@event4u/agent-config 9.26.0 → 9.28.0

package/dist/cli-delegate/{chunk-BSLUHV2F.js → chunk-2BE5I2MN.js}

@@ -10,6 +10,10 @@ import {
   claude_plugin_snapshot_version,
   codex_plugin_identity
 } from "./chunk-FTAISGDQ.js";
+import {
+  config_exports,
+  hardenedSpawnEnv
+} from "./chunk-VSYT7OHO.js";
 import {
   DEFAULT_GITATTRIBUTES,
   SECTION_HEADER,
@@ -32,13 +36,6 @@ import {
   excludedRuleBasenames,
   ruleScopeFromSettings
 } from "./chunk-NXFWFAYV.js";
-import {
-  resolvePackageRoot
-} from "./chunk-MCJYCQPF.js";
-import {
-  config_exports,
-  hardenedSpawnEnv
-} from "./chunk-VSYT7OHO.js";
 import {
   PROJECT_ROOT_ENV,
   ProjectRootError,
@@ -46,7 +43,7 @@ import {
   find_project_root_with_trace,
   project_settings_path,
   resolve_project_root
-} from "./chunk-HJ6DAJHR.js";
+} from "./chunk-GB2FSUEE.js";
 import {
   event4u_root,
   resolve_with_fallback,
@@ -55,6 +52,9 @@ import {
 import {
   require_dist
 } from "./chunk-OY53J6II.js";
+import {
+  resolvePackageRoot
+} from "./chunk-MCJYCQPF.js";
 import {
   __export,
   __toESM
@@ -63,9 +63,9 @@ import {
 // src/scripts/_cli/cmd_doctor.ts
 var YAML = __toESM(require_dist(), 1);
 import * as crypto3 from "node:crypto";
-import * as fs6 from "node:fs";
+import * as fs7 from "node:fs";
 import * as os3 from "node:os";
-import * as path7 from "node:path";
+import * as path8 from "node:path";
 import process2 from "node:process";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 
@@ -108,6 +108,39 @@ function censusDuplicateScope(userRulesDir, projectRulesDir) {
   };
 }
 
+// src/scripts/_lib/git_common_dir.ts
+import fs2 from "node:fs";
+import path2 from "node:path";
+function realpath_or_self(p) {
+  try {
+    return fs2.realpathSync(p);
+  } catch {
+    return p;
+  }
+}
+function git_common_dir(project_root) {
+  const dot_git = path2.join(project_root, ".git");
+  try {
+    const st = fs2.statSync(dot_git);
+    if (st.isDirectory()) {
+      return realpath_or_self(dot_git);
+    }
+    const m = fs2.readFileSync(dot_git, "utf-8").match(/^gitdir:\s*(.+)\s*$/m);
+    if (m === null) {
+      return null;
+    }
+    const gitdir = path2.resolve(project_root, m[1].trim());
+    const commondir_file = path2.join(gitdir, "commondir");
+    if (fs2.existsSync(commondir_file)) {
+      const common = path2.resolve(gitdir, fs2.readFileSync(commondir_file, "utf-8").trim());
+      return realpath_or_self(common);
+    }
+    return realpath_or_self(gitdir);
+  } catch {
+    return null;
+  }
+}
+
 // src/scripts/ai_council/clients.ts
 var clients_exports = {};
 __export(clients_exports, {
@@ -164,13 +197,13 @@ __export(clients_exports, {
   reset_cli_call_counts: () => reset_cli_call_counts
 });
 import { spawnSync } from "node:child_process";
-import * as fs3 from "node:fs";
-import * as path3 from "node:path";
+import * as fs4 from "node:fs";
+import * as path4 from "node:path";
 
 // src/scripts/ai_council/events_log.ts
 import * as crypto from "node:crypto";
-import * as fs2 from "node:fs";
-import * as path2 from "node:path";
+import * as fs3 from "node:fs";
+import * as path3 from "node:path";
 import { fileURLToPath } from "node:url";
 var SCHEMA_VERSION = 1;
 var _VALID_ACTIONS = /* @__PURE__ */ new Set([
@@ -180,8 +213,8 @@ var _VALID_ACTIONS = /* @__PURE__ */ new Set([
 ]);
 var _KILL_SWITCH_ENV = "AGENT_CONFIG_NO_EVENTS_LOG";
 var _HERE = fileURLToPath(import.meta.url);
-var _REPO_ROOT = path2.resolve(path2.dirname(_HERE), "..", "..", "..");
-var _DEFAULT_LOG_PATH = path2.join(
+var _REPO_ROOT = path3.resolve(path3.dirname(_HERE), "..", "..", "..");
+var _DEFAULT_LOG_PATH = path3.join(
   _REPO_ROOT,
   "agents",
   "runtime",
@@ -282,9 +315,9 @@ function appendEvent(event, opts = {}) {
     }
   }
   const target = opts.logPath != null ? opts.logPath : _DEFAULT_LOG_PATH;
-  fs2.mkdirSync(path2.dirname(target), { recursive: true });
+  fs3.mkdirSync(path3.dirname(target), { recursive: true });
   const line = _pyJsonDumpsCompact(record);
-  fs2.appendFileSync(target, line + "\n", { encoding: "utf-8" });
+  fs3.appendFileSync(target, line + "\n", { encoding: "utf-8" });
   return true;
 }
 function _isoSecondsZ(d) {
@@ -468,13 +501,13 @@ function _setMonotonicSource(fn) {
   return prev;
 }
 function _loadKey(p, prefix, installScript) {
-  if (!fs3.existsSync(p)) {
+  if (!fs4.existsSync(p)) {
     throw new KeyGateError(
       `Key not found at ${p}.
