@event4u/agent-config 9.27.0 → 9.28.0

package/dist/cli-delegate/cmd_route_audit.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env tsx
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
-import {
-  match_prompt
-} from "./chunk-LF2KKJ4Q.js";
-import {
-  resolvePackageRoot
-} from "./chunk-MCJYCQPF.js";
 import {
   read_entries
-} from "./chunk-AIIUU73N.js";
+} from "./chunk-7OMQCH4V.js";
 import "./chunk-3EWYC3YK.js";
+import {
+  match_prompt
+} from "./chunk-LF2KKJ4Q.js";
 import {
   load_agent_settings
-} from "./chunk-HJ6DAJHR.js";
+} from "./chunk-GB2FSUEE.js";
 import "./chunk-NDJLNC6Q.js";
 import "./chunk-OY53J6II.js";
+import {
+  resolvePackageRoot
+} from "./chunk-MCJYCQPF.js";
 import "./chunk-J55WI3RR.js";
 
 // src/scripts/_cli/cmd_route_audit.ts

package/dist/cli-delegate/cmd_route_explain.js

@@ -4,13 +4,13 @@ import {
   _asRuleList,
   match_prompt
 } from "./chunk-LF2KKJ4Q.js";
-import {
-  resolvePackageRoot
-} from "./chunk-MCJYCQPF.js";
 import {
   load_agent_settings
-} from "./chunk-HJ6DAJHR.js";
+} from "./chunk-GB2FSUEE.js";
 import "./chunk-NDJLNC6Q.js";
+import {
+  resolvePackageRoot
+} from "./chunk-MCJYCQPF.js";
 import "./chunk-J55WI3RR.js";
 
