@event4u/agent-config 17.0.0 → 17.1.0

package/README.md

@@ -2,9 +2,10 @@
 
 # Agent Config — every claim machine-checked, including the artifact counts in these badges
 
-[![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config) [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fevent4u-app%2Fagent-config.svg)](https://mcptoplist.com/server/glama%2Fevent4u-app%2Fagent-config) [![downloads](https://img.shields.io/npm/dm/@event4u/agent-config?style=flat-square&label=downloads%2Fmonth&color=orange)](https://www.npmjs.com/package/@event4u/agent-config)
+[![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config) [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fevent4u-app%2Fagent-config.svg)](https://mcptoplist.com/server/glama%2Fevent4u-app%2Fagent-config)
 
 [![Skills](https://img.shields.io/badge/Skills-301-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-122-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-209-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-121-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/) <!-- claim:published-artifact-counts -->
+[![downloads](https://img.shields.io/npm/dm/@event4u/agent-config?style=flat-square&label=downloads%2Fmonth&color=orange)](https://www.npmjs.com/package/@event4u/agent-config)
 
 <sub>**How these are counted** — one canonical counter, `agent-config` → `update_counts --check`, re-derives all six from the tree and fails CI when one is off by one. Two bases are not what the linked directory shows, so they are stated here rather than left to be inferred: **Commands 209** counts every command file **recursively** (the linked directory holds 62 at its top level) and **Rules 122** counts the **source** rules while the linked projection holds 121 — one rule is dormant and is not projected. **Personas 29** excludes the directory README. Counts are of files and directories: none of them measures quality, activation or adoption. <!-- claim:published-artifact-counts --></sub>
 

package/dist/agent-src/contexts/execution/host-capability-manifest.md

@@ -37,7 +37,9 @@ host, never a configuration decision (always-on orchestration, Phase 1):
 2. A live environment probe merged on top: `agent_teams` resolves `true`
    when `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS` is set in the process
    environment — the one host fact this repo can observe about Claude
-   Code's experimental multi-instance Agent Teams feature.
+   Code's experimental multi-instance Agent Teams feature. On `claude` the
+   same flag also sets `worker_resume`: the by-name re-task was observed
+   there only under it (cold-start 1.4, 2.1.306; council 2026-10-22).
 3. `SAFE_DEFAULT` (all `false`) for an unrecognized host or an unset probe.
 
 `resolveHostCapabilities(hostId, override?)` still accepts an optional
@@ -92,7 +94,7 @@ SAFE DEGRADATION, NOT BECAUSE ANYTHING WAS MEASURED.
 
 The seven booleans look alike and are not. `HOST_CAPABILITY_REGISTRY` holds
 exactly one row today, so on every other host **all six** fields are the safe
-default — and `agent_teams` is the only field any live check touches. The name
+default — and `agent_teams` (plus `worker_resume` on `claude`) is the only field any live check touches. The name
 `probeHostCapabilities` says "detected" about values that were mostly asserted
 at authoring time.
 
@@ -136,7 +138,7 @@ A prober that decides for itself what counts as evidence is the inference
 | `status_polling` | a **completed poll returning a state the parent did not already hold**. A poll that returns what the parent knew is not an observation of polling |
 | `separate_quota_pool` | a **child leg continuing across a parent quota condition** — the parent constrained, the child proceeding |
 | `worker_respawn` | **one task continuing across a killed and re-spawned worker, same task id.** Never inferred from the fact that spawning and killing both exist separately |
-| `worker_resume` | **a finished leg re-tasked by name whose next `SubagentStart` carries the same ledger `ref`, and whose first call in that run reads more than half its input from cache.** Never inferred from the host documenting a resume or message tool |
+| `worker_resume` | **a finished leg re-tasked by name whose next `SubagentStart` carries the same ledger `ref`, and whose first call in that run reads more than half its input from cache.** Never inferred from the host documenting a resume or message tool. On `claude` the agent-teams flag stands in for this row: the by-name re-task was observed only under it (2.1.306), so the live probe sets the field from the flag (council 2026-10-22) |
 | `fork_shares_cache` | **a fork whose first call reads more than half its input from cache and whose tool list equals the parent's.** Never inferred from documentation |
 | `structured_ask` | **the host's delivered tool surface, in a real session, carrying (or not carrying) a question-picker tool.** The delivered surface is the observation — never the vendor's documentation, and never another host by analogy. A `false` written from an observed surface is "checked, absent"; omitting the field is "never looked" |
 | `reads_project_mcp_config` | **a server named only in the project-scope config appearing in that host's own tool list.** Never inferred from the host documenting MCP support, which does not say which scope it reads |

