@attalabs/vinaya 0.21.0 → 0.22.0

package/dist/checks/bin/check-doc-coverage-push.js

@@ -2,7 +2,7 @@
 
 // src/checks/bin/check-doc-coverage-push.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "node:fs";
 // ../../packages/aeg-core/src/gate-audience.ts
 var GATE_AUDIENCE = {
   "check-branch-topology": { shippedAs: "branch-topology", ring: 0 },
@@ -1792,6 +1792,99 @@ var DERIVED_STATUSES = [
   "incoherent"
 ];
 var DERIVABLE_STATUSES = DERIVED_STATUSES.filter((s) => s !== "backlog");
+// ../../packages/aeg-core/src/parse-ledger.ts
+function rowFromCells(cells) {
+  if (cells.length < 7)
+    return null;
+  const phase = (cells[0] ?? "").trim();
+  if (!phase)
+    return null;
+  return {
+    phase,
+    role: (cells[1] ?? "").trim(),
+    agentModel: (cells[2] ?? "").trim(),
+    tokensIn: parseIntCell(cells[3] ?? ""),
+    tokensOut: parseIntCell(cells[4] ?? ""),
+    cost: parseCostCell(cells[5] ?? ""),
+    date: (cells[6] ?? "").trim()
+  };
+}
+function parseIntCell(cell) {
+  const trimmed = cell.replace(/`/g, "").trim();
+  if (!trimmed || isEmDashOrDash(trimmed))
+    return null;
+  const normalized = trimmed.replace(/[,_\s]/g, "");
+  if (!/^-?\d+$/.test(normalized))
+    return null;
+  return Number(normalized);
+}
+function parseCostCell(cell) {
+  const trimmed = cell.replace(/`/g, "").trim();
+  if (!trimmed || isEmDashOrDash(trimmed))
+    return null;
+  const normalized = trimmed.replace(/^\$/, "").replace(/[,_\s]/g, "");
+  if (!/^-?\d+(\.\d+)?$/.test(normalized))
+    return null;
+  return Number(normalized);
+}
+function isEmDashOrDash(s) {
+  const t = s.trim();
+  return t === "—" || t === "-" || t === "–";
+}
+// ../../packages/aeg-core/src/parse-token-report.ts
+var TOKEN_REPORT_HEADING = /^\s*(?:#{1,6}\s*Token report\s*|\*\*Token report\*\*)\s*$/i;
+var INLINE_FIELD_LIST = /Phase:\s*([^|]+?)\s*\|\s*Role:\s*([^|]+?)\s*\|\s*Agent\/Model:\s*([^|]+?)\s*\|\s*Tokens in:\s*([^|]+?)\s*\|\s*Tokens out:\s*([^|]+?)\s*\|\s*Cost:\s*([^|]+?)\s*\|\s*Date:\s*(.+?)\s*$/im;
+function parseTokenReportEntries(body) {
+  const lines = body.split(/\r?\n/);
+  const headingIdxs = [];
+  lines.forEach((line, i) => {
+    if (TOKEN_REPORT_HEADING.test(line))
+      headingIdxs.push(i);
+  });
+  const out = [];
+  for (let h = 0;h < headingIdxs.length; h++) {
+    const start = headingIdxs[h] + 1;
+    const end = h + 1 < headingIdxs.length ? headingIdxs[h + 1] : lines.length;
+    const section = lines.slice(start, end).join(`
+`);
+    const tableRows = parseTableSection(section);
+    if (tableRows.length > 0) {
+      out.push(...tableRows);
+      continue;
+    }
+    const inlineRow = parseInlineFieldList(section);
+    if (inlineRow)
+      out.push(inlineRow);
+  }
+  return out;
+}
+function parseTableSection(section) {
+  const lines = section.split(/\r?\n/);
+  let i = 0;
+  for (;i < lines.length; i++) {
+    if ((lines[i] ?? "").trim().startsWith("|"))
