@event4u/agent-config 16.2.0 → 16.4.0

package/dist/cli-delegate/check_update_banner.js

@@ -2,29 +2,58 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 
 // src/scripts/check_update_banner.ts
-import * as fs5 from "node:fs";
-import * as path5 from "node:path";
+import * as fs6 from "node:fs";
+import * as path6 from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 
 // src/scripts/_lib/agent_settings.ts
 import { createRequire } from "node:module";
-import * as fs2 from "node:fs";
-import * as path2 from "node:path";
+import * as fs3 from "node:fs";
+import * as path3 from "node:path";
+
+// src/scripts/_lib/package_root.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
 import { fileURLToPath } from "node:url";
+var PACKAGE_NAME = "@event4u/agent-config";
+var MAX_ASCENT = 16;
+function resolvePackageRoot(fromUrlOrPath, legacyHops = 3) {
+  const start = fromUrlOrPath.startsWith("file:") ? fileURLToPath(fromUrlOrPath) : fromUrlOrPath;
+  const startDir = path.dirname(start);
+  let dir = startDir;
+  for (let i = 0; i < MAX_ASCENT; i++) {
+    const manifest = path.join(dir, "package.json");
+    if (fs.existsSync(manifest)) {
+      try {
+        const parsed = JSON.parse(fs.readFileSync(manifest, "utf8"));
+        if (parsed.name === PACKAGE_NAME) {
+          return dir;
+        }
+      } catch {
+      }
+    }
+    const parent = path.dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+  return path.resolve(startDir, ...Array.from({ length: legacyHops }, () => ".."));
+}
 
 // src/scripts/_lib/user_global_paths.ts
-import * as fs from "node:fs";
+import * as fs2 from "node:fs";
 import * as os from "node:os";
-import * as path from "node:path";
+import * as path2 from "node:path";
 var EVENT4U_HOME_ENV = "EVENT4U_CONFIG_HOME";
-var DEFAULT_EVENT4U_ROOT_RELATIVE = path.join(".event4u", "agent-config");
-var LEGACY_XDG_ROOT_RELATIVE = path.join(".config", "agent-config");
+var DEFAULT_EVENT4U_ROOT_RELATIVE = path2.join(".event4u", "agent-config");
+var LEGACY_XDG_ROOT_RELATIVE = path2.join(".config", "agent-config");
 function expanduser(p) {
   if (p === "~") {
     return os.homedir();
   }
   if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
-    return path.join(os.homedir(), p.slice(2));
+    return path2.join(os.homedir(), p.slice(2));
   }
   return p;
 }
@@ -40,10 +69,10 @@ function event4u_root(env) {
   if (override) {
     return expanduser(override);
   }
-  return path.join(os.homedir(), DEFAULT_EVENT4U_ROOT_RELATIVE);
+  return path2.join(os.homedir(), DEFAULT_EVENT4U_ROOT_RELATIVE);
 }
 function legacy_xdg_root() {
-  return path.join(os.homedir(), LEGACY_XDG_ROOT_RELATIVE);
+  return path2.join(os.homedir(), LEGACY_XDG_ROOT_RELATIVE);
 }
 function resolve_with_fallback(relative_name, options = {}) {
   if (is_absolute_like_python(relative_name)) {
@@ -51,12 +80,12 @@ function resolve_with_fallback(relative_name, options = {}) {
       `resolve_with_fallback expects a relative path, got '${relative_name}'`
     );
   }
-  const new_path = path.join(event4u_root(options.env ?? null), relative_name);
-  if (fs.existsSync(new_path)) {
+  const new_path = path2.join(event4u_root(options.env ?? null), relative_name);
+  if (fs2.existsSync(new_path)) {
     return new_path;
   }
-  const legacy_path = path.join(legacy_xdg_root(), relative_name);
-  if (fs.existsSync(legacy_path)) {
+  const legacy_path = path2.join(legacy_xdg_root(), relative_name);
+  if (fs2.existsSync(legacy_path)) {
     return legacy_path;
   }
   return null;
@@ -65,7 +94,7 @@ function write_target(relative_name, options = {}) {
   if (is_absolute_like_python(relative_name)) {
     throw new Error(`write_target expects a relative path, got '${relative_name}'`);
   }
-  return path.join(event4u_root(options.env ?? null), relative_name);
+  return path2.join(event4u_root(options.env ?? null), relative_name);
 }
 
 // src/shared/settingsCarveOut.ts
