@event4u/agent-config 14.6.0 → 14.7.0

package/dist/install/install.mjs

@@ -117,17 +117,17 @@ var require_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    function visit_(key, node, visitor, path18) {
-      const ctrl = callVisitor(key, node, visitor, path18);
+    function visit_(key, node, visitor, path19) {
+      const ctrl = callVisitor(key, node, visitor, path19);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path18, ctrl);
-        return visit_(key, ctrl, visitor, path18);
+        replaceNode(key, path19, ctrl);
+        return visit_(key, ctrl, visitor, path19);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path18 = Object.freeze(path18.concat(node));
+          path19 = Object.freeze(path19.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = visit_(i, node.items[i], visitor, path18);
+            const ci = visit_(i, node.items[i], visitor, path19);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -138,13 +138,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path18 = Object.freeze(path18.concat(node));
-          const ck = visit_("key", node.key, visitor, path18);
+          path19 = Object.freeze(path19.concat(node));
+          const ck = visit_("key", node.key, visitor, path19);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = visit_("value", node.value, visitor, path18);
+          const cv = visit_("value", node.value, visitor, path19);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -165,17 +165,17 @@ var require_visit = __commonJS({
     visitAsync.BREAK = BREAK;
     visitAsync.SKIP = SKIP;
     visitAsync.REMOVE = REMOVE;
-    async function visitAsync_(key, node, visitor, path18) {
-      const ctrl = await callVisitor(key, node, visitor, path18);
+    async function visitAsync_(key, node, visitor, path19) {
+      const ctrl = await callVisitor(key, node, visitor, path19);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path18, ctrl);
-        return visitAsync_(key, ctrl, visitor, path18);
+        replaceNode(key, path19, ctrl);
+        return visitAsync_(key, ctrl, visitor, path19);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path18 = Object.freeze(path18.concat(node));
+          path19 = Object.freeze(path19.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = await visitAsync_(i, node.items[i], visitor, path18);
+            const ci = await visitAsync_(i, node.items[i], visitor, path19);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -186,13 +186,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path18 = Object.freeze(path18.concat(node));
-          const ck = await visitAsync_("key", node.key, visitor, path18);
+          path19 = Object.freeze(path19.concat(node));
+          const ck = await visitAsync_("key", node.key, visitor, path19);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = await visitAsync_("value", node.value, visitor, path18);
+          const cv = await visitAsync_("value", node.value, visitor, path19);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -219,23 +219,23 @@ var require_visit = __commonJS({
       }
       return visitor;
     }
-    function callVisitor(key, node, visitor, path18) {
+    function callVisitor(key, node, visitor, path19) {
       if (typeof visitor === "function")
-        return visitor(key, node, path18);
+        return visitor(key, node, path19);
       if (identity.isMap(node))
-        return visitor.Map?.(key, node, path18);
+        return visitor.Map?.(key, node, path19);
       if (identity.isSeq(node))
-        return visitor.Seq?.(key, node, path18);
+        return visitor.Seq?.(key, node, path19);
       if (identity.isPair(node))
-        return visitor.Pair?.(key, node, path18);
+        return visitor.Pair?.(key, node, path19);
       if (identity.isScalar(node))
-        return visitor.Scalar?.(key, node, path18);
+        return visitor.Scalar?.(key, node, path19);
       if (identity.isAlias(node))
-        return visitor.Alias?.(key, node, path18);
+        return visitor.Alias?.(key, node, path19);
       return void 0;
     }
-    function replaceNode(key, path18, node) {
-      const parent = path18[path18.length - 1];
+    function replaceNode(key, path19, node) {
+      const parent = path19[path19.length - 1];
       if (identity.isCollection(parent)) {
         parent.items[key] = node;
       } else if (identity.isPair(parent)) {
@@ -845,10 +845,10 @@ var require_Collection = __commonJS({
     var createNode = require_createNode();
     var identity = require_identity();
     var Node = require_Node();
-    function collectionFromPath(schema, path18, value) {
+    function collectionFromPath(schema, path19, value) {
       let v = value;
-      for (let i = path18.length - 1; i >= 0; --i) {
-        const k = path18[i];
+      for (let i = path19.length - 1; i >= 0; --i) {
+        const k = path19[i];
         if (typeof k === "number" && Number.isInteger(k) && k >= 0) {
           const a = [];
           a[k] = v;
@@ -867,7 +867,7 @@ var require_Collection = __commonJS({
         sourceObjects: /* @__PURE__ */ new Map()
       });
     }
-    var isEmptyPath = (path18) => path18 == null || typeof path18 === "object" && !!path18[Symbol.iterator]().next().done;
+    var isEmptyPath = (path19) => path19 == null || typeof path19 === "object" && !!path19[Symbol.iterator]().next().done;
     var Collection = class extends Node.NodeBase {
       constructor(type, schema) {
         super(type);
@@ -897,11 +897,11 @@ var require_Collection = __commonJS({
        * be a Pair instance or a `{ key, value }` object, which may not have a key
        * that already exists in the map.
        */
-      addIn(path18, value) {
-        if (isEmptyPath(path18))
+      addIn(path19, value) {
+        if (isEmptyPath(path19))
           this.add(value);
         else {
-          const [key, ...rest] = path18;
+          const [key, ...rest] = path19;
           const node = this.get(key, true);
           if (identity.isCollection(node))
             node.addIn(rest, value);
@@ -915,8 +915,8 @@ var require_Collection = __commonJS({
        * Removes a value from the collection.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path18) {
-        const [key, ...rest] = path18;
+      deleteIn(path19) {
+        const [key, ...rest] = path19;
         if (rest.length === 0)
           return this.delete(key);
         const node = this.get(key, true);
@@ -930,8 +930,8 @@ var require_Collection = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path18, keepScalar) {
-        const [key, ...rest] = path18;
+      getIn(path19, keepScalar) {
+        const [key, ...rest] = path19;
         const node = this.get(key, true);
         if (rest.length === 0)
           return !keepScalar && identity.isScalar(node) ? node.value : node;
@@ -949,8 +949,8 @@ var require_Collection = __commonJS({
       /**
        * Checks if the collection includes a value with the key `key`.
        */
-      hasIn(path18) {
-        const [key, ...rest] = path18;
+      hasIn(path19) {
+        const [key, ...rest] = path19;
         if (rest.length === 0)
           return this.has(key);
         const node = this.get(key, true);
@@ -960,8 +960,8 @@ var require_Collection = __commonJS({
        * Sets a value in this collection. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path18, value) {
-        const [key, ...rest] = path18;
+      setIn(path19, value) {
+        const [key, ...rest] = path19;
         if (rest.length === 0) {
           this.set(key, value);
         } else {
@@ -3476,9 +3476,9 @@ var require_Document = __commonJS({
           this.contents.add(value);
       }
       /** Adds a value to the document. */
-      addIn(path18, value) {
+      addIn(path19, value) {
         if (assertCollection(this.contents))
-          this.contents.addIn(path18, value);
+          this.contents.addIn(path19, value);
       }
       /**
        * Create a new `Alias` node, ensuring that the target `node` has the required anchor.
@@ -3553,14 +3553,14 @@ var require_Document = __commonJS({
        * Removes a value from the document.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path18) {
-        if (Collection.isEmptyPath(path18)) {
+      deleteIn(path19) {
+        if (Collection.isEmptyPath(path19)) {
           if (this.contents == null)
             return false;
           this.contents = null;
           return true;
         }
-        return assertCollection(this.contents) ? this.contents.deleteIn(path18) : false;
+        return assertCollection(this.contents) ? this.contents.deleteIn(path19) : false;
       }
       /**
        * Returns item at `key`, or `undefined` if not found. By default unwraps
@@ -3575,10 +3575,10 @@ var require_Document = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path18, keepScalar) {
-        if (Collection.isEmptyPath(path18))
+      getIn(path19, keepScalar) {
+        if (Collection.isEmptyPath(path19))
           return !keepScalar && identity.isScalar(this.contents) ? this.contents.value : this.contents;
-        return identity.isCollection(this.contents) ? this.contents.getIn(path18, keepScalar) : void 0;
+        return identity.isCollection(this.contents) ? this.contents.getIn(path19, keepScalar) : void 0;
       }
       /**
        * Checks if the document includes a value with the key `key`.
@@ -3589,10 +3589,10 @@ var require_Document = __commonJS({
       /**
        * Checks if the document includes a value at `path`.
        */
-      hasIn(path18) {
-        if (Collection.isEmptyPath(path18))
+      hasIn(path19) {
+        if (Collection.isEmptyPath(path19))
           return this.contents !== void 0;
-        return identity.isCollection(this.contents) ? this.contents.hasIn(path18) : false;
+        return identity.isCollection(this.contents) ? this.contents.hasIn(path19) : false;
       }
       /**
        * Sets a value in this document. For `!!set`, `value` needs to be a
@@ -3609,13 +3609,13 @@ var require_Document = __commonJS({
        * Sets a value in this document. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path18, value) {
-        if (Collection.isEmptyPath(path18)) {
+      setIn(path19, value) {
+        if (Collection.isEmptyPath(path19)) {
           this.contents = value;
         } else if (this.contents == null) {
-          this.contents = Collection.collectionFromPath(this.schema, Array.from(path18), value);
+          this.contents = Collection.collectionFromPath(this.schema, Array.from(path19), value);
         } else if (assertCollection(this.contents)) {
-          this.contents.setIn(path18, value);
+          this.contents.setIn(path19, value);
         }
       }
       /**
@@ -5575,9 +5575,9 @@ var require_cst_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    visit.itemAtPath = (cst, path18) => {
+    visit.itemAtPath = (cst, path19) => {
       let item = cst;
-      for (const [field, index] of path18) {
+      for (const [field, index] of path19) {
         const tok = item?.[field];
         if (tok && "items" in tok) {
           item = tok.items[index];
@@ -5586,23 +5586,23 @@ var require_cst_visit = __commonJS({
       }
       return item;
     };
-    visit.parentCollection = (cst, path18) => {
-      const parent = visit.itemAtPath(cst, path18.slice(0, -1));
-      const field = path18[path18.length - 1][0];
+    visit.parentCollection = (cst, path19) => {
+      const parent = visit.itemAtPath(cst, path19.slice(0, -1));
+      const field = path19[path19.length - 1][0];
       const coll = parent?.[field];
       if (coll && "items" in coll)
         return coll;
       throw new Error("Parent collection not found");
     };
-    function _visit(path18, item, visitor) {
-      let ctrl = visitor(item, path18);
+    function _visit(path19, item, visitor) {
+      let ctrl = visitor(item, path19);
       if (typeof ctrl === "symbol")
         return ctrl;
       for (const field of ["key", "value"]) {
         const token = item[field];
         if (token && "items" in token) {
           for (let i = 0; i < token.items.length; ++i) {
-            const ci = _visit(Object.freeze(path18.concat([[field, i]])), token.items[i], visitor);
+            const ci = _visit(Object.freeze(path19.concat([[field, i]])), token.items[i], visitor);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -5613,10 +5613,10 @@ var require_cst_visit = __commonJS({
             }
           }
           if (typeof ctrl === "function" && field === "key")
-            ctrl = ctrl(item, path18);
+            ctrl = ctrl(item, path19);
         }
       }
-      return typeof ctrl === "function" ? ctrl(item, path18) : ctrl;
+      return typeof ctrl === "function" ? ctrl(item, path19) : ctrl;
     }
     exports.visit = visit;
   }
@@ -6918,14 +6918,14 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs20 = this.flowScalar(this.type);
+              const fs22 = this.flowScalar(this.type);
               if (atNextItem || it.value) {
-                map.items.push({ start, key: fs20, sep: [] });
+                map.items.push({ start, key: fs22, sep: [] });
                 this.onKeyLine = true;
               } else if (it.sep) {
-                this.stack.push(fs20);
+                this.stack.push(fs22);
               } else {
-                Object.assign(it, { key: fs20, sep: [] });
+                Object.assign(it, { key: fs22, sep: [] });
                 this.onKeyLine = true;
               }
               return;
@@ -7053,13 +7053,13 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs20 = this.flowScalar(this.type);
+              const fs22 = this.flowScalar(this.type);
               if (!it || it.value)
-                fc.items.push({ start: [], key: fs20, sep: [] });
+                fc.items.push({ start: [], key: fs22, sep: [] });
               else if (it.sep)
-                this.stack.push(fs20);
+                this.stack.push(fs22);
               else
-                Object.assign(it, { key: fs20, sep: [] });
+                Object.assign(it, { key: fs22, sep: [] });
               return;
             }
