@harness-engineering/cli 2.6.1 → 2.7.1

package/dist/{chunk-YYRQCQPZ.js → chunk-WZY5U6NS.js}

@@ -22,7 +22,7 @@ import {
   getDefaultRegistry,
   getOutline,
   getParser,
-  init_chunk_BTUDWWB4,
+  init_chunk_I2JUTTPH,
   init_chunk_MUWJHO2S,
   parseFile,
   parseSize,
@@ -31,7 +31,7 @@ import {
   resetParserCache,
   resolveFileToLayer,
   validateDependencies
-} from "./chunk-SZEFU6XC.js";
+} from "./chunk-Y4T6ENKQ.js";
 import {
   AuthAuditEntrySchema,
   AuthTokenPublicSchema,
@@ -85,7 +85,7 @@ import {
   init_dist as init_dist2,
   queryTraceability,
   skipDirGlobs
-} from "./chunk-BCFDGOMA.js";
+} from "./chunk-H2ZJOJ7A.js";
 import {
   ArchBaselineSchema,
   ArchConfigSchema,
@@ -3311,25 +3311,8 @@ function validateBranchName(branchName, config) {
   }
   if (config.enforceKebabCase) {
     for (const part of slug.split("/")) {
-      const ticketMatch = part.match(TICKET_ID);
-      if (ticketMatch) {
-        const rest = ticketMatch[2];
-        if (rest && !KEBAB_CASE.test(rest)) {
-          return {
-            valid: false,
-            branchName,
-            message: `Branch slug part "${part}" does not follow kebab-case after the ticket ID.`,
-            suggestion: `Ensure the description after "${ticketMatch[1]}" uses kebab-case (lowercase, single hyphens, no leading/trailing hyphen).`
-          };
-        }
-      } else if (!KEBAB_CASE.test(part)) {
-        return {
-          valid: false,
-          branchName,
-          message: `Branch slug part "${part}" must be in kebab-case (lowercase, single hyphens, no leading/trailing hyphen).`,
-          suggestion: `Change "${part}" to match the convention.`
-        };
-      }
+      const kebabFailure = validateKebabSlugPart(part, branchName);
+      if (kebabFailure) return kebabFailure;
     }
   }
   if (typeof config.maxLength === "number" && config.maxLength > 0 && slug.length > config.maxLength) {
@@ -3342,6 +3325,26 @@ function validateBranchName(branchName, config) {
   }
   return { valid: true, branchName };
 }
+function validateKebabSlugPart(part, branchName) {
+  const ticketMatch = part.match(TICKET_ID);
+  if (ticketMatch) {
+    const rest = ticketMatch[2];
+    if (!rest || KEBAB_CASE.test(rest)) return null;
+    return {
+      valid: false,
+      branchName,
+      message: `Branch slug part "${part}" does not follow kebab-case after the ticket ID.`,
+      suggestion: `Ensure the description after "${ticketMatch[1]}" uses kebab-case (lowercase, single hyphens, no leading/trailing hyphen).`
+    };
+  }
+  if (KEBAB_CASE.test(part)) return null;
+  return {
+    valid: false,
+    branchName,
+    message: `Branch slug part "${part}" must be in kebab-case (lowercase, single hyphens, no leading/trailing hyphen).`,
+    suggestion: `Change "${part}" to match the convention.`
+  };
+}
 function determineImportance(filePath) {
   const name = basename2(filePath).toLowerCase();
   if (name === "index.ts" || name === "index.js" || name === "main.ts") {
@@ -4811,7 +4814,7 @@ function arrayLen(arr) {
   return Array.isArray(arr) ? arr.length : 0;
 }
 async function gatherEntropyBlock(projectPath) {
-  const { EntropyAnalyzer: EntropyAnalyzer2 } = await import("./analyzer-VY6DJVOU-4AHIJLNS.js");
+  const { EntropyAnalyzer: EntropyAnalyzer2 } = await import("./analyzer-H3AHBFSL-KPOPJYRB.js");
   const analyzer = new EntropyAnalyzer2({
     rootDir: projectPath,
     include: ["src/**/*.ts", "src/**/*.tsx", "packages/*/src/**/*.ts"],
@@ -4832,15 +4835,20 @@ async function gatherDecayBlock(projectPath) {
   const { TimelineManager: TimelineManager2 } = await import("./timeline-manager-FPYKJRHR-VVX7CSGW.js");
   const mgr = new TimelineManager2(projectPath);
   const trends = mgr.trends();
-  const recentBumps = arrayLen(trends.recentSnapshots);
-  const affected = Array.isArray(trends.topAffected) ? trends.topAffected : [];
-  const topAffected = [];
+  return {
+    recentBumps: arrayLen(trends.recentSnapshots),
+    topAffected: collectTopAffectedLabels(trends.topAffected)
+  };
+}
