@event4u/agent-config 14.15.0 → 14.17.0

package/dist/hooks/dispatch.js

@@ -25896,20 +25896,22 @@ var PHRASES = [
   // "never auto-merge" each returned ["pr-merge"] — a prompt saying DO NOT
   // MERGE authorized a merge. The noun-sense lookahead was never a negator.
   //
-  // The lookBEHIND is line-scoped by `[^.!?\n]` on purpose, the same scoping
-  // `turn_end_gate_hook.ts` uses for its own negation exclusion (`:330`) and
-  // its negated-claim window (`:490-493`). A sentence boundary ends a
-  // negation's reach: "Do not push. Merge PR #12." is two instructions, and a
-  // guard that let the first suppress the second would silently stop
-  // authorizing merges the user DID order — the failure mode that is worse
-  // than the defect, because nothing happens and nothing says why.
-  //
-  // Reusing that vocabulary rather than inventing a third is deliberate: two
+  // The inline negative lookBEHIND that used to live in this pattern was
+  // REMOVED on 2026-09-03, and its own comment is why. It warned that "two
   // negation vocabularies in one tree drift, and the drift is invisible until
-  // a prompt lands in the gap between them.
+  // a prompt lands in the gap between them" — and by then they had drifted:
+  // `negatedBefore` became clause-scanned in both directions while this
+  // lookbehind stayed a blind 30-character window with no forward half. The
+  // prompt that landed in the gap is `"nicht pushen, aber mergen"`, which the
+  // lookbehind refused (13 characters, inside its window, across a contrast
+  // cue it could not see) while the clause scan correctly authorizes it.
+  //
+  // Every phrase match already passes through `negatedBefore` at the call
+  // site, so the guard is not weakened by the removal — it is applied once,
+  // by the one vocabulary this file's comment asked for.
   {
     op: "pr-merge",
-    re: /(?<!\b(nicht|nichts|kein(e|en|em|er|es)?|niemals|nie|no|not|dont|don't|never|without|ohne)\b[^.!?\n]{0,30})\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i
+    re: /\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i
   },
   // A tag is an ACTION here — bare "Tag" is the German word for day, and
   // "Version" is an ordinary noun. Both authorized a BLOCK op before this.
@@ -26031,13 +26033,16 @@ function isInterrogative(prose) {
   if (!t) {
     return false;
   }
-  const hasImperative = /\b(mach|mache|bitte|leg|lege|erstell|erstelle|f(ü|ue)hr|f(ü|ue)hre|setz|setze|starte|los|jetzt|go ahead|do it|ja[,.]?\s|ok[,.]?\s)\b/i.test(
+  if (/\?\s*$/.test(t)) {
+    return true;
+  }
+  const hasImperative = /\b(mach|mache|bitte|leg|lege|erstell|erstelle|f(ü|ue)hr|f(ü|ue)hre|setz|setze|starte|los|jetzt|now|asap|go ahead|do it|ja[,.]?\s|ok[,.]?\s)\b/i.test(
     t
   );
   if (hasImperative) {
     return false;
   }
-  return /\?\s*$/.test(t) || /^(was|wie|warum|wieso|weshalb|wann|wer|welche[rs]?|wo|ist|sind|kann|kannst|k(ö|oe)nnen|soll|sollen|darf|d(ü|ue)rfen|why|what|how|when|which|who|is|are|can|could|should|does|do)\b/i.test(
+  return /^(was|wie|warum|wieso|weshalb|wann|wer|welche[rs]?|wo|ist|sind|kann|kannst|k(ö|oe)nnen|soll|sollen|darf|d(ü|ue)rfen|why|what|how|when|which|who|is|are|can|could|should|does|do)\b/i.test(
     t
   );
 }
@@ -26084,13 +26089,18 @@ function splitFences(prompt) {
 function _commandLines(fence) {
   return fence.split("\n").map((l) => l.trim()).filter((l) => l.length > 0).filter((l) => !/^(remote:|error:|hint:|fatal:|warning:|To |!\s|\s*\^)/i.test(l)).map((l) => l.replace(/^[$>#]\s*/, "")).filter((l) => /^(git|gh|npm|pnpm|yarn|task)\b/.test(l));
