTokenSchema,
   BUG_DETECTION_DESCRIPTOR: () => BUG_DETECTION_DESCRIPTOR,
   BUG_TRACK_CATEGORIES: () => BUG_TRACK_CATEGORIES,
   BaselineManager: () => BaselineManager,
   BenchmarkRunner: () => BenchmarkRunner,
   BlueprintGenerator: () => BlueprintGenerator,
+  BridgeKindSchema: () => BridgeKindSchema,
   BundleConstraintsSchema: () => BundleConstraintsSchema,
   BundleSchema: () => BundleSchema,
   CACHE_TTL_MS: () => CACHE_TTL_MS,
   CINotifier: () => CINotifier,
   COMPLIANCE_DESCRIPTOR: () => COMPLIANCE_DESCRIPTOR,
   CORROBORATED_AGREEMENT: () => CORROBORATED_AGREEMENT,
+  CacheMetricsRecorder: () => CacheMetricsRecorder,
   CategoryBaselineSchema: () => CategoryBaselineSchema,
   CategoryForecastSchema: () => CategoryForecastSchema,
   CategoryRegressionSchema: () => CategoryRegressionSchema,
@@ -2901,6 +2920,7 @@ __export(dist_exports, {
   ForbiddenImportCollector: () => ForbiddenImportCollector,
   GateConfigSchema: () => GateConfigSchema,
   GateResultSchema: () => GateResultSchema,
+  GatewayEventSchema: () => GatewayEventSchema,
   GeminiCacheAdapter: () => GeminiCacheAdapter,
   GitHubIssuesSyncAdapter: () => GitHubIssuesSyncAdapter,
   HandoffSchema: () => HandoffSchema,
@@ -2918,6 +2938,9 @@ __export(dist_exports, {
   NoOpExecutor: () => NoOpExecutor,
   NoOpSink: () => NoOpSink,
   NoOpTelemetryAdapter: () => NoOpTelemetryAdapter,
+  OTLPExporter: () => OTLPExporter,
+  OTLPKeyValueSchema: () => OTLPKeyValueSchema,
+  OTLPSpanSchema: () => OTLPSpanSchema,
   Ok: () => Ok,
   OpenAICacheAdapter: () => OpenAICacheAdapter,
   PII_FIELD_DENYLIST: () => PII_FIELD_DENYLIST,
@@ -2930,6 +2953,7 @@ __export(dist_exports, {
   PredictionResultSchema: () => PredictionResultSchema,
   PredictionWarningSchema: () => PredictionWarningSchema,
   ProjectScanner: () => ProjectScanner,
+  PromptCacheStatsSchema: () => PromptCacheStatsSchema,
   PulseAdapterAlreadyRegisteredError: () => PulseAdapterAlreadyRegisteredError,
   PulseConfigSchema: () => PulseConfigSchema,
   PulseDbSourceSchema: () => PulseDbSourceSchema,
@@ -2959,6 +2983,7 @@ __export(dist_exports, {
   SharableSecurityRulesSchema: () => SharableSecurityRulesSchema,
   SkillEventSchema: () => SkillEventSchema,
   SolutionDocFrontmatterSchema: () => SolutionDocFrontmatterSchema,
+  SpanKind: () => SpanKind,
   SpecImpactEstimateSchema: () => SpecImpactEstimateSchema,
   SpecImpactEstimator: () => SpecImpactEstimator,
   SpecImpactSignalsSchema: () => SpecImpactSignalsSchema,
@@ -2973,6 +2998,8 @@ __export(dist_exports, {
   TimelineFileSchema: () => TimelineFileSchema,
   TimelineManager: () => TimelineManager,
   TimelineSnapshotSchema: () => TimelineSnapshotSchema,
+  TokenScopeSchema: () => TokenScopeSchema,
+  TrajectoryMetadataSchema: () => TrajectoryMetadataSchema,
   TransitionSchema: () => TransitionSchema,
   TrendAttributionSchema: () => TrendAttributionSchema,
   TrendLineSchema: () => TrendLineSchema,
@@ -2987,6 +3014,10 @@ __export(dist_exports, {
   ViolationSchema: () => ViolationSchema,
   ViolationSnapshotSchema: () => ViolationSnapshotSchema,
   WHATWG_BAD_PORTS: () => WHATWG_BAD_PORTS,
+  WebhookDeliverySchema: () => WebhookDeliverySchema,
+  WebhookDeliveryStatusSchema: () => WebhookDeliveryStatusSchema,
+  WebhookSubscriptionPublicSchema: () => WebhookSubscriptionPublicSchema,
+  WebhookSubscriptionSchema: () => WebhookSubscriptionSchema,
   acquireCompoundLock: () => acquireCompoundLock,
   addProvenance: () => addProvenance,
   agentConfigRules: () => agentConfigRules,
@@ -3127,6 +3158,7 @@ __export(dist_exports, {
   goRules: () => goRules,
   injectionRules: () => injectionRules,
   insecureDefaultsRules: () => insecureDefaultsRules,
+  invalidateCheckState: () => invalidateCheckState,
   isBadPort: () => isBadPort,
   isDuplicateFinding: () => isDuplicateFinding,
   isErr: () => isErr,
