@event4u/agent-config 16.4.0 → 17.0.0

package/dist/install/stagedRuntime.js

@@ -0,0 +1,455 @@
+/**
+ * The runtime the hook carrier and the rule stubs need, staged under the
+ * machine root (`~/.event4u/agent-config/runtime/`).
+ *
+ * road-to-a-hook-carrier-that-is-never-silent Phases 1–3. An `npx` install runs
+ * from a package directory inside the npm cache (`_npx`), a directory
+ * the package manager may clear at any time, and leaves nothing on `PATH`. Every
+ * absolute pointer a thinned stub carries and every carrier path the hook command
+ * tries therefore resolves HERE, in a directory the package owns.
+ *
+ * Layout, with `current` a relative symlink swapped by rename:
+ *
+ *     runtime/current -> v-<version>-<nonce>
+ *     runtime/v-…/node              the node the install ran under
+ *     runtime/v-…/dist/hooks/…      the dispatcher bundle
+ *     runtime/v-…/dist/agent-src/…  rule bodies the stubs point at, with the
+ *                                   trees their relative links resolve into
+ *     runtime/v-…/src/scripts/ (data files only), src/config/, package.json,
+ *     the `yaml` package, in a `node_modules` directory of the stage
+ *                                   what the bundle reads from its package root
+ *     runtime/v-…/claude-rules/     the installed claude layer before thinning,
+ *                                   stamped files only — the copy a dead carrier
+ *                                   restores from, in shell
+ *     runtime/thinned               present while the claude layer is thinned;
+ *                                   its content is that layer's directory
+ *     runtime/demoted               written by the shell branch after a restore
+ *     runtime/carrier.json          the last stripped-environment probe per host
+ *
+ * The state files are shared with the shell branch in `claude_settings_hooks`,
+ * which reads them without node; their names are part of that contract.
+ */
+import { spawnSync } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import * as fs from 'node:fs';
+import { createRequire } from 'node:module';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { build_claude_hook_matrix } from '../scripts/_lib/claude_settings_hooks.js';
+import { event4u_root } from '../scripts/_lib/user_global_paths.js';
+import { describeUserPin, readUserPin, writeUserPin } from './userPin.js';
+export const RUNTIME_DIRNAME = 'runtime';
+export const CLAUDE_LAYER_DIRNAME = 'claude-rules';
+export const THINNED_MARKER = 'thinned';
+export const DEMOTED_MARKER = 'demoted';
+export const CARRIER_RECORD = 'carrier.json';
+export const PACKAGE_STAMP_LINE = 'package: event4u/agent-config';
+/**
+ * Package-relative entries the staged dispatcher reads. A missing entry is
+ * skipped, not an error: a checkout without a built bundle still stages its
+ * rule bodies, and the hook command checks for the bundle itself.
+ */
+export const STAGED_ENTRIES = [
+    'package.json',
+    'dist/hooks',
+    'dist/agent-src',
+    'dist/router.json',
+    'src/scripts',
+    'src/config',
+];
+/**
+ * Packages the bundle still resolves at run time (a `createRequire` the bundler
+ * cannot inline). Each is copied into the stage's own `node_modules` from wherever
+ * the package root resolves it; `yaml` has no dependencies of its own.
+ */
+export const STAGED_RUNTIME_DEPS = ['yaml'];
+function stageRuntimeDeps(packageRoot, stage) {
+    const req = createRequire(path.join(packageRoot, 'package.json'));
+    for (const dep of STAGED_RUNTIME_DEPS) {
+        let manifest;
+        try {
+            manifest = req.resolve(`${dep}/package.json`);
+        }
+        catch {
+            continue;
+        }
+        fs.cpSync(path.dirname(manifest), path.join(stage, 'node_modules', dep), { recursive: true, dereference: true });
+    }
+}
+/**
+ * Source under `src/scripts/` stays behind: the bundle carries the code, and
