@event4u/agent-config 16.5.0 → 17.0.0

package/dist/cli-delegate/chunk-2Y5AMLMY.js

@@ -0,0 +1,136 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  CONSUMER_IMPACT_VALUES
+} from "./chunk-UUYEKXKR.js";
+import {
+  classify_install_origin,
+  compare_versions,
+  node_engine_satisfied,
+  parse_version
+} from "./chunk-5VO3RTMV.js";
+
+// src/scripts/_cli/doctor_install_mode.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
+function isFile(p) {
+  try {
+    return fs.statSync(p).isFile();
+  } catch {
+    return false;
+  }
+}
+function isDir(p) {
+  try {
+    return fs.statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function isSourceCheckoutPackage(packageRoot) {
+  return fs.existsSync(path.join(packageRoot, ".git"));
+}
+var INSTALL_MODE_MARKER_RELATIVE = "agents/.agent-state/install-mode.txt";
+function _is_global_only_consumer(project_root) {
+  return isFile(path.join(project_root, INSTALL_MODE_MARKER_RELATIVE)) || isDir(path.join(project_root, "agents", "overrides"));
+}
+function originForPackageRoot(root) {
+  if (isSourceCheckoutPackage(root)) return "source-checkout";
+  return classify_install_origin({ package_root: root, project_pin: null, latest: null, is_global_consumer: false });
+}
+
+// src/scripts/_lib/classify_update.ts
+function read_impact_range(map, installed, candidate) {
+  if (map === null || map === void 0) return null;
+  if (typeof map !== "object" || Array.isArray(map)) {
+    return { forged: "impact map is not an object", worst: null, security: false };
+  }
+  const rank = (i) => CONSUMER_IMPACT_VALUES.indexOf(i);
+  let worst = null;
+  let security = false;
+  for (const [version, entry] of Object.entries(map)) {
+    if (parse_version(version) === null) return { forged: `impact map key '${version}' is not a version`, worst, security };
+    if (entry === null || typeof entry !== "object") {
+      return { forged: `impact map entry ${version} is not an object`, worst, security };
+    }
+    const impact = entry["impact"];
+    if (!CONSUMER_IMPACT_VALUES.includes(impact)) {
+      return { forged: `impact map entry ${version} has impact '${String(impact)}'`, worst, security };
+    }
+    if (compare_versions(version, installed) !== 1 || compare_versions(version, candidate) === 1) continue;
+    if (worst === null || rank(impact) > rank(worst)) worst = impact;
+    security = security || entry["security"] === true;
+  }
+  return { forged: null, worst, security };
+}
+function machine_override(engines, nodeVersion) {
+  const range = engines !== null && typeof engines === "object" ? engines["node"] : void 0;
+  if (range === void 0) return { impact: null, reason: "candidate declares no engines.node" };
+  if ((parse_version(nodeVersion)?.pre.length ?? 0) > 0) return { impact: null, reason: `running Node ${nodeVersion} is a prerelease` };
+  const ok = node_engine_satisfied(range, nodeVersion);
+  if (ok === true) return { impact: null, reason: null };
+  const why = ok === false ? "is not satisfied by" : "cannot be checked against";
+  return { impact: "action", reason: `engines.node '${String(range)}' ${why} ${nodeVersion}` };
+}
+function suppression(input) {
+  if (input.env.ci) return "suppressed: CI";
+  if (!input.env.interactive) return "suppressed: non-interactive";
+  if (input.origin === "source-checkout") return "suppressed: source checkout";
+  if (input.origin === "ephemeral") return "suppressed: ephemeral npx run has nothing to update";
+  if (input.env.noUpdateCheck) return "suppressed: AGENT_CONFIG_NO_UPDATE_CHECK=1";
+  if (input.settings.mode === "off") return "suppressed: mode off";
+  return null;
+}
+function classifyUpdate(input) {
+  const suppressed = suppression(input);
+  if (suppressed !== null) return { action: "none", reasons: [suppressed] };
+  const order = compare_versions(input.candidate, input.installed);
+  if (order === null) return { action: "none", reasons: ["unparseable version: no action"] };
+  if (order !== 1) return { action: "none", reasons: [`candidate ${input.candidate} is not newer than ${input.installed}`] };
+  const ask = [];
+  const uncertain = [];
+  const local = machine_override(input.engines, input.env.nodeVersion);
+  if (local.impact === "action") return { action: "action", reasons: [local.reason] };
+  if (local.reason !== null) uncertain.push(local.reason);
+  const range = read_impact_range(input.impactMap, input.installed, input.candidate);
+  const security = range?.security === true;
+  const waits = [];
+  if (input.deprecated === true || typeof input.deprecated === "string" && input.deprecated !== "") {
+    waits.push("wait: candidate is deprecated");
+  }
+  const gateHours = input.settings.minReleaseAgeHours ?? 0;
+  if (!Number.isFinite(gateHours)) uncertain.push("release-age gate is not a number");
+  else if (gateHours > 0) {
+    const published = input.publishedAt === null ? NaN : Date.parse(input.publishedAt);
+    const now = Date.parse(input.env.now);
+    if (Number.isNaN(published) || Number.isNaN(now)) uncertain.push("publish time unknown under a release-age gate");
+    else if (now - published < gateHours * 36e5) waits.push(`wait: published less than ${gateHours} h ago`);
+  }
+  if (waits.length > 0) {
+    return security ? { action: "notify", reasons: [...waits, "security fix in range"] } : { action: "none", reasons: waits };
+  }
+  if (range === null) uncertain.push("impact map unavailable");
+  else if (range.forged !== null) ask.push(`untrusted impact map: ${range.forged}`);
+  else if (range.worst === "action") ask.push("a release in range needs consumer action");
+  if (ask.length > 0) return { action: "ask", reasons: ask };
+  const notify = [];
+  if (range?.worst === "notice") notify.push("a release in range carries a notice");
+  if (security) notify.push("security fix in range");
+  if (input.provenance !== true) uncertain.push("provenance attestation missing");
+  if (input.settings.projectPin) uncertain.push(`project pins ${input.settings.projectPin}`);
+  else if (input.origin === "project-pin") uncertain.push("install is pinned by the project");
+  if (input.origin === "unknown") uncertain.push("install origin unknown");
+  if (parse_version(input.candidate).pre.length > 0) uncertain.push("candidate is a prerelease");
+  if (input.settings.mode === void 0) uncertain.push("update mode not set");
+  const blocking = [...uncertain, ...range?.worst === "notice" ? notify : []];
+  if (blocking.length > 0) return { action: "notify", reasons: [...uncertain, ...notify] };
+  if (input.settings.mode !== "auto") return { action: "notify", reasons: [`mode ${input.settings.mode} does not install`, ...notify] };
+  return { action: "auto", reasons: ["every input known and no release in range needs a hand", ...notify] };
+}
+
+export {
+  isSourceCheckoutPackage,
+  INSTALL_MODE_MARKER_RELATIVE,
+  _is_global_only_consumer,
+  originForPackageRoot,
+  classifyUpdate
+};

