@event4u/agent-config 16.2.0 → 16.4.0

package/dist/cli-delegate/{chunk-LTYVIY76.js → chunk-KXXWJTDO.js}

@@ -2,7 +2,7 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   blocker_class,
   collect
-} from "./chunk-QAJS5YWY.js";
+} from "./chunk-PHD7OOLE.js";
 import {
   GATE_BUDGET_LEDGER_REL,
   appendGateBudgetReceipt,
@@ -10,7 +10,7 @@ import {
   parseBudgetUsd,
   readGateBudgetCaps,
   readGateBudgetLedger
-} from "./chunk-DBH4AHDK.js";
+} from "./chunk-ED7KCMLB.js";
 import {
   __commonJS,
   __require
@@ -7471,19 +7471,13 @@ var MERGEABLE_KEYS = [
   // weak-host-lift-tiering + token-program-integration verdicts; ADR
   // records the whitelist addition). Wins over rule_loading_tier.
   "discipline_profile",
-  "memory.cadence",
   "personal.bot_icon",
   "personal.autonomy",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
   "knowledge.global_sharing.enabled",
-  "knowledge.global_sharing.allowed_tiers",
-  "knowledge.global_sharing.redaction.enabled",
-  "knowledge.global_sharing.redaction.halt_on_trigger",
-  "knowledge.global_sharing.auto_promote_threshold",
-  "knowledge.global_sharing.freshness.hypothesis_after_days",
-  "knowledge.global_sharing.freshness.stale_after_days"
+  "knowledge.global_sharing.allowed_tiers"
 ];
 var _DEFAULTS = {};
 var ANCHOR_AGENT_SETTINGS = "agent-settings";
@@ -7919,7 +7913,7 @@ Nothing has been executed. Re-run with \`--confirm\` to execute it and record th
       code: 1
     };
   }
-  if (budgeted !== null) {
+  if (budgeted !== null && budgeted.estimateUsd !== null) {
     appendGateBudgetReceipt(repoRoot, {
       kind: "consumption",
       blocker: id,
@@ -7942,7 +7936,8 @@ Nothing has been executed. Re-run with \`--confirm\` to execute it and record th
   return {
     outcome: "resolved",
     report: `${id} resolved. Ran \`${command}\` (exit 0); evidence appended in ${rel} and the status flipped to resolved ${when}.
-` + (budgeted === null ? "" : `Receipt appended to ${LEDGER_REL} ($${budgeted.estimateUsd.toFixed(2)} estimated).
+` + (budgeted === null ? "" : budgeted.estimateUsd === null ? `No receipt appended to ${LEDGER_REL}: the entry states no USD estimate and no cap is configured, so there is no figure to record.
+` : `Receipt appended to ${LEDGER_REL} ($${budgeted.estimateUsd.toFixed(2)} estimated).
 `) + // The dashboard is derived from the file this just rewrote, so it
     // is now stale. Saying so is the same follow-up `renderResumed`
     // already prints for its own file-move suggestion.

package/dist/cli-delegate/{chunk-T7L2QK3K.js → chunk-LQOCRFWT.js}

@@ -2,7 +2,7 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   resolve_with_fallback,
   write_target
-} from "./chunk-NDJLNC6Q.js";
+} from "./chunk-T6BP34WI.js";
 
 // src/scripts/_lib/installed_lock.ts
 import { randomBytes } from "node:crypto";

