rulesync 16.2.0 → 16.4.0

package/dist/{import-CArKOPG_.js → import-BwakMyyf.js}

@@ -61,6 +61,13 @@ const ALL_FEATURES = [
 	...ACTIVE_FEATURES_AFTER_IGNORE
 ];
 const ALL_FEATURES_WITH_WILDCARD = [...ALL_FEATURES, "*"];
+/**
+* Features that remain accepted for compatibility but are superseded by a
+* newer feature. Maps each deprecated feature to its replacement; consumers
+* (e.g. `rulesync doctor`) derive their deprecation warnings from this map so
+* the set cannot drift from the schema above.
+*/
+const DEPRECATED_FEATURE_REPLACEMENTS = { ignore: "permissions" };
 const ACTIVE_FEATURES = [...ACTIVE_FEATURES_BEFORE_IGNORE, ...ACTIVE_FEATURES_AFTER_IGNORE];
 const DeprecatedIgnoreFeatureSchema = z.literal("ignore").check(meta({
 	deprecated: true,
@@ -810,6 +817,7 @@ const ErrorCodes = {
 	GITIGNORE_FAILED: "GITIGNORE_FAILED",
 	INIT_FAILED: "INIT_FAILED",
 	MCP_FAILED: "MCP_FAILED",
+	DOCTOR_FAILED: "DOCTOR_FAILED",
 	UNKNOWN_ERROR: "UNKNOWN_ERROR"
 };
 /**
@@ -818,10 +826,12 @@ const ErrorCodes = {
 var CLIError = class extends Error {
 	code;
 	exitCode;
-	constructor(message, code = ErrorCodes.UNKNOWN_ERROR, exitCode = 1) {
+	details;
+	constructor(message, code = ErrorCodes.UNKNOWN_ERROR, exitCode = 1, details) {
 		super(message);
 		this.code = code;
 		this.exitCode = exitCode;
+		this.details = details;
 		this.name = "CLIError";
 	}
 };
@@ -945,6 +955,7 @@ var JsonLogger = class extends BaseLogger {
 			message: errorMessage
 		};
 		if (this._verbose && message instanceof Error && message.stack) errorInfo.stack = message.stack;
+		if (message instanceof CLIError && message.details !== void 0) errorInfo.details = message.details;
 		this.outputJson(false, errorInfo);
 	}
 	debug(_message, ..._args) {}
@@ -1005,6 +1016,10 @@ function hasControlCharacters(value) {
 }
 //#endregion
 //#region src/config/config.ts
+/**
+* Key accepted alongside feature names in the per-feature object form of
+* `targets`. Exported so `rulesync doctor` treats the same key as valid.
+*/
 const GITIGNORE_DESTINATION_KEY = "gitignoreDestination";
 /**
 * Schema for a single source entry in the sources array.
@@ -1071,7 +1086,9 @@ function normalizeConfigFilePath({ configFilePath, inputRoot }) {
 	return isAbsolute(configFilePath) ? configFilePath : resolve(configFilePath);
 }
 /**
-* Conflicting target pairs that cannot be used together
+* Conflicting target pairs that cannot be used together.
+* Exported so `rulesync doctor` can report the same conflicts as diagnostics
+* without duplicating the list.
 */
 const CONFLICTING_TARGET_PAIRS = [["augmentcode", "augmentcode-legacy"], ["claudecode", "claudecode-legacy"]];
 /**
@@ -2339,6 +2356,7 @@ const PI_HOOK_EVENTS = [
 	"preToolUse",
 	"postToolUse",
 	"preModelInvocation",
+	"postModelInvocation",
 	"beforeSubmitPrompt",
 	"stop",
 	"preCompact",
@@ -3045,6 +3063,7 @@ const CANONICAL_TO_PI_EVENT_NAMES = {
 	preToolUse: "tool_call",
 	postToolUse: "tool_result",
 	preModelInvocation: "context",
+	postModelInvocation: "message_end",
 	beforeSubmitPrompt: "input",
 	stop: "agent_end",
 	preCompact: "session_before_compact",
@@ -6810,24 +6829,14 @@ const SHARED_CONFIG_OWNERSHIP = {
 	},
 	".devin/config.json": {
 		format: "json",
-		features: {
-			mcp: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["mcpServers"]
-			},
-			permissions: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["permissions"]
-			}
-		}
+		features: { permissions: {
+			kind: "replace-owned-keys",
+			ownedKeys: ["permissions"]
+		} }
 	},
 	".config/devin/config.json": {
 		format: "json",
 		features: {
-			mcp: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["mcpServers"]
-			},
 			hooks: {
 				kind: "replace-owned-keys",
 				ownedKeys: ["hooks"]
@@ -9027,6 +9036,7 @@ const DEVIN_GLOBAL_CONFIG_DIR_PATH = join(".config", "devin");
 const DEVIN_GLOBAL_AGENTS_DIR_PATH = join(DEVIN_GLOBAL_CONFIG_DIR_PATH, "agents");
 const DEVIN_GLOBAL_SKILLS_DIR_PATH = join(DEVIN_GLOBAL_CONFIG_DIR_PATH, "skills");
 const DEVIN_CONFIG_FILE_NAME = "config.json";
+const DEVIN_MCP_CONFIG_FILE_NAME = "mcp_config.json";
