@basou/cli 0.37.0 → 0.39.0

package/dist/index.js

@@ -632,10 +632,243 @@ function printNoApprovals(options) {
   }
 }
 
+// src/lib/context-channel.ts
+import { homedir } from "os";
+import { join as join3 } from "path";
+import {
+  ORIENTATION_END,
+  ORIENTATION_START,
+  parseMarkers,
+  readMarkdownFile,
+  removeMarkerSection
+} from "@basou/core";
+
+// src/lib/durable-write.ts
+import { randomUUID } from "crypto";
+import { lstat, open, rename, stat, unlink as unlink2 } from "fs/promises";
+import { basename, dirname, join as join2 } from "path";
+async function assertNotSymlink(targetPath) {
+  try {
+    const st = await lstat(targetPath);
+    if (st.isSymbolicLink()) {
+      throw new Error(
+        "Refusing to write through a symlink. Replace the symlinked target with a regular file (or remove it) and retry."
+      );
+    }
+  } catch (error) {
+    if (error instanceof Error && error.code === "ENOENT") return;
+    throw error;
+  }
+}
+async function writeFileDurable(targetPath, content) {
+  const dir = dirname(targetPath);
+  const tmpPath = join2(dir, `.${basename(targetPath)}.tmp.${randomUUID()}`);
+  let mode = 420;
+  try {
+    mode = (await stat(targetPath)).mode & 511;
+  } catch (error) {
+    if (!(error instanceof Error && error.code === "ENOENT")) {
+      throw error;
+    }
+  }
+  let handle;
+  try {
+    handle = await open(tmpPath, "wx", mode);
+    await handle.writeFile(content, "utf8");
+    await handle.chmod(mode);
+    await handle.sync();
+    await handle.close();
+    handle = void 0;
+    await rename(tmpPath, targetPath);
+  } catch (error) {
+    if (handle) await handle.close().catch(() => void 0);
+    await unlink2(tmpPath).catch(() => void 0);
+    throw error;
+  }
+  try {
+    const dirHandle = await open(dir, "r");
+    try {
+      await dirHandle.sync();
+    } finally {
+      await dirHandle.close();
+    }
+  } catch {
+  }
+}
+
+// src/lib/context-channel.ts
+var CODEX_TARGET_PATH = join3(homedir(), ".codex", "AGENTS.md");
+var ORIENTATION_MARKERS = { start: ORIENTATION_START, end: ORIENTATION_END };
+var ORIENTATION_MANAGED_NOTE = "<!-- Managed by basou: 'basou refresh' regenerates everything between the BASOU:ORIENTATION markers with the workspace's current position. This block is transient \u2014 it changes every refresh; do not edit it. -->";
+function buildTargetBody(existing, block, markers) {
+  const wrapped = `${markers.start}
+${block}${markers.end}
+`;
+  if (existing === null || existing === "") return wrapped;
+  const section = parseMarkers(existing, markers);
+  switch (section.kind) {
+    case "ok":
+      return `${section.before}${markers.start}
+${block}${markers.end}${section.after}`;
+    case "no_markers": {
+      const sep = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+      return `${existing}${sep}${wrapped}`;
+    }
+    default:
+      throw new Error(
+        "The basou-managed markers in the target are malformed (a marker is missing, duplicated, or out of order). Fix or remove them, then retry."
+      );
+  }
+}
+async function backupOnce(target, existing) {
+  const bak = `${target}.basou-bak`;
+  const already = await readMarkdownFile(bak);
+  if (already !== null) return;
+  await writeFileDurable(bak, existing ?? "");
+}
+async function syncMarkerBlock(opts) {
+  const { target, markers, block } = opts;
+  await assertNotSymlink(target);
+  const existing = await readMarkdownFile(target);
+  const newBody = buildTargetBody(existing, block, markers);
+  if (newBody === existing) return { action: "unchanged" };
+  const hadBlock = existing !== null && parseMarkers(existing, markers).kind === "ok";
+  const action = hadBlock ? "updated" : "installed";
+  if (opts.dryRun === true) return { action };
+  const recheck = await readMarkdownFile(target);
+  if (recheck !== existing) {
+    throw new Error(
+      "The target changed during sync; aborting so a concurrent edit is not overwritten. Re-run the command."
+    );
+  }
+  await backupOnce(target, existing);
+  await writeFileDurable(target, newBody);
+  return { action };
+}
+function assertNoMarkerLine(body, markers) {
+  for (const line of body.split(/\r?\n/)) {
+    if (line === markers.start || line === markers.end) {
+      throw new Error(
+        "The content contains a basou marker line, which would corrupt the managed block. Remove that line from the source."
+      );
+    }
+  }
+}
+async function removeMarkerBlock(opts) {
+  const { target, markers, fileLabel } = opts;
+  await assertNotSymlink(target);
+  const existing = await readMarkdownFile(target);
+  if (existing === null) return { removed: false };
+  const newBody = removeMarkerSection(existing, fileLabel, markers);
+  if (newBody === existing) return { removed: false };
+  if (opts.dryRun === true) return { removed: true };
+  const recheck = await readMarkdownFile(target);
+  if (recheck !== existing) {
+    throw new Error(
+      "The target changed during unsync; aborting so a concurrent edit is not overwritten. Re-run the command."
+    );
+  }
+  if (opts.backup !== false) await backupOnce(target, existing);
+  await writeFileDurable(target, newBody);
+  return { removed: true };
+}
+async function syncOrientationChannel(opts) {
+  assertNoMarkerLine(opts.body, ORIENTATION_MARKERS);
+  const block = `${ORIENTATION_MANAGED_NOTE}
+
+${opts.body.replace(/\s+$/, "")}
+`;
+  return syncMarkerBlock({
+    target: opts.target ?? CODEX_TARGET_PATH,
+    markers: ORIENTATION_MARKERS,
+    block,
+    ...opts.dryRun === true ? { dryRun: true } : {}
+  });
+}
+async function clearOrientationChannel(opts) {
+  return removeMarkerBlock({
+    target: opts.target ?? CODEX_TARGET_PATH,
+    markers: ORIENTATION_MARKERS,
+    // Name the file actually acted on, so an error under the test seam does not
+    // point at the locked path.
+    fileLabel: opts.target ?? "~/.codex/AGENTS.md",
+    // The block is being removed because it should not be on this machine;
+    // preserving it in `.basou-bak` would defeat the command.
+    backup: false,
+    ...opts.dryRun === true ? { dryRun: true } : {}
+  });
+}
+async function renderOrientationToCodexChannel(opts) {
+  const body = await readMarkdownFile(opts.orientationPath);
+  if (body === null) return null;
+  const { action } = await syncOrientationChannel({
+    body,
+    ...opts.channelPath !== void 0 ? { target: opts.channelPath } : {}
+  });
+  return {
+    action,
+    line: `codex channel: orientation ${action} in ${opts.channelPath ?? "~/.codex/AGENTS.md"}`
+  };
+}
+
+// src/commands/channel.ts
+function registerChannelCommand(program2) {
+  const channel = program2.command("channel").description(
+    "Manage the user-global context faces basou renders into \u2014 files every project's AI tool auto-loads (~/.codex/AGENTS.md)"
+  );
+  channel.command("clear").argument(
+    "<face>",
+    "the face to clear: `codex` (the basou:orientation block in ~/.codex/AGENTS.md)"
+  ).description(
+    "Remove basou's block from a user-global context face, so no workspace's position is left in a file that another project's tool reads"
+  ).option("--dry-run", "Report whether a block would be removed without writing").option("--json", "Output the result as JSON").option("--target <path>", "Override the target file (intended for tests)").option("-v, --verbose", "Show error causes").action(async (face, opts) => {
+    await runChannelClear(face, opts);
+  });
+}
+async function runChannelClear(face, options) {
+  if (face !== "codex") {
+    console.error(
+      `Unknown face '${face}'. Faces: codex (~/.codex/AGENTS.md). The basou:protocols block in ~/.claude/CLAUDE.md is removed with \`basou protocol unsync\`.`
+    );
+    process.exitCode = 1;
+    return;
+  }
+  try {
+    await doRunChannelClear(face, options);
+  } catch (error) {
+    renderCliError(error, { verbose: isVerbose(options) });
+    process.exitCode = 1;
+  }
+}
+async function doRunChannelClear(face, options) {
+  const isDry = options.dryRun === true;
+  const { removed } = await clearOrientationChannel({
+    ...options.target !== void 0 ? { target: options.target } : {},
+    ...isDry ? { dryRun: true } : {}
+  });
+  const target = options.target ?? CODEX_TARGET_PATH;
+  const label = options.target ?? "~/.codex/AGENTS.md";
+  const result = { face, target, removed, dry_run: isDry };
+  if (options.json === true) {
+    console.log(JSON.stringify(result));
+    return result;
+  }
+  if (!removed) {
+    console.log(`Nothing to clear: ${label} carries no basou:orientation block.`);
+  } else if (isDry) {
+    console.log(`[dry-run] Would remove the basou:orientation block from ${label}.`);
+  } else {
+    console.log(
+      `Removed the basou:orientation block from ${label}. Nothing basou wrote remains in that file; the next opted-in \`basou refresh\` renders it again.`
+    );
+  }
+  return result;
+}
+
 // src/commands/decision.ts
 import { readFile } from "fs/promises";
-import { homedir as homedir2 } from "os";
-import { join as join3, resolve as resolve3 } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join5, resolve as resolve3 } from "path";
 import {
   AGENT_INFRA_DIRS,
   acquireLock as acquireLock2,
@@ -657,18 +890,18 @@ import {
 import { InvalidArgumentError } from "commander";
 
 // src/lib/repo-root.ts
-import { realpath, stat } from "fs/promises";
-import { basename, resolve as resolve2 } from "path";
+import { realpath, stat as stat2 } from "fs/promises";
+import { basename as basename2, resolve as resolve2 } from "path";
 import { basouPaths as basouPaths2, readManifest, resolveBasouRepositoryRoot } from "@basou/core";
 
