@hasna/instructions 0.7.1 → 0.7.2

package/README.md

@@ -83,6 +83,24 @@ envelope. Its top-level fields are `configs`, `profiles`, `drift`, `secrets`,
 `secrets.policy` is `redacted_on_ingest`. Run `instructions report` without
 `--json` for the human-readable report.
 
+### Conditional config updates
+
+Read the current config version before preparing an edit, then pass that
+`expected_version` to `updateConfig` (store/public SDK), `update_config` (MCP), or:
+
+```bash
+instructions add ./rule.md --kind reference --name example-rule --update --expected-version 7
+```
+
+Guarded clients use `POST /v1/configs/:id/conditional-update`, which requires
+`expected_version`. The generated SDK also exposes `conditionalUpdateConfig` for
+this operation. An older server returns 404 without mutation; clients never fall
+back to an unconditional update. A version mismatch returns HTTP 409 with code
+`CONFIG_VERSION_CONFLICT`, changing neither the config nor its snapshots. Refresh
+and review the newer version before trying again. Calls without a precondition
+retain their existing behavior. New servers also accept `expected_version` on
+PATCH/PUT; use the dedicated conditional route when server capabilities are unknown.
+
 ## Package-Manager Secret Guard
 
 `instructions package-manager-scan` blocks package-manager credential ingress without
@@ -361,13 +379,20 @@ upgrade.
 
 `instructions session plan` and `instructions session apply` render
 OpenIdentities and instruction sources into provider-native files for Claude,
-Codex, Cursor, OpenCode, Codewith, Qwen, aicopilot, and Google Antigravity.
+Codex, Cursor, OpenCode, Sumi, Codewith, Qwen, aicopilot, and Google Antigravity.
 The old Google agent target is removed; Antigravity is the only Google coding
 agent render target. Antigravity workspace rules are rendered to
 `.agents/rules/*.md`; its current global rules and MCP files use Google's
 legacy-named `~/.gemini/GEMINI.md` and `~/.gemini/config/mcp_config.json`
 paths but remain owned by the `antigravity` target.
 
+Sumi renders one flattened `AGENTS.md`. Pass its actual config directory from
+`sumi debug paths config` as `--target-home`, or use `--project-root` for
+repository instructions. Global plans return `SUMI_CONFIG_DIR`; project plans
+do not change the global config environment. No OpenCode config or fragment
+imports are written. See [session rendering](docs/session-rendering.md) for
+capability limits and examples.
+
 Qwen Code session rendering writes `QWEN.md` instructional context with
 `QWEN_HOME` pointing at the rendered profile home. Known config sync also
 tracks Qwen Code `QWEN.md` and `settings.json` files at `~/.qwen/...` and
@@ -536,14 +561,16 @@ and prior on-box-only evidence must be explicitly reconciled before use.
 
 ## Machine-aware Profiles
 
-`instructions init` seeds two platform profiles:
+`instructions init` seeds two empty platform profiles:
 
-- `linux-arm64` for `linux-node-a` / `linux-node-b`
-- `macos-arm64` for `macos-node-a` / `macos-node-b`
+- `linux-arm64` for Linux arm64
+- `macos-arm64` for macOS arm64
 
-These profiles resolve machine variables like `{{WORKSPACE_ROOT}}`,
-`{{BUN_BIN_DIR}}`, `{{BUN_PATH}}`, and `{{PATH_PREFIX}}`, so synced configs can be
-portable across Linux and macOS arm64 machines.
+The public presets contain no fleet hostnames or workspace paths. They resolve
+portable tool variables such as `{{BUN_BIN_DIR}}`, `{{BUN_PATH}}`, and
+`{{PATH_PREFIX}}`. Instruction membership is never bulk-copied from the config
+registry; bind reviewed provider/project/role sources explicitly before compiling
+a prompt profile.
 
 They also include the project channel variable used by agent-managed project
 workflows:

package/dist/chunks/{apply-c3sd4agz.js → apply-ps6jjt6k.js}

@@ -8,10 +8,10 @@ import {
   getConfigHome,
   normalizeTargetPath,
   previewConfigs
-} from "./index-ypcef3a2.js";
-import"./index-aj66f6xr.js";
+} from "./index-ape24zc0.js";
+import"./index-pq18fdbj.js";
 import"./index-35z65jsa.js";
-import"./index-3djthcm6.js";
+import"./index-27az1qb1.js";
 import"./index-nnwp92tk.js";
 export {
   previewConfigs,