             case "flow-map-end":
@@ -7370,9 +7370,9 @@ var require_dist = __commonJS({
 // src/scripts/install.ts
 import { spawn, spawnSync as spawnSync2 } from "node:child_process";
 import * as crypto3 from "node:crypto";
-import * as fs19 from "node:fs";
-import * as os7 from "node:os";
-import * as path17 from "node:path";
+import * as fs21 from "node:fs";
+import * as os8 from "node:os";
+import * as path18 from "node:path";
 import process3 from "node:process";
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL2 } from "node:url";
 
@@ -7842,6 +7842,7 @@ var _VERSION_RE = /^\s*agent_config_version\s*:\s*"?([^"\s]+)"?\s*$/;
 var _SCHEMA_RE = /^\s*schema_version\s*:\s*(\d+)\s*$/;
 var _LAYOUT_RE = /^\s*install_layout_version\s*:\s*(\d+)\s*$/;
 var _INSTALLED_AT_RE = /^\s*installed_at\s*:\s*"?([^"\s]+)"?\s*$/;
+var _FINGERPRINT_RE = /^\s*host_layer_fingerprint\s*:\s*"?([0-9a-f]{64})"?\s*$/;
 var _TOOL_RE = /^\s*-\s*([A-Za-z0-9_\-.]+)\s*$/;
 function expanduser2(p) {
   if (p === "~") {
@@ -7872,8 +7873,8 @@ function lockfile_write_path(env) {
   }
   return write_target("installed.lock", { env: env ?? null });
 }
-function read_lockfile(path18) {
-  const target = path18 ?? lockfile_path();
+function read_lockfile(path19) {
+  const target = path19 ?? lockfile_path();
   let text;
   try {
     text = fs2.readFileSync(target, { encoding: "utf-8" });
@@ -7907,6 +7908,12 @@ function read_lockfile(path18) {
       in_tools = false;
       continue;
     }
+    const fp_m = _FINGERPRINT_RE.exec(raw_line);
+    if (fp_m) {
+      data.host_layer_fingerprint = fp_m[1];
+      in_tools = false;
+      continue;
+    }
     if (raw_line.trim().startsWith("tools:")) {
       in_tools = true;
       continue;
@@ -7929,14 +7936,17 @@ function splitlines(text) {
   }
   return parts;
 }
-function _render(version, tools, installed_at) {
+function _render(version, tools, installed_at, fingerprint) {
   const lines = [
     `schema_version: ${SCHEMA_VERSION}`,
     `install_layout_version: ${INSTALL_LAYOUT_VERSION}`,
     `agent_config_version: "${version}"`,
-    `installed_at: "${installed_at}"`,
-    "tools:"
+    `installed_at: "${installed_at}"`
   ];
+  if (fingerprint) {
+    lines.push(`host_layer_fingerprint: "${fingerprint}"`);
+  }
+  lines.push("tools:");
   for (const tool of tools) {
     lines.push(`  - ${tool}`);
   }
@@ -7946,7 +7956,12 @@ function write_lockfile(version, tools, options = {}) {
   const target = options.path ?? lockfile_path();
   fs2.mkdirSync(path2.dirname(target), { recursive: true });
   const stamp = strftime_iso_z(options.now ?? /* @__PURE__ */ new Date());
-  const rendered = _render(version, sorted_unique(tools), stamp);
+  const rendered = _render(
+    version,
+    sorted_unique(tools),
+    stamp,
+    options.host_layer_fingerprint ?? null
+  );
   const parent = path2.dirname(target);
   const { fd, tmp_name } = mkstemp(parent, ".installed.lock.");
   try {
@@ -8002,7 +8017,11 @@ function migrate_layout(options = {}) {
   const version = existing.agent_config_version || current_package_version();
   const tools = [...existing.tools ?? []];
   const when = options.now ?? _parse_installed_at(existing.installed_at);
-  write_lockfile(version, tools, { path: target, now: when });
+  write_lockfile(version, tools, {
+    path: target,
+    now: when,
+    host_layer_fingerprint: existing.host_layer_fingerprint ?? null
+  });
   return {
     from: from_v,
     to: INSTALL_LAYOUT_VERSION,
@@ -8948,18 +8967,18 @@ function manifest_path(project_root, env) {
 var _TOP_KEY_RE = /^([A-Za-z_][A-Za-z0-9_]*)\s*:\s*"?([^"\n]*?)"?\s*$/;
 var _LIST_DASH_RE = /^\s*-\s*(.+?)\s*$/;
 var _INDENT_KEY_RE = /^\s+([A-Za-z_][A-Za-z0-9_]*)\s*:\s*"?([^"\n]*?)"?\s*$/;
-function read_manifest(path18) {
+function read_manifest(path19) {
   let text;
   try {
-    text = require_read_text(path18);
+    text = require_read_text(path19);
   } catch {
     return null;
   }
   const data = _parse_manual(text);
   return _normalise_v2_shape(data);
 }
-function require_read_text(path18) {
-  return fs8.readFileSync(path18, { encoding: "utf-8" });
+function require_read_text(path19) {
+  return fs8.readFileSync(path19, { encoding: "utf-8" });
 }
 function _normalise_v2_shape(data) {
   if (data["tools"] === void 0 || data["tools"] === null) {
@@ -9140,9 +9159,9 @@ function stable_sort(items, key) {
     return a.index - b.index;
   }).map((entry) => entry.item);
 }
-function write_manifest(path18, version, tools, options = {}) {
+function write_manifest(path19, version, tools, options = {}) {
   const rendered = _render2(version, tools, { deploy_roots: options.deploy_roots ?? null });
-  return write_atomic(path18, rendered);
+  return write_atomic(path19, rendered);
 }
 var ScopeMismatchError = class extends Error {
   name_;
@@ -10661,6 +10680,99 @@ function ruleFileArrives(sourcePath, scope) {
   return rule_in_scope(sourcePath, scope.workspaces, scope.packs, scope.roles ?? null);
 }
 
+// src/install/partitionEligibility.ts
+import * as fs16 from "node:fs";
+import * as os7 from "node:os";
+
+// src/install/hostLayerFingerprint.ts
+import { createHash as createHash4 } from "node:crypto";
+import * as fs15 from "node:fs";
+import * as path14 from "node:path";
+var FINGERPRINT_SCHEMA = 1;
+function collectFiles(dir) {
+  const out = [];
+  const walk = (d) => {
+    let entries;
+    try {
+      entries = fs15.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    const sorted = [...entries].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+    for (const e of sorted) {
+      const p = path14.join(d, e.name);
+      if (e.isDirectory()) {
+        walk(p);
+      } else if (e.isFile()) {
+        out.push(p);
+      }
+    }
+  };
+  walk(dir);
+  return out.sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
+}
+function fingerprintLayers(layers) {
+  const h = createHash4("sha256");
+  h.update(`v${FINGERPRINT_SCHEMA}\0`);
+  for (const layer of layers) {
+    h.update(`layer:${layer.label}\0`);
+    for (const file of collectFiles(layer.root)) {
+      h.update(path14.relative(layer.root, file));
+      h.update("\0");
+      try {
+        h.update(fs15.readFileSync(file));
+      } catch {
+        h.update("\0unreadable\0");
+      }
+      h.update("\0");
+    }
+  }
+  return h.digest("hex");
+}
+function hostLayerInputs(userHome) {
+  const claude = path14.join(userHome, ".claude");
+  return [
+    { label: "rules", root: path14.join(claude, "rules") },
+    { label: "skills", root: path14.join(claude, "skills") },
+    { label: "commands", root: path14.join(claude, "commands") }
+  ];
+}
+
+// src/install/partitionEligibility.ts
+var MAINTAINER_WORKSPACE = "agent-config-maintainer";
+function isExclusivelyPackageOnly(source_path) {
+  let meta;
+  try {
+    [meta] = parseFrontmatter(fs16.readFileSync(source_path, "utf-8"));
+  } catch {
+    return false;
+  }
+  const raw = meta["workspaces"];
+  if (!Array.isArray(raw) || raw.length === 0) {
+    return false;
+  }
+  return raw.every((w) => String(w) === MAINTAINER_WORKSPACE);
+}
+function stampHostLayerFingerprint(installedVersion, tools, lockfilePath, skip2, report) {
+  if (skip2) {
+    return null;
+  }
+  try {
+    const fingerprint = fingerprintLayers(hostLayerInputs(os7.homedir()));
+    write_lockfile(installedVersion, [...tools], {
+      path: lockfilePath,
+      host_layer_fingerprint: fingerprint
+    });
+    report(`Host-layer fingerprint recorded: ${fingerprint.slice(0, 12)} (enables single delivery)`);
+    return fingerprint;
+  } catch (e) {
+    report(
+      `Host-layer fingerprint NOT recorded (${String(e)}) \u2014 the project layer keeps the full projection.`
+    );
+    return null;
+  }
+}
+
 // src/install/wizard-plan.ts
 var RULE_SOURCE_REL = "dist/agent-src/rules";
 
@@ -11212,8 +11324,8 @@ function getErrorMap() {
 
 // node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path18, errorMaps, issueData } = params;
-  const fullPath = [...path18, ...issueData.path || []];
+  const { data, path: path19, errorMaps, issueData } = params;
+  const fullPath = [...path19, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -11329,11 +11441,11 @@ var errorUtil;
 
 // node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path18, key) {
+  constructor(parent, value, path19, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path18;
+    this._path = path19;
     this._key = key;
   }
   get path() {
@@ -14961,7 +15073,15 @@ var settingsSchema = external_exports.object({
     ),
     horizon_weeks: external_exports.number().int().min(0).default(0).describe(
       'Optional planning horizon (weeks) the agent shows in roadmap framing ("next 4 weeks"). Set 0 to omit the horizon \u2014 most teams prefer to ship without a hardcoded window.'
-    )
+    ),
+    gate_budget: external_exports.object({
+      max_cost_per_run_usd: external_exports.number().min(0).default(5).describe(
+        "Per-run USD ceiling for a CLASS-1 roadmap blocker executed via `agent-config gates --execute`. A class-1 entry whose **Budget:** field states a larger figure renders its consent line instead of running. Bounds the size of an authorised spend; never supplies the authorisation \u2014 `--confirm` is still required on every class-1 run."
+      ),
+      max_cost_per_rolling_7d_usd: external_exports.number().min(0).default(25).describe(
+        "Rolling 7-day USD ceiling for class-1 gate execution, summed from the append-only receipt ledger at agents/runtime/state/gate-budget-ledger.jsonl. A run whose estimate would cross it renders instead of running. A per-run cap alone bounds one mistake, not a week of them, which is why option (a) of b-gate-budget-preauth carries two numbers."
+      )
+    }).default({ max_cost_per_run_usd: 5, max_cost_per_rolling_7d_usd: 25 })
   }),
   planning: external_exports.object({
     challenge_on_create: external_exports.boolean().default(true).describe(
@@ -16603,8 +16723,8 @@ var zodToJsonSchema = (schema, options) => {
 };
 
 // src/scripts/_lib/module_detection.ts
-import * as fs15 from "node:fs";
-import * as path14 from "node:path";
+import * as fs17 from "node:fs";
+import * as path15 from "node:path";
 var _SKIP_DIRS = /* @__PURE__ */ new Set([".module-template", ".example"]);
 var _RULES = [
   ["app/Modules", "laravel-hmvc", "App\\Modules\\{ModuleName}"],
@@ -16618,14 +16738,14 @@ var _RULES = [
 ];
 function _isDir(p) {
   try {
-    return fs15.statSync(p).isDirectory();
+    return fs17.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function _isFile(p) {
   try {
-    return fs15.statSync(p).isFile();
+    return fs17.statSync(p).isFile();
   } catch {
     return false;
   }
@@ -16639,13 +16759,13 @@ function _isUpperChar(ch) {
 function _list_module_subdirs(root) {
   let entries;
   try {
-    entries = fs15.readdirSync(root).sort();
+    entries = fs17.readdirSync(root).sort();
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    if (!_isDir(path14.join(root, name))) {
+    if (!_isDir(path15.join(root, name))) {
       continue;
     }
     if (name.startsWith(".")) {
@@ -16667,11 +16787,11 @@ function _score_confidence(stack, root, subdirs) {
     return capitalized.length > 0 ? "high" : "medium";
   }
   if (stack === "node-monorepo") {
-    const withPkgJson = subdirs.filter((name) => _isFile(path14.join(root, name, "package.json")));
+    const withPkgJson = subdirs.filter((name) => _isFile(path15.join(root, name, "package.json")));
     return withPkgJson.length > 0 ? "high" : "medium";
   }
   if (stack === "python-src") {
-    const withInit = subdirs.filter((name) => _isFile(path14.join(root, name, "__init__.py")));
+    const withInit = subdirs.filter((name) => _isFile(path15.join(root, name, "__init__.py")));
     return withInit.length > 0 ? "high" : "medium";
   }
   if (stack === "go-internal") {
@@ -16683,7 +16803,7 @@ function detect_module_roots(project_root) {
   const high = [];
   const medium = [];
   for (const [rel_path, stack, namespace_template] of _RULES) {
-    const abs_path = path14.join(project_root, rel_path);
+    const abs_path = path15.join(project_root, rel_path);
     if (!_isDir(abs_path)) {
       continue;
     }
@@ -16705,7 +16825,7 @@ function detect_module_roots(project_root) {
 }
 
 // src/scripts/_lib/model_tier.ts
-import fs16 from "node:fs";
+import fs18 from "node:fs";
 var TIER_TO_CLAUDE_MODEL = {
   frontier: "fable",
   high: "opus",
@@ -16714,8 +16834,8 @@ var TIER_TO_CLAUDE_MODEL = {
 };
 var MODEL_TIER_RE = /^model_tier:\s*"?([a-z]+)"?\s*$/m;
 function read_model_tier(skill_md) {
-  if (!fs16.existsSync(skill_md)) return null;
-  const text = fs16.readFileSync(skill_md).toString("utf-8");
+  if (!fs18.existsSync(skill_md)) return null;
+  const text = fs18.readFileSync(skill_md).toString("utf-8");
   if (!text.startsWith("---\n")) return null;
   const end = text.indexOf("\n---\n", 4);
   if (end === -1) return null;
@@ -16732,39 +16852,39 @@ function render_native_model_md(text, tier) {
 
 // src/scripts/_cli/cmd_migrate.ts
 import { spawnSync } from "node:child_process";
-import * as fs18 from "node:fs";
-import * as path16 from "node:path";
+import * as fs20 from "node:fs";
+import * as path17 from "node:path";
 import process2 from "node:process";
 import { fileURLToPath as fileURLToPath4, pathToFileURL } from "node:url";
 
 // src/scripts/_lib/package_root.ts
-import * as fs17 from "node:fs";
-import * as path15 from "node:path";
+import * as fs19 from "node:fs";
+import * as path16 from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var PACKAGE_NAME = "@event4u/agent-config";
 var MAX_ASCENT = 16;
 function resolvePackageRoot(fromUrlOrPath, legacyHops = 3) {
   const start = fromUrlOrPath.startsWith("file:") ? fileURLToPath3(fromUrlOrPath) : fromUrlOrPath;
-  const startDir = path15.dirname(start);
+  const startDir = path16.dirname(start);
   let dir = startDir;
   for (let i = 0; i < MAX_ASCENT; i++) {
-    const manifest = path15.join(dir, "package.json");
-    if (fs17.existsSync(manifest)) {
+    const manifest = path16.join(dir, "package.json");
+    if (fs19.existsSync(manifest)) {
       try {
