@event4u/agent-config 9.25.0 → 9.26.0

package/dist/hooks/dispatch.js

@@ -15128,9 +15128,10 @@ var _VACUOUS_PATTERNS = [
 function isVacuousOutput(output) {
   const text = output.trim();
   if (!text) {
-    return true;
+    return false;
   }
-  return _VACUOUS_PATTERNS.some((re) => re.test(text));
+  const lines = text.split("\n").filter((l) => l.trim());
+  return lines.every((l) => _VACUOUS_PATTERNS.some((re) => re.test(l)));
 }
 var _CI_POLL_RE = /\bgh\s+(?:pr\s+checks|run\s+(?:watch|list|view))\b/i;
 function isCiPoll(command) {
@@ -15142,7 +15143,16 @@ function pendingCount(output) {
     return Number(m[1]);
   }
   const rows = output.match(/^\S.*\b(pending|in_progress|queued)\b/gim);
-  return rows ? rows.length : null;
+  if (rows) {
+    return rows.length;
+  }
+  if (/\bno checks reported\b/i.test(output)) {
+    return null;
+  }
+  if (/^\S+\s+(pass|fail|skipping|successful|failing)\b/im.test(output)) {
+    return 0;
+  }
+  return null;
 }
 function _extract_output(payload) {
   for (const key of ["tool_response", "toolResponse", "output", "stdout", "result"]) {
@@ -15834,15 +15844,53 @@ if (_isCliEntry11()) {
 import fs22 from "node:fs";
 import path21 from "node:path";
 import { fileURLToPath as fileURLToPath16, pathToFileURL as pathToFileURL12 } from "node:url";
+
+// src/shared/settingsClasses.ts
+function isConservativeDefault(value) {
+  if (value === null || value === false || value === "" || value === 0) {
+    return true;
+  }
+  if (Array.isArray(value)) {
+    return value.length === 0;
+  }
+  if (typeof value === "object" && value !== null) {
+    return Object.keys(value).length === 0;
+  }
+  return false;
+}
+
+// src/shared/settingsConsent.ts
+var HUMAN_SOURCES = ["jit-answer", "gui", "manual"];
+function consentVerdict(query) {
+  if (query.cls !== "B") {
+    return "not-a-consent-key";
+  }
+  if (isConservativeDefault(query.value)) {
+    return "withheld-default";
+  }
+  if (query.handEdited === true) {
+    return "granted";
+  }
+  if (query.source === void 0) {
+    return "withheld-unrecorded";
+  }
+  if (!HUMAN_SOURCES.includes(query.source)) {
+    return "withheld-machine-inferred";
+  }
+  return "granted";
+}
+
+// src/scripts/memory_learn_hook.ts
 var SETTINGS_FILE4 = ".agent-settings.yml";
 var BUDGET_MS = 2e3;
-function enabled(root) {
+var LEARN_KEY_CLASS = "B";
+function readLearnValue(root) {
   const p = path21.join(root, SETTINGS_FILE4);
   let text;
   try {
     text = fs22.readFileSync(p, "utf8");
   } catch {
-    return false;
+    return void 0;
   }
   let inMemory = false;
   for (const rawLine of text.split("\n")) {
@@ -15860,7 +15908,17 @@ function enabled(root) {
       if (m) return m[1] === "true";
     }
   }
-  return false;
+  return void 0;
+}
+function learnConsent(root) {
+  return consentVerdict({
+    cls: LEARN_KEY_CLASS,
+    value: readLearnValue(root) ?? false,
+    handEdited: true
+  });
+}
+function enabled(root) {
+  return learnConsent(root) === "granted";
 }
 function runLearn(root, nowIso, budgetMs = BUDGET_MS) {
   const started = Date.now();
@@ -17199,6 +17257,10 @@ var _PR_URL = /https?:\/\/github\.com\/[^\s"'`<>]+\/pull\/\d+/i;
 function _isObject4(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
+function _unwrap(envelope) {
+  const inner = envelope["payload"];
+  return _isObject4(inner) ? inner : envelope;
+}
 function _extractCommand(payload) {
   const toolRaw = payload["tool_name"] ?? payload["toolName"] ?? payload["tool"];
   const tool = typeof toolRaw === "string" ? toolRaw : null;
@@ -17251,11 +17313,12 @@ function main21() {
   if (!_isObject4(envelope)) {
     return EXIT_ALLOW3;
   }
-  const [tool, command] = _extractCommand(envelope);
+  const inner = _unwrap(envelope);
+  const [tool, command] = _extractCommand(inner);
   if (!_isPrCreate(tool, command)) {
     return EXIT_ALLOW3;
   }
-  const match = _PR_URL.exec(_toolOutput(envelope));
+  const match = _PR_URL.exec(_toolOutput(inner));
   if (match === null) {
     return EXIT_ALLOW3;