@@ -3263,6 +3295,7 @@ __export(dist_exports, {
   validateAgentConfigs: () => validateAgentConfigs,
   validateAgentsMap: () => validateAgentsMap,
   validateBoundaries: () => validateBoundaries,
+  validateBranchName: () => validateBranchName,
   validateCommitMessage: () => validateCommitMessage,
   validateConfig: () => validateConfig,
   validateDependencies: () => validateDependencies,
@@ -3320,6 +3353,7 @@ import { join as join12 } from "path";
 import * as fs3 from "fs";
 import * as path3 from "path";
 import { minimatch as minimatch2 } from "minimatch";
+import { minimatch as minimatch22 } from "minimatch";
 import { basename as basename2 } from "path";
 import { join as join14, basename as basename3 } from "path";
 import { basename as basename4, dirname as dirname42 } from "path";
@@ -3327,11 +3361,11 @@ import { z as z3 } from "zod";
 import * as fs4 from "fs/promises";
 import * as fs5 from "fs/promises";
 import { resolve as resolve5 } from "path";
-import { minimatch as minimatch22 } from "minimatch";
+import { minimatch as minimatch3 } from "minimatch";
 import { join as join15, resolve as resolve42 } from "path";
 import { dirname as dirname5, resolve as resolve6 } from "path";
 import { dirname as dirname6, extname as extname2, resolve as resolve7 } from "path";
-import { minimatch as minimatch3 } from "minimatch";
+import { minimatch as minimatch4 } from "minimatch";
 import { readdirSync, statSync as statSync2 } from "fs";
 import { join as join16 } from "path";
 import * as fs6 from "fs";
@@ -3396,7 +3430,7 @@ import * as fs26 from "fs";
 import * as path23 from "path";
 import { z as z9 } from "zod";
 import * as fs28 from "fs/promises";
-import { minimatch as minimatch4 } from "minimatch";
+import { minimatch as minimatch5 } from "minimatch";
 import { z as z10 } from "zod";
 import * as fs27 from "fs";
 import * as path24 from "path";
@@ -4807,6 +4841,75 @@ function validateRoadmapMode(config, projectRoot) {
   }
   return Ok(void 0);
 }
+function validateBranchName(branchName, config) {
+  for (const pattern of config.ignore) {
+    if (minimatch2(branchName, pattern)) {
+      return { valid: true, branchName };
+    }
+  }
+  if (config.customRegex) {
+    const regex = new RegExp(config.customRegex);
+    if (!regex.test(branchName)) {
+      return {
+        valid: false,
+        branchName,
+        message: `Branch name "${branchName}" does not match the custom regex: ${config.customRegex}`
+      };
+    }
+    return { valid: true, branchName };
+  }
+  const parts = branchName.split("/");
+  if (parts.length < 2) {
+    return {
+      valid: false,
+      branchName,
+      message: `Branch name "${branchName}" must have a prefix followed by a slash (e.g., "feat/my-feature").`,
+      suggestion: `Try renaming to "feat/${branchName}" or "fix/${branchName}".`
+    };
+  }
+  const prefix = parts[0];
+  const slug = parts.slice(1).join("/");
+  if (!config.prefixes.includes(prefix)) {
+    return {
+      valid: false,
+      branchName,
+      message: `Prefix "${prefix}" is not allowed.`,
+      suggestion: `Allowed prefixes: ${config.prefixes.join(", ")}.`
+    };
+  }
+  if (config.enforceKebabCase) {
+    for (const part of slug.split("/")) {
+      const ticketMatch = part.match(TICKET_ID);
+      if (ticketMatch) {
+        const rest = ticketMatch[2];
+        if (rest && !KEBAB_CASE.test(rest)) {
+          return {
+            valid: false,
+            branchName,
+            message: `Branch slug part "${part}" does not follow kebab-case after the ticket ID.`,
+            suggestion: `Ensure the description after "${ticketMatch[1]}" uses kebab-case (lowercase, single hyphens, no leading/trailing hyphen).`
+          };
+        }
+      } else if (!KEBAB_CASE.test(part)) {
+        return {
+          valid: false,
+          branchName,
