@event4u/agent-config 10.0.0 → 10.2.0

package/dist/hooks/dispatch.js

@@ -11635,7 +11635,6 @@ var MERGEABLE_KEYS = [
   "personal.bot_icon",
   "personal.pr_comment_bot_icon",
   "personal.autonomy",
-  "telegraph.speak_scope",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
@@ -11861,7 +11860,12 @@ var REMOVED_KEYS = /* @__PURE__ */ new Map([
   ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
+  ["telegraph.speak_scope", "the rule body states its own scope; compile_router gates on telegraph.speak alone"],
+  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
+  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
+  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
+  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"]
 ]);
 var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
@@ -21297,21 +21301,37 @@ var WARN_OPS = /* @__PURE__ */ new Set([
   "branch"
 ]);
 var G = "(?:-[A-Za-z-]+(?:=\\S+)?(?:\\s+\\S+)?\\s+)*";
+var P = "^(?:\\S*\\/)?";
+function ghApiWrite(pathRe) {
+  return new RegExp(
+    `${P}gh\\s+api\\b(?=[^\\n]*${pathRe})(?=[^\\n]*(?:-X|--method)\\s+(?:POST|PATCH|PUT|DELETE)\\b)`,
+    "i"
+  );
+}
 var COMMAND_OPS = [
-  { op: "publish", re: new RegExp(`\\b(npm|pnpm|yarn)\\s+${G}publish\\b`, "i") },
-  { op: "release", re: /\bgh\s+release\s+create\b|\bgh\s+api\b[^\n]*\/releases\b/i },
+  { op: "publish", re: new RegExp(`${P}(npm|pnpm|yarn)\\s+${G}publish\\b`, "i") },
+  {
+    op: "release",
+    re: new RegExp(`${P}gh\\s+release\\s+create\\b|${ghApiWrite("\\/releases\\b").source}`, "i")
+  },
   {
     op: "tag",
+    re: new RegExp(`${P}git\\s+${G}push\\b[^\\n;|&]*(--tags|--follow-tags|refs\\/tags\\/)`, "i")
+  },
+  {
+    op: "pr-merge",
     re: new RegExp(
-      `\\bgit\\s+${G}push\\b[^\\n;|&]*(--tags|--follow-tags|refs\\/tags\\/)`,
+      `${P}gh\\s+pr\\s+merge\\b|${ghApiWrite("\\/pulls\\/\\d+\\/merge\\b").source}`,
       "i"
     )
   },
-  { op: "pr-merge", re: /\bgh\s+pr\s+merge\b|\bgh\s+api\b[^\n]*\/pulls\/\d+\/merge\b/i },
-  { op: "pr-create", re: /\bgh\s+pr\s+create\b|\bgh\s+api\b[^\n]*-X\s+POST[^\n]*\/pulls\b/i },
-  { op: "push", re: new RegExp(`\\bgit\\s+${G}push\\b`, "i") },
-  { op: "commit", re: new RegExp(`\\bgit\\s+${G}commit\\b`, "i") },
-  { op: "branch", re: new RegExp(`\\bgit\\s+${G}(checkout\\s+-b|switch\\s+-c)\\b`, "i") }
+  {
+    op: "pr-create",
+    re: new RegExp(`${P}gh\\s+pr\\s+create\\b|${ghApiWrite("\\/pulls\\b").source}`, "i")
+  },
+  { op: "push", re: new RegExp(`${P}git\\s+${G}push\\b`, "i") },
+  { op: "commit", re: new RegExp(`${P}git\\s+${G}commit\\b`, "i") },
+  { op: "branch", re: new RegExp(`${P}git\\s+${G}(checkout\\s+-b|switch\\s+-c)\\b`, "i") }
 ];
 var COMMAND_TOOLS3 = /* @__PURE__ */ new Set([
   "launch-process",
@@ -21658,7 +21678,7 @@ function isDispatchTool(tool) {
 function isEvaluationPrompt(prompt) {
   return EVALUATION_RE.test(prompt);
 }
-var SELF_SCOPE_RE = /\b(my (work|change|diff|implementation|code|fix|patch|branch|pr)|this (diff|change|branch|pr|delta|implementation|patch)|the delta|the change i|what i (wrote|built|changed|implemented)|i just (wrote|built|changed|implemented))\b/i;
+var SELF_SCOPE_RE = /\b(my (work|change|diff|implementation|code|fix|patch|branch|pr)|this (diff|change|pr|delta|implementation|patch)|the delta|the change i|what i (wrote|built|changed|implemented)|i just (wrote|built|changed|implemented))\b/i;
 function isSelfScoped(prompt) {
   return SELF_SCOPE_RE.test(prompt);
 }
@@ -21726,11 +21746,14 @@ function decide2(tool, prompt, priorEvaluations) {
   }
   if (priorEvaluations >= 1) {
     return {
-      exit: EXIT_BLOCK2,
-      stdout: "",
