@codacy/verity-cli 0.32.0-experimental.f0746f7 → 0.32.0

package/bin/verity.js

@@ -10405,6 +10405,8 @@ var MAX_INTENT_CHARS = 2e3;
 var SNAPSHOT_DIR = `${VERITY_DIR}/.snapshot`;
 var BASELINE_DIR = `${VERITY_DIR}/.baseline`;
 var CONVERSATION_BUFFER_FILE = `${VERITY_DIR}/.conversation-buffer`;
+var PLUGIN_MARKER_FILE = `${VERITY_DIR}/.plugin-active`;
+var PROJECT_CONFIG_FILE = `${VERITY_DIR}/config.json`;
 var CONVERSATION_MAX_ENTRIES = 10;
 var CONVERSATION_WINDOW_MINUTES = 15;
 var MAX_FINDINGS = 25;
@@ -10507,7 +10509,7 @@ var SECURITY_PATTERNS = [
   /Dockerfile/
 ];
 var PROD_SERVICE_URL = "https://ofcamwrjwrkazqvdchko.supabase.co/functions/v1";
-var DEFAULT_SERVICE_URL = "https://wukeddyzpijoegyajtnc.supabase.co/functions/v1".length > 0 ? "https://wukeddyzpijoegyajtnc.supabase.co/functions/v1" : PROD_SERVICE_URL;
+var DEFAULT_SERVICE_URL = "".length > 0 ? "" : PROD_SERVICE_URL;
 var GITHUB_CLIENT_ID = "Iv23li88HxAi3ZrbYzWh";
 var GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
 var GITHUB_ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
@@ -10831,16 +10833,9 @@ function splitLines(s) {
 }
 var SHA_RE = /^[0-9a-f]{40}$/;
 function readBaselineSha() {
-  if (!(0, import_node_fs3.existsSync)(BASELINE_SHA_FILE)) return null;
-  let sha;
-  try {
-    sha = (0, import_node_fs3.readFileSync)(BASELINE_SHA_FILE, "utf-8").trim();
-  } catch {
-    return null;
-  }
-  if (!SHA_RE.test(sha)) return null;
-  const reachable = execGit(`git cat-file -e ${sha}^{commit} 2>/dev/null && echo ok`) === "ok";
-  if (!reachable) {
+  const sha = readRawBaselineSha();
+  if (sha === null) return null;
+  if (!commitResolves(sha)) {
     try {
       (0, import_node_fs3.unlinkSync)(BASELINE_SHA_FILE);
     } catch {
@@ -10849,6 +10844,16 @@ function readBaselineSha() {
   }
   return sha;
 }
+function readRawBaselineSha() {
+  if (!(0, import_node_fs3.existsSync)(BASELINE_SHA_FILE)) return null;
+  let sha;
+  try {
+    sha = (0, import_node_fs3.readFileSync)(BASELINE_SHA_FILE, "utf-8").trim();
+  } catch {
+    return null;
+  }
+  return SHA_RE.test(sha) ? sha : null;
+}
 function writeBaselineSha(sha) {
   if (!SHA_RE.test(sha)) return;
   try {
@@ -10857,6 +10862,25 @@ function writeBaselineSha(sha) {
   } catch {
   }
 }
+function commitObjectExists(sha) {
+  if (!SHA_RE.test(sha)) return false;
+  return execGit(`git cat-file -e ${sha}^{commit} 2>/dev/null && echo ok`) === "ok";
+}
+function committedSinceRewrite(oldSha) {
+  if (!SHA_RE.test(oldSha)) return [];
+  const newLocal = new Set(splitLines(execGit(`git rev-list HEAD --not ${oldSha} --remotes`)));
+  if (newLocal.size === 0) return [];
+  const files = /* @__PURE__ */ new Set();
+  for (const line of splitLines(execGit(`git cherry ${oldSha} HEAD`))) {
+    const sp = line.indexOf(" ");
+    if (sp < 0) continue;
+    const mark = line.slice(0, sp);
+    const sha = line.slice(sp + 1).trim();
+    if (mark !== "+" || !newLocal.has(sha)) continue;
+    for (const f of splitLines(execGit(`git diff-tree --no-commit-id --name-only -r ${sha}`))) files.add(f);
+  }
+  return [...files].filter((f) => !isVerityOwnedPath(f));
+}
 var VERITY_OWNED_PREFIXES = [".verity/", ".gate/", ".codacy/"];
 var VERITY_OWNED_FILES = ["VERITY.md"];
 function isVerityOwnedPath(file) {
@@ -10869,6 +10893,7 @@ function getChangedFiles() {
   for (const f of splitLines(execGit("git diff --name-only HEAD"))) sets.add(f);
   for (const f of splitLines(execGit("git diff --name-only --cached"))) sets.add(f);
   for (const f of splitLines(execGit("git ls-files --others --exclude-standard"))) sets.add(f);
+  const rawBaseline = readRawBaselineSha();
   const baseline = readBaselineSha();
   if (baseline) {
     const committed = splitLines(execGit(`git diff --name-only ${baseline}..HEAD`));
@@ -10876,6 +10901,13 @@ function getChangedFiles() {
       hasRecentCommitFiles = true;
       for (const f of committed) sets.add(f);
     }
+  } else if (rawBaseline && commitObjectExists(rawBaseline)) {
+    const committed = committedSinceRewrite(rawBaseline);
+    logEvent("baseline_rewritten", { recovered: committed.length });
+    if (committed.length > 0) {
+      hasRecentCommitFiles = true;
+      for (const f of committed) sets.add(f);
+    }
   } else {
     const headTimestamp = parseInt(execGit("git log -1 --format=%ct HEAD"), 10) || 0;
     const commitAge = Math.floor(Date.now() / 1e3) - headTimestamp;
@@ -12701,9 +12733,155 @@ async function applyMomentSelection(moments) {
   return settings;
 }
 
+// src/lib/project-config.ts
+var import_node_fs4 = require("node:fs");
+var DEFAULTS = { git_moments: [] };
+function isMoment(value) {
+  return value === "commit" || value === "push";
+}
+function parseMoments(raw) {
+  return [...new Set(raw.split(",").map((s) => s.trim()).filter(isMoment))];
+}
+function readProjectConfig() {
+  try {
+    if (!(0, import_node_fs4.existsSync)(PROJECT_CONFIG_FILE)) return DEFAULTS;
+    const raw = JSON.parse((0, import_node_fs4.readFileSync)(PROJECT_CONFIG_FILE, "utf-8"));
+    const moments = Array.isArray(raw.git_moments) ? raw.git_moments.filter(isMoment) : [];
+    return { git_moments: [...new Set(moments)] };
+  } catch {
+    return DEFAULTS;
+  }
+}
+function writeProjectConfig(patch) {
+  const next = { ...readProjectConfig(), ...patch };
+  (0, import_node_fs4.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs4.writeFileSync)(PROJECT_CONFIG_FILE, JSON.stringify(next, null, 2) + "\n");
+  return next;
+}
+function resolveGuardMoments(explicit) {
+  if (explicit !== void 0) return parseMoments(explicit);
+  return readProjectConfig().git_moments;
+}
+
+// src/lib/plugin-ownership.ts
+var import_node_fs6 = require("node:fs");
+
+// src/lib/stderr-log.ts
+var import_node_fs5 = require("node:fs");
+var TOKEN_RE2 = /verity_[0-9a-f]{16,}/g;
+var ANSI_RE = /\u001b\[[0-?]*[ -/]*[@-~]/g;
+function scrub(s) {
+  return s.replace(TOKEN_RE2, "verity_***REDACTED***").replace(ANSI_RE, "");
+}
+var installed = false;
+var wroteBanner = false;
+var banner = "";
+function append(text) {
+  try {
+    const dir = projectPath(DEBUG_LOG_DIR);
+    const file = projectPath(STDERR_LOG_FILE);
+    (0, import_node_fs5.mkdirSync)(dir, { recursive: true });
+    rotateIfNeeded(file);
+    (0, import_node_fs5.appendFileSync)(file, text);
+  } catch {
+  }
+}
+function ensureBanner() {
+  if (wroteBanner) return;
+  wroteBanner = true;
+  append(banner);
+}
+function installStderrLog(cmd, argv, version) {
+  if (installed || !isDebugEnabled()) return;
+  installed = true;
+  banner = `
+\u2501\u2501 verity ${cmd} \xB7 ${(/* @__PURE__ */ new Date()).toISOString()} \xB7 pid ${process.pid}
+   v${version} \xB7 ${process.cwd()}
+   argv: ${scrub(argv.join(" "))}
+`;
+  const original = process.stderr.write.bind(process.stderr);
+  const tee = (...args) => {
+    const result = original(...args);
+    try {
+      const chunk = args[0];
+      const text = typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf-8") : String(chunk);
+      ensureBanner();
+      append(scrub(text));
+    } catch {
+    }
+    return result;
+  };
+  process.stderr.write = tee;
+}
+function logToFileOnly(text) {
+  if (!installed) return;
+  ensureBanner();
+  append(text.endsWith("\n") ? text : `${text}
+`);
+}
+
+// src/lib/plugin-ownership.ts
+var MARKER_TTL_SECONDS = 24 * 60 * 60;
+function isPluginInvocation() {
+  return !!process.env.VERITY_PLUGIN_ROOT;
+}
+function readMarker() {
+  try {
+    if (!(0, import_node_fs6.existsSync)(PLUGIN_MARKER_FILE)) return null;
+    const raw = JSON.parse((0, import_node_fs6.readFileSync)(PLUGIN_MARKER_FILE, "utf-8"));
+    const pluginRoot = typeof raw.plugin_root === "string" ? raw.plugin_root : "";
+    if (!pluginRoot) return null;
+    return {
+      session_id: typeof raw.session_id === "string" ? raw.session_id : null,
+      plugin_root: pluginRoot,
+      version: typeof raw.version === "string" ? raw.version : null,
+      ts: typeof raw.ts === "number" ? raw.ts : 0
+    };
+  } catch {
+    return null;
+  }
+}
+function recordPluginOwnership(sessionId) {
+  const pluginRoot = process.env.VERITY_PLUGIN_ROOT;
+  if (!pluginRoot) return;
+  try {
+    (0, import_node_fs6.mkdirSync)(VERITY_DIR, { recursive: true });
+    const marker = {
+      session_id: sessionId,
+      plugin_root: pluginRoot,
+      version: process.env.VERITY_PLUGIN_VERSION || null,
+      ts: Math.floor(Date.now() / 1e3)
+    };
+    (0, import_node_fs6.writeFileSync)(PLUGIN_MARKER_FILE, JSON.stringify(marker));
+  } catch {
+  }
+}
+function shouldDeferToPlugin(sessionId) {
+  if (isPluginInvocation()) {
+    recordPluginOwnership(sessionId);
+    return false;
+  }
+  const marker = readMarker();
+  if (!marker) return false;
+  if (!(0, import_node_fs6.existsSync)(marker.plugin_root)) return false;
+  if (sessionId && marker.session_id) return sessionId === marker.session_id;
+  return Math.floor(Date.now() / 1e3) - marker.ts < MARKER_TTL_SECONDS;
+}
+function pluginActiveHere() {
+  const marker = readMarker();
+  return !!marker && (0, import_node_fs6.existsSync)(marker.plugin_root);
+}
+function deferredToPlugin(command, sessionId) {
+  if (!shouldDeferToPlugin(sessionId)) return false;
+  logToFileOnly(
+    `${command}: the Verity Claude Code plugin owns this session's hooks \u2014 standing down so the turn is not gated twice. Remove the duplicate settings.json hooks with \`verity init --plugin-mode\`.`
+  );
+  return true;
+}
+
 // src/commands/hooks.ts
 var ALL_MOMENTS = ["stop", "pre-commit", "pre-push"];
-function parseMoments(raw) {
+function parseMoments2(raw) {
   const seen = /* @__PURE__ */ new Set();
   for (const part of raw.split(",").map((s) => s.trim()).filter(Boolean)) {
     if (ALL_MOMENTS.includes(part)) seen.add(part);
@@ -12715,7 +12893,22 @@ function registerHooksCommands(program2) {
   hooks.command("install").description("Install Verity hooks into Claude Code settings").option("--force", "Overwrite existing Verity hooks").option("--moments <list>", "Reconcile to exactly these moments: stop,pre-commit,pre-push").action(async (opts) => {
     const force = opts.force ?? false;
     if (opts.moments != null) {
-      const moments = parseMoments(opts.moments);
+      const moments = parseMoments2(opts.moments);
+      const gitMoments = [
+        ...moments.includes("pre-commit") ? ["commit"] : [],
+        ...moments.includes("pre-push") ? ["push"] : []
+      ];
+      writeProjectConfig({ git_moments: gitMoments });
+      if (pluginActiveHere()) {
+        printInfo("The Verity plugin wires the hooks; recorded your selection in .verity/config.json:");
+        printInfo(`  Stop (analysis on every turn): ${moments.includes("stop") ? "on" : "off \u2014 the plugin still wires it; see below"}`);
+        printInfo(`  Pre-commit gate: ${gitMoments.includes("commit") ? "on" : "off"}`);
+        printInfo(`  Pre-push/PR gate: ${gitMoments.includes("push") ? "on" : "off"}`);
+        if (!moments.includes("stop")) {
+          printWarn("  Turning the Stop review off is not yet supported under the plugin \u2014 it stays on.");
+        }
+        return;
+      }
       await applyMomentSelection(moments);
       const status = await checkAllVerityHooks();
       printInfo("Verity hooks reconciled in .claude/settings.json:");
@@ -12762,6 +12955,24 @@ function registerHooksCommands(program2) {
   });
   hooks.command("check").description("Check if Verity hooks are installed").action(async () => {
     const status = await checkAllVerityHooks();
+    if (pluginActiveHere()) {
+      const moments = readProjectConfig().git_moments;
+      printInfo("Wired by the Verity Claude Code plugin (not .claude/settings.json):");
+      printInfo("  Stop hook (verity analyze): installed");
+      printInfo("  Intent hook (verity intent capture): installed");
+      printInfo("  Baseline hook (verity baseline capture): installed");
+      printInfo(
+        `  Git-moment gate (verity guard): ${moments.length ? `installed [${moments.join(", ")}]` : "wired but gating nothing"}`
+      );
+      if (!moments.length) {
+        printInfo('  Enable it with "verity config git-moments commit,push".');
+      }
+      if (status.stop || status.intent || status.baseline || status.guard) {
+        printWarn("  Duplicate hooks also exist in .claude/settings.json. They stand down at run time,");
+        printWarn('  but remove them with "verity init --plugin-mode" so the wiring says what it does.');
+      }
+      return;
+    }
     printInfo(`Stop hook (verity analyze): ${status.stop ? "installed" : "not installed"}`);
     printInfo(`Intent hook (verity intent capture): ${status.intent ? "installed" : "not installed"}`);
     printInfo(`Baseline hook (verity baseline capture): ${status.baseline ? "installed" : "not installed"}`);
@@ -12787,7 +12998,7 @@ var import_node_crypto8 = require("node:crypto");
 
 // src/lib/conversation-buffer.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_fs4 = require("node:fs");
+var import_node_fs7 = require("node:fs");
 var import_node_child_process5 = require("node:child_process");
 var import_node_crypto = require("node:crypto");
 function stripImageReferences(text) {
@@ -12823,7 +13034,7 @@ async function appendToConversationBuffer(prompt, sessionId) {
 }
 async function readAndClearConversationBuffer(currentSessionId) {
   try {
-    if ((0, import_node_fs4.existsSync)(CONVERSATION_BUFFER_FILE)) {
+    if ((0, import_node_fs7.existsSync)(CONVERSATION_BUFFER_FILE)) {
       const entries = await readBufferEntries();
       let mine = entries;
       let others = [];
@@ -12847,7 +13058,7 @@ async function readAndClearConversationBuffer(currentSessionId) {
         };
       }
     }
-    if ((0, import_node_fs4.existsSync)(INTENT_FILE)) {
+    if ((0, import_node_fs7.existsSync)(INTENT_FILE)) {
       try {
         const content = await (0, import_promises5.readFile)(INTENT_FILE, "utf-8");
         await (0, import_promises5.unlink)(INTENT_FILE).catch(() => {
@@ -12902,88 +13113,324 @@ function getRecentCommitMessages() {
   }
 }
 