+          message: `Branch slug part "${part}" must be in kebab-case (lowercase, single hyphens, no leading/trailing hyphen).`,
+          suggestion: `Change "${part}" to match the convention.`
+        };
+      }
+    }
+  }
+  if (typeof config.maxLength === "number" && config.maxLength > 0 && slug.length > config.maxLength) {
+    return {
+      valid: false,
+      branchName,
+      message: `Branch slug is ${slug.length} characters; max allowed is ${config.maxLength}.`,
+      suggestion: `Shorten the description after "${prefix}/" to ${config.maxLength} characters or fewer.`
+    };
+  }
+  return { valid: true, branchName };
+}
 function determineImportance(filePath) {
   const name = basename2(filePath).toLowerCase();
   if (name === "index.ts" || name === "index.js" || name === "main.ts") {
@@ -4848,7 +4951,7 @@ async function checkDocCoverage(domain, options = {}) {
     const filteredSourceFiles = sourceFiles.filter((file) => {
       const relativePath = relativePosix(sourceDir, file);
       return !excludePatterns.some((pattern) => {
-        return minimatch2(relativePath, pattern, { dot: true }) || minimatch2(file, pattern, { dot: true });
+        return minimatch22(relativePath, pattern, { dot: true }) || minimatch22(file, pattern, { dot: true });
       });
     });
     const docFiles = await findFiles("**/*.md", docsDir);
@@ -6293,7 +6396,7 @@ async function buildSnapshot2(config) {
   }
   sourceFilePaths = sourceFilePaths.filter((f) => {
     const rel = relativePosix(rootDir, f);
-    return !excludePatterns.some((p) => minimatch22(rel, p));
+    return !excludePatterns.some((p) => minimatch3(rel, p));
   });
   const files = [];
   for (const filePath of sourceFilePaths) {
@@ -6722,7 +6825,10 @@ function findDeadFiles(snapshot, reachability) {
   return deadFiles;
 }
 function isIdentifierUsedInAST(ast, identifier, skipImportDeclaration = true) {
-  const astString = JSON.stringify(ast);
+  const astString = JSON.stringify(
+    ast,
+    (_key, value) => typeof value === "bigint" ? value.toString() : value
+  );
   const identifierPattern = new RegExp(`"name"\\s*:\\s*"${identifier}"`, "g");
   const matches = astString.match(identifierPattern);
   if (!matches) return false;
@@ -6884,7 +6990,7 @@ async function detectDeadCode(snapshot, graphDeadCodeData, protectedRegions) {
 }
 function fileMatchesPattern(filePath, pattern, rootDir) {
   const relativePath = relativePosix(rootDir, filePath);
-  return minimatch3(relativePath, pattern);
+  return minimatch4(relativePath, pattern);
 }
 function checkMustExport(rule, file, message) {
   if (rule.type !== "must-export") return [];
@@ -14077,6 +14183,12 @@ function shouldRunCheck(state, intervalMs) {
   if (state === null) return true;
   return state.lastCheckTime + intervalMs <= Date.now();
 }
+function invalidateCheckState() {
+  try {
+    fs36.unlinkSync(getStatePath());
+  } catch {
+  }
+}
 function readCheckState() {
   try {
     const raw = fs36.readFileSync(getStatePath(), "utf-8");
@@ -15046,6 +15158,26 @@ async function send(events, apiKey) {
     }
   }
 }
+function toUnixNanoString(ns) {
+  return ns.toString(10);
+}
+function attributesToOTLP(attrs) {
+  const out = [];
+  for (const [key, value] of Object.entries(attrs)) {
+    if (typeof value === "string") {
+      out.push({ key, value: { stringValue: value } });
+    } else if (typeof value === "boolean") {
+      out.push({ key, value: { boolValue: value } });
+    } else if (typeof value === "number") {
+      if (Number.isInteger(value)) {
+        out.push({ key, value: { intValue: String(value) } });
+      } else {
+        out.push({ key, value: { doubleValue: value } });
+      }
+    }
+  }
+  return out;
+}
 function acquireCompoundLock(category, opts = {}) {
   if (!KNOWN_CATEGORIES.has(category)) {
     throw new Error(