 // src/lib/portfolio-config.ts
-import { homedir } from "os";
-import { isAbsolute, join as join2, resolve } from "path";
+import { homedir as homedir2 } from "os";
+import { isAbsolute, join as join4, resolve } from "path";
 import { readYamlFile as readYamlFile2 } from "@basou/core";
-var DEFAULT_PORTFOLIO_CONFIG_PATH = join2(homedir(), ".basou", "portfolio.yaml");
+var DEFAULT_PORTFOLIO_CONFIG_PATH = join4(homedir2(), ".basou", "portfolio.yaml");
 function expandTilde(p) {
-  if (p === "~") return homedir();
-  if (p.startsWith("~/")) return join2(homedir(), p.slice(2));
+  if (p === "~") return homedir2();
+  if (p.startsWith("~/")) return join4(homedir2(), p.slice(2));
   return p;
 }
 function isRecord(value) {
@@ -750,7 +983,7 @@ async function resolveBasouRootForCommand(cwd, commandName, opts = {}) {
 }
 async function hasBasouStore(root) {
   try {
-    return (await stat(basouPaths2(root).root)).isDirectory();
+    return (await stat2(basouPaths2(root).root)).isDirectory();
   } catch {
     return false;
   }
@@ -782,7 +1015,7 @@ async function resolveMemberToMaster(repoRoot, configPath) {
     } catch (error) {
       if (error instanceof Error && error.message !== "YAML file not found") {
         console.error(
-          `Skipping portfolio workspace '${ws.label ?? basename(masterReal)}': could not read its manifest (${error.message}).`
+          `Skipping portfolio workspace '${ws.label ?? basename2(masterReal)}': could not read its manifest (${error.message}).`
         );
       }
       continue;
@@ -791,7 +1024,7 @@ async function resolveMemberToMaster(repoRoot, configPath) {
     for (const sr of sourceRoots) {
       const real = await realpathOrNull(resolve2(masterReal, sr));
       if (real !== null && real === memberReal) {
-        claimants.set(masterReal, { root: masterReal, label: ws.label ?? basename(masterReal) });
+        claimants.set(masterReal, { root: masterReal, label: ws.label ?? basename2(masterReal) });
         break;
       }
     }
@@ -1044,7 +1277,7 @@ async function doRunDecisionCapture(options, ctx) {
     "--file",
     sanitizePath(resolve3(cwd, options.file), {
       workingDirectory: repositoryRoot,
-      homedir: homedir2()
+      homedir: homedir3()
     })
   ] : [];
   const adHoc = await createAdHocSessionWithEvent({
@@ -1181,7 +1414,7 @@ function isDecisionId(value) {
 async function decisionExists(paths, decisionId) {
   const entries = await loadSessionEntries(paths, { now: /* @__PURE__ */ new Date() });
   for (const entry of entries) {
-    const sessionDir = join3(paths.sessions, entry.sessionId);
+    const sessionDir = join5(paths.sessions, entry.sessionId);
     try {
       for await (const ev of replayEvents2(sessionDir, {})) {
         if (ev.type === "decision_recorded" && ev.decision_id === decisionId) return true;
@@ -1576,7 +1809,7 @@ import {
   assertBasouRootSafe as assertBasouRootSafe3,
   basouPaths as basouPaths4,
   findErrorCode as findErrorCode3,
-  readMarkdownFile,
+  readMarkdownFile as readMarkdownFile2,
   renderDecisions,
   renderWithMarkers,
   resolveRepositoryRoot as resolveRepositoryRoot3,
@@ -1609,7 +1842,7 @@ async function doRunDecisionsGenerate(options, ctx) {
     onWarning: (w, sid) => printReplayWarning(w, sid),
     onSessionSkip: (sid, reason) => printSessionSkip(sid, reason)
   });
-  const existing = await readMarkdownFile(paths.files.decisions);
+  const existing = await readMarkdownFile2(paths.files.decisions);
   const finalBody = renderWithMarkers(existing, result.body, "decisions.md");
   await writeMarkdownFile(paths.files.decisions, finalBody);
   console.log(`Generated .basou/decisions.md (decisions: ${result.decisionCount})`);
@@ -1640,8 +1873,8 @@ async function assertWorkspaceInitialized3(basouRoot) {
 
 // src/commands/exec.ts
 import { mkdir } from "fs/promises";
-import { homedir as homedir3 } from "os";
-import { join as join4 } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 import {
   acquireLock as acquireLock3,
   assertBasouRootSafe as assertBasouRootSafe4,
@@ -1681,13 +1914,13 @@ async function runExec(command, args, options, ctx = {}) {
   await assertBasouRootSafe4(paths.root);
   const manifest = await readManifest3(paths);
   const sessionId = prefixedUlid3("ses");
-  const sessionDir = join4(paths.sessions, sessionId);
+  const sessionDir = join6(paths.sessions, sessionId);
   await mkdir(sessionDir, { recursive: true });
   const appendEvent = ctx.appendEvent ?? (async (_sessionDir, event) => {
     await coreAppendChainedEvent(paths, sessionId, event);
   });
   const startedAt = now().toISOString();
-  const sessionYamlPath = join4(sessionDir, "session.yaml");
+  const sessionYamlPath = join6(sessionDir, "session.yaml");
   const session = buildInitialSession({
     id: sessionId,
     command,
@@ -1892,7 +2125,7 @@ function buildInitialSession(input) {
       source: { kind: "terminal", version: "0.1.0" },
       started_at: input.startedAt,
       status: "initialized",
-      working_directory: sanitizeWorkingDirectory(input.cwd, { homedir: homedir3() }),
+      working_directory: sanitizeWorkingDirectory(input.cwd, { homedir: homedir4() }),
       invocation: {
         command: input.command,
         args: [...input.args],
@@ -1968,7 +2201,7 @@ import {
   assertBasouRootSafe as assertBasouRootSafe5,
   basouPaths as basouPaths6,
   findErrorCode as findErrorCode4,
-  readMarkdownFile as readMarkdownFile2,
+  readMarkdownFile as readMarkdownFile3,
   renderHandoff,
   renderWithMarkers as renderWithMarkers2,
   resolveRepositoryRoot as resolveRepositoryRoot5,
@@ -2002,7 +2235,7 @@ async function doRunHandoffGenerate(options, ctx) {
     onSessionSkip: (sid, reason) => printSessionSkip(sid, reason),
     onTaskSkip: (taskId, reason) => printTaskSkip(taskId, reason)
   });
-  const existing = await readMarkdownFile2(paths.files.handoff);
+  const existing = await readMarkdownFile3(paths.files.handoff);
   const finalBody = renderWithMarkers2(existing, result.body, "handoff.md");
   await writeMarkdownFile2(paths.files.handoff, finalBody);
   console.log(
@@ -2035,8 +2268,8 @@ async function assertWorkspaceInitialized4(basouRoot) {
 
 // src/commands/hook.ts
 import { open as open2, readFile as readFile2, stat as stat3 } from "fs/promises";
-import { homedir as homedir4 } from "os";
-import { join as join6 } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join7 } from "path";
 import { fileURLToPath } from "url";
 import {
   buildStopHookCommand,
@@ -2046,61 +2279,6 @@ import {
   removeStopHook,
   upsertStopHook
 } from "@basou/core";
-
-// src/lib/durable-write.ts
-import { randomUUID } from "crypto";
-import { lstat, open, rename, stat as stat2, unlink as unlink2 } from "fs/promises";
-import { basename as basename2, dirname, join as join5 } from "path";
-async function assertNotSymlink(targetPath) {
-  try {
-    const st = await lstat(targetPath);
-    if (st.isSymbolicLink()) {
-      throw new Error(
-        "Refusing to write through a symlink. Replace the symlinked target with a regular file (or remove it) and retry."
-      );
-    }
-  } catch (error) {
-    if (error instanceof Error && error.code === "ENOENT") return;
-    throw error;
-  }
-}
-async function writeFileDurable(targetPath, content) {
-  const dir = dirname(targetPath);
-  const tmpPath = join5(dir, `.${basename2(targetPath)}.tmp.${randomUUID()}`);
-  let mode = 420;
-  try {
-    mode = (await stat2(targetPath)).mode & 511;
-  } catch (error) {
-    if (!(error instanceof Error && error.code === "ENOENT")) {
-      throw error;
-    }
-  }
-  let handle;
-  try {
-    handle = await open(tmpPath, "wx", mode);
-    await handle.writeFile(content, "utf8");
-    await handle.chmod(mode);
-    await handle.sync();
-    await handle.close();
-    handle = void 0;
-    await rename(tmpPath, targetPath);
-  } catch (error) {
-    if (handle) await handle.close().catch(() => void 0);
-    await unlink2(tmpPath).catch(() => void 0);
-    throw error;
-  }
-  try {
-    const dirHandle = await open(dir, "r");
-    try {
-      await dirHandle.sync();
-    } finally {
-      await dirHandle.close();
-    }
-  } catch {
-  }
-}
-
-// src/commands/hook.ts
 var MAX_TRANSCRIPT_BYTES = 8 * 1024 * 1024;
 function registerHookCommand(program2) {
   const hook = program2.command("hook").description(
@@ -2256,7 +2434,7 @@ function parseMinEdits(raw) {
   if (raw === void 0 || !/^\d+$/.test(raw)) return void 0;
   return Number(raw);
 }
-var DEFAULT_CLAUDE_SETTINGS_PATH = join6(homedir4(), ".claude", "settings.json");
+var DEFAULT_CLAUDE_SETTINGS_PATH = join7(homedir5(), ".claude", "settings.json");
 function resolveCliEntry() {
   return fileURLToPath(import.meta.url);
 }
@@ -2421,8 +2599,8 @@ function describeHookMode(tiers) {
 // src/commands/import.ts
 import { createReadStream } from "fs";
 import { readdir, readFile as readFile3, rm, stat as stat4 } from "fs/promises";
-import { homedir as homedir5 } from "os";
-import { basename as basename3, dirname as dirname2, join as join7, resolve as resolve4 } from "path";
+import { homedir as homedir6 } from "os";
+import { basename as basename3, dirname as dirname2, join as join8, resolve as resolve4 } from "path";
 import { createInterface } from "readline";
 import {
   AGENT_INFRA_DIRS as AGENT_INFRA_DIRS2,
@@ -2508,7 +2686,7 @@ async function doRunImportClaudeCode(options, ctx) {
     repoRoot: repositoryRoot,
     cwd: ctx.cwd ?? process.cwd()
   });
-  const projectsRoot = ctx.claudeProjectsDir ?? join7(homedir5(), ".claude", "projects");
+  const projectsRoot = ctx.claudeProjectsDir ?? join8(homedir6(), ".claude", "projects");
   const files = await selectTranscriptFiles(projectsRoot, projectPaths, options);
   const projectSet = new Set(projectPaths);
   const candidates = files.map((file) => {
@@ -2547,7 +2725,7 @@ async function doRunImportCodex(options, ctx) {
     repoRoot: repositoryRoot,
     cwd: ctx.cwd ?? process.cwd()
   });
-  const sessionsRoot = ctx.codexSessionsDir ?? join7(homedir5(), ".codex", "sessions");
+  const sessionsRoot = ctx.codexSessionsDir ?? join8(homedir6(), ".codex", "sessions");
   const rollouts = await discoverCodexRollouts(sessionsRoot, projectPaths, options);
   const candidates = rollouts.map(({ file, externalId }) => ({
     externalId,
@@ -2676,7 +2854,7 @@ async function importDerivedSessions(paths, manifest, options, sourceKind, candi
     if (priors.length > 0 && options.force === true) {
       if (options.dryRun !== true) {
         for (const { sessionId } of priors) {
-          await rm(join7(paths.sessions, sessionId), { recursive: true, force: true });
+          await rm(join8(paths.sessions, sessionId), { recursive: true, force: true });
         }
       }
       counts.replaced++;
@@ -2787,7 +2965,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
   if (options.session !== void 0) {
     const matches = [];
     for (const projectPath of projectPaths) {
-      const file = join7(projectsRoot, encodeProjectDir(projectPath), `${options.session}.jsonl`);
+      const file = join8(projectsRoot, encodeProjectDir(projectPath), `${options.session}.jsonl`);
       if (await pathExists(file)) matches.push(file);
     }
     if (matches.length === 0) {
@@ -2798,7 +2976,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
   const files = [];
   let anyDirFound = false;
   for (const projectPath of projectPaths) {
-    const transcriptDir = join7(projectsRoot, encodeProjectDir(projectPath));
+    const transcriptDir = join8(projectsRoot, encodeProjectDir(projectPath));
     let entries;
     try {
       entries = await readdir(transcriptDir);
@@ -2808,7 +2986,7 @@ async function selectTranscriptFiles(projectsRoot, projectPaths, options) {
     }
     anyDirFound = true;
     for (const name of entries) {
-      if (name.endsWith(".jsonl")) files.push(join7(transcriptDir, name));
+      if (name.endsWith(".jsonl")) files.push(join8(transcriptDir, name));
     }
   }
   if (!anyDirFound) {
@@ -2865,7 +3043,7 @@ async function findRolloutFiles(sessionsRoot) {
       throw new Error("Failed to read Codex sessions directory", { cause: error });
     }
     for (const entry of entries) {
-      const full = join7(dir, entry.name);
+      const full = join8(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(full, false);
       } else if (entry.isFile() && entry.name.startsWith("rollout-") && entry.name.endsWith(".jsonl")) {
@@ -3304,13 +3482,13 @@ import {
 } from "@basou/core";
 