 const DEVIN_HOOKS_V1_FILE_NAME = "hooks.v1.json";
 const DEVIN_GLOBAL_AGENTS_FILE_NAME = "AGENTS.md";
 const DEVIN_IGNORE_FILE_NAME = ".devinignore";
@@ -11284,6 +11294,7 @@ const QWENCODE_COMMANDS_DIR_PATH = join(QWENCODE_DIR, "commands");
 const QWENCODE_AGENTS_DIR_PATH = join(QWENCODE_DIR, "agents");
 const QWENCODE_SKILLS_DIR_PATH = join(QWENCODE_DIR, "skills");
 const QWENCODE_RULE_FILE_NAME = "QWEN.md";
+const QWENCODE_LOCAL_RULE_FILE_NAME = "QWEN.local.md";
 const QWENCODE_IGNORE_FILE_NAME = ".qwenignore";
 const QWENCODE_SETTINGS_FILE_NAME = "settings.json";
 //#endregion
@@ -12030,6 +12041,7 @@ const WARP_SKILLS_DIR_PATH = join(WARP_DIR, "skills");
 const WARP_LINUX_DIR = join(".config", "warp-terminal");
 const WARP_WIN32_DIR = join("AppData", "Local", "warp", "Warp", "config");
 const WARP_RULE_FILE_NAME = "AGENTS.md";
+const WARP_GLOBAL_RULE_DIR = ".agents";
 const WARP_MCP_FILE_NAME = ".mcp.json";
 const WARP_PERMISSIONS_FILE_NAME = "settings.toml";
 const WARP_IGNORE_FILE_NAME = ".warpindexingignore";
@@ -14765,9 +14777,9 @@ const DEVIN_CONVERTER_CONFIG = {
 * - Project scope: `.devin/hooks.v1.json`. This is a standalone file whose top
 *   level IS the event map (no wrapper key).
 * - Global scope: `~/.config/devin/config.json` under the `"hooks"` key. This
-*   file is shared with the MCP (`mcpServers`) and permissions (`permissions`)
-*   features, so reads and writes merge into the existing JSON and the file is
-*   never deleted in global mode.
+*   file is shared with the permissions (`permissions`) feature (MCP moved to
+*   the dedicated mcp_config.json in v3000.3), so reads and writes merge into
+*   the existing JSON and the file is never deleted in global mode.
 *
 * @see https://docs.devin.ai/cli/extensibility/hooks/overview
 */
@@ -16379,6 +16391,13 @@ var OpencodeHooks = class OpencodeHooks extends ToolHooks {
 */
 const PI_TOOL_EVENTS = /* @__PURE__ */ new Set(["tool_call", "tool_result"]);
 /**
+* Pi extension events that fire for every message role (user, assistant,
+* toolResult). The generated handler gates these on the assistant role so a
+* `postModelInvocation` hook runs once per finalized model response rather
+* than for every message in the conversation.
+*/
+const PI_ASSISTANT_MESSAGE_EVENTS = /* @__PURE__ */ new Set(["message_end"]);
+/**
 * Validate a hook matcher as a regular expression and return it as a JS
 * string-literal (JSON.stringify quoting) safe to embed in generated code.
 */
@@ -16419,7 +16438,10 @@ function buildSubscriptionLines(handlerGroups) {
 	const lines = [];
 	for (const [piEvent, handlers] of Object.entries(handlerGroups)) {
 		const usesToolName = PI_TOOL_EVENTS.has(piEvent) && handlers.some((h) => h.matcher);
-		lines.push(`  pi.on(${JSON.stringify(piEvent)}, async (${usesToolName ? "event" : ""}) => {`);
+		const gatesOnAssistant = PI_ASSISTANT_MESSAGE_EVENTS.has(piEvent);
+		const usesEvent = usesToolName || gatesOnAssistant;
+		lines.push(`  pi.on(${JSON.stringify(piEvent)}, async (${usesEvent ? "event" : ""}) => {`);
+		if (gatesOnAssistant) lines.push(`    if (event.message.role !== "assistant") return;`);
 		for (const handler of handlers) {
 			const embeddedCommand = JSON.stringify(handler.command);
 			if (usesToolName && handler.matcher) {
@@ -16554,6 +16576,7 @@ function canonicalDefToQwencodeHook(def) {
 	const type = def.type ?? "command";
 	const isHttp = type === "http";
 	const isCommand = type === "command";
+	const isPrompt = type === "prompt";
 	return {
 		type,
 		...compact({
@@ -16563,6 +16586,8 @@ function canonicalDefToQwencodeHook(def) {
 			name: def.name,
 			description: def.description,
 			statusMessage: def.statusMessage,
+			prompt: isPrompt ? def.prompt : void 0,
+			model: isPrompt ? def.model : void 0,
 			async: isCommand ? def.async : void 0,
 			env: isCommand ? def.env : void 0,
 			shell: isCommand ? def.shell : void 0,
@@ -16581,7 +16606,7 @@ function canonicalDefToQwencodeHook(def) {
 * is needed here — commands are passed through verbatim and any such variable
 * reference stays intact for Qwen Code to expand.
