@event4u/agent-config 14.18.0 → 14.19.0

package/dist/cli-delegate/cmd_conformance.js

@@ -16,6 +16,9 @@ import {
 import {
   readHookStdin
 } from "./chunk-F7DQWYR5.js";
+import {
+  reportScanned
+} from "./chunk-I3EIN2YG.js";
 import {
   ArgparseExit,
   STATUS_SYMBOLS,
@@ -33,7 +36,7 @@ import {
   frontmatterPaths,
   proseEqual,
   splitFrontmatter
-} from "./chunk-7RXIKF62.js";
+} from "./chunk-IDHUQIXP.js";
 import "./chunk-FTAISGDQ.js";
 import "./chunk-M2DPGFZ4.js";
 import "./chunk-BTWUYDGN.js";
@@ -739,6 +742,128 @@ function humanTypedThisTurn(prompt) {
   return true;
 }
 
+// src/scripts/_lib/consequence_objects.ts
+var CONSEQUENCE_PHRASES = [
+  {
+    op: "prod-deploy",
+    re: /(?<![A-Za-z0-9_À-ɏ])(deploy(e|en|t|st)?|ausroll(e|en)?|ship(pe|pen)?|live\s*schalt(e|en)?|rollout)\b[^.\n]{0,30}\b(produktion|production|prod|live|prod-umgebung)\b|\b(produktion|production|prod|live)\b[^.\n]{0,30}\b(deploy(e|en)?|ausrollen|ausroll(e|en)?|live\s*schalten|rollout)\b/i
+  },
+  {
+    op: "prod-data-destroy",
+    re: /(?<![A-Za-z0-9_À-ɏ])(l(ö|oe)sch(e|en)?|entfern(e|en)?|leer(e|en)?|verwerf(e|en)?|drop|truncate|delete|wipe|purge|zerst(ö|oe)r(e|en)?)\b[^.\n]{0,40}\b(tabelle|tabellen|datenbank|daten|bucket|collection|zeilen|rows|table|database|dataset)\b|\b(tabelle|tabellen|datenbank|daten|bucket|collection|table|database)\b[^.\n]{0,40}\b(l(ö|oe)schen|leeren|verwerfen|droppen|truncaten|entfernen|drop|truncate|delete|wipe|purge)\b/i
+  },
+  {
+    op: "prod-infra-change",
+    re: /(?<![A-Za-z0-9_À-ɏ])((ver)?(ä|ae)nder(e|n)?|anpass(e|en)?|umbau(e|en)?|apply|destroy|(neu\s*)?provisionier(e|en)?)\b[^.\n]{0,40}\b(infrastruktur|infrastructure|cluster|terraform|iam|dns|netzwerk|network|firewall|policy|policies|security[-\s]group)\b|\b(infrastruktur|infrastructure|cluster|terraform|iam|dns|netzwerk|firewall)\b[^.\n]{0,40}\b((ver)?(ä|ae)ndern|anpassen|umbauen|zerst(ö|oe)ren|apply|destroy)\b/i
+  },
+  {
+    op: "external-send",
+    re: /(?<![A-Za-z0-9_À-ɏ])(schick(e|en)?|verschick(e|en)?|send(e|en|et)?|mail(e|en)?|raussend(e|en)?|versend(e|en)?|post|publish)\b[^.\n]{0,40}\b(mail|mails|email|e-mail|nachricht|nachrichten|newsletter|webhook|kunden|kundin|kunde|empf(ä|ae)nger|customers?|recipients?|message)\b|\b(mail|email|e-mail|nachricht|newsletter|kunden|customers?)\b[^.\n]{0,40}\b(schicken|verschicken|senden|versenden|rausschicken|send|deliver)\b/i
+  },
+  {
+    op: "money-movement",
+    re: /(?<![A-Za-z0-9_À-ɏ])(erstatt(e|en)?|r(ü|ue)ckerstatt(e|en)?|zahl(e|en)?|(ü|ue)berweis(e|en)?|abbuch(e|en)?|belast(e|en)?|refund|charge|payout|transfer|bill)\b[^.\n]{0,40}\b(betrag|geld|rechnung|zahlung|euro|dollar|kunde|kunden|karte|konto|invoice|payment|customer|card|account)\b|\b(betrag|geld|rechnung|zahlung|invoice|payment)\b[^.\n]{0,40}\b(erstatten|zur(ü|ue)ckzahlen|(ü|ue)berweisen|abbuchen|belasten|refund|charge|transfer)\b/i
+  },
+  {
+    op: "trunk-force-push",
+    re: /(?<![A-Za-z0-9_À-ɏ])(force[-\s]?push(e|en|t)?|force[-\s]?pushen|(ü|ue)berschreib(e|en)?)\b[^.\n]{0,40}\b(main|master|trunk|produktions?[-\s]?branch|production|release[-\s]?branch)\b|\b(main|master|trunk|production)\b[^.\n]{0,40}\b(force[-\s]?pushen|force[-\s]?push|(ü|ue)berschreiben)\b/i
