@event4u/agent-config 14.23.0 → 16.0.0

package/dist/agent-src/skills/wireframe/SKILL.md

@@ -101,7 +101,7 @@ branded, recommendation-bearing). A single refined implementation →
 - Do NOT skip decision capture — an exploration round without a recorded
   decision has to be re-litigated in the hi-fi round.
 - Do NOT embed system internals (paths, skill/tool names) in the artifact —
-  Q13 in [`design-antipatterns.md`](../../../docs/guidelines/design-antipatterns.md).
+  Q13 in [`design-antipatterns.md`](../../guidelines/design-antipatterns.md).
 
 ## Gotcha
 

package/dist/agent-src/skills/workspace-link/SKILL.md

@@ -127,5 +127,5 @@ A workspace-link answer MUST contain, in order:
 ## See also
 
 - [`monorepo-workspace`](../monorepo-workspace/SKILL.md) — which manager, which workspaces, which graph.
-- [`monorepo-antipatterns`](../../../docs/guidelines/monorepo-antipatterns.md) — the task-graph mistakes a `paths` patch hides.
+- [`monorepo-antipatterns`](../../guidelines/monorepo-antipatterns.md) — the task-graph mistakes a `paths` patch hides.
 - [`blast-radius-analyzer`](../blast-radius-analyzer/SKILL.md) — § Monorepo, once the edge exists.

package/dist/agent-src/templates/agent-settings.md

@@ -14,7 +14,7 @@ Keep the format regular — 2-space indent, no tabs, no lists, one nesting
 level only. The installer's YAML handler is a restricted stdlib parser, not
 a full YAML engine. Ask the agent to normalize after manual edits — it
 follows the merge rules in
-[`layered-settings`](../docs/guidelines/agent-infra/layered-settings.md#section-aware-merge-rules).
+[`layered-settings`](../guidelines/agent-infra/layered-settings.md#section-aware-merge-rules).
 
