@hivelore/core 0.59.0 → 0.61.0

package/dist/index.d.ts

@@ -64,6 +64,14 @@ declare const SensorSchema: z.ZodObject<{
     timeout_ms: z.ZodOptional<z.ZodNumber>;
     /** Glob-ish path prefixes the sensor applies to. Falls back to the memory's anchor paths when empty. */
     paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * Glob-ish paths the sensor must NOT fire on, even when they fall inside `paths`. Lets a
+     * production-only lesson (e.g. "no `any`") skip test doubles and fixtures without narrowing its
+     * scope file by file — the missing negation that made `paths: ['**']` fire on every `.test.ts`
+     * (field report 2026-09-02 §3.2). A lesson that IS about tests (e.g. "no `LocalDate.now()` in a
+     * test") simply leaves this empty, so it still fires there.
+     */
+    exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     /** LLM-facing self-correction message: what was done wrong and what to do instead. */
     message: z.ZodString;
     /**
@@ -108,6 +116,7 @@ declare const SensorSchema: z.ZodObject<{
     require_present?: boolean | undefined;
     command?: string | undefined;
     timeout_ms?: number | undefined;
+    exclude?: string[] | undefined;
     incident?: string | undefined;
     red_proven?: boolean | undefined;
     promoted_at?: string | undefined;
@@ -123,6 +132,7 @@ declare const SensorSchema: z.ZodObject<{
     require_present?: boolean | undefined;
     command?: string | undefined;
     timeout_ms?: number | undefined;
+    exclude?: string[] | undefined;
     incident?: string | undefined;
     red_proven?: boolean | undefined;
     severity?: "warn" | "block" | undefined;
@@ -213,6 +223,14 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         timeout_ms: z.ZodOptional<z.ZodNumber>;
         /** Glob-ish path prefixes the sensor applies to. Falls back to the memory's anchor paths when empty. */
         paths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * Glob-ish paths the sensor must NOT fire on, even when they fall inside `paths`. Lets a
+         * production-only lesson (e.g. "no `any`") skip test doubles and fixtures without narrowing its
+         * scope file by file — the missing negation that made `paths: ['**']` fire on every `.test.ts`
+         * (field report 2026-09-02 §3.2). A lesson that IS about tests (e.g. "no `LocalDate.now()` in a
+         * test") simply leaves this empty, so it still fires there.
+         */
+        exclude: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         /** LLM-facing self-correction message: what was done wrong and what to do instead. */
         message: z.ZodString;
         /**
@@ -257,6 +275,7 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         require_present?: boolean | undefined;
         command?: string | undefined;
         timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
         incident?: string | undefined;
         red_proven?: boolean | undefined;
         promoted_at?: string | undefined;
@@ -272,6 +291,7 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         require_present?: boolean | undefined;
         command?: string | undefined;
         timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
         incident?: string | undefined;
         red_proven?: boolean | undefined;
         severity?: "warn" | "block" | undefined;
@@ -370,6 +390,7 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         require_present?: boolean | undefined;
         command?: string | undefined;
         timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
         incident?: string | undefined;
         red_proven?: boolean | undefined;
         promoted_at?: string | undefined;
@@ -407,6 +428,7 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         require_present?: boolean | undefined;
         command?: string | undefined;
         timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
         incident?: string | undefined;
         red_proven?: boolean | undefined;
         severity?: "warn" | "block" | undefined;
@@ -468,6 +490,7 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         require_present?: boolean | undefined;
         command?: string | undefined;
         timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
         incident?: string | undefined;
         red_proven?: boolean | undefined;
         promoted_at?: string | undefined;
@@ -505,6 +528,7 @@ declare const MemoryFrontmatterSchema: z.ZodEffects<z.ZodObject<{
         require_present?: boolean | undefined;
         command?: string | undefined;
         timeout_ms?: number | undefined;
+        exclude?: string[] | undefined;
         incident?: string | undefined;
         red_proven?: boolean | undefined;
         severity?: "warn" | "block" | undefined;
@@ -1023,6 +1047,7 @@ declare const PROCESS_GATE_CODES: Set<string>;
  * being committed. These are the findings the gate is entitled to refuse on.
  */
 declare const CONTENT_CATCH_CODES: Set<string>;
+/** Every code that describes the diff rather than the repo's standing state. */
 /** Setup/baseline gates — about the repo's knowledge layer being cold, not the change just made. */
 declare const SETUP_GATE_CODES: Set<string>;
 /**
@@ -1037,14 +1062,12 @@ interface GatePolicyInput {
     mode?: "off" | "advisory" | "strict";
     processGate?: "warn" | "block";
     humanCommits?: "relaxed" | "strict";
-    scoreThreshold?: number;
 }
 interface GatePolicy {
     posture: GatePosture;
     mode: "off" | "advisory" | "strict";
     processGate: "warn" | "block";
     humanCommits: "relaxed" | "strict";
-    scoreThreshold: number;
     /** Which fields the user pinned explicitly, so `doctor` can show posture vs. override. */
     overrides: string[];
 }
@@ -1060,40 +1083,15 @@ interface GateVerdictInput {
     /** Env signals that identified the agent, for the actor label. */
     agentSignals?: string[];
 }
-interface BaselineHealth {
-    /**
-     * Health of the repo's KNOWLEDGE LAYER, 0–100. Deliberately not a verdict on the change: content
-     * catches are excluded, because a number that moves both when the repo is cold and when this
-     * particular diff repeated a lesson cannot be tracked over time — it never means one thing.
-     */
-    score: number;
-    threshold: number;
-    checks: {
-        total: number;
-        ok: number;
-        warn: number;
-        error: number;
-    };
-}
 interface GateVerdict {
     findings: GateFinding[];
     should_block: boolean;
     actor: string;
-    baseline_health: BaselineHealth;
     /** Content catches that refuse this change, one entry per memory (never the same lesson twice). */
     refusals: GateFinding[];
     /** Why process gates did or did not bind on this run. */
     process_gate_reason: string;
 }
-/**
- * Baseline health, computed from the repo's STANDING STATE only.
- *
- * Content catches are excluded on purpose. They are a verdict about one diff; folding them into a
- * health percentage meant the number dropped because of a change under review and rose again when
- * that change was fixed, while also encoding "the corpus is cold". One number, two meanings, and so
- * no meaning at all — nobody could act on a trend in it.
- */
-declare function computeBaselineHealth(findings: GateFinding[], threshold: number): BaselineHealth;
 /**
  * Collapse content catches so one lesson is reported once.
  *
@@ -1108,13 +1106,6 @@ declare function dedupeRefusals(findings: GateFinding[]): GateFinding[];
  * Decide the whole verdict in one pass. Pure: same inputs, same answer, anywhere.
  */
 declare function decideVerdict(input: GateVerdictInput): GateVerdict;
-/**
- * The health finding, emitted only when it is worth reading: below target, and nothing else refused.