-        const parsed = JSON.parse(fs17.readFileSync(manifest, "utf8"));
+        const parsed = JSON.parse(fs19.readFileSync(manifest, "utf8"));
         if (parsed.name === PACKAGE_NAME) {
           return dir;
         }
       } catch {
       }
     }
-    const parent = path15.dirname(dir);
+    const parent = path16.dirname(dir);
     if (parent === dir) {
       break;
     }
     dir = parent;
   }
-  return path15.resolve(startDir, ...Array.from({ length: legacyHops }, () => ".."));
+  return path16.resolve(startDir, ...Array.from({ length: legacyHops }, () => ".."));
 }
 
 // src/scripts/_cli/cmd_migrate.ts
@@ -16785,7 +16905,7 @@ var LEGACY_SETTINGS_FILES = [".agent-settings.yml", ".agent-user.yml"];
 var LEGACY_STATE_FILENAME = ".implement-ticket-state.json";
 var LEGACY_STATE_V1_FILENAME = ".work-state.json";
 var LEGACY_AGENT_CONFIG_SHELL = "agent-config";
-var _HERE_DIR = path16.dirname(fileURLToPath4(import.meta.url));
+var _HERE_DIR = path17.dirname(fileURLToPath4(import.meta.url));
 var ArgparseExit = class extends Error {
   code;
   constructor(code) {
@@ -16884,38 +17004,38 @@ function _jsonDumpsIndentAscii(value, indent) {
 }
 function _isFile2(p) {
   try {
-    return fs18.statSync(p).isFile();
+    return fs20.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function _isDir2(p) {
   try {
-    return fs18.statSync(p).isDirectory();
+    return fs20.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function _isSymlink(p) {
   try {
-    return fs18.lstatSync(p).isSymbolicLink();
+    return fs20.lstatSync(p).isSymbolicLink();
   } catch {
     return false;
   }
 }
 function _exists2(p) {
   try {
-    fs18.lstatSync(p);
+    fs20.lstatSync(p);
     return true;
   } catch {
     return false;
   }
 }
 function _readText(p) {
-  return fs18.readFileSync(p, { encoding: "utf-8" });
+  return fs20.readFileSync(p, { encoding: "utf-8" });
 }
 function _writeText(p, text) {
-  fs18.writeFileSync(p, text, { encoding: "utf-8" });
+  fs20.writeFileSync(p, text, { encoding: "utf-8" });
 }
 function _jsonLoadFile(p) {
   return JSON.parse(_readText(p));
@@ -16971,7 +17091,7 @@ function _classify_symlink(link) {
   }
   let target;
   try {
-    target = fs18.readlinkSync(link);
+    target = fs20.readlinkSync(link);
   } catch {
     return null;
   }
@@ -16982,16 +17102,16 @@ function _classify_symlink(link) {
   return "user";
 }
 function _detect_legacy_state(project) {
-  return _isFile2(path16.join(project, LEGACY_STATE_FILENAME));
+  return _isFile2(path17.join(project, LEGACY_STATE_FILENAME));
 }
 function _detect_legacy_settings(project) {
   const found = [];
   for (const name of LEGACY_SETTINGS_FILES) {
-    const flat = path16.join(project, name);
+    const flat = path17.join(project, name);
     if (_isFile2(flat)) {
       found.push(flat);
     }
-    const typed = path16.join(project, "settings", name);
+    const typed = path17.join(project, "settings", name);
     if (_isFile2(typed)) {
       found.push(typed);
     }
@@ -16999,25 +17119,25 @@ function _detect_legacy_settings(project) {
   return found;
 }
 function _detect_empty_shell(project) {
-  const shell = path16.join(project, LEGACY_AGENT_CONFIG_SHELL);
+  const shell = path17.join(project, LEGACY_AGENT_CONFIG_SHELL);
   if (!_isDir2(shell) || _isSymlink(shell)) {
     return false;
   }
   try {
-    return fs18.readdirSync(shell).length === 0;
+    return fs20.readdirSync(shell).length === 0;
   } catch {
     return false;
   }
 }
 function _detect_already_migrated(project) {
-  if (_detect_npm(path16.join(project, "package.json"))) {
+  if (_detect_npm(path17.join(project, "package.json"))) {
     return false;
   }
-  if (_detect_composer(path16.join(project, "composer.json"))) {
+  if (_detect_composer(path17.join(project, "composer.json"))) {
     return false;
   }
   for (const name of MANAGED_SYMLINKS) {
-    if (_classify_symlink(path16.join(project, name)) === "legacy") {
+    if (_classify_symlink(path17.join(project, name)) === "legacy") {
       return false;
     }
   }
@@ -17088,11 +17208,11 @@ function _purge_legacy_symlinks(project) {
   const removed = [];
   const preserved = [];
   for (const name of MANAGED_SYMLINKS) {
-    const link = path16.join(project, name);
+    const link = path17.join(project, name);
     const kind = _classify_symlink(link);
     if (kind === "legacy") {
       try {
-        fs18.unlinkSync(link);
+        fs20.unlinkSync(link);
         removed.push(name);
       } catch {
         preserved.push(name);
@@ -17104,14 +17224,14 @@ function _purge_legacy_symlinks(project) {
   return [removed, preserved];
 }
 function _migrate_state_file(project) {
-  const source = path16.join(project, LEGACY_STATE_FILENAME);
+  const source = path17.join(project, LEGACY_STATE_FILENAME);
   if (!_isFile2(source)) {
     return null;
   }
-  const target = path16.join(project, LEGACY_STATE_V1_FILENAME);
+  const target = path17.join(project, LEGACY_STATE_V1_FILENAME);
   if (_exists2(target)) {
     try {
-      fs18.unlinkSync(source);
+      fs20.unlinkSync(source);
       return `removed stale ${LEGACY_STATE_FILENAME} (v1 already present)`;
     } catch {
       return null;
@@ -17126,7 +17246,7 @@ function _migrate_state_file(project) {
 }
 function _load_state_migrator() {
   const pkg_root = resolvePackageRoot(import.meta.url);
-  const rel = path16.join(
+  const rel = path17.join(
     "agent-src",
     "templates",
     "scripts",
@@ -17134,8 +17254,8 @@ function _load_state_migrator() {
     "migration",
     "v0_to_v1.ts"
   );
-  const driver = [path16.join(pkg_root, "dist", rel), path16.join(pkg_root, "src", rel)].find(
-    (p) => fs18.existsSync(p)
+  const driver = [path17.join(pkg_root, "dist", rel), path17.join(pkg_root, "src", rel)].find(
+    (p) => fs20.existsSync(p)
   ) ?? null;
   if (driver === null) {
     return null;
@@ -17143,12 +17263,12 @@ function _load_state_migrator() {
   const binName = process2.platform === "win32" ? "tsx.cmd" : "tsx";
   let tsxBin = null;
   for (let dir = pkg_root; ; ) {
-    const cand = path16.join(dir, "node_modules", ".bin", binName);
-    if (fs18.existsSync(cand)) {
+    const cand = path17.join(dir, "node_modules", ".bin", binName);
+    if (fs20.existsSync(cand)) {
       tsxBin = cand;
       break;
     }
-    const parent = path16.dirname(dir);
+    const parent = path17.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -17175,17 +17295,17 @@ function _delete_legacy_settings(project) {
   const removed = [];
   for (const p of _detect_legacy_settings(project)) {
     try {
-      fs18.unlinkSync(p);
-      removed.push(path16.relative(project, p));
+      fs20.unlinkSync(p);
+      removed.push(path17.relative(project, p));
     } catch {
       continue;
     }
   }
-  const settings_dir = path16.join(project, "settings");
+  const settings_dir = path17.join(project, "settings");
   if (_isDir2(settings_dir) && !_isSymlink(settings_dir)) {
     try {
-      if (fs18.readdirSync(settings_dir).length === 0) {
-        fs18.rmdirSync(settings_dir);
+      if (fs20.readdirSync(settings_dir).length === 0) {
+        fs20.rmdirSync(settings_dir);
         removed.push("settings/");
       }
     } catch {
@@ -17194,12 +17314,12 @@ function _delete_legacy_settings(project) {
   return removed;
 }
 function _remove_empty_shell(project) {
-  const shell = path16.join(project, LEGACY_AGENT_CONFIG_SHELL);
+  const shell = path17.join(project, LEGACY_AGENT_CONFIG_SHELL);
   if (!_detect_empty_shell(project)) {
     return false;
   }
   try {
-    fs18.rmdirSync(shell);
+    fs20.rmdirSync(shell);
   } catch {
     return false;
   }
@@ -17209,7 +17329,7 @@ function _reEscape(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function _update_gitignore(project) {
-  const gitignore = path16.join(project, ".gitignore");
+  const gitignore = path17.join(project, ".gitignore");
   const block = `${GITIGNORE_BLOCK_START}
 ${GITIGNORE_NEW_BODY}${GITIGNORE_BLOCK_END}
 `;
@@ -17240,16 +17360,16 @@ ${GITIGNORE_NEW_BODY}${GITIGNORE_BLOCK_END}
 }
 function _build_plan(project) {
   return {
-    npm: _detect_npm(path16.join(project, "package.json")),
-    composer: _detect_composer(path16.join(project, "composer.json")),
+    npm: _detect_npm(path17.join(project, "package.json")),
+    composer: _detect_composer(path17.join(project, "composer.json")),
     symlinks_legacy: MANAGED_SYMLINKS.filter(
-      (name) => _classify_symlink(path16.join(project, name)) === "legacy"
+      (name) => _classify_symlink(path17.join(project, name)) === "legacy"
     ),
     symlinks_user: MANAGED_SYMLINKS.filter(
-      (name) => _classify_symlink(path16.join(project, name)) === "user"
+      (name) => _classify_symlink(path17.join(project, name)) === "user"
     ),
-    state_file: _isFile2(path16.join(project, LEGACY_STATE_FILENAME)),
-    settings_files: _detect_legacy_settings(project).map((p) => path16.relative(project, p)),
+    state_file: _isFile2(path17.join(project, LEGACY_STATE_FILENAME)),
+    settings_files: _detect_legacy_settings(project).map((p) => path17.relative(project, p)),
     empty_shell: _detect_empty_shell(project)
   };
 }
@@ -17313,10 +17433,10 @@ function _warn_on_major_mismatch(from_major, plan, out) {
 }
 function _apply(project, out, err) {
   const summary = [];
-  if (_strip_npm_entry(path16.join(project, "package.json"))) {
+  if (_strip_npm_entry(path17.join(project, "package.json"))) {
     summary.push(`removed ${PACKAGE_NAME_NPM} from package.json`);
   }
-  if (_strip_composer_entry(path16.join(project, "composer.json"))) {
+  if (_strip_composer_entry(path17.join(project, "composer.json"))) {
     summary.push(`removed ${PACKAGE_NAME_COMPOSER} from composer.json`);
   }
   const [removed_links, preserved_links] = _purge_legacy_symlinks(project);
@@ -17443,17 +17563,17 @@ function _isCliEntry() {
     return false;
   }
   if (typeof __AGENT_CONFIG_CLI_DELEGATE__ !== "undefined" && __AGENT_CONFIG_CLI_DELEGATE__) {
-    if (path16.basename(process2.argv[1], ".js") === "cmd_migrate") {
+    if (path17.basename(process2.argv[1], ".js") === "cmd_migrate") {
       return true;
     }
   }
-  const argvUrl = pathToFileURL(path16.resolve(process2.argv[1])).href;
+  const argvUrl = pathToFileURL(path17.resolve(process2.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs18.realpathSync(fileURLToPath4(import.meta.url));
-    const argv = fs18.realpathSync(path16.resolve(process2.argv[1]));
+    const here = fs20.realpathSync(fileURLToPath4(import.meta.url));
+    const argv = fs20.realpathSync(path17.resolve(process2.argv[1]));
     return here === argv;
   } catch {
     return false;
@@ -17488,36 +17608,36 @@ var ArgparseExit2 = class extends Error {
   code;
 };
 function expanduser6(p) {
-  if (p === "~") return os7.homedir();
+  if (p === "~") return os8.homedir();
   if (p.startsWith("~/") || p.startsWith("~\\")) {
-    return path17.join(os7.homedir(), p.slice(2));
+    return path18.join(os8.homedir(), p.slice(2));
   }
   return p;
 }
 function resolvePath(p) {
   try {
-    return fs19.realpathSync(path17.resolve(p));
+    return fs21.realpathSync(path18.resolve(p));
   } catch {
-    return path17.resolve(p);
+    return path18.resolve(p);
   }
 }
 function isFile(p) {
   try {
-    return fs19.statSync(p).isFile();
+    return fs21.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function isDir(p) {
   try {
-    return fs19.statSync(p).isDirectory();
+    return fs21.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function pathExists(p) {
   try {
-    fs19.statSync(p);
+    fs21.statSync(p);
     return true;
   } catch {
     return false;
@@ -17525,24 +17645,24 @@ function pathExists(p) {
 }
 function isSymlink(p) {
   try {
-    return fs19.lstatSync(p).isSymbolicLink();
+    return fs21.lstatSync(p).isSymbolicLink();
   } catch {
     return false;
   }
 }
 function readText(p) {
-  return fs19.readFileSync(p, "utf-8");
+  return fs21.readFileSync(p, "utf-8");
 }
 function writeText(p, content) {
-  fs19.writeFileSync(p, content, "utf-8");
+  fs21.writeFileSync(p, content, "utf-8");
 }
 function mkdirp(p) {
-  fs19.mkdirSync(p, { recursive: true });
+  fs21.mkdirSync(p, { recursive: true });
 }
 function sortedGlobStems(directory, suffix) {
   let entries;
   try {
-    entries = fs19.readdirSync(directory);
+    entries = fs21.readdirSync(directory);
   } catch {
     return [];
   }
@@ -17562,7 +17682,7 @@ function sortedGlobStems(directory, suffix) {
 function countZips(directory) {
   if (!isDir(directory)) return 0;
   let n = 0;
-  for (const name of fs19.readdirSync(directory)) {
+  for (const name of fs21.readdirSync(directory)) {
     if (name.endsWith(".zip")) n += 1;
   }
   return n;
@@ -17570,35 +17690,35 @@ function countZips(directory) {
 function sha256OfFile(p) {
   let data;
   try {
-    data = fs19.readFileSync(p);
+    data = fs21.readFileSync(p);
   } catch {
     return null;
   }
   return crypto3.createHash("sha256").update(data).digest("hex");
 }
 function atomicWrite0644(target, body, prefix) {
-  const dir = path17.dirname(target);
-  const tmpName = path17.join(
+  const dir = path18.dirname(target);
+  const tmpName = path18.join(
     dir,
     `${prefix}${process3.pid}.${crypto3.randomBytes(6).toString("hex")}.yml.tmp`
   );
   let fd = null;
   try {
-    fd = fs19.openSync(tmpName, "wx", 420);
-    fs19.writeFileSync(fd, body, "utf-8");
-    fs19.closeSync(fd);
+    fd = fs21.openSync(tmpName, "wx", 420);
+    fs21.writeFileSync(fd, body, "utf-8");
+    fs21.closeSync(fd);
     fd = null;
-    fs19.chmodSync(tmpName, 420);
-    fs19.renameSync(tmpName, target);
+    fs21.chmodSync(tmpName, 420);
+    fs21.renameSync(tmpName, target);
   } catch (err) {
     if (fd !== null) {
       try {
-        fs19.closeSync(fd);
+        fs21.closeSync(fd);
       } catch {
       }
     }
     try {
-      fs19.unlinkSync(tmpName);
+      fs21.unlinkSync(tmpName);
     } catch {
     }
     throw err;
@@ -17722,12 +17842,12 @@ var LEGACY_SETTINGS_FILE = ".agent-settings";
 var LEGACY_BACKUP_FILE = ".agent-settings.backup.key-value";
 var SETTINGS_SUBDIR = ["agents", "settings"];