 ### Migration from the legacy `.agent-settings` (key=value)
 
@@ -36,7 +36,7 @@ This block defines the personal and project-level settings that
 `scripts/install.ts` (via `config/agent-settings.template.yml`)
 writes to `.agent-settings.yml` on first install. Subsequent edits are
 made by the user directly or by the agent on request, following the
-[section-aware merge rules](../docs/guidelines/agent-infra/layered-settings.md#section-aware-merge-rules).
+[section-aware merge rules](../guidelines/agent-infra/layered-settings.md#section-aware-merge-rules).
 
 ```yaml
 # Agent Settings
@@ -597,7 +597,7 @@ linked_projects_max_files: 20000
 
 Personal and project-level settings (initial file written by
 `scripts/install.ts`, edits follow the merge rules in
-[`layered-settings`](../docs/guidelines/agent-infra/layered-settings.md#section-aware-merge-rules)).
+[`layered-settings`](../guidelines/agent-infra/layered-settings.md#section-aware-merge-rules)).
 **Key paths use dot-notation** to denote nesting: `personal.user_name`
 lives under `personal:` in YAML.
 
@@ -636,9 +636,9 @@ the canonical narrative lives in
 | `subagents.implementer_model` | model alias or empty | _(empty)_ | Model for implementer subagents. Empty = same tier as session model. See [subagent-configuration](../contexts/subagent-configuration.md). |
 | `subagents.judge_model` | model alias or empty | _(empty)_ | Model for judge subagents. Empty = one tier above implementer (opus if sonnet, sonnet if haiku). |
 | `subagents.max_parallel` | integer | `3` | Maximum parallel subagent invocations. `1` serializes. |
-| `roles.default_role` | `""`, `developer`, `reviewer`, `tester`, `po`, `incident`, `planner` | _(empty)_ | Role the agent defaults to at the start of a session. Lives in the PROJECT settings (`agent-project-settings.example.yml` § roles), not in the personal template. See [`role-contracts`](../docs/guidelines/agent-infra/role-contracts.md). |
+| `roles.default_role` | `""`, `developer`, `reviewer`, `tester`, `po`, `incident`, `planner` | _(empty)_ | Role the agent defaults to at the start of a session. Lives in the PROJECT settings (`agent-project-settings.example.yml` § roles), not in the personal template. See [`role-contracts`](../guidelines/agent-infra/role-contracts.md). |
 | `roles.active_role` | same as `default_role` | _(empty)_ | Role currently active; set by `/mode <name>`, cleared by `/mode none`. Enables the `role-mode-adherence` rule. |
-| `personas.override` | list of persona ids | `[]` | Developer-local override of the team default lens cast (not in the shipped personal template — add the block when needed). Empty = inherit `personas.default` from `.agent-project-settings.yml`. See [`layered-settings`](../docs/guidelines/agent-infra/layered-settings.md). |
+| `personas.override` | list of persona ids | `[]` | Developer-local override of the team default lens cast (not in the shipped personal template — add the block when needed). Empty = inherit `personas.default` from `.agent-project-settings.yml`. See [`layered-settings`](../guidelines/agent-infra/layered-settings.md). |
 | `personas.ignore` | list of persona ids | `[]` | Persona ids dropped from the default cast locally. Ignored personas stay invokable via `--personas=<id>`. |
 | `onboarding.onboarded` | `true`, `false` | `false` | Whether `/onboard` has run on this project. The `onboarding-gate` rule prompts for `/onboard` when this is `false`. Missing entirely = legacy project, treated as onboarded. |
 | `commands.suggestion.enabled` | `true`, `false` | `true` | Master switch for the command-suggestion layer. `false` = the layer is silent; explicit `/commands` still work. See `rules/command-suggestion-policy.md`. |
@@ -732,7 +732,7 @@ they ship with a live consumer in code and get documented here, not before.
 ## Sync rules
 
 When new settings are added to this template, the
-[section-aware merge rules](../docs/guidelines/agent-infra/layered-settings.md#section-aware-merge-rules)
+[section-aware merge rules](../guidelines/agent-infra/layered-settings.md#section-aware-merge-rules)
 govern the update:
 
 1. Missing keys are added with their **default value** from this template,

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "14.23.0"
+agent_config_version: "16.0.0"
 
 # --- Project identity ---
 project:

package/dist/agent-src/templates/contexts/knowledge-pages.md

@@ -91,9 +91,8 @@ tiny pages do.
 
 ## What this substrate is — honest framing
 
-A **governed second-brain substrate**: working-memory continuity across
-compactions and sessions (hot-context cache, dispatcher-wide on all 7
-platforms), deterministic where safe (dedup, recurrence, index regen,
+A **governed second-brain substrate**: a memory session index restored at
+`session_start` across all 7 platforms, deterministic where safe (dedup, recurrence, index regen,
 fold rollups, scale tripwires), human-gated where meaning is at stake
 (consolidate gate, promotion, contested flow). It is **not**
 self-organizing intelligence — the substrate is governed files, and the

package/dist/agent-src/templates/copilot-instructions.md

@@ -111,7 +111,7 @@ none. **Intentional, not a bug.** The installer projects
 resolve at agent runtime. The patterns below are correct by design:
 
 - **Relative cross-references inside markdown rules / skills /
-  commands** like `[x](../docs/guidelines/foo.md)` or
+  commands** like `[x](../guidelines/foo.md)` or
   `[y](../contexts/bar.md)`. The base resolves from the file's
   delivered location (e.g. `.augment/rules/<rule>.md`) — these paths
   are valid via the `.augment/` tree, even when the file is symlinked

package/dist/agent-src/templates/roadmaps.md

@@ -524,7 +524,7 @@ that was never a judgement call.
     No material risks → the **exact** honest-null grammar; a bare "no
     risks" sentence fails. Schema, staleness rule, and the grandfather
     clause for pre-gate roadmaps:
-    [`plan-review-gates § 1`](../../docs/contracts/plan-review-gates.md).
+    [`plan-review-gates § 1`](../docs/contracts/plan-review-gates.md).
     `status: draft` roadmaps are exempt until flipped to ready. Enforced
     by `lint_plan_risk_register` at pre-push + CI.
 

package/dist/agent-src/templates/scripts/README.md

@@ -111,7 +111,7 @@ _Data source: ownership-map.yml + historical-bug-patterns.yml. …_
 ```
 
 Curate `ownership-map.yml` and `historical-bug-patterns.yml` over time —
-see `../../../docs/guidelines/agent-infra/review-routing-data-format.md` for
+see `../../guidelines/agent-infra/review-routing-data-format.md` for
 the full schema.
 