 }
+function _errText(err) {
+  const t = err instanceof Error ? err.message : String(err);
+  return t.replace(/\s+/g, " ").trim().slice(0, 200);
+}
+var PR_NUMBER_MAX = 2147483647;
 function extractMergeTargets(prompt) {
   const out = /* @__PURE__ */ new Set();
-  const re = /(?:#|\bpr[- ]?|\bpull[- ]request\s+#?)(\d{1,7})\b/giu;
+  const re = /(?:#|\bpr[- ]?|\bpull[- ]request\s+#?)(\d{1,10})\b/giu;
   let m;
   while ((m = re.exec(prompt)) !== null) {
     const n = Number.parseInt(m[1], 10);
-    if (Number.isSafeInteger(n) && n > 0) {
+    if (Number.isSafeInteger(n) && n > 0 && n <= PR_NUMBER_MAX) {
       out.add(n);
     }
   }
@@ -26134,27 +26144,109 @@ function foldGrants(prior, prompt, authorized, session_id, now) {
   ];
 }
 var NEGATION_WORD = /\b(nicht|nichts|kein(e|en|em|er|es)?|niemals|nie|no|not|dont|don't|never|without|ohne)\b/i;
-function negatedBefore(text, index, matched = "") {
+var CONTRAST_CUE = /\b(aber|sondern|jedoch|but|however|instead)\b/gi;
+var ABBREVIATION_BEFORE_DOT = /(?:^|[\s("'\u2018\u201c])(?:[a-z]|z\.b|bzw|ca|usw|d\.h|u\.a|evtl|ggf|inkl|max|min|nr|abb|e\.g|i\.e|etc|vs|approx|fig|no|st|dr|prof)\.$/i;
+function isSentenceBoundary(text, at) {
+  const mark = text[at];
+  if (mark !== ".") {
+    return true;
+  }
+  if (/\d/.test(text[at - 1] ?? "") && /\d/.test(text[at + 1] ?? "")) {
+    return false;
+  }
+  return !ABBREVIATION_BEFORE_DOT.test(text.slice(0, at + 1));
+}
+function sentenceBounds(text, index) {
   let start = 0;
-  for (const mark of [".", "!", "?", "\n"]) {
-    const at = text.lastIndexOf(mark, index - 1);
-    if (at + 1 > start) {
-      start = at + 1;
+  for (let i = index - 1; i >= 0; i -= 1) {
+    const c = text[i];
+    if ((c === "." || c === "!" || c === "?" || c === "\n") && isSentenceBoundary(text, i)) {
+      start = i + 1;
+      break;
+    }
+  }
+  let end = text.length;
+  for (let i = index; i < text.length; i += 1) {
+    const c = text[i];
+    if ((c === "." || c === "!" || c === "?" || c === "\n") && isSentenceBoundary(text, i)) {
+      end = i;
+      break;
     }
   }
-  const before = text.slice(Math.max(start, index - 30), index);
-  return NEGATION_WORD.test(before) || NEGATION_WORD.test(matched);
+  return { start, end };
+}
+function _sentences(text) {
+  const out = [];
+  let from = 0;
+  for (let i = 0; i < text.length; i += 1) {
+    const c = text[i];
+    if ((c === "." || c === "!" || c === "?" || c === "\n") && isSentenceBoundary(text, i)) {
+      out.push(text.slice(from, i + 1));
+      from = i + 1;
+    }
+  }
+  if (from < text.length) {
+    out.push(text.slice(from));
+  }
+  return out.filter((t) => t.trim() !== "");
+}
+function clauseStart(text, from, to) {
+  let start = from;
+  const seg = text.slice(from, to);
+  for (let i = seg.length - 1; i >= 0; i -= 1) {
+    const c = seg[i];
+    if (c === "," || c === ";" || c === ":") {
+      start = from + i + 1;
+      break;
+    }
+  }
+  CONTRAST_CUE.lastIndex = 0;
+  let m;
+  while ((m = CONTRAST_CUE.exec(seg)) !== null) {
+    const after = from + m.index + m[0].length;
+    if (after > start) {
+      start = after;
+    }
+  }
+  return start;
+}
+function clauseEnd(text, from, to) {
+  const seg = text.slice(from, to);
+  let end = to;
+  const punct = seg.search(/[,;:]/);
+  if (punct !== -1) {
+    end = from + punct;
+  }