package/dist/cli-delegate/{chunk-OKJUIAPS.js → chunk-4E2W63DA.js}

@@ -2,12 +2,6 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   write_atomic
 } from "./chunk-MWRD5YOH.js";
-import {
-  require_dist
-} from "./chunk-OY53J6II.js";
-import {
-  __toESM
-} from "./chunk-J55WI3RR.js";
 
 // src/scripts/_lib/installed_tools.ts
 import * as fs from "node:fs";
@@ -330,57 +324,6 @@ function _today() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 }
 
-// src/install/recordedOwnership.ts
-var YAML = __toESM(require_dist(), 1);
-import { existsSync, readFileSync as readFileSync2 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { isAbsolute, join as join2, resolve } from "node:path";
-var NO_RECORDED_HASHES = /* @__PURE__ */ new Map();
-function classifyOwnership(recordedSha256, onDiskSha256) {
-  if (recordedSha256 === void 0 || recordedSha256 === null) return "unknown";
-  if (onDiskSha256 === null) return "unknown";
-  return recordedSha256 === onDiskSha256 ? "recorded-unchanged" : "recorded-modified";
-}
-function readRecordedHashes(manifestPath, projectRoot) {
-  if (!existsSync(manifestPath)) return NO_RECORDED_HASHES;
-  let doc;
-  try {
-    doc = YAML.parse(readFileSync2(manifestPath, "utf8"));
-  } catch {
-    return NO_RECORDED_HASHES;
-  }
-  if (doc === null || typeof doc !== "object" || Array.isArray(doc)) return NO_RECORDED_HASHES;
-  const tools = doc["tools"];
-  if (!Array.isArray(tools)) return NO_RECORDED_HASHES;
-  const out = /* @__PURE__ */ new Map();
-  for (const tool of tools) {
-    if (tool === null || typeof tool !== "object" || Array.isArray(tool)) continue;
-    const files = tool["files"];
-    if (!Array.isArray(files)) continue;
-    for (const entry of files) {
-      if (entry === null || typeof entry !== "object" || Array.isArray(entry)) continue;
-      const rec = entry;
-      const raw = rec["path"];
-      if (typeof raw !== "string" || raw.length === 0) continue;
-      const sha = rec["sha256"];
-      const expanded = expanduser2(raw);
-      const target = isAbsolute(expanded) ? resolve(expanded) : resolve(projectRoot, expanded);
-      out.set(target, typeof sha === "string" && sha.length > 0 ? sha : null);
-    }
-  }
-  return out;
-}
-function expanduser2(p) {
-  if (p === "~") return homedir2();
-  if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
-    return join2(homedir2(), p.slice(2));
-  }
-  return p;
-}
-function recordedHashesForRoot(root, env) {
-  return readRecordedHashes(manifest_path(root, env), root);
-}
-
 export {
   SCHEMA_VERSIONS_SUPPORTED,
   DEFAULT_DEPLOY_ROOTS,
@@ -388,9 +331,5 @@ export {
   read_manifest,
   write_manifest,
   ScopeMismatchError,
-  upsert_tool,
-  NO_RECORDED_HASHES,
-  classifyOwnership,
-  readRecordedHashes,
-  recordedHashesForRoot
+  upsert_tool
 };

