@event4u/agent-config 17.0.0 → 17.1.0

package/dist/install/install.mjs

@@ -4001,10 +4001,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep10, value } = collItem;
+        const { start, key, sep: sep11, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep10?.[0],
+          next: key ?? sep11?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -4018,7 +4018,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep10) {
+          if (!keyProps.anchor && !keyProps.tag && !sep11) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -4042,7 +4042,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep10 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep11 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -4058,7 +4058,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep10, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep11, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -4149,7 +4149,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep10 = "";
+        let sep11 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -4163,13 +4163,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep10 + cb;
-              sep10 = "";
+                comment += sep11 + cb;
+              sep11 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep10 += source;
+                sep11 += source;
               hasSpace = true;
               break;
             default:
@@ -4212,18 +4212,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i = 0; i < fc.items.length; ++i) {
         const collItem = fc.items[i];
-        const { start, key, sep: sep10, value } = collItem;
+        const { start, key, sep: sep11, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep10?.[0],
+          next: key ?? sep11?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep10 && !value) {
+          if (!props.anchor && !props.tag && !sep11 && !value) {
             if (i === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i < fc.items.length - 1)
@@ -4277,8 +4277,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep10 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep10, null, props, onError);
+        if (!isMap && !sep11 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep11, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -4290,7 +4290,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep10 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep11 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -4301,8 +4301,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep10)
-                for (const st of sep10) {
+              if (sep11)
+                for (const st of sep11) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -4319,7 +4319,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep10, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep11, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -4499,7 +4499,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i + 1;
       }
       let value = "";
-      let sep10 = "";
+      let sep11 = "";
       let prevMoreIndented = false;
       for (let i = 0; i < contentStart; ++i)
         value += lines[i][0].slice(trimIndent) + "\n";
@@ -4516,24 +4516,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep10 + indent.slice(trimIndent) + content;
-          sep10 = "\n";
+          value += sep11 + indent.slice(trimIndent) + content;
+          sep11 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep10 === " ")
-            sep10 = "\n";
-          else if (!prevMoreIndented && sep10 === "\n")
-            sep10 = "\n\n";
-          value += sep10 + indent.slice(trimIndent) + content;
-          sep10 = "\n";
+          if (sep11 === " ")
+            sep11 = "\n";
+          else if (!prevMoreIndented && sep11 === "\n")
+            sep11 = "\n\n";
+          value += sep11 + indent.slice(trimIndent) + content;
+          sep11 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep10 === "\n")
+          if (sep11 === "\n")
             value += "\n";
           else
-            sep10 = "\n";
+            sep11 = "\n";
         } else {
-          value += sep10 + content;
-          sep10 = " ";
+          value += sep11 + content;
+          sep11 = " ";
           prevMoreIndented = false;
         }
       }
@@ -4715,25 +4715,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep10 = " ";
+      let sep11 = " ";
       let pos = first.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep10 === "\n")
-            res += sep10;
+          if (sep11 === "\n")
+            res += sep11;
           else
-            sep10 = "\n";
+            sep11 = "\n";
         } else {
-          res += sep10 + match[1];
-          sep10 = " ";
+          res += sep11 + match[1];
+          sep11 = " ";
         }
         pos = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source);
-      return res + sep10 + (match?.[1] ?? "");
+      return res + sep11 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError) {
       let res = "";
@@ -5543,14 +5543,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep10, value }) {
+    function stringifyItem({ start, key, sep: sep11, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep10)
