@event4u/agent-config 9.8.0 → 9.10.0

package/src/scripts/hooks/hook_stdin.ts

@@ -0,0 +1,42 @@
+/**
+ * hook_stdin — the single stdin seam for hook concern scripts.
+ *
+ * road-to-credible-install Phase 1 (single-process dispatch): concern
+ * scripts historically read their JSON envelope with `fs.readFileSync(0)`.
+ * That only works when each concern is its own child process. Under the
+ * in-process dispatcher (dist/hooks bundle) all concerns run inside ONE
+ * node process whose fd 0 carries the PLATFORM payload, already consumed
+ * by the dispatcher — so the dispatcher injects the per-concern envelope
+ * here instead.
+ *
+ * Contract:
+ *   - Standalone invocation (a concern run directly as its own process —
+ *     the historical path, still supported): no override is set, and
+ *     `readHookStdin()` falls through to `fs.readFileSync(0, 'utf-8')`.
+ *   - In-process invocation: the dispatcher calls
+ *     `setHookStdinOverride(raw)` before the concern's `main()` and
+ *     `clearHookStdinOverride()` after. Nesting is not supported (concerns
+ *     never dispatch concerns).
+ */
+import * as fs from 'node:fs';
+
+let _override: string | null = null;
+
+export function setHookStdinOverride(raw: string): void {
+    _override = raw;
+}
+
+export function clearHookStdinOverride(): void {
+    _override = null;
+}
+
+/** TTY-safe stdin read: injected override first, else fd 0, else "". */
+export function readHookStdin(): string {
+    if (_override !== null) return _override;
+    try {
+        if (process.stdin.isTTY) return '';
+        return fs.readFileSync(0, 'utf-8');
+    } catch {
+        return '';
+    }
+}

package/src/scripts/hooks/rtk_wrap_hook.ts

@@ -4,10 +4,13 @@
  * (token-saving Phase 3).
  *
  * Converts RTK from advisory to DETERMINISTIC: instead of trusting a
- * self-reported flag, this hook keys off a live `which rtk` probe. When rtk is
- * actually installed AND the agent is about to run a single verbose CLI command
- * that is NOT completeness-critical, it surfaces (warn) "re-run wrapped with
- * rtk" so the 60–90% output-token saving is captured. It NEVER blocks (the v1
+ * self-reported flag, this hook keys off a live probe — PATH presence PLUS an
+ * `rtk gain` identity check (the binary name collides with the unrelated Rust
+ * Type Kit; see src/install/rtkDetection.ts). When a VERIFIED Rust Token
+ * Killer is installed AND the agent is about to run a single verbose CLI
+ * command that is NOT completeness-critical, it surfaces (warn) "re-run
+ * wrapped with rtk" so the upstream-reported 60–90% output-token saving is
+ * captured. It NEVER blocks (the v1
  * dispatcher contract is allow/block/warn — there is no transparent
  * `updatedInput` rewrite — and, like `injection_scan_hook`, warn preserves
  * agency). It NEVER fires when rtk is absent (silent plain-command fallback,
@@ -35,6 +38,8 @@ import {
   _split_subcommands,
   _is_env_assignment,
 } from "./block_no_verify.js";
+import { readHookStdin } from "./hook_stdin.js";
+import { detectRtkCached } from "../../install/rtkDetection.js";
 
 const SETTINGS_FILE = ".agent-settings.yml";
 const EXIT_ALLOW = 0;
@@ -171,12 +176,7 @@ export function classify(command: string): Eligibility {
 }
 
 function _readStdin(): string {
-  try {
-    if (process.stdin.isTTY) return "";
-    return fs.readFileSync(0, "utf-8");
-  } catch {
-    return "";
-  }
+  return readHookStdin();
 }
 
 function _jsonReason(reason: string): string {
@@ -203,8 +203,16 @@ export function main(): number {
         : ".";
   if (!_enabled(root)) return EXIT_ALLOW;
 
