@codacy/verity-cli 0.32.2 → 0.32.3

package/CHANGELOG.md

@@ -64,6 +64,57 @@ installs are untouched.
   which is the ordinary case for someone whose first Verity install *is* the
   plugin.
 
+## [0.32.3] — 2026-09-10
+
+**Three things the first five minutes got wrong.** All reported from the field
+within hours of the plugin going out.
+
+### 🔌 Installing no longer asks for a backend URL
+
+The plugin declared an optional `service_url` setting, and Claude Code shows a
+**Configure Verity** screen for any plugin that declares one — so the first
+thing a new user was asked for was a URL they do not have and must not need.
+The setting is gone. If you really are on a self-hosted or pre-release stack,
+say so afterwards, out of everyone else's way: `verity config service-url <url>`,
+or `VERITY_SERVICE_URL` in your environment.
+
+### 🔌 One set of skills, not two
+
+A project set up with `verity init` before the plugin arrived kept its own
+`.claude/skills/verity-*/`, so Claude Code offered all eight skills **twice** —
+`/verity-setup` beside `/verity:setup` — with nothing to say which was live, and
+the project-local copy still rewrote wiring the plugin owns.
+
+`verity init --plugin-mode` now removes the superseded copies along with the
+duplicate hooks, and names what it removed.
+
+### 🔌 The skills work on a plugin-only machine
+
+If the plugin was the only thing you installed, **every Verity skill failed** —
+including `/verity:setup`, the command we tell you to run first. The skills say
+`verity …`, the plugin keeps the CLI inside its own `node_modules`, and nothing
+puts that on `PATH`, so each instruction ended in `command not found`. The gate
+itself was fine: the hooks address the CLI directly, which is why this survived
+testing — and why the acceptance container, which installs the CLI globally,
+could never have caught it.
+
+Verity now tells the agent how to run the CLI in that situation, at the start of
+the session, with the absolute path. Nothing changes if you also have a global
+install: then `verity` works and nothing is said.
+
+### 🔌 Verity says when it is *not* doing something
+
+Under the plugin, a project that was **already** set up got no word at all: no
+prompt, no explanation, just a doubled command list. It now says so plainly —
+that `/verity:setup` is not being run because the project is already
+configured, that you can run it yourself to change the Standard, the tools or
+the moments, and that the duplicate skills can be cleared with
+`verity init --plugin-mode --yes`.
+
+The notice appears only while the duplicates are actually on disk, so it stops
+on its own once they are gone.
+
+
 ## [0.32.2] — 2026-09-10
 
 **A patch for one bug, which stopped people before Verity was installed at all.**

package/bin/verity.js

@@ -12917,6 +12917,25 @@ function marketplaceLocations() {
   }
   return out;
 }
+function verityOnPath() {
+  const path = process.env.PATH;
+  if (!path) return false;
+  for (const dir of path.split(import_node_path7.delimiter)) {
+    if (!dir) continue;
+    try {
+      (0, import_node_fs6.accessSync)((0, import_node_path7.join)(dir, "verity"), import_node_fs6.constants.X_OK);
+      return true;
+    } catch {
+    }
+  }
+  return false;
+}
+function pluginCliInvocation() {
+  const root = process.env.VERITY_PLUGIN_ROOT;
+  if (!root) return null;