 ## Uninstall
@@ -191,5 +191,5 @@ whatever is under `agents/memory/`. Trigger manually with
 Exit `0` = clean, `1` = violations (missing required fields, duplicate
 ids, or obvious secrets — staleness alone is informational).
 
-Schema reference: `../../../docs/guidelines/agent-infra/engineering-memory-data-format.md`.
+Schema reference: `../../guidelines/agent-infra/engineering-memory-data-format.md`.
 Schema examples: `.augment/templates/agents/memory/*.example.yml`.

package/dist/agent-src/user-types/_template/user-type.md

@@ -87,7 +87,7 @@ Non-negotiable. Guardrails are encoded here.
 
 *Author note (delete before publishing): this template targets the
 7-section spine locked in
-[`docs/contracts/user-type-schema.md`](../../../docs/contracts/user-type-schema.md).
+[`docs/contracts/user-type-schema.md`](../../docs/contracts/user-type-schema.md).
 Stay within the **≤ 120 line** budget (file total, including
 frontmatter). Replace every `{placeholder}` with concrete content
 that passes the Anti-Generic Quality Bar (≥ 5 concrete review

package/dist/cli-delegate/check_update_banner.js

@@ -218,7 +218,18 @@ var MERGEABLE_KEYS = [
   "knowledge.global_sharing.redaction.halt_on_trigger",
   "knowledge.global_sharing.auto_promote_threshold",
   "knowledge.global_sharing.freshness.hypothesis_after_days",
-  "knowledge.global_sharing.freshness.stale_after_days"
+  "knowledge.global_sharing.freshness.stale_after_days",
+  // `design.fidelity_mode` is a per-DEVELOPER working preference, not a
+  // per-project one: whether an agent may deviate from a handed-over design
+  // is a property of how that person works, and a designer who sets it once
+  // expects it in every checkout. `design-fidelity.md` already tells the
+  // reader to resolve it through the cascade — "that file is the project
+  // layer of a cascade that starts user-global" — and the cascade then
+  // filtered it out here, silently, so the rule's own instruction could not
+  // be followed. Class C, so a user still sets it by hand or through the
+  // GUI; whitelisting decides only whether the value SURVIVES the merge
+  // (ADR-271, road-to-design-intent-conformance 2.3).
+  "design.fidelity_mode"
 ];
 var TEMPLATE_RELATIVE = path2.join("src", "config", "agent-settings.template.yml");
 var _PACKAGE_ROOT = path2.resolve(path2.dirname(fileURLToPath(import.meta.url)), "..", "..", "..");

package/dist/cli-delegate/{chunk-NLP54U3J.js → chunk-2XY7ILBT.js}

@@ -170,7 +170,18 @@ var MERGEABLE_KEYS = [
   "knowledge.global_sharing.redaction.halt_on_trigger",
   "knowledge.global_sharing.auto_promote_threshold",
   "knowledge.global_sharing.freshness.hypothesis_after_days",
-  "knowledge.global_sharing.freshness.stale_after_days"
+  "knowledge.global_sharing.freshness.stale_after_days",
+  // `design.fidelity_mode` is a per-DEVELOPER working preference, not a
+  // per-project one: whether an agent may deviate from a handed-over design
+  // is a property of how that person works, and a designer who sets it once
+  // expects it in every checkout. `design-fidelity.md` already tells the
+  // reader to resolve it through the cascade — "that file is the project
+  // layer of a cascade that starts user-global" — and the cascade then
+  // filtered it out here, silently, so the rule's own instruction could not
+  // be followed. Class C, so a user still sets it by hand or through the
+  // GUI; whitelisting decides only whether the value SURVIVES the merge
+  // (ADR-271, road-to-design-intent-conformance 2.3).
+  "design.fidelity_mode"
 ];
 var TEMPLATE_RELATIVE = path.join("src", "config", "agent-settings.template.yml");
 var _PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
@@ -684,6 +695,7 @@ export {
   LOCAL_PROJECT_SUBDIR,
   project_settings_path,
   USER_GLOBAL_FILENAME,
+  user_global_settings_paths,
   MERGEABLE_KEYS,
   find_project_root_with_anchor,
   find_project_root,