+      break;
+  }
+  if (i + 1 >= lines.length)
+    return [];
+  i += 2;
+  const out = [];
+  for (;i < lines.length; i++) {
+    const trimmed = (lines[i] ?? "").trim();
+    if (!trimmed.startsWith("|"))
+      break;
+    const row = rowFromCells(splitTableRow(trimmed));
+    if (row)
+      out.push(row);
+  }
+  return out;
+}
+function parseInlineFieldList(section) {
+  const m = section.match(INLINE_FIELD_LIST);
+  if (!m)
+    return null;
+  return rowFromCells([m[1], m[2], m[3], m[4], m[5], m[6], m[7]]);
+}
 // ../../packages/aeg-core/src/report-tokens.ts
 var DASH_LOOKALIKES = {
   "-": "‑",
@@ -1800,6 +1893,7 @@ var DASH_LOOKALIKES = {
 };
 var DASH_CHARS = new Set(Object.keys(DASH_LOOKALIKES));
 // ../../packages/aeg-core/src/claude-code-transcript.ts
+import { createHash } from "node:crypto";
 function summarizeTranscript(jsonl) {
   const seen = new Set;
   const components = {
@@ -1848,7 +1942,14 @@ function numberOr(value, fallback) {
 function sanitizeKey(value) {
   return value.replace(/[^A-Za-z0-9]+/g, "-");
 }
+function collisionResistantKey(value) {
+  const digest = createHash("sha256").update(value).digest("hex");
+  return `${sanitizeKey(value)}-${digest}`;
+}
 function transcriptPointerPath(projectDir, tmpDir) {
+  return `${tmpDir}/claude-transcript-${collisionResistantKey(projectDir)}.txt`;
+}
+function legacyTranscriptPointerPath(projectDir, tmpDir) {
   return `${tmpDir}/claude-transcript-${sanitizeKey(projectDir)}.txt`;
 }
 function resolvePointer(explicitTranscriptPath, deps) {
@@ -1856,13 +1957,15 @@ function resolvePointer(explicitTranscriptPath, deps) {
     return { path: explicitTranscriptPath, corroborated: true };
   const projectDir = deps.env.CLAUDE_PROJECT_DIR ?? deps.cwd;
   const tmpDir = deps.env.TMPDIR ?? "/tmp";
-  const pointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const primaryPointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const legacyPointerPath = legacyTranscriptPointerPath(projectDir, tmpDir);
   const currentSessionId = deps.env.CLAUDE_CODE_SESSION_ID;
-  if (!deps.exists(pointerPath)) {
+  const pointerPath = deps.exists(primaryPointerPath) ? primaryPointerPath : deps.exists(legacyPointerPath) ? legacyPointerPath : undefined;
+  if (!pointerPath) {
     return {
       pointerExisted: false,
       corroborated: false,
-      error: `No transcript pointer at ${pointerPath} and no --transcript given. ` + "Either this repo installs no track-transcript.sh Stop hook (lacking one is not a defect — " + "name the transcript directly instead), or no session has completed a turn yet."
+      error: `No transcript pointer at ${primaryPointerPath} (nor its pre-migration name ${legacyPointerPath}) ` + "and no --transcript given. Either this repo installs no track-transcript.sh Stop hook (lacking one " + "is not a defect — name the transcript directly instead), or no session has completed a turn yet."