 */
-function canonicalToQwencodeHooks(config) {
+function canonicalToQwencodeHooks(config, logger) {
 	const qwencodeSupported = new Set(QWENCODE_HOOK_EVENTS);
 	const sharedHooks = {};
 	for (const [event, defs] of Object.entries(config.hooks)) if (qwencodeSupported.has(event)) sharedHooks[event] = defs;
@@ -16601,6 +16626,7 @@ function canonicalToQwencodeHooks(config) {
 		const byMatcher = /* @__PURE__ */ new Map();
 		for (const def of definitions) {
 			if (!qwencodeSupportedTypes.has(def.type ?? "command")) continue;
+			if (def.type === "prompt" && !def.prompt) logger?.warn(`Qwen Code prompt hook on '${eventName}' has no 'prompt' field; Qwen Code will load it and fail it at runtime.`);
 			const key = def.matcher ?? "";
 			const list = byMatcher.get(key);
 			if (list) list.push(def);
@@ -16639,7 +16665,9 @@ const QwencodeHookEntrySchema = z.looseObject({
 	shell: z.optional(z.string()),
 	headers: z.optional(z.record(z.string(), z.string())),
 	allowedEnvVars: z.optional(z.array(z.string())),
-	once: z.optional(z.boolean())
+	once: z.optional(z.boolean()),
+	prompt: z.optional(z.string()),
+	model: z.optional(z.string())
 });
 /**
 * A matcher group entry in a Qwen Code event array.
@@ -16654,37 +16682,43 @@ const QwencodeMatcherEntrySchema = z.looseObject({
 /**
 * Convert a single parsed Qwen Code matcher group into canonical hook definitions.
 */
+function qwencodeHookEntryToCanonical({ hook, sequential, matcher }) {
+	const h = hook;
+	const hookType = h.type === "command" || h.type === "prompt" || h.type === "http" || h.type === "function" ? h.type : "command";
+	const isHttp = hookType === "http";
+	const isCommand = hookType === "command";
+	const isPrompt = hookType === "prompt";
+	const shell = h.shell === "bash" || h.shell === "powershell" ? h.shell : void 0;
+	return {
+		type: hookType,
+		...compact({
+			command: h.command,
+			url: h.url,
+			timeout: h.timeout,
+			name: h.name,
+			description: h.description,
+			statusMessage: h.statusMessage,
+			async: isCommand ? h.async : void 0,
+			env: isCommand ? h.env : void 0,
+			shell: isCommand ? shell : void 0,
+			headers: isHttp ? h.headers : void 0,
+			allowedEnvVars: isHttp ? h.allowedEnvVars : void 0,
+			once: isHttp ? h.once : void 0,
+			prompt: isPrompt ? h.prompt : void 0,
+			model: isPrompt ? h.model : void 0,
+			sequential: sequential ? true : void 0,
+			matcher
+		})
+	};
+}
 function qwencodeMatcherEntryToCanonical(entry) {
-	const defs = [];
-	const hooks = entry.hooks ?? [];
 	const sequential = entry.sequential === true;
 	const matcher = entry.matcher !== void 0 && entry.matcher !== null && entry.matcher !== "" ? entry.matcher : void 0;
-	for (const h of hooks) {
-		const hookType = h.type === "command" || h.type === "prompt" || h.type === "http" || h.type === "function" ? h.type : "command";
-		const isHttp = hookType === "http";
-		const isCommand = hookType === "command";
-		const shell = h.shell === "bash" || h.shell === "powershell" ? h.shell : void 0;
-		defs.push({
-			type: hookType,
-			...compact({
-				command: h.command,
-				url: h.url,
-				timeout: h.timeout,
-				name: h.name,
-				description: h.description,
-				statusMessage: h.statusMessage,
-				async: isCommand ? h.async : void 0,
-				env: isCommand ? h.env : void 0,
-				shell: isCommand ? shell : void 0,
-				headers: isHttp ? h.headers : void 0,
-				allowedEnvVars: isHttp ? h.allowedEnvVars : void 0,
-				once: isHttp ? h.once : void 0,
-				sequential: sequential ? true : void 0,
-				matcher
-			})
-		});
-	}
-	return defs;
+	return (entry.hooks ?? []).map((hook) => qwencodeHookEntryToCanonical({
+		hook,
+		sequential,
+		matcher
+	}));
 }
 /**
 * Extract hooks from Qwen Code settings.json into canonical format.
