agent-composer 0.1.0 → 0.1.2

package/dist/cli/init.d.ts

@@ -18,3 +18,25 @@ export interface InitResult {
     steps: InitStep[];
 }
 export declare function runInit(opts: InitOptions): InitResult;
+export interface GlobalInitOptions {
+    /** Override the global config dir (tests inject a tmpdir). Defaults to ~/.config/composer. */
+    globalDir?: string;
+    /** Override the user's Claude Code home dir (tests inject a tmpdir). Defaults to ~/.claude. */
+    claudeHome?: string;
+    verbose?: boolean;
+    defaultBaseUrl?: string;
+    defaultAuthToken?: string;
+    /** Skip plugin asset install (default: false — assets ARE installed). */
+    skipPluginAssets?: boolean;
+    /** Override the plugin source directory (tests inject). */
+    pluginSourceDir?: string;
+}
+/**
+ * User-level (global) bootstrap. Writes composer.config.json and .env.json
+ * to ~/.config/composer/ and patches ~/.claude/settings.json with the
+ * mcpServers.composer entry so new projects work without per-project init.
+ *
+ * Runtime lookup chain (see src/config/paths.ts) makes the global files
+ * apply automatically when a project has no local copy.
+ */
+export declare function runGlobalInit(opts?: GlobalInitOptions): InitResult;

package/dist/cli/init.js

@@ -10,7 +10,10 @@
 // Idempotent: each step checks existing state and skips if already correct.
 // Never overwrites a present, non-default file (no --force flag in this slice).
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
 import { join, resolve } from "node:path";
+import { globalConfigDir } from "../config/paths.js";
+import { installPluginAssets } from "./install-plugin.js";
 const DEFAULT_COMPOSER_CONFIG = {
     roles: {
         researcher: { provider: "cli", cli: ["agy", "--dangerously-skip-permissions", "-p"] },
@@ -63,6 +66,90 @@ export function runInit(opts) {
     log("  4. Smoke-test the autoresearch loop: /evolve --eval-mode synthetic");
     return { steps };
 }
+/**
+ * User-level (global) bootstrap. Writes composer.config.json and .env.json
+ * to ~/.config/composer/ and patches ~/.claude/settings.json with the
+ * mcpServers.composer entry so new projects work without per-project init.
+ *
+ * Runtime lookup chain (see src/config/paths.ts) makes the global files
+ * apply automatically when a project has no local copy.
+ */
+export function runGlobalInit(opts = {}) {
+    const dir = opts.globalDir ?? globalConfigDir();
+    const claudeHome = opts.claudeHome ?? join(homedir(), ".claude");
+    const steps = [];
+    const log = (...args) => {
+        if (opts.verbose !== false)
+            process.stdout.write(args.map(String).join(" ") + "\n");
+    };
+    steps.push(ensureDir(dir, "global config dir"));
+    steps.push(writeGlobalComposerConfig(dir));
+    steps.push(writeGlobalEnvJson(dir, opts.defaultBaseUrl ?? DEFAULT_BASE_URL, opts.defaultAuthToken ?? DEFAULT_AUTH_TOKEN_PLACEHOLDER));
+    steps.push(ensureDir(claudeHome, "~/.claude directory"));
+    steps.push(wireGlobalMcpServer(claudeHome));
+    // Wave 4 0.1.2: drop plugin assets at user-level so the orchestrator
+    // skill + subagents + /evolve + boundary hook auto-load in every project.
+    if (!opts.skipPluginAssets) {
+        const pluginSteps = installPluginAssets({
+            claudeHome,
+            pluginSourceDir: opts.pluginSourceDir,
+        });
+        steps.push(...pluginSteps);
+    }
+    for (const s of steps) {
+        const tag = s.status === "created" ? "+" : s.status === "updated" ? "~" : "=";
+        log(`  ${tag} ${s.name}${s.path ? ` (${s.path})` : ""}${s.reason ? ` — ${s.reason}` : ""}`);
+    }
+    log("");
+    log("composer init --global: done.");
+    log("");
+    log("Next steps:");
+    log(`  1. Fill ${join(dir, ".env.json")} with real ANTHROPIC_AUTH_TOKEN.`);
+    log("  2. Launch Claude Code from ANY project: claude");
+    log("     (no per-project init required — runtime falls back to global config + env)");
+    log("  3. Per-project overrides still work: drop composer.config.json or .env.json in cwd.");
+    return { steps };
+}
+function ensureDir(dirPath, label) {
+    if (existsSync(dirPath))
+        return { name: label, status: "skipped", path: dirPath, reason: "already exists" };
+    mkdirSync(dirPath, { recursive: true });
+    return { name: label, status: "created", path: dirPath };
+}
+function writeGlobalComposerConfig(dir) {
+    const path = join(dir, "composer.config.json");
+    if (existsSync(path)) {
+        return { name: "global composer.config.json", status: "skipped", path, reason: "already exists; not overwritten" };
+    }
+    writeFileSync(path, JSON.stringify(DEFAULT_COMPOSER_CONFIG, null, 2) + "\n", "utf8");
+    return { name: "global composer.config.json", status: "created", path };
+}
+function writeGlobalEnvJson(dir, baseUrl, token) {
+    const path = join(dir, ".env.json");
+    if (existsSync(path)) {
+        return { name: "global .env.json", status: "skipped", path, reason: "already exists; not overwritten" };
+    }
+    writeFileSync(path, JSON.stringify(DEFAULT_ENV_TEMPLATE(baseUrl, token), null, 2) + "\n", "utf8");
+    return { name: "global .env.json", status: "created", path, reason: "placeholder — fill with real token" };
+}
+function wireGlobalMcpServer(claudeHome) {
+    const path = join(claudeHome, "settings.json");
+    if (!existsSync(path)) {
+        writeFileSync(path, JSON.stringify(DEFAULT_MCP_SETTINGS, null, 2) + "\n", "utf8");
+        return { name: "~/.claude/settings.json", status: "created", path, reason: "mcpServers.composer wired (user-level)" };
+    }
+    const current = JSON.parse(readFileSync(path, "utf8"));
+    const mcpServers = current["mcpServers"] ?? {};
+    if (mcpServers["composer"]) {
+        return { name: "~/.claude/settings.json", status: "skipped", path, reason: "mcpServers.composer already wired" };
+    }
+    const merged = {
+        ...current,
+        mcpServers: { ...mcpServers, composer: DEFAULT_MCP_SETTINGS.mcpServers.composer },
+    };
+    writeFileSync(path, JSON.stringify(merged, null, 2) + "\n", "utf8");
+    return { name: "~/.claude/settings.json", status: "updated", path, reason: "mcpServers.composer wired (user-level)" };
+}
 function ensureClaudeDir(cwd) {
     const path = join(cwd, ".claude");
     if (existsSync(path))

