@harness-engineering/cli 2.6.1 → 2.7.1

package/dist/{chunk-VUCGB2KH.js → chunk-B2VAYLYI.js}

@@ -1,6 +1,6 @@
 import {
   init_dist
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 import {
   Err,
   Ok

package/dist/{chunk-HFOB2MPQ.js → chunk-CZPOPMMI.js}

@@ -27,7 +27,7 @@ var runSecurityScanDefinition = {
 };
 async function handleRunSecurityScan(input) {
   try {
-    const core = await import("./dist-OHDQBTSO.js");
+    const core = await import("./dist-72ID44UE.js");
     const projectRoot = sanitizePath(input.path);
     let configData = {};
     try {
@@ -50,7 +50,7 @@ async function handleRunSecurityScan(input) {
     if (input.files && input.files.length > 0) {
       filesToScan = input.files.map((f) => path.resolve(projectRoot, f));
     } else {
-      const { globFiles } = await import("./glob-helper-XE2UGEOV.js");
+      const { globFiles } = await import("./glob-helper-EX4YZKZO.js");
       filesToScan = await globFiles(projectRoot, securityConfig.exclude);
     }
     const result = await scanner.scanFiles(filesToScan);
@@ -114,7 +114,7 @@ var getSecurityTrendsDefinition = {
 };
 async function handleGetSecurityTrends(input) {
   try {
-    const core = await import("./dist-OHDQBTSO.js");
+    const core = await import("./dist-72ID44UE.js");
     const projectRoot = sanitizePath(input.path);
     const manager = new core.SecurityTimelineManager(projectRoot);
     const trendOptions = {};

package/dist/{chunk-43M3RLFQ.js → chunk-FC4JPM6W.js}

@@ -1,6 +1,6 @@
 import {
   resolveConfig
-} from "./chunk-VTTNIZJL.js";
+} from "./chunk-FXZI6NJ2.js";
 import {
   logger
 } from "./chunk-EBJQ6N4M.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-3WGJMBKH.js";
 import {
   init_dist
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 import {
   Ok
 } from "./chunk-OH3NXXUY.js";

package/dist/{chunk-6AX6R3LM.js → chunk-FEKBXX2J.js}

@@ -1,16 +1,16 @@
 import {
   resultToMcpResponse
-} from "./chunk-EPUKTTJZ.js";
+} from "./chunk-RC3OI5NK.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
 import {
   findConfigFile,
   loadConfig
-} from "./chunk-VTTNIZJL.js";
+} from "./chunk-FXZI6NJ2.js";
 import {
   init_dist
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 import {
   Ok
 } from "./chunk-OH3NXXUY.js";
@@ -35,7 +35,7 @@ var checkPerformanceDefinition = {
 };
 async function handleCheckPerformance(input) {
   try {
-    const { EntropyAnalyzer } = await import("./dist-OHDQBTSO.js");
+    const { EntropyAnalyzer } = await import("./dist-72ID44UE.js");
     const typeFilter = input.type ?? "all";
     const projectPath = sanitizePath(input.path);
     let entryPoints;
@@ -58,10 +58,10 @@ async function handleCheckPerformance(input) {
     });
     let graphOptions;
     try {
-      const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
+      const { loadGraphStore } = await import("./graph-loader-EIFEOUVI.js");
       const store = await loadGraphStore(projectPath);
       if (store) {
-        const { GraphComplexityAdapter, GraphCouplingAdapter } = await import("./dist-QPWXPCPL.js");
+        const { GraphComplexityAdapter, GraphCouplingAdapter } = await import("./dist-R3TOOPJ7.js");
         const complexityAdapter = new GraphComplexityAdapter(store);
         const couplingAdapter = new GraphCouplingAdapter(store);
         graphOptions = {
@@ -98,7 +98,7 @@ var getPerfBaselinesDefinition = {
 };
 async function handleGetPerfBaselines(input) {
   try {
-    const { BaselineManager } = await import("./dist-OHDQBTSO.js");
+    const { BaselineManager } = await import("./dist-72ID44UE.js");
     const manager = new BaselineManager(sanitizePath(input.path));
     const baselines = manager.load();
     return resultToMcpResponse(
@@ -146,7 +146,7 @@ var updatePerfBaselinesDefinition = {
 };
 async function handleUpdatePerfBaselines(input) {
   try {
-    const { BaselineManager } = await import("./dist-OHDQBTSO.js");
+    const { BaselineManager } = await import("./dist-72ID44UE.js");
     const manager = new BaselineManager(sanitizePath(input.path));
     manager.save(input.results, input.commitHash);
     const updated = manager.load();
@@ -176,7 +176,7 @@ var getCriticalPathsDefinition = {
 };
 async function handleGetCriticalPaths(input) {
   try {
-    const { CriticalPathResolver } = await import("./dist-OHDQBTSO.js");
+    const { CriticalPathResolver } = await import("./dist-72ID44UE.js");
     const resolver = new CriticalPathResolver(sanitizePath(input.path));
     const result = await resolver.resolve();
     return resultToMcpResponse(Ok(result));

