@event4u/agent-config 14.6.0 → 14.7.0

package/dist/cli-delegate/cmd_conformance.js

@@ -1,10 +1,21 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
-  readHookStdin
-} from "./chunk-F7DQWYR5.js";
+  deriveSessionKey,
+  foldRefusal,
+  parseRecord,
+  readInstallBoundary,
+  sessionRefusalFile
+} from "./chunk-2GNWGMAL.js";
 import {
+  isCiPoll,
+  isVacuousOutput,
+  pendingCount,
+  statePathFor,
   validateAssumption
-} from "./chunk-P6LQDIWK.js";
+} from "./chunk-JZ4NR2TW.js";
+import {
+  readHookStdin
+} from "./chunk-F7DQWYR5.js";
 import {
   ArgparseExit,
   STATUS_SYMBOLS,
@@ -22,29 +33,32 @@ import {
   frontmatterPaths,
   proseEqual,
   splitFrontmatter
-} from "./chunk-3UCJWMMP.js";
+} from "./chunk-7F3VYSM2.js";
 import "./chunk-FTAISGDQ.js";
-import {
-  atomic_write_json,
-  atomic_write_text,
-  is_replay_mode
-} from "./chunk-EJITJBJX.js";
 import "./chunk-Q26HT4QT.js";
 import {
   projectStoreSlug,
   resolveSessionRole
 } from "./chunk-FBKL6JWT.js";
-import "./chunk-PZWRPRWP.js";
+import {
+  atomic_write_json,
+  atomic_write_text,
+  has_stable_session_id,
+  is_replay_mode,
+  owns_session_state,
+  prune_legacy_state_file,
+  prune_stale_session_states,
+  session_state_file
+} from "./chunk-6EOCNQAM.js";
 import "./chunk-M2DPGFZ4.js";
 import {
   atomicAppendLine,
   manifest_path,
   read_manifest
-} from "./chunk-63WSP6YZ.js";
-import {
-  read_lockfile
-} from "./chunk-GRRPEPRN.js";
-import "./chunk-NXFWFAYV.js";
+} from "./chunk-GJ5BVHXM.js";
+import "./chunk-MWRD5YOH.js";
+import "./chunk-T7L2QK3K.js";
+import "./chunk-G23AT6GD.js";
 import {
   load_agent_settings
 } from "./chunk-NLP54U3J.js";
@@ -64,12 +78,12 @@ import {
 
 // src/scripts/_cli/cmd_conformance.ts
 var YAML = __toESM(require_dist(), 1);
-import * as fs15 from "node:fs";
+import * as fs14 from "node:fs";
 import * as os7 from "node:os";
-import * as path16 from "node:path";
+import * as path14 from "node:path";
 import process6 from "node:process";
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { fileURLToPath as fileURLToPath15, pathToFileURL as pathToFileURL15 } from "node:url";
+import { fileURLToPath as fileURLToPath14, pathToFileURL as pathToFileURL14 } from "node:url";
 
 // src/install/txlog.ts
 import { createReadStream, createWriteStream, existsSync, readFileSync, renameSync, statSync, unlinkSync } from "node:fs";
@@ -130,18 +144,18 @@ function routeTargetPathsPosix(target) {
 }
 
 // src/scripts/report_conformance_funnel.ts
-import * as fs14 from "node:fs";
+import * as fs13 from "node:fs";
 import * as os6 from "node:os";
-import * as path15 from "node:path";
+import * as path13 from "node:path";
 import process5 from "node:process";
-import { fileURLToPath as fileURLToPath14, pathToFileURL as pathToFileURL14 } from "node:url";
+import { fileURLToPath as fileURLToPath13, pathToFileURL as pathToFileURL13 } from "node:url";
 
 // src/scripts/conformance_scan.ts
-import { createHash as createHash4 } from "node:crypto";
-import fs10 from "node:fs";
+import { createHash as createHash3 } from "node:crypto";
+import fs9 from "node:fs";
 import os2 from "node:os";
-import path11 from "node:path";
-import { fileURLToPath as fileURLToPath10, pathToFileURL as pathToFileURL10 } from "node:url";
+import path9 from "node:path";
+import { fileURLToPath as fileURLToPath9, pathToFileURL as pathToFileURL9 } from "node:url";
 
 // src/scripts/_lib/transcript_entry.ts
 function _isObject(v) {
@@ -206,6 +220,14 @@ function humanAuthoredLead(text) {
 var EXIT_ALLOW = 0;
 var EXIT_WARN = 2;
 var STATE_FILE = path.join("agents", "state", "language-mirror.json");
+var STATE_DIR = path.join("agents", "state", "language-mirror");
+var STATE_RETENTION_DAYS = 7;
+function hasStableSessionId(session_id) {
+  return has_stable_session_id(session_id);
+}
+function statePathFor2(session_id) {
+  return session_state_file(STATE_DIR, session_id);
+}
 var PIN_LOST_DIR = path.join("agents", "state", "language-mirror.pin-lost");
 function pinLostMarker(session_id) {
   const safe = (session_id || "unknown-session").replace(/[^A-Za-z0-9._-]/g, "_");
@@ -312,9 +334,13 @@ function _loadState(target) {
     return {};
   }
 }
+function _ownsPin(previous, session_id) {
+  return owns_session_state(previous, session_id);
+}
+var REEMIT_AFTER_TOOL_CALLS = 150;
 function nextState(previous, classification, prompt_chars, session_id, now, locale = "und") {
   if (classification.language === "und") {
-    if (previous.language === "de" || previous.language === "en") {
+    if (_ownsPin(previous, session_id) && (previous.language === "de" || previous.language === "en")) {
       return null;
     }
     if (locale === "und") {
@@ -327,7 +353,8 @@ function nextState(previous, classification, prompt_chars, session_id, now, loca
       prompt_chars,
       de_markers: classification.de_markers,
       en_markers: classification.en_markers,
-      session_id
+      session_id,
+      tool_calls_since_pin: 0
     };
   }
   return {
@@ -337,7 +364,8 @@ function nextState(previous, classification, prompt_chars, session_id, now, loca
     prompt_chars,
     de_markers: classification.de_markers,
     en_markers: classification.en_markers,
-    session_id
+    session_id,
+    tool_calls_since_pin: 0
   };
 }
 function _extractPrompt(payload) {
@@ -384,26 +412,162 @@ function _clearPinLost(consumer_root, session_id) {
   } catch {
   }
 }
-function _reEmitAfterCompaction(consumer_root, session_id) {
-  if (!_pinLost(consumer_root, session_id)) {
+function _reEmitAfterCompaction(consumer_root, session_id, write_json = atomic_write_json) {
+  if (!hasStableSessionId(session_id)) {
     return EXIT_ALLOW;
   }
-  const previous = _loadState(path.join(consumer_root, STATE_FILE));
-  const language = previous.language;
-  const source = previous.source === "system-locale" ? "system-locale" : "prompt";
-  _clearPinLost(consumer_root, session_id);
-  if (language !== "de" && language !== "en") {
+  if (!_pinLost(consumer_root, session_id)) {
     return EXIT_ALLOW;
   }
-  process.stdout.write(
-    `${JSON.stringify({
-      decision: "warn",
-      reason: noticeText(language, source),
-      additional_context: pinText(language, source)
-    })}
+  return _withToolWriteLock(consumer_root, session_id, EXIT_ALLOW, () => {
+    const previous = _loadState(path.join(consumer_root, statePathFor2(session_id)));
+    const language = previous.language;
+    const source = previous.source === "system-locale" ? "system-locale" : "prompt";
+    _clearPinLost(consumer_root, session_id);
+    if (language !== "de" && language !== "en") {
+      return EXIT_ALLOW;
+    }
+    if (!_ownsPin(previous, session_id)) {
+      return EXIT_ALLOW;
+    }
+    if (!_resetDistance(consumer_root, previous, session_id, write_json)) {
+      return EXIT_ALLOW;
+    }
+    process.stdout.write(
+      `${JSON.stringify({
+        decision: "warn",
+        reason: noticeText(language, source),
+        additional_context: pinText(language, source)
+      })}
 `
+    );
+    return EXIT_WARN;
+  });
+}
+function _pruneLegacyState(consumer_root) {
+  prune_legacy_state_file(path.join(consumer_root, STATE_FILE));
+}
+function _pruneStaleSessions(consumer_root, now_ms, mtimeOf = (target) => fs.statSync(target).mtimeMs) {
+  return prune_stale_session_states(
+    path.join(consumer_root, STATE_DIR),
+    now_ms,
+    STATE_RETENTION_DAYS,
+    mtimeOf
   );
-  return EXIT_WARN;
+}
+var LOCK_STALE_MS = 3e4;
+function _withToolWriteLock(consumer_root, session_id, when_busy, body, now_ms = Date.now()) {
+  const lock = `${path.join(consumer_root, statePathFor2(session_id))}.lock`;
+  let fd;
+  const acquire = () => {
+    try {
+      fs.mkdirSync(path.dirname(lock), { recursive: true });
+      return fs.openSync(lock, "wx");
+    } catch (err) {
+      if (err.code !== "EEXIST") return null;
+      let age;
+      try {
+        age = now_ms - fs.statSync(lock).mtimeMs;
+      } catch {
+        return null;
+      }
+      if (age < LOCK_STALE_MS) return null;
+      try {
+        fs.rmSync(lock, { force: true });
+        return fs.openSync(lock, "wx");
+      } catch {
+        return null;
+      }
+    }
+  };
+  const held = acquire();
+  if (held === null) return when_busy;
+  fd = held;
+  try {
+    return body();
+  } finally {
+    try {
+      fs.closeSync(fd);
+    } catch {
+    }
+    try {
+      fs.rmSync(lock, { force: true });
+    } catch {
+    }
+  }
+}
+function _writeDistance(consumer_root, expected, session_id, value, write_json = atomic_write_json) {
+  if (is_replay_mode()) return false;
+  if (!hasStableSessionId(session_id)) return false;
+  const target = path.join(consumer_root, statePathFor2(session_id));
+  const current = _loadState(target);
+  if (!_ownsPin(current, session_id)) return false;
+  if (current.detected_at !== expected.detected_at || current.language !== expected.language || current.source !== expected.source) {
+    return false;
+  }
+  try {
+    write_json(target, {
+      ...current,
+      session_id: typeof current.session_id === "string" && current.session_id !== "" ? current.session_id : session_id,
+      tool_calls_since_pin: value
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function _resetDistance(consumer_root, expected, session_id, write_json = atomic_write_json) {
+  return _writeDistance(consumer_root, expected, session_id, 0, write_json);
+}
+function _reEmitAfterDistance(consumer_root, session_id, write_json = atomic_write_json) {
+  if (is_replay_mode()) {
+    return EXIT_ALLOW;
+  }
+  if (!hasStableSessionId(session_id)) {
+    return EXIT_ALLOW;
+  }
+  return _withToolWriteLock(consumer_root, session_id, EXIT_ALLOW, () => {
+    const previous = _loadState(path.join(consumer_root, statePathFor2(session_id)));
+    const language = previous.language;
+    if (language !== "de" && language !== "en") {
+      return EXIT_ALLOW;
+    }
+    if (!_ownsPin(previous, session_id)) {
+      return EXIT_ALLOW;
+    }
+    const seen = typeof previous.tool_calls_since_pin === "number" && previous.tool_calls_since_pin >= 0 ? previous.tool_calls_since_pin : 0;
+    const advanced = seen + 1;
+    const due = advanced >= REEMIT_AFTER_TOOL_CALLS;
+    const written = _writeDistance(
+      consumer_root,
+      previous,
+      session_id,
+      due ? 0 : advanced,
+      write_json
+    );
+    if (!due) {
+      return EXIT_ALLOW;
+    }
+    if (!written) {
+      return EXIT_ALLOW;
+    }
+    const source = previous.source === "system-locale" ? "system-locale" : "prompt";
+    process.stdout.write(
+      `${JSON.stringify({
+        decision: "warn",
+        reason: noticeText(language, source),
+        additional_context: pinText(language, source)
+      })}
+`
+    );
+    return EXIT_WARN;
+  });
+}
+function _onToolUse(consumer_root, session_id, write_json = atomic_write_json) {
+  if (_pinLost(consumer_root, session_id)) {
+    return _reEmitAfterCompaction(consumer_root, session_id, write_json);
+  }
+  return _reEmitAfterDistance(consumer_root, session_id, write_json);
 }
 function run(stdin_text, options) {
   let envelope = {};
@@ -424,7 +588,7 @@ function run(stdin_text, options) {
     return EXIT_ALLOW;
   }
   if (event === "post_tool_use") {
-    return _reEmitAfterCompaction(options.consumer_root, _sessionId(envelope));
+    return _onToolUse(options.consumer_root, _sessionId(envelope), options.write_json);
   }
   const prompt = _extractPrompt(payload);
   if (!prompt) {
@@ -434,8 +598,9 @@ function run(stdin_text, options) {
     return EXIT_ALLOW;
   }
   const session_id = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
-  const target = path.join(options.consumer_root, STATE_FILE);
-  const previous = _loadState(target);
+  const stateful = hasStableSessionId(session_id);
+  const target = stateful ? path.join(options.consumer_root, statePathFor2(session_id)) : "";
+  const previous = stateful ? _loadState(target) : {};
   const classification = classify(prompt);
   const next = nextState(
     previous,
@@ -448,11 +613,14 @@ function run(stdin_text, options) {
     // test that passes here and fails in CI for reasons unrelated to the diff.
     systemLocaleVerdict(options.env ?? process.env)
   );
-  const effective = next?.language ?? previous.language;
+  const inherited = _ownsPin(previous, session_id) ? previous.language : void 0;
+  const effective = next?.language ?? inherited;
   const effectiveSource = next?.source ?? (previous.source === "system-locale" ? "system-locale" : "prompt");
-  if (next) {
+  if (next && stateful) {
     try {
       atomic_write_json(target, next);
+      _pruneLegacyState(options.consumer_root);
+      _pruneStaleSessions(options.consumer_root, Date.now());
     } catch {
     }
   }
@@ -508,7 +676,7 @@ import path2 from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
 var EXIT_ALLOW2 = 0;
 var STATE_FILE2 = path2.join("agents", "state", "git-authorization.json");
-var STATE_DIR = path2.join("agents", "state", "git-authorization");
+var STATE_DIR2 = path2.join("agents", "state", "git-authorization");
 var PENDING_DIR = path2.join("agents", "state", "git-authorization-pending");
 function sessionSlug(session_id) {
   return session_id.replace(/[^A-Za-z0-9._-]/gu, "_").slice(0, 80);
@@ -517,7 +685,7 @@ function ledgerFileFor(session_id) {
   if (!session_id) {
     return STATE_FILE2;
   }
-  return path2.join(STATE_DIR, `${sessionSlug(session_id)}.json`);
+  return path2.join(STATE_DIR2, `${sessionSlug(session_id)}.json`);
 }
 function pendingFileFor(session_id) {
   if (!session_id) {
@@ -994,7 +1162,7 @@ function commandOp(command) {
   }
   return found;
 }
-var LEDGER_MAX_AGE_MS = 30 * 60 * 1e3;
+var LEDGER_MAX_AGE_MS = 6 * 60 * 60 * 1e3;
 function _loadLedger(consumer_root, session_id, now) {
   const candidates = [ledgerFileFor(session_id)];
   if (!candidates.includes(STATE_FILE2)) {
@@ -1127,338 +1295,18 @@ if (_isCliEntry3()) {
   process.exit(main3());
 }
 