+  CONTRAST_CUE.lastIndex = 0;
+  const m = CONTRAST_CUE.exec(seg);
+  if (m !== null && from + m.index < end) {
+    end = from + m.index;
+  }
+  return end;
+}
+function negatedBefore(text, index, matched = "") {
+  const { start, end } = sentenceBounds(text, index);
+  const before = text.slice(clauseStart(text, start, index), index);
+  const afterFrom = index + matched.length;
+  const after = afterFrom < end ? text.slice(afterFrom, clauseEnd(text, afterFrom, end)) : "";
+  return NEGATION_WORD.test(before) || NEGATION_WORD.test(matched) || NEGATION_WORD.test(after);
 }
 function classifyAuthorization(prompt) {
   const { prose, fences } = splitFences(prompt);
   const authorized = /* @__PURE__ */ new Set();
   const evidence = {};
   const instruction = prose.split("\n").filter((l) => !OUTPUT_LINE.test(l)).join("\n");
-  for (const { op, re } of isInterrogative(instruction) ? [] : PHRASES) {
-    const m = re.exec(instruction);
-    if (m && !negatedBefore(instruction, m.index, m[0])) {
-      authorized.add(op);
-      evidence[op] = `prose: "${m[0]}"`;
+  for (const { op, re } of PHRASES) {
+    for (const sentence of _sentences(instruction)) {
+      if (isInterrogative(sentence)) {
+        continue;
+      }
+      const m = re.exec(sentence);
+      if (m && !negatedBefore(sentence, m.index, m[0])) {
+        authorized.add(op);
+        evidence[op] = `prose: "${m[0]}"`;
+        break;
+      }
     }
   }
   for (const fence of fences) {
@@ -26232,7 +26324,11 @@ function consumeGrantTarget(consumer_root, session_id, target) {
   if (touched) {
     try {
       atomic_write_json(file, decoded);
-    } catch {
+    } catch (err) {
+      process.stderr.write(
+        `git-authorization: grant-consumption write failed (${_errText(err)}) \u2014 the target stays UNSPENT, so one further merge of a PR the user named will still be authorized. Authorization outcome unchanged.
+`
+      );
     }
   }
 }
@@ -26325,7 +26421,11 @@ function run10(stdin_text, options) {
   };
   try {
     atomic_write_json(path55.join(options.consumer_root, ledgerFileFor(session)), ledger);
-  } catch {
+  } catch (err) {
+    process.stderr.write(
+      `git-authorization: session-ledger write failed (${_errText(err)}) \u2014 the gate degrades to "no ledger" for this session, which denies the irreversible subset and warns on the rest. Authorization outcome unchanged.
+`
+    );
   }
   return EXIT_ALLOW10;
 }
@@ -26389,6 +26489,24 @@ var DESTRUCTIVE_MARKERS = [
   { label: "a route or endpoint was removed", re: /^-.*\b(Route::(get|post|put|patch|delete)|@(Get|Post|Put|Patch|Delete)Mapping|app\.(get|post|put|patch|delete)\s*\()/m },
   { label: "a whole file was deleted", re: /^deleted file mode /m }
 ];
+var SCHEMA_REMOVAL_BODY = /\b(dropColumn|dropTable|dropIfExists|removeColumn|drop_column|drop_table|DROP\s+(TABLE|COLUMN|INDEX|CONSTRAINT)|TRUNCATE\s+TABLE)\b/i;
+var RENAME_METADATA = /^rename (?:from|to) /m;
+function fileBlocks(patch) {
+  return patch.split(/^(?=diff --git )/m).filter((b) => b.startsWith("diff --git "));
+}
+function renamedSchemaRemoval(patch) {
+  for (const block of fileBlocks(patch)) {
+    if (!RENAME_METADATA.test(block)) {
+      continue;
+    }
+    for (const line of block.split("\n")) {
+      if (line.startsWith("-") && !line.startsWith("---") && SCHEMA_REMOVAL_BODY.test(line)) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
 var MAJOR_BUMP = /^-\s*"version"\s*:\s*"(\d+)\.[^"]*"[\s\S]{0,200}?^\+\s*"version"\s*:\s*"(\d+)\./m;