     };
   }
   let contents;
@@ -1937,6 +2040,9 @@ function isTokenCollectionWiringBroken(capability) {
     return false;
   return capability.reason !== "no-transcript-resolved";
 }
+// ../../packages/aeg-core/src/metering-io-guard.ts
+import { closeSync, constants as fsConstants, fstatSync, openSync, readFileSync } from "node:fs";
+var GUARD_OPEN_FLAGS = fsConstants.O_RDONLY | fsConstants.O_NONBLOCK | fsConstants.O_NOFOLLOW;
 // ../../packages/aeg-core/src/file-classify.ts
 function isCodeFile(p) {
   if (p.endsWith(".md"))
@@ -2143,7 +2249,7 @@ function overrideActive(opts) {
   return false;
 }
 // ../../packages/aeg-core/src/premise-check.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var ASSERTION_KINDS = new Set(["contains", "absent", "sha256"]);
 function isPremiseHeader(line) {
   const stripped = line.replace(/[*#]/g, "").trim();
@@ -2188,7 +2294,7 @@ function checkPremises(assertions, fileReader) {
     } else if (a.kind === "absent" && content.includes(a.value)) {
       failures.push(`premise-check: ${a.path} now contains "${a.value}", but the brief pinned it absent — the premise has moved; re-dig before proceeding.`);
     } else if (a.kind === "sha256") {
-      const actual = createHash("sha256").update(content).digest("hex");
+      const actual = createHash2("sha256").update(content).digest("hex");
       if (actual !== a.value.toLowerCase()) {
         failures.push(`premise-check: ${a.path} sha256 mismatch (brief pinned ${a.value}, file is now ${actual}) — the file changed since this brief was authored; re-dig before proceeding.`);
       }
@@ -3988,7 +4094,7 @@ function emitCheckError(error) {
 
 // src/lib/config.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync as readFileSync2, realpathSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join as join2, resolve } from "node:path";
 import { z } from "zod";
@@ -4281,7 +4387,7 @@ function loadConfig() {
   if (!path)
     return null;
   try {
-    const raw = JSON.parse(readFileSync(path, "utf-8"));
+    const raw = JSON.parse(readFileSync2(path, "utf-8"));
     return stripGlobalOnlyKeys(VinayaConfigSchema.parse(raw), path);
   } catch {
     return null;
@@ -4307,7 +4413,7 @@ function resolvePrBody() {
     return process.env.PR_BODY;
   if (process.env.PR_BODY_FILE) {
     try {
-      return readFileSync2(process.env.PR_BODY_FILE, "utf8");
+      return readFileSync3(process.env.PR_BODY_FILE, "utf8");
     } catch {
       return "";
     }
@@ -4342,7 +4448,7 @@ function main() {
   }
   if (changed.length === 0)
     process.exit(0);
-  const content = existsSync2(DOC_OWNERS_PATH) ? readFileSync2(DOC_OWNERS_PATH, "utf8") : null;
+  const content = existsSync2(DOC_OWNERS_PATH) ? readFileSync3(DOC_OWNERS_PATH, "utf8") : null;
   const result = evaluateC5(changed, content, resolvePrBody(), existsSync2, waiverActiveFromEnv(), (p) => fileDiffAgainst(ref, p));
   for (const message of result.errors) {
     emitCheckError({

package/dist/checks/bin/check-doc-coverage.js

@@ -2,7 +2,7 @@
 
 // src/checks/bin/check-doc-coverage.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "node:fs";
 // ../../packages/aeg-core/src/gate-audience.ts
 var GATE_AUDIENCE = {
   "check-branch-topology": { shippedAs: "branch-topology", ring: 0 },
@@ -1792,6 +1792,99 @@ var DERIVED_STATUSES = [
   "incoherent"
 ];
 var DERIVABLE_STATUSES = DERIVED_STATUSES.filter((s) => s !== "backlog");
+// ../../packages/aeg-core/src/parse-ledger.ts
