@event4u/agent-config 16.4.0 → 17.0.0

package/dist/cli-delegate/{chunk-F3QDG2GT.js → chunk-2SFOOFJJ.js}

@@ -1,48 +1,63 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  classifyCompat,
+  fileDigest,
+  makeSkillOriginResolver,
+  packageClaimedPaths,
+  qualifiedSkillName,
+  scanCachePath,
+  scanVerdict
+} from "./chunk-FIEEOH5C.js";
+import {
+  EGRESS_RULES,
+  evaluateMatch,
+  shannonEntropy
+} from "./chunk-E6XNBVE4.js";
+import {
+  SRC_SKILLS
+} from "./chunk-YCU3TIXH.js";
 import {
   HOOK_SIGNATURES,
   entryCommands,
   isManagedEntry
 } from "./chunk-DEIV7XP7.js";
 import {
-  manifest_path,
   readRecordedHashes
-} from "./chunk-OKJUIAPS.js";
+} from "./chunk-J2SJZICO.js";
+import {
+  manifest_path
+} from "./chunk-4E2W63DA.js";
 import {
   COUNCIL_CONFIG_ENV,
   load_council_config,
   resolve_config_path
-} from "./chunk-WQWXGIWB.js";
+} from "./chunk-M6CRG5O6.js";
 import {
-  scanText
-} from "./chunk-KB5FZ655.js";
+  TOKEN_RE,
+  classifyToken
+} from "./chunk-BMGUGSY6.js";
+import {
+  readHookStdin
+} from "./chunk-RAXQOETZ.js";
 import {
   DEFAULT_SCAN_ROOTS,
   Finding,
   ROOT,
-  TOKEN_RE,
   _scan,
-  classifyToken,
   iter_corpus,
   legacy_pragma_finding,
   py_json_dumps_indent2,
   report,
   report_child_scanned,
   scan_file
-} from "./chunk-JQOM7TTM.js";
+} from "./chunk-IDAOTDPE.js";
 import {
   DeadScopeError,
   assertScanned
 } from "./chunk-I3EIN2YG.js";
-import {
-  readHookStdin
-} from "./chunk-F7DQWYR5.js";
 import {
   require_dist
 } from "./chunk-OY53J6II.js";
-import {
-  SRC_SKILLS
-} from "./chunk-YCU3TIXH.js";
 import {
   resolvePackageRoot
 } from "./chunk-MCJYCQPF.js";
@@ -58,10 +73,10 @@ import * as path10 from "node:path";
 import { fileURLToPath as fileURLToPath6, pathToFileURL as pathToFileURL6 } from "node:url";
 
 // src/scripts/_lib/neighbour_census.ts
-import { createHash as createHash2 } from "node:crypto";
-import * as fs3 from "node:fs";
-import * as os2 from "node:os";
-import * as path3 from "node:path";
+import { createHash } from "node:crypto";
+import * as fs2 from "node:fs";
+import * as os from "node:os";
+import * as path2 from "node:path";
 
 // src/scripts/_lib/neighbour_tool_use.ts
 import * as fs from "node:fs";
@@ -123,95 +138,154 @@ function toolsUsedByServer(projectRoot, now, segments) {
   return counts;
 }
 
-// src/scripts/_lib/skill_origin.ts
-var import_yaml = __toESM(require_dist(), 1);
-import { createHash } from "node:crypto";
-import * as fs2 from "node:fs";
-import * as os from "node:os";
-import * as path2 from "node:path";
-var AUTHORED_SKILL_ROOT = path2.join("src", "skills");
-var SCAN_CACHE_RELATIVE = path2.join("agents", "reports", "neighbour-scan.json");
-function scanCachePath(projectRoot) {
-  return path2.join(projectRoot, SCAN_CACHE_RELATIVE);
-}
-function qualifiedSkillName(name, origin) {
-  return origin === "package" ? name : `${origin}:${name}`;
-}
-function packageClaimedPaths(projectRoot) {
-  const manifest = manifest_path(projectRoot);
-  let doc;
-  try {
-    doc = (0, import_yaml.parse)(fs2.readFileSync(manifest, "utf-8"), { version: "1.1" });
-  } catch {
-    return null;
-  }
-  if (doc === null || typeof doc !== "object" || Array.isArray(doc)) return null;
-  const tools = doc["tools"];
-  const out = /* @__PURE__ */ new Set();
-  if (!Array.isArray(tools)) return out;
-  for (const tool of tools) {
