@harness-engineering/cli 2.4.0 → 2.4.1

package/dist/agents-md-2M46KG4F.js

@@ -0,0 +1,10 @@
+import {
+  generateAgentsMd
+} from "./chunk-RRTTJ3VB.js";
+import "./chunk-2TGCYJMT.js";
+import "./chunk-O63AAPIZ.js";
+import "./chunk-BCFDGOMA.js";
+import "./chunk-KFQGP6VL.js";
+export {
+  generateAgentsMd
+};

package/dist/{architecture-I2G7PNQB.js → architecture-3ZSN5RDQ.js}

@@ -1,13 +1,13 @@
 import {
   checkDependenciesDefinition,
   handleCheckDependencies
-} from "./chunk-NGCM4B4V.js";
-import "./chunk-OFMQEUYN.js";
+} from "./chunk-7RZZV73V.js";
+import "./chunk-LJF6UY4R.js";
 import "./chunk-EPUKTTJZ.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-GDJ2MRYH.js";
-import "./chunk-RL4VMEXL.js";
-import "./chunk-XPRGWHBL.js";
+import "./chunk-2TGCYJMT.js";
+import "./chunk-O63AAPIZ.js";
+import "./chunk-BCFDGOMA.js";
 import "./chunk-KFQGP6VL.js";
 export {
   checkDependenciesDefinition,

package/dist/{assess-project-LO6NCLE7.js → assess-project-KZWFQEJE.js}

@@ -1,10 +1,12 @@
 import {
   assessProjectDefinition,
-  handleAssessProject
-} from "./chunk-WY2J54IZ.js";
+  handleAssessProject,
+  parseToolResponse
+} from "./chunk-B2ZYMQGT.js";
 import "./chunk-W6Y7ZW3Y.js";
 import "./chunk-KFQGP6VL.js";
 export {
   assessProjectDefinition,
-  handleAssessProject
+  handleAssessProject,
+  parseToolResponse
 };

package/dist/bin/harness-mcp.js

@@ -1,29 +1,29 @@
 #!/usr/bin/env node
 import {
   startServer
-} from "../chunk-Q43LM7CO.js";
-import "../chunk-RZASDABE.js";
-import "../chunk-WY2J54IZ.js";
+} from "../chunk-TPNA2I4J.js";
+import "../chunk-UPV7VDUB.js";
+import "../chunk-B2ZYMQGT.js";
 import "../chunk-IOW3MW2K.js";
-import "../chunk-4XB37LST.js";
-import "../chunk-GN2CSZC6.js";
-import "../chunk-TIQU5VY7.js";
-import "../chunk-2L2A6W6I.js";
-import "../chunk-NGCM4B4V.js";
-import "../chunk-OFMQEUYN.js";
-import "../chunk-MQRKPF46.js";
-import "../chunk-27EHWQPK.js";
-import "../chunk-U4XK4BB3.js";
+import "../chunk-IEHXZB6J.js";
+import "../chunk-LHHO7AH4.js";
+import "../chunk-5FDBXUFW.js";
+import "../chunk-KRQTN46U.js";
+import "../chunk-7RZZV73V.js";
+import "../chunk-LJF6UY4R.js";
+import "../chunk-I2KULMPD.js";
+import "../chunk-GLKASJZE.js";
+import "../chunk-73KZ2E47.js";
 import "../chunk-EPUKTTJZ.js";
 import "../chunk-W6Y7ZW3Y.js";
 import "../chunk-27AJKSQY.js";
-import "../chunk-KPWUZSHL.js";
+import "../chunk-MXOQEI72.js";
 import "../chunk-3ISINLYT.js";
 import "../chunk-6B6UN6SG.js";
 import "../chunk-ZCZD7FHU.js";
-import "../chunk-GDJ2MRYH.js";
-import "../chunk-RL4VMEXL.js";
-import "../chunk-XPRGWHBL.js";
+import "../chunk-2TGCYJMT.js";
+import "../chunk-O63AAPIZ.js";
+import "../chunk-BCFDGOMA.js";
 import "../chunk-HIK6OEUF.js";
 import "../chunk-EBJQ6N4M.js";
 import "../chunk-3WGJMBKH.js";