-// src/lib/context-identity.ts
-var import_node_crypto2 = require("node:crypto");
-var import_node_fs5 = require("node:fs");
-var import_node_os2 = require("node:os");
-var import_node_path6 = require("node:path");
-var SHARED_SENTINELS = /* @__PURE__ */ new Set([
-  "",
-  "-",
-  "n/a",
-  "na",
-  "none",
-  "null",
-  "undefined",
-  "unknown",
-  "anon",
-  "anonymous",
-  "default",
-  "_default"
-]);
-function isSharedSentinel(value) {
-  if (value == null) return true;
-  return SHARED_SENTINELS.has(value.trim().toLowerCase());
-}
-var ephemeral = /* @__PURE__ */ new Map();
-function ephemeralId(slot, width) {
-  let id = ephemeral.get(slot);
-  if (!id) {
-    id = `eph-${(0, import_node_crypto2.randomBytes)(Math.ceil(width / 2)).toString("hex").slice(0, width - 4)}`;
-    ephemeral.set(slot, id);
-  }
-  return id;
-}
-function contextIdentity(input) {
-  const tokenUsable = !isSharedSentinel(input.token ?? null);
-  const sessionUsable = !isSharedSentinel(input.sessionId ?? null);
-  const userKey = tokenUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.token)).digest("hex").slice(0, 12) : ephemeralId("user", 12);
-  const sessionKey2 = sessionUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.sessionId)).digest("hex").slice(0, 16) : ephemeralId("session", 16);
-  let treeKey = "no-tree";
-  const rawTree = input.treeRoot;
-  if (rawTree && !isSharedSentinel(rawTree)) {
-    let resolved = rawTree;
-    try {
-      resolved = import_node_fs5.realpathSync.native(rawTree);
-    } catch {
-    }
-    treeKey = (0, import_node_crypto2.createHash)("sha256").update(resolved).digest("hex").slice(0, 12);
+// src/lib/analysis-mode.ts
+var DEBUG_PHRASES = [
+  "not working",
+  "doesn't work",
+  "doesn't work",
+  "does not work",
+  "isn't working",
+  "is not working",
+  "can't figure out",
+  "stack trace"
+];
+var DEBUG_WORDS = [
+  "fix",
+  "bug",
+  "broken",
+  "crash",
+  "crashing",
+  "failing",
+  "debug",
+  "debugging",
+  "investigate",
+  "troubleshoot",
+  "regression",
+  "wrong"
+];
+var DEBUG_PATTERN = new RegExp(
+  [
+    ...DEBUG_PHRASES.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")),
+    ...DEBUG_WORDS.map((w) => `\\b${w}\\b`)
+  ].join("|"),
+  "i"
+);
+var FALSE_POSITIVE_PATTERNS = [
+  /\b(?:add|create|implement|write|build|design|set\s*up)\b.{0,20}\berror\b/i,
+  /\berror\s+handling\b/i,
+  /\berror\s+boundar(?:y|ies)\b/i,
+  /\berror\s+(?:type|class|page|component|message|code|enum)\b/i,
+  /\b(?:add|create|implement|write|build)\b.{0,20}\b(?:fix|debug|issue)\b/i
+];
+function hasDebugIntent(prompt) {
+  if (!DEBUG_PATTERN.test(prompt)) return false;
+  for (const fp of FALSE_POSITIVE_PATTERNS) {
+    if (fp.test(prompt)) return false;
   }
-  return {
-    userKey,
-    treeKey,
-    sessionKey: sessionKey2,
-    userKeySource: tokenUsable ? "token" : "ephemeral",
-    sessionKeySource: sessionUsable ? "session_id" : "ephemeral",
-    ephemeral: !tokenUsable || !sessionUsable
-  };
-}
-function verityHome() {
-  const override = process.env.VERITY_HOME;
-  return override && override.trim() ? (0, import_node_path6.resolve)(override) : (0, import_node_path6.join)((0, import_node_os2.homedir)(), ".verity");
-}
-function dossierDir(identity) {
-  return (0, import_node_path6.join)(verityHome(), "sessions", identity.userKey, identity.treeKey, identity.sessionKey);
-}
-function treeDir(identity) {
-  return (0, import_node_path6.join)(verityHome(), "sessions", identity.userKey, identity.treeKey);
+  return true;
 }
-function scopeIdentity(token, sessionId) {
-  const t = (token ?? "").trim();
-  const s = (sessionId ?? "").trim();
-  const userKey = t.length > 0 ? (0, import_node_crypto2.createHash)("sha256").update(t).digest("hex").slice(0, 12) : "anon";
-  const sessionKey2 = s.length > 0 ? (0, import_node_crypto2.createHash)("sha256").update(s).digest("hex").slice(0, 16) : "_default";
-  return { userKey, sessionKey: sessionKey2, bucket: `${userKey}/${sessionKey2}` };
+var GIT_ONLY_PATTERN = /\b(commit|push|deploy|merge|rebase|tag|release|publish|ship)\b/i;
+var CODE_AUTHORING_PATTERN = /\b(add|create|implement|build|write|fix|update|change|refactor|modify|remove|delete|move|rename)\b.*\b(function|component|feature|endpoint|test|file|module|class|type|interface|hook|page|route|style|migration|code|bug|error|issue)\b/i;
+function isGitOnlyPrompt(prompt) {
+  if (!GIT_ONLY_PATTERN.test(prompt)) return false;
+  if (CODE_AUTHORING_PATTERN.test(prompt)) return false;
+  return true;
 }
-function sessionScopeKey(token, sessionId) {
-  return scopeIdentity(token, sessionId).bucket;
+function reconcileAnalysisMode(predictedMode, signals) {
+  const mode2 = resolveAnalysisMode(predictedMode, signals);
+  if (mode2 !== "skip") return mode2;
+  const windowIsOrphaned = signals.actionSummary?.transcript_windowed === "orphaned";
+  if (windowIsOrphaned && !signals.sessionAuthoredCode) return "standard";
+  return mode2;
 }
-
-// src/lib/task-context-buffer.ts
-var import_promises6 = require("node:fs/promises");
-var import_node_fs6 = require("node:fs");
-var import_node_path7 = require("node:path");
-var TASK_CONTEXT_DIR = `${VERITY_DIR}/.task-context`;
+function resolveAnalysisMode(predictedMode, signals) {
+  if (!predictedMode || !isValidMode(predictedMode)) {
+    return detectAnalysisMode(
+      signals.noFilesChanged,
+      signals.assistantResponse,
+      signals.conversationPrompts,
+      signals.actionSummary,
+      signals.sessionAuthoredCode
+    );
+  }
+  const agentAuthoredCode = !!(signals.actionSummary && (signals.actionSummary.files_edited.length > 0 || signals.actionSummary.files_created.length > 0)) || !!signals.sessionAuthoredCode;
+  const agentInvestigated = didAgentInvestigate(signals.actionSummary);
+  switch (predictedMode) {
+    case "skip":
+      if (agentAuthoredCode) return "standard";
+      return "skip";
+    case "plan":
+      if (agentAuthoredCode) return "standard";
+      return "plan";
+    case "debug":
+      return "debug";
+    case "standard":
+      if (!!signals.actionSummary && !agentAuthoredCode && !!signals.assistantResponse) {
+        return agentInvestigated ? "plan" : "skip";
+      }
+      return "standard";
+  }
+}
+function didAgentInvestigate(summary) {
+  if (!summary) return false;
+  return summary.files_read.length > 0 || summary.searches > 0 || summary.commands.length > 0 || summary.subagents > 0 || summary.web_fetches > 0;
+}
+function isValidMode(mode2) {
+  return mode2 === "standard" || mode2 === "plan" || mode2 === "debug" || mode2 === "skip";
+}
+function detectAnalysisMode(noFilesChanged, assistantResponse, conversationPrompts, actionSummary, sessionAuthoredCode) {
+  const agentAuthoredCode = !!(actionSummary && (actionSummary.files_edited.length > 0 || actionSummary.files_created.length > 0)) || !!sessionAuthoredCode;
+  if (conversationPrompts.length > 0 && conversationPrompts.every(isGitOnlyPrompt)) {
+    if (!agentAuthoredCode) return "skip";
+  }
+  if (noFilesChanged && !!assistantResponse && !agentAuthoredCode) {
+    return "plan";
+  }
+  if (!!actionSummary && !agentAuthoredCode && !!assistantResponse) {
+    return didAgentInvestigate(actionSummary) ? "plan" : "skip";
+  }
+  for (const prompt of conversationPrompts) {
+    if (hasDebugIntent(prompt)) {
+      return "debug";
+    }
+  }
+  return "standard";
+}
+var FILE_MUTATE_RE = /(?:^|[\s|&;(`])(?:sed\s+-i|perl\s+-i|awk\b|tee\b|dd\b|cp\b|mv\b|ln\b|install\b|touch\b|patch\b|git\s+(?:apply|am)\b|cargo\s+build|go\s+generate|make\b|--write\b|--fix\b|--in-place\b)|>>?(?![&>])/i;
+var GIT_PLUMBING_RE = /^\s*git\s+(?:merge|rebase|stash|cherry-pick|revert|pull|fetch|checkout|switch|reset|restore|clean)\b/i;
+var READ_ONLY_RE = /^\s*(?:git\s+(?:status|diff|log|show|branch|remote|config|rev-parse|ls-files|blame|describe)|ls|cat|head|tail|less|grep|rg|find|pwd|echo|printf|wc|which|type|tree|stat|file|env|printenv|date|whoami)\b/i;
+var CHAIN_RE = /&&|\||;|\$\(|\x60/;
+function isNonAuthoringCommand(cmd) {
+  if (typeof cmd !== "string" || cmd.trim().length === 0) return false;
+  if (FILE_MUTATE_RE.test(cmd)) return false;
+  if (CHAIN_RE.test(cmd)) return false;
+  return GIT_PLUMBING_RE.test(cmd) || READ_ONLY_RE.test(cmd);
+}
+function hasNonEditAuthorship(actionSummary, sessionAuthoredCode) {
+  if (!actionSummary) return sessionAuthoredCode;
+  if ((actionSummary.subagents ?? 0) > 0) return true;
+  if (Object.keys(actionSummary.tool_counts ?? {}).some((t) => t.startsWith("mcp__"))) return true;
+  const commands = actionSummary.commands ?? [];
+  if (commands.some((c) => FILE_MUTATE_RE.test(c))) return true;
+  if (sessionAuthoredCode) {
+    const allSafe = commands.length > 0 && commands.every(isNonAuthoringCommand);
+    if (!allSafe) return true;
+  }
+  return false;
+}
+function scopeToAuthored(files, actionSummary) {
+  if (!actionSummary) return { files, signal: "no-transcript" };
+  const touched = [...actionSummary.files_edited ?? [], ...actionSummary.files_created ?? []];
+  if (touched.length === 0) return { files: [], signal: "none-authored" };
+  return { files: narrowToAgentAuthored(files, actionSummary), signal: "authored" };
+}
+function chooseReviewScope(input) {
+  if (input.narrowingIsTrustworthy) return input.scopedFiles;
+  if (input.recoveredScope.length > 0) return input.recoveredScope;
+  return input.authorshipWasObservable ? [] : input.allForReview;
+}
+function narrowToAgentAuthored(files, actionSummary) {
+  if (!actionSummary) return files;
+  const touched = [
+    ...actionSummary.files_edited,
+    ...actionSummary.files_created
+  ];
+  if (touched.length === 0) return files;
+  return files.filter((f) => {
+    const suffix = "/" + f;
+    return touched.some((t) => t === f || t.endsWith(suffix));
+  });
+}
+
+// src/lib/skip-detection.ts
+function isBareAckPrompt(prompt) {
+  if (typeof prompt !== "string") return false;
+  const trimmed = prompt.trim();
+  if (trimmed.length === 0) return false;
+  if (trimmed.length > 20) return false;
+  const bareAckPattern = /^(\d{1,2}|y|n|yes|no|yep|nope|ok(ay)?|sure|skip|cancel|stop|done|noted|got\s+it|sounds\s+good|thanks|thank\s+you|thx)[.!?]*$/i;
+  return bareAckPattern.test(trimmed);
+}
+function isContinuationPrompt(prompt) {
+  if (typeof prompt !== "string") return false;
+  const trimmed = prompt.trim();
+  if (trimmed.length === 0) return false;
+  if (trimmed.length > 24) return false;
+  const continuation = /^(let['’]?s\s+(go|do\s+it|start|continue)|go|go\s+ahead|go\s+on|proceed|continue|carry\s+on|keep\s+going|do\s+it|make\s+it\s+so|next|start|begin|ship\s+it|yes\s+please|please\s+continue|perfect|great|nice|excellent|agreed)[.!]*$/i;
+  return continuation.test(trimmed) || isBareAckPrompt(trimmed);
+}
+function isSlashCommand(prompt) {
+  if (typeof prompt !== "string") return false;
+  return /^\s*\/[A-Za-z][\w-]*(\s|$)/.test(prompt);
+}
+function resolveGoalPrompt(prompts) {
+  if (prompts.length === 0) return null;
+  const latest = prompts[prompts.length - 1];
+  if (!isContinuationPrompt(latest.prompt)) return { entry: latest, turnsBack: 0 };
+  for (let i = prompts.length - 2; i >= 0; i--) {
+    if (!isContinuationPrompt(prompts[i].prompt)) {
+      return { entry: prompts[i], turnsBack: prompts.length - 1 - i };
+    }
+  }
+  return { entry: latest, turnsBack: 0 };
+}
+function isReflectionQuestion(response) {
+  if (!response || typeof response !== "string") return false;
+  const markers = [
+    /reflection\s+for\s+future\s+agents/i,
+    /what(?:'s|\s+is)\s+one\s+thing\s+you\s+learned/i,
+    /say\s+['"]?skip['"]?\s+to\s+skip/i,
+    /quick\s+reflection\s+question/i,
+    // Post-flip (VRT-21): the agent drafts the reflection itself and, when
+    // interactive, asks the user to confirm/correct before recording. That
+    // turn authors no code either, so it's still a reflection turn.
+    /reflection\s+draft/i,
+    /confirm,?\s+correct,?\s+or\s+add/i
+  ];
+  return markers.some((m) => m.test(response));
+}
+function isMetaTaskLabel(label2) {
+  if (label2 === null || label2 === void 0) return false;
+  if (typeof label2 !== "string") return false;
+  const trimmed = label2.trim();
+  if (trimmed.length === 0) return true;
+  const metaPatterns = [
+    /^verity\s+[\w-]+\s+response$/i,
+    // "Verity reflect response"
+    /^simple user response$/i,
+    /^verity\s+command$/i,
+    // "Verity command"
+    /^user\s+(question|reply|response|ack)$/i
+  ];
+  return metaPatterns.some((p) => p.test(trimmed));
+}
+function shouldSkipForBareAck(input) {
+  if (!isBareAckPrompt(input.prompt)) return false;
+  if (input.turnAuthoredCode) return false;
+  return input.canSeeTurnAuthorship;
+}
+function isCommandOnlyTurn(input) {
+  if (!input.authorshipIsObservable) return false;
+  if (input.userCommandsTruncated) return false;
+  const commands = input.userCommands ?? [];
+  if (commands.length === 0) return false;
+  if (input.agentAuthoredFiles > 0) return false;
+  if (input.agentToolCalls > 0) return false;
+  return commands.every(isNonAuthoringCommand);
+}
+
+// src/lib/context-identity.ts
+var import_node_crypto2 = require("node:crypto");
+var import_node_fs8 = require("node:fs");
+var import_node_os2 = require("node:os");
+var import_node_path6 = require("node:path");
+var SHARED_SENTINELS = /* @__PURE__ */ new Set([
+  "",
+  "-",
+  "n/a",
+  "na",
+  "none",
+  "null",
+  "undefined",
+  "unknown",
+  "anon",
+  "anonymous",
+  "default",
+  "_default"
+]);
+function isSharedSentinel(value) {
+  if (value == null) return true;
+  return SHARED_SENTINELS.has(value.trim().toLowerCase());
+}
+var ephemeral = /* @__PURE__ */ new Map();
+function ephemeralId(slot, width) {
+  let id = ephemeral.get(slot);
+  if (!id) {
+    id = `eph-${(0, import_node_crypto2.randomBytes)(Math.ceil(width / 2)).toString("hex").slice(0, width - 4)}`;
+    ephemeral.set(slot, id);
+  }
+  return id;
+}
+function contextIdentity(input) {
+  const tokenUsable = !isSharedSentinel(input.token ?? null);
+  const sessionUsable = !isSharedSentinel(input.sessionId ?? null);
+  const userKey = tokenUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.token)).digest("hex").slice(0, 12) : ephemeralId("user", 12);
+  const sessionKey2 = sessionUsable ? (0, import_node_crypto2.createHash)("sha256").update(String(input.sessionId)).digest("hex").slice(0, 16) : ephemeralId("session", 16);
+  let treeKey = "no-tree";
+  const rawTree = input.treeRoot;
+  if (rawTree && !isSharedSentinel(rawTree)) {
+    let resolved = rawTree;
+    try {
+      resolved = import_node_fs8.realpathSync.native(rawTree);
+    } catch {
+    }
+    treeKey = (0, import_node_crypto2.createHash)("sha256").update(resolved).digest("hex").slice(0, 12);
+  }
+  return {
+    userKey,
+    treeKey,
+    sessionKey: sessionKey2,
+    userKeySource: tokenUsable ? "token" : "ephemeral",
+    sessionKeySource: sessionUsable ? "session_id" : "ephemeral",
+    ephemeral: !tokenUsable || !sessionUsable
+  };
+}
+function verityHome() {
+  const override = process.env.VERITY_HOME;
+  return override && override.trim() ? (0, import_node_path6.resolve)(override) : (0, import_node_path6.join)((0, import_node_os2.homedir)(), ".verity");
+}
+function dossierDir(identity) {
+  return (0, import_node_path6.join)(verityHome(), "sessions", identity.userKey, identity.treeKey, identity.sessionKey);
+}
+function treeDir(identity) {
+  return (0, import_node_path6.join)(verityHome(), "sessions", identity.userKey, identity.treeKey);
+}
+function scopeIdentity(token, sessionId) {
+  const t = (token ?? "").trim();
+  const s = (sessionId ?? "").trim();
+  const userKey = t.length > 0 ? (0, import_node_crypto2.createHash)("sha256").update(t).digest("hex").slice(0, 12) : "anon";
+  const sessionKey2 = s.length > 0 ? (0, import_node_crypto2.createHash)("sha256").update(s).digest("hex").slice(0, 16) : "_default";
+  return { userKey, sessionKey: sessionKey2, bucket: `${userKey}/${sessionKey2}` };
+}
+function sessionScopeKey(token, sessionId) {
+  return scopeIdentity(token, sessionId).bucket;
+}
+
+// src/lib/task-context-buffer.ts
+var import_promises6 = require("node:fs/promises");
+var import_node_fs9 = require("node:fs");
+var import_node_path7 = require("node:path");
+var TASK_CONTEXT_DIR = `${VERITY_DIR}/.task-context`;
 var MAX_BUFFER_BYTES = 500 * 1024;
 var MAX_PROMPT_CHARS = 2e3;
 var MAX_RESPONSE_CHARS = 4e3;
@@ -13021,7 +13468,7 @@ async function appendResponseToTaskBuffer(taskId, assistantResponse, actionSumma
 }
 async function readTaskContextBuffer(taskId) {
   const filePath = bufferPath(taskId);
-  if (!(0, import_node_fs6.existsSync)(filePath)) return null;
+  if (!(0, import_node_fs9.existsSync)(filePath)) return null;
   try {
     const content = await (0, import_promises6.readFile)(filePath, "utf-8");
     if (!content.trim()) return null;
@@ -13055,7 +13502,7 @@ async function readTaskContextBuffer(taskId) {
 }
 async function cleanupTaskContextBuffers() {
   try {
-    if (!(0, import_node_fs6.existsSync)(TASK_CONTEXT_DIR)) return;
+    if (!(0, import_node_fs9.existsSync)(TASK_CONTEXT_DIR)) return;
     const files = await (0, import_promises6.readdir)(TASK_CONTEXT_DIR);
     const cutoffMs = Date.now() - RETENTION_DAYS * 24 * 60 * 60 * 1e3;
     for (const file of files) {
@@ -13080,7 +13527,7 @@ async function appendEntry(taskId, entry) {
   try {
     await (0, import_promises6.mkdir)(TASK_CONTEXT_DIR, { recursive: true });
     const filePath = bufferPath(taskId);
-    if ((0, import_node_fs6.existsSync)(filePath)) {
+    if ((0, import_node_fs9.existsSync)(filePath)) {
       const stats = await (0, import_promises6.stat)(filePath);
       if (stats.size >= MAX_BUFFER_BYTES) {
         const content = await (0, import_promises6.readFile)(filePath, "utf-8");
@@ -13091,7 +13538,7 @@ async function appendEntry(taskId, entry) {
       }
     }
     const line = JSON.stringify(entry) + "\n";
-    const existing = (0, import_node_fs6.existsSync)(filePath) ? await (0, import_promises6.readFile)(filePath, "utf-8") : "";
+    const existing = (0, import_node_fs9.existsSync)(filePath) ? await (0, import_promises6.readFile)(filePath, "utf-8") : "";
     await (0, import_promises6.writeFile)(filePath, existing + line);
   } catch {
   }
@@ -13099,7 +13546,7 @@ async function appendEntry(taskId, entry) {
 
 // src/lib/memory-retrieval.ts
 var import_promises7 = require("node:fs/promises");
-var import_node_fs7 = require("node:fs");
+var import_node_fs10 = require("node:fs");
 var import_node_path8 = require("node:path");
 var memoryDir = () => projectPath(`${VERITY_DIR}/memory`);
 var DOMAINS = ["decisions", "quality", "security", "intent", "gotchas", "patterns", "domain", "integrations"];
@@ -13193,13 +13640,13 @@ function parseFrontmatter(content) {
   return { fm, body: match[2].trim() };
 }
 async function retrieveForInjection(promptText, taskFiles = [], budgetTokens = DEFAULT_BUDGET_TOKENS) {
-  if (!(0, import_node_fs7.existsSync)(memoryDir())) return null;
+  if (!(0, import_node_fs10.existsSync)(memoryDir())) return null;
   const budget = Math.min(budgetTokens, MAX_BUDGET_TOKENS);
   const promptTokens = tokenize(promptText);
   const nodes = [];
   for (const domain of DOMAINS) {
     const domainDir = (0, import_node_path8.join)(memoryDir(), domain);
-    if (!(0, import_node_fs7.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs10.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises7.readdir)(domainDir);
       for (const file of files) {
@@ -13264,12 +13711,12 @@ async function retrieveForInjection(promptText, taskFiles = [], budgetTokens = D
 
 // src/lib/memory-sync.ts
 var import_promises8 = require("node:fs/promises");
-var import_node_fs9 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var import_node_path10 = require("node:path");
 var import_node_crypto3 = require("node:crypto");
 
 // src/lib/safe-path.ts
-var import_node_fs8 = require("node:fs");
+var import_node_fs11 = require("node:fs");
 var import_node_path9 = require("node:path");
 function resolveInside(baseDir, candidate) {
   if (typeof candidate !== "string" || candidate.length === 0) return null;
@@ -13279,16 +13726,16 @@ function resolveInside(baseDir, candidate) {
   const baseSep = baseAbs.endsWith(import_node_path9.sep) ? baseAbs : baseAbs + import_node_path9.sep;
   if (full !== baseAbs && !full.startsWith(baseSep)) return null;
   try {
-    if ((0, import_node_fs8.existsSync)(baseAbs)) {
-      const realBase = (0, import_node_fs8.realpathSync)(baseAbs);
+    if ((0, import_node_fs11.existsSync)(baseAbs)) {
+      const realBase = (0, import_node_fs11.realpathSync)(baseAbs);
       const realBaseSep = realBase.endsWith(import_node_path9.sep) ? realBase : realBase + import_node_path9.sep;
       let probe = full;
-      while (!(0, import_node_fs8.existsSync)(probe)) {
+      while (!(0, import_node_fs11.existsSync)(probe)) {
         const parent = (0, import_node_path9.dirname)(probe);
         if (parent === probe) break;
         probe = parent;
       }
-      const realProbe = (0, import_node_fs8.realpathSync)(probe);
+      const realProbe = (0, import_node_fs11.realpathSync)(probe);
       if (realProbe !== realBase && !realProbe.startsWith(realBaseSep)) return null;
     }
   } catch {
@@ -13367,24 +13814,24 @@ async function ensureMemoryDir() {
   for (const domain of DOMAINS2) {
     await (0, import_promises8.mkdir)((0, import_node_path10.join)(memoryDir2(), domain), { recursive: true });
   }
-  if (!(0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "SCHEMA.md"))) {
+  if (!(0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "SCHEMA.md"))) {
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "SCHEMA.md"), SCHEMA_TEMPLATE);
   }
-  if (!(0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "index.md"))) {
+  if (!(0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "index.md"))) {
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "index.md"), "# Project Memory Index\n\nNo nodes yet. Run an analysis to start building the knowledge graph.\n");
   }
-  if (!(0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md"))) {
+  if (!(0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md"))) {
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), "# Memory Log\n\n");
   }
 }
 async function buildManifest() {
-  if (!(0, import_node_fs9.existsSync)(memoryDir2())) {
+  if (!(0, import_node_fs12.existsSync)(memoryDir2())) {
     return { schema_version: 1, nodes: [], index_hash: null, log_length: 0 };
   }
   const nodes = [];
   for (const domain of DOMAINS2) {
     const domainDir = (0, import_node_path10.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs9.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs12.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises8.readdir)(domainDir);
       for (const file of files) {
@@ -13420,10 +13867,10 @@ function hashContent(content) {
 }
 async function readOnDiskNodes() {
   const out = /* @__PURE__ */ new Map();
-  if (!(0, import_node_fs9.existsSync)(memoryDir2())) return out;
+  if (!(0, import_node_fs12.existsSync)(memoryDir2())) return out;
   for (const domain of DOMAINS2) {
     const domainDir = (0, import_node_path10.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs9.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs12.existsSync)(domainDir)) continue;
     try {
       for (const file of await (0, import_promises8.readdir)(domainDir)) {
         if (!file.endsWith(".md")) continue;
@@ -13475,7 +13922,7 @@ async function computeEditedNodeUploads() {
   for (const [path, prevHash] of prev) {
     if (prevHash == null) continue;
     const full = (0, import_node_path10.join)(memoryDir2(), path);
-    if (!(0, import_node_fs9.existsSync)(full)) continue;
+    if (!(0, import_node_fs12.existsSync)(full)) continue;
     let content;
     try {
       content = await (0, import_promises8.readFile)(full, "utf-8");
@@ -13511,7 +13958,7 @@ async function applyMemoryWrites(writes, opts = {}) {
   const logLines = [`- ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 16)} \u2014 Applied ${count} write(s) from server`];
   for (const n of notes) logLines.push(`  - ${n}`);
   try {
-    const existing = (0, import_node_fs9.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md")) ? await (0, import_promises8.readFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), "utf-8") : "# Memory Log\n\n";
+    const existing = (0, import_node_fs12.existsSync)((0, import_node_path10.join)(memoryDir2(), "log.md")) ? await (0, import_promises8.readFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), "utf-8") : "# Memory Log\n\n";
     await (0, import_promises8.writeFile)((0, import_node_path10.join)(memoryDir2(), "log.md"), existing + logLines.join("\n") + "\n");
   } catch {
   }
@@ -13532,7 +13979,7 @@ async function applyOneWrite(write, treePaths) {
       notes.push(`${write.path}: dropped unmatched file_globs [${grounded.dropped.join(", ")}]`);
     }
   }
-  if ((0, import_node_fs9.existsSync)(fullPath)) {
+  if ((0, import_node_fs12.existsSync)(fullPath)) {
     let existing = "";
     try {
       existing = await (0, import_promises8.readFile)(fullPath, "utf-8");
@@ -13586,7 +14033,7 @@ async function regenerateIndex() {
   let totalNodes = 0;
   for (const domain of DOMAINS2.filter((d) => d !== "_archive")) {
     const domainDir = (0, import_node_path10.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs9.existsSync)(domainDir)) continue;
+    if (!(0, import_node_fs12.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises8.readdir)(domainDir);
       const mdFiles = files.filter((f) => f.endsWith(".md"));
@@ -13856,7 +14303,7 @@ function hasLegacyMemoryBlock(text) {
 async function ensureClaudeMdPointer(cwd = repoRoot()) {
   const claudeMdPath = (0, import_node_path10.join)(cwd, "CLAUDE.md");
   let existing = "";
-  if ((0, import_node_fs9.existsSync)(claudeMdPath)) {
+  if ((0, import_node_fs12.existsSync)(claudeMdPath)) {
     existing = await (0, import_promises8.readFile)(claudeMdPath, "utf-8");
   }
   let startTag = CLAUDE_MD_START;
@@ -13963,266 +14410,39 @@ source: extractor | user | imported
 
