@codacy/verity-cli 0.32.0-experimental.68ae2ee → 0.32.0-experimental.f0746f7

package/bin/verity.js

@@ -10405,8 +10405,6 @@ var MAX_INTENT_CHARS = 2e3;
 var SNAPSHOT_DIR = `${VERITY_DIR}/.snapshot`;
 var BASELINE_DIR = `${VERITY_DIR}/.baseline`;
 var CONVERSATION_BUFFER_FILE = `${VERITY_DIR}/.conversation-buffer`;
-var PLUGIN_MARKER_FILE = `${VERITY_DIR}/.plugin-active`;
-var PROJECT_CONFIG_FILE = `${VERITY_DIR}/config.json`;
 var CONVERSATION_MAX_ENTRIES = 10;
 var CONVERSATION_WINDOW_MINUTES = 15;
 var MAX_FINDINGS = 25;
@@ -10833,18 +10831,6 @@ function splitLines(s) {
 }
 var SHA_RE = /^[0-9a-f]{40}$/;
 function readBaselineSha() {
-  const sha = readRawBaselineSha();
-  if (sha === null) return null;
-  if (!commitResolves(sha)) {
-    try {
-      (0, import_node_fs3.unlinkSync)(BASELINE_SHA_FILE);
-    } catch {
-    }
-    return null;
-  }
-  return sha;
-}
-function readRawBaselineSha() {
   if (!(0, import_node_fs3.existsSync)(BASELINE_SHA_FILE)) return null;
   let sha;
   try {
@@ -10852,7 +10838,16 @@ function readRawBaselineSha() {
   } catch {
     return null;
   }
-  return SHA_RE.test(sha) ? sha : null;
+  if (!SHA_RE.test(sha)) return null;
+  const reachable = execGit(`git cat-file -e ${sha}^{commit} 2>/dev/null && echo ok`) === "ok";
+  if (!reachable) {
+    try {
+      (0, import_node_fs3.unlinkSync)(BASELINE_SHA_FILE);
+    } catch {
+    }
+    return null;
+  }
+  return sha;
 }
 function writeBaselineSha(sha) {
   if (!SHA_RE.test(sha)) return;
@@ -10862,25 +10857,6 @@ function writeBaselineSha(sha) {
   } catch {
   }
 }
-function commitObjectExists(sha) {
-  if (!SHA_RE.test(sha)) return false;
-  return execGit(`git cat-file -e ${sha}^{commit} 2>/dev/null && echo ok`) === "ok";
-}
-function committedSinceRewrite(oldSha) {
-  if (!SHA_RE.test(oldSha)) return [];
-  const newLocal = new Set(splitLines(execGit(`git rev-list HEAD --not ${oldSha} --remotes`)));
-  if (newLocal.size === 0) return [];
-  const files = /* @__PURE__ */ new Set();
-  for (const line of splitLines(execGit(`git cherry ${oldSha} HEAD`))) {
-    const sp = line.indexOf(" ");
-    if (sp < 0) continue;
-    const mark = line.slice(0, sp);
-    const sha = line.slice(sp + 1).trim();
-    if (mark !== "+" || !newLocal.has(sha)) continue;
-    for (const f of splitLines(execGit(`git diff-tree --no-commit-id --name-only -r ${sha}`))) files.add(f);
-  }
-  return [...files].filter((f) => !isVerityOwnedPath(f));
-}
 var VERITY_OWNED_PREFIXES = [".verity/", ".gate/", ".codacy/"];
 var VERITY_OWNED_FILES = ["VERITY.md"];
 function isVerityOwnedPath(file) {
@@ -10893,7 +10869,6 @@ function getChangedFiles() {
   for (const f of splitLines(execGit("git diff --name-only HEAD"))) sets.add(f);
   for (const f of splitLines(execGit("git diff --name-only --cached"))) sets.add(f);
   for (const f of splitLines(execGit("git ls-files --others --exclude-standard"))) sets.add(f);
-  const rawBaseline = readRawBaselineSha();
   const baseline = readBaselineSha();
   if (baseline) {
     const committed = splitLines(execGit(`git diff --name-only ${baseline}..HEAD`));
@@ -10901,13 +10876,6 @@ function getChangedFiles() {
       hasRecentCommitFiles = true;
       for (const f of committed) sets.add(f);
     }
-  } else if (rawBaseline && commitObjectExists(rawBaseline)) {
-    const committed = committedSinceRewrite(rawBaseline);
-    logEvent("baseline_rewritten", { recovered: committed.length });
-    if (committed.length > 0) {
-      hasRecentCommitFiles = true;
-      for (const f of committed) sets.add(f);
-    }
   } else {
     const headTimestamp = parseInt(execGit("git log -1 --format=%ct HEAD"), 10) || 0;
     const commitAge = Math.floor(Date.now() / 1e3) - headTimestamp;
@@ -12733,155 +12701,9 @@ async function applyMomentSelection(moments) {
   return settings;
 }
 
-// src/lib/project-config.ts
-var import_node_fs4 = require("node:fs");
-var DEFAULTS = { git_moments: [] };
-function isMoment(value) {
-  return value === "commit" || value === "push";
-}
-function parseMoments(raw) {
-  return [...new Set(raw.split(",").map((s) => s.trim()).filter(isMoment))];
-}
-function readProjectConfig() {
-  try {
-    if (!(0, import_node_fs4.existsSync)(PROJECT_CONFIG_FILE)) return DEFAULTS;
-    const raw = JSON.parse((0, import_node_fs4.readFileSync)(PROJECT_CONFIG_FILE, "utf-8"));
-    const moments = Array.isArray(raw.git_moments) ? raw.git_moments.filter(isMoment) : [];
-    return { git_moments: [...new Set(moments)] };
-  } catch {
-    return DEFAULTS;
-  }
-}
-function writeProjectConfig(patch) {
-  const next = { ...readProjectConfig(), ...patch };
-  (0, import_node_fs4.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs4.writeFileSync)(PROJECT_CONFIG_FILE, JSON.stringify(next, null, 2) + "\n");
-  return next;
-}
-function resolveGuardMoments(explicit) {
-  if (explicit !== void 0) return parseMoments(explicit);
-  return readProjectConfig().git_moments;
-}
-
-// src/lib/plugin-ownership.ts
-var import_node_fs6 = require("node:fs");
-
-// src/lib/stderr-log.ts
-var import_node_fs5 = require("node:fs");
-var TOKEN_RE2 = /verity_[0-9a-f]{16,}/g;
-var ANSI_RE = /\u001b\[[0-?]*[ -/]*[@-~]/g;
-function scrub(s) {
-  return s.replace(TOKEN_RE2, "verity_***REDACTED***").replace(ANSI_RE, "");
-}
-var installed = false;
-var wroteBanner = false;
-var banner = "";
-function append(text) {
-  try {
-    const dir = projectPath(DEBUG_LOG_DIR);
-    const file = projectPath(STDERR_LOG_FILE);
-    (0, import_node_fs5.mkdirSync)(dir, { recursive: true });
-    rotateIfNeeded(file);
-    (0, import_node_fs5.appendFileSync)(file, text);
-  } catch {
-  }
-}
-function ensureBanner() {
-  if (wroteBanner) return;
-  wroteBanner = true;
-  append(banner);
-}
-function installStderrLog(cmd, argv, version) {
-  if (installed || !isDebugEnabled()) return;
-  installed = true;
-  banner = `
-\u2501\u2501 verity ${cmd} \xB7 ${(/* @__PURE__ */ new Date()).toISOString()} \xB7 pid ${process.pid}
-   v${version} \xB7 ${process.cwd()}
-   argv: ${scrub(argv.join(" "))}
-`;
-  const original = process.stderr.write.bind(process.stderr);
-  const tee = (...args) => {
-    const result = original(...args);
-    try {
-      const chunk = args[0];
-      const text = typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf-8") : String(chunk);
-      ensureBanner();
-      append(scrub(text));
-    } catch {
-    }
-    return result;
-  };
-  process.stderr.write = tee;
-}
-function logToFileOnly(text) {
-  if (!installed) return;
-  ensureBanner();
-  append(text.endsWith("\n") ? text : `${text}
-`);
-}
-
-// src/lib/plugin-ownership.ts
-var MARKER_TTL_SECONDS = 24 * 60 * 60;
-function isPluginInvocation() {
-  return !!process.env.VERITY_PLUGIN_ROOT;
-}
-function readMarker() {
-  try {
-    if (!(0, import_node_fs6.existsSync)(PLUGIN_MARKER_FILE)) return null;
-    const raw = JSON.parse((0, import_node_fs6.readFileSync)(PLUGIN_MARKER_FILE, "utf-8"));
-    const pluginRoot = typeof raw.plugin_root === "string" ? raw.plugin_root : "";
-    if (!pluginRoot) return null;
-    return {
-      session_id: typeof raw.session_id === "string" ? raw.session_id : null,
-      plugin_root: pluginRoot,
-      version: typeof raw.version === "string" ? raw.version : null,
-      ts: typeof raw.ts === "number" ? raw.ts : 0
-    };
-  } catch {
-    return null;
-  }
-}
-function recordPluginOwnership(sessionId) {
-  const pluginRoot = process.env.VERITY_PLUGIN_ROOT;
-  if (!pluginRoot) return;
-  try {
-    (0, import_node_fs6.mkdirSync)(VERITY_DIR, { recursive: true });
-    const marker = {
-      session_id: sessionId,
-      plugin_root: pluginRoot,
-      version: process.env.VERITY_PLUGIN_VERSION || null,
-      ts: Math.floor(Date.now() / 1e3)
-    };
-    (0, import_node_fs6.writeFileSync)(PLUGIN_MARKER_FILE, JSON.stringify(marker));
-  } catch {
-  }
-}
-function shouldDeferToPlugin(sessionId) {
-  if (isPluginInvocation()) {
-    recordPluginOwnership(sessionId);
-    return false;
-  }
-  const marker = readMarker();
-  if (!marker) return false;
-  if (!(0, import_node_fs6.existsSync)(marker.plugin_root)) return false;
-  if (sessionId && marker.session_id) return sessionId === marker.session_id;
-  return Math.floor(Date.now() / 1e3) - marker.ts < MARKER_TTL_SECONDS;
-}
-function pluginActiveHere() {
-  const marker = readMarker();
-  return !!marker && (0, import_node_fs6.existsSync)(marker.plugin_root);
-}
-function deferredToPlugin(command, sessionId) {
-  if (!shouldDeferToPlugin(sessionId)) return false;
-  logToFileOnly(
-    `${command}: the Verity Claude Code plugin owns this session's hooks \u2014 standing down so the turn is not gated twice. Remove the duplicate settings.json hooks with \`verity init --plugin-mode\`.`
-  );
-  return true;
-}
-
 // src/commands/hooks.ts
 var ALL_MOMENTS = ["stop", "pre-commit", "pre-push"];
-function parseMoments2(raw) {
+function parseMoments(raw) {
   const seen = /* @__PURE__ */ new Set();
   for (const part of raw.split(",").map((s) => s.trim()).filter(Boolean)) {
     if (ALL_MOMENTS.includes(part)) seen.add(part);
@@ -12893,22 +12715,7 @@ function registerHooksCommands(program2) {
   hooks.command("install").description("Install Verity hooks into Claude Code settings").option("--force", "Overwrite existing Verity hooks").option("--moments <list>", "Reconcile to exactly these moments: stop,pre-commit,pre-push").action(async (opts) => {
     const force = opts.force ?? false;
     if (opts.moments != null) {
-      const moments = parseMoments2(opts.moments);
-      const gitMoments = [
-        ...moments.includes("pre-commit") ? ["commit"] : [],
-        ...moments.includes("pre-push") ? ["push"] : []
-      ];
-      writeProjectConfig({ git_moments: gitMoments });
-      if (pluginActiveHere()) {
-        printInfo("The Verity plugin wires the hooks; recorded your selection in .verity/config.json:");
-        printInfo(`  Stop (analysis on every turn): ${moments.includes("stop") ? "on" : "off \u2014 the plugin still wires it; see below"}`);
-        printInfo(`  Pre-commit gate: ${gitMoments.includes("commit") ? "on" : "off"}`);
-        printInfo(`  Pre-push/PR gate: ${gitMoments.includes("push") ? "on" : "off"}`);
-        if (!moments.includes("stop")) {
-          printWarn("  Turning the Stop review off is not yet supported under the plugin \u2014 it stays on.");
-        }
-        return;
-      }
+      const moments = parseMoments(opts.moments);
       await applyMomentSelection(moments);
       const status = await checkAllVerityHooks();
       printInfo("Verity hooks reconciled in .claude/settings.json:");
@@ -12955,24 +12762,6 @@ function registerHooksCommands(program2) {
   });
   hooks.command("check").description("Check if Verity hooks are installed").action(async () => {
     const status = await checkAllVerityHooks();
-    if (pluginActiveHere()) {
-      const moments = readProjectConfig().git_moments;
-      printInfo("Wired by the Verity Claude Code plugin (not .claude/settings.json):");
-      printInfo("  Stop hook (verity analyze): installed");
-      printInfo("  Intent hook (verity intent capture): installed");
-      printInfo("  Baseline hook (verity baseline capture): installed");
-      printInfo(
-        `  Git-moment gate (verity guard): ${moments.length ? `installed [${moments.join(", ")}]` : "wired but gating nothing"}`
-      );
-      if (!moments.length) {
-        printInfo('  Enable it with "verity config git-moments commit,push".');
-      }
-      if (status.stop || status.intent || status.baseline || status.guard) {
-        printWarn("  Duplicate hooks also exist in .claude/settings.json. They stand down at run time,");
-        printWarn('  but remove them with "verity init --plugin-mode" so the wiring says what it does.');
-      }
-      return;
-    }
     printInfo(`Stop hook (verity analyze): ${status.stop ? "installed" : "not installed"}`);
     printInfo(`Intent hook (verity intent capture): ${status.intent ? "installed" : "not installed"}`);
     printInfo(`Baseline hook (verity baseline capture): ${status.baseline ? "installed" : "not installed"}`);
@@ -12998,7 +12787,7 @@ var import_node_crypto8 = require("node:crypto");
 
 // src/lib/conversation-buffer.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_fs7 = require("node:fs");
+var import_node_fs4 = require("node:fs");
 var import_node_child_process5 = require("node:child_process");
 var import_node_crypto = require("node:crypto");
 function stripImageReferences(text) {
@@ -13034,7 +12823,7 @@ async function appendToConversationBuffer(prompt, sessionId) {
 }
 async function readAndClearConversationBuffer(currentSessionId) {
   try {
-    if ((0, import_node_fs7.existsSync)(CONVERSATION_BUFFER_FILE)) {
+    if ((0, import_node_fs4.existsSync)(CONVERSATION_BUFFER_FILE)) {
       const entries = await readBufferEntries();
       let mine = entries;
       let others = [];
@@ -13058,7 +12847,7 @@ async function readAndClearConversationBuffer(currentSessionId) {
         };
       }
     }
-    if ((0, import_node_fs7.existsSync)(INTENT_FILE)) {
+    if ((0, import_node_fs4.existsSync)(INTENT_FILE)) {
       try {
         const content = await (0, import_promises5.readFile)(INTENT_FILE, "utf-8");
         await (0, import_promises5.unlink)(INTENT_FILE).catch(() => {
@@ -13113,301 +12902,65 @@ function getRecentCommitMessages() {
   }
 }
 