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "17.0.0"
+agent_config_version: "17.1.0"
 
 # --- Project identity ---
 project:

package/dist/agent-src/templates/roadmaps.md

@@ -731,7 +731,11 @@ that was never a judgement call.
     (ADR-268 § 10). `resolved by` is one of `evidence`, `agent`,
     `independent:<session or model>`, `council:<record>`, `team:<record>`,
     `owner` — the prefixed forms carry their record, because a resolver
-    with no record is a claim rather than a resolution.
+    with no record is a claim rather than a resolution. The three locked
+    classes (`product-owned`, `business-owned`, `destructive-owned`) take
+    `owner` only; a council answer on one is recorded with `owner` and a
+    decision cell starting `proposed`. A resolved human-only blocker needs
+    a dated `owner` row naming it.
 
     `revisit if` names the condition that reopens the row. Execution reads
     the table **before any step**, and a closed decision is re-asked only

package/dist/cli-delegate/{chunk-IROAQ77A.js → chunk-3PK3VZHB.js}

@@ -1,4 +1,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  getLogPath
+} from "./chunk-W5JXMF2T.js";
 import {
   classifyOwnership
 } from "./chunk-J2SJZICO.js";
@@ -7,14 +10,21 @@ import {
 var SIDECAR_SUFFIX = ".agent-config.new";
 var EXIT_COMPLETED_WITH_CONFLICTS = 3;
 function isLedgerMigration(inputs) {
-  if (!inputs.exists || inputs.force) return false;
+  if (!inputs.exists || inputs.force || inputs.loggedWrite === true) return false;
   if (inputs.ledgerListed !== true) return false;
   if (inputs.onDiskSha256 === null) return false;
   return classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256) === "unknown";
 }
+function logProofApplies(inputs) {
+  if (!inputs.exists || inputs.force || inputs.onDiskSha256 === null) return false;
+  const ownership = classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256);
+  if (ownership === "recorded-modified") return inputs.recordedIsStaged === true;
+  return ownership === "unknown" && isLedgerMigration({ ...inputs, loggedWrite: false });
+}
 function decideDeployWrite(inputs) {
   if (!inputs.exists) return "write";
   if (inputs.force) return "write";
+  if (inputs.loggedWrite === true && logProofApplies(inputs)) return "write";
   const ownership = classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256);
   if (ownership === "recorded-modified") return "preserve";
   if (ownership === "unknown" && isLedgerMigration(inputs)) {
@@ -39,13 +49,97 @@ function foreignSidecarMessage(target, sidecar) {
   return `Refusing to replace ${sidecar}: it already exists with different content and this install cannot show it wrote it. Package content for ${target} was NOT staged. Move or delete that file and re-run, or rerun with --force to replace the managed file instead.`;
 }
 
