@event4u/agent-config 16.3.0 → 16.5.0

package/dist/install/install.mjs

@@ -7371,10 +7371,10 @@ var require_dist = __commonJS({
 import { spawn, spawnSync as spawnSync2 } from "node:child_process";
 import * as crypto5 from "node:crypto";
 import * as fs33 from "node:fs";
-import * as os11 from "node:os";
+import * as os12 from "node:os";
 import * as path32 from "node:path";
 import process4 from "node:process";
-import { fileURLToPath as fileURLToPath9, pathToFileURL as pathToFileURL2 } from "node:url";
+import { fileURLToPath as fileURLToPath8, pathToFileURL as pathToFileURL2 } from "node:url";
 
 // src/scripts/_lib/json_pointers.ts
 import { createHash } from "node:crypto";
@@ -9741,6 +9741,14 @@ function expanduser6(p) {
   }
   return p;
 }
+function expanduser_at(p, home) {
+  if (home === void 0 || home === null || home === "") return expanduser6(p);
+  if (p === "~") return home;
+  if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
+    return path11.join(home, p.slice(2));
+  }
+  return p;
+}
 function resolve_path(p) {
   try {
     return fs12.realpathSync(p);
@@ -10155,6 +10163,27 @@ function recorded_rel_files(tool_id, anchor, inventory) {
   }
   return new Set(files.filter((f) => typeof f === "string"));
 }
+function recorded_absolute_files(inventory, home) {
+  const inv = inventory ?? load_inventory();
+  const tools = inv["tools"] ?? {};
+  const out = /* @__PURE__ */ new Set();
+  if (typeof tools !== "object" || tools === null || Array.isArray(tools)) return out;
+  for (const entry of Object.values(tools)) {
+    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) continue;
+    const e = entry;
+    const anchor = e["anchor"];
+    const files = e["files"];
+    if (typeof anchor !== "string" || !Array.isArray(files)) continue;
+    const expanded = expanduser_at(anchor, home);
+    for (const rel of files) {
+      if (typeof rel !== "string") continue;
+      const lexical = path11.resolve(expanded, rel);
+      out.add(lexical);
+      out.add(resolve_path(lexical));
+    }
+  }
+  return out;
+}
 function sorted_strings(items) {
   return items.filter((i) => typeof i === "string").sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
 }
@@ -11347,10 +11376,39 @@ function hostBindings(host, table = loadHostLowering()) {
 
 // src/scripts/_lib/agent_settings.ts
 import { createRequire as createRequire2 } from "node:module";
-import * as fs20 from "node:fs";
+import * as fs21 from "node:fs";
 import * as os7 from "node:os";
+import * as path20 from "node:path";
+
+// src/scripts/_lib/package_root.ts
+import * as fs20 from "node:fs";
 import * as path19 from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
+var PACKAGE_NAME = "@event4u/agent-config";
+var MAX_ASCENT = 16;
+function resolvePackageRoot(fromUrlOrPath, legacyHops = 3) {
+  const start = fromUrlOrPath.startsWith("file:") ? fileURLToPath4(fromUrlOrPath) : fromUrlOrPath;
+  const startDir = path19.dirname(start);
+  let dir = startDir;
+  for (let i = 0; i < MAX_ASCENT; i++) {
+    const manifest = path19.join(dir, "package.json");
+    if (fs20.existsSync(manifest)) {
+      try {
+        const parsed = JSON.parse(fs20.readFileSync(manifest, "utf8"));
+        if (parsed.name === PACKAGE_NAME) {
+          return dir;
+        }
+      } catch {
+      }
+    }
+    const parent = path19.dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+  return path19.resolve(startDir, ...Array.from({ length: legacyHops }, () => ".."));
+}
 
 // src/shared/settingsCarveOut.ts
 var SETTINGS_CARVE_OUT = [
@@ -11445,6 +11503,102 @@ function applyRenamedKeys(layer) {
   return layer;
 }
 