@@ -15596,7 +15728,7 @@ function assembleCandidateReport(input) {
   }
   return lines.join("\n");
 }
-var WHATWG_BAD_PORTS, BAD_PORT_SET, VALID_TYPES, CONVENTIONAL_PATTERN, LOOKBACK_PATTERN, PulseDbSourceSchema, PulseSourcesSchema, PulseConfigSchema, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ALL_SOLUTION_CATEGORIES, ISO_DATE, BugTrackSchema, KnowledgeTrackSchema, BaseFrontmatter, SolutionDocFrontmatterSchema, TRACK_CATEGORIES, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, TS_HINTS, TS_CONVENTIONS, PYTHON_HINTS, PYTHON_CONVENTIONS, DEFAULT_INCLUDE_PATTERNS, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, JS_EXT_FALLBACKS2, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile62, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, JS_EXT_FALLBACKS22, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, PRIORITY_RANK2, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, ConflictError, DEFAULTS, GitHubHttp, ETagStore, START_MARKER, END_MARKER, SERIALIZER_FIELDS, GitHubIssuesTrackerAdapter, migrate_exports, HASH_RE, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS, CompoundLockHeldError, KNOWN_CATEGORIES, ALLOWED_FIELD_KEYS, PII_TOKENS, PII_FIELD_DENYLIST, PII_LINE_RE, ALLOWED_SET, PulseAdapterAlreadyRegisteredError, REGISTRY, MOCK_ADAPTER_NAME, ALLOWED_FIELD_SET, adapter, LOOKBACK_RE, MAX_LINES, INLINE_TEMPLATE, TRUNCATION_MARKER2, execFileAsync, FIX_RE, EMPTY_REPO_RE, execFileAsync2, TRACK_CATEGORIES2, STOPWORDS, KEYWORD_TO_CATEGORY;
+var WHATWG_BAD_PORTS, BAD_PORT_SET, VALID_TYPES, CONVENTIONAL_PATTERN, LOOKBACK_PATTERN, PulseDbSourceSchema, PulseSourcesSchema, PulseConfigSchema, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ALL_SOLUTION_CATEGORIES, ISO_DATE, BugTrackSchema, KnowledgeTrackSchema, BaseFrontmatter, SolutionDocFrontmatterSchema, TRACK_CATEGORIES, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, KEBAB_CASE, TICKET_ID, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, TS_HINTS, TS_CONVENTIONS, PYTHON_HINTS, PYTHON_CONVENTIONS, DEFAULT_INCLUDE_PATTERNS, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, JS_EXT_FALLBACKS2, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile62, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, JS_EXT_FALLBACKS22, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, PRIORITY_RANK2, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, ConflictError, DEFAULTS, GitHubHttp, ETagStore, START_MARKER, END_MARKER, SERIALIZER_FIELDS, GitHubIssuesTrackerAdapter, migrate_exports, HASH_RE, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS, DEFAULT_CAPACITY, CacheMetricsRecorder, RETRY_BACKOFFS_MS, OTLPExporter, SpanKind, CompoundLockHeldError, KNOWN_CATEGORIES, ALLOWED_FIELD_KEYS, PII_TOKENS, PII_FIELD_DENYLIST, PII_LINE_RE, ALLOWED_SET, PulseAdapterAlreadyRegisteredError, REGISTRY, MOCK_ADAPTER_NAME, ALLOWED_FIELD_SET, adapter, LOOKBACK_RE, MAX_LINES, INLINE_TEMPLATE, TRUNCATION_MARKER2, execFileAsync, FIX_RE, EMPTY_REPO_RE, execFileAsync2, TRACK_CATEGORIES2, STOPWORDS, KEYWORD_TO_CATEGORY;
 var init_dist3 = __esm({
   "../core/dist/index.mjs"() {
     init_chunk_4UI65RLE();
@@ -15826,6 +15958,8 @@ var init_dist3 = __esm({
       "kiro",
       "windsurf"
     ]);
+    KEBAB_CASE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+    TICKET_ID = /^([A-Z0-9]+-[0-9]+)-(.*)$/;
     DEFAULT_SECTIONS = [
       {
         name: "Documentation",
@@ -19005,7 +19139,7 @@ var init_dist3 = __esm({
         const applicableRules = this.activeRules.filter((rule) => {
           if (!rule.fileGlob) return true;
           const globs = rule.fileGlob.split(",").map((g) => g.trim());
-          return globs.some((glob5) => minimatch4(filePath, glob5, { dot: true }));
+          return globs.some((glob5) => minimatch5(filePath, glob5, { dot: true }));
         });
         return this.scanLinesWithRules(lines, applicableRules, filePath, startLine);