package/dist/cli-delegate/{chunk-IAI3XL43.js → chunk-3FKR64R5.js}

@@ -4197,7 +4197,7 @@ var settingsSchema = external_exports.object({
   }),
   chat_history: external_exports.object({
     enabled: external_exports.boolean().default(true).describe(
-      "Persist a structured log of every chat turn to .agent-config/chat-history/ so /chat-history:show, :import, and :learn can replay sessions. Turn off if you never want chat transcripts on disk."
+      "Persist a structured log of every chat turn to agents/runtime/.agent-chat-history (JSONL). Recording only \u2014 no command in this package replays a session from the file; it is a record on disk that a human or a later tool can read. Turn off if you never want chat transcripts on disk."
     ),
     frequency: chatFreq.default("per_turn").describe(
       "How often the chat-history writer flushes to disk. per_turn = after every user / agent exchange (default, lowest data loss on crash). per_phase = at phase boundaries (cheaper I/O). per_tool = after every tool call (highest fidelity, noisiest log)."
@@ -4263,8 +4263,24 @@ var settingsSchema = external_exports.object({
   design: external_exports.object({
     fidelity_mode: fidelityMode.default("strict").describe(
       "How strictly the agent must follow a user-provided prototype / mockup / design system (consumed by the design-fidelity rule). strict = build 1:1, every visible deviation needs confirmation; structural = structure locked, silent gaps fillable with a stated assumption; hard-floor = any deviation is never autonomous."
-    )
-  }).default({ fidelity_mode: "strict" }),
+    ),
+    approximation: external_exports.object({
+      enabled: external_exports.boolean().default(false).describe(
+        "Whether a value INSIDE the configured tolerance may be replaced by the project's own token without a per-value confirmation. Ships false. The distance from the artifact's value to the nearest project token is computed and REPORTED on every value row regardless of this switch \u2014 what it decides is whether the agent may act on it without asking. Turning it on for a whole install is a consumer-facing default flip and is owner-reserved (agents/roadmaps/stubs/road-to-frontend-power-default-flip.md); design.fidelity_mode: hard-floor overrides it to off."
+      ),
+      tolerance: external_exports.object({
+        color: external_exports.number().nullable().default(null).describe(
+          'Colour distance below which a value may be reconciled, in OKLab \u0394EOK. Ships null, and null means "preserve and report" rather than "reconcile freely". No number is set because none is supported: zero of seven design-to-code benchmarks in the evidence set score token conformance, and a number in a config file \u2014 even flagged unmeasured \u2014 shapes behavior and acquires the authority of a default. Not an RGB channel delta: RGB distance is not perceptually uniform.'
+        ),
+        length: external_exports.number().nullable().default(null).describe(
+          "Length distance below which a value may be reconciled, in absolute CSS pixels. Ships null, same reasoning as color. GitHub Primer's \xB11px spacing widening is recorded as an externally observed candidate in src/scripts/_lib/design_tolerance.ts and is deliberately not the shipped value; max(1px, 2%) was rejected for growing more permissive at large dimensions with no evidence that this is wanted."
+        )
+      }).default({ color: null, length: null })
+    }).default({ enabled: false, tolerance: { color: null, length: null } })
+  }).default({
+    fidelity_mode: "strict",
+    approximation: { enabled: false, tolerance: { color: null, length: null } }
+  }),
   consistency: external_exports.object({
     cross_source: crossSourceMode.default("on").describe(
       "Consumed by the cross-source-consistency rule. When the agent works from multiple sources (ticket text, an attached image/mockup, the spec, the codebase) it checks them against each other and asks before proceeding on a discrepancy \u2014 instead of silently guessing. on (default) = surface every real cross-source contradiction / silent-scope-expansion as one question; auto = surface only high-confidence contradictions, state low-confidence as an assumption; off = no cross-source checking."
@@ -4467,11 +4483,11 @@ var settingsSchema = external_exports.object({
     })
   }),
   continuity: external_exports.object({
-    auto_record: external_exports.enum(["on", "off"]).default("off").describe(
-      "Deterministic continuity-record writer at session end (road-to-continuity-writer-activation Phase 1). on = the session-eol concern writes the continuity_record capsule variant on Stop for a substantive session that has claimed a roadmap; every field is computed from on-disk state, with no model spend and no subprocess. off (default) = no automatic record \u2014 while session:recycle is still the normal path, a second producer on it before the parity evidence is in would be unverified."
+    auto_record: external_exports.enum(["on", "off"]).default("on").describe(
+      "Deterministic continuity-record writer at session end (road-to-continuity-writer-activation Phase 1). on (default since 2026-09-10) = the session-eol concern writes the continuity_record capsule variant on Stop for a substantive session that has claimed a roadmap; every field is computed from on-disk state, with no model spend and no subprocess. off = no automatic record, and only the explicit agent-config session:recycle writes one. The default flipped once the parity evidence landed, so the normal path carries an automatic writer rather than a remembered command; session:recycle is retained because the automatic writer skips a session that claimed no roadmap and omits the git-status anchors."
     ),
     run_checkpoints: external_exports.enum(["on", "off"]).default("on").describe(
-      "Deterministic run-checkpoint production at session end (road-to-continuity-writer-activation Phase 1.4). on (default) = a session above the recycle threshold and inside a running roadmap contract leaves agents/runtime/state/checkpoints/<run>.json, so a killed run resumes from a derived checkpoint rather than from bookkeeping. off = no checkpoint; continuity writing, the recycle advisory and the context-fill surface are unaffected. Default ON because it is the behaviour the tree already had \u2014 the switch exists to make the three session-end handlers independently disableable, not to change what ships."
+      "Deterministic run-checkpoint production at session end (road-to-continuity-writer-activation Phase 1.4). on (default) = a session above the recycle threshold and inside a running roadmap contract leaves agents/runtime/state/checkpoints/<run>.json, so a killed run resumes from a derived checkpoint rather than from bookkeeping. off = no checkpoint; continuity writing, the recycle advisory and the context-fill surface are unaffected. Default ON because it is the behavior the tree already had \u2014 the switch exists to make the three session-end handlers independently disableable, not to change what ships."
     )
   }),
   memory: external_exports.object({

