@event4u/agent-config 9.22.0 → 9.24.0

package/dist/cli-delegate/cmd_sync.js

@@ -1,7 +1,8 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   main
-} from "./chunk-ELMFOQPW.js";
+} from "./chunk-SJQMJI7M.js";
+import "./chunk-DVRS2KVR.js";
 import "./chunk-WR6GTRHJ.js";
 import "./chunk-BKO2AZ7Z.js";
 import {

package/dist/cli-delegate/cmd_uninstall.js

@@ -3,7 +3,8 @@ import {
   PROJECT_BRIDGE_MARKERS,
   USER_SCOPE_PATHS,
   subtract_pointers
-} from "./chunk-ELMFOQPW.js";
+} from "./chunk-SJQMJI7M.js";
+import "./chunk-DVRS2KVR.js";
 import "./chunk-WR6GTRHJ.js";
 import "./chunk-BKO2AZ7Z.js";
 import {

package/dist/cli-delegate/cmd_validate.js

@@ -3,7 +3,8 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   PROJECT_BRIDGE_MARKERS,
   USER_SCOPE_PATHS
-} from "./chunk-ELMFOQPW.js";
+} from "./chunk-SJQMJI7M.js";
+import "./chunk-DVRS2KVR.js";
 import "./chunk-WR6GTRHJ.js";
 import "./chunk-BKO2AZ7Z.js";
 import {