+// src/install/loggedWrites.ts
+import { gunzipSync } from "node:zlib";
+import { existsSync, readdirSync, readFileSync, realpathSync, statSync } from "node:fs";
+import { basename, dirname, join, relative, resolve, sep } from "node:path";
+var WRITE_MARKER = '"kind":"write"';
+var fileCache = /* @__PURE__ */ new Map();
+var dirRealpaths = /* @__PURE__ */ new Map();
+function canonicalPath(p) {
+  const abs = resolve(p);
+  const dir = dirname(abs);
+  let real = dirRealpaths.get(dir);
+  if (real === void 0) {
+    try {
+      real = realpathSync(dir);
+    } catch {
+      real = dir;
+    }
+    dirRealpaths.set(dir, real);
+  }
+  return join(real, basename(abs));
+}
+function logFiles(logPath) {
+  const dir = dirname(logPath);
+  if (!existsSync(dir)) return [];
+  const stem = basename(logPath).replace(/\.jsonl$/, "");
+  try {
+    return readdirSync(dir).filter((n) => n.startsWith(stem) && (n.endsWith(".jsonl") || n.endsWith(".jsonl.gz"))).map((n) => join(dir, n)).sort();
+  } catch {
+    return [];
+  }
+}
+function writesIn(file) {
+  let stamp;
+  try {
+    const st = statSync(file);
+    stamp = `${st.size}:${Math.trunc(st.mtimeMs)}`;
+  } catch {
+    return [];
+  }
+  const cached = fileCache.get(file);
+  if (cached !== void 0 && cached.stamp === stamp) return cached.entries;
+  let text = "";
+  try {
+    const raw = readFileSync(file);
+    text = (file.endsWith(".gz") ? gunzipSync(raw) : raw).toString("utf8");
+  } catch {
+    text = "";
+  }
+  const entries = [];
+  for (const line of text.split("\n")) {
+    if (!line.includes(WRITE_MARKER)) continue;
+    let entry;
+    try {
+      entry = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (typeof entry.path !== "string" || typeof entry.sha256 !== "string" || entry.sha256 === "") continue;
+    entries.push([canonicalPath(entry.path), entry.sha256]);
+  }
+  fileCache.set(file, { stamp, entries });
+  return entries;
+}
+function loggedWriteDigests(logPath = getLogPath()) {
+  const writes = /* @__PURE__ */ new Map();
+  for (const file of logFiles(logPath)) {
+    for (const [target, sha] of writesIn(file)) {
+      let set = writes.get(target);
+      if (set === void 0) writes.set(target, set = /* @__PURE__ */ new Set());
+      set.add(sha);
+    }
+  }
+  return writes;
+}
+function onlyDeployed(anchor, currentFiles, log) {
+  return (target) => {
+    const rel = relative(resolve(anchor), resolve(target)).split(sep).join("/");
+    if (currentFiles.has(rel)) log(target);
+  };
+}
+function wroteTheseBytes(target, onDiskSha256, writes) {
+  return writes.get(canonicalPath(target))?.has(onDiskSha256) === true;
+}
+
 // src/install/plan.ts
 import { createHash } from "node:crypto";
-import { readFileSync, readdirSync, statSync } from "node:fs";
-import { join, relative, resolve } from "node:path";
+import { readFileSync as readFileSync2, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
+import { join as join2, relative as relative2, resolve as resolve2 } from "node:path";
 function sha256File(path) {
   try {
-    const data = readFileSync(path);
+    const data = readFileSync2(path);
     return createHash("sha256").update(data).digest("hex");
   } catch {
     return null;
@@ -66,15 +160,15 @@ function walkSourceTree(dir) {
 function walkInto(dir, out) {
   let entries;
   try {
-    entries = readdirSync(dir).sort();
+    entries = readdirSync2(dir).sort();
   } catch {
     return;
   }
   for (const name of entries) {
-    const full = join(dir, name);
+    const full = join2(dir, name);
     let isDir;
     try {
-      isDir = statSync(full).isDirectory();
+      isDir = statSync2(full).isDirectory();
     } catch {
       continue;
     }
@@ -94,8 +188,8 @@ function buildInstallPlan(inputs) {
       files = files.filter(source.fileFilter);
     }
     for (const srcFile of files) {
-      const rel = relative(source.srcDir, srcFile);
-      const destPath = resolve(source.destDir, rel);
+      const rel = relative2(source.srcDir, srcFile);
+      const destPath = resolve2(source.destDir, rel);
       bucket.push(
         fileEntry(srcFile, source.kind, {
           hashContent: source.kind !== "bridge"
@@ -126,12 +220,16 @@ function buildInstallPlan(inputs) {
 export {
   EXIT_COMPLETED_WITH_CONFLICTS,
   isLedgerMigration,
+  logProofApplies,
   decideDeployWrite,
   sidecarPathFor,
   preservedFileMessage,
   migrationPreservedMessage,
   conflictSummaryMessage,
   foreignSidecarMessage,
+  loggedWriteDigests,
+  onlyDeployed,
+  wroteTheseBytes,
   sha256File,
   buildInstallPlan
 };