-      stderr: `Blocked: second evaluation dispatch of your own work in this turn (verdict shopping). One evaluation has already run; commissioning another with a different prompt or scope selects the answer instead of measuring it. Report what the first pass returned, then re-plan.
+      exit: EXIT_ALLOW10,
+      stdout: `${JSON.stringify({
+        decision: "warn",
+        reason: `Second evaluation dispatch of your own work in this turn. If both passes judge the SAME subject, that is verdict shopping \u2014 commissioning another with a different prompt or scope selects the answer instead of measuring it. Report what the first pass returned, then re-plan. If this is an implementation fan-out rather than a second review, carry on: this check reads prose and cannot tell the two apart with certainty.`
+      })}
 `,
-      evaluations: priorEvaluations
+      stderr: "",
+      evaluations: priorEvaluations + 1
     };
   }
   return {
@@ -25066,10 +25089,13 @@ function _isObject13(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 var FILE_TOKEN_RE = /`?\b[\w][\w.\-]{0,80}\.(ts|tsx|js|jsx|mjs|cjs|py|php|rb|go|rs|java|kt|swift|md|mdx|json|ya?ml|css|scss|less|html|vue|svelte|sql|sh|bash|c|cpp|h|hpp|cs|toml|xml)\b`?/gi;
-function detectEnumeratedFiles(text) {
+var FILE_SIGNAL_FLOOR = 3;
+function enumeratedFileTokens(text) {
   const matches = text.match(FILE_TOKEN_RE) ?? [];
-  const unique = new Set(matches.map((m) => m.replace(/`/g, "").toLowerCase()));
-  return unique.size;
+  return [...new Set(matches.map((m) => m.replace(/`/g, "").toLowerCase()))];
+}
+function detectEnumeratedFiles(text) {
+  return enumeratedFileTokens(text).length;
 }
 var EXPLICIT_COUNT_RE = /\b(\d+)\s+(files?|modules?|components?|endpoints?|scripts?|skills?|rules?|tickets?|tests?|screens?|pages?|repos?|services?|classes?|functions?|methods?|slices?|tasks?|items?|targets?|routes?|controllers?|Dateien|Module|Tests|Komponenten|Skripte|Regeln|Tickets|Aufgaben|Klassen|Funktionen|Endpunkte)\b/i;
 function detectExplicitSliceCount(text) {
@@ -25121,7 +25147,7 @@ function extractTaskSignals(text) {
   const explicit = detectExplicitSliceCount(text) ?? 0;
   const conjunction = detectMultiDeliverableConjunction(text);
   const forEach = detectForEachShape(text);
-  const fileSignal = fileCount >= 3 ? fileCount : 0;
+  const fileSignal = fileCount >= FILE_SIGNAL_FLOOR ? fileCount : 0;
   let slices = Math.max(fileSignal, explicit, conjunction);
   if (slices === 0 && forEach) {
     slices = 2;
@@ -25715,12 +25741,19 @@ function readCiSettled(workspaceRoot2) {
   return { seen: false, settled: false };
 }
 var _COMPLETION_RE = /(^|\n)\s*(?:\*\*)?(?:fertig\b|damit ist alles erledigt|aufgabe erledigt|alles erledigt\b|komplett(?:er)? (?:auftrag|abgearbeitet)|der komplette auftrag ist durch|done[.!]|all done\b|task complete)/i;
+var _NEGATED_CLAIM_RE = /\b(noch nicht|nicht fertig|nicht durch|wäre verfrüht|ist verfrüht|not yet|not done|isn'?t done|nein)\b/i;
+function _lineAround(prose, at) {
+  const start = prose.lastIndexOf("\n", at) + 1;
+  const end = prose.indexOf("\n", at);
+  return prose.slice(start, end === -1 ? prose.length : end);
+}
 function detectCompletionClaim(reply, ci) {
   if (!ci.seen || ci.settled) return null;
   const prose = visibleProse(reply);
   const m = _COMPLETION_RE.exec(prose);
   if (!m) return null;
   const at = m.index;
+  if (_NEGATED_CLAIM_RE.test(_lineAround(prose, at))) return null;
   return {
     detector: "completion",
     evidence: prose.slice(at, at + 120).trim(),
@@ -26492,6 +26525,7 @@ function readState3(file) {
         schema_version: 1,
         counters: parsed.counters,
