@event4u/agent-config 10.1.0 → 10.3.0

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-12T12:21:21Z`
+- Generated: `2026-08-13T06:03:54Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:651edc81da3293762d2d404f360755f4ae48db41416cf431e4e3d725880ab473",
-  "generated_at": "2026-08-12T12:21:21Z",
+  "checksum": "sha256:80669a1f5e725ff7c28914cf550d50c890591d1329a51a65f08666a61377d6d3",
+  "generated_at": "2026-08-13T06:03:54Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-12T12:21:21Z`
+- Generated: `2026-08-13T06:03:54Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:651edc81da3293762d2d404f360755f4ae48db41416cf431e4e3d725880ab473",
-  "generated_at": "2026-08-12T12:21:21Z",
+  "checksum": "sha256:80669a1f5e725ff7c28914cf550d50c890591d1329a51a65f08666a61377d6d3",
+  "generated_at": "2026-08-13T06:03:54Z",
   "scanner_version": "1eaf68b6e9c9",
   "workspaces": [
     {

package/dist/hooks/dispatch.js

@@ -11635,7 +11635,6 @@ var MERGEABLE_KEYS = [
   "personal.bot_icon",
   "personal.pr_comment_bot_icon",
   "personal.autonomy",
-  "telegraph.speak_scope",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
@@ -11861,7 +11860,12 @@ var REMOVED_KEYS = /* @__PURE__ */ new Map([
   ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
+  ["telegraph.speak_scope", "the rule body states its own scope; compile_router gates on telegraph.speak alone"],
+  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
+  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
+  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
+  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"]
 ]);
 var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
@@ -21297,21 +21301,37 @@ var WARN_OPS = /* @__PURE__ */ new Set([
   "branch"
 ]);
 var G = "(?:-[A-Za-z-]+(?:=\\S+)?(?:\\s+\\S+)?\\s+)*";
+var P = "^(?:\\S*\\/)?";
+function ghApiWrite(pathRe) {
+  return new RegExp(
+    `${P}gh\\s+api\\b(?=[^\\n]*${pathRe})(?=[^\\n]*(?:-X|--method)\\s+(?:POST|PATCH|PUT|DELETE)\\b)`,
+    "i"
+  );
+}
 var COMMAND_OPS = [
-  { op: "publish", re: new RegExp(`\\b(npm|pnpm|yarn)\\s+${G}publish\\b`, "i") },
-  { op: "release", re: /\bgh\s+release\s+create\b|\bgh\s+api\b[^\n]*\/releases\b/i },
+  { op: "publish", re: new RegExp(`${P}(npm|pnpm|yarn)\\s+${G}publish\\b`, "i") },
+  {
+    op: "release",
+    re: new RegExp(`${P}gh\\s+release\\s+create\\b|${ghApiWrite("\\/releases\\b").source}`, "i")
+  },
   {
     op: "tag",
+    re: new RegExp(`${P}git\\s+${G}push\\b[^\\n;|&]*(--tags|--follow-tags|refs\\/tags\\/)`, "i")
+  },
+  {
+    op: "pr-merge",
     re: new RegExp(
-      `\\bgit\\s+${G}push\\b[^\\n;|&]*(--tags|--follow-tags|refs\\/tags\\/)`,
+      `${P}gh\\s+pr\\s+merge\\b|${ghApiWrite("\\/pulls\\/\\d+\\/merge\\b").source}`,
       "i"
     )
   },
-  { op: "pr-merge", re: /\bgh\s+pr\s+merge\b|\bgh\s+api\b[^\n]*\/pulls\/\d+\/merge\b/i },
-  { op: "pr-create", re: /\bgh\s+pr\s+create\b|\bgh\s+api\b[^\n]*-X\s+POST[^\n]*\/pulls\b/i },
-  { op: "push", re: new RegExp(`\\bgit\\s+${G}push\\b`, "i") },
-  { op: "commit", re: new RegExp(`\\bgit\\s+${G}commit\\b`, "i") },
-  { op: "branch", re: new RegExp(`\\bgit\\s+${G}(checkout\\s+-b|switch\\s+-c)\\b`, "i") }
+  {
+    op: "pr-create",
+    re: new RegExp(`${P}gh\\s+pr\\s+create\\b|${ghApiWrite("\\/pulls\\b").source}`, "i")
+  },
+  { op: "push", re: new RegExp(`${P}git\\s+${G}push\\b`, "i") },
+  { op: "commit", re: new RegExp(`${P}git\\s+${G}commit\\b`, "i") },
+  { op: "branch", re: new RegExp(`${P}git\\s+${G}(checkout\\s+-b|switch\\s+-c)\\b`, "i") }
 ];
 var COMMAND_TOOLS3 = /* @__PURE__ */ new Set([
   "launch-process",
