@agentwhy/cli 0.1.0 → 0.2.1

package/dist/report/start/session-start.js

@@ -1,7 +1,10 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { dirname, join, relative, resolve } from 'node:path';
-import { sessionKey } from '../../core/session-catalogue.js';
+import { noStoreAnywhere, sessionKey } from '../../core/session-catalogue.js';
 import { splitBySince } from '../../core/session-filter.js';
 import { recogniseAll } from '../../core/session-titles.js';
+import { isDirectory } from '../../ports/directory-reader.js';
 import { FileAccessError } from '../../ports/file-access-error.js';
 import { contentVersion } from '../../shared/content-version.js';
 import { fileStamp } from '../../shared/file-stamp.js';
@@ -16,26 +19,30 @@ import { indexHandler } from './serve/index-handler.js';
 import { movedPage } from './projects/moved-page.js';
 import { nearestProject } from '../../core/nearest-project.js';
 import { translator } from '../render/report-copy.js';
-import { hookComplete, readSettingsFile, setUpBy } from './settings-files.js';
+import { hookComplete, readSettingsFile } from './settings-files.js';
 import { indexProjects } from './projects/index-projects.js';
 import { NOT_A_PROJECT } from '../../setup/project-setup.js';
 import { notAProject } from '../../setup/not-a-project.js';
 import { inTemporarySpace } from './projects/temporary-space.js';
+import { inChatFolder } from '../../adapter/codex/contract/chat-folders.js';
 import { behind } from '../../setup/behind.js';
 import { modeChange, onlyTakesOut, settingsChangeToSetup } from './serve/settings-setup.js';
 import { DEFAULT_THRESHOLD } from '../watch/agent-alert.js';
 import { DEFAULT_CHANNELS, DEFAULT_CLEAN, DEFAULT_SAID_AS } from '../watch/notice-choices.js';
 import { actionsAfterMarks, markLines, marksInRange, standingMarks } from '../check/marks.js';
 import { finishOnboarding } from './onboarding/finish-onboarding.js';
+import { welcomeIn } from './onboarding/welcome-decision.js';
 import { WHO_STEP } from './onboarding/onboarding-script.js';
 import { repositoryAbove } from './repository.js';
-import { pageStopped, startSaid } from './render/start-words.js';
+import { pageStopped, quietlySaid, startSaid } from './render/start-words.js';
 import { PROJECT_HOOKS } from '../../adapter/codex/contract/hooks.js';
+import { codexCheckState } from '../../adapter/codex/settings/codex-check.js';
 import { codexRefuseIn } from '../../adapter/codex/settings/codex-hooks.js';
 import { SETTINGS_FILES } from '../../adapter/claude-code/contract/settings.js';
 import { rulesReadByHooks } from '../../adapter/claude-code/settings/hook-entries.js';
 import { fileRulesIn, isDenied } from '../../adapter/claude-code/settings/deny-entries.js';
 import { fileRulePathOf, toPattern } from '../../adapter/claude-code/policy/deny-rules.js';
+import { nothingSavedHere } from '../nothing-saved-here.js';
 const DAY = 86_400_000;
 /**
  * The patterns the page lists: the ones the policy read, and then any rule the project's own settings files hold
@@ -91,12 +98,19 @@ export class SessionStart {
         // which-project V16: a run the onboarding's project step switched to opens that project's onboarding, whatever W23
         // says - the person is in the middle of a setup, and the step chose this project for it.
         const arrivedFrom = this.#dependencies.arrivedFrom;
-        const opensWelcome = welcome !== undefined && (arrivedFrom === 'step' || (options.open && welcome.opens));
+        // AW1 (`the-address-opens-the-welcome`): an address asked for with `--serve` is opened by a person - the one an AI app
+        // sends - so it names the page a browser this run opened would show. Not in an empty project (AW2): every empty
+        // listing seen there came from a place that cannot see the person's conversations, whose address nobody can open.
+        const anyConversation = listing.found && listing.sessions.length > 0;
+        const opensWelcome = welcome !== undefined && (arrivedFrom === 'step' || ((options.open || (options.serve === true && anyConversation)) && welcome.opens));
         if ((!listing.found || listing.sessions.length === 0) && !opensWelcome) {
             return {
                 outcome: 'no-sessions',
                 // Every place looked in, one per AI: "looked in the wrong place" is only answerable where each is named.
-                output: noSessions(listing.searched.map((place) => place.directory).join(' and ') || listing.directory, projectName(workingDirectory), served && options.open, welcome?.setUp === true, notHere),
+                // R28, amended 2026-10-01: at a terminal only - a run that would open a page keeps W1a's words, naming no command.
+                output: noStoreAnywhere(listing) && notHere === undefined && !(served && options.open)
+                    ? nothingSavedHere('Claude Code or Codex', listing.searched.map((place) => place.directory).join(' and '), 'use Claude Code or Codex here, then run agentwhy start again - or run agentwhy init now, to be protected in Claude Code before there is history to check.')
+                    : noSessions(listing.searched.map((place) => place.directory).join(' and ') || listing.directory, projectName(workingDirectory), served && options.open, welcome?.setUp === true, notHere),
             };
         }