 # Title
 
-Body content (\u22648KB). Use [[node-id]] wikilinks for cross-references.
-\`\`\`
-
-## Edge types
-
-| Edge | Meaning |
-|------|---------|
-| related | Loose association |
-| supersedes | A replaces B |
-| contradicts | A and B disagree |
-| caused_by | Something in B led to A |
-| example_of | A is an instance of B |
-
-## Domains
-
-| Directory | Purpose |
-|-----------|---------|
-| decisions/ | Architectural choices (ADR-style) |
-| quality/ | Quality patterns |
-| security/ | Security constraints |
-| intent/ | Intent templates |
-| gotchas/ | Footguns and surprises |
-| patterns/ | Code conventions |
-| domain/ | Business logic concepts |
-| integrations/ | External system knowledge |
-| _archive/ | Superseded nodes |
-`;
-
-// src/lib/dossier-session.ts
-var import_node_fs14 = require("node:fs");
-var import_node_crypto7 = require("node:crypto");
-var import_node_path13 = require("node:path");
-
-// src/lib/analysis-mode.ts
-var DEBUG_PHRASES = [
-  "not working",
-  "doesn't work",
-  "doesn't work",
-  "does not work",
-  "isn't working",
-  "is not working",
-  "can't figure out",
-  "stack trace"
-];
-var DEBUG_WORDS = [
-  "fix",
-  "bug",
-  "broken",
-  "crash",
-  "crashing",
-  "failing",
-  "debug",
-  "debugging",
-  "investigate",
-  "troubleshoot",
-  "regression",
-  "wrong"
-];
-var DEBUG_PATTERN = new RegExp(
-  [
-    ...DEBUG_PHRASES.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")),
-    ...DEBUG_WORDS.map((w) => `\\b${w}\\b`)
-  ].join("|"),
-  "i"
-);
-var FALSE_POSITIVE_PATTERNS = [
-  /\b(?:add|create|implement|write|build|design|set\s*up)\b.{0,20}\berror\b/i,
-  /\berror\s+handling\b/i,
-  /\berror\s+boundar(?:y|ies)\b/i,
-  /\berror\s+(?:type|class|page|component|message|code|enum)\b/i,
-  /\b(?:add|create|implement|write|build)\b.{0,20}\b(?:fix|debug|issue)\b/i
-];
-function hasDebugIntent(prompt) {
-  if (!DEBUG_PATTERN.test(prompt)) return false;
-  for (const fp of FALSE_POSITIVE_PATTERNS) {
-    if (fp.test(prompt)) return false;
-  }
-  return true;
-}
-var GIT_ONLY_PATTERN = /\b(commit|push|deploy|merge|rebase|tag|release|publish|ship)\b/i;
-var CODE_AUTHORING_PATTERN = /\b(add|create|implement|build|write|fix|update|change|refactor|modify|remove|delete|move|rename)\b.*\b(function|component|feature|endpoint|test|file|module|class|type|interface|hook|page|route|style|migration|code|bug|error|issue)\b/i;
-function isGitOnlyPrompt(prompt) {
-  if (!GIT_ONLY_PATTERN.test(prompt)) return false;
-  if (CODE_AUTHORING_PATTERN.test(prompt)) return false;
-  return true;
-}
-function reconcileAnalysisMode(predictedMode, signals) {
-  const mode2 = resolveAnalysisMode(predictedMode, signals);
-  if (mode2 !== "skip") return mode2;
-  const windowIsOrphaned = signals.actionSummary?.transcript_windowed === "orphaned";
-  if (windowIsOrphaned && !signals.sessionAuthoredCode) return "standard";
-  return mode2;
-}
-function resolveAnalysisMode(predictedMode, signals) {
-  if (!predictedMode || !isValidMode(predictedMode)) {
-    return detectAnalysisMode(
-      signals.noFilesChanged,
-      signals.assistantResponse,
-      signals.conversationPrompts,
-      signals.actionSummary,
-      signals.sessionAuthoredCode
-    );
-  }
-  const agentAuthoredCode = !!(signals.actionSummary && (signals.actionSummary.files_edited.length > 0 || signals.actionSummary.files_created.length > 0)) || !!signals.sessionAuthoredCode;
-  const agentInvestigated = didAgentInvestigate(signals.actionSummary);
-  switch (predictedMode) {
-    case "skip":
-      if (agentAuthoredCode) return "standard";
-      return "skip";
-    case "plan":
-      if (agentAuthoredCode) return "standard";
-      return "plan";
-    case "debug":
-      return "debug";
-    case "standard":
-      if (!!signals.actionSummary && !agentAuthoredCode && !!signals.assistantResponse) {
-        return agentInvestigated ? "plan" : "skip";
-      }
-      return "standard";
-  }
-}
-function didAgentInvestigate(summary) {
-  if (!summary) return false;
-  return summary.files_read.length > 0 || summary.searches > 0 || summary.commands.length > 0 || summary.subagents > 0 || summary.web_fetches > 0;
-}
-function isValidMode(mode2) {
-  return mode2 === "standard" || mode2 === "plan" || mode2 === "debug" || mode2 === "skip";
-}
-function detectAnalysisMode(noFilesChanged, assistantResponse, conversationPrompts, actionSummary, sessionAuthoredCode) {
-  const agentAuthoredCode = !!(actionSummary && (actionSummary.files_edited.length > 0 || actionSummary.files_created.length > 0)) || !!sessionAuthoredCode;
-  if (conversationPrompts.length > 0 && conversationPrompts.every(isGitOnlyPrompt)) {
-    if (!agentAuthoredCode) return "skip";
-  }
-  if (noFilesChanged && !!assistantResponse && !agentAuthoredCode) {
-    return "plan";
-  }
-  if (!!actionSummary && !agentAuthoredCode && !!assistantResponse) {
-    return didAgentInvestigate(actionSummary) ? "plan" : "skip";
-  }
-  for (const prompt of conversationPrompts) {
-    if (hasDebugIntent(prompt)) {
-      return "debug";
-    }
-  }
-  return "standard";
-}
-var FILE_MUTATE_RE = /(?:^|[\s|&;(`])(?:sed\s+-i|perl\s+-i|awk\b|tee\b|dd\b|cp\b|mv\b|ln\b|install\b|touch\b|patch\b|git\s+(?:apply|am)\b|cargo\s+build|go\s+generate|make\b|--write\b|--fix\b|--in-place\b)|>>?(?![&>])/i;
-var GIT_PLUMBING_RE = /^\s*git\s+(?:merge|rebase|stash|cherry-pick|revert|pull|fetch|checkout|switch|reset|restore|clean)\b/i;
-var READ_ONLY_RE = /^\s*(?:git\s+(?:status|diff|log|show|branch|remote|config|rev-parse|ls-files|blame|describe)|ls|cat|head|tail|less|grep|rg|find|pwd|echo|printf|wc|which|type|tree|stat|file|env|printenv|date|whoami)\b/i;
-var CHAIN_RE = /&&|\||;|\$\(|\x60/;
-function isNonAuthoringCommand(cmd) {
-  if (typeof cmd !== "string" || cmd.trim().length === 0) return false;
-  if (FILE_MUTATE_RE.test(cmd)) return false;
-  if (CHAIN_RE.test(cmd)) return false;
-  return GIT_PLUMBING_RE.test(cmd) || READ_ONLY_RE.test(cmd);
-}
-function hasNonEditAuthorship(actionSummary, sessionAuthoredCode) {
-  if (!actionSummary) return sessionAuthoredCode;
-  if ((actionSummary.subagents ?? 0) > 0) return true;
-  if (Object.keys(actionSummary.tool_counts ?? {}).some((t) => t.startsWith("mcp__"))) return true;
-  const commands = actionSummary.commands ?? [];
-  if (commands.some((c) => FILE_MUTATE_RE.test(c))) return true;
-  if (sessionAuthoredCode) {
-    const allSafe = commands.length > 0 && commands.every(isNonAuthoringCommand);
-    if (!allSafe) return true;
-  }
-  return false;
-}
-function scopeToAuthored(files, actionSummary) {
-  if (!actionSummary) return { files, signal: "no-transcript" };
-  const touched = [...actionSummary.files_edited ?? [], ...actionSummary.files_created ?? []];
-  if (touched.length === 0) return { files: [], signal: "none-authored" };
-  return { files: narrowToAgentAuthored(files, actionSummary), signal: "authored" };
-}
-function narrowToAgentAuthored(files, actionSummary) {
-  if (!actionSummary) return files;
-  const touched = [
-    ...actionSummary.files_edited,
-    ...actionSummary.files_created
-  ];
-  if (touched.length === 0) return files;
-  return files.filter((f) => {
-    const suffix = "/" + f;
-    return touched.some((t) => t === f || t.endsWith(suffix));
-  });
-}
-
-// src/lib/skip-detection.ts
-function isBareAckPrompt(prompt) {
-  if (typeof prompt !== "string") return false;
-  const trimmed = prompt.trim();
-  if (trimmed.length === 0) return false;
-  if (trimmed.length > 20) return false;
-  const bareAckPattern = /^(\d{1,2}|y|n|yes|no|yep|nope|ok(ay)?|sure|skip|cancel|stop|done|noted|got\s+it|sounds\s+good|thanks|thank\s+you|thx)[.!?]*$/i;
-  return bareAckPattern.test(trimmed);
-}
-function isContinuationPrompt(prompt) {
-  if (typeof prompt !== "string") return false;
-  const trimmed = prompt.trim();
-  if (trimmed.length === 0) return false;
-  if (trimmed.length > 24) return false;
-  const continuation = /^(let['’]?s\s+(go|do\s+it|start|continue)|go|go\s+ahead|go\s+on|proceed|continue|carry\s+on|keep\s+going|do\s+it|make\s+it\s+so|next|start|begin|ship\s+it|yes\s+please|please\s+continue|perfect|great|nice|excellent|agreed)[.!]*$/i;
-  return continuation.test(trimmed) || isBareAckPrompt(trimmed);
-}
-function resolveGoalPrompt(prompts) {
-  if (prompts.length === 0) return null;
-  const latest = prompts[prompts.length - 1];
-  if (!isContinuationPrompt(latest.prompt)) return { entry: latest, turnsBack: 0 };
-  for (let i = prompts.length - 2; i >= 0; i--) {
-    if (!isContinuationPrompt(prompts[i].prompt)) {
-      return { entry: prompts[i], turnsBack: prompts.length - 1 - i };
-    }
-  }
-  return { entry: latest, turnsBack: 0 };
-}
-function isReflectionQuestion(response) {
-  if (!response || typeof response !== "string") return false;
-  const markers = [
-    /reflection\s+for\s+future\s+agents/i,
-    /what(?:'s|\s+is)\s+one\s+thing\s+you\s+learned/i,
-    /say\s+['"]?skip['"]?\s+to\s+skip/i,
-    /quick\s+reflection\s+question/i,
-    // Post-flip (VRT-21): the agent drafts the reflection itself and, when
-    // interactive, asks the user to confirm/correct before recording. That
-    // turn authors no code either, so it's still a reflection turn.
-    /reflection\s+draft/i,
-    /confirm,?\s+correct,?\s+or\s+add/i
-  ];
-  return markers.some((m) => m.test(response));
-}
-function isMetaTaskLabel(label2) {
-  if (label2 === null || label2 === void 0) return false;
-  if (typeof label2 !== "string") return false;
-  const trimmed = label2.trim();
-  if (trimmed.length === 0) return true;
-  const metaPatterns = [
-    /^verity\s+[\w-]+\s+response$/i,
-    // "Verity reflect response"
-    /^simple user response$/i,
-    /^verity\s+command$/i,
-    // "Verity command"
-    /^user\s+(question|reply|response|ack)$/i
-  ];
-  return metaPatterns.some((p) => p.test(trimmed));
-}
-function shouldSkipForBareAck(input) {
-  if (!isBareAckPrompt(input.prompt)) return false;
-  if (input.turnAuthoredCode) return false;
-  return input.canSeeTurnAuthorship;
-}
-function isCommandOnlyTurn(input) {
-  if (!input.authorshipIsObservable) return false;
-  if (input.userCommandsTruncated) return false;
-  const commands = input.userCommands ?? [];
-  if (commands.length === 0) return false;
-  if (input.agentAuthoredFiles > 0) return false;
-  if (input.agentToolCalls > 0) return false;
-  return commands.every(isNonAuthoringCommand);
-}
-
+Body content (\u22648KB). Use [[node-id]] wikilinks for cross-references.
+\`\`\`
+
+## Edge types
+
+| Edge | Meaning |
+|------|---------|
+| related | Loose association |
+| supersedes | A replaces B |
+| contradicts | A and B disagree |
+| caused_by | Something in B led to A |
+| example_of | A is an instance of B |
+
+## Domains
+
+| Directory | Purpose |
+|-----------|---------|
+| decisions/ | Architectural choices (ADR-style) |
+| quality/ | Quality patterns |
+| security/ | Security constraints |
+| intent/ | Intent templates |
+| gotchas/ | Footguns and surprises |
+| patterns/ | Code conventions |
+| domain/ | Business logic concepts |
+| integrations/ | External system knowledge |
+| _archive/ | Superseded nodes |
+`;
+
+// src/lib/dossier-session.ts
+var import_node_fs17 = require("node:fs");
+var import_node_crypto7 = require("node:crypto");
+var import_node_path13 = require("node:path");
+
 // src/lib/pending-repeat.ts
 var STOP = /* @__PURE__ */ new Set([
   "the",
@@ -14326,7 +14546,7 @@ function statementAnchorKey(file, patternId) {
 
 // src/lib/dossier/log.ts
 var import_node_crypto4 = require("node:crypto");
-var import_node_fs10 = require("node:fs");
+var import_node_fs13 = require("node:fs");
 var import_node_path11 = require("node:path");
 var CRC_TABLE = (() => {
   const t = new Int32Array(256);
@@ -14346,7 +14566,7 @@ function crc32(s) {
 function openDossier(identity) {
   try {
     const dir = dossierDir(identity);
-    (0, import_node_fs10.mkdirSync)(dir, { recursive: true, mode: 448 });
+    (0, import_node_fs13.mkdirSync)(dir, { recursive: true, mode: 448 });
     return {
       dir,
       identity,
@@ -14414,7 +14634,7 @@ function appendEvent(d, ev) {
       at: ev.at ?? (/* @__PURE__ */ new Date()).toISOString(),
       ...ev
     });
-    (0, import_node_fs10.appendFileSync)(d.eventsPath, line, { mode: 384 });
+    (0, import_node_fs13.appendFileSync)(d.eventsPath, line, { mode: 384 });
     return true;
   } catch {
     return false;
@@ -14422,14 +14642,14 @@ function appendEvent(d, ev) {
 }
 function rotateIfNeeded2(d) {
   try {
-    if (!(0, import_node_fs10.existsSync)(d.eventsPath)) return;
-    if ((0, import_node_fs10.statSync)(d.eventsPath).size < ROTATE_BYTES) return;
-    (0, import_node_fs10.mkdirSync)(d.rotatedDir, { recursive: true, mode: 448 });
-    (0, import_node_fs10.renameSync)(d.eventsPath, (0, import_node_path11.join)(d.rotatedDir, `events.${Date.now()}.jsonl`));
-    const kept = (0, import_node_fs10.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
+    if (!(0, import_node_fs13.existsSync)(d.eventsPath)) return;
+    if ((0, import_node_fs13.statSync)(d.eventsPath).size < ROTATE_BYTES) return;
+    (0, import_node_fs13.mkdirSync)(d.rotatedDir, { recursive: true, mode: 448 });
+    (0, import_node_fs13.renameSync)(d.eventsPath, (0, import_node_path11.join)(d.rotatedDir, `events.${Date.now()}.jsonl`));
+    const kept = (0, import_node_fs13.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
     for (const stale of kept.slice(0, Math.max(0, kept.length - ROTATE_KEEP))) {
       try {
-        (0, import_node_fs10.renameSync)((0, import_node_path11.join)(d.rotatedDir, stale), (0, import_node_path11.join)(d.rotatedDir, `${stale}.pruned`));
+        (0, import_node_fs13.renameSync)((0, import_node_path11.join)(d.rotatedDir, stale), (0, import_node_path11.join)(d.rotatedDir, `${stale}.pruned`));
       } catch {
       }
     }
@@ -14439,7 +14659,7 @@ function rotateIfNeeded2(d) {
 
 // src/lib/dossier/fold-dossier.ts
 var import_node_crypto5 = require("node:crypto");
-var import_node_fs11 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_node_path12 = require("node:path");
 var EMPTY_CAPABILITIES = () => ({
   human_reachable: { value: "unknown", tier: "unknown" },
@@ -14491,12 +14711,12 @@ function foldDossier(d, opts = {}) {
     }
   };
   try {
-    if ((0, import_node_fs11.existsSync)(d.rotatedDir)) {
-      const files = (0, import_node_fs11.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
+    if ((0, import_node_fs14.existsSync)(d.rotatedDir)) {
+      const files = (0, import_node_fs14.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
       state.meta.rotations = files.length;
       for (const f of files) {
         try {
-          ingest((0, import_node_fs11.readFileSync)((0, import_node_path12.join)(d.rotatedDir, f), "utf8"));
+          ingest((0, import_node_fs14.readFileSync)((0, import_node_path12.join)(d.rotatedDir, f), "utf8"));
         } catch {
           state.meta.dropped_lines++;
         }
@@ -14505,9 +14725,9 @@ function foldDossier(d, opts = {}) {
   } catch {
   }
   try {
-    if ((0, import_node_fs11.existsSync)(d.eventsPath)) {
-      state.meta.upto_offset = (0, import_node_fs11.statSync)(d.eventsPath).size;
-      ingest((0, import_node_fs11.readFileSync)(d.eventsPath, "utf8"));
+    if ((0, import_node_fs14.existsSync)(d.eventsPath)) {
+      state.meta.upto_offset = (0, import_node_fs14.statSync)(d.eventsPath).size;
+      ingest((0, import_node_fs14.readFileSync)(d.eventsPath, "utf8"));
     }
   } catch {
   }
@@ -14778,7 +14998,7 @@ function applyBounds(state, input) {
 }
 
 // src/lib/dossier/cache.ts
-var import_node_fs12 = require("node:fs");
+var import_node_fs15 = require("node:fs");
 function compactState(s) {
   const ms = (iso) => Date.parse(iso) || 0;
   return {
@@ -14907,20 +15127,20 @@ function encodeState(s) {
 function writeFoldCache(d, state) {
   try {
     const tmp = `${d.foldPath}.${process.pid}.tmp`;
-    (0, import_node_fs12.writeFileSync)(tmp, encodeState(state), { mode: 384 });
-    (0, import_node_fs12.renameSync)(tmp, d.foldPath);
+    (0, import_node_fs15.writeFileSync)(tmp, encodeState(state), { mode: 384 });
+    (0, import_node_fs15.renameSync)(tmp, d.foldPath);
   } catch {
   }
 }
 function readFoldCache(d) {
   try {
-    if (!(0, import_node_fs12.existsSync)(d.foldPath)) return null;
-    const raw = JSON.parse((0, import_node_fs12.readFileSync)(d.foldPath, "utf8"));
+    if (!(0, import_node_fs15.existsSync)(d.foldPath)) return null;
+    const raw = JSON.parse((0, import_node_fs15.readFileSync)(d.foldPath, "utf8"));
     if (raw?.v !== 1) return null;
     const cached2 = expandState(raw);
     if (!cached2?.meta) return null;
-    const size = (0, import_node_fs12.existsSync)(d.eventsPath) ? (0, import_node_fs12.statSync)(d.eventsPath).size : 0;
-    const rotations = (0, import_node_fs12.existsSync)(d.rotatedDir) ? (0, import_node_fs12.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).length : 0;
+    const size = (0, import_node_fs15.existsSync)(d.eventsPath) ? (0, import_node_fs15.statSync)(d.eventsPath).size : 0;
+    const rotations = (0, import_node_fs15.existsSync)(d.rotatedDir) ? (0, import_node_fs15.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).length : 0;
     if (cached2.meta.upto_offset !== size || cached2.meta.rotations !== rotations) return null;
     return cached2;
   } catch {
@@ -14971,13 +15191,13 @@ function assessContinuity(i) {
 
