npm - @codacy/verity-cli - Versions diffs - 0.34.0-experimental.145d0fb → 0.34.0-experimental.37a6dcf - Mend

@codacy/verity-cli 0.34.0-experimental.145d0fb → 0.34.0-experimental.37a6dcf

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/bin/verity.js CHANGED Viewed

@@ -17104,8 +17104,107 @@ async function applyMomentSelection(moments) {
 }
 // src/lib/project-config.ts
+var import_node_fs6 = require("node:fs");
+var import_node_path8 = require("node:path");
+// src/lib/repo-controlled.ts
 var import_node_fs5 = require("node:fs");
 var import_node_path7 = require("node:path");
+// src/lib/hardened-git.ts
+var import_node_child_process5 = require("node:child_process");
+var HARDENED_CONFIG_ARGS = [
+  "-c",
+  "core.fsmonitor=false",
+  "-c",
+  "core.pager=cat",
+  "-c",
+  "log.showSignature=false"
+];
+var DIFF_READ_FLAGS = ["--no-ext-diff", "--no-textconv"];
+var DEFAULT_GIT_TIMEOUT_MS = 6e4;
+var DEFAULT_GIT_MAX_BUFFER = 64 * 1024 * 1024;
+function hardenedGitEnv(base = process.env) {
+  const env = {};
+  for (const [key, value] of Object.entries(base)) {
+    if (key.startsWith("GIT_")) continue;
+    env[key] = value;
+  }
+  env.GIT_OPTIONAL_LOCKS = "0";
+  env.GIT_TERMINAL_PROMPT = "0";
+  return env;
+}
+function hardenedGitArgv(args2) {
+  return [...HARDENED_CONFIG_ARGS, ...args2];
+}
+function classifyError(err2) {
+  const e = err2;
+  const stderr = typeof e?.stderr === "string" ? e.stderr : e?.stderr ? e.stderr.toString("utf-8") : "";
+  if (e?.code === "ETIMEDOUT" || e?.killed && e?.signal === "SIGTERM") return { ok: false, error: "timeout", stderr };
+  if (e?.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") return { ok: false, error: "too_large", stderr };
+  return { ok: false, error: "failed", stderr };
+}
+function runGitSync(cwd, args2, opts = {}) {
+  try {
+    const stdout = (0, import_node_child_process5.execFileSync)("git", hardenedGitArgv(args2), {
+      cwd,
+      env: hardenedGitEnv(),
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "pipe"],
+      timeout: opts.timeoutMs ?? DEFAULT_GIT_TIMEOUT_MS,
+      maxBuffer: opts.maxBuffer ?? DEFAULT_GIT_MAX_BUFFER
+    });
+    return { ok: true, stdout };
+  } catch (err2) {
+    return classifyError(err2);
+  }
+}
+function runGit(cwd, args2, opts = {}) {
+  return new Promise((resolvePromise) => {
+    (0, import_node_child_process5.execFile)(
+      "git",
+      hardenedGitArgv(args2),
+      {
+        cwd,
+        env: hardenedGitEnv(),
+        encoding: "utf-8",
+        timeout: opts.timeoutMs ?? DEFAULT_GIT_TIMEOUT_MS,
+        maxBuffer: opts.maxBuffer ?? DEFAULT_GIT_MAX_BUFFER
+      },
+      (err2, stdout, stderr) => {
+        if (err2) {
+          const e = err2;
+          e.stderr = stderr;
+          resolvePromise(classifyError(e));
+          return;
+        }
+        resolvePromise({ ok: true, stdout });
+      }
+    );
+  });
+}
+// src/lib/repo-controlled.ts
+function repoControlled(worktree, rel) {
+  const parts2 = rel.split("/").filter(Boolean);
+  for (let i2 = 1; i2 <= parts2.length; i2++) {
+    let st;
+    try {
+      st = (0, import_node_fs5.lstatSync)((0, import_node_path7.join)(worktree, ...parts2.slice(0, i2)));
+    } catch (err2) {
+      const code = err2?.code;
+      if (code === "ENOENT" || code === "ENOTDIR") return null;
+      return "unverified";
+    }
+    if (st.isSymbolicLink()) return "symlink";
+    if (i2 === parts2.length && !st.isFile()) return "symlink";
+  }
+  const r = runGitSync(worktree, ["ls-files", "-z", "--", rel], { timeoutMs: 5e3 });
+  if (!r.ok) return "unverified";
+  return r.stdout.length > 0 ? "tracked" : null;
+}
+// src/lib/project-config.ts
 var DEFAULTS = { git_moments: [] };
 function isMoment(value) {
   return value === "commit" || value === "push";
@@ -17115,14 +17214,14 @@ function parseMoments(raw) {
 }
 function readConfigFile(path) {
   try {
-    if (!(0, import_node_fs5.existsSync)(path)) return null;
-    const raw = JSON.parse((0, import_node_fs5.readFileSync)(path, "utf-8"));
+    if (!(0, import_node_fs6.existsSync)(path)) return null;
+    const raw = JSON.parse((0, import_node_fs6.readFileSync)(path, "utf-8"));
     const moments = Array.isArray(raw.git_moments) ? raw.git_moments.filter(isMoment) : [];
     const source2 = raw.git_moments_source === "user" || raw.git_moments_source === "init" ? raw.git_moments_source : void 0;
     return {
       git_moments: [...new Set(moments)],
       ...source2 ? { git_moments_source: source2 } : {},
-      ...raw.formal === "push" ? { formal: "push" } : {}
+      ...raw.formal === "push" || raw.formal === "off" ? { formal: raw.formal } : {}
     };
   } catch {
     return DEFAULTS;
@@ -17133,20 +17232,41 @@ function candidates() {
   const out2 = [{ path: local, source: "local" }];
   const main = mainWorktreeRoot();
   if (main) {
-    const inherited = (0, import_node_path7.join)(main, PROJECT_CONFIG_FILE);
+    const inherited = (0, import_node_path8.join)(main, PROJECT_CONFIG_FILE);
     if (inherited !== local) out2.push({ path: inherited, source: "main-worktree" });
   }
   return out2;
 }
-function readProjectConfig() {
+function formalRefusal(path) {
+  return repoControlled((0, import_node_path8.dirname)((0, import_node_path8.dirname)(path)), PROJECT_CONFIG_FILE);
+}
+function readProjectConfigRaw() {
   for (const { path, source: source2 } of candidates()) {
     const cfg = readConfigFile(path);
     if (cfg) return { ...cfg, source: source2, path };
   }
   return { ...DEFAULTS, source: "default" };
 }
+function readProjectConfig() {
+  const cfg = readProjectConfigRaw();
+  if (cfg.formal !== "push" || !cfg.path) return cfg;
+  const refused2 = formalRefusal(cfg.path);
+  if (!refused2) return cfg;
+  const { formal: _dropped, ...rest } = cfg;
+  return { ...rest, formal_refused: refused2 };
+}
+function formalRefusalMessage(reason) {
+  switch (reason) {
+    case "tracked":
+      return ".verity/config.json is tracked in git, so its formal setting is ignored (a repository cannot switch formal verification on) \u2014 untrack it with: git rm --cached .verity/config.json";
+    case "symlink":
+      return ".verity/config.json is reached through a symlink, so its formal setting is ignored";
+    case "unverified":
+      return "could not confirm with git that .verity/config.json is untracked, so its formal setting is ignored";
+  }
+}
 function writeProjectConfig(patch) {
-  const { git_moments, git_moments_source, formal } = readProjectConfig();
+  const { git_moments, git_moments_source, formal } = readProjectConfigRaw();
   const next = {
     git_moments,
     ...git_moments_source ? { git_moments_source } : {},
@@ -17154,8 +17274,8 @@ function writeProjectConfig(patch) {
     ...patch
   };
   const target = projectPath(PROJECT_CONFIG_FILE);
-  (0, import_node_fs5.mkdirSync)((0, import_node_path7.dirname)(target), { recursive: true });
-  (0, import_node_fs5.writeFileSync)(target, JSON.stringify(next, null, 2) + "\n");
+  (0, import_node_fs6.mkdirSync)((0, import_node_path8.dirname)(target), { recursive: true });
+  (0, import_node_fs6.writeFileSync)(target, JSON.stringify(next, null, 2) + "\n");
   return next;
 }
 function resolveGuardMoments(explicit) {
@@ -17164,11 +17284,11 @@ function resolveGuardMoments(explicit) {
 }
 // src/lib/plugin-ownership.ts
-var import_node_fs8 = require("node:fs");
+var import_node_fs9 = require("node:fs");
 // src/lib/which.ts
-var import_node_fs6 = require("node:fs");
-var import_node_path8 = require("node:path");
+var import_node_fs7 = require("node:fs");
+var import_node_path9 = require("node:path");
 function executableExtensions(platform4, pathext) {
   if (platform4 !== "win32") return [""];
   const raw = (pathext ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean);
@@ -17186,14 +17306,14 @@ function whichSync(bin, opts = {}) {
   if (!rawPath) return null;
   const exts = executableExtensions(platform4, opts.pathext ?? process.env.PATHEXT);
   const real = opts.real ?? true;
-  for (const dir of rawPath.split(import_node_path8.delimiter)) {
+  for (const dir of rawPath.split(import_node_path9.delimiter)) {
     if (!dir) continue;
     for (const ext of exts) {
-      const candidate = (0, import_node_path8.join)(dir, bin + ext);
+      const candidate = (0, import_node_path9.join)(dir, bin + ext);
       try {
-        if (!(0, import_node_fs6.statSync)(candidate).isFile()) continue;
-        if (platform4 !== "win32") (0, import_node_fs6.accessSync)(candidate, import_node_fs6.constants.X_OK);
-        return real ? (0, import_node_fs6.realpathSync)(candidate) : candidate;
+        if (!(0, import_node_fs7.statSync)(candidate).isFile()) continue;
+        if (platform4 !== "win32") (0, import_node_fs7.accessSync)(candidate, import_node_fs7.constants.X_OK);
+        return real ? (0, import_node_fs7.realpathSync)(candidate) : candidate;
       } catch {
         continue;
       }
@@ -17204,10 +17324,10 @@ function whichSync(bin, opts = {}) {
 // src/lib/plugin-ownership.ts
 var import_node_os2 = require("node:os");
-var import_node_path9 = require("node:path");
+var import_node_path10 = require("node:path");
 // src/lib/stderr-log.ts
-var import_node_fs7 = require("node:fs");
+var import_node_fs8 = require("node:fs");
 var TOKEN_RE2 = /verity_[0-9a-f]{16,}/g;
 var ANSI_RE = /\u001b\[[0-?]*[ -/]*[@-~]/g;
 function scrub(s) {
@@ -17220,9 +17340,9 @@ function append(text) {
   try {
     const dir = projectPath(DEBUG_LOG_DIR);
     const file = projectPath(STDERR_LOG_FILE);
-    (0, import_node_fs7.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs8.mkdirSync)(dir, { recursive: true });
     rotateIfNeeded(file);
-    (0, import_node_fs7.appendFileSync)(file, text);
+    (0, import_node_fs8.appendFileSync)(file, text);
   } catch {
   }
 }
@@ -17270,8 +17390,8 @@ function markerPath() {
 }
 function readMarker() {
   try {
-    if (!(0, import_node_fs8.existsSync)(markerPath())) return null;
-    const raw = JSON.parse((0, import_node_fs8.readFileSync)(markerPath(), "utf-8"));
+    if (!(0, import_node_fs9.existsSync)(markerPath())) return null;
+    const raw = JSON.parse((0, import_node_fs9.readFileSync)(markerPath(), "utf-8"));
     const pluginRoot = typeof raw.plugin_root === "string" ? raw.plugin_root : "";
     if (!pluginRoot || CONTROL_CHARS2.test(pluginRoot)) return null;
     const version = typeof raw.version === "string" && !CONTROL_CHARS2.test(raw.version) ? raw.version : null;
@@ -17289,23 +17409,23 @@ function recordPluginOwnership(sessionId) {
   const pluginRoot = process.env.VERITY_PLUGIN_ROOT;
   if (!pluginRoot) return;
   try {
-    (0, import_node_fs8.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
+    (0, import_node_fs9.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
     const marker = {
       session_id: sessionId,
       plugin_root: pluginRoot,
       version: process.env.VERITY_PLUGIN_VERSION || null,
       ts: Math.floor(Date.now() / 1e3)
     };
-    (0, import_node_fs8.writeFileSync)(markerPath(), JSON.stringify(marker));
+    (0, import_node_fs9.writeFileSync)(markerPath(), JSON.stringify(marker));
   } catch {
   }
 }
 function claudeConfigDir() {
-  return process.env.CLAUDE_CONFIG_DIR || (0, import_node_path9.join)((0, import_node_os2.homedir)(), ".claude");
+  return process.env.CLAUDE_CONFIG_DIR || (0, import_node_path10.join)((0, import_node_os2.homedir)(), ".claude");
 }
 function readJsonFile(path) {
   try {
-    const parsed = JSON.parse((0, import_node_fs8.readFileSync)(path, "utf-8"));
+    const parsed = JSON.parse((0, import_node_fs9.readFileSync)(path, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : null;
   } catch {
     return null;
@@ -17313,9 +17433,9 @@ function readJsonFile(path) {
 }
 function enabledPluginSetting(key) {
   const files = [
-    projectPath((0, import_node_path9.join)(".claude", "settings.local.json")),
-    projectPath((0, import_node_path9.join)(".claude", "settings.json")),
-    (0, import_node_path9.join)(claudeConfigDir(), "settings.json")
+    projectPath((0, import_node_path10.join)(".claude", "settings.local.json")),
+    projectPath((0, import_node_path10.join)(".claude", "settings.json")),
+    (0, import_node_path10.join)(claudeConfigDir(), "settings.json")
   ];
   for (const file of files) {
     const map = readJsonFile(file)?.enabledPlugins;
@@ -17327,11 +17447,11 @@ function enabledPluginSetting(key) {
 }
 function marketplaceLocations() {
   const out2 = /* @__PURE__ */ new Map();
-  const known = readJsonFile((0, import_node_path9.join)(claudeConfigDir(), "plugins", "known_marketplaces.json"));
+  const known = readJsonFile((0, import_node_path10.join)(claudeConfigDir(), "plugins", "known_marketplaces.json"));
   if (!known) return out2;
   for (const [name2, entry] of Object.entries(known)) {
     const loc2 = entry?.installLocation;
-    if (typeof loc2 === "string" && loc2) out2.set(name2, (0, import_node_path9.resolve)(loc2));
+    if (typeof loc2 === "string" && loc2) out2.set(name2, (0, import_node_path10.resolve)(loc2));
   }
   return out2;
 }
@@ -17345,7 +17465,7 @@ function globalVerityVersion() {
   const entry = verityPathEntry();
   if (!entry) return null;
   try {
-    const pkg = readJsonFile((0, import_node_path9.join)((0, import_node_path9.dirname)((0, import_node_fs8.realpathSync)(entry)), "..", "package.json"));
+    const pkg = readJsonFile((0, import_node_path10.join)((0, import_node_path10.dirname)((0, import_node_fs9.realpathSync)(entry)), "..", "package.json"));
     if (pkg?.name !== "@codacy/verity-cli" || typeof pkg.version !== "string") return null;
     return pkg.version;
   } catch {
@@ -17362,7 +17482,7 @@ var VERITY_MARKETPLACE_REPO = "codacy/verity";
 function marketplaceConflict() {
   const wanted = VERITY_MARKETPLACE;
   for (const file of ["settings.json", "settings.local.json"]) {
-    const path = (0, import_node_path9.join)(claudeConfigDir(), file);
+    const path = (0, import_node_path10.join)(claudeConfigDir(), file);
     const declared = readJsonFile(path)?.extraKnownMarketplaces ?? null;
     const entry2 = declared && typeof declared === "object" ? declared[wanted] : void 0;
     if (entry2 && typeof entry2 === "object") {
@@ -17372,7 +17492,7 @@ function marketplaceConflict() {
       }
     }
   }
-  const known = readJsonFile((0, import_node_path9.join)(claudeConfigDir(), "plugins", "known_marketplaces.json"));
+  const known = readJsonFile((0, import_node_path10.join)(claudeConfigDir(), "plugins", "known_marketplaces.json"));
   const entry = known?.[wanted];
   if (entry && typeof entry === "object" && !pointsAtVerity(entry.source)) {
     return { name: wanted, declaredAs: describeSource(entry.source) };
@@ -17393,7 +17513,7 @@ function describeSource(src) {
   return target ? `${kind} \u2192 ${target}` : kind;
 }
 function legacyMarketplaceInstall() {
-  const plugins = readJsonFile((0, import_node_path9.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
+  const plugins = readJsonFile((0, import_node_path10.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
   if (!plugins || typeof plugins !== "object") return null;
   for (const key of Object.keys(plugins)) {
     const at = key.lastIndexOf("@");
@@ -17405,13 +17525,13 @@ function legacyMarketplaceInstall() {
 }
 function realpathOr(p) {
   try {
-    return import_node_fs8.realpathSync.native(p);
+    return import_node_fs9.realpathSync.native(p);
   } catch {
-    return (0, import_node_path9.resolve)(p);
+    return (0, import_node_path10.resolve)(p);
   }
 }
 function isWithin(want, dir) {
-  return want === dir || want.startsWith(dir + import_node_path9.sep);
+  return want === dir || want.startsWith(dir + import_node_path10.sep);
 }
 function entryAppliesHere(entry, here) {
   const e = entry;
@@ -17421,9 +17541,9 @@ function entryAppliesHere(entry, here) {
   return forProject === here;
 }
 function registrySays(pluginRoot) {
-  const plugins = readJsonFile((0, import_node_path9.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
+  const plugins = readJsonFile((0, import_node_path10.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
   if (!plugins || typeof plugins !== "object") return "unverified";
-  const want = (0, import_node_path9.resolve)(pluginRoot);
+  const want = (0, import_node_path10.resolve)(pluginRoot);
   const here = realpathOr(repoRoot());
   const markets = marketplaceLocations();
   for (const [key, value] of Object.entries(plugins)) {
@@ -17432,15 +17552,15 @@ function registrySays(pluginRoot) {
     const applicable = (Array.isArray(value) ? value : []).filter((entry) => entryAppliesHere(entry, here));
     const claims = applicable.some((entry) => {
       const installPath = entry?.installPath;
-      return typeof installPath === "string" && (0, import_node_path9.resolve)(installPath) === want;
+      return typeof installPath === "string" && (0, import_node_path10.resolve)(installPath) === want;
     }) || source2 !== void 0 && applicable.length > 0 && isWithin(want, source2);
     if (claims) {
       if (enabledPluginSetting(key) === false) return "gone";
-      return (0, import_node_fs8.existsSync)(pluginRoot) ? "live" : "gone";
+      return (0, import_node_fs9.existsSync)(pluginRoot) ? "live" : "gone";
     }
   }
-  const managed = (0, import_node_path9.resolve)((0, import_node_path9.join)(claudeConfigDir(), "plugins", "cache"));
-  return want === managed || want.startsWith(managed + import_node_path9.sep) ? "gone" : "unverified";
+  const managed = (0, import_node_path10.resolve)((0, import_node_path10.join)(claudeConfigDir(), "plugins", "cache"));
+  return want === managed || want.startsWith(managed + import_node_path10.sep) ? "gone" : "unverified";
 }
 var _live = /* @__PURE__ */ new Map();
 function pluginLiveness(pluginRoot) {
@@ -17454,7 +17574,7 @@ function clearStalePluginMarker() {
   const marker = readMarker();
   if (!marker || pluginLiveness(marker.plugin_root) !== "gone") return null;
   try {
-    (0, import_node_fs8.rmSync)(markerPath(), { force: true });
+    (0, import_node_fs9.rmSync)(markerPath(), { force: true });
   } catch {
     return null;
   }
@@ -17482,7 +17602,7 @@ function pluginActiveHere() {
   return activePluginInstall() !== null;
 }
 function registeredVerityPlugin() {
-  const plugins = readJsonFile((0, import_node_path9.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
+  const plugins = readJsonFile((0, import_node_path10.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
   if (!plugins || typeof plugins !== "object") return null;
   const here = realpathOr(repoRoot());
   for (const [key, value] of Object.entries(plugins)) {
@@ -17492,7 +17612,7 @@ function registeredVerityPlugin() {
     for (const entry of Array.isArray(value) ? value : []) {
       const e = entry;
       const installPath = typeof e.installPath === "string" ? e.installPath : "";
-      if (!installPath || !(0, import_node_fs8.existsSync)(installPath)) continue;
+      if (!installPath || !(0, import_node_fs9.existsSync)(installPath)) continue;
       if (!entryAppliesHere(entry, here)) continue;
       return { pluginRoot: installPath, version: typeof e.version === "string" ? e.version : null };
     }
@@ -17544,28 +17664,28 @@ async function resolveHookWiring() {
 }
 // src/lib/cli-provenance.ts
-var import_node_fs9 = require("node:fs");
+var import_node_fs10 = require("node:fs");
 var import_node_os3 = require("node:os");
-var import_node_path10 = require("node:path");
+var import_node_path11 = require("node:path");
 var CLI_PACKAGE = "@codacy/verity-cli";
-var CLI_ENTRY = (0, import_node_path10.join)("node_modules", CLI_PACKAGE, "bin", "verity.js");
+var CLI_ENTRY = (0, import_node_path11.join)("node_modules", CLI_PACKAGE, "bin", "verity.js");
 function readJson(path) {
   try {
-    const parsed = JSON.parse((0, import_node_fs9.readFileSync)(path, "utf-8"));
+    const parsed = JSON.parse((0, import_node_fs10.readFileSync)(path, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : null;
   } catch {
     return null;
   }
 }
 function versionUnder(base) {
-  const entry = (0, import_node_path10.join)(base, CLI_ENTRY);
-  if (!(0, import_node_fs9.existsSync)(entry)) return null;
-  const pkg = readJson((0, import_node_path10.join)(base, "node_modules", CLI_PACKAGE, "package.json"));
+  const entry = (0, import_node_path11.join)(base, CLI_ENTRY);
+  if (!(0, import_node_fs10.existsSync)(entry)) return null;
+  const pkg = readJson((0, import_node_path11.join)(base, "node_modules", CLI_PACKAGE, "package.json"));
   return typeof pkg?.version === "string" ? pkg.version : null;
 }
 function versionForEntry(entry) {
   try {
-    const pkg = readJson((0, import_node_path10.join)((0, import_node_path10.dirname)((0, import_node_fs9.realpathSync)(entry)), "..", "package.json"));
+    const pkg = readJson((0, import_node_path11.join)((0, import_node_path11.dirname)((0, import_node_fs10.realpathSync)(entry)), "..", "package.json"));
     return typeof pkg?.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -17573,16 +17693,16 @@ function versionForEntry(entry) {
 }
 function resolveHooksCli(pluginRoot) {
   const override = process.env.VERITY_CLI_PATH;
-  if (override && (0, import_node_fs9.existsSync)(override)) {
+  if (override && (0, import_node_fs10.existsSync)(override)) {
     return { version: versionForEntry(override), rung: "override" };
   }
   const fromPlugin = versionUnder(pluginRoot);
   if (fromPlugin !== null) return { version: fromPlugin, rung: "plugin" };
-  if ((0, import_node_fs9.existsSync)((0, import_node_path10.join)(pluginRoot, CLI_ENTRY))) return { version: null, rung: "plugin" };
-  const dataDir = process.env.CLAUDE_PLUGIN_DATA || (0, import_node_path10.join)((0, import_node_os3.homedir)(), ".verity", "plugin-cli");
+  if ((0, import_node_fs10.existsSync)((0, import_node_path11.join)(pluginRoot, CLI_ENTRY))) return { version: null, rung: "plugin" };
+  const dataDir = process.env.CLAUDE_PLUGIN_DATA || (0, import_node_path11.join)((0, import_node_os3.homedir)(), ".verity", "plugin-cli");
   const fromData = versionUnder(dataDir);
   if (fromData !== null) return { version: fromData, rung: "plugin-data" };
-  if ((0, import_node_fs9.existsSync)((0, import_node_path10.join)(dataDir, CLI_ENTRY))) return { version: null, rung: "plugin-data" };
+  if ((0, import_node_fs10.existsSync)((0, import_node_path11.join)(dataDir, CLI_ENTRY))) return { version: null, rung: "plugin-data" };
   const global = globalVerityVersion();
   if (global !== null) return { version: global, rung: "global" };
   return null;
@@ -17684,7 +17804,7 @@ function pluginCliInvocation() {
   return resolverCommand(root);
 }
 function resolverCommand(root) {
-  return `node ${JSON.stringify((0, import_node_path10.join)(root, "scripts", "verity.mjs"))}`;
+  return `node ${JSON.stringify((0, import_node_path11.join)(root, "scripts", "verity.mjs"))}`;
 }
 // src/commands/hooks.ts
@@ -17824,8 +17944,8 @@ var import_node_crypto9 = require("node:crypto");
 // src/lib/conversation-buffer.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_fs10 = require("node:fs");
-var import_node_child_process5 = require("node:child_process");
+var import_node_fs11 = require("node:fs");
+var import_node_child_process6 = require("node:child_process");
 var import_node_crypto = require("node:crypto");
 function stripImageReferences(text) {
   return text.replace(/\[Image #\d+\]/g, "[screenshot \u2014 not available for review]");
@@ -17860,7 +17980,7 @@ async function appendToConversationBuffer(prompt, sessionId) {
 }
 async function readAndClearConversationBuffer(currentSessionId) {
   try {
-    if ((0, import_node_fs10.existsSync)(CONVERSATION_BUFFER_FILE)) {
+    if ((0, import_node_fs11.existsSync)(CONVERSATION_BUFFER_FILE)) {
       const entries = await readBufferEntries();
       let mine = entries;
       let others = [];
@@ -17884,7 +18004,7 @@ async function readAndClearConversationBuffer(currentSessionId) {
         };
       }
     }
-    if ((0, import_node_fs10.existsSync)(INTENT_FILE)) {
+    if ((0, import_node_fs11.existsSync)(INTENT_FILE)) {
       try {
         const content = await (0, import_promises5.readFile)(INTENT_FILE, "utf-8");
         await (0, import_promises5.unlink)(INTENT_FILE).catch(() => {
@@ -17928,7 +18048,7 @@ async function readBufferEntries() {
 }
 function getRecentCommitMessages() {
   try {
-    const output = (0, import_node_child_process5.execSync)(
+    const output = (0, import_node_child_process6.execSync)(
       'git log --since="30 minutes ago" --format="%s" -5',
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