+  if (verityOnPath()) return null;
+  return `node ${JSON.stringify((0, import_node_path7.join)(root, "scripts", "verity.mjs"))}`;
+}
 var VERITY_MARKETPLACE = "verity";
 var VERITY_MARKETPLACE_REPO = "codacy/verity";
 function marketplaceConflict() {
@@ -20918,7 +20937,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.32.2" : "dev";
+    return true ? "0.32.3" : "dev";
   } catch {
     return "dev";
   }
@@ -24137,6 +24156,45 @@ async function runAnalyze(opts, globals) {
   }
 }
 
+// src/lib/project-skills.ts
+var import_node_fs44 = require("node:fs");
+var import_node_path32 = require("node:path");
+var PROJECT_SKILL_NAMES = [
+  "verity-setup",
+  "verity-analyze",
+  "verity-status",
+  "verity-feedback",
+  "verity-learn",
+  "verity-memory",
+  "verity-insights",
+  "verity-reflect"
+];
+var LEGACY_SKILL_NAMES = [
+  "gate-setup",
+  "gate-analyze",
+  "gate-status",
+  "gate-feedback",
+  "gate-learn",
+  "gate-memory",
+  "gate-insights",
+  "gate-reflect"
+];
+var ALL = [...PROJECT_SKILL_NAMES, ...LEGACY_SKILL_NAMES];
+function staleProjectSkills() {
+  const root = projectPath(".claude/skills");
+  if (!(0, import_node_fs44.existsSync)(root)) return [];
+  return ALL.filter((name) => (0, import_node_fs44.existsSync)((0, import_node_path32.join)(root, name)));
+}
+function removeProjectSkills() {
+  const root = projectPath(".claude/skills");
+  const removed = [];
+  for (const name of staleProjectSkills()) {
+    (0, import_node_fs44.rmSync)((0, import_node_path32.join)(root, name), { recursive: true, force: true });
+    removed.push(name);
+  }
+  return removed;
+}
+
 // src/commands/baseline.ts
 function registerBaselineCommands(program2) {
   const baseline = program2.command("baseline").description("Manage the task-start working-tree baseline");
@@ -24146,18 +24204,47 @@ function registerBaselineCommands(program2) {
         process.chdir(repoRoot());
       } catch {
       }
+      const cli = pluginCliInvocation();
+      const cliLine = cli ? `Verity CLI: this machine has no \`verity\` on PATH \u2014 the plugin carries its own copy. When a Verity skill tells you to run \`verity <args>\`, run \`${cli} <args>\` instead. Everything else about the command is identical.` : null;
       if (!verityConfigured()) {
         const how = isPluginInvocation() ? "Offer to run /verity:setup for the user." : "Offer to run `verity init` (or /verity-setup) for the user.";
+        const lines = [
+          `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
+        ];
+        if (cliLine) lines.push(cliLine);
         process.stdout.write(
           JSON.stringify({
             hookSpecificOutput: {
               hookEventName: "SessionStart",
-              additionalContext: `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
+              additionalContext: lines.join("\n")
             }
           }) + "\n"
         );
         process.exit(0);
       }
+      if (isPluginInvocation()) {
+        const notices = [];
+        if (cliLine) notices.push(cliLine);
+        const stale = staleProjectSkills();
+        if (stale.length > 0) {
+          notices.push(
+            "Verity is already set up in this project, so /verity:setup is NOT being run \u2014 tell the user that, and that they can run it themselves if they want to change the Standard, the analysis tools or the review moments."