 // src/scripts/_cli/cmd_route_explain.ts

package/dist/cli-delegate/cmd_settings_get.js

@@ -0,0 +1,272 @@
+import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
+import {
+  buildSettingsClassIndex,
+  classOfPath,
+  getSettingsLeaf,
+  load,
+  parseSettingsClassRows
+} from "./chunk-REKCMYOU.js";
+import {
+  MERGEABLE_KEYS,
+  USER_GLOBAL_FILENAME,
+  iter_setting_overrides,
+  load_agent_settings
+} from "./chunk-GB2FSUEE.js";
+import {
+  resolve_with_fallback,
+  write_target
+} from "./chunk-NDJLNC6Q.js";
+import {
+  resolvePackageRoot
+} from "./chunk-MCJYCQPF.js";
+import "./chunk-J55WI3RR.js";
+
+// src/scripts/_cli/cmd_settings_get.ts
+import * as fs from "node:fs";
+import * as path from "node:path";
+import process from "node:process";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+// src/shared/settingsCarveOut.ts
+var SETTINGS_CARVE_OUT = [
+  {
+    key: "projection.mode",
+    reader: "src/scripts/install.ts:3409 _resolve_scoped_projection",
+    absentResolvesTo: "legacy-all",
+    reason: "The template fallback applies only when NO global settings file exists. Once a file exists, an absent key means legacy-all by documented contract, so an existing install is never silently narrowed on upgrade."
+  },
+  {
+    key: "projection.rule_workspaces",
+    reader: "src/install/rule_scope.ts:96 ruleScopeFromSettings",
+    absentResolvesTo: "null \u2014 LEGACY_ALL, i.e. every rule ships including maintainer-only ones",
+    reason: "Same upgrade contract as projection.mode, and the failure is louder: an absent list widens the projection instead of narrowing it."
+  },
+  {
+    key: "subagents.auto",
+    reader: "src/scripts/routing_doctor.ts:206",
+    absentResolvesTo: "ask",
+    reason: "The reader falls back to `ask` while the template ships `on`. Carved out rather than fixed at the reader because the doctor reports what the RESOLVED configuration is; changing its fallback would make the report disagree with what the other readers actually do."
+  },
+  {
+    key: "discipline_profile",
+    reader: "work_engine/_lib/agent_settings.ts:1263",
+    absentResolvesTo: "essential, unconditionally",
+    reason: "The template ships `auto`, which resolves to `off` on any measured-null model, any non-Claude host, and any host exposing no model id. Absent skips that resolution entirely and loads the essential tier everywhere."
+  },
+  {
+    key: "chat_history.frequency",
+    reader: "src/scripts/chat_history.ts:1140",
+    absentResolvesTo: "per_phase",
+    reason: "Canonical substitution is `per_turn`. Absent gives coarser capture than the shipped default \u2014 an audit-thinning change, which the class contract's own test 8 (what can the attacker HIDE) names as the severe direction."
+  },
+  {
+    key: "profile.id",
+    reader: "src/scripts/config/profiles.ts:221 resolve_profile",
+    absentResolvesTo: "the id `developer`, but a DEGRADED profile \u2014 packs: [], personas: [], hints: []",
+    reason: "Exactly the projection.mode shape: the template default is honoured only when no settings file exists. With a file present the id resolves but its profile body does not load, so the install silently loses every pack and persona."
+  },
+  {
+    key: "quality.local_auto_run",
+    reader: "src/scripts/lint_roadmap_ci_steps.ts:106",
+    absentResolvesTo: "true \u2014 which DISABLES the CI-step gate",
+    reason: "Inverted polarity, and the most dangerous row in the set: the template ships `false`, which ARMS the gate. Omitting the key would disarm a quality gate for every fresh install while the reference page says it is on."
+  },
+  {
+    key: "onboarding.onboarded",
+    reader: "src/scripts/onboarding_gate_hook.ts:99",
+    absentResolvesTo: "gate skipped, as if onboarding had already completed",
+    reason: "Absent behaves like `onboarded: true`, not like the template default `false`. Omitting it would skip the onboarding gate on precisely the fresh installs the gate exists for."
+  },
+  {
+    key: "chat_history.enabled",
+    reader: "src/scripts/chat_history.ts:1025 _read_chat_history_enabled",
+    absentResolvesTo: "false",
+    reason: "The reader falls back to false while the template ships true. This one is privacy-shaped: fixing the reader would start recording history for every install whose file lacks the key. Writing it explicitly keeps the decision visible in the file the user can read."
+  }
+];
+
+// src/scripts/_cli/cmd_settings_get.ts
+var PACKAGE_ROOT = resolvePackageRoot(import.meta.url);
+var CONTRACT_RELATIVE = "docs/contracts/settings-classes.md";
+var TEMPLATE_RELATIVE = path.join("src", "config", "agent-settings.template.yml");
+var SECRET_KEY_RE = /(^|\.)(secrets?)(\.|$)|(^|\.)[a-z0-9_]*(api_key|token|password|passwd|secret|credential|private_key|encryption_key)$/i;
+function isSecretKey(key) {
+  return SECRET_KEY_RE.test(key);
+}
+function displayValue(key, value) {
+  if (value === void 0 || value === null) return value;
+  return isSecretKey(key) ? "\xABredacted \u2014 credential-shaped key\xBB" : value;
+}
+function layersFor(key, cwd) {
+  const layers = [];
+  for (const [dotted, value, file] of iter_setting_overrides({ cwd })) {
+    if (dotted === key) layers.push({ value, file });
+  }
+  return layers;
+}
+function templateDefault(packageRoot, key) {
+  let parsed;
+  try {
+    parsed = load(fs.readFileSync(path.join(packageRoot, TEMPLATE_RELATIVE), "utf-8"));
+  } catch {
+    return void 0;
+  }
+  return getSettingsLeaf(parsed, key);
+}
+function carveOutFor(key) {
+  return SETTINGS_CARVE_OUT.find((c) => c.key === key);
+}
+function userGlobalDrop(key) {
+  const file = resolve_with_fallback(USER_GLOBAL_FILENAME) ?? write_target(USER_GLOBAL_FILENAME);
+  if (MERGEABLE_KEYS.includes(key)) return { dropped: false, file };
