@plumpslabs/kuma 2.3.7 → 2.3.8

package/dist/index.js

@@ -4,6 +4,11 @@ import {
   formatInitResults,
   runInit
 } from "./chunk-L5WU2HTN.js";
+import {
+  auditStats,
+  queryAudit,
+  recordAudit
+} from "./chunk-PTEPJK6M.js";
 import {
   analyzeImpact,
   autoHeal,
@@ -14,22 +19,22 @@ import {
   getGraphStats,
   searchGraph,
   traceFlow
-} from "./chunk-K64NSHBR.js";
+} from "./chunk-4OB3XMHT.js";
 import {
   formatDecisionTemplate,
   getProactiveMemories,
   recordDecision,
   scoreMemoryRelevance
-} from "./chunk-X5TPBDKO.js";
+} from "./chunk-RTGLQDMI.js";
 import {
   buildDriftMessages,
   getGitDiffStat,
   getSessionStats,
   getUnresolvedCount
-} from "./chunk-FOQQ2CSL.js";
+} from "./chunk-FL2TLLMX.js";
 import {
   sessionMemory
-} from "./chunk-BI7KD3SG.js";
+} from "./chunk-SLRRDKQ2.js";
 import {
   addContextNote,
   addSecurityFinding,
@@ -50,12 +55,11 @@ import {
   runDoctor,
   runGarbageCollection,
   saveBenchmark,
-  saveDb,
   saveHealthSnapshot,
   saveResearchCache,
   updateDecisionStatus,
   updateTodoStatus
-} from "./chunk-GDNAWLHF.js";
+} from "./chunk-NAM7SCBT.js";
 import {
   getProjectRoot,
   validateFilePath
@@ -124,7 +128,19 @@ var CONTEXT_ALIASES = {
   "diagram": "visualize",
   "flow": "visualize",
   "viz": "visualize",
-  "kuma_visualize": "visualize"
+  "kuma_visualize": "visualize",
+  // Digest synonyms (Issue #18)
+  "digest": "digest",
+  "bootstrap": "digest",
+  "kuma_digest": "digest",
+  "kuma_bootstrap": "digest",
+  "briefing": "digest",
+  "overview": "digest",
+  // Drift detection synonyms (Issue #20)
+  "drift": "drift",
+  "staleness": "drift",
+  "code-drift": "drift",
+  "freshness": "drift"
 };
 async function handleContext(params) {
   const rawAction = params.action || "init";
@@ -151,8 +167,12 @@ async function handleContext(params) {
       return handleSync(params);
     case "visualize":
       return handleVisualize(params);
+    case "digest":
+      return handleDigest(params);
+    case "drift":
+      return handleDrift(params);
     default:
-      return `Unknown action "${action}". Use: init, research, impact, navigate, changes, rollback, researches, health, sync, visualize`;
+      return `Unknown action "${action}". Use: init, research, impact, navigate, changes, rollback, researches, health, sync, visualize, digest, drift`;
   }
 }
 async function handleInit(_params) {
@@ -213,8 +233,8 @@ async function handleInit(_params) {
   lines.push(`  \u{1F4DD} Modified: ${summary.modifiedFiles?.length || 0} file(s)`);
   lines.push(`  \u{1F6E0}\uFE0F Tool calls: ${summary.toolCallCount}`);
   try {
-    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-PJGRRBWP.js");
-    const { saveHealthSnapshot: saveHealthSnapshot2 } = await import("./kumaDb-DJUDLYBJ.js");
+    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-GR5N55CU.js");
+    const { saveHealthSnapshot: saveHealthSnapshot2 } = await import("./kumaDb-6D53ERFP.js");
     const score = await computeSafetyScore(_params.goal);
     const checksStr = JSON.stringify(score.checks);
     await saveHealthSnapshot2(score.score, score.risk, checksStr, score.summary);
@@ -387,8 +407,8 @@ async function handleResearches(_params) {
 async function handleHealth(_params) {
   sessionMemory.recordToolCall("kuma_context_health", {});
   try {
-    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-PJGRRBWP.js");
-    const { saveHealthSnapshot: saveHealthSnapshot2 } = await import("./kumaDb-DJUDLYBJ.js");
+    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-GR5N55CU.js");
+    const { saveHealthSnapshot: saveHealthSnapshot2 } = await import("./kumaDb-6D53ERFP.js");
     const score = await computeSafetyScore();
     const checksStr = JSON.stringify(score.checks);
     await saveHealthSnapshot2(score.score, score.risk, checksStr, score.summary);
@@ -415,8 +435,8 @@ async function handleSync(params) {