-// src/lib/analysis-mode.ts
-var DEBUG_PHRASES = [
-  "not working",
-  "doesn't work",
-  "doesn't work",
-  "does not work",
-  "isn't working",
-  "is not working",
-  "can't figure out",
-  "stack trace"
-];
-var DEBUG_WORDS = [
-  "fix",
-  "bug",
-  "broken",
-  "crash",
-  "crashing",
-  "failing",
-  "debug",
-  "debugging",
-  "investigate",
-  "troubleshoot",
-  "regression",
-  "wrong"
-];
-var DEBUG_PATTERN = new RegExp(
-  [
-    ...DEBUG_PHRASES.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")),
-    ...DEBUG_WORDS.map((w) => `\\b${w}\\b`)
-  ].join("|"),
-  "i"
-);
-var FALSE_POSITIVE_PATTERNS = [
-  /\b(?:add|create|implement|write|build|design|set\s*up)\b.{0,20}\berror\b/i,
-  /\berror\s+handling\b/i,
-  /\berror\s+boundar(?:y|ies)\b/i,
-  /\berror\s+(?:type|class|page|component|message|code|enum)\b/i,
-  /\b(?:add|create|implement|write|build)\b.{0,20}\b(?:fix|debug|issue)\b/i
-];
-function hasDebugIntent(prompt) {
-  if (!DEBUG_PATTERN.test(prompt)) return false;
-  for (const fp of FALSE_POSITIVE_PATTERNS) {
-    if (fp.test(prompt)) return false;
+// src/lib/context-identity.ts
+var import_node_crypto2 = require("node:crypto");
+var import_node_fs5 = require("node:fs");
+var import_node_os2 = require("node:os");
+var import_node_path6 = require("node:path");
+var SHARED_SENTINELS = /* @__PURE__ */ new Set([
+  "",
+  "-",
+  "n/a",
+  "na",
+  "none",
+  "null",
+  "undefined",
+  "unknown",
+  "anon",
+  "anonymous",
+  "default",
+  "_default"
+]);
+function isSharedSentinel(value) {
+  if (value == null) return true;
+  return SHARED_SENTINELS.has(value.trim().toLowerCase());
+}
+var ephemeral = /* @__PURE__ */ new Map();
+function ephemeralId(slot, width) {
+  let id = ephemeral.get(slot);
+  if (!id) {
+    id = `eph-${(0, import_node_crypto2.randomBytes)(Math.ceil(width / 2)).toString("hex").slice(0, width - 4)}`;
+    ephemeral.set(slot, id);
   }
-  return true;
+  return id;
 }
-var GIT_ONLY_PATTERN = /\b(commit|push|deploy|merge|rebase|tag|release|publish|ship)\b/i;
-var CODE_AUTHORING_PATTERN = /\b(add|create|implement|build|write|fix|update|change|refactor|modify|remove|delete|move|rename)\b.*\b(function|component|feature|endpoint|test|file|module|class|type|interface|hook|page|route|style|migration|code|bug|error|issue)\b/i;
-function isGitOnlyPrompt(prompt) {
-  if (!GIT_ONLY_PATTERN.test(prompt)) return false;
-  if (CODE_AUTHORING_PATTERN.test(prompt)) return false;
-  return true;
+function contextIdentity(input) {
+  const tokenUsable = !isSharedSentinel(input.token ?? null);
+  const sessionUsable = !isSharedSentinel(input.sessionId ?? null);
+  const userKey = tokenUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.token)).digest("hex").slice(0, 12) : ephemeralId("user", 12);
+  const sessionKey2 = sessionUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.sessionId)).digest("hex").slice(0, 16) : ephemeralId("session", 16);
+  let treeKey = "no-tree";
+  const rawTree = input.treeRoot;
+  if (rawTree && !isSharedSentinel(rawTree)) {
+    let resolved = rawTree;
+    try {
+      resolved = import_node_fs5.realpathSync.native(rawTree);
+    } catch {
+    }
+    treeKey = (0, import_node_crypto2.createHash)("sha256").update(resolved).digest("hex").slice(0, 12);
+  }
+  return {
+    userKey,
+    treeKey,
+    sessionKey: sessionKey2,
+    userKeySource: tokenUsable ? "token" : "ephemeral",
+    sessionKeySource: sessionUsable ? "session_id" : "ephemeral",
+    ephemeral: !tokenUsable || !sessionUsable
+  };
 }
-function reconcileAnalysisMode(predictedMode, signals) {
-  const mode2 = resolveAnalysisMode(predictedMode, signals);
-  if (mode2 !== "skip") return mode2;
-  const windowIsOrphaned = signals.actionSummary?.transcript_windowed === "orphaned";
-  if (windowIsOrphaned && !signals.sessionAuthoredCode) return "standard";
-  return mode2;
-}
-function resolveAnalysisMode(predictedMode, signals) {
-  if (!predictedMode || !isValidMode(predictedMode)) {
-    return detectAnalysisMode(
-      signals.noFilesChanged,
-      signals.assistantResponse,
-      signals.conversationPrompts,
-      signals.actionSummary,
-      signals.sessionAuthoredCode
-    );
-  }
-  const agentAuthoredCode = !!(signals.actionSummary && (signals.actionSummary.files_edited.length > 0 || signals.actionSummary.files_created.length > 0)) || !!signals.sessionAuthoredCode;
-  const agentInvestigated = didAgentInvestigate(signals.actionSummary);
-  switch (predictedMode) {
-    case "skip":
-      if (agentAuthoredCode) return "standard";
-      return "skip";
-    case "plan":
-      if (agentAuthoredCode) return "standard";
-      return "plan";
-    case "debug":
-      return "debug";
-    case "standard":
-      if (!!signals.actionSummary && !agentAuthoredCode && !!signals.assistantResponse) {
-        return agentInvestigated ? "plan" : "skip";
-      }
-      return "standard";
-  }
-}
-function didAgentInvestigate(summary) {
-  if (!summary) return false;
-  return summary.files_read.length > 0 || summary.searches > 0 || summary.commands.length > 0 || summary.subagents > 0 || summary.web_fetches > 0;
-}
-function isValidMode(mode2) {
-  return mode2 === "standard" || mode2 === "plan" || mode2 === "debug" || mode2 === "skip";
-}
-function detectAnalysisMode(noFilesChanged, assistantResponse, conversationPrompts, actionSummary, sessionAuthoredCode) {
-  const agentAuthoredCode = !!(actionSummary && (actionSummary.files_edited.length > 0 || actionSummary.files_created.length > 0)) || !!sessionAuthoredCode;
-  if (conversationPrompts.length > 0 && conversationPrompts.every(isGitOnlyPrompt)) {
-    if (!agentAuthoredCode) return "skip";
-  }
-  if (noFilesChanged && !!assistantResponse && !agentAuthoredCode) {
-    return "plan";
-  }
-  if (!!actionSummary && !agentAuthoredCode && !!assistantResponse) {
-    return didAgentInvestigate(actionSummary) ? "plan" : "skip";
-  }
-  for (const prompt of conversationPrompts) {
-    if (hasDebugIntent(prompt)) {
-      return "debug";
-    }
-  }
-  return "standard";
-}
-var FILE_MUTATE_RE = /(?:^|[\s|&;(`])(?:sed\s+-i|perl\s+-i|awk\b|tee\b|dd\b|cp\b|mv\b|ln\b|install\b|touch\b|patch\b|git\s+(?:apply|am)\b|cargo\s+build|go\s+generate|make\b|--write\b|--fix\b|--in-place\b)|>>?(?![&>])/i;
-var GIT_PLUMBING_RE = /^\s*git\s+(?:merge|rebase|stash|cherry-pick|revert|pull|fetch|checkout|switch|reset|restore|clean)\b/i;
-var READ_ONLY_RE = /^\s*(?:git\s+(?:status|diff|log|show|branch|remote|config|rev-parse|ls-files|blame|describe)|ls|cat|head|tail|less|grep|rg|find|pwd|echo|printf|wc|which|type|tree|stat|file|env|printenv|date|whoami)\b/i;
-var CHAIN_RE = /&&|\||;|\$\(|\x60/;
-function isNonAuthoringCommand(cmd) {
-  if (typeof cmd !== "string" || cmd.trim().length === 0) return false;
-  if (FILE_MUTATE_RE.test(cmd)) return false;
-  if (CHAIN_RE.test(cmd)) return false;
-  return GIT_PLUMBING_RE.test(cmd) || READ_ONLY_RE.test(cmd);
-}
-function hasNonEditAuthorship(actionSummary, sessionAuthoredCode) {
-  if (!actionSummary) return sessionAuthoredCode;
-  if ((actionSummary.subagents ?? 0) > 0) return true;
-  if (Object.keys(actionSummary.tool_counts ?? {}).some((t) => t.startsWith("mcp__"))) return true;
-  const commands = actionSummary.commands ?? [];
-  if (commands.some((c) => FILE_MUTATE_RE.test(c))) return true;
-  if (sessionAuthoredCode) {
-    const allSafe = commands.length > 0 && commands.every(isNonAuthoringCommand);
-    if (!allSafe) return true;
-  }
-  return false;
-}
-function scopeToAuthored(files, actionSummary) {
-  if (!actionSummary) return { files, signal: "no-transcript" };
-  const touched = [...actionSummary.files_edited ?? [], ...actionSummary.files_created ?? []];
-  if (touched.length === 0) return { files: [], signal: "none-authored" };
-  return { files: narrowToAgentAuthored(files, actionSummary), signal: "authored" };
-}
-function chooseReviewScope(input) {
-  if (input.narrowingIsTrustworthy) return input.scopedFiles;
-  if (input.recoveredScope.length > 0) return input.recoveredScope;
-  return input.authorshipWasObservable ? [] : input.allForReview;
-}
-function narrowToAgentAuthored(files, actionSummary) {
-  if (!actionSummary) return files;
-  const touched = [
-    ...actionSummary.files_edited,
-    ...actionSummary.files_created
-  ];
-  if (touched.length === 0) return files;
-  return files.filter((f) => {
-    const suffix = "/" + f;
-    return touched.some((t) => t === f || t.endsWith(suffix));
-  });
-}
-
-// src/lib/skip-detection.ts
-function isBareAckPrompt(prompt) {
-  if (typeof prompt !== "string") return false;
-  const trimmed = prompt.trim();
-  if (trimmed.length === 0) return false;
-  if (trimmed.length > 20) return false;
-  const bareAckPattern = /^(\d{1,2}|y|n|yes|no|yep|nope|ok(ay)?|sure|skip|cancel|stop|done|noted|got\s+it|sounds\s+good|thanks|thank\s+you|thx)[.!?]*$/i;
-  return bareAckPattern.test(trimmed);
-}
-function isContinuationPrompt(prompt) {
-  if (typeof prompt !== "string") return false;
-  const trimmed = prompt.trim();
-  if (trimmed.length === 0) return false;
-  if (trimmed.length > 24) return false;
-  const continuation = /^(let['’]?s\s+(go|do\s+it|start|continue)|go|go\s+ahead|go\s+on|proceed|continue|carry\s+on|keep\s+going|do\s+it|make\s+it\s+so|next|start|begin|ship\s+it|yes\s+please|please\s+continue|perfect|great|nice|excellent|agreed)[.!]*$/i;
-  return continuation.test(trimmed) || isBareAckPrompt(trimmed);
-}
-function isSlashCommand(prompt) {
-  if (typeof prompt !== "string") return false;
-  return /^\s*\/[A-Za-z][\w-]*(\s|$)/.test(prompt);
-}
-function resolveGoalPrompt(prompts) {
-  if (prompts.length === 0) return null;
-  const latest = prompts[prompts.length - 1];
-  if (!isContinuationPrompt(latest.prompt)) return { entry: latest, turnsBack: 0 };
-  for (let i = prompts.length - 2; i >= 0; i--) {
-    if (!isContinuationPrompt(prompts[i].prompt)) {
-      return { entry: prompts[i], turnsBack: prompts.length - 1 - i };
-    }
-  }
-  return { entry: latest, turnsBack: 0 };
-}
-function isReflectionQuestion(response) {
-  if (!response || typeof response !== "string") return false;
-  const markers = [
-    /reflection\s+for\s+future\s+agents/i,
-    /what(?:'s|\s+is)\s+one\s+thing\s+you\s+learned/i,
-    /say\s+['"]?skip['"]?\s+to\s+skip/i,
-    /quick\s+reflection\s+question/i,
-    // Post-flip (VRT-21): the agent drafts the reflection itself and, when
-    // interactive, asks the user to confirm/correct before recording. That
-    // turn authors no code either, so it's still a reflection turn.
-    /reflection\s+draft/i,
-    /confirm,?\s+correct,?\s+or\s+add/i
-  ];
-  return markers.some((m) => m.test(response));
-}
-function isMetaTaskLabel(label2) {
-  if (label2 === null || label2 === void 0) return false;
-  if (typeof label2 !== "string") return false;
-  const trimmed = label2.trim();
-  if (trimmed.length === 0) return true;
-  const metaPatterns = [
-    /^verity\s+[\w-]+\s+response$/i,
-    // "Verity reflect response"
-    /^simple user response$/i,
-    /^verity\s+command$/i,
-    // "Verity command"
-    /^user\s+(question|reply|response|ack)$/i
-  ];
-  return metaPatterns.some((p) => p.test(trimmed));
-}
-function shouldSkipForBareAck(input) {
-  if (!isBareAckPrompt(input.prompt)) return false;
-  if (input.turnAuthoredCode) return false;
-  return input.canSeeTurnAuthorship;
-}
-function isCommandOnlyTurn(input) {
-  if (!input.authorshipIsObservable) return false;
-  if (input.userCommandsTruncated) return false;
-  const commands = input.userCommands ?? [];
-  if (commands.length === 0) return false;
-  if (input.agentAuthoredFiles > 0) return false;
-  if (input.agentToolCalls > 0) return false;
-  return commands.every(isNonAuthoringCommand);
-}
-
-// src/lib/context-identity.ts
-var import_node_crypto2 = require("node:crypto");
-var import_node_fs8 = require("node:fs");
-var import_node_os2 = require("node:os");
-var import_node_path6 = require("node:path");
-var SHARED_SENTINELS = /* @__PURE__ */ new Set([
-  "",
-  "-",
-  "n/a",
-  "na",
-  "none",
-  "null",
-  "undefined",
-  "unknown",
-  "anon",
-  "anonymous",
-  "default",
-  "_default"
-]);
-function isSharedSentinel(value) {
-  if (value == null) return true;
-  return SHARED_SENTINELS.has(value.trim().toLowerCase());
-}
-var ephemeral = /* @__PURE__ */ new Map();
-function ephemeralId(slot, width) {
-  let id = ephemeral.get(slot);
-  if (!id) {
-    id = `eph-${(0, import_node_crypto2.randomBytes)(Math.ceil(width / 2)).toString("hex").slice(0, width - 4)}`;
-    ephemeral.set(slot, id);
-  }
-  return id;
-}
-function contextIdentity(input) {
-  const tokenUsable = !isSharedSentinel(input.token ?? null);
-  const sessionUsable = !isSharedSentinel(input.sessionId ?? null);
-  const userKey = tokenUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.token)).digest("hex").slice(0, 12) : ephemeralId("user", 12);
-  const sessionKey2 = sessionUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.sessionId)).digest("hex").slice(0, 16) : ephemeralId("session", 16);
-  let treeKey = "no-tree";
-  const rawTree = input.treeRoot;
-  if (rawTree && !isSharedSentinel(rawTree)) {
-    let resolved = rawTree;
-    try {
-      resolved = import_node_fs8.realpathSync.native(rawTree);
-    } catch {
-    }
-    treeKey = (0, import_node_crypto2.createHash)("sha256").update(resolved).digest("hex").slice(0, 12);
-  }
-  return {
-    userKey,
-    treeKey,
-    sessionKey: sessionKey2,
-    userKeySource: tokenUsable ? "token" : "ephemeral",
-    sessionKeySource: sessionUsable ? "session_id" : "ephemeral",
-    ephemeral: !tokenUsable || !sessionUsable
-  };
-}
-function verityHome() {
-  const override = process.env.VERITY_HOME;
-  return override && override.trim() ? (0, import_node_path6.resolve)(override) : (0, import_node_path6.join)((0, import_node_os2.homedir)(), ".verity");
+function verityHome() {
+  const override = process.env.VERITY_HOME;
+  return override && override.trim() ? (0, import_node_path6.resolve)(override) : (0, import_node_path6.join)((0, import_node_os2.homedir)(), ".verity");
 }
 function dossierDir(identity) {
   return (0, import_node_path6.join)(verityHome(), "sessions", identity.userKey, identity.treeKey, identity.sessionKey);
@@ -13428,7 +12981,7 @@ function sessionScopeKey(token, sessionId) {
 
 // src/lib/task-context-buffer.ts
 var import_promises6 = require("node:fs/promises");
-var import_node_fs9 = require("node:fs");
+var import_node_fs6 = require("node:fs");
 var import_node_path7 = require("node:path");
 var TASK_CONTEXT_DIR = `${VERITY_DIR}/.task-context`;
 var MAX_BUFFER_BYTES = 500 * 1024;
@@ -13468,7 +13021,7 @@ async function appendResponseToTaskBuffer(taskId, assistantResponse, actionSumma
 }
 async function readTaskContextBuffer(taskId) {
   const filePath = bufferPath(taskId);
-  if (!(0, import_node_fs9.existsSync)(filePath)) return null;
+  if (!(0, import_node_fs6.existsSync)(filePath)) return null;
   try {
     const content = await (0, import_promises6.readFile)(filePath, "utf-8");
     if (!content.trim()) return null;
@@ -13502,7 +13055,7 @@ async function readTaskContextBuffer(taskId) {
 }
 async function cleanupTaskContextBuffers() {
   try {
-    if (!(0, import_node_fs9.existsSync)(TASK_CONTEXT_DIR)) return;
+    if (!(0, import_node_fs6.existsSync)(TASK_CONTEXT_DIR)) return;
     const files = await (0, import_promises6.readdir)(TASK_CONTEXT_DIR);
     const cutoffMs = Date.now() - RETENTION_DAYS * 24 * 60 * 60 * 1e3;
     for (const file of files) {
@@ -13527,7 +13080,7 @@ async function appendEntry(taskId, entry) {
   try {
     await (0, import_promises6.mkdir)(TASK_CONTEXT_DIR, { recursive: true });
     const filePath = bufferPath(taskId);
-    if ((0, import_node_fs9.existsSync)(filePath)) {
+    if ((0, import_node_fs6.existsSync)(filePath)) {
       const stats = await (0, import_promises6.stat)(filePath);
       if (stats.size >= MAX_BUFFER_BYTES) {
         const content = await (0, import_promises6.readFile)(filePath, "utf-8");
@@ -13538,7 +13091,7 @@ async function appendEntry(taskId, entry) {
       }
     }
     const line = JSON.stringify(entry) + "\n";
-    const existing = (0, import_node_fs9.existsSync)(filePath) ? await (0, import_promises6.readFile)(filePath, "utf-8") : "";
+    const existing = (0, import_node_fs6.existsSync)(filePath) ? await (0, import_promises6.readFile)(filePath, "utf-8") : "";
     await (0, import_promises6.writeFile)(filePath, existing + line);
   } catch {
   }
@@ -13546,7 +13099,7 @@ async function appendEntry(taskId, entry) {
 
 // src/lib/memory-retrieval.ts
 var import_promises7 = require("node:fs/promises");
-var import_node_fs10 = require("node:fs");
+var import_node_fs7 = require("node:fs");
 var import_node_path8 = require("node:path");
 var memoryDir = () => projectPath(`${VERITY_DIR}/memory`);
 var DOMAINS = ["decisions", "quality", "security", "intent", "gotchas", "patterns", "domain", "integrations"];
@@ -13640,13 +13193,13 @@ function parseFrontmatter(content) {
   return { fm, body: match[2].trim() };
 }
 async function retrieveForInjection(promptText, taskFiles = [], budgetTokens = DEFAULT_BUDGET_TOKENS) {
-  if (!(0, import_node_fs10.existsSync)(memoryDir())) return null;
+  if (!(0, import_node_fs7.existsSync)(memoryDir())) return null;
   const budget = Math.min(budgetTokens, MAX_BUDGET_TOKENS);
   const promptTokens = tokenize(promptText);
   const nodes = [];
   for (const domain of DOMAINS) {
     const domainDir = (0, import_node_path8.join)(memoryDir(), domain);
-    if (!(0, import_node_fs10.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs7.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises7.readdir)(domainDir);
       for (const file of files) {
@@ -13711,12 +13264,12 @@ async function retrieveForInjection(promptText, taskFiles = [], budgetTokens = D
 
 // src/lib/memory-sync.ts
 var import_promises8 = require("node:fs/promises");
-var import_node_fs12 = require("node:fs");
+var import_node_fs9 = require("node:fs");
 var import_node_path10 = require("node:path");
 var import_node_crypto3 = require("node:crypto");
 
 // src/lib/safe-path.ts
-var import_node_fs11 = require("node:fs");
+var import_node_fs8 = require("node:fs");
 var import_node_path9 = require("node:path");
 function resolveInside(baseDir, candidate) {
   if (typeof candidate !== "string" || candidate.length === 0) return null;
@@ -13726,16 +13279,16 @@ function resolveInside(baseDir, candidate) {
   const baseSep = baseAbs.endsWith(import_node_path9.sep) ? baseAbs : baseAbs + import_node_path9.sep;
   if (full !== baseAbs && !full.startsWith(baseSep)) return null;
   try {
-    if ((0, import_node_fs11.existsSync)(baseAbs)) {
-      const realBase = (0, import_node_fs11.realpathSync)(baseAbs);
+    if ((0, import_node_fs8.existsSync)(baseAbs)) {
+      const realBase = (0, import_node_fs8.realpathSync)(baseAbs);
       const realBaseSep = realBase.endsWith(import_node_path9.sep) ? realBase : realBase + import_node_path9.sep;
       let probe = full;
-      while (!(0, import_node_fs11.existsSync)(probe)) {
+      while (!(0, import_node_fs8.existsSync)(probe)) {
         const parent = (0, import_node_path9.dirname)(probe);
         if (parent === probe) break;
         probe = parent;
       }
-      const realProbe = (0, import_node_fs11.realpathSync)(probe);
+      const realProbe = (0, import_node_fs8.realpathSync)(probe);
       if (realProbe !== realBase && !realProbe.startsWith(realBaseSep)) return null;
     }
   } catch {
@@ -13814,24 +13367,24 @@ async function ensureMemoryDir() {
   for (const domain of DOMAINS2) {
     await (0, import_promises8.mkdir)((0, import_node_path10.join)(memoryDir2(), domain), { recursive: true });
   }
-  if (!(0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "SCHEMA.md"))) {
+  if (!(0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "SCHEMA.md"))) {
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "SCHEMA.md"), SCHEMA_TEMPLATE);
   }
-  if (!(0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "index.md"))) {
+  if (!(0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "index.md"))) {
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "index.md"), "# Project Memory Index\n\nNo nodes yet. Run an analysis to start building the knowledge graph.\n");
   }
-  if (!(0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md"))) {
+  if (!(0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md"))) {
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), "# Memory Log\n\n");
   }
 }
 async function buildManifest() {
-  if (!(0, import_node_fs12.existsSync)(memoryDir2())) {
+  if (!(0, import_node_fs9.existsSync)(memoryDir2())) {
     return { schema_version: 1, nodes: [], index_hash: null, log_length: 0 };
   }
   const nodes = [];
   for (const domain of DOMAINS2) {
     const domainDir = (0, import_node_path10.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs12.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs9.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises8.readdir)(domainDir);
       for (const file of files) {
@@ -13867,10 +13420,10 @@ function hashContent(content) {
 }
 async function readOnDiskNodes() {
   const out = /* @__PURE__ */ new Map();
-  if (!(0, import_node_fs12.existsSync)(memoryDir2())) return out;
+  if (!(0, import_node_fs9.existsSync)(memoryDir2())) return out;
   for (const domain of DOMAINS2) {
     const domainDir = (0, import_node_path10.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs12.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs9.existsSync)(domainDir)) continue;
     try {
       for (const file of await (0, import_promises8.readdir)(domainDir)) {
         if (!file.endsWith(".md")) continue;
@@ -13922,7 +13475,7 @@ async function computeEditedNodeUploads() {
   for (const [path, prevHash] of prev) {
     if (prevHash == null) continue;
     const full = (0, import_node_path10.join)(memoryDir2(), path);
-    if (!(0, import_node_fs12.existsSync)(full)) continue;
+    if (!(0, import_node_fs9.existsSync)(full)) continue;
     let content;
     try {
       content = await (0, import_promises8.readFile)(full, "utf-8");
@@ -13958,7 +13511,7 @@ async function applyMemoryWrites(writes, opts = {}) {
   const logLines = [`- ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 16)} \u2014 Applied ${count} write(s) from server`];
   for (const n of notes) logLines.push(`  - ${n}`);
   try {
-    const existing = (0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md")) ? await (0, import_promises8.readFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), "utf-8") : "# Memory Log\n\n";
+    const existing = (0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md")) ? await (0, import_promises8.readFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), "utf-8") : "# Memory Log\n\n";
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), existing + logLines.join("\n") + "\n");
   } catch {
   }
@@ -13979,7 +13532,7 @@ async function applyOneWrite(write, treePaths) {
       notes.push(`${write.path}: dropped unmatched file_globs [${grounded.dropped.join(", ")}]`);
     }
   }
-  if ((0, import_node_fs12.existsSync)(fullPath)) {
+  if ((0, import_node_fs9.existsSync)(fullPath)) {
     let existing = "";
     try {
       existing = await (0, import_promises8.readFile)(fullPath, "utf-8");
@@ -14033,7 +13586,7 @@ async function regenerateIndex() {
   let totalNodes = 0;
   for (const domain of DOMAINS2.filter((d) => d !== "_archive")) {
     const domainDir = (0, import_node_path10.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs12.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs9.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises8.readdir)(domainDir);
       const mdFiles = files.filter((f) => f.endsWith(".md"));
@@ -14303,7 +13856,7 @@ function hasLegacyMemoryBlock(text) {
 async function ensureClaudeMdPointer(cwd = repoRoot()) {
   const claudeMdPath = (0, import_node_path10.join)(cwd, "CLAUDE.md");
   let existing = "";
-  if ((0, import_node_fs12.existsSync)(claudeMdPath)) {
+  if ((0, import_node_fs9.existsSync)(claudeMdPath)) {
     existing = await (0, import_promises8.readFile)(claudeMdPath, "utf-8");
   }
   let startTag = CLAUDE_MD_START;
@@ -14439,10 +13992,237 @@ Body content (\u22648KB). Use [[node-id]] wikilinks for cross-references.
 `;
 
 // src/lib/dossier-session.ts
-var import_node_fs17 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_node_crypto7 = require("node:crypto");
 var import_node_path13 = require("node:path");
 
