rulesync 8.17.0 → 8.18.0

package/dist/{chunk-RXCRO26Z.js → chunk-KDGHMXTY.js}

@@ -7983,14 +7983,21 @@ var ClineMcp = class _ClineMcp extends ToolMcp {
 // src/features/mcp/codexcli-mcp.ts
 import { join as join51 } from "path";
 import * as smolToml3 from "smol-toml";
+var MAX_REMOVE_EMPTY_ENTRIES_DEPTH = 32;
+var PROTOTYPE_POLLUTION_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+function isPlainObject2(value) {
+  if (!isRecord(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === null || proto === Object.prototype;
+}
 function convertFromCodexFormat(codexMcp) {
   const result = {};
   for (const [name, config] of Object.entries(codexMcp)) {
-    if (typeof config !== "object" || config === null || Array.isArray(config)) {
-      continue;
-    }
+    if (PROTOTYPE_POLLUTION_KEYS.has(name)) continue;
+    if (!isRecord(config)) continue;
     const converted = {};
     for (const [key, value] of Object.entries(config)) {
+      if (PROTOTYPE_POLLUTION_KEYS.has(key)) continue;
       if (key === "enabled") {
         if (value === false) {
           converted["disabled"] = true;
@@ -8012,8 +8019,11 @@ function convertFromCodexFormat(codexMcp) {
 function convertToCodexFormat(mcpServers) {
   const result = {};
   for (const [name, config] of Object.entries(mcpServers)) {
+    if (PROTOTYPE_POLLUTION_KEYS.has(name)) continue;
+    if (!isRecord(config)) continue;
     const converted = {};
     for (const [key, value] of Object.entries(config)) {
+      if (PROTOTYPE_POLLUTION_KEYS.has(key)) continue;
       if (key === "disabled") {
         if (value === true) {
           converted["enabled"] = false;
@@ -8095,6 +8105,14 @@ var CodexcliMcp = class _CodexcliMcp extends ToolMcp {
     const mcpServers = rulesyncMcp.getJson().mcpServers;
     const converted = convertToCodexFormat(mcpServers);
     const filteredMcpServers = this.removeEmptyEntries(converted);
+    for (const name of Object.keys(converted)) {
+      if (!Object.hasOwn(filteredMcpServers, name)) {
+        warnWithFallback(
+          void 0,
+          `MCP server "${name}" had no non-empty configuration and was dropped from the codex CLI config`
+        );
+      }
+    }
     configToml["mcp_servers"] = filteredMcpServers;
     return new _CodexcliMcp({
       outputRoot,
@@ -8114,13 +8132,21 @@ var CodexcliMcp = class _CodexcliMcp extends ToolMcp {
   validate() {
     return { success: true, error: null };
   }
-  static removeEmptyEntries(obj) {
+  static removeEmptyEntries(obj, depth = 0) {
     if (!obj) return {};
+    if (depth > MAX_REMOVE_EMPTY_ENTRIES_DEPTH) {
+      warnWithFallback(
+        void 0,
+        `removeEmptyEntries: maximum recursion depth (${MAX_REMOVE_EMPTY_ENTRIES_DEPTH}) exceeded; empty nested objects may remain`
+      );
+      return obj;
+    }
     const filtered = {};
     for (const [key, value] of Object.entries(obj)) {
+      if (PROTOTYPE_POLLUTION_KEYS.has(key)) continue;
       if (value === null) continue;
-      if (typeof value === "object" && !Array.isArray(value)) {
-        const cleaned = this.removeEmptyEntries(value);
+      if (isPlainObject2(value)) {
+        const cleaned = this.removeEmptyEntries(value, depth + 1);
         if (Object.keys(cleaned).length === 0) continue;
         filtered[key] = cleaned;
         continue;
@@ -9813,7 +9839,13 @@ var toolMcpFactories = /* @__PURE__ */ new Map([
       class: KiloMcp,
       meta: {
         supportsProject: true,
-        supportsGlobal: false,
+        // Kilo CLI reads global MCP from `~/.config/kilo/kilo.json` (or
+        // `kilo.jsonc`). The path machinery in `KiloMcp.getSettablePaths`
+        // already routes global mode to that location; only this flag
+        // was gating it off. Kilo is an OpenCode fork and uses an
+        // identical native MCP schema, so global parity with opencode
+        // is the natural state.
+        supportsGlobal: true,
         supportsEnabledTools: false,
         supportsDisabledTools: false
       }
@@ -12934,7 +12966,7 @@ var PermissionsProcessor = class extends FeatureProcessor {
 // src/features/rules/rules-processor.ts
 import { basename as basename10, dirname as dirname3, join as join151, relative as relative6 } from "path";
 import { encode } from "@toon-format/toon";
-import { z as z79 } from "zod/mini";
+import { z as z80 } from "zod/mini";
 
