@event4u/agent-config 16.0.0 → 16.1.0

package/dist/mcp/server.mjs

@@ -170,6 +170,50 @@ var init_settingsCarveOut = __esm({
   }
 });
 
+// src/scripts/_lib/settings_renamed_keys.ts
+function _read(tree, dotted) {
+  let cur = tree;
+  for (const part of dotted.split(".")) {
+    if (cur === null || typeof cur !== "object" || Array.isArray(cur)) return void 0;
+    cur = cur[part];
+  }
+  return cur;
+}
+function _write(tree, dotted, value) {
+  const parts = dotted.split(".");
+  let cur = tree;
+  for (const part of parts.slice(0, -1)) {
+    const next = cur[part];
+    if (next === null || typeof next !== "object" || Array.isArray(next)) cur[part] = {};
+    cur = cur[part];
+  }
+  cur[parts[parts.length - 1]] = value;
+}
+function applyRenamedKeys(layer) {
+  for (const [oldKey, newKey] of RENAMED_KEYS) {
+    const oldValue = _read(layer, oldKey);
+    if (oldValue === void 0) continue;
+    if (_read(layer, newKey) === void 0) _write(layer, newKey, oldValue);
+    if (_warned.has(oldKey)) continue;
+    _warned.add(oldKey);
+    process.stderr.write(
+      `\u26A0\uFE0F  settings: \`${oldKey}\` was renamed to \`${newKey}\`. The old key still works for one minor; rename it in your .agent-settings.yml.
+`
+    );
+  }
+  return layer;
+}
+var RENAMED_KEYS, _warned;
+var init_settings_renamed_keys = __esm({
+  "src/scripts/_lib/settings_renamed_keys.ts"() {
+    "use strict";
+    RENAMED_KEYS = /* @__PURE__ */ new Map([
+      ["planning.challenge_on_create", "planning.closure_pass"]
+    ]);
+    _warned = /* @__PURE__ */ new Set();
+  }
+});
+
 // src/scripts/_lib/agent_settings.ts
 var agent_settings_exports = {};
 __export(agent_settings_exports, {
@@ -598,9 +642,9 @@ function load_agent_settings(options = {}) {
   }
   const cascade = _resolve_cascade_paths(cwd, project_path);
   const merged = template_defaults(template_path ?? void 0);
-  _deep_merge(merged, user_global_filtered);
+  _deep_merge(merged, applyRenamedKeys(user_global_filtered));
   for (const p of cascade) {
-    const layer = _read_yaml(p) ?? {};
+    const layer = applyRenamedKeys(_read_yaml(p) ?? {});
     if (Object.keys(layer).length > 0) {
       _deep_merge(merged, layer);
     }
@@ -911,6 +955,7 @@ var init_agent_settings = __esm({
     "use strict";
     init_user_global_paths();
     init_settingsCarveOut();
+    init_settings_renamed_keys();
     _require = createRequire(import.meta.url);
     Logger = class {
       name = "scripts._lib.agent_settings";
@@ -29720,6 +29765,203 @@ var init_git_common_dir = __esm({
   }
 });
 
+// src/shared/missionExecution.ts
+function executionPostureFromOverrides(layers) {
+  const raw = {};
+  for (const [key, value] of layers) {
+    if (key === "execution.fix_loop_max") raw["fix_loop_max"] = value;
+    else if (key === "execution.escalation") raw["escalation"] = value;
+  }
+  return resolveExecutionPosture(raw);
+}
+function resolveExecutionPosture(raw) {
+  const block = raw ?? {};
+  const rawMax = block["fix_loop_max"];
+  const max = typeof rawMax === "number" && Number.isInteger(rawMax) && rawMax > 0 ? rawMax : FIX_LOOP_MAX_DEFAULT;
+  const rawLadder = block["escalation"];
+  const ladder = Array.isArray(rawLadder) && rawLadder.length > 0 && rawLadder.every((r) => typeof r === "string") ? rawLadder : ESCALATION_LADDER;
+  return { fix_loop_max: max, escalation: ladder };
+}
+var ESCALATION_LADDER, FIX_LOOP_MAX_DEFAULT;
+var init_missionExecution = __esm({
+  "src/shared/missionExecution.ts"() {
+    "use strict";
+    ESCALATION_LADDER = [