     Install it with: bash ${installScript}`
     );
   }
-  const st = fs3.statSync(p);
+  const st = fs4.statSync(p);
   const mode = st.mode & 511;
   if (mode !== 384) {
     throw new KeyGateError(
@@ -482,7 +515,7 @@ function _loadKey(p, prefix, installScript) {
     Fix:  chmod 600 ${p}`
     );
   }
-  const key = fs3.readFileSync(p, { encoding: "utf-8" }).trim();
+  const key = fs4.readFileSync(p, { encoding: "utf-8" }).trim();
   if (!key) {
     throw new KeyGateError(`${p} is empty.`);
   }
@@ -940,12 +973,12 @@ function _today_utc_iso() {
 }
 function load_cli_call_counts(p = null) {
   const target = p !== null ? p : _cliCallsStatePath();
-  if (!fs3.existsSync(target)) {
+  if (!fs4.existsSync(target)) {
     return {};
   }
   let data;
   try {
-    data = JSON.parse(fs3.readFileSync(target, { encoding: "utf-8" }));
+    data = JSON.parse(fs4.readFileSync(target, { encoding: "utf-8" }));
   } catch {
     return {};
   }
@@ -972,8 +1005,8 @@ function record_cli_call(provider, p = null) {
   const target = p !== null ? p : _cliCallsStatePath();
   const counts = load_cli_call_counts(target);
   counts[provider] = (counts[provider] ?? 0) + 1;
-  fs3.mkdirSync(path3.dirname(target), { recursive: true });
-  fs3.writeFileSync(
+  fs4.mkdirSync(path4.dirname(target), { recursive: true });
+  fs4.writeFileSync(
     target,
     _jsonDumpsIndent2({ date: _today_utc_iso(), counts }),
     { encoding: "utf-8" }
@@ -988,8 +1021,8 @@ function reset_cli_call_counts(provider = null, p = null) {
   } else {
     delete counts[provider];
   }
-  fs3.mkdirSync(path3.dirname(target), { recursive: true });
-  fs3.writeFileSync(
+  fs4.mkdirSync(path4.dirname(target), { recursive: true });
+  fs4.writeFileSync(
     target,
     _jsonDumpsIndent2({ date: _today_utc_iso(), counts }),
     { encoding: "utf-8" }
@@ -2023,7 +2056,7 @@ function _pyJsonStringAscii(s) {
   return out + '"';
 }
 function _which(name) {
-  if (name.includes(path3.sep) || path3.sep !== "/" && name.includes("/")) {
+  if (name.includes(path4.sep) || path4.sep !== "/" && name.includes("/")) {
     return _isExecutable(name) ? name : null;
   }
   const pathEnv = process.env.PATH ?? "";
@@ -2031,12 +2064,12 @@ function _which(name) {
     return null;
   }
   const exts = process.platform === "win32" ? (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
-  for (const dir of pathEnv.split(path3.delimiter)) {
+  for (const dir of pathEnv.split(path4.delimiter)) {
     if (!dir) {
       continue;
     }
     for (const ext of exts) {
-      const candidate = path3.join(dir, name + ext);
+      const candidate = path4.join(dir, name + ext);
       if (_isExecutable(candidate)) {
         return candidate;
       }
@@ -2046,7 +2079,7 @@ function _which(name) {
 }
 function _isExecutable(p) {
   try {
-    const st = fs3.statSync(p);
+    const st = fs4.statSync(p);
     if (!st.isFile()) {
       return false;
     }
@@ -2073,7 +2106,7 @@ function _defaultStdin() {
   function ensure() {
     if (buffer === null) {
       try {
-        buffer = fs3.readFileSync(0, { encoding: "utf-8" });
+        buffer = fs4.readFileSync(0, { encoding: "utf-8" });
       } catch {
         buffer = "";
       }
@@ -2115,9 +2148,9 @@ function _defaultStdin() {
 
 // src/scripts/_lib/environment_detector.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import * as fs4 from "node:fs";
+import * as fs5 from "node:fs";
 import * as os from "node:os";
-import * as path4 from "node:path";
+import * as path5 from "node:path";
 
 // src/install/toolDetection.ts
 import { existsSync as existsSync3 } from "node:fs";
@@ -2240,7 +2273,7 @@ function classifyBilling(provider, source) {
 function codexHome(env) {
   const map = env ?? process.env;
   const override = (map["CODEX_HOME"] ?? "").trim();
-  return override !== "" ? override : path4.join(homeOf(env), ".codex");
+  return override !== "" ? override : path5.join(homeOf(env), ".codex");
 }
 function homeOf(env) {
   const map = env ?? process.env;
@@ -2265,14 +2298,14 @@ ${res.stderr ?? ""}`;
 }
 function isFile(p) {
   try {
-    return fs4.statSync(p).isFile();
+    return fs5.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function exists(p) {
   try {
