caveat-cli 0.18.0 → 0.19.1

package/dist/{chunk-KAULUIC4.js → chunk-NZD3FHU6.js}

@@ -5122,10 +5122,10 @@ var require_truncate = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js"(exports2, module2) {
     "use strict";
     var parse2 = require_parse2();
-    var constants2 = require_constants();
+    var constants = require_constants();
     var SemVer = require_semver();
     var truncate2 = (version, truncation, options2) => {
-      if (!constants2.RELEASE_TYPES.includes(truncation)) {
+      if (!constants.RELEASE_TYPES.includes(truncation)) {
         return null;
       }
       const clonedVersion = cloneInputVersion(version, options2);
@@ -6174,7 +6174,7 @@ var require_semver2 = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/index.js"(exports2, module2) {
     "use strict";
     var internalRe = require_re();
-    var constants2 = require_constants();
+    var constants = require_constants();
     var SemVer = require_semver();
     var identifiers = require_identifiers();
     var parse2 = require_parse2();
@@ -6258,8 +6258,8 @@ var require_semver2 = __commonJS({
       re: internalRe.re,
       src: internalRe.src,
       tokens: internalRe.t,
-      SEMVER_SPEC_VERSION: constants2.SEMVER_SPEC_VERSION,
-      RELEASE_TYPES: constants2.RELEASE_TYPES,
+      SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+      RELEASE_TYPES: constants.RELEASE_TYPES,
       compareIdentifiers: identifiers.compareIdentifiers,
       rcompareIdentifiers: identifiers.rcompareIdentifiers
     };
@@ -9648,6 +9648,26 @@ function withSourceSavepoint(db, fn) {
   }
 }
 
+// ../../packages/core/dist/platform.js
+function isWindows(platform = process.platform) {
+  return platform === "win32";
+}
+function isWindowsEnv(env, platform = process.platform) {
+  return env.OS === "Windows_NT" || isWindows(platform);
+}
+function isPrivateOwnerStat(stat, uid, platform = process.platform) {
+  return isWindows(platform) || (stat.mode & 63) === 0 && (uid === void 0 || stat.uid === uid);
+}
+function powershellCallPrefix(platform = process.platform) {
+  return isWindows(platform) ? "& " : "";
+}
+function nodeExecutableNames(platform = process.platform) {
+  return isWindows(platform) ? ["node.exe", "node.cmd", "node.bat", "node"] : ["node"];
+}
+function normalizePathCase(normalizedPath, platform = process.platform) {
+  return isWindows(platform) ? normalizedPath.toLowerCase() : normalizedPath;
+}
+
 // ../../packages/core/dist/community.js
 import { existsSync as existsSync5, readdirSync as readdirSync5, rmSync, statSync as statSync4 } from "node:fs";
 import { join as join5 } from "node:path";
@@ -14638,6 +14658,8 @@ function createGit(baseDir, opts) {
     // Git unwind its own helper first; it is not a general process-tree or
     // total elapsed-time guarantee.
     config: [
+      // Windowsの長いentryパスを扱う。ユーザーのGit設定は変更しない。
+      ...isWindows() ? ["core.longpaths=true"] : [],
       "http.lowSpeedLimit=1",
       `http.lowSpeedTime=${lowSpeedTimeSeconds}`
     ],
@@ -15233,28 +15255,8 @@ function createKeyserverKeyProvider(opts) {
   };
 }
 
-// ../../packages/core/dist/platform.js
-function isWindows(platform = process.platform) {
-  return platform === "win32";
-}
-function isWindowsEnv(env, platform = process.platform) {
-  return env.OS === "Windows_NT" || isWindows(platform);
-}
-function isPrivateOwnerStat(stat, uid, platform = process.platform) {
-  return isWindows(platform) || (stat.mode & 63) === 0 && (uid === void 0 || stat.uid === uid);
-}
-function powershellCallPrefix(platform = process.platform) {
-  return isWindows(platform) ? "& " : "";
-}
-function nodeExecutableNames(platform = process.platform) {
-  return isWindows(platform) ? ["node.exe", "node.cmd", "node.bat", "node"] : ["node"];
-}
-function normalizePathCase(normalizedPath, platform = process.platform) {
-  return isWindows(platform) ? normalizedPath.toLowerCase() : normalizedPath;
-}
-
 // ../../packages/core/dist/sync.js