-// src/scripts/before_complete_hook.ts
-import fs4 from "node:fs";
-import path4 from "node:path";
-import { fileURLToPath as fileURLToPath4, pathToFileURL as pathToFileURL4 } from "node:url";
-var STATE_FILE3 = path4.join("agents", "state", "verify-before-complete.json");
-var COMMAND_TOOLS2 = /* @__PURE__ */ new Set([
-  "launch-process",
-  "launch_process",
-  // Augment
-  "Bash",
-  "BashTool",
-  // Claude Code
-  "run-process",
-  "runProcess",
-  // variants
-  "shell",
-  "execute_shell",
-  // generic / Cline
-  "RunShellCommand"
-  // Cursor
-]);
-var _VERIFICATION_RE = new RegExp(
-  "(?:^|[\\s;&|`(])(task\\s+(?:ci|test|tests|lint|check|qa|phpstan|rector|ecs|pest|pytest)|(?:\\./|\\.venv/bin/|vendor/bin/)?(?:pest|phpunit|phpstan|psalm|rector|ecs)\\b|(?:python3?|\\.venv/bin/python3?)\\s+-m\\s+pytest|pytest\\b|(?:npm|pnpm|yarn|bun)\\s+(?:run\\s+)?(?:test|check|lint|typecheck|tsc)|cargo\\s+(?:test|check|clippy)|go\\s+test|make\\s+(?:test|check|lint)|composer\\s+(?:test|check|lint|phpstan)|(?:php\\s+)?artisan\\s+test)",
-  "i"
-);
-function _now() {
-  return (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "+00:00");
-}
-function _empty_state() {
-  return {
-    schema_version: 1,
-    session_id: "",
-    turn_started_at: null,
-    last_verification: null,
-    verifications_this_turn: 0,
-    verifications_this_session: 0,
-    last_stop_at: null,
-    verified_this_turn: false,
-    ci_saw_pending: false,
-    nonevidence_this_turn: 0,
-    // Round 7 § Phase 1 — the last CI read, SESSION-scoped on purpose. Every
-    // other counter here is turn-scoped because a stale POSITIVE would wrongly
-    // vouch ("I verified"). This one is a NEGATIVE ("CI was not settled"), and a
-    // stale negative only ever refuses more often — so surviving the turn
-    // boundary preserves the freshness invariant rather than bypassing it. It
-    // has to survive it: the measured failure is a completion claim in a LATER
-    // turn than the poll it rests on.
-    ci_last: null,
-    checked_at: _now()
-  };
-}
-function _load_state(target) {
-  let isFile = false;
-  try {
-    isFile = fs4.statSync(target).isFile();
-  } catch {
-    isFile = false;
-  }
-  if (!isFile) {
-    return _empty_state();
-  }
-  try {
-    const decoded = JSON.parse(fs4.readFileSync(target, "utf-8"));
-    if (typeof decoded === "object" && decoded !== null && !Array.isArray(decoded)) {
-      return { ..._empty_state(), ...decoded };
-    }
-  } catch {
-  }
-  return _empty_state();
-}
-function _extract_command(payload) {
-  const toolRaw = payload["tool_name"] || payload["toolName"] || payload["tool"];
-  if (!(typeof toolRaw === "string" && COMMAND_TOOLS2.has(toolRaw))) {
-    return [typeof toolRaw === "string" ? toolRaw : null, null];
-  }
-  const tool = toolRaw;
-  const ti = payload["tool_input"];
-  if (typeof ti === "object" && ti !== null && !Array.isArray(ti)) {
-    for (const key of ["command", "cmd", "shell_command"]) {
-      const v = ti[key];
-      if (typeof v === "string" && v) {
-        return [tool, v];
-      }
-    }
-  }
-  for (const key of ["command", "cmd"]) {
-    const v = payload[key];
-    if (typeof v === "string" && v) {
-      return [tool, v];
-    }
-  }
-  return [tool, null];
-}
-function _is_verification(command) {
-  return _VERIFICATION_RE.test(command) || isCiPoll(command);
-}
-var _VACUOUS_PATTERNS = [
-  // gh pr checks / gh run — no checks registered at all.
-  /\b0\s+(?:checks?|runs?)\b/i,
-  // Test runners reporting an empty run.
-  /\bno tests? (?:ran|found|to run|were run)\b/i,
-  /\bNo test files found\b/i,
-  /\b0\s+pass(?:ed|ing)?\b[\s,|·]*\b0\s+fail(?:ed|ing|ures)?\b/i,
-  /\bTests?\s+0\s+passed\b/i,
-  /\bRan 0 tests?\b/i,
-  // Linters / scanners with an empty target set.
-  /\bno files? (?:matched|to (?:lint|check|scan)|found)\b/i,
-  /\b0\s+files?\s+(?:checked|scanned|linted)\b/i,
-  /\bnothing to check\b/i
-];
-function isVacuousOutput(output) {
-  const text = output.trim();
-  if (!text) {
-    return false;
-  }
-  const lines = text.split("\n").filter((l) => l.trim());
-  return lines.every((l) => _VACUOUS_PATTERNS.some((re) => re.test(l)));
-}
-var _CI_POLL_RE = /\bgh\s+(?:pr\s+checks|run\s+(?:watch|list|view))\b/i;
-function isCiPoll(command) {
-  return _CI_POLL_RE.test(command);
-}
-function pendingCount(output) {
-  const m = /(\d+)\s+(?:checks? )?pending\b/i.exec(output) ?? /\bpending[:=]\s*(\d+)/i.exec(output);
-  if (m?.[1] !== void 0) {
-    return Number(m[1]);
-  }
-  const rows = output.match(/^\S.*\b(pending|in_progress|queued)\b/gim);
-  if (rows) {
-    return rows.length;
-  }
-  if (/\bno checks reported\b/i.test(output)) {
-    return null;
-  }
-  if (/^\S+\s+(pass|fail|skipping|successful|failing)\b/im.test(output)) {
-    return 0;
-  }
-  return null;
-}
-function _extract_output(payload) {
-  for (const key of ["tool_response", "toolResponse", "output", "stdout", "result"]) {
-    const v = payload[key];
-    if (typeof v === "string") {
-      return v;
-    }
-    if (v !== null && typeof v === "object") {
-      return JSON.stringify(v);
-    }
-  }
-  return null;
-}
-function _reset_turn(state, session_id) {
-  state["session_id"] = session_id || state["session_id"] || "";
-  state["turn_started_at"] = _now();
-  state["verifications_this_turn"] = 0;
-  state["verified_this_turn"] = false;
-  state["ci_saw_pending"] = false;
-  state["nonevidence_this_turn"] = 0;
-  return state;
-}
-function _asInt(v) {
-  if (!v) {
-    return 0;
-  }
-  if (typeof v === "number") {
-    return Math.trunc(v);
-  }
-  const n = Number(v);
-  return Number.isFinite(n) ? Math.trunc(n) : 0;
-}
-function _update(state, event, envelope) {
-  const session_id = envelope["session_id"] || state["session_id"] || "";
-  if (session_id && session_id !== state["session_id"]) {
-    state["session_id"] = session_id;
-    state["verifications_this_session"] = 0;
-    state["ci_last"] = null;
-    state = _reset_turn(state, session_id);
-  }
-  let payload = envelope["payload"];
-  if (!(typeof payload === "object" && payload !== null && !Array.isArray(payload))) {
-    payload = {};
-  }
-  const pl = payload;
-  if (event === "session_start" || event === "user_prompt_submit") {
-    state = _reset_turn(state, session_id);
-  } else if (event === "post_tool_use") {
-    const [tool, cmd] = _extract_command(pl);
-    if (cmd && _is_verification(cmd)) {
-      const output = _extract_output(pl);
-      const vacuous = output !== null && isVacuousOutput(output);
-      let counts = !vacuous;
-      if (isCiPoll(cmd)) {
-        const pending = output === null ? null : pendingCount(output);
-        if (pending !== null && pending > 0) {
-          state["ci_saw_pending"] = true;
-          counts = false;
-        } else if (pending === 0) {
-          counts = !vacuous && state["ci_saw_pending"] === true;
-        } else {
-          counts = false;
-        }
-        state["ci_last"] = {
-          at: _now(),
-          command: cmd.slice(0, 512),
-          pending,
-          settled: pending === 0 && counts === true
-        };
-      }
-      state["last_verification"] = {
-        command: cmd.slice(0, 512),
-        tool,
-        at: _now(),
-        platform: envelope["platform"] || "",
-        vacuous,
-        counted: counts
-      };
-      if (counts) {
-        state["verifications_this_turn"] = _asInt(state["verifications_this_turn"]) + 1;
-        state["verifications_this_session"] = _asInt(state["verifications_this_session"]) + 1;
-        state["verified_this_turn"] = true;
-      } else {
-        state["nonevidence_this_turn"] = _asInt(state["nonevidence_this_turn"]) + 1;
-      }
-    }
-  } else if (event === "stop") {
-    state["last_stop_at"] = _now();
-  }
-  state["checked_at"] = _now();
-  return state;
-}
-function run4(stdin_text, options) {
-  const { consumer_root } = options;
-  const verbose = options.verbose ?? false;
-  let envelope = {};
-  if (stdin_text.trim()) {
-    try {
-      const decoded = JSON.parse(stdin_text);
-      if (typeof decoded === "object" && decoded !== null && !Array.isArray(decoded)) {
-        envelope = decoded;
-      }
-    } catch {
-      envelope = {};
-    }
-  }
-  const event = envelope["event"] || "";
-  const target = path4.join(consumer_root, STATE_FILE3);
-  let state = _load_state(target);
-  state = _update(state, event, envelope);
-  try {
-    atomic_write_json(target, state);
-  } catch {
-    if (verbose) {
-      process.stderr.write("verify-before-complete-hook: state write failed\n");
-    }
-    return 0;
-  }
-  if (verbose) {
-    process.stderr.write(
-      `verify-before-complete-hook: event=${event} verified_this_turn=${pyRepr(state["verified_this_turn"])} verifications_this_turn=${pyRepr(state["verifications_this_turn"])}
-`
-    );
-  }
-  return 0;
-}
-function pyRepr(value) {
-  if (value === null || value === void 0) {
-    return "None";
-  }
-  if (typeof value === "boolean") {
-    return value ? "True" : "False";
-  }
-  return String(value);
-}
-function parse_args(argv) {
-  let platform = "generic";
-  let verbose = false;
-  for (let i = 0; i < argv.length; i += 1) {
-    const arg = argv[i];
-    if (arg === "--platform") {
-      platform = argv[i + 1] ?? "generic";
-      i += 1;
-    } else if (arg !== void 0 && arg.startsWith("--platform=")) {
-      platform = arg.slice("--platform=".length);
-    } else if (arg === "--verbose") {
-      verbose = true;
-    }
-  }
-  return { platform, verbose };
-}
-function _readStdin() {
-  return readHookStdin();
-}
-function main4(argv) {
-  const args = parse_args(argv ?? process.argv.slice(2));
-  return run4(_readStdin(), { consumer_root: process.cwd(), verbose: args.verbose });
-}
-function _isCliEntry4() {
-  if (true) {
-    return false;
-  }
-  if (process.argv[1] === void 0) {
-    return false;
-  }
-  const argvUrl = pathToFileURL4(path4.resolve(process.argv[1])).href;
-  if (import.meta.url === argvUrl) {
-    return true;
-  }
-  try {
-    const here = fs4.realpathSync(fileURLToPath4(import.meta.url));
-    const argv = fs4.realpathSync(path4.resolve(process.argv[1]));
-    return here === argv;
-  } catch {
-    return false;
-  }
-}
-var isCliEntry = _isCliEntry4();
-if (isCliEntry) {
-  process.exit(main4(process.argv.slice(2)));
-}
-
 // src/scripts/hooks/turn_end_gate_hook.ts
-import * as fs7 from "node:fs";
-import * as path8 from "node:path";
-import { fileURLToPath as fileURLToPath7, pathToFileURL as pathToFileURL7 } from "node:url";
+import * as fs6 from "node:fs";
+import * as path6 from "node:path";
+import { fileURLToPath as fileURLToPath6, pathToFileURL as pathToFileURL6 } from "node:url";
 