@@ -21658,7 +21678,7 @@ function isDispatchTool(tool) {
 function isEvaluationPrompt(prompt) {
   return EVALUATION_RE.test(prompt);
 }
-var SELF_SCOPE_RE = /\b(my (work|change|diff|implementation|code|fix|patch|branch|pr)|this (diff|change|branch|pr|delta|implementation|patch)|the delta|the change i|what i (wrote|built|changed|implemented)|i just (wrote|built|changed|implemented))\b/i;
+var SELF_SCOPE_RE = /\b(my (work|change|diff|implementation|code|fix|patch|branch|pr)|this (diff|change|pr|delta|implementation|patch)|the delta|the change i|what i (wrote|built|changed|implemented)|i just (wrote|built|changed|implemented))\b/i;
 function isSelfScoped(prompt) {
   return SELF_SCOPE_RE.test(prompt);
 }
@@ -21726,11 +21746,14 @@ function decide2(tool, prompt, priorEvaluations) {
   }
   if (priorEvaluations >= 1) {
     return {
-      exit: EXIT_BLOCK2,
-      stdout: "",
-      stderr: `Blocked: second evaluation dispatch of your own work in this turn (verdict shopping). One evaluation has already run; commissioning another with a different prompt or scope selects the answer instead of measuring it. Report what the first pass returned, then re-plan.
+      exit: EXIT_ALLOW10,
+      stdout: `${JSON.stringify({
+        decision: "warn",
+        reason: `Second evaluation dispatch of your own work in this turn. If both passes judge the SAME subject, that is verdict shopping \u2014 commissioning another with a different prompt or scope selects the answer instead of measuring it. Report what the first pass returned, then re-plan. If this is an implementation fan-out rather than a second review, carry on: this check reads prose and cannot tell the two apart with certainty.`
+      })}
 `,
-      evaluations: priorEvaluations
+      stderr: "",
+      evaluations: priorEvaluations + 1
     };
   }
   return {
@@ -23394,7 +23417,7 @@ var SLOP_RULES = [
     }
   },
   {
-    id: "slop-lock-shape",
+    id: "slop-v8-lock-shape",
     catalogId: "V8",
     severity: "P2",
     engines: ["css"],
@@ -23421,27 +23444,6 @@ var SLOP_RULES = [
       return [];
     }
   },
-  {
-    id: "slop-lock-colour",
-    catalogId: "C6",
-    severity: "P3",
-    engines: ["css"],
-    description: "Colour Lock \u2014 multiple saturated accent hue families",
-    message: "Several accent hue families read as no single accent identity; lock one (C6 / Colour Lock).",
-    gated: (ctx) => ctx.has("colour lock", "color lock"),
-    detect: ({ content }) => {
-      const buckets = /* @__PURE__ */ new Set();
-      for (const pm of content.matchAll(/#([0-9a-f]{3}|[0-9a-f]{6})\b/gi)) {
-        const b = hueBucket("#" + (pm[1] ?? ""));
-        if (b !== null) buckets.add(b);
-      }
-      if (buckets.size >= 3) {
-        const idx = content.search(/#[0-9a-f]{3,6}\b/i);
-        return [{ line: lineOf(content, Math.max(0, idx)), snippet: `${buckets.size} distinct accent hue families` }];
-      }
-      return [];
-    }
-  },
   {
     id: "slop-l9-section-monotony",
     catalogId: "L9",
@@ -23483,6 +23485,116 @@ var SLOP_RULES = [
       if (maxRun > 2) return [{ line: 1, snippet: `${maxRun} consecutive media+text sections` }];
       return [];
     }
+  },
+  // -------------------------------------------------------------------------
+  // Catalog thresholds promoted to rules (road-to-design-detector-evidence
+  // Phase 3). Each entry below already published its number in
+  // docs/guidelines/design-antipatterns.md — the prose is the specification,
+  // nothing here is invented, and each was graded per rule against the clean
+  // corpus rather than as a batch.