     ).trim();
@@ -18177,9 +18297,9 @@ function isCommandOnlyTurn(input) {
 // src/lib/context-identity.ts
 var import_node_crypto2 = require("node:crypto");
-var import_node_fs11 = require("node:fs");
+var import_node_fs12 = require("node:fs");
 var import_node_os4 = require("node:os");
-var import_node_path11 = require("node:path");
+var import_node_path12 = require("node:path");
 var SHARED_SENTINELS = /* @__PURE__ */ new Set([
   "",
   "-",
@@ -18217,7 +18337,7 @@ function contextIdentity(input) {
   if (rawTree && !isSharedSentinel(rawTree)) {
     let resolved = rawTree;
     try {
-      resolved = import_node_fs11.realpathSync.native(rawTree);
+      resolved = import_node_fs12.realpathSync.native(rawTree);
     } catch {
     }
     treeKey = (0, import_node_crypto2.createHash)("sha256").update(resolved).digest("hex").slice(0, 12);
@@ -18233,13 +18353,13 @@ function contextIdentity(input) {
 }
 function verityHome() {
   const override = process.env.VERITY_HOME;
-  return override && override.trim() ? (0, import_node_path11.resolve)(override) : (0, import_node_path11.join)((0, import_node_os4.homedir)(), ".verity");
+  return override && override.trim() ? (0, import_node_path12.resolve)(override) : (0, import_node_path12.join)((0, import_node_os4.homedir)(), ".verity");
 }
 function dossierDir(identity) {
-  return (0, import_node_path11.join)(verityHome(), "sessions", identity.userKey, identity.treeKey, identity.sessionKey);
+  return (0, import_node_path12.join)(verityHome(), "sessions", identity.userKey, identity.treeKey, identity.sessionKey);
 }
 function treeDir(identity) {
-  return (0, import_node_path11.join)(verityHome(), "sessions", identity.userKey, identity.treeKey);
+  return (0, import_node_path12.join)(verityHome(), "sessions", identity.userKey, identity.treeKey);
 }
 function scopeIdentity(token, sessionId) {
   const t = (token ?? "").trim();
@@ -18254,8 +18374,8 @@ function sessionScopeKey(token, sessionId) {
 // src/lib/task-context-buffer.ts
 var import_promises6 = require("node:fs/promises");
-var import_node_fs12 = require("node:fs");
-var import_node_path12 = require("node:path");
+var import_node_fs13 = require("node:fs");
+var import_node_path13 = require("node:path");
 var TASK_CONTEXT_DIR = `${VERITY_DIR}/.task-context`;
 var MAX_BUFFER_BYTES = 500 * 1024;
 var MAX_PROMPT_CHARS = 2e3;
@@ -18294,7 +18414,7 @@ async function appendResponseToTaskBuffer(taskId, assistantResponse, actionSumma
 }
 async function readTaskContextBuffer(taskId) {
   const filePath = bufferPath(taskId);
-  if (!(0, import_node_fs12.existsSync)(filePath)) return null;
+  if (!(0, import_node_fs13.existsSync)(filePath)) return null;
   try {
     const content = await (0, import_promises6.readFile)(filePath, "utf-8");
     if (!content.trim()) return null;
@@ -18328,12 +18448,12 @@ async function readTaskContextBuffer(taskId) {
 }
 async function cleanupTaskContextBuffers() {
   try {
-    if (!(0, import_node_fs12.existsSync)(TASK_CONTEXT_DIR)) return;
+    if (!(0, import_node_fs13.existsSync)(TASK_CONTEXT_DIR)) return;
     const files = await (0, import_promises6.readdir)(TASK_CONTEXT_DIR);
     const cutoffMs = Date.now() - RETENTION_DAYS * 24 * 60 * 60 * 1e3;
     for (const file of files) {
       if (!file.endsWith(".jsonl")) continue;
-      const filePath = (0, import_node_path12.join)(TASK_CONTEXT_DIR, file);
+      const filePath = (0, import_node_path13.join)(TASK_CONTEXT_DIR, file);
       try {
         const stats = await (0, import_promises6.stat)(filePath);
         if (stats.mtimeMs < cutoffMs) {
@@ -18347,13 +18467,13 @@ async function cleanupTaskContextBuffers() {
 }
 function bufferPath(taskId) {
   const safe = taskId.replace(/[^a-zA-Z0-9_-]/g, "");
-  return (0, import_node_path12.join)(TASK_CONTEXT_DIR, `${safe}.jsonl`);
+  return (0, import_node_path13.join)(TASK_CONTEXT_DIR, `${safe}.jsonl`);
 }
 async function appendEntry(taskId, entry) {
   try {
     await (0, import_promises6.mkdir)(TASK_CONTEXT_DIR, { recursive: true });
     const filePath = bufferPath(taskId);
-    if ((0, import_node_fs12.existsSync)(filePath)) {
+    if ((0, import_node_fs13.existsSync)(filePath)) {
       const stats = await (0, import_promises6.stat)(filePath);
       if (stats.size >= MAX_BUFFER_BYTES) {
         const content = await (0, import_promises6.readFile)(filePath, "utf-8");
@@ -18364,7 +18484,7 @@ async function appendEntry(taskId, entry) {
       }
     }
     const line2 = JSON.stringify(entry) + "\n";
-    const existing = (0, import_node_fs12.existsSync)(filePath) ? await (0, import_promises6.readFile)(filePath, "utf-8") : "";
+    const existing = (0, import_node_fs13.existsSync)(filePath) ? await (0, import_promises6.readFile)(filePath, "utf-8") : "";
     await (0, import_promises6.writeFile)(filePath, existing + line2);
   } catch {
   }
@@ -18372,20 +18492,20 @@ async function appendEntry(taskId, entry) {
 // src/lib/memory-retrieval.ts
 var import_promises8 = require("node:fs/promises");
-var import_node_fs15 = require("node:fs");
-var import_node_path15 = require("node:path");
+var import_node_fs16 = require("node:fs");
+var import_node_path16 = require("node:path");
 // src/lib/org-mirror.ts
-var import_node_fs13 = require("node:fs");
+var import_node_fs14 = require("node:fs");
 var import_promises7 = require("node:fs/promises");
-var import_node_path13 = require("node:path");
+var import_node_path14 = require("node:path");
 var ORG_KINDS = ["decision", "security", "gotcha", "pattern", "domain", "integration"];
 var STATE_FILE = ".org-pull-state.json";
 var BODY_MAX = 8192;
 function orgMirrorDir(remote = requestRemote()) {
   const parsed = parseRemote(remote);
   if (!parsed) return null;
-  return (0, import_node_path13.join)(verityHome(), "orgs", parsed.host, parsed.owner.toLowerCase(), "memory");
+  return (0, import_node_path14.join)(verityHome(), "orgs", parsed.host, parsed.owner.toLowerCase(), "memory");
 }
 function slugify(s) {
   return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 60);
@@ -18451,7 +18571,7 @@ function parseOrgNode(content) {
 }
 async function readState(dir) {
   try {
-    const parsed = JSON.parse(await (0, import_promises7.readFile)((0, import_node_path13.join)(dir, STATE_FILE), "utf-8"));
+    const parsed = JSON.parse(await (0, import_promises7.readFile)((0, import_node_path14.join)(dir, STATE_FILE), "utf-8"));
     return {
       version: typeof parsed?.version === "string" ? parsed.version : null,
       organization: parsed?.organization && typeof parsed.organization.id === "string" ? parsed.organization : null,
@@ -18463,7 +18583,7 @@ async function readState(dir) {
 }
 async function writeState(dir, state) {
   await (0, import_promises7.mkdir)(dir, { recursive: true });
-  await (0, import_promises7.writeFile)((0, import_node_path13.join)(dir, STATE_FILE), JSON.stringify({
+  await (0, import_promises7.writeFile)((0, import_node_path14.join)(dir, STATE_FILE), JSON.stringify({
     ...state.version ? { version: state.version } : {},
     organization: state.organization,
     pulled_at: (/* @__PURE__ */ new Date()).toISOString(),
@@ -18528,24 +18648,24 @@ async function pullOrgKnowledge(opts) {
   for (const n of nodes) {
     const rel = orgNodePath(n);
     if (written.has(rel)) continue;
-    await (0, import_promises7.mkdir)((0, import_node_path13.join)(dir, rel.split("/")[0]), { recursive: true });
-    await (0, import_promises7.writeFile)((0, import_node_path13.join)(dir, rel), renderOrgNode(n, org?.name ?? ""));
+    await (0, import_promises7.mkdir)((0, import_node_path14.join)(dir, rel.split("/")[0]), { recursive: true });
+    await (0, import_promises7.writeFile)((0, import_node_path14.join)(dir, rel), renderOrgNode(n, org?.name ?? ""));
     written.add(rel);
   }
   for (const rel of state.files) {
-    if (!written.has(rel)) await (0, import_promises7.rm)((0, import_node_path13.join)(dir, rel), { force: true });
+    if (!written.has(rel)) await (0, import_promises7.rm)((0, import_node_path14.join)(dir, rel), { force: true });
   }
-  await (0, import_promises7.writeFile)((0, import_node_path13.join)(dir, "index.md"), renderIndex(org?.name ?? "no organization", nodes));
+  await (0, import_promises7.writeFile)((0, import_node_path14.join)(dir, "index.md"), renderIndex(org?.name ?? "no organization", nodes));
   await writeState(dir, { version: org ? page.version : null, organization: org, files: [...written].sort() });
   return { ok: true, status: org ? "pulled" : "none", received: nodes.length, dir };
 }
 async function readOrgMirror(remote = requestRemote()) {
   const dir = orgMirrorDir(remote);
-  if (!dir || !(0, import_node_fs13.existsSync)(dir)) return [];
+  if (!dir || !(0, import_node_fs14.existsSync)(dir)) return [];
   const out2 = [];
   for (const kind of ORG_KINDS) {
-    const kindDir = (0, import_node_path13.join)(dir, kind);
-    if (!(0, import_node_fs13.existsSync)(kindDir)) continue;
+    const kindDir = (0, import_node_path14.join)(dir, kind);
+    if (!(0, import_node_fs14.existsSync)(kindDir)) continue;
     let files;
     try {
       files = await (0, import_promises7.readdir)(kindDir);
@@ -18555,7 +18675,7 @@ async function readOrgMirror(remote = requestRemote()) {
     for (const file of files) {
       if (!file.endsWith(".md")) continue;
       try {
-        const node = parseOrgNode(await (0, import_promises7.readFile)((0, import_node_path13.join)(kindDir, file), "utf-8"));
+        const node = parseOrgNode(await (0, import_promises7.readFile)((0, import_node_path14.join)(kindDir, file), "utf-8"));
         if (node) out2.push(node);
       } catch {
       }
@@ -18565,29 +18685,29 @@ async function readOrgMirror(remote = requestRemote()) {
 }
 // src/lib/safe-read.ts
-var import_node_fs14 = require("node:fs");
-var import_node_path14 = require("node:path");
-var FLAGS = import_node_fs14.constants;
+var import_node_fs15 = require("node:fs");
+var import_node_path15 = require("node:path");
+var FLAGS = import_node_fs15.constants;
 var NOFOLLOW = FLAGS.O_NOFOLLOW;
 var NONBLOCK = FLAGS.O_NONBLOCK;
 function closeOpened(fd) {
   try {
-    (0, import_node_fs14.closeSync)(fd);
+    (0, import_node_fs15.closeSync)(fd);
   } catch {
   }
 }
 function isInsideRoot(realRoot, realPath) {
-  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path14.sep) ? realRoot : realRoot + import_node_path14.sep);
+  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path15.sep) ? realRoot : realRoot + import_node_path15.sep);
 }
 function sameOpenedFile(opened, current, nofollowAvailable) {
   if (!nofollowAvailable && (opened.ino === 0n || current.ino === 0n)) return false;
   return opened.ino === current.ino && opened.dev === current.dev;
 }
 function openRegularInRoot(root, path) {
-  const full = (0, import_node_path14.isAbsolute)(path) ? path : (0, import_node_path14.join)(root, path);
+  const full = (0, import_node_path15.isAbsolute)(path) ? path : (0, import_node_path15.join)(root, path);
   let fd;
   try {
-    fd = (0, import_node_fs14.openSync)(full, import_node_fs14.constants.O_RDONLY | (NOFOLLOW ?? 0) | (NONBLOCK ?? 0));
+    fd = (0, import_node_fs15.openSync)(full, import_node_fs15.constants.O_RDONLY | (NOFOLLOW ?? 0) | (NONBLOCK ?? 0));
   } catch (err2) {
     const code = err2.code;
     if (code === "ELOOP" || code === "EMLINK" || code === "EFTYPE") return { ok: false, reason: "symlink" };
@@ -18595,18 +18715,18 @@ function openRegularInRoot(root, path) {
     return { ok: false, reason: "unreadable" };
   }
   try {
-    const opened = (0, import_node_fs14.fstatSync)(fd, { bigint: true });
+    const opened = (0, import_node_fs15.fstatSync)(fd, { bigint: true });
     if (!opened.isFile()) {
       closeOpened(fd);
       return { ok: false, reason: "not-regular" };
     }
-    const realRoot = import_node_fs14.realpathSync.native(root);
-    const realPath = import_node_fs14.realpathSync.native(full);
+    const realRoot = import_node_fs15.realpathSync.native(root);
+    const realPath = import_node_fs15.realpathSync.native(full);
     if (!isInsideRoot(realRoot, realPath)) {
       closeOpened(fd);
       return { ok: false, reason: "outside-root" };
     }
-    const current = (0, import_node_fs14.statSync)(realPath, { bigint: true });
+    const current = (0, import_node_fs15.statSync)(realPath, { bigint: true });
     if (!sameOpenedFile(opened, current, NOFOLLOW !== void 0)) {
       closeOpened(fd);
       return { ok: false, reason: NOFOLLOW === void 0 ? "unreadable" : "outside-root" };
@@ -18628,7 +18748,7 @@ function readOpened(fd, size) {
     const buffer = Buffer.alloc(size);
     let offset = 0;
     while (offset < size) {
-      const n = (0, import_node_fs14.readSync)(fd, buffer, offset, size - offset, offset);
+      const n = (0, import_node_fs15.readSync)(fd, buffer, offset, size - offset, offset);
       if (n === 0) break;
       offset += n;
     }
@@ -18943,14 +19063,14 @@ function parseFrontmatter(content) {
   return { fm, body: match[2].trim() };
 }
 async function retrieveForInjection(promptText, taskFiles = [], budgetTokens = DEFAULT_BUDGET_TOKENS) {
-  const hasRepoGraph = (0, import_node_fs15.existsSync)(memoryDir());
+  const hasRepoGraph = (0, import_node_fs16.existsSync)(memoryDir());
   const budget = Math.min(budgetTokens, MAX_BUDGET_TOKENS);
   const promptTokens = tokenize(promptText);
   const orgPromptTerms = orgTerms(promptText);
   const nodes = [];
   for (const domain of hasRepoGraph ? DOMAINS : []) {
-    const domainDir = (0, import_node_path15.join)(memoryDir(), domain);
-    if (!(0, import_node_fs15.existsSync)(domainDir)) continue;
+    const domainDir = (0, import_node_path16.join)(memoryDir(), domain);
+    if (!(0, import_node_fs16.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises8.readdir)(domainDir);
       for (const file of files) {
@@ -19024,27 +19144,27 @@ async function retrieveForInjection(promptText, taskFiles = [], budgetTokens = D
 }
 // src/lib/injection-record.ts
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_node_crypto3 = require("node:crypto");
 // src/lib/safe-write.ts
-var import_node_fs16 = require("node:fs");
-var import_node_path16 = require("node:path");
-var FLAGS2 = import_node_fs16.constants;
+var import_node_fs17 = require("node:fs");
+var import_node_path17 = require("node:path");
+var FLAGS2 = import_node_fs17.constants;
 var O_NOFOLLOW = FLAGS2.O_NOFOLLOW ?? 0;
 var NOFOLLOW_AVAILABLE = O_NOFOLLOW !== 0;
 function validateRoot(root) {
   try {
-    const parentReal = (0, import_node_fs16.realpathSync)((0, import_node_path16.dirname)(root));
-    const expected = (0, import_node_path16.join)(parentReal, (0, import_node_path16.basename)(root));
+    const parentReal = (0, import_node_fs17.realpathSync)((0, import_node_path17.dirname)(root));
+    const expected = (0, import_node_path17.join)(parentReal, (0, import_node_path17.basename)(root));
     try {
-      (0, import_node_fs16.mkdirSync)(expected);
+      (0, import_node_fs17.mkdirSync)(expected);
     } catch (e) {
       if (e.code !== "EEXIST") return null;
     }
-    const st = (0, import_node_fs16.lstatSync)(expected, { bigint: true });
+    const st = (0, import_node_fs17.lstatSync)(expected, { bigint: true });
     if (st.isSymbolicLink() || !st.isDirectory()) return null;
-    if ((0, import_node_fs16.realpathSync)(expected) !== expected) return null;
+    if ((0, import_node_fs17.realpathSync)(expected) !== expected) return null;
     return { real: expected, dev: st.dev, ino: st.ino };
   } catch {
     return null;
@@ -19052,18 +19172,18 @@ function validateRoot(root) {
 }
 function rootUnchanged(root) {
   try {
-    const st = (0, import_node_fs16.lstatSync)(root.real, { bigint: true });
+    const st = (0, import_node_fs17.lstatSync)(root.real, { bigint: true });
     return !st.isSymbolicLink() && st.isDirectory() && st.dev === root.dev && st.ino === root.ino;
   } catch {
     return false;
   }
 }
 function bareName(name2) {
-  return !!name2 && name2 === (0, import_node_path16.basename)(name2) && name2 !== "." && name2 !== ".." && !name2.includes("\0");
+  return !!name2 && name2 === (0, import_node_path17.basename)(name2) && name2 !== "." && name2 !== ".." && !name2.includes("\0");
 }
 function absentOrRegular(path) {
   try {
-    const st = (0, import_node_fs16.lstatSync)(path);
+    const st = (0, import_node_fs17.lstatSync)(path);
     return st.isFile() && !st.isSymbolicLink();
   } catch (e) {
     return e.code === "ENOENT";
@@ -19071,11 +19191,11 @@ function absentOrRegular(path) {
 }
 function verifyOpened(fd, path, root) {
   try {
-    const opened = (0, import_node_fs16.fstatSync)(fd, { bigint: true });
+    const opened = (0, import_node_fs17.fstatSync)(fd, { bigint: true });
     if (!opened.isFile() || opened.nlink !== 1n) return false;
-    const real = (0, import_node_fs16.realpathSync)(path);
+    const real = (0, import_node_fs17.realpathSync)(path);
     if (!isInsideRoot(root.real, real)) return false;
-    const current = (0, import_node_fs16.statSync)(real, { bigint: true });
+    const current = (0, import_node_fs17.statSync)(real, { bigint: true });
     if (!sameOpenedFile(opened, current, NOFOLLOW_AVAILABLE)) return false;
     return rootUnchanged(root);
   } catch {
@@ -19084,21 +19204,21 @@ function verifyOpened(fd, path, root) {
 }
 function removeIfOurs(fd, path) {
   try {
-    const opened = (0, import_node_fs16.fstatSync)(fd, { bigint: true });
-    const at = (0, import_node_fs16.lstatSync)(path, { bigint: true });
-    if (!at.isSymbolicLink() && at.dev === opened.dev && at.ino === opened.ino) (0, import_node_fs16.unlinkSync)(path);
+    const opened = (0, import_node_fs17.fstatSync)(fd, { bigint: true });
+    const at = (0, import_node_fs17.lstatSync)(path, { bigint: true });
+    if (!at.isSymbolicLink() && at.dev === opened.dev && at.ino === opened.ino) (0, import_node_fs17.unlinkSync)(path);
   } catch {
   }
 }
 function openTarget(path, append2) {
-  const base = import_node_fs16.constants.O_WRONLY | (append2 ? import_node_fs16.constants.O_APPEND : 0) | O_NOFOLLOW;
+  const base = import_node_fs17.constants.O_WRONLY | (append2 ? import_node_fs17.constants.O_APPEND : 0) | O_NOFOLLOW;
   try {
-    return { fd: (0, import_node_fs16.openSync)(path, base), created: false };
+    return { fd: (0, import_node_fs17.openSync)(path, base), created: false };
   } catch (e) {
     if (e.code !== "ENOENT") return null;
   }
   try {
-    return { fd: (0, import_node_fs16.openSync)(path, base | import_node_fs16.constants.O_CREAT | import_node_fs16.constants.O_EXCL, 384), created: true };
+    return { fd: (0, import_node_fs17.openSync)(path, base | import_node_fs17.constants.O_CREAT | import_node_fs17.constants.O_EXCL, 384), created: true };
   } catch {
     return null;
   }
@@ -19106,7 +19226,7 @@ function openTarget(path, append2) {
 function writeVerified(root, name2, hooks, append2, write) {
   const r = validateRoot(root);
   if (!r || !bareName(name2)) return false;
-  const path = (0, import_node_path16.join)(r.real, name2);
+  const path = (0, import_node_path17.join)(r.real, name2);
   if (!absentOrRegular(path)) return false;
   if (!runHook(hooks)) return false;
   const opened = openTarget(path, append2);
@@ -19122,7 +19242,7 @@ function writeVerified(root, name2, hooks, append2, write) {
     return false;
   } finally {
     try {
-      (0, import_node_fs16.closeSync)(opened.fd);
+      (0, import_node_fs17.closeSync)(opened.fd);
     } catch {
     }
   }
@@ -19137,13 +19257,13 @@ function runHook(hooks) {
 }
 function appendInRoot(root, name2, text, hooks = {}) {
   return writeVerified(root, name2, hooks, true, (fd) => {
-    (0, import_node_fs16.writeSync)(fd, text);
+    (0, import_node_fs17.writeSync)(fd, text);
   });
 }
 function replaceInRoot(root, name2, text, hooks = {}) {
   return writeVerified(root, name2, hooks, false, (fd) => {
-    (0, import_node_fs16.ftruncateSync)(fd, 0);
-    (0, import_node_fs16.writeSync)(fd, text, 0);
+    (0, import_node_fs17.ftruncateSync)(fd, 0);
+    (0, import_node_fs17.writeSync)(fd, text, 0);
   });
 }
@@ -19191,7 +19311,7 @@ function hashPrompt(prompt) {
 function recordInjection(event) {
   if (!appendInRoot(projectPath(VERITY_DIR), "injections.jsonl", JSON.stringify(event) + "\n")) return;
   try {
-    if ((0, import_node_fs17.lstatSync)(recordPath()).size > COMPACT_AT_BYTES) writeEvents(readPendingInjections());
+    if ((0, import_node_fs18.lstatSync)(recordPath()).size > COMPACT_AT_BYTES) writeEvents(readPendingInjections());
   } catch {
   }
 }
@@ -19201,7 +19321,7 @@ function writeEvents(events) {
 function readPendingInjections() {
   try {
     const p = recordPath();
-    if (!(0, import_node_fs17.existsSync)(p)) return [];
+    if (!(0, import_node_fs18.existsSync)(p)) return [];
     const read2 = readRegularFileInRoot(projectPath(VERITY_DIR), "injections.jsonl", MAX_RECORD_BYTES);
     if (!read2.ok) return [];
     const out2 = [];
@@ -19221,13 +19341,13 @@ function readPendingInjections() {
 // src/lib/memory-sync.ts
 var import_promises9 = require("node:fs/promises");
-var import_node_fs20 = require("node:fs");
-var import_node_path18 = require("node:path");
+var import_node_fs21 = require("node:fs");
+var import_node_path19 = require("node:path");
 var import_node_crypto4 = require("node:crypto");
 // src/lib/gitignore.ts
-var import_node_child_process6 = require("node:child_process");
-var import_node_fs18 = require("node:fs");
+var import_node_child_process7 = require("node:child_process");
+var import_node_fs19 = require("node:fs");
 var VERITY_GITIGNORE_MARKER = "# Verity \u2014 machine-local state.";
 var SETTINGS_LOCAL_IGNORE_ENTRY = ".claude/settings.local.json";
 var VERITY_GITIGNORE_BLOCK = [
@@ -19263,7 +19383,7 @@ var SUPERSEDED_MEMORY_LINES = /* @__PURE__ */ new Set([
 ]);
 function isIgnored(path) {
   try {
-    (0, import_node_child_process6.execSync)(`git check-ignore -q -- "${path}"`, { stdio: "pipe" });
+    (0, import_node_child_process7.execSync)(`git check-ignore -q -- "${path}"`, { stdio: "pipe" });
     return true;
   } catch (err2) {
     return err2.status === 1 ? false : null;
@@ -19283,7 +19403,7 @@ function memoryPosture() {
 }
 function committedMemoryFiles() {
   try {
-    return (0, import_node_child_process6.execSync)("git ls-files -z -- .verity/memory", {
+    return (0, import_node_child_process7.execSync)("git ls-files -z -- .verity/memory", {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).split("\0").filter(Boolean);
@@ -19311,7 +19431,7 @@ function fenceMemoryLines(lines) {
 function ensureVerityGitignore() {
   let content = "";
   try {
-    content = (0, import_node_fs18.readFileSync)(".gitignore", "utf-8");
+    content = (0, import_node_fs19.readFileSync)(".gitignore", "utf-8");
   } catch {
   }
   const hasMarker = content.includes(VERITY_GITIGNORE_MARKER);
@@ -19338,7 +19458,7 @@ function ensureVerityGitignore() {
       const sep5 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
       text = text + sep5 + VERITY_GITIGNORE_BLOCK;
     }
-    if (text !== content) (0, import_node_fs18.writeFileSync)(".gitignore", text);
+    if (text !== content) (0, import_node_fs19.writeFileSync)(".gitignore", text);
     return verified(
       memoryIsCommitted ? "memory-tracked" : hasSupersededMemory ? "memory-fenced" : needsRepair ? "repaired" : "added"
     );
@@ -19349,7 +19469,7 @@ function ensureVerityGitignore() {
 function untrackMemory() {
   if (committedMemoryFiles().length === 0) return "none";
   try {
-    (0, import_node_child_process6.execSync)("git rm -r --cached --quiet -- .verity/memory", { stdio: "pipe" });
+    (0, import_node_child_process7.execSync)("git rm -r --cached --quiet -- .verity/memory", { stdio: "pipe" });
     return "untracked";
   } catch {
     return "failed";
@@ -19358,7 +19478,7 @@ function untrackMemory() {
 function writeFencedBlock() {
   let content = "";
   try {
-    content = (0, import_node_fs18.readFileSync)(".gitignore", "utf-8");
+    content = (0, import_node_fs19.readFileSync)(".gitignore", "utf-8");
   } catch {
   }
   const hasMarker = content.includes(VERITY_GITIGNORE_MARKER);
@@ -19370,7 +19490,7 @@ function writeFencedBlock() {
     text = text + sep5 + VERITY_GITIGNORE_BLOCK;
   }
   try {
-    (0, import_node_fs18.writeFileSync)(".gitignore", text);
+    (0, import_node_fs19.writeFileSync)(".gitignore", text);
     return true;
   } catch {
     return false;
@@ -19379,14 +19499,14 @@ function writeFencedBlock() {
 function fenceMemory() {
