@event4u/agent-config 14.0.0 → 14.1.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "14.0.0",
+    "version": "14.1.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -366,6 +366,59 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 14.1.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [14.1.0](https://github.com/event4u-app/agent-config/compare/14.0.0...14.1.0) (2026-08-18)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _none_
+- **Default changes + migration:** _none_
+- **Security and correctness:** _auto-derived, rewrite before merge:_ security-scoped commits or fixes to executable surface in 2ee0642, d8c14a2, 4a60aeb, 3952d49, c9753b1, aa48d84 +1 more.
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits recording a null, waived or falsified result in 7ebc802.
+- **Known limitations:** _none_
+
+### Features
+
+* **gates:** adopt per-target ledgers in two new arrivals ([a0f3326](https://github.com/event4u-app/agent-config/commit/a0f332632ac4769184cf993c8efd58b2063d0e6f))
+
+### Bug Fixes
+
+* **tests:** a raw NUL byte where a space was meant ([2ee0642](https://github.com/event4u-app/agent-config/commit/2ee0642ddcc99e2eba2a30ba2655263c5048b36a))
+* **hooks:** keep an authorization from being clobbered by a parallel session ([d8c14a2](https://github.com/event4u-app/agent-config/commit/d8c14a2da7238e03b3b34c6ed56cfdcb58ed5525))
+* **review:** unbreak the reference the findings row created, and replicate ([4708792](https://github.com/event4u-app/agent-config/commit/47087927fff242380c03cf95853e9d4106e1b054))
+* **gates:** stop three ledgers reporting targets they never read ([4a60aeb](https://github.com/event4u-app/agent-config/commit/4a60aeb09f429b5fff348b09c5fd5626f7e3f38e))
+* **bench:** give the consumer hook path its own budget, which it never had ([c9753b1](https://github.com/event4u-app/agent-config/commit/c9753b151dfd7a0aa95af08e59cff298c4220318))
+* **gates:** finding 6 — deduplicate the manifest ids before planning ([aa48d84](https://github.com/event4u-app/agent-config/commit/aa48d845a0ec1e81368ad103336b27438c6fcc16))
+* **gates:** apply the R2 review — all 11 findings ([8ec1dbb](https://github.com/event4u-app/agent-config/commit/8ec1dbb65b0a3840865aac0d91c8301eea9cbb1c))
+
+### Documentation
+
+* **roadmap:** carry the replication into step 0.5 ([1219376](https://github.com/event4u-app/agent-config/commit/1219376feca58df91c76e1f24f99d162ab5f7e95))
+* **roadmap:** re-review the risk register the Phase 0 addition invalidated ([c6ff0ed](https://github.com/event4u-app/agent-config/commit/c6ff0ed14b39621765458d9ec39b654bff684b71))
+* **roadmap:** record the path split in Phase 0, where the question already lived ([9fc8cf9](https://github.com/event4u-app/agent-config/commit/9fc8cf9f9f6651e6872d3026d5707191dcaffcdf))
+* **review:** the measurement settles finding 6 — the dispatcher regressed ([7ebc802](https://github.com/event4u-app/agent-config/commit/7ebc8027aba369b34a500377dc588ac526b2ac4f))
+* **review:** close 18 of 20 round-2 findings, name the two that stay open ([80ba9cc](https://github.com/event4u-app/agent-config/commit/80ba9cc12fbf0e336f912766719d61b421f902cd))
+* **baselines:** describe what the ratchet lowering actually landed ([0ce7a17](https://github.com/event4u-app/agent-config/commit/0ce7a17baefad295c2fcb1849b02cca4a07f6bd9))
+* **review:** record round 2 of the completion review, rows open ([41e8a1e](https://github.com/event4u-app/agent-config/commit/41e8a1e4ffc3b378fc2ff2bb9add9c31c3e4936f))
+* **review:** re-bind the findings to the post-fix scope ([43847c1](https://github.com/event4u-app/agent-config/commit/43847c1e1bd07c3d5ebe2ff38060a761e8552e9b))
+* **review:** all 11 findings terminal, with their fix refs ([957a53e](https://github.com/event4u-app/agent-config/commit/957a53e860a973b87b32bba07479b50f43b4f6f1))
+* **review:** the R2 completion review, 11 findings, all rows open ([f7d9581](https://github.com/event4u-app/agent-config/commit/f7d9581ceac1388786fc6a8e0f9b6192c5f10502))
+* **gates:** exempt check_pr_ci_current from the ledger, with the reason ([080e17c](https://github.com/event4u-app/agent-config/commit/080e17c41dd7904fe1bc76c7556417ffb7f525b4))
+
+### CI
+
+* **bench:** measure both hook paths on one runner, without gating either ([7d8be6e](https://github.com/event4u-app/agent-config/commit/7d8be6e1bee4f04d902d660b04f05b03ed1109d7))
+
+### Chores
+
+* **gates:** lower the ledger-adoption baseline 216 to 215 ([6868213](https://github.com/event4u-app/agent-config/commit/686821324b2ad94533a277a43cb857d21bb600c6))
+
+### Other
+
+* Revert "fix(bench): give the consumer hook path its own budget, which it never had" ([3952d49](https://github.com/event4u-app/agent-config/commit/3952d49bf3a3af770cb522dafc540c1458050f3d))
+
+Tests: 14592 (+72 since 14.0.0)
+
 ## [14.0.0](https://github.com/event4u-app/agent-config/compare/13.0.0...14.0.0) (2026-08-18)
 