package/dist/{chunk-VTTNIZJL.js → chunk-FXZI6NJ2.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-3WGJMBKH.js";
 import {
   init_dist as init_dist2
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 import {
   Err,
   Ok
@@ -15,7 +15,7 @@ import {
 import {
   init_dist,
   skipDirGlobs
-} from "./chunk-BCFDGOMA.js";
+} from "./chunk-H2ZJOJ7A.js";
 import {
   ArchConfigSchema
 } from "./chunk-QCLOIUMX.js";
@@ -29,6 +29,7 @@ import * as path from "path";
 init_dist2();
 init_dist();
 import { z } from "zod";
+import { BackendDefSchema, RoutingConfigSchema } from "@harness-engineering/orchestrator";
 var LayerSchema = z.object({
   /** Human-readable name of the layer */
   name: z.string(),
@@ -55,7 +56,21 @@ var AgentConfigSchema = z.object({
   /** Maximum execution time in milliseconds */
   timeout: z.number().default(3e5),
   /** Optional list of skill IDs pre-authorized for the agent */
-  skills: z.array(z.string()).optional()
+  skills: z.array(z.string()).optional(),
+  /**
+   * Named backend definitions (Spec 2 — multi-backend routing).
+   *
+   * Each entry maps a backend name (chosen by the project) to a backend
+   * type plus its connection details (model, endpoint, apiKey, etc.).
+   * Referenced from `craft.llm.backend`, from orchestrator routing rules,
+   * and from any future subsystem that needs a configured LLM backend.
+   *
+   * Schema is re-exported from @harness-engineering/orchestrator so this
+   * file and the orchestrator runtime validate against the same source.
+   */
+  backends: z.record(z.string(), BackendDefSchema).optional(),
+  /** Routing rules for orchestrator agent dispatch. */
+  routing: RoutingConfigSchema.optional()
 });
 var EntropyConfigSchema = z.object({
   /** Explicit entry points for reachability analysis (overrides auto-detection) */
@@ -99,6 +114,86 @@ var PerformanceConfigSchema = z.object({
   /** Size budget for bundles or directories */
   sizeBudget: z.record(z.unknown()).optional()
 }).passthrough();
+var ComponentAnatomyAuditConfigSchema = z.object({
+  /** Gate for the entire audit AND the harness-accessibility deferral */
+  enabled: z.boolean().default(true),
+  /** "default" or a path to a project-supplied override catalog */
+  catalog: z.string().default("default"),
+  /** "all", "none", or an explicit list of pattern codes (e.g. ["ANAT-P001"]) */
+  patterns: z.union([z.literal("all"), z.literal("none"), z.array(z.string())]).default("all"),
+  /** Fast-mode controls (validate-time scope cap + pattern opt-in) */
+  fastMode: z.object({
+    /** Whether validate-time runs pattern queries (default false — patterns are full-mode only) */
+    patterns: z.boolean().default(false),
+    /** Cap to keep validate fast on large repos */
+    maxFiles: z.number().int().positive().default(500)
+  }).default({})
+});
+var DriftDetectionConfigSchema = z.object({
+  /** Gate for the entire drift verifier */
+  enabled: z.boolean().default(true),
+  /** Rule toggles — defaults align with v1 scope (T* + P*) */
+  rules: z.object({
+    /** Token bypass rules (DRIFT-T001-T004). Default: true. */
+    tokenBypass: z.boolean().default(true),
+    /** Primitive adoption rules (DRIFT-P001-P004). Default: true. */
+    primitiveAdoption: z.boolean().default(true)
+  }).default({}),
+  /** Fast-mode controls (validate-time scope cap) */
+  fastMode: z.object({
+    /** Cap to keep validate fast on large repos */
+    maxFiles: z.number().int().positive().default(500)
+  }).default({})
+});
+var BrandComplianceConfigSchema = z.object({
+  /** Gate for the entire brand verifier */
+  enabled: z.boolean().default(true),
+  /** Rule toggles — defaults align with v1 scope (BRAND-T* + BRAND-V001) */
+  rules: z.object({
+    /** Token-misuse rules (BRAND-T001 via $extensions.harness.brand.forbidden_contexts). Default: true. */
+    tokenMisuse: z.boolean().default(true),
+    /** Voice rule (BRAND-V001 forbidden phrases in JSX text + string attributes). Default: true. */
+    voice: z.boolean().default(true)
+  }).default({}),
+  /** Fast-mode controls (validate-time scope cap) */
+  fastMode: z.object({
+    maxFiles: z.number().int().positive().default(500)
+  }).default({})
+});
+var DesignAuditConfigSchema = z.object({
+  /** Component-anatomy audit (design-pipeline #2) */
+  componentAnatomy: ComponentAnatomyAuditConfigSchema.optional(),
+  /** Design-system drift detection (design-pipeline #1, detect half) */
+  driftDetection: DriftDetectionConfigSchema.optional(),
+  /** Brand-compliance audit (design-pipeline #3) */
+  brandCompliance: BrandComplianceConfigSchema.optional()