package/dist/cli-delegate/{chunk-6KM6ORRY.js → chunk-MDPPKQCQ.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-OY53J6II.js";
 import {
   write_target
-} from "./chunk-NDJLNC6Q.js";
+} from "./chunk-T6BP34WI.js";
 import {
   __export,
   __toESM
@@ -97,15 +97,11 @@ function build_claude_hook_matrix(manifest_path) {
   const claude_events = (platforms["claude"] ?? {}) || {};
   const aliasesAll = manifest["native_event_aliases"] ?? {};
   const aliases = (aliasesAll["claude"] ?? {}) || {};
-  const ac_to_native = {};
-  for (const [native, ac] of Object.entries(aliases)) {
-    ac_to_native[String(ac)] = native;
-  }
   const matrix = {};
-  for (const [ac_event, concerns] of Object.entries(claude_events)) {
+  for (const [native, ac_raw] of Object.entries(aliases)) {
+    const ac_event = String(ac_raw);
+    const concerns = claude_events[ac_event];
     if (!concerns || Array.isArray(concerns) && concerns.length === 0) continue;
-    const native = ac_to_native[ac_event];
-    if (native === void 0) continue;
     const dispatchArgs = `--platform claude --event ${ac_event} --native-event ${native} --project-dir "$CLAUDE_PROJECT_DIR" --min-version ${String(hook_spec)}`;
     matrix[native] = `B=""; [ -f "$CLAUDE_PROJECT_DIR/node_modules/@event4u/agent-config/dist/hooks/dispatch.js" ] && B="$CLAUDE_PROJECT_DIR/node_modules/@event4u/agent-config/dist/hooks/dispatch.js"; [ -z "$B" ] && [ -f "$CLAUDE_PROJECT_DIR/dist/hooks/dispatch.js" ] && [ -f "$CLAUDE_PROJECT_DIR/src/scripts/hook_manifest.yaml" ] && B="$CLAUDE_PROJECT_DIR/dist/hooks/dispatch.js"; if [ -n "$B" ] && command -v node >/dev/null 2>&1; then exec node "$B" ${dispatchArgs}; fi; BIN="$CLAUDE_PROJECT_DIR/agent-config"; [ -x "$BIN" ] || BIN=agent-config; command -v "$BIN" >/dev/null 2>&1 || exit 0; "$BIN" dispatch:hook ${dispatchArgs}`;
   }
@@ -219,6 +215,8 @@ __export(global_deploy_inventory_exports, {
   reap_stale: () => reap_stale,
   reap_tagged_orphans: () => reap_tagged_orphans,
   record_deploy: () => record_deploy,
+  recorded_absolute_files: () => recorded_absolute_files,
+  recorded_rel_files: () => recorded_rel_files,
   save_inventory: () => save_inventory
 });
 import { randomBytes } from "node:crypto";
@@ -237,6 +235,14 @@ function expanduser(p) {
   }
   return p;
 }
+function expanduser_at(p, home) {
+  if (home === void 0 || home === null || home === "") return expanduser(p);
+  if (p === "~") return home;
+  if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
+    return path2.join(home, p.slice(2));
+  }
+  return p;
+}
 function resolve_path(p) {
   try {
     return fs2.realpathSync(p);
@@ -633,6 +639,45 @@ function difference(prev, current) {
   }
   return out;
 }
+function recorded_rel_files(tool_id, anchor, inventory) {
+  const inv = inventory ?? load_inventory();
+  const tools = inv["tools"] ?? {};
+  const entry = tools[tool_id];
+  if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+    return /* @__PURE__ */ new Set();
+  }
+  const e = entry;
+  const recorded_anchor = e["anchor"];
+  const files = e["files"];
+  if (typeof recorded_anchor !== "string" || !Array.isArray(files)) {
+    return /* @__PURE__ */ new Set();
+  }
+  if (resolve_path(expanduser(recorded_anchor)) !== resolve_path(expanduser(anchor))) {
+    return /* @__PURE__ */ new Set();
+  }
+  return new Set(files.filter((f) => typeof f === "string"));
+}
+function recorded_absolute_files(inventory, home) {
+  const inv = inventory ?? load_inventory();
+  const tools = inv["tools"] ?? {};
+  const out = /* @__PURE__ */ new Set();
+  if (typeof tools !== "object" || tools === null || Array.isArray(tools)) return out;
+  for (const entry of Object.values(tools)) {
+    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) continue;
+    const e = entry;
+    const anchor = e["anchor"];
+    const files = e["files"];
+    if (typeof anchor !== "string" || !Array.isArray(files)) continue;
+    const expanded = expanduser_at(anchor, home);
+    for (const rel of files) {
+      if (typeof rel !== "string") continue;
+      const lexical = path2.resolve(expanded, rel);
+      out.add(lexical);
+      out.add(resolve_path(lexical));
+    }
+  }
+  return out;
+}
 function sorted_strings(items) {
   return items.filter((i) => typeof i === "string").sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
 }
@@ -685,7 +730,7 @@ function normalizeHostManifest(input) {
   };
 }
 var HOST_CAPABILITY_REGISTRY = {
-  claude: { subagent_spawn: true, parallel_spawn: true, structured_ask: false }
+  claude: { subagent_spawn: true, parallel_spawn: true, structured_ask: true }
 };
 function resolveHostCapabilities(hostId, override) {
   if (override !== void 0 && override !== null && typeof override === "object" && !Array.isArray(override)) {
@@ -812,6 +857,8 @@ export {
   build_claude_hook_matrix,
   ensure_managed_hooks,
   remove_managed_hooks,
+  INVENTORY_BASENAME,
+  inventory_path,
   load_inventory,
   save_inventory,
   expected_deploy_files,
@@ -819,6 +866,8 @@ export {
   reap_tagged_orphans,
   record_deploy,
   is_ancestor,
+  recorded_rel_files,
+  recorded_absolute_files,
   global_deploy_inventory_exports,
   TOOL_TO_HOST,
   residualReport,