+// src/scripts/_lib/settings_removed_keys.ts
+var REMOVED_KEYS = /* @__PURE__ */ new Map([
+  ["subagents.enabled", "always-on orchestration"],
+  ["subagents.auto", "always-on orchestration"],
+  ["subagents.host_capabilities", "always-on orchestration"],
+  ["subagents.budget_routing", "always-on orchestration"],
+  ["ai_team.enabled", "always-on orchestration"],
+  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
+  ["telegraph.speak_scope", "the rule body states its own scope; compile_time_toggles decides whether the rule ships"],
+  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
+  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
+  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
+  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"],
+  ["worktrees.mode", "the user asking for a worktree in the chat; creation is instruction-only and hardcoded"],
+  // 2026-10-09 — output and tone
+  ["personal.minimal_output", "direct-answers Iron Law 3 mandates terse replies; there is no verbose mode"],
+  ["personal.play_by_play", "direct-answers: no narration unless the user asks for it in the turn"],
+  ["personal.pr_comment_bot_icon", "no-decorative-emojis-in-git-surfaces forbids the \u{1F916} prefix"],
+  ["verbosity.intent_announcements", 'direct-answers: act and emit the result, no "Let me\u2026" openers'],
+  ["verbosity.preview_artifacts", "generated content is used directly; preview-on-error and the Iron-Law gates decide when a preview shows"],
+  ["verbosity.routine_confirmations", "the no-cheap-questions Pre-Send Self-Check; Iron-Law gates always ask"],
+  ["verbosity.post_action_reports", "direct-answers Iron Law 3: a one-line confirmation and one end-summary"],
+  ["telegraph.speak", "the telegraph-speak predicate in compile_time_toggles.ts; the bench verdict is package-level (ADR telegraph/0002)"],
+  ["tokens.rich_skills", "the skill's own token_budget_class: rich plus the lint_token_budget_discipline ceiling"],
+  // 2026-10-09 — reasoning protocol switches
+  ["reasoning.auto_gate", "the RDP gate task signal plus the host self-assessment in rdp-gate.md"],
+  ["reasoning.components.orchestrator", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.notes_first", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.grounding", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.intent", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.complexity_first", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.verifier_default", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.prediction_tracking", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.decision_ledger", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  ["reasoning.components.uncertainty_budget", "the RDP gate task and host signals decide per component; reasoning.enabled stays the hard off"],
+  // 2026-10-09 — roadmap cadence
+  ["roadmap.skip_pre_run_gate", "the command name names the scope; only an ambiguous roadmap or an unresolvable conflict shows the gate"],
+  ["roadmap.dashboard_regen_cadence", "a fixed cadence: every 5th closed step, every phase boundary, reply end and any file-shape touch"],
+  // 2026-10-09 — command suggestion and PR creation
+  ["commands.auto_detect", "an orchestrator's own auto_detect front-matter and the --no-auto-detect flag"],
+  ["commands.suggestion.enabled", "the suggester match-score floor and cooldown; /command-suggestion-off silences one conversation"],
+  ["commands.suggestion.confidence_floor", "the suggester's fixed 0.6 floor; a command's own suggestion frontmatter can tighten it"],
+  ["commands.suggestion.cooldown_seconds", "the suggester's fixed 600-second cooldown; a command's own suggestion frontmatter can lengthen it"],
+  ["commands.suggestion.max_options", "the fixed cap of 4 suggestions plus the always-present as-is option"],
+  ["commands.create_pr.api_examples", "/create-pr's grounding rule: an example only from a real source, otherwise a one-line pointer"],
+  ["commands.create_pr.ui_paths", "/create-pr's light frontend heuristic, which fails open"],
+  ["commands.create_pr.api_paths", "/create-pr's light API-endpoint heuristic, which fails open"],
+  // 2026-10-09 — memory and knowledge sharing
+  ["memory.cadence", "a fixed cadence: the memory line renders whenever a memory type was asked; memory.visibility: off still silences it"],
+  ["memory.review_threshold", "/memory load's fixed preview threshold of 10 unreviewed intake signals"],
+  ["knowledge.global_sharing.redaction.enabled", "the write-time redaction scan, which always runs before a card goes global"],
+  ["knowledge.global_sharing.redaction.halt_on_trigger", "the redaction gate, which always halts on a confidential-pattern hit"],
+  ["knowledge.global_sharing.auto_promote_threshold", "the fixed two-repo sighting count that triggers a promotion suggestion"],
+  ["knowledge.global_sharing.freshness.hypothesis_after_days", "the card's age over last_verified against the fixed 90-day lead-only window"],
+  ["knowledge.global_sharing.freshness.stale_after_days", "the card's age over last_verified against the fixed 180-day skip window"],
+  // 2026-10-09 — hooks and engine
+  ["hooks.concern_budget.max_per_event", "the concern-budget gate's own constant of 8 per (platform, event) cell"],
+  ["hooks.concern_budget.hard_fail", "the concern-budget gate's --strict argv; without it the gate warns"],
+  ["decision_engine.surface_traces", "nothing: the per-phase decision trace stays off, the old default"],
+  ["decision_engine.on_block_fallback", "the fail-safe: an on_block ask that times out always stops"],
+  ["explain.enable_last", "the presence of a work-state trace; explain last always renders it"],
+  // 2026-10-09 — remaining
+  ["project.pr_template", "/create-pr, which reads .github/pull_request_template.md"],
+  ["pipelines.skill_improvement", "the skill-improvement-trigger rule; the capture is a proposal the user confirms"],
+  ["consistency.cross_source", "the cross-source-consistency rule, always on; batching and the no-cheap-questions floor bound the noise"],
+  ["subagents.downshift", "the model_tier each sub-task declares; downshift is always on"],
+  ["ai_team.suppress_setup_hint", "nothing: the one-line team-mode setup hint is always shown"]
+]);
+var _warnedRemovedKeys = /* @__PURE__ */ new Set();
+function _readDotted(root, dotted) {
+  let node = root;
+  for (const part of dotted.split(".")) {
+    if (typeof node !== "object" || node === null || Array.isArray(node)) {
+      return void 0;
+    }
+    node = node[part];
+  }
+  return node;
+}
+function warnRemovedKeys(merged) {
+  for (const [key, reason] of REMOVED_KEYS) {
+    if (_warnedRemovedKeys.has(key)) {
+      continue;
+    }
+    if (_readDotted(merged, key) === void 0) {
+      continue;
+    }
+    _warnedRemovedKeys.add(key);
+    process.stderr.write(`${key} was removed (${reason}); ignored.
+`);
+  }
+}
+
 // src/scripts/_lib/agent_settings.ts
 var _require2 = createRequire2(import.meta.url);
 var Logger = class {
@@ -11485,10 +11639,10 @@ var DEFAULT_PROJECT_FILE = ".agent-settings.yml";
 var LOCAL_PROJECT_FILE = ".agent-settings.local.yml";
 var LOCAL_PROJECT_SUBDIR = ["agents", "settings"];
 function _local_settings_path(project_root) {
-  return path19.join(project_root, ...LOCAL_PROJECT_SUBDIR, LOCAL_PROJECT_FILE);
+  return path20.join(project_root, ...LOCAL_PROJECT_SUBDIR, LOCAL_PROJECT_FILE);
 }
 function _canonical_settings_path(project_root) {
-  return path19.join(project_root, ...LOCAL_PROJECT_SUBDIR, DEFAULT_PROJECT_FILE);
+  return path20.join(project_root, ...LOCAL_PROJECT_SUBDIR, DEFAULT_PROJECT_FILE);
 }
 var USER_GLOBAL_FILENAME = "agent-settings.yml";
 function DEFAULT_USER_GLOBAL_FILE() {
@@ -11511,13 +11665,13 @@ function user_global_settings_paths() {
   return paths;
 }
 var MERGEABLE_KEYS = [
-  // `name`, `ide` and `personal.bot_icon` are the PRE-MIGRATION spellings.
-  // `install.ts` migrates `ide` → `personal.ide` and `pr_comment_bot_icon`
-  // into its `personal.` home, and this list was never moved with them — so
-  // the whitelist named keys the template does not have while the keys it
-  // does have were filtered out silently. A user setting either preference
-  // user-globally got no error, no warning, and no effect
-  // (road-to-capability-answerability 4.3, ADR-219).
+  // `name` and `ide` are the PRE-MIGRATION spellings. `install.ts` migrates
+  // `ide` → `personal.ide`, and this list was never moved with it — so the
+  // whitelist named a key the template does not have while the key it does
+  // have was filtered out silently (road-to-capability-answerability 4.3,
+  // ADR-219). `personal.bot_icon` / `personal.pr_comment_bot_icon` left with
+  // the key itself (2026-10-09): a whitelisted key nothing reads would carry a
+  // user-global value into a tree that ignores it.
   //
   // Both spellings are listed rather than replaced: a legacy file that still
   // uses the old name keeps working, and nothing that resolved before
@@ -11527,20 +11681,12 @@ var MERGEABLE_KEYS = [
   "ide",
   "personal.ide",
   "rule_loading_tier",
-  "memory.cadence",
-  "personal.bot_icon",
-  "personal.pr_comment_bot_icon",
   "personal.autonomy",
   // Knowledge-card global cross-project sharing is a USER-GLOBAL setting
   // (ADR-100 / road-to-structure-grounding-v2). Whitelisted so the
   // ~/.event4u/agent-config/agent-settings.yml values are honoured.
   "knowledge.global_sharing.enabled",
   "knowledge.global_sharing.allowed_tiers",
-  "knowledge.global_sharing.redaction.enabled",
-  "knowledge.global_sharing.redaction.halt_on_trigger",
-  "knowledge.global_sharing.auto_promote_threshold",
-  "knowledge.global_sharing.freshness.hypothesis_after_days",
-  "knowledge.global_sharing.freshness.stale_after_days",
   // `design.fidelity_mode` is a per-DEVELOPER working preference, not a
   // per-project one: whether an agent may deviate from a handed-over design
   // is a property of how that person works, and a designer who sets it once
@@ -11564,10 +11710,10 @@ var MERGEABLE_KEYS = [
   "lean_projection.mode",
   "lean_projection.hosts"
 ];
-var TEMPLATE_RELATIVE = path19.join("src", "config", "agent-settings.template.yml");
-var _PACKAGE_ROOT = path19.resolve(path19.dirname(fileURLToPath4(import.meta.url)), "..", "..", "..");
+var TEMPLATE_RELATIVE = path20.join("src", "config", "agent-settings.template.yml");
+var _PACKAGE_ROOT = resolvePackageRoot(import.meta.url);
 function default_template_path() {
-  return path19.join(_PACKAGE_ROOT, TEMPLATE_RELATIVE);
+  return path20.join(_PACKAGE_ROOT, TEMPLATE_RELATIVE);
 }
 function _is_placeholder(value) {
   return typeof value === "string" && /^__[A-Z0-9_]+__$/.test(value);
@@ -11618,8 +11764,8 @@ var _AGENTS_DIR_MARKERS = [
 var _LEGACY_ANCHOR_ENV = "AGENT_CONFIG_LEGACY_ANCHOR";
 function _exists(p) {
   try {
-    fs20.lstatSync(p);
-    fs20.statSync(p);
+    fs21.lstatSync(p);
+    fs21.statSync(p);
     return true;
   } catch {
     return false;
@@ -11627,22 +11773,22 @@ function _exists(p) {
 }
 function _is_dir2(p) {
   try {
-    return fs20.statSync(p).isDirectory();
+    return fs21.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function _is_file(p) {
   try {
-    return fs20.statSync(p).isFile();
+    return fs21.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function _resolve(p) {
-  const absolute = path19.resolve(p);
+  const absolute = path20.resolve(p);
   try {
-    return fs20.realpathSync(absolute);
+    return fs21.realpathSync(absolute);
   } catch {
     return absolute;
   }
@@ -11652,7 +11798,7 @@ function _ancestor_chain(start) {
   let cursor = start;
   for (; ; ) {
     chain.push(cursor);
-    const parent = path19.dirname(cursor);
+    const parent = path20.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -11661,15 +11807,15 @@ function _ancestor_chain(start) {
   return chain;
 }
 function _boundary_anchor_at(dir) {
-  const agents_dir = path19.join(dir, "agents");
+  const agents_dir = path20.join(dir, "agents");
   if (_is_dir2(agents_dir)) {
     for (const marker of _AGENTS_DIR_MARKERS) {
-      if (_exists(path19.join(agents_dir, marker))) {
+      if (_exists(path20.join(agents_dir, marker))) {
         return ANCHOR_AGENTS_DIR;
       }
     }
   }
-  if (_exists(path19.join(dir, ".git"))) {
+  if (_exists(path20.join(dir, ".git"))) {
     return ANCHOR_GIT;
   }
   return null;
@@ -11680,7 +11826,7 @@ function find_project_root_with_anchor(start) {
   const chain = _ancestor_chain(current);
   if (legacy) {
     for (const candidate of chain) {
-      if (_exists(path19.join(candidate, ".git"))) {
+      if (_exists(path20.join(candidate, ".git"))) {
         return [candidate, ANCHOR_GIT];
       }
     }
@@ -11694,7 +11840,7 @@ function find_project_root_with_anchor(start) {
   }
   let outermost = null;
   for (const candidate of chain) {
-    if (_exists(path19.join(candidate, DEFAULT_PROJECT_FILE))) {
+    if (_exists(path20.join(candidate, DEFAULT_PROJECT_FILE))) {
       outermost = candidate;
     }
   }
@@ -11738,7 +11884,7 @@ function _expanduser(p) {
     return os7.homedir();
   }
   if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
-    return path19.join(os7.homedir(), p.slice(2));
+    return path20.join(os7.homedir(), p.slice(2));
   }
   return p;
 }
@@ -11767,13 +11913,13 @@ function resolve_project_root(arg, options = {}) {
 function _resolve_cascade_paths(cwd, project_path) {
   if (cwd === null) {
     const legacy = project_path ? project_path : DEFAULT_PROJECT_FILE;
-    const parent = path19.dirname(legacy);
+    const parent = path20.dirname(legacy);
     return [legacy, _canonical_settings_path(parent), _local_settings_path(parent)];
   }
   const root = find_project_root(cwd);
   if (root === null) {
     const legacy = project_path ? project_path : DEFAULT_PROJECT_FILE;
-    const parent = path19.dirname(legacy);
+    const parent = path20.dirname(legacy);
     return [legacy, _canonical_settings_path(parent), _local_settings_path(parent)];
   }
   const cwd_resolved = _resolve(cwd);
@@ -11784,7 +11930,7 @@ function _resolve_cascade_paths(cwd, project_path) {
     if (cursor === root) {
       break;
     }
-    const parent = path19.dirname(cursor);
+    const parent = path20.dirname(cursor);
     if (parent === cursor) {
       break;
     }
@@ -11792,7 +11938,7 @@ function _resolve_cascade_paths(cwd, project_path) {
   }
   chain.reverse();
   return [
-    ...chain.map((d) => path19.join(d, DEFAULT_PROJECT_FILE)),
+    ...chain.map((d) => path20.join(d, DEFAULT_PROJECT_FILE)),
     _canonical_settings_path(root),
     _local_settings_path(root)
   ];
@@ -11823,50 +11969,9 @@ function load_agent_settings(options = {}) {
       _deep_merge(merged, layer);
     }
   }
-  _warn_removed_always_on_keys(merged);
+  warnRemovedKeys(merged);
   return merged;
 }
-var REMOVED_KEYS = /* @__PURE__ */ new Map([
-  ["subagents.enabled", "always-on orchestration"],
-  ["subagents.auto", "always-on orchestration"],
-  ["subagents.host_capabilities", "always-on orchestration"],
-  ["subagents.budget_routing", "always-on orchestration"],
-  ["ai_team.enabled", "always-on orchestration"],
-  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
-  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"],
-  ["telegraph.speak_scope", "the rule body states its own scope; compile_router gates on telegraph.speak alone"],
-  ["chat_history.max_size_kb", "the rotate command takes --max-kb from argv; session-count pruning bounds the file"],
-  ["chat_history.on_overflow", "the overflow mode comes from the rotate command --mode argv"],
-  ["quality.wait_for_remote_ci", "whether to poll follows from the push plus a detectable remote pipeline"],
-  ["legal_review_prep.consented_at", "the provenance sidecar settings:set writes and consentVerdict reads"],
-  ["worktrees.mode", "the user asking for a worktree in the chat; creation is instruction-only and hardcoded"]
-]);
-var _warnedRemovedKeys = /* @__PURE__ */ new Set();
-function _readDottedSettingsPath(root, dotted) {
-  let node = root;
-  for (const part of dotted.split(".")) {
-    if (typeof node !== "object" || node === null || Array.isArray(node)) {
-      return void 0;
-    }
-    node = node[part];
-  }
-  return node;
-}
-function _warn_removed_always_on_keys(merged) {
-  for (const [key, reason] of REMOVED_KEYS) {
-    if (_warnedRemovedKeys.has(key)) {
-      continue;
-    }
-    if (_readDottedSettingsPath(merged, key) === void 0) {
-      continue;
-    }
-    _warnedRemovedKeys.add(key);
-    process.stderr.write(`${key} was removed (${reason}); ignored.
-`);
-  }
-}
 function _read_yaml(p) {
   if (!_is_file(p)) {
     return null;
@@ -11879,7 +11984,7 @@ function _read_yaml(p) {
   }
   let data;
   try {
-    const text = fs20.readFileSync(p, "utf-8");
+    const text = fs21.readFileSync(p, "utf-8");
     data = YAML6.parse(text, { version: "1.1" });
     if (data === null || data === void 0) {
       data = {};
@@ -11979,11 +12084,11 @@ function _is_plain_dict(value) {
 }
 
 // src/install/rule_scope.ts
-import * as path20 from "node:path";
+import * as path21 from "node:path";
 
 // src/install/ruleInScope.ts
 var YAML5 = __toESM(require_dist(), 1);
-import * as fs21 from "node:fs";
+import * as fs22 from "node:fs";
 function parseYaml3(text) {
   try {
     const data = YAML5.parse(text, { version: "1.1" });
@@ -12021,7 +12126,7 @@ function rule_in_scope(source_path, scope, pack_scope = null, role_scope = null)
   if (scope === null && pack_scope === null && role_scope === null) {
     return true;
   }
-  const [meta] = parseFrontmatter(fs21.readFileSync(source_path, "utf-8"));
+  const [meta] = parseFrontmatter(fs22.readFileSync(source_path, "utf-8"));
   if (meta["type"] === "always" || meta["alwaysApply"] === true) {
     return true;
   }
@@ -12072,7 +12177,7 @@ function ruleFileArrives(sourcePath, scope) {
   if (!sourcePath.endsWith(".md")) {
     return true;
   }
-  const basename9 = path20.basename(sourcePath);
+  const basename9 = path21.basename(sourcePath);
   if (COMPAT_ALWAYS_EXCLUDED.includes(basename9)) {
     return false;
   }
@@ -12080,26 +12185,26 @@ function ruleFileArrives(sourcePath, scope) {
 }
 
 // src/install/partitionEligibility.ts
-import * as fs23 from "node:fs";
+import * as fs24 from "node:fs";
 import * as os8 from "node:os";
 
 // src/install/hostLayerFingerprint.ts
 import { createHash as createHash6 } from "node:crypto";
-import * as fs22 from "node:fs";
-import * as path21 from "node:path";
+import * as fs23 from "node:fs";
+import * as path22 from "node:path";
 var FINGERPRINT_SCHEMA = 1;
 function collectFiles(dir) {
   const out = [];
   const walk = (d) => {
     let entries;
     try {
-      entries = fs22.readdirSync(d, { withFileTypes: true });
+      entries = fs23.readdirSync(d, { withFileTypes: true });
     } catch {
       return;
     }
     const sorted = [...entries].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
     for (const e of sorted) {
-      const p = path21.join(d, e.name);
+      const p = path22.join(d, e.name);
       if (e.isDirectory()) {
         walk(p);
       } else if (e.isFile()) {
@@ -12116,10 +12221,10 @@ function fingerprintLayers(layers) {
   for (const layer of layers) {
     h.update(`layer:${layer.label}\0`);
     for (const file of collectFiles(layer.root)) {
-      h.update(path21.relative(layer.root, file));
+      h.update(path22.relative(layer.root, file));
       h.update("\0");
       try {
-        h.update(fs22.readFileSync(file));
+        h.update(fs23.readFileSync(file));
       } catch {
         h.update("\0unreadable\0");
       }
@@ -12129,11 +12234,11 @@ function fingerprintLayers(layers) {
   return h.digest("hex");
 }
 function hostLayerInputs(userHome) {
-  const claude = path21.join(userHome, ".claude");
+  const claude = path22.join(userHome, ".claude");
   return [
-    { label: "rules", root: path21.join(claude, "rules") },
-    { label: "skills", root: path21.join(claude, "skills") },
-    { label: "commands", root: path21.join(claude, "commands") }
+    { label: "rules", root: path22.join(claude, "rules") },
+    { label: "skills", root: path22.join(claude, "skills") },
+    { label: "commands", root: path22.join(claude, "commands") }
   ];
 }
 