 // src/lib/dossier/reanchor.ts
 var import_node_crypto6 = require("node:crypto");
-var import_node_fs13 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 function lineSha(text) {
   return (0, import_node_crypto6.createHash)("sha256").update(text.trim()).digest("hex").slice(0, HASH_WIDTH);
 }
 function fileHash(path) {
   try {
-    return (0, import_node_crypto6.createHash)("sha256").update((0, import_node_fs13.readFileSync)(path)).digest("hex").slice(0, HASH_WIDTH);
+    return (0, import_node_crypto6.createHash)("sha256").update((0, import_node_fs16.readFileSync)(path)).digest("hex").slice(0, HASH_WIDTH);
   } catch {
     return null;
   }
@@ -15349,14 +15569,14 @@ function foreignAuthoredPaths(identity, opts = {}) {
   let sessions = 0;
   try {
     const dir = treeDir(identity);
-    if (!(0, import_node_fs14.existsSync)(dir)) return { paths: [], sessions: 0 };
-    for (const entry of (0, import_node_fs14.readdirSync)(dir, { withFileTypes: true })) {
+    if (!(0, import_node_fs17.existsSync)(dir)) return { paths: [], sessions: 0 };
+    for (const entry of (0, import_node_fs17.readdirSync)(dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       if (entry.name === identity.sessionKey) continue;
       const log = (0, import_node_path13.join)(dir, entry.name, "events.jsonl");
       try {
-        if (!(0, import_node_fs14.existsSync)(log)) continue;
-        if (now - (0, import_node_fs14.statSync)(log).mtimeMs > windowMs) continue;
+        if (!(0, import_node_fs17.existsSync)(log)) continue;
+        if (now - (0, import_node_fs17.statSync)(log).mtimeMs > windowMs) continue;
         const sib = {
           dir: (0, import_node_path13.join)(dir, entry.name),
           identity,
@@ -15391,13 +15611,13 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
   try {
     const mine = dossierDir(identity);
     const userDir = (0, import_node_path13.dirname)((0, import_node_path13.dirname)(mine));
-    if (!(0, import_node_fs14.existsSync)(userDir)) return 0;
+    if (!(0, import_node_fs17.existsSync)(userDir)) return 0;
     const cutoff = Date.now() - maxAgeMs;
-    for (const tree of (0, import_node_fs14.readdirSync)(userDir, { withFileTypes: true })) {
+    for (const tree of (0, import_node_fs17.readdirSync)(userDir, { withFileTypes: true })) {
       if (!tree.isDirectory()) continue;
       const treePath = (0, import_node_path13.join)(userDir, tree.name);
       let live = 0;
-      for (const entry of (0, import_node_fs14.readdirSync)(treePath, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs17.readdirSync)(treePath, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
         const dir = (0, import_node_path13.join)(treePath, entry.name);
         if (dir === mine) {
@@ -15406,9 +15626,9 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
         }
         try {
           const log = (0, import_node_path13.join)(dir, "events.jsonl");
-          const at = (0, import_node_fs14.existsSync)(log) ? (0, import_node_fs14.statSync)(log).mtimeMs : (0, import_node_fs14.statSync)(dir).mtimeMs;
+          const at = (0, import_node_fs17.existsSync)(log) ? (0, import_node_fs17.statSync)(log).mtimeMs : (0, import_node_fs17.statSync)(dir).mtimeMs;
           if (at < cutoff) {
-            (0, import_node_fs14.rmSync)(dir, { recursive: true, force: true });
+            (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
             removed++;
           } else {
             live++;
@@ -15418,7 +15638,7 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
       }
       if (live === 0) {
         try {
-          (0, import_node_fs14.rmSync)(treePath, { recursive: false, force: false });
+          (0, import_node_fs17.rmSync)(treePath, { recursive: false, force: false });
         } catch {
         }
       }
@@ -15435,8 +15655,8 @@ function sessionDossier(token, sessionId) {
 }
 function hasActiveGoal(d) {
   try {
-    if (!(0, import_node_fs14.existsSync)(d.eventsPath)) return false;
-    return (0, import_node_fs14.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
+    if (!(0, import_node_fs17.existsSync)(d.eventsPath)) return false;
+    return (0, import_node_fs17.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
   } catch {
     return false;
   }
@@ -15529,7 +15749,7 @@ function recordVerdict(d, v) {
     if (!lines.has(f.file)) {
       try {
         const abs = (0, import_node_path13.join)(root, f.file);
-        lines.set(f.file, (0, import_node_fs14.existsSync)(abs) ? (0, import_node_fs14.readFileSync)(abs, "utf8").split("\n") : null);
+        lines.set(f.file, (0, import_node_fs17.existsSync)(abs) ? (0, import_node_fs17.readFileSync)(abs, "utf8").split("\n") : null);
       } catch {
         lines.set(f.file, null);
       }
@@ -15630,7 +15850,7 @@ function recallMemory(d, identity, opts) {
       readFileLines: (file) => {
         try {
           const abs = (0, import_node_path13.join)(root, file);
-          return (0, import_node_fs14.existsSync)(abs) ? (0, import_node_fs14.readFileSync)(abs, "utf8").split("\n") : null;
+          return (0, import_node_fs17.existsSync)(abs) ? (0, import_node_fs17.readFileSync)(abs, "utf8").split("\n") : null;
         } catch {
           return null;
         }
@@ -15679,15 +15899,21 @@ function registerIntentCommands(program2) {
       if (!prompt) {
         process.exit(0);
       }
+      if (deferredToPlugin("intent capture", event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+        process.exit(0);
+      }
+      const isPrimitive = isSlashCommand(prompt);
       const authForScope = await resolveToken(program2.opts().token);
       const scopeToken = authForScope.ok ? authForScope.data.token : void 0;
       const scopeSession = event.session_id || process.env.CLAUDE_SESSION_ID || "";
-      await appendToConversationBuffer(prompt, sessionScopeKey(scopeToken, scopeSession));
-      try {
-        const tok = await resolveToken(globals.token);
-        const session = sessionDossier(tok.ok ? tok.data.token : null, event.session_id ?? null);
-        if (session) recordGoal(session.d, prompt);
-      } catch {
+      if (!isPrimitive) await appendToConversationBuffer(prompt, sessionScopeKey(scopeToken, scopeSession));
+      if (!isPrimitive) {
+        try {
+          const tok = await resolveToken(globals.token);
+          const session = sessionDossier(tok.ok ? tok.data.token : null, event.session_id ?? null);
+          if (session) recordGoal(session.d, prompt);
+        } catch {
+        }
       }
       try {
         await ensureMemoryDir();
@@ -15768,21 +15994,21 @@ async function fireClassify(prompt, sessionId, globals) {
 }
 
 // src/commands/lifecycle.ts
-var import_node_fs18 = require("node:fs");
+var import_node_fs21 = require("node:fs");
 var import_node_path17 = require("node:path");
 
 // src/lib/baseline.ts
-var import_node_fs17 = require("node:fs");
+var import_node_fs20 = require("node:fs");
 var import_node_path16 = require("node:path");
 var import_node_crypto9 = require("node:crypto");
 
 // src/lib/snapshot.ts
-var import_node_fs16 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_node_path15 = require("node:path");
 var import_node_child_process6 = require("node:child_process");
 
 // src/lib/files.ts
-var import_node_fs15 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_path14 = require("node:path");
 var LANG_MAP = {
   // Analyzable (static analysis + Gemini)
@@ -15859,7 +16085,7 @@ function sortByMtime(files) {
     const resolved = resolveFile(f);
     if (!resolved) return null;
     try {
-      const stat3 = (0, import_node_fs15.statSync)(resolved);
+      const stat3 = (0, import_node_fs18.statSync)(resolved);
       return { path: f, resolved, mtime: stat3.mtimeMs };
     } catch {
       return null;
@@ -15892,7 +16118,7 @@ function collectCodeDelta(files, opts) {
     }
     let size;
     try {
-      size = (0, import_node_fs15.statSync)(resolved).size;
+      size = (0, import_node_fs18.statSync)(resolved).size;
     } catch {
       exclude(filepath, "not-stattable");
       continue;
@@ -15909,7 +16135,7 @@ function collectCodeDelta(files, opts) {
     }
     let content;
     try {
-      content = (0, import_node_fs15.readFileSync)(resolved, "utf-8");
+      content = (0, import_node_fs18.readFileSync)(resolved, "utf-8");
     } catch {
       exclude(filepath, "not-readable");
       continue;
@@ -15948,7 +16174,7 @@ function collectCodeDelta(files, opts) {
 
 // src/lib/snapshot.ts
 function generateSnapshotDiffs(files) {
-  if (!(0, import_node_fs16.existsSync)(SNAPSHOT_DIR)) {
+  if (!(0, import_node_fs19.existsSync)(SNAPSHOT_DIR)) {
     return { diffs: [], has_snapshots: false };
   }
   const diffs = [];
@@ -15956,8 +16182,8 @@ function generateSnapshotDiffs(files) {
     if (!resolveInside(SNAPSHOT_DIR, file.path)) continue;
     const snapshotPath = (0, import_node_path15.join)(SNAPSHOT_DIR, file.path);
     const language = file.language ?? detectLanguage(file.path);
-    if ((0, import_node_fs16.existsSync)(snapshotPath)) {
-      const oldContent = (0, import_node_fs16.readFileSync)(snapshotPath, "utf-8");
+    if ((0, import_node_fs19.existsSync)(snapshotPath)) {
+      const oldContent = (0, import_node_fs19.readFileSync)(snapshotPath, "utf-8");
       if (oldContent === file.content) continue;
       const diff = computeDiff(oldContent, file.content, file.path);
       if (diff) {
@@ -15984,8 +16210,8 @@ function saveSnapshots(files) {
     if (!resolveInside(SNAPSHOT_DIR, file.path)) continue;
     const snapshotPath = (0, import_node_path15.join)(SNAPSHOT_DIR, file.path);
     snapshotPaths.add(snapshotPath);
-    (0, import_node_fs16.mkdirSync)((0, import_node_path15.dirname)(snapshotPath), { recursive: true });
-    (0, import_node_fs16.writeFileSync)(snapshotPath, file.content);
+    (0, import_node_fs19.mkdirSync)((0, import_node_path15.dirname)(snapshotPath), { recursive: true });
+    (0, import_node_fs19.writeFileSync)(snapshotPath, file.content);
   }
   cleanStaleSnapshots(SNAPSHOT_DIR, snapshotPaths);
 }
@@ -15993,9 +16219,9 @@ function computeDiff(oldContent, newContent, filePath) {
   const tmpOld = (0, import_node_path15.join)(SNAPSHOT_DIR, ".diff-old.tmp");
   const tmpNew = (0, import_node_path15.join)(SNAPSHOT_DIR, ".diff-new.tmp");
   try {
-    (0, import_node_fs16.mkdirSync)(SNAPSHOT_DIR, { recursive: true });
-    (0, import_node_fs16.writeFileSync)(tmpOld, oldContent);
-    (0, import_node_fs16.writeFileSync)(tmpNew, newContent);
+    (0, import_node_fs19.mkdirSync)(SNAPSHOT_DIR, { recursive: true });
+    (0, import_node_fs19.writeFileSync)(tmpOld, oldContent);
+    (0, import_node_fs19.writeFileSync)(tmpNew, newContent);
     const result = (0, import_node_child_process6.execSync)(
       `git diff --no-index --unified=10 -- "${tmpOld}" "${tmpNew}"`,
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
@@ -16009,32 +16235,32 @@ function computeDiff(oldContent, newContent, filePath) {
     return null;
   } finally {
     try {
-      (0, import_node_fs16.unlinkSync)(tmpOld);
+      (0, import_node_fs19.unlinkSync)(tmpOld);
     } catch {
     }
     try {
-      (0, import_node_fs16.unlinkSync)(tmpNew);
+      (0, import_node_fs19.unlinkSync)(tmpNew);
     } catch {
     }
   }
 }
 function cleanStaleSnapshots(dir, keepSet) {
-  if (!(0, import_node_fs16.existsSync)(dir)) return;
+  if (!(0, import_node_fs19.existsSync)(dir)) return;
   try {
-    const entries = (0, import_node_fs16.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs19.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
       if (dir === SNAPSHOT_DIR && (entry.name === ".diff-old.tmp" || entry.name === ".diff-new.tmp")) continue;
       const fullPath = (0, import_node_path15.join)(dir, entry.name);
       if (entry.isDirectory()) {
         cleanStaleSnapshots(fullPath, keepSet);
         try {
-          const remaining = (0, import_node_fs16.readdirSync)(fullPath);
-          if (remaining.length === 0) (0, import_node_fs16.rmdirSync)(fullPath);
+          const remaining = (0, import_node_fs19.readdirSync)(fullPath);
+          if (remaining.length === 0) (0, import_node_fs19.rmdirSync)(fullPath);
         } catch {
         }
       } else if (!keepSet.has(fullPath)) {
         try {
-          (0, import_node_fs16.unlinkSync)(fullPath);
+          (0, import_node_fs19.unlinkSync)(fullPath);
         } catch {
         }
       }
@@ -16065,8 +16291,8 @@ var CARRY_FILE = `${BASELINE_DIR}/.carry`;
 var CARRY_WINDOW_MS = 12e4;
 function writeCarry(sessionId, headSha) {
   try {
-    (0, import_node_fs17.mkdirSync)(projectPath(BASELINE_DIR), { recursive: true });
-    (0, import_node_fs17.writeFileSync)(
+    (0, import_node_fs20.mkdirSync)(projectPath(BASELINE_DIR), { recursive: true });
+    (0, import_node_fs20.writeFileSync)(
       projectPath(CARRY_FILE),
       JSON.stringify({ from_key: sessionKey(sessionId), head_sha: headSha, ts: Date.now() })
     );
@@ -16076,10 +16302,10 @@ function writeCarry(sessionId, headSha) {
 function claimCarry(newKey) {
   const carryPath = projectPath(CARRY_FILE);
   try {
-    if (!(0, import_node_fs17.existsSync)(carryPath)) return null;
-    const carry = JSON.parse((0, import_node_fs17.readFileSync)(carryPath, "utf-8"));
+    if (!(0, import_node_fs20.existsSync)(carryPath)) return null;
+    const carry = JSON.parse((0, import_node_fs20.readFileSync)(carryPath, "utf-8"));
     try {
-      (0, import_node_fs17.rmSync)(carryPath, { force: true });
+      (0, import_node_fs20.rmSync)(carryPath, { force: true });
     } catch {
     }
     if (!carry?.from_key || typeof carry.ts !== "number") return null;
@@ -16090,11 +16316,11 @@ function claimCarry(newKey) {
     if (!prior) return null;
     const toDir = sessionDir(newKey);
     try {
-      (0, import_node_fs17.rmSync)(toDir, { recursive: true, force: true });
+      (0, import_node_fs20.rmSync)(toDir, { recursive: true, force: true });
     } catch {
     }
-    (0, import_node_fs17.renameSync)(fromDir, toDir);
-    (0, import_node_fs17.writeFileSync)(manifestPath(toDir), JSON.stringify({ ...prior, session_id: newKey }) + "\n");
+    (0, import_node_fs20.renameSync)(fromDir, toDir);
+    (0, import_node_fs20.writeFileSync)(manifestPath(toDir), JSON.stringify({ ...prior, session_id: newKey }) + "\n");
     return readManifest(toDir);
   } catch {
     return null;
@@ -16118,21 +16344,21 @@ function captureBaseline(opts = {}) {
   const head_sha = getCurrentCommit();
   const dirty = getDirtyFiles();
   try {
-    (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs20.rmSync)(dir, { recursive: true, force: true });
   } catch {
   }
   const filesDir = (0, import_node_path16.join)(dir, "files");
   const mirrored = [];
   try {
-    (0, import_node_fs17.mkdirSync)(filesDir, { recursive: true });
+    (0, import_node_fs20.mkdirSync)(filesDir, { recursive: true });
     for (const p of dirty) {
       if (p.includes("..")) continue;
       const content = safeReadForMirror(projectPath(p));
       if (content === null) continue;
       const dest = mirrorPath(dir, p);
       try {
-        (0, import_node_fs17.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
-        (0, import_node_fs17.writeFileSync)(dest, content);
+        (0, import_node_fs20.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
+        (0, import_node_fs20.writeFileSync)(dest, content);
         mirrored.push(p);
       } catch {
       }
@@ -16147,8 +16373,8 @@ function captureBaseline(opts = {}) {
     version: BASELINE_VERSION
   };
   try {
-    (0, import_node_fs17.mkdirSync)(dir, { recursive: true });
-    (0, import_node_fs17.writeFileSync)(manifestPath(dir), JSON.stringify(baseline));
+    (0, import_node_fs20.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs20.writeFileSync)(manifestPath(dir), JSON.stringify(baseline));
   } catch {
   }
   pruneOldBaselines();
@@ -16159,9 +16385,9 @@ function readBaseline(sessionId) {
 }
 function readManifest(dir) {
   const mp = manifestPath(dir);
-  if (!(0, import_node_fs17.existsSync)(mp)) return null;
+  if (!(0, import_node_fs20.existsSync)(mp)) return null;
   try {
-    const parsed = JSON.parse((0, import_node_fs17.readFileSync)(mp, "utf-8"));
+    const parsed = JSON.parse((0, import_node_fs20.readFileSync)(mp, "utf-8"));
     if (typeof parsed.head_sha !== "string" || typeof parsed.captured_at !== "number" || !Array.isArray(parsed.dirty_paths) || parsed.version !== BASELINE_VERSION) {
       return null;
     }
@@ -16192,9 +16418,9 @@ function preImage(repoRelPath, baseline) {
 function resolvePreImage(repoRelPath, baseline) {
   if (baseline.dirty_paths.includes(repoRelPath)) {
     const mp = mirrorPath(sessionDir(sessionKey(baseline.session_id)), repoRelPath);
-    if ((0, import_node_fs17.existsSync)(mp)) {
+    if ((0, import_node_fs20.existsSync)(mp)) {
       try {
-        return { content: (0, import_node_fs17.readFileSync)(mp, "utf-8"), existed: true };
+        return { content: (0, import_node_fs20.readFileSync)(mp, "utf-8"), existed: true };
       } catch {
       }
     }
@@ -16239,8 +16465,8 @@ function absorbIntoBaseline(paths, sessionId) {
       const content = safeReadForMirror(projectPath(p));
       if (content === null) continue;
       const dest = mirrorPath(dir, p);
-      (0, import_node_fs17.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
-      (0, import_node_fs17.writeFileSync)(dest, content);
+      (0, import_node_fs20.mkdirSync)((0, import_node_path16.dirname)(dest), { recursive: true });
+      (0, import_node_fs20.writeFileSync)(dest, content);
       dirty.add(p);
       adopted++;
     } catch {
@@ -16249,7 +16475,7 @@ function absorbIntoBaseline(paths, sessionId) {
   if (adopted === 0) return 0;
   try {
     const updated = { ...baseline, dirty_paths: [...dirty] };
-    (0, import_node_fs17.writeFileSync)(manifestPath(dir), JSON.stringify(updated));
+    (0, import_node_fs20.writeFileSync)(manifestPath(dir), JSON.stringify(updated));
     preImageCache.delete(baseline);
   } catch {
     return 0;
@@ -16260,7 +16486,7 @@ function changedSinceBaseline(repoRelPath, baseline) {
   const pre = preImage(repoRelPath, baseline);
   let current;
   try {
-    current = (0, import_node_fs17.readFileSync)(projectPath(repoRelPath), "utf-8");
+    current = (0, import_node_fs20.readFileSync)(projectPath(repoRelPath), "utf-8");
   } catch {
     return pre.existed;
   }
@@ -16269,8 +16495,8 @@ function changedSinceBaseline(repoRelPath, baseline) {
 }
 function safeReadForMirror(absPath) {
   try {
-    if ((0, import_node_fs17.statSync)(absPath).size > MIRROR_MAX_BYTES) return null;
-    const buf = (0, import_node_fs17.readFileSync)(absPath);
+    if ((0, import_node_fs20.statSync)(absPath).size > MIRROR_MAX_BYTES) return null;
+    const buf = (0, import_node_fs20.readFileSync)(absPath);
     if (buf.includes(0)) return null;
     return buf.toString("utf-8");
   } catch {
@@ -16281,7 +16507,7 @@ function pruneOldBaselines() {
   const root = projectPath(BASELINE_DIR);
   let entries;
   try {
-    entries = (0, import_node_fs17.readdirSync)(root);
+    entries = (0, import_node_fs20.readdirSync)(root);
   } catch {
     return;
   }
@@ -16291,8 +16517,8 @@ function pruneOldBaselines() {
     const manifest = readManifest(dir);
     if (!manifest) {
       try {
-        if (now - (0, import_node_fs17.statSync)(dir).mtimeMs > BASELINE_TTL_MS) {
-          (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
+        if (now - (0, import_node_fs20.statSync)(dir).mtimeMs > BASELINE_TTL_MS) {
+          (0, import_node_fs20.rmSync)(dir, { recursive: true, force: true });
         }
       } catch {
       }
@@ -16300,7 +16526,7 @@ function pruneOldBaselines() {
     }
     if (now - manifest.captured_at <= BASELINE_TTL_MS) continue;
     try {
-      (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
+      (0, import_node_fs20.rmSync)(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -16394,6 +16620,7 @@ function registerLifecycleCommands(program2) {
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
       const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
+      if (deferredToPlugin("compact", sessionId)) process.exit(0);
       const globals = program2.opts();
       const tok = await resolveToken(globals.token);
       const session2 = sessionDossier(tok.ok ? tok.data.token : null, sessionId);
@@ -16422,6 +16649,7 @@ function registerLifecycleCommands(program2) {
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
       const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
+      if (deferredToPlugin("session end", sessionId)) process.exit(0);
       const reason = opts.reason ?? event.session_end_reason ?? event.reason ?? "other";
       if (reason === "clear") {
         writeCarry(sessionId ?? void 0, getCurrentCommit());
@@ -16474,7 +16702,7 @@ function buildCompactionContext(session) {
     readFileLines: (file) => {
       try {
         const abs = (0, import_node_path17.join)(root, file);
-        return (0, import_node_fs18.existsSync)(abs) ? (0, import_node_fs18.readFileSync)(abs, "utf8").split("\n") : null;
+        return (0, import_node_fs21.existsSync)(abs) ? (0, import_node_fs21.readFileSync)(abs, "utf8").split("\n") : null;
       } catch {
         return null;
       }
@@ -16531,18 +16759,18 @@ async function readHookStdin() {
 