-import { existsSync as existsSync8, mkdirSync as mkdirSync5, readdirSync as readdirSync7, realpathSync, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync7, readdirSync as readdirSync7, realpathSync, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname4, join as join8, resolve } from "node:path";
 
 // ../../packages/core/dist/remoteVisibility.js
@@ -15462,6 +15464,12 @@ function scaffold(ownDir) {
   const gitignore = join8(ownDir, ".gitignore");
   if (!existsSync8(gitignore)) writeFileSync4(gitignore, KNOWLEDGE_GITIGNORE, "utf-8");
 }
+function removeCanonicalScaffoldBeforeCheckout(ownDir) {
+  const gitignore = join8(ownDir, ".gitignore");
+  if (existsSync8(gitignore) && readFileSync7(gitignore, "utf-8") === KNOWLEDGE_GITIGNORE) {
+    rmSync4(gitignore);
+  }
+}
 async function defaultRemoteBranch(git, url) {
   const symref = await git.raw(["ls-remote", "--symref", url, "HEAD"]);
   const match = /^ref: refs\/heads\/([^\s]+)\s+HEAD$/m.exec(symref);
@@ -15501,6 +15509,7 @@ async function initOwnSync(opts) {
     }
     const branch = await defaultRemoteBranch(git, opts.url);
     await git.fetch("origin", branch);
+    removeCanonicalScaffoldBeforeCheckout(ownDir);
     await git.checkout(["--track", "-B", branch, `origin/${branch}`]);
     await reindexAndMark(opts);
     return { ownDir, branch, remoteWasEmpty: false };
@@ -15519,7 +15528,7 @@ function errorMessage2(err) {
 // ../../packages/core/dist/autoSync.js
 import { spawn as spawn2 } from "node:child_process";
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync7, renameSync as renameSync3, statSync as statSync6, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync8, renameSync as renameSync3, statSync as statSync6, writeFileSync as writeFileSync5 } from "node:fs";
 import { dirname as dirname5, join as join9 } from "node:path";
 var AUTO_SYNC_DEBOUNCE_MS = 15 * 60 * 1e3;
 var AUTO_SYNC_RECORD_DEBOUNCE_MS = 60 * 1e3;
@@ -15539,7 +15548,7 @@ function autoSyncLockPath(caveatHome) {
 }
 function readAutoSyncState(caveatHome) {
   try {
-    const value = JSON.parse(readFileSync7(autoSyncStatePath(caveatHome), "utf-8"));
+    const value = JSON.parse(readFileSync8(autoSyncStatePath(caveatHome), "utf-8"));
     if (!isAutoSyncState(value)) return null;
     return value;
   } catch {
@@ -15891,16 +15900,17 @@ function resolvePaths(caveatHome, knowledgeRepo, userHome) {
 }
 
 // ../../packages/core/dist/config.js
-import { existsSync as existsSync11, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync9, writeFileSync as writeFileSync6 } from "node:fs";
 var DEFAULT_CONFIG = {
   knowledgeRepo: "own",
   semverKeys: ["driver", "cuda", "node"],
   publishTarget: null,
   sealedKeyId: "v1",
-  sealedKeyserverUrl: null
+  sealedKeyserverUrl: null,
+  runtimeErrors: false
 };
 function loadConfig(userConfigPath) {
-  const userCfg = existsSync11(userConfigPath) ? JSON.parse(readFileSync8(userConfigPath, "utf-8")) : {};
+  const userCfg = existsSync11(userConfigPath) ? JSON.parse(readFileSync9(userConfigPath, "utf-8")) : {};
   return deepMerge(DEFAULT_CONFIG, userCfg);
 }
 function ensureUserConfig(userConfigPath) {
@@ -15909,7 +15919,7 @@ function ensureUserConfig(userConfigPath) {
   }
 }
 function writeUserConfigPatch(userConfigPath, patch) {
-  const existing = existsSync11(userConfigPath) ? JSON.parse(readFileSync8(userConfigPath, "utf-8")) : {};
+  const existing = existsSync11(userConfigPath) ? JSON.parse(readFileSync9(userConfigPath, "utf-8")) : {};
   writeFileSync6(userConfigPath, `${JSON.stringify({ ...existing, ...patch }, null, 2)}
 `, "utf-8");
 }
@@ -16128,7 +16138,19 @@ function reminderSymptomLine(symptomExcerpt) {
   const excerpt2 = sanitizeReminderDisplay(symptomExcerpt, SYMPTOM_LINE_MAX);
   return excerpt2 ? `   \u75C7\u72B6: ${excerpt2}` : null;
 }
-function toolErrorReminderText(hits) {
+function detailGuidance(surface) {
+  if (surface === "native-cli") {
+    return "\u8A73\u7D30\u306F `caveat show <id> --source <source>` \u3067\u53D6\u5F97\u3057\u3001documented \u306A\u5BFE\u51E6\u3068 environment \u304C\u4E00\u81F4\u3059\u308B\u304B\u78BA\u8A8D\u3057\u3066\u304B\u3089\u9069\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u7121\u95A2\u4FC2\u3068\u5224\u65AD\u3057\u305F\u3089\u7121\u8996\u3057\u3066\u7D9A\u884C\u3067 OK\u3002";