 function classifyDiff(patch) {
   if (patch.trim() === "") {
@@ -26400,6 +26518,9 @@ function classifyDiff(patch) {
       markers.push(label);
     }
   }
+  if (renamedSchemaRemoval(patch)) {
+    markers.push("a renamed file drops a column or table");
+  }
   const bump = MAJOR_BUMP.exec(patch);
   if (bump && bump[1] !== bump[2]) {
     markers.push(`major version bump ${bump[1]}.x to ${bump[2]}.x`);
@@ -26821,12 +26942,16 @@ function commandOp(command) {
   return found;
 }
 function mergeTargetOf(command) {
-  const gh = /\bgh\s+pr\s+merge\s+(?:-{1,2}\S+\s+)*?(\d{1,7})\b/i.exec(command);
+  const gh = /\bgh\s+pr\s+merge\s+(?:-{1,2}\S+\s+)*?(\d{1,10})\b/i.exec(command);
   if (gh) {
-    return Number.parseInt(gh[1], 10);
+    return _boundedTarget(gh[1]);
   }
-  const api = /\/pulls\/(\d{1,7})\/merge\b/i.exec(command);
-  return api ? Number.parseInt(api[1], 10) : null;
+  const api = /\/pulls\/(\d{1,10})\/merge\b/i.exec(command);
+  return api ? _boundedTarget(api[1]) : null;
+}
+function _boundedTarget(digits) {
+  const n = Number.parseInt(digits, 10);
+  return Number.isSafeInteger(n) && n > 0 && n <= PR_NUMBER_MAX ? n : null;
 }
 function grantCovers(grants, op, target) {
   if (op !== "pr-merge" || target === null) {
@@ -28740,14 +28865,17 @@ var SLOP_RULES = [
     catalogId: "V1",
     severity: "P1",
     engines: ["css"],
-    description: "Colored side-stripe border (border-left/right > 1px) \u2014 the #1 AI-UI signature",
-    message: "Side-stripe accent border reads as scaffold-default. Remove it, or declare an intentional stripe in DESIGN.md (V1).",
-    gated: (ctx) => ctx.has("side stripe", "side-stripe", "stripe accent", "accent border"),
-    detect: ({ content }) => cssBlocks(content).filter((b) => !/blockquote|\bquote\b|<q>/i.test(b.selector)).filter(
-      (b) => /border-(?:left|right)\s*:\s*(?:[2-9]|\d{2,})px\s+\w+\s+(?:#|rgb|hsl|oklch|var\(|[a-z])/i.test(
-        b.body
-      )
-    ).map((b) => ({ line: b.line, snippet: b.selector.slice(0, 80) }))
+    description: "Colored accent border > 1px \u2014 a side stripe, a four-sided colored border, or a gradient border-image (V1)",
+    message: "Colored accent border reads as scaffold-default. Remove it, or declare an intentional accent border in DESIGN.md (V1).",
+    gated: (ctx) => ctx.has("side stripe", "side-stripe", "stripe accent", "accent border", "card border"),
+    detect: ({ content }) => cssBlocks(content).filter((b) => !/blockquote|\bquote\b|<q>/i.test(b.selector)).filter((b) => {
+      const COLOR = "(?!transparent|currentcolor|inherit|initial|unset)(?:#|rgb|hsl|oklch|var\\(|[a-z])";
+      const WIDTH = "(?:[2-9]|\\d{2,})px";
+      const stripe = new RegExp(`border-(?:left|right)\\s*:\\s*${WIDTH}\\s+\\w+\\s+${COLOR}`, "i");
+      const foursided = new RegExp(`border\\s*:\\s*${WIDTH}\\s+\\w+\\s+${COLOR}`, "i");
+      const gradient = /border-image\s*:[^;]*(?:linear|conic|radial)-gradient/i;
+      return stripe.test(b.body) || foursided.test(b.body) || gradient.test(b.body);
+    }).map((b) => ({ line: b.line, snippet: b.selector.slice(0, 80) }))
   },
   {
     id: "slop-v3-ghost-card",

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 623,
+    "artefact_count": 624,
     "scanner_version": "de0a22b4ac4c"
   },
-  "generated_at": "2026-09-03",
+  "generated_at": "2026-09-05",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the counts in these badges.",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "14.15.0"