+function collectTopAffectedLabels(affected) {
+  if (!Array.isArray(affected)) return [];
+  const out = [];
   for (const node of affected) {
     const label = node.id ?? node.name;
-    if (typeof label === "string" && label.length > 0) topAffected.push(label);
-    if (topAffected.length >= 5) break;
+    if (typeof label === "string" && label.length > 0) out.push(label);
+    if (out.length >= MAX_TOP_AFFECTED) break;
   }
-  return { recentBumps, topAffected };
+  return out;
 }
 async function gatherAttentionBlock(projectPath) {
   const sessionsDir = path4.join(projectPath, ".harness", "sessions");
@@ -11070,13 +11078,20 @@ function arraysEqual2(a, b) {
 }
 function metaFromFeatureFields(src) {
   const meta = {};
-  if (src.spec !== void 0 && src.spec !== null) meta.spec = src.spec;
-  if (src.plans && src.plans.length > 0) meta.plan = src.plans[0];
-  if (src.blockedBy && src.blockedBy.length > 0) meta.blocked_by = src.blockedBy;
-  if (src.priority !== void 0 && src.priority !== null) meta.priority = src.priority;
-  if (src.milestone !== void 0 && src.milestone !== null) meta.milestone = src.milestone;
+  assignNonNullish(meta, "spec", src.spec);
+  if (hasItems(src.plans)) meta.plan = src.plans[0];
+  if (hasItems(src.blockedBy)) meta.blocked_by = src.blockedBy;
+  assignNonNullish(meta, "priority", src.priority);
+  assignNonNullish(meta, "milestone", src.milestone);
   return meta;
 }
+function assignNonNullish(meta, key, value) {
+  if (value === void 0 || value === null) return;
+  meta[key] = value;
+}
+function hasItems(arr) {
+  return Array.isArray(arr) && arr.length > 0;
+}
 function buildCreateMeta(feature) {
   return metaFromFeatureFields(feature);
 }
@@ -11289,33 +11304,42 @@ function featureToNewInput(feature, milestone) {
   return input;
 }
 function metaToPatch(feature, expected) {
-  const patch = {};
-  patch.summary = feature.summary;
-  if (expected.spec !== void 0) patch.spec = expected.spec ?? null;
-  if (expected.plan !== void 0 && expected.plan != null) patch.plans = [expected.plan];
-  if (expected.blocked_by !== void 0) patch.blockedBy = expected.blocked_by ?? [];
-  if (expected.priority !== void 0) patch.priority = expected.priority ?? null;
-  if (expected.milestone !== void 0) patch.milestone = expected.milestone ?? null;
+  const patch = { summary: feature.summary };
+  assignIfPresent(patch, "spec", expected.spec, null);
+  if (expected.plan != null) patch.plans = [expected.plan];
+  assignIfPresent(patch, "blockedBy", expected.blocked_by, []);
+  assignIfPresent(patch, "priority", expected.priority, null);
+  assignIfPresent(patch, "milestone", expected.milestone, null);
   return patch;
 }
+function assignIfPresent(patch, key, value, fallback2) {
+  if (value === void 0) return;
+  patch[key] = value ?? fallback2;
+}
 function formatDiff(actual, expected) {
-  const keys = /* @__PURE__ */ new Set();
-  const collect = (m) => {
-    for (const k of Object.keys(m)) {
-      const v = m[k];
-      if (v !== void 0 && v !== null && !(Array.isArray(v) && v.length === 0)) keys.add(k);
-    }
-  };
-  collect(actual);
-  collect(expected);
+  const keys = collectPresentKeys(actual, expected);
   const changed = [];
-  for (const key of [...keys].sort()) {
+  for (const key of keys) {
     const a = actual[key];
     const e = expected[key];
     if (JSON.stringify(a ?? null) !== JSON.stringify(e ?? null)) changed.push(key);
   }
   return changed.join(",");
 }
+function hasMeaningfulValue(value) {
+  if (value === void 0 || value === null) return false;
+  if (Array.isArray(value) && value.length === 0) return false;
+  return true;
+}
+function collectPresentKeys(...metas) {
+  const keys = /* @__PURE__ */ new Set();
+  for (const m of metas) {
+    for (const [k, v] of Object.entries(m)) {
+      if (hasMeaningfulValue(v)) keys.add(k);
+    }
+  }
+  return [...keys].sort();
+}
 function mapAction(action) {
   switch (action) {
     case "assigned":
@@ -12464,23 +12488,56 @@ async function send(events, apiKey) {
 function toUnixNanoString(ns) {
