rulesync 16.3.0 → 16.5.0

package/dist/{import-Bj5HxY9p.js → import-BlwypG9v.js}

@@ -141,7 +141,7 @@ const RULESYNC_PERMISSIONS_LEGACY_FILE_NAME = "permissions.json";
 const RULESYNC_CONFIG_SCHEMA_URL = "https://github.com/dyoshikawa/rulesync/releases/latest/download/config-schema.json";
 const RULESYNC_MCP_SCHEMA_URL = "https://github.com/dyoshikawa/rulesync/releases/latest/download/mcp-schema.json";
 const RULESYNC_PERMISSIONS_SCHEMA_URL = "https://github.com/dyoshikawa/rulesync/releases/latest/download/permissions-schema.json";
-const MAX_FILE_SIZE = 10 * 1024 * 1024;
+const MAX_FILE_SIZE = 10485760;
 //#endregion
 //#region src/types/tool-target-tuples.ts
 const rulesProcessorToolTargetTuple = [
@@ -182,7 +182,8 @@ const rulesProcessorToolTargetTuple = [
 	"vibe",
 	"warp",
 	"devin",
-	"zed"
+	"zed",
+	"zoocode"
 ];
 const ignoreProcessorToolTargetTuple = [
 	"aiassistant",
@@ -204,7 +205,8 @@ const ignoreProcessorToolTargetTuple = [
 	"devin",
 	"vibe",
 	"warp",
-	"zed"
+	"zed",
+	"zoocode"
 ];
 const mcpProcessorToolTargetTuple = [
 	"aiassistant",
@@ -241,7 +243,8 @@ const mcpProcessorToolTargetTuple = [
 	"vibe",
 	"warp",
 	"devin",
-	"zed"
+	"zed",
+	"zoocode"
 ];
 const commandsProcessorToolTargetTuple = [
 	"agentsmd",
@@ -269,6 +272,7 @@ const commandsProcessorToolTargetTuple = [
 	"qwencode",
 	"reasonix",
 	"roo",
+	"zoocode",
 	"rovodev",
 	"takt",
 	"devin",
@@ -304,6 +308,7 @@ const subagentsProcessorToolTargetTuple = [
 	"qwencode",
 	"reasonix",
 	"roo",
+	"zoocode",
 	"rovodev",
 	"takt",
 	"vibe"
@@ -347,7 +352,8 @@ const skillsProcessorToolTargetTuple = [
 	"vibe",
 	"warp",
 	"devin",
-	"zed"
+	"zed",
+	"zoocode"
 ];
 const hooksProcessorToolTargetTuple = [
 	"amp",
@@ -660,7 +666,8 @@ async function findFilesByGlobs(globs, options = {}) {
 		onlyFiles: false,
 		onlyDirectories: false
 	};
-	const results = globbySync(Array.isArray(globs) ? globs.map((g) => g.replaceAll("\\", "/")) : globs.replaceAll("\\", "/"), {
+	const normalizedGlobs = Array.isArray(globs) ? globs.map((g) => g.replaceAll("\\", "/")) : globs.replaceAll("\\", "/");
+	const results = globbySync(normalizedGlobs, {
 		absolute: true,
 		followSymbolicLinks,
 		...ignore ? { ignore: ignore.map((pattern) => pattern.replaceAll("\\", "/")) } : {},
@@ -771,7 +778,8 @@ function validateOutputRoot(outputRoot) {
 function toKebabCaseFilename(filename) {
 	const lastDotIndex = filename.lastIndexOf(".");
 	const extension = lastDotIndex > 0 ? filename.slice(lastDotIndex) : "";
-	return kebabCase(lastDotIndex > 0 ? filename.slice(0, lastDotIndex) : filename) + extension;
+	const nameWithoutExt = lastDotIndex > 0 ? filename.slice(0, lastDotIndex) : filename;
+	return kebabCase(nameWithoutExt) + extension;
 }
 /**
 * Create a temporary directory atomically and return its path.
@@ -1433,7 +1441,8 @@ const getDefaults = () => ({
 });
 const loadConfigFromFile = async (filePath) => {
 	if (!await fileExists(filePath)) return {};
-	const jsonData = parse(await readFileContent(filePath));
+	const fileContent = await readFileContent(filePath);
+	const jsonData = parse(fileContent);
 	const { $schema: _schema, ...configParams } = ConfigFileSchema.parse(jsonData);
 	assertTargetsFeaturesExclusive({
 		targets: configParams.targets,
@@ -1523,7 +1532,8 @@ var ConfigResolver = class {
 		if (inputRoot !== void 0) validateOutputRoot(inputRoot);
 		const validatedConfigPath = resolvePath(configPath, resolve(inputRoot ?? cwd));
 		const baseConfig = await loadConfigFromFile(validatedConfigPath);
-		const localConfigPath = join(dirname(validatedConfigPath), RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH);
+		const configDir = dirname(validatedConfigPath);
+		const localConfigPath = join(configDir, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH);
 		const localConfig = await loadConfigFromFile(localConfigPath);
 		const configByFile = mergeConfigs(baseConfig, localConfig);
 		if (inputRoot === void 0 && configByFile.inputRoot !== void 0) validateOutputRoot(configByFile.inputRoot);
@@ -1688,6 +1698,8 @@ const SHARED_USER_MANAGED_CONFIG_PATHS = [
 	".devin/config.json",
 	".factory/settings.json",
 	".grok/config.toml",
+	".rovodev/config.yml",
+	".rovodev/mcp.json",
 	".vibe/config.toml",
 	"reasonix.toml",
 	".vscode/settings.json",
@@ -1757,7 +1769,8 @@ var AiFile = class {
 	getFilePath() {
 		const fullPath = path.join(this.outputRoot, this.relativeDirPath, this.relativeFilePath);
 		const resolvedFull = resolve(fullPath);
-		const rel = relative(resolve(this.outputRoot), resolvedFull);
+		const resolvedBase = resolve(this.outputRoot);
+		const rel = relative(resolvedBase, resolvedFull);
 		if (rel.startsWith("..") || path.isAbsolute(rel)) throw new Error(`Path traversal detected: Final path escapes outputRoot. outputRoot="${this.outputRoot}", relativeDirPath="${this.relativeDirPath}", relativeFilePath="${this.relativeFilePath}"`);
 		return fullPath;
 	}
@@ -2325,6 +2338,7 @@ const OPENCODE_HOOK_EVENTS = [
 	"postToolUse",
 	"stop",
 	"afterFileEdit",
+	"beforeShellExecution",
 	"afterShellExecution",
 	"permissionRequest",
 	"preCompact",
@@ -2356,6 +2370,7 @@ const PI_HOOK_EVENTS = [
 	"preToolUse",
 	"postToolUse",
 	"preModelInvocation",
+	"postModelInvocation",
 	"beforeSubmitPrompt",
 	"stop",
 	"preCompact",
@@ -3029,7 +3044,6 @@ const CANONICAL_TO_OPENCODE_EVENT_NAMES = {
 	postToolUse: "tool.execute.after",
 	stop: "session.idle",
 	afterFileEdit: "file.edited",
-	afterShellExecution: "command.executed",
 	permissionRequest: "permission.asked",
 	preCompact: "experimental.session.compacting",
 	postCompact: "session.compacted",
@@ -3062,6 +3076,7 @@ const CANONICAL_TO_PI_EVENT_NAMES = {
 	preToolUse: "tool_call",
 	postToolUse: "tool_result",
 	preModelInvocation: "context",
+	postModelInvocation: "message_end",
 	beforeSubmitPrompt: "input",
 	stop: "agent_end",
 	preCompact: "session_before_compact",
@@ -4095,10 +4110,22 @@ const ClaudecodePermissionsOverrideSchema = z.looseObject({
 * category; the shared `permission` block still drives the base permission and
 * allow/deny lists. Keyed by canonical category (e.g. `bash`, `edit`).
 *
+* Vibe's top-level `enabled_tools` is an **exclusive** allowlist — when set,
+* only the listed tools (name or pattern) are active and every other builtin
+* and MCP tool is off. That narrowing cannot be derived from canonical `allow`
+* rules (an allow grants one tool without revoking the rest), so the list is
+* only ever authored explicitly here, verbatim in Vibe's tool-name vocabulary,
+* and round-trips through this override on import.
+*
 * @example
 * { "permission": { "bash": { "sensitive_patterns": ["rm *", "sudo *"] } } }
+* @example
+* { "enabled_tools": ["bash", "read_file", "grep"] }
 */
-const VibePermissionsOverrideSchema = z.looseObject({ permission: z.optional(z.record(z.string(), z.looseObject({ sensitive_patterns: z.optional(z.array(z.string())) }))) });
+const VibePermissionsOverrideSchema = z.looseObject({
+	permission: z.optional(z.record(z.string(), z.looseObject({ sensitive_patterns: z.optional(z.array(z.string())) }))),
+	enabled_tools: z.optional(z.array(z.string()))
+});
 /**
 * Tool-scoped override block for Cursor CLI. Cursor's `cli.json` carries scalar
 * autonomy settings with no canonical permission category — `approvalMode`
@@ -4170,7 +4197,10 @@ const QwencodePermissionsOverrideSchema = z.looseObject({
 const ReasonixPermissionsOverrideSchema = z.looseObject({
 	permission: z.optional(ToolScopedPermissionSchema),
 	sandbox: z.optional(z.looseObject({})),
-	agent: z.optional(z.looseObject({}))
+	agent: z.optional(z.looseObject({})),
+	rawAllow: z.optional(z.array(z.string())),
+	rawAsk: z.optional(z.array(z.string())),
+	rawDeny: z.optional(z.array(z.string()))
 });
 /**
 * Tool-scoped override block for Factory Droid. Factory Droid's `settings.json`
@@ -4201,12 +4231,69 @@ const FactorydroidPermissionsOverrideSchema = z.looseObject({
 * `agent_mode_execute_readonly_commands` (a read-only auto-execution boolean).
 * Fields placed here are merged into `[agents.profiles]` of Warp's global
 * `settings.toml`, while the shared `permission` block continues to drive the
-* `agent_mode_command_execution_allowlist`/`_denylist` command regex arrays.
-* Warp permissions are global-only.
+* command regex arrays (legacy `agent_mode_command_execution_allowlist`/
+* `_denylist` plus the `default` execution profile's `command_allowlist`/
+* `command_denylist`). On migrated installs the `[agents.profiles]` keys are
+* inert; their execution-profile counterparts are authored via the nested
+* `execution_profile` block instead, which is merged into the `default` record
+* of `[agents.execution_profiles.<id>]`. Warp permissions are global-only.
 *
 * @example
-* { "agent_mode_coding_permissions": "always_allow_reading", "agent_mode_execute_readonly_commands": true }
+* {
+*   "agent_mode_coding_permissions": "always_allow_reading",
+*   "agent_mode_execute_readonly_commands": true,
+*   "execution_profile": { "read_files": "always_allow", "mcp_denylist": ["untrusted-server"] }
+* }
+*/
+/**
+* Per-action autonomy value of Warp's execution profiles
+* (`FileActionPermission` in the Warp repository's
+* `app/src/ai/execution_profiles/config.rs`, serialized snake_case).
 */
+const WarpFileActionPermissionSchema = z.enum([
+	"agent_decides",
+	"always_allow",
+	"always_ask"
+]);
+/**
+* Permission keys of the `default` record in Warp's
+* `[agents.execution_profiles.<id>]` collection (the surface runtime
+* enforcement reads on migrated installs). Loose so forward-compat keys pass
+* through verbatim. The rulesync-owned `command_allowlist`/`command_denylist`
+* are driven by the shared `permission.bash` block and always win over values
+* placed here.
+*
+* @see https://github.com/warpdotdev/warp/blob/main/app/src/ai/execution_profiles/config.rs (`ExecutionProfileFile`)
+*/
+const WarpExecutionProfileOverrideSchema = z.looseObject({
+	read_files: z.optional(WarpFileActionPermissionSchema),
+	apply_code_diffs: z.optional(WarpFileActionPermissionSchema),
+	execute_commands: z.optional(WarpFileActionPermissionSchema),
+	mcp_permissions: z.optional(WarpFileActionPermissionSchema),
+	write_to_pty: z.optional(z.enum([
+		"always_allow",
+		"always_ask",
+		"ask_on_first_write"
+	])),
+	ask_user_question: z.optional(z.enum([
+		"never",
+		"ask_except_in_auto_approve",
+		"always_ask"
+	])),
+	run_agents: z.optional(z.enum([
+		"never_allow",
+		"always_allow",
+		"always_ask"
+	])),
+	computer_use: z.optional(z.enum([
+		"never",
+		"always_ask",
+		"always_allow"
+	])),
+	directory_allowlist: z.optional(z.array(z.string())),
+	mcp_allowlist: z.optional(z.array(z.string())),
+	mcp_denylist: z.optional(z.array(z.string()))
+});
 const WarpPermissionsOverrideSchema = z.looseObject({
 	permission: z.optional(ToolScopedPermissionSchema),
 	agent_mode_coding_permissions: z.optional(z.enum([
@@ -4215,7 +4302,8 @@ const WarpPermissionsOverrideSchema = z.looseObject({
 		"allow_reading_specific_files"
 	])),
 	agent_mode_coding_file_read_allowlist: z.optional(z.array(z.string())),
-	agent_mode_execute_readonly_commands: z.optional(z.boolean())
+	agent_mode_execute_readonly_commands: z.optional(z.boolean()),
+	execution_profile: z.optional(WarpExecutionProfileOverrideSchema)
 });
 /**
 * The actions Junie's allowlist accepts. Verified against the shipped Junie
@@ -4947,7 +5035,8 @@ var AiDir = class {
 	getDirPath() {
 		const fullPath = path.join(this.outputRoot, this.relativeDirPath, this.dirName);
 		const resolvedFull = resolve(fullPath);
-		const rel = relative(resolve(this.outputRoot), resolvedFull);
+		const resolvedBase = resolve(this.outputRoot);
+		const rel = relative(resolvedBase, resolvedFull);
 		if (rel.startsWith("..") || path.isAbsolute(rel)) throw new Error(`Path traversal detected: Final path escapes outputRoot. outputRoot="${this.outputRoot}", relativeDirPath="${this.relativeDirPath}", dirName="${this.dirName}"`);
 		return fullPath;
 	}
@@ -5230,6 +5319,9 @@ const RulesyncSubagentFrontmatterSchema = z.looseObject({
 		customInstructions: z.optional(z.string()),
 		groups: z.optional(z.array(z.unknown()))
 	})),
+	zoocode: z.optional(z.looseObject({ 
+	/** Per-mode MCP server allowlist (Zoo Code v3.60.0+); omitted = all. */
+allowedMcpServers: z.optional(z.array(z.string())) })),
 	vibe: z.optional(z.looseObject({
 		agent_type: z.optional(z.enum(["agent", "subagent"])),
 		display_name: z.optional(z.string()),
@@ -5369,7 +5461,6 @@ const ROVODEV_SKILLS_DIR_PATH = join(ROVODEV_DIR, "skills");
 const ROVODEV_SUBAGENTS_DIR_PATH = join(ROVODEV_DIR, "subagents");
 const ROVODEV_MODULAR_RULES_DIR_PATH = join(ROVODEV_DIR, ".rulesync", "modular-rules");
 const ROVODEV_RULE_FILE_NAME = "AGENTS.md";
-const ROVODEV_LEGACY_RULE_FILE_NAME = "AGENTS.local.md";
 const ROVODEV_MCP_FILE_NAME = "mcp.json";
 const ROVODEV_CONFIG_FILE_NAME = "config.yml";
 const ROVODEV_AGENTS_SKILLS_DIR_PATH = join(".agents", "skills");
@@ -6588,6 +6679,7 @@ const KIMI_CODE_CONFIG_SHARED_FILE_KEY = ".kimi-code/config.toml";
 const KIMI_CODE_HOME_CONFIG_SHARED_FILE_KEY = "config.toml";
 const REASONIX_PROJECT_CONFIG_SHARED_FILE_KEY = "reasonix.toml";
 const REASONIX_GLOBAL_CONFIG_SHARED_FILE_KEY = ".reasonix/config.toml";
+const ROVODEV_CONFIG_SHARED_FILE_KEY = ".rovodev/config.yml";
 /**
 * Build the `SHARED_CONFIG_OWNERSHIP` lookup key from a tool's settable paths.
 * Mirrors `sharedFileKey` in `src/lib/shared-file-derive.ts` (kept separate so
@@ -6827,24 +6919,14 @@ const SHARED_CONFIG_OWNERSHIP = {
 	},
 	".devin/config.json": {
 		format: "json",
-		features: {
-			mcp: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["mcpServers"]
-			},
-			permissions: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["permissions"]
-			}
-		}
+		features: { permissions: {
+			kind: "replace-owned-keys",
+			ownedKeys: ["permissions"]
+		} }
 	},
 	".config/devin/config.json": {
 		format: "json",
 		features: {
-			mcp: {
-				kind: "replace-owned-keys",
-				ownedKeys: ["mcpServers"]
-			},
 			hooks: {
 				kind: "replace-owned-keys",
 				ownedKeys: ["hooks"]
@@ -6937,6 +7019,10 @@ const SHARED_CONFIG_OWNERSHIP = {
 			permissions: {
 				kind: "replace-owned-keys",
 				ownedKeys: ["permission"]
+			},
+			rules: {
+				kind: "replace-owned-keys",
+				ownedKeys: ["instructions"]
 			}
 		}
 	},
@@ -7054,6 +7140,19 @@ const SHARED_CONFIG_OWNERSHIP = {
 				]
 			}
 		}
+	},
+	[ROVODEV_CONFIG_SHARED_FILE_KEY]: {
+		format: "yaml",
+		features: {
+			mcp: {
+				kind: "replace-owned-keys",
+				ownedKeys: ["mcp"]
+			},
+			permissions: {
+				kind: "replace-owned-keys",
+				ownedKeys: ["toolPermissions"]
+			}
+		}
 	}
 };
 /**
@@ -7475,7 +7574,8 @@ const toolCheckFactories = /* @__PURE__ */ new Map([
 		class: CursorCheck,
 		meta: {
 			supportsGlobal: false,
-			filePattern: CURSOR_BUGBOT_FILE_NAME
+			filePattern: CURSOR_BUGBOT_FILE_NAME,
+			committedOutput: true
 		}
 	}],
 	["hermesagent", {
@@ -7489,7 +7589,8 @@ const toolCheckFactories = /* @__PURE__ */ new Map([
 		class: RovodevCheck,
 		meta: {
 			supportsGlobal: false,
-			filePattern: ROVODEV_REVIEW_AGENT_FILE_NAME
+			filePattern: ROVODEV_REVIEW_AGENT_FILE_NAME,
+			committedOutput: true
 		}
 	}],
 	["takt", {
@@ -9044,6 +9145,7 @@ const DEVIN_GLOBAL_CONFIG_DIR_PATH = join(".config", "devin");
 const DEVIN_GLOBAL_AGENTS_DIR_PATH = join(DEVIN_GLOBAL_CONFIG_DIR_PATH, "agents");
 const DEVIN_GLOBAL_SKILLS_DIR_PATH = join(DEVIN_GLOBAL_CONFIG_DIR_PATH, "skills");
 const DEVIN_CONFIG_FILE_NAME = "config.json";
+const DEVIN_MCP_CONFIG_FILE_NAME = "mcp_config.json";
 const DEVIN_HOOKS_V1_FILE_NAME = "hooks.v1.json";
 const DEVIN_GLOBAL_AGENTS_FILE_NAME = "AGENTS.md";
 const DEVIN_IGNORE_FILE_NAME = ".devinignore";
@@ -9650,7 +9752,8 @@ var GrokcliCommand = class GrokcliCommand extends ToolCommand {
 	static async validateRulesyncCommands({ inputRoot, rulesyncCommands, logger }) {
 		const commandNames = new Set(rulesyncCommands.filter((command) => this.isTargetedByRulesyncCommand(command)).map((command) => basename(command.getRelativeFilePath(), ".md")));
 		if (commandNames.size === 0) return;
-		const shadowed = (await findFilesByGlobs(join(join(inputRoot, RULESYNC_SKILLS_RELATIVE_DIR_PATH), "**", "SKILL.md"))).map((filePath) => basename(dirname(filePath))).filter((skillName) => commandNames.has(skillName));
+		const skillsRoot = join(inputRoot, RULESYNC_SKILLS_RELATIVE_DIR_PATH);
+		const shadowed = (await findFilesByGlobs(join(skillsRoot, "**", "SKILL.md"))).map((filePath) => basename(dirname(filePath))).filter((skillName) => commandNames.has(skillName));
 		if (shadowed.length > 0) logger.warn(`Grok CLI resolves skills before commands, so these skills shadow the same-named commands, which will never be reachable: ${[...new Set(shadowed)].toSorted().join(", ")}. Rename either side to make both invocable.`);
 	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true, global = false }) {
@@ -9685,6 +9788,20 @@ var GrokcliCommand = class GrokcliCommand extends ToolCommand {
 function toolSkillSearchRoots(paths) {
 	return [paths.relativeDirPath, ...paths.alternativeSkillRoots ?? []];
 }
+/**
+* The Agent Skills interoperability roots: project `.agents/skills/`, global
+* `~/.agents/skills/` (same relative path, home output root), and Amp's global
+* equivalent `~/.config/agents/skills/`. Foreign-authored — potentially
+* non-conformant — skills are the most likely to live here, so every tool that
+* scans one of these roots imports it leniently (skip-and-warn per skill), per
+* the Agent Skills client-implementation guide, while keeping fail-fast
+* behavior for its own native root.
