@hasna/instructions 0.7.1 → 0.7.4

package/dist/chunks/{index-6jncnnw7.js → index-enh4yv85.js}

@@ -14,8 +14,9 @@ import {
   ProfileNotFoundError,
   isTemplate,
   renderTemplate,
-  renderTemplatePreview
-} from "./index-n3fjspr0.js";
+  renderTemplatePreview,
+  validateExpectedConfigVersion
+} from "./index-preyvj8n.js";
 import {
   INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS,
   clientTransportEnvKeys,
@@ -77,6 +78,36 @@ function truncateMiddle(value, max = 80) {
   return `${text.slice(0, head)}...${text.slice(text.length - tail)}`;
 }
 
+// src/lib/instruction-source-policy.ts
+function isRetiredInstructionSource(config) {
+  return config.tags.some((tag) => tag === "retired-global-source" || tag === "retired-instruction-source");
+}
+function instructionSourceRejection(config) {
+  if (isRetiredInstructionSource(config) || config.tags.includes("config-only")) {
+    return "source is retired or explicitly configuration-only";
+  }
+  if (config.category !== "rules")
+    return `category ${config.category} is not an instruction source; classify reviewed prose as rules`;
+  if (config.format !== "markdown" && config.format !== "text")
+    return `format ${config.format} is not instruction prose`;
+  if (config.is_template)
+    return "unresolved templates must be rendered and reviewed before prompt injection";
+  if (!config.content.trim())
+    return "instruction source is empty";
+  if (config.content.includes("\x00"))
+    return "instruction source contains binary content";
+  const target = config.target_path?.split(/[\\/]/).pop() ?? "";
+  if (/\.(?:json|toml|yaml|yml|ini|sh|bash|zsh|fish|js|ts|py|rules)$/i.test(target)) {
+    return "target is an executable, provider policy, or settings file rather than a prompt";
+  }
+  return null;
+}
+function assertInstructionSource(config) {
+  const rejection = instructionSourceRejection(config);
+  if (rejection)
+    throw new Error(`Cannot inject ${config.slug}: ${rejection}.`);
+}
+
 // src/lib/global-agent-rules-standard.ts
 import { createHash as createHash7 } from "crypto";
 
@@ -186,17 +217,18 @@ async function ensureCodewithSharedTodosStorageStandardConfig(store = resolveCon
   let config;
   try {
     const existing = await store.getConfig(CODEWITH_SHARED_TODOS_STORAGE_STANDARD_SLUG);
+    if (isRetiredInstructionSource(existing))
+      return existing;
     if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
       config = await store.updateConfig(existing.id, input);
     } else {
       config = existing;
     }
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     config = await store.createConfig(input);
   }
-  for (const profile of await store.listProfiles()) {
-    await store.addConfigToProfile(profile.id, config.id);
-  }
   return config;
 }
 
@@ -7373,6 +7405,9 @@ function buildCodexAgentsMd(source, context = {}) {
 function buildOpenCodeAgentsMd(source, context = {}) {
   return flattenWithRules(source, context);
 }
+function buildSumiAgentsMd(source, context = {}) {
+  return flattenWithRules(source, context);
+}
 function buildCursorMdc(source) {
   const stem = source.target_path ? basename2(source.target_path, extname(source.target_path)) : source.slug;
   const description = source.name || stem;
@@ -7401,6 +7436,8 @@ function applyTransform(source, output, context = {}) {
       return buildCodexAgentsMd(source, context);
     case "opencode-flat":
       return buildOpenCodeAgentsMd(source, context);
+    case "sumi-flat":
+      return buildSumiAgentsMd(source, context);
     case "cursor-mdc":
       return buildCursorMdc(source);
     case "skill-neutral":
@@ -7473,6 +7510,7 @@ function assetCapability(provider, surface, kind, support, strategies, note, pro
 var ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
   assetCapability("claude", "code", "skill", "supported", ["emit-file"], "Claude Code project or profile skill files."),
   assetCapability("claude", "code", "workflow", "supported", ["emit-file"], "Claude Code command and workflow files."),
+  assetCapability("claude", "code", "custom-agent", "supported", ["emit-file"], "Claude Code Markdown subagents with native frontmatter in agents/.", ">=2.1.276 <3.0.0"),
   assetCapability("claude", "code", "hook", "supported", ["emit-file"], "Claude Code hook configuration fragments."),
   assetCapability("claude", "code", "plugin", "conditional", ["install-marketplace"], "Claude marketplace installation requires an explicit installer."),
   assetCapability("codex", "cli", "skill", "supported", ["emit-file"], "Codex skill bundle files."),