package/dist/cli-delegate/{chunk-J3RFNKG4.js → chunk-55ACLDUE.js}

@@ -29,7 +29,7 @@ import {
   projectStoreSlug,
   scanTranscripts,
   weightedInputUnits
-} from "./chunk-2FTMENJL.js";
+} from "./chunk-GYC3VRYN.js";
 import {
   git_common_dir
 } from "./chunk-E4XIZDIB.js";
@@ -66,7 +66,7 @@ import {
   iter_setting_overrides,
   project_settings_path,
   resolve_project_root
-} from "./chunk-NLP54U3J.js";
+} from "./chunk-2XY7ILBT.js";
 import {
   event4u_root,
   resolve_with_fallback

package/dist/cli-delegate/{chunk-PKOBQADP.js → chunk-57PN4GYJ.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-F7DQWYR5.js";
 import {
   load_agent_settings
-} from "./chunk-NLP54U3J.js";
+} from "./chunk-2XY7ILBT.js";
 
 // src/scripts/chat_history.ts
 import { createHash } from "node:crypto";

package/dist/cli-delegate/{chunk-KCNTUSPI.js → chunk-AK6HODNQ.js}

@@ -2,10 +2,10 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   ZodFirstPartyTypeKind,
   settingsSchema
-} from "./chunk-IAI3XL43.js";
+} from "./chunk-3FKR64R5.js";
 import {
   main
-} from "./chunk-6RJA2F5A.js";
+} from "./chunk-IVBPRCQO.js";
 import {
   RULE_SOURCE_REL
 } from "./chunk-WOKWX5PL.js";
@@ -59,7 +59,7 @@ import {
 import {
   find_project_root_with_anchor,
   load_agent_settings
-} from "./chunk-NLP54U3J.js";
+} from "./chunk-2XY7ILBT.js";
 import {
   event4u_root,
   legacy_xdg_root,
@@ -1657,7 +1657,7 @@ function computeSurfaceDelta(oldS, newS) {
       continue;
     }
     const o = oldS.entries[key];
-    if (o.type !== n.type) {
+    if (!sameJson(o.type, n.type)) {
       changes.push({ key, kind: "type_changed", old: o, new: n });
     }
     if (!sameJson(o.default, n.default)) {