         advisory_fired_at: typeof parsed.advisory_fired_at === "string" ? parsed.advisory_fired_at : null,
+        missing_envelope_warned_at: typeof parsed.missing_envelope_warned_at === "string" ? parsed.missing_envelope_warned_at : null,
         updated_at: typeof parsed.updated_at === "string" ? parsed.updated_at : ""
       };
     }
@@ -26501,9 +26535,30 @@ function readState3(file) {
     schema_version: 1,
     counters: emptyCounters(),
     advisory_fired_at: null,
+    missing_envelope_warned_at: null,
     updated_at: ""
   };
 }
+function envelopeExists(workspaceRoot2, since = null) {
+  const target = path66.join(workspaceRoot2, RECYCLE_ENVELOPE_REL);
+  let raw;
+  try {
+    raw = fs64.readFileSync(target, "utf-8");
+  } catch (exc) {
+    return exc?.code !== "ENOENT";
+  }
+  if (since === null) return true;
+  try {
+    const written = JSON.parse(raw).written_at;
+    if (typeof written !== "string") return true;
+    return Date.parse(written) >= Date.parse(since);
+  } catch {
+    return true;
+  }
+}
+function buildMissingEnvelopeLine(workspaceRoot2) {
+  return `recycle advised earlier, but no envelope exists at ${path66.join(workspaceRoot2, RECYCLE_ENVELOPE_REL)} \u2014 /clear now starts the successor from nothing. Re-run \`agent-config session:recycle\` and check that it prints the absolute path it wrote before clearing.`;
+}
 function readThresholdTokens() {
   const override = process11.env[THRESHOLD_OVERRIDE_ENV];
   if (override !== void 0) {
@@ -26514,7 +26569,7 @@ function readThresholdTokens() {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : null;
 }
 function buildAdvisoryLine3(tokens, threshold) {
-  return `context past recycle threshold (${tokens.toLocaleString("en-US")} of ${threshold.toLocaleString("en-US")} tokens): run \`agent-config session:recycle\` to write the recycle envelope, then /clear \u2014 the successor session resumes from the envelope at session_start (road-to-token-economy-recycling)`;
+  return `context past recycle threshold (${tokens.toLocaleString("en-US")} of ${threshold.toLocaleString("en-US")} tokens): run \`agent-config session:recycle\` to write the recycle envelope. It prints the absolute path it wrote \u2014 /clear only after you have seen that line. The successor session then resumes from the envelope at session_start (road-to-token-economy-recycling)`;
 }
 function writeContextFill(workspaceRoot2, tokens, threshold, ts) {
   try {
@@ -26563,10 +26618,12 @@ function main45() {
   const threshold = readThresholdTokens();
   const tokens = counters.final_context_tokens;
   const shouldAdvise = threshold !== null && tokens !== null && tokens >= threshold && state.advisory_fired_at === null;
+  const shouldWarnMissing = threshold !== null && state.advisory_fired_at !== null && (state.missing_envelope_warned_at ?? null) === null && !envelopeExists(workspaceRoot2, state.advisory_fired_at);
   const nextState2 = {
     schema_version: 1,
     counters,
     advisory_fired_at: shouldAdvise ? now : state.advisory_fired_at,
+    missing_envelope_warned_at: shouldWarnMissing ? now : state.missing_envelope_warned_at ?? null,
     updated_at: now
   };
   try {
@@ -26581,6 +26638,17 @@ function main45() {
         reason: `session-eol: context ${tokens} >= recycle threshold ${threshold}`,
         additional_context: buildAdvisoryLine3(tokens, threshold)
       })}
+`
+    );
+    return EXIT_WARN13;
+  }
+  if (shouldWarnMissing) {
+    process11.stdout.write(
+      `${JSON.stringify({
+        decision: "warn",
+        reason: "session-eol: recycle advised, no envelope written",
+        additional_context: buildMissingEnvelopeLine(workspaceRoot2)
+      })}
 `
     );
     return EXIT_WARN13;

