@harness-engineering/core 0.27.0 → 0.28.1

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { Result, LoadingLevel, SkillContextBudget, InsightsKey, InsightsReport, SessionSectionName, SessionEntry, SessionSections, WorkflowStep, WorkflowStepResult, Workflow, WorkflowResult, SkillLifecycleHooks, SkillContext, SkillResult, TurnContext, CICheckName, CIFailOnSeverity, CICheckReport, RoadmapFeature, ExternalTicket, ExternalTicketState, TrackerComment, TrackerSyncConfig, CINotifyOptions, Roadmap, FeatureStatus, SyncResult, Priority, ModelPricing, UsageRecord, DailyUsage, SessionUsage, SkillInvocationRecord, SkillAdoptionSummary, NotificationsConfig, StabilityTier, TelemetryIdentity, TelemetryConfig, ConsentState, TelemetryEvent, PromptCacheStats, SolutionCategory, SanitizedResult, PulseConfig, PulseAdapter, PulseWindow } from '@harness-engineering/types';
+import { Result, LoadingLevel, SkillContextBudget, InsightsKey, InsightsReport, SessionSectionName, SessionEntry, SessionSections, WorkflowStep, WorkflowStepResult, Workflow, WorkflowResult, SkillLifecycleHooks, SkillContext, SkillResult, TurnContext, CICheckName, CIFailOnSeverity, CICheckReport, RoadmapFeature, ExternalTicket, ExternalTicketState, TrackerComment, TrackerSyncConfig, CINotifyOptions, Roadmap, FeatureStatus, SyncResult, Priority, ModelPricing, UsageRecord, DailyUsage, SessionUsage, SkillInvocationRecord, SkillAdoptionSummary, NotificationsConfig, StabilityTier, TelemetryIdentity, TelemetryConfig, ConsentState, TelemetryEvent, PromptCacheStats, SolutionCategory, SanitizedResult, PulseConfig, PulseAdapter, PulseWindow, ProposalStatus, EmitSkillProposalInput, SkillProposal } from '@harness-engineering/types';
 export * from '@harness-engineering/types';
 export { BlockerRef, BugTrackCategory, Issue, IssueTrackerClient, KnowledgeTrackCategory, PulseAdapter, PulseConfig, PulseDbSource, PulseRunStatus, PulseRunStatusType, PulseSources, PulseWindow, SanitizeFn, SanitizedResult, SolutionCategory, SolutionDocFrontmatter, SolutionTrack, TrackerConfig } from '@harness-engineering/types';
 import { z } from 'zod';
@@ -5874,7 +5874,14 @@ declare class SecurityScanner {
     private buildSuppressionFinding;
     /** Check one line against a rule's patterns; return a finding or null. */
     private matchRuleLine;
-    /** Scan a single line against a resolved rule; push any findings into the array. */
+    /**
+     * Scan a single line against a resolved rule; push any findings into the array.
+     *
+     * Suppression check is two-pass: same line first (trailing-comment style), then the previous
+     * line (the dominant convention: `// harness-ignore` on the line above the flagged code).
+     * Without the prior-line check, every multi-line statement annotated using the over-the-top
+     * convention would slip through and re-trigger the finding.
+     */
     private scanLineForRule;
     /**
      * Core scanning loop shared by scanContent and scanContentForFile.
@@ -5885,6 +5892,83 @@ declare class SecurityScanner {
     scanFiles(filePaths: string[]): Promise<ScanResult>;
 }
 
+/**
+ * Hermes Phase 2 — Pre-launch OSV malware guard.
+ *
+ * Queries OSV.dev's REST API (https://api.osv.dev/v1/query) for advisories
+ * affecting a specific package@version, classifies them by ID prefix
+ * (`MAL-*` → malicious, else "other"), and caches results on disk so that
+ * the `setup-mcp` / `mcp-guard` lifecycle is sub-second on warm starts.
+ *
+ * Per the proposal §D6, the default network-error posture is "fail-open"
+ * (warn, treat as clean) so a third-party outage cannot wedge operators
+ * mid-edit; `strict: true` reverses to fail-closed.
+ *
+ * No new runtime dependency: uses Node 20+'s `globalThis.fetch`.
+ */
+interface OsvPackageRef {
+    /** Currently only `'npm'` is supported (MCP/npx surface). */
+    ecosystem: 'npm';
+    name: string;
+    /** Optional version pin; OSV will return advisories matching this version. */
+    version?: string;
+}
+interface OsvAdvisory {
+    id: string;
+    /** OSV omits `summary` for minimal records; renderers should default it. */
+    summary?: string;
+    published?: string;
+    modified?: string;
+    references?: Array<{
+        type: string;
+        url: string;
+    }>;
+    affected?: Array<{
+        package?: {
+            ecosystem: string;
+            name: string;
+        };
+        ranges?: Array<{
+            type: string;
+            events: Array<{
+                introduced?: string;
+                fixed?: string;
+            }>;
+        }>;
+        versions?: string[];
+    }>;
+}
+interface OsvCheckResult {
+    /** Advisories whose IDs begin with `MAL-` (OSV's malware namespace). */
+    malicious: OsvAdvisory[];
+    /** Any non-malicious advisories returned. */
+    other: OsvAdvisory[];
+    /** Where the result came from. */
+    source: 'cache' | 'network' | 'fail-open';
+}
+interface OsvClientOptions {
+    /** Directory for the disk cache. Default: `.harness/cache/osv/`. */
+    cacheDir?: string;
+    /** Cache TTL in hours. Default: 24. */
+    cacheTtlHours?: number;
+    /** Inject a custom fetch (for tests). Defaults to `globalThis.fetch`. */
+    fetchFn?: typeof fetch;
+    /** Logger sink for warnings. Default: console.warn. */
+    logger?: {
+        warn: (m: string, ctx?: Record<string, unknown>) => void;
+    };
+    /** Fail closed on network errors when true. Default: false. */
+    strict?: boolean;
+}
+interface OsvClient {
+    check(pkg: OsvPackageRef): Promise<OsvCheckResult>;
+    clearCache(): Promise<void>;
+}
+/**
+ * Factory for the OSV client.
+ */
+declare function createOsvClient(options?: OsvClientOptions): OsvClient;
+
 declare const SecurityConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     strict: z.ZodDefault<z.ZodBoolean>;
@@ -9955,6 +10039,43 @@ interface AssembleInput {
 }
 declare function assembleCandidateReport(input: AssembleInput): string;
 
+declare function proposalsDir(projectPath: string): string;
+declare class ProposalNotFoundError extends Error {
+    constructor(id: string);
+}
+declare class ProposalConflictError extends Error {
+    constructor(message: string);
+}
+/**
+ * Create a new proposal on disk. Generates a uuid, validates the payload,
+ * and writes `.harness/proposals/<id>.json` atomically.
+ */
+declare function createProposal(projectPath: string, input: EmitSkillProposalInput): Promise<SkillProposal>;
+declare function getProposal(projectPath: string, id: string): Promise<SkillProposal | null>;
+interface ListProposalsOptions {
+    status?: ProposalStatus | 'all';
+}
+declare function listProposals(projectPath: string, opts?: ListProposalsOptions): Promise<SkillProposal[]>;
+/**
+ * Apply a shallow patch to an existing proposal. Returns the updated proposal.
+ * Patch is validated through SkillProposalSchema (round-trip), preserving
+ * cross-field invariants (kind ↔ content shape).
+ */
+declare function updateProposal(projectPath: string, id: string, patch: Partial<SkillProposal>): Promise<SkillProposal>;
+
+interface SkillUsageStats {
+    count: number;
+    lastUsed?: string;
+    windowDays: number;
+}
+/**
+ * Derive per-skill usage stats from the existing skill_invocation telemetry
+ * (`.harness/metrics/adoption.jsonl`). No new emission; this is read-only
+ * aggregation surfaced explicitly on the Proposals page so reviewers can see
+ * whether a refinement is touching a hot skill.
+ */
+declare function deriveSkillUsage(projectRoot: string, skillName: string, windowDays?: number): SkillUsageStats;
+
 declare const VERSION = "0.25.0";
 
-export { AGENT_DESCRIPTORS, AGREEMENT_LINE_GAP, ALLOWED_FIELD_KEYS, ALL_SOLUTION_CATEGORIES, ARCHITECTURE_DESCRIPTOR, type AST, type AcquireOptions, type ActionContext, type ActionEvent, type ActionEventHandler, type ActionEventType, type ActionResult, type ActionSink, type ActionTracker, type ActionType, type AdjustedForecast, AdjustedForecastSchema, type AgentAction, AgentActionEmitter, type AgentConfigFallbackReason, type AgentConfigFinding, type AgentConfigOptions, type AgentConfigSeverity, type AgentConfigValidation, type AgentExecutor, type AgentMapLink, type AgentMapSection, type AgentMapValidation, type AgentProcess, type AgentReviewResult, type AgentType, type AgentsMapConfig, type AnnotationIssue, type AnnotationIssueType, AnthropicCacheAdapter, type AppendLearningResult, ArchBaseline, ArchBaselineManager, ArchConfig, ArchDiffResult, ArchMetricCategory, type ArchiveHooks, type ArchiveSessionOptions, type AssembleInput, BUG_DETECTION_DESCRIPTOR, BUG_TRACK_CATEGORIES, type BaseError, type Baseline, BaselineManager, type BaselinesFile, type BenchmarkResult, type BenchmarkRunOptions, BenchmarkRunner, type BlueprintData, BlueprintGenerator, type BlueprintModule, type BlueprintOptions, type BoundaryDefinition, type BoundaryValidation, type BoundaryValidator, type BoundaryViolation, type BranchValidationResult, type BranchingConfig, type BrokenLink, type BudgetedLearningsOptions, type Bundle, type BundleConstraints, BundleConstraintsSchema, BundleSchema, CACHE_TTL_MS, CINotifier, COMPLIANCE_DESCRIPTOR, CORROBORATED_AGREEMENT, type CacheAdapter, CacheMetricsRecorder, type CacheMetricsRecorderOptions, type CategoryForecast, CategoryForecastSchema, CategorySnapshotSchema, type ChangeType, type ChangedFile, ChecklistBuilder, type CircularDependency, CircularDepsCollector, type CircularDepsResult, type CleanupFinding, type CodeBlock, type CodeChanges, type CodePattern, type CodeReference, type CodeSymbol, type CodebaseSnapshot, Collector, type CommentedCodeBlock, type CommitFormat, type CommitHistoryEntry, type CommitValidation, CompactionPipeline, type CompactionStrategy, ComplexityCollector, type ComplexityConfig, type ComplexityReport, type ComplexityThresholds, type ComplexityViolation, type ComposeInsightsOptions, type CompoundLockHandle, CompoundLockHeldError, type ConfidenceTier, ConfidenceTierSchema, type ConfigError, type ConfigPattern, type Confirmation, ConfirmationSchema, ConflictError, type ConflictReport, ConsoleSink, type ConstraintError, type ConstraintNodeStore, ConstraintRule, type Content, type ContextBundle, type ContextError, type ContextFile, type ContextFilterResult, type ContextScopeOptions, ContributingFeatureSchema, type Contributions, ContributionsSchema, type Convention, CouplingCollector, type CouplingConfig, type CouplingReport, type CouplingThresholds, type CouplingViolation, type CoverageOptions, type CoverageReport, type CriticalPathEntry, CriticalPathResolver, type CriticalPathSet, type CustomRule, type CustomRuleResult, DEFAULT_LOADER_CONFIG, DEFAULT_PROVIDER_TIERS, DEFAULT_SECURITY_CONFIG, DEFAULT_STABILITY_THRESHOLDS, DEFAULT_STATE, DEFAULT_STREAM_INDEX, DEFAULT_TOKEN_BUDGET, DESTRUCTIVE_BASH, DOMAIN_BASELINES, type DailyAdoption, type DataPoint, type DeadCodeConfig, type DeadCodeReport, type DeadExport, type DeadFile, type DeadInternal, type DeduplicateFindingsOptions, DepDepthCollector, type