 // src/scripts/hooks/end_review_nudge_hook.ts
 import { spawnSync } from "node:child_process";
 import * as crypto from "node:crypto";
-import * as fs5 from "node:fs";
+import * as fs4 from "node:fs";
 import * as os from "node:os";
-import * as path5 from "node:path";
-import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL5 } from "node:url";
+import * as path4 from "node:path";
+import { fileURLToPath as fileURLToPath4, pathToFileURL as pathToFileURL4 } from "node:url";
 
 // src/scripts/_lib/review_skipped_record.ts
 function isNonNegInt(n) {
@@ -1559,13 +1407,13 @@ function isSafeTranscriptPath(rawPath, opts = {}) {
   const homeDir = opts.homeDir ?? os.homedir();
   const maxBytes = opts.maxBytes ?? TRANSCRIPT_SCAN_MAX_BYTES;
   try {
-    const realHome = fs5.realpathSync(homeDir);
-    const realPath = fs5.realpathSync(rawPath);
-    const relative2 = path5.relative(realHome, realPath);
-    if (relative2 === "" || relative2.startsWith("..") || path5.isAbsolute(relative2)) {
+    const realHome = fs4.realpathSync(homeDir);
+    const realPath = fs4.realpathSync(rawPath);
+    const relative2 = path4.relative(realHome, realPath);
+    if (relative2 === "" || relative2.startsWith("..") || path4.isAbsolute(relative2)) {
       return false;
     }
-    const { size } = fs5.statSync(realPath);
+    const { size } = fs4.statSync(realPath);
     return size <= maxBytes;
   } catch {
     return false;
@@ -1624,13 +1472,13 @@ var BINARY_PROBE_BYTES = 8e3;
 var UNTRACKED_FILE_READ_CAP_BYTES = 8 * 1024 * 1024;
 function untrackedFileLineCount(cwd, relPath) {
   try {
-    const abs = path5.resolve(cwd, relPath);
-    const size = fs5.statSync(abs).size;
+    const abs = path4.resolve(cwd, relPath);
+    const size = fs4.statSync(abs).size;
     if (size === 0) return 0;
     if (size > UNTRACKED_FILE_READ_CAP_BYTES) {
       return MUTATION_LINE_THRESHOLD + 1;
     }
-    const buf = fs5.readFileSync(abs);
+    const buf = fs4.readFileSync(abs);
     if (buf.length === 0) return 0;
     const probe = buf.subarray(0, Math.min(buf.length, BINARY_PROBE_BYTES));
     if (probe.includes(0)) return 0;
@@ -1720,28 +1568,28 @@ function appendReviewSkippedTelemetry(workspaceRoot, diffLines, mutationMeasure)
   });
   if (errors.length || line === null) return;
   try {
-    const dir = path5.join(workspaceRoot, "agents", "runtime", "state", "audit");
-    fs5.mkdirSync(dir, { recursive: true });
-    const file = path5.join(dir, `${ts.slice(0, 7)}.jsonl`);
-    fs5.appendFileSync(file, `${JSON.stringify(line)}
+    const dir = path4.join(workspaceRoot, "agents", "runtime", "state", "audit");
+    fs4.mkdirSync(dir, { recursive: true });
+    const file = path4.join(dir, `${ts.slice(0, 7)}.jsonl`);
+    fs4.appendFileSync(file, `${JSON.stringify(line)}
 `, "utf8");
   } catch {
   }
 }
 function sessionStateDir(workspaceRoot) {
-  return path5.join(workspaceRoot, "agents", "runtime", "state", "end-review-nudge");
+  return path4.join(workspaceRoot, "agents", "runtime", "state", "end-review-nudge");
 }
 function sessionStateFile(workspaceRoot, sessionKey) {
-  return path5.join(sessionStateDir(workspaceRoot), `${sessionKey}.json`);
+  return path4.join(sessionStateDir(workspaceRoot), `${sessionKey}.json`);
 }
-function deriveSessionKey(envelope, payload) {
+function deriveSessionKey2(envelope, payload) {
   const raw = str(envelope["session_id"]) || str(payload["transcript_path"] ?? payload["transcriptPath"]);
   const material = raw || "unknown-session";
   return crypto.createHash("sha256").update(material).digest("hex");
 }
 function hasFiredThisSession(workspaceRoot, sessionKey) {
   try {
-    return fs5.existsSync(sessionStateFile(workspaceRoot, sessionKey));
+    return fs4.existsSync(sessionStateFile(workspaceRoot, sessionKey));
   } catch {
     return false;
   }
@@ -1755,7 +1603,7 @@ function markFiredThisSession(workspaceRoot, sessionKey, ts) {
 function _read_stdin() {
   return readHookStdin();
 }
-function main5() {
+function main4() {
   const [envelope, payload] = unwrap(_read_stdin(), "claude");
   const event = String(envelope["event"] ?? "");
   if (event !== "" && event !== "stop") {
@@ -1774,7 +1622,7 @@ function main5() {
   if (diffLines <= MUTATION_LINE_THRESHOLD) {
     return 0;
   }
-  const sessionKey = deriveSessionKey(envelope, payload);
+  const sessionKey = deriveSessionKey2(envelope, payload);
   if (hasFiredThisSession(workspace_root, sessionKey)) {
     return 0;
   }
@@ -1784,7 +1632,7 @@ function main5() {
   let reviewerRan = false;
   if (transcriptPath && isSafeTranscriptPath(transcriptPath)) {
     try {
-      reviewerRan = scanTranscriptForReviewer(fs5.readFileSync(transcriptPath, "utf-8"));
+      reviewerRan = scanTranscriptForReviewer(fs4.readFileSync(transcriptPath, "utf-8"));
     } catch {
       reviewerRan = false;
     }
@@ -1807,34 +1655,34 @@ function main5() {
   );
   return EXIT_WARN2;
 }
-function _isCliEntry5() {
+function _isCliEntry4() {
   if (true) {
     return false;
   }
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL5(path5.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL4(path4.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs5.realpathSync(fileURLToPath5(import.meta.url));
-    const argv = fs5.realpathSync(path5.resolve(process.argv[1]));
+    const here = fs4.realpathSync(fileURLToPath4(import.meta.url));
+    const argv = fs4.realpathSync(path4.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
   }
 }
-if (_isCliEntry5()) {
-  process.exit(main5());
+if (_isCliEntry4()) {
+  process.exit(main4());
 }
 
 // src/scripts/hooks/subagent_ledger_hook.ts
 import * as crypto2 from "node:crypto";
-import * as fs6 from "node:fs";
-import * as path6 from "node:path";
-import { fileURLToPath as fileURLToPath6, pathToFileURL as pathToFileURL6 } from "node:url";
+import * as fs5 from "node:fs";
+import * as path5 from "node:path";
+import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL5 } from "node:url";
 