+          );
+          notices.push(
+            `This project also still carries ${stale.length} of its own Verity skills (${stale.slice(0, 3).join(", ")}${stale.length > 3 ? ", \u2026" : ""}), left from an npm install. The plugin supersedes them, which is why the slash-command list shows each one twice. Offer to run \`verity init --plugin-mode --yes\` to remove the duplicates; the plugin keeps providing the /verity:* set.`
+          );
+        }
+        if (notices.length > 0) {
+          process.stdout.write(
+            JSON.stringify({
+              hookSpecificOutput: {
+                hookEventName: "SessionStart",
+                additionalContext: notices.join("\n")
+              }
+            }) + "\n"
+          );
+        }
+      }
       let sessionId = opts.sessionId;
       let source = opts.source;
       if (!process.stdin.isTTY) {
@@ -24198,7 +24285,7 @@ async function readStdin() {
 }
 
 // src/commands/review.ts
-var import_node_fs44 = require("node:fs");
+var import_node_fs45 = require("node:fs");
 function registerReviewCommand(program2) {
   program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars)").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
@@ -24217,7 +24304,7 @@ async function runReview(opts, globals) {
   const securityFiles = filterSecurity(allFiles);
   let staticResults;
   if (isCodacyAvailable()) {
-    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs44.existsSync)(f) || resolveFile(f) !== null);
+    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs45.existsSync)(f) || resolveFile(f) !== null);
     staticResults = runCodacyAnalysis(scannable);
   } else {
     staticResults = {
@@ -24243,7 +24330,7 @@ async function runReview(opts, globals) {
     const specPaths = opts.specs.split(",").map((f) => f.trim()).filter(Boolean);
     specs = [];
     for (const p of specPaths) {
-      if (!(0, import_node_fs44.existsSync)(p)) continue;
+      if (!(0, import_node_fs45.existsSync)(p)) continue;
       try {
         const { readFileSync: readFileSync27 } = await import("node:fs");
         const content = readFileSync27(p, "utf-8");
@@ -24303,10 +24390,10 @@ async function runReview(opts, globals) {
 }
 
 // src/commands/guard.ts
-var import_node_fs45 = require("node:fs");
-var import_node_path32 = require("node:path");
+var import_node_fs46 = require("node:fs");
+var import_node_path33 = require("node:path");
 var GUARD_BLOCK_CAP = 2;
-var GUARD_ITER_FILE = (0, import_node_path32.join)(VERITY_DIR, ".guard-iteration");
+var GUARD_ITER_FILE = (0, import_node_path33.join)(VERITY_DIR, ".guard-iteration");
 function readPreToolUseStdin() {
   const empty = { command: "", cwd: null, sessionId: null };
   return new Promise((resolve5) => {
@@ -24351,7 +24438,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs45.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs46.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -24371,10 +24458,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs45.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs46.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs45.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs46.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -24384,10 +24471,10 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs45.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs45.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs46.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs46.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs45.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs45.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs46.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs46.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
@@ -24459,7 +24546,7 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
   const securityFiles = filterSecurity(files);
   let staticResults;
   if (isCodacyAvailable()) {
-    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs45.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+    const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs46.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
     staticResults = runCodacyAnalysis(scannable);
   } else {
     staticResults = { tool: "@codacy/analysis-cli", findings: [], summary: { total_findings: 0, by_severity: {}, tools_run: [] } };
@@ -24605,7 +24692,7 @@ async function runGuard(opts, globals) {
     upgradeToExcerpts(repoContext2, {
       readFile: (rel) => {
         try {
-          return (0, import_node_fs45.readFileSync)((0, import_node_path32.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
