@hasna/instructions 0.7.0 → 0.7.2

package/dist/chunks/{index-7m4j8a33.js → index-n6nh6f5r.js}

@@ -14,8 +14,9 @@ import {
   ProfileNotFoundError,
   isTemplate,
   renderTemplate,
-  renderTemplatePreview
-} from "./index-n3fjspr0.js";
+  renderTemplatePreview,
+  validateExpectedConfigVersion
+} from "./index-preyvj8n.js";
 import {
   INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS,
   clientTransportEnvKeys,
@@ -77,6 +78,36 @@ function truncateMiddle(value, max = 80) {
   return `${text.slice(0, head)}...${text.slice(text.length - tail)}`;
 }
 
+// src/lib/instruction-source-policy.ts
+function isRetiredInstructionSource(config) {
+  return config.tags.some((tag) => tag === "retired-global-source" || tag === "retired-instruction-source");
+}
+function instructionSourceRejection(config) {
+  if (isRetiredInstructionSource(config) || config.tags.includes("config-only")) {
+    return "source is retired or explicitly configuration-only";
+  }
+  if (config.category !== "rules")
+    return `category ${config.category} is not an instruction source; classify reviewed prose as rules`;
+  if (config.format !== "markdown" && config.format !== "text")
+    return `format ${config.format} is not instruction prose`;
+  if (config.is_template)
+    return "unresolved templates must be rendered and reviewed before prompt injection";
+  if (!config.content.trim())
+    return "instruction source is empty";
+  if (config.content.includes("\x00"))
+    return "instruction source contains binary content";
+  const target = config.target_path?.split(/[\\/]/).pop() ?? "";
+  if (/\.(?:json|toml|yaml|yml|ini|sh|bash|zsh|fish|js|ts|py|rules)$/i.test(target)) {
+    return "target is an executable, provider policy, or settings file rather than a prompt";
+  }
+  return null;
+}
+function assertInstructionSource(config) {
+  const rejection = instructionSourceRejection(config);
+  if (rejection)
+    throw new Error(`Cannot inject ${config.slug}: ${rejection}.`);
+}
+
 // src/lib/global-agent-rules-standard.ts
 import { createHash as createHash7 } from "crypto";
 
@@ -186,17 +217,18 @@ async function ensureCodewithSharedTodosStorageStandardConfig(store = resolveCon
   let config;
   try {
     const existing = await store.getConfig(CODEWITH_SHARED_TODOS_STORAGE_STANDARD_SLUG);
+    if (isRetiredInstructionSource(existing))
+      return existing;
     if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
       config = await store.updateConfig(existing.id, input);
     } else {
       config = existing;
     }
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     config = await store.createConfig(input);
   }
-  for (const profile of await store.listProfiles()) {
-    await store.addConfigToProfile(profile.id, config.id);
-  }
   return config;
 }
 
@@ -7373,6 +7405,9 @@ function buildCodexAgentsMd(source, context = {}) {
 function buildOpenCodeAgentsMd(source, context = {}) {
   return flattenWithRules(source, context);
 }
+function buildSumiAgentsMd(source, context = {}) {
+  return flattenWithRules(source, context);
+}
 function buildCursorMdc(source) {
   const stem = source.target_path ? basename2(source.target_path, extname(source.target_path)) : source.slug;
   const description = source.name || stem;
@@ -7401,6 +7436,8 @@ function applyTransform(source, output, context = {}) {
       return buildCodexAgentsMd(source, context);
     case "opencode-flat":
       return buildOpenCodeAgentsMd(source, context);
+    case "sumi-flat":
+      return buildSumiAgentsMd(source, context);
     case "cursor-mdc":
       return buildCursorMdc(source);
     case "skill-neutral":
@@ -7515,6 +7552,7 @@ var DEFAULT_ASSET_SURFACES = Object.freeze({
   codex: "cli",
   cursor: "ide",
   opencode: "cli",
+  sumi: "cli",
   codewith: "cli",
   qwen: "cli",
   aicopilot: "cli",
@@ -8178,6 +8216,7 @@ var SESSION_RENDER_TOOLS = [
   "codex",
   "cursor",
   "opencode",
+  "sumi",
   "codewith",
   "qwen",
   "aicopilot",
@@ -8266,6 +8305,15 @@ var SESSION_TOOL_ADAPTERS = {
     description: "OpenCode AGENTS.md plus opencode.json instructions pointing at managed fragments.",
     providerSurface: "legacy-dual"
   },
+  sumi: {
+    tool: "sumi",
+    mode: "flattened-markdown",
+    indexFile: "AGENTS.md",
+    managedDir: SESSION_RENDER_INSTRUCTIONS_MANAGED_DIR,
+    envVar: "SUMI_CONFIG_DIR",
+    nativeImports: false,
+    description: "Sumi native AGENTS.md in the explicit resolved config directory or project root."