@@ -7483,6 +7521,7 @@ var ASSET_CAPABILITY_DESCRIPTORS = Object.freeze([
   assetCapability("opencode", "cli", "workflow", "supported", ["emit-file"], "OpenCode command/workflow files."),
   assetCapability("opencode", "cli", "plugin", "supported", ["emit-file"], "OpenCode local plugin modules."),
   assetCapability("opencode", "cli", "custom-agent", "supported", ["emit-file"], "OpenCode custom agent files."),
+  assetCapability("sumi", "cli", "custom-agent", "supported", ["emit-file"], "Sumi Markdown agent definitions in its explicit resolved config or project directory.", ">=0.2.22 <0.3.0"),
   assetCapability("codewith", "cli", "skill", "supported", ["emit-file"], "Codewith skill bundle files."),
   assetCapability("codewith", "cli", "plugin", "conditional", ["install-local", "install-marketplace"], "Codewith plugin installation requires an explicit installer."),
   assetCapability("aicopilot", "cli", "skill", "supported", ["emit-file"], "AICopilot discovered skill files."),
@@ -7515,6 +7554,7 @@ var DEFAULT_ASSET_SURFACES = Object.freeze({
   codex: "cli",
   cursor: "ide",
   opencode: "cli",
+  sumi: "cli",
   codewith: "cli",
   qwen: "cli",
   aicopilot: "cli",
@@ -7585,6 +7625,10 @@ function normalizeProfileAssetBinding(value) {
   const rollback = record["rollback"];
   if (!ASSET_ROLLBACK_POLICIES.includes(rollback))
     throw new Error(`Invalid asset rollback policy: ${String(rollback)}`);
+  const nativeAgent = record["nativeAgent"] === undefined ? undefined : normalizeNativeAgentMetadata(record["nativeAgent"]);
+  if (nativeAgent && (kind !== "custom-agent" || strategy !== "emit-file" || !["claude", "sumi", "opencode"].includes(provider))) {
+    throw new Error("nativeAgent metadata requires a supported emitted custom-agent definition.");
+  }
   return {
     schema: PROFILE_ASSET_BINDING_SCHEMA,
     assetKey,
@@ -7604,6 +7648,7 @@ function normalizeProfileAssetBinding(value) {
       root,
       relativePath: nonEmptyString(destinationRecord["relativePath"], "destination.relativePath")
     },
+    ...nativeAgent ? { nativeAgent } : {},
     uninstall,
     rollback
   };
@@ -7679,6 +7724,7 @@ function compileAssetPlan(input) {
         allowed: binding.source.allowed
       },
       destination: binding.destination,
+      ...binding.nativeAgent ? { nativeAgent: binding.nativeAgent } : {},
       support,
       action,
       mutationMode: input.mode,
@@ -7743,6 +7789,18 @@ function validateAssetSourceAndDestination(bundle, binding, diagnostics) {
     pathSafe = false;
     diagnostics.push(diagnostic("error", "ASSET_DESTINATION_UNSAFE", binding.assetKey, error.message));
   }
+  if (pathSafe && binding.kind === "custom-agent" && binding.destination.strategy === "emit-file" && (binding.selector.provider === "claude" || binding.selector.provider === "sumi" || binding.nativeAgent) && (binding.destination.root !== "target-home" || !/^agents\/[A-Za-z0-9][A-Za-z0-9_-]*\.md$/.test(safeRelativePath(binding.destination.relativePath)))) {
+    pathSafe = false;
+    diagnostics.push(diagnostic("error", "ASSET_CUSTOM_AGENT_DESTINATION_UNSUPPORTED", binding.assetKey, "Native custom-agent definitions require agents/<name>.md beneath an explicit target-home."));
+  }
+  if (binding.nativeAgent) {
+    if (posix.basename(binding.destination.relativePath, ".md") !== binding.nativeAgent.name) {
+      diagnostics.push(diagnostic("error", "ASSET_NATIVE_AGENT_NAME_MISMATCH", binding.assetKey, "Native role name must match its destination filename."));
+    }
+    if (/^\uFEFF?---[ \t]*\r?\n/.test(bundle.content)) {
+      diagnostics.push(diagnostic("error", "ASSET_NATIVE_AGENT_DOUBLE_HEADER", binding.assetKey, "Canonical role prose must not already contain frontmatter when nativeAgent metadata is supplied."));
+    }
+  }
   const expectedLocator = bundle.locator;
   if (!binding.source.immutable || binding.source.locator !== expectedLocator) {
     diagnostics.push(diagnostic("error", "ASSET_SOURCE_MUTABLE_OR_UNPINNED", binding.assetKey, `Asset source must be pinned to ${expectedLocator}.`));
@@ -7798,6 +7856,72 @@ function safeRelativePath(value) {
   }
   return normalized;
 }
+function normalizeNativeAgentMetadata(value) {
+  const record = objectRecord(value, "nativeAgent");
+  if (Object.keys(record).some((key) => !["name", "description", "frontmatter"].includes(key)))
+    throw new Error("Unknown nativeAgent metadata field.");
+  const name = nonEmptyString(record["name"], "nativeAgent.name");
+  const description = nonEmptyString(record["description"], "nativeAgent.description");