@@ -161,6 +190,102 @@ function applyRenamedKeys(layer) {
   return layer;
 }
 
+// src/scripts/_lib/settings_removed_keys.ts
+var REMOVED_KEYS = /* @__PURE__ */ new Map([
+  ["subagents.enabled", "always-on orchestration"],
+  ["subagents.auto", "always-on orchestration"],
+  ["subagents.host_capabilities", "always-on orchestration"],
+  ["subagents.budget_routing", "always-on orchestration"],
+  ["ai_team.enabled", "always-on orchestration"],
+  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
+  ["telegraph.speak_scope", "the rule body states its own scope; compile_time_toggles decides whether the rule ships"],
+  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
+  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
+  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
+  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"],
+  ["worktrees.mode", "the user asking for a worktree in the chat; creation is instruction-only and hardcoded"],
+  // 2026-10-09 — output and tone
+  ["personal.minimal_output", "direct-answers Iron Law 3 mandates terse replies; there is no verbose mode"],
+  ["personal.play_by_play", "direct-answers: no narration unless the user asks for it in the turn"],
+  ["personal.pr_comment_bot_icon", "no-decorative-emojis-in-git-surfaces forbids the \u{1F916} prefix"],
+  ["verbosity.intent_announcements", 'direct-answers: act and emit the result, no "Let me\u2026" openers'],
+  ["verbosity.preview_artifacts", "generated content is used directly; preview-on-error and the Iron-Law gates decide when a preview shows"],
+  ["verbosity.routine_confirmations", "the no-cheap-questions Pre-Send Self-Check; Iron-Law gates always ask"],
+  ["verbosity.post_action_reports", "direct-answers Iron Law 3: a one-line confirmation and one end-summary"],
+  ["telegraph.speak", "the telegraph-speak predicate in compile_time_toggles.ts; the bench verdict is package-level (ADR telegraph/0002)"],
+  ["tokens.rich_skills", "the skill's own token_budget_class: rich plus the lint_token_budget_discipline ceiling"],
+  // 2026-10-09 — reasoning protocol switches
+  ["reasoning.auto_gate", "the RDP gate task signal plus the host self-assessment in rdp-gate.md"],
+  ["reasoning.components.orchestrator", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.notes_first", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.grounding", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.intent", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.complexity_first", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.verifier_default", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.prediction_tracking", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.decision_ledger", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.uncertainty_budget", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  // 2026-10-09 — roadmap cadence
+  ["roadmap.skip_pre_run_gate", "the command name names the scope; only an ambiguous roadmap or an unresolvable conflict shows the gate"],
+  ["roadmap.dashboard_regen_cadence", "a fixed cadence: every 5th closed step, every phase boundary, reply end and any file-shape touch"],
+  // 2026-10-09 — command suggestion and PR creation
+  ["commands.auto_detect", "an orchestrator's own auto_detect front-matter and the --no-auto-detect flag"],
+  ["commands.suggestion.enabled", "the suggester match-score floor and cooldown; /command-suggestion-off silences one conversation"],
+  ["commands.suggestion.confidence_floor", "the suggester's fixed 0.6 floor; a command's own suggestion frontmatter can tighten it"],
+  ["commands.suggestion.cooldown_seconds", "the suggester's fixed 600-second cooldown; a command's own suggestion frontmatter can lengthen it"],
+  ["commands.suggestion.max_options", "the fixed cap of 4 suggestions plus the always-present as-is option"],
+  ["commands.create_pr.api_examples", "/create-pr's grounding rule: an example only from a real source, otherwise a one-line pointer"],
