@event4u/agent-config 9.8.0 → 9.9.0

package/dist/install/rtkDetection.js

@@ -0,0 +1,213 @@
+/**
+ * rtk (Rust Token Killer) detection — two-stage identity probe.
+ *
+ * rtk is a THIRD-PARTY Apache-2.0 tool (upstream: https://github.com/rtk-ai/rtk,
+ * not an event4u project). Its binary name collides with an unrelated crate —
+ * `reachingforthejack/rtk` (Rust Type Kit), which is also what the bare
+ * crates.io `rtk` crate resolves to. Upstream's INSTALL.md documents the
+ * collision and the discriminator: `rtk gain` renders the token-savings
+ * dashboard only on Rust Token Killer.
+ *
+ * Stage 1 — presence: an executable named `rtk` resolvable on PATH.
+ * Stage 2 — identity: run `rtk gain` (short timeout) and judge the OUTPUT
+ * SIGNATURE, not the exit code (upstream documents no exit-code contract for
+ * `rtk gain`, and `rtk --version` does not distinguish the two tools — both
+ * print `rtk <ver>`). The signature is the dashboard header "RTK Token
+ * Savings" (captured live from rtk 0.43.0, 2026-07-28).
+ *
+ * Four states, never a boolean — a broken RIGHT tool is not the WRONG tool:
+ *   { present: false }
+ *   { present: true, identity: 'token-killer', version }  — signature matched
+ *   { present: true, identity: 'unknown-rtk' }            — probe ran, output
+ *       clearly not Token Killer (e.g. unknown-subcommand / usage error)
+ *   { present: true, identity: 'unverified' }             — timeout, spawn
+ *       failure, crash, or ambiguous (empty) output
+ *
+ * Consumers: the wizard `detect-rtk` endpoint, the `rtk:detect` CLI readout,
+ * and the `rtk_wrap` PreToolUse hook (which gates on
+ * `identity === 'token-killer'` — never on bare presence). Contract:
+ * docs/contracts/rtk-detection.md.
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync, statSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { delimiter, join, dirname } from 'node:path';
+export const RTK_UPSTREAM_REPO = 'https://github.com/rtk-ai/rtk';
+/**
+ * Output signature of Rust Token Killer's `rtk gain` savings dashboard.
+ * Rust Type Kit has no `gain` subcommand and errors with a usage message
+ * that never contains this header.
+ */
+const TOKEN_KILLER_GAIN_SIGNATURE = /RTK Token Savings/;
+/** Probe timeout — `rtk gain` renders from a local DB (sub-second upstream). */
+const PROBE_TIMEOUT_MS = 3000;
+/** Resolve the first executable named `name` on the given PATH string. */
+export function resolveBinaryOnPath(name, pathEnv) {
+    const pathVar = pathEnv ?? process.env['PATH'] ?? '';
+    if (pathVar.length === 0)
+        return null;
+    const suffixes = process.platform === 'win32' ? ['', '.exe', '.cmd', '.bat'] : [''];
+    for (const dir of pathVar.split(delimiter)) {
+        if (dir.length === 0)
+            continue;
+        for (const suffix of suffixes) {
+            const candidate = join(dir, `${name}${suffix}`);
+            if (existsSync(candidate))
+                return candidate;
+        }
+    }
+    return null;
+}
+function runGainProbe(binPath) {
+    try {
+        const res = spawnSync(binPath, ['gain'], {
+            timeout: PROBE_TIMEOUT_MS,
+            encoding: 'utf-8',
+            windowsHide: true,
+        });
+        // spawn error or timeout/signal kill → not a completed probe.
+        if (res.error !== undefined || res.signal !== null) {
+            return { completed: false, stdout: res.stdout ?? '', stderr: res.stderr ?? '' };
+        }
+        return { completed: true, stdout: res.stdout ?? '', stderr: res.stderr ?? '' };
+    }
+    catch {
+        return { completed: false, stdout: '', stderr: '' };
+    }
+}
+function readVersion(binPath) {
+    try {
+        const res = spawnSync(binPath, ['--version'], {
+            timeout: PROBE_TIMEOUT_MS,
+            encoding: 'utf-8',
+            windowsHide: true,
+        });
+        const m = /^rtk\s+(\S+)/m.exec(res.stdout ?? '');
+        return m?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Judge identity from a finished probe — output signature, never exit code. */
+export function classifyGainOutput(probe) {
+    if (!probe.completed)
+        return 'unverified';
+    const combined = `${probe.stdout}\n${probe.stderr}`;
+    if (TOKEN_KILLER_GAIN_SIGNATURE.test(probe.stdout))
+        return 'token-killer';
+    // Probe ran and produced output that is clearly not the savings dashboard
+    // (Rust Type Kit answers `gain` with a usage/unknown-subcommand error).
+    if (combined.trim().length > 0)
+        return 'unknown-rtk';
+    // Completed silently with no output — ambiguous, don't accuse the tool.
+    return 'unverified';
+}
+/**