   }
@@ -17472,16 +17535,39 @@ import fs33 from "node:fs";
 import path33 from "node:path";
 import { fileURLToPath as fileURLToPath25, pathToFileURL as pathToFileURL20 } from "node:url";
 var EXIT_ALLOW5 = 0;
+var EXIT_WARN3 = 2;
 var STATE_FILE5 = path33.join("agents", "state", "language-mirror.json");
 function _isObject6(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-var DE_MARKERS = /\b(der|die|das|den|dem|und|ist|sind|nicht|kein|keine|mach|mache|bitte|warum|wieso|weshalb|weiter|kannst|sollst|soll|musst|muss|hast|habe|haben|wir|ich|du|dann|noch|auch|schon|wenn|aber|alle|mit|ohne|damit|dass|wurde|werden|gibt|nochmal|erstell|erstelle|erstelle|fehler|regeln|arbeite|analysiere|fixe|nimm|lege|prüfe|pruefe|schau|zeig|mir|dir|sich|eine|einen|einem|einer|vom|zum|zur|beim|im|am)\b|[äöüÄÖÜß]/gi;
+var DE_MARKERS = /\b(der|die|das|den|dem|und|ist|sind|nicht|kein|keine|mach|mache|bitte|warum|wieso|weshalb|weiter|kannst|sollst|soll|musst|muss|hast|habe|haben|wir|ich|du|dann|noch|auch|schon|wenn|aber|alle|mit|ohne|damit|dass|wurde|werden|gibt|nochmal|erstell|erstelle|erstelle|fehler|regeln|arbeite|analysiere|fixe|nimm|lege|prüfe|pruefe|schau|zeig|mir|dir|sich|eine|einen|einem|einer|vom|zum|zur|beim|im)\b|[äöüÄÖÜß]/gi;
 var EN_MARKERS = /\b(the|and|is|are|was|were|not|please|why|because|should|would|could|there|these|those|with|from|about|which|that|this|will|have|has|been|they|them|their|your|our|what|when|where|make|need|want|does|doesn't|don't|it's|let's)\b/gi;
 var MIN_MARKERS = 2;
+function instructionText(prompt) {
+  const OUTPUT_HEAD = /^\s*(To\s+\S+|remote:|error:|fatal:|hint:|warning:|npm ERR!|Error:|Traceback|Exception|[A-Za-z]*Error\b|at\s+\S+:\d+|\s{4,}\S|[-+]{3}\s|@@\s|\$\s|>\s|\||\d+\s*\|)/i;
+  const kept = [];
+  let inPaste = false;
+  for (const line of prompt.replace(/```[\s\S]*?```/g, "\n\n").split("\n")) {
+    if (!line.trim()) {
+      inPaste = false;
+      kept.push(line);
+      continue;
+    }
+    if (OUTPUT_HEAD.test(line)) {
+      inPaste = true;
+      continue;
+    }
+    if (inPaste) {
+      continue;
+    }
+    kept.push(line);
+  }
+  return kept.join("\n");
+}
 function classify(prompt) {
-  const de = (prompt.match(DE_MARKERS) ?? []).length;
-  const en = (prompt.match(EN_MARKERS) ?? []).length;
+  const text = instructionText(prompt);
+  const de = (text.match(DE_MARKERS) ?? []).length;
+  const en = (text.match(EN_MARKERS) ?? []).length;
   if (de < MIN_MARKERS && en < MIN_MARKERS) {
     return { language: "und", de_markers: de, en_markers: en };
   }
@@ -17491,8 +17577,44 @@ var LANGUAGE_NAME = {
   de: "German (Deutsch)",
   en: "English"
 };
-function pinText(language) {
+var LOCALE_ENV_KEYS = ["LC_ALL", "LC_MESSAGES", "LANG", "LANGUAGE"];
+function systemLocaleVerdict(env = process.env) {
+  for (const key of LOCALE_ENV_KEYS) {
+    const raw = (env[key] ?? "").trim();
+    if (!raw) {
+      continue;
+    }
+    const first = raw.split(":")[0] ?? "";
+    const primary = (first.split(/[._@-]/)[0] ?? "").toLowerCase();
+    if (primary === "c" || primary === "posix" || !primary) {
+      continue;
+    }
+    if (primary === "de") {
+      return "de";
+    }
+    if (primary === "en") {
+      return "en";
+    }
+    return "und";
+  }
+  return "und";
+}
+function noticeText(language, source) {
+  const name = LANGUAGE_NAME[language];
+  if (source === "system-locale") {
+    return `Reply language for this turn: ${name} \u2014 the prompt carried no language markers, so this fell back to the system locale. Write in another language and the next turn follows the prompt instead.`;
+  }
+  return `Reply language for this turn: ${name}.`;
+}
+function pinText(language, source = "prompt") {
   const name = LANGUAGE_NAME[language];
+  if (source === "system-locale") {
+    return `<language-pin>
+No language markers were found in this turn's prompt and no language was pinned yet, so the mirror target falls back to the environment's locale: ${name}. Use it for EVERY user-visible token this turn.