+  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(name) || name.length > 128)
+    throw new Error("Invalid nativeAgent.name.");
+  if (description.length > 4096 || /[\r\n\0]/.test(description))
+    throw new Error("Invalid nativeAgent.description.");
+  if (record["frontmatter"] === undefined)
+    return { name, description };
+  const frontmatter = record["frontmatter"];
+  if (typeof frontmatter !== "string" || frontmatter.length > 16384 || frontmatter.includes("\x00"))
+    throw new Error("Invalid nativeAgent.frontmatter.");
+  const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n$/.exec(frontmatter);
+  if (!match)
+    throw new Error("nativeAgent.frontmatter requires one complete newline-terminated YAML header.");
+  const scalar = (raw) => {
+    if (raw.startsWith('"')) {
+      try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === "string" ? parsed : undefined;
+      } catch {
+        return;
+      }
+    }
+    if (!/^[A-Za-z0-9][A-Za-z0-9 _.,:;()/?@+-]*$/.test(raw) || /:(?:\s|$)/.test(raw))
+      return;
+    if (/^(?:true|yes|on|y)$/i.test(raw))
+      return true;
+    if (/^(?:false|no|off|n)$/i.test(raw))
+      return false;
+    if (/^null$/i.test(raw))
+      return null;
+    if (/^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$/.test(raw))
+      return Number(raw);
+    if (/^[0-9]/.test(raw))
+      return;
+    return raw;
+  };
+  const fields = new Map;
+  for (const line of match[1].split(/\r?\n/)) {
+    if (!line.trim() || line.startsWith("#"))
+      continue;
+    const field = /^([A-Za-z][A-Za-z0-9_-]*):[ \t]+(.+)$/.exec(line);
+    if (!field || fields.has(field[1]) || scalar(field[2]) === undefined)
+      throw new Error("nativeAgent.frontmatter requires unambiguous, unique flat scalar fields.");
+    fields.set(field[1], scalar(field[2]));
+  }
+  if (fields.get("name") !== name || fields.get("description") !== description)
+    throw new Error("nativeAgent.frontmatter name and description must match explicit metadata.");
+  return { name, description, frontmatter };
+}
+function renderNativeAgentContent(content, metadata) {
+  if (!metadata)
+    return content;
+  const value = normalizeNativeAgentMetadata(metadata);
+  if (/^\uFEFF?---[ \t]*\r?\n/.test(content))
+    throw new Error("Canonical role prose already contains frontmatter.");
+  return (value.frontmatter ?? `---
+name: ${JSON.stringify(value.name)}
+description: ${JSON.stringify(value.description)}
+---
+`) + content;
+}
 function diagnostic(severity, code, assetKey, message) {
   return { severity, code, assetKey, message };
 }
@@ -8178,6 +8302,7 @@ var SESSION_RENDER_TOOLS = [
   "codex",
   "cursor",
   "opencode",
+  "sumi",
   "codewith",
   "qwen",
   "aicopilot",
@@ -8266,6 +8391,15 @@ var SESSION_TOOL_ADAPTERS = {
     description: "OpenCode AGENTS.md plus opencode.json instructions pointing at managed fragments.",
     providerSurface: "legacy-dual"
   },
+  sumi: {
+    tool: "sumi",
+    mode: "flattened-markdown",
+    indexFile: "AGENTS.md",
+    managedDir: SESSION_RENDER_INSTRUCTIONS_MANAGED_DIR,
+    envVar: "SUMI_CONFIG_DIR",
+    nativeImports: false,
+    description: "Sumi native AGENTS.md in the explicit resolved config directory or project root."
+  },
   aicopilot: {
     tool: "aicopilot",
     mode: "flattened-markdown",
@@ -8550,9 +8684,19 @@ function skippedSource(source, reason) {
   };
 }
 function normalizeSources(sources, tool, allowEmptySources) {
-  const normalized = sources.map((source, index) => {
+  const providerSkipped = [];
+  const normalized = sources.flatMap((source, index) => {
     if (!source.id.trim())
       throw new Error("Session instruction source id is required.");
+    if (source.targetProviders?.length && !providerTargetsTool(source.targetProviders, tool)) {
+      providerSkipped.push({
+        id: source.id,
+        label: source.label ?? source.id,
+        targetProviders: source.targetProviders,
+        reason: "instruction source targets a different provider"
+      });
+      return [];
+    }
     const floored = applyAgentOperatingRulesFloor(source, source.content ?? "");
     const content = filterProviderOnlyBlocks(floored.content, tool);
     const normalized2 = {
@@ -8571,7 +8715,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
     if (!allowEmptySources && !normalized2.content.trim() && normalized2.resolvedRules.length === 0 && !hasPathReferences) {
       throw new Error(`Session instruction source "${source.id}" is empty. Pass --allow-empty-sources only for explicit empty renders.`);