 // src/lib/hosts-config.ts
-import { homedir as homedir6 } from "os";
-import { isAbsolute as isAbsolute2, join as join8, resolve as resolve6 } from "path";
+import { homedir as homedir7 } from "os";
+import { isAbsolute as isAbsolute2, join as join9, resolve as resolve6 } from "path";
 import { readYamlFile as readYamlFile4 } from "@basou/core";
-var DEFAULT_HOSTS_CONFIG_PATH = join8(homedir6(), ".basou", "hosts.yaml");
+var DEFAULT_HOSTS_CONFIG_PATH = join9(homedir7(), ".basou", "hosts.yaml");
 function expandTilde2(p) {
-  if (p === "~") return homedir6();
-  if (p.startsWith("~/")) return join8(homedir6(), p.slice(2));
+  if (p === "~") return homedir7();
+  if (p.startsWith("~/")) return join9(homedir7(), p.slice(2));
   return p;
 }
 function isRecord2(value) {
@@ -3361,7 +3539,7 @@ async function loadHostsConfig(configPath = DEFAULT_HOSTS_CONFIG_PATH) {
 
 // src/lib/provenance-actions.ts
 import {
-  readMarkdownFile as readMarkdownFile3,
+  readMarkdownFile as readMarkdownFile4,
   renderDecisions as renderDecisions2,
   renderHandoff as renderHandoff2,
   renderOrientation,
@@ -3445,7 +3623,7 @@ function importCodex(options, ctx) {
 }
 async function regenerateHandoff(paths, nowIso, callbacks) {
   const result = await renderHandoff2({ paths, nowIso, ...callbacks });
-  const existing = await readMarkdownFile3(paths.files.handoff);
+  const existing = await readMarkdownFile4(paths.files.handoff);
   await writeMarkdownFile3(
     paths.files.handoff,
     renderWithMarkers3(existing, result.body, "handoff.md")
@@ -3459,7 +3637,7 @@ async function regenerateHandoff(paths, nowIso, callbacks) {
 }
 async function regenerateDecisions(paths, nowIso, callbacks) {
   const result = await renderDecisions2({ paths, nowIso, ...callbacks });
-  const existing = await readMarkdownFile3(paths.files.decisions);
+  const existing = await readMarkdownFile4(paths.files.decisions);
   await writeMarkdownFile3(
     paths.files.decisions,
     renderWithMarkers3(existing, result.body, "decisions.md")
@@ -3620,13 +3798,13 @@ async function assertWorkspaceInitialized7(basouRoot) {
 