 ### Release highlights

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "14.0.0"
+agent_config_version: "14.1.0"
 
 # --- Project identity ---
 project:

package/dist/cli-delegate/cmd_conformance.js

@@ -508,9 +508,38 @@ import path2 from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
 var EXIT_ALLOW2 = 0;
 var STATE_FILE2 = path2.join("agents", "state", "git-authorization.json");
+var STATE_DIR = path2.join("agents", "state", "git-authorization");
+var PENDING_DIR = path2.join("agents", "state", "git-authorization-pending");
+function sessionSlug(session_id) {
+  return session_id.replace(/[^A-Za-z0-9._-]/gu, "_").slice(0, 80);
+}
+function ledgerFileFor(session_id) {
+  if (!session_id) {
+    return STATE_FILE2;
+  }
+  return path2.join(STATE_DIR, `${sessionSlug(session_id)}.json`);
+}
+function pendingFileFor(session_id) {
+  if (!session_id) {
+    return PENDING_FILE;
+  }
+  return path2.join(PENDING_DIR, `${sessionSlug(session_id)}.json`);
+}
+var PENDING_FILE = path2.join("agents", "state", "git-authorization-pending.json");
+var PENDING_MAX_AGE_MS = 10 * 60 * 1e3;
 function _isObject3(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
+var ALL_OPS = [
+  "commit",
+  "push",
+  "branch",
+  "pr-create",
+  "pr-merge",
+  "tag",
+  "release",
+  "publish"
+];
 var PHRASES = [
   { op: "commit", re: /\b(commit(e|et|te|ten)?|committe|einchecken)\b/i },
   { op: "push", re: /\b(push(e|en|t)?|hochladen|hochschieben|raufschieben)\b/i },
@@ -548,6 +577,18 @@ function isInterrogative(prose) {
     t
   );
 }
+function isAffirmative(prose) {
+  const t = prose.trim().replace(/[.!]+$/u, "");
+  if (!t || t.length > 24) {
+    return false;
+  }
+  if (isInterrogative(t)) {
+    return false;
+  }
+  return /^(?:option\s*)?\d{1,2}[.)]?$/iu.test(t) || /^(ja|jo|jep|yes|yep|yeah|ok|okay|okey|klar|passt|gut|los|go|go ahead|mach|mach das|mach es|leg los|do it|proceed|bitte)$/iu.test(
+    t
+  );
+}
 var PASTED_COMMANDS = [
   { op: "publish", re: /\bnpm\s+publish\b/i },
   { op: "tag", re: /\bgit\s+push\s+[^\n]*--tags\b|\bgit\s+tag\s+-a\b/i },
@@ -596,6 +637,40 @@ function classifyAuthorization(prompt) {
   }
   return { authorized: [...authorized], evidence };
 }
+function takePending(consumer_root, session_id, now) {
+  const file = path2.join(consumer_root, pendingFileFor(session_id));
+  let raw;
+  try {
+    raw = fs2.readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+  try {
+    fs2.rmSync(file, { force: true });
+  } catch {
+  }
+  try {
+    const decoded = JSON.parse(raw);
+    if (!_isObject3(decoded)) {
+      return null;
+    }
+    const op = decoded["op"];
+    if (typeof op !== "string" || !ALL_OPS.includes(op)) {
+      return null;
+    }
+    const recorded = typeof decoded["session_id"] === "string" ? decoded["session_id"] : "";
+    if (session_id && recorded && recorded !== session_id) {
+      return null;
+    }
+    const at = Date.parse(String(decoded["refused_at"] ?? ""));
+    if (!Number.isFinite(at) || now - at > PENDING_MAX_AGE_MS) {
+      return null;
+    }
+    return { op, session_id: recorded, refused_at: String(decoded["refused_at"]) };
+  } catch {
+    return null;
+  }
+}
 function run2(stdin_text, options) {
   let envelope = {};
   if (stdin_text.trim()) {
@@ -621,6 +696,12 @@ function run2(stdin_text, options) {
     return EXIT_ALLOW2;
   }
   const { authorized, evidence } = classifyAuthorization(prompt);
+  const session = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
+  const pending = takePending(options.consumer_root, session, Date.now());
+  if (pending && !authorized.includes(pending.op) && isAffirmative(prompt)) {
+    authorized.push(pending.op);
+    evidence[pending.op] = `confirmation of the refused \`${pending.op}\` (refused ${pending.refused_at}): "${prompt.trim().slice(0, 40)}"`;
+  }
   const ledger = {
     session_id: typeof envelope["session_id"] === "string" ? envelope["session_id"] : "",