 function _canonical_settings_target(project_root) {
-  return path17.join(project_root, ...SETTINGS_SUBDIR, SETTINGS_FILE);
+  return path18.join(project_root, ...SETTINGS_SUBDIR, SETTINGS_FILE);
 }
 function _resolve_settings_read(project_root) {
   const canonical = _canonical_settings_target(project_root);
   if (pathExists(canonical)) return canonical;
-  const legacy = path17.join(project_root, SETTINGS_FILE);
+  const legacy = path18.join(project_root, SETTINGS_FILE);
   if (pathExists(legacy)) return legacy;
   return canonical;
 }
@@ -17791,9 +17911,9 @@ function fail(msg) {
   throw new SystemExitError(1);
 }
 function detect_package_root(project_root) {
-  const npm_path = path17.join(project_root, "node_modules", "@event4u", "agent-config");
+  const npm_path = path18.join(project_root, "node_modules", "@event4u", "agent-config");
   if (isDir(npm_path)) return resolvePath(npm_path);
-  if (pathExists(path17.join(project_root, "src", "config", "profiles", "minimal.ini"))) {
+  if (pathExists(path18.join(project_root, "src", "config", "profiles", "minimal.ini"))) {
     return project_root;
   }
   fail(
@@ -17801,12 +17921,12 @@ function detect_package_root(project_root) {
   );
 }
 function detect_package_type(package_root) {
-  if (package_root.split(path17.sep).includes("node_modules")) return "npm";
+  if (package_root.split(path18.sep).includes("node_modules")) return "npm";
   return "local";
 }
 function detect_package_type_for_project(project_root, package_root) {
   const npm_path = resolvePath(
-    path17.join(project_root, "node_modules", "@event4u", "agent-config")
+    path18.join(project_root, "node_modules", "@event4u", "agent-config")
   );
   const package_resolved = resolvePath(package_root);
   if (package_resolved === npm_path) return "npm";
@@ -17826,7 +17946,7 @@ function ensure_directory(p) {
   mkdirp(p);
 }
 function write_file(p, content) {
-  ensure_directory(path17.dirname(p));
+  ensure_directory(path18.dirname(p));
   writeText(p, content);
 }
 function read_json_file(p) {
@@ -17997,7 +18117,7 @@ function _append_unknown_legacy(rendered, legacy_values, unknown_keys) {
   return rendered + "\n" + suffix;
 }
 function _migrate_legacy_if_present(project_root, template_body) {
-  const legacy_target = path17.join(project_root, LEGACY_SETTINGS_FILE);
+  const legacy_target = path18.join(project_root, LEGACY_SETTINGS_FILE);
   if (!isFile(legacy_target)) return null;
   const legacy_text = readText(legacy_target);
   const [values, unknown] = _parse_legacy_settings(legacy_text);
@@ -18012,9 +18132,9 @@ function _migrate_legacy_if_present(project_root, template_body) {
     }
   }
   rendered = _append_unknown_legacy(rendered, values, unknown);
-  const backup_target = path17.join(project_root, LEGACY_BACKUP_FILE);
+  const backup_target = path18.join(project_root, LEGACY_BACKUP_FILE);
   writeText(backup_target, legacy_text);
-  fs19.unlinkSync(legacy_target);
+  fs21.unlinkSync(legacy_target);
   info(`Migrated legacy ${LEGACY_SETTINGS_FILE} \u2192 ${SETTINGS_FILE}`);
   info(`Backup saved to ${LEGACY_BACKUP_FILE}`);
   if (unknown.length > 0) {
@@ -18049,7 +18169,7 @@ function _render_template(template, profile_values) {
   return body;
 }
 function _load_valid_user_types(package_root) {
-  const directory = path17.join(package_root, USER_TYPES_DIR);
+  const directory = path18.join(package_root, USER_TYPES_DIR);
   if (!isDir(directory)) return [];
   return sortedGlobStems(directory, ".yml");
 }
@@ -18106,8 +18226,8 @@ function splitlinesKeepends(text) {
 }
 function ensure_agent_settings(project_root, package_root, profile, force, user_type = "", packs = null) {
   const target = _canonical_settings_target(project_root);
-  const profile_source = path17.join(package_root, "src", "config", "profiles", `${profile}.ini`);
-  const template_source = path17.join(package_root, "src", "config", "agent-settings.template.yml");
+  const profile_source = path18.join(package_root, "src", "config", "profiles", `${profile}.ini`);
+  const template_source = path18.join(package_root, "src", "config", "agent-settings.template.yml");
   if (!pathExists(profile_source)) fail(`Missing profile preset: ${profile_source}`);
   if (!pathExists(template_source)) fail(`Missing settings template: ${template_source}`);
   const template = readText(template_source);
@@ -18121,21 +18241,21 @@ function ensure_agent_settings(project_root, package_root, profile, force, user_
   if (profile_values["rule_loading_tier"] !== profile) {
     const got = "rule_loading_tier" in profile_values ? `'${profile_values["rule_loading_tier"]}'` : "None";
     fail(
-      `Profile preset ${path17.basename(profile_source)} has rule_loading_tier=${got} but --profile=${profile}`
+      `Profile preset ${path18.basename(profile_source)} has rule_loading_tier=${got} but --profile=${profile}`
     );
   }
   profile_values["user_type"] = _validate_user_type(package_root, user_type);
   let template_body = _render_template(template, profile_values);
   template_body = _inject_packs(template_body, packs ?? []);
-  const legacy_root = path17.join(project_root, SETTINGS_FILE);
+  const legacy_root = path18.join(project_root, SETTINGS_FILE);
   if (isFile(legacy_root) && !pathExists(target)) {
-    mkdirp(path17.dirname(target));
+    mkdirp(path18.dirname(target));
     writeText(target, readText(legacy_root));
-    fs19.unlinkSync(legacy_root);
+    fs21.unlinkSync(legacy_root);
     success(`Migrated ${SETTINGS_FILE} \u2192 agents/settings/${SETTINGS_FILE} (ADR-038)`);
     return;
   }
-  const legacy_target = path17.join(project_root, LEGACY_SETTINGS_FILE);
+  const legacy_target = path18.join(project_root, LEGACY_SETTINGS_FILE);
   if (isFile(legacy_target) && pathExists(target)) {
     warn(
       `Both ${SETTINGS_FILE} and legacy ${LEGACY_SETTINGS_FILE} exist. Skipping migration to avoid overwriting ${SETTINGS_FILE}. Delete one of them manually and re-run.`
@@ -18152,7 +18272,7 @@ function ensure_agent_settings(project_root, package_root, profile, force, user_
     skip(`${SETTINGS_FILE} already exists`);
     return;
   }
-  mkdirp(path17.dirname(target));
+  mkdirp(path18.dirname(target));
   write_file(target, template_body);
   const user_type_value = profile_values["user_type"] ?? "";
   const suffix = user_type_value ? `, user_type=${user_type_value}` : "";
@@ -18165,7 +18285,7 @@ function ensure_vscode_bridge(project_root, package_type, force) {
   const plugin_path = plugin_paths[package_type] ?? "./plugin/agent-config";
   const bridge = { "chat.pluginLocations": { [plugin_path]: true } };
   return merge_json_file(
-    path17.join(project_root, ".vscode", "settings.json"),
+    path18.join(project_root, ".vscode", "settings.json"),
     bridge,
     force,
     ".vscode/settings.json"
@@ -18174,14 +18294,14 @@ function ensure_vscode_bridge(project_root, package_type, force) {
 function ensure_augment_bridge(project_root, force) {
   const bridge = { enabledPlugins: { "agent-config@event4u": true } };
   return merge_json_file(
-    path17.join(project_root, ".augment", "settings.json"),
+    path18.join(project_root, ".augment", "settings.json"),
     bridge,
     force,
     ".augment/settings.json"
   );
 }
-var AUGMENT_USER_DIR = path17.join(os7.homedir(), ".augment");
-var AUGMENT_USER_HOOKS_DIR = path17.join(AUGMENT_USER_DIR, "hooks");
+var AUGMENT_USER_DIR = path18.join(os8.homedir(), ".augment");
+var AUGMENT_USER_HOOKS_DIR = path18.join(AUGMENT_USER_DIR, "hooks");
 var AUGMENT_DISPATCHER_TRAMPOLINE = "augment-dispatcher.sh";
 var AUGMENT_LEGACY_TRAMPOLINES = [
   "augment-chat-history.sh",
@@ -18197,29 +18317,29 @@ var AUGMENT_DISPATCHER_BINDINGS = [
   ["post_tool_use", "PostToolUse"]
 ];
 function _deploy_augment_trampoline(package_root, name, force) {
-  const src = path17.join(package_root, "scripts", "hooks", name);
+  const src = path18.join(package_root, "scripts", "hooks", name);
   if (!pathExists(src)) {
     skip(`augment trampoline missing in package: ${src}`);
     return null;
   }
   mkdirp(AUGMENT_USER_HOOKS_DIR);
-  const dst = path17.join(AUGMENT_USER_HOOKS_DIR, name);
+  const dst = path18.join(AUGMENT_USER_HOOKS_DIR, name);
   const src_text = readText(src);
   if (pathExists(dst) && readText(dst) === src_text && !force) {
     skip(`~/.augment/hooks/${name} already up to date`);
   } else {
     writeText(dst, src_text);
-    fs19.chmodSync(dst, 493);
+    fs21.chmodSync(dst, 493);
     success(`~/.augment/hooks/${name} installed`);
   }
   return dst;
 }
 function _remove_legacy_augment_trampolines() {
   for (const name of AUGMENT_LEGACY_TRAMPOLINES) {
-    const legacy = path17.join(AUGMENT_USER_HOOKS_DIR, name);
+    const legacy = path18.join(AUGMENT_USER_HOOKS_DIR, name);
     try {
       if (isFile(legacy)) {
-        fs19.unlinkSync(legacy);
+        fs21.unlinkSync(legacy);
         skip(`removed legacy ~/.augment/hooks/${name}`);
       }
     } catch (err) {
@@ -18239,7 +18359,7 @@ function ensure_augment_user_hooks(package_root, force) {
   }
   const settings_patch = { hooks: per_event };
   return merge_json_file(
-    path17.join(AUGMENT_USER_DIR, "settings.json"),
+    path18.join(AUGMENT_USER_DIR, "settings.json"),
     settings_patch,
     force,
     "~/.augment/settings.json"
@@ -18264,7 +18384,7 @@ function _heal_legacy_claude_plugin_ids(p) {
   return removed;
 }
 function ensure_claude_bridge(project_root, force) {
-  const target = path17.join(project_root, ".claude", "settings.json");
+  const target = path18.join(project_root, ".claude", "settings.json");
   const healed = _heal_legacy_claude_plugin_ids(target);
   for (const pid of healed) {
     success(`.claude/settings.json: removed stale plugin id \`${pid}\``);
@@ -18289,29 +18409,29 @@ function ensure_cursor_bridge(project_root, force) {
   }
   const bridge = { version: 1, hooks };
   return merge_json_file(
-    path17.join(project_root, ".cursor", "hooks.json"),
+    path18.join(project_root, ".cursor", "hooks.json"),
     bridge,
     force,
     ".cursor/hooks.json"
   );
 }
-var CURSOR_USER_DIR = path17.join(os7.homedir(), ".cursor");
-var CURSOR_USER_HOOKS_DIR = path17.join(CURSOR_USER_DIR, "hooks");
+var CURSOR_USER_DIR = path18.join(os8.homedir(), ".cursor");
+var CURSOR_USER_HOOKS_DIR = path18.join(CURSOR_USER_DIR, "hooks");
 var CURSOR_DISPATCHER_TRAMPOLINE = "cursor-dispatcher.sh";
 function ensure_cursor_user_hooks(package_root, force) {
-  const src = path17.join(package_root, "scripts", "hooks", CURSOR_DISPATCHER_TRAMPOLINE);
+  const src = path18.join(package_root, "scripts", "hooks", CURSOR_DISPATCHER_TRAMPOLINE);
   if (!pathExists(src)) {
     skip(`cursor trampoline missing in package: ${src}`);
     return [];
   }
   mkdirp(CURSOR_USER_HOOKS_DIR);
-  const dst = path17.join(CURSOR_USER_HOOKS_DIR, CURSOR_DISPATCHER_TRAMPOLINE);
+  const dst = path18.join(CURSOR_USER_HOOKS_DIR, CURSOR_DISPATCHER_TRAMPOLINE);
   const src_text = readText(src);
   if (pathExists(dst) && readText(dst) === src_text && !force) {
     skip(`~/.cursor/hooks/${CURSOR_DISPATCHER_TRAMPOLINE} already up to date`);
   } else {
     writeText(dst, src_text);
-    fs19.chmodSync(dst, 493);
+    fs21.chmodSync(dst, 493);
     success(`~/.cursor/hooks/${CURSOR_DISPATCHER_TRAMPOLINE} installed`);
   }
   const hooks = {};
@@ -18320,7 +18440,7 @@ function ensure_cursor_user_hooks(package_root, force) {
   }
   const settings_patch = { version: 1, hooks };
   return merge_json_file(
-    path17.join(CURSOR_USER_DIR, "hooks.json"),
+    path18.join(CURSOR_USER_DIR, "hooks.json"),
     settings_patch,
     force,
     "~/.cursor/hooks.json"
@@ -18363,12 +18483,12 @@ exit 0
 `;
 }
 function ensure_cline_bridge(project_root, force) {
-  const hooks_dir = path17.join(project_root, ".clinerules", "hooks");
+  const hooks_dir = path18.join(project_root, ".clinerules", "hooks");
   mkdirp(hooks_dir);
   const workspace_quoted = shlexQuote(resolvePath(project_root));
   let written = 0;
   for (const [ac_event, native_event] of CLINE_DISPATCHER_BINDINGS) {
-    const target = path17.join(hooks_dir, native_event);
+    const target = path18.join(hooks_dir, native_event);
     const body = clineProjectHookBody(native_event, ac_event, workspace_quoted);
     if (pathExists(target) && readText(target) === body && !force) {
       continue;
@@ -18378,7 +18498,7 @@ function ensure_cline_bridge(project_root, force) {
       continue;
     }
     writeText(target, body);
-    fs19.chmodSync(target, 493);
+    fs21.chmodSync(target, 493);
     written += 1;
   }
   if (written) {
@@ -18387,27 +18507,27 @@ function ensure_cline_bridge(project_root, force) {
     skip(".clinerules/hooks/ already up to date");
   }
 }
-var CLINE_USER_DIR = path17.join(os7.homedir(), "Documents", "Cline", "Hooks");
+var CLINE_USER_DIR = path18.join(os8.homedir(), "Documents", "Cline", "Hooks");
 var CLINE_DISPATCHER_TRAMPOLINE = "cline-dispatcher.sh";
 function ensure_cline_user_hooks(package_root, force) {
-  const src = path17.join(package_root, "scripts", "hooks", CLINE_DISPATCHER_TRAMPOLINE);
+  const src = path18.join(package_root, "scripts", "hooks", CLINE_DISPATCHER_TRAMPOLINE);
   if (!pathExists(src)) {
     skip(`cline trampoline missing in package: ${src}`);
     return;
   }
   mkdirp(CLINE_USER_DIR);
-  const trampoline = path17.join(CLINE_USER_DIR, CLINE_DISPATCHER_TRAMPOLINE);
+  const trampoline = path18.join(CLINE_USER_DIR, CLINE_DISPATCHER_TRAMPOLINE);
   const src_text = readText(src);
   if (pathExists(trampoline) && readText(trampoline) === src_text && !force) {
     skip(`~/Documents/Cline/Hooks/${CLINE_DISPATCHER_TRAMPOLINE} already up to date`);
   } else {
     writeText(trampoline, src_text);
-    fs19.chmodSync(trampoline, 493);
+    fs21.chmodSync(trampoline, 493);
     success(`~/Documents/Cline/Hooks/${CLINE_DISPATCHER_TRAMPOLINE} installed`);
   }
   const trampoline_quoted = shlexQuote(trampoline);
   for (const [ac_event, native_event] of CLINE_DISPATCHER_BINDINGS) {
-    const wrapper = path17.join(CLINE_USER_DIR, native_event);
+    const wrapper = path18.join(CLINE_USER_DIR, native_event);