+  ["commands.create_pr.ui_paths", "/create-pr's light frontend heuristic, which fails open"],
+  ["commands.create_pr.api_paths", "/create-pr's light API-endpoint heuristic, which fails open"],
+  // 2026-10-09 — memory and knowledge sharing
+  ["memory.cadence", "a fixed cadence: the memory line renders whenever a memory type was asked; memory.visibility: off still silences it"],
+  ["memory.review_threshold", "/memory load's fixed preview threshold of 10 unreviewed intake signals"],
+  ["knowledge.global_sharing.redaction.enabled", "the write-time redaction scan, which always runs before a card goes global"],
+  ["knowledge.global_sharing.redaction.halt_on_trigger", "the redaction gate, which always halts on a confidential-pattern hit"],
+  ["knowledge.global_sharing.auto_promote_threshold", "the fixed two-repo sighting count that triggers a promotion suggestion"],
+  ["knowledge.global_sharing.freshness.hypothesis_after_days", "the card's age over last_verified against the fixed 90-day lead-only window"],
+  ["knowledge.global_sharing.freshness.stale_after_days", "the card's age over last_verified against the fixed 180-day skip window"],
+  // 2026-10-09 — hooks and engine
+  ["hooks.concern_budget.max_per_event", "the concern-budget gate's own constant of 8 per (platform, event) cell"],
+  ["hooks.concern_budget.hard_fail", "the concern-budget gate's --strict argv; without it the gate warns"],
+  ["decision_engine.surface_traces", "nothing: the per-phase decision trace stays off, the old default"],
+  ["decision_engine.on_block_fallback", "the fail-safe: an on_block ask that times out always stops"],
+  ["explain.enable_last", "the presence of a work-state trace; explain last always renders it"],
+  // 2026-10-09 — remaining
+  ["project.pr_template", "/create-pr, which reads .github/pull_request_template.md"],
+  ["pipelines.skill_improvement", "the skill-improvement-trigger rule; the capture is a proposal the user confirms"],
+  ["consistency.cross_source", "the cross-source-consistency rule, always on; batching and the no-cheap-questions floor bound the noise"],
+  ["subagents.downshift", "the model_tier each sub-task declares; downshift is always on"],
+  ["ai_team.suppress_setup_hint", "nothing: the one-line team-mode setup hint is always shown"]
+]);
+var _warnedRemovedKeys = /* @__PURE__ */ new Set();
+function _readDotted(root, dotted) {
+  let node = root;
+  for (const part of dotted.split(".")) {
+    if (typeof node !== "object" || node === null || Array.isArray(node)) {
+      return void 0;
+    }
+    node = node[part];
+  }
+  return node;
+}
+function warnRemovedKeys(merged) {
+  for (const [key, reason] of REMOVED_KEYS) {
+    if (_warnedRemovedKeys.has(key)) {
+      continue;
+    }
+    if (_readDotted(merged, key) === void 0) {
+      continue;
+    }
+    _warnedRemovedKeys.add(key);
+    process.stderr.write(`${key} was removed (${reason}); ignored.
+`);
+  }
+}
+
 // src/scripts/_lib/agent_settings.ts
 var _require = createRequire(import.meta.url);
 var Logger = class {
@@ -201,10 +326,10 @@ var DEFAULT_PROJECT_FILE = ".agent-settings.yml";
 var LOCAL_PROJECT_FILE = ".agent-settings.local.yml";
 var LOCAL_PROJECT_SUBDIR = ["agents", "settings"];
 function _local_settings_path(project_root) {
-  return path2.join(project_root, ...LOCAL_PROJECT_SUBDIR, LOCAL_PROJECT_FILE);
+  return path3.join(project_root, ...LOCAL_PROJECT_SUBDIR, LOCAL_PROJECT_FILE);
 }
 function _canonical_settings_path(project_root) {
-  return path2.join(project_root, ...LOCAL_PROJECT_SUBDIR, DEFAULT_PROJECT_FILE);
+  return path3.join(project_root, ...LOCAL_PROJECT_SUBDIR, DEFAULT_PROJECT_FILE);
 }
 var USER_GLOBAL_FILENAME = "agent-settings.yml";
 function DEFAULT_USER_GLOBAL_FILE() {
@@ -227,13 +352,13 @@ function user_global_settings_paths() {
   return paths;
 }
 var MERGEABLE_KEYS = [
-  // `name`, `ide` and `personal.bot_icon` are the PRE-MIGRATION spellings.