   return ns.toString(10);
 }
+function encodeAttributeValue(value) {
+  if (typeof value === "string") return { stringValue: value };
+  if (typeof value === "boolean") return { boolValue: value };
+  if (typeof value === "number") {
+    return Number.isInteger(value) ? { intValue: String(value) } : { doubleValue: value };
+  }
+  return null;
+}
+function resolveOTLPOptions(opts) {
+  const {
+    endpoint,
+    enabled = true,
+    headers = {},
+    flushIntervalMs = DEFAULT_FLUSH_INTERVAL_MS,
+    batchSize = DEFAULT_BATCH_SIZE,
+    fetchImpl = defaultFetch,
+    warn = defaultWarn
+  } = opts;
+  return {
+    endpoint,
+    enabled,
+    headers: { "Content-Type": "application/json", ...headers },
+    flushIntervalMs,
+    batchSize,
+    fetchImpl,
+    warn
+  };
+}
 function attributesToOTLP(attrs) {
   const out = [];
   for (const [key, value] of Object.entries(attrs)) {
-    if (typeof value === "string") {
-      out.push({ key, value: { stringValue: value } });
-    } else if (typeof value === "boolean") {
-      out.push({ key, value: { boolValue: value } });
-    } else if (typeof value === "number") {
-      if (Number.isInteger(value)) {
-        out.push({ key, value: { intValue: String(value) } });
-      } else {
-        out.push({ key, value: { doubleValue: value } });
-      }
-    }
+    const encoded = encodeAttributeValue(value);
+    if (encoded) out.push({ key, value: encoded });
   }
   return out;
 }
+function spanToOTLP(s) {
+  const span = {
+    traceId: s.traceId,
+    spanId: s.spanId,
+    name: s.name,
+    kind: s.kind,
+    startTimeUnixNano: toUnixNanoString(s.startTimeNs),
+    endTimeUnixNano: toUnixNanoString(s.endTimeNs),
+    attributes: attributesToOTLP(s.attributes)
+  };
+  if (s.parentSpanId !== void 0) span["parentSpanId"] = s.parentSpanId;
+  if (s.statusCode !== void 0) span["status"] = { code: s.statusCode };
+  return span;
+}
 function acquireCompoundLock(category, opts = {}) {
   if (!KNOWN_CATEGORIES.has(category)) {
     throw new Error(
@@ -12542,15 +12599,22 @@ function readHolderPid(lockPath) {
     return -1;
   }
 }
-function isSanitizedResult(value) {
-  if (!value || typeof value !== "object") return false;
-  const v = value;
-  if (!v.fields || typeof v.fields !== "object") return false;
-  for (const k of Object.keys(v.fields)) {
+function isObject(value) {
+  return Boolean(value) && typeof value === "object";
+}
+function hasAllowedFieldKeys(fields) {
+  for (const k of Object.keys(fields)) {
     if (!ALLOWED_SET.has(k)) return false;
     if (PII_FIELD_DENYLIST.test(k)) return false;
   }
-  if (!v.distributions || typeof v.distributions !== "object") return false;
+  return true;
+}
+function isSanitizedResult(value) {
+  if (!isObject(value)) return false;
+  const { fields, distributions } = value;
+  if (!isObject(fields)) return false;
+  if (!hasAllowedFieldKeys(fields)) return false;
+  if (!isObject(distributions)) return false;
   return true;
 }
 function assertSanitized(value) {
@@ -13137,11 +13201,11 @@ function deriveSkillUsage(projectRoot, skillName, windowDays = 30) {
   if (lastUsed) stats.lastUsed = lastUsed;
   return stats;
 }
-var WHATWG_BAD_PORTS, BAD_PORT_SET, VALID_TYPES, CONVENTIONAL_PATTERN, LOOKBACK_PATTERN, PulseDbSourceSchema, PulseSourcesSchema, PulseConfigSchema, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ALL_SOLUTION_CATEGORIES, ISO_DATE, BugTrackSchema, KnowledgeTrackSchema, BaseFrontmatter, SolutionDocFrontmatterSchema, TRACK_CATEGORIES, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, KEBAB_CASE, TICKET_ID, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, readFile62, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, BaselineManager, BenchmarkRunner, RegressionDetector, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, OSV_ENDPOINT, DEFAULT_CACHE_DIR, DEFAULT_TTL_HOURS, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, JS_EXT_FALLBACKS, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, PRIORITY_RANK2, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