-        for (const st of sep10)
+      if (sep11)
+        for (const st of sep11)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -6717,18 +6717,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep10;
+          let sep11;
           if (scalar.end) {
-            sep10 = scalar.end;
-            sep10.push(this.sourceToken);
+            sep11 = scalar.end;
+            sep11.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep10 = [this.sourceToken];
+            sep11 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep10 }]
+            items: [{ start, key: scalar, sep: sep11 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -6881,15 +6881,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep10 = it.sep;
-                  sep10.push(this.sourceToken);
+                  const sep11 = it.sep;
+                  sep11.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep10 }]
+                    items: [{ start: start2, key, sep: sep11 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -7083,13 +7083,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep10 = fc.end.splice(1, fc.end.length);
-            sep10.push(this.sourceToken);
+            const sep11 = fc.end.splice(1, fc.end.length);
+            sep11.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep10 }]
+              items: [{ start, key: fc, sep: sep11 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -8482,7 +8482,8 @@ function probeHostCapabilities(hostId) {
   const base = resolveHostCapabilities(hostId);
   const flag = process2.env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS;
   const probedAgentTeams = typeof flag === "string" && flag !== "";
-  return { ...base, agent_teams: base.agent_teams || probedAgentTeams };
+  const probedResume = probedAgentTeams && hostId === "claude";
+  return { ...base, agent_teams: base.agent_teams || probedAgentTeams, worker_resume: base.worker_resume || probedResume };
 }
 var CAPABILITY_FIELDS = [
   "subagent_spawn",
@@ -8504,9 +8505,9 @@ function describeHostCapabilities(hostId) {
   const probedAgentTeams = typeof flag === "string" && flag !== "";
   const sources = {};
   for (const field of CAPABILITY_FIELDS) {
-    if (row !== void 0 && typeof row[field] === "boolean") {
+    if (row !== void 0 && typeof row[field] === "boolean" && !(row[field] === false && manifest[field] === true)) {
       sources[field] = "registry";
-    } else if (field === "agent_teams" && probedAgentTeams) {
+    } else if ((field === "agent_teams" || field === "worker_resume" && hostId === "claude") && probedAgentTeams) {
       sources[field] = "live-probe";
     } else {
       sources[field] = "default";
@@ -10091,14 +10092,21 @@ function recordedHashesWithLedger(root, env) {
 var SIDECAR_SUFFIX = ".agent-config.new";
 var EXIT_COMPLETED_WITH_CONFLICTS = 3;
 function isLedgerMigration(inputs) {
-  if (!inputs.exists || inputs.force) return false;
+  if (!inputs.exists || inputs.force || inputs.loggedWrite === true) return false;
   if (inputs.ledgerListed !== true) return false;
   if (inputs.onDiskSha256 === null) return false;
   return classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256) === "unknown";
 }
+function logProofApplies(inputs) {
+  if (!inputs.exists || inputs.force || inputs.onDiskSha256 === null) return false;
+  const ownership = classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256);
+  if (ownership === "recorded-modified") return inputs.recordedIsStaged === true;
+  return ownership === "unknown" && isLedgerMigration({ ...inputs, loggedWrite: false });
+}
 function decideDeployWrite(inputs) {
   if (!inputs.exists) return "write";
   if (inputs.force) return "write";
+  if (inputs.loggedWrite === true && logProofApplies(inputs)) return "write";
   const ownership = classifyOwnership(inputs.recordedSha256, inputs.onDiskSha256);
   if (ownership === "recorded-modified") return "preserve";
   if (ownership === "unknown" && isLedgerMigration(inputs)) {
@@ -10123,12 +10131,125 @@ function foreignSidecarMessage(target, sidecar) {
   return `Refusing to replace ${sidecar}: it already exists with different content and this install cannot show it wrote it. Package content for ${target} was NOT staged. Move or delete that file and re-run, or rerun with --force to replace the managed file instead.`;
 }
 
+// src/install/loggedWrites.ts
+import { gunzipSync } from "node:zlib";
+import { existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync10, realpathSync as realpathSync3, statSync as statSync4 } from "node:fs";
+import { basename as basename3, dirname as dirname4, join as join12, relative as relative2, resolve as resolve4, sep as sep3 } from "node:path";
+
+// src/install/paths.ts
+import { homedir as homedir6, tmpdir } from "node:os";
+import { join as join11 } from "node:path";
+var INSTALL_ROOT_SUBPATH = ".event4u/agent-config";
+var INSTALL_LOG_FILENAME = "install-log.jsonl";
+function resolveHome(home) {
+  if (home && home.length > 0) {
+    return home;
+  }
+  const fromOs = homedir6();
+  if (!fromOs) {
+    throw new Error(
+      "Cannot resolve home directory \u2014 both $HOME (POSIX) and $USERPROFILE (Windows) are unset."