       }
@@ -21418,10 +21552,199 @@ console.log('Blueprint player initialized.');
         };
       }
     };
-    VERSION = "0.23.3";
+    VERSION = "0.25.0";
     POSTHOG_BATCH_URL = "https://app.posthog.com/batch";
     MAX_ATTEMPTS = 3;
     TIMEOUT_MS = 5e3;
+    DEFAULT_CAPACITY = 1e3;
+    CacheMetricsRecorder = class {
+      capacity;
+      now;
+      buffer = [];
+      windowStartedAt = 0;
+      constructor(opts = {}) {
+        this.capacity = opts.capacity ?? DEFAULT_CAPACITY;
+        this.now = opts.now ?? Date.now;
+      }
+      /**
+       * Append a single cache observation. Hot-path: O(1) amortized, no
+       * allocations beyond the sample object itself.
+       */
+      record(backendId, hit, tokensCreated, tokensRead) {
+        if (this.windowStartedAt === 0) this.windowStartedAt = this.now();
+        if (this.buffer.length >= this.capacity) this.buffer.shift();
+        this.buffer.push({ backendId, hit, tokensCreated, tokensRead });
+      }
+      /** Aggregate the current window into a `PromptCacheStats` snapshot. */
+      getStats() {
+        let hits = 0;
+        let misses = 0;
+        const byBackend = {};
+        for (const s of this.buffer) {
+          if (s.hit) hits++;
+          else misses++;
+          const slot = byBackend[s.backendId] ?? { hits: 0, misses: 0 };
+          if (s.hit) slot.hits++;
+          else slot.misses++;
+          byBackend[s.backendId] = slot;
+        }
+        const totalRequests = hits + misses;
+        const hitRate = totalRequests === 0 ? 0 : hits / totalRequests;
+        return {
+          totalRequests,
+          hits,
+          misses,
+          hitRate,
+          byBackend,
+          windowStartedAt: this.windowStartedAt
+        };
+      }
+      /** Clear the buffer and reset the window-start marker. */
+      reset() {
+        this.buffer.length = 0;
+        this.windowStartedAt = 0;
+      }
+    };
+    RETRY_BACKOFFS_MS = [1e3, 2e3, 4e3];
+    OTLPExporter = class {
+      endpoint;
+      enabled;
+      headers;
+      flushIntervalMs;
+      batchSize;
+      fetchImpl;
+      warn;
+      buffer = [];
+      timer = null;
+      inFlightFlushes = /* @__PURE__ */ new Set();
+      constructor(opts) {
+        this.endpoint = opts.endpoint;
+        this.enabled = opts.enabled !== false;
+        this.headers = { "Content-Type": "application/json", ...opts.headers ?? {} };
+        this.flushIntervalMs = opts.flushIntervalMs ?? 2e3;
+        this.batchSize = opts.batchSize ?? 64;
+        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+        this.warn = opts.warn ?? ((...a) => console.warn(...a));
+      }
+      /**
+       * O(1) buffer push. When `enabled === false` this is a no-op. If the
+       * buffer reaches `batchSize`, a flush is triggered without awaiting.
+       */
+      push(span) {
+        if (!this.enabled) return;
+        this.buffer.push(span);
+        if (this.buffer.length >= this.batchSize) {
+          void this.flush();
+        }
+      }
+      /** Start the periodic flush timer. Idempotent. */
+      start() {
+        if (!this.enabled || this.timer !== null) return;
+        this.timer = setInterval(() => {
+          void this.flush();
+        }, this.flushIntervalMs);
+        if (typeof this.timer.unref === "function") {
+          this.timer.unref();
+        }
+      }
+      /** Flush any pending spans and stop the timer. Awaits all in-flight flushes. */
+      async stop() {
+        if (this.timer !== null) {
+          clearInterval(this.timer);
+          this.timer = null;
+        }
+        void this.flush();
+        while (this.inFlightFlushes.size > 0) {
+          await Promise.all([...this.inFlightFlushes]);
+        }
+      }
+      /**
+       * Synchronously claim the current buffer and POST it to `/v1/traces`.