+  },
+  {
+    op: "out-of-scope-destruction",
+    re: /(?<![A-Za-z0-9_À-ɏ])(l(ö|oe)sch(e|en)?|entfern(e|en)?|r(ä|ae)um(e|en)?\s*auf|aufr(ä|ae)um(e|en)?|delete|remove|wipe)\b[^.\n]{0,40}\b(au(ß|ss)erhalb|ausserhalb|unabh(ä|ae)ngig|nicht\s+zur\s+aufgabe|outside\s+(the\s+)?(task|scope)|unrelated|everything\s+else|alles\s+andere)\b|\b(au(ß|ss)erhalb|outside\s+(the\s+)?(task|scope)|unrelated)\b[^.\n]{0,40}\b(l(ö|oe)schen|entfernen|aufr(ä|ae)umen|delete|remove|wipe)\b/i
+  }
+];
+var OBJECT_REQUIRED_OPS = /* @__PURE__ */ new Set([
+  "prod-data-destroy",
+  "external-send",
+  "money-movement"
+]);
+var OBJECT_STOP_WORDS = /* @__PURE__ */ new Set([
+  "bitte",
+  "doch",
+  "mal",
+  "nicht",
+  "jetzt",
+  "gleich",
+  "auch",
+  "noch",
+  "wieder",
+  "in",
+  "im",
+  "aus",
+  "von",
+  "vom",
+  ": ",
+  "der",
+  "die",
+  "das",
+  "den",
+  "dem",
+  "und",
+  "oder",
+  "mit",
+  "auf",
+  "zu",
+  "komplett",
+  "ganz",
+  "alle",
+  "allen",
+  "please",
+  "now",
+  "again",
+  "too",
+  "also",
+  "from",
+  "and",
+  "or",
+  "the",
+  "a",
+  "an",
+  "there",
+  "here",
+  "completely",
+  "all",
+  "with",
+  "on",
+  "to",
+  "in"
+]);
+function _normalizeObject(raw) {
+  return raw.trim().replace(/^["'`]+|["'`]+$/g, "").replace(/[.,;:]+$/, "").toLowerCase();
+}
+var OBJECT_PATTERNS = {
+  "prod-data-destroy": [
+    /\b(?:tabelle|table|datenbank|database|schema|collection|index)\s+["'`]?([A-Za-z_][\w.$-]*)/gi,
+    /\bs3:\/\/([\w.-]+)/gi,
+    /\b(?:bucket)\s+["'`]?([A-Za-z_][\w.-]*)/gi
+  ],
+  "external-send": [
+    /([A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,})/g,
+    /\bhttps?:\/\/([^\s/"'`]+)/gi,
+    /\b(?:an\s+(?:die|den|alle)|to\s+(?:the|all))\s+([A-Za-z][\w-]*)/gi
+  ],
+  "money-movement": [
+    /(\d[\d.,]*)\s*(?:€|eur\b|euro\b|\$|usd\b)/gi,
+    /(?:€|\$)\s*(\d[\d.,]*)/g,
+    /\b(?:kunde|kunden|customer|account|konto)\s+["'`]?([A-Za-z0-9][\w.-]*)/gi
+  ]
+};
+function extractObjects(op, text) {
+  const patterns = OBJECT_PATTERNS[op];
+  if (!patterns) return [];
+  const out = [];
+  for (const re of patterns) {
+    const local = new RegExp(re.source, re.flags.includes("g") ? re.flags : `${re.flags}g`);
+    let m;
+    while ((m = local.exec(text)) !== null) {
+      const value = _normalizeObject(m[1] ?? "");
+      if (value && !OBJECT_STOP_WORDS.has(value) && !out.includes(value)) out.push(value);
+      if (m.index === local.lastIndex) local.lastIndex++;
+    }
+  }
+  return out;
+}
+
 // src/scripts/git_authorization_hook.ts
 var EXIT_ALLOW2 = 0;
 var STATE_FILE2 = path2.join("agents", "state", "git-authorization.json");
@@ -790,7 +915,14 @@ var ALL_OPS = [
   "clean",
   "stash-drop",
   "branch-delete",
-  "close"
+  "close",
+  "prod-deploy",
+  "prod-data-destroy",
+  "prod-infra-change",
+  "external-send",
+  "money-movement",
+  "trunk-force-push",
+  "out-of-scope-destruction"
 ];
 var PHRASES = [
   { op: "commit", re: /\b(commit(e|et|te|ten)?|committe|einchecken)\b/i },
