rulesync 16.2.0 → 16.4.0

package/dist/{import-DNfxS6QZ.cjs → import-C9wxpZey.cjs}

@@ -86,6 +86,13 @@ const ALL_FEATURES = [
 	...ACTIVE_FEATURES_AFTER_IGNORE
 ];
 const ALL_FEATURES_WITH_WILDCARD = [...ALL_FEATURES, "*"];
+/**
+* Features that remain accepted for compatibility but are superseded by a
+* newer feature. Maps each deprecated feature to its replacement; consumers
+* (e.g. `rulesync doctor`) derive their deprecation warnings from this map so
+* the set cannot drift from the schema above.
+*/
+const DEPRECATED_FEATURE_REPLACEMENTS = { ignore: "permissions" };
 const ACTIVE_FEATURES = [...ACTIVE_FEATURES_BEFORE_IGNORE, ...ACTIVE_FEATURES_AFTER_IGNORE];
 const DeprecatedIgnoreFeatureSchema = zod_mini.z.literal("ignore").check((0, zod_mini.meta)({
 	deprecated: true,
@@ -835,6 +842,7 @@ const ErrorCodes = {
 	GITIGNORE_FAILED: "GITIGNORE_FAILED",
 	INIT_FAILED: "INIT_FAILED",
 	MCP_FAILED: "MCP_FAILED",
+	DOCTOR_FAILED: "DOCTOR_FAILED",
 	UNKNOWN_ERROR: "UNKNOWN_ERROR"
 };
 /**
@@ -843,10 +851,12 @@ const ErrorCodes = {
 var CLIError = class extends Error {
 	code;
 	exitCode;
-	constructor(message, code = ErrorCodes.UNKNOWN_ERROR, exitCode = 1) {
+	details;
+	constructor(message, code = ErrorCodes.UNKNOWN_ERROR, exitCode = 1, details) {
 		super(message);
 		this.code = code;
 		this.exitCode = exitCode;
+		this.details = details;
 		this.name = "CLIError";
 	}
 };
@@ -970,6 +980,7 @@ var JsonLogger = class extends BaseLogger {
 			message: errorMessage
 		};
 		if (this._verbose && message instanceof Error && message.stack) errorInfo.stack = message.stack;
+		if (message instanceof CLIError && message.details !== void 0) errorInfo.details = message.details;
 		this.outputJson(false, errorInfo);
 	}
 	debug(_message, ..._args) {}
@@ -1030,6 +1041,10 @@ function hasControlCharacters(value) {
 }
 //#endregion
 //#region src/config/config.ts
+/**
+* Key accepted alongside feature names in the per-feature object form of
+* `targets`. Exported so `rulesync doctor` treats the same key as valid.
+*/
 const GITIGNORE_DESTINATION_KEY = "gitignoreDestination";
 /**
 * Schema for a single source entry in the sources array.
@@ -1096,7 +1111,9 @@ function normalizeConfigFilePath({ configFilePath, inputRoot }) {
 	return (0, node_path.isAbsolute)(configFilePath) ? configFilePath : (0, node_path.resolve)(configFilePath);
 }
 /**
-* Conflicting target pairs that cannot be used together
+* Conflicting target pairs that cannot be used together.
+* Exported so `rulesync doctor` can report the same conflicts as diagnostics
+* without duplicating the list.
