@harness-engineering/core 0.21.0 → 0.21.2

package/dist/index.mjs

@@ -41,7 +41,7 @@ import {
   runAll,
   validateDependencies,
   violationId
-} from "./chunk-BQUWXBGR.mjs";
+} from "./chunk-4W4FRAA6.mjs";
 
 // src/index.ts
 export * from "@harness-engineering/types";
@@ -84,15 +84,15 @@ function validateConfig(data, schema) {
   let message = "Configuration validation failed";
   const suggestions = [];
   if (firstError) {
-    const path28 = firstError.path.join(".");
-    const pathDisplay = path28 ? ` at "${path28}"` : "";
+    const path31 = firstError.path.join(".");
+    const pathDisplay = path31 ? ` at "${path31}"` : "";
     if (firstError.code === "invalid_type") {
       const received = firstError.received;
       const expected = firstError.expected;
       if (received === "undefined") {
         code = "MISSING_FIELD";
         message = `Missing required field${pathDisplay}: ${firstError.message}`;
-        suggestions.push(`Field "${path28}" is required and must be of type "${expected}"`);
+        suggestions.push(`Field "${path31}" is required and must be of type "${expected}"`);
       } else {
         code = "INVALID_TYPE";
         message = `Invalid type${pathDisplay}: ${firstError.message}`;
@@ -149,21 +149,11 @@ function validateCommitMessage(message, format = "conventional") {
     issues: []
   });
 }
-function validateConventionalCommit(message) {
-  const lines = message.split("\n");
-  const headerLine = lines[0];
-  if (!headerLine) {
-    const error = createError(
-      "VALIDATION_FAILED",
-      "Commit message header cannot be empty",
-      { message },
-      ["Provide a commit message with at least a header line"]
-    );
-    return Err(error);
-  }
+function parseConventionalHeader(message, headerLine) {
   const match = headerLine.match(CONVENTIONAL_PATTERN);
-  if (!match) {
-    const error = createError(
+  if (match) return Ok(match);
+  return Err(
+    createError(
       "VALIDATION_FAILED",
       "Commit message does not follow conventional format",
       { message, header: headerLine },
@@ -172,13 +162,10 @@ function validateConventionalCommit(message) {
         "Valid types: " + VALID_TYPES.join(", "),
         "Example: feat(core): add new feature"
       ]
-    );
-    return Err(error);
-  }
-  const type = match[1];
-  const scope = match[3];
-  const breaking = match[4] === "!";
-  const description = match[5];
+    )
+  );
+}
+function collectCommitIssues(type, description) {
   const issues = [];
   if (!VALID_TYPES.includes(type)) {
     issues.push(`Invalid commit type "${type}". Valid types: ${VALID_TYPES.join(", ")}`);
@@ -186,34 +173,50 @@ function validateConventionalCommit(message) {
   if (!description || description.trim() === "") {
     issues.push("Commit description cannot be empty");
   }
-  let hasBreakingChange = breaking;
-  if (lines.length > 1) {
-    const body = lines.slice(1).join("\n");
-    if (body.includes("BREAKING CHANGE:")) {
-      hasBreakingChange = true;
-    }
+  return issues;
+}
+function hasBreakingChangeInBody(lines) {
+  if (lines.length <= 1) return false;
+  return lines.slice(1).join("\n").includes("BREAKING CHANGE:");
+}
+function validateConventionalCommit(message) {
+  const lines = message.split("\n");
+  const headerLine = lines[0];
+  if (!headerLine) {
+    return Err(
+      createError(
+        "VALIDATION_FAILED",
+        "Commit message header cannot be empty",
+        { message },
+        ["Provide a commit message with at least a header line"]
+      )
+    );
   }
+  const matchResult = parseConventionalHeader(message, headerLine);
+  if (!matchResult.ok) return matchResult;
+  const match = matchResult.value;
+  const type = match[1];
+  const scope = match[3];
+  const breaking = match[4] === "!";
+  const description = match[5];
+  const issues = collectCommitIssues(type, description);
   if (issues.length > 0) {
-    let errorMessage = `Commit message validation failed: ${issues.join("; ")}`;
-    if (issues.some((issue) => issue.includes("description cannot be empty"))) {
-      errorMessage = `Commit message validation failed: ${issues.join("; ")}`;
-    }
-    const error = createError(
-      "VALIDATION_FAILED",
-      errorMessage,
-      { message, issues, type, scope },
-      ["Review and fix the validation issues above"]
+    return Err(
+      createError(
+        "VALIDATION_FAILED",
+        `Commit message validation failed: ${issues.join("; ")}`,
+        { message, issues, type, scope },
+        ["Review and fix the validation issues above"]
+      )
     );
-    return Err(error);
   }
-  const result = {
+  return Ok({
     valid: true,
     type,
     ...scope && { scope },
-    breaking: hasBreakingChange,
+    breaking: breaking || hasBreakingChangeInBody(lines),
     issues: []
-  };
-  return Ok(result);
+  });
 }
 
 // src/context/types.ts
@@ -308,27 +311,27 @@ function extractSections(content) {
   }
   return sections.map((section) => buildAgentMapSection(section, lines));
 }
-function isExternalLink(path28) {
-  return path28.startsWith("http://") || path28.startsWith("https://") || path28.startsWith("#") || path28.startsWith("mailto:");
+function isExternalLink(path31) {
+  return path31.startsWith("http://") || path31.startsWith("https://") || path31.startsWith("#") || path31.startsWith("mailto:");
 }
 function resolveLinkPath(linkPath, baseDir) {
   return linkPath.startsWith(".") ? join(baseDir, linkPath) : linkPath;
 }
-async function validateAgentsMap(path28 = "./AGENTS.md") {
-  const contentResult = await readFileContent(path28);
+async function validateAgentsMap(path31 = "./AGENTS.md") {
+  const contentResult = await readFileContent(path31);
   if (!contentResult.ok) {
     return Err(
       createError(
         "PARSE_ERROR",
         `Failed to read AGENTS.md: ${contentResult.error.message}`,
-        { path: path28 },
+        { path: path31 },
         ["Ensure the file exists", "Check file permissions"]
       )
     );
   }
   const content = contentResult.value;
   const sections = extractSections(content);
-  const baseDir = dirname(path28);
+  const baseDir = dirname(path31);
   const sectionTitles = sections.map((s) => s.title);
   const missingSections = REQUIRED_SECTIONS.filter(
     (required) => !sectionTitles.some((title) => title.toLowerCase().includes(required.toLowerCase()))
@@ -469,8 +472,8 @@ async function checkDocCoverage(domain, options = {}) {
 
 // src/context/knowledge-map.ts
 import { join as join2, basename as basename2 } from "path";
-function suggestFix(path28, existingFiles) {
-  const targetName = basename2(path28).toLowerCase();
+function suggestFix(path31, existingFiles) {
+  const targetName = basename2(path31).toLowerCase();
   const similar = existingFiles.find((file) => {
     const fileName = basename2(file).toLowerCase();
     return fileName.includes(targetName) || targetName.includes(fileName);
@@ -478,7 +481,7 @@ function suggestFix(path28, existingFiles) {
   if (similar) {
     return `Did you mean "${similar}"?`;
   }
-  return `Create the file "${path28}" or remove the link`;
+  return `Create the file "${path31}" or remove the link`;
 }
 async function validateKnowledgeMap(rootDir = process.cwd()) {
   const agentsPath = join2(rootDir, "AGENTS.md");
@@ -671,6 +674,47 @@ var NODE_TYPE_TO_CATEGORY = {
   prompt: "systemPrompt",
   system: "systemPrompt"
 };
+function makeZeroWeights() {
+  return {
+    systemPrompt: 0,
+    projectManifest: 0,
+    taskSpec: 0,
+    activeCode: 0,
+    interfaces: 0,
+    reserve: 0
+  };
+}
+function normalizeRatios(ratios) {
+  const sum = Object.values(ratios).reduce((s, r) => s + r, 0);
+  if (sum === 0) return;
+  for (const key of Object.keys(ratios)) {
+    ratios[key] = ratios[key] / sum;
+  }
+}
+function enforceMinimumRatios(ratios, min) {
+  for (const key of Object.keys(ratios)) {
+    if (ratios[key] < min) ratios[key] = min;
+  }
+}
+function applyGraphDensity(ratios, graphDensity) {
+  const weights = makeZeroWeights();
+  for (const [nodeType, count] of Object.entries(graphDensity)) {
+    const category = NODE_TYPE_TO_CATEGORY[nodeType];
+    if (category) weights[category] += count;
+  }
+  const totalWeight = Object.values(weights).reduce((s, w) => s + w, 0);
+  if (totalWeight === 0) return;
+  const MIN = 0.01;
+  for (const key of Object.keys(ratios)) {
+    ratios[key] = weights[key] > 0 ? weights[key] / totalWeight : MIN;
+  }
+  if (ratios.reserve < DEFAULT_RATIOS.reserve) ratios.reserve = DEFAULT_RATIOS.reserve;
+  if (ratios.systemPrompt < DEFAULT_RATIOS.systemPrompt)
+    ratios.systemPrompt = DEFAULT_RATIOS.systemPrompt;
+  normalizeRatios(ratios);
+  enforceMinimumRatios(ratios, MIN);
+  normalizeRatios(ratios);
+}
 function contextBudget(totalTokens, overrides, graphDensity) {
   const ratios = {
     systemPrompt: DEFAULT_RATIOS.systemPrompt,
@@ -681,50 +725,7 @@ function contextBudget(totalTokens, overrides, graphDensity) {
     reserve: DEFAULT_RATIOS.reserve
   };
   if (graphDensity) {
-    const categoryWeights = {
-      systemPrompt: 0,
-      projectManifest: 0,
-      taskSpec: 0,
-      activeCode: 0,
-      interfaces: 0,
-      reserve: 0
-    };
-    for (const [nodeType, count] of Object.entries(graphDensity)) {
-      const category = NODE_TYPE_TO_CATEGORY[nodeType];
-      if (category) {
-        categoryWeights[category] += count;
-      }
-    }
-    const totalWeight = Object.values(categoryWeights).reduce((sum, w) => sum + w, 0);
-    if (totalWeight > 0) {
-      const MIN_ALLOCATION = 0.01;
-      for (const key of Object.keys(ratios)) {
-        if (categoryWeights[key] > 0) {
-          ratios[key] = categoryWeights[key] / totalWeight;
-        } else {
-          ratios[key] = MIN_ALLOCATION;
-        }
-      }
-      if (ratios.reserve < DEFAULT_RATIOS.reserve) {
-        ratios.reserve = DEFAULT_RATIOS.reserve;
-      }
-      if (ratios.systemPrompt < DEFAULT_RATIOS.systemPrompt) {
-        ratios.systemPrompt = DEFAULT_RATIOS.systemPrompt;
-      }
-      const ratioSum = Object.values(ratios).reduce((sum, r) => sum + r, 0);
-      for (const key of Object.keys(ratios)) {
-        ratios[key] = ratios[key] / ratioSum;
-      }
-      for (const key of Object.keys(ratios)) {
-        if (ratios[key] < MIN_ALLOCATION) {
-          ratios[key] = MIN_ALLOCATION;
-        }
-      }
-      const finalSum = Object.values(ratios).reduce((sum, r) => sum + r, 0);
-      for (const key of Object.keys(ratios)) {
-        ratios[key] = ratios[key] / finalSum;
-      }
-    }
+    applyGraphDensity(ratios, graphDensity);
   }
   if (overrides) {
     let overrideSum = 0;
@@ -830,8 +831,8 @@ function createBoundaryValidator(schema, name) {
         return Ok(result.data);
       }
       const suggestions = result.error.issues.map((issue) => {
-        const path28 = issue.path.join(".");
-        return path28 ? `${path28}: ${issue.message}` : issue.message;
+        const path31 = issue.path.join(".");
+        return path31 ? `${path31}: ${issue.message}` : issue.message;
       });
       return Err(
         createError(
@@ -1031,21 +1032,23 @@ function extractBundle(manifest, config) {
 }
 
 // src/constraints/sharing/merge.ts
+function arraysEqual(a, b) {
+  if (a.length !== b.length) return false;
+  return a.every((val, i) => deepEqual(val, b[i]));
+}
+function objectsEqual(a, b) {
+  const keysA = Object.keys(a);
+  const keysB = Object.keys(b);
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every((key) => deepEqual(a[key], b[key]));
+}
 function deepEqual(a, b) {
   if (a === b) return true;
   if (typeof a !== typeof b) return false;
   if (typeof a !== "object" || a === null || b === null) return false;
-  if (Array.isArray(a) && Array.isArray(b)) {
-    if (a.length !== b.length) return false;
-    return a.every((val, i) => deepEqual(val, b[i]));
-  }
+  if (Array.isArray(a) && Array.isArray(b)) return arraysEqual(a, b);
   if (Array.isArray(a) !== Array.isArray(b)) return false;
-  const keysA = Object.keys(a);
-  const keysB = Object.keys(b);
-  if (keysA.length !== keysB.length) return false;
-  return keysA.every(
-    (key) => deepEqual(a[key], b[key])
-  );
+  return objectsEqual(a, b);
 }
 function stringArraysEqual(a, b) {
   if (a.length !== b.length) return false;
@@ -1463,11 +1466,11 @@ function processExportListSpecifiers(exportDecl, exports) {
 var TypeScriptParser = class {
   name = "typescript";
   extensions = [".ts", ".tsx", ".mts", ".cts"];
-  async parseFile(path28) {
-    const contentResult = await readFileContent(path28);
+  async parseFile(path31) {
+    const contentResult = await readFileContent(path31);
     if (!contentResult.ok) {
       return Err(
-        createParseError("NOT_FOUND", `File not found: ${path28}`, { path: path28 }, [
+        createParseError("NOT_FOUND", `File not found: ${path31}`, { path: path31 }, [
           "Check that the file exists",
           "Verify the path is correct"
         ])
@@ -1477,7 +1480,7 @@ var TypeScriptParser = class {
       const ast = parse(contentResult.value, {
         loc: true,
         range: true,
-        jsx: path28.endsWith(".tsx"),
+        jsx: path31.endsWith(".tsx"),
         errorOnUnknownASTType: false
       });
       return Ok({
@@ -1488,7 +1491,7 @@ var TypeScriptParser = class {
     } catch (e) {
       const error = e;
       return Err(
-        createParseError("SYNTAX_ERROR", `Failed to parse ${path28}: ${error.message}`, { path: path28 }, [
+        createParseError("SYNTAX_ERROR", `Failed to parse ${path31}: ${error.message}`, { path: path31 }, [
           "Check for syntax errors in the file",
           "Ensure valid TypeScript syntax"
         ])
@@ -1673,22 +1676,22 @@ function extractInlineRefs(content) {
   }
   return refs;
 }
-async function parseDocumentationFile(path28) {
-  const contentResult = await readFileContent(path28);
+async function parseDocumentationFile(path31) {
+  const contentResult = await readFileContent(path31);
   if (!contentResult.ok) {
     return Err(
       createEntropyError(
         "PARSE_ERROR",
-        `Failed to read documentation file: ${path28}`,
-        { file: path28 },
+        `Failed to read documentation file: ${path31}`,
+        { file: path31 },
         ["Check that the file exists"]
       )
     );
   }
   const content = contentResult.value;
-  const type = path28.endsWith(".md") ? "markdown" : "text";
+  const type = path31.endsWith(".md") ? "markdown" : "text";
   return Ok({
-    path: path28,
+    path: path31,
     type,
     content,
     codeBlocks: extractCodeBlocks(content),
@@ -1698,17 +1701,22 @@ async function parseDocumentationFile(path28) {
 function makeInternalSymbol(name, type, line) {
   return { name, type, line, references: 0, calledBy: [] };
 }
+function extractFunctionSymbol(node, line) {
+  if (node.id?.name) return [makeInternalSymbol(node.id.name, "function", line)];
+  return [];
+}
+function extractVariableSymbols(node, line) {
+  return (node.declarations || []).filter((decl) => decl.id?.name).map((decl) => makeInternalSymbol(decl.id.name, "variable", line));
+}
+function extractClassSymbol(node, line) {
+  if (node.id?.name) return [makeInternalSymbol(node.id.name, "class", line)];
+  return [];
+}
 function extractSymbolsFromNode(node) {
   const line = node.loc?.start?.line || 0;
-  if (node.type === "FunctionDeclaration" && node.id?.name) {
-    return [makeInternalSymbol(node.id.name, "function", line)];
-  }
-  if (node.type === "VariableDeclaration") {
-    return (node.declarations || []).filter((decl) => decl.id?.name).map((decl) => makeInternalSymbol(decl.id.name, "variable", line));
-  }
-  if (node.type === "ClassDeclaration" && node.id?.name) {
-    return [makeInternalSymbol(node.id.name, "class", line)];
-  }
+  if (node.type === "FunctionDeclaration") return extractFunctionSymbol(node, line);
+  if (node.type === "VariableDeclaration") return extractVariableSymbols(node, line);
+  if (node.type === "ClassDeclaration") return extractClassSymbol(node, line);
   return [];
 }
 function extractInternalSymbols(ast) {
@@ -1717,21 +1725,17 @@ function extractInternalSymbols(ast) {
   const nodes = body.body;
   return nodes.flatMap(extractSymbolsFromNode);
 }
+function toJSDocComment(comment) {
+  if (comment.type !== "Block" || !comment.value?.startsWith("*")) return null;
+  return { content: comment.value, line: comment.loc?.start?.line || 0 };
+}
 function extractJSDocComments(ast) {
-  const comments = [];
   const body = ast.body;
-  if (body?.comments) {
-    for (const comment of body.comments) {
-      if (comment.type === "Block" && comment.value?.startsWith("*")) {
-        const jsDocComment = {
-          content: comment.value,
-          line: comment.loc?.start?.line || 0
-        };
-        comments.push(jsDocComment);
-      }
-    }
-  }
-  return comments;
+  if (!body?.comments) return [];
+  return body.comments.flatMap((c) => {
+    const doc = toJSDocComment(c);
+    return doc ? [doc] : [];
+  });
 }
 function buildExportMap(files) {
   const byFile = /* @__PURE__ */ new Map();
@@ -1746,41 +1750,42 @@ function buildExportMap(files) {
   }
   return { byFile, byName };
 }
-function extractAllCodeReferences(docs) {
+var CODE_BLOCK_LANGUAGES = /* @__PURE__ */ new Set(["typescript", "ts", "javascript", "js"]);
+function refsFromInlineRefs(doc) {
+  return doc.inlineRefs.map((inlineRef) => ({
+    docFile: doc.path,
+    line: inlineRef.line,
+    column: inlineRef.column,
+    reference: inlineRef.reference,
+    context: "inline"
+  }));
+}
+function refsFromCodeBlock(docPath, block) {
+  if (!CODE_BLOCK_LANGUAGES.has(block.language)) return [];
   const refs = [];
-  for (const doc of docs) {
-    for (const inlineRef of doc.inlineRefs) {
+  const importRegex = /import\s+\{([^}]+)\}\s+from/g;
+  let match;
+  while ((match = importRegex.exec(block.content)) !== null) {
+    const group = match[1];
+    if (group === void 0) continue;
+    for (const name of group.split(",").map((n) => n.trim())) {
       refs.push({
-        docFile: doc.path,
-        line: inlineRef.line,
-        column: inlineRef.column,
-        reference: inlineRef.reference,
-        context: "inline"
+        docFile: docPath,
+        line: block.line,
+        column: 0,
+        reference: name,
+        context: "code-block"
       });
     }
-    for (const block of doc.codeBlocks) {
-      if (block.language === "typescript" || block.language === "ts" || block.language === "javascript" || block.language === "js") {
-        const importRegex = /import\s+\{([^}]+)\}\s+from/g;
-        let match;
-        while ((match = importRegex.exec(block.content)) !== null) {
-          const matchedGroup = match[1];
-          if (matchedGroup === void 0) continue;
-          const names = matchedGroup.split(",").map((n) => n.trim());
-          for (const name of names) {
-            refs.push({
-              docFile: doc.path,
-              line: block.line,
-              column: 0,
-              reference: name,
-              context: "code-block"
-            });
-          }
-        }
-      }
-    }
   }
   return refs;
 }
+function refsFromCodeBlocks(doc) {
+  return doc.codeBlocks.flatMap((block) => refsFromCodeBlock(doc.path, block));
+}
+function extractAllCodeReferences(docs) {
+  return docs.flatMap((doc) => [...refsFromInlineRefs(doc), ...refsFromCodeBlocks(doc)]);
+}
 async function buildSnapshot(config) {
   const startTime = Date.now();
   const parser = config.parser || new TypeScriptParser();
@@ -1986,44 +1991,52 @@ async function checkStructureDrift(snapshot, _config) {
   }
   return drifts;
 }
+function computeDriftSeverity(driftCount) {
+  if (driftCount === 0) return "none";
+  if (driftCount <= 3) return "low";
+  if (driftCount <= 10) return "medium";
+  return "high";
+}
+function buildGraphDriftReport(graphDriftData) {
+  const drifts = [];
+  for (const target of graphDriftData.missingTargets) {
+    drifts.push({
+      type: "api-signature",
+      docFile: target,
+      line: 0,
+      reference: target,
+      context: "graph-missing-target",
+      issue: "NOT_FOUND",
+      details: `Graph node "${target}" has no matching code target`,
+      confidence: "high"
+    });
+  }
+  for (const edge of graphDriftData.staleEdges) {
+    drifts.push({
+      type: "api-signature",
+      docFile: edge.docNodeId,
+      line: 0,
+      reference: edge.codeNodeId,
+      context: `graph-stale-edge:${edge.edgeType}`,
+      issue: "NOT_FOUND",
+      details: `Stale edge from doc "${edge.docNodeId}" to code "${edge.codeNodeId}" (${edge.edgeType})`,
+      confidence: "medium"
+    });
+  }
+  return Ok({
+    drifts,
+    stats: {
+      docsScanned: graphDriftData.staleEdges.length,
+      referencesChecked: graphDriftData.staleEdges.length + graphDriftData.missingTargets.length,
+      driftsFound: drifts.length,
+      byType: { api: drifts.length, example: 0, structure: 0 }
+    },
+    severity: computeDriftSeverity(drifts.length)
+  });
+}
 async function detectDocDrift(snapshot, config, graphDriftData) {
   if (graphDriftData) {
-    const drifts2 = [];
-    for (const target of graphDriftData.missingTargets) {
-      drifts2.push({
-        type: "api-signature",
-        docFile: target,
-        line: 0,
-        reference: target,
-        context: "graph-missing-target",
-        issue: "NOT_FOUND",
-        details: `Graph node "${target}" has no matching code target`,
-        confidence: "high"
-      });
-    }
-    for (const edge of graphDriftData.staleEdges) {
-      drifts2.push({
-        type: "api-signature",
-        docFile: edge.docNodeId,
-        line: 0,
-        reference: edge.codeNodeId,
-        context: `graph-stale-edge:${edge.edgeType}`,
-        issue: "NOT_FOUND",
-        details: `Stale edge from doc "${edge.docNodeId}" to code "${edge.codeNodeId}" (${edge.edgeType})`,
-        confidence: "medium"
-      });
-    }
-    const severity2 = drifts2.length === 0 ? "none" : drifts2.length <= 3 ? "low" : drifts2.length <= 10 ? "medium" : "high";
-    return Ok({
-      drifts: drifts2,
-      stats: {
-        docsScanned: graphDriftData.staleEdges.length,
-        referencesChecked: graphDriftData.staleEdges.length + graphDriftData.missingTargets.length,
-        driftsFound: drifts2.length,
-        byType: { api: drifts2.length, example: 0, structure: 0 }
-      },
-      severity: severity2
-    });
+    return buildGraphDriftReport(graphDriftData);
   }
   const fullConfig = { ...DEFAULT_DRIFT_CONFIG, ...config };
   const drifts = [];
@@ -2072,6 +2085,23 @@ function resolveImportToFile(importSource, fromFile, snapshot) {
   }
   return null;
 }
+function enqueueResolved(sources, current, snapshot, visited, queue) {
+  for (const item of sources) {
+    if (!item.source) continue;
+    const resolved = resolveImportToFile(item.source, current, snapshot);
+    if (resolved && !visited.has(resolved)) {
+      queue.push(resolved);
+    }
+  }
+}
+function processReachabilityNode(current, snapshot, reachability, visited, queue) {
+  reachability.set(current, true);
+  const sourceFile = snapshot.files.find((f) => f.path === current);
+  if (!sourceFile) return;
+  enqueueResolved(sourceFile.imports, current, snapshot, visited, queue);
+  const reExports = sourceFile.exports.filter((e) => e.isReExport);
+  enqueueResolved(reExports, current, snapshot, visited, queue);
+}
 function buildReachabilityMap(snapshot) {
   const reachability = /* @__PURE__ */ new Map();
   for (const file of snapshot.files) {
@@ -2083,23 +2113,7 @@ function buildReachabilityMap(snapshot) {
     const current = queue.shift();
     if (visited.has(current)) continue;
     visited.add(current);
-    reachability.set(current, true);
-    const sourceFile = snapshot.files.find((f) => f.path === current);
-    if (!sourceFile) continue;
-    for (const imp of sourceFile.imports) {
-      const resolved = resolveImportToFile(imp.source, current, snapshot);
-      if (resolved && !visited.has(resolved)) {
-        queue.push(resolved);
-      }
-    }
-    for (const exp of sourceFile.exports) {
-      if (exp.isReExport && exp.source) {
-        const resolved = resolveImportToFile(exp.source, current, snapshot);
-        if (resolved && !visited.has(resolved)) {
-          queue.push(resolved);
-        }
-      }
-    }
+    processReachabilityNode(current, snapshot, reachability, visited, queue);
   }
   return reachability;
 }
@@ -2169,21 +2183,27 @@ function findDeadExports(snapshot, usageMap, reachability) {
   }
   return deadExports;
 }
+function maxLineOfValue(value) {
+  if (Array.isArray(value)) {
+    return value.reduce((m, item) => Math.max(m, findMaxLineInNode(item)), 0);
+  }
+  if (value && typeof value === "object") {
+    return findMaxLineInNode(value);
+  }
+  return 0;
+}
+function maxLineOfNodeKeys(node) {
+  let max = 0;
+  for (const key of Object.keys(node)) {
+    max = Math.max(max, maxLineOfValue(node[key]));
+  }
+  return max;
+}
 function findMaxLineInNode(node) {
   if (!node || typeof node !== "object") return 0;
   const n = node;
-  let maxLine = n.loc?.end?.line ?? 0;
-  for (const key of Object.keys(node)) {
-    const value = node[key];
-    if (Array.isArray(value)) {
-      for (const item of value) {
-        maxLine = Math.max(maxLine, findMaxLineInNode(item));
-      }
-    } else if (value && typeof value === "object") {
-      maxLine = Math.max(maxLine, findMaxLineInNode(value));
-    }
-  }
-  return maxLine;
+  const locLine = n.loc?.end?.line ?? 0;
+  return Math.max(locLine, maxLineOfNodeKeys(node));
 }
 function countLinesFromAST(ast) {
   if (!ast.body || !Array.isArray(ast.body)) return 1;
@@ -2257,54 +2277,59 @@ function findDeadInternals(snapshot, _reachability) {
   }
   return deadInternals;
 }
-async function detectDeadCode(snapshot, graphDeadCodeData) {
-  if (graphDeadCodeData) {
-    const deadFiles2 = [];
-    const deadExports2 = [];
-    const fileTypes = /* @__PURE__ */ new Set(["file", "module"]);
-    const exportTypes = /* @__PURE__ */ new Set(["function", "class", "method", "interface", "variable"]);
-    for (const node of graphDeadCodeData.unreachableNodes) {
-      if (fileTypes.has(node.type)) {
-        deadFiles2.push({
-          path: node.path || node.id,
-          reason: "NO_IMPORTERS",
-          exportCount: 0,
-          lineCount: 0
-        });
-      } else if (exportTypes.has(node.type)) {
-        const exportType = node.type === "method" ? "function" : node.type;
-        deadExports2.push({
-          file: node.path || node.id,
-          name: node.name,
-          line: 0,
-          type: exportType,
-          isDefault: false,
-          reason: "NO_IMPORTERS"
-        });
-      }
-    }
-    const reachableCount = graphDeadCodeData.reachableNodeIds instanceof Set ? graphDeadCodeData.reachableNodeIds.size : graphDeadCodeData.reachableNodeIds.length;
-    const fileNodes = graphDeadCodeData.unreachableNodes.filter((n) => fileTypes.has(n.type));
-    const exportNodes = graphDeadCodeData.unreachableNodes.filter((n) => exportTypes.has(n.type));
-    const totalFiles = reachableCount + fileNodes.length;
-    const totalExports2 = exportNodes.length + (reachableCount > 0 ? reachableCount : 0);
-    const report2 = {
-      deadExports: deadExports2,
-      deadFiles: deadFiles2,
-      deadInternals: [],
-      unusedImports: [],
-      stats: {
-        filesAnalyzed: totalFiles,
-        entryPointsUsed: [],
-        totalExports: totalExports2,
-        deadExportCount: deadExports2.length,
-        totalFiles,
-        deadFileCount: deadFiles2.length,
-        estimatedDeadLines: 0
-      }
-    };
-    return Ok(report2);
+var FILE_TYPES = /* @__PURE__ */ new Set(["file", "module"]);
+var EXPORT_TYPES = /* @__PURE__ */ new Set(["function", "class", "method", "interface", "variable"]);
+function classifyUnreachableNode(node, deadFiles, deadExports) {
+  if (FILE_TYPES.has(node.type)) {
+    deadFiles.push({
+      path: node.path || node.id,
+      reason: "NO_IMPORTERS",
+      exportCount: 0,
+      lineCount: 0
+    });
+  } else if (EXPORT_TYPES.has(node.type)) {
+    const exportType = node.type === "method" ? "function" : node.type;
+    deadExports.push({
+      file: node.path || node.id,
+      name: node.name,
+      line: 0,
+      type: exportType,
+      isDefault: false,
+      reason: "NO_IMPORTERS"
+    });
   }
+}
+function computeGraphReportStats(data, deadFiles, deadExports) {
+  const reachableCount = data.reachableNodeIds instanceof Set ? data.reachableNodeIds.size : data.reachableNodeIds.length;
+  const fileNodes = data.unreachableNodes.filter((n) => FILE_TYPES.has(n.type));
+  const exportNodes = data.unreachableNodes.filter((n) => EXPORT_TYPES.has(n.type));
+  const totalFiles = reachableCount + fileNodes.length;
+  const totalExports = exportNodes.length + (reachableCount > 0 ? reachableCount : 0);
+  return {
+    filesAnalyzed: totalFiles,
+    entryPointsUsed: [],
+    totalExports,
+    deadExportCount: deadExports.length,
+    totalFiles,
+    deadFileCount: deadFiles.length,
+    estimatedDeadLines: 0
+  };
+}
+function buildReportFromGraph(data) {
+  const deadFiles = [];
+  const deadExports = [];
+  for (const node of data.unreachableNodes) {
+    classifyUnreachableNode(node, deadFiles, deadExports);
+  }
+  return {
+    deadExports,
+    deadFiles,
+    deadInternals: [],
+    unusedImports: [],
+    stats: computeGraphReportStats(data, deadFiles, deadExports)
+  };
+}
+function buildReportFromSnapshot(snapshot) {
   const reachability = buildReachabilityMap(snapshot);
   const usageMap = buildExportUsageMap(snapshot);
   const deadExports = findDeadExports(snapshot, usageMap, reachability);
@@ -2316,7 +2341,7 @@ async function detectDeadCode(snapshot, graphDeadCodeData) {
     0
   );
   const estimatedDeadLines = deadFiles.reduce((acc, file) => acc + file.lineCount, 0);
-  const report = {
+  return {
     deadExports,
     deadFiles,
     deadInternals,
@@ -2331,6 +2356,9 @@ async function detectDeadCode(snapshot, graphDeadCodeData) {
       estimatedDeadLines
     }
   };
+}
+async function detectDeadCode(snapshot, graphDeadCodeData) {
+  const report = graphDeadCodeData ? buildReportFromGraph(graphDeadCodeData) : buildReportFromSnapshot(snapshot);
   return Ok(report);
 }
 