package/dist/chunks/{apply-pnn7a3y7.js → apply-wj7wh5km.js}

@@ -8,9 +8,9 @@ import {
   getConfigHome,
   normalizeTargetPath,
   previewConfigs
-} from "./index-r7nfef2g.js";
-import"./index-6jncnnw7.js";
-import"./index-n3fjspr0.js";
+} from "./index-y8410ve0.js";
+import"./index-n6nh6f5r.js";
+import"./index-preyvj8n.js";
 import"./index-fpeyzn3n.js";
 import"./index-bsan4c16.js";
 export {

package/dist/chunks/{index-pdpg8a44.js → index-18j7x3xw.js}

@@ -5,7 +5,7 @@ import {
   expandPath,
   getConfigHome,
   normalizeTargetPath
-} from "./index-r7nfef2g.js";
+} from "./index-y8410ve0.js";
 import {
   applyTransform,
   detectMachineContext,
@@ -16,7 +16,7 @@ import {
   resolveConfigStore,
   retiredOrUnsupportedAgentReason,
   templateizeMachineContent
-} from "./index-6jncnnw7.js";
+} from "./index-n6nh6f5r.js";
 
 // src/lib/sync.ts
 import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync2 } from "fs";

package/dist/chunks/{index-3djthcm6.js → index-27az1qb1.js}

@@ -4,6 +4,7 @@ var CONFIG_AGENTS = [
   "claude",
   "codex",
   "opencode",
+  "sumi",
   "cursor",
   "codewith",
   "aicopilot",
@@ -28,6 +29,32 @@ var ASSET_DESTINATION_STRATEGIES = ["emit-file", "install-local", "install-marke
 var ASSET_SCOPES = ["global", "project", "session"];
 var ASSET_UNINSTALL_POLICIES = ["remove-managed", "retain"];
 var ASSET_ROLLBACK_POLICIES = ["snapshot", "installer-receipt", "none"];
+class InvalidExpectedVersionError extends Error {
+  code = "INVALID_EXPECTED_VERSION";
+  constructor() {
+    super("expected_version must be a positive safe integer");
+    this.name = "InvalidExpectedVersionError";
+  }
+}
+function validateExpectedConfigVersion(value) {
+  if (value !== undefined && (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)) {
+    throw new InvalidExpectedVersionError;
+  }
+}
+
+class ConfigVersionConflictError extends Error {
+  config_id;
+  expected_version;
+  code = "CONFIG_VERSION_CONFLICT";
+  status = 409;
+  constructor(config_id, expected_version) {
+    super(`Config version conflict: ${config_id} no longer has expected version ${expected_version}`);
+    this.config_id = config_id;
+    this.expected_version = expected_version;
+    this.name = "ConfigVersionConflictError";
+  }
+}
+
 class ConfigNotFoundError extends Error {
   constructor(id) {
     super(`Config not found: ${id}`);
@@ -114,4 +141,4 @@ function isTemplate(content) {
   return VAR_PATTERN.test(content);
 }
 
-export { CONFIG_AGENTS, PROFILE_CONFIG_BINDING_SCHEMA, INSTRUCTION_ACTIVATION_MODES, INSTRUCTION_FALLBACKS, PROFILE_ASSET_BINDING_SCHEMA, ASSET_KINDS, ASSET_DESTINATION_STRATEGIES, ASSET_SCOPES, ASSET_UNINSTALL_POLICIES, ASSET_ROLLBACK_POLICIES, ConfigNotFoundError, ProfileNotFoundError, ConfigApplyError, parseTemplateVars, extractTemplateVars, renderTemplate, renderTemplatePreview, isTemplate };
+export { CONFIG_AGENTS, PROFILE_CONFIG_BINDING_SCHEMA, INSTRUCTION_ACTIVATION_MODES, INSTRUCTION_FALLBACKS, PROFILE_ASSET_BINDING_SCHEMA, ASSET_KINDS, ASSET_DESTINATION_STRATEGIES, ASSET_SCOPES, ASSET_UNINSTALL_POLICIES, ASSET_ROLLBACK_POLICIES, validateExpectedConfigVersion, ConfigVersionConflictError, ConfigNotFoundError, ProfileNotFoundError, ConfigApplyError, parseTemplateVars, extractTemplateVars, renderTemplate, renderTemplatePreview, isTemplate };

package/dist/chunks/{index-ypcef3a2.js → index-ape24zc0.js}

@@ -15,7 +15,7 @@ import {
   resolveConfigStore,
   resolveProfileVariables,
   stampCursorGlobalAuthorityMarker
-} from "./index-aj66f6xr.js";
+} from "./index-pq18fdbj.js";
 import {
   isSecretVarName,
   redactFormatForTarget,
@@ -24,7 +24,7 @@ import {
 import {
   ConfigApplyError,
   parseTemplateVars
-} from "./index-3djthcm6.js";
+} from "./index-27az1qb1.js";
 