+    "version": "14.17.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "14.15.0"
+      "version": "14.17.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "14.15.0"
+  "version": "14.17.0"
 }

package/dist/mcp/server.mjs

@@ -37256,13 +37256,16 @@ function isInterrogative(prose) {
   if (!t) {
     return false;
   }
-  const hasImperative = /\b(mach|mache|bitte|leg|lege|erstell|erstelle|f(ü|ue)hr|f(ü|ue)hre|setz|setze|starte|los|jetzt|go ahead|do it|ja[,.]?\s|ok[,.]?\s)\b/i.test(
+  if (/\?\s*$/.test(t)) {
+    return true;
+  }
+  const hasImperative = /\b(mach|mache|bitte|leg|lege|erstell|erstelle|f(ü|ue)hr|f(ü|ue)hre|setz|setze|starte|los|jetzt|now|asap|go ahead|do it|ja[,.]?\s|ok[,.]?\s)\b/i.test(
     t
   );
   if (hasImperative) {
     return false;
   }
-  return /\?\s*$/.test(t) || /^(was|wie|warum|wieso|weshalb|wann|wer|welche[rs]?|wo|ist|sind|kann|kannst|k(ö|oe)nnen|soll|sollen|darf|d(ü|ue)rfen|why|what|how|when|which|who|is|are|can|could|should|does|do)\b/i.test(
+  return /^(was|wie|warum|wieso|weshalb|wann|wer|welche[rs]?|wo|ist|sind|kann|kannst|k(ö|oe)nnen|soll|sollen|darf|d(ü|ue)rfen|why|what|how|when|which|who|is|are|can|could|should|does|do)\b/i.test(
     t
   );
 }
@@ -37289,13 +37292,17 @@ function splitFences(prompt) {
 function _commandLines(fence) {
   return fence.split("\n").map((l) => l.trim()).filter((l) => l.length > 0).filter((l) => !/^(remote:|error:|hint:|fatal:|warning:|To |!\s|\s*\^)/i.test(l)).map((l) => l.replace(/^[$>#]\s*/, "")).filter((l) => /^(git|gh|npm|pnpm|yarn|task)\b/.test(l));
 }
+function _errText(err) {
+  const t = err instanceof Error ? err.message : String(err);
+  return t.replace(/\s+/g, " ").trim().slice(0, 200);
+}
 function extractMergeTargets(prompt) {
   const out = /* @__PURE__ */ new Set();
-  const re = /(?:#|\bpr[- ]?|\bpull[- ]request\s+#?)(\d{1,7})\b/giu;
+  const re = /(?:#|\bpr[- ]?|\bpull[- ]request\s+#?)(\d{1,10})\b/giu;
   let m;
   while ((m = re.exec(prompt)) !== null) {
     const n = Number.parseInt(m[1], 10);
-    if (Number.isSafeInteger(n) && n > 0) {
+    if (Number.isSafeInteger(n) && n > 0 && n <= PR_NUMBER_MAX) {
       out.add(n);
     }
   }
@@ -37337,27 +37344,107 @@ function foldGrants(prior, prompt, authorized, session_id, now) {
     }
   ];
 }
-function negatedBefore(text, index, matched = "") {
+function isSentenceBoundary(text, at) {
+  const mark = text[at];
+  if (mark !== ".") {
+    return true;
+  }
+  if (/\d/.test(text[at - 1] ?? "") && /\d/.test(text[at + 1] ?? "")) {
+    return false;
+  }
+  return !ABBREVIATION_BEFORE_DOT.test(text.slice(0, at + 1));
+}
+function sentenceBounds(text, index) {
   let start = 0;
-  for (const mark of [".", "!", "?", "\n"]) {
-    const at = text.lastIndexOf(mark, index - 1);
-    if (at + 1 > start) {
-      start = at + 1;
+  for (let i = index - 1; i >= 0; i -= 1) {
+    const c = text[i];
+    if ((c === "." || c === "!" || c === "?" || c === "\n") && isSentenceBoundary(text, i)) {
+      start = i + 1;
+      break;
+    }
+  }
+  let end = text.length;
+  for (let i = index; i < text.length; i += 1) {
+    const c = text[i];
+    if ((c === "." || c === "!" || c === "?" || c === "\n") && isSentenceBoundary(text, i)) {
+      end = i;
+      break;
+    }
+  }
+  return { start, end };
+}
+function _sentences(text) {
+  const out = [];
+  let from = 0;
+  for (let i = 0; i < text.length; i += 1) {
+    const c = text[i];