+    );
+  }
+  return fromOs;
+}
+function getInstallRoot(home) {
+  return join11(resolveHome(home), INSTALL_ROOT_SUBPATH);
+}
+function getLogPath(home) {
+  const configHome = home ? void 0 : process.env["EVENT4U_CONFIG_HOME"];
+  if (configHome) return join11(configHome, INSTALL_LOG_FILENAME);
+  return join11(getInstallRoot(home), INSTALL_LOG_FILENAME);
+}
+
+// src/install/loggedWrites.ts
+var WRITE_MARKER = '"kind":"write"';
+var fileCache = /* @__PURE__ */ new Map();
+var dirRealpaths = /* @__PURE__ */ new Map();
+function canonicalPath(p) {
+  const abs = resolve4(p);
+  const dir = dirname4(abs);
+  let real = dirRealpaths.get(dir);
+  if (real === void 0) {
+    try {
+      real = realpathSync3(dir);
+    } catch {
+      real = dir;
+    }
+    dirRealpaths.set(dir, real);
+  }
+  return join12(real, basename3(abs));
+}
+function logFiles(logPath) {
+  const dir = dirname4(logPath);
+  if (!existsSync5(dir)) return [];
+  const stem = basename3(logPath).replace(/\.jsonl$/, "");
+  try {
+    return readdirSync5(dir).filter((n) => n.startsWith(stem) && (n.endsWith(".jsonl") || n.endsWith(".jsonl.gz"))).map((n) => join12(dir, n)).sort();
+  } catch {
+    return [];
+  }
+}
+function writesIn(file) {
+  let stamp;
+  try {
+    const st = statSync4(file);
+    stamp = `${st.size}:${Math.trunc(st.mtimeMs)}`;
+  } catch {
+    return [];
+  }
+  const cached = fileCache.get(file);
+  if (cached !== void 0 && cached.stamp === stamp) return cached.entries;
+  let text = "";
+  try {
+    const raw = readFileSync10(file);
+    text = (file.endsWith(".gz") ? gunzipSync(raw) : raw).toString("utf8");
+  } catch {
+    text = "";
+  }
+  const entries = [];
+  for (const line of text.split("\n")) {
+    if (!line.includes(WRITE_MARKER)) continue;
+    let entry;
+    try {
+      entry = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (typeof entry.path !== "string" || typeof entry.sha256 !== "string" || entry.sha256 === "") continue;
+    entries.push([canonicalPath(entry.path), entry.sha256]);
+  }
+  fileCache.set(file, { stamp, entries });
+  return entries;
+}
+function loggedWriteDigests(logPath = getLogPath()) {
+  const writes = /* @__PURE__ */ new Map();
+  for (const file of logFiles(logPath)) {
+    for (const [target, sha] of writesIn(file)) {
+      let set = writes.get(target);
+      if (set === void 0) writes.set(target, set = /* @__PURE__ */ new Set());
+      set.add(sha);
+    }
+  }
+  return writes;
+}
+function onlyDeployed(anchor, currentFiles, log) {
+  return (target) => {
+    const rel = relative2(resolve4(anchor), resolve4(target)).split(sep3).join("/");
+    if (currentFiles.has(rel)) log(target);
+  };
+}
+function wroteTheseBytes(target, onDiskSha256, writes) {
+  return writes.get(canonicalPath(target))?.has(onDiskSha256) === true;
+}
+
 // src/install/conflictTracker.ts
 function createConflictTracker(host) {
   const conflictState = {
     root: null,
     recorded: null,
     ledgerFiles: null,
+    logged: null,
     preserved: [],
     migrated: /* @__PURE__ */ new Set(),
     staged: /* @__PURE__ */ new Map()
@@ -10227,6 +10348,7 @@ function createConflictTracker(host) {
       conflictState.root = root;
       conflictState.recorded = null;
       conflictState.ledgerFiles = null;
+      conflictState.logged = null;
       conflictState.preserved = [];
       conflictState.migrated = /* @__PURE__ */ new Set();
       conflictState.staged = /* @__PURE__ */ new Map();
@@ -10239,13 +10361,17 @@ function createConflictTracker(host) {
      */
     resolve(target, force, would) {
       const exists = pathExists(target);
-      const base = {
+      const recordedSha256 = exists ? recordedHashFor(target) : void 0;
+      const unproven = {
         exists,
-        recordedSha256: exists ? recordedHashFor(target) : void 0,
+        recordedSha256,
         onDiskSha256: exists ? sha256OfFile(target) : null,
         force,
-        ledgerListed: exists && ledgerLists(target)
+        ledgerListed: exists && ledgerLists(target),
+        recordedIsStaged: typeof recordedSha256 === "string" && recordedSha256 === recordedHashFor(sidecarPathFor(target))
       };
+      const loggedWrite = logProofApplies(unproven) && wroteTheseBytes(target, unproven.onDiskSha256, conflictState.logged ??= loggedWriteDigests());
+      const base = { ...unproven, loggedWrite };