   lines.push(`  \u{1F6E0}\uFE0F Tool calls: ${summary.toolCallCount}`);
   lines.push("");
   try {
-    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-PJGRRBWP.js");
-    const { saveHealthSnapshot: saveHealthSnapshot2 } = await import("./kumaDb-DJUDLYBJ.js");
+    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-GR5N55CU.js");
+    const { saveHealthSnapshot: saveHealthSnapshot2 } = await import("./kumaDb-6D53ERFP.js");
     const score = await computeSafetyScore(params.goal);
     const checksStr = JSON.stringify(score.checks);
     await saveHealthSnapshot2(score.score, score.risk, checksStr, score.summary);
@@ -427,14 +447,14 @@ async function handleSync(params) {
   }
   lines.push("");
   try {
-    const { getGraphStats: getGraphStats2 } = await import("./kumaGraph-35TAIBWD.js");
+    const { getGraphStats: getGraphStats2 } = await import("./kumaGraph-AWP743TJ.js");
     lines.push("**Knowledge Graph**");
     lines.push(await getGraphStats2());
   } catch {
   }
   lines.push("");
   try {
-    const { getProactiveMemories: getProactiveMemories2 } = await import("./kumaMemory-5SR3TGRL.js");
+    const { getProactiveMemories: getProactiveMemories2 } = await import("./kumaMemory-7TCUDVZX.js");
     const memories = getProactiveMemories2();
     if (memories) {
       lines.push("**Relevant Memories**");
@@ -448,13 +468,38 @@ async function handleSync(params) {
 }
 async function handleVisualize(params) {
   const scope = params.scope;
-  const { generateVisualizeReport } = await import("./kumaVisualize-ODCWFSUY.js");
+  const { generateVisualizeReport } = await import("./kumaVisualize-TECABHUY.js");
   return await generateVisualizeReport({
     scope,
     type: "flowchart",
     maxNodes: 40
   });
 }
+async function handleDigest(_params) {
+  sessionMemory.recordToolCall("kuma_context_digest", {});
+  try {
+    const { generateContextDigest } = await import("./contextDigest-4PCK3DSM.js");
+    return await generateContextDigest();
+  } catch (err) {
+    try {
+      const { generateDigest } = await import("./domainRules-LDZPOIGZ.js");
+      return generateDigest();
+    } catch {
+      return `Error generating digest: ${err}`;
+    }
+  }
+}
+async function handleDrift(_params) {
+  sessionMemory.recordToolCall("kuma_context_drift", {});
+  try {
+    const { detectDrift, formatDriftReport, flagStaleRecords } = await import("./kumaDriftDetector-OESI5GTC.js");
+    await flagStaleRecords();
+    const records = await detectDrift();
+    return formatDriftReport(records);
+  } catch (err) {
+    return `Error detecting drift: ${err}`;
+  }
+}
 function computeProjectHash(scope) {
   try {
     const root = getProjectRoot();
@@ -536,7 +581,27 @@ var MEMORY_ALIASES = {
   // Changes synonyms
   "changes": "changes",
   "change-log": "changes",
-  "history": "changes"
+  "history": "changes",
+  // Layer 1: Domain Rules (Issue #17)
+  "domain_rules": "domain_rules",
+  "domain-rules": "domain_rules",
+  "domain": "domain_rules",
+  "business-rules": "domain_rules",
+  // Layer 2: Architecture Flow (Issue #17)
+  "arch_flow": "arch_flow",
+  "arch-flow": "arch_flow",
+  "architecture": "arch_flow",
+  "flow-map": "arch_flow",
+  // Layer 3: Gotchas (Issue #17 / #21)
+  "gotcha": "gotcha",
+  "gotchas": "gotcha",
+  "known-gotchas": "gotcha",
+  "legacy": "gotcha",
+  "quirk": "gotcha",
+  // Layers summary
+  "layers": "layers",
+  "3-layer": "layers",
+  "memory-layers": "layers"
 };
 async function handleMemory(params) {
   const rawAction = params.action || "session";
@@ -566,6 +631,14 @@ async function handleMemory(params) {
       return handleBenchmark(params);
     case "decision_log":
       return handleDecisionLog(params);
+    case "domain_rules":
+      return handleLayerAction("domain_rules", params);
+    case "arch_flow":
+      return handleLayerAction("arch_flow", params);
+    case "gotcha":
+      return handleGotchaAction(params);
+    case "layers":