@@ -12142,7 +12247,7 @@ var MAINTAINER_WORKSPACE = "agent-config-maintainer";
 function isExclusivelyPackageOnly(source_path) {
   let meta;
   try {
-    [meta] = parseFrontmatter(fs23.readFileSync(source_path, "utf-8"));
+    [meta] = parseFrontmatter(fs24.readFileSync(source_path, "utf-8"));
   } catch {
     return false;
   }
@@ -12173,8 +12278,8 @@ function stampHostLayerFingerprint(installedVersion, tools, lockfilePath, skip2,
 }
 
 // src/install/claudeRuleRewrite.ts
-import * as fs24 from "node:fs";
-import * as path22 from "node:path";
+import * as fs25 from "node:fs";
+import * as path23 from "node:path";
 
 // src/install/claudePathsPlan.ts
 function derive_trigger_globs(meta) {
@@ -12343,23 +12448,23 @@ function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
   const result = { rewritten: 0, scoped: [], dropped: [], failed: [] };
   let entries;
   try {
-    entries = fs24.readdirSync(rulesDir);
+    entries = fs25.readdirSync(rulesDir);
   } catch {
     return result;
   }
   for (const name of entries.filter((n) => n.endsWith(".md")).sort()) {
-    const full = path22.join(rulesDir, name);
-    if (preserved.has(path22.resolve(full))) continue;
+    const full = path23.join(rulesDir, name);
+    if (preserved.has(path23.resolve(full))) continue;
     let stat;
     try {
-      stat = fs24.lstatSync(full);
+      stat = fs25.lstatSync(full);
     } catch {
       continue;
     }
     if (!stat.isFile() || stat.isSymbolicLink()) continue;
     let text;
     try {
-      text = fs24.readFileSync(full, "utf-8");
+      text = fs25.readFileSync(full, "utf-8");
     } catch {
       continue;
     }
@@ -12369,7 +12474,7 @@ function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
     const withOwnership = _withPreservedKeys(rendered.text, text);
     if (withOwnership !== text) {
       try {
-        fs24.writeFileSync(full, withOwnership, "utf-8");
+        fs25.writeFileSync(full, withOwnership, "utf-8");
       } catch (e) {
         result.failed.push({
           rule: name.slice(0, -3),
@@ -12389,18 +12494,19 @@ function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
 }
 
 // src/install/installThinLayer.ts
-import * as fs28 from "node:fs";
-import * as path27 from "node:path";
-import * as os10 from "node:os";
+import * as fs29 from "node:fs";
+import * as path28 from "node:path";
+import * as os11 from "node:os";
 
 // src/scripts/_lib/installed_layer.ts
-import * as fs25 from "node:fs";
-import * as path24 from "node:path";
+import * as fs26 from "node:fs";
+import * as os10 from "node:os";
+import * as path25 from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 
 // src/install/globalRuleLayers.ts
 import * as os9 from "node:os";
-import * as path23 from "node:path";
+import * as path24 from "node:path";
 var GLOBAL_RULE_DIRS = {
   "claude-code": ".claude/rules",
   cursor: ".cursor/rules",
@@ -12412,7 +12518,7 @@ var GLOBAL_RULE_DIRS = {
 };
 function globalRuleLayerPath(toolId, home = process.env["HOME"] ?? os9.homedir()) {
   const rel = GLOBAL_RULE_DIRS[toolId];
-  return rel === void 0 ? null : path23.join(home, rel);
+  return rel === void 0 ? null : path24.join(home, rel);
 }
 
 // src/scripts/_lib/rule_law_section.ts
@@ -12477,7 +12583,12 @@ function lawText(body) {
 var TOP_FILES = 20;
 var LIMIT_WARN_FRACTION = 0.8;
 function isUnconditional(text) {
-  return !/^paths:/m.test(text);
+  const [frontmatter] = splitFrontmatter(text);
+  const emptyBlock = /^---\n---(\n|$)/.test(text);
+  if (frontmatter === "" && !emptyBlock && /^\uFEFF?[\s]*---/.test(text)) {
+    return !/^paths:/m.test(text);
+  }
+  return !/^paths:/m.test(frontmatter);
 }
 function readLayer(host, scope, dir, recorded) {
   const empty = {
@@ -12488,23 +12599,25 @@ function readLayer(host, scope, dir, recorded) {
     foreign: 0,
     package_owned_chars: 0,
     foreign_chars: 0,
+    unconditional_chars: 0,
+    scoped_chars: 0,
     top: []
   };
   let names;
   try {
-    names = fs25.readdirSync(dir);
+    names = fs26.readdirSync(dir);
   } catch {
     return { host, scope, dir, present: false, ...empty };
   }
   const readings = [];
   for (const name of names.sort()) {
     if (!name.endsWith(".md")) continue;
-    const abs = path24.join(dir, name);
+    const abs = path25.join(dir, name);
     let text;
     try {
-      const st = fs25.statSync(abs);
+      const st = fs26.statSync(abs);
       if (!st.isFile()) continue;
-      text = fs25.readFileSync(abs, "utf-8");
+      text = fs26.readFileSync(abs, "utf-8");
     } catch {
       continue;
     }
@@ -12533,12 +12646,14 @@ function readLayer(host, scope, dir, recorded) {
     foreign: readings.filter((r) => !r.package_owned).length,
     package_owned_chars: readings.reduce((n, r) => n + (r.package_owned ? r.chars : 0), 0),
     foreign_chars: readings.reduce((n, r) => n + (r.package_owned ? 0 : r.chars), 0),
+    unconditional_chars: readings.reduce((n, r) => n + (r.unconditional ? r.chars : 0), 0),
+    scoped_chars: readings.reduce((n, r) => n + (r.unconditional ? 0 : r.chars), 0),
     top
   };
 }
 function defaultHostLimitsPath() {
-  return path24.join(
-    path24.dirname(fileURLToPath5(import.meta.url)),
+  return path25.join(
+    path25.dirname(fileURLToPath5(import.meta.url)),
     "..",
     "..",
     "config",
@@ -12549,7 +12664,7 @@ function loadHostInstructionLimits(file = defaultHostLimitsPath()) {
   const out = /* @__PURE__ */ new Map();
   let raw;
   try {
-    raw = JSON.parse(fs25.readFileSync(file, "utf-8"));
+    raw = JSON.parse(fs26.readFileSync(file, "utf-8"));
   } catch {
     return out;
   }
@@ -12598,6 +12713,89 @@ function buildHostLimitRows(layers, limits) {
   }
   return rows;
 }
+function defaultInventoryPath(home) {
+  if (home === void 0 || home === null || home === "") return inventory_path();
+  try {
+    const real = (q) => {
+      try {
+        return fs26.realpathSync(q);
+      } catch {
+        return path25.resolve(q);
+      }
+    };
+    const mine = os10.homedir();
+    if (path25.resolve(home) === path25.resolve(mine) || real(home) === real(mine)) {
+      return inventory_path();
+    }
+  } catch {
+  }
+  return path25.join(home, DEFAULT_EVENT4U_ROOT_RELATIVE, INVENTORY_BASENAME);
+}
+function resolveLayerOwnership(opts) {
+  const recorded = /* @__PURE__ */ new Map();
+  const sources = [];
+  if (opts.inventoryPath !== null) {
+    let n = 0;
+    try {
+      const inv = load_inventory(opts.inventoryPath ?? defaultInventoryPath(opts.home));
+      for (const abs of recorded_absolute_files(inv, opts.home ?? null)) {
+        if (!recorded.has(abs)) n += 1;
+        recorded.set(abs, null);
+      }
+    } catch {
+    }
+    if (n > 0) sources.push("global-inventory");
+  }
+  let fromDeploy = 0;
+  for (const [anchor, rels] of opts.thisDeploy ?? /* @__PURE__ */ new Map()) {
+    for (const rel of rels) {
+      const abs = path25.resolve(anchor, rel);
+      if (!recorded.has(abs)) fromDeploy += 1;
+      recorded.set(abs, null);
+      try {
+        recorded.set(fs26.realpathSync(abs), null);
+      } catch {
+      }
+    }
+  }
+  if (fromDeploy > 0) sources.push("this-deploy");
+  const manifestPath = opts.manifestPath ?? null;
+  if (manifestPath !== null && fs26.existsSync(manifestPath)) {
+    let n = 0;
+    let recordedHashes;
+    try {
+      recordedHashes = readRecordedHashes(manifestPath, opts.projectRoot);
+    } catch {
+      recordedHashes = NO_RECORDED_HASHES;
+    }
+    for (const [abs, hash] of recordedHashes) {
+      n += 1;
+      recorded.set(abs, hash);
+    }
+    if (n > 0) sources.push("manifest");
+  }
+  if (recorded.size === 0) {
+    return { recorded: NO_RECORDED_HASHES, sources: [], source: "none" };
+  }
+  const primary = sources.includes("manifest") ? "manifest" : sources.includes("global-inventory") ? "global-inventory" : "this-deploy";
+  return { recorded, sources, source: primary };
+}
+function ownershipLine(sources) {
+  const list = (Array.isArray(sources) ? sources : [sources]).filter(
+    (s) => s !== "none"
+  );
+  if (list.length === 0) {
+    return "ownership: NO manifest and NO deploy inventory resolved \u2014 every file reads foreign, which is no evidence rather than a finding";
+  }
+  const phrases = {
+    manifest: "the installed-tools manifest",
+    "global-inventory": "the global deploy inventory (deployed-files.json)",
+    "this-deploy": "the file set this install just wrote"
+  };
+  const named = list.map((s) => phrases[s]);
+  const joined = named.length === 1 ? named[0] : `${named.slice(0, -1).join(", ")} and ${named[named.length - 1]}`;
+  return `ownership: read from ${joined}`;
+}
 function renderHostLimitRows(rows) {
   const out = [
     "host instruction budgets \u2014 package-owned + foreign against the published limit"
@@ -12618,16 +12816,16 @@ function renderHostLimitRows(rows) {
 
 // src/scripts/_lib/thin_rules.ts
 import { createHash as createHash7 } from "node:crypto";
-import * as fs27 from "node:fs";
-import * as path26 from "node:path";
+import * as fs28 from "node:fs";
+import * as path27 from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 
 // src/scripts/_lib/rule_consequence_class.ts
-import * as fs26 from "node:fs";
-import * as path25 from "node:path";
+import * as fs27 from "node:fs";
+import * as path26 from "node:path";
 var CLASS_CONFIG_REL = "src/config/rule-consequence-class.json";
 function readConsequenceClass(repoRoot) {
-  const raw = JSON.parse(fs26.readFileSync(path25.join(repoRoot, CLASS_CONFIG_REL), "utf-8"));
+  const raw = JSON.parse(fs27.readFileSync(path26.join(repoRoot, CLASS_CONFIG_REL), "utf-8"));
   return {
     criterion_ref: raw.criterion_ref ?? "",
     members: raw.members ?? {},
@@ -12673,22 +12871,22 @@ function triggerlessRuleIds(router) {
 