+  // -------------------------------------------------------------------------
+  {
+    id: "slop-v4-over-rounded",
+    catalogId: "V4",
+    severity: "P3",
+    engines: ["css"],
+    description: "border-radius > 16px on an element declared under 200px wide",
+    message: "Heavy rounding on a small surface reads as scaffold-default; scale the radius to the element (V4).",
+    gated: (ctx) => ctx.has("pill", "fully rounded", "soft ui", "claymorphism"),
+    detect: ({ content }) => cssBlocks(content).filter((b) => {
+      const r = /border-radius\s*:\s*(\d+)px/i.exec(b.body);
+      if (!r?.[1]) return false;
+      const radius = parseInt(r[1], 10);
+      if (radius <= 16 || radius >= 100) return false;
+      const size = /(?:^|[;{\s])(?:max-)?(?:width|height)\s*:\s*(\d+)px/i.exec(b.body);
+      return size?.[1] !== void 0 && parseInt(size[1], 10) < 200;
+    }).map((b) => ({ line: b.line, snippet: b.selector.slice(0, 80) }))
+  },
+  {
+    id: "slop-c3-dark-glow",
+    catalogId: "C3",
+    severity: "P2",
+    engines: ["css"],
+    description: "Saturated zero-offset glow (box-shadow / text-shadow) in a dark context",
+    message: "A neon glow on dark reads as gaming-UI default rather than a considered accent (C3).",
+    gated: (ctx) => ctx.has("glow", "neon", "cyberpunk", "gaming"),
+    detect: ({ content, lines }) => {
+      const darkContext = /prefers-color-scheme\s*:\s*dark/i.test(content) || /\.dark\b|\[data-theme=["']?dark/i.test(content) || /background(?:-color)?\s*:\s*#(?:0[0-9a-f]{5}|1[0-9a-f]{5}|000|111)\b/i.test(content);
+      if (!darkContext) return [];
+      const out = [];
+      for (let i = 0; i < lines.length; i++) {
+        const l = lines[i] ?? "";
+        const m = /(?:box|text)-shadow\s*:\s*0\s+0\s+(\d+)px[^;]*?(#[0-9a-f]{3,8})/i.exec(l);
+        if (!m?.[1] || !m[2]) continue;
+        if (parseInt(m[1], 10) < 8) continue;
+        if (hueBucket(m[2]) === null) continue;
+        out.push({ line: i + 1, snippet: l.trim().slice(0, 80) });
+      }
+      return out;
+    }
+  },
+  {
+    id: "slop-t9-uppercase-body",
+    catalogId: "T9",
+    severity: "P3",
+    engines: ["css"],
+    description: "text-transform: uppercase applied to body-length text",
+    message: "All-caps destroys word-shape for sustained reading; reserve it for short labels (T9).",
+    gated: (ctx) => ctx.has("all caps", "all-caps", "uppercase display"),
+    detect: ({ content }) => cssBlocks(content).filter((b) => /\b(p|body|article|\.prose|\.body|\.content|\.copy|blockquote|li)\b/i.test(b.selector)).filter((b) => !/label|button|\bth\b|badge|chip|tag|eyebrow|kicker|caption|nav/i.test(b.selector)).filter((b) => /text-transform\s*:\s*uppercase/i.test(b.body)).map((b) => ({ line: b.line, snippet: b.selector.slice(0, 80) }))
+  },
+  {
+    id: "slop-t10-wide-tracking-body",
+    catalogId: "T10",
+    severity: "P3",
+    engines: ["css"],
+    description: "letter-spacing above 0.05em on body-length text",
+    message: "Wide tracking slows sustained reading; it belongs to display type, not body (T10).",
+    gated: (ctx) => ctx.has("wide tracking", "letterspacing", "letter-spacing"),
+    detect: ({ content }) => cssBlocks(content).filter((b) => /\b(p|body|article|\.prose|\.body|\.content|\.copy|blockquote|li)\b/i.test(b.selector)).filter((b) => !/label|button|\bth\b|badge|chip|tag|eyebrow|kicker|caption|nav|h[1-6]/i.test(b.selector)).filter((b) => {
+      const em = /letter-spacing\s*:\s*(\d*\.?\d+)(em|rem)/i.exec(b.body);
+      if (em?.[1]) return parseFloat(em[1]) > 0.05;
+      const px = /letter-spacing\s*:\s*(\d*\.?\d+)px/i.exec(b.body);
+      return px?.[1] !== void 0 && parseFloat(px[1]) > 0.8;
+    }).map((b) => ({ line: b.line, snippet: b.selector.slice(0, 80) }))
+  },
+  {
+    id: "slop-m1-bounce-easing",