@@ -948,7 +1080,8 @@ var PHRASES = [
   {
     op: "pr-merge-auto",
     re: /\bauto[-\s]?merge\b|\bmerge\b[^.\n]{0,20}\bautomatisch\b|\bautomatisch\b[^.\n]{0,20}\bmerg(e|en)\b/i
-  }
+  },
+  ...CONSEQUENCE_PHRASES
 ];
 var OUTPUT_LINE = /^\s*(To\s+\S+|remote:|error:|fatal:|hint:|warning:|!\s|\?\?\s|\s*\^|[-+]{3}\s|@@\s|\$\s|>\s|\d+\s+(pass|fail)|npm ERR!|Error:|Traceback|at\s+\S+:\d+)/i;
 function isInterrogative(prose) {
@@ -1317,6 +1450,11 @@ function run2(stdin_text, options) {
     authorized.push(pending.op);
     evidence[pending.op] = `confirmation of the refused \`${pending.op}\` (refused ${pending.refused_at}): "${prompt.trim().slice(0, 40)}"`;
   }
+  const objects = {};
+  for (const op of authorized) {
+    const named = extractObjects(op, prompt);
+    if (named.length > 0) objects[op] = named;
+  }
   const now = /* @__PURE__ */ new Date();
   const ledger = {
     session_id: typeof envelope["session_id"] === "string" ? envelope["session_id"] : "",
@@ -1324,6 +1462,7 @@ function run2(stdin_text, options) {
     authorized,
     evidence,
     prompt_chars: prompt.length,
+    objects,
     // Grants survive this write; `authorized` does not. That asymmetry IS the
     // decision. A bare operation name stays one-shot exactly as `commit-policy`
     // requires, and only an authorization that also froze its objects earns a
@@ -1415,10 +1554,26 @@ var BLOCK_OPS = /* @__PURE__ */ new Set([
   /** Destroys uncommitted work belonging to a session this one cannot see. */
   "worktree-remove",
   /** `-x` is the flag that takes `.env` and local certificates. */
-  "clean-ignored"
+  "clean-ignored",
+  // ── The consequence vocabulary, added 2026-09-06. Every one is already
+  // never-autonomous in the `non-destructive-by-default` prose.
+  //
+  // MEMBERSHIP HERE IS A COUNTING DECISION, NOT A REFUSAL. The set's name
+  // predates ADR-254, which deleted the reader that blocked: the one consumer
+  // that acts on it now is `conformance_scan`'s after-the-fact tally, so
+  // "blocked" describes what the Hard Floor requires of the model, never what
+  // this package does at tool-call time.
+  "prod-deploy",
+  "prod-data-destroy",
+  "prod-infra-change",
+  "external-send",
+  "money-movement",
+  "trunk-force-push",
+  "out-of-scope-destruction"
 ]);
 var G = "(?:-[A-Za-z-]+(?:=\\S+)?(?:\\s+\\S+)?\\s+)*";
 var P = "^(?:\\S*\\/)?";
+var CONSEQUENCE_TOOL_HEAD = /^(?:\S*\/)?(terraform|pulumi|kubectl|helm|aws|gcloud|az|vercel|netlify|flyctl|fly|wrangler|serverless|sls|eb|heroku|cap|psql|mysql|mariadb|sqlite3|mongosh|mongo|redis-cli|sendmail|msmtp|mail|mailx|curl|stripe|braintree|paypal|rm)\b/i;
 function ghApiWrite(pathRe) {
   return new RegExp(
     `${P}gh\\s+api\\b(?=[^\\n]*${pathRe})(?=[^\\n]*(?:-X|--method)\\s+(?:POST|PATCH|PUT|DELETE)\\b)`,
@@ -1499,6 +1654,13 @@ var COMMAND_OPS = [
   // Above `push`, and both spellings: `--force` and `--force-with-lease`. The
   // "safe force" is in the same class here because what it is safe against is a
   // stale local view, not a collaborator who pushed after your fetch.