+  },
   aicopilot: {
     tool: "aicopilot",
     mode: "flattened-markdown",
@@ -8550,9 +8598,19 @@ function skippedSource(source, reason) {
   };
 }
 function normalizeSources(sources, tool, allowEmptySources) {
-  const normalized = sources.map((source, index) => {
+  const providerSkipped = [];
+  const normalized = sources.flatMap((source, index) => {
     if (!source.id.trim())
       throw new Error("Session instruction source id is required.");
+    if (source.targetProviders?.length && !providerTargetsTool(source.targetProviders, tool)) {
+      providerSkipped.push({
+        id: source.id,
+        label: source.label ?? source.id,
+        targetProviders: source.targetProviders,
+        reason: "instruction source targets a different provider"
+      });
+      return [];
+    }
     const floored = applyAgentOperatingRulesFloor(source, source.content ?? "");
     const content = filterProviderOnlyBlocks(floored.content, tool);
     const normalized2 = {
@@ -8571,7 +8629,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
     if (!allowEmptySources && !normalized2.content.trim() && normalized2.resolvedRules.length === 0 && !hasPathReferences) {
       throw new Error(`Session instruction source "${source.id}" is empty. Pass --allow-empty-sources only for explicit empty renders.`);
     }
-    return normalized2;
+    return [normalized2];
   });
   const originalOrder = [...normalized].sort(compareSessionInstructionSources);
   const deduplicated = deduplicateSemanticPolicySources(normalized);
@@ -8579,7 +8637,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
   validateTargetedReplacementSources(originalOrder, ordered, deduplicated.skipped, tool);
   rejectDuplicateSourceSlugs(ordered);
   rejectDuplicateRulePaths(ordered);
-  return { sources: ordered, skipped: deduplicated.skipped };
+  return { sources: ordered, skipped: [...providerSkipped, ...deduplicated.skipped] };
 }
 function compareSessionInstructionSources(a, b) {
   return SESSION_LAYER_RANK[a.resolvedLayer] - SESSION_LAYER_RANK[b.resolvedLayer] || a.resolvedOrder - b.resolvedOrder || a.id.localeCompare(b.id);
@@ -9185,6 +9243,11 @@ function isNativeProfileSessionTarget(input) {
   return (input.tool === "grok" || input.tool === "devin") && Boolean(input.targetHome?.trim()) && !input.projectRoot;
 }
 function adapterFor(input) {
+  if (input.tool === "sumi" && input.projectRoot) {
+    if (input.providerSurface)
+      throw new Error(`Provider surface ${input.providerSurface} is not valid for Sumi.`);
+    return Object.freeze({ ...SESSION_TOOL_ADAPTERS.sumi, projectScoped: true, envVar: undefined });
+  }
   if (input.tool === "opencode" && input.providerSurface) {
     if (input.providerSurface !== "opencode-config-instructions" && input.providerSurface !== "opencode-agents-md") {
       throw new Error(`Provider surface ${input.providerSurface} is not valid for OpenCode.`);
@@ -9226,7 +9289,7 @@ function adapterFor(input) {
   }
   if (input.tool !== "codewith")
     return SESSION_TOOL_ADAPTERS[input.tool];
-  const gatedNativeImports = input.codewithNativeImports === true || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true";
+  const gatedNativeImports = input.codewithNativeImports ?? (process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true");
   return gatedNativeImports ? CODEWITH_NATIVE_ADAPTER : CODEWITH_FLATTENED_ADAPTER;
 }
 function getHomeDir() {
@@ -9277,6 +9340,13 @@ function assertSafeTargetRoot(targetHome) {
   return normalized;
 }
 function resolveRenderTarget(input, adapter) {
+  if (input.tool === "sumi" && !input.projectRoot && !input.targetHome?.trim()) {
+    return {
+      targetHome: defaultTargetHome(input.tool, input.profile, input.sessionId),
+      targetKind: "blocked",
+      blockers: ["Sumi requires --target-home from `sumi debug paths config`, or --project-root for repository AGENTS.md."]