package/dist/bin/harness.js

@@ -3,43 +3,43 @@ import {
   createProgram,
   installCommandTelemetry,
   printFirstRunWelcome
-} from "../chunk-TCR5PKMU.js";
-import "../chunk-TVJZX53C.js";
-import "../chunk-FJJYQWUP.js";
-import "../chunk-DJRRTZGD.js";
-import "../chunk-MSBVH6ER.js";
-import "../chunk-54JTO4NZ.js";
+} from "../chunk-GOSUZC5H.js";
+import "../chunk-OUXYITL5.js";
+import "../chunk-RRTTJ3VB.js";
+import "../chunk-UQJV7NNM.js";
+import "../chunk-PPQ3TY2R.js";
+import "../chunk-NM3ZIWVN.js";
 import "../chunk-CQ553GZO.js";
 import "../chunk-GISMXMVL.js";
 import "../chunk-WWACIIBA.js";
 import "../chunk-TEFCFC4H.js";
-import "../chunk-5YOHXTK3.js";
-import "../chunk-RYVL76ZF.js";
+import "../chunk-KOK7BFP2.js";
+import "../chunk-QV5EBDWA.js";
 import "../chunk-KET4QQZB.js";
-import "../chunk-JGPOQJ73.js";
-import "../chunk-7BNK4M23.js";
+import "../chunk-NTOKQJOX.js";
+import "../chunk-5XLLIYYL.js";
 import {
   dispatchSkillsFromGit
-} from "../chunk-Q43LM7CO.js";
-import "../chunk-RZASDABE.js";
-import "../chunk-WY2J54IZ.js";
+} from "../chunk-TPNA2I4J.js";
+import "../chunk-UPV7VDUB.js";
+import "../chunk-B2ZYMQGT.js";
 import "../chunk-IOW3MW2K.js";
-import "../chunk-4XB37LST.js";
-import "../chunk-GN2CSZC6.js";
-import "../chunk-TIQU5VY7.js";
-import "../chunk-2L2A6W6I.js";
-import "../chunk-NGCM4B4V.js";
-import "../chunk-OFMQEUYN.js";
-import "../chunk-MQRKPF46.js";
-import "../chunk-27EHWQPK.js";
-import "../chunk-U4XK4BB3.js";
+import "../chunk-IEHXZB6J.js";
+import "../chunk-LHHO7AH4.js";
+import "../chunk-5FDBXUFW.js";
+import "../chunk-KRQTN46U.js";
+import "../chunk-7RZZV73V.js";
+import "../chunk-LJF6UY4R.js";
+import "../chunk-I2KULMPD.js";
+import "../chunk-GLKASJZE.js";
+import "../chunk-73KZ2E47.js";
 import "../chunk-EPUKTTJZ.js";
 import "../chunk-W6Y7ZW3Y.js";
 import "../chunk-27AJKSQY.js";
 import {
   findConfigFile,
   loadConfig
-} from "../chunk-KPWUZSHL.js";
+} from "../chunk-MXOQEI72.js";
 import "../chunk-3ISINLYT.js";
 import "../chunk-6B6UN6SG.js";
 import "../chunk-ZCZD7FHU.js";
@@ -53,9 +53,9 @@ import {
   readCheckState,
   shouldRunCheck,
   spawnBackgroundCheck
-} from "../chunk-GDJ2MRYH.js";
-import "../chunk-RL4VMEXL.js";
-import "../chunk-XPRGWHBL.js";
+} from "../chunk-2TGCYJMT.js";
+import "../chunk-O63AAPIZ.js";
+import "../chunk-BCFDGOMA.js";
 import "../chunk-ZP5E7YET.js";
 import "../chunk-HIK6OEUF.js";
 import "../chunk-EBJQ6N4M.js";
@@ -221,7 +221,9 @@ async function main() {
   } catch (error) {
     handleError(error);
   }
-  printUpdateNotification();
+  if (process.argv[2] !== "update") {
+    printUpdateNotification();
+  }
   const dispatchResult = await dispatchPromise;
   const banner = formatDispatchBanner(dispatchResult);
   if (banner) {