+function rowFromCells(cells) {
+  if (cells.length < 7)
+    return null;
+  const phase = (cells[0] ?? "").trim();
+  if (!phase)
+    return null;
+  return {
+    phase,
+    role: (cells[1] ?? "").trim(),
+    agentModel: (cells[2] ?? "").trim(),
+    tokensIn: parseIntCell(cells[3] ?? ""),
+    tokensOut: parseIntCell(cells[4] ?? ""),
+    cost: parseCostCell(cells[5] ?? ""),
+    date: (cells[6] ?? "").trim()
+  };
+}
+function parseIntCell(cell) {
+  const trimmed = cell.replace(/`/g, "").trim();
+  if (!trimmed || isEmDashOrDash(trimmed))
+    return null;
+  const normalized = trimmed.replace(/[,_\s]/g, "");
+  if (!/^-?\d+$/.test(normalized))
+    return null;
+  return Number(normalized);
+}
+function parseCostCell(cell) {
+  const trimmed = cell.replace(/`/g, "").trim();
+  if (!trimmed || isEmDashOrDash(trimmed))
+    return null;
+  const normalized = trimmed.replace(/^\$/, "").replace(/[,_\s]/g, "");
+  if (!/^-?\d+(\.\d+)?$/.test(normalized))
+    return null;
+  return Number(normalized);
+}
+function isEmDashOrDash(s) {
+  const t = s.trim();
+  return t === "—" || t === "-" || t === "–";
+}
+// ../../packages/aeg-core/src/parse-token-report.ts
+var TOKEN_REPORT_HEADING = /^\s*(?:#{1,6}\s*Token report\s*|\*\*Token report\*\*)\s*$/i;
+var INLINE_FIELD_LIST = /Phase:\s*([^|]+?)\s*\|\s*Role:\s*([^|]+?)\s*\|\s*Agent\/Model:\s*([^|]+?)\s*\|\s*Tokens in:\s*([^|]+?)\s*\|\s*Tokens out:\s*([^|]+?)\s*\|\s*Cost:\s*([^|]+?)\s*\|\s*Date:\s*(.+?)\s*$/im;
+function parseTokenReportEntries(body) {
+  const lines = body.split(/\r?\n/);
+  const headingIdxs = [];
+  lines.forEach((line, i) => {
+    if (TOKEN_REPORT_HEADING.test(line))
+      headingIdxs.push(i);
+  });
+  const out = [];
+  for (let h = 0;h < headingIdxs.length; h++) {
+    const start = headingIdxs[h] + 1;
+    const end = h + 1 < headingIdxs.length ? headingIdxs[h + 1] : lines.length;
+    const section = lines.slice(start, end).join(`
+`);
+    const tableRows = parseTableSection(section);
+    if (tableRows.length > 0) {
+      out.push(...tableRows);
+      continue;
+    }
+    const inlineRow = parseInlineFieldList(section);
+    if (inlineRow)
+      out.push(inlineRow);
+  }
+  return out;
+}
+function parseTableSection(section) {
+  const lines = section.split(/\r?\n/);
+  let i = 0;
+  for (;i < lines.length; i++) {
+    if ((lines[i] ?? "").trim().startsWith("|"))
+      break;
+  }
+  if (i + 1 >= lines.length)
+    return [];
+  i += 2;
+  const out = [];
+  for (;i < lines.length; i++) {
+    const trimmed = (lines[i] ?? "").trim();
+    if (!trimmed.startsWith("|"))
+      break;
+    const row = rowFromCells(splitTableRow(trimmed));
+    if (row)
+      out.push(row);
+  }
+  return out;
+}
+function parseInlineFieldList(section) {
+  const m = section.match(INLINE_FIELD_LIST);
+  if (!m)
+    return null;
+  return rowFromCells([m[1], m[2], m[3], m[4], m[5], m[6], m[7]]);
+}
 // ../../packages/aeg-core/src/report-tokens.ts
 var DASH_LOOKALIKES = {
   "-": "‑",
@@ -1800,6 +1893,7 @@ var DASH_LOOKALIKES = {
 };
 var DASH_CHARS = new Set(Object.keys(DASH_LOOKALIKES));
 // ../../packages/aeg-core/src/claude-code-transcript.ts
+import { createHash } from "node:crypto";
 function summarizeTranscript(jsonl) {
   const seen = new Set;
   const components = {
@@ -1848,7 +1942,14 @@ function numberOr(value, fallback) {
 function sanitizeKey(value) {
   return value.replace(/[^A-Za-z0-9]+/g, "-");
 }
+function collisionResistantKey(value) {