+* https://agentskills.io/client-implementation/adding-skills-support
+*/
+const AGENT_SKILLS_INTEROP_ROOTS = /* @__PURE__ */ new Set([toPosixPath(AGENTSMD_SKILLS_DIR_PATH), toPosixPath(AMP_SKILLS_GLOBAL_DIR)]);
+function isAgentSkillsInteropRoot(relativeDirPath) {
+	return AGENT_SKILLS_INTEROP_ROOTS.has(toPosixPath(relativeDirPath));
+}
 /** Ordered import roots: managed roots first, followed by read-only discovery roots. */
 function toolSkillImportRoots(paths) {
 	return [...toolSkillSearchRoots(paths), ...paths.importOnlySkillRoots ?? []];
@@ -11301,6 +11418,7 @@ const QWENCODE_COMMANDS_DIR_PATH = join(QWENCODE_DIR, "commands");
 const QWENCODE_AGENTS_DIR_PATH = join(QWENCODE_DIR, "agents");
 const QWENCODE_SKILLS_DIR_PATH = join(QWENCODE_DIR, "skills");
 const QWENCODE_RULE_FILE_NAME = "QWEN.md";
+const QWENCODE_LOCAL_RULE_FILE_NAME = "QWEN.local.md";
 const QWENCODE_IGNORE_FILE_NAME = ".qwenignore";
 const QWENCODE_SETTINGS_FILE_NAME = "settings.json";
 //#endregion
@@ -11627,7 +11745,7 @@ var RooCommand = class RooCommand extends ToolCommand {
 		};
 		const body = rulesyncCommand.getBody();
 		const fileContent = stringifyFrontmatter(body, rooFrontmatter);
-		return new RooCommand({
+		return new this({
 			outputRoot,
 			frontmatter: rooFrontmatter,
 			body,
@@ -11664,7 +11782,7 @@ var RooCommand = class RooCommand extends ToolCommand {
 		const { frontmatter, body: content } = parseFrontmatter(fileContent, filePath);
 		const result = RooCommandFrontmatterSchema.safeParse(frontmatter);
 		if (!result.success) throw new Error(`Invalid frontmatter in ${filePath}: ${formatError(result.error)}`);
-		return new RooCommand({
+		return new this({
 			outputRoot,
 			relativeDirPath: RooCommand.getSettablePaths().relativeDirPath,
 			relativeFilePath,
@@ -11675,7 +11793,7 @@ var RooCommand = class RooCommand extends ToolCommand {
 		});
 	}
 	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath }) {
-		return new RooCommand({
+		return new this({
 			outputRoot,
 			relativeDirPath,
 			relativeFilePath,
@@ -12047,6 +12165,7 @@ const WARP_SKILLS_DIR_PATH = join(WARP_DIR, "skills");
 const WARP_LINUX_DIR = join(".config", "warp-terminal");
 const WARP_WIN32_DIR = join("AppData", "Local", "warp", "Warp", "config");
 const WARP_RULE_FILE_NAME = "AGENTS.md";
+const WARP_GLOBAL_RULE_DIR = ".agents";
 const WARP_MCP_FILE_NAME = ".mcp.json";
 const WARP_PERMISSIONS_FILE_NAME = "settings.toml";
 const WARP_IGNORE_FILE_NAME = ".warpindexingignore";
@@ -12132,6 +12251,39 @@ var WarpCommand = class WarpCommand extends ToolCommand {
 	}
 };
 //#endregion
+//#region src/features/commands/zoocode-command.ts
+/**
+* Command generator for **Zoo Code** (the community continuation of Roo Code).
+* Zoo Code keeps Roo's `.roo/commands/` layout, so this target reuses
+* {@link RooCommand} verbatim and only narrows the targeting.
+*
+* @see https://docs.zoocode.dev
+*/
+var ZoocodeCommand = class extends RooCommand {
+	static isTargetedByRulesyncCommand(rulesyncCommand) {
+		return this.isTargetedByRulesyncCommandDefault({
+			rulesyncCommand,
+			toolTarget: "zoocode"
+		});
+	}
+	toRulesyncCommand() {
+		const command = super.toRulesyncCommand();
+		const frontmatter = {
+			...command.getFrontmatter(),
+			targets: ["zoocode"]
+		};
+		return new RulesyncCommand({
+			outputRoot: command.getOutputRoot(),
+			relativeDirPath: command.getRelativeDirPath(),
+			relativeFilePath: command.getRelativeFilePath(),
+			frontmatter,
+			body: command.getBody(),
+			fileContent: stringifyFrontmatter(command.getBody(), frontmatter),
+			validate: true
+		});
+	}
+};
+//#endregion
 //#region src/features/commands/commands-processor.ts
 const CommandsProcessorToolTargetSchema = z.enum(commandsProcessorToolTargetTuple);
 /**
@@ -12391,6 +12543,16 @@ const toolCommandFactories = /* @__PURE__ */ new Map([
 			supportsSubdirectory: true
 		}
 	}],
+	["zoocode", {
+		class: ZoocodeCommand,
+		meta: {
+			extension: "md",
+			supportsProject: true,
+			supportsGlobal: true,
+			isSimulated: false,
+			supportsSubdirectory: true
+		}
+	}],
 	["rovodev", {
 		class: RovodevCommand,
 		meta: {
@@ -13770,16 +13932,17 @@ var ClaudecodeHooks = class extends ToolHooks {
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({}, null, 2);
 		const config = rulesyncHooks.getJson();
+		const claudeHooks = canonicalToToolHooks({
+			config,
+			toolOverrideHooks: config.claudecode?.hooks,
+			converterConfig: CLAUDE_CONVERTER_CONFIG,
+			logger
+		});
 		const fileContent = applySharedConfigPatch({
 			fileKey: CLAUDE_SETTINGS_SHARED_FILE_KEY,
 			feature: "hooks",
 			existingContent,
-			patch: { hooks: canonicalToToolHooks({
-				config,
-				toolOverrideHooks: config.claudecode?.hooks,
-				converterConfig: CLAUDE_CONVERTER_CONFIG,
-				logger
-			}) },
+			patch: { hooks: claudeHooks },
 			filePath
 		});
 		return new this({
@@ -14782,9 +14945,9 @@ const DEVIN_CONVERTER_CONFIG = {
 * - Project scope: `.devin/hooks.v1.json`. This is a standalone file whose top
 *   level IS the event map (no wrapper key).
 * - Global scope: `~/.config/devin/config.json` under the `"hooks"` key. This
-*   file is shared with the MCP (`mcpServers`) and permissions (`permissions`)
-*   features, so reads and writes merge into the existing JSON and the file is
-*   never deleted in global mode.
+*   file is shared with the permissions (`permissions`) feature (MCP moved to
+*   the dedicated mcp_config.json in v3000.3), so reads and writes merge into
+*   the existing JSON and the file is never deleted in global mode.
 *
 * @see https://docs.devin.ai/cli/extensibility/hooks/overview
 */
@@ -15533,6 +15696,30 @@ const NAMED_HOOK_MATCHER_SUBJECTS = {
 	"tool.execute.after": "input.tool",
 	"experimental.session.compacting": null
 };
+/**
+* OpenCode (and Kilo) have no shell-execution lifecycle event — the
+* `command.executed` event these canonical events were once mapped to is a
+* *slash-command* event, so a hook wired there never fired on bash commands
+* and fired on every slash command instead. Observing a shell invocation is
+* done with the named `tool.execute.before/after` hooks gated on the `bash`
+* tool (the `.env protection` pattern in the OpenCode plugins doc), so these
+* canonical events are emitted into those named hooks with an implicit
+* `input.tool === "bash"` gate. Matchers on them are dropped upstream with a
+* warning (`matcherEvents` covers only `preToolUse`/`postToolUse`) — the
+* named hooks expose no command text to match against.
+*
+* @see https://opencode.ai/docs/plugins/
+*/
+const SHELL_EVENT_TOOL_GATES = {
+	beforeShellExecution: {
+		toolEvent: "tool.execute.before",
+		tool: "bash"
+	},
+	afterShellExecution: {
+		toolEvent: "tool.execute.after",
+		tool: "bash"
+	}
+};
 function escapeForTemplateLiteral(command) {
 	return command.replace(/\\/g, "\\\\").replace(/`/g, "\\`").replace(/\$\{/g, "\\${");
 }
@@ -15553,15 +15740,19 @@ function validateAndSanitizeMatcher(matcher) {
 */
 function collectOpencodeStyleHandlers({ effectiveHooks, eventMap, namedEventHandlers, genericEventHandlers }) {
 	for (const [canonicalEvent, definitions] of Object.entries(effectiveHooks)) {
-		const toolEvent = eventMap[canonicalEvent];
+		const shellGate = SHELL_EVENT_TOOL_GATES[canonicalEvent];
+		const toolEvent = shellGate?.toolEvent ?? eventMap[canonicalEvent];
 		if (!toolEvent) continue;
+		const matcherSupported = !shellGate && Object.hasOwn(NAMED_HOOK_MATCHER_SUBJECTS, toolEvent) && NAMED_HOOK_MATCHER_SUBJECTS[toolEvent] !== null;
 		const handlers = [];
 		for (const def of definitions) {
 			if ((def.type ?? "command") !== "command") continue;
 			if (!def.command) continue;
+			if (def.matcher && !matcherSupported) continue;
 			handlers.push({
 				command: def.command,
-				matcher: def.matcher ? def.matcher : void 0
+				matcher: def.matcher ? def.matcher : void 0,
+				...shellGate ? { toolGate: shellGate.tool } : {}
 			});
 		}
 		if (handlers.length > 0) {
@@ -15598,7 +15789,11 @@ function buildNamedEventBodyLines(namedEventHandlers) {
 		bodyLines.push(`    "${eventName}": async (input) => {`);
 		for (const handler of handlers) {
 			const escapedCommand = escapeForTemplateLiteral(handler.command);
-			if (handler.matcher && matcherSubject !== null) {
+			if (handler.toolGate) {
+				bodyLines.push(`      if (input.tool === "${handler.toolGate}") {`);
+				bodyLines.push(`        await $\`${escapedCommand}\`;`);
+				bodyLines.push("      }");
+			} else if (handler.matcher && matcherSubject !== null) {
 				const safeMatcher = validateAndSanitizeMatcher(handler.matcher);
 				bodyLines.push("      {");
 				bodyLines.push(`        const __re = new RegExp("${safeMatcher}");`);
@@ -16396,6 +16591,13 @@ var OpencodeHooks = class OpencodeHooks extends ToolHooks {
 */
 const PI_TOOL_EVENTS = /* @__PURE__ */ new Set(["tool_call", "tool_result"]);
 /**
+* Pi extension events that fire for every message role (user, assistant,
+* toolResult). The generated handler gates these on the assistant role so a
+* `postModelInvocation` hook runs once per finalized model response rather
+* than for every message in the conversation.
+*/
+const PI_ASSISTANT_MESSAGE_EVENTS = /* @__PURE__ */ new Set(["message_end"]);
+/**
 * Validate a hook matcher as a regular expression and return it as a JS
 * string-literal (JSON.stringify quoting) safe to embed in generated code.
 */
@@ -16436,7 +16638,10 @@ function buildSubscriptionLines(handlerGroups) {
 	const lines = [];
 	for (const [piEvent, handlers] of Object.entries(handlerGroups)) {
 		const usesToolName = PI_TOOL_EVENTS.has(piEvent) && handlers.some((h) => h.matcher);
-		lines.push(`  pi.on(${JSON.stringify(piEvent)}, async (${usesToolName ? "event" : ""}) => {`);
+		const gatesOnAssistant = PI_ASSISTANT_MESSAGE_EVENTS.has(piEvent);
+		const usesEvent = usesToolName || gatesOnAssistant;
+		lines.push(`  pi.on(${JSON.stringify(piEvent)}, async (${usesEvent ? "event" : ""}) => {`);
+		if (gatesOnAssistant) lines.push(`    if (event.message.role !== "assistant") return;`);
 		for (const handler of handlers) {
 			const embeddedCommand = JSON.stringify(handler.command);
 			if (usesToolName && handler.matcher) {
@@ -16571,6 +16776,7 @@ function canonicalDefToQwencodeHook(def) {
 	const type = def.type ?? "command";
 	const isHttp = type === "http";
 	const isCommand = type === "command";
+	const isPrompt = type === "prompt";
 	return {
 		type,
 		...compact({
@@ -16580,6 +16786,8 @@ function canonicalDefToQwencodeHook(def) {
 			name: def.name,
 			description: def.description,
 			statusMessage: def.statusMessage,
+			prompt: isPrompt ? def.prompt : void 0,
+			model: isPrompt ? def.model : void 0,
 			async: isCommand ? def.async : void 0,
 			env: isCommand ? def.env : void 0,
 			shell: isCommand ? def.shell : void 0,
@@ -16598,7 +16806,7 @@ function canonicalDefToQwencodeHook(def) {
 * is needed here — commands are passed through verbatim and any such variable
 * reference stays intact for Qwen Code to expand.
 */
-function canonicalToQwencodeHooks(config) {
+function canonicalToQwencodeHooks(config, logger) {
 	const qwencodeSupported = new Set(QWENCODE_HOOK_EVENTS);
 	const sharedHooks = {};
 	for (const [event, defs] of Object.entries(config.hooks)) if (qwencodeSupported.has(event)) sharedHooks[event] = defs;
@@ -16618,6 +16826,7 @@ function canonicalToQwencodeHooks(config) {
 		const byMatcher = /* @__PURE__ */ new Map();
 		for (const def of definitions) {
 			if (!qwencodeSupportedTypes.has(def.type ?? "command")) continue;
+			if (def.type === "prompt" && !def.prompt) logger?.warn(`Qwen Code prompt hook on '${eventName}' has no 'prompt' field; Qwen Code will load it and fail it at runtime.`);
 			const key = def.matcher ?? "";
 			const list = byMatcher.get(key);
 			if (list) list.push(def);
@@ -16656,7 +16865,9 @@ const QwencodeHookEntrySchema = z.looseObject({
 	shell: z.optional(z.string()),
 	headers: z.optional(z.record(z.string(), z.string())),
 	allowedEnvVars: z.optional(z.array(z.string())),
-	once: z.optional(z.boolean())
+	once: z.optional(z.boolean()),
+	prompt: z.optional(z.string()),
+	model: z.optional(z.string())
 });
 /**
 * A matcher group entry in a Qwen Code event array.
@@ -16671,37 +16882,43 @@ const QwencodeMatcherEntrySchema = z.looseObject({
 /**
 * Convert a single parsed Qwen Code matcher group into canonical hook definitions.
 */
+function qwencodeHookEntryToCanonical({ hook, sequential, matcher }) {
+	const h = hook;
+	const hookType = h.type === "command" || h.type === "prompt" || h.type === "http" || h.type === "function" ? h.type : "command";
+	const isHttp = hookType === "http";
+	const isCommand = hookType === "command";
+	const isPrompt = hookType === "prompt";
+	const shell = h.shell === "bash" || h.shell === "powershell" ? h.shell : void 0;
+	return {
+		type: hookType,
+		...compact({
+			command: h.command,
+			url: h.url,
+			timeout: h.timeout,
+			name: h.name,
+			description: h.description,
+			statusMessage: h.statusMessage,
+			async: isCommand ? h.async : void 0,
+			env: isCommand ? h.env : void 0,
+			shell: isCommand ? shell : void 0,
+			headers: isHttp ? h.headers : void 0,
+			allowedEnvVars: isHttp ? h.allowedEnvVars : void 0,
+			once: isHttp ? h.once : void 0,
+			prompt: isPrompt ? h.prompt : void 0,
+			model: isPrompt ? h.model : void 0,
+			sequential: sequential ? true : void 0,
+			matcher
+		})
+	};
+}
 function qwencodeMatcherEntryToCanonical(entry) {
-	const defs = [];
-	const hooks = entry.hooks ?? [];
 	const sequential = entry.sequential === true;
 	const matcher = entry.matcher !== void 0 && entry.matcher !== null && entry.matcher !== "" ? entry.matcher : void 0;
-	for (const h of hooks) {
-		const hookType = h.type === "command" || h.type === "prompt" || h.type === "http" || h.type === "function" ? h.type : "command";
-		const isHttp = hookType === "http";
-		const isCommand = hookType === "command";
-		const shell = h.shell === "bash" || h.shell === "powershell" ? h.shell : void 0;
-		defs.push({
-			type: hookType,
-			...compact({
-				command: h.command,
-				url: h.url,
-				timeout: h.timeout,
-				name: h.name,
-				description: h.description,
-				statusMessage: h.statusMessage,
-				async: isCommand ? h.async : void 0,
-				env: isCommand ? h.env : void 0,
-				shell: isCommand ? shell : void 0,
-				headers: isHttp ? h.headers : void 0,
-				allowedEnvVars: isHttp ? h.allowedEnvVars : void 0,
-				once: isHttp ? h.once : void 0,
-				sequential: sequential ? true : void 0,
-				matcher
-			})
-		});
-	}
-	return defs;
+	return (entry.hooks ?? []).map((hook) => qwencodeHookEntryToCanonical({
+		hook,
+		sequential,
+		matcher
+	}));
 }
 /**
 * Extract hooks from Qwen Code settings.json into canonical format.