DependencyEdge, type DependencyGraph, type DependencyValidation, type DependencyViolation, type DetectStaleResult, type DiffInfo, type Direction$1 as Direction, DirectionSchema$1 as DirectionSchema, type DocumentationDrift, type DocumentationFile, type DocumentationGap, type DriftConfig, type DriftReport, EMPTY_SUPPLY_CHAIN, ETagStore, EVIDENCE_SATURATION, EXTENSION_MAP, type EligibilityResult, EmergenceResult, type EmitEventInput, type EmitEventOptions, type EmitEventResult, type EmitInteractionInput, EmitInteractionInputSchema, EntropyAnalyzer, type EntropyConfig, EntropyConfigSchema, type EntropyError, type EntropyReport, type EstimatorCoefficients, type EventType, type EvidenceCoverageReport, ExclusionSet, type ExecutorHealth, type Export, type ExportMap, type ExternalSyncOptions, FACTOR_WEIGHTS, type FailureEntry, FailureEntrySchema, type FallbackPricingFile, type FanOutOptions, type FeaturePatch, type FeedbackAgentConfig, type FeedbackConfig, type FeedbackError$1 as FeedbackError, type FileCategory, type FileLessScoredCandidate, FileSink, type FindingLifecycle, FindingLifecycleSchema, type FindingSeverity, type Fix, type FixConfig, type FixResult, type FixType, ForbiddenImportCollector, type ForbiddenImportViolation, type ForbiddenPattern, type GateConfig, GateConfigSchema, type GateResult, GateResultSchema, GeminiCacheAdapter, type GenerateRubricOptions, type GenerationSection, type GitHubInlineComment, GitHubIssuesSyncAdapter, type GitScanOptions, type GraphAdapter, type GraphComplexityData, type GraphCouplingData, type GraphCoverageData, type GraphCriticalPathData, type GraphDependencyData, type GraphHarnessCheckData, type GraphImpactData, type GraphNode, type Handoff, HandoffSchema, type HarnessState, HarnessStateSchema, type HealthCheckResult, type HistoryEvent, type HistoryEventType, type Hotspot$1 as Hotspot, type HotspotContext, type Import, type InjectionFinding, type InjectionPattern, type InjectionSeverity, type InlineReference, type IntegrityReport, type InteractionType, InteractionTypeSchema, type InternalSymbol, type IsoWeek, type JSDocComment, KNOWLEDGE_TRACK_CATEGORIES, LITELLM_PRICING_URL, type LanguageParser, type Layer, type LayerConfig, LayerViolationCollector, type LearningPattern, type LearningsFrontmatter, type LearningsIndexEntry, type LiteLLMModelEntry, type LiteLLMPricingData, type LoadEventsOptions, type LoaderConfig, type Lockfile, type LockfilePackage, LockfilePackageSchema, LockfileSchema, type LogEntry, type LogFilter, MOCK_ADAPTER_NAME, type MakeTrackerConflictBodyOptions, type Manifest, ManifestSchema, type MechanicalCheckOptions, type MechanicalCheckResult, type MechanicalCheckStatus, type MechanicalFinding, type MergeResult, type Metric, MetricResult, type ModelProvider, type ModelTier, type ModelTierConfig, type ModuleDependency, ModuleSizeCollector, type NewFeatureInput, NoOpExecutor, NoOpSink, NoOpTelemetryAdapter, OTLPExporter, type OTLPExporterOptions, OpenAICacheAdapter, type OrchestratorResult, type OrphanedDep, type OutlineResult, type OverlapDimensions, type OverlapResult, PII_FIELD_DENYLIST, PII_LINE_RE, PII_TOKENS, type PackedEnvelope, type PaginatedSlice, type PaginationMeta, type ParallelGroups, type ParseError, type ParsedFile, type ParsedSection, type ParserLookup, type PatternConfig, PatternConfigSchema, type PatternMatch, type PatternReport, type PatternViolation, type PeerReview, type PeerReviewOptions, type PilotScoringOptions, type PipelineContext, type PipelineFlags, type PipelineOptions, type PipelineResult, type PrMetadata, PredictionEngine, type PredictionOptions, PredictionOptionsSchema, type RegressionResult as PredictionRegressionResult, RegressionResultSchema as PredictionRegressionResultSchema, type PredictionResult, PredictionResultSchema, type PredictionWarning, PredictionWarningSchema, type PricingCacheFile, type PricingDataset, type PriorReview, ProjectScanner, type PromoteResult, type ProtectedRegion, type ProtectedRegionMap, type ProtectionScope, type ProviderDefaults, type ProviderSystemBlock, type ProviderToolBlock, type PruneResult, PulseAdapterAlreadyRegisteredError, PulseConfigSchema, type PulseConfigValidation, PulseDbSourceSchema, PulseSourcesSchema, type Question, QuestionSchema, REQUIRED_SECTIONS, type ReachabilityNode, RegressionDetector, type RegressionFit, type RegressionReport, type RegressionResult$1 as RegressionResult, type ReviewAgentDescriptor, type ReviewAssessment, type ReviewChecklist, type ReviewComment, type ReviewContext, type ReviewDomain, type ReviewFinding, type ReviewItem, type ReviewOutputOptions, type ReviewPipelineResult, type ReviewStage, type ReviewStrength, type RoadmapMode, type RoadmapModeConfig, type RoadmapModeValidationConfig, type RoadmapTrackerClient, type Rubric, type RubricItem, type RuleOverride, RuleRegistry, type RunCIChecksInput, type RunPipelineOptions, SECURITY_DESCRIPTOR, STALENESS_WARNING_DAYS, STANDALONE_AGREEMENT, STATUS_RANK, type SafetyLevel, type ScanConfigFileResult, type ScanConfigFinding, type ScanConfigResult, type Hotspot as ScanHotspot, type HotspotOptions as ScanHotspotOptions, type ScanResult, type ScannedCommit, type ScoredCandidate, type SearchMatch, type SearchResult, type SecurityCategory, type SecurityCategorySnapshot, SecurityCategorySnapshotSchema, type SecurityConfidence, type SecurityConfig, SecurityConfigSchema, type Direction as SecurityDirection, DirectionSchema as SecurityDirectionSchema, type SecurityFinding, type SecurityRule, SecurityScanner, type SecuritySeverity, type SecurityTimelineFile, SecurityTimelineFileSchema, SecurityTimelineManager, type SecurityTimelineSnapshot, SecurityTimelineSnapshotSchema, type SecurityTrendLine, SecurityTrendLineSchema, type SecurityTrendResult, SecurityTrendResultSchema, type SeedOptions, type SelfReviewConfig, type SessionSummaryData, SharableBoundaryConfigSchema, SharableForbiddenImportSchema, SharableLayerSchema, SharableSecurityRulesSchema, type SizeBudgetConfig, type SizeBudgetReport, type SizeBudgetViolation, type SkillEvent, SkillEventSchema, type SkillExecutor, type SkillLoadPlan, SolutionDocFrontmatterSchema, type SolutionsDirValidation, type SourceFile, type Span, type SpanAttributes, type SpanEvent, SpanKind, type SpecImpactEstimate, SpecImpactEstimateSchema, SpecImpactEstimator, SpecImpactSignalsSchema, type StabilityForecast, StabilityForecastSchema, type StabilityTaggedBlock, type StaleConstraint, type StalenessEntry, type StalenessReport, type StepExecutor, type StrategySeed, type StreamIndex, StreamIndexSchema, type StreamInfo, StreamInfoSchema, StructuralStrategy, type StructureValidation, type Suggestion, type SuggestionReport, type SupplyChainSnapshot, SupplyChainSnapshotSchema, type SupportedLanguage, type SuppressionRecord, type SymbolKind, type SyncChange, type SyncOptions, type TaintCheckResult, type TaintFinding, type TaintState, type TelemetryAdapter, type TelemetryHealth, ThresholdConfig, type TimeRange, type TimeToFixResult, TimeToFixResultSchema, type TimeToFixStats, TimeToFixStatsSchema, type CategorySnapshot as TimelineCategorySnapshot, type TimelineFile, TimelineFileSchema, TimelineManager, type TimelineSnapshot, TimelineSnapshotSchema, type TokenBudget, type TokenBudgetOverrides, type ToolDefinition, type Trace, type TraceSpan, type TrackedFeature, type TrackerClientConfig, type TrackerConflictBody, type TrackerSyncAdapter, type Transition, TransitionSchema, type TrendAttribution, TrendAttributionSchema, type TrendLine, TrendLineSchema, type TrendResult, TrendResultSchema, TruncationStrategy, type TrustScoreOptions, type TurnExecutor, TypeScriptParser, type UnfoldResult, type UnusedImport, type UpdateCheckState, VALIDATION_SCORES, VALID_SCOPES, VERSION, type ValidateFindingsOptions, type ValidationError, Violation, type ViolationCluster, ViolationHistory, ViolationHistoryManager, ViolationSnapshot, WHATWG_BAD_PORTS, type WorkflowPhase, type WritePulseConfigOptions, acquireCompoundLock, addProvenance, agentConfigRules, aggregateByDay as aggregateAdoptionByDay, aggregateByDay$1 as aggregateByDay, aggregateBySession, aggregateBySkill, analyzeDiff, analyzeLearningPatterns, appendFailure, appendLearning, appendSessionEntry, applyFixes, applyHotspotDowngrade, applyRecencyWeights, applySyncChanges, archiveFailures, archiveLearnings, archiveSession, archiveStream, assembleCandidateReport, assembleReport, assertPortUsable, assertSanitized, assignFeature, buildDependencyGraph, buildExclusionSet, buildSnapshot, calculateCacheSavings, calculateCost, checkDocCoverage, checkEligibility, checkEvidenceCoverage, checkOverlap, checkTaint, classifyConfidence, classifyFinding, clearEventHashCache, clearFailuresCache, clearLearningsCache, clearPulseAdapters, clearTaint, clusterViolations, collectEvents, composeInsights, computeContentHash, computeHotspots, computeLexicalSimilarity, computeLoadPlan, computeOverallSeverity, computeScanExitCode, computeTrustScores, computeWindow, configureFeedback, constraintRuleId, contextBudget, contextFilter, countLearningEntries, createBoundaryValidator, createCommentedCodeFixes, createError, createFixes, createForbiddenImportFixes, createOrphanedDepFixes, createParseError, createRegionMap, createSelfReview, createStream, createTrackerClient, crossReferenceUndocumentedFixes, cryptoRules, deduplicateCleanupFindings, deduplicateFindings, deepMergeConstraints, defaultCollectors, defineLayer, deserializationRules, detectChangeType, detectCircularDeps, detectCircularDepsInFiles, detectComplexityViolations, detectCouplingViolations, detectDeadCode, detectDocDrift, detectEmergentConstraints, detectLanguage, detectPatternViolations, detectSizeBudgetViolations, detectStack, detectStaleConstraints, detectStaleLearnings, determineAssessment, diff, emitEvent, estimateTokens, executeWorkflow, expressRules, extractBundle, extractDirectoryScope, extractFileReferences, extractHeadlines, extractIndexEntry, extractLevel, extractMarkdownLinks, extractSections, fanOutReview, findParallelGroups, formatCIReportAsMarkdown, formatEventTimeline, formatFindingBlock, formatGitHubComment, formatGitHubSummary, formatIsoWeek, formatOutline, formatTerminalOutput, fullSync, generateAgentsMap, generateRubric, generateSuggestions, getActionEmitter, getExitCode, getFeedbackConfig, getInjectionPatterns, getModelPrice, getOrCreateInstallId, getOutline, getParser, getPhaseCategories, getPulseAdapter, getRoadmapMode, getStreamForBranch, getTaintFilePath, getTrustLevel, getUpdateNotification, gitScan, goRules, injectionRules, insecureDefaultsRules, invalidateCheckState, isBadPort, isDuplicateFinding, isRegression, isSanitizedResult, isSmallSuggestion, isUpdateCheckEnabled, isoWeek, listActiveSessions, listPulseAdapters, listStreams, listTaintedSessions, loadBudgetedLearnings, loadEvents, loadFailures, loadHandoff, loadIndexEntries, loadNotificationsConfig, loadPricingData, loadProjectRoadmapMode, loadRelevantLearnings, loadSessionSummary, loadState, loadStreamIndex, loadTrackerClientConfigFromProject, loadTrackerSyncConfig, logAgentAction, makeTrackerConflictBody, mapInjectionFindings, mapSecurityFindings, mapSecuritySeverity, markProtectedFindings, mcpRules, index