package/dist/cli/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,yEAAyE;AACzE,yBAAyB;AACzB,qEAAqE;AACrE,yCAAyC;AACzC,qCAAqC;AACrC,yDAAyD;AACzD,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyB1C,MAAM,uBAAuB,GAAG;IAC9B,KAAK,EAAE;QACL,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,gCAAgC,EAAE,IAAI,CAAC,EAAE;QACrF,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,SAAS,EAAE,sBAAsB,EAAE;QAC9G,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,gCAAgC,EAAE,IAAI,CAAC,EAAE;KACpF;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,GAAG;QAClB,gBAAgB,EAAE,GAAG;KACtB;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;IAChE,kBAAkB,EAAE,OAAO;IAC3B,oBAAoB,EAAE,KAAK;CAC5B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAC1D,MAAM,8BAA8B,GAAG,uDAAuD,CAAC;AAE/F,MAAM,oBAAoB,GAAG;IAC3B,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;SAC/B;KACF;CACF,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;QACjC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CACR,gBAAgB,CACd,GAAG,EACH,IAAI,CAAC,cAAc,IAAI,gBAAgB,EACvC,IAAI,CAAC,gBAAgB,IAAI,8BAA8B,CACxD,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9E,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,aAAa,CAAC,CAAC;IACnB,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAChF,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACvC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IACtE,GAAG,CAAC,sEAAsE,CAAC,CAAC;IAE5E,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/G,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC9G,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAe,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACnG,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC;IAC9E,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,iBAAiB,EAAE,CAAC;IACxG,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;IAC7F,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,KAAK,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACzG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IAClF,MAAM,UAAU,GAAI,OAAO,CAAC,YAAY,CAAyC,IAAI,EAAE,CAAC;IACxF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACjH,CAAC;IACD,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,QAAQ,EAAE;KAClF,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;AACzG,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,yEAAyE;AACzE,yBAAyB;AACzB,qEAAqE;AACrE,yCAAyC;AACzC,qCAAqC;AACrC,yDAAyD;AACzD,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAyB1D,MAAM,uBAAuB,GAAG;IAC9B,KAAK,EAAE;QACL,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,gCAAgC,EAAE,IAAI,CAAC,EAAE;QACrF,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,SAAS,EAAE,sBAAsB,EAAE;QAC9G,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,gCAAgC,EAAE,IAAI,CAAC,EAAE;KACpF;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,GAAG;QAClB,gBAAgB,EAAE,GAAG;KACtB;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;IAChE,kBAAkB,EAAE,OAAO;IAC3B,oBAAoB,EAAE,KAAK;CAC5B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAC1D,MAAM,8BAA8B,GAAG,uDAAuD,CAAC;AAE/F,MAAM,oBAAoB,GAAG;IAC3B,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;SAC/B;KACF;CACF,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;QACjC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CACR,gBAAgB,CACd,GAAG,EACH,IAAI,CAAC,cAAc,IAAI,gBAAgB,EACvC,IAAI,CAAC,gBAAgB,IAAI,8BAA8B,CACxD,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9E,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,aAAa,CAAC,CAAC;IACnB,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAChF,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACvC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IACtE,GAAG,CAAC,sEAAsE,CAAC,CAAC;IAE5E,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAgBD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,OAA0B,EAAE;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;QACjC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CACR,kBAAkB,CAChB,GAAG,EACH,IAAI,CAAC,cAAc,IAAI,gBAAgB,EACvC,IAAI,CAAC,gBAAgB,IAAI,8BAA8B,CACxD,CACF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE5C,qEAAqE;IACrE,0EAA0E;IAC1E,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,mBAAmB,CAAC;YACtC,UAAU;YACV,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9E,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACrC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,aAAa,CAAC,CAAC;IACnB,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAC3E,GAAG,CAAC,kDAAkD,CAAC,CAAC;IACxD,GAAG,CAAC,iFAAiF,CAAC,CAAC;IACvF,GAAG,CAAC,uFAAuF,CAAC,CAAC;IAE7F,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,KAAa;IAC/C,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC5G,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrH,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,OAAe,EAAE,KAAa;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC1G,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACxH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IAClF,MAAM,UAAU,GAAI,OAAO,CAAC,YAAY,CAAyC,IAAI,EAAE,CAAC;IACxF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACnH,CAAC;IACD,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,QAAQ,EAAE;KAClF,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;AACxH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/G,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC9G,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAe,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACnG,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC;IAC9E,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,iBAAiB,EAAE,CAAC;IACxG,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;IAC7F,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,KAAK,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACzG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IAClF,MAAM,UAAU,GAAI,OAAO,CAAC,YAAY,CAAyC,IAAI,EAAE,CAAC;IACxF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACjH,CAAC;IACD,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,QAAQ,EAAE;KAClF,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;AACzG,CAAC"}

package/dist/cli/install-plugin.d.ts

@@ -0,0 +1,24 @@
+import type { InitStep } from "./init.js";
+/**
+ * Resolve the plugin source directory shipped with this package.
+ * dist/cli/install-plugin.js (3 levels up) → package root → plugin/composer-mastermind/
+ */
+export declare function defaultPluginSourceDir(): string;
+export interface InstallPluginOptions {
+    /** Claude Code user home (defaults to $HOME/.claude). Tests inject a tmpdir. */
+    claudeHome: string;
+    /** Plugin source directory (defaults to defaultPluginSourceDir()). Tests inject. */
+    pluginSourceDir?: string;
+}
+/**
+ * Copy plugin assets into Claude Code user-level directories so they
+ * auto-load in every project. Idempotent — never overwrites a present file.
+ *
+ * Layout written:
+ *   <claudeHome>/skills/composer-mastermind/SKILL.md
+ *   <claudeHome>/agents/{coder,researcher,reviewer}.md
+ *   <claudeHome>/commands/evolve.md
+ *   <claudeHome>/hooks/composer-boundary_guard.sh
+ *   <claudeHome>/settings.json — patched with PreToolUse entry
+ */
+export declare function installPluginAssets(opts: InstallPluginOptions): InitStep[];