+          return (0, import_node_fs46.readFileSync)((0, import_node_path33.join)(frame.worktreeRoot ?? process.cwd(), rel), "utf8");
         } catch {
           return null;
         }
@@ -24847,7 +24934,7 @@ function registerIgnoreCommand(program2) {
 
 // src/commands/waive.ts
 var import_node_crypto12 = require("node:crypto");
-var import_node_fs46 = require("node:fs");
+var import_node_fs47 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -24876,7 +24963,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body.file = opts.file;
       try {
-        body.file_sha256 = (0, import_node_crypto12.createHash)("sha256").update((0, import_node_fs46.readFileSync)(opts.file)).digest("hex");
+        body.file_sha256 = (0, import_node_crypto12.createHash)("sha256").update((0, import_node_fs47.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -24901,10 +24988,10 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs51 = require("node:fs");
+var import_node_fs52 = require("node:fs");
 var import_promises17 = require("node:fs/promises");
 var import_yaml6 = __toESM(require_dist());
-var import_node_path35 = require("node:path");
+var import_node_path36 = require("node:path");
 var import_node_child_process16 = require("node:child_process");
 
 // src/lib/banner.ts
@@ -24983,7 +25070,7 @@ function printPhase(n, of, title, subtitle) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs48 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 
 // src/lib/prereqs.ts
 var import_node_child_process13 = require("node:child_process");
@@ -25103,7 +25190,7 @@ var import_promises15 = require("node:fs/promises");
 
 // src/lib/gitignore.ts
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs47 = require("node:fs");
+var import_node_fs48 = require("node:fs");
 var VERITY_GITIGNORE_MARKER = "# Verity \u2014 machine-local state.";
 var SETTINGS_LOCAL_IGNORE_ENTRY = ".claude/settings.local.json";
 var VERITY_GITIGNORE_BLOCK = [
@@ -25136,7 +25223,7 @@ function semanticsHold() {
 function ensureVerityGitignore() {
   let content = "";
   try {
-    content = (0, import_node_fs47.readFileSync)(".gitignore", "utf-8");
+    content = (0, import_node_fs48.readFileSync)(".gitignore", "utf-8");
   } catch {
   }
   const hasMarker = content.includes(VERITY_GITIGNORE_MARKER);
@@ -25157,7 +25244,7 @@ function ensureVerityGitignore() {
       const sep3 = next === "" ? "" : next.endsWith("\n") ? "\n" : "\n\n";
       next = next + sep3 + VERITY_GITIGNORE_BLOCK;
     }
-    (0, import_node_fs47.writeFileSync)(".gitignore", next);
+    (0, import_node_fs48.writeFileSync)(".gitignore", next);
     return verified(needsRepair ? "repaired" : "added");
   } catch {
     return "failed";
@@ -25285,11 +25372,11 @@ async function buildReport() {
   const wiring = await resolveHookWiring();
   const hooks = wiring.status;
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs48.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs49.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs48.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs49.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs48.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs49.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -25406,8 +25493,8 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/migrate.ts
-var import_node_fs49 = require("node:fs");
-var import_node_path33 = require("node:path");
+var import_node_fs50 = require("node:fs");
+var import_node_path34 = require("node:path");
 var import_node_child_process15 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
 function defaultNpmRemover(pkg) {
@@ -25444,12 +25531,12 @@ async function runMigration(opts = {}) {
   return { actions, migrated: actions.length > 0 };
 }
 function migrateProjectDir(root, actions) {
-  const gateDir = (0, import_node_path33.join)(root, ".gate");
-  const verityDir = (0, import_node_path33.join)(root, ".verity");
-  if ((0, import_node_fs49.existsSync)(gateDir) && !(0, import_node_fs49.existsSync)(verityDir)) {
+  const gateDir = (0, import_node_path34.join)(root, ".gate");
+  const verityDir = (0, import_node_path34.join)(root, ".verity");
+  if ((0, import_node_fs50.existsSync)(gateDir) && !(0, import_node_fs50.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs49.existsSync)(gateDir) && (0, import_node_fs49.existsSync)(verityDir)) {
+  if ((0, import_node_fs50.existsSync)(gateDir) && (0, import_node_fs50.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -25470,13 +25557,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs49.existsSync)(gateDir)) {