 // src/scripts/_lib/subagent_response.ts
 var MAX_SUMMARY_CHARS = 2e3;
@@ -1928,7 +1776,7 @@ var EXIT_ALLOW4 = 0;
 function isObject2(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-var LEDGER_DIR = path6.join("agents", "runtime", "state", "subagent-ledger");
+var LEDGER_DIR = path5.join("agents", "runtime", "state", "subagent-ledger");
 var OPEN_SUBDIR = "open";
 var OPEN_RECORD_TTL_MS = 24 * 60 * 60 * 1e3;
 function refFor(agentId) {
@@ -1956,16 +1804,16 @@ function extractParentId(payload, ownId) {
   return null;
 }
 function classifyEnvelope(message) {
-  if (message === null || !message.trim()) return { verdict: "absent", error_count: 0 };
+  if (message === null || !message.trim()) return { verdict: "no_message", error_count: 0 };
   const candidates = _jsonObjectCandidates(message);
-  if (candidates.length === 0) return { verdict: "absent", error_count: 0 };
+  if (candidates.length === 0) return { verdict: "no_envelope", error_count: 0 };
   let best = null;
   for (const candidate of candidates) {
     const result = validateResponse(candidate);
     if (result.valid) return { verdict: "ok", error_count: 0 };
     if (best === null) best = { verdict: "fail", error_count: result.errors.length };
   }
-  return best ?? { verdict: "absent", error_count: 0 };
+  return best ?? { verdict: "no_envelope", error_count: 0 };
 }
 function _jsonObjectCandidates(message) {
   const texts = [];
@@ -2009,10 +1857,10 @@ function _jsonObjectCandidates(message) {
   return out;
 }
 function openDir(root) {
-  return path6.join(root, LEDGER_DIR, OPEN_SUBDIR);
+  return path5.join(root, LEDGER_DIR, OPEN_SUBDIR);
 }
 function openFile(root, ref) {
-  return path6.join(openDir(root), `${ref}.json`);
+  return path5.join(openDir(root), `${ref}.json`);
 }
 var DEPTH_BASES = /* @__PURE__ */ new Set(["observed", "asserted-parent", "assumed-root"]);
 function _asOpenRecord(value, expectedRef) {
@@ -2039,7 +1887,7 @@ function readOpenRecords(root) {
   const out = /* @__PURE__ */ new Map();
   let names;
   try {
-    names = fs6.readdirSync(openDir(root));
+    names = fs5.readdirSync(openDir(root));
   } catch {
     return out;
   }
@@ -2047,7 +1895,7 @@ function readOpenRecords(root) {
     if (!name.endsWith(".json")) continue;
     const expectedRef = name.slice(0, -".json".length);
     try {
-      const raw = fs6.readFileSync(path6.join(openDir(root), name), "utf8");
+      const raw = fs5.readFileSync(path5.join(openDir(root), name), "utf8");
       const rec = _asOpenRecord(JSON.parse(raw), expectedRef);
       if (rec) out.set(rec.ref, rec);
     } catch {
@@ -2062,13 +1910,13 @@ function resolveDepth(parentRef, open) {
   return { depth: parent.depth + 1, depth_basis: "observed" };
 }
 function ledgerFileFor2(root, ts) {
-  return path6.join(root, LEDGER_DIR, `${ts.slice(0, 7)}.jsonl`);
+  return path5.join(root, LEDGER_DIR, `${ts.slice(0, 7)}.jsonl`);
 }
 function appendLedgerLine(root, ts, line) {
   if (is_replay_mode()) return;
   const file = ledgerFileFor2(root, ts);
-  fs6.mkdirSync(path6.dirname(file), { recursive: true });
-  fs6.appendFileSync(file, `${JSON.stringify(line)}
+  fs5.mkdirSync(path5.dirname(file), { recursive: true });
+  fs5.appendFileSync(file, `${JSON.stringify(line)}
 `, "utf8");
 }
 var WALL_CLOCK_ARMS_MS = [
@@ -2082,7 +1930,7 @@ function armsExceeded(elapsedMs) {
   return WALL_CLOCK_ARMS_MS.filter((a) => elapsedMs >= a.ms).map((a) => a.label);
 }
 function openRecordStats(root, nowMs = Date.now()) {
-  const ledgerPresent = fs6.existsSync(path6.join(root, LEDGER_DIR));
+  const ledgerPresent = fs5.existsSync(path5.join(root, LEDGER_DIR));
   const open = readOpenRecords(root);
   let maxDepth = 0;
   let counted = 0;
@@ -2110,13 +1958,13 @@ function writeOpenRecord(root, rec) {
 function removeOpenRecord(root, ref) {
   if (is_replay_mode()) return;
   try {
-    fs6.unlinkSync(openFile(root, ref));
+    fs5.unlinkSync(openFile(root, ref));
   } catch {
   }
 }
 function countOpen(root) {
   try {
-    return fs6.readdirSync(openDir(root)).filter((n) => n.endsWith(".json")).length;
+    return fs5.readdirSync(openDir(root)).filter((n) => n.endsWith(".json")).length;
   } catch {
     return 0;
   }
@@ -2264,7 +2112,7 @@ function resolveConsumerRoot(envelope) {
   }
   return process.cwd();
 }
-function main6() {
+function main5() {
   const raw = readHookStdin();
   let envelope = {};
   try {
@@ -2274,124 +2122,20 @@ function main6() {
   }
   return processEnvelope(envelope, resolveConsumerRoot(envelope));
 }
-function _isCliEntry6() {
+function _isCliEntry5() {
   if (true) {
     return false;
   }
   if (process.argv[1] === void 0) return false;
-  const argvUrl = pathToFileURL6(path6.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL5(path5.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) return true;
   try {
-    return fs6.realpathSync(fileURLToPath6(import.meta.url)) === fs6.realpathSync(path6.resolve(process.argv[1]));
+    return fs5.realpathSync(fileURLToPath5(import.meta.url)) === fs5.realpathSync(path5.resolve(process.argv[1]));
   } catch {
     return false;
   }
 }
-if (_isCliEntry6()) process.exit(main6());
-
-// src/scripts/_lib/turn_end_refusals.ts
-import * as crypto3 from "node:crypto";
-import * as path7 from "node:path";
-var DETECTOR_IDS = [
-  "promissory",
-  "language",
-  "verification",
-  "completion"
-];
-var REFUSAL_STATE_REL = path7.join("agents", "runtime", "state", "turn-end-gate");
-function refusalStateDir(workspaceRoot) {
-  return path7.join(workspaceRoot, REFUSAL_STATE_REL);
-}
-function deriveSessionKey2(sessionId) {
-  return crypto3.createHash("sha256").update(sessionId).digest("hex").slice(0, 32);
-}
-function sessionRefusalFile(workspaceRoot, sessionKey) {
-  return path7.join(refusalStateDir(workspaceRoot), `${sessionKey}.json`);
-}
-function emptyCounts() {
-  return { promissory: 0, language: 0, verification: 0, completion: 0 };
-}
-function isDetector(v) {
-  return typeof v === "string" && DETECTOR_IDS.includes(v);
-}
-function parseRecord(raw) {
-  let decoded;
-  try {
-    decoded = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) return null;
-  const o = decoded;
-  if (typeof o["refused_at"] !== "string") return null;
-  if (typeof o["refused_turn"] !== "number") return null;
-  if (!isDetector(o["detector"])) return null;
-  const rec = {
-    refused_at: o["refused_at"],
-    refused_turn: o["refused_turn"],
-    detector: o["detector"]
-  };
-  if (typeof o["first_refused_at"] === "string") rec.first_refused_at = o["first_refused_at"];
-  if (typeof o["agent_config_version"] === "string") {
-    rec.agent_config_version = o["agent_config_version"];
-  }
-  const counts = o["counts"];
-  if (typeof counts === "object" && counts !== null && !Array.isArray(counts)) {
-    const parsed = {};
-    for (const id of DETECTOR_IDS) {
-      const n = counts[id];
-      if (typeof n === "number" && Number.isFinite(n) && n >= 0) parsed[id] = n;
-    }
-    rec.counts = parsed;
-  }
-  return rec;
-}
-function countsOf(rec) {
-  const out = emptyCounts();
-  if (rec.counts === void 0) {
-    out[rec.detector] = 1;
-    return out;
-  }
-  let any = false;
-  for (const id of DETECTOR_IDS) {
-    const n = rec.counts[id];
-    if (typeof n === "number" && n > 0) {
-      out[id] = n;
-      any = true;
-    }
-  }
-  if (!any) out[rec.detector] = 1;
-  return out;
-}
-function foldRefusal(prev, input) {
-  const counts = prev === null ? emptyCounts() : countsOf(prev);
-  for (const d of input.detectors) counts[d] += 1;
-  const primary = input.detectors[0] ?? prev?.detector ?? "verification";
-  const rec = {
-    refused_at: input.at,
-    refused_turn: input.turnOrdinal,
-    detector: primary,
-    first_refused_at: prev?.first_refused_at ?? prev?.refused_at ?? input.at,
-    counts
-  };
-  if (input.version !== void 0) rec.agent_config_version = input.version;
-  else if (prev?.agent_config_version !== void 0) {
-    rec.agent_config_version = prev.agent_config_version;
-  }
-  return rec;
-}
-function readInstallBoundary() {
-  try {
-    const lock = read_lockfile();
-    if (lock === null) return { version: null, installed_at: null };
-    return {
-      version: lock.agent_config_version ?? null,
-      installed_at: lock.installed_at ?? null
-    };
-  } catch {
-    return { version: null, installed_at: null };
-  }
-}
+if (_isCliEntry5()) process.exit(main5());
 