+ * reads only the data tables beside it (the manifest, the host lowering table,
+ * schemas), which are a small fraction of the TypeScript's size.
+ */
+function stagedFilter(src) {
+    return !/\.m?ts$/.test(src);
+}
+export function runtimeRootFor(env) {
+    return path.join(event4u_root(env ?? process.env), RUNTIME_DIRNAME);
+}
+export function currentRuntimeDir(runtimeRoot) {
+    return path.join(runtimeRoot, 'current');
+}
+function readVersion(packageRoot) {
+    try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot, 'package.json'), 'utf8'));
+        return typeof pkg.version === 'string' ? pkg.version : 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function snapshotStampedLayer(rulesDir, dest) {
+    fs.mkdirSync(dest, { recursive: true });
+    let names;
+    try {
+        names = fs.readdirSync(rulesDir);
+    }
+    catch {
+        return;
+    }
+    for (const name of names.sort()) {
+        if (!name.endsWith('.md'))
+            continue;
+        const src = path.join(rulesDir, name);
+        let text;
+        try {
+            if (!fs.statSync(src).isFile())
+                continue;
+            text = fs.readFileSync(src, 'utf8');
+        }
+        catch {
+            continue;
+        }
+        // The same test the shell branch applies before overwriting a file.
+        if (!text.split(/\r?\n/).includes(PACKAGE_STAMP_LINE))
+            continue;
+        fs.writeFileSync(path.join(dest, name), text);
+    }
+}
+function sweepStale(runtimeRoot, keep) {
+    for (const name of fs.readdirSync(runtimeRoot)) {
+        const stale = (name.startsWith('v-') && name !== keep) || name.startsWith('.stage-') || name.startsWith('.current-');
+        if (stale)
+            fs.rmSync(path.join(runtimeRoot, name), { recursive: true, force: true });
+    }
+}
+/**
+ * Stage the runtime, then make it current by one rename. A stage interrupted at
+ * any point leaves `current` on the previous version; the next stage sweeps
+ * what the interrupted one left behind, so one version stays on disk.
+ */
+export function stageRuntime(opts) {
+    const runtimeRoot = path.resolve(opts.runtimeRoot);
+    const packageRoot = path.resolve(opts.packageRoot);
+    fs.mkdirSync(runtimeRoot, { recursive: true });
+    const version = readVersion(packageRoot);
+    const nonce = `${process.pid}-${randomBytes(4).toString('hex')}`;
+    const stage = path.join(runtimeRoot, `.stage-${nonce}`);
+    fs.mkdirSync(stage);
+    let copied = 0;
+    for (const rel of STAGED_ENTRIES) {
+        const src = path.join(packageRoot, rel);
+        if (!fs.existsSync(src))
+            continue;
+        fs.cpSync(src, path.join(stage, rel), { recursive: true, dereference: true, filter: stagedFilter });
+        copied += 1;
+        if (opts._failAfterEntries !== undefined && copied >= opts._failAfterEntries) {
+            throw new Error('stageRuntime: injected fault');
+        }
+    }
+    stageRuntimeDeps(packageRoot, stage);
+    if (opts.claudeRulesDir)
+        snapshotStampedLayer(opts.claudeRulesDir, path.join(stage, CLAUDE_LAYER_DIRNAME));
+    fs.writeFileSync(path.join(stage, 'node'), `${opts.nodePath}\n`);
+    const versionDir = `v-${version.replace(/[^A-Za-z0-9._-]/g, '_')}-${nonce}`;
+    fs.renameSync(stage, path.join(runtimeRoot, versionDir));
+    const current = currentRuntimeDir(runtimeRoot);
+    const link = path.join(runtimeRoot, `.current-${nonce}`);
+    if (process.platform === 'win32') {
+        fs.symlinkSync(path.join(runtimeRoot, versionDir), link, 'junction');
+        fs.rmSync(current, { recursive: true, force: true });
+    }
+    else {
+        fs.symlinkSync(versionDir, link);
+    }
+    fs.renameSync(link, current);
+    sweepStale(runtimeRoot, versionDir);
+    return {
+        currentDir: current,
+        version,
+        dispatcher: fs.existsSync(path.join(current, 'dist', 'hooks', 'dispatch.js')),
+    };
+}