-  // `install.ts` migrates `ide` → `personal.ide` and `pr_comment_bot_icon`
-  // into its `personal.` home, and this list was never moved with them — so
-  // the whitelist named keys the template does not have while the keys it
-  // does have were filtered out silently. A user setting either preference
-  // user-globally got no error, no warning, and no effect
-  // (road-to-capability-answerability 4.3, ADR-219).
+  // `name` and `ide` are the PRE-MIGRATION spellings. `install.ts` migrates
+  // `ide` → `personal.ide`, and this list was never moved with it — so the
+  // whitelist named a key the template does not have while the key it does
+  // have was filtered out silently (road-to-capability-answerability 4.3,
+  // ADR-219). `personal.bot_icon` / `personal.pr_comment_bot_icon` left with
+  // the key itself (2026-10-09): a whitelisted key nothing reads would carry a
+  // user-global value into a tree that ignores it.
   //
   // Both spellings are listed rather than replaced: a legacy file that still
   // uses the old name keeps working, and nothing that resolved before
@@ -243,20 +368,12 @@ var MERGEABLE_KEYS = [
   "ide",
   "personal.ide",
   "rule_loading_tier",
-  "memory.cadence",
-  "personal.bot_icon",
-  "personal.pr_comment_bot_icon",
   "personal.autonomy",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
   "knowledge.global_sharing.enabled",
   "knowledge.global_sharing.allowed_tiers",
-  "knowledge.global_sharing.redaction.enabled",
-  "knowledge.global_sharing.redaction.halt_on_trigger",
-  "knowledge.global_sharing.auto_promote_threshold",
-  "knowledge.global_sharing.freshness.hypothesis_after_days",
-  "knowledge.global_sharing.freshness.stale_after_days",
   // `design.fidelity_mode` is a per-DEVELOPER working preference, not a
   // per-project one: whether an agent may deviate from a handed-over design
   // is a property of how that person works, and a designer who sets it once
@@ -267,12 +384,23 @@ var MERGEABLE_KEYS = [
   // be followed. Class C, so a user still sets it by hand or through the
   // GUI; whitelisting decides only whether the value SURVIVES the merge
   // (ADR-271, road-to-design-intent-conformance 2.3).
-  "design.fidelity_mode"
+  "design.fidelity_mode",
+  // `lean_projection.*` is a per-MACHINE setting and the install it governs is
+  // a user-scope one: the layer being thinned is `~/.claude/rules`, which
+  // belongs to the machine and not to any checkout. Without these two rows a
+  // consumer who wrote the opt-in into the user-global file got no error, no
+  // warning and no effect — the same silent-filter defect the two entries
+  // above repair, reaching a third key, and unsatisfiable-by-construction on
+  // an ADR-020 global-only install, where no project layer exists to carry it.
+  // Whitelisting decides only whether a value SURVIVES the merge: it sets
+  // nothing, and `installerThinsHost` still refuses a template-only value.