+// src/lib/analysis-mode.ts
+var DEBUG_PHRASES = [
+  "not working",
+  "doesn't work",
+  "doesn't work",
+  "does not work",
+  "isn't working",
+  "is not working",
+  "can't figure out",
+  "stack trace"
+];
+var DEBUG_WORDS = [
+  "fix",
+  "bug",
+  "broken",
+  "crash",
+  "crashing",
+  "failing",
+  "debug",
+  "debugging",
+  "investigate",
+  "troubleshoot",
+  "regression",
+  "wrong"
+];
+var DEBUG_PATTERN = new RegExp(
+  [
+    ...DEBUG_PHRASES.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")),
+    ...DEBUG_WORDS.map((w) => `\\b${w}\\b`)
+  ].join("|"),
+  "i"
+);
+var FALSE_POSITIVE_PATTERNS = [
+  /\b(?:add|create|implement|write|build|design|set\s*up)\b.{0,20}\berror\b/i,
+  /\berror\s+handling\b/i,
+  /\berror\s+boundar(?:y|ies)\b/i,
+  /\berror\s+(?:type|class|page|component|message|code|enum)\b/i,
+  /\b(?:add|create|implement|write|build)\b.{0,20}\b(?:fix|debug|issue)\b/i
+];
+function hasDebugIntent(prompt) {
+  if (!DEBUG_PATTERN.test(prompt)) return false;
+  for (const fp of FALSE_POSITIVE_PATTERNS) {
+    if (fp.test(prompt)) return false;
+  }
+  return true;
+}
+var GIT_ONLY_PATTERN = /\b(commit|push|deploy|merge|rebase|tag|release|publish|ship)\b/i;
+var CODE_AUTHORING_PATTERN = /\b(add|create|implement|build|write|fix|update|change|refactor|modify|remove|delete|move|rename)\b.*\b(function|component|feature|endpoint|test|file|module|class|type|interface|hook|page|route|style|migration|code|bug|error|issue)\b/i;
+function isGitOnlyPrompt(prompt) {
+  if (!GIT_ONLY_PATTERN.test(prompt)) return false;
+  if (CODE_AUTHORING_PATTERN.test(prompt)) return false;
+  return true;
+}
+function reconcileAnalysisMode(predictedMode, signals) {
+  const mode2 = resolveAnalysisMode(predictedMode, signals);
+  if (mode2 !== "skip") return mode2;
+  const windowIsOrphaned = signals.actionSummary?.transcript_windowed === "orphaned";
+  if (windowIsOrphaned && !signals.sessionAuthoredCode) return "standard";
+  return mode2;
+}
+function resolveAnalysisMode(predictedMode, signals) {
+  if (!predictedMode || !isValidMode(predictedMode)) {
+    return detectAnalysisMode(
+      signals.noFilesChanged,
+      signals.assistantResponse,
+      signals.conversationPrompts,
+      signals.actionSummary,
+      signals.sessionAuthoredCode
+    );
+  }
+  const agentAuthoredCode = !!(signals.actionSummary && (signals.actionSummary.files_edited.length > 0 || signals.actionSummary.files_created.length > 0)) || !!signals.sessionAuthoredCode;
+  const agentInvestigated = didAgentInvestigate(signals.actionSummary);
+  switch (predictedMode) {
+    case "skip":
+      if (agentAuthoredCode) return "standard";
+      return "skip";
+    case "plan":
+      if (agentAuthoredCode) return "standard";
+      return "plan";
+    case "debug":
+      return "debug";
+    case "standard":
+      if (!!signals.actionSummary && !agentAuthoredCode && !!signals.assistantResponse) {
+        return agentInvestigated ? "plan" : "skip";
+      }
+      return "standard";
+  }
+}
+function didAgentInvestigate(summary) {
+  if (!summary) return false;
+  return summary.files_read.length > 0 || summary.searches > 0 || summary.commands.length > 0 || summary.subagents > 0 || summary.web_fetches > 0;
+}
+function isValidMode(mode2) {
+  return mode2 === "standard" || mode2 === "plan" || mode2 === "debug" || mode2 === "skip";
+}
+function detectAnalysisMode(noFilesChanged, assistantResponse, conversationPrompts, actionSummary, sessionAuthoredCode) {
+  const agentAuthoredCode = !!(actionSummary && (actionSummary.files_edited.length > 0 || actionSummary.files_created.length > 0)) || !!sessionAuthoredCode;
+  if (conversationPrompts.length > 0 && conversationPrompts.every(isGitOnlyPrompt)) {
+    if (!agentAuthoredCode) return "skip";
+  }
+  if (noFilesChanged && !!assistantResponse && !agentAuthoredCode) {
+    return "plan";
+  }
+  if (!!actionSummary && !agentAuthoredCode && !!assistantResponse) {
+    return didAgentInvestigate(actionSummary) ? "plan" : "skip";
+  }
+  for (const prompt of conversationPrompts) {
+    if (hasDebugIntent(prompt)) {
+      return "debug";
+    }
+  }
+  return "standard";
+}
+var FILE_MUTATE_RE = /(?:^|[\s|&;(`])(?:sed\s+-i|perl\s+-i|awk\b|tee\b|dd\b|cp\b|mv\b|ln\b|install\b|touch\b|patch\b|git\s+(?:apply|am)\b|cargo\s+build|go\s+generate|make\b|--write\b|--fix\b|--in-place\b)|>>?(?![&>])/i;
+var GIT_PLUMBING_RE = /^\s*git\s+(?:merge|rebase|stash|cherry-pick|revert|pull|fetch|checkout|switch|reset|restore|clean)\b/i;
+var READ_ONLY_RE = /^\s*(?:git\s+(?:status|diff|log|show|branch|remote|config|rev-parse|ls-files|blame|describe)|ls|cat|head|tail|less|grep|rg|find|pwd|echo|printf|wc|which|type|tree|stat|file|env|printenv|date|whoami)\b/i;
+var CHAIN_RE = /&&|\||;|\$\(|\x60/;
+function isNonAuthoringCommand(cmd) {
+  if (typeof cmd !== "string" || cmd.trim().length === 0) return false;
+  if (FILE_MUTATE_RE.test(cmd)) return false;
+  if (CHAIN_RE.test(cmd)) return false;
+  return GIT_PLUMBING_RE.test(cmd) || READ_ONLY_RE.test(cmd);
+}
+function hasNonEditAuthorship(actionSummary, sessionAuthoredCode) {
+  if (!actionSummary) return sessionAuthoredCode;
+  if ((actionSummary.subagents ?? 0) > 0) return true;
+  if (Object.keys(actionSummary.tool_counts ?? {}).some((t) => t.startsWith("mcp__"))) return true;
+  const commands = actionSummary.commands ?? [];
+  if (commands.some((c) => FILE_MUTATE_RE.test(c))) return true;
+  if (sessionAuthoredCode) {
+    const allSafe = commands.length > 0 && commands.every(isNonAuthoringCommand);
+    if (!allSafe) return true;
+  }
+  return false;
+}
+function scopeToAuthored(files, actionSummary) {
+  if (!actionSummary) return { files, signal: "no-transcript" };
+  const touched = [...actionSummary.files_edited ?? [], ...actionSummary.files_created ?? []];
+  if (touched.length === 0) return { files: [], signal: "none-authored" };
+  return { files: narrowToAgentAuthored(files, actionSummary), signal: "authored" };
+}
+function narrowToAgentAuthored(files, actionSummary) {
+  if (!actionSummary) return files;
+  const touched = [
+    ...actionSummary.files_edited,
+    ...actionSummary.files_created
+  ];
+  if (touched.length === 0) return files;
+  return files.filter((f) => {
+    const suffix = "/" + f;
+    return touched.some((t) => t === f || t.endsWith(suffix));
+  });
+}
+
+// src/lib/skip-detection.ts
+function isBareAckPrompt(prompt) {
+  if (typeof prompt !== "string") return false;
+  const trimmed = prompt.trim();
+  if (trimmed.length === 0) return false;
+  if (trimmed.length > 20) return false;
+  const bareAckPattern = /^(\d{1,2}|y|n|yes|no|yep|nope|ok(ay)?|sure|skip|cancel|stop|done|noted|got\s+it|sounds\s+good|thanks|thank\s+you|thx)[.!?]*$/i;
+  return bareAckPattern.test(trimmed);
+}
+function isContinuationPrompt(prompt) {
+  if (typeof prompt !== "string") return false;
+  const trimmed = prompt.trim();
+  if (trimmed.length === 0) return false;
+  if (trimmed.length > 24) return false;
+  const continuation = /^(let['’]?s\s+(go|do\s+it|start|continue)|go|go\s+ahead|go\s+on|proceed|continue|carry\s+on|keep\s+going|do\s+it|make\s+it\s+so|next|start|begin|ship\s+it|yes\s+please|please\s+continue|perfect|great|nice|excellent|agreed)[.!]*$/i;
+  return continuation.test(trimmed) || isBareAckPrompt(trimmed);
+}
+function resolveGoalPrompt(prompts) {
+  if (prompts.length === 0) return null;
+  const latest = prompts[prompts.length - 1];
+  if (!isContinuationPrompt(latest.prompt)) return { entry: latest, turnsBack: 0 };
+  for (let i = prompts.length - 2; i >= 0; i--) {
+    if (!isContinuationPrompt(prompts[i].prompt)) {
+      return { entry: prompts[i], turnsBack: prompts.length - 1 - i };
+    }
+  }
+  return { entry: latest, turnsBack: 0 };
+}
+function isReflectionQuestion(response) {
+  if (!response || typeof response !== "string") return false;
+  const markers = [
+    /reflection\s+for\s+future\s+agents/i,
+    /what(?:'s|\s+is)\s+one\s+thing\s+you\s+learned/i,
+    /say\s+['"]?skip['"]?\s+to\s+skip/i,
+    /quick\s+reflection\s+question/i,
+    // Post-flip (VRT-21): the agent drafts the reflection itself and, when
+    // interactive, asks the user to confirm/correct before recording. That
+    // turn authors no code either, so it's still a reflection turn.
+    /reflection\s+draft/i,
+    /confirm,?\s+correct,?\s+or\s+add/i
+  ];
+  return markers.some((m) => m.test(response));
+}
+function isMetaTaskLabel(label2) {
+  if (label2 === null || label2 === void 0) return false;
+  if (typeof label2 !== "string") return false;
+  const trimmed = label2.trim();
+  if (trimmed.length === 0) return true;
+  const metaPatterns = [
+    /^verity\s+[\w-]+\s+response$/i,
+    // "Verity reflect response"
+    /^simple user response$/i,
+    /^verity\s+command$/i,
+    // "Verity command"
+    /^user\s+(question|reply|response|ack)$/i
+  ];
+  return metaPatterns.some((p) => p.test(trimmed));
+}
+function shouldSkipForBareAck(input) {
+  if (!isBareAckPrompt(input.prompt)) return false;
+  if (input.turnAuthoredCode) return false;
+  return input.canSeeTurnAuthorship;
+}
+function isCommandOnlyTurn(input) {
+  if (!input.authorshipIsObservable) return false;
+  if (input.userCommandsTruncated) return false;
+  const commands = input.userCommands ?? [];
+  if (commands.length === 0) return false;
+  if (input.agentAuthoredFiles > 0) return false;
+  if (input.agentToolCalls > 0) return false;
+  return commands.every(isNonAuthoringCommand);
+}
+
 // src/lib/pending-repeat.ts
 var STOP = /* @__PURE__ */ new Set([
   "the",
@@ -14546,7 +14326,7 @@ function statementAnchorKey(file, patternId) {
 
 // src/lib/dossier/log.ts
 var import_node_crypto4 = require("node:crypto");
-var import_node_fs13 = require("node:fs");
+var import_node_fs10 = require("node:fs");
 var import_node_path11 = require("node:path");
 var CRC_TABLE = (() => {
   const t = new Int32Array(256);
@@ -14566,7 +14346,7 @@ function crc32(s) {
 function openDossier(identity) {
   try {
     const dir = dossierDir(identity);
-    (0, import_node_fs13.mkdirSync)(dir, { recursive: true, mode: 448 });
+    (0, import_node_fs10.mkdirSync)(dir, { recursive: true, mode: 448 });
     return {
       dir,
       identity,
@@ -14634,7 +14414,7 @@ function appendEvent(d, ev) {
       at: ev.at ?? (/* @__PURE__ */ new Date()).toISOString(),
       ...ev
     });
-    (0, import_node_fs13.appendFileSync)(d.eventsPath, line, { mode: 384 });
+    (0, import_node_fs10.appendFileSync)(d.eventsPath, line, { mode: 384 });
     return true;
   } catch {
     return false;
@@ -14642,14 +14422,14 @@ function appendEvent(d, ev) {
 }
 function rotateIfNeeded2(d) {
   try {
-    if (!(0, import_node_fs13.existsSync)(d.eventsPath)) return;
-    if ((0, import_node_fs13.statSync)(d.eventsPath).size < ROTATE_BYTES) return;
-    (0, import_node_fs13.mkdirSync)(d.rotatedDir, { recursive: true, mode: 448 });
-    (0, import_node_fs13.renameSync)(d.eventsPath, (0, import_node_path11.join)(d.rotatedDir, `events.${Date.now()}.jsonl`));
-    const kept = (0, import_node_fs13.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
+    if (!(0, import_node_fs10.existsSync)(d.eventsPath)) return;
+    if ((0, import_node_fs10.statSync)(d.eventsPath).size < ROTATE_BYTES) return;
+    (0, import_node_fs10.mkdirSync)(d.rotatedDir, { recursive: true, mode: 448 });
+    (0, import_node_fs10.renameSync)(d.eventsPath, (0, import_node_path11.join)(d.rotatedDir, `events.${Date.now()}.jsonl`));
+    const kept = (0, import_node_fs10.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
     for (const stale of kept.slice(0, Math.max(0, kept.length - ROTATE_KEEP))) {
       try {
-        (0, import_node_fs13.renameSync)((0, import_node_path11.join)(d.rotatedDir, stale), (0, import_node_path11.join)(d.rotatedDir, `${stale}.pruned`));
+        (0, import_node_fs10.renameSync)((0, import_node_path11.join)(d.rotatedDir, stale), (0, import_node_path11.join)(d.rotatedDir, `${stale}.pruned`));
       } catch {
       }
     }
@@ -14659,7 +14439,7 @@ function rotateIfNeeded2(d) {
 
 // src/lib/dossier/fold-dossier.ts
 var import_node_crypto5 = require("node:crypto");
-var import_node_fs14 = require("node:fs");
+var import_node_fs11 = require("node:fs");
 var import_node_path12 = require("node:path");
 var EMPTY_CAPABILITIES = () => ({
   human_reachable: { value: "unknown", tier: "unknown" },
@@ -14711,12 +14491,12 @@ function foldDossier(d, opts = {}) {
     }
   };
   try {
-    if ((0, import_node_fs14.existsSync)(d.rotatedDir)) {
-      const files = (0, import_node_fs14.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
+    if ((0, import_node_fs11.existsSync)(d.rotatedDir)) {
+      const files = (0, import_node_fs11.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
       state.meta.rotations = files.length;
       for (const f of files) {
         try {
-          ingest((0, import_node_fs14.readFileSync)((0, import_node_path12.join)(d.rotatedDir, f), "utf8"));
+          ingest((0, import_node_fs11.readFileSync)((0, import_node_path12.join)(d.rotatedDir, f), "utf8"));
         } catch {
           state.meta.dropped_lines++;
         }
@@ -14725,9 +14505,9 @@ function foldDossier(d, opts = {}) {
   } catch {
   }
   try {
-    if ((0, import_node_fs14.existsSync)(d.eventsPath)) {
-      state.meta.upto_offset = (0, import_node_fs14.statSync)(d.eventsPath).size;
-      ingest((0, import_node_fs14.readFileSync)(d.eventsPath, "utf8"));
+    if ((0, import_node_fs11.existsSync)(d.eventsPath)) {
+      state.meta.upto_offset = (0, import_node_fs11.statSync)(d.eventsPath).size;
+      ingest((0, import_node_fs11.readFileSync)(d.eventsPath, "utf8"));
     }
   } catch {
   }
@@ -14998,7 +14778,7 @@ function applyBounds(state, input) {
 }
 
 // src/lib/dossier/cache.ts
-var import_node_fs15 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 function compactState(s) {
   const ms = (iso) => Date.parse(iso) || 0;
   return {
@@ -15127,20 +14907,20 @@ function encodeState(s) {
 function writeFoldCache(d, state) {
   try {
     const tmp = `${d.foldPath}.${process.pid}.tmp`;
-    (0, import_node_fs15.writeFileSync)(tmp, encodeState(state), { mode: 384 });
-    (0, import_node_fs15.renameSync)(tmp, d.foldPath);
+    (0, import_node_fs12.writeFileSync)(tmp, encodeState(state), { mode: 384 });
+    (0, import_node_fs12.renameSync)(tmp, d.foldPath);
   } catch {
   }
 }
 function readFoldCache(d) {
   try {
-    if (!(0, import_node_fs15.existsSync)(d.foldPath)) return null;
-    const raw = JSON.parse((0, import_node_fs15.readFileSync)(d.foldPath, "utf8"));
+    if (!(0, import_node_fs12.existsSync)(d.foldPath)) return null;
+    const raw = JSON.parse((0, import_node_fs12.readFileSync)(d.foldPath, "utf8"));
     if (raw?.v !== 1) return null;
     const cached2 = expandState(raw);
     if (!cached2?.meta) return null;
-    const size = (0, import_node_fs15.existsSync)(d.eventsPath) ? (0, import_node_fs15.statSync)(d.eventsPath).size : 0;
-    const rotations = (0, import_node_fs15.existsSync)(d.rotatedDir) ? (0, import_node_fs15.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).length : 0;
+    const size = (0, import_node_fs12.existsSync)(d.eventsPath) ? (0, import_node_fs12.statSync)(d.eventsPath).size : 0;
+    const rotations = (0, import_node_fs12.existsSync)(d.rotatedDir) ? (0, import_node_fs12.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).length : 0;
     if (cached2.meta.upto_offset !== size || cached2.meta.rotations !== rotations) return null;
     return cached2;
   } catch {
@@ -15191,13 +14971,13 @@ function assessContinuity(i) {
 