+    };
+  }
   if (adapter.projectScoped) {
     if (!input.projectRoot) {
       const label = input.tool === "cursor" ? "Cursor rules" : input.tool === "antigravity" ? "Antigravity rules" : `${adapter.description.split(".")[0]} files`;
@@ -9378,6 +9448,14 @@ function planSessionRender(input) {
   const normalized = normalizeSources(input.sources, input.tool, allowEmptySources);
   const composed = composeSources(normalized.sources, input.tool);
   const orderedSources = composed.sources;
+  if (input.tool === "sumi") {
+    for (const source of orderedSources) {
+      const activation = source.metadata?.["activation"];
+      if (source.globs?.length || source.resolvedRules.some((rule) => rule.globs?.length) || activation?.mode && activation.mode !== "always") {
+        throw new Error(`Sumi AGENTS.md cannot preserve conditional activation for source ${source.id}; compile a profile with an explicit supported fallback.`);
+      }
+    }
+  }
   const skippedSources = [
     ...input.skippedSources ?? [],
     ...normalized.skipped,
@@ -9421,6 +9499,7 @@ function planSessionRender(input) {
     adapterMode: adapter.mode,
     profile: input.profile,
     sessionId: input.sessionId ?? null,
+    ...input.refreshSelector ? { refreshSelector: input.refreshSelector } : {},
     targetHome,
     targetKind,
     targetOwner,
@@ -9933,6 +10012,7 @@ var DEFAULT_PROVIDER_CAPABILITIES = Object.freeze({
   codex: capability("codex", ">=0.1.0", "flattened", "AGENTS.md", { asset_surface: "cli" }),
   cursor: capability("cursor", ">=1.0.0", "cursor-rule", ".cursor/rules/*.mdc", { activation_modes: ["always", "glob"], conditional_artifacts: true, asset_surface: "ide" }),
   opencode: capability("opencode", ">=1.0.0", "managed-fragment", "opencode.json instructions", { provider_variant: "v1-instructions", session_surface: "opencode-config-instructions" }),
+  sumi: capability("sumi", ">=0.2.22 <0.3.0", "flattened", "AGENTS.md"),
   codewith: capability("codewith", ">=0.1.0", "flattened", "CODEWITH.md"),
   qwen: capability("qwen", ">=0.1.0", "flattened", "QWEN.md"),
   aicopilot: capability("aicopilot", ">=0.1.0", "flattened", "AICOPILOT.md"),
@@ -10155,12 +10235,22 @@ function compileInstructionGraph(input) {
     const selector = binding.providers?.find((entry) => entry.provider === input.context.provider || entry.provider === "global");
     if (binding.providers?.length && !selector)
       continue;
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    if (!binding.providers?.length && config.agent !== "global" && config.agent !== input.context.provider && !output) {
+      diagnostics.push({ severity: "info", code: "SOURCE_PROVIDER_NOT_SELECTED", config_id: configId, message: `${config.slug} targets ${config.agent}, not ${input.context.provider}.` });
+      continue;
+    }
     if (selector?.version_range && !providerVersionSatisfies(input.context.provider_version, selector.version_range)) {
       diagnostics.push({ severity: binding.required ? "error" : "warning", code: "PROVIDER_SELECTOR_VERSION_MISMATCH", config_id: configId, message: `${config.slug} requires ${input.context.provider} ${selector.version_range}; current version is ${input.context.provider_version}.` });
       continue;
     }
     if (!activationMatches(binding.activation, config, input.context))
       continue;
+    const rejection = instructionSourceRejection(config);
+    if (rejection) {
+      diagnostics.push({ severity: !binding.required && binding.fallback === "omit" ? "warning" : "error", code: "SOURCE_NOT_INSTRUCTION", config_id: configId, message: `${config.slug}: ${rejection}.` });
+      continue;
+    }
     if (capability2.activation_modes.includes(binding.activation.mode)) {
       selected.add(configId);
       effective.set(configId, binding.activation);
@@ -10235,7 +10325,9 @@ function compileInstructionGraph(input) {