 // src/lib/apply.ts
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, realpathSync, writeFileSync } from "fs";

package/dist/chunks/{index-jg8ptcwh.js → index-ek15201v.js}

@@ -5,7 +5,7 @@ import {
   expandPath,
   getConfigHome,
   normalizeTargetPath
-} from "./index-ypcef3a2.js";
+} from "./index-ape24zc0.js";
 import {
   applyTransform,
   detectMachineContext,
@@ -13,7 +13,7 @@ import {
   resolveConfigStore,
   retiredOrUnsupportedAgentReason,
   templateizeMachineContent
-} from "./index-aj66f6xr.js";
+} from "./index-pq18fdbj.js";
 import {
   isSecretVarName,
   redactContent,

package/dist/chunks/{index-6jncnnw7.js → index-n6nh6f5r.js}

@@ -14,8 +14,9 @@ import {
   ProfileNotFoundError,
   isTemplate,
   renderTemplate,
-  renderTemplatePreview
-} from "./index-n3fjspr0.js";
+  renderTemplatePreview,
+  validateExpectedConfigVersion
+} from "./index-preyvj8n.js";
 import {
   INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS,
   clientTransportEnvKeys,
@@ -77,6 +78,36 @@ function truncateMiddle(value, max = 80) {
   return `${text.slice(0, head)}...${text.slice(text.length - tail)}`;
 }
 
+// src/lib/instruction-source-policy.ts
+function isRetiredInstructionSource(config) {
+  return config.tags.some((tag) => tag === "retired-global-source" || tag === "retired-instruction-source");
+}
+function instructionSourceRejection(config) {
+  if (isRetiredInstructionSource(config) || config.tags.includes("config-only")) {
+    return "source is retired or explicitly configuration-only";
+  }
+  if (config.category !== "rules")
+    return `category ${config.category} is not an instruction source; classify reviewed prose as rules`;
+  if (config.format !== "markdown" && config.format !== "text")
+    return `format ${config.format} is not instruction prose`;
+  if (config.is_template)
+    return "unresolved templates must be rendered and reviewed before prompt injection";
+  if (!config.content.trim())
+    return "instruction source is empty";
+  if (config.content.includes("\x00"))
+    return "instruction source contains binary content";
+  const target = config.target_path?.split(/[\\/]/).pop() ?? "";
+  if (/\.(?:json|toml|yaml|yml|ini|sh|bash|zsh|fish|js|ts|py|rules)$/i.test(target)) {
+    return "target is an executable, provider policy, or settings file rather than a prompt";
+  }
+  return null;
+}
+function assertInstructionSource(config) {
+  const rejection = instructionSourceRejection(config);
+  if (rejection)
+    throw new Error(`Cannot inject ${config.slug}: ${rejection}.`);
+}
+
 // src/lib/global-agent-rules-standard.ts
 import { createHash as createHash7 } from "crypto";
 
@@ -186,17 +217,18 @@ async function ensureCodewithSharedTodosStorageStandardConfig(store = resolveCon
   let config;
   try {
     const existing = await store.getConfig(CODEWITH_SHARED_TODOS_STORAGE_STANDARD_SLUG);
+    if (isRetiredInstructionSource(existing))
+      return existing;
     if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
       config = await store.updateConfig(existing.id, input);
     } else {
       config = existing;
     }
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     config = await store.createConfig(input);
   }
-  for (const profile of await store.listProfiles()) {
-    await store.addConfigToProfile(profile.id, config.id);
-  }
   return config;
 }
 