+});
+var DesignCraftConfigSchema = z.object({
+  /** Gate for the entire skill AND the harness-design overlap deferral */
+  enabled: z.boolean().default(true),
+  /** Default invocation mode — "fast" (code-only LLM) or "deep" (rendered + vision-LLM) */
+  mode: z.enum(["fast", "deep"]).default("fast"),
+  /** B' detect-and-offer behavior when preconditions missing */
+  autoCapture: z.enum(["prompt", "auto", "skip"]).default("prompt"),
+  /** LLM provider configuration */
+  llm: z.object({
+    provider: z.string().default("anthropic"),
+    model: z.string().default("claude-sonnet-4-6"),
+    visionModel: z.string().optional()
+  }).optional(),
+  /** Catalog scoping */
+  catalog: z.object({
+    path: z.string().default("default"),
+    rubrics: z.union([z.literal("all"), z.literal("none"), z.array(z.string())]).default("all"),
+    patterns: z.union([z.literal("all"), z.literal("none"), z.array(z.string())]).default("all"),
+    exemplars: z.union([z.literal("all"), z.literal("none"), z.array(z.string())]).default("all")
+  }).optional(),
+  /** Signal feedback loop (CRITIQUE recurrence → pattern proposal) */
+  signal: z.object({
+    /** N=5 by default — emit candidate pattern proposal after this many recurrences */
+    proposalThreshold: z.number().int().positive().default(5)
+  }).optional()
+});
 var DesignConfigSchema = z.object({
   /**
    * Whether design-system tooling is enabled for this project. Set during init.
@@ -113,7 +208,17 @@ var DesignConfigSchema = z.object({
   /** Path to design tokens (e.g. JSON or CSS) */
   tokenPath: z.string().optional(),
   /** Brief description of the intended aesthetic direction */
-  aestheticIntent: z.string().optional()
+  aestheticIntent: z.string().optional(),
+  /**
+   * Design-pipeline audit configuration (rule-based floor layer).
+   * Omit to use built-in defaults.
+   */
+  audit: DesignAuditConfigSchema.optional(),
+  /**
+   * Design-craft configuration (LLM-judgment ceiling layer, design-pipeline #6).
+   * Omit to use built-in defaults.
+   */
+  craft: DesignCraftConfigSchema.optional()
 }).superRefine((value, ctx) => {
   if (value.enabled === true && (!value.platforms || value.platforms.length === 0)) {
     ctx.addIssue({
@@ -261,6 +366,24 @@ var ComplianceConfigSchema = z.object({
   /** Branch naming convention settings */
   branching: BranchingConfigSchema.default({})
 });
+var CraftConfigSchema = z.object({
+  llm: z.object({
+    /**
+     * Name of an entry in `agent.backends` to route craft LLM calls
+     * through. Supported backend types: claude, anthropic, openai,
+     * local, pi, mock. (gemini is declared in agent.backends but is
+     * not yet wired through the craft adapter.)
+     */
+    backend: z.string().optional(),
+    /**
+     * Special-case mode that doesn't correspond to a backend def.
+     *   - `in-session` — defer prompts to the calling chat session
+     *     via the two-step MCP flow (collect → finalize).
+     *   - `mock` — deterministic mock provider, for tests / smoke runs.
+     */
+    mode: z.enum(["in-session", "mock"]).optional()
+  }).optional()
+});
 var HarnessConfigSchema = z.object({
   /** Configuration schema version */
   version: z.literal(1),
@@ -312,6 +435,8 @@ var HarnessConfigSchema = z.object({
   phaseGates: PhaseGatesConfigSchema.optional(),
   /** Design system consistency settings */
   design: DesignConfigSchema.optional(),
+  /** Shared configuration for craft-pipeline ceiling skills (LLM-judgment) */
+  craft: CraftConfigSchema.optional(),
   /** Internationalization (i18n) settings */
   i18n: I18nConfigSchema.optional(),
   /** Code review settings */
@@ -363,7 +488,7 @@ var HarnessConfigSchema = z.object({
     connectors: z.record(z.string(), z.record(z.string(), z.unknown())).default({})
   }).optional(),
   /**
-   * Hermes Phase 2 — Disk-hygiene rules consumed by `harness cleanup-sessions --all`.
+   * Disk-hygiene rules consumed by `harness cleanup-sessions --all`.
    * Keys correspond to registered target names (sessions, cache, maintenance,
    * dashboard-state, snapshots, analyzer-output); values override the default
    * TTL in hours. Unknown keys are ignored (forward-compatible).
@@ -372,7 +497,7 @@ var HarnessConfigSchema = z.object({
     ttlHours: z.record(z.string(), z.number().positive()).optional()
   }).optional(),
   /**
-   * Hermes Phase 2 — Pre-launch OSV malware guard configuration.
+   * Pre-launch OSV malware guard configuration.
    * `enabled: false` disables the guard; `strict: true` reverses the default
    * fail-open posture on OSV.dev network errors.
    */