 // src/scripts/_lib/thin_rules.ts
 var _HERE2 = fileURLToPath6(import.meta.url);
-var REPO_ROOT = path26.resolve(path26.dirname(_HERE2), "..", "..", "..");
-var RULES_SOURCE = path26.join(REPO_ROOT, "dist/agent-src", "rules");
-var ROUTER = path26.join(REPO_ROOT, "dist", "router.json");
+var REPO_ROOT = path27.resolve(path27.dirname(_HERE2), "..", "..", "..");
+var RULES_SOURCE = path27.join(REPO_ROOT, "dist/agent-src", "rules");
+var ROUTER = path27.join(REPO_ROOT, "dist", "router.json");
 function _globSortedMd(dir) {
   let names;
   try {
-    names = fs27.readdirSync(dir);
+    names = fs28.readdirSync(dir);
   } catch {
     return [];
   }
-  const out = names.filter((n) => n.endsWith(".md")).map((n) => path26.join(dir, n));
+  const out = names.filter((n) => n.endsWith(".md")).map((n) => path27.join(dir, n));
   out.sort();
   return out;
 }
 function kernel_ids(routerPath = ROUTER) {
-  const data = JSON.parse(fs27.readFileSync(routerPath, "utf-8"));
+  const data = JSON.parse(fs28.readFileSync(routerPath, "utf-8"));
   const kernel = data.kernel;
   if (Array.isArray(kernel)) {
     return new Set(kernel.map((x) => String(x)));
@@ -12696,7 +12894,7 @@ function kernel_ids(routerPath = ROUTER) {
   return /* @__PURE__ */ new Set();
 }
 function _router(routerPath = ROUTER) {
-  return JSON.parse(fs27.readFileSync(routerPath, "utf-8"));
+  return JSON.parse(fs28.readFileSync(routerPath, "utf-8"));
 }
 function path_only_ids(routerPath = ROUTER) {
   return pathOnlyRuleIds(_router(routerPath));
@@ -12705,7 +12903,7 @@ function no_trigger_ids(routerPath = ROUTER) {
   return new Set(triggerlessRuleIds(_router(routerPath)));
 }
 function rule_workspaces_map(routerPath = ROUTER) {
-  const data = JSON.parse(fs27.readFileSync(routerPath, "utf-8"));
+  const data = JSON.parse(fs28.readFileSync(routerPath, "utf-8"));
   const map = /* @__PURE__ */ new Map();
   for (const tier of ["tier_1", "tier_2"]) {
     const entries = data[tier];
@@ -12769,10 +12967,15 @@ function _trigger_hint(fm) {
 function _title(s) {
   return s.replace(/[A-Za-z]+/g, (w) => w.charAt(0).toUpperCase() + w.slice(1).toLowerCase());
 }
-var THIN_ENTRY_MARKER = "> Routed rule \u2014 load the body on trigger-match.";
+var THIN_ENTRY_MARKER = "> Load the body on a match.";
+var THIN_BODY_POINTER_PREFIX = "Body: ";
+var THIN_BODY_POINTER_RE = (() => {
+  const lit = THIN_BODY_POINTER_PREFIX.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return new RegExp(`${lit}((?:(?!${lit}).)+\\.md)\\s*$`, "m");
+})();
 var BODY_LINK_PREFIX = "../../dist/agent-src/rules/";
 function absoluteBodyLinkPrefix(packageRoot) {
-  return `${path26.join(path26.resolve(packageRoot), "dist", "agent-src", "rules")}${path26.sep}`;
+  return `${path27.join(path27.resolve(packageRoot), "dist", "agent-src", "rules")}${path27.sep}`;
 }
 function thin_entry(rule_id, text, bodyLinkPrefix = BODY_LINK_PREFIX) {
   const [fm] = split_frontmatter(text);
@@ -12781,7 +12984,7 @@ function thin_entry(rule_id, text, bodyLinkPrefix = BODY_LINK_PREFIX) {
   const title = _title(rule_id.replace(/-/g, " "));
   const fires = hint ? ` Fires on: ${hint}.` : "";
   return `## ${title}
-${THIN_ENTRY_MARKER}${fires} ${desc} Body: [\`${rule_id}\`](${bodyLinkPrefix}${rule_id}.md)
+${THIN_ENTRY_MARKER}${fires} ${desc} ${THIN_BODY_POINTER_PREFIX}${bodyLinkPrefix}${rule_id}.md
 `;
 }
 var STUB_LAW_OPEN = "<!-- law: byte-copied from the rule, sha256 ";
@@ -12819,7 +13022,7 @@ ${STUB_LAW_CLOSE}
 `;
 }
 function build_thin(rules_dir = RULES_SOURCE, scope = null, announce = null, consequenceClass = null, roots = null) {
-  const routerPath = roots?.routerPath ?? (roots?.packageRoot === void 0 ? ROUTER : path26.join(roots.packageRoot, "dist", "router.json"));
+  const routerPath = roots?.routerPath ?? (roots?.packageRoot === void 0 ? ROUTER : path27.join(roots.packageRoot, "dist", "router.json"));
   const classRoot = roots?.packageRoot ?? REPO_ROOT;
   const bodyLinkPrefix = roots?.bodyLinkPrefix ?? BODY_LINK_PREFIX;
   const kernel = kernel_ids(routerPath);
@@ -12830,43 +13033,43 @@ function build_thin(rules_dir = RULES_SOURCE, scope = null, announce = null, con
   const wsMap = scope !== null ? rule_workspaces_map(routerPath) : /* @__PURE__ */ new Map();
   const out = /* @__PURE__ */ new Map();
   for (const p of _globSortedMd(rules_dir)) {
-    const text = fs27.readFileSync(p, "utf-8");
-    const stem = path26.basename(p).replace(/\.md$/, "");
+    const text = fs28.readFileSync(p, "utf-8");
+    const stem = path27.basename(p).replace(/\.md$/, "");
     if (!id_in_scope(stem, scope, kernel, wsMap, fm_workspaces(text))) {
       continue;
     }
     const noStub = cls.no_stub[stem] !== void 0;
     const full = kernel.has(stem) || noTrigger.has(stem) || pathOnly.has(stem) || noStub;
     if (announce !== null && noTrigger.has(stem) && !kernel.has(stem)) {
-      announce(`D3: trigger-less auto rule ${path26.basename(p)} \u2014 kept full-bodied, never thinned`);
+      announce(`D3: trigger-less auto rule ${path27.basename(p)} \u2014 kept full-bodied, never thinned`);
     }
     if (announce !== null && pathOnly.has(stem) && !kernel.has(stem) && !noTrigger.has(stem)) {
       announce(
-        `E2: path-only auto rule ${path26.basename(p)} \u2014 kept full-bodied; its only triggers are path-shaped and the delivery concern is not bound on pre_tool_use`
+        `E2: path-only auto rule ${path27.basename(p)} \u2014 kept full-bodied; its only triggers are path-shaped and the delivery concern is not bound on pre_tool_use`
       );
     }
     if (full) {
-      out.set(path26.basename(p), text);
+      out.set(path27.basename(p), text);
       continue;
     }
     if (lawInStub.has(stem)) {
       if (announce !== null) {
         announce(
-          `LAW: high-consequence rule ${path26.basename(p)} \u2014 stub carries its own law section, byte-copied`
+          `LAW: high-consequence rule ${path27.basename(p)} \u2014 stub carries its own law section, byte-copied`
         );
       }
-      out.set(path26.basename(p), thin_entry_with_law(stem, text, bodyLinkPrefix));
+      out.set(path27.basename(p), thin_entry_with_law(stem, text, bodyLinkPrefix));
       continue;
     }
-    out.set(path26.basename(p), thin_entry(stem, text, bodyLinkPrefix));
+    out.set(path27.basename(p), thin_entry(stem, text, bodyLinkPrefix));
   }
   return out;
 }
 
 // src/install/installThinLayer.ts
 function thinInstalledRuleLayer(opts) {
-  const packageRoot = path27.resolve(opts.packageRoot);
-  const bodySourceDir = path27.join(packageRoot, "dist", "agent-src", "rules");
+  const packageRoot = path28.resolve(opts.packageRoot);
+  const bodySourceDir = path28.join(packageRoot, "dist", "agent-src", "rules");
   const bodyLinkPrefix = absoluteBodyLinkPrefix(packageRoot);
   const preserved = opts.preserved ?? /* @__PURE__ */ new Set();
   const stubs = build_thin(bodySourceDir, null, null, null, { packageRoot, bodyLinkPrefix });
@@ -12879,10 +13082,10 @@ function thinInstalledRuleLayer(opts) {
   const absent = [];
   const failed = [];
   for (const [name, stubText] of stubs) {
-    const target = path27.join(opts.rulesDir, name);
+    const target = path28.join(opts.rulesDir, name);
     let installed;
     try {
-      installed = fs28.readFileSync(target, "utf-8");
+      installed = fs29.readFileSync(target, "utf-8");
     } catch (e) {
       if (e.code === "ENOENT") absent.push(name);
       else failed.push({ rule: name, reason: String(e) });
@@ -12890,7 +13093,7 @@ function thinInstalledRuleLayer(opts) {
     }
     let sourceText;
     try {
-      sourceText = fs28.readFileSync(path27.join(bodySourceDir, name), "utf-8");
+      sourceText = fs29.readFileSync(path28.join(bodySourceDir, name), "utf-8");
     } catch {
       sourceText = null;
     }
@@ -12900,7 +13103,7 @@ function thinInstalledRuleLayer(opts) {
       charsAfter += installed.length;
       continue;
     }
-    if (preserved.has(path27.resolve(target))) {
+    if (preserved.has(path28.resolve(target))) {
       preservedHits.push(name);
       charsBefore += installed.length;
       charsAfter += installed.length;
@@ -12919,7 +13122,7 @@ function thinInstalledRuleLayer(opts) {
     const next = `${frontmatter}${stubText}`;
     try {
       if (next !== installed) {
-        fs28.writeFileSync(target, next, "utf-8");
+        fs29.writeFileSync(target, next, "utf-8");
         rewritten += 1;
       }
       thinned += 1;
@@ -12962,15 +13165,36 @@ function describeThinInstalledLayer(res) {
   }
   return out;
 }
-function installReceiptBudgetLines(packageRoot, home = os10.homedir()) {
+function installReceiptBudgetLines(packageRoot, home = os11.homedir(), opts = {}) {
   try {
-    const recorded = (() => {
-      try {
-        return readRecordedHashes(manifest_path(packageRoot), packageRoot);
-      } catch {
-        return NO_RECORDED_HASHES;
-      }
-    })();
+    const { recorded, sources } = resolveLayerOwnership({
+      manifestPath: opts.manifestPath === void 0 ? manifest_path(packageRoot) : opts.manifestPath,
+      projectRoot: packageRoot,
+      // The same home the layers below are read from — the inventory's
+      // anchor is tilde-relative, so the two must agree or the receipt
+      // measures one install and claims ownership of another.
+      home,
+      // THE RECEIPT IS THE "ASKING PROCESS" CASE, so it names no home
+      // here. It runs inside the install that WROTE the inventory, and
+      // that writer resolves the path through `inventory_path()` —
+      // honouring `AGENT_CONFIG_DEPLOY_INVENTORY`, which names a FILE
+      // rather than a home, and `EVENT4U_CONFIG_HOME`. Passing `home`
+      // would take `defaultInventoryPath`'s stated-home branch and read
+      // `<home>/.event4u/...`, a file nothing wrote under either
+      // override, and the inventory evidence would be silently lost.
+      // UNDEFINED IS LEFT UNDEFINED so `resolveLayerOwnership` applies
+      // `defaultInventoryPath(home)` — the SAME resolution the report
+      // uses. Hardcoding `inventory_path()` here made the two readers
+      // step 1.2 exists to reconcile disagree for any home that is not
+      // the asking process's: the receipt read one install's inventory
+      // and then expanded its tilde-relative anchors against the OTHER
+      // home, which is the cross-home misattribution two docstrings in
+      // the resolver forbid. `defaultInventoryPath` already returns
+      // `inventory_path()` when the stated home IS this process's, which
+      // is the case that motivated the hardcode.
+      inventoryPath: opts.inventoryPath,
+      thisDeploy: opts.thisDeploy
+    });
     const layers = [];
     for (const host of Object.keys(GLOBAL_RULE_DIRS).sort()) {
       const dir = globalRuleLayerPath(host, home);
@@ -12978,7 +13202,8 @@ function installReceiptBudgetLines(packageRoot, home = os10.homedir()) {
       layers.push(readLayer(host, "global", dir, recorded));
     }
     const rows = buildHostLimitRows(layers, loadHostInstructionLimits());
-    return rows.length === 0 ? [] : renderHostLimitRows(rows).map((l) => `  ${l}`);
+    if (rows.length === 0) return [];
+    return [`  ${ownershipLine(sources)}`, ...renderHostLimitRows(rows).map((l) => `  ${l}`)];
   } catch {
     return [];
   }
@@ -13025,7 +13250,7 @@ function resolveGlobalRuleScope(inputs) {
 }
 