@@ -16749,12 +16966,12 @@ var QwencodeHooks = class QwencodeHooks extends ToolHooks {
 			validate
 		});
 	}
-	static async fromRulesyncHooks({ outputRoot = process.cwd(), rulesyncHooks, validate = true, global = false }) {
+	static async fromRulesyncHooks({ outputRoot = process.cwd(), rulesyncHooks, validate = true, global = false, logger }) {
 		const paths = QwencodeHooks.getSettablePaths({ global });
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({}, null, 2);
 		const config = rulesyncHooks.getJson();
-		const patch = { hooks: canonicalToQwencodeHooks(config) };
+		const patch = { hooks: canonicalToQwencodeHooks(config, logger) };
 		const disableAllHooks = config.qwencode?.disableAllHooks;
 		if (typeof disableAllHooks === "boolean") patch.disableAllHooks = disableAllHooks;
 		const fileContent = applySharedConfigPatch({
@@ -17306,7 +17523,8 @@ const toolHooksFactories = /* @__PURE__ */ new Map([
 		},
 		supportedEvents: KILO_HOOK_EVENTS,
 		supportedHookTypes: ["command"],
-		supportsMatcher: true
+		supportsMatcher: true,
+		matcherEvents: ["preToolUse", "postToolUse"]
 	}],
 	["opencode", {
 		class: OpencodeHooks,
@@ -17317,7 +17535,8 @@ const toolHooksFactories = /* @__PURE__ */ new Map([
 		},
 		supportedEvents: OPENCODE_HOOK_EVENTS,
 		supportedHookTypes: ["command"],
-		supportsMatcher: true
+		supportsMatcher: true,
+		matcherEvents: ["preToolUse", "postToolUse"]
 	}],
 	["pi", {
 		class: PiHooks,
@@ -18991,6 +19210,7 @@ const toolIgnoreFactories = /* @__PURE__ */ new Map([
 	["qwencode", { class: QwencodeIgnore }],
 	["reasonix", { class: ReasonixIgnore }],
 	["roo", { class: RooIgnore }],
+	["zoocode", { class: RooIgnore }],
 	["devin", { class: DevinIgnore }],
 	["vibe", { class: VibeIgnore }],
 	["warp", { class: WarpIgnore }],
@@ -20360,7 +20580,6 @@ const resolveCopilotcliServerType = (server) => {
 		case "streamable-http": return "http";
 		case "stdio":
 		case "local": return declared;
-		default: break;
 	}
 	if (server.command !== void 0) return "stdio";
 	return isRemoteMcpServer(server) ? "http" : "stdio";
@@ -20780,18 +20999,24 @@ var DeepagentsMcp = class DeepagentsMcp extends ToolMcp {
 /**
 * MCP generator for Devin Local (native `.devin/` configuration).
 *
-* Devin reads MCP servers from the `mcpServers` key of its native config file:
-* - Project scope: `.devin/config.json`
-* - Global scope: `~/.config/devin/config.json`
+* Since v3000.3 (the Local 3.6 release), Devin reads MCP servers from a
+* dedicated `mcpServers`-keyed config file rather than the shared
+* `config.json`:
+* - Project scope: `.devin/mcp_config.json`
+* - Global scope: `~/.config/devin/mcp_config.json`
+*
+* Legacy `mcpServers` entries left in `config.json` are auto-migrated into
+* the dedicated file on Devin startup, so writing the legacy key would fight
+* the migration. Import still falls back to the legacy `config.json`
+* `mcpServers` key when no dedicated file exists, so pre-v3000.3 repos
+* migrate cleanly. The gitignored `.devin/mcp_config.local.json` override is
+* the user's personal territory and is never read or written.
 *
-* The config file is shared with the permissions feature (`permissions` key)
-* and, in global mode, the hooks feature (`hooks` key), so reads and writes
-* merge into the existing JSON rather than overwriting it, and the file is
-* never deleted. Each server is a stdio entry ({ command, args, env }) or a
-* remote entry ({ serverUrl | url, headers }), and may carry an optional
-* `disabledTools` array.
+* Each server is a stdio entry ({ command, args, env }) or a remote entry
+* ({ serverUrl | url, headers }), and may carry an optional `disabledTools`
+* array.
 *
-* @see https://docs.devin.ai/cli/extensibility/configuration
+* @see https://docs.devin.ai/cli/extensibility/mcp/configuration
 */
 var DevinMcp = class DevinMcp extends ToolMcp {
 	json;
@@ -20809,31 +21034,27 @@ var DevinMcp = class DevinMcp extends ToolMcp {
 			throw new Error(`Failed to parse Devin MCP config at ${join(relativeDirPath, relativeFilePath)}: ${formatError(error)}`, { cause: error });
 		}
 	}
-	/**
-	* config.json may carry the permissions/hooks features' keys, so it is never
-	* deleted; only the managed `mcpServers` key is rewritten.
-	*/
-	isDeletable() {
-		return false;
-	}
 	static getSettablePaths({ global = false } = {}) {
 		if (global) return {
 			relativeDirPath: DEVIN_GLOBAL_CONFIG_DIR_PATH,
-			relativeFilePath: DEVIN_CONFIG_FILE_NAME
+			relativeFilePath: DEVIN_MCP_CONFIG_FILE_NAME
 		};
 		return {
 			relativeDirPath: DEVIN_DIR,
-			relativeFilePath: DEVIN_CONFIG_FILE_NAME
+			relativeFilePath: DEVIN_MCP_CONFIG_FILE_NAME
 		};
 	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
-		const fileContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? "{\"mcpServers\":{}}";
-		const json = this.parseJsonOrThrow(fileContent, paths.relativeDirPath, paths.relativeFilePath);
-		const newJson = {
-			...json,
-			mcpServers: json.mcpServers ?? {}
-		};
+		let fileContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
+		if (fileContent === null) {
+			const legacyContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, DEVIN_CONFIG_FILE_NAME));
+			if (legacyContent !== null) {
+				const legacyJson = this.parseJsonOrThrow(legacyContent, paths.relativeDirPath, DEVIN_CONFIG_FILE_NAME);
+				fileContent = JSON.stringify({ mcpServers: legacyJson.mcpServers ?? {} }, null, 2);
+			}
+		}
+		const newJson = { mcpServers: this.parseJsonOrThrow(fileContent ?? "{\"mcpServers\":{}}", paths.relativeDirPath, paths.relativeFilePath).mcpServers ?? {} };
 		return new DevinMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -20843,21 +21064,21 @@ var DevinMcp = class DevinMcp extends ToolMcp {
 			global
 		});
 	}
-	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false }) {
+	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false, logger }) {
 		const paths = this.getSettablePaths({ global });
-		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
-		const existingContent = await readFileContentOrNull(filePath) ?? JSON.stringify({ mcpServers: {} }, null, 2);
+		const existingContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
+		if (existingContent !== null) {
+			const existingJson = this.parseJsonOrThrow(existingContent, paths.relativeDirPath, paths.relativeFilePath);
+			const existingServers = existingJson.mcpServers && typeof existingJson.mcpServers === "object" ? Object.keys(existingJson.mcpServers) : [];
+			const managedServers = new Set(Object.keys(rulesyncMcp.getMcpServers()));
+			const dropped = existingServers.filter((name) => !managedServers.has(name));
+			if (dropped.length > 0) logger?.warn(`Devin MCP servers not managed by rulesync will be removed from ${join(paths.relativeDirPath, paths.relativeFilePath)}: ${dropped.join(", ")}. Run 'rulesync import' first to keep them, or move them to mcp_config.local.json.`);
+		}
 		return new DevinMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
 			relativeFilePath: paths.relativeFilePath,
-			fileContent: applySharedConfigPatch({
-				fileKey: sharedConfigFileKey(paths),
-				feature: "mcp",
-				existingContent,
-				patch: { mcpServers: rulesyncMcp.getMcpServers() },
-				filePath
-			}),
+			fileContent: JSON.stringify({ mcpServers: rulesyncMcp.getMcpServers() }, null, 2),
 			validate,
 			global
 		});
@@ -22131,9 +22352,12 @@ var KiloMcp = class KiloMcp extends ToolMcp {
 			fileContent = await readFileContentOrNull(jsonPath);
 			if (fileContent) relativeFilePath = KILO_JSON_FILE_NAME;
 		}
+		if (instructions.length === 0 && fileContent === null) return null;
 		const json = fileContent ? parse(fileContent) : {};
 		const existingInstructions = Array.isArray(json.instructions) ? json.instructions.filter((entry) => typeof entry === "string") : [];
-		const mergedInstructions = Array.from(/* @__PURE__ */ new Set([...existingInstructions, ...instructions])).toSorted();
+		const managedPrefix = `${toPosixPath(join(KILO_DIR, KILO_RULES_DIR_NAME))}/`;
+		const preservedInstructions = existingInstructions.filter((entry) => !toPosixPath(entry).replace(/^\.\//, "").startsWith(managedPrefix));
+		const mergedInstructions = Array.from(/* @__PURE__ */ new Set([...preservedInstructions, ...instructions])).toSorted();
 		return new KiloMcp({
 			outputRoot,
 			relativeDirPath: basePaths.relativeDirPath,
@@ -22142,7 +22366,7 @@ var KiloMcp = class KiloMcp extends ToolMcp {
 				fileKey: sharedConfigFileKey(basePaths),
 				feature: "rules",
 				existingContent: fileContent ?? "",
-				patch: { instructions: mergedInstructions },
+				patch: { instructions: mergedInstructions.length > 0 ? mergedInstructions : void 0 },
 				filePath: join(jsonDir, relativeFilePath)
 			}),
 			validate
@@ -22864,6 +23088,8 @@ var OpencodeMcp = class OpencodeMcp extends ToolMcp {
 	static async fromInstructions({ outputRoot = process.cwd(), instructions, validate = true, global = false }) {
 		const basePaths = this.getSettablePaths({ global });
 		const jsonDir = join(outputRoot, basePaths.relativeDirPath);
+		const configDirPrefix = `${toPosixPath(basePaths.relativeDirPath).replace(/\/+$/, "")}/`;
+		const normalizedInstructions = instructions.map((path) => global && path.startsWith(configDirPrefix) ? path.slice(configDirPrefix.length) : path);
 		let fileContent = null;
 		let relativeFilePath = OPENCODE_JSONC_FILE_NAME;
 		const jsoncPath = join(jsonDir, OPENCODE_JSONC_FILE_NAME);
@@ -22873,9 +23099,15 @@ var OpencodeMcp = class OpencodeMcp extends ToolMcp {
 			fileContent = await readFileContentOrNull(jsonPath);
 			if (fileContent) relativeFilePath = OPENCODE_JSON_FILE_NAME;
 		}
+		if (instructions.length === 0 && fileContent === null) return null;
 		const json = fileContent ? parse(fileContent) : {};
 		const existingInstructions = Array.isArray(json.instructions) ? json.instructions.filter((entry) => typeof entry === "string") : [];
-		const mergedInstructions = Array.from(/* @__PURE__ */ new Set([...existingInstructions, ...instructions])).toSorted();
+		const managedPrefixes = global ? ["memories/", `${configDirPrefix}memories/`] : [`${toPosixPath(OPENCODE_DIR)}/memories/`];
+		const preservedInstructions = existingInstructions.filter((entry) => {
+			const normalized = toPosixPath(entry).replace(/^\.\//, "");
+			return !managedPrefixes.some((prefix) => normalized.startsWith(prefix));
+		});
+		const mergedInstructions = Array.from(/* @__PURE__ */ new Set([...preservedInstructions, ...normalizedInstructions])).toSorted();
 		return new OpencodeMcp({
 			outputRoot,
 			relativeDirPath: basePaths.relativeDirPath,
@@ -22884,7 +23116,7 @@ var OpencodeMcp = class OpencodeMcp extends ToolMcp {
 				fileKey: sharedConfigFileKey(basePaths),
 				feature: "rules",
 				existingContent: fileContent ?? "",
-				patch: { instructions: mergedInstructions },
+				patch: { instructions: mergedInstructions.length > 0 ? mergedInstructions : void 0 },
 				filePath: join(jsonDir, relativeFilePath)
 			}),
 			validate
@@ -23324,9 +23556,13 @@ function parseRovodevMcpJson(fileContent, relativeDirPath, relativeFilePath) {
 	return parsed;
 }
 /**
-* Rovodev MCP: global only at ~/.rovodev/mcp.json.
-* Same shape as Cursor: { mcpServers: { ... } }. See Rovodev MCP docs.
-* Project-level MCP is not supported; use --global when generating.
+* Rovodev MCP: `~/.rovodev/mcp.json` (global) and the repo-committed project
+* `.rovodev/mcp.json` documented by the Bitbucket Cloud Agentic Pipelines
+* guide ("Register your MCP server in `.rovodev/mcp.json`", referenced via
+* `mcp.mcpConfigPath`). Same shape as Cursor: { mcpServers: { ... } }.
+* A server the canonical config marks `disabled: true` is still written here
+* and switched off through `mcp.disabledMcpServers` in the sibling
+* `config.yml` — the file Rovo Dev actually consults for disabling.
 */
 /**
 * Rovo Dev documents the per-server transport key as `transport`, with the
@@ -23352,11 +23588,7 @@ function lookupTransport(map, key) {
 	return Object.hasOwn(map, key) ? map[key] : void 0;
 }
 function toRovodevServer(name, server, logger) {
-	const { type, transport, disabled, ...rest } = server;
-	if (disabled === true) {
-		logger?.warn(`Rovo Dev MCP: skipping "${name}" because it is disabled and mcp.json has no disable flag.`);
-		return null;
-	}
+	const { type, transport, disabled: _disabled, ...rest } = server;
 	const declared = typeof transport === "string" ? transport : typeof type === "string" ? type : void 0;
 	if (declared === void 0) return rest;
 	const mapped = lookupTransport(CANONICAL_TO_ROVODEV_TRANSPORT, declared);
@@ -23378,6 +23610,44 @@ function fromRovodevServer(server) {
 		type: mapped
 	};
 }
+/**
+* Read the sibling `config.yml` (same scope root as `mcp.json`) and return the
+* parsed document, `null` when the file does not exist. A malformed file
+* **throws**: the disable toggle lives here, so pretending a broken file says
+* nothing would silently re-enable servers on import and leave disabled ones
+* running on generate — both flip a security toggle the wrong way.
+*/
+async function readRovodevConfigYaml({ outputRoot }) {
+	const content = await readFileContentOrNull(join(outputRoot, ROVODEV_DIR, ROVODEV_CONFIG_FILE_NAME));
+	if (content === null) return null;
+	return parseSharedConfig({
+		format: "yaml",
+		fileContent: content,
+		filePath: join(ROVODEV_DIR, ROVODEV_CONFIG_FILE_NAME)
+	});
+}
+function disabledNamesOf(config) {
+	const mcpBlock = config && isRecord(config.mcp) ? config.mcp : {};
+	return isStringArray$1(mcpBlock.disabledMcpServers) ? mcpBlock.disabledMcpServers : [];
+}
+/**
+* Auxiliary writer for the `mcp:` block of `.rovodev/config.yml` (project) /
+* `~/.rovodev/config.yml` (global). Carries `disabledMcpServers` — the key
+* Rovo Dev actually consults to switch a server off — recomputed from the
+* existing block so user keys (`mcpConfigPath`, `allowedMcpServers`, ...) and
+* disabled names for servers rulesync does not manage survive.
+*/
+var RovodevMcpConfigYaml = class extends ToolFile {
+	isDeletable() {
+		return false;
+	}
+	validate() {
+		return {
+			success: true,
+			error: null
+		};
+	}
+};
 var RovodevMcp = class RovodevMcp extends ToolMcp {
 	json;
 	constructor(params) {
@@ -23398,13 +23668,24 @@ var RovodevMcp = class RovodevMcp extends ToolMcp {
 		};
 	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
-		if (!global) throw new Error("Rovodev MCP is global-only; use --global to sync ~/.rovodev/mcp.json");
 		const paths = this.getSettablePaths({ global });
 		const json = parseRovodevMcpJson(await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? "{\"mcpServers\":{}}", paths.relativeDirPath, paths.relativeFilePath);
 		const newJson = {
 			...json,
 			mcpServers: json.mcpServers ?? {}
 		};
+		const disabledNames = disabledNamesOf(await readRovodevConfigYaml({ outputRoot }));
+		if (disabledNames.length > 0 && isMcpServers(newJson.mcpServers)) {
+			const servers = newJson.mcpServers;
+			for (const name of disabledNames) {
+				if (!Object.hasOwn(servers, name)) continue;
+				const server = servers[name];
+				if (isPlainObject$1(server)) servers[name] = {
+					...server,
+					disabled: true
+				};
+			}
+		}
 		return new RovodevMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -23415,11 +23696,21 @@ var RovodevMcp = class RovodevMcp extends ToolMcp {
 		});
 	}
 	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false, logger }) {
-		if (!global) throw new Error("Rovodev MCP is global-only; use --global to sync ~/.rovodev/mcp.json");
 		const paths = this.getSettablePaths({ global });
 		const json = parseRovodevMcpJson(await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? JSON.stringify({ mcpServers: {} }, null, 2), paths.relativeDirPath, paths.relativeFilePath);
+		let canWriteDisableToggle = true;
+		try {
+			await readRovodevConfigYaml({ outputRoot });
+		} catch {
+			canWriteDisableToggle = false;
+		}
 		const mcpServers = Object.fromEntries(Object.entries(rulesyncMcp.getMcpServers()).map(([name, server]) => {
-			const converted = toRovodevServer(name, server, logger);
+			const record = server;
+			if (record.disabled === true && !canWriteDisableToggle) {
+				logger?.warn(`Rovo Dev MCP: skipping disabled server "${name}" because config.yml cannot be parsed, so mcp.disabledMcpServers cannot be written to switch it off.`);
+				return null;
+			}
+			const converted = toRovodevServer(name, record, logger);
 			return converted === null ? null : [name, converted];
 		}).filter((entry) => entry !== null));
 		const rovodevConfig = {
@@ -23435,6 +23726,64 @@ var RovodevMcp = class RovodevMcp extends ToolMcp {
 			global
 		});
 	}
+	/**
+	* `mcp.disabledMcpServers` lives in the shared `config.yml` the permissions
+	* feature also writes. Declared here so the write-order derivation sees this
+	* feature as one of that file's writers — it is not a settable path, since
+	* the servers themselves live in `mcp.json`.
+	*/
+	static getExtraSharedWritePaths() {
+		return [{
+			relativeDirPath: ROVODEV_DIR,
+			relativeFilePath: ROVODEV_CONFIG_FILE_NAME
+		}];
+	}
+	static async getAuxiliaryFiles({ outputRoot = process.cwd(), global = false, rulesyncMcp, logger }) {
+		const servers = rulesyncMcp.forTarget({
+			toolTarget: "rovodev",
+			logger
+		}).getMcpServers();
+		const managedNames = Object.keys(servers).filter((name) => toRovodevServer(name, servers[name]) !== null);
+		const disabledNames = managedNames.filter((name) => {
+			const server = servers[name];
+			return isRecord(server) && server.disabled === true;
+		});
+		const existingContent = await readFileContentOrNull(join(outputRoot, ROVODEV_DIR, ROVODEV_CONFIG_FILE_NAME)) ?? "";
+		let existingParsed;
+		try {
+			existingParsed = parseSharedConfig({
+				format: "yaml",
+				fileContent: existingContent,
+				filePath: join(ROVODEV_DIR, ROVODEV_CONFIG_FILE_NAME)
+			});
+		} catch (error) {
+			logger?.warn(`Skipping the Rovo Dev mcp.disabledMcpServers update: ${formatError(error)}`);
+			return [];
+		}
+		const existingMcp = isRecord(existingParsed.mcp) ? { ...existingParsed.mcp } : {};
+		const existingDisabled = isStringArray$1(existingMcp.disabledMcpServers) ? existingMcp.disabledMcpServers : [];
+		const managedNameSet = new Set(managedNames);
+		const reEnabled = existingDisabled.filter((name) => managedNameSet.has(name) && !disabledNames.includes(name));
+		if (reEnabled.length > 0) logger?.warn(`Rovo Dev MCP: re-enabling ${reEnabled.join(", ")} — the canonical config does not mark ${reEnabled.length === 1 ? "it" : "them"} disabled. Set "disabled": true in .rulesync/mcp.jsonc to keep a managed server off.`);
+		const mergedDisabled = [...existingDisabled.filter((name) => !managedNameSet.has(name)), ...disabledNames].toSorted();
+		if (mergedDisabled.length > 0) existingMcp.disabledMcpServers = mergedDisabled;
+		else delete existingMcp.disabledMcpServers;
+		if (mergedDisabled.length === 0 && existingContent.trim() === "") return [];
+		const fileContent = applySharedConfigPatch({
+			fileKey: ROVODEV_CONFIG_SHARED_FILE_KEY,
+			feature: "mcp",
+			existingContent,
+			patch: { mcp: Object.keys(existingMcp).length > 0 ? existingMcp : void 0 },
+			filePath: join(ROVODEV_DIR, ROVODEV_CONFIG_FILE_NAME)
+		});
+		return [new RovodevMcpConfigYaml({
+			outputRoot,
+			relativeDirPath: ROVODEV_DIR,
+			relativeFilePath: ROVODEV_CONFIG_FILE_NAME,
+			fileContent,
+			global
+		})];
+	}
 	toRulesyncMcp() {
 		const rawServers = isMcpServers(this.json.mcpServers) ? this.json.mcpServers : {};
 		const mcpServers = Object.fromEntries(Object.entries(rawServers).filter(([, server]) => isPlainObject$1(server)).map(([name, server]) => [name, fromRovodevServer(server)]));
@@ -23583,7 +23932,6 @@ function transportOf(server) {
 		case "http":
 		case "streamable-http":
 		case "ws": return "http";
-		default: break;
 	}
 	if (server.command !== void 0) return "stdio";
 	if (server.url !== void 0 || server.httpUrl !== void 0) return "http";
@@ -23611,6 +23959,20 @@ function deriveTransportAllowlist(servers) {
 	return allowlist;
 }
 //#endregion
+//#region src/features/shared/vibe-config-scope.ts
+/**
+* Vibe selects exactly **one** persistence TOML and does not merge scopes: the
+* trusted project `.vibe/config.toml` when one is discovered, otherwise
+* `~/.vibe/config.toml` (single code path since v2.22.0's ConfigOrchestrator
+* migration). A `--global` run that writes the home file is therefore inert in
+* any project that has its own config — worth a heads-up, since the other Vibe
+* surfaces (rules, hooks, agents, skills) genuinely combine scopes.