     }
-    return normalized2;
+    return [normalized2];
   });
   const originalOrder = [...normalized].sort(compareSessionInstructionSources);
   const deduplicated = deduplicateSemanticPolicySources(normalized);
@@ -8579,7 +8723,7 @@ function normalizeSources(sources, tool, allowEmptySources) {
   validateTargetedReplacementSources(originalOrder, ordered, deduplicated.skipped, tool);
   rejectDuplicateSourceSlugs(ordered);
   rejectDuplicateRulePaths(ordered);
-  return { sources: ordered, skipped: deduplicated.skipped };
+  return { sources: ordered, skipped: [...providerSkipped, ...deduplicated.skipped] };
 }
 function compareSessionInstructionSources(a, b) {
   return SESSION_LAYER_RANK[a.resolvedLayer] - SESSION_LAYER_RANK[b.resolvedLayer] || a.resolvedOrder - b.resolvedOrder || a.id.localeCompare(b.id);
@@ -9008,7 +9152,7 @@ function buildCursorRuleFiles(targetHome, adapter, sources) {
     return [sourceFile, ...ruleFiles];
   });
 }
-function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig) {
+function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig, projectRoot) {
   const surface = adapter.providerSurface ?? "legacy-dual";
   const fragments = sources.flatMap((source, index) => [
     makeFile(targetHome, fragmentPath(adapter, index, source), "fragment", sectionForSource(source), [source.id]),
@@ -9028,13 +9172,13 @@ function buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfi
   ]);
   const existingConfigPath = joinTarget(targetHome, adapter.configFile);
   const selectedConfig = existsSync4(existingConfigPath) ? readOpenCodeConfig(readFileSync4(existingConfigPath, "utf8"), existingConfigPath) : providerConfig ? readOpenCodeConfig(providerConfig.content, providerConfig.sourceId) : {};
-  const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir));
+  const preservedInstructions = normalizeOpenCodeInstructions(selectedConfig["instructions"]).filter((path) => !pathIsManagedOpenCodeInstruction(path, adapter.managedDir, targetHome, projectRoot));
   const config = {
     ...selectedConfig,
     $schema: typeof selectedConfig["$schema"] === "string" ? selectedConfig["$schema"] : "https://opencode.ai/config.json",
     instructions: [
       ...preservedInstructions,
-      ...fragments.map((file) => file.relativePath)
+      ...fragments.map((file) => file.path)
     ]
   };
   const configSourceIds = [
@@ -9077,9 +9221,62 @@ function normalizeOpenCodeInstructions(value) {
   }
   return value;
 }
-function pathIsManagedOpenCodeInstruction(path, managedDir) {
-  const normalized = posix2.normalize(path.replaceAll("\\", "/")).replace(/^\.\//, "");
-  return normalized === managedDir || normalized.startsWith(`${managedDir}/`);
+function pathIsManagedOpenCodeInstruction(reference, managedDir, targetHome, projectRoot) {
+  const normalizedManagedDir = posix2.normalize(managedDir.replaceAll("\\", "/"));
+  const candidates = canonicalOpenCodeInstructionPaths(reference, targetHome, projectRoot);
+  return candidates.some((candidate) => candidate === normalizedManagedDir || candidate.endsWith(`/${normalizedManagedDir}`) || candidate.includes(`/${normalizedManagedDir}/`));
+}
+function canonicalOpenCodeInstructionPaths(reference, targetHome, projectRoot) {
+  const portable = decodeOpenCodePathEscapes(reference.replaceAll("\\", "/")).replaceAll("\\", "/");
+  if (portable.includes("\x00")) {
+    throw new Error("OpenCode config instruction references cannot contain NUL bytes.");
+  }
+  const windowsAbsolute = /^[A-Za-z]:\//.test(portable);
+  const uriScheme = windowsAbsolute ? null : /^([A-Za-z][A-Za-z0-9+.-]*):/.exec(portable)?.[1]?.toLowerCase();
+  if (uriScheme && uriScheme !== "file")
+    return [];
+  if (uriScheme === "file") {
+    const fileReference = reference.replaceAll("\\", "/");
+    if (!/^file:\/\//i.test(fileReference)) {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    let url;
+    try {
+      url = new URL(fileReference);
+    } catch {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    if (url.protocol !== "file:" || url.username || url.password || url.port || url.search || url.hash) {
+      throw new Error("OpenCode config contains an invalid file URL instruction reference.");
+    }
+    const pathname = decodeOpenCodePathEscapes(url.pathname);
+    if (pathname.includes("\x00")) {
+      throw new Error("OpenCode config instruction references cannot contain NUL bytes.");
+    }
+    const host = url.hostname && url.hostname !== "localhost" ? `//${url.hostname}` : "";