@@ -2614,48 +2642,52 @@ async function detectSizeBudgetViolations(rootDir, config) {
 }
 
 // src/entropy/fixers/suggestions.ts
+function deadFileSuggestion(file) {
+  return {
+    type: "delete",
+    priority: "high",
+    source: "dead-code",
+    relatedIssues: [`dead-file:${file.path}`],
+    title: `Remove dead file: ${file.path.split("/").pop()}`,
+    description: `This file is not imported by any other file and can be safely removed.`,
+    files: [file.path],
+    steps: [`Delete ${file.path}`, "Run tests to verify no regressions"],
+    whyManual: "File deletion requires verification that no dynamic imports exist"
+  };
+}
+function deadExportSuggestion(exp) {
+  return {
+    type: "refactor",
+    priority: "medium",
+    source: "dead-code",
+    relatedIssues: [`dead-export:${exp.file}:${exp.name}`],
+    title: `Remove unused export: ${exp.name}`,
+    description: `The export "${exp.name}" is not used anywhere. Consider removing it.`,
+    files: [exp.file],
+    steps: [`Remove export "${exp.name}" from ${exp.file}`, "Run tests to verify no regressions"],
+    whyManual: "Export removal may affect external consumers not in scope"
+  };
+}
+function unusedImportSuggestion(imp) {
+  const plural = imp.specifiers.length > 1;
+  return {
+    type: "delete",
+    priority: "medium",
+    source: "dead-code",
+    relatedIssues: [`unused-import:${imp.file}:${imp.specifiers.join(",")}`],
+    title: `Remove unused import${plural ? "s" : ""}: ${imp.specifiers.join(", ")}`,
+    description: `The import${plural ? "s" : ""} from "${imp.source}" ${plural ? "are" : "is"} not used.`,
+    files: [imp.file],
+    steps: imp.isFullyUnused ? [`Remove entire import line from ${imp.file}`] : [`Remove unused specifiers (${imp.specifiers.join(", ")}) from import statement`],
+    whyManual: "Import removal can be auto-fixed"
+  };
+}
 function generateDeadCodeSuggestions(report) {
-  const suggestions = [];
-  for (const file of report.deadFiles) {
-    suggestions.push({
-      type: "delete",
-      priority: "high",
-      source: "dead-code",
-      relatedIssues: [`dead-file:${file.path}`],
-      title: `Remove dead file: ${file.path.split("/").pop()}`,
-      description: `This file is not imported by any other file and can be safely removed.`,
-      files: [file.path],
-      steps: [`Delete ${file.path}`, "Run tests to verify no regressions"],
-      whyManual: "File deletion requires verification that no dynamic imports exist"
-    });
-  }
-  for (const exp of report.deadExports) {
-    suggestions.push({
-      type: "refactor",
-      priority: "medium",
-      source: "dead-code",
-      relatedIssues: [`dead-export:${exp.file}:${exp.name}`],
-      title: `Remove unused export: ${exp.name}`,
-      description: `The export "${exp.name}" is not used anywhere. Consider removing it.`,
-      files: [exp.file],
-      steps: [`Remove export "${exp.name}" from ${exp.file}`, "Run tests to verify no regressions"],
-      whyManual: "Export removal may affect external consumers not in scope"
-    });
-  }
-  for (const imp of report.unusedImports) {
-    suggestions.push({
-      type: "delete",
-      priority: "medium",
-      source: "dead-code",
-      relatedIssues: [`unused-import:${imp.file}:${imp.specifiers.join(",")}`],
-      title: `Remove unused import${imp.specifiers.length > 1 ? "s" : ""}: ${imp.specifiers.join(", ")}`,
-      description: `The import${imp.specifiers.length > 1 ? "s" : ""} from "${imp.source}" ${imp.specifiers.length > 1 ? "are" : "is"} not used.`,
-      files: [imp.file],
-      steps: imp.isFullyUnused ? [`Remove entire import line from ${imp.file}`] : [`Remove unused specifiers (${imp.specifiers.join(", ")}) from import statement`],
-      whyManual: "Import removal can be auto-fixed"
-    });
-  }
-  return suggestions;
+  return [
+    ...report.deadFiles.map(deadFileSuggestion),
+    ...report.deadExports.map(deadExportSuggestion),
+    ...report.unusedImports.map(unusedImportSuggestion)
+  ];
 }
 function generateDriftSuggestions(report) {
   const suggestions = [];
@@ -3098,43 +3130,55 @@ async function createBackup(filePath, backupDir) {
     );
   }
 }
+async function applyDeleteFile(fix, config) {
+  if (config.createBackup && config.backupDir) {
+    const backupResult = await createBackup(fix.file, config.backupDir);
+    if (!backupResult.ok) return Err({ fix, error: backupResult.error.message });
+  }
+  await unlink2(fix.file);
+  return Ok(void 0);
+}
+async function applyDeleteLines(fix) {
+  if (fix.line !== void 0) {
+    const content = await readFile3(fix.file, "utf-8");
+    const lines = content.split("\n");
+    lines.splice(fix.line - 1, 1);
+    await writeFile3(fix.file, lines.join("\n"));
+  }
+}
+async function applyReplace(fix) {
+  if (fix.oldContent && fix.newContent !== void 0) {
+    const content = await readFile3(fix.file, "utf-8");
+    await writeFile3(fix.file, content.replace(fix.oldContent, fix.newContent));
+  }
+}
+async function applyInsert(fix) {
+  if (fix.line !== void 0 && fix.newContent) {
+    const content = await readFile3(fix.file, "utf-8");
+    const lines = content.split("\n");
+    lines.splice(fix.line - 1, 0, fix.newContent);
+    await writeFile3(fix.file, lines.join("\n"));
+  }
+}
 async function applySingleFix(fix, config) {
   if (config.dryRun) {
     return Ok(fix);
   }
   try {
     switch (fix.action) {
-      case "delete-file":
-        if (config.createBackup && config.backupDir) {
-          const backupResult = await createBackup(fix.file, config.backupDir);
-          if (!backupResult.ok) {
-            return Err({ fix, error: backupResult.error.message });
-          }
-        }
-        await unlink2(fix.file);
+      case "delete-file": {
+        const result = await applyDeleteFile(fix, config);
+        if (!result.ok) return result;
         break;
+      }
       case "delete-lines":
-        if (fix.line !== void 0) {
-          const content = await readFile3(fix.file, "utf-8");
-          const lines = content.split("\n");
-          lines.splice(fix.line - 1, 1);
-          await writeFile3(fix.file, lines.join("\n"));
-        }
+        await applyDeleteLines(fix);
         break;
       case "replace":
-        if (fix.oldContent && fix.newContent !== void 0) {
-          const content = await readFile3(fix.file, "utf-8");
-          const newContent = content.replace(fix.oldContent, fix.newContent);
-          await writeFile3(fix.file, newContent);
-        }
+        await applyReplace(fix);
         break;
       case "insert":
-        if (fix.line !== void 0 && fix.newContent) {
-          const content = await readFile3(fix.file, "utf-8");
-          const lines = content.split("\n");
-          lines.splice(fix.line - 1, 0, fix.newContent);
-          await writeFile3(fix.file, lines.join("\n"));
-        }
+        await applyInsert(fix);
         break;
     }
     return Ok(fix);
@@ -3307,6 +3351,21 @@ function applyHotspotDowngrade(finding, hotspot) {
   }
   return finding;
 }
+function mergeGroup(group) {
+  if (group.length === 1) return [group[0]];
+  const deadCode = group.find((f) => f.concern === "dead-code");
+  const arch = group.find((f) => f.concern === "architecture");
+  if (deadCode && arch) {
+    return [
+      {
+        ...deadCode,
+        description: `${deadCode.description} (also violates architecture: ${arch.type})`,
+        suggestion: deadCode.fixAction ? `${deadCode.fixAction} (resolves both dead code and architecture violation)` : deadCode.suggestion
+      }
+    ];
+  }
+  return group;
+}
 function deduplicateCleanupFindings(findings) {
   const byFileAndLine = /* @__PURE__ */ new Map();
   for (const f of findings) {
@@ -3317,21 +3376,7 @@ function deduplicateCleanupFindings(findings) {
   }
   const result = [];
   for (const group of byFileAndLine.values()) {
-    if (group.length === 1) {
-      result.push(group[0]);
-      continue;
-    }
-    const deadCode = group.find((f) => f.concern === "dead-code");
-    const arch = group.find((f) => f.concern === "architecture");
-    if (deadCode && arch) {
-      result.push({
-        ...deadCode,
-        description: `${deadCode.description} (also violates architecture: ${arch.type})`,
-        suggestion: deadCode.fixAction ? `${deadCode.fixAction} (resolves both dead code and architecture violation)` : deadCode.suggestion
-      });
-    } else {
-      result.push(...group);
-    }
+    result.push(...mergeGroup(group));
   }
   return result;
 }
@@ -3704,6 +3749,32 @@ var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", "dist", ".git"]);
 var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx"]);
 var FUNCTION_DECL_RE = /(?:export\s+)?(?:async\s+)?function\s+(\w+)/;
 var CONST_DECL_RE = /(?:export\s+)?(?:const|let)\s+(\w+)\s*=/;
+function mergeGraphInferred(highFanInFunctions, seen) {
+  let added = 0;
+  for (const item of highFanInFunctions) {
+    const key = `${item.file}::${item.function}`;
+    if (!seen.has(key)) {
+      seen.set(key, {
+        file: item.file,
+        function: item.function,
+        source: "graph-inferred",
+        fanIn: item.fanIn
+      });
+      added++;
+    }
+  }
+  return added;
+}
+function isCommentOrBlank(line) {
+  return line === "" || line === "*/" || line === "*" || line.startsWith("*") || line.startsWith("//");
+}
+function matchDeclarationName(line) {
+  const funcMatch = line.match(FUNCTION_DECL_RE);
+  if (funcMatch?.[1]) return funcMatch[1];
+  const constMatch = line.match(CONST_DECL_RE);
+  if (constMatch?.[1]) return constMatch[1];
+  return null;
+}
 var CriticalPathResolver = class {
   projectRoot;
   constructor(projectRoot) {
@@ -3716,27 +3787,12 @@ var CriticalPathResolver = class {
       const key = `${entry.file}::${entry.function}`;
       seen.set(key, entry);
     }
-    let graphInferred = 0;
-    if (graphData) {
-      for (const item of graphData.highFanInFunctions) {
-        const key = `${item.file}::${item.function}`;
-        if (!seen.has(key)) {
-          seen.set(key, {
-            file: item.file,
-            function: item.function,
-            source: "graph-inferred",
-            fanIn: item.fanIn
-          });
-          graphInferred++;
-        }
-      }
-    }
+    const graphInferred = graphData ? mergeGraphInferred(graphData.highFanInFunctions, seen) : 0;
     const entries = Array.from(seen.values());
-    const annotatedCount = annotated.length;
     return {
       entries,
       stats: {
-        annotated: annotatedCount,
+        annotated: annotated.length,
         graphInferred,
         total: entries.length
       }
@@ -3763,6 +3819,14 @@ var CriticalPathResolver = class {
       }
     }
   }
+  resolveFunctionName(lines, fromIndex) {
+    for (let j = fromIndex; j < lines.length; j++) {
+      const nextLine = lines[j].trim();
+      if (isCommentOrBlank(nextLine)) continue;
+      return matchDeclarationName(nextLine);
+    }
+    return null;
+  }
   scanFile(filePath, entries) {
     let content;
     try {
@@ -3773,30 +3837,10 @@ var CriticalPathResolver = class {
     const lines = content.split("\n");
     const relativePath = path.relative(this.projectRoot, filePath).replace(/\\/g, "/");
     for (let i = 0; i < lines.length; i++) {
-      const line = lines[i];
-      if (!line.includes("@perf-critical")) continue;
-      for (let j = i + 1; j < lines.length; j++) {
-        const nextLine = lines[j].trim();
-        if (nextLine === "" || nextLine === "*/" || nextLine === "*") continue;
-        if (nextLine.startsWith("*") || nextLine.startsWith("//")) continue;
-        const funcMatch = nextLine.match(FUNCTION_DECL_RE);
-        if (funcMatch && funcMatch[1]) {
-          entries.push({
-            file: relativePath,
-            function: funcMatch[1],
-            source: "annotation"
-          });
-        } else {
-          const constMatch = nextLine.match(CONST_DECL_RE);
-          if (constMatch && constMatch[1]) {
-            entries.push({
-              file: relativePath,
-              function: constMatch[1],
-              source: "annotation"
-            });
-          }
-        }
-        break;
+      if (!lines[i].includes("@perf-critical")) continue;
+      const fnName = this.resolveFunctionName(lines, i + 1);
+      if (fnName) {
+        entries.push({ file: relativePath, function: fnName, source: "annotation" });
       }
     }
   }
@@ -3951,14 +3995,19 @@ function detectFileStatus(part) {
   if (part.includes("rename from")) return "renamed";
   return "modified";
 }
-function parseDiffPart(part) {
+function parseDiffHeader(part) {
   if (!part.trim()) return null;
   const headerMatch = /diff --git a\/(.+?) b\/(.+?)(?:\n|$)/.exec(part);
   if (!headerMatch || !headerMatch[2]) return null;
-  const additionRegex = /^\+(?!\+\+)/gm;
+  return headerMatch[2];
+}
+function parseDiffPart(part) {
+  const path31 = parseDiffHeader(part);
+  if (!path31) return null;
+  const additionRegex = /^\+(?!\+\+)/gm;
   const deletionRegex = /^-(?!--)/gm;
   return {
-    path: headerMatch[2],
+    path: path31,
     status: detectFileStatus(part),
     additions: (part.match(additionRegex) || []).length,
     deletions: (part.match(deletionRegex) || []).length
@@ -3980,100 +4029,136 @@ function parseDiff(diff2) {
     });
   }
 }
-async function analyzeDiff(changes, options, graphImpactData) {
-  if (!options?.enabled) {
-    return Ok([]);
+function checkForbiddenPatterns(diff2, forbiddenPatterns, nextId) {
+  const items = [];
+  if (!forbiddenPatterns) return items;
+  for (const forbidden of forbiddenPatterns) {
+    const pattern = typeof forbidden.pattern === "string" ? new RegExp(forbidden.pattern, "g") : forbidden.pattern;
+    if (!pattern.test(diff2)) continue;
+    items.push({
+      id: nextId(),
+      category: "diff",
+      check: `Forbidden pattern: ${forbidden.pattern}`,
+      passed: false,
+      severity: forbidden.severity,
+      details: forbidden.message,
+      suggestion: `Remove occurrences of ${forbidden.pattern}`
+    });
   }
+  return items;
+}
+function checkMaxChangedFiles(files, maxChangedFiles, nextId) {
+  if (!maxChangedFiles || files.length <= maxChangedFiles) return [];
+  return [
+    {
+      id: nextId(),
+      category: "diff",
+      check: `PR size: ${files.length} files changed`,
+      passed: false,
+      severity: "warning",
+      details: `This PR changes ${files.length} files, which exceeds the recommended maximum of ${maxChangedFiles}`,
+      suggestion: "Consider breaking this into smaller PRs"
+    }
+  ];
+}
+function checkFileSizes(files, maxFileSize, nextId) {
   const items = [];
-  let itemId = 0;
-  if (options.forbiddenPatterns) {
-    for (const forbidden of options.forbiddenPatterns) {
-      const pattern = typeof forbidden.pattern === "string" ? new RegExp(forbidden.pattern, "g") : forbidden.pattern;
-      if (pattern.test(changes.diff)) {
-        items.push({
-          id: `diff-${++itemId}`,
-          category: "diff",
-          check: `Forbidden pattern: ${forbidden.pattern}`,
-          passed: false,
-          severity: forbidden.severity,
-          details: forbidden.message,
-          suggestion: `Remove occurrences of ${forbidden.pattern}`
-        });
-      }
+  if (!maxFileSize) return items;
+  for (const file of files) {
+    const totalLines = file.additions + file.deletions;
+    if (totalLines <= maxFileSize) continue;
+    items.push({
+      id: nextId(),
+      category: "diff",
+      check: `File size: ${file.path}`,
+      passed: false,
+      severity: "warning",
+      details: `File has ${totalLines} lines changed, exceeding limit of ${maxFileSize}`,
+      file: file.path,
+      suggestion: "Consider splitting this file into smaller modules"
+    });
+  }
+  return items;
+}
+function checkTestCoverageGraph(files, graphImpactData) {
+  const items = [];
+  for (const file of files) {
+    if (file.status !== "added" || !file.path.endsWith(".ts") || file.path.includes(".test.")) {
+      continue;
     }
+    const hasGraphTest = graphImpactData.affectedTests.some((t) => t.coversFile === file.path);
+    if (hasGraphTest) continue;
+    items.push({
+      id: `test-coverage-${file.path}`,
+      category: "diff",
+      check: "Test coverage (graph)",
+      passed: false,
+      severity: "warning",
+      details: `New file ${file.path} has no test file linked in the graph`,
+      file: file.path
+    });
   }
-  if (options.maxChangedFiles && changes.files.length > options.maxChangedFiles) {
+  return items;
+}
+function checkTestCoverageFilename(files, nextId) {
+  const items = [];
+  const addedSourceFiles = files.filter(
+    (f) => f.status === "added" && f.path.endsWith(".ts") && !f.path.includes(".test.")
+  );
+  const testFiles = files.filter((f) => f.path.includes(".test."));
+  for (const sourceFile of addedSourceFiles) {
+    const expectedTestPath = sourceFile.path.replace(".ts", ".test.ts");
+    const hasTest = testFiles.some(
+      (t) => t.path.includes(expectedTestPath) || t.path.includes(sourceFile.path.replace(".ts", ""))
+    );
+    if (hasTest) continue;
     items.push({
-      id: `diff-${++itemId}`,
+      id: nextId(),
       category: "diff",
-      check: `PR size: ${changes.files.length} files changed`,
+      check: `Test coverage: ${sourceFile.path}`,
       passed: false,
       severity: "warning",
-      details: `This PR changes ${changes.files.length} files, which exceeds the recommended maximum of ${options.maxChangedFiles}`,
-      suggestion: "Consider breaking this into smaller PRs"
+      details: "New source file added without corresponding test file",
+      file: sourceFile.path,
+      suggestion: `Add tests in ${expectedTestPath}`
     });
   }
-  if (options.maxFileSize) {
-    for (const file of changes.files) {
-      const totalLines = file.additions + file.deletions;
-      if (totalLines > options.maxFileSize) {
-        items.push({
-          id: `diff-${++itemId}`,
-          category: "diff",
-          check: `File size: ${file.path}`,
-          passed: false,
-          severity: "warning",
-          details: `File has ${totalLines} lines changed, exceeding limit of ${options.maxFileSize}`,
-          file: file.path,
-          suggestion: "Consider splitting this file into smaller modules"
-        });
-      }
+  return items;
+}
+function checkDocCoverage2(files, graphImpactData) {
+  const items = [];
+  for (const file of files) {
+    if (file.status !== "modified" || !file.path.endsWith(".ts") || file.path.includes(".test.")) {
+      continue;
     }
+    const hasDoc = graphImpactData.affectedDocs.some((d) => d.documentsFile === file.path);
+    if (hasDoc) continue;
+    items.push({
+      id: `doc-coverage-${file.path}`,
+      category: "diff",
+      check: "Documentation coverage (graph)",
+      passed: true,
+      severity: "info",
+      details: `Modified file ${file.path} has no documentation linked in the graph`,
+      file: file.path
+    });
   }
+  return items;
+}
+async function analyzeDiff(changes, options, graphImpactData) {
+  if (!options?.enabled) {
+    return Ok([]);
+  }
+  let itemId = 0;
+  const nextId = () => `diff-${++itemId}`;
+  const items = [
+    ...checkForbiddenPatterns(changes.diff, options.forbiddenPatterns, nextId),
+    ...checkMaxChangedFiles(changes.files, options.maxChangedFiles, nextId),
+    ...checkFileSizes(changes.files, options.maxFileSize, nextId)
+  ];
   if (options.checkTestCoverage) {
-    if (graphImpactData) {
-      for (const file of changes.files) {
-        if (file.status === "added" && file.path.endsWith(".ts") && !file.path.includes(".test.")) {
-          const hasGraphTest = graphImpactData.affectedTests.some(
-            (t) => t.coversFile === file.path
-          );
-          if (!hasGraphTest) {
-            items.push({
-              id: `test-coverage-${file.path}`,
-              category: "diff",
-              check: "Test coverage (graph)",
-              passed: false,
-              severity: "warning",
-              details: `New file ${file.path} has no test file linked in the graph`,
-              file: file.path
-            });
-          }
-        }
-      }
-    } else {
-      const addedSourceFiles = changes.files.filter(
-        (f) => f.status === "added" && f.path.endsWith(".ts") && !f.path.includes(".test.")
-      );
-      const testFiles = changes.files.filter((f) => f.path.includes(".test."));
-      for (const sourceFile of addedSourceFiles) {
-        const expectedTestPath = sourceFile.path.replace(".ts", ".test.ts");
-        const hasTest = testFiles.some(
-          (t) => t.path.includes(expectedTestPath) || t.path.includes(sourceFile.path.replace(".ts", ""))
-        );
-        if (!hasTest) {
-          items.push({
-            id: `diff-${++itemId}`,
-            category: "diff",
-            check: `Test coverage: ${sourceFile.path}`,
-            passed: false,
-            severity: "warning",
-            details: "New source file added without corresponding test file",
-            file: sourceFile.path,
-            suggestion: `Add tests in ${expectedTestPath}`
-          });
-        }
-      }
-    }
+    const coverageItems = graphImpactData ? checkTestCoverageGraph(changes.files, graphImpactData) : checkTestCoverageFilename(changes.files, nextId);
+    items.push(...coverageItems);
   }
   if (graphImpactData && graphImpactData.impactScope > 20) {
     items.push({
@@ -4086,22 +4171,7 @@ async function analyzeDiff(changes, options, graphImpactData) {
     });
   }
   if (graphImpactData) {
-    for (const file of changes.files) {
-      if (file.status === "modified" && file.path.endsWith(".ts") && !file.path.includes(".test.")) {
-        const hasDoc = graphImpactData.affectedDocs.some((d) => d.documentsFile === file.path);
-        if (!hasDoc) {
-          items.push({
-            id: `doc-coverage-${file.path}`,
-            category: "diff",
-            check: "Documentation coverage (graph)",
-            passed: true,
-            severity: "info",
-            details: `Modified file ${file.path} has no documentation linked in the graph`,
-            file: file.path
-          });
-        }
-      }
-    }
+    items.push(...checkDocCoverage2(changes.files, graphImpactData));
   }
   return Ok(items);
 }
@@ -4634,10 +4704,26 @@ function hasMatchingViolation(rule, violationsByCategory) {
 }
 