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T06:45:33Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -283,7 +283,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:43f9c059a7126d30ab61ce4fc2f004763a89d8f54f7f091f8cf6e5c7f0673633",
+      "checksum": "sha256:2ffba4311aab15137416d4db749e610a39b5268856f176e9a4fcea49743688f9",
       "install": {
         "default": true,
         "removable": false
@@ -303,7 +303,8 @@
         "analyze-decision",
         "analyze-near-miss",
         "analyze-incident",
-        "analyze-reference-repo"
+        "analyze-reference-repo",
+        "analyze-inbox"
       ],
       "slug": "analyze",
       "tier": 1,
@@ -343,6 +344,32 @@
         "engineering"
       ]
     },
+    {
+      "category": "command",
+      "checksum": "sha256:01aca921b9d33fb28a18b9b34095c23cd0b1b2768af6c654e3bddf0d18606412",
+      "install": {
+        "default": true,
+        "removable": false
+      },
+      "lifecycle": "active",
+      "name": "analyze-inbox",
+      "pack": "analysis-workbench",
+      "packs": [
+        "meta"
+      ],
+      "path": "src/domains/analysis-workbench/analyze/inbox/command.md",
+      "slug": "analyze-inbox",
+      "tier": 2,
+      "trust": {
+        "confidence": "high",
+        "human_review_required": false,
+        "level": "core"
+      },
+      "visibility": "internal",
+      "workspaces": [
+        "agent-config-maintainer"
+      ]
+    },
     {
       "category": "command",
       "checksum": "sha256:f683932f0800d67218f4b6755754c642c771d5810df98673ada7b86b83b0e0cb",
@@ -2197,7 +2224,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:5761308d6ef9e22fcf889050bd2227d8fcc13a27ab0434e9285feca267bbb7fe",
+      "checksum": "sha256:a0f4f127de5049d9f71402376fff6ae28e54d5ff5dfa33fdf0a8a6340159abd9",
       "install": {
         "default": true,
         "removable": false
@@ -2520,7 +2547,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:b1e06ef4c8daa3d3649d68920dbf2eb61db7057b367331a378a38cdbdf0f8f84",
+      "checksum": "sha256:b718faefe3c50937e0b4851d26086d9aa8a9573c74e3e9fd371d2d0935acaa02",
       "install": {
         "default": true,
         "removable": false
@@ -3895,7 +3922,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:8d57eccdcbacf29ec8e9496b74c7fea67bccd42f46f87f2583b73b9b1779d184",
+      "checksum": "sha256:3dff6078333dc4e2bd65a31b5bcd4e9b27a47db078512c46089710598f9676af",
       "install": {
         "default": true,
         "removable": false
@@ -5785,7 +5812,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:e40b9270844db96ca7a1a9f4cd7d4022422c2b38ddb20c614be3bcd4e67250f5",
+      "checksum": "sha256:d95d6d4c55278fb84146975e05631e9d164b83c07d6ce7a8096f6775231be656",
       "install": {
         "default": true,
         "removable": false
@@ -6139,7 +6166,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:7c3edcfe77a3d70428b57a1764a4e2bbfbc78e3d638154f458ddf12aad173550",
+      "checksum": "sha256:069e5a5de50e4bb6cbc5a8bf1b3f6c121ca74f5c92340cb9f92c756e53646eab",
       "install": {
         "default": true,
         "removable": false
@@ -7639,7 +7666,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:a443bc5e7fdf06faa3f54e839d21766ce90fe02183a932c6d49ae22247ef0629",
+      "checksum": "sha256:67d557ae3f379a347dea88c6917a6a3ef08a723b34b77df5fb48995974b49634",
       "install": {
         "default": true,
         "removable": false
@@ -7660,7 +7687,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:4582c93543e7ca4f0b44bf4456c20d1952b26ab786e88e7de0f640209be02af8",
+      "checksum": "sha256:724249e7b81f90b29f949d90d08f70be0c2885227a10b88db0b525455bca07e5",
       "install": {
         "default": true,
         "removable": false
@@ -7681,7 +7708,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:3b170640629262dbab7e68546c55da0a620019e67b8b286f1a54e775bd5ff21f",
+      "checksum": "sha256:a10e1753c1aa893a1149361e18d3511f34273ef424f7ee7bbbf795b0cbd75d6a",
       "install": {
         "default": true,
         "removable": false
@@ -7754,7 +7781,7 @@
     },
     {
       "category": "rule",
-      "checksum": "sha256:850560f747198febdb3840c63ca754042efe4f305752678d07d087f9575eaed9",
+      "checksum": "sha256:3091d3577b9f2caaff45c6d96805f932b5833c0713811962a78b7725fb97b7f0",