package/dist/cli/install-plugin.js

@@ -0,0 +1,124 @@
+// Wave 4 0.1.2 — user-level plugin asset install.
+//
+// Drops composer-mastermind assets (SKILL.md, subagents, /evolve command,
+// boundary_guard hook) into the user's ~/.claude/ tree so Claude Code
+// auto-discovers them in every project. Companion to runGlobalInit().
+//
+// Source assets ship in the npm tarball under plugin/composer-mastermind/
+// (added to package.json files whitelist in 0.1.2).
+import { existsSync, mkdirSync, copyFileSync, chmodSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+/**
+ * Resolve the plugin source directory shipped with this package.
+ * dist/cli/install-plugin.js (3 levels up) → package root → plugin/composer-mastermind/
+ */
+export function defaultPluginSourceDir() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, "..", "..", "plugin", "composer-mastermind");
+}
+/**
+ * Copy plugin assets into Claude Code user-level directories so they
+ * auto-load in every project. Idempotent — never overwrites a present file.
+ *
+ * Layout written:
+ *   <claudeHome>/skills/composer-mastermind/SKILL.md
+ *   <claudeHome>/agents/{coder,researcher,reviewer}.md
+ *   <claudeHome>/commands/evolve.md
+ *   <claudeHome>/hooks/composer-boundary_guard.sh
+ *   <claudeHome>/settings.json — patched with PreToolUse entry
+ */
+export function installPluginAssets(opts) {
+    const src = opts.pluginSourceDir ?? defaultPluginSourceDir();
+    const claudeHome = opts.claudeHome;
+    const steps = [];
+    steps.push(copyOne(join(src, "skills/composer-mastermind/SKILL.md"), join(claudeHome, "skills/composer-mastermind/SKILL.md"), "composer-mastermind SKILL.md"));
+    const agentsSrc = join(src, "agents");
+    if (existsSync(agentsSrc)) {
+        for (const file of readdirSync(agentsSrc).sort()) {
+            if (!file.endsWith(".md"))
+                continue;
+            steps.push(copyOne(join(agentsSrc, file), join(claudeHome, "agents", file), `agent ${file}`));
+        }
+    }
+    const commandsSrc = join(src, "commands");
+    if (existsSync(commandsSrc)) {
+        for (const file of readdirSync(commandsSrc).sort()) {
+            if (!file.endsWith(".md"))
+                continue;
+            steps.push(copyOne(join(commandsSrc, file), join(claudeHome, "commands", file), `command /${file.replace(/\.md$/, "")}`));
+        }
+    }
+    // Boundary hook — copy script + register in settings.json
+    const hookSrc = join(src, "hooks", "boundary_guard.sh");
+    const hookDest = join(claudeHome, "hooks", "composer-boundary_guard.sh");
+    steps.push(copyOne(hookSrc, hookDest, "composer boundary_guard.sh hook script", { exec: true }));
+    steps.push(wireBoundaryHook(claudeHome, hookDest));
+    return steps;
+}
+function copyOne(srcPath, destPath, label, opts = {}) {
+    if (!existsSync(srcPath)) {
+        return { name: label, status: "skipped", reason: `source missing: ${srcPath}` };
+    }
+    if (existsSync(destPath)) {
+        return { name: label, status: "skipped", path: destPath, reason: "already present; not overwritten" };
+    }
+    mkdirSync(dirname(destPath), { recursive: true });
+    copyFileSync(srcPath, destPath);
+    if (opts.exec)
+        chmodSync(destPath, 0o755);
+    return { name: label, status: "created", path: destPath };
+}
+/**
+ * Patch <claudeHome>/settings.json hooks.PreToolUse with a composer
+ * boundary entry. Skip if an entry already references composer-boundary_guard.
+ */
+function wireBoundaryHook(claudeHome, hookScriptPath) {
+    const settingsPath = join(claudeHome, "settings.json");
+    const matcher = "Bash|Edit|Write|NotebookEdit";
+    const entry = {
+        matcher,
+        hooks: [{ type: "command", command: hookScriptPath }],
+    };
+    let current;
+    if (existsSync(settingsPath)) {
+        try {
+            current = JSON.parse(readFileSync(settingsPath, "utf8"));
+        }
+        catch {
+            return {
+                name: "~/.claude/settings.json boundary hook",
+                status: "skipped",
+                path: settingsPath,
+                reason: "settings.json not valid JSON; refusing to patch",
+            };
+        }
+    }
+    else {
+        mkdirSync(dirname(settingsPath), { recursive: true });
+        current = {};
+    }
+    const hooks = current["hooks"] ?? {};
+    const preToolUse = hooks["PreToolUse"] ?? [];
+    // Idempotency: skip if any existing PreToolUse entry already references our script.
+    const alreadyWired = preToolUse.some((e) => e.hooks?.some((h) => h.command === hookScriptPath));
+    if (alreadyWired) {
+        return {
+            name: "~/.claude/settings.json boundary hook",
+            status: "skipped",
+            path: settingsPath,
+            reason: "composer-boundary_guard already registered",
+        };
+    }
+    const nextPreToolUse = [...preToolUse, entry];
+    const nextHooks = { ...hooks, PreToolUse: nextPreToolUse };
+    const next = { ...current, hooks: nextHooks };
+    writeFileSync(settingsPath, JSON.stringify(next, null, 2) + "\n", "utf8");
+    return {
+        name: "~/.claude/settings.json boundary hook",
+        status: "updated",
+        path: settingsPath,
+        reason: `appended PreToolUse entry → ${hookScriptPath}`,
+    };
+}
+//# sourceMappingURL=install-plugin.js.map