package/dist/cli-delegate/{chunk-2SFOOFJJ.js → chunk-BZJ4Y3CI.js}

@@ -12,7 +12,7 @@ import {
   EGRESS_RULES,
   evaluateMatch,
   shannonEntropy
-} from "./chunk-E6XNBVE4.js";
+} from "./chunk-KR5ZIFPO.js";
 import {
   SRC_SKILLS
 } from "./chunk-YCU3TIXH.js";

package/dist/cli-delegate/{chunk-CAL76ADI.js → chunk-CMZEKSNN.js}

@@ -42,7 +42,7 @@ import {
   readUserPin,
   residualReport,
   runtimeRootFor
-} from "./chunk-GOMILC3O.js";
+} from "./chunk-QBHEI5N4.js";
 import {
   LEGACY_ALL,
   excludedRuleBasenames,
@@ -89,7 +89,7 @@ import {
   readCanaryStatusLine,
   runCensus,
   summaryLine
-} from "./chunk-2SFOOFJJ.js";
+} from "./chunk-BZJ4Y3CI.js";
 import {
   EGRESS_RULES,
   REVIEW_CREDENTIAL_ROWS,
@@ -101,7 +101,7 @@ import {
   replaceSpans,
   resolveOverlaps,
   vendorPrefix
-} from "./chunk-E6XNBVE4.js";
+} from "./chunk-KR5ZIFPO.js";
 import {
   classifyFileState,
   classifyOwnership,
@@ -468,7 +468,7 @@ function censusRuleDir(dir) {
 }
 
 // src/scripts/cache_realization_report.ts
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import * as fs7 from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import * as path12 from "node:path";
@@ -809,6 +809,7 @@ if (process.argv[1] !== void 0) {
 }
 