- *
- * When a documented lesson refuses a change, that lesson is the message. Appending "health 2% — top
- * penalties: …" underneath buries the one line the developer needs.
- */
-declare function buildBaselineHealthFinding(findings: GateFinding[], health: BaselineHealth, shouldBlock: boolean): GateFinding | null;
 
 /**
  * How much does an anchor actually TELL US?
@@ -1227,7 +1218,7 @@ declare function compareVersions(a: string, b: string): number;
  *
  * Pure: the registry lookup and the tag listing happen in the caller.
  */
-type NpmPublicationCode = "npm-published" | "npm-publish-pending" | "npm-releases-skipped" | "npm-publication-unverified";
+type NpmPublicationCode = "npm-published" | "npm-publish-pending" | "npm-releases-skipped" | "npm-publication-incoherent" | "npm-publication-unverified";
 interface NpmPublicationInput {
     packageName: string;
     /** Version in the working tree (the lockstep version). */
@@ -1246,6 +1237,37 @@ interface NpmPublicationVerdict {
     fix?: string;
 }
 declare function classifyNpmPublication(input: NpmPublicationInput): NpmPublicationVerdict;
+/** One lockstep package as seen from the registry. */
+interface LockstepPackageState {
+    packageName: string;
+    /** Latest version on the registry, or null when it could not be reached. */
+    publishedVersion: string | null;
+    /** Tagged versions strictly between `publishedVersion` and the local version. */
+    taggedBetween?: readonly string[];
+}
+interface LockstepPublicationInput {
+    /** The lockstep version in the working tree — every package should end up here. */
+    localVersion: string;
+    packages: readonly LockstepPackageState[];
+    publishHint?: string;
+}
+/**
+ * Judge the WHOLE lockstep set, not one representative package.
+ *
+ * Checking a single package assumes publication is atomic. It is not: `publish:all` runs one
+ * `pnpm publish` per package, so any of them can fail on its own (an expired OTP, a 403) while the
+ * others land. That produces the one state nobody was watching — a PARTIAL publish, where the
+ * registry holds a set that cannot install itself. It happened on 0.60.0: core, cli and embeddings
+ * shipped, `@hivelore/mcp` did not, and since cli pins its siblings exactly, every
+ * `npm i -g @hivelore/cli` failed with `ETARGET  No matching version found for @hivelore/mcp@0.60.0`.
+ * `finish` said `npm-publish-pending` about core and nothing at all about the break.
+ *
+ * The severity split of {@link classifyNpmPublication} is preserved and extended:
+ * - nothing published yet → informational (the normal state before publishing),
+ * - some published, some not → WARN, because dependents are broken right now,
+ * - a tagged version the registry skipped entirely → WARN, as before.
+ */
+declare function classifyLockstepPublication(input: LockstepPublicationInput): NpmPublicationVerdict;
 
 /**
  * Did the tags that were meant to be releases become GitHub Releases?
@@ -2176,8 +2198,6 @@ interface HaiveConfig {
          * Default: 180.
          */
         decayAfterDays?: number;
-        /** Minimum score required for strict enforcement gates. */
-        scoreThreshold?: number;
         /** Remove generated Hivelore runtime/cache files during cleanup gates. */
         cleanupGeneratedArtifacts?: boolean;
         /**
@@ -2725,6 +2745,11 @@ interface SensorTarget {
  * Does this sensor apply to `path`? A sensor with no explicit `paths` (and whose
  * memory has no anchor paths) applies everywhere. Otherwise it applies to the exact
  * file, a directory prefix, or a glob (`**` / `*.controller.ts` style) scope.
+ *
+ * Two guards keep a rule from firing where it can only be a false positive: an explicit `exclude`
+ * glob list (a production-only lesson skips its own test doubles), and a built-in skip of
+ * DOCUMENTATION files for content sensors — example code in a `.md`/`.rst` is never shipped, so a
+ * regex/ast match there is always wrong unless the sensor names that exact file.
  */
 declare function sensorAppliesToPath(sensor: Sensor, anchorPaths: string[], path: string): boolean;
 /**
@@ -2751,18 +2776,35 @@ declare function compileRegexSensor(sensor: Sensor): RegExp | null;
  * Returns `content` unchanged for unknown file types. Pure.
  */
 declare function stripCommentsForScan(content: string, path: string): string;
+/**
+ * An inline waiver a developer wrote to excuse ONE line from ONE sensor, recorded so the exception
+ * is auditable rather than silent. Field report 2026-09-04 §3.1: a false positive had no outlet
+ * other than rewriting correct code or deleting the sensor — and "a linter with no exception
+ * mechanism ends up disabled", which costs the whole rule, not one line.
+ */
+interface SensorWaiver {
+    memory_id: string;
+    /** Project-relative file the waiver was used in. */
+    file?: string;
+    /** The waived line, trimmed and capped. */
+    line: string;
+    /** The reason the author gave after the slug. Never empty — a reasonless waiver does not apply. */
+    reason: string;
+}
+declare function sensorWaiverOnLine(memoryId: string, rawLine: string): string | null;
 /**
  * Run a single regex sensor over one target. Returns the first matching line as a hit,
- * or null. Deterministic and side-effect-free.
+ * or null. Deterministic and side-effect-free — waivers found along the way are pushed into the
+ * optional `waivers` sink so the caller can journal them (the exception stays visible).
  */
-declare function runRegexSensor(memoryId: string, sensor: Sensor, target: SensorTarget): SensorHit | null;
+declare function runRegexSensor(memoryId: string, sensor: Sensor, target: SensorTarget, waivers?: SensorWaiver[]): SensorHit | null;
 /**
  * Run every memory's regex sensor against every applicable target.
  *
  * Memories without a sensor, or with a non-regex sensor, are skipped (non-regex kinds
  * are the CLI's responsibility). At most one hit per (memory, file) pair is returned.
  */
-declare function runSensors(memories: Memory[], targets: SensorTarget[]): SensorHit[];
+declare function runSensors(memories: Memory[], targets: SensorTarget[], waivers?: SensorWaiver[]): SensorHit[];
 /**
  * Parse every touched file path out of a unified diff (`diff --git a/X b/X` headers), including
  * files changed by pure DELETIONS — the case a presence sensor exists for. Pure.