as migrate, migrateToStreams, networkRules, nodeRules, normalizeLearningContent, normalizeViolationPattern, paginate, parseCCRecords, parseDateFromEntry, parseDiff, parseFile, parseFileRegions, parseFrontmatter, parseHarnessIgnore, parseLiteLLMData, parseLookback, parseManifest, parseProtectedRegions, parseRoadmap, parseSections, parseSecurityConfig, parseSize, pathTraversalRules, previewFix, projectValue, promoteSessionLearnings, pruneLearnings, reactRules, readAdoptionRecords, readCheckState, readCostRecords, readIdentity, readLockfile, readSessionSection, readSessionSections, readTaint, registerMockAdapter, registerPulseAdapter, removeContributions, removeProvenance, requestMultiplePeerReviews, requestPeerReview, resetFeedbackConfig, resetParserCache, resolveConsent, resolveFileToLayer, resolveModelTier, resolveReverseStatus, resolveRuleSeverity, resolveSessionDir, resolveStability, resolveStreamPath, resolveThresholds, runFallbackRules as runAgentConfigFallbackRules, runAll, runArchitectureAgent, runBugDetectionAgent, runCIChecks, runComplianceAgent, runMechanicalChecks, runMechanicalGate, runMultiTurnPipeline, runPipeline, runPulse, runReviewPipeline, runSecurityAgent, saveHandoff, saveState, saveStreamIndex, scanForInjection, scopeContext, scoreRoadmapCandidates, scoreRoadmapCandidatesFileLess, scoreRoadmapCandidatesForMode, searchSymbols, secretRules, securityFindingId, seedFromStrategy, send, serializeEnvelope, serializeRoadmap, setActiveStream, sharpEdgesRules, shouldRunCheck, spawnBackgroundCheck, splitBundlesByStage, stageDomains, suggestCategory, syncConstraintNodes, syncFromExternal, syncRoadmap, syncToExternal, tagUncitedFindings, topSkills, touchStream, trackAction, unfoldRange, unfoldSymbol, updateSessionEntryStatus, updateSessionIndex, validateAgentConfigs, validateAgentsMap, validateBoundaries, validateBranchName, validateCommitMessage, validateConfig, validateDependencies, validateFileStructure, validateFindings, validateKnowledgeMap, validatePatternConfig, validatePulseConfig, validateRoadmapMode, validateSolutionsDir, violationId, weeksUntilThreshold, weightedLinearRegression, writeConfig, writeLockfile, writePulseConfig, writeSessionSummary, writeTaint, xssRules };
+export { AGENT_DESCRIPTORS, AGREEMENT_LINE_GAP, ALLOWED_FIELD_KEYS, ALL_SOLUTION_CATEGORIES, ARCHITECTURE_DESCRIPTOR, type AST, type AcquireOptions, type ActionContext, type ActionEvent, type ActionEventHandler, type ActionEventType, type ActionResult, type ActionSink, type ActionTracker, type ActionType, type AdjustedForecast, AdjustedForecastSchema, type AgentAction, AgentActionEmitter, type AgentConfigFallbackReason, type AgentConfigFinding, type AgentConfigOptions, type AgentConfigSeverity, type AgentConfigValidation, type AgentExecutor, type AgentMapLink, type AgentMapSection, type AgentMapValidation, type AgentProcess, type AgentReviewResult, type AgentType, type AgentsMapConfig, type AnnotationIssue, type AnnotationIssueType, AnthropicCacheAdapter, type AppendLearningResult, ArchBaseline, ArchBaselineManager, ArchConfig, ArchDiffResult, ArchMetricCategory, type ArchiveHooks, type ArchiveSessionOptions, type AssembleInput, BUG_DETECTION_DESCRIPTOR, BUG_TRACK_CATEGORIES, type BaseError, type Baseline, BaselineManager, type BaselinesFile, type BenchmarkResult, type BenchmarkRunOptions, BenchmarkRunner, type BlueprintData, BlueprintGenerator, type BlueprintModule, type BlueprintOptions, type BoundaryDefinition, type BoundaryValidation, type BoundaryValidator, type BoundaryViolation, type BranchValidationResult, type BranchingConfig, type BrokenLink, type BudgetedLearningsOptions, type Bundle, type BundleConstraints, BundleConstraintsSchema, BundleSchema, CACHE_TTL_MS, CINotifier, COMPLIANCE_DESCRIPTOR, CORROBORATED_AGREEMENT, type CacheAdapter, CacheMetricsRecorder, type CacheMetricsRecorderOptions, type CategoryForecast, CategoryForecastSchema, CategorySnapshotSchema, type ChangeType, type ChangedFile, ChecklistBuilder, type CircularDependency, CircularDepsCollector, type CircularDepsResult, type CleanupFinding, type CodeBlock, type CodeChanges, type CodePattern, type CodeReference, type CodeSymbol, type CodebaseSnapshot, Collector, type CommentedCodeBlock, type CommitFormat, type CommitHistoryEntry, type CommitValidation, CompactionPipeline, type CompactionStrategy, ComplexityCollector, type ComplexityConfig, type ComplexityReport, type ComplexityThresholds, type ComplexityViolation, type ComposeInsightsOptions, type CompoundLockHandle, CompoundLockHeldError, type ConfidenceTier, ConfidenceTierSchema, type ConfigError, type ConfigPattern, type Confirmation, ConfirmationSchema, ConflictError, type ConflictReport, ConsoleSink, type ConstraintError, type ConstraintNodeStore, ConstraintRule, type Content, type ContextBundle, type ContextError, type ContextFile, type ContextFilterResult, type ContextScopeOptions, ContributingFeatureSchema, type Contributions, ContributionsSchema, type Convention, CouplingCollector, type CouplingConfig, type CouplingReport, type CouplingThresholds, type CouplingViolation, type CoverageOptions, type CoverageReport, type CriticalPathEntry, CriticalPathResolver, type CriticalPathSet, type CustomRule, type CustomRuleResult, DEFAULT_LOADER_CONFIG, DEFAULT_PROVIDER_TIERS, DEFAULT_SECURITY_CONFIG, DEFAULT_STABILITY_THRESHOLDS, DEFAULT_STATE, DEFAULT_STREAM_INDEX, DEFAULT_TOKEN_BUDGET, DESTRUCTIVE_BASH, DOMAIN_BASELINES, type DailyAdoption, type DataPoint, type DeadCodeConfig, type DeadCodeReport, type DeadExport, type DeadFile, type DeadInternal, type DeduplicateFindingsOptions, DepDepthCollector, type DependencyEdge, type DependencyGraph, type DependencyValidation, type DependencyViolation, type DetectStaleResult, type DiffInfo, type Direction$1 as Direction, DirectionSchema$1 as DirectionSchema, type DocumentationDrift, type DocumentationFile, type DocumentationGap, type DriftConfig, type DriftReport, EMPTY_SUPPLY_CHAIN, ETagStore, EVIDENCE_SATURATION, EXTENSION_MAP, type EligibilityResult, EmergenceResult, type EmitEventInput, type EmitEventOptions, type EmitEventResult, type EmitInteractionInput, EmitInteractionInputSchema, EntropyAnalyzer, type EntropyConfig, EntropyConfigSchema, type EntropyError, type EntropyReport, type EstimatorCoefficients, type EventType, type EvidenceCoverageReport, ExclusionSet, type ExecutorHealth, type Export, type ExportMap, type ExternalSyncOptions, FACTOR_WEIGHTS, type FailureEntry, FailureEntrySchema, type FallbackPricingFile, type FanOutOptions, type FeaturePatch, type FeedbackAgentConfig, type FeedbackConfig, type FeedbackError$1 as FeedbackError, type FileCategory, type FileLessScoredCandidate, FileSink, type FindingLifecycle, FindingLifecycleSchema, type FindingSeverity, type Fix, type FixConfig, type FixResult, type FixType, ForbiddenImportCollector, type ForbiddenImportViolation, type ForbiddenPattern, type GateConfig, GateConfigSchema, type GateResult, GateResultSchema, GeminiCacheAdapter, type GenerateRubricOptions, type GenerationSection, type GitHubInlineComment, GitHubIssuesSyncAdapter, type GitScanOptions, type GraphAdapter, type GraphComplexityData, type GraphCouplingData, type GraphCoverageData, type GraphCriticalPathData, type GraphDependencyData, type GraphHarnessCheckData, type GraphImpactData, type GraphNode, type Handoff, HandoffSchema, type HarnessState, HarnessStateSchema, type HealthCheckResult, type HistoryEvent, type HistoryEventType, type Hotspot$1 as Hotspot, type HotspotContext, type Import, type InjectionFinding, type InjectionPattern, type InjectionSeverity, type InlineReference, type IntegrityReport, type InteractionType, InteractionTypeSchema, type InternalSymbol, type IsoWeek, type JSDocComment, KNOWLEDGE_TRACK_CATEGORIES, LITELLM_PRICING_URL, type LanguageParser, type Layer, type LayerConfig, LayerViolationCollector, type LearningPattern, type LearningsFrontmatter, type LearningsIndexEntry, type ListProposalsOptions, type LiteLLMModelEntry, type LiteLLMPricingData, type LoadEventsOptions, type LoaderConfig, type Lockfile, type LockfilePackage, LockfilePackageSchema, LockfileSchema, type LogEntry, type LogFilter, MOCK_ADAPTER_NAME, type MakeTrackerConflictBodyOptions, type Manifest, ManifestSchema, type MechanicalCheckOptions, type MechanicalCheckResult, type MechanicalCheckStatus, type MechanicalFinding, type MergeResult, type Metric, MetricResult, type ModelProvider, type ModelTier, type ModelTierConfig, type ModuleDependency, ModuleSizeCollector, type NewFeatureInput, NoOpExecutor, NoOpSink, NoOpTelemetryAdapter, OTLPExporter, type OTLPExporterOptions, OpenAICacheAdapter, type OrchestratorResult, type OrphanedDep, type OsvAdvisory, type OsvCheckResult, type OsvClient, type OsvClientOptions, type OsvPackageRef, type OutlineResult, type OverlapDimensions, type OverlapResult, PII_FIELD_DENYLIST, PII_LINE_RE, PII_TOKENS, type PackedEnvelope, type PaginatedSlice, type PaginationMeta, type ParallelGroups, type ParseError, type ParsedFile, type ParsedSection, type ParserLookup, type PatternConfig, PatternConfigSchema, type PatternMatch, type PatternReport, type PatternViolation, type PeerReview, type PeerReviewOptions, type PilotScoringOptions, type PipelineContext, type PipelineFlags, type PipelineOptions, type PipelineResult, type PrMetadata, PredictionEngine, type PredictionOptions, PredictionOptionsSchema, type RegressionResult as PredictionRegressionResult, RegressionResultSchema as PredictionRegressionResultSchema, type PredictionResult, PredictionResultSchema, type PredictionWarning, PredictionWarningSchema, type PricingCacheFile, type PricingDataset, type PriorReview, ProjectScanner, type PromoteResult, ProposalConflictError, ProposalNotFoundError, type ProtectedRegion, type ProtectedRegionMap, type ProtectionScope, type ProviderDefaults, type ProviderSystemBlock, type ProviderToolBlock, type PruneResult, PulseAdapterAlreadyRegisteredError, PulseConfigSchema, type PulseConfigValidation, PulseDbSourceSchema, PulseSourcesSchema, type Question, QuestionSchema, REQUIRED_SECTIONS, type ReachabilityNode, RegressionDetector, type RegressionFit, type RegressionReport, type RegressionResult$1 as RegressionResult, type ReviewAgentDescriptor, type ReviewAssessment, type ReviewChecklist, type ReviewComment, type ReviewContext, type ReviewDomain, type ReviewFinding, type ReviewItem, type ReviewOutputOptions, type ReviewPipelineResult, type ReviewStage, type ReviewStrength, type RoadmapMode, type RoadmapModeConfig, type RoadmapModeValidationConfig, type RoadmapTrackerClient, type Rubric, type RubricItem, type RuleOverride, RuleRegistry, type RunCIChecksInput, type RunPipelineOptions, SECURITY_DESCRIPTOR, STALENESS_WARNING_DAYS, STANDALONE_AGREEMENT, STATUS_RANK, type SafetyLevel, type ScanConfigFileResult, type