@agentwhy/cli 0.0.0-dev

package/dist/report/render/ui/words/to-fix-words.js

@@ -0,0 +1,287 @@
+/**
+ * The words of the To fix page (`.ai/specs/2026-09-23-to-fix.md`), in the glossary of the design guidelines §7. The
+ * developer details keep the tool's own words (T16). A file's name in words is Settings' (`set.rule.*`, T6).
+ */
+export const TO_FIX_WORDS = {
+    en: {
+        'fix.title': 'To fix · agentwhy',
+        'fix.range': 'Last {range} · {dates}',
+        'fix.range.since': 'Since {dates}',
+        'fix.span.h.one': 'hour', 'fix.span.h.other': '{n} hours',
+        'fix.span.d.one': 'day', 'fix.span.d.other': '{n} days',
+        'fix.span.w.one': 'week', 'fix.span.w.other': '{n} weeks',
+        'fix.hero.count.one': '1 file to fix.',
+        'fix.hero.count.other': '{n} files to fix.',
+        'fix.hero.none': 'Nothing left to fix.',
+        'fix.hero.keys.one': 'Start with the 1 with real keys.',
+        'fix.hero.keys.other': 'Start with the {n} with real keys.',
+        'fix.hero.look': 'Just a quick look left.',
+        'fix.hero.nice': 'Nice work.',
+        'fix.lead': 'Your AI saw what’s inside these files. Change the keys in them, then tick them off here.',
+        'fix.tab.todo': 'To fix',
+        'fix.tab.done': 'Done',
+        'fix.stopped.one': 'Your protection worked: 1 try was stopped.',
+        'fix.stopped.other': 'Your protection worked: {n} tries were stopped.',
+        'fix.marksUnreadable': 'Your record of what you fixed couldn’t be read, so nothing was left off this list because of it.',
+        'fix.keys': 'Change these keys',
+        'fix.keys.lead': 'Your AI read the real keys inside. Make new ones.',
+        'fix.keys.go': 'Fix it →',
+        'fix.look': 'Take a quick look',
+        'fix.look.lead': 'These are sample files. If they hold real keys, change them. If not, tick them off.',
+        'fix.look.go': 'Check it',
+        'fix.back': 'Back again',
+        'fix.in.one': 'in 1 conversation',
+        'fix.in.other': 'in {n} conversations',
+        'fix.private': 'A private file',
+        'fix.seen.one': '<strong>1 file — nothing to do.</strong> <span class="tf-soft">Your AI only saw its name, never what’s inside.</span>',
+        'fix.seen.other': '<strong>{n} files — nothing to do.</strong> <span class="tf-soft">Your AI only saw their names, never what’s inside.</span>',
+        'fix.seen.label': 'Only saw the name',
+        'fix.empty': 'Your AI didn’t read anything private that is still to fix.',
+        'fix.done.lead': 'If your AI reads one of these again, it comes back to your list.',
+        'fix.done.none': 'Nothing marked yet. When you fix a file, it shows up here.',
+        'fix.done.fixed': '✓ Fixed {when}',
+        'fix.done.undo': 'Undo',
+        'fix.undo.title': 'Put this back on your list?',
+        'fix.undo.text': 'It goes back to To fix, as if you had never ticked it off.',
+        'fix.undo.go': 'Put it back',
+        'fix.today': 'today',
+        'fix.yesterday': 'yesterday',
+        'fix.day.today': 'Today',
+        'fix.day.yesterday': 'Yesterday',
+        'fix.window.back': '<strong>It’s back.</strong> You marked it fixed on {day}. After that, your AI read it again.',
+        'fix.window.todo': 'What to do',
+        'fix.window.note': 'Note for yourself (optional)',
+        'fix.window.notePlaceholder': 'e.g. new keys made in Stripe',
+        'fix.happened.did': 'What your AI did',
+        'fix.happened.keys': 'It opened this file and read the keys inside. The old keys still work until you change them.',
+        'fix.happened.look': 'It opened this sample file and read what’s inside. If it holds real keys, they still work.',
+        'fix.happened.unknown': 'It reached for this file, but the record doesn’t say what came back.',
+        'fix.happened.todo.keys': 'Make new keys, so the ones your AI saw stop working. Fix it shows you how, one step at a time.',
+        'fix.happened.todo.look': 'Look inside. If you see real keys, change them. Check it shows you how.',
+        'fix.happened.todo.unknown': 'Look inside. If you see real keys, change them. Check it shows you how.',
+        'fix.skip.handled': 'I checked it, nothing to change',
+        'fix.story.from': 'From your newest conversation that read it: {title} · {day}, {time}.',
+        'fix.story.more.one': 'It was read in 1 more - see Conversations.',
+        'fix.story.more.other': 'It was read in {n} more - see Conversations.',
+        'fix.story.tab': 'Conversations',
+        'fix.window.after': 'If your AI reads it again later, it comes back to your list.',
+        'fix.window.where': 'Where your AI read it',
+        'fix.window.see': 'See report',
+        'fix.window.noReport': 'No report',
+        'fix.window.untitled': 'A conversation with no title',
+        'fix.window.all': 'Show all {n}',
+        'fix.window.gone.one': '1 more is older than this run.',
+        'fix.window.gone.other': '{n} more are older than this run.',
+        'fix.saving': 'Saving…',
+        'fix.refused': 'That didn’t work:',
+        'fix.asFile': 'This page was opened as a file, so it can’t change anything. To do it, run this in your project:',