+       * Each invocation runs independently — concurrent flushes (e.g. one
+       * from the timer, one from a `batchSize` trip) each drain their own
+       * batch. Retries up to 3 times on transport or 5xx failure, then
+       * drops with a single warning.
+       */
+      flush() {
+        if (this.buffer.length === 0) return Promise.resolve();
+        const batch = this.buffer;
+        this.buffer = [];
+        const payload = this.spansToOTLPJSON(batch);
+        const work = (async () => {
+          let lastError = null;
+          for (let attempt = 0; attempt < RETRY_BACKOFFS_MS.length; attempt++) {
+            try {
+              const response = await this.fetchImpl(this.endpoint, {
+                method: "POST",
+                headers: this.headers,
+                body: JSON.stringify(payload)
+              });
+              if (response.ok) return;
+              try {
+                await response.text();
+              } catch {
+              }
+              lastError = new Error(`OTLP endpoint returned ${response.status}`);
+            } catch (err) {
+              lastError = err;
+            }
+            const backoff = RETRY_BACKOFFS_MS[attempt] ?? 0;
+            if (attempt < RETRY_BACKOFFS_MS.length - 1) {
+              await new Promise((resolve10) => setTimeout(resolve10, backoff));
+            }
+          }
+          this.warn(
+            `[harness telemetry] dropping ${batch.length} span(s) after 3 failed OTLP attempts:`,
+            lastError
+          );
+        })();
+        this.inFlightFlushes.add(work);
+        void work.finally(() => this.inFlightFlushes.delete(work));
+        return work;
+      }
+      /**
+       * Build the OTLP/HTTP JSON envelope for a batch of spans. Public for
+       * tests; not part of the supported API surface.
+       */
+      spansToOTLPJSON(spans) {
+        return {
+          resourceSpans: [
+            {
+              resource: {
+                attributes: [{ key: "service.name", value: { stringValue: "harness" } }]
+              },
+              scopeSpans: [
+                {
+                  scope: { name: "harness" },
+                  spans: spans.map((s) => {
+                    const span = {
+                      traceId: s.traceId,
+                      spanId: s.spanId,
+                      name: s.name,
+                      kind: s.kind,
+                      startTimeUnixNano: toUnixNanoString(s.startTimeNs),
+                      endTimeUnixNano: toUnixNanoString(s.endTimeNs),
+                      attributes: attributesToOTLP(s.attributes)
+                    };
+                    if (s.parentSpanId !== void 0) span["parentSpanId"] = s.parentSpanId;
+                    if (s.statusCode !== void 0) span["status"] = { code: s.statusCode };
+                    return span;
+                  })
+                }
+              ]
+            }
+          ]
+        };
+      }
+    };
+    SpanKind = /* @__PURE__ */ ((SpanKind2) => {
+      SpanKind2[SpanKind2["INTERNAL"] = 1] = "INTERNAL";
+      SpanKind2[SpanKind2["SERVER"] = 2] = "SERVER";
+      SpanKind2[SpanKind2["CLIENT"] = 3] = "CLIENT";
+      SpanKind2[SpanKind2["PRODUCER"] = 4] = "PRODUCER";
+      SpanKind2[SpanKind2["CONSUMER"] = 5] = "CONSUMER";
+      return SpanKind2;
+    })(SpanKind || {});
     CompoundLockHeldError = class extends Error {
       constructor(category, holderPid, lockPath) {
         super(
@@ -21637,6 +21960,7 @@ export {
   validateAgentConfigs,
   getRoadmapMode,
   validateRoadmapMode,
+  validateBranchName,
   checkDocCoverage,
   validateKnowledgeMap,
   generateAgentsMap,
@@ -21946,6 +22270,7 @@ export {
   BlueprintGenerator,
   isUpdateCheckEnabled,
   shouldRunCheck,