+    if ((c === "." || c === "!" || c === "?" || c === "\n") && isSentenceBoundary(text, i)) {
+      out.push(text.slice(from, i + 1));
+      from = i + 1;
+    }
+  }
+  if (from < text.length) {
+    out.push(text.slice(from));
+  }
+  return out.filter((t) => t.trim() !== "");
+}
+function clauseStart(text, from, to) {
+  let start = from;
+  const seg = text.slice(from, to);
+  for (let i = seg.length - 1; i >= 0; i -= 1) {
+    const c = seg[i];
+    if (c === "," || c === ";" || c === ":") {
+      start = from + i + 1;
+      break;
     }
   }
-  const before = text.slice(Math.max(start, index - 30), index);
-  return NEGATION_WORD.test(before) || NEGATION_WORD.test(matched);
+  CONTRAST_CUE.lastIndex = 0;
+  let m;
+  while ((m = CONTRAST_CUE.exec(seg)) !== null) {
+    const after = from + m.index + m[0].length;
+    if (after > start) {
+      start = after;
+    }
+  }
+  return start;
+}
+function clauseEnd(text, from, to) {
+  const seg = text.slice(from, to);
+  let end = to;
+  const punct = seg.search(/[,;:]/);
+  if (punct !== -1) {
+    end = from + punct;
+  }
+  CONTRAST_CUE.lastIndex = 0;
+  const m = CONTRAST_CUE.exec(seg);
+  if (m !== null && from + m.index < end) {
+    end = from + m.index;
+  }
+  return end;
+}
+function negatedBefore(text, index, matched = "") {
+  const { start, end } = sentenceBounds(text, index);
+  const before = text.slice(clauseStart(text, start, index), index);
+  const afterFrom = index + matched.length;
+  const after = afterFrom < end ? text.slice(afterFrom, clauseEnd(text, afterFrom, end)) : "";
+  return NEGATION_WORD.test(before) || NEGATION_WORD.test(matched) || NEGATION_WORD.test(after);
 }
 function classifyAuthorization(prompt) {
   const { prose, fences } = splitFences(prompt);
   const authorized = /* @__PURE__ */ new Set();
   const evidence = {};
   const instruction = prose.split("\n").filter((l) => !OUTPUT_LINE.test(l)).join("\n");
-  for (const { op, re } of isInterrogative(instruction) ? [] : PHRASES) {
-    const m = re.exec(instruction);
-    if (m && !negatedBefore(instruction, m.index, m[0])) {
-      authorized.add(op);
-      evidence[op] = `prose: "${m[0]}"`;
+  for (const { op, re } of PHRASES) {
+    for (const sentence of _sentences(instruction)) {
+      if (isInterrogative(sentence)) {
+        continue;
+      }
+      const m = re.exec(sentence);
+      if (m && !negatedBefore(sentence, m.index, m[0])) {
+        authorized.add(op);
+        evidence[op] = `prose: "${m[0]}"`;
+        break;
+      }
     }
   }
   for (const fence of fences) {
@@ -37435,7 +37522,11 @@ function consumeGrantTarget(consumer_root, session_id, target) {
   if (touched) {
     try {
       atomic_write_json(file, decoded);
-    } catch {
+    } catch (err) {
+      process.stderr.write(
+        `git-authorization: grant-consumption write failed (${_errText(err)}) \u2014 the target stays UNSPENT, so one further merge of a PR the user named will still be authorized. Authorization outcome unchanged.
+`
+      );
     }
   }
 }
@@ -37528,7 +37619,11 @@ function run2(stdin_text, options) {
   };
   try {
     atomic_write_json(path66.join(options.consumer_root, ledgerFileFor(session)), ledger);
-  } catch {
+  } catch (err) {
+    process.stderr.write(
+      `git-authorization: session-ledger write failed (${_errText(err)}) \u2014 the gate degrades to "no ledger" for this session, which denies the irreversible subset and warns on the rest. Authorization outcome unchanged.