@@ -7373,6 +7405,9 @@ function buildCodexAgentsMd(source, context = {}) {
 function buildOpenCodeAgentsMd(source, context = {}) {
   return flattenWithRules(source, context);
 }
+function buildSumiAgentsMd(source, context = {}) {
+  return flattenWithRules(source, context);
+}
 function buildCursorMdc(source) {
   const stem = source.target_path ? basename2(source.target_path, extname(source.target_path)) : source.slug;
   const description = source.name || stem;
@@ -7401,6 +7436,8 @@ function applyTransform(source, output, context = {}) {
       return buildCodexAgentsMd(source, context);
     case "opencode-flat":
       return buildOpenCodeAgentsMd(source, context);
+    case "sumi-flat":
+      return buildSumiAgentsMd(source, context);
     case "cursor-mdc":
       return buildCursorMdc(source);
     case "skill-neutral":
@@ -7515,6 +7552,7 @@ var DEFAULT_ASSET_SURFACES = Object.freeze({
   codex: "cli",
   cursor: "ide",
   opencode: "cli",
+  sumi: "cli",
   codewith: "cli",
   qwen: "cli",
   aicopilot: "cli",
@@ -8178,6 +8216,7 @@ var SESSION_RENDER_TOOLS = [
   "codex",
   "cursor",
   "opencode",
+  "sumi",
   "codewith",
   "qwen",
   "aicopilot",
@@ -8266,6 +8305,15 @@ var SESSION_TOOL_ADAPTERS = {
     description: "OpenCode AGENTS.md plus opencode.json instructions pointing at managed fragments.",
     providerSurface: "legacy-dual"
   },
+  sumi: {
+    tool: "sumi",
+    mode: "flattened-markdown",
+    indexFile: "AGENTS.md",
+    managedDir: SESSION_RENDER_INSTRUCTIONS_MANAGED_DIR,
+    envVar: "SUMI_CONFIG_DIR",
+    nativeImports: false,
+    description: "Sumi native AGENTS.md in the explicit resolved config directory or project root."
+  },
   aicopilot: {
     tool: "aicopilot",
     mode: "flattened-markdown",
@@ -8550,9 +8598,19 @@ function skippedSource(source, reason) {
   };
 }
 function normalizeSources(sources, tool, allowEmptySources) {
-  const normalized = sources.map((source, index) => {
+  const providerSkipped = [];
+  const normalized = sources.flatMap((source, index) => {
     if (!source.id.trim())
       throw new Error("Session instruction source id is required.");
+    if (source.targetProviders?.length && !providerTargetsTool(source.targetProviders, tool)) {
+      providerSkipped.push({
+        id: source.id,
+        label: source.label ?? source.id,
+        targetProviders: source.targetProviders,
+        reason: "instruction source targets a different provider"
+      });
+      return [];
+    }
     const floored = applyAgentOperatingRulesFloor(source, source.content ?? "");
     const content = filterProviderOnlyBlocks(floored.content, tool);
     const normalized2 = {
@@ -8571,7 +8629,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
     if (!allowEmptySources && !normalized2.content.trim() && normalized2.resolvedRules.length === 0 && !hasPathReferences) {
       throw new Error(`Session instruction source "${source.id}" is empty. Pass --allow-empty-sources only for explicit empty renders.`);
     }
-    return normalized2;
+    return [normalized2];
   });
   const originalOrder = [...normalized].sort(compareSessionInstructionSources);
   const deduplicated = deduplicateSemanticPolicySources(normalized);
@@ -8579,7 +8637,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
   validateTargetedReplacementSources(originalOrder, ordered, deduplicated.skipped, tool);
   rejectDuplicateSourceSlugs(ordered);
   rejectDuplicateRulePaths(ordered);
-  return { sources: ordered, skipped: deduplicated.skipped };
+  return { sources: ordered, skipped: [...providerSkipped, ...deduplicated.skipped] };
 }
 function compareSessionInstructionSources(a, b) {
   return SESSION_LAYER_RANK[a.resolvedLayer] - SESSION_LAYER_RANK[b.resolvedLayer] || a.resolvedOrder - b.resolvedOrder || a.id.localeCompare(b.id);
@@ -9185,6 +9243,11 @@ function isNativeProfileSessionTarget(input) {
   return (input.tool === "grok" || input.tool === "devin") && Boolean(input.targetHome?.trim()) && !input.projectRoot;
 }
 function adapterFor(input) {
+  if (input.tool === "sumi" && input.projectRoot) {
+    if (input.providerSurface)
+      throw new Error(`Provider surface ${input.providerSurface} is not valid for Sumi.`);
+    return Object.freeze({ ...SESSION_TOOL_ADAPTERS.sumi, projectScoped: true, envVar: undefined });
+  }
   if (input.tool === "opencode" && input.providerSurface) {
     if (input.providerSurface !== "opencode-config-instructions" && input.providerSurface !== "opencode-agents-md") {
       throw new Error(`Provider surface ${input.providerSurface} is not valid for OpenCode.`);
@@ -9226,7 +9289,7 @@ function adapterFor(input) {
   }
   if (input.tool !== "codewith")
     return SESSION_TOOL_ADAPTERS[input.tool];
-  const gatedNativeImports = input.codewithNativeImports === true || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true";
+  const gatedNativeImports = input.codewithNativeImports ?? (process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true");
   return gatedNativeImports ? CODEWITH_NATIVE_ADAPTER : CODEWITH_FLATTENED_ADAPTER;
 }
 function getHomeDir() {