+/** Write or clear the thinned marker. Clearing it also clears a demotion. */
+export function markClaudeLayer(runtimeRoot, opts) {
+    fs.mkdirSync(runtimeRoot, { recursive: true });
+    const marker = path.join(runtimeRoot, THINNED_MARKER);
+    fs.rmSync(path.join(runtimeRoot, DEMOTED_MARKER), { force: true });
+    if (opts.thinned)
+        fs.writeFileSync(marker, `${path.resolve(opts.rulesDir)}\n`);
+    else
+        fs.rmSync(marker, { force: true });
+}
+export function readCarrierState(runtimeRoot) {
+    const layer = fs.existsSync(path.join(runtimeRoot, DEMOTED_MARKER))
+        ? 'demoted'
+        : fs.existsSync(path.join(runtimeRoot, THINNED_MARKER))
+            ? 'thinned'
+            : 'full';
+    let probe = null;
+    try {
+        const raw = JSON.parse(fs.readFileSync(path.join(runtimeRoot, CARRIER_RECORD), 'utf8'));
+        probe = raw.hosts?.['claude'] ?? null;
+    }
+    catch {
+        probe = null;
+    }
+    return { layer, probe };
+}
+/**
+ * What a session leaves behind. A live carrier changes nothing; a dead one on a
+ * thinned layer restores it and demotes. Nothing a session does promotes — that
+ * is what keeps a terminal launch and an app launch from flapping the layer.
+ * The shell branch is the implementation; this is its specification.
+ */
+export function layerAfterSession(state, carrierAlive) {
+    if (state === 'thinned' && !carrierAlive)
+        return 'demoted';
+    return state;
+}
+/**
+ * What an install, upgrade or doctor run leaves behind. A layer is thinned only
+ * on a carrier the stripped-environment probe reached, so a demoted machine is
+ * promoted by a passing probe and by nothing else.
+ */
+export function layerAfterInstall(state, opts) {
+    if (!opts.wantsThin)
+        return 'full';
+    if (opts.probe === 'reached')
+        return 'thinned';
+    return state === 'demoted' ? 'demoted' : 'full';
+}
+export const STRIPPED_PATH = '/usr/bin:/bin';
+/**
+ * Run an installed hook command the way a launcher with a bare `PATH` would,
+ * from an empty project directory, and report whether it reached a dispatcher.
+ *
+ * The command is run with `--read-exit` appended to each dispatch, the
+ * dispatcher's measurement-only mode, which exits before any concern runs; and
+ * with `AC_HOOK_PROBE` set, which the shell branch reads to skip the restore.
+ */
+export function probeHookCommand(command, env = process.env) {
+    const probeCommand = command.replace(/--min-version (\d+)/g, '--min-version $1 --read-exit');
+    const project = fs.mkdtempSync(path.join(os.tmpdir(), 'ac-carrier-probe-'));
+    const stdinPath = path.join(project, 'stdin.json');
+    fs.writeFileSync(stdinPath, '{}');
+    const fd = fs.openSync(stdinPath, 'r');
+    try {
+        const childEnv = {
+            PATH: STRIPPED_PATH,
+            CLAUDE_PROJECT_DIR: project,
+            AC_HOOK_PROBE: '1',
+        };
+        for (const key of ['HOME', 'USERPROFILE', 'EVENT4U_CONFIG_HOME']) {
+            if (env[key] !== undefined)
+                childEnv[key] = env[key];
+        }
+        const res = spawnSync('/bin/sh', ['-c', probeCommand], {
+            cwd: project,
+            stdio: [fd, 'pipe', 'pipe'],
+            encoding: 'utf-8',
+            env: childEnv,
+            timeout: 30000,
+        });
+        return typeof res.stderr === 'string' && res.stderr.includes('--read-exit ok') ? 'reached' : 'not-reached';
+    }
+    catch {
+        return 'not-reached';
+    }
+    finally {
+        fs.closeSync(fd);
+        fs.rmSync(project, { recursive: true, force: true });
+    }
+}
+export function recordCarrierProbe(runtimeRoot, host, outcome, version, now = new Date()) {
+    fs.mkdirSync(runtimeRoot, { recursive: true });
+    const file = path.join(runtimeRoot, CARRIER_RECORD);
+    let receipt = {};
+    try {
+        receipt = JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        receipt = {};
+    }
+    const hosts = receipt.hosts ?? {};