+  }
+  return "mcp__caveat__caveat_get \u3067\u8A73\u7D30\u3092\u78BA\u8A8D\u3057\u3001documented \u306A\u5BFE\u51E6\u304C\u3042\u308C\u3070\u9069\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u7121\u95A2\u4FC2\u3068\u5224\u65AD\u3057\u305F\u3089\u7121\u8996\u3057\u3066\u7D9A\u884C\u3067 OK\u3002";
+}
+function promptDetailGuidance(surface) {
+  if (surface === "native-cli") {
+    return "\u8A73\u7D30\u306F `caveat show <id> --source <source>` \u3067\u53D6\u5F97\u3002environment \u304C\u4E00\u81F4\u3059\u308B\u304B\u78BA\u8A8D\u3057\u3066\u304B\u3089\u9069\u7528\u5224\u65AD\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u7121\u95A2\u4FC2\u3068\u5224\u65AD\u3057\u305F\u3089\u7121\u8996\u3057\u3066\u7D9A\u884C\u3067 OK\u3002";
+  }
+  return "\u8A73\u7D30\u306F mcp__caveat__caveat_get \u306B id + source \u3092\u6E21\u3057\u3066\u53D6\u5F97\u3002environment \u304C\u4E00\u81F4\u3059\u308B\u304B\u78BA\u8A8D\u3057\u3066\u304B\u3089\u9069\u7528\u5224\u65AD\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u7121\u95A2\u4FC2\u3068\u5224\u65AD\u3057\u305F\u3089\u7121\u8996\u3057\u3066\u7D9A\u884C\u3067 OK\u3002";
+}
+function toolErrorReminderText(hits, actionSurface = "claude-mcp") {
   const lines = [];
   lines.push(
     `[caveat] \u76F4\u524D\u306E\u30A8\u30E9\u30FC\u306B\u4E00\u81F4\u3059\u308B\u53EF\u80FD\u6027\u306E\u3042\u308B\u65E2\u77E5\u306E\u7F60\u304C ${hits.length} \u4EF6\u3042\u308A\u307E\u3059:`
@@ -16140,12 +16162,10 @@ function toolErrorReminderText(hits) {
     if (symptomLine) lines.push(symptomLine);
   });
   lines.push("");
-  lines.push(
-    "mcp__caveat__caveat_get \u3067\u8A73\u7D30\u3092\u78BA\u8A8D\u3057\u3001documented \u306A\u5BFE\u51E6\u304C\u3042\u308C\u3070\u9069\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u7121\u95A2\u4FC2\u3068\u5224\u65AD\u3057\u305F\u3089\u7121\u8996\u3057\u3066\u7D9A\u884C\u3067 OK\u3002"
-  );
+  lines.push(detailGuidance(actionSurface));
   return lines.join("\n");
 }
-function userPromptSubmitReminderText(hits) {
+function userPromptSubmitReminderText(hits, actionSurface = "claude-mcp") {
   const lines = [];
   lines.push(
     `[caveat] \u3053\u306E\u30D7\u30ED\u30F3\u30D7\u30C8\u306B\u95A2\u9023\u3059\u308B\u53EF\u80FD\u6027\u306E\u3042\u308B\u65E2\u77E5\u306E\u7F60\u304C ${hits.length} \u4EF6\u3042\u308A\u307E\u3059:`
@@ -16157,16 +16177,14 @@ function userPromptSubmitReminderText(hits) {
     if (symptomLine) lines.push(symptomLine);
   });
   lines.push("");
-  lines.push(
-    "\u8A73\u7D30\u306F mcp__caveat__caveat_get \u306B id + source \u3092\u6E21\u3057\u3066\u53D6\u5F97\u3002environment \u304C\u4E00\u81F4\u3059\u308B\u304B\u78BA\u8A8D\u3057\u3066\u304B\u3089\u9069\u7528\u5224\u65AD\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u7121\u95A2\u4FC2\u3068\u5224\u65AD\u3057\u305F\u3089\u7121\u8996\u3057\u3066\u7D9A\u884C\u3067 OK\u3002"
-  );
+  lines.push(promptDetailGuidance(actionSurface));
   return lines.join("\n");
 }
 function shortPath(p2) {
   const parts = p2.split(/[\\/]/);
   return parts[parts.length - 1] ?? p2;
 }
-function stopReminderText(signals, related) {
+function stopReminderText(signals, related, actionSurface = "claude-mcp") {
   const lines = [];
   lines.push("[caveat] \u3053\u306E\u30BB\u30C3\u30B7\u30E7\u30F3\u3067\u5916\u90E8\u4ED5\u69D8\u306E\u7F60\u306B\u5F53\u305F\u3063\u305F\u53EF\u80FD\u6027\u3092\u793A\u3059\u30B7\u30B0\u30CA\u30EB:");
   if (signals.toolFailureCount > 0) {
@@ -16196,29 +16214,21 @@ function stopReminderText(signals, related) {
   );
   lines.push("");
   if (related.length > 0) {
-    lines.push(
-      `\u30BB\u30C3\u30B7\u30E7\u30F3\u5185\u5BB9\u3068\u5171\u8D77\u3059\u308B\u65E2\u5B58\u7F60 ${related.length} \u4EF6\uFF08\u95A2\u9023\u304C\u3042\u308C\u3070 mcp__caveat__caveat_update \u3067 last_verified \u3092\u66F4\u65B0 or \u8FFD\u8A18\uFF09:`
-    );