+  let raw;
+  try {
+    raw = load(fs.readFileSync(file, "utf-8"));
+  } catch {
+    return { dropped: false, file };
+  }
+  return { dropped: getSettingsLeaf(raw, key) !== void 0, file };
+}
+function _classFor(packageRoot, key) {
+  let text;
+  try {
+    text = fs.readFileSync(path.join(packageRoot, CONTRACT_RELATIVE), "utf-8");
+  } catch {
+    return null;
+  }
+  return classOfPath(buildSettingsClassIndex(parseSettingsClassRows(text)), key) ?? null;
+}
+function runSettingsGet(opts) {
+  const out = [];
+  const err = [];
+  const merged = load_agent_settings({ cwd: opts.cwd });
+  const effective = getSettingsLeaf(merged, opts.key);
+  const layers = layersFor(opts.key, opts.cwd);
+  const winning = layers.length > 0 ? layers[layers.length - 1] : null;
+  const cls = _classFor(opts.packageRoot, opts.key);
+  const fallback = templateDefault(opts.packageRoot, opts.key);
+  const carveOut = carveOutFor(opts.key);
+  const drop = userGlobalDrop(opts.key);
+  if (opts.json) {
+    out.push(
+      JSON.stringify(
+        {
+          key: opts.key,
+          value: displayValue(opts.key, effective) ?? null,
+          redacted: isSecretKey(opts.key),
+          set: winning !== null,
+          source: winning?.file ?? null,
+          layers: layers.map((l) => ({ value: displayValue(opts.key, l.value), file: l.file })),
+          class: cls,
+          template_default: fallback ?? null,
+          absent_is_not_default: carveOut ? { resolves_to: carveOut.absentResolvesTo, reader: carveOut.reader } : null,
+          user_global_dropped: drop.dropped ? drop.file : null
+        },
+        null,
+        2
+      )
+    );
+    return { code: 0, out, err };
+  }
+  if (winning !== null) {
+    out.push(`${opts.key} = ${JSON.stringify(displayValue(opts.key, effective))}`);
+    out.push(`  source    ${winning.file}`);
+  } else {
+    out.push(`${opts.key} \u2014 not set in any settings file`);
+    out.push(
+      `  default   ${fallback === void 0 ? "(none in the template)" : JSON.stringify(displayValue(opts.key, fallback))}`
+    );
+  }
+  out.push(`  class     ${cls ?? "(unclassified \u2014 no row in the class contract)"}`);
+  if (layers.length > 1) {
+    out.push("  layers    (cascade order, last wins)");
+    for (const layer of layers) {
+      out.push(`            ${JSON.stringify(displayValue(opts.key, layer.value))}  \u2190  ${layer.file}`);
+    }
+  }
+  if (winning === null && carveOut !== void 0) {
+    out.push(
+      "",
+      "\u26A0\uFE0F  Absent is NOT the template default for this key.",
+      `    A reader resolves the absent key to: ${carveOut.absentResolvesTo}`,
+      `    Reader: ${carveOut.reader}`,
+      '    So "not set" and "set to the default" behave differently here.'
+    );
+  }
+  if (drop.dropped) {
+    out.push(
+      "",
+      "\u26A0\uFE0F  This key IS present in your user-global file and is being discarded.",
+      `    File: ${drop.file}`,
+      "    Only the keys on the MERGEABLE_KEYS whitelist cascade from user-global into",
+      "    a project; everything else is filtered out silently by load_agent_settings.",
+      "    Set it in the project settings file, or the value has no effect anywhere."
+    );
+  }
+  return { code: 0, out, err };
+}
+function parseArgv(argv) {
+  const positional = [];
+  let json = false;
+  for (const a of argv) {
+    if (a === "--json") {
+      json = true;
+    } else if (a === "-h" || a === "--help") {
+      return { ok: false, message: "usage: agent-config settings:get <key> [--json]" };
+    } else if (a.startsWith("--")) {
+      return { ok: false, message: `unknown flag: ${a}` };
+    } else {
+      positional.push(a);
+    }
+  }
+  if (positional.length !== 1) {
+    return { ok: false, message: "usage: agent-config settings:get <key> [--json]" };
+  }
+  return { ok: true, key: positional[0], json };
+}
+function main(argv = process.argv.slice(2)) {
+  const parsed = parseArgv(argv);
+  if (!parsed.ok) {
+    process.stderr.write(`${parsed.message ?? "usage error"}
+`);
+    return 2;
+  }
+  const result = runSettingsGet({
+    key: parsed.key,
+    cwd: process.cwd(),
+    packageRoot: PACKAGE_ROOT,
+    json: parsed.json === true
+  });
+  for (const line of result.out) process.stdout.write(`${line}
+`);
+  for (const line of result.err) process.stderr.write(`${line}
+`);
+  return result.code;
+}
+function _isCliEntry() {
+  if (process.argv[1] === void 0) return false;
+  const argvUrl = pathToFileURL(path.resolve(process.argv[1])).href;
+  if (import.meta.url === argvUrl) return true;
+  try {
+    return fs.realpathSync(fileURLToPath(import.meta.url)) === fs.realpathSync(path.resolve(process.argv[1]));
+  } catch {
+    return false;
+  }
+}
+if (_isCliEntry()) {
+  process.exitCode = main();
+}
+export {
+  CONTRACT_RELATIVE,
+  PACKAGE_ROOT,
+  TEMPLATE_RELATIVE,
+  carveOutFor,
+  displayValue,
+  isSecretKey,
+  layersFor,
+  main,
+  parseArgv,
+  runSettingsGet,
+  templateDefault,
+  userGlobalDrop
+};

package/dist/cli-delegate/cmd_settings_migrate.js

@@ -3,18 +3,18 @@ import {
   GLOBAL_AGENT_SETTINGS_PATH,
   GLOBAL_USER_SETTINGS_PATH,
   SETTINGS_FILE
-} from "./chunk-3KJIMFTB.js";
+} from "./chunk-PQSAQKHW.js";
 import "./chunk-DVRS2KVR.js";
-import "./chunk-WR6GTRHJ.js";
+import "./chunk-JXARCGVN.js";
 import "./chunk-BKO2AZ7Z.js";
 import "./chunk-63WSP6YZ.js";
 import "./chunk-GRRPEPRN.js";
 import "./chunk-NXFWFAYV.js";
-import "./chunk-523HCFYO.js";
-import "./chunk-MCJYCQPF.js";
-import "./chunk-HJ6DAJHR.js";
+import "./chunk-GB2FSUEE.js";
 import "./chunk-NDJLNC6Q.js";
+import "./chunk-523HCFYO.js";
 import "./chunk-OY53J6II.js";
+import "./chunk-MCJYCQPF.js";
 import "./chunk-J55WI3RR.js";
 
 // src/scripts/_cli/cmd_settings_migrate.ts