 // src/lib/dossier/reanchor.ts
 var import_node_crypto6 = require("node:crypto");
-var import_node_fs16 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 function lineSha(text) {
   return (0, import_node_crypto6.createHash)("sha256").update(text.trim()).digest("hex").slice(0, HASH_WIDTH);
 }
 function fileHash(path) {
   try {
-    return (0, import_node_crypto6.createHash)("sha256").update((0, import_node_fs16.readFileSync)(path)).digest("hex").slice(0, HASH_WIDTH);
+    return (0, import_node_crypto6.createHash)("sha256").update((0, import_node_fs13.readFileSync)(path)).digest("hex").slice(0, HASH_WIDTH);
   } catch {
     return null;
   }
@@ -15569,14 +15349,14 @@ function foreignAuthoredPaths(identity, opts = {}) {
   let sessions = 0;
   try {
     const dir = treeDir(identity);
-    if (!(0, import_node_fs17.existsSync)(dir)) return { paths: [], sessions: 0 };
-    for (const entry of (0, import_node_fs17.readdirSync)(dir, { withFileTypes: true })) {
+    if (!(0, import_node_fs14.existsSync)(dir)) return { paths: [], sessions: 0 };
+    for (const entry of (0, import_node_fs14.readdirSync)(dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       if (entry.name === identity.sessionKey) continue;
       const log = (0, import_node_path13.join)(dir, entry.name, "events.jsonl");
       try {
-        if (!(0, import_node_fs17.existsSync)(log)) continue;
-        if (now - (0, import_node_fs17.statSync)(log).mtimeMs > windowMs) continue;
+        if (!(0, import_node_fs14.existsSync)(log)) continue;
+        if (now - (0, import_node_fs14.statSync)(log).mtimeMs > windowMs) continue;
         const sib = {
           dir: (0, import_node_path13.join)(dir, entry.name),
           identity,
@@ -15611,13 +15391,13 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
   try {
     const mine = dossierDir(identity);
     const userDir = (0, import_node_path13.dirname)((0, import_node_path13.dirname)(mine));
-    if (!(0, import_node_fs17.existsSync)(userDir)) return 0;
+    if (!(0, import_node_fs14.existsSync)(userDir)) return 0;
     const cutoff = Date.now() - maxAgeMs;
-    for (const tree of (0, import_node_fs17.readdirSync)(userDir, { withFileTypes: true })) {
+    for (const tree of (0, import_node_fs14.readdirSync)(userDir, { withFileTypes: true })) {
       if (!tree.isDirectory()) continue;
       const treePath = (0, import_node_path13.join)(userDir, tree.name);
       let live = 0;
-      for (const entry of (0, import_node_fs17.readdirSync)(treePath, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs14.readdirSync)(treePath, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         const dir = (0, import_node_path13.join)(treePath, entry.name);
         if (dir === mine) {
@@ -15626,9 +15406,9 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
         }
         try {
           const log = (0, import_node_path13.join)(dir, "events.jsonl");
-          const at = (0, import_node_fs17.existsSync)(log) ? (0, import_node_fs17.statSync)(log).mtimeMs : (0, import_node_fs17.statSync)(dir).mtimeMs;
+          const at = (0, import_node_fs14.existsSync)(log) ? (0, import_node_fs14.statSync)(log).mtimeMs : (0, import_node_fs14.statSync)(dir).mtimeMs;
           if (at < cutoff) {
-            (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
+            (0, import_node_fs14.rmSync)(dir, { recursive: true, force: true });
             removed++;
           } else {
             live++;
@@ -15638,7 +15418,7 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
       }
       if (live === 0) {
         try {
-          (0, import_node_fs17.rmSync)(treePath, { recursive: false, force: false });
+          (0, import_node_fs14.rmSync)(treePath, { recursive: false, force: false });
         } catch {
         }
       }
@@ -15655,8 +15435,8 @@ function sessionDossier(token, sessionId) {
 }
 function hasActiveGoal(d) {
   try {
-    if (!(0, import_node_fs17.existsSync)(d.eventsPath)) return false;
-    return (0, import_node_fs17.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
+    if (!(0, import_node_fs14.existsSync)(d.eventsPath)) return false;
+    return (0, import_node_fs14.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
   } catch {
     return false;
   }
@@ -15749,7 +15529,7 @@ function recordVerdict(d, v) {
     if (!lines.has(f.file)) {
       try {
         const abs = (0, import_node_path13.join)(root, f.file);
-        lines.set(f.file, (0, import_node_fs17.existsSync)(abs) ? (0, import_node_fs17.readFileSync)(abs, "utf8").split("\n") : null);
+        lines.set(f.file, (0, import_node_fs14.existsSync)(abs) ? (0, import_node_fs14.readFileSync)(abs, "utf8").split("\n") : null);
       } catch {
         lines.set(f.file, null);
       }
@@ -15850,7 +15630,7 @@ function recallMemory(d, identity, opts) {
       readFileLines: (file) => {
         try {
           const abs = (0, import_node_path13.join)(root, file);
-          return (0, import_node_fs17.existsSync)(abs) ? (0, import_node_fs17.readFileSync)(abs, "utf8").split("\n") : null;
+          return (0, import_node_fs14.existsSync)(abs) ? (0, import_node_fs14.readFileSync)(abs, "utf8").split("\n") : null;
         } catch {
           return null;
         }
@@ -15899,21 +15679,15 @@ function registerIntentCommands(program2) {
       if (!prompt) {
         process.exit(0);
       }
-      if (deferredToPlugin("intent capture", event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null)) {
-        process.exit(0);
-      }
-      const isPrimitive = isSlashCommand(prompt);
       const authForScope = await resolveToken(program2.opts().token);
       const scopeToken = authForScope.ok ? authForScope.data.token : void 0;
       const scopeSession = event.session_id || process.env.CLAUDE_SESSION_ID || "";
-      if (!isPrimitive) await appendToConversationBuffer(prompt, sessionScopeKey(scopeToken, scopeSession));
-      if (!isPrimitive) {
-        try {
-          const tok = await resolveToken(globals.token);
-          const session = sessionDossier(tok.ok ? tok.data.token : null, event.session_id ?? null);
-          if (session) recordGoal(session.d, prompt);
-        } catch {
-        }
+      await appendToConversationBuffer(prompt, sessionScopeKey(scopeToken, scopeSession));
+      try {
+        const tok = await resolveToken(globals.token);
+        const session = sessionDossier(tok.ok ? tok.data.token : null, event.session_id ?? null);
+        if (session) recordGoal(session.d, prompt);
+      } catch {
       }
       try {
         await ensureMemoryDir();
@@ -15994,21 +15768,21 @@ async function fireClassify(prompt, sessionId, globals) {
 }
 
 // src/commands/lifecycle.ts
-var import_node_fs21 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_path17 = require("node:path");
 
 // src/lib/baseline.ts
-var import_node_fs20 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_path16 = require("node:path");
 var import_node_crypto9 = require("node:crypto");
 
 // src/lib/snapshot.ts
-var import_node_fs19 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 var import_node_path15 = require("node:path");
 var import_node_child_process6 = require("node:child_process");
 
 // src/lib/files.ts
-var import_node_fs18 = require("node:fs");
+var import_node_fs15 = require("node:fs");
 var import_node_path14 = require("node:path");
 var LANG_MAP = {
   // Analyzable (static analysis + Gemini)
@@ -16085,7 +15859,7 @@ function sortByMtime(files) {
     const resolved = resolveFile(f);
     if (!resolved) return null;
     try {
-      const stat3 = (0, import_node_fs18.statSync)(resolved);
+      const stat3 = (0, import_node_fs15.statSync)(resolved);
       return { path: f, resolved, mtime: stat3.mtimeMs };
     } catch {
       return null;
@@ -16118,7 +15892,7 @@ function collectCodeDelta(files, opts) {
     }
     let size;
     try {
-      size = (0, import_node_fs18.statSync)(resolved).size;
+      size = (0, import_node_fs15.statSync)(resolved).size;
     } catch {
       exclude(filepath, "not-stattable");
       continue;
@@ -16135,7 +15909,7 @@ function collectCodeDelta(files, opts) {
     }
     let content;
     try {
-      content = (0, import_node_fs18.readFileSync)(resolved, "utf-8");
+      content = (0, import_node_fs15.readFileSync)(resolved, "utf-8");
     } catch {
       exclude(filepath, "not-readable");
       continue;
@@ -16174,7 +15948,7 @@ function collectCodeDelta(files, opts) {
 
 // src/lib/snapshot.ts
 function generateSnapshotDiffs(files) {
-  if (!(0, import_node_fs19.existsSync)(SNAPSHOT_DIR)) {
+  if (!(0, import_node_fs16.existsSync)(SNAPSHOT_DIR)) {
     return { diffs: [], has_snapshots: false };
   }
   const diffs = [];
@@ -16182,8 +15956,8 @@ function generateSnapshotDiffs(files) {
     if (!resolveInside(SNAPSHOT_DIR, file.path)) continue;
     const snapshotPath = (0, import_node_path15.join)(SNAPSHOT_DIR, file.path);
     const language = file.language ?? detectLanguage(file.path);
-    if ((0, import_node_fs19.existsSync)(snapshotPath)) {
-      const oldContent = (0, import_node_fs19.readFileSync)(snapshotPath, "utf-8");
+    if ((0, import_node_fs16.existsSync)(snapshotPath)) {
+      const oldContent = (0, import_node_fs16.readFileSync)(snapshotPath, "utf-8");
       if (oldContent === file.content) continue;
       const diff = computeDiff(oldContent, file.content, file.path);
       if (diff) {
@@ -16210,8 +15984,8 @@ function saveSnapshots(files) {
     if (!resolveInside(SNAPSHOT_DIR, file.path)) continue;
     const snapshotPath = (0, import_node_path15.join)(SNAPSHOT_DIR, file.path);
     snapshotPaths.add(snapshotPath);
-    (0, import_node_fs19.mkdirSync)((0, import_node_path15.dirname)(snapshotPath), { recursive: true });
-    (0, import_node_fs19.writeFileSync)(snapshotPath, file.content);
+    (0, import_node_fs16.mkdirSync)((0, import_node_path15.dirname)(snapshotPath), { recursive: true });
+    (0, import_node_fs16.writeFileSync)(snapshotPath, file.content);
   }
   cleanStaleSnapshots(SNAPSHOT_DIR, snapshotPaths);
 }
@@ -16219,9 +15993,9 @@ function computeDiff(oldContent, newContent, filePath) {
   const tmpOld = (0, import_node_path15.join)(SNAPSHOT_DIR, ".diff-old.tmp");
   const tmpNew = (0, import_node_path15.join)(SNAPSHOT_DIR, ".diff-new.tmp");
   try {
-    (0, import_node_fs19.mkdirSync)(SNAPSHOT_DIR, { recursive: true });
-    (0, import_node_fs19.writeFileSync)(tmpOld, oldContent);
-    (0, import_node_fs19.writeFileSync)(tmpNew, newContent);
+    (0, import_node_fs16.mkdirSync)(SNAPSHOT_DIR, { recursive: true });
+    (0, import_node_fs16.writeFileSync)(tmpOld, oldContent);
+    (0, import_node_fs16.writeFileSync)(tmpNew, newContent);
     const result = (0, import_node_child_process6.execSync)(
       `git diff --no-index --unified=10 -- "${tmpOld}" "${tmpNew}"`,
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
@@ -16235,32 +16009,32 @@ function computeDiff(oldContent, newContent, filePath) {
     return null;
   } finally {
     try {
-      (0, import_node_fs19.unlinkSync)(tmpOld);
+      (0, import_node_fs16.unlinkSync)(tmpOld);
     } catch {
     }
     try {
-      (0, import_node_fs19.unlinkSync)(tmpNew);
+      (0, import_node_fs16.unlinkSync)(tmpNew);
     } catch {
     }
   }
 }
 function cleanStaleSnapshots(dir, keepSet) {
-  if (!(0, import_node_fs19.existsSync)(dir)) return;
+  if (!(0, import_node_fs16.existsSync)(dir)) return;
   try {
-    const entries = (0, import_node_fs19.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs16.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
       if (dir === SNAPSHOT_DIR && (entry.name === ".diff-old.tmp" || entry.name === ".diff-new.tmp")) continue;
       const fullPath = (0, import_node_path15.join)(dir, entry.name);
       if (entry.isDirectory()) {
         cleanStaleSnapshots(fullPath, keepSet);
         try {
-          const remaining = (0, import_node_fs19.readdirSync)(fullPath);
-          if (remaining.length === 0) (0, import_node_fs19.rmdirSync)(fullPath);
+          const remaining = (0, import_node_fs16.readdirSync)(fullPath);
+          if (remaining.length === 0) (0, import_node_fs16.rmdirSync)(fullPath);
         } catch {
         }
       } else if (!keepSet.has(fullPath)) {
         try {
-          (0, import_node_fs19.unlinkSync)(fullPath);
+          (0, import_node_fs16.unlinkSync)(fullPath);
         } catch {
         }
       }
@@ -16291,8 +16065,8 @@ var CARRY_FILE = `${BASELINE_DIR}/.carry`;
 var CARRY_WINDOW_MS = 12e4;
 function writeCarry(sessionId, headSha) {
   try {
-    (0, import_node_fs20.mkdirSync)(projectPath(BASELINE_DIR), { recursive: true });
-    (0, import_node_fs20.writeFileSync)(
+    (0, import_node_fs17.mkdirSync)(projectPath(BASELINE_DIR), { recursive: true });
+    (0, import_node_fs17.writeFileSync)(
       projectPath(CARRY_FILE),
       JSON.stringify({ from_key: sessionKey(sessionId), head_sha: headSha, ts: Date.now() })
     );
@@ -16302,10 +16076,10 @@ function writeCarry(sessionId, headSha) {
 function claimCarry(newKey) {
   const carryPath = projectPath(CARRY_FILE);
   try {
-    if (!(0, import_node_fs20.existsSync)(carryPath)) return null;
-    const carry = JSON.parse((0, import_node_fs20.readFileSync)(carryPath, "utf-8"));
+    if (!(0, import_node_fs17.existsSync)(carryPath)) return null;
+    const carry = JSON.parse((0, import_node_fs17.readFileSync)(carryPath, "utf-8"));
     try {
-      (0, import_node_fs20.rmSync)(carryPath, { force: true });
+      (0, import_node_fs17.rmSync)(carryPath, { force: true });
     } catch {
     }
     if (!carry?.from_key || typeof carry.ts !== "number") return null;
@@ -16316,11 +16090,11 @@ function claimCarry(newKey) {
     if (!prior) return null;
     const toDir = sessionDir(newKey);
     try {
-      (0, import_node_fs20.rmSync)(toDir, { recursive: true, force: true });
+      (0, import_node_fs17.rmSync)(toDir, { recursive: true, force: true });
     } catch {
     }
-    (0, import_node_fs20.renameSync)(fromDir, toDir);
-    (0, import_node_fs20.writeFileSync)(manifestPath(toDir), JSON.stringify({ ...prior, session_id: newKey }) + "\n");
+    (0, import_node_fs17.renameSync)(fromDir, toDir);
+    (0, import_node_fs17.writeFileSync)(manifestPath(toDir), JSON.stringify({ ...prior, session_id: newKey }) + "\n");
     return readManifest(toDir);
   } catch {
     return null;
@@ -16344,21 +16118,21 @@ function captureBaseline(opts = {}) {
   const head_sha = getCurrentCommit();
   const dirty = getDirtyFiles();
   try {
-    (0, import_node_fs20.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
   } catch {
   }
   const filesDir = (0, import_node_path16.join)(dir, "files");
   const mirrored = [];
   try {
-    (0, import_node_fs20.mkdirSync)(filesDir, { recursive: true });
+    (0, import_node_fs17.mkdirSync)(filesDir, { recursive: true });
     for (const p of dirty) {
       if (p.includes("..")) continue;
       const content = safeReadForMirror(projectPath(p));
       if (content === null) continue;
       const dest = mirrorPath(dir, p);
       try {
-        (0, import_node_fs20.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
-        (0, import_node_fs20.writeFileSync)(dest, content);
+        (0, import_node_fs17.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
+        (0, import_node_fs17.writeFileSync)(dest, content);
         mirrored.push(p);
       } catch {
       }
@@ -16373,8 +16147,8 @@ function captureBaseline(opts = {}) {
     version: BASELINE_VERSION
   };
   try {
-    (0, import_node_fs20.mkdirSync)(dir, { recursive: true });
-    (0, import_node_fs20.writeFileSync)(manifestPath(dir), JSON.stringify(baseline));
+    (0, import_node_fs17.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs17.writeFileSync)(manifestPath(dir), JSON.stringify(baseline));
   } catch {
   }
   pruneOldBaselines();
@@ -16385,9 +16159,9 @@ function readBaseline(sessionId) {
 }
 function readManifest(dir) {
   const mp = manifestPath(dir);
-  if (!(0, import_node_fs20.existsSync)(mp)) return null;
+  if (!(0, import_node_fs17.existsSync)(mp)) return null;
   try {
-    const parsed = JSON.parse((0, import_node_fs20.readFileSync)(mp, "utf-8"));
+    const parsed = JSON.parse((0, import_node_fs17.readFileSync)(mp, "utf-8"));
     if (typeof parsed.head_sha !== "string" || typeof parsed.captured_at !== "number" || !Array.isArray(parsed.dirty_paths) || parsed.version !== BASELINE_VERSION) {
       return null;
     }
@@ -16418,9 +16192,9 @@ function preImage(repoRelPath, baseline) {
 function resolvePreImage(repoRelPath, baseline) {
   if (baseline.dirty_paths.includes(repoRelPath)) {
     const mp = mirrorPath(sessionDir(sessionKey(baseline.session_id)), repoRelPath);
-    if ((0, import_node_fs20.existsSync)(mp)) {
+    if ((0, import_node_fs17.existsSync)(mp)) {
       try {
-        return { content: (0, import_node_fs20.readFileSync)(mp, "utf-8"), existed: true };
+        return { content: (0, import_node_fs17.readFileSync)(mp, "utf-8"), existed: true };
       } catch {
       }
     }
@@ -16465,8 +16239,8 @@ function absorbIntoBaseline(paths, sessionId) {
       const content = safeReadForMirror(projectPath(p));
       if (content === null) continue;
       const dest = mirrorPath(dir, p);
-      (0, import_node_fs20.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
-      (0, import_node_fs20.writeFileSync)(dest, content);
+      (0, import_node_fs17.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
+      (0, import_node_fs17.writeFileSync)(dest, content);
       dirty.add(p);
       adopted++;
     } catch {
@@ -16475,7 +16249,7 @@ function absorbIntoBaseline(paths, sessionId) {
   if (adopted === 0) return 0;
   try {
     const updated = { ...baseline, dirty_paths: [...dirty] };
-    (0, import_node_fs20.writeFileSync)(manifestPath(dir), JSON.stringify(updated));
+    (0, import_node_fs17.writeFileSync)(manifestPath(dir), JSON.stringify(updated));
     preImageCache.delete(baseline);
   } catch {
     return 0;
@@ -16486,7 +16260,7 @@ function changedSinceBaseline(repoRelPath, baseline) {
   const pre = preImage(repoRelPath, baseline);
   let current;
   try {
-    current = (0, import_node_fs20.readFileSync)(projectPath(repoRelPath), "utf-8");
+    current = (0, import_node_fs17.readFileSync)(projectPath(repoRelPath), "utf-8");
   } catch {
     return pre.existed;
   }
@@ -16495,8 +16269,8 @@ function changedSinceBaseline(repoRelPath, baseline) {
 }
 function safeReadForMirror(absPath) {
   try {
-    if ((0, import_node_fs20.statSync)(absPath).size > MIRROR_MAX_BYTES) return null;
-    const buf = (0, import_node_fs20.readFileSync)(absPath);
+    if ((0, import_node_fs17.statSync)(absPath).size > MIRROR_MAX_BYTES) return null;
+    const buf = (0, import_node_fs17.readFileSync)(absPath);
     if (buf.includes(0)) return null;
     return buf.toString("utf-8");
   } catch {
@@ -16507,7 +16281,7 @@ function pruneOldBaselines() {
   const root = projectPath(BASELINE_DIR);
   let entries;
   try {
-    entries = (0, import_node_fs20.readdirSync)(root);
+    entries = (0, import_node_fs17.readdirSync)(root);
   } catch {
     return;
   }
@@ -16517,8 +16291,8 @@ function pruneOldBaselines() {
     const manifest = readManifest(dir);
     if (!manifest) {
       try {
-        if (now - (0, import_node_fs20.statSync)(dir).mtimeMs > BASELINE_TTL_MS) {
-          (0, import_node_fs20.rmSync)(dir, { recursive: true, force: true });
+        if (now - (0, import_node_fs17.statSync)(dir).mtimeMs > BASELINE_TTL_MS) {
+          (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
         }
       } catch {
       }
@@ -16526,7 +16300,7 @@ function pruneOldBaselines() {
     }
     if (now - manifest.captured_at <= BASELINE_TTL_MS) continue;
     try {
-      (0, import_node_fs20.rmSync)(dir, { recursive: true, force: true });
+      (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -16620,7 +16394,6 @@ function registerLifecycleCommands(program2) {
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
       const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
-      if (deferredToPlugin("compact", sessionId)) process.exit(0);
       const globals = program2.opts();
       const tok = await resolveToken(globals.token);
       const session2 = sessionDossier(tok.ok ? tok.data.token : null, sessionId);
@@ -16649,7 +16422,6 @@ function registerLifecycleCommands(program2) {
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
       const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
-      if (deferredToPlugin("session end", sessionId)) process.exit(0);
       const reason = opts.reason ?? event.session_end_reason ?? event.reason ?? "other";
       if (reason === "clear") {
         writeCarry(sessionId ?? void 0, getCurrentCommit());
@@ -16702,7 +16474,7 @@ function buildCompactionContext(session) {
     readFileLines: (file) => {
       try {
         const abs = (0, import_node_path17.join)(root, file);
-        return (0, import_node_fs21.existsSync)(abs) ? (0, import_node_fs21.readFileSync)(abs, "utf8").split("\n") : null;
+        return (0, import_node_fs18.existsSync)(abs) ? (0, import_node_fs18.readFileSync)(abs, "utf8").split("\n") : null;
       } catch {
         return null;
       }
@@ -16759,18 +16531,18 @@ async function readHookStdin() {
 
 // src/commands/standard.ts
 var import_promises12 = require("node:fs/promises");
-var import_node_fs28 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 var import_yaml3 = __toESM(require_dist());
 
 // src/lib/synthesize.ts
 var import_node_child_process8 = require("node:child_process");
-var import_node_fs24 = require("node:fs");
+var import_node_fs21 = require("node:fs");
 var import_promises9 = require("node:fs/promises");
 var import_node_path20 = require("node:path");
 var import_yaml = __toESM(require_dist());
 
 // src/lib/data-dir.ts
-var import_node_fs22 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_path18 = require("node:path");
 function resolveDataDir() {
   const candidates = [
@@ -16778,21 +16550,10 @@ function resolveDataDir() {
     // installed: node_modules/@codacy/verity-cli/data
     (0, import_node_path18.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
-    // THE COMMITTED SOURCE, for a source checkout that has not been built.
-    // cli/data/skills/ is a BUILD ARTIFACT (scripts/build.js copies client/skills
-    // into it) and is gitignored, because skills have one committed source — so
-    // in a fresh clone the packaged candidates above do not exist at all, and
-    // without this the synthesizer throws "Could not find Verity skill data"
-    // for every test and every `verity` run from source. Resolved from this
-    // module's own location, never the cwd: see the warning below.
-    (0, import_node_path18.join)(__dirname, "..", "..", "client"),
-    // bundled: cli/bin/ → ../../client
-    (0, import_node_path18.join)(__dirname, "..", "..", "..", "client"),
-    // tsx: cli/src/lib/ → ../../../client
     ...process.env.VERITY_DEV_DATA_DIR ? [process.env.VERITY_DEV_DATA_DIR] : []
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs22.existsSync)((0, import_node_path18.join)(candidate, "skills"))) {
+    if ((0, import_node_fs19.existsSync)((0, import_node_path18.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -16806,7 +16567,7 @@ function setupDataPath(file) {
 
