@codacy/verity-cli 0.31.1-experimental.be74f71 → 0.31.1-experimental.f2f59c0

package/bin/verity.js

@@ -675,8 +675,8 @@ var require_option = __commonJS({
        * @param {(string | string[])} names
        * @return {Option}
        */
-      conflicts(names) {
-        this.conflictsWith = this.conflictsWith.concat(names);
+      conflicts(names2) {
+        this.conflictsWith = this.conflictsWith.concat(names2);
         return this;
       }
       /**
@@ -1249,8 +1249,8 @@ var require_command = __commonJS({
        * @param {string} names
        * @return {Command} `this` command for chaining
        */
-      arguments(names) {
-        names.trim().split(/ +/).forEach((detail) => {
+      arguments(names2) {
+        names2.trim().split(/ +/).forEach((detail) => {
           this.argument(detail);
         });
         return this;
@@ -10395,6 +10395,7 @@ var MAX_DELTA_BYTES = 194560;
 var MAX_FILES = 40;
 var MAX_FILE_BYTES = 51200;
 var DEBOUNCE_SECONDS = 30;
+var MAX_ITERATIONS = 2;
 var MAX_SPEC_FILES = 6;
 var MAX_SPEC_FILE_BYTES = 512e3;
 var MAX_TOTAL_SPEC_BYTES = 512e3;
@@ -17567,7 +17568,6 @@ function createRun(opts, globals) {
     token: "",
     modeDecision: null,
     sessionIdForMemory: "",
-    contextFilePaths: [],
     analysisMode: "standard",
     sessionAuthoredCode: false,
     staticResults: {
@@ -17577,6 +17577,7 @@ function createRun(opts, globals) {
     },
     codeDelta: { files: [], total_lines: 0, total_files: 0, excluded: [] },
     snapshotResult: { has_snapshots: false, diffs: [] },
+    repoContext: null,
     contentHash: null,
     iteration: 1,
     currentCommit: "",
@@ -17658,6 +17659,704 @@ function logToFileOnly(text) {
 `);
 }
 