+      "independent",
+      "council",
+      "team",
+      "owner_owned_check"
+    ];
+    FIX_LOOP_MAX_DEFAULT = 10;
+  }
+});
+
+// src/scripts/_lib/forge_protection.ts
+function isActiveBranchRuleset(rs) {
+  return rs.enforcement === "active" && rs.target === "branch";
+}
+function reachesDefaultBranch(rs, defaultBranch) {
+  const include = rs.conditions?.ref_name?.include ?? [];
+  return include.some(
+    (p) => p === "~DEFAULT_BRANCH" || p === "~ALL" || p === `refs/heads/${defaultBranch}`
+  );
+}
+function hasRule(rs, type) {
+  return (rs.rules ?? []).some((r) => r.type === type);
+}
+function requiredContexts(rs) {
+  for (const r of rs.rules ?? []) {
+    if (r.type !== "required_status_checks") continue;
+    const p = r.parameters;
+    if (p === null || typeof p !== "object") continue;
+    const list = p["required_status_checks"];
+    if (!Array.isArray(list)) continue;
+    return list.map(
+      (e) => e !== null && typeof e === "object" ? e["context"] : null
+    ).filter((c) => typeof c === "string");
+  }
+  return [];
+}
+function forgeProtectionRows(reading) {
+  const rows = [];
+  const rulesets = reading.rulesets;
+  const branch = reading.defaultBranch;
+  const covering = rulesets === null || branch === null ? null : rulesets.filter((rs) => isActiveBranchRuleset(rs) && reachesDefaultBranch(rs, branch));
+  rows.push(
+    covering === null ? {
+      id: "default_branch_protected",
+      state: "unread",
+      source: SOURCE.rulesets,
+      detail: "the rulesets were not queried"
+    } : covering.length > 0 ? {
+      id: "default_branch_protected",
+      state: "satisfied",
+      source: SOURCE.rulesets,
+      detail: `${String(covering.length)} active branch ruleset(s) cover the default branch`
+    } : {
+      id: "default_branch_protected",
+      state: "unsatisfied",
+      source: SOURCE.rulesets,
+      detail: "no active branch ruleset covers the default branch. NOTE: the classic branches/<b>/protection endpoint 404s on a ruleset-protected repository, so a 404 there is not evidence for this row."
+    }
+  );
+  const contexts = covering === null ? null : covering.flatMap(requiredContexts);
+  rows.push(
+    contexts === null ? {
+      id: "required_checks_present",
+      state: "unread",
+      source: SOURCE.rulesets,
+      detail: "the rulesets were not queried"
+    } : contexts.length > 0 ? {
+      id: "required_checks_present",
+      state: "satisfied",
+      source: SOURCE.rulesets,
+      detail: `${String(contexts.length)} required context(s): ${contexts.join(", ")}`
+    } : {
+      id: "required_checks_present",
+      state: "unsatisfied",
+      source: SOURCE.rulesets,
+      detail: "no required status check context is configured"
+    }
+  );
+  const noFastForward = covering === null ? null : covering.some((rs) => hasRule(rs, "non_fast_forward"));
+  rows.push(
+    noFastForward === null ? {
+      id: "force_push_disabled",
+      state: "unread",
+      source: SOURCE.rulesets,
+      detail: "the rulesets were not queried"
+    } : {
+      id: "force_push_disabled",
+      state: noFastForward ? "satisfied" : "unsatisfied",
+      source: SOURCE.rulesets,
+      detail: noFastForward ? "a non_fast_forward rule is active on the default branch" : "no non_fast_forward rule covers the default branch"
+    }
+  );
+  rows.push(
+    reading.allowAutoMerge === null ? {
+      id: "auto_merge_available",
+      state: "unread",
+      source: SOURCE.repo,
+      detail: "the repository record was not queried"
+    } : {