-    if (tool === null || typeof tool !== "object" || Array.isArray(tool)) continue;
-    const files = tool["files"];
-    if (!Array.isArray(files)) continue;
-    for (const entry of files) {
-      if (entry === null || typeof entry !== "object" || Array.isArray(entry)) continue;
-      const raw = entry["path"];
-      if (typeof raw !== "string" || raw === "") continue;
-      out.add(path2.resolve(projectRoot, _expanduser(raw)));
-    }
+// src/scripts/_lib/secret_detector.ts
+var ENTROPY_MIN_TOKEN_LENGTH = 20;
+var BASE64_ENTROPY_THRESHOLD = 4.5;
+var HEX_ENTROPY_THRESHOLD = 3;
+var RULES = EGRESS_RULES.filter((r) => r.class === "credential");
+var SECRET_ALLOW = /secret-allow/;
+var PLACEHOLDER_PATTERNS = [
+  /x{4,}/i,
+  /example/i,
+  /changeme/i,
+  /your[_-].*here/i,
+  /<[^>]+>/,
+  /\.\.\./,
+  /^your[_-]/i,
+  /placeholder/i
+];
+var DATA_URI = /data:[\w.+-]+\/[\w.+-]+;base64,/i;
+var UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+var KEYWORD_CONTEXT = /password|secret|token|api[_-]?key|credential/i;
+var ENTROPY_TOKEN = /[A-Za-z0-9+=_-]{20,}/g;
+var IS_HEX = /^[0-9a-fA-F]+$/;
+var HASH_HEX_LENGTHS = /* @__PURE__ */ new Set([32, 40, 64]);
+function isAllSameChar(value) {
+  return value.length > 0 && /^(.)\1*$/.test(value);
+}
+function isPlaceholderValue(value, pathHint) {
+  if (pathHint !== void 0) {
+    if (pathHint.endsWith(".example") || pathHint.endsWith(".sample") || pathHint.includes(".env.example")) {
+      return true;
+    }
+  }
+  if (isAllSameChar(value)) {
+    return true;
   }
-  return out;
+  return PLACEHOLDER_PATTERNS.some((p) => p.test(value));
 }
-function _expanduser(p) {
-  if (p === "~") return os.homedir();
-  if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
-    return path2.join(os.homedir(), p.slice(2));
-  }
-  return p;
-}
-function makeSkillOriginResolver(projectRoot, opts = {}) {
-  const claims = opts.claims !== void 0 ? opts.claims : packageClaimedPaths(projectRoot);
-  const root = path2.resolve(projectRoot);
-  const authored = path2.join(path2.resolve(opts.packageRoot ?? projectRoot), AUTHORED_SKILL_ROOT);
-  const under = (abs, dir) => abs === dir || abs.startsWith(dir + path2.sep);
-  return (skillMdPath) => {
-    const abs = path2.resolve(skillMdPath);
-    if (under(abs, authored)) return "package";
-    if (claims === null) return "package";
-    if (claims.has(abs)) return "package";
-    return under(abs, root) ? "project" : "home";
-  };
+function maskSecret(value) {
+  const front = value.slice(0, 4);
+  const back = value.length > 6 ? value.slice(-2) : "";
+  if (front.length + back.length >= value.length) {
+    return `${value.slice(0, 1)}\u2026`;
+  }
+  return `${front}\u2026${back}`;
 }
-function classifyCompat(args) {
-  if (args.unscanned !== null) return "unscanned";
-  if (args.shadows.length > 0) return "shadowed";
-  if (args.overlaps.length > 0) return "overlapping";
-  return "unclassified";
+function overlaps(spans, start, end) {
+  return spans.some(([s, e]) => start < e && s < end);
 }
-function fileDigest(file) {
-  try {
-    return createHash("sha256").update(fs2.readFileSync(file)).digest("hex");
-  } catch {
-    return null;
+function scanText(text, opts = {}) {
+  const pathHint = opts.path;
+  const findings = [];
+  const lines = text.split(/\r\n|\r|\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const lineNo = i + 1;
+    if (SECRET_ALLOW.test(line)) {