+    if ((0, import_node_fs50.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs49.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs50.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -25492,18 +25579,18 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs49.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs50.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
 }
 function migrateGlobalCredentials(home, actions) {
   if (!home) return;
-  const gateCreds = (0, import_node_path33.join)(home, ".gate", "credentials");
-  const verityCreds = (0, import_node_path33.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs49.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs49.existsSync)(verityCreds)) {
-    (0, import_node_fs49.mkdirSync)((0, import_node_path33.join)(home, ".verity"), { recursive: true });
+  const gateCreds = (0, import_node_path34.join)(home, ".gate", "credentials");
+  const verityCreds = (0, import_node_path34.join)(home, ".verity", "credentials");
+  if (!(0, import_node_fs50.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs50.existsSync)(verityCreds)) {
+    (0, import_node_fs50.mkdirSync)((0, import_node_path34.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -25525,8 +25612,8 @@ async function migrateLegacyHooks(root, actions) {
   }
 }
 async function migrateClaudeMd(root, actions) {
-  const claudeMd = (0, import_node_path33.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs49.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const claudeMd = (0, import_node_path34.join)(root, "CLAUDE.md");
+  const hadLegacyBlock = (0, import_node_fs50.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -25536,9 +25623,9 @@ async function migrateClaudeMd(root, actions) {
   }
 }
 function migrateStandardFile(root, actions) {
-  const gateMd = (0, import_node_path33.join)(root, "GATE.md");
-  const verityMd = (0, import_node_path33.join)(root, "VERITY.md");
-  if (!(0, import_node_fs49.existsSync)(gateMd) || (0, import_node_fs49.existsSync)(verityMd)) return;
+  const gateMd = (0, import_node_path34.join)(root, "GATE.md");
+  const verityMd = (0, import_node_path34.join)(root, "VERITY.md");
+  if (!(0, import_node_fs50.existsSync)(gateMd) || (0, import_node_fs50.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -25550,12 +25637,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs49.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs50.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
-  const file = (0, import_node_path33.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs49.existsSync)(file)) return;
+  const file = (0, import_node_path34.join)(root, ".claude", "settings.local.json");
+  if (!(0, import_node_fs50.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -25603,14 +25690,14 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
   }
   if (toAppend.length > 0) {
     const sep3 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs49.writeFileSync)(verityCreds, verityContent + sep3 + toAppend.join("\n") + "\n");
+    (0, import_node_fs50.writeFileSync)(verityCreds, verityContent + sep3 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs49.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs50.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs49.readFileSync)(path, "utf-8");
+    return (0, import_node_fs50.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -25625,35 +25712,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs49.renameSync)(from, to);
+    (0, import_node_fs50.renameSync)(from, to);
   } catch (err) {
     if (err.code !== "EXDEV") throw err;
-    (0, import_node_fs49.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs49.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs50.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs50.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs49.renameSync)(from, to);
+    (0, import_node_fs50.renameSync)(from, to);
   } catch (err) {
     if (err.code !== "EXDEV") throw err;
-    (0, import_node_fs49.cpSync)(from, to);
-    (0, import_node_fs49.rmSync)(from, { force: true });
+    (0, import_node_fs50.cpSync)(from, to);
+    (0, import_node_fs50.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
-    const srcDir = (0, import_node_path33.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs49.readdirSync)(srcDir)) {
-      const rel = relDir ? (0, import_node_path33.join)(relDir, entry) : entry;
-      const src = (0, import_node_path33.join)(gateDir, rel);
-      const dest = (0, import_node_path33.join)(verityDir, rel);
-      if ((0, import_node_fs49.statSync)(src).isDirectory()) {
+    const srcDir = (0, import_node_path34.join)(gateDir, relDir);
+    for (const entry of (0, import_node_fs50.readdirSync)(srcDir)) {
+      const rel = relDir ? (0, import_node_path34.join)(relDir, entry) : entry;
+      const src = (0, import_node_path34.join)(gateDir, rel);