 // src/commands/portfolio.ts
 import { existsSync, statSync } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 function registerPortfolioCommand(program2) {
   program2.command("portfolio").description(
     "List the workspaces you orient across (read-only): every planning master registered in ~/.basou/portfolio.yaml, with its path and whether it exists / is initialized. The headless text/JSON counterpart to the `basou view --portfolio` GUI \u2014 for discovering where a sibling project lives without opening a browser"
   ).argument("[action]", "optional literal `list` (the only, and default, action)").option("--json", "Output the result as JSON").option(
     "--check",
-    "moved: the redundancy/footprint safety preflight is `basou view --portfolio --check` (this prints that pointer and exits)"
+    "moved: the redundancy/footprint preflight and the capture-coverage report are `basou view --portfolio --check` (this prints that pointer and exits)"
   ).option("-v, --verbose", "Show error causes").action(async (action, opts) => {
     await runPortfolioCommand(action, opts);
   });
@@ -3641,7 +3819,7 @@ function isDirectory(path) {
 async function runPortfolioCommand(action, options, ctx = {}) {
   if (options.check === true) {
     console.error(
-      "`basou portfolio` is a read-only listing; it has no safety preflight.\nRun `basou view --portfolio --check` for the redundancy/footprint check."
+      "`basou portfolio` is a read-only listing; it has no preflight.\nRun `basou view --portfolio --check` for the redundancy/footprint check and the capture-coverage report."
     );
     process.exitCode = 1;
     return;
@@ -3666,7 +3844,7 @@ async function runPortfolioList(options, ctx = {}) {
 async function doRunPortfolioList(options, ctx) {
   const configPath = ctx.configPath ?? DEFAULT_PORTFOLIO_CONFIG_PATH;
   const pathExists2 = ctx.pathExists ?? ((p) => existsSync(p));
-  const isInitialized = ctx.isInitialized ?? ((p) => isDirectory(join9(p, ".basou")));
+  const isInitialized = ctx.isInitialized ?? ((p) => isDirectory(join10(p, ".basou")));
   const workspaces = await loadPortfolioConfig(configPath);
   const result = {
     configPath,
@@ -3706,7 +3884,7 @@ function renderPortfolioList(result) {
   }
   lines.push("");
   lines.push(
-    "Note: read-only listing of ~/.basou/portfolio.yaml. Run `basou view --portfolio` for the cross-workspace GUI, or `basou view --portfolio --check` for the redundancy/footprint safety preflight."
+    "Note: read-only listing of ~/.basou/portfolio.yaml. Run `basou view --portfolio` for the cross-workspace GUI, or `basou view --portfolio --check` for the redundancy/footprint preflight and the capture-coverage report (which session logs no registered workspace imports)."
   );
   return lines.join("\n");
 }
@@ -3731,7 +3909,7 @@ import {
   writeFileSync,
   writeSync
 } from "fs";
-import { basename as basename5, dirname as dirname3, isAbsolute as isAbsolute3, join as join10, relative as relative2, resolve as resolve7 } from "path";
+import { basename as basename5, dirname as dirname3, isAbsolute as isAbsolute3, join as join11, relative as relative2, resolve as resolve7 } from "path";
 import {
   appendBasouGitignore as appendBasouGitignore2,
   basouPaths as basouPaths10,
@@ -3742,7 +3920,7 @@ import {
   GENERATED_START,
   instructionMode,
   isGitNotFound,
-  parseMarkers,
+  parseMarkers as parseMarkers2,
   pathBasename,
   planArchive,
   planGitignore,
@@ -3750,9 +3928,9 @@ import {
   planRosterAdoption,
   planWorkspaceView,
   readManifest as readManifest6,
-  readMarkdownFile as readMarkdownFile4,
+  readMarkdownFile as readMarkdownFile5,
   reconcileSourceRoots,
-  removeMarkerSection,
+  removeMarkerSection as removeMarkerSection2,
   renderAnchorStarter,
   renderViewPresetBlock,
   renderWithMarkers as renderWithMarkers4,
@@ -4113,7 +4291,7 @@ function classifySourceRoot(repositoryRoot, declaredPath) {
   } catch {
     return { path: declaredPath, kind: "unresolved" };
   }
-  return { path: declaredPath, kind: existsSync2(join10(real, ".git")) ? "repo" : "non-repo" };
+  return { path: declaredPath, kind: existsSync2(join11(real, ".git")) ? "repo" : "non-repo" };
 }
 async function doRunProjectAdopt(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
@@ -4217,7 +4395,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
   } catch {
     return { ...base, reachable: false, instructionFiles: [] };
   }
-  if (!existsSync2(join10(real, ".git"))) {
+  if (!existsSync2(join11(real, ".git"))) {
     return { ...base, reachable: false, instructionFiles: [] };
   }
   try {
@@ -4225,7 +4403,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
     for (const name of INSTRUCTION_FILES) {
       let present = true;
       try {
-        lstatSync(join10(real, name));
+        lstatSync(join11(real, name));
       } catch {
         present = false;
       }
@@ -4336,10 +4514,10 @@ function gatherRepoGitignore(repositoryRoot, entry) {
   } catch {
     return { ...base, reachable: false, currentLines: [] };
   }
-  if (!existsSync2(join10(real, ".git"))) {
+  if (!existsSync2(join11(real, ".git"))) {
     return { ...base, reachable: false, currentLines: [] };
   }
-  return { ...base, reachable: true, currentLines: readGitignoreLines(join10(real, ".gitignore")) };
+  return { ...base, reachable: true, currentLines: readGitignoreLines(join11(real, ".gitignore")) };
 }
 function hasErrorCode(error) {
   return error instanceof Error && typeof error.code === "string";
@@ -4353,7 +4531,7 @@ function readGitignoreLines(file) {
   }
 }
 function applyGitignorePlan(repositoryRoot, plan) {
-  const file = join10(realpathSync(resolve7(repositoryRoot, plan.path)), ".gitignore");
+  const file = join11(realpathSync(resolve7(repositoryRoot, plan.path)), ".gitignore");
   let existing = "";
   try {
     existing = readFileSync(file, "utf8");
@@ -4493,7 +4671,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
   if (real === anchorReal) {
-    const anchorCanonical = join10(real, CANONICAL_FILE);
+    const anchorCanonical = join11(real, CANONICAL_FILE);
     const anchorState = anchorCanonicalState(anchorCanonical);
     if (anchorState === "absent") {
       return { ...base, isAnchor: true, reachable: true, canonicalPresent: false, files: [] };
@@ -4513,7 +4691,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
       anchorCanonical,
       "self"
     ).map((spec) => {
-      const { state, actualTarget } = inspectSymlink(join10(real, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join11(real, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -4530,16 +4708,16 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
       files: anchorFiles
     };
   }
-  if (!existsSync2(join10(real, ".git"))) {
+  if (!existsSync2(join11(real, ".git"))) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
-  const canonicalFile = isSelf ? join10(real, CANONICAL_FILE) : join10(anchorReal, "agents", basename5(real), CANONICAL_FILE);
+  const canonicalFile = isSelf ? join11(real, CANONICAL_FILE) : join11(anchorReal, "agents", basename5(real), CANONICAL_FILE);
   if (!existsSync2(canonicalFile)) {
     return { ...base, isAnchor: false, reachable: true, canonicalPresent: false, files: [] };
   }
   const files = expectedSymlinkTargets(real, canonicalFile, mode).map(
     (spec) => {
-      const { state, actualTarget } = inspectSymlink(join10(real, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join11(real, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -4568,7 +4746,7 @@ function applySymlinkPlan(repositoryRoot, plan) {
   const created = [];
   const failed = [];
   for (const { name, target } of plan.toCreate) {
-    const filePath = join10(real, name);
+    const filePath = join11(real, name);
     try {
       mkdirSync(dirname3(filePath), { recursive: true });
       symlinkSync(target, filePath);
@@ -4602,7 +4780,7 @@ function gatherViewSymlinks(repositoryRoot, anchorReal, roster, viewDir) {
   if (!existsSync2(canonicalFile)) return { kind: "missing-canonical", viewName };
   const files = expectedSymlinkTargets(viewDir, canonicalFile, "hub").map(
     (spec) => {
-      const { state, actualTarget } = inspectSymlink(join10(viewDir, spec.name), spec.target);
+      const { state, actualTarget } = inspectSymlink(join11(viewDir, spec.name), spec.target);
       return {
         name: spec.name,
         expectedTarget: spec.target,
@@ -4618,7 +4796,7 @@ function applyViewSymlinks(viewDir, files) {
   const failed = [];
   for (const f of files) {
     if (f.state !== "missing") continue;
-    const filePath = join10(viewDir, f.name);
+    const filePath = join11(viewDir, f.name);
     try {
       mkdirSync(dirname3(filePath), { recursive: true });
       symlinkSync(f.expectedTarget, filePath);
@@ -4840,7 +5018,7 @@ function resolveViewDir(repositoryRoot, viewPath) {
     return realpathSync(abs);
   } catch {
     try {
-      return join10(realpathSync(dirname3(abs)), basename5(abs));
+      return join11(realpathSync(dirname3(abs)), basename5(abs));
     } catch {
       return abs;
     }
@@ -4858,7 +5036,7 @@ function gatherViewRepo(repositoryRoot, viewDir, entry) {
     return { path: entry.path, reachable: false };
   }
   const linkName = basename5(repoReal);
-  const { state, actualTarget } = inspectSymlink(join10(viewDir, linkName), expectedTarget);
+  const { state, actualTarget } = inspectSymlink(join11(viewDir, linkName), expectedTarget);
   return {
     path: entry.path,
     reachable: true,
@@ -4872,7 +5050,7 @@ function applyViewPlan(viewDir, toCreate) {
   const created = [];
   const failed = [];
   for (const { name, target } of toCreate) {
-    const filePath = join10(viewDir, name);
+    const filePath = join11(viewDir, name);
     try {
       mkdirSync(dirname3(filePath), { recursive: true });
       symlinkSync(target, filePath);
@@ -4887,7 +5065,7 @@ var TOP_LEVEL_INSTRUCTION_FILES_LOWER = new Set(
   INSTRUCTION_FILES.filter((f) => !f.includes("/")).map((f) => f.toLowerCase())
 );
 function classifyViewLink(viewDir, name, rosterRealpaths) {
-  const filePath = join10(viewDir, name);
+  const filePath = join11(viewDir, name);
   let isLink;
   try {
     isLink = lstatSync(filePath).isSymbolicLink();
@@ -4916,7 +5094,7 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   if (!isDir) {
     return { target, kind: existsSync2(resolved) ? "non-repo" : "broken" };
   }
-  return { target, kind: existsSync2(join10(resolved, ".git")) ? "repo" : "non-repo" };
+  return { target, kind: existsSync2(join11(resolved, ".git")) ? "repo" : "non-repo" };
 }
 function gatherExistingViewLinks(viewDir, rosterRealpaths) {
   let names;
@@ -4941,7 +5119,7 @@ function pruneViewLinks(viewDir, toPrune, rosterRealpaths) {
   const pruned = [];
   const failed = [];
   for (const { name } of toPrune) {
-    const filePath = join10(viewDir, name);
+    const filePath = join11(viewDir, name);
     const c = classifyViewLink(viewDir, name, rosterRealpaths);
     if (c === null || c.kind !== "repo") {
       failed.push({
@@ -5154,10 +5332,10 @@ async function runProjectPreset(options, ctx = {}) {
   }
 }
 function canonicalFileFor(anchorReal, canonicalName) {
-  return join10(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  return join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
 }
 function canonicalLabelFor(canonicalName) {
-  return join10("agents", canonicalName, CANONICAL_FILE);
+  return join11("agents", canonicalName, CANONICAL_FILE);
 }
 async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   const declared = {
@@ -5178,13 +5356,13 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   if (real === anchorReal) {
     return { ...declared, isAnchor: true, reachable: true, canonicalPresent: false };
   }
-  if (!existsSync2(join10(real, ".git"))) {
+  if (!existsSync2(join11(real, ".git"))) {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
   const canonicalName = basename5(real);
   let content;
   try {
-    content = await readMarkdownFile4(canonicalFileFor(anchorReal, canonicalName));
+    content = await readMarkdownFile5(canonicalFileFor(anchorReal, canonicalName));
   } catch {
     return {
       ...declared,
@@ -5204,7 +5382,7 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
       canonicalPresent: false
     };
   }
-  const section = parseMarkers(content);
+  const section = parseMarkers2(content);
   return {
     ...declared,
     isAnchor: false,
@@ -5267,7 +5445,7 @@ function gatherViewPreset(repositoryRoot, anchorReal, viewName, roster) {
     }
     return { kind: "unreadable", canonicalName: viewName, viewName };
   }
-  const section = parseMarkers(content);
+  const section = parseMarkers2(content);
   if (section.kind === "ok") {
     if (normalizeViewBlock(section.generated) === normalizeViewBlock(desiredBlock)) {
       return { kind: "in-sync", canonicalName: viewName, viewName };
@@ -5293,7 +5471,7 @@ async function applyViewPreset(anchorReal, outcome) {
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
   if (outcome.action === "create") mkdirSync(dirname3(file), { recursive: true });
-  const existing = await readMarkdownFile4(file);
+  const existing = await readMarkdownFile5(file);
   await writeMarkdownFile5(file, renderWithMarkers4(existing, outcome.block, label));
 }
 async function applyPresetPlan(anchorReal, plan) {
@@ -5307,7 +5485,7 @@ async function applyPresetPlan(anchorReal, plan) {
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
   if (plan.action === "create") mkdirSync(dirname3(file), { recursive: true });
-  const existing = await readMarkdownFile4(file);
+  const existing = await readMarkdownFile5(file);
   await writeMarkdownFile5(file, renderWithMarkers4(existing, plan.desiredBlock, label));
 }
 function presetFailureReason(error) {
@@ -5560,24 +5738,24 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   const instructionFiles = [];
   for (const name of INSTRUCTION_FILES) {
     try {
-      lstatSync(join10(real, name));
+      lstatSync(join11(real, name));
       instructionFiles.push(name);
     } catch {
     }
   }
   let ignored;
   try {
-    ignored = new Set(readGitignoreLines(join10(real, ".gitignore")).map((l) => l.trim()));
+    ignored = new Set(readGitignoreLines(join11(real, ".gitignore")).map((l) => l.trim()));
   } catch {
     ignored = /* @__PURE__ */ new Set();
   }
   const gitignorePatterns = INSTRUCTION_FILES.filter((p) => ignored.has(p) || ignored.has(`/${p}`));
-  const canonical2 = existsSync2(join10(anchorReal, "agents", canonicalName, CANONICAL_FILE));
+  const canonical2 = existsSync2(join11(anchorReal, "agents", canonicalName, CANONICAL_FILE));
   let viewLink = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join10(resolveViewDir(repositoryRoot, viewPath), canonicalName));
+      lstatSync(join11(resolveViewDir(repositoryRoot, viewPath), canonicalName));
       viewLink = true;
     } catch {
     }
@@ -5591,11 +5769,11 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   };
 }
 function teardownExpectedTargets(repoReal, anchorReal, canonicalName) {
-  const canonicalFile = join10(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
   return expectedSymlinkTargets(repoReal, canonicalFile);
 }
 function viewLinkPointsAt(viewDir, name, repoReal) {
-  const filePath = join10(viewDir, name);
+  const filePath = join11(viewDir, name);
   try {
     if (!lstatSync(filePath).isSymbolicLink()) return false;
     const target = readlinkSync(filePath);
@@ -5606,7 +5784,7 @@ function viewLinkPointsAt(viewDir, name, repoReal) {
   }
 }
 function viewLinkPointsAtPath(viewDir, name, expectedRepoPath) {
-  const filePath = join10(viewDir, name);
+  const filePath = join11(viewDir, name);
   try {
     if (!lstatSync(filePath).isSymbolicLink()) return false;
     const target = readlinkSync(filePath);
@@ -5657,7 +5835,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
   if (!isAnchor) {
     if (repoReal !== void 0) {
       for (const spec of teardownExpectedTargets(repoReal, anchorReal, canonicalName)) {
-        const { state, actualTarget } = inspectSymlink(join10(repoReal, spec.name), spec.target);
+        const { state, actualTarget } = inspectSymlink(join11(repoReal, spec.name), spec.target);
         if (isSelf) {
           if (state !== "missing")
             items.push({
@@ -5694,7 +5872,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
       }
       let ignored;
       try {
-        ignored = new Set(readGitignoreLines(join10(repoReal, ".gitignore")).map((l) => l.trim()));
+        ignored = new Set(readGitignoreLines(join11(repoReal, ".gitignore")).map((l) => l.trim()));
         for (const p of INSTRUCTION_FILES) {
           if (ignored.has(p) || ignored.has(`/${p}`)) {
             items.push({
@@ -5717,7 +5895,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
     const viewPath = manifest.workspace.view;
     if (viewPath !== void 0) {
       const viewDir = resolveViewDir(repositoryRoot, viewPath);
-      const linkPath = join10(viewDir, canonicalName);
+      const linkPath = join11(viewDir, canonicalName);
       let isLink = false;
       try {
         isLink = lstatSync(linkPath).isSymbolicLink();
@@ -5743,8 +5921,8 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
         else items.push({ kind: "view-symlink", label: canonicalName, state: "removable" });
       }
     }
-    const canonicalFile = join10(anchorReal, "agents", canonicalName, CANONICAL_FILE);
-    const canonicalLabel = join10("agents", canonicalName, CANONICAL_FILE);
+    const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+    const canonicalLabel = join11("agents", canonicalName, CANONICAL_FILE);
     let canonicalIsLink = false;
     try {
       canonicalIsLink = lstatSync(canonicalFile).isSymbolicLink();
@@ -5771,7 +5949,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
         });
       }
       if (content !== void 0 && content !== "") {
-        const section = parseMarkers(content);
+        const section = parseMarkers2(content);
         if (section.kind === "ok" && canonicalShared) {
           items.push({
             kind: "canonical-block",
@@ -5787,7 +5965,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
             note: "repo could not be resolved, so ownership cannot be verified (check manually)"
           });
         } else if (section.kind === "ok") {
-          const emptyAfter = removeMarkerSection(content, canonicalLabel).trim().length === 0;
+          const emptyAfter = removeMarkerSection2(content, canonicalLabel).trim().length === 0;
           items.push({
             kind: "canonical-block",
             label: canonicalLabel,
@@ -5848,12 +6026,12 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
   );
   for (const item of removable.filter((i) => i.kind === "instruction-symlink")) {
     const expected = expectedByName.get(item.label);
-    if (repoReal === null || expected === void 0 || inspectSymlink(join10(repoReal, item.label), expected).state !== "correct") {
+    if (repoReal === null || expected === void 0 || inspectSymlink(join11(repoReal, item.label), expected).state !== "correct") {
       changed(item.label);
       continue;
     }
     try {
-      unlinkSync(join10(repoReal, item.label));
+      unlinkSync(join11(repoReal, item.label));
       removed.push(item.label);
     } catch (error) {
       failed.push({ label: item.label, message: failureReason(error) });
@@ -5872,7 +6050,7 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
       continue;
     }
     try {
-      unlinkSync(join10(viewDir, item.label));
+      unlinkSync(join11(viewDir, item.label));
       removed.push(`view/${item.label}`);
     } catch (error) {
       failed.push({ label: `view/${item.label}`, message: failureReason(error) });
@@ -5880,7 +6058,7 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
   }
   const NOFOLLOW = fsConstants.O_NOFOLLOW ?? 0;
   for (const item of removable.filter((i) => i.kind === "canonical-block")) {
-    const canonicalFile = join10(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+    const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
     try {
       if (lstatSync(canonicalFile).isSymbolicLink()) {
         changed(item.label);
@@ -5900,11 +6078,11 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
     }
     try {
       const content = readFileSync(fd, "utf8");
-      if (parseMarkers(content).kind !== "ok") {
+      if (parseMarkers2(content).kind !== "ok") {
         changed(item.label);
         continue;
       }
-      const next = Buffer.from(removeMarkerSection(content, item.label), "utf8");
+      const next = Buffer.from(removeMarkerSection2(content, item.label), "utf8");
       ftruncateSync(fd, 0);
       writeSync(fd, next, 0, next.length, 0);
       removed.push(item.label);
@@ -6154,12 +6332,12 @@ function gatherRenameWiring(repositoryRoot, manifest, oldBasename) {
   } catch {
     return { canonicalDirOld: false, viewLinkOld: false };
   }
-  const canonicalDirOld = existsSync2(join10(anchorReal, "agents", oldBasename));
+  const canonicalDirOld = existsSync2(join11(anchorReal, "agents", oldBasename));
   let viewLinkOld = false;
   const viewPath = manifest.workspace.view;
   if (viewPath !== void 0) {
     try {
-      lstatSync(join10(resolveViewDir(repositoryRoot, viewPath), oldBasename));
+      lstatSync(join11(resolveViewDir(repositoryRoot, viewPath), oldBasename));
       viewLinkOld = true;
     } catch {
     }
@@ -6517,7 +6695,7 @@ async function doRunProjectSeedAnchor(options, ctx) {
     console.log("\u2139\uFE0F No repo roster declared \u2014 nothing to seed.");
     return;
   }
-  const anchorDoc = join10(repositoryRoot, CANONICAL_FILE);
+  const anchorDoc = join11(repositoryRoot, CANONICAL_FILE);
   if (pathPresent(anchorDoc)) {
     console.log(
       `\u2705 The anchor's own \`${CANONICAL_FILE}\` already exists \u2014 hand-maintained, left untouched.`
@@ -6579,7 +6757,7 @@ function regularFileSpokes(repoReal) {
   const out = [];
   for (const spoke of ["CLAUDE.md", ".github/copilot-instructions.md"]) {
     try {
-      const st = lstatSync(join10(repoReal, spoke));
+      const st = lstatSync(join11(repoReal, spoke));
       if (!st.isSymbolicLink() && st.isFile()) out.push(spoke);
     } catch {
     }
@@ -6625,8 +6803,8 @@ function gatherRetrofit(repositoryRoot, anchorReal, roster, argPath, argAbs, arg
     };
   }
   const isAnchor = argReal === anchorReal;
-  const reachable = existsSync2(join10(argReal, ".git"));
-  const canonicalFile = join10(anchorReal, "agents", canonicalName, CANONICAL_FILE);
+  const reachable = existsSync2(join11(argReal, ".git"));
+  const canonicalFile = join11(anchorReal, "agents", canonicalName, CANONICAL_FILE);
   return {
     path,
     declared,
@@ -6635,13 +6813,13 @@ function gatherRetrofit(repositoryRoot, anchorReal, roster, argPath, argAbs, arg
     reachable,
     canonicalName,
     ...viewCanonicalName !== void 0 ? { viewCanonicalName } : {},
-    agentsState: inspectAgentsState(join10(argReal, CANONICAL_FILE)),
+    agentsState: inspectAgentsState(join11(argReal, CANONICAL_FILE)),
     canonicalExists: pathPresent(canonicalFile),
     regularSpokes: regularFileSpokes(argReal)
   };
 }
 function relocateAgentsFile(repoReal, canonicalFile) {
-  const agentsFile = join10(repoReal, CANONICAL_FILE);
+  const agentsFile = join11(repoReal, CANONICAL_FILE);
   try {
     mkdirSync(dirname3(canonicalFile), { recursive: true });
   } catch (error) {
@@ -6675,7 +6853,7 @@ function gatherViewRetrofit(repositoryRoot, anchorReal, viewPath, roster) {
     if (hasErrorCode(error) && error.code === "ENOENT") return { kind: "absent", viewName };
     return { kind: "unreadable", viewName };
   }
-  const section = parseMarkers(content);
+  const section = parseMarkers2(content);
   if (section.kind === "ok") return { kind: "already-marked", viewName };
   if (section.kind === "no_markers") {
     const block = renderViewPresetBlock({
@@ -6696,7 +6874,7 @@ async function applyViewRetrofit(anchorReal, outcome) {
     isLink = false;
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
-  const existing = await readMarkdownFile4(file);
+  const existing = await readMarkdownFile5(file);
   await writeMarkdownFile5(file, seedMarkers(existing, outcome.block, label));
 }
 async function doRunProjectRetrofit(repo, options, ctx) {
@@ -6758,7 +6936,7 @@ async function doRunProjectRetrofit(repo, options, ctx) {
   let failure;
   let partial = false;
   if (options.apply === true && plan.action === "relocate" && argReal !== void 0) {
-    const canonicalFile = join10(anchorReal, "agents", plan.canonicalName, CANONICAL_FILE);
+    const canonicalFile = join11(anchorReal, "agents", plan.canonicalName, CANONICAL_FILE);
     const res = relocateAgentsFile(argReal, canonicalFile);
     if (res.ok) {
       applied = true;
@@ -6961,118 +7139,6 @@ function renderProjectRetrofit(result) {
 import { readFile as readFile4 } from "fs/promises";
 import { PROTOCOL_END, PROTOCOL_START, parseMarkers as parseMarkers3, readMarkdownFile as readMarkdownFile6 } from "@basou/core";
 