+    const date = now.toISOString().slice(0, 10);
+    const previous = hosts[host];
+    const since = previous !== undefined && previous.outcome === outcome ? (previous.since ?? previous.date) : date;
+    const record = { host, outcome, date, version, since };
+    hosts[host] = record;
+    // Other receipt fields — the `install --full` pin among them — survive a probe.
+    fs.writeFileSync(file, `${JSON.stringify({ ...receipt, hosts }, null, 2)}\n`);
+    return record;
+}
+/** One receipt / doctor line per probe outcome, including the never-probed one. */
+export function describeCarrierProbe(probe) {
+    if (probe === null)
+        return ['hook carrier (claude): not probed'];
+    const verdict = probe.outcome === 'reached' ? 'reached' : 'NOT reached';
+    return [
+        `hook carrier (${probe.host}): ${verdict} from a stripped environment (PATH=${STRIPPED_PATH}) — ` +
+            `probed ${probe.date}, package ${probe.version}`,
+    ];
+}
+/** The doctor line: the layer on disk, and since when the carrier outcome holds. */
+export function describeCarrierState(state) {
+    const since = state.probe === null ? 'never probed' : `carrier ${state.probe.outcome} since ${state.probe.since ?? state.probe.date}`;
+    return `hook carrier (claude): rule layer ${state.layer}, ${since}`;
+}
+/**
+ * The install-time half of the carrier, run after the claude layer is copied
+ * and rewritten and before it may be thinned: stage the runtime, probe the
+ * SessionStart command from a stripped environment, record the outcome, and
+ * decide the layer by {@link layerAfterInstall}. The caller thins only when
+ * `thin` is true and then calls {@link markClaudeLayer}; a full outcome is
+ * marked here and a demoted one is left as the shell branch wrote it.
+ *
+ * Windows has no `/bin/sh` to probe with, so there the decision stays what it
+ * was before the probe existed and nothing is recorded — "not probed" is the
+ * honest reading.
+ */
+export function prepareClaudeCarrier(opts) {
+    const env = opts.env ?? process.env;
+    const runtimeRoot = runtimeRootFor(env);
+    const warnings = [];
+    let staged = null;
+    try {
+        staged = stageRuntime({
+            packageRoot: opts.packageRoot,
+            runtimeRoot,
+            nodePath: process.execPath,
+            claudeRulesDir: opts.rulesDir,
+        });
+    }
+    catch (e) {
+        warnings.push(`claude-code: runtime not staged under ${runtimeRoot} — ${String(e)}`);
+    }
+    if (opts.userPin === true)
+        writeUserPin(runtimeRoot);
+    const pin = readUserPin(runtimeRoot);
+    const wantsThin = opts.wantsThin && staged !== null && pin === null;
+    const probe = process.platform === 'win32' || opts.sessionStartCommand === null
+        ? null
+        : probeHookCommand(opts.sessionStartCommand, env);
+    if (probe !== null)
+        recordCarrierProbe(runtimeRoot, 'claude', probe, staged?.version ?? 'unknown');
+    const before = readCarrierState(runtimeRoot);
+    const next = probe === null ? (wantsThin ? 'thinned' : 'full') : layerAfterInstall(before.layer, { wantsThin, probe });
+    if (next === 'full')
+        markClaudeLayer(runtimeRoot, { thinned: false, rulesDir: opts.rulesDir });
+    const lines = describeCarrierProbe(readCarrierState(runtimeRoot).probe);
+    const pinLine = describeUserPin(pin);
+    if (pinLine !== null)
+        lines.push(pinLine);
+    if (next === 'demoted') {
+        lines.push('hook carrier (claude): machine demoted — the rule layer stays full until the probe passes');
+    }
+    return { thin: next === 'thinned', bodyLinkRoot: staged?.currentDir ?? null, runtimeRoot, lines, warnings };
+}
+/**
+ * The doctor half of 3.3: probe the installed command, record it, and promote
+ * a demoted machine whose probe now passes. Promotion clears the demotion only;
+ * the layer stays full until the next install thins it, because the thin pass