+    lines.push(actionSurface === "native-cli" ? `\u30BB\u30C3\u30B7\u30E7\u30F3\u5185\u5BB9\u3068\u5171\u8D77\u3059\u308B\u65E2\u5B58\u7F60 ${related.length} \u4EF6\uFF08\u8A73\u7D30\u306F \`caveat show <id> --source <source>\` \u3067\u78BA\u8A8D\uFF09:` : `\u30BB\u30C3\u30B7\u30E7\u30F3\u5185\u5BB9\u3068\u5171\u8D77\u3059\u308B\u65E2\u5B58\u7F60 ${related.length} \u4EF6\uFF08\u95A2\u9023\u304C\u3042\u308C\u3070 mcp__caveat__caveat_update \u3067 last_verified \u3092\u66F4\u65B0 or \u8FFD\u8A18\uFF09:`);
     related.forEach((h2, i2) => {
       lines.push(reminderHitLine(h2, i2));
     });
     lines.push("");
-    lines.push(
-      "\u4E0A\u8A18\u3068\u7570\u306A\u308B\u65B0\u898F\u306E\u7F60\u3092\u8E0F\u3093\u3067\u3044\u305F\u3089 mcp__caveat__caveat_record \u3067\u767B\u9332\u3057\u3066\u304F\u3060\u3055\u3044\u3002outcome: impossible\uFF08\u73FE\u72B6\u306E\u5236\u7D04\u3067\u306F\u4E0D\u53EF\u80FD\u3068\u5224\u5B9A\u3057\u305F\u7D50\u8AD6\uFF09\u3082\u8A18\u9332\u5BFE\u8C61\u3002"
-    );
+    lines.push(actionSurface === "native-cli" ? "\u95A2\u9023\u3059\u308B own \u30A8\u30F3\u30C8\u30EA\u306F `caveat show <id> --source own` \u304C\u793A\u3059 path \u306E Markdown\u3067 last_verified \u3084\u672C\u6587\u3092\u66F4\u65B0\u3057\u3001`caveat index` \u3092\u5B9F\u884C\u3057\u3066\u304F\u3060\u3055\u3044\u3002community \u30A8\u30F3\u30C8\u30EA\u306F\u8CFC\u8AAD\u7269\u306A\u306E\u3067\u76F4\u63A5\u7DE8\u96C6\u3057\u307E\u305B\u3093\u3002\u4E0A\u8A18\u3068\u7570\u306A\u308B\u65B0\u898F\u306E\u7F60\u306F Caveat \u306E own knowledge repo \u3078 Markdown \u3067\u8A18\u9332\u3057\u3001`caveat index` \u3092\u5B9F\u884C\u3057\u3066\u304F\u3060\u3055\u3044\u3002outcome: impossible\uFF08\u73FE\u72B6\u306E\u5236\u7D04\u3067\u306F\u4E0D\u53EF\u80FD\u3068\u5224\u5B9A\u3057\u305F\u7D50\u8AD6\uFF09\u3082\u8A18\u9332\u5BFE\u8C61\u3002" : "\u4E0A\u8A18\u3068\u7570\u306A\u308B\u65B0\u898F\u306E\u7F60\u3092\u8E0F\u3093\u3067\u3044\u305F\u3089 mcp__caveat__caveat_record \u3067\u767B\u9332\u3057\u3066\u304F\u3060\u3055\u3044\u3002outcome: impossible\uFF08\u73FE\u72B6\u306E\u5236\u7D04\u3067\u306F\u4E0D\u53EF\u80FD\u3068\u5224\u5B9A\u3057\u305F\u7D50\u8AD6\uFF09\u3082\u8A18\u9332\u5BFE\u8C61\u3002");
   } else {
-    lines.push(
-      "\u65E2\u5B58\u7F60\u306B\u8A72\u5F53\u306A\u3057\u3002\u5916\u90E8\u4ED5\u69D8\u306E\u7F60\u306B\u82E6\u6226\u3057\u3066\u3044\u305F\u306A\u3089 mcp__caveat__caveat_record \u3067\u767B\u9332\u3057\u3066\u304F\u3060\u3055\u3044\u3002outcome: impossible \u3082\u8A18\u9332\u5BFE\u8C61\u3002"
-    );
+    lines.push(actionSurface === "native-cli" ? "\u65E2\u5B58\u7F60\u306B\u8A72\u5F53\u306A\u3057\u3002\u5916\u90E8\u4ED5\u69D8\u306E\u7F60\u306B\u82E6\u6226\u3057\u3066\u3044\u305F\u306A\u3089 Caveat \u306E own knowledge repo \u3078 Markdown \u3067\u8A18\u9332\u3057\u3001`caveat index` \u3092\u5B9F\u884C\u3057\u3066\u304F\u3060\u3055\u3044\u3002outcome: impossible \u3082\u8A18\u9332\u5BFE\u8C61\u3002" : "\u65E2\u5B58\u7F60\u306B\u8A72\u5F53\u306A\u3057\u3002\u5916\u90E8\u4ED5\u69D8\u306E\u7F60\u306B\u82E6\u6226\u3057\u3066\u3044\u305F\u306A\u3089 mcp__caveat__caveat_record \u3067\u767B\u9332\u3057\u3066\u304F\u3060\u3055\u3044\u3002outcome: impossible \u3082\u8A18\u9332\u5BFE\u8C61\u3002");
   }
-  lines.push(
-    "\u8A18\u9332\u6642\u306F tool \u8AAC\u660E\u306E\u4E8C\u9805\u57FA\u6E96\u3067 visibility \u3092\u9078\u3076\uFF08public = \u7B2C\u4E09\u8005\u518D\u73FE\u53EF\u80FD / private = repo \u56FA\u6709\uFF09\u3002\u8FF7\u3063\u305F\u3089 private\u3002"
-  );
+  lines.push(actionSurface === "native-cli" ? "\u8A18\u9332\u6642\u306F visibility \u3092\u4E8C\u9805\u57FA\u6E96\u3067\u9078\u3076\uFF08public = \u7B2C\u4E09\u8005\u518D\u73FE\u53EF\u80FD / private = repo \u56FA\u6709\uFF09\u3002\u8FF7\u3063\u305F\u3089 private\u3002" : "\u8A18\u9332\u6642\u306F tool \u8AAC\u660E\u306E\u4E8C\u9805\u57FA\u6E96\u3067 visibility \u3092\u9078\u3076\uFF08public = \u7B2C\u4E09\u8005\u518D\u73FE\u53EF\u80FD / private = repo \u56FA\u6709\uFF09\u3002\u8FF7\u3063\u305F\u3089 private\u3002");
   return lines.join("\n");
 }
 
 // ../../packages/core/dist/transcriptSignals.js