 */
 const CONFLICTING_TARGET_PAIRS = [["augmentcode", "augmentcode-legacy"], ["claudecode", "claudecode-legacy"]];
 /**
@@ -2364,6 +2381,7 @@ const PI_HOOK_EVENTS = [
 	"preToolUse",
 	"postToolUse",
 	"preModelInvocation",
+	"postModelInvocation",
 	"beforeSubmitPrompt",
 	"stop",
 	"preCompact",
@@ -3070,6 +3088,7 @@ const CANONICAL_TO_PI_EVENT_NAMES = {
 	preToolUse: "tool_call",
 	postToolUse: "tool_result",
 	preModelInvocation: "context",
+	postModelInvocation: "message_end",
 	beforeSubmitPrompt: "input",
 	stop: "agent_end",
 	preCompact: "session_before_compact",
@@ -6835,24 +6854,14 @@ const SHARED_CONFIG_OWNERSHIP = {
 	},
 	".devin/config.json": {
 		format: "json",
-		features: {
-			mcp: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["mcpServers"]
-			},
-			permissions: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["permissions"]
-			}
-		}
+		features: { permissions: {
+			kind: "replace-owned-keys",
+			ownedKeys: ["permissions"]
+		} }
 	},
 	".config/devin/config.json": {
 		format: "json",
 		features: {
-			mcp: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["mcpServers"]
-			},
 			hooks: {
 				kind: "replace-owned-keys",
 				ownedKeys: ["hooks"]
@@ -9052,6 +9061,7 @@ const DEVIN_GLOBAL_CONFIG_DIR_PATH = (0, node_path.join)(".config", "devin");
 const DEVIN_GLOBAL_AGENTS_DIR_PATH = (0, node_path.join)(DEVIN_GLOBAL_CONFIG_DIR_PATH, "agents");
 const DEVIN_GLOBAL_SKILLS_DIR_PATH = (0, node_path.join)(DEVIN_GLOBAL_CONFIG_DIR_PATH, "skills");
 const DEVIN_CONFIG_FILE_NAME = "config.json";
+const DEVIN_MCP_CONFIG_FILE_NAME = "mcp_config.json";
 const DEVIN_HOOKS_V1_FILE_NAME = "hooks.v1.json";
 const DEVIN_GLOBAL_AGENTS_FILE_NAME = "AGENTS.md";
 const DEVIN_IGNORE_FILE_NAME = ".devinignore";
@@ -11309,6 +11319,7 @@ const QWENCODE_COMMANDS_DIR_PATH = (0, node_path.join)(QWENCODE_DIR, "commands")
 const QWENCODE_AGENTS_DIR_PATH = (0, node_path.join)(QWENCODE_DIR, "agents");
 const QWENCODE_SKILLS_DIR_PATH = (0, node_path.join)(QWENCODE_DIR, "skills");
 const QWENCODE_RULE_FILE_NAME = "QWEN.md";
+const QWENCODE_LOCAL_RULE_FILE_NAME = "QWEN.local.md";
 const QWENCODE_IGNORE_FILE_NAME = ".qwenignore";
 const QWENCODE_SETTINGS_FILE_NAME = "settings.json";
 //#endregion
@@ -12055,6 +12066,7 @@ const WARP_SKILLS_DIR_PATH = (0, node_path.join)(WARP_DIR, "skills");
 const WARP_LINUX_DIR = (0, node_path.join)(".config", "warp-terminal");
 const WARP_WIN32_DIR = (0, node_path.join)("AppData", "Local", "warp", "Warp", "config");
 const WARP_RULE_FILE_NAME = "AGENTS.md";
+const WARP_GLOBAL_RULE_DIR = ".agents";
 const WARP_MCP_FILE_NAME = ".mcp.json";
 const WARP_PERMISSIONS_FILE_NAME = "settings.toml";
 const WARP_IGNORE_FILE_NAME = ".warpindexingignore";
@@ -14790,9 +14802,9 @@ const DEVIN_CONVERTER_CONFIG = {
 * - Project scope: `.devin/hooks.v1.json`. This is a standalone file whose top
 *   level IS the event map (no wrapper key).
 * - Global scope: `~/.config/devin/config.json` under the `"hooks"` key. This
-*   file is shared with the MCP (`mcpServers`) and permissions (`permissions`)
-*   features, so reads and writes merge into the existing JSON and the file is
-*   never deleted in global mode.
+*   file is shared with the permissions (`permissions`) feature (MCP moved to
+*   the dedicated mcp_config.json in v3000.3), so reads and writes merge into
+*   the existing JSON and the file is never deleted in global mode.
 *
 * @see https://docs.devin.ai/cli/extensibility/hooks/overview
 */
@@ -16404,6 +16416,13 @@ var OpencodeHooks = class OpencodeHooks extends ToolHooks {
 */
 const PI_TOOL_EVENTS = /* @__PURE__ */ new Set(["tool_call", "tool_result"]);
 /**
+* Pi extension events that fire for every message role (user, assistant,
+* toolResult). The generated handler gates these on the assistant role so a
+* `postModelInvocation` hook runs once per finalized model response rather
+* than for every message in the conversation.
+*/
+const PI_ASSISTANT_MESSAGE_EVENTS = /* @__PURE__ */ new Set(["message_end"]);
+/**
 * Validate a hook matcher as a regular expression and return it as a JS
 * string-literal (JSON.stringify quoting) safe to embed in generated code.