+ * Two-stage rtk detection. Never throws; failure modes collapse into
+ * `unverified` (fail-open for diagnostics, fail-CLOSED for consumers that
+ * gate behavior — `rtk_wrap` activates only on `token-killer`).
+ */
+export function detectRtk(options = {}) {
+    const binPath = resolveBinaryOnPath('rtk', options.pathEnv);
+    if (binPath === null)
+        return { present: false };
+    const probe = options.probe ?? runGainProbe;
+    const identity = classifyGainOutput(probe(binPath));
+    if (identity !== 'token-killer')
+        return { present: true, identity, binPath };
+    const version = (options.versionReader ?? readVersion)(binPath);
+    return version === undefined
+        ? { present: true, identity, binPath }
+        : { present: true, identity, version, binPath };
+}
+function cacheFile() {
+    return join(homedir(), '.event4u', 'agent-config', 'state', 'rtk-identity.json');
+}
+/**
+ * `detectRtk` with a user-global identity cache keyed on the resolved binary's
+ * path + mtime + size — the probe re-runs only when the binary changes. An
+ * `unverified` verdict is never cached (transient by definition). Any cache
+ * I/O error falls through to a live probe (fail-open).
+ */
+export function detectRtkCached(options = {}) {
+    const binPath = resolveBinaryOnPath('rtk', options.pathEnv);
+    if (binPath === null)
+        return { present: false };
+    let stat = null;
+    try {
+        const st = statSync(binPath);
+        stat = { mtimeMs: st.mtimeMs, size: st.size };
+    }
+    catch {
+        stat = null;
+    }
+    const file = cacheFile();
+    if (stat !== null) {
+        try {
+            const cached = JSON.parse(readFileSync(file, 'utf-8'));
+            if (cached.binPath === binPath &&
+                cached.mtimeMs === stat.mtimeMs &&
+                cached.size === stat.size) {
+                return cached.version === undefined
+                    ? { present: true, identity: cached.identity, binPath }
+                    : { present: true, identity: cached.identity, version: cached.version, binPath };
+            }
+        }
+        catch {
+            /* no / stale / unreadable cache — fall through to a live probe */
+        }
+    }
+    const detection = detectRtk(options);
+    if (stat !== null && detection.identity !== undefined && detection.identity !== 'unverified') {
+        const entry = {
+            binPath,
+            mtimeMs: stat.mtimeMs,
+            size: stat.size,
+            identity: detection.identity,
+            checkedAt: new Date().toISOString(),
+        };
+        if (detection.version !== undefined)
+            entry.version = detection.version;
+        try {
+            mkdirSync(dirname(file), { recursive: true });
+            writeFileSync(file, `${JSON.stringify(entry, null, 2)}\n`, 'utf-8');
+        }
+        catch {
+            /* cache write is best-effort */
+        }
+    }
+    return detection;
+}
+/**
+ * Per-OS install commands from verified upstream paths. NEVER emit a bare
+ * `cargo install rtk` — the crates.io `rtk` crate is the colliding Rust Type
+ * Kit, not Rust Token Killer.
+ */
+export function rtkInstallCommands(platform = process.platform) {
+    switch (platform) {
+        case 'darwin':
+            return {
+                recommended: 'brew install rtk',
+                recommendedLabel: 'Homebrew (official homebrew-core formula)',
+            };
+        case 'win32':
+            return {
+                recommended: 'winget install rtk-ai.rtk',
+                recommendedLabel: 'Recommended (automated, winget)',
+                manual: `Download rtk-x86_64-pc-windows-msvc.zip from ${RTK_UPSTREAM_REPO}/releases and place rtk.exe on PATH`,
+                manualLabel: 'Manual (all Windows versions, incl. winget-less images)',
+                note: 'ripgrep is a documented Windows runtime dependency: `winget install BurntSushi.ripgrep.MSVC`. ' +
+                    'The winget path is documented upstream (microsoft/winget-pkgs manifests) but has not been live-verified by agent-config — verify with `rtk gain` after install.',
+            };
+        default:
+            // linux + everything POSIX-ish: upstream's install.sh (errors out
+            // on unsupported platforms itself; installs to ~/.local/bin).
+            return {
+                recommended: `curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/master/install.sh | sh`,
+                recommendedLabel: "Upstream install.sh (installs to ~/.local/bin)",
+                note: 'Ensure ~/.local/bin is on PATH.',
+            };
+    }
+}
+//# sourceMappingURL=rtkDetection.js.map