+
+This is the WEAKER of the two provenances \u2014 it reflects the machine, not the user's own words. The first prompt that carries real markers replaces it. Do not treat it as a standing preference, and do not argue with the user about it if they write in something else.
+</language-pin>`;
+  }
   return `<language-pin>
 The user submitted this turn's prompt in ${name}. That is the mirror target for EVERY user-visible token of your replies this turn \u2014 including the short inter-tool lines between tool calls, headings, table cells, bullets, status lines, and the recommendation label under any numbered-options block.
 
@@ -17508,12 +17630,27 @@ function _loadState(target) {
     return {};
   }
 }
-function nextState(previous, classification, prompt_chars, session_id, now) {
+function nextState(previous, classification, prompt_chars, session_id, now, locale = "und") {
   if (classification.language === "und") {
-    return null;
+    if (previous.language === "de" || previous.language === "en") {
+      return null;
+    }
+    if (locale === "und") {
+      return null;
+    }
+    return {
+      language: locale,
+      source: "system-locale",
+      detected_at: now,
+      prompt_chars,
+      de_markers: classification.de_markers,
+      en_markers: classification.en_markers,
+      session_id
+    };
   }
   return {
     language: classification.language,
+    source: "prompt",
     detected_at: now,
     prompt_chars,
     de_markers: classification.de_markers,
@@ -17551,8 +17688,19 @@ function run7(stdin_text, options) {
   const target = path33.join(options.consumer_root, STATE_FILE5);
   const previous = _loadState(target);
   const classification = classify(prompt);
-  const next = nextState(previous, classification, prompt.length, session_id, (/* @__PURE__ */ new Date()).toISOString());
+  const next = nextState(
+    previous,
+    classification,
+    prompt.length,
+    session_id,
+    (/* @__PURE__ */ new Date()).toISOString(),
+    // Injectable so the suite can pin a locale instead of inheriting the
+    // machine's — a test whose verdict depends on the developer's `LANG` is a
+    // test that passes here and fails in CI for reasons unrelated to the diff.
+    systemLocaleVerdict(options.env ?? process.env)
+  );
   const effective = next?.language ?? previous.language;
+  const effectiveSource = next?.source ?? (previous.source === "system-locale" ? "system-locale" : "prompt");
   if (next) {
     try {
       atomic_write_json(target, next);
@@ -17561,9 +17709,10 @@ function run7(stdin_text, options) {
   }
   if (effective === "de" || effective === "en") {
     process.stdout.write(
-      `${JSON.stringify({ decision: "warn", reason: `Reply language for this turn: ${LANGUAGE_NAME[effective]}.`, additional_context: pinText(effective) })}
+      `${JSON.stringify({ decision: "warn", reason: noticeText(effective, effectiveSource), additional_context: pinText(effective, effectiveSource) })}
 `
     );
+    return EXIT_WARN3;
   }
   return EXIT_ALLOW5;
 }
@@ -17614,15 +17763,42 @@ function _isObject7(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 var PHRASES = [
-  { op: "commit", re: /\b(commit(e|et|ten|ted|ting)?|committe|einchecken)\b/i },
-  { op: "push", re: /\b(push(e|en|ed|ing)?|hochladen|hochschieben|raufschieben)\b/i },
-  { op: "branch", re: /\b(branch(e|es)?|zweig|feature-branch|erstelle einen branch)\b/i },
-  { op: "pr-create", re: /\b(pull[- ]request|pr\b|mach(e|en)? (einen|nen) pr|erstelle .{0,20}pr)\b/i },
-  { op: "pr-merge", re: /\b(merge[nrd]?|mergen|zusammenführen|zusammenfuehren|reinmergen|gemerged)\b/i },
-  { op: "tag", re: /\b(tag(ge|gen|ged|ging)?|version(iere|ieren)?)\b/i },
-  { op: "release", re: /\b(release[nd]?|releasen|veröffentlich(e|en|ung)|veroeffentlich(e|en))\b/i },
-  { op: "publish", re: /\b(publish(e|en|ed|ing)?|npm publish|publiziere[n]?)\b/i }
+  { op: "commit", re: /\b(commit(e|et|te|ten)?|committe|einchecken)\b/i },
+  { op: "push", re: /\b(push(e|en|t)?|hochladen|hochschieben|raufschieben)\b/i },
+  { op: "branch", re: /\b(branch|feature-branch|zweig)\b/i },
+  // A creation verb is required — "schau dir den PR an" is not "open a PR".