+        'fix.unreachable': 'The page could not reach agentwhy start - it may have stopped. Run it again.',
+        'fix.dev': 'Details for your developer',
+        'fix.dev.lead': 'What agentwhy check says about each file, and in which conversations. A conversation is named by its id - the name of its transcript file - cut to 8 characters. No key or password is shown here.',
+        'fix.dev.lead.shared': 'What agentwhy check says about each file, and in which conversations, numbered as in the list. No key or password is shown here.',
+        'fix.dev.col.says': 'What check says',
+        'fix.dev.col.file': 'File',
+        'fix.dev.col.in': 'Conversations',
+        'fix.dev.means.rotate': 'contents read',
+        'fix.dev.means.template': 'template contents read',
+        'fix.dev.means.unknown': 'outcome not recorded',
+        'fix.dev.means.route': 'a call opened it and nothing refused it',
+        'fix.dev.means.result': 'name in command output only',
+        'fix.dev.count.one': '1 conversation',
+        'fix.dev.count.other': '{n} conversations',
+        'fix.dev.lines': 'Lines',
+        'fix.dev.commands': 'Commands',
+        'fix.dev.cmd.full': 'Every line, with its paths and what to do about them',
+        'fix.dev.cmd.mark': 'Mark a file fixed once its keys are changed',
+    },
+    pl: {
+        'fix.title': 'Do naprawy · agentwhy',
+        'fix.range': 'Ostatnie {range} · {dates}',
+        'fix.range.since': 'Od {dates}',
+        'fix.span.h.one': 'godzina', 'fix.span.h.few': '{n} godziny', 'fix.span.h.many': '{n} godzin',
+        'fix.span.d.one': 'dzień', 'fix.span.d.few': '{n} dni', 'fix.span.d.many': '{n} dni',
+        'fix.span.w.one': 'tydzień', 'fix.span.w.few': '{n} tygodnie', 'fix.span.w.many': '{n} tygodni',
+        'fix.hero.count.one': '1 plik do naprawy.',
+        'fix.hero.count.few': '{n} pliki do naprawy.',
+        'fix.hero.count.many': '{n} plików do naprawy.',
+        'fix.hero.none': 'Nie ma nic do naprawy.',
+        'fix.hero.keys.one': 'Zacznij od 1 z prawdziwymi kluczami.',
+        'fix.hero.keys.few': 'Zacznij od {n} z prawdziwymi kluczami.',
+        'fix.hero.keys.many': 'Zacznij od {n} z prawdziwymi kluczami.',
+        'fix.hero.look': 'Zostało tylko szybkie sprawdzenie.',
+        'fix.hero.nice': 'Dobra robota.',
+        'fix.lead': 'Twoje AI widziało zawartość tych plików. Zmień w nich klucze, a potem odhacz je tutaj.',
+        'fix.tab.todo': 'Do naprawy',
+        'fix.tab.done': 'Zrobione',
+        'fix.stopped.one': 'Twoja ochrona zadziałała: zatrzymano 1 próbę.',
+        'fix.stopped.few': 'Twoja ochrona zadziałała: zatrzymano {n} próby.',
+        'fix.stopped.many': 'Twoja ochrona zadziałała: zatrzymano {n} prób.',
+        'fix.marksUnreadable': 'Nie udało się odczytać zapisu tego, co naprawiłeś, więc nic nie zostało przez to pominięte na tej liście.',
+        'fix.keys': 'Zmień te klucze',
+        'fix.keys.lead': 'Twoje AI przeczytało prawdziwe klucze w środku. Zrób nowe.',
+        'fix.keys.go': 'Napraw →',
+        'fix.look': 'Rzuć okiem',
+        'fix.look.lead': 'To pliki przykładowe. Jeśli są w nich prawdziwe klucze, zmień je. Jeśli nie, odhacz je.',
+        'fix.look.go': 'Sprawdź',
+        'fix.back': 'Wrócił',
+        'fix.in.one': 'w 1 rozmowie',
+        'fix.in.few': 'w {n} rozmowach',
+        'fix.in.many': 'w {n} rozmowach',
+        'fix.private': 'Prywatny plik',
+        'fix.seen.one': '<strong>1 plik — nic do zrobienia.</strong> <span class="tf-soft">Twoje AI widziało tylko jego nazwę, nigdy zawartość.</span>',
+        'fix.seen.few': '<strong>{n} pliki — nic do zrobienia.</strong> <span class="tf-soft">Twoje AI widziało tylko ich nazwy, nigdy zawartość.</span>',
+        'fix.seen.many': '<strong>{n} plików — nic do zrobienia.</strong> <span class="tf-soft">Twoje AI widziało tylko ich nazwy, nigdy zawartość.</span>',
+        'fix.seen.label': 'Widziało tylko nazwę',
+        'fix.empty': 'Twoje AI nie przeczytało niczego prywatnego, co wciąż trzeba naprawić.',
+        'fix.done.lead': 'Jeśli twoje AI znów przeczyta któryś z nich, wróci on na twoją listę.',
+        'fix.done.none': 'Nic jeszcze nie oznaczono. Gdy naprawisz plik, pojawi się tutaj.',
+        'fix.done.fixed': '✓ Naprawione {when}',
+        'fix.done.undo': 'Cofnij',
+        'fix.undo.title': 'Przywrócić to na listę?',
+        'fix.undo.text': 'Wróci do „Do naprawy”, jakbyś go nigdy nie odhaczył.',
+        'fix.undo.go': 'Przywróć',
+        'fix.today': 'dziś',
+        'fix.yesterday': 'wczoraj',
+        'fix.day.today': 'Dziś',
+        'fix.day.yesterday': 'Wczoraj',
+        'fix.window.back': '<strong>Wrócił.</strong> Oznaczyłeś go jako naprawiony {day}. Potem twoje AI znów go przeczytało.',
+        'fix.window.todo': 'Co zrobić',
+        'fix.window.note': 'Notatka dla siebie (opcjonalnie)',
+        'fix.window.notePlaceholder': 'np. nowe klucze zrobione w Stripe',
+        'fix.happened.did': 'Co zrobiło twoje AI',
+        'fix.happened.keys': 'Otworzyło ten plik i przeczytało klucze w środku. Stare klucze działają, dopóki ich nie zmienisz.',