 */
@@ -16444,7 +16463,10 @@ function buildSubscriptionLines(handlerGroups) {
 	const lines = [];
 	for (const [piEvent, handlers] of Object.entries(handlerGroups)) {
 		const usesToolName = PI_TOOL_EVENTS.has(piEvent) && handlers.some((h) => h.matcher);
-		lines.push(`  pi.on(${JSON.stringify(piEvent)}, async (${usesToolName ? "event" : ""}) => {`);
+		const gatesOnAssistant = PI_ASSISTANT_MESSAGE_EVENTS.has(piEvent);
+		const usesEvent = usesToolName || gatesOnAssistant;
+		lines.push(`  pi.on(${JSON.stringify(piEvent)}, async (${usesEvent ? "event" : ""}) => {`);
+		if (gatesOnAssistant) lines.push(`    if (event.message.role !== "assistant") return;`);
 		for (const handler of handlers) {
 			const embeddedCommand = JSON.stringify(handler.command);
 			if (usesToolName && handler.matcher) {
@@ -16579,6 +16601,7 @@ function canonicalDefToQwencodeHook(def) {
 	const type = def.type ?? "command";
 	const isHttp = type === "http";
 	const isCommand = type === "command";
+	const isPrompt = type === "prompt";
 	return {
 		type,
 		...compact({
@@ -16588,6 +16611,8 @@ function canonicalDefToQwencodeHook(def) {
 			name: def.name,
 			description: def.description,
 			statusMessage: def.statusMessage,
+			prompt: isPrompt ? def.prompt : void 0,
+			model: isPrompt ? def.model : void 0,
 			async: isCommand ? def.async : void 0,
 			env: isCommand ? def.env : void 0,
 			shell: isCommand ? def.shell : void 0,
@@ -16606,7 +16631,7 @@ function canonicalDefToQwencodeHook(def) {
 * is needed here — commands are passed through verbatim and any such variable
 * reference stays intact for Qwen Code to expand.
 */
-function canonicalToQwencodeHooks(config) {
+function canonicalToQwencodeHooks(config, logger) {
 	const qwencodeSupported = new Set(QWENCODE_HOOK_EVENTS);
 	const sharedHooks = {};
 	for (const [event, defs] of Object.entries(config.hooks)) if (qwencodeSupported.has(event)) sharedHooks[event] = defs;
@@ -16626,6 +16651,7 @@ function canonicalToQwencodeHooks(config) {
 		const byMatcher = /* @__PURE__ */ new Map();
 		for (const def of definitions) {
 			if (!qwencodeSupportedTypes.has(def.type ?? "command")) continue;
+			if (def.type === "prompt" && !def.prompt) logger?.warn(`Qwen Code prompt hook on '${eventName}' has no 'prompt' field; Qwen Code will load it and fail it at runtime.`);
 			const key = def.matcher ?? "";
 			const list = byMatcher.get(key);
 			if (list) list.push(def);
@@ -16664,7 +16690,9 @@ const QwencodeHookEntrySchema = zod_mini.z.looseObject({
 	shell: zod_mini.z.optional(zod_mini.z.string()),
 	headers: zod_mini.z.optional(zod_mini.z.record(zod_mini.z.string(), zod_mini.z.string())),
 	allowedEnvVars: zod_mini.z.optional(zod_mini.z.array(zod_mini.z.string())),
-	once: zod_mini.z.optional(zod_mini.z.boolean())
+	once: zod_mini.z.optional(zod_mini.z.boolean()),
+	prompt: zod_mini.z.optional(zod_mini.z.string()),
+	model: zod_mini.z.optional(zod_mini.z.string())
 });
 /**
 * A matcher group entry in a Qwen Code event array.
@@ -16679,37 +16707,43 @@ const QwencodeMatcherEntrySchema = zod_mini.z.looseObject({
 /**
 * Convert a single parsed Qwen Code matcher group into canonical hook definitions.