   let original = null;
   try {
-    original = (0, import_node_fs18.readFileSync)(".gitignore", "utf-8");
+    original = (0, import_node_fs19.readFileSync)(".gitignore", "utf-8");
   } catch {
     original = null;
   }
   const restore = () => {
     try {
-      if (original === null) (0, import_node_fs18.rmSync)(".gitignore", { force: true });
-      else (0, import_node_fs18.writeFileSync)(".gitignore", original);
+      if (original === null) (0, import_node_fs19.rmSync)(".gitignore", { force: true });
+      else (0, import_node_fs19.writeFileSync)(".gitignore", original);
     } catch {
     }
   };
@@ -19404,7 +19524,7 @@ function fenceMemory() {
 }
 function memoryOptOut() {
   try {
-    return (0, import_node_fs18.readFileSync)(".gitignore", "utf-8").includes(MEMORY_OPT_OUT_MARKER);
+    return (0, import_node_fs19.readFileSync)(".gitignore", "utf-8").includes(MEMORY_OPT_OUT_MARKER);
   } catch {
     return false;
   }
@@ -19412,13 +19532,13 @@ function memoryOptOut() {
 function keepMemoryTracked() {
   let content = "";
   try {
-    content = (0, import_node_fs18.readFileSync)(".gitignore", "utf-8");
+    content = (0, import_node_fs19.readFileSync)(".gitignore", "utf-8");
   } catch {
   }
   if (content.includes(MEMORY_OPT_OUT_MARKER)) return "already";
   try {
     const sep5 = content === "" ? "" : content.endsWith("\n") ? "\n" : "\n\n";
-    (0, import_node_fs18.writeFileSync)(".gitignore", content + sep5 + MEMORY_OPT_OUT_STANZA);
+    (0, import_node_fs19.writeFileSync)(".gitignore", content + sep5 + MEMORY_OPT_OUT_STANZA);
   } catch {
     return "failed";
   }
@@ -19427,7 +19547,7 @@ function keepMemoryTracked() {
 function committedVerityState() {
   let out2 = "";
   try {
-    out2 = (0, import_node_child_process6.execSync)("git ls-files -z -- .verity", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
+    out2 = (0, import_node_child_process7.execSync)("git ls-files -z -- .verity", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] });
   } catch {
     return [];
   }
@@ -19437,12 +19557,12 @@ function untrackVerityState() {
   const tracked = committedVerityState();
   if (tracked.length === 0) return "none";
   try {
-    (0, import_node_child_process6.execSync)("git rm -r --cached --quiet -- .verity", { stdio: "pipe" });
+    (0, import_node_child_process7.execSync)("git rm -r --cached --quiet -- .verity", { stdio: "pipe" });
     const keeps = [".verity/standard.yaml"];
     if (memoryPosture() === "committable") keeps.push(".verity/memory");
     for (const keep of keeps) {
       try {
-        (0, import_node_child_process6.execSync)(`git add -- "${keep}"`, { stdio: "pipe" });
+        (0, import_node_child_process7.execSync)(`git add -- "${keep}"`, { stdio: "pipe" });
       } catch {
       }
     }
@@ -19453,26 +19573,26 @@ function untrackVerityState() {
 }
 // src/lib/safe-path.ts
-var import_node_fs19 = require("node:fs");
-var import_node_path17 = require("node:path");
+var import_node_fs20 = require("node:fs");
+var import_node_path18 = require("node:path");
 function resolveInside(baseDir, candidate) {
   if (typeof candidate !== "string" || candidate.length === 0) return null;
-  if ((0, import_node_path17.isAbsolute)(candidate)) return null;
-  const baseAbs = (0, import_node_path17.resolve)(baseDir);
-  const full = (0, import_node_path17.resolve)(baseAbs, candidate);
-  const baseSep = baseAbs.endsWith(import_node_path17.sep) ? baseAbs : baseAbs + import_node_path17.sep;
+  if ((0, import_node_path18.isAbsolute)(candidate)) return null;
+  const baseAbs = (0, import_node_path18.resolve)(baseDir);
+  const full = (0, import_node_path18.resolve)(baseAbs, candidate);
+  const baseSep = baseAbs.endsWith(import_node_path18.sep) ? baseAbs : baseAbs + import_node_path18.sep;
   if (full !== baseAbs && !full.startsWith(baseSep)) return null;
   try {
-    if ((0, import_node_fs19.existsSync)(baseAbs)) {
-      const realBase = (0, import_node_fs19.realpathSync)(baseAbs);
-      const realBaseSep = realBase.endsWith(import_node_path17.sep) ? realBase : realBase + import_node_path17.sep;
+    if ((0, import_node_fs20.existsSync)(baseAbs)) {
+      const realBase = (0, import_node_fs20.realpathSync)(baseAbs);
+      const realBaseSep = realBase.endsWith(import_node_path18.sep) ? realBase : realBase + import_node_path18.sep;
       let probe = full;
-      while (!(0, import_node_fs19.existsSync)(probe)) {
-        const parent = (0, import_node_path17.dirname)(probe);
+      while (!(0, import_node_fs20.existsSync)(probe)) {
+        const parent = (0, import_node_path18.dirname)(probe);
         if (parent === probe) break;
         probe = parent;
       }
-      const realProbe = (0, import_node_fs19.realpathSync)(probe);
+      const realProbe = (0, import_node_fs20.realpathSync)(probe);
       if (realProbe !== realBase && !realProbe.startsWith(realBaseSep)) return null;
     }
   } catch {
@@ -19480,37 +19600,37 @@ function resolveInside(baseDir, candidate) {
   }
   return full;
 }
-var O_NOFOLLOW2 = typeof import_node_fs19.constants.O_NOFOLLOW === "number" ? import_node_fs19.constants.O_NOFOLLOW : 0;
+var O_NOFOLLOW2 = typeof import_node_fs20.constants.O_NOFOLLOW === "number" ? import_node_fs20.constants.O_NOFOLLOW : 0;
 function readFileInside(baseDir, candidate, maxBytes) {
   const full = resolveInside(baseDir, candidate);
   if (!full) return null;
   let realParent;
   let realBase;
   try {
-    realParent = (0, import_node_fs19.realpathSync)((0, import_node_path17.dirname)(full));
-    realBase = (0, import_node_fs19.realpathSync)((0, import_node_path17.resolve)(baseDir));
+    realParent = (0, import_node_fs20.realpathSync)((0, import_node_path18.dirname)(full));
+    realBase = (0, import_node_fs20.realpathSync)((0, import_node_path18.resolve)(baseDir));
   } catch {
     return null;
   }
-  const realBaseSep = realBase.endsWith(import_node_path17.sep) ? realBase : realBase + import_node_path17.sep;
+  const realBaseSep = realBase.endsWith(import_node_path18.sep) ? realBase : realBase + import_node_path18.sep;
   if (realParent !== realBase && !realParent.startsWith(realBaseSep)) return null;
-  const target = (0, import_node_path17.join)(realParent, (0, import_node_path17.basename)(full));
+  const target = (0, import_node_path18.join)(realParent, (0, import_node_path18.basename)(full));
   let fd = null;
   try {
-    fd = (0, import_node_fs19.openSync)(target, import_node_fs19.constants.O_RDONLY | O_NOFOLLOW2);
-    const st = (0, import_node_fs19.fstatSync)(fd);
+    fd = (0, import_node_fs20.openSync)(target, import_node_fs20.constants.O_RDONLY | O_NOFOLLOW2);
+    const st = (0, import_node_fs20.fstatSync)(fd);
     if (!st.isFile()) return null;
     const cap2 = Math.min(maxBytes, st.size);
     if (cap2 <= 0) return "";
     const buf = Buffer.alloc(cap2);
-    const bytesRead = (0, import_node_fs19.readSync)(fd, buf, 0, cap2, 0);
+    const bytesRead = (0, import_node_fs20.readSync)(fd, buf, 0, cap2, 0);
     return buf.subarray(0, bytesRead).toString("utf-8");
   } catch {
     return null;
   } finally {
     if (fd !== null) {
       try {
-        (0, import_node_fs19.closeSync)(fd);
+        (0, import_node_fs20.closeSync)(fd);
       } catch {
       }
     }
@@ -19593,32 +19713,32 @@ var syncStateFile = () => projectPath(`${VERITY_DIR}/.memory-sync-state.json`);
 async function ensureMemoryDir() {
   await (0, import_promises9.mkdir)(memoryDir2(), { recursive: true });
   for (const domain of DOMAINS2) {
-    await (0, import_promises9.mkdir)((0, import_node_path18.join)(memoryDir2(), domain), { recursive: true });
+    await (0, import_promises9.mkdir)((0, import_node_path19.join)(memoryDir2(), domain), { recursive: true });
   }
-  if (!(0, import_node_fs20.existsSync)((0, import_node_path18.join)(memoryDir2(), "SCHEMA.md"))) {
-    await (0, import_promises9.writeFile)((0, import_node_path18.join)(memoryDir2(), "SCHEMA.md"), SCHEMA_TEMPLATE);
+  if (!(0, import_node_fs21.existsSync)((0, import_node_path19.join)(memoryDir2(), "SCHEMA.md"))) {
+    await (0, import_promises9.writeFile)((0, import_node_path19.join)(memoryDir2(), "SCHEMA.md"), SCHEMA_TEMPLATE);
   }
-  if (!(0, import_node_fs20.existsSync)((0, import_node_path18.join)(memoryDir2(), "index.md"))) {
-    await (0, import_promises9.writeFile)((0, import_node_path18.join)(memoryDir2(), "index.md"), "# Project Memory Index\n\nNo nodes yet. Run an analysis to start building the knowledge graph.\n");
+  if (!(0, import_node_fs21.existsSync)((0, import_node_path19.join)(memoryDir2(), "index.md"))) {
+    await (0, import_promises9.writeFile)((0, import_node_path19.join)(memoryDir2(), "index.md"), "# Project Memory Index\n\nNo nodes yet. Run an analysis to start building the knowledge graph.\n");
   }
-  if (!(0, import_node_fs20.existsSync)((0, import_node_path18.join)(memoryDir2(), "log.md"))) {
-    await (0, import_promises9.writeFile)((0, import_node_path18.join)(memoryDir2(), "log.md"), "# Memory Log\n\n");
+  if (!(0, import_node_fs21.existsSync)((0, import_node_path19.join)(memoryDir2(), "log.md"))) {
+    await (0, import_promises9.writeFile)((0, import_node_path19.join)(memoryDir2(), "log.md"), "# Memory Log\n\n");
   }
 }
 async function buildManifest() {
-  if (!(0, import_node_fs20.existsSync)(memoryDir2())) {
+  if (!(0, import_node_fs21.existsSync)(memoryDir2())) {
     return { schema_version: 1, nodes: [], index_hash: null, log_length: 0 };
   }
   const nodes = [];
   for (const domain of DOMAINS2) {
-    const domainDir = (0, import_node_path18.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs20.existsSync)(domainDir)) continue;
+    const domainDir = (0, import_node_path19.join)(memoryDir2(), domain);
+    if (!(0, import_node_fs21.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises9.readdir)(domainDir);
       for (const file of files) {
         if (!file.endsWith(".md")) continue;
         const filePath = `${domain}/${file}`;
-        const fullPath = (0, import_node_path18.join)(memoryDir2(), filePath);
+        const fullPath = (0, import_node_path19.join)(memoryDir2(), filePath);
         try {
           const content = await (0, import_promises9.readFile)(fullPath, "utf-8");
           const hash = (0, import_node_crypto4.createHash)("sha256").update(content).digest("hex").slice(0, 16);
@@ -19631,13 +19751,13 @@ async function buildManifest() {
   }
   let indexHash = null;
   try {
-    const indexContent = await (0, import_promises9.readFile)((0, import_node_path18.join)(memoryDir2(), "index.md"), "utf-8");
+    const indexContent = await (0, import_promises9.readFile)((0, import_node_path19.join)(memoryDir2(), "index.md"), "utf-8");
     indexHash = `sha256:${(0, import_node_crypto4.createHash)("sha256").update(indexContent).digest("hex").slice(0, 16)}`;
   } catch {
   }
   let logLength = 0;
   try {
-    const logContent = await (0, import_promises9.readFile)((0, import_node_path18.join)(memoryDir2(), "log.md"), "utf-8");
+    const logContent = await (0, import_promises9.readFile)((0, import_node_path19.join)(memoryDir2(), "log.md"), "utf-8");
     logLength = logContent.split("\n").length;
   } catch {
   }
@@ -19648,15 +19768,15 @@ function hashContent(content) {
 }
 async function readOnDiskNodes() {
   const out2 = /* @__PURE__ */ new Map();
-  if (!(0, import_node_fs20.existsSync)(memoryDir2())) return out2;
+  if (!(0, import_node_fs21.existsSync)(memoryDir2())) return out2;
   for (const domain of DOMAINS2) {
-    const domainDir = (0, import_node_path18.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs20.existsSync)(domainDir)) continue;
+    const domainDir = (0, import_node_path19.join)(memoryDir2(), domain);
+    if (!(0, import_node_fs21.existsSync)(domainDir)) continue;
     try {
       for (const file of await (0, import_promises9.readdir)(domainDir)) {
         if (!file.endsWith(".md")) continue;
         try {
-          out2.set(`${domain}/${file}`, hashContent(await (0, import_promises9.readFile)((0, import_node_path18.join)(domainDir, file), "utf-8")));
+          out2.set(`${domain}/${file}`, hashContent(await (0, import_promises9.readFile)((0, import_node_path19.join)(domainDir, file), "utf-8")));
         } catch {
         }
       }
@@ -19693,7 +19813,7 @@ async function recordSyncedNodePaths() {
   }
 }
 async function writeFileAtomic(path, content) {
-  await (0, import_promises9.mkdir)((0, import_node_path18.dirname)(path), { recursive: true });
+  await (0, import_promises9.mkdir)((0, import_node_path19.dirname)(path), { recursive: true });
   const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
   await (0, import_promises9.writeFile)(tmp, content);
   await (0, import_promises9.rename)(tmp, path);
@@ -19707,8 +19827,8 @@ async function computeEditedNodeUploads() {
   const uploads = [];
   for (const [path, prevHash] of prev) {
     if (prevHash == null) continue;
-    const full = (0, import_node_path18.join)(memoryDir2(), path);
-    if (!(0, import_node_fs20.existsSync)(full)) continue;
+    const full = (0, import_node_path19.join)(memoryDir2(), path);
+    if (!(0, import_node_fs21.existsSync)(full)) continue;
     let content;
     try {
       content = await (0, import_promises9.readFile)(full, "utf-8");
@@ -19752,8 +19872,8 @@ async function applyMemoryWrites(writes, opts = {}) {
   const logLines = [`- ${(/* @__PURE__ */ new Date()).toISOString().slice(0, 16)} \u2014 Applied ${count} write(s) from server`];
   for (const n of notes) logLines.push(`  - ${n}`);
   try {
-    const existing = (0, import_node_fs20.existsSync)((0, import_node_path18.join)(memoryDir2(), "log.md")) ? await (0, import_promises9.readFile)((0, import_node_path18.join)(memoryDir2(), "log.md"), "utf-8") : "# Memory Log\n\n";
-    await (0, import_promises9.writeFile)((0, import_node_path18.join)(memoryDir2(), "log.md"), existing + logLines.join("\n") + "\n");
+    const existing = (0, import_node_fs21.existsSync)((0, import_node_path19.join)(memoryDir2(), "log.md")) ? await (0, import_promises9.readFile)((0, import_node_path19.join)(memoryDir2(), "log.md"), "utf-8") : "# Memory Log\n\n";
+    await (0, import_promises9.writeFile)((0, import_node_path19.join)(memoryDir2(), "log.md"), existing + logLines.join("\n") + "\n");
   } catch {
   }
   if (opts.baseline === "written") await mergeSyncBaseline(synced);
@@ -19763,7 +19883,7 @@ async function applyMemoryWrites(writes, opts = {}) {
 async function mergeSyncBaseline(entries) {
   if (entries.size === 0) return;
   try {
-    if ((0, import_node_fs20.existsSync)(syncStateFile())) {
+    if ((0, import_node_fs21.existsSync)(syncStateFile())) {
       try {
         JSON.parse(await (0, import_promises9.readFile)(syncStateFile(), "utf-8"));
       } catch {
@@ -19791,7 +19911,7 @@ async function applyOneWrite(write, treePaths, lastServed) {
       notes.push(`${write.path}: dropped unmatched file_globs [${grounded.dropped.join(", ")}]`);
     }
   }
-  if ((0, import_node_fs20.existsSync)(fullPath)) {
+  if ((0, import_node_fs21.existsSync)(fullPath)) {
     let existing = "";
     try {
       existing = await (0, import_promises9.readFile)(fullPath, "utf-8");
@@ -19807,7 +19927,7 @@ async function applyOneWrite(write, treePaths, lastServed) {
       notes.push(`${write.path}: updated from server (untouched here since the server delivered it)`);
     }
   }
-  await (0, import_promises9.mkdir)((0, import_node_path18.dirname)(fullPath), { recursive: true });
+  await (0, import_promises9.mkdir)((0, import_node_path19.dirname)(fullPath), { recursive: true });
   await (0, import_promises9.writeFile)(fullPath, content);
   return { written: true, syncedHash: hashContent(content), notes };
 }
@@ -19848,8 +19968,8 @@ async function regenerateIndex() {
   ];
   let totalNodes = 0;
   for (const domain of DOMAINS2.filter((d) => d !== "_archive")) {
-    const domainDir = (0, import_node_path18.join)(memoryDir2(), domain);
-    if (!(0, import_node_fs20.existsSync)(domainDir)) continue;
+    const domainDir = (0, import_node_path19.join)(memoryDir2(), domain);
+    if (!(0, import_node_fs21.existsSync)(domainDir)) continue;
     try {
       const files = await (0, import_promises9.readdir)(domainDir);
       const mdFiles = files.filter((f) => f.endsWith(".md"));
@@ -19859,7 +19979,7 @@ async function regenerateIndex() {
       for (const file of mdFiles.sort()) {
         const slug = file.replace(/\.md$/, "");
         try {
-          const content = await (0, import_promises9.readFile)((0, import_node_path18.join)(domainDir, file), "utf-8");
+          const content = await (0, import_promises9.readFile)((0, import_node_path19.join)(domainDir, file), "utf-8");
           const title = pickFrontmatter(content, "title") ?? slug;
           const kind = pickFrontmatter(content, "kind") ?? "-";
           const confidence = pickFrontmatter(content, "confidence");
@@ -19883,7 +20003,7 @@ async function regenerateIndex() {
     lines.push("No nodes yet. Run an analysis to start building the knowledge graph.");
   }
   const next = lines.join("\n") + "\n";
-  const indexPath = (0, import_node_path18.join)(memoryDir2(), "index.md");
+  const indexPath = (0, import_node_path19.join)(memoryDir2(), "index.md");
   let existing = null;
   try {
     existing = await (0, import_promises9.readFile)(indexPath, "utf-8");
@@ -20280,9 +20400,9 @@ function hasLegacyMemoryBlock(text) {
   return findMarker(text, LEGACY_MD_START) !== -1;
 }
 async function ensureClaudeMdPointer(cwd = repoRoot()) {
-  const claudeMdPath = (0, import_node_path18.join)(cwd, "CLAUDE.md");
+  const claudeMdPath = (0, import_node_path19.join)(cwd, "CLAUDE.md");
   let existing = "";
-  if ((0, import_node_fs20.existsSync)(claudeMdPath)) {
+  if ((0, import_node_fs21.existsSync)(claudeMdPath)) {
     existing = await (0, import_promises9.readFile)(claudeMdPath, "utf-8");
   }
   let startTag = CLAUDE_MD_START;
@@ -20423,9 +20543,9 @@ Body content (\u22648KB). Use [[node-id]] wikilinks for cross-references.
 `;
 // src/lib/dossier-session.ts
-var import_node_fs25 = require("node:fs");
+var import_node_fs26 = require("node:fs");
 var import_node_crypto8 = require("node:crypto");
-var import_node_path21 = require("node:path");
+var import_node_path22 = require("node:path");
 // src/lib/pending-repeat.ts
 var STOP = /* @__PURE__ */ new Set([
@@ -20530,8 +20650,8 @@ function statementAnchorKey(file, patternId) {
 // src/lib/dossier/log.ts
 var import_node_crypto5 = require("node:crypto");
-var import_node_fs21 = require("node:fs");
-var import_node_path19 = require("node:path");
+var import_node_fs22 = require("node:fs");
+var import_node_path20 = require("node:path");
 var CRC_TABLE = (() => {
   const t = new Int32Array(256);
   for (let i2 = 0; i2 < 256; i2++) {
@@ -20550,13 +20670,13 @@ function crc32(s) {
 function openDossier(identity) {
   try {
     const dir = dossierDir(identity);
-    (0, import_node_fs21.mkdirSync)(dir, { recursive: true, mode: 448 });
+    (0, import_node_fs22.mkdirSync)(dir, { recursive: true, mode: 448 });
     return {
       dir,
       identity,
-      eventsPath: (0, import_node_path19.join)(dir, "events.jsonl"),
-      foldPath: (0, import_node_path19.join)(dir, "fold.json"),
-      rotatedDir: (0, import_node_path19.join)(dir, "rotated")
+      eventsPath: (0, import_node_path20.join)(dir, "events.jsonl"),
+      foldPath: (0, import_node_path20.join)(dir, "fold.json"),
+      rotatedDir: (0, import_node_path20.join)(dir, "rotated")
     };
   } catch {
     return null;
@@ -20618,7 +20738,7 @@ function appendEvent(d, ev) {
       at: ev.at ?? (/* @__PURE__ */ new Date()).toISOString(),
       ...ev
     });
-    (0, import_node_fs21.appendFileSync)(d.eventsPath, line2, { mode: 384 });
+    (0, import_node_fs22.appendFileSync)(d.eventsPath, line2, { mode: 384 });
     return true;
   } catch {
     return false;
@@ -20626,14 +20746,14 @@ function appendEvent(d, ev) {
 }
 function rotateIfNeeded2(d) {
   try {
-    if (!(0, import_node_fs21.existsSync)(d.eventsPath)) return;
-    if ((0, import_node_fs21.statSync)(d.eventsPath).size < ROTATE_BYTES) return;
-    (0, import_node_fs21.mkdirSync)(d.rotatedDir, { recursive: true, mode: 448 });
-    (0, import_node_fs21.renameSync)(d.eventsPath, (0, import_node_path19.join)(d.rotatedDir, `events.${Date.now()}.jsonl`));
-    const kept = (0, import_node_fs21.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
+    if (!(0, import_node_fs22.existsSync)(d.eventsPath)) return;
+    if ((0, import_node_fs22.statSync)(d.eventsPath).size < ROTATE_BYTES) return;
+    (0, import_node_fs22.mkdirSync)(d.rotatedDir, { recursive: true, mode: 448 });
+    (0, import_node_fs22.renameSync)(d.eventsPath, (0, import_node_path20.join)(d.rotatedDir, `events.${Date.now()}.jsonl`));
+    const kept = (0, import_node_fs22.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
     for (const stale of kept.slice(0, Math.max(0, kept.length - ROTATE_KEEP))) {
       try {
-        (0, import_node_fs21.renameSync)((0, import_node_path19.join)(d.rotatedDir, stale), (0, import_node_path19.join)(d.rotatedDir, `${stale}.pruned`));
+        (0, import_node_fs22.renameSync)((0, import_node_path20.join)(d.rotatedDir, stale), (0, import_node_path20.join)(d.rotatedDir, `${stale}.pruned`));
       } catch {
       }
     }
@@ -20643,8 +20763,8 @@ function rotateIfNeeded2(d) {
 // src/lib/dossier/fold-dossier.ts
 var import_node_crypto6 = require("node:crypto");
-var import_node_fs22 = require("node:fs");
-var import_node_path20 = require("node:path");
+var import_node_fs23 = require("node:fs");
+var import_node_path21 = require("node:path");
 var EMPTY_CAPABILITIES = () => ({
   human_reachable: { value: "unknown", tier: "unknown" },
   authorship_observability: { value: "unknown", tier: "unknown" },
@@ -20695,12 +20815,12 @@ function foldDossier(d, opts = {}) {
     }
   };
   try {
-    if ((0, import_node_fs22.existsSync)(d.rotatedDir)) {
-      const files = (0, import_node_fs22.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
+    if ((0, import_node_fs23.existsSync)(d.rotatedDir)) {
+      const files = (0, import_node_fs23.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).sort();
       state.meta.rotations = files.length;
       for (const f of files) {
         try {
-          ingest((0, import_node_fs22.readFileSync)((0, import_node_path20.join)(d.rotatedDir, f), "utf8"));
+          ingest((0, import_node_fs23.readFileSync)((0, import_node_path21.join)(d.rotatedDir, f), "utf8"));
         } catch {
           state.meta.dropped_lines++;
         }
@@ -20709,9 +20829,9 @@ function foldDossier(d, opts = {}) {
   } catch {
   }
   try {
-    if ((0, import_node_fs22.existsSync)(d.eventsPath)) {
-      state.meta.upto_offset = (0, import_node_fs22.statSync)(d.eventsPath).size;
-      ingest((0, import_node_fs22.readFileSync)(d.eventsPath, "utf8"));
+    if ((0, import_node_fs23.existsSync)(d.eventsPath)) {
+      state.meta.upto_offset = (0, import_node_fs23.statSync)(d.eventsPath).size;
+      ingest((0, import_node_fs23.readFileSync)(d.eventsPath, "utf8"));
     }
   } catch {
   }
@@ -20982,7 +21102,7 @@ function applyBounds(state, input) {
 }
 // src/lib/dossier/cache.ts
-var import_node_fs23 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 function compactState(s) {
   const ms = (iso) => Date.parse(iso) || 0;
   return {
@@ -21111,20 +21231,20 @@ function encodeState(s) {
 function writeFoldCache(d, state) {
   try {
     const tmp = `${d.foldPath}.${process.pid}.tmp`;
-    (0, import_node_fs23.writeFileSync)(tmp, encodeState(state), { mode: 384 });
-    (0, import_node_fs23.renameSync)(tmp, d.foldPath);
+    (0, import_node_fs24.writeFileSync)(tmp, encodeState(state), { mode: 384 });
+    (0, import_node_fs24.renameSync)(tmp, d.foldPath);
   } catch {
   }
 }
 function readFoldCache(d) {
   try {
-    if (!(0, import_node_fs23.existsSync)(d.foldPath)) return null;
-    const raw = JSON.parse((0, import_node_fs23.readFileSync)(d.foldPath, "utf8"));
+    if (!(0, import_node_fs24.existsSync)(d.foldPath)) return null;
+    const raw = JSON.parse((0, import_node_fs24.readFileSync)(d.foldPath, "utf8"));
     if (raw?.v !== 1) return null;
     const cached2 = expandState(raw);
     if (!cached2?.meta) return null;
-    const size = (0, import_node_fs23.existsSync)(d.eventsPath) ? (0, import_node_fs23.statSync)(d.eventsPath).size : 0;
-    const rotations = (0, import_node_fs23.existsSync)(d.rotatedDir) ? (0, import_node_fs23.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).length : 0;