@@ -4192,4 +4234,4 @@ interface ReviewDraftOptions {
 /** Template review learnings into proposed-memory drafts (reuses the scanner-ingest draft shape). */
 declare function reviewLearningsToDrafts(learnings: ReviewLearning[], options?: ReviewDraftOptions): MemoryDraft[];
 
-export { ADAPTIVE_FLOOR_MIN_SAMPLES, AUTOPILOT_DEFAULTS, type Activation, type ActivationContext, ActivationSchema, type AgentContext, type Anchor, type AnchorAuditRow, type AnchorChurn, AnchorSchema, type AntiPatternGate, type AppendFrictionInput, type AppendFrictionResult, type AppliedConflictResolution, type AstExport, type AutoPromoteRule, BRIDGE_MARKERS, BRIDGE_TARGETS, BRIDGE_TARGET_PATH, BRIEFING_MARKER_TTL_MS, BRIEFING_PRESET_DEFAULTS, type BaselineHealth, type BehaviourCoverageInput, type BehaviourCoverageMetrics, type BehaviourOracleInfo, type BootstrapAssessment, type BootstrapGap, type BootstrapGate, type BootstrapMetrics, type BootstrapState, type BootstrapStateInput, type BreakingChange, type BridgeFileOutput, type BridgeMemoryEntry, type BridgeSensor, type BridgeTarget, type BriefingBudgetNumbers, type BriefingBudgetPreset, type BriefingMarker, type BriefingProofLineOptions, type BudgetPart, type BudgetSlice, type BuildCodeMapOptions, CHARS_PER_TOKEN, CODE_MAP_DEFAULT_EXCLUDE, CODE_MAP_DEFAULT_INCLUDE, CODE_MAP_FILE, CODE_STOPWORDS, CONFIG_FILE, CONTENT_CATCH_CODES, type CaughtForYouOptions, type CaughtForYouRow, type CaughtForYouSummary, type CodeExport, type CodeExportKind, type CodeFileEntry, type CodeMap, type CodeMapQueryOptions, type CollectTimelineOpts, type CommandSensorSpec, type ConfidenceLevel, type ConfidenceThresholds, type ConflictCandidatePair, type ConflictCandidatesOpts, type ConflictResolution, type ContractCheck, type ContractDiffResult, type ContractFile, type ContractSnapshot, type CoverageGap, type CoverageOptions, CrossRepoProvenanceSchema, type CrossRepoReport, type CrossRepoSource, DECAY_DAYS, DEFAULT_AUTO_PROMOTE_RULE, DEFAULT_BRIEFING_EXCLUDE_TAGS, DEFAULT_CONFIDENCE_THRESHOLDS, DEFAULT_CONFIG, DEFAULT_DORMANT_DAYS, DEFAULT_POSTURE, DEFAULT_PRIORITY_SIGNALS, DEFAULT_SPECIFICITY, type DashboardOptions, type DashboardReport, type DepChange, type DepTrackResult, type DependencySnapshot, type DetectStacksInput, type DetectableStack, type DistilledFailureLesson, type DocFrequency, type DormantRow, type DraftOptions, type DraftsOptions, ENV_WORKAROUND_TAGS, type EvalDelta, type EvalHistoryEntry, type EvalReport, type EvalSpec, type EvalTrend, FRICTION_FIELD_MAX, FRICTION_LOG_FILE, FRICTION_STATE_FILE, type FailureCoverageOptions, type FailureObservation, type FeedbackAdjustment, type FeedbackAdjustmentAction, type FeedbackAdjustmentOptions, type Finding, type FindingFormat, type FindingSeverity, type FrictionGroup, type FrictionKind, type FrictionReport, type FrictionState, type FrictionStateEntry, type FrictionStatus, GATE_REMINDER_WINDOW_MS, GUESSABLE_THRESHOLD, type GateFinding, type GateMissProposal, type GatePolicy, type GatePolicyInput, type GatePosture, type GatePrecision, type GatePrecisionDelta, type GatePrecisionMetricDelta, type GateSeverity, type GateStage, type GateTuningSuggestion, type GateVerdict, type GateVerdictInput, type GenerateBridgesOptions, type GitCommit, type GitWatchPlan, type GitWatchState, type GithubReleaseCode, type GithubReleaseInput, type GithubReleaseVerdict, HAIVE_DIR, HAIVE_OWNED_FILES, HANDOFF_FILENAME, HIVELORE_ATTRIBUTION, type HaiveConfig, type HaivePaths, type HotFile, type HotFileSource, type ImpactOptions, type ImpactRow, type ImpactScore, type ImpactSummary, type ImpactTier, type IncidentHints, type InvalidMemoryFile, LEGACY_CONFIG_FILE, type LexicalRankResult, type LoadedMemory, MEMORIES_DIR, MIN_WORD_LEN, type Memory, type MemoryDraft, type MemoryFrontmatter, MemoryFrontmatterSchema, type MemoryPriority, type MemoryScope, MemoryScopeSchema, type MemoryStatus, MemoryStatusSchema, type MemoryType, MemoryTypeSchema, type MemoryUsage, type MergeResult, type MetricDelta, type NpmPublicationCode, type NpmPublicationInput, type NpmPublicationVerdict, PREVENTION_DEBOUNCE_MS, PREVENTION_RECEIPT_MARKER, PROCESS_GATE_CODES, PROJECT_CONTEXT_FILE, PROJECT_CONTEXT_THROTTLE_MS, type PostIncidentLesson, type PreventionCommentFinding, type PreventionEvent, type PreventionEventDetail, type PreventionReceipt, type PreventionReceiptRow, type PreventionRow, type PreventionSource, type PreventionTrend, type PrioritySignals, type ProposedEvalSpec, type ProposedSensorVerdict, RECAP_HISTORY_HEADING, RECAP_HISTORY_MAX, REVIEW_LEARNING_MARKER, RUNTIME_JOURNAL_FILENAME, type RecurrenceReport, type RecurrenceRow, type ResolveProjectInfo, type RetirementSignal, type RetrievalAggregate, type RetrievalCase, type RetrievalCaseResult, type ReviewDraftOptions, type ReviewLearning, type RuntimeJournalEntry, SCAFFOLD_MARKER_RE, SEED_QUALITY_FLOOR, SENSOR_ABSENT_LOOKBACK, SENSOR_ABSENT_WINDOW, SESSION_RECAP_TTL_MS, SETUP_GATE_CODES, STACK_PACK_TAG, type ScaffoldLoopGap, type ScaffoldOptions, type ScaffoldStyle, type SeedProposal, type SelfEvalOptions, type Sensor, type SensorAggregate, type SensorCase, type SensorCaseResult, type SensorEvaluation, type SensorEvaluationOutcome, type SensorEvaluationStage, type SensorFlap, type SensorHealth, type SensorHit, type SensorRow, SensorSchema, type SensorSeed, type SensorSelfCheck, type SensorSuggestionOptions, type SensorTarget, type SensorWeakening, type SessionHandoffData, type SkillActivation, TEST_FRAMEWORKS, type TestFramework, type TestScaffold, type TierContractCheck, type TimelineEntry, type TopicStatusPair, type TruncateOptions, type TruncateResult, USAGE_FILE, USAGE_LOG_DIR, USAGE_LOG_FILE, type UncapturedFailure, type UncoveredAreaSuggestion, type UsageAggregate, type UsageEvent, type UsageIndex, type VerifyOptions, type