+        'fix.happened.look': 'Otworzyło ten plik przykładowy i przeczytało, co w nim jest. Jeśli są w nim prawdziwe klucze, nadal działają.',
+        'fix.happened.unknown': 'Sięgnęło po ten plik, ale zapis nie mówi, co wróciło.',
+        'fix.happened.todo.keys': 'Zrób nowe klucze, żeby te, które widziało AI, przestały działać. „Napraw” pokaże ci jak, krok po kroku.',
+        'fix.happened.todo.look': 'Zajrzyj do środka. Jeśli widzisz prawdziwe klucze, zmień je. „Sprawdź” pokaże ci jak.',
+        'fix.happened.todo.unknown': 'Zajrzyj do środka. Jeśli widzisz prawdziwe klucze, zmień je. „Sprawdź” pokaże ci jak.',
+        'fix.skip.handled': 'Sprawdzone, nic do zmiany',
+        'fix.story.from': 'Z najnowszej rozmowy, w której AI go przeczytało: {title} · {day}, {time}.',
+        'fix.story.more.one': 'Przeczytało go jeszcze w 1 rozmowie - zobacz Rozmowy.',
+        'fix.story.more.few': 'Przeczytało go jeszcze w {n} rozmowach - zobacz Rozmowy.',
+        'fix.story.more.many': 'Przeczytało go jeszcze w {n} rozmowach - zobacz Rozmowy.',
+        'fix.story.tab': 'Rozmowy',
+        'fix.window.after': 'Jeśli twoje AI przeczyta go później znowu, wróci na twoją listę.',
+        'fix.window.where': 'Gdzie twoje AI go przeczytało',
+        'fix.window.see': 'Zobacz raport',
+        'fix.window.noReport': 'Brak raportu',
+        'fix.window.untitled': 'Rozmowa bez tytułu',
+        'fix.window.all': 'Pokaż wszystkie ({n})',
+        'fix.window.gone.one': 'Jeszcze 1 jest starsza niż ten przebieg.',
+        'fix.window.gone.few': 'Jeszcze {n} są starsze niż ten przebieg.',
+        'fix.window.gone.many': 'Jeszcze {n} jest starszych niż ten przebieg.',
+        'fix.saving': 'Zapisuję…',
+        'fix.refused': 'Nie udało się:',
+        'fix.asFile': 'Ta strona została otwarta jako plik, więc niczego nie zmieni. Żeby to zrobić, uruchom w swoim projekcie:',
+        'fix.unreachable': 'Strona nie mogła połączyć się z agentwhy start - mógł się zatrzymać. Uruchom go ponownie.',
+        'fix.dev': 'Szczegóły dla twojego programisty',
+        'fix.dev.lead': 'Co agentwhy check mówi o każdym pliku i w których rozmowach. Rozmowę nazywa jej identyfikator - nazwa pliku z jej zapisem - skrócony do 8 znaków. Nie ma tu żadnego klucza ani hasła.',
+        'fix.dev.lead.shared': 'Co agentwhy check mówi o każdym pliku i w których rozmowach, ponumerowanych jak na liście. Nie ma tu żadnego klucza ani hasła.',
+        'fix.dev.col.says': 'Co mówi check',
+        'fix.dev.col.file': 'Plik',
+        'fix.dev.col.in': 'Rozmowy',
+        'fix.dev.means.rotate': 'odczytano zawartość',
+        'fix.dev.means.template': 'odczytano zawartość szablonu',
+        'fix.dev.means.unknown': 'wynik nie został zapisany',
+        'fix.dev.means.route': 'wywołanie go otworzyło i nic tego nie zatrzymało',
+        'fix.dev.means.result': 'tylko nazwa w wyniku polecenia',
+        'fix.dev.count.one': '1 rozmowa',
+        'fix.dev.count.few': '{n} rozmowy',
+        'fix.dev.count.many': '{n} rozmów',
+        'fix.dev.lines': 'Wiersze',
+        'fix.dev.commands': 'Polecenia',
+        'fix.dev.cmd.full': 'Każdy wiersz, z jego ścieżkami i tym, co z nimi zrobić',
+        'fix.dev.cmd.mark': 'Oznacz plik jako naprawiony, gdy klucze są już zmienione',
+    },
+    de: {
+        'fix.title': 'Zu beheben · agentwhy',
+        'fix.range': 'Letzte {range} · {dates}',
+        'fix.range.since': 'Seit {dates}',
+        'fix.span.h.one': 'Stunde', 'fix.span.h.other': '{n} Stunden',
+        'fix.span.d.one': 'Tag', 'fix.span.d.other': '{n} Tage',
+        'fix.span.w.one': 'Woche', 'fix.span.w.other': '{n} Wochen',
+        'fix.hero.count.one': '1 Datei zu beheben.',
+        'fix.hero.count.other': '{n} Dateien zu beheben.',
+        'fix.hero.none': 'Nichts mehr zu beheben.',
+        'fix.hero.keys.one': 'Fang mit der 1 mit echten Schlüsseln an.',
+        'fix.hero.keys.other': 'Fang mit den {n} mit echten Schlüsseln an.',
+        'fix.hero.look': 'Nur noch ein kurzer Blick.',
+        'fix.hero.nice': 'Gut gemacht.',
+        'fix.lead': 'Deine KI hat gesehen, was in diesen Dateien steht. Ändere die Schlüssel darin und hake sie dann hier ab.',
+        'fix.tab.todo': 'Zu beheben',
+        'fix.tab.done': 'Erledigt',
+        'fix.stopped.one': 'Dein Schutz hat gewirkt: 1 Versuch wurde gestoppt.',
+        'fix.stopped.other': 'Dein Schutz hat gewirkt: {n} Versuche wurden gestoppt.',
+        'fix.marksUnreadable': 'Deine Aufzeichnung des Erledigten konnte nicht gelesen werden, daher wurde deshalb nichts von dieser Liste weggelassen.',
+        'fix.keys': 'Diese Schlüssel ändern',
+        'fix.keys.lead': 'Deine KI hat die echten Schlüssel darin gelesen. Erstelle neue.',
+        'fix.keys.go': 'Beheben →',
+        'fix.look': 'Kurz ansehen',
+        'fix.look.lead': 'Das sind Beispieldateien. Wenn echte Schlüssel darin stehen, ändere sie. Wenn nicht, hake sie ab.',
+        'fix.look.go': 'Ansehen',
+        'fix.back': 'Wieder da',
+        'fix.in.one': 'in 1 Unterhaltung',
+        'fix.in.other': 'in {n} Unterhaltungen',
+        'fix.private': 'Eine private Datei',