       "install": {
         "default": true,
         "removable": false
@@ -7966,7 +7993,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:cdaa8f128289dbe31843da7ccbefd35bca719cc38d904f0f28505e72380556c8",
+      "checksum": "sha256:e906f289f79df96b79e55c4c664c94c4a860b814c9ec1ddc5535d0655a554278",
       "install": {
         "default": true,
         "removable": false
@@ -9264,7 +9291,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:21fe1e1cab3bf7e739a0e3dbfe48ec60c0da59caae1c791b7003e1ccb1f6f42e",
+      "checksum": "sha256:e472a98d0fca4325a390a3825aa93c62718ee3b498ebbb12ae97086d35a50c81",
       "install": {
         "default": false,
         "removable": true
@@ -10474,7 +10501,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:347c6d2b24c194b612e81b623a7c82dd2f19177bdc0d374a83576767726819f9",
+      "checksum": "sha256:4cfa4a561b9ac89012273b08b8e2f126a97bacfed1b0ba6cc7db15f08d9e1577",
       "install": {
         "default": true,
         "removable": false
@@ -10496,7 +10523,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:ab91a9991075ef6d11c9f7d6fad4d6ad345faf94f51f69b74f461c42ae215756",
+      "checksum": "sha256:bdbc3ecb5c920deed2622704b1a6c0a5f6c6e57a5f90cbbf7befbc6509b30ce1",
       "install": {
         "default": true,
         "removable": false
@@ -10584,7 +10611,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:a5e6ac0ab70da7762c4b958cb6c24b75a437c33235a4c39b09b80265de38cbaf",
+      "checksum": "sha256:c125c12dd1d061aaaa36c88a2df187e2bf60376adbb36ef819b1f1752279fb76",
       "install": {
         "default": true,
         "removable": false
@@ -13010,7 +13037,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:28728406da80f3d423c8a669ed6ef1e3faccfa19265bd10135297036ae894fcf",
+      "checksum": "sha256:8e31ba9d6efb3beff58d0f5a70b17da12e28dd1521ecc7f87ca3e9e2f7ddb540",
       "install": {
         "default": true,
         "removable": false
@@ -13296,7 +13323,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:9cc346f0e7f88185a7639c4cdd08fb35ded3eb1481b80cb8b13fff619fcb14b9",
+      "checksum": "sha256:a2d0b436a6c8d7e5204649c931cfe4061e056042beb4637968d2a61ab6754e1d",
       "install": {
         "default": true,
         "removable": false
@@ -13340,7 +13367,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:f97d62367254a4e27aa428ed7940a59e4679a2ac59c8d254b73373033efa1dd6",
+      "checksum": "sha256:1cdc1593d6e137f825e6c07db6356988f00de4a27fc74773f3330c4af3706c79",
       "install": {
         "default": true,
         "removable": false
@@ -14259,7 +14286,7 @@
       "workspaces": []
     }
   ],
-  "checksum": "sha256:acdebb0b72b50f8026c14b11df8706155fb82ba5c44cff7fa47b6e019052d156",
+  "checksum": "sha256:25d23ff012559eedfa9cb9d1fa4be4f281eb1e5459190acc0877bfc41bda861b",
   "deprecations": [
     {
       "key": "tier",
@@ -14402,7 +14429,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-08-05T05:32:20Z",
+  "generated_at": "2026-08-06T06:45:33Z",
   "packs": [
     {
       "artefact_count": 117,
@@ -15125,7 +15152,7 @@
     },
     {
       "always_on": true,
-      "artefact_count": 289,
+      "artefact_count": 290,
       "description": "Artefacts that maintain this package (agent-config itself).",
       "domain": "meta",
       "human_review_required": 0,
@@ -15141,7 +15168,7 @@
       "trust_level_default": "core",
       "trust_summary": {
         "advisory": 0,
-        "core": 287,
+        "core": 288,
         "experimental": 2,
         "professional": 0,
         "restricted": 0
@@ -15232,27 +15259,27 @@
   "scanner_version": "c24312e116f8",
   "stats": {
     "by_category": {
-      "command": 193,
+      "command": 194,
       "rule": 111,
       "skill": 288,
       "subagent": 1,
       "template": 1
     },
     "by_lifecycle": {
-      "active": 577,
+      "active": 578,
       "archived": 0,
       "deprecated": 0,
       "experimental": 17
     },
     "by_trust_level": {
       "advisory": 8,
-      "core": 462,
+      "core": 463,
       "experimental": 22,
       "professional": 102,
       "restricted": 0
     },
     "documented_unassigned_count": 26,
-    "total_artefacts": 594,
+    "total_artefacts": 595,
     "unassigned_count": 0
   },
   "unassigned": [],