@@ -16732,12 +16766,12 @@ var QwencodeHooks = class QwencodeHooks extends ToolHooks {
 			validate
 		});
 	}
-	static async fromRulesyncHooks({ outputRoot = process.cwd(), rulesyncHooks, validate = true, global = false }) {
+	static async fromRulesyncHooks({ outputRoot = process.cwd(), rulesyncHooks, validate = true, global = false, logger }) {
 		const paths = QwencodeHooks.getSettablePaths({ global });
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({}, null, 2);
 		const config = rulesyncHooks.getJson();
-		const patch = { hooks: canonicalToQwencodeHooks(config) };
+		const patch = { hooks: canonicalToQwencodeHooks(config, logger) };
 		const disableAllHooks = config.qwencode?.disableAllHooks;
 		if (typeof disableAllHooks === "boolean") patch.disableAllHooks = disableAllHooks;
 		const fileContent = applySharedConfigPatch({
@@ -20763,18 +20797,24 @@ var DeepagentsMcp = class DeepagentsMcp extends ToolMcp {
 /**
 * MCP generator for Devin Local (native `.devin/` configuration).
 *
-* Devin reads MCP servers from the `mcpServers` key of its native config file:
-* - Project scope: `.devin/config.json`
-* - Global scope: `~/.config/devin/config.json`
+* Since v3000.3 (the Local 3.6 release), Devin reads MCP servers from a
+* dedicated `mcpServers`-keyed config file rather than the shared
+* `config.json`:
+* - Project scope: `.devin/mcp_config.json`
+* - Global scope: `~/.config/devin/mcp_config.json`
 *
-* The config file is shared with the permissions feature (`permissions` key)
-* and, in global mode, the hooks feature (`hooks` key), so reads and writes
-* merge into the existing JSON rather than overwriting it, and the file is
-* never deleted. Each server is a stdio entry ({ command, args, env }) or a
-* remote entry ({ serverUrl | url, headers }), and may carry an optional
-* `disabledTools` array.
+* Legacy `mcpServers` entries left in `config.json` are auto-migrated into
+* the dedicated file on Devin startup, so writing the legacy key would fight
+* the migration. Import still falls back to the legacy `config.json`
+* `mcpServers` key when no dedicated file exists, so pre-v3000.3 repos
+* migrate cleanly. The gitignored `.devin/mcp_config.local.json` override is
+* the user's personal territory and is never read or written.
 *
-* @see https://docs.devin.ai/cli/extensibility/configuration
+* Each server is a stdio entry ({ command, args, env }) or a remote entry
+* ({ serverUrl | url, headers }), and may carry an optional `disabledTools`
+* array.
+*
+* @see https://docs.devin.ai/cli/extensibility/mcp/configuration
 */
 var DevinMcp = class DevinMcp extends ToolMcp {
 	json;
@@ -20792,31 +20832,27 @@ var DevinMcp = class DevinMcp extends ToolMcp {
 			throw new Error(`Failed to parse Devin MCP config at ${join(relativeDirPath, relativeFilePath)}: ${formatError(error)}`, { cause: error });
 		}
 	}
-	/**
-	* config.json may carry the permissions/hooks features' keys, so it is never
-	* deleted; only the managed `mcpServers` key is rewritten.
-	*/
-	isDeletable() {
-		return false;
-	}
 	static getSettablePaths({ global = false } = {}) {
 		if (global) return {
 			relativeDirPath: DEVIN_GLOBAL_CONFIG_DIR_PATH,
-			relativeFilePath: DEVIN_CONFIG_FILE_NAME
+			relativeFilePath: DEVIN_MCP_CONFIG_FILE_NAME
 		};
 		return {
 			relativeDirPath: DEVIN_DIR,
-			relativeFilePath: DEVIN_CONFIG_FILE_NAME
+			relativeFilePath: DEVIN_MCP_CONFIG_FILE_NAME
 		};
 	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
-		const fileContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? "{\"mcpServers\":{}}";
-		const json = this.parseJsonOrThrow(fileContent, paths.relativeDirPath, paths.relativeFilePath);
-		const newJson = {
-			...json,
-			mcpServers: json.mcpServers ?? {}
-		};
+		let fileContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
+		if (fileContent === null) {
+			const legacyContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, DEVIN_CONFIG_FILE_NAME));
+			if (legacyContent !== null) {
+				const legacyJson = this.parseJsonOrThrow(legacyContent, paths.relativeDirPath, DEVIN_CONFIG_FILE_NAME);
+				fileContent = JSON.stringify({ mcpServers: legacyJson.mcpServers ?? {} }, null, 2);
+			}
+		}
+		const newJson = { mcpServers: this.parseJsonOrThrow(fileContent ?? "{\"mcpServers\":{}}", paths.relativeDirPath, paths.relativeFilePath).mcpServers ?? {} };
 		return new DevinMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -20826,21 +20862,21 @@ var DevinMcp = class DevinMcp extends ToolMcp {
 			global
 		});
 	}
-	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false }) {
+	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false, logger }) {
 		const paths = this.getSettablePaths({ global });
-		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
-		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({ mcpServers: {} }, null, 2);
+		const existingContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
+		if (existingContent !== null) {
+			const existingJson = this.parseJsonOrThrow(existingContent, paths.relativeDirPath, paths.relativeFilePath);
+			const existingServers = existingJson.mcpServers && typeof existingJson.mcpServers === "object" ? Object.keys(existingJson.mcpServers) : [];
+			const managedServers = new Set(Object.keys(rulesyncMcp.getMcpServers()));
+			const dropped = existingServers.filter((name) => !managedServers.has(name));
+			if (dropped.length > 0) logger?.warn(`Devin MCP servers not managed by rulesync will be removed from ${join(paths.relativeDirPath, paths.relativeFilePath)}: ${dropped.join(", ")}. Run 'rulesync import' first to keep them, or move them to mcp_config.local.json.`);
+		}
 		return new DevinMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
 			relativeFilePath: paths.relativeFilePath,
-			fileContent: applySharedConfigPatch({
-				fileKey: sharedConfigFileKey(paths),
-				feature: "mcp",
-				existingContent,
-				patch: { mcpServers: rulesyncMcp.getMcpServers() },
-				filePath
-			}),
+			fileContent: JSON.stringify({ mcpServers: rulesyncMcp.getMcpServers() }, null, 2),
 			validate,
 			global
 		});
@@ -27558,9 +27594,10 @@ function buildDevinPermissionEntry(scope, pattern) {
 * - Project scope: `.devin/config.json`
 * - Global scope: `~/.config/devin/config.json`
 *
-* The config file is shared with the MCP (`mcpServers`) and, in global mode, the
-* hooks (`hooks`) features, so reads and writes merge into the existing JSON and
-* the file is never deleted; only the managed `permissions` key is rewritten.