+    return [normalizePortableOpenCodePath(`${host}${pathname}`)];
+  }
+  if (posix2.isAbsolute(portable) || windowsAbsolute || portable.startsWith("//")) {
+    return [normalizePortableOpenCodePath(portable)];
+  }
+  const roots = [
+    ...projectRoot ? [resolveSessionPath(projectRoot)] : [],
+    resolveSessionPath(targetHome)
+  ];
+  return [...new Set(roots.map((root) => normalizePortableOpenCodePath(posix2.join(root.replaceAll("\\", "/"), portable))))];
+}
+function decodeOpenCodePathEscapes(value) {
+  return value.replace(/(?:%[a-fA-F0-9]{2})+/g, (encoded) => {
+    try {
+      return decodeURIComponent(encoded);
+    } catch {
+      return encoded;
+    }
+  });
+}
+function normalizePortableOpenCodePath(value) {
+  const normalized = posix2.normalize(value.replaceAll("\\", "/"));
+  return normalized.startsWith("//") ? `/${normalized.replace(/^\/+/u, "")}` : normalized;
 }
 function buildAntigravityRuleFiles(targetHome, adapter, sources) {
   return sources.flatMap((source, index) => {
@@ -9133,7 +9330,7 @@ function makeAntigravityRuleFile(targetHome, relativePath, content, sourceIds) {
   }
   return file;
 }
-function buildFiles(targetHome, adapter, profile, sources, providerConfig, providerVersion) {
+function buildFiles(targetHome, adapter, profile, sources, providerConfig, providerVersion, projectRoot) {
   switch (adapter.mode) {
     case "native-imports":
       return buildNativeImportFiles(targetHome, adapter, profile, sources, providerVersion);
@@ -9142,7 +9339,7 @@ function buildFiles(targetHome, adapter, profile, sources, providerConfig, provi
     case "cursor-mdc":
       return buildCursorRuleFiles(targetHome, adapter, sources);
     case "opencode-instructions":
-      return buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig);
+      return buildOpenCodeFiles(targetHome, adapter, profile, sources, providerConfig, projectRoot);
     case "antigravity-rules":
       return buildAntigravityRuleFiles(targetHome, adapter, sources);
     case "provider-rules":
@@ -9171,12 +9368,13 @@ function buildAssetFiles(input, targetHome, blocked) {
     if (!relativePath || relativePath === ".." || relativePath.startsWith("../") || isAbsolute3(relativePath)) {
       throw new Error(`Asset ${item.assetKey} is outside the session snapshot root; use a project-scoped session plan for atomic application.`);
     }
+    const renderedContent = renderNativeAgentContent(content, item.nativeAgent);
     return {
       path,
       relativePath: assertSafeRelativePath(relativePath),
       role: "asset",
-      content,
-      sha256: sha2565(content),
+      content: renderedContent,
+      sha256: sha2565(renderedContent),
       sourceIds: [item.sourceConfigId, item.assetId]
     };
   });
@@ -9185,6 +9383,11 @@ function isNativeProfileSessionTarget(input) {
   return (input.tool === "grok" || input.tool === "devin") && Boolean(input.targetHome?.trim()) && !input.projectRoot;
 }
 function adapterFor(input) {
+  if (input.tool === "sumi" && input.projectRoot) {
+    if (input.providerSurface)
+      throw new Error(`Provider surface ${input.providerSurface} is not valid for Sumi.`);
+    return Object.freeze({ ...SESSION_TOOL_ADAPTERS.sumi, projectScoped: true, envVar: undefined });
+  }
   if (input.tool === "opencode" && input.providerSurface) {
     if (input.providerSurface !== "opencode-config-instructions" && input.providerSurface !== "opencode-agents-md") {
       throw new Error(`Provider surface ${input.providerSurface} is not valid for OpenCode.`);
@@ -9226,7 +9429,7 @@ function adapterFor(input) {
   }
   if (input.tool !== "codewith")
     return SESSION_TOOL_ADAPTERS[input.tool];
-  const gatedNativeImports = input.codewithNativeImports === true || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true";
+  const gatedNativeImports = input.codewithNativeImports ?? (process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "1" || process.env[CODEWITH_NATIVE_IMPORTS_ENV] === "true");
   return gatedNativeImports ? CODEWITH_NATIVE_ADAPTER : CODEWITH_FLATTENED_ADAPTER;
 }
 function getHomeDir() {
@@ -9277,6 +9480,13 @@ function assertSafeTargetRoot(targetHome) {
   return normalized;
 }
 function resolveRenderTarget(input, adapter) {
+  if (input.tool === "sumi" && !input.projectRoot && !input.targetHome?.trim()) {
+    return {
+      targetHome: defaultTargetHome(input.tool, input.profile, input.sessionId),
+      targetKind: "blocked",
+      blockers: ["Sumi requires --target-home from `sumi debug paths config`, or --project-root for repository AGENTS.md."]