+// src/lib/repo-context.ts
+var import_node_child_process7 = require("node:child_process");
+var import_node_os3 = require("node:os");
+function rgInvocations(env = process.env) {
+  const out = [{ cmd: "rg" }];
+  if (env.CLAUDE_CODE_EXECPATH) out.push({ cmd: env.CLAUDE_CODE_EXECPATH, argv0: "rg" });
+  out.push({ cmd: `${(0, import_node_os3.homedir)()}/.local/bin/claude`, argv0: "rg" });
+  return out;
+}
+var MAX_SYMBOLS = 12;
+var MAX_SITES = 24;
+var MAX_SITES_PER_FILE = 3;
+var MAX_HITS_PER_SYMBOL = 50;
+var MAX_TEST_SLOTS = 8;
+var SITE_TEXT_MAX = 160;
+var ENCLOSING_SCAN_LINES = 200;
+var RG_TIMEOUT_MS = 1500;
+var IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var STOPLIST = /* @__PURE__ */ new Set([
+  // keyword-shaped captures
+  "if",
+  "for",
+  "while",
+  "switch",
+  "catch",
+  "return",
+  "function",
+  "class",
+  "const",
+  "let",
+  "var",
+  "new",
+  "else",
+  "try",
+  "finally",
+  "throw",
+  "await",
+  "async",
+  "yield",
+  "delete",
+  "typeof",
+  "instanceof",
+  "void",
+  "this",
+  "super",
+  "import",
+  "export",
+  "default",
+  "extends",
+  "implements",
+  "interface",
+  "enum",
+  "type",
+  "public",
+  "private",
+  "protected",
+  "static",
+  "get",
+  "set",
+  "constructor",
+  "def",
+  "elif",
+  "lambda",
+  "with",
+  "pass",
+  "self",
+  "cls",
+  "not",
+  "and",
+  "or",
+  "raise",
+  "except",
+  "func",
+  "defer",
+  "chan",
+  "select",
+  "range",
+  "module",
+  "struct",
+  "trait",
+  "impl",
+  "using",
+  "namespace",
+  // universal noise
+  "main",
+  "init",
+  "index",
+  "data",
+  "value",
+  "result",
+  "item",
+  "name",
+  "key",
+  "run",
+  "test",
+  "setup",
+  "update",
+  "create",
+  "handle",
+  "check",
+  "load",
+  "save",
+  "list",
+  "map",
+  "args",
+  "params",
+  "props",
+  "state",
+  "error",
+  "err",
+  "res",
+  "req",
+  "ctx",
+  "config",
+  "options",
+  "util",
+  "utils",
+  "helper",
+  "render",
+  "build",
+  "parse",
+  "format",
+  "apply",
+  "process",
+  "start",
+  "stop"
+]);
+var TS_RULES = [
+  /\b(?:function|class|interface|enum)\s+([A-Za-z_][A-Za-z0-9_]*)/,
+  /\btype\s+([A-Za-z_][A-Za-z0-9_]*)\s*=/,
+  // const foo = (…) => ·  const foo = x => ·  const foo = function.
+  // ⚠ REQUIRES the arrow or `function` ON THE LINE. The first version accepted
+  // any `= (` — and `const started = (rows?.[0] as Row)?.at` is a PARENTHESIZED
+  // CAST, not a function. Replayed over 12 real commits, that one shape put
+  // three local variables into the symbol set per commit. A multi-line arrow
+  // is the accepted false negative; a cast is not an accepted false positive.
+  /\b(?:const|let|var)\s+([A-Za-z_][A-Za-z0-9_]*)\s*(?::[^=\n]+)?=\s*(?:async\s+)?(?:function\b|\([^)]*\)(?:\s*:[^=\n]+)?\s*=>|[A-Za-z_$][\w$]*\s*=>)/,
+  // method shape: name(…) {  — keyword captures die at the stoplist
+  /^\s*(?:(?:public|private|protected|static|readonly|async|override)\s+)*(?:\*\s*)?([A-Za-z_][A-Za-z0-9_]*)\s*\([^)]*\)\s*(?::[^{;\n]+)?\s*\{/
+];
+var PY_RULES = [
+  /^\s*(?:async\s+)?def\s+([A-Za-z_]\w*)/,
+  /^\s*class\s+([A-Za-z_]\w*)/
+];
+var GO_RULES = [
+  /^func\s+(?:\([^)]*\)\s*)?([A-Za-z_]\w*)/,
+  /^type\s+([A-Za-z_]\w*)/
+];
+var CLIKE_RULES = [
+  /\b(?:class|interface|enum|record|struct)\s+([A-Za-z_]\w*)/,
+  // access-modifier method shape: `public async Task<Foo> BarBaz(…`
+  /(?:public|private|protected|internal|static|final|virtual|override|sealed|abstract)[\w<>[\],?\s]*?\s([A-Za-z_]\w*)\s*\(/
+];
+var RB_RULES = [
+  /^\s*def\s+(?:self\.)?([A-Za-z_]\w*)/,
+  /^\s*(?:class|module)\s+([A-Z]\w*)/
+];
+var RS_RULES = [
+  /\bfn\s+([A-Za-z_]\w*)/,
+  /\b(?:struct|enum|trait)\s+([A-Za-z_]\w*)/
+];
+var PHP_RULES = [
+  /\bfunction\s+([A-Za-z_]\w*)/,
+  /\bclass\s+([A-Za-z_]\w*)/
+];
+var C_RULES = [
+  /^(?:static\s+|inline\s+|extern\s+|constexpr\s+)*(?:struct\s+|enum\s+|union\s+|unsigned\s+|const\s+)*[A-Za-z_]\w*(?:\s*[*&]+\s*|\s+)([A-Za-z_]\w*)\s*\([^;]*$/,
+  /\b(?:struct|enum|union|class)\s+([A-Za-z_]\w*)/,
+  /::\s*~?([A-Za-z_]\w*)\s*\([^;]*$/
+  // out-of-line C++ method definition
+];
+var SH_RULES = [
+  /^\s*(?:function\s+)?([A-Za-z_]\w*)\s*\(\)\s*\{/,
+  /^function\s+([A-Za-z_]\w*)/
+];
+var SQL_RULES = [
+  /\bcreate\s+(?:or\s+replace\s+)?(?:table|view|materialized\s+view|function|procedure|index|trigger|type|policy)\s+(?:if\s+not\s+exists\s+)?(?:[\w".]*\.)?"?([A-Za-z_]\w*)"?/i
+];
+var TF_RULES = [
+  /^\s*(?:resource|data)\s+"[^"]+"\s+"([A-Za-z_]\w*)"/,
+  /^\s*(?:module|variable|output)\s+"([A-Za-z_]\w*)"/
+];
+var SWIFT_RULES = [
+  /\bfunc\s+([A-Za-z_]\w*)/,
+  /\b(?:class|struct|enum|protocol|extension|actor)\s+([A-Za-z_]\w*)/
+];
+var DART_RULES = [
+  /\b(?:class|enum|mixin|extension)\s+([A-Za-z_]\w*)/,
+  /^\s*(?:static\s+)?(?:Future<[^>]*>|Stream<[^>]*>|void|int|double|bool|String|num|dynamic|[A-Z]\w*(?:<[^>]*>)?)\s+([a-z_]\w*)\s*\(/
+];
+var LUA_RULES = [
+  /^\s*(?:local\s+)?function\s+(?:[\w.]+[.:])?([A-Za-z_]\w*)/
+];
+var EX_RULES = [
+  /^\s*def(?:p|macro)?\s+([a-z_]\w*)/,
+  /^\s*defmodule\s+(?:[\w.]*\.)?([A-Z]\w*)/
+];
+var PROTO_RULES = [
+  /^\s*(?:message|service|enum)\s+([A-Za-z_]\w*)/,
+  /^\s*rpc\s+([A-Za-z_]\w*)/
+];
+var GRAPHQL_RULES = [
+  /^\s*(?:type|interface|enum|input|union|scalar)\s+([A-Za-z_]\w*)/
+];
+var RULES_BY_EXT = {
+  ts: TS_RULES,
+  tsx: TS_RULES,
+  js: TS_RULES,
+  jsx: TS_RULES,
+  mjs: TS_RULES,
+  cjs: TS_RULES,
+  svelte: TS_RULES,
+  vue: TS_RULES,
+  // script blocks
+  py: PY_RULES,
+  go: GO_RULES,
+  java: CLIKE_RULES,
+  cs: CLIKE_RULES,
+  kt: CLIKE_RULES,
+  scala: CLIKE_RULES,
+  rb: RB_RULES,
+  rs: RS_RULES,
+  php: PHP_RULES,
+  c: C_RULES,
+  cpp: C_RULES,
+  cc: C_RULES,
+  h: C_RULES,
+  hpp: C_RULES,
+  sh: SH_RULES,
+  bash: SH_RULES,
+  zsh: SH_RULES,
+  sql: SQL_RULES,
+  tf: TF_RULES,
+  hcl: TF_RULES,
+  swift: SWIFT_RULES,
+  dart: DART_RULES,
+  lua: LUA_RULES,
+  ex: EX_RULES,
+  exs: EX_RULES,
+  proto: PROTO_RULES,
+  graphql: GRAPHQL_RULES,
+  gql: GRAPHQL_RULES
+};
+var HUNK_HEADER = /^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/;
+function parseDiffSignals(diff) {
+  const addedRanges = [];
+  const touchPoints = [];
+  const deletedLines = [];
+  let newLine = 0;
+  let oldRemaining = 0;
+  let newRemaining = 0;
+  let runStart = -1;
+  let deletionRun = false;
+  const closeAddedRun = () => {
+    if (runStart >= 0) addedRanges.push([runStart, newLine - 1]);
+    runStart = -1;
+  };
+  const closeDeletionRun = () => {
+    if (deletionRun) touchPoints.push(Math.max(1, newLine));
+    deletionRun = false;
+  };
+  for (const line of diff.split("\n")) {
+    const inHunk = oldRemaining > 0 || newRemaining > 0;
+    if (!inHunk) {
+      closeAddedRun();
+      closeDeletionRun();
+      const header = HUNK_HEADER.exec(line);
+      if (header) {
+        newLine = parseInt(header[3], 10);
+        oldRemaining = header[2] === void 0 ? 1 : parseInt(header[2], 10);
+        newRemaining = header[4] === void 0 ? 1 : parseInt(header[4], 10);
+        if (newRemaining === 0) newLine = Math.max(1, newLine);
+      }
+      continue;
+    }
+    if (line.startsWith("\\")) continue;
+    if (line.startsWith("+") && newRemaining > 0) {
+      deletionRun = false;
+      if (runStart < 0) runStart = newLine;
+      newLine++;
+      newRemaining--;
+      continue;
+    }
+    if (line.startsWith("-") && oldRemaining > 0) {
+      closeAddedRun();
+      deletionRun = true;
+      deletedLines.push(line.slice(1));
+      oldRemaining--;
+      continue;
+    }
+    closeAddedRun();
+    closeDeletionRun();
+    newLine++;
+    if (oldRemaining > 0) oldRemaining--;
+    if (newRemaining > 0) newRemaining--;
+  }
+  closeAddedRun();
+  closeDeletionRun();
+  return { addedRanges, touchPoints, deletedLines };
+}
+function declNameOn(line, rules) {
+  for (const r of rules) {
+    const m = r.exec(line);
+    if (m?.[1]) return m[1];
+  }
+  return null;
+}
+function acceptable(name) {
+  if (!name || !IDENTIFIER.test(name) || STOPLIST.has(name.toLowerCase())) return false;
+  if (name.length < 3) return false;
+  if (name.length === 3 && name === name.toLowerCase() && !name.includes("_")) return false;
+  return true;
+}
+function isMultiSegment(name) {
+  return /[a-z][A-Z]/.test(name) || name.includes("_");
+}
+function extractFileSymbols(path, content, signals) {
+  const ext = path.split(".").pop()?.toLowerCase() ?? "";
+  const rules = RULES_BY_EXT[ext];
+  if (!rules) return [];
+  if (signals.addedRanges.length === 0 && signals.touchPoints.length === 0 && signals.deletedLines.length === 0) return [];
+  const lines = content.split("\n");
+  const found = [];
+  const seen = /* @__PURE__ */ new Set();
+  const add = (name) => {
+    if (acceptable(name) && !seen.has(name)) {
+      seen.add(name);
+      found.push(name);
+    }
+  };
+  for (const deleted of signals.deletedLines) {
+    add(declNameOn(deleted, rules));
+  }
+  for (const [start, end] of signals.addedRanges) {
+    for (let n = start; n <= Math.min(end, lines.length); n++) {
+      add(declNameOn(lines[n - 1] ?? "", rules));
+    }
+  }
+  const scanStarts = [
+    ...signals.addedRanges.map(([start]) => start),
+    ...signals.touchPoints
+  ];
+  for (const start of scanStarts) {
+    const floor = Math.max(1, start - ENCLOSING_SCAN_LINES);
+    for (let n = Math.min(start, lines.length); n >= floor; n--) {
+      const name = declNameOn(lines[n - 1] ?? "", rules);
+      if (acceptable(name)) {
+        add(name);
+        break;
+      }
+    }
+  }
+  return found;
+}
+function rankSymbols(symbols) {
+  return symbols.map((s, i) => ({ s, i })).sort((a, b) => {
+    const seg = Number(isMultiSegment(b.s)) - Number(isMultiSegment(a.s));
+    if (seg !== 0) return seg;
+    if (b.s.length !== a.s.length) return b.s.length - a.s.length;
+    return a.i - b.i;
+  }).slice(0, MAX_SYMBOLS).map((x) => x.s);
+}
+var TEST_PATH = /(^|\/)(tests?|specs?|__tests__|e2e)(\/|$)/i;
+var TEST_FILE = /(\.(test|spec|e2e)\.[^./]+|_test\.[^./]+|_spec\.rb)$/i;
+var TEST_PY_PREFIX = /(^|\/)test_[^/]+\.py$/i;
+var IMPORT_LINE = /^\s*(import\s|from\s+\S+\s+import\s|const\s+.*=\s*require\s*\(|require\s*\(|using\s+[\w.]+;|#include|export\s+\{[^}]*\}\s+from|export\s+\*\s+from)/;
+var BARE_MEMBER_LINE = /^(type\s+)?[A-Za-z_$][\w$]*\s*,?$/;
+var GO_IMPORT_PATH_LINE = /^"[^"]+",?$/;
+var SITE_CODE_EXTENSIONS = /* @__PURE__ */ new Set([
+  "ts",
+  "tsx",
+  "js",
+  "jsx",
+  "mjs",
+  "cjs",
+  "py",
+  "go",
+  "java",
+  "kt",
+  "rb",
+  "rs",
+  "scala",
+  "c",
+  "cpp",
+  "cc",
+  "h",
+  "hpp",
+  "cs",
+  "php",
+  "swift",
+  "dart",
+  "lua",
+  "sh",
+  "bash",
+  "zsh",
+  "svelte",
+  "vue",
+  "ex",
+  "exs",
+  // sql/tf carry REAL call sites (SELECT my_function(...), module.name) —
+  // excluded in an earlier round because of migration-comment noise, which the
+  // COMMENT_LINE filter now handles on its own.
+  "sql",
+  "tf",
+  "hcl"
+]);
+var COMMENT_LINE = /^(\/\/|#(?!\[)|\*|\/\*|--\s|<!--)/;
+function isCodeSiteFile(path) {
+  const ext = path.split(".").pop()?.toLowerCase() ?? "";
+  return SITE_CODE_EXTENSIONS.has(ext);
+}
+function isTestPath(path) {
+  return TEST_PATH.test(path) || TEST_FILE.test(path) || TEST_PY_PREFIX.test(path);
+}
+function parseRgLine(line) {
+  const first = line.indexOf(":");
+  if (first <= 0) return null;
+  const second = line.indexOf(":", first + 1);
+  if (second < 0) return null;
+  const n = parseInt(line.slice(first + 1, second), 10);
+  if (!Number.isFinite(n) || n < 1) return null;
+  return { file: line.slice(0, first), line: n, text: line.slice(second + 1) };
+}
+var isWordChar = (c) => c !== void 0 && /[A-Za-z0-9_]/.test(c);
+function wordHit(text, symbol) {
+  let from = 0;
+  for (; ; ) {
+    const at = text.indexOf(symbol, from);
+    if (at < 0) return false;
+    const before = at === 0 ? void 0 : text[at - 1];
+    const after = text[at + symbol.length];
+    if (!isWordChar(before) && !isWordChar(after)) return true;
+    from = at + 1;
+  }
+}
+function isContractLine(text, symbol) {
+  for (const kw of ["implements", "extends"]) {
+    let from = 0;
+    for (; ; ) {
+      const at = text.indexOf(kw, from);
+      if (at < 0) break;
+      from = at + 1;
+      const before = at === 0 ? void 0 : text[at - 1];
+      const after = text[at + kw.length];
+      if (isWordChar(before) || isWordChar(after)) continue;
+      let clause = text.slice(at + kw.length);
+      const stop = Math.min(
+        ...[clause.indexOf(";"), clause.indexOf("{")].filter((i) => i >= 0)
+      );
+      if (Number.isFinite(stop)) clause = clause.slice(0, stop);
+      if (wordHit(clause, symbol)) return true;
+    }
+  }
+  return false;
+}
+function partitionSites(rgLines, symbols, opts) {
+  const hits = [];
+  const hitCount = /* @__PURE__ */ new Map();
+  for (const line of rgLines) {
+    const hit = parseRgLine(line);
+    if (!hit) continue;
+    const matched = symbols.filter((s) => wordHit(hit.text, s));
+    for (const s of matched) hitCount.set(s, (hitCount.get(s) ?? 0) + 1);
+    if (matched.length === 0) continue;
+    hits.push({ ...hit, symbol: matched[0] });
+  }
+  hits.sort((a, b) => a.file < b.file ? -1 : a.file > b.file ? 1 : a.line - b.line);
+  const dropped = symbols.filter((s) => (hitCount.get(s) ?? 0) > MAX_HITS_PER_SYMBOL);
+  const droppedSet = new Set(dropped);
+  const perFile = /* @__PURE__ */ new Map();
+  const callers = [];
+  const tests = [];
+  for (const h of hits) {
+    if (droppedSet.has(h.symbol)) continue;
+    if (opts.sentPaths.has(h.file)) continue;
+    if (opts.isExcluded(h.file)) continue;
+    if (!isCodeSiteFile(h.file)) continue;
+    const text = h.text.trim();
+    if (text.length === 0 || IMPORT_LINE.test(h.text)) continue;
+    if (COMMENT_LINE.test(text)) continue;
+    if (BARE_MEMBER_LINE.test(text) || GO_IMPORT_PATH_LINE.test(text)) continue;
+    const n = perFile.get(h.file) ?? 0;
+    if (n >= MAX_SITES_PER_FILE) continue;
+    const site = {
+      file: h.file,
+      line: h.line,
+      text: text.slice(0, SITE_TEXT_MAX),
+      symbol: h.symbol,
+      // R2 falls out of R1 for free: a word search for `Sym` already matches
+      // `implements Sym` / `extends Sym` lines — classification is all R2 is.
+      ...isContractLine(text, h.symbol) ? { kind: "contract" } : {}
+    };
+    if (isTestPath(h.file)) {
+      if (tests.length < MAX_TEST_SLOTS) {
+        tests.push(site);
+        perFile.set(h.file, n + 1);
+      }
+    } else if (callers.length + tests.length < MAX_SITES) {
+      callers.push(site);
+      perFile.set(h.file, n + 1);
+    }
+  }
+  while (callers.length + tests.length > MAX_SITES) callers.pop();
+  return { callers, tests, dropped };
+}
+function buildRepoContext(input) {
+  const started = Date.now();
+  let signalsByPath;
+  if (input.signalsByPath) {
+    if (input.signalsByPath.size === 0) return { state: "absent", reason: "no-diffs" };
+    signalsByPath = input.signalsByPath;
+  } else {
+    if (input.diffs.length === 0) return { state: "absent", reason: "no-diffs" };
+    signalsByPath = /* @__PURE__ */ new Map();
+    for (const d of input.diffs) signalsByPath.set(d.path, parseDiffSignals(d.diff));
+  }
+  const collected = [];
+  const unsupported = /* @__PURE__ */ new Set();
+  const noteUnsupported = (path) => {
+    const ext = path.split(".").pop()?.toLowerCase() ?? "";
+    if (ext && !RULES_BY_EXT[ext]) unsupported.add(ext);
+  };
+  const deltaPathSet = new Set(input.deltaFiles.map((f) => f.path));
+  for (const f of input.deltaFiles) {
+    const signals = signalsByPath.get(f.path);
+    if (!signals) continue;
+    noteUnsupported(f.path);
+    collected.push(...extractFileSymbols(f.path, f.content, signals));
+  }
+  for (const [path, signals] of signalsByPath) {
+    if (deltaPathSet.has(path)) continue;
+    if (signals.deletedLines.length > 0) {
+      noteUnsupported(path);
+      collected.push(...extractFileSymbols(path, "", signals));
+    }
+  }
+  const unsupportedExts = [...unsupported].sort().slice(0, 8);
+  const audit = unsupportedExts.length > 0 ? { unsupported_exts: unsupportedExts } : {};
+  const symbols = rankSymbols([...new Set(collected)]);
+  if (symbols.length === 0) {
+    const everySupportedFileFoundNothing = unsupportedExts.length > 0;
+    return {
+      state: "absent",
+      reason: everySupportedFileFoundNothing ? "unsupported-language" : "no-symbols",
+      ...audit
+    };
+  }
+  const args = [
+    "-n",
+    "-w",
+    "-F",
+    "--no-heading",
+    "--color",
+    "never",
+    // ⚠ NO `--sort path` — it single-threads rg, and on a large worktree that
+    // is the difference between 17ms and a timeout. Determinism is restored by
+    // sorting the hits in partitionSites instead.
+    //
+    // `-m 8` bounds output PER FILE (shared across all patterns), so a noisy
+    // repo cannot blow the 4MB read buffer and turn the whole feature into
+    // `absent/error`. Cost, accepted: the frequency gate sees per-file-capped
+    // counts, so a symbol concentrated in a handful of files can slip a gate
+    // a full count would have tripped — but the ≤3-sites-per-file cap already
+    // bounds exactly that shape's damage; the gate exists for the many-file
+    // 'init' shape, which 8-per-file still trips (>6 files ⇒ >50).
+    "-m",
+    "8",
+    "--max-columns",
+    "300",
+    "--max-columns-preview",
+    ...symbols.flatMap((s) => ["-e", s]),
+    "-g",
+    "!**/{dist,build,out,vendor,node_modules,.git,coverage,target,__pycache__}/**",
+    "./"
+  ];
+  let res = null;
+  for (const inv of rgInvocations()) {
+    res = (0, import_node_child_process7.spawnSync)(inv.cmd, args, {
+      ...inv.argv0 ? { argv0: inv.argv0 } : {},
+      cwd: input.cwd ?? process.cwd(),
+      timeout: input.timeoutMs ?? RG_TIMEOUT_MS,
+      maxBuffer: 4 * 1024 * 1024,
+      encoding: "utf8"
+    });
+    if (res.error?.code !== "ENOENT") break;
+  }
+  if (!res || res.error?.code === "ENOENT") {
+    return { state: "absent", reason: "no-tool", symbols, ...audit };
+  }
+  if (res.error) {
+    const code = res.error.code;
+    if (code === "ETIMEDOUT") return { state: "absent", reason: "timeout", symbols, ...audit };
+    return { state: "absent", reason: "error", symbols, ...audit };
+  }
+  if (res.signal) return { state: "absent", reason: "timeout", symbols, ...audit };
+  if (res.status !== 0 && res.status !== 1) return { state: "absent", reason: "error", symbols, ...audit };
+  const lines = (res.stdout ?? "").split("\n").map((l) => l.replace(/^\.\//, "")).filter(Boolean);
+  const { callers, tests, dropped } = partitionSites(lines, symbols, {
+    sentPaths: input.sentPaths,
+    isExcluded: input.isExcluded
+  });
+  if (callers.length === 0 && tests.length === 0) {
+    return {
+      state: "absent",
+      reason: "no-sites",
+      symbols,
+      ...dropped.length > 0 ? { dropped_symbols: dropped } : {},
+      ...audit,
+      elapsed_ms: Date.now() - started
+    };
+  }
+  return {
+    state: "ok",
+    symbols,
+    ...dropped.length > 0 ? { dropped_symbols: dropped } : {},
+    ...audit,
+    callers,
+    tests,
+    elapsed_ms: Date.now() - started
+  };
+}
+var MAX_EXCERPTS = 12;
+var MAX_EXCERPTS_PER_FILE = 2;
+var EXCERPT_MAX_LINES = 30;
+var EXCERPT_MAX_CHARS = 2400;
+var EXCERPT_TOTAL_BYTES = 24576;
+var EXCERPT_DECL_SCAN = 40;
+function extractEnclosingExcerpt(content, siteLine, path) {
+  const ext = path.split(".").pop()?.toLowerCase() ?? "";
+  const rules = RULES_BY_EXT[ext] ?? [];
+  const lines = content.split("\n");
+  if (siteLine < 1 || siteLine > lines.length) return null;
+  let declStart = null;
+  const floor = Math.max(1, siteLine - EXCERPT_DECL_SCAN);
+  for (let n = siteLine; n >= floor; n--) {
+    if (declNameOn(lines[n - 1] ?? "", rules) !== null) {
+      declStart = n;
+      break;
+    }
+  }
+  let start;
+  if (declStart !== null && siteLine - declStart < EXCERPT_MAX_LINES) {
+    start = declStart;
+  } else {
+    start = Math.max(1, siteLine - (EXCERPT_MAX_LINES - 6));
+  }
+  const end = Math.min(lines.length, start + EXCERPT_MAX_LINES - 1);
+  const text = lines.slice(start - 1, end).join("\n").slice(0, EXCERPT_MAX_CHARS);
+  return { start_line: start, text };
+}
+function upgradeToExcerpts(rc, opts) {
+  if (rc.state !== "ok") return;
+  const ranked = [
+    ...(rc.callers ?? []).filter((s) => s.kind === "contract"),
+    ...rc.tests ?? [],
+    ...(rc.callers ?? []).filter((s) => s.kind !== "contract")
+  ];
+  const perFile = /* @__PURE__ */ new Map();
+  const contentCache = /* @__PURE__ */ new Map();
+  const excerpts = [];
+  let totalBytes = 0;
+  for (const site of ranked) {
+    if (excerpts.length >= MAX_EXCERPTS) break;
+    const used = perFile.get(site.file) ?? 0;
+    if (used >= MAX_EXCERPTS_PER_FILE) continue;
+    if (!contentCache.has(site.file)) contentCache.set(site.file, opts.readFile(site.file));
+    const content = contentCache.get(site.file);
+    if (content === null || content === void 0) continue;
+    const ex = extractEnclosingExcerpt(content, site.line, site.file);
+    if (!ex) continue;
+    if (totalBytes + ex.text.length > EXCERPT_TOTAL_BYTES) break;
+    excerpts.push({
+      file: site.file,
+      start_line: ex.start_line,
+      symbol: site.symbol,
+      kind: site.kind === "contract" ? "contract" : isTestPath(site.file) ? "test" : "caller",
+      text: ex.text
+    });
+    totalBytes += ex.text.length;
+    perFile.set(site.file, used + 1);
+  }
+  if (excerpts.length > 0) rc.excerpts = excerpts;
+}
+function describeRepoContext(rc) {
+  if (rc.state !== "ok") {
+    const exts = rc.unsupported_exts?.length ? ` \xB7 no rules for: ${rc.unsupported_exts.join(", ")}` : "";
+    return `absent (${rc.reason ?? "unknown"})${exts}`;
+  }
+  const parts = [
+    `${rc.symbols?.length ?? 0} symbol(s) \u2192 ${rc.callers?.length ?? 0} caller(s) \xB7 ${rc.tests?.length ?? 0} test(s)`
+  ];
+  if (rc.excerpts?.length) parts.push(`${rc.excerpts.length} excerpt(s)`);
+  if (rc.dropped_symbols?.length) parts.push(`dropped too-common: ${rc.dropped_symbols.join(", ")}`);
+  if (rc.unsupported_exts?.length) parts.push(`no rules for: ${rc.unsupported_exts.join(", ")}`);
+  if (typeof rc.elapsed_ms === "number") parts.push(`${rc.elapsed_ms}ms`);
+  return parts.join(" \xB7 ");
+}
+
 // src/commands/analyze/evidence-log.ts
 function list(paths, cap = 12) {
   if (paths.length === 0) return "(none)";
@@ -17696,6 +18395,7 @@ function formatRunEvidence(run2, startedAt) {
   }
   out += row("sent", `${sent.length} \xB7 ${list(sent)}`);
   if (context.length > 0) out += row("context", `${context.length} \xB7 ${list(context)}`);
+  if (run2.repoContext) out += row("repo", describeRepoContext(run2.repoContext));
   const withheld = run2.reviewCoverage.notReviewed;
   if (withheld.length > 0) {
     const byReason = /* @__PURE__ */ new Map();
@@ -17777,9 +18477,9 @@ function installRunEvidence(run2) {
 }
 