+*/
+async function warnIfGlobalVibeConfigIsShadowed(logger) {
+	if (!await fileExists(join(process.cwd(), ".vibe", "config.toml"))) return;
+	logger?.warn("Vibe reads exactly one config.toml (project .vibe/config.toml when present, otherwise ~/.vibe/config.toml — a fallback, not a merge). This project has .vibe/config.toml, so the global file written by --global is ignored here.");
+}
+//#endregion
 //#region src/features/mcp/vibe-mcp.ts
 const VIBE_MCP_SERVER_FIELDS = [
 	"transport",
@@ -23679,8 +24041,9 @@ var VibeMcp = class VibeMcp extends ToolMcp {
 			global
 		});
 	}
-	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, global = false }) {
+	static async fromRulesyncMcp({ outputRoot = process.cwd(), rulesyncMcp, validate = true, logger, global = false }) {
 		const paths = this.getSettablePaths({ global });
+		if (global) await warnIfGlobalVibeConfigIsShadowed(logger);
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? "";
 		const existingServers = normalizeMcpServersArray(parseSharedConfig({
@@ -23689,7 +24052,10 @@ var VibeMcp = class VibeMcp extends ToolMcp {
 			filePath
 		}).mcp_servers);
 		const existingByName = new Map(existingServers.map((server) => [server.name, server]));
-		const mcpServers = Object.entries(rulesyncMcp.getMcpServers()).map(([name, server]) => rulesyncMcpServerToVibe(name, server, existingByName.get(name)));
+		const rulesyncServers = rulesyncMcp.getMcpServers();
+		const managedNames = new Set(Object.keys(rulesyncServers));
+		const mcpServers = Object.entries(rulesyncServers).map(([name, server]) => rulesyncMcpServerToVibe(name, server, existingByName.get(name)));
+		const unmanagedServers = existingServers.filter((server) => !managedNames.has(server.name));
 		return new VibeMcp({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -23698,7 +24064,7 @@ var VibeMcp = class VibeMcp extends ToolMcp {
 				fileKey: sharedConfigFileKey(paths),
 				feature: "mcp",
 				existingContent,
-				patch: { mcp_servers: mcpServers },
+				patch: { mcp_servers: [...mcpServers, ...unmanagedServers] },
 				filePath
 			}),
 			validate,
@@ -24400,10 +24766,19 @@ const toolMcpFactories = /* @__PURE__ */ new Map([
 			supportsDisabledTools: false
 		}
 	}],
+	["zoocode", {
+		class: RooMcp,
+		meta: {
+			supportsProject: true,
+			supportsGlobal: false,
+			supportsEnabledTools: false,
+			supportsDisabledTools: false
+		}
+	}],
 	["rovodev", {
 		class: RovodevMcp,
 		meta: {
-			supportsProject: false,
+			supportsProject: true,
 			supportsGlobal: true,
 			supportsEnabledTools: false,
 			supportsDisabledTools: false
@@ -25269,9 +25644,7 @@ function convertRulesyncToAntigravityCliPermissions(config) {
 				case "ask":
 					ask.push(entry);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -25482,9 +25855,7 @@ function convertRulesyncToAntigravityIdePermissions(config) {
 				case "ask":
 					ask.push(entry);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -26216,9 +26587,7 @@ function convertRulesyncToClaudePermissions({ config, logger }) {
 				case "ask":
 					ask.push(entry);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -27468,9 +27837,7 @@ function convertRulesyncToCursorPermissions(config, logger) {
 				case "ask":
 					logger?.warn(`Cursor CLI permissions do not support the "ask" action. Skipping ${category} rule: ${pattern}`);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -27575,9 +27942,10 @@ function buildDevinPermissionEntry(scope, pattern) {
 * - Project scope: `.devin/config.json`
 * - Global scope: `~/.config/devin/config.json`
 *
-* The config file is shared with the MCP (`mcpServers`) and, in global mode, the
-* hooks (`hooks`) features, so reads and writes merge into the existing JSON and
-* the file is never deleted; only the managed `permissions` key is rewritten.
+* In global mode the config file is shared with the hooks (`hooks`) feature
+* (MCP moved to the dedicated mcp_config.json in v3000.3), so reads and writes
+* merge into the existing JSON and the file is never deleted; only the managed
+* `permissions` key is rewritten.
 *
 * @see https://docs.devin.ai/cli/reference/permissions
 */
@@ -27706,9 +28074,7 @@ function convertRulesyncToDevinPermissions(config) {
 				case "ask":
 					ask.push(entry);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -27896,10 +28262,7 @@ function convertRulesyncToFactorydroidPermissions({ config, logger }) {
 			case "allow":
 				allow.push(pattern);
 				break;
-			case "deny":
-				deny.push(pattern);
-				break;
-			case "ask": break;
+			case "deny": deny.push(pattern);
 		}
 	}
 	return {
@@ -28018,10 +28381,11 @@ var GoosePermissions = class GoosePermissions extends ToolPermissions {
 			throw new Error(`Failed to parse existing Goose permission.yaml at ${filePath}: ${formatError(error)}`, { cause: error });
 		}
 		const config = isRecord(parsed) ? { ...parsed } : {};
-		config[GOOSE_USER_KEY] = convertRulesyncToGoosePermissionConfig({
+		const userPermission = convertRulesyncToGoosePermissionConfig({
 			config: rulesyncPermissions.getJson(),
 			logger
 		});
+		config[GOOSE_USER_KEY] = userPermission;
 		return new GoosePermissions({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -30239,9 +30603,7 @@ function convertRulesyncToQwenPermissions(config) {
 				case "ask":
 					ask.push(entry);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -30314,6 +30676,20 @@ function toCanonicalToolName$2(reasonixName) {
 	return REASONIX_TO_CANONICAL_TOOL_NAMES[reasonixName] ?? reasonixName;
 }
 /**
+* Whether an entry uses the first-class `Tool=<literal>` exact-command form
+* (SPEC §3.7, v1.18.0): metacharacters in the literal are ordinary characters
+* and only the identical complete command matches. These entries have no
+* canonical tool→pattern→action equivalent — glob-style `Tool(...)` matches
+* differently by design — so they are preserved verbatim and round-trip
+* through the `reasonix` override's rawAllow/rawAsk/rawDeny arrays.
+*/
+function isReasonixExactCommandEntry(entry) {
+	const eqIndex = entry.indexOf("=");
+	if (eqIndex <= 0) return false;
+	const parenIndex = entry.indexOf("(");
+	return parenIndex === -1 || eqIndex < parenIndex;
+}
+/**
 * Parse a Reasonix permission entry like "Bash(npm run *)" into tool name and pattern.
 * If no parentheses, returns the tool name with "*" as the pattern.
 */
@@ -30402,10 +30778,22 @@ var ReasonixPermissions = class ReasonixPermissions extends ToolPermissions {
 		const config = rulesyncPermissions.getJson();
 		const { allow, ask, deny } = convertRulesyncToReasonixPermissions(config);
 		const managedToolNames = new Set(Object.keys(config.permission).map((category) => toReasonixToolName(category)));
+		const override = config.reasonix;
+		const rawAllow = toReasonixStringArray(override?.rawAllow);
+		const rawAsk = toReasonixStringArray(override?.rawAsk);
+		const rawDeny = toReasonixStringArray(override?.rawDeny);
+		const rawOwnedEntries = /* @__PURE__ */ new Set([
+			...rawAllow,
+			...rawAsk,
+			...rawDeny
+		]);
 		const existingPermissions = toReasonixTable(parsed.permissions);
-		const preservedAllow = toReasonixStringArray(existingPermissions.allow).filter((entry) => !managedToolNames.has(parseReasonixPermissionEntry(entry).toolName));
-		const preservedAsk = toReasonixStringArray(existingPermissions.ask).filter((entry) => !managedToolNames.has(parseReasonixPermissionEntry(entry).toolName));
-		const preservedDeny = toReasonixStringArray(existingPermissions.deny).filter((entry) => !managedToolNames.has(parseReasonixPermissionEntry(entry).toolName));
+		const { allow: preservedAllow, ask: preservedAsk, deny: preservedDeny } = preserveExistingEntries({
+			existingPermissions,
+			managedToolNames,
+			rawOwnedEntries,
+			logger
+		});
 		if (logger && managedToolNames.has("Read")) {
 			const droppedReadDenyEntries = toReasonixStringArray(existingPermissions.deny).filter((entry) => {
 				const { toolName } = parseReasonixPermissionEntry(entry);
@@ -30414,17 +30802,22 @@ var ReasonixPermissions = class ReasonixPermissions extends ToolPermissions {
 			if (droppedReadDenyEntries.length > 0) logger.warn(`Permissions feature manages 'Read' tool and will overwrite ${droppedReadDenyEntries.length} existing Read deny entries (possibly from ignore feature). Permissions take precedence.`);
 		}
 		const mergedPermissions = { ...existingPermissions };
-		const mergedAllow = uniq([...preservedAllow, ...allow].toSorted());
-		const mergedAsk = uniq([...preservedAsk, ...ask].toSorted());
-		const mergedDeny = uniq([...preservedDeny, ...deny].toSorted());
-		if (mergedAllow.length > 0) mergedPermissions.allow = mergedAllow;
-		else delete mergedPermissions.allow;
-		if (mergedAsk.length > 0) mergedPermissions.ask = mergedAsk;
-		else delete mergedPermissions.ask;
-		if (mergedDeny.length > 0) mergedPermissions.deny = mergedDeny;
-		else delete mergedPermissions.deny;
+		setOrDeleteEntries(mergedPermissions, "allow", [
+			...preservedAllow,
+			...allow,
+			...rawAllow
+		]);
+		setOrDeleteEntries(mergedPermissions, "ask", [
+			...preservedAsk,
+			...ask,
+			...rawAsk
+		]);
+		setOrDeleteEntries(mergedPermissions, "deny", [
+			...preservedDeny,
+			...deny,
+			...rawDeny
+		]);
 		const patch = { permissions: mergedPermissions };
-		const override = config.reasonix;
 		if (override?.sandbox !== void 0) patch.sandbox = {
 			...asReasonixRecord(parsed.sandbox),
 			...asReasonixRecord(override.sandbox)
@@ -30455,16 +30848,29 @@ var ReasonixPermissions = class ReasonixPermissions extends ToolPermissions {
 	}
 	toRulesyncPermissions() {
 		const permissions = toReasonixTable(this.toml.permissions);
+		const splitExact = (entries) => {
+			const exact = entries.filter((entry) => isReasonixExactCommandEntry(entry));
+			return {
+				translated: entries.filter((entry) => !isReasonixExactCommandEntry(entry)),
+				exact
+			};
+		};
+		const allowSplit = splitExact(toReasonixStringArray(permissions.allow));
+		const askSplit = splitExact(toReasonixStringArray(permissions.ask));
+		const denySplit = splitExact(toReasonixStringArray(permissions.deny));
 		const config = convertReasonixToRulesyncPermissions({
-			allow: toReasonixStringArray(permissions.allow),
-			ask: toReasonixStringArray(permissions.ask),
-			deny: toReasonixStringArray(permissions.deny)
+			allow: allowSplit.translated,
+			ask: askSplit.translated,
+			deny: denySplit.translated
 		});
 		const sandbox = asReasonixRecord(this.toml.sandbox);
 		const agentPlanMode = pickReasonixKeys(this.toml.agent, [...REASONIX_OVERRIDE_AGENT_KEYS, ...REASONIX_RETIRED_AGENT_KEYS]);
 		const reasonixOverride = {};
 		if (Object.keys(sandbox).length > 0) reasonixOverride.sandbox = sandbox;
 		if (Object.keys(agentPlanMode).length > 0) reasonixOverride.agent = agentPlanMode;
+		if (allowSplit.exact.length > 0) reasonixOverride.rawAllow = allowSplit.exact;
+		if (askSplit.exact.length > 0) reasonixOverride.rawAsk = askSplit.exact;
+		if (denySplit.exact.length > 0) reasonixOverride.rawDeny = denySplit.exact;
 		const result = { ...config };
 		if (Object.keys(reasonixOverride).length > 0) result.reasonix = reasonixOverride;
 		return this.toRulesyncPermissionsDefault({ fileContent: JSON.stringify(result, null, 2) });
@@ -30494,6 +30900,41 @@ var ReasonixPermissions = class ReasonixPermissions extends ToolPermissions {
 	}
 };
 /**
+* Preserve existing permission entries rulesync does not manage: entries for
+* tools NOT in the permissions config, plus exact `Tool=<literal>` entries not
+* owned by the override's raw arrays — Reasonix writes those itself as
+* remembered approvals, and dropping them would revoke grants the canonical
+* glob rules cannot re-express. Remove one by deleting it from `reasonix.toml`
+* (or by naming it in a raw array, which takes ownership). Preserved exact
+* entries are logged so the kept-alive grants stay visible.
+*/
+function preserveExistingEntries({ existingPermissions, managedToolNames, rawOwnedEntries, logger }) {
+	const isPreserved = (entry) => {
+		if (isReasonixExactCommandEntry(entry)) return !rawOwnedEntries.has(entry);
+		return !managedToolNames.has(parseReasonixPermissionEntry(entry).toolName);
+	};
+	const allow = toReasonixStringArray(existingPermissions.allow).filter(isPreserved);
+	const ask = toReasonixStringArray(existingPermissions.ask).filter(isPreserved);
+	const deny = toReasonixStringArray(existingPermissions.deny).filter(isPreserved);
+	const preservedExact = [
+		...allow,
+		...ask,
+		...deny
+	].filter((entry) => isReasonixExactCommandEntry(entry));
+	if (preservedExact.length > 0) logger?.info(`Preserving ${preservedExact.length} exact Reasonix permission entries (remembered approvals): ${preservedExact.join(", ")}`);
+	return {
+		allow,
+		ask,
+		deny
+	};
+}
+/** Sort, dedupe and set a permissions array key, deleting it when empty. */
+function setOrDeleteEntries(table, key, entries) {
+	const merged = uniq(entries.toSorted());
+	if (merged.length > 0) table[key] = merged;
+	else delete table[key];
+}
+/**
 * Convert rulesync permissions config to Reasonix allow/ask/deny arrays.
 */
 function convertRulesyncToReasonixPermissions(config) {
@@ -30511,9 +30952,7 @@ function convertRulesyncToReasonixPermissions(config) {
 				case "ask":
 					ask.push(entry);
 					break;
-				case "deny":
-					deny.push(entry);
-					break;
+				case "deny": deny.push(entry);
 			}
 		}
 	}
@@ -30543,7 +30982,6 @@ function convertReasonixToRulesyncPermissions(params) {
 }
 //#endregion
 //#region src/features/permissions/rovodev-permissions.ts
-const ROVODEV_GLOBAL_ONLY_MESSAGE = "Rovodev permissions are global-only; use --global to sync ~/.rovodev/config.yml";
 const CATCH_ALL_PATTERN$1 = "*";
 const CATEGORY_TO_TOOL_KEYS = {
 	read: [
@@ -30603,9 +31041,12 @@ const OWNED_TOOL_PERMISSION_KEYS = [
 /**
 * Permissions adapter for Rovo Dev CLI.
 *
-* Rovo Dev reads tool permissions from the `toolPermissions` block of the global
-* `~/.rovodev/config.yml`. This surface is **global only** — there is no
-* project-scoped Rovo Dev permissions file (mirrors the Rovodev MCP adapter).
+* Rovo Dev reads tool permissions from the `toolPermissions` block of
+* `config.yml` — the global `~/.rovodev/config.yml`, and since the Bitbucket
+* Cloud Agentic Pipelines docs, also the repo-committed project
+* `.rovodev/config.yml` (referenced from `bitbucket-pipelines.yml` via
+* `config.path`, or the `--config-file` CLI flag). Both scopes use the
+* same relative path, resolved against the project root or home directory.
 *
 * Rovo Dev's three levels (`allow`/`ask`/`deny`) are an exact 1:1 with rulesync's
 * canonical action enum, so action values pass through verbatim.