package/dist/cli/install-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-plugin.js","sourceRoot":"","sources":["../../src/cli/install-plugin.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,sEAAsE;AACtE,EAAE;AACF,0EAA0E;AAC1E,oDAAoD;AAEpD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AACpE,CAAC;AASD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAChB,IAAI,CAAC,GAAG,EAAE,qCAAqC,CAAC,EAChD,IAAI,CAAC,UAAU,EAAE,qCAAqC,CAAC,EACvD,8BAA8B,CAC/B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAChB,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EACrB,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAChC,SAAS,IAAI,EAAE,CAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAChB,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EACvB,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAClC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,4BAA4B,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,wCAAwC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEnD,OAAO,KAAK,CAAC;AACf,CAAC;AAID,SAAS,OAAO,CAAC,OAAe,EAAE,QAAgB,EAAE,KAAa,EAAE,OAAiB,EAAE;IACpF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,OAAO,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACxG,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI;QAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,UAAkB,EAAE,cAAsB;IAClE,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,8BAA8B,CAAC;IAC/C,MAAM,KAAK,GAAG;QACZ,OAAO;QACP,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACtD,CAAC;IAEF,IAAI,OAAgC,CAAC;IACrC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA4B,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,IAAI,EAAE,uCAAuC;gBAC7C,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,iDAAiD;aAC1D,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAI,OAAO,CAAC,OAAO,CAAyC,IAAI,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAI,KAAK,CAAC,YAAY,CAAkF,IAAI,EAAE,CAAC;IAE/H,oFAAoF;IACpF,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC;IAChG,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,uCAAuC;YAC7C,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,4CAA4C;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9C,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,OAAO;QACL,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,+BAA+B,cAAc,EAAE;KACxD,CAAC;AACJ,CAAC"}

package/dist/config/env.d.ts

@@ -8,6 +8,12 @@ export interface ComposerEnv {
      */
     ANTHROPIC_MODEL?: string;
 }
+/**
+ * Reads `.env.json` via the path lookup chain (explicit > cwd > global).
+ * Returns `{}` if no file in the chain exists or any parse step fails — this
+ * loader is fail-silent by design (the registry surfaces missing-key errors
+ * later with better context).
+ */
 export declare function loadEnvJson(envPath?: string): ComposerEnv;
 export declare function applyEnvJson(envPath?: string): void;
 export declare function getEnv(): ComposerEnv;

package/dist/config/env.js

@@ -7,10 +7,21 @@
 // loud later if a required key is missing.
 import fs from "node:fs";
 import path from "node:path";
+import { resolveConfigPath } from "./paths.js";
 const DEFAULT_ENV_FILE = ".env.json";
-export function loadEnvJson(envPath = DEFAULT_ENV_FILE) {
-    const resolved = path.resolve(envPath);
-    if (!fs.existsSync(resolved))
+/**
+ * Reads `.env.json` via the path lookup chain (explicit > cwd > global).
+ * Returns `{}` if no file in the chain exists or any parse step fails — this
+ * loader is fail-silent by design (the registry surfaces missing-key errors
+ * later with better context).
+ */
+export function loadEnvJson(envPath) {
+    // If the caller passed an explicit path, use it directly (legacy behaviour
+    // for tests that pass a synthetic path). Otherwise resolve via the chain.
+    const resolved = envPath
+        ? path.resolve(envPath)
+        : resolveConfigPath(DEFAULT_ENV_FILE);
+    if (!resolved || !fs.existsSync(resolved))
         return {};
     let raw;
     try {

package/dist/config/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,2CAA2C;AAE3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC,MAAM,UAAU,WAAW,CAAC,UAAkB,gBAAgB;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,CAAC,kBAAkB,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,2CAA2C;AAE3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAa/C,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,OAAO;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACvB,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,oBAAoB,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,CAAC,kBAAkB,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config/loader.js

@@ -5,6 +5,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { ComposerConfigSchema } from "./schema.js";
+import { resolveConfigPath, globalConfigDir } from "./paths.js";
 export function parseConfig(input) {
     const result = ComposerConfigSchema.safeParse(input);
     if (!result.success) {
@@ -16,9 +17,17 @@ export function parseConfig(input) {
     return result.data;
 }
 export function loadConfig(configPath) {
-    const resolved = path.resolve(configPath);
-    if (!fs.existsSync(resolved)) {
-        throw new Error(`Composer config not found at ${resolved}`);
+    // Resolve via the lookup chain: explicit path > cwd > global config dir.
+    // Only throws when no file exists at any layer, so a user can drop
+    // composer.config.json at ~/.config/composer/ and have it apply everywhere.
+    const resolved = resolveConfigPath(configPath, configPath);
+    if (!resolved) {
+        const local = path.resolve(configPath);
+        const global = path.join(globalConfigDir(), configPath);
+        throw new Error(`Composer config not found. Looked in:\n` +
+            `  - ${local}\n` +
+            `  - ${global}\n` +
+            `Run \`agent-composer init\` (project) or \`agent-composer init --global\` (user-level).`);
     }
     const raw = fs.readFileSync(resolved, "utf8");
     let parsed;

package/dist/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,uEAAuE;AACvE,qEAAqE;AACrE,+DAA+D;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAuB,MAAM,aAAa,CAAC;AAExE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,uBAAuB,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,uEAAuE;AACvE,qEAAqE;AACrE,+DAA+D;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAuB,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,yEAAyE;IACzE,mEAAmE;IACnE,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,yCAAyC;YACzC,OAAO,KAAK,IAAI;YAChB,OAAO,MAAM,IAAI;YACjB,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,uBAAuB,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/config/paths.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Returns the directory where composer's user-level (global) config files live.
+ * Honours $XDG_CONFIG_HOME if set, otherwise defaults to ~/.config/composer.
+ */
+export declare function globalConfigDir(): string;
+/**
+ * Returns the first existing path from the lookup chain for a given filename
+ * (typically "composer.config.json" or ".env.json"). If an explicit path is
+ * provided AND it exists, that wins. Otherwise checks cwd, then global dir.
+ * Returns `null` if no file in the chain exists.
+ */
+export declare function resolveConfigPath(filename: string, explicitPath?: string): string | null;