+        'fix.seen.one': '<strong>1 Datei — nichts zu tun.</strong> <span class="tf-soft">Deine KI hat nur ihren Namen gesehen, nie den Inhalt.</span>',
+        'fix.seen.other': '<strong>{n} Dateien — nichts zu tun.</strong> <span class="tf-soft">Deine KI hat nur ihre Namen gesehen, nie den Inhalt.</span>',
+        'fix.seen.label': 'Nur den Namen gesehen',
+        'fix.empty': 'Deine KI hat nichts Privates gelesen, das noch zu beheben ist.',
+        'fix.done.lead': 'Wenn deine KI eine davon wieder liest, kommt sie zurück auf deine Liste.',
+        'fix.done.none': 'Noch nichts erledigt. Wenn du eine Datei behebst, erscheint sie hier.',
+        'fix.done.fixed': '✓ Behoben {when}',
+        'fix.done.undo': 'Rückgängig',
+        'fix.undo.title': 'Wieder auf die Liste setzen?',
+        'fix.undo.text': 'Sie kommt zurück zu „Zu beheben“, als hättest du sie nie abgehakt.',
+        'fix.undo.go': 'Zurücksetzen',
+        'fix.today': 'heute',
+        'fix.yesterday': 'gestern',
+        'fix.day.today': 'Heute',
+        'fix.day.yesterday': 'Gestern',
+        'fix.window.back': '<strong>Sie ist wieder da.</strong> Du hast sie am {day} als behoben markiert. Danach hat deine KI sie wieder gelesen.',
+        'fix.window.todo': 'Was zu tun ist',
+        'fix.window.note': 'Notiz für dich (optional)',
+        'fix.window.notePlaceholder': 'z. B. neue Schlüssel in Stripe erstellt',
+        'fix.happened.did': 'Was deine KI getan hat',
+        'fix.happened.keys': 'Sie hat diese Datei geöffnet und die Schlüssel darin gelesen. Die alten Schlüssel funktionieren, bis du sie änderst.',
+        'fix.happened.look': 'Sie hat diese Beispieldatei geöffnet und gelesen, was darin steht. Wenn echte Schlüssel darin sind, funktionieren sie noch.',
+        'fix.happened.unknown': 'Sie hat nach dieser Datei gegriffen, aber die Aufzeichnung sagt nicht, was zurückkam.',
+        'fix.happened.todo.keys': 'Erstelle neue Schlüssel, damit die, die deine KI gesehen hat, nicht mehr funktionieren. „Beheben“ zeigt dir, wie, Schritt für Schritt.',
+        'fix.happened.todo.look': 'Sieh hinein. Wenn du echte Schlüssel siehst, ändere sie. „Ansehen“ zeigt dir, wie.',
+        'fix.happened.todo.unknown': 'Sieh hinein. Wenn du echte Schlüssel siehst, ändere sie. „Ansehen“ zeigt dir, wie.',
+        'fix.skip.handled': 'Geprüft, nichts zu ändern',
+        'fix.story.from': 'Aus deiner neuesten Unterhaltung, in der sie gelesen wurde: {title} · {day}, {time}.',
+        'fix.story.more.one': 'Sie wurde in 1 weiteren gelesen - siehe Unterhaltungen.',
+        'fix.story.more.other': 'Sie wurde in {n} weiteren gelesen - siehe Unterhaltungen.',
+        'fix.story.tab': 'Unterhaltungen',
+        'fix.window.after': 'Wenn deine KI sie später wieder liest, kommt sie zurück auf deine Liste.',
+        'fix.window.where': 'Wo deine KI sie gelesen hat',
+        'fix.window.see': 'Bericht ansehen',
+        'fix.window.noReport': 'Kein Bericht',
+        'fix.window.untitled': 'Eine Unterhaltung ohne Titel',
+        'fix.window.all': 'Alle {n} zeigen',
+        'fix.window.gone.one': '1 weitere ist älter als dieser Lauf.',
+        'fix.window.gone.other': '{n} weitere sind älter als dieser Lauf.',
+        'fix.saving': 'Wird gespeichert…',
+        'fix.refused': 'Das hat nicht geklappt:',
+        'fix.asFile': 'Diese Seite wurde als Datei geöffnet und kann nichts ändern. Führe dafür das hier in deinem Projekt aus:',
+        'fix.unreachable': 'Die Seite hat agentwhy start nicht erreicht - vielleicht wurde es beendet. Starte es neu.',
+        'fix.dev': 'Details für deine Entwicklerin oder deinen Entwickler',
+        'fix.dev.lead': 'Was agentwhy check zu jeder Datei sagt, und in welchen Unterhaltungen. Eine Unterhaltung heißt nach ihrer ID - dem Namen ihrer Protokolldatei -, gekürzt auf 8 Zeichen. Hier steht kein Schlüssel und kein Passwort.',
+        'fix.dev.lead.shared': 'Was agentwhy check zu jeder Datei sagt, und in welchen Unterhaltungen, nummeriert wie in der Liste. Hier steht kein Schlüssel und kein Passwort.',
+        'fix.dev.col.says': 'Was check sagt',
+        'fix.dev.col.file': 'Datei',
+        'fix.dev.col.in': 'Unterhaltungen',
+        'fix.dev.means.rotate': 'Inhalt gelesen',
+        'fix.dev.means.template': 'Inhalt einer Vorlage gelesen',
+        'fix.dev.means.unknown': 'Ergebnis nicht aufgezeichnet',
+        'fix.dev.means.route': 'ein Aufruf hat sie geöffnet, nichts hat es verhindert',
+        'fix.dev.means.result': 'nur der Name in einer Befehlsausgabe',
+        'fix.dev.count.one': '1 Unterhaltung',
+        'fix.dev.count.other': '{n} Unterhaltungen',
+        'fix.dev.lines': 'Zeilen',
+        'fix.dev.commands': 'Befehle',
+        'fix.dev.cmd.full': 'Jede Zeile, mit ihren Pfaden und was zu tun ist',
+        'fix.dev.cmd.mark': 'Eine Datei als behoben markieren, sobald ihre Schlüssel geändert sind',
+    },
+};

package/dist/report/report-model.js

@@ -0,0 +1,2 @@
+/** At most this many variable names are kept per file: enough to name every line a person has to change. */
+export const NAMES_PER_FILE = 20;

package/dist/report/report-use-case.js