package/dist/{chunk-5JNSFYZU.js → chunk-GGSNWH7P.js}

@@ -1,9 +1,9 @@
 import {
   resolveProjectConfig
-} from "./chunk-GWF2OILZ.js";
+} from "./chunk-VSIRUZQP.js";
 import {
   resultToMcpResponse
-} from "./chunk-EPUKTTJZ.js";
+} from "./chunk-RC3OI5NK.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
@@ -38,7 +38,7 @@ async function handleCheckDependencies(input) {
   const configResult = resolveProjectConfig(projectPath);
   if (!configResult.ok) return resultToMcpResponse(configResult);
   try {
-    const { validateDependencies, TypeScriptParser } = await import("./dist-OHDQBTSO.js");
+    const { validateDependencies, TypeScriptParser } = await import("./dist-72ID44UE.js");
     const config = configResult.value;
     const rawLayers = Array.isArray(config.layers) ? config.layers : [];
     const layers = rawLayers.map((l) => ({
@@ -47,11 +47,11 @@ async function handleCheckDependencies(input) {
       allowedDependencies: l.allowedDependencies
     }));
     const parser = new TypeScriptParser();
-    const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
+    const { loadGraphStore } = await import("./graph-loader-EIFEOUVI.js");
     const store = await loadGraphStore(projectPath);
     let graphDependencyData;
     if (store) {
-      const { GraphConstraintAdapter } = await import("./dist-QPWXPCPL.js");
+      const { GraphConstraintAdapter } = await import("./dist-R3TOOPJ7.js");
       const adapter = new GraphConstraintAdapter(store);
       const graphData = adapter.computeDependencyGraph();
       graphDependencyData = {
@@ -69,7 +69,7 @@ async function handleCheckDependencies(input) {
     if (store) {
       const designTokenNodes = store.findNodes({ type: "design_token" });
       if (designTokenNodes.length > 0) {
-        const { DesignConstraintAdapter } = await import("./dist-QPWXPCPL.js");
+        const { DesignConstraintAdapter } = await import("./dist-R3TOOPJ7.js");
         const designAdapter = new DesignConstraintAdapter(store);
         const fileNodes = store.findNodes({ type: "file" });
         for (const fileNode of fileNodes) {