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-afd8d19ae939ff4cc011583591c8ae9f88601d301d808874f41cfb43f0d1122a  discovery-manifest.json
+7ae76e70276464f1f360914be34d1498a4c4cf21195ce2e73b9086092b8cf129  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,8 +1,8 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T06:45:33Z`
 - Scanner: `c24312e116f8`
-- Artefacts: **594**
+- Artefacts: **595**
 - Unassigned: **0**
 
 ## `engineering` — Engineering
@@ -105,7 +105,7 @@
 
 | Pack | Artefacts |
 |---|---|
-| `meta` — Meta | 289 |
+| `meta` — Meta | 290 |
 | `memory` — Memory | 9 |
 | `analytics` — Analytics | 4 |
 | `product-reasoning` — Product Reasoning | 11 |

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T06:45:33Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:acdebb0b72b50f8026c14b11df8706155fb82ba5c44cff7fa47b6e019052d156",
-  "generated_at": "2026-08-05T05:32:20Z",
+  "checksum": "sha256:25d23ff012559eedfa9cb9d1fa4be4f281eb1e5459190acc0877bfc41bda861b",
+  "generated_at": "2026-08-06T06:45:33Z",
   "packs": [
     {
       "always_on": false,
@@ -1313,7 +1313,7 @@
     },
     {
       "always_on": true,
-      "artefact_count": 289,
+      "artefact_count": 290,
       "artefacts": [
         "src/agent-src/templates/agents/proposal.example.md",
         "src/domains/ai-video/image/analyse/command.md",
@@ -1326,6 +1326,7 @@
         "src/domains/ai-video/video/scene/command.md",
         "src/domains/ai-video/video/stitch/command.md",
         "src/domains/ai-video/video/storyboard/command.md",
+        "src/domains/analysis-workbench/analyze/inbox/command.md",
         "src/domains/analysis-workbench/analyze/reference-repo/command.md",
         "src/domains/engineering-base/bug/command.md",
         "src/domains/engineering-base/bug/fix/command.md",
@@ -1606,14 +1607,14 @@
         "src/skills/verify-repair-loop/SKILL.md"
       ],
       "by_lifecycle": {
-        "active": 288,
+        "active": 289,
         "archived": 0,
         "deprecated": 0,
         "experimental": 1
       },
       "by_trust_level": {
         "advisory": 0,
-        "core": 287,
+        "core": 288,
         "experimental": 2,
         "professional": 0,
         "restricted": 0

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-05T05:32:20Z`
+- Generated: `2026-08-06T06:45:33Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 
@@ -8,7 +8,7 @@
 
 | Workspace | core | professional | experimental | advisory | restricted |
 |---|---|---|---|---|---|
-| `agent-config-maintainer` | 318 | 0 | 3 | 0 | 0 |
+| `agent-config-maintainer` | 319 | 0 | 3 | 0 | 0 |
 | `construction` | 25 | 0 | 0 | 0 | 0 |
 | `engineering` | 180 | 62 | 3 | 0 | 0 |
 | `finance` | 28 | 4 | 0 | 1 | 0 |

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:acdebb0b72b50f8026c14b11df8706155fb82ba5c44cff7fa47b6e019052d156",
-  "generated_at": "2026-08-05T05:32:20Z",
+  "checksum": "sha256:25d23ff012559eedfa9cb9d1fa4be4f281eb1e5459190acc0877bfc41bda861b",
+  "generated_at": "2026-08-06T06:45:33Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {
@@ -623,7 +623,7 @@
       ]
     },
     {
-      "artefact_count": 313,
+      "artefact_count": 314,
       "default_packs": [
         "meta",
         "memory",
@@ -636,7 +636,7 @@
       "optional_packs": [],
       "packs": [
         {
-          "artefact_count": 289,
+          "artefact_count": 290,
           "artefacts": [
             "src/agent-src/templates/agents/proposal.example.md",
             "src/domains/ai-video/image/analyse/command.md",
@@ -649,6 +649,7 @@
             "src/domains/ai-video/video/scene/command.md",
             "src/domains/ai-video/video/stitch/command.md",
             "src/domains/ai-video/video/storyboard/command.md",
+            "src/domains/analysis-workbench/analyze/inbox/command.md",
             "src/domains/analysis-workbench/analyze/reference-repo/command.md",
             "src/domains/engineering-base/bug/command.md",
             "src/domains/engineering-base/bug/fix/command.md",

package/dist/hooks/dispatch.js

@@ -19536,6 +19536,55 @@ var CONCERN_REGISTRY = {
   "src/scripts/hooks/code_graph_nudge_hook.ts": main29
 };
 