+      continue;
+    }
+    const covered = [];
+    for (const rule of opts.rules ?? RULES) {
+      const pattern = rule.pattern.global ? rule.pattern : new RegExp(rule.pattern.source, `${rule.pattern.flags}g`);
+      pattern.lastIndex = 0;
+      let m;
+      while ((m = pattern.exec(line)) !== null) {
+        const c = evaluateMatch(rule, line, m);
+        if (c === null) {
+          if (m.index === pattern.lastIndex) {
+            pattern.lastIndex += 1;
+          }
+          continue;
+        }
+        const valueStart = c.start;
+        const value = line.slice(c.start, c.end);
+        const confidence = isPlaceholderValue(value, pathHint) ? "low" : "high";
+        findings.push({
+          rule: rule.rule,
+          kind: rule.kind ?? rule.rule,
+          line: lineNo,
+          column: valueStart + 1,
+          masked: maskSecret(value),
+          confidence
+        });
+        covered.push([valueStart, valueStart + value.length]);
+        if (m.index === pattern.lastIndex) {
+          pattern.lastIndex += 1;
+        }
+      }
+    }
+    if (!DATA_URI.test(line)) {
+      const hasKeyword = KEYWORD_CONTEXT.test(line);
+      ENTROPY_TOKEN.lastIndex = 0;
+      let tm;
+      while ((tm = ENTROPY_TOKEN.exec(line)) !== null) {
+        const token = tm[0];
+        const start = tm.index;
+        const end = start + token.length;
+        if (token.length < ENTROPY_MIN_TOKEN_LENGTH) {
+          continue;
+        }
+        if (overlaps(covered, start, end)) {
+          continue;
+        }
+        if (UUID.test(token)) {
+          continue;
+        }
+        if (/^sha(?:256|384|512)-/.test(token)) {
+          continue;
+        }
+        const entropy = shannonEntropy(token);
+        const isHex = IS_HEX.test(token);
+        if (isHex && HASH_HEX_LENGTHS.has(token.length)) {
+          continue;
+        }
+        let confidence = null;
+        if (isHex) {
+          if (entropy >= HEX_ENTROPY_THRESHOLD && hasKeyword) {
+            confidence = "high";
+          }
+        } else if (entropy >= BASE64_ENTROPY_THRESHOLD) {
+          confidence = hasKeyword ? "high" : "medium";
+        }
+        if (confidence === null) {
+          continue;
+        }
+        if (isPlaceholderValue(token, pathHint)) {
+          confidence = "low";
+        }
+        findings.push({
+          rule: "entropy",
+          kind: "high-entropy-string",
+          line: lineNo,
+          column: start + 1,
+          masked: maskSecret(token),
+          confidence
+        });
+      }
+    }
   }
-}
-function scanVerdict(cache, qualified, digest) {
-  if (cache === null) return { ok: false, kind: "no-scan-record" };
-  const rec = cache.entries.find((e) => e.qualified === qualified);
-  if (rec === void 0) return { ok: false, kind: "no-scan-record" };
-  if (digest === null || rec.digest !== digest) return { ok: false, kind: "digest-changed" };
-  if (rec.unscanned !== null) return { ok: false, kind: rec.unscanned };
-  return { ok: true };
+  return findings;
 }
 
 // src/scripts/_lib/neighbour_census.ts
 var OUR_MCP_KEY = "agent-config";
 function sha256(text) {
-  return createHash2("sha256").update(text, "utf-8").digest("hex");
+  return createHash("sha256").update(text, "utf-8").digest("hex");
 }
 function readJson(p) {
   try {
-    const parsed = JSON.parse(fs3.readFileSync(p, "utf-8"));
