@event4u/agent-config 9.9.0 → 9.10.0

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:630fccf72243569d472f47910900e140a625ee49efbf292724beb6a8804e32b2",
-  "generated_at": "2026-07-29T02:24:41Z",
+  "checksum": "sha256:8f374c9849955d1525f8eeb42dc65bf2084d0bc5495d87453707804b34405bdb",
+  "generated_at": "2026-07-31T05:51:11Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {
@@ -620,7 +620,7 @@
       ]
     },
     {
-      "artefact_count": 311,
+      "artefact_count": 312,
       "default_packs": [
         "meta",
         "memory",
@@ -633,7 +633,7 @@
       "optional_packs": [],
       "packs": [
         {
-          "artefact_count": 287,
+          "artefact_count": 288,
           "artefacts": [
             "src/agent-src/templates/agents/proposal.example.md",
             "src/domains/ai-video/image/analyse/command.md",
@@ -716,6 +716,7 @@
             "src/domains/meta/agents/optimize/command.md",
             "src/domains/meta/agents/user/accept/command.md",
             "src/domains/meta/agents/user/command.md",
+            "src/domains/meta/agents/user/delete/command.md",
             "src/domains/meta/agents/user/init/command.md",
             "src/domains/meta/agents/user/review/command.md",
             "src/domains/meta/agents/user/show/command.md",

package/dist/hooks/dispatch.js

@@ -7368,7 +7368,7 @@ import { fileURLToPath as fileURLToPath30 } from "node:url";
 
 // src/scripts/hooks/dispatch_hook.ts
 var import_yaml6 = __toESM(require_dist(), 1);
-import { spawnSync as spawnSync4 } from "node:child_process";
+import { spawnSync as spawnSync5 } from "node:child_process";
 import fs38 from "node:fs";
 import path38 from "node:path";
 import { fileURLToPath as fileURLToPath29, pathToFileURL as pathToFileURL25 } from "node:url";
@@ -7730,6 +7730,7 @@ import { createRequire as createRequire2 } from "node:module";
 // src/scripts/lint_hidden_unicode.ts
 import * as fs4 from "node:fs";
 import * as path4 from "node:path";
+import { spawnSync } from "node:child_process";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
 