+      return handleLayersSummary(params);
     default:
       return `Unknown action "${action}".`;
   }
@@ -576,7 +649,7 @@ async function handleDecision(params) {
     case "template":
       return formatDecisionTemplate();
     case "suggest": {
-      const { shouldRecordDecision } = await import("./kumaMemory-5SR3TGRL.js");
+      const { shouldRecordDecision } = await import("./kumaMemory-7TCUDVZX.js");
       const check = shouldRecordDecision();
       return check.worth ? `\u{1F4A1} Decision suggested: "${check.title}"
 Use kuma_memory({ action: 'decision', title: '...', context: '...', rationale: '...', outcome: '...' }) to record.` : "\u2705 No decision needed at this time.";
@@ -654,11 +727,11 @@ async function handleSearch(params) {
   if (!query) return "\u26A0\uFE0F query or scope parameter required.";
   const limit = params.limit || 20;
   const memResults = sessionMemory.searchMemory(query, limit);
-  const { searchGraph: searchGraph2 } = await import("./kumaGraph-35TAIBWD.js");
+  const { searchGraph: searchGraph2 } = await import("./kumaGraph-AWP743TJ.js");
   const graphResults = await searchGraph2(query, Math.min(limit, 10));
   let hybridResults = "";
   try {
-    const { hybridSearch, formatHybridResults } = await import("./kumaSearch-LG2OYEJY.js");
+    const { hybridSearch, formatHybridResults } = await import("./kumaSearch-QGB4QVXS.js");
     const semanticResults = await hybridSearch(query, 8);
     if (semanticResults.length > 0) {
       hybridResults = "\n" + formatHybridResults(query, semanticResults);
@@ -742,7 +815,7 @@ async function handleDecisionLog(params) {
 }
 async function handleMine(params) {
   sessionMemory.recordToolCall("kuma_memory_mine", { scope: params.scope });
-  const { mineHistoricalDecisions } = await import("./kumaMiner-P5KCUSF7.js");
+  const { mineHistoricalDecisions } = await import("./kumaMiner-FFXSRHAO.js");
   return await mineHistoricalDecisions({
     scope: params.scope,
     since: typeof params.since === "string" ? params.since : void 0,
@@ -750,6 +823,34 @@ async function handleMine(params) {
     limit: params.limit
   });
 }
+async function handleLayerAction(layer, params) {
+  const { readLayer, writeLayer } = await import("./domainRules-LDZPOIGZ.js");
+  if (params.content) {
+    return writeLayer(layer, params.content);
+  }
+  return readLayer(layer);
+}
+async function handleGotchaAction(params) {
+  if (params.content && params.scope) {
+    const { addGotcha } = await import("./kumaGotchas-DU5H6N7X.js");
+    return await addGotcha({
+      filePath: params.scope,
+      description: params.content,
+      severity: params.status || "medium",
+      workaround: params.description
+    });
+  }
+  const { listGotchas, syncGotchasToDb } = await import("./kumaGotchas-DU5H6N7X.js");
+  await syncGotchasToDb();
+  return await listGotchas({
+    filePath: params.scope,
+    severity: params.status
+  });
+}
+async function handleLayersSummary(_params) {
+  const { getLayersSummary } = await import("./domainRules-LDZPOIGZ.js");
+  return getLayersSummary();
+}
 
 // src/engine/kumaLock.ts
 import fs3 from "fs";
@@ -858,151 +959,6 @@ function cleanStaleLocks() {
   return count > 0 ? `\u{1F9F9} Cleaned ${count} stale lock(s).` : "\u2705 No stale locks found.";
 }
 
-// src/engine/safetyAudit.ts
-var SCHEMA_SQL = `
-  CREATE TABLE IF NOT EXISTS safety_audit (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    timestamp INTEGER NOT NULL,
-    tool_name TEXT NOT NULL,
-    action TEXT NOT NULL,
-    file_path TEXT,
-    risk_level TEXT NOT NULL DEFAULT 'low',
-    policy_violations INTEGER DEFAULT 0,
-    allowed INTEGER NOT NULL DEFAULT 1,
-    duration_ms INTEGER DEFAULT 0,
-    metadata TEXT DEFAULT '{}'
-  );
-  CREATE INDEX IF NOT EXISTS idx_audit_timestamp ON safety_audit(timestamp);
-  CREATE INDEX IF NOT EXISTS idx_audit_tool ON safety_audit(tool_name);