   assertExactOnce(units, artifacts);
   const sources = units.map((unit, index) => {
     const config = configs.get(unit.config_id);
-    return sourceForUnit(config, unit, index);
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    const content = output ? applyTransform(config, output, { configs: [config] }) : config.content;
+    return sourceForUnit({ ...config, content }, unit, index);
   });
   const planWithoutHash = {
     schema: INSTRUCTION_GRAPH_PLAN_SCHEMA,
@@ -11722,6 +11814,19 @@ function parseBoundedOrLegacyPage(value, legacyItems, options, label) {
   const page = boundedReadPage(legacyItems.slice(normalized.cursor, normalized.cursor + normalized.limit), legacyItems.length, normalized);
   return { ...page, source_bounded: false };
 }
+function projectBoundedPage(page, project) {
+  return {
+    items: page.items.map(project),
+    total: page.total,
+    limit: page.limit,
+    cursor: page.cursor,
+    next_cursor: page.next_cursor,
+    has_more: page.has_more,
+    complete: page.complete,
+    truncated: page.truncated,
+    source_bounded: page.source_bounded
+  };
+}
 
 class CollectionChangedWhilePagingError extends Error {
   constructor(label, detail) {
@@ -11806,7 +11911,7 @@ function formatCliError(err, env = process.env) {
 var localStoreModulePromise = null;
 function localStoreModule() {
   if (!localStoreModulePromise)
-    localStoreModulePromise = import("./local-zxa5dpf4.js");
+    localStoreModulePromise = import("./local-hc67bynj.js");
   return localStoreModulePromise;
 }
 
@@ -11820,6 +11925,15 @@ class LocalConfigStore {
   async listConfigs(filter) {
     return (await localStoreModule()).listConfigs(filter, this.db);
   }
+  async listConfigsPage(filter = {}, options = {}) {
+    return (await localStoreModule()).listConfigsPage(filter, options, this.db);
+  }
+  async listConfigIdentitiesPage(filter = {}, options = {}) {
+    return (await localStoreModule()).listConfigIdentitiesPage(filter, options, this.db);
+  }
+  async listConfigSummariesPage(filter = {}, options = {}) {
+    return (await localStoreModule()).listConfigSummariesPage(filter, options, this.db);
+  }
   async getConfig(idOrSlug) {
     return (await localStoreModule()).getConfig(idOrSlug, this.db);
   }
@@ -11923,6 +12037,43 @@ class LocalConfigStore {
     (await localStoreModule()).resetLocalDatabase();
   }
 }
+function toConfigIdentity(value) {
+  const record = value && typeof value === "object" ? value : {};
+  return {
+    id: String(record.id ?? ""),
+    name: String(record.name ?? ""),
+    slug: String(record.slug ?? ""),
+    kind: String(record.kind ?? ""),
+    category: String(record.category ?? ""),
+    agent: String(record.agent ?? ""),
+    format: String(record.format ?? ""),
+    is_template: Boolean(record.is_template),
+    version: Number(record.version ?? 0),
+    created_at: String(record.created_at ?? ""),
+    updated_at: String(record.updated_at ?? ""),
+    synced_at: record.synced_at == null ? null : String(record.synced_at)
+  };
+}
+function toConfigSummary(value) {
+  const record = value && typeof value === "object" ? value : {};
+  const outputs = Array.isArray(record.outputs) ? record.outputs : [];
+  return {
+    id: String(record.id ?? ""),
+    slug: String(record.slug ?? ""),
+    name: String(record.name ?? ""),
+    category: String(record.category ?? ""),
+    agent: String(record.agent ?? ""),
+    kind: String(record.kind ?? ""),
+    format: String(record.format ?? ""),
+    target_path: record.target_path == null ? null : String(record.target_path),
+    output_count: Number(record.output_count ?? outputs.length),
+    version: Number(record.version ?? 0),
+    is_template: Boolean(record.is_template),
+    ...record.updated_at !== undefined ? { updated_at: String(record.updated_at) } : {},