 // src/lib/git-frame.ts
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
-var import_node_os3 = require("node:os");
+var import_node_os4 = require("node:os");
 var import_node_path18 = require("node:path");
 var import_node_path19 = require("node:path");
 var VALUE_TOKEN = `(?:'[^']*'|"[^"]*"|\\S+)`;
@@ -17827,14 +18527,14 @@ function extractCommandTarget(command, segmentIndex, baseDir) {
     if (!m) continue;
     named = true;
     if (m[1] === void 0) {
-      dir = (0, import_node_os3.homedir)();
+      dir = (0, import_node_os4.homedir)();
       continue;
     }
     const raw = unquote(m[1]);
     if (SHELL_DYNAMIC.test(raw) || raw === "-") {
       return { dir: null, named: true, unresolvable: `cd target not statically resolvable: ${raw}` };
     }
-    const expanded = raw === "~" ? (0, import_node_os3.homedir)() : raw.startsWith("~/") ? (0, import_node_path19.join)((0, import_node_os3.homedir)(), raw.slice(2)) : raw;
+    const expanded = raw === "~" ? (0, import_node_os4.homedir)() : raw.startsWith("~/") ? (0, import_node_path19.join)((0, import_node_os4.homedir)(), raw.slice(2)) : raw;
     dir = (0, import_node_path18.isAbsolute)(expanded) ? expanded : (0, import_node_path18.resolve)(dir, expanded);
   }
   const seg = segments[segmentIndex];
@@ -17853,7 +18553,7 @@ function extractCommandTarget(command, segmentIndex, baseDir) {
       if (SHELL_DYNAMIC.test(raw)) {
         return { dir: null, named: true, unresolvable: `-C target not statically resolvable: ${raw}` };
       }
-      const expanded = raw === "~" ? (0, import_node_os3.homedir)() : raw.startsWith("~/") ? (0, import_node_path19.join)((0, import_node_os3.homedir)(), raw.slice(2)) : raw;
+      const expanded = raw === "~" ? (0, import_node_os4.homedir)() : raw.startsWith("~/") ? (0, import_node_path19.join)((0, import_node_os4.homedir)(), raw.slice(2)) : raw;
       dir = (0, import_node_path18.isAbsolute)(expanded) ? expanded : (0, import_node_path18.resolve)(dir, expanded);
     }
   }
@@ -17910,7 +18610,7 @@ function parsePushTarget(segment) {
 }
 function gitAt(dir, args) {
   try {
-    return (0, import_node_child_process7.execFileSync)("git", args, { cwd: dir, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    return (0, import_node_child_process8.execFileSync)("git", args, { cwd: dir, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return "";
   }
@@ -18049,6 +18749,40 @@ function rangeFiles(frame, range) {
   }
   return out.split("\n").filter((l) => l.length > 0).filter((f) => !isVerityOwnedPath(f));
 }
+function rangeChangeSignals(frame, range, paths) {
+  const out = /* @__PURE__ */ new Map();
+  if (range.kind === "nothing" || paths.length === 0) return out;
+  const args = range.kind === "staged" ? ["diff", "--cached", "--unified=0"] : ["diff", "--unified=0", range.base, range.head === "INDEX" ? "HEAD" : range.head];
+  const diff = frameGit(frame, [...args, "--", ...paths]);
+  let current = null;
+  let oldSide = null;
+  let buf = [];
+  const flush = () => {
+    if (current !== null && buf.length > 0) out.set(current, parseDiffSignals(buf.join("\n")));
+    buf = [];
+  };
+  for (const line of diff.split("\n")) {
+    if (line.startsWith("diff --git ")) {
+      flush();
+      current = null;
+      oldSide = null;
+      continue;
+    }
+    const minusM = /^--- (?:a\/)?(.+)$/.exec(line);
+    if (minusM) {
+      oldSide = minusM[1] === "/dev/null" ? null : minusM[1];
+      continue;
+    }
+    const plusM = /^\+\+\+ (?:b\/)?(.+)$/.exec(line);
+    if (plusM) {
+      current = plusM[1] === "/dev/null" ? oldSide : plusM[1];
+      continue;
+    }
+    if (current !== null) buf.push(line);
+  }
+  flush();
+  return out;
+}
 function rangeMessages(frame, range) {
   if (range.kind === "staged" || range.kind === "nothing" || !range.base) return "";
   return frameGit(frame, ["log", `${range.base}..${range.head === "INDEX" ? "HEAD" : range.head}`, "--format=%B%x00"]).split("\0").map((s) => s.trim()).filter(Boolean).join("\n\n");
@@ -18108,6 +18842,7 @@ var MAX_COMMANDS = 10;
 var MAX_COMMAND_CHARS = 80;
 var MAX_TOOL_BLOCKS = 200;
 var MAX_SUMMARY_BYTES = 4096;
+var MAX_SEARCHES_DETAIL = 10;
 var HOME = process.env.HOME ?? "";
 var BASH_INPUT_RE = /^\s*<bash-input>([\s\S]*?)<\/bash-input>/;
 var BASH_ECHO_RE = /^\s*<bash-(?:stdout|stderr)>/;
@@ -18193,6 +18928,7 @@ function buildSummary(lines) {
   let userCommandsTruncated = false;
   let commandsTruncated = false;
   let searches = 0;
+  const searchesDetail = [];
   let subagents = 0;
   let webFetches = 0;
   let totalToolCalls = 0;
@@ -18264,9 +19000,19 @@ function buildSummary(lines) {
           break;
         }
         case "Grep":
-        case "Glob":
+        case "Glob": {
           searches++;
+          const pattern = typeof input.pattern === "string" ? input.pattern.slice(0, 120) : "";
+          if (pattern && searchesDetail.length < MAX_SEARCHES_DETAIL) {
+            const scopePath = typeof input.path === "string" ? input.path.slice(0, 200) : void 0;
+            searchesDetail.push({
+              tool: toolName,
+              pattern,
+              ...scopePath ? { path: scopePath } : {}
+            });
+          }
           break;
+        }
         case "Agent":
         case "Task":
         case "Workflow":
@@ -18301,6 +19047,7 @@ function buildSummary(lines) {
       ...cappedOut(filesCreated, MAX_CREATED_LIST)
     ],
     searches,
+    ...searchesDetail.length > 0 ? { searches_detail: searchesDetail } : {},
     commands,
     ...commandsTruncated ? { commands_truncated: true } : {},
     user_commands: userCommands,
@@ -18311,6 +19058,9 @@ function buildSummary(lines) {
     turn_messages: turnMessages,
     turn_duration_ms: turnDurationMs
   };
+  if (JSON.stringify(summary).length > MAX_SUMMARY_BYTES) {
+    delete summary.searches_detail;
+  }
   if (JSON.stringify(summary).length > MAX_SUMMARY_BYTES) {
     summary.commands = [];
     summary.commands_truncated = true;
@@ -18614,7 +19364,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.31.1-experimental.be74f71" : "dev";
+    return true ? "0.31.1-experimental.f2f59c0" : "dev";
   } catch {
     return "dev";
   }
@@ -18654,7 +19404,7 @@ async function sendSkipBeacon(ctx, reason) {
 }
 