+    };
+  }
   if (adapter.projectScoped) {
     if (!input.projectRoot) {
       const label = input.tool === "cursor" ? "Cursor rules" : input.tool === "antigravity" ? "Antigravity rules" : `${adapter.description.split(".")[0]} files`;
@@ -9343,7 +9553,7 @@ function resolveSessionTargetOwnership(input, target) {
     tool: input.tool,
     profile: input.profile,
     targetHome: target.targetHome,
-    projectRoot: null,
+    projectRoot: input.tool === "opencode" && input.projectRoot ? resolveSessionPath(input.projectRoot) : null,
     ownedBy: "open-configs",
     canonicalOwner: "instructions",
     writer: {
@@ -9378,6 +9588,14 @@ function planSessionRender(input) {
   const normalized = normalizeSources(input.sources, input.tool, allowEmptySources);
   const composed = composeSources(normalized.sources, input.tool);
   const orderedSources = composed.sources;
+  if (input.tool === "sumi") {
+    for (const source of orderedSources) {
+      const activation = source.metadata?.["activation"];
+      if (source.globs?.length || source.resolvedRules.some((rule) => rule.globs?.length) || activation?.mode && activation.mode !== "always") {
+        throw new Error(`Sumi AGENTS.md cannot preserve conditional activation for source ${source.id}; compile a profile with an explicit supported fallback.`);
+      }
+    }
+  }
   const skippedSources = [
     ...input.skippedSources ?? [],
     ...normalized.skipped,
@@ -9396,7 +9614,7 @@ function planSessionRender(input) {
   if (input.providerConfig && input.tool !== "opencode") {
     throw new Error("Provider base config is supported only for OpenCode session renders.");
   }
-  const baseFiles = blocked ? [] : buildFiles(targetHome, adapter, input.profile, orderedSources, input.providerConfig, input.provider_version);
+  const baseFiles = blocked ? [] : buildFiles(targetHome, adapter, input.profile, orderedSources, input.providerConfig, input.provider_version, input.projectRoot);
   const projectContext = blocked ? null : composeProjectContextSessionRender({
     tool: input.tool,
     adapter_mode: adapter.mode,
@@ -9421,6 +9639,7 @@ function planSessionRender(input) {
     adapterMode: adapter.mode,
     profile: input.profile,
     sessionId: input.sessionId ?? null,
+    ...input.refreshSelector ? { refreshSelector: input.refreshSelector } : {},
     targetHome,
     targetKind,
     targetOwner,
@@ -9496,6 +9715,7 @@ function planSessionRender(input) {
           mutationMode: item.mutationMode,
           destination: item.destination,
           digest: item.source.digest,
+          ...item.nativeAgent ? { nativeAgent: item.nativeAgent } : {},
           exactOnceKey: item.exactOnceKey
         }))
       }
@@ -9933,6 +10153,7 @@ var DEFAULT_PROVIDER_CAPABILITIES = Object.freeze({
   codex: capability("codex", ">=0.1.0", "flattened", "AGENTS.md", { asset_surface: "cli" }),
   cursor: capability("cursor", ">=1.0.0", "cursor-rule", ".cursor/rules/*.mdc", { activation_modes: ["always", "glob"], conditional_artifacts: true, asset_surface: "ide" }),
   opencode: capability("opencode", ">=1.0.0", "managed-fragment", "opencode.json instructions", { provider_variant: "v1-instructions", session_surface: "opencode-config-instructions" }),
+  sumi: capability("sumi", ">=0.2.22 <0.3.0", "flattened", "AGENTS.md"),
   codewith: capability("codewith", ">=0.1.0", "flattened", "CODEWITH.md"),
   qwen: capability("qwen", ">=0.1.0", "flattened", "QWEN.md"),
   aicopilot: capability("aicopilot", ">=0.1.0", "flattened", "AICOPILOT.md"),
@@ -10155,12 +10376,22 @@ function compileInstructionGraph(input) {
     const selector = binding.providers?.find((entry) => entry.provider === input.context.provider || entry.provider === "global");
     if (binding.providers?.length && !selector)
       continue;
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    if (!binding.providers?.length && config.agent !== "global" && config.agent !== input.context.provider && !output) {
+      diagnostics.push({ severity: "info", code: "SOURCE_PROVIDER_NOT_SELECTED", config_id: configId, message: `${config.slug} targets ${config.agent}, not ${input.context.provider}.` });
+      continue;
+    }
     if (selector?.version_range && !providerVersionSatisfies(input.context.provider_version, selector.version_range)) {
       diagnostics.push({ severity: binding.required ? "error" : "warning", code: "PROVIDER_SELECTOR_VERSION_MISMATCH", config_id: configId, message: `${config.slug} requires ${input.context.provider} ${selector.version_range}; current version is ${input.context.provider_version}.` });
       continue;
     }
     if (!activationMatches(binding.activation, config, input.context))
       continue;
+    const rejection = instructionSourceRejection(config);
+    if (rejection) {