+  {
+    op: "trunk-force-push",
+    re: new RegExp(
+      `${P}git\\s+${G}push\\b[^\\n;|&]*(--force\\b|--force-with-lease\\b|\\s-f\\b)[^\\n;|&]*\\b(main|master|trunk|production|prod)\\b`,
+      "i"
+    )
+  },
   {
     op: "force-push",
     re: new RegExp(`${P}git\\s+${G}push\\b[^\\n;|&]*(--force\\b|--force-with-lease\\b|\\s-f\\b)`, "i")
@@ -1527,6 +1689,60 @@ var COMMAND_OPS = [
     )
   },
   { op: "close", re: new RegExp(`${P}gh\\s+(pr|issue)\\s+close\\b`, "i") },
+  // ── Consequence operations, added 2026-09-06
+  // (`road-to-authorization-that-reaches-further` 2.1).
+  //
+  // ORDER: above the generic `push`/`commit` fallbacks, because
+  // `trunk-force-push` is a `git push` and the most specific pattern must win —
+  // the rule this table states at its head.
+  //
+  // These classify commands the count could not see before. They add NOTHING to
+  // any refusal path: `commandOp` and `BLOCK_OPS` have exactly one consumer
+  // that acts on them, the after-the-fact tally in `conformance_scan`, and this
+  // change does not add a second.
+  {
+    op: "prod-data-destroy",
+    re: new RegExp(
+      `${P}(psql|mysql|mariadb|sqlite3|mongosh?)\\b[^\\n]*\\b(drop\\s+(table|database|schema)|truncate|delete\\s+from)\\b|${P}aws\\s+s3\\s+(rm|rb)\\b|${P}aws\\s+(dynamodb|rds)\\s+delete-\\S+|${P}redis-cli\\b[^\\n]*\\bflush(all|db)\\b`,
+      "i"
+    )
+  },
+  {
+    op: "prod-infra-change",
+    re: new RegExp(
+      `${P}terraform\\s+(apply|destroy)\\b|${P}pulumi\\s+(up|destroy)\\b|${P}kubectl\\s+(apply|delete|scale|drain)\\b|${P}helm\\s+(install|upgrade|uninstall|rollback)\\b|${P}aws\\s+(iam|ec2|route53|elbv2)\\s+(create|delete|put|update|modify|attach|detach)-\\S+|${P}(gcloud|az)\\s+\\S+\\s+(create|delete|update)\\b`,
+      "i"
+    )
+  },
+  {
+    op: "prod-deploy",
+    re: new RegExp(
+      `${P}(vercel|netlify|flyctl|fly|wrangler|serverless|sls|eb|heroku)\\s+${G}deploy\\b|${P}(vercel|netlify)\\b[^\\n]*--prod\\b|${P}(npm|pnpm|yarn)\\s+run\\s+deploy\\b|${P}cap\\s+production\\s+deploy\\b`,
+      "i"
+    )
+  },
+  {
+    op: "external-send",
+    re: new RegExp(
+      `${P}(sendmail|msmtp|mailx?)\\b|${P}curl\\b(?=[^\\n]*(?:-X|--request)\\s+(?:POST|PUT|PATCH)\\b)(?=[^\\n]*https?:\\/\\/)`,
+      "i"
+    )
+  },
+  {
+    op: "money-movement",
+    re: new RegExp(
+      `${P}(stripe|braintree|paypal)\\s+\\S*(charge|refund|payout|transfer|payment)\\S*\\b`,
+      "i"
+    )
+  },
+  {
+    // `rm -rf` on an ABSOLUTE path or a home-relative one. Deliberately not
+    // "outside the working tree" — this function receives a command string and
+    // no cwd, so that reading is not decidable here and a classifier that
+    // guesses is worse than one that under-reports.