 // src/architecture/detect-stale.ts
+function evaluateStaleNode(node, now, cutoff) {
+  const lastViolatedAt = node.lastViolatedAt ?? null;
+  const createdAt = node.createdAt;
+  const comparisonTimestamp = lastViolatedAt ?? createdAt;
+  if (!comparisonTimestamp) return null;
+  const timestampMs = new Date(comparisonTimestamp).getTime();
+  if (timestampMs >= cutoff) return null;
+  const daysSince = Math.floor((now - timestampMs) / (24 * 60 * 60 * 1e3));
+  return {
+    id: node.id,
+    category: node.category,
+    description: node.name ?? "",
+    scope: node.scope ?? "project",
+    lastViolatedAt,
+    daysSinceLastViolation: daysSince
+  };
+}
 function detectStaleConstraints(store, windowDays = 30, category) {
   const now = Date.now();
-  const windowMs = windowDays * 24 * 60 * 60 * 1e3;
-  const cutoff = now - windowMs;
+  const cutoff = now - windowDays * 24 * 60 * 60 * 1e3;
   let constraints = store.findNodes({ type: "constraint" });
   if (category) {
     constraints = constraints.filter((n) => n.category === category);
@@ -4645,28 +4731,23 @@ function detectStaleConstraints(store, windowDays = 30, category) {
   const totalConstraints = constraints.length;
   const staleConstraints = [];
   for (const node of constraints) {
-    const lastViolatedAt = node.lastViolatedAt ?? null;
-    const createdAt = node.createdAt;
-    const comparisonTimestamp = lastViolatedAt ?? createdAt;
-    if (!comparisonTimestamp) continue;
-    const timestampMs = new Date(comparisonTimestamp).getTime();
-    if (timestampMs < cutoff) {
-      const daysSince = Math.floor((now - timestampMs) / (24 * 60 * 60 * 1e3));
-      staleConstraints.push({
-        id: node.id,
-        category: node.category,
-        description: node.name ?? "",
-        scope: node.scope ?? "project",
-        lastViolatedAt,
-        daysSinceLastViolation: daysSince
-      });
-    }
+    const entry = evaluateStaleNode(node, now, cutoff);
+    if (entry) staleConstraints.push(entry);
   }
   staleConstraints.sort((a, b) => b.daysSinceLastViolation - a.daysSinceLastViolation);
   return { staleConstraints, totalConstraints, windowDays };
 }
 
 // src/architecture/config.ts
+function mergeThresholdCategory(projectValue2, moduleValue) {
+  if (projectValue2 !== void 0 && typeof projectValue2 === "object" && !Array.isArray(projectValue2) && typeof moduleValue === "object" && !Array.isArray(moduleValue)) {
+    return {
+      ...projectValue2,
+      ...moduleValue
+    };
+  }
+  return moduleValue;
+}
 function resolveThresholds(scope, config) {
   const projectThresholds = {};
   for (const [key, val] of Object.entries(config.thresholds)) {
@@ -4682,14 +4763,7 @@ function resolveThresholds(scope, config) {
   const merged = { ...projectThresholds };
   for (const [category, moduleValue] of Object.entries(moduleOverrides)) {
     const projectValue2 = projectThresholds[category];
-    if (projectValue2 !== void 0 && typeof projectValue2 === "object" && !Array.isArray(projectValue2) && typeof moduleValue === "object" && !Array.isArray(moduleValue)) {
-      merged[category] = {
-        ...projectValue2,
-        ...moduleValue
-      };
-    } else {
-      merged[category] = moduleValue;
-    }
+    merged[category] = mergeThresholdCategory(projectValue2, moduleValue);
   }
   return merged;
 }
@@ -5218,8 +5292,7 @@ function parseListField(fieldMap, ...keys) {
   if (raw === EM_DASH || raw === "none") return [];
   return raw.split(",").map((s) => s.trim());
 }
-function parseFeatureFields(name, body) {
-  const fieldMap = extractFieldMap(body);
+function validateStatus(name, fieldMap) {
   const statusRaw = fieldMap.get("Status");
   if (!statusRaw || !VALID_STATUSES.has(statusRaw)) {
     return Err2(
@@ -5228,12 +5301,10 @@ function parseFeatureFields(name, body) {
       )
     );
   }
-  const specRaw = fieldMap.get("Spec") ?? EM_DASH;
-  const plans = parseListField(fieldMap, "Plans", "Plan");
-  const blockedBy = parseListField(fieldMap, "Blocked by", "Blockers");
-  const assigneeRaw = fieldMap.get("Assignee") ?? EM_DASH;
+  return Ok2(statusRaw);
+}
+function validatePriority(name, fieldMap) {
   const priorityRaw = fieldMap.get("Priority") ?? EM_DASH;
-  const externalIdRaw = fieldMap.get("External-ID") ?? EM_DASH;
   if (priorityRaw !== EM_DASH && !VALID_PRIORITIES.has(priorityRaw)) {
     return Err2(
       new Error(
@@ -5241,16 +5312,28 @@ function parseFeatureFields(name, body) {
       )
     );
   }
+  return Ok2(priorityRaw === EM_DASH ? null : priorityRaw);
+}
+function optionalField(fieldMap, key) {
+  const raw = fieldMap.get(key) ?? EM_DASH;
+  return raw === EM_DASH ? null : raw;
+}
+function parseFeatureFields(name, body) {
+  const fieldMap = extractFieldMap(body);
+  const statusResult = validateStatus(name, fieldMap);
+  if (!statusResult.ok) return statusResult;
+  const priorityResult = validatePriority(name, fieldMap);
+  if (!priorityResult.ok) return priorityResult;
   return Ok2({
     name,
-    status: statusRaw,
-    spec: specRaw === EM_DASH ? null : specRaw,
-    plans,
-    blockedBy,
+    status: statusResult.value,
+    spec: optionalField(fieldMap, "Spec"),
+    plans: parseListField(fieldMap, "Plans", "Plan"),
+    blockedBy: parseListField(fieldMap, "Blocked by", "Blockers"),
     summary: fieldMap.get("Summary") ?? "",
-    assignee: assigneeRaw === EM_DASH ? null : assigneeRaw,
-    priority: priorityRaw === EM_DASH ? null : priorityRaw,
-    externalId: externalIdRaw === EM_DASH ? null : externalIdRaw
+    assignee: optionalField(fieldMap, "Assignee"),
+    priority: priorityResult.value,
+    externalId: optionalField(fieldMap, "External-ID")
   });
 }
 function parseAssignmentHistory(body) {
@@ -5304,6 +5387,31 @@ var PredictionEngine = class {
    */
   predict(options) {
     const opts = this.resolveOptions(options);
+    const snapshots = this.loadValidatedSnapshots();
+    const thresholds = this.resolveThresholds(opts);
+    const categoriesToProcess = opts.categories ?? [...ALL_CATEGORIES2];
+    const { firstDate, lastSnapshot, currentT } = this.computeTimeOffsets(snapshots);
+    const baselines = this.computeBaselines(
+      categoriesToProcess,
+      thresholds,
+      snapshots,
+      firstDate,
+      currentT,
+      opts.horizon
+    );
+    const specImpacts = this.computeSpecImpacts(opts);
+    const categories = this.computeAdjustedForecasts(baselines, thresholds, specImpacts, currentT);
+    const adjustedCategories = categories;
+    return {
+      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      snapshotsUsed: snapshots.length,
+      timelineRange: { from: snapshots[0].capturedAt, to: lastSnapshot.capturedAt },
+      stabilityForecast: this.computeStabilityForecast(adjustedCategories, thresholds, snapshots),
+      categories: adjustedCategories,
+      warnings: this.generateWarnings(adjustedCategories, opts.horizon)
+    };
+  }
+  loadValidatedSnapshots() {
     const timeline = this.timelineManager.load();
     const snapshots = timeline.snapshots;
     if (snapshots.length < 3) {
@@ -5311,16 +5419,39 @@ var PredictionEngine = class {
         `PredictionEngine requires at least 3 snapshots, got ${snapshots.length}. Run "harness snapshot" to capture more data points.`
       );
     }
-    const thresholds = this.resolveThresholds(opts);
-    const categoriesToProcess = opts.categories ?? [...ALL_CATEGORIES2];
+    return snapshots;
+  }
+  computeTimeOffsets(snapshots) {
     const firstDate = new Date(snapshots[0].capturedAt).getTime();
     const lastSnapshot = snapshots[snapshots.length - 1];
     const currentT = (new Date(lastSnapshot.capturedAt).getTime() - firstDate) / (7 * 24 * 60 * 60 * 1e3);
+    return { firstDate, lastSnapshot, currentT };
+  }
+  // --- Private helpers ---
+  resolveOptions(options) {
+    return {
+      horizon: options?.horizon ?? 12,
+      includeRoadmap: options?.includeRoadmap ?? true,
+      categories: options?.categories,
+      thresholds: options?.thresholds
+    };
+  }
+  resolveThresholds(opts) {
+    const base = { ...DEFAULT_STABILITY_THRESHOLDS };
+    if (opts.thresholds) {
+      for (const [key, value] of Object.entries(opts.thresholds)) {
+        if (value !== void 0) {
+          base[key] = value;
+        }
+      }
+    }
+    return base;
+  }
+  computeBaselines(categoriesToProcess, thresholds, snapshots, firstDate, currentT, horizon) {
     const baselines = {};
     for (const category of ALL_CATEGORIES2) {
       const threshold = thresholds[category];
-      const shouldProcess = categoriesToProcess.includes(category);
-      if (!shouldProcess) {
+      if (!categoriesToProcess.includes(category)) {
         baselines[category] = this.zeroForecast(category, threshold);
         continue;
       }
@@ -5330,108 +5461,61 @@ var PredictionEngine = class {
         timeSeries,
         currentT,
         threshold,
-        opts.horizon
+        horizon
       );
     }
-    const specImpacts = this.computeSpecImpacts(opts);
+    return baselines;
+  }
+  computeAdjustedForecasts(baselines, thresholds, specImpacts, currentT) {
     const categories = {};
     for (const category of ALL_CATEGORIES2) {
       const baseline = baselines[category];
-      const threshold = thresholds[category];
-      if (!specImpacts || specImpacts.length === 0) {
-        categories[category] = {
-          baseline,
-          adjusted: baseline,
-          contributingFeatures: []
-        };
-        continue;
-      }
-      let totalDelta = 0;
-      const contributing = [];
-      for (const impact of specImpacts) {
-        const delta = impact.deltas?.[category] ?? 0;
-        if (delta !== 0) {
-          totalDelta += delta;
-          contributing.push({
-            name: impact.featureName,
-            specPath: impact.specPath,
-            delta
-          });
-        }
-      }
-      if (totalDelta === 0) {
-        categories[category] = {
-          baseline,
-          adjusted: baseline,
-          contributingFeatures: []
-        };
-        continue;
-      }
-      const adjusted = {
-        ...baseline,
-        projectedValue4w: baseline.projectedValue4w + totalDelta,
-        projectedValue8w: baseline.projectedValue8w + totalDelta,
-        projectedValue12w: baseline.projectedValue12w + totalDelta
-      };
-      const adjustedFit = {
-        slope: baseline.regression.slope,
-        intercept: baseline.regression.intercept + totalDelta,
-        rSquared: baseline.regression.rSquared,
-        dataPoints: baseline.regression.dataPoints
-      };
-      adjusted.thresholdCrossingWeeks = weeksUntilThreshold(adjustedFit, currentT, threshold);
-      adjusted.regression = {
-        slope: adjustedFit.slope,
-        intercept: adjustedFit.intercept,
-        rSquared: adjustedFit.rSquared,
-        dataPoints: adjustedFit.dataPoints
-      };
-      categories[category] = {
+      categories[category] = this.adjustForecastForCategory(
+        category,
         baseline,
-        adjusted,
-        contributingFeatures: contributing
-      };
+        thresholds[category],
+        specImpacts,
+        currentT
+      );
     }
-    const warnings = this.generateWarnings(
-      categories,
-      opts.horizon
-    );
-    const stabilityForecast = this.computeStabilityForecast(
-      categories,
-      thresholds,
-      snapshots
-    );
-    return {
-      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      snapshotsUsed: snapshots.length,
-      timelineRange: {
-        from: snapshots[0].capturedAt,
-        to: lastSnapshot.capturedAt
-      },
-      stabilityForecast,
-      categories,
-      warnings
-    };
-  }
-  // --- Private helpers ---
-  resolveOptions(options) {
-    return {
-      horizon: options?.horizon ?? 12,
-      includeRoadmap: options?.includeRoadmap ?? true,
-      categories: options?.categories,
-      thresholds: options?.thresholds
-    };
+    return categories;
   }
-  resolveThresholds(opts) {
-    const base = { ...DEFAULT_STABILITY_THRESHOLDS };
-    if (opts.thresholds) {
-      for (const [key, value] of Object.entries(opts.thresholds)) {
-        if (value !== void 0) {
-          base[key] = value;
-        }
+  adjustForecastForCategory(category, baseline, threshold, specImpacts, currentT) {
+    if (!specImpacts || specImpacts.length === 0) {
+      return { baseline, adjusted: baseline, contributingFeatures: [] };
+    }
+    let totalDelta = 0;
+    const contributing = [];
+    for (const impact of specImpacts) {
+      const delta = impact.deltas?.[category] ?? 0;
+      if (delta !== 0) {
+        totalDelta += delta;
+        contributing.push({ name: impact.featureName, specPath: impact.specPath, delta });
       }
     }
-    return base;
+    if (totalDelta === 0) {
+      return { baseline, adjusted: baseline, contributingFeatures: [] };
+    }
+    const adjusted = {
+      ...baseline,
+      projectedValue4w: baseline.projectedValue4w + totalDelta,
+      projectedValue8w: baseline.projectedValue8w + totalDelta,
+      projectedValue12w: baseline.projectedValue12w + totalDelta
+    };
+    const adjustedFit = {
+      slope: baseline.regression.slope,
+      intercept: baseline.regression.intercept + totalDelta,
+      rSquared: baseline.regression.rSquared,
+      dataPoints: baseline.regression.dataPoints
+    };
+    adjusted.thresholdCrossingWeeks = weeksUntilThreshold(adjustedFit, currentT, threshold);
+    adjusted.regression = {
+      slope: adjustedFit.slope,
+      intercept: adjustedFit.intercept,
+      rSquared: adjustedFit.rSquared,
+      dataPoints: adjustedFit.dataPoints
+    };
+    return { baseline, adjusted, contributingFeatures: contributing };
   }
   /**
    * Extract time series for a single category from snapshots.
@@ -5509,31 +5593,40 @@ var PredictionEngine = class {
     for (const category of ALL_CATEGORIES2) {
       const af = categories[category];
       if (!af) continue;
-      const forecast = af.adjusted;
-      const crossing = forecast.thresholdCrossingWeeks;
-      if (crossing === null || crossing <= 0) continue;
-      let severity = null;
-      if (crossing <= criticalWindow && (forecast.confidence === "high" || forecast.confidence === "medium")) {
-        severity = "critical";
-      } else if (crossing <= warningWindow && (forecast.confidence === "high" || forecast.confidence === "medium")) {
-        severity = "warning";
-      } else if (crossing <= horizon) {
-        severity = "info";
-      }
-      if (severity) {
-        const contributingNames = af.contributingFeatures.map((f) => f.name);
-        warnings.push({
-          severity,
-          category,
-          message: `${category} projected to exceed threshold (~${crossing}w, ${forecast.confidence} confidence)`,
-          weeksUntil: crossing,
-          confidence: forecast.confidence,
-          contributingFeatures: contributingNames
-        });
-      }
+      const warning = this.buildCategoryWarning(
+        category,
+        af,
+        criticalWindow,
+        warningWindow,
+        horizon
+      );
+      if (warning) warnings.push(warning);
     }
     return warnings;
   }
+  buildCategoryWarning(category, af, criticalWindow, warningWindow, horizon) {
+    const forecast = af.adjusted;
+    const crossing = forecast.thresholdCrossingWeeks;
+    if (crossing === null || crossing <= 0) return null;
+    const isHighConfidence = forecast.confidence === "high" || forecast.confidence === "medium";
+    let severity = null;
+    if (crossing <= criticalWindow && isHighConfidence) {
+      severity = "critical";
+    } else if (crossing <= warningWindow && isHighConfidence) {
+      severity = "warning";
+    } else if (crossing <= horizon) {
+      severity = "info";
+    }
+    if (!severity) return null;
+    return {
+      severity,
+      category,
+      message: `${category} projected to exceed threshold (~${crossing}w, ${forecast.confidence} confidence)`,
+      weeksUntil: crossing,
+      confidence: forecast.confidence,
+      contributingFeatures: af.contributingFeatures.map((f) => f.name)
+    };
+  }
   /**
    * Compute composite stability forecast by projecting per-category values
    * forward and computing stability scores at each horizon.
@@ -5602,14 +5695,9 @@ var PredictionEngine = class {
       const raw = fs5.readFileSync(roadmapPath, "utf-8");
       const parseResult = parseRoadmap(raw);
       if (!parseResult.ok) return null;
-      const features = [];
-      for (const milestone of parseResult.value.milestones) {
-        for (const feature of milestone.features) {
-          if (feature.status === "planned" || feature.status === "in-progress") {
-            features.push({ name: feature.name, spec: feature.spec });
-          }
-        }
-      }
+      const features = parseResult.value.milestones.flatMap(
+        (m) => m.features.filter((f) => f.status === "planned" || f.status === "in-progress").map((f) => ({ name: f.name, spec: f.spec }))
+      );
       if (features.length === 0) return null;
       return this.estimator.estimateAll(features);
     } catch {
@@ -6257,10 +6345,10 @@ async function saveState(projectPath, state, stream, session) {
   }
 }
 