+ * belongs to the installer.
+ */
+export function probeAndPromote(sessionStartCommand, env = process.env) {
+    const runtimeRoot = runtimeRootFor(env);
+    const before = readCarrierState(runtimeRoot);
+    if (process.platform === 'win32')
+        return before;
+    const outcome = probeHookCommand(sessionStartCommand, env);
+    const staged = readVersion(currentRuntimeDir(runtimeRoot));
+    const version = staged !== 'unknown' ? staged : (before.probe?.version ?? 'unknown');
+    recordCarrierProbe(runtimeRoot, 'claude', outcome, version);
+    if (before.layer === 'demoted' && outcome === 'reached') {
+        fs.rmSync(path.join(runtimeRoot, DEMOTED_MARKER), { force: true });
+    }
+    return readCarrierState(runtimeRoot);
+}
+/** Remove the staged runtime and its state files; returns the path removed, or null when absent. */
+export function removeStagedRuntime(env = process.env) {
+    const runtimeRoot = runtimeRootFor(env);
+    if (!fs.existsSync(runtimeRoot))
+        return null;
+    fs.rmSync(runtimeRoot, { recursive: true, force: true });
+    return runtimeRoot;
+}
+/** The `SessionStart` command the installer writes for this package, or null. */
+export function sessionStartCommandFor(packageRoot) {
+    try {
+        return build_claude_hook_matrix(path.join(packageRoot, 'src', 'scripts', 'hook_manifest.yaml'))['SessionStart'] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The claude-code deploy step, after the copy and the rewrite: prepare the
+ * carrier, thin through `thin` only when the plan says so, and mark the layer
+ * by what actually happened — a thin pass that throws leaves it marked full.
+ */
+export function deployClaudeCarrier(opts) {
+    const carrier = prepareClaudeCarrier({
+        packageRoot: opts.packageRoot,
+        rulesDir: opts.rulesDir,
+        sessionStartCommand: sessionStartCommandFor(opts.packageRoot),
+        wantsThin: opts.wantsThin,
+        ...(opts.userPin === true ? { userPin: true } : {}),
+    });
+    for (const w of carrier.warnings)
+        opts.warn(w);
+    if (!opts.quiet)
+        for (const l of carrier.lines)
+            opts.info(l);
+    if (!carrier.thin)
+        return;
+    try {
+        const lines = opts.thin(carrier.bodyLinkRoot);
+        markClaudeLayer(carrier.runtimeRoot, { thinned: true, rulesDir: opts.rulesDir });
+        if (!opts.quiet)
+            for (const l of lines)
+                opts.info(l);
+    }
+    catch (e) {
+        markClaudeLayer(carrier.runtimeRoot, { thinned: false, rulesDir: opts.rulesDir });
+        opts.warn(`claude-code: thinned rule layer not written — ${String(e)}`);
+    }
+}
+/**
+ * The doctor `hook-carrier` check (2.2, 3.3, 4.1): probe the SessionStart
+ * command from a stripped environment, record it, promote a demoted machine
+ * whose probe now passes, and print the layer and since when the carrier
+ * outcome holds. Skipped until an install staged a runtime.
+ */
+export function checkHookCarrier(packageRoot, env = process.env) {
+    const runtimeRoot = runtimeRootFor(env);
+    const command = sessionStartCommandFor(packageRoot);
+    if (!fs.existsSync(currentRuntimeDir(runtimeRoot)) || command === null) {
+        return {
+            id: 'hook-carrier',
+            status: 'skipped',
+            message: `no staged runtime under ${runtimeRoot}`,
+            remedy: 'run `agent-config upgrade` (or `npx -y @event4u/agent-config init`) to stage it',
+        };
+    }
+    const state = probeAndPromote(command, env);
+    const reached = state.probe?.outcome === 'reached';
+    return {
+        id: 'hook-carrier',
+        status: reached ? 'ok' : 'warn',
+        message: [...describeCarrierProbe(state.probe), describeCarrierState(state)].join(' · '),
+        remedy: reached ? '' : 'install node where the hook launcher can run it, then run `agent-config upgrade`',
+    };
+}
+//# sourceMappingURL=stagedRuntime.js.map