-import { existsSync as existsSync12, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync10 } from "node:fs";
 var MAX_ERROR_SNIPPETS = 10;
 var MAX_ERROR_SNIPPET_LENGTH = 300;
 var MAX_SEARCH_QUERIES = 10;
@@ -16247,7 +16257,7 @@ function readSessionSignals(transcriptPath) {
   if (!transcriptPath || !existsSync12(transcriptPath)) return null;
   let raw;
   try {
-    raw = readFileSync9(transcriptPath, "utf-8");
+    raw = readFileSync10(transcriptPath, "utf-8");
   } catch {
     return null;
   }
@@ -16328,7 +16338,7 @@ function struggleSearchText(s) {
 }
 
 // ../../packages/core/dist/codexTranscriptSignals.js
-import { existsSync as existsSync13, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync11 } from "node:fs";
 var MAX_ERROR_SNIPPETS2 = 10;
 var MAX_ERROR_SNIPPET_LENGTH2 = 300;
 var MAX_SEARCH_QUERIES2 = 10;
@@ -16396,7 +16406,7 @@ function readCodexSessionSignals(transcriptPath) {
   if (!transcriptPath || !existsSync13(transcriptPath)) return null;
   let raw;
   try {
-    raw = readFileSync10(transcriptPath, "utf-8");
+    raw = readFileSync11(transcriptPath, "utf-8");
   } catch {
     return null;
   }
@@ -16542,7 +16552,7 @@ function listStale(db, opts = {}) {
 
 // ../../packages/core/dist/publishScan.js
 import { createHash as createHash5 } from "node:crypto";
-import { existsSync as existsSync14, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "node:fs";
 import { join as join11, basename as basename2 } from "node:path";
 import { homedir as homedir2, userInfo as userInfo2 } from "node:os";
 var ALLOW_FILE = ".caveat-publish-allow.json";
@@ -16774,7 +16784,7 @@ function publishSelfIdentityTokens() {
 function loadPublishAllow(knowledgeRepo) {
   const path = join11(knowledgeRepo, ALLOW_FILE);
   if (!existsSync14(path)) return /* @__PURE__ */ new Set();
-  const parsed = JSON.parse(readFileSync11(path, "utf-8"));
+  const parsed = JSON.parse(readFileSync12(path, "utf-8"));
   if (!Array.isArray(parsed.allow)) throw new Error(`${ALLOW_FILE} must contain an "allow" array`);
   return new Set(parsed.allow.filter((value) => typeof value === "string" && DIGEST_RE.test(value)));
 }
@@ -16803,7 +16813,7 @@ var PublishScanError = class extends Error {
 
 // ../../packages/core/dist/publish.js
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync15, mkdirSync as mkdirSync7, readFileSync as readFileSync12, readdirSync as readdirSync8, rmSync as rmSync5, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync7, readFileSync as readFileSync13, readdirSync as readdirSync8, rmSync as rmSync5, writeFileSync as writeFileSync8 } from "node:fs";
 import { dirname as dirname7, join as join12, relative as relative3 } from "node:path";
 
 // ../../packages/core/dist/visibility.js
@@ -16822,7 +16832,7 @@ function collectPublishSet(entriesDir) {
   if (!existsSync15(entriesDir)) return { files, invalid };
   for (const path of walkMarkdown(entriesDir)) {
     const relPath = relative3(entriesDir, path).replace(/\\/g, "/");
-    const content = readFileSync12(path);
+    const content = readFileSync13(path);
     try {
       const parsed = parseMarkdown(content.toString("utf-8"));
       const visibility = classifyVisibility(parsed.frontmatter.visibility);
@@ -16877,7 +16887,7 @@ function buildSealedReadme(fileCount, files) {
     "",
     `Public entries: ${fileCount}`,
     "",
-    "Caveat: https://github.com/kitepon-rgb/Caveat",
+    "Caveat: https://github.com/kitepon/Caveat",
     ""
   ];
   const showcase = files.filter((f) => f.showcase).sort((a, b2) => Buffer.compare(Buffer.from(a.relPath, "utf-8"), Buffer.from(b2.relPath, "utf-8")));
@@ -16915,11 +16925,11 @@ function verifySealedMirror(opts) {
     throw new Error(`publish mirror verification failed:
 unexpected sealed mirror tree: ${files.join(", ") || "(empty)"}`);
   }
-  const diskReadme = readFileSync12(join12(opts.mirrorDir, "README.md"), "utf-8");
+  const diskReadme = readFileSync13(join12(opts.mirrorDir, "README.md"), "utf-8");
   if (diskReadme !== opts.readme) {
     throw new Error("publish mirror verification failed: README.md content changed after generation");