     detected_at: (/* @__PURE__ */ new Date()).toISOString(),
@@ -629,7 +710,7 @@ function run2(stdin_text, options) {
     prompt_chars: prompt.length
   };
   try {
-    atomic_write_json(path2.join(options.consumer_root, STATE_FILE2), ledger);
+    atomic_write_json(path2.join(options.consumer_root, ledgerFileFor(session)), ledger);
   } catch {
   }
   return EXIT_ALLOW2;
@@ -915,17 +996,30 @@ function commandOp(command) {
 }
 var LEDGER_MAX_AGE_MS = 30 * 60 * 1e3;
 function _loadLedger(consumer_root, session_id, now) {
+  const candidates = [ledgerFileFor(session_id)];
+  if (!candidates.includes(STATE_FILE2)) {
+    candidates.push(STATE_FILE2);
+  }
+  for (const rel of candidates) {
+    const found = _readLedgerFile(path3.join(consumer_root, rel), session_id, now);
+    if (found !== null) {
+      return found;
+    }
+  }
+  return { authorized: /* @__PURE__ */ new Set(), present: false };
+}
+function _readLedgerFile(file, session_id, now) {
   try {
-    const raw = fs3.readFileSync(path3.join(consumer_root, STATE_FILE2), "utf8");
+    const raw = fs3.readFileSync(file, "utf8");
     const decoded = JSON.parse(raw);
     if (_isObject4(decoded) && Array.isArray(decoded["authorized"])) {
       const ledgerSession = typeof decoded["session_id"] === "string" ? decoded["session_id"] : "";
       if (session_id && ledgerSession && ledgerSession !== session_id) {
-        return { authorized: /* @__PURE__ */ new Set(), present: false };
+        return null;
       }
       const at = Date.parse(String(decoded["detected_at"] ?? ""));
       if (Number.isFinite(at) && now - at > LEDGER_MAX_AGE_MS) {
-        return { authorized: /* @__PURE__ */ new Set(), present: false };
+        return null;
       }
       return {
         authorized: new Set(decoded["authorized"].filter(Boolean)),
@@ -934,7 +1028,7 @@ function _loadLedger(consumer_root, session_id, now) {
     }
   } catch {
   }
-  return { authorized: /* @__PURE__ */ new Set(), present: false };
+  return null;
 }
 function decide(command, ledger) {
   if (command === null) {
@@ -948,7 +1042,7 @@ function decide(command, ledger) {
   if (BLOCK_OPS.has(op)) {
     const reason = `Blocked: \`${op}\` with no authorization in this turn's prompt. This operation is irreversible and non-destructive-by-default already declares it never-autonomous. Command: ${shown}. Ask the user, in one numbered-options block, and run it only after they answer this turn.`;
     return { exit: EXIT_BLOCK, stdout: "", stderr: `${reason}
-` };
+`, blockedOp: op };
   }
   if (WARN_OPS.has(op)) {
     const reason = `No \`${op}\` authorization found in this turn's prompt (commit-policy: a one-shot authorization is spent on the operation it named). If the user did authorize it this turn, proceed; otherwise stop and ask. Command: ${shown}`;
@@ -978,6 +1072,16 @@ function run3(stdin_text, options) {
     extractCommand(envelope),
     _loadLedger(options.consumer_root, session_id, Date.now())
   );
+  if (decision.blockedOp) {
+    try {
+      atomic_write_json(path3.join(options.consumer_root, pendingFileFor(session_id)), {
+        op: decision.blockedOp,
+        session_id,
+        refused_at: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    } catch {
+    }
+  }
   if (decision.stdout) {
     process.stdout.write(decision.stdout);
   }
@@ -1945,12 +2049,12 @@ function resolveDepth(parentRef, open) {
   if (!parent) return { depth: 2, depth_basis: "asserted-parent" };
   return { depth: parent.depth + 1, depth_basis: "observed" };
 }
-function ledgerFileFor(root, ts) {
+function ledgerFileFor2(root, ts) {
   return path6.join(root, LEDGER_DIR, `${ts.slice(0, 7)}.jsonl`);
 }
 function appendLedgerLine(root, ts, line) {
   if (is_replay_mode()) return;
-  const file = ledgerFileFor(root, ts);
+  const file = ledgerFileFor2(root, ts);
   fs6.mkdirSync(path6.dirname(file), { recursive: true });
   fs6.appendFileSync(file, `${JSON.stringify(line)}
 `, "utf8");