+    catalogId: "M1",
+    severity: "P2",
+    engines: ["css"],
+    description: "Bounce or elastic easing on a UI transition",
+    message: "Overshoot draws attention to the animation instead of the state change (M1).",
+    gated: (ctx) => ctx.has("bounce", "playful motion", "elastic"),
+    detect: ({ lines }) => {
+      const out = [];
+      for (let i = 0; i < lines.length; i++) {
+        const l = lines[i] ?? "";
+        const cb = /cubic-bezier\(\s*[-\d.]+\s*,\s*(-?[\d.]+)\s*,\s*[-\d.]+\s*,\s*(-?[\d.]+)\s*\)/i.exec(l);
+        if (cb?.[1] !== void 0 && cb[2] !== void 0) {
+          const y1 = parseFloat(cb[1]);
+          const y2 = parseFloat(cb[2]);
+          if (y1 < 0 || y1 > 1 || y2 < 0 || y2 > 1) {
+            out.push({ line: i + 1, snippet: l.trim().slice(0, 80) });
+            continue;
+          }
+        }
+        if (/(?:transition|animation)[^;]*\b(?:bounce|elastic|back(?:In|Out|InOut))\b/i.test(l)) {
+          out.push({ line: i + 1, snippet: l.trim().slice(0, 80) });
+        }
+      }
+      return out;
+    }
+  },
+  {
+    id: "slop-m3-img-hover-transform",
+    catalogId: "M3",
+    severity: "P3",
+    engines: ["css"],
+    description: "transform or filter animation on an <img> hover",
+    message: "Hover-scaling an image triggers composite plus decode and often shifts layout (M3).",
+    gated: (ctx) => ctx.has("image hover", "hover zoom", "ken burns"),
+    detect: ({ content }) => cssBlocks(content).filter((b) => /\bimg\b/i.test(b.selector) && /:hover|:focus-within/i.test(b.selector)).filter((b) => /(?:^|[;{\s])(?:transform|filter)\s*:/i.test(b.body)).map((b) => ({ line: b.line, snippet: b.selector.slice(0, 80) }))
   }
 ];
 
@@ -24207,8 +24319,11 @@ function decide4(event, state) {
   if (state.nudges >= MAX_NUDGES) return { state, warn: false };
   return { state: { ...state, nudges: state.nudges + 1 }, warn: true };
 }
+function stateChanged(before, after) {
+  return before.consulted !== after.consulted || before.nudges !== after.nudges;
+}
 function nudgeReason2(file) {
-  return `Non-trivial UI write to ${file} with no design consultation this session. Run \`existing-ui-audit\` first, then the fe-design loop (brief \u2192 build \u2192 review). Skip only if this is ui-trivial: <=1 file, <=5 lines, no new component, no new state, no new dependency.`;
+  return `Non-trivial UI write to ${file} with no design consultation this session. Run \`existing-ui-audit\` first, then the fe-design loop (brief \u2192 inventory, if an artifact was provided \u2192 build \u2192 review). Skip only if this is ui-trivial: <=1 file, <=5 lines, no new component, no new state, no new dependency.`;
 }
 function main37() {
   let envelope;
@@ -24229,7 +24344,7 @@ function main37() {
   if (!event) return EXIT_ALLOW15;
   const before = readState2(root, session);
   const { state, warn } = decide4(event, before);
-  if (state.consulted !== before.consulted || state.nudges !== before.nudges) {
+  if (stateChanged(before, state)) {
     writeState2(root, session, state);
   }
   if (!warn) return EXIT_ALLOW15;
@@ -25066,10 +25181,13 @@ function _isObject13(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 var FILE_TOKEN_RE = /`?\b[\w][\w.\-]{0,80}\.(ts|tsx|js|jsx|mjs|cjs|py|php|rb|go|rs|java|kt|swift|md|mdx|json|ya?ml|css|scss|less|html|vue|svelte|sql|sh|bash|c|cpp|h|hpp|cs|toml|xml)\b`?/gi;
-function detectEnumeratedFiles(text) {
+var FILE_SIGNAL_FLOOR = 3;
+function enumeratedFileTokens(text) {
   const matches = text.match(FILE_TOKEN_RE) ?? [];
-  const unique = new Set(matches.map((m) => m.replace(/`/g, "").toLowerCase()));
-  return unique.size;
+  return [...new Set(matches.map((m) => m.replace(/`/g, "").toLowerCase()))];
+}
+function detectEnumeratedFiles(text) {
+  return enumeratedFileTokens(text).length;
 }