   }
-  const diskBundle = readFileSync12(join12(opts.mirrorDir, BUNDLE_RELPATH));
+  const diskBundle = readFileSync13(join12(opts.mirrorDir, BUNDLE_RELPATH));
   if (!diskBundle.equals(opts.bundle)) {
     throw new Error("publish mirror verification failed: sealed bundle bytes changed after generation");
   }
@@ -17013,8 +17023,8 @@ function readExistingMirror(mirrorDir) {
   const readmePath = join12(mirrorDir, "README.md");
   const bundlePath = join12(mirrorDir, BUNDLE_RELPATH);
   return {
-    readme: existsSync15(readmePath) ? readFileSync12(readmePath, "utf-8") : null,
-    bundle: existsSync15(bundlePath) ? readFileSync12(bundlePath) : null
+    readme: existsSync15(readmePath) ? readFileSync13(readmePath, "utf-8") : null,
+    bundle: existsSync15(bundlePath) ? readFileSync13(bundlePath) : null
   };
 }
 async function publishOwn(opts) {
@@ -17305,7 +17315,7 @@ function boundedCount(value) {
 // ../../packages/core/dist/runtimeErrors.js
 import { spawnSync } from "node:child_process";
 import { createHash as createHash7, randomBytes as randomBytes3 } from "node:crypto";
-import { closeSync as closeSync2, constants, existsSync as existsSync16, fstatSync, lstatSync, mkdirSync as mkdirSync8, openSync as openSync2, readFileSync as readFileSync13, renameSync as renameSync4, rmSync as rmSync6, statSync as statSync7, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync16, lstatSync, mkdirSync as mkdirSync8, readFileSync as readFileSync14, renameSync as renameSync4, rmSync as rmSync6, statSync as statSync7, writeFileSync as writeFileSync9 } from "node:fs";
 import { arch as hostArch, homedir as homedir3, platform as hostPlatform } from "node:os";
 import { dirname as dirname8, join as join13 } from "node:path";
 import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
@@ -17313,7 +17323,6 @@ var RUNTIME_ERRORS_SCHEMA = "caveat.runtime_errors.v1";
 var STATE_VERSION = "1.0";
 var MAX_RECORDS = 256;
 var RETENTION_MS = 30 * 864e5;
-var MAX_CONFIG_BYTES = 64 * 1024;
 var definitions = {
   "CAVEAT.DATABASE_OPEN_FAILED": { component: "database", severity: "high", template: "Caveat database open failed" },
   "CAVEAT.INDEX_FAILED": { component: "index", severity: "high", template: "Caveat index operation failed" },
@@ -17334,9 +17343,9 @@ var validVersion = (v) => typeof v === "string" && /^\d+\.\d+\.\d+(?:[-+][0-9A-Z
 var validOs = (v) => typeof v === "string" && ["darwin", "linux", "windows"].includes(v);
 var validArch = (v) => typeof v === "string" && ["x64", "arm64", "arm", "ia32"].includes(v);
 var windows = (env) => isWindowsEnv(env, hostPlatform());
-function defaultFactoryReporterConfigPath(env = process.env) {
-  const home = env.HOME || env.USERPROFILE || homedir3();
-  return windows(env) ? join13(env.LOCALAPPDATA || join13(home, "AppData", "Local"), "dotagents", "factory-reporter", "config.json") : join13(env.XDG_CONFIG_HOME || join13(home, ".config"), "dotagents", "factory-reporter.json");
+function runtimeErrorsConfigPath(env = process.env) {
+  const home = windows(env) ? env.USERPROFILE || env.HOME || homedir3() : env.HOME || env.USERPROFILE || homedir3();
+  return join13(home, ".caveatrc.json");
 }
 function runtimeErrorsStatePath(env = process.env) {
   const home = env.HOME || env.USERPROFILE || homedir3();
@@ -17345,24 +17354,8 @@ function runtimeErrorsStatePath(env = process.env) {
 function collectionEnabled(options2 = {}) {
   const env = options2.env ?? process.env;
   try {
-    const path = options2.configPath ?? defaultFactoryReporterConfigPath(env);
-    const isWin = (options2.isWindows ?? windows)(env);
-    const before = lstatSync(path);
-    if (!before.isFile() || before.isSymbolicLink() || before.size > MAX_CONFIG_BYTES) return false;
-    if (isWin) secureWindowsAcl(path, options2.aclRunner);
-    else assertPosix(before, 384);
-    const fd = openSync2(path, constants.O_RDONLY | constants.O_NONBLOCK | (constants.O_NOFOLLOW ?? 0));
-    let text;
-    try {
-      const after = fstatSync(fd);
-      if (before.dev !== after.dev || before.ino !== after.ino || after.size > MAX_CONFIG_BYTES) return false;