 // src/scripts/hooks/subagent_ledger_hook.ts
+import { execFileSync } from "node:child_process";
 import * as crypto from "node:crypto";
 import * as fs5 from "node:fs";
 import * as path10 from "node:path";
@@ -1069,6 +1070,41 @@ function appendLedgerLine(root, ts, line) {
   fs5.appendFileSync(file, `${JSON.stringify(line)}
 `, "utf8");
 }
+var INDEX_SUBDIR = "index";
+function writeIndexEntry(root, ts, key, value) {
+  if (is_replay_mode()) return;
+  const dir = path10.join(root, LEDGER_DIR, INDEX_SUBDIR, ts.slice(0, 7));
+  fs5.mkdirSync(dir, { recursive: true });
+  const tmp = path10.join(dir, `.${key}.${process.pid}.tmp`);
+  try {
+    fs5.writeFileSync(tmp, value, "utf8");
+    fs5.renameSync(tmp, path10.join(dir, key));
+  } finally {
+    fs5.rmSync(tmp, { force: true });
+  }
+}
+function headOf(dir) {
+  try {
+    const env = Object.fromEntries(Object.entries(process.env).filter(([k]) => !k.startsWith("GIT_")));
+    return execFileSync("git", ["-C", dir, "rev-parse", "HEAD"], { encoding: "utf8", timeout: 2e3, stdio: ["ignore", "pipe", "ignore"], env }).trim() || null;
+  } catch {
+    return null;
+  }
+}
+function stateStamp(cwd) {
+  let epoch = null;
+  try {
+    epoch = fs5.statSync(fileURLToPath(import.meta.url)).mtimeMs;
+  } catch {
+  }
+  return typeof cwd === "string" && cwd ? { head: headOf(cwd), cwd_key: refFor(cwd), epoch } : { head: null, cwd_key: null, epoch };
+}
+function stopIndexKey(sessionId, ref) {
+  return refFor(`subagent-stop\0${sessionId}\0${ref}`);
+}
+function recordStopIndex(root, ts, sessionId, ref) {
+  writeIndexEntry(root, ts, stopIndexKey(sessionId, ref), "");
+}
 var WALL_CLOCK_ARMS_MS = [
   { label: "5m", ms: 5 * 60 * 1e3 },
   { label: "15m", ms: 15 * 60 * 1e3 },
@@ -1236,8 +1272,13 @@ function handleStop(root, payload, nowIso, sessionId) {
     // Beside the count, never instead of it: the count says how wrong the
     // candidate was, this says whether it was aimed at the envelope.
     envelope_field_hits: parse3.field_hits,
-    concurrent_open: countOpen(root)
+    concurrent_open: countOpen(root),
+    ...stateStamp(payload["cwd"])
   });
+  try {
+    if (sessionId !== null) recordStopIndex(root, nowIso, sessionId, ref);
+  } catch {
+  }
 }
 function processEnvelope(envelope, consumerRoot) {
   try {
@@ -1827,7 +1868,7 @@ function encodeProjectPath(cwd) {
 }
 function listGitWorktrees(cwd) {
   try {
-    const out = execFileSync("git", ["worktree", "list", "--porcelain"], { cwd, encoding: "utf-8", timeout: 1e4 });
+    const out = execFileSync2("git", ["worktree", "list", "--porcelain"], { cwd, encoding: "utf-8", timeout: 1e4 });
     const paths = [];
     for (const line of out.split("\n")) {
       if (line.startsWith("worktree ")) paths.push(line.slice("worktree ".length).trim());
@@ -1900,7 +1941,7 @@ function computeWorktreeFragmentation(projectsRoot, worktreePaths, maxAgeDays) {
 }
 function hostVersion() {
   try {
-    const out = execFileSync("claude", ["--version"], { encoding: "utf-8", timeout: 5e3 }).trim();
+    const out = execFileSync2("claude", ["--version"], { encoding: "utf-8", timeout: 5e3 }).trim();
     return out.length > 0 ? out : "unknown";
   } catch {
     return "unknown";
@@ -8060,9 +8101,10 @@ var CliClient = class extends ExternalAIClient {
   _cli_calls_path;
   /** Attribution label for every booking this client makes. */
   _consumer;
-  /** The session the last answered call ran in; `resumeNext` continues it once, non-blind only. */
+  /** The session the last answered call ran in; `resumeNext` continues it once, never while `blind`. */
   lastSession = null;
   resumeNext = null;
+  blind = false;
   static _AUTH_FAILURE_PATTERNS = [
     "authentication",
     "unauthorized",
@@ -8435,7 +8477,7 @@ var AnthropicCliClient = class extends CliClient {
     void max_tokens;
     return [
       this.binary,
-      ...seatResumeArgs(this.name, this.resumeNext, { blind: false, now_ms: Date.now() }),
+      ...seatResumeArgs(this.name, this.resumeNext, { blind: this.blind, now_ms: Date.now() }),
       "--print",
       // The seat never needs the user environment; only a version the light
       // launch was probed on gets the flag (`LIGHT_LAUNCH_PROBES`).
@@ -8538,7 +8580,7 @@ var OpenAICliClient = class extends CliClient {
     void user_prompt;
     void max_tokens;
     const modelArgs = this.model === OPENAI_CLI_VENDOR_DEFAULT ? [] : ["--model", this.model];
-    const resume = seatResumeArgs(this.name, this.resumeNext, { blind: false, now_ms: Date.now() });
+    const resume = seatResumeArgs(this.name, this.resumeNext, { blind: this.blind, now_ms: Date.now() });
     const bound = resume.length === 0 ? boundFor("openai") : resumeBound(boundFor("openai"));
     return [this.binary, "exec", ...resume, "--json", "--skip-git-repo-check", ...bound, ...modelArgs, "-"];
   }