+      id: "auto_merge_available",
+      state: reading.allowAutoMerge ? "satisfied" : "unsatisfied",
+      source: SOURCE.repo,
+      detail: reading.allowAutoMerge ? "allow_auto_merge is enabled" : "allow_auto_merge is disabled \u2014 merge delivery cannot queue behind checks"
+    }
+  );
+  rows.push(
+    reading.deployRestricted === null ? {
+      id: "deploy_via_pipeline_only",
+      state: "unread",
+      source: SOURCE.environments,
+      detail: "the environments were not queried"
+    } : {
+      id: "deploy_via_pipeline_only",
+      state: reading.deployRestricted ? "satisfied" : "unsatisfied",
+      source: SOURCE.environments,
+      detail: reading.deployRestricted ? "every environment restricts its deployment branches" : "at least one environment accepts a deployment from any branch"
+    }
+  );
+  return rows;
+}
+function protectionActions(rows) {
+  return rows.filter((r) => r.state !== "satisfied").map((r) => `${r.id}: ${r.state} \u2014 ${r.detail} (source: ${r.source})`);
+}
+var SOURCE;
+var init_forge_protection = __esm({
+  "src/scripts/_lib/forge_protection.ts"() {
+    "use strict";
+    SOURCE = {
+      rulesets: "GET repos/{owner}/{repo}/rulesets + GET .../rulesets/{id}",
+      repo: "GET repos/{owner}/{repo} (allow_auto_merge)",
+      environments: "GET repos/{owner}/{repo}/environments (deployment_branch_policy)"
+    };
+  }
+});
+
+// src/scripts/_cli/doctor_execution.ts
+function executionJson(overrides) {
+  let posture;
+  try {
+    posture = executionPostureFromOverrides(overrides());
+  } catch {
+    posture = resolveExecutionPosture({});
+  }
+  return {
+    fix_loop_max: posture.fix_loop_max,
+    escalation: [...posture.escalation]
+  };
+}
+function forgeProtectionJson(reading) {
+  const rows = forgeProtectionRows(reading);
+  return {
+    rows: rows.map((r) => ({
+      id: r.id,
+      state: r.state,
+      source: r.source,
+      detail: r.detail
+    })),
+    actions: protectionActions(rows),
+    read_from_forge: rows.some((r) => r.state !== "unread")
+  };
+}
+var UNREAD_FORGE;
+var init_doctor_execution = __esm({
+  "src/scripts/_cli/doctor_execution.ts"() {
+    "use strict";
+    init_missionExecution();
+    init_forge_protection();
+    UNREAD_FORGE = {
+      rulesets: null,
+      defaultBranch: null,
+      allowAutoMerge: null,
+      deployRestricted: null
+    };
+  }
+});
+
 // src/scripts/ai_council/cli_agency_bounds.ts
 function boundFor(member) {
   return AGENCY_BOUNDS.find((b) => b.member === member)?.bound ?? [];
@@ -32615,7 +32857,7 @@ function buildSecondModel(entry, cls, locked, d) {
   if (!("second_model" in entry)) return null;
   if (locked.has(cls)) {
     throw d.error(
-      `decision_resolution.classes.${cls}.second_model=${d.repr(entry["second_model"])}: a second-model rung is not configurable for high-impact / user-required decisions \u2014 those classes are LOCKED to \`user\` (Iron Law) and never resolve on a model of any kind.`
+      `decision_resolution.classes.${cls}.second_model=${d.repr(entry["second_model"])}: a second-model rung is not configurable for an owner-routed class (high-impact / user-required on the impact axis; product-owned / business-owned / destructive-owned on the ownership axis) \u2014 those classes are LOCKED to \`user\` (Iron Law) and never resolve on a model of any kind.`
     );
   }
   const raw = entry["second_model"];
@@ -32639,6 +32881,60 @@ var init_fallback_config = __esm({
   }
 });
 
+// src/scripts/ai_council/ownership_classes.ts