package/dist/cli-delegate/{chunk-4XFP2Y3E.js → chunk-MSUL5NYP.js}

@@ -3,18 +3,18 @@ import {
   pruneAgedRefusalState,
   readSessionCounts,
   statePathFor
-} from "./chunk-YJ72UIAK.js";
-import {
-  readHookStdin
-} from "./chunk-F7DQWYR5.js";
+} from "./chunk-AED2VQGM.js";
 import {
   current_branch,
   git_common_dir,
   git_dir
-} from "./chunk-E4XIZDIB.js";
+} from "./chunk-IAYTIIQW.js";
 import {
   write_atomic
 } from "./chunk-MWRD5YOH.js";
+import {
+  readHookStdin
+} from "./chunk-F7DQWYR5.js";
 
 // src/scripts/_lib/envelope_grounding.ts
 import { execFileSync } from "node:child_process";

package/dist/cli-delegate/chunk-OAFSJBHH.js

@@ -0,0 +1,272 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+
+// src/scripts/_lib/cc_transcript.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { homedir } from "node:os";
+var DEFAULT_PROJECTS_ROOT = path.join(homedir(), ".claude", "projects");
+function projectStoreSlug(cwd) {
+  return cwd.replace(/[^A-Za-z0-9-]/g, "-");
+}
+function billableInputTokens(u) {
+  return u.input_tokens + u.cache_read_input_tokens + u.cache_creation_input_tokens;
+}
+function weightedInputUnits(u) {
+  const knownSplit = u.ephemeral_5m_input_tokens + u.ephemeral_1h_input_tokens;
+  const unaccounted = Math.max(0, u.cache_creation_input_tokens - knownSplit);
+  return u.input_tokens * 1 + u.cache_read_input_tokens * 0.1 + (u.ephemeral_5m_input_tokens + unaccounted) * 1.25 + u.ephemeral_1h_input_tokens * 2;
+}
+function numOr0(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function toTokenCounts(raw) {
+  const cc = raw?.cache_creation ?? {};
+  return {
+    input_tokens: numOr0(raw?.input_tokens),
+    cache_read_input_tokens: numOr0(raw?.cache_read_input_tokens),
+    cache_creation_input_tokens: numOr0(raw?.cache_creation_input_tokens),
+    output_tokens: numOr0(raw?.output_tokens),
+    ephemeral_5m_input_tokens: numOr0(cc.ephemeral_5m_input_tokens),
+    ephemeral_1h_input_tokens: numOr0(cc.ephemeral_1h_input_tokens)
+  };
+}
+function measureContentBytes(raw) {
+  const content = raw.message?.content;
+  if (content === void 0 || content === null) return null;
+  if (typeof content === "string") return Buffer.byteLength(content, "utf8");
+  try {
+    return Buffer.byteLength(JSON.stringify(content), "utf8");
+  } catch {
+    return null;
+  }
+}
+function classifyBucket(raw) {
+  const hasAgentId = typeof raw.agentId === "string" && raw.agentId.length > 0;
+  return hasAgentId || raw.isSidechain === true ? "subagent" : "main";
+}
+function dedupKey(raw) {
+  const id = typeof raw.message?.id === "string" ? raw.message.id : "";
+  const reqId = typeof raw.requestId === "string" ? raw.requestId : "";
+  return `${id}\0${reqId}`;
+}
+function parseLine(line) {
+  if (line.trim().length === 0) return null;
+  try {
+    return JSON.parse(line);
+  } catch {
+    return null;
+  }
+}
+function listTranscriptFiles(opts = {}) {
+  const root = opts.root ?? DEFAULT_PROJECTS_ROOT;
+  const base = opts.projectDir ? path.isAbsolute(opts.projectDir) ? opts.projectDir : path.join(root, opts.projectDir) : root;