package/dist/{check-phase-gate-52SQFNJB.js → check-phase-gate-EWV5VYTG.js}

@@ -1,12 +1,12 @@
 import {
   createCheckPhaseGateCommand,
   runCheckPhaseGate
-} from "./chunk-5YOHXTK3.js";
-import "./chunk-KPWUZSHL.js";
+} from "./chunk-KOK7BFP2.js";
+import "./chunk-MXOQEI72.js";
 import "./chunk-ZCZD7FHU.js";
-import "./chunk-GDJ2MRYH.js";
-import "./chunk-RL4VMEXL.js";
-import "./chunk-XPRGWHBL.js";
+import "./chunk-2TGCYJMT.js";
+import "./chunk-O63AAPIZ.js";
+import "./chunk-BCFDGOMA.js";
 import "./chunk-EBJQ6N4M.js";
 import "./chunk-3WGJMBKH.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{chunk-GDJ2MRYH.js → chunk-2TGCYJMT.js}

@@ -1,13 +1,27 @@
 import {
+  AuthAuditEntrySchema,
+  AuthTokenPublicSchema,
+  AuthTokenSchema,
+  BridgeKindSchema,
   DEFAULT_SKILL_CONTEXT_BUDGET,
   Err,
+  GatewayEventSchema,
+  OTLPKeyValueSchema,
+  OTLPSpanSchema,
   Ok,
+  PromptCacheStatsSchema,
   SESSION_SECTION_NAMES,
   STANDARD_COGNITIVE_MODES,
+  TokenScopeSchema,
+  TrajectoryMetadataSchema,
+  WebhookDeliverySchema,
+  WebhookDeliveryStatusSchema,
+  WebhookSubscriptionPublicSchema,
+  WebhookSubscriptionSchema,
   init_dist,
   isErr,
   isOk
-} from "./chunk-RL4VMEXL.js";
+} from "./chunk-O63AAPIZ.js";
 import {
   DEFAULT_SKIP_DIRS,
   GraphStore,
@@ -15,7 +29,7 @@ import {
   init_dist as init_dist2,
   queryTraceability,
   skipDirGlobs
-} from "./chunk-XPRGWHBL.js";
+} from "./chunk-BCFDGOMA.js";
 import {
   __esm,
   __export
@@ -2841,17 +2855,22 @@ __export(dist_exports, {
   ArchConfigSchema: () => ArchConfigSchema,
   ArchDiffResultSchema: () => ArchDiffResultSchema,
   ArchMetricCategorySchema: () => ArchMetricCategorySchema,
+  AuthAuditEntrySchema: () => AuthAuditEntrySchema,
+  AuthTokenPublicSchema: () => AuthTokenPublicSchema,
+  AuthTokenSchema: () => AuthTokenSchema,
   BUG_DETECTION_DESCRIPTOR: () => BUG_DETECTION_DESCRIPTOR,
   BUG_TRACK_CATEGORIES: () => BUG_TRACK_CATEGORIES,
   BaselineManager: () => BaselineManager,
   BenchmarkRunner: () => BenchmarkRunner,
   BlueprintGenerator: () => BlueprintGenerator,
+  BridgeKindSchema: () => BridgeKindSchema,
   BundleConstraintsSchema: () => BundleConstraintsSchema,
   BundleSchema: () => BundleSchema,
   CACHE_TTL_MS: () => CACHE_TTL_MS,
   CINotifier: () => CINotifier,
   COMPLIANCE_DESCRIPTOR: () => COMPLIANCE_DESCRIPTOR,
   CORROBORATED_AGREEMENT: () => CORROBORATED_AGREEMENT,
+  CacheMetricsRecorder: () => CacheMetricsRecorder,
   CategoryBaselineSchema: () => CategoryBaselineSchema,
   CategoryForecastSchema: () => CategoryForecastSchema,
   CategoryRegressionSchema: () => CategoryRegressionSchema,
@@ -2901,6 +2920,7 @@ __export(dist_exports, {
   ForbiddenImportCollector: () => ForbiddenImportCollector,
   GateConfigSchema: () => GateConfigSchema,
   GateResultSchema: () => GateResultSchema,
+  GatewayEventSchema: () => GatewayEventSchema,
   GeminiCacheAdapter: () => GeminiCacheAdapter,
   GitHubIssuesSyncAdapter: () => GitHubIssuesSyncAdapter,
   HandoffSchema: () => HandoffSchema,
@@ -2918,6 +2938,9 @@ __export(dist_exports, {
   NoOpExecutor: () => NoOpExecutor,
   NoOpSink: () => NoOpSink,
   NoOpTelemetryAdapter: () => NoOpTelemetryAdapter,
+  OTLPExporter: () => OTLPExporter,