-// src/state/learnings.ts
+// src/state/learnings-content.ts
 import * as fs11 from "fs";
 import * as path8 from "path";
-import * as crypto from "crypto";
+import * as crypto2 from "crypto";
 function parseFrontmatter2(line) {
   const match = line.match(/^<!--\s+hash:([a-f0-9]+)(?:\s+tags:([^\s]+))?\s+-->/);
   if (!match) return null;
@@ -6268,8 +6356,27 @@ function parseFrontmatter2(line) {
   const tags = match[2] ? match[2].split(",").filter(Boolean) : [];
   return { hash, tags };
 }
+function parseDateFromEntry(entry) {
+  const match = entry.match(/(\d{4}-\d{2}-\d{2})/);
+  return match ? match[1] ?? null : null;
+}
+function extractIndexEntry(entry) {
+  const lines = entry.split("\n");
+  const summary = lines[0] ?? entry;
+  const tags = [];
+  const skillMatch = entry.match(/\[skill:([^\]]+)\]/);
+  if (skillMatch?.[1]) tags.push(skillMatch[1]);
+  const outcomeMatch = entry.match(/\[outcome:([^\]]+)\]/);
+  if (outcomeMatch?.[1]) tags.push(outcomeMatch[1]);
+  return {
+    hash: computeEntryHash(entry),
+    tags,
+    summary,
+    fullText: entry
+  };
+}
 function computeEntryHash(text) {
-  return crypto.createHash("sha256").update(text).digest("hex").slice(0, 8);
+  return crypto2.createHash("sha256").update(text).digest("hex").slice(0, 8);
 }
 function normalizeLearningContent(text) {
   let normalized = text;
@@ -6284,7 +6391,7 @@ function normalizeLearningContent(text) {
   return normalized;
 }
 function computeContentHash(text) {
-  return crypto.createHash("sha256").update(text).digest("hex").slice(0, 16);
+  return crypto2.createHash("sha256").update(text).digest("hex").slice(0, 16);
 }
 function loadContentHashes(stateDir) {
   const hashesPath = path8.join(stateDir, CONTENT_HASHES_FILE);
@@ -6302,8 +6409,8 @@ function saveContentHashes(stateDir, index) {
   const hashesPath = path8.join(stateDir, CONTENT_HASHES_FILE);
   fs11.writeFileSync(hashesPath, JSON.stringify(index, null, 2) + "\n");
 }
-function rebuildContentHashes(stateDir) {
-  const learningsPath = path8.join(stateDir, LEARNINGS_FILE);
+function rebuildContentHashes(stateDir, learningsFile) {
+  const learningsPath = path8.join(stateDir, learningsFile);
   if (!fs11.existsSync(learningsPath)) return {};
   const content = fs11.readFileSync(learningsPath, "utf-8");
   const lines = content.split("\n");
@@ -6324,43 +6431,125 @@ function rebuildContentHashes(stateDir) {
   saveContentHashes(stateDir, index);
   return index;
 }
-function extractIndexEntry(entry) {
-  const lines = entry.split("\n");
-  const summary = lines[0] ?? entry;
-  const tags = [];
-  const skillMatch = entry.match(/\[skill:([^\]]+)\]/);
-  if (skillMatch?.[1]) tags.push(skillMatch[1]);
-  const outcomeMatch = entry.match(/\[outcome:([^\]]+)\]/);
-  if (outcomeMatch?.[1]) tags.push(outcomeMatch[1]);
-  return {
-    hash: computeEntryHash(entry),
-    tags,
-    summary,
-    fullText: entry
-  };
+function analyzeLearningPatterns(entries) {
+  const tagGroups = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const tagMatches = entry.matchAll(/\[(skill:[^\]]+)\]|\[(outcome:[^\]]+)\]/g);
+    for (const match of tagMatches) {
+      const tag = match[1] ?? match[2];
+      if (tag) {
+        const group = tagGroups.get(tag) ?? [];
+        group.push(entry);
+        tagGroups.set(tag, group);
+      }
+    }
+  }
+  const patterns = [];
+  for (const [tag, groupEntries] of tagGroups) {
+    if (groupEntries.length >= 3) {
+      patterns.push({ tag, count: groupEntries.length, entries: groupEntries });
+    }
+  }
+  return patterns.sort((a, b) => b.count - a.count);
+}
+function estimateTokens(text) {
+  return Math.ceil(text.length / 4);
 }
+function scoreRelevance(entry, intent) {
+  if (!intent || intent.trim() === "") return 0;
+  const intentWords = intent.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
+  if (intentWords.length === 0) return 0;
+  const entryLower = entry.toLowerCase();
+  const matches = intentWords.filter((word) => entryLower.includes(word));
+  return matches.length / intentWords.length;
+}
+
+// src/state/learnings-loader.ts
+import * as fs12 from "fs";
+import * as path9 from "path";
 var learningsCacheMap = /* @__PURE__ */ new Map();
 function clearLearningsCache() {
   learningsCacheMap.clear();
 }
+function invalidateLearningsCacheEntry(key) {
+  learningsCacheMap.delete(key);
+}
+async function loadRelevantLearnings(projectPath, skillName, stream, session) {
+  try {
+    const dirResult = await getStateDir(projectPath, stream, session);
+    if (!dirResult.ok) return dirResult;
+    const stateDir = dirResult.value;
+    const learningsPath = path9.join(stateDir, LEARNINGS_FILE);
+    if (!fs12.existsSync(learningsPath)) {
+      return Ok([]);
+    }
+    const stats = fs12.statSync(learningsPath);
+    const cacheKey = learningsPath;
+    const cached = learningsCacheMap.get(cacheKey);
+    let entries;
+    if (cached && cached.mtimeMs === stats.mtimeMs) {
+      entries = cached.entries;
+    } else {
+      const content = fs12.readFileSync(learningsPath, "utf-8");
+      const lines = content.split("\n");
+      entries = [];
+      let currentBlock = [];
+      for (const line of lines) {
+        if (line.startsWith("# ")) continue;
+        if (/^<!--\s+hash:[a-f0-9]+/.test(line)) continue;
+        const isDatedBullet = /^- \*\*\d{4}-\d{2}-\d{2}/.test(line);
+        const isHeading = /^## \d{4}-\d{2}-\d{2}/.test(line);
+        if (isDatedBullet || isHeading) {
+          if (currentBlock.length > 0) {
+            entries.push(currentBlock.join("\n"));
+          }
+          currentBlock = [line];
+        } else if (line.trim() !== "" && currentBlock.length > 0) {
+          currentBlock.push(line);
+        }
+      }
+      if (currentBlock.length > 0) {
+        entries.push(currentBlock.join("\n"));
+      }
+      learningsCacheMap.set(cacheKey, { mtimeMs: stats.mtimeMs, entries });
+      evictIfNeeded(learningsCacheMap);
+    }
+    if (!skillName) {
+      return Ok(entries);
+    }
+    const filtered = entries.filter((entry) => entry.includes(`[skill:${skillName}]`));
+    return Ok(filtered);
+  } catch (error) {
+    return Err(
+      new Error(
+        `Failed to load learnings: ${error instanceof Error ? error.message : String(error)}`
+      )
+    );
+  }
+}
+
+// src/state/learnings.ts
+import * as fs13 from "fs";
+import * as path10 from "path";
+import * as crypto3 from "crypto";
 async function appendLearning(projectPath, learning, skillName, outcome, stream, session) {
   try {
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const learningsPath = path8.join(stateDir, LEARNINGS_FILE);
-    fs11.mkdirSync(stateDir, { recursive: true });
+    const learningsPath = path10.join(stateDir, LEARNINGS_FILE);
+    fs13.mkdirSync(stateDir, { recursive: true });
     const normalizedContent = normalizeLearningContent(learning);
     const contentHash = computeContentHash(normalizedContent);
-    const hashesPath = path8.join(stateDir, CONTENT_HASHES_FILE);
+    const hashesPath = path10.join(stateDir, CONTENT_HASHES_FILE);
     let contentHashes;
-    if (fs11.existsSync(hashesPath)) {
+    if (fs13.existsSync(hashesPath)) {
       contentHashes = loadContentHashes(stateDir);
-      if (Object.keys(contentHashes).length === 0 && fs11.existsSync(learningsPath)) {
-        contentHashes = rebuildContentHashes(stateDir);
+      if (Object.keys(contentHashes).length === 0 && fs13.existsSync(learningsPath)) {
+        contentHashes = rebuildContentHashes(stateDir, LEARNINGS_FILE);
       }
-    } else if (fs11.existsSync(learningsPath)) {
-      contentHashes = rebuildContentHashes(stateDir);
+    } else if (fs13.existsSync(learningsPath)) {
+      contentHashes = rebuildContentHashes(stateDir, LEARNINGS_FILE);
     } else {
       contentHashes = {};
     }
@@ -6379,7 +6568,7 @@ async function appendLearning(projectPath, learning, skillName, outcome, stream,
     } else {
       bulletLine = `- **${timestamp}:** ${learning}`;
     }
-    const hash = crypto.createHash("sha256").update(bulletLine).digest("hex").slice(0, 8);
+    const hash = crypto3.createHash("sha256").update(bulletLine).digest("hex").slice(0, 8);
     const tagsStr = fmTags.length > 0 ? ` tags:${fmTags.join(",")}` : "";
     const frontmatter = `<!-- hash:${hash}${tagsStr} -->`;
     const entry = `
@@ -6387,19 +6576,19 @@ ${frontmatter}
 ${bulletLine}
 `;
     let existingLineCount;
-    if (!fs11.existsSync(learningsPath)) {
-      fs11.writeFileSync(learningsPath, `# Learnings
+    if (!fs13.existsSync(learningsPath)) {
+      fs13.writeFileSync(learningsPath, `# Learnings
 ${entry}`);
       existingLineCount = 1;
     } else {
-      const existingContent = fs11.readFileSync(learningsPath, "utf-8");
+      const existingContent = fs13.readFileSync(learningsPath, "utf-8");
       existingLineCount = existingContent.split("\n").length;
-      fs11.appendFileSync(learningsPath, entry);
+      fs13.appendFileSync(learningsPath, entry);
     }
     const bulletLine_lineNum = existingLineCount + 2;
     contentHashes[contentHash] = { date: timestamp ?? "", line: bulletLine_lineNum };
     saveContentHashes(stateDir, contentHashes);
-    learningsCacheMap.delete(learningsPath);
+    invalidateLearningsCacheEntry(learningsPath);
     return Ok(void 0);
   } catch (error) {
     return Err(
@@ -6409,42 +6598,6 @@ ${entry}`);
     );
   }
 }
-function estimateTokens(text) {
-  return Math.ceil(text.length / 4);
-}
-function scoreRelevance(entry, intent) {
-  if (!intent || intent.trim() === "") return 0;
-  const intentWords = intent.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
-  if (intentWords.length === 0) return 0;
-  const entryLower = entry.toLowerCase();
-  const matches = intentWords.filter((word) => entryLower.includes(word));
-  return matches.length / intentWords.length;
-}
-function parseDateFromEntry(entry) {
-  const match = entry.match(/(\d{4}-\d{2}-\d{2})/);
-  return match ? match[1] ?? null : null;
-}
-function analyzeLearningPatterns(entries) {
-  const tagGroups = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    const tagMatches = entry.matchAll(/\[(skill:[^\]]+)\]|\[(outcome:[^\]]+)\]/g);
-    for (const match of tagMatches) {
-      const tag = match[1] ?? match[2];
-      if (tag) {
-        const group = tagGroups.get(tag) ?? [];
-        group.push(entry);
-        tagGroups.set(tag, group);
-      }
-    }
-  }
-  const patterns = [];
-  for (const [tag, groupEntries] of tagGroups) {
-    if (groupEntries.length >= 3) {
-      patterns.push({ tag, count: groupEntries.length, entries: groupEntries });
-    }
-  }
-  return patterns.sort((a, b) => b.count - a.count);
-}
 async function loadBudgetedLearnings(projectPath, options) {
   const { intent, tokenBudget = 1e3, skill, session, stream, depth = "summary" } = options;
   if (depth === "index") {
@@ -6508,11 +6661,11 @@ async function loadIndexEntries(projectPath, skillName, stream, session) {
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const learningsPath = path8.join(stateDir, LEARNINGS_FILE);
-    if (!fs11.existsSync(learningsPath)) {
+    const learningsPath = path10.join(stateDir, LEARNINGS_FILE);
+    if (!fs13.existsSync(learningsPath)) {
       return Ok([]);
     }
-    const content = fs11.readFileSync(learningsPath, "utf-8");
+    const content = fs13.readFileSync(learningsPath, "utf-8");
     const lines = content.split("\n");
     const indexEntries = [];
     let pendingFrontmatter = null;
@@ -6565,74 +6718,25 @@ async function loadIndexEntries(projectPath, skillName, stream, session) {
     );
   }
 }
-async function loadRelevantLearnings(projectPath, skillName, stream, session) {
-  try {
-    const dirResult = await getStateDir(projectPath, stream, session);
-    if (!dirResult.ok) return dirResult;
-    const stateDir = dirResult.value;
-    const learningsPath = path8.join(stateDir, LEARNINGS_FILE);
-    if (!fs11.existsSync(learningsPath)) {
-      return Ok([]);
-    }
-    const stats = fs11.statSync(learningsPath);
-    const cacheKey = learningsPath;
-    const cached = learningsCacheMap.get(cacheKey);
-    let entries;
-    if (cached && cached.mtimeMs === stats.mtimeMs) {
-      entries = cached.entries;
-    } else {
-      const content = fs11.readFileSync(learningsPath, "utf-8");
-      const lines = content.split("\n");
-      entries = [];
-      let currentBlock = [];
-      for (const line of lines) {
-        if (line.startsWith("# ")) continue;
-        if (/^<!--\s+hash:[a-f0-9]+/.test(line)) continue;
-        const isDatedBullet = /^- \*\*\d{4}-\d{2}-\d{2}/.test(line);
-        const isHeading = /^## \d{4}-\d{2}-\d{2}/.test(line);
-        if (isDatedBullet || isHeading) {
-          if (currentBlock.length > 0) {
-            entries.push(currentBlock.join("\n"));
-          }
-          currentBlock = [line];
-        } else if (line.trim() !== "" && currentBlock.length > 0) {
-          currentBlock.push(line);
-        }
-      }
-      if (currentBlock.length > 0) {
-        entries.push(currentBlock.join("\n"));
-      }
-      learningsCacheMap.set(cacheKey, { mtimeMs: stats.mtimeMs, entries });
-      evictIfNeeded(learningsCacheMap);
-    }
-    if (!skillName) {
-      return Ok(entries);
-    }
-    const filtered = entries.filter((entry) => entry.includes(`[skill:${skillName}]`));
-    return Ok(filtered);
-  } catch (error) {
-    return Err(
-      new Error(
-        `Failed to load learnings: ${error instanceof Error ? error.message : String(error)}`
-      )
-    );
-  }
-}
+
+// src/state/learnings-lifecycle.ts
+import * as fs14 from "fs";
+import * as path11 from "path";
 async function archiveLearnings(projectPath, entries, stream) {
   try {
     const dirResult = await getStateDir(projectPath, stream);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const archiveDir = path8.join(stateDir, "learnings-archive");
-    fs11.mkdirSync(archiveDir, { recursive: true });
+    const archiveDir = path11.join(stateDir, "learnings-archive");
+    fs14.mkdirSync(archiveDir, { recursive: true });
     const now = /* @__PURE__ */ new Date();
     const yearMonth = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
-    const archivePath = path8.join(archiveDir, `${yearMonth}.md`);
+    const archivePath = path11.join(archiveDir, `${yearMonth}.md`);
     const archiveContent = entries.join("\n\n") + "\n";
-    if (fs11.existsSync(archivePath)) {
-      fs11.appendFileSync(archivePath, "\n" + archiveContent);
+    if (fs14.existsSync(archivePath)) {
+      fs14.appendFileSync(archivePath, "\n" + archiveContent);
     } else {
-      fs11.writeFileSync(archivePath, `# Learnings Archive
+      fs14.writeFileSync(archivePath, `# Learnings Archive
 
 ${archiveContent}`);
     }
@@ -6650,8 +6754,8 @@ async function pruneLearnings(projectPath, stream) {
     const dirResult = await getStateDir(projectPath, stream);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const learningsPath = path8.join(stateDir, LEARNINGS_FILE);
-    if (!fs11.existsSync(learningsPath)) {
+    const learningsPath = path11.join(stateDir, LEARNINGS_FILE);
+    if (!fs14.existsSync(learningsPath)) {
       return Ok({ kept: 0, archived: 0, patterns: [] });
     }
     const loadResult = await loadRelevantLearnings(projectPath, void 0, stream);
@@ -6682,8 +6786,8 @@ async function pruneLearnings(projectPath, stream) {
       if (!archiveResult.ok) return archiveResult;
     }
     const newContent = "# Learnings\n\n" + toKeep.join("\n\n") + "\n";
-    fs11.writeFileSync(learningsPath, newContent);
-    learningsCacheMap.delete(learningsPath);
+    fs14.writeFileSync(learningsPath, newContent);
+    invalidateLearningsCacheEntry(learningsPath);
     return Ok({
       kept: toKeep.length,
       archived: toArchive.length,
@@ -6727,21 +6831,21 @@ async function promoteSessionLearnings(projectPath, sessionSlug, stream) {
     const dirResult = await getStateDir(projectPath, stream);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const globalPath = path8.join(stateDir, LEARNINGS_FILE);
-    const existingGlobal = fs11.existsSync(globalPath) ? fs11.readFileSync(globalPath, "utf-8") : "";
+    const globalPath = path11.join(stateDir, LEARNINGS_FILE);
+    const existingGlobal = fs14.existsSync(globalPath) ? fs14.readFileSync(globalPath, "utf-8") : "";
     const newEntries = toPromote.filter((entry) => !existingGlobal.includes(entry.trim()));
     if (newEntries.length === 0) {
       return Ok({ promoted: 0, skipped: skipped + toPromote.length });
     }
     const promotedContent = newEntries.join("\n\n") + "\n";
     if (!existingGlobal) {
-      fs11.writeFileSync(globalPath, `# Learnings
+      fs14.writeFileSync(globalPath, `# Learnings
 
 ${promotedContent}`);
     } else {
-      fs11.appendFileSync(globalPath, "\n\n" + promotedContent);
+      fs14.appendFileSync(globalPath, "\n\n" + promotedContent);
     }
-    learningsCacheMap.delete(globalPath);
+    invalidateLearningsCacheEntry(globalPath);
     return Ok({
       promoted: newEntries.length,
       skipped: skipped + (toPromote.length - newEntries.length)
@@ -6761,8 +6865,8 @@ async function countLearningEntries(projectPath, stream) {
 }
 
 // src/state/failures.ts
-import * as fs12 from "fs";
-import * as path9 from "path";
+import * as fs15 from "fs";
+import * as path12 from "path";
 var failuresCacheMap = /* @__PURE__ */ new Map();
 function clearFailuresCache() {
   failuresCacheMap.clear();
@@ -6773,17 +6877,17 @@ async function appendFailure(projectPath, description, skillName, type, stream,
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const failuresPath = path9.join(stateDir, FAILURES_FILE);
-    fs12.mkdirSync(stateDir, { recursive: true });
+    const failuresPath = path12.join(stateDir, FAILURES_FILE);
+    fs15.mkdirSync(stateDir, { recursive: true });
     const timestamp = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
     const entry = `
 - **${timestamp} [skill:${skillName}] [type:${type}]:** ${description}
 `;
-    if (!fs12.existsSync(failuresPath)) {
-      fs12.writeFileSync(failuresPath, `# Failures
+    if (!fs15.existsSync(failuresPath)) {
+      fs15.writeFileSync(failuresPath, `# Failures
 ${entry}`);
     } else {
-      fs12.appendFileSync(failuresPath, entry);
+      fs15.appendFileSync(failuresPath, entry);
     }
     failuresCacheMap.delete(failuresPath);
     return Ok(void 0);
@@ -6800,17 +6904,17 @@ async function loadFailures(projectPath, stream, session) {
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const failuresPath = path9.join(stateDir, FAILURES_FILE);
-    if (!fs12.existsSync(failuresPath)) {
+    const failuresPath = path12.join(stateDir, FAILURES_FILE);
+    if (!fs15.existsSync(failuresPath)) {
       return Ok([]);
     }
-    const stats = fs12.statSync(failuresPath);
+    const stats = fs15.statSync(failuresPath);
     const cacheKey = failuresPath;
     const cached = failuresCacheMap.get(cacheKey);
     if (cached && cached.mtimeMs === stats.mtimeMs) {
       return Ok(cached.entries);
     }
-    const content = fs12.readFileSync(failuresPath, "utf-8");
+    const content = fs15.readFileSync(failuresPath, "utf-8");
     const entries = [];
     for (const line of content.split("\n")) {
       const match = line.match(FAILURE_LINE_REGEX);
@@ -6839,20 +6943,20 @@ async function archiveFailures(projectPath, stream, session) {
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const failuresPath = path9.join(stateDir, FAILURES_FILE);
-    if (!fs12.existsSync(failuresPath)) {
+    const failuresPath = path12.join(stateDir, FAILURES_FILE);
+    if (!fs15.existsSync(failuresPath)) {
       return Ok(void 0);
     }
-    const archiveDir = path9.join(stateDir, "archive");
-    fs12.mkdirSync(archiveDir, { recursive: true });
+    const archiveDir = path12.join(stateDir, "archive");
+    fs15.mkdirSync(archiveDir, { recursive: true });
     const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
     let archiveName = `failures-${date}.md`;
     let counter = 2;
-    while (fs12.existsSync(path9.join(archiveDir, archiveName))) {
+    while (fs15.existsSync(path12.join(archiveDir, archiveName))) {
       archiveName = `failures-${date}-${counter}.md`;
       counter++;
     }
-    fs12.renameSync(failuresPath, path9.join(archiveDir, archiveName));
+    fs15.renameSync(failuresPath, path12.join(archiveDir, archiveName));
     failuresCacheMap.delete(failuresPath);
     return Ok(void 0);
   } catch (error) {
@@ -6865,16 +6969,16 @@ async function archiveFailures(projectPath, stream, session) {
 }
 
 // src/state/handoff.ts
-import * as fs13 from "fs";
-import * as path10 from "path";
+import * as fs16 from "fs";
+import * as path13 from "path";
 async function saveHandoff(projectPath, handoff, stream, session) {
   try {
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const handoffPath = path10.join(stateDir, HANDOFF_FILE);
-    fs13.mkdirSync(stateDir, { recursive: true });
-    fs13.writeFileSync(handoffPath, JSON.stringify(handoff, null, 2));
+    const handoffPath = path13.join(stateDir, HANDOFF_FILE);
+    fs16.mkdirSync(stateDir, { recursive: true });
+    fs16.writeFileSync(handoffPath, JSON.stringify(handoff, null, 2));
     return Ok(void 0);
   } catch (error) {
     return Err(
@@ -6887,11 +6991,11 @@ async function loadHandoff(projectPath, stream, session) {
     const dirResult = await getStateDir(projectPath, stream, session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const handoffPath = path10.join(stateDir, HANDOFF_FILE);
-    if (!fs13.existsSync(handoffPath)) {
+    const handoffPath = path13.join(stateDir, HANDOFF_FILE);
+    if (!fs16.existsSync(handoffPath)) {
       return Ok(null);
     }
-    const raw = fs13.readFileSync(handoffPath, "utf-8");
+    const raw = fs16.readFileSync(handoffPath, "utf-8");
     const parsed = JSON.parse(raw);
     const result = HandoffSchema.safeParse(parsed);
     if (!result.success) {
@@ -6906,33 +7010,33 @@ async function loadHandoff(projectPath, stream, session) {
 }
 