-    return fs4.existsSync(p);
+    return fs5.existsSync(p);
   } catch {
     return false;
   }
@@ -2280,7 +2313,7 @@ function exists(p) {
 function classifyCodexAuth(authPath) {
   let data;
   try {
-    data = JSON.parse(fs4.readFileSync(authPath, "utf-8"));
+    data = JSON.parse(fs5.readFileSync(authPath, "utf-8"));
   } catch {
     return "cli-api-key";
   }
@@ -2297,18 +2330,18 @@ function cliSubscriptionEvidence(provider, home, env, claudeConfigDir) {
   if (provider === "anthropic") {
     const configDir = claudeConfigDir;
     for (const rel of [".credentials.json", "credentials.json"]) {
-      const p = path4.join(configDir, rel);
+      const p = path5.join(configDir, rel);
       if (isFile(p)) return { source: "cli-subscription", evidence: p };
     }
     return null;
   }
   if (provider === "openai") {
-    const p = path4.join(codexHome(env), "auth.json");
+    const p = path5.join(codexHome(env), "auth.json");
     if (isFile(p)) return { source: classifyCodexAuth(p), evidence: p };
     return null;
   }
   if (provider === "gemini") {
-    const p = path4.join(home, ".gemini", "oauth_creds.json");
+    const p = path5.join(home, ".gemini", "oauth_creds.json");
     if (isFile(p)) return { source: "cli-subscription", evidence: p };
     return null;
   }
@@ -2340,7 +2373,7 @@ function detectHosts(opts) {
 function detectAuth(opts) {
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeOf(opts.env);
-  const claudeConfigDir = opts.home === void 0 && opts.env === void 0 ? claude_config_dir() : (env["CLAUDE_CONFIG_DIR"] ?? "").trim() || path4.join(home, ".claude");
+  const claudeConfigDir = opts.home === void 0 && opts.env === void 0 ? claude_config_dir() : (env["CLAUDE_CONFIG_DIR"] ?? "").trim() || path5.join(home, ".claude");
   const auth = [];
   const keys = [];
   for (const provider of knownProviders()) {
@@ -2394,7 +2427,7 @@ function detectEnvironment(opts = {}) {
 }
 
 // src/scripts/_cli/detection_report.ts
-import * as path5 from "node:path";
+import * as path6 from "node:path";
 
 // src/scripts/ai_council/transport_resolver.ts
 var VALID_TRANSPORT_MODES = /* @__PURE__ */ new Set([
@@ -2583,7 +2616,7 @@ function cliBinaryPresent(environment, provider, binaryOverride) {
   const expected = PROVIDER_CLI_META[provider]?.[0];
   if (expected === void 0) return false;
   return environment.hosts.some(
-    (h) => h.binary !== null && stripExe(path5.basename(h.binary)) === expected
+    (h) => h.binary !== null && stripExe(path6.basename(h.binary)) === expected
   );
 }
 function stripExe(name) {
@@ -2744,9 +2777,9 @@ function absentCouncilFacts(configPath) {
 
 // src/scripts/ai_team/review_gate.ts
 import * as crypto2 from "node:crypto";
-import * as fs5 from "node:fs";
+import * as fs6 from "node:fs";
 import * as os2 from "node:os";
-import * as path6 from "node:path";
+import * as path7 from "node:path";
 
 // src/scripts/ai_team/config.ts
 var AI_TEAM_REVIEW_GATE_DEFAULTS = Object.freeze({
@@ -2763,16 +2796,16 @@ var AI_TEAM_DEFAULTS = Object.freeze({
 });
 
 // src/scripts/ai_team/review_gate.ts
-var GATE_LEDGER_RELPATH = path6.join("agents", "runtime", "team", "events.log");
+var GATE_LEDGER_RELPATH = path7.join("agents", "runtime", "team", "events.log");
 var _CODEX_PLUGIN_DATA_DIRNAME = `${CODEX_PLUGIN_ID}-${CODEX_MARKETPLACE_NAME}`;
 function _workspace_state_segment(workspace_root) {
   let canonical = workspace_root;
   try {
-    canonical = fs5.realpathSync.native(workspace_root);
+    canonical = fs6.realpathSync.native(workspace_root);
   } catch {
     canonical = workspace_root;
   }
-  const slug_source = path6.basename(workspace_root) || "workspace";
+  const slug_source = path7.basename(workspace_root) || "workspace";
   const slug = slug_source.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "workspace";
   const hash = crypto2.createHash("sha256").update(canonical).digest("hex").slice(0, 16);
   return `${slug}-${hash}`;
@@ -2782,19 +2815,19 @@ function upstream_state_dir_candidates(workspace_root) {
   const candidates = [];
   const env = (process.env["CLAUDE_PLUGIN_DATA"] ?? "").trim();
   if (env !== "") {
-    candidates.push(path6.join(env, "state", segment));
+    candidates.push(path7.join(env, "state", segment));
   }