 // src/scripts/hooks/turn_end_gate_hook.ts
 var EXIT_BLOCK2 = 1;
@@ -2497,10 +2241,12 @@ function detectPromissory(reply) {
   }
   return null;
 }
-function readCiSettled(workspaceRoot) {
+function readCiSettled(workspaceRoot, session_id) {
+  if (!hasStableSessionId(session_id)) return { seen: false, settled: false };
   try {
-    const raw = fs7.readFileSync(path8.join(workspaceRoot, STATE_FILE3), "utf-8");
+    const raw = fs6.readFileSync(path6.join(workspaceRoot, statePathFor(session_id)), "utf-8");
     const decoded = JSON.parse(raw);
+    if (!owns_session_state(decoded, session_id)) return { seen: false, settled: false };
     if (typeof decoded === "object" && decoded !== null && !Array.isArray(decoded)) {
       const ci = decoded["ci_last"];
       if (typeof ci === "object" && ci !== null && !Array.isArray(ci)) {
@@ -2531,10 +2277,15 @@ function detectCompletionClaim(reply, ci) {
     reason: "a completion claim while the last CI read was not settled \u2014 read the verdict, then claim it (verify-before-complete)"
   };
 }
-function readLanguagePin(workspaceRoot) {
+function readLanguagePin(workspaceRoot, session_id) {
+  if (!hasStableSessionId(session_id)) return "und";
   try {
-    const raw = fs7.readFileSync(path8.join(workspaceRoot, STATE_FILE), "utf-8");
+    const raw = fs6.readFileSync(
+      path6.join(workspaceRoot, statePathFor2(session_id)),
+      "utf-8"
+    );
     const decoded = JSON.parse(raw);
+    if (!owns_session_state(decoded, session_id)) return "und";
     if (typeof decoded === "object" && decoded !== null && !Array.isArray(decoded)) {
       const lang = decoded["language"];
       if (lang === "de" || lang === "en") return lang;
@@ -2586,7 +2337,7 @@ function sessionStateFile2(workspaceRoot, sessionKey) {
 }
 function alreadyRefusedTurn(workspaceRoot, sessionKey, turnOrdinal) {
   try {
-    const raw = fs7.readFileSync(sessionStateFile2(workspaceRoot, sessionKey), "utf-8");
+    const raw = fs6.readFileSync(sessionStateFile2(workspaceRoot, sessionKey), "utf-8");
     const decoded = JSON.parse(raw);
     if (typeof decoded === "object" && decoded !== null && !Array.isArray(decoded)) {
       return decoded["refused_turn"] === turnOrdinal;
@@ -2600,7 +2351,7 @@ function markRefusedTurn(workspaceRoot, sessionKey, turnOrdinal, detectors) {
   const file = sessionStateFile2(workspaceRoot, sessionKey);
   let prev = null;
   try {
-    prev = parseRecord(fs7.readFileSync(file, "utf-8"));
+    prev = parseRecord(fs6.readFileSync(file, "utf-8"));
   } catch {
   }
   let version;
@@ -2627,10 +2378,10 @@ function readTranscriptTail(transcriptPath, opts = {}) {
   if (!transcriptPath || !isSafeTranscriptPath(transcriptPath, opts)) return empty;
   let lines;
   try {
-    if (opts.maxBytes !== void 0 && fs7.statSync(transcriptPath).size > opts.maxBytes) {
+    if (opts.maxBytes !== void 0 && fs6.statSync(transcriptPath).size > opts.maxBytes) {
       return empty;
     }
-    lines = fs7.readFileSync(transcriptPath, "utf-8").split("\n");
+    lines = fs6.readFileSync(transcriptPath, "utf-8").split("\n");
   } catch {
     return empty;
   }
@@ -2706,7 +2457,7 @@ function _messageText(content) {
 function str3(v) {
   return typeof v === "string" ? v : "";
 }
-function main7() {
+function main6() {
   let envelope;
   let payload;
   try {
@@ -2728,9 +2479,8 @@ function main7() {
     maxBytes: TRANSCRIPT_READ_MAX_BYTES
   });
   if (!lastAssistant) return EXIT_ALLOW5;
-  const sessionKey = deriveSessionKey2(
-    str3(envelope["session_id"]) || "unknown-session"
-  );
+  const rawSessionId = str3(envelope["session_id"]) || "";
+  const sessionKey = deriveSessionKey(rawSessionId || "unknown-session");
   if (alreadyRefusedTurn(workspaceRoot, sessionKey, turnOrdinal)) return EXIT_ALLOW5;
   const findings = [];
   for (const f of [
@@ -2738,7 +2488,7 @@ function main7() {
     // (Phase 3 Step 2, narrowed by R2 round 2 finding 2). B and C are not
     // excused by anything about a dispatch and run unchanged.
     dispatchOpen ? null : detectPromissory(lastAssistant),
-    detectLanguage(lastAssistant, readLanguagePin(workspaceRoot)),
+    detectLanguage(lastAssistant, readLanguagePin(workspaceRoot, rawSessionId)),
     detectUnverifiedEdit(toolCalls),
     // Round 7 § Phase 1 — detector D. It is NOT unconditional, and this
     // comment said it was while sitting one line above the `dispatchOpen`
@@ -2750,7 +2500,7 @@ function main7() {
     // gating is where the comment above says gating belongs — inside the
     // detector: no CI observed, or a settled read, or no completion claim
     // ⇒ no finding.
-    dispatchOpen ? null : detectCompletionClaim(lastAssistant, readCiSettled(workspaceRoot))
+    dispatchOpen ? null : detectCompletionClaim(lastAssistant, readCiSettled(workspaceRoot, rawSessionId))
   ]) {
     if (f) findings.push(f);
   }
@@ -2774,37 +2524,37 @@ ${lines.join("\n")}
   );
   return EXIT_BLOCK2;
 }
-function _isCliEntry7() {
+function _isCliEntry6() {
   if (true) {
     return false;
   }
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL7(path8.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL6(path6.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs7.realpathSync(fileURLToPath7(import.meta.url));
-    const argv = fs7.realpathSync(path8.resolve(process.argv[1]));
+    const here = fs6.realpathSync(fileURLToPath6(import.meta.url));
+    const argv = fs6.realpathSync(path6.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
   }
 }
-if (_isCliEntry7()) {
-  process.exit(main7());
+if (_isCliEntry6()) {
+  process.exit(main6());
 }
 
 // src/scripts/hooks/evidence_independence.ts
-import crypto4 from "node:crypto";
-import fs8 from "node:fs";
-import path9 from "node:path";
-import { fileURLToPath as fileURLToPath8, pathToFileURL as pathToFileURL8 } from "node:url";
+import crypto3 from "node:crypto";
+import fs7 from "node:fs";
+import path7 from "node:path";
+import { fileURLToPath as fileURLToPath7, pathToFileURL as pathToFileURL7 } from "node:url";
 var EXIT_ALLOW6 = 0;
 var EXIT_BLOCK3 = 1;
-var STATE_FILE4 = path9.join("agents", "state", "evidence-dispatch.json");
+var STATE_FILE3 = path7.join("agents", "state", "evidence-dispatch.json");
 function _isObject6(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
@@ -2872,8 +2622,8 @@ function extractDispatch(envelope) {
 }
 function _ledgerStamp(consumer_root) {
   try {
-    const raw = fs8.readFileSync(
-      path9.join(consumer_root, "agents", "state", "git-authorization.json"),
+    const raw = fs7.readFileSync(
+      path7.join(consumer_root, "agents", "state", "git-authorization.json"),
       "utf8"
     );
     const d = JSON.parse(raw);
@@ -2884,7 +2634,7 @@ function _ledgerStamp(consumer_root) {
 }
 function _load(target) {
   try {
-    const decoded = JSON.parse(fs8.readFileSync(target, "utf8"));
+    const decoded = JSON.parse(fs7.readFileSync(target, "utf8"));
     if (_isObject6(decoded) && Array.isArray(decoded["evaluations"])) {
       return decoded;
     }
@@ -2930,7 +2680,7 @@ function decide2(tool, prompt, priorEvaluations) {
     evaluations: priorEvaluations + 1
   };
 }
-function run5(stdin_text, options) {
+function run4(stdin_text, options) {
   let envelope = {};
   if (stdin_text.trim()) {
     try {
@@ -2942,7 +2692,7 @@ function run5(stdin_text, options) {
       return EXIT_ALLOW6;
     }
   }
-  const target = path9.join(options.consumer_root, STATE_FILE4);
+  const target = path7.join(options.consumer_root, STATE_FILE3);
   const state = _load(target);
   const session_id = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
   const turnMarker = `${session_id}:${_ledgerStamp(options.consumer_root)}`;
@@ -2956,7 +2706,7 @@ function run5(stdin_text, options) {
   if (decision.evaluations > state.evaluations.length) {
     state.evaluations.push({
       at: (/* @__PURE__ */ new Date()).toISOString(),
-      digest: crypto4.createHash("sha256").update(prompt).digest("hex").slice(0, 16),
+      digest: crypto3.createHash("sha256").update(prompt).digest("hex").slice(0, 16),
       prompt_chars: prompt.length
     });
     try {
@@ -2972,7 +2722,7 @@ function run5(stdin_text, options) {
   }
   return decision.exit;
 }
-function main8(argv) {
+function main7(argv) {
   const args = argv ?? process.argv.slice(2);
   let consumer_root = process.cwd();
   for (let i = 0; i < args.length; i += 1) {
@@ -2984,35 +2734,35 @@ function main8(argv) {
       consumer_root = a.slice("--project-dir=".length);
     }
   }
-  return run5(readHookStdin(), { consumer_root });
+  return run4(readHookStdin(), { consumer_root });
 }
-function _isCliEntry8() {
+function _isCliEntry7() {
   if (true) {
     return false;
   }
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL8(path9.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL7(path7.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs8.realpathSync(fileURLToPath8(import.meta.url));
-    const argv = fs8.realpathSync(path9.resolve(process.argv[1]));
+    const here = fs7.realpathSync(fileURLToPath7(import.meta.url));
+    const argv = fs7.realpathSync(path7.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
   }
 }
-if (_isCliEntry8()) {
-  process.exit(main8());
+if (_isCliEntry7()) {
+  process.exit(main7());
 }
 
 // src/scripts/hooks/delegation_nudge_hook.ts
-import fs9 from "node:fs";
-import path10 from "node:path";
-import { fileURLToPath as fileURLToPath9, pathToFileURL as pathToFileURL9 } from "node:url";
+import fs8 from "node:fs";
+import path8 from "node:path";
+import { fileURLToPath as fileURLToPath8, pathToFileURL as pathToFileURL8 } from "node:url";
 
 // src/scripts/_lib/host_capability.ts
 import process2 from "node:process";
@@ -3500,7 +3250,7 @@ function _workspaceRoot(envelope) {
   }
   return process.cwd();
 }
-function main9() {
+function main8() {
   let envelope = {};
   try {
     const raw = readHookStdin();
@@ -3539,31 +3289,31 @@ function main9() {
   );
   return EXIT_WARN3;
 }
-function _isCliEntry9() {
+function _isCliEntry8() {
   if (true) {
     return false;
   }
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL9(path10.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL8(path8.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs9.realpathSync(fileURLToPath9(import.meta.url));
-    const argv = fs9.realpathSync(path10.resolve(process.argv[1]));
+    const here = fs8.realpathSync(fileURLToPath8(import.meta.url));
+    const argv = fs8.realpathSync(path8.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
   }
 }
-if (_isCliEntry9()) {
-  process.exit(main9());
+if (_isCliEntry8()) {
+  process.exit(main8());
 }
 