-// src/lib/context-channel.ts
-import { homedir as homedir7 } from "os";
-import { join as join11 } from "path";
-import {
-  ORIENTATION_END,
-  ORIENTATION_START,
-  parseMarkers as parseMarkers2,
-  readMarkdownFile as readMarkdownFile5,
-  removeMarkerSection as removeMarkerSection2
-} from "@basou/core";
-var CODEX_TARGET_PATH = join11(homedir7(), ".codex", "AGENTS.md");
-var ORIENTATION_MARKERS = { start: ORIENTATION_START, end: ORIENTATION_END };
-var ORIENTATION_MANAGED_NOTE = "<!-- Managed by basou: 'basou refresh' regenerates everything between the BASOU:ORIENTATION markers with the workspace's current position. This block is transient \u2014 it changes every refresh; do not edit it. -->";
-function buildTargetBody(existing, block, markers) {
-  const wrapped = `${markers.start}
-${block}${markers.end}
-`;
-  if (existing === null || existing === "") return wrapped;
-  const section = parseMarkers2(existing, markers);
-  switch (section.kind) {
-    case "ok":
-      return `${section.before}${markers.start}
-${block}${markers.end}${section.after}`;
-    case "no_markers": {
-      const sep = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
-      return `${existing}${sep}${wrapped}`;
-    }
-    default:
-      throw new Error(
-        "The basou-managed markers in the target are malformed (a marker is missing, duplicated, or out of order). Fix or remove them, then retry."
-      );
-  }
-}
-async function backupOnce(target, existing) {
-  if (existing === null) return;
-  const bak = `${target}.basou-bak`;
-  const already = await readMarkdownFile5(bak);
-  if (already !== null) return;
-  await writeFileDurable(bak, existing);
-}
-async function syncMarkerBlock(opts) {
-  const { target, markers, block } = opts;
-  await assertNotSymlink(target);
-  const existing = await readMarkdownFile5(target);
-  const newBody = buildTargetBody(existing, block, markers);
-  if (newBody === existing) return { action: "unchanged" };
-  const hadBlock = existing !== null && parseMarkers2(existing, markers).kind === "ok";
-  const action = hadBlock ? "updated" : "installed";
-  if (opts.dryRun === true) return { action };
-  const recheck = await readMarkdownFile5(target);
-  if (recheck !== existing) {
-    throw new Error(
-      "The target changed during sync; aborting so a concurrent edit is not overwritten. Re-run the command."
-    );
-  }
-  await backupOnce(target, existing);
-  await writeFileDurable(target, newBody);
-  return { action };
-}
-function assertNoMarkerLine(body, markers) {
-  for (const line of body.split(/\r?\n/)) {
-    if (line === markers.start || line === markers.end) {
-      throw new Error(
-        "The content contains a basou marker line, which would corrupt the managed block. Remove that line from the source."
-      );
-    }
-  }
-}
-async function removeMarkerBlock(opts) {
-  const { target, markers, fileLabel } = opts;
-  await assertNotSymlink(target);
-  const existing = await readMarkdownFile5(target);
-  if (existing === null) return { removed: false };
-  const newBody = removeMarkerSection2(existing, fileLabel, markers);
-  if (newBody === existing) return { removed: false };
-  if (opts.dryRun === true) return { removed: true };
-  const recheck = await readMarkdownFile5(target);
-  if (recheck !== existing) {
-    throw new Error(
-      "The target changed during unsync; aborting so a concurrent edit is not overwritten. Re-run the command."
-    );
-  }
-  await backupOnce(target, existing);
-  await writeFileDurable(target, newBody);
-  return { removed: true };
-}
-async function syncOrientationChannel(opts) {
-  assertNoMarkerLine(opts.body, ORIENTATION_MARKERS);
-  const block = `${ORIENTATION_MANAGED_NOTE}
-
-${opts.body.replace(/\s+$/, "")}
-`;
-  return syncMarkerBlock({
-    target: opts.target ?? CODEX_TARGET_PATH,
-    markers: ORIENTATION_MARKERS,
-    block,
-    ...opts.dryRun === true ? { dryRun: true } : {}
-  });
-}
-async function renderOrientationToCodexChannel(opts) {
-  const body = await readMarkdownFile5(opts.orientationPath);
-  if (body === null) return null;
-  const { action } = await syncOrientationChannel({
-    body,
-    ...opts.channelPath !== void 0 ? { target: opts.channelPath } : {}
-  });
-  return {
-    action,
-    line: `codex channel: orientation ${action} in ${opts.channelPath ?? "~/.codex/AGENTS.md"}`
-  };
-}
-
 // src/lib/protocols-config.ts
 import { homedir as homedir8 } from "os";
 import { isAbsolute as isAbsolute4, join as join12, resolve as resolve8 } from "path";
@@ -7282,9 +7348,29 @@ async function doRunProtocolUnsync(options) {
 }
 
 // src/commands/refresh.ts
-import { assertBasouRootSafe as assertBasouRootSafe9, basouPaths as basouPaths11, findErrorCode as findErrorCode9 } from "@basou/core";
+import {
+  assertBasouRootSafe as assertBasouRootSafe9,
+  basouPaths as basouPaths11,
+  findErrorCode as findErrorCode9,
+  readManifest as readManifest7
+} from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
 