   candidates.push(
-    path6.join(claude_config_dir(), "plugins", "data", _CODEX_PLUGIN_DATA_DIRNAME, "state", segment)
+    path7.join(claude_config_dir(), "plugins", "data", _CODEX_PLUGIN_DATA_DIRNAME, "state", segment)
   );
-  candidates.push(path6.join(os2.tmpdir(), "codex-companion", segment));
+  candidates.push(path7.join(os2.tmpdir(), "codex-companion", segment));
   return candidates;
 }
 function upstream_gate_enabled(workspace_root) {
   for (const dir of upstream_state_dir_candidates(workspace_root)) {
     let parsed;
     try {
-      parsed = JSON.parse(fs5.readFileSync(path6.join(dir, "state.json"), "utf-8"));
+      parsed = JSON.parse(fs6.readFileSync(path7.join(dir, "state.json"), "utf-8"));
     } catch {
       continue;
     }
@@ -2854,13 +2887,13 @@ var ArgparseExit = class extends Error {
 function expanduser(p) {
   if (p === "~") return os3.homedir();
   if (p.startsWith("~/") || p.startsWith("~\\")) {
-    return path7.join(os3.homedir(), p.slice(2));
+    return path8.join(os3.homedir(), p.slice(2));
   }
   return p;
 }
 function pathExists(p) {
   try {
-    fs6.statSync(p);
+    fs7.statSync(p);
     return true;
   } catch {
     return false;
@@ -2868,27 +2901,27 @@ function pathExists(p) {
 }
 function isFile2(p) {
   try {
-    return fs6.statSync(p).isFile();
+    return fs7.statSync(p).isFile();
   } catch {
     return false;
   }
 }
 function isDir(p) {
   try {
-    return fs6.statSync(p).isDirectory();
+    return fs7.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
 function resolvePath(p) {
   try {
-    return fs6.realpathSync(path7.resolve(p));
+    return fs7.realpathSync(path8.resolve(p));
   } catch {
-    return path7.resolve(p);
+    return path8.resolve(p);
   }
 }
 function readText(p) {
-  return fs6.readFileSync(p, "utf-8");
+  return fs7.readFileSync(p, "utf-8");
 }
 function _jsonStrAscii(s) {
   let out = '"';
@@ -2999,7 +3032,7 @@ function _resolve_project_root(arg) {
 }
 var _INSTALL_MODE_MARKER_REL = "agents/.agent-state/install-mode.txt";
 function _detect_install_mode(project_root) {
-  const marker = path7.join(project_root, _INSTALL_MODE_MARKER_REL);
+  const marker = path8.join(project_root, _INSTALL_MODE_MARKER_REL);
   if (isFile2(marker)) {
     let value;
     try {
@@ -3011,9 +3044,9 @@ function _detect_install_mode(project_root) {
       return [value, "marker-file"];
     }
   }
-  const has_agents_md = pathExists(path7.join(project_root, "AGENTS.md"));
+  const has_agents_md = pathExists(path8.join(project_root, "AGENTS.md"));
   const has_copilot = pathExists(
-    path7.join(project_root, ".github", "copilot-instructions.md")
+    path8.join(project_root, ".github", "copilot-instructions.md")
   );
   if (has_agents_md && has_copilot) {
     return ["full", "heuristic"];
@@ -3033,7 +3066,7 @@ function _settings_layer_chain(project_root) {
   return layers;
 }
 function _detect_wrapper(project_root) {
-  const wrapper = path7.join(project_root, "agent-config");
+  const wrapper = path8.join(project_root, "agent-config");
   if (!pathExists(wrapper)) {
     return { path: String(wrapper), exists: false, embedded_root: null };
   }
@@ -3100,14 +3133,14 @@ function _emit_context_text(ctx) {
 }
 function _resolve_path(project_root, raw) {
   let p = expanduser(raw);
-  if (!path7.isAbsolute(p)) {
-    p = path7.join(project_root, p);
+  if (!path8.isAbsolute(p)) {
+    p = path8.join(project_root, p);
   }
   return p;
 }
 function _sha256(p) {
   try {
-    const data = fs6.readFileSync(p);
+    const data = fs7.readFileSync(p);
     return crypto3.createHash("sha256").update(data).digest("hex");
   } catch {
     return null;
@@ -3116,7 +3149,7 @@ function _sha256(p) {
 var PACKAGE_TAG_ID = "event4u/agent-config";
 var _FRONTMATTER_PACKAGE_RE = /^package:\s*(.+?)\s*$/m;
 function _read_inline_package_tag(p) {
-  if (path7.extname(p) !== ".md") {
+  if (path8.extname(p) !== ".md") {
     return NO_FRONTMATTER;
   }
   let text;
@@ -3245,13 +3278,13 @@ function rglob(root) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs6.readdirSync(dir, { withFileTypes: true });
+      entries = fs7.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
     for (const ent of entries) {
-      const full = path7.join(dir, ent.name);