+    const parsed = JSON.parse(fs2.readFileSync(p, "utf-8"));
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     return parsed;
   } catch {
@@ -237,8 +311,8 @@ function hostNameFor(label) {
   return user ? `user:${name}` : `project:${name}`;
 }
 function hookFiles(projectRoot, homeRoot) {
-  const home = homeRoot ?? os2.homedir();
-  const expand = (label) => label.startsWith("~/") ? path3.join(home, label.slice(2)) : path3.join(projectRoot, label);
+  const home = homeRoot ?? os.homedir();
+  const expand = (label) => label.startsWith("~/") ? path2.join(home, label.slice(2)) : path2.join(projectRoot, label);
   const out = Object.entries(HOOK_SIGNATURES).map(([label, signature]) => ({
     host: hostNameFor(label),
     file: expand(label),
@@ -246,7 +320,7 @@ function hookFiles(projectRoot, homeRoot) {
   }));
   out.push({
     host: "project:claude",
-    file: path3.join(projectRoot, ".claude", "settings.json"),
+    file: path2.join(projectRoot, ".claude", "settings.json"),
     signature: "dispatch:hook --platform claude"
   });
   return out;
@@ -295,24 +369,24 @@ function censusHookFile(host, file, signature) {
 function unclaimedUnder(dir, origin, shape, owned, opts = {}) {
   let names;
   try {
-    names = fs3.readdirSync(dir).sort();
+    names = fs2.readdirSync(dir).sort();
   } catch {
     return [];
   }
   const out = [];
   for (const name of names) {
     if (name.startsWith(".")) continue;
-    const full = path3.join(dir, name);
-    const probe = opts.nested === true ? path3.join(full, "SKILL.md") : full;
+    const full = path2.join(dir, name);
+    const probe = opts.nested === true ? path2.join(full, "SKILL.md") : full;
     let body;
     try {
-      const st = fs3.statSync(probe);
+      const st = fs2.statSync(probe);
       if (!st.isFile()) continue;
-      body = fs3.readFileSync(probe, "utf-8");
+      body = fs2.readFileSync(probe, "utf-8");
     } catch {
       continue;
     }
-    if (owned.has(path3.resolve(probe))) continue;
+    if (owned.has(path2.resolve(probe))) continue;
     out.push({
       id: `${origin}:${opts.nested === true ? name : name.replace(/\.[^.]+$/, "")}`,
       shape,
@@ -325,14 +399,14 @@ function unclaimedUnder(dir, origin, shape, owned, opts = {}) {
 function foreignSections(file, templateFile, origin) {
   let body;
   try {
-    body = fs3.readFileSync(file, "utf-8");
+    body = fs2.readFileSync(file, "utf-8");
   } catch {
     return [];
   }
   let ours = /* @__PURE__ */ new Set();
   try {
     ours = new Set(
-      fs3.readFileSync(templateFile, "utf-8").split("\n").filter((l) => /^#{1,2} /.test(l)).map((l) => l.replace(/^#{1,2} /, "").trim())
+      fs2.readFileSync(templateFile, "utf-8").split("\n").filter((l) => /^#{1,2} /.test(l)).map((l) => l.replace(/^#{1,2} /, "").trim())
     );
   } catch {
   }
@@ -355,7 +429,7 @@ function foreignSections(file, templateFile, origin) {
   return out;
 }
 function foreignMcpServers(projectRoot, now) {
-  const file = path3.join(projectRoot, ".mcp.json");
+  const file = path2.join(projectRoot, ".mcp.json");
   const doc = readJson(file);
   const servers = doc?.["mcpServers"];
   if (servers === null || servers === void 0 || typeof servers !== "object" || Array.isArray(servers)) {
@@ -399,10 +473,17 @@ function labelFor(entries, oursBound, gatedEvents2) {
     reason: `${entries.length} foreign entr(ies), none on a slot this package gates`