package/dist/config/paths.js

@@ -0,0 +1,42 @@
+// Resolves global (user-home) and per-project paths for composer config + env.
+//
+// Lookup chain (in order):
+//   1. Explicit path override (COMPOSER_CONFIG / COMPOSER_ENV env var, or CLI arg)
+//   2. Per-project file in process.cwd()
+//   3. Global file at $XDG_CONFIG_HOME/composer/ (default ~/.config/composer/)
+//
+// The first existing file wins; if none exist, callers decide how to handle
+// (env loader returns {}, config loader throws).
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { resolve, join } from "node:path";
+/**
+ * Returns the directory where composer's user-level (global) config files live.
+ * Honours $XDG_CONFIG_HOME if set, otherwise defaults to ~/.config/composer.
+ */
+export function globalConfigDir() {
+    const xdg = process.env["XDG_CONFIG_HOME"];
+    const base = xdg && xdg.length > 0 ? xdg : join(homedir(), ".config");
+    return join(base, "composer");
+}
+/**
+ * Returns the first existing path from the lookup chain for a given filename
+ * (typically "composer.config.json" or ".env.json"). If an explicit path is
+ * provided AND it exists, that wins. Otherwise checks cwd, then global dir.
+ * Returns `null` if no file in the chain exists.
+ */
+export function resolveConfigPath(filename, explicitPath) {
+    if (explicitPath) {
+        const r = resolve(explicitPath);
+        if (existsSync(r))
+            return r;
+    }
+    const local = resolve(process.cwd(), filename);
+    if (existsSync(local))
+        return local;
+    const global = join(globalConfigDir(), filename);
+    if (existsSync(global))
+        return global;
+    return null;
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,2BAA2B;AAC3B,mFAAmF;AACnF,yCAAyC;AACzC,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,iDAAiD;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IACvE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.js

@@ -9,13 +9,19 @@ import { loadConfig } from "./config/loader.js";
 import { applyEnvJson } from "./config/env.js";
 import { ProviderRegistry } from "./registry.js";
 import { createComposerServer } from "./server.js";
-import { runInit } from "./cli/init.js";
+import { runInit, runGlobalInit } from "./cli/init.js";
 const CONFIG_PATH = process.env["COMPOSER_CONFIG"] ?? "composer.config.json";
 const ENV_PATH = process.env["COMPOSER_ENV"] ?? ".env.json";
 async function main() {
     const subcommand = process.argv[2];
+    const flag = process.argv[3];
     if (subcommand === "init") {
-        runInit({ cwd: process.cwd() });
+        if (flag === "--global") {
+            runGlobalInit({});
+        }
+        else {
+            runInit({ cwd: process.cwd() });
+        }
         return;
     }
     applyEnvJson(ENV_PATH);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,2EAA2E;AAC3E,kEAAkE;AAClE,EAAE;AACF,oDAAoD;AACpD,2EAA2E;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,sBAAsB,CAAC;AAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;AAE5D,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,wEAAwE;IACxE,2BAA2B;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mDAAmD,WAAW,IAAI,CACnE,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,2EAA2E;AAC3E,kEAAkE;AAClE,EAAE;AACF,oDAAoD;AACpD,2EAA2E;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,sBAAsB,CAAC;AAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;AAE5D,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,aAAa,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;IACT,CAAC;IAED,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,wEAAwE;IACxE,2BAA2B;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mDAAmD,WAAW,IAAI,CACnE,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-composer",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module",
   "description": "Multi-agent orchestration MCP server. Claude orchestrates; GLM and agy do the work.",
   "bin": {
@@ -8,6 +8,7 @@
   },
   "files": [
     "dist/",
+    "plugin/",
     "composer.config.schema.json",
     "README.md"
   ],

package/plugin/composer-mastermind/README.md

@@ -0,0 +1,50 @@
+# composer-mastermind
+
+> Multi-agent orchestrator plugin for Claude Code. Claude orchestrates; GLM and agy execute.
+
+## What it is
+
+Composer-mastermind is a Claude Code plugin that turns the main session into a coordinator. The orchestrator never writes code, runs bash, or edits files directly — instead it dispatches work through three subagents wired to the `agent-composer` MCP server:
+
+| Subagent | Tool | Role |
+|---|---|---|
+| `coder` | `mcp__composer__composer_code` | Writes code via GLM (Anthropic-compatible endpoint) |
+| `researcher` | `mcp__composer__composer_research` | Docs lookup + research via `agy` CLI (Gemini) |
+| `reviewer` | `mcp__composer__composer_review` | Code review via `agy` CLI |
+
+The orchestrator's allowed-tool surface is enforced by `boundary_guard.sh` — `Edit`, `Write`, `Bash`, `NotebookEdit` are denied; only the three composer MCP tools plus `Read`/`Glob` pass.
+
+## What's inside
+
+```
+composer-mastermind/
+├── plugin.json                              # this manifest
+├── skills/composer-mastermind/SKILL.md      # the orchestrator brain
+├── agents/                                  # haiku-wrapped subagent defs
+│   ├── coder.md
+│   ├── researcher.md
+│   └── reviewer.md
+├── commands/
+│   └── evolve.md                            # /evolve slash command (GEPA loop)
+└── hooks/
+    ├── boundary_guard.sh                    # PreToolUse fail-closed boundary
+    └── learn.sh                             # Stop hook — append user corrections
+```
+
+## Requires
+
+- `agent-composer` (peer; install via `npx agent-composer` or global npm install)
+- A `composer.config.json` + `.env.json` at the consumer project root (run `npx composer-mcp init` to scaffold; see ADR 0002 M0.3)
+- Claude Code ≥4.6
+
+## Self-evolution surface
+
+`/evolve --eval-mode real` mutates only the project-local copy of `SKILL.md` (`.claude/skills/composer-mastermind/SKILL.md`), never the plugin install. Plugin updates ship via npm; per-project skill drift is intentional. See ADR 0003 for the full mutation scope contract (S1 diff-path, S2 deny-list, S3 stat gate, S4 human-promote, S5 audit trail).
+
+## Source of truth
+
+This is the **frozen v0.1.0 snapshot** of the composer-monorepo's canonical assets. The development instance lives at the upstream repo's `.claude/` tree; releases re-sync via M0.5 (see `scripts/release-sync.mjs`).
+
+## License
+
+MIT.