+function allOwnerLocked(impactLocked) {
+  return /* @__PURE__ */ new Set([...impactLocked, ...OWNER_LOCKED_CLASSES]);
+}
+function defaultModeFor(cls) {
+  return DEFAULT_RESOLUTION_MODES[cls] ?? "agent";
+}
+function ownershipModeError(cls, mode, repr) {
+  if (OWNER_LOCKED_CLASSES.has(cls) && mode !== "user") {
+    return `decision_resolution.classes.${cls}.mode=${repr(mode)}: class \`${cls}\` is LOCKED to \`user\` (Iron Law) \u2014 product, business and destructive decisions are owner-owned and never resolve on a model.`;
+  }
+  if (NEVER_OWNER_CLASSES.has(cls) && mode === "user") {
+    return `decision_resolution.classes.${cls}.mode=${repr(mode)}: class \`${cls}\` is never owner-routed (Iron Law) \u2014 spend exhaustion pauses and reports, it does not ask.`;
+  }
+  return null;
+}
+var OWNERSHIP_CLASSES, OWNER_LOCKED_CLASSES, NEVER_OWNER_CLASSES, DEFAULT_RESOLUTION_MODES;
+var init_ownership_classes = __esm({
+  "src/scripts/ai_council/ownership_classes.ts"() {
+    "use strict";
+    OWNERSHIP_CLASSES = [
+      "deterministic",
+      "reversible-technical",
+      "contested-technical",
+      "critical-technical",
+      "product-owned",
+      "business-owned",
+      "destructive-owned",
+      "spend-exhaustion"
+    ];
+    OWNER_LOCKED_CLASSES = /* @__PURE__ */ new Set([
+      "product-owned",
+      "business-owned",
+      "destructive-owned"
+    ]);
+    NEVER_OWNER_CLASSES = /* @__PURE__ */ new Set(["spend-exhaustion"]);
+    DEFAULT_RESOLUTION_MODES = {
+      trivial: "agent",
+      low_impact: "agent",
+      medium_impact: "council",
+      high_impact: "user",
+      user_required: "user",
+      deterministic: "agent",
+      "reversible-technical": "agent",
+      "contested-technical": "council",
+      "critical-technical": "council",
+      "product-owned": "user",
+      "business-owned": "user",
+      "destructive-owned": "user",
+      "spend-exhaustion": "agent"
+    };
+  }
+});
+
 // src/scripts/ai_council/py_format.ts
 function _pyReprStr(s) {
   const hasSingle = s.includes("'");
@@ -33243,14 +33539,14 @@ function _build_decision_resolution(d) {
     );
   }
   const classes = /* @__PURE__ */ new Map();
-  for (const cls of _IMPACT_CLASSES) {
+  for (const cls of [..._IMPACT_CLASSES, ...OWNERSHIP_CLASSES]) {
     const entry_raw = _orEmpty(classes_raw[cls] ?? null);
     if (!_isDict(entry_raw)) {
       throw new CouncilConfigError(
         `\`decision_resolution.classes.${cls}\` must be a mapping.`
       );
     }
-    const mode = _get(entry_raw, "mode", _DEFAULT_RESOLUTION_MODES[cls]);
+    const mode = _get(entry_raw, "mode", defaultModeFor(cls));
     if (!(_isStr(mode) && _VALID_RESOLUTION_MODES.has(mode))) {
       throw new CouncilConfigError(
         `decision_resolution.classes.${cls}.mode=${_pyRepr6(mode)} not in ${_sortedListRepr(_VALID_RESOLUTION_MODES)}.`
@@ -33261,7 +33557,9 @@ function _build_decision_resolution(d) {
         `decision_resolution.classes.${cls}.mode=${_pyRepr6(mode)}: class \`${cls}\` is LOCKED to \`user\` (Iron Law) \u2014 high-impact and user-required decisions never bypass the user.`
       );
     }
-    if (_LOCKED_IMPACT_CLASSES.has(cls) && "dispatch" in entry_raw) {
+    const ownErr = ownershipModeError(cls, mode, _pyRepr6);
+    if (ownErr !== null) throw new CouncilConfigError(ownErr);
+    if (_ALL_OWNER_LOCKED.has(cls) && "dispatch" in entry_raw) {
       throw new CouncilConfigError(
         `decision_resolution.classes.${cls}.dispatch=${_pyRepr6(entry_raw.dispatch)}: dispatch is not configurable for high-impact / user-required decisions \u2014 always full council.`