package/dist/{chunk-BCFDGOMA.js → chunk-H2ZJOJ7A.js}

@@ -1643,7 +1643,7 @@ function parseAntiPatterns(content) {
   }
   return patterns;
 }
-var NODE_TYPES, EDGE_TYPES, OBSERVABILITY_TYPES, CURRENT_SCHEMA_VERSION, NODE_STABILITY, GraphNodeSchema, GraphEdgeSchema, POISONED_KEYS, GraphStore, VectorStore, DEFAULT_TTL_MS, PackedSummaryCache, ContextQL, TEST_TYPES, DOC_TYPES, CODE_TYPES, DEFAULT_SKIP_DIRS, SKIP_METHOD_NAMES, FUNCTION_PATTERNS, CLASS_PATTERNS, INTERFACE_PATTERNS, METHOD_PATTERNS, GO_METHOD_PATTERN, VARIABLE_PATTERNS, SUPPORTED_EXTENSIONS, SKIP_EXTENSIONS, CodeIngestor, execFileAsync, GitIngestor, TopologicalLinker, CODE_NODE_TYPES, DOCS_OWNED_BY_OTHER_INGESTORS, KnowledgeIngestor, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ISO_DATE, SolutionBaseSchema, SolutionDocFrontmatterSchema, BUSINESS_KNOWLEDGE_TYPES, GOVERNS_SOURCE_TYPES, CODE_NODE_TYPES2, MEASURABLE_TYPES, BusinessKnowledgeIngestor, CODE_NODE_TYPES3, DecisionIngestor, REQUIREMENT_SECTIONS, SECTION_HEADING_RE, NUMBERED_ITEM_RE, CODE_NODE_TYPES4, RequirementIngestor, DEFAULT_PATTERNS, DEFAULT_BLOCKLIST, CODE_EXTENSIONS, MermaidParser, D2Parser, PlantUmlParser, DIAGRAM_EXTENSIONS, DiagramParser, HEURISTIC_PATTERNS, SCANNABLE_TYPES, KnowledgeLinker, StructuralDriftDetector, BUSINESS_NODE_TYPES, KnowledgeStagingAggregator, EXT_TO_LANGUAGE, SKIP_EXTENSIONS2, EXTRACTOR_EDGE_TYPE, ExtractionRunner, PATTERNS, TestDescriptionExtractor, EnumConstantExtractor, ValidationRuleExtractor, ApiPathExtractor, ALL_EXTRACTORS, ImageAnalysisExtractor, KNOWLEDGE_NODE_TYPES, SIMILARITY_THRESHOLD, SEVERITY_MAP, ContradictionDetector, KNOWLEDGE_TYPES, CODE_TYPES2, KNOWLEDGE_EDGE_TYPES, CoverageScorer, VALID_BUSINESS_TYPES, DEFAULT_MAX_DOCS, MAX_COLLISION_SUFFIX, KnowledgeDocMaterializer, BUSINESS_NODE_TYPES2, SNAPSHOT_NODE_TYPES, KnowledgePipelineRunner, CODE_NODE_TYPES5, RETRYABLE_STATUSES, SANITIZE_RULES, SyncManager, SUMMARIZE_PROMPT, JiraConnector, SlackConnector, ConfluenceConnector, CIConnector, CONSTRAINT_KEYWORDS, FigmaConnector, MIN_CONTENT_LENGTH, CONCEPT_ITEM_TYPES, MiroConnector, STOP_WORDS, FusionLayer, CODE_NODE_TYPES6, GraphEntropyAdapter, GraphComplexityAdapter, GraphCouplingAdapter, DEFAULT_THRESHOLD, DEFAULT_METRICS, RECOGNIZED_METRICS, GraphAnomalyAdapter, INTENTS, SIGNAL_WEIGHTS, INTENT_SIGNALS, IntentClassifier, INTENT_KEYWORDS, STOP_WORDS2, PASCAL_OR_CAMEL_RE, FILE_PATH_RE, QUOTED_RE, EntityExtractor, EntityResolver, ResponseFormatter, CompositeProbabilityStrategy, DEFAULT_PROBABILITY_FLOOR, DEFAULT_MAX_DEPTH, CascadeSimulator, ENTITY_REQUIRED_INTENTS, classifier, extractor, formatter, PHASE_NODE_TYPES, CODE_NODE_TYPES7, Assembler, GraphConstraintAdapter, DesignIngestor, DesignConstraintAdapter, GraphFeedbackAdapter, DEFAULT_EDGE_TYPES, TaskIndependenceAnalyzer, ConflictPredictor, VERSION;