@@ -9277,6 +9340,13 @@ function assertSafeTargetRoot(targetHome) {
   return normalized;
 }
 function resolveRenderTarget(input, adapter) {
+  if (input.tool === "sumi" && !input.projectRoot && !input.targetHome?.trim()) {
+    return {
+      targetHome: defaultTargetHome(input.tool, input.profile, input.sessionId),
+      targetKind: "blocked",
+      blockers: ["Sumi requires --target-home from `sumi debug paths config`, or --project-root for repository AGENTS.md."]
+    };
+  }
   if (adapter.projectScoped) {
     if (!input.projectRoot) {
       const label = input.tool === "cursor" ? "Cursor rules" : input.tool === "antigravity" ? "Antigravity rules" : `${adapter.description.split(".")[0]} files`;
@@ -9378,6 +9448,14 @@ function planSessionRender(input) {
   const normalized = normalizeSources(input.sources, input.tool, allowEmptySources);
   const composed = composeSources(normalized.sources, input.tool);
   const orderedSources = composed.sources;
+  if (input.tool === "sumi") {
+    for (const source of orderedSources) {
+      const activation = source.metadata?.["activation"];
+      if (source.globs?.length || source.resolvedRules.some((rule) => rule.globs?.length) || activation?.mode && activation.mode !== "always") {
+        throw new Error(`Sumi AGENTS.md cannot preserve conditional activation for source ${source.id}; compile a profile with an explicit supported fallback.`);
+      }
+    }
+  }
   const skippedSources = [
     ...input.skippedSources ?? [],
     ...normalized.skipped,
@@ -9421,6 +9499,7 @@ function planSessionRender(input) {
     adapterMode: adapter.mode,
     profile: input.profile,
     sessionId: input.sessionId ?? null,
+    ...input.refreshSelector ? { refreshSelector: input.refreshSelector } : {},
     targetHome,
     targetKind,
     targetOwner,
@@ -9933,6 +10012,7 @@ var DEFAULT_PROVIDER_CAPABILITIES = Object.freeze({
   codex: capability("codex", ">=0.1.0", "flattened", "AGENTS.md", { asset_surface: "cli" }),
   cursor: capability("cursor", ">=1.0.0", "cursor-rule", ".cursor/rules/*.mdc", { activation_modes: ["always", "glob"], conditional_artifacts: true, asset_surface: "ide" }),
   opencode: capability("opencode", ">=1.0.0", "managed-fragment", "opencode.json instructions", { provider_variant: "v1-instructions", session_surface: "opencode-config-instructions" }),
+  sumi: capability("sumi", ">=0.2.22 <0.3.0", "flattened", "AGENTS.md"),
   codewith: capability("codewith", ">=0.1.0", "flattened", "CODEWITH.md"),
   qwen: capability("qwen", ">=0.1.0", "flattened", "QWEN.md"),
   aicopilot: capability("aicopilot", ">=0.1.0", "flattened", "AICOPILOT.md"),
@@ -10155,12 +10235,22 @@ function compileInstructionGraph(input) {
     const selector = binding.providers?.find((entry) => entry.provider === input.context.provider || entry.provider === "global");
     if (binding.providers?.length && !selector)
       continue;
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    if (!binding.providers?.length && config.agent !== "global" && config.agent !== input.context.provider && !output) {
+      diagnostics.push({ severity: "info", code: "SOURCE_PROVIDER_NOT_SELECTED", config_id: configId, message: `${config.slug} targets ${config.agent}, not ${input.context.provider}.` });
+      continue;
+    }
     if (selector?.version_range && !providerVersionSatisfies(input.context.provider_version, selector.version_range)) {
       diagnostics.push({ severity: binding.required ? "error" : "warning", code: "PROVIDER_SELECTOR_VERSION_MISMATCH", config_id: configId, message: `${config.slug} requires ${input.context.provider} ${selector.version_range}; current version is ${input.context.provider_version}.` });
       continue;
     }
     if (!activationMatches(binding.activation, config, input.context))
       continue;
+    const rejection = instructionSourceRejection(config);
+    if (rejection) {
+      diagnostics.push({ severity: !binding.required && binding.fallback === "omit" ? "warning" : "error", code: "SOURCE_NOT_INSTRUCTION", config_id: configId, message: `${config.slug}: ${rejection}.` });
+      continue;
+    }
     if (capability2.activation_modes.includes(binding.activation.mode)) {
       selected.add(configId);
       effective.set(configId, binding.activation);
@@ -10235,7 +10325,9 @@ function compileInstructionGraph(input) {
   assertExactOnce(units, artifacts);
   const sources = units.map((unit, index) => {
     const config = configs.get(unit.config_id);
-    return sourceForUnit(config, unit, index);
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    const content = output ? applyTransform(config, output, { configs: [config] }) : config.content;
+    return sourceForUnit({ ...config, content }, unit, index);
   });
   const planWithoutHash = {
     schema: INSTRUCTION_GRAPH_PLAN_SCHEMA,
@@ -11819,7 +11911,7 @@ function formatCliError(err, env = process.env) {
 var localStoreModulePromise = null;
 function localStoreModule() {
   if (!localStoreModulePromise)
-    localStoreModulePromise = import("./local-969ye538.js");
+    localStoreModulePromise = import("./local-hc67bynj.js");
   return localStoreModulePromise;
 }
 