@@ -30652,7 +31093,6 @@ var RovodevPermissions = class RovodevPermissions extends ToolPermissions {
 		};
 	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
-		if (!global) throw new Error(ROVODEV_GLOBAL_ONLY_MESSAGE);
 		const paths = RovodevPermissions.getSettablePaths({ global });
 		const fileContent = await readFileContentOrNull(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? "";
 		return new RovodevPermissions({
@@ -30661,11 +31101,10 @@ var RovodevPermissions = class RovodevPermissions extends ToolPermissions {
 			relativeFilePath: paths.relativeFilePath,
 			fileContent,
 			validate,
-			global: true
+			global
 		});
 	}
 	static async fromRulesyncPermissions({ outputRoot = process.cwd(), rulesyncPermissions, logger, global = false }) {
-		if (!global) throw new Error(ROVODEV_GLOBAL_ONLY_MESSAGE);
 		const paths = RovodevPermissions.getSettablePaths({ global });
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? "";
@@ -30688,14 +31127,20 @@ var RovodevPermissions = class RovodevPermissions extends ToolPermissions {
 			filePath,
 			logger
 		});
-		if (resolvedToolPermissions !== void 0) config.toolPermissions = resolvedToolPermissions;
+		const fileContent = resolvedToolPermissions !== void 0 ? applySharedConfigPatch({
+			fileKey: ROVODEV_CONFIG_SHARED_FILE_KEY,
+			feature: "permissions",
+			existingContent,
+			patch: { toolPermissions: resolvedToolPermissions },
+			filePath
+		}) : dump(config);
 		return new RovodevPermissions({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
 			relativeFilePath: paths.relativeFilePath,
-			fileContent: dump(config),
+			fileContent,
 			validate: true,
-			global: true
+			global
 		});
 	}
 	toRulesyncPermissions() {
@@ -31232,6 +31677,7 @@ const CANONICAL_TO_VIBE_TOOL_NAMES = {
 	write: "write_file",
 	webfetch: "web_fetch",
 	websearch: "web_search",
+	grep: "grep",
 	agent: "task"
 };
 const VIBE_TO_CANONICAL_TOOL_NAMES = {
@@ -31241,6 +31687,7 @@ const VIBE_TO_CANONICAL_TOOL_NAMES = {
 	write_file: "write",
 	web_fetch: "webfetch",
 	web_search: "websearch",
+	grep: "grep",
 	task: "agent"
 };
 var VibePermissions = class VibePermissions extends ToolPermissions {
@@ -31278,6 +31725,7 @@ var VibePermissions = class VibePermissions extends ToolPermissions {
 	}
 	static async fromRulesyncPermissions({ outputRoot = process.cwd(), rulesyncPermissions, validate = true, logger, global = false }) {
 		const paths = this.getSettablePaths({ global });
+		if (global) await warnIfGlobalVibeConfigIsShadowed(logger);
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingContent = await readFileContentOrNull(filePath) ?? "";
 		const config = parseVibeConfig(existingContent);
@@ -31285,46 +31733,31 @@ var VibePermissions = class VibePermissions extends ToolPermissions {
 		const tools = toVibeToolsRecord(config.tools);
 		const enabledTools = new Set(toStringArray(config.enabled_tools));
 		const disabledTools = new Set(toStringArray(config.disabled_tools));
+		const removedEnabledTools = [];
 		for (const category of Object.keys(permission)) {
+			if (!hasVibeToolName(category)) continue;
 			const vibeToolName = toVibeToolName(category);
-			enabledTools.delete(vibeToolName);
+			if (enabledTools.delete(vibeToolName)) removedEnabledTools.push(vibeToolName);
 			disabledTools.delete(vibeToolName);
 		}
 		for (const [category, rules] of Object.entries(permission)) {
-			const vibeToolName = toVibeToolName(category);
-			const existingTool = toVibeToolConfig(tools[vibeToolName]);
-			const nextTool = { ...existingTool };
-			const allow = new Set(toStringArray(existingTool.allow ?? existingTool.allowlist));
-			const deny = new Set(toStringArray(existingTool.deny ?? existingTool.denylist));
-			for (const [pattern, action] of Object.entries(rules)) {
-				if (pattern === "*") {
-					applyWildcardPermission({
-						action,
-						toolConfig: nextTool
-					});
-					if (action === "deny") {
-						disabledTools.add(vibeToolName);
-						enabledTools.delete(vibeToolName);
-					} else if (action === "allow") {
-						enabledTools.add(vibeToolName);
-						disabledTools.delete(vibeToolName);
-					}
-					continue;
-				}
-				if (action === "ask") {
-					logger?.warn(`Vibe permissions do not support pattern-level "ask" rules. Skipping ${category}: ${pattern}`);
-					continue;
-				}
-				if (action === "allow") allow.add(pattern);
-				else deny.add(pattern);
+			if (!hasVibeToolName(category)) {
+				const ruleCount = Object.keys(rules).length;
+				if (ruleCount > 0) logger?.warn(`Vibe has no builtin tool for the '${category}' category; skipping ${ruleCount} rule(s) instead of emitting an inert [tools.${category}] table.`);
+				continue;
 			}
-			delete nextTool.allow;
-			delete nextTool.deny;
-			if (allow.size > 0) nextTool.allowlist = [...allow].toSorted();
-			if (deny.size > 0) nextTool.denylist = [...deny].toSorted();
-			tools[vibeToolName] = nextTool;
+			applyCategoryRules({
+				category,
+				rules,
+				tools,
+				enabledTools,
+				disabledTools,
+				logger
+			});
 		}
-		applyVibeSensitivePatterns(tools, rulesyncPermissions.getJson().vibe);
+		const vibeOverride = rulesyncPermissions.getJson().vibe;
+		applyVibeSensitivePatterns(tools, vibeOverride, logger);
+		if (removedEnabledTools.length > 0 && vibeOverride?.enabled_tools === void 0 && logger) logger.warn(`Removed ${removedEnabledTools.join(", ")} from Vibe's exclusive enabled_tools list (rulesync owns the tools it configures and no longer expresses allows through that key). If the exclusive narrowing was intentional, declare the full list explicitly via vibe.enabled_tools in .rulesync/permissions.jsonc.`);
 		return new VibePermissions({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -31335,7 +31768,10 @@ var VibePermissions = class VibePermissions extends ToolPermissions {
 				existingContent,
 				patch: {
 					tools,
-					enabled_tools: enabledTools.size > 0 ? [...enabledTools].toSorted() : void 0,
+					enabled_tools: resolveEnabledToolsPatch({
+						vibeOverride,
+						enabledTools
+					}),
 					disabled_tools: disabledTools.size > 0 ? [...disabledTools].toSorted() : void 0
 				},
 				filePath
@@ -31347,7 +31783,7 @@ var VibePermissions = class VibePermissions extends ToolPermissions {
 	toRulesyncPermissions() {
 		const permission = {};
 		const vibeOverridePermission = {};
-		for (const tool of toStringArray(this.toml.enabled_tools)) ensurePermission(permission, toCanonicalToolName$1(tool))["*"] = "allow";
+		const enabledToolsList = toStringArray(this.toml.enabled_tools);
 		for (const tool of toStringArray(this.toml.disabled_tools)) ensurePermission(permission, toCanonicalToolName$1(tool))["*"] = "deny";
 		for (const [vibeToolName, toolConfig] of Object.entries(toVibeToolsRecord(this.toml.tools))) {
 			const category = toCanonicalToolName$1(vibeToolName);
@@ -31360,9 +31796,12 @@ var VibePermissions = class VibePermissions extends ToolPermissions {
 			if (sensitivePatterns.length > 0) vibeOverridePermission[category] = { sensitive_patterns: sensitivePatterns };
 		}
 		for (const [category, rules] of Object.entries(permission)) if (Object.keys(rules).length === 0) delete permission[category];
-		const json = Object.keys(vibeOverridePermission).length > 0 ? {
+		const vibeOverride = {};
+		if (Object.keys(vibeOverridePermission).length > 0) vibeOverride.permission = vibeOverridePermission;
+		if (enabledToolsList.length > 0) vibeOverride.enabled_tools = enabledToolsList;
+		const json = Object.keys(vibeOverride).length > 0 ? {
 			permission,
-			vibe: { permission: vibeOverridePermission }
+			vibe: vibeOverride
 		} : { permission };
 		return this.toRulesyncPermissionsDefault({ fileContent: JSON.stringify(json, null, 2) });
 	}
@@ -31397,8 +31836,12 @@ var VibePermissions = class VibePermissions extends ToolPermissions {
 * list for any category the override names: a present list is set, an empty
 * one clears it. Categories not named keep whatever the existing file had.
 */
-function applyVibeSensitivePatterns(tools, vibeOverride) {
+function applyVibeSensitivePatterns(tools, vibeOverride, logger) {
 	for (const [category, toolOverride] of Object.entries(vibeOverride?.permission ?? {})) {
+		if (!hasVibeToolName(category)) {
+			logger?.warn(`Vibe has no builtin tool for the '${category}' category; skipping its vibe.permission.${category}.sensitive_patterns override.`);
+			continue;
+		}
 		const vibeToolName = toVibeToolName(category);
 		const nextTool = toVibeToolConfig(tools[vibeToolName]);
 		const patterns = toStringArray(toolOverride.sensitive_patterns);
@@ -31407,6 +31850,57 @@ function applyVibeSensitivePatterns(tools, vibeOverride) {
 		tools[vibeToolName] = nextTool;
 	}
 }
+/**
+* Translate one canonical category's rules into the tool's `[tools.<name>]`
+* table and the top-level `disabled_tools` filter, mutating `tools` and the
+* filter sets in place.
+*/
+function applyCategoryRules({ category, rules, tools, enabledTools, disabledTools, logger }) {
+	const vibeToolName = toVibeToolName(category);
+	const existingTool = toVibeToolConfig(tools[vibeToolName]);
+	const nextTool = { ...existingTool };
+	const allow = new Set(toStringArray(existingTool.allow ?? existingTool.allowlist));
+	const deny = new Set(toStringArray(existingTool.deny ?? existingTool.denylist));
+	for (const [pattern, action] of Object.entries(rules)) {
+		if (pattern === "*") {
+			applyWildcardPermission({
+				action,
+				toolConfig: nextTool
+			});
+			if (action === "deny") {
+				disabledTools.add(vibeToolName);
+				enabledTools.delete(vibeToolName);
+			} else if (action === "allow") disabledTools.delete(vibeToolName);
+			continue;
+		}
+		if (action === "ask") {
+			logger?.warn(`Vibe permissions do not support pattern-level "ask" rules. Skipping ${category}: ${pattern}`);
+			continue;
+		}
+		if (action === "allow") allow.add(pattern);
+		else deny.add(pattern);
+	}
+	delete nextTool.allow;
+	delete nextTool.deny;
+	if (allow.size > 0) nextTool.allowlist = [...allow].toSorted();
+	if (deny.size > 0) nextTool.denylist = [...deny].toSorted();
+	tools[vibeToolName] = nextTool;
+}
+/**
+* `enabled_tools` is an exclusive allowlist and therefore only ever
+* rulesync-authored explicitly, through `vibe.enabled_tools`. When the
+* override declares it (even empty), rulesync owns the whole list; when it
+* does not, the on-disk list survives minus the entries the caller's cleanup
+* loop removed for rulesync-configured tools (which also migrates away the
+* exclusive entries earlier rulesync versions wrote for allow rules).
+*/
+function resolveEnabledToolsPatch({ vibeOverride, enabledTools }) {
+	if (vibeOverride?.enabled_tools !== void 0) {
+		const declared = [...new Set(toStringArray(vibeOverride.enabled_tools))];
+		return declared.length > 0 ? declared.toSorted() : void 0;
+	}
+	return enabledTools.size > 0 ? [...enabledTools].toSorted() : void 0;
+}
 function parseVibeConfig(fileContent) {
 	const parsed = smolToml.parse(fileContent || smolToml.stringify({}));
 	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
@@ -31415,6 +31909,17 @@ function parseVibeConfig(fileContent) {
 function toVibeToolName(category) {
 	return CANONICAL_TO_VIBE_TOOL_NAMES[category] ?? category;
 }
+/**
+* Whether a canonical category has a Vibe builtin tool to land on. Categories
+* without one (e.g. `glob`, `notebookedit`) must not emit a
+* `[tools.<category>]` table: Vibe has no such tool, so a `deny` authored
+* there would look applied while being silently inert — the dangerous
+* direction. Unlike `agent` → `task` there is no correct name to rename to,
+* so the category is skipped with a warning (the grokcli adapter's pattern).
+*/
+function hasVibeToolName(category) {
+	return Object.hasOwn(CANONICAL_TO_VIBE_TOOL_NAMES, category);
+}
 function toCanonicalToolName$1(vibeToolName) {
 	return VIBE_TO_CANONICAL_TOOL_NAMES[vibeToolName] ?? vibeToolName;
 }
@@ -31432,7 +31937,7 @@ function toStringArray(value) {
 function applyWildcardPermission({ action, toolConfig }) {
 	if (action === "allow") toolConfig.permission = "always";
 	else if (action === "ask") toolConfig.permission = "ask";
-	else if (toolConfig.permission !== void 0) delete toolConfig.permission;
+	else toolConfig.permission = "never";
 }
 function fromVibePermission(value) {
 	if (value === "always" || value === "allow") return "allow";
@@ -31451,11 +31956,29 @@ function ensurePermission(permission, category) {
 const WARP_GLOBAL_ONLY_MESSAGE = "Warp permissions are global-only; use --global to sync Warp's settings.toml";
 const ALLOWLIST_KEY = "agent_mode_command_execution_allowlist";
 const DENYLIST_KEY = "agent_mode_command_execution_denylist";
+const EXECUTION_PROFILES_KEY = "execution_profiles";
+const DEFAULT_PROFILE_KEY = "default";
+const PROFILE_ALLOWLIST_KEY = "command_allowlist";
+const PROFILE_DENYLIST_KEY = "command_denylist";
 const WARP_OVERRIDE_KEYS = [
 	"agent_mode_coding_permissions",
 	"agent_mode_coding_file_read_allowlist",
 	"agent_mode_execute_readonly_commands"
 ];
+const WARP_EXECUTION_PROFILE_OVERRIDE_KEY = "execution_profile";
+const WARP_EXECUTION_PROFILE_KEYS = [
+	"read_files",
+	"apply_code_diffs",
+	"execute_commands",
+	"mcp_permissions",
+	"write_to_pty",
+	"ask_user_question",
+	"run_agents",
+	"computer_use",
+	"directory_allowlist",
+	"mcp_allowlist",
+	"mcp_denylist"
+];
 /**
 * Warp's `settings.toml` lives in a different directory per platform (Stable
 * channel). The home directory is resolved by the processor through
@@ -31478,11 +32001,21 @@ function warpSettingsDir() {
 /**
 * Permissions adapter for Warp.
 *
-* Warp gates **shell command** execution through two regex arrays under the
-* `[agents.profiles]` table of the global user `settings.toml`:
-* - `agent_mode_command_execution_allowlist` — commands that auto-execute.
-* - `agent_mode_command_execution_denylist` — commands that always require
-*   permission (the denylist wins over the allowlist).
+* Warp gates **shell command** execution through two regex arrays in the
+* global user `settings.toml`. Since file-backed execution profiles went
+* Stable (2026-07-28) the authoritative surface is the `default` record of the
+* `[agents.execution_profiles.<id>]` collection:
+* - `command_allowlist` — commands that auto-execute.
+* - `command_denylist` — commands that always require permission (the denylist
+*   wins over the allowlist).
+*
+* The legacy `[agents.profiles]` keys
+* (`agent_mode_command_execution_allowlist` / `denylist`) are consumed only
+* once by Warp's one-shot migration and are ignored afterwards. Both surfaces
+* are written: the legacy block keeps un-migrated installs and old clients
+* working, and the `default` execution profile (merged in place, only when the
+* collection already exists) keeps migrated installs enforcing the lists.
+* Import prefers the execution profile and falls back to the legacy keys.
 *
 * This surface is **global only** — there is no project-scoped Warp permissions
 * file. rulesync's canonical `permission.bash` patterns map directly (`allow` →
@@ -31500,7 +32033,14 @@ function warpSettingsDir() {
 * through the `warp` override namespace (see `WarpPermissionsOverrideSchema`):
 * on **import** they are lifted from `settings.toml` into the override, and on
 * **export** they are merged back into `[agents.profiles]` (the override wins).
-* MCP allow/deny is a separate surface not modeled here.
+*
+* On migrated installs those legacy keys are inert; their execution-profile
+* counterparts (`read_files` / `apply_code_diffs` / `execute_commands`
+* action permissions, `directory_allowlist`, `mcp_allowlist` /
+* `mcp_denylist`) are authored through the nested `warp.execution_profile`
+* override, merged into the `default` record of
+* `[agents.execution_profiles.<id>]` under the same collection-exists guard as
+* the command lists, and lifted back from the `default` profile on import.
 *
 * The `settings.toml` file holds all of Warp's settings, so the
 * `[agents.profiles]` block is merged in place and the file is never deleted.
@@ -31553,7 +32093,11 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		const agents = isRecord(settings.agents) ? { ...settings.agents } : {};
 		const profiles = isRecord(agents.profiles) ? { ...agents.profiles } : {};
 		const override = config.warp;
-		if (isRecord(override)) Object.assign(profiles, override);
+		const executionProfileOverride = isRecord(override) && isRecord(override[WARP_EXECUTION_PROFILE_OVERRIDE_KEY]) ? override[WARP_EXECUTION_PROFILE_OVERRIDE_KEY] : void 0;
+		if (isRecord(override)) {
+			const { [WARP_EXECUTION_PROFILE_OVERRIDE_KEY]: _executionProfile, ...legacyOverride } = override;
+			Object.assign(profiles, legacyOverride);
+		}
 		const mergedAllow = uniq(allow.toSorted());
 		const mergedDeny = uniq(deny.toSorted());
 		if (mergedAllow.length > 0) profiles[ALLOWLIST_KEY] = mergedAllow;
@@ -31561,6 +32105,13 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		if (mergedDeny.length > 0) profiles[DENYLIST_KEY] = mergedDeny;
 		else delete profiles[DENYLIST_KEY];
 		agents.profiles = profiles;
+		mergeIntoDefaultExecutionProfile({
+			agents,
+			mergedAllow,
+			mergedDeny,
+			executionProfileOverride,
+			logger
+		});
 		settings.agents = agents;
 		return new WarpPermissions({
 			outputRoot,
@@ -31580,12 +32131,19 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 		}
 		const agents = isRecord(settings.agents) ? settings.agents : {};
 		const profiles = isRecord(agents.profiles) ? agents.profiles : {};
+		const executionProfiles = isRecord(agents[EXECUTION_PROFILES_KEY]) ? agents[EXECUTION_PROFILES_KEY] : void 0;
+		const defaultProfile = executionProfiles && isRecord(executionProfiles[DEFAULT_PROFILE_KEY]) ? executionProfiles[DEFAULT_PROFILE_KEY] : void 0;
 		const config = convertWarpToRulesyncPermissions({
-			allow: isStringArray$1(profiles[ALLOWLIST_KEY]) ? profiles[ALLOWLIST_KEY] : [],
-			deny: isStringArray$1(profiles[DENYLIST_KEY]) ? profiles[DENYLIST_KEY] : []
+			allow: defaultProfile ? isStringArray$1(defaultProfile[PROFILE_ALLOWLIST_KEY]) ? defaultProfile[PROFILE_ALLOWLIST_KEY] : [] : isStringArray$1(profiles[ALLOWLIST_KEY]) ? profiles[ALLOWLIST_KEY] : [],
+			deny: defaultProfile ? isStringArray$1(defaultProfile[PROFILE_DENYLIST_KEY]) ? defaultProfile[PROFILE_DENYLIST_KEY] : [] : isStringArray$1(profiles[DENYLIST_KEY]) ? profiles[DENYLIST_KEY] : []
 		});
 		const warpOverride = {};
 		for (const key of WARP_OVERRIDE_KEYS) if (profiles[key] !== void 0) warpOverride[key] = profiles[key];
+		if (defaultProfile) {
+			const executionProfileOverride = {};
+			for (const key of WARP_EXECUTION_PROFILE_KEYS) if (defaultProfile[key] !== void 0) executionProfileOverride[key] = defaultProfile[key];
+			if (Object.keys(executionProfileOverride).length > 0) warpOverride[WARP_EXECUTION_PROFILE_OVERRIDE_KEY] = executionProfileOverride;
+		}
 		const result = { ...config };
 		if (Object.keys(warpOverride).length > 0) result.warp = warpOverride;
 		return this.toRulesyncPermissionsDefault({ fileContent: JSON.stringify(result, null, 2) });
@@ -31608,6 +32166,36 @@ var WarpPermissions = class WarpPermissions extends ToolPermissions {
 	}
 };
 /**
+* On migrated installs the legacy `[agents.profiles]` keys are inert: runtime
+* enforcement reads the active `[agents.execution_profiles.<id>]` record.
+* Merge the command lists (and the `warp.execution_profile` override's
+* autonomy keys) into the `default` profile in place so every other profile
+* key and profile ID survives. When the collection does not exist yet the
+* install is un-migrated — the legacy keys are still live there, and creating
+* the collection ourselves would mark Warp's one-shot migration complete early
+* and strand the user's other legacy settings (file-read allowlist, preferred
+* model), so it is deliberately left unset and the override is skipped with a
+* warning instead.
+*/
+function mergeIntoDefaultExecutionProfile({ agents, mergedAllow, mergedDeny, executionProfileOverride, logger }) {
+	const hasOverrideKeys = executionProfileOverride !== void 0 && Object.keys(executionProfileOverride).length > 0;
+	if (!isRecord(agents[EXECUTION_PROFILES_KEY])) {
+		if (hasOverrideKeys && logger) logger.warn("The warp.execution_profile permissions override was skipped: settings.toml has no [agents.execution_profiles] collection yet (un-migrated install). Open Warp once to run its settings migration, then re-run rulesync generate.");
+		return;
+	}
+	const executionProfiles = { ...agents[EXECUTION_PROFILES_KEY] };
+	const defaultProfile = isRecord(executionProfiles[DEFAULT_PROFILE_KEY]) ? { ...executionProfiles[DEFAULT_PROFILE_KEY] } : {};
+	if (executionProfileOverride) Object.assign(defaultProfile, executionProfileOverride);
+	if (mergedAllow.length > 0) defaultProfile[PROFILE_ALLOWLIST_KEY] = mergedAllow;
+	else delete defaultProfile[PROFILE_ALLOWLIST_KEY];
+	if (mergedDeny.length > 0) defaultProfile[PROFILE_DENYLIST_KEY] = mergedDeny;
+	else delete defaultProfile[PROFILE_DENYLIST_KEY];
+	executionProfiles[DEFAULT_PROFILE_KEY] = defaultProfile;
+	agents[EXECUTION_PROFILES_KEY] = executionProfiles;
+	const otherProfileIds = Object.keys(executionProfiles).filter((id) => id !== DEFAULT_PROFILE_KEY);
+	if ((mergedDeny.length > 0 || hasOverrideKeys) && otherProfileIds.length > 0 && logger) logger.warn(`Warp command deny rules and execution_profile override keys were written to the 'default' execution profile only; they are not enforced while another profile (${otherProfileIds.join(", ")}) is active.`);
+}
+/**
 * Convert rulesync permissions config to Warp command allow/deny regex lists.