+    const size = (0, import_node_fs24.existsSync)(d.eventsPath) ? (0, import_node_fs24.statSync)(d.eventsPath).size : 0;
+    const rotations = (0, import_node_fs24.existsSync)(d.rotatedDir) ? (0, import_node_fs24.readdirSync)(d.rotatedDir).filter((f) => f.endsWith(".jsonl")).length : 0;
     if (cached2.meta.upto_offset !== size || cached2.meta.rotations !== rotations) return null;
     return cached2;
   } catch {
@@ -21175,13 +21295,13 @@ function assessContinuity(i2) {
 // src/lib/dossier/reanchor.ts
 var import_node_crypto7 = require("node:crypto");
-var import_node_fs24 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 function lineSha(text) {
   return (0, import_node_crypto7.createHash)("sha256").update(text.trim()).digest("hex").slice(0, HASH_WIDTH);
 }
 function fileHash(path) {
   try {
-    return (0, import_node_crypto7.createHash)("sha256").update((0, import_node_fs24.readFileSync)(path)).digest("hex").slice(0, HASH_WIDTH);
+    return (0, import_node_crypto7.createHash)("sha256").update((0, import_node_fs25.readFileSync)(path)).digest("hex").slice(0, HASH_WIDTH);
   } catch {
     return null;
   }
@@ -21553,20 +21673,20 @@ function foreignAuthoredPaths(identity, opts = {}) {
   let sessions = 0;
   try {
     const dir = treeDir(identity);
-    if (!(0, import_node_fs25.existsSync)(dir)) return { paths: [], sessions: 0 };
-    for (const entry of (0, import_node_fs25.readdirSync)(dir, { withFileTypes: true })) {
+    if (!(0, import_node_fs26.existsSync)(dir)) return { paths: [], sessions: 0 };
+    for (const entry of (0, import_node_fs26.readdirSync)(dir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
       if (entry.name === identity.sessionKey) continue;
-      const log = (0, import_node_path21.join)(dir, entry.name, "events.jsonl");
+      const log = (0, import_node_path22.join)(dir, entry.name, "events.jsonl");
       try {
-        if (!(0, import_node_fs25.existsSync)(log)) continue;
-        if (now - (0, import_node_fs25.statSync)(log).mtimeMs > windowMs) continue;
+        if (!(0, import_node_fs26.existsSync)(log)) continue;
+        if (now - (0, import_node_fs26.statSync)(log).mtimeMs > windowMs) continue;
         const sib = {
-          dir: (0, import_node_path21.join)(dir, entry.name),
+          dir: (0, import_node_path22.join)(dir, entry.name),
           identity,
           eventsPath: log,
-          foldPath: (0, import_node_path21.join)(dir, entry.name, "fold.json"),
-          rotatedDir: (0, import_node_path21.join)(dir, entry.name, "rotated")
+          foldPath: (0, import_node_path22.join)(dir, entry.name, "fold.json"),
+          rotatedDir: (0, import_node_path22.join)(dir, entry.name, "rotated")
         };
         const state = readFoldCache(sib) ?? foldDossier(sib);
         sessions++;
@@ -21594,25 +21714,25 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
   let removed = 0;
   try {
     const mine = dossierDir(identity);
-    const userDir = (0, import_node_path21.dirname)((0, import_node_path21.dirname)(mine));
-    if (!(0, import_node_fs25.existsSync)(userDir)) return 0;
+    const userDir = (0, import_node_path22.dirname)((0, import_node_path22.dirname)(mine));
+    if (!(0, import_node_fs26.existsSync)(userDir)) return 0;
     const cutoff = Date.now() - maxAgeMs;
-    for (const tree of (0, import_node_fs25.readdirSync)(userDir, { withFileTypes: true })) {
+    for (const tree of (0, import_node_fs26.readdirSync)(userDir, { withFileTypes: true })) {
       if (!tree.isDirectory()) continue;
-      const treePath = (0, import_node_path21.join)(userDir, tree.name);
+      const treePath = (0, import_node_path22.join)(userDir, tree.name);
       let live = 0;
-      for (const entry of (0, import_node_fs25.readdirSync)(treePath, { withFileTypes: true })) {
+      for (const entry of (0, import_node_fs26.readdirSync)(treePath, { withFileTypes: true })) {
         if (!entry.isDirectory()) continue;
-        const dir = (0, import_node_path21.join)(treePath, entry.name);
+        const dir = (0, import_node_path22.join)(treePath, entry.name);
         if (dir === mine) {
           live++;
           continue;
         }
         try {
-          const log = (0, import_node_path21.join)(dir, "events.jsonl");
-          const at = (0, import_node_fs25.existsSync)(log) ? (0, import_node_fs25.statSync)(log).mtimeMs : (0, import_node_fs25.statSync)(dir).mtimeMs;
+          const log = (0, import_node_path22.join)(dir, "events.jsonl");
+          const at = (0, import_node_fs26.existsSync)(log) ? (0, import_node_fs26.statSync)(log).mtimeMs : (0, import_node_fs26.statSync)(dir).mtimeMs;
           if (at < cutoff) {
-            (0, import_node_fs25.rmSync)(dir, { recursive: true, force: true });
+            (0, import_node_fs26.rmSync)(dir, { recursive: true, force: true });
             removed++;
           } else {
             live++;
@@ -21622,7 +21742,7 @@ function pruneOldDossiers(identity, maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
       }
       if (live === 0) {
         try {
-          (0, import_node_fs25.rmSync)(treePath, { recursive: false, force: false });
+          (0, import_node_fs26.rmSync)(treePath, { recursive: false, force: false });
         } catch {
         }
       }
@@ -21639,8 +21759,8 @@ function sessionDossier(token, sessionId) {
 }
 function hasActiveGoal(d) {
   try {
-    if (!(0, import_node_fs25.existsSync)(d.eventsPath)) return false;
-    return (0, import_node_fs25.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
+    if (!(0, import_node_fs26.existsSync)(d.eventsPath)) return false;
+    return (0, import_node_fs26.readFileSync)(d.eventsPath, "utf8").includes('"k":"goal"');
   } catch {
     return false;
   }
@@ -21664,7 +21784,7 @@ function recordTurn(d, t) {
   for (const a of t.authored) {
     const origin = a.owner === "subagent" ? "subagent" : "edit_tool";
     const prior = t.known?.authored?.get(a.p);
-    const hash = fileHash((0, import_node_path21.join)(root, a.p));
+    const hash = fileHash((0, import_node_path22.join)(root, a.p));
     const hunks = Math.max(0, a.h - (prior?.hunks ?? 0));
     const adds = Math.max(0, a.a - (prior?.adds ?? 0));
     const dels = Math.max(0, a.d - (prior?.dels ?? 0));
@@ -21697,7 +21817,7 @@ function recordTurn(d, t) {
   }
   const seenDivergence = t.known?.divergence ?? /* @__PURE__ */ new Set();
   for (const u of t.unobserved) {
-    const hash = fileHash((0, import_node_path21.join)(root, u.p));
+    const hash = fileHash((0, import_node_path22.join)(root, u.p));
     if (seenDivergence.has(divergenceKey(u.p, hash))) continue;
     appendEvent(d, { k: "divergence", kind: "external_mutation", path: u.p, hash });
   }
@@ -21732,8 +21852,8 @@ function recordVerdict(d, v) {
     if (!sent.has(f.file)) continue;
     if (!lines.has(f.file)) {
       try {
-        const abs = (0, import_node_path21.join)(root, f.file);
-        lines.set(f.file, (0, import_node_fs25.existsSync)(abs) ? (0, import_node_fs25.readFileSync)(abs, "utf8").split("\n") : null);
+        const abs = (0, import_node_path22.join)(root, f.file);
+        lines.set(f.file, (0, import_node_fs26.existsSync)(abs) ? (0, import_node_fs26.readFileSync)(abs, "utf8").split("\n") : null);
       } catch {
         lines.set(f.file, null);
       }
@@ -21833,8 +21953,8 @@ function recallMemory(d, identity, opts) {
       budgetBytes: opts.budgetBytes,
       readFileLines: (file) => {
         try {
-          const abs = (0, import_node_path21.join)(root, file);
-          return (0, import_node_fs25.existsSync)(abs) ? (0, import_node_fs25.readFileSync)(abs, "utf8").split("\n") : null;
+          const abs = (0, import_node_path22.join)(root, file);
+          return (0, import_node_fs26.existsSync)(abs) ? (0, import_node_fs26.readFileSync)(abs, "utf8").split("\n") : null;
         } catch {
           return null;
         }
@@ -22002,21 +22122,21 @@ async function fireClassify(prompt, sessionId, globals) {
 }
 // src/commands/lifecycle.ts
-var import_node_fs28 = require("node:fs");
-var import_node_path25 = require("node:path");
+var import_node_fs29 = require("node:fs");
+var import_node_path26 = require("node:path");
 // src/lib/baseline.ts
-var import_node_fs27 = require("node:fs");
-var import_node_path24 = require("node:path");
+var import_node_fs28 = require("node:fs");
+var import_node_path25 = require("node:path");
 var import_node_crypto10 = require("node:crypto");
 // src/lib/snapshot.ts
-var import_node_fs26 = require("node:fs");
-var import_node_path23 = require("node:path");
-var import_node_child_process7 = require("node:child_process");
+var import_node_fs27 = require("node:fs");
+var import_node_path24 = require("node:path");
+var import_node_child_process8 = require("node:child_process");
 // src/lib/files.ts
-var import_node_path22 = require("node:path");
+var import_node_path23 = require("node:path");
 var LANG_MAP = {
   // Analyzable (static analysis + Gemini)
   ts: "typescript",
@@ -22084,7 +22204,7 @@ var LANG_MAP = {
   mk: "make"
 };
 function detectLanguage(filepath) {
-  const ext = (0, import_node_path22.extname)(filepath).slice(1);
+  const ext = (0, import_node_path23.extname)(filepath).slice(1);
   return LANG_MAP[ext] ?? ext;
 }
 function sortByMtime(files) {
@@ -22175,16 +22295,16 @@ function collectCodeDelta(files, opts) {
 // src/lib/snapshot.ts
 function generateSnapshotDiffs(files) {
-  if (!(0, import_node_fs26.existsSync)(SNAPSHOT_DIR)) {
+  if (!(0, import_node_fs27.existsSync)(SNAPSHOT_DIR)) {
     return { diffs: [], has_snapshots: false };
   }
   const diffs = [];
   for (const file of files) {
     if (!resolveInside(SNAPSHOT_DIR, file.path)) continue;
-    const snapshotPath = (0, import_node_path23.join)(SNAPSHOT_DIR, file.path);
+    const snapshotPath = (0, import_node_path24.join)(SNAPSHOT_DIR, file.path);
     const language = file.language ?? detectLanguage(file.path);
-    if ((0, import_node_fs26.existsSync)(snapshotPath)) {
-      const oldContent = (0, import_node_fs26.readFileSync)(snapshotPath, "utf-8");
+    if ((0, import_node_fs27.existsSync)(snapshotPath)) {
+      const oldContent = (0, import_node_fs27.readFileSync)(snapshotPath, "utf-8");
       if (oldContent === file.content) continue;
       const diff = computeDiff(oldContent, file.content, file.path);
       if (diff) {
@@ -22209,21 +22329,21 @@ function saveSnapshots(files) {
   const snapshotPaths = /* @__PURE__ */ new Set();
   for (const file of files) {
     if (!resolveInside(SNAPSHOT_DIR, file.path)) continue;
-    const snapshotPath = (0, import_node_path23.join)(SNAPSHOT_DIR, file.path);
+    const snapshotPath = (0, import_node_path24.join)(SNAPSHOT_DIR, file.path);
     snapshotPaths.add(snapshotPath);
-    (0, import_node_fs26.mkdirSync)((0, import_node_path23.dirname)(snapshotPath), { recursive: true });
-    (0, import_node_fs26.writeFileSync)(snapshotPath, file.content);
+    (0, import_node_fs27.mkdirSync)((0, import_node_path24.dirname)(snapshotPath), { recursive: true });
+    (0, import_node_fs27.writeFileSync)(snapshotPath, file.content);
   }
   cleanStaleSnapshots(SNAPSHOT_DIR, snapshotPaths);
 }
 function computeDiff(oldContent, newContent, filePath) {
-  const tmpOld = (0, import_node_path23.join)(SNAPSHOT_DIR, ".diff-old.tmp");
-  const tmpNew = (0, import_node_path23.join)(SNAPSHOT_DIR, ".diff-new.tmp");
+  const tmpOld = (0, import_node_path24.join)(SNAPSHOT_DIR, ".diff-old.tmp");
+  const tmpNew = (0, import_node_path24.join)(SNAPSHOT_DIR, ".diff-new.tmp");
   try {
-    (0, import_node_fs26.mkdirSync)(SNAPSHOT_DIR, { recursive: true });
-    (0, import_node_fs26.writeFileSync)(tmpOld, oldContent);
-    (0, import_node_fs26.writeFileSync)(tmpNew, newContent);
-    const result = (0, import_node_child_process7.execSync)(
+    (0, import_node_fs27.mkdirSync)(SNAPSHOT_DIR, { recursive: true });
+    (0, import_node_fs27.writeFileSync)(tmpOld, oldContent);
+    (0, import_node_fs27.writeFileSync)(tmpNew, newContent);
+    const result = (0, import_node_child_process8.execSync)(
       `git diff --no-index --unified=10 -- "${tmpOld}" "${tmpNew}"`,
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
     );
@@ -22236,32 +22356,32 @@ function computeDiff(oldContent, newContent, filePath) {
     return null;
   } finally {
     try {
-      (0, import_node_fs26.unlinkSync)(tmpOld);
+      (0, import_node_fs27.unlinkSync)(tmpOld);
     } catch {
     }
     try {
-      (0, import_node_fs26.unlinkSync)(tmpNew);
+      (0, import_node_fs27.unlinkSync)(tmpNew);
     } catch {
     }
   }
 }
 function cleanStaleSnapshots(dir, keepSet) {
-  if (!(0, import_node_fs26.existsSync)(dir)) return;
+  if (!(0, import_node_fs27.existsSync)(dir)) return;
   try {
-    const entries = (0, import_node_fs26.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs27.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
       if (dir === SNAPSHOT_DIR && (entry.name === ".diff-old.tmp" || entry.name === ".diff-new.tmp")) continue;
-      const fullPath = (0, import_node_path23.join)(dir, entry.name);
+      const fullPath = (0, import_node_path24.join)(dir, entry.name);
       if (entry.isDirectory()) {
         cleanStaleSnapshots(fullPath, keepSet);
         try {
-          const remaining = (0, import_node_fs26.readdirSync)(fullPath);
-          if (remaining.length === 0) (0, import_node_fs26.rmdirSync)(fullPath);
+          const remaining = (0, import_node_fs27.readdirSync)(fullPath);
+          if (remaining.length === 0) (0, import_node_fs27.rmdirSync)(fullPath);
         } catch {
         }
       } else if (!keepSet.has(fullPath)) {
         try {
-          (0, import_node_fs26.unlinkSync)(fullPath);
+          (0, import_node_fs27.unlinkSync)(fullPath);
         } catch {
         }
       }
@@ -22280,20 +22400,20 @@ function sessionKey(sessionId) {
   return (0, import_node_crypto10.createHash)("sha256").update(sessionId).digest("hex").slice(0, 16);
 }
 function sessionDir(key) {
-  return (0, import_node_path24.join)(projectPath(BASELINE_DIR), key);
+  return (0, import_node_path25.join)(projectPath(BASELINE_DIR), key);
 }
 function manifestPath(dir) {
-  return (0, import_node_path24.join)(dir, "manifest.json");
+  return (0, import_node_path25.join)(dir, "manifest.json");
 }
 function mirrorPath(dir, repoRelPath) {
-  return (0, import_node_path24.join)(dir, "files", repoRelPath);
+  return (0, import_node_path25.join)(dir, "files", repoRelPath);
 }
 var CARRY_FILE = `${BASELINE_DIR}/.carry`;
 var CARRY_WINDOW_MS = 12e4;
 function writeCarry(sessionId, headSha) {
   try {
-    (0, import_node_fs27.mkdirSync)(projectPath(BASELINE_DIR), { recursive: true });
-    (0, import_node_fs27.writeFileSync)(
+    (0, import_node_fs28.mkdirSync)(projectPath(BASELINE_DIR), { recursive: true });
+    (0, import_node_fs28.writeFileSync)(
       projectPath(CARRY_FILE),
       JSON.stringify({ from_key: sessionKey(sessionId), head_sha: headSha, ts: Date.now() })
     );
@@ -22303,10 +22423,10 @@ function writeCarry(sessionId, headSha) {
 function claimCarry(newKey) {
   const carryPath = projectPath(CARRY_FILE);
   try {
-    if (!(0, import_node_fs27.existsSync)(carryPath)) return null;
-    const carry = JSON.parse((0, import_node_fs27.readFileSync)(carryPath, "utf-8"));
+    if (!(0, import_node_fs28.existsSync)(carryPath)) return null;
+    const carry = JSON.parse((0, import_node_fs28.readFileSync)(carryPath, "utf-8"));
     try {
-      (0, import_node_fs27.rmSync)(carryPath, { force: true });
+      (0, import_node_fs28.rmSync)(carryPath, { force: true });
     } catch {
     }
     if (!carry?.from_key || typeof carry.ts !== "number") return null;
@@ -22317,11 +22437,11 @@ function claimCarry(newKey) {
     if (!prior) return null;
     const toDir = sessionDir(newKey);
     try {
-      (0, import_node_fs27.rmSync)(toDir, { recursive: true, force: true });
+      (0, import_node_fs28.rmSync)(toDir, { recursive: true, force: true });
     } catch {
     }
-    (0, import_node_fs27.renameSync)(fromDir, toDir);
-    (0, import_node_fs27.writeFileSync)(manifestPath(toDir), JSON.stringify({ ...prior, session_id: newKey }) + "\n");
+    (0, import_node_fs28.renameSync)(fromDir, toDir);
+    (0, import_node_fs28.writeFileSync)(manifestPath(toDir), JSON.stringify({ ...prior, session_id: newKey }) + "\n");
     return readManifest(toDir);
   } catch {
     return null;
@@ -22345,21 +22465,21 @@ function captureBaseline(opts = {}) {
   const head_sha = getCurrentCommit();
   const dirty = getDirtyFiles();
   try {
-    (0, import_node_fs27.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs28.rmSync)(dir, { recursive: true, force: true });
   } catch {
   }
-  const filesDir = (0, import_node_path24.join)(dir, "files");
+  const filesDir = (0, import_node_path25.join)(dir, "files");
   const mirrored = [];
   try {
-    (0, import_node_fs27.mkdirSync)(filesDir, { recursive: true });
+    (0, import_node_fs28.mkdirSync)(filesDir, { recursive: true });
     for (const p of dirty) {
       if (p.includes("..")) continue;
       const content = safeReadForMirror(projectPath(p));
       if (content === null) continue;
       const dest = mirrorPath(dir, p);
       try {
-        (0, import_node_fs27.mkdirSync)((0, import_node_path24.dirname)(dest), { recursive: true });
-        (0, import_node_fs27.writeFileSync)(dest, content);
+        (0, import_node_fs28.mkdirSync)((0, import_node_path25.dirname)(dest), { recursive: true });
+        (0, import_node_fs28.writeFileSync)(dest, content);
         mirrored.push(p);
       } catch {
       }
@@ -22374,8 +22494,8 @@ function captureBaseline(opts = {}) {
     version: BASELINE_VERSION
   };
   try {
-    (0, import_node_fs27.mkdirSync)(dir, { recursive: true });
-    (0, import_node_fs27.writeFileSync)(manifestPath(dir), JSON.stringify(baseline));
+    (0, import_node_fs28.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs28.writeFileSync)(manifestPath(dir), JSON.stringify(baseline));
   } catch {
   }
   pruneOldBaselines();
@@ -22386,9 +22506,9 @@ function readBaseline(sessionId) {
 }
 function readManifest(dir) {
   const mp = manifestPath(dir);
-  if (!(0, import_node_fs27.existsSync)(mp)) return null;
+  if (!(0, import_node_fs28.existsSync)(mp)) return null;
   try {
-    const parsed = JSON.parse((0, import_node_fs27.readFileSync)(mp, "utf-8"));
+    const parsed = JSON.parse((0, import_node_fs28.readFileSync)(mp, "utf-8"));
     if (typeof parsed.head_sha !== "string" || typeof parsed.captured_at !== "number" || !Array.isArray(parsed.dirty_paths) || parsed.version !== BASELINE_VERSION) {
       return null;
     }
@@ -22419,9 +22539,9 @@ function preImage(repoRelPath, baseline) {
 function resolvePreImage(repoRelPath, baseline) {
   if (baseline.dirty_paths.includes(repoRelPath)) {
     const mp = mirrorPath(sessionDir(sessionKey(baseline.session_id)), repoRelPath);
-    if ((0, import_node_fs27.existsSync)(mp)) {
+    if ((0, import_node_fs28.existsSync)(mp)) {
       try {
-        return { content: (0, import_node_fs27.readFileSync)(mp, "utf-8"), existed: true };
+        return { content: (0, import_node_fs28.readFileSync)(mp, "utf-8"), existed: true };
       } catch {
       }
     }
@@ -22466,8 +22586,8 @@ function absorbIntoBaseline(paths, sessionId) {
       const content = safeReadForMirror(projectPath(p));
       if (content === null) continue;
       const dest = mirrorPath(dir, p);
-      (0, import_node_fs27.mkdirSync)((0, import_node_path24.dirname)(dest), { recursive: true });
-      (0, import_node_fs27.writeFileSync)(dest, content);
+      (0, import_node_fs28.mkdirSync)((0, import_node_path25.dirname)(dest), { recursive: true });
+      (0, import_node_fs28.writeFileSync)(dest, content);
       dirty.add(p);
       adopted++;
     } catch {
@@ -22476,7 +22596,7 @@ function absorbIntoBaseline(paths, sessionId) {
   if (adopted === 0) return 0;
   try {
     const updated = { ...baseline, dirty_paths: [...dirty] };
-    (0, import_node_fs27.writeFileSync)(manifestPath(dir), JSON.stringify(updated));
+    (0, import_node_fs28.writeFileSync)(manifestPath(dir), JSON.stringify(updated));
     preImageCache.delete(baseline);
   } catch {
     return 0;
@@ -22487,7 +22607,7 @@ function changedSinceBaseline(repoRelPath, baseline) {
   const pre = preImage(repoRelPath, baseline);
   let current;
   try {
-    current = (0, import_node_fs27.readFileSync)(projectPath(repoRelPath), "utf-8");
+    current = (0, import_node_fs28.readFileSync)(projectPath(repoRelPath), "utf-8");
   } catch {
     return pre.existed;
   }
@@ -22496,8 +22616,8 @@ function changedSinceBaseline(repoRelPath, baseline) {
 }
 function safeReadForMirror(absPath) {
   try {
-    if ((0, import_node_fs27.statSync)(absPath).size > MIRROR_MAX_BYTES) return null;
-    const buf = (0, import_node_fs27.readFileSync)(absPath);
+    if ((0, import_node_fs28.statSync)(absPath).size > MIRROR_MAX_BYTES) return null;
+    const buf = (0, import_node_fs28.readFileSync)(absPath);
     if (buf.includes(0)) return null;
     return buf.toString("utf-8");
   } catch {
@@ -22508,18 +22628,18 @@ function pruneOldBaselines() {
   const root = projectPath(BASELINE_DIR);
   let entries;
   try {
-    entries = (0, import_node_fs27.readdirSync)(root);
+    entries = (0, import_node_fs28.readdirSync)(root);
   } catch {
     return;
   }
   const now = Date.now();
   for (const name2 of entries) {
-    const dir = (0, import_node_path24.join)(root, name2);
+    const dir = (0, import_node_path25.join)(root, name2);
     const manifest = readManifest(dir);
     if (!manifest) {
       try {
-        if (now - (0, import_node_fs27.statSync)(dir).mtimeMs > BASELINE_TTL_MS) {
-          (0, import_node_fs27.rmSync)(dir, { recursive: true, force: true });
+        if (now - (0, import_node_fs28.statSync)(dir).mtimeMs > BASELINE_TTL_MS) {
+          (0, import_node_fs28.rmSync)(dir, { recursive: true, force: true });
         }
       } catch {
       }
@@ -22527,7 +22647,7 @@ function pruneOldBaselines() {
     }
     if (now - manifest.captured_at <= BASELINE_TTL_MS) continue;
     try {
-      (0, import_node_fs27.rmSync)(dir, { recursive: true, force: true });
+      (0, import_node_fs28.rmSync)(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -22702,8 +22822,8 @@ function buildCompactionContext(session) {
     commitsSince: commitsSincePaths(watermark, (state.authored ?? []).map((a) => a.path)),
     readFileLines: (file) => {
       try {
-        const abs = (0, import_node_path25.join)(root, file);
-        return (0, import_node_fs28.existsSync)(abs) ? (0, import_node_fs28.readFileSync)(abs, "utf8").split("\n") : null;
+        const abs = (0, import_node_path26.join)(root, file);
+        return (0, import_node_fs29.existsSync)(abs) ? (0, import_node_fs29.readFileSync)(abs, "utf8").split("\n") : null;
       } catch {
         return null;
       }
@@ -22760,24 +22880,24 @@ async function readHookStdin() {
 // src/commands/standard.ts
 var import_promises13 = require("node:fs/promises");
-var import_node_fs35 = require("node:fs");
+var import_node_fs36 = require("node:fs");
 var import_yaml3 = __toESM2(require_dist());
 // src/lib/synthesize.ts
-var import_node_child_process9 = require("node:child_process");
-var import_node_fs31 = require("node:fs");
+var import_node_child_process10 = require("node:child_process");
+var import_node_fs32 = require("node:fs");
 var import_promises10 = require("node:fs/promises");
-var import_node_path28 = require("node:path");
+var import_node_path29 = require("node:path");
 var import_yaml = __toESM2(require_dist());
 // src/lib/data-dir.ts
-var import_node_fs29 = require("node:fs");
-var import_node_path26 = require("node:path");
+var import_node_fs30 = require("node:fs");
+var import_node_path27 = require("node:path");
 function resolveDataDir() {
   const candidates2 = [
-    (0, import_node_path26.join)(__dirname, "..", "data"),
+    (0, import_node_path27.join)(__dirname, "..", "data"),
     // installed: node_modules/@codacy/verity-cli/data
-    (0, import_node_path26.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path27.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
     // THE COMMITTED SOURCE, for a source checkout that has not been built.
     // cli/data/skills/ is a BUILD ARTIFACT (scripts/build.js copies client/skills
@@ -22786,14 +22906,14 @@ function resolveDataDir() {
     // without this the synthesizer throws "Could not find Verity skill data"
     // for every test and every `verity` run from source. Resolved from this
     // module's own location, never the cwd: see the warning below.