       );
@@ -33275,7 +33573,7 @@ function _build_decision_resolution(d) {
     const second_model = buildSecondModel(
       entry_raw,
       cls,
-      _LOCKED_IMPACT_CLASSES,
+      _ALL_OWNER_LOCKED,
       _FALLBACK_DEPS
     );
     classes.set(cls, { mode, confidence_threshold: threshold, second_model });
@@ -33967,7 +34265,7 @@ function _pyTruthy3(value) {
   }
   return Object.keys(value).length > 0;
 }
-var import_yaml6, _VALID_PROVIDERS, _FALLBACK_DEPS, _RAW_KEY_PREFIXES, CouncilConfigError, _VALID_NECESSITY_MODES, _VALID_DISCLOSURE_MODES, _VALID_CHAIRMAN_MODES, COUNCIL_CONFIG_RELNAME, COUNCIL_CONFIG_USER_GLOBAL_REL, COUNCIL_CONFIG_ENV, _VALID_CRITIC_PROTOCOLS, _VALID_RESOLUTION_MODES, _IMPACT_CLASSES, _LOCKED_IMPACT_CLASSES, _DEFAULT_RESOLUTION_MODES, _VALID_MEMBER_MODES, _VALID_DISPATCH_MODES, DEFAULT_CLI_CALLS_PER_DAY2;
+var import_yaml6, _VALID_PROVIDERS, _FALLBACK_DEPS, _RAW_KEY_PREFIXES, CouncilConfigError, _VALID_NECESSITY_MODES, _VALID_DISCLOSURE_MODES, _VALID_CHAIRMAN_MODES, COUNCIL_CONFIG_RELNAME, COUNCIL_CONFIG_USER_GLOBAL_REL, COUNCIL_CONFIG_ENV, _VALID_CRITIC_PROTOCOLS, _VALID_RESOLUTION_MODES, _IMPACT_CLASSES, _LOCKED_IMPACT_CLASSES, _ALL_OWNER_LOCKED, _VALID_MEMBER_MODES, _VALID_DISPATCH_MODES, DEFAULT_CLI_CALLS_PER_DAY2;
 var init_config = __esm({
   "src/scripts/ai_council/config.ts"() {
     "use strict";
@@ -33978,6 +34276,7 @@ var init_config = __esm({
     init_seat_policy();
     init_quorum();
     init_fallback_config();
+    init_ownership_classes();
     init_py_format();
     _VALID_PROVIDERS = /* @__PURE__ */ new Set([
       "anthropic",
@@ -34042,13 +34341,7 @@ var init_config = __esm({
       "high_impact",
       "user_required"
     ]);
-    _DEFAULT_RESOLUTION_MODES = {
-      trivial: "agent",
-      low_impact: "agent",
-      medium_impact: "council",
-      high_impact: "user",
-      user_required: "user"
-    };
+    _ALL_OWNER_LOCKED = allOwnerLocked(_LOCKED_IMPACT_CLASSES);
     _VALID_MEMBER_MODES = /* @__PURE__ */ new Set(["cli", "api"]);
     _VALID_DISPATCH_MODES = /* @__PURE__ */ new Set(["full", "single"]);
     DEFAULT_CLI_CALLS_PER_DAY2 = DEFAULT_CLI_CALLS_PER_DAY;
@@ -37990,9 +38283,9 @@ function _emit_json(project_root, missing, modified, foreign, tag_drift, checks
     foreign,
     tag_drift
   };
-  if (origin !== null) {
-    payload["project_root_origin"] = origin;
-  }
+  if (origin !== null) payload["project_root_origin"] = origin;
+  payload["execution"] = executionJson(() => iter_setting_overrides({ cwd: project_root }));
+  payload["forge_protection"] = forgeProtectionJson(UNREAD_FORGE);
   if (checks !== null) {
     payload["checks"] = checks;
     const drift = missing.length + modified.length + foreign.length + tag_drift.length;
@@ -38353,6 +38646,7 @@ var init_cmd_doctor = __esm({
     init_git_common_dir();
     init_sync_gitattributes();
     init_agent_settings();
+    init_doctor_execution();
     init_clients();
     init_config();
     init_environment_detector();
@@ -42844,7 +43138,28 @@ var init_turn_end_gate_hook = __esm({
   }
 });
 
+// src/scripts/_lib/test_delta.ts
+function isCodePath(p) {
+  const f = p.replace(/\\/g, "/");
+  if (isTestPath(f)) return false;
+  if (!/\.(ts|tsx|js|mjs|cjs)$/.test(f)) return false;
+  if (f.endsWith(".d.ts")) return false;
+  if (/^(dist|\.augment|\.claude|\.cursor|node_modules)\//.test(f)) return false;
+  return /^(src|scripts)\//.test(f);
+}
+function isTestPath(p) {
+  const f = p.replace(/\\/g, "/");
