@webpresso/agent-kit 3.3.2 → 3.3.4

package/dist/esm/utils/package-root.js

@@ -0,0 +1,82 @@
+/**
+ * Locate an installed package's root directory from its bare name.
+ *
+ * The obvious spelling — `require.resolve("<name>/package.json")` — is a trap.
+ * Node honours the target package's `exports` map, and a package that declares
+ * only `"."` (rulesync) makes that throw `ERR_PACKAGE_PATH_NOT_EXPORTED`. Every
+ * caller in this repo wrapped it in `try {} catch { return null }`, so the throw
+ * turned into a silently missing capability rather than a visible failure.
+ *
+ * Resolving the package's exported entry works instead, because any package
+ * meant to be imported has one. From there, walk up to the directory whose
+ * `package.json` actually declares that name — the entry may sit several levels
+ * deep (`<root>/dist/index.cjs`).
+ *
+ * Caveat worth knowing before reusing this: `resolve` runs under the CJS
+ * `require` condition. A package whose every export condition is `import`
+ * (ESM-only, as `@webpresso/agent-kit` itself is) has no entry resolvable this
+ * way at all. Such a package must export a condition-free `"./package.json"`
+ * target instead; this helper cannot rescue it.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+const DEFAULT_MAX_WALK_DEPTH = 8;
+export function readPackageManifest(packageRoot) {
+    const manifestPath = join(packageRoot, "package.json");
+    if (!existsSync(manifestPath))
+        return null;
+    try {
+        return JSON.parse(readFileSync(manifestPath, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function declaresPackageName(packageRoot, name) {
+    return readPackageManifest(packageRoot)?.name === name;
+}
+/**
+ * @param name Bare package name, scoped or unscoped (`rulesync`, `@scope/pkg`).
+ * @returns The package root directory, or `null` when it cannot be resolved.
+ */
+export function resolvePackageRoot(name, resolver, maxDepth = DEFAULT_MAX_WALK_DEPTH) {
+    let dir;
+    try {
+        // Prefer the explicit manifest subpath when the package exports it, since
+        // that lands on the root directly; fall back to the package entry.
+        dir = dirname(resolveFirst(resolver, [`${name}/package.json`, name]));
+    }
+    catch {
+        return null;
+    }
+    for (let depth = 0; depth < maxDepth; depth += 1) {
+        // Skip nested manifests (a bundled dependency) until the name matches.
+        if (declaresPackageName(dir, name))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+    return null;
+}
+function resolveFirst(resolver, specifiers) {
+    let lastError;
+    for (const specifier of specifiers) {
+        try {
+            return resolver.resolve(specifier);
+        }
+        catch (error) {
+            lastError = error;
+        }
+    }
+    throw lastError instanceof Error ? lastError : new Error(`Cannot resolve ${specifiers[0]}`);
+}
+/** Convenience wrapper: the installed `version` of `name`, or `null`. */
+export function resolvePackageVersion(name, resolver) {
+    const root = resolvePackageRoot(name, resolver);
+    if (!root)
+        return null;
+    const version = readPackageManifest(root)?.version;
+    return typeof version === "string" ? version : null;
+}