+    op: "out-of-scope-destruction",
+    re: new RegExp(`${P}rm\\s+(-\\S+\\s+)*-\\S*[rR]\\S*\\s+(-\\S+\\s+)*(~|/)\\S*`, "i")
+  },
   { op: "push", re: new RegExp(`${P}git\\s+${G}push\\b`, "i") },
   { op: "commit", re: new RegExp(`${P}git\\s+${G}commit\\b`, "i") },
   { op: "branch", re: new RegExp(`${P}git\\s+${G}(checkout\\s+-b|switch\\s+-c)\\b`, "i") }
@@ -1677,7 +1893,7 @@ function invokedSegments(command, depth = 0) {
 function commandOp(command) {
   let found = null;
   for (const seg of invokedSegments(command)) {
-    if (!/^(?:\S*\/)?(git|gh|npm|pnpm|yarn)\b/.test(seg)) {
+    if (!/^(?:\S*\/)?(git|gh|npm|pnpm|yarn)\b/.test(seg) && !CONSEQUENCE_TOOL_HEAD.test(seg)) {
       continue;
     }
     for (const { op, re } of COMMAND_OPS) {
@@ -1692,6 +1908,37 @@ function commandOp(command) {
   }
   return found;
 }
+function commandObject(op, command) {
+  const patterns = COMMAND_OBJECTS[op];
+  if (!patterns) return null;
+  for (const re of patterns) {
+    const m = new RegExp(re.source, re.flags.replace("g", "")).exec(command);
+    const raw = m?.[1];
+    if (raw) {
+      const value = raw.trim().replace(/^["'`]+|["'`]+$/g, "").replace(/[.,;:]+$/, "").toLowerCase();
+      if (value) return value;
+    }
+  }
+  return null;
+}
+var COMMAND_OBJECTS = {
+  "prod-data-destroy": [
+    /\bdrop\s+(?:table|database|schema|collection)\s+(?:if\s+exists\s+)?["'`]?([\w.$-]+)/i,
+    /\btruncate\s+(?:table\s+)?["'`]?([\w.$-]+)/i,
+    /\bdelete\s+from\s+["'`]?([\w.$-]+)/i,
+    /\bs3:\/\/([\w.-]+)/i,
+    /--table-name[= ]["'`]?([\w.-]+)/i
+  ],
+  "external-send": [
+    /\bhttps?:\/\/([^\s/"'`]+)/i,
+    /([A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,})/
+  ],
+  "money-movement": [
+    /--customer[= ]["'`]?([\w.-]+)/i,
+    /--amount[= ]["'`]?([\d.,]+)/i,
+    /\b(\d[\d.,]*)\s*(?:eur|usd)\b/i
+  ]
+};
 
 // src/scripts/hooks/turn_end_gate_hook.ts
 import * as fs5 from "node:fs";
@@ -3914,6 +4161,7 @@ function scanSession(sessionId, lines) {
   let pinned = null;
   let pendingPoll = null;
   let authorized = /* @__PURE__ */ new Set();
+  let authorizedObjects = /* @__PURE__ */ new Map();
   let sawPending = false;
   let evaluationsThisTurn = 0;
   let turnsSincePrompt = 0;
@@ -4007,7 +4255,11 @@ function scanSession(sessionId, lines) {
       if (c.language !== "und") {
         pinned = c.language;
       }
-      authorized = new Set(classifyAuthorization(ut).authorized);
+      const classified = classifyAuthorization(ut);
+      authorized = new Set(classified.authorized);
+      authorizedObjects = new Map(
+        classified.authorized.map((op) => [op, new Set(extractObjects(op, ut))])
+      );
       sawPending = false;
       evaluationsThisTurn = 0;
       pendingPoll = null;
@@ -4073,6 +4325,17 @@ function scanSession(sessionId, lines) {
             at,
             detail: `irreversible \`${op}\` with no authorization in the turn's prompt: ${cmd.slice(0, 110)}`
           });
+        } else if (op !== null && authorized.has(op) && OBJECT_REQUIRED_OPS.has(op)) {
+          const object = commandObject(op, cmd);
+          const named = authorizedObjects.get(op);
+          if (object !== null && !(named?.has(object) ?? false)) {
+            report.violations.push({
+              check: "git-authorization",
+              session: sessionId,
+              at,
+              detail: `\`${op}\` authorized, but its object \`${object}\` is not one the turn's prompt named (${named && named.size > 0 ? [...named].join(", ") : "no object named"}): ` + cmd.slice(0, 110)
+            });
+          }
         }
         if (isCiPoll(cmd)) {
           pendingPoll = { at, cmd };
@@ -4675,7 +4938,12 @@ var SKILLS_ROOT = "src/skills";
 var TRIGGER_KEYS = ["triggers:", "trigger_description:", "file_pattern:", "path_prefix:"];
 var DETERMINISTIC_RE = /^\s*(?:[-*]\s*)?(?:\*\*)?(MUST|NEVER|ALWAYS)\b/m;
 function censusSkills(root) {
-  const out = { total: 0, withTriggerKey: [], withDeterministicObligation: [] };