+  if (/^tests\//.test(f)) return true;
+  return /\.(test|spec)\.(ts|tsx|js|mjs|cjs)$/.test(f);
+}
+var init_test_delta = __esm({
+  "src/scripts/_lib/test_delta.ts"() {
+    "use strict";
+  }
+});
+
 // src/scripts/hooks/evidence_independence.ts
+import { spawnSync as spawnSync15 } from "node:child_process";
 import crypto10 from "node:crypto";
 import fs86 from "node:fs";
 import path87 from "node:path";
@@ -42942,6 +43257,31 @@ function decide(tool, prompt, priorEvaluations) {
     evaluations: priorEvaluations + 1
   };
 }
+function sameSessionTestFlag(command) {
+  if (command === null || !/\bgit\b[^|;&]*\bcommit\b/.test(command)) return null;
+  return SAME_SESSION_TEXT;
+}
+function touchesTestAndCode(paths) {
+  return paths.some(isTestPath) && paths.some(isCodePath);
+}
+function _commandOf(envelope) {
+  const payload = _isObject6(envelope["payload"]) ? envelope["payload"] : envelope;
+  const input = _isObject6(payload["tool_input"]) ? payload["tool_input"] : payload;
+  for (const key of ["command", "cmd", "shell_command"]) {
+    const v = input[key];
+    if (typeof v === "string" && v !== "") return v;
+  }
+  return null;
+}
+function _stagedPaths(consumer_root) {
+  const r = spawnSync15("git", ["diff", "--cached", "--name-only"], {
+    cwd: consumer_root,
+    encoding: "utf8"
+  });
+  if (r.status !== 0) return null;
+  const out = r.stdout.split("\n").map((s) => s.trim()).filter((s) => s !== "");
+  return out.length === 0 ? null : out;
+}
 function run4(stdin_text, options) {
   let envelope = {};
   if (stdin_text.trim()) {
@@ -42964,6 +43304,15 @@ function run4(stdin_text, options) {
     state.evaluations = [];
   }
   const [tool, prompt] = extractDispatch(envelope);
+  const flag2 = sameSessionTestFlag(_commandOf(envelope));
+  if (flag2 !== null) {
+    const staged = _stagedPaths(options.consumer_root);
+    if (staged !== null && touchesTestAndCode(staged)) {
+      process.stdout.write(`${JSON.stringify({ decision: "warn", reason: flag2 })}
+`);
+      return EXIT_ALLOW5;
+    }
+  }
   const decision = decide(tool, prompt, state.evaluations.length);
   if (decision.evaluations > state.evaluations.length) {
     state.evaluations.push({
@@ -43025,12 +43374,13 @@ function _isCliEntry23() {
     return false;
   }
 }
-var EXIT_ALLOW5, EXIT_BLOCK2, STATE_FILE4, DISPATCH_TOOLS, EVALUATION_RE, PRELOADED_VERDICT_RE, SELF_SCOPE_RE, WARN_TEXT;
+var EXIT_ALLOW5, EXIT_BLOCK2, STATE_FILE4, DISPATCH_TOOLS, EVALUATION_RE, PRELOADED_VERDICT_RE, SELF_SCOPE_RE, WARN_TEXT, SAME_SESSION_TEXT;
 var init_evidence_independence = __esm({
   "src/scripts/hooks/evidence_independence.ts"() {
     "use strict";
     init_state_io();
     init_hook_stdin();
+    init_test_delta();
     EXIT_ALLOW5 = 0;
     EXIT_BLOCK2 = 1;
     STATE_FILE4 = path87.join("agents", "state", "evidence-dispatch.json");
@@ -43066,6 +43416,7 @@ var init_evidence_independence = __esm({
     ];
     SELF_SCOPE_RE = /\b(my (work|change|diff|implementation|code|fix|patch|branch|pr)|this (diff|change|pr|delta|implementation|patch)|the delta|the change i|what i (wrote|built|changed|implemented)|i just (wrote|built|changed|implemented))\b/i;
     WARN_TEXT = "First evaluation dispatch this turn. Two shapes fabricated a binding honest-null in the audited sessions \u2014 check your prompt for both before it goes out: (1) a verdict pre-loaded into the prompt, and (2) a scope narrowed to files you chose. A review you commissioned on your own work is admissible as gate evidence only when the prompt is recorded alongside the verdict.";