     const body = `#!/usr/bin/env bash
 # Generated by event4u/agent-config install.py \u2014 DO NOT EDIT.
 # User-scope Cline hook for ${native_event} \u2192 agent-config ${ac_event}.
@@ -18417,7 +18537,7 @@ exec ${trampoline_quoted} ${ac_event} ${native_event}
       continue;
     }
     writeText(wrapper, body);
-    fs19.chmodSync(wrapper, 493);
+    fs21.chmodSync(wrapper, 493);
   }
 }
 var WINDSURF_DISPATCHER_BINDINGS = [
@@ -18438,29 +18558,29 @@ function ensure_windsurf_bridge(project_root, force) {
   }
   const bridge = { hooks };
   return merge_json_file(
-    path17.join(project_root, ".windsurf", "hooks.json"),
+    path18.join(project_root, ".windsurf", "hooks.json"),
     bridge,
     force,
     ".windsurf/hooks.json"
   );
 }
-var WINDSURF_USER_DIR = path17.join(os7.homedir(), ".codeium", "windsurf");
-var WINDSURF_USER_HOOKS_DIR = path17.join(WINDSURF_USER_DIR, "hooks");
+var WINDSURF_USER_DIR = path18.join(os8.homedir(), ".codeium", "windsurf");
+var WINDSURF_USER_HOOKS_DIR = path18.join(WINDSURF_USER_DIR, "hooks");
 var WINDSURF_DISPATCHER_TRAMPOLINE = "windsurf-dispatcher.sh";
 function ensure_windsurf_user_hooks(package_root, force) {
-  const src = path17.join(package_root, "scripts", "hooks", WINDSURF_DISPATCHER_TRAMPOLINE);
+  const src = path18.join(package_root, "scripts", "hooks", WINDSURF_DISPATCHER_TRAMPOLINE);
   if (!pathExists(src)) {
     skip(`windsurf trampoline missing in package: ${src}`);
     return [];
   }
   mkdirp(WINDSURF_USER_HOOKS_DIR);
-  const dst = path17.join(WINDSURF_USER_HOOKS_DIR, WINDSURF_DISPATCHER_TRAMPOLINE);
+  const dst = path18.join(WINDSURF_USER_HOOKS_DIR, WINDSURF_DISPATCHER_TRAMPOLINE);
   const src_text = readText(src);
   if (pathExists(dst) && readText(dst) === src_text && !force) {
     skip(`~/.codeium/windsurf/hooks/${WINDSURF_DISPATCHER_TRAMPOLINE} already up to date`);
   } else {
     writeText(dst, src_text);
-    fs19.chmodSync(dst, 493);
+    fs21.chmodSync(dst, 493);
     success(`~/.codeium/windsurf/hooks/${WINDSURF_DISPATCHER_TRAMPOLINE} installed`);
   }
   const hooks = {};
@@ -18472,7 +18592,7 @@ function ensure_windsurf_user_hooks(package_root, force) {
   }
   const settings_patch = { hooks };
   return merge_json_file(
-    path17.join(WINDSURF_USER_DIR, "hooks.json"),
+    path18.join(WINDSURF_USER_DIR, "hooks.json"),
     settings_patch,
     force,
     "~/.codeium/windsurf/hooks.json"
@@ -18501,43 +18621,43 @@ function _gemini_hooks_dict(command_factory) {
 function ensure_gemini_bridge(project_root, force) {
   const bridge = { hooks: _gemini_hooks_dict(_gemini_dispatch_command) };
   return merge_json_file(
-    path17.join(project_root, ".gemini", "settings.json"),
+    path18.join(project_root, ".gemini", "settings.json"),
     bridge,
     force,
     ".gemini/settings.json"
   );
 }
-var GEMINI_USER_DIR = path17.join(os7.homedir(), ".gemini");
-var GEMINI_USER_HOOKS_DIR = path17.join(GEMINI_USER_DIR, "hooks");
+var GEMINI_USER_DIR = path18.join(os8.homedir(), ".gemini");
+var GEMINI_USER_HOOKS_DIR = path18.join(GEMINI_USER_DIR, "hooks");
 var GEMINI_DISPATCHER_TRAMPOLINE = "gemini-dispatcher.sh";
 function ensure_gemini_user_hooks(package_root, force) {
-  const src = path17.join(package_root, "scripts", "hooks", GEMINI_DISPATCHER_TRAMPOLINE);
+  const src = path18.join(package_root, "scripts", "hooks", GEMINI_DISPATCHER_TRAMPOLINE);
   if (!pathExists(src)) {
     skip(`gemini trampoline missing in package: ${src}`);
     return [];
   }
   mkdirp(GEMINI_USER_HOOKS_DIR);
-  const dst = path17.join(GEMINI_USER_HOOKS_DIR, GEMINI_DISPATCHER_TRAMPOLINE);
+  const dst = path18.join(GEMINI_USER_HOOKS_DIR, GEMINI_DISPATCHER_TRAMPOLINE);
   const src_text = readText(src);
   if (pathExists(dst) && readText(dst) === src_text && !force) {
     skip(`~/.gemini/hooks/${GEMINI_DISPATCHER_TRAMPOLINE} already up to date`);
   } else {
     writeText(dst, src_text);
-    fs19.chmodSync(dst, 493);
+    fs21.chmodSync(dst, 493);
     success(`~/.gemini/hooks/${GEMINI_DISPATCHER_TRAMPOLINE} installed`);
   }
   const settings_patch = {
     hooks: _gemini_hooks_dict((ac_event, native) => `${dst} ${ac_event} ${native}`)
   };
   return merge_json_file(
-    path17.join(GEMINI_USER_DIR, "settings.json"),
+    path18.join(GEMINI_USER_DIR, "settings.json"),
     settings_patch,
     force,
     "~/.gemini/settings.json"
   );
 }
 function ensure_copilot_bridge(project_root, force) {
-  const target = path17.join(project_root, ".github", "plugin", "marketplace.json");
+  const target = path18.join(project_root, ".github", "plugin", "marketplace.json");
   const bridge = {
     marketplace: {
       name: "event4u-agent-marketplace",
@@ -18580,7 +18700,7 @@ See \`docs/setup/per-ide/roocode.md\` for the full activation guide.
 Run \`./agent-config --help\` for available commands.
 `;
 function ensure_roocode_bridge(project_root, force) {
-  const target = path17.join(project_root, ".roo", "rules", "agent-config.md");
+  const target = path18.join(project_root, ".roo", "rules", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".roo/rules/agent-config.md already exists");
     return;
@@ -18602,7 +18722,7 @@ To wire Claude Desktop to this project's rules, run:
 Canonical rule and skill source: \`.augment/\` (see \`AGENTS.md\`).
 `;
 function ensure_claude_desktop_bridge(project_root, force) {
-  const target = path17.join(project_root, ".claude-desktop", "agent-config.md");
+  const target = path18.join(project_root, ".claude-desktop", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".claude-desktop/agent-config.md already exists");
     return;
@@ -18627,7 +18747,7 @@ Or pass \`--read .aider/agent-config.md\` on the command line.
 Canonical rule and skill source: \`.augment/\` (see \`AGENTS.md\`).
 `;
 function ensure_aider_bridge(project_root, force) {
-  const target = path17.join(project_root, ".aider", "agent-config.md");
+  const target = path18.join(project_root, ".aider", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".aider/agent-config.md already exists");
     return;
@@ -18646,7 +18766,7 @@ developers where the rules and skills live.
 Canonical rule and skill source: \`.augment/\` (see project \`AGENTS.md\`).
 `;
 function ensure_codex_bridge(project_root, force) {
-  const target = path17.join(project_root, ".codex", "agent-config.md");
+  const target = path18.join(project_root, ".codex", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".codex/agent-config.md already exists");
     return;
@@ -18664,7 +18784,7 @@ rules per session. The canonical rule and skill source lives under
 orientation).
 `;
 function ensure_continue_bridge(project_root, force) {
-  const target = path17.join(project_root, ".continue", "rules", "agent-config.md");
+  const target = path18.join(project_root, ".continue", "rules", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".continue/rules/agent-config.md already exists");
     return;
@@ -18695,7 +18815,7 @@ orientation).
 See \`docs/setup/per-ide/kilocode.md\` for the full activation guide.
 `;
 function ensure_kilocode_bridge(project_root, force) {
-  const target = path17.join(project_root, ".kilocode", "rules", "agent-config.md");
+  const target = path18.join(project_root, ".kilocode", "rules", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".kilocode/rules/agent-config.md already exists");
     return;
@@ -18722,7 +18842,7 @@ canonical source (or symlink it):
 Canonical rule and skill source: \`.augment/\` (see \`AGENTS.md\`).
 `;
 function ensure_zed_bridge(project_root, force) {
-  const target = path17.join(project_root, ".zed", "agent-config.md");
+  const target = path18.join(project_root, ".zed", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".zed/agent-config.md already exists");
     return;
@@ -18743,7 +18863,7 @@ rules into your JetBrains profile.
 Canonical rule and skill source: \`.augment/\` (see \`AGENTS.md\`).
 `;
 function ensure_jetbrains_bridge(project_root, force) {
-  const target = path17.join(project_root, ".jetbrains", "agent-config.md");
+  const target = path18.join(project_root, ".jetbrains", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".jetbrains/agent-config.md already exists");
     return;
@@ -18774,7 +18894,7 @@ session. The canonical rule and skill source lives under \`.augment/\`
 See \`docs/setup/per-ide/kiro.md\` for the full activation guide.
 `;
 function ensure_kiro_bridge(project_root, force) {
-  const target = path17.join(project_root, ".kiro", "steering", "agent-config.md");
+  const target = path18.join(project_root, ".kiro", "steering", "agent-config.md");
   if (pathExists(target) && !force) {
     skip(".kiro/steering/agent-config.md already exists");
     return;
@@ -18800,35 +18920,35 @@ var SMOKE_BRIDGE_PATHS = {
 };
 function dirHasEntries(p) {
   try {
-    return fs19.readdirSync(p).length > 0;
+    return fs21.readdirSync(p).length > 0;
   } catch {
     return false;
   }
 }
 function _resolve_tsx_invocation(scriptPath, scriptArgs) {
   const binName = process3.platform === "win32" ? "tsx.cmd" : "tsx";
-  let dir = path17.dirname(scriptPath);
+  let dir = path18.dirname(scriptPath);
   for (; ; ) {
-    const candidate = path17.join(dir, "node_modules", ".bin", binName);
+    const candidate = path18.join(dir, "node_modules", ".bin", binName);
     if (isFile(candidate)) {
       return { command: candidate, args: [scriptPath, ...scriptArgs] };
     }
-    const parent = path17.dirname(dir);
+    const parent = path18.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return { command: "npx", args: ["tsx", scriptPath, ...scriptArgs] };
 }
 function _smoke_test_hooks(project_root, package_root) {
-  const dispatcher = path17.join(package_root, "scripts", "hooks", "dispatch_hook.ts");
-  const manifest = path17.join(package_root, "scripts", "hook_manifest.yaml");
+  const dispatcher = path18.join(package_root, "scripts", "hooks", "dispatch_hook.ts");
+  const manifest = path18.join(package_root, "scripts", "hook_manifest.yaml");
   if (!isFile(dispatcher) || !isFile(manifest)) return 0;
   const failed = [];
   const skipped = [];
   const passed = [];
   for (const [platform, native] of SMOKE_PROBE_EVENTS) {
     const rel_bridge = SMOKE_BRIDGE_PATHS[platform] ?? "";
-    const bridge_path = rel_bridge ? path17.join(project_root, rel_bridge) : null;
+    const bridge_path = rel_bridge ? path18.join(project_root, rel_bridge) : null;
     const bridge_present = Boolean(
       bridge_path && (isFile(bridge_path) || isDir(bridge_path) && dirHasEntries(bridge_path))
     );
@@ -19028,9 +19148,9 @@ To remove this marker, delete this file.