package/dist/install/toolsArg.js

@@ -0,0 +1,19 @@
+/**
+ * The `--tools` / `--ai` value of `agent-config install`: the two flags are
+ * aliases, so their comma lists are unioned in order with duplicates dropped,
+ * and an empty union means every tool.
+ */
+export function mergeToolsAliases(tools, ai) {
+    const items = [];
+    for (const raw of [tools, ai]) {
+        if (!raw)
+            continue;
+        for (const piece of raw.split(',')) {
+            const stripped = piece.trim();
+            if (stripped && !items.includes(stripped))
+                items.push(stripped);
+        }
+    }
+    return items.length > 0 ? items.join(',') : 'all';
+}
+//# sourceMappingURL=toolsArg.js.map

package/dist/install/userPin.js

@@ -0,0 +1,47 @@
+/**
+ * The user brake on the rule layer: `install --full` writes one field into the
+ * install receipt, `runtime/carrier.json`, and the layer-form decision is the
+ * only reader that acts on it. No settings key, schema entry or wizard question
+ * carries it — the brake exists so a user can keep today's full layer without
+ * the package growing a setting for it.
+ *
+ * Sticky by design: a later plain `install` or upgrade leaves the field in
+ * place, because a brake that an upgrade silently released would not be one.
+ * `agent-config uninstall` removes the runtime directory and the field with it.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+export const RECEIPT_FILE = 'carrier.json';
+export const USER_PIN_FIELD = 'user_pin';
+function readReceipt(runtimeRoot) {
+    try {
+        const raw = JSON.parse(fs.readFileSync(path.join(runtimeRoot, RECEIPT_FILE), 'utf8'));
+        return typeof raw === 'object' && raw !== null && !Array.isArray(raw) ? raw : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** The pin, or `null`. A field that is present but unreadable still reads as a pin: a brake fails on. */
+export function readUserPin(runtimeRoot) {
+    const v = readReceipt(runtimeRoot)[USER_PIN_FIELD];
+    if (v === undefined || v === null)
+        return null;
+    const o = typeof v === 'object' ? v : {};
+    return { form: 'full', set_at: typeof o['set_at'] === 'string' ? o['set_at'] : 'unknown' };
+}
+/** Write the pin into the receipt, keeping every other field the receipt holds. */
+export function writeUserPin(runtimeRoot, now = new Date()) {
+    fs.mkdirSync(runtimeRoot, { recursive: true });
+    const receipt = readReceipt(runtimeRoot);
+    const pin = { form: 'full', set_at: now.toISOString().slice(0, 10) };
+    receipt[USER_PIN_FIELD] = pin;
+    fs.writeFileSync(path.join(runtimeRoot, RECEIPT_FILE), `${JSON.stringify(receipt, null, 2)}\n`);
+    return pin;
+}
+export function describeUserPin(pin) {
+    return pin === null
+        ? null
+        : `rule layer pinned full by \`install --full\` (since ${pin.set_at}) — the package will not thin it on this machine`;
+}
+//# sourceMappingURL=userPin.js.map