package/dist/esm/worktrees/git-metadata.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Git-level worktree admin metadata reconciliation.
+ *
+ * agent-kit keeps its own managed worktree registry, but git keeps a SEPARATE
+ * admin record per linked worktree under `.git/worktrees/<id>`. Deleting a
+ * worktree directory by hand (`rm -rf`) leaves that git record behind, still
+ * claiming the branch it was checked out on — so a later `git checkout <branch>`
+ * fails with `'<branch>' is already used by worktree at <deleted path>` and the
+ * registry-only prune cannot clear it.
+ *
+ * Only `git worktree prune` drops those records, so every agent-kit prune path
+ * runs it BEFORE reading git liveness: a stale record otherwise reports the
+ * deleted path as live and pins the matching registry entry in place too.
+ */
+/** Minimal shape needed from a `git worktree list --porcelain` entry. */
+export interface PrunableWorktreeCandidate {
+    readonly path: string;
+    readonly prunable?: boolean;
+}
+export interface GitWorktreeMetadataPruneResult {
+    /** Paths git reported as prunable immediately before the prune ran. */
+    readonly prunedPaths: readonly string[];
+    /** Non-null when `git worktree prune` itself failed; nothing was reconciled. */
+    readonly error: string | null;
+}
+/**
+ * Clear git's stale linked-worktree admin records for `repoRoot`.
+ *
+ * `entries` is the caller's already-fetched porcelain listing and is used only
+ * to report WHICH paths were cleared; the prune itself is unconditional so a
+ * missing or stale listing can never leave a wedged branch behind.
+ */
+export declare function pruneStaleGitWorktreeMetadata(repoRoot: string, entries?: readonly PrunableWorktreeCandidate[]): GitWorktreeMetadataPruneResult;
+/**
+ * True when `path` no longer has a usable working tree on disk — either git
+ * already flagged the entry prunable, or the directory itself is gone.
+ *
+ * A missing directory makes `git status` fail, which dirty checks would
+ * otherwise report as "uncommitted changes" and refuse to act on.
+ */
+export declare function isStaleWorktreeRegistration(candidate: PrunableWorktreeCandidate | undefined, path: string, directoryExists: (target: string) => boolean): boolean;