+`
+    );
   }
   return EXIT_ALLOW2;
 }
@@ -37565,7 +37660,7 @@ function _isCliEntry19() {
     return false;
   }
 }
-var EXIT_ALLOW2, STATE_FILE2, STATE_DIR2, PENDING_DIR, PENDING_FILE, PENDING_MAX_AGE_MS, ALL_OPS, PHRASES, OUTPUT_LINE, PASTED_COMMANDS, REVOKE_RE, NEGATION_WORD;
+var EXIT_ALLOW2, STATE_FILE2, STATE_DIR2, PENDING_DIR, PENDING_FILE, PENDING_MAX_AGE_MS, ALL_OPS, PHRASES, OUTPUT_LINE, PASTED_COMMANDS, PR_NUMBER_MAX, REVOKE_RE, NEGATION_WORD, CONTRAST_CUE, ABBREVIATION_BEFORE_DOT;
 var init_git_authorization_hook = __esm({
   "src/scripts/git_authorization_hook.ts"() {
     "use strict";
@@ -37634,20 +37729,22 @@ var init_git_authorization_hook = __esm({
       // "never auto-merge" each returned ["pr-merge"] — a prompt saying DO NOT
       // MERGE authorized a merge. The noun-sense lookahead was never a negator.
       //
-      // The lookBEHIND is line-scoped by `[^.!?\n]` on purpose, the same scoping
-      // `turn_end_gate_hook.ts` uses for its own negation exclusion (`:330`) and
-      // its negated-claim window (`:490-493`). A sentence boundary ends a
-      // negation's reach: "Do not push. Merge PR #12." is two instructions, and a
-      // guard that let the first suppress the second would silently stop
-      // authorizing merges the user DID order — the failure mode that is worse
-      // than the defect, because nothing happens and nothing says why.
-      //
-      // Reusing that vocabulary rather than inventing a third is deliberate: two
+      // The inline negative lookBEHIND that used to live in this pattern was
+      // REMOVED on 2026-09-03, and its own comment is why. It warned that "two
       // negation vocabularies in one tree drift, and the drift is invisible until
-      // a prompt lands in the gap between them.
+      // a prompt lands in the gap between them" — and by then they had drifted:
+      // `negatedBefore` became clause-scanned in both directions while this
+      // lookbehind stayed a blind 30-character window with no forward half. The
+      // prompt that landed in the gap is `"nicht pushen, aber mergen"`, which the
+      // lookbehind refused (13 characters, inside its window, across a contrast
+      // cue it could not see) while the clause scan correctly authorizes it.
+      //
+      // Every phrase match already passes through `negatedBefore` at the call
+      // site, so the guard is not weakened by the removal — it is applied once,
+      // by the one vocabulary this file's comment asked for.
       {
         op: "pr-merge",
-        re: /(?<!\b(nicht|nichts|kein(e|en|em|er|es)?|niemals|nie|no|not|dont|don't|never|without|ohne)\b[^.!?\n]{0,30})\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i
+        re: /\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i
       },
       // A tag is an ACTION here — bare "Tag" is the German word for day, and
       // "Version" is an ordinary noun. Both authorized a BLOCK op before this.