+  "lean_projection.mode",
+  "lean_projection.hosts"
 ];
-var TEMPLATE_RELATIVE = path2.join("src", "config", "agent-settings.template.yml");
-var _PACKAGE_ROOT = path2.resolve(path2.dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
+var TEMPLATE_RELATIVE = path3.join("src", "config", "agent-settings.template.yml");
+var _PACKAGE_ROOT = resolvePackageRoot(import.meta.url);
 function default_template_path() {
-  return path2.join(_PACKAGE_ROOT, TEMPLATE_RELATIVE);
+  return path3.join(_PACKAGE_ROOT, TEMPLATE_RELATIVE);
 }
 function _is_placeholder(value) {
   return typeof value === "string" && /^__[A-Z0-9_]+__$/.test(value);
@@ -323,8 +451,8 @@ var _AGENTS_DIR_MARKERS = [
 var _LEGACY_ANCHOR_ENV = "AGENT_CONFIG_LEGACY_ANCHOR";
 function _exists(p) {
   try {
-    fs2.lstatSync(p);
-    fs2.statSync(p);
+    fs3.lstatSync(p);
+    fs3.statSync(p);
     return true;
   } catch {
     return false;
@@ -332,22 +460,22 @@ function _exists(p) {
 }
 function _is_dir(p) {
   try {
-    return fs2.statSync(p).isDirectory();
+    return fs3.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function _is_file(p) {
   try {
-    return fs2.statSync(p).isFile();
+    return fs3.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function _resolve(p) {
-  const absolute = path2.resolve(p);
+  const absolute = path3.resolve(p);
   try {
-    return fs2.realpathSync(absolute);
+    return fs3.realpathSync(absolute);
   } catch {
     return absolute;
   }
@@ -357,7 +485,7 @@ function _ancestor_chain(start) {
   let cursor = start;
   for (; ; ) {
     chain.push(cursor);
-    const parent = path2.dirname(cursor);
+    const parent = path3.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -366,15 +494,15 @@ function _ancestor_chain(start) {
   return chain;
 }
 function _boundary_anchor_at(dir) {
-  const agents_dir = path2.join(dir, "agents");
+  const agents_dir = path3.join(dir, "agents");
   if (_is_dir(agents_dir)) {
     for (const marker of _AGENTS_DIR_MARKERS) {
-      if (_exists(path2.join(agents_dir, marker))) {
+      if (_exists(path3.join(agents_dir, marker))) {
         return ANCHOR_AGENTS_DIR;
       }
     }
   }
-  if (_exists(path2.join(dir, ".git"))) {
+  if (_exists(path3.join(dir, ".git"))) {
     return ANCHOR_GIT;
   }
   return null;
@@ -385,7 +513,7 @@ function find_project_root_with_anchor(start) {
   const chain = _ancestor_chain(current);
   if (legacy) {
     for (const candidate of chain) {
-      if (_exists(path2.join(candidate, ".git"))) {
+      if (_exists(path3.join(candidate, ".git"))) {
         return [candidate, ANCHOR_GIT];
       }
     }
@@ -399,7 +527,7 @@ function find_project_root_with_anchor(start) {
   }
   let outermost = null;
   for (const candidate of chain) {
-    if (_exists(path2.join(candidate, DEFAULT_PROJECT_FILE))) {
+    if (_exists(path3.join(candidate, DEFAULT_PROJECT_FILE))) {
       outermost = candidate;
     }
   }
@@ -415,13 +543,13 @@ function find_project_root(start) {
 function _resolve_cascade_paths(cwd, project_path) {
   if (cwd === null) {
     const legacy = project_path ? project_path : DEFAULT_PROJECT_FILE;
-    const parent = path2.dirname(legacy);
+    const parent = path3.dirname(legacy);
     return [legacy, _canonical_settings_path(parent), _local_settings_path(parent)];
   }
   const root = find_project_root(cwd);
   if (root === null) {
     const legacy = project_path ? project_path : DEFAULT_PROJECT_FILE;
-    const parent = path2.dirname(legacy);
+    const parent = path3.dirname(legacy);
     return [legacy, _canonical_settings_path(parent), _local_settings_path(parent)];
   }
   const cwd_resolved = _resolve(cwd);
@@ -432,7 +560,7 @@ function _resolve_cascade_paths(cwd, project_path) {
     if (cursor === root) {