package/dist/install/rtkDetection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rtkDetection.js","sourceRoot":"","sources":["../../src/install/rtkDetection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAejE;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AAExD,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAgB;IAC9D,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YAChD,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAChD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAWD,SAAS,YAAY,CAAC,OAAe;IACjC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE;YACrC,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,8DAA8D;QAC9D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACjD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAChC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;YAC1C,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACjD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,YAAY,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;IACpD,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACrD,wEAAwE;IACxE,OAAO,YAAY,CAAC;AACxB,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE;IACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,OAAO,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE;QACtC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC;AAeD,SAAS,SAAS;IACd,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC1D,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEhD,IAAI,IAAI,GAA6C,IAAI,CAAC;IAC1D,IAAI,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACL,IAAI,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAuB,CAAC;YAC7E,IACI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAC1B,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAC/B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;gBACC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE;oBACvD,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YACzF,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,kEAAkE;QACtE,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC3F,MAAM,KAAK,GAAuB;YAC9B,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QACvE,IAAI,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACL,gCAAgC;QACpC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAkBD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAC3E,QAAQ,QAAQ,EAAE,CAAC;QACf,KAAK,QAAQ;YACT,OAAO;gBACH,WAAW,EAAE,kBAAkB;gBAC/B,gBAAgB,EAAE,2CAA2C;aAChE,CAAC;QACN,KAAK,OAAO;YACR,OAAO;gBACH,WAAW,EAAE,2BAA2B;gBACxC,gBAAgB,EAAE,iCAAiC;gBACnD,MAAM,EAAE,gDAAgD,iBAAiB,qCAAqC;gBAC9G,WAAW,EAAE,yDAAyD;gBACtE,IAAI,EACA,gGAAgG;oBAChG,iKAAiK;aACxK,CAAC;QACN;YACI,kEAAkE;YAClE,8DAA8D;YAC9D,OAAO;gBACH,WAAW,EAAE,gFAAgF;gBAC7F,gBAAgB,EAAE,gDAAgD;gBAClE,IAAI,EAAE,iCAAiC;aAC1C,CAAC;IACV,CAAC;AACL,CAAC"}

package/dist/install/rule_scope.js

@@ -54,6 +54,7 @@ export function ruleScopeFromSettings(settings) {
     return {
         workspaces: _list(p['rule_workspaces']),
         packs: _list(p['rule_packs']),
+        roles: _list(p['rule_roles']),
     };
 }
 /**
@@ -72,7 +73,7 @@ export function ruleFileArrives(sourcePath, scope) {
     if (COMPAT_ALWAYS_EXCLUDED.includes(basename)) {
         return false;
     }
-    return rule_in_scope(sourcePath, scope.workspaces, scope.packs);
+    return rule_in_scope(sourcePath, scope.workspaces, scope.packs, scope.roles ?? null);
 }
 /**
  * Basenames from `rulesDir` that are EXCLUDED under `scope` — the shape the