 // src/constants/general.ts
 var SKILL_FILE_NAME = "SKILL.md";
@@ -17886,7 +17918,7 @@ var RovodevSubagent = class _RovodevSubagent extends ToolSubagent {
 
 // src/features/subagents/subagents-processor.ts
 import { basename as basename9, join as join122 } from "path";
-import { z as z72 } from "zod/mini";
+import { z as z73 } from "zod/mini";
 
 // src/features/subagents/claudecode-subagent.ts
 import { join as join110 } from "path";
@@ -19046,6 +19078,7 @@ var JunieSubagent = class _JunieSubagent extends ToolSubagent {
 
 // src/features/subagents/kilo-subagent.ts
 import { join as join118 } from "path";
+import { z as z71 } from "zod/mini";
 
 // src/features/subagents/opencode-style-subagent.ts
 import { basename as basename8, join as join117 } from "path";
@@ -19112,7 +19145,13 @@ var OpenCodeStyleSubagent = class extends ToolSubagent {
 };
 
 // src/features/subagents/kilo-subagent.ts
-var KiloSubagentFrontmatterSchema = OpenCodeStyleSubagentFrontmatterSchema;
+var KiloSubagentFrontmatterSchema = z71.looseObject({
+  description: z71.optional(z71.string()),
+  // Kilo's documented default for user-defined agents is "all":
+  // available both as a top-level pick and as a subagent.
+  mode: z71._default(z71.string(), "all"),
+  name: z71.optional(z71.string())
+});
 var KiloSubagent = class _KiloSubagent extends OpenCodeStyleSubagent {
   getToolTarget() {
     return "kilo";
@@ -19132,12 +19171,11 @@ var KiloSubagent = class _KiloSubagent extends OpenCodeStyleSubagent {
   }) {
     const rulesyncFrontmatter = rulesyncSubagent.getFrontmatter();
     const kiloSection = rulesyncFrontmatter.kilo ?? {};
-    const kiloFrontmatter = {
+    const kiloFrontmatter = KiloSubagentFrontmatterSchema.parse({
       ...kiloSection,
       description: rulesyncFrontmatter.description,
-      mode: typeof kiloSection.mode === "string" ? kiloSection.mode : "subagent",
       ...rulesyncFrontmatter.name && { name: rulesyncFrontmatter.name }
-    };
+    });
     const body = rulesyncSubagent.getBody();
     const fileContent = stringifyFrontmatter(body, kiloFrontmatter);
     const paths = this.getSettablePaths({ global });
@@ -19186,38 +19224,40 @@ var KiloSubagent = class _KiloSubagent extends OpenCodeStyleSubagent {
   static forDeletion({
     outputRoot = process.cwd(),
     relativeDirPath,
-    relativeFilePath
+    relativeFilePath,
+    global = false
   }) {
     return new _KiloSubagent({
       outputRoot,
       relativeDirPath,
       relativeFilePath,
-      frontmatter: { description: "", mode: "subagent" },
+      frontmatter: { description: "", mode: "all" },
       body: "",
       fileContent: "",
-      validate: false
+      validate: false,
+      global
     });
   }
 };
 