+  const digest = createHash("sha256").update(value).digest("hex");
+  return `${sanitizeKey(value)}-${digest}`;
+}
 function transcriptPointerPath(projectDir, tmpDir) {
+  return `${tmpDir}/claude-transcript-${collisionResistantKey(projectDir)}.txt`;
+}
+function legacyTranscriptPointerPath(projectDir, tmpDir) {
   return `${tmpDir}/claude-transcript-${sanitizeKey(projectDir)}.txt`;
 }
 function resolvePointer(explicitTranscriptPath, deps) {
@@ -1856,13 +1957,15 @@ function resolvePointer(explicitTranscriptPath, deps) {
     return { path: explicitTranscriptPath, corroborated: true };
   const projectDir = deps.env.CLAUDE_PROJECT_DIR ?? deps.cwd;
   const tmpDir = deps.env.TMPDIR ?? "/tmp";
-  const pointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const primaryPointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const legacyPointerPath = legacyTranscriptPointerPath(projectDir, tmpDir);
   const currentSessionId = deps.env.CLAUDE_CODE_SESSION_ID;
-  if (!deps.exists(pointerPath)) {
+  const pointerPath = deps.exists(primaryPointerPath) ? primaryPointerPath : deps.exists(legacyPointerPath) ? legacyPointerPath : undefined;
+  if (!pointerPath) {
     return {
       pointerExisted: false,
       corroborated: false,
-      error: `No transcript pointer at ${pointerPath} and no --transcript given. ` + "Either this repo installs no track-transcript.sh Stop hook (lacking one is not a defect — " + "name the transcript directly instead), or no session has completed a turn yet."
+      error: `No transcript pointer at ${primaryPointerPath} (nor its pre-migration name ${legacyPointerPath}) ` + "and no --transcript given. Either this repo installs no track-transcript.sh Stop hook (lacking one " + "is not a defect — name the transcript directly instead), or no session has completed a turn yet."
     };
   }
   let contents;
@@ -1937,6 +2040,9 @@ function isTokenCollectionWiringBroken(capability) {
     return false;
   return capability.reason !== "no-transcript-resolved";
 }
+// ../../packages/aeg-core/src/metering-io-guard.ts
+import { closeSync, constants as fsConstants, fstatSync, openSync, readFileSync } from "node:fs";
+var GUARD_OPEN_FLAGS = fsConstants.O_RDONLY | fsConstants.O_NONBLOCK | fsConstants.O_NOFOLLOW;
 // ../../packages/aeg-core/src/file-classify.ts
 function isCodeFile(p) {
   if (p.endsWith(".md"))
@@ -2143,7 +2249,7 @@ function overrideActive(opts) {
   return false;
 }
 // ../../packages/aeg-core/src/premise-check.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var ASSERTION_KINDS = new Set(["contains", "absent", "sha256"]);
 function isPremiseHeader(line) {
   const stripped = line.replace(/[*#]/g, "").trim();
@@ -2188,7 +2294,7 @@ function checkPremises(assertions, fileReader) {
     } else if (a.kind === "absent" && content.includes(a.value)) {
       failures.push(`premise-check: ${a.path} now contains "${a.value}", but the brief pinned it absent — the premise has moved; re-dig before proceeding.`);
     } else if (a.kind === "sha256") {
-      const actual = createHash("sha256").update(content).digest("hex");
+      const actual = createHash2("sha256").update(content).digest("hex");
       if (actual !== a.value.toLowerCase()) {
         failures.push(`premise-check: ${a.path} sha256 mismatch (brief pinned ${a.value}, file is now ${actual}) — the file changed since this brief was authored; re-dig before proceeding.`);
       }
@@ -3988,7 +4094,7 @@ function emitCheckError(error) {
 