VerifyResult, WEAK_ANCHOR_CHURN_RATIO, adaptiveSemanticFloor, addedLineNumbersFromDiff, addedLinesFromDiff, aggregateRetrieval, aggregateSensors, aggregateUsage, allocateBudget, anchorMatchesComponent, anchorSpecificity, antiPatternGateParams, appendEvalHistory, appendFrictionReport, appendPreventionEvent, appendProposedRetrievalCases, appendRuntimeJournalEntry, appendSensorEvaluations, appendUsageEvent, applyConflictResolution, applyFeedbackAdjustment, approveProposedCases, assessBehaviourCoverage, assessBootstrapState, assessScaffoldLoop, assessSensorHealth, auditAnchorSpecificity, bridgeMemorySummary, briefingMarkerPath, briefingMarkersDir, briefingProofLine, buildBaselineHealthFinding, buildCodeMap, buildCoverageIndex, buildDashboard, buildDocFrequency, buildFrontmatter, buildHandoffMarkdown, buildPreventionReceipt, buildProposeCommand, buildRecapWithHistory, buildReport, bumpRead, changedPathsFromDiff, churnForAnchors, classifyGithubRelease, classifyMemoryPriority, classifyNpmPublication, codeMapContentHash, codeMapPath, collectTimelineEntries, compactAutoRecapBody, compareEvalReports, compareGatePrecision, compareImpact, compareVersions, compileRegexSensor, componentOf, computeBaselineHealth, computeEvalTrend, computeGatePrecision, computeImpact, computePreventionTrend, computeRecurrence, computeScopeHash, configPath, contractLockPath, countSourceFilesOnDisk, decideVerdict, dedupeRefusals, deriveConfidence, deriveMainAreas, describePosture, detectAgentContext, detectSensorWeakening, detectStacksFromManifests, diffContract, diffHasDistinctiveOverlap, distillFailureObservations, distinctiveCap, draftsFromFindings, emptyUsage, emptyUsageIndex, enforcementDir, estimateTokens, evalHistoryPath, evaluateSkillActivation, existingGateMissShas, explainSensorRejection, extractActionsBriefBody, extractCorrectApproachExamples, extractReferencedPaths, extractReviewLearnings, extractSensorExamples, extractSnippet, extractTestFilePathsFromCommand, filterNewDrafts, findCoverageGaps, findLexicalConflictPairs, findProjectRoot, findTopicStatusConflictPairs, findUncapturedFailures, findingBody, findingToDraft, firstMemoryOneLine, formatFrictionIssue, frictionFingerprint, frictionLogPath, frictionStatePath, gatePassedShas, generateBridges, getUsage, globToRegExp, groupFriction, handoffAgeMs, handoffFilePath, hasPendingTestMarker, hasRecentBriefingMarker, hashProjectContext, incidentHintsFromDiff, incidentSuffix, inferModulesFromPaths, isAutoPromoteEligible, isAutoRecap, isCovered, isDecaying, isDistinctiveToken, isEnvWorkaroundMemory, isFreshIsoDate, isGlobPath, isHarnessErrorOutput, isLikelyGuessable, isNoiseSubject, isProductionCodeFile, isRetiredMemory, isSensorScannablePath, isSkill, isSkillSuppressed, isStackPackSeed, isStylisticRule, isTemplateProjectContext, isWeakAnchor, judgeProposedSensor, lessonShortName, listMarkdownFilesRecursive, literalMatchesAllTokens, literalMatchesAnyToken, loadCodeMap, loadConfig, loadConfigSync, loadEvalHistory, loadFrictionState, loadMemoriesFromDir, loadMemoriesFromDirDetailed, loadMemory, loadPreventionEvents, loadSensorLedger, loadUsageIndex, looksLikeGenericAdvice, meetsSeedQualityFloor, memoryFilePath, memoryHasExcludedTag, memoryMatchesAnchorPaths, mergeHotFiles, mergeMemoryVersions, mineSensorSeedFromDiff, moduleNameOf, newMemoryId, normalizeChurnPath, normalizeFindingSeverity, normalizeFramework, normalizeFrictionSummary, normalizeKind, normalizeScaffoldStyle, normalizeSessionId, overallScore, parseEslintJson, parseFileAst, parseFindings, parseLessonFields, parseMemory, parseNpmAudit, parseSarif, parseSince, parseSonar, pathsOverlap, pickSnippetNeedle, pickTestFramework, planConflictResolution, planGitWatch, prepareBridgeData, preventionLogPath, priorityRank, prioritySignals, projectContextRecentlyEmitted, proposeGateMissDrafts, proposeSeedsFromCommits, pullCrossRepoSources, quarantineNote, queryCodeMap, rankMemoriesLexical, readFrictionReports, readRecentBriefingMarker, readRuntimeJournalTail, readSessionHandoff, readUsageEvents, recapBriefingExcerpt, recommendFeedbackAdjustment, recordApplied, recordGateReminder, recordPrevention, recordPreventionHits, recordProjectContextEmission, recordRejection, relPathFrom, renderBehaviourCoverageLine, renderBootstrapChecklist, renderCaughtForYou, renderPreventionComment, renderPreventionReceipt, renderPreventionReceiptShare, resolveBriefingBudget, resolveConfigPath, resolveGatePolicy, resolveHaivePaths, resolveManifestFiles, resolveProjectInfo, retirementSignal, revertedShaFromCommit, reviewLearningsToDrafts, runPresenceSensors, runRegexSensor, runSensors, runTierContract, runValidationContract, runtimeJournalPath, saveCodeMap, saveConfig, saveFrictionState, saveUsageIndex, scaffoldPostIncidentTest, scannableSensorTargets, scoreRetrievalCase, scoreSensorCase, scrubbedCommandEnv, selectCommandSensors, sensorAppliesToPath, sensorLedgerPath, sensorPatternBrittleness, sensorPromotedAtMap, sensorSelfCheck, sensorTargetsFromDiff, serializeCodeMap, serializeMemory, setFrictionStatus, shouldExpandGateReminder, snapshotContract, specificityScore, stripCommentsForScan, stripPrivate, suggestGate, suggestSensorFromMemory, suggestSensorSeed, suggestTopicKey, summarizeCaughtForYou, summarizeImpact, synthesizeSelfEvalCases, tallyHotFiles, titleFromBody, tokenizeQuery, tokenizeWords, trackDependencies, trackReads, truncateToTokens, usageLogPath, usageLogSize, usagePath, verifyAnchor, watchContracts, withQuarantineNote, withoutQuarantineNote, writeBriefingMarker, writeSessionHandoff };