 // src/lib/detect.ts
 var import_node_child_process7 = require("node:child_process");
-var import_node_fs23 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_path19 = require("node:path");
 var TOOLED_LANGUAGES = /* @__PURE__ */ new Set([
   "typescript",
@@ -16863,7 +16624,7 @@ function walk(root) {
     if (depth > WALK_MAX_DEPTH || found.length >= WALK_MAX_FILES) return;
     let entries;
     try {
-      entries = (0, import_node_fs23.readdirSync)(dir, { withFileTypes: true });
+      entries = (0, import_node_fs20.readdirSync)(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -16938,7 +16699,7 @@ var TOOL_CONFIG_MARKERS = [
 ];
 function readJson(path) {
   try {
-    return JSON.parse((0, import_node_fs23.readFileSync)(path, "utf-8"));
+    return JSON.parse((0, import_node_fs20.readFileSync)(path, "utf-8"));
   } catch {
     return null;
   }
@@ -16971,9 +16732,9 @@ function declaredDependencies(root, files) {
     ...files.filter((f) => f.includes("/") && /(^|\/)(pyproject\.toml|requirements\.txt)$/.test(f)).slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path19.join)(root, f))
   ];
   for (const path of pythonManifests) {
-    if (!(0, import_node_fs23.existsSync)(path)) continue;
+    if (!(0, import_node_fs20.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs23.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs20.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/^\s*["']?([A-Za-z][A-Za-z0-9._-]+)/gm)) names2.push(m[1]);
       for (const line of text.split("\n")) {
         if (!/dependencies\s*=/.test(line)) continue;
@@ -16987,9 +16748,9 @@ function declaredDependencies(root, files) {
     ...files.filter((f) => f.includes("/") && (0, import_node_path19.basename)(f) === "go.mod").slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path19.join)(root, f))
   ];
   for (const path of goMods) {
-    if (!(0, import_node_fs23.existsSync)(path)) continue;
+    if (!(0, import_node_fs20.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs23.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs20.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/^\s+([\w.-]+\/[\w./-]+)\s+v/gm)) {
         names2.push(m[1].replace(/^github\.com\//, ""));
       }
@@ -16998,9 +16759,9 @@ function declaredDependencies(root, files) {
   }
   for (const file of ["pom.xml", "build.gradle", "build.gradle.kts", "Gemfile", "Cargo.toml"]) {
     const path = (0, import_node_path19.join)(root, file);
-    if (!(0, import_node_fs23.existsSync)(path)) continue;
+    if (!(0, import_node_fs20.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs23.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs20.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/["'<]([A-Za-z][A-Za-z0-9._-]{2,})["'>]/g)) names2.push(m[1]);
     } catch {
     }
@@ -17008,7 +16769,7 @@ function declaredDependencies(root, files) {
   return names2;
 }
 function detectBuildSystem(root, files) {
-  const has = (f) => (0, import_node_fs23.existsSync)((0, import_node_path19.join)(root, f)) || files.some((p) => (0, import_node_path19.basename)(p) === f);
+  const has = (f) => (0, import_node_fs20.existsSync)((0, import_node_path19.join)(root, f)) || files.some((p) => (0, import_node_path19.basename)(p) === f);
   if (has("pnpm-lock.yaml")) return "pnpm";
   if (has("yarn.lock")) return "yarn";
   if (has("bun.lock") || has("bun.lockb")) return "bun";
@@ -17025,7 +16786,7 @@ function detectBuildSystem(root, files) {
 }
 function detectArchitecture(root, files) {
   const workspaceMarkers = ["lerna.json", "pnpm-workspace.yaml", "nx.json", "turbo.json", "rush.json"];
-  if (workspaceMarkers.some((m) => (0, import_node_fs23.existsSync)((0, import_node_path19.join)(root, m)))) return "monorepo";
+  if (workspaceMarkers.some((m) => (0, import_node_fs20.existsSync)((0, import_node_path19.join)(root, m)))) return "monorepo";
   const pkg = readJson((0, import_node_path19.join)(root, "package.json"));
   if (pkg && "workspaces" in pkg) return "monorepo";
   const manifests = files.filter((f) => /(^|\/)(package\.json|go\.mod|pyproject\.toml|Cargo\.toml|pom\.xml)$/.test(f));
@@ -17050,8 +16811,8 @@ function measureAvgFileLength(root, files, languages) {
   for (let i = 0; i < candidates.length; i += stride) {
     const path = (0, import_node_path19.join)(root, candidates[i]);
     try {
-      if ((0, import_node_fs23.statSync)(path).size > 2 * 1024 * 1024) continue;
-      total += (0, import_node_fs23.readFileSync)(path, "utf-8").split("\n").length;
+      if ((0, import_node_fs20.statSync)(path).size > 2 * 1024 * 1024) continue;
+      total += (0, import_node_fs20.readFileSync)(path, "utf-8").split("\n").length;
       counted++;
     } catch {
     }
@@ -17076,7 +16837,7 @@ function detectProject(root = repoRoot()) {
   const existingToolConfigs = [];
   for (const [tool, markers] of TOOL_CONFIG_MARKERS) {
     for (const marker of markers) {
-      if ((0, import_node_fs23.existsSync)((0, import_node_path19.join)(root, marker))) {
+      if ((0, import_node_fs20.existsSync)((0, import_node_path19.join)(root, marker))) {
         existingToolConfigs.push({ tool, path: `./${marker}` });
         break;
       }
@@ -17181,8 +16942,8 @@ ${closingNote(input.origin)}
 
 // src/lib/synthesize.ts
 function loadCatalog() {
-  const catalog = (0, import_yaml.parse)((0, import_node_fs24.readFileSync)(setupDataPath("patterns-reference.yaml"), "utf-8"));
-  const template = (0, import_yaml.parse)((0, import_node_fs24.readFileSync)(setupDataPath("standard-template.yaml"), "utf-8"));
+  const catalog = (0, import_yaml.parse)((0, import_node_fs21.readFileSync)(setupDataPath("patterns-reference.yaml"), "utf-8"));
+  const template = (0, import_yaml.parse)((0, import_node_fs21.readFileSync)(setupDataPath("standard-template.yaml"), "utf-8"));
   return { catalog, template };
 }
 function selectTools(languages, intensity, catalog) {
@@ -17460,7 +17221,7 @@ function validatePatternIds() {
 }
 async function runSynthesis(opts) {
   const standardPath = projectPath(STANDARD_FILE);
-  if ((0, import_node_fs24.existsSync)(standardPath) && !opts.force) {
+  if ((0, import_node_fs21.existsSync)(standardPath) && !opts.force) {
     return { refused: `${STANDARD_FILE} already exists \u2014 pass --force to replace it.` };
   }
   const detected = opts.detected ?? detectProject();
@@ -17588,11 +17349,11 @@ ${validation.detail}`);
 
 // src/lib/setup-state.ts
 var import_promises10 = require("node:fs/promises");
-var import_node_fs25 = require("node:fs");
+var import_node_fs22 = require("node:fs");
 var SETUP_STATE_FILE = `${VERITY_DIR}/setup.json`;
 async function readSetupState() {
   const path = projectPath(SETUP_STATE_FILE);
-  if (!(0, import_node_fs25.existsSync)(path)) return null;
+  if (!(0, import_node_fs22.existsSync)(path)) return null;
   try {
     const parsed = JSON.parse(await (0, import_promises10.readFile)(path, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : null;
@@ -17608,12 +17369,12 @@ async function writeSetupState(patch) {
 }
 
 // src/lib/push-setup.ts
-var import_node_fs27 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 var import_promises11 = require("node:fs/promises");
 var import_yaml2 = __toESM(require_dist());
 
 // src/lib/verityignore.ts
-var import_node_fs26 = require("node:fs");
+var import_node_fs23 = require("node:fs");
 var EMPTY = { rules: [], securityOverlap: [], problems: [] };
 var SECURITY_PROBES = [
   ".env",
@@ -17706,9 +17467,9 @@ function isIgnored2(ig, path) {
 }
 function loadVerityIgnore() {
   const file = projectPath(VERITYIGNORE_FILE);
-  if (!(0, import_node_fs26.existsSync)(file)) return EMPTY;
+  if (!(0, import_node_fs23.existsSync)(file)) return EMPTY;
   try {
-    return parseVerityIgnore((0, import_node_fs26.readFileSync)(file, "utf-8"));
+    return parseVerityIgnore((0, import_node_fs23.readFileSync)(file, "utf-8"));
   } catch {
     return EMPTY;
   }
@@ -17746,9 +17507,9 @@ function buildStandardUpload(standard, ignoreRaw) {
 }
 function readVerityIgnoreRaw() {
   const file = projectPath(VERITYIGNORE_FILE);
-  if (!(0, import_node_fs26.existsSync)(file)) return null;
+  if (!(0, import_node_fs23.existsSync)(file)) return null;
   try {
-    return (0, import_node_fs26.readFileSync)(file, "utf-8");
+    return (0, import_node_fs23.readFileSync)(file, "utf-8");
   } catch {
     return null;
   }
@@ -17776,7 +17537,7 @@ async function pushStandardAndConfig(globals, what = {}) {
   }
   let standardVersion = null;
   const standardPath = projectPath(STANDARD_FILE);
-  if (pushStandard && (0, import_node_fs27.existsSync)(standardPath)) {
+  if (pushStandard && (0, import_node_fs24.existsSync)(standardPath)) {
     try {
       const content = (0, import_yaml2.parse)(await (0, import_promises11.readFile)(standardPath, "utf-8"));
       const upload = buildStandardUpload(content, readVerityIgnoreRaw());
@@ -17801,7 +17562,7 @@ async function pushStandardAndConfig(globals, what = {}) {
   }
   let configPushed = false;
   const configPath = projectPath(CODACY_CONFIG_FILE);
-  if (pushConfig && (0, import_node_fs27.existsSync)(configPath)) {
+  if (pushConfig && (0, import_node_fs24.existsSync)(configPath)) {
     try {
       const content = JSON.parse(await (0, import_promises11.readFile)(configPath, "utf-8"));
       const result = await apiRequest({
@@ -17833,7 +17594,7 @@ function registerStandardCommands(program2) {
     const state = await readSetupState();
     if (opts.configOnly) {
       const standardPath = projectPath(STANDARD_FILE);
-      if (!(0, import_node_fs28.existsSync)(standardPath)) {
+      if (!(0, import_node_fs25.existsSync)(standardPath)) {
         printError(`No ${STANDARD_FILE} here \u2014 run "verity standard synthesize" to create one.`);
         process.exit(1);
       }
@@ -18002,22 +17763,6 @@ function registerConfigCommands(program2) {
     }
     process.stdout.write(urlResult.data + "\n");
   });
-  config.command("git-moments [moments]").description('Get or set the git moments the guard reviews: commit,push \u2014 or "none"').action((moments) => {
-    if (moments === void 0) {
-      const current = readProjectConfig().git_moments;
-      process.stdout.write((current.length ? current.join(",") : "none") + "\n");
-      return;
-    }
-    const next = moments === "none" ? [] : parseMoments(moments);
-    if (moments !== "none" && next.length === 0) {
-      printError(`Unrecognised moments: ${moments}. Use "commit", "push", "commit,push", or "none".`);
-      process.exit(1);
-    }
-    writeProjectConfig({ git_moments: next });
-    printInfo(
-      next.length ? `Git-moment review enabled for: ${next.join(", ")}` : "Git-moment review disabled \u2014 commits and pushes are no longer gated."
-    );
-  });
   config.command("push").description("Upload the analysis config to the service").option("--file <path>", "Path to config file", CODACY_CONFIG_FILE).action(async (opts) => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
@@ -18160,10 +17905,10 @@ function formatRunDetail(run2) {
 }
 
 // src/lib/ignore-declaration.ts
-var import_node_fs30 = require("node:fs");
+var import_node_fs27 = require("node:fs");
 
 // src/lib/debounce.ts
-var import_node_fs29 = require("node:fs");
+var import_node_fs26 = require("node:fs");
 var import_node_crypto10 = require("node:crypto");
 function scopedFile(base, sessionId) {
   if (!sessionId) return base;
@@ -18171,9 +17916,9 @@ function scopedFile(base, sessionId) {
 }
 function checkDebounce(debounceSeconds = DEBOUNCE_SECONDS, sessionId) {
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs29.existsSync)(file)) return null;
+  if (!(0, import_node_fs26.existsSync)(file)) return null;
   try {
-    const lastTs = parseInt((0, import_node_fs29.readFileSync)(file, "utf-8").trim(), 10);
+    const lastTs = parseInt((0, import_node_fs26.readFileSync)(file, "utf-8").trim(), 10);
     const nowTs = Math.floor(Date.now() / 1e3);
     const elapsed = nowTs - lastTs;
     if (elapsed < debounceSeconds) {
@@ -18186,10 +17931,10 @@ function checkDebounce(debounceSeconds = DEBOUNCE_SECONDS, sessionId) {
 function checkMtime(files, bypassForRecentCommits, sessionId) {
   if (bypassForRecentCommits) return null;
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs29.existsSync)(file)) return null;
+  if (!(0, import_node_fs26.existsSync)(file)) return null;
   let debounceTime;
   try {
-    debounceTime = (0, import_node_fs29.statSync)(file).mtimeMs;
+    debounceTime = (0, import_node_fs26.statSync)(file).mtimeMs;
   } catch {
     return null;
   }
@@ -18197,7 +17942,7 @@ function checkMtime(files, bypassForRecentCommits, sessionId) {
     const resolved = resolveFile(f);
     if (!resolved) continue;
     try {
-      const stat3 = (0, import_node_fs29.statSync)(resolved);
+      const stat3 = (0, import_node_fs26.statSync)(resolved);
       if (stat3.mtimeMs > debounceTime) {
         return null;
       }
@@ -18213,8 +17958,8 @@ function computeContentHash(files) {
   for (const f of sorted) {
     const resolved = resolveFile(f) ?? f;
     try {
-      if ((0, import_node_fs29.existsSync)(resolved)) {
-        hash.update((0, import_node_fs29.readFileSync)(resolved));
+      if ((0, import_node_fs26.existsSync)(resolved)) {
+        hash.update((0, import_node_fs26.readFileSync)(resolved));
       }
     } catch {
     }
@@ -18224,9 +17969,9 @@ function computeContentHash(files) {
 function checkContentHash(files, sessionId) {
   const hash = computeContentHash(files);
   const file = scopedFile(HASH_FILE, sessionId);
-  if ((0, import_node_fs29.existsSync)(file)) {
+  if ((0, import_node_fs26.existsSync)(file)) {
     try {
-      const storedHash = (0, import_node_fs29.readFileSync)(file, "utf-8").trim();
+      const storedHash = (0, import_node_fs26.readFileSync)(file, "utf-8").trim();
       if (hash === storedHash) {
         return { skip: "No source changes since last analysis", hash };
       }
@@ -18236,24 +17981,24 @@ function checkContentHash(files, sessionId) {
   return { skip: null, hash };
 }
 function recordAnalysisStart(sessionId) {
-  (0, import_node_fs29.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs29.writeFileSync)(scopedFile(DEBOUNCE_FILE, sessionId), String(Math.floor(Date.now() / 1e3)));
+  (0, import_node_fs26.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs26.writeFileSync)(scopedFile(DEBOUNCE_FILE, sessionId), String(Math.floor(Date.now() / 1e3)));
 }
 function recordPassHash(hash, sessionId) {
-  (0, import_node_fs29.writeFileSync)(scopedFile(HASH_FILE, sessionId), hash);
+  (0, import_node_fs26.writeFileSync)(scopedFile(HASH_FILE, sessionId), hash);
 }
 function narrowToRecent(files, sessionId) {
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs29.existsSync)(file)) return files;
+  if (!(0, import_node_fs26.existsSync)(file)) return files;
   let debounceTime;
   try {
-    debounceTime = (0, import_node_fs29.statSync)(file).mtimeMs;
+    debounceTime = (0, import_node_fs26.statSync)(file).mtimeMs;
   } catch {
     return files;
   }
   const recent = files.filter((f) => {
     try {
-      return (0, import_node_fs29.existsSync)(f) && (0, import_node_fs29.statSync)(f).mtimeMs > debounceTime;
+      return (0, import_node_fs26.existsSync)(f) && (0, import_node_fs26.statSync)(f).mtimeMs > debounceTime;
     } catch {
       return false;
     }
@@ -18266,9 +18011,9 @@ function readIteration(currentCommit, _contentHash) {
 var NO_BLOCKS = { attempts: 0, blocks: 0, fingerprint: null };
 function readBlockState(currentCommit, opts) {
   if (opts?.newUserPrompt) return NO_BLOCKS;
-  if (!(0, import_node_fs29.existsSync)(ITERATION_FILE)) return NO_BLOCKS;
+  if (!(0, import_node_fs26.existsSync)(ITERATION_FILE)) return NO_BLOCKS;
   try {
-    const stored = (0, import_node_fs29.readFileSync)(ITERATION_FILE, "utf-8").trim();
+    const stored = (0, import_node_fs26.readFileSync)(ITERATION_FILE, "utf-8").trim();
     const parsed = stored.startsWith("{") ? parseJsonState(stored) : parseLegacyState(stored);
     if (!parsed) return NO_BLOCKS;
     if (parsed.commit !== currentCommit) return NO_BLOCKS;
@@ -18314,8 +18059,8 @@ function isSameProblem(previous, current) {
   return current.split(",").some((k) => prev.has(k));
 }
 function writeBlockState(commit, state) {
-  (0, import_node_fs29.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs29.writeFileSync)(
+  (0, import_node_fs26.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs26.writeFileSync)(
     ITERATION_FILE,
     JSON.stringify({
       v: 2,
@@ -18420,9 +18165,9 @@ function resolveIgnoreState(keys) {
 }
 function readIgnoreState(sessionId) {
   const file = stateFile(sessionId);
-  if (!(0, import_node_fs30.existsSync)(file)) return null;
+  if (!(0, import_node_fs27.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs30.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs27.readFileSync)(file, "utf-8")) ?? {};
     const spent = typeof o.spent === "number" ? o.spent : 0;
     const raw = o.active;
     let active = null;
@@ -18446,8 +18191,8 @@ function readIgnoreState(sessionId) {
 }
 function writeIgnoreState(state, sessionId) {
   try {
-    (0, import_node_fs30.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
-    (0, import_node_fs30.writeFileSync)(stateFile(sessionId), JSON.stringify({ v: 1, active: state.active, spent: state.spent }));
+    (0, import_node_fs27.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
+    (0, import_node_fs27.writeFileSync)(stateFile(sessionId), JSON.stringify({ v: 1, active: state.active, spent: state.spent }));
   } catch {
   }
 }
@@ -18821,8 +18566,59 @@ function createRun(opts, globals) {
   };
 }
 
-// src/commands/analyze/index.ts
-var import_node_fs43 = require("node:fs");
+// src/lib/stderr-log.ts
+var import_node_fs28 = require("node:fs");
+var TOKEN_RE2 = /verity_[0-9a-f]{16,}/g;
+var ANSI_RE = /\u001b\[[0-?]*[ -/]*[@-~]/g;
+function scrub(s) {
+  return s.replace(TOKEN_RE2, "verity_***REDACTED***").replace(ANSI_RE, "");
+}
+var installed = false;
+var wroteBanner = false;
+var banner = "";
+function append(text) {
+  try {
+    const dir = projectPath(DEBUG_LOG_DIR);
+    const file = projectPath(STDERR_LOG_FILE);
+    (0, import_node_fs28.mkdirSync)(dir, { recursive: true });
+    rotateIfNeeded(file);
+    (0, import_node_fs28.appendFileSync)(file, text);
+  } catch {
+  }
+}
+function ensureBanner() {
+  if (wroteBanner) return;
+  wroteBanner = true;
+  append(banner);
+}
+function installStderrLog(cmd, argv, version) {
+  if (installed || !isDebugEnabled()) return;
+  installed = true;
+  banner = `
+\u2501\u2501 verity ${cmd} \xB7 ${(/* @__PURE__ */ new Date()).toISOString()} \xB7 pid ${process.pid}
+   v${version} \xB7 ${process.cwd()}
+   argv: ${scrub(argv.join(" "))}
+`;
+  const original = process.stderr.write.bind(process.stderr);
+  const tee = (...args) => {
+    const result = original(...args);
+    try {
+      const chunk = args[0];
+      const text = typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf-8") : String(chunk);
+      ensureBanner();
+      append(scrub(text));
+    } catch {
+    }
+    return result;
+  };
+  process.stderr.write = tee;
+}
+function logToFileOnly(text) {
+  if (!installed) return;
+  ensureBanner();
+  append(text.endsWith("\n") ? text : `${text}
+`);
+}
 
 // src/lib/repo-context.ts
 var import_node_child_process9 = require("node:child_process");
@@ -19643,7 +19439,7 @@ function installRunEvidence(run2) {
 