package/plugin/composer-mastermind/agents/coder.md

@@ -0,0 +1,27 @@
+---
+name: coder
+description: Use when the orchestrator needs code written, refactored, debugged, or implemented. Delegates the actual coding to the composer_code MCP tool.
+tools: mcp__composer__composer_code, Read, Glob
+model: haiku
+---
+
+You are the Composer **Coder** subagent. Your only job is to call the
+`composer_code` MCP tool with the orchestrator's implementation request
+and return its output.
+
+# What you DO
+
+- Receive the orchestrator's `{ prompt, context? }` brief.
+- Use `Read` / `Glob` to pin exact file paths, surrounding code, and
+  imports into the `prompt` / `context` arguments — the coder provider
+  cannot see the repo itself.
+- Call `mcp__composer__composer_code` once.
+- Return the tool output verbatim (usually a diff or code block).
+
+# What you DO NOT do
+
+- DO NOT write code yourself.
+- DO NOT edit files.
+- DO NOT execute commands.
+- DO NOT call any tool other than `composer_code`, `Read`, or `Glob`.
+- DO NOT critique the returned code — that is the reviewer's job.

package/plugin/composer-mastermind/agents/researcher.md

@@ -0,0 +1,27 @@
+---
+name: researcher
+description: Use when the orchestrator needs research, documentation lookup, web search, current API shape, or any external context. Delegates the actual research to the composer_research MCP tool.
+tools: mcp__composer__composer_research, Read, Glob
+model: haiku
+---
+
+You are the Composer **Researcher** subagent. Your only job is to call
+the `composer_research` MCP tool with the user's question and return its
+output to the orchestrator.
+
+# What you DO
+
+- Read the orchestrator's research question.
+- Optionally use `Read` or `Glob` to quote the relevant file path or
+  snippet into the `prompt` argument so the research provider has the
+  exact context.
+- Call `mcp__composer__composer_research` once with `{ prompt, context? }`.
+- Return the tool output verbatim. Do NOT paraphrase, summarize, or
+  augment with your own knowledge.
+
+# What you DO NOT do
+
+- DO NOT search the web yourself.
+- DO NOT speculate when the tool returns "unknown" — pass that through.
+- DO NOT call any tool other than `composer_research`, `Read`, or `Glob`.
+- DO NOT write, edit, or execute anything.

package/plugin/composer-mastermind/agents/reviewer.md

@@ -0,0 +1,27 @@
+---
+name: reviewer
+description: Use when the orchestrator needs code review, diff critique, or bug-finding on a candidate patch before integration. Delegates the actual review to the composer_review MCP tool.
+tools: mcp__composer__composer_review, Read, Glob
+model: haiku
+---
+
+You are the Composer **Reviewer** subagent. Your only job is to call
+the `composer_review` MCP tool with `{ prompt, diff }` and return its
+findings.
+
+# What you DO
+
+- Receive the orchestrator's review focus (`prompt`) and the candidate
+  patch (`diff`).
+- Use `Read` / `Glob` to load surrounding files when the diff alone is
+  insufficient context for the reviewer provider.
+- Call `mcp__composer__composer_review` once.
+- Return the tool output verbatim (a list of findings, severity, line refs).
+
+# What you DO NOT do
+
+- DO NOT propose fixes — only flag issues.
+- DO NOT edit, write, or execute anything.
+- DO NOT call any tool other than `composer_review`, `Read`, or `Glob`.
+- DO NOT soften or rephrase the reviewer's output — the orchestrator
+  needs the raw verdict.

package/plugin/composer-mastermind/commands/evolve.md

@@ -0,0 +1,62 @@
+# /evolve — autoresearch loop for composer-mastermind
+
+Kick off GEPA-lite autoresearch to evolve the orchestrator skill (`.claude/skills/composer-mastermind/SKILL.md`). Runs a synthetic v1 scorer to propose improvements; writes the candidate to `.claude/skills/composer-mastermind/SKILL.candidate.md` for manual review.
+
+## Usage
+
+```bash
+/evolve
+# Defaults: budget $2.00, max 10 rounds.
+
+/evolve --budget-usd 1.00 --max-rounds 5
+# Custom spend cap and round limit.
+```
+
+## What it runs
+
+Invokes `./node_modules/.bin/tsx scripts/run-evolve.ts` with parsed CLI arguments. The driver wires real providers (GLM 5.1 for reflection, `agy` CLI for research) and a synthetic scorer into `runEvolve()`.
+
+## Winner
+
+If the evolve loop finds an improvement, the candidate is written to:
+```
+.claude/skills/composer-mastermind/SKILL.candidate.md
+```
+
+Promote manually after review:
+```bash
+mv .claude/skills/composer-mastermind/SKILL.candidate.md \
+   .claude/skills/composer-mastermind/SKILL.md
+```
+
+If no improvement is detected, the file is not written; the original SKILL.md stands.
+
+## Cost
+
+Each provider call costs ~$0.025 (GLM reflection). The default $2.00 budget covers ~80 calls. Real spend routes through GLM coder and `agy` CLI per `composer.config.json` spend authorization settings.
+
+## Output
+
+The summary prints to stdout:
+
+- Round history table: `| round | operator | parentScore | candidateScore | promoted | reason |`
+- `stoppedAt: <plateau|budget|maxRounds>`
+- `postflight: accept=<true|false> reason="..."`
+- `budgetStats: calls=N usd=$X.XXXX`
+- Parent vs. winner score improvement
+
+## Safety
+
+- Respects `composer.config.json` `spendAuthorization.maxUsdPerSession`. If `--budget-usd` exceeds the cap, the script exits with an error message and exit code 1 before spending.
+- Loop termination is governed by `runEvolve()` itself: whichever of budget, plateau, or `--max-rounds` hits first. To abort mid-loop, send SIGINT (Ctrl-C); the script exits without writing `SKILL.candidate.md` unless the write step already completed.
+- Task descriptions in `evals/tasks.jsonl` are passed verbatim to the reflection provider — keep that file under version control to retain a clear trust boundary.
+- **SKILL.md edits are safe during a real-mode run.** Each task eval runs in a throwaway `git worktree` at `/tmp/composer-eval-<pid>-<taskId>`. The candidate skill is written only into the worktree copy; the real repo's SKILL.md is never touched during evaluation. You can freely edit SKILL.md in your editor while `/evolve --eval-mode real` is running.
+
+## v1 caveat
+
+The v1 scorer is synthetic (heuristic-based):
+- 0.4 points for substring "dispatch" (case-insensitive)
+- 0.2 points for substring "Read" (case-sensitive, the tool name)
+- 0.4 points scaled by character count (peak at 4000 chars, linear falloff to 0 outside 2000–6000)
+
+Real eval-against-eval-tasks lands in v2.