ScanConfigFinding, type ScanConfigResult, type Hotspot as ScanHotspot, type HotspotOptions as ScanHotspotOptions, type ScanResult, type ScannedCommit, type ScoredCandidate, type SearchMatch, type SearchResult, type SecurityCategory, type SecurityCategorySnapshot, SecurityCategorySnapshotSchema, type SecurityConfidence, type SecurityConfig, SecurityConfigSchema, type Direction as SecurityDirection, DirectionSchema as SecurityDirectionSchema, type SecurityFinding, type SecurityRule, SecurityScanner, type SecuritySeverity, type SecurityTimelineFile, SecurityTimelineFileSchema, SecurityTimelineManager, type SecurityTimelineSnapshot, SecurityTimelineSnapshotSchema, type SecurityTrendLine, SecurityTrendLineSchema, type SecurityTrendResult, SecurityTrendResultSchema, type SeedOptions, type SelfReviewConfig, type SessionSummaryData, SharableBoundaryConfigSchema, SharableForbiddenImportSchema, SharableLayerSchema, SharableSecurityRulesSchema, type SizeBudgetConfig, type SizeBudgetReport, type SizeBudgetViolation, type SkillEvent, SkillEventSchema, type SkillExecutor, type SkillLoadPlan, type SkillUsageStats, SolutionDocFrontmatterSchema, type SolutionsDirValidation, type SourceFile, type Span, type SpanAttributes, type SpanEvent, SpanKind, type SpecImpactEstimate, SpecImpactEstimateSchema, SpecImpactEstimator, SpecImpactSignalsSchema, type StabilityForecast, StabilityForecastSchema, type StabilityTaggedBlock, type StaleConstraint, type StalenessEntry, type StalenessReport, type StepExecutor, type StrategySeed, type StreamIndex, StreamIndexSchema, type StreamInfo, StreamInfoSchema, StructuralStrategy, type StructureValidation, type Suggestion, type SuggestionReport, type SupplyChainSnapshot, SupplyChainSnapshotSchema, type SupportedLanguage, type SuppressionRecord, type SymbolKind, type SyncChange, type SyncOptions, type TaintCheckResult, type TaintFinding, type TaintState, type TelemetryAdapter, type TelemetryHealth, ThresholdConfig, type TimeRange, type TimeToFixResult, TimeToFixResultSchema, type TimeToFixStats, TimeToFixStatsSchema, type CategorySnapshot as TimelineCategorySnapshot, type TimelineFile, TimelineFileSchema, TimelineManager, type TimelineSnapshot, TimelineSnapshotSchema, type TokenBudget, type TokenBudgetOverrides, type ToolDefinition, type Trace, type TraceSpan, type TrackedFeature, type TrackerClientConfig, type TrackerConflictBody, type TrackerSyncAdapter, type Transition, TransitionSchema, type TrendAttribution, TrendAttributionSchema, type TrendLine, TrendLineSchema, type TrendResult, TrendResultSchema, TruncationStrategy, type TrustScoreOptions, type TurnExecutor, TypeScriptParser, type UnfoldResult, type UnusedImport, type UpdateCheckState, VALIDATION_SCORES, VALID_SCOPES, VERSION, type ValidateFindingsOptions, type ValidationError, Violation, type ViolationCluster, ViolationHistory, ViolationHistoryManager, ViolationSnapshot, WHATWG_BAD_PORTS, type WorkflowPhase, type WritePulseConfigOptions, acquireCompoundLock, addProvenance, agentConfigRules, aggregateByDay as aggregateAdoptionByDay, aggregateByDay$1 as aggregateByDay, aggregateBySession, aggregateBySkill, analyzeDiff, analyzeLearningPatterns, appendFailure, appendLearning, appendSessionEntry, applyFixes, applyHotspotDowngrade, applyRecencyWeights, applySyncChanges, archiveFailures, archiveLearnings, archiveSession, archiveStream, assembleCandidateReport, assembleReport, assertPortUsable, assertSanitized, assignFeature, buildDependencyGraph, buildExclusionSet, buildSnapshot, calculateCacheSavings, calculateCost, checkDocCoverage, checkEligibility, checkEvidenceCoverage, checkOverlap, checkTaint, classifyConfidence, classifyFinding, clearEventHashCache, clearFailuresCache, clearLearningsCache, clearPulseAdapters, clearTaint, clusterViolations, collectEvents, composeInsights, computeContentHash, computeHotspots, computeLexicalSimilarity, computeLoadPlan, computeOverallSeverity, computeScanExitCode, computeTrustScores, computeWindow, configureFeedback, constraintRuleId, contextBudget, contextFilter, countLearningEntries, createBoundaryValidator, createCommentedCodeFixes, createError, createFixes, createForbiddenImportFixes, createOrphanedDepFixes, createOsvClient, createParseError, createProposal, createRegionMap, createSelfReview, createStream, createTrackerClient, crossReferenceUndocumentedFixes, cryptoRules, deduplicateCleanupFindings, deduplicateFindings, deepMergeConstraints, defaultCollectors, defineLayer, deriveSkillUsage, deserializationRules, detectChangeType, detectCircularDeps, detectCircularDepsInFiles, detectComplexityViolations, detectCouplingViolations, detectDeadCode, detectDocDrift, detectEmergentConstraints, detectLanguage, detectPatternViolations, detectSizeBudgetViolations, detectStack, detectStaleConstraints, detectStaleLearnings, determineAssessment, diff, emitEvent, estimateTokens, executeWorkflow, expressRules, extractBundle, extractDirectoryScope, extractFileReferences, extractHeadlines, extractIndexEntry, extractLevel, extractMarkdownLinks, extractSections, fanOutReview, findParallelGroups, formatCIReportAsMarkdown, formatEventTimeline, formatFindingBlock, formatGitHubComment, formatGitHubSummary, formatIsoWeek, formatOutline, formatTerminalOutput, fullSync, generateAgentsMap, generateRubric, generateSuggestions, getActionEmitter, getExitCode, getFeedbackConfig, getInjectionPatterns, getModelPrice, getOrCreateInstallId, getOutline, getParser, getPhaseCategories, getProposal, getPulseAdapter, getRoadmapMode, getStreamForBranch, getTaintFilePath, getTrustLevel, getUpdateNotification, gitScan, goRules, injectionRules, insecureDefaultsRules, invalidateCheckState, isBadPort, isDuplicateFinding, isRegression, isSanitizedResult, isSmallSuggestion, isUpdateCheckEnabled, isoWeek, listActiveSessions, listProposals, listPulseAdapters, listStreams, listTaintedSessions, loadBudgetedLearnings, loadEvents, loadFailures, loadHandoff, loadIndexEntries, loadNotificationsConfig, loadPricingData, loadProjectRoadmapMode, loadRelevantLearnings, loadSessionSummary, loadState, loadStreamIndex, loadTrackerClientConfigFromProject, loadTrackerSyncConfig, logAgentAction, makeTrackerConflictBody, mapInjectionFindings, mapSecurityFindings, mapSecuritySeverity, markProtectedFindings, mcpRules, index as migrate, migrateToStreams, networkRules, nodeRules, normalizeLearningContent, normalizeViolationPattern, paginate, parseCCRecords, parseDateFromEntry, parseDiff, parseFile, parseFileRegions, parseFrontmatter, parseHarnessIgnore, parseLiteLLMData, parseLookback, parseManifest, parseProtectedRegions, parseRoadmap, parseSections, parseSecurityConfig, parseSize, pathTraversalRules, previewFix, projectValue, promoteSessionLearnings, proposalsDir, pruneLearnings, reactRules, readAdoptionRecords, readCheckState, readCostRecords, readIdentity, readLockfile, readSessionSection, readSessionSections, readTaint, registerMockAdapter, registerPulseAdapter, removeContributions, removeProvenance, requestMultiplePeerReviews, requestPeerReview, resetFeedbackConfig, resetParserCache, resolveConsent, resolveFileToLayer, resolveModelTier, resolveReverseStatus, resolveRuleSeverity, resolveSessionDir, resolveStability, resolveStreamPath, resolveThresholds, runFallbackRules as runAgentConfigFallbackRules, runAll, runArchitectureAgent, runBugDetectionAgent, runCIChecks, runComplianceAgent, runMechanicalChecks, runMechanicalGate, runMultiTurnPipeline, runPipeline, runPulse, runReviewPipeline, runSecurityAgent, saveHandoff, saveState, saveStreamIndex, scanForInjection, scopeContext, scoreRoadmapCandidates, scoreRoadmapCandidatesFileLess, scoreRoadmapCandidatesForMode, searchSymbols, secretRules, securityFindingId, seedFromStrategy, send, serializeEnvelope, serializeRoadmap, setActiveStream, sharpEdgesRules, shouldRunCheck, spawnBackgroundCheck, splitBundlesByStage, stageDomains, suggestCategory, syncConstraintNodes, syncFromExternal, syncRoadmap, syncToExternal, tagUncitedFindings, topSkills, touchStream, trackAction, unfoldRange, unfoldSymbol, updateProposal, updateSessionEntryStatus, updateSessionIndex, validateAgentConfigs, validateAgentsMap, validateBoundaries, validateBranchName, validateCommitMessage, validateConfig, validateDependencies, validateFileStructure, validateFindings, validateKnowledgeMap, validatePatternConfig, validatePulseConfig, validateRoadmapMode, validateSolutionsDir, violationId, weeksUntilThreshold, weightedLinearRegression, writeConfig, writeLockfile, writePulseConfig, writeSessionSummary, writeTaint, xssRules };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Result, LoadingLevel, SkillContextBudget, InsightsKey, InsightsReport, SessionSectionName, SessionEntry, SessionSections, WorkflowStep, WorkflowStepResult, Workflow, WorkflowResult, SkillLifecycleHooks, SkillContext, SkillResult, TurnContext, CICheckName, CIFailOnSeverity, CICheckReport, RoadmapFeature, ExternalTicket, ExternalTicketState, TrackerComment, TrackerSyncConfig, CINotifyOptions, Roadmap, FeatureStatus, SyncResult, Priority, ModelPricing, UsageRecord, DailyUsage, SessionUsage, SkillInvocationRecord, SkillAdoptionSummary, NotificationsConfig, StabilityTier, TelemetryIdentity, TelemetryConfig, ConsentState, TelemetryEvent, PromptCacheStats, SolutionCategory, SanitizedResult, PulseConfig, PulseAdapter, PulseWindow } from '@harness-engineering/types';
+import { Result, LoadingLevel, SkillContextBudget, InsightsKey, InsightsReport, SessionSectionName, SessionEntry, SessionSections, WorkflowStep, WorkflowStepResult, Workflow, WorkflowResult, SkillLifecycleHooks, SkillContext, SkillResult, TurnContext, CICheckName, CIFailOnSeverity, CICheckReport, RoadmapFeature, ExternalTicket, ExternalTicketState, TrackerComment, TrackerSyncConfig, CINotifyOptions, Roadmap, FeatureStatus, SyncResult, Priority, ModelPricing, UsageRecord, DailyUsage, SessionUsage, SkillInvocationRecord, SkillAdoptionSummary, NotificationsConfig, StabilityTier, TelemetryIdentity, TelemetryConfig, ConsentState, TelemetryEvent, PromptCacheStats, SolutionCategory, SanitizedResult, PulseConfig, PulseAdapter, PulseWindow, ProposalStatus, EmitSkillProposalInput, SkillProposal } from '@harness-engineering/types';
 export * from '@harness-engineering/types';
 export { BlockerRef, BugTrackCategory, Issue, IssueTrackerClient, KnowledgeTrackCategory, PulseAdapter, PulseConfig, PulseDbSource, PulseRunStatus, PulseRunStatusType, PulseSources, PulseWindow, SanitizeFn, SanitizedResult, SolutionCategory, SolutionDocFrontmatter, SolutionTrack, TrackerConfig } from '@harness-engineering/types';
 import { z } from 'zod';
@@ -5874,7 +5874,14 @@ declare class SecurityScanner {
     private buildSuppressionFinding;
     /** Check one line against a rule's patterns; return a finding or null. */
     private matchRuleLine;
-    /** Scan a single line against a resolved rule; push any findings into the array. */
+    /**
+     * Scan a single line against a resolved rule; push any findings into the array.