       break;
     }
-    const parent = path2.dirname(cursor);
+    const parent = path3.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -440,7 +568,7 @@ function _resolve_cascade_paths(cwd, project_path) {
   }
   chain.reverse();
   return [
-    ...chain.map((d) => path2.join(d, DEFAULT_PROJECT_FILE)),
+    ...chain.map((d) => path3.join(d, DEFAULT_PROJECT_FILE)),
     _canonical_settings_path(root),
     _local_settings_path(root)
   ];
@@ -471,50 +599,9 @@ function load_agent_settings(options = {}) {
       _deep_merge(merged, layer);
     }
   }
-  _warn_removed_always_on_keys(merged);
+  warnRemovedKeys(merged);
   return merged;
 }
-var REMOVED_KEYS = /* @__PURE__ */ new Map([
-  ["subagents.enabled", "always-on orchestration"],
-  ["subagents.auto", "always-on orchestration"],
-  ["subagents.host_capabilities", "always-on orchestration"],
-  ["subagents.budget_routing", "always-on orchestration"],
-  ["ai_team.enabled", "always-on orchestration"],
-  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
-  ["telegraph.speak_scope", "the rule body states its own scope; compile_router gates on telegraph.speak alone"],
-  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
-  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
-  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
-  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"],
-  ["worktrees.mode", "the user asking for a worktree in the chat; creation is instruction-only and hardcoded"]
-]);
-var _warnedRemovedKeys = /* @__PURE__ */ new Set();
-function _readDottedSettingsPath(root, dotted) {
-  let node = root;
-  for (const part of dotted.split(".")) {
-    if (typeof node !== "object" || node === null || Array.isArray(node)) {
-      return void 0;
-    }
-    node = node[part];
-  }
-  return node;
-}
-function _warn_removed_always_on_keys(merged) {
-  for (const [key, reason] of REMOVED_KEYS) {
-    if (_warnedRemovedKeys.has(key)) {
-      continue;
-    }
-    if (_readDottedSettingsPath(merged, key) === void 0) {
-      continue;
-    }
-    _warnedRemovedKeys.add(key);
-    process.stderr.write(`${key} was removed (${reason}); ignored.
-`);
-  }
-}
 function _read_yaml(p) {
   if (!_is_file(p)) {
     return null;
@@ -527,7 +614,7 @@ function _read_yaml(p) {
   }
   let data;
   try {
-    const text = fs2.readFileSync(p, "utf-8");
+    const text = fs3.readFileSync(p, "utf-8");
     data = YAML.parse(text, { version: "1.1" });
     if (data === null || data === void 0) {
       data = {};
@@ -627,8 +714,8 @@ function _is_plain_dict(value) {
 }
 
 // src/scripts/_lib/scan_scope.ts
-import * as fs3 from "node:fs";
-import * as path3 from "node:path";
+import * as fs4 from "node:fs";
+import * as path4 from "node:path";
 var DeadScopeError = class extends Error {
   gate;
   constructor(gate, message) {
@@ -640,7 +727,7 @@ var DeadScopeError = class extends Error {
 function assertWatchlistResolves(opts) {
   const resolved = opts.candidates.filter((rel) => {
     try {
-      return fs3.statSync(path3.join(opts.repoRoot, rel)).isFile();
+      return fs4.statSync(path4.join(opts.repoRoot, rel)).isFile();
     } catch {
       return false;
     }
@@ -656,10 +743,10 @@ function assertWatchlistResolves(opts) {
 
 // src/scripts/_lib/update_check.ts
 import { randomBytes } from "node:crypto";
-import * as fs4 from "node:fs";
-import * as path4 from "node:path";
-var PACKAGE_NAME = "@event4u/agent-config";
-var NPM_REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+import * as fs5 from "node:fs";
+import * as path5 from "node:path";
+var PACKAGE_NAME2 = "@event4u/agent-config";
+var NPM_REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME2}/latest`;
 var FETCH_TIMEOUT_S = 1;
 var CHECK_WINDOW_MS = 24 * 60 * 60 * 1e3;