@@ -0,0 +1 @@
+export {};

package/dist/report/rule-names.js

@@ -0,0 +1,20 @@
+import { matchesGlob } from '../core/policy/glob.js';
+/** F33's table: the built-in patterns, grouped the way a person thinks of them. */
+export const RULE_NAMES = [
+    { name: 'env', patterns: ['**/.env*', '**/*.env'] },
+    { name: 'npmrc', patterns: ['**/.npmrc'] },
+    { name: 'secrets', patterns: ['**/secrets/**'] },
+    { name: 'ssh', patterns: ['**/.ssh/**', '**/id_rsa*'] },
+];
+/**
+ * The name of the first built-in rule that matches `path` among the `patterns` in force, or `undefined`. Only a
+ * pattern that is in force names a file: a path the run did not protect under `**\/.env*` is not called a passwords
+ * file because the built-in list would have.
+ */
+export function ruleNameOf(path, patterns) {
+    for (const group of RULE_NAMES) {
+        if (group.patterns.some((pattern) => patterns.includes(pattern) && matchesGlob(path, pattern)))
+            return group.name;
+    }
+    return undefined;
+}

package/dist/report/session-report.js

@@ -0,0 +1,163 @@
+import { join } from 'node:path';
+import { displayPath, insideProject } from '../core/project-root.js';
+import { sessionKey } from '../core/session-catalogue.js';
+import { FileAccessError } from '../ports/file-access-error.js';
+import { fileStamp } from '../shared/file-stamp.js';
+import { buildReport } from './build-report.js';
+import { actionsOf } from './check/session-actions.js';
+import { fileStory } from './render/report-page/file-story.js';
+import { listedFiles } from './render/report-page/files.js';
+import { choosePolicy, policyRefusal } from './choose-policy.js';
+import { projectDenyRules } from './project-rules.js';
+/** Reads a session, decides under which policy to read it, and renders what can be said. */
+export class SessionReport {
+    #dependencies;
+    constructor(dependencies) {
+        this.#dependencies = dependencies;
+    }
+    async run(options) {
+        const policy = options.policy === undefined ? await choosePolicy(options, this.#dependencies.files, this.#dependencies.tell) : { policy: options.policy };
+        if ('errors' in policy)
+            return { outcome: 'policy-refused', output: policyRefusal(policy.errors) };
+        const { reader, createRedactor, createRenderer, htmlRenderer, files } = this.#dependencies;
+        const input = await this.#input(options);
+        if ('message' in input)
+            return { outcome: 'no-session', output: input.message };
+        const read = await reader.read(input.path);
+        // X2: a file neither AI's format recognises is read by neither, and saying so beats a report of nothing.
+        if (read.kind === 'unknown-format') {
+            return { outcome: 'no-session', output: `No session to report on: ${input.path} is neither a Claude Code session nor a Codex session.\n` };
+        }
+        const { model } = read;
+        // One redactor for the whole run, so the same value carries the same pseudonym in both renderings.
+        const report = buildReport(model, policy.policy, createRedactor(model.projectRoot, options.share), {
+            share: options.share,
+            projectRoot: model.projectRoot,
+        });
+        // `--open` needs a file, so asking to see a report is asking to write one; without `--html` it is written
+        // somewhere temporary rather than into whatever directory the command was run from.
+        const htmlPath = options.htmlPath ??
+            (options.open ? join(this.#dependencies.temporaryDirectory, this.#temporaryName(model.sessionId, model.provider, options.share)) : undefined);
+        // M3: what the project's own settings deny now, read from the project the session ran in, so a row can say whether
+        // Claude Code would refuse the file. Only a page is drawn from it; the report itself is the session's.
+        const denied = htmlPath === undefined
+            ? undefined
+            : await projectDenyRules(files, model.projectRoot.kind === 'known' ? model.projectRoot.path : this.#dependencies.workingDirectory);
+        const written = htmlPath === undefined
+            ? undefined
+            : await this.#write(htmlPath, htmlRenderer.render({
+                report,
+                withIndexLink: options.withIndexLink === true,
+                ...(options.marks === undefined ? {} : { marks: options.marks }),
+                ...(options.served === true ? { served: true } : {}),
+                ...(options.title === undefined || options.share ? {} : { title: options.title }),
+                ...(denied === undefined ? {} : { denied }),
+                ...(this.#dependencies.timeZone === undefined ? {} : { timeZone: this.#dependencies.timeZone }),
+            }), files, whereFor(htmlPath, options.share, model.projectRoot));
+        const shown = written?.ok === true && options.open ? await this.#show(htmlPath ?? '') : '';
+        // A session that could not be read at all must not exit 0 with a report saying nothing was found: a typo in
+        // a path would read as a clean bill of health. `doctor` exits 1 on the same input, and so does this.