 `;
 }
 var _CLAUDE_DESKTOP_BUNDLES_SUBPATH = "claude-desktop/bundles";
-var GLOBAL_ROOT = path17.join(os7.homedir(), ".event4u", "agent-config");
-var GLOBAL_USER_SETTINGS_PATH = path17.join(GLOBAL_ROOT, ".agent-user.yml");
-var GLOBAL_AGENT_SETTINGS_PATH = path17.join(GLOBAL_ROOT, ".agent-settings.yml");
+var GLOBAL_ROOT = path18.join(os8.homedir(), ".event4u", "agent-config");
+var GLOBAL_USER_SETTINGS_PATH = path18.join(GLOBAL_ROOT, ".agent-user.yml");
+var GLOBAL_AGENT_SETTINGS_PATH = path18.join(GLOBAL_ROOT, ".agent-settings.yml");
 function _bridge_marker(tool_id, scope) {
   if (scope === "global") return USER_SCOPE_PATHS[tool_id] ?? "";
   return PROJECT_BRIDGE_MARKERS[tool_id] ?? "";
@@ -19079,7 +19199,7 @@ function _load_yaml_doc(p) {
   return _isPlainObject2(data) ? data : {};
 }
 function _load_default_settings(package_root) {
-  const template_source = path17.join(package_root, "src", "config", "agent-settings.template.yml");
+  const template_source = path18.join(package_root, "src", "config", "agent-settings.template.yml");
   if (!pathExists(template_source)) return {};
   let text;
   try {
@@ -19093,11 +19213,11 @@ function _load_default_settings(package_root) {
 }
 var RULE_LAYER_CHOICES = ["global", "project", "both-acknowledged"];
 function _suppress_rule_layer(project_root, suppress_dir) {
-  const target = path17.join(project_root, ".claude", "settings.local.json");
+  const target = path18.join(project_root, ".claude", "settings.local.json");
   const existing = pathExists(target) ? read_json_file(target) : {};
   let real_dir = suppress_dir;
   try {
-    real_dir = fs19.realpathSync(suppress_dir);
+    real_dir = fs21.realpathSync(suppress_dir);
   } catch {
     real_dir = suppress_dir;
   }
@@ -19108,8 +19228,8 @@ function _suppress_rule_layer(project_root, suppress_dir) {
   success(`.claude/settings.local.json: claudeMdExcludes += ${entry}`);
 }
 function _gate_rule_layer_overlap(project_root, layer, dry_run) {
-  const global_dir = path17.join(os7.homedir(), ".claude", "rules");
-  const project_dir = path17.join(project_root, ".claude", "rules");
+  const global_dir = path18.join(os8.homedir(), ".claude", "rules");
+  const project_dir = path18.join(project_root, ".claude", "rules");
   const g = readRuleLayer(global_dir);
   const p = readRuleLayer(project_dir);
   if (g === null || p === null) return true;
@@ -19219,9 +19339,9 @@ function detect_scope(cwd) {
   if (pathExists(_resolve_settings_read(cwd))) {
     return ["project", `existing ${SETTINGS_FILE}`];
   }
-  const has_manifest = SCOPE_DETECT_MANIFESTS.find((m) => pathExists(path17.join(cwd, m))) ?? null;
-  const has_ai_dir = SCOPE_DETECT_AI_DIRS.find((d) => isDir(path17.join(cwd, d))) ?? null;
-  const has_ai_file = SCOPE_DETECT_AI_FILES.find((f) => pathExists(path17.join(cwd, f))) ?? null;
+  const has_manifest = SCOPE_DETECT_MANIFESTS.find((m) => pathExists(path18.join(cwd, m))) ?? null;
+  const has_ai_dir = SCOPE_DETECT_AI_DIRS.find((d) => isDir(path18.join(cwd, d))) ?? null;
+  const has_ai_file = SCOPE_DETECT_AI_FILES.find((f) => pathExists(path18.join(cwd, f))) ?? null;
   if (has_manifest && (has_ai_dir || has_ai_file)) {
     const marker = has_ai_dir || has_ai_file;
     return ["prompt", `manifest (${has_manifest}) + AI-tool config (${marker})`];
@@ -19242,7 +19362,7 @@ function readLineSyncRaw(promptText) {
   for (; ; ) {
     let n;
     try {
-      n = fs19.readSync(0, buf, 0, 1, null);
+      n = fs21.readSync(0, buf, 0, 1, null);
     } catch (err) {
       const code = err.code;
       if (code === "EAGAIN") {
@@ -19317,8 +19437,8 @@ function _files_by_tool_from_bridges(tools, project_root, scope) {
     const marker = _bridge_marker(tool_id, scope);
     if (!marker) continue;
     let marker_path = marker;
-    if (!path17.isAbsolute(marker_path)) {
-      marker_path = path17.join(project_root, marker_path);
+    if (!path18.isAbsolute(marker_path)) {
+      marker_path = path18.join(project_root, marker_path);
     }
     out[tool_id] = [_file_entry(marker_path, "bridge", false)];
   }
@@ -19357,26 +19477,26 @@ function _update_installed_tools_manifest(project_root, tools, scope, force, fil
   }
   write_manifest(target, version, entries);
   if (!state.QUIET) {
-    const rel = isRelativeTo(target, project_root) ? path17.relative(project_root, target) : target;
+    const rel = isRelativeTo(target, project_root) ? path18.relative(project_root, target) : target;
     info(`Manifest updated: ${rel}`);
   }
   return 0;
 }
 function isRelativeTo(child, parent) {
-  const rel = path17.relative(parent, child);
-  return rel === "" || !rel.startsWith("..") && !path17.isAbsolute(rel);
+  const rel = path18.relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !path18.isAbsolute(rel);
 }
 function _resolve_package_root_for_global() {
   const here = resolvePath(_HERE2);
-  const candidate = path17.dirname(path17.dirname(path17.dirname(here)));
-  if (!pathExists(path17.join(candidate, "src", "config", "profiles", "minimal.ini"))) {
+  const candidate = path18.dirname(path18.dirname(path18.dirname(here)));
+  if (!pathExists(path18.join(candidate, "src", "config", "profiles", "minimal.ini"))) {
     fail(
       `Could not locate agent-config package root from ${here}. Expected src/config/profiles/minimal.ini at the parent directory.`
     );
   }
   return candidate;
 }
-var CONSUMER_BRIDGE_MARKER_RELPATH = path17.join("agents", ".event4u-bridge.yml");
+var CONSUMER_BRIDGE_MARKER_RELPATH = path18.join("agents", ".event4u-bridge.yml");
 var MIGRATE_LEGACY_YAML_FILES = [".agent-settings.yml", ".agent-user.yml"];
 var MIGRATE_LEGACY_TOOL_DIRS = [".augment", ".claude", ".cursor"];
 var AGENT_CONFIG_PACKAGE_NAME = "@event4u/agent-config";
@@ -19384,7 +19504,7 @@ function _is_agent_config_source_repo(project_root) {
   if (process3.env["AGENT_CONFIG_CONSUMER_MODE"] === "1") {
     return [false, "consumer-mode-override"];
   }
-  const pkg_json = path17.join(project_root, "package.json");
+  const pkg_json = path18.join(project_root, "package.json");
   if (isFile(pkg_json)) {
     let data = {};
     try {
@@ -19396,18 +19516,18 @@ function _is_agent_config_source_repo(project_root) {
       return [true, "package.json:name"];
     }
   }
-  if (isDir(path17.join(project_root, ".agent-src.uncondensed"))) {
+  if (isDir(path18.join(project_root, ".agent-src.uncondensed"))) {
     return [true, ".agent-src.uncondensed/"];
   }
-  const packages_dir = path17.join(project_root, "packages");
+  const packages_dir = path18.join(project_root, "packages");
   if (isDir(packages_dir)) {
-    for (const child of fs19.readdirSync(packages_dir)) {
-      if (isDir(path17.join(packages_dir, child, ".agent-src.uncondensed"))) {
+    for (const child of fs21.readdirSync(packages_dir)) {
+      if (isDir(path18.join(packages_dir, child, ".agent-src.uncondensed"))) {
         return [true, `packages/${child}/.agent-src.uncondensed/`];
       }
     }
   }
-  const installer_self = path17.join(project_root, "scripts", "install.py");
+  const installer_self = path18.join(project_root, "scripts", "install.py");
   try {
     if (isFile(installer_self) && resolvePath(installer_self) === resolvePath(_HERE2)) {
       return [true, "src/scripts/install.py (self)"];
@@ -19427,17 +19547,17 @@ function _detect_legacy_for_migration(project_root) {
     }
     return [];
   }
-  if (isFile(path17.join(project_root, INSTALL_MODE_MARKER_REL))) return [];
+  if (isFile(path18.join(project_root, INSTALL_MODE_MARKER_REL))) return [];
   const found = [];
   for (const name of MIGRATE_LEGACY_YAML_FILES) {
-    if (isFile(path17.join(project_root, name))) {
+    if (isFile(path18.join(project_root, name))) {
       found.push(name);
-    } else if (isFile(path17.join(project_root, "settings", name))) {
+    } else if (isFile(path18.join(project_root, "settings", name))) {
       found.push(`settings/${name}`);
     }
   }
   for (const name of MIGRATE_LEGACY_TOOL_DIRS) {
-    const p = path17.join(project_root, name);
+    const p = path18.join(project_root, name);
     if (isDir(p) && !isSymlink(p)) {
       found.push(`${name}/`);
     }
@@ -19449,7 +19569,7 @@ function _prompt_migrate_to_global(project_root, artefacts) {
     process3.stdout.write("\n");
     warn("Legacy project-local artefacts detected \u2014 pre-ADR-020 layout:");
     for (const rel of artefacts) {
-      info(`  ${path17.join(project_root, rel)}`);
+      info(`  ${path18.join(project_root, rel)}`);
     }
     info("The unified `agent-config migrate` sweeps these in one pass.");
     info("The wizard recreates fresh config afterwards.");
@@ -19478,22 +19598,22 @@ function _run_migrate_to_global(project_root) {
   }
 }
 function _format_global_root_for_marker(global_root) {
-  const home = resolvePath(os7.homedir());
+  const home = resolvePath(os8.homedir());
   const resolved = resolvePath(global_root);
-  const rel = path17.relative(home, resolved);
-  if (rel === "" || rel.startsWith("..") || path17.isAbsolute(rel)) {
+  const rel = path18.relative(home, resolved);
+  if (rel === "" || rel.startsWith("..") || path18.isAbsolute(rel)) {
     return global_root;
   }
-  return `~/${rel.split(path17.sep).join("/")}`;
+  return `~/${rel.split(path18.sep).join("/")}`;
 }
 function _remove_legacy_consumer_bridge_marker(project_root, env = null) {
   const env_map = env ?? process3.env;
   if (env_map["AGENT_CONFIG_DEV_MODE"] === "1") return null;
-  if (isDir(path17.join(project_root, ".agent-src.uncondensed"))) return null;
-  const target = path17.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH);
+  if (isDir(path18.join(project_root, ".agent-src.uncondensed"))) return null;
+  const target = path18.join(project_root, CONSUMER_BRIDGE_MARKER_RELPATH);
   if (!isFile(target)) return null;
   try {
-    fs19.rmSync(target);
+    fs21.rmSync(target);
   } catch {
     return null;
   }
@@ -19507,7 +19627,7 @@ var PROJECT_ANCHOR_TOOLS = {
 function _write_per_tool_project_anchors(project_root, tools, env = null, now = null) {
   const env_map = env ?? process3.env;
   if (env_map["AGENT_CONFIG_DEV_MODE"] === "1") return [];
-  if (isDir(path17.join(project_root, ".agent-src.uncondensed"))) return [];
+  if (isDir(path18.join(project_root, ".agent-src.uncondensed"))) return [];
   const global_root_str = _format_global_root_for_marker(
     event4u_root(env_map)
   );
@@ -19516,8 +19636,8 @@ function _write_per_tool_project_anchors(project_root, tools, env = null, now =
   for (const tool_id of Object.keys(PROJECT_ANCHOR_TOOLS).sort()) {
     const rel_path = PROJECT_ANCHOR_TOOLS[tool_id];
     if (!tools.has(tool_id)) continue;
-    const target = path17.join(project_root, rel_path);
-    mkdirp(path17.dirname(target));
+    const target = path18.join(project_root, rel_path);
+    mkdirp(path18.dirname(target));
     const body = `# event4u/agent-config \u2014 per-tool project anchor (auto-written).
 # Spec: docs/contracts/consumer-bridge.md \xA7 Per-tool anchor strategy.
 # Tool: ${tool_id}. Resolves the global install directly \u2014 no
@@ -19535,7 +19655,7 @@ installed_at: ${stamp}
 }
 var PACKAGE_TAG_ID = "event4u/agent-config";
 function _inject_package_tag(target, source, package_root) {
-  if (path17.extname(target) !== ".md") return;
+  if (path18.extname(target) !== ".md") return;
   let text;
   try {
     text = readText(target);
@@ -19563,8 +19683,8 @@ function _inject_package_tag(target, source, package_root) {
       resolved_src = source;
     }
     if (package_root !== null) {
-      const rel = path17.relative(resolvePath(package_root), resolved_src);
-      if (rel !== "" && !rel.startsWith("..") && !path17.isAbsolute(rel)) {
+      const rel = path18.relative(resolvePath(package_root), resolved_src);
+      if (rel !== "" && !rel.startsWith("..") && !path18.isAbsolute(rel)) {
         source_value = rel;
       } else {
         source_value = resolved_src;
@@ -19599,7 +19719,7 @@ function _escapes_package_root(resolved, package_root) {
   if (package_root === null) return false;
   let root;
   try {
-    root = fs19.realpathSync(package_root);
+    root = fs21.realpathSync(package_root);
   } catch {
     return false;
   }
@@ -19614,7 +19734,7 @@ function _copy_dir_dereferencing_symlinks(src, dest, force, package_root = null,
     if (file_filter !== null && !file_filter(src)) return [0, 0, written_paths];
     let resolved_src = src;
     try {
-      resolved_src = fs19.realpathSync(src);
+      resolved_src = fs21.realpathSync(src);
     } catch {
       resolved_src = src;
     }
@@ -19622,10 +19742,10 @@ function _copy_dir_dereferencing_symlinks(src, dest, force, package_root = null,
       warn(`refused: ${src} dereferences outside the package root \u2014 not copied`);
       return [0, 0, written_paths];
     }
-    mkdirp(path17.dirname(dest));
+    mkdirp(path18.dirname(dest));
     const decision = _resolve_file_conflict(dest, force);
     if (decision === "skip") return [0, 1, written_paths];
-    fs19.copyFileSync(src, dest);
+    fs21.copyFileSync(src, dest);
     _inject_package_tag(dest, src, package_root);
     written_paths.push(dest);
     return [1, 0, written_paths];
@@ -19633,11 +19753,11 @@ function _copy_dir_dereferencing_symlinks(src, dest, force, package_root = null,
   mkdirp(dest);
   const walk = (node) => {
     const acc = [];
-    const names = fs19.readdirSync(node).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
+    const names = fs21.readdirSync(node).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
     for (const name of names) {
-      const entry = path17.join(node, name);
+      const entry = path18.join(node, name);
       acc.push(entry);
-      const lst = fs19.lstatSync(entry);
+      const lst = fs21.lstatSync(entry);
       if (lst.isDirectory() && !lst.isSymbolicLink()) {
         acc.push(...walk(entry));
       }
@@ -19645,9 +19765,9 @@ function _copy_dir_dereferencing_symlinks(src, dest, force, package_root = null,
     return acc;
   };
   for (const entry of walk(src)) {
-    const rel = path17.relative(src, entry);
-    const target = path17.join(dest, rel);
-    const lst = fs19.lstatSync(entry);
+    const rel = path18.relative(src, entry);
+    const target = path18.join(dest, rel);
+    const lst = fs21.lstatSync(entry);
     if (lst.isDirectory() && !lst.isSymbolicLink()) {
       mkdirp(target);
       continue;
@@ -19655,8 +19775,8 @@ function _copy_dir_dereferencing_symlinks(src, dest, force, package_root = null,