 // src/scripts/_lib/security_lint.ts
@@ -8396,6 +8397,150 @@ function _scan(sf) {
   }
   return out;
 }
+var _BINARY_EXT = /* @__PURE__ */ new Set([
+  "png",
+  "jpg",
+  "jpeg",
+  "gif",
+  "ico",
+  "webp",
+  "avif",
+  "bmp",
+  "tiff",
+  "pdf",
+  "woff",
+  "woff2",
+  "ttf",
+  "otf",
+  "eot",
+  "zip",
+  "gz",
+  "tgz",
+  "bz2",
+  "xz",
+  "zst",
+  "7z",
+  "rar",
+  "wasm",
+  "mp3",
+  "mp4",
+  "wav",
+  "ogg",
+  "webm",
+  "mov",
+  "avi",
+  "so",
+  "dylib",
+  "dll",
+  "node",
+  "a",
+  "o",
+  "exe",
+  "jar",
+  "class",
+  "pyc",
+  "pyo",
+  "db",
+  "sqlite",
+  "sqlite3",
+  "bin",
+  "dat",
+  "docx",
+  "xlsx",
+  "pptx",
+  "doc",
+  "xls",
+  "ppt",
+  "odt",
+  "ods",
+  "odp"
+]);
+var _GENERATED_PREFIXES = [
+  "dist/",
+  ".augment/",
+  ".claude/",
+  ".cursor/",
+  ".clinerules/",
+  // Verbatim captured tool output, not authored text. These are RECORDINGS:
+  // escaping a control byte inside one would falsify the record it exists to
+  // preserve. If a capture needs to stay grep-readable, the fix is to escape
+  // at capture time — never to edit the artifact afterwards.
+  "agents/evidence/analysis/",
+  // The frozen hostile-encoding corpus. Its positives ARE raw control
+  // characters — that is the thing under test, so flagging them would demand
+  // escaping the fixtures and thereby delete the test. The corpus has its own,
+  // stronger integrity controls: a sha256 freeze plus a scope-guard test that
+  // is itself falsified by an out-of-scope fixture. Excluded here because it
+  // is DATA, on the same principle as the captures above.
+  "internal/bench/corpora/encoding-channels/"
+];
+function _isGenerated(rel) {
+  return _GENERATED_PREFIXES.some((p) => rel.startsWith(p));
+}
+function _isRawControlCodepoint(cp) {
+  if (cp === 9 || cp === 10 || cp === 13) return false;
+  return cp <= 31 || cp >= 127 && cp <= 159;
+}
+function _extensionOf(rel) {
+  const base = rel.slice(rel.lastIndexOf("/") + 1);
+  const dot = base.lastIndexOf(".");
+  return dot <= 0 ? "" : base.slice(dot + 1).toLowerCase();
+}
+function _trackedFiles() {
+  const res = spawnSync("git", ["ls-files", "-z"], {
+    cwd: ROOT,
+    maxBuffer: 64 * 1024 * 1024
+  });
+  if (res.status !== 0 || res.stdout === null) return null;
+  return res.stdout.toString("utf-8").split("\0").filter((p) => p !== "");
+}
+function _eligibleSourceFiles() {
+  const tracked = _trackedFiles();
+  if (tracked === null) return null;
+  return tracked.filter((rel) => !_isGenerated(rel) && !_BINARY_EXT.has(_extensionOf(rel)));
+}
+function _scanSourceControlBytes(files = null) {
+  const tracked = files ?? _eligibleSourceFiles();
+  if (tracked === null) return [];
+  const out = [];
+  for (const rel of tracked) {
+    if (_isGenerated(rel)) continue;
+    if (_BINARY_EXT.has(_extensionOf(rel))) continue;
+    let data;
+    try {
+      data = fs4.readFileSync(path4.join(ROOT, rel));
+    } catch {
+      continue;
+    }
+    try {
+      new TextDecoder("utf-8", { fatal: true }).decode(data);
+    } catch {
+      continue;
+    }
+    let line = 1;
+    for (const ch of data.toString("utf-8")) {
+      const cp = ch.codePointAt(0);
+      if (cp === void 0) continue;
+      if (cp === 10) {
+        line += 1;
+        continue;
+      }
+      if (!_isRawControlCodepoint(cp)) continue;
+      const hex = cp.toString(16).toUpperCase().padStart(2, "0");
+      out.push(
+        new Finding(
+          rel,
+          line,
+          CHECK,
+          "HIGH",
+          `raw control character U+${hex} in a text source \u2014 makes grep/file(1)/git treat this file as binary and skip it silently; use the language escape (e.g. \\0, \\x7F) instead`,
+          1
+        )
+      );
+    }
+  }
+  return out;
+}
 function _sanitize(filePath) {
   const raw = fs4.readFileSync(filePath, "utf-8");
   let cleaned = "";
@@ -8449,6 +8594,17 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  const sourceFiles = _eligibleSourceFiles();
+  for (const h of _scanSourceControlBytes(sourceFiles)) {
+    findings.push(h);
+  }
+  if (!args.json) {
+    const n = sourceFiles === null ? 0 : sourceFiles.length;
+    process.stdout.write(
+      sourceFiles === null ? "  source pass: SKIPPED \u2014 `git ls-files` unavailable, 0 files read for raw control bytes\n" : `  source pass: ${n} tracked text file(s) read for raw C0 control bytes (generated trees + verbatim captures excluded)
+`
+    );
+  }
   if (args.fix) {
     for (const p of [...flagged].sort()) {
       const sanitized = _sanitize(p);
@@ -8487,8 +8643,22 @@ if (_isCliEntry()) {
   process.exitCode = main();
 }
 