+* In global mode the config file is shared with the hooks (`hooks`) feature
+* (MCP moved to the dedicated mcp_config.json in v3000.3), so reads and writes
+* merge into the existing JSON and the file is never deleted; only the managed
+* `permissions` key is rewritten.
 *
 * @see https://docs.devin.ai/cli/reference/permissions
 */
@@ -31434,6 +31471,10 @@ function ensurePermission(permission, category) {
 const WARP_GLOBAL_ONLY_MESSAGE = "Warp permissions are global-only; use --global to sync Warp's settings.toml";
 const ALLOWLIST_KEY = "agent_mode_command_execution_allowlist";
 const DENYLIST_KEY = "agent_mode_command_execution_denylist";
+const EXECUTION_PROFILES_KEY = "execution_profiles";
+const DEFAULT_PROFILE_KEY = "default";
+const PROFILE_ALLOWLIST_KEY = "command_allowlist";
+const PROFILE_DENYLIST_KEY = "command_denylist";
 const WARP_OVERRIDE_KEYS = [
 	"agent_mode_coding_permissions",
 	"agent_mode_coding_file_read_allowlist",
@@ -31461,11 +31502,21 @@ function warpSettingsDir() {
 /**
 * Permissions adapter for Warp.
 *
-* Warp gates **shell command** execution through two regex arrays under the
-* `[agents.profiles]` table of the global user `settings.toml`:
-* - `agent_mode_command_execution_allowlist` — commands that auto-execute.
-* - `agent_mode_command_execution_denylist` — commands that always require
-*   permission (the denylist wins over the allowlist).
+* Warp gates **shell command** execution through two regex arrays in the
+* global user `settings.toml`. Since file-backed execution profiles went
+* Stable (2026-07-28) the authoritative surface is the `default` record of the
+* `[agents.execution_profiles.<id>]` collection:
+* - `command_allowlist` — commands that auto-execute.
+* - `command_denylist` — commands that always require permission (the denylist
+*   wins over the allowlist).
+*
+* The legacy `[agents.profiles]` keys
+* (`agent_mode_command_execution_allowlist` / `denylist`) are consumed only
+* once by Warp's one-shot migration and are ignored afterwards. Both surfaces
+* are written: the legacy block keeps un-migrated installs and old clients
+* working, and the `default` execution profile (merged in place, only when the
+* collection already exists) keeps migrated installs enforcing the lists.
+* Import prefers the execution profile and falls back to the legacy keys.