   };
 }
+function statedHomeInventory(home) {
+  if (home === void 0 || path2.resolve(home) === path2.resolve(os.homedir())) return void 0;
+  return path2.join(home, ".event4u", "agent-config", "deployed-files.json");
+}
 function census(projectRoot, opts = {}) {
   const gated = opts.gatedEvents ?? /* @__PURE__ */ new Set();
-  const owned = new Set(readRecordedHashes(manifest_path(projectRoot), projectRoot).keys());
-  const home = opts.homeRoot ?? os2.homedir();
+  const owned = /* @__PURE__ */ new Set([
+    ...readRecordedHashes(manifest_path(projectRoot), projectRoot).keys(),
+    ...packageClaimedPaths(projectRoot, opts.inventoryFile ?? statedHomeInventory(opts.homeRoot)) ?? []
+  ]);
+  const home = opts.homeRoot ?? os.homedir();
   const hosts = [];
   const hookGroups = [];
   for (const { host, file, signature } of hookFiles(projectRoot, home)) {
@@ -425,12 +506,12 @@ function census(projectRoot, opts = {}) {
     ...opts.packageRoot === void 0 ? {} : { packageRoot: opts.packageRoot }
   });
   const scanCache = opts.scanCache !== void 0 ? opts.scanCache : null;
-  const overlaps = opts.overlaps ?? /* @__PURE__ */ new Map();
+  const overlaps2 = opts.overlaps ?? /* @__PURE__ */ new Map();
   const skills = [
-    ...unclaimedUnder(path3.join(projectRoot, ".claude", "skills"), "project", "skill", owned, {
+    ...unclaimedUnder(path2.join(projectRoot, ".claude", "skills"), "project", "skill", owned, {
       nested: true
     }),
-    ...unclaimedUnder(path3.join(home, ".claude", "skills"), "user", "skill", owned, {
+    ...unclaimedUnder(path2.join(home, ".claude", "skills"), "user", "skill", owned, {
       nested: true
     })
   ].map((entry) => {
@@ -442,7 +523,7 @@ function census(projectRoot, opts = {}) {
       return v.ok ? null : v.kind;
     })();
     const shadows = ourSkillsForCompat.has(name) ? [name] : [];
-    const hit = overlaps.get(path3.resolve(entry.source));
+    const hit = overlaps2.get(path2.resolve(entry.source));
     const overlapNames = unscanned === null && hit !== void 0 ? [...hit.names] : [];
     return {
       ...entry,
@@ -455,32 +536,32 @@ function census(projectRoot, opts = {}) {
     };
   });
   const commands = unclaimedUnder(
-    path3.join(projectRoot, ".claude", "commands"),
+    path2.join(projectRoot, ".claude", "commands"),
     "project",
     "command",
     owned
   );
   const agents = unclaimedUnder(
-    path3.join(projectRoot, ".claude", "agents"),
+    path2.join(projectRoot, ".claude", "agents"),
     "project",
     "agent",
     owned
   );
   const ruleFiles = [
-    ...unclaimedUnder(path3.join(projectRoot, ".cursor", "rules"), "cursor", "rule_file", owned),
-    ...unclaimedUnder(path3.join(projectRoot, ".windsurf", "rules"), "windsurf", "rule_file", owned),
-    ...unclaimedUnder(path3.join(projectRoot, ".claude", "rules"), "claude", "rule_file", owned)
+    ...unclaimedUnder(path2.join(projectRoot, ".cursor", "rules"), "cursor", "rule_file", owned),
+    ...unclaimedUnder(path2.join(projectRoot, ".windsurf", "rules"), "windsurf", "rule_file", owned),
+    ...unclaimedUnder(path2.join(projectRoot, ".claude", "rules"), "claude", "rule_file", owned)
   ];
   const templates = opts.templatesRoot ?? "";
   const instructionSections = [
     ...foreignSections(
-      path3.join(projectRoot, "AGENTS.md"),
-      path3.join(templates, "AGENTS.md"),