 // src/lib/config.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync as readFileSync2, realpathSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join as join2, resolve } from "node:path";
 import { z } from "zod";
@@ -4281,7 +4387,7 @@ function loadConfig() {
   if (!path)
     return null;
   try {
-    const raw = JSON.parse(readFileSync(path, "utf-8"));
+    const raw = JSON.parse(readFileSync2(path, "utf-8"));
     return stripGlobalOnlyKeys(VinayaConfigSchema.parse(raw), path);
   } catch {
     return null;
@@ -4307,7 +4413,7 @@ function resolvePrBody() {
     return process.env.PR_BODY;
   if (process.env.PR_BODY_FILE) {
     try {
-      return readFileSync2(process.env.PR_BODY_FILE, "utf8");
+      return readFileSync3(process.env.PR_BODY_FILE, "utf8");
     } catch {
       return "";
     }
@@ -4365,7 +4471,7 @@ function main() {
   if (changed.length === 0) {
     process.exit(0);
   }
-  const content = existsSync2(DOC_OWNERS_PATH) ? readFileSync2(DOC_OWNERS_PATH, "utf8") : null;
+  const content = existsSync2(DOC_OWNERS_PATH) ? readFileSync3(DOC_OWNERS_PATH, "utf8") : null;
   const result = evaluateC5(changed, content, resolvePrBody(), existsSync2, waiverActive(), (p) => fileDiffAgainst(ref, p));
   if (result.errors.length > 0) {
     for (const message of result.errors) {

package/dist/checks/bin/check-doctrine-portability.js

@@ -2,7 +2,7 @@
 
 // src/checks/bin/check-doctrine-portability.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { readdirSync, readFileSync as readFileSync2, statSync } from "node:fs";
+import { readdirSync, readFileSync as readFileSync3, statSync } from "node:fs";
 import { join as join2 } from "node:path";
 // ../../packages/aeg-core/src/gate-audience.ts
 var GATE_AUDIENCE = {
@@ -1793,6 +1793,99 @@ var DERIVED_STATUSES = [
   "incoherent"
 ];
 var DERIVABLE_STATUSES = DERIVED_STATUSES.filter((s) => s !== "backlog");
+// ../../packages/aeg-core/src/parse-ledger.ts
+function rowFromCells(cells) {
+  if (cells.length < 7)
+    return null;
+  const phase = (cells[0] ?? "").trim();
+  if (!phase)
+    return null;
+  return {
+    phase,
+    role: (cells[1] ?? "").trim(),
+    agentModel: (cells[2] ?? "").trim(),
+    tokensIn: parseIntCell(cells[3] ?? ""),
+    tokensOut: parseIntCell(cells[4] ?? ""),
+    cost: parseCostCell(cells[5] ?? ""),
+    date: (cells[6] ?? "").trim()
+  };
+}
+function parseIntCell(cell) {
+  const trimmed = cell.replace(/`/g, "").trim();
+  if (!trimmed || isEmDashOrDash(trimmed))
+    return null;
+  const normalized = trimmed.replace(/[,_\s]/g, "");
+  if (!/^-?\d+$/.test(normalized))
+    return null;
+  return Number(normalized);
+}
+function parseCostCell(cell) {
+  const trimmed = cell.replace(/`/g, "").trim();
+  if (!trimmed || isEmDashOrDash(trimmed))
+    return null;
+  const normalized = trimmed.replace(/^\$/, "").replace(/[,_\s]/g, "");
+  if (!/^-?\d+(\.\d+)?$/.test(normalized))
+    return null;
+  return Number(normalized);
+}
+function isEmDashOrDash(s) {
+  const t = s.trim();
+  return t === "—" || t === "-" || t === "–";
+}
+// ../../packages/aeg-core/src/parse-token-report.ts
+var TOKEN_REPORT_HEADING = /^\s*(?:#{1,6}\s*Token report\s*|\*\*Token report\*\*)\s*$/i;
+var INLINE_FIELD_LIST = /Phase:\s*([^|]+?)\s*\|\s*Role:\s*([^|]+?)\s*\|\s*Agent\/Model:\s*([^|]+?)\s*\|\s*Tokens in:\s*([^|]+?)\s*\|\s*Tokens out:\s*([^|]+?)\s*\|\s*Cost:\s*([^|]+?)\s*\|\s*Date:\s*(.+?)\s*$/im;
+function parseTokenReportEntries(body) {