+  OTLPKeyValueSchema: () => OTLPKeyValueSchema,
+  OTLPSpanSchema: () => OTLPSpanSchema,
   Ok: () => Ok,
   OpenAICacheAdapter: () => OpenAICacheAdapter,
   PII_FIELD_DENYLIST: () => PII_FIELD_DENYLIST,
@@ -2930,6 +2953,7 @@ __export(dist_exports, {
   PredictionResultSchema: () => PredictionResultSchema,
   PredictionWarningSchema: () => PredictionWarningSchema,
   ProjectScanner: () => ProjectScanner,
+  PromptCacheStatsSchema: () => PromptCacheStatsSchema,
   PulseAdapterAlreadyRegisteredError: () => PulseAdapterAlreadyRegisteredError,
   PulseConfigSchema: () => PulseConfigSchema,
   PulseDbSourceSchema: () => PulseDbSourceSchema,
@@ -2959,6 +2983,7 @@ __export(dist_exports, {
   SharableSecurityRulesSchema: () => SharableSecurityRulesSchema,
   SkillEventSchema: () => SkillEventSchema,
   SolutionDocFrontmatterSchema: () => SolutionDocFrontmatterSchema,
+  SpanKind: () => SpanKind,
   SpecImpactEstimateSchema: () => SpecImpactEstimateSchema,
   SpecImpactEstimator: () => SpecImpactEstimator,
   SpecImpactSignalsSchema: () => SpecImpactSignalsSchema,
@@ -2973,6 +2998,8 @@ __export(dist_exports, {
   TimelineFileSchema: () => TimelineFileSchema,
   TimelineManager: () => TimelineManager,
   TimelineSnapshotSchema: () => TimelineSnapshotSchema,
+  TokenScopeSchema: () => TokenScopeSchema,
+  TrajectoryMetadataSchema: () => TrajectoryMetadataSchema,
   TransitionSchema: () => TransitionSchema,
   TrendAttributionSchema: () => TrendAttributionSchema,
   TrendLineSchema: () => TrendLineSchema,
@@ -2987,6 +3014,10 @@ __export(dist_exports, {
   ViolationSchema: () => ViolationSchema,
   ViolationSnapshotSchema: () => ViolationSnapshotSchema,
   WHATWG_BAD_PORTS: () => WHATWG_BAD_PORTS,
+  WebhookDeliverySchema: () => WebhookDeliverySchema,
+  WebhookDeliveryStatusSchema: () => WebhookDeliveryStatusSchema,
+  WebhookSubscriptionPublicSchema: () => WebhookSubscriptionPublicSchema,
+  WebhookSubscriptionSchema: () => WebhookSubscriptionSchema,
   acquireCompoundLock: () => acquireCompoundLock,
   addProvenance: () => addProvenance,
   agentConfigRules: () => agentConfigRules,
@@ -3127,6 +3158,7 @@ __export(dist_exports, {
   goRules: () => goRules,
   injectionRules: () => injectionRules,
   insecureDefaultsRules: () => insecureDefaultsRules,
+  invalidateCheckState: () => invalidateCheckState,
   isBadPort: () => isBadPort,
   isDuplicateFinding: () => isDuplicateFinding,
   isErr: () => isErr,
@@ -6793,7 +6825,10 @@ function findDeadFiles(snapshot, reachability) {
   return deadFiles;
 }
 function isIdentifierUsedInAST(ast, identifier, skipImportDeclaration = true) {
-  const astString = JSON.stringify(ast);
+  const astString = JSON.stringify(
+    ast,
+    (_key, value) => typeof value === "bigint" ? value.toString() : value
+  );
   const identifierPattern = new RegExp(`"name"\\s*:\\s*"${identifier}"`, "g");
   const matches = astString.match(identifierPattern);
   if (!matches) return false;
@@ -14148,6 +14183,12 @@ function shouldRunCheck(state, intervalMs) {
   if (state === null) return true;
   return state.lastCheckTime + intervalMs <= Date.now();
 }
+function invalidateCheckState() {
+  try {
+    fs36.unlinkSync(getStatePath());
+  } catch {
+  }
+}