+// src/lib/channel-policy.ts
+function decideCodexChannel(manifest) {
+  if (manifest.policies?.confidential === true) return { write: false, reason: "confidential" };
+  if (manifest.channels?.codex === true) return { write: true };
+  return { write: false, reason: "not_enabled" };
+}
+function describeCodexChannelSkip(reason) {
+  switch (reason) {
+    case "confidential":
+      return "codex channel: skipped (confidential workspace \u2014 nothing is written to the user-global ~/.codex/AGENTS.md)";
+    case "not_enabled":
+      return "codex channel: skipped (this workspace has not opted in; the user-global ~/.codex/AGENTS.md is left untouched \u2014 see docs/spec/schemas.md \xA74.2)";
+  }
+}
+
 // src/commands/refresh-watch.ts
 import { readdir as readdir2, stat as stat5 } from "fs/promises";
 import { homedir as homedir9 } from "os";
@@ -7567,24 +7653,47 @@ async function computeRefresh(options, ctx) {
 }
 async function doRunRefresh(options, ctx) {
   const { result, paths } = await computeRefresh(options, ctx);
-  const channelLine = options.dryRun === true ? null : await syncCodexOrientationChannel(paths, ctx.codexChannelPath);
+  const channel = options.dryRun === true ? { outcome: { status: "skipped", reason: "dry_run" }, line: null } : await syncCodexOrientationChannel(paths, ctx.codexChannelPath);
+  const reported = { ...result, codexChannel: channel.outcome };
   if (options.json === true) {
-    console.log(JSON.stringify(result));
+    console.log(JSON.stringify(reported));
   } else {
     printRefreshSummary(result);
-    if (channelLine !== null) console.log(channelLine);
+    if (channel.line !== null) console.log(channel.line);
   }
-  return result;
+  return reported;
 }
 async function syncCodexOrientationChannel(paths, channelPath) {
+  let decision;
+  try {
+    decision = decideCodexChannel(await readManifest7(paths));
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+      outcome: { status: "skipped", reason: "error", detail },
+      line: `codex channel: skipped (manifest could not be re-read, so the opt-in cannot be confirmed: ${detail})`
+    };
+  }
+  if (!decision.write) {
+    return {
+      outcome: { status: "skipped", reason: decision.reason },
+      line: describeCodexChannelSkip(decision.reason)
+    };
+  }
   try {
     const rendered = await renderOrientationToCodexChannel({
       orientationPath: paths.files.orientation,
       ...channelPath !== void 0 ? { channelPath } : {}
     });
-    return rendered === null ? null : rendered.line;
+    if (rendered === null)
+      return { outcome: { status: "skipped", reason: "no_orientation" }, line: null };
+    return { outcome: { status: "written", action: rendered.action }, line: rendered.line };
   } catch (error) {
-    return `codex channel skipped: ${error instanceof Error ? error.message : String(error)}`;
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+      outcome: { status: "skipped", reason: "error", detail },
+      line: `codex channel skipped: ${detail}`
+    };
   }
 }
 function describeImport(outcome) {
@@ -7737,7 +7846,7 @@ import {
   findErrorCode as findErrorCode11,
   findUnbindableRepos,
   parseReviewRecordInput,
-  readManifest as readManifest7,
+  readManifest as readManifest8,
   resolveRepoRoot,
   sanitizePath as sanitizePath2
 } from "@basou/core";
@@ -7824,7 +7933,7 @@ async function doRunReviewRecord(options, ctx) {
   }
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
-  const manifest = await readManifest7(paths);
+  const manifest = await readManifest8(paths);
   const invocationArgs = options.file !== void 0 ? [
     "--file",
     sanitizePath2(resolve10(cwd, options.file), {
@@ -8053,19 +8162,25 @@ function selfReportSuffix(u, stillCounted) {
   if (rest > 0) parts.push(`+${rest} more`);
   return ` \xB7 self-reported by ${parts.join("; ")} \u2014 ${stillCounted ? "unverified, still counted" : "unverified"}`;
 }
+function unobservedOutcomeSuffix(u) {
+  const n = u.commitsWithUnobservedOutcome;
+  if (n === 0) return "";
+  const scope = n === u.commitCount ? "" : `${n} of them `;
+  return ` \xB7 ${scope}exited with no recorded status \u2014 landing assumed, not observed`;
+}
 function unitLine(u, now) {
   const when = relAge(u.lastCommitAt, now);
   const head = `- ${u.repo} ${when} (${u.commitCount} commit${u.commitCount === 1 ? "" : "s"})`;
   if (u.verdict === "near_unbound") {
     const ids = u.reviews.map((r) => r.sessionId.slice(0, 14)).join(", ");
-    return `${head} \u2014 a nearby review exists, but the diff / changed files were not examined [${ids}]${selfReportSuffix(u, true)}`;
+    return `${head} \u2014 a nearby review exists, but the diff / changed files were not examined [${ids}]${selfReportSuffix(u, true)}${unobservedOutcomeSuffix(u)}`;
   }
-  return `${head} \u2014 no bound cross-model review${selfReportSuffix(u, true)}`;
+  return `${head} \u2014 no bound cross-model review${selfReportSuffix(u, true)}${unobservedOutcomeSuffix(u)}`;
 }
 function candidateLine(u, now) {
   const when = relAge(u.lastCommitAt, now);
   const cite = u.reviews.map((r) => `${r.sessionId.slice(0, 14)}${r.examinedDiff ? "(diff)" : ""}`).join(", ");
-  return `- ${u.repo} ${when} (${u.commitCount} commit${u.commitCount === 1 ? "" : "s"}) \u2014 review trace: ${cite}${selfReportSuffix(u, false)}`;
+  return `- ${u.repo} ${when} (${u.commitCount} commit${u.commitCount === 1 ? "" : "s"}) \u2014 review trace: ${cite}${selfReportSuffix(u, false)}${unobservedOutcomeSuffix(u)}`;
 }
 function renderReviewGaps(summary) {
   const now = new Date(summary.generatedAt);
@@ -8172,7 +8287,7 @@ import {
   getSnapshot as getSnapshot2,
   overwriteYamlFile as overwriteYamlFile2,
   prefixedUlid as prefixedUlid4,
-  readManifest as readManifest8,
+  readManifest as readManifest9,
   readYamlFile as readYamlFile6,
   resolveClaudeCodeCommand,
   resolveCodexCommand,
@@ -8232,7 +8347,7 @@ async function runTrackedTool(args, options, ctx, adapter) {
   const repoRoot = await resolveRepositoryRootForRun(cwd);
   const paths = basouPaths15(repoRoot);
   await assertBasouRootSafe12(paths.root);
-  const manifest = await readManifest8(paths);
+  const manifest = await readManifest9(paths);
   const sessionId = prefixedUlid4("ses");
   const sessionDir = join14(paths.sessions, sessionId);
   await mkdir2(sessionDir, { recursive: true });
@@ -8590,6 +8705,8 @@ async function syncCodexOrientationChannelPreSpawn(cwd, ctx) {
   try {
     const root = await resolveBasouRootForCommand(cwd, "run");
     const paths = basouPaths15(root);
+    const decision = decideCodexChannel(await readManifest9(paths));
+    if (!decision.write) return describeCodexChannelSkip(decision.reason);
     const rendered = await renderOrientationToCodexChannel({
       orientationPath: paths.files.orientation,
       ...ctx.codexChannelPath !== void 0 ? { channelPath: ctx.codexChannelPath } : {}
@@ -8613,7 +8730,7 @@ import {
   importSessionFromJson as importSessionFromJson2,
   loadSessionEntries as loadSessionEntries2,
   readAllEvents,
-  readManifest as readManifest9,
+  readManifest as readManifest10,
   readYamlFile as readYamlFile7,
   rechainSessionInPlace,
   resolveSessionId as resolveSessionId3,
@@ -8880,8 +8997,9 @@ function eventVariantSummary(ev) {
   switch (ev.type) {
     case "command_executed": {
       const argsPart = ev.args.length > 0 ? ` ${ev.args.join(" ")}` : "";
-      const exitPart = ev.exit_code === null ? "exit=signal" : `exit=${ev.exit_code}`;
-      return `${ev.command}${argsPart} (${exitPart}, ${ev.duration_ms}ms)`;
+      const executorPart = ev.command ?? "(executor unrecorded)";
+      const exitPart = ev.exit_code === null ? "exit=unknown" : `exit=${ev.exit_code}`;
+      return `${executorPart}${argsPart} (${exitPart}, ${ev.duration_ms}ms)`;
     }
     case "git_snapshot":
       return `branch=${ev.branch} dirty=${ev.dirty}`;
@@ -9024,7 +9142,7 @@ async function doRunSessionImport(options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForSession(cwd, "import");
   const paths = basouPaths16(repositoryRoot);
   await assertWorkspaceInitialized11(paths.root);
-  const manifest = await readManifest9(paths);
+  const manifest = await readManifest10(paths);
   const rawBody = await readInputFile(options.from);
   const json = parseJsonStrict(rawBody);
   const parsed = SessionImportPayloadSchema2.safeParse(json);
@@ -9406,7 +9524,7 @@ import {
   basouPaths as basouPaths18,
   buildStatusSnapshot,
   findErrorCode as findErrorCode14,
-  readManifest as readManifest10,
+  readManifest as readManifest11,
   resolveRepositoryRoot as resolveRepositoryRoot12,
   writeStatus
 } from "@basou/core";
@@ -9437,7 +9555,7 @@ async function doRunStatus(options, ctx) {
   }
   let manifest;
   try {
-    manifest = await readManifest10(paths);
+    manifest = await readManifest11(paths);
   } catch (error) {
     if (findErrorCode14(error, "ENOENT")) {
       throw new Error("Workspace not initialized. Run 'basou init' first.");
@@ -9503,7 +9621,7 @@ import {
   loadSessionEntries as loadSessionEntries3,
   loadTaskEntries,
   prefixedUlid as prefixedUlid5,
-  readManifest as readManifest11,
+  readManifest as readManifest12,
   readTaskFile,
   readTaskFileWithArchiveFallback,
   reconcileAllTasks,
@@ -9630,7 +9748,7 @@ async function doRunTaskNew(options, ctx) {
     });
     return;
   }
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const result = await createTaskWithEvent({
     mode: "ad-hoc",
     paths,
@@ -9978,7 +10096,7 @@ async function doRunTaskStatus(taskIdInput, newStatusInput, options, ctx) {
     });
     return;
   }
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const result = await updateTaskStatusWithEvent({
     mode: "ad-hoc",
     paths,
@@ -10031,7 +10149,7 @@ async function doRunTaskReconcile(options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "reconcile");
   const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const nowProvider = ctx.nowProvider ?? (() => /* @__PURE__ */ new Date());
   const write = options.write === true;
   const verbose = isVerbose(options);
@@ -10211,7 +10329,7 @@ async function doRunTaskRefreshLinkage(taskIdInput, options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "refresh-linkage");
   const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   const nowProvider = ctx.nowProvider ?? (() => /* @__PURE__ */ new Date());
   const write = options.write === true;
@@ -10291,7 +10409,7 @@ async function doRunTaskEdit(taskIdInput, options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "edit");
   const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   const now = ctx.nowProvider !== void 0 ? ctx.nowProvider() : /* @__PURE__ */ new Date();
   const occurredAt = now.toISOString();
@@ -10347,7 +10465,7 @@ async function doRunTaskDelete(taskIdInput, options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "delete");
   const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   if (options.yes !== true) {
     await confirmDestructiveAction("delete", taskId);
@@ -10392,7 +10510,7 @@ async function doRunTaskArchive(taskIdInput, options, ctx) {
   const repositoryRoot = await resolveRepositoryRootForTask(cwd, "archive");
   const paths = basouPaths19(repositoryRoot);
   await assertWorkspaceInitialized13(paths.root);
-  const manifest = await readManifest11(paths);
+  const manifest = await readManifest12(paths);
   const taskId = await resolveTaskId2(paths, taskIdInput);
   if (options.yes !== true) {
     await confirmDestructiveAction("archive", taskId);
@@ -10434,8 +10552,8 @@ async function confirmDestructiveAction(action, taskId) {
   }
 }
 async function readSingleLineFromStdin() {
-  const { createInterface: createInterface2 } = await import("readline/promises");
-  const rl = createInterface2({ input: process.stdin, output: process.stdout });
+  const { createInterface: createInterface3 } = await import("readline/promises");
+  const rl = createInterface3({ input: process.stdin, output: process.stdout });
   try {
     const line = await rl.question("");
     return line;
@@ -10709,22 +10827,334 @@ async function assertWorkspaceInitialized14(basouRoot) {
 // src/commands/view.ts
 import { spawn } from "child_process";
 import { createHash } from "crypto";
-import { basename as basename8, resolve as resolve13 } from "path";
+import { basename as basename9, resolve as resolve13 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe18,
-  basouPaths as basouPaths21,
+  basouPaths as basouPaths22,
   findErrorCode as findErrorCode18,
-  readManifest as readManifest14,
-  resolveRepositoryRoot as resolveRepositoryRoot14
+  readManifest as readManifest16,
+  resolveRepositoryRoot as resolveRepositoryRoot15
 } from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError7 } from "commander";
 