package/dist/install/rule_scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule_scope.js","sourceRoot":"","sources":["../../src/install/rule_scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,oBAAoB,CAAC,CAAC;AAQhF,MAAM,CAAC,MAAM,UAAU,GAAc,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAEvE,4EAA4E;AAC5E,SAAS,KAAK,CAAC,KAAc;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO;QACH,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACvC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;KAChC,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAgB;IAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAgB;IACpE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,SAAS;QACb,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9B,SAAS;YACb,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,SAAS;QACb,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}
+{"version":3,"file":"rule_scope.js","sourceRoot":"","sources":["../../src/install/rule_scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,oBAAoB,CAAC,CAAC;AAchF,MAAM,CAAC,MAAM,UAAU,GAAc,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAEvE,4EAA4E;AAC5E,SAAS,KAAK,CAAC,KAAc;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO;QACH,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACvC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;KAChC,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAgB;IAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAgB;IACpE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,SAAS;QACb,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9B,SAAS;YACb,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,SAAS;QACb,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/install/types.js

@@ -2,7 +2,7 @@
  * Core types for the unified TypeScript install engine (v4.0.0).
  *
  * Mirrors the on-disk schema used by the legacy Python installer
- * (`scripts/install.py`) so the v4 engine reads/writes the same
+ * (the retired Python installer, ADR-200) so the v4 engine reads/writes the same
  * `~/.event4u/agent-config/` tree and v2 manifest entries without a
  * migration step.
  *
@@ -10,7 +10,7 @@
  * apply, and conflict-resolution modules. Pure types, no runtime
  * dependencies.
  *
- * Reference: `scripts/install.py`
+ * Reference: the retired Python installer (ADR-200)
  *   - `_file_entry()` → {@link FileEntry}
  *   - `class ConflictPolicy` → {@link ConflictPolicy}
  *   - v2 manifest `files_by_tool` → {@link InstallPlan.filesByTool}

package/dist/install/wizard-plan.js

@@ -58,7 +58,7 @@ export const USER_SCOPE_PATHS = {
 };
 /**
  * Universal Anthropic-shaped skill bundle deployed to markdown-skills
- * tools. Mirrors `_CLAUDE_SKILL_BUNDLE` in `scripts/install.py`.
+ * tools. Mirrors `_CLAUDE_SKILL_BUNDLE` in the retired Python installer (ADR-200).
  */
 const CLAUDE_SKILL_BUNDLE = [
     ['dist/agent-src/rules', 'rules'],

package/dist/install/wizardDismissals.js

@@ -0,0 +1,58 @@
+/**
+ * Permanent wizard-recommendation dismissals, persisted at
+ * `~/.event4u/agent-config/wizard-dismissals.json`.
+ *
+ * A dismissed recommendation (e.g. `"agent-switch"`) never returns — there
+ * is deliberately NO un-dismiss function (S0.1 council verdict, 2026-07-28:
+ * a passive row the user closed once stays closed). The file lives in the
+ * user-global config root, not inside the installed package, so a
+ * dismissal survives package updates.
+ *
+ * `AGENT_CONFIG_WIZARD_DISMISSALS` overrides the path (tests only).
+ */
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { resolve, dirname } from 'node:path';
+function wizardDismissalsPath() {
+    const override = process.env['AGENT_CONFIG_WIZARD_DISMISSALS'];
+    if (override !== undefined && override.length > 0)
+        return override;
+    return resolve(homedir(), '.event4u', 'agent-config', 'wizard-dismissals.json');
+}
+/**
+ * Return the recorded dismissal ids, or `[]` when absent / unreadable.
+ * Best-effort: a missing or corrupted file behaves as "nothing dismissed
+ * yet" rather than throwing.
+ */
+export function readDismissedRecommendations() {
+    try {
+        const raw = readFileSync(wizardDismissalsPath(), 'utf8');
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed.dismissed)
+            ? parsed.dismissed.filter((d) => typeof d === 'string')
+            : [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Record `id` as permanently dismissed. Idempotent — a repeat call for an
+ * already-dismissed id is a no-op.
+ */
+export function dismissRecommendation(id) {
+    try {
+        const existing = readDismissedRecommendations();
+        if (existing.includes(id))
+            return;
+        const path = wizardDismissalsPath();
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+        const record = { dismissed: [...existing, id] };
+        writeFileSync(path, `${JSON.stringify(record, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    }
+    catch {
+        // Best-effort: a failed write just means the recommendation may
+        // resurface on the next load — never throw out of a dismiss action.
+    }
+}
+//# sourceMappingURL=wizardDismissals.js.map

