@event4u/agent-config 14.12.0 → 14.14.0

package/dist/cli/commands/uiAudit.js

@@ -44,7 +44,45 @@ import { isUiPath, isUiTreePath } from '../../scripts/_lib/ui_surface.js';
  */
 export const COVERAGE_BUCKETS = ['honoured', 'translated', 'flagged'];
 export const ARTEFACT_REL = path.join('agents', 'runtime', 'state', 'ui-audit.json');
-/** Files that mark an adopted design system, and the marker each implies. */
+/**
+ * The audit `kind` vocabulary — ONE definition, and the source the skill is
+ * tested against rather than a second hand-written list.
+ *
+ * Canonicalised 2026-08-26 (road-to-component-granularity-vocabulary 0.1). The
+ * skill declared `page | partial | component | layout` and the code emitted
+ * `component | view | style | page`; only two values were common, so an audit
+ * artefact written by the code was being read against a contract it did not
+ * satisfy. AI council 2/2: the emitted schema is authoritative for
+ * compatibility, one seat adding the refinement that the enum should live in a
+ * single module the producer, the consumer and the doc-conformance test all
+ * depend on — which is what this constant is.
+ *
+ * `partial` and `layout` are NOT adopted. Both sound like they mean something,
+ * and neither has an operational definition anyone could test: measured against
+ * a real tree, there is no line. Adding them would replace two undocumented
+ * values with two speculative ones.
+ *
+ * `view` IS retained, against both council seats' recommendation, because the
+ * premise they were given is false. The roadmap records `view` as "0 in any JS
+ * tree" and both seats read that as zero-yield. Measured on this repository
+ * 2026-08-26: **`view` = 2**, on
+ * `tests/eval/frontend-corpus/cases/blade-view/…` and
+ * `…/livewire-flux/…`. It is the BLADE branch. "Zero in a JS tree" is true of it
+ * the way "zero cats in a dog show" is true — the instrument was pointed at the
+ * wrong corpus. Removing it would have deleted this suite's only Laravel
+ * classification.
+ */
+export const AUDIT_KINDS = ['component', 'view', 'style', 'page'];
+/**
+ * Files that mark an adopted design system, and the marker each implies.
+ *
+ * The `shadcn` row is a FALLBACK, not the detector. shadcn's own
+ * `components.json` declares where its primitives live under `aliases.ui`, and a
+ * project that points that alias anywhere other than `components/ui/` was
+ * reported as having no design system at all. Read the declaration first — see
+ * `shadcnUiDirs` — and keep this pattern for the case where `components.json`
+ * is absent or unreadable.
+ */
 const SYSTEM_MARKERS = [
     [/components\/ui\/[a-z-]+\.tsx?$/i, 'shadcn'],
     [/\btailwind\.config\.[cm]?[jt]s$/i, 'tailwind'],
@@ -77,19 +115,90 @@ function walk(root, out = [], depth = 0) {
     }
     return out;
 }
-function classify(rel) {
+/**
+ * True when a module's body is re-exports and nothing else — a barrel.
+ *
+ * `index.[jt]sx?` is one of the page markers, and a barrel is the commonest
+ * thing to call `index`. Reproduced 2026-08-26: `src/ui/components/index.tsx`
+ * containing two `export { X } from './X'` lines classified as `page`, which is
+ * wrong in a way that matters — `page` is what the `audit_path` branch and every
+ * downstream consumer read as "a screen".
+ *
+ * Deliberately conservative. Comments and blank lines are ignored; ANY other
+ * statement — a declaration, a side effect, an `export default` — makes it not a
+ * barrel, so a hybrid `index.tsx` that both re-exports and renders keeps its
+ * page classification. A false negative here costs a page label; a false
+ * positive would silently reclassify real screens.
+ */
+export function isBarrel(text) {
+    const body = text
+        .replace(/\/\*[\s\S]*?\*\//g, '')
+        .split('\n')
+        .map((l) => l.trim())
+        .filter((l) => l !== '' && !l.startsWith('//'));
+    if (body.length === 0)
+        return false;
+    return body.every((l) => /^export\s+(?:\*|\{)[^;]*from\s+['"][^'"]+['"];?$/.test(l));
+}
+function classify(rel, text = '') {