+// src/scripts/hooks/host_semantics.ts
+var VERIFIED_PLATFORMS = /* @__PURE__ */ new Set(["claude"]);
+var CLAUDE_HOOK_EVENT_NAME = {
+  pre_tool_use: "PreToolUse",
+  post_tool_use: "PostToolUse",
+  user_prompt_submit: "UserPromptSubmit",
+  session_start: "SessionStart",
+  session_end: "SessionEnd",
+  stop: "Stop",
+  pre_compact: "PreCompact"
+};
+var CLAUDE_BLOCK_CAPABLE_EVENTS = /* @__PURE__ */ new Set([
+  "pre_tool_use",
+  "user_prompt_submit",
+  "stop"
+]);
+function _joinReasons(reasons) {
+  return reasons.map((r) => r.trim()).filter((r) => r.length > 0).join(" \xB7 ");
+}
+function claudeAdditionalContext(event, text) {
+  const hookEventName = CLAUDE_HOOK_EVENT_NAME[event] ?? event;
+  return `${JSON.stringify({
+    hookSpecificOutput: { hookEventName, additionalContext: text }
+  })}
+`;
+}
+function emitFor(platform, event, severity, reasons, legacyExit) {
+  if (!VERIFIED_PLATFORMS.has(platform)) {
+    return { exit: legacyExit, stdout: "", stderr: "" };
+  }
+  const reason = _joinReasons(reasons);
+  if (severity === "allow") {
+    return { exit: 0, stdout: "", stderr: "" };
+  }
+  if (severity === "block") {
+    if (CLAUDE_BLOCK_CAPABLE_EVENTS.has(event)) {
+      const label2 = reason || "blocked by agent-config hook policy";
+      return { exit: 2, stdout: "", stderr: `${label2}
+` };
+    }
+    const label = reason || "agent-config hook reported a blocking finding";
+    return { exit: 0, stdout: claudeAdditionalContext(event, label), stderr: "" };
+  }
+  if (!reason) {
+    return { exit: 0, stdout: "", stderr: "" };
+  }
+  return { exit: 0, stdout: claudeAdditionalContext(event, reason), stderr: "" };
+}
+
 // src/scripts/hooks/dispatch_hook.ts
 var _IN_BUNDLE = true;
 var REPO_ROOT = path41.resolve(
@@ -19567,6 +19616,9 @@ function _isObject9(v) {
 function _severity_for(rc) {
   return _SEVERITY_BY_EXIT[rc] ?? "error";
 }
+function _is_advisory(concern) {
+  return String(concern["severity"] ?? "").trim().toLowerCase() === "advisory";
+}
 function _now_iso3() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z");
 }
@@ -20166,6 +20218,7 @@ function main30(argv) {
   const rcs = [];
   const feedback_entries = [];
   const context_blocks = [];
+  const concern_messages = [];
   for (const concern of concerns) {
     const concern_started = _now_iso3();
     const { rc: rawRcResult, stderr: stderr_text, stdout: stdout_text, duration_ms } = _run_concern(concern, envelope);
@@ -20181,8 +20234,19 @@ function main30(argv) {
         process.stderr.write(stderr_text);
       }
     }
+    if (rc === EXIT_BLOCK2 && _is_advisory(concern)) {
+      process.stderr.write(
+        `dispatch_hook: concern '${String(concern["name"])}' is declared severity: advisory but returned BLOCK \u2014 downgraded to warn.
+`
+      );
+      rc = EXIT_WARN7;
+    }
     rcs.push(rc);
     const reply = _parse_concern_stdout(stdout_text);
+    const stated = typeof reply["reason"] === "string" && reply["reason"].trim() ? reply["reason"].trim() : stderr_text.trim();
+    if (stated) {
+      concern_messages.push({ rc, text: stated });
+    }
     if (args.event === "session_start" && rc === EXIT_ALLOW9 && typeof reply["context"] === "string" && reply["context"].trim()) {
       context_blocks.push(reply["context"].trim());
     }
@@ -20205,7 +20269,21 @@ function main30(argv) {
   if (context_blocks.length > 0 && final_rc === EXIT_ALLOW9) {
     process.stdout.write(context_blocks.join("\n\n") + "\n");
   }
-  return final_rc;
+  const decidingReasons = concern_messages.filter((m) => m.rc === final_rc).map((m) => m.text);
+  const emission = emitFor(
+    args.platform,
+    args.event,
+    _severity_for(final_rc),
+    decidingReasons,
+    final_rc
+  );
+  if (emission.stdout) {
+    process.stdout.write(emission.stdout);
+  }
+  if (emission.stderr) {
+    process.stderr.write(emission.stderr);
+  }
+  return emission.exit;
 }
 function _isDir4(p) {
   try {