+  if (!fs.existsSync(base)) return [];
+  const cutoffMs = opts.maxAgeDays !== void 0 ? (opts.now ?? /* @__PURE__ */ new Date()).getTime() - opts.maxAgeDays * 24 * 60 * 60 * 1e3 : null;
+  const out = [];
+  const stack = [base];
+  while (stack.length > 0) {
+    const dir = stack.pop();
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      const full = path.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        stack.push(full);
+        continue;
+      }
+      if (!entry.isFile() || !entry.name.endsWith(".jsonl")) continue;
+      if (cutoffMs !== null) {
+        let mtimeMs;
+        try {
+          mtimeMs = fs.statSync(full).mtimeMs;
+        } catch {
+          continue;
+        }
+        if (mtimeMs < cutoffMs) continue;
+      }
+      out.push(full);
+    }
+  }
+  return out.sort();
+}
+function scanTranscripts(opts = {}) {
+  const files = listTranscriptFiles(opts);
+  const seen = /* @__PURE__ */ new Set();
+  const records = [];
+  let totalSeen = 0;
+  for (const file of files) {
+    let text;
+    try {
+      text = fs.readFileSync(file, "utf-8");
+    } catch {
+      continue;
+    }
+    for (const line of text.split("\n")) {
+      const raw = parseLine(line);
+      if (!raw || raw.type !== "assistant" || !raw.message?.usage) continue;
+      totalSeen += 1;
+      const key = dedupKey(raw);
+      if (seen.has(key)) continue;
+      seen.add(key);
+      records.push({
+        bucket: classifyBucket(raw),
+        agentId: typeof raw.agentId === "string" ? raw.agentId : null,
+        model: typeof raw.message.model === "string" ? raw.message.model : "unknown",
+        timestamp: typeof raw.timestamp === "string" ? raw.timestamp : null,
+        usage: toTokenCounts(raw.message.usage),
+        content_bytes: opts.measureBytes === true ? measureContentBytes(raw) : null
+      });
+    }
+  }
+  const dedupedCount = records.length;
+  return {
+    records,
+    totalSeen,
+    dedupedCount,
+    dedup_ratio: totalSeen > 0 ? (totalSeen - dedupedCount) / totalSeen : 0
+  };
+}
+function measureBytesPerToken(records) {
+  let bytes = 0;
+  let tokens = 0;
+  let n = 0;
+  for (const rec of records) {
+    if (rec.content_bytes === null || rec.usage.output_tokens <= 0) continue;
+    bytes += rec.content_bytes;
+    tokens += rec.usage.output_tokens;
+    n += 1;
+  }
+  if (n === 0 || tokens <= 0) return null;
+  return {
+    basis: "measured",
+    content_bytes: bytes,
+    output_tokens: tokens,
+    bytes_per_token: bytes / tokens,
+    records: n
+  };
+}
+function derivedBytes(tokens, factor) {
+  if (factor === null) return null;
+  return {
+    basis: "derived",
+    tokens,
+    factor,
+    bytes: Math.round(tokens * factor.bytes_per_token)
+  };
+}
+function emptyAggregate(bucket) {
+  return {
+    bucket,
+    calls: 0,
+    input_tokens: 0,
+    cache_read_input_tokens: 0,
+    cache_creation_input_tokens: 0,
+    output_tokens: 0,
+    ephemeral_5m_input_tokens: 0,
+    ephemeral_1h_input_tokens: 0,
+    read_share: 0,
+    weighted_input_units: 0
+  };
+}
+function aggregateByBucket(records) {
+  const buckets = {