 // src/lib/git-frame.ts
 var import_node_child_process10 = require("node:child_process");
-var import_node_fs31 = require("node:fs");
+var import_node_fs29 = require("node:fs");
 var import_node_os4 = require("node:os");
 var import_node_path21 = require("node:path");
 var import_node_path22 = require("node:path");
@@ -19782,14 +19578,14 @@ function gitAt(dir, args) {
 }
 function realpathOr(p) {
   try {
-    return import_node_fs31.realpathSync.native(p);
+    return import_node_fs29.realpathSync.native(p);
   } catch {
     return (0, import_node_path21.resolve)(p);
   }
 }
 function resolveFrame(input) {
   const found = findMomentSegment(input.command, input.on);
-  const hookDirUsable = !!input.hookCwd && (0, import_node_fs31.existsSync)(input.hookCwd);
+  const hookDirUsable = !!input.hookCwd && (0, import_node_fs29.existsSync)(input.hookCwd);
   const baseDir = hookDirUsable ? input.hookCwd : process.cwd();
   let anchor = hookDirUsable ? "hook-cwd" : "process-cwd";
   const refuse = (refusal) => ({
@@ -19812,7 +19608,7 @@ function resolveFrame(input) {
     if (dirs.size > 1) return refuse(`target:multiple ${found.moment} targets in one command`);
     const targetDir = dirs.size === 1 ? [...dirs][0] : baseDir;
     if (targetDir !== baseDir) {
-      if (!(0, import_node_fs31.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
+      if (!(0, import_node_fs29.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
       dir = targetDir;
     }
   }
@@ -19848,19 +19644,21 @@ function refResolves(frame, ref) {
   return frameGit(frame, ["rev-parse", "--verify", "-q", `${ref}^{commit}`]) !== "";
 }
 var SHA_RE2 = /^[0-9a-f]{40}$/;
-function stagedRange(frame) {
-  if (!frame.worktreeRoot) return { kind: "nothing", base: null, head: "INDEX", via: "refused" };
-  const mergeHead = frame.gitDir ? (0, import_node_path22.join)(frame.gitDir, "MERGE_HEAD") : null;
-  if (mergeHead && (0, import_node_fs31.existsSync)(mergeHead)) {
-    const vsHead = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "HEAD"]).split("\n").filter(Boolean));
-    const vsMerge = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "MERGE_HEAD"]).split("\n").filter(Boolean));
-    const resolutions = [...vsHead].filter((f) => vsMerge.has(f) && !isVerityOwnedPath(f));
-    return { kind: "merge", base: "HEAD", head: "INDEX", via: "merge-resolutions", files: resolutions };
+function baselineShaAt(frame) {
+  if (!frame.worktreeRoot) return null;
+  try {
+    const sha = (0, import_node_fs29.readFileSync)((0, import_node_path22.join)(frame.worktreeRoot, BASELINE_SHA_FILE), "utf-8").trim();
+    if (!SHA_RE2.test(sha)) return null;
+    return refResolves(frame, sha) ? sha : null;
+  } catch {
+    return null;
   }
+}
+function stagedRange() {
   return { kind: "staged", base: "HEAD", head: "INDEX", via: "index" };
 }
 function resolvePushRange(frame, command, on) {
-  const nothing = (via2) => ({ kind: "nothing", base: null, head: "HEAD", via: via2 });
+  const nothing = (via) => ({ kind: "nothing", base: null, head: "HEAD", via });
   if (!frame.worktreeRoot) return nothing("refused");
   const found = findMomentSegment(command, on);
   const segment = found ? splitSegments(command)[found.segmentIndex] : "";
@@ -19868,32 +19666,54 @@ function resolvePushRange(frame, command, on) {
   if (target.isDelete) return nothing("deletion");
   const head = target.srcRef ?? "HEAD";
   if (!refResolves(frame, head)) return nothing(`src-unresolvable:${head}`);
-  const remotePattern = target.remote ? `--remotes=${target.remote}` : "--remotes";
-  const via = target.remote ? `publication:${target.remote}` : "publication";
-  const commits = frameGit(frame, ["rev-list", head, "--not", remotePattern]).split("\n").filter(Boolean);
-  if (commits.length === 0) return { kind: "nothing", base: null, head, via: "already-published" };
-  const boundary = frameGit(frame, ["rev-list", head, "--not", remotePattern, "--boundary"]).split("\n").filter((l) => l.startsWith("-")).map((l) => l.slice(1));
-  const base = boundary.find((s) => SHA_RE2.test(s)) ?? null;
-  const files = /* @__PURE__ */ new Set();
-  for (const sha of commits) {
-    for (const f of frameGit(frame, ["diff-tree", "--no-commit-id", "--name-only", "-r", sha]).split("\n")) {
-      if (f && !isVerityOwnedPath(f)) files.add(f);
-    }
+  const srcName = target.srcRef;
+  const branchForRemote = srcName ?? frame.branch;
+  const candidates = [];
+  if (target.remote && (target.dstRef ?? srcName)) {
+    const dstName = (target.dstRef ?? srcName).replace(/^refs\/heads\//, "");
+    candidates.push({ ref: `refs/remotes/${target.remote}/${dstName}`, via: `refspec:${target.remote}/${dstName}` });
+  }
+  if (target.remote && !srcName && !target.dstRef && frame.branch) {
+    candidates.push({ ref: `refs/remotes/${target.remote}/${frame.branch}`, via: `remote:${target.remote}/${frame.branch}` });
+  }
+  candidates.push({ ref: srcName ? `${srcName}@{push}` : "@{push}", via: "@{push}" });
+  candidates.push({ ref: srcName ? `${srcName}@{upstream}` : "@{upstream}", via: "@{upstream}" });
+  if (branchForRemote) {
+    candidates.push({
+      ref: `refs/remotes/origin/${branchForRemote.replace(/^refs\/heads\//, "")}`,
+      via: `origin/${branchForRemote.replace(/^refs\/heads\//, "")}`
+    });
+  }
+  for (const c of candidates) {
+    if (!refResolves(frame, c.ref)) continue;
+    const mergeBase = frameGit(frame, ["merge-base", c.ref, head]);
+    if (SHA_RE2.test(mergeBase)) return { kind: "push", base: mergeBase, head, via: c.via };
   }
-  return { kind: "push", base, head, via, files: [...files], commits };
+  const baseline = baselineShaAt(frame);
+  if (baseline) return { kind: "baseline", base: baseline, head, via: "review-baseline" };
+  if (refResolves(frame, `${head}~1`)) return { kind: "last-commit", base: `${head}~1`, head, via: `${head}~1` };
+  return nothing("no-parent");
 }
 function rangeFiles(frame, range) {
-  if (range.files) return range.files.filter((f) => !isVerityOwnedPath(f));
-  if (range.kind === "staged") {
-    return frameGit(frame, ["diff", "--cached", "--name-only"]).split("\n").filter((l) => l.length > 0).filter((f) => !isVerityOwnedPath(f));
+  let out;
+  switch (range.kind) {
+    case "staged":
+      out = frameGit(frame, ["diff", "--cached", "--name-only"]);
+      break;
+    case "push":
+    case "baseline":
+    case "last-commit":
+      out = frameGit(frame, ["diff", "--name-only", range.base, range.head === "INDEX" ? "HEAD" : range.head]);
+      break;
+    case "nothing":
+      return [];
   }
-  return [];
+  return out.split("\n").filter((l) => l.length > 0).filter((f) => !isVerityOwnedPath(f));
 }
 function rangeChangeSignals(frame, range, paths) {
   const out = /* @__PURE__ */ new Map();
   if (range.kind === "nothing" || paths.length === 0) return out;
-  if (range.kind === "push" && !range.base) return out;
-  const args = range.kind === "staged" || range.kind === "merge" ? ["diff", "--cached", "--unified=0"] : ["diff", "--unified=0", range.base, range.head === "INDEX" ? "HEAD" : range.head];
+  const args = range.kind === "staged" ? ["diff", "--cached", "--unified=0"] : ["diff", "--unified=0", range.base, range.head === "INDEX" ? "HEAD" : range.head];
   const diff = frameGit(frame, [...args, "--", ...paths]);
   let current = null;
   let oldSide = null;
@@ -19925,9 +19745,8 @@ function rangeChangeSignals(frame, range, paths) {
   return out;
 }
 function rangeMessages(frame, range) {
-  if (range.kind !== "push" || !range.commits || range.commits.length === 0) return "";
-  const commits = range.commits.slice(0, 100);
-  return frameGit(frame, ["show", "-s", "--format=%B%x00", ...commits]).split("\0").map((s) => s.trim()).filter(Boolean).join("\n\n");
+  if (range.kind === "staged" || range.kind === "nothing" || !range.base) return "";
+  return frameGit(frame, ["log", `${range.base}..${range.head === "INDEX" ? "HEAD" : range.head}`, "--format=%B%x00"]).split("\0").map((s) => s.trim()).filter(Boolean).join("\n\n");
 }
 function frameTelemetry(frame, range, divergence) {
   const t = {
@@ -19975,7 +19794,7 @@ function truthy(v) {
 }
 
 // src/lib/transcript.ts
-var import_node_fs32 = require("node:fs");
+var import_node_fs30 = require("node:fs");
 var MAX_READ_BYTES = 256 * 1024;
 var SMALL_FILE_BYTES = 64 * 1024;
 var MAX_FILES_LIST = 20;
@@ -20002,7 +19821,7 @@ async function extractActionSummary(transcriptPath) {
 function readTurnLines(transcriptPath) {
   let size;
   try {
-    size = (0, import_node_fs32.statSync)(transcriptPath).size;
+    size = (0, import_node_fs30.statSync)(transcriptPath).size;
   } catch {
     return null;
   }
@@ -20010,7 +19829,7 @@ function readTurnLines(transcriptPath) {
   let raw;
   let windowed = false;
   if (size <= SMALL_FILE_BYTES) {
-    raw = (0, import_node_fs32.readFileSync)(transcriptPath, "utf-8");
+    raw = (0, import_node_fs30.readFileSync)(transcriptPath, "utf-8");
   } else {
     windowed = true;
     const buf = Buffer.alloc(Math.min(MAX_READ_BYTES, size));
@@ -20327,9 +20146,6 @@ async function bootstrap(run2) {
     isTTY: process.stdout.isTTY === true
   });
   const { assistantMessage: assistantResponse, stopReason, transcriptPath, sessionId } = await readStopHookStdin();
-  if (deferredToPlugin("analyze", sessionId ?? process.env.CLAUDE_SESSION_ID ?? null)) {
-    process.exit(0);
-  }
   const actionSummary = transcriptPath ? await extractActionSummary(transcriptPath) : null;
   const tokenResult = await resolveToken(globals.token);
   const scopeToken = tokenResult.ok ? tokenResult.data.token : void 0;
@@ -20509,7 +20325,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.32.0-experimental.68ae2ee" : "dev";
+    return true ? "0.32.0-experimental.f0746f7" : "dev";
   } catch {
     return "dev";
   }
@@ -20550,7 +20366,7 @@ async function sendSkipBeacon(ctx, reason) {
 
 // src/lib/static-analysis.ts
 var import_node_child_process11 = require("node:child_process");
-var import_node_fs33 = require("node:fs");
+var import_node_fs31 = require("node:fs");
 var SEVERITY_ORDER = {
   Error: 0,
   Critical: 0,
@@ -20598,7 +20414,7 @@ function runCodacyAnalysis(files) {
   if (files.length === 0) return empty;
   const existingFiles = files.filter((f) => {
     try {
-      return (0, import_node_fs33.existsSync)(f);
+      return (0, import_node_fs31.existsSync)(f);
     } catch {
       return false;
     }
@@ -20867,7 +20683,7 @@ async function scope(run2) {
 }
 
 // src/lib/specs.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs32 = require("node:fs");
 var import_node_path23 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
@@ -20899,16 +20715,16 @@ function discoverSpecs(consulted = []) {
     const totalCap = relevant ? MAX_TOTAL_SPEC_BYTES : UNCONSULTED_TOTAL_BYTES;
     if (totalBytes >= totalCap) return false;
     if (seen.has(specPath)) return true;
-    if (!(0, import_node_fs34.existsSync)(specPath)) return true;
+    if (!(0, import_node_fs32.existsSync)(specPath)) return true;
     seen.add(specPath);
     const remaining = totalCap - totalBytes;
     const fileCap = relevant ? MAX_SPEC_FILE_BYTES : UNCONSULTED_FILE_BYTES;
     const readBytes = Math.min(fileCap, remaining);
     try {
       const buf = Buffer.alloc(readBytes);
-      const fd = (0, import_node_fs34.openSync)(specPath, "r");
-      const bytesRead = (0, import_node_fs34.readSync)(fd, buf, 0, readBytes, 0);
-      (0, import_node_fs34.closeSync)(fd);
+      const fd = (0, import_node_fs32.openSync)(specPath, "r");
+      const bytesRead = (0, import_node_fs32.readSync)(fd, buf, 0, readBytes, 0);
+      (0, import_node_fs32.closeSync)(fd);
       const content = buf.slice(0, bytesRead).toString("utf-8");
       if (!content) return true;
       result.push({ path: specPath, content });
@@ -20924,7 +20740,7 @@ function discoverSpecs(consulted = []) {
     if (!addSpec(candidate)) break;
   }
   for (const dir of ["spec", "docs"]) {
-    if (!(0, import_node_fs34.existsSync)(dir)) continue;
+    if (!(0, import_node_fs32.existsSync)(dir)) continue;
     try {
       const mdFiles = findMdFiles(dir, 2).sort();
       for (const mdFile of mdFiles) {
@@ -20939,7 +20755,7 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   if (depth >= maxDepth) return [];
   const result = [];
   try {
-    const entries = (0, import_node_fs34.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs32.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
       const fullPath = (0, import_node_path23.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
@@ -20958,14 +20774,14 @@ function discoverPlans() {
   const candidates = [];
   const seen = /* @__PURE__ */ new Set();
   for (const plansDir of [localPlansDir, homePlansDir]) {
-    if (!(0, import_node_fs34.existsSync)(plansDir)) continue;
+    if (!(0, import_node_fs32.existsSync)(plansDir)) continue;
     try {
-      for (const f of (0, import_node_fs34.readdirSync)(plansDir)) {
+      for (const f of (0, import_node_fs32.readdirSync)(plansDir)) {
         if (!f.endsWith(".md") || seen.has(f)) continue;
         seen.add(f);
         const fullPath = (0, import_node_path23.join)(plansDir, f);
         try {
-          const stat3 = (0, import_node_fs34.statSync)(fullPath);
+          const stat3 = (0, import_node_fs32.statSync)(fullPath);
           candidates.push({ name: f, path: fullPath, mtime: stat3.mtimeMs, size: stat3.size });
         } catch {
         }
@@ -20978,7 +20794,7 @@ function discoverPlans() {
   for (const entry of candidates.slice(0, MAX_PLAN_FILES)) {
     if (entry.size > MAX_PLAN_FILE_BYTES) continue;
     try {
-      const content = (0, import_node_fs34.readFileSync)(entry.path, "utf-8");
+      const content = (0, import_node_fs32.readFileSync)(entry.path, "utf-8");
       result.push({ name: entry.name, content });
     } catch {
     }
@@ -20993,12 +20809,12 @@ function discoverGuardDocs(rangeFiles2) {
     if (result.length >= MAX_SPEC_FILES) break;
     if (!GUARD_DOC_EXT.test(path)) continue;
     if (path.startsWith("/") || path.includes("..")) continue;
-    if (!(0, import_node_fs34.existsSync)(path)) continue;
+    if (!(0, import_node_fs32.existsSync)(path)) continue;
     try {
-      const stat3 = (0, import_node_fs34.statSync)(path);
+      const stat3 = (0, import_node_fs32.statSync)(path);
       if (stat3.size > MAX_PLAN_FILE_BYTES) continue;
       if (totalBytes + stat3.size > MAX_TOTAL_SPEC_BYTES) continue;
-      const content = (0, import_node_fs34.readFileSync)(path, "utf-8");
+      const content = (0, import_node_fs32.readFileSync)(path, "utf-8");
       if (!content) continue;
       result.push({ name: path, content });
       totalBytes += content.length;
@@ -21174,7 +20990,7 @@ async function mode(run2) {
 }
 
 // src/lib/fold.ts
-var import_node_fs35 = require("node:fs");
+var import_node_fs33 = require("node:fs");
 var import_node_path24 = require("node:path");
 var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "user",
@@ -21312,7 +21128,7 @@ function candidateRoots(repoRoot2) {
   const norm = repoRoot2.replace(/\\/g, "/").replace(/\/+$/, "");
   const out = [norm];
   try {
-    const real = import_node_fs35.realpathSync.native(norm).replace(/\\/g, "/").replace(/\/+$/, "");
+    const real = import_node_fs33.realpathSync.native(norm).replace(/\\/g, "/").replace(/\/+$/, "");
     if (real !== norm) out.push(real);
   } catch {
   }
@@ -21400,8 +21216,8 @@ function fold(transcriptPath, opts = {}) {
     }
   };
   try {
-    if (!(0, import_node_fs35.existsSync)(transcriptPath)) return result;
-    ingest((0, import_node_fs35.readFileSync)(transcriptPath, "utf8"), "agent");
+    if (!(0, import_node_fs33.existsSync)(transcriptPath)) return result;
+    ingest((0, import_node_fs33.readFileSync)(transcriptPath, "utf8"), "agent");
     result.coverage.complete = true;
   } catch {
     return result;
@@ -21412,19 +21228,19 @@ function fold(transcriptPath, opts = {}) {
       (0, import_node_path24.basename)(transcriptPath).replace(/\.jsonl$/, ""),
       "subagents"
     );
-    if ((0, import_node_fs35.existsSync)(sidecarDir)) {
+    if ((0, import_node_fs33.existsSync)(sidecarDir)) {
       const maxFiles = opts.maxSidecars ?? 200;
       const maxBytes = opts.maxSidecarBytes ?? 16 * 1024 * 1024;
       const found = [];
       const walk2 = (d, depth) => {
         if (depth > 4) return;
-        for (const e of (0, import_node_fs35.readdirSync)(d, { withFileTypes: true })) {
+        for (const e of (0, import_node_fs33.readdirSync)(d, { withFileTypes: true })) {
           const p = (0, import_node_path24.join)(d, e.name);
           if (e.isDirectory()) {
             walk2(p, depth + 1);
           } else if (e.name.startsWith("agent-") && e.name.endsWith(".jsonl")) {
             try {
-              const st = (0, import_node_fs35.statSync)(p);
+              const st = (0, import_node_fs33.statSync)(p);
               found.push({ path: p, size: st.size, mtimeMs: st.mtimeMs });
             } catch {
               result.coverage.malformed++;
@@ -21441,7 +21257,7 @@ function fold(transcriptPath, opts = {}) {
           continue;
         }
         try {
-          ingest((0, import_node_fs35.readFileSync)(f.path, "utf8"), "subagent");
+          ingest((0, import_node_fs33.readFileSync)(f.path, "utf8"), "subagent");
           bytes += f.size;
           result.coverage.subagentFiles++;
         } catch {
@@ -21476,7 +21292,7 @@ function fold(transcriptPath, opts = {}) {
 }
 function classifyUnobserved(path) {
   try {
-    const st = (0, import_node_fs35.statSync)(path);
+    const st = (0, import_node_fs33.statSync)(path);
     if (!st.isFile()) return "unreadable";
   } catch {
     return "unreadable";
@@ -21728,20 +21544,7 @@ async function evidence(run2) {
             widened_to: allForReview.length
           });
         }
-        const authorshipWasObservable = scoped.signal === "authored" && actionSummary?.transcript_windowed !== "orphaned";
-        if (!narrowingIsTrustworthy && recoveredScope.length === 0 && authorshipWasObservable) {
-          logEvent("authored_nothing_reviewable", {
-            touched: (actionSummary?.files_edited?.length ?? 0) + (actionSummary?.files_created?.length ?? 0),
-            candidates: allForReview.length
-          });
-        }
-        const baseForReview = chooseReviewScope({
-          narrowingIsTrustworthy,
-          scopedFiles: scoped.files,
-          recoveredScope,
-          allForReview,
-          authorshipWasObservable
-        });
+        const baseForReview = narrowingIsTrustworthy ? scoped.files : recoveredScope.length > 0 ? recoveredScope : allForReview;
         const recentForReview = narrowToRecent(baseForReview, baselineSessionId);
         if (!opts.skipStatic && isCodacyAvailable()) {
           let allScannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles]));
@@ -21793,20 +21596,20 @@ async function evidence(run2) {
 }
 
 // src/lib/cache-cleanup.ts
-var import_node_fs36 = require("node:fs");
+var import_node_fs34 = require("node:fs");
 var import_node_path25 = require("node:path");
 var CACHE_TTL_DAYS = 7;
 function pruneStaleCache() {
   try {
     const dir = projectPath(CACHE_DIR);
     const cutoff = Date.now() - CACHE_TTL_DAYS * 24 * 3600 * 1e3;
-    for (const entry of (0, import_node_fs36.readdirSync)(dir)) {
+    for (const entry of (0, import_node_fs34.readdirSync)(dir)) {
       if (!entry.startsWith("pending-")) continue;
       const path = (0, import_node_path25.join)(dir, entry);
       try {
-        const stat3 = (0, import_node_fs36.statSync)(path);
+        const stat3 = (0, import_node_fs34.statSync)(path);
         if (stat3.mtimeMs < cutoff) {
-          (0, import_node_fs36.unlinkSync)(path);
+          (0, import_node_fs34.unlinkSync)(path);
           logEvent("cache_entry_pruned", {
             path: entry,
             age_days: Math.round((Date.now() - stat3.mtimeMs) / 864e5)
@@ -21820,7 +21623,7 @@ function pruneStaleCache() {
 }
 