-    (0, import_node_path26.join)(__dirname, "..", "..", "client"),
+    (0, import_node_path27.join)(__dirname, "..", "..", "client"),
     // bundled: cli/bin/ → ../../client
-    (0, import_node_path26.join)(__dirname, "..", "..", "..", "client"),
+    (0, import_node_path27.join)(__dirname, "..", "..", "..", "client"),
     // tsx: cli/src/lib/ → ../../../client
     ...process.env.VERITY_DEV_DATA_DIR ? [process.env.VERITY_DEV_DATA_DIR] : []
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs29.existsSync)((0, import_node_path26.join)(candidate, "skills"))) {
+    if ((0, import_node_fs30.existsSync)((0, import_node_path27.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -22802,13 +22922,13 @@ function resolveDataDir() {
   );
 }
 function setupDataPath(file) {
-  return (0, import_node_path26.join)(resolveDataDir(), "skills", "verity-setup", file);
+  return (0, import_node_path27.join)(resolveDataDir(), "skills", "verity-setup", file);
 }
 // src/lib/detect.ts
-var import_node_child_process8 = require("node:child_process");
-var import_node_fs30 = require("node:fs");
-var import_node_path27 = require("node:path");
+var import_node_child_process9 = require("node:child_process");
+var import_node_fs31 = require("node:fs");
+var import_node_path28 = require("node:path");
 var TOOLED_LANGUAGES = /* @__PURE__ */ new Set([
   "typescript",
   "javascript",
@@ -22845,7 +22965,7 @@ function isIgnored2(path) {
 }
 function listProjectFiles(root) {
   try {
-    const out2 = (0, import_node_child_process8.execSync)("git ls-files -z", {
+    const out2 = (0, import_node_child_process9.execSync)("git ls-files -z", {
       cwd: root,
       encoding: "utf-8",
       maxBuffer: 32 * 1024 * 1024,
@@ -22865,25 +22985,25 @@ function walk(root) {
     if (depth > WALK_MAX_DEPTH || found.length >= WALK_MAX_FILES) return;
     let entries;
     try {
-      entries = (0, import_node_fs30.readdirSync)(dir, { withFileTypes: true });
+      entries = (0, import_node_fs31.readdirSync)(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
       if (found.length >= WALK_MAX_FILES) return;
       if (IGNORED_SEGMENTS.includes(entry.name)) continue;
-      const full = (0, import_node_path27.join)(dir, entry.name);
+      const full = (0, import_node_path28.join)(dir, entry.name);
       if (entry.isDirectory()) visit(full, depth + 1);
-      else if (entry.isFile()) found.push((0, import_node_path27.relative)(root, full));
+      else if (entry.isFile()) found.push((0, import_node_path28.relative)(root, full));
     }
   };
   visit(root, 0);
   return found;
 }
 function languageOf(path) {
-  const name2 = (0, import_node_path27.basename)(path);
+  const name2 = (0, import_node_path28.basename)(path);
   if (/^Dockerfile(\..+)?$/i.test(name2)) return "dockerfile";
-  if (!(0, import_node_path27.extname)(name2)) return null;
+  if (!(0, import_node_path28.extname)(name2)) return null;
   const lang = detectLanguage(path);
   return lang || null;
 }
@@ -22940,7 +23060,7 @@ var TOOL_CONFIG_MARKERS = [
 ];
 function readJson2(path) {
   try {
-    return JSON.parse((0, import_node_fs30.readFileSync)(path, "utf-8"));
+    return JSON.parse((0, import_node_fs31.readFileSync)(path, "utf-8"));
   } catch {
     return null;
   }
@@ -22965,17 +23085,17 @@ function declaredDependencies(root, files) {
       if (deps && typeof deps === "object") names2.push(...Object.keys(deps));
     }
   };
-  readPackageJson((0, import_node_path27.join)(root, "package.json"));
-  const nested = files.filter((f) => f.includes("/") && (0, import_node_path27.basename)(f) === "package.json").slice(0, NESTED_MANIFEST_LIMIT);
-  for (const rel of nested) readPackageJson((0, import_node_path27.join)(root, rel));
+  readPackageJson((0, import_node_path28.join)(root, "package.json"));
+  const nested = files.filter((f) => f.includes("/") && (0, import_node_path28.basename)(f) === "package.json").slice(0, NESTED_MANIFEST_LIMIT);
+  for (const rel of nested) readPackageJson((0, import_node_path28.join)(root, rel));
   const pythonManifests = [
-    ...["pyproject.toml", "requirements.txt", "Pipfile", "setup.py"].map((f) => (0, import_node_path27.join)(root, f)),
-    ...files.filter((f) => f.includes("/") && /(^|\/)(pyproject\.toml|requirements\.txt)$/.test(f)).slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path27.join)(root, f))
+    ...["pyproject.toml", "requirements.txt", "Pipfile", "setup.py"].map((f) => (0, import_node_path28.join)(root, f)),
+    ...files.filter((f) => f.includes("/") && /(^|\/)(pyproject\.toml|requirements\.txt)$/.test(f)).slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path28.join)(root, f))
   ];
   for (const path of pythonManifests) {
-    if (!(0, import_node_fs30.existsSync)(path)) continue;
+    if (!(0, import_node_fs31.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs30.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs31.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/^\s*["']?([A-Za-z][A-Za-z0-9._-]+)/gm)) names2.push(m[1]);
       for (const line2 of text.split("\n")) {
         if (!/dependencies\s*=/.test(line2)) continue;
@@ -22985,13 +23105,13 @@ function declaredDependencies(root, files) {
     }
   }
   const goMods = [
-    (0, import_node_path27.join)(root, "go.mod"),
-    ...files.filter((f) => f.includes("/") && (0, import_node_path27.basename)(f) === "go.mod").slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path27.join)(root, f))
+    (0, import_node_path28.join)(root, "go.mod"),
+    ...files.filter((f) => f.includes("/") && (0, import_node_path28.basename)(f) === "go.mod").slice(0, NESTED_MANIFEST_LIMIT).map((f) => (0, import_node_path28.join)(root, f))
   ];
   for (const path of goMods) {
-    if (!(0, import_node_fs30.existsSync)(path)) continue;
+    if (!(0, import_node_fs31.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs30.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs31.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/^\s+([\w.-]+\/[\w./-]+)\s+v/gm)) {
         names2.push(m[1].replace(/^github\.com\//, ""));
       }
@@ -22999,10 +23119,10 @@ function declaredDependencies(root, files) {
     }
   }
   for (const file of ["pom.xml", "build.gradle", "build.gradle.kts", "Gemfile", "Cargo.toml"]) {
-    const path = (0, import_node_path27.join)(root, file);
-    if (!(0, import_node_fs30.existsSync)(path)) continue;
+    const path = (0, import_node_path28.join)(root, file);
+    if (!(0, import_node_fs31.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs30.readFileSync)(path, "utf-8");
+      const text = (0, import_node_fs31.readFileSync)(path, "utf-8");
       for (const m of text.matchAll(/["'<]([A-Za-z][A-Za-z0-9._-]{2,})["'>]/g)) names2.push(m[1]);
     } catch {
     }
@@ -23010,7 +23130,7 @@ function declaredDependencies(root, files) {
   return names2;
 }
 function detectBuildSystem(root, files) {
-  const has = (f) => (0, import_node_fs30.existsSync)((0, import_node_path27.join)(root, f)) || files.some((p) => (0, import_node_path27.basename)(p) === f);
+  const has = (f) => (0, import_node_fs31.existsSync)((0, import_node_path28.join)(root, f)) || files.some((p) => (0, import_node_path28.basename)(p) === f);
   if (has("pnpm-lock.yaml")) return "pnpm";
   if (has("yarn.lock")) return "yarn";
   if (has("bun.lock") || has("bun.lockb")) return "bun";
@@ -23027,8 +23147,8 @@ function detectBuildSystem(root, files) {
 }
 function detectArchitecture(root, files) {
   const workspaceMarkers = ["lerna.json", "pnpm-workspace.yaml", "nx.json", "turbo.json", "rush.json"];
-  if (workspaceMarkers.some((m) => (0, import_node_fs30.existsSync)((0, import_node_path27.join)(root, m)))) return "monorepo";
-  const pkg = readJson2((0, import_node_path27.join)(root, "package.json"));
+  if (workspaceMarkers.some((m) => (0, import_node_fs31.existsSync)((0, import_node_path28.join)(root, m)))) return "monorepo";
+  const pkg = readJson2((0, import_node_path28.join)(root, "package.json"));
   if (pkg && "workspaces" in pkg) return "monorepo";
   const manifests = files.filter((f) => /(^|\/)(package\.json|go\.mod|pyproject\.toml|Cargo\.toml|pom\.xml)$/.test(f));
   const nested = manifests.filter((f) => f.includes("/"));
@@ -23050,10 +23170,10 @@ function measureAvgFileLength(root, files, languages) {
   let total = 0;
   let counted = 0;
   for (let i2 = 0; i2 < candidates2.length; i2 += stride) {
-    const path = (0, import_node_path27.join)(root, candidates2[i2]);
+    const path = (0, import_node_path28.join)(root, candidates2[i2]);
     try {
-      if ((0, import_node_fs30.statSync)(path).size > 2 * 1024 * 1024) continue;
-      total += (0, import_node_fs30.readFileSync)(path, "utf-8").split("\n").length;
+      if ((0, import_node_fs31.statSync)(path).size > 2 * 1024 * 1024) continue;
+      total += (0, import_node_fs31.readFileSync)(path, "utf-8").split("\n").length;
       counted++;
     } catch {
     }
@@ -23083,14 +23203,14 @@ function detectProject(root = repoRoot()) {
   const existingToolConfigs = [];
   for (const [tool, markers] of TOOL_CONFIG_MARKERS) {
     for (const marker of markers) {
-      if ((0, import_node_fs30.existsSync)((0, import_node_path27.join)(root, marker))) {
+      if ((0, import_node_fs31.existsSync)((0, import_node_path28.join)(root, marker))) {
         existingToolConfigs.push({ tool, path: `./${marker}` });
         break;
       }
     }
   }
   return {
-    projectName: (0, import_node_path27.basename)(root),
+    projectName: (0, import_node_path28.basename)(root),
     languages,
     languageCounts,
     frameworks: matchAll(dependencies, FRAMEWORK_BY_DEPENDENCY),
@@ -23188,8 +23308,8 @@ ${closingNote(input.origin)}
 // src/lib/synthesize.ts
 function loadCatalog() {
-  const catalog = (0, import_yaml.parse)((0, import_node_fs31.readFileSync)(setupDataPath("patterns-reference.yaml"), "utf-8"));
-  const template = (0, import_yaml.parse)((0, import_node_fs31.readFileSync)(setupDataPath("standard-template.yaml"), "utf-8"));
+  const catalog = (0, import_yaml.parse)((0, import_node_fs32.readFileSync)(setupDataPath("patterns-reference.yaml"), "utf-8"));
+  const template = (0, import_yaml.parse)((0, import_node_fs32.readFileSync)(setupDataPath("standard-template.yaml"), "utf-8"));
   return { catalog, template };
 }
 function selectTools(languages, intensity, catalog) {
@@ -23240,7 +23360,7 @@ var TRIVY_BY_INTENSITY = {
 };
 function adapterPatternIds(toolId) {
   try {
-    const out2 = (0, import_node_child_process9.execFileSync)(
+    const out2 = (0, import_node_child_process10.execFileSync)(
       process.execPath,
       [setupDataPath("validate-patterns.mjs"), "--list", toolId],
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 3e4 }
@@ -23270,7 +23390,7 @@ function resolvePatternId(toolId, curatedId, adapterIds) {
 }
 function trivyPatterns(intensity) {
   try {
-    const out2 = (0, import_node_child_process9.execFileSync)(
+    const out2 = (0, import_node_child_process10.execFileSync)(
       process.execPath,
       [setupDataPath("validate-patterns.mjs"), "--emit", "Trivy", TRIVY_BY_INTENSITY[intensity].emit],
       { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"], timeout: 3e4 }
@@ -23450,7 +23570,7 @@ export default tseslint.config(
 function validatePatternIds() {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   try {
-    (0, import_node_child_process9.execFileSync)(process.execPath, [setupDataPath("validate-patterns.mjs"), configPath], {
+    (0, import_node_child_process10.execFileSync)(process.execPath, [setupDataPath("validate-patterns.mjs"), configPath], {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"],
       timeout: 6e4
@@ -23467,7 +23587,7 @@ function validatePatternIds() {
 }
 async function runSynthesis(opts) {
   const standardPath = projectPath(STANDARD_FILE);
-  if ((0, import_node_fs31.existsSync)(standardPath) && !opts.force) {
+  if ((0, import_node_fs32.existsSync)(standardPath) && !opts.force) {
     return { refused: `${STANDARD_FILE} already exists \u2014 pass --force to replace it.` };
   }
   const detected = opts.detected ?? detectProject();
@@ -23536,7 +23656,7 @@ async function correctVerityMdVersion(opts) {
 }
 async function writeFileTo(relative6, body2) {
   const target = projectPath(relative6);
-  await (0, import_promises10.mkdir)((0, import_node_path28.dirname)(target), { recursive: true });
+  await (0, import_promises10.mkdir)((0, import_node_path29.dirname)(target), { recursive: true });
   await (0, import_promises10.writeFile)(target, body2);
 }
 async function deriveConfigForStandard(standard) {
@@ -23595,11 +23715,11 @@ ${validation.detail}`);
 // src/lib/setup-state.ts
 var import_promises11 = require("node:fs/promises");
-var import_node_fs32 = require("node:fs");
+var import_node_fs33 = require("node:fs");
 var SETUP_STATE_FILE = `${VERITY_DIR}/setup.json`;
 async function readSetupState() {
   const path = projectPath(SETUP_STATE_FILE);
-  if (!(0, import_node_fs32.existsSync)(path)) return null;
+  if (!(0, import_node_fs33.existsSync)(path)) return null;
   try {
     const parsed = JSON.parse(await (0, import_promises11.readFile)(path, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : null;
@@ -23615,12 +23735,12 @@ async function writeSetupState(patch) {
 }
 // src/lib/push-setup.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_promises12 = require("node:fs/promises");
 var import_yaml2 = __toESM2(require_dist());
 // src/lib/verityignore.ts
-var import_node_fs33 = require("node:fs");
+var import_node_fs34 = require("node:fs");
 var EMPTY = { rules: [], securityOverlap: [], problems: [] };
 var SECURITY_PROBES = [
   ".env",
@@ -23713,9 +23833,9 @@ function isIgnored3(ig, path) {
 }
 function loadVerityIgnore() {
   const file = projectPath(VERITYIGNORE_FILE);
-  if (!(0, import_node_fs33.existsSync)(file)) return EMPTY;
+  if (!(0, import_node_fs34.existsSync)(file)) return EMPTY;
   try {
-    return parseVerityIgnore((0, import_node_fs33.readFileSync)(file, "utf-8"));
+    return parseVerityIgnore((0, import_node_fs34.readFileSync)(file, "utf-8"));
   } catch {
     return EMPTY;
   }
@@ -23753,9 +23873,9 @@ function buildStandardUpload(standard, ignoreRaw) {
 }
 function readVerityIgnoreRaw() {
   const file = projectPath(VERITYIGNORE_FILE);
-  if (!(0, import_node_fs33.existsSync)(file)) return null;
+  if (!(0, import_node_fs34.existsSync)(file)) return null;
   try {
-    return (0, import_node_fs33.readFileSync)(file, "utf-8");
+    return (0, import_node_fs34.readFileSync)(file, "utf-8");
   } catch {
     return null;
   }
@@ -23783,7 +23903,7 @@ async function pushStandardAndConfig(globals, what = {}) {
   }
   let standardVersion = null;
   const standardPath = projectPath(STANDARD_FILE);
-  if (pushStandard && (0, import_node_fs34.existsSync)(standardPath)) {
+  if (pushStandard && (0, import_node_fs35.existsSync)(standardPath)) {
     try {
       const content = (0, import_yaml2.parse)(await (0, import_promises12.readFile)(standardPath, "utf-8"));
       const upload = buildStandardUpload(content, readVerityIgnoreRaw());
@@ -23808,7 +23928,7 @@ async function pushStandardAndConfig(globals, what = {}) {
   }
   let configPushed = false;
   const configPath = projectPath(CODACY_CONFIG_FILE);
-  if (pushConfig && (0, import_node_fs34.existsSync)(configPath)) {
+  if (pushConfig && (0, import_node_fs35.existsSync)(configPath)) {
     try {
       const content = JSON.parse(await (0, import_promises12.readFile)(configPath, "utf-8"));
       const result = await apiRequest({
@@ -23840,7 +23960,7 @@ function registerStandardCommands(program2) {
     const state = await readSetupState();
     if (opts.configOnly) {
       const standardPath = projectPath(STANDARD_FILE);
-      if (!(0, import_node_fs35.existsSync)(standardPath)) {
+      if (!(0, import_node_fs36.existsSync)(standardPath)) {
         printError(`No ${STANDARD_FILE} here \u2014 run "verity standard synthesize" to create one.`);
         process.exit(1);
       }
@@ -24031,14 +24151,21 @@ function registerConfigCommands(program2) {
   });
   config.command("formal [state]").description('Get or set formal verification at push: "push" or "off" (needs Lean \u2014 verity lean status)').action((state) => {
     if (state === void 0) {
-      process.stdout.write((readProjectConfig().formal ?? "off") + "\n");
+      const cfg = readProjectConfig();
+      process.stdout.write((cfg.formal === "push" ? "push" : "off") + "\n");
+      if (cfg.formal_refused) printWarn(formalRefusalMessage(cfg.formal_refused));
       return;
     }
     if (state !== "push" && state !== "off") {
       printError(`Unrecognised state: ${state}. Use "push" or "off".`);
       process.exit(1);
     }
-    writeProjectConfig({ formal: state === "push" ? "push" : void 0 });
+    writeProjectConfig({ formal: state === "push" ? "push" : "off" });
+    const refused2 = state === "push" ? readProjectConfig().formal_refused : void 0;
+    if (refused2) {
+      printWarn(`Formal verification at push: still off \u2014 ${formalRefusalMessage(refused2)}`);
+      return;
+    }
     printInfo(state === "push" ? "Formal verification at push: on for this checkout (Lean must be installed \u2014 verity lean status)" : "Formal verification at push: off");
     if (state === "push") printInfo("The phase runs with your Verity login (a push without one is skipped and says so: not-logged-in)");
   });
@@ -24186,10 +24313,10 @@ function formatRunDetail(run4) {
 }
 // src/lib/ignore-declaration.ts
-var import_node_fs37 = require("node:fs");
+var import_node_fs38 = require("node:fs");
 // src/lib/debounce.ts
-var import_node_fs36 = require("node:fs");
+var import_node_fs37 = require("node:fs");
 var import_node_crypto11 = require("node:crypto");
 function scopedFile(base, sessionId) {
   if (!sessionId) return base;
@@ -24197,9 +24324,9 @@ function scopedFile(base, sessionId) {
 }
 function checkDebounce(debounceSeconds = DEBOUNCE_SECONDS, sessionId) {
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs36.existsSync)(file)) return null;
+  if (!(0, import_node_fs37.existsSync)(file)) return null;
   try {
-    const lastTs = parseInt((0, import_node_fs36.readFileSync)(file, "utf-8").trim(), 10);
+    const lastTs = parseInt((0, import_node_fs37.readFileSync)(file, "utf-8").trim(), 10);
     const nowTs = Math.floor(Date.now() / 1e3);
     const elapsed = nowTs - lastTs;
     if (elapsed < debounceSeconds) {
@@ -24212,10 +24339,10 @@ function checkDebounce(debounceSeconds = DEBOUNCE_SECONDS, sessionId) {
 function checkMtime(files, bypassForRecentCommits, sessionId) {
   if (bypassForRecentCommits) return null;
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs36.existsSync)(file)) return null;
+  if (!(0, import_node_fs37.existsSync)(file)) return null;
   let debounceTime;
   try {
-    debounceTime = (0, import_node_fs36.statSync)(file).mtimeMs;
+    debounceTime = (0, import_node_fs37.statSync)(file).mtimeMs;
   } catch {
     return null;
   }
@@ -24223,7 +24350,7 @@ function checkMtime(files, bypassForRecentCommits, sessionId) {
     const resolved = resolveFile(f);
     if (!resolved) continue;
     try {
-      const stat3 = (0, import_node_fs36.statSync)(resolved);
+      const stat3 = (0, import_node_fs37.statSync)(resolved);
       if (stat3.mtimeMs > debounceTime) {
         return null;
       }
@@ -24239,8 +24366,8 @@ function computeContentHash(files) {
   for (const f of sorted) {
     const resolved = resolveFile(f) ?? f;
     try {
-      if ((0, import_node_fs36.existsSync)(resolved)) {
-        hash.update((0, import_node_fs36.readFileSync)(resolved));
+      if ((0, import_node_fs37.existsSync)(resolved)) {
+        hash.update((0, import_node_fs37.readFileSync)(resolved));
       }
     } catch {
     }
@@ -24250,9 +24377,9 @@ function computeContentHash(files) {
 function checkContentHash(files, sessionId) {
   const hash = computeContentHash(files);
   const file = scopedFile(HASH_FILE, sessionId);
-  if ((0, import_node_fs36.existsSync)(file)) {
+  if ((0, import_node_fs37.existsSync)(file)) {
     try {
-      const storedHash = (0, import_node_fs36.readFileSync)(file, "utf-8").trim();
+      const storedHash = (0, import_node_fs37.readFileSync)(file, "utf-8").trim();
       if (hash === storedHash) {
         return { skip: "No source changes since last analysis", hash };
       }
@@ -24262,24 +24389,24 @@ function checkContentHash(files, sessionId) {
   return { skip: null, hash };
 }
 function recordAnalysisStart(sessionId) {
-  (0, import_node_fs36.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs36.writeFileSync)(scopedFile(DEBOUNCE_FILE, sessionId), String(Math.floor(Date.now() / 1e3)));
+  (0, import_node_fs37.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs37.writeFileSync)(scopedFile(DEBOUNCE_FILE, sessionId), String(Math.floor(Date.now() / 1e3)));
 }
 function recordPassHash(hash, sessionId) {
-  (0, import_node_fs36.writeFileSync)(scopedFile(HASH_FILE, sessionId), hash);
+  (0, import_node_fs37.writeFileSync)(scopedFile(HASH_FILE, sessionId), hash);
 }
 function narrowToRecent(files, sessionId) {
   const file = scopedFile(DEBOUNCE_FILE, sessionId);
-  if (!(0, import_node_fs36.existsSync)(file)) return files;
+  if (!(0, import_node_fs37.existsSync)(file)) return files;
   let debounceTime;
   try {
-    debounceTime = (0, import_node_fs36.statSync)(file).mtimeMs;
+    debounceTime = (0, import_node_fs37.statSync)(file).mtimeMs;
   } catch {
     return files;
   }
   const recent = files.filter((f) => {
     try {
-      return (0, import_node_fs36.existsSync)(f) && (0, import_node_fs36.statSync)(f).mtimeMs > debounceTime;
+      return (0, import_node_fs37.existsSync)(f) && (0, import_node_fs37.statSync)(f).mtimeMs > debounceTime;
     } catch {
       return false;
     }
@@ -24292,9 +24419,9 @@ function readIteration(currentCommit, _contentHash) {
 var NO_BLOCKS = { attempts: 0, blocks: 0, fingerprint: null };
 function readBlockState(currentCommit, opts) {
   if (opts?.newUserPrompt) return NO_BLOCKS;
-  if (!(0, import_node_fs36.existsSync)(ITERATION_FILE)) return NO_BLOCKS;
+  if (!(0, import_node_fs37.existsSync)(ITERATION_FILE)) return NO_BLOCKS;
   try {
-    const stored = (0, import_node_fs36.readFileSync)(ITERATION_FILE, "utf-8").trim();
+    const stored = (0, import_node_fs37.readFileSync)(ITERATION_FILE, "utf-8").trim();
     const parsed = stored.startsWith("{") ? parseJsonState(stored) : parseLegacyState(stored);
     if (!parsed) return NO_BLOCKS;
     if (parsed.commit !== currentCommit) return NO_BLOCKS;
@@ -24340,8 +24467,8 @@ function isSameProblem(previous, current) {
   return current.split(",").some((k) => prev.has(k));
 }
 function writeBlockState(commit, state) {
-  (0, import_node_fs36.mkdirSync)(VERITY_DIR, { recursive: true });
-  (0, import_node_fs36.writeFileSync)(
+  (0, import_node_fs37.mkdirSync)(VERITY_DIR, { recursive: true });
+  (0, import_node_fs37.writeFileSync)(
     ITERATION_FILE,
     JSON.stringify({
       v: 2,
@@ -24446,9 +24573,9 @@ function resolveIgnoreState(keys) {
 }
 function readIgnoreState(sessionId) {
   const file = stateFile(sessionId);
-  if (!(0, import_node_fs37.existsSync)(file)) return null;
+  if (!(0, import_node_fs38.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs37.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs38.readFileSync)(file, "utf-8")) ?? {};
     const spent = typeof o.spent === "number" ? o.spent : 0;
     const raw = o.active;
     let active = null;
@@ -24472,8 +24599,8 @@ function readIgnoreState(sessionId) {
 }
 function writeIgnoreState(state, sessionId) {
   try {
-    (0, import_node_fs37.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
-    (0, import_node_fs37.writeFileSync)(stateFile(sessionId), JSON.stringify({ v: 1, active: state.active, spent: state.spent }));
+    (0, import_node_fs38.mkdirSync)(projectPath(VERITY_DIR), { recursive: true });
+    (0, import_node_fs38.writeFileSync)(stateFile(sessionId), JSON.stringify({ v: 1, active: state.active, spent: state.spent }));
   } catch {
   }
 }
@@ -24856,85 +24983,10 @@ function createRun(opts, globals) {
 }
 // src/commands/analyze/index.ts
-var import_node_fs51 = require("node:fs");
+var import_node_fs52 = require("node:fs");
 // src/lib/repo-context.ts
 var import_node_child_process11 = require("node:child_process");
-// src/lib/hardened-git.ts
-var import_node_child_process10 = require("node:child_process");
-var HARDENED_CONFIG_ARGS = [
-  "-c",
-  "core.fsmonitor=false",
-  "-c",
-  "core.pager=cat",
-  "-c",
-  "log.showSignature=false"
-];
-var DIFF_READ_FLAGS = ["--no-ext-diff", "--no-textconv"];
-var DEFAULT_GIT_TIMEOUT_MS = 6e4;
-var DEFAULT_GIT_MAX_BUFFER = 64 * 1024 * 1024;
-function hardenedGitEnv(base = process.env) {
-  const env = {};
-  for (const [key, value] of Object.entries(base)) {
-    if (key.startsWith("GIT_")) continue;
-    env[key] = value;
-  }
-  env.GIT_OPTIONAL_LOCKS = "0";
-  env.GIT_TERMINAL_PROMPT = "0";
-  return env;
-}
-function hardenedGitArgv(args2) {
-  return [...HARDENED_CONFIG_ARGS, ...args2];
-}
-function classifyError(err2) {
-  const e = err2;
-  const stderr = typeof e?.stderr === "string" ? e.stderr : e?.stderr ? e.stderr.toString("utf-8") : "";
-  if (e?.code === "ETIMEDOUT" || e?.killed && e?.signal === "SIGTERM") return { ok: false, error: "timeout", stderr };
-  if (e?.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") return { ok: false, error: "too_large", stderr };
-  return { ok: false, error: "failed", stderr };
-}
-function runGitSync(cwd, args2, opts = {}) {
-  try {
-    const stdout = (0, import_node_child_process10.execFileSync)("git", hardenedGitArgv(args2), {
-      cwd,
-      env: hardenedGitEnv(),
-      encoding: "utf-8",
-      stdio: ["ignore", "pipe", "pipe"],
-      timeout: opts.timeoutMs ?? DEFAULT_GIT_TIMEOUT_MS,
-      maxBuffer: opts.maxBuffer ?? DEFAULT_GIT_MAX_BUFFER
-    });
-    return { ok: true, stdout };
-  } catch (err2) {
-    return classifyError(err2);
-  }
-}
-function runGit(cwd, args2, opts = {}) {
-  return new Promise((resolvePromise) => {
-    (0, import_node_child_process10.execFile)(
-      "git",
-      hardenedGitArgv(args2),
-      {
-        cwd,
-        env: hardenedGitEnv(),
-        encoding: "utf-8",
-        timeout: opts.timeoutMs ?? DEFAULT_GIT_TIMEOUT_MS,
-        maxBuffer: opts.maxBuffer ?? DEFAULT_GIT_MAX_BUFFER
-      },
-      (err2, stdout, stderr) => {
-        if (err2) {
-          const e = err2;
-          e.stderr = stderr;
-          resolvePromise(classifyError(e));
-          return;
-        }
-        resolvePromise({ ok: true, stdout });
-      }
-    );
-  });
-}
-// src/lib/repo-context.ts
 var import_node_os5 = require("node:os");
 function rgInvocations(env = process.env) {
   const out2 = [{ cmd: "rg" }];
@@ -25895,10 +25947,10 @@ function installRunEvidence(run4) {
 }
 // src/lib/git-frame.ts
-var import_node_fs38 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_os6 = require("node:os");
-var import_node_path29 = require("node:path");
 var import_node_path30 = require("node:path");
+var import_node_path31 = require("node:path");
 var VALUE_TOKEN = `(?:'[^']*'|"[^"]*"|\\S+)`;
 var GIT_GLOBAL_OPTS = `(?:\\s+(?:-[Cc]\\s+${VALUE_TOKEN}|--?[\\w-]+(?:=\\S+)?))*`;
 var COMMIT_HEAD = `git${GIT_GLOBAL_OPTS}\\s+commit(?![\\w-])`;
@@ -25985,8 +26037,8 @@ function extractCommandTarget(command, segmentIndex, baseDir) {
     if (SHELL_DYNAMIC.test(raw) || raw === "-") {
       return { dir: null, named: true, unresolvable: `cd target not statically resolvable: ${raw}` };
     }
-    const expanded = raw === "~" ? (0, import_node_os6.homedir)() : raw.startsWith("~/") ? (0, import_node_path30.join)((0, import_node_os6.homedir)(), raw.slice(2)) : raw;
-    dir = (0, import_node_path29.isAbsolute)(expanded) ? expanded : (0, import_node_path29.resolve)(dir, expanded);
+    const expanded = raw === "~" ? (0, import_node_os6.homedir)() : raw.startsWith("~/") ? (0, import_node_path31.join)((0, import_node_os6.homedir)(), raw.slice(2)) : raw;
+    dir = (0, import_node_path30.isAbsolute)(expanded) ? expanded : (0, import_node_path30.resolve)(dir, expanded);
   }
   const seg = segments[segmentIndex];
   const overrideMatch = /--(?:git-dir|work-tree)(?:=|\s)|\bGIT_(?:DIR|WORK_TREE|INDEX_FILE)=/.exec(seg);
@@ -26004,8 +26056,8 @@ function extractCommandTarget(command, segmentIndex, baseDir) {
       if (SHELL_DYNAMIC.test(raw)) {
         return { dir: null, named: true, unresolvable: `-C target not statically resolvable: ${raw}` };
       }
-      const expanded = raw === "~" ? (0, import_node_os6.homedir)() : raw.startsWith("~/") ? (0, import_node_path30.join)((0, import_node_os6.homedir)(), raw.slice(2)) : raw;
-      dir = (0, import_node_path29.isAbsolute)(expanded) ? expanded : (0, import_node_path29.resolve)(dir, expanded);
+      const expanded = raw === "~" ? (0, import_node_os6.homedir)() : raw.startsWith("~/") ? (0, import_node_path31.join)((0, import_node_os6.homedir)(), raw.slice(2)) : raw;
+      dir = (0, import_node_path30.isAbsolute)(expanded) ? expanded : (0, import_node_path30.resolve)(dir, expanded);
     }
   }
   return { dir, named, unresolvable: null };
@@ -26065,14 +26117,14 @@ function gitAt(dir, args2) {
 }
 function realpathOr2(p) {
   try {
-    return import_node_fs38.realpathSync.native(p);
+    return import_node_fs39.realpathSync.native(p);
   } catch {
-    return (0, import_node_path29.resolve)(p);
+    return (0, import_node_path30.resolve)(p);
   }
 }
 function resolveFrame(input) {
   const found = findMomentSegment(input.command, input.on);
-  const hookDirUsable = !!input.hookCwd && (0, import_node_fs38.existsSync)(input.hookCwd);
+  const hookDirUsable = !!input.hookCwd && (0, import_node_fs39.existsSync)(input.hookCwd);
   const baseDir = hookDirUsable ? input.hookCwd : process.cwd();
   let anchor = hookDirUsable ? "hook-cwd" : "process-cwd";
   const refuse = (refusal) => ({
@@ -26095,7 +26147,7 @@ function resolveFrame(input) {
     if (dirs.size > 1) return refuse(`target:multiple ${found.moment} targets in one command`);
     const targetDir = dirs.size === 1 ? [...dirs][0] : baseDir;
     if (targetDir !== baseDir) {
-      if (!(0, import_node_fs38.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
+      if (!(0, import_node_fs39.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
       dir = targetDir;
     }
   }
@@ -26106,7 +26158,7 @@ function resolveFrame(input) {
   const gitDirRaw = gitAt(dir, ["rev-parse", "--absolute-git-dir"]);
   const commonRaw = gitAt(dir, ["rev-parse", "--git-common-dir"]);
   const gitDir = gitDirRaw ? realpathOr2(gitDirRaw) : null;
-  const commonDir = commonRaw ? realpathOr2((0, import_node_path29.isAbsolute)(commonRaw) ? commonRaw : (0, import_node_path29.resolve)(dir, commonRaw)) : null;
+  const commonDir = commonRaw ? realpathOr2((0, import_node_path30.isAbsolute)(commonRaw) ? commonRaw : (0, import_node_path30.resolve)(dir, commonRaw)) : null;
   const branchRaw = gitAt(dir, ["rev-parse", "--abbrev-ref", "HEAD"]);
   return {
     moment: found?.moment ?? null,
@@ -26281,8 +26333,8 @@ function stagedRange(frame, command) {
   if (plan.kind === "unpredictable") {
     return { kind: "staged", base: "HEAD", head: "INDEX", via: "staged-in-command", refusal: plan.reason };