 // src/scripts/conformance_scan.ts
-var REPO_ROOT = path11.resolve(path11.dirname(fileURLToPath10(import.meta.url)), "..", "..");
+var REPO_ROOT = path9.resolve(path9.dirname(fileURLToPath9(import.meta.url)), "..", "..");
 var OBSERVED_BAND = { low: 9.1, high: 39.2 };
 var BAND_MIN_TURNS = 1978;
 var CARRIER_CHANGES = [
@@ -3913,7 +3663,7 @@ function scanSession(sessionId, lines) {
   closeWindow();
   return report;
 }
-var DEFAULT_RATE_SERIES = path11.join(
+var DEFAULT_RATE_SERIES = path9.join(
   REPO_ROOT,
   "agents",
   "runtime",
@@ -3922,7 +3672,7 @@ var DEFAULT_RATE_SERIES = path11.join(
 );
 function defaultStore(projectDir) {
   const slug = projectStoreSlug(projectDir);
-  return path11.join(process.env["HOME"] ?? "", ".claude", "projects", slug);
+  return path9.join(process.env["HOME"] ?? "", ".claude", "projects", slug);
 }
 function _tokens(chars) {
   return Math.round(chars / 4);
@@ -3933,13 +3683,13 @@ function measureDelivered(projectRulesDir, globalRulesDir) {
   return {
     project: {
       dir: projectRulesDir,
-      present: fs10.existsSync(projectRulesDir),
+      present: fs9.existsSync(projectRulesDir),
       files: p.files,
       tokens: _tokens(p.chars)
     },
     global: {
       dir: globalRulesDir,
-      present: fs10.existsSync(globalRulesDir),
+      present: fs9.existsSync(globalRulesDir),
       files: g.files,
       tokens: _tokens(g.chars)
     },
@@ -3947,13 +3697,13 @@ function measureDelivered(projectRulesDir, globalRulesDir) {
   };
 }
 function storeKey(store) {
-  return createHash4("sha256").update(path11.resolve(store)).digest("hex").slice(0, 12);
+  return createHash3("sha256").update(path9.resolve(store)).digest("hex").slice(0, 12);
 }
 function scanStore(store, limit) {
-  const files = fs10.readdirSync(store).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, m: fs10.statSync(path11.join(store, f)).mtimeMs })).sort((a, b) => b.m - a.m).slice(0, limit).map((x) => x.f);
+  const files = fs9.readdirSync(store).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, m: fs9.statSync(path9.join(store, f)).mtimeMs })).sort((a, b) => b.m - a.m).slice(0, limit).map((x) => x.f);
   const per_session = [];
   for (const f of files) {
-    const lines = fs10.readFileSync(path11.join(store, f), "utf8").split("\n");
+    const lines = fs9.readFileSync(path9.join(store, f), "utf8").split("\n");
     const r = scanSession(f.replace(/\.jsonl$/, "").slice(0, 8), lines);
     if (r.assistant_turns > 0) {
       per_session.push(r);
@@ -3981,10 +3731,10 @@ function scanStore(store, limit) {
   const task_completeness_rate_pct = completeness_windows === 0 ? 0 : Number((100 * task_completeness / completeness_windows).toFixed(1));
   const era = spansCarrierChange(per_session.map((s) => s.first_at));
   const delivered = measureDelivered(
-    path11.join(REPO_ROOT, ".claude", "rules"),
-    path11.join(process.env["HOME"] ?? os2.homedir(), ".claude", "rules")
+    path9.join(REPO_ROOT, ".claude", "rules"),
+    path9.join(process.env["HOME"] ?? os2.homedir(), ".claude", "rules")
   );
-  const ownStore = path11.resolve(store) === path11.resolve(defaultStore(REPO_ROOT));
+  const ownStore = path9.resolve(store) === path9.resolve(defaultStore(REPO_ROOT));
   return {
     scanned_at: (/* @__PURE__ */ new Date()).toISOString(),
     store,
@@ -4014,8 +3764,8 @@ function scanStore(store, limit) {
   };
 }
 function recordRate(file, scanned_at, rate) {
-  fs10.mkdirSync(path11.dirname(file), { recursive: true });
-  fs10.appendFileSync(file, `${JSON.stringify({ measured_at: scanned_at, ...rate })}
+  fs9.mkdirSync(path9.dirname(file), { recursive: true });
+  fs9.appendFileSync(file, `${JSON.stringify({ measured_at: scanned_at, ...rate })}
 `, "utf8");
 }
 function render(report) {
@@ -4114,7 +3864,7 @@ function render(report) {
   lines.push("    checkbox batching                     \u2014 measured NOWHERE. ~5 low-severity findings.");
   return lines.join("\n");
 }
-function main10(argv) {
+function main9(argv) {
   const args = argv ?? process.argv.slice(2);
   let store = null;
   let limit = 30;
@@ -4146,14 +3896,14 @@ function main10(argv) {
     return 2;
   }
   const resolved = store ?? defaultStore(process.cwd());
-  if (!fs10.existsSync(resolved)) {
+  if (!fs9.existsSync(resolved)) {
     process.stderr.write(`conformance:behavior: no transcript store at ${resolved}
 `);
     return 1;
   }
   const report = scanStore(resolved, Number.isFinite(limit) && limit > 0 ? limit : 30);
   if (out) {
-    fs10.writeFileSync(out, `${JSON.stringify(report, null, 2)}
+    fs9.writeFileSync(out, `${JSON.stringify(report, null, 2)}
 `, "utf8");
   }
   if (record) {
@@ -4161,7 +3911,7 @@ function main10(argv) {
   }
   if (why !== null) {
     const id = why;
-    fs10.writeSync(
+    fs9.writeSync(
       1,
       json ? `${JSON.stringify(
         {
@@ -4181,48 +3931,48 @@ function main10(argv) {
     );
     return 0;
   }
-  fs10.writeSync(1, json ? `${JSON.stringify(report, null, 2)}
+  fs9.writeSync(1, json ? `${JSON.stringify(report, null, 2)}
 ` : `${render(report)}
 `);
   return 0;
 }
-function _isCliEntry10() {
+function _isCliEntry9() {
   if (true) {
     return false;
   }
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL10(path11.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL9(path9.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs10.realpathSync(fileURLToPath10(import.meta.url));
-    const argv = fs10.realpathSync(path11.resolve(process.argv[1]));
+    const here = fs9.realpathSync(fileURLToPath9(import.meta.url));
+    const argv = fs9.realpathSync(path9.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
   }
 }
-if (_isCliEntry10()) {
-  process.exit(main10());
+if (_isCliEntry9()) {
+  process.exit(main9());
 }
 
 // src/scripts/report_carrier_divergence.ts
-import * as fs11 from "node:fs";
+import * as fs10 from "node:fs";
 import * as os3 from "node:os";
-import * as path12 from "node:path";
+import * as path10 from "node:path";
 import process3 from "node:process";
-import { fileURLToPath as fileURLToPath11, pathToFileURL as pathToFileURL11 } from "node:url";
-var _HERE = fileURLToPath11(import.meta.url);
-var REPO_ROOT2 = path12.resolve(path12.dirname(_HERE), "..", "..");
-var PROJECT_RULES = path12.join(".claude", "rules");
-var PROJECTION_SOURCE = path12.join("dist", "agent-src", "rules");
-var GLOBAL_RULES = path12.join(".claude", "rules");
+import { fileURLToPath as fileURLToPath10, pathToFileURL as pathToFileURL10 } from "node:url";
+var _HERE = fileURLToPath10(import.meta.url);
+var REPO_ROOT2 = path10.resolve(path10.dirname(_HERE), "..", "..");
+var PROJECT_RULES = path10.join(".claude", "rules");
+var PROJECTION_SOURCE = path10.join("dist", "agent-src", "rules");
+var GLOBAL_RULES = path10.join(".claude", "rules");
 function _listRules(dir) {
   try {
-    return fs11.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
+    return fs10.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
   } catch {
     return [];
   }
@@ -4230,7 +3980,7 @@ function _listRules(dir) {
 function _ruleType(file) {
   let text;
   try {
-    text = fs11.readFileSync(file, "utf-8");
+    text = fs10.readFileSync(file, "utf-8");
   } catch {
     return "";
   }
@@ -4241,8 +3991,8 @@ function compareCarriers(projectDir, globalDir, sourceDir) {
   const out = {
     projectDir,
     globalDir,
-    globalPresent: fs11.existsSync(globalDir),
-    projectPresent: fs11.existsSync(projectDir),
+    globalPresent: fs10.existsSync(globalDir),
+    projectPresent: fs10.existsSync(projectDir),
     shared: 0,
     identical: [],
     provenanceOnly: [],
@@ -4265,7 +4015,7 @@ function compareCarriers(projectDir, globalDir, sourceDir) {
     }
     if (!inP && inG) {
       out.globalOnly.push(rule);
-      if (sourceDir !== void 0 && _ruleType(path12.join(sourceDir, rule)) === "manual") {
+      if (sourceDir !== void 0 && _ruleType(path10.join(sourceDir, rule)) === "manual") {
         out.manualOnlyGlobal.push(rule);
       }
       continue;
@@ -4275,8 +4025,8 @@ function compareCarriers(projectDir, globalDir, sourceDir) {
     let projectCopy;
     let globalCopy;
     try {
-      projectCopy = fs11.readFileSync(path12.join(projectDir, rule));
-      globalCopy = fs11.readFileSync(path12.join(globalDir, rule));
+      projectCopy = fs10.readFileSync(path10.join(projectDir, rule));
+      globalCopy = fs10.readFileSync(path10.join(globalDir, rule));
       verdict = comparePair(projectCopy, globalCopy);
     } catch {
       out.shared -= 1;
@@ -4421,11 +4171,11 @@ function render2(d) {
   }
   return lines.join("\n");
 }
-function main11(argv) {
+function main10(argv) {
   const args = argv ?? process3.argv.slice(2);
-  let projectDir = path12.join(REPO_ROOT2, PROJECT_RULES);
-  let globalDir = path12.join(os3.homedir(), GLOBAL_RULES);
-  let sourceDir = path12.join(REPO_ROOT2, PROJECTION_SOURCE);
+  let projectDir = path10.join(REPO_ROOT2, PROJECT_RULES);
+  let globalDir = path10.join(os3.homedir(), GLOBAL_RULES);
+  let sourceDir = path10.join(REPO_ROOT2, PROJECTION_SOURCE);
   const value = (i) => {
     const v = args[i + 1];
     return v === void 0 || v.startsWith("-") ? null : v;
@@ -4439,7 +4189,7 @@ function main11(argv) {
 `);
         return 1;
       }
-      const resolved = path12.resolve(v);
+      const resolved = path10.resolve(v);
       if (a === "--project") projectDir = resolved;
       else if (a === "--global") globalDir = resolved;
       else sourceDir = resolved;
@@ -4459,44 +4209,44 @@ function main11(argv) {
 `);
   return 0;
 }
-function _isCliEntry11() {
+function _isCliEntry10() {
   if (process3.argv[1] === void 0) return false;
-  if (import.meta.url === pathToFileURL11(path12.resolve(process3.argv[1])).href) return true;
+  if (import.meta.url === pathToFileURL10(path10.resolve(process3.argv[1])).href) return true;
   try {
-    return fs11.realpathSync(_HERE) === fs11.realpathSync(path12.resolve(process3.argv[1]));
+    return fs10.realpathSync(_HERE) === fs10.realpathSync(path10.resolve(process3.argv[1]));
   } catch {
     return false;
   }
 }
-if (_isCliEntry11()) {
-  process3.exit(main11());
+if (_isCliEntry10()) {
+  process3.exit(main10());
 }
 