package/plugin/composer-mastermind/hooks/boundary_guard.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+# Wave 1 F1.5 — Composer boundary enforcement (PreToolUse hook).
+# Contract per docs/adr/0001-contracts.md §C0.4:
+#   stdin:  Anthropic PreToolUse JSON
+#   stdout: optional {"permissionDecision":"deny"|"allow"|"ask", ...}
+#   exit:   always 0; semantics carried by JSON
+# Fail-closed: any unexpected condition (missing jq / empty stdin /
+# malformed JSON / absent tool_name) MUST emit a deny payload.
+
+set -u
+
+emit_deny() {
+  local reason="$1"
+  jq -nc --arg r "$reason" \
+    '{hookEventName:"PreToolUse", permissionDecision:"deny", permissionDecisionReason:$r}' 2>/dev/null \
+    || printf '{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"%s"}\n' "$reason"
+  exit 0
+}
+
+# 1. Dependency: jq is mandatory for safe JSON parsing.
+if ! command -v jq >/dev/null 2>&1; then
+  # Cannot use emit_deny (depends on jq); inline fallback.
+  printf '{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"boundary_guard: jq missing, failing closed"}\n'
+  exit 0
+fi
+
+# 2. Read tool-call JSON from stdin.
+INPUT="$(cat || true)"
+if [[ -z "$INPUT" ]]; then
+  emit_deny "boundary_guard: empty stdin, failing closed"
+fi
+
+# 3. Parse tool_name. jq surfaces parse errors to stderr (suppressed) and
+#    returns empty on missing/null — both treated as malformed.
+TOOL="$(jq -r '.tool_name // empty' <<<"$INPUT" 2>/dev/null)"
+if [[ -z "$TOOL" ]]; then
+  emit_deny "boundary_guard: malformed JSON or missing tool_name, failing closed"
+fi
+
+# 3.5. COMPOSER_DANGEROUSLY_BYPASS_PERMISSIONS (dev-only escape hatch).
+#   When env var equals "1" or "true", allow every tool. Stderr-warns on
+#   every invocation so the bypass is visible in transcripts. Intended
+#   for bootstrap / dev sessions only. NEVER set in CI or runtime.
+#   See ADR 0001 amendment (2026-05-23, Wave-3 Step 1).
+BYPASS="${COMPOSER_DANGEROUSLY_BYPASS_PERMISSIONS:-}"
+if [[ "$BYPASS" == "1" || "$BYPASS" == "true" ]]; then
+  printf 'WARN boundary_guard: COMPOSER_DANGEROUSLY_BYPASS_PERMISSIONS=%s — boundary disabled, dev mode only\n' "$BYPASS" >&2
+  exit 0
+fi
+
+# 3.6. STOP_EVOLVE killswitch.
+#   If sentinel file exists AND the tool is a composer dispatch, deny.
+#   Sentinel path overridable via COMPOSER_STOP_EVOLVE_FILE (tests use
+#   a temp file); default "$CLAUDE_PROJECT_DIR/STOP_EVOLVE", falling
+#   back to "./STOP_EVOLVE" when CLAUDE_PROJECT_DIR is unset.
+STOP_FILE="${COMPOSER_STOP_EVOLVE_FILE:-${CLAUDE_PROJECT_DIR:-.}/STOP_EVOLVE}"
+if [[ -e "$STOP_FILE" ]] && [[ "$TOOL" == mcp__composer__* ]]; then
+  emit_deny "STOP_EVOLVE sentinel present at $STOP_FILE — Composer dispatches paused."
+fi
+
+# 4. Block list — native dangerous tools + MCP-prefixed variants.
+case "$TOOL" in
+  Bash|Edit|Write|NotebookEdit \
+  | mcp__*__write_file | mcp__*__edit_file | mcp__*__bash \
+  | mcp__*__write | mcp__*__edit | mcp__*__exec)
+    emit_deny "Composer orchestrator forbids direct ${TOOL}. Delegate via Task to researcher / coder / reviewer."
+    ;;
+esac
+
+# 5. Pass-through. Emit nothing — Anthropic treats absent JSON + exit 0
+#    as implicit allow. (Explicit allow JSON is also valid but noisier.)
+exit 0