 // src/commands/standard.ts
 var import_promises12 = require("node:fs/promises");
-var import_node_fs25 = require("node:fs");
+var import_node_fs28 = require("node:fs");
 var import_yaml3 = __toESM(require_dist());
 
 // src/lib/synthesize.ts
 var import_node_child_process8 = require("node:child_process");
-var import_node_fs21 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 var import_promises9 = require("node:fs/promises");
 var import_node_path20 = require("node:path");
 var import_yaml = __toESM(require_dist());
 
 // src/lib/data-dir.ts
-var import_node_fs19 = require("node:fs");
+var import_node_fs22 = require("node:fs");
 var import_node_path18 = require("node:path");
 function resolveDataDir() {
   const candidates = [
@@ -16550,10 +16778,21 @@ function resolveDataDir() {
     // installed: node_modules/@codacy/verity-cli/data
     (0, import_node_path18.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
+    // THE COMMITTED SOURCE, for a source checkout that has not been built.
+    // cli/data/skills/ is a BUILD ARTIFACT (scripts/build.js copies client/skills
+    // into it) and is gitignored, because skills have one committed source — so
+    // in a fresh clone the packaged candidates above do not exist at all, and
+    // without this the synthesizer throws "Could not find Verity skill data"
+    // for every test and every `verity` run from source. Resolved from this
+    // module's own location, never the cwd: see the warning below.
+    (0, import_node_path18.join)(__dirname, "..", "..", "client"),
+    // bundled: cli/bin/ → ../../client
+    (0, import_node_path18.join)(__dirname, "..", "..", "..", "client"),
+    // tsx: cli/src/lib/ → ../../../client
     ...process.env.VERITY_DEV_DATA_DIR ? [process.env.VERITY_DEV_DATA_DIR] : []
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs19.existsSync)((0, import_node_path18.join)(candidate, "skills"))) {
+    if ((0, import_node_fs22.existsSync)((0, import_node_path18.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -16567,7 +16806,7 @@ function setupDataPath(file) {
 
 // src/lib/detect.ts
 var import_node_child_process7 = require("node:child_process");
-var import_node_fs20 = require("node:fs");
+var import_node_fs23 = require("node:fs");
 var import_node_path19 = require("node:path");
 var TOOLED_LANGUAGES = /* @__PURE__ */ new Set([
   "typescript",
@@ -16624,7 +16863,7 @@ function walk(root) {
     if (depth > WALK_MAX_DEPTH || found.length >= WALK_MAX_FILES) return;
     let entries;
     try {
-      entries = (0, import_node_fs20.readdirSync)(dir, { withFileTypes: true });
+      entries = (0, import_node_fs23.readdirSync)(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -16699,7 +16938,7 @@ var TOOL_CONFIG_MARKERS = [
 ];
 function readJson(path) {
   try {
-    return JSON.parse((0, import_node_fs20.readFileSync)(path, "utf-8"));
+    return JSON.parse((0, import_node_fs23.readFileSync)(path, "utf-8"));
   } catch {
     return null;
   }
@@ -16732,9 +16971,9 @@ function declaredDependencies(root, files) {
     ...files.filter((f) => f.includes("/") && /(^|\/)(pyproject\.toml|requirements\.txt)$/.test(f)).slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path19.join)(root, f))
   ];
   for (const path of pythonManifests) {
-    if (!(0, import_node_fs20.existsSync)(path)) continue;
+    if (!(0, import_node_fs23.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs20.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs23.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/^\s*["']?([A-Za-z][A-Za-z0-9._-]+)/gm)) names2.push(m[1]);
       for (const line of text.split("\n")) {
         if (!/dependencies\s*=/.test(line)) continue;
@@ -16748,9 +16987,9 @@ function declaredDependencies(root, files) {
     ...files.filter((f) => f.includes("/") && (0, import_node_path19.basename)(f) === "go.mod").slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path19.join)(root, f))
   ];
   for (const path of goMods) {
-    if (!(0, import_node_fs20.existsSync)(path)) continue;
+    if (!(0, import_node_fs23.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs20.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs23.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/^\s+([\w.-]+\/[\w./-]+)\s+v/gm)) {
         names2.push(m[1].replace(/^github\.com\//, ""));
       }
@@ -16759,9 +16998,9 @@ function declaredDependencies(root, files) {
   }
   for (const file of ["pom.xml", "build.gradle", "build.gradle.kts", "Gemfile", "Cargo.toml"]) {
     const path = (0, import_node_path19.join)(root, file);
-    if (!(0, import_node_fs20.existsSync)(path)) continue;
+    if (!(0, import_node_fs23.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs20.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs23.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/["'<]([A-Za-z][A-Za-z0-9._-]{2,})["'>]/g)) names2.push(m[1]);
     } catch {
     }
@@ -16769,7 +17008,7 @@ function declaredDependencies(root, files) {
   return names2;
 }
 function detectBuildSystem(root, files) {
-  const has = (f) => (0, import_node_fs20.existsSync)((0, import_node_path19.join)(root, f)) || files.some((p) => (0, import_node_path19.basename)(p) === f);
+  const has = (f) => (0, import_node_fs23.existsSync)((0, import_node_path19.join)(root, f)) || files.some((p) => (0, import_node_path19.basename)(p) === f);
   if (has("pnpm-lock.yaml")) return "pnpm";
   if (has("yarn.lock")) return "yarn";
   if (has("bun.lock") || has("bun.lockb")) return "bun";
@@ -16786,7 +17025,7 @@ function detectBuildSystem(root, files) {
 }
 function detectArchitecture(root, files) {
   const workspaceMarkers = ["lerna.json", "pnpm-workspace.yaml", "nx.json", "turbo.json", "rush.json"];
-  if (workspaceMarkers.some((m) => (0, import_node_fs20.existsSync)((0, import_node_path19.join)(root, m)))) return "monorepo";
+  if (workspaceMarkers.some((m) => (0, import_node_fs23.existsSync)((0, import_node_path19.join)(root, m)))) return "monorepo";
   const pkg = readJson((0, import_node_path19.join)(root, "package.json"));
   if (pkg && "workspaces" in pkg) return "monorepo";
   const manifests = files.filter((f) => /(^|\/)(package\.json|go\.mod|pyproject\.toml|Cargo\.toml|pom\.xml)$/.test(f));
@@ -16811,8 +17050,8 @@ function measureAvgFileLength(root, files, languages) {
   for (let i = 0; i < candidates.length; i += stride) {
     const path = (0, import_node_path19.join)(root, candidates[i]);
     try {
-      if ((0, import_node_fs20.statSync)(path).size > 2 * 1024 * 1024) continue;
-      total += (0, import_node_fs20.readFileSync)(path, "utf-8").split("\n").length;
+      if ((0, import_node_fs23.statSync)(path).size > 2 * 1024 * 1024) continue;
+      total += (0, import_node_fs23.readFileSync)(path, "utf-8").split("\n").length;
       counted++;
     } catch {
     }
@@ -16837,7 +17076,7 @@ function detectProject(root = repoRoot()) {
   const existingToolConfigs = [];
   for (const [tool, markers] of TOOL_CONFIG_MARKERS) {
     for (const marker of markers) {
-      if ((0, import_node_fs20.existsSync)((0, import_node_path19.join)(root, marker))) {
+      if ((0, import_node_fs23.existsSync)((0, import_node_path19.join)(root, marker))) {
         existingToolConfigs.push({ tool, path: `./${marker}` });
         break;
       }
@@ -16942,8 +17181,8 @@ ${closingNote(input.origin)}
 
 // src/lib/synthesize.ts
 function loadCatalog() {
-  const catalog = (0, import_yaml.parse)((0, import_node_fs21.readFileSync)(setupDataPath("patterns-reference.yaml"), "utf-8"));
-  const template = (0, import_yaml.parse)((0, import_node_fs21.readFileSync)(setupDataPath("standard-template.yaml"), "utf-8"));
+  const catalog = (0, import_yaml.parse)((0, import_node_fs24.readFileSync)(setupDataPath("patterns-reference.yaml"), "utf-8"));
+  const template = (0, import_yaml.parse)((0, import_node_fs24.readFileSync)(setupDataPath("standard-template.yaml"), "utf-8"));
   return { catalog, template };
 }
 function selectTools(languages, intensity, catalog) {
@@ -17221,7 +17460,7 @@ function validatePatternIds() {
 }
 async function runSynthesis(opts) {
   const standardPath = projectPath(STANDARD_FILE);
-  if ((0, import_node_fs21.existsSync)(standardPath) && !opts.force) {
+  if ((0, import_node_fs24.existsSync)(standardPath) && !opts.force) {
     return { refused: `${STANDARD_FILE} already exists \u2014 pass --force to replace it.` };
   }
   const detected = opts.detected ?? detectProject();
@@ -17349,11 +17588,11 @@ ${validation.detail}`);
 
 // src/lib/setup-state.ts
 var import_promises10 = require("node:fs/promises");
-var import_node_fs22 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 var SETUP_STATE_FILE = `${VERITY_DIR}/setup.json`;
 async function readSetupState() {
   const path = projectPath(SETUP_STATE_FILE);
-  if (!(0, import_node_fs22.existsSync)(path)) return null;
+  if (!(0, import_node_fs25.existsSync)(path)) return null;
   try {
     const parsed = JSON.parse(await (0, import_promises10.readFile)(path, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : null;
@@ -17369,12 +17608,12 @@ async function writeSetupState(patch) {
 }
 
 // src/lib/push-setup.ts
-var import_node_fs24 = require("node:fs");
+var import_node_fs27 = require("node:fs");
 var import_promises11 = require("node:fs/promises");
 var import_yaml2 = __toESM(require_dist());
 
 // src/lib/verityignore.ts
-var import_node_fs23 = require("node:fs");
+var import_node_fs26 = require("node:fs");
 var EMPTY = { rules: [], securityOverlap: [], problems: [] };
 var SECURITY_PROBES = [
   ".env",
@@ -17467,9 +17706,9 @@ function isIgnored2(ig, path) {
 }
 function loadVerityIgnore() {
   const file = projectPath(VERITYIGNORE_FILE);
-  if (!(0, import_node_fs23.existsSync)(file)) return EMPTY;
+  if (!(0, import_node_fs26.existsSync)(file)) return EMPTY;
   try {
-    return parseVerityIgnore((0, import_node_fs23.readFileSync)(file, "utf-8"));
+    return parseVerityIgnore((0, import_node_fs26.readFileSync)(file, "utf-8"));
   } catch {
     return EMPTY;
   }
@@ -17507,9 +17746,9 @@ function buildStandardUpload(standard, ignoreRaw) {
 }
 function readVerityIgnoreRaw() {
   const file = projectPath(VERITYIGNORE_FILE);
-  if (!(0, import_node_fs23.existsSync)(file)) return null;
+  if (!(0, import_node_fs26.existsSync)(file)) return null;
   try {
-    return (0, import_node_fs23.readFileSync)(file, "utf-8");
+    return (0, import_node_fs26.readFileSync)(file, "utf-8");
   } catch {
     return null;
   }
@@ -17537,7 +17776,7 @@ async function pushStandardAndConfig(globals, what = {}) {
   }
   let standardVersion = null;
   const standardPath = projectPath(STANDARD_FILE);
-  if (pushStandard && (0, import_node_fs24.existsSync)(standardPath)) {
+  if (pushStandard && (0, import_node_fs27.existsSync)(standardPath)) {
     try {
       const content = (0, import_yaml2.parse)(await (0, import_promises11.readFile)(standardPath, "utf-8"));
       const upload = buildStandardUpload(content, readVerityIgnoreRaw());
@@ -17562,7 +17801,7 @@ async function pushStandardAndConfig(globals, what = {}) {
   }
   let configPushed = false;
   const configPath = projectPath(CODACY_CONFIG_FILE);
-  if (pushConfig && (0, import_node_fs24.existsSync)(configPath)) {
+  if (pushConfig && (0, import_node_fs27.existsSync)(configPath)) {
     try {
       const content = JSON.parse(await (0, import_promises11.readFile)(configPath, "utf-8"));
       const result = await apiRequest({
@@ -17594,7 +17833,7 @@ function registerStandardCommands(program2) {
     const state = await readSetupState();
     if (opts.configOnly) {
       const standardPath = projectPath(STANDARD_FILE);
-      if (!(0, import_node_fs25.existsSync)(standardPath)) {
+      if (!(0, import_node_fs28.existsSync)(standardPath)) {
         printError(`No ${STANDARD_FILE} here \u2014 run "verity standard synthesize" to create one.`);
         process.exit(1);
       }
@@ -17763,6 +18002,22 @@ function registerConfigCommands(program2) {
     }
     process.stdout.write(urlResult.data + "\n");
   });
+  config.command("git-moments [moments]").description('Get or set the git moments the guard reviews: commit,push \u2014 or "none"').action((moments) => {
+    if (moments === void 0) {
+      const current = readProjectConfig().git_moments;
+      process.stdout.write((current.length ? current.join(",") : "none") + "\n");
+      return;
+    }
+    const next = moments === "none" ? [] : parseMoments(moments);
+    if (moments !== "none" && next.length === 0) {
+      printError(`Unrecognised moments: ${moments}. Use "commit", "push", "commit,push", or "none".`);
+      process.exit(1);
+    }
+    writeProjectConfig({ git_moments: next });
+    printInfo(
+      next.length ? `Git-moment review enabled for: ${next.join(", ")}` : "Git-moment review disabled \u2014 commits and pushes are no longer gated."
+    );
+  });
   config.command("push").description("Upload the analysis config to the service").option("--file <path>", "Path to config file", CODACY_CONFIG_FILE).action(async (opts) => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
@@ -17905,10 +18160,10 @@ function formatRunDetail(run2) {
 }
 
 // src/lib/ignore-declaration.ts
-var import_node_fs27 = require("node:fs");
+var import_node_fs30 = require("node:fs");
 
 // src/lib/debounce.ts
-var import_node_fs26 = require("node:fs");
+var import_node_fs29 = require("node:fs");
 var import_node_crypto10 = require("node:crypto");
 function scopedFile(base, sessionId) {
   if (!sessionId) return base;
@@ -17916,9 +18171,9 @@ function scopedFile(base, sessionId) {
 }
 function checkDebounce(debounceSeconds = DEBOUNCE_SECONDS, sessionId) {
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs26.existsSync)(file)) return null;
+  if (!(0, import_node_fs29.existsSync)(file)) return null;
   try {
-    const lastTs = parseInt((0, import_node_fs26.readFileSync)(file, "utf-8").trim(), 10);
+    const lastTs = parseInt((0, import_node_fs29.readFileSync)(file, "utf-8").trim(), 10);
     const nowTs = Math.floor(Date.now() / 1e3);
     const elapsed = nowTs - lastTs;
     if (elapsed < debounceSeconds) {
@@ -17931,10 +18186,10 @@ function checkDebounce(debounceSeconds = DEBOUNCE_SECONDS, sessionId) {
 function checkMtime(files, bypassForRecentCommits, sessionId) {
   if (bypassForRecentCommits) return null;
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs26.existsSync)(file)) return null;
+  if (!(0, import_node_fs29.existsSync)(file)) return null;
   let debounceTime;
   try {
-    debounceTime = (0, import_node_fs26.statSync)(file).mtimeMs;
+    debounceTime = (0, import_node_fs29.statSync)(file).mtimeMs;
   } catch {
     return null;
   }
@@ -17942,7 +18197,7 @@ function checkMtime(files, bypassForRecentCommits, sessionId) {
     const resolved = resolveFile(f);
     if (!resolved) continue;
     try {
-      const stat3 = (0, import_node_fs26.statSync)(resolved);
+      const stat3 = (0, import_node_fs29.statSync)(resolved);
       if (stat3.mtimeMs > debounceTime) {
         return null;
       }
@@ -17958,8 +18213,8 @@ function computeContentHash(files) {
   for (const f of sorted) {
     const resolved = resolveFile(f) ?? f;
     try {
-      if ((0, import_node_fs26.existsSync)(resolved)) {
-        hash.update((0, import_node_fs26.readFileSync)(resolved));
+      if ((0, import_node_fs29.existsSync)(resolved)) {
+        hash.update((0, import_node_fs29.readFileSync)(resolved));
       }
     } catch {
     }
@@ -17969,9 +18224,9 @@ function computeContentHash(files) {
 function checkContentHash(files, sessionId) {
   const hash = computeContentHash(files);
   const file = scopedFile(HASH_FILE, sessionId);
-  if ((0, import_node_fs26.existsSync)(file)) {
+  if ((0, import_node_fs29.existsSync)(file)) {
     try {
-      const storedHash = (0, import_node_fs26.readFileSync)(file, "utf-8").trim();
+      const storedHash = (0, import_node_fs29.readFileSync)(file, "utf-8").trim();
       if (hash === storedHash) {
         return { skip: "No source changes since last analysis", hash };
       }
@@ -17981,24 +18236,24 @@ function checkContentHash(files, sessionId) {
   return { skip: null, hash };
 }
 function recordAnalysisStart(sessionId) {
-  (0, import_node_fs26.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs26.writeFileSync)(scopedFile(DEBOUNCE_FILE, sessionId), String(Math.floor(Date.now() / 1e3)));
+  (0, import_node_fs29.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs29.writeFileSync)(scopedFile(DEBOUNCE_FILE, sessionId), String(Math.floor(Date.now() / 1e3)));
 }
 function recordPassHash(hash, sessionId) {
-  (0, import_node_fs26.writeFileSync)(scopedFile(HASH_FILE, sessionId), hash);
+  (0, import_node_fs29.writeFileSync)(scopedFile(HASH_FILE, sessionId), hash);
 }
 function narrowToRecent(files, sessionId) {
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs26.existsSync)(file)) return files;
+  if (!(0, import_node_fs29.existsSync)(file)) return files;
   let debounceTime;
   try {
-    debounceTime = (0, import_node_fs26.statSync)(file).mtimeMs;
+    debounceTime = (0, import_node_fs29.statSync)(file).mtimeMs;
   } catch {
     return files;
   }
   const recent = files.filter((f) => {
     try {
-      return (0, import_node_fs26.existsSync)(f) && (0, import_node_fs26.statSync)(f).mtimeMs > debounceTime;
+      return (0, import_node_fs29.existsSync)(f) && (0, import_node_fs29.statSync)(f).mtimeMs > debounceTime;
     } catch {
       return false;
     }
@@ -18011,9 +18266,9 @@ function readIteration(currentCommit, _contentHash) {
 var NO_BLOCKS = { attempts: 0, blocks: 0, fingerprint: null };
 function readBlockState(currentCommit, opts) {
   if (opts?.newUserPrompt) return NO_BLOCKS;
-  if (!(0, import_node_fs26.existsSync)(ITERATION_FILE)) return NO_BLOCKS;
+  if (!(0, import_node_fs29.existsSync)(ITERATION_FILE)) return NO_BLOCKS;
   try {
-    const stored = (0, import_node_fs26.readFileSync)(ITERATION_FILE, "utf-8").trim();
+    const stored = (0, import_node_fs29.readFileSync)(ITERATION_FILE, "utf-8").trim();
     const parsed = stored.startsWith("{") ? parseJsonState(stored) : parseLegacyState(stored);
     if (!parsed) return NO_BLOCKS;
     if (parsed.commit !== currentCommit) return NO_BLOCKS;
@@ -18059,8 +18314,8 @@ function isSameProblem(previous, current) {
   return current.split(",").some((k) => prev.has(k));
 }
 function writeBlockState(commit, state) {
-  (0, import_node_fs26.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs26.writeFileSync)(
+  (0, import_node_fs29.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs29.writeFileSync)(
     ITERATION_FILE,
     JSON.stringify({
       v: 2,
@@ -18165,9 +18420,9 @@ function resolveIgnoreState(keys) {
 }
 function readIgnoreState(sessionId) {
   const file = stateFile(sessionId);
-  if (!(0, import_node_fs27.existsSync)(file)) return null;
+  if (!(0, import_node_fs30.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs27.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs30.readFileSync)(file, "utf-8")) ?? {};
     const spent = typeof o.spent === "number" ? o.spent : 0;
     const raw = o.active;
     let active = null;
@@ -18191,8 +18446,8 @@ function readIgnoreState(sessionId) {
 }
 function writeIgnoreState(state, sessionId) {
   try {
-    (0, import_node_fs27.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
-    (0, import_node_fs27.writeFileSync)(stateFile(sessionId), JSON.stringify({ v: 1, active: state.active, spent: state.spent }));
+    (0, import_node_fs30.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
+    (0, import_node_fs30.writeFileSync)(stateFile(sessionId), JSON.stringify({ v: 1, active: state.active, spent: state.spent }));
   } catch {
   }
 }
@@ -18566,59 +18821,8 @@ function createRun(opts, globals) {
   };
 }
 