     if (/\.(css|scss|sass|less)$/i.test(rel))
         return 'style';
-    if (/(^|\/)(pages|app)\//i.test(rel) || /(^|\/)(page|index)\.[jt]sx?$/i.test(rel))
-        return 'page';
+    // `view` is the BLADE branch, not a dead one. It reads 0 in a JS tree by
+    // construction and 2 in this repository's own Laravel fixtures — the two
+    // statements are not in tension, and reading the first as "unused" is the
+    // misreading `road-to-component-granularity-vocabulary` 0.6 was written
+    // against.
     if (/\.blade\.php$/.test(rel) || /resources\/views\//.test(rel))
         return 'view';
+    if (/(^|\/)(pages|app)\//i.test(rel))
+        return 'page';
+    // An `index.*` that only re-exports is a barrel, not a screen.
+    if (/(^|\/)(page|index)\.[jt]sx?$/i.test(rel)) {
+        return /(^|\/)index\.[jt]sx?$/i.test(rel) && isBarrel(text) ? 'component' : 'page';
+    }
     return 'component';
 }
 /**
  * Pure core. Takes (relative path, text) pairs so every branch is testable
  * without a tree on disk — the same reason `ui_authority` takes a record.
  */
+/**
+ * The directories shadcn's own `components.json` declares as its UI root, as
+ * repo-relative prefixes with a trailing slash. Empty when the file is absent,
+ * unparseable, or declares no `aliases.ui`.
+ *
+ * `aliases.ui` is written as a path alias (`@/components/ui`, `~/lib/ui`, or a
+ * bare `src/ui`). The leading alias token is stripped rather than resolved: this
+ * is a marker detector, not a module resolver, and resolving `@` would mean
+ * reading `tsconfig.json` paths for a signal that only has to be right about
+ * WHICH DIRECTORY, never about which module.
+ */
+export function shadcnUiDirs(files) {
+    const out = [];
+    for (const [rel, text] of files) {
+        if (path.basename(rel) !== 'components.json')
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            continue;
+        }
+        if (typeof parsed !== 'object' || parsed === null)
+            continue;
+        const aliases = parsed['aliases'];
+        if (typeof aliases !== 'object' || aliases === null)
+            continue;
+        const ui = aliases['ui'];
+        if (typeof ui !== 'string' || ui.trim() === '')
+            continue;
+        const stripped = ui.trim().replace(/^[@~]\//, '').replace(/^\.\//, '').replace(/\/+$/, '');
+        if (stripped !== '')
+            out.push(`${stripped}/`);
+    }
+    return [...new Set(out)];
+}
 export function buildArtefact(root, files, now = new Date().toISOString()) {
     const uiFiles = files.filter(([rel]) => isUiPath(rel) || isUiTreePath(rel));
     const components = [];
@@ -97,7 +206,17 @@ export function buildArtefact(root, files, now = new Date().toISOString()) {
     const primitives = new Set();
     const markers = [];
     const families = new Set();
+    // Declared shadcn UI roots win over the hardcoded `components/ui/` pattern.
+    // A project whose `aliases.ui` points elsewhere used to report NO design
+    // system, which is the opposite of the truth.
+    const declaredUiDirs = shadcnUiDirs(files);
     for (const [rel] of files) {
+        if (declaredUiDirs.length > 0 &&
+            /\.tsx?$/i.test(rel) &&
+            declaredUiDirs.some((d) => rel.startsWith(d)) &&
+            !markers.some((m) => m.marker === 'shadcn')) {
+            markers.push({ marker: 'shadcn', path: rel });
+        }
         for (const [re, marker] of SYSTEM_MARKERS) {
             if (re.test(rel) && !markers.some((m) => m.marker === marker))
                 markers.push({ marker, path: rel });
@@ -116,7 +235,7 @@ export function buildArtefact(root, files, now = new Date().toISOString()) {
             exports.push(m[1]);
             primitives.add(m[1]);
         }
-        components.push({ path: rel, kind: classify(rel), exports });
+        components.push({ path: rel, kind: classify(rel, text), exports });
     }
     // Greenfield is the ABSENCE of a UI surface, not the absence of a
     // DESIGN.md. A1.3 depends on this distinction: a coherent incumbent with no