-  // Deterministic gate: the live probe, NOT a self-reported flag.
+  // Deterministic gate: the live probe, NOT a self-reported flag — and an
+  // IDENTITY probe, not bare presence: the `rtk` binary name collides with
+  // the unrelated Rust Type Kit, and nudging the agent to wrap commands with
+  // the wrong tool would be a second wrong answer. Only a verified Rust
+  // Token Killer activates the nudge; `unverified` (broken/slow probe) does
+  // NOT — fail closed for behavior, fail open for the command itself.
+  // Identity is cached user-globally keyed on the binary's path+mtime+size,
+  // so the `rtk gain` probe runs once per installed binary, not per command.
   if (!rtk_available()) return EXIT_ALLOW;
+  if (detectRtkCached().identity !== "token-killer") return EXIT_ALLOW;
 
   const command = _extract_command(envelope);
   if (!command) return EXIT_ALLOW;
@@ -213,14 +221,20 @@ export function main(): number {
   if (!verdict.eligible) return EXIT_ALLOW;
 
   const reason =
-    `rtk is installed and wraps verbose CLI output (60–90% fewer output tokens). ` +
+    `rtk is installed and wraps verbose CLI output (upstream reports 60–90% fewer output tokens). ` +
     `Re-run wrapped: \`rtk ${command.trim()}\`. ` +
     `(Skip for completeness-critical output like \`git diff\`.)`;
   process.stdout.write(`${_jsonReason(reason)}\n`);
   return EXIT_WARN;
 }
 
+// Bundle-safety: never auto-run when inlined into an esbuild bundle, where
+// every module shares the bundle's `import.meta.url` (see cmd_migrate.ts).
+declare const __AGENT_CONFIG_BUNDLE__: boolean | undefined;
 function _isCliEntry(): boolean {
+    if (typeof __AGENT_CONFIG_BUNDLE__ !== 'undefined' && __AGENT_CONFIG_BUNDLE__) {
+        return false;
+    }
     if (process.argv[1] === undefined) {
         return false;
     }

package/src/scripts/hot_context_hook.ts

@@ -37,6 +37,7 @@ import { fileURLToPath } from 'node:url';
 
 import { hardenedSpawnEnv } from './_lib/spawn_env.js';
 import { redact_low_impact_entry } from './ai_council/redact_low_impact_entry.js';
+import { readHookStdin } from './hooks/hook_stdin.js';
 
 export const HOT_CONTEXT_REL = path.join('agents', 'runtime', 'state', 'hot-context.md');
 
@@ -350,11 +351,7 @@ function _session_index_block_or_null(root: string): string | null {
 // ---------------------------------------------------------------------
 
 function _read_stdin(): string {
-    try {
-        return fs.readFileSync(0, 'utf-8');
-    } catch {
-        return '';
-    }
+    return readHookStdin();
 }
 
 export function main(): number {
@@ -414,6 +411,10 @@ export function main(): number {
     return 0; // never blocks
 }
 
-if (fileURLToPath(import.meta.url) === path.resolve(process.argv[1] ?? '')) {
+// Bundle-safety: never auto-run when inlined into an esbuild bundle, where
+// every module shares the bundle's `import.meta.url` (see cmd_migrate.ts).
+declare const __AGENT_CONFIG_BUNDLE__: boolean | undefined;
+const _bundled = typeof __AGENT_CONFIG_BUNDLE__ !== 'undefined' && __AGENT_CONFIG_BUNDLE__;
+if (!_bundled && fileURLToPath(import.meta.url) === path.resolve(process.argv[1] ?? '')) {
     process.exit(main());
 }

package/src/scripts/injection_scan_hook.ts

@@ -30,6 +30,8 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
+import { readHookStdin } from "./hooks/hook_stdin.js";
+
 const SETTINGS_FILE = ".agent-settings.yml";
 const EXIT_ALLOW = 0;
 const EXIT_WARN = 2;
@@ -274,10 +276,16 @@ function _pyTruthy(v: JsonValue | undefined): boolean {
 }
 
 function _readStdin(): string {
-  return fs.readFileSync(0, "utf-8");
+  return readHookStdin();
 }
 