-      if (!isWin) assertPosix(after, 384);
-      text = readFileSync13(fd, "utf8");
-    } finally {
-      closeSync2(fd);
-    }
-    const config = JSON.parse(text);
-    return plain(config) && exact(config, ["schema_version", "host", "collection", "reporting"]) && config.schema_version === "1.0" && plain(config.host) && exact(config.host, ["id", "profile"]) && typeof config.host.id === "string" && /^[a-z0-9][a-z0-9._-]{0,63}$/.test(config.host.id) && ["server", "mac", "wsl", "windows-native"].includes(config.host.profile) && plain(config.collection) && exact(config.collection, ["enabled"]) && config.collection.enabled === true && canonicalReporting(config.reporting);
+    const path = options2.configPath ?? runtimeErrorsConfigPath(env);
+    return loadConfig(path).runtimeErrors === true;
   } catch {
     return false;
   }
@@ -17380,32 +17373,19 @@ function ensureSafeDir(dir, isWin, options2 = {}) {
   if (isWin) secureWindowsAcl(dir, options2.aclRunner, true, !existed);
   else assertPosix(s, 448);
 }
-function canonicalReporting(value) {
-  if (!plain(value) || !Object.keys(value).every((key) => ["enabled", "endpoint", "credential_file"].includes(key)) || typeof value.enabled !== "boolean") return false;
-  if (value.endpoint !== void 0) {
-    if (typeof value.endpoint !== "string" || value.endpoint.length > 2048) return false;
-    try {
-      if (!["http:", "https:"].includes(new URL(value.endpoint).protocol)) return false;
-    } catch {
-      return false;
-    }
-  }
-  if (value.credential_file !== void 0 && (typeof value.credential_file !== "string" || value.credential_file.length < 1 || value.credential_file.length > 4096)) return false;
-  return !value.enabled || value.endpoint !== void 0 && value.credential_file !== void 0;
-}
-var WINDOWS_ACL_VERIFY = String.raw`$p=$env:CAVEAT_ACL_PATH;$isDir=$env:CAVEAT_ACL_DIRECTORY -eq '1';$sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value;$acl=if($isDir){[System.IO.Directory]::GetAccessControl($p)}else{[System.IO.File]::GetAccessControl($p)};$owner=$acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value;if($owner -ne $sid){exit 41};$rules=@($acl.GetAccessRules($true,$true,[System.Security.Principal.SecurityIdentifier]));if($rules.Count -ne 1){exit 42};$r=$rules[0];if($r.IdentityReference.Value -ne $sid -or $r.AccessControlType -ne 'Allow' -or $r.IsInherited -or ($r.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl){exit 43}`;
-var WINDOWS_ACL_APPLY = String.raw`$p=$env:CAVEAT_ACL_PATH;$isDir=$env:CAVEAT_ACL_DIRECTORY -eq '1';$sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User;$acl=if($isDir){New-Object System.Security.AccessControl.DirectorySecurity}else{New-Object System.Security.AccessControl.FileSecurity};$acl.SetAccessRuleProtection($true,$false);$flags=if($isDir){[System.Security.AccessControl.InheritanceFlags]'ContainerInherit, ObjectInherit'}else{[System.Security.AccessControl.InheritanceFlags]::None};$rule=New-Object System.Security.AccessControl.FileSystemAccessRule($sid,'FullControl',$flags,[System.Security.AccessControl.PropagationFlags]::None,[System.Security.AccessControl.AccessControlType]::Allow);$acl.SetOwner($sid);$acl.AddAccessRule($rule);if($isDir){[System.IO.Directory]::SetAccessControl($p,$acl)}else{[System.IO.File]::SetAccessControl($p,$acl)};` + WINDOWS_ACL_VERIFY;
+var WINDOWS_ACL_VERIFY = String.raw`$ErrorActionPreference='Stop';$p=$env:CAVEAT_ACL_PATH;$sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value;$acl=Get-Acl -LiteralPath $p;$owner=$acl.GetOwner([System.Security.Principal.SecurityIdentifier]).Value;if($owner -ne $sid){exit 41};$rules=@($acl.GetAccessRules($true,$true,[System.Security.Principal.SecurityIdentifier]));if($rules.Count -ne 1){exit 42};$r=$rules[0];if($r.IdentityReference.Value -ne $sid -or $r.AccessControlType -ne 'Allow' -or $r.IsInherited -or ($r.FileSystemRights -band [System.Security.AccessControl.FileSystemRights]::FullControl) -ne [System.Security.AccessControl.FileSystemRights]::FullControl){exit 43}`;