 // src/scripts/_lib/lean_projection_mode.ts
-import * as path28 from "node:path";
+import * as path29 from "node:path";
 var DEFAULT_LEAN_PROJECTION_MODE = "eager-all";
 function normalizeLeanProjectionMode(raw) {
   const v = typeof raw === "string" ? raw.trim().toLowerCase() : "";
@@ -13073,8 +13298,8 @@ function thinsHost(mode, hosts, hostId) {
   return writesThinFiles(mode) && hosts.includes(hostId);
 }
 function resolveLeanProjection(opts = {}) {
-  const file = opts.settingsPath ?? path28.join(opts.projectRoot ?? process.cwd(), ".agent-settings.yml");
-  const tpl = opts.packageRoot == null ? null : path28.join(opts.packageRoot, "src", "config", "agent-settings.template.yml");
+  const file = opts.settingsPath ?? path29.join(opts.projectRoot ?? process.cwd(), ".agent-settings.yml");
+  const tpl = opts.packageRoot == null ? null : path29.join(opts.packageRoot, "src", "config", "agent-settings.template.yml");
   let lean;
   try {
     lean = load_agent_settings(
@@ -13099,9 +13324,9 @@ function resolveLeanProjection(opts = {}) {
     }
   };
 }
-var NO_TEMPLATE_LAYER = path28.join(path28.sep, "dev", "null", "agent-config-absent-template.yml");
+var NO_TEMPLATE_LAYER = path29.join(path29.sep, "dev", "null", "agent-config-absent-template.yml");
 function rawExplicitLeanProjectionMode(opts = {}) {
-  const file = opts.settingsPath ?? path28.join(opts.projectRoot ?? process.cwd(), ".agent-settings.yml");
+  const file = opts.settingsPath ?? path29.join(opts.projectRoot ?? process.cwd(), ".agent-settings.yml");
   let lean;
   try {
     lean = load_agent_settings({ project_path: file, template_path: NO_TEMPLATE_LAYER })["lean_projection"];
@@ -13119,8 +13344,8 @@ function installerThinsHost(hostId, opts = {}) {
   });
   return modeExplicit && thinsHost(mode, hosts.hosts, hostId);
 }
-var NO_PROJECT_LAYER = path28.join(
-  path28.sep,
+var NO_PROJECT_LAYER = path29.join(
+  path29.sep,
   "dev",
   "null",
   "agent-config-absent-project-settings.yml"
@@ -17302,22 +17527,19 @@ var profileId = external_exports.enum(["developer", "content_creator", "founder"
 var accessStyle = external_exports.enum(["getters_setters", "get_attribute", "magic_properties"]);
 var chatFreq = external_exports.enum(["per_turn", "per_phase", "per_tool"]);
 var qualityCadence = external_exports.enum(["end_of_roadmap", "per_phase", "per_step"]);
-var regenCadence = external_exports.enum(["per_step", "every_5_steps", "phase_boundary"]);
 var fidelityMode = external_exports.enum(["strict", "structural", "hard-floor"]);
-var crossSourceMode = external_exports.enum(["on", "auto", "off"]);
-var richSkillsMode = external_exports.enum(["on", "ask", "off"]);
 var replyMethod = external_exports.enum(["replies_endpoint", "create_review_comment", "auto"]);
 var confidenceBand = external_exports.enum(["off", "low", "medium", "high"]);
 var onBlock = external_exports.enum(["stop", "ask", "warn"]);
-var onBlockFallback = external_exports.enum(["stop", "warn"]);
 var modelAutoSwitch = external_exports.enum(["auto", "suggest", "off"]);
 var leanProjectionMode = external_exports.enum(["eager-all", "thin", "delivery"]);
 var leanProjectionHost = external_exports.enum(["claude-code", "cursor", "cline"]);
 var projectionMode = external_exports.enum(["legacy-all", "scoped"]);
-var memoryCadence = external_exports.enum(["auto", "always", "never"]);
 var projectAudience = external_exports.enum(["self", "internal", "client", "public"]);
 var deliveryMerge = external_exports.enum(["off", "on-green"]);
 var prTopology = external_exports.enum(["single", "stacked"]);
+var gitCommitFormat = external_exports.enum(["ticket-scope", "ticket-conventional"]);
+var gitUpdateStrategy = external_exports.enum(["merge", "rebase"]);
 var settingsSchema = external_exports.object({
   agent_config_version: external_exports.string().default("").describe(
     'Pin the package to an exact semver (e.g. "1.4.2") so all teammates load the same skill / rule set. Leave empty to track whatever is installed locally \u2014 useful for the maintainers of this package, risky for production projects.'
@@ -17394,18 +17616,9 @@ var settingsSchema = external_exports.object({
     rtk_installed: external_exports.boolean().default(false).describe(
       "Does this machine have rtk (Rust Token Killer, a third-party Apache-2.0 tool: https://github.com/rtk-ai/rtk) on PATH \u2014 verified as the real Token Killer, not the unrelated Rust Type Kit that shares the binary name? When true the agent wraps verbose CLI output (git, tests, linters, docker, npm, composer) with rtk (upstream reports 60-90% token savings \u2014 their estimate). Leave false if rtk is missing \u2014 the agent falls back to tail / grep. The wizard overwrites this from a live two-stage probe (PATH presence + `rtk gain` identity check)."
     ),
-    minimal_output: external_exports.boolean().default(true).describe(
-      "Prefer short bullets and tables (true, default) vs verbose prose with rationale (false). Affects every chat reply; flip to false during debugging when you want the agent to think out loud."
-    ),
     canary_name: external_exports.string().default("").describe(
       'Session canary \u2014 the name the agent addresses you with at the start of every new task (e.g. "Alex"). When the greeting silently disappears, the context window is degrading: start a fresh conversation. Also keeps the reply-close markers (end-summary, PR URL as literal last line) alive. Empty = fall back to the user-global canary_name, then to identity.name from the setup wizard; no name anywhere = off. See rules/session-canary.md.'
     ),
-    play_by_play: external_exports.boolean().default(false).describe(
-      `Narrate intermediate findings between tool calls ("Found it.", "Let me check Y."). Off by default \u2014 most users find it noisy. Turn on when you want to follow the agent's reasoning step by step.`
-    ),
-    pr_comment_bot_icon: external_exports.boolean().default(false).describe(
-      "Prefix every PR review-comment reply with \u{1F916} so humans can tell agent-authored comments apart from teammate comments at a glance. Cosmetic only; the comment body itself never changes."
-    ),
     pr_progress_comments: external_exports.boolean().default(false).describe(
       'Permit the agent to post unsolicited progress / status comments on an open PR (e.g. "CI fix iteration #2", "still blocked on workflow scope"). Default off \u2014 most teammates find them noisy. User-invoked flows (/fix:pr-comments, /create-pr, /code-review, explicit "post a comment that \u2026") are NOT gated by this setting. See rules/no-pr-progress-comments.md.'
     ),
@@ -17417,9 +17630,6 @@ var settingsSchema = external_exports.object({
     )
   }),
   project: external_exports.object({
-    pr_template: external_exports.string().default(".github/pull_request_template.md").describe(
-      "Path (relative to project root) to the PR-description template the agent fills in before opening a pull request. Override only if your repo keeps the template somewhere non-standard."
-    ),
     upstream_repo: external_exports.string().default("").describe(
       "GitHub slug (owner/repo) the upstream-contribute skill targets when you ask the agent to push a learning back to the shared agent-config package. Empty = improvement PRs are disabled."
     ),
@@ -17430,6 +17640,17 @@ var settingsSchema = external_exports.object({
       'Who this project is built for \u2014 read by the demand gate (\xA7 8-pre of docs/guidelines/agent-infra/agent-interaction-and-decision-quality.md), whose L0-L4 ladder measures MARKET demand and is meaningless where no market is intended. self = a tool its maintainer builds for themselves; the gate is inert and work is classified L-self (build) instead of being deferred for lack of a user population nobody wants. internal = a team tool; only "what breaks without it?" survives. client = built for a named client, who is the requester rather than a market segment. public (default) = a product with an intended market; full three-question gate, behaviour unchanged from before this key existed.'
     )
   }),
+  git: external_exports.object({
+    commit_format: gitCommitFormat.default("ticket-scope").describe(
+      "Where a ticket id goes in a commit subject. ticket-scope (default) = the ticket is the Conventional-Commits scope, `feat(DEV-1234): add export filter` \u2014 the behaviour every install had before this key existed. ticket-conventional = the ticket leads the subject and the scope names the system area, `DEV-1234 feat(exporter): add export filter`; a ticket is then never a scope. Without a ticket both shapes are plain Conventional Commits. A commit-linting config in the repository (commitlint, a commit-msg hook) outranks this key."
+    ),
+    branch_pattern: external_exports.string().default("{type}/{slug}").describe(
+      "Shape of a branch name the agent creates. Placeholders: {type} (feat, fix, \u2026), {ticket} (e.g. DEV-1234), {slug} (short kebab-case description). Default {type}/{slug}. {slug} is required, and characters outside the placeholders are limited to A-Z a-z 0-9 . _ / - so a rendered name is safe in a command; agent-config git:convention show reports anything else as invalid. A team that names branches after the ticket sets {ticket}-{slug}. A placeholder with no value is dropped together with the separator that follows it, or the one before it when it is last, so no name starts or ends with a separator ({type}/{ticket}-{slug} without a ticket gives feat/slug). Reading a ticket back out of an existing branch never depends on this pattern."
+    ),
+    update_strategy: gitUpdateStrategy.default("merge").describe(
+      "How a feature branch is brought up to date with its base. merge (default) = merge the base into the branch, as before this key existed. rebase = rebase the branch onto origin/<base> and publish with --force-with-lease, never a merge of the base into the branch. Rebase rewrites history, so the agent still asks for it unless the git-history-discipline rule already authorises the rewrite (the user asked this turn, an unrevoked standing instruction, or a pull --rebase the user started); this key decides which operation is proposed, never whether one is authorised."
+    )
+  }).default({}),
   github: external_exports.object({
     pr_reply_method: replyMethod.default("create_review_comment").describe(
       "How the agent replies to PR review comments. create_review_comment = post a new review comment (works on every GitHub plan). replies_endpoint = thread the reply under the original comment (needs the newer REST endpoint). auto = detect at runtime, prefer threaded replies when available."
@@ -17509,32 +17730,29 @@ var settingsSchema = external_exports.object({
       )
     })
   }),
-  pipelines: external_exports.object({
-    skill_improvement: external_exports.boolean().default(true).describe(
-      "After a meaningful task the agent proposes a learning-capture turn (new skill, rule tweak, guideline). Turn off if you find the prompts noisy \u2014 you can still run /memory:promote manually."
-    )
-  }),
   roadmap: external_exports.object({
-    skip_pre_run_gate: external_exports.boolean().default(true).describe(
-      'Skip the /roadmap:process-* pre-run confirmation gate. true (default) starts processing immediately and surfaces the resolved config inline; false shows the numbered-options gate and waits. A genuine "which roadmap?" ambiguity always prompts regardless.'
-    ),
     quality_cadence: qualityCadence.default("per_phase").describe(
       "When the agent runs the full quality / test suite during /roadmap:process-* runs. per_phase = after each phase boundary (default since 2026-09-13 \u2014 end_of_roadmap lets errors compound across phases, which is expensive in a multi-phase autonomous run nobody is watching). end_of_roadmap = once, after the last step (fastest). per_step = after every single step (slowest, highest confidence)."
     ),
-    dashboard_regen_cadence: regenCadence.default("every_5_steps").describe(
-      "How often the agent regenerates agents/roadmaps/dashboard.md during a roadmap run. every_5_steps = batch the regen (default). per_step = after every step (freshest dashboard, highest subprocess overhead). phase_boundary = only at phase edges. A rename, phase add, or archive always regenerates immediately regardless."
-    ),
     horizon_weeks: external_exports.number().int().min(0).default(0).describe(
       'Optional planning horizon (weeks) the agent shows in roadmap framing ("next 4 weeks"). Set 0 to omit the horizon \u2014 most teams prefer to ship without a hardcoded window.'
     ),
     gate_budget: external_exports.object({
-      max_cost_per_run_usd: external_exports.number().min(0).default(5).describe(
-        "Per-run USD ceiling for a CLASS-1 roadmap blocker executed via `agent-config gates --execute`. A class-1 entry whose **Budget:** field states a larger figure renders its consent line instead of running. Bounds the size of an authorised spend; never supplies the authorisation \u2014 `--confirm` is still required on every class-1 run."
+      // `.min(0)` is kept deliberately, at a known cost: the settings-
+      // reference generator renders a constrained nullable number as
+      // type `unknown` rather than `number,null` (it reads `node.type`,
+      // which a constrained nullable emits as an `anyOf` instead).
+      // Eight keys already render that way. Dropping the constraint
+      // would buy a nicer doc cell by letting a negative USD ceiling
+      // into the schema, and a cap that refuses everything is a worse
+      // outcome than an uninformative table cell.
+      max_cost_per_run_usd: external_exports.number().min(0).nullable().default(null).describe(
+        "Per-run USD ceiling for a CLASS-1 roadmap blocker executed via `agent-config gates --execute`. A class-1 entry whose **Budget:** field states a larger figure renders its consent line instead of running. null (default) = no per-run ceiling, per ADR-279: a spend bound applies only where one was set, and the absence of a bound is not a refusal. Bounds the size of an authorised spend; never supplies the authorisation \u2014 `--confirm` is still required on every class-1 run, set or unset."
       ),
-      max_cost_per_rolling_7d_usd: external_exports.number().min(0).default(25).describe(
-        "Rolling 7-day USD ceiling for class-1 gate execution, summed from the append-only receipt ledger at agents/runtime/state/gate-budget-ledger.jsonl. A run whose estimate would cross it renders instead of running. A per-run cap alone bounds one mistake, not a week of them, which is why option (a) of b-gate-budget-preauth carries two numbers."
+      max_cost_per_rolling_7d_usd: external_exports.number().min(0).nullable().default(null).describe(
+        "Rolling 7-day USD ceiling for class-1 gate execution, summed from the append-only receipt ledger at agents/runtime/state/gate-budget-ledger.jsonl. A run whose estimate would cross it renders instead of running. null (default) = no rolling ceiling, per ADR-279. A per-run cap alone bounds one mistake, not a week of them, which is why option (a) of b-gate-budget-preauth carries two numbers \u2014 but each cap now bounds on its own, so setting one and leaving the other null is supported."
       )
-    }).default({ max_cost_per_run_usd: 5, max_cost_per_rolling_7d_usd: 25 })
+    }).default({ max_cost_per_run_usd: null, max_cost_per_rolling_7d_usd: null })
   }),
   planning: external_exports.object({
     closure_pass: external_exports.boolean().default(true).describe(
@@ -17589,11 +17807,6 @@ var settingsSchema = external_exports.object({
       "Extra project-relative paths where THIS project keeps a code-graph index another tool wrote. The built-in list is deliberately vendor-neutral (graph.json, code-graph.json, .code-graph/graph.json) and names no tool, so a tool that writes its index elsewhere is named here rather than waited for. A graph found this way LOADS and answers query and explain with every edge tagged read-from-elsewhere; the gate verbs (impact, untested, dead) refuse a graph made only of such edges and say so, because an empty answer from a gate must not read as 'nothing found' when it means 'nothing trusted'. Absolute paths and paths escaping the project root are ignored."
     )
   }).default({}),
-  consistency: external_exports.object({
-    cross_source: crossSourceMode.default("on").describe(
-      "Consumed by the cross-source-consistency rule. When the agent works from multiple sources (ticket text, an attached image/mockup, the spec, the codebase) it checks them against each other and asks before proceeding on a discrepancy \u2014 instead of silently guessing. on (default) = surface every real cross-source contradiction / silent-scope-expansion as one question; auto = surface only high-confidence contradictions, state low-confidence as an assumption; off = no cross-source checking."
-    )
-  }).default({ cross_source: "on" }),
   screenshots: external_exports.object({
     identity_allowlist: external_exports.array(external_exports.string()).default([]).describe(
       "Consumed by the doc-screenshot-hygiene rule and screenshot-hygiene skill. Public identity tokens SAFE to show unredacted in a documentation screenshot \u2014 the maintainer's own public handles plus well-known fake-data tokens. Not a general fake-data dictionary and not identity-resolution: everything not listed is treated as sensitive by default, and a public handle co-located with a real name does not whitelist the real name. Default [] = nothing auto-allowed."
@@ -17605,39 +17818,11 @@ var settingsSchema = external_exports.object({
       "Consumed by the doc-screenshot-hygiene rule. on (default) = a data-bearing screenshot embed is gated behind this-turn human confirmation; uncertain/unresolved regions redact-or-refuse, never ship-and-hope; illustrative/no-data screenshots may embed with a stated justification. off = no data-bearing gate (the anonymization taxonomy still applies)."
     )
   }).default({ identity_allowlist: [], forbid_terminal_capture: true, data_bearing_gate: "on" }),
-  telegraph: external_exports.object({
-    speak: external_exports.boolean().default(false).describe(
-      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This is the only lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
-    )
-  }).default({ speak: false }),
-  tokens: external_exports.object({
-    rich_skills: richSkillsMode.default("on").describe(
-      "Whether skills marked token_budget_class: rich may load in full (exempt from telegraph-speak + thin-projector trimming), consumed by the token-budget-discipline rule. on = allowed (default); off = fall back to standard condensed behavior; ask = surface an estimated token delta (tokens, not dollars) and ask once per session before loading."
-    )
-  }).default({ rich_skills: "on" }),
   verbosity: external_exports.object({
-    intent_announcements: external_exports.boolean().default(false).describe(
-      'Intent narration before tool batches ("Let me check X\u2026"). Only honored when personal.play_by_play is ALSO true (the direct-answers narration carve-out requires both). false (default) = act and emit the result.'
-    ),
-    preview_artifacts: external_exports.boolean().default(false).describe(
-      "Show generated commit messages, PR titles/bodies, branch names before acting. false (default) = use generated content directly (/commit terse path)."
-    ),
-    routine_confirmations: external_exports.boolean().default(false).describe(
-      "Confirmation prompts for routine workflow steps with one obvious answer. Iron-Law gates (commit-policy, scope-control git-ops, Hard Floor) ALWAYS ask regardless."
-    ),
     offer_council_in_delivery: external_exports.boolean().default(false).describe(
       'Offer "run AI Council on this?" inside delivery commands (/feature-plan, /review-changes, /roadmap-create). Council commands themselves are unaffected.'
-    ),
-    post_action_reports: external_exports.enum(["off", "minimal", "full"]).default("minimal").describe(
-      "Status blocks after a successful action. off = errors only; minimal (default) = one-line confirmation; full = bullet list."
     )
-  }).default({
-    intent_announcements: false,
-    preview_artifacts: false,
-    routine_confirmations: false,
-    offer_council_in_delivery: false,
-    post_action_reports: "minimal"
-  }),
+  }).default({ offer_council_in_delivery: false }),
   code_style: external_exports.object({
     docblocks: external_exports.enum(["minimal", "full"]).default("minimal").describe(
       "Consumed by the code-comment-discipline rule. minimal (default) = no signature-mirroring docblocks; docblocks only for machine-relevant precision (generics, array shapes) or genuine why-context. full = the exported public surface of a library package may carry one-line summary docblocks; the redundancy ban still holds."
@@ -17646,44 +17831,9 @@ var settingsSchema = external_exports.object({
   reasoning: external_exports.object({
     enabled: external_exports.boolean().default(true).describe(
       "Master switch for the Reasoning Discipline Protocol (RDP). false = the whole layer is inert (zero overhead)."
-    ),
-    auto_gate: external_exports.boolean().default(true).describe(
-      "Engage the discipline only where it pays, using table-free signals (task triviality + agent-self-assessed host reasoning strength; no runtime model->band lookup, per ADR-035). false = gate on task-signal + the component toggles only."
-    ),
-    components: external_exports.object({
-      orchestrator: external_exports.boolean().default(true).describe(
-        "Sequence the reasoning chain (ground->intent->notes->gather->audit->verify) as one system; the single coordination point."
-      ),
-      notes_first: external_exports.boolean().default(true).describe(
-        "Keep hypotheses/predictions/decisions in session notes; the response carries conclusions + evidence only."
-      ),
-      grounding: external_exports.boolean().default(true).describe(
-        "Explore the environment / close info-gaps before designing."
-      ),
-      intent: external_exports.boolean().default(true).describe(
-        "Infer the underlying goal before solving the literal ask (standard host only)."
-      ),
-      complexity_first: external_exports.boolean().default(true).describe(
-        "Risk-first: resolve the load-bearing unknown before the easy parts (RDP derivation, not a Fable-documented behavior)."
-      ),
-      verifier_default: external_exports.boolean().default(true).describe(
-        "Run a fresh-context verifier on the structural-complexity gate (branching/constraints/stateful/irreversible + token floor)."
-      ),
-      prediction_tracking: external_exports.boolean().default(true).describe(
-        "Log prediction + confidence + outcome + lesson (calibration loop)."
-      ),
-      decision_ledger: external_exports.boolean().default(true).describe(
-        "Log decision + alternatives + reason + revisit-if; escalates to decision-record/ADR when durable."
-      ),
-      uncertainty_budget: external_exports.boolean().default(true).describe(
-        "Per-dimension uncertainty score that feeds adaptive effort."
-      )
-    }).default({})
+    )
   }).default({}),
   subagents: external_exports.object({
-    downshift: external_exports.boolean().default(true).describe(
-      "Route delegable sub-tasks to the lowest-capable model tier (cost + speed via model downshift). false = every subagent runs on the session tier."
-    ),
     quota_arbitrage: external_exports.boolean().default(true).describe(
       "Prefer a separate quota-pool model for delegable sub-tasks where the host manifest reports one. Optional bonus only \u2014 identical behaviour (minus the quota win) where unsupported. Never load-bearing."
     ),
@@ -17704,7 +17854,7 @@ var settingsSchema = external_exports.object({
       "Session-wide model CEILING for subagents (spend cap). Empty (default) = no ceiling. When set, suite-owned CLI spawn wrappers export CLAUDE_CODE_SUBAGENT_MODEL to the sessions they launch. Class C: a human sets it; the agent never writes or infers one."
     ),
     max_parallel: external_exports.number().int().min(1).default(3).describe(
-      "Hard cap on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
+      "Limit on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs \u2014 a value the model reads from settings; no code counts spawns against it. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
     ),
     adversarial_council: external_exports.enum(["off", "ask", "on"]).default("off").describe(
       "Opt-in adversarial-verification-council mode (subagent-orchestration Mode 9, ADR-122). off (default) = never runs; ask = offer it on an explicit high-risk change; on = auto-run on high-risk changes. Advisory only \u2014 a panel of distinct-model skeptics red-teams a real change for defect FINDING coverage and NEVER auto-gates it (Hard Floor). Stays default-off until the adversarial-council-finding-coverage claim is backed."
@@ -17723,9 +17873,6 @@ var settingsSchema = external_exports.object({
     max_calls_per_day: external_exports.number().int().min(0).default(50).describe(
       "Per-day cap on team calls, read against the EXISTING cli_call_budget openai bucket (~/.event4u/agent-config/cli-calls.json, daily UTC reset) \u2014 one subscription, one counter, never a parallel count. 0 = block all team calls."
     ),
-    suppress_setup_hint: external_exports.boolean().default(false).describe(
-      "Suppress the one-line wizard/init recommendation to set up the codex plugin on Claude-Code hosts. Cosmetic only \u2014 never changes behavior."
-    ),
     review_gate: external_exports.object({
       managed: external_exports.boolean().default(false).describe(
         "Managed governance of the codex plugin's Stop-hook Review Gate (road-to-team-mode Phase 4). false (default) = byte-identical pre-Phase-4 behavior: no counting, no circuit breaker. true = count consecutive BLOCK verdicts per session and trip the circuit breaker at max_consecutive_blocks."
@@ -17734,7 +17881,7 @@ var settingsSchema = external_exports.object({
         "Circuit-breaker bound: after this many CONSECUTIVE BLOCK verdicts in one session, a visible notice is injected exactly once and the managed layer stops re-blocking \u2014 the user decides, never an infinite Claude\u2194Codex loop. An ALLOW verdict resets the counter. Positive integer."
       )
     }).default({ managed: false, max_consecutive_blocks: 3 })
-  }).default({ model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
+  }).default({ model: "auto", allow_delegate: false, max_calls_per_day: 50, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
   emergency: external_exports.object({
     orchestration_halt: external_exports.boolean().default(false).describe(
       "The one audited incident switch over the always-on orchestration stack (subagents, council, team). NOT an activation gate: false (default) = the stack runs normally. true = halted; arming requires no ceremony. Disarming (returning to false) requires orchestration_halt_justification to be a non-empty string. Both transitions emit one telemetry line."
@@ -17749,22 +17896,7 @@ var settingsSchema = external_exports.object({
     )
   }),
   commands: external_exports.object({
-    auto_detect: external_exports.enum(["enabled", "warn", "disabled"]).default("enabled").describe(
-      "Global kill-switch for orchestrator auto-detection (6.1.0 non-interactive-contract). enabled (default) = /judge, /fix, /analytics, /tests, /override auto-detect their sub-command per a confidence-tiered table; warn = detect but always confirm before routing; disabled = never auto-detect (always show the menu interactively, require an explicit sub-command in CI). Per-orchestrator override: auto_detect:false in front-matter. Per-invocation: --no-auto-detect."
-    ),
     suggestion: external_exports.object({
-      enabled: external_exports.boolean().default(true).describe(
-        'Master switch for the slash-command suggestion layer. When on, the agent offers numbered options ("did you mean /commit?") instead of guessing. Turn off if you prefer to type every command yourself.'
-      ),
-      confidence_floor: external_exports.number().min(0).max(1).default(0.6).describe(
-        "Minimum semantic-match score (0.0\u20131.0) before a command is offered as a suggestion. 0.6 (default) balances precision and recall. Raise toward 0.8 for fewer false positives, lower for broader hints."
-      ),
-      cooldown_seconds: external_exports.number().int().min(0).default(600).describe(
-        "How long (seconds) the suggester waits before offering the same command again after you ignored it. Default 600s (10 min) keeps the agent from nagging. Set 0 to disable the cooldown."
-      ),
-      max_options: external_exports.number().int().min(0).default(4).describe(
-        'Maximum number of command suggestions shown in a single numbered-options block, before the "Proceed as-is" escape. Lower for terser prompts, raise if you regularly want broader fan-out.'
-      ),
       blocklist: external_exports.array(external_exports.string()).default([]).describe(
         'Slash-command names that should never be suggested, one per line (e.g. "commit", "create-pr"). Useful if a command misfires on your common phrasing.'
       )
@@ -17776,17 +17908,8 @@ var settingsSchema = external_exports.object({
       detail_level: external_exports.enum(["min", "med", "max"]).default("min").describe(
         "Verbosity tier for the generated PR description body. min (default) = title + 2-3 sentence what/why/impact + linked ticket (token-frugal); med = min + grouped changes + tests note; max = med + how-to-test + edge cases + reviewer guidance. Critical info (breaking changes, migrations, security, rollback) is ALWAYS included at every tier \u2014 the tier governs explanatory depth, never whether a critical callout appears."
       ),
-      api_examples: external_exports.boolean().default(true).describe(
-        "JSON request/response examples for API-endpoint changes. true (default) = include a fenced example ONLY when grounded in a real source (response DTO/resource, OpenAPI/schema, test fixture, or an actual probe); no grounded source \u2192 a one-line pointer, never an invented example. false = never add API examples."
-      ),
       screenshots: external_exports.boolean().default(false).describe(
         "Screenshots for frontend changes. false (default) = never attempt. true = attempt when the host has browser/preview tooling and the diff touches a frontend surface; capability-gated (emits a one-line note and leaves the placeholder when tooling is absent, never fails or blocks the PR). Before/after + changed-region highlighting is best-effort."
-      ),
-      ui_paths: external_exports.array(external_exports.string()).default([]).describe(
-        'Optional glob list that makes frontend detection explicit instead of heuristic (e.g. ["resources/views/**", "src/pages/**"]). Empty (default) = a light path/extension heuristic that fails open (no false enrichment when the surface is ambiguous).'
-      ),
-      api_paths: external_exports.array(external_exports.string()).default([]).describe(
-        'Optional glob list that makes API-endpoint detection explicit instead of heuristic (e.g. ["app/Http/Controllers/Api/**", "src/pages/api/**"]). Empty (default) = a light path/extension heuristic that fails open.'
       )
     })
   }),
@@ -17799,12 +17922,6 @@ var settingsSchema = external_exports.object({
     )
   }),
   memory: external_exports.object({
-    cadence: memoryCadence.default("always").describe(
-      "Cadence of the \u{1F9E0} memory-visibility line after a memory-consulting step. always (default) = show whenever a memory type was asked; auto = show only when 3+ types were consulted (less noise); never = suppress. Distinct from rule_loading_tier \u2014 owns its own key since the 2026-06-01 untangle."
-    ),
-    review_threshold: external_exports.number().int().min(0).default(10).describe(
-      "Maximum number of memory entries /memory:load surfaces inline before falling back to a summary view. Default 10 keeps the chat readable. Raise to see more candidates, lower to keep the context tight."
-    ),
     redact_patterns: external_exports.array(external_exports.string()).default([]).describe(
       "Regex patterns (one per line) that scrub matches from chat-history transcripts and memory before they hit disk. Use for secrets, customer names, internal URLs. Patterns are anchored and case-insensitive."
     ),
@@ -17822,38 +17939,13 @@ var settingsSchema = external_exports.object({
       ),
       allowed_tiers: external_exports.array(external_exports.string()).default(["public"]).describe(
         "Origin tiers auto-eligible to cross a project boundary. proprietary is manual-only regardless (the gate hard-codes it), so an in-house schema never auto-shares."
-      ),
-      redaction: external_exports.object({
-        enabled: external_exports.boolean().default(true).describe(
-          "Run the privacy-floor + source-confidentiality scan before any card goes global."
-        ),
-        halt_on_trigger: external_exports.boolean().default(true).describe(
-          "Halt-and-surface on a confidential-pattern hit; never silent-share, never auto-rewrite."
-        )
-      }).default({}),
-      auto_promote_threshold: external_exports.number().int().min(1).default(2).describe(
-        "Distinct-repo count at which a public/vendor card triggers a promotion suggestion (never a silent write)."
-      ),
-      freshness: external_exports.object({
-        hypothesis_after_days: external_exports.number().int().min(0).default(90).describe(
-          "A global card older than this is lead-only (positive structure must be re-confirmed before use)."
-        ),
-        stale_after_days: external_exports.number().int().min(0).default(180).describe(
-          "A global card older than this is skipped until re-verified."
-        )
-      }).default({})
+      )
     }).default({})
   }).default({}),
   hooks: external_exports.object({
     concern_budget: external_exports.object({
-      max_per_event: external_exports.number().int().min(1).default(8).describe(
-        "Maximum number of concerns (issues / warnings) a single hook may raise per (platform, event) pair before the hook is rate-limited. Default 8 prevents noisy hooks from drowning out high-signal ones."
-      ),
       tier1_concerns: external_exports.array(external_exports.string()).default([]).describe(
         "Concern IDs (one per line) that are allowed to block the run on failure rather than warn. Reserved for high-confidence guards \u2014 leave empty unless you maintain custom hooks."
-      ),
-      hard_fail: external_exports.boolean().default(false).describe(
-        "When a hook exceeds hooks.concern_budget.max_per_event, fail the run (true) instead of warning and continuing (false, default). Turn on in CI when you want hook quality to gate merges."
       )
     }),
     verify_before_complete: external_exports.object({
@@ -17906,12 +17998,9 @@ var settingsSchema = external_exports.object({
     // fires is decided by each detector's own trigger conditions, not by a
     // flag. A leftover `hooks.turn_end_gate.*` block from an older install
     // warns once on stderr and is ignored — see REMOVED_KEYS in
-    // `src/scripts/_lib/agent_settings.ts`.
+    // `src/scripts/_lib/settings_removed_keys.ts`.
   }),
   decision_engine: external_exports.object({
-    surface_traces: external_exports.boolean().default(false).describe(
-      "Emit DecisionTraceHook events that surface why the agent picked one option over another. Useful when debugging unexpected choices; off by default to keep chat noise low."
-    ),
     min_confidence: confidenceBand.default("off").describe(
       "During Phase=Plan, refuse to advance to Phase=Implement if confidence is below this band. off (default) = no gate. low / medium / high = raise the floor; on miss, decision_engine.on_block decides what happens."
     ),
@@ -17925,10 +18014,7 @@ var settingsSchema = external_exports.object({
       "What the decision engine does when a gate (min_confidence / block_on_risk / require_memory_hits) fires. stop (default) = halt and surface the reason. ask = present numbered options. warn = log and continue."
     ),
     ask_timeout_seconds: external_exports.number().int().min(0).default(30).describe(
-      "Non-TTY timeout (seconds) for decision_engine.on_block = ask. After this elapses without input, decision_engine.on_block_fallback takes over. Default 30s; raise for slow human review, 0 = wait forever."
-    ),
-    on_block_fallback: onBlockFallback.default("stop").describe(
-      "Resolution when decision_engine.on_block = ask times out (see decision_engine.ask_timeout_seconds). stop (default) = halt the run. warn = log and continue with the agent's best guess."
+      "Non-TTY timeout (seconds) for decision_engine.on_block = ask. After this elapses without input, the engine stops (fail-safe). Default 30s; raise for slow human review, 0 = wait forever."
     )
   }),
   update_check: external_exports.object({
@@ -17936,11 +18022,6 @@ var settingsSchema = external_exports.object({
       "Once per day the agent checks the npm registry for a newer agent-config release and surfaces a one-line banner if one exists. Turn off in air-gapped environments or to silence the banner."
     )
   }),
-  explain: external_exports.object({
-    enable_last: external_exports.boolean().default(true).describe(
-      "Enable the `agent-config explain last` command, which prints the reasoning behind the agent's most recent decision (last tool call, last suggestion). Disable if you never use it and want a smaller CLI surface."
-    )
-  }),
   legal_review_prep: external_exports.object({
     acknowledged: external_exports.boolean().default(false).describe(
       "I understand the legal-review-prep pack provides templates and general information ONLY \u2014 it is NOT legal advice, creates no attorney-client relationship, and never replaces a licensed lawyer. Individual cases require an attorney. The pack stays inactive until this is checked."
@@ -19236,8 +19317,8 @@ var zodToJsonSchema = (schema, options) => {
 };
 