package/dist/esm/worktrees/git-metadata.js

@@ -0,0 +1,48 @@
+/**
+ * Git-level worktree admin metadata reconciliation.
+ *
+ * agent-kit keeps its own managed worktree registry, but git keeps a SEPARATE
+ * admin record per linked worktree under `.git/worktrees/<id>`. Deleting a
+ * worktree directory by hand (`rm -rf`) leaves that git record behind, still
+ * claiming the branch it was checked out on — so a later `git checkout <branch>`
+ * fails with `'<branch>' is already used by worktree at <deleted path>` and the
+ * registry-only prune cannot clear it.
+ *
+ * Only `git worktree prune` drops those records, so every agent-kit prune path
+ * runs it BEFORE reading git liveness: a stale record otherwise reports the
+ * deleted path as live and pins the matching registry entry in place too.
+ */
+import { spawnSync } from "node:child_process";
+const GIT_PRUNE_TIMEOUT_MS = 10_000;
+/**
+ * Clear git's stale linked-worktree admin records for `repoRoot`.
+ *
+ * `entries` is the caller's already-fetched porcelain listing and is used only
+ * to report WHICH paths were cleared; the prune itself is unconditional so a
+ * missing or stale listing can never leave a wedged branch behind.
+ */
+export function pruneStaleGitWorktreeMetadata(repoRoot, entries = []) {
+    const prunedPaths = entries.filter((entry) => entry.prunable === true).map((entry) => entry.path);
+    const pruned = spawnSync("git", ["worktree", "prune"], {
+        cwd: repoRoot,
+        encoding: "utf8",
+        // Bounded like every other external probe here: this is a fast local
+        // metadata rewrite, so exceeding the bound means git is wedged, not slow.
+        timeout: GIT_PRUNE_TIMEOUT_MS,
+    });
+    if (pruned.status !== 0) {
+        const detail = String(pruned.stderr || pruned.stdout || "").trim();
+        return { prunedPaths: [], error: detail || "git worktree prune failed" };
+    }
+    return { prunedPaths, error: null };
+}
+/**
+ * True when `path` no longer has a usable working tree on disk — either git
+ * already flagged the entry prunable, or the directory itself is gone.
+ *
+ * A missing directory makes `git status` fail, which dirty checks would
+ * otherwise report as "uncommitted changes" and refuse to act on.
+ */
+export function isStaleWorktreeRegistration(candidate, path, directoryExists) {
+    return candidate?.prunable === true || !directoryExists(path);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpresso/agent-kit",
-  "version": "3.3.2",
+  "version": "3.3.4",
   "private": false,
   "description": "TypeScript-first agent harness for guarded develop/deploy workflows: wp CLI gates, MCP tools, hooks, memory, worktrees, secrets, audits, and evidence checks.",
   "keywords": [
@@ -78,6 +78,8 @@
     "#worktrees/*": "./src/worktrees/*.ts",
     "#fleet/*.js": "./src/fleet/*.ts",
     "#fleet/*": "./src/fleet/*.ts",
+    "#compose/*.js": "./src/compose/*.ts",
+    "#compose/*": "./src/compose/*.ts",
     "#cli/auto-update/*.js": "./src/cli/auto-update/*.ts",
     "#cli/auto-update/*": "./src/cli/auto-update/*.ts",
     "#cli/*.js": "./src/cli/*.ts",
@@ -298,12 +300,7 @@
         "default": "./dist/esm/local.js"
       }
     },
-    "./oxlint": {
-      "import": {
-        "types": "./dist/esm/config/oxlint/index.d.ts",
-        "default": "./dist/esm/config/oxlint/index.js"
-      }
-    },
+    "./package.json": "./package.json",
     "./symlinker": {
       "import": {
         "types": "./dist/esm/symlinker/index.d.ts",
@@ -353,7 +350,7 @@
   },
   "scripts": {
     "setup:agent": "./bin/wp setup",
-    "build": "tshy && ./bin/wp format --file package.json && bun src/build/blueprint-migration-assets.ts && bun src/build/sast-rule-assets.ts && bun src/build/generate-oxlintrc.ts && bun src/build/normalize-tsconfig-json-exports.ts && vp run chmod-bins",
+    "build": "pnpm --filter @webpresso/agent-core run build && pnpm --filter @webpresso/agent-config run build && tshy && ./bin/wp format --file package.json && bun src/build/blueprint-migration-assets.ts && bun src/build/sast-rule-assets.ts && bun src/build/generate-oxlintrc.ts && bun src/build/vendor-oxlint-plugins.ts && bun src/build/normalize-tsconfig-json-exports.ts && vp run chmod-bins",
     "build:runtime-binaries": "bun scripts/build-runtime-binaries.ts",
     "bench:hooks": "bun scripts/bench-hooks.ts",
     "stage:plugin-runtime": "bun scripts/stage-plugin-runtime-artifacts.ts",
@@ -444,7 +441,7 @@
     "ora": "^9.4.1",
     "proper-lockfile": "^4.1.2",
     "react": "^19.2.7",
-    "rulesync": "14.0.1",
+    "rulesync": "15.0.0",
     "secretlint": "^13.0.2",
     "typescript": "^7.0.2",
     "yaml": "^2.9.0",
@@ -488,7 +485,7 @@
       "./e2e-preset/playwright": "./src/config/e2e-preset/playwright.ts",
       "./format": "./src/format/index.ts",
       "./local": "./src/local.ts",
-      "./oxlint": "./src/config/oxlint/index.ts",
+      "./package.json": "./package.json",
       "./symlinker": "./src/symlinker/index.ts",
       "./test": "./src/test/index.ts",
       "./test-preset": "./src/config/test-preset/index.ts",
@@ -505,19 +502,28 @@
   "packageManager": "pnpm@11.10.0",
   "webpresso": {
     "agentConfigVersion": "0.1.5",
+    "dependencyFreshnessExceptions": [
+      {
+        "package": "@xterm/xterm",
+        "reason": "Pinned to the 5.5 major the desktop-pty-loadtest spike actually measured. The spike's GUI performance gate for the terminal pane is still recorded as pending, so adopting the 6.0 renderer major would make that structural evidence non-transferable and leave apps/desktop with no supporting measurement at all. Upgrading is a separate change that must carry its own measurement.",
+        "owner": "ozby",
+        "expiry": "2026-10-31",
+        "linkedIssue": "https://github.com/webpresso/agent-kit/pull/889"
+      }
+    ],
     "setupWpActionRef": "c2c71a7a4be446fc6858e6b57bf55a11ccfa2d88"
   },
   "optionalDependencies": {
-    "@webpresso/agent-kit-runtime-darwin-arm64": "3.3.2",
-    "@webpresso/agent-kit-runtime-darwin-x64": "3.3.2",
-    "@webpresso/agent-kit-runtime-linux-x64": "3.3.2",
-    "@webpresso/agent-kit-runtime-linux-arm64": "3.3.2",
-    "@webpresso/agent-kit-runtime-windows-x64": "3.3.2",
-    "@webpresso/agent-kit-session-memory-darwin-x64": "3.3.2",
-    "@webpresso/agent-kit-session-memory-darwin-arm64": "3.3.2",
-    "@webpresso/agent-kit-session-memory-linux-x64": "3.3.2",
-    "@webpresso/agent-kit-session-memory-linux-arm64": "3.3.2",
-    "@webpresso/agent-kit-session-memory-win32-x64": "3.3.2",
-    "@webpresso/agent-kit-session-memory-win32-arm64": "3.3.2"
+    "@webpresso/agent-kit-runtime-darwin-arm64": "3.3.4",
+    "@webpresso/agent-kit-runtime-darwin-x64": "3.3.4",
+    "@webpresso/agent-kit-runtime-linux-x64": "3.3.4",
+    "@webpresso/agent-kit-runtime-linux-arm64": "3.3.4",
+    "@webpresso/agent-kit-runtime-windows-x64": "3.3.4",
+    "@webpresso/agent-kit-session-memory-darwin-x64": "3.3.4",
+    "@webpresso/agent-kit-session-memory-darwin-arm64": "3.3.4",
+    "@webpresso/agent-kit-session-memory-linux-x64": "3.3.4",
+    "@webpresso/agent-kit-session-memory-linux-arm64": "3.3.4",
+    "@webpresso/agent-kit-session-memory-win32-x64": "3.3.4",
+    "@webpresso/agent-kit-session-memory-win32-arm64": "3.3.4"
   }
 }