+      diagnostics.push({ severity: !binding.required && binding.fallback === "omit" ? "warning" : "error", code: "SOURCE_NOT_INSTRUCTION", config_id: configId, message: `${config.slug}: ${rejection}.` });
+      continue;
+    }
     if (capability2.activation_modes.includes(binding.activation.mode)) {
       selected.add(configId);
       effective.set(configId, binding.activation);
@@ -10235,7 +10466,9 @@ function compileInstructionGraph(input) {
   assertExactOnce(units, artifacts);
   const sources = units.map((unit, index) => {
     const config = configs.get(unit.config_id);
-    return sourceForUnit(config, unit, index);
+    const output = config.outputs.find((entry) => entry.agent === input.context.provider);
+    const content = output ? applyTransform(config, output, { configs: [config] }) : config.content;
+    return sourceForUnit({ ...config, content }, unit, index);
   });
   const planWithoutHash = {
     schema: INSTRUCTION_GRAPH_PLAN_SCHEMA,
@@ -11819,7 +12052,7 @@ function formatCliError(err, env = process.env) {
 var localStoreModulePromise = null;
 function localStoreModule() {
   if (!localStoreModulePromise)
-    localStoreModulePromise = import("./local-969ye538.js");
+    localStoreModulePromise = import("./local-yxsbs8x3.js");
   return localStoreModulePromise;
 }
 
@@ -12100,7 +12333,9 @@ class CloudConfigStore {
     return data.config;
   }
   async updateConfig(idOrSlug, input) {
-    const { data } = await this.request("PATCH", `/configs/${encodeURIComponent(idOrSlug)}`, input);
+    validateExpectedConfigVersion(input.expected_version);
+    const conditional = input.expected_version !== undefined;
+    const { data } = await this.request(conditional ? "POST" : "PATCH", `/configs/${encodeURIComponent(idOrSlug)}${conditional ? "/conditional-update" : ""}`, input);
     return data.config;
   }
   async deleteConfig(idOrSlug) {
@@ -12177,7 +12412,7 @@ class CloudConfigStore {
       throw new ProfileNotFoundError(idOrSlug);
     return parseBoundedOrLegacyPage(data.configs, data.profile.configs, normalized, "profile membership");
   }
-  async getProfileConfigBindings(idOrSlug) {
+  async getProfileConfigBindings(idOrSlug, options = {}) {
     let routeMissing = false;
     const bindings = await aggregateBoundedCollection("profile config bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -12190,6 +12425,8 @@ class CloudConfigStore {
     }, (binding) => `${binding.profile_id}\x00${binding.config_id}`);
     if (!routeMissing)
       return bindings;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_BINDINGS_REQUIRED: profile config binding route is unavailable; refusing legacy activation fallback.");
     const profile = await this.getProfile(idOrSlug);
     const configs = await this.getProfileConfigs(idOrSlug);
     return configs.map((config, sort_order) => ({
@@ -12254,7 +12491,7 @@ class CloudConfigStore {
   async removeConfigFromProfile(profileIdOrSlug, configId) {
     await this.request("DELETE", `/profiles/${encodeURIComponent(profileIdOrSlug)}/configs/${encodeURIComponent(configId)}`, undefined, { allow404: true });
   }
-  async getProfileAssetBindings(profileIdOrSlug) {
+  async getProfileAssetBindings(profileIdOrSlug, options = {}) {
     let routeMissing = false;
     const assets = await aggregateBoundedCollection("profile asset bindings", async (cursor) => {
       const normalized = normalizeBoundedReadOptions({ limit: 100, cursor });
@@ -12267,6 +12504,8 @@ class CloudConfigStore {
     }, (asset) => `${asset.profile_id}\x00${asset.binding.assetKey}`);
     if (!routeMissing)
       return assets;
+    if (options.requireExplicit)
+      throw new Error("HOSTED_ASSETS_REQUIRED: profile asset binding route is unavailable; refusing an empty asset fallback.");
     await this.getProfile(profileIdOrSlug);
     return [];
   }
@@ -12580,9 +12819,13 @@ async function ensureGlobalAgentRulesStandardConfig(store = resolveConfigStore()
   let existing;
   try {
     existing = await store.getConfig(GLOBAL_AGENT_RULES_STANDARD_SLUG);
-  } catch {
+  } catch (error) {
+    if (!(error instanceof ConfigNotFoundError))
+      throw error;
     return await store.createConfig(standardConfigInput(resolveAgentOperatingRulesPayload(null)));
   }
+  if (isRetiredInstructionSource(existing))
+    return existing;
   const payload = resolveAgentOperatingRulesPayload(existing.content);
   const input = standardConfigInput(payload);
   if (existing.content !== input.content || existing.description !== input.description || existing.category !== input.category || existing.agent !== input.agent || existing.format !== input.format || existing.kind !== input.kind || JSON.stringify(existing.tags) !== JSON.stringify(input.tags)) {
@@ -12621,7 +12864,7 @@ function detectMachineContext(overrides = {}) {
     created_at: "",
     os_family: osFamily,
     home_dir: homeDir4,
-    workspace_root: overrides.workspace_root ?? join7(homeDir4, osFamily === "macos" ? "Workspace" : "workspace"),