+var NODE_TYPES, EDGE_TYPES, OBSERVABILITY_TYPES, CURRENT_SCHEMA_VERSION, NODE_STABILITY, GraphNodeSchema, GraphEdgeSchema, POISONED_KEYS, GraphStore, VectorStore, DEFAULT_TTL_MS, PackedSummaryCache, ContextQL, TEST_TYPES, DOC_TYPES, CODE_TYPES, DEFAULT_SKIP_DIRS, SKIP_METHOD_NAMES, FUNCTION_PATTERNS, CLASS_PATTERNS, INTERFACE_PATTERNS, METHOD_PATTERNS, GO_METHOD_PATTERN, VARIABLE_PATTERNS, SUPPORTED_EXTENSIONS, SKIP_EXTENSIONS, CodeIngestor, execFileAsync, GitIngestor, TopologicalLinker, CODE_NODE_TYPES, DOCS_OWNED_BY_OTHER_INGESTORS, KnowledgeIngestor, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ISO_DATE, SolutionBaseSchema, SolutionDocFrontmatterSchema, BUSINESS_KNOWLEDGE_TYPES, GOVERNS_SOURCE_TYPES, CODE_NODE_TYPES2, MEASURABLE_TYPES, BusinessKnowledgeIngestor, CODE_NODE_TYPES3, DecisionIngestor, REQUIREMENT_SECTIONS, SECTION_HEADING_RE, NUMBERED_ITEM_RE, CODE_NODE_TYPES4, RequirementIngestor, DEFAULT_PATTERNS, DEFAULT_BLOCKLIST, CODE_EXTENSIONS, MermaidParser, D2Parser, PlantUmlParser, DIAGRAM_EXTENSIONS, DiagramParser, HEURISTIC_PATTERNS, SCANNABLE_TYPES, KnowledgeLinker, StructuralDriftDetector, BUSINESS_NODE_TYPES, KnowledgeStagingAggregator, EXT_TO_LANGUAGE, SKIP_EXTENSIONS2, EXTRACTOR_EDGE_TYPE, ExtractionRunner, PATTERNS, TestDescriptionExtractor, EnumConstantExtractor, ValidationRuleExtractor, ApiPathExtractor, ALL_EXTRACTORS, ImageAnalysisExtractor, KNOWLEDGE_NODE_TYPES, SIMILARITY_THRESHOLD, SEVERITY_MAP, ContradictionDetector, KNOWLEDGE_TYPES, CODE_TYPES2, KNOWLEDGE_EDGE_TYPES, CoverageScorer, VALID_BUSINESS_TYPES, DEFAULT_MAX_DOCS, MAX_COLLISION_SUFFIX, KnowledgeDocMaterializer, BUSINESS_NODE_TYPES2, SNAPSHOT_NODE_TYPES, KnowledgePipelineRunner, CODE_NODE_TYPES5, RETRYABLE_STATUSES, SANITIZE_RULES, SyncManager, SUMMARIZE_PROMPT, JiraConnector, SlackConnector, ConfluenceConnector, CIConnector, CONSTRAINT_KEYWORDS, FigmaConnector, MIN_CONTENT_LENGTH, CONCEPT_ITEM_TYPES, MiroConnector, STOP_WORDS, FusionLayer, CODE_NODE_TYPES6, GraphEntropyAdapter, GraphComplexityAdapter, GraphCouplingAdapter, DEFAULT_THRESHOLD, DEFAULT_METRICS, RECOGNIZED_METRICS, GraphAnomalyAdapter, INTENTS, SIGNAL_WEIGHTS, INTENT_SIGNALS, IntentClassifier, INTENT_KEYWORDS, STOP_WORDS2, PASCAL_OR_CAMEL_RE, FILE_PATH_RE, QUOTED_RE, EntityExtractor, EntityResolver, ResponseFormatter, CompositeProbabilityStrategy, DEFAULT_PROBABILITY_FLOOR, DEFAULT_MAX_DEPTH, CascadeSimulator, ENTITY_REQUIRED_INTENTS, classifier, extractor, formatter, PHASE_NODE_TYPES, CODE_NODE_TYPES7, Assembler, GraphConstraintAdapter, DesignIngestor, CODE_PREFIX_LABELS, DesignConstraintAdapter, GraphFeedbackAdapter, DEFAULT_EDGE_TYPES, TaskIndependenceAnalyzer, ConflictPredictor, VERSION;
 var init_dist = __esm({
   "../graph/dist/index.mjs"() {
     NODE_TYPES = [
@@ -9141,6 +9141,16 @@ ${replyLines.join("\n")}`;
         return { ...merged, durationMs: Date.now() - start };
       }
     };
+    CODE_PREFIX_LABELS = {
+      "ANAT-D": "Component anatomy (definition)",
+      "ANAT-P": "Component anatomy (pattern presence)",
+      "ANAT-U": "Component anatomy (usage)",
+      "CRAFT-C": "Design craft (critique)",
+      "CRAFT-P": "Design craft (polish)",
+      "CRAFT-B": "Design craft (benchmark)",
+      "DESIGN-": "Design constraint (legacy)",
+      "A11Y-": "Accessibility"
+    };
     DesignConstraintAdapter = class {
       constructor(store) {
         this.store = store;
@@ -9222,6 +9232,76 @@ ${replyLines.join("\n")}`;
             return "error";