-  CREATE INDEX IF NOT EXISTS idx_audit_risk ON safety_audit(risk_level);
-  CREATE INDEX IF NOT EXISTS idx_audit_allowed ON safety_audit(allowed);
-`;
-var schemaEnsured = false;
-async function ensureSchema() {
-  if (schemaEnsured) return;
-  try {
-    const db = await getDb();
-    db.exec(SCHEMA_SQL);
-    saveDb();
-    schemaEnsured = true;
-  } catch (err) {
-    console.error(`[SafetyAudit] Failed to ensure schema: ${err}`);
-  }
-}
-async function recordAudit(entry) {
-  try {
-    await ensureSchema();
-    const db = await getDb();
-    db.run(`
-      INSERT INTO safety_audit (timestamp, tool_name, action, file_path, risk_level, policy_violations, allowed, duration_ms, metadata)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-    `, [
-      entry.timestamp,
-      entry.toolName,
-      entry.action,
-      entry.filePath || null,
-      entry.riskLevel,
-      entry.policyViolations,
-      entry.allowed ? 1 : 0,
-      entry.durationMs,
-      JSON.stringify(entry.metadata || {})
-    ]);
-    saveDb();
-  } catch (err) {
-    console.error(`[SafetyAudit] Failed to record audit: ${err}`);
-  }
-}
-async function queryAudit(params) {
-  try {
-    await ensureSchema();
-    const db = await getDb();
-    const { toolName, riskLevel, allowed, limit = 20, since } = params;
-    let sql = "SELECT * FROM safety_audit WHERE 1=1";
-    const bindParams = [];
-    if (toolName) {
-      sql += " AND tool_name = ?";
-      bindParams.push(toolName);
-    }
-    if (riskLevel) {
-      sql += " AND risk_level = ?";
-      bindParams.push(riskLevel);
-    }
-    if (allowed !== void 0) {
-      sql += " AND allowed = ?";
-      bindParams.push(allowed ? 1 : 0);
-    }
-    if (since) {
-      sql += " AND timestamp >= ?";
-      bindParams.push(since);
-    }
-    sql += " ORDER BY timestamp DESC LIMIT ?";
-    bindParams.push(limit);
-    const stmt = db.prepare(sql);
-    stmt.bind(bindParams);
-    const results = [];
-    while (stmt.step()) {
-      results.push(stmt.getAsObject());
-    }
-    stmt.free();
-    if (results.length === 0) {
-      return "\u{1F4CB} **Safety Audit** \u2014 No records found for the given filters.";
-    }
-    const lines = [
-      `\u{1F4CB} **Safety Audit** \u2014 ${results.length} record(s)`,
-      `\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501`,
-      ""
-    ];
-    for (const r of results) {
-      const riskIcon = r.risk_level === "critical" ? "\u{1F534}" : r.risk_level === "high" ? "\u{1F7E0}" : r.risk_level === "medium" ? "\u{1F7E1}" : "\u{1F7E2}";
-      const allowIcon = r.allowed ? "\u2705" : "\u26D4";
-      const time = new Date(r.timestamp * 1e3).toLocaleTimeString();
-      lines.push(`${allowIcon} ${riskIcon} **${r.tool_name}** \u2014 ${r.action}`);
-      if (r.file_path) lines.push(`   \u{1F4CD} ${r.file_path}`);
-      lines.push(`   \u{1F550} ${time} | ${r.duration_ms}ms | ${r.policy_violations} policy violation(s)`);
-      lines.push("");
-    }
-    return lines.join("\n");
-  } catch (err) {
-    return `Error querying audit: ${err}`;
-  }
-}
-async function auditStats() {
-  try {
-    await ensureSchema();
-    const db = await getDb();
-    const total = db.exec("SELECT COUNT(*) as c FROM safety_audit")[0]?.values[0][0] ?? 0;
-    const blocked = db.exec("SELECT COUNT(*) as c FROM safety_audit WHERE allowed = 0")[0]?.values[0][0] ?? 0;
-    const critical = db.exec("SELECT COUNT(*) as c FROM safety_audit WHERE risk_level IN ('high','critical')")[0]?.values[0][0] ?? 0;
-    let topBlocked = [];
-    try {
-      const stmt = db.prepare("SELECT tool_name, COUNT(*) as cnt FROM safety_audit WHERE allowed = 0 GROUP BY tool_name ORDER BY cnt DESC LIMIT 5");
-      while (stmt.step()) {
-        topBlocked.push(stmt.getAsObject());
-      }
-      stmt.free();
-    } catch {
-    }
-    const lines = [
-      `\u{1F4CA} **Safety Audit Stats**`,
-      `\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501`,
