@event4u/agent-config 9.22.0 → 9.23.0

package/dist/cli-delegate/cmd_sync.js

@@ -1,7 +1,8 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   main
-} from "./chunk-ELMFOQPW.js";
+} from "./chunk-SJQMJI7M.js";
+import "./chunk-DVRS2KVR.js";
 import "./chunk-WR6GTRHJ.js";
 import "./chunk-BKO2AZ7Z.js";
 import {

package/dist/cli-delegate/cmd_uninstall.js

@@ -3,7 +3,8 @@ import {
   PROJECT_BRIDGE_MARKERS,
   USER_SCOPE_PATHS,
   subtract_pointers
-} from "./chunk-ELMFOQPW.js";
+} from "./chunk-SJQMJI7M.js";
+import "./chunk-DVRS2KVR.js";
 import "./chunk-WR6GTRHJ.js";
 import "./chunk-BKO2AZ7Z.js";
 import {

package/dist/cli-delegate/cmd_validate.js

@@ -3,7 +3,8 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   PROJECT_BRIDGE_MARKERS,
   USER_SCOPE_PATHS
-} from "./chunk-ELMFOQPW.js";
+} from "./chunk-SJQMJI7M.js";
+import "./chunk-DVRS2KVR.js";
 import "./chunk-WR6GTRHJ.js";
 import "./chunk-BKO2AZ7Z.js";
 import {

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T04:46:29Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -3895,7 +3895,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:8d57eccdcbacf29ec8e9496b74c7fea67bccd42f46f87f2583b73b9b1779d184",
+      "checksum": "sha256:3dff6078333dc4e2bd65a31b5bcd4e9b27a47db078512c46089710598f9676af",
       "install": {
         "default": true,
         "removable": false
@@ -5785,7 +5785,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:e40b9270844db96ca7a1a9f4cd7d4022422c2b38ddb20c614be3bcd4e67250f5",
+      "checksum": "sha256:d961962cf4f303b5c2b61dc5ad5f58a7810cfc6c735ec1b971f1d31f8910709a",
       "install": {
         "default": true,
         "removable": false
@@ -6139,7 +6139,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:7c3edcfe77a3d70428b57a1764a4e2bbfbc78e3d638154f458ddf12aad173550",
+      "checksum": "sha256:069e5a5de50e4bb6cbc5a8bf1b3f6c121ca74f5c92340cb9f92c756e53646eab",
       "install": {
         "default": true,
         "removable": false
@@ -7639,7 +7639,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:a443bc5e7fdf06faa3f54e839d21766ce90fe02183a932c6d49ae22247ef0629",
+      "checksum": "sha256:67d557ae3f379a347dea88c6917a6a3ef08a723b34b77df5fb48995974b49634",
       "install": {
         "default": true,
         "removable": false
@@ -7660,7 +7660,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:4582c93543e7ca4f0b44bf4456c20d1952b26ab786e88e7de0f640209be02af8",
+      "checksum": "sha256:724249e7b81f90b29f949d90d08f70be0c2885227a10b88db0b525455bca07e5",
       "install": {
         "default": true,
         "removable": false
@@ -7681,7 +7681,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:3b170640629262dbab7e68546c55da0a620019e67b8b286f1a54e775bd5ff21f",
+      "checksum": "sha256:a10e1753c1aa893a1149361e18d3511f34273ef424f7ee7bbbf795b0cbd75d6a",
       "install": {
         "default": true,
         "removable": false
@@ -7754,7 +7754,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:850560f747198febdb3840c63ca754042efe4f305752678d07d087f9575eaed9",
+      "checksum": "sha256:3091d3577b9f2caaff45c6d96805f932b5833c0713811962a78b7725fb97b7f0",
       "install": {
         "default": true,
         "removable": false
@@ -7966,7 +7966,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:cdaa8f128289dbe31843da7ccbefd35bca719cc38d904f0f28505e72380556c8",
+      "checksum": "sha256:e906f289f79df96b79e55c4c664c94c4a860b814c9ec1ddc5535d0655a554278",
       "install": {
         "default": true,
         "removable": false
@@ -9264,7 +9264,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:21fe1e1cab3bf7e739a0e3dbfe48ec60c0da59caae1c791b7003e1ccb1f6f42e",
+      "checksum": "sha256:e472a98d0fca4325a390a3825aa93c62718ee3b498ebbb12ae97086d35a50c81",
       "install": {
         "default": false,
         "removable": true
@@ -10474,7 +10474,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:347c6d2b24c194b612e81b623a7c82dd2f19177bdc0d374a83576767726819f9",
+      "checksum": "sha256:4cfa4a561b9ac89012273b08b8e2f126a97bacfed1b0ba6cc7db15f08d9e1577",
       "install": {
         "default": true,
         "removable": false
@@ -10496,7 +10496,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:ab91a9991075ef6d11c9f7d6fad4d6ad345faf94f51f69b74f461c42ae215756",
+      "checksum": "sha256:bdbc3ecb5c920deed2622704b1a6c0a5f6c6e57a5f90cbbf7befbc6509b30ce1",
       "install": {
         "default": true,
         "removable": false
@@ -10584,7 +10584,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:a5e6ac0ab70da7762c4b958cb6c24b75a437c33235a4c39b09b80265de38cbaf",
+      "checksum": "sha256:c125c12dd1d061aaaa36c88a2df187e2bf60376adbb36ef819b1f1752279fb76",
       "install": {
         "default": true,
         "removable": false
@@ -13010,7 +13010,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:28728406da80f3d423c8a669ed6ef1e3faccfa19265bd10135297036ae894fcf",
+      "checksum": "sha256:8e31ba9d6efb3beff58d0f5a70b17da12e28dd1521ecc7f87ca3e9e2f7ddb540",
       "install": {
         "default": true,
         "removable": false
@@ -13296,7 +13296,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:9cc346f0e7f88185a7639c4cdd08fb35ded3eb1481b80cb8b13fff619fcb14b9",
+      "checksum": "sha256:a2d0b436a6c8d7e5204649c931cfe4061e056042beb4637968d2a61ab6754e1d",
       "install": {
         "default": true,
         "removable": false
@@ -13340,7 +13340,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:f97d62367254a4e27aa428ed7940a59e4679a2ac59c8d254b73373033efa1dd6",
+      "checksum": "sha256:1cdc1593d6e137f825e6c07db6356988f00de4a27fc74773f3330c4af3706c79",
       "install": {
         "default": true,
         "removable": false
@@ -14259,7 +14259,7 @@
       "workspaces": []
     }
   ],
-  "checksum": "sha256:acdebb0b72b50f8026c14b11df8706155fb82ba5c44cff7fa47b6e019052d156",
+  "checksum": "sha256:4a815bc9d2095c52b4e922686da9463ef535c33725d8ceac6287a60d8beb0e56",
   "deprecations": [
     {
       "key": "tier",
@@ -14402,7 +14402,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-08-05T05:32:20Z",
+  "generated_at": "2026-08-06T04:46:29Z",
   "packs": [
     {
       "artefact_count": 117,