package/dist/cli-delegate/{chunk-6SRJTYJS.js → chunk-4SHNERBL.js}

@@ -4059,8 +4059,6 @@ var replyMethod = external_exports.enum(["replies_endpoint", "create_review_comm
 var confidenceBand = external_exports.enum(["off", "low", "medium", "high"]);
 var onBlock = external_exports.enum(["stop", "ask", "warn"]);
 var modelAutoSwitch = external_exports.enum(["auto", "suggest", "off"]);
-var leanProjectionMode = external_exports.enum(["eager-all", "thin", "delivery"]);
-var leanProjectionHost = external_exports.enum(["claude-code", "cursor", "cline"]);
 var projectionMode = external_exports.enum(["legacy-all", "scoped"]);
 var projectAudience = external_exports.enum(["self", "internal", "client", "public"]);
 var deliveryMerge = external_exports.enum(["off", "on-green"]);
@@ -4080,11 +4078,8 @@ var settingsSchema = external_exports.object({
     mode: projectionMode.default("legacy-all").describe(
       "Whether the per-tool projector writes EVERY artefact into the host-tool trees (.claude/ .cursor/ .windsurf/) or only the active profile + packs' artefacts (ADR-040, docs/contracts/capability-packs.md). legacy-all = (default, non-breaking) project the full surface exactly as 5.x did. scoped = project only the active profile's packs unioned with the runtime.active_packs overlay, expanded over the requires graph \u2014 opt in with `agent-config use --profile=<id>`. A failed scoped projection restores the full tree."
     ),
-    rule_workspaces: external_exports.array(external_exports.string()).default([]).describe(
-      "Workspace scope for the RULE layer only (road-to-request-scoped-rule-load P1/P1b, opt-in). Absent or empty = legacy-all: every rule projects AND installs. Non-empty = only rules whose workspaces frontmatter intersects this list are projected (condense) and installed (install.sh + global wizard payload). Kernel rules always ship; untagged rules fail safe. The default flip to a scoped value is a HUMAN release gate \u2014 do not set this from automation."
-    ),
     rule_packs: external_exports.union([external_exports.literal("auto"), external_exports.array(external_exports.string())]).default([]).describe(
-      'Optional second scoping axis for the RULE layer, per pack ids (src/config/discovery/packs.yml). When set, a non-kernel rule also needs a packs frontmatter intersection to ship \u2014 e.g. deselecting frontend-design drops ui-audit-gate + design-fidelity. Same opt-in / human-gate semantics as rule_workspaces. The literal "auto" derives the id list from the active-pack set (the same set the skill/command prune uses), so a domain safety floor stops shipping into installs that do not have the pack it guards; an explicit list stays supported and wins over the derivation.'
+      'Scoping axis for the RULE layer beyond the derived workspace set, per pack ids (src/config/discovery/packs.yml). When set, a non-kernel rule also needs a packs frontmatter intersection to ship \u2014 e.g. deselecting frontend-design drops ui-audit-gate + design-fidelity. Opt-in, and an empty list is inactive; the workspace axis beside it is derived rather than configured (ADR-293 step 4.6). The literal "auto" derives the id list from the active-pack set (the same set the skill/command prune uses), so a domain safety floor stops shipping into installs that do not have the pack it guards; an explicit list stays supported and wins over the derivation.'
     )
   }).default({ mode: "legacy-all" }),
   rule_loading_tier: ruleLoadingTier.default("balanced").describe(
@@ -4093,14 +4088,6 @@ var settingsSchema = external_exports.object({
   discipline_profile: disciplineProfile.optional().describe(
     "The ONE runtime knob for the discipline-rule tier (successor of rule_loading_tier; council 2026-07-07). off = kernel only (~1x tokens). essential = kernel + the measured lift-carrying rules (~3.3x, keeps the weak-host discipline lift). full = everything (~11.7x, EXPERIMENTAL \u2014 residual lift over essential not established). auto = resolve per session against the evidence-gated NULL-lift disable-list in src/config/host-capabilities.yml (measured-null host \u2192 off, otherwise \u2192 essential). Optional and opt-in until the P1/P2 evidence gates pass (agents/roadmaps/road-to-discipline-profile-tiering.md); absent = legacy rule_loading_tier applies."
   ),
-  lean_projection: external_exports.object({
-    mode: leanProjectionMode.default("eager-all").describe(
-      "How the per-tool projector emits the rule layer. eager-all = every rule body inlined into every projection (safe; what an ABSENT key still resolves to, per ADR-267 decision point 4). thin = kernel rules full-bodied + non-kernel rules as router-resolved pointers (~45k GPT-tok lighter per session, exact-BPE \u2014 a different unit from the chars/4 figures below, never compare the two directly), with no delivery mechanism. delivery = thin stubs PLUS the rule-inject hook concern, which delivers a body back on a trigger match; this is the value the SHIPPED TEMPLATE carries for Claude Code since ADR-267. SAVING AND CHARGE, MEASURED TOGETHER so neither is published alone (2026-09-12, `check_preamble_payload_budget`): the rule bucket falls 122,769 -> 24,537 chars/4 tok per session on a thinned host (-80.0%), and a trigger match costs p50 6,728 B / p90 14,016 B / max 16,297 B per fire over 318 gate-open fires of the frozen tests/eval/routing-matrix corpus at the concern's 16,384 B cap. Bytes per fire and tokens per session are different denominators and are never summed; re-read both rather than quoting this line. The ceiling for that charge is registered in src/config/hook-token-budget.json (user_prompt_submit slot sum 4,096 -> 16,384)."