+      path2.join(projectRoot, "AGENTS.md"),
+      path2.join(templates, "AGENTS.md"),
       "AGENTS.md"
     ),
     ...foreignSections(
-      path3.join(projectRoot, ".github", "copilot-instructions.md"),
-      path3.join(templates, "copilot-instructions.md"),
+      path2.join(projectRoot, ".github", "copilot-instructions.md"),
+      path2.join(templates, "copilot-instructions.md"),
       "copilot-instructions.md"
     )
   ];
@@ -496,8 +577,8 @@ function census(projectRoot, opts = {}) {
     }
   }
   warnings.push(...doubleGateWarnings(hookGroups, gated));
-  warnings.push(...settingsTakeover(path3.join(projectRoot, ".claude", "settings.json")));
-  warnings.push(...settingsTakeover(path3.join(home, ".claude", "settings.json")));
+  warnings.push(...settingsTakeover(path2.join(projectRoot, ".claude", "settings.json")));
+  warnings.push(...settingsTakeover(path2.join(home, ".claude", "settings.json")));
   for (const h of hosts) {
     if (!h.ours_bound) {
       warnings.push({
@@ -577,12 +658,12 @@ function gatedEventsFrom(manifest, nativeAliases = {}) {
 }
 
 // src/scripts/_lib/neighbour_scan.ts
-import * as fs7 from "node:fs";
-import * as path7 from "node:path";
+import * as fs6 from "node:fs";
+import * as path6 from "node:path";
 
 // src/scripts/lint_instruction_smuggling.ts
-import * as path4 from "node:path";
-import * as fs4 from "node:fs";
+import * as path3 from "node:path";
+import * as fs3 from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 var CHECK = "instruction-smuggling";
 var _INLINE_CODE = /`[^`]*`/g;
@@ -692,7 +773,7 @@ function parse_args(argv) {
 }
 function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
-  const scanBase = args.root === void 0 ? ROOT : path4.resolve(args.root);
+  const scanBase = args.root === void 0 ? ROOT : path3.resolve(args.root);
   const findings = [];
   let corpusFiles = 0;
   for (const sf of iter_corpus(DEFAULT_SCAN_ROOTS, [".md"], scanBase)) {
@@ -730,13 +811,13 @@ function _isCliEntry() {
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL(path4.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL(path3.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs4.realpathSync(fileURLToPath(import.meta.url));
-    const argv = fs4.realpathSync(path4.resolve(process.argv[1]));
+    const here = fs3.realpathSync(fileURLToPath(import.meta.url));
+    const argv = fs3.realpathSync(path3.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
@@ -747,8 +828,8 @@ if (_isCliEntry()) {
 }
 
 // src/scripts/lint_confusables.ts
-import * as path5 from "node:path";
-import * as fs5 from "node:fs";
+import * as path4 from "node:path";
+import * as fs4 from "node:fs";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
 var CHECK2 = "mixed-script-confusable";
 var _TOKEN = TOKEN_RE;
@@ -820,7 +901,7 @@ function parse_args2(argv) {
 }
 function main2(argv = null) {
   const args = parse_args2(argv ?? process.argv.slice(2));
-  const scanBase = args.root === void 0 ? ROOT : path5.resolve(args.root);
+  const scanBase = args.root === void 0 ? ROOT : path4.resolve(args.root);
   const findings = [];
   let scanned = 0;
   for (const sf of iter_corpus(DEFAULT_SCAN_ROOTS, [".md"], scanBase)) {
@@ -858,13 +939,13 @@ function _isCliEntry2() {
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL2(path5.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL2(path4.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs5.realpathSync(fileURLToPath2(import.meta.url));