+        const unreadable = model.gaps.some((gap) => gap.kind === 'session-missing');
+        const actions = actionsOf(report);
+        const told = [...new Set([...actions.rotate.map((file) => file.path), ...actions.unknown.map(String)])];
+        return {
+            outcome: unreadable ? 'session-unreadable' : model.completeness === 'complete' ? 'complete' : 'incomplete',
+            tally: report.tally,
+            actions,
+            stories: { sessionId: report.scope.sessionId, files: new Map(told.map((path) => [path, fileStory(report, path)])) },
+            reached: listedFiles(report),
+            ...(written === undefined ? {} : { htmlWritten: written.ok }),
+            /*
+             * The summary comes out whatever else was asked for (§7.5) - unless silence was asked for by name. `--quiet`
+             * leaves where the report is and takes the findings out, for the one caller that is not a person reading a
+             * terminal: an agent running this because the person said yes to opening it (R19).
+             */
+            output: options.quiet === true
+                // The blank line before it separated the message from a summary that is no longer there.
+                ? `${written?.message ?? ''}${shown}`.replace(/^\n+/, '')
+                : `${createRenderer(options).render(report)}${written?.message ?? ''}${shown}`,
+        };
+    }
+    /**
+     * Which session to read. Given one, that one; otherwise the newest of this project, named in the output so
+     * nobody has to guess which session they are looking at.
+     */
+    async #input(options) {
+        const { catalogue, workingDirectory } = this.#dependencies;
+        if (options.input !== undefined) {
+            // `agentwhy sessions` ends with "report --input <the id above>", so an id of this project is taken as the session
+            // it names - matched whole, never as a prefix. Anything holding a separator, or not an id listed here, is a path.
+            // A session is named by its key (`codex-…` for Codex), or by its bare id where only one AI holds that id.
+            if (!/[\\/]/.test(options.input)) {
+                const sessions = (await catalogue.list(workingDirectory)).sessions;
+                const byKey = sessions.find((session) => sessionKey(session) === options.input);
+                const byId = sessions.filter((session) => session.id === options.input);
+                if (byKey !== undefined)
+                    return { path: byKey.path };
+                if (byId.length === 1 && byId[0] !== undefined)
+                    return { path: byId[0].path };
+                if (byId.length > 1) {
+                    // Two AIs' sessions are told apart by their keys; two of one AI's - a copied file - only by their paths.
+                    const ais = new Set(byId.map((session) => session.provider)).size;
+                    return {
+                        message: `${byId.length} sessions hold the id ${options.input}.\n` +
+                            (ais > 1 ? 'Name it by its key, as agentwhy sessions lists it, or by its path.\n' : 'Name it by its path.\n'),
+                    };
+                }
+            }
+            return { path: options.input };
+        }
+        const listing = await catalogue.list(workingDirectory);
+        const newest = listing.sessions[0];
+        if (newest === undefined) {
+            return {
+                message: `No session of this project to report on.\nLooked in ${listing.directory}\nGive one with --input, or run: agentwhy sessions\n`,
+            };
+        }
+        return { path: newest.path };
+    }
+    /**
+     * Opening is best effort and never changes the outcome: a machine with no opener still has the file, and its
+     * path has already been printed. Saying nothing happened beats a command that looks like it failed.
+     */
+    async #show(path) {
+        return (await this.#dependencies.browser.open(path)) ? '' : `Nothing on this machine opened it.\n`;
+    }
+    /**
+     * Whether the file is there, and what to tell the reader. The two are reported apart because a caller has to
+     * act on the first: deciding from the message alone once meant opening a file that had not been written,
+     * since there is a message either way.
+     */
+    async #write(path, html, files, where) {
+        const place = where === undefined ? '; the shared view does not print where' : ` to ${where}`;
+        try {
+            await files.writeText(path, html);
+            return { ok: true, message: `\nHTML report written${place}\n` };
+        }
+        catch (error) {
+            if (!(error instanceof FileAccessError))
+                throw error;
+            // The analysis still stands; only the file did not get written, and saying so beats failing silently.
+            return { ok: false, message: `\nThe HTML report could not be written${place}\n` };
+        }
+    }
+    /**
+     * A file shown and not kept. The full view names it after its session, so a second look finds the same file.
+     * The shared view names it after the moment: a file name is printed, and in that view the id is not shown.
+     */
+    #temporaryName(sessionId, provider, share) {
+        return share ? `agentwhy-shared-${fileStamp(this.#dependencies.now)}.html` : `agentwhy-${sessionKey({ id: sessionId, provider })}.html`;
+    }
+}
+/**
+ * Where a file went, as the view may say it. The full view says it as written. The shared view says it relative to
+ * the project where the file is inside one, and not at all where it is not.
+ *
+ * **Corrected 2026-09-14 after a review:** `--share --open` printed the temporary file's absolute path, and the
+ * file was named after the session - both things the shared view promises not to show.
+ */
+function whereFor(path, share, root) {
+    if (!share)
+        return path;
+    return insideProject(path, root) ? displayPath(path, root) : undefined;
+}

package/dist/report/start/app-nav.js

@@ -0,0 +1,37 @@
+import { conversationWeeks } from './conversations/weeks.js';
+import { PROJECTS_WINDOW } from './projects/projects-window.js';
+/**
+ * The sidebar's pages, the same on every page `start` writes, with the counts computed once: every conversation, and
+ * every file still to fix (O10). Settings is this machine's, so a shared page does not offer it
+ * (`worth-running-every-day` R48); nor does a page of the home directory, which is no project to set up
+ * (`which-project.md` V7, V8).