+    SAME_SESSION_TEXT = "This commit stages both a test and code it could cover \u2014 the shape L0 takes in a diff, where the implementer authored the evaluator. This check reads the staged set only: it cannot tell who wrote the test, so it is a prompt to STATE the level, not a finding that you are at L0. L0 is a permitted FALLBACK, not the default: where a second session, a second model or a second provider was available, the test should have come from one of them. Say which in the commit or the PR body \u2014 a diff looks identical either way. See evaluator-independence \xA7 Tests are evaluators.";
     if (_isCliEntry23()) {
       process.exit(main31());
     }
@@ -45459,6 +45810,7 @@ __export(cmd_conformance_exports, {
   _check_lean_projection: () => _check_lean_projection,
   _check_router_pointers: () => _check_router_pointers,
   _check_txlog_clean: () => _check_txlog_clean,
+  _installLogExpected: () => _installLogExpected,
   _parse: () => _parse4,
   appendConformanceReport: () => appendConformanceReport,
   conformanceLogPath: () => conformanceLogPath,
@@ -45472,7 +45824,7 @@ import * as fs93 from "node:fs";
 import * as os22 from "node:os";
 import * as path94 from "node:path";
 import process23 from "node:process";
-import { spawnSync as spawnSync15 } from "node:child_process";
+import { spawnSync as spawnSync16 } from "node:child_process";
 import { fileURLToPath as fileURLToPath50, pathToFileURL as pathToFileURL35 } from "node:url";
 function print3(s = "") {
   process23.stdout.write(`${s}
@@ -45496,21 +45848,24 @@ function installLogPath() {
   }
   return path94.join(os22.homedir(), ".event4u", "agent-config", "install-log.jsonl");
 }
-function _check_txlog_clean(logPath = installLogPath()) {
-  if (!fs93.existsSync(logPath)) {
-    return {
-      id: "txlog-clean",
-      status: "ok",
-      message: "no install transaction log \u2014 nothing to recover",
-      remedy: ""
-    };
-  }
-  const entries = readRecentEntries(logPath);
+function _installLogExpected(projectRoot) {
+  return fs93.existsSync(manifest_path(projectRoot));
+}
+function _check_txlog_clean(logPath = installLogPath(), projectRoot = null) {
+  const entries = fs93.existsSync(logPath) ? readRecentEntries(logPath) : [];
   if (entries.length === 0) {
+    if (projectRoot !== null && _installLogExpected(projectRoot)) {
+      return {
+        id: "txlog-clean",
+        status: "unknown",
+        message: "install manifest present, no usable install transaction log \u2014 nothing recorded this install, so the last run cannot be confirmed complete",
+        remedy: "no install path writes this log today; run `agent-config doctor` for the drift answer this check cannot give"
+      };
+    }
     return {
       id: "txlog-clean",
       status: "ok",
-      message: "install transaction log is empty",
+      message: "no usable install transaction log and no install manifest \u2014 nothing was installed here",
       remedy: ""
     };
   }
@@ -45520,7 +45875,7 @@ function _check_txlog_clean(logPath = installLogPath()) {
       id: "txlog-clean",
       status: "fail",
       message: `install log tail is an abandoned run (abort at ${last.ts}${last.note ? `: ${last.note}` : ""})`,
-      remedy: "re-run `agent-config init` (recovery reverse-applies the aborted tail)"
+      remedy: "re-run `agent-config init` \u2014 it re-applies the plan over the partial tail; the aborted run's writes stay on disk and are replaced only where the plan covers them"
     };