package/dist/cli-delegate/{chunk-2FTMENJL.js → chunk-GYC3VRYN.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-OY53J6II.js";
 import {
   load_agent_settings
-} from "./chunk-NLP54U3J.js";
+} from "./chunk-2XY7ILBT.js";
 import {
   resolve_with_fallback,
   write_target

package/dist/cli-delegate/{chunk-LWTYTX6F.js → chunk-H32DGUJH.js}

@@ -1,84 +1,16 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  artefact_roots
+} from "./chunk-NUHLI2RX.js";
 import {
   DEFAULT_PROJECT_FILE,
   logger
-} from "./chunk-NLP54U3J.js";
+} from "./chunk-2XY7ILBT.js";
 
 // src/scripts/config/profiles.ts
-import * as fs2 from "node:fs";
-import { createRequire } from "node:module";
-import * as path2 from "node:path";
-
-// src/scripts/_lib/agent_src.ts
 import * as fs from "node:fs";
+import { createRequire } from "node:module";
 import * as path from "node:path";
-import { fileURLToPath } from "node:url";
-var _HERE = path.dirname(fileURLToPath(import.meta.url));
-var _DEFAULT_ROOT = path.resolve(_HERE, "..", "..", "..");
-function _deriveRoots(root) {
-  const packages = path.join(root, "packages");
-  const src = path.join(root, "src");
-  return {
-    ROOT: root,
-    LEGACY_SRC: path.join(root, ".agent-src.uncondensed"),
-    PACKAGES: packages,
-    PACKAGE_CORE: path.join(packages, "core"),
-    SRC: src,
-    SRC_SKILLS: path.join(src, "skills"),
-    SRC_RULES: path.join(src, "rules"),
-    SRC_AGENT: path.join(src, "agent-src"),
-    SRC_DOMAINS: path.join(src, "domains")
-  };
-}
-var _roots = _deriveRoots(_DEFAULT_ROOT);
-function _isDir(p) {
-  try {
-    return fs.statSync(p).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function _exists(p) {
-  try {
-    fs.statSync(p);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function _iterdirSorted(p) {
-  let names;
-  try {
-    names = fs.readdirSync(p);
-  } catch {
-    return [];
-  }
-  names.sort();
-  return names.map((name) => path.join(p, name));
-}
-function artefact_roots() {
-  const roots = [];
-  if (_exists(_roots.LEGACY_SRC)) {
-    roots.push(_roots.LEGACY_SRC);
-  }
-  if (_exists(_roots.PACKAGES)) {
-    for (const pkg of _iterdirSorted(_roots.PACKAGES)) {
-      const sub = path.join(pkg, ".agent-src.uncondensed");
-      if (_isDir(sub)) {
-        roots.push(sub);
-      }
-    }
-  }
-  if (_isDir(_roots.SRC_AGENT)) {
-    roots.push(_roots.SRC_AGENT);
-  }
-  if (_isDir(_roots.SRC_SKILLS) || _isDir(_roots.SRC_RULES)) {
-    roots.push(_roots.SRC);
-  }
-  return roots;
-}
-
-// src/scripts/config/profiles.ts
 var _require = createRequire(import.meta.url);
 var PROFILE_ID_ENV = "AGENT_CONFIG_PROFILE_ID";
 var DEFAULT_PROFILE_ID = "developer";
@@ -129,7 +61,7 @@ function _load_yaml(p) {
   }
   let text;
   try {
-    text = fs2.readFileSync(p, "utf-8");
+    text = fs.readFileSync(p, "utf-8");
   } catch (exc) {
     logger.warning("profile read failed for %s: %s", p, String(exc));
     return {};
@@ -147,8 +79,8 @@ function _load_yaml(p) {
   return _isPlainDict(data) ? data : {};
 }
 function profile_file(project_root, profile_id) {
-  const legacy = path2.join(project_root, PROFILES_DIRNAME, `${profile_id}.yml`);
-  if (_exists2(legacy)) {
+  const legacy = path.join(project_root, PROFILES_DIRNAME, `${profile_id}.yml`);
+  if (_exists(legacy)) {
     return legacy;
   }
   let roots;
@@ -158,8 +90,8 @@ function profile_file(project_root, profile_id) {
     return legacy;
   }
   for (const root of roots) {
-    const candidate = path2.join(root, "profiles", `${profile_id}.yml`);
-    if (_exists2(candidate)) {
+    const candidate = path.join(root, "profiles", `${profile_id}.yml`);
+    if (_exists(candidate)) {
       return candidate;
     }
   }
@@ -211,14 +143,14 @@ function _pick_id(pack_profile_id, user_settings, runtime_id) {
 }
 function resolve_profile(params) {
   const settings = params.user_settings ?? {};
-  const settings_file = path2.join(params.project_root, DEFAULT_PROJECT_FILE);
+  const settings_file = path.join(params.project_root, DEFAULT_PROJECT_FILE);
   const [profile_id, source] = _pick_id(
     params.pack_profile_id ?? null,
     settings,
     params.runtime_id ?? null
   );
   if (profile_id === null) {
-    if (_exists2(settings_file)) {
+    if (_exists(settings_file)) {
       return new ResolvedProfile({
         id: DEFAULT_PROFILE_ID,
         source: SOURCE_MISSING,
@@ -232,16 +164,16 @@ function resolve_profile(params) {
     );
   }
   const yaml_path = profile_file(params.project_root, profile_id);
-  if (!_exists2(yaml_path)) {
+  if (!_exists(yaml_path)) {
     throw new ProfileError(
       `profile.id=${_repr(profile_id)} (${source}) but ${yaml_path} not found`
     );
   }
   return _build_resolved(profile_id, _load_yaml(yaml_path), { source });
 }
-function _exists2(p) {
+function _exists(p) {
   try {
-    fs2.statSync(p);
+    fs.statSync(p);
     return true;
   } catch {
     return false;
@@ -261,7 +193,6 @@ function _repr(s) {
 }
 