+  const lines = body.split(/\r?\n/);
+  const headingIdxs = [];
+  lines.forEach((line, i) => {
+    if (TOKEN_REPORT_HEADING.test(line))
+      headingIdxs.push(i);
+  });
+  const out = [];
+  for (let h = 0;h < headingIdxs.length; h++) {
+    const start = headingIdxs[h] + 1;
+    const end = h + 1 < headingIdxs.length ? headingIdxs[h + 1] : lines.length;
+    const section = lines.slice(start, end).join(`
+`);
+    const tableRows = parseTableSection(section);
+    if (tableRows.length > 0) {
+      out.push(...tableRows);
+      continue;
+    }
+    const inlineRow = parseInlineFieldList(section);
+    if (inlineRow)
+      out.push(inlineRow);
+  }
+  return out;
+}
+function parseTableSection(section) {
+  const lines = section.split(/\r?\n/);
+  let i = 0;
+  for (;i < lines.length; i++) {
+    if ((lines[i] ?? "").trim().startsWith("|"))
+      break;
+  }
+  if (i + 1 >= lines.length)
+    return [];
+  i += 2;
+  const out = [];
+  for (;i < lines.length; i++) {
+    const trimmed = (lines[i] ?? "").trim();
+    if (!trimmed.startsWith("|"))
+      break;
+    const row = rowFromCells(splitTableRow(trimmed));
+    if (row)
+      out.push(row);
+  }
+  return out;
+}
+function parseInlineFieldList(section) {
+  const m = section.match(INLINE_FIELD_LIST);
+  if (!m)
+    return null;
+  return rowFromCells([m[1], m[2], m[3], m[4], m[5], m[6], m[7]]);
+}
 // ../../packages/aeg-core/src/report-tokens.ts
 var DASH_LOOKALIKES = {
   "-": "‑",
@@ -1801,6 +1894,7 @@ var DASH_LOOKALIKES = {
 };
 var DASH_CHARS = new Set(Object.keys(DASH_LOOKALIKES));
 // ../../packages/aeg-core/src/claude-code-transcript.ts
+import { createHash } from "node:crypto";
 function summarizeTranscript(jsonl) {
   const seen = new Set;
   const components = {
@@ -1849,7 +1943,14 @@ function numberOr(value, fallback) {
 function sanitizeKey(value) {
   return value.replace(/[^A-Za-z0-9]+/g, "-");
 }
+function collisionResistantKey(value) {
+  const digest = createHash("sha256").update(value).digest("hex");
+  return `${sanitizeKey(value)}-${digest}`;
+}
 function transcriptPointerPath(projectDir, tmpDir) {
+  return `${tmpDir}/claude-transcript-${collisionResistantKey(projectDir)}.txt`;
+}
+function legacyTranscriptPointerPath(projectDir, tmpDir) {
   return `${tmpDir}/claude-transcript-${sanitizeKey(projectDir)}.txt`;
 }
 function resolvePointer(explicitTranscriptPath, deps) {
@@ -1857,13 +1958,15 @@ function resolvePointer(explicitTranscriptPath, deps) {
     return { path: explicitTranscriptPath, corroborated: true };
   const projectDir = deps.env.CLAUDE_PROJECT_DIR ?? deps.cwd;
   const tmpDir = deps.env.TMPDIR ?? "/tmp";
-  const pointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const primaryPointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const legacyPointerPath = legacyTranscriptPointerPath(projectDir, tmpDir);
   const currentSessionId = deps.env.CLAUDE_CODE_SESSION_ID;
-  if (!deps.exists(pointerPath)) {
+  const pointerPath = deps.exists(primaryPointerPath) ? primaryPointerPath : deps.exists(legacyPointerPath) ? legacyPointerPath : undefined;
+  if (!pointerPath) {
     return {
       pointerExisted: false,
       corroborated: false,
-      error: `No transcript pointer at ${pointerPath} and no --transcript given. ` + "Either this repo installs no track-transcript.sh Stop hook (lacking one is not a defect — " + "name the transcript directly instead), or no session has completed a turn yet."