 // src/scripts/_lib/module_detection.ts
-import * as fs29 from "node:fs";
-import * as path29 from "node:path";
+import * as fs30 from "node:fs";
+import * as path30 from "node:path";
 var _SKIP_DIRS = /* @__PURE__ */ new Set([".module-template", ".example"]);
 var _RULES = [
   ["app/Modules", "laravel-hmvc", "App\\Modules\\{ModuleName}"],
@@ -19251,14 +19332,14 @@ var _RULES = [
 ];
 function _isDir2(p) {
   try {
-    return fs29.statSync(p).isDirectory();
+    return fs30.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function _isFile2(p) {
   try {
-    return fs29.statSync(p).isFile();
+    return fs30.statSync(p).isFile();
   } catch {
     return false;
   }
@@ -19272,13 +19353,13 @@ function _isUpperChar(ch) {
 function _list_module_subdirs(root) {
   let entries;
   try {
-    entries = fs29.readdirSync(root).sort();
+    entries = fs30.readdirSync(root).sort();
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
-    if (!_isDir2(path29.join(root, name))) {
+    if (!_isDir2(path30.join(root, name))) {
       continue;
     }
     if (name.startsWith(".")) {
@@ -19300,11 +19381,11 @@ function _score_confidence(stack, root, subdirs) {
     return capitalized.length > 0 ? "high" : "medium";
   }
   if (stack === "node-monorepo") {
-    const withPkgJson = subdirs.filter((name) => _isFile2(path29.join(root, name, "package.json")));
+    const withPkgJson = subdirs.filter((name) => _isFile2(path30.join(root, name, "package.json")));
     return withPkgJson.length > 0 ? "high" : "medium";
   }
   if (stack === "python-src") {
-    const withInit = subdirs.filter((name) => _isFile2(path29.join(root, name, "__init__.py")));
+    const withInit = subdirs.filter((name) => _isFile2(path30.join(root, name, "__init__.py")));
     return withInit.length > 0 ? "high" : "medium";
   }
   if (stack === "go-internal") {
@@ -19316,7 +19397,7 @@ function detect_module_roots(project_root) {
   const high = [];
   const medium = [];
   for (const [rel_path, stack, namespace_template] of _RULES) {
-    const abs_path = path29.join(project_root, rel_path);
+    const abs_path = path30.join(project_root, rel_path);
     if (!_isDir2(abs_path)) {
       continue;
     }
@@ -19338,7 +19419,7 @@ function detect_module_roots(project_root) {
 }
 