, ConflictError, DEFAULTS, GitHubHttp, ETagStore, START_MARKER, END_MARKER, SERIALIZER_FIELDS, GitHubIssuesTrackerAdapter, migrate_exports, HASH_RE, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS, DEFAULT_CAPACITY, CacheMetricsRecorder, RETRY_BACKOFFS_MS, OTLPExporter, SpanKind, CompoundLockHeldError, KNOWN_CATEGORIES, ALLOWED_FIELD_KEYS, PII_TOKENS, PII_FIELD_DENYLIST, PII_LINE_RE, ALLOWED_SET, PulseAdapterAlreadyRegisteredError, REGISTRY, MOCK_ADAPTER_NAME, ALLOWED_FIELD_SET, adapter, LOOKBACK_RE, MAX_LINES, INLINE_TEMPLATE, TRUNCATION_MARKER2, execFileAsync, FIX_RE, EMPTY_REPO_RE, execFileAsync2, TRACK_CATEGORIES2, STOPWORDS, KEYWORD_TO_CATEGORY, ProposalNotFoundError, ProposalConflictError;
+var WHATWG_BAD_PORTS, BAD_PORT_SET, VALID_TYPES, CONVENTIONAL_PATTERN, LOOKBACK_PATTERN, PulseDbSourceSchema, PulseSourcesSchema, PulseConfigSchema, BUG_TRACK_CATEGORIES, KNOWLEDGE_TRACK_CATEGORIES, ALL_SOLUTION_CATEGORIES, ISO_DATE, BugTrackSchema, KnowledgeTrackSchema, BaseFrontmatter, SolutionDocFrontmatterSchema, TRACK_CATEGORIES, DEFAULT_AGNIX_TIMEOUT_MS, HARNESS_AGNIX_DISABLE, HARNESS_AGNIX_BIN, CLAUDE_MD_WARN_BYTES, CLAUDE_MD_ERROR_BYTES, CONTEXT_FILES, MIN_DESCRIPTION_LENGTH, SETTINGS_PATHS, KNOWN_HOOK_EVENTS, MCP_SETTINGS_FILES, REQUIRED_SECTIONS, SETTINGS_FILES, KNOWN_AGNIX_TOOLS, KEBAB_CASE, TICKET_ID, DEFAULT_SECTIONS, DEFAULT_RATIOS, NODE_TYPE_TO_CATEGORY, SECTION_LEVEL_MAP, DEFAULT_LEVEL, DEFAULT_BUDGET, DEFAULT_LOADER_CONFIG, LEVEL_FRACTIONS, PHASE_PRIORITIES, ManifestSchema, BundleConstraintsSchema, BundleSchema, ContributionsSchema, LockfilePackageSchema, LockfileSchema, SharableLayerSchema, SharableForbiddenImportSchema, SharableBoundaryConfigSchema, SharableSecurityRulesSchema, VALID_SCOPES, LINE_PATTERN, START_PATTERN, END_PATTERN, readFile62, writeFile32, unlink22, mkdir22, copyFile2, DEFAULT_FIX_CONFIG, EXPORT_TYPE_KEYWORD, ALWAYS_UNSAFE_TYPES, idCounter, DEAD_CODE_FIX_ACTIONS, MustExportRuleSchema, MustExportDefaultRuleSchema, NoExportRuleSchema, MustImportRuleSchema, NoImportRuleSchema, NamingRuleSchema, MaxExportsRuleSchema, MaxLinesRuleSchema, RequireJSDocRuleSchema, RuleSchema, ConfigPatternSchema, PatternConfigSchema, DriftConfigSchema, DeadCodeConfigSchema, EntropyConfigSchema, MAX_TOP_AFFECTED, BaselineManager, BenchmarkRunner, RegressionDetector, SOURCE_EXTENSIONS, FUNCTION_DECL_RE, CONST_DECL_RE, CriticalPathResolver, NoOpTelemetryAdapter, NoOpExecutor, ConsoleSink, feedbackConfig, ChecklistBuilder, AgentActionEmitter, globalEmitter, FileSink, NoOpSink, ConfidenceTierSchema, RegressionResultSchema, DirectionSchema, CategoryForecastSchema, SpecImpactSignalsSchema, SpecImpactEstimateSchema, ContributingFeatureSchema, AdjustedForecastSchema, PredictionWarningSchema, StabilityForecastSchema, PredictionResultSchema, PredictionOptionsSchema, VALID_STATUSES, EM_DASH, VALID_PRIORITIES, ALL_CATEGORIES, DIRECTION_THRESHOLD, PredictionEngine, DEFAULT_COEFFICIENTS, SpecImpactEstimator, EMPTY_HISTORY, ViolationHistoryManager, NORMALIZERS, MAX_SAMPLES, DEFAULT_WINDOW_WEEKS, DEFAULT_MIN_OCCURRENCES, FailureEntrySchema, HandoffSchema, GateCheckSchema, GateResultSchema, GateConfigSchema, HarnessStateSchema, DEFAULT_STATE, StreamInfoSchema, StreamIndexSchema, DEFAULT_STREAM_INDEX, HARNESS_DIR, STATE_FILE, LEARNINGS_FILE, FAILURES_FILE, HANDOFF_FILE, GATE_CONFIG_FILE, INDEX_FILE, SESSIONS_DIR, SESSION_INDEX_FILE, SUMMARY_FILE, SESSION_STATE_FILE, ARCHIVE_DIR, CONTENT_HASHES_FILE, EVENTS_FILE, STREAMS_DIR, STREAM_NAME_REGEX, branchCache, BRANCH_CACHE_TTL_MS, STATE_FILES, MAX_CACHE_ENTRIES, learningsCacheMap, WEIGHTS, LOCK_RETRIES, LOCK_BACKOFFS, PROMOTABLE_OUTCOMES, failuresCacheMap, FAILURE_LINE_REGEX, SAFE_GATE_COMMAND, SkillEventSchema, knownHashesCache, EVENT_FORMATTERS, RuleRegistry, DEFAULT_SECURITY_CONFIG, RuleOverrideSchema, SecurityConfigSchema, secretRules, injectionRules, xssRules, cryptoRules, pathTraversalRules, networkRules, deserializationRules, agentConfigRules, mcpRules, insecureDefaultsRules, sharpEdgesRules, nodeRules, expressRules, reactRules