package/dist/esm/config/oxlint/code-safety.d.ts

@@ -1,18 +0,0 @@
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "as-any-audit": {
-            create(context: any): {
-                TSAsExpression(node: any): void;
-            };
-        };
-        "no-swallowed-errors": {
-            create(context: any): {
-                CatchClause(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/foundation-purity.d.ts

@@ -1,21 +0,0 @@
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-framework-imports": {
-            create(context: any): {
-                ImportDeclaration?: undefined;
-                ExportNamedDeclaration?: undefined;
-                ExportAllDeclaration?: undefined;
-                ImportExpression?: undefined;
-            } | {
-                ImportDeclaration(node: any): void;
-                ExportNamedDeclaration(node: any): void;
-                ExportAllDeclaration(node: any): void;
-                ImportExpression(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/graphql-conventions.d.ts

@@ -1,23 +0,0 @@
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-singular-graphql-fields": {
-            create(context: any): {
-                TemplateLiteral(node: any): void;
-                Literal(node: any): void;
-            };
-        };
-        "no-inline-graphql-in-app": {
-            create(context: any): {
-                TaggedTemplateExpression?: undefined;
-                TemplateLiteral?: undefined;
-            } | {
-                TaggedTemplateExpression(node: any): void;
-                TemplateLiteral(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/import-hygiene.d.ts

@@ -1,34 +0,0 @@
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-relative-parent-imports": {
-            create(context: any): {
-                ImportDeclaration(node: any): void;
-                ExportNamedDeclaration(node: any): void;
-                ExportAllDeclaration(node: any): void;
-                ImportExpression(node: any): void;
-            };
-        };
-        "no-src-path-imports": {
-            create(context: any): {
-                ImportDeclaration(node: any): void;
-            };
-        };
-        "no-relative-mock-paths": {
-            create(context: any): {
-                CallExpression(node: any): void;
-            };
-        };
-        "no-forbidden-package-imports": {
-            create(context: any): {
-                ImportDeclaration(node: any): void;
-                ExportNamedDeclaration(node: any): void;
-                ExportAllDeclaration(node: any): void;
-                ImportExpression(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/index.d.ts

@@ -1,22 +0,0 @@
-import codeSafety from "./code-safety.js";
-import foundationPurity from "./foundation-purity.js";
-import graphqlConventions from "./graphql-conventions.js";
-import importHygiene from "./import-hygiene.js";
-import monorepoNpaths from "./monorepo-paths.js";
-import queryPatterns from "./query-patterns.js";
-import testingQuality from "./testing-quality.js";
-import tierBoundaries from "./tier-boundaries.js";
-type OxlintRuleSeverity = "error";
-interface OxlintPlugin {
-    meta: {
-        name: string;
-    };
-    rules: Record<string, unknown>;
-}
-export { codeSafety, foundationPurity, graphqlConventions, importHygiene, monorepoNpaths, queryPatterns, testingQuality, tierBoundaries, };
-export declare const plugins: Record<string, OxlintPlugin>;
-export declare const rules: Record<string, OxlintRuleSeverity>;
-export declare const config: {
-    plugins: Record<string, OxlintPlugin>;
-    rules: Record<string, "error">;
-};