 var STATE_FILENAME = "update-check.json";
@@ -697,7 +784,7 @@ async function fetch_latest_from_npm(options = {}) {
 }
 function _read_state(state_path) {
   try {
-    const raw = fs4.readFileSync(state_path, "utf-8");
+    const raw = fs5.readFileSync(state_path, "utf-8");
     const data = JSON.parse(raw);
     if (data !== null && typeof data === "object" && !Array.isArray(data)) {
       return data;
@@ -707,20 +794,20 @@ function _read_state(state_path) {
   return {};
 }
 function _write_state(state_path, payload) {
-  const parent = path4.dirname(state_path);
-  fs4.mkdirSync(parent, { recursive: true });
-  const tmp = path4.join(parent, `.update-check-${randomBytes(8).toString("hex")}`);
+  const parent = path5.dirname(state_path);
+  fs5.mkdirSync(parent, { recursive: true });
+  const tmp = path5.join(parent, `.update-check-${randomBytes(8).toString("hex")}`);
   try {
     const sorted = {};
     for (const key of Object.keys(payload).sort()) {
       sorted[key] = payload[key];
     }
-    fs4.writeFileSync(tmp, JSON.stringify(sorted, null, 2), { encoding: "utf-8", mode: 384 });
-    fs4.chmodSync(tmp, 384);
-    fs4.renameSync(tmp, state_path);
+    fs5.writeFileSync(tmp, JSON.stringify(sorted, null, 2), { encoding: "utf-8", mode: 384 });
+    fs5.chmodSync(tmp, 384);
+    fs5.renameSync(tmp, state_path);
   } catch (err) {
     try {
-      fs4.unlinkSync(tmp);
+      fs5.unlinkSync(tmp);
     } catch {
     }
     throw err;
@@ -743,7 +830,7 @@ function _should_check(state, now) {
 }
 function _format_banner(latest, installed) {
   return `\u2139\uFE0F  agent-config ${latest} available (you have ${installed}).
-    Update: npx ${PACKAGE_NAME} update`;
+    Update: npx ${PACKAGE_NAME2} update`;
 }
 function _int_or_zero(part) {
   const trimmed = part.trim();
@@ -835,7 +922,7 @@ async function check_for_update(installed_version, options = {}) {
 
 // src/scripts/check_update_banner.ts
 var _HERE = fileURLToPath2(import.meta.url);
-var ROOT = path5.resolve(path5.dirname(_HERE), "..", "..");
+var ROOT = path6.resolve(path6.dirname(_HERE), "..", "..");
 var DOC = `Thin CLI wrapper: emit the daily update-check banner to stderr.
 
 Invoked by the \`scripts/agent-config\` dispatcher **after** a
@@ -849,9 +936,9 @@ Usage:
 When \`--installed-version\` is omitted, reads \`package.json\` next to
 the package root (\`$PACKAGE_ROOT/package.json\`).`;
 function _read_installed_version(package_root) {
-  const candidate = path5.join(package_root, "package.json");
+  const candidate = path6.join(package_root, "package.json");
   try {
-    const data = JSON.parse(fs5.readFileSync(candidate, "utf-8"));
+    const data = JSON.parse(fs6.readFileSync(candidate, "utf-8"));
     const version = data["version"];
     if (typeof version === "string" && version.trim()) {
       return version.trim();
@@ -923,7 +1010,7 @@ async function main(argv = process.argv.slice(2)) {
   }
   let cwd;
   try {
-    cwd = path5.resolve(args.cwd);
+    cwd = path6.resolve(args.cwd);
   } catch {
     cwd = ROOT;
   }
@@ -944,17 +1031,17 @@ function _isCliEntry() {
     return false;
   }
   if (true) {
-    if (path5.basename(process.argv[1], ".js") === "check_update_banner") {
+    if (path6.basename(process.argv[1], ".js") === "check_update_banner") {
       return true;
     }
   }
-  const argvUrl = pathToFileURL(path5.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL(path6.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs5.realpathSync(fileURLToPath2(import.meta.url));
-    const argv = fs5.realpathSync(path5.resolve(process.argv[1]));
+    const here = fs6.realpathSync(fileURLToPath2(import.meta.url));
+    const argv = fs6.realpathSync(path6.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;