 // src/features/subagents/kiro-subagent.ts
 import { join as join119 } from "path";
-import { z as z71 } from "zod/mini";
-var KiroCliSubagentJsonSchema = z71.looseObject({
-  name: z71.string(),
-  description: z71.optional(z71.nullable(z71.string())),
-  prompt: z71.optional(z71.nullable(z71.string())),
-  tools: z71.optional(z71.nullable(z71.array(z71.string()))),
-  toolAliases: z71.optional(z71.nullable(z71.record(z71.string(), z71.string()))),
-  toolSettings: z71.optional(z71.nullable(z71.unknown())),
-  toolSchema: z71.optional(z71.nullable(z71.unknown())),
-  hooks: z71.optional(z71.nullable(z71.record(z71.string(), z71.array(z71.unknown())))),
-  model: z71.optional(z71.nullable(z71.string())),
-  mcpServers: z71.optional(z71.nullable(z71.record(z71.string(), z71.unknown()))),
-  useLegacyMcpJson: z71.optional(z71.nullable(z71.boolean())),
-  resources: z71.optional(z71.nullable(z71.array(z71.string()))),
-  allowedTools: z71.optional(z71.nullable(z71.array(z71.string()))),
-  includeMcpJson: z71.optional(z71.nullable(z71.boolean()))
+import { z as z72 } from "zod/mini";
+var KiroCliSubagentJsonSchema = z72.looseObject({
+  name: z72.string(),
+  description: z72.optional(z72.nullable(z72.string())),
+  prompt: z72.optional(z72.nullable(z72.string())),
+  tools: z72.optional(z72.nullable(z72.array(z72.string()))),
+  toolAliases: z72.optional(z72.nullable(z72.record(z72.string(), z72.string()))),
+  toolSettings: z72.optional(z72.nullable(z72.unknown())),
+  toolSchema: z72.optional(z72.nullable(z72.unknown())),
+  hooks: z72.optional(z72.nullable(z72.record(z72.string(), z72.array(z72.unknown())))),
+  model: z72.optional(z72.nullable(z72.string())),
+  mcpServers: z72.optional(z72.nullable(z72.record(z72.string(), z72.unknown()))),
+  useLegacyMcpJson: z72.optional(z72.nullable(z72.boolean())),
+  resources: z72.optional(z72.nullable(z72.array(z72.string()))),
+  allowedTools: z72.optional(z72.nullable(z72.array(z72.string()))),
+  includeMcpJson: z72.optional(z72.nullable(z72.boolean()))
 });
 var KiroSubagent = class _KiroSubagent extends ToolSubagent {
   body;
@@ -19583,7 +19623,7 @@ var subagentsProcessorToolTargetTuple = [
   "rovodev",
   "takt"
 ];
-var SubagentsProcessorToolTargetSchema = z72.enum(subagentsProcessorToolTargetTuple);
+var SubagentsProcessorToolTargetSchema = z73.enum(subagentsProcessorToolTargetTuple);
 var toolSubagentFactories = /* @__PURE__ */ new Map([
   [
     "agentsmd",
@@ -19912,48 +19952,48 @@ import { join as join124 } from "path";
 