+  {
+    op: "pr-create",
+    re: /\b(erstell(e|en)?|mach(e|en)?|leg(e|en)?\s+an|(er)?(ö|oe)ffne|open|create|raise|aufmachen)\b[^.\n]{0,30}\b(pr|pull[- ]request)\b|\b(pr|pull[- ]request)\b[^.\n]{0,20}\b(erstellen|aufmachen|anlegen|(er)?(ö|oe)ffnen)\b/i
+  },
+  // `merge` as an ACTION, never as the noun in "merge conflict" / "merge commit".
+  { op: "pr-merge", re: /\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i },
+  // A tag is an ACTION here — bare "Tag" is the German word for day, and
+  // "Version" is an ordinary noun. Both authorized a BLOCK op before this.
+  { op: "tag", re: /\b(tagge(n|st)?|tag\s+(setzen|anlegen|erstellen)|git\s+tag|--tags|--follow-tags)\b/i },
+  // "die release notes sind falsch" is a noun phrase, not an authorization.
+  {
+    op: "release",
+    re: /\b(releasen?|ver(ö|oe)ffentlich(e|en))\b(?!\s*[- ]?(notes?|branch|candidate|pr\b|datum|date|zweig))/i
+  },
+  { op: "publish", re: /\b(publish(e|en)?|publiziere[n]?)\b/i }
 ];
+var OUTPUT_LINE = /^\s*(To\s+\S+|remote:|error:|fatal:|hint:|warning:|!\s|\?\?\s|\s*\^|[-+]{3}\s|@@\s|\$\s|>\s|\d+\s+(pass|fail)|npm ERR!|Error:|Traceback|at\s+\S+:\d+)/i;
+function isInterrogative(prose) {
+  const t = prose.trim();
+  if (!t) {
+    return false;
+  }
+  const hasImperative = /\b(mach|mache|bitte|leg|lege|erstell|erstelle|f(ü|ue)hr|f(ü|ue)hre|setz|setze|starte|los|jetzt|go ahead|do it|ja[,.]?\s|ok[,.]?\s)\b/i.test(
+    t
+  );
+  if (hasImperative) {
+    return false;
+  }
+  return /\?\s*$/.test(t) || /^(was|wie|warum|wieso|weshalb|wann|wer|welche[rs]?|wo|ist|sind|kann|kannst|k(ö|oe)nnen|soll|sollen|darf|d(ü|ue)rfen|why|what|how|when|which|who|is|are|can|could|should|does|do)\b/i.test(
+    t
+  );
+}
 var PASTED_COMMANDS = [
   { op: "publish", re: /\bnpm\s+publish\b/i },
   { op: "tag", re: /\bgit\s+push\s+[^\n]*--tags\b|\bgit\s+tag\s+-a\b/i },
@@ -17648,14 +17824,18 @@ function classifyAuthorization(prompt) {
   const { prose, fences } = splitFences(prompt);
   const authorized = /* @__PURE__ */ new Set();
   const evidence = {};
-  for (const { op, re } of PHRASES) {
-    const m = re.exec(prose);
+  const instruction = prose.split("\n").filter((l) => !OUTPUT_LINE.test(l)).join("\n");
+  for (const { op, re } of isInterrogative(instruction) ? [] : PHRASES) {
+    const m = re.exec(instruction);
     if (m) {
       authorized.add(op);
       evidence[op] = `prose: "${m[0]}"`;
     }
   }
   for (const fence of fences) {
+    if (fence.split("\n").some((l) => OUTPUT_LINE.test(l))) {
+      continue;
+    }
     for (const line of _commandLines(fence)) {
       for (const { op, re } of PASTED_COMMANDS) {
         if (re.test(line)) {
@@ -17747,7 +17927,7 @@ import fs35 from "node:fs";
 import path35 from "node:path";
 import { fileURLToPath as fileURLToPath27, pathToFileURL as pathToFileURL22 } from "node:url";
 var EXIT_ALLOW7 = 0;
-var EXIT_BLOCK = 2;
+var EXIT_BLOCK = 1;
 function _isObject8(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
@@ -17763,15 +17943,22 @@ var WARN_OPS = /* @__PURE__ */ new Set([
   "pr-create",
   "branch"
 ]);
+var G = "(?:-[A-Za-z-]+(?:=\\S+)?(?:\\s+\\S+)?\\s+)*";
 var COMMAND_OPS = [
-  { op: "publish", re: /\b(npm|pnpm|yarn)\s+publish\b/i },
-  { op: "release", re: /\bgh\s+release\s+create\b/i },
-  { op: "tag", re: /\bgit\s+push\b[^\n;|&]*--tags\b|\bgit\s+push\b[^\n;|&]*\brefs\/tags\//i },
-  { op: "pr-merge", re: /\bgh\s+pr\s+merge\b/i },
-  { op: "pr-create", re: /\bgh\s+pr\s+create\b/i },
-  { op: "push", re: /\bgit\s+push\b/i },
-  { op: "commit", re: /\bgit\s+commit\b/i },