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-08-18T09:00:32Z`
+- Generated: `2026-08-18T12:03:29Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -14578,7 +14578,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-08-18T09:00:32Z",
+  "generated_at": "2026-08-18T12:03:29Z",
   "packs": [
     {
       "artefact_count": 118,

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-2cc31b7b7f79cb94fdbb71650cd4c7a393d85950f10d90f80f1f59480e423455  discovery-manifest.json
+c20518e62eeec14688645cf600074ae569563d32a4188ce8ce00d9d022a4631d  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,6 +1,6 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-18T09:00:32Z`
+- Generated: `2026-08-18T12:03:29Z`
 - Scanner: `de0a22b4ac4c`
 - Artefacts: **609**
 - Unassigned: **0**

package/dist/discovery/dormancy-report.md

@@ -1,6 +1,6 @@
 # Discovery — Dormancy Report
 
-- Generated: `2026-08-18T09:00:32Z`
+- Generated: `2026-08-18T12:03:29Z`
 - Window: **6 months** without a commit
 
 > Dormancy triggers **review, never auto-deprecation**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-18T09:00:32Z`
+- Generated: `2026-08-18T12:03:29Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:3d01d440e67f335028a06d9a4609a7e6f885f829cec1eff42914a3e1690cfdeb",
-  "generated_at": "2026-08-18T09:00:32Z",
+  "generated_at": "2026-08-18T12:03:29Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-18T09:00:32Z`
+- Generated: `2026-08-18T12:03:29Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:3d01d440e67f335028a06d9a4609a7e6f885f829cec1eff42914a3e1690cfdeb",
-  "generated_at": "2026-08-18T09:00:32Z",
+  "generated_at": "2026-08-18T12:03:29Z",
   "scanner_version": "de0a22b4ac4c",
   "workspaces": [
     {