 // src/lib/static-analysis.ts
-var import_node_child_process8 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var import_node_fs26 = require("node:fs");
 var SEVERITY_ORDER = {
   Error: 0,
@@ -18667,7 +19417,7 @@ var SEVERITY_ORDER = {
 };
 function isCodacyAvailable() {
   try {
-    (0, import_node_child_process8.execSync)("which codacy-analysis", { stdio: "pipe" });
+    (0, import_node_child_process9.execSync)("which codacy-analysis", { stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -18709,7 +19459,7 @@ function runCodacyAnalysis(files) {
     }
   });
   if (existingFiles.length === 0) return empty;
-  const proc = (0, import_node_child_process8.spawnSync)("codacy-analysis", buildAnalyzerArgv(existingFiles), {
+  const proc = (0, import_node_child_process9.spawnSync)("codacy-analysis", buildAnalyzerArgv(existingFiles), {
     encoding: "utf-8",
     maxBuffer: 10 * 1024 * 1024
   });
@@ -19214,7 +19964,6 @@ async function mode(run2) {
   const { opts, globals } = run2;
   const { actionSummary, allForReview, assistantResponse, baseline, conversation, memory, noFilesChanged, serviceUrl, sessionId, token, turnAuthoredCode } = run2;
   const sessionIdForMemory = sessionId || process.env.CLAUDE_SESSION_ID || "";
-  let contextFilePaths = [];
   let predictedMode;
   try {
     const memoryPath2 = sessionIdForMemory ? `/memory?session_id=${encodeURIComponent(sessionIdForMemory)}` : "/memory";
@@ -19228,9 +19977,6 @@ async function mode(run2) {
       cmd: "analyze_context"
     });
     if (memoryResult.ok) {
-      if (Array.isArray(memoryResult.data.context_files)) {
-        contextFilePaths = memoryResult.data.context_files;
-      }
       const rawMode = memoryResult.data.predicted_mode;
       if (rawMode && ["standard", "plan", "debug", "skip"].includes(rawMode)) {
         predictedMode = rawMode;
@@ -19279,7 +20025,7 @@ async function mode(run2) {
       turnAuthoredCode ? "capacity" : void 0
     );
   }
-  Object.assign(run2, { analysisMode, contextFilePaths, sessionAuthoredCode, sessionIdForMemory });
+  Object.assign(run2, { analysisMode, sessionAuthoredCode, sessionIdForMemory });
 }
 
 // src/lib/fold.ts
@@ -19917,15 +20663,52 @@ function pruneStaleCache() {
 
 // src/lib/context-files.ts
 var import_node_fs30 = require("node:fs");
+var import_node_os5 = require("node:os");
 var MAX_CONTEXT_FILES = 10;
 var MAX_CONTEXT_FILE_BYTES = 10240;
-var MAX_CONTEXT_TOTAL_BYTES = 51200;
-function gatherContextFiles(contextPaths, deltaFiles) {
+var MAX_CONTEXT_TOTAL_BYTES = 24576;
+function readSetContextPaths(summary, deltaFiles) {
+  const reads = summary?.files_read ?? [];
+  if (reads.length === 0) return [];
+  const root = process.cwd().replace(/\/+$/, "");
+  const home = (0, import_node_os5.homedir)();
+  const toRepoRelative2 = (p) => {
+    if (!p) return null;
+    let abs;
+    if (p.startsWith("/")) {
+      abs = p;
+    } else {
+      const rebuilt = `${home}/${p}`;
+      abs = rebuilt.startsWith(`${root}/`) ? rebuilt : `${root}/${p}`;
+    }
+    if (!abs.startsWith(`${root}/`)) return null;
+    return abs.slice(root.length + 1);
+  };
+  const authored = /* @__PURE__ */ new Set();
+  for (const p of [...summary?.files_edited ?? [], ...summary?.files_created ?? []]) {
+    const rel = toRepoRelative2(p);
+    if (rel) authored.add(rel);
+  }
+  for (const f of deltaFiles) authored.add(f.path);
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const p of reads) {
+    const rel = toRepoRelative2(p);
+    if (!rel || seen.has(rel) || authored.has(rel)) continue;
+    seen.add(rel);
+    const ext = rel.split(".").pop()?.toLowerCase() ?? "";
+    if (!ANALYZABLE_EXTENSIONS.has(ext) && !REVIEWABLE_EXTENSIONS.has(ext)) continue;
+    out.push(rel);
+  }
+  return out;
+}
+function gatherContextFiles(contextPaths, deltaFiles, opts) {
+  const fileCap = Math.max(0, Math.min(MAX_CONTEXT_FILES, opts?.maxFiles ?? MAX_CONTEXT_FILES));
   const deltaPaths = new Set(deltaFiles.map((f) => f.path));
   const result = [];
   let totalBytes = 0;
   for (const filePath of contextPaths) {
-    if (result.length >= MAX_CONTEXT_FILES) break;
+    if (result.length >= fileCap) break;
     if (deltaPaths.has(filePath)) continue;
     if (isVerityOwnedPath(filePath)) {
       logEvent("context_file_skipped", { path: filePath, reason: "verity_owned" });
@@ -19983,9 +20766,14 @@ function gatherContextFiles(contextPaths, deltaFiles) {
 
 // src/commands/analyze/phases/07-context-files.ts
 async function contextFiles(run2) {
-  const { codeDelta, contextFilePaths } = run2;
-  const { kept: externalContext } = partitionVerityOwned(contextFilePaths ?? []);
-  const contextFiles2 = gatherContextFiles(externalContext, codeDelta.files);
+  const { codeDelta } = run2;
+  const readSet = readSetContextPaths(run2.actionSummary, codeDelta.files);
+  const { kept: externalContext } = partitionVerityOwned(readSet);
+  const ig = loadVerityIgnore();
+  const unfenced = run2.verityIgnored.suspended ? externalContext : externalContext.filter((p) => !isIgnored(ig, p));
+  const contextFiles2 = gatherContextFiles(unfenced, codeDelta.files, {
+    maxFiles: MAX_FILES - codeDelta.files.length
+  });
   for (const f of codeDelta.files) {
     f.role = "delta";
   }
@@ -19997,6 +20785,30 @@ async function contextFiles(run2) {
   });
 }
 