 function readCheckState() {
   try {
     const raw = fs36.readFileSync(getStatePath(), "utf-8");
@@ -15117,6 +15158,26 @@ async function send(events, apiKey) {
     }
   }
 }
+function toUnixNanoString(ns) {
+  return ns.toString(10);
+}
+function attributesToOTLP(attrs) {
+  const out = [];
+  for (const [key, value] of Object.entries(attrs)) {
+    if (typeof value === "string") {
+      out.push({ key, value: { stringValue: value } });
+    } else if (typeof value === "boolean") {
+      out.push({ key, value: { boolValue: value } });
+    } else if (typeof value === "number") {
+      if (Number.isInteger(value)) {
+        out.push({ key, value: { intValue: String(value) } });
+      } else {
+        out.push({ key, value: { doubleValue: value } });
+      }
+    }
+  }
+  return out;
+}
 function acquireCompoundLock(category, opts = {}) {
   if (!KNOWN_CATEGORIES.has(category)) {
     throw new Error(
@@ -15667,7 +15728,7 @@ function assembleCandidateReport(input) {
   }
   return lines.join("\n");
 }
-var WHATWG_BAD_PORTS, BAD_PORT_SET, VALID_TYPES, CONVENTIONAL_PATTERN, LOOKBACK_PATTERN, PulseDbSourceSchema, PulseSourcesSchema, PulseConfigSchema, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ALL_SOLUTION_CATEGORIES, ISO_DATE, BugTrackSchema, KnowledgeTrackSchema, BaseFrontmatter, SolutionDocFrontmatterSchema, TRACK_CATEGORIES, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, KEBAB_CASE, TICKET_ID, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, TS_HINTS, TS_CONVENTIONS, PYTHON_HINTS, PYTHON_CONVENTIONS, DEFAULT_INCLUDE_PATTERNS, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, JS_EXT_FALLBACKS2, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile62, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, JS_EXT_FALLBACKS22, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, PRIORITY_RANK2, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, ConflictError, DEFAULTS, GitHubHttp, ETagStore, START_MARKER, END_MARKER, SERIALIZER_FIELDS, GitHubIssuesTrackerAdapter, migrate_exports, HASH_RE, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS, CompoundLockHeldError, KNOWN_CATEGORIES, ALLOWED_FIELD_KEYS, PII_TOKENS, PII_FIELD_DENYLIST, PII_LINE_RE, ALLOWED_SET, PulseAdapterAlreadyRegisteredError, REGISTRY, MOCK_ADAPTER_NAME, ALLOWED_FIELD_SET, adapter, LOOKBACK_RE, MAX_LINES, INLINE_TEMPLATE, TRUNCATION_MARKER2, execFileAsync, FIX_RE, EMPTY_REPO_RE, execFileAsync2, TRACK_CATEGORIES2, STOPWORDS, KEYWORD_TO_CATEGORY;
+var WHATWG_BAD_PORTS, BAD_PORT_SET, VALID_TYPES, CONVENTIONAL_PATTERN, LOOKBACK_PATTERN, PulseDbSourceSchema, PulseSourcesSchema, PulseConfigSchema, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ALL_SOLUTION_CATEGORIES, ISO_DATE, BugTrackSchema, KnowledgeTrackSchema, BaseFrontmatter, SolutionDocFrontmatterSchema, TRACK_CATEGORIES, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, KEBAB_CASE, TICKET_ID, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, TS_HINTS, TS_CONVENTIONS, PYTHON_HINTS, PYTHON_CONVENTIONS, DEFAULT_INCLUDE_PATTERNS, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, JS_EXT_FALLBACKS2, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer, readFile62, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