 // src/features/rules/rulesync-rule.ts
 import { join as join123 } from "path";
-import { z as z73 } from "zod/mini";
-var RulesyncRuleFrontmatterSchema = z73.object({
-  root: z73.optional(z73.boolean()),
-  localRoot: z73.optional(z73.boolean()),
-  targets: z73._default(RulesyncTargetsSchema, ["*"]),
-  description: z73.optional(z73.string()),
-  globs: z73.optional(z73.array(z73.string())),
-  agentsmd: z73.optional(
-    z73.looseObject({
+import { z as z74 } from "zod/mini";
+var RulesyncRuleFrontmatterSchema = z74.object({
+  root: z74.optional(z74.boolean()),
+  localRoot: z74.optional(z74.boolean()),
+  targets: z74._default(RulesyncTargetsSchema, ["*"]),
+  description: z74.optional(z74.string()),
+  globs: z74.optional(z74.array(z74.string())),
+  agentsmd: z74.optional(
+    z74.looseObject({
       // @example "path/to/subproject"
-      subprojectPath: z73.optional(z73.string())
+      subprojectPath: z74.optional(z74.string())
     })
   ),
-  claudecode: z73.optional(
-    z73.looseObject({
+  claudecode: z74.optional(
+    z74.looseObject({
       // Glob patterns for conditional rules (takes precedence over globs)
       // @example ["src/**/*.ts", "tests/**/*.test.ts"]
-      paths: z73.optional(z73.array(z73.string()))
+      paths: z74.optional(z74.array(z74.string()))
     })
   ),
-  cursor: z73.optional(
-    z73.looseObject({
-      alwaysApply: z73.optional(z73.boolean()),
-      description: z73.optional(z73.string()),
-      globs: z73.optional(z73.array(z73.string()))
+  cursor: z74.optional(
+    z74.looseObject({
+      alwaysApply: z74.optional(z74.boolean()),
+      description: z74.optional(z74.string()),
+      globs: z74.optional(z74.array(z74.string()))
     })
   ),
-  copilot: z73.optional(
-    z73.looseObject({
-      excludeAgent: z73.optional(z73.union([z73.literal("code-review"), z73.literal("coding-agent")]))
+  copilot: z74.optional(
+    z74.looseObject({
+      excludeAgent: z74.optional(z74.union([z74.literal("code-review"), z74.literal("coding-agent")]))
     })
   ),
-  antigravity: z73.optional(
-    z73.looseObject({
-      trigger: z73.optional(z73.string()),
-      globs: z73.optional(z73.array(z73.string()))
+  antigravity: z74.optional(
+    z74.looseObject({
+      trigger: z74.optional(z74.string()),
+      globs: z74.optional(z74.array(z74.string()))
     })
   ),
-  takt: z73.optional(
-    z73.looseObject({
+  takt: z74.optional(
+    z74.looseObject({
       // Rename the emitted file stem (e.g. "coder.md" → "{name}.md").
-      name: z73.optional(z73.string())
+      name: z74.optional(z74.string())
     })
   )
 });
@@ -20254,20 +20294,20 @@ var AgentsMdRule = class _AgentsMdRule extends ToolRule {
 
 // src/features/rules/antigravity-rule.ts
 import { join as join126 } from "path";
-import { z as z74 } from "zod/mini";
-var AntigravityRuleFrontmatterSchema = z74.looseObject({
-  trigger: z74.optional(
-    z74.union([
-      z74.literal("always_on"),
-      z74.literal("glob"),
-      z74.literal("manual"),
-      z74.literal("model_decision"),
-      z74.string()
+import { z as z75 } from "zod/mini";
+var AntigravityRuleFrontmatterSchema = z75.looseObject({
+  trigger: z75.optional(
+    z75.union([
+      z75.literal("always_on"),
+      z75.literal("glob"),
+      z75.literal("manual"),
+      z75.literal("model_decision"),
+      z75.string()
       // accepts any string for forward compatibility
     ])
   ),
-  globs: z74.optional(z74.string()),
-  description: z74.optional(z74.string())
+  globs: z75.optional(z75.string()),
+  description: z75.optional(z75.string())
 });
 function parseGlobsString(globs) {
   if (!globs) {
@@ -20854,9 +20894,9 @@ var ClaudecodeLegacyRule = class _ClaudecodeLegacyRule extends ToolRule {
 
 // src/features/rules/claudecode-rule.ts
 import { join as join130 } from "path";
-import { z as z75 } from "zod/mini";
-var ClaudecodeRuleFrontmatterSchema = z75.object({
-  paths: z75.optional(z75.array(z75.string()))
+import { z as z76 } from "zod/mini";
+var ClaudecodeRuleFrontmatterSchema = z76.object({
+  paths: z76.optional(z76.array(z76.string()))
 });
 var ClaudecodeRule = class _ClaudecodeRule extends ToolRule {
   frontmatter;
@@ -21072,9 +21112,9 @@ var ClaudecodeRule = class _ClaudecodeRule extends ToolRule {
 