+// src/commands/analyze/phases/07b-repo-context.ts
+async function repoContext(run2) {
+  const { codeDelta, snapshotResult } = run2;
+  const deltaFiles = codeDelta.files.filter((f) => f.role !== "context");
+  const sentPaths = new Set(codeDelta.files.map((f) => f.path));
+  const ig = loadVerityIgnore();
+  const isExcluded = (p) => isVerityOwnedPath(p) || !run2.verityIgnored.suspended && isIgnored(ig, p);
+  run2.repoContext = buildRepoContext({
+    deltaFiles,
+    diffs: snapshotResult.diffs,
+    sentPaths,
+    isExcluded
+  });
+  logEvent("repo_context", {
+    state: run2.repoContext.state,
+    reason: run2.repoContext.reason ?? null,
+    symbols: run2.repoContext.symbols?.length ?? 0,
+    dropped: run2.repoContext.dropped_symbols?.length ?? 0,
+    callers: run2.repoContext.callers?.length ?? 0,
+    tests: run2.repoContext.tests?.length ?? 0,
+    elapsed_ms: run2.repoContext.elapsed_ms ?? null
+  });
+}
+
 // src/lib/seed-runner.ts
 var import_promises11 = require("node:fs/promises");
 var import_node_fs31 = require("node:fs");
@@ -20630,7 +21442,7 @@ function isExplicitlyAutonomous(env = process.env) {
 }
 
 // src/lib/task-context.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 var CLOSING_RE = /\b(close[sd]?|fix(?:e[sd])?|resolve[sd]?)\b[\s:]*#(\d+)/i;
 var BRANCH_RE = /(?:^|[/_-])(?:issue|gh|fix)[-_/]?(\d+)\b/i;
 function parseLinkedIssue(sources) {
@@ -20646,7 +21458,7 @@ function parseLinkedIssue(sources) {
 }
 function safeExec(cmd, timeout) {
   try {
-    return (0, import_node_child_process9.execSync)(cmd, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout }).trim();
+    return (0, import_node_child_process10.execSync)(cmd, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout }).trim();
   } catch {
     return "";
   }
@@ -20853,6 +21665,9 @@ async function buildRequest(run2) {
   if (snapshotResult.has_snapshots && snapshotResult.diffs.length > 0) {
     requestBody.snapshot_diffs = snapshotResult.diffs;
   }
+  if (run2.repoContext) {
+    requestBody.repo_context = run2.repoContext;
+  }
   const noHumanPrompt = (conversation?.prompts?.length ?? 0) === 0;
   const w4Task = noHumanPrompt && isExplicitlyAutonomous() ? resolveTaskContext() : null;
   const planApprovalActive = foldResult?.planApproval?.activeSinceLastPrompt === true;
@@ -21701,6 +22516,8 @@ var PIPELINE = [
   // ← THE NARROWING. what gets sent, and why not the rest
   ["contextFiles", contextFiles],
   // supporting files, merged INTO the delta array
+  ["repoContext", repoContext],
+  // R1/R3 — call sites of changed symbols, one line each
   ["memoryManifest", memoryManifest],
   // knowledge-graph manifest + one-time auto-seed
   ["foldTranscript", foldTranscript],
@@ -21717,7 +22534,7 @@ var PIPELINE = [
   // say it — stderr, stdout, disk
 ];
 function registerAnalyzeCommand(program2) {
-  program2.command("analyze").description("Run Verity analysis on changed files (stop hook)").option("--debounce <seconds>", "Skip if last analysis was within N seconds", "30").option("--max-iterations <n>", "Force PASS after N FAIL cycles", "2").option("--max-files <n>", "Max files to send for review", "20").option("--max-file-size <bytes>", "Skip files larger than N bytes", "51200").option("--max-total-size <bytes>", "Stop collecting files at N total bytes", "194560").option("--skip-static", "Skip codacy-analysis").option("--mode <mode>", "Force analysis mode (standard|plan|debug|skip)").option("--json", "Output raw JSON response").action(async (opts) => {
+  program2.command("analyze").description("Run Verity analysis on changed files (stop hook)").option("--debounce <seconds>", "Skip if last analysis was within N seconds", String(DEBOUNCE_SECONDS)).option("--max-iterations <n>", "Force PASS after N FAIL cycles", String(MAX_ITERATIONS)).option("--max-files <n>", "Max files to send for review", String(MAX_FILES)).option("--max-file-size <bytes>", "Skip files larger than N bytes", String(MAX_FILE_BYTES)).option("--max-total-size <bytes>", "Stop collecting files at N total bytes", String(MAX_DELTA_BYTES)).option("--skip-static", "Skip codacy-analysis").option("--mode <mode>", "Force analysis mode (standard|plan|debug|skip)").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
     try {
       await runAnalyze(opts, globals);
@@ -22116,6 +22933,7 @@ function coverageBlock(c) {
   const tree = c.root ? `${c.root}${c.linked ? " (linked worktree)" : ""}${c.branch ? ` \xB7 branch ${c.branch}` : ""}` : "(no tree resolved)";
   lines.push(`Reviewed (${c.moment}): ${c.sent.length} file(s)${c.range ? ` @ ${c.range}` : ""}`);
   lines.push(`  Tree: ${tree}`);
+  if (c.repoContext) lines.push(`  Repo context: ${describeRepoContext(c.repoContext)}`);
   for (const f of c.sent) lines.push(`  - ${f}`);
   if (c.excluded.length > 0) {
     lines.push(`  Excluded (${c.excluded.length}):`);
@@ -22182,6 +23000,39 @@ async function runGuard(opts, globals) {
     statedIntent,
     buildGuardCoverage(files, codeDelta, frame, range)
   );
+  try {
+    const ig = loadVerityIgnore();
+    const repoContext2 = buildRepoContext({
+      deltaFiles: codeDelta.files,
+      diffs: [],
+      signalsByPath: rangeChangeSignals(frame, range, codeDelta.files.map((f) => f.path)),
+      sentPaths: new Set(codeDelta.files.map((f) => f.path)),
+      isExcluded: (p) => isVerityOwnedPath(p) || isIgnored(ig, p),
+      cwd: frame.worktreeRoot ?? process.cwd()
+    });
+    upgradeToExcerpts(repoContext2, {
+      readFile: (rel) => {
+        try {
+          return (0, import_node_fs38.readFileSync)((0, import_node_path27.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
+        } catch {
+          return null;
+        }
+      }
+    });
+    requestBody.repo_context = repoContext2;
+    logEvent("repo_context", {
+      moment,
+      state: repoContext2.state,
+      reason: repoContext2.reason ?? null,
+      symbols: repoContext2.symbols?.length ?? 0,
+      callers: repoContext2.callers?.length ?? 0,
+      tests: repoContext2.tests?.length ?? 0,
+      excerpts: repoContext2.excerpts?.length ?? 0,
+      elapsed_ms: repoContext2.elapsed_ms ?? null
+    });
+  } catch (e) {
+    logEvent("repo_context", { moment, state: "absent", reason: "exception", message: e.message });
+  }
   const coverage = {
     moment,
     root: frame.worktreeRoot,
@@ -22189,7 +23040,8 @@ async function runGuard(opts, globals) {
     linked: frame.isLinkedWorktree,
     range: describeRange(range),
     sent: codeDelta.files.map((f) => f.path),
-    excluded: codeDelta.excluded.map((e) => ({ path: e.path, reason: e.reason }))
+    excluded: codeDelta.excluded.map((e) => ({ path: e.path, reason: e.reason })),
+    ...requestBody.repo_context ? { repoContext: requestBody.repo_context } : {}
   };
   logToFileOnly(coverageBlock(coverage));
   const reviewStart = Date.now();
@@ -22436,10 +23288,10 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs44 = require("node:fs");
-var import_promises14 = require("node:fs/promises");
-var import_node_path29 = require("node:path");
-var import_node_child_process13 = require("node:child_process");
+var import_node_fs45 = require("node:fs");
+var import_promises15 = require("node:fs/promises");
+var import_node_path30 = require("node:path");
+var import_node_child_process14 = require("node:child_process");
 
 // src/lib/banner.ts
 var WORDMARK = [
@@ -22520,11 +23372,11 @@ function printPhase(n, of, title, subtitle) {
 var import_node_fs42 = require("node:fs");
 
 // src/lib/prereqs.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 var MIN_NODE_MAJOR = 20;
 function which(bin) {
   try {
-    const out = (0, import_node_child_process10.execSync)(`command -v ${bin}`, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    const out = (0, import_node_child_process11.execSync)(`command -v ${bin}`, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
     return out || null;
   } catch {
     return null;
@@ -22546,7 +23398,7 @@ function checkNode() {
 function checkGit() {
   let detail = "";
   try {
-    detail = (0, import_node_child_process10.execSync)("git --version", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    detail = (0, import_node_child_process11.execSync)("git --version", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return {
       id: "git",
@@ -22584,7 +23436,7 @@ function checkAnalysisCli() {
 var INSTALL_TIMEOUT_MS = 12e4;
 function run(command, args, opts = {}) {
   return new Promise((resolve4) => {
-    const child = (0, import_node_child_process10.spawn)(command, args, {
+    const child = (0, import_node_child_process11.spawn)(command, args, {
       stdio: opts.inherit ? "inherit" : "pipe",
       timeout: INSTALL_TIMEOUT_MS
     });
@@ -22636,7 +23488,7 @@ async function checkPrereqs(opts = {}) {
 var import_promises12 = require("node:fs/promises");
 