         // Resolved against the working directory given, never against whatever the process happens to be standing in.
@@ -125,6 +139,9 @@ export class SessionStart {
         // F55: a conversation a person once asked to check is read by every run after, as if it were in range - the button is
         // pressed once, not every morning. A list that cannot be read leaves the run its range, as it always had.
         const asked = new Set(this.#dependencies.checked === undefined ? [] : (await this.#dependencies.checked.read()).ids);
+        // SW10: the conversation a run was asked to open is written however long ago it was active. Not recorded as checked.
+        if (options.session !== undefined)
+            asked.add(options.session);
         // M5: each report is drawn with the marks that still hold for its session. A shared page carries none (R37), and a
         // record that cannot be read leaves every file to do rather than guessing which were done (invariant 4).
         const standingAtStart = options.share ? new Map() : standingMarks((await this.#dependencies.marks.read()).records);
@@ -160,14 +177,15 @@ export class SessionStart {
             const { inRange, outOfRange: older } = splitBySince(sessions, options.since.since);
             const generatedIds = new Set([...inRange, ...older.filter((session) => asked.has(sessionKey(session)))].map((session) => sessionKey(session)));
             // A title is user content, and a shared page is one that leaves this machine: it is not even read. A session that
-            // has grown may have a new last prompt, so its title is read again with it. A Codex conversation is named in a file
-            // of Codex's own, seconds after it starts (`what-codex-wrote` §2.9, X28a) - found by the maintainer, a row drawn in
-            // those seconds stayed untitled once its rollout stopped changing - so a Codex row with no title asks again; the
-            // names are a lookup in a list read again only where it changed.
+            // has grown may have a new last prompt, so its title is read again with it. Both desktop apps name a conversation
+            // in a file of their own, seconds after it starts (`what-codex-wrote` §2.9, X28a; `claude-desktop-conversations`
+            // CD5) - found by the maintainer, a row drawn in those seconds stayed untitled once its transcript stopped
+            // changing - so a row with no title asks again. That ask is a lookup in the app's own names, read again only
+            // where they changed; the adapter keeps an unchanged transcript's tail, so it is not read again (CD5).
             if (!options.share) {
                 const stale = sessions.filter((session) => {
                     const known = titles.get(sessionKey(session));
-                    return known?.modifiedAt !== session.modifiedAt || (session.provider === 'codex' && known.title === undefined);
+                    return known?.modifiedAt !== session.modifiedAt || known.title === undefined;
                 });
                 const read_ = await recogniseAll(this.#dependencies.titles, stale);
                 stale.forEach((session, at) => titles.set(sessionKey(session), { modifiedAt: session.modifiedAt, ...read_[at] }));
@@ -365,7 +383,9 @@ export class SessionStart {
         /*
          * R75: the conversations and the marks as they are now, drawn into every page. A page read while a refresh runs is
          * answered by that refresh; a write is not, because the refresh it would join began before the write - it waits,
-         * then runs again. A listing that finds nothing now (a directory moved, a disk gone) leaves the pages as they were.
+         * then runs again. A listing that finds nothing now (a directory moved, a disk gone) leaves the conversations as
+         * they were, and the pages are still drawn again: Settings shows what the files hold (R60), in a project with no
+         * conversations yet too (W1a).
          */
         let refreshing;
         const refresh = async (when) => {
@@ -375,16 +395,16 @@ export class SessionStart {
                 await refreshing;
             const running = (async () => {
                 const now_ = await catalogue.list(workingDirectory);
-                if (!now_.found || now_.sessions.length === 0)
-                    return undefined;
-                // A policy that cannot be read now leaves the one the pages were drawn under, rather than rules nobody chose.
-                const again = await choosePolicy(options, policyFiles, this.#dependencies.tell).catch(() => undefined);
-                if (again !== undefined && !('errors' in again))
-                    policyNow = again.policy;
-                const refusal = await sync(now_.sessions, standingMarks((await this.#dependencies.marks.read()).records));
-                if (refusal !== undefined)
-                    return refusal;
-                reportsServed();
+                if (now_.found && now_.sessions.length > 0) {
+                    // A policy that cannot be read now leaves the one the pages were drawn under, rather than rules nobody chose.
+                    const again = await choosePolicy(options, policyFiles, this.#dependencies.tell).catch(() => undefined);
+                    if (again !== undefined && !('errors' in again))
+                        policyNow = again.policy;