+  const out = {
+    total: 0,
+    withTriggerKey: [],
+    withTriggerCorpus: [],
+    withDeterministicObligation: []
+  };
   if (!fs10.existsSync(root)) {
     return out;
   }
@@ -4694,6 +4962,9 @@ function censusSkills(root) {
     if (TRIGGER_KEYS.some((k) => new RegExp(`^${k}`, "m").test(fm))) {
       out.withTriggerKey.push(entry.name);
     }
+    if (fs10.existsSync(path10.join(root, entry.name, "evals", "triggers.json"))) {
+      out.withTriggerCorpus.push(entry.name);
+    }
     const body = fmEnd === -1 ? text : text.slice(fmEnd + 4);
     if (DETERMINISTIC_RE.test(body)) {
       out.withDeterministicObligation.push(entry.name);
@@ -4752,7 +5023,50 @@ function measureUsage(store, limit) {
 function _pct(n, d) {
   return d === 0 ? "n/a" : `${(100 * n / d).toFixed(1)}%`;
 }
-function render3(census, usage) {
+var RECORD_PATH = "agents/evidence/metrics/skill-activation-census.json";
+function populations(census) {
+  const corpus = new Set(census.withTriggerCorpus);
+  const both = census.withTriggerKey.filter((s) => corpus.has(s));
+  const eitherOne = /* @__PURE__ */ new Set([...census.withTriggerKey, ...census.withTriggerCorpus]);
+  return {
+    shipped: census.total,
+    triggerKey: census.withTriggerKey.length,
+    triggerCorpus: census.withTriggerCorpus.length,
+    bothKeyAndCorpus: both.length,
+    humanNamedOnly: census.total - eitherOne.size
+  };
+}
+function buildRecord(census, usage, today) {
+  const pop = populations(census);
+  const distinct = /* @__PURE__ */ new Set();
+  for (const u of usage) {
+    for (const k of Object.keys(u.bySkill)) {
+      distinct.add(k);
+    }
+  }
+  return {
+    schema_version: 1,
+    measured_at: today,
+    skills_shipped: pop.shipped,
+    with_trigger_key: pop.triggerKey,
+    with_trigger_corpus: pop.triggerCorpus,
+    trigger_key_and_corpus: pop.bothKeyAndCorpus,
+    human_named_only: pop.humanNamedOnly,
+    sessions: usage.reduce((a, u) => a + u.sessions, 0),
+    assistant_turns: usage.reduce((a, u) => a + u.assistantTurns, 0),
+    invocations: usage.reduce((a, u) => a + u.invocations, 0),
+    distinct_skills_invoked: distinct.size,
+    stores: usage.map((u) => path10.basename(u.store))
+  };
+}
+function readRecord(repoRoot) {
+  const file = path10.join(repoRoot, RECORD_PATH);
+  if (!fs10.existsSync(file)) {
+    return null;
+  }
+  return JSON.parse(fs10.readFileSync(file, "utf8"));
+}
+function render3(census, usage, published = null) {
   const lines = [];
   lines.push("skill activation census \u2014 advisory, gates on nothing");
   lines.push("");
@@ -4767,6 +5081,16 @@ function render3(census, usage) {
     lines.push(`      ${census.withDeterministicObligation.join(", ")}`);
   }
   lines.push("");
+  const pop = populations(census);
+  lines.push("  populations \u2014 the three ways a skill can be reached, reconciled");
+  lines.push(`    machine-matchable trigger key        ${pop.triggerKey}`);
+  lines.push(`    evals/triggers.json corpus           ${pop.triggerCorpus}  (a test fixture; no host reads it at routing time)`);
+  lines.push(`    both of the above                    ${pop.bothKeyAndCorpus}`);
+  lines.push(`    human-named only (remainder)         ${pop.humanNamedOnly}`);
+  lines.push(
+    `    reconciles                           ${pop.triggerKey} + ${pop.triggerCorpus} - ${pop.bothKeyAndCorpus} + ${pop.humanNamedOnly} = ${String(pop.triggerKey + pop.triggerCorpus - pop.bothKeyAndCorpus + pop.humanNamedOnly)} of ${pop.shipped}`
+  );
+  lines.push("");
   let totalInv = 0;
   const distinct = /* @__PURE__ */ new Set();
   for (const u of usage) {
@@ -4787,6 +5111,51 @@ function render3(census, usage) {
     lines.push(`      ${[...distinct].sort().join(", ")}`);
   }
   lines.push("");
+  const sessionsRead = usage.reduce((a, u) => a + u.sessions, 0);
+  if (sessionsRead === 0) {
+    lines.push('  EMPTY STORE: 0 sessions were read, so the zero above is "no transcripts at');