-    ),
-    hosts: external_exports.array(leanProjectionHost).default(["claude-code"]).describe(
-      "Which hosts a thinning mode may thin (ADR-267). Absent resolves to [claude-code]. Only the three hosts with a per-rule rule tree are accepted, and this enum is the AUTHORING layer: an id outside it is a hard validation FAILURE here and under validate_agent_settings, never a warning. resolveLeanProjectionHosts is the READ-TIME backstop for a hand-edited .agent-settings.yml that passed neither, and THERE the id is dropped with a warning (R2 finding 6 \u2014 the two layers answer differently and neither said so). Every host outside this list receives exactly what eager-all writes, asserted byte-for-byte by check_host_tree_parity."
-    )
-  }).default({ mode: "eager-all", hosts: ["claude-code"] }),
   cost: external_exports.object({
     budgets: external_exports.object({
       daily: external_exports.number().min(0).default(0).describe(
@@ -4380,8 +4367,8 @@ var settingsSchema = external_exports.object({
     model_ceiling: external_exports.string().default("").describe(
       "Session-wide model CEILING for subagents (spend cap). Empty (default) = no ceiling. When set, suite-owned CLI spawn wrappers export CLAUDE_CODE_SUBAGENT_MODEL to the sessions they launch. Class C: a human sets it; the agent never writes or infers one."
     ),
-    max_parallel: external_exports.number().int().min(1).default(3).describe(
-      "Limit on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs \u2014 a value the model reads from settings; no code counts spawns against it. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
+    max_parallel: external_exports.number().int().min(1).max(64).default(3).describe(
+      "Limit on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs. On Claude Code the installer also writes it into CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS, the host cap on concurrent new spawns. That cap does not bound a resumed worker: on Claude Code 2.1.306 a resume was admitted past a cap of 1, so a resume is neither bounded by the host nor counted by any package code yet. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
     ),
     adversarial_council: external_exports.enum(["off", "ask", "on"]).default("off").describe(
       "Opt-in adversarial-verification-council mode (subagent-orchestration Mode 9, ADR-122). off (default) = never runs; ask = offer it on an explicit high-risk change; on = auto-run on high-risk changes. Advisory only \u2014 a panel of distinct-model skeptics red-teams a real change for defect FINDING coverage and NEVER auto-gates it (Hard Floor). Stays default-off until the adversarial-council-finding-coverage claim is backed."
@@ -4390,6 +4377,12 @@ var settingsSchema = external_exports.object({
   // `worktrees.mode` was DELETED (ADR-229). Worktree creation is
   // instruction-only and hardcoded; there is nothing left to configure. A
   // leftover key is ignored with one deprecation line via REMOVED_KEYS.
+  // `worktrees.cleanup` governs REMOVAL, a separate question (ADR-295).
+  worktrees: external_exports.object({
+    cleanup: external_exports.enum(["off", "notify", "auto"]).default("notify").describe(
+      "What the agent may do about a worktree whose work is provably on the trunk (merged by merge commit, rebase or squash), that is clean, holds no ignored file a rebuild would not restore, and has no live session. notify (default, and what an absent key resolves to) says once a day how many exist and removes nothing; auto removes them right after /pr:merge and once a day on the first session start, without force, keeping local branches; off says nothing. The daily pass reads merged pull requests through your gh login (branch name and head commit only)."
+    )
+  }).default({ cleanup: "notify" }),
   ai_team: external_exports.object({
     model: external_exports.string().default("auto").describe(
       "Model handed to the codex CLI. 'auto' (default) = pass no --model flag so the CLI's own default applies \u2014 tracks the subscription's current strongest model instead of pinning a stale ID. Any other value passes through verbatim as `--model <value>`."
@@ -4448,6 +4441,11 @@ var settingsSchema = external_exports.object({
       "Deterministic run-checkpoint production at session end (road-to-continuity-writer-activation Phase 1.4). on (default) = a session above the recycle threshold and inside a running roadmap contract leaves agents/runtime/state/checkpoints/<run>.json, so a killed run resumes from a derived checkpoint rather than from bookkeeping. off = no checkpoint; continuity writing, the recycle advisory and the context-fill surface are unaffected. Default ON because it is the behavior the tree already had \u2014 the switch exists to make the three session-end handlers independently disableable, not to change what ships."