, CategorySnapshotSchema, TimelineSnapshotSchema, TimelineFileSchema, TrendLineSchema, TrendResultSchema, DEFAULT_STABILITY_THRESHOLDS, ALL_CATEGORIES, TimelineManager, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES2, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, JS_EXT_FALLBACKS22, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, PRIORITY_RANK2, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, ConflictError, DEFAULTS, GitHubHttp, ETagStore, START_MARKER, END_MARKER, SERIALIZER_FIELDS, GitHubIssuesTrackerAdapter, migrate_exports, HASH_RE, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS, DEFAULT_CAPACITY, CacheMetricsRecorder, RETRY_BACKOFFS_MS, OTLPExporter, SpanKind, CompoundLockHeldError, KNOWN_CATEGORIES, ALLOWED_FIELD_KEYS, PII_TOKENS, PII_FIELD_DENYLIST, PII_LINE_RE, ALLOWED_SET, PulseAdapterAlreadyRegisteredError, REGISTRY, MOCK_ADAPTER_NAME, ALLOWED_FIELD_SET, adapter, LOOKBACK_RE, MAX_LINES, INLINE_TEMPLATE, TRUNCATION_MARKER2, execFileAsync, FIX_RE, EMPTY_REPO_RE, execFileAsync2, TRACK_CATEGORIES2, STOPWORDS, KEYWORD_TO_CATEGORY;
 var init_dist3 = __esm({
   "../core/dist/index.mjs"() {
     init_chunk_4UI65RLE();
@@ -21491,10 +21552,199 @@ console.log('Blueprint player initialized.');
         };
       }
     };
-    VERSION = "0.23.3";
+    VERSION = "0.25.0";
     POSTHOG_BATCH_URL = "https://app.posthog.com/batch";
     MAX_ATTEMPTS = 3;
     TIMEOUT_MS = 5e3;
+    DEFAULT_CAPACITY = 1e3;
+    CacheMetricsRecorder = class {
+      capacity;
+      now;
+      buffer = [];
+      windowStartedAt = 0;
+      constructor(opts = {}) {
+        this.capacity = opts.capacity ?? DEFAULT_CAPACITY;
+        this.now = opts.now ?? Date.now;
+      }
+      /**
+       * Append a single cache observation. Hot-path: O(1) amortized, no
+       * allocations beyond the sample object itself.
+       */
+      record(backendId, hit, tokensCreated, tokensRead) {
+        if (this.windowStartedAt === 0) this.windowStartedAt = this.now();
+        if (this.buffer.length >= this.capacity) this.buffer.shift();
+        this.buffer.push({ backendId, hit, tokensCreated, tokensRead });
+      }
+      /** Aggregate the current window into a `PromptCacheStats` snapshot. */
+      getStats() {
+        let hits = 0;
+        let misses = 0;
+        const byBackend = {};
+        for (const s of this.buffer) {
+          if (s.hit) hits++;
+          else misses++;
+          const slot = byBackend[s.backendId] ?? { hits: 0, misses: 0 };
+          if (s.hit) slot.hits++;
+          else slot.misses++;
+          byBackend[s.backendId] = slot;
+        }
+        const totalRequests = hits + misses;
+        const hitRate = totalRequests === 0 ? 0 : hits / totalRequests;
+        return {
+          totalRequests,
+          hits,
+          misses,
+          hitRate,
+          byBackend,
+          windowStartedAt: this.windowStartedAt
+        };
+      }
+      /** Clear the buffer and reset the window-start marker. */
+      reset() {
+        this.buffer.length = 0;
+        this.windowStartedAt = 0;
+      }
+    };
+    RETRY_BACKOFFS_MS = [1e3, 2e3, 4e3];
+    OTLPExporter = class {
+      endpoint;
+      enabled;
+      headers;
