@event4u/agent-config 9.9.0 → 9.11.0

package/src/scripts/check_site_links.ts

@@ -10,8 +10,9 @@
  * (`http(s):`, `mailto:`, `data:`, protocol-relative `//`) links and pure `#`
  * anchors are skipped — this gate owns *internal* integrity only.
  *
- * Read-only. Exit 0 clean / 1 on any broken internal link, 2 if the site has not
- * been built yet (run `cd site && npm run build` first).
+ * Read-only. Exit 0 clean / 1 on any broken internal link, 2 if the build is
+ * missing OR stale (run `cd site && npm run build` first). Staleness matters as much
+ * as absence: a green verdict over an old partial build is a gate that cannot fail.
  *
  * Usage:
  *   ./scripts-run src/scripts/check_site_links            # scan site/dist
@@ -117,19 +118,77 @@ export function main(argv: string[] = process.argv.slice(2)): number {
         process.stderr.write(`❌  site not built: ${distDir} is missing. Run \`cd site && npm ci && npm run build\` first.\n`);
         return 2;
     }
+    // A missing dist was already an exit-2; a STALE one was not, so the checker
+    // reported green over an old partial build (measured: 6 pages against 25 content
+    // sources, every source newer than the build). Green over a build that does not
+    // contain the pages being checked is worse than red — it is a gate that cannot
+    // fail. Same silent-green class as the per-pack matrix removed alongside this.
+    const stale = _stalenessVerdict(distDir);
+    if (stale !== null) {
+        process.stderr.write(`❌  site build is stale: ${stale}. Run \`cd site && npm ci && npm run build\` first.\n`);
+        return 2;
+    }
     const broken = findBrokenLinks(distDir, base);
     if (broken.length > 0) {
         process.stdout.write(`❌  ${broken.length} broken internal link(s) in the built site:\n`);
         for (const b of broken) process.stdout.write(`  - ${b.page}: ${b.link}\n`);
+        process.stderr.write(`scanned: ${_walkHtml(distDir).length}\n`);
         return 1;
     }
+    const pages = _walkHtml(distDir).length;
+    // Machine-readable count for check_gate_coverage — emitted regardless of
+    // --quiet, and on every exit path above too, so a gate with real findings
+    // still reports what it inspected (the emission bug found on #1047).
+    process.stderr.write(`scanned: ${pages}\n`);
     if (!quiet) {
-        const pages = _walkHtml(distDir).length;
         process.stdout.write(`✅  site links: ${pages} page(s), no broken internal links (base ${base}).\n`);
     }
     return 0;
 }
 
+/**
+ * Why the built site cannot be trusted, or `null` when it looks current.
+ *
+ * Two independent signals, because they catch different failures:
+ *  - a content source newer than every built page  → the build predates an edit;
+ *  - materially fewer pages than content sources   → the build is partial.
+ *
+ * Both are cheap `stat` walks. Exported for the test.
+ */
+export function _stalenessVerdict(distDir: string, contentDir?: string): string | null {
+    const content = contentDir ?? path.join(REPO, 'site', 'src', 'content');
+    if (!fs.existsSync(content)) {
+        return null; // nothing to compare against — not this checker's verdict to make
+    }
+    const sources = _walkFiles(content).filter((f) => f.endsWith('.md') || f.endsWith('.mdx'));
+    if (sources.length === 0) {
+        return null;
+    }
+    const pages = _walkHtml(distDir);
+    if (pages.length === 0) {
+        return 'the build contains no HTML pages';
+    }
+    const newestPage = Math.max(...pages.map((p) => fs.statSync(p).mtimeMs));
+    const newer = sources.filter((s) => fs.statSync(s).mtimeMs > newestPage);
+    if (newer.length > 0) {
+        return `${newer.length} of ${sources.length} content source(s) are newer than the newest built page`;
+    }
+    if (pages.length < sources.length) {
+        return `only ${pages.length} page(s) built for ${sources.length} content source(s)`;
+    }
+    return null;
+}
+
+function _walkFiles(dir: string): string[] {
+    const out: string[] = [];
+    for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, e.name);
+        if (e.isDirectory()) out.push(..._walkFiles(full));
+        else if (e.isFile()) out.push(full);
+    }
+    return out;
+}
+
 function _isCliEntry(): boolean {
     if (process.argv[1] === undefined) {
         return false;

package/src/scripts/compile_router.ts

@@ -50,16 +50,14 @@ const SETTINGS_PATH = project_settings_path(ROOT);
 // workspace-independent by definition.
 export const SCHEMA_VERSION = 2;
 
-// Compile-time rule toggles. Maps rule-id → settings predicate.
-// Rule omitted from router.json when predicate returns False.
-const COMPILE_TIME_TOGGLES: Record<string, (s: JsonObject) => boolean> = {
-    'telegraph-speak': (s: JsonObject): boolean => {
-        const tg = (s['telegraph'] as JsonObject | undefined) ?? {};
-        const enabled = tg['enabled'] === undefined ? true : tg['enabled'];
-        const speak = tg['speak'] === undefined ? true : tg['speak'];
-        return Boolean(enabled) && Boolean(speak);
-    },
-};
+// Compile-time rule toggles — the definition moved to
+// `_lib/compile_time_toggles.ts` on 2026-07-29 so the PROJECTOR honours it too.
+// Router membership alone was never zero-cost: a disabled rule kept shipping as a
+// file, and the host reads the file (docs/adrs/telegraph/0002 § part 1).
+// Re-exported here because tests and downstream consumers pin this name.
+import { COMPILE_TIME_TOGGLES, rule_is_compile_enabled } from './_lib/compile_time_toggles.js';
+
+export { COMPILE_TIME_TOGGLES };
 
 // Maps legacy tier values to the router-canonical names. See
 // docs/contracts/rule-router.md § Backward compatibility.
@@ -204,10 +202,8 @@ function _collect(): JsonObject {
             continue;
         }
         const rule_id = _stem(p);
-        if (rule_id in COMPILE_TIME_TOGGLES) {
-            if (!(COMPILE_TIME_TOGGLES[rule_id] as (s: JsonObject) => boolean)(settings)) {
-                continue;
-            }
+        if (!rule_is_compile_enabled(rule_id, settings)) {
+            continue;
         }
         const rule_type = String(fm['type'] ?? 'auto');
         // Manual rules are reference-only (ADR-004) — no router emission.

package/src/scripts/condense.sh

@@ -4,12 +4,11 @@
 # Usage:
 #   ./scripts/condense.sh              # sync non-.md files + cleanup
 #   ./scripts/condense.sh --list       # list ALL .md files
-#   ./scripts/condense.sh --changed    # list .md files changed since last condensation
+#   ./scripts/condense.sh --changed    # list .md files whose projection is out of date
 #   ./scripts/condense.sh --check      # check if dirs are in sync
-#   ./scripts/condense.sh --mark-done <path>  # mark file as condensed
-#   ./scripts/condense.sh --mark-all-done     # mark all files as condensed
 #
-# .md condensation is done by the Augment agent interactively.
+# .md files are projected verbatim with the path rewriter applied — --sync
+# writes them; there is no separate condensation step.
 
 set -euo pipefail