 export {
-  artefact_roots,
   PROFILE_ID_ENV,
   SOURCE_MISSING,
   ProfileError,

package/dist/cli-delegate/{chunk-6RJA2F5A.js → chunk-IVBPRCQO.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-MCJYCQPF.js";
 import {
   resolve_project_root
-} from "./chunk-NLP54U3J.js";
+} from "./chunk-2XY7ILBT.js";
 
 // src/scripts/_cli/cmd_migrate.ts
 import { spawnSync } from "node:child_process";

package/dist/cli-delegate/chunk-NUHLI2RX.js

@@ -0,0 +1,80 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+
+// src/scripts/_lib/agent_src.ts
+import * as fs from "node:fs";
+import * as path2 from "node:path";
+import { fileURLToPath } from "node:url";
+
+// src/scripts/_lib/guidelines_lane.ts
+import * as path from "node:path";
+var GUIDELINES_SOURCE_REL = path.join("docs", "guidelines");
+
+// src/scripts/_lib/agent_src.ts
+var _HERE = path2.dirname(fileURLToPath(import.meta.url));
+var _DEFAULT_ROOT = path2.resolve(_HERE, "..", "..", "..");
+function _deriveRoots(root) {
+  const packages = path2.join(root, "packages");
+  const src = path2.join(root, "src");
+  return {
+    ROOT: root,
+    LEGACY_SRC: path2.join(root, ".agent-src.uncondensed"),
+    PACKAGES: packages,
+    PACKAGE_CORE: path2.join(packages, "core"),
+    SRC: src,
+    SRC_SKILLS: path2.join(src, "skills"),
+    SRC_RULES: path2.join(src, "rules"),
+    SRC_AGENT: path2.join(src, "agent-src"),
+    SRC_DOMAINS: path2.join(src, "domains")
+  };
+}
+var _roots = _deriveRoots(_DEFAULT_ROOT);
+function _isDir(p) {
+  try {
+    return fs.statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function _exists(p) {
+  try {
+    fs.statSync(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function _iterdirSorted(p) {
+  let names;
+  try {
+    names = fs.readdirSync(p);
+  } catch {
+    return [];
+  }
+  names.sort();
+  return names.map((name) => path2.join(p, name));
+}
+function artefact_roots() {
+  const roots = [];
+  if (_exists(_roots.LEGACY_SRC)) {
+    roots.push(_roots.LEGACY_SRC);
+  }
+  if (_exists(_roots.PACKAGES)) {
+    for (const pkg of _iterdirSorted(_roots.PACKAGES)) {
+      const sub = path2.join(pkg, ".agent-src.uncondensed");
+      if (_isDir(sub)) {
+        roots.push(sub);
+      }
+    }
+  }
+  if (_isDir(_roots.SRC_AGENT)) {
+    roots.push(_roots.SRC_AGENT);
+  }
+  if (_isDir(_roots.SRC_SKILLS) || _isDir(_roots.SRC_RULES)) {
+    roots.push(_roots.SRC);
+  }
+  return roots;
+}
+
+export {
+  artefact_roots
+};