package/dist/install/install.mjs

@@ -9936,7 +9936,6 @@ var MERGEABLE_KEYS = [
   "personal.bot_icon",
   "personal.pr_comment_bot_icon",
   "personal.autonomy",
-  "telegraph.speak_scope",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
@@ -10219,7 +10218,12 @@ var REMOVED_KEYS = /* @__PURE__ */ new Map([
   ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
+  ["telegraph.speak_scope", "the rule body states its own scope; compile_router gates on telegraph.speak alone"],
+  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
+  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
+  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
+  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"]
 ]);
 var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
@@ -14580,7 +14584,6 @@ var userType = external_exports.enum(["", "consultant", "creator", "developer",
 var profileId = external_exports.enum(["developer", "content_creator", "founder", "agency", "finance", "ops"]);
 var accessStyle = external_exports.enum(["getters_setters", "get_attribute", "magic_properties"]);
 var chatFreq = external_exports.enum(["per_turn", "per_phase", "per_tool"]);
-var chatOverflow = external_exports.enum(["rotate", "condense"]);
 var qualityCadence = external_exports.enum(["end_of_roadmap", "per_phase", "per_step"]);
 var regenCadence = external_exports.enum(["per_step", "every_5_steps", "phase_boundary"]);
 var worktreeMode = external_exports.enum(["off", "on", "ask"]);
@@ -14727,12 +14730,6 @@ var settingsSchema = external_exports.object({
     frequency: chatFreq.default("per_turn").describe(
       "How often the chat-history writer flushes to disk. per_turn = after every user / agent exchange (default, lowest data loss on crash). per_phase = at phase boundaries (cheaper I/O). per_tool = after every tool call (highest fidelity, noisiest log)."
     ),
-    max_size_kb: external_exports.number().int().min(0).default(2048).describe(
-      "Maximum size (KB) of the active chat-history file before chat_history.on_overflow kicks in. Set 0 to disable rotation / condensation entirely (file grows forever)."
-    ),
-    on_overflow: chatOverflow.default("rotate").describe(
-      "What happens when chat_history.max_size_kb is hit. rotate = move the current log aside and start fresh (default). condense = telegraph-condense the oldest entries in place to keep recent context."
-    ),
     text_limits: external_exports.object({
       user: external_exports.number().int().min(0).default(0).describe(
         "Per-message character cap for user inputs in the chat-history log. 0 = log verbatim (default). Raise above 0 only if your prompts contain large pasted artefacts you do not want stored."
@@ -14781,9 +14778,6 @@ var settingsSchema = external_exports.object({
   quality: external_exports.object({
     local_auto_run: external_exports.boolean().default(false).describe(
       "Run quality tools (linters, type-checks, formatters) and the local test suite autonomously after edits. Off by default \u2014 the agent never runs quality tools proactively and does not ask; the user runs them manually (e.g. /quality-fix) and remote CI is the authoritative gate. The agent only runs a quality tool on an explicit ask, a concrete CI failure, or the new-gate carve-out. Turn on to restore autonomous pipeline runs."
-    ),
-    wait_for_remote_ci: external_exports.boolean().default(false).describe(
-      "After pushing a branch, poll the remote CI provider (GitHub Actions, GitLab CI) and surface failures inline. Off by default \u2014 useful when local CI does not cover everything the remote pipeline runs."
     )
   }),
   design: external_exports.object({
@@ -14809,12 +14803,9 @@ var settingsSchema = external_exports.object({
   }).default({ identity_allowlist: [], forbid_terminal_capture: true, data_bearing_gate: "on" }),
   telegraph: external_exports.object({
     speak: external_exports.boolean().default(false).describe(
-      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This \u2014 not speak_scope \u2014 is the lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
-    ),
-    speak_scope: external_exports.enum(["off", "reply", "all"]).default("off").describe(
-      "Where telegraph condensation applies WHEN speak is true. off (default) = agent reply prose is exempt. compile_router never reads this key: with speak false the rule does not ship, so this setting has no effect on its own. Quote the value in YAML \u2014 bare `off` parses as a boolean under YAML 1.1 and is rejected."
+      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This is the only lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
     )
-  }).default({ speak: false, speak_scope: "off" }),
+  }).default({ speak: false }),
   tokens: external_exports.object({
     rich_skills: richSkillsMode.default("on").describe(
       "Whether skills marked token_budget_class: rich may load in full (exempt from telegraph-speak + thin-projector trimming), consumed by the token-budget-discipline rule. on = allowed (default); off = fall back to standard condensed behavior; ask = surface an estimated token delta (tokens, not dollars) and ask once per session before loading."
@@ -15124,13 +15115,10 @@ var settingsSchema = external_exports.object({
     acknowledged: external_exports.boolean().default(false).describe(
       "I understand the legal-review-prep pack provides templates and general information ONLY \u2014 it is NOT legal advice, creates no attorney-client relationship, and never replaces a licensed lawyer. Individual cases require an attorney. The pack stays inactive until this is checked."
     ),
-    consented_at: external_exports.string().default("").describe(
-      "ISO timestamp recorded when the legal-review-prep acknowledgment was given. Set automatically by the setup wizard; leave empty otherwise."
-    ),
     require_council: external_exports.boolean().default(true).describe(
       "Gate legal work-product behind a multi-model AI-council / deep-research pass (defense-in-depth: documented multi-stage review + audit trail; fail-closed when no council is configured). Leave on for the safest posture. Turning it off lets single-model legal output through \u2014 not recommended for a high-risk pack."
     )
-  }).default({ acknowledged: false, consented_at: "", require_council: true })
+  }).default({ acknowledged: false, require_council: true })
 });
 
 // node_modules/zod-to-json-schema/dist/esm/Options.js

package/dist/mcp/registry-manifest.json

@@ -9,7 +9,7 @@
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "10.0.0"
+    "version": "10.2.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "10.0.0"
+      "version": "10.2.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "10.0.0"
+  "version": "10.2.0"
 }