 // src/scripts/report_skill_activation.ts
-import * as fs12 from "node:fs";
+import * as fs11 from "node:fs";
 import * as os4 from "node:os";
-import * as path13 from "node:path";
-import { fileURLToPath as fileURLToPath12, pathToFileURL as pathToFileURL12 } from "node:url";
-var _HERE2 = fileURLToPath12(import.meta.url);
-var REPO_ROOT3 = path13.resolve(path13.dirname(_HERE2), "..", "..");
+import * as path11 from "node:path";
+import { fileURLToPath as fileURLToPath11, pathToFileURL as pathToFileURL11 } from "node:url";
+var _HERE2 = fileURLToPath11(import.meta.url);
+var REPO_ROOT3 = path11.resolve(path11.dirname(_HERE2), "..", "..");
 var SKILLS_ROOT = "src/skills";
 var TRIGGER_KEYS = ["triggers:", "trigger_description:", "file_pattern:", "path_prefix:"];
 var DETERMINISTIC_RE = /^\s*(?:[-*]\s*)?(?:\*\*)?(MUST|NEVER|ALWAYS)\b/m;
 function censusSkills(root) {
   const out = { total: 0, withTriggerKey: [], withDeterministicObligation: [] };
-  if (!fs12.existsSync(root)) {
+  if (!fs11.existsSync(root)) {
     return out;
   }
-  for (const entry of fs12.readdirSync(root, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+  for (const entry of fs11.readdirSync(root, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
     if (!entry.isDirectory()) {
       continue;
     }
-    const file = path13.join(root, entry.name, "SKILL.md");
-    if (!fs12.existsSync(file)) {
+    const file = path11.join(root, entry.name, "SKILL.md");
+    if (!fs11.existsSync(file)) {
       continue;
     }
     out.total += 1;
-    const text = fs12.readFileSync(file, "utf8");
+    const text = fs11.readFileSync(file, "utf8");
     const fmEnd = text.startsWith("---") ? text.indexOf("\n---", 3) : -1;
     const fm = fmEnd === -1 ? "" : text.slice(0, fmEnd);
     if (TRIGGER_KEYS.some((k) => new RegExp(`^${k}`, "m").test(fm))) {
@@ -4510,17 +4260,17 @@ function censusSkills(root) {
   return out;
 }
 function defaultStore2(cwd) {
-  return path13.join(os4.homedir(), ".claude", "projects", projectStoreSlug(cwd));
+  return path11.join(os4.homedir(), ".claude", "projects", projectStoreSlug(cwd));
 }
 function measureUsage(store, limit) {
   const rep = { store, sessions: 0, assistantTurns: 0, invocations: 0, bySkill: {} };
-  if (!fs12.existsSync(store)) {
+  if (!fs11.existsSync(store)) {
     return rep;
   }
-  const files = fs12.readdirSync(store).filter((f) => f.endsWith(".jsonl")).map((f) => path13.join(store, f)).sort((a, b) => fs12.statSync(b).mtimeMs - fs12.statSync(a).mtimeMs).slice(0, limit);
+  const files = fs11.readdirSync(store).filter((f) => f.endsWith(".jsonl")).map((f) => path11.join(store, f)).sort((a, b) => fs11.statSync(b).mtimeMs - fs11.statSync(a).mtimeMs).slice(0, limit);
   rep.sessions = files.length;
   for (const file of files) {
-    for (const line of fs12.readFileSync(file, "utf8").split("\n")) {
+    for (const line of fs11.readFileSync(file, "utf8").split("\n")) {
       if (!line.trim()) {
         continue;
       }
@@ -4583,7 +4333,7 @@ function render3(census, usage) {
     }
     totalInv += u.invocations;
     lines.push(
-      `  ${path13.basename(u.store).slice(-38).padEnd(38)} sessions=${String(u.sessions).padStart(3)} asst=${String(u.assistantTurns).padStart(6)} Skill calls=${String(u.invocations).padStart(3)}`
+      `  ${path11.basename(u.store).slice(-38).padEnd(38)} sessions=${String(u.sessions).padStart(3)} asst=${String(u.assistantTurns).padStart(6)} Skill calls=${String(u.invocations).padStart(3)}`
     );
   }
   lines.push("");
@@ -4608,7 +4358,7 @@ function render3(census, usage) {
   lines.push("  catalogue once per session, then count descriptions against bare names.");
   return lines.join("\n");
 }
-function main12(argv) {
+function main11(argv) {
   let limit = 30;
   const stores = [];
   for (let i = 0; i < argv.length; i += 1) {
@@ -4631,24 +4381,24 @@ function main12(argv) {
   if (stores.length === 0) {
     stores.push(defaultStore2(REPO_ROOT3));
   }
-  const census = censusSkills(path13.join(REPO_ROOT3, SKILLS_ROOT));
+  const census = censusSkills(path11.join(REPO_ROOT3, SKILLS_ROOT));
   const usage = stores.map((s) => measureUsage(s, limit));
   process.stdout.write(`${render3(census, usage)}
 `);
   return 0;
 }
-if (process.argv[1] !== void 0 && import.meta.url === pathToFileURL12(path13.resolve(process.argv[1])).href) {
-  process.exit(main12(process.argv.slice(2)));
+if (process.argv[1] !== void 0 && import.meta.url === pathToFileURL11(path11.resolve(process.argv[1])).href) {
+  process.exit(main11(process.argv.slice(2)));
 }
 
 // src/scripts/report_skill_obligation_violations.ts
-import * as fs13 from "node:fs";
+import * as fs12 from "node:fs";
 import * as os5 from "node:os";
-import * as path14 from "node:path";
+import * as path12 from "node:path";
 import process4 from "node:process";
-import { fileURLToPath as fileURLToPath13, pathToFileURL as pathToFileURL13 } from "node:url";
-var _HERE3 = fileURLToPath13(import.meta.url);
-var REPO_ROOT4 = path14.resolve(path14.dirname(_HERE3), "..", "..");
+import { fileURLToPath as fileURLToPath12, pathToFileURL as pathToFileURL12 } from "node:url";
+var _HERE3 = fileURLToPath12(import.meta.url);
+var REPO_ROOT4 = path12.resolve(path12.dirname(_HERE3), "..", "..");
 var OBLIGATION_LINE_RE = new RegExp(`${DETERMINISTIC_RE.source}.*`, "gm");
 var PATH_RE = /`([A-Za-z0-9_./-]*\/[A-Za-z0-9_.-]+\.[a-z]{2,6})`/g;
 var CMD_RE = /`([a-z][a-z0-9-]*(?: [a-z][a-z0-9:._-]*){1,3})`/g;
@@ -4686,7 +4436,7 @@ function _artefacts(line) {
   return out;
 }
 function extractObligations(repoRoot) {
-  const skillsRoot = path14.join(repoRoot, SKILLS_ROOT);
+  const skillsRoot = path12.join(repoRoot, SKILLS_ROOT);
   const census = censusSkills(skillsRoot);
   const out = {
     skills: census.withDeterministicObligation,
@@ -4700,7 +4450,7 @@ function extractObligations(repoRoot) {
   for (const skill of census.withDeterministicObligation) {
     let text;
     try {
-      text = fs13.readFileSync(path14.join(skillsRoot, skill, "SKILL.md"), "utf-8");
+      text = fs12.readFileSync(path12.join(skillsRoot, skill, "SKILL.md"), "utf-8");
     } catch {
       continue;
     }
@@ -4816,7 +4566,7 @@ function scanSessionForViolations(session, lines, forbidden, parsed) {
   return flags;
 }
 function defaultStore3(cwd) {
-  return path14.join(os5.homedir(), ".claude", "projects", projectStoreSlug(cwd));
+  return path12.join(os5.homedir(), ".claude", "projects", projectStoreSlug(cwd));
 }
 function scanStore2(repoRoot, store, limit) {
   const census = extractObligations(repoRoot);
@@ -4829,14 +4579,14 @@ function scanStore2(repoRoot, store, limit) {
   };
   let files;
   try {
-    files = fs13.readdirSync(store).filter((f) => f.endsWith(".jsonl")).map((f) => ({ p: path14.join(store, f), m: fs13.statSync(path14.join(store, f)).mtimeMs })).sort((a, b) => b.m - a.m).slice(0, limit).map((x) => x.p);
+    files = fs12.readdirSync(store).filter((f) => f.endsWith(".jsonl")).map((f) => ({ p: path12.join(store, f), m: fs12.statSync(path12.join(store, f)).mtimeMs })).sort((a, b) => b.m - a.m).slice(0, limit).map((x) => x.p);
   } catch {
     return report;
   }
   report.sessions = files.length;
   for (const file of files) {
-    const lines = fs13.readFileSync(file, "utf-8").split("\n");
-    const id = path14.basename(file).replace(/\.jsonl$/, "").slice(0, 8);
+    const lines = fs12.readFileSync(file, "utf-8").split("\n");
+    const id = path12.basename(file).replace(/\.jsonl$/, "").slice(0, 8);
     const entries = _parseSession(lines);
     if (loadedSkillsFrom(entries).size > 0) report.sessionsWithASkill += 1;
     report.flags.push(...scanSessionForViolations(id, lines, census.forbidden, entries));
@@ -4906,7 +4656,7 @@ function render4(r) {
   lines.push("  ships as detection-only, and this one says so.");
   return lines.join("\n");
 }
-function main13(argv) {
+function main12(argv) {
   const args = argv ?? process4.argv.slice(2);
   let limit = 30;
   let json = false;
@@ -4959,35 +4709,35 @@ function main13(argv) {
   }
   return 0;
 }
-function _isCliEntry12() {
+function _isCliEntry11() {
   if (process4.argv[1] === void 0) return false;
-  if (import.meta.url === pathToFileURL13(path14.resolve(process4.argv[1])).href) return true;
+  if (import.meta.url === pathToFileURL12(path12.resolve(process4.argv[1])).href) return true;
   try {
-    return fs13.realpathSync(_HERE3) === fs13.realpathSync(path14.resolve(process4.argv[1]));
+    return fs12.realpathSync(_HERE3) === fs12.realpathSync(path12.resolve(process4.argv[1]));
   } catch {
     return false;
   }
 }
-if (_isCliEntry12()) {
-  process4.exit(main13());
+if (_isCliEntry11()) {
+  process4.exit(main12());
 }
 
 // src/scripts/report_conformance_funnel.ts
-var _HERE4 = fileURLToPath14(import.meta.url);
-var REPO_ROOT5 = path15.resolve(path15.dirname(_HERE4), "..", "..");
+var _HERE4 = fileURLToPath13(import.meta.url);
+var REPO_ROOT5 = path13.resolve(path13.dirname(_HERE4), "..", "..");
 function buildFunnel(opts = {}) {
   const repoRoot = opts.repoRoot ?? REPO_ROOT5;
-  const projectRulesDir = opts.projectRulesDir ?? path15.join(repoRoot, PROJECT_RULES);
-  const globalRulesDir = opts.globalRulesDir ?? path15.join(os6.homedir(), GLOBAL_RULES);
-  const sourceDir = opts.sourceDir ?? path15.join(repoRoot, PROJECTION_SOURCE);
+  const projectRulesDir = opts.projectRulesDir ?? path13.join(repoRoot, PROJECT_RULES);
+  const globalRulesDir = opts.globalRulesDir ?? path13.join(os6.homedir(), GLOBAL_RULES);
+  const sourceDir = opts.sourceDir ?? path13.join(repoRoot, PROJECTION_SOURCE);
   const store = opts.store ?? defaultStore(repoRoot);
   const limit = opts.limit ?? 30;
   return {
     delivered: measureDelivered(projectRulesDir, globalRulesDir),
     divergence: compareCarriers(projectRulesDir, globalRulesDir, sourceDir),
-    skills: censusSkills(path15.join(repoRoot, SKILLS_ROOT)),
+    skills: censusSkills(path13.join(repoRoot, SKILLS_ROOT)),
     usage: measureUsage(store, limit),
-    storePresent: fs14.existsSync(store),
+    storePresent: fs13.existsSync(store),
     sk2: scanStore2(repoRoot, store, limit)
   };
 }
@@ -5112,7 +4862,7 @@ function render5(r) {
   lines.push("workflow without a measured false-positive rate first (locked policy).");
   return lines.join("\n");
 }
-function main14(argv) {
+function main13(argv) {
   const args = argv ?? process5.argv.slice(2);
   const opts = {};
   const value = (i) => {
@@ -5128,7 +4878,7 @@ function main14(argv) {
 `);
         return 1;
       }
-      const resolved = path15.resolve(v);
+      const resolved = path13.resolve(v);
       if (a === "--store") opts.store = resolved;
       else if (a === "--project") opts.projectRulesDir = resolved;
       else if (a === "--global") opts.globalRulesDir = resolved;
@@ -5158,21 +4908,21 @@ function main14(argv) {
 `);
   return 0;
 }
-function _isCliEntry13() {
+function _isCliEntry12() {
   if (process5.argv[1] === void 0) return false;
-  if (import.meta.url === pathToFileURL14(path15.resolve(process5.argv[1])).href) return true;
+  if (import.meta.url === pathToFileURL13(path13.resolve(process5.argv[1])).href) return true;
   try {
-    return fs14.realpathSync(_HERE4) === fs14.realpathSync(path15.resolve(process5.argv[1]));
+    return fs13.realpathSync(_HERE4) === fs13.realpathSync(path13.resolve(process5.argv[1]));
   } catch {
     return false;
   }
 }
-if (_isCliEntry13()) {
-  process5.exit(main14());
+if (_isCliEntry12()) {
+  process5.exit(main13());
 }
 