, goRules, SecurityScanner, OSV_ENDPOINT, DEFAULT_CACHE_DIR, DEFAULT_TTL_HOURS, hiddenUnicodePatterns, reRolingPatterns, permissionEscalationPatterns, encodedPayloadPatterns, indirectInjectionPatterns, contextManipulationPatterns, socialEngineeringPatterns, suspiciousPatterns, ALL_PATTERNS, DESTRUCTIVE_BASH, TAINT_DURATION_MS, DEFAULT_SESSION_ID, SecurityCategorySnapshotSchema, SupplyChainSnapshotSchema, SecurityTimelineSnapshotSchema, FindingLifecycleSchema, SecurityTimelineFileSchema, DirectionSchema2, SecurityTrendLineSchema, TrendAttributionSchema, SecurityTrendResultSchema, TimeToFixStatsSchema, TimeToFixResultSchema, EMPTY_SUPPLY_CHAIN, SecurityTimelineManager, ALL_CHECKS, STATUS_ICONS, CINotifier, ExclusionSet, PREFIX_PATTERNS, TEST_FILE_PATTERN, MD_FILE_PATTERN, ALL_DOMAINS, SECURITY_PATTERNS, JS_EXT_FALLBACKS, SEVERITY_RANK, SEVERITY_ORDER, SEVERITY_LABELS, VALIDATED_BY_RANK, VALIDATION_SCORES, DOMAIN_BASELINES, FACTOR_WEIGHTS, EVIDENCE_SATURATION, CORROBORATED_AGREEMENT, STANDALONE_AGREEMENT, AGREEMENT_LINE_GAP, COMPLIANCE_DESCRIPTOR, EXPORT_RE, BUG_DETECTION_DESCRIPTOR, SECURITY_DESCRIPTOR, EVAL_PATTERN, SECRET_PATTERNS, SQL_CONCAT_PATTERN, SHELL_EXEC_PATTERN, ARCHITECTURE_DESCRIPTOR, LARGE_FILE_THRESHOLD, VIOLATION_FILE_RE, LEARNINGS_DESCRIPTOR, RELEVANCE_THRESHOLD, AGENT_DESCRIPTORS, AGENT_RUNNERS, DOWNGRADE_MAP, DEFAULT_PROVIDER_TIERS, SMALL_SUGGESTION_LINE_LIMIT, FILE_LINE_RANGE_PATTERN, FILE_LINE_PATTERN, FILE_ONLY_PATTERN, SECURITY_SENSITIVE_PATH, MIGRATION_PATH, TEST_PATH, CONFIG_PATH, STAGE_DOMAINS, EM_DASH2, STATUS_RANK, RETRY_DEFAULTS, GitHubIssuesSyncAdapter, syncMutex, PRIORITY_RANK, PRIORITY_RANK2, POSITION_WEIGHT, DEPENDENTS_WEIGHT, AFFINITY_WEIGHT, ConflictError, DEFAULTS, GitHubHttp, ETagStore, START_MARKER, END_MARKER, SERIALIZER_FIELDS, GitHubIssuesTrackerAdapter, migrate_exports, HASH_RE, InteractionTypeSchema, QuestionSchema, ConfirmationSchema, TransitionSchema, EmitInteractionInputSchema, ProjectScanner, SHELL_TEMPLATE, STYLES, SCRIPTS, MockLLMService, llmService, ContentPipeline, BlueprintGenerator, TOKENS_PER_MILLION, fallback_default, LITELLM_PRICING_URL, CACHE_TTL_MS, STALENESS_WARNING_DAYS, MICRODOLLARS_PER_DOLLAR, TOKENS_PER_MILLION2, StructuralStrategy, DEFAULT_TOKEN_BUDGET, CHARS_PER_TOKEN, TRUNCATION_MARKER, TruncationStrategy, CompactionPipeline, STABILITY_LOOKUP, TIER_ORDER, AnthropicCacheAdapter, TIER_ORDER2, OpenAICacheAdapter, TIER_ORDER3, CACHED_CONTENT_MARKER, GeminiCacheAdapter, VERSION, POSTHOG_BATCH_URL, MAX_ATTEMPTS, TIMEOUT_MS, DEFAULT_CAPACITY, CacheMetricsRecorder, RETRY_BACKOFFS_MS, DEFAULT_FLUSH_INTERVAL_MS, DEFAULT_BATCH_SIZE, defaultFetch, defaultWarn, OTLPExporter, SERVICE_NAME_ATTR, SpanKind, CompoundLockHeldError, KNOWN_CATEGORIES, ALLOWED_FIELD_KEYS, PII_TOKENS, PII_FIELD_DENYLIST, PII_LINE_RE, ALLOWED_SET, PulseAdapterAlreadyRegisteredError, REGISTRY, MOCK_ADAPTER_NAME, ALLOWED_FIELD_SET, adapter, LOOKBACK_RE, MAX_LINES, INLINE_TEMPLATE, TRUNCATION_MARKER2, execFileAsync, FIX_RE, EMPTY_REPO_RE, execFileAsync2, TRACK_CATEGORIES2, STOPWORDS, KEYWORD_TO_CATEGORY, ProposalNotFoundError, ProposalConflictError;
 var init_dist3 = __esm({
   "../core/dist/index.mjs"() {
     init_chunk_FYTJQ2ZY();
-    init_chunk_BTUDWWB4();
+    init_chunk_I2JUTTPH();
     init_chunk_MUWJHO2S();
     init_chunk_XKLVJIPL();
     init_chunk_IIEDD47I();
@@ -13688,6 +13752,7 @@ var init_dist3 = __esm({
       exclude: z4.array(z4.string()).optional(),
       docPaths: z4.array(z4.string()).optional()
     });
+    MAX_TOP_AFFECTED = 5;
     BaselineManager = class {
       baselinesPath;
       constructor(projectRoot) {
@@ -16068,11 +16133,20 @@ var init_dist3 = __esm({
         }
         return null;
       }
-      /** Scan a single line against a resolved rule; push any findings into the array. */
-      scanLineForRule(rule, resolved, line, lineNumber, filePath, findings) {
-        const suppressionMatch = parseHarnessIgnore(line, rule.id);
+      /**
+       * Scan a single line against a resolved rule; push any findings into the array.