+export { ADAPTIVE_FLOOR_MIN_SAMPLES, AUTOPILOT_DEFAULTS, type Activation, type ActivationContext, ActivationSchema, type AgentContext, type Anchor, type AnchorAuditRow, type AnchorChurn, AnchorSchema, type AntiPatternGate, type AppendFrictionInput, type AppendFrictionResult, type AppliedConflictResolution, type AstExport, type AutoPromoteRule, BRIDGE_MARKERS, BRIDGE_TARGETS, BRIDGE_TARGET_PATH, BRIEFING_MARKER_TTL_MS, BRIEFING_PRESET_DEFAULTS, type BehaviourCoverageInput, type BehaviourCoverageMetrics, type BehaviourOracleInfo, type BootstrapAssessment, type BootstrapGap, type BootstrapGate, type BootstrapMetrics, type BootstrapState, type BootstrapStateInput, type BreakingChange, type BridgeFileOutput, type BridgeMemoryEntry, type BridgeSensor, type BridgeTarget, type BriefingBudgetNumbers, type BriefingBudgetPreset, type BriefingMarker, type BriefingProofLineOptions, type BudgetPart, type BudgetSlice, type BuildCodeMapOptions, CHARS_PER_TOKEN, CODE_MAP_DEFAULT_EXCLUDE, CODE_MAP_DEFAULT_INCLUDE, CODE_MAP_FILE, CODE_STOPWORDS, CONFIG_FILE, CONTENT_CATCH_CODES, type CaughtForYouOptions, type CaughtForYouRow, type CaughtForYouSummary, type CodeExport, type CodeExportKind, type CodeFileEntry, type CodeMap, type CodeMapQueryOptions, type CollectTimelineOpts, type CommandSensorSpec, type ConfidenceLevel, type ConfidenceThresholds, type ConflictCandidatePair, type ConflictCandidatesOpts, type ConflictResolution, type ContractCheck, type ContractDiffResult, type ContractFile, type ContractSnapshot, type CoverageGap, type CoverageOptions, CrossRepoProvenanceSchema, type CrossRepoReport, type CrossRepoSource, DECAY_DAYS, DEFAULT_AUTO_PROMOTE_RULE, DEFAULT_BRIEFING_EXCLUDE_TAGS, DEFAULT_CONFIDENCE_THRESHOLDS, DEFAULT_CONFIG, DEFAULT_DORMANT_DAYS, DEFAULT_POSTURE, DEFAULT_PRIORITY_SIGNALS, DEFAULT_SPECIFICITY, type DashboardOptions, type DashboardReport, type DepChange, type DepTrackResult, type DependencySnapshot, type DetectStacksInput, type DetectableStack, type DistilledFailureLesson, type DocFrequency, type DormantRow, type DraftOptions, type DraftsOptions, ENV_WORKAROUND_TAGS, type EvalDelta, type EvalHistoryEntry, type EvalReport, type EvalSpec, type EvalTrend, FRICTION_FIELD_MAX, FRICTION_LOG_FILE, FRICTION_STATE_FILE, type FailureCoverageOptions, type FailureObservation, type FeedbackAdjustment, type FeedbackAdjustmentAction, type FeedbackAdjustmentOptions, type Finding, type FindingFormat, type FindingSeverity, type FrictionGroup, type FrictionKind, type FrictionReport, type FrictionState, type FrictionStateEntry, type FrictionStatus, GATE_REMINDER_WINDOW_MS, GUESSABLE_THRESHOLD, type GateFinding, type GateMissProposal, type GatePolicy, type GatePolicyInput, type GatePosture, type GatePrecision, type GatePrecisionDelta, type GatePrecisionMetricDelta, type GateSeverity, type GateStage, type GateTuningSuggestion, type GateVerdict, type GateVerdictInput, type GenerateBridgesOptions, type GitCommit, type GitWatchPlan, type GitWatchState, type GithubReleaseCode, type GithubReleaseInput, type GithubReleaseVerdict, HAIVE_DIR, HAIVE_OWNED_FILES, HANDOFF_FILENAME, HIVELORE_ATTRIBUTION, type HaiveConfig, type HaivePaths, type HotFile, type HotFileSource, type ImpactOptions, type ImpactRow, type ImpactScore, type ImpactSummary, type ImpactTier, type IncidentHints, type InvalidMemoryFile, LEGACY_CONFIG_FILE, type LexicalRankResult, type LoadedMemory, type LockstepPackageState, type LockstepPublicationInput, MEMORIES_DIR, MIN_WORD_LEN, type Memory, type MemoryDraft, type MemoryFrontmatter, MemoryFrontmatterSchema, type MemoryPriority, type MemoryScope, MemoryScopeSchema, type MemoryStatus, MemoryStatusSchema, type MemoryType, MemoryTypeSchema, type MemoryUsage, type MergeResult, type MetricDelta, type NpmPublicationCode, type NpmPublicationInput, type NpmPublicationVerdict, PREVENTION_DEBOUNCE_MS, PREVENTION_RECEIPT_MARKER, PROCESS_GATE_CODES, PROJECT_CONTEXT_FILE, PROJECT_CONTEXT_THROTTLE_MS, type PostIncidentLesson, type PreventionCommentFinding, type PreventionEvent, type PreventionEventDetail, type PreventionReceipt, type PreventionReceiptRow, type PreventionRow, type PreventionSource, type PreventionTrend, type PrioritySignals, type ProposedEvalSpec, type ProposedSensorVerdict, RECAP_HISTORY_HEADING, RECAP_HISTORY_MAX, REVIEW_LEARNING_MARKER, RUNTIME_JOURNAL_FILENAME, type RecurrenceReport, type RecurrenceRow, type ResolveProjectInfo, type RetirementSignal, type RetrievalAggregate, type RetrievalCase, type RetrievalCaseResult, type ReviewDraftOptions, type ReviewLearning, type RuntimeJournalEntry, SCAFFOLD_MARKER_RE, SEED_QUALITY_FLOOR, SENSOR_ABSENT_LOOKBACK, SENSOR_ABSENT_WINDOW, SESSION_RECAP_TTL_MS, SETUP_GATE_CODES, STACK_PACK_TAG, type ScaffoldLoopGap, type ScaffoldOptions, type ScaffoldStyle, type SeedProposal, type SelfEvalOptions, type Sensor, type SensorAggregate, type SensorCase, type SensorCaseResult, type SensorEvaluation, type SensorEvaluationOutcome, type SensorEvaluationStage, type SensorFlap, type SensorHealth, type SensorHit, type SensorRow, SensorSchema, type SensorSeed, type SensorSelfCheck, type SensorSuggestionOptions, type SensorTarget, type SensorWaiver, type SensorWeakening, type SessionHandoffData, type SkillActivation, TEST_FRAMEWORKS, type TestFramework, type TestScaffold, type TierContractCheck, type TimelineEntry, type TopicStatusPair, type TruncateOptions, type TruncateResult, USAGE_FILE, USAGE_LOG_DIR, USAGE_LOG_FILE, type UncapturedFailure, type UncoveredAreaSuggestion, type UsageAggregate, type UsageEvent, type UsageIndex, type VerifyOptions, type