+      const dest = (0, import_node_path34.join)(verityDir, rel);
+      if ((0, import_node_fs50.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs49.existsSync)(dest)) {
-        (0, import_node_fs49.mkdirSync)((0, import_node_path33.dirname)(dest), { recursive: true });
-        (0, import_node_fs49.cpSync)(src, dest);
+      } else if (!(0, import_node_fs50.existsSync)(dest)) {
+        (0, import_node_fs50.mkdirSync)((0, import_node_path34.dirname)(dest), { recursive: true });
+        (0, import_node_fs50.cpSync)(src, dest);
         copied++;
       }
     }
@@ -25662,22 +25749,22 @@ function carryLegacyContents(gateDir, verityDir) {
   return copied;
 }
 async function needsMigration(root = repoRoot()) {
-  const gateDir = (0, import_node_path33.join)(root, ".gate");
-  const verityDir = (0, import_node_path33.join)(root, ".verity");
-  if ((0, import_node_fs49.existsSync)(gateDir) && !(0, import_node_fs49.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs49.existsSync)(gateDir) && (0, import_node_fs49.existsSync)(verityDir)) {
-    if ((0, import_node_fs49.existsSync)((0, import_node_path33.join)(gateDir, "credentials")) && !(0, import_node_fs49.existsSync)((0, import_node_path33.join)(verityDir, "credentials"))) {
+  const gateDir = (0, import_node_path34.join)(root, ".gate");
+  const verityDir = (0, import_node_path34.join)(root, ".verity");
+  if ((0, import_node_fs50.existsSync)(gateDir) && !(0, import_node_fs50.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs50.existsSync)(gateDir) && (0, import_node_fs50.existsSync)(verityDir)) {
+    if ((0, import_node_fs50.existsSync)((0, import_node_path34.join)(gateDir, "credentials")) && !(0, import_node_fs50.existsSync)((0, import_node_path34.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs49.existsSync)((0, import_node_path33.join)(gateDir, "memory")) && !(0, import_node_fs49.existsSync)((0, import_node_path33.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs50.existsSync)((0, import_node_path34.join)(gateDir, "memory")) && !(0, import_node_fs50.existsSync)((0, import_node_path34.join)(verityDir, "memory"))) {
       return true;
     }
   }
-  const claudeMd = (0, import_node_path33.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs49.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  const claudeMd = (0, import_node_path34.join)(root, "CLAUDE.md");
+  if ((0, import_node_fs50.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs49.existsSync)((0, import_node_path33.join)(root, "GATE.md")) && !(0, import_node_fs49.existsSync)((0, import_node_path33.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs50.existsSync)((0, import_node_path34.join)(root, "GATE.md")) && !(0, import_node_fs50.existsSync)((0, import_node_path34.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -25958,9 +26045,9 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 
 // src/lib/remote-config.ts
-var import_node_fs50 = require("node:fs");
+var import_node_fs51 = require("node:fs");
 var import_promises16 = require("node:fs/promises");
-var import_node_path34 = require("node:path");
+var import_node_path35 = require("node:path");
 var import_yaml5 = __toESM(require_dist());
 var IGNORE_RIDER = "verityignore";
 async function fetchRemoteSetup(opts) {
@@ -26005,7 +26092,7 @@ async function adoptRemoteSetup(found, opts) {
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs50.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs51.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -26038,7 +26125,7 @@ async function adoptRemoteSetup(found, opts) {
 }
 async function writeOut(relative2, body) {
   const target = projectPath(relative2);
-  await (0, import_promises16.mkdir)((0, import_node_path34.dirname)(target), { recursive: true });
+  await (0, import_promises16.mkdir)((0, import_node_path35.dirname)(target), { recursive: true });
   await (0, import_promises16.writeFile)(target, body);
 }
 function describeRemote(found) {
@@ -26155,15 +26242,15 @@ async function runOptionalAuth(resolution, opts = {}) {
 }
 function resolveDataDir2() {
   const candidates2 = [
-    (0, import_node_path35.join)(__dirname, "..", "data"),
+    (0, import_node_path36.join)(__dirname, "..", "data"),
     // installed: node_modules/@codacy/verity-cli/data
-    (0, import_node_path35.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path36.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
-    (0, import_node_path35.join)(process.cwd(), "cli", "data")
+    (0, import_node_path36.join)(process.cwd(), "cli", "data")
     // local dev: running from repo root
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs51.existsSync)((0, import_node_path35.join)(candidate, "skills"))) {