package/dist/esm/config/oxlint/index.js

@@ -1,28 +0,0 @@
-import codeSafety from "./code-safety.js";
-import foundationPurity from "./foundation-purity.js";
-import graphqlConventions from "./graphql-conventions.js";
-import importHygiene from "./import-hygiene.js";
-import monorepoNpaths from "./monorepo-paths.js";
-import queryPatterns from "./query-patterns.js";
-import testingQuality from "./testing-quality.js";
-import tierBoundaries from "./tier-boundaries.js";
-export { codeSafety, foundationPurity, graphqlConventions, importHygiene, monorepoNpaths, queryPatterns, testingQuality, tierBoundaries, };
-const pluginEntries = [
-    codeSafety,
-    foundationPurity,
-    graphqlConventions,
-    importHygiene,
-    monorepoNpaths,
-    queryPatterns,
-    testingQuality,
-    tierBoundaries,
-].map((plugin) => [plugin.meta.name, plugin]);
-export const plugins = Object.fromEntries(pluginEntries);
-export const rules = Object.fromEntries(pluginEntries.flatMap(([pluginName, plugin]) => Object.keys(plugin.rules).map((ruleName) => [
-    `${pluginName}/${ruleName}`,
-    "error",
-])));
-export const config = {
-    plugins,
-    rules,
-};

package/dist/esm/config/oxlint/monorepo-paths.d.ts

@@ -1,22 +0,0 @@
-export declare function hardcodedRepoRootDepth(args: any): {
-    depth: number;
-    index: number;
-} | null;
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-hardcoded-repo-root": {
-            create(context: any): {
-                CallExpression(node: any): void;
-            };
-        };
-        "no-cross-package-paths": {
-            create(context: any): {
-                CallExpression(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/query-patterns.d.ts

@@ -1,24 +0,0 @@
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-adhoc-useQuery": {
-            create(context: any): {
-                CallExpression?: undefined;
-            } | {
-                CallExpression(node: any): void;
-            };
-        };
-        "no-isLoading-on-queries": {
-            create(context: any): {
-                VariableDeclarator?: undefined;
-                MemberExpression?: undefined;
-            } | {
-                VariableDeclarator(node: any): void;
-                MemberExpression(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/testing-quality.d.ts

@@ -1,35 +0,0 @@
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-weak-assertions": {
-            create(context: any): {
-                CallExpression(node: any): void;
-            };
-        };
-        "no-bare-spy-assertions": {
-            create(context: any): {
-                CallExpression(node: any): void;
-            };
-        };
-        "no-internal-mocks": {
-            create(context: any): {
-                CallExpression(node: any): void;
-            };
-        };
-        "no-real-timers-in-tests": {
-            create(context: any): {
-                NewExpression(node: any): void;
-            };
-        };
-        "no-cold-dynamic-import": {
-            create(context: any): {
-                CallExpression(node: any): void;
-                "CallExpression:exit"(node: any): void;
-                ImportExpression(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/config/oxlint/tier-boundaries.d.ts

@@ -1,35 +0,0 @@
-export declare function resolveFileTierContext(filename: any): {
-    kind: string;
-    packageName: any;
-    tier: number;
-} | {
-    kind: string;
-} | null;
-export declare function resolveImportTierContext(source: any): {
-    kind: string;
-    packageName: any;
-    tier: number;
-} | {
-    kind: string;
-} | null;
-declare const plugin: {
-    meta: {
-        name: string;
-    };
-    rules: {
-        "no-higher-tier-imports": {
-            create(context: any): {
-                ImportDeclaration?: undefined;
-                ExportNamedDeclaration?: undefined;
-                ExportAllDeclaration?: undefined;
-                ImportExpression?: undefined;
-            } | {
-                ImportDeclaration(node: any): void;
-                ExportNamedDeclaration(node: any): void;
-                ExportAllDeclaration(node: any): void;
-                ImportExpression(node: any): void;
-            };
-        };
-    };
-};
-export default plugin;