+// Bundle-safety: never auto-run when inlined into an esbuild bundle, where
+// every module shares the bundle's `import.meta.url` (see cmd_migrate.ts).
+declare const __AGENT_CONFIG_BUNDLE__: boolean | undefined;
 function _isCliEntry(): boolean {
+    if (typeof __AGENT_CONFIG_BUNDLE__ !== 'undefined' && __AGENT_CONFIG_BUNDLE__) {
+        return false;
+    }
     if (process.argv[1] === undefined) {
         return false;
     }

package/src/scripts/install

@@ -3,7 +3,7 @@
 #
 # Orchestrates the two stages:
 #   1. scripts/install.sh  — payload sync (copy rules, symlink skills/commands)
-#   2. scripts/install.py  — bridge files (.agent-settings, VSCode/Augment JSONs)
+#   2. scripts/install.ts  — bridge files (.agent-settings, VSCode/Augment JSONs)
 #
 # This is the only installer a consumer needs to invoke. The underlying
 # scripts remain callable directly for advanced use; see their --help.
@@ -35,7 +35,7 @@
 #   --verbose         Detailed payload sync output
 #   --quiet           Suppress non-error output
 #   --skip-sync       Skip payload sync (install.sh)
-#   --skip-bridges    Skip bridge files (install.py)
+#   --skip-bridges    Skip bridge files (install.ts)
 #   --global          Install to user-scope paths (~/.claude/, ~/.cursor/, …)
 #                     instead of project-locally. Implies --skip-sync (the
 #                     payload sync stage is project-only). See ADR-007.
@@ -100,7 +100,7 @@ FLEET_CONFIG=""
 USER_TYPE=""
 NO_UI=false
 
-# Single source of truth for valid tool IDs (also referenced by install.sh / install.py).
+# Single source of truth for valid tool IDs (also referenced by install.sh / install.ts).
 VALID_TOOLS="claude-code claude-desktop cursor windsurf cline gemini-cli copilot augment aider codex roocode continue kilocode zed jetbrains kiro all"
 
 show_help() {
@@ -214,9 +214,9 @@ fi
 # (and its --scope project / --scope=project / SCOPE shorthand) is the
 # maintainer-only escape hatch behind AGENT_CONFIG_DEV_MODE=1. Without
 # the env flag we refuse here so the bash orchestrator fails fast with
-# a directive error pointing at the maintainer doc — install.py's
+# a directive error pointing at the maintainer doc — install.ts's
 # Python-side _enforce_consumer_global_only still backstops the same
-# check for direct python3 scripts/install.py invocations.
+# check for legacy direct python3 installer invocations (retired install.py).
 if [[ "${SCOPE:-}" == "project" && "${AGENT_CONFIG_DEV_MODE:-}" != "1" ]]; then
     err "--scope=project is reserved for maintainers (ADR-020 — consumer installs are global-only). Set AGENT_CONFIG_DEV_MODE=1 to opt in. See docs/maintainers/dev-mode.md."
     exit 1
@@ -296,7 +296,7 @@ prompt_tools() {
 # When an interactive global install will hand off to the browser wizard,
 # the wizard is the single tool-selection surface — skip the terminal
 # picker so it does not pre-empt (and, via TOOLS_EXPLICIT, suppress) the
-# GUI. Mirrors install.py::_wizard_should_launch (the --no-ui flag is
+# GUI. Mirrors install.ts wizard_should_launch (the --no-ui flag is
 # handled here too — it suppresses both the wizard and the picker).
 # Headless paths (no TTY / CI / AGENT_CONFIG_NO_UI) still get the picker.
 wizard_will_handle_tools=false

package/src/scripts/install-hooks.sh

@@ -30,8 +30,8 @@ cat > "$HOOKS_DIR/pre-push" << 'EOF'
 # the old hook only verified dist sync + the COMMAND count — it missed
 # guideline/skill/rule count drift and the generate-tools / router / corpus
 # outputs (e.g. a new guideline bumping the count in README + docs/architecture).
-# `task consistency` is the EXACT CI mirror (sync-check + sync-check-hashes +
-# sync + generate-tools + compile-router + compile-corpus + `git diff --quiet`),
+# `task consistency` is the EXACT CI mirror (sync-check + sync + generate-tools
+# + compile-router + compile-corpus + `git diff --quiet`),
 # so any derived-output drift blocks the push here. Runtime ~15-40s (it
 # regenerates the tool trees) — cheaper than a red CI run and a fixup re-push.
 