+    workspace_root: overrides.workspace_root ?? "",
     bun_bin_dir: bunBinDir,
     bun_path: overrides.bun_path ?? defaultBunPath,
     path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join7("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
@@ -12634,7 +12877,7 @@ function machineContextToVariables(machine) {
     OS_FAMILY: machine.os_family,
     ARCH: machine.arch ?? "",
     HOME_DIR: machine.home_dir,
-    WORKSPACE_ROOT: machine.workspace_root,
+    ...machine.workspace_root ? { WORKSPACE_ROOT: machine.workspace_root } : {},
     BUN_BIN_DIR: machine.bun_bin_dir,
     BUN_PATH: machine.bun_path,
     PATH_PREFIX: machine.path_prefix
@@ -12688,4 +12931,4 @@ function renderMachineAwareContentPreview(content, variables) {
   return isTemplate(content) ? renderTemplatePreview(content, variables) : { content, unresolved: [] };
 }
 
-export { DEFAULT_LIST_LIMIT, parseLimit, paginate, truncateText, truncateMiddle, normalizeBoundedReadOptions, boundedReadPage, ensureGlobalAgentRulesStandardConfig, ensureCodewithSharedTodosStorageStandardConfig, redactFormatForTarget, redactContent, scanSecrets, isSecretVarName, SESSION_RENDER_MANAGED_MARKER, SESSION_RENDER_SCHEMA, SESSION_RENDER_MANIFEST_RELATIVE_PATH, SESSION_INSTRUCTION_LAYERS, getSessionRenderSnapshotDir, sessionRenderSnapshotWorkspaceRoot, PROJECT_CONTEXT_MAX_INPUT_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, ProjectContextError, parseProjectContextBundle, planProjectContext, observeProjectContextSessionGuard, withProjectContextSessionGuard, applyProjectContext, writeProjectContextCoordinatedFile, removeProjectContextCoordinatedFile, isRetiredOrUnsupportedConfigAgent, retiredOrUnsupportedAgentReason, applyTransform, normalizeProfileAssetBinding, observeCursorGlobalAuthorityAtPath, isCursorGlobalAuthorityPath, stampCursorGlobalAuthorityMarker, detectCursorAuthorityConflicts, detectClaudeAuthorityConflicts, ANTIGRAVITY_RULE_FILE_CHAR_LIMIT, SESSION_RENDERER_OWNER_ID, SESSION_RENDER_TOOLS, SESSION_RENDER_OWNED_CONFIG_TARGETS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, normalizeSessionInstructionSourceId, resolveSessionPath, planSessionRender, sourceFromFilePath, sourceFromConfig, sourcesFromIdentityExport, legacyProfileConfigBinding, normalizeProfileConfigBinding, planProfileSessionRender, normalizeOsFamily, detectMachineContext, machineContextToVariables, resolveProfileVariables, templateizeMachineContent, renderMachineAwareContentPreview, formatCliError, CloudConfigStore, resolveConfigStore };
+export { DEFAULT_LIST_LIMIT, parseLimit, paginate, truncateText, truncateMiddle, normalizeBoundedReadOptions, boundedReadPage, isRetiredInstructionSource, instructionSourceRejection, assertInstructionSource, ensureGlobalAgentRulesStandardConfig, ensureCodewithSharedTodosStorageStandardConfig, exports_external, redactFormatForTarget, redactContent, scanSecrets, isSecretVarName, CODEWITH_NATIVE_IMPORTS_ENV, SESSION_RENDER_MANAGED_MARKER, SESSION_RENDER_SCHEMA, SESSION_RENDER_MANIFEST_RELATIVE_PATH, SESSION_INSTRUCTION_LAYERS, getSessionRenderSnapshotDir, sessionRenderSnapshotWorkspaceRoot, PROJECT_CONTEXT_MAX_INPUT_BYTES, SESSION_MANAGED_INPUT_MAX_BYTES, ProjectContextError, parseProjectContextBundle, planProjectContext, observeProjectContextSessionGuard, withProjectContextSessionGuard, applyProjectContext, writeProjectContextCoordinatedFile, removeProjectContextCoordinatedFile, isRetiredOrUnsupportedConfigAgent, retiredOrUnsupportedAgentReason, applyTransform, normalizeProfileAssetBinding, observeCursorGlobalAuthorityAtPath, isCursorGlobalAuthorityPath, stampCursorGlobalAuthorityMarker, detectCursorAuthorityConflicts, detectClaudeAuthorityConflicts, ANTIGRAVITY_RULE_FILE_CHAR_LIMIT, SESSION_RENDERER_OWNER_ID, SESSION_RENDER_TOOLS, SESSION_RENDER_OWNED_CONFIG_TARGETS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, normalizeSessionInstructionSourceId, resolveSessionPath, planSessionRender, sourceFromFilePath, sourceFromConfig, sourcesFromIdentityExport, legacyProfileConfigBinding, normalizeProfileConfigBinding, planProfileSessionRender, normalizeOsFamily, detectMachineContext, machineContextToVariables, resolveProfileVariables, templateizeMachineContent, renderMachineAwareContentPreview, formatCliError, CloudConfigStore, resolveConfigStore };

package/dist/chunks/{index-ypcef3a2.js → index-n9arv47w.js}

@@ -15,7 +15,7 @@ import {
   resolveConfigStore,
   resolveProfileVariables,
   stampCursorGlobalAuthorityMarker
-} from "./index-aj66f6xr.js";
+} from "./index-dwagz53p.js";
 import {
   isSecretVarName,
   redactFormatForTarget,
@@ -24,7 +24,7 @@ import {
 import {
   ConfigApplyError,
   parseTemplateVars
-} from "./index-3djthcm6.js";
+} from "./index-27az1qb1.js";
 
 // src/lib/apply.ts
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, realpathSync, writeFileSync } from "fs";