+                    const refusal = await sync(now_.sessions, standingMarks((await this.#dependencies.marks.read()).records));
+                    if (refusal !== undefined)
+                        return refusal;
+                    reportsServed();
+                }
                 await writePages((await build()).index);
                 return undefined;
             })();
@@ -428,10 +448,14 @@ export class SessionStart {
             if (chosen !== undefined)
                 return switchToFolder(chosen, from);
             const project = listed?.projects.find((one) => one.id === id);
-            if (project === undefined || !project.exists || this.#notAProject(project.path) !== undefined)
+            if (project === undefined || project.folder === 'gone' || this.#notAProject(project.path) !== undefined)
                 return { failed: 'That project is not one this page listed.' };
             if (relative(project.path, workingDirectory) === '')
                 return { failed: 'That project is the one shown already.' };
+            // which-project V10b: a folder the system guards was not looked into while listing; it is now, because the person
+            // picked it - so the system asks them, if at all, about something they did.
+            if (project.folder === 'not-looked' && !(await isDirectory(this.#dependencies.directories, project.path)))
+                return { failed: 'This folder isn’t there anymore.' };
             return switchToFolder(project.path, from);
         };
         // V12: a folder chosen in the computer's window - shown at once where it is a project or near none, and where it lies
@@ -520,16 +544,23 @@ export class SessionStart {
                 },
             })
             : undefined;
+        // PF2: the address and its token, where a later `--detach` looks for a server to reuse. Never a shared page's.
+        if (serving !== undefined && !options.share)
+            await this.#dependencies.pageServer?.write(serving.urlOf(''));
         // W23: the onboarding is opened in place of the index where it is to be; the index otherwise, as it always was. A run
         // a page switched to opens it at *Who*: the project was chosen on the way here (which-project V16).
-        const openAt = serving === undefined ? indexPath
-            : opensWelcome && onboarding !== undefined ? serving.urlOf(onboarding.file) + (arrivedFrom === undefined ? '' : `#${WHO_STEP}`)
-                : serving.url;
+        // SW10: a conversation asked for by name is opened in its place - the person said yes to that report, not to a setup.
+        const wanted = options.session === undefined ? undefined : reports.get(options.session);
+        const sessionFile = wanted !== undefined && wanted.report.kind === 'generated' ? wanted.file : undefined;
+        const openAt = sessionFile !== undefined ? (serving === undefined ? join(out, sessionFile) : serving.urlOf(sessionFile))
+            : serving === undefined ? indexPath
+                : opensWelcome && onboarding !== undefined ? serving.urlOf(onboarding.file) + (arrivedFrom === undefined ? '' : `#${WHO_STEP}`)
+                    : serving.url;
         // V15: a run a page switched to is shown in that page's tab, so it opens none of its own.
         const handedOver = this.#dependencies.handedOver;
         const opened = options.open && handedOver === undefined ? await this.#dependencies.browser.open(openAt) : true;
         const view = this.#dependencies.terminal ?? { colour: false, decorated: false };
-        const said = startSaid({
+        const said = options.quiet === true ? quietlySaid(openAt, opened && options.open, options.session === undefined || sessionFile !== undefined) : startSaid({
             ...counted(entries, outOfRange.length, indexPath, first.index, opened),
             // which-project V3: the folder the run was for, said where the terminal says what it read.
             ...(options.share ? {} : { project: projectName(workingDirectory) }),
@@ -540,7 +571,8 @@ export class SessionStart {
                 ? { servedAsFile: true }
                 : {}),
             ...(serving === undefined ? {} : { url: openAt }),
-            ...(serving !== undefined && opensWelcome ? { welcome: true } : {}),
+            // AW3: "Opened" only where a browser or a page's tab shows it; an address handed on is said as one.
+            ...(serving !== undefined && opensWelcome ? { welcome: options.open || handedOver !== undefined ? 'opened' : 'served' } : {}),
             // which-project V3: a switch says which project is shown now, and where it is.
             ...(handedOver === undefined || options.share ? {} : { nowShowing: this.#dependencies.home === undefined ? projectName(workingDirectory) : `${projectName(workingDirectory)} (${homeRelative(workingDirectory, this.#dependencies.home)})` }),
         }, view);
@@ -550,6 +582,7 @@ export class SessionStart {
         printer?.write(said);
         handedOver?.(openAt);
         await serving.closed;
+        await this.#dependencies.pageServer?.remove();
         // V14: a run a page moved away from ends quietly - the run it moved to has already said what it shows.
         if (switchedAway)
             return { outcome: 'written', output: '' };
@@ -652,33 +685,17 @@ export class SessionStart {
      * alerts off later never brings the onboarding back.
      */
     async #welcome(workingDirectory) {