 // src/state/mechanical-gate.ts
-import * as fs14 from "fs";
-import * as path11 from "path";
+import * as fs17 from "fs";
+import * as path14 from "path";
 import { execSync as execSync2 } from "child_process";
 var SAFE_GATE_COMMAND = /^(?:npm|pnpm|yarn)\s+(?:test|run\s+[\w.-]+|run-script\s+[\w.-]+)$|^go\s+(?:test|build|vet|fmt)\s+[\w./ -]+$|^(?:python|python3)\s+-m\s+[\w.-]+$|^make\s+[\w.-]+$|^cargo\s+(?:test|build|check|clippy)(?:\s+[\w./ -]+)?$|^(?:gradle|mvn)\s+[\w:.-]+$/;
 function loadChecksFromConfig(gateConfigPath) {
-  if (!fs14.existsSync(gateConfigPath)) return [];
-  const raw = JSON.parse(fs14.readFileSync(gateConfigPath, "utf-8"));
+  if (!fs17.existsSync(gateConfigPath)) return [];
+  const raw = JSON.parse(fs17.readFileSync(gateConfigPath, "utf-8"));
   const config = GateConfigSchema.safeParse(raw);
   if (config.success && config.data.checks) return config.data.checks;
   return [];
 }
 function discoverChecksFromProject(projectPath) {
   const checks = [];
-  const packageJsonPath = path11.join(projectPath, "package.json");
-  if (fs14.existsSync(packageJsonPath)) {
-    const pkg = JSON.parse(fs14.readFileSync(packageJsonPath, "utf-8"));
+  const packageJsonPath = path14.join(projectPath, "package.json");
+  if (fs17.existsSync(packageJsonPath)) {
+    const pkg = JSON.parse(fs17.readFileSync(packageJsonPath, "utf-8"));
     const scripts = pkg.scripts || {};
     if (scripts.test) checks.push({ name: "test", command: "npm test" });
     if (scripts.lint) checks.push({ name: "lint", command: "npm run lint" });
     if (scripts.typecheck) checks.push({ name: "typecheck", command: "npm run typecheck" });
     if (scripts.build) checks.push({ name: "build", command: "npm run build" });
   }
-  if (fs14.existsSync(path11.join(projectPath, "go.mod"))) {
+  if (fs17.existsSync(path14.join(projectPath, "go.mod"))) {
     checks.push({ name: "test", command: "go test ./..." });
     checks.push({ name: "build", command: "go build ./..." });
   }
-  if (fs14.existsSync(path11.join(projectPath, "pyproject.toml")) || fs14.existsSync(path11.join(projectPath, "setup.py"))) {
+  if (fs17.existsSync(path14.join(projectPath, "pyproject.toml")) || fs17.existsSync(path14.join(projectPath, "setup.py"))) {
     checks.push({ name: "test", command: "python -m pytest" });
   }
   return checks;
@@ -6972,8 +7076,8 @@ function executeCheck(check, projectPath) {
   }
 }
 async function runMechanicalGate(projectPath) {
-  const harnessDir = path11.join(projectPath, HARNESS_DIR);
-  const gateConfigPath = path11.join(harnessDir, GATE_CONFIG_FILE);
+  const harnessDir = path14.join(projectPath, HARNESS_DIR);
+  const gateConfigPath = path14.join(harnessDir, GATE_CONFIG_FILE);
   try {
     let checks = loadChecksFromConfig(gateConfigPath);
     if (checks.length === 0) {
@@ -6994,8 +7098,8 @@ async function runMechanicalGate(projectPath) {
 }
 
 // src/state/session-summary.ts
-import * as fs15 from "fs";
-import * as path12 from "path";
+import * as fs18 from "fs";
+import * as path15 from "path";
 function formatSummary(data) {
   const lines = [
     "## Session Summary",
@@ -7033,9 +7137,9 @@ function writeSessionSummary(projectPath, sessionSlug, data) {
     const dirResult = resolveSessionDir(projectPath, sessionSlug, { create: true });
     if (!dirResult.ok) return dirResult;
     const sessionDir = dirResult.value;
-    const summaryPath = path12.join(sessionDir, SUMMARY_FILE);
+    const summaryPath = path15.join(sessionDir, SUMMARY_FILE);
     const content = formatSummary(data);
-    fs15.writeFileSync(summaryPath, content);
+    fs18.writeFileSync(summaryPath, content);
     const description = deriveIndexDescription(data);
     updateSessionIndex(projectPath, sessionSlug, description);
     return Ok(void 0);
@@ -7052,11 +7156,11 @@ function loadSessionSummary(projectPath, sessionSlug) {
     const dirResult = resolveSessionDir(projectPath, sessionSlug);
     if (!dirResult.ok) return dirResult;
     const sessionDir = dirResult.value;
-    const summaryPath = path12.join(sessionDir, SUMMARY_FILE);
-    if (!fs15.existsSync(summaryPath)) {
+    const summaryPath = path15.join(sessionDir, SUMMARY_FILE);
+    if (!fs18.existsSync(summaryPath)) {
       return Ok(null);
     }
-    const content = fs15.readFileSync(summaryPath, "utf-8");
+    const content = fs18.readFileSync(summaryPath, "utf-8");
     return Ok(content);
   } catch (error) {
     return Err(
@@ -7068,11 +7172,11 @@ function loadSessionSummary(projectPath, sessionSlug) {
 }
 function listActiveSessions(projectPath) {
   try {
-    const indexPath2 = path12.join(projectPath, HARNESS_DIR, SESSIONS_DIR, SESSION_INDEX_FILE);
-    if (!fs15.existsSync(indexPath2)) {
+    const indexPath2 = path15.join(projectPath, HARNESS_DIR, SESSIONS_DIR, SESSION_INDEX_FILE);
+    if (!fs18.existsSync(indexPath2)) {
       return Ok(null);
     }
-    const content = fs15.readFileSync(indexPath2, "utf-8");
+    const content = fs18.readFileSync(indexPath2, "utf-8");
     return Ok(content);
   } catch (error) {
     return Err(
@@ -7084,8 +7188,8 @@ function listActiveSessions(projectPath) {
 }
 
 // src/state/session-sections.ts
-import * as fs16 from "fs";
-import * as path13 from "path";
+import * as fs19 from "fs";
+import * as path16 from "path";
 import { SESSION_SECTION_NAMES } from "@harness-engineering/types";
 function emptySections() {
   const sections = {};
@@ -7098,12 +7202,12 @@ async function loadSessionState(projectPath, sessionSlug) {
   const dirResult = resolveSessionDir(projectPath, sessionSlug);
   if (!dirResult.ok) return dirResult;
   const sessionDir = dirResult.value;
-  const filePath = path13.join(sessionDir, SESSION_STATE_FILE);
-  if (!fs16.existsSync(filePath)) {
+  const filePath = path16.join(sessionDir, SESSION_STATE_FILE);
+  if (!fs19.existsSync(filePath)) {
     return Ok(emptySections());
   }
   try {
-    const raw = fs16.readFileSync(filePath, "utf-8");
+    const raw = fs19.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
     const sections = emptySections();
     for (const name of SESSION_SECTION_NAMES) {
@@ -7124,9 +7228,9 @@ async function saveSessionState(projectPath, sessionSlug, sections) {
   const dirResult = resolveSessionDir(projectPath, sessionSlug, { create: true });
   if (!dirResult.ok) return dirResult;
   const sessionDir = dirResult.value;
-  const filePath = path13.join(sessionDir, SESSION_STATE_FILE);
+  const filePath = path16.join(sessionDir, SESSION_STATE_FILE);
   try {
-    fs16.writeFileSync(filePath, JSON.stringify(sections, null, 2));
+    fs19.writeFileSync(filePath, JSON.stringify(sections, null, 2));
     return Ok(void 0);
   } catch (error) {
     return Err(
@@ -7175,37 +7279,37 @@ async function updateSessionEntryStatus(projectPath, sessionSlug, section, entry
 }
 function generateEntryId() {
   const timestamp = Date.now().toString(36);
-  const random = Math.random().toString(36).substring(2, 8);
+  const random = Buffer.from(crypto.getRandomValues(new Uint8Array(4))).toString("hex");
   return `${timestamp}-${random}`;
 }
 
 // src/state/session-archive.ts
-import * as fs17 from "fs";
-import * as path14 from "path";
+import * as fs20 from "fs";
+import * as path17 from "path";
 async function archiveSession(projectPath, sessionSlug) {
   const dirResult = resolveSessionDir(projectPath, sessionSlug);
   if (!dirResult.ok) return dirResult;
   const sessionDir = dirResult.value;
-  if (!fs17.existsSync(sessionDir)) {
+  if (!fs20.existsSync(sessionDir)) {
     return Err(new Error(`Session '${sessionSlug}' not found at ${sessionDir}`));
   }
-  const archiveBase = path14.join(projectPath, HARNESS_DIR, ARCHIVE_DIR, "sessions");
+  const archiveBase = path17.join(projectPath, HARNESS_DIR, ARCHIVE_DIR, "sessions");
   try {
-    fs17.mkdirSync(archiveBase, { recursive: true });
+    fs20.mkdirSync(archiveBase, { recursive: true });
     const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
     let archiveName = `${sessionSlug}-${date}`;
     let counter = 1;
-    while (fs17.existsSync(path14.join(archiveBase, archiveName))) {
+    while (fs20.existsSync(path17.join(archiveBase, archiveName))) {
       archiveName = `${sessionSlug}-${date}-${counter}`;
       counter++;
     }
-    const dest = path14.join(archiveBase, archiveName);
+    const dest = path17.join(archiveBase, archiveName);
     try {
-      fs17.renameSync(sessionDir, dest);
+      fs20.renameSync(sessionDir, dest);
     } catch (renameErr) {
       if (renameErr instanceof Error && "code" in renameErr && renameErr.code === "EXDEV") {
-        fs17.cpSync(sessionDir, dest, { recursive: true });
-        fs17.rmSync(sessionDir, { recursive: true });
+        fs20.cpSync(sessionDir, dest, { recursive: true });
+        fs20.rmSync(sessionDir, { recursive: true });
       } else {
         throw renameErr;
       }
@@ -7221,8 +7325,8 @@ async function archiveSession(projectPath, sessionSlug) {
 }
 
 // src/state/events.ts
-import * as fs18 from "fs";
-import * as path15 from "path";
+import * as fs21 from "fs";
+import * as path18 from "path";
 import { z as z7 } from "zod";
 var SkillEventSchema = z7.object({
   timestamp: z7.string(),
@@ -7243,8 +7347,8 @@ function loadKnownHashes(eventsPath) {
   const cached = knownHashesCache.get(eventsPath);
   if (cached) return cached;
   const hashes = /* @__PURE__ */ new Set();
-  if (fs18.existsSync(eventsPath)) {
-    const content = fs18.readFileSync(eventsPath, "utf-8");
+  if (fs21.existsSync(eventsPath)) {
+    const content = fs21.readFileSync(eventsPath, "utf-8");
     const lines = content.split("\n").filter((line) => line.trim() !== "");
     for (const line of lines) {
       try {
@@ -7267,8 +7371,8 @@ async function emitEvent(projectPath, event, options) {
     const dirResult = await getStateDir(projectPath, options?.stream, options?.session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const eventsPath = path15.join(stateDir, EVENTS_FILE);
-    fs18.mkdirSync(stateDir, { recursive: true });
+    const eventsPath = path18.join(stateDir, EVENTS_FILE);
+    fs21.mkdirSync(stateDir, { recursive: true });
     const contentHash = computeEventHash(event, options?.session);
     const knownHashes = loadKnownHashes(eventsPath);
     if (knownHashes.has(contentHash)) {
@@ -7282,7 +7386,7 @@ async function emitEvent(projectPath, event, options) {
     if (options?.session) {
       fullEvent.session = options.session;
     }
-    fs18.appendFileSync(eventsPath, JSON.stringify(fullEvent) + "\n");
+    fs21.appendFileSync(eventsPath, JSON.stringify(fullEvent) + "\n");
     knownHashes.add(contentHash);
     return Ok({ written: true });
   } catch (error) {
@@ -7296,11 +7400,11 @@ async function loadEvents(projectPath, options) {
     const dirResult = await getStateDir(projectPath, options?.stream, options?.session);
     if (!dirResult.ok) return dirResult;
     const stateDir = dirResult.value;
-    const eventsPath = path15.join(stateDir, EVENTS_FILE);
-    if (!fs18.existsSync(eventsPath)) {
+    const eventsPath = path18.join(stateDir, EVENTS_FILE);
+    if (!fs21.existsSync(eventsPath)) {
       return Ok([]);
     }
-    const content = fs18.readFileSync(eventsPath, "utf-8");
+    const content = fs21.readFileSync(eventsPath, "utf-8");
     const lines = content.split("\n").filter((line) => line.trim() !== "");
     const events = [];
     for (const line of lines) {
@@ -7320,15 +7424,25 @@ async function loadEvents(projectPath, options) {
     );
   }
 }
+function phaseTransitionFields(data) {
+  return {
+    from: data?.from ?? "?",
+    to: data?.to ?? "?",
+    suffix: data?.taskCount ? ` (${data.taskCount} tasks)` : ""
+  };
+}
 function formatPhaseTransition(event) {
   const data = event.data;
-  const suffix = data?.taskCount ? ` (${data.taskCount} tasks)` : "";
-  return `phase: ${data?.from ?? "?"} -> ${data?.to ?? "?"}${suffix}`;
+  const { from, to, suffix } = phaseTransitionFields(data);
+  return `phase: ${from} -> ${to}${suffix}`;
+}
+function formatGateChecks(checks) {
+  return checks?.map((c) => `${c.name} ${c.passed ? "Y" : "N"}`).join(", ");
 }
 function formatGateResult(event) {
   const data = event.data;
   const status = data?.passed ? "passed" : "failed";
-  const checks = data?.checks?.map((c) => `${c.name} ${c.passed ? "Y" : "N"}`).join(", ");
+  const checks = formatGateChecks(data?.checks);
   return checks ? `gate: ${status} (${checks})` : `gate: ${status}`;
 }
 function formatHandoffDetail(event) {
@@ -7514,7 +7628,7 @@ async function runMultiTurnPipeline(initialContext, turnExecutor, options) {
 }
 
 // src/security/scanner.ts
-import * as fs20 from "fs/promises";
+import * as fs23 from "fs/promises";
 import { minimatch as minimatch4 } from "minimatch";
 
 // src/security/rules/registry.ts
@@ -7602,36 +7716,38 @@ function resolveRuleSeverity(ruleId, defaultSeverity, overrides, strict) {
 }
 
 // src/security/stack-detector.ts
-import * as fs19 from "fs";
-import * as path16 from "path";
-function detectStack(projectRoot) {
-  const stacks = [];
-  const pkgJsonPath = path16.join(projectRoot, "package.json");
-  if (fs19.existsSync(pkgJsonPath)) {
-    stacks.push("node");
-    try {
-      const pkgJson = JSON.parse(fs19.readFileSync(pkgJsonPath, "utf-8"));
-      const allDeps = {
-        ...pkgJson.dependencies,
-        ...pkgJson.devDependencies
-      };
-      if (allDeps.react || allDeps["react-dom"]) stacks.push("react");
-      if (allDeps.express) stacks.push("express");
-      if (allDeps.koa) stacks.push("koa");
-      if (allDeps.fastify) stacks.push("fastify");
-      if (allDeps.next) stacks.push("next");
-      if (allDeps.vue) stacks.push("vue");
-      if (allDeps.angular || allDeps["@angular/core"]) stacks.push("angular");
-    } catch {
-    }
+import * as fs22 from "fs";
+import * as path19 from "path";
+function nodeSubStacks(allDeps) {
+  const found = [];
+  if (allDeps.react || allDeps["react-dom"]) found.push("react");
+  if (allDeps.express) found.push("express");
+  if (allDeps.koa) found.push("koa");
+  if (allDeps.fastify) found.push("fastify");
+  if (allDeps.next) found.push("next");
+  if (allDeps.vue) found.push("vue");
+  if (allDeps.angular || allDeps["@angular/core"]) found.push("angular");
+  return found;
+}
+function detectNodeStacks(projectRoot) {
+  const pkgJsonPath = path19.join(projectRoot, "package.json");
+  if (!fs22.existsSync(pkgJsonPath)) return [];
+  const stacks = ["node"];
+  try {
+    const pkgJson = JSON.parse(fs22.readFileSync(pkgJsonPath, "utf-8"));
+    const allDeps = { ...pkgJson.dependencies, ...pkgJson.devDependencies };
+    stacks.push(...nodeSubStacks(allDeps));
+  } catch {
   }
-  const goModPath = path16.join(projectRoot, "go.mod");
-  if (fs19.existsSync(goModPath)) {
+  return stacks;
+}
+function detectStack(projectRoot) {
+  const stacks = [...detectNodeStacks(projectRoot)];
+  if (fs22.existsSync(path19.join(projectRoot, "go.mod"))) {
     stacks.push("go");
   }
-  const requirementsPath = path16.join(projectRoot, "requirements.txt");
-  const pyprojectPath = path16.join(projectRoot, "pyproject.toml");
-  if (fs19.existsSync(requirementsPath) || fs19.existsSync(pyprojectPath)) {
+  const hasPython = fs22.existsSync(path19.join(projectRoot, "requirements.txt")) || fs22.existsSync(path19.join(projectRoot, "pyproject.toml"));
+  if (hasPython) {
     stacks.push("python");
   }
   return stacks;
@@ -8462,7 +8578,7 @@ var SecurityScanner = class {
   }
   async scanFile(filePath) {
     if (!this.config.enabled) return [];
-    const content = await fs20.readFile(filePath, "utf-8");
+    const content = await fs23.readFile(filePath, "utf-8");
     return this.scanContentForFile(content, filePath, 1);
   }
   scanContentForFile(content, filePath, startLine = 1) {
@@ -8475,6 +8591,56 @@ var SecurityScanner = class {
     });
     return this.scanLinesWithRules(lines, applicableRules, filePath, startLine);
   }
+  /** Build a finding for a suppression comment that is missing its justification. */
+  buildSuppressionFinding(rule, filePath, lineNumber, line) {
+    return {
+      ruleId: rule.id,
+      ruleName: rule.name,
+      category: rule.category,
+      severity: this.config.strict ? "error" : "warning",
+      confidence: "high",
+      file: filePath,
+      line: lineNumber,
+      match: line.trim(),
+      context: line,
+      message: `Suppression of ${rule.id} requires justification: // harness-ignore ${rule.id}: <reason>`,
+      remediation: `Add justification after colon: // harness-ignore ${rule.id}: false positive because ...`
+    };
+  }
+  /** Check one line against a rule's patterns; return a finding or null. */
+  matchRuleLine(rule, resolved, filePath, lineNumber, line) {
+    for (const pattern of rule.patterns) {
+      pattern.lastIndex = 0;
+      if (!pattern.test(line)) continue;
+      return {
+        ruleId: rule.id,
+        ruleName: rule.name,
+        category: rule.category,
+        severity: resolved,
+        confidence: rule.confidence,
+        file: filePath,
+        line: lineNumber,
+        match: line.trim(),
+        context: line,
+        message: rule.message,
+        remediation: rule.remediation,
+        ...rule.references ? { references: rule.references } : {}
+      };
+    }
+    return null;
+  }
+  /** Scan a single line against a resolved rule; push any findings into the array. */
+  scanLineForRule(rule, resolved, line, lineNumber, filePath, findings) {
+    const suppressionMatch = parseHarnessIgnore(line, rule.id);
+    if (suppressionMatch) {
+      if (!suppressionMatch.justification) {
+        findings.push(this.buildSuppressionFinding(rule, filePath, lineNumber, line));
+      }
+      return;
+    }
+    const finding = this.matchRuleLine(rule, resolved, filePath, lineNumber, line);
+    if (finding) findings.push(finding);
+  }
   /**
    * Core scanning loop shared by scanContent and scanContentForFile.
    * Evaluates each rule against each line, handling suppression (FP gate)
@@ -8491,46 +8657,7 @@ var SecurityScanner = class {
       );
       if (resolved === "off") continue;
       for (let i = 0; i < lines.length; i++) {
-        const line = lines[i] ?? "";
-        const suppressionMatch = parseHarnessIgnore(line, rule.id);
-        if (suppressionMatch) {
-          if (!suppressionMatch.justification) {
-            findings.push({
-              ruleId: rule.id,
-              ruleName: rule.name,
-              category: rule.category,
-              severity: this.config.strict ? "error" : "warning",
-              confidence: "high",
-              file: filePath,
-              line: startLine + i,
-              match: line.trim(),
-              context: line,
-              message: `Suppression of ${rule.id} requires justification: // harness-ignore ${rule.id}: <reason>`,
-              remediation: `Add justification after colon: // harness-ignore ${rule.id}: false positive because ...`
-            });
-          }
-          continue;
-        }
-        for (const pattern of rule.patterns) {
-          pattern.lastIndex = 0;
-          if (pattern.test(line)) {
-            findings.push({
-              ruleId: rule.id,
-              ruleName: rule.name,
-              category: rule.category,
-              severity: resolved,
-              confidence: rule.confidence,
-              file: filePath,
-              line: startLine + i,
-              match: line.trim(),
-              context: line,
-              message: rule.message,
-              remediation: rule.remediation,
-              ...rule.references ? { references: rule.references } : {}
-            });
-            break;
-          }
-        }
+        this.scanLineForRule(rule, resolved, lines[i] ?? "", startLine + i, filePath, findings);
       }
     }
     return findings;
@@ -8789,19 +8916,19 @@ var DESTRUCTIVE_BASH = [
 ];
 
 // src/security/taint.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync12, unlinkSync, mkdirSync as mkdirSync12, readdirSync as readdirSync3 } from "fs";
-import { join as join24, dirname as dirname9 } from "path";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync14, unlinkSync, mkdirSync as mkdirSync13, readdirSync as readdirSync3 } from "fs";
+import { join as join27, dirname as dirname9 } from "path";
 var TAINT_DURATION_MS = 30 * 60 * 1e3;
 var DEFAULT_SESSION_ID = "default";
 function getTaintFilePath(projectRoot, sessionId) {
   const id = sessionId || DEFAULT_SESSION_ID;
-  return join24(projectRoot, ".harness", `session-taint-${id}.json`);
+  return join27(projectRoot, ".harness", `session-taint-${id}.json`);
 }
 function readTaint(projectRoot, sessionId) {
   const filePath = getTaintFilePath(projectRoot, sessionId);
   let content;
   try {
-    content = readFileSync17(filePath, "utf8");
+    content = readFileSync20(filePath, "utf8");
   } catch {
     return null;
   }
@@ -8846,7 +8973,7 @@ function writeTaint(projectRoot, sessionId, reason, findings, source) {
   const filePath = getTaintFilePath(projectRoot, id);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const dir = dirname9(filePath);
-  mkdirSync12(dir, { recursive: true });
+  mkdirSync13(dir, { recursive: true });
   const existing = readTaint(projectRoot, id);
   const maxSeverity = findings.some((f) => f.severity === "high") ? "high" : "medium";
   const taintFindings = findings.map((f) => ({
@@ -8864,7 +8991,7 @@ function writeTaint(projectRoot, sessionId, reason, findings, source) {
     severity: existing?.severity === "high" || maxSeverity === "high" ? "high" : "medium",
     findings: [...existing?.findings || [], ...taintFindings]
   };
-  writeFileSync12(filePath, JSON.stringify(state, null, 2) + "\n");
+  writeFileSync14(filePath, JSON.stringify(state, null, 2) + "\n");
   return state;
 }
 function clearTaint(projectRoot, sessionId) {
@@ -8877,14 +9004,14 @@ function clearTaint(projectRoot, sessionId) {
       return 0;
     }
   }
-  const harnessDir = join24(projectRoot, ".harness");
+  const harnessDir = join27(projectRoot, ".harness");
   let count = 0;
   try {
     const files = readdirSync3(harnessDir);
     for (const file of files) {
       if (file.startsWith("session-taint-") && file.endsWith(".json")) {
         try {
-          unlinkSync(join24(harnessDir, file));
+          unlinkSync(join27(harnessDir, file));
           count++;
         } catch {
         }
@@ -8895,7 +9022,7 @@ function clearTaint(projectRoot, sessionId) {
   return count;
 }
 function listTaintedSessions(projectRoot) {
-  const harnessDir = join24(projectRoot, ".harness");
+  const harnessDir = join27(projectRoot, ".harness");
   const sessions = [];
   try {
     const files = readdirSync3(harnessDir);
@@ -8965,7 +9092,7 @@ function mapSecurityFindings(secFindings, existing) {
 }
 
 // src/ci/check-orchestrator.ts
-import * as path17 from "path";
+import * as path20 from "path";
 import { GraphStore, queryTraceability } from "@harness-engineering/graph";
 var ALL_CHECKS = [
   "validate",
@@ -8980,7 +9107,7 @@ var ALL_CHECKS = [
 ];
 async function runValidateCheck(projectRoot, config) {
   const issues = [];
-  const agentsPath = path17.join(projectRoot, config.agentsMapPath ?? "AGENTS.md");
+  const agentsPath = path20.join(projectRoot, config.agentsMapPath ?? "AGENTS.md");
   const result = await validateAgentsMap(agentsPath);
   if (!result.ok) {
     issues.push({ severity: "error", message: result.error.message });
@@ -9037,7 +9164,7 @@ async function runDepsCheck(projectRoot, config) {
 }
 async function runDocsCheck(projectRoot, config) {
   const issues = [];
-  const docsDir = path17.join(projectRoot, config.docsDir ?? "docs");
+  const docsDir = path20.join(projectRoot, config.docsDir ?? "docs");
   const entropyConfig = config.entropy || {};
   const result = await checkDocCoverage("project", {
     docsDir,
@@ -9222,7 +9349,7 @@ async function runTraceabilityCheck(projectRoot, config) {
   const issues = [];
   const traceConfig = config.traceability || {};
   if (traceConfig.enabled === false) return issues;
-  const graphDir = path17.join(projectRoot, ".harness", "graph");
+  const graphDir = path20.join(projectRoot, ".harness", "graph");
   const store = new GraphStore();
   const loaded = await store.load(graphDir);
   if (!loaded) {
@@ -9351,7 +9478,7 @@ async function runCIChecks(input) {
 }
 