+      const full = path8.join(dir, ent.name);
       out.push(full);
       let dirLike = ent.isDirectory();
       if (ent.isSymbolicLink()) {
@@ -3326,9 +3359,9 @@ function _foreign_records(project_root, foreign) {
   return out;
 }
 function relativeTo(p, base) {
-  const rel = path7.relative(base, p);
+  const rel = path8.relative(base, p);
   if (rel === "") return rel;
-  if (rel.startsWith("..") || path7.isAbsolute(rel)) {
+  if (rel.startsWith("..") || path8.isAbsolute(rel)) {
     return null;
   }
   return rel;
@@ -3392,7 +3425,7 @@ var MANIFEST_REQUIRED_CHECK_IDS = /* @__PURE__ */ new Set([
 ]);
 var INSTALL_MODE_MARKER_RELATIVE = "agents/.agent-state/install-mode.txt";
 function _is_global_only_consumer(project_root) {
-  return isFile2(path7.join(project_root, INSTALL_MODE_MARKER_RELATIVE)) || isDir(path7.join(project_root, "agents", "overrides"));
+  return isFile2(path8.join(project_root, INSTALL_MODE_MARKER_RELATIVE)) || isDir(path8.join(project_root, "agents", "overrides"));
 }
 var REPAIR_IDS = ["wizard-state"];
 var MCP_BETA_GATES = [
@@ -3412,7 +3445,7 @@ var STATUS_SYMBOLS = {
 var MIN_PYTHON = [3, 10];
 function _check_scope(project_root) {
   for (const marker of ["pnpm-workspace.yaml", "lerna.json"]) {
-    if (pathExists(path7.join(project_root, marker))) {
+    if (pathExists(path8.join(project_root, marker))) {
       return {
         id: "scope",
         status: "warn",
@@ -3421,7 +3454,7 @@ function _check_scope(project_root) {
       };
     }
   }
-  const pkg = path7.join(project_root, "package.json");
+  const pkg = path8.join(project_root, "package.json");
   if (pathExists(pkg)) {
     try {
       const data = JSON.parse(readText(pkg));
@@ -3446,26 +3479,8 @@ function _check_scope(project_root) {
 var _PLACEHOLDER_EMAIL_RE = /^(t@t\.t|.*@example\.(com|org)|.*@localhost)$/i;
 var _PLACEHOLDER_NAME_RE = /^(t|test|user|nobody|x)$/i;
 function _git_config_path(project_root) {
-  const gd = path7.join(project_root, ".git");
-  try {
-    const st = fs6.statSync(gd);
-    if (st.isDirectory()) {
-      return path7.join(gd, "config");
-    }
-    const m = readText(gd).match(/^gitdir:\s*(.+)\s*$/m);
-    if (m === null) {
-      return null;
-    }
-    const gdPath = path7.resolve(project_root, m[1].trim());
-    const commondirFile = path7.join(gdPath, "commondir");
-    if (pathExists(commondirFile)) {
-      const common = path7.resolve(gdPath, readText(commondirFile).trim());
-      return path7.join(common, "config");
-    }
-    return path7.join(gdPath, "config");
-  } catch {
-    return null;
-  }
+  const common = git_common_dir(project_root);
+  return common === null ? null : path8.join(common, "config");
 }
 function _parse_git_user(configText) {
   let inUser = false;
@@ -3495,7 +3510,7 @@ function _check_git_identity(project_root) {
   }
   let ident = _parse_git_user(readText(cfgPath));
   if (ident.name === null && ident.email === null) {
-    const globalCfg = path7.join(os3.homedir(), ".gitconfig");
+    const globalCfg = path8.join(os3.homedir(), ".gitconfig");
     if (pathExists(globalCfg)) {
       ident = _parse_git_user(readText(globalCfg));
     }
@@ -3556,7 +3571,7 @@ function _package_root() {
 }
 function _current_package_version() {
   try {
-    const data = JSON.parse(readText(path7.join(_package_root(), "package.json")));
+    const data = JSON.parse(readText(path8.join(_package_root(), "package.json")));
     const v = data["version"];
     if (typeof v === "string" && v.trim()) {
       return v.trim();
@@ -3600,7 +3615,7 @@ function _check_lockfile_freshness(manifest) {
   };
 }
 function shutilWhich(name) {
-  if (path7.dirname(name) !== "." && (name.includes("/") || name.includes("\\"))) {
+  if (path8.dirname(name) !== "." && (name.includes("/") || name.includes("\\"))) {
     return isExecutableFile(name) ? name : null;
   }
   const pathEnv = process2.env["PATH"] || "";
@@ -3613,12 +3628,12 @@ function shutilWhich(name) {
     if (seenDirs.has(d)) continue;
     seenDirs.add(d);
     for (const ext of exts) {
-      const candidate = path7.join(d, name + (ext === "" ? "" : ext.toLowerCase() === ext ? ext : ext));
+      const candidate = path8.join(d, name + (ext === "" ? "" : ext.toLowerCase() === ext ? ext : ext));