package/dist/hooks/dispatch.js

@@ -23087,9 +23087,38 @@ import path50 from "node:path";
 import { fileURLToPath as fileURLToPath32, pathToFileURL as pathToFileURL24 } from "node:url";
 var EXIT_ALLOW8 = 0;
 var STATE_FILE7 = path50.join("agents", "state", "git-authorization.json");
+var STATE_DIR3 = path50.join("agents", "state", "git-authorization");
+var PENDING_DIR = path50.join("agents", "state", "git-authorization-pending");
+function sessionSlug(session_id) {
+  return session_id.replace(/[^A-Za-z0-9._-]/gu, "_").slice(0, 80);
+}
+function ledgerFileFor(session_id) {
+  if (!session_id) {
+    return STATE_FILE7;
+  }
+  return path50.join(STATE_DIR3, `${sessionSlug(session_id)}.json`);
+}
+function pendingFileFor(session_id) {
+  if (!session_id) {
+    return PENDING_FILE;
+  }
+  return path50.join(PENDING_DIR, `${sessionSlug(session_id)}.json`);
+}
+var PENDING_FILE = path50.join("agents", "state", "git-authorization-pending.json");
+var PENDING_MAX_AGE_MS = 10 * 60 * 1e3;
 function _isObject8(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
+var ALL_OPS = [
+  "commit",
+  "push",
+  "branch",
+  "pr-create",
+  "pr-merge",
+  "tag",
+  "release",
+  "publish"
+];
 var PHRASES = [
   { op: "commit", re: /\b(commit(e|et|te|ten)?|committe|einchecken)\b/i },
   { op: "push", re: /\b(push(e|en|t)?|hochladen|hochschieben|raufschieben)\b/i },
@@ -23127,6 +23156,18 @@ function isInterrogative(prose) {
     t
   );
 }
+function isAffirmative(prose) {
+  const t = prose.trim().replace(/[.!]+$/u, "");
+  if (!t || t.length > 24) {
+    return false;
+  }
+  if (isInterrogative(t)) {
+    return false;
+  }
+  return /^(?:option\s*)?\d{1,2}[.)]?$/iu.test(t) || /^(ja|jo|jep|yes|yep|yeah|ok|okay|okey|klar|passt|gut|los|go|go ahead|mach|mach das|mach es|leg los|do it|proceed|bitte)$/iu.test(
+    t
+  );
+}
 var PASTED_COMMANDS = [
   { op: "publish", re: /\bnpm\s+publish\b/i },
   { op: "tag", re: /\bgit\s+push\s+[^\n]*--tags\b|\bgit\s+tag\s+-a\b/i },
@@ -23175,6 +23216,40 @@ function classifyAuthorization(prompt) {
   }
   return { authorized: [...authorized], evidence };
 }
+function takePending(consumer_root, session_id, now) {
+  const file = path50.join(consumer_root, pendingFileFor(session_id));
+  let raw;
+  try {
+    raw = fs49.readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+  try {
+    fs49.rmSync(file, { force: true });
+  } catch {
+  }
+  try {
+    const decoded = JSON.parse(raw);
+    if (!_isObject8(decoded)) {
+      return null;
+    }
+    const op = decoded["op"];
+    if (typeof op !== "string" || !ALL_OPS.includes(op)) {
+      return null;
+    }
+    const recorded = typeof decoded["session_id"] === "string" ? decoded["session_id"] : "";
+    if (session_id && recorded && recorded !== session_id) {
+      return null;
+    }
+    const at = Date.parse(String(decoded["refused_at"] ?? ""));
+    if (!Number.isFinite(at) || now - at > PENDING_MAX_AGE_MS) {
+      return null;
+    }
+    return { op, session_id: recorded, refused_at: String(decoded["refused_at"]) };
+  } catch {
+    return null;
+  }
+}
 function run9(stdin_text, options) {
   let envelope = {};
   if (stdin_text.trim()) {
@@ -23200,6 +23275,12 @@ function run9(stdin_text, options) {
     return EXIT_ALLOW8;
   }
   const { authorized, evidence } = classifyAuthorization(prompt);
+  const session = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
+  const pending = takePending(options.consumer_root, session, Date.now());
+  if (pending && !authorized.includes(pending.op) && isAffirmative(prompt)) {
+    authorized.push(pending.op);
+    evidence[pending.op] = `confirmation of the refused \`${pending.op}\` (refused ${pending.refused_at}): "${prompt.trim().slice(0, 40)}"`;
+  }
   const ledger = {
     session_id: typeof envelope["session_id"] === "string" ? envelope["session_id"] : "",
     detected_at: (/* @__PURE__ */ new Date()).toISOString(),
@@ -23208,7 +23289,7 @@ function run9(stdin_text, options) {
     prompt_chars: prompt.length
   };
   try {
-    atomic_write_json(path50.join(options.consumer_root, STATE_FILE7), ledger);