+     *
+     * Suppression check is two-pass: same line first (trailing-comment style), then the previous
+     * line (the dominant convention: `// harness-ignore` on the line above the flagged code).
+     * Without the prior-line check, every multi-line statement annotated using the over-the-top
+     * convention would slip through and re-trigger the finding.
+     */
     private scanLineForRule;
     /**
      * Core scanning loop shared by scanContent and scanContentForFile.
@@ -5885,6 +5892,83 @@ declare class SecurityScanner {
     scanFiles(filePaths: string[]): Promise<ScanResult>;
 }
 
+/**
+ * Hermes Phase 2 — Pre-launch OSV malware guard.
+ *
+ * Queries OSV.dev's REST API (https://api.osv.dev/v1/query) for advisories
+ * affecting a specific package@version, classifies them by ID prefix
+ * (`MAL-*` → malicious, else "other"), and caches results on disk so that
+ * the `setup-mcp` / `mcp-guard` lifecycle is sub-second on warm starts.
+ *
+ * Per the proposal §D6, the default network-error posture is "fail-open"
+ * (warn, treat as clean) so a third-party outage cannot wedge operators
+ * mid-edit; `strict: true` reverses to fail-closed.
+ *
+ * No new runtime dependency: uses Node 20+'s `globalThis.fetch`.
+ */
+interface OsvPackageRef {
+    /** Currently only `'npm'` is supported (MCP/npx surface). */
+    ecosystem: 'npm';
+    name: string;
+    /** Optional version pin; OSV will return advisories matching this version. */
+    version?: string;
+}
+interface OsvAdvisory {
+    id: string;
+    /** OSV omits `summary` for minimal records; renderers should default it. */
+    summary?: string;
+    published?: string;
+    modified?: string;
+    references?: Array<{
+        type: string;
+        url: string;
+    }>;
+    affected?: Array<{
+        package?: {
+            ecosystem: string;
+            name: string;
+        };
+        ranges?: Array<{
+            type: string;
+            events: Array<{
+                introduced?: string;
+                fixed?: string;
+            }>;
+        }>;
+        versions?: string[];
+    }>;
+}
+interface OsvCheckResult {
+    /** Advisories whose IDs begin with `MAL-` (OSV's malware namespace). */
+    malicious: OsvAdvisory[];
+    /** Any non-malicious advisories returned. */
+    other: OsvAdvisory[];
+    /** Where the result came from. */
+    source: 'cache' | 'network' | 'fail-open';
+}
+interface OsvClientOptions {
+    /** Directory for the disk cache. Default: `.harness/cache/osv/`. */
+    cacheDir?: string;
+    /** Cache TTL in hours. Default: 24. */
+    cacheTtlHours?: number;
+    /** Inject a custom fetch (for tests). Defaults to `globalThis.fetch`. */
+    fetchFn?: typeof fetch;
+    /** Logger sink for warnings. Default: console.warn. */
+    logger?: {
+        warn: (m: string, ctx?: Record<string, unknown>) => void;
+    };
+    /** Fail closed on network errors when true. Default: false. */
+    strict?: boolean;
+}
+interface OsvClient {
+    check(pkg: OsvPackageRef): Promise<OsvCheckResult>;
+    clearCache(): Promise<void>;
+}
+/**
+ * Factory for the OSV client.
+ */
+declare function createOsvClient(options?: OsvClientOptions): OsvClient;
+
 declare const SecurityConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     strict: z.ZodDefault<z.ZodBoolean>;
@@ -9955,6 +10039,43 @@ interface AssembleInput {
 }
 declare function assembleCandidateReport(input: AssembleInput): string;
 
+declare function proposalsDir(projectPath: string): string;
+declare class ProposalNotFoundError extends Error {
+    constructor(id: string);
+}
+declare class ProposalConflictError extends Error {
+    constructor(message: string);
+}
+/**
+ * Create a new proposal on disk. Generates a uuid, validates the payload,
+ * and writes `.harness/proposals/<id>.json` atomically.
+ */
+declare function createProposal(projectPath: string, input: EmitSkillProposalInput): Promise<SkillProposal>;
+declare function getProposal(projectPath: string, id: string): Promise<SkillProposal | null>;
+interface ListProposalsOptions {
+    status?: ProposalStatus | 'all';
+}
+declare function listProposals(projectPath: string, opts?: ListProposalsOptions): Promise<SkillProposal[]>;
+/**
+ * Apply a shallow patch to an existing proposal. Returns the updated proposal.
+ * Patch is validated through SkillProposalSchema (round-trip), preserving
+ * cross-field invariants (kind ↔ content shape).
+ */
+declare function updateProposal(projectPath: string, id: string, patch: Partial<SkillProposal>): Promise<SkillProposal>;
+
+interface SkillUsageStats {
+    count: number;
+    lastUsed?: string;
+    windowDays: number;
+}
+/**
+ * Derive per-skill usage stats from the existing skill_invocation telemetry
+ * (`.harness/metrics/adoption.jsonl`). No new emission; this is read-only
+ * aggregation surfaced explicitly on the Proposals page so reviewers can see
+ * whether a refinement is touching a hot skill.
+ */
+declare function deriveSkillUsage(projectRoot: string, skillName: string, windowDays?: number): SkillUsageStats;
+
 declare const VERSION = "0.25.0";
 
-export { AGENT_DESCRIPTORS, AGREEMENT_LINE_GAP, ALLOWED_FIELD_KEYS, ALL_SOLUTION_CATEGORIES, ARCHITECTURE_DESCRIPTOR, type AST, type AcquireOptions, type ActionContext, type ActionEvent, type ActionEventHandler, type ActionEventType, type ActionResult, type ActionSink, type ActionTracker, type ActionType, type AdjustedForecast, AdjustedForecastSchema, type AgentAction, AgentActionEmitter, type AgentConfigFallbackReason, type AgentConfigFinding, type AgentConfigOptions, type AgentConfigSeverity, type AgentConfigValidation, type AgentExecutor, type AgentMapLink, type AgentMapSection, type AgentMapValidation, type AgentProcess, type AgentReviewResult, type AgentType, type AgentsMapConfig, type AnnotationIssue, type AnnotationIssueType, AnthropicCacheAdapter, type AppendLearningResult, ArchBaseline, ArchBaselineManager, ArchConfig, ArchDiffResult, ArchMetricCategory, type ArchiveHooks, type ArchiveSessionOptions, type AssembleInput, BUG_DETECTION_DESCRIPTOR, BUG_TRACK_CATEGORIES, type BaseError, type Baseline, BaselineManager, type BaselinesFile, type BenchmarkResult, type BenchmarkRunOptions, BenchmarkRunner, type BlueprintData, BlueprintGenerator, type BlueprintModule, type BlueprintOptions, type BoundaryDefinition, type BoundaryValidation, type BoundaryValidator, type BoundaryViolation, type BranchValidationResult, type BranchingConfig, type BrokenLink, type BudgetedLearningsOptions, type Bundle, type BundleConstraints, BundleConstraintsSchema, BundleSchema, CACHE_TTL_MS, CINotifier, COMPLIANCE_DESCRIPTOR, CORROBORATED_AGREEMENT, type CacheAdapter, CacheMetricsRecorder, type CacheMetricsRecorderOptions, type CategoryForecast, CategoryForecastSchema, CategorySnapshotSchema, type ChangeType, type ChangedFile, ChecklistBuilder, type CircularDependency, CircularDepsCollector, type CircularDepsResult, type CleanupFinding, type CodeBlock, type CodeChanges, type CodePattern, type CodeReference, type CodeSymbol, type CodebaseSnapshot, Collector, type CommentedCodeBlock, type CommitFormat, type CommitHistoryEntry, type CommitValidation, CompactionPipeline, type CompactionStrategy, ComplexityCollector, type ComplexityConfig, type ComplexityReport, type ComplexityThresholds, type ComplexityViolation, type ComposeInsightsOptions, type CompoundLockHandle, CompoundLockHeldError, type ConfidenceTier, ConfidenceTierSchema, type ConfigError, type ConfigPattern, type Confirmation, ConfirmationSchema, ConflictError, type ConflictReport, ConsoleSink, type ConstraintError, type ConstraintNodeStore, ConstraintRule, type Content, type ContextBundle, type ContextError, type ContextFile, type ContextFilterResult, type ContextScopeOptions, ContributingFeatureSchema, type Contributions, ContributionsSchema, type Convention, CouplingCollector, type CouplingConfig, type CouplingReport, type CouplingThresholds, type CouplingViolation, type CoverageOptions, type CoverageReport, type CriticalPathEntry, CriticalPathResolver, type CriticalPathSet, type CustomRule, type CustomRuleResult, DEFAULT_LOADER_CONFIG, DEFAULT_PROVIDER_TIERS, DEFAULT_SECURITY_CONFIG, DEFAULT_STABILITY_THRESHOLDS, DEFAULT_STATE, DEFAULT_STREAM_INDEX, DEFAULT_TOKEN_BUDGET, DESTRUCTIVE_BASH, DOMAIN_BASELINES, type DailyAdoption, type DataPoint, type DeadCodeConfig, type DeadCodeReport, type DeadExport, type DeadFile, type DeadInternal, type DeduplicateFindingsOptions, DepDepthCollector, type DependencyEdge, type DependencyGraph, type DependencyValidation, type DependencyViolation, type DetectStaleResult, type DiffInfo, type Direction$1 as Direction, DirectionSchema$1 as DirectionSchema, type DocumentationDrift, type DocumentationFile, type DocumentationGap, type DriftConfig, type DriftReport, EMPTY_SUPPLY_CHAIN, ETagStore, EVIDENCE_SATURATION, EXTENSION_MAP, type EligibilityResult, EmergenceResult, type EmitEventInput, type EmitEventOptions, type EmitEventResult, type EmitInteractionInput, EmitInteractionInputSchema, EntropyAnalyzer, type EntropyConfig, EntropyConfigSchema, type EntropyError, type EntropyReport, type EstimatorCoefficients, type EventType, type EvidenceCoverageReport, ExclusionSet, type ExecutorHealth, type Export, type ExportMap, type ExternalSyncOptions, FACTOR_WEIGHTS, type FailureEntry, FailureEntrySchema, type FallbackPricingFile, type FanOutOptions, type FeaturePatch, type FeedbackAgentConfig, type FeedbackConfig, type FeedbackError$1 as FeedbackError, type FileCategory, type FileLessScoredCandidate, FileSink, type FindingLifecycle, FindingLifecycleSchema, type FindingSeverity, type Fix, type FixConfig, type FixResult, type FixType, ForbiddenImportCollector, type ForbiddenImportViolation, type