-      "",
-      `\u{1F4DD} Total operations: ${total}`,
-      `\u26D4 Blocked: ${blocked} (${total > 0 ? (blocked / total * 100).toFixed(1) : 0}%)`,
-      `\u{1F534} High/Critical risk: ${critical}`,
-      ""
-    ];
-    if (topBlocked.length > 0) {
-      lines.push("**Most blocked tools:**");
-      for (const t of topBlocked) {
-        lines.push(`  \u2022 ${t.tool_name}: ${t.cnt}x blocked`);
-      }
-    }
-    return lines.join("\n");
-  } catch (err) {
-    return `Error getting audit stats: ${err}`;
-  }
-}
-
 // src/tools/kumaPolicy.ts
 import fs4 from "fs";
 import path4 from "path";
@@ -1836,6 +1792,11 @@ async function handleSafety(params) {
       return handleGitignore(params);
     case "clean":
       return handleClean(params);
+    case "policy":
+      return handlePolicy(params);
+    case "ast":
+    case "validate":
+      return handleAstValidation(params);
     default:
       return `Unknown action "${action}".`;
   }
@@ -1879,7 +1840,7 @@ async function handleLock(params) {
 }
 async function handleHealth2(_params) {
   try {
-    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-PJGRRBWP.js");
+    const { computeSafetyScore, formatSafetyScore } = await import("./safetyScore-GR5N55CU.js");
     const score = await computeSafetyScore();
     await saveHealthSnapshot(score.score, score.risk, JSON.stringify(score.checks), score.summary);
     return formatSafetyScore(score);
@@ -1983,6 +1944,52 @@ async function handleClean(_params) {
   return `${result}
 \u{1F4A1} Drift warnings have been reset. Any temporary debug artifacts are now cleared.`;
 }
+async function handlePolicy(params) {
+  sessionMemory.recordToolCall("kuma_safety_policy", {});
+  if (params.command) {
+    const { evaluateCommand, evaluateFilePath } = await import("./kumaPolicyEngine-S2PXN3C7.js");
+    const commandVerdict = evaluateCommand(params.command);
+    const lines = [];
+    lines.push(`\u{1F4DC} **Policy Check**: ${commandVerdict.allowed ? "\u2705 Allowed" : "\u26D4 Blocked"}`);
+    lines.push(`\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501`);
+    lines.push("");
+    lines.push(`\u{1F4BB} Command: \`${params.command}\``);
+    lines.push(`\u{1F4CB} Result: ${commandVerdict.message}`);
+    if (commandVerdict.blockedBy) {
+      lines.push("");
+      lines.push(`\u{1F534} **Blocked by rule**: ${commandVerdict.blockedBy.description}`);
+      if (commandVerdict.requiresOverride) {
+        lines.push(`\u{1F511} Use kuma_safety({ action: 'override', toolName: 'policy', reason: '...' }) to bypass.`);
+      }
+    }
+    for (const w of commandVerdict.warnings) {
+      lines.push(`\u{1F7E1} **Warning**: ${w.description}`);
+    }
+    if (params.filePath) {
+      const fileVerdict = evaluateFilePath(params.filePath);
+      if (!fileVerdict.allowed) {
+        lines.push("");
+        lines.push(fileVerdict.message);
+      }
+    }
+    return lines.join("\n");
+  }
+  const { formatPolicyStatus } = await import("./kumaPolicyEngine-S2PXN3C7.js");
+  return formatPolicyStatus();
+}
+async function handleAstValidation(params) {
+  sessionMemory.recordToolCall("kuma_safety_ast", { scope: params.scope });
+  const { validateCodeContent, validateFile, formatValidationFindings } = await import("./kumaAstValidator-CNM7FHYA.js");
+  if (params.command) {
+    const findings = validateCodeContent(params.command, params.scope);
+    return formatValidationFindings(findings, params.scope);
+  }
+  if (params.scope) {
+    const findings = validateFile(params.scope);
+    return formatValidationFindings(findings, params.scope);
+  }
+  return "\u26A0\uFE0F Provide a scope (file path) or command (code content) to validate.";
+}
 var _lastVerifyCall = 0;
 var VERIFY_COOLDOWN_MS = 3e4;
 async function handleVerify(params) {
@@ -1993,7 +2000,7 @@ async function handleVerify(params) {
   }
   _lastVerifyCall = now;