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-afd8d19ae939ff4cc011583591c8ae9f88601d301d808874f41cfb43f0d1122a  discovery-manifest.json
+1626a243f6c3ec9dcaf68057bec46f5c3a3a78921b0b50995a8b1996ec66b242  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,6 +1,6 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T04:46:29Z`
 - Scanner: `c24312e116f8`
 - Artefacts: **594**
 - Unassigned: **0**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T04:46:29Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:acdebb0b72b50f8026c14b11df8706155fb82ba5c44cff7fa47b6e019052d156",
-  "generated_at": "2026-08-05T05:32:20Z",
+  "checksum": "sha256:4a815bc9d2095c52b4e922686da9463ef535c33725d8ceac6287a60d8beb0e56",
+  "generated_at": "2026-08-06T04:46:29Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T04:46:29Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:acdebb0b72b50f8026c14b11df8706155fb82ba5c44cff7fa47b6e019052d156",
-  "generated_at": "2026-08-05T05:32:20Z",
+  "checksum": "sha256:4a815bc9d2095c52b4e922686da9463ef535c33725d8ceac6287a60d8beb0e56",
+  "generated_at": "2026-08-06T04:46:29Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {

package/dist/hooks/dispatch.js

@@ -19536,6 +19536,55 @@ var CONCERN_REGISTRY = {
   "src/scripts/hooks/code_graph_nudge_hook.ts": main29
 };
 