-  { op: "branch", re: /\bgit\s+(checkout\s+-b|switch\s+-c)\b/i }
+  { op: "publish", re: new RegExp(`\\b(npm|pnpm|yarn)\\s+${G}publish\\b`, "i") },
+  { op: "release", re: /\bgh\s+release\s+create\b|\bgh\s+api\b[^\n]*\/releases\b/i },
+  {
+    op: "tag",
+    re: new RegExp(
+      `\\bgit\\s+${G}push\\b[^\\n;|&]*(--tags|--follow-tags|refs\\/tags\\/)`,
+      "i"
+    )
+  },
+  { op: "pr-merge", re: /\bgh\s+pr\s+merge\b|\bgh\s+api\b[^\n]*\/pulls\/\d+\/merge\b/i },
+  { op: "pr-create", re: /\bgh\s+pr\s+create\b|\bgh\s+api\b[^\n]*-X\s+POST[^\n]*\/pulls\b/i },
+  { op: "push", re: new RegExp(`\\bgit\\s+${G}push\\b`, "i") },
+  { op: "commit", re: new RegExp(`\\bgit\\s+${G}commit\\b`, "i") },
+  { op: "branch", re: new RegExp(`\\bgit\\s+${G}(checkout\\s+-b|switch\\s+-c)\\b`, "i") }
 ];
 var COMMAND_TOOLS3 = /* @__PURE__ */ new Set([
   "launch-process",
@@ -17800,19 +17987,62 @@ function extractCommand(envelope) {
   }
   return null;
 }
+function invokedSegments(command, depth = 0) {
+  if (depth > 3) {
+    return [];
+  }
+  const out = [];
+  const withoutHeredocs = command.replace(
+    /<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1[\s\S]*?^\s*\2\s*$/gm,
+    "<<HEREDOC"
+  );
+  for (const raw of withoutHeredocs.split(/\n|;|&&|\|\||\||&/)) {
+    let seg = raw.trim();
+    if (!seg) {
+      continue;
+    }
+    seg = seg.replace(/^(?:[A-Za-z_][A-Za-z0-9_]*=(?:"[^"]*"|'[^']*'|\S*)\s+)+/, "");
+    const wrapped = /^(?:\S*\/)?(?:ba|z|k)?sh\s+-[a-z]*c\s+(?:"([^"]*)"|'([^']*)'|(\S+))/.exec(seg);
+    if (wrapped) {
+      out.push(...invokedSegments(wrapped[1] ?? wrapped[2] ?? wrapped[3] ?? "", depth + 1));
+      continue;
+    }
+    out.push(seg);
+  }
+  return out;
+}
 function commandOp(command) {
-  for (const { op, re } of COMMAND_OPS) {
-    if (re.test(command)) {
-      return op;
+  let found = null;
+  for (const seg of invokedSegments(command)) {
+    if (!/^(?:\S*\/)?(git|gh|npm|pnpm|yarn)\b/.test(seg)) {
+      continue;
+    }
+    for (const { op, re } of COMMAND_OPS) {
+      if (re.test(seg)) {
+        if (BLOCK_OPS.has(op)) {
+          return op;
+        }
+        found ??= op;
+        break;
+      }
     }
   }
-  return null;
+  return found;
 }
-function _loadLedger(consumer_root) {
+var LEDGER_MAX_AGE_MS = 30 * 60 * 1e3;
+function _loadLedger(consumer_root, session_id, now) {
   try {
     const raw = fs35.readFileSync(path35.join(consumer_root, STATE_FILE6), "utf8");
     const decoded = JSON.parse(raw);
     if (_isObject8(decoded) && Array.isArray(decoded["authorized"])) {
+      const ledgerSession = typeof decoded["session_id"] === "string" ? decoded["session_id"] : "";
+      if (session_id && ledgerSession && ledgerSession !== session_id) {
+        return { authorized: /* @__PURE__ */ new Set(), present: false };
+      }
+      const at = Date.parse(String(decoded["detected_at"] ?? ""));
+      if (Number.isFinite(at) && now - at > LEDGER_MAX_AGE_MS) {
+        return { authorized: /* @__PURE__ */ new Set(), present: false };
+      }
       return {
         authorized: new Set(decoded["authorized"].filter(Boolean)),
         present: true
@@ -17859,7 +18089,11 @@ function run9(stdin_text, options) {
       return EXIT_ALLOW7;
     }
   }
-  const decision = decide(extractCommand(envelope), _loadLedger(options.consumer_root));
+  const session_id = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
+  const decision = decide(
+    extractCommand(envelope),
+    _loadLedger(options.consumer_root, session_id, Date.now())
+  );
   if (decision.stdout) {