   }
   return {
@@ -45629,7 +45984,7 @@ function _check_hook_dispatcher(projectRoot, packageRoot = PACKAGE_ROOT2, opts =
       ...event === "stop" ? { stop_reason: "conformance-smoke" } : { source: "startup" }
     });
     const argv = [...runner, "--platform", platform, "--event", event];
-    const proc = spawnSync15(argv[0], argv.slice(1), {
+    const proc = spawnSync16(argv[0], argv.slice(1), {
       input: payload,
       cwd: projectRoot,
       encoding: "utf8",
@@ -45791,7 +46146,7 @@ function runConformanceChecks(opts = {}) {
   const projectRoot = opts.projectRoot ?? process23.cwd();
   const packageRoot = opts.packageRoot ?? PACKAGE_ROOT2;
   const checks = [];
-  checks.push(_check_txlog_clean());
+  checks.push(_check_txlog_clean(installLogPath(), projectRoot));
   checks.push(_check_router_pointers(packageRoot));
   if (opts.skipDispatcher === true) {
     checks.push({
@@ -45914,7 +46269,7 @@ function main38(argv = null) {
     print3(`  \u{1F4CD}  project_root: ${project_root}`);
     print3("conformance:");
     for (const c of allChecks) {
-      const sym = STATUS_SYMBOLS[c["status"]] ?? "?";
+      const sym = CONFORMANCE_STATUS_SYMBOLS[c["status"]] ?? "?";
       print3(`  ${sym} ${c["id"]}: ${c["message"]}`);
       if (c["status"] !== "ok" && c["remedy"]) {
         print3(`      fix: ${c["remedy"]}`);
@@ -45946,7 +46301,7 @@ function _isCliEntry29() {
     return false;
   }
 }
-var YAML7, _HERE26, PACKAGE_ROOT2, CONFORMANCE_CHECK_IDS, THIN_STUB_MARKER, USAGE5;
+var YAML7, _HERE26, PACKAGE_ROOT2, CONFORMANCE_CHECK_IDS, THIN_STUB_MARKER, CONFORMANCE_STATUS_SYMBOLS, USAGE5;
 var init_cmd_conformance = __esm({
   "src/scripts/_cli/cmd_conformance.ts"() {
     "use strict";
@@ -45969,6 +46324,10 @@ var init_cmd_conformance = __esm({
       "host-manifest"
     ];
     THIN_STUB_MARKER = "Routed rule \u2014 load the body on trigger-match";
+    CONFORMANCE_STATUS_SYMBOLS = {
+      ...STATUS_SYMBOLS,
+      unknown: "\u2754"
+    };
     USAGE5 = "usage: agent-config conformance [-h] [--project PROJECT] [--json]\n                                [--skip-dispatcher] [--funnel]\n";
     if (_isCliEntry29() || process23.argv[1] === _HERE26) {
       try {
@@ -50040,7 +50399,7 @@ function grantFile(repoRoot, runId) {
 }
 function issueBillingGrant(repoRoot, runId, now = () => /* @__PURE__ */ new Date()) {
   const file = grantFile(repoRoot, runId);
-  const existing = _read(file);
+  const existing = _read2(file);
   if (existing !== null && existing.run_id === runId) return existing;
   const grant = { run_id: runId, issued_at: now().toISOString() };
   fs100.mkdirSync(path98.dirname(file), { recursive: true });
@@ -50050,7 +50409,7 @@ function issueBillingGrant(repoRoot, runId, now = () => /* @__PURE__ */ new Date
 }
 function isBillingGrantActive(repoRoot, runId, env = process.env, now = () => /* @__PURE__ */ new Date()) {
   if ((env[BILLING_GRANT_ENV] ?? "").trim() !== runId) return false;
-  const grant = _read(grantFile(repoRoot, runId));
+  const grant = _read2(grantFile(repoRoot, runId));
   if (grant === null || grant.run_id !== runId) return false;
   const age = now().getTime() - Date.parse(grant.issued_at);
   return Number.isFinite(age) && age >= 0 && age <= BILLING_GRANT_MAX_AGE_MS;
@@ -50066,7 +50425,7 @@ function revokeBillingGrant(repoRoot, runId) {
   } catch {
   }
 }
-function _read(file) {
+function _read2(file) {
   try {
     const raw = JSON.parse(fs100.readFileSync(file, "utf8"));
     if (raw === null || typeof raw !== "object") return null;