 */
+function qwencodeHookEntryToCanonical({ hook, sequential, matcher }) {
+	const h = hook;
+	const hookType = h.type === "command" || h.type === "prompt" || h.type === "http" || h.type === "function" ? h.type : "command";
+	const isHttp = hookType === "http";
+	const isCommand = hookType === "command";
+	const isPrompt = hookType === "prompt";
+	const shell = h.shell === "bash" || h.shell === "powershell" ? h.shell : void 0;
+	return {
+		type: hookType,
+		...compact({
+			command: h.command,
+			url: h.url,
+			timeout: h.timeout,
+			name: h.name,
+			description: h.description,
+			statusMessage: h.statusMessage,
+			async: isCommand ? h.async : void 0,
+			env: isCommand ? h.env : void 0,
+			shell: isCommand ? shell : void 0,
+			headers: isHttp ? h.headers : void 0,
+			allowedEnvVars: isHttp ? h.allowedEnvVars : void 0,
+			once: isHttp ? h.once : void 0,
+			prompt: isPrompt ? h.prompt : void 0,
+			model: isPrompt ? h.model : void 0,
+			sequential: sequential ? true : void 0,
+			matcher
+		})
+	};
+}
 function qwencodeMatcherEntryToCanonical(entry) {
-	const defs = [];
-	const hooks = entry.hooks ?? [];
 	const sequential = entry.sequential === true;
 	const matcher = entry.matcher !== void 0 && entry.matcher !== null && entry.matcher !== "" ? entry.matcher : void 0;
-	for (const h of hooks) {
-		const hookType = h.type === "command" || h.type === "prompt" || h.type === "http" || h.type === "function" ? h.type : "command";
-		const isHttp = hookType === "http";
-		const isCommand = hookType === "command";
-		const shell = h.shell === "bash" || h.shell === "powershell" ? h.shell : void 0;
-		defs.push({
-			type: hookType,
-			...compact({
-				command: h.command,
-				url: h.url,
-				timeout: h.timeout,
-				name: h.name,
-				description: h.description,
-				statusMessage: h.statusMessage,
-				async: isCommand ? h.async : void 0,
-				env: isCommand ? h.env : void 0,
-				shell: isCommand ? shell : void 0,
-				headers: isHttp ? h.headers : void 0,
-				allowedEnvVars: isHttp ? h.allowedEnvVars : void 0,
-				once: isHttp ? h.once : void 0,
-				sequential: sequential ? true : void 0,
-				matcher
-			})
-		});
-	}
-	return defs;
+	return (entry.hooks ?? []).map((hook) => qwencodeHookEntryToCanonical({
+		hook,
+		sequential,
+		matcher
+	}));
 }
 /**
 * Extract hooks from Qwen Code settings.json into canonical format.
@@ -16757,12 +16791,12 @@ var QwencodeHooks = class QwencodeHooks extends ToolHooks {
 			validate
 		});
 	}
-	static async fromRulesyncHooks({ outputRoot = process.cwd(), rulesyncHooks, validate = true, global = false }) {
+	static async fromRulesyncHooks({ outputRoot = process.cwd(), rulesyncHooks, validate = true, global = false, logger }) {
 		const paths = QwencodeHooks.getSettablePaths({ global });
 		const filePath = (0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({}, null, 2);
 		const config = rulesyncHooks.getJson();
-		const patch = { hooks: canonicalToQwencodeHooks(config) };
+		const patch = { hooks: canonicalToQwencodeHooks(config, logger) };
 		const disableAllHooks = config.qwencode?.disableAllHooks;
 		if (typeof disableAllHooks === "boolean") patch.disableAllHooks = disableAllHooks;
 		const fileContent = applySharedConfigPatch({
@@ -20788,18 +20822,24 @@ var DeepagentsMcp = class DeepagentsMcp extends ToolMcp {
 /**
 * MCP generator for Devin Local (native `.devin/` configuration).
 *
-* Devin reads MCP servers from the `mcpServers` key of its native config file:
-* - Project scope: `.devin/config.json`
-* - Global scope: `~/.config/devin/config.json`
+* Since v3000.3 (the Local 3.6 release), Devin reads MCP servers from a
+* dedicated `mcpServers`-keyed config file rather than the shared
+* `config.json`:
+* - Project scope: `.devin/mcp_config.json`
+* - Global scope: `~/.config/devin/mcp_config.json`
+*
+* Legacy `mcpServers` entries left in `config.json` are auto-migrated into
+* the dedicated file on Devin startup, so writing the legacy key would fight
+* the migration. Import still falls back to the legacy `config.json`
+* `mcpServers` key when no dedicated file exists, so pre-v3000.3 repos
+* migrate cleanly. The gitignored `.devin/mcp_config.local.json` override is
+* the user's personal territory and is never read or written.