   }
-  const mergeHead = frame.gitDir ? (0, import_node_path30.join)(frame.gitDir, "MERGE_HEAD") : null;
-  if (mergeHead && (0, import_node_fs38.existsSync)(mergeHead)) {
+  const mergeHead = frame.gitDir ? (0, import_node_path31.join)(frame.gitDir, "MERGE_HEAD") : null;
+  if (mergeHead && (0, import_node_fs39.existsSync)(mergeHead)) {
     const vsHead = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "HEAD"]).split("\n").filter(Boolean));
     const vsMerge = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "MERGE_HEAD"]).split("\n").filter(Boolean));
     const resolutions = new Set([...vsHead].filter((f) => vsMerge.has(f) && !isVerityOwnedPath(f)));
@@ -26416,7 +26468,7 @@ function truthy(v) {
 }
 // src/lib/transcript.ts
-var import_node_fs39 = require("node:fs");
+var import_node_fs40 = require("node:fs");
 var MAX_READ_BYTES = 256 * 1024;
 var SMALL_FILE_BYTES = 64 * 1024;
 var MAX_FILES_LIST = 20;
@@ -26443,7 +26495,7 @@ async function extractActionSummary(transcriptPath) {
 function readTurnLines(transcriptPath) {
   let size;
   try {
-    size = (0, import_node_fs39.statSync)(transcriptPath).size;
+    size = (0, import_node_fs40.statSync)(transcriptPath).size;
   } catch {
     return null;
   }
@@ -26451,7 +26503,7 @@ function readTurnLines(transcriptPath) {
   let raw;
   let windowed = false;
   if (size <= SMALL_FILE_BYTES) {
-    raw = (0, import_node_fs39.readFileSync)(transcriptPath, "utf-8");
+    raw = (0, import_node_fs40.readFileSync)(transcriptPath, "utf-8");
   } else {
     windowed = true;
     const buf = Buffer.alloc(Math.min(MAX_READ_BYTES, size));
@@ -27021,7 +27073,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.0-experimental.145d0fb" : "dev";
+    return true ? "0.34.0-experimental.37a6dcf" : "dev";
   } catch {
     return "dev";
   }
@@ -27062,7 +27114,7 @@ async function sendSkipBeacon(ctx, reason) {
 // src/lib/static-analysis.ts
 var import_node_child_process12 = require("node:child_process");
-var import_node_fs40 = require("node:fs");
+var import_node_fs41 = require("node:fs");
 var SEVERITY_ORDER = {
   Error: 0,
   Critical: 0,
@@ -27118,7 +27170,7 @@ function runCodacyAnalysis(files) {
   if (files.length === 0) return empty;
   const existingFiles = files.filter((f) => {
     try {
-      return (0, import_node_fs40.existsSync)(f);
+      return (0, import_node_fs41.existsSync)(f);
     } catch {
       return false;
     }
@@ -27387,8 +27439,8 @@ async function scope(run4) {
 }
 // src/lib/specs.ts
-var import_node_fs41 = require("node:fs");
-var import_node_path31 = require("node:path");
+var import_node_fs42 = require("node:fs");
+var import_node_path32 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
   "AGENTS.md",
@@ -27410,7 +27462,7 @@ var UNCONSULTED_TOTAL_BYTES = 30720;
 function readSpecFiles(specsOpt, root) {
   const out2 = [];
   for (const raw of specsOpt.split(",").map((f) => f.trim()).filter(Boolean)) {
-    const candidate = (0, import_node_path31.isAbsolute)(raw) ? (0, import_node_path31.relative)(root, raw) : raw;
+    const candidate = (0, import_node_path32.isAbsolute)(raw) ? (0, import_node_path32.relative)(root, raw) : raw;
     const content = readFileInside(root, candidate, MAX_EXPLICIT_SPEC_FILE_BYTES);
     if (content === null) continue;
     out2.push({ path: raw, content });
@@ -27429,7 +27481,7 @@ function discoverSpecs(consulted = []) {
     const totalCap = relevant ? MAX_TOTAL_SPEC_BYTES : UNCONSULTED_TOTAL_BYTES;
     if (totalBytes >= totalCap) return false;
     if (seen.has(specPath)) return true;
-    if (!(0, import_node_fs41.existsSync)(specPath)) return true;
+    if (!(0, import_node_fs42.existsSync)(specPath)) return true;
     seen.add(specPath);
     const remaining = totalCap - totalBytes;
     const fileCap = relevant ? MAX_SPEC_FILE_BYTES : UNCONSULTED_FILE_BYTES;
@@ -27452,7 +27504,7 @@ function discoverSpecs(consulted = []) {
     if (!addSpec(candidate)) break;
   }
   for (const dir of ["spec", "docs"]) {
-    if (!(0, import_node_fs41.existsSync)(dir)) continue;
+    if (!(0, import_node_fs42.existsSync)(dir)) continue;
     try {
       const mdFiles = findMdFiles(dir, 2).sort();
       for (const mdFile of mdFiles) {
@@ -27467,9 +27519,9 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   if (depth >= maxDepth) return [];
   const result = [];
   try {
-    const entries = (0, import_node_fs41.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs42.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_node_path31.join)(dir, entry.name);
+      const fullPath = (0, import_node_path32.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
         result.push(fullPath);
       } else if (entry.isDirectory() && depth < maxDepth - 1) {
@@ -27482,25 +27534,25 @@ function findMdFiles(dir, maxDepth, depth = 0) {
 }
 function discoverPlans() {
   const home = process.env.HOME ?? "";
-  const homePlansDir = (0, import_node_path31.join)(home, ".claude", "plans");
+  const homePlansDir = (0, import_node_path32.join)(home, ".claude", "plans");
   const sources = [];
   if (isRealDirectoryChain(process.cwd(), [".claude", "plans"])) {
-    sources.push({ root: process.cwd(), prefix: (0, import_node_path31.join)(".claude", "plans") });
+    sources.push({ root: process.cwd(), prefix: (0, import_node_path32.join)(".claude", "plans") });
   }
-  if (home && (0, import_node_fs41.existsSync)(homePlansDir)) sources.push({ root: homePlansDir, prefix: "" });
+  if (home && (0, import_node_fs42.existsSync)(homePlansDir)) sources.push({ root: homePlansDir, prefix: "" });
   const candidates2 = [];
   const seen = /* @__PURE__ */ new Set();
   for (const source2 of sources) {
     let names2;
     try {
-      names2 = (0, import_node_fs41.readdirSync)(source2.prefix ? (0, import_node_path31.join)(source2.root, source2.prefix) : source2.root);
+      names2 = (0, import_node_fs42.readdirSync)(source2.prefix ? (0, import_node_path32.join)(source2.root, source2.prefix) : source2.root);
     } catch {
       continue;
     }
     for (const f of names2) {
       if (!f.endsWith(".md") || seen.has(f)) continue;
       seen.add(f);
-      const relPath = source2.prefix ? (0, import_node_path31.join)(source2.prefix, f) : f;
+      const relPath = source2.prefix ? (0, import_node_path32.join)(source2.prefix, f) : f;
       const stat3 = statRegularInRoot(source2.root, relPath);
       if (!stat3.ok) continue;
       candidates2.push({ name: f, root: source2.root, relPath, mtime: stat3.mtimeMs, size: stat3.size });
@@ -27518,9 +27570,9 @@ function discoverPlans() {
 function isRealDirectoryChain(root, parts2) {
   let current = root;
   for (const part of parts2) {
-    current = (0, import_node_path31.join)(current, part);
+    current = (0, import_node_path32.join)(current, part);
     try {
-      if (!(0, import_node_fs41.lstatSync)(current).isDirectory()) return false;
+      if (!(0, import_node_fs42.lstatSync)(current).isDirectory()) return false;
     } catch {
       return false;
     }
@@ -27535,7 +27587,7 @@ function discoverGuardDocs(rangeFiles2) {
     if (result.length >= MAX_SPEC_FILES) break;
     if (!GUARD_DOC_EXT.test(path)) continue;
     if (path.startsWith("/") || path.includes("..")) continue;
-    if (!(0, import_node_fs41.existsSync)(path)) continue;
+    if (!(0, import_node_fs42.existsSync)(path)) continue;
     const opened = openRegularInRoot(process.cwd(), path);
     if (!opened.ok) continue;
     if (opened.size > MAX_PLAN_FILE_BYTES || totalBytes + opened.size > MAX_TOTAL_SPEC_BYTES) {
@@ -27721,8 +27773,8 @@ async function mode(run4) {
 }
 // src/lib/fold.ts
-var import_node_fs42 = require("node:fs");
-var import_node_path32 = require("node:path");
+var import_node_fs43 = require("node:fs");
+var import_node_path33 = require("node:path");
 var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "user",
   "assistant",
@@ -27859,7 +27911,7 @@ function candidateRoots(repoRoot2) {
   const norm2 = repoRoot2.replace(/\\/g, "/").replace(/\/+$/, "");
   const out2 = [norm2];
   try {
-    const real = import_node_fs42.realpathSync.native(norm2).replace(/\\/g, "/").replace(/\/+$/, "");
+    const real = import_node_fs43.realpathSync.native(norm2).replace(/\\/g, "/").replace(/\/+$/, "");
     if (real !== norm2) out2.push(real);
   } catch {
   }
@@ -27947,31 +27999,31 @@ function fold(transcriptPath, opts = {}) {
     }
   };
   try {
-    if (!(0, import_node_fs42.existsSync)(transcriptPath)) return result;
-    ingest((0, import_node_fs42.readFileSync)(transcriptPath, "utf8"), "agent");
+    if (!(0, import_node_fs43.existsSync)(transcriptPath)) return result;
+    ingest((0, import_node_fs43.readFileSync)(transcriptPath, "utf8"), "agent");
     result.coverage.complete = true;
   } catch {
     return result;
   }
   try {
-    const sidecarDir = (0, import_node_path32.join)(
-      (0, import_node_path32.dirname)(transcriptPath),
-      (0, import_node_path32.basename)(transcriptPath).replace(/\.jsonl$/, ""),
+    const sidecarDir = (0, import_node_path33.join)(
+      (0, import_node_path33.dirname)(transcriptPath),
+      (0, import_node_path33.basename)(transcriptPath).replace(/\.jsonl$/, ""),
       "subagents"
     );
-    if ((0, import_node_fs42.existsSync)(sidecarDir)) {
+    if ((0, import_node_fs43.existsSync)(sidecarDir)) {
       const maxFiles = opts.maxSidecars ?? 200;
       const maxBytes = opts.maxSidecarBytes ?? 16 * 1024 * 1024;
       const found = [];
       const walk2 = (d, depth) => {
         if (depth > 4) return;
-        for (const e of (0, import_node_fs42.readdirSync)(d, { withFileTypes: true })) {
-          const p = (0, import_node_path32.join)(d, e.name);
+        for (const e of (0, import_node_fs43.readdirSync)(d, { withFileTypes: true })) {
+          const p = (0, import_node_path33.join)(d, e.name);
           if (e.isDirectory()) {
             walk2(p, depth + 1);
           } else if (e.name.startsWith("agent-") && e.name.endsWith(".jsonl")) {
             try {
-              const st = (0, import_node_fs42.statSync)(p);
+              const st = (0, import_node_fs43.statSync)(p);
               found.push({ path: p, size: st.size, mtimeMs: st.mtimeMs });
             } catch {
               result.coverage.malformed++;
@@ -27988,7 +28040,7 @@ function fold(transcriptPath, opts = {}) {
           continue;
         }
         try {
-          ingest((0, import_node_fs42.readFileSync)(f.path, "utf8"), "subagent");
+          ingest((0, import_node_fs43.readFileSync)(f.path, "utf8"), "subagent");
           bytes += f.size;
           result.coverage.subagentFiles++;
         } catch {
@@ -28023,7 +28075,7 @@ function fold(transcriptPath, opts = {}) {
 }
 function classifyUnobserved(path) {
   try {
-    const st = (0, import_node_fs42.statSync)(path);
+    const st = (0, import_node_fs43.statSync)(path);
     if (!st.isFile()) return "unreadable";
   } catch {
     return "unreadable";
@@ -28338,20 +28390,20 @@ async function evidence(run4) {
 }
 // src/lib/cache-cleanup.ts
-var import_node_fs43 = require("node:fs");
-var import_node_path33 = require("node:path");
+var import_node_fs44 = require("node:fs");
+var import_node_path34 = require("node:path");
 var CACHE_TTL_DAYS = 7;
 function pruneStaleCache() {
   try {
     const dir = projectPath(CACHE_DIR);
     const cutoff = Date.now() - CACHE_TTL_DAYS * 24 * 3600 * 1e3;
-    for (const entry of (0, import_node_fs43.readdirSync)(dir)) {
+    for (const entry of (0, import_node_fs44.readdirSync)(dir)) {
       if (!entry.startsWith("pending-")) continue;
-      const path = (0, import_node_path33.join)(dir, entry);
+      const path = (0, import_node_path34.join)(dir, entry);
       try {
-        const stat3 = (0, import_node_fs43.statSync)(path);
+        const stat3 = (0, import_node_fs44.statSync)(path);
         if (stat3.mtimeMs < cutoff) {
-          (0, import_node_fs43.unlinkSync)(path);
+          (0, import_node_fs44.unlinkSync)(path);
           logEvent("cache_entry_pruned", {
             path: entry,
             age_days: Math.round((Date.now() - stat3.mtimeMs) / 864e5)
@@ -28365,7 +28417,7 @@ function pruneStaleCache() {
 }
 // src/lib/context-files.ts
-var import_node_fs44 = require("node:fs");
+var import_node_fs45 = require("node:fs");
 var import_node_os7 = require("node:os");
 var MAX_CONTEXT_FILES = 10;
 var MAX_CONTEXT_FILE_BYTES = 10240;
@@ -28423,7 +28475,7 @@ function gatherContextFiles(contextPaths, deltaFiles, opts) {
       continue;
     }
     try {
-      const content = (0, import_node_fs44.readFileSync)(safePath, "utf8");
+      const content = (0, import_node_fs45.readFileSync)(safePath, "utf8");
       const bytes = Buffer.byteLength(content);
       if (bytes > MAX_CONTEXT_FILE_BYTES) {
         logEvent("context_file_skipped", { path: filePath, reason: "too_large", bytes });
@@ -28581,8 +28633,8 @@ function languageOf2(path) {
 }
 // src/lib/code/runtime.ts
-var import_node_fs45 = require("node:fs");
-var import_node_path34 = require("node:path");
+var import_node_fs46 = require("node:fs");
+var import_node_path35 = require("node:path");
 var import_web_tree_sitter2 = __toESM2(require_web_tree_sitter2());
 // src/lib/code/grammars.json
@@ -28642,18 +28694,18 @@ var grammars_default = {
 var MAX_PARSE_BYTES = 512 * 1024;
 function grammarCandidates(file, pkg, env = process.env) {
   return [
-    ...env.VERITY_GRAMMAR_DIR ? [(0, import_node_path34.join)(env.VERITY_GRAMMAR_DIR, file)] : [],
-    (0, import_node_path34.join)(__dirname, "..", "data", "grammars", file),
+    ...env.VERITY_GRAMMAR_DIR ? [(0, import_node_path35.join)(env.VERITY_GRAMMAR_DIR, file)] : [],
+    (0, import_node_path35.join)(__dirname, "..", "data", "grammars", file),
     // bundled: cli/bin/ → cli/data/grammars/
-    (0, import_node_path34.join)(__dirname, "..", "..", "..", "data", "grammars", file),
+    (0, import_node_path35.join)(__dirname, "..", "..", "..", "data", "grammars", file),
     // tsx: cli/src/lib/code/ → cli/data/grammars/
-    (0, import_node_path34.join)(__dirname, "..", "..", "..", "node_modules", pkg, file)
+    (0, import_node_path35.join)(__dirname, "..", "..", "..", "node_modules", pkg, file)
     // tsx, before a build: the pinned devDependency
   ];
 }
 function locateGrammar(id, env = process.env) {
   const g = grammars_default[id];
-  return grammarCandidates(g.file, g.package, env).find((p) => (0, import_node_fs45.existsSync)(p)) ?? null;
+  return grammarCandidates(g.file, g.package, env).find((p) => (0, import_node_fs46.existsSync)(p)) ?? null;
 }
 var loading = null;
 function loadRuntime(env = process.env) {
@@ -30982,8 +31034,8 @@ async function repoContext(run4) {
 // src/lib/seed-runner.ts
 var import_promises15 = require("node:fs/promises");
-var import_node_fs46 = require("node:fs");
-var import_node_path35 = require("node:path");
+var import_node_fs47 = require("node:fs");
+var import_node_path36 = require("node:path");
 var import_yaml4 = __toESM2(require_dist());
 // src/lib/seed.ts
@@ -31206,8 +31258,8 @@ function normalizeTitle(title) {
 async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
   const titles = /* @__PURE__ */ new Set();
   for (const dir of NODE_DIRS) {
-    const full = (0, import_node_path35.join)(memoryDir3, dir);
-    if (!(0, import_node_fs46.existsSync)(full)) continue;
+    const full = (0, import_node_path36.join)(memoryDir3, dir);
+    if (!(0, import_node_fs47.existsSync)(full)) continue;
     let files;
     try {
       files = await (0, import_promises15.readdir)(full);
@@ -31218,7 +31270,7 @@ async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
       if (!file.endsWith(".md")) continue;
       let content;
       try {
-        content = await (0, import_promises15.readFile)((0, import_node_path35.join)(full, file), "utf-8");
+        content = await (0, import_promises15.readFile)((0, import_node_path36.join)(full, file), "utf-8");
       } catch {
         continue;
       }
@@ -31289,7 +31341,7 @@ function renderNodeMarkdown(candidate, nodeId, createdAt) {
   return fm;
 }
 async function runSeed(opts) {
-  if (!(0, import_node_fs46.existsSync)(STANDARD_FILE)) {
+  if (!(0, import_node_fs47.existsSync)(STANDARD_FILE)) {
     return { created: 0, existing: 0, failed: 0, skipped: "no_standard", candidates: [] };
   }
   let standardDoc;
@@ -31301,7 +31353,7 @@ async function runSeed(opts) {
   }
   const knowledgeSpec = standardDoc.knowledge_spec ?? {};
   let readmeContent;
-  if ((0, import_node_fs46.existsSync)("README.md")) {
+  if ((0, import_node_fs47.existsSync)("README.md")) {
     try {
       readmeContent = await (0, import_promises15.readFile)("README.md", "utf-8");
     } catch {
@@ -31309,7 +31361,7 @@ async function runSeed(opts) {
   }
   let claudeMdContent;
   for (const p of ["CLAUDE.md", ".claude/CLAUDE.md"]) {
-    if ((0, import_node_fs46.existsSync)(p)) {
+    if ((0, import_node_fs47.existsSync)(p)) {
       try {
         claudeMdContent = await (0, import_promises15.readFile)(p, "utf-8");
         break;
@@ -31389,13 +31441,13 @@ async function runSeed(opts) {
       continue;
     }
     const deduplicated = res.data.deduplicated === true;
-    if (deduplicated && (0, import_node_fs46.existsSync)(targetPath)) {
+    if (deduplicated && (0, import_node_fs47.existsSync)(targetPath)) {
       existing++;
       continue;
     }
     const content = typeof res.data.content === "string" && res.data.content.length > 0 ? res.data.content : renderNodeMarkdown(c, nodeId, createdAt);
     try {
-      await (0, import_promises15.mkdir)((0, import_node_path35.dirname)(targetPath), { recursive: true });
+      await (0, import_promises15.mkdir)((0, import_node_path36.dirname)(targetPath), { recursive: true });
       await (0, import_promises15.writeFile)(targetPath, content);
       if (deduplicated) existing++;
       else {
@@ -31411,8 +31463,8 @@ async function runSeed(opts) {
 }
 // src/commands/analyze/phases/08-memory-manifest.ts
-var import_node_fs47 = require("node:fs");
-var import_node_path36 = require("node:path");
+var import_node_fs48 = require("node:fs");
+var import_node_path37 = require("node:path");
 async function memoryManifest(run4) {
   const { globals } = run4;
   const { serviceUrl, token } = run4;
@@ -31422,9 +31474,9 @@ async function memoryManifest(run4) {
   let autoSeedNotice = null;
   try {
     await ensureMemoryDir();
-    const seedMarker = (0, import_node_path36.join)(VERITY_DIR, ".seeded");
-    const hasStandard = (0, import_node_fs47.existsSync)(STANDARD_FILE);
-    const alreadyTried = (0, import_node_fs47.existsSync)(seedMarker);
+    const seedMarker = (0, import_node_path37.join)(VERITY_DIR, ".seeded");
+    const hasStandard = (0, import_node_fs48.existsSync)(STANDARD_FILE);
+    const alreadyTried = (0, import_node_fs48.existsSync)(seedMarker);
     if (hasStandard && !alreadyTried) {
       const preManifest = await buildManifest();
       if (preManifest.nodes.length === 0) {
@@ -31437,7 +31489,7 @@ async function memoryManifest(run4) {
             dryRun: false
           });
           if (seedResult.created > 0 || seedResult.existing > 0) {
-            (0, import_node_fs47.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created} existing=${seedResult.existing}
+            (0, import_node_fs48.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created} existing=${seedResult.existing}
 `);
             if (seedResult.created > 0) {
               autoSeedNotice = `Seeded ${seedResult.created} knowledge node(s) from your existing Standard (one-time).`;
@@ -31448,7 +31500,7 @@ async function memoryManifest(run4) {
               failed: seedResult.failed
             });
           } else if (seedResult.skipped === "already_seeded") {
-            (0, import_node_fs47.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
+            (0, import_node_fs48.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
 `);
           } else {
             logEvent("auto_seed_noop", {
@@ -31543,7 +31595,7 @@ function computeIncrement(reviewedPaths, hashOf, priorAuthored) {
 }
 // src/commands/analyze/phases/10-working-memory.ts
-var import_node_path37 = require("node:path");
+var import_node_path38 = require("node:path");
 async function workingMemory(run4) {
   const { opts } = run4;
   const { allForReview, baseline, conversation, foldResult, sessionId, token, transcriptPath } = run4;
@@ -31555,7 +31607,7 @@ async function workingMemory(run4) {
     const priorState = foldForMarks(memorySession.d);
     incrementReport = computeIncrement(
       allForReview,
-      (p) => fileHash((0, import_node_path37.join)(repoRoot(), p)),
+      (p) => fileHash((0, import_node_path38.join)(repoRoot(), p)),
       priorState.authored_all.map((a) => ({
         path: a.path,
         hash_at_last_verdict: a.hash_at_last_verdict
@@ -31637,7 +31689,7 @@ async function workingMemory(run4) {
 }
 // src/lib/note-budget.ts
-var import_node_fs48 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 var ADVISORY_BUDGET = { PASS: 1, WARN: 2 };
 var EPISODE_STALE_SECONDS = 30 * 60;
 var FRESH = { delivered: 0, tasksCompleted: 0, ts: 0 };
@@ -31659,9 +31711,9 @@ function advisoryBudgetSpent(episode, rawDecision) {
 }
 function readAdvisoryEpisode(sessionId) {
   const file = scopedFile(ADVISORY_EPISODE_FILE, sessionId);
-  if (!(0, import_node_fs48.existsSync)(file)) return null;
+  if (!(0, import_node_fs49.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs48.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs49.readFileSync)(file, "utf-8")) ?? {};
     const delivered = typeof o.delivered === "number" ? o.delivered : NaN;
     if (isNaN(delivered)) return null;
     return {
@@ -31675,8 +31727,8 @@ function readAdvisoryEpisode(sessionId) {
 }
 function writeAdvisoryEpisode(episode, sessionId) {
   try {
-    (0, import_node_fs48.mkdirSync)(VERITY_DIR, { recursive: true });
-    (0, import_node_fs48.writeFileSync)(
+    (0, import_node_fs49.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs49.writeFileSync)(
       scopedFile(ADVISORY_EPISODE_FILE, sessionId),
       JSON.stringify({ v: 1, ...episode })
     );
@@ -32008,14 +32060,14 @@ async function buildRequest(run4) {
 }
 // src/lib/offline.ts
-var import_node_fs49 = require("node:fs");
+var import_node_fs50 = require("node:fs");
 var import_node_crypto13 = require("node:crypto");
 function cacheRequest(body2) {
   try {
-    (0, import_node_fs49.mkdirSync)(CACHE_DIR, { recursive: true });
+    (0, import_node_fs50.mkdirSync)(CACHE_DIR, { recursive: true });
     const suffix = (0, import_node_crypto13.randomBytes)(4).toString("hex");
     const filename = `pending-${Math.floor(Date.now() / 1e3)}-${suffix}.json`;
-    (0, import_node_fs49.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body2)));
+    (0, import_node_fs50.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body2)));
   } catch {
   }
 }
@@ -32134,8 +32186,8 @@ async function transmit(run4) {
 }
 // src/commands/analyze/phases/13-reconcile.ts
-var import_node_fs50 = require("node:fs");
-var import_node_path38 = require("node:path");
+var import_node_fs51 = require("node:fs");
+var import_node_path39 = require("node:path");
 async function reconcile(run4) {
   const { actionSummary, allChanged, analyzable, baseline, baselineSessionId, codeDelta, contentHash, conversation, decision, foldResult, memory: memory2, memorySession, response, reviewable, securityFiles, turnId } = run4;
   const sentPaths = codeDelta.files.map((f) => f.path);
@@ -32164,7 +32216,7 @@ async function reconcile(run4) {
       const st = foldDossier(memorySession.d);
       openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line2) => {
         try {
-          const src = (0, import_node_fs50.readFileSync)((0, import_node_path38.join)(repoRoot(), file), "utf8").split("\n");
+          const src = (0, import_node_fs51.readFileSync)((0, import_node_path39.join)(repoRoot(), file), "utf8").split("\n");
           const at = src[line2 - 1];
           return at === void 0 ? null : lineSha(at);
         } catch {
@@ -32986,7 +33038,7 @@ function registerAnalyzeCommand(program2) {
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
   if (!verityConfigured()) {
-    (0, import_node_fs51.writeSync)(2, '[verity] not set up in this project \u2014 run "verity init" first.\n');
+    (0, import_node_fs52.writeSync)(2, '[verity] not set up in this project \u2014 run "verity init" first.\n');
     process.exit(0);
   }
   const run4 = createRun(opts, globals);
@@ -33007,11 +33059,11 @@ async function runAnalyze(opts, globals) {
 }
 // src/commands/baseline.ts
-var import_node_fs53 = require("node:fs");
+var import_node_fs54 = require("node:fs");
 // src/lib/project-skills.ts
-var import_node_fs52 = require("node:fs");
-var import_node_path39 = require("node:path");
+var import_node_fs53 = require("node:fs");
+var import_node_path40 = require("node:path");
 var PROJECT_SKILL_NAMES = [
   "verity-setup",
   "verity-analyze",
@@ -33037,14 +33089,14 @@ var LEGACY_SKILL_NAMES = [
 var ALL = [...PROJECT_SKILL_NAMES, ...LEGACY_SKILL_NAMES];
 function staleProjectSkills() {
   const root = projectPath(".claude/skills");
-  if (!(0, import_node_fs52.existsSync)(root)) return [];
-  return ALL.filter((name2) => (0, import_node_fs52.existsSync)((0, import_node_path39.join)(root, name2)));
+  if (!(0, import_node_fs53.existsSync)(root)) return [];
+  return ALL.filter((name2) => (0, import_node_fs53.existsSync)((0, import_node_path40.join)(root, name2)));
 }
 function removeProjectSkills() {
   const root = projectPath(".claude/skills");
   const removed = [];
   for (const name2 of staleProjectSkills()) {
-    (0, import_node_fs52.rmSync)((0, import_node_path39.join)(root, name2), { recursive: true, force: true });
+    (0, import_node_fs53.rmSync)((0, import_node_path40.join)(root, name2), { recursive: true, force: true });
     removed.push(name2);
   }
   return removed;
@@ -33109,13 +33161,13 @@ function registerBaselineCommands(program2) {
       let memoryMsg = null;
       let memoryAgentLine = null;
       const memoryNotice = projectPath(`${VERITY_DIR}/.memory-fence-notice`);
-      if (realStart && !(0, import_node_fs53.existsSync)(memoryNotice)) {
+      if (realStart && !(0, import_node_fs54.existsSync)(memoryNotice)) {
         const trackedGraph = memoryOptOut() ? 0 : committedMemoryFiles().length;
         if (trackedGraph > 0) {
           memoryMsg = `Verity: this project commits its knowledge base (${trackedGraph} files under .verity/memory/), so Verity's generated notes show up in every diff and pull request. Run \`verity memory untrack\` to keep them on disk but out of git, or \`verity memory track\` to keep committing them on purpose.`;
           memoryAgentLine = `This project has ${trackedGraph} knowledge-graph files tracked in git under .verity/memory/. As of Verity 0.32.6 the graph is machine-local by default \u2014 it is rebuilt from the service, and committing it puts generated notes in every pull request. If the user wants that stopped, run \`verity memory untrack\` for them: it keeps every file on disk and stages their removal from the index, so they only need to commit \u2014 and their teammates' working copies will vanish on the next pull and re-sync from the service, which is expected. If they would rather keep committing it, \`verity memory track\` records that and nothing will offer again.`;
           try {
-            (0, import_node_fs53.writeFileSync)(memoryNotice, (/* @__PURE__ */ new Date()).toISOString() + "\n");
+            (0, import_node_fs54.writeFileSync)(memoryNotice, (/* @__PURE__ */ new Date()).toISOString() + "\n");
           } catch {
           }
         }
@@ -33216,7 +33268,7 @@ function hookSource(value) {
 }
 // src/commands/review.ts
-var import_node_fs54 = require("node:fs");
+var import_node_fs55 = require("node:fs");
 function registerReviewCommand(program2) {
   program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars)").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
@@ -33233,7 +33285,7 @@ async function runReview(opts, globals) {
   const changedFiles = opts.changed ? opts.changed.split(",").map((f) => f.trim()).filter(Boolean) : allFiles;
   const analyzable = filterAnalyzable(allFiles);
   const securityFiles = filterSecurity(allFiles);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs54.existsSync)(f) || resolveFile(f) !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs55.existsSync)(f) || resolveFile(f) !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const codeDelta = collectCodeDelta(allFiles);
   const tokenResult = await resolveToken(globals.token);
@@ -33299,8 +33351,8 @@ async function runReview(opts, globals) {
 }
 // src/commands/guard.ts
-var import_node_fs58 = require("node:fs");
-var import_node_path44 = require("node:path");
+var import_node_fs59 = require("node:fs");
+var import_node_path45 = require("node:path");
 // src/lib/terminal-text.ts
 var CONTROL = /[\x00-\x08\x0b-\x1f\x7f-\x9f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g;
@@ -33408,7 +33460,7 @@ async function runAgentReview(options) {
 }
 // src/lib/prove/auto.ts
-var import_node_path43 = require("node:path");
+var import_node_path44 = require("node:path");
 var import_node_crypto18 = require("node:crypto");
 // src/lib/prove/signals.ts
@@ -33817,6 +33869,11 @@ async function rankViaServer(candidates2, ctx, auth2) {
     cmd: "prove-rank"
   });
   if (!res.ok) return { ok: false, ranker: "luna", error: res.error, ranked: fallback };
+  const off = res.data;
+  if (off?.enabled === false) {
+    const why = typeof off.reason === "string" ? off.reason.slice(0, 40) : "disabled";
+    return { ok: false, ranker: "luna", error: `formal is off for this project (${why})`, ranked: fallback, disabled: why };
+  }
   const items = Array.isArray(res.data?.items) ? res.data.items : [];
   return { ok: true, ranker: "luna", ranked: applyAnnotations(candidates2, items), costUsd: typeof res.data?.cost_usd === "number" ? res.data.cost_usd : null };
 }
@@ -34541,6 +34598,8 @@ async function generateModel(target, opts) {
     });
     if (!res.ok) return { ok: false, error: res.error };
     const d = res.data ?? {};
+    const off = d;
+    if (off.enabled === false) return { ok: false, error: `formal is off for this project (${typeof off.reason === "string" ? off.reason.slice(0, 40) : "disabled"})` };
     if (d.error && typeof d.error === "object") return { ok: false, error: `${d.error.code ?? "SERVICE_ERROR"}: ${d.error.message ?? "the service failed"}` };
     const usage2 = d.usage && typeof d.usage === "object" ? { inputTokens: Number(d.usage.inputTokens ?? 0), outputTokens: Number(d.usage.outputTokens ?? 0) } : null;
     return acceptAnswer(d, usage2, typeof d.cost_usd === "number" ? d.cost_usd : null);
@@ -34720,8 +34779,7 @@ Rules:
 5. Write the harness as ONE file and run it in the SAME shell call that writes it (a heredoc followed by the run). TypeScript: node --experimental-strip-types harness.ts (detect runtimes only if that fails: node --version, python3 --version); if strip-types is unavailable, remove type annotations ONLY on lines that are not part of the function under test's logic, and say so. Python: python3 harness.py.