 // src/scripts/_lib/model_tier.ts
-import fs30 from "node:fs";
+import fs31 from "node:fs";
 var TIER_TO_CLAUDE_MODEL = {
   frontier: "fable",
   high: "opus",
@@ -19347,8 +19428,8 @@ var TIER_TO_CLAUDE_MODEL = {
 };
 var MODEL_TIER_RE = /^model_tier:\s*"?([a-z]+)"?\s*$/m;
 function read_model_tier(skill_md) {
-  if (!fs30.existsSync(skill_md)) return null;
-  const text = fs30.readFileSync(skill_md).toString("utf-8");
+  if (!fs31.existsSync(skill_md)) return null;
+  const text = fs31.readFileSync(skill_md).toString("utf-8");
   if (!text.startsWith("---\n")) return null;
   const end = text.indexOf("\n---\n", 4);
   if (end === -1) return null;
@@ -19368,39 +19449,7 @@ import { spawnSync } from "node:child_process";
 import * as fs32 from "node:fs";
 import * as path31 from "node:path";
 import process3 from "node:process";
-import { fileURLToPath as fileURLToPath8, pathToFileURL } from "node:url";
-
-// src/scripts/_lib/package_root.ts
-import * as fs31 from "node:fs";
-import * as path30 from "node:path";
-import { fileURLToPath as fileURLToPath7 } from "node:url";
-var PACKAGE_NAME = "@event4u/agent-config";
-var MAX_ASCENT = 16;
-function resolvePackageRoot(fromUrlOrPath, legacyHops = 3) {
-  const start = fromUrlOrPath.startsWith("file:") ? fileURLToPath7(fromUrlOrPath) : fromUrlOrPath;
-  const startDir = path30.dirname(start);
-  let dir = startDir;
-  for (let i = 0; i < MAX_ASCENT; i++) {
-    const manifest = path30.join(dir, "package.json");
-    if (fs31.existsSync(manifest)) {
-      try {
-        const parsed = JSON.parse(fs31.readFileSync(manifest, "utf8"));
-        if (parsed.name === PACKAGE_NAME) {
-          return dir;
-        }
-      } catch {
-      }
-    }
-    const parent = path30.dirname(dir);
-    if (parent === dir) {
-      break;
-    }
-    dir = parent;
-  }
-  return path30.resolve(startDir, ...Array.from({ length: legacyHops }, () => ".."));
-}
-
-// src/scripts/_cli/cmd_migrate.ts
+import { fileURLToPath as fileURLToPath7, pathToFileURL } from "node:url";
 var PACKAGE_NAME_NPM = "@event4u/agent-config";
 var PACKAGE_NAME_COMPOSER = "event4u/agent-config";
 var LEGACY_DIRS = ["vendor", "node_modules"];
@@ -19418,7 +19467,7 @@ var LEGACY_SETTINGS_FILES = [".agent-settings.yml", ".agent-user.yml"];
 var LEGACY_STATE_FILENAME = ".implement-ticket-state.json";
 var LEGACY_STATE_V1_FILENAME = ".work-state.json";
 var LEGACY_AGENT_CONFIG_SHELL = "agent-config";
-var _HERE_DIR = path31.dirname(fileURLToPath8(import.meta.url));
+var _HERE_DIR = path31.dirname(fileURLToPath7(import.meta.url));
 var ArgparseExit = class extends Error {
   code;
   constructor(code) {
@@ -20070,7 +20119,7 @@ function main(argv = null, options = {}) {
   return _apply(project, out, err);
 }
 var _inForeignBundle = !(typeof __AGENT_CONFIG_CLI_DELEGATE__ !== "undefined" && __AGENT_CONFIG_CLI_DELEGATE__);
-var _HERE3 = fileURLToPath8(import.meta.url);
+var _HERE3 = fileURLToPath7(import.meta.url);
 function _isCliEntry() {
   if (process3.argv[1] === void 0) {
     return false;
@@ -20085,7 +20134,7 @@ function _isCliEntry() {
     return true;
   }
   try {
-    const here = fs32.realpathSync(fileURLToPath8(import.meta.url));
+    const here = fs32.realpathSync(fileURLToPath7(import.meta.url));
     const argv = fs32.realpathSync(path31.resolve(process3.argv[1]));
     return here === argv;
   } catch {
@@ -20129,7 +20178,7 @@ var SCOPE_DETECT_AI_DIRS = [
 ];
 