package/dist/cli-delegate/{chunk-ESUNQ5XR.js → chunk-E3CFULNX.js}

@@ -2,11 +2,15 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   buildInstallPlan,
   isLedgerMigration,
-  sha256File
-} from "./chunk-IROAQ77A.js";
+  logProofApplies,
+  loggedWriteDigests,
+  sha256File,
+  sidecarPathFor,
+  wroteTheseBytes
+} from "./chunk-3PK3VZHB.js";
 import {
   detectToolPresence
-} from "./chunk-A4QJ6ENT.js";
+} from "./chunk-W5JXMF2T.js";
 import {
   classifyOwnership,
   ledgerListedPaths,
@@ -23,10 +27,11 @@ import { existsSync } from "node:fs";
 function isJsonTarget(entry) {
   return entry.kind === "deployed" && entry.path.endsWith(".json");
 }
-function computeConflicts(plan, recordedOverride) {
+function computeConflicts(plan, recordedOverride, loggedOverride) {
   if (plan.policy.force) return [];
   const recorded = recordedOverride ?? recordedHashesWithLedger(plan.root);
   let ledgerFiles = null;
+  let logged;
   const ledgerLists = (p) => {
     ledgerFiles ??= ledgerListedPaths();
     return ledgerFiles.has(p);
@@ -40,6 +45,19 @@ function computeConflicts(plan, recordedOverride) {
       const onDisk = sha256File(entry.path);
       const ownership = classifyOwnership(recorded.get(entry.path), onDisk);
       if (ownership === "recorded-unchanged") continue;
+      const recordedSha = recorded.get(entry.path);
+      const unproven = {
+        exists: true,
+        recordedSha256: recordedSha,
+        onDiskSha256: onDisk,
+        force: false,
+        ledgerListed: ledgerLists(entry.path),
+        recordedIsStaged: typeof recordedSha === "string" && recordedSha === recorded.get(sidecarPathFor(entry.path))
+      };
+      if (logProofApplies(unproven)) {
+        logged ??= loggedOverride ?? loggedWriteDigests();
+        if (wroteTheseBytes(entry.path, onDisk, logged)) continue;
+      }
       if (ownership === "unknown" && plan.policy.knownPaths.has(entry.path)) continue;
       const migration = ownership === "unknown" && isLedgerMigration({
         exists: true,

package/dist/cli-delegate/{chunk-GOMILC3O.js → chunk-QBHEI5N4.js}

@@ -645,7 +645,8 @@ function probeHostCapabilities(hostId) {
   const base = resolveHostCapabilities(hostId);
   const flag = process2.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS;
   const probedAgentTeams = typeof flag === "string" && flag !== "";
-  return { ...base, agent_teams: base.agent_teams || probedAgentTeams };
+  const probedResume = probedAgentTeams && hostId === "claude";
+  return { ...base, agent_teams: base.agent_teams || probedAgentTeams, worker_resume: base.worker_resume || probedResume };
 }
 var CAPABILITY_FIELDS = [
   "subagent_spawn",
@@ -667,9 +668,9 @@ function describeHostCapabilities(hostId) {
   const probedAgentTeams = typeof flag === "string" && flag !== "";
   const sources = {};
   for (const field of CAPABILITY_FIELDS) {
-    if (row !== void 0 && typeof row[field] === "boolean") {
+    if (row !== void 0 && typeof row[field] === "boolean" && !(row[field] === false && manifest[field] === true)) {
       sources[field] = "registry";
-    } else if (field === "agent_teams" && probedAgentTeams) {
+    } else if ((field === "agent_teams" || field === "worker_resume" && hostId === "claude") && probedAgentTeams) {
       sources[field] = "live-probe";
     } else {
       sources[field] = "default";