       const migrating = isLedgerMigration(base);
       const decision = decideDeployWrite(
         migrating ? { ...base, packagedSha256: wouldWriteDigest(target, would) } : base
@@ -10302,9 +10428,9 @@ function createConflictTracker(host) {
 
 // src/install/manifestFiles.ts
 var YAML3 = __toESM(require_dist(), 1);
-import { existsSync as existsSync5, readFileSync as readFileSync10 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join12, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync11 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { isAbsolute as isAbsolute3, join as join14, resolve as resolve6 } from "node:path";
 function fileEntry(p, kind, hashContent) {
   return { path: p, kind, sha256: hashContent ? sha256OfFile(p) : null };
 }
@@ -10327,28 +10453,28 @@ function filesByToolFromBridges(tools, projectRoot, scope, bridgeMarker) {
   for (const toolId of [...tools].sort()) {
     const marker = bridgeMarker(toolId, scope);
     if (!marker) continue;
-    const markerPath = isAbsolute3(marker) ? marker : join12(projectRoot, marker);
+    const markerPath = isAbsolute3(marker) ? marker : join14(projectRoot, marker);
     out[toolId] = [fileEntry(markerPath, "bridge", false)];
   }
   return out;
 }
 function expanduser6(p) {
-  if (p === "~") return homedir6();
+  if (p === "~") return homedir7();
   if (p.startsWith("~/") || process.platform === "win32" && p.startsWith("~\\")) {
-    return join12(homedir6(), p.slice(2));
+    return join14(homedir7(), p.slice(2));
   }
   return p;
 }
 function resolveRecorded(raw, projectRoot) {
   const expanded = expanduser6(raw);
-  return isAbsolute3(expanded) ? resolve5(expanded) : resolve5(projectRoot, expanded);
+  return isAbsolute3(expanded) ? resolve6(expanded) : resolve6(projectRoot, expanded);
 }
 function readRecordedByTool(manifestPath, projectRoot) {
   const out = /* @__PURE__ */ new Map();
-  if (!existsSync5(manifestPath)) return out;
+  if (!existsSync6(manifestPath)) return out;
   let doc;
   try {
-    doc = YAML3.parse(readFileSync10(manifestPath, "utf8"));
+    doc = YAML3.parse(readFileSync11(manifestPath, "utf8"));
   } catch {
     return out;
   }
@@ -10402,7 +10528,7 @@ function reconcileToolFiles(fresh, prior, preserved) {
   const seen = /* @__PURE__ */ new Set();
   for (const entry of fresh) {
     const raw = entry["path"];
-    if (typeof raw === "string") seen.add(resolve5(expanduser6(raw)));
+    if (typeof raw === "string") seen.add(resolve6(expanduser6(raw)));
   }
   const out = [...fresh];
   for (const file of prior.files) {
@@ -10418,7 +10544,7 @@ function preservedIndex(preservedTargets, staged) {
   for (const target of preservedTargets) {
     const sidecar = sidecarPathFor(target);
     const sha = staged.get(sidecar) ?? null;
-    out.set(resolve5(target), {
+    out.set(resolve6(target), {
       sha256: sha,
       sidecar: sha === null ? null : { path: sidecar, kind: "sidecar", sha256: sha }
     });
@@ -11393,17 +11519,17 @@ import {
   fsyncSync,
   mkdirSync as mkdirSync6,
   openSync as openSync3,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync17,
   renameSync as renameSync6,
   unlinkSync as unlinkSync6,
   writeSync
 } from "node:fs";
-import { dirname as dirname7, join as join19 } from "node:path";
+import { dirname as dirname8, join as join21 } from "node:path";
 function atomicWriteFile(target, data, options = {}) {
   const mode = options.mode ?? 420;
-  const parent = dirname7(target);
+  const parent = dirname8(target);
   mkdirSync6(parent, { recursive: true });
-  const tmp = join19(parent, `.tmp.${process.pid}.${randSuffix()}`);
+  const tmp = join21(parent, `.tmp.${process.pid}.${randSuffix()}`);
   let fd = null;
   try {
     fd = openSync3(tmp, "w", mode);
@@ -11430,12 +11556,12 @@ function atomicWriteFile(target, data, options = {}) {
 function atomicAppendLine(target, line) {
   let existing = "";
   try {
-    existing = readFileSync16(target, "utf8");
+    existing = readFileSync17(target, "utf8");
   } catch {
     existing = "";
   }
-  const sep10 = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
-  atomicWriteFile(target, `${existing}${sep10}${line}
+  const sep11 = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
+  atomicWriteFile(target, `${existing}${sep11}${line}
 `);
 }
 function randSuffix() {
@@ -13081,8 +13207,8 @@ function ruleFileArrives(sourcePath, scope) {