-        const { onboarding, setup, notices } = this.#dependencies;
+        const { onboarding, setup, notices, policyFiles, home, realHome } = this.#dependencies;
+        // The onboarding writes through both (W15), so a run without them names no page it could not finish.
         if (onboarding === undefined || setup === undefined || notices === undefined)
             return undefined;
-        const reading = await onboarding.store.read();
-        // W24: the intro plays once per person - where no project of theirs has finished the onboarding.
-        const intro = !reading.anywhere && !reading.failed;
-        // which-project V7: in the home directory no project is being shown, so the onboarding opens at its project step,
-        // whatever the record says - after the welcome only for a person who has never finished one. Nothing here is set up
-        // and no record is kept of it: not even the silent `done` line below.
-        if (this.#notAProject(workingDirectory) !== undefined)
-            return { opens: true, intro, setUp: false, ...(intro ? {} : { atProject: true }) };
-        if (reading.here)
-            return { opens: false, intro, setUp: true };
-        if (reading.failed)
-            return { opens: false, intro, setUp: false };
-        // A local file that cannot be read leaves what runs unknown, and the onboarding closed (as `#settingsNow` does).
-        const local = await this.#settingsFile(join(workingDirectory, SETTINGS_FILES.directory, SETTINGS_FILES.local));
-        if (local === 'unreadable')
-            return { opens: false, intro, setUp: false };
-        const shared = await this.#settingsFile(join(workingDirectory, SETTINGS_FILES.directory, SETTINGS_FILES.shared));
-        // N6, widened 2026-09-28 by the maintainer (which-project V10): a project where one of agentwhy's hooks runs, or whose
-        // settings block files, was set up - before this screen existed, or by hand - and is recorded so, silently.
-        if (setUpBy([local, shared])) {
-            await onboarding.store.add((this.#dependencies.clock ?? (() => this.#dependencies.now))());
-            return { opens: false, intro, setUp: true };
-        }
-        return { opens: true, intro, setUp: false };
+        return welcomeIn(workingDirectory, {
+            store: onboarding.store,
+            files: policyFiles,
+            ...(home === undefined ? {} : { home }),
+            ...(realHome === undefined ? {} : { realHome }),
+            now: this.#dependencies.clock ?? (() => this.#dependencies.now),
+        });
     }
     /**
      * The person's projects, read again with every refresh as the settings are, since a project set up in another tab is
@@ -690,7 +707,8 @@ export class SessionStart {
             return {};
         const listing = await projects.list();
         const noProject = (path) => this.#notAProject(path) !== undefined;
-        const temporary = (path) => inTemporarySpace(path, this.#dependencies.temporaryDirectory, home);
+        // V10b: a folder the ChatGPT app made for a chat with no project is a quick try too, and counted with them.
+        const temporary = (path) => inTemporarySpace(path, this.#dependencies.temporaryDirectory, home) || inChatFolder(path, home);
         // V20: a folder with no conversations of its own, inside a project that has them - where they are.
         const near = nearestProject(workingDirectory, listing, noProject);
         const above = near.kind === 'above' ? { id: near.project.id, within: relative(near.project.path, workingDirectory) } : undefined;
@@ -788,9 +806,16 @@ export class SessionStart {
         // U2: the version is this run's own, read once; the hooks are read from the files as they are now.
         this.#serving ??= this.#dependencies.invocation?.version() ?? Promise.resolve(undefined);
         const late = behind({ ...(local === undefined ? {} : { local }), ...(readable === undefined ? {} : { shared: readable }) }, await this.#serving);
-        // CK8: Codex's hook file, read as the settings are; its state is drawn only where the project uses Codex (CK6).
+        // AO3: Codex's state is read, never assumed - `on` only where agentwhy's check in the person's own Codex files is
+        // verified as approved; `stale` where a check is written somewhere (the person's files unverified, or the old
+        // project-level copy) and Codex may still ask; `off` where the project uses Codex (CK6) and nothing is written.
         const codexHooks = await this.#settingsFile(join(workingDirectory, PROJECT_HOOKS.directory, PROJECT_HOOKS.file));
-        const codex = typeof codexHooks === 'object' && codexRefuseIn(codexHooks) !== undefined ? 'on' : codexListed || codexHooks !== undefined ? 'off' : undefined;
+        const check = this.#dependencies.home === undefined ? 'absent' : await codexCheckState(this.#dependencies.policyFiles, this.#dependencies.home);
+        const legacy = typeof codexHooks === 'object' && codexRefuseIn(codexHooks) !== undefined;
+        const codex = check === 'on' ? 'on'
+            : check === 'stale' || legacy ? 'stale'
+                : codexListed || codexHooks !== undefined || (await this.#dependencies.codexOnThisComputer?.()) === true ? 'off'
+                    : undefined;
         return {
             hooks: {
                 watch: installed('watch'),