package/dist/cli-delegate/{chunk-SIOMDAKL.js → chunk-VYZGJLCA.js}

@@ -2,7 +2,7 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   ZodFirstPartyTypeKind,
   settingsSchema
-} from "./chunk-4SHNERBL.js";
+} from "./chunk-XIAPY44N.js";
 import {
   GLOBAL_DEPLOY_SOURCES,
   RULE_SOURCE_REL,
@@ -23,10 +23,14 @@ import {
   decideDeployWrite,
   foreignSidecarMessage,
   isLedgerMigration,
+  logProofApplies,
+  loggedWriteDigests,
   migrationPreservedMessage,
+  onlyDeployed,
   preservedFileMessage,
-  sidecarPathFor
-} from "./chunk-IROAQ77A.js";
+  sidecarPathFor,
+  wroteTheseBytes
+} from "./chunk-3PK3VZHB.js";
 import {
   main
 } from "./chunk-F7HLSW6P.js";
@@ -40,11 +44,12 @@ import {
   ruleBody,
   splitFrontmatter,
   split_frontmatter
-} from "./chunk-JHMMWNJ2.js";
+} from "./chunk-YHAPONWV.js";
 import {
   SCOPE_DETECT_AI_DIRS,
-  SCOPE_DETECT_MANIFESTS
-} from "./chunk-A4QJ6ENT.js";
+  SCOPE_DETECT_MANIFESTS,
+  getLogPath
+} from "./chunk-W5JXMF2T.js";
 import {
   FINDER_NAME,
   _read_settings,
@@ -59,7 +64,7 @@ import {
   printResiduals,
   probeHostCapabilities,
   removeCodexFinder
-} from "./chunk-GOMILC3O.js";
+} from "./chunk-QBHEI5N4.js";
 import {
   LEGACY_ALL,
   compute_active_pack_ids,
@@ -1296,6 +1301,7 @@ function createConflictTracker(host) {
     root: null,
     recorded: null,
     ledgerFiles: null,
+    logged: null,
     preserved: [],
     migrated: /* @__PURE__ */ new Set(),
     staged: /* @__PURE__ */ new Map()
@@ -1394,6 +1400,7 @@ function createConflictTracker(host) {
       conflictState.root = root;
       conflictState.recorded = null;
       conflictState.ledgerFiles = null;
+      conflictState.logged = null;
       conflictState.preserved = [];
       conflictState.migrated = /* @__PURE__ */ new Set();
       conflictState.staged = /* @__PURE__ */ new Map();
@@ -1406,13 +1413,17 @@ function createConflictTracker(host) {
      */
     resolve(target, force, would) {
       const exists = pathExists(target);
-      const base = {
+      const recordedSha256 = exists ? recordedHashFor(target) : void 0;
+      const unproven = {
         exists,
-        recordedSha256: exists ? recordedHashFor(target) : void 0,
+        recordedSha256,
         onDiskSha256: exists ? sha256OfFile(target) : null,
         force,
-        ledgerListed: exists && ledgerLists(target)
+        ledgerListed: exists && ledgerLists(target),
+        recordedIsStaged: typeof recordedSha256 === "string" && recordedSha256 === recordedHashFor(sidecarPathFor(target))
       };
+      const loggedWrite = logProofApplies(unproven) && wroteTheseBytes(target, unproven.onDiskSha256, conflictState.logged ??= loggedWriteDigests());
+      const base = { ...unproven, loggedWrite };
       const migrating = isLedgerMigration(base);
       const decision = decideDeployWrite(
         migrating ? { ...base, packagedSha256: wouldWriteDigest(target, would) } : base
@@ -2460,8 +2471,8 @@ function _withPreservedKeys(rendered, original) {
   }
   return ["---", ...keep, "---", "", rendered].join("\n");
 }
-function rewriteAndReport(rulesDir, quiet, info2, warn2, wrappers, preserved = /* @__PURE__ */ new Set()) {
-  const result = rewriteClaudeRules(rulesDir, preserved);
+function rewriteAndReport(rulesDir, quiet, info2, warn2, wrappers, preserved = /* @__PURE__ */ new Set(), onWrite) {
+  const result = rewriteClaudeRules(rulesDir, preserved, onWrite);
   if (wrappers && !quiet) {
     if (wrappers.wrapped.length > 0) {
       info2(
@@ -2515,7 +2526,7 @@ function renderClaudeRule(sourceText) {
   lines.push(pyRstrip(body) + "\n");
   return { text: lines.join("\n"), globs: plan.globs, dropped: plan.dropped };
 }
-function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
+function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set(), onWrite) {
   const result = { rewritten: 0, scoped: [], dropped: [], failed: [] };
   let entries;
   try {
@@ -2553,6 +2564,7 @@ function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
         });
         continue;
       }
+      onWrite?.(full);
       result.rewritten += 1;
     }
     const stem = name.slice(0, -3);
@@ -2898,6 +2910,7 @@ function thinInstalledRuleLayer(opts) {
     try {
       if (next !== installed) {
         fs16.writeFileSync(target, next, "utf-8");
+        opts.onWrite?.(target);
         rewritten += 1;
       }
       thinned += 1;
@@ -4493,30 +4506,6 @@ function detect_module_roots(project_root) {
   return [...high, ...medium];
 }
 