+// src/lib/portfolio-coverage.ts
+import { createReadStream as createReadStream2 } from "fs";
+import { readdir as readdir3, stat as stat6 } from "fs/promises";
+import { homedir as homedir12 } from "os";
+import { basename as basename7, dirname as dirname4, join as join17 } from "path";
+import { createInterface as createInterface2 } from "readline";
+import { basouPaths as basouPaths21, readManifest as readManifest13, resolveRepositoryRoot as resolveRepositoryRoot14 } from "@basou/core";
+function uncapturedTotal(result) {
+  return result.groups.reduce((sum, g) => sum + g.logs, 0) + result.unplaceable;
+}
+async function checkPortfolioCoverage(workspaces, ctx = {}) {
+  const { roots, inertWorkspaces } = await collectDeclaredRoots(workspaces);
+  const listedDirs = new Set([...roots].map((root) => encodeProjectDir(root)));
+  const claudeProjectsDir = ctx.claudeProjectsDir ?? join17(homedir12(), ".claude", "projects");
+  const codexSessionsDir = ctx.codexSessionsDir ?? join17(homedir12(), ".codex", "sessions");
+  const tally = new Tally(roots);
+  const absentTrees = [];
+  const claudeFiles = await listClaudeTranscripts(claudeProjectsDir);
+  if (claudeFiles === void 0) absentTrees.push(claudeProjectsDir);
+  else {
+    for (const file of claudeFiles) {
+      await tally.add(
+        file,
+        "claude-code",
+        claudeTranscriptCwd,
+        listedDirs.has(basename7(dirname4(file)))
+      );
+    }
+  }
+  const codexFiles = await listCodexRollouts(codexSessionsDir);
+  if (codexFiles === void 0) absentTrees.push(codexSessionsDir);
+  else {
+    for (const file of codexFiles) await tally.add(file, "codex", codexRolloutCwd, true);
+  }
+  return tally.finish(absentTrees, inertWorkspaces);
+}
+async function collectDeclaredRoots(workspaces) {
+  const roots = /* @__PURE__ */ new Set();
+  const inertWorkspaces = [];
+  for (const ws of workspaces) {
+    let importRoot;
+    try {
+      importRoot = await resolveRepositoryRoot14(ws.repoRoot);
+    } catch {
+      inertWorkspaces.push({ path: ws.repoRoot, reason: "not_a_git_repo" });
+      continue;
+    }
+    let resolved;
+    try {
+      const manifest = await readManifest13(basouPaths21(importRoot));
+      resolved = resolveSourceRoots({
+        projectFlags: [],
+        manifest,
+        repoRoot: importRoot,
+        cwd: importRoot
+      });
+    } catch (error) {
+      const absent = error instanceof Error && error.message === "YAML file not found";
+      inertWorkspaces.push({
+        path: ws.repoRoot,
+        reason: absent ? "no_store" : "unreadable_store"
+      });
+      continue;
+    }
+    for (const root of resolved) roots.add(root);
+  }
+  return { roots, inertWorkspaces };
+}
+var Tally = class {
+  constructor(declaredRoots) {
+    this.declaredRoots = declaredRoots;
+  }
+  declaredRoots;
+  groups = /* @__PURE__ */ new Map();
+  kinds = /* @__PURE__ */ new Map();
+  attributed = 0;
+  scanned = 0;
+  unplaceable = 0;
+  unreadable = 0;
+  /**
+   * Record one source log. `listedByImport` is whether the importer would even
+   * read this file (the Claude directory guard); a cwd match on a file import
+   * never lists is not capture.
+   */
+  async add(file, source, readCwd, listedByImport) {
+    this.scanned++;
+    const cwd = await readCwd(file);
+    if (cwd === null) {
+      this.unreadable++;
+      return;
+    }
+    if (cwd === void 0) {
+      this.unplaceable++;
+      return;
+    }
+    const declared = this.declaredRoots.has(cwd);
+    if (declared && listedByImport) {
+      this.attributed++;
+      return;
+    }
+    const kind = declared ? "dir_not_listed" : enclosingRoot(cwd, this.declaredRoots) !== void 0 ? "below_declared_root" : "no_declared_root";
+    this.kinds.set(cwd, kind);
+    const group = this.groups.get(cwd);
+    if (group === void 0) this.groups.set(cwd, { logs: 1, sources: /* @__PURE__ */ new Set([source]) });
+    else {
+      group.logs++;
+      group.sources.add(source);
+    }
+  }
+  finish(absentTrees, inertWorkspaces) {
+    const groups = [];
+    for (const [cwd, { logs, sources }] of this.groups) {
+      const kind = this.kinds.get(cwd) ?? "no_declared_root";
+      const declaredRoot = kind === "below_declared_root" ? enclosingRoot(cwd, this.declaredRoots) : void 0;
+      groups.push({
+        cwd,
+        logs,
+        sources: [...sources].sort(),
+        kind,
+        ...declaredRoot !== void 0 ? { declaredRoot } : {}
+      });
+    }
+    const rank = (k) => k === "dir_not_listed" ? 0 : k === "below_declared_root" ? 1 : 2;
+    groups.sort((a, b) => {
+      if (a.kind !== b.kind) return rank(a.kind) - rank(b.kind);
+      if (a.logs !== b.logs) return b.logs - a.logs;
+      return a.cwd < b.cwd ? -1 : a.cwd > b.cwd ? 1 : 0;
+    });
+    return {
+      logsScanned: this.scanned,
+      attributed: this.attributed,
+      groups,
+      unplaceable: this.unplaceable,
+      unreadable: this.unreadable,
+      absentTrees,
+      inertWorkspaces
+    };
+  }
+};
+function enclosingRoot(cwd, roots) {
+  for (const root of roots) {
+    if (cwd.startsWith(root.endsWith("/") ? root : `${root}/`)) return root;
+  }
+  return void 0;
+}
+async function isDirEntry(parent, entry) {
+  if (entry.isDirectory()) return true;
+  if (!entry.isSymbolicLink()) return false;
+  try {
+    return (await stat6(join17(parent, entry.name))).isDirectory();
+  } catch {
+    return false;
+  }
+}
+async function listClaudeTranscripts(projectsRoot) {
+  let entries;
+  try {
+    entries = await readdir3(projectsRoot, { withFileTypes: true });
+  } catch {
+    return void 0;
+  }
+  const files = [];
+  for (const entry of entries) {
+    if (!await isDirEntry(projectsRoot, entry)) continue;
+    const full = join17(projectsRoot, entry.name);
+    let names;
+    try {
+      names = await readdir3(full);
+    } catch {
+      continue;
+    }
+    for (const name of names) {
+      if (name.endsWith(".jsonl")) files.push(join17(full, name));
+    }
+  }
+  return files.sort();
+}
+async function listCodexRollouts(sessionsRoot) {
+  const found = [];
+  const walk = async (dir) => {
+    let entries;
+    try {
+      entries = await readdir3(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const full = join17(dir, entry.name);
+      if (entry.isDirectory()) await walk(full);
+      else if (entry.isFile() && entry.name.startsWith("rollout-") && entry.name.endsWith(".jsonl")) {
+        found.push(full);
+      }
+    }
+  };
+  try {
+    await readdir3(sessionsRoot);
+  } catch {
+    return void 0;
+  }
+  await walk(sessionsRoot);
+  return found.sort();
+}
+async function claudeTranscriptCwd(file) {
+  const stream = createReadStream2(file, { encoding: "utf8" });
+  const lines = createInterface2({ input: stream, crlfDelay: Number.POSITIVE_INFINITY });
+  try {
+    for await (const line of lines) {
+      if (line.length === 0) continue;
+      let record;
+      try {
+        record = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (typeof record !== "object" || record === null || Array.isArray(record)) continue;
+      const cwd = record.cwd;
+      if (typeof cwd === "string" && cwd.length > 0) return cwd;
+    }
+    return void 0;
+  } catch {
+    return null;
+  } finally {
+    lines.close();
+    stream.destroy();
+  }
+}
+async function codexRolloutCwd(file) {
+  const meta = await readRolloutMeta(file);
+  return meta === void 0 ? void 0 : meta.cwd;
+}
+var GROUP_LIST_CAP = 10;
+function groupNote(group) {
+  if (group.kind === "below_declared_root") {
+    return ` \u2014 inside declared root ${group.declaredRoot}, and the recorded cwd must EQUAL a source root`;
+  }
+  if (group.kind === "dir_not_listed") {
+    return " \u2014 this cwd IS a declared root, but the transcript's per-project directory is not one import lists";
+  }
+  return "";
+}
+function formatCoverageReport(result) {
+  const lines = [];
+  if (result.logsScanned === 0) {
+    const where = result.absentTrees.length > 0 ? ` (no source logs found: ${result.absentTrees.join(", ")})` : "";
+    lines.push(
+      `Capture coverage: nothing to check \u2014 no native session logs on this machine${where}.`
+    );
+    return [...lines, ...inertLines(result)];
+  }
+  const total = uncapturedTotal(result);
+  const caveats = [];
+  if (result.unreadable > 0) caveats.push(`${result.unreadable} unreadable, verdict unknown`);
+  if (result.absentTrees.length > 0) caveats.push(`not scanned: ${result.absentTrees.join(", ")}`);
+  const caveat = caveats.length > 0 ? ` (${caveats.join("; ")})` : "";
+  if (total === 0 && result.unreadable === 0) {
+    lines.push(
+      `Capture coverage: OK. ${result.logsScanned} source log(s) scanned, all imported by a registered workspace${caveat}.`
+    );
+    return [...lines, ...inertLines(result)];
+  }
+  const pct = Math.round(total / result.logsScanned * 100);
+  lines.push(
+    `Capture coverage: ${total} of ${result.logsScanned} source log(s) (${pct}%) are imported by no registered workspace${caveat}:`
+  );
+  for (const g of result.groups.slice(0, GROUP_LIST_CAP)) {
+    const via = g.sources.join("+");
+    lines.push(`  ${String(g.logs).padStart(4)}  ${g.cwd} (${via})${groupNote(g)}`);
+  }
+  const rest = result.groups.length - GROUP_LIST_CAP;
+  if (rest > 0) {
+    const restLogs = result.groups.slice(GROUP_LIST_CAP).reduce((sum, g) => sum + g.logs, 0);
+    lines.push(
+      `  \u2026 +${rest} more working director${rest === 1 ? "y" : "ies"} (${restLogs} log(s))`
+    );
+  }
+  if (result.unplaceable > 0) {
+    lines.push(
+      `  ${String(result.unplaceable).padStart(4)}  (no directory to name: the log records no cwd import can use, so import drops it)`
+    );
+  }
+  if (result.groups.some((g) => g.kind === "below_declared_root")) {
+    lines.push(
+      "A cwd inside a declared root is dropped by the exact-match rule: the enclosing declaration does not cover it. Declaring that subdirectory itself as a further import.source_roots entry captures it."
+    );
+  }
+  if (result.groups.some((g) => g.kind === "dir_not_listed")) {
+    lines.push(
+      "A transcript whose cwd IS declared but whose per-project directory no declared root encodes to is never listed by the importer. Check that the workspace is registered by the same path spelling the sessions ran in."
+    );
+  }
+  lines.push(
+    "Register the project in a workspace's import.source_roots to start capturing it (registering a path in ~/.basou/portfolio.yaml alone imports nothing \u2014 it only adds the workspace to this view). A scratch directory, a temp path, or a GUI tool's own working directory has no repo to declare and is expected to stay here."
+  );
+  return [...lines, ...inertLines(result)];
+}
+function inertLines(result) {
+  if (result.inertWorkspaces.length === 0) return [];
+  const detail = {
+    not_a_git_repo: "not a git repository",
+    no_store: "no .basou store (never initialized)",
+    unreadable_store: "the .basou manifest is unreadable"
+  };
+  const n = result.inertWorkspaces.length;
+  const lines = [
+    `Capture coverage: ${n} registered entr${n === 1 ? "y" : "ies"} import cannot run in, so ${n === 1 ? "it declares" : "they declare"} no source roots:`
+  ];
+  for (const ws of result.inertWorkspaces) {
+    lines.push(`  ${ws.path} \u2014 ${detail[ws.reason]}`);
+  }
+  return lines;
+}
+
 // src/lib/portfolio-safety.ts
 import { execFile } from "child_process";
 import { lstat as lstat2, realpath as realpath2 } from "fs/promises";
-import { isAbsolute as isAbsolute7, join as join17, relative as relative4, resolve as resolve11 } from "path";
+import { isAbsolute as isAbsolute7, join as join18, relative as relative4, resolve as resolve11 } from "path";
 import { promisify } from "util";
-import { readManifest as readManifest12 } from "@basou/core";
+import { readManifest as readManifest14 } from "@basou/core";
 var execFileAsync = promisify(execFile);
 function errorCode(error) {
   return error instanceof Error ? error.code : void 0;
@@ -10746,7 +11176,7 @@ function isBasouPath(p) {
 async function inspectRepo(repoPath) {
   let hasEntry = false;
   try {
-    await lstat2(join17(repoPath, ".basou"));
+    await lstat2(join18(repoPath, ".basou"));
     hasEntry = true;
   } catch (error) {
     if (errorCode(error) !== "ENOENT") {
@@ -10780,7 +11210,7 @@ async function checkPortfolioSafety(workspaces) {
     let viewPath;
     let isMaster = false;
     try {
-      const manifest = await readManifest12(ws.paths);
+      const manifest = await readManifest14(ws.paths);
       sourceRoots = manifest.import?.source_roots ?? [];
       viewPath = manifest.workspace.view;
       isMaster = true;
@@ -10900,7 +11330,7 @@ function formatSafetyReport(result) {
 