package/dist/report/start/settings/alerts-tab.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { escapeHtml as e } from '../../render/html-report-components.js';
 import { inLanguages, labelAttributes } from '../../render/report-copy.js';
 import { textButton } from '../../render/ui/button.js';
@@ -78,7 +80,8 @@ function lockedSwitch(key, turnOn) {
         (turnOn === undefined ? '' : textButton(inLanguages((t) => t('set.need.go')), turnOn, 'set-tip-go')) +
         '</div></div>';
 }
-function stateLine(state) {
+/** A switch's state in words, under its row: shared with General's system notifications (SW13). */
+export function stateLine(state) {
     return '<div class="set-state' + (state.on ? ' set-state-on' : '') + '"><span class="set-dot" aria-hidden="true"></span>' +
         inLanguages((t) => t(state.key)) + '</div>';
 }

package/dist/report/start/settings/files-tab.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { escapeHtml as e } from '../../render/html-report-components.js';
 import { inLanguages, labelAttributes } from '../../render/report-copy.js';
 import { pill, trashButton } from '../../render/ui/button.js';
@@ -91,13 +93,17 @@ function ruleRow(row, at, view) {
     const action = row.remove !== undefined && canWrite ? remove(removeWindowId(at))
         : row.untell !== undefined ? remove(untellWindowId(at))
             : '<span class="set-none" aria-hidden="true">—</span>';
-    const icon = !row.watched ? '' : row.kept !== undefined ? OPEN_LOCK_SVG : MODE_SVG[row.mode];
-    const iconClass = !row.watched ? '' : ' set-icon-' + (row.kept !== undefined ? 'gap' : row.mode);
+    const covered = row.covered;
+    const gapped = row.kept !== undefined || covered !== undefined;
+    const icon = !row.watched ? '' : gapped ? OPEN_LOCK_SVG : MODE_SVG[row.mode];
+    const iconClass = !row.watched ? '' : ' set-icon-' + (gapped ? 'gap' : row.mode);
     return '<li class="set-rule' + (row.watched ? '' : ' set-rule-off') + (watchable ? ' set-rule-watchable' : '') + '"' + (watchable ? ' data-set-row' : '') + '>' +
         '<span class="set-icon' + iconClass + '" aria-hidden="true">' + icon + '</span>' +
         '<span class="set-rule-text"><span class="set-rule-name">' + label + '</span>' +
         '<span class="chip set-rule-chip" title="' + e(pattern) + '">' + e(patternShort(pattern)) + '</span>' +
-        (row.kept === undefined ? '' : '<span class="set-rule-gap">' + inLanguages((t) => t('set.rule.gap.' + row.kept)) + '</span>') + '</span>' +
+        (row.kept === undefined ? '' : '<span class="set-rule-gap">' + inLanguages((t) => t('set.rule.gap.' + row.kept)) + '</span>') +
+        // SW19: tracked here, and still refused by Claude Code's own rule for a wider pattern - said on the row, like a half block.
+        (covered === undefined ? '' : '<span class="set-rule-gap">' + inLanguages((t) => t('set.rule.covered', { pattern: e(patternShort(covered)) })) + '</span>') + '</span>' +
         '<span class="set-rule-mode">' + mode + '</span>' +
         '<span class="set-rule-src">' + tag(inLanguages((t) => t('set.src.short.' + row.source)), SOURCE_TONE[row.source]) + '</span>' +
         '<span class="set-rule-act">' + action + '</span>' +
@@ -149,21 +155,21 @@ function finishCard(view) {
     });
 }
 /**
- * `codex-blocks-too` CK8: in a project that uses Codex, whether the files blocked here are kept from Codex too. Where
- * agentwhy's hook is written, a grey line says it holds once approved in Codex, which nothing here can see (CKB9). Where
- * it is not and Claude Code's block runs, a coral line with the one write that adds it; where Claude Code's does not
- * run either, Finish blocking above writes both, and this says nothing.
+ * `codex-approves-its-own-hook` AO3, AO10: in a project that uses Codex, whether the files blocked here are kept from
+ * Codex too. Verified (`on`), a grey line states the fact: from the first message, in the terminal and in VS Code,
+ * nothing to confirm in Codex. Written but not verified (`stale`), a coral line says Codex may still ask, with the one
+ * write that makes it automatic. Not written (`off`) and Claude Code's block running, a coral line with the same
+ * write; where Claude Code's block does not run either, Finish blocking above writes both, and this says nothing.
  */
 function codexCard(view) {
-    if (!view.known || view.codex === undefined)
+    if (!view.known || view.codex === undefined || !view.stop.on)
         return '';
     if (view.codex === 'on')
         return callout({ tone: 'grey', body: inLanguages((t) => t('set.codex.on')) });
-    if (!view.stop.on)
-        return '';
+    const stale = view.codex === 'stale';
     return callout({
         tone: 'coral',
-        body: inLanguages((t) => t('set.codex.off')),
-        ...(view.canWrite ? { action: pill({ label: inLanguages((t) => t('set.codex.go')), tone: 'primary', size: 'task', href: '#' + CODEX_WINDOW, attributes: opener(CODEX_WINDOW) }) } : {}),
+        body: inLanguages((t) => t(stale ? 'set.codex.stale' : 'set.codex.off')),
+        ...(view.canWrite ? { action: pill({ label: inLanguages((t) => t(stale ? 'set.codex.fix' : 'set.codex.go')), tone: 'primary', size: 'task', href: '#' + CODEX_WINDOW, attributes: opener(CODEX_WINDOW) }) } : {}),
     });
 }