 // src/lib/gitignore.ts
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 var import_node_fs40 = require("node:fs");
 var VERITY_GITIGNORE_MARKER = "# Verity \u2014 machine-local state.";
 var SETTINGS_LOCAL_IGNORE_ENTRY = ".claude/settings.local.json";
@@ -22653,7 +23505,7 @@ var VERITY_GITIGNORE_BLOCK = [
 var BREAKING_ENTRIES = /* @__PURE__ */ new Set([".verity/", ".verity"]);
 function isIgnored2(path) {
   try {
-    (0, import_node_child_process11.execSync)(`git check-ignore -q -- "${path}"`, { stdio: "pipe" });
+    (0, import_node_child_process12.execSync)(`git check-ignore -q -- "${path}"`, { stdio: "pipe" });
     return true;
   } catch (err) {
     return err.status === 1 ? false : null;
@@ -22700,7 +23552,7 @@ function ensureVerityGitignore() {
 function committedVerityState() {
   let out = "";
   try {
-    out = (0, import_node_child_process11.execSync)("git ls-files -z -- .verity", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+    out = (0, import_node_child_process12.execSync)("git ls-files -z -- .verity", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
   } catch {
     return [];
   }
@@ -22710,10 +23562,10 @@ function untrackVerityState() {
   const tracked = committedVerityState();
   if (tracked.length === 0) return "none";
   try {
-    (0, import_node_child_process11.execSync)("git rm -r --cached --quiet -- .verity", { stdio: "pipe" });
+    (0, import_node_child_process12.execSync)("git rm -r --cached --quiet -- .verity", { stdio: "pipe" });
     for (const keep of [".verity/standard.yaml", ".verity/memory"]) {
       try {
-        (0, import_node_child_process11.execSync)(`git add -- "${keep}"`, { stdio: "pipe" });
+        (0, import_node_child_process12.execSync)(`git add -- "${keep}"`, { stdio: "pipe" });
       } catch {
       }
     }
@@ -22849,8 +23701,19 @@ async function buildReport() {
     if (c.status !== "ok" && c.remedy) next.push(c.remedy);
   }
   if (!state?.init) next.push('Run "verity init" \u2014 the deterministic setup phase has not completed here.');
-  if (!artifacts.standard || !artifacts.analysisConfig || !artifacts.verityMd) {
-    next.push("Run /verity-setup in Claude Code \u2014 the Standard, analysis config, and VERITY.md are synthesized there.");
+  const missing = [
+    !artifacts.standard && ".verity/standard.yaml",
+    !artifacts.analysisConfig && ".codacy/codacy.config.json",
+    !artifacts.verityMd && "VERITY.md"
+  ].filter((x) => !!x);
+  if (missing.length === 3) {
+    next.push("Run /verity-setup in Claude Code \u2014 it synthesizes the Standard, the analysis config, and VERITY.md.");
+  } else if (missing.length === 1 && !artifacts.analysisConfig) {
+    next.push(
+      'No analysis config, so static analysis runs nothing. Run /verity-setup in Claude Code to write one (it keeps the Standard you already have), or have a teammate run "verity config push".'
+    );
+  } else if (missing.length > 0) {
+    next.push(`Missing ${missing.join(" and ")}. Run "/verity-setup --force" in Claude Code to regenerate.`);
   }
   const noAnalysisMoment = !hooks.stop && hooks.guardOn.length === 0;
   if (noAnalysisMoment) {
@@ -22917,14 +23780,14 @@ function registerDoctorCommand(program2) {
 // src/commands/migrate.ts
 var import_node_fs43 = require("node:fs");
 var import_node_path28 = require("node:path");
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
 function defaultNpmRemover(pkg) {
-  (0, import_node_child_process12.execSync)(`npm rm -g ${pkg}`, { stdio: "pipe", timeout: 12e4 });
+  (0, import_node_child_process13.execSync)(`npm rm -g ${pkg}`, { stdio: "pipe", timeout: 12e4 });
 }
 function isGitTracked(cwd, relPath) {
   try {
-    (0, import_node_child_process12.execSync)(`git ls-files --error-unmatch ${relPath}`, { cwd, stdio: "pipe" });
+    (0, import_node_child_process13.execSync)(`git ls-files --error-unmatch ${relPath}`, { cwd, stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -22932,7 +23795,7 @@ function isGitTracked(cwd, relPath) {
 }
 function isGitRepo(cwd) {
   try {
-    (0, import_node_child_process12.execSync)("git rev-parse --is-inside-work-tree", { cwd, stdio: "pipe" });
+    (0, import_node_child_process13.execSync)("git rev-parse --is-inside-work-tree", { cwd, stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -22972,7 +23835,7 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
       );
     }
     try {
-      (0, import_node_child_process12.execSync)("git mv .gate .verity", { cwd: root, stdio: "pipe" });
+      (0, import_node_child_process13.execSync)("git mv .gate .verity", { cwd: root, stdio: "pipe" });
       actions.push("Moved .gate/ \u2192 .verity/ (git mv, staged)");
       moved = true;
     } catch {
@@ -23051,7 +23914,7 @@ function migrateStandardFile(root, actions) {
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
-      (0, import_node_child_process12.execSync)("git mv GATE.md VERITY.md", { cwd: root, stdio: "pipe" });
+      (0, import_node_child_process13.execSync)("git mv GATE.md VERITY.md", { cwd: root, stdio: "pipe" });
       moved = true;
     } catch {
     }
@@ -23126,7 +23989,7 @@ function readFileSyncSafe(path) {
 }
 function hasStagedChanges(root) {
   try {
-    (0, import_node_child_process12.execSync)("git diff --cached --quiet", { cwd: root, stdio: "pipe" });
+    (0, import_node_child_process13.execSync)("git diff --cached --quiet", { cwd: root, stdio: "pipe" });
     return false;
   } catch {
     return true;
@@ -23212,12 +24075,168 @@ function registerMigrateCommand(program2) {
 }
 
 // src/lib/prompt.ts
-var readline2 = __toESM(require("node:readline/promises"));
+var readline3 = __toESM(require("node:readline/promises"));
+
+// src/lib/select.ts
+var readline2 = __toESM(require("node:readline"));
+function keyToAction(str, key) {
+  const name = key?.name;
+  if (key?.ctrl && (name === "c" || str === "")) return { type: "interrupt" };
+  if (key?.ctrl && (name === "d" || str === "")) return { type: "eof" };
+  switch (name) {
+    case "up":
+      return { type: "move", delta: -1 };
+    case "down":
+      return { type: "move", delta: 1 };
+    case "k":
+      return key?.ctrl ? null : { type: "move", delta: -1 };
+    case "j":
+      return key?.ctrl ? null : { type: "move", delta: 1 };
+    case "space":
+      return { type: "toggle" };
+    case "return":
+    case "enter":
+      return { type: "confirm" };
+    default:
+      break;
+  }
+  if (str === " ") return { type: "toggle" };
+  if (str === "\r" || str === "\n") return { type: "confirm" };
+  if (str && /^[1-9]$/.test(str)) return { type: "jump", index: Number(str) - 1 };
+  return null;
+}
+function applyKey(state, action, count, mode2) {
+  switch (action.type) {
+    case "move": {
+      const cursor = (state.cursor + action.delta + count) % count;
+      return { status: "open", state: { cursor, chosen: state.chosen } };
+    }
+    case "jump": {
+      if (action.index >= count) return { status: "open", state };
+      return { status: "open", state: { cursor: action.index, chosen: state.chosen } };
+    }
+    case "toggle": {
+      if (mode2 === "single") {
+        return { status: "open", state: { cursor: state.cursor, chosen: /* @__PURE__ */ new Set([state.cursor]) } };
+      }
+      const chosen = new Set(state.chosen);
+      if (chosen.has(state.cursor)) chosen.delete(state.cursor);
+      else chosen.add(state.cursor);
+      return { status: "open", state: { cursor: state.cursor, chosen } };
+    }
+    case "confirm": {
+      if (mode2 === "single") return { status: "confirmed", indices: [state.cursor] };
+      if (state.chosen.size === 0) {
+        return {
+          status: "open",
+          state: { ...state, hint: "Select at least one \u2014 space toggles the option under the cursor." }
+        };
+      }
+      return { status: "confirmed", indices: [...state.chosen].sort((a, b) => a - b) };
+    }
+    case "interrupt":
+      return { status: "interrupt" };
+    case "eof":
+      return { status: "eof" };
+  }
+}
+var GREEN3 = "\x1B[0;32m";
+var DIM4 = "\x1B[2m";
+var BOLD2 = "\x1B[1m";
+var RESET3 = "\x1B[0m";
+function renderSelect(question, choices, state, mode2, color = colorEnabled()) {
+  const paint = (text, code) => color ? `${code}${text}${RESET3}` : text;
+  const lines = ["", `  ${question}`];
+  const labelOf = (c) => `${c.label}${c.recommended ? " (recommended)" : ""}`;
+  const gutter = Math.max(...choices.map((c) => labelOf(c).length));
+  choices.forEach((choice, i) => {
+    const here = i === state.cursor;
+    const marker = state.chosen.has(i) ? "\u25C9" : "\u25CB";
+    const cursor = here ? "\u276F" : " ";
+    const label2 = labelOf(choice);
+    const pad = choice.hint ? " ".repeat(gutter - label2.length) : "";
+    const hint = choice.hint ? `${pad}   ${paint(choice.hint, DIM4)}` : "";
+    lines.push(`  ${cursor} ${marker} ${here ? paint(label2, BOLD2) : label2}${hint}`);
+  });
+  const keys = mode2 === "multi" ? "\u2191\u2193 move \xB7 space toggle \xB7 enter confirm" : "\u2191\u2193 move \xB7 enter confirm";
+  lines.push(`  ${paint(state.hint ?? keys, state.hint ? GREEN3 : DIM4)}`);
+  return lines;
+}
+function runSelect(opts) {
+  const input = opts.input ?? process.stdin;
+  const output = opts.output ?? process.stdout;
+  const { choices, mode: mode2 } = opts;
+  if (typeof input.setRawMode !== "function" || !input.isTTY) return Promise.resolve(null);
+  const initialIdx = choices.map((c, i) => opts.initial.includes(c.id) ? i : -1).filter((i) => i >= 0);
+  let state = {
+    cursor: initialIdx[0] ?? 0,
+    chosen: new Set(mode2 === "single" ? [initialIdx[0] ?? 0] : initialIdx)
+  };
+  return new Promise((resolve4) => {
+    let painted = 0;
+    let settled = false;
+    const draw = () => {
+      if (painted > 0) {
+        readline2.moveCursor(output, 0, -painted);
+        readline2.cursorTo(output, 0);
+        readline2.clearScreenDown(output);
+      }
+      const lines = renderSelect(opts.question, choices, state, mode2);
+      output.write(lines.join("\n") + "\n");
+      painted = lines.length;
+    };
+    const onKey = (str, key) => {
+      const action = keyToAction(str, key);
+      if (!action) return;
+      const outcome = applyKey(state, action, choices.length, mode2);
+      if (outcome.status === "open") {
+        state = outcome.state;
+        draw();
+        return;
+      }
+      if (outcome.status === "confirmed") {
+        state = { ...state, hint: void 0 };
+        draw();
+        finish(outcome.indices.map((i) => choices[i].id));
+        return;
+      }
+      if (outcome.status === "eof") {
+        finish(null);
+        return;
+      }
+      restore();
+      output.write("\n");
+      process.exit(130);
+    };
+    const restore = () => {
+      input.removeListener("keypress", onKey);
+      try {
+        input.setRawMode(false);
+      } catch {
+      }
+      input.pause();
+    };
+    const finish = (value) => {
+      if (settled) return;
+      settled = true;
+      restore();
+      resolve4(value);
+    };
+    readline2.emitKeypressEvents(input);
+    input.setRawMode(true);
+    input.resume();
+    input.on("keypress", onKey);
+    input.once("end", () => finish(null));
+    draw();
+  });
+}
+
+// src/lib/prompt.ts
 function interactive() {
   return !!process.stdin.isTTY && !!process.stdout.isTTY;
 }
 async function askLine(question, io = {}) {
-  const rl = readline2.createInterface({
+  const rl = readline3.createInterface({
     input: io.input ?? process.stdin,
     output: io.output ?? process.stdout
   });
@@ -23275,6 +24294,8 @@ function printOptions(question, choices) {
 }
 async function promptChoice(question, choices, fallback) {
   if (!interactive()) return fallback;
+  const picked = await runSelect({ question, choices, initial: [fallback], mode: "single" });
+  if (picked !== null) return picked[0] ?? fallback;
   printOptions(question, choices);
   const defaultIdx = choices.findIndex((c) => c.id === fallback);
   const answer = await ask(`  Choose [${defaultIdx + 1}]: `);
@@ -23288,6 +24309,8 @@ async function promptChoice(question, choices, fallback) {
 }
 async function promptMultiSelect(question, choices, fallback) {
   if (!interactive()) return [...fallback];
+  const picked = await runSelect({ question, choices, initial: fallback, mode: "multi" });
+  if (picked !== null) return picked.length > 0 ? picked : [...fallback];
   printOptions(question, choices);
   const defaultLabel = choices.map((c, i) => fallback.includes(c.id) ? String(i + 1) : null).filter(Boolean).join(",");
   const answer = await ask(`  Choose one or more, comma-separated [${defaultLabel}]: `);
@@ -23300,6 +24323,146 @@ async function promptMultiSelect(question, choices, fallback) {
   return parsed.ids;
 }
 