 // src/review/mechanical-checks.ts
-import * as path18 from "path";
+import * as path21 from "path";
 async function runMechanicalChecks(options) {
   const { projectRoot, config, skip = [], changedFiles } = options;
   const findings = [];
@@ -9363,7 +9490,7 @@ async function runMechanicalChecks(options) {
   };
   if (!skip.includes("validate")) {
     try {
-      const agentsPath = path18.join(projectRoot, config.agentsMapPath ?? "AGENTS.md");
+      const agentsPath = path21.join(projectRoot, config.agentsMapPath ?? "AGENTS.md");
       const result = await validateAgentsMap(agentsPath);
       if (!result.ok) {
         statuses.validate = "fail";
@@ -9400,7 +9527,7 @@ async function runMechanicalChecks(options) {
       statuses.validate = "fail";
       findings.push({
         tool: "validate",
-        file: path18.join(projectRoot, "AGENTS.md"),
+        file: path21.join(projectRoot, "AGENTS.md"),
         message: err instanceof Error ? err.message : String(err),
         severity: "error"
       });
@@ -9464,7 +9591,7 @@ async function runMechanicalChecks(options) {
       (async () => {
         const localFindings = [];
         try {
-          const docsDir = path18.join(projectRoot, config.docsDir ?? "docs");
+          const docsDir = path21.join(projectRoot, config.docsDir ?? "docs");
           const result = await checkDocCoverage("project", { docsDir });
           if (!result.ok) {
             statuses["check-docs"] = "warn";
@@ -9491,7 +9618,7 @@ async function runMechanicalChecks(options) {
           statuses["check-docs"] = "warn";
           localFindings.push({
             tool: "check-docs",
-            file: path18.join(projectRoot, "docs"),
+            file: path21.join(projectRoot, "docs"),
             message: err instanceof Error ? err.message : String(err),
             severity: "warning"
           });
@@ -9639,7 +9766,7 @@ function detectChangeType(commitMessage, diff2) {
 }
 
 // src/review/context-scoper.ts
-import * as path19 from "path";
+import * as path22 from "path";
 var ALL_DOMAINS = ["compliance", "bug", "security", "architecture"];
 var SECURITY_PATTERNS = /auth|crypto|password|secret|token|session|cookie|hash|encrypt|decrypt|sql|shell|exec|eval/i;
 function computeContextBudget(diffLines) {
@@ -9647,18 +9774,18 @@ function computeContextBudget(diffLines) {
   return diffLines;
 }
 function isWithinProject(absPath, projectRoot) {
-  const resolvedRoot = path19.resolve(projectRoot) + path19.sep;
-  const resolvedPath = path19.resolve(absPath);
-  return resolvedPath.startsWith(resolvedRoot) || resolvedPath === path19.resolve(projectRoot);
+  const resolvedRoot = path22.resolve(projectRoot) + path22.sep;
+  const resolvedPath = path22.resolve(absPath);
+  return resolvedPath.startsWith(resolvedRoot) || resolvedPath === path22.resolve(projectRoot);
 }
 async function readContextFile(projectRoot, filePath, reason) {
-  const absPath = path19.isAbsolute(filePath) ? filePath : path19.join(projectRoot, filePath);
+  const absPath = path22.isAbsolute(filePath) ? filePath : path22.join(projectRoot, filePath);
   if (!isWithinProject(absPath, projectRoot)) return null;
   const result = await readFileContent(absPath);
   if (!result.ok) return null;
   const content = result.value;
   const lines = content.split("\n").length;
-  const relPath = path19.isAbsolute(filePath) ? relativePosix(projectRoot, filePath) : filePath;
+  const relPath = path22.isAbsolute(filePath) ? relativePosix(projectRoot, filePath) : filePath;
   return { path: relPath, content, reason, lines };
 }
 function extractImportSources(content) {
@@ -9673,18 +9800,18 @@ function extractImportSources(content) {
 }
 async function resolveImportPath(projectRoot, fromFile, importSource) {
   if (!importSource.startsWith(".")) return null;
-  const fromDir = path19.dirname(path19.join(projectRoot, fromFile));
-  const basePath = path19.resolve(fromDir, importSource);
+  const fromDir = path22.dirname(path22.join(projectRoot, fromFile));
+  const basePath = path22.resolve(fromDir, importSource);
   if (!isWithinProject(basePath, projectRoot)) return null;
   const relBase = relativePosix(projectRoot, basePath);
   const candidates = [
     relBase + ".ts",
     relBase + ".tsx",
     relBase + ".mts",
-    path19.join(relBase, "index.ts")
+    path22.join(relBase, "index.ts")
   ];
   for (const candidate of candidates) {
-    const absCandidate = path19.join(projectRoot, candidate);
+    const absCandidate = path22.join(projectRoot, candidate);
     if (await fileExists(absCandidate)) {
       return candidate;
     }
@@ -9692,7 +9819,7 @@ async function resolveImportPath(projectRoot, fromFile, importSource) {
   return null;
 }
 async function findTestFiles(projectRoot, sourceFile) {
-  const baseName = path19.basename(sourceFile, path19.extname(sourceFile));
+  const baseName = path22.basename(sourceFile, path22.extname(sourceFile));
   const pattern = `**/${baseName}.{test,spec}.{ts,tsx,mts}`;
   const results = await findFiles(pattern, projectRoot);
   return results.map((f) => relativePosix(projectRoot, f));
@@ -9950,37 +10077,30 @@ function extractConventionRules(bundle) {
   }
   return rules;
 }
-function findMissingJsDoc(bundle) {
+var EXPORT_RE = /export\s+(?:async\s+)?(?:function|const|class|interface|type)\s+(\w+)/;
+function hasPrecedingJsDoc(lines, i) {
+  for (let j = i - 1; j >= 0; j--) {
+    const prev = lines[j].trim();
+    if (prev === "") continue;
+    return prev.endsWith("*/");
+  }
+  return false;
+}
+function scanFileForMissingJsDoc(filePath, lines) {
   const missing = [];
-  for (const cf of bundle.changedFiles) {
-    const lines = cf.content.split("\n");
-    for (let i = 0; i < lines.length; i++) {
-      const line = lines[i];
-      const exportMatch = line.match(
-        /export\s+(?:async\s+)?(?:function|const|class|interface|type)\s+(\w+)/
-      );
-      if (exportMatch) {
-        let hasJsDoc = false;
-        for (let j = i - 1; j >= 0; j--) {
-          const prev = lines[j].trim();
-          if (prev === "") continue;
-          if (prev.endsWith("*/")) {
-            hasJsDoc = true;
-          }
-          break;
-        }
-        if (!hasJsDoc) {
-          missing.push({
-            file: cf.path,
-            line: i + 1,
-            exportName: exportMatch[1]
-          });
-        }
-      }
+  for (let i = 0; i < lines.length; i++) {
+    const exportMatch = lines[i].match(EXPORT_RE);
+    if (exportMatch && !hasPrecedingJsDoc(lines, i)) {
+      missing.push({ file: filePath, line: i + 1, exportName: exportMatch[1] });
     }
   }
   return missing;
 }
+function findMissingJsDoc(bundle) {
+  return bundle.changedFiles.flatMap(
+    (cf) => scanFileForMissingJsDoc(cf.path, cf.content.split("\n"))
+  );
+}
 function checkMissingJsDoc(bundle, rules) {
   const jsDocRule = rules.find((r) => r.text.toLowerCase().includes("jsdoc"));
   if (!jsDocRule) return [];
@@ -10045,29 +10165,27 @@ function checkChangeTypeSpecific(bundle) {
       return [];
   }
 }
+function checkFileResultTypeConvention(cf, bundle, rule) {
+  const hasTryCatch = cf.content.includes("try {") || cf.content.includes("try{");
+  const usesResult = cf.content.includes("Result<") || cf.content.includes("Result >") || cf.content.includes(": Result");
+  if (!hasTryCatch || usesResult) return null;
+  return {
+    id: makeFindingId("compliance", cf.path, 1, "try-catch not Result"),
+    file: cf.path,
+    lineRange: [1, cf.lines],
+    domain: "compliance",
+    severity: "suggestion",
+    title: "Fallible operation uses try/catch instead of Result type",
+    rationale: `Convention requires using Result type for fallible operations (from ${rule.source}).`,
+    suggestion: "Refactor error handling to use the Result type pattern.",
+    evidence: [`changeType: ${bundle.changeType}`, `Convention rule: "${rule.text}"`],
+    validatedBy: "heuristic"
+  };
+}
 function checkResultTypeConvention(bundle, rules) {
   const resultTypeRule = rules.find((r) => r.text.toLowerCase().includes("result type"));
   if (!resultTypeRule) return [];
-  const findings = [];
-  for (const cf of bundle.changedFiles) {
-    const hasTryCatch = cf.content.includes("try {") || cf.content.includes("try{");
-    const usesResult = cf.content.includes("Result<") || cf.content.includes("Result >") || cf.content.includes(": Result");
-    if (hasTryCatch && !usesResult) {
-      findings.push({
-        id: makeFindingId("compliance", cf.path, 1, "try-catch not Result"),
-        file: cf.path,
-        lineRange: [1, cf.lines],
-        domain: "compliance",
-        severity: "suggestion",
-        title: "Fallible operation uses try/catch instead of Result type",
-        rationale: `Convention requires using Result type for fallible operations (from ${resultTypeRule.source}).`,
-        suggestion: "Refactor error handling to use the Result type pattern.",
-        evidence: [`changeType: ${bundle.changeType}`, `Convention rule: "${resultTypeRule.text}"`],
-        validatedBy: "heuristic"
-      });
-    }
-  }
-  return findings;
+  return bundle.changedFiles.map((cf) => checkFileResultTypeConvention(cf, bundle, resultTypeRule)).filter((f) => f !== null);
 }
 function runComplianceAgent(bundle) {
   const rules = extractConventionRules(bundle);
@@ -10093,53 +10211,58 @@ var BUG_DETECTION_DESCRIPTOR = {
     "Test coverage \u2014 tests for happy path, error paths, and edge cases"
   ]
 };
+function hasPrecedingZeroCheck(lines, i) {
+  const preceding = lines.slice(Math.max(0, i - 3), i).join("\n");
+  return preceding.includes("=== 0") || preceding.includes("!== 0") || preceding.includes("== 0") || preceding.includes("!= 0");
+}
 function detectDivisionByZero(bundle) {
   const findings = [];
   for (const cf of bundle.changedFiles) {
     const lines = cf.content.split("\n");
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
-      if (line.match(/[^=!<>]\s*\/\s*[a-zA-Z_]\w*/) && !line.includes("//")) {
-        const preceding = lines.slice(Math.max(0, i - 3), i).join("\n");
-        if (!preceding.includes("=== 0") && !preceding.includes("!== 0") && !preceding.includes("== 0") && !preceding.includes("!= 0")) {
-          findings.push({
-            id: makeFindingId("bug", cf.path, i + 1, "division by zero"),
-            file: cf.path,
-            lineRange: [i + 1, i + 1],
-            domain: "bug",
-            severity: "important",
-            title: "Potential division by zero without guard",
-            rationale: "Division operation found without a preceding zero check on the divisor. This can cause Infinity or NaN at runtime.",
-            suggestion: "Add a check for zero before dividing, or use a safe division utility.",
-            evidence: [`Line ${i + 1}: ${line.trim()}`],
-            validatedBy: "heuristic"
-          });
-        }
-      }
+      if (!line.match(/[^=!<>]\s*\/\s*[a-zA-Z_]\w*/) || line.includes("//")) continue;
+      if (hasPrecedingZeroCheck(lines, i)) continue;
+      findings.push({
+        id: makeFindingId("bug", cf.path, i + 1, "division by zero"),
+        file: cf.path,
+        lineRange: [i + 1, i + 1],
+        domain: "bug",
+        severity: "important",
+        title: "Potential division by zero without guard",
+        rationale: "Division operation found without a preceding zero check on the divisor. This can cause Infinity or NaN at runtime.",
+        suggestion: "Add a check for zero before dividing, or use a safe division utility.",
+        evidence: [`Line ${i + 1}: ${line.trim()}`],
+        validatedBy: "heuristic"
+      });
     }
   }
   return findings;
 }
+function isEmptyCatch(lines, i) {
+  const line = lines[i];
+  if (line.match(/catch\s*\([^)]*\)\s*\{\s*\}/)) return true;
+  return line.match(/catch\s*\([^)]*\)\s*\{/) !== null && i + 1 < lines.length && lines[i + 1].trim() === "}";
+}
 function detectEmptyCatch(bundle) {
   const findings = [];
   for (const cf of bundle.changedFiles) {
     const lines = cf.content.split("\n");
     for (let i = 0; i < lines.length; i++) {
+      if (!isEmptyCatch(lines, i)) continue;
       const line = lines[i];
-      if (line.match(/catch\s*\([^)]*\)\s*\{\s*\}/) || line.match(/catch\s*\([^)]*\)\s*\{/) && i + 1 < lines.length && lines[i + 1].trim() === "}") {
-        findings.push({
-          id: makeFindingId("bug", cf.path, i + 1, "empty catch block"),
-          file: cf.path,
-          lineRange: [i + 1, i + 2],
-          domain: "bug",
-          severity: "important",
-          title: "Empty catch block silently swallows error",
-          rationale: "Catching an error without handling, logging, or re-throwing it hides failures and makes debugging difficult.",
-          suggestion: "Log the error, re-throw it, or handle it explicitly. If intentionally ignoring, add a comment explaining why.",
-          evidence: [`Line ${i + 1}: ${line.trim()}`],
-          validatedBy: "heuristic"
-        });
-      }
+      findings.push({
+        id: makeFindingId("bug", cf.path, i + 1, "empty catch block"),
+        file: cf.path,
+        lineRange: [i + 1, i + 2],
+        domain: "bug",
+        severity: "important",
+        title: "Empty catch block silently swallows error",
+        rationale: "Catching an error without handling, logging, or re-throwing it hides failures and makes debugging difficult.",
+        suggestion: "Log the error, re-throw it, or handle it explicitly. If intentionally ignoring, add a comment explaining why.",
+        evidence: [`Line ${i + 1}: ${line.trim()}`],
+        validatedBy: "heuristic"
+      });
     }
   }
   return findings;
@@ -10197,34 +10320,102 @@ var SECRET_PATTERNS = [
 ];
 var SQL_CONCAT_PATTERN = /(?:SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER)\s+.*?\+\s*\w+|`[^`]*\$\{[^}]*\}[^`]*(?:SELECT|INSERT|UPDATE|DELETE|WHERE)/i;
 var SHELL_EXEC_PATTERN = /(?:exec|execSync|spawn|spawnSync)\s*\(\s*`[^`]*\$\{/;
+function makeEvalFinding(file, lineNum, line) {
+  return {
+    id: makeFindingId("security", file, lineNum, "eval usage CWE-94"),
+    file,
+    lineRange: [lineNum, lineNum],
+    domain: "security",
+    severity: "critical",
+    title: `Dangerous ${"eval"}() or new ${"Function"}() usage`,
+    rationale: `${"eval"}() and new ${"Function"}() execute arbitrary code. If user input reaches these calls, it enables Remote Code Execution (CWE-94).`,
+    suggestion: "Replace eval/Function with a safe alternative (JSON.parse for data, a sandboxed evaluator for expressions).",
+    evidence: [`Line ${lineNum}: ${line.trim()}`],
+    validatedBy: "heuristic",
+    cweId: "CWE-94",
+    owaspCategory: "A03:2021 Injection",
+    confidence: "high",
+    remediation: "Replace eval/Function with a safe alternative (JSON.parse for data, a sandboxed evaluator for expressions).",
+    references: [
+      "https://cwe.mitre.org/data/definitions/94.html",
+      "https://owasp.org/Top10/A03_2021-Injection/"
+    ]
+  };
+}
+function makeSecretFinding(file, lineNum) {
+  return {
+    id: makeFindingId("security", file, lineNum, "hardcoded secret CWE-798"),
+    file,
+    lineRange: [lineNum, lineNum],
+    domain: "security",
+    severity: "critical",
+    title: "Hardcoded secret or API key detected",
+    rationale: "Hardcoded secrets in source code can be extracted from version history even after removal. Use environment variables or a secrets manager (CWE-798).",
+    suggestion: "Move the secret to an environment variable and access it via process.env.",
+    evidence: [`Line ${lineNum}: [secret detected \u2014 value redacted]`],
+    validatedBy: "heuristic",
+    cweId: "CWE-798",
+    owaspCategory: "A07:2021 Identification and Authentication Failures",
+    confidence: "high",
+    remediation: "Move the secret to an environment variable and access it via process.env.",
+    references: [
+      "https://cwe.mitre.org/data/definitions/798.html",
+      "https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/"
+    ]
+  };
+}
+function makeSqlFinding(file, lineNum, line) {
+  return {
+    id: makeFindingId("security", file, lineNum, "SQL injection CWE-89"),
+    file,
+    lineRange: [lineNum, lineNum],
+    domain: "security",
+    severity: "critical",
+    title: "Potential SQL injection via string concatenation",
+    rationale: "Building SQL queries with string concatenation or template literals allows attackers to inject malicious SQL (CWE-89).",
+    suggestion: "Use parameterized queries or a query builder (e.g., Knex, Prisma) instead of string concatenation.",
+    evidence: [`Line ${lineNum}: ${line.trim()}`],
+    validatedBy: "heuristic",
+    cweId: "CWE-89",
+    owaspCategory: "A03:2021 Injection",
+    confidence: "high",
+    remediation: "Use parameterized queries or a query builder (e.g., Knex, Prisma) instead of string concatenation.",
+    references: [
+      "https://cwe.mitre.org/data/definitions/89.html",
+      "https://owasp.org/Top10/A03_2021-Injection/"
+    ]
+  };
+}
+function makeCommandFinding(file, lineNum, line) {
+  return {
+    id: makeFindingId("security", file, lineNum, "command injection CWE-78"),
+    file,
+    lineRange: [lineNum, lineNum],
+    domain: "security",
+    severity: "critical",
+    title: "Potential command injection via shell exec with interpolation",
+    rationale: "Using exec/spawn with template literal interpolation allows attackers to inject shell commands (CWE-78).",
+    suggestion: "Use execFile or spawn with an arguments array instead of shell string interpolation.",
+    evidence: [`Line ${lineNum}: ${line.trim()}`],
+    validatedBy: "heuristic",
+    cweId: "CWE-78",
+    owaspCategory: "A03:2021 Injection",
+    confidence: "high",
+    remediation: "Use execFile or spawn with an arguments array instead of shell string interpolation.",
+    references: [
+      "https://cwe.mitre.org/data/definitions/78.html",
+      "https://owasp.org/Top10/A03_2021-Injection/"
+    ]
+  };
+}
 function detectEvalUsage(bundle) {
   const findings = [];
   for (const cf of bundle.changedFiles) {
     const lines = cf.content.split("\n");
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
-      if (EVAL_PATTERN.test(line)) {
-        findings.push({
-          id: makeFindingId("security", cf.path, i + 1, "eval usage CWE-94"),
-          file: cf.path,
-          lineRange: [i + 1, i + 1],
-          domain: "security",
-          severity: "critical",
-          title: `Dangerous ${"eval"}() or new ${"Function"}() usage`,
-          rationale: `${"eval"}() and new ${"Function"}() execute arbitrary code. If user input reaches these calls, it enables Remote Code Execution (CWE-94).`,
-          suggestion: "Replace eval/Function with a safe alternative (JSON.parse for data, a sandboxed evaluator for expressions).",
-          evidence: [`Line ${i + 1}: ${line.trim()}`],
-          validatedBy: "heuristic",
-          cweId: "CWE-94",
-          owaspCategory: "A03:2021 Injection",
-          confidence: "high",
-          remediation: "Replace eval/Function with a safe alternative (JSON.parse for data, a sandboxed evaluator for expressions).",
-          references: [
-            "https://cwe.mitre.org/data/definitions/94.html",
-            "https://owasp.org/Top10/A03_2021-Injection/"
-          ]
-        });
-      }
+      if (!EVAL_PATTERN.test(line)) continue;
+      findings.push(makeEvalFinding(cf.path, i + 1, line));
     }
   }
   return findings;
@@ -10236,31 +10427,9 @@ function detectHardcodedSecrets(bundle) {
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
       const codePart = line.includes("//") ? line.slice(0, line.indexOf("//")) : line;
-      for (const pattern of SECRET_PATTERNS) {
-        if (pattern.test(codePart)) {
-          findings.push({
-            id: makeFindingId("security", cf.path, i + 1, "hardcoded secret CWE-798"),
-            file: cf.path,
-            lineRange: [i + 1, i + 1],
-            domain: "security",
-            severity: "critical",
-            title: "Hardcoded secret or API key detected",
-            rationale: "Hardcoded secrets in source code can be extracted from version history even after removal. Use environment variables or a secrets manager (CWE-798).",
-            suggestion: "Move the secret to an environment variable and access it via process.env.",
-            evidence: [`Line ${i + 1}: [secret detected \u2014 value redacted]`],
-            validatedBy: "heuristic",
-            cweId: "CWE-798",
-            owaspCategory: "A07:2021 Identification and Authentication Failures",
-            confidence: "high",
-            remediation: "Move the secret to an environment variable and access it via process.env.",
-            references: [
-              "https://cwe.mitre.org/data/definitions/798.html",
-              "https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/"
-            ]
-          });
-          break;
-        }
-      }
+      const matched = SECRET_PATTERNS.some((p) => p.test(codePart));
+      if (!matched) continue;
+      findings.push(makeSecretFinding(cf.path, i + 1));
     }
   }
   return findings;
@@ -10271,28 +10440,8 @@ function detectSqlInjection(bundle) {
     const lines = cf.content.split("\n");
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
-      if (SQL_CONCAT_PATTERN.test(line)) {
-        findings.push({
-          id: makeFindingId("security", cf.path, i + 1, "SQL injection CWE-89"),
-          file: cf.path,
-          lineRange: [i + 1, i + 1],
-          domain: "security",
-          severity: "critical",
-          title: "Potential SQL injection via string concatenation",
-          rationale: "Building SQL queries with string concatenation or template literals allows attackers to inject malicious SQL (CWE-89).",
-          suggestion: "Use parameterized queries or a query builder (e.g., Knex, Prisma) instead of string concatenation.",
-          evidence: [`Line ${i + 1}: ${line.trim()}`],
-          validatedBy: "heuristic",
-          cweId: "CWE-89",
-          owaspCategory: "A03:2021 Injection",
-          confidence: "high",
-          remediation: "Use parameterized queries or a query builder (e.g., Knex, Prisma) instead of string concatenation.",
-          references: [
-            "https://cwe.mitre.org/data/definitions/89.html",
-            "https://owasp.org/Top10/A03_2021-Injection/"
-          ]
-        });
-      }
+      if (!SQL_CONCAT_PATTERN.test(line)) continue;
+      findings.push(makeSqlFinding(cf.path, i + 1, line));
     }
   }
   return findings;
@@ -10303,28 +10452,8 @@ function detectCommandInjection(bundle) {
     const lines = cf.content.split("\n");
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
-      if (SHELL_EXEC_PATTERN.test(line)) {
-        findings.push({
-          id: makeFindingId("security", cf.path, i + 1, "command injection CWE-78"),
-          file: cf.path,
-          lineRange: [i + 1, i + 1],
-          domain: "security",
-          severity: "critical",
-          title: "Potential command injection via shell exec with interpolation",
-          rationale: "Using exec/spawn with template literal interpolation allows attackers to inject shell commands (CWE-78).",
-          suggestion: "Use execFile or spawn with an arguments array instead of shell string interpolation.",
-          evidence: [`Line ${i + 1}: ${line.trim()}`],
-          validatedBy: "heuristic",
-          cweId: "CWE-78",
-          owaspCategory: "A03:2021 Injection",
-          confidence: "high",
-          remediation: "Use execFile or spawn with an arguments array instead of shell string interpolation.",
-          references: [
-            "https://cwe.mitre.org/data/definitions/78.html",
-            "https://owasp.org/Top10/A03_2021-Injection/"
-          ]
-        });
-      }
+      if (!SHELL_EXEC_PATTERN.test(line)) continue;
+      findings.push(makeCommandFinding(cf.path, i + 1, line));
     }
   }
   return findings;
@@ -10357,10 +10486,15 @@ function isViolationLine(line) {
   const lower = line.toLowerCase();
   return lower.includes("violation") || lower.includes("layer");
 }
-function createLayerViolationFinding(line, fallbackPath) {
-  const fileMatch = line.match(/(?:in\s+)?(\S+\.(?:ts|tsx|js|jsx))(?::(\d+))?/);
+var VIOLATION_FILE_RE = /(?:in\s+)?(\S+\.(?:ts|tsx|js|jsx))(?::(\d+))?/;
+function extractViolationLocation(line, fallbackPath) {
+  const fileMatch = line.match(VIOLATION_FILE_RE);
   const file = fileMatch?.[1] ?? fallbackPath;
   const lineNum = fileMatch?.[2] ? parseInt(fileMatch[2], 10) : 1;
+  return { file, lineNum };
+}
+function createLayerViolationFinding(line, fallbackPath) {
+  const { file, lineNum } = extractViolationLocation(line, fallbackPath);
   return {
     id: makeFindingId("arch", file, lineNum, "layer violation"),
     file,
@@ -10501,7 +10635,7 @@ async function fanOutReview(options) {
 }
 