+    ...record.description !== undefined ? { description: record.description == null ? null : String(record.description) } : {},
+    ...Array.isArray(record.tags) ? { tags: record.tags.map(String) } : {}
+  };
+}
 
 class CloudConfigStore {
   mode = "api";
@@ -11944,7 +12095,7 @@ class CloudConfigStore {
       throw err;
     }
   }
-  async listConfigsPageRemote(filter, options) {
+  async listConfigsPage(filter = {}, options = {}) {
     const normalized = normalizeBoundedReadOptions(options);
     const params = new URLSearchParams;
     if (filter.category)
@@ -11955,13 +12106,67 @@ class CloudConfigStore {
       params.set("kind", filter.kind);
     if (filter.search)
       params.set("search", filter.search);
+    for (const tag of filter.tags ?? [])
+      params.append("tag", tag);
     params.set("limit", String(normalized.limit));
     params.set("cursor", String(normalized.cursor));
     const { data } = await this.request("GET", `/configs?${params.toString()}`);
     return parseBoundedOrLegacyPage(data, data?.configs, normalized, "config list");
   }
+  async listConfigIdentitiesPage(filter = {}, options = {}) {
+    const normalized = normalizeBoundedReadOptions(options);
+    const params = new URLSearchParams;
+    if (filter.category)
+      params.set("category", filter.category);
+    if (filter.agent)
+      params.set("agent", filter.agent);
+    if (filter.kind)
+      params.set("kind", filter.kind);
+    if (filter.search)
+      params.set("search", filter.search);
+    for (const tag of filter.tags ?? [])
+      params.append("tag", tag);
+    params.set("view", "identity");
+    params.set("limit", String(normalized.limit));
+    params.set("cursor", String(normalized.cursor));
+    const { data } = await this.request("GET", `/configs?${params.toString()}`);
+    const page = parseBoundedOrLegacyPage(data, data?.configs, normalized, "config identity list");
+    if (page.items.some((item) => {
+      const record = item && typeof item === "object" ? item : {};
+      return ["content", "target_path", "outputs", "description", "tags"].some((field) => Object.prototype.hasOwnProperty.call(record, field));
+    })) {
+      throw new Error("Instructions /v1 config identity projection is unavailable; deploy the identity endpoint before using compact lists");
+    }
+    return projectBoundedPage(page, toConfigIdentity);
+  }
+  async listConfigSummariesPage(filter = {}, options = {}) {
+    const normalized = normalizeBoundedReadOptions(options);
+    const params = new URLSearchParams;
+    if (filter.category)
+      params.set("category", filter.category);
+    if (filter.agent)
+      params.set("agent", filter.agent);
+    if (filter.kind)
+      params.set("kind", filter.kind);
+    if (filter.search)
+      params.set("search", filter.search);
+    for (const tag of filter.tags ?? [])
+      params.append("tag", tag);
+    params.set("view", "summary");
+    params.set("limit", String(normalized.limit));
+    params.set("cursor", String(normalized.cursor));
+    const { data } = await this.request("GET", `/configs?${params.toString()}`);
+    const page = parseBoundedOrLegacyPage(data, data?.configs, normalized, "config summary list");
+    if (page.items.some((item) => {
+      const record = item && typeof item === "object" ? item : {};
+      return Object.prototype.hasOwnProperty.call(record, "content") || Object.prototype.hasOwnProperty.call(record, "outputs");
+    })) {
+      throw new Error("Instructions /v1 config summary projection is unavailable; deploy the summary endpoint before using summary lists");
+    }
+    return projectBoundedPage(page, toConfigSummary);
+  }
   async listConfigs(filter = {}) {
-    const configs = await aggregateBoundedCollection("config list", (cursor) => this.listConfigsPageRemote(filter, { limit: 100, cursor }), (config) => config.id, { requireAscendingIdentity: true });