 * Only the `bash` category maps; `ask` rules and non-`bash` categories are
 * dropped (the latter with a warning when they carry `deny` rules).
@@ -31624,10 +32212,7 @@ function convertRulesyncToWarpPermissions({ config, logger }) {
 			case "allow":
 				allow.push(pattern);
 				break;
-			case "deny":
-				deny.push(pattern);
-				break;
-			case "ask": break;
+			case "deny": deny.push(pattern);
 		}
 	}
 	return {
@@ -32082,7 +32667,7 @@ const toolPermissionsFactories = /* @__PURE__ */ new Map([
 	["rovodev", {
 		class: RovodevPermissions,
 		meta: {
-			supportsProject: false,
+			supportsProject: true,
 			supportsGlobal: true,
 			supportsImport: true
 		}
@@ -33279,6 +33864,38 @@ var AugmentcodeSkill = class AugmentcodeSkill extends ToolSkill {
 	}
 };
 //#endregion
+//#region src/features/rules/nested-scan-exclusions.ts
+/**
+* Shared exclusion lists for the nested rule-file scans (`AGENTS.md`,
+* `REASONIX.md`), which walk the whole project tree on import rather than a
+* rulesync-owned directory.
+*/
+/**
+* Dependency trees never scanned for nested rule files, at any depth. A rule
+* file there describes somebody else's project, and neither name is ever a
+* package name. Hidden directories are excluded separately, because a rule
+* file inside one is another tool's generated output (rulesync writes several
+* itself).
+*/
+const NESTED_SCAN_EXCLUDED_DIRS_ANY_DEPTH = ["node_modules", "__pycache__"];
+/**
+* Build, vendoring and scratch directories, excluded at the **project root
+* only**. A top-level `build/` is a build directory; `packages/build/` is a
+* package, and dropping it silently would lose a real subproject.
+*/
+const NESTED_SCAN_EXCLUDED_ROOT_DIRS = [
+	"vendor",
+	"third_party",
+	"dist",
+	"build",
+	"out",
+	"target",
+	"coverage",
+	"tmp",
+	"temp",
+	"venv"
+];
+//#endregion
 //#region src/features/skills/claudecode-skill.ts
 const ClaudecodeSkillFrontmatterSchema = z.looseObject({
 	name: z.string(),
@@ -33364,6 +33981,41 @@ var ClaudecodeSkill = class extends ToolSkill {
 			alternativeSkillRoots: [CLAUDECODE_SCHEDULED_TASKS_DIR_PATH]
 		};
 	}
+	/**
+	* Claude Code v2.1.178+ also loads skills from **nested** `.claude/skills/`
+	* directories below the working directory (a skill in
+	* `apps/web/.claude/skills/` becomes available when working on files
+	* there). Discover those directories so `rulesync import` sees them —
+	* import-only and lenient, like every configured root; the project-root
+	* `.claude/skills/` stays the sole generation target. The scan reuses the
+	* nested-rule-file exclusions (dependency trees at any depth, build/vendor
+	* dirs at the root, hidden dirs other than the `.claude` being matched) and
+	* never runs in global mode. On a name clash with a root skill, the root
+	* one wins the import (Claude Code itself keeps both under a
+	* directory-qualified name, which rulesync's flat skill namespace cannot
+	* express).
+	*
+	* @see https://code.claude.com/docs/en/skills
+	*/
+	static async getConfiguredImportRoots({ outputRoot, global = false }) {
+		if (global) return [];
+		const root = toPosixPath(outputRoot);
+		return filterOutPathsInGitIgnoredDirectories({
+			rootDir: outputRoot,
+			filePaths: await findFilesByGlobs([`${root}/*/**/${toPosixPath(CLAUDECODE_SKILLS_DIR_PATH)}`], {
+				type: "dir",
+				followSymbolicLinks: false,
+				ignore: [
+					`${root}/**/.*/**/${toPosixPath(CLAUDECODE_SKILLS_DIR_PATH)}`,
+					...NESTED_SCAN_EXCLUDED_DIRS_ANY_DEPTH.map((dir) => `${root}/**/${dir}/**`),
+					...NESTED_SCAN_EXCLUDED_ROOT_DIRS.map((dir) => `${root}/${dir}/**`)
+				]
+			})
+		}).toSorted().map((dirPath) => ({
+			outputRoot,
+			relativeDirPath: relative(outputRoot, dirPath)
+		}));
+	}
 	getFrontmatter() {
 		return ClaudecodeSkillFrontmatterSchema.parse(this.requireMainFileFrontmatter());
 	}
@@ -36762,7 +37414,8 @@ var TaktSkill = class TaktSkill extends ToolSkill {
 	getDirPath() {
 		const fullPath = join(this.outputRoot, this.relativeDirPath);
 		const resolvedFull = resolve(fullPath);
-		const rel = relative(resolve(this.outputRoot), resolvedFull);
+		const resolvedBase = resolve(this.outputRoot);
+		const rel = relative(resolvedBase, resolvedFull);
 		if (rel.startsWith("..") || path.isAbsolute(rel)) throw new Error(`Path traversal detected: Final path escapes outputRoot. outputRoot="${this.outputRoot}", relativeDirPath="${this.relativeDirPath}"`);
 		return fullPath;
 	}
@@ -37312,6 +37965,23 @@ var ZedSkill = class ZedSkill extends ToolSkill {
 	}
 };
 //#endregion
+//#region src/features/skills/zoocode-skill.ts
+/**
+* Skill generator for **Zoo Code** (the community continuation of Roo Code).
+* Zoo Code keeps Roo's skills layout (`.roo/skills/` project,
+* `~/.roo/skills/` global) and the `roo:` frontmatter section (`modeSlugs`),
+* so this target reuses {@link RooSkill} verbatim and only narrows the
+* targeting.
+*
+* @see https://docs.zoocode.dev/features/skills
+*/
+var ZoocodeSkill = class extends RooSkill {
+	static isTargetedByRulesyncSkill(rulesyncSkill) {
+		const targets = rulesyncSkill.getFrontmatter().targets;
+		return targets.includes("*") || targets.includes("zoocode");
+	}
+};
+//#endregion
 //#region src/features/skills/skills-processor.ts
 const SkillsProcessorToolTargetSchema = z.enum(skillsProcessorToolTargetTuple);
 /**
@@ -37332,7 +38002,8 @@ const toolSkillFactories = /* @__PURE__ */ new Map([
 		meta: {
 			supportsProject: true,
 			supportsSimulated: false,
-			supportsGlobal: true
+			supportsGlobal: true,
+			lenientImport: true
 		}
 	}],
 	["aiassistant", {
@@ -37583,6 +38254,14 @@ const toolSkillFactories = /* @__PURE__ */ new Map([
 			supportsGlobal: true
 		}
 	}],
+	["zoocode", {
+		class: ZoocodeSkill,
+		meta: {
+			supportsProject: true,
+			supportsSimulated: false,
+			supportsGlobal: true
+		}
+	}],
 	["rovodev", {
 		class: RovodevSkill,
 		meta: {
@@ -37745,7 +38424,7 @@ var SkillsProcessor = class extends DirFeatureProcessor {
 		for (const root of roots) {
 			const rootOutputRoot = typeof root === "string" ? this.outputRoot : root.outputRoot;
 			const relativeDirPath = typeof root === "string" ? root : root.relativeDirPath;
-			const isConfiguredRoot = configuredRootPaths.has(relativeDirPath);
+			const isLenientRoot = configuredRootPaths.has(relativeDirPath) || factory.meta.lenientImport === true || isAgentSkillsInteropRoot(relativeDirPath);
 			const skillsDirPath = join(rootOutputRoot, relativeDirPath);
 			if (!await directoryExists(skillsDirPath)) continue;
 			const dirPaths = await findFilesByGlobs(join(skillsDirPath, "*"), { type: "dir" });
@@ -37769,7 +38448,7 @@ var SkillsProcessor = class extends DirFeatureProcessor {
 						global: this.global
 					});
 				} catch (error) {
-					if (!isConfiguredRoot) throw error;
+					if (!isLenientRoot) throw error;
 					this.logger.warn(`Skipping ${join(relativeDirPath, dirName)}: ${formatError(error)}`);
 					return null;
 				}
@@ -37784,12 +38463,20 @@ var SkillsProcessor = class extends DirFeatureProcessor {
 			const fromFlatFile = factory.class.fromFlatFile;
 			const directoryStems = new Set(ownedDirNames);
 			const flatFilePaths = (await findFilesByGlobs(join(skillsDirPath, "*.md"), { type: "file" })).filter((filePath) => !directoryStems.has(basename(filePath, ".md")));
-			const flatSkills = await Promise.all(flatFilePaths.map((filePath) => fromFlatFile({
-				outputRoot: rootOutputRoot,
-				relativeDirPath,
-				relativeFilePath: basename(filePath),
-				global: this.global
-			})));
+			const flatSkills = (await Promise.all(flatFilePaths.map(async (filePath) => {
+				try {
+					return await fromFlatFile({
+						outputRoot: rootOutputRoot,
+						relativeDirPath,
+						relativeFilePath: basename(filePath),
+						global: this.global
+					});
+				} catch (error) {
+					if (!isLenientRoot) throw error;
+					this.logger.warn(`Skipping ${join(relativeDirPath, basename(filePath))}: ${formatError(error)}`);
+					return null;
+				}
+			}))).filter((skill) => skill !== null);
 			for (const skill of flatSkills) {
 				const skillName = skill.getImportIdentity();
 				if (seenSkillNames.has(skillName)) continue;
@@ -37862,14 +38549,15 @@ var SkillsProcessor = class extends DirFeatureProcessor {
 	*/
 	static getSimulatedConventionSection({ skillList }) {
 		if (!skillList || skillList.length === 0) return "";
+		const skillListWithAtPrefix = skillList.map((skill) => ({
+			...skill,
+			path: `@${skill.path}`
+		}));
 		return `## Simulated Skills
 
 Simulated skills are specialized capabilities that can be invoked to handle specific types of tasks. When you determine that a skill would be helpful for the current task, read the corresponding SKILL.md file and execute its instructions.
 
-${encode({ skillList: skillList.map((skill) => ({
-			...skill,
-			path: `@${skill.path}`
-		})) })}`;
+${encode({ skillList: skillListWithAtPrefix })}`;
 	}
 	/**
 	* Return the tool targets that this processor supports in global mode
@@ -40473,7 +41161,8 @@ var HermesagentSubagent = class HermesagentSubagent extends ToolSubagent {
 		return getHermesagentSharedConfigWritePaths();
 	}
 	static getSettablePathsForRulesyncSubagent(rulesyncSubagent) {
-		return [join(HERMESAGENT_RULESYNC_SUBAGENTS_DIR_PATH, `${subagentSlug(rulesyncSubagent.getRelativePathFromCwd())}.json`)];
+		const slug = subagentSlug(rulesyncSubagent.getRelativePathFromCwd());
+		return [join(HERMESAGENT_RULESYNC_SUBAGENTS_DIR_PATH, `${slug}.json`)];
 	}
 	toRulesyncSubagent() {
 		const slug = basename(this.getRelativeFilePath(), ".json");
@@ -41708,7 +42397,7 @@ function stringifyRooModes(modes) {
 *
 * @see https://roocodeinc.github.io/Roo-Code/features/custom-modes
 */
-var RooSubagent = class RooSubagent extends ToolSubagent {
+var RooSubagent = class extends ToolSubagent {
 	modes;
 	constructor({ modes, ...rest }) {
 		if (rest.validate !== false) {
@@ -41764,7 +42453,7 @@ var RooSubagent = class RooSubagent extends ToolSubagent {
 			const mode = this.toRooMode(rulesyncSubagent);
 			bySlug.set(mode.slug, mode);
 		}
-		return new RooSubagent({
+		return new this({
 			outputRoot,
 			relativeDirPath: this.getSettablePaths().relativeDirPath,
 			relativeFilePath: ROO_MODES_FILE_NAME,
@@ -41843,7 +42532,7 @@ var RooSubagent = class RooSubagent extends ToolSubagent {
 		}
 		const result = RooModesFileSchema.safeParse(parsed ?? { customModes: [] });
 		if (!result.success) throw new Error(`Invalid .roomodes in ${filePath}: ${formatError(result.error)}`);
-		return new RooSubagent({
+		return new this({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
 			relativeFilePath: basename(relativeFilePath),
@@ -41852,7 +42541,7 @@ var RooSubagent = class RooSubagent extends ToolSubagent {
 		});
 	}
 	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath }) {
-		return new RooSubagent({
+		return new this({
 			outputRoot,
 			relativeDirPath,
 			relativeFilePath,
@@ -42098,6 +42787,60 @@ var VibeSubagent = class VibeSubagent extends ToolSubagent {
 	}
 };
 //#endregion
+//#region src/features/subagents/zoocode-subagent.ts
+/**
+* Subagent (custom-mode) generator for **Zoo Code**, the community
+* continuation of Roo Code. Zoo Code keeps the aggregated `.roomodes` file and
+* Roo's mode schema, and the shared mode fields keep riding the `roo:`
+* frontmatter section — one rulesync source must not produce two different
+* spellings of the same field.
+*
+* The post-fork divergence is carried by the `zoocode:` section:
+* `allowedMcpServers` (Zoo Code v3.60.0+) — a per-mode MCP server allowlist.
+* "When omitted, all servers are available. When set, only the listed servers
+* are injected." On import the key is lifted back into `zoocode:` so it
+* round-trips (and never leaks into the `roo:` section, where the archived
+* Roo Code would not understand it).
+*
+* @see https://github.com/Zoo-Code-Org/Zoo-Code
+* @see https://docs.zoocode.dev/features/custom-modes
+*/
+var ZoocodeSubagent = class extends RooSubagent {
+	static isTargetedByRulesyncSubagent(rulesyncSubagent) {
+		return this.isTargetedByRulesyncSubagentDefault({
+			rulesyncSubagent,
+			toolTarget: "zoocode"
+		});
+	}
+	static toRooMode(rulesyncSubagent) {
+		const mode = super.toRooMode(rulesyncSubagent);
+		const frontmatter = rulesyncSubagent.getFrontmatter();
+		const zoocodeSection = isRecord(frontmatter.zoocode) ? frontmatter.zoocode : {};
+		if (isStringArray$1(zoocodeSection.allowedMcpServers)) mode.allowedMcpServers = zoocodeSection.allowedMcpServers;
+		return mode;
+	}
+	toRulesyncSubagents() {
+		return super.toRulesyncSubagents().map((subagent) => {
+			const frontmatter = subagent.getFrontmatter();
+			const { allowedMcpServers, ...restRooSection } = isRecord(frontmatter.roo) ? { ...frontmatter.roo } : {};
+			const rebuilt = {
+				...frontmatter,
+				targets: ["zoocode"],
+				roo: restRooSection
+			};
+			if (isStringArray$1(allowedMcpServers)) rebuilt.zoocode = { allowedMcpServers };
+			return new RulesyncSubagent({
+				outputRoot: ".",
+				frontmatter: rebuilt,
+				body: subagent.getBody(),
+				relativeDirPath: subagent.getRelativeDirPath(),
+				relativeFilePath: subagent.getRelativeFilePath(),
+				validate: true
+			});
+		});
+	}
+};
+//#endregion
 //#region src/features/subagents/subagents-processor.ts
 const SubagentsProcessorToolTargetSchema = z.enum(subagentsProcessorToolTargetTuple);
 /**
@@ -42337,6 +43080,14 @@ const toolSubagentFactories = /* @__PURE__ */ new Map([
 			filePattern: ".roomodes"
 		}
 	}],
+	["zoocode", {
+		class: ZoocodeSubagent,
+		meta: {
+			supportsSimulated: false,
+			supportsGlobal: false,
+			filePattern: ".roomodes"
+		}
+	}],
 	["rovodev", {
 		class: RovodevSubagent,
 		meta: {
@@ -42597,11 +43348,13 @@ For example, if the user instructs \`Call planner subagent to plan the refactori
 //#region src/features/rules/tool-rule.ts
 var ToolRule = class extends ToolFile {
 	root;
+	localRoot;
 	description;
 	globs;
-	constructor({ root = false, description, globs, ...rest }) {
+	constructor({ root = false, localRoot = false, description, globs, ...rest }) {
 		super(rest);
 		this.root = root;
+		this.localRoot = localRoot;
 		this.description = description;
 		this.globs = globs;
 	}
@@ -42684,6 +43437,38 @@ var ToolRule = class extends ToolFile {
 	isRoot() {
 		return this.root;
 	}
+	isLocalRoot() {
+		return this.localRoot;
+	}
+	/**
+	* Convert a tool's separate personal local-root file (see
+	* {@link ToolRuleParams.localRoot}) back to a canonical `localRoot: true`
+	* rulesync rule. The rulesync file keeps the tool-side basename
+	* (`CLAUDE.local.md`, `AGENTS.local.md`, ...), which the derived `.gitignore`
+	* already covers via `.rulesync/rules/*.local.md`, so personal content stays
+	* untracked after import.
+	*
+	* `targets` is scoped to the importing tool rather than `"*"`. A wildcard
+	* would spread the personal content to every tool on the next generate —
+	* including being appended into the committed root file of tools without a
+	* separate local file — and a multi-target import would produce several
+	* wildcard localRoot rules, which the per-target validation rejects.
+	*/
+	toLocalRootRulesyncRule({ targets }) {
+		return new RulesyncRule({
+			outputRoot: this.getOutputRoot(),
+			relativeDirPath: RULESYNC_RULES_RELATIVE_DIR_PATH,
+			relativeFilePath: this.getRelativeFilePath(),
+			frontmatter: {
+				root: false,
+				localRoot: true,
+				targets,
+				globs: []
+			},
+			body: this.getFileContent(),
+			validate: true
+		});
+	}
 	/**
 	* Whether this rule must be left out of the root rule's reference/MCP
 	* instruction listings even though it is a non-root survivor. Used by files
@@ -42716,31 +43501,6 @@ function buildToolPath(toolDir, subDir, excludeToolDir) {
 }
 //#endregion
 //#region src/features/rules/agentsmd-rule.ts
-/**
-* Dependency trees never scanned for nested `AGENTS.md` files, at any depth. An
-* `AGENTS.md` there describes somebody else's project, and neither name is ever
-* a package name. Hidden directories are excluded separately, because an
-* `AGENTS.md` inside one is another tool's generated output (rulesync writes
-* several itself).
-*/
-const NESTED_SCAN_EXCLUDED_DIRS_ANY_DEPTH = ["node_modules", "__pycache__"];
-/**
-* Build, vendoring and scratch directories, excluded at the **project root
-* only**. A top-level `build/` is a build directory; `packages/build/` is a
-* package, and dropping it silently would lose a real subproject.