-// src/lib/stderr-log.ts
-var import_node_fs28 = require("node:fs");
-var TOKEN_RE2 = /verity_[0-9a-f]{16,}/g;
-var ANSI_RE = /\u001b\[[0-?]*[ -/]*[@-~]/g;
-function scrub(s) {
-  return s.replace(TOKEN_RE2, "verity_***REDACTED***").replace(ANSI_RE, "");
-}
-var installed = false;
-var wroteBanner = false;
-var banner = "";
-function append(text) {
-  try {
-    const dir = projectPath(DEBUG_LOG_DIR);
-    const file = projectPath(STDERR_LOG_FILE);
-    (0, import_node_fs28.mkdirSync)(dir, { recursive: true });
-    rotateIfNeeded(file);
-    (0, import_node_fs28.appendFileSync)(file, text);
-  } catch {
-  }
-}
-function ensureBanner() {
-  if (wroteBanner) return;
-  wroteBanner = true;
-  append(banner);
-}
-function installStderrLog(cmd, argv, version) {
-  if (installed || !isDebugEnabled()) return;
-  installed = true;
-  banner = `
-\u2501\u2501 verity ${cmd} \xB7 ${(/* @__PURE__ */ new Date()).toISOString()} \xB7 pid ${process.pid}
-   v${version} \xB7 ${process.cwd()}
-   argv: ${scrub(argv.join(" "))}
-`;
-  const original = process.stderr.write.bind(process.stderr);
-  const tee = (...args) => {
-    const result = original(...args);
-    try {
-      const chunk = args[0];
-      const text = typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf-8") : String(chunk);
-      ensureBanner();
-      append(scrub(text));
-    } catch {
-    }
-    return result;
-  };
-  process.stderr.write = tee;
-}
-function logToFileOnly(text) {
-  if (!installed) return;
-  ensureBanner();
-  append(text.endsWith("\n") ? text : `${text}
-`);
-}
+// src/commands/analyze/index.ts
+var import_node_fs43 = require("node:fs");
 
 // src/lib/repo-context.ts
 var import_node_child_process9 = require("node:child_process");
@@ -19439,7 +19643,7 @@ function installRunEvidence(run2) {
 
 // src/lib/git-frame.ts
 var import_node_child_process10 = require("node:child_process");
-var import_node_fs29 = require("node:fs");
+var import_node_fs31 = require("node:fs");
 var import_node_os4 = require("node:os");
 var import_node_path21 = require("node:path");
 var import_node_path22 = require("node:path");
@@ -19578,14 +19782,14 @@ function gitAt(dir, args) {
 }
 function realpathOr(p) {
   try {
-    return import_node_fs29.realpathSync.native(p);
+    return import_node_fs31.realpathSync.native(p);
   } catch {
     return (0, import_node_path21.resolve)(p);
   }
 }
 function resolveFrame(input) {
   const found = findMomentSegment(input.command, input.on);
-  const hookDirUsable = !!input.hookCwd && (0, import_node_fs29.existsSync)(input.hookCwd);
+  const hookDirUsable = !!input.hookCwd && (0, import_node_fs31.existsSync)(input.hookCwd);
   const baseDir = hookDirUsable ? input.hookCwd : process.cwd();
   let anchor = hookDirUsable ? "hook-cwd" : "process-cwd";
   const refuse = (refusal) => ({
@@ -19608,7 +19812,7 @@ function resolveFrame(input) {
     if (dirs.size > 1) return refuse(`target:multiple ${found.moment} targets in one command`);
     const targetDir = dirs.size === 1 ? [...dirs][0] : baseDir;
     if (targetDir !== baseDir) {
-      if (!(0, import_node_fs29.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
+      if (!(0, import_node_fs31.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
       dir = targetDir;
     }
   }
@@ -19644,21 +19848,19 @@ function refResolves(frame, ref) {
   return frameGit(frame, ["rev-parse", "--verify", "-q", `${ref}^{commit}`]) !== "";
 }
 var SHA_RE2 = /^[0-9a-f]{40}$/;
-function baselineShaAt(frame) {
-  if (!frame.worktreeRoot) return null;
-  try {
-    const sha = (0, import_node_fs29.readFileSync)((0, import_node_path22.join)(frame.worktreeRoot, BASELINE_SHA_FILE), "utf-8").trim();
-    if (!SHA_RE2.test(sha)) return null;
-    return refResolves(frame, sha) ? sha : null;
-  } catch {
-    return null;
+function stagedRange(frame) {
+  if (!frame.worktreeRoot) return { kind: "nothing", base: null, head: "INDEX", via: "refused" };
+  const mergeHead = frame.gitDir ? (0, import_node_path22.join)(frame.gitDir, "MERGE_HEAD") : null;
+  if (mergeHead && (0, import_node_fs31.existsSync)(mergeHead)) {
+    const vsHead = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "HEAD"]).split("\n").filter(Boolean));
+    const vsMerge = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "MERGE_HEAD"]).split("\n").filter(Boolean));
+    const resolutions = [...vsHead].filter((f) => vsMerge.has(f) && !isVerityOwnedPath(f));
+    return { kind: "merge", base: "HEAD", head: "INDEX", via: "merge-resolutions", files: resolutions };
   }
-}
-function stagedRange() {
   return { kind: "staged", base: "HEAD", head: "INDEX", via: "index" };
 }
 function resolvePushRange(frame, command, on) {
-  const nothing = (via) => ({ kind: "nothing", base: null, head: "HEAD", via });
+  const nothing = (via2) => ({ kind: "nothing", base: null, head: "HEAD", via: via2 });
   if (!frame.worktreeRoot) return nothing("refused");
   const found = findMomentSegment(command, on);
   const segment = found ? splitSegments(command)[found.segmentIndex] : "";
@@ -19666,54 +19868,32 @@ function resolvePushRange(frame, command, on) {
   if (target.isDelete) return nothing("deletion");
   const head = target.srcRef ?? "HEAD";
   if (!refResolves(frame, head)) return nothing(`src-unresolvable:${head}`);
-  const srcName = target.srcRef;
-  const branchForRemote = srcName ?? frame.branch;
-  const candidates = [];
-  if (target.remote && (target.dstRef ?? srcName)) {
-    const dstName = (target.dstRef ?? srcName).replace(/^refs\/heads\//, "");
-    candidates.push({ ref: `refs/remotes/${target.remote}/${dstName}`, via: `refspec:${target.remote}/${dstName}` });
-  }
-  if (target.remote && !srcName && !target.dstRef && frame.branch) {
-    candidates.push({ ref: `refs/remotes/${target.remote}/${frame.branch}`, via: `remote:${target.remote}/${frame.branch}` });
-  }
-  candidates.push({ ref: srcName ? `${srcName}@{push}` : "@{push}", via: "@{push}" });
-  candidates.push({ ref: srcName ? `${srcName}@{upstream}` : "@{upstream}", via: "@{upstream}" });
-  if (branchForRemote) {
-    candidates.push({
-      ref: `refs/remotes/origin/${branchForRemote.replace(/^refs\/heads\//, "")}`,
-      via: `origin/${branchForRemote.replace(/^refs\/heads\//, "")}`
-    });
-  }
-  for (const c of candidates) {
-    if (!refResolves(frame, c.ref)) continue;
-    const mergeBase = frameGit(frame, ["merge-base", c.ref, head]);
-    if (SHA_RE2.test(mergeBase)) return { kind: "push", base: mergeBase, head, via: c.via };
+  const remotePattern = target.remote ? `--remotes=${target.remote}` : "--remotes";
+  const via = target.remote ? `publication:${target.remote}` : "publication";
+  const commits = frameGit(frame, ["rev-list", head, "--not", remotePattern]).split("\n").filter(Boolean);
+  if (commits.length === 0) return { kind: "nothing", base: null, head, via: "already-published" };
+  const boundary = frameGit(frame, ["rev-list", head, "--not", remotePattern, "--boundary"]).split("\n").filter((l) => l.startsWith("-")).map((l) => l.slice(1));
+  const base = boundary.find((s) => SHA_RE2.test(s)) ?? null;
+  const files = /* @__PURE__ */ new Set();
+  for (const sha of commits) {
+    for (const f of frameGit(frame, ["diff-tree", "--no-commit-id", "--name-only", "-r", sha]).split("\n")) {
+      if (f && !isVerityOwnedPath(f)) files.add(f);
+    }
   }
-  const baseline = baselineShaAt(frame);
-  if (baseline) return { kind: "baseline", base: baseline, head, via: "review-baseline" };
-  if (refResolves(frame, `${head}~1`)) return { kind: "last-commit", base: `${head}~1`, head, via: `${head}~1` };
-  return nothing("no-parent");
+  return { kind: "push", base, head, via, files: [...files], commits };
 }
 function rangeFiles(frame, range) {
-  let out;
-  switch (range.kind) {
-    case "staged":
-      out = frameGit(frame, ["diff", "--cached", "--name-only"]);
-      break;
-    case "push":
-    case "baseline":
-    case "last-commit":
-      out = frameGit(frame, ["diff", "--name-only", range.base, range.head === "INDEX" ? "HEAD" : range.head]);
-      break;
-    case "nothing":
-      return [];
+  if (range.files) return range.files.filter((f) => !isVerityOwnedPath(f));
+  if (range.kind === "staged") {
+    return frameGit(frame, ["diff", "--cached", "--name-only"]).split("\n").filter((l) => l.length > 0).filter((f) => !isVerityOwnedPath(f));
   }
-  return out.split("\n").filter((l) => l.length > 0).filter((f) => !isVerityOwnedPath(f));
+  return [];
 }
 function rangeChangeSignals(frame, range, paths) {
   const out = /* @__PURE__ */ new Map();
   if (range.kind === "nothing" || paths.length === 0) return out;
-  const args = range.kind === "staged" ? ["diff", "--cached", "--unified=0"] : ["diff", "--unified=0", range.base, range.head === "INDEX" ? "HEAD" : range.head];
+  if (range.kind === "push" && !range.base) return out;
+  const args = range.kind === "staged" || range.kind === "merge" ? ["diff", "--cached", "--unified=0"] : ["diff", "--unified=0", range.base, range.head === "INDEX" ? "HEAD" : range.head];
   const diff = frameGit(frame, [...args, "--", ...paths]);
   let current = null;
   let oldSide = null;
@@ -19745,8 +19925,9 @@ function rangeChangeSignals(frame, range, paths) {
   return out;
 }
 function rangeMessages(frame, range) {
-  if (range.kind === "staged" || range.kind === "nothing" || !range.base) return "";
-  return frameGit(frame, ["log", `${range.base}..${range.head === "INDEX" ? "HEAD" : range.head}`, "--format=%B%x00"]).split("\0").map((s) => s.trim()).filter(Boolean).join("\n\n");
+  if (range.kind !== "push" || !range.commits || range.commits.length === 0) return "";
+  const commits = range.commits.slice(0, 100);
+  return frameGit(frame, ["show", "-s", "--format=%B%x00", ...commits]).split("\0").map((s) => s.trim()).filter(Boolean).join("\n\n");
 }
 function frameTelemetry(frame, range, divergence) {
   const t = {
@@ -19794,7 +19975,7 @@ function truthy(v) {
 }
 
 // src/lib/transcript.ts
-var import_node_fs30 = require("node:fs");
+var import_node_fs32 = require("node:fs");
 var MAX_READ_BYTES = 256 * 1024;
 var SMALL_FILE_BYTES = 64 * 1024;
 var MAX_FILES_LIST = 20;
@@ -19821,7 +20002,7 @@ async function extractActionSummary(transcriptPath) {
 function readTurnLines(transcriptPath) {
   let size;
   try {
-    size = (0, import_node_fs30.statSync)(transcriptPath).size;
+    size = (0, import_node_fs32.statSync)(transcriptPath).size;
   } catch {
     return null;
   }
@@ -19829,7 +20010,7 @@ function readTurnLines(transcriptPath) {
   let raw;
   let windowed = false;
   if (size <= SMALL_FILE_BYTES) {
-    raw = (0, import_node_fs30.readFileSync)(transcriptPath, "utf-8");
+    raw = (0, import_node_fs32.readFileSync)(transcriptPath, "utf-8");
   } else {
     windowed = true;
     const buf = Buffer.alloc(Math.min(MAX_READ_BYTES, size));
@@ -20146,6 +20327,9 @@ async function bootstrap(run2) {
     isTTY: process.stdout.isTTY === true
   });
   const { assistantMessage: assistantResponse, stopReason, transcriptPath, sessionId } = await readStopHookStdin();
+  if (deferredToPlugin("analyze", sessionId ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+    process.exit(0);
+  }
   const actionSummary = transcriptPath ? await extractActionSummary(transcriptPath) : null;
   const tokenResult = await resolveToken(globals.token);
   const scopeToken = tokenResult.ok ? tokenResult.data.token : void 0;
@@ -20325,7 +20509,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.32.0-experimental.f0746f7" : "dev";
+    return true ? "0.32.0" : "dev";
   } catch {
     return "dev";
   }
@@ -20366,7 +20550,7 @@ async function sendSkipBeacon(ctx, reason) {
 
 // src/lib/static-analysis.ts
 var import_node_child_process11 = require("node:child_process");
-var import_node_fs31 = require("node:fs");
+var import_node_fs33 = require("node:fs");
 var SEVERITY_ORDER = {
   Error: 0,
   Critical: 0,
@@ -20414,7 +20598,7 @@ function runCodacyAnalysis(files) {
   if (files.length === 0) return empty;
   const existingFiles = files.filter((f) => {
     try {
-      return (0, import_node_fs31.existsSync)(f);
+      return (0, import_node_fs33.existsSync)(f);
     } catch {
       return false;
     }
@@ -20683,7 +20867,7 @@ async function scope(run2) {
 }
 
 // src/lib/specs.ts
-var import_node_fs32 = require("node:fs");
+var import_node_fs34 = require("node:fs");
 var import_node_path23 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
@@ -20715,16 +20899,16 @@ function discoverSpecs(consulted = []) {
     const totalCap = relevant ? MAX_TOTAL_SPEC_BYTES : UNCONSULTED_TOTAL_BYTES;
     if (totalBytes >= totalCap) return false;
     if (seen.has(specPath)) return true;
-    if (!(0, import_node_fs32.existsSync)(specPath)) return true;
+    if (!(0, import_node_fs34.existsSync)(specPath)) return true;
     seen.add(specPath);
     const remaining = totalCap - totalBytes;
     const fileCap = relevant ? MAX_SPEC_FILE_BYTES : UNCONSULTED_FILE_BYTES;
     const readBytes = Math.min(fileCap, remaining);
     try {
       const buf = Buffer.alloc(readBytes);
-      const fd = (0, import_node_fs32.openSync)(specPath, "r");
-      const bytesRead = (0, import_node_fs32.readSync)(fd, buf, 0, readBytes, 0);
-      (0, import_node_fs32.closeSync)(fd);
+      const fd = (0, import_node_fs34.openSync)(specPath, "r");
+      const bytesRead = (0, import_node_fs34.readSync)(fd, buf, 0, readBytes, 0);
+      (0, import_node_fs34.closeSync)(fd);
       const content = buf.slice(0, bytesRead).toString("utf-8");
       if (!content) return true;
       result.push({ path: specPath, content });
@@ -20740,7 +20924,7 @@ function discoverSpecs(consulted = []) {
     if (!addSpec(candidate)) break;
   }
   for (const dir of ["spec", "docs"]) {
-    if (!(0, import_node_fs32.existsSync)(dir)) continue;
+    if (!(0, import_node_fs34.existsSync)(dir)) continue;
     try {
       const mdFiles = findMdFiles(dir, 2).sort();
       for (const mdFile of mdFiles) {
@@ -20755,7 +20939,7 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   if (depth >= maxDepth) return [];
   const result = [];
   try {
-    const entries = (0, import_node_fs32.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs34.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
       const fullPath = (0, import_node_path23.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
@@ -20774,14 +20958,14 @@ function discoverPlans() {
   const candidates = [];
   const seen = /* @__PURE__ */ new Set();
   for (const plansDir of [localPlansDir, homePlansDir]) {
-    if (!(0, import_node_fs32.existsSync)(plansDir)) continue;
+    if (!(0, import_node_fs34.existsSync)(plansDir)) continue;
     try {
-      for (const f of (0, import_node_fs32.readdirSync)(plansDir)) {
+      for (const f of (0, import_node_fs34.readdirSync)(plansDir)) {
         if (!f.endsWith(".md") || seen.has(f)) continue;
         seen.add(f);
         const fullPath = (0, import_node_path23.join)(plansDir, f);
         try {
-          const stat3 = (0, import_node_fs32.statSync)(fullPath);
+          const stat3 = (0, import_node_fs34.statSync)(fullPath);
           candidates.push({ name: f, path: fullPath, mtime: stat3.mtimeMs, size: stat3.size });
         } catch {
         }
@@ -20794,7 +20978,7 @@ function discoverPlans() {
   for (const entry of candidates.slice(0, MAX_PLAN_FILES)) {
     if (entry.size > MAX_PLAN_FILE_BYTES) continue;
     try {
-      const content = (0, import_node_fs32.readFileSync)(entry.path, "utf-8");
+      const content = (0, import_node_fs34.readFileSync)(entry.path, "utf-8");
       result.push({ name: entry.name, content });
     } catch {
     }
@@ -20809,12 +20993,12 @@ function discoverGuardDocs(rangeFiles2) {
     if (result.length >= MAX_SPEC_FILES) break;
     if (!GUARD_DOC_EXT.test(path)) continue;
     if (path.startsWith("/") || path.includes("..")) continue;
-    if (!(0, import_node_fs32.existsSync)(path)) continue;
+    if (!(0, import_node_fs34.existsSync)(path)) continue;
     try {
-      const stat3 = (0, import_node_fs32.statSync)(path);
+      const stat3 = (0, import_node_fs34.statSync)(path);
       if (stat3.size > MAX_PLAN_FILE_BYTES) continue;
       if (totalBytes + stat3.size > MAX_TOTAL_SPEC_BYTES) continue;
-      const content = (0, import_node_fs32.readFileSync)(path, "utf-8");
+      const content = (0, import_node_fs34.readFileSync)(path, "utf-8");
       if (!content) continue;
       result.push({ name: path, content });
       totalBytes += content.length;
@@ -20990,7 +21174,7 @@ async function mode(run2) {
 }
 
 // src/lib/fold.ts
-var import_node_fs33 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_node_path24 = require("node:path");
 var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "user",
@@ -21128,7 +21312,7 @@ function candidateRoots(repoRoot2) {
   const norm = repoRoot2.replace(/\\/g, "/").replace(/\/+$/, "");
   const out = [norm];
   try {
-    const real = import_node_fs33.realpathSync.native(norm).replace(/\\/g, "/").replace(/\/+$/, "");
+    const real = import_node_fs35.realpathSync.native(norm).replace(/\\/g, "/").replace(/\/+$/, "");
     if (real !== norm) out.push(real);
   } catch {
   }
@@ -21216,8 +21400,8 @@ function fold(transcriptPath, opts = {}) {
     }
   };
   try {
-    if (!(0, import_node_fs33.existsSync)(transcriptPath)) return result;
-    ingest((0, import_node_fs33.readFileSync)(transcriptPath, "utf8"), "agent");
+    if (!(0, import_node_fs35.existsSync)(transcriptPath)) return result;
+    ingest((0, import_node_fs35.readFileSync)(transcriptPath, "utf8"), "agent");
     result.coverage.complete = true;
   } catch {
     return result;
@@ -21228,19 +21412,19 @@ function fold(transcriptPath, opts = {}) {
       (0, import_node_path24.basename)(transcriptPath).replace(/\.jsonl$/, ""),
       "subagents"
     );
-    if ((0, import_node_fs33.existsSync)(sidecarDir)) {
+    if ((0, import_node_fs35.existsSync)(sidecarDir)) {
       const maxFiles = opts.maxSidecars ?? 200;
       const maxBytes = opts.maxSidecarBytes ?? 16 * 1024 * 1024;
       const found = [];
       const walk2 = (d, depth) => {
         if (depth > 4) return;
-        for (const e of (0, import_node_fs33.readdirSync)(d, { withFileTypes: true })) {
+        for (const e of (0, import_node_fs35.readdirSync)(d, { withFileTypes: true })) {
           const p = (0, import_node_path24.join)(d, e.name);
           if (e.isDirectory()) {
             walk2(p, depth + 1);
           } else if (e.name.startsWith("agent-") && e.name.endsWith(".jsonl")) {
             try {
-              const st = (0, import_node_fs33.statSync)(p);
+              const st = (0, import_node_fs35.statSync)(p);
               found.push({ path: p, size: st.size, mtimeMs: st.mtimeMs });
             } catch {
               result.coverage.malformed++;
@@ -21257,7 +21441,7 @@ function fold(transcriptPath, opts = {}) {
           continue;
         }
         try {
-          ingest((0, import_node_fs33.readFileSync)(f.path, "utf8"), "subagent");
+          ingest((0, import_node_fs35.readFileSync)(f.path, "utf8"), "subagent");
           bytes += f.size;
           result.coverage.subagentFiles++;
         } catch {
@@ -21292,7 +21476,7 @@ function fold(transcriptPath, opts = {}) {
 }
 function classifyUnobserved(path) {
   try {
-    const st = (0, import_node_fs33.statSync)(path);
+    const st = (0, import_node_fs35.statSync)(path);
     if (!st.isFile()) return "unreadable";
   } catch {
     return "unreadable";
@@ -21544,7 +21728,20 @@ async function evidence(run2) {
             widened_to: allForReview.length
           });
         }
-        const baseForReview = narrowingIsTrustworthy ? scoped.files : recoveredScope.length > 0 ? recoveredScope : allForReview;
+        const authorshipWasObservable = scoped.signal === "authored" && actionSummary?.transcript_windowed !== "orphaned";
+        if (!narrowingIsTrustworthy && recoveredScope.length === 0 && authorshipWasObservable) {
+          logEvent("authored_nothing_reviewable", {
+            touched: (actionSummary?.files_edited?.length ?? 0) + (actionSummary?.files_created?.length ?? 0),
+            candidates: allForReview.length
+          });
+        }
+        const baseForReview = chooseReviewScope({
+          narrowingIsTrustworthy,
+          scopedFiles: scoped.files,
+          recoveredScope,
+          allForReview,
+          authorshipWasObservable
+        });
         const recentForReview = narrowToRecent(baseForReview, baselineSessionId);
         if (!opts.skipStatic && isCodacyAvailable()) {
           let allScannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles]));
@@ -21596,20 +21793,20 @@ async function evidence(run2) {
 }
 