+    if ((0, import_node_fs52.existsSync)((0, import_node_path36.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -26179,9 +26266,9 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs51.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs52.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk2((0, import_node_path35.join)(d, e.name), rel);
+        if (e.isDirectory()) walk2((0, import_node_path36.join)(d, e.name), rel);
         else if (e.isFile()) out.push(rel);
       }
     };
@@ -26192,8 +26279,8 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      const a = await (0, import_promises17.readFile)((0, import_node_path35.join)(src, rel), "utf-8");
-      const b = await (0, import_promises17.readFile)((0, import_node_path35.join)(dest, rel), "utf-8");
+      const a = await (0, import_promises17.readFile)((0, import_node_path36.join)(src, rel), "utf-8");
+      const b = await (0, import_promises17.readFile)((0, import_node_path36.join)(dest, rel), "utf-8");
       if (a !== b) return false;
     }
     return true;
@@ -26371,7 +26458,7 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs51.existsSync)(configPath) || !(0, import_node_fs51.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs52.existsSync)(configPath) || !(0, import_node_fs52.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
@@ -26468,17 +26555,17 @@ async function handoffToSetup(enabled, claudeInstalled) {
 async function installSkills(force, step) {
   step("Installing skills");
   const dataDir = resolveDataDir2();
-  const skillsSource = (0, import_node_path35.join)(dataDir, "skills");
+  const skillsSource = (0, import_node_path36.join)(dataDir, "skills");
   const skillsDest = ".claude/skills";
   let skillsInstalled = 0;
   for (const skill of SKILLS) {
-    const src = (0, import_node_path35.join)(skillsSource, skill);
-    const dest = (0, import_node_path35.join)(skillsDest, skill);
-    if (!(0, import_node_fs51.existsSync)(src)) {
+    const src = (0, import_node_path36.join)(skillsSource, skill);
+    const dest = (0, import_node_path36.join)(skillsDest, skill);
+    if (!(0, import_node_fs52.existsSync)(src)) {
       printWarn(`  Skill data not found: ${skill}`);
       continue;
     }
-    if ((0, import_node_fs51.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+    if ((0, import_node_fs52.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
       skillsInstalled++;
       continue;
     }
@@ -26498,6 +26585,11 @@ async function adoptPluginWiring(gitMoments, moments) {
   } else {
     printInfo("  Wired by the Verity plugin \u2014 nothing to reconcile here \u2713");
   }
+  const removedSkills = removeProjectSkills();
+  if (removedSkills.length > 0) {
+    printInfo(`  Removed ${removedSkills.length} project-local skill${removedSkills.length === 1 ? "" : "s"} the plugin supersedes \u2713`);
+    printInfo("    They appeared beside the plugin's as a second /verity-* set.");
+  }
   printInfo(`  Pre-commit gate: ${gitMoments.includes("commit") ? "on" : "off"}`);
   printInfo(`  Pre-push/PR gate: ${gitMoments.includes("push") ? "on" : "off"}`);
   printInfo("  Stop + intent + baseline + compact + session-end: always on \u2713");
@@ -26587,7 +26679,7 @@ function registerInitCommand(program2) {
     const staleMarker = clearStalePluginMarker();
     const pluginMode = opts.plugin === false ? false : opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs51.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs52.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -26653,7 +26745,7 @@ function registerInitCommand(program2) {
       printInfo(`  intensity: ${intensity} \xB7 moments: ${moments.join(", ") || "none"} (no questions asked)`);
     }
     await scaffoldProject(step, defaultsOnly);
-    const globalVerityDir = (0, import_node_path35.join)(process.env.HOME ?? "", ".verity");
+    const globalVerityDir = (0, import_node_path36.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises17.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
@@ -26717,7 +26809,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs51.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs52.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -26744,7 +26836,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.32.2" : "dev"
+          cli_version: true ? "0.32.3" : "dev"
         }
       });
     } catch (err) {
@@ -26783,18 +26875,8 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs52 = require("node:fs");
-var import_node_path36 = require("node:path");
-var SKILL_NAMES = [
-  "verity-setup",
-  "verity-analyze",
-  "verity-status",
-  "verity-feedback",
-  "verity-learn",
-  "verity-memory",
-  "verity-insights",