+// src/scripts/hooks/host_semantics.ts
+var VERIFIED_PLATFORMS = /* @__PURE__ */ new Set(["claude"]);
+var CLAUDE_HOOK_EVENT_NAME = {
+  pre_tool_use: "PreToolUse",
+  post_tool_use: "PostToolUse",
+  user_prompt_submit: "UserPromptSubmit",
+  session_start: "SessionStart",
+  session_end: "SessionEnd",
+  stop: "Stop",
+  pre_compact: "PreCompact"
+};
+var CLAUDE_BLOCK_CAPABLE_EVENTS = /* @__PURE__ */ new Set([
+  "pre_tool_use",
+  "user_prompt_submit",
+  "stop"
+]);
+function _joinReasons(reasons) {
+  return reasons.map((r) => r.trim()).filter((r) => r.length > 0).join(" \xB7 ");
+}
+function claudeAdditionalContext(event, text) {
+  const hookEventName = CLAUDE_HOOK_EVENT_NAME[event] ?? event;
+  return `${JSON.stringify({
+    hookSpecificOutput: { hookEventName, additionalContext: text }
+  })}
+`;
+}
+function emitFor(platform, event, severity, reasons, legacyExit) {
+  if (!VERIFIED_PLATFORMS.has(platform)) {
+    return { exit: legacyExit, stdout: "", stderr: "" };
+  }
+  const reason = _joinReasons(reasons);
+  if (severity === "allow") {
+    return { exit: 0, stdout: "", stderr: "" };
+  }
+  if (severity === "block") {
+    if (CLAUDE_BLOCK_CAPABLE_EVENTS.has(event)) {
+      const label2 = reason || "blocked by agent-config hook policy";
+      return { exit: 2, stdout: "", stderr: `${label2}
+` };
+    }
+    const label = reason || "agent-config hook reported a blocking finding";
+    return { exit: 0, stdout: claudeAdditionalContext(event, label), stderr: "" };
+  }
+  if (!reason) {
+    return { exit: 0, stdout: "", stderr: "" };
+  }
+  return { exit: 0, stdout: claudeAdditionalContext(event, reason), stderr: "" };
+}
+
 // src/scripts/hooks/dispatch_hook.ts
 var _IN_BUNDLE = true;
 var REPO_ROOT = path41.resolve(
@@ -19567,6 +19616,9 @@ function _isObject9(v) {
 function _severity_for(rc) {
   return _SEVERITY_BY_EXIT[rc] ?? "error";
 }
+function _is_advisory(concern) {
+  return String(concern["severity"] ?? "").trim().toLowerCase() === "advisory";
+}
 function _now_iso3() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z");
 }
@@ -20166,6 +20218,7 @@ function main30(argv) {
   const rcs = [];
   const feedback_entries = [];
   const context_blocks = [];
+  const concern_messages = [];
   for (const concern of concerns) {
     const concern_started = _now_iso3();
     const { rc: rawRcResult, stderr: stderr_text, stdout: stdout_text, duration_ms } = _run_concern(concern, envelope);
@@ -20181,8 +20234,19 @@ function main30(argv) {
         process.stderr.write(stderr_text);
       }
     }
+    if (rc === EXIT_BLOCK2 && _is_advisory(concern)) {
+      process.stderr.write(
+        `dispatch_hook: concern '${String(concern["name"])}' is declared severity: advisory but returned BLOCK \u2014 downgraded to warn.
+`
+      );
+      rc = EXIT_WARN7;
+    }
     rcs.push(rc);
     const reply = _parse_concern_stdout(stdout_text);
+    const stated = typeof reply["reason"] === "string" && reply["reason"].trim() ? reply["reason"].trim() : stderr_text.trim();
+    if (stated) {
+      concern_messages.push({ rc, text: stated });
+    }
     if (args.event === "session_start" && rc === EXIT_ALLOW9 && typeof reply["context"] === "string" && reply["context"].trim()) {
       context_blocks.push(reply["context"].trim());
     }
@@ -20205,7 +20269,21 @@ function main30(argv) {
   if (context_blocks.length > 0 && final_rc === EXIT_ALLOW9) {
     process.stdout.write(context_blocks.join("\n\n") + "\n");
   }
-  return final_rc;
+  const decidingReasons = concern_messages.filter((m) => m.rc === final_rc).map((m) => m.text);
+  const emission = emitFor(
+    args.platform,
+    args.event,
+    _severity_for(final_rc),
+    decidingReasons,
+    final_rc
+  );
+  if (emission.stdout) {
+    process.stdout.write(emission.stdout);
+  }
+  if (emission.stderr) {
+    process.stderr.write(emission.stderr);
+  }
+  return emission.exit;
 }
 function _isDir4(p) {
   try {