package/dist/esm/output-transforms/rulesync.d.ts

@@ -1,2 +0,0 @@
-import type { TransformContext, TransformResult } from "./index.js";
-export declare function rulesyncTransform(rawOutput: string | undefined, context: TransformContext): TransformResult;

package/dist/esm/output-transforms/rulesync.js

@@ -1,79 +0,0 @@
-import { createTransformResult } from "./metadata.js";
-import { passthroughTransform } from "./passthrough.js";
-const MAX_OUTPUT_BYTES = 4_000;
-// Matches: ✓ Claude Code: 3 skills, 2 commands, 1 agent
-const SUCCESS_LINE_RE = /^[✓✔]\s+([\w\s]+?):\s+(\d+)\s+skills?,\s+(\d+)\s+commands?,\s+(\d+)\s+agents?/u;
-// Matches: ✗ OpenCode: failed to write .opencode/rules/foo.md: EACCES
-const FAILURE_LINE_RE = /^[✗✘]\s+([\w\s]+?):\s+(.+)$/u;
-// Summary line: Generated in 120ms
-const SUMMARY_LINE_RE = /^Generated in \d+ms$/u;
-function parseRulesyncOutput(raw) {
-    const targets = [];
-    let hasSummaryLine = false;
-    for (const line of raw.split(/\r?\n/u)) {
-        const trimmed = line.trim();
-        if (!trimmed)
-            continue;
-        if (SUMMARY_LINE_RE.test(trimmed)) {
-            hasSummaryLine = true;
-            continue;
-        }
-        const successMatch = SUCCESS_LINE_RE.exec(trimmed);
-        if (successMatch) {
-            targets.push({
-                target: successMatch[1]?.trim() ?? "",
-                skills: parseInt(successMatch[2] ?? "0", 10),
-                commands: parseInt(successMatch[3] ?? "0", 10),
-                agents: parseInt(successMatch[4] ?? "0", 10),
-                failed: false,
-            });
-            continue;
-        }
-        const failureMatch = FAILURE_LINE_RE.exec(trimmed);
-        if (failureMatch) {
-            targets.push({
-                target: failureMatch[1]?.trim() ?? "",
-                skills: 0,
-                commands: 0,
-                agents: 0,
-                failed: true,
-                failureDetail: failureMatch[2]?.trim(),
-            });
-        }
-    }
-    return { targets, hasSummaryLine };
-}
-function buildSummaryLine(targets) {
-    const total = targets.length;
-    const failed = targets.filter((t) => t.failed).length;
-    const passed = total - failed;
-    if (failed === 0)
-        return `rulesync: ${passed} target${passed === 1 ? "" : "s"} synced`;
-    return `rulesync: ${passed}/${total} targets synced, ${failed} failed`;
-}
-export function rulesyncTransform(rawOutput, context) {
-    if (!rawOutput)
-        return {};
-    const { targets, hasSummaryLine } = parseRulesyncOutput(rawOutput);
-    if (targets.length === 0 && !hasSummaryLine) {
-        return passthroughTransform(rawOutput, context);
-    }
-    const failures = targets
-        .filter((t) => t.failed)
-        .map((t) => ({
-        message: t.failureDetail ? `${t.target}: ${t.failureDetail}` : `${t.target}: failed`,
-    }));
-    const summaryLine = buildSummaryLine(targets);
-    const successLines = targets
-        .filter((t) => !t.failed)
-        .map((t) => `  ${t.target}: ${t.skills} skills, ${t.commands} commands, ${t.agents} agents`);
-    const failureLines = targets
-        .filter((t) => t.failed)
-        .map((t) => `  ${t.target}: FAILED — ${t.failureDetail ?? "unknown error"}`);
-    const compactOutput = [summaryLine, ...successLines, ...failureLines].join("\n");
-    // Clip to 4000 bytes via createTransformResult
-    return createTransformResult(rawOutput, compactOutput.slice(0, MAX_OUTPUT_BYTES), context, {
-        tier: 1,
-        failures,
-    });
-}