ForbiddenPattern, type GateConfig, GateConfigSchema, type GateResult, GateResultSchema, GeminiCacheAdapter, type GenerateRubricOptions, type GenerationSection, type GitHubInlineComment, GitHubIssuesSyncAdapter, type GitScanOptions, type GraphAdapter, type GraphComplexityData, type GraphCouplingData, type GraphCoverageData, type GraphCriticalPathData, type GraphDependencyData, type GraphHarnessCheckData, type GraphImpactData, type GraphNode, type Handoff, HandoffSchema, type HarnessState, HarnessStateSchema, type HealthCheckResult, type HistoryEvent, type HistoryEventType, type Hotspot$1 as Hotspot, type HotspotContext, type Import, type InjectionFinding, type InjectionPattern, type InjectionSeverity, type InlineReference, type IntegrityReport, type InteractionType, InteractionTypeSchema, type InternalSymbol, type IsoWeek, type JSDocComment, KNOWLEDGE_TRACK_CATEGORIES, LITELLM_PRICING_URL, type LanguageParser, type Layer, type LayerConfig, LayerViolationCollector, type LearningPattern, type LearningsFrontmatter, type LearningsIndexEntry, type LiteLLMModelEntry, type LiteLLMPricingData, type LoadEventsOptions, type LoaderConfig, type Lockfile, type LockfilePackage, LockfilePackageSchema, LockfileSchema, type LogEntry, type LogFilter, MOCK_ADAPTER_NAME, type MakeTrackerConflictBodyOptions, type Manifest, ManifestSchema, type MechanicalCheckOptions, type MechanicalCheckResult, type MechanicalCheckStatus, type MechanicalFinding, type MergeResult, type Metric, MetricResult, type ModelProvider, type ModelTier, type ModelTierConfig, type ModuleDependency, ModuleSizeCollector, type NewFeatureInput, NoOpExecutor, NoOpSink, NoOpTelemetryAdapter, OTLPExporter, type OTLPExporterOptions, OpenAICacheAdapter, type OrchestratorResult, type OrphanedDep, type OutlineResult, type OverlapDimensions, type OverlapResult, PII_FIELD_DENYLIST, PII_LINE_RE, PII_TOKENS, type PackedEnvelope, type PaginatedSlice, type PaginationMeta, type ParallelGroups, type ParseError, type ParsedFile, type ParsedSection, type ParserLookup, type PatternConfig, PatternConfigSchema, type PatternMatch, type PatternReport, type PatternViolation, type PeerReview, type PeerReviewOptions, type PilotScoringOptions, type PipelineContext, type PipelineFlags, type PipelineOptions, type PipelineResult, type PrMetadata, PredictionEngine, type PredictionOptions, PredictionOptionsSchema, type RegressionResult as PredictionRegressionResult, RegressionResultSchema as PredictionRegressionResultSchema, type PredictionResult, PredictionResultSchema, type PredictionWarning, PredictionWarningSchema, type PricingCacheFile, type PricingDataset, type PriorReview, ProjectScanner, type PromoteResult, type ProtectedRegion, type ProtectedRegionMap, type ProtectionScope, type ProviderDefaults, type ProviderSystemBlock, type ProviderToolBlock, type PruneResult, PulseAdapterAlreadyRegisteredError, PulseConfigSchema, type PulseConfigValidation, PulseDbSourceSchema, PulseSourcesSchema, type Question, QuestionSchema, REQUIRED_SECTIONS, type ReachabilityNode, RegressionDetector, type RegressionFit, type RegressionReport, type RegressionResult$1 as RegressionResult, type ReviewAgentDescriptor, type ReviewAssessment, type ReviewChecklist, type ReviewComment, type ReviewContext, type ReviewDomain, type ReviewFinding, type ReviewItem, type ReviewOutputOptions, type ReviewPipelineResult, type ReviewStage, type ReviewStrength, type RoadmapMode, type RoadmapModeConfig, type RoadmapModeValidationConfig, type RoadmapTrackerClient, type Rubric, type RubricItem, type RuleOverride, RuleRegistry, type RunCIChecksInput, type RunPipelineOptions, SECURITY_DESCRIPTOR, STALENESS_WARNING_DAYS, STANDALONE_AGREEMENT, STATUS_RANK, type SafetyLevel, type ScanConfigFileResult, type ScanConfigFinding, type ScanConfigResult, type Hotspot as ScanHotspot, type HotspotOptions as ScanHotspotOptions, type ScanResult, type ScannedCommit, type ScoredCandidate, type SearchMatch, type SearchResult, type SecurityCategory, type SecurityCategorySnapshot, SecurityCategorySnapshotSchema, type SecurityConfidence, type SecurityConfig, SecurityConfigSchema, type Direction as SecurityDirection, DirectionSchema as SecurityDirectionSchema, type SecurityFinding, type SecurityRule, SecurityScanner, type SecuritySeverity, type SecurityTimelineFile, SecurityTimelineFileSchema, SecurityTimelineManager, type SecurityTimelineSnapshot, SecurityTimelineSnapshotSchema, type SecurityTrendLine, SecurityTrendLineSchema, type SecurityTrendResult, SecurityTrendResultSchema, type SeedOptions, type SelfReviewConfig, type SessionSummaryData, SharableBoundaryConfigSchema, SharableForbiddenImportSchema, SharableLayerSchema, SharableSecurityRulesSchema, type SizeBudgetConfig, type SizeBudgetReport, type SizeBudgetViolation, type SkillEvent, SkillEventSchema, type SkillExecutor, type SkillLoadPlan, SolutionDocFrontmatterSchema, type SolutionsDirValidation, type SourceFile, type Span, type SpanAttributes, type SpanEvent, SpanKind, type SpecImpactEstimate, SpecImpactEstimateSchema, SpecImpactEstimator, SpecImpactSignalsSchema, type StabilityForecast, StabilityForecastSchema, type StabilityTaggedBlock, type StaleConstraint, type StalenessEntry, type StalenessReport, type StepExecutor, type StrategySeed, type StreamIndex, StreamIndexSchema, type StreamInfo, StreamInfoSchema, StructuralStrategy, type StructureValidation, type Suggestion, type SuggestionReport, type SupplyChainSnapshot, SupplyChainSnapshotSchema, type SupportedLanguage, type SuppressionRecord, type SymbolKind, type SyncChange, type SyncOptions, type TaintCheckResult, type TaintFinding, type TaintState, type TelemetryAdapter, type TelemetryHealth, ThresholdConfig, type TimeRange, type TimeToFixResult, TimeToFixResultSchema, type TimeToFixStats, TimeToFixStatsSchema, type CategorySnapshot as TimelineCategorySnapshot, type TimelineFile, TimelineFileSchema, TimelineManager, type TimelineSnapshot, TimelineSnapshotSchema, type TokenBudget, type TokenBudgetOverrides, type ToolDefinition, type Trace, type TraceSpan, type TrackedFeature, type TrackerClientConfig, type TrackerConflictBody, type TrackerSyncAdapter, type Transition, TransitionSchema, type TrendAttribution, TrendAttributionSchema, type TrendLine, TrendLineSchema, type TrendResult, TrendResultSchema, TruncationStrategy, type TrustScoreOptions, type TurnExecutor, TypeScriptParser, type UnfoldResult, type UnusedImport, type UpdateCheckState, VALIDATION_SCORES, VALID_SCOPES, VERSION, type ValidateFindingsOptions, type ValidationError, Violation, type ViolationCluster, ViolationHistory, ViolationHistoryManager, ViolationSnapshot, WHATWG_BAD_PORTS, type WorkflowPhase, type WritePulseConfigOptions, acquireCompoundLock, addProvenance, agentConfigRules, aggregateByDay as aggregateAdoptionByDay, aggregateByDay$1 as aggregateByDay, aggregateBySession, aggregateBySkill, analyzeDiff, analyzeLearningPatterns, appendFailure, appendLearning, appendSessionEntry, applyFixes, applyHotspotDowngrade, applyRecencyWeights, applySyncChanges, archiveFailures, archiveLearnings, archiveSession, archiveStream, assembleCandidateReport, assembleReport, assertPortUsable, assertSanitized, assignFeature, buildDependencyGraph, buildExclusionSet, buildSnapshot, calculateCacheSavings, calculateCost, checkDocCoverage, checkEligibility, checkEvidenceCoverage, checkOverlap, checkTaint, classifyConfidence, classifyFinding, clearEventHashCache, clearFailuresCache, clearLearningsCache, clearPulseAdapters, clearTaint, clusterViolations, collectEvents, composeInsights, computeContentHash, computeHotspots, computeLexicalSimilarity, computeLoadPlan, computeOverallSeverity, computeScanExitCode, computeTrustScores, computeWindow, configureFeedback, constraintRuleId, contextBudget, contextFilter, countLearningEntries, createBoundaryValidator, createCommentedCodeFixes, createError, createFixes, createForbiddenImportFixes, createOrphanedDepFixes, createParseError, createRegionMap, createSelfReview, createStream, createTrackerClient, crossReferenceUndocumentedFixes, cryptoRules, deduplicateCleanupFindings, deduplicateFindings, deepMergeConstraints, defaultCollectors, defineLayer, deserializationRules, detectChangeType, detectCircularDeps, detectCircularDepsInFiles, detectComplexityViolations, detectCouplingViolations, detectDeadCode, detectDocDrift, detectEmergentConstraints, detectLanguage, detectPatternViolations, detectSizeBudgetViolations, detectStack, detectStaleConstraints, detectStaleLearnings, determineAssessment, diff, emitEvent, estimateTokens, executeWorkflow, expressRules, extractBundle, extractDirectoryScope, extractFileReferences, extractHeadlines, extractIndexEntry, extractLevel, extractMarkdownLinks, extractSections, fanOutReview, findParallelGroups, formatCIReportAsMarkdown, formatEventTimeline, formatFindingBlock, formatGitHubComment, formatGitHubSummary, formatIsoWeek, formatOutline, formatTerminalOutput, fullSync, generateAgentsMap, generateRubric, generateSuggestions, getActionEmitter, getExitCode, getFeedbackConfig, getInjectionPatterns, getModelPrice, getOrCreateInstallId, getOutline, getParser, getPhaseCategories, getPulseAdapter, getRoadmapMode, getStreamForBranch, getTaintFilePath, getTrustLevel, getUpdateNotification, gitScan, goRules, injectionRules, insecureDefaultsRules, invalidateCheckState, isBadPort, isDuplicateFinding, isRegression, isSanitizedResult, isSmallSuggestion, isUpdateCheckEnabled, isoWeek, listActiveSessions, listPulseAdapters, listStreams, listTaintedSessions, loadBudgetedLearnings, loadEvents, loadFailures, loadHandoff, loadIndexEntries, loadNotificationsConfig, loadPricingData, loadProjectRoadmapMode, loadRelevantLearnings, loadSessionSummary, loadState, loadStreamIndex, loadTrackerClientConfigFromProject, loadTrackerSyncConfig, logAgentAction, makeTrackerConflictBody, mapInjectionFindings, mapSecurityFindings, mapSecuritySeverity, markProtectedFindings, mcpRules, index