 *
 * This surface is **global only** — there is no project-scoped Warp permissions
 * file. rulesync's canonical `permission.bash` patterns map directly (`allow` →
@@ -31544,6 +31595,18 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		if (mergedDeny.length > 0) profiles[DENYLIST_KEY] = mergedDeny;
 		else delete profiles[DENYLIST_KEY];
 		agents.profiles = profiles;
+		if (isRecord(agents[EXECUTION_PROFILES_KEY])) {
+			const executionProfiles = { ...agents[EXECUTION_PROFILES_KEY] };
+			const defaultProfile = isRecord(executionProfiles[DEFAULT_PROFILE_KEY]) ? { ...executionProfiles[DEFAULT_PROFILE_KEY] } : {};
+			if (mergedAllow.length > 0) defaultProfile[PROFILE_ALLOWLIST_KEY] = mergedAllow;
+			else delete defaultProfile[PROFILE_ALLOWLIST_KEY];
+			if (mergedDeny.length > 0) defaultProfile[PROFILE_DENYLIST_KEY] = mergedDeny;
+			else delete defaultProfile[PROFILE_DENYLIST_KEY];
+			executionProfiles[DEFAULT_PROFILE_KEY] = defaultProfile;
+			agents[EXECUTION_PROFILES_KEY] = executionProfiles;
+			const otherProfileIds = Object.keys(executionProfiles).filter((id) => id !== DEFAULT_PROFILE_KEY);
+			if (mergedDeny.length > 0 && otherProfileIds.length > 0 && logger) logger.warn(`Warp command deny rules were written to the 'default' execution profile only; they are not enforced while another profile (${otherProfileIds.join(", ")}) is active.`);
+		}
 		settings.agents = agents;
 		return new WarpPermissions({
 			outputRoot,
@@ -31563,9 +31626,11 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		}
 		const agents = isRecord(settings.agents) ? settings.agents : {};
 		const profiles = isRecord(agents.profiles) ? agents.profiles : {};
+		const executionProfiles = isRecord(agents[EXECUTION_PROFILES_KEY]) ? agents[EXECUTION_PROFILES_KEY] : void 0;
+		const defaultProfile = executionProfiles && isRecord(executionProfiles[DEFAULT_PROFILE_KEY]) ? executionProfiles[DEFAULT_PROFILE_KEY] : void 0;
 		const config = convertWarpToRulesyncPermissions({
-			allow: isStringArray$1(profiles[ALLOWLIST_KEY]) ? profiles[ALLOWLIST_KEY] : [],
-			deny: isStringArray$1(profiles[DENYLIST_KEY]) ? profiles[DENYLIST_KEY] : []
+			allow: defaultProfile ? isStringArray$1(defaultProfile[PROFILE_ALLOWLIST_KEY]) ? defaultProfile[PROFILE_ALLOWLIST_KEY] : [] : isStringArray$1(profiles[ALLOWLIST_KEY]) ? profiles[ALLOWLIST_KEY] : [],
+			deny: defaultProfile ? isStringArray$1(defaultProfile[PROFILE_DENYLIST_KEY]) ? defaultProfile[PROFILE_DENYLIST_KEY] : [] : isStringArray$1(profiles[DENYLIST_KEY]) ? profiles[DENYLIST_KEY] : []
 		});
 		const warpOverride = {};
 		for (const key of WARP_OVERRIDE_KEYS) if (profiles[key] !== void 0) warpOverride[key] = profiles[key];
@@ -37315,7 +37380,8 @@ const toolSkillFactories = /* @__PURE__ */ new Map([
 		meta: {
 			supportsProject: true,
 			supportsSimulated: false,
-			supportsGlobal: true
+			supportsGlobal: true,
+			lenientImport: true
 		}
 	}],
 	["aiassistant", {
@@ -37752,7 +37818,7 @@ var SkillsProcessor = class extends DirFeatureProcessor {
 						global: this.global
 					});
 				} catch (error) {
-					if (!isConfiguredRoot) throw error;
+					if (!isConfiguredRoot && !factory.meta.lenientImport) throw error;
 					this.logger.warn(`Skipping ${join(relativeDirPath, dirName)}: ${formatError(error)}`);
 					return null;
 				}
@@ -46401,6 +46467,13 @@ var QwencodeRule = class QwencodeRule extends ToolRule {
 			toolTarget: "qwencode"
 		});
 	}
+	/**
+	* The personal local context file lives under `.qwen/`, not at the project
+	* root where the settable root path points, so override the deletion glob.
+	*/
+	static getLocalRootDeletionGlob({ outputRoot, fileName }) {
+		return join(outputRoot, QWENCODE_DIR, fileName);
+	}
 };
 //#endregion
 //#region src/features/rules/reasonix-rule.ts
@@ -47004,14 +47077,18 @@ var WarpRule = class WarpRule extends ToolRule {
 			root: root ?? false
 		});
 	}
-	static getSettablePaths(_options = {}) {
+	static getSettablePaths({ global = false } = {}) {
+		if (global) return { root: {
+			relativeDirPath: WARP_GLOBAL_RULE_DIR,
+			relativeFilePath: WARP_RULE_FILE_NAME
+		} };
 		return { root: {
 			relativeDirPath: ".",
 			relativeFilePath: WARP_RULE_FILE_NAME
 		} };
 	}
-	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true }) {
-		const { root } = this.getSettablePaths();
+	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const fileContent = await readFileContent(join(outputRoot, join(root.relativeDirPath, root.relativeFilePath)));