VerifyResult, WEAK_ANCHOR_CHURN_RATIO, adaptiveSemanticFloor, addedLineNumbersFromDiff, addedLinesFromDiff, aggregateRetrieval, aggregateSensors, aggregateUsage, allocateBudget, anchorMatchesComponent, anchorSpecificity, antiPatternGateParams, appendEvalHistory, appendFrictionReport, appendPreventionEvent, appendProposedRetrievalCases, appendRuntimeJournalEntry, appendSensorEvaluations, appendUsageEvent, applyConflictResolution, applyFeedbackAdjustment, approveProposedCases, assessBehaviourCoverage, assessBootstrapState, assessScaffoldLoop, assessSensorHealth, auditAnchorSpecificity, bridgeMemorySummary, briefingMarkerPath, briefingMarkersDir, briefingProofLine, buildCodeMap, buildCoverageIndex, buildDashboard, buildDocFrequency, buildFrontmatter, buildHandoffMarkdown, buildPreventionReceipt, buildProposeCommand, buildRecapWithHistory, buildReport, bumpRead, changedPathsFromDiff, churnForAnchors, classifyGithubRelease, classifyLockstepPublication, classifyMemoryPriority, classifyNpmPublication, codeMapContentHash, codeMapPath, collectTimelineEntries, compactAutoRecapBody, compareEvalReports, compareGatePrecision, compareImpact, compareVersions, compileRegexSensor, componentOf, computeEvalTrend, computeGatePrecision, computeImpact, computePreventionTrend, computeRecurrence, computeScopeHash, configPath, contractLockPath, countSourceFilesOnDisk, decideVerdict, dedupeRefusals, deriveConfidence, deriveMainAreas, describePosture, detectAgentContext, detectSensorWeakening, detectStacksFromManifests, diffContract, diffHasDistinctiveOverlap, distillFailureObservations, distinctiveCap, draftsFromFindings, emptyUsage, emptyUsageIndex, enforcementDir, estimateTokens, evalHistoryPath, evaluateSkillActivation, existingGateMissShas, explainSensorRejection, extractActionsBriefBody, extractCorrectApproachExamples, extractReferencedPaths, extractReviewLearnings, extractSensorExamples, extractSnippet, extractTestFilePathsFromCommand, filterNewDrafts, findCoverageGaps, findLexicalConflictPairs, findProjectRoot, findTopicStatusConflictPairs, findUncapturedFailures, findingBody, findingToDraft, firstMemoryOneLine, formatFrictionIssue, frictionFingerprint, frictionLogPath, frictionStatePath, gatePassedShas, generateBridges, getUsage, globToRegExp, groupFriction, handoffAgeMs, handoffFilePath, hasPendingTestMarker, hasRecentBriefingMarker, hashProjectContext, incidentHintsFromDiff, incidentSuffix, inferModulesFromPaths, isAutoPromoteEligible, isAutoRecap, isCovered, isDecaying, isDistinctiveToken, isEnvWorkaroundMemory, isFreshIsoDate, isGlobPath, isHarnessErrorOutput, isLikelyGuessable, isNoiseSubject, isProductionCodeFile, isRetiredMemory, isSensorScannablePath, isSkill, isSkillSuppressed, isStackPackSeed, isStylisticRule, isTemplateProjectContext, isWeakAnchor, judgeProposedSensor, lessonShortName, listMarkdownFilesRecursive, literalMatchesAllTokens, literalMatchesAnyToken, loadCodeMap, loadConfig, loadConfigSync, loadEvalHistory, loadFrictionState, loadMemoriesFromDir, loadMemoriesFromDirDetailed, loadMemory, loadPreventionEvents, loadSensorLedger, loadUsageIndex, looksLikeGenericAdvice, meetsSeedQualityFloor, memoryFilePath, memoryHasExcludedTag, memoryMatchesAnchorPaths, mergeHotFiles, mergeMemoryVersions, mineSensorSeedFromDiff, moduleNameOf, newMemoryId, normalizeChurnPath, normalizeFindingSeverity, normalizeFramework, normalizeFrictionSummary, normalizeKind, normalizeScaffoldStyle, normalizeSessionId, overallScore, parseEslintJson, parseFileAst, parseFindings, parseLessonFields, parseMemory, parseNpmAudit, parseSarif, parseSince, parseSonar, pathsOverlap, pickSnippetNeedle, pickTestFramework, planConflictResolution, planGitWatch, prepareBridgeData, preventionLogPath, priorityRank, prioritySignals, projectContextRecentlyEmitted, proposeGateMissDrafts, proposeSeedsFromCommits, pullCrossRepoSources, quarantineNote, queryCodeMap, rankMemoriesLexical, readFrictionReports, readRecentBriefingMarker, readRuntimeJournalTail, readSessionHandoff, readUsageEvents, recapBriefingExcerpt, recommendFeedbackAdjustment, recordApplied, recordGateReminder, recordPrevention, recordPreventionHits, recordProjectContextEmission, recordRejection, relPathFrom, renderBehaviourCoverageLine, renderBootstrapChecklist, renderCaughtForYou, renderPreventionComment, renderPreventionReceipt, renderPreventionReceiptShare, resolveBriefingBudget, resolveConfigPath, resolveGatePolicy, resolveHaivePaths, resolveManifestFiles, resolveProjectInfo, retirementSignal, revertedShaFromCommit, reviewLearningsToDrafts, runPresenceSensors, runRegexSensor, runSensors, runTierContract, runValidationContract, runtimeJournalPath, saveCodeMap, saveConfig, saveFrictionState, saveUsageIndex, scaffoldPostIncidentTest, scannableSensorTargets, scoreRetrievalCase, scoreSensorCase, scrubbedCommandEnv, selectCommandSensors, sensorAppliesToPath, sensorLedgerPath, sensorPatternBrittleness, sensorPromotedAtMap, sensorSelfCheck, sensorTargetsFromDiff, sensorWaiverOnLine, serializeCodeMap, serializeMemory, setFrictionStatus, shouldExpandGateReminder, snapshotContract, specificityScore, stripCommentsForScan, stripPrivate, suggestGate, suggestSensorFromMemory, suggestSensorSeed, suggestTopicKey, summarizeCaughtForYou, summarizeImpact, synthesizeSelfEvalCases, tallyHotFiles, titleFromBody, tokenizeQuery, tokenizeWords, trackDependencies, trackReads, truncateToTokens, usageLogPath, usageLogSize, usagePath, verifyAnchor, watchContracts, withQuarantineNote, withoutQuarantineNote, writeBriefingMarker, writeSessionHandoff };

package/dist/index.js

@@ -64,6 +64,14 @@ var SensorSchema = z.object({
   timeout_ms: z.number().int().positive().optional(),
   /** Glob-ish path prefixes the sensor applies to. Falls back to the memory's anchor paths when empty. */
   paths: z.array(z.string()).default([]),
+  /**
+   * Glob-ish paths the sensor must NOT fire on, even when they fall inside `paths`. Lets a
+   * production-only lesson (e.g. "no `any`") skip test doubles and fixtures without narrowing its
+   * scope file by file — the missing negation that made `paths: ['**']` fire on every `.test.ts`
+   * (field report 2026-09-02 §3.2). A lesson that IS about tests (e.g. "no `LocalDate.now()` in a
+   * test") simply leaves this empty, so it still fires there.