package/dist/install/wizard-plan.js

@@ -9,7 +9,7 @@
  * {@link buildInstallPlan}.
  *
  * Mirrors the canonical mapping tables in
- * `scripts/install.py:2029-2222`:
+ * the retired Python installer, line 2029-2222:
  *   - {@link USER_SCOPE_PATHS}     ← `USER_SCOPE_PATHS`
  *   - {@link GLOBAL_DEPLOY_SOURCES} ← `_CLAUDE_SKILL_BUNDLE` + `GLOBAL_DEPLOY_SOURCES`
  *
@@ -23,7 +23,7 @@ import { buildInstallPlan } from './plan.js';
 import { ruleFileArrives, LEGACY_ALL } from './rule_scope.js';
 /**
  * Per-tool user-scope anchor directory, mirrored 1:1 from
- * `scripts/install.py:USER_SCOPE_PATHS`. Values may use `~` for the
+ * `USER_SCOPE_PATHS` in the retired Python installer. Values may use `~` for the
  * user's home directory; {@link expandAnchor} resolves it server-side.
  *
  * Tools without a user-scope directory convention (e.g. `claude-desktop`
@@ -93,7 +93,7 @@ const CLAUDE_SKILL_BUNDLE = [
     // subdirs route as `/<cluster>:<sub>`. Council session 2026-05-28
     // converged on Option B (native slash-only) — see
     // agents/runtime/council/responses/claude-code-distribution.json
-    // and scripts/install.py:_CLAUDE_SKILL_BUNDLE for the Python mirror.
+    // and `_CLAUDE_SKILL_BUNDLE` in the retired Python installer for the Python mirror.
     ['dist/agent-src/commands', 'commands'],
     ['dist/agent-src/personas', 'personas'],
 ];
@@ -104,7 +104,7 @@ const CLAUDE_SKILL_BUNDLE = [
  * `packageSrcRelative` resolves against the agent-config package root;
  * `destSubpath` is appended to `USER_SCOPE_PATHS[toolId]` (expanded).
  *
- * Mirrors `GLOBAL_DEPLOY_SOURCES` in `scripts/install.py:2178-2222`.
+ * Mirrors `GLOBAL_DEPLOY_SOURCES` in the retired Python installer, line 2178-2222.
  * Tools absent from this map have no deployable content in global scope
  * — they either follow a marker-only convention (handled by bridges in
  * Phase A6) or have no markdown convention at all.
@@ -235,4 +235,26 @@ export function buildPlanFromWizard(inputs) {
         policy: inputs.policy,
     });
 }
+/**
+ * The `target` block of a dry-run plan summary.
+ *
+ * A global install has no project target, and printing the cwd here read as
+ * "this is where it writes" — under npx the cwd is often the npx cache, so the
+ * plan named a directory the install never touches. For global it prints the
+ * anchor of each SELECTED tool and which phases would run.
+ */
+export function dryRunTargetLines(global, tools, projectTarget) {
+    if (!global)
+        return `  target:      ${projectTarget}\n`;
+    let out = '  target:      user-scope host paths (no project target)\n';
+    for (const tool of tools) {
+        const anchor = USER_SCOPE_PATHS[tool];
+        if (anchor === undefined)
+            continue;
+        out += `      ${tool} → ${anchor.startsWith('~/') ? join(homedir(), anchor.slice(2)) : anchor}\n`;
+    }
+    out += '  phases:      project payload sync — skipped (global installs write user-scope paths only)\n';
+    out += '               host projection + managed hooks — would run\n';
+    return out;
+}
 //# sourceMappingURL=wizard-plan.js.map

package/dist/mcp/awesome-mcp-servers.row.md

@@ -1 +1 @@
-| [@event4u/agent-config](https://event4u-app.github.io/agent-config) | Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including the counts in these badges. | 37 tools (stdio, worker) | `agent-config mcp-server` |
+| [@event4u/agent-config](https://event4u-app.github.io/agent-config) | Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including the artifact counts in these badges. | 37 tools (stdio, worker) | `agent-config mcp-server` |

package/dist/mcp/mcp-cloudflare-catalogue.json

@@ -1,5 +1,5 @@
 {
-  "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the counts in these badges.",
+  "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the artifact counts in these badges.",
   "homepage": "https://event4u-app.github.io/agent-config",
   "install_hint_stdio": "agent-config mcp-server",
   "name": "agent-config-mcp",
@@ -7,6 +7,7 @@
   "tools_count": 37,
   "topics": [
     "agent-governance",
+    "agent-rules",
     "agent-skills",
     "ai-agent",
     "ai-video",
@@ -16,8 +17,8 @@
     "cursor",
     "llm",
     "mcp",
+    "mcp-server",
     "prompt-engineering",
-    "python",
     "skills",
     "typescript",
     "windsurf"

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 628,
+    "artefact_count": 636,
     "scanner_version": "de0a22b4ac4c"
   },
-  "generated_at": "2026-10-10",
+  "generated_at": "2026-10-22",
   "package": {
-    "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the counts in these badges.",
+    "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the artifact counts in these badges.",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "16.4.0"
+    "version": "17.0.0"
   },
   "registries": [
     {
@@ -57,6 +57,7 @@
   },
   "topics": [
     "agent-governance",
+    "agent-rules",
     "agent-skills",
     "ai-agent",
     "ai-video",
@@ -66,8 +67,8 @@
     "cursor",
     "llm",
     "mcp",
+    "mcp-server",
     "prompt-engineering",
-    "python",
     "skills",
     "typescript",
     "windsurf"

package/dist/mcp/server.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
-  "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the counts in these badges.",
+  "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including the artifact counts in these badges.",
   "name": "io.github.event4u-app/agent-config",
   "packages": [
     {
@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "16.4.0"
+      "version": "17.0.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "16.4.0"
+  "version": "17.0.0"
 }