 		return new WarpRule({
 			outputRoot,
@@ -47022,8 +47099,8 @@ var WarpRule = class WarpRule extends ToolRule {
 			root: true
 		});
 	}
-	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true }) {
-		const { root } = this.getSettablePaths();
+	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const isRoot = rulesyncRule.getFrontmatter().root ?? false;
 		return new WarpRule({
 			outputRoot,
@@ -47043,8 +47120,8 @@ var WarpRule = class WarpRule extends ToolRule {
 			error: null
 		};
 	}
-	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath }) {
-		const { root } = this.getSettablePaths();
+	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const isRoot = relativeFilePath === root.relativeFilePath && relativeDirPath === root.relativeDirPath;
 		return new WarpRule({
 			outputRoot,
@@ -47417,6 +47494,8 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 			extension: "md",
 			supportsGlobal: true,
 			ruleDiscoveryMode: "auto",
+			localRootMode: "separate-local-file",
+			localRootFileName: QWENCODE_LOCAL_RULE_FILE_NAME,
 			additionalConventions: { subagents: { subagentClass: QwencodeSubagent } }
 		}
 	}],
@@ -47481,7 +47560,7 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 		class: WarpRule,
 		meta: {
 			extension: "md",
-			supportsGlobal: false,
+			supportsGlobal: true,
 			ruleDiscoveryMode: "toon",
 			collisionPolicy: "fold"
 		}
@@ -47815,6 +47894,14 @@ var RulesProcessor = class extends FeatureProcessor {
 			validate: true,
 			root: true
 		});
+		if (factory.class === QwencodeRule) return new QwencodeRule({
+			outputRoot: this.outputRoot,
+			relativeDirPath: QWENCODE_DIR,
+			relativeFilePath: fileName,
+			fileContent: body,
+			validate: true,
+			root: true
+		});
 		return null;
 	}
 	/**
@@ -49967,6 +50054,6 @@ async function importChecksCore(params) {
 	return writtenCount;
 }
 //#endregion
-export { ErrorCodes as $, RULESYNC_SKILLS_RELATIVE_DIR_PATH as $t, RulesyncMcp as A, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as At, stringifyFrontmatter as B, RULESYNC_IGNORE_RELATIVE_FILE_PATH as Bt, RulesyncSubagent as C, writeFileContent as Ct, RulesyncRule as D, ToolTargetSchema as Dt, RulesyncSkillFrontmatterSchema as E, PACKAGING_TOOL_TARGETS as Et, parseJsonc as F, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as Ft, ConfigFileSchema as G, RULESYNC_MCP_SCHEMA_URL as Gt, SHARED_USER_MANAGED_CONFIG_PATHS as H, RULESYNC_MCP_FILE_NAME as Ht, RulesyncCommand as I, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as It, ConsoleLogger as J, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME as Jt, SourceEntrySchema as K, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as Kt, RulesyncCommandFrontmatterSchema as L, RULESYNC_HOOKS_FILE_NAME as Lt, RulesyncHooks as M, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as Mt, getRulesyncSourceCandidates as N, RULESYNC_CONFIG_RELATIVE_FILE_PATH as Nt, RulesyncRuleFrontmatterSchema as O, MAX_FILE_SIZE as Ot, resolveRulesyncSourceWritePath as P, RULESYNC_CONFIG_SCHEMA_URL as Pt, CLIError as Q, RULESYNC_RULES_RELATIVE_DIR_PATH as Qt, RulesyncCheck as R, RULESYNC_HOOKS_LEGACY_FILE_NAME as Rt, getLocalSkillDirNames as S, toPosixPath as St, RulesyncSkill as T, ALL_TOOL_TARGETS_WITH_WILDCARD as Tt, SKILL_FILE_NAME as U, RULESYNC_MCP_LEGACY_FILE_NAME as Ut, loadYaml as V, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as Vt, ConfigResolver as W, RULESYNC_MCP_RELATIVE_FILE_PATH as Wt, fallbackLogger as X, RULESYNC_PERMISSIONS_SCHEMA_URL as Xt, JsonLogger as Y, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as Yt, warnOnConflictingFlags as Z, RULESYNC_RELATIVE_DIR_PATH as Zt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as _, removeFile as _t, convertFromTool as a, directoryExists as at, CODEXCLI_BASH_RULES_FILE_NAME as b, resolvePath as bt, SubagentsProcessor as c, findFilesByGlobs as ct, IgnoreProcessor as d, isSymlink as dt, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as en, assertDirectoryIfExists as et, HooksProcessor as f, listDirectoryFiles as ft, CLAUDECODE_MEMORIES_DIR_NAME as g, removeDirectoryStrict as gt, CLAUDECODE_LOCAL_RULE_FILE_NAME as h, removeDirectory as ht, getProcessorRegistryEntry as i, formatError as in, createTempDirectory as it, RulesyncIgnore as j, RULESYNC_CHECKS_RELATIVE_DIR_PATH as jt, RulesyncPermissions as k, RULESYNC_AIIGNORE_FILE_NAME as kt, SkillsProcessor as l, getFileSize as lt, CLAUDECODE_DIR as m, readFileContentOrNull as