package/dist/mcp/registry-manifest.json

@@ -3,13 +3,13 @@
     "artefact_count": 594,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-08-05",
+  "generated_at": "2026-08-06",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.22.0"
+    "version": "9.23.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.22.0"
+      "version": "9.23.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.22.0"
+  "version": "9.23.0"
 }

package/dist/scripts/condense.js

@@ -940,12 +940,51 @@ function _read_rule_packs() {
  * compiles and behaves unchanged.
  */
 /** List rule basenames under RULES_SOURCE, workspace/pack scope applied. */
+/**
+ * Is this rule `type: manual` (ADR-004 reference-only)?
+ *
+ * The schema is explicit: `manual` = "no auto-injection (zero workspace-budget
+ * cost); file remains as a reference document linkable from skills/contexts."
+ * `compile_router` already honours the first half by omitting manual rules from
+ * `dist/router.json`. The per-tool projection did NOT: it symlinked them into
+ * `.claude/rules/` (and siblings), so under the default `eager-all` projection
+ * their full bodies were injected every turn — the exact opposite of "zero
+ * workspace-budget cost". `brand-consistency` is the clearest case: its own body
+ * says "reference-only, no router emission", and it shipped in context anyway.
+ *
+ * Excluded from the per-tool trees ONLY. The file keeps its place in
+ * `dist/agent-src/rules/`, which is what "remains as a reference document
+ * linkable" requires — inbound cross-references must still resolve.
+ */
+function _is_manual_rule(rule_path) {
+    let content;
+    try {
+        content = fs.readFileSync(rule_path, 'utf-8');
+    }
+    catch {
+        return false; // unreadable → fail open, same posture as the scope filters
+    }
+    const [fm_lines] = _split_frontmatter(content);
+    if (fm_lines === null) {
+        return false;
+    }
+    for (const line of fm_lines) {
+        const m = /^type:\s*["']?([a-z]+)["']?\s*$/.exec(line);
+        if (m) {
+            return m[1] === 'manual';
+        }
+    }
+    return false;
+}
 function _scoped_rule_basenames() {
     const scope = _read_rule_workspaces();
     const pack_scope = _read_rule_packs();
     return _iterdirSorted(MODULE_STATE.RULES_SOURCE)
         .filter((p) => p.endsWith('.md') && _isFile(p))
         .filter((p) => rule_in_scope(p, scope, pack_scope))
+        // ADR-004: a manual rule costs zero workspace budget, so it never gets a
+        // per-tool symlink regardless of projection mode. See _is_manual_rule.
+        .filter((p) => !_is_manual_rule(p))
         // A compile-disabled rule has no dist/agent-src/ counterpart, so a per-tool
         // symlink to it would dangle. The source file still exists, which is why the
         // scope filters alone let it through — the toggle is a separate axis and this
@@ -1179,7 +1218,10 @@ export function generate_cursor_mdc_rules() {
     const pack_scope = _read_rule_packs();
     const rules = _rglobSorted(MODULE_STATE.RULES_SOURCE, '*.md')
         .filter((p) => _isFile(p))
-        .filter((p) => rule_in_scope(p, scope, pack_scope));
+        .filter((p) => rule_in_scope(p, scope, pack_scope))
+        // ADR-004 manual rules are reference-only — never auto-injected into a
+        // per-tool tree. Same predicate as generate_rule_symlinks.
+        .filter((p) => !_is_manual_rule(p));
     const stems = rules.map((r) => path.basename(r, '.md'));
     const valid = new Set([
         ...stems.map((s) => `${s}.mdc`),
@@ -1197,7 +1239,10 @@ export function generate_windsurf_modern_rules() {
     const pack_scope = _read_rule_packs();
     const rules = _rglobSorted(MODULE_STATE.RULES_SOURCE, '*.md')
         .filter((p) => _isFile(p))
-        .filter((p) => rule_in_scope(p, scope, pack_scope));
+        .filter((p) => rule_in_scope(p, scope, pack_scope))
+        // ADR-004 manual rules are reference-only — never auto-injected into a
+        // per-tool tree. Same predicate as generate_rule_symlinks.
+        .filter((p) => !_is_manual_rule(p));
     const valid = new Set(rules.map((r) => path.basename(r)));
     _clean_modern_dir(_WINDSURF_RULES_DIR(), valid);
     for (const rule of rules) {