-    const argv = fs5.realpathSync(path5.resolve(process.argv[1]));
+    const here = fs4.realpathSync(fileURLToPath2(import.meta.url));
+    const argv = fs4.realpathSync(path4.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
@@ -875,8 +956,8 @@ if (_isCliEntry2()) {
 }
 
 // src/scripts/lint_skill_frontmatter_safety.ts
-import * as path6 from "node:path";
-import * as fs6 from "node:fs";
+import * as path5 from "node:path";
+import * as fs5 from "node:fs";
 import { fileURLToPath as fileURLToPath3, pathToFileURL as pathToFileURL3 } from "node:url";
 var CHECK3 = "dangerous-frontmatter";
 var _WILDCARD_TOOL = /(^|[\s,[\"'])(\*|Bash\(\*\))(\s|,|\]|"|'|$)/;
@@ -1148,7 +1229,7 @@ function parse_args3(argv) {
 }
 function main3(argv = null) {
   const args = parse_args3(argv ?? process.argv.slice(2));
-  const scanBase = args.root === void 0 ? ROOT : path6.resolve(args.root);
+  const scanBase = args.root === void 0 ? ROOT : path5.resolve(args.root);
   const findings = [];
   const roots = ["src/skills", "src/agent-src", "src/domains", "src/subagents"];
   let scanned = 0;
@@ -1187,13 +1268,13 @@ function _isCliEntry3() {
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL3(path6.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL3(path5.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs6.realpathSync(fileURLToPath3(import.meta.url));
-    const argv = fs6.realpathSync(path6.resolve(process.argv[1]));
+    const here = fs5.realpathSync(fileURLToPath3(import.meta.url));
+    const argv = fs5.realpathSync(path5.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
@@ -1235,8 +1316,8 @@ function writeScanCache(file, entries) {
     entries: [...entries].sort((a, b) => a.qualified < b.qualified ? -1 : 1)
   };
   try {
-    fs7.mkdirSync(path7.dirname(file), { recursive: true });
-    fs7.writeFileSync(file, `${JSON.stringify(payload, null, 2)}
+    fs6.mkdirSync(path6.dirname(file), { recursive: true });
+    fs6.writeFileSync(file, `${JSON.stringify(payload, null, 2)}
 `, "utf-8");
     return true;
   } catch {
@@ -1245,7 +1326,7 @@ function writeScanCache(file, entries) {
 }
 
 // src/scripts/_lib/neighbour_contradictions.ts
-import * as fs8 from "node:fs";
+import * as fs7 from "node:fs";
 var RANK_PROJECT = 3;
 var RANK_SUITE = 4;
 var RANK_NEIGHBOUR_ALWAYS_ON = 6;
@@ -1339,7 +1420,7 @@ function isDirective(text) {
 function extractInstructions(source, body) {
   let text;
   try {
-    text = body ?? fs8.readFileSync(source.file, "utf-8");
+    text = body ?? fs7.readFileSync(source.file, "utf-8");
   } catch {
     return [];
   }
@@ -1457,6 +1538,21 @@ function renderReview(rows) {
 import * as fs9 from "node:fs";
 import * as path8 from "node:path";
 import { fileURLToPath as fileURLToPath4, pathToFileURL as pathToFileURL4 } from "node:url";
+
+// src/scripts/_lib/canary_status.ts
+import * as fs8 from "node:fs";
+import * as path7 from "node:path";
+var CANARY_LIVENESS_RELPATH = path7.join("agents", "runtime", "state", "canary-liveness.json");
+function readCanaryStatusLine(repoRoot) {
+  try {
+    const raw = JSON.parse(fs8.readFileSync(path7.join(repoRoot, CANARY_LIVENESS_RELPATH), "utf8"));
+    return typeof raw.line === "string" && raw.line !== "" ? raw.line : null;
+  } catch {
+    return null;
+  }
+}
+
+// src/scripts/council_availability_hook.ts