         }
       }
+      /**
+       * Record externally-computed craft findings (audit-component-anatomy,
+       * harness-design-craft, etc.) as graph state. Idempotent — re-running on
+       * the same findings produces no duplicate nodes or edges thanks to
+       * GraphStore's keyed merge semantics.
+       *
+       * Each finding becomes:
+       *   • a `design_constraint` node keyed by finding code (created lazily
+       *     if absent; metadata merged on re-record so the most recent message
+       *     / severity wins)
+       *   • a `violates_design` edge from the source file (id = file path) to
+       *     the constraint node, with per-finding metadata (line, severity,
+       *     message, evidence, runId)
+       *
+       * The file node is NOT created here — it's assumed to already exist in
+       * the graph from a prior ingest. If it does not, the edge will still be
+       * created (graph stores edges by key, not by referential integrity) and
+       * a subsequent ingest will populate the file node.
+       */
+      recordFindings(findings) {
+        let constraintsAdded = 0;
+        let edgesAdded = 0;
+        const seenConstraintIds = /* @__PURE__ */ new Set();
+        for (const finding of findings) {
+          const constraintId = `design_constraint:${finding.code}`;
+          if (!seenConstraintIds.has(finding.code)) {
+            const existing = this.store.getNode(constraintId);
+            if (!existing) constraintsAdded += 1;
+            this.store.addNode({
+              id: constraintId,
+              type: "design_constraint",
+              name: finding.code,
+              metadata: {
+                code: finding.code,
+                label: this.labelForCode(finding.code),
+                mostRecentMessage: finding.message,
+                mostRecentSeverity: finding.severity
+              }
+            });
+            seenConstraintIds.add(finding.code);
+          }
+          const fileId = finding.file;
+          const edgeMetadata = {
+            message: finding.message,
+            severity: finding.severity
+          };
+          if (finding.line !== void 0) edgeMetadata.line = finding.line;
+          if (finding.evidence !== void 0) edgeMetadata.evidence = finding.evidence;
+          if (finding.runId !== void 0) edgeMetadata.runId = finding.runId;
+          const before = this.store.getEdges({
+            from: fileId,
+            to: constraintId,
+            type: "violates_design"
+          });
+          this.store.addEdge({
+            from: fileId,
+            to: constraintId,
+            type: "violates_design",
+            metadata: edgeMetadata
+          });
+          if (before.length === 0) edgesAdded += 1;
+        }
+        return { constraintsAdded, edgesAdded };
+      }
+      labelForCode(code) {
+        for (const prefix of Object.keys(CODE_PREFIX_LABELS)) {
+          if (code.startsWith(prefix)) return CODE_PREFIX_LABELS[prefix];
+        }
+        return "Design constraint";
+      }
     };
     GraphFeedbackAdapter = class {
       constructor(store) {