 *
-* The config file is shared with the permissions feature (`permissions` key)
-* and, in global mode, the hooks feature (`hooks` key), so reads and writes
-* merge into the existing JSON rather than overwriting it, and the file is
-* never deleted. Each server is a stdio entry ({ command, args, env }) or a
-* remote entry ({ serverUrl | url, headers }), and may carry an optional
-* `disabledTools` array.
+* Each server is a stdio entry ({ command, args, env }) or a remote entry
+* ({ serverUrl | url, headers }), and may carry an optional `disabledTools`
+* array.
 *
-* @see https://docs.devin.ai/cli/extensibility/configuration
+* @see https://docs.devin.ai/cli/extensibility/mcp/configuration
 */
 var DevinMcp = class DevinMcp extends ToolMcp {
 	json;
@@ -20817,31 +20857,27 @@ var DevinMcp = class DevinMcp extends ToolMcp {
 			throw new Error(`Failed to parse Devin MCP config at ${(0, node_path.join)(relativeDirPath, relativeFilePath)}: ${formatError(error)}`, { cause: error });
 		}
 	}
-	/**
-	* config.json may carry the permissions/hooks features' keys, so it is never
-	* deleted; only the managed `mcpServers` key is rewritten.
-	*/
-	isDeletable() {
-		return false;
-	}
 	static getSettablePaths({ global = false } = {}) {
 		if (global) return {
 			relativeDirPath: DEVIN_GLOBAL_CONFIG_DIR_PATH,
-			relativeFilePath: DEVIN_CONFIG_FILE_NAME
+			relativeFilePath: DEVIN_MCP_CONFIG_FILE_NAME
 		};
 		return {
 			relativeDirPath: DEVIN_DIR,
-			relativeFilePath: DEVIN_CONFIG_FILE_NAME
+			relativeFilePath: DEVIN_MCP_CONFIG_FILE_NAME
 		};
 	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
-		const fileContent = await readFileContentOrNull((0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? "{\"mcpServers\":{}}";
-		const json = this.parseJsonOrThrow(fileContent, paths.relativeDirPath, paths.relativeFilePath);
-		const newJson = {
-			...json,
-			mcpServers: json.mcpServers ?? {}
-		};
+		let fileContent = await readFileContentOrNull((0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
+		if (fileContent === null) {
+			const legacyContent = await readFileContentOrNull((0, node_path.join)(outputRoot, paths.relativeDirPath, DEVIN_CONFIG_FILE_NAME));
+			if (legacyContent !== null) {
+				const legacyJson = this.parseJsonOrThrow(legacyContent, paths.relativeDirPath, DEVIN_CONFIG_FILE_NAME);
+				fileContent = JSON.stringify({ mcpServers: legacyJson.mcpServers ?? {} }, null, 2);
+			}
+		}
+		const newJson = { mcpServers: this.parseJsonOrThrow(fileContent ?? "{\"mcpServers\":{}}", paths.relativeDirPath, paths.relativeFilePath).mcpServers ?? {} };
 		return new DevinMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -20851,21 +20887,21 @@ var DevinMcp = class DevinMcp extends ToolMcp {
 			global
 		});
 	}
-	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false }) {
+	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false, logger }) {
 		const paths = this.getSettablePaths({ global });
-		const filePath = (0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
-		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({ mcpServers: {} }, null, 2);
+		const existingContent = await readFileContentOrNull((0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
+		if (existingContent !== null) {
+			const existingJson = this.parseJsonOrThrow(existingContent, paths.relativeDirPath, paths.relativeFilePath);
+			const existingServers = existingJson.mcpServers && typeof existingJson.mcpServers === "object" ? Object.keys(existingJson.mcpServers) : [];
+			const managedServers = new Set(Object.keys(rulesyncMcp.getMcpServers()));
+			const dropped = existingServers.filter((name) => !managedServers.has(name));
+			if (dropped.length > 0) logger?.warn(`Devin MCP servers not managed by rulesync will be removed from ${(0, node_path.join)(paths.relativeDirPath, paths.relativeFilePath)}: ${dropped.join(", ")}. Run 'rulesync import' first to keep them, or move them to mcp_config.local.json.`);
+		}
 		return new DevinMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
 			relativeFilePath: paths.relativeFilePath,
-			fileContent: applySharedConfigPatch({
-				fileKey: sharedConfigFileKey(paths),
-				feature: "mcp",
-				existingContent,
-				patch: { mcpServers: rulesyncMcp.getMcpServers() },
-				filePath
-			}),
+			fileContent: JSON.stringify({ mcpServers: rulesyncMcp.getMcpServers() }, null, 2),
 			validate,
 			global
 		});
@@ -27583,9 +27619,10 @@ function buildDevinPermissionEntry(scope, pattern) {
 * - Project scope: `.devin/config.json`
 * - Global scope: `~/.config/devin/config.json`
 *
-* The config file is shared with the MCP (`mcpServers`) and, in global mode, the
-* hooks (`hooks`) features, so reads and writes merge into the existing JSON and
-* the file is never deleted; only the managed `permissions` key is rewritten.