     )
   }),
+  retro: external_exports.object({
+    enabled: external_exports.boolean().default(true).describe(
+      "Automatic retro after merged work (ADR-292, docs/contracts/retro-v1.md). true (default, owner directive 2026-10-12) = a merged PR and the first session of a new local day enqueue finished work; a deterministic triage picks what is worth one learning, and nothing behavior-changing is applied without a person. The one network read is the daily probe asking GitHub, through your own gh login, whether a pushed PR merged (repository and PR number only, three-second budget). false = no automatic path runs \u2014 no merge enqueue, no forge-merge marker, no daily probe and no network read; an explicit /retro still runs on request. Class C: an agent cannot set it; it cascades from the user-global file."
+    )
+  }).default({}),
   memory: external_exports.object({
     redact_patterns: external_exports.array(external_exports.string()).default([]).describe(
       "Regex patterns (one per line) that scrub matches from chat-history transcripts and memory before they hit disk. Use for secrets, customer names, internal URLs. Patterns are anchored and case-insensitive."
@@ -4469,6 +4467,13 @@ var settingsSchema = external_exports.object({
       )
     }).default({})
   }).default({}),
+  egress: external_exports.object({
+    placeholders: external_exports.object({
+      mode: external_exports.enum(["off", "observe", "protect", "strict"]).default("off").describe(
+        "Dispatcher egress stage (docs/contracts/egress-placeholders-v1.md). off (default) = nothing. observe = detect and count listed values in prompts and tool bodies, types and counts only, and change nothing a hook concern sees. protect = also give every recording and advisory concern a copy with each value replaced by a placeholder token, so local stores keep tokens; guards still see the original. strict = as protect until the host rewrite exists. No mode yet changes what reaches the model; the rule table holds credential rules only. Project layers only."
+      )
+    }).default({})
+  }).default({}),
   hooks: external_exports.object({
     concern_budget: external_exports.object({
       tier1_concerns: external_exports.array(external_exports.string()).default([]).describe(
@@ -4549,6 +4554,22 @@ var settingsSchema = external_exports.object({
       "Once per day the agent checks the npm registry for a newer agent-config release and surfaces a one-line banner if one exists. Turn off in air-gapped environments or to silence the banner."
     )
   }),
+  advisories: external_exports.object({
+    mode: external_exports.enum(["off", "notify"]).default("notify").describe(
+      "Whether the first session start of a day prints the advisory findings that need action today. notify (default) reads the local cache only \u2014 a session start never touches the network; off prints nothing, and agent-config audit:deps show still works."
+    ),
+    egress: external_exports.enum(["none", "query"]).default("query").describe(
+      "What leaves the machine when agent-config audit:deps refresh runs. query (default) sends names and versions of public packages to api.osv.dev and reads endoflife.date and the PHP and Node release feeds; a private package name is never sent, and a native npm or composer audit, which sends the lockfile package list to the registry that tool is configured for, runs only for a lockfile with no private package. none sends nothing, and findings read unknown rather than clear."
+    ),
+    kev: external_exports.enum(["off", "on"]).default("on").describe(
+      "Whether a refresh reads the CISA known-exploited catalog. on (default) downloads the whole catalog and matches it locally, so nothing about the project is sent, and a finding in it is raised one tier in a runtime scope; off leaves tiers to the other sources. Runs only where egress is query."
+    )
+  }).default({ mode: "notify", egress: "query", kev: "on" }),
+  update: external_exports.object({
+    mode: external_exports.enum(["off", "notify", "ask", "auto"]).default("notify").describe(
+      "What the agent may do about a newer release. notify tells you and installs nothing (the default, and what an absent key resolves to); ask behaves as notify until the ring-0 exit ships a prompt; auto installs a staged release at a session start when every gate passes and no other session is live; off says nothing at all. Read from the user-global layer only \u2014 a repository cannot set how your global install updates itself."
+    )
+  }).default({ mode: "notify" }),
   legal_review_prep: external_exports.object({
     acknowledged: external_exports.boolean().default(false).describe(
       "I understand the legal-review-prep pack provides templates and general information ONLY \u2014 it is NOT legal advice, creates no attorney-client relationship, and never replaces a licensed lawyer. Individual cases require an attorney. The pack stays inactive until this is checked."