 var EXPLICIT_COUNT_RE = /\b(\d+)\s+(files?|modules?|components?|endpoints?|scripts?|skills?|rules?|tickets?|tests?|screens?|pages?|repos?|services?|classes?|functions?|methods?|slices?|tasks?|items?|targets?|routes?|controllers?|Dateien|Module|Tests|Komponenten|Skripte|Regeln|Tickets|Aufgaben|Klassen|Funktionen|Endpunkte)\b/i;
 function detectExplicitSliceCount(text) {
@@ -25121,7 +25239,7 @@ function extractTaskSignals(text) {
   const explicit = detectExplicitSliceCount(text) ?? 0;
   const conjunction = detectMultiDeliverableConjunction(text);
   const forEach = detectForEachShape(text);
-  const fileSignal = fileCount >= 3 ? fileCount : 0;
+  const fileSignal = fileCount >= FILE_SIGNAL_FLOOR ? fileCount : 0;
   let slices = Math.max(fileSignal, explicit, conjunction);
   if (slices === 0 && forEach) {
     slices = 2;
@@ -25715,12 +25833,19 @@ function readCiSettled(workspaceRoot2) {
   return { seen: false, settled: false };
 }
 var _COMPLETION_RE = /(^|\n)\s*(?:\*\*)?(?:fertig\b|damit ist alles erledigt|aufgabe erledigt|alles erledigt\b|komplett(?:er)? (?:auftrag|abgearbeitet)|der komplette auftrag ist durch|done[.!]|all done\b|task complete)/i;
+var _NEGATED_CLAIM_RE = /\b(noch nicht|nicht fertig|nicht durch|wäre verfrüht|ist verfrüht|not yet|not done|isn'?t done|nein)\b/i;
+function _lineAround(prose, at) {
+  const start = prose.lastIndexOf("\n", at) + 1;
+  const end = prose.indexOf("\n", at);
+  return prose.slice(start, end === -1 ? prose.length : end);
+}
 function detectCompletionClaim(reply, ci) {
   if (!ci.seen || ci.settled) return null;
   const prose = visibleProse(reply);
   const m = _COMPLETION_RE.exec(prose);
   if (!m) return null;
   const at = m.index;
+  if (_NEGATED_CLAIM_RE.test(_lineAround(prose, at))) return null;
   return {
     detector: "completion",
     evidence: prose.slice(at, at + 120).trim(),
@@ -26492,6 +26617,7 @@ function readState3(file) {
         schema_version: 1,
         counters: parsed.counters,
         advisory_fired_at: typeof parsed.advisory_fired_at === "string" ? parsed.advisory_fired_at : null,
+        missing_envelope_warned_at: typeof parsed.missing_envelope_warned_at === "string" ? parsed.missing_envelope_warned_at : null,
         updated_at: typeof parsed.updated_at === "string" ? parsed.updated_at : ""
       };
     }
@@ -26501,9 +26627,30 @@ function readState3(file) {
     schema_version: 1,
     counters: emptyCounters(),
     advisory_fired_at: null,
+    missing_envelope_warned_at: null,
     updated_at: ""
   };
 }
+function envelopeExists(workspaceRoot2, since = null) {
+  const target = path66.join(workspaceRoot2, RECYCLE_ENVELOPE_REL);
+  let raw;
+  try {
+    raw = fs64.readFileSync(target, "utf-8");
+  } catch (exc) {
+    return exc?.code !== "ENOENT";
+  }
+  if (since === null) return true;
+  try {
+    const written = JSON.parse(raw).written_at;
+    if (typeof written !== "string") return true;
+    return Date.parse(written) >= Date.parse(since);
+  } catch {
+    return true;
+  }
+}
+function buildMissingEnvelopeLine(workspaceRoot2) {
+  return `recycle advised earlier, but no envelope exists at ${path66.join(workspaceRoot2, RECYCLE_ENVELOPE_REL)} \u2014 /clear now starts the successor from nothing. Re-run \`agent-config session:recycle\` and check that it prints the absolute path it wrote before clearing.`;
+}
 function readThresholdTokens() {
   const override = process11.env[THRESHOLD_OVERRIDE_ENV];
   if (override !== void 0) {
@@ -26514,7 +26661,7 @@ function readThresholdTokens() {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : null;
 }
 function buildAdvisoryLine3(tokens, threshold) {
-  return `context past recycle threshold (${tokens.toLocaleString("en-US")} of ${threshold.toLocaleString("en-US")} tokens): run \`agent-config session:recycle\` to write the recycle envelope, then /clear \u2014 the successor session resumes from the envelope at session_start (road-to-token-economy-recycling)`;