package/dist/cli-delegate/{chunk-TYSY33MD.js → chunk-QJWAUMJW.js}

@@ -891,7 +891,9 @@ var DETECTOR_IDS = [
   "promissory",
   "language",
   "verification",
-  "completion"
+  "completion",
+  "pending-decision",
+  "untested"
 ];
 var REFUSAL_STATE_REL = path2.join("agents", "runtime", "state", "turn-end-gate");
 function refusalStateDir(workspaceRoot) {
@@ -916,7 +918,9 @@ function readSessionCounts(workspaceRoot, sessionId) {
   }
 }
 function emptyCounts() {
-  return { promissory: 0, language: 0, verification: 0, completion: 0 };
+  const out = {};
+  for (const id of DETECTOR_IDS) out[id] = 0;
+  return out;
 }
 function isDetector(v) {
   return typeof v === "string" && DETECTOR_IDS.includes(v);
@@ -942,6 +946,9 @@ function parseRecord(raw) {
   if (typeof o["agent_config_version"] === "string") {
     rec.agent_config_version = o["agent_config_version"];
   }
+  if (typeof o["refused_prompt_id"] === "string") {
+    rec.refused_prompt_id = o["refused_prompt_id"];
+  }
   const counts = o["counts"];
   if (typeof counts === "object" && counts !== null && !Array.isArray(counts)) {
     const parsed = {};
@@ -985,6 +992,9 @@ function foldRefusal(prev, input) {
   else if (prev?.agent_config_version !== void 0) {
     rec.agent_config_version = prev.agent_config_version;
   }
+  if (input.promptId !== void 0 && input.promptId !== "") {
+    rec.refused_prompt_id = input.promptId;
+  }
   return rec;
 }
 function readInstallBoundary() {

package/dist/cli-delegate/{chunk-2KKXJW25.js → chunk-S3VFXMTM.js}

@@ -3,7 +3,7 @@ import {
   pruneAgedRefusalState,
   readSessionCounts,
   statePathFor
-} from "./chunk-TYSY33MD.js";
+} from "./chunk-QJWAUMJW.js";
 import {
   readHookStdin
 } from "./chunk-F7DQWYR5.js";

package/dist/cli-delegate/{chunk-I6RHFQEG.js → chunk-YUM5KURG.js}

@@ -89,8 +89,24 @@ function path_weight(rel_path) {
   return is_example_path(rel_path) ? 0.25 : 1;
 }
 var PROJECTION_PREFIX = "dist/agent-src/";
+var PROJECTION_SOURCE_LANES = [
+  // The guidelines lane copies `docs/guidelines/` (`_lib/guidelines_lane.ts`),
+  // not `src/guidelines/`, which does not exist. Without this row a projected
+  // guideline gets a DIFFERENT identity from its own source, so a bound
+  // pragma written in the source cannot suppress the projection's copy of the
+  // very same line — measured on
+  // `untrusted-input-spotlighting.md`, a defense guideline that quotes
+  // role-takeover phrases to teach refusal and carries three accepted
+  // fingerprints for exactly that.
+  ["guidelines/", "docs/guidelines/"]
+];
 function source_identity(rel) {
-  return rel.startsWith(PROJECTION_PREFIX) ? `src/${rel.slice(PROJECTION_PREFIX.length)}` : rel;
+  if (!rel.startsWith(PROJECTION_PREFIX)) return rel;
+  const tail = rel.slice(PROJECTION_PREFIX.length);
+  for (const [lane, sourceRoot] of PROJECTION_SOURCE_LANES) {
+    if (tail.startsWith(lane)) return sourceRoot + tail.slice(lane.length);
+  }
+  return `src/${tail}`;
 }
 var ScannedFile = class {
   path;