package/dist/cli-delegate/chunk-5VO3RTMV.js

@@ -0,0 +1,208 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  write_target
+} from "./chunk-T6BP34WI.js";
+
+// src/scripts/_lib/version_order.ts
+var NUM = "(0|[1-9]\\d*)";
+var IDENT = "[0-9A-Za-z-]+";
+var VERSION_RE = new RegExp(
+  `^v*${NUM}\\.${NUM}\\.${NUM}(?:-(${IDENT}(?:\\.${IDENT})*))?(?:\\+${IDENT}(?:\\.${IDENT})*)?$`
+);
+function parse_version(v) {
+  if (typeof v !== "string") return null;
+  const m = VERSION_RE.exec(v.trim());
+  if (!m) return null;
+  const pre = m[4] === void 0 ? [] : m[4].split(".").map((id) => /^\d+$/.test(id) ? Number(id) : id);
+  return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]), pre };
+}
+function cmp_num(a, b) {
+  return a === b ? 0 : a < b ? -1 : 1;
+}
+function compare_parsed(a, b) {
+  const core = cmp_num(a.major, b.major) || cmp_num(a.minor, b.minor) || cmp_num(a.patch, b.patch);
+  if (core !== 0) return core;
+  if (a.pre.length === 0 || b.pre.length === 0) return cmp_num(b.pre.length, a.pre.length);
+  for (let i = 0; i < Math.max(a.pre.length, b.pre.length); i += 1) {
+    const x = a.pre[i];
+    const y = b.pre[i];
+    if (x === void 0) return -1;
+    if (y === void 0) return 1;
+    if (typeof x === "number" && typeof y === "number") {
+      if (x !== y) return cmp_num(x, y);
+    } else if (typeof x === "number") {
+      return -1;
+    } else if (typeof y === "number") {
+      return 1;
+    } else if (x !== y) {
+      return x < y ? -1 : 1;
+    }
+  }
+  return 0;
+}
+function compare_versions(a, b) {
+  const pa = parse_version(a);
+  const pb = parse_version(b);
+  if (pa === null || pb === null) return null;
+  return compare_parsed(pa, pb);
+}
+var PARTIAL_RE = /^(\^|~|>=|<=|>|<|=)?v?(\d+|[xX*])(?:\.(\d+|[xX*]))?(?:\.(\d+|[xX*]))?$/;
+function at(major, minor = 0, patch = 0) {
+  return { major, minor, patch, pre: [] };
+}
+function bounds_for(token) {
+  if (token === "*" || token === "x" || token === "X") return [];
+  const m = PARTIAL_RE.exec(token);
+  if (!m) return null;
+  const op = m[1] ?? "=";
+  const parts = [m[2], m[3], m[4]];
+  const known = [];
+  for (const p of parts) {
+    if (p === void 0 || /^[xX*]$/.test(p)) break;
+    known.push(Number(p));
+  }
+  if (known.length === 0) return op === "<" || op === ">" ? null : [];
+  const [M, mi = 0, pa = 0] = known;
+  const full = known.length === 3;
+  const next = known.length === 1 ? at(M + 1) : known.length === 2 ? at(M, mi + 1) : at(M, mi, pa + 1);
+  const base = at(M, mi, pa);
+  switch (op) {
+    case "^": {
+      const upper = M > 0 ? at(M + 1) : known.length === 1 ? at(1) : mi > 0 ? at(0, mi + 1) : full ? at(0, 0, pa + 1) : at(0, 1);
+      return [{ op: ">=", v: base }, { op: "<", v: upper }];
+    }
+    case "~":
+      return [{ op: ">=", v: base }, { op: "<", v: known.length === 1 ? at(M + 1) : at(M, mi + 1) }];
+    case ">=":
+      return [{ op: ">=", v: base }];
+    case "<":
+      return [{ op: "<", v: base }];
+    case ">":
+      return [full ? { op: ">", v: base } : { op: ">=", v: next }];
+    case "<=":
+      return [full ? { op: "<=", v: base } : { op: "<", v: next }];
+    default:
+      return full ? [{ op: "=", v: base }] : [{ op: ">=", v: base }, { op: "<", v: next }];
+  }
+}
+function holds(b, v) {
+  const c = compare_parsed(v, b.v);
+  if (b.op === ">=") return c >= 0;
+  if (b.op === ">") return c > 0;
+  if (b.op === "<") return c < 0;
+  if (b.op === "<=") return c <= 0;
+  return c === 0;
+}