@@ -12100,7 +12192,9 @@ class CloudConfigStore {
     return data.config;
   }
   async updateConfig(idOrSlug, input) {
-    const { data } = await this.request("PATCH", `/configs/${encodeURIComponent(idOrSlug)}`, input);
+    validateExpectedConfigVersion(input.expected_version);
+    const conditional = input.expected_version !== undefined;
+    const { data } = await this.request(conditional ? "POST" : "PATCH", `/configs/${encodeURIComponent(idOrSlug)}${conditional ? "/conditional-update" : ""}`, input);
     return data.config;
   }
   async deleteConfig(idOrSlug) {
@@ -12177,7 +12271,7 @@ class CloudConfigStore {
       throw new ProfileNotFoundError(idOrSlug);
     return parseBoundedOrLegacyPage(data.configs, data.profile.configs, normalized, "profile membership");
   }
-  async getProfileConfigBindings(idOrSlug) {
+  async getProfileConfigBindings(idOrSlug, options = {}) {
     let routeMissing = false;
     const bindings = await aggregateBoundedCollection("profile config bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -12190,6 +12284,8 @@ class CloudConfigStore {
     }, (binding) => `${binding.profile_id}\x00${binding.config_id}`);
     if (!routeMissing)
       return bindings;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_BINDINGS_REQUIRED: profile config binding route is unavailable; refusing legacy activation fallback.");
     const profile = await this.getProfile(idOrSlug);
     const configs = await this.getProfileConfigs(idOrSlug);
     return configs.map((config, sort_order) => ({
@@ -12254,7 +12350,7 @@ class CloudConfigStore {
   async removeConfigFromProfile(profileIdOrSlug, configId) {
     await this.request("DELETE", `/profiles/${encodeURIComponent(profileIdOrSlug)}/configs/${encodeURIComponent(configId)}`, undefined, { allow404: true });
   }
-  async getProfileAssetBindings(profileIdOrSlug) {
+  async getProfileAssetBindings(profileIdOrSlug, options = {}) {
     let routeMissing = false;
     const assets = await aggregateBoundedCollection("profile asset bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -12267,6 +12363,8 @@ class CloudConfigStore {
     }, (asset) => `${asset.profile_id}\x00${asset.binding.assetKey}`);
     if (!routeMissing)
       return assets;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_ASSETS_REQUIRED: profile asset binding route is unavailable; refusing an empty asset fallback.");
     await this.getProfile(profileIdOrSlug);
     return [];
   }
@@ -12580,9 +12678,13 @@ async function ensureGlobalAgentRulesStandardConfig(store = resolveConfigStore()
   let existing;
   try {
     existing = await store.getConfig(GLOBAL_AGENT_RULES_STANDARD_SLUG);
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     return await store.createConfig(standardConfigInput(resolveAgentOperatingRulesPayload(null)));
   }
+  if (isRetiredInstructionSource(existing))
+    return existing;
   const payload = resolveAgentOperatingRulesPayload(existing.content);
   const input = standardConfigInput(payload);
   if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
@@ -12688,4 +12790,4 @@ function renderMachineAwareContentPreview(content, variables) {
   return isTemplate(content) ? renderTemplatePreview(content, variables) : { content, unresolved: [] };
 }
 