+    lines.push('  this path", NOT "no activations". It is not a measurement of the surface and');
+    lines.push("  must not be published as one. Run this where the store lives, or pass --store.");
+    lines.push("");
+  }
+  if (published !== null) {
+    const live = buildRecord(census, usage, published.measured_at);
+    const REPO_FIELDS = [
+      "skills_shipped",
+      "with_trigger_key",
+      "with_trigger_corpus",
+      "trigger_key_and_corpus",
+      "human_named_only"
+    ];
+    const STORE_FIELDS = [
+      "sessions",
+      "assistant_turns",
+      "invocations",
+      "distinct_skills_invoked"
+    ];
+    const repoDrift = REPO_FIELDS.filter((k) => live[k] !== published[k]);
+    const storeDrift = STORE_FIELDS.filter((k) => live[k] !== published[k]);
+    lines.push(`  PUBLISHED RECORD (${RECORD_PATH}), measured ${published.measured_at}:`);
+    lines.push(
+      `    sessions=${String(published.sessions)} asst=${String(published.assistant_turns)} invocations=${String(published.invocations)} distinct=${String(published.distinct_skills_invoked)}`
+    );
+    if (repoDrift.length > 0) {
+      lines.push(`    STALE: the published population split no longer describes this tree \u2014`);
+      lines.push(`    ${repoDrift.join(", ")} moved. Re-take with --emit.`);
+    } else {
+      lines.push("    population split still describes this tree.");
+    }
+    if (sessionsRead === 0) {
+      lines.push("    Store reading: UNDECIDED \u2014 this run read no store, so it cannot say whether");
+      lines.push("    the published figures still hold. Re-run where the store lives.");
+    } else if (storeDrift.length === 0) {
+      lines.push("    Store reading: reproduces the published figures exactly.");
+    } else {
+      lines.push(`    Store reading: moved since the record (${storeDrift.join(", ")}). Expected \u2014`);
+      lines.push("    the store is rolling, not append-only, and a later reading can be lower.");
+    }
+    lines.push("");
+  }
   if (census.withTriggerKey.length === 0) {
     lines.push("  VERDICT: activation is not measurable as a rate. No skill declares a");
     lines.push("  machine-matchable trigger, so a missed-activation detector has nothing to");
@@ -4800,19 +5169,30 @@ function render3(census, usage) {
   lines.push("  catalogue once per session, then count descriptions against bare names.");
   return lines.join("\n");
 }
+var USAGE = "usage: report_skill_activation [--root DIR] [--limit N] [--store PATH]... [--emit] [--allow-empty-store]\n";
 function main10(argv) {
   let limit = 30;
+  let emit = false;
+  let allowEmpty = false;
+  const rootIdx = argv.indexOf("--root");
+  const root = rootIdx === -1 ? REPO_ROOT3 : argv[rootIdx + 1] ?? REPO_ROOT3;
   const stores = [];
   for (let i = 0; i < argv.length; i += 1) {
     const a = argv[i];
-    if (a === "--limit" && argv[i + 1] !== void 0) {
+    if (a === "--root" && argv[i + 1] !== void 0) {
+      i += 1;
+    } else if (a === "--limit" && argv[i + 1] !== void 0) {
       limit = Number.parseInt(argv[i + 1], 10);
       i += 1;
     } else if (a === "--store" && argv[i + 1] !== void 0) {
       stores.push(argv[i + 1]);
       i += 1;
+    } else if (a === "--emit") {
+      emit = true;
+    } else if (a === "--allow-empty-store") {
+      allowEmpty = true;
     } else if (a === "--help" || a === "-h") {
-      process.stdout.write("usage: report_skill_activation [--limit N] [--store PATH]...\n");
+      process.stdout.write(USAGE);
       return 0;
     }
   }
@@ -4823,9 +5203,33 @@ function main10(argv) {
   if (stores.length === 0) {
     stores.push(defaultStore2(REPO_ROOT3));
   }
-  const census = censusSkills(path10.join(REPO_ROOT3, SKILLS_ROOT));
+  const census = censusSkills(path10.join(root, SKILLS_ROOT));
   const usage = stores.map((s) => measureUsage(s, limit));
-  process.stdout.write(`${render3(census, usage)}
+  process.stdout.write(`${render3(census, usage, readRecord(root))}