+// src/lib/remote-config.ts
+var import_node_fs44 = require("node:fs");
+var import_promises14 = require("node:fs/promises");
+var import_node_path29 = require("node:path");
+var import_yaml3 = __toESM(require_dist());
+var IGNORE_RIDER = "verityignore";
+async function fetchRemoteSetup(opts) {
+  const standard = await apiRequest({
+    method: "GET",
+    path: "/standards/latest",
+    serviceUrl: opts.serviceUrl,
+    token: opts.token,
+    verbose: opts.verbose
+  });
+  if (!standard.ok) {
+    const missing = /STANDARD_NOT_FOUND|not found|404/i.test(standard.error);
+    return missing ? { status: "none" } : { status: "unavailable", reason: standard.error };
+  }
+  const config = await apiRequest({
+    method: "GET",
+    path: "/analysis-configs",
+    serviceUrl: opts.serviceUrl,
+    token: opts.token,
+    verbose: opts.verbose
+  });
+  return {
+    status: "found",
+    standard: {
+      version: standard.data.version,
+      content: standard.data.content ?? {},
+      createdBy: standard.data.created_by,
+      createdAt: standard.data.created_at
+    },
+    // Absent is normal and not an error: the two are stored independently, and a
+    // project can have a Standard with no analysis config.
+    analysisConfig: config.ok ? config.data.content ?? null : null
+  };
+}
+async function adoptRemoteSetup(found, opts) {
+  const written = [];
+  const notes = [];
+  const content = { ...found.standard.content };
+  const rider = typeof content[IGNORE_RIDER] === "string" ? content[IGNORE_RIDER] : null;
+  delete content[IGNORE_RIDER];
+  await writeOut(STANDARD_FILE, (0, import_yaml3.stringify)(content));
+  written.push(STANDARD_FILE);
+  if (rider !== null) {
+    const localIgnore = projectPath(VERITYIGNORE_FILE);
+    if (!(0, import_node_fs44.existsSync)(localIgnore)) {
+      await writeOut(VERITYIGNORE_FILE, rider);
+      written.push(VERITYIGNORE_FILE);
+    } else {
+      const local = await (0, import_promises14.readFile)(localIgnore, "utf-8").catch(() => null);
+      if (local !== null && local !== rider) {
+        notes.push(`${VERITYIGNORE_FILE} already exists here and differs from the pushed copy \u2014 kept yours.`);
+      }
+    }
+  }
+  if (found.analysisConfig) {
+    await writeOut(CODACY_CONFIG_FILE, JSON.stringify(found.analysisConfig, null, 2) + "\n");
+    written.push(CODACY_CONFIG_FILE);
+  } else {
+    notes.push(
+      "No analysis config is stored for this repository, so static analysis has nothing to run. Run /verity-setup in Claude Code to generate one."
+    );
+  }
+  await writeOut(VERITY_MD_FILE, renderVerityMd(found.standard, opts));
+  written.push(VERITY_MD_FILE);
+  return { written, notes };
+}
+async function writeOut(relative, body) {
+  const target = projectPath(relative);
+  await (0, import_promises14.mkdir)((0, import_node_path29.dirname)(target), { recursive: true });
+  await (0, import_promises14.writeFile)(target, body);
+}
+function names(content, key) {
+  const raw = content[key];
+  if (!Array.isArray(raw)) return [];
+  return raw.map((entry) => {
+    if (typeof entry === "string") return entry;
+    if (entry && typeof entry === "object") {
+      const rec = entry;
+      const label2 = rec.name ?? rec.id ?? rec.dimension ?? rec.pattern;
+      return typeof label2 === "string" ? label2 : null;
+    }
+    return null;
+  }).filter((x) => !!x);
+}
+function renderVerityMd(standard, opts) {
+  const dimensions = names(standard.content, "quality_dimensions");
+  const patterns = names(standard.content, "security_patterns");
+  const custom = names(standard.content, "custom_patterns");
+  const list2 = (items, fallback) => (items.length > 0 ? items : fallback).map((i) => `- ${i}`).join("\n");
+  return `# VERITY.md \u2014 Quality Gate
+
+> This project uses [Verity](https://verity.md) to enforce quality and security standards on AI-generated code.
+
+**URL:** ${opts.serviceUrl}
+**Project:** ${opts.projectId ?? "this repository"}
+**Standard:** v${standard.version} (adopted from the service${standard.createdBy ? `, created by ${standard.createdBy}` : ""})
+
+## Quality Dimensions
+${list2(dimensions, ["comprehensibility", "modularity", "type_safety", "test_adequacy"])}
+
+## Security Patterns
+${list2(patterns, [
+    "No hardcoded secrets (CWE-798)",
+    "Input sanitization (CWE-20)",
+    "Parameterized queries (CWE-89)",
+    "Dependency verification (CWE-1395)",
+    "No unsafe deserialization (CWE-502)",
+    "Access control checks (CWE-639)",
+    "Config file integrity (CWE-15)"
+  ])}
+${custom.length > 0 ? `
+## Project Patterns
+${list2(custom, [])}
+` : ""}
+## How It Works
+Every time the coding agent stops, the Verity hook:
+1. Runs static analysis via @codacy/analysis-cli
+2. Sends results + code to the Verity service
+3. An independent model reviews the code
+4. Returns PASS / WARN / FAIL with actionable findings
+
+_This Standard came from the service \u2014 the team's shared version. To change it,
+edit \`.verity/standard.yaml\` and run \`verity standard push\`, or re-synthesize
+from the codebase with \`/verity-setup --force\`._
+`;
+}
+function describeRemote(found) {
+  const when = found.standard.createdAt.slice(0, 10);
+  const who = found.standard.createdBy ? ` by ${found.standard.createdBy}` : "";
+  const extras = [];
+  if (found.analysisConfig) extras.push("analysis config");
+  if (typeof found.standard.content[IGNORE_RIDER] === "string") extras.push(".verityignore");
+  const also = extras.length > 0 ? ` \xB7 with ${extras.join(" and ")}` : "";
+  return `version ${found.standard.version}, pushed${who} on ${when}${also}`;
+}
+
 // src/commands/init.ts
 async function confirmExistingLogin(serviceUrl, remote, opts) {
   const existing = await resolveToken(opts.token);
@@ -23358,7 +24521,7 @@ async function runOptionalAuth(resolution, opts = {}) {
   }
   let remote = "";
   try {
-    remote = (0, import_node_child_process13.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    remote = (0, import_node_child_process14.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
   }
   if (!healed) {
@@ -23404,15 +24567,15 @@ async function runOptionalAuth(resolution, opts = {}) {
 }
 function resolveDataDir() {
   const candidates = [
-    (0, import_node_path29.join)(__dirname, "..", "data"),
+    (0, import_node_path30.join)(__dirname, "..", "data"),
     // installed: node_modules/@codacy/verity-cli/data
-    (0, import_node_path29.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path30.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
-    (0, import_node_path29.join)(process.cwd(), "cli", "data")
+    (0, import_node_path30.join)(process.cwd(), "cli", "data")
     // local dev: running from repo root
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs44.existsSync)((0, import_node_path29.join)(candidate, "skills"))) {
+    if ((0, import_node_fs45.existsSync)((0, import_node_path30.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -23421,16 +24584,16 @@ function resolveDataDir() {
   );
 }
 async function copyDir(src, dest) {
-  await (0, import_promises14.mkdir)(dest, { recursive: true });
-  await (0, import_promises14.cp)(src, dest, { recursive: true, force: true });
+  await (0, import_promises15.mkdir)(dest, { recursive: true });
+  await (0, import_promises15.cp)(src, dest, { recursive: true, force: true });
 }
 async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out = [];
     const walk = (d, prefix) => {
-      for (const e of (0, import_node_fs44.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs45.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk((0, import_node_path29.join)(d, e.name), rel);
+        if (e.isDirectory()) walk((0, import_node_path30.join)(d, e.name), rel);
         else if (e.isFile()) out.push(rel);
       }
     };
@@ -23441,8 +24604,8 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      const a = await (0, import_promises14.readFile)((0, import_node_path29.join)(src, rel), "utf-8");
-      const b = await (0, import_promises14.readFile)((0, import_node_path29.join)(dest, rel), "utf-8");
+      const a = await (0, import_promises15.readFile)((0, import_node_path30.join)(src, rel), "utf-8");
+      const b = await (0, import_promises15.readFile)((0, import_node_path30.join)(dest, rel), "utf-8");
       if (a !== b) return false;
     }
     return true;
@@ -23471,9 +24634,17 @@ var MOMENT_CHOICES = [
   { id: "pre-push", label: "Before push / PR", hint: "reviews the to-be-pushed commits, blocks on FAIL" }
 ];
 var DEFAULT_MOMENTS = ["stop"];
+async function momentsFromInstalledHooks() {
+  const status = await checkAllVerityHooks();
+  const wired = [];
+  if (status.stop) wired.push("stop");
+  if (status.guardOn.includes("commit")) wired.push("pre-commit");
+  if (status.guardOn.includes("push")) wired.push("pre-push");
+  return wired.length > 0 ? wired : DEFAULT_MOMENTS;
+}
 async function askSetupQuestions(defaultsOnly, previous) {
   const intensityDefault = previous?.intensity ?? "balanced";
-  const momentsDefault = previous?.moments?.length ? previous.moments : DEFAULT_MOMENTS;
+  const momentsDefault = previous?.moments?.length ? previous.moments : await momentsFromInstalledHooks();
   if (defaultsOnly) {
     return { intensity: intensityDefault, moments: momentsDefault, telemetry: "not-asked" };
   }
@@ -23510,6 +24681,73 @@ function insideClaudeCode() {
 function resumeDeferredPending(previous) {
   return previous?.telemetry === "deferred";
 }
+async function maybeAdoptRemoteSetup(opts) {
+  if (!opts.adopt) {
+    printInfo("  Skipped (--no-adopt) \u2014 the setup below runs from this codebase.");
+    return false;
+  }
+  const token = await resolveToken(opts.globals.token);
+  const url = await resolveServiceUrl(opts.globals.serviceUrl);
+  if (!token.ok || !url.ok) {
+    printInfo("  Not signed in, so there is nothing to fetch \u2014 the setup below runs from your codebase.");
+    return false;
+  }
+  const found = await fetchRemoteSetup({
+    token: token.data.token,
+    serviceUrl: url.data,
+    verbose: opts.globals.verbose
+  });
+  if (found.status === "unavailable") {
+    printWarn(`  Could not ask the service (${found.reason}) \u2014 continuing with the regular setup.`);
+    return false;
+  }
+  if (found.status === "none") {
+    printInfo("  No Standard stored for this repository yet \u2014 this setup will create the first one.");
+    return false;
+  }
+  if (opts.previous?.declinedStandardVersion === found.standard.version) {
+    printInfo(`  Standard v${found.standard.version} is available; you declined this version before \u2014 not asking again.`);
+    printInfo("    A newer version will be offered. To take it now: verity standard get, or /verity-setup.");
+    return false;
+  }
+  console.log("");
+  console.log(`  This repository already has a Standard on Verity: ${describeRemote(found)}`);
+  console.log("    Using it keeps you consistent with everyone else on the project.");
+  console.log("    Synthesizing a new one from this codebase would push a competing version.");
+  console.log("");
+  const use = opts.defaultsOnly ? true : await promptYes("  Use the existing Standard? [Y/n] ", { nonInteractive: true });
+  if (!use) {
+    printInfo("  Keeping the existing version untouched; /verity-setup will synthesize a new one.");
+    await writeSetupState({ declinedStandardVersion: found.standard.version }).catch(() => {
+    });
+    return false;
+  }
+  try {
+    const outcome = await adoptRemoteSetup(found, {
+      serviceUrl: url.data,
+      projectId: await projectLabel(token.data.token, url.data, opts.globals.verbose)
+    });
+    for (const path of outcome.written) printInfo(`  ${path} \u2713`);
+    for (const note of outcome.notes) printWarn(`  ${note}`);
+    if (opts.previous?.declinedStandardVersion != null) {
+      await writeSetupState({ declinedStandardVersion: void 0 }).catch(() => {
+      });
+    }
+    return true;
+  } catch (err) {
+    printWarn(`  Could not write the fetched configuration: ${err.message}`);
+    printInfo("  Falling back to the regular setup.");
+    return false;
+  }
+}
+async function projectLabel(token, serviceUrl, verbose) {
+  try {
+    const who = await whoami(token, serviceUrl, verbose);
+    return who.ok ? who.data.project_id : null;
+  } catch {
+    return null;
+  }
+}
 var PHASE_TWO_ARTIFACTS = [
   {
     path: ".verity/standard.yaml",
@@ -23578,7 +24816,7 @@ async function handoffToSetup(enabled, claudeInstalled) {
   console.log("  Usually a minute or two. Quit any time \u2014 re-running /verity-setup resumes.");
   console.log("");
   const startedAt = Date.now();
-  const run2 = (0, import_node_child_process13.spawnSync)("claude", ["/verity-setup"], { stdio: "inherit" });
+  const run2 = (0, import_node_child_process14.spawnSync)("claude", ["/verity-setup"], { stdio: "inherit" });
   if (run2.error) {
     printWarn(`Could not start Claude Code: ${run2.error.message}`);
     return instruct("start it yourself and run the skill there");
@@ -23586,12 +24824,13 @@ async function handoffToSetup(enabled, claudeInstalled) {
   await reportPhaseTwo(startedAt);
 }
 function registerInitCommand(program2) {
-  program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").action(async (opts) => {
+  program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").option("--no-adopt", "Don't offer this repository's existing Standard from the service; synthesize a new one").action(async (opts) => {
     const force = opts.force ?? false;
     const wantsHandoff = opts.setup !== false;
+    const wantsAdopt = opts.adopt !== false;
     const defaultsOnly = (opts.yes ?? false) || !interactive();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs44.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs45.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -23606,7 +24845,7 @@ function registerInitCommand(program2) {
     } else {
       printPhase(1, 2, "this machine", "prerequisites \xB7 skills \xB7 hooks \xB7 sign-in");
     }
-    const TOTAL_STEPS = 8;
+    const TOTAL_STEPS = 9;
     let stepNo = 0;
     const step = (label2) => {
       stepNo++;
@@ -23641,17 +24880,17 @@ function registerInitCommand(program2) {
     console.log("");
     step("Installing skills");
     const dataDir = resolveDataDir();
-    const skillsSource = (0, import_node_path29.join)(dataDir, "skills");
+    const skillsSource = (0, import_node_path30.join)(dataDir, "skills");
     const skillsDest = ".claude/skills";
     let skillsInstalled = 0;
     for (const skill of SKILLS) {
-      const src = (0, import_node_path29.join)(skillsSource, skill);
-      const dest = (0, import_node_path29.join)(skillsDest, skill);
-      if (!(0, import_node_fs44.existsSync)(src)) {
+      const src = (0, import_node_path30.join)(skillsSource, skill);
+      const dest = (0, import_node_path30.join)(skillsDest, skill);
+      if (!(0, import_node_fs45.existsSync)(src)) {
         printWarn(`  Skill data not found: ${skill}`);
         continue;
       }
-      if ((0, import_node_fs44.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+      if ((0, import_node_fs45.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
         skillsInstalled++;
         continue;
       }
@@ -23667,7 +24906,7 @@ function registerInitCommand(program2) {
       printInfo(`  intensity: ${intensity} \xB7 moments: ${moments.join(", ") || "none"} (no questions asked)`);
     }
     step("Knowledge base, .gitignore and CLAUDE.md");
-    await (0, import_promises14.mkdir)(VERITY_DIR, { recursive: true });
+    await (0, import_promises15.mkdir)(VERITY_DIR, { recursive: true });
     await ensureMemoryDir();
     const ignoreResult = ensureVerityGitignore();
     if (ignoreResult === "failed") {
@@ -23701,8 +24940,8 @@ function registerInitCommand(program2) {
     } catch (err) {
       printWarn(`  Could not update CLAUDE.md: ${err.message}`);
     }
-    const globalVerityDir = (0, import_node_path29.join)(process.env.HOME ?? "", ".verity");
-    await (0, import_promises14.mkdir)(globalVerityDir, { recursive: true });
+    const globalVerityDir = (0, import_node_path30.join)(process.env.HOME ?? "", ".verity");
+    await (0, import_promises15.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
     await applyMomentSelection(moments);
@@ -23754,6 +24993,18 @@ function registerInitCommand(program2) {
         printWarn('Telemetry needs a Verity token \u2014 run "verity login", then "verity telemetry install".');
       }
     }
+    step("Checking Verity for an existing setup");
+    let adopted = false;
+    if ((0, import_node_fs45.existsSync)(projectPath(STANDARD_FILE))) {
+      printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
+    } else {
+      adopted = await maybeAdoptRemoteSetup({
+        globals: program2.opts(),
+        defaultsOnly,
+        previous,
+        adopt: wantsAdopt
+      });
+    }
     step("Recording your answers");
     try {
       await writeSetupState({
@@ -23762,7 +25013,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.31.1-experimental.be74f71" : "dev"
+          cli_version: true ? "0.31.1-experimental.f2f59c0" : "dev"
         }
       });
     } catch (err) {
@@ -23780,14 +25031,20 @@ function registerInitCommand(program2) {
     console.log("    CLAUDE.md                      memory pointer, waive policy, reflection");
     console.log("");
     console.log(`  Intensity: ${intensity}    Moments: ${moments.join(", ") || "none"}`);
-    await handoffToSetup(wantsHandoff, claudeInstalled);
+    if (adopted) {
+      console.log("");
+      printInfo("Setup complete \u2014 this project uses your team's Standard.");
+      printInfo("  Re-synthesize from this codebase instead: /verity-setup --force");
+    } else {
+      await handoffToSetup(wantsHandoff, claudeInstalled);
+    }
     console.log("");
   });
 }
 