 // src/review/validate-findings.ts
-import * as path20 from "path";
+import * as path23 from "path";
 var DOWNGRADE_MAP = {
   critical: "important",
   important: "suggestion",
@@ -10522,7 +10656,7 @@ function normalizePath(filePath, projectRoot) {
   let normalized = filePath;
   normalized = normalized.replace(/\\/g, "/");
   const normalizedRoot = projectRoot.replace(/\\/g, "/");
-  if (path20.isAbsolute(normalized)) {
+  if (path23.isAbsolute(normalized)) {
     const root = normalizedRoot.endsWith("/") ? normalizedRoot : normalizedRoot + "/";
     if (normalized.startsWith(root)) {
       normalized = normalized.slice(root.length);
@@ -10533,6 +10667,26 @@ function normalizePath(filePath, projectRoot) {
   }
   return normalized;
 }
+function resolveImportPath2(currentFile, importPath) {
+  const dir = path23.dirname(currentFile);
+  let resolved = path23.join(dir, importPath).replace(/\\/g, "/");
+  if (!resolved.match(/\.(ts|tsx|js|jsx)$/)) {
+    resolved += ".ts";
+  }
+  return path23.normalize(resolved).replace(/\\/g, "/");
+}
+function enqueueImports(content, current, visited, queue, maxDepth) {
+  const importRegex = /import\s+.*?from\s+['"]([^'"]+)['"]/g;
+  let match;
+  while ((match = importRegex.exec(content)) !== null) {
+    const importPath = match[1];
+    if (!importPath.startsWith(".")) continue;
+    const resolved = resolveImportPath2(current.file, importPath);
+    if (!visited.has(resolved) && current.depth + 1 <= maxDepth) {
+      queue.push({ file: resolved, depth: current.depth + 1 });
+    }
+  }
+}
 function followImportChain(fromFile, fileContents, maxDepth = 2) {
   const visited = /* @__PURE__ */ new Set();
   const queue = [{ file: fromFile, depth: 0 }];
@@ -10542,82 +10696,63 @@ function followImportChain(fromFile, fileContents, maxDepth = 2) {
     visited.add(current.file);
     const content = fileContents.get(current.file);
     if (!content) continue;
-    const importRegex = /import\s+.*?from\s+['"]([^'"]+)['"]/g;
-    let match;
-    while ((match = importRegex.exec(content)) !== null) {
-      const importPath = match[1];
-      if (!importPath.startsWith(".")) continue;
-      const dir = path20.dirname(current.file);
-      let resolved = path20.join(dir, importPath).replace(/\\/g, "/");
-      if (!resolved.match(/\.(ts|tsx|js|jsx)$/)) {
-        resolved += ".ts";
-      }
-      resolved = path20.normalize(resolved).replace(/\\/g, "/");
-      if (!visited.has(resolved) && current.depth + 1 <= maxDepth) {
-        queue.push({ file: resolved, depth: current.depth + 1 });
-      }
-    }
+    enqueueImports(content, current, visited, queue, maxDepth);
   }
   visited.delete(fromFile);
   return visited;
 }
+function isMechanicallyExcluded(finding, exclusionSet, projectRoot) {
+  const normalizedFile = normalizePath(finding.file, projectRoot);
+  if (exclusionSet.isExcluded(normalizedFile, finding.lineRange)) return true;
+  if (exclusionSet.isExcluded(finding.file, finding.lineRange)) return true;
+  const absoluteFile = path23.isAbsolute(finding.file) ? finding.file : path23.join(projectRoot, finding.file).replace(/\\/g, "/");
+  return exclusionSet.isExcluded(absoluteFile, finding.lineRange);
+}
+async function validateWithGraph(crossFileRefs, graph) {
+  try {
+    for (const ref of crossFileRefs) {
+      const reachable = await graph.isReachable(ref.from, ref.to);
+      if (!reachable) return { result: "discard" };
+    }
+    return { result: "keep" };
+  } catch {
+    return { result: "fallback" };
+  }
+}
+function validateWithHeuristic(finding, crossFileRefs, fileContents, projectRoot) {
+  if (fileContents) {
+    for (const ref of crossFileRefs) {
+      const normalizedFrom = normalizePath(ref.from, projectRoot);
+      const reachable = followImportChain(normalizedFrom, fileContents, 2);
+      const normalizedTo = normalizePath(ref.to, projectRoot);
+      if (reachable.has(normalizedTo)) {
+        return { ...finding, validatedBy: "heuristic" };
+      }
+    }
+  }
+  return {
+    ...finding,
+    severity: DOWNGRADE_MAP[finding.severity],
+    validatedBy: "heuristic"
+  };
+}
+async function processFinding(finding, exclusionSet, graph, projectRoot, fileContents) {
+  if (isMechanicallyExcluded(finding, exclusionSet, projectRoot)) return null;
+  const crossFileRefs = extractCrossFileRefs(finding);
+  if (crossFileRefs.length === 0) return { ...finding };
+  if (graph) {
+    const { result } = await validateWithGraph(crossFileRefs, graph);
+    if (result === "keep") return { ...finding, validatedBy: "graph" };
+    if (result === "discard") return null;
+  }
+  return validateWithHeuristic(finding, crossFileRefs, fileContents, projectRoot);
+}
 async function validateFindings(options) {
   const { findings, exclusionSet, graph, projectRoot, fileContents } = options;
   const validated = [];
   for (const finding of findings) {
-    const normalizedFile = normalizePath(finding.file, projectRoot);
-    if (exclusionSet.isExcluded(normalizedFile, finding.lineRange) || exclusionSet.isExcluded(finding.file, finding.lineRange)) {
-      continue;
-    }
-    const absoluteFile = path20.isAbsolute(finding.file) ? finding.file : path20.join(projectRoot, finding.file).replace(/\\/g, "/");
-    if (exclusionSet.isExcluded(absoluteFile, finding.lineRange)) {
-      continue;
-    }
-    const crossFileRefs = extractCrossFileRefs(finding);
-    if (crossFileRefs.length === 0) {
-      validated.push({ ...finding });
-      continue;
-    }
-    if (graph) {
-      try {
-        let allReachable = true;
-        for (const ref of crossFileRefs) {
-          const reachable = await graph.isReachable(ref.from, ref.to);
-          if (!reachable) {
-            allReachable = false;
-            break;
-          }
-        }
-        if (allReachable) {
-          validated.push({ ...finding, validatedBy: "graph" });
-        }
-        continue;
-      } catch {
-      }
-    }
-    {
-      let chainValidated = false;
-      if (fileContents) {
-        for (const ref of crossFileRefs) {
-          const normalizedFrom = normalizePath(ref.from, projectRoot);
-          const reachable = followImportChain(normalizedFrom, fileContents, 2);
-          const normalizedTo = normalizePath(ref.to, projectRoot);
-          if (reachable.has(normalizedTo)) {
-            chainValidated = true;
-            break;
-          }
-        }
-      }
-      if (chainValidated) {
-        validated.push({ ...finding, validatedBy: "heuristic" });
-      } else {
-        validated.push({
-          ...finding,
-          severity: DOWNGRADE_MAP[finding.severity],
-          validatedBy: "heuristic"
-        });
-      }
-    }
+    const result = await processFinding(finding, exclusionSet, graph, projectRoot, fileContents);
+    if (result !== null) validated.push(result);
   }
   return validated;
 }
@@ -11218,25 +11353,32 @@ function serializeRoadmap(roadmap) {
 function serializeMilestoneHeading(milestone) {
   return milestone.isBacklog ? "## Backlog" : `## ${milestone.name}`;
 }
+function orDash(value) {
+  return value ?? EM_DASH2;
+}
+function listOrDash(items) {
+  return items.length > 0 ? items.join(", ") : EM_DASH2;
+}
+function serializeExtendedLines(feature) {
+  const hasExtended = feature.assignee !== null || feature.priority !== null || feature.externalId !== null;
+  if (!hasExtended) return [];
+  return [
+    `- **Assignee:** ${orDash(feature.assignee)}`,
+    `- **Priority:** ${orDash(feature.priority)}`,
+    `- **External-ID:** ${orDash(feature.externalId)}`
+  ];
+}
 function serializeFeature(feature) {
-  const spec = feature.spec ?? EM_DASH2;
-  const plans = feature.plans.length > 0 ? feature.plans.join(", ") : EM_DASH2;
-  const blockedBy = feature.blockedBy.length > 0 ? feature.blockedBy.join(", ") : EM_DASH2;
   const lines = [
     `### ${feature.name}`,
     "",
     `- **Status:** ${feature.status}`,
-    `- **Spec:** ${spec}`,
+    `- **Spec:** ${orDash(feature.spec)}`,
     `- **Summary:** ${feature.summary}`,
-    `- **Blockers:** ${blockedBy}`,
-    `- **Plan:** ${plans}`
+    `- **Blockers:** ${listOrDash(feature.blockedBy)}`,
+    `- **Plan:** ${listOrDash(feature.plans)}`,
+    ...serializeExtendedLines(feature)
   ];
-  const hasExtended = feature.assignee !== null || feature.priority !== null || feature.externalId !== null;
-  if (hasExtended) {
-    lines.push(`- **Assignee:** ${feature.assignee ?? EM_DASH2}`);
-    lines.push(`- **Priority:** ${feature.priority ?? EM_DASH2}`);
-    lines.push(`- **External-ID:** ${feature.externalId ?? EM_DASH2}`);
-  }
   return lines;
 }
 function serializeAssignmentHistory(records) {
@@ -11252,8 +11394,8 @@ function serializeAssignmentHistory(records) {
 }
 
 // src/roadmap/sync.ts
-import * as fs21 from "fs";
-import * as path21 from "path";
+import * as fs24 from "fs";
+import * as path24 from "path";
 import { Ok as Ok3 } from "@harness-engineering/types";
 
 // src/roadmap/status-rank.ts
@@ -11270,6 +11412,26 @@ function isRegression(from, to) {
 }
 
 // src/roadmap/sync.ts
+function collectAutopilotStatuses(autopilotPath, featurePlans, allTaskStatuses) {
+  try {
+    const raw = fs24.readFileSync(autopilotPath, "utf-8");
+    const autopilot = JSON.parse(raw);
+    if (!autopilot.phases) return;
+    const linkedPhases = autopilot.phases.filter(
+      (phase) => phase.planPath ? featurePlans.some((p) => p === phase.planPath || phase.planPath.endsWith(p)) : false
+    );
+    for (const phase of linkedPhases) {
+      if (phase.status === "complete") {
+        allTaskStatuses.push("complete");
+      } else if (phase.status === "pending") {
+        allTaskStatuses.push("pending");
+      } else {
+        allTaskStatuses.push("in_progress");
+      }
+    }
+  } catch {
+  }
+}
 function inferStatus(feature, projectPath, allFeatures) {
   if (feature.blockedBy.length > 0) {
     const blockerNotDone = feature.blockedBy.some((blockerName) => {
@@ -11283,10 +11445,10 @@ function inferStatus(feature, projectPath, allFeatures) {
   const featuresWithPlans = allFeatures.filter((f) => f.plans.length > 0);
   const useRootState = featuresWithPlans.length <= 1;
   if (useRootState) {
-    const rootStatePath = path21.join(projectPath, ".harness", "state.json");
-    if (fs21.existsSync(rootStatePath)) {
+    const rootStatePath = path24.join(projectPath, ".harness", "state.json");
+    if (fs24.existsSync(rootStatePath)) {
       try {
-        const raw = fs21.readFileSync(rootStatePath, "utf-8");
+        const raw = fs24.readFileSync(rootStatePath, "utf-8");
         const state = JSON.parse(raw);
         if (state.progress) {
           for (const status of Object.values(state.progress)) {
@@ -11297,34 +11459,15 @@ function inferStatus(feature, projectPath, allFeatures) {
       }
     }
   }
-  const sessionsDir = path21.join(projectPath, ".harness", "sessions");
-  if (fs21.existsSync(sessionsDir)) {
+  const sessionsDir = path24.join(projectPath, ".harness", "sessions");
+  if (fs24.existsSync(sessionsDir)) {
     try {
-      const sessionDirs = fs21.readdirSync(sessionsDir, { withFileTypes: true });
+      const sessionDirs = fs24.readdirSync(sessionsDir, { withFileTypes: true });
       for (const entry of sessionDirs) {
         if (!entry.isDirectory()) continue;
-        const autopilotPath = path21.join(sessionsDir, entry.name, "autopilot-state.json");
-        if (!fs21.existsSync(autopilotPath)) continue;
-        try {
-          const raw = fs21.readFileSync(autopilotPath, "utf-8");
-          const autopilot = JSON.parse(raw);
-          if (!autopilot.phases) continue;
-          const linkedPhases = autopilot.phases.filter(
-            (phase) => phase.planPath ? feature.plans.some((p) => p === phase.planPath || phase.planPath.endsWith(p)) : false
-          );
-          if (linkedPhases.length > 0) {
-            for (const phase of linkedPhases) {
-              if (phase.status === "complete") {
-                allTaskStatuses.push("complete");
-              } else if (phase.status === "pending") {
-                allTaskStatuses.push("pending");
-              } else {
-                allTaskStatuses.push("in_progress");
-              }
-            }
-          }
-        } catch {
-        }
+        const autopilotPath = path24.join(sessionsDir, entry.name, "autopilot-state.json");
+        if (!fs24.existsSync(autopilotPath)) continue;
+        collectAutopilotStatuses(autopilotPath, feature.plans, allTaskStatuses);
       }
     } catch {
     }
@@ -11641,23 +11784,36 @@ var GitHubIssuesSyncAdapter = class {
       return Err3(error instanceof Error ? error : new Error(String(error)));
     }
   }
+  buildLabelsParam() {
+    const filterLabels = this.config.labels ?? [];
+    return filterLabels.length > 0 ? `&labels=${filterLabels.join(",")}` : "";
+  }
+  issueToTicketState(issue) {
+    return {
+      externalId: buildExternalId(this.owner, this.repo, issue.number),
+      title: issue.title,
+      status: issue.state,
+      labels: issue.labels.map((l) => l.name),
+      assignee: issue.assignee ? `@${issue.assignee.login}` : null
+    };
+  }
+  async fetchIssuePage(page, labelsParam) {
+    const perPage = 100;
+    return fetchWithRetry(
+      this.fetchFn,
+      `${this.apiBase}/repos/${this.owner}/${this.repo}/issues?state=all&per_page=${perPage}&page=${page}${labelsParam}`,
+      { method: "GET", headers: this.headers() },
+      this.retryOpts
+    );
+  }
   async fetchAllTickets() {
     try {
-      const filterLabels = this.config.labels ?? [];
-      const labelsParam = filterLabels.length > 0 ? `&labels=${filterLabels.join(",")}` : "";
+      const labelsParam = this.buildLabelsParam();
       const tickets = [];
       let page = 1;
       const perPage = 100;
       while (true) {
-        const response = await fetchWithRetry(
-          this.fetchFn,
-          `${this.apiBase}/repos/${this.owner}/${this.repo}/issues?state=all&per_page=${perPage}&page=${page}${labelsParam}`,
-          {
-            method: "GET",
-            headers: this.headers()
-          },
-          this.retryOpts
-        );
+        const response = await this.fetchIssuePage(page, labelsParam);
         if (!response.ok) {
           const text = await response.text();
           return Err3(new Error(`GitHub API error ${response.status}: ${text}`));
@@ -11665,13 +11821,7 @@ var GitHubIssuesSyncAdapter = class {
         const data = await response.json();
         const issues = data.filter((d) => !d.pull_request);
         for (const issue of issues) {
-          tickets.push({
-            externalId: buildExternalId(this.owner, this.repo, issue.number),
-            title: issue.title,
-            status: issue.state,
-            labels: issue.labels.map((l) => l.name),
-            assignee: issue.assignee ? `@${issue.assignee.login}` : null
-          });
+          tickets.push(this.issueToTicketState(issue));
         }
         if (data.length < perPage) break;
         page++;
@@ -11708,42 +11858,54 @@ var GitHubIssuesSyncAdapter = class {
 };
 
 // src/roadmap/sync-engine.ts
-import * as fs22 from "fs";
+import * as fs25 from "fs";
 function emptySyncResult() {
   return { created: [], updated: [], assignmentChanges: [], errors: [] };
 }
-async function syncToExternal(roadmap, adapter, config, prefetchedTickets) {
-  const result = emptySyncResult();
-  const existingByTitle = /* @__PURE__ */ new Map();
+function buildDedupIndex(tickets, config) {
+  const index = /* @__PURE__ */ new Map();
+  if (!tickets) return index;
   const configLabels = new Set((config.labels ?? []).map((l) => l.toLowerCase()));
-  if (prefetchedTickets) {
-    for (const ticket of prefetchedTickets) {
-      const hasConfigLabels = configLabels.size === 0 || ticket.labels.some((l) => configLabels.has(l.toLowerCase()));
-      if (!hasConfigLabels) continue;
-      const key = ticket.title.toLowerCase();
-      const prev = existingByTitle.get(key);
-      if (!prev || prev.status === "closed" && ticket.status === "open") {
-        existingByTitle.set(key, ticket);
-      }
+  for (const ticket of tickets) {
+    const hasConfigLabels = configLabels.size === 0 || ticket.labels.some((l) => configLabels.has(l.toLowerCase()));
+    if (!hasConfigLabels) continue;
+    const key = ticket.title.toLowerCase();
+    const prev = index.get(key);
+    if (!prev || prev.status === "closed" && ticket.status === "open") {
+      index.set(key, ticket);
     }
   }
+  return index;
+}
+async function resolveExternalId(feature, milestone, adapter, dedupIndex, result) {
+  if (feature.externalId) return true;
+  const existing = dedupIndex.get(feature.name.toLowerCase());
+  if (existing) {
+    feature.externalId = existing.externalId;
+    return true;
+  }
+  const createResult = await adapter.createTicket(feature, milestone);
+  if (createResult.ok) {
+    feature.externalId = createResult.value.externalId;
+    result.created.push(createResult.value);
+  } else {
+    result.errors.push({ featureOrId: feature.name, error: createResult.error });
+  }
+  return false;
+}
+async function syncToExternal(roadmap, adapter, config, prefetchedTickets) {
+  const result = emptySyncResult();
+  const dedupIndex = buildDedupIndex(prefetchedTickets, config);
   for (const milestone of roadmap.milestones) {
     for (const feature of milestone.features) {
-      if (!feature.externalId) {
-        const existing = existingByTitle.get(feature.name.toLowerCase());
-        if (existing) {
-          feature.externalId = existing.externalId;
-        } else {
-          const createResult = await adapter.createTicket(feature, milestone.name);
-          if (createResult.ok) {
-            feature.externalId = createResult.value.externalId;
-            result.created.push(createResult.value);
-          } else {
-            result.errors.push({ featureOrId: feature.name, error: createResult.error });
-          }
-          continue;
-        }
-      }
+      const shouldUpdate = await resolveExternalId(
+        feature,
+        milestone.name,
+        adapter,
+        dedupIndex,
+        result
+      );
+      if (!shouldUpdate) continue;
       const updateResult = await adapter.updateTicket(feature.externalId, feature, milestone.name);
       if (updateResult.ok) {
         result.updated.push(feature.externalId);
@@ -11754,6 +11916,22 @@ async function syncToExternal(roadmap, adapter, config, prefetchedTickets) {
   }
   return result;
 }
+function applyTicketToFeature(ticketState, feature, config, forceSync, result) {
+  if (ticketState.assignee !== feature.assignee) {
+    result.assignmentChanges.push({
+      feature: feature.name,
+      from: feature.assignee,
+      to: ticketState.assignee
+    });
+    feature.assignee = ticketState.assignee;
+  }
+  const resolvedStatus = resolveReverseStatus(ticketState.status, ticketState.labels, config);
+  if (!resolvedStatus || resolvedStatus === feature.status) return;
+  const newStatus = resolvedStatus;
+  if (!forceSync && isRegression(feature.status, newStatus)) return;
+  if (!forceSync && feature.status === "blocked" && newStatus === "planned") return;
+  feature.status = newStatus;
+}
 async function syncFromExternal(roadmap, adapter, config, options, prefetchedTickets) {
   const result = emptySyncResult();
   const forceSync = options?.forceSync ?? false;
@@ -11780,22 +11958,7 @@ async function syncFromExternal(roadmap, adapter, config, options, prefetchedTic
   for (const ticketState of tickets) {
     const feature = featureByExternalId.get(ticketState.externalId);
     if (!feature) continue;
-    if (ticketState.assignee !== feature.assignee) {
-      result.assignmentChanges.push({
-        feature: feature.name,
-        from: feature.assignee,
-        to: ticketState.assignee
-      });
-      feature.assignee = ticketState.assignee;
-    }
-    const resolvedStatus = resolveReverseStatus(ticketState.status, ticketState.labels, config);
-    if (resolvedStatus && resolvedStatus !== feature.status) {
-      const newStatus = resolvedStatus;
-      if (!forceSync && isRegression(feature.status, newStatus)) {
-        continue;
-      }
-      feature.status = newStatus;
-    }
+    applyTicketToFeature(ticketState, feature, config, forceSync, result);
   }
   return result;
 }
@@ -11808,7 +11971,7 @@ async function fullSync(roadmapPath, adapter, config, options) {
   });
   await previousSync;
   try {
-    const raw = fs22.readFileSync(roadmapPath, "utf-8");
+    const raw = fs25.readFileSync(roadmapPath, "utf-8");
     const parseResult = parseRoadmap(raw);
     if (!parseResult.ok) {
       return {
@@ -11821,7 +11984,7 @@ async function fullSync(roadmapPath, adapter, config, options) {
     const tickets = fetchResult.ok ? fetchResult.value : void 0;
     const pushResult = await syncToExternal(roadmap, adapter, config, tickets);
     const pullResult = await syncFromExternal(roadmap, adapter, config, options, tickets);
-    fs22.writeFileSync(roadmapPath, serializeRoadmap(roadmap), "utf-8");
+    fs25.writeFileSync(roadmapPath, serializeRoadmap(roadmap), "utf-8");
     return {
       created: pushResult.created,
       updated: pushResult.updated,
@@ -11843,6 +12006,24 @@ var PRIORITY_RANK = {
 var POSITION_WEIGHT = 0.5;
 var DEPENDENTS_WEIGHT = 0.3;
 var AFFINITY_WEIGHT = 0.2;
+function isEligibleCandidate(feature, allFeatureNames, doneFeatures) {
+  if (feature.status !== "planned" && feature.status !== "backlog") return false;
+  const isBlocked = feature.blockedBy.some((blocker) => {
+    const key = blocker.toLowerCase();
+    return allFeatureNames.has(key) && !doneFeatures.has(key);
+  });
+  return !isBlocked;
+}
+function computeAffinityScore(feature, milestoneName, milestoneMap, userCompletedFeatures) {
+  if (userCompletedFeatures.size === 0) return 0;
+  const completedBlocker = feature.blockedBy.some(
+    (b) => userCompletedFeatures.has(b.toLowerCase())
+  );
+  if (completedBlocker) return 1;
+  const siblings = milestoneMap.get(milestoneName) ?? [];
+  const completedSibling = siblings.some((s) => userCompletedFeatures.has(s));
+  return completedSibling ? 0.5 : 0;
+}
 function scoreRoadmapCandidates(roadmap, options) {
   const allFeatures = roadmap.milestones.flatMap((m) => m.features);
   const allFeatureNames = new Set(allFeatures.map((f) => f.name.toLowerCase()));
@@ -11881,33 +12062,18 @@ function scoreRoadmapCandidates(roadmap, options) {
   const candidates = [];
   let globalPosition = 0;
   for (const ms of roadmap.milestones) {
-    for (let featureIdx = 0; featureIdx < ms.features.length; featureIdx++) {
-      const feature = ms.features[featureIdx];
+    for (const feature of ms.features) {
       globalPosition++;
-      if (feature.status !== "planned" && feature.status !== "backlog") continue;
-      const isBlocked = feature.blockedBy.some((blocker) => {
-        const key = blocker.toLowerCase();
-        return allFeatureNames.has(key) && !doneFeatures.has(key);
-      });
-      if (isBlocked) continue;
+      if (!isEligibleCandidate(feature, allFeatureNames, doneFeatures)) continue;
       const positionScore = 1 - (globalPosition - 1) / totalPositions;
       const deps = dependentsCount.get(feature.name.toLowerCase()) ?? 0;
       const dependentsScore = deps / maxDependents;
-      let affinityScore = 0;
-      if (userCompletedFeatures.size > 0) {
-        const completedBlockers = feature.blockedBy.filter(
-          (b) => userCompletedFeatures.has(b.toLowerCase())
-        );
-        if (completedBlockers.length > 0) {
-          affinityScore = 1;
-        } else {
-          const siblings = milestoneMap.get(ms.name) ?? [];
-          const completedSiblings = siblings.filter((s) => userCompletedFeatures.has(s));
-          if (completedSiblings.length > 0) {
-            affinityScore = 0.5;
-          }
-        }
-      }
+      const affinityScore = computeAffinityScore(
+        feature,
+        ms.name,
+        milestoneMap,
+        userCompletedFeatures
+      );
       const weightedScore = POSITION_WEIGHT * positionScore + DEPENDENTS_WEIGHT * dependentsScore + AFFINITY_WEIGHT * affinityScore;
       const priorityTier = feature.priority ? PRIORITY_RANK[feature.priority] : null;
       candidates.push({
@@ -11980,18 +12146,18 @@ var EmitInteractionInputSchema = z9.object({
 });
 