+`);
+  reportScanned({
+    gate: "report_skill_activation",
+    scanned: census.total,
+    units: "SKILL.md file(s)",
+    roots: [SKILLS_ROOT]
+  });
+  if (!emit) {
+    return 0;
+  }
+  const sessionsRead = usage.reduce((a, u) => a + u.sessions, 0);
+  if (sessionsRead === 0 && !allowEmpty) {
+    process.stderr.write(
+      'report_skill_activation --emit: refusing to write a record from 0 sessions \u2014 that zero\nis "no transcripts at this path", not an activation reading. Run where the store lives,\npass --store, or pass --allow-empty-store if an empty store is genuinely the finding.\n'
+    );
+    return 1;
+  }
+  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const file = path10.join(root, RECORD_PATH);
+  fs10.mkdirSync(path10.dirname(file), { recursive: true });
+  fs10.writeFileSync(file, `${JSON.stringify(buildRecord(census, usage, today), null, 2)}
+`);
+  process.stdout.write(`
+wrote ${RECORD_PATH} (measured ${today})
 `);
   return 0;
 }
@@ -5722,14 +6126,14 @@ function appendConformanceReport(checks, projectRoot, logPath = conformanceLogPa
   } catch {
   }
 }
-var USAGE = "usage: agent-config conformance [-h] [--project PROJECT] [--json]\n                                [--skip-dispatcher] [--funnel]\n";
+var USAGE2 = "usage: agent-config conformance [-h] [--project PROJECT] [--json]\n                                [--skip-dispatcher] [--funnel]\n";
 function _parse(argv) {
   const opts = { project: null, json: false, skip_dispatcher: false, funnel: false };
   let i = 0;
   while (i < argv.length) {
     const a = argv[i];
     if (a === "-h" || a === "--help") {
-      process6.stdout.write(USAGE);
+      process6.stdout.write(USAGE2);
       throw new ArgparseExit(0);
     }
     if (a === "--json") {
@@ -5743,7 +6147,7 @@ function _parse(argv) {
         opts.project = a.slice(a.indexOf("=") + 1);
       } else {
         if (i + 1 >= argv.length) {
-          process6.stderr.write(USAGE);
+          process6.stderr.write(USAGE2);
           process6.stderr.write("agent-config conformance: error: --project expects a value\n");
           throw new ArgparseExit(2);
         }
@@ -5751,7 +6155,7 @@ function _parse(argv) {
         i += 1;
       }
     } else {
-      process6.stderr.write(USAGE);
+      process6.stderr.write(USAGE2);
       process6.stderr.write(`agent-config conformance: error: unrecognized argument ${a}
 `);
       throw new ArgparseExit(2);

package/dist/cli-delegate/cmd_doctor.js

@@ -66,7 +66,7 @@ import {
   _wizard_state_path,
   main,
   shutilWhich
-} from "./chunk-7RXIKF62.js";
+} from "./chunk-IDHUQIXP.js";
 import "./chunk-FTAISGDQ.js";
 import "./chunk-M2DPGFZ4.js";
 import "./chunk-BTWUYDGN.js";

package/dist/cli-delegate/cmd_export.js

@@ -9,7 +9,7 @@ import {
   KIRO_MARKER,
   ROOCODE_MARKER,
   ZED_MARKER
-} from "./chunk-AKJGUQNO.js";
+} from "./chunk-GZTMRYCN.js";
 import "./chunk-4FS4WRXP.js";
 import "./chunk-6RJA2F5A.js";
 import "./chunk-WOKWX5PL.js";

package/dist/cli-delegate/cmd_handoff.js

@@ -13,7 +13,6 @@ import {
   describeDrift
 } from "./chunk-LPPWO5CE.js";
 import "./chunk-CYH5SP6M.js";
-import "./chunk-I3EIN2YG.js";
 import {
   hasBoundaryMarker,
   scanEnvelopeDirectives,
@@ -23,6 +22,7 @@ import {
 import {
   readHookStdin
 } from "./chunk-F7DQWYR5.js";
+import "./chunk-I3EIN2YG.js";
 import {
   _RAW_KEY_PREFIXES,
   hardenedSpawnEnv,

package/dist/cli-delegate/cmd_prune.js

@@ -1,7 +1,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   PROJECT_BRIDGE_MARKERS
-} from "./chunk-AKJGUQNO.js";
+} from "./chunk-GZTMRYCN.js";
 import "./chunk-4FS4WRXP.js";
 import "./chunk-6RJA2F5A.js";
 import "./chunk-WOKWX5PL.js";

package/dist/cli-delegate/cmd_route_audit.js

@@ -4,8 +4,8 @@ import {
   read_entries
 } from "./chunk-PKOBQADP.js";
 import "./chunk-CYH5SP6M.js";
-import "./chunk-I3EIN2YG.js";
 import "./chunk-F7DQWYR5.js";
+import "./chunk-I3EIN2YG.js";
 import {
   match_prompt
 } from "./chunk-LF2KKJ4Q.js";