@@ -91,7 +91,7 @@ fi
 EOF
 
 chmod +x "$HOOKS_DIR/pre-push"
-echo "✅  Pre-push hook installed."
+echo "✅  Pre-push hook installed." >&2
 
 # Pre-commit: marketplace consistency -----------------------------------------
 #
@@ -184,7 +184,7 @@ fi
 EOF
 
 chmod +x "$HOOKS_DIR/pre-commit"
-echo "✅  Pre-commit hook installed."
+echo "✅  Pre-commit hook installed." >&2
 
 # Chat-history bridge hooks ----------------------------------------------------
 #
@@ -218,7 +218,7 @@ fi
 # command above is guarded by "|| true", so the implicit exit is 0.
 EOF
     chmod +x "$HOOKS_DIR/$name"
-    echo "✅  $name hook installed."
+    echo "✅  $name hook installed." >&2
 }
 
 write_chat_history_hook "post-commit"   "git:post-commit"
@@ -275,4 +275,4 @@ EOF
 
 append_auto_sync_block "post-merge"    "1"
 append_auto_sync_block "post-checkout" "3"
-echo "✅  Auto-sync block appended to post-merge / post-checkout hooks."
+echo "✅  Auto-sync block appended to post-merge / post-checkout hooks." >&2

package/src/scripts/install.sh

@@ -8,7 +8,8 @@
 # Creates tool-specific directories for Claude Code, Cursor, Cline, Windsurf, Gemini.
 #
 # Does NOT render .agent-settings.yml or bridge JSONs — that is the job of
-# scripts/install.py. The primary entry point scripts/install orchestrates both.
+# scripts/install.ts (run via the bundled dist/install/install.mjs). The
+# primary entry point scripts/install orchestrates both.
 # Running this script on its own installs the payload only.
 #
 # Usage:
@@ -50,7 +51,7 @@ SKIP_GITIGNORE=false
 # that require both channels.
 LEGACY_BOTH=false
 # When true, skip payload sync entirely and only install the project-local
-# `./agent-config` wrapper (Step 7 Phase 2). The bridge stage (install.py)
+# `./agent-config` wrapper (Step 7 Phase 2). The bridge stage (install.ts)
 # handles the .agent-settings.yml stub + nested-install guard.
 MINIMAL=false
 # Comma-separated tool IDs (default: all). Set by --tools or the
@@ -91,7 +92,7 @@ parse_args() {
             --skip-gitignore) SKIP_GITIGNORE=true; shift ;;
             --tools)   TOOLS="$2"; shift 2 ;;
             --tools=*) TOOLS="${1#*=}"; shift ;;
-            # --user-type is consumed by install.py (settings persistence).
+            # --user-type is consumed by install.ts (settings persistence).
             # Accepted here so direct `bash scripts/install.sh --user-type=...`
             # invocations from the `install` wrapper / standalone users do not
             # trip the "Unknown argument" guard. Value is intentionally unused
@@ -1171,7 +1172,7 @@ main() {
 
     # Minimal-init short-circuit (Step 7 Phase 2): skip every payload-sync
     # stage and only install the project-local `./agent-config` wrapper.
-    # The bridge stage (install.py) handles the .agent-settings.yml stub
+    # The bridge stage (install.ts) handles the .agent-settings.yml stub
     # + nested-install guard. No .augment/, no AGENTS.md, no symlinks.
     if $MINIMAL; then
         if ! $QUIET; then