+* In global mode the config file is shared with the hooks (`hooks`) feature
+* (MCP moved to the dedicated mcp_config.json in v3000.3), so reads and writes
+* merge into the existing JSON and the file is never deleted; only the managed
+* `permissions` key is rewritten.
 *
 * @see https://docs.devin.ai/cli/reference/permissions
 */
@@ -31459,6 +31496,10 @@ function ensurePermission(permission, category) {
 const WARP_GLOBAL_ONLY_MESSAGE = "Warp permissions are global-only; use --global to sync Warp's settings.toml";
 const ALLOWLIST_KEY = "agent_mode_command_execution_allowlist";
 const DENYLIST_KEY = "agent_mode_command_execution_denylist";
+const EXECUTION_PROFILES_KEY = "execution_profiles";
+const DEFAULT_PROFILE_KEY = "default";
+const PROFILE_ALLOWLIST_KEY = "command_allowlist";
+const PROFILE_DENYLIST_KEY = "command_denylist";
 const WARP_OVERRIDE_KEYS = [
 	"agent_mode_coding_permissions",
 	"agent_mode_coding_file_read_allowlist",
@@ -31486,11 +31527,21 @@ function warpSettingsDir() {
 /**
 * Permissions adapter for Warp.
 *
-* Warp gates **shell command** execution through two regex arrays under the
-* `[agents.profiles]` table of the global user `settings.toml`:
-* - `agent_mode_command_execution_allowlist` — commands that auto-execute.
-* - `agent_mode_command_execution_denylist` — commands that always require
-*   permission (the denylist wins over the allowlist).
+* Warp gates **shell command** execution through two regex arrays in the
+* global user `settings.toml`. Since file-backed execution profiles went
+* Stable (2026-07-28) the authoritative surface is the `default` record of the
+* `[agents.execution_profiles.<id>]` collection:
+* - `command_allowlist` — commands that auto-execute.
+* - `command_denylist` — commands that always require permission (the denylist
+*   wins over the allowlist).
+*
+* The legacy `[agents.profiles]` keys
+* (`agent_mode_command_execution_allowlist` / `denylist`) are consumed only
+* once by Warp's one-shot migration and are ignored afterwards. Both surfaces
+* are written: the legacy block keeps un-migrated installs and old clients
+* working, and the `default` execution profile (merged in place, only when the
+* collection already exists) keeps migrated installs enforcing the lists.
+* Import prefers the execution profile and falls back to the legacy keys.