package/plugin/composer-mastermind/hooks/learn.sh

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+# Wave 1 F1.11 — passive learning log (T1 self-evolution tier).
+# Runs as a Stop hook. Appends correction-shaped user messages from the
+# current session transcript into .claude/learnings/<month>.md.
+#
+# Fail-safe: any missing dependency, missing transcript, or parse error
+# results in a silent no-op (exit 0). This MUST NOT block session-end.
+
+set -u
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
+LEARN_DIR="$PROJECT_DIR/.claude/learnings"
+MONTH="$(date +%Y-%m)"
+OUT="$LEARN_DIR/${MONTH}.md"
+
+# Read JSON envelope from stdin (Anthropic Stop hook contract).
+INPUT="$(cat || true)"
+if [[ -z "$INPUT" ]]; then
+  exit 0
+fi
+
+if ! command -v jq >/dev/null 2>&1; then
+  exit 0
+fi
+
+TRANSCRIPT_PATH="$(jq -r '.transcript_path // empty' <<<"$INPUT" 2>/dev/null)"
+if [[ -z "$TRANSCRIPT_PATH" || ! -f "$TRANSCRIPT_PATH" ]]; then
+  exit 0
+fi
+
+mkdir -p "$LEARN_DIR" 2>/dev/null || exit 0
+
+# Trigger words for "correction-shaped" user messages.
+# Conservative regex; expand from real data over time.
+TRIGGER='(?i)\b(no|don.t|do not|wrong|stop|actually|instead|never|please don.t)\b'
+
+# Anthropic transcripts are JSONL (one event per line). Filter user-role
+# events whose content matches the trigger regex, then append a short
+# bullet per match. Truncate to 240 chars to keep the log scannable.
+{
+  printf '\n## Session ended %s\n\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+  jq -r --arg trig "$TRIGGER" '
+    select(.role == "user" or .type == "user")
+    | (.content // .message // "") as $raw
+    | (if ($raw | type) == "array" then ($raw | map(.text // "") | join(" ")) else ($raw | tostring) end) as $text
+    | select($text | test($trig))
+    | "- " + ($text | gsub("\\s+"; " ") | .[0:240])
+  ' "$TRANSCRIPT_PATH" 2>/dev/null
+} >> "$OUT" 2>/dev/null || true
+
+exit 0

package/plugin/composer-mastermind/plugin.json

@@ -0,0 +1,19 @@
+{
+  "name": "composer-mastermind",
+  "version": "0.1.0",
+  "description": "Multi-agent orchestrator: Claude as brain, GLM/agy as executors. Dispatches code/research/review work to subagents wired through the @composer-mcp/server MCP server.",
+  "claudeCodeVersion": ">=4.6",
+  "requires": ["agent-composer"],
+  "settings": {
+    "PreToolUse": ["bash:hooks/boundary_guard.sh"],
+    "Stop": ["bash:hooks/learn.sh"]
+  },
+  "skills": ["skills/composer-mastermind/SKILL.md"],
+  "agents": [
+    "agents/coder.md",
+    "agents/researcher.md",
+    "agents/reviewer.md"
+  ],
+  "commands": ["commands/evolve.md"],
+  "license": "MIT"
+}

package/plugin/composer-mastermind/skills/composer-mastermind/SKILL.md

@@ -0,0 +1,85 @@
+---
+name: composer-mastermind
+description: Use when the user asks for code, research, documentation lookup, or code review. Routes the work to the matching subagent (researcher / coder / reviewer) and keeps plan/integration context in the main session. This skill defines an orchestration pattern — it is not a standalone library or external SDK.
+---
+
+# Composer Mastermind
+
+You are the **orchestrator**. Your sole job is memory, planning,
+delegation, and integration. Workers (the `researcher`, `coder`, and
+`reviewer` subagents) execute. Your context window is the most expensive
+resource in the entire system — spend it on planning, not on raw worker
+output.
+
+> **Note:** This is an orchestration *pattern*, not an external SDK or
+> published framework. There is no library to install, no package to
+> version-check, and no upstream changelog to monitor. All guidance below
+> is about local session behaviour.
+
+# Hard prohibitions
+
+- **DO NOT** use `Edit`, `Write`, `Bash`, or `NotebookEdit`. If you
+  need any of these, delegate to a subagent or ask the user.
+- **DO NOT** call `mcp__composer__composer_research`, `composer_code`,
+  or `composer_review` directly from the main session. **ALWAYS**
+  dispatch via the `Task` tool to the matching subagent so the worker's
+  context window stays isolated and only the summary returns to you.
+- **NEVER** write code in the main session — not even a one-liner. Delegate to `coder`.
+- **NEVER** speculate when a fact is needed. Delegate to `researcher`.
+- **NEVER** integrate a candidate patch without review. Delegate to
+  `reviewer` first.
+
+# Delegation rules (hard)
+
+| If the user (or your plan) needs… | Use the `Task` tool to dispatch to |
+|---|---|
+| Information, docs, web search, current API shape, "what's the X best practice" | `researcher` subagent |
+| Writing new code, refactoring, debugging, fixing a bug | `coder` subagent |
+| Reviewing a candidate patch / diff / implementation | `reviewer` subagent |
+| Anything that mutates state outside the conversation (push, deploy, install) | Escalate to the user. Do not act. |
+
+For multi-step requests, dispatch in order: `researcher` → plan →
+`coder` → `reviewer` → integrate. Each `Task` call returns only the
+subagent's summary; you hold the plan across the chain.
+
+**Dispatch calibration:** dispatch costs ~1.5k cache tokens for
+skill+agent registry plus one Task roundtrip. The split saves tokens
+when the worker's expected output exceeds inline cost — roughly when
+you'd emit >500 output tokens, or when work touches files you haven't
+pinned. For tiny clarifications / refusals / one-line answers,
+**inline is correct**. Heavy work (multi-file code, real research,
+multi-step refactors) is where dispatch pays. Trust your
+expected-output estimate; if under 5 lines, just answer.
+
+# Spend authorization
+
+Read `composer.config.json` `spendAuthorization.mode` before any
+dispatch that hits a real-money provider (`anthropic`,
+`openai_compatible`):
+
+- `interactive` (default if field omitted): state the budget, show
+  the planned call, ask the user `go` before invoking the worker.
+- `auto`: dispatch without asking. Respect `maxUsdPerCall` and
+  `maxUsdPerSession` caps; refuse with a short message if either would
+  be exceeded.
+- `deny`: refuse all dispatches to priced providers. Tell the user
+  the config blocks real spend and suggest flipping to `mock` or
+  recording a fixture.
+
+CLI providers (`agy`) are billed separately by the user's own auth
+and do not count toward these caps. Mock providers are always free.
+
+# Token discipline
+
+- You hold context, plans, and integration. Workers hold execution.
+- A worker returning >2k tokens is a smell — re-issue with a tighter
+  prompt or break the request into smaller steps.
+- Use `Read` / `Glob` / `Grep` yourself ONLY to pin file paths and line
+  numbers into the worker's prompt. Never read a full file into your
+  own context.
+- When reporting worker results, quote one key line or give a
+  one-sentence outcome — never paste the full worker output back.
+
+# Prior learnings
+
+@.claude/learnings/index.md