   sessionMemory.recordToolCall("kuma_safety_verify", { scope: params.scope || params.filePath });
-  const { runAutoVerification } = await import("./kumaVerifier-LFRNIGSL.js");
+  const { runAutoVerification } = await import("./kumaVerifier-ARSGPZAM.js");
   return await runAutoVerification({
     scope: params.scope || params.filePath,
     force: params.force,
@@ -2007,7 +2014,7 @@ function registerAllTools(server) {
     "kuma_context",
     "**Call FIRST every session.** Understand your project before making changes. Actions: init (load project brief), research (5-step pipeline: cache\u2192staleness\u2192graph\u2192impact\u2192decision), impact (analyze change effects), navigate (trace code flow), changes (view change log), health (project health score 0-100). RESEARCH IS REQUIRED before editing unfamiliar code.",
     {
-      action: z.enum(["init", "research", "impact", "navigate", "changes", "health", "rollback", "researches", "sync", "visualize"]).describe("Action: init=project brief, research=5-step research pipeline (REQUIRED before edits), impact=analyze change effects, navigate=trace code flow, changes=view change log, rollback=undo a change by ID, researches=list all cached research, sync=unified batch state, visualize=Mermaid knowledge graph diagram, health=project health score"),
+      action: z.enum(["init", "research", "impact", "navigate", "changes", "health", "rollback", "researches", "sync", "visualize", "digest", "drift"]).describe("Action: init=project brief, research=5-step research pipeline (REQUIRED before edits), impact=analyze change effects, navigate=trace code flow, changes=view change log, rollback=undo a change by ID, researches=list all cached research, sync=unified batch state, visualize=Mermaid knowledge graph diagram, digest=ultra-compact <500 token project briefing (Issue #18), drift=detect memory staleness & code drift (Issue #20), health=project health score"),
       scope: z.string().optional().describe("Research scope for research action (e.g. 'auth', 'database', 'api')"),
       target: z.string().optional().describe("Target symbol/file for impact/navigate/changes"),
       goal: z.string().optional().describe("Current goal (for init/health)"),
@@ -2034,7 +2041,7 @@ function registerAllTools(server) {
     "kuma_memory",
     "Record and retrieve project knowledge. Actions: decision (ADR-style record/template/suggest), mine (mine historical decisions from git log & code comments), research_save (save research), session (session summary), heal (graph repair), search (search all), changes (change log), todo (persistent todo CRUD), context (inject context notes), benchmark (capture/diff metrics), decision_log (living document with status tracking).",
     {
-      action: z.enum(["decision", "mine", "research_save", "session", "heal", "search", "changes", "todo", "context", "benchmark", "decision_log"]).describe("Memory action: decision=ADR, mine=mine git log & comments, research_save=save, session=summary, heal=repair, search=search, changes=log, todo=manage todos, context=inject notes, benchmark=capture/diff, decision_log=manage decisions"),
+      action: z.enum(["decision", "mine", "research_save", "session", "heal", "search", "changes", "todo", "context", "benchmark", "decision_log", "domain_rules", "arch_flow", "gotcha", "layers"]).describe("Memory action: decision=ADR, mine=mine git log & comments, research_save=save, session=summary, heal=repair, search=search, changes=log, todo=manage todos, context=inject notes, benchmark=capture/diff, decision_log=manage decisions, domain_rules=Layer 1 business rules (Issue #17), arch_flow=Layer 2 architecture flow (Issue #17), gotcha=Layer 3 known gotchas (Issue #17/#21), layers=all 3 layers summary"),
       scope: z.string().optional().describe("Scope for research_save/search/todo/context/mine"),
       query: z.string().optional().describe("Search query for search action"),