package/dist/report/start/settings/general-tab.js

@@ -1,10 +1,15 @@
-import { inLanguages } from '../../render/report-copy.js';
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
+import { escapeHtml as e } from '../../render/html-report-components.js';
+import { inLanguages, labelAttributes } from '../../render/report-copy.js';
 import { avatar } from '../../render/ui/avatar.js';
 import { BRAND_MARK } from '../../render/ui/brand-mark.js';
 import { pill, TRASH_SVG } from '../../render/ui/button.js';
 import { callout } from '../../render/ui/callout.js';
 import { opener } from '../../render/ui/popup.js';
+import { toggleSwitch } from '../../render/ui/switch.js';
 import { tag } from '../../render/ui/tag.js';
+import { stateLine } from './alerts-tab.js';
 import { scopeWindowId, UNINSTALL_WINDOW } from './settings-windows.js';
 /**
  * General (`for-people-who-build-with-ai.md` F56, asked for 2026-09-24; redrawn 2026-09-25): who what agentwhy saved in
@@ -25,9 +30,36 @@ export function generalTab(view, welcome) {
         // which-project V5: which AI agentwhy sees, in the words the project step and the list of projects say it.
         '<p class="set-quiet set-general-note"><span class="set-info" aria-hidden="true">i</span><span>' + inLanguages((t) => t('proj.which')) + '</span></p>' +
         '</section>' +
+        systemCard(view) +
         setupCard(welcome) +
         uninstallCard(view);
 }
+/**
+ * Whether agentwhy also shows what it says in the corner of the screen (`2026-10-02-said-where-the-person-is.md` SW13).
+ * Asked for by the maintainer on 2026-10-02, who found the notifications tiresome and had only a command to turn them
+ * off. Written at once, as Alerts' optional rows are (R26a), keeping every other channel in force; on a page opened as a
+ * file, the script offers the command to copy instead.
+ */
+function systemCard(view) {
+    const on = view.system.on;
+    const others = view.system.channels.filter((channel) => channel !== 'os');
+    const next = on ? (others.length === 0 ? ['chat'] : others) : [...others, 'os'];
+    return '<section class="set-box set-system"><div class="set-head"><h2 class="set-h2">' + inLanguages((t) => t('set.system.title')) + '</h2>' +
+        '<p class="set-lead">' + inLanguages((t) => t('set.system.lead')) + '</p></div>' +
+        // Not `set-msg-opt`: that row hangs from Alerts' first on a line, and this one hangs from nothing.
+        '<article class="set-msg' + (on ? ' set-msg-on' : '') + '"><div class="set-card-body">' +
+        '<div class="set-card-name"><h3 class="set-msg-name">' + inLanguages((t) => t('set.system.name')) + '</h3></div>' +
+        '<p class="set-msg-why">' + inLanguages((t) => t('set.system.when')) + '</p>' +
+        // As Alerts' optional rows: where the hooks are unknown, so is whether anything is said at all - the switch alone.
+        (view.known ? stateLine({ key: on ? 'set.state.on' : 'set.state.off', on }) : '') +
+        '<p class="set-say" data-set-say hidden></p></div>' +
+        toggleSwitch({
+            on,
+            disabled: !view.noticesWritable,
+            attributes: labelAttributes((t) => t('set.system.name')) + ' data-set-notice="' + e(JSON.stringify({ notify: next })) + '"',
+        }) +
+        '</article></section>';
+}
 /**
  * W25a: the onboarding again, where this run serves it - drawn as Uninstall is (a mark, one sentence, the button), and
  * above it: going through the setup again comes before taking it all out. Nothing is written until its Finish (W10).

package/dist/report/start/settings/settings-renderer.js

@@ -115,6 +115,8 @@ const SETTINGS_STYLE = String.raw `
 .set-cannot{margin:-8px 0 22px}
 .set-quiet{font-size:14px;line-height:1.5;color:var(--text-3)}
 .set-soft{color:var(--text-2)}
+.set-tick{display:flex;gap:10px;align-items:flex-start;font-size:14px;color:var(--text-2);cursor:pointer}
+.set-tick input{margin-top:3px;accent-color:var(--coral)}
 .set-head{margin-bottom:16px}
 .co+.set-head{margin-top:30px}
 .set-h2{margin:0;font-size:19px;font-weight:650;line-height:1.3}

package/dist/report/start/settings/settings-script.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 /**
  * What only Settings does (`.ai/plans/2026-09-23-settings-redesign.md`, step 3). The kit opens and closes the windows
  * and switches the tabs; this posts what a confirm button carries, and reads the page again once the server has
@@ -43,7 +45,7 @@ export const SETTINGS_SCRIPT = String.raw `
     if (body.change === 'protect') return 'agentwhy init --protect ' + quote(body.pattern) + ' --refuse' + shared(body.where);
     if (body.change === 'adopt') return 'agentwhy init' + body.patterns.map((pattern) => ' --protect ' + quote(pattern)).join('') + ' --refuse' + shared(body.where);
     if (body.change === 'unprotect') return 'agentwhy init --remove --unprotect ' + quote(body.pattern) + shared(body.where);
-    if (body.scope === 'project') return 'agentwhy notify' + (body.on ? ' --on ' + body.on : '') + (body.clean ? ' --clean ' + body.clean : '');
+    if (body.scope === 'project') return 'agentwhy notify' + (body.on ? ' --on ' + body.on : '') + (body.clean ? ' --clean ' + body.clean : '') + (body.notify ? ' --notify ' + body.notify.join(',') : '');
     return '';
   };
 