+  return `context past recycle threshold (${tokens.toLocaleString("en-US")} of ${threshold.toLocaleString("en-US")} tokens): run \`agent-config session:recycle\` to write the recycle envelope. It prints the absolute path it wrote \u2014 /clear only after you have seen that line. The successor session then resumes from the envelope at session_start (road-to-token-economy-recycling)`;
 }
 function writeContextFill(workspaceRoot2, tokens, threshold, ts) {
   try {
@@ -26563,10 +26710,12 @@ function main45() {
   const threshold = readThresholdTokens();
   const tokens = counters.final_context_tokens;
   const shouldAdvise = threshold !== null && tokens !== null && tokens >= threshold && state.advisory_fired_at === null;
+  const shouldWarnMissing = threshold !== null && state.advisory_fired_at !== null && (state.missing_envelope_warned_at ?? null) === null && !envelopeExists(workspaceRoot2, state.advisory_fired_at);
   const nextState2 = {
     schema_version: 1,
     counters,
     advisory_fired_at: shouldAdvise ? now : state.advisory_fired_at,
+    missing_envelope_warned_at: shouldWarnMissing ? now : state.missing_envelope_warned_at ?? null,
     updated_at: now
   };
   try {
@@ -26581,6 +26730,17 @@ function main45() {
         reason: `session-eol: context ${tokens} >= recycle threshold ${threshold}`,
         additional_context: buildAdvisoryLine3(tokens, threshold)
       })}
+`
+    );
+    return EXIT_WARN13;
+  }
+  if (shouldWarnMissing) {
+    process11.stdout.write(
+      `${JSON.stringify({
+        decision: "warn",
+        reason: "session-eol: recycle advised, no envelope written",
+        additional_context: buildMissingEnvelopeLine(workspaceRoot2)
+      })}
 `
     );
     return EXIT_WARN13;

package/dist/install/install.mjs

@@ -9936,7 +9936,6 @@ var MERGEABLE_KEYS = [
   "personal.bot_icon",
   "personal.pr_comment_bot_icon",
   "personal.autonomy",
-  "telegraph.speak_scope",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
@@ -10219,7 +10218,12 @@ var REMOVED_KEYS = /* @__PURE__ */ new Map([
   ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
   ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
+  ["telegraph.speak_scope", "the rule body states its own scope; compile_router gates on telegraph.speak alone"],
+  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
+  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
+  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
+  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"]
 ]);
 var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
@@ -14580,7 +14584,6 @@ var userType = external_exports.enum(["", "consultant", "creator", "developer",
 var profileId = external_exports.enum(["developer", "content_creator", "founder", "agency", "finance", "ops"]);
 var accessStyle = external_exports.enum(["getters_setters", "get_attribute", "magic_properties"]);
 var chatFreq = external_exports.enum(["per_turn", "per_phase", "per_tool"]);
-var chatOverflow = external_exports.enum(["rotate", "condense"]);
 var qualityCadence = external_exports.enum(["end_of_roadmap", "per_phase", "per_step"]);
 var regenCadence = external_exports.enum(["per_step", "every_5_steps", "phase_boundary"]);
 var worktreeMode = external_exports.enum(["off", "on", "ask"]);
@@ -14727,12 +14730,6 @@ var settingsSchema = external_exports.object({
     frequency: chatFreq.default("per_turn").describe(
       "How often the chat-history writer flushes to disk. per_turn = after every user / agent exchange (default, lowest data loss on crash). per_phase = at phase boundaries (cheaper I/O). per_tool = after every tool call (highest fidelity, noisiest log)."