+function node_engine_satisfied(range, runtime) {
+  const v = parse_version(runtime);
+  if (v === null || typeof range !== "string") return null;
+  const sets = [];
+  for (const alt of range.split("||")) {
+    const tokens = alt.trim().replace(/(\^|~|>=|<=|>|<|=)\s+/g, "$1").split(/\s+/).filter(Boolean);
+    if (tokens.includes("-")) return null;
+    const set = [];
+    for (const t of tokens) {
+      const b = bounds_for(t);
+      if (b === null) return null;
+      set.push(...b);
+    }
+    sets.push(set);
+  }
+  if (v.pre.length > 0) return null;
+  return sets.some((set) => set.every((b) => holds(b, v)));
+}
+
+// src/scripts/_lib/update_check.ts
+var PACKAGE_NAME = "@event4u/agent-config";
+var NPM_REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+var FETCH_TIMEOUT_S = 1;
+var CHECK_WINDOW_MS = 24 * 60 * 60 * 1e3;
+var STATE_FILENAME = "update-check.json";
+var DEFAULT_STATE_PATH = write_target(STATE_FILENAME);
+async function fetch_latest_from_npm(options = {}) {
+  return (await fetch_latest_document(options))?.version ?? null;
+}
+async function fetch_latest_document(options = {}) {
+  const timeout = options.timeout ?? FETCH_TIMEOUT_S;
+  const url = options.url ?? NPM_REGISTRY_URL;
+  const fetch_impl = options.fetch_impl ?? fetch;
+  try {
+    const resp = await fetch_impl(url, {
+      headers: {
+        Accept: "application/json",
+        "User-Agent": "agent-config-update-check"
+      },
+      signal: AbortSignal.timeout(timeout * 1e3)
+    });
+    const payload = await resp.json();
+    if (payload !== null && typeof payload === "object" && !Array.isArray(payload)) {
+      const doc = payload;
+      const version = doc["version"];
+      if (typeof version === "string" && version.trim()) {
+        const cfg = doc["agentConfig"];
+        const impact = cfg !== null && typeof cfg === "object" && !Array.isArray(cfg) ? cfg["impact"] : null;
+        return { version: version.trim(), impact: impact ?? null };
+      }
+    }
+  } catch {
+    return null;
+  }
+  return null;
+}
+var GLOBAL_TREE = /[\\/](?:lib|npm)[\\/]node_modules[\\/]@event4u[\\/]agent-config[\\/]?$/;
+function classify_install_origin(signals) {
+  const pin = signals.project_pin?.trim() ?? "";
+  if (pin !== "") {
+    return signals.latest && _is_newer(signals.latest, pin) ? "project-pin" : "unknown";
+  }
+  if (signals.package_root.split(/[\\/]+/).includes("_npx")) {
+    return "ephemeral";
+  }
+  if (signals.is_global_consumer || GLOBAL_TREE.test(signals.package_root)) {
+    return "global";
+  }
+  return "unknown";
+}
+function _int_or_zero(part) {
+  const trimmed = part.trim();
+  if (/^[+-]?\d+$/.test(trimmed)) {
+    return parseInt(trimmed, 10);
+  }
+  return 0;
+}
+function _is_newer(latest, installed) {
+  const parse = (v) => {
+    const core = v.replace(/^v+/, "").split("-")[0] ?? "";
+    const parts = core.split(".");
+    const out = [];
+    for (const p of parts.slice(0, 3)) {
+      out.push(_int_or_zero(p));
+    }
+    while (out.length < 3) {
+      out.push(0);
+    }
+    return [out[0], out[1], out[2]];
+  };
+  const a = parse(latest);
+  const b = parse(installed);
+  for (let i = 0; i < 3; i += 1) {
+    if (a[i] > b[i]) {
+      return true;
+    }
+    if (a[i] < b[i]) {
+      return false;
+    }
+  }
+  return false;
+}
+
+export {
+  parse_version,
+  compare_versions,
+  node_engine_satisfied,
+  STATE_FILENAME,
+  DEFAULT_STATE_PATH,
+  fetch_latest_from_npm,
+  classify_install_origin,
+  _is_newer
+};