 6. Nothing you run can reach the network. Do not try.
 7. Keep it under about eight shell calls. Output tokens are time.
-8. Answer with the JSON object only: verdict (reproduced | diverged | unreplayable), reason (2-4 sentences: what you ran, what the real code did, and how that compares to the trace's final state), harness_files (every file you wrote: path and its line count \u2014 do NOT paste contents, your shell calls already carry them), executed_output (the last relevant stdout, at most 2000 characters), impact (one word, below).
-9. impact \u2014 AFTER the verdict, and never a reason to change it: what the violation you ran costs a user of this code, the most serious one the run showed. money: a balance, charge, refund, price or stock is wrong. access: someone gets access they should not have, or an auth check is bypassed. data: a user's records are lost, corrupted or wrongly duplicated. external: an effect outside the system happens twice or never (a charge, an email, a shipment, a webhook). count: a counter, metric or statistic is off. cache: a cached or derived value is stale until it refreshes. internal: the program's own bookkeeping is off, with no effect a user would see. none: the verdict is not reproduced.
+8. Answer with the JSON object only: verdict (reproduced | diverged | unreplayable), reason (2-4 sentences: what you ran, what the real code did, and how that compares to the trace's final state), harness_files (every file you wrote: path and its line count \u2014 do NOT paste contents, your shell calls already carry them), executed_output (the last relevant stdout, at most 2000 characters).
 "reproduced" means the real code, driven by the trace, reached the property violation the model describes. "diverged" means it did not \u2014 the model is wrong about the code, which is a useful answer. "unreplayable" means you could not run the real function faithfully; say why.`;
 var REPLAY_SCHEMA = {
@@ -34739,10 +34797,9 @@ var REPLAY_SCHEMA = {
         required: ["path", "lines"]
       }
     },
-    executed_output: { type: "string" },
-    impact: { type: "string", enum: ["money", "access", "data", "external", "count", "cache", "internal", "none"] }
+    executed_output: { type: "string" }
   },
-  required: ["verdict", "reason", "harness_files", "executed_output", "impact"]
+  required: ["verdict", "reason", "harness_files", "executed_output"]
 };
 function renderBriefInput(brief) {
   const p = brief.property;
@@ -34769,8 +34826,6 @@ function renderBriefInput(brief) {
   }
   return parts2.join("\n");
 }
-var IMPACTS = ["money", "access", "data", "external", "count", "cache", "internal", "none"];
-var isImpact = (v) => typeof v === "string" && IMPACTS.includes(v);
 function stringsIn(value, out2 = [], depth = 0) {
   if (depth > 8) return out2;
   if (typeof value === "string") out2.push(value);
@@ -34812,8 +34867,7 @@ function parseReplayOutput(output) {
           verdict,
           reason: typeof o.reason === "string" ? o.reason.slice(0, 2e3) : "",
           harness_files: Array.isArray(o.harness_files) ? o.harness_files.filter((f) => typeof f.path === "string").map((f) => ({ path: String(f.path).slice(0, 200), lines: Number.isInteger(f.lines) ? f.lines : 0 })) : [],
-          executed_output: typeof o.executed_output === "string" ? o.executed_output.slice(0, 2e3) : "",
-          impact: isImpact(o.impact) ? o.impact : "none"
+          executed_output: typeof o.executed_output === "string" ? o.executed_output.slice(0, 2e3) : ""
         };
       }
     } catch {
@@ -34821,10 +34875,10 @@ function parseReplayOutput(output) {
   }
   return { claim, shellCalls, executedCalls, shellTexts, outputTexts };
 }
-var RESULT_LINE = /REPLAY_RESULT=(reproduced|diverged)\b/;
+var RESULT_LINE = /REPLAY_RESULT=(reproduced|diverged)\b/g;
 function printedResult(outputTexts) {
   let last = null;
-  for (const t of outputTexts) for (const m of t.matchAll(new RegExp(RESULT_LINE.source, "g"))) last = m[1];
+  for (const t of outputTexts) for (const m of t.matchAll(RESULT_LINE)) last = m[1];
   return last;
 }
 var RESULT_MISSING = "the harness never printed REPLAY_RESULT=reproduced on its own stdout \u2014 the verdict was the model's word, not the run's";
@@ -35014,7 +35068,6 @@ async function runReplayInContainer(brief, opts) {
       ...judged,
       executedCalls,
       shellCalls,
-      ...judged.verdict === "reproduced" && parsed.claim ? { impact: parsed.claim.impact } : {},
       executedOutput: parsed.claim?.executed_output ?? "",
       harnessFiles: parsed.claim?.harness_files ?? [],
       usage,
@@ -35061,6 +35114,11 @@ async function runReplayViaServer(brief, auth2, budgetMs = 24e4) {
     return { claimed: null, verdict: "unverified", reason: "", downgrade: res.error, executedCalls: 0, shellCalls: 0, verbatim: none, executedOutput: "", harnessFiles: [], usage: null, durationMs: Date.now() - started, containerId: null, error: res.error };
   }
   const d = res.data ?? {};
+  if (d.enabled === false) {
+    const why = d.reason;
+    const msg = `formal is off for this project (${typeof why === "string" ? why.slice(0, 40) : "disabled"})`;
+    return { claimed: null, verdict: "unverified", reason: "", downgrade: msg, executedCalls: 0, shellCalls: 0, verbatim: none, executedOutput: "", harnessFiles: [], usage: null, durationMs: Date.now() - started, containerId: null, error: msg };
+  }
   if (d.error && typeof d.error === "object") {
     const e = d.error;
     const msg = `${e.code ?? "SERVICE_ERROR"}: ${e.message ?? "the service failed"}`;
@@ -35073,7 +35131,6 @@ async function runReplayViaServer(brief, auth2, budgetMs = 24e4) {
     verdict: verdict === "reproduced" || verdict === "diverged" || verdict === "unreplayable" ? verdict : "unverified",
     reason: typeof d.reason === "string" ? d.reason : "",
     downgrade: typeof d.downgrade === "string" ? d.downgrade : null,
-    ...isImpact(d.impact) ? { impact: d.impact } : {},
     executedCalls: Number(d.executed_calls ?? 0),
     shellCalls: Number(d.shell_calls ?? 0),
     verbatim: { covered: Number(v.covered ?? 0), total: Number(v.total ?? 0), ratio: Number(v.ratio ?? 0), basis: v.basis === "symbol" || v.basis === "file" ? v.basis : "none" },
@@ -35130,18 +35187,18 @@ function renderReplay(model, property, r) {
 // src/lib/prove/runner.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_os8 = require("node:os");
-var import_node_fs57 = require("node:fs");
+var import_node_fs58 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path42 = require("node:path");
+var import_node_path43 = require("node:path");
 // src/lib/prove/scaffold.ts
-var import_node_fs56 = require("node:fs");
-var import_node_path41 = require("node:path");
+var import_node_fs57 = require("node:fs");
+var import_node_path42 = require("node:path");
 // src/lib/prove/safe-write.ts
-var import_node_fs55 = require("node:fs");
+var import_node_fs56 = require("node:fs");
 var import_node_crypto14 = require("node:crypto");
-var import_node_path40 = require("node:path");
+var import_node_path41 = require("node:path");
 var SafeWriteError = class extends Error {
   constructor(reason, path) {
     super(`refusing to write ${path}: ${reason}`);
@@ -35150,10 +35207,10 @@ var SafeWriteError = class extends Error {
     this.name = "SafeWriteError";
   }
 };
-var FLAGS3 = import_node_fs55.constants;
+var FLAGS3 = import_node_fs56.constants;
 var NOFOLLOW2 = FLAGS3.O_NOFOLLOW ?? 0;
 function assertPlainRelative(rel) {
-  if (!rel || (0, import_node_path40.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
+  if (!rel || (0, import_node_path41.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
   for (const part of rel.split(/[\\/]/)) {
     if (part === ".." || part === "" || part === ".") throw new SafeWriteError("bad-path", rel);
   }
@@ -35162,34 +35219,34 @@ function ensureDirsNoFollow(root, rel) {
   const parts2 = rel.split(/[\\/]/);
   let cur = root;
   for (const part of parts2.slice(0, -1)) {
-    cur = (0, import_node_path40.join)(cur, part);
+    cur = (0, import_node_path41.join)(cur, part);
     let st;
     try {
-      st = (0, import_node_fs55.lstatSync)(cur);
+      st = (0, import_node_fs56.lstatSync)(cur);
     } catch {
-      (0, import_node_fs55.mkdirSync)(cur);
+      (0, import_node_fs56.mkdirSync)(cur);
       continue;
     }
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", cur);
     if (!st.isDirectory()) throw new SafeWriteError("not-regular", cur);
   }
-  return (0, import_node_path40.join)(root, rel);
+  return (0, import_node_path41.join)(root, rel);
 }
 function insideRoot(realRoot, realPath) {
-  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path40.sep) ? realRoot : realRoot + import_node_path40.sep);
+  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path41.sep) ? realRoot : realRoot + import_node_path41.sep);
 }
 function removeQuietly(path) {
   try {
-    (0, import_node_fs55.unlinkSync)(path);
+    (0, import_node_fs56.unlinkSync)(path);
   } catch {
   }
 }
 function writeFileInRootNoFollow(root, rel, content) {
   assertPlainRelative(rel);
   const dest = ensureDirsNoFollow(root, rel);
-  const dir = (0, import_node_path40.dirname)(dest);
+  const dir = (0, import_node_path41.dirname)(dest);
   try {
-    const st = (0, import_node_fs55.lstatSync)(dest);
+    const st = (0, import_node_fs56.lstatSync)(dest);
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", dest);
     if (!st.isFile()) throw new SafeWriteError("not-regular", dest);
   } catch (err2) {
@@ -35197,41 +35254,41 @@ function writeFileInRootNoFollow(root, rel, content) {
   }
   let realRoot;
   try {
-    realRoot = (0, import_node_fs55.realpathSync)(root);
+    realRoot = (0, import_node_fs56.realpathSync)(root);
   } catch {
     throw new SafeWriteError("unwritable", root);
   }
-  const tmp = (0, import_node_path40.join)(dir, `.${(0, import_node_path40.basename)(dest)}.${(0, import_node_crypto14.randomBytes)(6).toString("hex")}.tmp`);
+  const tmp = (0, import_node_path41.join)(dir, `.${(0, import_node_path41.basename)(dest)}.${(0, import_node_crypto14.randomBytes)(6).toString("hex")}.tmp`);
   let fd;
   try {
-    fd = (0, import_node_fs55.openSync)(tmp, import_node_fs55.constants.O_WRONLY | import_node_fs55.constants.O_CREAT | import_node_fs55.constants.O_EXCL | NOFOLLOW2, 420);
+    fd = (0, import_node_fs56.openSync)(tmp, import_node_fs56.constants.O_WRONLY | import_node_fs56.constants.O_CREAT | import_node_fs56.constants.O_EXCL | NOFOLLOW2, 420);
   } catch {
     throw new SafeWriteError("unwritable", tmp);
   }
   try {
-    const opened = (0, import_node_fs55.fstatSync)(fd, { bigint: true });
+    const opened = (0, import_node_fs56.fstatSync)(fd, { bigint: true });
     let realTmp;
     try {
-      realTmp = (0, import_node_fs55.realpathSync)(tmp);
+      realTmp = (0, import_node_fs56.realpathSync)(tmp);
     } catch {
       throw new SafeWriteError("escaped", tmp);
     }
-    const there = (0, import_node_fs55.lstatSync)(realTmp, { bigint: true });
+    const there = (0, import_node_fs56.lstatSync)(realTmp, { bigint: true });
     if (!opened.isFile() || there.ino !== opened.ino || there.dev !== opened.dev || !insideRoot(realRoot, realTmp)) {
       throw new SafeWriteError("escaped", tmp);
     }
     const buf = Buffer.from(content, "utf-8");
     let off = 0;
-    while (off < buf.length) off += (0, import_node_fs55.writeSync)(fd, buf, off, buf.length - off);
+    while (off < buf.length) off += (0, import_node_fs56.writeSync)(fd, buf, off, buf.length - off);
   } catch (err2) {
-    (0, import_node_fs55.closeSync)(fd);
+    (0, import_node_fs56.closeSync)(fd);
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", tmp);
   }
-  (0, import_node_fs55.closeSync)(fd);
+  (0, import_node_fs56.closeSync)(fd);
   try {
-    if (!insideRoot(realRoot, (0, import_node_fs55.realpathSync)(dir)) || (0, import_node_fs55.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
-    (0, import_node_fs55.renameSync)(tmp, dest);
+    if (!insideRoot(realRoot, (0, import_node_fs56.realpathSync)(dir)) || (0, import_node_fs56.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
+    (0, import_node_fs56.renameSync)(tmp, dest);
   } catch (err2) {
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", dest);
@@ -35245,9 +35302,9 @@ function pathHasNoLink(root, rel) {
   }
   let cur = root;
   for (const part of rel.split(/[\\/]/)) {
-    cur = cur + import_node_path40.sep + part;
+    cur = cur + import_node_path41.sep + part;
     try {
-      if ((0, import_node_fs55.lstatSync)(cur).isSymbolicLink()) return false;
+      if ((0, import_node_fs56.lstatSync)(cur).isSymbolicLink()) return false;
     } catch {
       return true;
     }
@@ -35557,20 +35614,20 @@ This directory is machine-local and gitignored (see ../.gitignore). Models are
 never committed; what reaches the team is the bug report and the fix.
 `;
 function scaffoldProofs(root) {
-  const proofsDir = (0, import_node_path41.join)(root, PROOFS_DIR);
+  const proofsDir = (0, import_node_path42.join)(root, PROOFS_DIR);
   const written = [];
   const kept = [];
   for (const stray of ["lakefile.lean"]) {
     const rel = `${PROOFS_DIR}/${stray}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path41.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path42.join)(root, rel));
     try {
-      (0, import_node_fs56.rmSync)((0, import_node_path41.join)(root, rel), { force: true });
+      (0, import_node_fs57.rmSync)((0, import_node_path42.join)(root, rel), { force: true });
     } catch {
     }
   }
   for (const f of PROOFS_TEMPLATE_FILES) {
     const rel = `${PROOFS_DIR}/${f.path}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path41.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path42.join)(root, rel));
     const current = readRegularFileInRoot(root, rel, 4 * 1024 * 1024);
     if (current.ok && current.content === f.content) {
       kept.push(rel);
@@ -35583,8 +35640,8 @@ function scaffoldProofs(root) {
     [`${PROOFS_DIR}/.gitignore`, LOCAL_GITIGNORE],
     [`${MODELS_DIR}/README.md`, MODELS_README]
   ]) {
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path41.join)(root, rel));
-    if (existsNoFollow((0, import_node_path41.join)(root, rel))) {
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path42.join)(root, rel));
+    if (existsNoFollow((0, import_node_path42.join)(root, rel))) {
       kept.push(rel);
       continue;
     }
@@ -35595,7 +35652,7 @@ function scaffoldProofs(root) {
 }
 function existsNoFollow(abs) {
   try {
-    (0, import_node_fs56.lstatSync)(abs);
+    (0, import_node_fs57.lstatSync)(abs);
     return true;
   } catch {
     return false;
@@ -35853,16 +35910,17 @@ function renderReport(r) {
 // src/lib/prove/runner.ts
 function verityLeanHome(env = process.env) {
-  return env.VERITY_LEAN_HOME ?? (0, import_node_path42.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".verity", "lean");
+  return env.VERITY_LEAN_HOME ?? (0, import_node_path43.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".verity", "lean");
 }
 function findToolchain(env = process.env) {
-  const managedBin = (0, import_node_path42.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
-  const elanBin = (0, import_node_path42.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
-  const path = [managedBin, elanBin, env.PATH ?? ""].filter(Boolean).join(import_node_path42.delimiter);
+  const managedBin = (0, import_node_path43.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
+  const elanBin = (0, import_node_path43.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
+  const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path43.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const userPath = (env.PATH ?? "").split(import_node_path43.delimiter).filter((d) => d && (elanHas || (0, import_node_path43.resolve)(d) !== (0, import_node_path43.resolve)(elanBin)));
+  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path43.delimiter);
   const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
-  const elanHas = (0, import_node_fs57.existsSync)((0, import_node_path42.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
   const exe = process.platform === "win32" ? "lake.exe" : "lake";
-  const candidates2 = [(0, import_node_path42.join)(managedBin, exe), ...elanHas ? [(0, import_node_path42.join)(elanBin, exe)] : [], exe];
+  const candidates2 = [(0, import_node_path43.join)(managedBin, exe), ...elanHas ? [(0, import_node_path43.join)(elanBin, exe)] : [], exe];
   for (const candidate of candidates2) {
     try {
       (0, import_node_child_process15.execFileSync)(candidate, ["--version"], { env: merged, stdio: ["ignore", "pipe", "pipe"], timeout: 1e4 });
@@ -35937,53 +35995,80 @@ function runAsync(tc, cwd, args2, timeoutMs) {
 }
 var DEFAULT_BUILD_TIMEOUT_MS = 10 * 6e4;
 var DEFAULT_CHECK_TIMEOUT_MS = 12e4;
+function proofsWorkspaceProblem(root) {
+  for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
+    let st;
+    try {
+      st = (0, import_node_fs58.lstatSync)((0, import_node_path43.join)(root, rel));
+    } catch {
+      break;
+    }
+    if (st.isSymbolicLink()) return `${rel} is a symlink; Lean is not run through it`;
+  }
+  const r = runGitSync(root, ["ls-files", "-z", "--", PROOFS_DIR], { timeoutMs: 5e3 });
+  if (!r.ok) return `could not confirm with git that ${PROOFS_DIR} holds no committed files; Lean is not run`;
+  const tracked = r.stdout.split("\0").filter(Boolean);
+  if (tracked.length > 0) {
+    return `${tracked.length} file(s) under ${PROOFS_DIR} are tracked in git (e.g. ${tracked[0]}); Lean is not run on a workspace the repository supplies \u2014 untrack them with: git rm -r --cached ${PROOFS_DIR}`;
+  }
+  return null;
+}
+function refused(problem) {
+  return { ok: false, stdout: "", stderr: problem, durationMs: 0, timedOut: false };
+}
 function buildLibrary(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
-  return run2(tc, (0, import_node_path42.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  const problem = proofsWorkspaceProblem(root);
+  if (problem) return refused(problem);
+  return run2(tc, (0, import_node_path43.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
-function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
-  return runAsync(tc, (0, import_node_path42.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+async function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
+  const problem = proofsWorkspaceProblem(root);
+  if (problem) return refused(problem);
+  return runAsync(tc, (0, import_node_path43.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 function isModelInRoot(modelsAbs, rel) {
-  if (!rel.endsWith(".lean") || (0, import_node_path42.isAbsolute)(rel) || rel.startsWith("..")) return false;
+  if (!rel.endsWith(".lean") || (0, import_node_path43.isAbsolute)(rel) || rel.startsWith("..")) return false;
   return statRegularInRoot(modelsAbs, rel).ok;
 }
 function resolveModelFile(root, arg) {
-  const modelsAbs = (0, import_node_path42.join)(root, MODELS_DIR);
-  const asPath = (0, import_node_path42.relative)(modelsAbs, (0, import_node_path42.isAbsolute)(arg) ? arg : (0, import_node_path42.resolve)(root, arg));
+  const modelsAbs = (0, import_node_path43.join)(root, MODELS_DIR);
+  const asPath = (0, import_node_path43.relative)(modelsAbs, (0, import_node_path43.isAbsolute)(arg) ? arg : (0, import_node_path43.resolve)(root, arg));
   const candidates2 = arg.includes("/") || arg.includes("\\") ? [asPath] : [arg, `${arg}.lean`];
   for (const rel of candidates2) {
-    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path42.join)(modelsAbs, rel);
+    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path43.join)(modelsAbs, rel);
   }
   return null;
 }
 function listModelFiles(root) {
-  const modelsAbs = (0, import_node_path42.join)(root, MODELS_DIR);
-  if (!(0, import_node_fs57.existsSync)(modelsAbs)) return [];
-  return (0, import_node_fs57.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path42.join)(modelsAbs, f));
+  const modelsAbs = (0, import_node_path43.join)(root, MODELS_DIR);
+  if (!(0, import_node_fs58.existsSync)(modelsAbs)) return [];
+  return (0, import_node_fs58.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path43.join)(modelsAbs, f));
 }
 function trimDiagnostics(text) {
   return text.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
 }
 function checkModel(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path42.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path42.relative)(proofsAbs, modelFile);
-  const res = run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
+  const proofsAbs = (0, import_node_path43.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path43.relative)(proofsAbs, modelFile);
+  const problem = proofsWorkspaceProblem(root);
+  const res = problem ? refused(problem) : run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 async function checkModelAsync(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path42.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path42.relative)(proofsAbs, modelFile);
-  const res = await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
+  const proofsAbs = (0, import_node_path43.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path43.relative)(proofsAbs, modelFile);
+  const problem = proofsWorkspaceProblem(root);
+  const res = problem ? refused(problem) : await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 function toReport(res, root, modelFile, timeoutMs) {
   const parsed = parseVerityLines(res.stdout);
   const combined = `${res.stdout}
 ${res.stderr}`;
-  const name2 = parsed.header?.model ?? (0, import_node_path42.basename)(modelFile, ".lean");
+  const name2 = parsed.header?.model ?? (0, import_node_path43.basename)(modelFile, ".lean");
   const report = {
     model: name2,
-    file: (0, import_node_path42.relative)(root, modelFile),
+    file: (0, import_node_path43.relative)(root, modelFile),
     ok: res.ok,
     header: parsed.header,
     properties: parsed.properties,
@@ -36028,33 +36113,18 @@ function writeResult(root, report) {
 function isCrashTrace(trace) {
   return trace.some((s) => /\b(crash\w*|kill\w*|restart\w*|interrupt\w*|power|abort\w*|process (dies|exit\w*)|lost (reply|response))\b/i.test(s));
 }
-var SEVERITY_BY_IMPACT = {
-  money: "high",
-  access: "high",
-  data: "high",
-  external: "high",
-  count: "medium",
-  cache: "medium",
-  internal: "medium",
-  // A reproduced finding always has a real code; 'none' here is a malformed answer, so it blocks.
-  none: "high"
-};
-function formalSeverity(f) {
-  return f.impact && SEVERITY_BY_IMPACT[f.impact] || "high";
-}
 function mergeFormalFindings(response, outcome, pushedFiles) {
-  if (!outcome) return { blocking: 0, warning: 0 };
+  if (!outcome) return { blocking: 0 };
   const norm2 = (p) => p.replace(/\\/g, "/");
   const pushed = new Set(pushedFiles.map(norm2));
-  const reproduced = outcome.findings.filter((f) => f.verdict === "reproduced" && !f.waived && pushed.has(norm2(f.file)));
-  if (reproduced.length === 0) return { blocking: 0, warning: 0 };
-  const blocking = reproduced.filter((f) => formalSeverity(f) === "high");
+  const blocking = outcome.findings.filter((f) => f.verdict === "reproduced" && !f.waived && pushed.has(norm2(f.file)));
+  if (blocking.length === 0) return { blocking: 0 };
   const existing = Array.isArray(response.findings) ? response.findings : [];
   response.findings = [
     ...existing,
-    ...reproduced.map((f) => ({
+    ...blocking.map((f) => ({
       pattern_id: "formal-counterexample",
-      severity: formalSeverity(f),
+      severity: "high",
       scope: "change",
       file: f.file,
       line: outcome.target?.lines?.from ?? null,
@@ -36062,15 +36132,14 @@ function mergeFormalFindings(response, outcome, pushedFiles) {
       // as a title it read backwards (e2e, 2026-09-26). A trace that needs a
       // crash between two writes is labelled: reproducing it means injecting
       // the crash, so it is a crash-consistency finding, not a race.
-      title: `Formal: ${terminalText(f.symbol, 128)} breaks "${terminalText(f.desc, 280)}"${isCrashTrace(f.trace) ? " after a crash (crash consistency)" : ""} \u2014 reproduced on the real code${f.impact && f.impact !== "none" ? ` (impact: ${f.impact})` : ""}`,
+      title: `Formal: ${terminalText(f.symbol, 128)} breaks "${terminalText(f.desc, 280)}"${isCrashTrace(f.trace) ? " after a crash (crash consistency)" : ""} \u2014 reproduced on the real code`,
       description: terminalText(f.reason ?? "", 2e3),
       fix: { description: `Trace: ${terminalText(f.trace.join(" \u2192 ") || "(initial state)", 2e3)}. Replay: ${terminalText(f.reason ?? "reproduced in the container", 2e3)}` },
       source: "formal"
     }))
   ];
-  if (blocking.length > 0) response.gate_decision = "FAIL";
-  else if (response.gate_decision === "PASS" || response.gate_decision == null) response.gate_decision = "WARN";
-  return { blocking: blocking.length, warning: reproduced.length - blocking.length };
+  if (response.gate_decision !== "FAIL") response.gate_decision = "FAIL";
+  return { blocking: blocking.length };
 }
 // src/lib/prove/scalpel.ts
@@ -36237,20 +36306,28 @@ function isEligible(s, largePush) {
 function intersects(a, ranges) {
   return ranges.some((b) => a.from <= b.to && b.from <= a.to);
 }
+function isLocalState(root, rel) {
+  return repoControlled(root, rel) === null;
+}
+function nonNegative(v) {
+  return typeof v === "number" && Number.isFinite(v) && v > 0 ? v : 0;
+}
 function readLedger(root) {
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const empty = { day: today, models: 0, costUsd: 0 };
+  if (!isLocalState(root, AUTO_LEDGER)) return empty;
   const read2 = readRegularFileInRoot(root, AUTO_LEDGER, 4096);
   if (!read2.ok) return empty;
   try {
     const o = JSON.parse(read2.content);
     if (o.day !== today || typeof o.models !== "number") return empty;
-    return { day: today, models: o.models, costUsd: typeof o.costUsd === "number" && Number.isFinite(o.costUsd) ? o.costUsd : 0 };
+    return { day: today, models: nonNegative(o.models), costUsd: nonNegative(o.costUsd) };
   } catch {
     return empty;
   }
 }
 function writeLedger(root, l) {
+  if (!isLocalState(root, AUTO_LEDGER)) return;
   try {
     writeFileInRootNoFollow(root, AUTO_LEDGER, JSON.stringify(l) + "\n");
   } catch {
@@ -36263,6 +36340,7 @@ function addLedgerCost(root, usd) {
 }
 var FINDINGS_FILE = `${PROOFS_DIR}/.results/.findings.json`;
 function readPersistedFindings(root) {
+  if (!isLocalState(root, FINDINGS_FILE)) return [];
   const read2 = readRegularFileInRoot(root, FINDINGS_FILE, 256 * 1024);
   if (!read2.ok) return [];
   try {
@@ -36286,6 +36364,7 @@ function waiveFormalFindings(root, file, reason) {
   return n;
 }
 function writePersistedFindings(root, findings) {
+  if (!isLocalState(root, FINDINGS_FILE)) return;
   try {
     writeFileInRootNoFollow(root, FINDINGS_FILE, JSON.stringify({ findings: findings.slice(0, 50) }, null, 2) + "\n");
   } catch {
@@ -36379,9 +36458,7 @@ async function runFormalPhase(input) {
         symbol: f.symbol,
         verdict: "reproduced",
         reason: f.waived ? `waived ${f.waived.at.slice(0, 10)}: ${f.waived.reason} (standing since ${f.at.slice(0, 10)}; the file has not changed)` : `${f.reason ?? "reproduced on the real code"} (standing since ${f.at.slice(0, 10)}; the file has not changed)`,
-        ...f.waived ? { waived: true } : {},
-        // A hand-edited file cannot invent a code: unknown values read as absent (HIGH).