 var EXIT_ALLOW = 0;
 function resolveAvailability(cwd, env) {
   let p;
@@ -1526,15 +1622,18 @@ function run(stdin, options = {}) {
   if (slot !== "session_start") {
     return EXIT_ALLOW;
   }
-  const a = resolveAvailability(_workspaceRoot(envelope), options.env ?? process.env);
-  if (a === null) {
+  const root = _workspaceRoot(envelope);
+  const a = resolveAvailability(root, options.env ?? process.env);
+  const canary = readCanaryStatusLine(root);
+  if (a === null && canary === null) {
     return EXIT_ALLOW;
   }
+  const facts = [a === null ? null : buildFact(a), canary].filter((f) => f !== null);
   process.stdout.write(
     `${JSON.stringify({
       decision: "allow",
-      reason: `council-availability: ${a.configured ? "configured" : "not configured"}`,
-      context: buildFact(a)
+      reason: `council-availability: ${a === null ? "unresolved" : a.configured ? "configured" : "not configured"}`,
+      context: facts.join("\n")
     })}
 `
   );
@@ -1560,8 +1659,8 @@ if (_isCliEntry4()) {
 }
 
 // src/scripts/audit_skill_overlap.ts
-var import_yaml2 = __toESM(require_dist(), 1);
-import { createHash as createHash3 } from "node:crypto";
+var import_yaml = __toESM(require_dist(), 1);
+import { createHash as createHash2 } from "node:crypto";
 import * as fs10 from "node:fs";
 import * as path9 from "node:path";
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL5 } from "node:url";
@@ -1705,7 +1804,7 @@ function _parse(md, field = "body") {
   const m = FM_RE.exec(text);
   if (m && m.index === 0) {
     try {
-      fm = (0, import_yaml2.parse)(m[1], { version: "1.1" }) ?? {};
+      fm = (0, import_yaml.parse)(m[1], { version: "1.1" }) ?? {};
     } catch {
       fm = {};
     }
@@ -1865,7 +1964,7 @@ function crossRootOverlapMap(pairs) {
   return out;
 }
 function censusDigest(neighbourFiles, ourRoot, threshold, field = "body") {
-  const h = createHash3("sha256");
+  const h = createHash2("sha256");
   h.update(`${String(threshold)}
 ${field}
 `);
@@ -1884,7 +1983,7 @@ ${field}
       }
       h.update(path9.resolve(md));
       h.update("\0");
-      h.update(createHash3("sha256").update(bytes).digest("hex"));
+      h.update(createHash2("sha256").update(bytes).digest("hex"));
       h.update("\n");
     }
   }
@@ -2335,7 +2434,7 @@ function runCensus(projectRoot, packageRoot, homeRoot) {
   };
   const first = census(projectRoot, base);
   const ourRoot = path10.join(packageRoot, "src", "skills");
-  let overlaps = /* @__PURE__ */ new Map();
+  let overlaps2 = /* @__PURE__ */ new Map();
   if (first.skills.length > 0 && fs11.existsSync(ourRoot)) {
     try {
       const { pairs } = cachedCrossRootPairs(
@@ -2344,11 +2443,11 @@ function runCensus(projectRoot, packageRoot, homeRoot) {
         path10.join(projectRoot, "agents", "reports", CROSS_CACHE_NAME),
         OVERLAP_THRESHOLD
       );
-      overlaps = crossRootOverlapMap(pairs);
+      overlaps2 = crossRootOverlapMap(pairs);
     } catch {
     }
   }
-  const full = census(projectRoot, { ...base, overlaps });
+  const full = census(projectRoot, { ...base, overlaps: overlaps2 });
   writeScanCache(
     scanCachePath(projectRoot),
     // `fileDigest`, not the census's own `digest`: the ranker re-digests the
@@ -2560,6 +2659,7 @@ if (_isCliEntry6()) {
 }
 
 export {
+  readCanaryStatusLine,
   runCensus,
   contradictionCandidates,
   runContradictions,