 *
 * This surface is **global only** — there is no project-scoped Warp permissions
 * file. rulesync's canonical `permission.bash` patterns map directly (`allow` →
@@ -31569,6 +31620,18 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		if (mergedDeny.length > 0) profiles[DENYLIST_KEY] = mergedDeny;
 		else delete profiles[DENYLIST_KEY];
 		agents.profiles = profiles;
+		if (isRecord(agents[EXECUTION_PROFILES_KEY])) {
+			const executionProfiles = { ...agents[EXECUTION_PROFILES_KEY] };
+			const defaultProfile = isRecord(executionProfiles[DEFAULT_PROFILE_KEY]) ? { ...executionProfiles[DEFAULT_PROFILE_KEY] } : {};
+			if (mergedAllow.length > 0) defaultProfile[PROFILE_ALLOWLIST_KEY] = mergedAllow;
+			else delete defaultProfile[PROFILE_ALLOWLIST_KEY];
+			if (mergedDeny.length > 0) defaultProfile[PROFILE_DENYLIST_KEY] = mergedDeny;
+			else delete defaultProfile[PROFILE_DENYLIST_KEY];
+			executionProfiles[DEFAULT_PROFILE_KEY] = defaultProfile;
+			agents[EXECUTION_PROFILES_KEY] = executionProfiles;
+			const otherProfileIds = Object.keys(executionProfiles).filter((id) => id !== DEFAULT_PROFILE_KEY);
+			if (mergedDeny.length > 0 && otherProfileIds.length > 0 && logger) logger.warn(`Warp command deny rules were written to the 'default' execution profile only; they are not enforced while another profile (${otherProfileIds.join(", ")}) is active.`);
+		}
 		settings.agents = agents;
 		return new WarpPermissions({
 			outputRoot,
@@ -31588,9 +31651,11 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		}
 		const agents = isRecord(settings.agents) ? settings.agents : {};
 		const profiles = isRecord(agents.profiles) ? agents.profiles : {};
+		const executionProfiles = isRecord(agents[EXECUTION_PROFILES_KEY]) ? agents[EXECUTION_PROFILES_KEY] : void 0;
+		const defaultProfile = executionProfiles && isRecord(executionProfiles[DEFAULT_PROFILE_KEY]) ? executionProfiles[DEFAULT_PROFILE_KEY] : void 0;
 		const config = convertWarpToRulesyncPermissions({
-			allow: isStringArray$1(profiles[ALLOWLIST_KEY]) ? profiles[ALLOWLIST_KEY] : [],
-			deny: isStringArray$1(profiles[DENYLIST_KEY]) ? profiles[DENYLIST_KEY] : []
+			allow: defaultProfile ? isStringArray$1(defaultProfile[PROFILE_ALLOWLIST_KEY]) ? defaultProfile[PROFILE_ALLOWLIST_KEY] : [] : isStringArray$1(profiles[ALLOWLIST_KEY]) ? profiles[ALLOWLIST_KEY] : [],
+			deny: defaultProfile ? isStringArray$1(defaultProfile[PROFILE_DENYLIST_KEY]) ? defaultProfile[PROFILE_DENYLIST_KEY] : [] : isStringArray$1(profiles[DENYLIST_KEY]) ? profiles[DENYLIST_KEY] : []
 		});
 		const warpOverride = {};
 		for (const key of WARP_OVERRIDE_KEYS) if (profiles[key] !== void 0) warpOverride[key] = profiles[key];
@@ -37340,7 +37405,8 @@ const toolSkillFactories = /* @__PURE__ */ new Map([
 		meta: {
 			supportsProject: true,
 			supportsSimulated: false,
-			supportsGlobal: true
+			supportsGlobal: true,
+			lenientImport: true
 		}
 	}],
 	["aiassistant", {
@@ -37777,7 +37843,7 @@ var SkillsProcessor = class extends DirFeatureProcessor {
 						global: this.global
 					});
 				} catch (error) {
-					if (!isConfiguredRoot) throw error;
+					if (!isConfiguredRoot && !factory.meta.lenientImport) throw error;
 					this.logger.warn(`Skipping ${(0, node_path.join)(relativeDirPath, dirName)}: ${formatError(error)}`);
 					return null;
 				}
@@ -46426,6 +46492,13 @@ var QwencodeRule = class QwencodeRule extends ToolRule {
 			toolTarget: "qwencode"
 		});
 	}
+	/**
+	* The personal local context file lives under `.qwen/`, not at the project
+	* root where the settable root path points, so override the deletion glob.
