@event4u/agent-config 9.16.0 → 9.17.0

package/src/scripts/update_counts.ts

@@ -34,25 +34,73 @@ const _HERE = fileURLToPath(import.meta.url);
 // REPO_ROOT = <file>.parent.parent.parent — two dirs up from src/scripts.
 export const REPO_ROOT = path.resolve(path.dirname(_HERE), '..', '..');
 
-/** Recursively walk a directory, yielding files whose basename matches. */
+/**
+ * Recursively walk a directory, yielding files whose basename matches.
+ *
+ * Symlink confinement (release-truth Phase 3): a symlink — leaf or directory —
+ * is honored only when its target resolves inside the walk root; external
+ * targets, broken links, and cycles are ignored. Directory symlinks are
+ * followed through a visited-realpath set so a self-referential link
+ * terminates instead of recursing to stack exhaustion.
+ */
 function* _rglob(dir: string, match: (name: string) => boolean): Generator<string> {
-    let entries: fs.Dirent[];
+    let rootReal: string;
     try {
-        entries = fs.readdirSync(dir, { withFileTypes: true });
+        rootReal = fs.realpathSync(dir);
     } catch {
         return;
     }
-    // Sort for determinism (Path.rglob order is filesystem-dependent in
-    // Python; we only count, so order does not affect the result).
-    entries.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
-    for (const e of entries) {
-        const full = path.join(dir, e.name);
-        if (e.isDirectory()) {
-            yield* _rglob(full, match);
-        } else if (match(e.name)) {
-            yield full;
+    const confined = (p: string): string | null => {
+        try {
+            const real = fs.realpathSync(p);
+            const rel = path.relative(rootReal, real);
+            const inside = real === rootReal || (rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel));
+            return inside ? real : null;
+        } catch {
+            return null; // broken symlink → explicitly not yielded
+        }
+    };
+    const visited = new Set<string>([rootReal]);
+    function* walk(current: string): Generator<string> {
+        let entries: fs.Dirent[];
+        try {
+            entries = fs.readdirSync(current, { withFileTypes: true });
+        } catch {
+            return;
+        }
+        // Sort for determinism (Path.rglob order is filesystem-dependent in
+        // Python; we only count, so order does not affect the result).
+        entries.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
+        for (const e of entries) {
+            const full = path.join(current, e.name);
+            if (e.isDirectory()) {
+                yield* walk(full);
+            } else if (e.isSymbolicLink()) {
+                const real = confined(full);
+                if (real === null) {
+                    continue;
+                }
+                let st: fs.Stats;
+                try {
+                    st = fs.statSync(full);
+                } catch {
+                    continue;
+                }
+                if (st.isDirectory()) {
+                    if (visited.has(real)) {
+                        continue;
+                    }
+                    visited.add(real);
+                    yield* walk(full);
+                } else if (st.isFile() && match(e.name)) {
+                    yield full;
+                }
+            } else if (e.isFile() && match(e.name)) {
+                yield full;
+            }
         }
     }
+    yield* walk(dir);
 }
 
 /** Yield immediate child files of dir matching `match`. */

package/src/server/schemas/settings.ts

@@ -247,6 +247,29 @@ export const settingsSchema = z.object({
             'Whether skills marked token_budget_class: rich may load in full (exempt from telegraph-speak + thin-projector trimming), consumed by the token-budget-discipline rule. on = allowed (default); off = fall back to standard condensed behavior; ask = surface an estimated token delta (tokens, not dollars) and ask once per session before loading.',
         ),
     }).default({ rich_skills: 'on' }),
+    verbosity: z.object({
+        intent_announcements: z.boolean().default(false).describe(
+            'Intent narration before tool batches ("Let me check X…"). Only honored when personal.play_by_play is ALSO true (the direct-answers narration carve-out requires both). false (default) = act and emit the result.',
+        ),
+        preview_artifacts: z.boolean().default(false).describe(
+            'Show generated commit messages, PR titles/bodies, branch names before acting. false (default) = use generated content directly (/commit terse path).',
+        ),
+        routine_confirmations: z.boolean().default(false).describe(
+            'Confirmation prompts for routine workflow steps with one obvious answer. Iron-Law gates (commit-policy, scope-control git-ops, Hard Floor) ALWAYS ask regardless.',
+        ),
+        offer_council_in_delivery: z.boolean().default(false).describe(
+            'Offer "run AI Council on this?" inside delivery commands (/feature-plan, /review-changes, /roadmap-create). Council commands themselves are unaffected.',
+        ),
+        post_action_reports: z.enum(['off', 'minimal', 'full']).default('minimal').describe(
+            'Status blocks after a successful action. off = errors only; minimal (default) = one-line confirmation; full = bullet list.',
+        ),
+    }).default({
+        intent_announcements: false,
+        preview_artifacts: false,
+        routine_confirmations: false,
+        offer_council_in_delivery: false,
+        post_action_reports: 'minimal',
+    }),
     code_style: z.object({
         docblocks: z.enum(['minimal', 'full']).default('minimal').describe(
             'Consumed by the code-comment-discipline rule. minimal (default) = no signature-mirroring docblocks; docblocks only for machine-relevant precision (generics, array shapes) or genuine why-context. full = the exported public surface of a library package may carry one-line summary docblocks; the redundancy ban still holds.',

package/dist/cli-delegate/{chunk-XX6TOPD7.js → chunk-WR6GTRHJ.js}

@@ -1,10 +1,10 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
-import {
-  resolve_project_root
-} from "./chunk-HJ6DAJHR.js";
 import {
   resolvePackageRoot
 } from "./chunk-MCJYCQPF.js";
+import {
+  resolve_project_root
+} from "./chunk-HJ6DAJHR.js";
 
 // src/scripts/_cli/cmd_migrate.ts
 import { spawnSync } from "node:child_process";