+    const configs = await aggregateBoundedCollection("config list", (cursor) => this.listConfigsPage(filter, { limit: 100, cursor }), (config) => config.id, { requireAscendingIdentity: true });
     let filtered = configs;
     if (filter.tags && filter.tags.length > 0) {
       filtered = filtered.filter((config) => filter.tags.every((tag) => config.tags.includes(tag)));
@@ -11987,7 +12192,9 @@ class CloudConfigStore {
     return data.config;
   }
   async updateConfig(idOrSlug, input) {
-    const { data } = await this.request("PATCH", `/configs/${encodeURIComponent(idOrSlug)}`, input);
+    validateExpectedConfigVersion(input.expected_version);
+    const conditional = input.expected_version !== undefined;
+    const { data } = await this.request(conditional ? "POST" : "PATCH", `/configs/${encodeURIComponent(idOrSlug)}${conditional ? "/conditional-update" : ""}`, input);
     return data.config;
   }
   async deleteConfig(idOrSlug) {
@@ -12027,7 +12234,7 @@ class CloudConfigStore {
     return data?.pruned ?? 0;
   }
   async listProfiles() {
-    return aggregateBoundedCollection("profile list", (cursor) => this.listProfilesPage({ limit: 100, cursor }), (profile) => profile.id, { requireAscendingIdentity: true });
+    return aggregateBoundedCollection("profile list", (cursor) => this.listProfilesPage({ limit: 100, cursor }), (profile) => profile.id);
   }
   async listProfilesPage(options = {}) {
     const normalized = normalizeBoundedReadOptions(options);
@@ -12064,7 +12271,7 @@ class CloudConfigStore {
       throw new ProfileNotFoundError(idOrSlug);
     return parseBoundedOrLegacyPage(data.configs, data.profile.configs, normalized, "profile membership");
   }
-  async getProfileConfigBindings(idOrSlug) {
+  async getProfileConfigBindings(idOrSlug, options = {}) {
     let routeMissing = false;
     const bindings = await aggregateBoundedCollection("profile config bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -12077,6 +12284,8 @@ class CloudConfigStore {
     }, (binding) => `${binding.profile_id}\x00${binding.config_id}`);
     if (!routeMissing)
       return bindings;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_BINDINGS_REQUIRED: profile config binding route is unavailable; refusing legacy activation fallback.");
     const profile = await this.getProfile(idOrSlug);
     const configs = await this.getProfileConfigs(idOrSlug);
     return configs.map((config, sort_order) => ({
@@ -12141,7 +12350,7 @@ class CloudConfigStore {
   async removeConfigFromProfile(profileIdOrSlug, configId) {
     await this.request("DELETE", `/profiles/${encodeURIComponent(profileIdOrSlug)}/configs/${encodeURIComponent(configId)}`, undefined, { allow404: true });
   }
-  async getProfileAssetBindings(profileIdOrSlug) {
+  async getProfileAssetBindings(profileIdOrSlug, options = {}) {
     let routeMissing = false;
     const assets = await aggregateBoundedCollection("profile asset bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -12154,6 +12363,8 @@ class CloudConfigStore {
     }, (asset) => `${asset.profile_id}\x00${asset.binding.assetKey}`);
     if (!routeMissing)
       return assets;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_ASSETS_REQUIRED: profile asset binding route is unavailable; refusing an empty asset fallback.");
     await this.getProfile(profileIdOrSlug);
     return [];
   }
@@ -12467,9 +12678,13 @@ async function ensureGlobalAgentRulesStandardConfig(store = resolveConfigStore()
   let existing;
   try {
     existing = await store.getConfig(GLOBAL_AGENT_RULES_STANDARD_SLUG);
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     return await store.createConfig(standardConfigInput(resolveAgentOperatingRulesPayload(null)));
   }
+  if (isRetiredInstructionSource(existing))