+       *
+       * Suppression check is two-pass: same line first (trailing-comment style), then the previous
+       * line (the dominant convention: `// harness-ignore` on the line above the flagged code).
+       * Without the prior-line check, every multi-line statement annotated using the over-the-top
+       * convention would slip through and re-trigger the finding.
+       */
+      scanLineForRule(rule, resolved, line, lineNumber, filePath, findings, priorLine) {
+        const sameLineMatch = parseHarnessIgnore(line, rule.id);
+        const priorLineMatch = !sameLineMatch && priorLine !== void 0 ? parseHarnessIgnore(priorLine, rule.id) : null;
+        const suppressionMatch = sameLineMatch ?? priorLineMatch;
         if (suppressionMatch) {
-          if (!suppressionMatch.justification) {
+          if (!suppressionMatch.justification && sameLineMatch !== null) {
             findings.push(this.buildSuppressionFinding(rule, filePath, lineNumber, line));
           }
           return;
@@ -16096,7 +16170,15 @@ var init_dist3 = __esm({
           );
           if (resolved === "off") continue;
           for (let i = 0; i < lines.length; i++) {
-            this.scanLineForRule(rule, resolved, lines[i] ?? "", startLine + i, filePath, findings);
+            this.scanLineForRule(
+              rule,
+              resolved,
+              lines[i] ?? "",
+              startLine + i,
+              filePath,
+              findings,
+              i > 0 ? lines[i - 1] : void 0
+            );
           }
         }
         return findings;
@@ -18500,6 +18582,10 @@ console.log('Blueprint player initialized.');
       }
     };
     RETRY_BACKOFFS_MS = [1e3, 2e3, 4e3];
+    DEFAULT_FLUSH_INTERVAL_MS = 2e3;
+    DEFAULT_BATCH_SIZE = 64;
+    defaultFetch = (...args) => globalThis.fetch(...args);
+    defaultWarn = (...args) => console.warn(...args);
     OTLPExporter = class {
       endpoint;
       enabled;
@@ -18512,13 +18598,14 @@ console.log('Blueprint player initialized.');
       timer = null;
       inFlightFlushes = /* @__PURE__ */ new Set();
       constructor(opts) {
-        this.endpoint = opts.endpoint;
-        this.enabled = opts.enabled !== false;
-        this.headers = { "Content-Type": "application/json", ...opts.headers ?? {} };
-        this.flushIntervalMs = opts.flushIntervalMs ?? 2e3;
-        this.batchSize = opts.batchSize ?? 64;
-        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
-        this.warn = opts.warn ?? ((...a) => console.warn(...a));
+        const resolved = resolveOTLPOptions(opts);
+        this.endpoint = resolved.endpoint;
+        this.enabled = resolved.enabled;
+        this.headers = resolved.headers;
+        this.flushIntervalMs = resolved.flushIntervalMs;
+        this.batchSize = resolved.batchSize;
+        this.fetchImpl = resolved.fetchImpl;
+        this.warn = resolved.warn;
       }
       /**
        * O(1) buffer push. When `enabled === false` this is a no-op. If the
@@ -18601,36 +18688,18 @@ console.log('Blueprint player initialized.');
        * tests; not part of the supported API surface.