       if (isExecutableFile(candidate)) {
         return candidate;
       }
       if (ext !== "") {
-        const upper = path7.join(d, name + ext);
+        const upper = path8.join(d, name + ext);
         if (isExecutableFile(upper)) return upper;
       }
     }
@@ -3627,10 +3642,10 @@ function shutilWhich(name) {
 }
 function isExecutableFile(p) {
   try {
-    const st = fs6.statSync(p);
+    const st = fs7.statSync(p);
     if (!st.isFile()) return false;
     if (process2.platform === "win32") return true;
-    fs6.accessSync(p, fs6.constants.X_OK);
+    fs7.accessSync(p, fs7.constants.X_OK);
     return true;
   } catch {
     return false;
@@ -3694,7 +3709,7 @@ function _check_claude_plugin() {
       remedy: ""
     };
   }
-  const projection = path7.join(os3.homedir(), ".claude", "skills");
+  const projection = path8.join(os3.homedir(), ".claude", "skills");
   const projection_present = isDir(projection);
   if (projection_present) {
     return {
@@ -3731,8 +3746,8 @@ function _check_claude_command_wrappers() {
       remedy: ""
     };
   }
-  const anchor = path7.join(os3.homedir(), ".claude");
-  const commands_dir = path7.join(anchor, "commands");
+  const anchor = path8.join(os3.homedir(), ".claude");
+  const commands_dir = path8.join(anchor, "commands");
   if (!isDir(commands_dir)) {
     return {
       id: "claude-command-wrappers",
@@ -3741,8 +3756,8 @@ function _check_claude_command_wrappers() {
       remedy: ""
     };
   }
-  const flat_probe = fs6.existsSync(path7.join(commands_dir, "commit.md"));
-  const wrapper_probe = fs6.existsSync(path7.join(anchor, "skills", "commit", "SKILL.md"));
+  const flat_probe = fs7.existsSync(path8.join(commands_dir, "commit.md"));
+  const wrapper_probe = fs7.existsSync(path8.join(anchor, "skills", "commit", "SKILL.md"));
   if (wrapper_probe) {
     return {
       id: "claude-command-wrappers",
@@ -3767,7 +3782,7 @@ function _check_claude_command_wrappers() {
   };
 }
 function _check_surface_state() {
-  const matrix_path = path7.join(_package_root(), "src", "config", "surface-matrix.yml");
+  const matrix_path = path8.join(_package_root(), "src", "config", "surface-matrix.yml");
   if (!isFile2(matrix_path)) {
     return {
       id: "surface-state",
@@ -3791,7 +3806,7 @@ function _check_surface_state() {
       remedy: "agent-config upgrade (reinstalls the package data files)"
     };
   }
-  const _expand = (p) => p.startsWith("~/") ? path7.join(os3.homedir(), p.slice(2)) : path7.join(_package_root(), p);
+  const _expand = (p) => p.startsWith("~/") ? path8.join(os3.homedir(), p.slice(2)) : path8.join(_package_root(), p);
   const violations = [];
   const remedies = [];
   let checked = 0;
@@ -3833,7 +3848,7 @@ function _check_surface_state() {
 }
 function pathExistsAny(p) {
   try {
-    fs6.statSync(p);
+    fs7.statSync(p);
     return true;
   } catch {
     return false;
@@ -3849,13 +3864,13 @@ function _check_hook_wiring() {
       remedy: ""
     };
   }
-  const settings_path = path7.join(os3.homedir(), ".claude", "settings.json");
+  const settings_path = path8.join(os3.homedir(), ".claude", "settings.json");
   let missing;
   try {
     const matrix = build_claude_hook_matrix(
-      path7.join(_package_root(), "src", "scripts", "hook_manifest.yaml")
+      path8.join(_package_root(), "src", "scripts", "hook_manifest.yaml")
     );
-    const settings = pathExists(settings_path) ? JSON.parse(fs6.readFileSync(settings_path, "utf8")) : {};
+    const settings = pathExists(settings_path) ? JSON.parse(fs7.readFileSync(settings_path, "utf8")) : {};
     const hooks = (settings["hooks"] ?? {}) || {};
     missing = Object.keys(matrix).filter((ev) => {
       const groups = hooks[ev];
@@ -3930,7 +3945,7 @@ function _check_mcp_mode(project_root) {
   ];
   const found = [];
   for (const [rel, label] of candidates) {
-    const p = path7.join(project_root, rel);
+    const p = path8.join(project_root, rel);
     if (!pathExists(p)) {
       continue;
     }
@@ -3962,7 +3977,7 @@ function _check_mcp_mode(project_root) {
   };
 }
 function _check_offline_readiness() {
-  const script = path7.join(_package_root(), "src", "scripts", "hermetic-install.sh");