as migrate, migrateToStreams, networkRules, nodeRules, normalizeLearningContent, normalizeViolationPattern, paginate, parseCCRecords, parseDateFromEntry, parseDiff, parseFile, parseFileRegions, parseFrontmatter, parseHarnessIgnore, parseLiteLLMData, parseLookback, parseManifest, parseProtectedRegions, parseRoadmap, parseSections, parseSecurityConfig, parseSize, pathTraversalRules, previewFix, projectValue, promoteSessionLearnings, pruneLearnings, reactRules, readAdoptionRecords, readCheckState, readCostRecords, readIdentity, readLockfile, readSessionSection, readSessionSections, readTaint, registerMockAdapter, registerPulseAdapter, removeContributions, removeProvenance, requestMultiplePeerReviews, requestPeerReview, resetFeedbackConfig, resetParserCache, resolveConsent, resolveFileToLayer, resolveModelTier, resolveReverseStatus, resolveRuleSeverity, resolveSessionDir, resolveStability, resolveStreamPath, resolveThresholds, runFallbackRules as runAgentConfigFallbackRules, runAll, runArchitectureAgent, runBugDetectionAgent, runCIChecks, runComplianceAgent, runMechanicalChecks, runMechanicalGate, runMultiTurnPipeline, runPipeline, runPulse, runReviewPipeline, runSecurityAgent, saveHandoff, saveState, saveStreamIndex, scanForInjection, scopeContext, scoreRoadmapCandidates, scoreRoadmapCandidatesFileLess, scoreRoadmapCandidatesForMode, searchSymbols, secretRules, securityFindingId, seedFromStrategy, send, serializeEnvelope, serializeRoadmap, setActiveStream, sharpEdgesRules, shouldRunCheck, spawnBackgroundCheck, splitBundlesByStage, stageDomains, suggestCategory, syncConstraintNodes, syncFromExternal, syncRoadmap, syncToExternal, tagUncitedFindings, topSkills, touchStream, trackAction, unfoldRange, unfoldSymbol, updateSessionEntryStatus, updateSessionIndex, validateAgentConfigs, validateAgentsMap, validateBoundaries, validateBranchName, validateCommitMessage, validateConfig, validateDependencies, validateFileStructure, validateFindings, validateKnowledgeMap, validatePatternConfig, validatePulseConfig, validateRoadmapMode, validateSolutionsDir, violationId, weeksUntilThreshold, weightedLinearRegression, writeConfig, writeLockfile, writePulseConfig, writeSessionSummary, writeTaint, xssRules };
+export { AGENT_DESCRIPTORS, AGREEMENT_LINE_GAP, ALLOWED_FIELD_KEYS, ALL_SOLUTION_CATEGORIES, ARCHITECTURE_DESCRIPTOR, type AST, type AcquireOptions, type ActionContext, type ActionEvent, type ActionEventHandler, type ActionEventType, type ActionResult, type ActionSink, type ActionTracker, type ActionType, type AdjustedForecast, AdjustedForecastSchema, type AgentAction, AgentActionEmitter, type AgentConfigFallbackReason, type AgentConfigFinding, type AgentConfigOptions, type AgentConfigSeverity, type AgentConfigValidation, type AgentExecutor, type AgentMapLink, type AgentMapSection, type AgentMapValidation, type AgentProcess, type AgentReviewResult, type AgentType, type AgentsMapConfig, type AnnotationIssue, type AnnotationIssueType, AnthropicCacheAdapter, type AppendLearningResult, ArchBaseline, ArchBaselineManager, ArchConfig, ArchDiffResult, ArchMetricCategory, type ArchiveHooks, type ArchiveSessionOptions, type AssembleInput, BUG_DETECTION_DESCRIPTOR, BUG_TRACK_CATEGORIES, type BaseError, type Baseline, BaselineManager, type BaselinesFile, type BenchmarkResult, type BenchmarkRunOptions, BenchmarkRunner, type BlueprintData, BlueprintGenerator, type BlueprintModule, type BlueprintOptions, type BoundaryDefinition, type BoundaryValidation, type BoundaryValidator, type BoundaryViolation, type BranchValidationResult, type BranchingConfig, type BrokenLink, type BudgetedLearningsOptions, type Bundle, type BundleConstraints, BundleConstraintsSchema, BundleSchema, CACHE_TTL_MS, CINotifier, COMPLIANCE_DESCRIPTOR, CORROBORATED_AGREEMENT, type CacheAdapter, CacheMetricsRecorder, type CacheMetricsRecorderOptions, type CategoryForecast, CategoryForecastSchema, CategorySnapshotSchema, type ChangeType, type ChangedFile, ChecklistBuilder, type CircularDependency, CircularDepsCollector, type CircularDepsResult, type CleanupFinding, type CodeBlock, type CodeChanges, type CodePattern, type CodeReference, type CodeSymbol, type CodebaseSnapshot, Collector, type CommentedCodeBlock, type CommitFormat, type CommitHistoryEntry, type CommitValidation, CompactionPipeline, type CompactionStrategy, ComplexityCollector, type ComplexityConfig, type ComplexityReport, type ComplexityThresholds, type ComplexityViolation, type ComposeInsightsOptions, type CompoundLockHandle, CompoundLockHeldError, type ConfidenceTier, ConfidenceTierSchema, type ConfigError, type ConfigPattern, type Confirmation, ConfirmationSchema, ConflictError, type ConflictReport, ConsoleSink, type ConstraintError, type ConstraintNodeStore, ConstraintRule, type Content, type ContextBundle, type ContextError, type ContextFile, type ContextFilterResult, type ContextScopeOptions, ContributingFeatureSchema, type Contributions, ContributionsSchema, type Convention, CouplingCollector, type CouplingConfig, type CouplingReport, type CouplingThresholds, type CouplingViolation, type CoverageOptions, type CoverageReport, type CriticalPathEntry, CriticalPathResolver, type CriticalPathSet, type CustomRule, type CustomRuleResult, DEFAULT_LOADER_CONFIG, DEFAULT_PROVIDER_TIERS, DEFAULT_SECURITY_CONFIG, DEFAULT_STABILITY_THRESHOLDS, DEFAULT_STATE, DEFAULT_STREAM_INDEX, DEFAULT_TOKEN_BUDGET, DESTRUCTIVE_BASH, DOMAIN_BASELINES, type DailyAdoption, type DataPoint, type DeadCodeConfig, type DeadCodeReport, type DeadExport, type DeadFile, type DeadInternal, type DeduplicateFindingsOptions, DepDepthCollector, type DependencyEdge, type DependencyGraph, type DependencyValidation, type DependencyViolation, type DetectStaleResult, type DiffInfo, type Direction$1 as Direction, DirectionSchema$1 as DirectionSchema, type DocumentationDrift, type DocumentationFile, type DocumentationGap, type DriftConfig, type DriftReport, EMPTY_SUPPLY_CHAIN, ETagStore, EVIDENCE_SATURATION, EXTENSION_MAP, type EligibilityResult, EmergenceResult, type EmitEventInput, type EmitEventOptions, type EmitEventResult, type EmitInteractionInput, EmitInteractionInputSchema, EntropyAnalyzer, type EntropyConfig, EntropyConfigSchema, type EntropyError, type EntropyReport, type EstimatorCoefficients, type EventType, type EvidenceCoverageReport, ExclusionSet, type ExecutorHealth, type Export, type ExportMap, type ExternalSyncOptions, FACTOR_WEIGHTS, type FailureEntry, FailureEntrySchema, type FallbackPricingFile, type FanOutOptions, type FeaturePatch, type FeedbackAgentConfig, type FeedbackConfig, type FeedbackError$1 as FeedbackError, type FileCategory, type FileLessScoredCandidate, FileSink, type FindingLifecycle, FindingLifecycleSchema, type FindingSeverity, type Fix, type FixConfig, type FixResult, type FixType, ForbiddenImportCollector, type ForbiddenImportViolation, type ForbiddenPattern, type GateConfig, GateConfigSchema, type GateResult, GateResultSchema, GeminiCacheAdapter, type GenerateRubricOptions, type GenerationSection, type GitHubInlineComment, GitHubIssuesSyncAdapter, type GitScanOptions, type GraphAdapter, type GraphComplexityData, type GraphCouplingData, type GraphCoverageData, type GraphCriticalPathData, type GraphDependencyData, type GraphHarnessCheckData, type GraphImpactData, type GraphNode, type Handoff, HandoffSchema, type HarnessState, HarnessStateSchema, type HealthCheckResult, type HistoryEvent, type HistoryEventType, type Hotspot$1 as Hotspot, type HotspotContext, type Import, type InjectionFinding, type InjectionPattern, type InjectionSeverity, type InlineReference, type IntegrityReport, type InteractionType, InteractionTypeSchema, type InternalSymbol, type IsoWeek, type JSDocComment, KNOWLEDGE_TRACK_CATEGORIES, LITELLM_PRICING_URL, type LanguageParser, type Layer, type LayerConfig, LayerViolationCollector, type LearningPattern, type LearningsFrontmatter, type LearningsIndexEntry, type ListProposalsOptions, type LiteLLMModelEntry, type LiteLLMPricingData, type LoadEventsOptions, type LoaderConfig, type Lockfile, type LockfilePackage, LockfilePackageSchema, LockfileSchema, type LogEntry, type LogFilter, MOCK_ADAPTER_NAME, type MakeTrackerConflictBodyOptions, type Manifest, ManifestSchema, type MechanicalCheckOptions, type MechanicalCheckResult, type MechanicalCheckStatus, type MechanicalFinding, type MergeResult, type Metric, MetricResult, type ModelProvider, type ModelTier, type ModelTierConfig, type ModuleDependency, ModuleSizeCollector, type NewFeatureInput, NoOpExecutor, NoOpSink, NoOpTelemetryAdapter, OTLPExporter, type OTLPExporterOptions, OpenAICacheAdapter, type OrchestratorResult, type OrphanedDep, type OsvAdvisory, type OsvCheckResult, type OsvClient, type OsvClientOptions, type OsvPackageRef, type OutlineResult, type OverlapDimensions, type OverlapResult, PII_FIELD_DENYLIST, PII_LINE_RE, PII_TOKENS, type PackedEnvelope, type PaginatedSlice, type PaginationMeta, type ParallelGroups, type ParseError, type ParsedFile, type ParsedSection, type ParserLookup, type PatternConfig, PatternConfigSchema, type PatternMatch, type PatternReport, type PatternViolation, type PeerReview, type PeerReviewOptions, type PilotScoringOptions, type PipelineContext, type PipelineFlags, type PipelineOptions, type PipelineResult, type PrMetadata, PredictionEngine, type PredictionOptions, PredictionOptionsSchema, type RegressionResult as PredictionRegressionResult, RegressionResultSchema as PredictionRegressionResultSchema, type PredictionResult, PredictionResultSchema, type PredictionWarning, PredictionWarningSchema, type