     let resolvedIsDir = false;
     let resolved = entry;
     try {
-      resolved = fs19.realpathSync(entry);
-      resolvedIsDir = fs19.statSync(entry).isDirectory();
+      resolved = fs21.realpathSync(entry);
+      resolvedIsDir = fs21.statSync(entry).isDirectory();
     } catch {
       resolvedIsDir = false;
     }
@@ -19686,8 +19806,8 @@ function _copy_dir_dereferencing_symlinks(src, dest, force, package_root = null,
       skipped += 1;
       continue;
     }
-    mkdirp(path17.dirname(target));
-    fs19.copyFileSync(resolved, target);
+    mkdirp(path18.dirname(target));
+    fs21.copyFileSync(resolved, target);
     _inject_package_tag(target, resolved, package_root);
     written += 1;
     written_paths.push(target);
@@ -19699,7 +19819,7 @@ function _claude_desktop_bundles_dir() {
 }
 function _write_claude_desktop_marker(_force, lockfile_path2, bundles_dir, bundle_count) {
   const anchor = expanduser6(USER_SCOPE_PATHS["claude-desktop"]);
-  const target = path17.join(anchor, "agent-config.md");
+  const target = path18.join(anchor, "agent-config.md");
   mkdirp(anchor);
   const body = claudeDesktopMarkerBody(lockfile_path2, anchor, bundles_dir, bundle_count);
   writeText(target, body);
@@ -19723,23 +19843,23 @@ function _apply_claude_flat_command_wrappers(anchor, package_root, current_files
   const wrapped = [];
   const collisions = [];
   const reserved = [];
-  const commands_dir = path17.join(anchor, "commands");
+  const commands_dir = path18.join(anchor, "commands");
   let flat_entries = [];
   try {
-    flat_entries = fs19.readdirSync(commands_dir).filter((f) => f.endsWith(".md"));
+    flat_entries = fs21.readdirSync(commands_dir).filter((f) => f.endsWith(".md"));
   } catch {
   }
   for (const fname of flat_entries.sort()) {
     const slug = fname.slice(0, -".md".length);
     if (!is_claude_builtin_name(slug)) continue;
-    fs19.rmSync(path17.join(commands_dir, fname), { force: true });
+    fs21.rmSync(path18.join(commands_dir, fname), { force: true });
     current_files.delete(`commands/${fname}`);
     reserved.push(slug);
   }
   const eligible = new Set(_CLAUDE_FLAT_WRAPPER_EXTRA);
   try {
     const manifest = JSON.parse(
-      fs19.readFileSync(path17.join(package_root, "dist", "discovery", "discovery-manifest.json"), "utf8")
+      fs21.readFileSync(path18.join(package_root, "dist", "discovery", "discovery-manifest.json"), "utf8")
     );
     for (const a of manifest.artefacts ?? []) {
       if (a.category !== "command" || typeof a.slug !== "string") continue;
@@ -19750,22 +19870,22 @@ function _apply_claude_flat_command_wrappers(anchor, package_root, current_files
   }
   for (const slug of [...eligible].sort()) {
     const flat_rel = `commands/${slug}.md`;
-    const flat_abs = path17.join(anchor, "commands", `${slug}.md`);
-    if (!fs19.existsSync(flat_abs)) continue;
-    const skill_dir = path17.join(anchor, "skills", slug);
-    if (fs19.existsSync(skill_dir)) {
+    const flat_abs = path18.join(anchor, "commands", `${slug}.md`);
+    if (!fs21.existsSync(flat_abs)) continue;
+    const skill_dir = path18.join(anchor, "skills", slug);
+    if (fs21.existsSync(skill_dir)) {
       collisions.push(slug);
       continue;
     }
-    let body = fs19.readFileSync(flat_abs, "utf8");
+    let body = fs21.readFileSync(flat_abs, "utf8");
     if (body.startsWith("---\n") && !/^name:/m.test(body.split("\n---")[0] ?? "")) {
       body = body.replace("---\n", `---
 name: ${slug}
 `);
     }
-    fs19.mkdirSync(skill_dir, { recursive: true });
-    fs19.writeFileSync(path17.join(skill_dir, "SKILL.md"), body, "utf8");
-    fs19.rmSync(flat_abs, { force: true });
+    fs21.mkdirSync(skill_dir, { recursive: true });
+    fs21.writeFileSync(path18.join(skill_dir, "SKILL.md"), body, "utf8");
+    fs21.rmSync(flat_abs, { force: true });
     current_files.delete(flat_rel);
     current_files.add(`skills/${slug}/SKILL.md`);
     wrapped.push(slug);
@@ -19797,8 +19917,8 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
     const written_paths = [];
     let current_files = /* @__PURE__ */ new Set();
     for (const [src_rel, dest_sub] of plan) {
-      const src = path17.join(package_root, src_rel);
-      const dest = dest_sub ? path17.join(anchor, dest_sub) : anchor;
+      const src = path18.join(package_root, src_rel);
+      const dest = dest_sub ? path18.join(anchor, dest_sub) : anchor;
       const rule_filter = _rule_filter_for_source(src_rel, rule_scope);
       const [w, s, paths] = _copy_dir_dereferencing_symlinks(
         src,
@@ -19872,10 +19992,10 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
     results[tool_id] = [written_total, skipped_total, "deployed", written_paths];
     if (tool_id === "claude-code") {
       try {
-        const manifest = path17.join(package_root, "src", "scripts", "hook_manifest.yaml");
+        const manifest = path18.join(package_root, "src", "scripts", "hook_manifest.yaml");
         const matrix = build_claude_hook_matrix(manifest);
         const res = ensure_managed_hooks(
-          path17.join(anchor, "settings.json"),
+          path18.join(anchor, "settings.json"),
           matrix
         );
         if (!state.QUIET) {
@@ -19912,7 +20032,7 @@ function _preview_global_reap(tools, package_root) {
     const anchor = expanduser6(anchor_raw);
     let current_files = /* @__PURE__ */ new Set();
     for (const [src_rel, dest_sub] of plan) {
-      const src = path17.join(package_root, src_rel);
+      const src = path18.join(package_root, src_rel);
       current_files = setUnion(
         current_files,
         expected_deploy_files(
@@ -19946,14 +20066,14 @@ function _preview_global_reap(tools, package_root) {
 function _verify_deploy_targets(anchor, plan) {
   const missing = [];
   for (const [, dest_sub] of plan) {
-    const target = dest_sub ? path17.join(anchor, dest_sub) : anchor;
+    const target = dest_sub ? path18.join(anchor, dest_sub) : anchor;
     const label = dest_sub || ".";
     if (!isDir(target)) {
       missing.push(label);
       continue;
     }
     try {
-      const entries = fs19.readdirSync(target);
+      const entries = fs21.readdirSync(target);
       if (entries.length === 0) missing.push(label);
     } catch {
       missing.push(label);
@@ -19968,13 +20088,13 @@ function _prune_modules_by(deploy_results, is_pruned) {
     const [written, skipped, status, paths] = deploy_results[tool_id];
     const pruned_skill_dirs = /* @__PURE__ */ new Set();
     for (const p of paths) {
-      const parts = p.split(path17.sep);
+      const parts = p.split(path18.sep);
       if (parts.includes("skills")) {
         const i = parts.indexOf("skills");
         if (i + 1 < parts.length) {
-          const skill_root = parts.slice(0, i + 2).join(path17.sep);
+          const skill_root = parts.slice(0, i + 2).join(path18.sep);
           if (!pruned_skill_dirs.has(skill_root)) {
-            const skillmd = path17.join(skill_root, "SKILL.md");
+            const skillmd = path18.join(skill_root, "SKILL.md");
             if (pathExists(skillmd) && is_pruned(skillmd)) {
               pruned_skill_dirs.add(skill_root);
             }
@@ -19985,25 +20105,25 @@ function _prune_modules_by(deploy_results, is_pruned) {
     const keep = [];
     const delete_files = [];
     for (const p of paths) {
-      const parts = p.split(path17.sep);
+      const parts = p.split(path18.sep);
       let is_target = false;
       if (parts.includes("skills")) {
         const i = parts.indexOf("skills");
-        if (i + 1 < parts.length && pruned_skill_dirs.has(parts.slice(0, i + 2).join(path17.sep))) {
+        if (i + 1 < parts.length && pruned_skill_dirs.has(parts.slice(0, i + 2).join(path18.sep))) {
           is_target = true;
         }
-      } else if (parts.includes("commands") && path17.extname(p) === ".md" && is_pruned(p)) {
+      } else if (parts.includes("commands") && path18.extname(p) === ".md" && is_pruned(p)) {
         is_target = true;
       }
       (is_target ? delete_files : keep).push(p);
     }
     for (const d of pruned_skill_dirs) {
-      fs19.rmSync(d, { recursive: true, force: true });
+      fs21.rmSync(d, { recursive: true, force: true });
     }
     for (const p of delete_files) {
-      if (p.split(path17.sep).includes("commands") && pathExists(p)) {
+      if (p.split(path18.sep).includes("commands") && pathExists(p)) {
         try {
-          fs19.unlinkSync(p);
+          fs21.unlinkSync(p);
         } catch {
         }
       }
@@ -20024,9 +20144,9 @@ function _resolve_global_settings_doc() {
 }
 function _resolve_global_settings_path() {
   const root = event4u_root();
-  const canonical = path17.join(root, "settings", SETTINGS_FILE);
+  const canonical = path18.join(root, "settings", SETTINGS_FILE);
   if (pathExists(canonical)) return canonical;
-  const legacy = path17.join(root, SETTINGS_FILE);
+  const legacy = path18.join(root, SETTINGS_FILE);
   if (pathExists(legacy)) return legacy;
   return null;
 }
@@ -20075,7 +20195,7 @@ function _resolve_global_rule_scope(package_root) {
 }
 function _rule_filter_for_source(src_rel, scope) {
   if (src_rel !== RULE_SOURCE_REL) return null;
-  return (srcFile) => ruleFileArrives(srcFile, scope);
+  return (srcFile) => ruleFileArrives(srcFile, scope) && !isExclusivelyPackageOnly(srcFile);
 }
 function _prune_scoped_modules(deploy_results, active_ids) {
   return _prune_modules_by(
@@ -20137,7 +20257,7 @@ function install_global(tools, force, project_root = null, core_only = false) {
     info(`  schema_version=1, agent_config_version=${installed_version}`);
     info(`  tools=${merged_tools.join(",")}`);
   }
-  if (project_root !== null && pathExists(_resolve_settings_read(project_root)) && !isDir(path17.join(project_root, ".agent-src.uncondensed"))) {
+  if (project_root !== null && pathExists(_resolve_settings_read(project_root)) && !isDir(path18.join(project_root, ".agent-src.uncondensed"))) {
     const drift = collect_drift(project_root);
     if (!state.QUIET) {
       process3.stdout.write("\n");
@@ -20181,17 +20301,24 @@ function install_global(tools, force, project_root = null, core_only = false) {
       (tool_id) => deploy_results[tool_id][2] === "deploy_failed"
     )
   );
-  if (failed_tools.size > 0) {
-    const corrected_tools = merged_tools.filter((t) => !failed_tools.has(t));
-    if (!arrayStrEqual(corrected_tools, merged_tools)) {
-      write_lockfile(installed_version, corrected_tools, { path: write_path });
-      if (!state.QUIET) {
-        warn(
-          `Lockfile corrected after deploy postcheck \u2014 dropped ${[...failed_tools].sort().join(", ")} (verification failed).`
-        );
-      }
+  const corrected_tools = failed_tools.size > 0 ? merged_tools.filter((t) => !failed_tools.has(t)) : merged_tools;
+  if (failed_tools.size > 0 && !arrayStrEqual(corrected_tools, merged_tools)) {
+    write_lockfile(installed_version, corrected_tools, { path: write_path });
+    if (!state.QUIET) {
+      warn(
+        `Lockfile corrected after deploy postcheck \u2014 dropped ${[...failed_tools].sort().join(", ")} (verification failed).`
+      );
     }
   }
+  stampHostLayerFingerprint(
+    installed_version,
+    corrected_tools,
+    write_path,
+    failed_tools.has("claude-code"),
+    (m) => {
+      if (!state.QUIET) info(m);
+    }
+  );
   if (state.PROGRESS_NDJSON) {
     const ordered = Object.keys(deploy_results).sort();
     const total = ordered.length;
@@ -20237,19 +20364,19 @@ function install_global(tools, force, project_root = null, core_only = false) {
       }
     }
   }
-  if (project_root !== null && pathExists(_resolve_settings_read(project_root)) && !isDir(path17.join(project_root, ".agent-src.uncondensed"))) {
+  if (project_root !== null && pathExists(_resolve_settings_read(project_root)) && !isDir(path18.join(project_root, ".agent-src.uncondensed"))) {
     const files_by_tool = _files_by_tool_from_deploy(deploy_results);
     const rc = _update_installed_tools_manifest(project_root, tools, "global", force, files_by_tool);
     if (rc !== 0) return rc;
     const removed_marker = _remove_legacy_consumer_bridge_marker(project_root);
     if (removed_marker !== null && !state.QUIET) {
-      const rel = isRelativeTo(removed_marker, project_root) ? path17.relative(project_root, removed_marker) : removed_marker;
+      const rel = isRelativeTo(removed_marker, project_root) ? path18.relative(project_root, removed_marker) : removed_marker;
       info(`Removed legacy bridge marker: ${rel}`);
     }
     const anchor_paths = _write_per_tool_project_anchors(project_root, tools);
     if (anchor_paths.length > 0 && !state.QUIET) {
       for (const p of anchor_paths) {
-        const rel = isRelativeTo(p, project_root) ? path17.relative(project_root, p) : p;
+        const rel = isRelativeTo(p, project_root) ? path18.relative(project_root, p) : p;
         info(`Project anchor written: ${rel}`);
       }
     }
@@ -20285,8 +20412,8 @@ function install_global(tools, force, project_root = null, core_only = false) {
 }
 function _catalogue_truncation_warnings(deploy_results, project_root) {
   const log_candidates = [
-    path17.join(event4u_root(), "state", "skill-catalogue.jsonl"),
-    ...project_root ? [path17.join(project_root, OBSERVATION_LOG)] : []
+    path18.join(event4u_root(), "state", "skill-catalogue.jsonl"),
+    ...project_root ? [path18.join(project_root, OBSERVATION_LOG)] : []
   ];
   const records = log_candidates.flatMap((p) => readObservationLog(p));
   if (records.length === 0) return [];
@@ -20309,13 +20436,13 @@ function _catalogue_truncation_warnings(deploy_results, project_root) {
 function _scoped_migration_notice(deploy_results, project_root, package_root, probe) {
   if (!isInteractiveSession(probe)) return [];
   const log_candidates = [
-    path17.join(event4u_root(), "state", "skill-catalogue.jsonl"),
-    ...project_root ? [path17.join(project_root, OBSERVATION_LOG)] : []
+    path18.join(event4u_root(), "state", "skill-catalogue.jsonl"),
+    ...project_root ? [path18.join(project_root, OBSERVATION_LOG)] : []
   ];
   const limits = knownHostLimits(log_candidates.flatMap((p) => readObservationLog(p)));
   if (limits.size === 0) return [];
   const resolved = _resolve_scoped_projection(package_root);
-  const settings_path = _resolve_global_settings_path() ?? path17.join(event4u_root(), "settings", SETTINGS_FILE);
+  const settings_path = _resolve_global_settings_path() ?? path18.join(event4u_root(), "settings", SETTINGS_FILE);