mt, checkRulesyncDirExists as n, ALL_FEATURES as nn, assertWritablePathInsideRoot as nt, isPackagingToolTarget as o, ensureDir as ot, CommandsProcessor as p, readFileContent as pt, findControlCharacter as q, RULESYNC_PERMISSIONS_FILE_NAME as qt, generate as r, ALL_FEATURES_WITH_WILDCARD as rn, checkPathTraversal as rt, RulesProcessor as s, fileExists as st, importFromTool as t, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as tn, assertTreeContainsNoSymlinks as tt, McpProcessor as u, getHomeDirectory as ut, CLAUDECODE_SKILLS_DIR_PATH as v, removeFileStrict as vt, RulesyncSubagentFrontmatterSchema as w, ALL_TOOL_TARGETS as wt, CODEXCLI_DIR as x, runWithDirectoryRollback as xt, ChecksProcessor as y, removeTempDirectory as yt, RulesyncCheckFrontmatterSchema as z, RULESYNC_HOOKS_RELATIVE_FILE_PATH as zt };
+export { JsonLogger as $, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as $t, RulesyncRuleFrontmatterSchema as A, PACKAGING_TOOL_TARGETS as At, RulesyncCheck as B, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as Bt, CODEXCLI_DIR as C, removeTempDirectory as Ct, RulesyncSkill as D, writeFileContent as Dt, RulesyncSubagentFrontmatterSchema as E, toPosixPath as Et, getRulesyncSourceCandidates as F, RULESYNC_CHECKS_RELATIVE_DIR_PATH as Ft, SKILL_FILE_NAME as G, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as Gt, stringifyFrontmatter as H, RULESYNC_HOOKS_LEGACY_FILE_NAME as Ht, resolveRulesyncSourceWritePath as I, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as It, ConfigFileSchema as J, RULESYNC_MCP_RELATIVE_FILE_PATH as Jt, ConfigResolver as K, RULESYNC_MCP_FILE_NAME as Kt, parseJsonc as L, RULESYNC_CONFIG_RELATIVE_FILE_PATH as Lt, RulesyncMcp as M, MAX_FILE_SIZE as Mt, RulesyncIgnore as N, RULESYNC_AIIGNORE_FILE_NAME as Nt, RulesyncSkillFrontmatterSchema as O, ALL_TOOL_TARGETS as Ot, RulesyncHooks as P, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as Pt, ConsoleLogger as Q, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME as Qt, RulesyncCommand as R, RULESYNC_CONFIG_SCHEMA_URL as Rt, CODEXCLI_BASH_RULES_FILE_NAME as S, removeFileStrict as St, RulesyncSubagent as T, runWithDirectoryRollback as Tt, loadYaml as U, RULESYNC_HOOKS_RELATIVE_FILE_PATH as Ut, RulesyncCheckFrontmatterSchema as V, RULESYNC_HOOKS_FILE_NAME as Vt, SHARED_USER_MANAGED_CONFIG_PATHS as W, RULESYNC_IGNORE_RELATIVE_FILE_PATH as Wt, SourceEntrySchema as X, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as Xt, GITIGNORE_DESTINATION_KEY as Y, RULESYNC_MCP_SCHEMA_URL as Yt, findControlCharacter as Z, RULESYNC_PERMISSIONS_FILE_NAME as Zt, CLAUDECODE_LOCAL_RULE_FILE_NAME as _, readFileContent as _t, convertFromTool as a, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as an, assertTreeContainsNoSymlinks as at, CLAUDECODE_SKILLS_DIR_PATH as b, removeDirectoryStrict as bt, SubagentsProcessor as c, DEPRECATED_FEATURE_REPLACEMENTS as cn, createTempDirectory as ct, IgnoreProcessor as d, fileExists as dt, RULESYNC_PERMISSIONS_SCHEMA_URL as en, fallbackLogger as et, HooksProcessor as f, findFilesByGlobs as ft, CLAUDECODE_DIR as g, listDirectoryFiles as gt, QWENCODE_LOCAL_RULE_FILE_NAME as h, isSymlink as ht, getProcessorRegistryEntry as i, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as in, assertDirectoryIfExists as it, RulesyncPermissions as j, ToolTargetSchema as jt, RulesyncRule as k, ALL_TOOL_TARGETS_WITH_WILDCARD as kt, SkillsProcessor as l, formatError as ln, directoryExists as lt, QWENCODE_DIR as m, getHomeDirectory as mt, checkRulesyncDirExists as n, RULESYNC_RULES_RELATIVE_DIR_PATH as nn, CLIError as nt, isPackagingToolTarget as o, ALL_FEATURES as on, assertWritablePathInsideRoot as ot, CommandsProcessor as p, getFileSize as pt, CONFLICTING_TARGET_PAIRS as q, RULESYNC_MCP_LEGACY_FILE_NAME as qt, generate as r, RULESYNC_SKILLS_RELATIVE_DIR_PATH as rn, ErrorCodes as rt, RulesProcessor as s, ALL_FEATURES_WITH_WILDCARD as sn, checkPathTraversal as st, importFromTool as t, RULESYNC_RELATIVE_DIR_PATH as tn, warnOnConflictingFlags as tt, McpProcessor as u, ensureDir as ut, CLAUDECODE_MEMORIES_DIR_NAME as v, readFileContentOrNull as vt, getLocalSkillDirNames as w, resolvePath as wt, ChecksProcessor as x, removeFile as xt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as y, removeDirectory as yt, RulesyncCommandFrontmatterSchema as z, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as zt };
 
-//# sourceMappingURL=import-CArKOPG_.js.map
+//# sourceMappingURL=import-BwakMyyf.js.map