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 594,
+    "artefact_count": 595,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-08-05",
+  "generated_at": "2026-08-06",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.22.0"
+    "version": "9.24.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.22.0"
+      "version": "9.24.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.22.0"
+  "version": "9.24.0"
 }

package/dist/scripts/condense.js

@@ -940,12 +940,51 @@ function _read_rule_packs() {
  * compiles and behaves unchanged.
  */
 /** List rule basenames under RULES_SOURCE, workspace/pack scope applied. */
+/**
+ * Is this rule `type: manual` (ADR-004 reference-only)?
+ *
+ * The schema is explicit: `manual` = "no auto-injection (zero workspace-budget
+ * cost); file remains as a reference document linkable from skills/contexts."
+ * `compile_router` already honours the first half by omitting manual rules from
+ * `dist/router.json`. The per-tool projection did NOT: it symlinked them into
+ * `.claude/rules/` (and siblings), so under the default `eager-all` projection
+ * their full bodies were injected every turn — the exact opposite of "zero
+ * workspace-budget cost". `brand-consistency` is the clearest case: its own body
+ * says "reference-only, no router emission", and it shipped in context anyway.
+ *
+ * Excluded from the per-tool trees ONLY. The file keeps its place in
+ * `dist/agent-src/rules/`, which is what "remains as a reference document
+ * linkable" requires — inbound cross-references must still resolve.
+ */
+function _is_manual_rule(rule_path) {
+    let content;
+    try {
+        content = fs.readFileSync(rule_path, 'utf-8');
+    }
+    catch {
+        return false; // unreadable → fail open, same posture as the scope filters
+    }
+    const [fm_lines] = _split_frontmatter(content);
+    if (fm_lines === null) {
+        return false;
+    }
+    for (const line of fm_lines) {
+        const m = /^type:\s*["']?([a-z]+)["']?\s*$/.exec(line);
+        if (m) {
+            return m[1] === 'manual';
+        }
+    }
+    return false;
+}
 function _scoped_rule_basenames() {
     const scope = _read_rule_workspaces();
     const pack_scope = _read_rule_packs();
     return _iterdirSorted(MODULE_STATE.RULES_SOURCE)
         .filter((p) => p.endsWith('.md') && _isFile(p))
         .filter((p) => rule_in_scope(p, scope, pack_scope))
+        // ADR-004: a manual rule costs zero workspace budget, so it never gets a
+        // per-tool symlink regardless of projection mode. See _is_manual_rule.
+        .filter((p) => !_is_manual_rule(p))
         // A compile-disabled rule has no dist/agent-src/ counterpart, so a per-tool
         // symlink to it would dangle. The source file still exists, which is why the
         // scope filters alone let it through — the toggle is a separate axis and this
@@ -1179,7 +1218,10 @@ export function generate_cursor_mdc_rules() {
     const pack_scope = _read_rule_packs();
     const rules = _rglobSorted(MODULE_STATE.RULES_SOURCE, '*.md')
         .filter((p) => _isFile(p))
-        .filter((p) => rule_in_scope(p, scope, pack_scope));
+        .filter((p) => rule_in_scope(p, scope, pack_scope))
+        // ADR-004 manual rules are reference-only — never auto-injected into a
+        // per-tool tree. Same predicate as generate_rule_symlinks.
+        .filter((p) => !_is_manual_rule(p));
     const stems = rules.map((r) => path.basename(r, '.md'));
     const valid = new Set([
         ...stems.map((s) => `${s}.mdc`),
@@ -1197,7 +1239,10 @@ export function generate_windsurf_modern_rules() {
     const pack_scope = _read_rule_packs();
     const rules = _rglobSorted(MODULE_STATE.RULES_SOURCE, '*.md')
         .filter((p) => _isFile(p))
-        .filter((p) => rule_in_scope(p, scope, pack_scope));
+        .filter((p) => rule_in_scope(p, scope, pack_scope))
+        // ADR-004 manual rules are reference-only — never auto-injected into a
+        // per-tool tree. Same predicate as generate_rule_symlinks.
+        .filter((p) => !_is_manual_rule(p));
     const valid = new Set(rules.map((r) => path.basename(r)));
     _clean_modern_dir(_WINDSURF_RULES_DIR(), valid);
     for (const rule of rules) {