@@ -101,6 +103,11 @@ export const SETTINGS_SCRIPT = String.raw `
         const picked = document.querySelector('input[name="' + confirm.dataset.setWho + '"]:checked');
         body.where = picked ? picked.value : 'local';
       }
+      // AO17: the window's unticked choice - out of the person's own Codex files too, only when ticked.
+      if (confirm.dataset.setTick) {
+        const tick = document.querySelector('input[name="' + confirm.dataset.setTick + '"]');
+        if (tick && tick.checked) body.codex = true;
+      }
       change(body, confirm, confirm.getAttribute('data-set-command-' + (body.where || 'local')));
       return;
     }

package/dist/report/start/settings/settings-view.js

@@ -1,7 +1,10 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { DEFAULT_POLICY } from '../../../core/policy/default-policy.js';
+import { matchesGlob } from '../../../core/policy/glob.js';
 import { SETTINGS_FILES } from '../../../adapter/claude-code/contract/settings.js';
 import { DEFAULT_THRESHOLD } from '../../watch/agent-alert.js';
-import { DEFAULT_CLEAN } from '../../watch/notice-choices.js';
+import { DEFAULT_CHANNELS, DEFAULT_CLEAN } from '../../watch/notice-choices.js';
 import { RULE_NAMES } from '../../rule-names.js';
 /**
  * What the Settings page shows, decided from what the files hold (`for-people-who-build-with-ai.md` §3 C; the plan's
@@ -32,7 +35,9 @@ export function settingsView(settings) {
     const read = known ? readPatterns(settings, reads) : undefined;
     const told = toldIn(settings);
     const canTell = canWrite && settings.told !== undefined && settings.told.local !== 'unreadable' && settings.told.shared !== 'unreadable';
-    const rows = read === undefined ? policyRows(settings) : fileRows(settings, reads, read, told, canTell).map((row) => keptOf(row, settings, hooks));
+    const rows = read === undefined
+        ? policyRows(settings)
+        : fileRows(settings, reads, read, told, canTell).map((row) => coveredOf(keptOf(row, settings, hooks), settings, told));
     const unread = read === undefined ? [] : unreadRules(settings, read);
     const addTo = reads === 'local' || reads === 'shared' ? reads : alerts.who ?? stop.who ?? 'local';
     // A built-in pattern on a told list is read and told, never blocked again by an add (F57).
@@ -45,6 +50,7 @@ export function settingsView(settings) {
         stopped: { on: on === 'refused', locked: known && !alerts.on },
         fine: { on: clean !== 'off', locked: known && !alerts.on },
         noticesWritable: notices !== undefined && !notices.unusable,
+        system: { on: (notices?.notify ?? DEFAULT_CHANNELS).includes('os'), channels: notices?.notify ?? DEFAULT_CHANNELS },
         stop,
         scope,
         moves: { local: movesInto(settings, hooks, 'local'), shared: movesInto(settings, hooks, 'shared') },
@@ -189,6 +195,27 @@ function keptOf(row, settings, hooks) {
     const whole = ruled.length === row.patterns.length && (searched === undefined || row.patterns.every((pattern) => searched.has(pattern)));
     return whole ? row : { ...row, kept: 'open' };
 }
+/**
+ * SW19, found by the maintainer on 2026-10-02: `demo.env` was switched to Track, and Claude Code still refused every
+ * read - its own deny rule for every `.env` file covers that name, and deny rules know no exceptions. The row carries
+ * the shortest written Block rule that still matches the row's file, by the name a command or a path would use. Only
+ * a row tracked by a file's name is asked - a folder or a hand-written pattern names no one file to try - and only
+ * rules a settings file actually holds count, because only those are rules Claude Code applies itself.
+ */
+function coveredOf(row, settings, told) {
+    if (row.mode !== 'tell' || !row.watched)
+        return row;
+    const names = row.patterns.flatMap((pattern) => {
+        const name = /^\*\*\/([^*?/]+)$/.exec(pattern)?.[1];
+        return name === undefined ? [] : [name];
+    });
+    if (names.length === 0)
+        return row;
+    const written = FILES.flatMap((file) => settings.held?.[file] ?? []).filter((pattern) => !told.has(pattern));
+    const covering = written.filter((pattern) => names.some((name) => matchesGlob(name, pattern) || matchesGlob(`a/${name}`, pattern)));
+    const covered = covering.sort((one, two) => one.length - two.length || (one < two ? -1 : 1))[0];
+    return covered === undefined ? row : { ...row, covered };
+}
 function denied(settings, pattern) {
     return FILES.some((file) => settings.held?.[file]?.includes(pattern) ?? false);
 }