+var WINDOWS_ACL_APPLY = String.raw`$ErrorActionPreference='Stop';$p=$env:CAVEAT_ACL_PATH;$isDir=$env:CAVEAT_ACL_DIRECTORY -eq '1';$sid=[System.Security.Principal.WindowsIdentity]::GetCurrent().User;$acl=if($isDir){New-Object System.Security.AccessControl.DirectorySecurity}else{New-Object System.Security.AccessControl.FileSecurity};$acl.SetAccessRuleProtection($true,$false);$flags=if($isDir){[System.Security.AccessControl.InheritanceFlags]'ContainerInherit, ObjectInherit'}else{[System.Security.AccessControl.InheritanceFlags]::None};$rule=New-Object System.Security.AccessControl.FileSystemAccessRule($sid,'FullControl',$flags,[System.Security.AccessControl.PropagationFlags]::None,[System.Security.AccessControl.AccessControlType]::Allow);$acl.SetOwner($sid);$acl.AddAccessRule($rule);Set-Acl -LiteralPath $p -AclObject $acl;` + WINDOWS_ACL_VERIFY;
 var WINDOWS_ACL_TIMEOUT_MS = 3e4;
 function runWindowsAcl(path, directory, apply) {
-  const result = spawnSync("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", apply ? WINDOWS_ACL_APPLY : WINDOWS_ACL_VERIFY], { env: { ...process.env, CAVEAT_ACL_PATH: path, CAVEAT_ACL_DIRECTORY: directory ? "1" : "0" }, encoding: "utf-8", timeout: WINDOWS_ACL_TIMEOUT_MS, windowsHide: true });
+  const result = spawnSync("pwsh.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", apply ? WINDOWS_ACL_APPLY : WINDOWS_ACL_VERIFY], { env: { ...process.env, CAVEAT_ACL_PATH: path, CAVEAT_ACL_DIRECTORY: directory ? "1" : "0" }, encoding: "utf-8", timeout: WINDOWS_ACL_TIMEOUT_MS, windowsHide: true });
   if (result.error !== void 0) throw Error(`store_unsafe: powershell spawn ${result.error.code ?? result.error.message}`);
   if (result.status !== 0) throw Error(`store_unsafe: powershell exit=${result.status} signal=${result.signal ?? "none"} stderr=${(result.stderr ?? "").replace(/\s+/g, " ").trim().slice(0, 400) || "(empty)"}`);
 }
 function secureWindowsAcl(path, runner, directory = false, apply = false) {
   try {
     (runner ?? runWindowsAcl)(path, directory, apply);
-  } catch {
-    throw Error("store_unsafe");
+  } catch (cause) {
+    throw Error("store_unsafe", { cause });
   }
 }
 function assertPosix(info, mode) {
@@ -17435,7 +17415,7 @@ function validate(store) {
 function readStore(path, isWin, options2 = {}) {
   if (!existsSync16(path)) return empty();
   ensureSafeFile(path, isWin, options2);
-  const value = JSON.parse(readFileSync13(path, "utf8"));
+  const value = JSON.parse(readFileSync14(path, "utf8"));
   validate(value);
   return value;
 }
@@ -17748,7 +17728,7 @@ function formatYmd(d) {
 }
 
 // ../../packages/core/dist/update.js
-import { readFileSync as readFileSync14, statSync as statSync9, writeFileSync as writeFileSync11 } from "node:fs";
+import { readFileSync as readFileSync15, statSync as statSync9, writeFileSync as writeFileSync11 } from "node:fs";
 import { join as join15 } from "node:path";
 var IMMUTABLE_KEYS = /* @__PURE__ */ new Set([
   "id",
@@ -17769,7 +17749,7 @@ function updateEntry(id, patch, opts) {
   }
   const relPath = row.path;
   const filePath = join15(opts.entriesRoot, relPath);
-  const raw = readFileSync14(filePath, "utf-8");
+  const raw = readFileSync15(filePath, "utf-8");
   const parsed = parseMarkdown(raw);
   if (patch.frontmatter) {
     for (const key of Object.keys(patch.frontmatter)) {
@@ -17926,6 +17906,10 @@ export {
   acquireReindexLock,
   releaseReindexLock,
   reindexAllSources,
+  isWindows,
+  isPrivateOwnerStat,
+  powershellCallPrefix,
+  nodeExecutableNames,
   communityAdd,
   communityPull,
   communityList,
@@ -17936,11 +17920,6 @@ export {
   maybeSweepPendingDirs,
   drainPendingRemindersDetailed,
   createKeyserverKeyProvider,
-  isWindows,
-  isPrivateOwnerStat,
-  powershellCallPrefix,
-  nodeExecutableNames,
-  SyncError,
   syncOwn,
   KNOWLEDGE_GITIGNORE,
   initOwnSync,
@@ -18009,4 +17988,4 @@ strip-bom-string/index.js:
 js-yaml/dist/js-yaml.mjs:
   (*! js-yaml 4.1.1 https://github.com/nodeca/js-yaml @license MIT *)
 */
-//# sourceMappingURL=chunk-KAULUIC4.js.map
+//# sourceMappingURL=chunk-NZD3FHU6.js.map