 // src/features/rules/cline-rule.ts
 import { join as join131 } from "path";
-import { z as z76 } from "zod/mini";
-var ClineRuleFrontmatterSchema = z76.object({
-  description: z76.string()
+import { z as z77 } from "zod/mini";
+var ClineRuleFrontmatterSchema = z77.object({
+  description: z77.string()
 });
 var ClineRule = class _ClineRule extends ToolRule {
   static getSettablePaths(_options = {}) {
@@ -21253,11 +21293,11 @@ var CodexcliRule = class _CodexcliRule extends ToolRule {
 
 // src/features/rules/copilot-rule.ts
 import { join as join133 } from "path";
-import { z as z77 } from "zod/mini";
-var CopilotRuleFrontmatterSchema = z77.object({
-  description: z77.optional(z77.string()),
-  applyTo: z77.optional(z77.string()),
-  excludeAgent: z77.optional(z77.union([z77.literal("code-review"), z77.literal("coding-agent")]))
+import { z as z78 } from "zod/mini";
+var CopilotRuleFrontmatterSchema = z78.object({
+  description: z78.optional(z78.string()),
+  applyTo: z78.optional(z78.string()),
+  excludeAgent: z78.optional(z78.union([z78.literal("code-review"), z78.literal("coding-agent")]))
 });
 var normalizeRelativePath = (path4) => path4.replace(/\\/g, "/").replace(/\/+/g, "/");
 var sameRelativePath = (leftDir, leftFile, rightDir, rightFile) => normalizeRelativePath(join133(leftDir, leftFile)) === normalizeRelativePath(join133(rightDir, rightFile));
@@ -21511,11 +21551,11 @@ var CopilotcliRule = class _CopilotcliRule extends CopilotRule {
 
 // src/features/rules/cursor-rule.ts
 import { join as join134 } from "path";
-import { z as z78 } from "zod/mini";
-var CursorRuleFrontmatterSchema = z78.object({
-  description: z78.optional(z78.string()),
-  globs: z78.optional(z78.string()),
-  alwaysApply: z78.optional(z78.boolean())
+import { z as z79 } from "zod/mini";
+var CursorRuleFrontmatterSchema = z79.object({
+  description: z79.optional(z79.string()),
+  globs: z79.optional(z79.string()),
+  alwaysApply: z79.optional(z79.boolean())
 });
 var CursorRule = class _CursorRule extends ToolRule {
   frontmatter;
@@ -23398,11 +23438,11 @@ var rulesProcessorToolTargets = [
   "warp",
   "windsurf"
 ];
-var RulesProcessorToolTargetSchema = z79.enum(rulesProcessorToolTargets);
+var RulesProcessorToolTargetSchema = z80.enum(rulesProcessorToolTargets);
 var formatRulePaths = (rules) => rules.map((r) => join151(r.getRelativeDirPath(), r.getRelativeFilePath())).join(", ");
-var RulesFeatureOptionsSchema = z79.looseObject({
-  ruleDiscoveryMode: z79.optional(z79.enum(["none", "explicit"])),
-  includeLocalRoot: z79.optional(z79.boolean())
+var RulesFeatureOptionsSchema = z80.looseObject({
+  ruleDiscoveryMode: z80.optional(z80.enum(["none", "explicit"])),
+  includeLocalRoot: z80.optional(z80.boolean())
 });
 var resolveRuleDiscoveryMode = ({
   defaultMode,
@@ -23423,8 +23463,8 @@ var resolveRuleDiscoveryMode = ({
   }
   return parsed.data.ruleDiscoveryMode === "none" ? "auto" : "toon";
 };
-var IncludeLocalRootSchema = z79.looseObject({
-  includeLocalRoot: z79.optional(z79.boolean())
+var IncludeLocalRootSchema = z80.looseObject({
+  includeLocalRoot: z80.optional(z80.boolean())
 });
 var resolveIncludeLocalRoot = (options) => {
   if (!options) return true;