package/dist/report/start/settings/settings-windows.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { escapeHtml as e } from '../../render/html-report-components.js';
 import { inLanguages } from '../../render/report-copy.js';
 import { addFilePopup } from '../../render/ui/add-file-popup.js';
@@ -115,18 +117,25 @@ function uninstallWindow(view) {
         return '';
     const command = files.map((file) => 'agentwhy init --remove --watch --refuse' +
         (view.uninstall[file] ?? []).map((rule) => ' --unprotect ' + quoted(rule)).join('') + shared(file)).join(' && ');
+    // AO17: one project's uninstall leaves agentwhy's check in the person's own Codex settings for the other projects
+    // (AOD4) - said here, with the unticked choice that takes it out of Codex too.
+    const codex = view.codex === undefined ? '' :
+        '<label class="set-tick"><input type="checkbox" name="set-uninstall-codex">' +
+            '<span>' + inLanguages((t) => t('set.confirm.uninstall.codex')) + '</span></label>';
     return confirmDialog({
         id: UNINSTALL_WINDOW,
         glyph: '',
         title: inLanguages((t) => t('set.confirm.uninstall')),
         subject: '',
         sentence: inLanguages((t) => t('set.confirm.uninstall.text') + (files.includes('shared') ? ' ' + t('set.confirm.everyone') : '')),
-        option: '',
+        option: codex,
         note: say(),
         cancel: inLanguages((t) => t('app.cancel')),
         confirm: inLanguages((t) => t('set.confirm.uninstall.go')),
         tone: 'primary',
-        confirmAttributes: write({ change: 'uninstall', rules: view.uninstall }) + commandAttribute('local', command),
+        confirmAttributes: write({ change: 'uninstall', rules: view.uninstall }) +
+            (view.codex === undefined ? '' : ' data-set-tick="set-uninstall-codex"') +
+            commandAttribute('local', command),
     });
 }
 /** The hooks a file runs once the moved ones are in it: `init` with hook flags takes out any it is not given (R4b). */
@@ -167,11 +176,13 @@ function finishWindow(view) {
     });
 }
 /**
- * CK5, CK7: Codex's hook, written to match the block Claude Code runs - the page's confirmation is the consent, as for
- * every block - and the honesty line under it. Opened as a file, it hands over `agentwhy init --codex`.
+ * `codex-approves-its-own-hook` AO8, AO10: agentwhy's Codex check, written to the person's own files and approved by
+ * agentwhy itself - the page's confirmation is the consent, as for every block - and the honesty line under it. Opened
+ * from `off` and from `stale` alike: the same write installs and heals. Opened as a file, it hands over
+ * `agentwhy init --codex`.
  */
 function codexWindow(view) {
-    if (view.codex !== 'off' || !view.stop.on)
+    if ((view.codex !== 'off' && view.codex !== 'stale') || !view.stop.on)
         return '';
     return confirmDialog({
         id: CODEX_WINDOW,

package/dist/report/start/settings-files.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { fileRulesIn } from '../../adapter/claude-code/settings/deny-entries.js';
 import { missingHookEntries } from '../../adapter/claude-code/settings/hook-entries.js';
 /**

package/dist/report/start/to-fix/done-list.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { escapeHtml as e } from '../../render/html-report-components.js';
 import { inLanguages } from '../../render/report-copy.js';
 import { textButton } from '../../render/ui/button.js';

package/dist/report/start/to-fix/file-window.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { escapeHtml as e } from '../../render/html-report-components.js';
 import { inLanguages, labelAttributes } from '../../render/report-copy.js';
 import { closeButton, pill } from '../../render/ui/button.js';

package/dist/report/start/to-fix/to-fix-list.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { escapeHtml as e } from '../../render/html-report-components.js';
 import { inLanguages, labelAttributes } from '../../render/report-copy.js';
 import { pill } from '../../render/ui/button.js';

package/dist/report/start/to-fix/to-fix-renderer.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 import { matchesGlob } from '../../../core/policy/glob.js';
 import { idInKey } from '../../../core/session-catalogue.js';
 import { escapeHtml as e } from '../../render/html-report-components.js';

package/dist/report/start/to-fix/to-fix-script.js

@@ -1,3 +1,5 @@
+// Copyright 2026 Nessprim Karol Kozer
+// SPDX-License-Identifier: Apache-2.0
 /**
  * What only To fix does (`.ai/plans/2026-09-23-to-fix-redesign.md`, step 3). The kit opens and closes the windows and
  * switches the tabs, and the Fix it wizard writes a mark; this posts an undo, and reads the page again once the server