     process.stdout.write(decision.stdout);
   }
@@ -17911,7 +18145,7 @@ import fs36 from "node:fs";
 import path36 from "node:path";
 import { fileURLToPath as fileURLToPath28, pathToFileURL as pathToFileURL23 } from "node:url";
 var EXIT_ALLOW8 = 0;
-var EXIT_BLOCK2 = 2;
+var EXIT_BLOCK2 = 1;
 var STATE_FILE7 = path36.join("agents", "state", "evidence-dispatch.json");
 function _isObject9(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
@@ -17926,8 +18160,18 @@ var DISPATCH_TOOLS = /* @__PURE__ */ new Set([
   "run_subagent",
   "Subagent"
 ]);
-var EVALUATION_RE = /\b(review|reviewer|audit|auditor|judge|verdict|blind[- ]pass|blind review|adversarial|critique|assess(ment)?|verify (my|the) (work|change|diff|implementation)|find (any )?(bugs|issues|defects|problems) in (my|the))\b/i;
+var EVALUATION_RE = /\b(review|reviewer|audit|auditor|judge|verdict|blind[- ]pass|blind review|adversarial|critique|assess(ment)?|verify (my|the) (work|change|diff|implementation)|find (any )?(bugs|issues|defects|problems) in (my|the)|pr(ü|ue)f(e|ung)?|begutachte|gutachten|bewerte|(gegen)?check(e)?|durchsicht|review(e|iere))\b/i;
 var PRELOADED_VERDICT_RE = [
+  // German — the operator writes German, and an English-only list meant no
+  // German dispatch was ever screened at all.
+  /\bich erwarte (hier )?(keine|nichts)\b/i,
+  /\b(du )?(wirst|solltest) (hier )?nichts finden\b/i,
+  /\bbest(ä|ae)tige (nur|kurz)\b/i,
+  /\b(ist|sollte) (wahrscheinlich|vermutlich|sicher) (sauber|korrekt|in ordnung|fine)\b/i,
+  /\bkeine findings? (erwartet|zu erwarten)\b/i,
+  // English paraphrases of the audited construct.
+  /\bi am confident there is nothing\b/i,
+  /\ba clean pass is the likely\b/i,
   /\bno[- ]findings? (is|are) (expected|welcome|fine|acceptable|the likely)/i,
   /\b(you )?(should|will|probably) find (nothing|no (issues|problems|bugs|findings))/i,
   /\bconfirm (that )?there (are|is) no\b/i,
@@ -17968,6 +18212,18 @@ function extractDispatch(envelope) {
   }
   return [tool, ""];
 }
+function _ledgerStamp(consumer_root) {
+  try {
+    const raw = fs36.readFileSync(
+      path36.join(consumer_root, "agents", "state", "git-authorization.json"),
+      "utf8"
+    );
+    const d = JSON.parse(raw);
+    return typeof d["detected_at"] === "string" ? d["detected_at"] : "";
+  } catch {
+    return "";
+  }
+}
 function _load(target) {
   try {
     const decoded = JSON.parse(fs36.readFileSync(target, "utf8"));
@@ -18028,7 +18284,7 @@ function run10(stdin_text, options) {
   const target = path36.join(options.consumer_root, STATE_FILE7);
   const state = _load(target);
   const session_id = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
-  const turnMarker = typeof envelope["turn_id"] === "string" ? envelope["turn_id"] : session_id;
+  const turnMarker = `${session_id}:${_ledgerStamp(options.consumer_root)}`;
   if (state.session_id !== turnMarker) {
     state.session_id = turnMarker;
     state.turn_started_at = (/* @__PURE__ */ new Date()).toISOString();
@@ -18335,7 +18591,7 @@ function _check_command(cmd) {
       if (/\bgit\b/.test(cmd)) {
         return [
           true,
-          "command parse failed (shlex) on a git-containing command \u2014 fail-closed (git-history-discipline)"
+          "command parse failed (shlex) on a git-containing command \u2014 fail-closed (git-history-discipline). \nMost common cause: an apostrophe or backtick inside a heredoc commit message in the SAME compound command as `git`. \nFix: write the message to a file and use `git commit -F <file>` \u2014 do not retry the heredoc."