package/dist/install/wizardDismissals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizardDismissals.js","sourceRoot":"","sources":["../../src/install/wizardDismissals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,SAAS,oBAAoB;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;AACpF,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IACxC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,oBAAoB,EAAE,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACpE,CAAC,CAAC,EAAE,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC5C,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,4BAA4B,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO;QAClC,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;QACpC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;QAChD,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACL,gEAAgE;QAChE,oEAAoE;IACxE,CAAC;AACL,CAAC"}

package/dist/mcp/awesome-mcp-servers.row.md

@@ -1 +1 @@
-| [@event4u/agent-config](https://event4u-app.github.io/agent-config) | Universal AI Agent OS — audited skills, governance rules, commands and templates for AI coding tools (Claude Code, Cursor, Windsurf, Copilot). | 20 tools (stdio, worker) | `pip install agent-config[mcp] && ./agent-config mcp:run` |
+| [@event4u/agent-config](https://event4u-app.github.io/agent-config) | Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including "zero runtime daemon". | 20 tools (stdio, worker) | `pip install agent-config[mcp] && ./agent-config mcp:run` |

package/dist/mcp/mcp-cloudflare-catalogue.json

@@ -1,5 +1,5 @@
 {
-  "description": "Universal AI Agent OS \u2014 audited skills, governance rules, commands and templates for AI coding tools (Claude Code, Cursor, Windsurf, Copilot).",
+  "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
   "homepage": "https://event4u-app.github.io/agent-config",
   "install_hint_stdio": "pip install agent-config[mcp] && ./agent-config mcp:run",
   "name": "agent-config-mcp",

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 580,
+    "artefact_count": 590,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-07-26",
+  "generated_at": "2026-07-29",
   "package": {
-    "description": "Universal AI Agent OS \u2014 audited skills, governance rules, commands and templates for AI coding tools (Claude Code, Cursor, Windsurf, Copilot).",
+    "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.8.0"
+    "version": "9.9.0"
   },
   "registries": [
     {
@@ -33,6 +33,17 @@
       "status": "pending",
       "submission_url": "https://github.com/cloudflare/mcp-server-cloudflare",
       "submitted_at": null
+    },
+    {
+      "id": "mcp-official-registry",
+      "label": "Official MCP Registry (registry.modelcontextprotocol.io)",
+      "last_verified": null,
+      "listing_format": "server-json",
+      "pr_url": null,
+      "rendered_payload": "dist/mcp/server.json",
+      "status": "pending",
+      "submission_url": "https://registry.modelcontextprotocol.io",
+      "submitted_at": null
     }
   ],
   "server": {

package/dist/mcp/server.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
+  "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
+  "name": "io.github.event4u-app/agent-config",
+  "packages": [
+    {
+      "identifier": "@event4u/agent-config",
+      "registryType": "npm",
+      "transport": {
+        "type": "stdio"
+      },
+      "version": "9.9.0"
+    }
+  ],
+  "repository": {
+    "source": "github",
+    "url": "https://github.com/event4u-app/agent-config"
+  },
+  "version": "9.9.0"
+}