 // src/lib/cache-cleanup.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs36 = require("node:fs");
 var import_node_path25 = require("node:path");
 var CACHE_TTL_DAYS = 7;
 function pruneStaleCache() {
   try {
     const dir = projectPath(CACHE_DIR);
     const cutoff = Date.now() - CACHE_TTL_DAYS * 24 * 3600 * 1e3;
-    for (const entry of (0, import_node_fs34.readdirSync)(dir)) {
+    for (const entry of (0, import_node_fs36.readdirSync)(dir)) {
       if (!entry.startsWith("pending-")) continue;
       const path = (0, import_node_path25.join)(dir, entry);
       try {
-        const stat3 = (0, import_node_fs34.statSync)(path);
+        const stat3 = (0, import_node_fs36.statSync)(path);
         if (stat3.mtimeMs < cutoff) {
-          (0, import_node_fs34.unlinkSync)(path);
+          (0, import_node_fs36.unlinkSync)(path);
           logEvent("cache_entry_pruned", {
             path: entry,
             age_days: Math.round((Date.now() - stat3.mtimeMs) / 864e5)
@@ -21623,7 +21820,7 @@ function pruneStaleCache() {
 }
 
 // src/lib/context-files.ts
-var import_node_fs35 = require("node:fs");
+var import_node_fs37 = require("node:fs");
 var import_node_os5 = require("node:os");
 var MAX_CONTEXT_FILES = 10;
 var MAX_CONTEXT_FILE_BYTES = 10240;
@@ -21681,7 +21878,7 @@ function gatherContextFiles(contextPaths, deltaFiles, opts) {
       continue;
     }
     try {
-      const content = (0, import_node_fs35.readFileSync)(safePath, "utf8");
+      const content = (0, import_node_fs37.readFileSync)(safePath, "utf8");
       const bytes = Buffer.byteLength(content);
       if (bytes > MAX_CONTEXT_FILE_BYTES) {
         logEvent("context_file_skipped", { path: filePath, reason: "too_large", bytes });
@@ -21772,7 +21969,7 @@ async function repoContext(run2) {
 
 // src/lib/seed-runner.ts
 var import_promises14 = require("node:fs/promises");
-var import_node_fs36 = require("node:fs");
+var import_node_fs38 = require("node:fs");
 var import_node_path26 = require("node:path");
 var import_yaml4 = __toESM(require_dist());
 
@@ -22012,7 +22209,7 @@ function renderNodeMarkdown(candidate, nodeId, createdAt) {
   return fm;
 }
 async function runSeed(opts) {
-  if (!(0, import_node_fs36.existsSync)(STANDARD_FILE)) {
+  if (!(0, import_node_fs38.existsSync)(STANDARD_FILE)) {
     return { created: 0, failed: 0, skipped: "no_standard", candidates: [] };
   }
   let standardDoc;
@@ -22024,7 +22221,7 @@ async function runSeed(opts) {
   }
   const knowledgeSpec = standardDoc.knowledge_spec ?? {};
   let readmeContent;
-  if ((0, import_node_fs36.existsSync)("README.md")) {
+  if ((0, import_node_fs38.existsSync)("README.md")) {
     try {
       readmeContent = await (0, import_promises14.readFile)("README.md", "utf-8");
     } catch {
@@ -22032,7 +22229,7 @@ async function runSeed(opts) {
   }
   let claudeMdContent;
   for (const p of ["CLAUDE.md", ".claude/CLAUDE.md"]) {
-    if ((0, import_node_fs36.existsSync)(p)) {
+    if ((0, import_node_fs38.existsSync)(p)) {
       try {
         claudeMdContent = await (0, import_promises14.readFile)(p, "utf-8");
         break;
@@ -22056,7 +22253,7 @@ async function runSeed(opts) {
     return { created: 0, failed: 0, skipped: "no_candidates", candidates: [] };
   }
   const overviewPath = (0, import_node_path26.join)(MEMORY_DIR, "domain", "project-overview.md");
-  if ((0, import_node_fs36.existsSync)(overviewPath) && !opts.force) {
+  if ((0, import_node_fs38.existsSync)(overviewPath) && !opts.force) {
     return { created: 0, failed: 0, skipped: "already_seeded", candidates };
   }
   if (opts.dryRun) {
@@ -22111,7 +22308,7 @@ async function runSeed(opts) {
 }
 
 // src/commands/analyze/phases/08-memory-manifest.ts
-var import_node_fs37 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_path27 = require("node:path");
 async function memoryManifest(run2) {
   const { globals } = run2;
@@ -22123,8 +22320,8 @@ async function memoryManifest(run2) {
   try {
     await ensureMemoryDir();
     const seedMarker = (0, import_node_path27.join)(VERITY_DIR, ".seeded");
-    const hasStandard = (0, import_node_fs37.existsSync)(STANDARD_FILE);
-    const alreadyTried = (0, import_node_fs37.existsSync)(seedMarker);
+    const hasStandard = (0, import_node_fs39.existsSync)(STANDARD_FILE);
+    const alreadyTried = (0, import_node_fs39.existsSync)(seedMarker);
     if (hasStandard && !alreadyTried) {
       const preManifest = await buildManifest();
       if (preManifest.nodes.length === 0) {
@@ -22137,7 +22334,7 @@ async function memoryManifest(run2) {
             dryRun: false
           });
           if (seedResult.created > 0) {
-            (0, import_node_fs37.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created}
+            (0, import_node_fs39.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created}
 `);
             autoSeedNotice = `Seeded ${seedResult.created} knowledge node(s) from your existing Standard (one-time).`;
             logEvent("auto_seed_ran", {
@@ -22145,7 +22342,7 @@ async function memoryManifest(run2) {
               failed: seedResult.failed
             });
           } else if (seedResult.skipped === "already_seeded") {
-            (0, import_node_fs37.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
+            (0, import_node_fs39.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
 `);
           } else {
             logEvent("auto_seed_noop", {
@@ -22334,7 +22531,7 @@ async function workingMemory(run2) {
 }
 
 // src/lib/note-budget.ts
-var import_node_fs38 = require("node:fs");
+var import_node_fs40 = require("node:fs");
 var ADVISORY_BUDGET = { PASS: 1, WARN: 2 };
 var EPISODE_STALE_SECONDS = 30 * 60;
 var FRESH = { delivered: 0, tasksCompleted: 0, ts: 0 };
@@ -22356,9 +22553,9 @@ function advisoryBudgetSpent(episode, rawDecision) {
 }
 function readAdvisoryEpisode(sessionId) {
   const file = scopedFile(ADVISORY_EPISODE_FILE, sessionId);
-  if (!(0, import_node_fs38.existsSync)(file)) return null;
+  if (!(0, import_node_fs40.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs38.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs40.readFileSync)(file, "utf-8")) ?? {};
     const delivered = typeof o.delivered === "number" ? o.delivered : NaN;
     if (isNaN(delivered)) return null;
     return {
@@ -22372,8 +22569,8 @@ function readAdvisoryEpisode(sessionId) {
 }
 function writeAdvisoryEpisode(episode, sessionId) {
   try {
-    (0, import_node_fs38.mkdirSync)(VERITY_DIR, { recursive: true });
-    (0, import_node_fs38.writeFileSync)(
+    (0, import_node_fs40.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs40.writeFileSync)(
       scopedFile(ADVISORY_EPISODE_FILE, sessionId),
       JSON.stringify({ v: 1, ...episode })
     );
@@ -22690,14 +22887,14 @@ async function buildRequest(run2) {
 }
 
 // src/lib/offline.ts
-var import_node_fs39 = require("node:fs");
+var import_node_fs41 = require("node:fs");
 var import_node_crypto11 = require("node:crypto");
 function cacheRequest(body) {
   try {
-    (0, import_node_fs39.mkdirSync)(CACHE_DIR, { recursive: true });
+    (0, import_node_fs41.mkdirSync)(CACHE_DIR, { recursive: true });
     const suffix = (0, import_node_crypto11.randomBytes)(4).toString("hex");
     const filename = `pending-${Math.floor(Date.now() / 1e3)}-${suffix}.json`;
-    (0, import_node_fs39.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body)));
+    (0, import_node_fs41.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body)));
   } catch {
   }
 }
@@ -22816,7 +23013,7 @@ async function transmit(run2) {
 }
 
 // src/commands/analyze/phases/13-reconcile.ts
-var import_node_fs40 = require("node:fs");
+var import_node_fs42 = require("node:fs");
 var import_node_path29 = require("node:path");
 async function reconcile(run2) {
   const { actionSummary, allChanged, analyzable, baseline, baselineSessionId, codeDelta, contentHash, conversation, decision, foldResult, memory, memorySession, response, reviewable, securityFiles, turnId } = run2;
@@ -22846,7 +23043,7 @@ async function reconcile(run2) {
       const st = foldDossier(memorySession.d);
       openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line) => {
         try {
-          const src = (0, import_node_fs40.readFileSync)((0, import_node_path29.join)(repoRoot(), file), "utf8").split("\n");
+          const src = (0, import_node_fs42.readFileSync)((0, import_node_path29.join)(repoRoot(), file), "utf8").split("\n");
           const at = src[line - 1];
           return at === void 0 ? null : lineSha(at);
         } catch {
@@ -23510,6 +23707,10 @@ function registerAnalyzeCommand(program2) {
 }
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
+  if (!verityConfigured()) {
+    (0, import_node_fs43.writeSync)(2, '[verity] not set up in this project \u2014 run "verity init" first.\n');
+    process.exit(0);
+  }
   const run2 = createRun(opts, globals);
   installRunEvidence(run2);
   for (const [name, phase] of PIPELINE) {
@@ -23528,7 +23729,6 @@ async function runAnalyze(opts, globals) {
 }
 
 // src/commands/baseline.ts
-var import_node_fs41 = require("node:fs");
 function registerBaselineCommands(program2) {
   const baseline = program2.command("baseline").description("Manage the task-start working-tree baseline");
   baseline.command("capture").description("Snapshot the working tree at task start (used by SessionStart hook)").option("--session-id <id>", "Session id (overrides any value from stdin)").option("--source <source>", "Lifecycle hint: startup|resume|clear|compact").action(async (opts) => {
@@ -23537,7 +23737,16 @@ function registerBaselineCommands(program2) {
         process.chdir(repoRoot());
       } catch {
       }
-      if (!(0, import_node_fs41.existsSync)(VERITY_DIR)) {
+      if (!verityConfigured()) {
+        const how = isPluginInvocation() ? "Offer to run /verity:setup for the user." : "Offer to run `verity init` (or /verity-setup) for the user.";
+        process.stdout.write(
+          JSON.stringify({
+            hookSpecificOutput: {
+              hookEventName: "SessionStart",
+              additionalContext: `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
+            }
+          }) + "\n"
+        );
         process.exit(0);
       }
       let sessionId = opts.sessionId;
@@ -23553,6 +23762,9 @@ function registerBaselineCommands(program2) {
           }
         }
       }
+      if (deferredToPlugin("baseline capture", sessionId ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+        process.exit(0);
+      }
       const authForScope = await resolveToken(program2.opts().token);
       const scopeToken = authForScope.ok ? authForScope.data.token : void 0;
       const scopeSession = sessionId || process.env.CLAUDE_SESSION_ID || void 0;
@@ -23577,7 +23789,7 @@ async function readStdin() {
 }
 
 // src/commands/review.ts
-var import_node_fs42 = require("node:fs");
+var import_node_fs44 = require("node:fs");
 function registerReviewCommand(program2) {
   program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars)").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
@@ -23596,7 +23808,7 @@ async function runReview(opts, globals) {
   const securityFiles = filterSecurity(allFiles);
   let staticResults;
   if (isCodacyAvailable()) {
-    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs42.existsSync)(f) || resolveFile(f) !== null);
+    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs44.existsSync)(f) || resolveFile(f) !== null);
     staticResults = runCodacyAnalysis(scannable);
   } else {
     staticResults = {
@@ -23622,10 +23834,10 @@ async function runReview(opts, globals) {
     const specPaths = opts.specs.split(",").map((f) => f.trim()).filter(Boolean);
     specs = [];
     for (const p of specPaths) {
-      if (!(0, import_node_fs42.existsSync)(p)) continue;
+      if (!(0, import_node_fs44.existsSync)(p)) continue;
       try {
-        const { readFileSync: readFileSync26 } = await import("node:fs");
-        const content = readFileSync26(p, "utf-8");
+        const { readFileSync: readFileSync27 } = await import("node:fs");
+        const content = readFileSync27(p, "utf-8");
         specs.push({ path: p, content: content.slice(0, 10240) });
       } catch {
       }
@@ -23682,7 +23894,7 @@ async function runReview(opts, globals) {
 }
 
 // src/commands/guard.ts
-var import_node_fs43 = require("node:fs");
+var import_node_fs45 = require("node:fs");
 var import_node_path30 = require("node:path");
 var GUARD_BLOCK_CAP = 2;
 var GUARD_ITER_FILE = (0, import_node_path30.join)(VERITY_DIR, ".guard-iteration");
@@ -23730,7 +23942,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs43.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs45.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -23750,10 +23962,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs43.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs45.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs43.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs45.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -23763,16 +23975,16 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs43.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs43.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs45.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs45.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs43.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs43.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs45.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs45.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
 }
 function registerGuardCommand(program2) {
-  program2.command("guard").description("Git-moment gate: review staged/to-push changes before a commit/push (PreToolUse hook)").option("--on <moments>", "Which git moments to gate: commit,push", "commit,push").option("--json", "Output raw JSON response (debug)").action(async (opts) => {
+  program2.command("guard").description("Git-moment gate: review staged/to-push changes before a commit/push (PreToolUse hook)").option("--on <moments>", "Which git moments to gate: commit,push (default: the project config)").option("--json", "Output raw JSON response (debug)").action(async (opts) => {
     const globals = program2.opts();
     try {
       await runGuard(opts, globals);
@@ -23782,13 +23994,14 @@ function registerGuardCommand(program2) {
   });
 }
 function resolveMomentRange(moment, frame, command, on) {
-  return moment === "pre-commit" ? stagedRange() : resolvePushRange(frame, command, on);
+  return moment === "pre-commit" ? stagedRange(frame) : resolvePushRange(frame, command, on);
 }
 function describeRange(range) {
   if (range.kind === "staged") return "staged";
-  if (range.kind === "nothing" || !range.base) return null;
-  const base = /^[0-9a-f]{40}$/.test(range.base) ? range.base.slice(0, 7) : range.base;
-  return `${base}..${range.head} via ${range.via}`;
+  if (range.kind === "merge") return `merge (${range.via})`;
+  if (range.kind === "nothing") return range.via === "already-published" ? "already published" : null;
+  const base = range.base && /^[0-9a-f]{40}$/.test(range.base) ? range.base.slice(0, 7) : range.base;
+  return base ? `${base}..${range.head} via ${range.via}` : `via ${range.via}`;
 }
 function matchFlagValue(command, flags) {
   const re = new RegExp(`(?<![\\w-])(?:${flags})(?:=|\\s+)('((?:[^'\\\\]|\\\\.)*)'|"((?:[^"\\\\]|\\\\.)*)"|([^\\s'"-][^\\s]*))`);
@@ -23837,7 +24050,7 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
   const securityFiles = filterSecurity(files);
   let staticResults;
   if (isCodacyAvailable()) {
-    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs43.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs45.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
     staticResults = runCodacyAnalysis(scannable);
   } else {
     staticResults = { tool: "@codacy/analysis-cli", findings: [], summary: { total_findings: 0, by_severity: {}, tools_run: [] } };
@@ -23910,8 +24123,10 @@ function emitAllowNotice(userMsg, agentMsg) {
   process.exit(0);
 }
 async function runGuard(opts, globals) {
-  const on = opts.on.split(",").map((s) => s.trim()).filter((s) => s === "commit" || s === "push");
+  const on = resolveGuardMoments(opts.on);
+  if (on.length === 0) process.exit(0);
   const { command, cwd, sessionId } = await readPreToolUseStdin();
+  if (deferredToPlugin("guard", sessionId)) process.exit(0);
   const moment = classifyCommand(command, on);
   if (!moment) process.exit(0);
   const verb = moment === "pre-commit" ? "commit" : "push";
@@ -23974,7 +24189,7 @@ async function runGuard(opts, globals) {
     upgradeToExcerpts(repoContext2, {
       readFile: (rel) => {
         try {
-          return (0, import_node_fs43.readFileSync)((0, import_node_path30.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
+          return (0, import_node_fs45.readFileSync)((0, import_node_path30.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
         } catch {
           return null;
         }
@@ -24195,7 +24410,7 @@ function registerIgnoreCommand(program2) {
 
 // src/commands/waive.ts
 var import_node_crypto12 = require("node:crypto");
-var import_node_fs44 = require("node:fs");
+var import_node_fs46 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -24224,7 +24439,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body.file = opts.file;
       try {
-        body.file_sha256 = (0, import_node_crypto12.createHash)("sha256").update((0, import_node_fs44.readFileSync)(opts.file)).digest("hex");
+        body.file_sha256 = (0, import_node_crypto12.createHash)("sha256").update((0, import_node_fs46.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -24249,7 +24464,7 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs49 = require("node:fs");
+var import_node_fs51 = require("node:fs");
 var import_promises17 = require("node:fs/promises");
 var import_yaml6 = __toESM(require_dist());
 var import_node_path33 = require("node:path");
@@ -24331,7 +24546,7 @@ function printPhase(n, of, title, subtitle) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs46 = require("node:fs");
+var import_node_fs48 = require("node:fs");
 
 // src/lib/prereqs.ts
 var import_node_child_process13 = require("node:child_process");
@@ -24451,7 +24666,7 @@ var import_promises15 = require("node:fs/promises");
 