 // src/commands/uninstall.ts
-var import_node_fs45 = require("node:fs");
-var import_node_path30 = require("node:path");
+var import_node_fs46 = require("node:fs");
+var import_node_path31 = require("node:path");
 var SKILL_NAMES = [
   "verity-setup",
   "verity-analyze",
@@ -23806,11 +25063,11 @@ function registerUninstallCommand(program2) {
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
     for (const name of SKILL_NAMES) {
-      const dir = (0, import_node_path30.join)(skillsRoot, name);
-      if ((0, import_node_fs45.existsSync)(dir)) {
+      const dir = (0, import_node_path31.join)(skillsRoot, name);
+      if ((0, import_node_fs46.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name}/`,
-          apply: () => (0, import_node_fs45.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs46.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -23824,24 +25081,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs45.existsSync)(verityDir)) {
+    if ((0, import_node_fs46.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs45.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs46.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs45.existsSync)(verityMd)) {
+      if ((0, import_node_fs46.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs45.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs46.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs45.existsSync)(path) && (0, import_node_fs45.statSync)(path).isDirectory() && (0, import_node_fs45.readdirSync)(path).length === 0) {
-        (0, import_node_fs45.rmdirSync)(path);
+      if ((0, import_node_fs46.existsSync)(path) && (0, import_node_fs46.statSync)(path).isDirectory() && (0, import_node_fs46.readdirSync)(path).length === 0) {
+        (0, import_node_fs46.rmdirSync)(path);
       }
     };
     actions.push({
@@ -23852,11 +25109,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path30.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs45.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path31.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs46.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs45.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs46.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -24050,8 +25307,8 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs46 = require("node:fs");
-var import_node_path31 = require("node:path");
+var import_node_fs47 = require("node:fs");
+var import_node_path32 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -24088,11 +25345,11 @@ function registerResetCommand(program2) {
     }
     const cacheDir = projectPath(CACHE_DIR);
     let purged = 0;
-    if ((0, import_node_fs46.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs46.readdirSync)(cacheDir)) {
+    if ((0, import_node_fs47.existsSync)(cacheDir)) {
+      for (const entry of (0, import_node_fs47.readdirSync)(cacheDir)) {
         if (entry.startsWith("pending-")) {
           try {
-            (0, import_node_fs46.unlinkSync)((0, import_node_path31.join)(cacheDir, entry));
+            (0, import_node_fs47.unlinkSync)((0, import_node_path32.join)(cacheDir, entry));
             purged++;
           } catch {
           }
@@ -24107,19 +25364,19 @@ function registerResetCommand(program2) {
       projectPath(`${VERITY_DIR}/.last-analysis`)
     ];
     for (const file of filesToClear) {
-      if ((0, import_node_fs46.existsSync)(file)) {
+      if ((0, import_node_fs47.existsSync)(file)) {
         try {
-          (0, import_node_fs46.writeFileSync)(file, "");
+          (0, import_node_fs47.writeFileSync)(file, "");
         } catch {
         }
       }
     }
     if (opts.all) {
       const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs46.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs46.readdirSync)(logsDir)) {
+      if ((0, import_node_fs47.existsSync)(logsDir)) {
+        for (const entry of (0, import_node_fs47.readdirSync)(logsDir)) {
           try {
-            (0, import_node_fs46.unlinkSync)((0, import_node_path31.join)(logsDir, entry));
+            (0, import_node_fs47.unlinkSync)((0, import_node_path32.join)(logsDir, entry));
           } catch {
           }
         }
@@ -24427,8 +25684,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.31.1-experimental.be74f71").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.31.1-experimental.be74f71");
+program.name("verity").description("CLI for Verity quality gate service").version("0.31.1-experimental.f2f59c0").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.31.1-experimental.f2f59c0");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();