 // src/blueprint/scanner.ts
-import * as fs23 from "fs/promises";
-import * as path22 from "path";
+import * as fs26 from "fs/promises";
+import * as path25 from "path";
 var ProjectScanner = class {
   constructor(rootDir) {
     this.rootDir = rootDir;
   }
   rootDir;
   async scan() {
-    let projectName = path22.basename(this.rootDir);
+    let projectName = path25.basename(this.rootDir);
     try {
-      const pkgPath = path22.join(this.rootDir, "package.json");
-      const pkgRaw = await fs23.readFile(pkgPath, "utf-8");
+      const pkgPath = path25.join(this.rootDir, "package.json");
+      const pkgRaw = await fs26.readFile(pkgPath, "utf-8");
       const pkg = JSON.parse(pkgRaw);
       if (pkg.name) projectName = pkg.name;
     } catch {
@@ -12032,8 +12198,8 @@ var ProjectScanner = class {
 };
 
 // src/blueprint/generator.ts
-import * as fs24 from "fs/promises";
-import * as path23 from "path";
+import * as fs27 from "fs/promises";
+import * as path26 from "path";
 import * as ejs from "ejs";
 
 // src/blueprint/templates.ts
@@ -12117,19 +12283,19 @@ var BlueprintGenerator = class {
       styles: STYLES,
       scripts: SCRIPTS
     });
-    await fs24.mkdir(options.outputDir, { recursive: true });
-    await fs24.writeFile(path23.join(options.outputDir, "index.html"), html);
+    await fs27.mkdir(options.outputDir, { recursive: true });
+    await fs27.writeFile(path26.join(options.outputDir, "index.html"), html);
   }
 };
 
 // src/update-checker.ts
-import * as fs25 from "fs";
-import * as path24 from "path";
+import * as fs28 from "fs";
+import * as path27 from "path";
 import * as os from "os";
 import { spawn } from "child_process";
 function getStatePath() {
   const home = process.env["HOME"] || os.homedir();
-  return path24.join(home, ".harness", "update-check.json");
+  return path27.join(home, ".harness", "update-check.json");
 }
 function isUpdateCheckEnabled(configInterval) {
   if (process.env["HARNESS_NO_UPDATE_CHECK"] === "1") return false;
@@ -12142,7 +12308,7 @@ function shouldRunCheck(state, intervalMs) {
 }
 function readCheckState() {
   try {
-    const raw = fs25.readFileSync(getStatePath(), "utf-8");
+    const raw = fs28.readFileSync(getStatePath(), "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && "lastCheckTime" in parsed && typeof parsed.lastCheckTime === "number" && "currentVersion" in parsed && typeof parsed.currentVersion === "string") {
       const state = parsed;
@@ -12159,7 +12325,7 @@ function readCheckState() {
 }
 function spawnBackgroundCheck(currentVersion) {
   const statePath = getStatePath();
-  const stateDir = path24.dirname(statePath);
+  const stateDir = path27.dirname(statePath);
   const script = `
 const { execSync } = require('child_process');
 const fs = require('fs');
@@ -12248,9 +12414,9 @@ async function resolveWasmPath(grammarName) {
   const { createRequire } = await import("module");
   const require2 = createRequire(import.meta.url ?? __filename);
   const pkgPath = require2.resolve("tree-sitter-wasms/package.json");
-  const path28 = await import("path");
-  const pkgDir = path28.dirname(pkgPath);
-  return path28.join(pkgDir, "out", `${grammarName}.wasm`);
+  const path31 = await import("path");
+  const pkgDir = path31.dirname(pkgPath);
+  return path31.join(pkgDir, "out", `${grammarName}.wasm`);
 }
 async function loadLanguage(lang) {
   const grammarName = GRAMMAR_MAP[lang];
@@ -12654,8 +12820,8 @@ function getModelPrice(model, dataset) {
 }
 
 // src/pricing/cache.ts
-import * as fs26 from "fs/promises";
-import * as path25 from "path";
+import * as fs29 from "fs/promises";
+import * as path28 from "path";
 
 // src/pricing/fallback.json
 var fallback_default = {
@@ -12708,14 +12874,14 @@ var LITELLM_PRICING_URL = "https://raw.githubusercontent.com/BerriAI/litellm/mai
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 var STALENESS_WARNING_DAYS = 7;
 function getCachePath(projectRoot) {
-  return path25.join(projectRoot, ".harness", "cache", "pricing.json");
+  return path28.join(projectRoot, ".harness", "cache", "pricing.json");
 }
 function getStalenessMarkerPath(projectRoot) {
-  return path25.join(projectRoot, ".harness", "cache", "staleness-marker.json");
+  return path28.join(projectRoot, ".harness", "cache", "staleness-marker.json");
 }
 async function readDiskCache(projectRoot) {
   try {
-    const raw = await fs26.readFile(getCachePath(projectRoot), "utf-8");
+    const raw = await fs29.readFile(getCachePath(projectRoot), "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -12723,8 +12889,8 @@ async function readDiskCache(projectRoot) {
 }
 async function writeDiskCache(projectRoot, data) {
   const cachePath = getCachePath(projectRoot);
-  await fs26.mkdir(path25.dirname(cachePath), { recursive: true });
-  await fs26.writeFile(cachePath, JSON.stringify(data, null, 2));
+  await fs29.mkdir(path28.dirname(cachePath), { recursive: true });
+  await fs29.writeFile(cachePath, JSON.stringify(data, null, 2));
 }
 async function fetchFromNetwork() {
   try {
@@ -12751,7 +12917,7 @@ function loadFallbackDataset() {
 async function checkAndWarnStaleness(projectRoot) {
   const markerPath = getStalenessMarkerPath(projectRoot);
   try {
-    const raw = await fs26.readFile(markerPath, "utf-8");
+    const raw = await fs29.readFile(markerPath, "utf-8");
     const marker = JSON.parse(raw);
     const firstUse = new Date(marker.firstFallbackUse).getTime();
     const now = Date.now();
@@ -12763,8 +12929,8 @@ async function checkAndWarnStaleness(projectRoot) {
     }
   } catch {
     try {
-      await fs26.mkdir(path25.dirname(markerPath), { recursive: true });
-      await fs26.writeFile(
+      await fs29.mkdir(path28.dirname(markerPath), { recursive: true });
+      await fs29.writeFile(
         markerPath,
         JSON.stringify({ firstFallbackUse: (/* @__PURE__ */ new Date()).toISOString() })
       );
@@ -12774,7 +12940,7 @@ async function checkAndWarnStaleness(projectRoot) {
 }
 async function clearStalenessMarker(projectRoot) {
   try {
-    await fs26.unlink(getStalenessMarkerPath(projectRoot));
+    await fs29.unlink(getStalenessMarkerPath(projectRoot));
   } catch {
   }
 }
@@ -12820,8 +12986,7 @@ function calculateCost(record, dataset) {
 }
 
 // src/usage/aggregator.ts
-function aggregateBySession(records) {
-  if (records.length === 0) return [];
+function bucketRecordsBySession(records) {
   const sessionMap = /* @__PURE__ */ new Map();
   for (const record of records) {
     const tagged = record;
@@ -12837,58 +13002,104 @@ function aggregateBySession(records) {
     }
     bucket.allRecords.push(tagged);
   }
+  return sessionMap;
+}
+function accumulateCost(running, recordCost) {
+  if (recordCost != null && running != null) {
+    return running + recordCost;
+  }
+  if (recordCost == null) {
+    return null;
+  }
+  return running;
+}
+function sumRecordTokens(tokenSource) {
+  const tokens = { inputTokens: 0, outputTokens: 0, totalTokens: 0 };
+  let cacheCreation;
+  let cacheRead;
+  let costMicroUSD = 0;
+  let model;
+  for (const r of tokenSource) {
+    tokens.inputTokens += r.tokens.inputTokens;
+    tokens.outputTokens += r.tokens.outputTokens;
+    tokens.totalTokens += r.tokens.totalTokens;
+    if (r.cacheCreationTokens != null) {
+      cacheCreation = (cacheCreation ?? 0) + r.cacheCreationTokens;
+    }
+    if (r.cacheReadTokens != null) {
+      cacheRead = (cacheRead ?? 0) + r.cacheReadTokens;
+    }
+    costMicroUSD = accumulateCost(costMicroUSD, r.costMicroUSD);
+    if (!model && r.model) {
+      model = r.model;
+    }
+  }
+  return { tokens, cacheCreation, cacheRead, costMicroUSD, model };
+}
+function findModel(records) {
+  for (const r of records) {
+    if (r.model) return r.model;
+  }
+  return void 0;
+}
+function determineSource(hasHarness, hasCC) {
+  if (hasHarness && hasCC) return "merged";
+  if (hasCC) return "claude-code";
+  return "harness";
+}
+function applyOptionalFields(session, totals, model) {
+  if (model) session.model = model;
+  if (totals.cacheCreation != null) session.cacheCreationTokens = totals.cacheCreation;
+  if (totals.cacheRead != null) session.cacheReadTokens = totals.cacheRead;
+}
+function buildSessionUsage(sessionId, bucket) {
+  const hasHarness = bucket.harnessRecords.length > 0;
+  const hasCC = bucket.ccRecords.length > 0;
+  const tokenSource = hasHarness ? bucket.harnessRecords : bucket.ccRecords;
+  const totals = sumRecordTokens(tokenSource);
+  const model = totals.model ?? (hasCC ? findModel(bucket.ccRecords) : void 0);
+  const timestamps = bucket.allRecords.map((r) => r.timestamp).sort();
+  const session = {
+    sessionId,
+    firstTimestamp: timestamps[0] ?? "",
+    lastTimestamp: timestamps[timestamps.length - 1] ?? "",
+    tokens: totals.tokens,
+    costMicroUSD: totals.costMicroUSD,
+    source: determineSource(hasHarness, hasCC)
+  };
+  applyOptionalFields(session, totals, model);
+  return session;
+}
+function accumulateIntoDayBucket(day, record) {
+  day.sessions.add(record.sessionId);
+  day.tokens.inputTokens += record.tokens.inputTokens;
+  day.tokens.outputTokens += record.tokens.outputTokens;
+  day.tokens.totalTokens += record.tokens.totalTokens;
+  if (record.cacheCreationTokens != null) {
+    day.cacheCreation = (day.cacheCreation ?? 0) + record.cacheCreationTokens;
+  }
+  if (record.cacheReadTokens != null) {
+    day.cacheRead = (day.cacheRead ?? 0) + record.cacheReadTokens;
+  }
+  day.costMicroUSD = accumulateCost(day.costMicroUSD, record.costMicroUSD);
+  if (record.model) {
+    day.models.add(record.model);
+  }
+}
+function createDayBucket() {
+  return {
+    sessions: /* @__PURE__ */ new Set(),
+    tokens: { inputTokens: 0, outputTokens: 0, totalTokens: 0 },
+    costMicroUSD: 0,
+    models: /* @__PURE__ */ new Set()
+  };
+}
+function aggregateBySession(records) {
+  if (records.length === 0) return [];
+  const sessionMap = bucketRecordsBySession(records);
   const results = [];
   for (const [sessionId, bucket] of sessionMap) {
-    const hasHarness = bucket.harnessRecords.length > 0;
-    const hasCC = bucket.ccRecords.length > 0;
-    const isMerged = hasHarness && hasCC;
-    const tokenSource = hasHarness ? bucket.harnessRecords : bucket.ccRecords;
-    const tokens = { inputTokens: 0, outputTokens: 0, totalTokens: 0 };
-    let cacheCreation;
-    let cacheRead;
-    let costMicroUSD = 0;
-    let model;
-    for (const r of tokenSource) {
-      tokens.inputTokens += r.tokens.inputTokens;
-      tokens.outputTokens += r.tokens.outputTokens;
-      tokens.totalTokens += r.tokens.totalTokens;
-      if (r.cacheCreationTokens != null) {
-        cacheCreation = (cacheCreation ?? 0) + r.cacheCreationTokens;
-      }
-      if (r.cacheReadTokens != null) {
-        cacheRead = (cacheRead ?? 0) + r.cacheReadTokens;
-      }
-      if (r.costMicroUSD != null && costMicroUSD != null) {
-        costMicroUSD += r.costMicroUSD;
-      } else if (r.costMicroUSD == null) {
-        costMicroUSD = null;
-      }
-      if (!model && r.model) {
-        model = r.model;
-      }
-    }
-    if (!model && hasCC) {
-      for (const r of bucket.ccRecords) {
-        if (r.model) {
-          model = r.model;
-          break;
-        }
-      }
-    }
-    const timestamps = bucket.allRecords.map((r) => r.timestamp).sort();
-    const source = isMerged ? "merged" : hasCC ? "claude-code" : "harness";
-    const session = {
-      sessionId,
-      firstTimestamp: timestamps[0] ?? "",
-      lastTimestamp: timestamps[timestamps.length - 1] ?? "",
-      tokens,
-      costMicroUSD,
-      source
-    };
-    if (model) session.model = model;
-    if (cacheCreation != null) session.cacheCreationTokens = cacheCreation;
-    if (cacheRead != null) session.cacheReadTokens = cacheRead;
-    results.push(session);
+    results.push(buildSessionUsage(sessionId, bucket));
   }
   results.sort((a, b) => b.firstTimestamp.localeCompare(a.firstTimestamp));
   return results;
@@ -12899,32 +13110,9 @@ function aggregateByDay(records) {
   for (const record of records) {
     const date = record.timestamp.slice(0, 10);
     if (!dayMap.has(date)) {
-      dayMap.set(date, {
-        sessions: /* @__PURE__ */ new Set(),
-        tokens: { inputTokens: 0, outputTokens: 0, totalTokens: 0 },
-        costMicroUSD: 0,
-        models: /* @__PURE__ */ new Set()
-      });
-    }
-    const day = dayMap.get(date);
-    day.sessions.add(record.sessionId);
-    day.tokens.inputTokens += record.tokens.inputTokens;
-    day.tokens.outputTokens += record.tokens.outputTokens;
-    day.tokens.totalTokens += record.tokens.totalTokens;
-    if (record.cacheCreationTokens != null) {
-      day.cacheCreation = (day.cacheCreation ?? 0) + record.cacheCreationTokens;
-    }
-    if (record.cacheReadTokens != null) {
-      day.cacheRead = (day.cacheRead ?? 0) + record.cacheReadTokens;
-    }
-    if (record.costMicroUSD != null && day.costMicroUSD != null) {
-      day.costMicroUSD += record.costMicroUSD;
-    } else if (record.costMicroUSD == null) {
-      day.costMicroUSD = null;
-    }
-    if (record.model) {
-      day.models.add(record.model);
+      dayMap.set(date, createDayBucket());
     }
+    accumulateIntoDayBucket(dayMap.get(date), record);
   }
   const results = [];
   for (const [date, day] of dayMap) {
@@ -12944,8 +13132,29 @@ function aggregateByDay(records) {
 }
 
 // src/usage/jsonl-reader.ts
-import * as fs27 from "fs";
-import * as path26 from "path";
+import * as fs30 from "fs";
+import * as path29 from "path";
+function extractTokenUsage(entry, lineNumber) {
+  const tokenUsage = entry.token_usage;
+  if (!tokenUsage || typeof tokenUsage !== "object") {
+    console.warn(
+      `[harness usage] Skipping malformed JSONL line ${lineNumber}: missing token_usage`
+    );
+    return null;
+  }
+  return tokenUsage;
+}
+function applyOptionalFields2(record, entry) {
+  if (entry.cache_creation_tokens != null) {
+    record.cacheCreationTokens = entry.cache_creation_tokens;
+  }
+  if (entry.cache_read_tokens != null) {
+    record.cacheReadTokens = entry.cache_read_tokens;
+  }
+  if (entry.model != null) {
+    record.model = entry.model;
+  }
+}
 function parseLine(line, lineNumber) {
   let entry;
   try {
@@ -12954,13 +13163,8 @@ function parseLine(line, lineNumber) {
     console.warn(`[harness usage] Skipping malformed JSONL line ${lineNumber}`);
     return null;
   }
-  const tokenUsage = entry.token_usage;
-  if (!tokenUsage || typeof tokenUsage !== "object") {
-    console.warn(
-      `[harness usage] Skipping malformed JSONL line ${lineNumber}: missing token_usage`
-    );
-    return null;
-  }
+  const tokenUsage = extractTokenUsage(entry, lineNumber);
+  if (!tokenUsage) return null;
   const inputTokens = tokenUsage.input_tokens ?? 0;
   const outputTokens = tokenUsage.output_tokens ?? 0;
   const record = {
@@ -12972,22 +13176,14 @@ function parseLine(line, lineNumber) {
       totalTokens: inputTokens + outputTokens
     }
   };
-  if (entry.cache_creation_tokens != null) {
-    record.cacheCreationTokens = entry.cache_creation_tokens;
-  }
-  if (entry.cache_read_tokens != null) {
-    record.cacheReadTokens = entry.cache_read_tokens;
-  }
-  if (entry.model != null) {
-    record.model = entry.model;
-  }
+  applyOptionalFields2(record, entry);
   return record;
 }
 function readCostRecords(projectRoot) {
-  const costsFile = path26.join(projectRoot, ".harness", "metrics", "costs.jsonl");
+  const costsFile = path29.join(projectRoot, ".harness", "metrics", "costs.jsonl");
   let raw;
   try {
-    raw = fs27.readFileSync(costsFile, "utf-8");
+    raw = fs30.readFileSync(costsFile, "utf-8");
   } catch {
     return [];
   }
@@ -13005,8 +13201,8 @@ function readCostRecords(projectRoot) {
 }
 
 // src/usage/cc-parser.ts
-import * as fs28 from "fs";
-import * as path27 from "path";
+import * as fs31 from "fs";
+import * as path30 from "path";
 import * as os2 from "os";
 function extractUsage(entry) {
   if (entry.type !== "assistant") return null;
@@ -13015,6 +13211,14 @@ function extractUsage(entry) {
   const usage = message.usage;
   return usage && typeof usage === "object" && !Array.isArray(usage) ? usage : null;
 }
+function applyOptionalCCFields(record, message, usage) {
+  const model = message.model;
+  if (model) record.model = model;
+  const cacheCreate = usage.cache_creation_input_tokens;
+  const cacheRead = usage.cache_read_input_tokens;
+  if (typeof cacheCreate === "number" && cacheCreate > 0) record.cacheCreationTokens = cacheCreate;
+  if (typeof cacheRead === "number" && cacheRead > 0) record.cacheReadTokens = cacheRead;
+}
 function buildRecord(entry, usage) {
   const inputTokens = Number(usage.input_tokens) || 0;
   const outputTokens = Number(usage.output_tokens) || 0;
@@ -13025,12 +13229,7 @@ function buildRecord(entry, usage) {
     tokens: { inputTokens, outputTokens, totalTokens: inputTokens + outputTokens },
     _source: "claude-code"
   };
-  const model = message.model;
-  if (model) record.model = model;
-  const cacheCreate = usage.cache_creation_input_tokens;
-  const cacheRead = usage.cache_read_input_tokens;
-  if (typeof cacheCreate === "number" && cacheCreate > 0) record.cacheCreationTokens = cacheCreate;
-  if (typeof cacheRead === "number" && cacheRead > 0) record.cacheReadTokens = cacheRead;
+  applyOptionalCCFields(record, message, usage);
   return record;
 }
 function parseCCLine(line, filePath, lineNumber) {
@@ -13039,7 +13238,7 @@ function parseCCLine(line, filePath, lineNumber) {
     entry = JSON.parse(line);
   } catch {
     console.warn(
-      `[harness usage] Skipping malformed CC JSONL line ${lineNumber} in ${path27.basename(filePath)}`
+      `[harness usage] Skipping malformed CC JSONL line ${lineNumber} in ${path30.basename(filePath)}`
     );
     return null;
   }
@@ -13053,7 +13252,7 @@ function parseCCLine(line, filePath, lineNumber) {
 function readCCFile(filePath) {
   let raw;
   try {
-    raw = fs28.readFileSync(filePath, "utf-8");
+    raw = fs31.readFileSync(filePath, "utf-8");
   } catch {
     return [];
   }
@@ -13075,10 +13274,10 @@ function readCCFile(filePath) {
 }
 function parseCCRecords() {
   const homeDir = process.env.HOME ?? os2.homedir();
-  const projectsDir = path27.join(homeDir, ".claude", "projects");
+  const projectsDir = path30.join(homeDir, ".claude", "projects");
   let projectDirs;
   try {
-    projectDirs = fs28.readdirSync(projectsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => path27.join(projectsDir, d.name));
+    projectDirs = fs31.readdirSync(projectsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => path30.join(projectsDir, d.name));
   } catch {
     return [];
   }
@@ -13086,7 +13285,7 @@ function parseCCRecords() {
   for (const dir of projectDirs) {
     let files;
     try {
-      files = fs28.readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => path27.join(dir, f));
+      files = fs31.readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => path30.join(dir, f));
     } catch {
       continue;
     }
@@ -13098,7 +13297,7 @@ function parseCCRecords() {
 }
 
 // src/index.ts
-var VERSION = "0.15.0";
+var VERSION = "0.21.1";
 export {
   AGENT_DESCRIPTORS,
   ARCHITECTURE_DESCRIPTOR,
@@ -13128,7 +13327,6 @@ export {
   ConfirmationSchema,
   ConsoleSink,
   ConstraintRuleSchema,
-  ContentPipeline,
   ContributingFeatureSchema,
   ContributionsSchema,
   CouplingCollector,
@@ -13237,6 +13435,7 @@ export {
   clearFailuresCache,
   clearLearningsCache,
   clearTaint,
+  computeContentHash,
   computeOverallSeverity,
   computeScanExitCode,
   configureFeedback,
@@ -13330,6 +13529,7 @@ export {
   migrateToStreams,
   networkRules,
   nodeRules,
+  normalizeLearningContent,
   parseCCRecords,
   parseDateFromEntry,
   parseDiff,