        */
       spansToOTLPJSON(spans) {
-        return {
-          resourceSpans: [
-            {
-              resource: {
-                attributes: [{ key: "service.name", value: { stringValue: "harness" } }]
-              },
-              scopeSpans: [
-                {
-                  scope: { name: "harness" },
-                  spans: spans.map((s) => {
-                    const span = {
-                      traceId: s.traceId,
-                      spanId: s.spanId,
-                      name: s.name,
-                      kind: s.kind,
-                      startTimeUnixNano: toUnixNanoString(s.startTimeNs),
-                      endTimeUnixNano: toUnixNanoString(s.endTimeNs),
-                      attributes: attributesToOTLP(s.attributes)
-                    };
-                    if (s.parentSpanId !== void 0) span["parentSpanId"] = s.parentSpanId;
-                    if (s.statusCode !== void 0) span["status"] = { code: s.statusCode };
-                    return span;
-                  })
-                }
-              ]
-            }
-          ]
+        const scopeSpan = {
+          scope: { name: "harness" },
+          spans: spans.map(spanToOTLP)
+        };
+        const resourceSpan = {
+          resource: { attributes: SERVICE_NAME_ATTR },
+          scopeSpans: [scopeSpan]
         };
+        return { resourceSpans: [resourceSpan] };
       }
     };
+    SERVICE_NAME_ATTR = [{ key: "service.name", value: { stringValue: "harness" } }];
     SpanKind = /* @__PURE__ */ ((SpanKind2) => {
       SpanKind2[SpanKind2["INTERNAL"] = 1] = "INTERNAL";
       SpanKind2[SpanKind2["SERVER"] = 2] = "SERVER";

package/dist/{chunk-SZEFU6XC.js → chunk-Y4T6ENKQ.js}

@@ -7,7 +7,7 @@ import {
   DEFAULT_SKIP_DIRS,
   init_dist as init_dist2,
   skipDirGlobs
-} from "./chunk-BCFDGOMA.js";
+} from "./chunk-H2ZJOJ7A.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";
@@ -1605,7 +1605,7 @@ var init_chunk_MUWJHO2S = __esm({
   }
 });
 
-// ../core/dist/chunk-BTUDWWB4.mjs
+// ../core/dist/chunk-I2JUTTPH.mjs
 import { resolve as resolve2 } from "path";
 import { minimatch as minimatch2 } from "minimatch";
 import { join, resolve as resolve3 } from "path";
@@ -2968,15 +2968,15 @@ function generatePatternSuggestions(report) {
   return suggestions;
 }
 function generateSuggestions(deadCode, drift, patterns) {
-  const suggestions = [];
+  let suggestions = [];
   if (deadCode) {
-    suggestions.push(...generateDeadCodeSuggestions(deadCode));
+    suggestions = suggestions.concat(generateDeadCodeSuggestions(deadCode));
   }
   if (drift) {
-    suggestions.push(...generateDriftSuggestions(drift));
+    suggestions = suggestions.concat(generateDriftSuggestions(drift));
   }
   if (patterns) {
-    suggestions.push(...generatePatternSuggestions(patterns));
+    suggestions = suggestions.concat(generatePatternSuggestions(patterns));
   }
   const priorityOrder = { high: 0, medium: 1, low: 2 };
   suggestions.sort((a, b) => priorityOrder[a.priority] - priorityOrder[b.priority]);
@@ -3002,8 +3002,8 @@ function generateSuggestions(deadCode, drift, patterns) {
   };
 }
 var TS_HINTS, TS_CONVENTIONS, PYTHON_HINTS, PYTHON_CONVENTIONS, DEFAULT_INCLUDE_PATTERNS, CODE_BLOCK_LANGUAGES, DEFAULT_DRIFT_CONFIG, JS_EXT_FALLBACKS2, FILE_TYPES, EXPORT_TYPES, CONVENTION_DESCRIPTIONS, RULE_CHECKERS, EntropyAnalyzer;
-var init_chunk_BTUDWWB4 = __esm({
-  "../core/dist/chunk-BTUDWWB4.mjs"() {
+var init_chunk_I2JUTTPH = __esm({
+  "../core/dist/chunk-I2JUTTPH.mjs"() {
     "use strict";
     init_chunk_MUWJHO2S();
     init_dist2();
@@ -3333,5 +3333,5 @@ export {
   detectSizeBudgetViolations,
   generateSuggestions,
   EntropyAnalyzer,
-  init_chunk_BTUDWWB4
+  init_chunk_I2JUTTPH
 };

package/dist/{chunk-HMW3VKUF.js → chunk-Z3TMCCZB.js}

@@ -1,6 +1,6 @@
 import {
   resultToMcpResponse
-} from "./chunk-EPUKTTJZ.js";
+} from "./chunk-RC3OI5NK.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
@@ -33,7 +33,7 @@ var createSelfReviewDefinition = {
 };
 async function handleCreateSelfReview(input) {
   try {
-    const { parseDiff, createSelfReview } = await import("./dist-OHDQBTSO.js");
+    const { parseDiff, createSelfReview } = await import("./dist-72ID44UE.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return resultToMcpResponse(parseResult);