-*/
-const NESTED_SCAN_EXCLUDED_ROOT_DIRS = [
-	"vendor",
-	"third_party",
-	"dist",
-	"build",
-	"out",
-	"target",
-	"coverage",
-	"tmp",
-	"temp",
-	"venv"
-];
 var AgentsMdRule = class AgentsMdRule extends ToolRule {
 	constructor({ fileContent, root, ...rest }) {
 		super({
@@ -42797,7 +43557,8 @@ var AgentsMdRule = class AgentsMdRule extends ToolRule {
 		const normalizedDirPath = relativeDirPath === void 0 ? "." : toPosixPath(relativeDirPath);
 		const isNested = relativeFilePath === "AGENTS.md" && normalizedDirPath !== "." && normalizedDirPath !== "" && !normalizedDirPath.startsWith(".");
 		const isRoot = !isNested && relativeFilePath === "AGENTS.md" && (normalizedDirPath === "." || normalizedDirPath === "");
-		const fileContent = await readFileContent(join(outputRoot, isNested ? join(normalizedDirPath, relativeFilePath) : isRoot ? AGENTSMD_RULE_FILE_NAME : join(AGENTSMD_MEMORIES_DIR_PATH, relativeFilePath)));
+		const relativePath = isNested ? join(normalizedDirPath, relativeFilePath) : isRoot ? AGENTSMD_RULE_FILE_NAME : join(AGENTSMD_MEMORIES_DIR_PATH, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new AgentsMdRule({
 			outputRoot,
 			relativeDirPath: isNested ? join(normalizedDirPath) : isRoot ? this.getSettablePaths().root.relativeDirPath : this.getSettablePaths().nonRoot.relativeDirPath,
@@ -43104,7 +43865,8 @@ var AntigravityCliRule = class AntigravityCliRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const fileContent = await readFileContent(join(outputRoot, join(paths.nonRoot.relativeDirPath, relativeFilePath)));
+		const relativePath = join(paths.nonRoot.relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new AntigravityCliRule({
 			outputRoot,
 			relativeDirPath: paths.nonRoot.relativeDirPath,
@@ -43565,7 +44327,8 @@ var AugmentcodeLegacyRule = class AugmentcodeLegacyRule extends ToolRule {
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true }) {
 		const settablePaths = this.getSettablePaths();
 		const isRoot = relativeFilePath === settablePaths.root.relativeFilePath;
-		const fileContent = await readFileContent(join(outputRoot, isRoot ? settablePaths.root.relativeFilePath : join(settablePaths.nonRoot.relativeDirPath, relativeFilePath)));
+		const relativePath = isRoot ? settablePaths.root.relativeFilePath : join(settablePaths.nonRoot.relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new AugmentcodeLegacyRule({
 			outputRoot,
 			relativeDirPath: isRoot ? settablePaths.root.relativeDirPath : settablePaths.nonRoot.relativeDirPath,
@@ -43789,7 +44552,8 @@ var ClaudecodeLegacyRule = class ClaudecodeLegacyRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const fileContent = await readFileContent(join(outputRoot, join(paths.nonRoot.relativeDirPath, relativeFilePath)));
+		const relativePath = join(paths.nonRoot.relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new ClaudecodeLegacyRule({
 			outputRoot,
 			relativeDirPath: paths.nonRoot.relativeDirPath,
@@ -43910,7 +44674,8 @@ var ClaudecodeRule = class ClaudecodeRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const filePath = join(outputRoot, join(paths.nonRoot.relativeDirPath, relativeFilePath));
+		const relativePath = join(paths.nonRoot.relativeDirPath, relativeFilePath);
+		const filePath = join(outputRoot, relativePath);
 		const { frontmatter, body: content } = parseFrontmatter(await readFileContent(filePath), filePath);
 		const result = ClaudecodeRuleFrontmatterSchema.safeParse(frontmatter);
 		if (!result.success) throw new Error(`Invalid frontmatter in ${filePath}: ${formatError(result.error)}`);
@@ -44297,7 +45062,8 @@ var CodexcliRule = class CodexcliRule extends ToolRule {
 	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true, global = false }) {
 		const { root } = this.getSettablePaths({ global });
-		const fileContent = await readFileContent(join(outputRoot, join(root.relativeDirPath, root.relativeFilePath)));
+		const relativePath = join(root.relativeDirPath, root.relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new CodexcliRule({
 			outputRoot,
 			relativeDirPath: root.relativeDirPath,
@@ -44466,7 +45232,8 @@ var CopilotRule = class CopilotRule extends ToolRule {
 		}) : relativeFilePath === paths.root.relativeFilePath;
 		const resolvedRelativeDirPath = relativeDirPath ?? (isRoot ? paths.root.relativeDirPath : paths.nonRoot?.relativeDirPath ?? paths.root.relativeDirPath);
 		if (isRoot) {
-			const fileContent = await readFileContent(join(outputRoot, join(paths.root.relativeDirPath, paths.root.relativeFilePath)));
+			const relativePath = join(paths.root.relativeDirPath, paths.root.relativeFilePath);
+			const fileContent = await readFileContent(join(outputRoot, relativePath));
 			return new CopilotRule({
 				outputRoot,
 				relativeDirPath: paths.root.relativeDirPath,
@@ -44478,7 +45245,8 @@ var CopilotRule = class CopilotRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const filePath = join(outputRoot, join(resolvedRelativeDirPath, relativeFilePath));
+		const relativePath = join(resolvedRelativeDirPath, relativeFilePath);
+		const filePath = join(outputRoot, relativePath);
 		const { frontmatter, body: content } = parseFrontmatter(await readFileContent(filePath), filePath);
 		const result = CopilotRuleFrontmatterSchema.safeParse(frontmatter);
 		if (!result.success) throw new Error(`Invalid frontmatter in ${filePath}: ${formatError(result.error)}`);
@@ -44750,7 +45518,8 @@ var DeepagentsRule = class DeepagentsRule extends ToolRule {
 	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true, global = false }) {
 		const settablePaths = this.getSettablePaths({ global });
-		const fileContent = await readFileContent(join(outputRoot, join(settablePaths.root.relativeDirPath, settablePaths.root.relativeFilePath)));
+		const relativePath = join(settablePaths.root.relativeDirPath, settablePaths.root.relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new DeepagentsRule({
 			outputRoot,
 			relativeDirPath: settablePaths.root.relativeDirPath,
@@ -45177,7 +45946,8 @@ var FactorydroidRule = class FactorydroidRule extends ToolRule {
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
 		if (relativeFilePath === paths.root.relativeFilePath) {
-			const fileContent = await readFileContent(join(outputRoot, join(paths.root.relativeDirPath, paths.root.relativeFilePath)));
+			const relativePath = join(paths.root.relativeDirPath, paths.root.relativeFilePath);
+			const fileContent = await readFileContent(join(outputRoot, relativePath));
 			return new FactorydroidRule({
 				outputRoot,
 				relativeDirPath: paths.root.relativeDirPath,
@@ -45188,7 +45958,8 @@ var FactorydroidRule = class FactorydroidRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const fileContent = await readFileContent(join(outputRoot, join(paths.nonRoot.relativeDirPath, relativeFilePath)));
+		const relativePath = join(paths.nonRoot.relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new FactorydroidRule({
 			outputRoot,
 			relativeDirPath: paths.nonRoot.relativeDirPath,
@@ -45418,7 +46189,8 @@ var HermesagentRule = class HermesagentRule extends ToolRule {
 	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true }) {
 		const { root } = this.getSettablePaths();
-		const fileContent = await readFileContent(join(outputRoot, join(root.relativeDirPath, root.relativeFilePath)));
+		const relativePath = join(root.relativeDirPath, root.relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new HermesagentRule({
 			outputRoot,
 			relativeDirPath: root.relativeDirPath,
@@ -45529,7 +46301,8 @@ var JunieRule = class JunieRule extends ToolRule {
 			});
 		}
 		const relativeDirPath = this.getSettablePaths().root.relativeDirPath;
-		const fileContent = await readFileContent(join(outputRoot, join(relativeDirPath, relativeFilePath)));
+		const relativePath = join(relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new JunieRule({
 			outputRoot,
 			relativeDirPath,
@@ -45629,7 +46402,8 @@ var KiloRule = class KiloRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const fileContent = await readFileContent(join(outputRoot, join(paths.nonRoot.relativeDirPath, relativeFilePath)));
+		const relativePath = join(paths.nonRoot.relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new KiloRule({
 			outputRoot,
 			relativeDirPath: paths.nonRoot.relativeDirPath,
@@ -45966,10 +46740,13 @@ var KiroIdeRule = class extends KiroRule {
 //#region src/features/rules/opencode-rule.ts
 var OpenCodeRule = class OpenCodeRule extends ToolRule {
 	static getSettablePaths({ global, excludeToolDir } = {}) {
-		if (global) return { root: {
-			relativeDirPath: buildToolPath(OPENCODE_GLOBAL_DIR, ".", excludeToolDir),
-			relativeFilePath: OPENCODE_RULE_FILE_NAME
-		} };
+		if (global) return {
+			root: {
+				relativeDirPath: buildToolPath(OPENCODE_GLOBAL_DIR, ".", excludeToolDir),
+				relativeFilePath: OPENCODE_RULE_FILE_NAME
+			},
+			nonRoot: { relativeDirPath: buildToolPath(OPENCODE_GLOBAL_DIR, "memories", excludeToolDir) }
+		};
 		return {
 			root: {
 				relativeDirPath: ".",
@@ -45979,7 +46756,7 @@ var OpenCodeRule = class OpenCodeRule extends ToolRule {
 		};
 	}
 	static getExtraSharedWritePaths({ global = false } = {}) {
-		return global ? [] : [OpencodeMcp.getSettablePaths({ global: false })];
+		return [OpencodeMcp.getSettablePaths({ global })];
 	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
@@ -45996,7 +46773,8 @@ var OpenCodeRule = class OpenCodeRule extends ToolRule {
 			});
 		}
 		if (!paths.nonRoot) throw new Error(`nonRoot path is not set for ${relativeFilePath}`);
-		const fileContent = await readFileContent(join(outputRoot, join(paths.nonRoot.relativeDirPath, relativeFilePath)));
+		const relativePath = join(paths.nonRoot.relativeDirPath, relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new OpenCodeRule({
 			outputRoot,
 			relativeDirPath: paths.nonRoot.relativeDirPath,
@@ -46111,7 +46889,8 @@ var PiRule = class PiRule extends ToolRule {
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true, global = false }) {
 		const { root, appendSystemPrompt } = this.getSettablePaths({ global });
 		if (relativeFilePath === "APPEND_SYSTEM.md") {
-			const fileContent = await readFileContent(join(outputRoot, join(appendSystemPrompt.relativeDirPath, appendSystemPrompt.relativeFilePath)));
+			const relativePath = join(appendSystemPrompt.relativeDirPath, appendSystemPrompt.relativeFilePath);
+			const fileContent = await readFileContent(join(outputRoot, relativePath));
 			return new PiRule({
 				outputRoot,
 				relativeDirPath: appendSystemPrompt.relativeDirPath,
@@ -46122,7 +46901,8 @@ var PiRule = class PiRule extends ToolRule {
 				appendSystemPrompt: true
 			});
 		}
-		const fileContent = await readFileContent(join(outputRoot, join(root.relativeDirPath, root.relativeFilePath)));
+		const relativePath = join(root.relativeDirPath, root.relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new PiRule({
 			outputRoot,
 			relativeDirPath: root.relativeDirPath,
@@ -46418,6 +47198,13 @@ var QwencodeRule = class QwencodeRule extends ToolRule {
 			toolTarget: "qwencode"
 		});
 	}
+	/**
+	* The personal local context file lives under `.qwen/`, not at the project
+	* root where the settable root path points, so override the deletion glob.
+	*/
+	static getLocalRootFileGlob({ outputRoot, fileName }) {
+		return join(outputRoot, QWENCODE_DIR, fileName);
+	}
 };
 //#endregion
 //#region src/features/rules/reasonix-rule.ts
@@ -46435,9 +47222,51 @@ var ReasonixRule = class ReasonixRule extends ToolRule {
 			relativeFilePath: REASONIX_RULE_FILE_NAME
 		} };
 	}
-	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true, global = false }) {
+	/**
+	* Context Engine v2 (v1.18.0) walks from the workspace root to the target
+	* path loading per-directory instruction files, so nested `REASONIX.md`
+	* files are a real scoping surface: "Deeper directories beat broader
+	* directories." The scan mirrors the AGENTS.md standard's nested discovery
+	* (same exclusions, import-only, project scope).
+	* @see https://github.com/esengine/DeepSeek-Reasonix/blob/v1.18.0/docs/SESSION_MEMORY_RETRIEVAL.md
+	*/
+	static getNestedFilePatterns({ outputRoot }) {
+		const root = toPosixPath(outputRoot);
+		return {
+			include: [`${root}/**/${REASONIX_RULE_FILE_NAME}`],
+			ignore: [
+				`${root}/${REASONIX_RULE_FILE_NAME}`,
+				`${root}/**/.*/**`,
+				...NESTED_SCAN_EXCLUDED_DIRS_ANY_DEPTH.map((dir) => `${root}/**/${dir}/**`),
+				...NESTED_SCAN_EXCLUDED_ROOT_DIRS.map((dir) => `${root}/${dir}/**`)
+			]
+		};
+	}
+	/**
+	* The subproject directory this rule scopes, or `undefined` for the root
+	* file (project or global).
+	*/
+	getSubprojectPath() {
+		if (this.isRoot()) return;
+		const relativeDirPath = toPosixPath(this.getRelativeDirPath());
+		if (relativeDirPath === "." || relativeDirPath === "" || relativeDirPath.startsWith(".")) return;
+		return relativeDirPath;
+	}
+	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, relativeDirPath: overrideDirPath, validate = true, global = false }) {
 		const { root } = this.getSettablePaths({ global });
-		const fileContent = await readFileContent(join(outputRoot, join(root.relativeDirPath, root.relativeFilePath)));
+		if (overrideDirPath !== void 0 && overrideDirPath !== root.relativeDirPath && overrideDirPath !== ".") {
+			const fileContent = await readFileContent(join(outputRoot, overrideDirPath, REASONIX_RULE_FILE_NAME));
+			return new ReasonixRule({
+				outputRoot,
+				relativeDirPath: overrideDirPath,
+				relativeFilePath: REASONIX_RULE_FILE_NAME,
+				fileContent,
+				validate,
+				root: false
+			});
+		}
+		const relativePath = join(root.relativeDirPath, root.relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new ReasonixRule({
 			outputRoot,
 			relativeDirPath: root.relativeDirPath,
@@ -46449,7 +47278,17 @@ var ReasonixRule = class ReasonixRule extends ToolRule {
 	}
 	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true, global = false }) {
 		const { root } = this.getSettablePaths({ global });
-		const isRoot = rulesyncRule.getFrontmatter().root ?? false;
+		const frontmatter = rulesyncRule.getFrontmatter();
+		const isRoot = frontmatter.root ?? false;
+		const subprojectPath = frontmatter.agentsmd?.subprojectPath;
+		if (!global && !isRoot && subprojectPath) return new ReasonixRule({
+			outputRoot,
+			relativeDirPath: join(subprojectPath),
+			relativeFilePath: REASONIX_RULE_FILE_NAME,
+			fileContent: rulesyncRule.getBody(),
+			validate,
+			root: false
+		});
 		return new ReasonixRule({
 			outputRoot,
 			relativeDirPath: root.relativeDirPath,
@@ -46460,7 +47299,22 @@ var ReasonixRule = class ReasonixRule extends ToolRule {
 		});
 	}
 	toRulesyncRule() {
-		return this.toRulesyncRuleDefault();
+		const subprojectPath = this.getSubprojectPath();
+		if (subprojectPath === void 0) return this.toRulesyncRuleDefault();
+		const slug = subprojectPath.replaceAll("/", "-");
+		return new RulesyncRule({
+			outputRoot: this.getOutputRoot(),
+			relativeDirPath: RULESYNC_RULES_RELATIVE_DIR_PATH,
+			relativeFilePath: `${slug}-reasonix.md`,
+			frontmatter: {
+				targets: ["reasonix"],
+				root: false,
+				globs: [`${subprojectPath}/**/*`],
+				agentsmd: { subprojectPath }
+			},
+			body: this.getFileContent(),
+			validate: true
+		});
 	}
 	validate() {
 		return {
@@ -46630,7 +47484,7 @@ var RooRule = class RooRule extends ToolRule {
 	* Glob for the `separate-local-file` deletion; Roo reads `AGENTS.local.md`
 	* at the project root, not under `.roo/` (mirrors rovodev).
 	*/
-	static getLocalRootDeletionGlob({ outputRoot, fileName }) {
+	static getLocalRootFileGlob({ outputRoot, fileName }) {
 		return join(outputRoot, fileName);
 	}
 };
@@ -46762,19 +47616,6 @@ var RovodevRule = class RovodevRule extends ToolRule {
 		}));
 	}
 	toRulesyncRule() {
-		if (this.getRelativeFilePath() === "AGENTS.local.md") return new RulesyncRule({
-			outputRoot: this.getOutputRoot(),
-			relativeDirPath: RULESYNC_RULES_RELATIVE_DIR_PATH,
-			relativeFilePath: ROVODEV_LEGACY_RULE_FILE_NAME,
-			frontmatter: {
-				targets: ["rovodev"],
-				root: false,
-				localRoot: true,
-				globs: []
-			},
-			body: this.getFileContent(),
-			validate: true
-		});
 		if (!this.isRoot()) return new RulesyncRule({
 			outputRoot: this.getOutputRoot(),
 			relativeDirPath: RULESYNC_RULES_RELATIVE_DIR_PATH,
@@ -46831,7 +47672,7 @@ var RovodevRule = class RovodevRule extends ToolRule {
 		};
 	}
 	/** Glob for the `separate-local-file` deletion; rovodev writes it at project root, not under `.rovodev/`. */
-	static getLocalRootDeletionGlob({ outputRoot, fileName }) {
+	static getLocalRootFileGlob({ outputRoot, fileName }) {
 		return join(outputRoot, fileName);
 	}
 };
@@ -47021,15 +47862,20 @@ var WarpRule = class WarpRule extends ToolRule {
 			root: root ?? false
 		});
 	}
-	static getSettablePaths(_options = {}) {
+	static getSettablePaths({ global = false } = {}) {
+		if (global) return { root: {
+			relativeDirPath: WARP_GLOBAL_RULE_DIR,
+			relativeFilePath: WARP_RULE_FILE_NAME
+		} };
 		return { root: {
 			relativeDirPath: ".",
 			relativeFilePath: WARP_RULE_FILE_NAME
 		} };
 	}
-	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true }) {
-		const { root } = this.getSettablePaths();
-		const fileContent = await readFileContent(join(outputRoot, join(root.relativeDirPath, root.relativeFilePath)));
+	static async fromFile({ outputRoot = process.cwd(), relativeFilePath: _relativeFilePath, validate = true, global = false }) {
+		const { root } = this.getSettablePaths({ global });
+		const relativePath = join(root.relativeDirPath, root.relativeFilePath);
+		const fileContent = await readFileContent(join(outputRoot, relativePath));
 		return new WarpRule({
 			outputRoot,
 			relativeDirPath: root.relativeDirPath,
@@ -47039,8 +47885,8 @@ var WarpRule = class WarpRule extends ToolRule {
 			root: true
 		});
 	}
-	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true }) {
-		const { root } = this.getSettablePaths();
+	static fromRulesyncRule({ outputRoot = process.cwd(), rulesyncRule, validate = true, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const isRoot = rulesyncRule.getFrontmatter().root ?? false;
 		return new WarpRule({
 			outputRoot,
@@ -47060,8 +47906,8 @@ var WarpRule = class WarpRule extends ToolRule {
 			error: null
 		};
 	}
-	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath }) {
-		const { root } = this.getSettablePaths();
+	static forDeletion({ outputRoot = process.cwd(), relativeDirPath, relativeFilePath, global = false }) {
+		const { root } = this.getSettablePaths({ global });
 		const isRoot = relativeFilePath === root.relativeFilePath && relativeDirPath === root.relativeDirPath;
 		return new WarpRule({
 			outputRoot,
@@ -47154,6 +48000,27 @@ var ZedRule = class ZedRule extends ToolRule {
 	}
 };
 //#endregion
+//#region src/features/rules/zoocode-rule.ts
+/**
+* Rule generator for **Zoo Code**, the community continuation of Roo Code
+* (named by the Roo shutdown notice; releases continue Roo's numbering from
+* v3.54.0). Zoo Code still resolves `~/.roo` and the project `.roo/` layout —
+* the `.zoo` renaming is confined to provider/auth code — so this target
+* reuses {@link RooRule}'s behavior verbatim and only narrows the targeting to
+* the `zoocode` tool name.