+// src/scripts/_lib/confusables.ts
+var _LATIN = new RegExp("\\p{Script=Latin}", "u");
+var _CYRILLIC = new RegExp("\\p{Script=Cyrillic}", "u");
+var _GREEK = new RegExp("\\p{Script=Greek}", "u");
+var _LETTER = new RegExp("\\p{L}", "u");
+
 // src/scripts/_lib/retrieval_sanitize.ts
 var MAX_FIELD_CHARS = 8192;
+var _INVISIBLE_FILLERS = /* @__PURE__ */ new Set([
+  12644,
+  // HANGUL FILLER
+  4447,
+  // HANGUL CHOSEONG FILLER
+  4448
+  // HANGUL JUNGSEONG FILLER
+]);
 function _isStrippableControl(cp) {
   if (cp === 9 || cp === 10) return false;
   if (cp <= 31) return true;
@@ -8503,6 +8673,7 @@ function sanitize_text(s) {
     if (cp === void 0) continue;
     if (_classify(cp) !== null) continue;
     if (_isStrippableControl(cp)) continue;
+    if (_INVISIBLE_FILLERS.has(cp)) continue;
     out += ch;
   }
   return out.length > MAX_FIELD_CHARS ? out.slice(0, MAX_FIELD_CHARS) : out;
@@ -10668,6 +10839,9 @@ function _retrieve_internal(types, keys, limit, today) {
     }
   }
   const hits = (positives.length > 0 ? positives : repo_hits).slice(0, limit);
+  for (const h of hits) {
+    if (_isPlainObject4(h.entry)) h.entry = sanitize_entry(h.entry);
+  }
   return [hits, skipped];
 }
 function retrieve(types, keys, limit = 5) {
@@ -13639,7 +13813,7 @@ if (_invokedDirectly) {
 }
 
 // src/scripts/hot_context_hook.ts
-import { spawnSync } from "node:child_process";
+import { spawnSync as spawnSync2 } from "node:child_process";
 import * as fs14 from "node:fs";
 import { createRequire as createRequire4 } from "node:module";
 import * as path13 from "node:path";
@@ -13839,7 +14013,7 @@ function _hot_context_path(root) {
 }
 function _current_branch(root) {
   try {
-    const proc = spawnSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+    const proc = spawnSync2("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
       cwd: root,
       encoding: "utf-8",
       timeout: 5e3,
@@ -14092,7 +14266,7 @@ if (!_bundled2 && fileURLToPath8(import.meta.url) === path13.resolve(process6.ar
 }
 
 // src/scripts/roadmap_progress_hook.ts
-import { spawnSync as spawnSync2 } from "node:child_process";
+import { spawnSync as spawnSync3 } from "node:child_process";
 import fs15 from "node:fs";
 import path14 from "node:path";
 import { fileURLToPath as fileURLToPath9, pathToFileURL as pathToFileURL6 } from "node:url";
@@ -14303,7 +14477,7 @@ function run(stdin_text, options) {
     }
     try {
       const inv = _resolve_tsx_invocation(script);
-      spawnSync2(inv.command, [...inv.args, "--repo-root", root], {
+      spawnSync3(inv.command, [...inv.args, "--repo-root", root], {
         cwd: root,
         stdio: ["ignore", "ignore", "ignore"],
         timeout: 3e4,
@@ -17466,10 +17640,10 @@ import path33 from "node:path";
 import { fileURLToPath as fileURLToPath26, pathToFileURL as pathToFileURL22 } from "node:url";
 