 // src/scripts/_cli/cmd_conformance.ts
-var _HERE5 = fileURLToPath15(import.meta.url);
+var _HERE5 = fileURLToPath14(import.meta.url);
 var PACKAGE_ROOT = resolvePackageRoot(import.meta.url);
 var CONFORMANCE_CHECK_IDS = [
   "txlog-clean",
@@ -5195,17 +4945,17 @@ function conformanceLogPath() {
   if (override && override.trim().length > 0) {
     return override;
   }
-  return path16.join(os7.homedir(), ".event4u", "agent-config", "conformance-log.jsonl");
+  return path14.join(os7.homedir(), ".event4u", "agent-config", "conformance-log.jsonl");
 }
 function installLogPath() {
   const override = process6.env["AGENT_CONFIG_INSTALL_LOG"];
   if (override && override.trim().length > 0) {
     return override;
   }
-  return path16.join(os7.homedir(), ".event4u", "agent-config", "install-log.jsonl");
+  return path14.join(os7.homedir(), ".event4u", "agent-config", "install-log.jsonl");
 }
 function _check_txlog_clean(logPath = installLogPath()) {
-  if (!fs15.existsSync(logPath)) {
+  if (!fs14.existsSync(logPath)) {
     return {
       id: "txlog-clean",
       status: "ok",
@@ -5239,11 +4989,11 @@ function _check_txlog_clean(logPath = installLogPath()) {
   };
 }
 function routeTargetPaths(target) {
-  return routeTargetPathsPosix(target).map((rel) => path16.join(...rel.split("/")));
+  return routeTargetPathsPosix(target).map((rel) => path14.join(...rel.split("/")));
 }
 function _check_router_pointers(packageRoot = PACKAGE_ROOT) {
-  const routerPath = path16.join(packageRoot, "dist", "router.json");
-  if (!fs15.existsSync(routerPath)) {
+  const routerPath = path14.join(packageRoot, "dist", "router.json");
+  if (!fs14.existsSync(routerPath)) {
     return {
       id: "router-pointers",
       status: "fail",
@@ -5253,7 +5003,7 @@ function _check_router_pointers(packageRoot = PACKAGE_ROOT) {
   }
   let router;
   try {
-    router = JSON.parse(fs15.readFileSync(routerPath, "utf8"));
+    router = JSON.parse(fs14.readFileSync(routerPath, "utf8"));
   } catch (exc) {
     return {
       id: "router-pointers",
@@ -5262,13 +5012,13 @@ function _check_router_pointers(packageRoot = PACKAGE_ROOT) {
       remedy: "reinstall the package \u2014 dist/router.json is corrupt"
     };
   }
-  const rulesDir = path16.join(packageRoot, "dist", "agent-src", "rules");
+  const rulesDir = path14.join(packageRoot, "dist", "agent-src", "rules");
   const broken = [];
   let ids = 0;
   let targets = 0;
   for (const kernelId of router["kernel"] ?? []) {
     ids += 1;
-    if (!fs15.existsSync(path16.join(rulesDir, `${kernelId}.md`))) {
+    if (!fs14.existsSync(path14.join(rulesDir, `${kernelId}.md`))) {
       broken.push(`kernel:${kernelId} \u2192 rules/${kernelId}.md missing`);
     }
   }
@@ -5276,7 +5026,7 @@ function _check_router_pointers(packageRoot = PACKAGE_ROOT) {
     for (const entry of router[tier] ?? []) {
       const ruleId = String(entry["id"] ?? "");
       ids += 1;
-      if (!fs15.existsSync(path16.join(rulesDir, `${ruleId}.md`))) {
+      if (!fs14.existsSync(path14.join(rulesDir, `${ruleId}.md`))) {
         broken.push(`${tier}:${ruleId} \u2192 rules/${ruleId}.md missing`);
       }
       for (const target of entry["routes_to"] ?? []) {
@@ -5286,7 +5036,7 @@ function _check_router_pointers(packageRoot = PACKAGE_ROOT) {
           broken.push(`${ruleId} \u2192 unparseable routes_to ${JSON.stringify(target)}`);
           continue;
         }
-        if (!candidates.some((rel) => fs15.existsSync(path16.join(packageRoot, rel)))) {
+        if (!candidates.some((rel) => fs14.existsSync(path14.join(packageRoot, rel)))) {
           broken.push(`${ruleId} \u2192 ${target} (${candidates[0]} missing)`);
         }
       }
@@ -5318,9 +5068,9 @@ function detectSmokePlatform(projectRoot) {
   return "claude";
 }
 function dispatcherRunner(packageRoot) {
-  const localTsx = path16.join(packageRoot, "node_modules", ".bin", "tsx");
-  const script = path16.join(packageRoot, "src", "scripts", "hooks", "dispatch_hook.ts");
-  if (fs15.existsSync(localTsx)) {
+  const localTsx = path14.join(packageRoot, "node_modules", ".bin", "tsx");
+  const script = path14.join(packageRoot, "src", "scripts", "hooks", "dispatch_hook.ts");
+  if (fs14.existsSync(localTsx)) {
     return [localTsx, script];
   }
   return ["npx", "tsx", script];
@@ -5370,12 +5120,12 @@ function _check_hook_dispatcher(projectRoot, packageRoot = PACKAGE_ROOT, opts =
   };
 }
 function readSettingsMode(projectRoot) {
-  const settingsPath = path16.join(projectRoot, ".agent-settings.yml");
-  if (!fs15.existsSync(settingsPath)) {
+  const settingsPath = path14.join(projectRoot, ".agent-settings.yml");
+  if (!fs14.existsSync(settingsPath)) {
     return "eager-all";
   }
   try {
-    const parsed = YAML.parse(fs15.readFileSync(settingsPath, "utf8"));
+    const parsed = YAML.parse(fs14.readFileSync(settingsPath, "utf8"));
     const lean = parsed?.["lean_projection"] ?? null;
     const mode = lean?.["mode"];
     return typeof mode === "string" && mode.length > 0 ? mode : "eager-all";
@@ -5386,7 +5136,7 @@ function readSettingsMode(projectRoot) {
 function kernelIdsFromRouter(packageRoot) {
   try {
     const router = JSON.parse(
-      fs15.readFileSync(path16.join(packageRoot, "dist", "router.json"), "utf8")
+      fs14.readFileSync(path14.join(packageRoot, "dist", "router.json"), "utf8")
     );
     return new Set((router["kernel"] ?? []).map(String));
   } catch {
@@ -5403,8 +5153,8 @@ function _check_lean_projection(projectRoot, packageRoot = PACKAGE_ROOT, project
       remedy: "set lean_projection.mode to 'eager-all' or 'thin' in .agent-settings.yml"
     };
   }
-  const rulesDir = projectedRulesDir ?? path16.join(projectRoot, ".augment", "rules");
-  if (!fs15.existsSync(rulesDir)) {
+  const rulesDir = projectedRulesDir ?? path14.join(projectRoot, ".augment", "rules");
+  if (!fs14.existsSync(rulesDir)) {
     return {
       id: "lean-projection",
       status: "skipped",
@@ -5413,7 +5163,7 @@ function _check_lean_projection(projectRoot, packageRoot = PACKAGE_ROOT, project
     };
   }
   const kernel = kernelIdsFromRouter(packageRoot);
-  const files = fs15.readdirSync(rulesDir).filter((f) => f.endsWith(".md") && f !== "INDEX.md").sort();
+  const files = fs14.readdirSync(rulesDir).filter((f) => f.endsWith(".md") && f !== "INDEX.md").sort();
   const nonKernel = files.filter((f) => !kernel.has(f.replace(/\.md$/, "")));
   if (nonKernel.length === 0) {
     return {
@@ -5427,7 +5177,7 @@ function _check_lean_projection(projectRoot, packageRoot = PACKAGE_ROOT, project
   for (const f of nonKernel) {
     let text = "";
     try {
-      text = fs15.readFileSync(path16.join(rulesDir, f), "utf8");
+      text = fs14.readFileSync(path14.join(rulesDir, f), "utf8");
     } catch {
       continue;
     }
@@ -5458,8 +5208,8 @@ function _check_lean_projection(projectRoot, packageRoot = PACKAGE_ROOT, project
 function _check_host_manifest(projectRoot) {
   const detected = Object.entries(detectToolPresence(projectRoot)).filter(([, v]) => v === true).map(([k]) => k);
   const detectedNote = detected.length > 0 ? `detected surfaces: ${detected.join(", ")}` : "no surfaces detected";
-  const settingsPath = path16.join(projectRoot, ".agent-settings.yml");
-  if (!fs15.existsSync(settingsPath)) {
+  const settingsPath = path14.join(projectRoot, ".agent-settings.yml");
+  if (!fs14.existsSync(settingsPath)) {
     return {
       id: "host-manifest",
       status: "ok",
@@ -5469,7 +5219,7 @@ function _check_host_manifest(projectRoot) {
   }
   let parsed = null;
   try {
-    parsed = YAML.parse(fs15.readFileSync(settingsPath, "utf8"));
+    parsed = YAML.parse(fs14.readFileSync(settingsPath, "utf8"));
   } catch (exc) {
     return {
       id: "host-manifest",
@@ -5568,7 +5318,7 @@ function _parse(argv) {
   }
   return opts;
 }
-function main15(argv = null) {
+function main14(argv = null) {
   const opts = _parse(argv !== null ? Array.from(argv) : process6.argv.slice(2));
   if (opts.funnel) {
     print(render5(buildFunnel()));
@@ -5639,25 +5389,25 @@ function main15(argv = null) {
   }
   return failed ? 1 : 0;
 }
-function _isCliEntry14() {
+function _isCliEntry13() {
   if (process6.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL15(path16.resolve(process6.argv[1])).href;
+  const argvUrl = pathToFileURL14(path14.resolve(process6.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs15.realpathSync(fileURLToPath15(import.meta.url));
-    const argv = fs15.realpathSync(path16.resolve(process6.argv[1]));
+    const here = fs14.realpathSync(fileURLToPath14(import.meta.url));
+    const argv = fs14.realpathSync(path14.resolve(process6.argv[1]));
     return here === argv;
   } catch {
     return false;
   }
 }
-if (_isCliEntry14() || process6.argv[1] === _HERE5) {
+if (_isCliEntry13() || process6.argv[1] === _HERE5) {
   try {
-    process6.exitCode = main15(process6.argv.slice(2));
+    process6.exitCode = main14(process6.argv.slice(2));
   } catch (e) {
     if (e instanceof ArgparseExit) {
       process6.exitCode = e.code;
@@ -5680,7 +5430,7 @@ export {
   conformanceLogPath,
   detectSmokePlatform,
   installLogPath,
-  main15 as main,
+  main14 as main,
   routeTargetPaths,
   runConformanceChecks
 };