+      flushIntervalMs;
+      batchSize;
+      fetchImpl;
+      warn;
+      buffer = [];
+      timer = null;
+      inFlightFlushes = /* @__PURE__ */ new Set();
+      constructor(opts) {
+        this.endpoint = opts.endpoint;
+        this.enabled = opts.enabled !== false;
+        this.headers = { "Content-Type": "application/json", ...opts.headers ?? {} };
+        this.flushIntervalMs = opts.flushIntervalMs ?? 2e3;
+        this.batchSize = opts.batchSize ?? 64;
+        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
+        this.warn = opts.warn ?? ((...a) => console.warn(...a));
+      }
+      /**
+       * O(1) buffer push. When `enabled === false` this is a no-op. If the
+       * buffer reaches `batchSize`, a flush is triggered without awaiting.
+       */
+      push(span) {
+        if (!this.enabled) return;
+        this.buffer.push(span);
+        if (this.buffer.length >= this.batchSize) {
+          void this.flush();
+        }
+      }
+      /** Start the periodic flush timer. Idempotent. */
+      start() {
+        if (!this.enabled || this.timer !== null) return;
+        this.timer = setInterval(() => {
+          void this.flush();
+        }, this.flushIntervalMs);
+        if (typeof this.timer.unref === "function") {
+          this.timer.unref();
+        }
+      }
+      /** Flush any pending spans and stop the timer. Awaits all in-flight flushes. */
+      async stop() {
+        if (this.timer !== null) {
+          clearInterval(this.timer);
+          this.timer = null;
+        }
+        void this.flush();
+        while (this.inFlightFlushes.size > 0) {
+          await Promise.all([...this.inFlightFlushes]);
+        }
+      }
+      /**
+       * Synchronously claim the current buffer and POST it to `/v1/traces`.
+       * Each invocation runs independently — concurrent flushes (e.g. one
+       * from the timer, one from a `batchSize` trip) each drain their own
+       * batch. Retries up to 3 times on transport or 5xx failure, then
+       * drops with a single warning.
+       */
+      flush() {
+        if (this.buffer.length === 0) return Promise.resolve();
+        const batch = this.buffer;
+        this.buffer = [];
+        const payload = this.spansToOTLPJSON(batch);
+        const work = (async () => {
+          let lastError = null;
+          for (let attempt = 0; attempt < RETRY_BACKOFFS_MS.length; attempt++) {
+            try {
+              const response = await this.fetchImpl(this.endpoint, {
+                method: "POST",
+                headers: this.headers,
+                body: JSON.stringify(payload)
+              });
+              if (response.ok) return;
+              try {
+                await response.text();
+              } catch {
+              }
+              lastError = new Error(`OTLP endpoint returned ${response.status}`);
+            } catch (err) {
+              lastError = err;
+            }
+            const backoff = RETRY_BACKOFFS_MS[attempt] ?? 0;
+            if (attempt < RETRY_BACKOFFS_MS.length - 1) {
+              await new Promise((resolve10) => setTimeout(resolve10, backoff));
+            }
+          }
+          this.warn(