+   */
+  exclude: z.array(z.string()).optional(),
   /** LLM-facing self-correction message: what was done wrong and what to do instead. */
   message: z.string().min(1),
   /**
@@ -1320,10 +1328,8 @@ var PROCESS_GATE_CODES = /* @__PURE__ */ new Set([
   "bootstrap-incomplete"
 ]);
 var CONTENT_CATCH_CODES = /* @__PURE__ */ new Set(["sensor-block", "precommit-policy-block"]);
-var CONTENT_CODES = /* @__PURE__ */ new Set([...CONTENT_CATCH_CODES, "sensor-warn"]);
 var SETUP_GATE_CODES = /* @__PURE__ */ new Set([
-  ...PROCESS_GATE_CODES,
-  "enforcement-score-below-threshold"
+  ...PROCESS_GATE_CODES
 ]);
 var DEFAULT_POSTURE = "balanced";
 var POSTURE_DEFAULTS = {
@@ -1347,7 +1353,6 @@ function resolveGatePolicy(input) {
     mode: cfg.mode ?? base.mode,
     processGate: cfg.processGate ?? base.processGate,
     humanCommits: cfg.humanCommits ?? base.humanCommits,
-    scoreThreshold: cfg.scoreThreshold ?? 80,
     overrides
   };
 }
@@ -1377,25 +1382,6 @@ function processGateDecision(policy, stage, isAgent) {
   }
   return { refuses: true, reason: "enforced: process gates bind at this sharing point." };
 }
-function penaltyOf(finding) {
-  if (finding.severity === "error") return finding.impact ?? 25;
-  if (finding.severity === "warn") return finding.impact ?? 8;
-  return 0;
-}
-function computeBaselineHealth(findings, threshold) {
-  const baseline = findings.filter((f) => !CONTENT_CODES.has(f.code));
-  const penalty = baseline.reduce((sum, f) => sum + penaltyOf(f), 0);
-  return {
-    score: Math.max(0, Math.min(100, 100 - penalty)),
-    threshold,
-    checks: {
-      total: findings.length,
-      ok: findings.filter((f) => f.severity === "ok").length,
-      warn: findings.filter((f) => f.severity === "warn").length,
-      error: findings.filter((f) => f.severity === "error").length
-    }
-  };
-}
 function dedupeRefusals(findings) {
   const byMemory = /* @__PURE__ */ new Map();
   const out = [];
@@ -1426,29 +1412,16 @@ function decideVerdict(input) {
       message: `${finding.message} (${process2.reason})`
     };
   });
-  const baselineHealth = computeBaselineHealth(findings, policy.scoreThreshold);
   const refusals = dedupeRefusals(findings);
   const hasErrors = findings.some((f) => f.severity === "error");
   return {
     findings,
     should_block: policy.mode === "strict" && hasErrors,
     actor: isAgent ? `agent (${(input.agentSignals ?? []).join(", ")})` : process2.refuses ? "human \u2014 strict (enforcement.humanCommits)" : "human \u2014 process gates relaxed",
-    baseline_health: baselineHealth,
     refusals,
     process_gate_reason: process2.reason
   };
 }
-function buildBaselineHealthFinding(findings, health, shouldBlock) {
-  if (shouldBlock || health.score >= health.threshold) return null;
-  const topPenalties = findings.filter((f) => !CONTENT_CODES.has(f.code)).map((f) => ({ code: f.code, penalty: penaltyOf(f) })).filter((p) => p.penalty > 0).sort((a, b) => b.penalty - a.penalty).slice(0, 3);
-  return {
-    severity: "warn",
-    code: "enforcement-score-below-threshold",
-    message: `Repo knowledge-layer health ${health.score}% is below the ${health.threshold}% target` + (topPenalties.length > 0 ? ` \u2014 top gaps: ${topPenalties.map((p) => `${p.code} (\u2212${p.penalty})`).join(", ")}` : "") + ". This measures the repo's baseline, not this change; it never blocks.",
-    fix: "Fill the gaps above (bootstrap, briefing, recap), then rerun `hivelore enforce check`.",
-    impact: 0
-  };
-}
 
 // src/anchor-specificity.ts
 var WEAK_ANCHOR_CHURN_RATIO = 0.35;
@@ -1562,6 +1535,51 @@ function classifyNpmPublication(input) {
     fix: hint
   };
 }
+function classifyLockstepPublication(input) {
+  const { localVersion } = input;
+  const hint = input.publishHint ?? `publish the lockstep packages at ${localVersion}`;
+  const reachable = input.packages.filter((pkg) => pkg.publishedVersion !== null);
+  if (reachable.length === 0) {
+    return {
+      code: "npm-publication-unverified",
+      severity: "info",
+      message: `Could not reach the registry to check whether the ${input.packages.length} lockstep package(s) are published at ${localVersion}.`
+    };
+  }
+  const behind = reachable.filter((pkg) => compareVersions(pkg.publishedVersion, localVersion) < 0);
+  if (behind.length === 0) {
+    return {
+      code: "npm-published",
+      severity: "ok",
+      message: `All ${reachable.length} lockstep package(s) are on npm at ${localVersion}.`
+    };
+  }
+  const names = behind.map((pkg) => `${pkg.packageName} (${pkg.publishedVersion})`).join(", ");
+  if (behind.length < reachable.length) {
+    const ahead = reachable.filter((pkg) => !behind.includes(pkg));
+    return {
+      code: "npm-publication-incoherent",
+      severity: "warn",
+      message: `npm holds an INCOHERENT lockstep set: ${ahead.length} package(s) are at ${localVersion} but ${behind.length} are behind \u2014 ${names}. Packages that pin their siblings exactly cannot be installed at all (ETARGET), so this breaks users right now.`,
+      fix: `Publish the missing package(s) at ${localVersion}: ${hint}. If a publish step reports success while the registry stays behind, its credentials are missing \u2014 a workflow that SKIPS publishing still reports green.`
+    };
+  }
+  const skipped = [...new Set(behind.flatMap((pkg) => [...pkg.taggedBetween ?? []]))].sort(compareVersions);
+  if (skipped.length > 0) {
+    return {
+      code: "npm-releases-skipped",
+      severity: "warn",
+      message: `${skipped.length} tagged release(s) never reached npm \u2014 the lockstep packages are behind: ${names}. Skipped: ${skipped.map((v) => `v${v}`).join(", ")}.`,
+      fix: `Registry versions are not cumulative, so publishing the newest is enough: ${hint}. If the release workflow keeps skipping, its publish credentials are missing.`
+    };
+  }
+  return {
+    code: "npm-publish-pending",