+  invalidateCheckState,
   readCheckState,
   spawnBackgroundCheck,
   getUpdateNotification,
@@ -21983,6 +22308,9 @@ export {
   VERSION,
   collectEvents,
   send,
+  CacheMetricsRecorder,
+  OTLPExporter,
+  SpanKind,
   CompoundLockHeldError,
   acquireCompoundLock,
   ALLOWED_FIELD_KEYS,

package/dist/{chunk-TIQU5VY7.js → chunk-5FDBXUFW.js}

@@ -15,7 +15,7 @@ function evictIfNeeded() {
   }
 }
 async function doLoadGraphStore(projectRoot) {
-  const { GraphStore } = await import("./dist-SQAOKWXM.js");
+  const { GraphStore } = await import("./dist-QPWXPCPL.js");
   const graphDir = path.join(projectRoot, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);

package/dist/{chunk-7BNK4M23.js → chunk-5XLLIYYL.js}

@@ -41,7 +41,7 @@ async function runScan(projectPath) {
     KnowledgeIngestor,
     GitIngestor,
     RequirementIngestor
-  } = await import("./dist-SQAOKWXM.js");
+  } = await import("./dist-QPWXPCPL.js");
   const store = new GraphStore();
   const start = Date.now();
   const ingestOptions = loadIngestOptions(projectPath);

package/dist/{chunk-KJR4Z2YC.js → chunk-73KZ2E47.js}

@@ -7,13 +7,13 @@ import {
 import {
   findConfigFile,
   loadConfig
-} from "./chunk-DBJC4ULT.js";
+} from "./chunk-MXOQEI72.js";
 import {
   init_dist
-} from "./chunk-YNG7BWGB.js";
+} from "./chunk-2TGCYJMT.js";
 import {
   Ok
-} from "./chunk-RL4VMEXL.js";
+} from "./chunk-O63AAPIZ.js";
 
 // src/mcp/tools/performance.ts
 init_dist();
@@ -35,7 +35,7 @@ var checkPerformanceDefinition = {
 };
 async function handleCheckPerformance(input) {
   try {
-    const { EntropyAnalyzer } = await import("./dist-ZS3Y3YWP.js");
+    const { EntropyAnalyzer } = await import("./dist-HA6IIPRC.js");
     const typeFilter = input.type ?? "all";
     const projectPath = sanitizePath(input.path);
     let entryPoints;
@@ -58,10 +58,10 @@ async function handleCheckPerformance(input) {
     });
     let graphOptions;
     try {
-      const { loadGraphStore } = await import("./graph-loader-TJU4E7KL.js");
+      const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
       const store = await loadGraphStore(projectPath);
       if (store) {
-        const { GraphComplexityAdapter, GraphCouplingAdapter } = await import("./dist-SQAOKWXM.js");
+        const { GraphComplexityAdapter, GraphCouplingAdapter } = await import("./dist-QPWXPCPL.js");
         const complexityAdapter = new GraphComplexityAdapter(store);
         const couplingAdapter = new GraphCouplingAdapter(store);
         graphOptions = {
@@ -98,7 +98,7 @@ var getPerfBaselinesDefinition = {
 };
 async function handleGetPerfBaselines(input) {
   try {
-    const { BaselineManager } = await import("./dist-ZS3Y3YWP.js");
+    const { BaselineManager } = await import("./dist-HA6IIPRC.js");
     const manager = new BaselineManager(sanitizePath(input.path));
     const baselines = manager.load();
     return resultToMcpResponse(
@@ -146,7 +146,7 @@ var updatePerfBaselinesDefinition = {
 };
 async function handleUpdatePerfBaselines(input) {
   try {
-    const { BaselineManager } = await import("./dist-ZS3Y3YWP.js");
+    const { BaselineManager } = await import("./dist-HA6IIPRC.js");
     const manager = new BaselineManager(sanitizePath(input.path));
     manager.save(input.results, input.commitHash);
     const updated = manager.load();
@@ -176,7 +176,7 @@ var getCriticalPathsDefinition = {
 };
 async function handleGetCriticalPaths(input) {
   try {
-    const { CriticalPathResolver } = await import("./dist-ZS3Y3YWP.js");
+    const { CriticalPathResolver } = await import("./dist-HA6IIPRC.js");
     const resolver = new CriticalPathResolver(sanitizePath(input.path));
     const result = await resolver.resolve();
     return resultToMcpResponse(Ok(result));