         ];
       }
       return [false, ""];
@@ -18728,7 +18984,7 @@ import { fileURLToPath as fileURLToPath31, pathToFileURL as pathToFileURL26 } fr
 var _HERE5 = fileURLToPath31(import.meta.url);
 var EXIT_ALLOW9 = 0;
 var EXIT_BLOCK3 = 1;
-var EXIT_WARN3 = 2;
+var EXIT_WARN4 = 2;
 var SESSION_ENTRY_CAP = 20;
 var SESSION_WARN_AT = 5;
 function _isObject11(v) {
@@ -18895,7 +19151,7 @@ function main29() {
     if (d.action === "warn") {
       process.stdout.write(`${JSON.stringify({ decision: "warn", reason: d.reason })}
 `);
-      return EXIT_WARN3;
+      return EXIT_WARN4;
     }
   }
   return EXIT_ALLOW9;
@@ -19037,7 +19293,7 @@ function detectRtkCached(options = {}) {
 // src/scripts/hooks/rtk_wrap_hook.ts
 var SETTINGS_FILE6 = ".agent-settings.yml";
 var EXIT_ALLOW10 = 0;
-var EXIT_WARN4 = 2;
+var EXIT_WARN5 = 2;
 var _RTK_PROGRAMS = /* @__PURE__ */ new Set([
   "git",
   "phpstan",
@@ -19180,7 +19436,7 @@ function main30() {
   const reason = `rtk is installed and wraps verbose CLI output (upstream reports 60\u201390% fewer output tokens). Re-run wrapped: \`rtk ${command.trim()}\`. (Skip for completeness-critical output like \`git diff\`.)`;
   process.stdout.write(`${_jsonReason(reason)}
 `);
-  return EXIT_WARN4;
+  return EXIT_WARN5;
 }
 function _isCliEntry26() {
   if (true) {
@@ -19797,7 +20053,7 @@ if (invokedDirectly) main31();
 // src/scripts/hooks/design_slop_hook.ts
 var SETTINGS_FILE7 = ".agent-settings.yml";
 var EXIT_ALLOW11 = 0;
-var EXIT_WARN5 = 2;
+var EXIT_WARN6 = 2;
 var DEGRADE_AFTER = 3;
 var UI_EXT = /\.(html|htm|css|scss|sass|less|vue|svelte|astro|jsx|tsx)$/i;
 function isObject(v) {
@@ -19833,7 +20089,12 @@ function enabled2(root) {
   }
   return false;
 }
-function extract(envelope) {
+function _unwrap2(envelope) {
+  const inner = envelope["payload"];
+  return isObject(inner) ? inner : envelope;
+}
+function extract(outer) {
+  const envelope = _unwrap2(outer);
   const ti = envelope["tool_input"] ?? envelope["toolInput"] ?? envelope["input"];
   if (!isObject(ti)) return null;
   const fileVal = ti["file_path"] ?? ti["path"] ?? ti["filePath"];
@@ -19909,7 +20170,7 @@ function main32() {
   const lines = surfaced.map((f) => `${f.catalogId} (${f.rule}) ${f.file}:${f.line} \u2014 ${f.message}`).join("; ");
   const reason = "\u26A0\uFE0F Anti-slop: high-severity aesthetic tell(s) in the proposed UI \u2014 " + lines + ". Rebuttable: declare intent in DESIGN.md, add design-slop-disable-next-line, or proceed if deliberate (this is a flag, not a block).";
   process.stdout.write(JSON.stringify({ decision: "warn", reason }) + "\n");
-  return EXIT_WARN5;
+  return EXIT_WARN6;
 }
 function _isCliEntry27() {
   if (true) {
@@ -20071,7 +20332,7 @@ function pickSource(verdicts) {
 // src/scripts/hooks/code_graph_nudge_hook.ts
 var SETTINGS_FILE8 = ".agent-settings.yml";
 var EXIT_ALLOW12 = 0;
-var EXIT_WARN6 = 2;
+var EXIT_WARN7 = 2;
 var CODE_EXT = /\.(php|ts|tsx|mts|cts|js|jsx|mjs|cjs)$/i;
 function isObject2(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
@@ -20186,7 +20447,7 @@ function main33() {
   latch(root, session);
   process.stdout.write(`${JSON.stringify({ decision: "warn", reason })}
 `);
-  return EXIT_WARN6;
+  return EXIT_WARN7;
 }
 function isCliEntry10() {
   if (true) {
@@ -20292,7 +20553,7 @@ var REPO_ROOT = path45.resolve(
 var MANIFEST_PATH = path45.join(REPO_ROOT, "src", "scripts", "hook_manifest.yaml");
 var EXIT_ALLOW13 = 0;
 var EXIT_BLOCK4 = 1;
-var EXIT_WARN7 = 2;
+var EXIT_WARN8 = 2;
 var EVENT_VOCABULARY = /* @__PURE__ */ new Set([
   "session_start",
   "session_end",
@@ -20306,7 +20567,7 @@ var EVENT_VOCABULARY = /* @__PURE__ */ new Set([
 var _SEVERITY_BY_EXIT = {
   [EXIT_ALLOW13]: "allow",
   [EXIT_BLOCK4]: "block",
-  [EXIT_WARN7]: "warn"