     ),
-    max_size_kb: external_exports.number().int().min(0).default(2048).describe(
-      "Maximum size (KB) of the active chat-history file before chat_history.on_overflow kicks in. Set 0 to disable rotation / condensation entirely (file grows forever)."
-    ),
-    on_overflow: chatOverflow.default("rotate").describe(
-      "What happens when chat_history.max_size_kb is hit. rotate = move the current log aside and start fresh (default). condense = telegraph-condense the oldest entries in place to keep recent context."
-    ),
     text_limits: external_exports.object({
       user: external_exports.number().int().min(0).default(0).describe(
         "Per-message character cap for user inputs in the chat-history log. 0 = log verbatim (default). Raise above 0 only if your prompts contain large pasted artefacts you do not want stored."
@@ -14781,9 +14778,6 @@ var settingsSchema = external_exports.object({
   quality: external_exports.object({
     local_auto_run: external_exports.boolean().default(false).describe(
       "Run quality tools (linters, type-checks, formatters) and the local test suite autonomously after edits. Off by default \u2014 the agent never runs quality tools proactively and does not ask; the user runs them manually (e.g. /quality-fix) and remote CI is the authoritative gate. The agent only runs a quality tool on an explicit ask, a concrete CI failure, or the new-gate carve-out. Turn on to restore autonomous pipeline runs."
-    ),
-    wait_for_remote_ci: external_exports.boolean().default(false).describe(
-      "After pushing a branch, poll the remote CI provider (GitHub Actions, GitLab CI) and surface failures inline. Off by default \u2014 useful when local CI does not cover everything the remote pipeline runs."
     )
   }),
   design: external_exports.object({
@@ -14809,12 +14803,9 @@ var settingsSchema = external_exports.object({
   }).default({ identity_allowlist: [], forbid_terminal_capture: true, data_bearing_gate: "on" }),
   telegraph: external_exports.object({
     speak: external_exports.boolean().default(false).describe(
-      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This \u2014 not speak_scope \u2014 is the lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
-    ),
-    speak_scope: external_exports.enum(["off", "reply", "all"]).default("off").describe(
-      "Where telegraph condensation applies WHEN speak is true. off (default) = agent reply prose is exempt. compile_router never reads this key: with speak false the rule does not ship, so this setting has no effect on its own. Quote the value in YAML \u2014 bare `off` parses as a boolean under YAML 1.1 and is rejected."
+      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This is the only lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
     )
-  }).default({ speak: false, speak_scope: "off" }),
+  }).default({ speak: false }),
   tokens: external_exports.object({
     rich_skills: richSkillsMode.default("on").describe(
       "Whether skills marked token_budget_class: rich may load in full (exempt from telegraph-speak + thin-projector trimming), consumed by the token-budget-discipline rule. on = allowed (default); off = fall back to standard condensed behavior; ask = surface an estimated token delta (tokens, not dollars) and ask once per session before loading."
@@ -15124,13 +15115,10 @@ var settingsSchema = external_exports.object({
     acknowledged: external_exports.boolean().default(false).describe(
       "I understand the legal-review-prep pack provides templates and general information ONLY \u2014 it is NOT legal advice, creates no attorney-client relationship, and never replaces a licensed lawyer. Individual cases require an attorney. The pack stays inactive until this is checked."
     ),
-    consented_at: external_exports.string().default("").describe(
-      "ISO timestamp recorded when the legal-review-prep acknowledgment was given. Set automatically by the setup wizard; leave empty otherwise."
-    ),
     require_council: external_exports.boolean().default(true).describe(
       "Gate legal work-product behind a multi-model AI-council / deep-research pass (defense-in-depth: documented multi-stage review + audit trail; fail-closed when no council is configured). Leave on for the safest posture. Turning it off lets single-model legal output through \u2014 not recommended for a high-risk pack."
     )
-  }).default({ acknowledged: false, consented_at: "", require_council: true })
+  }).default({ acknowledged: false, require_council: true })
 });
 
 // node_modules/zod-to-json-schema/dist/esm/Options.js

package/dist/mcp/registry-manifest.json

@@ -3,13 +3,13 @@
     "artefact_count": 603,
     "scanner_version": "1eaf68b6e9c9"
   },
-  "generated_at": "2026-08-12",
+  "generated_at": "2026-08-13",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "10.1.0"
+    "version": "10.3.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "10.1.0"
+      "version": "10.3.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "10.1.0"
+  "version": "10.3.0"
 }