 // src/install/rtkDetection.ts
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 import { existsSync as existsSync6, statSync as statSync8, readFileSync as readFileSync12, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { delimiter, join as join11, dirname as dirname7 } from "node:path";
+import { delimiter, join as join12, dirname as dirname7 } from "node:path";
 var TOKEN_KILLER_GAIN_SIGNATURE = /RTK Token Savings/;
 var PROBE_TIMEOUT_MS = 3e3;
 function resolveBinaryOnPath(name, pathEnv) {
@@ -17479,7 +17653,7 @@ function resolveBinaryOnPath(name, pathEnv) {
   for (const dir of pathVar.split(delimiter)) {
     if (dir.length === 0) continue;
     for (const suffix of suffixes) {
-      const candidate = join11(dir, `${name}${suffix}`);
+      const candidate = join12(dir, `${name}${suffix}`);
       if (existsSync6(candidate)) return candidate;
     }
   }
@@ -17487,7 +17661,7 @@ function resolveBinaryOnPath(name, pathEnv) {
 }
 function runGainProbe(binPath) {
   try {
-    const res = spawnSync3(binPath, ["gain"], {
+    const res = spawnSync4(binPath, ["gain"], {
       timeout: PROBE_TIMEOUT_MS,
       encoding: "utf-8",
       windowsHide: true
@@ -17502,7 +17676,7 @@ function runGainProbe(binPath) {
 }
 function readVersion(binPath) {
   try {
-    const res = spawnSync3(binPath, ["--version"], {
+    const res = spawnSync4(binPath, ["--version"], {
       timeout: PROBE_TIMEOUT_MS,
       encoding: "utf-8",
       windowsHide: true
@@ -17531,7 +17705,7 @@ function detectRtk(options = {}) {
   return version === void 0 ? { present: true, identity, binPath } : { present: true, identity, version, binPath };
 }
 function cacheFile() {
-  return join11(homedir3(), ".event4u", "agent-config", "state", "rtk-identity.json");
+  return join12(homedir3(), ".event4u", "agent-config", "state", "rtk-identity.json");
 }
 function detectRtkCached(options = {}) {
   const binPath = resolveBinaryOnPath("rtk", options.pathEnv);
@@ -19098,7 +19272,7 @@ function _run_concern(concern, envelope) {
   const concern_env = hardenedSpawnEnv({ AGENT_CONFIG_PACKAGE_ROOT: REPO_ROOT });
   const started = performance.now();
   const { command, args: spawnArgs } = _resolve_tsx_invocation2(script, cmd.slice(1));
-  const proc = spawnSync4(command, spawnArgs, {
+  const proc = spawnSync5(command, spawnArgs, {
     input: _compactJsonDumps(envelope),
     encoding: "utf-8",
     cwd: workspace,

package/dist/install/install.mjs

@@ -14302,6 +14302,14 @@ var settingsSchema = external_exports.object({
       "Consumed by the doc-screenshot-hygiene rule. on (default) = a data-bearing screenshot embed is gated behind this-turn human confirmation; uncertain/unresolved regions redact-or-refuse, never ship-and-hope; illustrative/no-data screenshots may embed with a stated justification. off = no data-bearing gate (the anonymization taxonomy still applies)."
     )
   }).default({ identity_allowlist: [], forbid_terminal_capture: true, data_bearing_gate: "on" }),
+  telegraph: external_exports.object({
+    speak: external_exports.boolean().default(false).describe(
+      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This \u2014 not speak_scope \u2014 is the lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
+    ),
+    speak_scope: external_exports.enum(["off", "reply", "all"]).default("off").describe(
+      "Where telegraph condensation applies WHEN speak is true. off (default) = agent reply prose is exempt. compile_router never reads this key: with speak false the rule does not ship, so this setting has no effect on its own. Quote the value in YAML \u2014 bare `off` parses as a boolean under YAML 1.1 and is rejected."
+    )
+  }).default({ speak: false, speak_scope: "off" }),
   tokens: external_exports.object({
     rich_skills: richSkillsMode.default("on").describe(
       "Whether skills marked token_budget_class: rich may load in full (exempt from telegraph-speak + thin-projector trimming), consumed by the token-budget-discipline rule. on = allowed (default); off = fall back to standard condensed behavior; ask = surface an estimated token delta (tokens, not dollars) and ask once per session before loading."

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 590,
+    "artefact_count": 591,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-07-29",
+  "generated_at": "2026-07-31",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.9.0"
+    "version": "9.10.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.9.0"
+      "version": "9.10.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.9.0"
+  "version": "9.10.0"
 }