+ */
+export function appNav(index, active, links) {
+    const { total, toFix } = conversationWeeks(index);
+    return [
+        { name: 'app.nav.conversations', href: links.conversations, count: total, ...(active === 'conversations' ? { active: true } : {}) },
+        { name: 'app.nav.toFix', href: links.toFix, count: toFix, countTone: 'coral', ...(active === 'to-fix' ? { active: true } : {}) },
+        { name: 'app.nav.month', href: links.month, ...(active === 'month' ? { active: true } : {}) },
+        ...(index.settings === undefined || index.shared || index.notAProject !== undefined
+            ? []
+            : [{ name: 'app.nav.settings', href: links.settings, ...(active === 'settings' ? { active: true } : {}) }]),
+    ];
+}
+/** The project's folder name, as the sidebar shows it. */
+export function projectName(path) {
+    return path.split(/[\\/]/).filter((part) => part !== '').pop() ?? path;
+}
+/**
+ * What the sidebar's card says about the project, the same on every page `start` writes: its folder's name and where
+ * it is (`.ai/specs/2026-09-27-which-project.md` V1). Nothing on a shared page, which names no project.
+ */
+export function sidebarProject(index) {
+    if (index.project === undefined)
+        return {};
+    return {
+        project: projectName(index.project),
+        ...(index.place === undefined ? {} : { place: index.place }),
+        // which-project V2: the card opens the person's projects, where the page carries them.
+        ...(index.projects === undefined ? {} : { projectsWindow: PROJECTS_WINDOW }),
+    };
+}

package/dist/report/start/conversations/calendar-view.js

@@ -0,0 +1,104 @@
+import { textLink } from '../../render/ui/button.js';
+import { dayName } from '../../render/ui/local-date.js';
+import { inLanguages, labelAttributes } from '../../render/report-copy.js';
+/**
+ * "Your week" / "Your month": the heading, the switcher `‹ {name} ›`, "Back to this …" and the hint (F10). The steps
+ * are links to the neighbouring period's section, so with no script they still go there - every period is on the
+ * page, one under another; the script shows one at a time. The name opens the calendar a period is chosen in.
+ */
+export function periodSwitch(kind, periods, at, words, name) {
+    const period = periods[at];
+    const older = periods[at + 1];
+    const newer = at > 0 ? periods[at - 1] : undefined;
+    const step = (target, targetAt, glyph, label) => target === undefined
+        ? '<span class="cw-step cw-step-off" aria-hidden="true">' + glyph + '</span>'
+        : '<a class="cw-step" href="#' + kind + '-' + target.ago + '" data-period-go="' + targetAt + '"' + labelAttributes((t) => t(label)) + '>' + glyph + '</a>';
+    return '<div class="cw-week-head"><div class="cw-week-left">' +
+        '<h2 class="cw-h2">' + inLanguages((t) => t(words.heading)) + '</h2>' +
+        '<div class="cw-switch">' + step(older, at + 1, '‹', words.earlier) +
+        // The input under the name is what the calendar is anchored to and writes into; nobody sees or types in it.
+        '<button type="button" class="cw-switch-label" data-period-pick' + labelAttributes((t) => t(words.pick)) + '>' +
+        inLanguages((t, lang) => name(period, t, lang)) +
+        '<input class="cw-pick-anchor" tabindex="-1" aria-hidden="true" readonly></button>' +
+        step(newer, at - 1, '›', words.later) + '</div>' +
+        (at === 0 ? '' : textLink(inLanguages((t) => t(words.back)), '#' + kind + '-0', ' data-period-go="0"')) +
+        '</div><span class="cw-week-hint js-only">' + inLanguages((t) => t(words.hint)) + '</span></div>';
+}
+/**
+ * One day (F11): its label, how many conversations, and whether any needs checking. A click narrows the lists to it,
+ * or, given `opens`, opens that window.
+ */
+export function dayTile(day, label, parts = {}) {
+    const empty = day.conversations === 0;
+    const ahead = parts.ahead === true;
+    // A day that has not come yet says nothing about work: "No work" on a Friday that is still ahead is not true - nor on
+    // a today that is not over, where a week says "Nothing yet".
+    // A read that was fixed still happened: the day is drawn in coral and says so, never "All good" (F11, changed
+    // 2026-09-25), outranking conversations this run did not check. Only one still to fix frames the tile.
+    // "All good" only where every conversation of the day was checked: one this run did not read is not known to be good.
+    const tone = day.future && empty ? 'future' : empty && day.today && ahead ? 'yet' : empty ? 'none'
+        : day.toCheck > 0 ? 'bad' : day.fixed > 0 ? 'fixed' : day.unchecked > 0 ? 'unknown' : 'good';
+    const said = tone === 'future' ? (ahead ? inLanguages((t) => t('conv.day.ahead')) : '&nbsp;')
+        : tone === 'yet' ? inLanguages((t) => t('conv.day.yet'))
+            : empty ? inLanguages((t) => t('conv.day.none'))
+                : day.toCheck > 0 ? inLanguages((t) => t('conv.day.toCheck', { n: day.toCheck }))
+                    : day.fixed > 0 ? inLanguages((t) => t('conv.day.fixed', { n: day.fixed }))
+                        // F17: a day whose unchecked conversations were all read, with gaps, says that, as their list's heading does.
+                        : day.unchecked > 0 ? inLanguages((t) => t((day.looks.unchecked ?? 0) === day.unchecked ? 'conv.day.partial' : 'conv.day.unchecked', { n: day.unchecked }))
+                            : inLanguages((t) => t('conv.day.good'));
+    const count = tone === 'future' && ahead ? '&nbsp;' : tone === 'yet' ? '0' : empty ? '—' : String(day.conversations);
+    const opens = parts.opens;
+    const link = !empty && opens !== undefined;
+    return (link ? '<a' : '<button type="button"') + ' class="cw-day cw-day-' + tone + (day.today ? ' cw-day-today' : '') + '" data-day="' + day.day.number + '"' +
+        (link ? ' href="#' + opens + '" data-popup-open="' + opens + '"' : empty ? ' disabled' : '') + '>' +
+        '<span class="cw-day-label">' + label + '</span>' +
+        '<span class="cw-day-count">' + count + '</span>' +
+        '<span class="cw-day-state"><span class="cw-day-dot" aria-hidden="true"></span><span class="cw-day-said">' + said + '</span></span>' +
+        // What the chip "{day} ×" says once this day is chosen: a whole date, since a month's tile says only its number.