+    atomic_write_json(path50.join(options.consumer_root, ledgerFileFor(session)), ledger);
   } catch {
   }
   return EXIT_ALLOW8;
@@ -23494,17 +23575,30 @@ function commandOp(command) {
 }
 var LEDGER_MAX_AGE_MS = 30 * 60 * 1e3;
 function _loadLedger(consumer_root, session_id, now) {
+  const candidates = [ledgerFileFor(session_id)];
+  if (!candidates.includes(STATE_FILE7)) {
+    candidates.push(STATE_FILE7);
+  }
+  for (const rel of candidates) {
+    const found = _readLedgerFile(path51.join(consumer_root, rel), session_id, now);
+    if (found !== null) {
+      return found;
+    }
+  }
+  return { authorized: /* @__PURE__ */ new Set(), present: false };
+}
+function _readLedgerFile(file, session_id, now) {
   try {
-    const raw = fs50.readFileSync(path51.join(consumer_root, STATE_FILE7), "utf8");
+    const raw = fs50.readFileSync(file, "utf8");
     const decoded = JSON.parse(raw);
     if (_isObject9(decoded) && Array.isArray(decoded["authorized"])) {
       const ledgerSession = typeof decoded["session_id"] === "string" ? decoded["session_id"] : "";
       if (session_id && ledgerSession && ledgerSession !== session_id) {
-        return { authorized: /* @__PURE__ */ new Set(), present: false };
+        return null;
       }
       const at = Date.parse(String(decoded["detected_at"] ?? ""));
       if (Number.isFinite(at) && now - at > LEDGER_MAX_AGE_MS) {
-        return { authorized: /* @__PURE__ */ new Set(), present: false };
+        return null;
       }
       return {
         authorized: new Set(decoded["authorized"].filter(Boolean)),
@@ -23513,7 +23607,7 @@ function _loadLedger(consumer_root, session_id, now) {
     }
   } catch {
   }
-  return { authorized: /* @__PURE__ */ new Set(), present: false };
+  return null;
 }
 function decide(command, ledger) {
   if (command === null) {
@@ -23527,7 +23621,7 @@ function decide(command, ledger) {
   if (BLOCK_OPS.has(op)) {
     const reason = `Blocked: \`${op}\` with no authorization in this turn's prompt. This operation is irreversible and non-destructive-by-default already declares it never-autonomous. Command: ${shown}. Ask the user, in one numbered-options block, and run it only after they answer this turn.`;
     return { exit: EXIT_BLOCK, stdout: "", stderr: `${reason}
-` };
+`, blockedOp: op };
   }
   if (WARN_OPS.has(op)) {
     const reason = `No \`${op}\` authorization found in this turn's prompt (commit-policy: a one-shot authorization is spent on the operation it named). If the user did authorize it this turn, proceed; otherwise stop and ask. Command: ${shown}`;
@@ -23557,6 +23651,16 @@ function run10(stdin_text, options) {
     extractCommand2(envelope),
     _loadLedger(options.consumer_root, session_id, Date.now())
   );
+  if (decision.blockedOp) {
+    try {
+      atomic_write_json(path51.join(options.consumer_root, pendingFileFor(session_id)), {
+        op: decision.blockedOp,
+        session_id,
+        refused_at: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    } catch {
+    }
+  }
   if (decision.stdout) {
     process.stdout.write(decision.stdout);
   }
@@ -28499,12 +28603,12 @@ function resolveDepth(parentRef, open) {
   if (!parent) return { depth: 2, depth_basis: "asserted-parent" };
   return { depth: parent.depth + 1, depth_basis: "observed" };
 }
-function ledgerFileFor(root, ts) {
+function ledgerFileFor2(root, ts) {
   return path70.join(root, LEDGER_DIR, `${ts.slice(0, 7)}.jsonl`);
 }
 function appendLedgerLine(root, ts, line) {
   if (is_replay_mode()) return;
-  const file = ledgerFileFor(root, ts);
+  const file = ledgerFileFor2(root, ts);
   fs69.mkdirSync(path70.dirname(file), { recursive: true });
   fs69.appendFileSync(file, `${JSON.stringify(line)}
 `, "utf8");

package/dist/mcp/registry-manifest.json

@@ -9,7 +9,7 @@
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "14.0.0"
+    "version": "14.1.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "14.0.0"
+      "version": "14.1.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "14.0.0"
+  "version": "14.1.0"
 }