+    main: emptyAggregate("main"),
+    subagent: emptyAggregate("subagent")
+  };
+  for (const rec of records) {
+    const agg = buckets[rec.bucket];
+    agg.calls += 1;
+    agg.input_tokens += rec.usage.input_tokens;
+    agg.cache_read_input_tokens += rec.usage.cache_read_input_tokens;
+    agg.cache_creation_input_tokens += rec.usage.cache_creation_input_tokens;
+    agg.output_tokens += rec.usage.output_tokens;
+    agg.ephemeral_5m_input_tokens += rec.usage.ephemeral_5m_input_tokens;
+    agg.ephemeral_1h_input_tokens += rec.usage.ephemeral_1h_input_tokens;
+  }
+  for (const bucket of Object.values(buckets)) {
+    const billable = billableInputTokens(bucket);
+    bucket.read_share = billable > 0 ? bucket.cache_read_input_tokens / billable : 0;
+    bucket.weighted_input_units = weightedInputUnits(bucket);
+  }
+  return buckets;
+}
+
+// src/scripts/_lib/spawn_env.ts
+var DENY_EXACT = /* @__PURE__ */ new Set([
+  // dynamic loader
+  "LD_PRELOAD",
+  "LD_LIBRARY_PATH",
+  "LD_AUDIT",
+  "DYLD_INSERT_LIBRARIES",
+  "DYLD_LIBRARY_PATH",
+  "DYLD_FRAMEWORK_PATH",
+  "GCONV_PATH",
+  // git command-injection
+  "GIT_EXTERNAL_DIFF",
+  "GIT_SSH",
+  "GIT_SSH_COMMAND",
+  "GIT_PROXY_COMMAND",
+  "GIT_PAGER",
+  "PAGER",
+  // git config-injection: GIT_ALTERNATE_OBJECT_DIRECTORIES can point git at
+  // attacker-controlled object stores; the GIT_CONFIG* family is handled by
+  // prefix below (it is a general arbitrary-config-injection primitive).
+  "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+  // git path-redirection: GIT_DIR / GIT_INDEX_FILE / GIT_NAMESPACE point a
+  // child's git at an attacker-controlled repo, index file, or ref namespace
+  // — ordinary git ops then read and write attacker state (low severity,
+  // same family as GIT_ALTERNATE_OBJECT_DIRECTORIES above).
+  "GIT_DIR",
+  "GIT_INDEX_FILE",
+  "GIT_NAMESPACE",
+  // resolver hijack: HOSTALIASES remaps hostnames via an attacker file,
+  // redirecting any network fetch the child performs (CWE-427-adjacent).
+  "HOSTALIASES",
+  // runtime auto-exec hooks
+  "NODE_OPTIONS",
+  "BASH_ENV",
+  "ENV",
+  "PYTHONPATH",
+  "PYTHONSTARTUP",
+  "PYTHONINSPECT",
+  "PERL5OPT",
+  "PERL5LIB",
+  "RUBYOPT",
+  // shell field-splitting
+  "IFS"
+]);
+function isDeniedByFamily(name) {
+  if (name.startsWith("LD_") || name.startsWith("DYLD_")) return true;
+  if (name.startsWith("GIT_") && name.endsWith("_COMMAND")) return true;
+  if (name === "GIT_CONFIG" || name.startsWith("GIT_CONFIG_")) return true;
+  return false;
+}
+function hardenedSpawnEnv(overrides = {}) {
+  const out = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (value === void 0) continue;
+    if (DENY_EXACT.has(key)) continue;
+    if (isDeniedByFamily(key)) continue;
+    out[key] = value;
+  }
+  for (const [key, value] of Object.entries(overrides)) {
+    out[key] = value;
+  }
+  return out;
+}
+
+export {
+  DEFAULT_PROJECTS_ROOT,
+  projectStoreSlug,
+  billableInputTokens,
+  weightedInputUnits,
+  scanTranscripts,
+  measureBytesPerToken,
+  derivedBytes,
+  aggregateByBucket,
+  hardenedSpawnEnv
+};