+            `[harness telemetry] dropping ${batch.length} span(s) after 3 failed OTLP attempts:`,
+            lastError
+          );
+        })();
+        this.inFlightFlushes.add(work);
+        void work.finally(() => this.inFlightFlushes.delete(work));
+        return work;
+      }
+      /**
+       * Build the OTLP/HTTP JSON envelope for a batch of spans. Public for
+       * tests; not part of the supported API surface.
+       */
+      spansToOTLPJSON(spans) {
+        return {
+          resourceSpans: [
+            {
+              resource: {
+                attributes: [{ key: "service.name", value: { stringValue: "harness" } }]
+              },
+              scopeSpans: [
+                {
+                  scope: { name: "harness" },
+                  spans: spans.map((s) => {
+                    const span = {
+                      traceId: s.traceId,
+                      spanId: s.spanId,
+                      name: s.name,
+                      kind: s.kind,
+                      startTimeUnixNano: toUnixNanoString(s.startTimeNs),
+                      endTimeUnixNano: toUnixNanoString(s.endTimeNs),
+                      attributes: attributesToOTLP(s.attributes)
+                    };
+                    if (s.parentSpanId !== void 0) span["parentSpanId"] = s.parentSpanId;
+                    if (s.statusCode !== void 0) span["status"] = { code: s.statusCode };
+                    return span;
+                  })
+                }
+              ]
+            }
+          ]
+        };
+      }
+    };
+    SpanKind = /* @__PURE__ */ ((SpanKind2) => {
+      SpanKind2[SpanKind2["INTERNAL"] = 1] = "INTERNAL";
+      SpanKind2[SpanKind2["SERVER"] = 2] = "SERVER";
+      SpanKind2[SpanKind2["CLIENT"] = 3] = "CLIENT";
+      SpanKind2[SpanKind2["PRODUCER"] = 4] = "PRODUCER";
+      SpanKind2[SpanKind2["CONSUMER"] = 5] = "CONSUMER";
+      return SpanKind2;
+    })(SpanKind || {});
     CompoundLockHeldError = class extends Error {
       constructor(category, holderPid, lockPath) {
         super(
@@ -22020,6 +22270,7 @@ export {
   BlueprintGenerator,
   isUpdateCheckEnabled,
   shouldRunCheck,
+  invalidateCheckState,
   readCheckState,
   spawnBackgroundCheck,
   getUpdateNotification,
@@ -22057,6 +22308,9 @@ export {
   VERSION,
   collectEvents,
   send,
+  CacheMetricsRecorder,
+  OTLPExporter,
+  SpanKind,
   CompoundLockHeldError,
   acquireCompoundLock,
   ALLOWED_FIELD_KEYS,

package/dist/{chunk-TIQU5VY7.js → chunk-5FDBXUFW.js}

@@ -15,7 +15,7 @@ function evictIfNeeded() {
   }
 }
 async function doLoadGraphStore(projectRoot) {
-  const { GraphStore } = await import("./dist-SQAOKWXM.js");
+  const { GraphStore } = await import("./dist-QPWXPCPL.js");
   const graphDir = path.join(projectRoot, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);

package/dist/{chunk-7BNK4M23.js → chunk-5XLLIYYL.js}

@@ -41,7 +41,7 @@ async function runScan(projectPath) {
     KnowledgeIngestor,
     GitIngestor,
     RequirementIngestor
-  } = await import("./dist-SQAOKWXM.js");
+  } = await import("./dist-QPWXPCPL.js");
   const store = new GraphStore();
   const start = Date.now();
   const ingestOptions = loadIngestOptions(projectPath);