+  const script = path8.join(_package_root(), "src", "scripts", "hermetic-install.sh");
   if (!pathExists(script)) {
     return {
       id: "offline-readiness",
@@ -4020,7 +4035,7 @@ function _check_stale_orphans() {
       (a, b) => a < b ? -1 : a > b ? 1 : 0
     );
     for (const root_name of ownedSorted) {
-      const root = path7.join(anchor, root_name);
+      const root = path8.join(anchor, root_name);
       if (!isDir(root)) {
         continue;
       }
@@ -4035,7 +4050,7 @@ function _check_stale_orphans() {
         if (rel === null) {
           continue;
         }
-        const relPosix = rel.split(path7.sep).join("/");
+        const relPosix = rel.split(path8.sep).join("/");
         if (recorded_set.has(relPosix)) {
           continue;
         }
@@ -4090,14 +4105,14 @@ function _check_rule_scope_drift(project_root) {
   let rules_dir = null;
   let found = 0;
   for (const rel of _RULE_PROJECTION_DIRS) {
-    const cand = path7.join(project_root, rel);
+    const cand = path8.join(project_root, rel);
     if (!isDir(cand)) {
       continue;
     }
     let count = 0;
     try {
-      for (const name of fs6.readdirSync(cand)) {
-        if (name.endsWith(".md") && isFile2(path7.join(cand, name))) {
+      for (const name of fs7.readdirSync(cand)) {
+        if (name.endsWith(".md") && isFile2(path8.join(cand, name))) {
           count += 1;
         }
       }
@@ -4151,14 +4166,14 @@ function _check_rule_scope_drift(project_root) {
   };
 }
 function _check_duplicate_scope_rules(project_root, userRulesDirOverride) {
-  const user_rules_dir = userRulesDirOverride ?? path7.join(os3.homedir(), ".claude", "rules");
+  const user_rules_dir = userRulesDirOverride ?? path8.join(os3.homedir(), ".claude", "rules");
   let project_rules_dir = null;
   if (_is_source_repo(project_root)) {
-    const cand = path7.join(project_root, "dist", "agent-src", "rules");
+    const cand = path8.join(project_root, "dist", "agent-src", "rules");
     if (isDir(cand)) project_rules_dir = cand;
   } else {
     for (const rel of _RULE_PROJECTION_DIRS) {
-      const cand = path7.join(project_root, rel);
+      const cand = path8.join(project_root, rel);
       if (isDir(cand)) {
         project_rules_dir = cand;
         break;
@@ -4227,7 +4242,7 @@ function _check_mcp_beta_readiness(project_root) {
   }
   const pending = [];
   for (const [gate_id, rel] of MCP_BETA_GATES) {
-    if (!pathExists(path7.join(project_root, rel))) {
+    if (!pathExists(path8.join(project_root, rel))) {
       pending.push(`${gate_id} (${rel})`);
     }
   }
@@ -4248,7 +4263,7 @@ function _check_mcp_beta_readiness(project_root) {
 }
 function _check_tier_usage_readiness(project_root) {
   const settings_file = project_settings_path(project_root);
-  let log_path = path7.join(project_root, ".agent-tier-usage.jsonl");
+  let log_path = path8.join(project_root, ".agent-tier-usage.jsonl");
   let enabled = false;
   if (isFile2(settings_file)) {
     let raw;
@@ -4267,7 +4282,7 @@ function _check_tier_usage_readiness(project_root) {
         const outputRaw = tu["output"];
         const output = typeof outputRaw === "object" && outputRaw !== null && !Array.isArray(outputRaw) ? outputRaw : {};
         if (typeof output["path"] === "string" && output["path"].trim()) {
-          log_path = path7.join(project_root, output["path"].trim());
+          log_path = path8.join(project_root, output["path"].trim());
         }
         const val = tu["enabled"];
         if (typeof val === "boolean") {
@@ -4292,7 +4307,7 @@ function _check_tier_usage_readiness(project_root) {
     return {
       id: "tier-usage-readiness",
       status: "warn",
-      message: `tier-usage telemetry on but ${path7.basename(log_path)} not yet written \u2014 no signal accumulated`,
+      message: `tier-usage telemetry on but ${path8.basename(log_path)} not yet written \u2014 no signal accumulated`,
       remedy: "run any tracked command to seed the log; the dispatcher writes one record per invocation"
     };
   }
@@ -4307,7 +4322,7 @@ function _check_tier_usage_readiness(project_root) {
     return {
       id: "tier-usage-readiness",
       status: "fail",
-      message: `cannot read ${path7.basename(log_path)}: ${osErrorStr(exc)}`,