package/dist/cli/registry.js

@@ -65,6 +65,8 @@ export const REGISTRY = [
     { name: 'roadmap:progress', disposition: 'delegate', synopsis: 'Regenerate agents/roadmaps-progress.md from open roadmaps; archives completed ones (--no-archive to skip).' },
     { name: 'roadmap:progress-check', disposition: 'delegate', synopsis: 'Fail if agents/roadmaps-progress.md is stale (for CI).' },
     { name: 'roadmap:archive', disposition: 'delegate', synopsis: 'Archive completed roadmaps (PR-gate sweep).' },
+    { name: 'roadmap:set-step', disposition: 'delegate', synopsis: 'The single sanctioned writer of a checkbox glyph: advisory lock, line-anchored edit, live step-count invariant, post-write survival check.' },
+    { name: 'stubs:due', disposition: 'delegate', synopsis: 'Read-only: roadmap stubs past their review_by: date, plus the decisions routed to the owner. Writes nothing; --json, --counts, --today <ISO>.' },
     { name: 'gates', disposition: 'delegate', synopsis: 'Open decisions that need you, as actions — owner-filtered roadmap blockers; --all, --json, --reply, --pending (staged requires_confirmation actions).' },
     { name: 'capabilities:index', disposition: 'delegate', synopsis: 'Regenerate CAPABILITIES.yaml (the package coverage index); --check for CI.' },
     { name: 'adr:effective', disposition: 'delegate', synopsis: "Effective state of one ADR: status, Decision verbatim, clauses its own amendments superseded, active amendments, axes, trigger state. Authorizes nothing." },

package/dist/cli-delegate/{chunk-HYWSRNUX.js → chunk-2DK2VJWG.js}

@@ -1,11 +1,11 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
-import {
-  detectToolPresence
-} from "./chunk-OMIVVCG2.js";
 import {
   buildInstallPlan,
   sha256File
 } from "./chunk-523HCFYO.js";
+import {
+  detectToolPresence
+} from "./chunk-A4QJ6ENT.js";
 
 // src/install/preflight.ts
 import { accessSync, constants, existsSync as existsSync2, statSync } from "node:fs";

package/dist/cli-delegate/{chunk-JCW7ZLHK.js → chunk-4FS4WRXP.js}

@@ -4525,6 +4525,11 @@ var settingsSchema = external_exports.object({
         "PostToolUse prompt-injection scanner (road-to-security-pillar.md P3.2). Default off. When on, scans tool output (file reads, web fetches, MCP responses) for injection signatures and WARNS in context (never blocks). Runtime backstop on top of the always-on untrusted-input-defense rule; detection is probabilistic."
       )
     }).default({}),
+    runtime_journal: external_exports.object({
+      enabled: external_exports.boolean().default(false).describe(
+        "Runtime event journal (road-to-runtime-event-journal Phase 1). Default off. When on, one durable, episode-keyed record per dispatched hook event is appended to <git-common-dir>/agent-journal/journal.sqlite \u2014 a Class-A write that opens, writes and exits. It emits nothing to the model, never warns and never blocks: a locked database, a missing node:sqlite, a malformed envelope or a full disk all degrade to silence. Off rather than on because it CREATES a storage surface (a SQLite database under your .git/) rather than appending to a directory that already exists. The record type has no field able to hold free-form content \u2014 ids, an event name, a bounded capability identifier, repo-relative locators and two 12-hex digests; no prompt, no file body, no absolute path. Retention: a 30-day TTL anchored on episode close, plus explicit, time-bounded, human-only holds that themselves expire."
+      )
+    }).default({}),
     rtk_wrap: external_exports.object({
       enabled: external_exports.boolean().default(false).describe(
         'PreToolUse RTK-wrap nudge (token-saving Phase 3). Default off. When on AND the binary on PATH is verified as Rust Token Killer (a live two-stage identity probe \u2014 not a self-reported flag, and never a colliding same-name binary), warns (never blocks) "re-run wrapped with rtk" before a single verbose CLI command (git/npm/cargo/docker/\u2026) \u2014 upstream reports 60\u201390% output-token savings (their estimate). Skips completeness-critical / piped / compound commands and git diff. No-op when rtk is absent, unverified, or a different tool.'

package/dist/cli-delegate/{chunk-OMIVVCG2.js → chunk-A4QJ6ENT.js}

@@ -3,6 +3,28 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 // src/install/detect.ts
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { join, resolve } from "node:path";
+var SCOPE_DETECT_MANIFESTS = [
+  "package.json",
+  "composer.json",
+  "pyproject.toml",
+  "Cargo.toml",
+  "go.mod",
+  "Gemfile"
+];
+var SCOPE_DETECT_AI_DIRS = [
+  ".claude",
+  ".cursor",
+  ".windsurf",
+  ".augment",
+  ".clinerules",
+  ".copilot",
+  ".gemini",
+  ".codex",
+  ".aider",
+  ".continue",
+  ".roo",
+  ".kilocode"
+];
 function detectToolPresence(root) {
   return {
     augment: isDir(join(root, ".augment")),
@@ -22,5 +44,7 @@ function isDir(path) {
 }
 
 export {
+  SCOPE_DETECT_MANIFESTS,
+  SCOPE_DETECT_AI_DIRS,
   detectToolPresence
 };