 // src/lib/view-server.ts
 import { createServer } from "http";
-import { basename as basename7, join as join18, resolve as resolve12 } from "path";
+import { basename as basename8, join as join19, resolve as resolve12 } from "path";
 import {
   computeWorkStats as computeWorkStats2,
   enumerateApprovals as enumerateApprovals2,
@@ -10910,7 +11340,7 @@ import {
   loadSessionEntries as loadSessionEntries4,
   loadTaskEntries as loadTaskEntries2,
   readAllEvents as readAllEvents2,
-  readManifest as readManifest13,
+  readManifest as readManifest15,
   readMarkdownFile as readMarkdownFile7,
   readSessionYaml as readSessionYaml3,
   readTaskFile as readTaskFile2,
@@ -11501,6 +11931,7 @@ var VIEW_HTML = `<!doctype html>
   function eventSummary(ev) {
     if (ev.type === 'command_executed') {
       var cmd = (ev.args && ev.args.length) ? ev.args.join(' ') : ev.command;
+      if (cmd === null || cmd === undefined) cmd = '(command unrecorded)';
       var ex = (ev.exit_code === null || ev.exit_code === undefined) ? '' : ' (exit ' + ev.exit_code + ')';
       return cmd + ex;
     }
@@ -11865,7 +12296,7 @@ async function captureStaleness(ws, nowIso) {
 async function overview(ws, nowProvider, resolveRemoteUrl) {
   let manifest;
   try {
-    manifest = await readManifest13(ws.paths);
+    manifest = await readManifest15(ws.paths);
   } catch (error) {
     if (findErrorCode17(error, "ENOENT")) {
       return { initialized: false, repoRoot: ws.repoRoot };
@@ -11905,7 +12336,7 @@ async function rosterRepos(repoRoot, manifest, resolveRemoteUrl) {
       const remote = await resolveRemoteUrl(abs);
       const url = remote !== void 0 ? toBrowserUrl(remote) : null;
       return {
-        name: basename7(abs),
+        name: basename8(abs),
         path: repo.path,
         ...url !== null ? { url } : {},
         ...repo.visibility !== void 0 ? { visibility: repo.visibility } : {}
@@ -11940,7 +12371,7 @@ async function sessionDetail(ws, sessionId) {
     throw error;
   }
   try {
-    const events = await readAllEvents2(join18(ws.paths.sessions, sessionId));
+    const events = await readAllEvents2(join19(ws.paths.sessions, sessionId));
     return { session, events };
   } catch {
     return { session, events: [], degraded: true };
@@ -12095,7 +12526,10 @@ function registerViewCommand(program2) {
     "--workspace <path>",
     "Workspace repo path to include (repeatable; implies portfolio mode; resolved against the cwd)",
     collectPath3
-  ).option("--check", "Run the portfolio safety preflight and exit (no server)").option("--skip-safety-check", "Skip the portfolio safety preflight on start (not recommended)").option("-v, --verbose", "Show error causes").action(async (options) => {
+  ).option(
+    "--check",
+    "Run the read-only preflight and exit (no server): the portfolio safety check, plus \u2014 in portfolio mode \u2014 a capture-coverage report of session logs no registered workspace imports"
+  ).option("--skip-safety-check", "Skip the portfolio safety preflight on start (not recommended)").option("-v, --verbose", "Show error causes").action(async (options) => {
     await runView(options);
   });
 }
@@ -12111,10 +12545,19 @@ async function doRunView(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const workspaceFlags = options.workspace ?? [];
   const isPortfolio = workspaceFlags.length > 0 || options.portfolio === true;
+  const isWholeRegistry = options.portfolio === true && workspaceFlags.length === 0;
   const deps = isPortfolio ? await buildPortfolioDeps(workspaceFlags, ctx, cwd) : await buildSingleDeps(ctx, cwd);
   if (options.check === true) {
     const result = await checkPortfolioSafety(deps.workspaces);
     for (const line of formatSafetyReport(result)) console.log(line);
+    if (isWholeRegistry) {
+      const coverage = await checkPortfolioCoverage(deps.workspaces, {
+        ...ctx.claudeProjectsDir !== void 0 ? { claudeProjectsDir: ctx.claudeProjectsDir } : {},
+        ...ctx.codexSessionsDir !== void 0 ? { codexSessionsDir: ctx.codexSessionsDir } : {}
+      });
+      console.log("");
+      for (const line of formatCoverageReport(coverage)) console.log(line);
+    }
     if (result.findings.length > 0) process.exitCode = 1;
     return;
   }
@@ -12154,7 +12597,7 @@ async function doRunView(options, ctx) {
 }
 async function buildSingleDeps(ctx, cwd) {
   const repositoryRoot = await resolveRepositoryRootForView(cwd);
-  const paths = basouPaths21(repositoryRoot);
+  const paths = basouPaths22(repositoryRoot);
   await assertWorkspaceInitialized15(paths.root);
   const entry = await buildWorkspaceEntry(repositoryRoot, ctx);
   return {
@@ -12188,14 +12631,14 @@ async function buildPortfolioDeps(workspaceFlags, ctx, cwd) {
   };
 }
 async function buildWorkspaceEntry(repoRoot, ctx, labelOverride) {
-  const paths = basouPaths21(repoRoot);
+  const paths = basouPaths22(repoRoot);
   const importCtx = {
     cwd: repoRoot,
     ...ctx.claudeProjectsDir !== void 0 ? { claudeProjectsDir: ctx.claudeProjectsDir } : {},
     ...ctx.codexSessionsDir !== void 0 ? { codexSessionsDir: ctx.codexSessionsDir } : {}
   };
   try {
-    const manifest = await readManifest14(paths);
+    const manifest = await readManifest16(paths);
     return {
       key: manifest.workspace.id,
       label: labelOverride ?? manifest.workspace.name,
@@ -12208,7 +12651,7 @@ async function buildWorkspaceEntry(repoRoot, ctx, labelOverride) {
     const notFound = error instanceof Error && error.message === "YAML file not found";
     return {
       key: `ws-${createHash("sha1").update(repoRoot).digest("hex").slice(0, 12)}`,
-      label: labelOverride ?? basename8(repoRoot),
+      label: labelOverride ?? basename9(repoRoot),
       paths,
       repoRoot,
       importCtx,
@@ -12275,7 +12718,7 @@ function waitForShutdown(signal) {
 }
 async function resolveRepositoryRootForView(cwd) {
   try {
-    return await resolveRepositoryRoot14(cwd);
+    return await resolveRepositoryRoot15(cwd);
   } catch (error) {
     if (error instanceof Error && error.message === "Not a git repository") {
       throw new Error("Not a git repository. Run 'git init' first, then re-run 'basou view'.", {
@@ -12326,6 +12769,7 @@ function buildProgram() {
   registerReviewGapsCommand(program2);
   registerProjectCommand(program2);
   registerProtocolCommand(program2);
+  registerChannelCommand(program2);
   registerHookCommand(program2);
   return program2;
 }