+  [EXIT_WARN8]: "warn"
 };
 function _isObject13(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
@@ -20345,6 +20606,31 @@ function _load_yaml3(p) {
   const data = (0, import_yaml6.parse)(text, { version: "1.1" });
   return _isObject13(data) ? data : {};
 }
+function _payload_tool_name(envelope) {
+  const payload = envelope["payload"];
+  if (!_isObject13(payload)) {
+    return "";
+  }
+  const raw = payload["tool_name"];
+  return typeof raw === "string" ? raw : "";
+}
+function _concern_matches_tool(concern, tool_name) {
+  const raw = concern["tools"];
+  if (raw === void 0 || raw === null) {
+    return true;
+  }
+  if (!Array.isArray(raw) || raw.length === 0) {
+    return true;
+  }
+  const names = raw.filter((t) => typeof t === "string");
+  if (names.length === 0 || names.includes("*")) {
+    return true;
+  }
+  if (tool_name === "") {
+    return true;
+  }
+  return names.includes(tool_name);
+}
 function _resolve_concerns(manifest, platform, event) {
   const platformsRaw = manifest["platforms"];
   const platforms = _isObject13(platformsRaw) ? platformsRaw : {};
@@ -20679,8 +20965,8 @@ function _reduce(rcs) {
   if (rcs.some((rc) => rc === EXIT_BLOCK4)) {
     return EXIT_BLOCK4;
   }
-  if (rcs.some((rc) => rc === EXIT_WARN7)) {
-    return EXIT_WARN7;
+  if (rcs.some((rc) => rc === EXIT_WARN8)) {
+    return EXIT_WARN8;
   }
   return EXIT_ALLOW13;
 }
@@ -20750,7 +21036,7 @@ function _write_feedback(envelope, session_id, entries, final_rc, started_at) {
 function _record_rule_trips(envelope, entries) {
   if (is_replay_mode()) return;
   const tripped = entries.filter(
-    (e) => e["exit_code"] === EXIT_BLOCK4 || e["exit_code"] === EXIT_WARN7
+    (e) => e["exit_code"] === EXIT_BLOCK4 || e["exit_code"] === EXIT_WARN8
   );
   if (tripped.length === 0) return;
   try {
@@ -20771,7 +21057,7 @@ function _record_rule_trips(envelope, entries) {
       const prev = concerns[name] ?? { block: 0, warn: 0 };
       concerns[name] = {
         block: (Number(prev["block"]) || 0) + (e["exit_code"] === EXIT_BLOCK4 ? 1 : 0),
-        warn: (Number(prev["warn"]) || 0) + (e["exit_code"] === EXIT_WARN7 ? 1 : 0),
+        warn: (Number(prev["warn"]) || 0) + (e["exit_code"] === EXIT_WARN8 ? 1 : 0),
         last_trip: today
       };
     }
@@ -20917,7 +21203,11 @@ function main34(argv) {
   const feedback_entries = [];
   const context_blocks = [];
   const concern_messages = [];
+  const tool_name = _payload_tool_name(envelope);
   for (const concern of concerns) {
+    if (!_concern_matches_tool(concern, tool_name)) {
+      continue;
+    }
     const concern_started = _now_iso3();
     const { rc: rawRcResult, stderr: stderr_text, stdout: stdout_text, duration_ms } = _run_concern(concern, envelope);
     let rc = rawRcResult;
@@ -20937,13 +21227,15 @@ function main34(argv) {
         `dispatch_hook: concern '${String(concern["name"])}' is declared severity: advisory but returned BLOCK \u2014 downgraded to warn.
 `
       );
-      rc = EXIT_WARN7;
+      rc = EXIT_WARN8;
     }
     rcs.push(rc);
     const reply = _parse_concern_stdout(stdout_text);
     const stated = typeof reply["reason"] === "string" && reply["reason"].trim() ? reply["reason"].trim() : stderr_text.trim();
-    if (stated) {
-      concern_messages.push({ rc, text: stated });
+    const extra = typeof reply["additional_context"] === "string" && reply["additional_context"].trim() ? reply["additional_context"].trim() : "";
+    const message = [stated, extra].filter(Boolean).join("\n\n");
+    if (message) {
+      concern_messages.push({ rc, text: message });
     }
     if (args.event === "session_start" && rc === EXIT_ALLOW13 && typeof reply["context"] === "string" && reply["context"].trim()) {
       context_blocks.push(reply["context"].trim());