+    return existing;
   const payload = resolveAgentOperatingRulesPayload(existing.content);
   const input = standardConfigInput(payload);
   if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
@@ -12575,4 +12790,4 @@ function renderMachineAwareContentPreview(content, variables) {
   return isTemplate(content) ? renderTemplatePreview(content, variables) : { content, unresolved: [] };
 }
 
-export { DEFAULT_LIST_LIMIT, parseLimit, paginate, truncateText, truncateMiddle, normalizeBoundedReadOptions, boundedReadPage, ensureGlobalAgentRulesStandardConfig, ensureCodewithSharedTodosStorageStandardConfig, redactFormatForTarget, redactContent, scanSecrets, isSecretVarName, SESSION_RENDER_MANAGED_MARKER, SESSION_RENDER_SCHEMA, SESSION_RENDER_MANIFEST_RELATIVE_PATH, SESSION_INSTRUCTION_LAYERS, getSessionRenderSnapshotDir, sessionRenderSnapshotWorkspaceRoot, PROJECT_CONTEXT_MAX_INPUT_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, ProjectContextError, parseProjectContextBundle, planProjectContext, observeProjectContextSessionGuard, withProjectContextSessionGuard, applyProjectContext, writeProjectContextCoordinatedFile, removeProjectContextCoordinatedFile, isRetiredOrUnsupportedConfigAgent, retiredOrUnsupportedAgentReason, applyTransform, normalizeProfileAssetBinding, observeCursorGlobalAuthorityAtPath, isCursorGlobalAuthorityPath, stampCursorGlobalAuthorityMarker, detectCursorAuthorityConflicts, detectClaudeAuthorityConflicts, ANTIGRAVITY_RULE_FILE_CHAR_LIMIT, SESSION_RENDERER_OWNER_ID, SESSION_RENDER_TOOLS, SESSION_RENDER_OWNED_CONFIG_TARGETS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, normalizeSessionInstructionSourceId, resolveSessionPath, planSessionRender, sourceFromFilePath, sourceFromConfig, sourcesFromIdentityExport, legacyProfileConfigBinding, normalizeProfileConfigBinding, planProfileSessionRender, normalizeOsFamily, detectMachineContext, machineContextToVariables, resolveProfileVariables, templateizeMachineContent, renderMachineAwareContentPreview, formatCliError, CloudConfigStore, resolveConfigStore };
+export { DEFAULT_LIST_LIMIT, parseLimit, paginate, truncateText, truncateMiddle, normalizeBoundedReadOptions, boundedReadPage, isRetiredInstructionSource, instructionSourceRejection, assertInstructionSource, ensureGlobalAgentRulesStandardConfig, ensureCodewithSharedTodosStorageStandardConfig, exports_external, redactFormatForTarget, redactContent, scanSecrets, isSecretVarName, CODEWITH_NATIVE_IMPORTS_ENV, SESSION_RENDER_MANAGED_MARKER, SESSION_RENDER_SCHEMA, SESSION_RENDER_MANIFEST_RELATIVE_PATH, SESSION_INSTRUCTION_LAYERS, getSessionRenderSnapshotDir, sessionRenderSnapshotWorkspaceRoot, PROJECT_CONTEXT_MAX_INPUT_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, ProjectContextError, parseProjectContextBundle, planProjectContext, observeProjectContextSessionGuard, withProjectContextSessionGuard, applyProjectContext, writeProjectContextCoordinatedFile, removeProjectContextCoordinatedFile, isRetiredOrUnsupportedConfigAgent, retiredOrUnsupportedAgentReason, applyTransform, normalizeProfileAssetBinding, observeCursorGlobalAuthorityAtPath, isCursorGlobalAuthorityPath, stampCursorGlobalAuthorityMarker, detectCursorAuthorityConflicts, detectClaudeAuthorityConflicts, ANTIGRAVITY_RULE_FILE_CHAR_LIMIT, SESSION_RENDERER_OWNER_ID, SESSION_RENDER_TOOLS, SESSION_RENDER_OWNED_CONFIG_TARGETS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, normalizeSessionInstructionSourceId, resolveSessionPath, planSessionRender, sourceFromFilePath, sourceFromConfig, sourcesFromIdentityExport, legacyProfileConfigBinding, normalizeProfileConfigBinding, planProfileSessionRender, normalizeOsFamily, detectMachineContext, machineContextToVariables, resolveProfileVariables, templateizeMachineContent, renderMachineAwareContentPreview, formatCliError, CloudConfigStore, resolveConfigStore };