+    severity: "info",
+    message: `The ${behind.length} lockstep package(s) are not on npm at ${localVersion} yet (${names}) \u2014 expected at this point; publish is the next step.`,
+    fix: hint
+  };
+}
 
 // src/github-release.ts
 var MAX_LISTED = 5;
@@ -1748,6 +1766,10 @@ function renderSensorsBlock(blockSensors) {
     "",
     "The patterns below are blocked by the repo enforcement gate.",
     "Introducing them will fail the pre-commit check (`hivelore enforce check`).",
+    "",
+    "Wrong about one specific line? Waive that line \u2014 `// hivelore:allow <memory-id> \u2014 <reason>` at",
+    "end of line \u2014 instead of deleting the rule or rewriting correct code. It covers that line only",
+    "and is reported. Repeating it means the scope is wrong: narrow `paths`/`exclude`/`absent`.",
     ""
   ];
   for (const s of blockSensors) {
@@ -1827,15 +1849,26 @@ function normalizeProjectPath(value) {
   return value.replace(/\\/g, "/").replace(/^\.\//, "").replace(/^[ab]\//, "").replace(/\/+$/g, "");
 }
 function sensorAppliesToPath(sensor, anchorPaths, path22) {
-  const scopes = sensor.paths.length > 0 ? sensor.paths : anchorPaths;
-  if (scopes.length === 0) return true;
   const target = normalizeProjectPath(path22);
-  return scopes.some((rawScope) => {
+  const matchesScope = (rawScope) => {
     const scope = normalizeProjectPath(rawScope);
     if (!scope) return false;
     if (isGlobPath(scope)) return globToRegExp(scope).test(target);
     return target === scope || target.startsWith(`${scope}/`);
-  });
+  };
+  if (sensor.exclude?.some(matchesScope)) return false;
+  const scopes = sensor.paths.length > 0 ? sensor.paths : anchorPaths;
+  if ((sensor.kind === "regex" || sensor.kind === "ast") && isDocumentationPath(target)) {
+    return scopes.map(normalizeProjectPath).includes(target);
+  }
+  if (scopes.length === 0) return true;
+  return scopes.some(matchesScope);
+}
+var DOCUMENTATION_EXTENSIONS = /* @__PURE__ */ new Set(["md", "mdx", "markdown", "rst", "txt", "adoc"]);
+function isDocumentationPath(target) {
+  const base = target.split("/").pop() ?? "";
+  const dot = base.lastIndexOf(".");
+  return dot >= 0 && DOCUMENTATION_EXTENSIONS.has(base.slice(dot + 1).toLowerCase());
 }
 var SENSOR_ABSENT_WINDOW = 6;
 var SENSOR_ABSENT_LOOKBACK = 2;
@@ -1990,7 +2023,18 @@ function stripCommentsForScan(content, path22) {
   }
   return out.join("\n");
 }
-function runRegexSensor(memoryId, sensor, target) {
+var WAIVER_MARKER = /hivelore:allow\s+([A-Za-z0-9._/-]+)(?=\s|$)\s*[—–:-]*\s*(.*)$/i;
+function sensorWaiverOnLine(memoryId, rawLine) {
+  const m = WAIVER_MARKER.exec(rawLine);
+  if (!m) return null;
+  const slug = (m[1] ?? "").toLowerCase();
+  const reason = (m[2] ?? "").replace(/(?:\*\/|-->|#>)\s*$/, "").trim();
+  if (!slug || !reason) return null;
+  const id = memoryId.toLowerCase();
+  if (id !== slug && !id.includes(slug)) return null;
+  return reason;
+}
+function runRegexSensor(memoryId, sensor, target, waivers) {
   const re = compileRegexSensor(sensor);
   if (!re) return null;
   const absentRe = compileAbsentRegex(sensor);
@@ -2007,6 +2051,16 @@ function runRegexSensor(memoryId, sensor, target) {
       absentRe.lastIndex = 0;
       if (absentRe.test(scanLines.slice(from, to).join("\n"))) continue;
     }
+    const waivedReason = sensorWaiverOnLine(memoryId, rawLine);
+    if (waivedReason) {
+      waivers?.push({
+        memory_id: memoryId,
+        file: target.path,
+        line: rawLine.trim().slice(0, 200),
+        reason: waivedReason
+      });
+      continue;
+    }
     const brittle = sensor.kind === "regex" && sensor.pattern ? sensorPatternBrittleness(sensor.pattern) : null;
     const severity = brittle ? "warn" : sensor.severity;
     return {
@@ -2020,7 +2074,7 @@ function runRegexSensor(memoryId, sensor, target) {
   }
   return null;
 }
-function runSensors(memories, targets) {
+function runSensors(memories, targets, waivers) {
   const hits = [];
   for (const memory of memories) {
     const sensor = memory.frontmatter.sensor;
@@ -2029,7 +2083,7 @@ function runSensors(memories, targets) {
     const anchorPaths = memory.frontmatter.anchor.paths;
     for (const target of targets) {
       if (!sensorAppliesToPath(sensor, anchorPaths, target.path)) continue;
-      const hit = runRegexSensor(memory.frontmatter.id, sensor, target);
+      const hit = runRegexSensor(memory.frontmatter.id, sensor, target, waivers);
       if (hit) hits.push(hit);
     }
   }
@@ -4167,7 +4221,6 @@ var DEFAULT_CONFIG = {
     humanCommits: "relaxed",
     commandSensorUnrunnable: "warn",
     sensorWeakeningGate: "warn",
-    scoreThreshold: 80,
     cleanupGeneratedArtifacts: true,
     toolProfile: "enforcement",
     policyPacks: ["architecture", "gotchas", "security", "domain", "release"],
@@ -4203,7 +4256,6 @@ var AUTOPILOT_DEFAULTS = {
     humanCommits: "relaxed",
     commandSensorUnrunnable: "warn",
     sensorWeakeningGate: "warn",
-    scoreThreshold: 85,
     cleanupGeneratedArtifacts: true,
     toolProfile: "enforcement",
     policyPacks: ["architecture", "gotchas", "security", "domain", "release"],
@@ -7691,7 +7743,6 @@ export {
   briefingMarkerPath,
   briefingMarkersDir,
   briefingProofLine,
-  buildBaselineHealthFinding,
   buildCodeMap,
   buildCoverageIndex,
   buildDashboard,
@@ -7706,6 +7757,7 @@ export {
   changedPathsFromDiff,
   churnForAnchors,
   classifyGithubRelease,
+  classifyLockstepPublication,
   classifyMemoryPriority,
   classifyNpmPublication,
   codeMapContentHash,
@@ -7718,7 +7770,6 @@ export {
   compareVersions,
   compileRegexSensor,
   componentOf,
-  computeBaselineHealth,
   computeEvalTrend,
   computeGatePrecision,
   computeImpact,
@@ -7912,6 +7963,7 @@ export {
   sensorPromotedAtMap,
   sensorSelfCheck,
   sensorTargetsFromDiff,
+  sensorWaiverOnLine,
   serializeCodeMap,
   serializeMemory,
   setFrictionStatus,