+      error: `No transcript pointer at ${primaryPointerPath} (nor its pre-migration name ${legacyPointerPath}) ` + "and no --transcript given. Either this repo installs no track-transcript.sh Stop hook (lacking one " + "is not a defect — name the transcript directly instead), or no session has completed a turn yet."
     };
   }
   let contents;
@@ -1938,6 +2041,9 @@ function isTokenCollectionWiringBroken(capability) {
     return false;
   return capability.reason !== "no-transcript-resolved";
 }
+// ../../packages/aeg-core/src/metering-io-guard.ts
+import { closeSync, constants as fsConstants, fstatSync, openSync, readFileSync } from "node:fs";
+var GUARD_OPEN_FLAGS = fsConstants.O_RDONLY | fsConstants.O_NONBLOCK | fsConstants.O_NOFOLLOW;
 // ../../packages/aeg-core/src/file-classify.ts
 function isCodeFile(p) {
   if (p.endsWith(".md"))
@@ -2144,7 +2250,7 @@ function overrideActive(opts) {
   return false;
 }
 // ../../packages/aeg-core/src/premise-check.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var ASSERTION_KINDS = new Set(["contains", "absent", "sha256"]);
 function isPremiseHeader(line) {
   const stripped = line.replace(/[*#]/g, "").trim();
@@ -2189,7 +2295,7 @@ function checkPremises(assertions, fileReader) {
     } else if (a.kind === "absent" && content.includes(a.value)) {
       failures.push(`premise-check: ${a.path} now contains "${a.value}", but the brief pinned it absent — the premise has moved; re-dig before proceeding.`);
     } else if (a.kind === "sha256") {
-      const actual = createHash("sha256").update(content).digest("hex");
+      const actual = createHash2("sha256").update(content).digest("hex");
       if (actual !== a.value.toLowerCase()) {
         failures.push(`premise-check: ${a.path} sha256 mismatch (brief pinned ${a.value}, file is now ${actual}) — the file changed since this brief was authored; re-dig before proceeding.`);
       }
@@ -3917,7 +4023,7 @@ function findWorkspaceEscapes(files, knownPaths, workspaceDirs = DEFAULT_WORKSPA
 }
 // src/lib/config.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync as readFileSync2, realpathSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { z } from "zod";
@@ -4210,7 +4316,7 @@ function loadConfig() {
   if (!path)
     return null;
   try {
-    const raw = JSON.parse(readFileSync(path, "utf-8"));
+    const raw = JSON.parse(readFileSync2(path, "utf-8"));
     return stripGlobalOnlyKeys(VinayaConfigSchema.parse(raw), path);
   } catch {
     return null;
@@ -4262,7 +4368,7 @@ function collectWorkingTree(dir, out = []) {
   return out;
 }
 function readWorkingTree(paths) {
-  return paths.map((p) => ({ path: p, content: readFileSync2(p, "utf8") }));
+  return paths.map((p) => ({ path: p, content: readFileSync3(p, "utf8") }));
 }
 function collectAtRef(ref, dir) {
   const listing = git(["ls-tree", "-r", "--name-only", ref, "--", dir]);