-// src/install/paths.ts
-import { homedir as homedir8, tmpdir as tmpdir2 } from "node:os";
-import { join as join18 } from "node:path";
-var INSTALL_ROOT_SUBPATH = ".event4u/agent-config";
-var INSTALL_LOG_FILENAME = "install-log.jsonl";
-function resolveHome(home) {
-  if (home && home.length > 0) {
-    return home;
-  }
-  const fromOs = homedir8();
-  if (!fromOs) {
-    throw new Error(
-      "Cannot resolve home directory \u2014 both $HOME (POSIX) and $USERPROFILE (Windows) are unset."
-    );
-  }
-  return fromOs;
-}
-function getInstallRoot(home) {
-  return join18(resolveHome(home), INSTALL_ROOT_SUBPATH);
-}
-function getLogPath(home) {
-  return join18(getInstallRoot(home), INSTALL_LOG_FILENAME);
-}
-
 // src/scripts/install.ts
 var _HERE = fileURLToPath2(import.meta.url);
 var SystemExitError = class extends Error {
@@ -6600,7 +6589,8 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
         info,
         warn,
         res,
-        preserved_now
+        preserved_now,
+        onlyDeployed(anchor, current_files, (p) => _log_tx_entry("write", p))
       );
       deployClaudeCarrier({
         packageRoot: package_root,
@@ -6610,7 +6600,7 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
         warn,
         userPin: state.FULL_PIN,
         wantsThin: installerThinsHost(tool_id, { packageRoot: package_root }),
-        thin: (bodyLinkRoot) => describeThinInstalledLayer(thinInstalledRuleLayer({ rulesDir: path18.join(anchor, "rules"), packageRoot: package_root, preserved: preserved_now, bodyLinkRoot }))
+        thin: (bodyLinkRoot) => describeThinInstalledLayer(thinInstalledRuleLayer({ rulesDir: path18.join(anchor, "rules"), packageRoot: package_root, preserved: preserved_now, bodyLinkRoot, onWrite: onlyDeployed(anchor, current_files, (p) => _log_tx_entry("write", p)) }))
       });
       if (!state.QUIET) for (const l of installReceiptBudgetLines(package_root, void 0, { thisDeploy: /* @__PURE__ */ new Map([[anchor, current_files]]) })) info(l);
     }