       content: z.string().optional().describe("Content/notes for research_save / context"),
@@ -2098,7 +2105,7 @@ function registerAllTools(server) {
     "kuma_safety",
     "Safety checks, policy enforcement, security scanning, integrated auto-verification, and project hygiene. Actions: guard (anti-pattern detection), verify (auto-run scoped tests), check (pre-exec safety), audit (query trail), lock (multi-agent), health (score), security (scan for leaks), gc (garbage collection), doctor (health check), portability (path check), gitignore (auto-config), override (bypass).",
     {
-      action: z.enum(["guard", "verify", "check", "audit", "lock", "health", "override", "security", "gc", "doctor", "portability", "gitignore", "clean"]).describe("Safety action: guard=anti-patterns, verify=auto-run scoped tests, check=pre-exec safety, audit=query trail, lock=multi-agent, health=score, security=scan leaks, gc=garbage collect, doctor=health check, portability=paths, gitignore=config, clean=purge scratch dir & drift, override=bypass"),
+      action: z.enum(["guard", "verify", "check", "audit", "lock", "health", "override", "security", "gc", "doctor", "portability", "gitignore", "clean", "policy", "ast", "validate"]).describe("Safety action: guard=anti-patterns, verify=auto-run scoped tests, check=pre-exec safety, audit=query trail, lock=multi-agent, health=score, security=scan leaks, gc=garbage collect, doctor=health check, portability=paths, gitignore=config, clean=purge scratch dir & drift, policy=Policy-as-Code engine (Issue #24), ast/validate=AST-based code validation (Issue #22), override=bypass"),
       // Verify params
       scope: z.string().optional().describe("Scope for verify or context (e.g. 'auth', file path)"),
       // Guard params
@@ -2192,7 +2199,7 @@ async function main() {
     console.error("");
     let killedCount = 0;
     try {
-      const { getRunningVerificationPid } = await import("./kumaVerifier-LFRNIGSL.js");
+      const { getRunningVerificationPid } = await import("./kumaVerifier-ARSGPZAM.js");
       const pid = getRunningVerificationPid();
       if (pid) {
         try {
@@ -2434,7 +2441,7 @@ async function main() {
         console.error(`[${SERVER_NAME}] \u2705 Restored session (${sessionInfo.toolCallCount} previous tool calls)`);
       }
       try {
-        const { buildFromSessionMemory } = await import("./kumaGraph-35TAIBWD.js");
+        const { buildFromSessionMemory } = await import("./kumaGraph-AWP743TJ.js");
         const edgeCount = await buildFromSessionMemory();
         if (edgeCount > 0) {
           console.error(`[${SERVER_NAME}] \u2705 Graph auto-populated with ${edgeCount} entries from session memory`);
@@ -2454,13 +2461,13 @@ async function main() {
         console.error(`[${SERVER_NAME}] \u26A0\uFE0F Scratch directory setup: ${err}`);
       }
       try {
-        const { getDb: getDb2, saveDb: saveDb2 } = await import("./kumaDb-DJUDLYBJ.js");
+        const { getDb: getDb2, saveDb } = await import("./kumaDb-6D53ERFP.js");
         const db = await getDb2();
         db.run(
           `INSERT INTO sessions (started_at, goal, tool_calls) VALUES (?, ?, ?)`,
           [Math.floor(Date.now() / 1e3), sessionMemory.getSummary().currentGoal || "Session start", sessionInfo.toolCallCount]
         );
-        saveDb2(db);
+        saveDb(db);
       } catch (err) {
         console.error(`[${SERVER_NAME}] \u26A0\uFE0F Session DB record: ${err}`);
       }
@@ -2494,7 +2501,7 @@ fi
         console.error(`[${SERVER_NAME}] \u26A0\uFE0F Auto-capture hook setup: ${err}`);
       }
       try {
-        const { buildSearchVectors } = await import("./kumaSearch-LG2OYEJY.js");
+        const { buildSearchVectors } = await import("./kumaSearch-QGB4QVXS.js");
         const vectors = await buildSearchVectors();
         if (vectors.length > 0) {
           console.error(`[${SERVER_NAME}] \u2705 Search vector cache pre-warmed (${vectors.length} documents)`);