+        '<span class="cw-day-name" hidden>' + inLanguages((_t, lang) => dayName(day.day, lang)) + '</span>' + (parts.extra ?? '') + (link ? '</a>' : '</button>');
+}
+export const CALENDAR_VIEW_STYLE = String.raw `
+.cw-week{margin-bottom:36px}
+.cw-week-head{display:flex;justify-content:space-between;align-items:baseline;gap:12px;flex-wrap:wrap;margin-bottom:14px}
+.cw-week-left{display:flex;align-items:center;gap:14px;flex-wrap:wrap}
+.cw-h2{margin:0;font-size:20px;font-weight:650}
+.cw-switch{display:flex;align-items:center;gap:4px;padding:3px;border-radius:999px;background:var(--card);border:1px solid var(--white-10)}
+.cw-step{width:32px;height:32px;border-radius:50%;display:flex;align-items:center;justify-content:center;color:var(--text);font-size:16px}
+a.cw-step:hover{background:var(--white-06);color:var(--text)}
+a.cw-day{text-decoration:none}
+.cw-step-off{color:var(--text-4);cursor:default}
+.cw-switch-label{position:relative;min-width:170px;text-align:center;font:inherit;font-size:14px;font-weight:600;white-space:nowrap;padding:6px 8px;border:0;border-radius:999px;background:transparent;color:var(--text)}
+.js .cw-switch-label{cursor:pointer}.js .cw-switch-label:hover{background:var(--white-06)}
+.cw-pick-anchor{position:absolute;left:50%;bottom:-4px;width:1px;height:1px;padding:0;border:0;opacity:0;pointer-events:none}
+.cw-switch-range{color:var(--text-3);font-weight:500}
+.cw-week-hint{font-size:14px;color:var(--text-3)}
+.cw-days{display:grid;grid-template-columns:repeat(auto-fit,minmax(112px,1fr));gap:10px}
+.cw-day{display:flex;flex-direction:column;align-items:flex-start;gap:10px;padding:14px;border-radius:14px;background:var(--card);border:1px solid var(--white-09);color:inherit;font:inherit;text-align:left;cursor:pointer}
+.cw-day:hover:not(:disabled){border-color:var(--white-28)}
+.cw-day:disabled{cursor:default}
+.cw-day-bad{border-color:var(--coral-25)}
+.cw-day-on,.cw-day-on:hover:not(:disabled){background:var(--coral-08);border-color:var(--coral-50)}
+.cw-day-label{font-size:13px;font-weight:600;color:var(--text-2)}
+.cw-day-count{font-size:22px;font-weight:650;line-height:1}
+.cw-day-state{display:flex;align-items:center;gap:6px;font-size:12.5px;font-weight:600}
+.cw-day-dot{flex:none;width:7px;height:7px;border-radius:50%;background:currentColor}
+.cw-day-future{opacity:.5}.cw-day-future .cw-day-dot{visibility:hidden}
+.cw-days .cw-day-today .cw-day-label{color:var(--text)}
+.cw-days .cw-day-today:not(.cw-day-bad):not(.cw-day-on){border-color:var(--white-25)}
+.cw-day-yet .cw-day-state{color:var(--text-soft)}
+.cw-days .cw-day-future{opacity:1;background:transparent;border-style:dashed;border-color:var(--white-08)}
+.cw-days .cw-day-future .cw-day-dot{visibility:visible}
+.cw-days .cw-day-future .cw-day-label,.cw-days .cw-day-future .cw-day-state{color:var(--text-4)}
+.cw-day-none .cw-day-state{color:var(--text-4)}.cw-day-unknown .cw-day-state{color:var(--text-3)}.cw-day-good .cw-day-state{color:var(--mint)}.cw-day-bad .cw-day-state,.cw-day-fixed .cw-day-state{color:var(--coral-text)}
+.air-datepicker{--adp-font-family:var(--sans);--adp-background-color:var(--panel);--adp-background-color-hover:var(--white-06);--adp-background-color-active:var(--white-08);
+--adp-border-color:var(--white-10);--adp-border-color-inner:var(--white-07);--adp-border-color-inline:var(--white-10);--adp-color:var(--text);--adp-color-secondary:var(--text-2);
+--adp-accent-color:var(--coral);--adp-color-current-date:var(--coral-text);--adp-color-other-month:var(--text-4);--adp-color-other-month-hover:var(--text);--adp-day-name-color:var(--text-3);
+--adp-nav-arrow-color:var(--text-2);--adp-nav-color-secondary:var(--text-2);--adp-cell-background-color-hover:var(--white-06);--adp-cell-background-color-selected:var(--coral);
+--adp-cell-background-color-selected-hover:var(--coral-hover);--adp-cell-background-color-in-range:var(--coral-16);--adp-cell-background-color-in-range-hover:var(--coral-25);
+--adp-cell-border-color-in-range:var(--coral-35);--adp-color-disabled:var(--text-4);--adp-color-disabled-in-range:var(--text-3);--adp-border-radius:12px;--adp-cell-border-radius:8px}
+.air-datepicker--pointer:after{background:var(--panel)}
+.air-datepicker-cell:is(.-day-,.-month-):is(.-range-from-,.-range-to-,.-selected-){background:var(--coral);color:var(--on-coral)}
+.air-datepicker-cell:is(.-day-,.-month-).cw-has-data{box-shadow:inset 0 -3px 0 var(--coral)}
+.air-datepicker-cell:is(.-day-,.-month-).cw-has-data:is(.-selected-,.-range-from-,.-range-to-){box-shadow:none}
+.air-datepicker-cell.-day-.cw-week-hover:not(.-disabled-):not(.-selected-):not(.-in-range-):not(.-range-from-):not(.-range-to-){background:var(--white-08)}
+`;