+	*/
+	static getLocalRootDeletionGlob({ outputRoot, fileName }) {
+		return (0, node_path.join)(outputRoot, QWENCODE_DIR, fileName);
+	}
 };
 //#endregion
 //#region src/features/rules/reasonix-rule.ts
@@ -47029,14 +47102,18 @@ var WarpRule = class WarpRule extends ToolRule {
 			root: root ?? false
 		});
 	}
-	static getSettablePaths(_options = {}) {
+	static getSettablePaths({ global = false } = {}) {
+		if (global) return { root: {
+			relativeDirPath: WARP_GLOBAL_RULE_DIR,
+			relativeFilePath: WARP_RULE_FILE_NAME
+		} };
 		return { root: {
 			relativeDirPath: ".",
 			relativeFilePath: WARP_RULE_FILE_NAME
 		} };
 	}
-	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true }) {
-		const { root } = this.getSettablePaths();
+	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const fileContent = await readFileContent((0, node_path.join)(outputRoot, (0, node_path.join)(root.relativeDirPath, root.relativeFilePath)));
 		return new WarpRule({
 			outputRoot,
@@ -47047,8 +47124,8 @@ var WarpRule = class WarpRule extends ToolRule {
 			root: true
 		});
 	}
-	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true }) {
-		const { root } = this.getSettablePaths();
+	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const isRoot = rulesyncRule.getFrontmatter().root ?? false;
 		return new WarpRule({
 			outputRoot,
@@ -47068,8 +47145,8 @@ var WarpRule = class WarpRule extends ToolRule {
 			error: null
 		};
 	}
-	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath }) {
-		const { root } = this.getSettablePaths();
+	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const isRoot = relativeFilePath === root.relativeFilePath && relativeDirPath === root.relativeDirPath;
 		return new WarpRule({
 			outputRoot,
@@ -47442,6 +47519,8 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 			extension: "md",
 			supportsGlobal: true,
 			ruleDiscoveryMode: "auto",
+			localRootMode: "separate-local-file",
+			localRootFileName: QWENCODE_LOCAL_RULE_FILE_NAME,
 			additionalConventions: { subagents: { subagentClass: QwencodeSubagent } }
 		}
 	}],
@@ -47506,7 +47585,7 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 		class: WarpRule,
 		meta: {
 			extension: "md",
-			supportsGlobal: false,
+			supportsGlobal: true,
 			ruleDiscoveryMode: "toon",
 			collisionPolicy: "fold"
 		}
@@ -47840,6 +47919,14 @@ var RulesProcessor = class extends FeatureProcessor {
 			validate: true,
 			root: true
 		});
+		if (factory.class === QwencodeRule) return new QwencodeRule({
+			outputRoot: this.outputRoot,
+			relativeDirPath: QWENCODE_DIR,
+			relativeFilePath: fileName,
+			fileContent: body,
+			validate: true,
+			root: true
+		});
 		return null;
 	}
 	/**
@@ -50064,6 +50151,12 @@ Object.defineProperty(exports, "CODEXCLI_DIR", {
 		return CODEXCLI_DIR;
 	}
 });
+Object.defineProperty(exports, "CONFLICTING_TARGET_PAIRS", {
+	enumerable: true,
+	get: function() {
+		return CONFLICTING_TARGET_PAIRS;
+	}
+});
 Object.defineProperty(exports, "ChecksProcessor", {
 	enumerable: true,
 	get: function() {
@@ -50094,12 +50187,24 @@ Object.defineProperty(exports, "ConsoleLogger", {
 		return ConsoleLogger;
 	}
 });
+Object.defineProperty(exports, "DEPRECATED_FEATURE_REPLACEMENTS", {
+	enumerable: true,
+	get: function() {
+		return DEPRECATED_FEATURE_REPLACEMENTS;
+	}
+});
 Object.defineProperty(exports, "ErrorCodes", {
 	enumerable: true,
 	get: function() {
 		return ErrorCodes;
 	}
 });
+Object.defineProperty(exports, "GITIGNORE_DESTINATION_KEY", {
+	enumerable: true,
+	get: function() {
+		return GITIGNORE_DESTINATION_KEY;
+	}
+});
 Object.defineProperty(exports, "HooksProcessor", {
 	enumerable: true,
 	get: function() {
@@ -50136,6 +50241,18 @@ Object.defineProperty(exports, "PACKAGING_TOOL_TARGETS", {
 		return PACKAGING_TOOL_TARGETS;
 	}
 });
+Object.defineProperty(exports, "QWENCODE_DIR", {
+	enumerable: true,
+	get: function() {
+		return QWENCODE_DIR;
+	}
+});
+Object.defineProperty(exports, "QWENCODE_LOCAL_RULE_FILE_NAME", {
+	enumerable: true,
+	get: function() {
+		return QWENCODE_LOCAL_RULE_FILE_NAME;
+	}
+});
 Object.defineProperty(exports, "RULESYNC_AIIGNORE_FILE_NAME", {
 	enumerable: true,
 	get: function() {

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_import = require("./import-DNfxS6QZ.cjs");
+const require_import = require("./import-C9wxpZey.cjs");
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;