+*
+* @see https://github.com/Zoo-Code-Org/Zoo-Code
+* @see https://docs.zoocode.dev
+*/
+var ZoocodeRule = class extends RooRule {
+	static isTargetedByRulesyncRule(rulesyncRule) {
+		return this.isTargetedByRulesyncRuleDefault({
+			rulesyncRule,
+			toolTarget: "zoocode"
+		});
+	}
+};
+//#endregion
 //#region src/features/rules/rules-processor.ts
 const RulesProcessorToolTargetSchema = z.enum(rulesProcessorToolTargetTuple);
 const formatRulePaths = (rules) => rules.map((r) => join(r.getRelativeDirPath(), r.getRelativeFilePath())).join(", ");
@@ -47416,6 +48283,7 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 			supportsGlobal: true,
 			ruleDiscoveryMode: "toon",
 			mcpInstructionsRegistrar: OpencodeMcp,
+			mcpInstructionsRegistrarGlobal: true,
 			collisionPolicy: "compose"
 		}
 	}],
@@ -47434,6 +48302,8 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 			extension: "md",
 			supportsGlobal: true,
 			ruleDiscoveryMode: "auto",
+			localRootMode: "separate-local-file",
+			localRootFileName: QWENCODE_LOCAL_RULE_FILE_NAME,
 			additionalConventions: { subagents: { subagentClass: QwencodeSubagent } }
 		}
 	}],
@@ -47478,6 +48348,16 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 			localRootFileName: "AGENTS.local.md"
 		}
 	}],
+	["zoocode", {
+		class: ZoocodeRule,
+		meta: {
+			extension: "md",
+			supportsGlobal: true,
+			ruleDiscoveryMode: "auto",
+			localRootMode: "separate-local-file",
+			localRootFileName: "AGENTS.local.md"
+		}
+	}],
 	["takt", {
 		class: TaktRule,
 		meta: {
@@ -47498,7 +48378,7 @@ const toolRuleFactories = /* @__PURE__ */ new Map([
 		class: WarpRule,
 		meta: {
 			extension: "md",
-			supportsGlobal: false,
+			supportsGlobal: true,
 			ruleDiscoveryMode: "toon",
 			collisionPolicy: "fold"
 		}
@@ -47650,18 +48530,19 @@ var RulesProcessor = class extends FeatureProcessor {
 	/**
 	* Non-root rules of some tools are not auto-loaded; the tool's MCP feature
 	* registers them in its shared config's `instructions` key. The root rule is
-	* auto-loaded and never registered. Project scope only.
+	* auto-loaded and never registered. Global scope opt-in via
+	* `mcpInstructionsRegistrarGlobal`.
 	*/
 	async buildMcpInstructionFiles({ toolRules, meta }) {
-		if (!meta.mcpInstructionsRegistrar || this.global) return [];
+		if (!meta.mcpInstructionsRegistrar || this.global && !meta.mcpInstructionsRegistrarGlobal) return [];
 		const instructionPaths = toolRules.filter((rule) => !rule.isRoot() && !rule.isExcludedFromRootReferences()).map((rule) => toPosixPath(join(rule.getRelativeDirPath(), rule.getRelativeFilePath())));
-		if (instructionPaths.length === 0) return [];
-		return [await meta.mcpInstructionsRegistrar.fromInstructions({
+		const registered = await meta.mcpInstructionsRegistrar.fromInstructions({
 			outputRoot: this.outputRoot,
 			instructions: instructionPaths,
 			validate: true,
 			global: this.global
-		})];
+		});
+		return registered ? [registered] : [];
 	}
 	/**
 	* For tools that don't create a separate conventions rule, prepend the
@@ -47792,45 +48673,58 @@ var RulesProcessor = class extends FeatureProcessor {
 		const rootRule = toolRules.find((rule) => rule.isRoot());
 		if (rootRule) rootRule.setFileContent(rootRule.getFileContent() + "\n\n" + localRootBody);
 	}
-	buildLocalRootFile({ factory, fileName, body }) {
+	buildLocalRootFile({ factory, fileName, body, relativeDirPath, localRoot = false }) {
 		if (factory.class === ClaudecodeRule) {
 			const paths = ClaudecodeRule.getSettablePaths({ global: this.global });
 			return new ClaudecodeRule({
 				outputRoot: this.outputRoot,
-				relativeDirPath: paths.root.relativeDirPath,
+				relativeDirPath: relativeDirPath ?? paths.root.relativeDirPath,
 				relativeFilePath: fileName,
 				frontmatter: {},
 				body,
 				validate: true,
-				root: true
+				root: true,
+				localRoot
 			});
 		}
 		if (factory.class === ClaudecodeLegacyRule) {
 			const paths = ClaudecodeLegacyRule.getSettablePaths({ global: this.global });
 			return new ClaudecodeLegacyRule({
 				outputRoot: this.outputRoot,
-				relativeDirPath: paths.root.relativeDirPath,
+				relativeDirPath: relativeDirPath ?? paths.root.relativeDirPath,
 				relativeFilePath: fileName,
 				fileContent: body,
 				validate: true,
-				root: true
+				root: true,
+				localRoot
 			});
 		}
 		if (factory.class === RovodevRule) return new RovodevRule({
 			outputRoot: this.outputRoot,
-			relativeDirPath: ".",
+			relativeDirPath: relativeDirPath ?? ".",
 			relativeFilePath: fileName,
 			fileContent: body,
 			validate: true,
-			root: true
+			root: true,
+			localRoot
 		});
 		if (factory.class === RooRule) return new RooRule({
 			outputRoot: this.outputRoot,
-			relativeDirPath: ".",
+			relativeDirPath: relativeDirPath ?? ".",
 			relativeFilePath: fileName,
 			fileContent: body,
 			validate: true,
-			root: true
+			root: true,
+			localRoot
+		});
+		if (factory.class === QwencodeRule) return new QwencodeRule({
+			outputRoot: this.outputRoot,
+			relativeDirPath: relativeDirPath ?? ".qwen",
+			relativeFilePath: fileName,
+			fileContent: body,
+			validate: true,
+			root: true,
+			localRoot
 		});
 		return null;
 	}
@@ -47868,6 +48762,7 @@ As this project's AI coding tool, you must follow the additional conventions bel
 	async convertToolFilesToRulesyncFiles(toolFiles) {
 		const toolRules = toolFiles.filter((file) => file instanceof ToolRule);
 		const rulesyncRules = toolRules.map((toolRule) => {
+			if (toolRule.isLocalRoot()) return toolRule.toLocalRootRulesyncRule({ targets: [this.toolTarget] });
 			return toolRule.toRulesyncRule();
 		});
 		const claimedBy = /* @__PURE__ */ new Map();
@@ -48001,20 +48896,34 @@ As this project's AI coding tool, you must follow the additional conventions bel
 			})();
 			this.logger.debug(`Found ${rootToolRules.length} root tool rule files`);
 			const localRootToolRules = await (async () => {
-				if (!forDeletion || this.global || factory.meta.localRootMode !== "separate-local-file" || !factory.meta.localRootFileName) return [];
+				if (this.global || factory.meta.localRootMode !== "separate-local-file" || !factory.meta.localRootFileName) return [];
 				const fileName = factory.meta.localRootFileName;
-				if (factory.class.getLocalRootDeletionGlob) {
-					const filePaths = await findFilesByGlobs(factory.class.getLocalRootDeletionGlob({
+				const filePaths = await (async () => {
+					if (factory.class.getLocalRootFileGlob) return await findFilesByGlobs(factory.class.getLocalRootFileGlob({
 						outputRoot: this.outputRoot,
 						fileName
 					}));
-					return buildDeletionRulesFromPaths(filePaths);
-				}
-				if (!settablePaths.root) return [];
-				const filePaths = await findFilesWithFallback(join(this.outputRoot, settablePaths.root.relativeDirPath ?? ".", fileName), settablePaths.alternativeRoots, (alt) => join(this.outputRoot, alt.relativeDirPath, fileName));
-				return buildDeletionRulesFromPaths(filePaths);
+					if (!settablePaths.root) return [];
+					return await findFilesWithFallback(join(this.outputRoot, settablePaths.root.relativeDirPath ?? ".", fileName), settablePaths.alternativeRoots, (alt) => join(this.outputRoot, alt.relativeDirPath, fileName));
+				})();
+				if (forDeletion) return buildDeletionRulesFromPaths(filePaths);
+				return (await Promise.all(filePaths.map(async (filePath) => {
+					const relativeDirPath = resolveRelativeDirPath(filePath);
+					checkPathTraversal({
+						relativePath: relativeDirPath,
+						intendedRootDir: this.outputRoot
+					});
+					const body = await readFileContent(filePath);
+					return this.buildLocalRootFile({
+						factory,
+						fileName: basename(filePath),
+						body,
+						relativeDirPath,
+						localRoot: true
+					});
+				}))).filter((rule) => rule !== null);
 			})();
-			this.logger.debug(`Found ${localRootToolRules.length} local root tool rule files for deletion`);
+			this.logger.debug(`Found ${localRootToolRules.length} local root tool rule files`);
 			const rootMirrorDeletionRules = await (async () => {
 				const rootMirror = factory.class.getRootMirror?.();
 				if (!forDeletion || this.global || !rootMirror) return [];
@@ -48140,13 +49049,14 @@ As this project's AI coding tool, you must follow the additional conventions bel
 		const lines = [];
 		lines.push("Please also reference the following rules as needed. The list below is provided in TOON format, and `@` stands for the project root directory.");
 		lines.push("");
-		const toonContent = encode({ rules: toolRulesWithoutRoot.map((toolRule) => {
+		const rules = toolRulesWithoutRoot.map((toolRule) => {
 			const frontmatter = toolRule.toRulesyncRule().getFrontmatter();
 			const rule = { path: `@${toolRule.getRelativePathFromCwd()}` };
 			if (frontmatter.description) rule.description = frontmatter.description;
 			if (frontmatter.globs && frontmatter.globs.length > 0) rule.applyTo = frontmatter.globs;
 			return rule;
-		}) });
+		});
+		const toonContent = encode({ rules });
 		lines.push(toonContent);
 		return lines.join("\n") + "\n\n";
 	}
@@ -49308,8 +50218,8 @@ async function generateIgnoreCore(params) {
 			allPaths.push(...result.paths);
 			if (result.hasDiff) hasDiff = true;
 		} catch (error) {
-			logger.warn(`Failed to generate ${toolTarget} ignore files for ${outputRoot}: ${formatError(error)}`);
-			continue;
+			logger.error(`Failed to generate ${toolTarget} ignore files for ${outputRoot}: ${formatError(error)}`);
+			throw error;
 		}
 	}
 	return {
@@ -49581,8 +50491,8 @@ async function generatePermissionsCore(params) {
 			allPaths.push(...result.paths);
 			if (result.hasDiff) hasDiff = true;
 		} catch (error) {
-			logger.warn(`Failed to generate ${toolTarget} permissions files for ${outputRoot}: ${formatError(error)}`);
-			continue;
+			logger.error(`Failed to generate ${toolTarget} permissions files for ${outputRoot}: ${formatError(error)}`);
+			throw error;
 		}
 	}
 	return {
@@ -49984,6 +50894,6 @@ async function importChecksCore(params) {
 	return writtenCount;
 }
 //#endregion
-export { warnOnConflictingFlags as $, RULESYNC_RELATIVE_DIR_PATH as $t, RulesyncMcp as A, MAX_FILE_SIZE as At, stringifyFrontmatter as B, RULESYNC_HOOKS_LEGACY_FILE_NAME as Bt, RulesyncSubagent as C, runWithDirectoryRollback as Ct, RulesyncRule as D, ALL_TOOL_TARGETS_WITH_WILDCARD as Dt, RulesyncSkillFrontmatterSchema as E, ALL_TOOL_TARGETS as Et, parseJsonc as F, RULESYNC_CONFIG_RELATIVE_FILE_PATH as Ft, CONFLICTING_TARGET_PAIRS as G, RULESYNC_MCP_LEGACY_FILE_NAME as Gt, SHARED_USER_MANAGED_CONFIG_PATHS as H, RULESYNC_IGNORE_RELATIVE_FILE_PATH as Ht, RulesyncCommand as I, RULESYNC_CONFIG_SCHEMA_URL as It, SourceEntrySchema as J, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as Jt, ConfigFileSchema as K, RULESYNC_MCP_RELATIVE_FILE_PATH as Kt, RulesyncCommandFrontmatterSchema as L, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as Lt, RulesyncHooks as M, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as Mt, getRulesyncSourceCandidates as N, RULESYNC_CHECKS_RELATIVE_DIR_PATH as Nt, RulesyncRuleFrontmatterSchema as O, PACKAGING_TOOL_TARGETS as Ot, resolveRulesyncSourceWritePath as P, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as Pt, fallbackLogger as Q, RULESYNC_PERMISSIONS_SCHEMA_URL as Qt, RulesyncCheck as R, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as Rt, getLocalSkillDirNames as S, resolvePath as St, RulesyncSkill as T, writeFileContent as Tt, SKILL_FILE_NAME as U, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as Ut, loadYaml as V, RULESYNC_HOOKS_RELATIVE_FILE_PATH as Vt, ConfigResolver as W, RULESYNC_MCP_FILE_NAME as Wt, ConsoleLogger as X, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME as Xt, findControlCharacter as Y, RULESYNC_PERMISSIONS_FILE_NAME as Yt, JsonLogger as Z, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as Zt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as _, removeDirectory as _t, convertFromTool as a, ALL_FEATURES_WITH_WILDCARD as an, checkPathTraversal as at, CODEXCLI_BASH_RULES_FILE_NAME as b, removeFileStrict as bt, SubagentsProcessor as c, ensureDir as ct, IgnoreProcessor as d, getFileSize as dt, RULESYNC_RULES_RELATIVE_DIR_PATH as en, CLIError as et, HooksProcessor as f, getHomeDirectory as ft, CLAUDECODE_MEMORIES_DIR_NAME as g, readFileContentOrNull as gt, CLAUDECODE_LOCAL_RULE_FILE_NAME as h, readFileContent as ht, getProcessorRegistryEntry as i, ALL_FEATURES as in, assertWritablePathInsideRoot as it, RulesyncIgnore as j, RULESYNC_AIIGNORE_FILE_NAME as jt, RulesyncPermissions as k, ToolTargetSchema as kt, SkillsProcessor as l, fileExists as lt, CLAUDECODE_DIR as m, listDirectoryFiles as mt, checkRulesyncDirExists as n, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as nn, assertDirectoryIfExists as nt, isPackagingToolTarget as o, DEPRECATED_FEATURE_REPLACEMENTS as on, createTempDirectory as ot, CommandsProcessor as p, isSymlink as pt, GITIGNORE_DESTINATION_KEY as q, RULESYNC_MCP_SCHEMA_URL as qt, generate as r, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as rn, assertTreeContainsNoSymlinks as rt, RulesProcessor as s, formatError as sn, directoryExists as st, importFromTool as t, RULESYNC_SKILLS_RELATIVE_DIR_PATH as tn, ErrorCodes as tt, McpProcessor as u, findFilesByGlobs as ut, CLAUDECODE_SKILLS_DIR_PATH as v, removeDirectoryStrict as vt, RulesyncSubagentFrontmatterSchema as w, toPosixPath as wt, CODEXCLI_DIR as x, removeTempDirectory as xt, ChecksProcessor as y, removeFile as yt, RulesyncCheckFrontmatterSchema as z, RULESYNC_HOOKS_FILE_NAME as zt };
+export { JsonLogger as $, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as $t, RulesyncRuleFrontmatterSchema as A, PACKAGING_TOOL_TARGETS as At, RulesyncCheck as B, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as Bt, CODEXCLI_DIR as C, removeTempDirectory as Ct, RulesyncSkill as D, writeFileContent as Dt, RulesyncSubagentFrontmatterSchema as E, toPosixPath as Et, getRulesyncSourceCandidates as F, RULESYNC_CHECKS_RELATIVE_DIR_PATH as Ft, SKILL_FILE_NAME as G, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as Gt, stringifyFrontmatter as H, RULESYNC_HOOKS_LEGACY_FILE_NAME as Ht, resolveRulesyncSourceWritePath as I, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as It, ConfigFileSchema as J, RULESYNC_MCP_RELATIVE_FILE_PATH as Jt, ConfigResolver as K, RULESYNC_MCP_FILE_NAME as Kt, parseJsonc as L, RULESYNC_CONFIG_RELATIVE_FILE_PATH as Lt, RulesyncMcp as M, MAX_FILE_SIZE as Mt, RulesyncIgnore as N, RULESYNC_AIIGNORE_FILE_NAME as Nt, RulesyncSkillFrontmatterSchema as O, ALL_TOOL_TARGETS as Ot, RulesyncHooks as P, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as Pt, ConsoleLogger as Q, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME as Qt, RulesyncCommand as R, RULESYNC_CONFIG_SCHEMA_URL as Rt, CODEXCLI_BASH_RULES_FILE_NAME as S, removeFileStrict as St, RulesyncSubagent as T, runWithDirectoryRollback as Tt, loadYaml as U, RULESYNC_HOOKS_RELATIVE_FILE_PATH as Ut, RulesyncCheckFrontmatterSchema as V, RULESYNC_HOOKS_FILE_NAME as Vt, SHARED_USER_MANAGED_CONFIG_PATHS as W, RULESYNC_IGNORE_RELATIVE_FILE_PATH as Wt, SourceEntrySchema as X, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as Xt, GITIGNORE_DESTINATION_KEY as Y, RULESYNC_MCP_SCHEMA_URL as Yt, findControlCharacter as Z, RULESYNC_PERMISSIONS_FILE_NAME as Zt, CLAUDECODE_LOCAL_RULE_FILE_NAME as _, readFileContent as _t, convertFromTool as a, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as an, assertTreeContainsNoSymlinks as at, CLAUDECODE_SKILLS_DIR_PATH as b, removeDirectoryStrict as bt, SubagentsProcessor as c, DEPRECATED_FEATURE_REPLACEMENTS as cn, createTempDirectory as ct, IgnoreProcessor as d, fileExists as dt, RULESYNC_PERMISSIONS_SCHEMA_URL as en, fallbackLogger as et, HooksProcessor as f, findFilesByGlobs as ft, CLAUDECODE_DIR as g, listDirectoryFiles as gt, QWENCODE_LOCAL_RULE_FILE_NAME as h, isSymlink as ht, getProcessorRegistryEntry as i, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as in, assertDirectoryIfExists as it, RulesyncPermissions as j, ToolTargetSchema as jt, RulesyncRule as k, ALL_TOOL_TARGETS_WITH_WILDCARD as kt, SkillsProcessor as l, formatError as ln, directoryExists as lt, QWENCODE_DIR as m, getHomeDirectory as mt, checkRulesyncDirExists as n, RULESYNC_RULES_RELATIVE_DIR_PATH as nn, CLIError as nt, isPackagingToolTarget as o, ALL_FEATURES as on, assertWritablePathInsideRoot as ot, CommandsProcessor as p, getFileSize as pt, CONFLICTING_TARGET_PAIRS as q, RULESYNC_MCP_LEGACY_FILE_NAME as qt, generate as r, RULESYNC_SKILLS_RELATIVE_DIR_PATH as rn, ErrorCodes as rt, RulesProcessor as s, ALL_FEATURES_WITH_WILDCARD as sn, checkPathTraversal as st, importFromTool as t, RULESYNC_RELATIVE_DIR_PATH as tn, warnOnConflictingFlags as tt, McpProcessor as u, ensureDir as ut, CLAUDECODE_MEMORIES_DIR_NAME as v, readFileContentOrNull as vt, getLocalSkillDirNames as w, resolvePath as wt, ChecksProcessor as x, removeFile as xt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as y, removeDirectory as yt, RulesyncCommandFrontmatterSchema as z, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as zt };
 
-//# sourceMappingURL=import-Bj5HxY9p.js.map
+//# sourceMappingURL=import-BlwypG9v.js.map