+      message: `cannot read ${path8.basename(log_path)}: ${osErrorStr(exc)}`,
       remedy: "fix permissions on the tier-usage log"
     };
   }
@@ -4338,7 +4353,7 @@ function _check_tier_usage_readiness(project_root) {
     return {
       id: "tier-usage-readiness",
       status: "fail",
-      message: `${total} record(s) in ${path7.basename(log_path)} but 0 passed the privacy floor \u2014 report would refuse to render`,
+      message: `${total} record(s) in ${path8.basename(log_path)} but 0 passed the privacy floor \u2014 report would refuse to render`,
       remedy: "inspect the log; the dispatcher is writing records the contract forbids (paths, argv, message bodies)"
     };
   }
@@ -4346,19 +4361,19 @@ function _check_tier_usage_readiness(project_root) {
     return {
       id: "tier-usage-readiness",
       status: "warn",
-      message: `${path7.basename(log_path)} present but empty \u2014 no signal yet`,
+      message: `${path8.basename(log_path)} present but empty \u2014 no signal yet`,
       remedy: "run any tracked command to seed the log"
     };
   }
   return {
     id: "tier-usage-readiness",
     status: "ok",
-    message: `${valid} record(s) past the privacy floor in ${path7.basename(log_path)} \u2014 retiering signal available`,
+    message: `${valid} record(s) past the privacy floor in ${path8.basename(log_path)} \u2014 retiering signal available`,
     remedy: ""
   };
 }
 function readText0(p) {
-  return fs6.readFileSync(p, "utf-8");
+  return fs7.readFileSync(p, "utf-8");
 }
 function osErrorStr(exc) {
   if (exc && typeof exc === "object" && "message" in exc) {
@@ -4531,7 +4546,7 @@ function _epoch_seconds(value) {
 function _codex_auth_expiry(auth_path) {
   let data;
   try {
-    data = JSON.parse(fs6.readFileSync(auth_path, "utf-8"));
+    data = JSON.parse(fs7.readFileSync(auth_path, "utf-8"));
   } catch {
     return null;
   }
@@ -4694,7 +4709,7 @@ function _check_team(project_root) {
   if (binary_resolved === null) {
     remedies.push("install the codex CLI: `npm install -g @openai/codex`");
   }
-  const auth_path = path7.join(_codex_home(), "auth.json");
+  const auth_path = path8.join(_codex_home(), "auth.json");
   const authed = pathExists(auth_path);
   let auth_str;
   if (!authed) {
@@ -4774,7 +4789,7 @@ function _check_unsupported_combos(manifest) {
   };
 }
 function _wizard_state_path() {
-  return path7.join(event4u_root(), "state", "wizard-state.json");
+  return path8.join(event4u_root(), "state", "wizard-state.json");
 }
 function _check_wizard_state() {
   const state_pth = _wizard_state_path();
@@ -4854,7 +4869,7 @@ function _check_wizard_state() {
   };
 }
 function _check_settings_review_pending() {
-  const delta_pth = path7.join(event4u_root(), "state", "settings-delta.json");
+  const delta_pth = path8.join(event4u_root(), "state", "settings-delta.json");
   if (!pathExists(delta_pth)) {
     return {
       id: "settings-review-pending",
@@ -4880,7 +4895,7 @@ function _check_settings_review_pending() {
 }
 function _check_memory_merge_union(project_root) {
   const remedy = "run: npx tsx src/scripts/sync_gitattributes.ts (or `agent-config refresh --project`)";
-  const target = path7.join(project_root, DEFAULT_GITATTRIBUTES);
+  const target = path8.join(project_root, DEFAULT_GITATTRIBUTES);
   if (!pathExists(target)) {
     return {
       id: "memory-merge-union",
@@ -5362,7 +5377,7 @@ function _run_repair(opts) {
     };
     if (exists2) {
       try {
-        fs6.unlinkSync(state_pth);
+        fs7.unlinkSync(state_pth);
       } catch (exc) {
         payload["action"] = "error";
         payload["error"] = osErrorStr(exc);
@@ -5457,13 +5472,13 @@ function _isCliEntry() {
   if (process2.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL(path7.resolve(process2.argv[1])).href;
+  const argvUrl = pathToFileURL(path8.resolve(process2.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs6.realpathSync(fileURLToPath2(import.meta.url));
-    const argv = fs6.realpathSync(path7.resolve(process2.argv[1]));
+    const here = fs7.realpathSync(fileURLToPath2(import.meta.url));
+    const argv = fs7.realpathSync(path8.resolve(process2.argv[1]));
     return here === argv;
   } catch {
     return false;