package/dist/cli-delegate/{chunk-4E2W63DA.js → chunk-OKJUIAPS.js}

@@ -2,6 +2,12 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   write_atomic
 } from "./chunk-MWRD5YOH.js";
+import {
+  require_dist
+} from "./chunk-OY53J6II.js";
+import {
+  __toESM
+} from "./chunk-J55WI3RR.js";
 
 // src/scripts/_lib/installed_tools.ts
 import * as fs from "node:fs";
@@ -324,6 +330,57 @@ function _today() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 }
 
+// src/install/recordedOwnership.ts
+var YAML = __toESM(require_dist(), 1);
+import { existsSync, readFileSync as readFileSync2 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { isAbsolute, join as join2, resolve } from "node:path";
+var NO_RECORDED_HASHES = /* @__PURE__ */ new Map();
+function classifyOwnership(recordedSha256, onDiskSha256) {
+  if (recordedSha256 === void 0 || recordedSha256 === null) return "unknown";
+  if (onDiskSha256 === null) return "unknown";
+  return recordedSha256 === onDiskSha256 ? "recorded-unchanged" : "recorded-modified";
+}
+function readRecordedHashes(manifestPath, projectRoot) {
+  if (!existsSync(manifestPath)) return NO_RECORDED_HASHES;
+  let doc;
+  try {
+    doc = YAML.parse(readFileSync2(manifestPath, "utf8"));
+  } catch {
+    return NO_RECORDED_HASHES;
+  }
+  if (doc === null || typeof doc !== "object" || Array.isArray(doc)) return NO_RECORDED_HASHES;
+  const tools = doc["tools"];
+  if (!Array.isArray(tools)) return NO_RECORDED_HASHES;
+  const out = /* @__PURE__ */ new Map();
+  for (const tool of tools) {
+    if (tool === null || typeof tool !== "object" || Array.isArray(tool)) continue;
+    const files = tool["files"];
+    if (!Array.isArray(files)) continue;
+    for (const entry of files) {
+      if (entry === null || typeof entry !== "object" || Array.isArray(entry)) continue;
+      const rec = entry;
+      const raw = rec["path"];
+      if (typeof raw !== "string" || raw.length === 0) continue;
+      const sha = rec["sha256"];
+      const expanded = expanduser2(raw);
+      const target = isAbsolute(expanded) ? resolve(expanded) : resolve(projectRoot, expanded);
+      out.set(target, typeof sha === "string" && sha.length > 0 ? sha : null);
+    }
+  }
+  return out;
+}
+function expanduser2(p) {
+  if (p === "~") return homedir2();
+  if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
+    return join2(homedir2(), p.slice(2));
+  }
+  return p;
+}
+function recordedHashesForRoot(root, env) {
+  return readRecordedHashes(manifest_path(root, env), root);
+}
+
 export {
   SCHEMA_VERSIONS_SUPPORTED,
   DEFAULT_DEPLOY_ROOTS,
@@ -331,5 +388,9 @@ export {
   read_manifest,
   write_manifest,
   ScopeMismatchError,
-  upsert_tool
+  upsert_tool,
+  NO_RECORDED_HASHES,
+  classifyOwnership,
+  readRecordedHashes,
+  recordedHashesForRoot
 };

package/dist/cli-delegate/{chunk-QAJS5YWY.js → chunk-PHD7OOLE.js}

@@ -884,7 +884,8 @@ function main(argv) {
     return 0;
   }
   let sweep_out = "";
-  if (!args.check && args.archive && unarchived_complete(collect(roadmap_root)).length > 0) {
+  const before = collect(roadmap_root);
+  if (!args.check && args.archive && unarchived_complete(before).length + pending_iron_law_3(before).length > 0) {
     const swept = run_archival_sweep(repo_root);
     sweep_out = swept.stdout;
     if (swept.stderr) {

package/dist/cli-delegate/{chunk-P6ZHP5W2.js → chunk-PWX7CKMD.js}

@@ -1,11 +1,11 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
-import {
-  artefact_roots
-} from "./chunk-NUHLI2RX.js";
 import {
   DEFAULT_PROJECT_FILE,
   logger
-} from "./chunk-FC75PGJE.js";
+} from "./chunk-H76PHZBI.js";
+import {
+  artefact_roots
+} from "./chunk-YCU3TIXH.js";
 
 // src/scripts/config/profiles.ts
 import * as fs from "node:fs";

package/dist/cli-delegate/{chunk-NDJLNC6Q.js → chunk-T6BP34WI.js}

@@ -161,6 +161,7 @@ function _ensure_breadcrumb(legacy_root) {
 }
 
 export {
+  DEFAULT_EVENT4U_ROOT_RELATIVE,
   event4u_root,
   legacy_xdg_root,
   resolve_with_fallback,