   if (!sourcePath.endsWith(".md")) {
     return true;
   }
-  const basename9 = path25.basename(sourcePath);
-  if (COMPAT_ALWAYS_EXCLUDED.includes(basename9)) {
+  const basename10 = path25.basename(sourcePath);
+  if (COMPAT_ALWAYS_EXCLUDED.includes(basename10)) {
     return false;
   }
   return rule_in_scope(sourcePath, scope.workspaces, scope.packs, scope.roles ?? null);
@@ -13293,8 +13419,8 @@ function _withPreservedKeys(rendered, original) {
   }
   return ["---", ...keep, "---", "", rendered].join("\n");
 }
-function rewriteAndReport(rulesDir, quiet, info2, warn2, wrappers, preserved = /* @__PURE__ */ new Set()) {
-  const result = rewriteClaudeRules(rulesDir, preserved);
+function rewriteAndReport(rulesDir, quiet, info2, warn2, wrappers, preserved = /* @__PURE__ */ new Set(), onWrite) {
+  const result = rewriteClaudeRules(rulesDir, preserved, onWrite);
   if (wrappers && !quiet) {
     if (wrappers.wrapped.length > 0) {
       info2(
@@ -13348,7 +13474,7 @@ function renderClaudeRule(sourceText) {
   lines.push(pyRstrip(body) + "\n");
   return { text: lines.join("\n"), globs: plan.globs, dropped: plan.dropped };
 }
-function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
+function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set(), onWrite) {
   const result = { rewritten: 0, scoped: [], dropped: [], failed: [] };
   let entries;
   try {
@@ -13386,6 +13512,7 @@ function rewriteClaudeRules(rulesDir, preserved = /* @__PURE__ */ new Set()) {
         });
         continue;
       }
+      onWrite?.(full);
       result.rewritten += 1;
     }
     const stem = name.slice(0, -3);
@@ -14041,6 +14168,7 @@ function thinInstalledRuleLayer(opts) {
     try {
       if (next !== installed) {
         fs33.writeFileSync(target, next, "utf-8");
+        opts.onWrite?.(target);
         rewritten += 1;
       }
       thinned += 1;
@@ -14483,8 +14611,8 @@ function installerThinsHost(_hostId, _opts = {}) {
 }
 
 // src/install/wizard-plan.ts
-import { homedir as homedir14 } from "node:os";
-import { isAbsolute as isAbsolute7, join as join37, resolve as resolve19 } from "node:path";
+import { homedir as homedir15 } from "node:os";
+import { isAbsolute as isAbsolute7, join as join39, resolve as resolve20 } from "node:path";
 var USER_SCOPE_PATHS = {
   "claude-code": "~/.claude/",
   "claude-desktop": "~/Library/Application Support/Claude/",
@@ -14570,7 +14698,7 @@ function dryRunTargetLines(global, tools, projectTarget) {
   for (const tool of tools) {
     const anchor = USER_SCOPE_PATHS[tool];
     if (anchor === void 0) continue;
-    out += `      ${tool} \u2192 ${anchor.startsWith("~/") ? join37(homedir14(), anchor.slice(2)) : anchor}
+    out += `      ${tool} \u2192 ${anchor.startsWith("~/") ? join39(homedir15(), anchor.slice(2)) : anchor}
 `;
   }
   out += "  phases:      project payload sync \u2014 skipped (global installs write user-scope paths only)\n";
@@ -19115,7 +19243,7 @@ var settingsSchema = external_exports.object({
   egress: external_exports.object({
     placeholders: external_exports.object({
       mode: external_exports.enum(["off", "observe", "protect", "strict"]).default("off").describe(
-        "Dispatcher egress stage (docs/contracts/egress-placeholders-v1.md). off (default) = nothing. observe = detect and count listed values in prompts and tool bodies, types and counts only, and change nothing a hook concern sees. protect = also give every recording and advisory concern a copy with each value replaced by a placeholder token, so local stores keep tokens; guards still see the original. strict = as protect until the host rewrite exists. No mode yet changes what reaches the model; the rule table holds credential rules only. Project layers only."
+        "Dispatcher egress stage (docs/contracts/egress-placeholders-v1.md). off (default) = nothing. observe = detect and count listed values in prompts and tool bodies, types and counts only, and change nothing a hook concern sees. protect = also give every recording and advisory concern a copy with each value replaced by a placeholder token, so local stores keep tokens; guards still see the original. strict = as protect until the host rewrite exists. No mode yet changes what reaches the model; the rule table holds credential rows and the validated identifier rows. Project layers only."