-export { DEFAULT_LIST_LIMIT, parseLimit, paginate, truncateText, truncateMiddle, normalizeBoundedReadOptions, boundedReadPage, ensureGlobalAgentRulesStandardConfig, ensureCodewithSharedTodosStorageStandardConfig, redactFormatForTarget, redactContent, scanSecrets, isSecretVarName, SESSION_RENDER_MANAGED_MARKER, SESSION_RENDER_SCHEMA, SESSION_RENDER_MANIFEST_RELATIVE_PATH, SESSION_INSTRUCTION_LAYERS, getSessionRenderSnapshotDir, sessionRenderSnapshotWorkspaceRoot, PROJECT_CONTEXT_MAX_INPUT_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, ProjectContextError, parseProjectContextBundle, planProjectContext, observeProjectContextSessionGuard, withProjectContextSessionGuard, applyProjectContext, writeProjectContextCoordinatedFile, removeProjectContextCoordinatedFile, isRetiredOrUnsupportedConfigAgent, retiredOrUnsupportedAgentReason, applyTransform, normalizeProfileAssetBinding, observeCursorGlobalAuthorityAtPath, isCursorGlobalAuthorityPath, stampCursorGlobalAuthorityMarker, detectCursorAuthorityConflicts, detectClaudeAuthorityConflicts, ANTIGRAVITY_RULE_FILE_CHAR_LIMIT, SESSION_RENDERER_OWNER_ID, SESSION_RENDER_TOOLS, SESSION_RENDER_OWNED_CONFIG_TARGETS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, normalizeSessionInstructionSourceId, resolveSessionPath, planSessionRender, sourceFromFilePath, sourceFromConfig, sourcesFromIdentityExport, legacyProfileConfigBinding, normalizeProfileConfigBinding, planProfileSessionRender, normalizeOsFamily, detectMachineContext, machineContextToVariables, resolveProfileVariables, templateizeMachineContent, renderMachineAwareContentPreview, formatCliError, CloudConfigStore, resolveConfigStore };
+export { DEFAULT_LIST_LIMIT, parseLimit, paginate, truncateText, truncateMiddle, normalizeBoundedReadOptions, boundedReadPage, isRetiredInstructionSource, instructionSourceRejection, assertInstructionSource, ensureGlobalAgentRulesStandardConfig, ensureCodewithSharedTodosStorageStandardConfig, exports_external, redactFormatForTarget, redactContent, scanSecrets, isSecretVarName, CODEWITH_NATIVE_IMPORTS_ENV, SESSION_RENDER_MANAGED_MARKER, SESSION_RENDER_SCHEMA, SESSION_RENDER_MANIFEST_RELATIVE_PATH, SESSION_INSTRUCTION_LAYERS, getSessionRenderSnapshotDir, sessionRenderSnapshotWorkspaceRoot, PROJECT_CONTEXT_MAX_INPUT_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, ProjectContextError, parseProjectContextBundle, planProjectContext, observeProjectContextSessionGuard, withProjectContextSessionGuard, applyProjectContext, writeProjectContextCoordinatedFile, removeProjectContextCoordinatedFile, isRetiredOrUnsupportedConfigAgent, retiredOrUnsupportedAgentReason, applyTransform, normalizeProfileAssetBinding, observeCursorGlobalAuthorityAtPath, isCursorGlobalAuthorityPath, stampCursorGlobalAuthorityMarker, detectCursorAuthorityConflicts, detectClaudeAuthorityConflicts, ANTIGRAVITY_RULE_FILE_CHAR_LIMIT, SESSION_RENDERER_OWNER_ID, SESSION_RENDER_TOOLS, SESSION_RENDER_OWNED_CONFIG_TARGETS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, normalizeSessionInstructionSourceId, resolveSessionPath, planSessionRender, sourceFromFilePath, sourceFromConfig, sourcesFromIdentityExport, legacyProfileConfigBinding, normalizeProfileConfigBinding, planProfileSessionRender, normalizeOsFamily, detectMachineContext, machineContextToVariables, resolveProfileVariables, templateizeMachineContent, renderMachineAwareContentPreview, formatCliError, CloudConfigStore, resolveConfigStore };