 // src/lib/context-files.ts
-var import_node_fs37 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_node_os5 = require("node:os");
 var MAX_CONTEXT_FILES = 10;
 var MAX_CONTEXT_FILE_BYTES = 10240;
@@ -21878,7 +21681,7 @@ function gatherContextFiles(contextPaths, deltaFiles, opts) {
       continue;
     }
     try {
-      const content = (0, import_node_fs37.readFileSync)(safePath, "utf8");
+      const content = (0, import_node_fs35.readFileSync)(safePath, "utf8");
       const bytes = Buffer.byteLength(content);
       if (bytes > MAX_CONTEXT_FILE_BYTES) {
         logEvent("context_file_skipped", { path: filePath, reason: "too_large", bytes });
@@ -21969,7 +21772,7 @@ async function repoContext(run2) {
 
 // src/lib/seed-runner.ts
 var import_promises14 = require("node:fs/promises");
-var import_node_fs38 = require("node:fs");
+var import_node_fs36 = require("node:fs");
 var import_node_path26 = require("node:path");
 var import_yaml4 = __toESM(require_dist());
 
@@ -22209,7 +22012,7 @@ function renderNodeMarkdown(candidate, nodeId, createdAt) {
   return fm;
 }
 async function runSeed(opts) {
-  if (!(0, import_node_fs38.existsSync)(STANDARD_FILE)) {
+  if (!(0, import_node_fs36.existsSync)(STANDARD_FILE)) {
     return { created: 0, failed: 0, skipped: "no_standard", candidates: [] };
   }
   let standardDoc;
@@ -22221,7 +22024,7 @@ async function runSeed(opts) {
   }
   const knowledgeSpec = standardDoc.knowledge_spec ?? {};
   let readmeContent;
-  if ((0, import_node_fs38.existsSync)("README.md")) {
+  if ((0, import_node_fs36.existsSync)("README.md")) {
     try {
       readmeContent = await (0, import_promises14.readFile)("README.md", "utf-8");
     } catch {
@@ -22229,7 +22032,7 @@ async function runSeed(opts) {
   }
   let claudeMdContent;
   for (const p of ["CLAUDE.md", ".claude/CLAUDE.md"]) {
-    if ((0, import_node_fs38.existsSync)(p)) {
+    if ((0, import_node_fs36.existsSync)(p)) {
       try {
         claudeMdContent = await (0, import_promises14.readFile)(p, "utf-8");
         break;
@@ -22253,7 +22056,7 @@ async function runSeed(opts) {
     return { created: 0, failed: 0, skipped: "no_candidates", candidates: [] };
   }
   const overviewPath = (0, import_node_path26.join)(MEMORY_DIR, "domain", "project-overview.md");
-  if ((0, import_node_fs38.existsSync)(overviewPath) && !opts.force) {
+  if ((0, import_node_fs36.existsSync)(overviewPath) && !opts.force) {
     return { created: 0, failed: 0, skipped: "already_seeded", candidates };
   }
   if (opts.dryRun) {
@@ -22308,7 +22111,7 @@ async function runSeed(opts) {
 }
 
 // src/commands/analyze/phases/08-memory-manifest.ts
-var import_node_fs39 = require("node:fs");
+var import_node_fs37 = require("node:fs");
 var import_node_path27 = require("node:path");
 async function memoryManifest(run2) {
   const { globals } = run2;
@@ -22320,8 +22123,8 @@ async function memoryManifest(run2) {
   try {
     await ensureMemoryDir();
     const seedMarker = (0, import_node_path27.join)(VERITY_DIR, ".seeded");
-    const hasStandard = (0, import_node_fs39.existsSync)(STANDARD_FILE);
-    const alreadyTried = (0, import_node_fs39.existsSync)(seedMarker);
+    const hasStandard = (0, import_node_fs37.existsSync)(STANDARD_FILE);
+    const alreadyTried = (0, import_node_fs37.existsSync)(seedMarker);
     if (hasStandard && !alreadyTried) {
       const preManifest = await buildManifest();
       if (preManifest.nodes.length === 0) {
@@ -22334,7 +22137,7 @@ async function memoryManifest(run2) {
             dryRun: false
           });
           if (seedResult.created > 0) {
-            (0, import_node_fs39.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created}
+            (0, import_node_fs37.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created}
 `);
             autoSeedNotice = `Seeded ${seedResult.created} knowledge node(s) from your existing Standard (one-time).`;
             logEvent("auto_seed_ran", {
@@ -22342,7 +22145,7 @@ async function memoryManifest(run2) {
               failed: seedResult.failed
             });
           } else if (seedResult.skipped === "already_seeded") {
-            (0, import_node_fs39.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
+            (0, import_node_fs37.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
 `);
           } else {
             logEvent("auto_seed_noop", {
@@ -22531,7 +22334,7 @@ async function workingMemory(run2) {
 }
 
 // src/lib/note-budget.ts
-var import_node_fs40 = require("node:fs");
+var import_node_fs38 = require("node:fs");
 var ADVISORY_BUDGET = { PASS: 1, WARN: 2 };
 var EPISODE_STALE_SECONDS = 30 * 60;
 var FRESH = { delivered: 0, tasksCompleted: 0, ts: 0 };
@@ -22553,9 +22356,9 @@ function advisoryBudgetSpent(episode, rawDecision) {
 }
 function readAdvisoryEpisode(sessionId) {
   const file = scopedFile(ADVISORY_EPISODE_FILE, sessionId);
-  if (!(0, import_node_fs40.existsSync)(file)) return null;
+  if (!(0, import_node_fs38.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs40.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs38.readFileSync)(file, "utf-8")) ?? {};
     const delivered = typeof o.delivered === "number" ? o.delivered : NaN;
     if (isNaN(delivered)) return null;
     return {
@@ -22569,8 +22372,8 @@ function readAdvisoryEpisode(sessionId) {
 }
 function writeAdvisoryEpisode(episode, sessionId) {
   try {
-    (0, import_node_fs40.mkdirSync)(VERITY_DIR, { recursive: true });
-    (0, import_node_fs40.writeFileSync)(
+    (0, import_node_fs38.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs38.writeFileSync)(
       scopedFile(ADVISORY_EPISODE_FILE, sessionId),
       JSON.stringify({ v: 1, ...episode })
     );
@@ -22887,14 +22690,14 @@ async function buildRequest(run2) {
 }
 
 // src/lib/offline.ts
-var import_node_fs41 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_crypto11 = require("node:crypto");
 function cacheRequest(body) {
   try {
-    (0, import_node_fs41.mkdirSync)(CACHE_DIR, { recursive: true });
+    (0, import_node_fs39.mkdirSync)(CACHE_DIR, { recursive: true });
     const suffix = (0, import_node_crypto11.randomBytes)(4).toString("hex");
     const filename = `pending-${Math.floor(Date.now() / 1e3)}-${suffix}.json`;
-    (0, import_node_fs41.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body)));
+    (0, import_node_fs39.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body)));
   } catch {
   }
 }
@@ -23013,7 +22816,7 @@ async function transmit(run2) {
 }
 
 // src/commands/analyze/phases/13-reconcile.ts
-var import_node_fs42 = require("node:fs");
+var import_node_fs40 = require("node:fs");
 var import_node_path29 = require("node:path");
 async function reconcile(run2) {
   const { actionSummary, allChanged, analyzable, baseline, baselineSessionId, codeDelta, contentHash, conversation, decision, foldResult, memory, memorySession, response, reviewable, securityFiles, turnId } = run2;
@@ -23043,7 +22846,7 @@ async function reconcile(run2) {
       const st = foldDossier(memorySession.d);
       openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line) => {
         try {
-          const src = (0, import_node_fs42.readFileSync)((0, import_node_path29.join)(repoRoot(), file), "utf8").split("\n");
+          const src = (0, import_node_fs40.readFileSync)((0, import_node_path29.join)(repoRoot(), file), "utf8").split("\n");
           const at = src[line - 1];
           return at === void 0 ? null : lineSha(at);
         } catch {
@@ -23707,10 +23510,6 @@ function registerAnalyzeCommand(program2) {
 }
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
-  if (!verityConfigured()) {
-    (0, import_node_fs43.writeSync)(2, '[verity] not set up in this project \u2014 run "verity init" first.\n');
-    process.exit(0);
-  }
   const run2 = createRun(opts, globals);
   installRunEvidence(run2);
   for (const [name, phase] of PIPELINE) {
@@ -23729,6 +23528,7 @@ async function runAnalyze(opts, globals) {
 }
 
 // src/commands/baseline.ts
+var import_node_fs41 = require("node:fs");
 function registerBaselineCommands(program2) {
   const baseline = program2.command("baseline").description("Manage the task-start working-tree baseline");
   baseline.command("capture").description("Snapshot the working tree at task start (used by SessionStart hook)").option("--session-id <id>", "Session id (overrides any value from stdin)").option("--source <source>", "Lifecycle hint: startup|resume|clear|compact").action(async (opts) => {
@@ -23737,16 +23537,7 @@ function registerBaselineCommands(program2) {
         process.chdir(repoRoot());
       } catch {
       }
-      if (!verityConfigured()) {
-        const how = isPluginInvocation() ? "Offer to run /verity:setup for the user." : "Offer to run `verity init` (or /verity-setup) for the user.";
-        process.stdout.write(
-          JSON.stringify({
-            hookSpecificOutput: {
-              hookEventName: "SessionStart",
-              additionalContext: `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
-            }
-          }) + "\n"
-        );
+      if (!(0, import_node_fs41.existsSync)(VERITY_DIR)) {
         process.exit(0);
       }
       let sessionId = opts.sessionId;
@@ -23762,9 +23553,6 @@ function registerBaselineCommands(program2) {
           }
         }
       }
-      if (deferredToPlugin("baseline capture", sessionId ?? process.env.CLAUDE_SESSION_ID ?? null)) {
-        process.exit(0);
-      }
       const authForScope = await resolveToken(program2.opts().token);
       const scopeToken = authForScope.ok ? authForScope.data.token : void 0;
       const scopeSession = sessionId || process.env.CLAUDE_SESSION_ID || void 0;
@@ -23789,7 +23577,7 @@ async function readStdin() {
 }
 
 // src/commands/review.ts
-var import_node_fs44 = require("node:fs");
+var import_node_fs42 = require("node:fs");
 function registerReviewCommand(program2) {
   program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars)").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
@@ -23808,7 +23596,7 @@ async function runReview(opts, globals) {
   const securityFiles = filterSecurity(allFiles);
   let staticResults;
   if (isCodacyAvailable()) {
-    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs44.existsSync)(f) || resolveFile(f) !== null);
+    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs42.existsSync)(f) || resolveFile(f) !== null);
     staticResults = runCodacyAnalysis(scannable);
   } else {
     staticResults = {
@@ -23834,10 +23622,10 @@ async function runReview(opts, globals) {
     const specPaths = opts.specs.split(",").map((f) => f.trim()).filter(Boolean);
     specs = [];
     for (const p of specPaths) {
-      if (!(0, import_node_fs44.existsSync)(p)) continue;
+      if (!(0, import_node_fs42.existsSync)(p)) continue;
       try {
-        const { readFileSync: readFileSync27 } = await import("node:fs");
-        const content = readFileSync27(p, "utf-8");
+        const { readFileSync: readFileSync26 } = await import("node:fs");
+        const content = readFileSync26(p, "utf-8");
         specs.push({ path: p, content: content.slice(0, 10240) });
       } catch {
       }
@@ -23894,7 +23682,7 @@ async function runReview(opts, globals) {
 }
 
 // src/commands/guard.ts
-var import_node_fs45 = require("node:fs");
+var import_node_fs43 = require("node:fs");
 var import_node_path30 = require("node:path");
 var GUARD_BLOCK_CAP = 2;
 var GUARD_ITER_FILE = (0, import_node_path30.join)(VERITY_DIR, ".guard-iteration");
@@ -23942,7 +23730,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs45.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs43.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -23962,10 +23750,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs45.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs43.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs45.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs43.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -23975,16 +23763,16 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs45.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs45.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs43.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs43.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs45.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs45.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs43.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs43.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
 }
 function registerGuardCommand(program2) {
-  program2.command("guard").description("Git-moment gate: review staged/to-push changes before a commit/push (PreToolUse hook)").option("--on <moments>", "Which git moments to gate: commit,push (default: the project config)").option("--json", "Output raw JSON response (debug)").action(async (opts) => {
+  program2.command("guard").description("Git-moment gate: review staged/to-push changes before a commit/push (PreToolUse hook)").option("--on <moments>", "Which git moments to gate: commit,push", "commit,push").option("--json", "Output raw JSON response (debug)").action(async (opts) => {
     const globals = program2.opts();
     try {
       await runGuard(opts, globals);
@@ -23994,14 +23782,13 @@ function registerGuardCommand(program2) {
   });
 }
 function resolveMomentRange(moment, frame, command, on) {
-  return moment === "pre-commit" ? stagedRange(frame) : resolvePushRange(frame, command, on);
+  return moment === "pre-commit" ? stagedRange() : resolvePushRange(frame, command, on);
 }
 function describeRange(range) {
   if (range.kind === "staged") return "staged";
-  if (range.kind === "merge") return `merge (${range.via})`;
-  if (range.kind === "nothing") return range.via === "already-published" ? "already published" : null;
-  const base = range.base && /^[0-9a-f]{40}$/.test(range.base) ? range.base.slice(0, 7) : range.base;
-  return base ? `${base}..${range.head} via ${range.via}` : `via ${range.via}`;
+  if (range.kind === "nothing" || !range.base) return null;
+  const base = /^[0-9a-f]{40}$/.test(range.base) ? range.base.slice(0, 7) : range.base;
+  return `${base}..${range.head} via ${range.via}`;
 }
 function matchFlagValue(command, flags) {
   const re = new RegExp(`(?<![\\w-])(?:${flags})(?:=|\\s+)('((?:[^'\\\\]|\\\\.)*)'|"((?:[^"\\\\]|\\\\.)*)"|([^\\s'"-][^\\s]*))`);
@@ -24050,7 +23837,7 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
   const securityFiles = filterSecurity(files);
   let staticResults;
   if (isCodacyAvailable()) {
-    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs45.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs43.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
     staticResults = runCodacyAnalysis(scannable);
   } else {
     staticResults = { tool: "@codacy/analysis-cli", findings: [], summary: { total_findings: 0, by_severity: {}, tools_run: [] } };
@@ -24123,10 +23910,8 @@ function emitAllowNotice(userMsg, agentMsg) {
   process.exit(0);
 }
 async function runGuard(opts, globals) {
-  const on = resolveGuardMoments(opts.on);
-  if (on.length === 0) process.exit(0);
+  const on = opts.on.split(",").map((s) => s.trim()).filter((s) => s === "commit" || s === "push");
   const { command, cwd, sessionId } = await readPreToolUseStdin();
-  if (deferredToPlugin("guard", sessionId)) process.exit(0);
   const moment = classifyCommand(command, on);
   if (!moment) process.exit(0);
   const verb = moment === "pre-commit" ? "commit" : "push";
@@ -24189,7 +23974,7 @@ async function runGuard(opts, globals) {
     upgradeToExcerpts(repoContext2, {
       readFile: (rel) => {
         try {
-          return (0, import_node_fs45.readFileSync)((0, import_node_path30.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
+          return (0, import_node_fs43.readFileSync)((0, import_node_path30.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
         } catch {
           return null;
         }
@@ -24410,7 +24195,7 @@ function registerIgnoreCommand(program2) {
 
 // src/commands/waive.ts
 var import_node_crypto12 = require("node:crypto");
-var import_node_fs46 = require("node:fs");
+var import_node_fs44 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -24439,7 +24224,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body.file = opts.file;
       try {
-        body.file_sha256 = (0, import_node_crypto12.createHash)("sha256").update((0, import_node_fs46.readFileSync)(opts.file)).digest("hex");
+        body.file_sha256 = (0, import_node_crypto12.createHash)("sha256").update((0, import_node_fs44.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -24464,7 +24249,7 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs51 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 var import_promises17 = require("node:fs/promises");
 var import_yaml6 = __toESM(require_dist());
 var import_node_path33 = require("node:path");
@@ -24546,7 +24331,7 @@ function printPhase(n, of, title, subtitle) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs48 = require("node:fs");
+var import_node_fs46 = require("node:fs");
 
 // src/lib/prereqs.ts
 var import_node_child_process13 = require("node:child_process");
@@ -24666,7 +24451,7 @@ var import_promises15 = require("node:fs/promises");
 