 // src/lib/gitignore.ts
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs45 = require("node:fs");
+var import_node_fs47 = require("node:fs");
 var VERITY_GITIGNORE_MARKER = "# Verity \u2014 machine-local state.";
 var SETTINGS_LOCAL_IGNORE_ENTRY = ".claude/settings.local.json";
 var VERITY_GITIGNORE_BLOCK = [
@@ -24484,7 +24699,7 @@ function semanticsHold() {
 function ensureVerityGitignore() {
   let content = "";
   try {
-    content = (0, import_node_fs45.readFileSync)(".gitignore", "utf-8");
+    content = (0, import_node_fs47.readFileSync)(".gitignore", "utf-8");
   } catch {
   }
   const hasMarker = content.includes(VERITY_GITIGNORE_MARKER);
@@ -24505,7 +24720,7 @@ function ensureVerityGitignore() {
       const sep2 = next === "" ? "" : next.endsWith("\n") ? "\n" : "\n\n";
       next = next + sep2 + VERITY_GITIGNORE_BLOCK;
     }
-    (0, import_node_fs45.writeFileSync)(".gitignore", next);
+    (0, import_node_fs47.writeFileSync)(".gitignore", next);
     return verified(needsRepair ? "repaired" : "added");
   } catch {
     return "failed";
@@ -24632,11 +24847,11 @@ async function buildReport() {
   const state = await readSetupState();
   const hooks = await checkAllVerityHooks();
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs46.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs48.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs46.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs48.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs46.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs48.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -24730,7 +24945,7 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/migrate.ts
-var import_node_fs47 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 var import_node_path31 = require("node:path");
 var import_node_child_process15 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
@@ -24770,10 +24985,10 @@ async function runMigration(opts = {}) {
 function migrateProjectDir(root, actions) {
   const gateDir = (0, import_node_path31.join)(root, ".gate");
   const verityDir = (0, import_node_path31.join)(root, ".verity");
-  if ((0, import_node_fs47.existsSync)(gateDir) && !(0, import_node_fs47.existsSync)(verityDir)) {
+  if ((0, import_node_fs49.existsSync)(gateDir) && !(0, import_node_fs49.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs47.existsSync)(gateDir) && (0, import_node_fs47.existsSync)(verityDir)) {
+  if ((0, import_node_fs49.existsSync)(gateDir) && (0, import_node_fs49.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -24794,13 +25009,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs47.existsSync)(gateDir)) {
+    if ((0, import_node_fs49.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs47.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs49.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -24816,7 +25031,7 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs47.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs49.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
@@ -24825,9 +25040,9 @@ function migrateGlobalCredentials(home, actions) {
   if (!home) return;
   const gateCreds = (0, import_node_path31.join)(home, ".gate", "credentials");
   const verityCreds = (0, import_node_path31.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs47.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs47.existsSync)(verityCreds)) {
-    (0, import_node_fs47.mkdirSync)((0, import_node_path31.join)(home, ".verity"), { recursive: true });
+  if (!(0, import_node_fs49.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs49.existsSync)(verityCreds)) {
+    (0, import_node_fs49.mkdirSync)((0, import_node_path31.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -24850,7 +25065,7 @@ async function migrateLegacyHooks(root, actions) {
 }
 async function migrateClaudeMd(root, actions) {
   const claudeMd = (0, import_node_path31.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs47.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const hadLegacyBlock = (0, import_node_fs49.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -24862,7 +25077,7 @@ async function migrateClaudeMd(root, actions) {
 function migrateStandardFile(root, actions) {
   const gateMd = (0, import_node_path31.join)(root, "GATE.md");
   const verityMd = (0, import_node_path31.join)(root, "VERITY.md");
-  if (!(0, import_node_fs47.existsSync)(gateMd) || (0, import_node_fs47.existsSync)(verityMd)) return;
+  if (!(0, import_node_fs49.existsSync)(gateMd) || (0, import_node_fs49.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -24874,12 +25089,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs47.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs49.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
   const file = (0, import_node_path31.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs47.existsSync)(file)) return;
+  if (!(0, import_node_fs49.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -24927,14 +25142,14 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
   }
   if (toAppend.length > 0) {
     const sep2 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs47.writeFileSync)(verityCreds, verityContent + sep2 + toAppend.join("\n") + "\n");
+    (0, import_node_fs49.writeFileSync)(verityCreds, verityContent + sep2 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs47.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs49.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs47.readFileSync)(path, "utf-8");
+    return (0, import_node_fs49.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -24949,35 +25164,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs47.renameSync)(from, to);
+    (0, import_node_fs49.renameSync)(from, to);
   } catch (err) {
     if (err.code !== "EXDEV") throw err;
-    (0, import_node_fs47.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs47.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs49.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs49.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs47.renameSync)(from, to);
+    (0, import_node_fs49.renameSync)(from, to);
   } catch (err) {
     if (err.code !== "EXDEV") throw err;
-    (0, import_node_fs47.cpSync)(from, to);
-    (0, import_node_fs47.rmSync)(from, { force: true });
+    (0, import_node_fs49.cpSync)(from, to);
+    (0, import_node_fs49.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
     const srcDir = (0, import_node_path31.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs47.readdirSync)(srcDir)) {
+    for (const entry of (0, import_node_fs49.readdirSync)(srcDir)) {
       const rel = relDir ? (0, import_node_path31.join)(relDir, entry) : entry;
       const src = (0, import_node_path31.join)(gateDir, rel);
       const dest = (0, import_node_path31.join)(verityDir, rel);
-      if ((0, import_node_fs47.statSync)(src).isDirectory()) {
+      if ((0, import_node_fs49.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs47.existsSync)(dest)) {
-        (0, import_node_fs47.mkdirSync)((0, import_node_path31.dirname)(dest), { recursive: true });
-        (0, import_node_fs47.cpSync)(src, dest);
+      } else if (!(0, import_node_fs49.existsSync)(dest)) {
+        (0, import_node_fs49.mkdirSync)((0, import_node_path31.dirname)(dest), { recursive: true });
+        (0, import_node_fs49.cpSync)(src, dest);
         copied++;
       }
     }
@@ -24988,20 +25203,20 @@ function carryLegacyContents(gateDir, verityDir) {
 async function needsMigration(root = repoRoot()) {
   const gateDir = (0, import_node_path31.join)(root, ".gate");
   const verityDir = (0, import_node_path31.join)(root, ".verity");
-  if ((0, import_node_fs47.existsSync)(gateDir) && !(0, import_node_fs47.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs47.existsSync)(gateDir) && (0, import_node_fs47.existsSync)(verityDir)) {
-    if ((0, import_node_fs47.existsSync)((0, import_node_path31.join)(gateDir, "credentials")) && !(0, import_node_fs47.existsSync)((0, import_node_path31.join)(verityDir, "credentials"))) {
+  if ((0, import_node_fs49.existsSync)(gateDir) && !(0, import_node_fs49.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs49.existsSync)(gateDir) && (0, import_node_fs49.existsSync)(verityDir)) {
+    if ((0, import_node_fs49.existsSync)((0, import_node_path31.join)(gateDir, "credentials")) && !(0, import_node_fs49.existsSync)((0, import_node_path31.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs47.existsSync)((0, import_node_path31.join)(gateDir, "memory")) && !(0, import_node_fs47.existsSync)((0, import_node_path31.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs49.existsSync)((0, import_node_path31.join)(gateDir, "memory")) && !(0, import_node_fs49.existsSync)((0, import_node_path31.join)(verityDir, "memory"))) {
       return true;
     }
   }
   const claudeMd = (0, import_node_path31.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs47.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  if ((0, import_node_fs49.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs47.existsSync)((0, import_node_path31.join)(root, "GATE.md")) && !(0, import_node_fs47.existsSync)((0, import_node_path31.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs49.existsSync)((0, import_node_path31.join)(root, "GATE.md")) && !(0, import_node_fs49.existsSync)((0, import_node_path31.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -25276,7 +25491,7 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 
 // src/lib/remote-config.ts
-var import_node_fs48 = require("node:fs");
+var import_node_fs50 = require("node:fs");
 var import_promises16 = require("node:fs/promises");
 var import_node_path32 = require("node:path");
 var import_yaml5 = __toESM(require_dist());
@@ -25323,7 +25538,7 @@ async function adoptRemoteSetup(found, opts) {
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs48.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs50.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -25481,7 +25696,7 @@ function resolveDataDir2() {
     // local dev: running from repo root
   ];
   for (const candidate of candidates) {
-    if ((0, import_node_fs49.existsSync)((0, import_node_path33.join)(candidate, "skills"))) {
+    if ((0, import_node_fs51.existsSync)((0, import_node_path33.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -25497,7 +25712,7 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs49.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs51.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
         if (e.isDirectory()) walk2((0, import_node_path33.join)(d, e.name), rel);
         else if (e.isFile()) out.push(rel);
@@ -25689,7 +25904,7 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs49.existsSync)(configPath) || !(0, import_node_fs49.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs51.existsSync)(configPath) || !(0, import_node_fs51.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
@@ -25783,14 +25998,125 @@ async function handoffToSetup(enabled, claudeInstalled) {
   }
   await reportPhaseTwo(startedAt);
 }
+async function installSkills(force, step) {
+  step("Installing skills");
+  const dataDir = resolveDataDir2();
+  const skillsSource = (0, import_node_path33.join)(dataDir, "skills");
+  const skillsDest = ".claude/skills";
+  let skillsInstalled = 0;
+  for (const skill of SKILLS) {
+    const src = (0, import_node_path33.join)(skillsSource, skill);
+    const dest = (0, import_node_path33.join)(skillsDest, skill);
+    if (!(0, import_node_fs51.existsSync)(src)) {
+      printWarn(`  Skill data not found: ${skill}`);
+      continue;
+    }
+    if ((0, import_node_fs51.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+      skillsInstalled++;
+      continue;
+    }
+    await copyDir(src, dest);
+    skillsInstalled++;
+  }
+  printInfo(`  ${skillsInstalled}/${SKILLS.length} skills installed to .claude/skills/ \u2713`);
+}
+async function adoptPluginWiring(gitMoments, moments) {
+  const settings = await readSettings();
+  const stripped = removeVerityHooks(settings);
+  const hadAny = JSON.stringify(settings.hooks ?? {}) !== JSON.stringify(stripped.hooks ?? {});
+  if (hadAny) {
+    await writeSettings(stripped);
+    printInfo("  Removed this project's Verity hooks from .claude/settings.json \u2713");
+    printInfo("    The plugin wires them now, so each turn is reviewed once.");
+  } else {
+    printInfo("  Wired by the Verity plugin \u2014 nothing to reconcile here \u2713");
+  }
+  printInfo(`  Pre-commit gate: ${gitMoments.includes("commit") ? "on" : "off"}`);
+  printInfo(`  Pre-push/PR gate: ${gitMoments.includes("push") ? "on" : "off"}`);
+  printInfo("  Stop + intent + baseline + compact + session-end: always on \u2713");
+  if (!moments.includes("stop")) {
+    printWarn("  Turning the Stop review off is not yet supported under the plugin \u2014 it stays on.");
+  }
+}
+async function reconcileOwnWiring(moments) {
+  await applyMomentSelection(moments);
+  const hookStatus = await checkAllVerityHooks();
+  printInfo(`  Stop (verity analyze): ${hookStatus.stop ? "on" : "off"}`);
+  printInfo(`  Pre-commit gate: ${hookStatus.guardOn.includes("commit") ? "on" : "off"}`);
+  printInfo(`  Pre-push/PR gate: ${hookStatus.guardOn.includes("push") ? "on" : "off"}`);
+  printInfo("  Intent + baseline + compact + session-end: always on \u2713");
+  if (!hookStatus.stop && hookStatus.guardOn.length === 0) {
+    printWarn("  No analysis moment is active \u2014 code changes will NOT be reviewed.");
+    printWarn("  Enable one: verity hooks install --moments stop");
+  }
+}
+async function checkPrerequisites(step) {
+  step("Checking prerequisites");
+  const prereqs = await checkPrereqs({ install: true });
+  for (const c of prereqs.checks) {
+    if (c.status === "ok") {
+      if (c.justInstalled) continue;
+      printInfo(`  ${c.label} ${c.detail} \u2713`);
+    } else {
+      printWarn(`  ${c.label}: ${c.detail}`);
+      if (c.remedy) printWarn(`    ${c.remedy}`);
+    }
+  }
+  if (prereqs.blocked) {
+    printError("A required prerequisite is missing \u2014 cannot continue.");
+    process.exit(1);
+  }
+  return prereqs.checks.some((c) => c.id === "claude" && c.status === "ok");
+}
+async function scaffoldProject(step, defaultsOnly) {
+  step("Knowledge base, .gitignore and CLAUDE.md");
+  await (0, import_promises17.mkdir)(VERITY_DIR, { recursive: true });
+  await ensureMemoryDir();
+  const ignoreResult = ensureVerityGitignore();
+  if (ignoreResult === "failed") {
+    printWarn("  .gitignore: could not write the Verity block \u2014 add it manually");
+    printWarn("    (.verity/ holds copies of analyzed files, including any secret the gate flagged)");
+  } else if (ignoreResult === "conflict") {
+    printWarn("  .gitignore: the Verity block is in place but git still ignores .verity/standard.yaml");
+    printWarn("    Something outside this file covers it \u2014 a global (~/.gitignore) or nested");
+    printWarn("    .gitignore, or a pattern we do not recognise. Check: git check-ignore -v .verity/standard.yaml");
+    printWarn("    Until it is fixed, the Standard and the knowledge graph cannot be committed.");
+  } else if (ignoreResult === "repaired") {
+    printInfo("  .gitignore: rewrote `.verity/` to `.verity/*` so the standard stays committable \u2713");
+  } else {
+    printInfo(`  .gitignore: Verity block ${ignoreResult === "added" ? "added" : "already covered"} \u2713`);
+  }
+  const tracked = committedVerityState();
+  if (tracked.length > 0) {
+    printWarn(`  ${tracked.length} Verity state file(s) are tracked in git (e.g. ${tracked[0]}).`);
+    const untrack = defaultsOnly ? false : await promptYes("  Untrack them now (files stay on disk)? [Y/n] ", { nonInteractive: false });
+    if (untrack) {
+      const result = untrackVerityState();
+      if (result === "untracked") printInfo("  Untracked (staged) \u2014 commit to finish \u2713");
+      else if (result === "failed") printWarn('  Could not untrack \u2014 run "git rm -r --cached .verity" manually');
+    } else {
+      printWarn("  Left tracked. Fix with: git rm -r --cached .verity && git add .verity/standard.yaml .verity/memory");
+    }
+  }
+  try {
+    await ensureClaudeMdPointer();
+    printInfo("  CLAUDE.md instructions \u2713");
+  } catch (err) {
+    printWarn(`  Could not update CLAUDE.md: ${err.message}`);
+  }
+}
 function registerInitCommand(program2) {
-  program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").option("--no-adopt", "Don't offer this repository's existing Standard from the service; synthesize a new one").action(async (opts) => {
+  program2.command("init").alias("setup").description("Set up Verity in the current project (asks the setup questions, then hands off to /verity-setup)").option("--force", "Reinstall the skills even when they are already up to date (hooks are always reconciled)").option("-y, --yes", "Take the recommended answer for every question (no prompts)").option("--no-setup", "Skip the /verity-setup handoff at the end").option(
+    "--plugin-mode",
+    "The Claude Code plugin owns the skills and hooks: install neither, and remove any this project already has"
+  ).option("--no-adopt", "Don't offer this repository's existing Standard from the service; synthesize a new one").action(async (opts) => {
     const force = opts.force ?? false;
     const wantsHandoff = opts.setup !== false;
     const wantsAdopt = opts.adopt !== false;
     const defaultsOnly = (opts.yes ?? false) || !interactive();
+    const pluginMode = opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs49.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs51.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -25821,43 +26147,13 @@ function registerInitCommand(program2) {
       }
       console.log("");
     }
-    step("Checking prerequisites");
-    const prereqs = await checkPrereqs({ install: true });
-    for (const c of prereqs.checks) {
-      if (c.status === "ok") {
-        if (c.justInstalled) continue;
-        printInfo(`  ${c.label} ${c.detail} \u2713`);
-      } else {
-        printWarn(`  ${c.label}: ${c.detail}`);
-        if (c.remedy) printWarn(`    ${c.remedy}`);
-      }
-    }
-    if (prereqs.blocked) {
-      printError("A required prerequisite is missing \u2014 cannot continue.");
-      process.exit(1);
-    }
-    const claudeInstalled = prereqs.checks.some((c) => c.id === "claude" && c.status === "ok");
+    const claudeInstalled = await checkPrerequisites(step);
     console.log("");
-    step("Installing skills");
-    const dataDir = resolveDataDir2();
-    const skillsSource = (0, import_node_path33.join)(dataDir, "skills");
-    const skillsDest = ".claude/skills";
-    let skillsInstalled = 0;
-    for (const skill of SKILLS) {
-      const src = (0, import_node_path33.join)(skillsSource, skill);
-      const dest = (0, import_node_path33.join)(skillsDest, skill);
-      if (!(0, import_node_fs49.existsSync)(src)) {
-        printWarn(`  Skill data not found: ${skill}`);
-        continue;
-      }
-      if ((0, import_node_fs49.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
-        skillsInstalled++;
-        continue;
-      }
-      await copyDir(src, dest);
-      skillsInstalled++;
+    if (pluginMode) {
+      printInfo("Skipping skills \u2014 the Verity plugin provides them, namespaced as /verity:<name>.");
+    } else {
+      await installSkills(force, step);
     }
-    printInfo(`  ${skillsInstalled}/${SKILLS.length} skills installed to .claude/skills/ \u2713`);
     step(defaultsOnly ? "Setup answers (defaults)" : "Your setup answers");
     const previous = await readSetupState();
     const answers = await askSetupQuestions(defaultsOnly, previous);
@@ -25865,54 +26161,20 @@ function registerInitCommand(program2) {
     if (defaultsOnly) {
       printInfo(`  intensity: ${intensity} \xB7 moments: ${moments.join(", ") || "none"} (no questions asked)`);
     }
-    step("Knowledge base, .gitignore and CLAUDE.md");
-    await (0, import_promises17.mkdir)(VERITY_DIR, { recursive: true });
-    await ensureMemoryDir();
-    const ignoreResult = ensureVerityGitignore();
-    if (ignoreResult === "failed") {
-      printWarn("  .gitignore: could not write the Verity block \u2014 add it manually");
-      printWarn("    (.verity/ holds copies of analyzed files, including any secret the gate flagged)");
-    } else if (ignoreResult === "conflict") {
-      printWarn("  .gitignore: the Verity block is in place but git still ignores .verity/standard.yaml");
-      printWarn("    Something outside this file covers it \u2014 a global (~/.gitignore) or nested");
-      printWarn("    .gitignore, or a pattern we do not recognise. Check: git check-ignore -v .verity/standard.yaml");
-      printWarn("    Until it is fixed, the Standard and the knowledge graph cannot be committed.");
-    } else if (ignoreResult === "repaired") {
-      printInfo("  .gitignore: rewrote `.verity/` to `.verity/*` so the standard stays committable \u2713");
-    } else {
-      printInfo(`  .gitignore: Verity block ${ignoreResult === "added" ? "added" : "already covered"} \u2713`);
-    }
-    const tracked = committedVerityState();
-    if (tracked.length > 0) {
-      printWarn(`  ${tracked.length} Verity state file(s) are tracked in git (e.g. ${tracked[0]}).`);
-      const untrack = defaultsOnly ? false : await promptYes("  Untrack them now (files stay on disk)? [Y/n] ", { nonInteractive: false });
-      if (untrack) {
-        const result = untrackVerityState();
-        if (result === "untracked") printInfo("  Untracked (staged) \u2014 commit to finish \u2713");
-        else if (result === "failed") printWarn('  Could not untrack \u2014 run "git rm -r --cached .verity" manually');
-      } else {
-        printWarn("  Left tracked. Fix with: git rm -r --cached .verity && git add .verity/standard.yaml .verity/memory");
-      }
-    }
-    try {
-      await ensureClaudeMdPointer();
-      printInfo("  CLAUDE.md instructions \u2713");
-    } catch (err) {
-      printWarn(`  Could not update CLAUDE.md: ${err.message}`);
-    }
+    await scaffoldProject(step, defaultsOnly);
     const globalVerityDir = (0, import_node_path33.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises17.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
-    await applyMomentSelection(moments);
-    const hookStatus = await checkAllVerityHooks();
-    printInfo(`  Stop (verity analyze): ${hookStatus.stop ? "on" : "off"}`);
-    printInfo(`  Pre-commit gate: ${hookStatus.guardOn.includes("commit") ? "on" : "off"}`);
-    printInfo(`  Pre-push/PR gate: ${hookStatus.guardOn.includes("push") ? "on" : "off"}`);
-    printInfo(`  Intent + baseline + compact + session-end: always on \u2713`);
-    if (!hookStatus.stop && hookStatus.guardOn.length === 0) {
-      printWarn("  No analysis moment is active \u2014 code changes will NOT be reviewed.");
-      printWarn("  Enable one: verity hooks install --moments stop");
+    const gitMoments = [
+      ...moments.includes("pre-commit") ? ["commit"] : [],
+      ...moments.includes("pre-push") ? ["push"] : []
+    ];
+    writeProjectConfig({ git_moments: gitMoments });
+    if (pluginMode) {
+      await adoptPluginWiring(gitMoments, moments);
+    } else {
+      await reconcileOwnWiring(moments);
     }
     console.log("");
     step("Sign in to Verity (optional)");
@@ -25955,7 +26217,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs49.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs51.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -25982,7 +26244,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.32.0-experimental.f0746f7" : "dev"
+          cli_version: true ? "0.32.0" : "dev"
         }
       });
     } catch (err) {
@@ -25991,9 +26253,13 @@ function registerInitCommand(program2) {
     console.log("");
     printInfo("This machine is set up.");
     console.log("");
-    console.log("    .claude/skills/verity-*/       8 skills (setup, analyze, status, feedback,");
-    console.log("                                   learn, memory, insights, reflect)");
-    console.log("    .claude/settings.json          hooks, reconciled to your chosen moments");
+    if (pluginMode) {
+      console.log("    (skills and hooks come from the Verity plugin, not this project)");
+    } else {
+      console.log("    .claude/skills/verity-*/       8 skills (setup, analyze, status, feedback,");
+      console.log("                                   learn, memory, insights, reflect)");
+      console.log("    .claude/settings.json          hooks, reconciled to your chosen moments");
+    }
     console.log("    .verity/memory/                knowledge base (commit to git)");
     console.log("    .verity/standard.yaml          the Standard the gate enforces");
     console.log("    .codacy/codacy.config.json     static-analysis patterns (validated)");
@@ -26017,7 +26283,7 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs50 = require("node:fs");
+var import_node_fs52 = require("node:fs");
 var import_node_path34 = require("node:path");
 var SKILL_NAMES = [
   "verity-setup",
@@ -26038,10 +26304,10 @@ function registerUninstallCommand(program2) {
     const skillsRoot = projectPath(".claude/skills");
     for (const name of SKILL_NAMES) {
       const dir = (0, import_node_path34.join)(skillsRoot, name);
-      if ((0, import_node_fs50.existsSync)(dir)) {
+      if ((0, import_node_fs52.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name}/`,
-          apply: () => (0, import_node_fs50.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs52.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -26055,24 +26321,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs50.existsSync)(verityDir)) {
+    if ((0, import_node_fs52.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs50.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs52.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs50.existsSync)(verityMd)) {
+      if ((0, import_node_fs52.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs50.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs52.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs50.existsSync)(path) && (0, import_node_fs50.statSync)(path).isDirectory() && (0, import_node_fs50.readdirSync)(path).length === 0) {
-        (0, import_node_fs50.rmdirSync)(path);
+      if ((0, import_node_fs52.existsSync)(path) && (0, import_node_fs52.statSync)(path).isDirectory() && (0, import_node_fs52.readdirSync)(path).length === 0) {
+        (0, import_node_fs52.rmdirSync)(path);
       }
     };
     actions.push({
@@ -26084,10 +26350,10 @@ function registerUninstallCommand(program2) {
     });
     const home = process.env.HOME ?? "";
     const globalVerityDir = (0, import_node_path34.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs50.existsSync)(globalVerityDir)) {
+    if (purgeGlobal && (0, import_node_fs52.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs50.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs52.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -26281,7 +26547,7 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs51 = require("node:fs");
+var import_node_fs53 = require("node:fs");
 var import_node_path35 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
@@ -26319,11 +26585,11 @@ function registerResetCommand(program2) {
     }
     const cacheDir = projectPath(CACHE_DIR);
     let purged = 0;
-    if ((0, import_node_fs51.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs51.readdirSync)(cacheDir)) {
+    if ((0, import_node_fs53.existsSync)(cacheDir)) {
+      for (const entry of (0, import_node_fs53.readdirSync)(cacheDir)) {
         if (entry.startsWith("pending-")) {
           try {
-            (0, import_node_fs51.unlinkSync)((0, import_node_path35.join)(cacheDir, entry));
+            (0, import_node_fs53.unlinkSync)((0, import_node_path35.join)(cacheDir, entry));
             purged++;
           } catch {
           }
@@ -26338,19 +26604,19 @@ function registerResetCommand(program2) {
       projectPath(`${VERITY_DIR}/.last-analysis`)
     ];
     for (const file of filesToClear) {
-      if ((0, import_node_fs51.existsSync)(file)) {
+      if ((0, import_node_fs53.existsSync)(file)) {
         try {
-          (0, import_node_fs51.writeFileSync)(file, "");
+          (0, import_node_fs53.writeFileSync)(file, "");
         } catch {
         }
       }
     }
     if (opts.all) {
       const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs51.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs51.readdirSync)(logsDir)) {
+      if ((0, import_node_fs53.existsSync)(logsDir)) {
+        for (const entry of (0, import_node_fs53.readdirSync)(logsDir)) {
           try {
-            (0, import_node_fs51.unlinkSync)((0, import_node_path35.join)(logsDir, entry));
+            (0, import_node_fs53.unlinkSync)((0, import_node_path35.join)(logsDir, entry));
           } catch {
           }
         }
@@ -26658,8 +26924,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.32.0-experimental.f0746f7").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.32.0-experimental.f0746f7");
+program.name("verity").description("CLI for Verity quality gate service").version("0.32.0").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.32.0");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();