@@ -53,11 +53,11 @@ async function handleCreateSelfReview(input) {
         ...input.maxFileCount !== void 0 ? { maxChangedFiles: input.maxFileCount } : {}
       }
     };
-    const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
+    const { loadGraphStore } = await import("./graph-loader-EIFEOUVI.js");
     const store = await loadGraphStore(projectPath);
     let graphData;
     if (store) {
-      const { GraphFeedbackAdapter } = await import("./dist-QPWXPCPL.js");
+      const { GraphFeedbackAdapter } = await import("./dist-R3TOOPJ7.js");
       const adapter = new GraphFeedbackAdapter(store);
       const changedFiles = parseResult.value.files.map((f) => f.path);
       const impact = adapter.computeImpactData(changedFiles);
@@ -119,7 +119,7 @@ var analyzeDiffDefinition = {
 };
 async function handleAnalyzeDiff(input) {
   try {
-    const { parseDiff, analyzeDiff } = await import("./dist-OHDQBTSO.js");
+    const { parseDiff, analyzeDiff } = await import("./dist-72ID44UE.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return resultToMcpResponse(parseResult);
@@ -139,10 +139,10 @@ async function handleAnalyzeDiff(input) {
     let graphImpactData;
     if (input.path) {
       try {
-        const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
+        const { loadGraphStore } = await import("./graph-loader-EIFEOUVI.js");
         const store = await loadGraphStore(sanitizePath(input.path));
         if (store) {
-          const { GraphFeedbackAdapter } = await import("./dist-QPWXPCPL.js");
+          const { GraphFeedbackAdapter } = await import("./dist-R3TOOPJ7.js");
           const adapter = new GraphFeedbackAdapter(store);
           const changedFiles = parseResult.value.files.map((f) => f.path);
           const impact = adapter.computeImpactData(changedFiles);
@@ -195,7 +195,7 @@ var requestPeerReviewDefinition = {
 };
 async function handleRequestPeerReview(input) {
   try {
-    const { parseDiff, requestPeerReview } = await import("./dist-OHDQBTSO.js");
+    const { parseDiff, requestPeerReview } = await import("./dist-72ID44UE.js");
     const parseResult = parseDiff(input.diff);
     if (!parseResult.ok) {
       return resultToMcpResponse(parseResult);
@@ -206,10 +206,10 @@ async function handleRequestPeerReview(input) {
       ...input.context ? { metadata: { context: input.context } } : {}
     };
     try {
-      const { loadGraphStore } = await import("./graph-loader-EQBOIHFZ.js");
+      const { loadGraphStore } = await import("./graph-loader-EIFEOUVI.js");
       const store = await loadGraphStore(sanitizePath(input.path));
       if (store) {
-        const { GraphFeedbackAdapter } = await import("./dist-QPWXPCPL.js");
+        const { GraphFeedbackAdapter } = await import("./dist-R3TOOPJ7.js");
         const adapter = new GraphFeedbackAdapter(store);
         const changedFiles = parseResult.value.files.map((f) => f.path);
         const impactData = adapter.computeImpactData(changedFiles);

package/dist/{ci-workflow-3JNDZQYD.js → ci-workflow-MDSTHJOY.js}

@@ -1,10 +1,10 @@
 import {
   generateCIWorkflow
-} from "./chunk-YP7I25SL.js";
-import "./chunk-YYRQCQPZ.js";
-import "./chunk-SZEFU6XC.js";
+} from "./chunk-RJ2WEES5.js";
+import "./chunk-WZY5U6NS.js";
+import "./chunk-Y4T6ENKQ.js";
 import "./chunk-OH3NXXUY.js";
-import "./chunk-BCFDGOMA.js";
+import "./chunk-H2ZJOJ7A.js";
 import "./chunk-QCLOIUMX.js";
 import "./chunk-XARGEOJV.js";
 import "./chunk-KFQGP6VL.js";

package/dist/{dist-OHDQBTSO.js → dist-72ID44UE.js}

@@ -417,7 +417,7 @@ import {
   writeSessionSummary,
   writeTaint,
   xssRules
-} from "./chunk-YYRQCQPZ.js";
+} from "./chunk-WZY5U6NS.js";
 import {
   EXTENSION_MAP,
   EntropyAnalyzer,
@@ -443,7 +443,7 @@ import {
   resetParserCache,
   resolveFileToLayer,
   validateDependencies
-} from "./chunk-SZEFU6XC.js";
+} from "./chunk-Y4T6ENKQ.js";
 import {
   AuthAuditEntrySchema,
   AuthTokenPublicSchema,
@@ -489,7 +489,7 @@ import {
   isErr,
   isOk
 } from "./chunk-OH3NXXUY.js";
-import "./chunk-BCFDGOMA.js";
+import "./chunk-H2ZJOJ7A.js";
 import {
   ArchBaselineSchema,
   ArchConfigSchema,

package/dist/{dist-QPWXPCPL.js → dist-R3TOOPJ7.js}

@@ -80,7 +80,7 @@ import {
   resolveSkipDirs,
   saveGraph,
   skipDirGlobs
-} from "./chunk-BCFDGOMA.js";
+} from "./chunk-H2ZJOJ7A.js";
 import "./chunk-KFQGP6VL.js";
 init_dist();
 export {