 // src/install/paths.ts
-import { homedir as homedir13, tmpdir } from "node:os";
+import { homedir as homedir14, tmpdir } from "node:os";
 import { join as join33 } from "node:path";
 var INSTALL_ROOT_SUBPATH = ".event4u/agent-config";
 var INSTALL_LOG_FILENAME = "install-log.jsonl";
@@ -20137,7 +20186,7 @@ function resolveHome(home) {
   if (home && home.length > 0) {
     return home;
   }
-  const fromOs = homedir13();
+  const fromOs = homedir14();
   if (!fromOs) {
     throw new Error(
       "Cannot resolve home directory \u2014 both $HOME (POSIX) and $USERPROFILE (Windows) are unset."
@@ -20226,7 +20275,7 @@ function tryParseEntry(line) {
 }
 
 // src/scripts/install.ts
-var _HERE4 = fileURLToPath9(import.meta.url);
+var _HERE4 = fileURLToPath8(import.meta.url);
 var SystemExitError = class extends Error {
   constructor(code) {
     super(`system-exit-${code}`);
@@ -20242,9 +20291,9 @@ var ArgparseExit2 = class extends Error {
   code;
 };
 function expanduser8(p) {
-  if (p === "~") return os11.homedir();
+  if (p === "~") return os12.homedir();
   if (p.startsWith("~/") || p.startsWith("~\\")) {
-    return path32.join(os11.homedir(), p.slice(2));
+    return path32.join(os12.homedir(), p.slice(2));
   }
   return p;
 }
@@ -20375,15 +20424,10 @@ var LEGACY_RENAME_MAP = {
   open_edited_files: "personal.open_edited_files",
   user_name: "personal.user_name",
   rtk_installed: "personal.rtk_installed",
-  minimal_output: "personal.minimal_output",
-  play_by_play: "personal.play_by_play",
-  pr_comment_bot_icon: "project.pr_comment_bot_icon",
-  pr_template: "project.pr_template",
   upstream_repo: "project.upstream_repo",
   improvement_pr_branch_prefix: "project.improvement_pr_branch_prefix",
   github_pr_reply_method: "github.pr_reply_method",
   eloquent_access_style: "eloquent.access_style",
-  skill_improvement_pipeline: "pipelines.skill_improvement",
   subagent_implementer_model: "subagents.implementer_model",
   subagent_judge_model: "subagents.judge_model",
   subagent_max_parallel: "subagents.max_parallel"
@@ -20780,7 +20824,7 @@ function ensure_augment_bridge(project_root, force) {
     ".augment/settings.json"
   );
 }
-var AUGMENT_USER_DIR = path32.join(os11.homedir(), ".augment");
+var AUGMENT_USER_DIR = path32.join(os12.homedir(), ".augment");
 var AUGMENT_USER_HOOKS_DIR = path32.join(AUGMENT_USER_DIR, "hooks");
 var AUGMENT_DISPATCHER_TRAMPOLINE = "augment-dispatcher.sh";
 var AUGMENT_LEGACY_TRAMPOLINES = [
@@ -20883,7 +20927,7 @@ function ensure_cursor_bridge(project_root, force) {
     ".cursor/hooks.json"
   );
 }
-var CURSOR_USER_DIR = path32.join(os11.homedir(), ".cursor");
+var CURSOR_USER_DIR = path32.join(os12.homedir(), ".cursor");
 var CURSOR_USER_HOOKS_DIR = path32.join(CURSOR_USER_DIR, "hooks");
 var CURSOR_DISPATCHER_TRAMPOLINE = "cursor-dispatcher.sh";
 function ensure_cursor_user_hooks(package_root, force) {
@@ -20967,7 +21011,7 @@ function ensure_cline_bridge(project_root, force) {
     skip(".clinerules/hooks/ already up to date");
   }
 }
-var CLINE_USER_DIR = path32.join(os11.homedir(), "Documents", "Cline", "Hooks");
+var CLINE_USER_DIR = path32.join(os12.homedir(), "Documents", "Cline", "Hooks");
 var CLINE_DISPATCHER_TRAMPOLINE = "cline-dispatcher.sh";
 function ensure_cline_user_hooks(package_root, force) {
   const src = path32.join(package_root, "scripts", "hooks", CLINE_DISPATCHER_TRAMPOLINE);
@@ -21019,7 +21063,7 @@ function ensure_windsurf_bridge(project_root, force) {
     ".windsurf/hooks.json"
   );
 }
-var WINDSURF_USER_DIR = path32.join(os11.homedir(), ".codeium", "windsurf");
+var WINDSURF_USER_DIR = path32.join(os12.homedir(), ".codeium", "windsurf");
 var WINDSURF_USER_HOOKS_DIR = path32.join(WINDSURF_USER_DIR, "hooks");
 var WINDSURF_DISPATCHER_TRAMPOLINE = "windsurf-dispatcher.sh";
 function ensure_windsurf_user_hooks(package_root, force) {
@@ -21075,7 +21119,7 @@ function ensure_gemini_bridge(project_root, force) {
     ".gemini/settings.json"
   );
 }
-var GEMINI_USER_DIR = path32.join(os11.homedir(), ".gemini");
+var GEMINI_USER_DIR = path32.join(os12.homedir(), ".gemini");
 var GEMINI_USER_HOOKS_DIR = path32.join(GEMINI_USER_DIR, "hooks");
 var GEMINI_DISPATCHER_TRAMPOLINE = "gemini-dispatcher.sh";
 function ensure_gemini_user_hooks(package_root, force) {
@@ -21566,7 +21610,7 @@ To remove this marker, delete this file.
 `;
 }
 var _CLAUDE_DESKTOP_BUNDLES_SUBPATH = "claude-desktop/bundles";
-var GLOBAL_ROOT = path32.join(os11.homedir(), ".event4u", "agent-config");
+var GLOBAL_ROOT = path32.join(os12.homedir(), ".event4u", "agent-config");
 var GLOBAL_USER_SETTINGS_PATH = path32.join(GLOBAL_ROOT, ".agent-user.yml");
 var GLOBAL_AGENT_SETTINGS_PATH = path32.join(GLOBAL_ROOT, ".agent-settings.yml");
 function _bridge_marker(tool_id, scope) {
@@ -21954,7 +21998,7 @@ function _run_migrate_to_global(project_root) {
   }
 }
 function _format_global_root_for_marker(global_root) {
-  const home = resolvePath(os11.homedir());
+  const home = resolvePath(os12.homedir());
   const resolved = resolvePath(global_root);
   const rel = path32.relative(home, resolved);
   if (rel === "" || rel.startsWith("..") || path32.isAbsolute(rel)) {
@@ -22332,7 +22376,7 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
           warn(`claude-code: thinned rule layer not written \u2014 ${String(e)}`);
         }
       }
-      if (!state.QUIET) for (const l of installReceiptBudgetLines(package_root)) info(l);
+      if (!state.QUIET) for (const l of installReceiptBudgetLines(package_root, void 0, { thisDeploy: /* @__PURE__ */ new Map([[anchor, current_files]]) })) info(l);
     }
     const missing_targets = _verify_deploy_targets(anchor, plan);
     if (missing_targets.length > 0) {
@@ -23238,7 +23282,7 @@ function _wizard_cli_dist(_project_root) {
   return pathExists(cli) ? cli : null;
 }
 function _server_info_path() {
-  return path32.join(os11.homedir(), ".event4u", "agent-config", "local-server.json");
+  return path32.join(os12.homedir(), ".event4u", "agent-config", "local-server.json");
 }
 function _pid_is_agent_config(pid) {
   let res;
@@ -23334,7 +23378,7 @@ function _wizard_spawn(project_root, pass_project_root = true) {
 function _wizard_run_sync(cmd, env, cli) {
   const total = _WIZARD_TIMEOUTS.reduce((a, b) => a + b, 0);
   const log_path = path32.join(
-    os11.tmpdir(),
+    os12.tmpdir(),
     `agent-config-wizard-${process4.pid}-${Date.now()}.log`
   );
   let child;
@@ -23697,17 +23741,7 @@ function _read_consumer_auto_switch(project_root) {
   }
   return "suggest";
 }
-function _team_setup_hint_line(project_root) {
-  let data;
-  try {
-    data = load_agent_settings({ project_path: _resolve_settings_read(project_root) });
-  } catch {
-    data = {};
-  }
-  const ai_team = isPlainObject(data) ? data["ai_team"] : null;
-  const flag = isPlainObject(ai_team) ? ai_team["suppress_setup_hint"] : null;
-  const suppressed = flag === true || typeof flag === "string" && ["true", "yes", "on", "1"].includes(flag.trim().toLowerCase());
-  if (suppressed) return null;
+function _team_setup_hint_line() {
   return "  \u2022 Claude Code team mode (optional cross-model review via the official codex plugin): run `agent-config doctor --check team` for setup status.";
 }
 function finalize_claude_model_tiers(project_root) {
@@ -23888,11 +23922,8 @@ function _main_project_install(opts, project_root, parsed_tools, is_first_run) {
     }
     printResiduals(tools, state.QUIET);
     if (_is_tool_enabled(tools, "claude-code")) {
-      const team_hint = _team_setup_hint_line(project_root);
-      if (team_hint !== null) {
-        process4.stdout.write(team_hint + "\n");
-        process4.stdout.write("\n");
-      }
+      process4.stdout.write(_team_setup_hint_line() + "\n");
+      process4.stdout.write("\n");
     }
   }
   _propose_modules_config(project_root, is_first_run);