package/dist/chunks/{index-aj66f6xr.js → index-pq18fdbj.js}

@@ -14,8 +14,9 @@ import {
   ProfileNotFoundError,
   isTemplate,
   renderTemplate,
-  renderTemplatePreview
-} from "./index-3djthcm6.js";
+  renderTemplatePreview,
+  validateExpectedConfigVersion
+} from "./index-27az1qb1.js";
 import {
   __export,
   __require
@@ -114,6 +115,9 @@ function buildCodexAgentsMd(source, context = {}) {
 function buildOpenCodeAgentsMd(source, context = {}) {
   return flattenWithRules(source, context);
 }
+function buildSumiAgentsMd(source, context = {}) {
+  return flattenWithRules(source, context);
+}
 function buildCursorMdc(source) {
   const stem = source.target_path ? basename(source.target_path, extname(source.target_path)) : source.slug;
   const description = source.name || stem;
@@ -142,6 +146,8 @@ function applyTransform(source, output, context = {}) {
       return buildCodexAgentsMd(source, context);
     case "opencode-flat":
       return buildOpenCodeAgentsMd(source, context);
+    case "sumi-flat":
+      return buildSumiAgentsMd(source, context);
     case "cursor-mdc":
       return buildCursorMdc(source);
     case "skill-neutral":
@@ -409,6 +415,7 @@ var DEFAULT_ASSET_SURFACES = Object.freeze({
   codex: "cli",
   cursor: "ide",
   opencode: "cli",
+  sumi: "cli",
   codewith: "cli",
   qwen: "cli",
   aicopilot: "cli",
@@ -534,6 +541,7 @@ var DEFAULT_PROVIDER_CAPABILITIES = Object.freeze({
   codex: capability("codex", ">=0.1.0", "flattened", "AGENTS.md", { asset_surface: "cli" }),
   cursor: capability("cursor", ">=1.0.0", "cursor-rule", ".cursor/rules/*.mdc", { activation_modes: ["always", "glob"], conditional_artifacts: true, asset_surface: "ide" }),
   opencode: capability("opencode", ">=1.0.0", "managed-fragment", "opencode.json instructions", { provider_variant: "v1-instructions", session_surface: "opencode-config-instructions" }),
+  sumi: capability("sumi", ">=0.2.22 <0.3.0", "flattened", "AGENTS.md"),
   codewith: capability("codewith", ">=0.1.0", "flattened", "CODEWITH.md"),
   qwen: capability("qwen", ">=0.1.0", "flattened", "QWEN.md"),
   aicopilot: capability("aicopilot", ">=0.1.0", "flattened", "AICOPILOT.md"),
@@ -2115,7 +2123,7 @@ function isNotFoundHttpError2(err) {
 var localStoreModulePromise = null;
 function localStoreModule() {
   if (!localStoreModulePromise)
-    localStoreModulePromise = import("./local-0a9gja58.js");
+    localStoreModulePromise = import("./local-1c1qxzvx.js");
   return localStoreModulePromise;
 }
 
@@ -2396,7 +2404,9 @@ class CloudConfigStore {
     return data.config;
   }
   async updateConfig(idOrSlug, input) {
-    const { data } = await this.request("PATCH", `/configs/${encodeURIComponent(idOrSlug)}`, input);
+    validateExpectedConfigVersion(input.expected_version);
+    const conditional = input.expected_version !== undefined;
+    const { data } = await this.request(conditional ? "POST" : "PATCH", `/configs/${encodeURIComponent(idOrSlug)}${conditional ? "/conditional-update" : ""}`, input);
     return data.config;
   }
   async deleteConfig(idOrSlug) {
@@ -2473,7 +2483,7 @@ class CloudConfigStore {
       throw new ProfileNotFoundError(idOrSlug);
     return parseBoundedOrLegacyPage(data.configs, data.profile.configs, normalized, "profile membership");
   }
-  async getProfileConfigBindings(idOrSlug) {
+  async getProfileConfigBindings(idOrSlug, options = {}) {
     let routeMissing = false;
     const bindings = await aggregateBoundedCollection("profile config bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -2486,6 +2496,8 @@ class CloudConfigStore {
     }, (binding) => `${binding.profile_id}\x00${binding.config_id}`);
     if (!routeMissing)
       return bindings;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_BINDINGS_REQUIRED: profile config binding route is unavailable; refusing legacy activation fallback.");
     const profile = await this.getProfile(idOrSlug);
     const configs = await this.getProfileConfigs(idOrSlug);
     return configs.map((config, sort_order) => ({
@@ -2550,7 +2562,7 @@ class CloudConfigStore {
   async removeConfigFromProfile(profileIdOrSlug, configId) {
     await this.request("DELETE", `/profiles/${encodeURIComponent(profileIdOrSlug)}/configs/${encodeURIComponent(configId)}`, undefined, { allow404: true });
   }
-  async getProfileAssetBindings(profileIdOrSlug) {
+  async getProfileAssetBindings(profileIdOrSlug, options = {}) {
     let routeMissing = false;
     const assets = await aggregateBoundedCollection("profile asset bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -2563,6 +2575,8 @@ class CloudConfigStore {
     }, (asset) => `${asset.profile_id}\x00${asset.binding.assetKey}`);
     if (!routeMissing)
       return assets;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_ASSETS_REQUIRED: profile asset binding route is unavailable; refusing an empty asset fallback.");
     await this.getProfile(profileIdOrSlug);
     return [];
   }
@@ -7199,6 +7213,15 @@ var SESSION_TOOL_ADAPTERS = {
     description: "OpenCode AGENTS.md plus opencode.json instructions pointing at managed fragments.",
     providerSurface: "legacy-dual"
   },
+  sumi: {
+    tool: "sumi",
+    mode: "flattened-markdown",
+    indexFile: "AGENTS.md",
+    managedDir: SESSION_RENDER_INSTRUCTIONS_MANAGED_DIR,
+    envVar: "SUMI_CONFIG_DIR",
+    nativeImports: false,
+    description: "Sumi native AGENTS.md in the explicit resolved config directory or project root."
+  },
   aicopilot: {
     tool: "aicopilot",
     mode: "flattened-markdown",