package/dist/{chunk-PFZEADQM.js → chunk-INBTDBV2.js}

@@ -4,7 +4,7 @@ import {
 import {
   listPersonas,
   loadPersona
-} from "./chunk-K246XQ2L.js";
+} from "./chunk-PTHX545Q.js";
 import {
   GENERATED_HEADER_AGENT,
   VALID_PLATFORMS,
@@ -223,6 +223,78 @@ function renderCursorAgent(def) {
   return lines.join("\n");
 }
 
+// src/agent-definitions/render-codex.ts
+function tomlBasicString(value) {
+  const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, " ").replace(/\r/g, "").replace(/\t/g, " ");
+  return `"${escaped}"`;
+}
+function tomlMultilineString(value) {
+  if (!value.includes("'''")) {
+    return `'''
+${value}
+'''`;
+  }
+  const escaped = value.replace(/\\/g, "\\\\").replace(
+    /"{3,}/g,
+    (run) => run.split("").map((ch) => `\\${ch}`).join("")
+  );
+  return `"""
+${escaped}
+"""`;
+}
+function formatStep4(step, index) {
+  if ("command" in step && step.command) {
+    const cmd = step.command;
+    const when = step.when ?? "always";
+    return `${index + 1}. Run \`harness ${cmd}\` (${when})`;
+  }
+  if ("skill" in step && step.skill) {
+    const skill = step.skill;
+    const when = step.when ?? "always";
+    return `${index + 1}. Execute ${skill} skill (${when})`;
+  }
+  return `${index + 1}. Unknown step`;
+}
+function buildInstructionsBody(def) {
+  const sections = [];
+  sections.push("## Role");
+  sections.push("");
+  sections.push(def.role);
+  if (def.skills.length > 0) {
+    sections.push("");
+    sections.push("## Skills");
+    sections.push("");
+    for (const skill of def.skills) {
+      sections.push(`- ${skill}`);
+    }
+  }
+  if (def.steps.length > 0) {
+    sections.push("");
+    sections.push("## Steps");
+    sections.push("");
+    def.steps.forEach((step, i) => {
+      sections.push(formatStep4(step, i));
+    });
+  }
+  if (def.methodology) {
+    sections.push("");
+    sections.push("## Methodology");
+    sections.push("");
+    sections.push(def.methodology);
+  }
+  return sections.join("\n");
+}
+function renderCodexAgent(def) {
+  const lines = [];
+  lines.push(`# ${GENERATED_HEADER_AGENT}`);
+  lines.push("");
+  lines.push(`name = ${tomlBasicString(def.name)}`);
+  lines.push(`description = ${tomlBasicString(def.description)}`);
+  lines.push(`developer_instructions = ${tomlMultilineString(buildInstructionsBody(def))}`);
+  lines.push("");
+  return lines.join("\n");
+}
+
 // src/commands/generate-agent-definitions.ts
 function resolveOutputDir(platform, opts) {
   if (opts.output) {
@@ -246,8 +318,13 @@ function loadSkillContent(skillName) {
 function getRenderer(platform) {
   if (platform === "claude-code") return renderClaudeCodeAgent;
   if (platform === "cursor") return renderCursorAgent;
+  if (platform === "codex") return renderCodexAgent;
   return renderGeminiAgent;
 }
+function agentFilename(platform, name) {
+  if (platform === "codex") return `${name}.toml`;
+  return `${name}.md`;
+}
 function generateAgentDefinitions(opts) {
   const personasDir = resolvePersonasDir();
   const personaList = listPersonas(personasDir);
@@ -268,7 +345,7 @@ function generateAgentDefinitions(opts) {
     const renderer = getRenderer(platform);
     const rendered = /* @__PURE__ */ new Map();
     for (const def of definitions) {
-      const filename = `${def.name}.md`;
+      const filename = agentFilename(platform, def.name);
       rendered.set(filename, renderer(def));
     }
     const plan = computeSyncPlan(outputDir, rendered);

package/dist/{chunk-Q6ZR2L6Q.js → chunk-KN3EMDZ5.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_dist,
   paginate
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 
 // src/mcp/tools/review-pipeline.ts
 init_dist();
@@ -79,7 +79,7 @@ var runCodeReviewDefinition = {
 };
 async function handleRunCodeReview(input) {
   try {
-    const { parseDiff, runReviewPipeline } = await import("./dist-OHDQBTSO.js");
+    const { parseDiff, runReviewPipeline } = await import("./dist-72ID44UE.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return {

package/dist/{chunk-JFZOWO7D.js → chunk-LECXPXS3.js}

@@ -1,6 +1,6 @@
 import {
   init_dist
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 import {
   Err,
   Ok