 // src/lib/gitignore.ts
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs47 = require("node:fs");
+var import_node_fs45 = require("node:fs");
 var VERITY_GITIGNORE_MARKER = "# Verity \u2014 machine-local state.";
 var SETTINGS_LOCAL_IGNORE_ENTRY = ".claude/settings.local.json";
 var VERITY_GITIGNORE_BLOCK = [
@@ -24699,7 +24484,7 @@ function semanticsHold() {
 function ensureVerityGitignore() {
   let content = "";
   try {
-    content = (0, import_node_fs47.readFileSync)(".gitignore", "utf-8");
+    content = (0, import_node_fs45.readFileSync)(".gitignore", "utf-8");
   } catch {
   }
   const hasMarker = content.includes(VERITY_GITIGNORE_MARKER);
@@ -24720,7 +24505,7 @@ function ensureVerityGitignore() {
       const sep2 = next === "" ? "" : next.endsWith("\n") ? "\n" : "\n\n";
       next = next + sep2 + VERITY_GITIGNORE_BLOCK;
     }
-    (0, import_node_fs47.writeFileSync)(".gitignore", next);
+    (0, import_node_fs45.writeFileSync)(".gitignore", next);
     return verified(needsRepair ? "repaired" : "added");
   } catch {
     return "failed";
@@ -24847,11 +24632,11 @@ async function buildReport() {
   const state = await readSetupState();
   const hooks = await checkAllVerityHooks();
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs48.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs46.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs48.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs46.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs48.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs46.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -24945,7 +24730,7 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/migrate.ts
-var import_node_fs49 = require("node:fs");
+var import_node_fs47 = require("node:fs");
 var import_node_path31 = require("node:path");
 var import_node_child_process15 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
@@ -24985,10 +24770,10 @@ async function runMigration(opts = {}) {
 function migrateProjectDir(root, actions) {
   const gateDir = (0, import_node_path31.join)(root, ".gate");
   const verityDir = (0, import_node_path31.join)(root, ".verity");
-  if ((0, import_node_fs49.existsSync)(gateDir) && !(0, import_node_fs49.existsSync)(verityDir)) {
+  if ((0, import_node_fs47.existsSync)(gateDir) && !(0, import_node_fs47.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs49.existsSync)(gateDir) && (0, import_node_fs49.existsSync)(verityDir)) {
+  if ((0, import_node_fs47.existsSync)(gateDir) && (0, import_node_fs47.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -25009,13 +24794,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs49.existsSync)(gateDir)) {
+    if ((0, import_node_fs47.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs49.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs47.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -25031,7 +24816,7 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs49.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs47.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
@@ -25040,9 +24825,9 @@ function migrateGlobalCredentials(home, actions) {
   if (!home) return;
   const gateCreds = (0, import_node_path31.join)(home, ".gate", "credentials");
   const verityCreds = (0, import_node_path31.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs49.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs49.existsSync)(verityCreds)) {
-    (0, import_node_fs49.mkdirSync)((0, import_node_path31.join)(home, ".verity"), { recursive: true });
+  if (!(0, import_node_fs47.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs47.existsSync)(verityCreds)) {
+    (0, import_node_fs47.mkdirSync)((0, import_node_path31.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -25065,7 +24850,7 @@ async function migrateLegacyHooks(root, actions) {
 }
 async function migrateClaudeMd(root, actions) {
   const claudeMd = (0, import_node_path31.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs49.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const hadLegacyBlock = (0, import_node_fs47.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -25077,7 +24862,7 @@ async function migrateClaudeMd(root, actions) {
 function migrateStandardFile(root, actions) {
   const gateMd = (0, import_node_path31.join)(root, "GATE.md");
   const verityMd = (0, import_node_path31.join)(root, "VERITY.md");
-  if (!(0, import_node_fs49.existsSync)(gateMd) || (0, import_node_fs49.existsSync)(verityMd)) return;
+  if (!(0, import_node_fs47.existsSync)(gateMd) || (0, import_node_fs47.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -25089,12 +24874,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs49.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs47.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
   const file = (0, import_node_path31.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs49.existsSync)(file)) return;
+  if (!(0, import_node_fs47.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -25142,14 +24927,14 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
   }
   if (toAppend.length > 0) {
     const sep2 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs49.writeFileSync)(verityCreds, verityContent + sep2 + toAppend.join("\n") + "\n");
+    (0, import_node_fs47.writeFileSync)(verityCreds, verityContent + sep2 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs49.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs47.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs49.readFileSync)(path, "utf-8");
+    return (0, import_node_fs47.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -25164,35 +24949,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs49.renameSync)(from, to);
+    (0, import_node_fs47.renameSync)(from, to);
   } catch (err) {
     if (err.code !== "EXDEV") throw err;
-    (0, import_node_fs49.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs49.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs47.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs47.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs49.renameSync)(from, to);
+    (0, import_node_fs47.renameSync)(from, to);
   } catch (err) {
     if (err.code !== "EXDEV") throw err;
-    (0, import_node_fs49.cpSync)(from, to);
-    (0, import_node_fs49.rmSync)(from, { force: true });
+    (0, import_node_fs47.cpSync)(from, to);
+    (0, import_node_fs47.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
     const srcDir = (0, import_node_path31.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs49.readdirSync)(srcDir)) {
+    for (const entry of (0, import_node_fs47.readdirSync)(srcDir)) {
       const rel = relDir ? (0, import_node_path31.join)(relDir, entry) : entry;
       const src = (0, import_node_path31.join)(gateDir, rel);
       const dest = (0, import_node_path31.join)(verityDir, rel);
-      if ((0, import_node_fs49.statSync)(src).isDirectory()) {
+      if ((0, import_node_fs47.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs49.existsSync)(dest)) {
-        (0, import_node_fs49.mkdirSync)((0, import_node_path31.dirname)(dest), { recursive: true });
-        (0, import_node_fs49.cpSync)(src, dest);
+      } else if (!(0, import_node_fs47.existsSync)(dest)) {
+        (0, import_node_fs47.mkdirSync)((0, import_node_path31.dirname)(dest), { recursive: true });
+        (0, import_node_fs47.cpSync)(src, dest);
         copied++;
       }
     }
@@ -25203,20 +24988,20 @@ function carryLegacyContents(gateDir, verityDir) {
 async function needsMigration(root = repoRoot()) {
   const gateDir = (0, import_node_path31.join)(root, ".gate");
   const verityDir = (0, import_node_path31.join)(root, ".verity");
-  if ((0, import_node_fs49.existsSync)(gateDir) && !(0, import_node_fs49.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs49.existsSync)(gateDir) && (0, import_node_fs49.existsSync)(verityDir)) {
-    if ((0, import_node_fs49.existsSync)((0, import_node_path31.join)(gateDir, "credentials")) && !(0, import_node_fs49.existsSync)((0, import_node_path31.join)(verityDir, "credentials"))) {
+  if ((0, import_node_fs47.existsSync)(gateDir) && !(0, import_node_fs47.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs47.existsSync)(gateDir) && (0, import_node_fs47.existsSync)(verityDir)) {
+    if ((0, import_node_fs47.existsSync)((0, import_node_path31.join)(gateDir, "credentials")) && !(0, import_node_fs47.existsSync)((0, import_node_path31.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs49.existsSync)((0, import_node_path31.join)(gateDir, "memory")) && !(0, import_node_fs49.existsSync)((0, import_node_path31.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs47.existsSync)((0, import_node_path31.join)(gateDir, "memory")) && !(0, import_node_fs47.existsSync)((0, import_node_path31.join)(verityDir, "memory"))) {
       return true;
     }
   }
   const claudeMd = (0, import_node_path31.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs49.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  if ((0, import_node_fs47.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs49.existsSync)((0, import_node_path31.join)(root, "GATE.md")) && !(0, import_node_fs49.existsSync)((0, import_node_path31.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs47.existsSync)((0, import_node_path31.join)(root, "GATE.md")) && !(0, import_node_fs47.existsSync)((0, import_node_path31.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -25491,7 +25276,7 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 
 // src/lib/remote-config.ts
-var import_node_fs50 = require("node:fs");
+var import_node_fs48 = require("node:fs");
 var import_promises16 = require("node:fs/promises");
 var import_node_path32 = require("node:path");
 var import_yaml5 = __toESM(require_dist());
@@ -25538,7 +25323,7 @@ async function adoptRemoteSetup(found, opts) {
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs50.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs48.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -25696,7 +25481,7 @@ function resolveDataDir2() {
     // local dev: running from repo root
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs51.existsSync)((0, import_node_path33.join)(candidate, "skills"))) {
+    if ((0, import_node_fs49.existsSync)((0, import_node_path33.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -25712,7 +25497,7 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs51.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs49.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
         if (e.isDirectory()) walk2((0, import_node_path33.join)(d, e.name), rel);
         else if (e.isFile()) out.push(rel);
@@ -25904,7 +25689,7 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs51.existsSync)(configPath) || !(0, import_node_fs51.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs49.existsSync)(configPath) || !(0, import_node_fs49.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
@@ -25998,125 +25783,14 @@ async function handoffToSetup(enabled, claudeInstalled) {
   }
   await reportPhaseTwo(startedAt);
 }
-async function installSkills(force, step) {
-  step("Installing skills");
-  const dataDir = resolveDataDir2();
-  const skillsSource = (0, import_node_path33.join)(dataDir, "skills");
-  const skillsDest = ".claude/skills";
-  let skillsInstalled = 0;
-  for (const skill of SKILLS) {
-    const src = (0, import_node_path33.join)(skillsSource, skill);
-    const dest = (0, import_node_path33.join)(skillsDest, skill);
-    if (!(0, import_node_fs51.existsSync)(src)) {
-      printWarn(`  Skill data not found: ${skill}`);
-      continue;
-    }
-    if ((0, import_node_fs51.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
-      skillsInstalled++;
-      continue;
-    }
-    await copyDir(src, dest);
-    skillsInstalled++;
-  }
-  printInfo(`  ${skillsInstalled}/${SKILLS.length} skills installed to .claude/skills/ \u2713`);
-}
-async function adoptPluginWiring(gitMoments, moments) {
-  const settings = await readSettings();
-  const stripped = removeVerityHooks(settings);
-  const hadAny = JSON.stringify(settings.hooks ?? {}) !== JSON.stringify(stripped.hooks ?? {});
-  if (hadAny) {
-    await writeSettings(stripped);
-    printInfo("  Removed this project's Verity hooks from .claude/settings.json \u2713");
-    printInfo("    The plugin wires them now, so each turn is reviewed once.");
-  } else {
-    printInfo("  Wired by the Verity plugin \u2014 nothing to reconcile here \u2713");
-  }
-  printInfo(`  Pre-commit gate: ${gitMoments.includes("commit") ? "on" : "off"}`);
-  printInfo(`  Pre-push/PR gate: ${gitMoments.includes("push") ? "on" : "off"}`);
-  printInfo("  Stop + intent + baseline + compact + session-end: always on \u2713");
-  if (!moments.includes("stop")) {
-    printWarn("  Turning the Stop review off is not yet supported under the plugin \u2014 it stays on.");
-  }
-}
-async function reconcileOwnWiring(moments) {
-  await applyMomentSelection(moments);
-  const hookStatus = await checkAllVerityHooks();
-  printInfo(`  Stop (verity analyze): ${hookStatus.stop ? "on" : "off"}`);
-  printInfo(`  Pre-commit gate: ${hookStatus.guardOn.includes("commit") ? "on" : "off"}`);
-  printInfo(`  Pre-push/PR gate: ${hookStatus.guardOn.includes("push") ? "on" : "off"}`);
-  printInfo("  Intent + baseline + compact + session-end: always on \u2713");
-  if (!hookStatus.stop && hookStatus.guardOn.length === 0) {
-    printWarn("  No analysis moment is active \u2014 code changes will NOT be reviewed.");
-    printWarn("  Enable one: verity hooks install --moments stop");
-  }
-}
-async function checkPrerequisites(step) {
-  step("Checking prerequisites");
-  const prereqs = await checkPrereqs({ install: true });
-  for (const c of prereqs.checks) {
-    if (c.status === "ok") {
-      if (c.justInstalled) continue;
-      printInfo(`  ${c.label} ${c.detail} \u2713`);
-    } else {
-      printWarn(`  ${c.label}: ${c.detail}`);
-      if (c.remedy) printWarn(`    ${c.remedy}`);
-    }
-  }
-  if (prereqs.blocked) {
-    printError("A required prerequisite is missing \u2014 cannot continue.");
-    process.exit(1);
-  }
-  return prereqs.checks.some((c) => c.id === "claude" && c.status === "ok");
-}
-async function scaffoldProject(step, defaultsOnly) {
-  step("Knowledge base, .gitignore and CLAUDE.md");
-  await (0, import_promises17.mkdir)(VERITY_DIR, { recursive: true });
-  await ensureMemoryDir();
-  const ignoreResult = ensureVerityGitignore();
-  if (ignoreResult === "failed") {
-    printWarn("  .gitignore: could not write the Verity block \u2014 add it manually");
-    printWarn("    (.verity/ holds copies of analyzed files, including any secret the gate flagged)");
-  } else if (ignoreResult === "conflict") {
-    printWarn("  .gitignore: the Verity block is in place but git still ignores .verity/standard.yaml");
-    printWarn("    Something outside this file covers it \u2014 a global (~/.gitignore) or nested");
-    printWarn("    .gitignore, or a pattern we do not recognise. Check: git check-ignore -v .verity/standard.yaml");
-    printWarn("    Until it is fixed, the Standard and the knowledge graph cannot be committed.");
-  } else if (ignoreResult === "repaired") {
-    printInfo("  .gitignore: rewrote `.verity/` to `.verity/*` so the standard stays committable \u2713");
-  } else {
-    printInfo(`  .gitignore: Verity block ${ignoreResult === "added" ? "added" : "already covered"} \u2713`);
-  }
-  const tracked = committedVerityState();
-  if (tracked.length > 0) {
-    printWarn(`  ${tracked.length} Verity state file(s) are tracked in git (e.g. ${tracked[0]}).`);
-    const untrack = defaultsOnly ? false : await promptYes("  Untrack them now (files stay on disk)? [Y/n] ", { nonInteractive: false });
-    if (untrack) {
-      const result = untrackVerityState();
-      if (result === "untracked") printInfo("  Untracked (staged) \u2014 commit to finish \u2713");
-      else if (result === "failed") printWarn('  Could not untrack \u2014 run "git rm -r --cached .verity" manually');
-    } else {
-      printWarn("  Left tracked. Fix with: git rm -r --cached .verity && git add .verity/standard.yaml .verity/memory");
-    }
-  }
-  try {
-    await ensureClaudeMdPointer();
-    printInfo("  CLAUDE.md instructions \u2713");
-  } catch (err) {
-    printWarn(`  Could not update CLAUDE.md: ${err.message}`);
-  }
-}
 function registerInitCommand(program2) {
-  program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").option(
-    "--plugin-mode",
-    "The Claude Code plugin owns the skills and hooks: install neither, and remove any this project already has"
-  ).option("--no-adopt", "Don't offer this repository's existing Standard from the service; synthesize a new one").action(async (opts) => {
+  program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").option("--no-adopt", "Don't offer this repository's existing Standard from the service; synthesize a new one").action(async (opts) => {
     const force = opts.force ?? false;
     const wantsHandoff = opts.setup !== false;
     const wantsAdopt = opts.adopt !== false;
     const defaultsOnly = (opts.yes ?? false) || !interactive();
-    const pluginMode = opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs51.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs49.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -26147,13 +25821,43 @@ function registerInitCommand(program2) {
       }
       console.log("");
     }
-    const claudeInstalled = await checkPrerequisites(step);
+    step("Checking prerequisites");
+    const prereqs = await checkPrereqs({ install: true });
+    for (const c of prereqs.checks) {
+      if (c.status === "ok") {
+        if (c.justInstalled) continue;
+        printInfo(`  ${c.label} ${c.detail} \u2713`);
+      } else {
+        printWarn(`  ${c.label}: ${c.detail}`);
+        if (c.remedy) printWarn(`    ${c.remedy}`);
+      }
+    }
+    if (prereqs.blocked) {
+      printError("A required prerequisite is missing \u2014 cannot continue.");
+      process.exit(1);
+    }
+    const claudeInstalled = prereqs.checks.some((c) => c.id === "claude" && c.status === "ok");
     console.log("");
-    if (pluginMode) {
-      printInfo("Skipping skills \u2014 the Verity plugin provides them, namespaced as /verity:<name>.");
-    } else {
-      await installSkills(force, step);
+    step("Installing skills");
+    const dataDir = resolveDataDir2();
+    const skillsSource = (0, import_node_path33.join)(dataDir, "skills");
+    const skillsDest = ".claude/skills";
+    let skillsInstalled = 0;
+    for (const skill of SKILLS) {
+      const src = (0, import_node_path33.join)(skillsSource, skill);
+      const dest = (0, import_node_path33.join)(skillsDest, skill);
+      if (!(0, import_node_fs49.existsSync)(src)) {
+        printWarn(`  Skill data not found: ${skill}`);
+        continue;
+      }
+      if ((0, import_node_fs49.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+        skillsInstalled++;
+        continue;
+      }
+      await copyDir(src, dest);
+      skillsInstalled++;
     }
+    printInfo(`  ${skillsInstalled}/${SKILLS.length} skills installed to .claude/skills/ \u2713`);
     step(defaultsOnly ? "Setup answers (defaults)" : "Your setup answers");
     const previous = await readSetupState();
     const answers = await askSetupQuestions(defaultsOnly, previous);
@@ -26161,20 +25865,54 @@ function registerInitCommand(program2) {
     if (defaultsOnly) {
       printInfo(`  intensity: ${intensity} \xB7 moments: ${moments.join(", ") || "none"} (no questions asked)`);
     }
-    await scaffoldProject(step, defaultsOnly);
+    step("Knowledge base, .gitignore and CLAUDE.md");
+    await (0, import_promises17.mkdir)(VERITY_DIR, { recursive: true });
+    await ensureMemoryDir();
+    const ignoreResult = ensureVerityGitignore();
+    if (ignoreResult === "failed") {
+      printWarn("  .gitignore: could not write the Verity block \u2014 add it manually");
+      printWarn("    (.verity/ holds copies of analyzed files, including any secret the gate flagged)");
+    } else if (ignoreResult === "conflict") {
+      printWarn("  .gitignore: the Verity block is in place but git still ignores .verity/standard.yaml");
+      printWarn("    Something outside this file covers it \u2014 a global (~/.gitignore) or nested");
+      printWarn("    .gitignore, or a pattern we do not recognise. Check: git check-ignore -v .verity/standard.yaml");
+      printWarn("    Until it is fixed, the Standard and the knowledge graph cannot be committed.");
+    } else if (ignoreResult === "repaired") {
+      printInfo("  .gitignore: rewrote `.verity/` to `.verity/*` so the standard stays committable \u2713");
+    } else {
+      printInfo(`  .gitignore: Verity block ${ignoreResult === "added" ? "added" : "already covered"} \u2713`);
+    }
+    const tracked = committedVerityState();
+    if (tracked.length > 0) {
+      printWarn(`  ${tracked.length} Verity state file(s) are tracked in git (e.g. ${tracked[0]}).`);
+      const untrack = defaultsOnly ? false : await promptYes("  Untrack them now (files stay on disk)? [Y/n] ", { nonInteractive: false });
+      if (untrack) {
+        const result = untrackVerityState();
+        if (result === "untracked") printInfo("  Untracked (staged) \u2014 commit to finish \u2713");
+        else if (result === "failed") printWarn('  Could not untrack \u2014 run "git rm -r --cached .verity" manually');
+      } else {
+        printWarn("  Left tracked. Fix with: git rm -r --cached .verity && git add .verity/standard.yaml .verity/memory");
+      }
+    }
+    try {
+      await ensureClaudeMdPointer();
+      printInfo("  CLAUDE.md instructions \u2713");
+    } catch (err) {
+      printWarn(`  Could not update CLAUDE.md: ${err.message}`);
+    }
     const globalVerityDir = (0, import_node_path33.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises17.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
-    const gitMoments = [
-      ...moments.includes("pre-commit") ? ["commit"] : [],
-      ...moments.includes("pre-push") ? ["push"] : []
-    ];
-    writeProjectConfig({ git_moments: gitMoments });
-    if (pluginMode) {
-      await adoptPluginWiring(gitMoments, moments);
-    } else {
-      await reconcileOwnWiring(moments);
+    await applyMomentSelection(moments);
+    const hookStatus = await checkAllVerityHooks();
+    printInfo(`  Stop (verity analyze): ${hookStatus.stop ? "on" : "off"}`);
+    printInfo(`  Pre-commit gate: ${hookStatus.guardOn.includes("commit") ? "on" : "off"}`);
+    printInfo(`  Pre-push/PR gate: ${hookStatus.guardOn.includes("push") ? "on" : "off"}`);
+    printInfo(`  Intent + baseline + compact + session-end: always on \u2713`);
+    if (!hookStatus.stop && hookStatus.guardOn.length === 0) {
+      printWarn("  No analysis moment is active \u2014 code changes will NOT be reviewed.");
+      printWarn("  Enable one: verity hooks install --moments stop");
     }
     console.log("");
     step("Sign in to Verity (optional)");
@@ -26217,7 +25955,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs51.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs49.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -26244,7 +25982,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.32.0-experimental.68ae2ee" : "dev"
+          cli_version: true ? "0.32.0-experimental.f0746f7" : "dev"
         }
       });
     } catch (err) {
@@ -26253,13 +25991,9 @@ function registerInitCommand(program2) {
     console.log("");
     printInfo("This machine is set up.");
     console.log("");
-    if (pluginMode) {
-      console.log("    (skills and hooks come from the Verity plugin, not this project)");
-    } else {
-      console.log("    .claude/skills/verity-*/       8 skills (setup, analyze, status, feedback,");
-      console.log("                                   learn, memory, insights, reflect)");
-      console.log("    .claude/settings.json          hooks, reconciled to your chosen moments");
-    }
+    console.log("    .claude/skills/verity-*/       8 skills (setup, analyze, status, feedback,");
+    console.log("                                   learn, memory, insights, reflect)");
+    console.log("    .claude/settings.json          hooks, reconciled to your chosen moments");
     console.log("    .verity/memory/                knowledge base (commit to git)");
     console.log("    .verity/standard.yaml          the Standard the gate enforces");
     console.log("    .codacy/codacy.config.json     static-analysis patterns (validated)");
@@ -26283,7 +26017,7 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs52 = require("node:fs");
+var import_node_fs50 = require("node:fs");
 var import_node_path34 = require("node:path");
 var SKILL_NAMES = [
   "verity-setup",
@@ -26304,10 +26038,10 @@ function registerUninstallCommand(program2) {
     const skillsRoot = projectPath(".claude/skills");
     for (const name of SKILL_NAMES) {
       const dir = (0, import_node_path34.join)(skillsRoot, name);
-      if ((0, import_node_fs52.existsSync)(dir)) {
+      if ((0, import_node_fs50.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name}/`,
-          apply: () => (0, import_node_fs52.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs50.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -26321,24 +26055,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs52.existsSync)(verityDir)) {
+    if ((0, import_node_fs50.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs52.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs50.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs52.existsSync)(verityMd)) {
+      if ((0, import_node_fs50.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs52.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs50.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs52.existsSync)(path) && (0, import_node_fs52.statSync)(path).isDirectory() && (0, import_node_fs52.readdirSync)(path).length === 0) {
-        (0, import_node_fs52.rmdirSync)(path);
+      if ((0, import_node_fs50.existsSync)(path) && (0, import_node_fs50.statSync)(path).isDirectory() && (0, import_node_fs50.readdirSync)(path).length === 0) {
+        (0, import_node_fs50.rmdirSync)(path);
       }
     };
     actions.push({
@@ -26350,10 +26084,10 @@ function registerUninstallCommand(program2) {
     });
     const home = process.env.HOME ?? "";
     const globalVerityDir = (0, import_node_path34.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs52.existsSync)(globalVerityDir)) {
+    if (purgeGlobal && (0, import_node_fs50.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs52.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs50.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -26547,7 +26281,7 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs53 = require("node:fs");
+var import_node_fs51 = require("node:fs");
 var import_node_path35 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
@@ -26585,11 +26319,11 @@ function registerResetCommand(program2) {
     }
     const cacheDir = projectPath(CACHE_DIR);
     let purged = 0;
-    if ((0, import_node_fs53.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs53.readdirSync)(cacheDir)) {
+    if ((0, import_node_fs51.existsSync)(cacheDir)) {
+      for (const entry of (0, import_node_fs51.readdirSync)(cacheDir)) {
         if (entry.startsWith("pending-")) {
           try {
-            (0, import_node_fs53.unlinkSync)((0, import_node_path35.join)(cacheDir, entry));
+            (0, import_node_fs51.unlinkSync)((0, import_node_path35.join)(cacheDir, entry));
             purged++;
           } catch {
           }
@@ -26604,19 +26338,19 @@ function registerResetCommand(program2) {
       projectPath(`${VERITY_DIR}/.last-analysis`)
     ];
     for (const file of filesToClear) {
-      if ((0, import_node_fs53.existsSync)(file)) {
+      if ((0, import_node_fs51.existsSync)(file)) {
         try {
-          (0, import_node_fs53.writeFileSync)(file, "");
+          (0, import_node_fs51.writeFileSync)(file, "");
         } catch {
         }
       }
     }
     if (opts.all) {
       const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs53.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs53.readdirSync)(logsDir)) {
+      if ((0, import_node_fs51.existsSync)(logsDir)) {
+        for (const entry of (0, import_node_fs51.readdirSync)(logsDir)) {
           try {
-            (0, import_node_fs53.unlinkSync)((0, import_node_path35.join)(logsDir, entry));
+            (0, import_node_fs51.unlinkSync)((0, import_node_path35.join)(logsDir, entry));
           } catch {
           }
         }
@@ -26924,8 +26658,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.32.0-experimental.68ae2ee").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.32.0-experimental.68ae2ee");
+program.name("verity").description("CLI for Verity quality gate service").version("0.32.0-experimental.f0746f7").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.32.0-experimental.f0746f7");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();