   for (const tool_id of Object.keys(deploy_results).sort()) {
     const [, , status] = deploy_results[tool_id];
     if (status !== "deployed") continue;
@@ -20334,8 +20461,8 @@ function _scoped_migration_notice(deploy_results, project_root, package_root, pr
   }
   return [];
 }
-var SETTINGS_SURFACE_REL = path17.join("state", "settings-surface.json");
-var SETTINGS_DELTA_REL = path17.join("state", "settings-delta.json");
+var SETTINGS_SURFACE_REL = path18.join("state", "settings-surface.json");
+var SETTINGS_DELTA_REL = path18.join("state", "settings-delta.json");
 function _current_settings_surface(version) {
   const jsonSchema = zodToJsonSchema(settingsSchema, {
     name: "AgentSettings",
@@ -20346,20 +20473,20 @@ function _current_settings_surface(version) {
 }
 function _write_settings_surface_snapshot(installed_version) {
   const root = event4u_root();
-  const surface_path = path17.join(root, SETTINGS_SURFACE_REL);
-  const delta_path = path17.join(root, SETTINGS_DELTA_REL);
+  const surface_path = path18.join(root, SETTINGS_SURFACE_REL);
+  const delta_path = path18.join(root, SETTINGS_DELTA_REL);
   const next = _current_settings_surface(installed_version);
   let previous = null;
   try {
-    const parsed = JSON.parse(fs19.readFileSync(surface_path, "utf8"));
+    const parsed = JSON.parse(fs21.readFileSync(surface_path, "utf8"));
     if (parsed !== null && typeof parsed === "object" && parsed.entries !== void 0) previous = parsed;
   } catch {
   }
   if (previous !== null && previous.version !== next.version) {
     const delta = computeSurfaceDelta(previous, next);
     if (delta.changes.length > 0) {
-      fs19.mkdirSync(path17.dirname(delta_path), { recursive: true, mode: 448 });
-      fs19.writeFileSync(delta_path, `${JSON.stringify(delta, null, 2)}
+      fs21.mkdirSync(path18.dirname(delta_path), { recursive: true, mode: 448 });
+      fs21.writeFileSync(delta_path, `${JSON.stringify(delta, null, 2)}
 `, { mode: 384 });
       if (!state.QUIET) {
         const counts = {};
@@ -20371,8 +20498,8 @@ function _write_settings_surface_snapshot(installed_version) {
       }
     }
   }
-  fs19.mkdirSync(path17.dirname(surface_path), { recursive: true, mode: 448 });
-  fs19.writeFileSync(surface_path, `${JSON.stringify(next, null, 2)}
+  fs21.mkdirSync(path18.dirname(surface_path), { recursive: true, mode: 448 });
+  fs21.writeFileSync(surface_path, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
 }
 function arrayStrEqual(a, b) {
@@ -20592,13 +20719,13 @@ function _minimal_templates_root() {
   const chain = [start];
   let cur = start;
   for (; ; ) {
-    const parent = path17.dirname(cur);
+    const parent = path18.dirname(cur);
     if (parent === cur) break;
     chain.push(parent);
     cur = parent;
   }
   for (const ancestor of chain) {
-    const candidate = path17.join(ancestor, "src", "templates", "minimal");
+    const candidate = path18.join(ancestor, "src", "templates", "minimal");
     if (isDir(candidate)) return candidate;
   }
   fail("Could not locate src/templates/minimal/ \u2014 package install is corrupt.");
@@ -20606,9 +20733,9 @@ function _minimal_templates_root() {
 var INSTALL_MODE_MARKER_REL = "agents/.agent-state/install-mode.txt";
 function _write_install_mode_marker(project_root, mode) {
   if (mode !== "minimal" && mode !== "full") return;
-  const marker = path17.join(project_root, INSTALL_MODE_MARKER_REL);
+  const marker = path18.join(project_root, INSTALL_MODE_MARKER_REL);
   try {
-    mkdirp(path17.dirname(marker));
+    mkdirp(path18.dirname(marker));
     writeText(marker, `${mode}
 `);
   } catch {
@@ -20617,7 +20744,7 @@ function _write_install_mode_marker(project_root, mode) {
 function install_minimal(target_root_in, force, user_type = "") {
   let target_root = resolvePath(target_root_in);
   mkdirp(target_root);
-  const parent = path17.dirname(target_root);
+  const parent = path18.dirname(target_root);
   if (parent !== target_root) {
     const existing = find_project_root_with_anchor(parent);
     if (existing !== null && existing[0] !== target_root) {
@@ -20628,21 +20755,21 @@ function install_minimal(target_root_in, force, user_type = "") {
     }
   }
   const templates = _minimal_templates_root();
-  const settings_src = path17.join(templates, SETTINGS_FILE);
-  const overrides_gitkeep_src = path17.join(templates, "overrides-gitkeep");
-  const overrides_readme_src = path17.join(templates, "agents-overrides-readme.md");
+  const settings_src = path18.join(templates, SETTINGS_FILE);
+  const overrides_gitkeep_src = path18.join(templates, "overrides-gitkeep");
+  const overrides_readme_src = path18.join(templates, "agents-overrides-readme.md");
   if (!isFile(settings_src)) fail(`Bundled minimal settings template missing under ${templates}`);
   if (!isFile(overrides_gitkeep_src) || !isFile(overrides_readme_src)) {
     fail(`Bundled overrides scaffold templates missing under ${templates}`);
   }
   info(`Minimal init \u2192 ${target_root}`);
-  const overrides_root = path17.join(target_root, "agents", "overrides");
+  const overrides_root = path18.join(target_root, "agents", "overrides");
   mkdirp(overrides_root);
   const gitkeep_body = readText(overrides_gitkeep_src);
   for (const sub of ["rules", "skills", "commands"]) {
-    const sub_dir = path17.join(overrides_root, sub);
+    const sub_dir = path18.join(overrides_root, sub);
     mkdirp(sub_dir);
-    const gitkeep_dst = path17.join(sub_dir, ".gitkeep");
+    const gitkeep_dst = path18.join(sub_dir, ".gitkeep");
     if (pathExists(gitkeep_dst) && !force) {
       skip(`agents/overrides/${sub}/.gitkeep already exists (use --force to overwrite)`);
     } else {
@@ -20650,7 +20777,7 @@ function install_minimal(target_root_in, force, user_type = "") {
       success(`Wrote agents/overrides/${sub}/.gitkeep`);
     }
   }
-  const readme_dst = path17.join(overrides_root, "README.md");
+  const readme_dst = path18.join(overrides_root, "README.md");
   if (pathExists(readme_dst) && !force) {
     skip("agents/overrides/README.md already exists (use --force to overwrite)");
   } else {
@@ -20668,14 +20795,14 @@ function install_minimal(target_root_in, force, user_type = "") {
 personal:
   user_type: ${user_type}
 `;
-      mkdirp(path17.dirname(settings_dst));
+      mkdirp(path18.dirname(settings_dst));
       writeText(settings_dst, body);
       success(`Wrote ${SETTINGS_FILE} (user_type=${user_type})`);
     }
   }
   const removed_marker = _remove_legacy_consumer_bridge_marker(target_root);
   if (removed_marker !== null) {
-    const rel = isRelativeTo(removed_marker, target_root) ? path17.relative(target_root, removed_marker) : removed_marker;
+    const rel = isRelativeTo(removed_marker, target_root) ? path18.relative(target_root, removed_marker) : removed_marker;
     success(`Removed legacy bridge marker: ${rel}`);
   }
   _write_install_mode_marker(target_root, "minimal");
@@ -20749,7 +20876,7 @@ function run_interactive_init(project_root, force) {
     );
     return 0;
   }
-  const target = path17.join(project_root, _LOCAL_CONFIG_FILE);
+  const target = path18.join(project_root, _LOCAL_CONFIG_FILE);
   if (pathExists(target) && !force) {
     warn(
       `${_LOCAL_CONFIG_FILE} already exists; re-run with --force to overwrite. Skipping interactive init.`
@@ -20776,7 +20903,7 @@ function run_interactive_init(project_root, force) {
     warn(`Could not write ${target}: ${String(exc)}`);
     return 1;
   }
-  success(`Wrote ${path17.relative(project_root, target)} (${user_type} / ${stack} / ${verbosity})`);
+  success(`Wrote ${path18.relative(project_root, target)} (${user_type} / ${stack} / ${verbosity})`);
   return 0;
 }
 var _WIZARD_READY_RE = /^WIZARD_READY (http:\/\/(?:127\.0\.0\.1|localhost):\d+\/\S*)\r?$/;
@@ -20794,12 +20921,12 @@ function _wizard_should_launch(opts) {
   return [true, ""];
 }
 function _wizard_cli_dist(_project_root) {
-  const package_root = path17.dirname(path17.dirname(path17.dirname(resolvePath(_HERE2))));
-  const cli = path17.join(package_root, "dist", "cli", "agent-config.js");
+  const package_root = path18.dirname(path18.dirname(path18.dirname(resolvePath(_HERE2))));
+  const cli = path18.join(package_root, "dist", "cli", "agent-config.js");
   return pathExists(cli) ? cli : null;
 }
 function _server_info_path() {
-  return path17.join(os7.homedir(), ".event4u", "agent-config", "local-server.json");
+  return path18.join(os8.homedir(), ".event4u", "agent-config", "local-server.json");
 }
 function _pid_is_agent_config(pid) {
   let res;
@@ -20816,7 +20943,7 @@ function _pid_is_agent_config(pid) {
 }
 function unlinkMissingOk(p) {
   try {
-    fs19.unlinkSync(p);
+    fs21.unlinkSync(p);
   } catch {
   }
 }
@@ -20894,14 +21021,14 @@ function _wizard_spawn(project_root, pass_project_root = true) {
 }
 function _wizard_run_sync(cmd, env, cli) {
   const total = _WIZARD_TIMEOUTS.reduce((a, b) => a + b, 0);
-  const log_path = path17.join(
-    os7.tmpdir(),
+  const log_path = path18.join(
+    os8.tmpdir(),
     `agent-config-wizard-${process3.pid}-${Date.now()}.log`
   );
   let child;
   let log_fd = null;
   try {
-    log_fd = fs19.openSync(log_path, "w");
+    log_fd = fs21.openSync(log_path, "w");
     child = spawn(cmd[0], cmd.slice(1), {
       env,
       detached: true,
@@ -20919,7 +21046,7 @@ function _wizard_run_sync(cmd, env, cli) {
   } finally {
     if (log_fd !== null) {
       try {
-        fs19.closeSync(log_fd);
+        fs21.closeSync(log_fd);
       } catch {
       }
     }
@@ -21169,8 +21296,8 @@ function main2(argv) {
     const target_root = resolvePath(
       opts.custom_path || opts.project || process3.env["PROJECT_ROOT"] || process3.cwd()
     );
-    const minimal_package_root = path17.dirname(
-      path17.dirname(path17.dirname(_minimal_templates_root()))
+    const minimal_package_root = path18.dirname(
+      path18.dirname(path18.dirname(_minimal_templates_root()))
     );
     const validated_user_type = _validate_user_type(minimal_package_root, opts.user_type);
     return install_minimal(target_root, opts.force, validated_user_type);
@@ -21202,7 +21329,7 @@ function main2(argv) {
     return rc2;
   }
   const project_root = custom_path || resolvePath(opts.project || process3.env["PROJECT_ROOT"] || process3.cwd());
-  const is_first_run = !pathExists(path17.join(project_root, SETTINGS_FILE));
+  const is_first_run = !pathExists(path18.join(project_root, SETTINGS_FILE));
   const rc = _main_project_install(opts, project_root, parsed_tools, is_first_run);
   if (rc === 0 && opts.interactive) {
     run_interactive_init(project_root, opts.force);
@@ -21266,16 +21393,16 @@ function _team_setup_hint_line(project_root) {
   return "  \u2022 Claude Code team mode (optional cross-model review via the official codex plugin): run `agent-config doctor --check team` for setup status.";
 }
 function finalize_claude_model_tiers(project_root) {
-  const claude_skills = path17.join(project_root, ".claude", "skills");
-  const augment_skills = path17.join(project_root, ".augment", "skills");
+  const claude_skills = path18.join(project_root, ".claude", "skills");
+  const augment_skills = path18.join(project_root, ".augment", "skills");
   if (!isDir(claude_skills) || !isDir(augment_skills)) return 0;
   if (_read_consumer_auto_switch(project_root) !== "auto") return 0;
   let rendered = 0;
-  const entries = fs19.readdirSync(claude_skills).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
+  const entries = fs21.readdirSync(claude_skills).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
   for (const name of entries) {
-    const entry = path17.join(claude_skills, name);
-    const src_dir = path17.join(augment_skills, name);
-    const src_md = path17.join(src_dir, "SKILL.md");
+    const entry = path18.join(claude_skills, name);
+    const src_dir = path18.join(augment_skills, name);
+    const src_md = path18.join(src_dir, "SKILL.md");
     let tier;
     try {
       tier = read_model_tier(src_md);
@@ -21284,22 +21411,22 @@ function finalize_claude_model_tiers(project_root) {
     }
     if (tier === null || !(tier in TIER_TO_CLAUDE_MODEL) || !isDir(src_dir)) continue;
     if (isSymlink(entry) || isFile(entry)) {
-      fs19.unlinkSync(entry);
+      fs21.unlinkSync(entry);
     } else if (isDir(entry)) {
-      fs19.rmSync(entry, { recursive: true, force: true });
+      fs21.rmSync(entry, { recursive: true, force: true });
     }
     mkdirp(entry);
-    const srcFiles = fs19.readdirSync(src_dir).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
+    const srcFiles = fs21.readdirSync(src_dir).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
     for (const fname of srcFiles) {
       if (fname === "SKILL.md") {
         writeText(
-          path17.join(entry, "SKILL.md"),
+          path18.join(entry, "SKILL.md"),
           render_native_model_md(readText(src_md), tier)
         );
       } else {
-        fs19.symlinkSync(
-          path17.join("../../../.augment/skills", name, fname),
-          path17.join(entry, fname)
+        fs21.symlinkSync(
+          path18.join("../../../.augment/skills", name, fname),
+          path18.join(entry, fname)
         );
       }
     }
@@ -21317,7 +21444,7 @@ function _main_project_install(opts, project_root, parsed_tools, is_first_run) {
   let package_type;
   if (opts.package) {
     package_root = resolvePath(opts.package);
-    if (!pathExists(path17.join(package_root, "src", "config", "profiles", "minimal.ini"))) {
+    if (!pathExists(path18.join(package_root, "src", "config", "profiles", "minimal.ini"))) {
       fail(`Invalid --package path (missing src/config/profiles/minimal.ini): ${package_root}`);
     }
     package_type = detect_package_type_for_project(project_root, package_root);
@@ -21454,9 +21581,9 @@ function _main_project_install(opts, project_root, parsed_tools, is_first_run) {
 function _resolvedArgv1() {
   if (process3.argv[1] === void 0) return void 0;
   try {
-    return fs19.realpathSync(path17.resolve(process3.argv[1]));
+    return fs21.realpathSync(path18.resolve(process3.argv[1]));
   } catch {
-    return path17.resolve(process3.argv[1]);
+    return path18.resolve(process3.argv[1]);
   }
 }
 var _argv1 = _resolvedArgv1();
@@ -21533,6 +21660,7 @@ export {
   _resolve_scope,
   _resolve_scoped_projection,
   _resolve_settings_read,
+  _rule_filter_for_source,
   _scoped_migration_notice,
   _team_setup_hint_line,
   _tools_was_all,