package/dist/cli-delegate/chunk-6E2LDY4F.js

@@ -0,0 +1,27 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+
+// src/scripts/_lib/session_tag.ts
+import { createHash } from "node:crypto";
+var _WS_RE = /\s+/g;
+var SESSION_ID_LEN = 16;
+var SESSION_ID_UNKNOWN = "<unknown>";
+var SESSION_ID_LEGACY = "<legacy>";
+function _strip(s) {
+  return s.replace(/^\s+/u, "").replace(/\s+$/u, "");
+}
+function fingerprint(value) {
+  const normalized = _strip((value || "").replace(_WS_RE, " "));
+  return createHash("sha256").update(normalized, "utf-8").digest("hex");
+}
+function derive_session_tag(session_id) {
+  if (!session_id) {
+    return SESSION_ID_UNKNOWN;
+  }
+  return fingerprint(session_id).slice(0, SESSION_ID_LEN);
+}
+
+export {
+  SESSION_ID_UNKNOWN,
+  SESSION_ID_LEGACY,
+  derive_session_tag
+};

package/dist/cli-delegate/{chunk-XQTPXKFA.js → chunk-6ZD2QZMN.js}

@@ -1,10 +1,15 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
-  readHookStdin
-} from "./chunk-F7DQWYR5.js";
+  SESSION_ID_LEGACY,
+  SESSION_ID_UNKNOWN,
+  derive_session_tag
+} from "./chunk-6E2LDY4F.js";
 import {
   load_agent_settings
-} from "./chunk-H76PHZBI.js";
+} from "./chunk-XLY5G3CM.js";
+import {
+  readHookStdin
+} from "./chunk-RAXQOETZ.js";
 
 // src/scripts/chat_history.ts
 import { createHash } from "node:crypto";
@@ -22,9 +27,6 @@ function _is_replay_mode() {
   return (process.env[REPLAY_ENV_VAR] ?? "").trim() === "1";
 }
 var _WS_RE = /\s+/g;
-var SESSION_ID_LEN = 16;
-var SESSION_ID_UNKNOWN = "<unknown>";
-var SESSION_ID_LEGACY = "<legacy>";
 var AGENT_UNKNOWN = "<unknown>";
 var DEFAULT_TEXT_LIMITS = {
   user: 0,
@@ -225,16 +227,6 @@ function file_path() {
 function _now() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "+00:00");
 }
-function fingerprint(value) {
-  const normalized = _strip((value || "").replace(_WS_RE, " "));
-  return createHash("sha256").update(normalized, "utf-8").digest("hex");
-}
-function derive_session_tag(session_id) {
-  if (!session_id) {
-    return SESSION_ID_UNKNOWN;
-  }
-  return fingerprint(session_id).slice(0, SESSION_ID_LEN);
-}
 function _isFile(p) {
   try {
     return fs.statSync(p).isFile();
@@ -2021,7 +2013,6 @@ if (_invokedDirectly) {
 }
 
 export {
-  derive_session_tag,
   read_entries,
   list_sessions
 };

package/dist/cli-delegate/{chunk-6V5FMA3P.js → chunk-7CEI2YPS.js}

@@ -3,7 +3,7 @@ import {
   settings_layer_states,
   template_defaults,
   user_global_settings_paths
-} from "./chunk-H76PHZBI.js";
+} from "./chunk-XLY5G3CM.js";
 
 // src/scripts/_lib/git_convention.ts
 import { spawnSync } from "node:child_process";