-  "verity-reflect"
-];
+var import_node_fs53 = require("node:fs");
+var import_node_path37 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
     const dryRun = opts.dryRun ?? false;
@@ -26802,12 +26884,12 @@ function registerUninstallCommand(program2) {
     const keepVerityMd = opts.keepVerityMd ?? false;
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
-    for (const name of SKILL_NAMES) {
-      const dir = (0, import_node_path36.join)(skillsRoot, name);
-      if ((0, import_node_fs52.existsSync)(dir)) {
+    for (const name of PROJECT_SKILL_NAMES) {
+      const dir = (0, import_node_path37.join)(skillsRoot, name);
+      if ((0, import_node_fs53.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name}/`,
-          apply: () => (0, import_node_fs52.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs53.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -26821,24 +26903,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs52.existsSync)(verityDir)) {
+    if ((0, import_node_fs53.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs52.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs53.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs52.existsSync)(verityMd)) {
+      if ((0, import_node_fs53.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs52.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs53.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs52.existsSync)(path) && (0, import_node_fs52.statSync)(path).isDirectory() && (0, import_node_fs52.readdirSync)(path).length === 0) {
-        (0, import_node_fs52.rmdirSync)(path);
+      if ((0, import_node_fs53.existsSync)(path) && (0, import_node_fs53.statSync)(path).isDirectory() && (0, import_node_fs53.readdirSync)(path).length === 0) {
+        (0, import_node_fs53.rmdirSync)(path);
       }
     };
     actions.push({
@@ -26849,11 +26931,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path36.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs52.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path37.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs53.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs52.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs53.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -27047,8 +27129,8 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs53 = require("node:fs");
-var import_node_path37 = require("node:path");
+var import_node_fs54 = require("node:fs");
+var import_node_path38 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -27085,11 +27167,11 @@ function registerResetCommand(program2) {
     }
     const cacheDir = projectPath(CACHE_DIR);
     let purged = 0;
-    if ((0, import_node_fs53.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs53.readdirSync)(cacheDir)) {
+    if ((0, import_node_fs54.existsSync)(cacheDir)) {
+      for (const entry of (0, import_node_fs54.readdirSync)(cacheDir)) {
         if (entry.startsWith("pending-")) {
           try {
-            (0, import_node_fs53.unlinkSync)((0, import_node_path37.join)(cacheDir, entry));
+            (0, import_node_fs54.unlinkSync)((0, import_node_path38.join)(cacheDir, entry));
             purged++;
           } catch {
           }
@@ -27104,19 +27186,19 @@ function registerResetCommand(program2) {
       projectPath(`${VERITY_DIR}/.last-analysis`)
     ];
     for (const file of filesToClear) {
-      if ((0, import_node_fs53.existsSync)(file)) {
+      if ((0, import_node_fs54.existsSync)(file)) {
         try {
-          (0, import_node_fs53.writeFileSync)(file, "");
+          (0, import_node_fs54.writeFileSync)(file, "");
         } catch {
         }
       }
     }
     if (opts.all) {
       const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs53.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs53.readdirSync)(logsDir)) {
+      if ((0, import_node_fs54.existsSync)(logsDir)) {
+        for (const entry of (0, import_node_fs54.readdirSync)(logsDir)) {
           try {
-            (0, import_node_fs53.unlinkSync)((0, import_node_path37.join)(logsDir, entry));
+            (0, import_node_fs54.unlinkSync)((0, import_node_path38.join)(logsDir, entry));
           } catch {
           }
         }
@@ -27424,8 +27506,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.32.2").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.32.2");
+program.name("verity").description("CLI for Verity quality gate service").version("0.32.3").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.32.3");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.32.2",
+  "version": "0.32.3",
   "description": "CLI for Verity quality gate service",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://verity.md",