@@ -37784,8 +37881,11 @@ var init_git_authorization_hook = __esm({
       { op: "commit", re: /\bgit\s+commit\b/i },
       { op: "branch", re: /\bgit\s+(checkout\s+-b|switch\s+-c|branch)\b/i }
     ];
+    PR_NUMBER_MAX = 2147483647;
     REVOKE_RE = /\b(stop|stopp|halt|abbrechen|abbruch|cancel|revoke|widerruf(en)?|zur(ü|ue)ck(nehmen|ziehen)|hold\s+(everything|on|the\s+merge)|warte|wait)\b|(?:\b(nicht|kein(e|en)?|no|not|dont|don't|never|niemals|nie)\b[^.!?\n]{0,30}\b(merg(e|en|ing)|zusammenf(ü|ue)hren)\b)/iu;
     NEGATION_WORD = /\b(nicht|nichts|kein(e|en|em|er|es)?|niemals|nie|no|not|dont|don't|never|without|ohne)\b/i;
+    CONTRAST_CUE = /\b(aber|sondern|jedoch|but|however|instead)\b/gi;
+    ABBREVIATION_BEFORE_DOT = /(?:^|[\s("'\u2018\u201c])(?:[a-z]|z\.b|bzw|ca|usw|d\.h|u\.a|evtl|ggf|inkl|max|min|nr|abb|e\.g|i\.e|etc|vs|approx|fig|no|st|dr|prof)\.$/i;
     if (_isCliEntry19()) {
       process.exit(main23());
     }
@@ -37794,6 +37894,22 @@ var init_git_authorization_hook = __esm({
 
 // src/scripts/hooks/merge_impact.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
+function fileBlocks(patch) {
+  return patch.split(/^(?=diff --git )/m).filter((b) => b.startsWith("diff --git "));
+}
+function renamedSchemaRemoval(patch) {
+  for (const block of fileBlocks(patch)) {
+    if (!RENAME_METADATA.test(block)) {
+      continue;
+    }
+    for (const line of block.split("\n")) {
+      if (line.startsWith("-") && !line.startsWith("---") && SCHEMA_REMOVAL_BODY.test(line)) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
 function classifyDiff(patch) {
   if (patch.trim() === "") {
     return { verdict: "undecidable", markers: [], reason: "empty diff" };
@@ -37804,6 +37920,9 @@ function classifyDiff(patch) {
       markers.push(label);
     }
   }
+  if (renamedSchemaRemoval(patch)) {
+    markers.push("a renamed file drops a column or table");
+  }
   const bump = MAJOR_BUMP.exec(patch);
   if (bump && bump[1] !== bump[2]) {
     markers.push(`major version bump ${bump[1]}.x to ${bump[2]}.x`);
@@ -37861,7 +37980,7 @@ function describeImpact(pr, impact) {
       return `Impact scan: could not read the diff for PR #${pr} (${impact.reason ?? "unknown"}), so nothing is known about what it changes. ${say}`;
   }
 }
-var DESTRUCTIVE_MARKERS, MAJOR_BUMP;
+var DESTRUCTIVE_MARKERS, SCHEMA_REMOVAL_BODY, RENAME_METADATA, MAJOR_BUMP;
 var init_merge_impact = __esm({
   "src/scripts/hooks/merge_impact.ts"() {
     "use strict";
@@ -37881,6 +38000,8 @@ var init_merge_impact = __esm({
       { label: "a route or endpoint was removed", re: /^-.*\b(Route::(get|post|put|patch|delete)|@(Get|Post|Put|Patch|Delete)Mapping|app\.(get|post|put|patch|delete)\s*\()/m },
       { label: "a whole file was deleted", re: /^deleted file mode /m }
     ];
+    SCHEMA_REMOVAL_BODY = /\b(dropColumn|dropTable|dropIfExists|removeColumn|drop_column|drop_table|DROP\s+(TABLE|COLUMN|INDEX|CONSTRAINT)|TRUNCATE\s+TABLE)\b/i;
+    RENAME_METADATA = /^rename (?:from|to) /m;
     MAJOR_BUMP = /^-\s*"version"\s*:\s*"(\d+)\.[^"]*"[\s\S]{0,200}?^\+\s*"version"\s*:\s*"(\d+)\./m;
   }
 });
@@ -38076,12 +38197,16 @@ function commandOp(command) {
   return found;
 }
 function mergeTargetOf(command) {
-  const gh = /\bgh\s+pr\s+merge\s+(?:-{1,2}\S+\s+)*?(\d{1,7})\b/i.exec(command);
+  const gh = /\bgh\s+pr\s+merge\s+(?:-{1,2}\S+\s+)*?(\d{1,10})\b/i.exec(command);
   if (gh) {
-    return Number.parseInt(gh[1], 10);
+    return _boundedTarget(gh[1]);
   }
-  const api = /\/pulls\/(\d{1,7})\/merge\b/i.exec(command);
-  return api ? Number.parseInt(api[1], 10) : null;
+  const api = /\/pulls\/(\d{1,10})\/merge\b/i.exec(command);
+  return api ? _boundedTarget(api[1]) : null;
+}
+function _boundedTarget(digits) {
+  const n = Number.parseInt(digits, 10);
+  return Number.isSafeInteger(n) && n > 0 && n <= PR_NUMBER_MAX ? n : null;
 }
 function grantCovers(grants, op, target) {
   if (op !== "pr-merge" || target === null) {