PricingCacheFile, type PricingDataset, type PriorReview, ProjectScanner, type PromoteResult, ProposalConflictError, ProposalNotFoundError, type ProtectedRegion, type ProtectedRegionMap, type ProtectionScope, type ProviderDefaults, type ProviderSystemBlock, type ProviderToolBlock, type PruneResult, PulseAdapterAlreadyRegisteredError, PulseConfigSchema, type PulseConfigValidation, PulseDbSourceSchema, PulseSourcesSchema, type Question, QuestionSchema, REQUIRED_SECTIONS, type ReachabilityNode, RegressionDetector, type RegressionFit, type RegressionReport, type RegressionResult$1 as RegressionResult, type ReviewAgentDescriptor, type ReviewAssessment, type ReviewChecklist, type ReviewComment, type ReviewContext, type ReviewDomain, type ReviewFinding, type ReviewItem, type ReviewOutputOptions, type ReviewPipelineResult, type ReviewStage, type ReviewStrength, type RoadmapMode, type RoadmapModeConfig, type RoadmapModeValidationConfig, type RoadmapTrackerClient, type Rubric, type RubricItem, type RuleOverride, RuleRegistry, type RunCIChecksInput, type RunPipelineOptions, SECURITY_DESCRIPTOR, STALENESS_WARNING_DAYS, STANDALONE_AGREEMENT, STATUS_RANK, type SafetyLevel, type ScanConfigFileResult, type ScanConfigFinding, type ScanConfigResult, type Hotspot as ScanHotspot, type HotspotOptions as ScanHotspotOptions, type ScanResult, type ScannedCommit, type ScoredCandidate, type SearchMatch, type SearchResult, type SecurityCategory, type SecurityCategorySnapshot, SecurityCategorySnapshotSchema, type SecurityConfidence, type SecurityConfig, SecurityConfigSchema, type Direction as SecurityDirection, DirectionSchema as SecurityDirectionSchema, type SecurityFinding, type SecurityRule, SecurityScanner, type SecuritySeverity, type SecurityTimelineFile, SecurityTimelineFileSchema, SecurityTimelineManager, type SecurityTimelineSnapshot, SecurityTimelineSnapshotSchema, type SecurityTrendLine, SecurityTrendLineSchema, type SecurityTrendResult, SecurityTrendResultSchema, type SeedOptions, type SelfReviewConfig, type SessionSummaryData, SharableBoundaryConfigSchema, SharableForbiddenImportSchema, SharableLayerSchema, SharableSecurityRulesSchema, type SizeBudgetConfig, type SizeBudgetReport, type SizeBudgetViolation, type SkillEvent, SkillEventSchema, type SkillExecutor, type SkillLoadPlan, type SkillUsageStats, SolutionDocFrontmatterSchema, type SolutionsDirValidation, type SourceFile, type Span, type SpanAttributes, type SpanEvent, SpanKind, type SpecImpactEstimate, SpecImpactEstimateSchema, SpecImpactEstimator, SpecImpactSignalsSchema, type StabilityForecast, StabilityForecastSchema, type StabilityTaggedBlock, type StaleConstraint, type StalenessEntry, type StalenessReport, type StepExecutor, type StrategySeed, type StreamIndex, StreamIndexSchema, type StreamInfo, StreamInfoSchema, StructuralStrategy, type StructureValidation, type Suggestion, type SuggestionReport, type SupplyChainSnapshot, SupplyChainSnapshotSchema, type SupportedLanguage, type SuppressionRecord, type SymbolKind, type SyncChange, type SyncOptions, type TaintCheckResult, type TaintFinding, type TaintState, type TelemetryAdapter, type TelemetryHealth, ThresholdConfig, type TimeRange, type TimeToFixResult, TimeToFixResultSchema, type TimeToFixStats, TimeToFixStatsSchema, type CategorySnapshot as TimelineCategorySnapshot, type TimelineFile, TimelineFileSchema, TimelineManager, type TimelineSnapshot, TimelineSnapshotSchema, type TokenBudget, type TokenBudgetOverrides, type ToolDefinition, type Trace, type TraceSpan, type TrackedFeature, type TrackerClientConfig, type TrackerConflictBody, type TrackerSyncAdapter, type Transition, TransitionSchema, type TrendAttribution, TrendAttributionSchema, type TrendLine, TrendLineSchema, type TrendResult, TrendResultSchema, TruncationStrategy, type TrustScoreOptions, type TurnExecutor, TypeScriptParser, type UnfoldResult, type UnusedImport, type UpdateCheckState, VALIDATION_SCORES, VALID_SCOPES, VERSION, type ValidateFindingsOptions, type ValidationError, Violation, type ViolationCluster, ViolationHistory, ViolationHistoryManager, ViolationSnapshot, WHATWG_BAD_PORTS, type WorkflowPhase, type WritePulseConfigOptions, acquireCompoundLock, addProvenance, agentConfigRules, aggregateByDay as aggregateAdoptionByDay, aggregateByDay$1 as aggregateByDay, aggregateBySession, aggregateBySkill, analyzeDiff, analyzeLearningPatterns, appendFailure, appendLearning, appendSessionEntry, applyFixes, applyHotspotDowngrade, applyRecencyWeights, applySyncChanges, archiveFailures, archiveLearnings, archiveSession, archiveStream, assembleCandidateReport, assembleReport, assertPortUsable, assertSanitized, assignFeature, buildDependencyGraph, buildExclusionSet, buildSnapshot, calculateCacheSavings, calculateCost, checkDocCoverage, checkEligibility, checkEvidenceCoverage, checkOverlap, checkTaint, classifyConfidence, classifyFinding, clearEventHashCache, clearFailuresCache, clearLearningsCache, clearPulseAdapters, clearTaint, clusterViolations, collectEvents, composeInsights, computeContentHash, computeHotspots, computeLexicalSimilarity, computeLoadPlan, computeOverallSeverity, computeScanExitCode, computeTrustScores, computeWindow, configureFeedback, constraintRuleId, contextBudget, contextFilter, countLearningEntries, createBoundaryValidator, createCommentedCodeFixes, createError, createFixes, createForbiddenImportFixes, createOrphanedDepFixes, createOsvClient, createParseError, createProposal, createRegionMap, createSelfReview, createStream, createTrackerClient, crossReferenceUndocumentedFixes, cryptoRules, deduplicateCleanupFindings, deduplicateFindings, deepMergeConstraints, defaultCollectors, defineLayer, deriveSkillUsage, deserializationRules, detectChangeType, detectCircularDeps, detectCircularDepsInFiles, detectComplexityViolations, detectCouplingViolations, detectDeadCode, detectDocDrift, detectEmergentConstraints, detectLanguage, detectPatternViolations, detectSizeBudgetViolations, detectStack, detectStaleConstraints, detectStaleLearnings, determineAssessment, diff, emitEvent, estimateTokens, executeWorkflow, expressRules, extractBundle, extractDirectoryScope, extractFileReferences, extractHeadlines, extractIndexEntry, extractLevel, extractMarkdownLinks, extractSections, fanOutReview, findParallelGroups, formatCIReportAsMarkdown, formatEventTimeline, formatFindingBlock, formatGitHubComment, formatGitHubSummary, formatIsoWeek, formatOutline, formatTerminalOutput, fullSync, generateAgentsMap, generateRubric, generateSuggestions, getActionEmitter, getExitCode, getFeedbackConfig, getInjectionPatterns, getModelPrice, getOrCreateInstallId, getOutline, getParser, getPhaseCategories, getProposal, getPulseAdapter, getRoadmapMode, getStreamForBranch, getTaintFilePath, getTrustLevel, getUpdateNotification, gitScan, goRules, injectionRules, insecureDefaultsRules, invalidateCheckState, isBadPort, isDuplicateFinding, isRegression, isSanitizedResult, isSmallSuggestion, isUpdateCheckEnabled, isoWeek, listActiveSessions, listProposals, listPulseAdapters, listStreams, listTaintedSessions, loadBudgetedLearnings, loadEvents, loadFailures, loadHandoff, loadIndexEntries, loadNotificationsConfig, loadPricingData, loadProjectRoadmapMode, loadRelevantLearnings, loadSessionSummary, loadState, loadStreamIndex, loadTrackerClientConfigFromProject, loadTrackerSyncConfig, logAgentAction, makeTrackerConflictBody, mapInjectionFindings, mapSecurityFindings, mapSecuritySeverity, markProtectedFindings, mcpRules, index as migrate, migrateToStreams, networkRules, nodeRules, normalizeLearningContent, normalizeViolationPattern, paginate, parseCCRecords, parseDateFromEntry, parseDiff, parseFile, parseFileRegions, parseFrontmatter, parseHarnessIgnore, parseLiteLLMData, parseLookback, parseManifest, parseProtectedRegions, parseRoadmap, parseSections, parseSecurityConfig, parseSize, pathTraversalRules, previewFix, projectValue, promoteSessionLearnings, proposalsDir, pruneLearnings, reactRules, readAdoptionRecords, readCheckState, readCostRecords, readIdentity, readLockfile, readSessionSection, readSessionSections, readTaint, registerMockAdapter, registerPulseAdapter, removeContributions, removeProvenance, requestMultiplePeerReviews, requestPeerReview, resetFeedbackConfig, resetParserCache, resolveConsent, resolveFileToLayer, resolveModelTier, resolveReverseStatus, resolveRuleSeverity, resolveSessionDir, resolveStability, resolveStreamPath, resolveThresholds, runFallbackRules as runAgentConfigFallbackRules, runAll, runArchitectureAgent, runBugDetectionAgent, runCIChecks, runComplianceAgent, runMechanicalChecks, runMechanicalGate, runMultiTurnPipeline, runPipeline, runPulse, runReviewPipeline, runSecurityAgent, saveHandoff, saveState, saveStreamIndex, scanForInjection, scopeContext, scoreRoadmapCandidates, scoreRoadmapCandidatesFileLess, scoreRoadmapCandidatesForMode, searchSymbols, secretRules, securityFindingId, seedFromStrategy, send, serializeEnvelope, serializeRoadmap, setActiveStream, sharpEdgesRules, shouldRunCheck, spawnBackgroundCheck, splitBundlesByStage, stageDomains, suggestCategory, syncConstraintNodes, syncFromExternal, syncRoadmap, syncToExternal, tagUncitedFindings, topSkills, touchStream, trackAction, unfoldRange, unfoldSymbol, updateProposal, updateSessionEntryStatus, updateSessionIndex, validateAgentConfigs, validateAgentsMap, validateBoundaries, validateBranchName, validateCommitMessage, validateConfig, validateDependencies, validateFileStructure, validateFindings, validateKnowledgeMap, validatePatternConfig, validatePulseConfig, validateRoadmapMode, validateSolutionsDir, violationId, weeksUntilThreshold, weightedLinearRegression, writeConfig, writeLockfile, writePulseConfig, writeSessionSummary, writeTaint, xssRules };