       )
     }).default({})
   }).default({}),
@@ -21370,33 +21498,9 @@ var SCOPE_DETECT_AI_DIRS = [
   ".kilocode"
 ];
 
-// src/install/paths.ts
-import { homedir as homedir15, tmpdir as tmpdir3 } from "node:os";
-import { join as join40 } from "node:path";
-var INSTALL_ROOT_SUBPATH = ".event4u/agent-config";
-var INSTALL_LOG_FILENAME = "install-log.jsonl";
-function resolveHome(home) {
-  if (home && home.length > 0) {
-    return home;
-  }
-  const fromOs = homedir15();
-  if (!fromOs) {
-    throw new Error(
-      "Cannot resolve home directory \u2014 both $HOME (POSIX) and $USERPROFILE (Windows) are unset."
-    );
-  }
-  return fromOs;
-}
-function getInstallRoot(home) {
-  return join40(resolveHome(home), INSTALL_ROOT_SUBPATH);
-}
-function getLogPath(home) {
-  return join40(getInstallRoot(home), INSTALL_LOG_FILENAME);
-}
-
 // src/install/txlog.ts
 import { createGzip } from "node:zlib";
-import { createReadStream, createWriteStream, existsSync as existsSync17, readFileSync as readFileSync35, renameSync as renameSync8, statSync as statSync13, unlinkSync as unlinkSync8 } from "node:fs";
+import { createReadStream, createWriteStream, existsSync as existsSync18, readFileSync as readFileSync36, renameSync as renameSync8, statSync as statSync14, unlinkSync as unlinkSync8 } from "node:fs";
 import { pipeline } from "node:stream/promises";
 var ROTATION_MAX_BYTES = 10 * 1024 * 1024;
 var ROTATION_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -21407,12 +21511,12 @@ function appendTxLog(logPath, entry) {
   atomicAppendLine(logPath, JSON.stringify(entry));
 }
 function shouldRotate(logPath, now = /* @__PURE__ */ new Date()) {
-  if (!existsSync17(logPath)) {
+  if (!existsSync18(logPath)) {
     return false;
   }
   let size = 0;
   try {
-    size = statSync13(logPath).size;
+    size = statSync14(logPath).size;
   } catch {
     return false;
   }
@@ -21426,7 +21530,7 @@ function shouldRotate(logPath, now = /* @__PURE__ */ new Date()) {
   return now.getTime() - firstTs >= ROTATION_MAX_AGE_MS;
 }
 function rotateLogSync(logPath) {
-  if (!existsSync17(logPath)) {
+  if (!existsSync18(logPath)) {
     return;
   }
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
@@ -21445,7 +21549,7 @@ async function gzipInPlace(source) {
 }
 function readFirstTimestamp(logPath) {
   try {
-    const raw = readFileSync35(logPath, "utf8");
+    const raw = readFileSync36(logPath, "utf8");
     const firstLine = raw.split("\n", 1)[0] ?? "";
     const parsed = tryParseEntry(firstLine);
     if (parsed === null) return null;
@@ -23550,7 +23654,8 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
         info,
         warn,
         res,
-        preserved_now
+        preserved_now,
+        onlyDeployed(anchor, current_files, (p) => _log_tx_entry("write", p))
       );
       deployClaudeCarrier({
         packageRoot: package_root,
@@ -23560,7 +23665,7 @@ function _deploy_global_content(tools, force, package_root, lockfile_path2) {
         warn,
         userPin: state.FULL_PIN,
         wantsThin: installerThinsHost(tool_id, { packageRoot: package_root }),
-        thin: (bodyLinkRoot) => describeThinInstalledLayer(thinInstalledRuleLayer({ rulesDir: path38.join(anchor, "rules"), packageRoot: package_root, preserved: preserved_now, bodyLinkRoot }))
+        thin: (bodyLinkRoot) => describeThinInstalledLayer(thinInstalledRuleLayer({ rulesDir: path38.join(anchor, "rules"), packageRoot: package_root, preserved: preserved_now, bodyLinkRoot, onWrite: onlyDeployed(anchor, current_files, (p) => _log_tx_entry("write", p)) }))
       });
       if (!state.QUIET) for (const l of installReceiptBudgetLines(package_root, void 0, { thisDeploy: /* @__PURE__ */ new Map([[anchor, current_files]]) })) info(l);
     }