-        ...isImpact(f.impact) ? { impact: f.impact } : {}
+        ...f.waived ? { waived: true } : {}
       });
     }
   }
@@ -36420,6 +36497,7 @@ async function runFormalPhase(input) {
     return done({ status: "skipped", skip: "not-eligible", detail: `${best.file}: ${isEligible(best, largePush).why}` });
   }
   const ranked = await deps.rank(eligible, root, input.changedLines);
+  if (!ranked.ok && ranked.disabled) return done({ status: "skipped", skip: "disabled-by-server", detail: ranked.error });
   if (ranked.ok) spend(ranked);
   candidates2 = ranked.ranked.slice(0, 5).map((c) => ({ file: c.file, symbol: c.ai?.symbol ?? null, score: c.ai?.score ?? null, criteria: c.ai?.criteria ?? null, reasked: !!c.ai?.reasked, reasons: (c.ai?.reasons ?? []).map((r) => r.slice(0, 200)) }));
   if (cancelled()) return done({ status: "skipped", skip: "deadline", detail: "cut off after ranking" });
@@ -36560,7 +36638,7 @@ async function runFormalPhase(input) {
     modelName = gen.name;
     const rel = `${AUTO_MODELS_DIR}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path43.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path44.join)(root, rel);
     progress.model = { name: gen.name, file: rel, rounds: round };
     progress.step = "check";
     report = await deps.check(root, abs);
@@ -36654,7 +36732,7 @@ async function runFormalPhase(input) {
       continue;
     }
     const verdict = r.verdict === "reproduced" ? "reproduced" : r.verdict === "diverged" ? "diverged" : r.verdict === "unreplayable" ? "model-only" : "unverified";
-    findings.push({ ...baseOf(p), verdict, reason: r.reason || r.downgrade || void 0, ...verdict === "reproduced" && r.impact ? { impact: r.impact } : {} });
+    findings.push({ ...baseOf(p), verdict, reason: r.reason || r.downgrade || void 0 });
   }
   const reproduced = findings.filter((f) => f.verdict === "reproduced");
   if (reproduced.length > 0 && !cancelled()) {
@@ -36662,7 +36740,7 @@ async function runFormalPhase(input) {
     const others = readPersistedFindings(root).filter((f) => f.file !== top.file);
     writePersistedFindings(root, [
       ...others,
-      ...reproduced.map((f) => ({ file: f.file, symbol: f.symbol, sha256: sha2562, property: f.property, desc: f.desc, kind: f.kind, trace: f.trace, model: modelName, reason: f.reason, ...f.impact ? { impact: f.impact } : {}, ...lines ? { lines } : {}, at: now }))
+      ...reproduced.map((f) => ({ file: f.file, symbol: f.symbol, sha256: sha2562, property: f.property, desc: f.desc, kind: f.kind, trace: f.trace, model: modelName, reason: f.reason, ...lines ? { lines } : {}, at: now }))
     ]);
   }
   const clean2 = findings.every((f) => f.verdict === "diverged");
@@ -36682,7 +36760,7 @@ async function runFormalPhase(input) {
   return done({
     status: "checked",
     target,
-    model: { name: modelName, file: (0, import_node_path43.relative)(root, (0, import_node_path43.join)(root, modelFile)), rounds },
+    model: { name: modelName, file: (0, import_node_path44.relative)(root, (0, import_node_path44.join)(root, modelFile)), rounds },
     properties: report.properties,
     findings
   });
@@ -36745,7 +36823,7 @@ async function generateAndCheck(root, req, opts) {
     }
     const rel = `${dir}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path43.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path44.join)(root, rel);
     const report = await opts.deps.check(root, abs);
     const abstracts = report.header?.abstracts ?? [];
     const stray = abstracts.find((a) => !headerFiles.has(a.file)) ?? (abstracts[0] && abstracts[0].file !== req.file ? abstracts[0] : void 0);
@@ -36783,6 +36861,8 @@ async function prepareFormalPhase(root, env = process.env, auth2, readSource, co
   const apiKey = direct ? env.OPENAI_API_KEY : void 0;
   const toolchain = findToolchain(env);
   if (!toolchain) return { ok: false, skip: "no-toolchain" };
+  const untrusted = proofsWorkspaceProblem(root);
+  if (untrusted) return { ok: false, skip: "workspace-untrusted", detail: untrusted.slice(0, 200) };
   try {
     scaffoldProofs(root);
   } catch (err2) {
@@ -36872,7 +36952,7 @@ var EXCERPT_SOURCE_MAX_BYTES = 2 * 1024 * 1024;
 var WRITERS_BUDGET_MS = 1500;
 var EXCERPT_MAX_LINES2 = 30;
 var GUARD_BLOCK_CAP = 2;
-var GUARD_ITER_FILE = (0, import_node_path44.join)(VERITY_DIR, ".guard-iteration");
+var GUARD_ITER_FILE = (0, import_node_path45.join)(VERITY_DIR, ".guard-iteration");
 function readPreToolUseStdin() {
   const empty = { command: "", cwd: null, sessionId: null };
   return new Promise((resolve8) => {
@@ -36917,7 +36997,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs58.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs59.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -36937,10 +37017,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs58.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs59.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs58.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs59.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -36950,10 +37030,10 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs58.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs58.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs59.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs59.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs58.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs58.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs59.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs59.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
@@ -37023,7 +37103,7 @@ function hasBlockingFinding(response, sentFiles) {
 function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedIntent, coverageTelemetry) {
   const analyzable = filterAnalyzable(files);
   const securityFiles = filterSecurity(files);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs58.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs59.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const trigger = moment === "pre-commit" ? "hook:pre-commit" : "hook:pre-push";
   const requestBody = {
@@ -37400,8 +37480,6 @@ async function runGuard(opts, globals) {
       rounds: formalOutcome.model?.rounds ?? null,
       properties: formalOutcome.properties?.map((p) => `${p.id}:${p.result}`) ?? [],
       findings: formalOutcome.findings.map((f) => `${f.property}:${f.verdict}`),
-      // Decision 82: the replay's impact code per reproduced finding; count/cache/internal warn, the rest block.
-      impacts: formalOutcome.findings.filter((f) => f.impact).map((f) => `${f.property}:${f.impact}`),
       // Decision 81: what each property rests on (a rule, or "line"), what was
       // sent back or dropped as ungrounded, and which counterexamples lack their
       // property's trigger (shadow). Ids and rule names only, never code.
@@ -37643,7 +37721,7 @@ function registerIgnoreCommand(program2) {
 // src/commands/waive.ts
 var import_node_crypto19 = require("node:crypto");
-var import_node_fs59 = require("node:fs");
+var import_node_fs60 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -37672,7 +37750,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body2.file = opts.file;
       try {
-        body2.file_sha256 = (0, import_node_crypto19.createHash)("sha256").update((0, import_node_fs59.readFileSync)(opts.file)).digest("hex");
+        body2.file_sha256 = (0, import_node_crypto19.createHash)("sha256").update((0, import_node_fs60.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -37697,10 +37775,10 @@ function registerWaiveCommand(program2) {
 }
 // src/commands/init.ts
-var import_node_fs64 = require("node:fs");
+var import_node_fs65 = require("node:fs");
 var import_promises20 = require("node:fs/promises");
 var import_yaml6 = __toESM2(require_dist());
-var import_node_path48 = require("node:path");
+var import_node_path49 = require("node:path");
 var import_node_child_process19 = require("node:child_process");
 // src/lib/banner.ts
@@ -37779,7 +37857,7 @@ function printPhase(n, of, title, subtitle) {
 }
 // src/commands/doctor.ts
-var import_node_fs60 = require("node:fs");
+var import_node_fs61 = require("node:fs");
 // src/lib/prereqs.ts
 var import_node_child_process16 = require("node:child_process");
@@ -37987,11 +38065,11 @@ async function buildReport() {
   const hooks = wiring.status;
   const provenance = cliProvenance();
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs60.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs61.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs60.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs61.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs60.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs61.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -38121,9 +38199,11 @@ function registerDoctorCommand(program2) {
     printInfo(`  Stop (verity analyze): ${report.hooks.stop ? plugin ? "on (plugin)" : "on" : "off"}`);
     printInfo(`  Git-moment gate: ${report.hooks.guardOn.length ? report.hooks.guardOn.join(", ") : "off"}`);
     {
-      const formal = readProjectConfig().formal === "push";
+      const cfg = readProjectConfig();
+      const formal = cfg.formal === "push";
       const tc = formal ? findToolchain() : null;
       printInfo(`  Formal verification (push): ${formal ? `on, Lean ${tc ? "\u2713" : "MISSING \u2014 verity lean install"} (ranking, model writing and replay run on the Verity service with your login)` : "off"}`);
+      if (cfg.formal_refused) printWarn(`    ${formalRefusalMessage(cfg.formal_refused)}`);
     }
     printInfo(`  Infra (intent/baseline/compact/session-end): ${[report.hooks.intent, report.hooks.baseline, report.hooks.compact, report.hooks.sessionEnd].filter(Boolean).length}/4`);
     printInfo(`Telemetry: ${report.telemetry.enabled ? `enabled \u2192 ${report.telemetry.endpoint}` : "disabled"}`);
@@ -38148,8 +38228,8 @@ function registerDoctorCommand(program2) {
 }
 // src/commands/migrate.ts
-var import_node_fs61 = require("node:fs");
-var import_node_path45 = require("node:path");
+var import_node_fs62 = require("node:fs");
+var import_node_path46 = require("node:path");
 var import_node_child_process17 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
 function defaultNpmRemover(pkg) {
@@ -38186,12 +38266,12 @@ async function runMigration(opts = {}) {
   return { actions, migrated: actions.length > 0 };
 }
 function migrateProjectDir(root, actions) {
-  const gateDir = (0, import_node_path45.join)(root, ".gate");
-  const verityDir = (0, import_node_path45.join)(root, ".verity");
-  if ((0, import_node_fs61.existsSync)(gateDir) && !(0, import_node_fs61.existsSync)(verityDir)) {
+  const gateDir = (0, import_node_path46.join)(root, ".gate");
+  const verityDir = (0, import_node_path46.join)(root, ".verity");
+  if ((0, import_node_fs62.existsSync)(gateDir) && !(0, import_node_fs62.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs61.existsSync)(gateDir) && (0, import_node_fs61.existsSync)(verityDir)) {
+  if ((0, import_node_fs62.existsSync)(gateDir) && (0, import_node_fs62.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -38212,13 +38292,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs61.existsSync)(gateDir)) {
+    if ((0, import_node_fs62.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs61.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs62.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -38234,18 +38314,18 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs61.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs62.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
 }
 function migrateGlobalCredentials(home, actions) {
   if (!home) return;
-  const gateCreds = (0, import_node_path45.join)(home, ".gate", "credentials");
-  const verityCreds = (0, import_node_path45.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs61.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs61.existsSync)(verityCreds)) {
-    (0, import_node_fs61.mkdirSync)((0, import_node_path45.join)(home, ".verity"), { recursive: true });
+  const gateCreds = (0, import_node_path46.join)(home, ".gate", "credentials");
+  const verityCreds = (0, import_node_path46.join)(home, ".verity", "credentials");
+  if (!(0, import_node_fs62.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs62.existsSync)(verityCreds)) {
+    (0, import_node_fs62.mkdirSync)((0, import_node_path46.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -38267,8 +38347,8 @@ async function migrateLegacyHooks(root, actions) {
   }
 }
 async function migrateClaudeMd(root, actions) {
-  const claudeMd = (0, import_node_path45.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs61.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const claudeMd = (0, import_node_path46.join)(root, "CLAUDE.md");
+  const hadLegacyBlock = (0, import_node_fs62.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -38278,9 +38358,9 @@ async function migrateClaudeMd(root, actions) {
   }
 }
 function migrateStandardFile(root, actions) {
-  const gateMd = (0, import_node_path45.join)(root, "GATE.md");
-  const verityMd = (0, import_node_path45.join)(root, "VERITY.md");
-  if (!(0, import_node_fs61.existsSync)(gateMd) || (0, import_node_fs61.existsSync)(verityMd)) return;
+  const gateMd = (0, import_node_path46.join)(root, "GATE.md");
+  const verityMd = (0, import_node_path46.join)(root, "VERITY.md");
+  if (!(0, import_node_fs62.existsSync)(gateMd) || (0, import_node_fs62.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -38292,12 +38372,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs61.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs62.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
-  const file = (0, import_node_path45.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs61.existsSync)(file)) return;
+  const file = (0, import_node_path46.join)(root, ".claude", "settings.local.json");
+  if (!(0, import_node_fs62.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -38345,14 +38425,14 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
   }
   if (toAppend.length > 0) {
     const sep5 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs61.writeFileSync)(verityCreds, verityContent + sep5 + toAppend.join("\n") + "\n");
+    (0, import_node_fs62.writeFileSync)(verityCreds, verityContent + sep5 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs61.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs62.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs61.readFileSync)(path, "utf-8");
+    return (0, import_node_fs62.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -38367,35 +38447,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs61.renameSync)(from, to);
+    (0, import_node_fs62.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs61.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs61.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs62.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs62.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs61.renameSync)(from, to);
+    (0, import_node_fs62.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs61.cpSync)(from, to);
-    (0, import_node_fs61.rmSync)(from, { force: true });
+    (0, import_node_fs62.cpSync)(from, to);
+    (0, import_node_fs62.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
-    const srcDir = (0, import_node_path45.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs61.readdirSync)(srcDir)) {
-      const rel = relDir ? (0, import_node_path45.join)(relDir, entry) : entry;
-      const src = (0, import_node_path45.join)(gateDir, rel);
-      const dest = (0, import_node_path45.join)(verityDir, rel);
-      if ((0, import_node_fs61.statSync)(src).isDirectory()) {
+    const srcDir = (0, import_node_path46.join)(gateDir, relDir);
+    for (const entry of (0, import_node_fs62.readdirSync)(srcDir)) {
+      const rel = relDir ? (0, import_node_path46.join)(relDir, entry) : entry;
+      const src = (0, import_node_path46.join)(gateDir, rel);
+      const dest = (0, import_node_path46.join)(verityDir, rel);
+      if ((0, import_node_fs62.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs61.existsSync)(dest)) {
-        (0, import_node_fs61.mkdirSync)((0, import_node_path45.dirname)(dest), { recursive: true });
-        (0, import_node_fs61.cpSync)(src, dest);
+      } else if (!(0, import_node_fs62.existsSync)(dest)) {
+        (0, import_node_fs62.mkdirSync)((0, import_node_path46.dirname)(dest), { recursive: true });
+        (0, import_node_fs62.cpSync)(src, dest);
         copied++;
       }
     }
@@ -38404,22 +38484,22 @@ function carryLegacyContents(gateDir, verityDir) {
   return copied;
 }
 async function needsMigration(root = repoRoot()) {
-  const gateDir = (0, import_node_path45.join)(root, ".gate");
-  const verityDir = (0, import_node_path45.join)(root, ".verity");
-  if ((0, import_node_fs61.existsSync)(gateDir) && !(0, import_node_fs61.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs61.existsSync)(gateDir) && (0, import_node_fs61.existsSync)(verityDir)) {
-    if ((0, import_node_fs61.existsSync)((0, import_node_path45.join)(gateDir, "credentials")) && !(0, import_node_fs61.existsSync)((0, import_node_path45.join)(verityDir, "credentials"))) {
+  const gateDir = (0, import_node_path46.join)(root, ".gate");
+  const verityDir = (0, import_node_path46.join)(root, ".verity");
+  if ((0, import_node_fs62.existsSync)(gateDir) && !(0, import_node_fs62.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs62.existsSync)(gateDir) && (0, import_node_fs62.existsSync)(verityDir)) {
+    if ((0, import_node_fs62.existsSync)((0, import_node_path46.join)(gateDir, "credentials")) && !(0, import_node_fs62.existsSync)((0, import_node_path46.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs61.existsSync)((0, import_node_path45.join)(gateDir, "memory")) && !(0, import_node_fs61.existsSync)((0, import_node_path45.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs62.existsSync)((0, import_node_path46.join)(gateDir, "memory")) && !(0, import_node_fs62.existsSync)((0, import_node_path46.join)(verityDir, "memory"))) {
       return true;
     }
   }
-  const claudeMd = (0, import_node_path45.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs61.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  const claudeMd = (0, import_node_path46.join)(root, "CLAUDE.md");
+  if ((0, import_node_fs62.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs61.existsSync)((0, import_node_path45.join)(root, "GATE.md")) && !(0, import_node_fs61.existsSync)((0, import_node_path45.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs62.existsSync)((0, import_node_path46.join)(root, "GATE.md")) && !(0, import_node_fs62.existsSync)((0, import_node_path46.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -38700,15 +38780,31 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 // src/lib/prove/lean-install.ts
-var import_node_fs62 = require("node:fs");
+var import_node_fs63 = require("node:fs");
 var import_node_crypto20 = require("node:crypto");
 var import_node_child_process18 = require("node:child_process");
 var import_node_os10 = require("node:os");
-var import_node_path46 = require("node:path");
+var import_node_path47 = require("node:path");
 var import_promises18 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
 var RELEASES = "https://releases.lean-lang.org/lean4";
 var LEAN_DOWNLOAD_SIZE = "\u2248800 MB download, 2.7 GB on disk";
+var DOWNLOAD_STALL_MS = 6e4;
+var LEAN_DISK_NEEDED_BYTES = 3.75 * 1024 ** 3;
+function freeBytes(dir) {
+  let d = dir;
+  for (let i2 = 0; i2 < 64; i2++) {
+    try {
+      const st = (0, import_node_fs63.statfsSync)(d);
+      return Number(st.bavail) * Number(st.bsize);
+    } catch {
+      const up = (0, import_node_path47.join)(d, "..");
+      if (up === d) return null;
+      d = up;
+    }
+  }
+  return null;
+}
 var LEAN_ASSET_SHA256 = {
   "v4.34.0": {
     "lean-4.34.0-darwin.zip": "75a2a4b8e3d35680e8f51fae5a42c79702f463dd73ee1520fb61e5a9143e336c",
@@ -38724,7 +38820,7 @@ function expectedSha256(asset, version = pinnedVersion()) {
 function sha256File(path) {
   return new Promise((resolve8, reject) => {
     const hash = (0, import_node_crypto20.createHash)("sha256");
-    (0, import_node_fs62.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve8(hash.digest("hex"))).on("error", reject);
+    (0, import_node_fs63.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve8(hash.digest("hex"))).on("error", reject);
   });
 }
 async function verifyDownload(zip, asset, version = pinnedVersion()) {
@@ -38744,7 +38840,7 @@ function leanAssetName(version = pinnedVersion()) {
   return suffix ? `lean-${v}-${suffix}.zip` : null;
 }
 function pinnedVersionDir(env = process.env) {
-  return (0, import_node_path46.join)(verityLeanHome(env), pinnedVersion());
+  return (0, import_node_path47.join)(verityLeanHome(env), pinnedVersion());
 }
 function lakeBinary() {
   return (0, import_node_os10.platform)() === "win32" ? "lake.exe" : "lake";
@@ -38755,29 +38851,44 @@ function unzip(zip, dest) {
   for (const [cmd, args2] of attempts) {
     try {
       (0, import_node_child_process18.execFileSync)(cmd, args2, { stdio: ["ignore", "ignore", "pipe"], timeout: 15 * 6e4 });
-      if ((0, import_node_fs62.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
+      if ((0, import_node_fs63.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
       errors.push(`${cmd}: produced nothing`);
     } catch (err2) {
       errors.push(`${cmd}: ${String(err2.message).split("\n")[0].slice(0, 120)}`);
       try {
-        for (const e of (0, import_node_fs62.readdirSync)(dest)) (0, import_node_fs62.rmSync)((0, import_node_path46.join)(dest, e), { recursive: true, force: true });
+        for (const e of (0, import_node_fs63.readdirSync)(dest)) (0, import_node_fs63.rmSync)((0, import_node_path47.join)(dest, e), { recursive: true, force: true });
       } catch {
       }
     }
   }
   return { ok: false, error: errors.join("; ") };
 }
-async function download(url, dest, onProgress) {
-  const res = await fetch(url, { redirect: "follow" });
-  if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status}`);
-  const total = Number(res.headers.get("content-length")) || null;
-  let seen = 0;
-  const stream = import_node_stream.Readable.fromWeb(res.body);
-  stream.on("data", (chunk) => {
-    seen += chunk.length;
-    onProgress(seen, total);
-  });
-  await (0, import_promises18.pipeline)(stream, (0, import_node_fs62.createWriteStream)(dest));
+async function download(url, dest, onProgress, stallMs = DOWNLOAD_STALL_MS) {
+  const ctrl = new AbortController();
+  let timer;
+  const arm = () => {
+    clearTimeout(timer);
+    timer = setTimeout(() => ctrl.abort(), stallMs);
+  };
+  arm();
+  try {
+    const res = await fetch(url, { redirect: "follow", signal: ctrl.signal });
+    if (!res.ok || !res.body) throw new Error(`download failed: HTTP ${res.status}`);
+    const total = Number(res.headers.get("content-length")) || null;
+    let seen = 0;
+    const stream = import_node_stream.Readable.fromWeb(res.body);
+    stream.on("data", (chunk) => {
+      arm();
+      seen += chunk.length;
+      onProgress(seen, total);
+    });
+    await (0, import_promises18.pipeline)(stream, (0, import_node_fs63.createWriteStream)(dest), { signal: ctrl.signal });
+  } catch (err2) {
+    if (ctrl.signal.aborted) throw new Error(`download stalled: nothing received for ${Math.round(stallMs / 1e3)} s`);
+    throw err2;
+  } finally {
+    clearTimeout(timer);
+  }
 }
 function inPlaceProgress(label2, write = (s) => process.stderr.write(s)) {
   let active = false;
@@ -38815,10 +38926,16 @@ async function installLean(opts = {}) {
   const dir = pinnedVersionDir(env);
   const url = `${RELEASES}/${pinnedVersion()}/${asset}`;
   const home = verityLeanHome(env);
-  const tmp = (0, import_node_path46.join)(home, ".tmp");
-  (0, import_node_fs62.rmSync)(tmp, { recursive: true, force: true });
-  (0, import_node_fs62.mkdirSync)(tmp, { recursive: true });
-  const zip = (0, import_node_path46.join)(tmp, asset);
+  const free = freeBytes(home);
+  const needed = opts.minFreeBytes ?? LEAN_DISK_NEEDED_BYTES;
+  if (free !== null && free < needed) {
+    const gb = (n) => (n / 1024 ** 3).toFixed(1);
+    return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
+  }
+  const tmp = (0, import_node_path47.join)(home, ".tmp");
+  (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs63.mkdirSync)(tmp, { recursive: true });
+  const zip = (0, import_node_path47.join)(tmp, asset);
   say(`downloading ${url}`);
   let lastPct = -1;
   try {
@@ -38831,40 +38948,40 @@ async function installLean(opts = {}) {
       }
     });
   } catch (err2) {
-    (0, import_node_fs62.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: err2.message };
   }
   say("verifying checksum");
   const verified = await verifyDownload(zip, asset);
   if (!verified.ok) {
-    (0, import_node_fs62.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: verified.error };
   }
   say("unpacking (this takes a minute)");
-  const unpack = (0, import_node_path46.join)(tmp, "unpack");
-  (0, import_node_fs62.mkdirSync)(unpack);
+  const unpack = (0, import_node_path47.join)(tmp, "unpack");
+  (0, import_node_fs63.mkdirSync)(unpack);
   const unpacked = unzip(zip, unpack);
   if (!unpacked.ok) {
-    (0, import_node_fs62.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: `unpack failed: ${unpacked.error}` };
   }
-  const entries = (0, import_node_fs62.readdirSync)(unpack);
-  const top = entries.length === 1 && (0, import_node_fs62.statSync)((0, import_node_path46.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path46.join)(unpack, entries[0]) : unpack;
-  if (!(0, import_node_fs62.existsSync)((0, import_node_path46.join)(top, "bin", lakeBinary()))) {
-    (0, import_node_fs62.rmSync)(tmp, { recursive: true, force: true });
+  const entries = (0, import_node_fs63.readdirSync)(unpack);
+  const top = entries.length === 1 && (0, import_node_fs63.statSync)((0, import_node_path47.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path47.join)(unpack, entries[0]) : unpack;
+  if (!(0, import_node_fs63.existsSync)((0, import_node_path47.join)(top, "bin", lakeBinary()))) {
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: "the archive did not contain bin/lake" };
   }
-  (0, import_node_fs62.rmSync)(dir, { recursive: true, force: true });
-  (0, import_node_fs62.mkdirSync)(home, { recursive: true });
-  (0, import_node_fs62.renameSync)(top, dir);
-  (0, import_node_fs62.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs63.rmSync)(dir, { recursive: true, force: true });
+  (0, import_node_fs63.mkdirSync)(home, { recursive: true });
+  (0, import_node_fs63.renameSync)(top, dir);
+  (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
   return { ok: true, dir };
 }
 // src/lib/remote-config.ts
-var import_node_fs63 = require("node:fs");
+var import_node_fs64 = require("node:fs");
 var import_promises19 = require("node:fs/promises");
-var import_node_path47 = require("node:path");
+var import_node_path48 = require("node:path");
 var import_yaml5 = __toESM2(require_dist());
 var IGNORE_RIDER = "verityignore";
 async function fetchRemoteSetup(opts) {
@@ -38909,7 +39026,7 @@ async function adoptRemoteSetup(found, opts) {
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs63.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs64.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -38942,7 +39059,7 @@ async function adoptRemoteSetup(found, opts) {
 }
 async function writeOut(relative6, body2) {
   const target = projectPath(relative6);
-  await (0, import_promises19.mkdir)((0, import_node_path47.dirname)(target), { recursive: true });
+  await (0, import_promises19.mkdir)((0, import_node_path48.dirname)(target), { recursive: true });
   await (0, import_promises19.writeFile)(target, body2);
 }
 function describeRemote(found) {
@@ -39059,15 +39176,15 @@ async function runOptionalAuth(resolution, opts = {}) {
 }
 function resolveDataDir2() {
   const candidates2 = [
-    (0, import_node_path48.join)(__dirname, "..", "data"),
+    (0, import_node_path49.join)(__dirname, "..", "data"),
     // installed: node_modules/@codacy/verity-cli/data
-    (0, import_node_path48.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path49.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
-    (0, import_node_path48.join)(process.cwd(), "cli", "data")
+    (0, import_node_path49.join)(process.cwd(), "cli", "data")
     // local dev: running from repo root
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs64.existsSync)((0, import_node_path48.join)(candidate, "skills"))) {
+    if ((0, import_node_fs65.existsSync)((0, import_node_path49.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -39083,9 +39200,9 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out2 = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs64.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs65.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk2((0, import_node_path48.join)(d, e.name), rel);
+        if (e.isDirectory()) walk2((0, import_node_path49.join)(d, e.name), rel);
         else if (e.isFile()) out2.push(rel);
       }
     };
@@ -39096,8 +39213,8 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      const a = await (0, import_promises20.readFile)((0, import_node_path48.join)(src, rel), "utf-8");
-      const b = await (0, import_promises20.readFile)((0, import_node_path48.join)(dest, rel), "utf-8");
+      const a = await (0, import_promises20.readFile)((0, import_node_path49.join)(src, rel), "utf-8");
+      const b = await (0, import_promises20.readFile)((0, import_node_path49.join)(dest, rel), "utf-8");
       if (a !== b) return false;
     }
     return true;
@@ -39123,8 +39240,10 @@ var INTENSITY_CHOICES = [
   { id: "thorough", label: "thorough", hint: "all tools, all rules (~15s)" }
 ];
 var FORMAL_CHOICES = [
-  { id: "yes", label: "yes", hint: "a Lean model of the riskiest changed function; blocks only on a REPRODUCED counterexample", recommended: true },
-  { id: "no", label: "no", hint: "enable later with: verity config formal push" }
+  { id: "yes", label: "yes", hint: "a Lean model of the riskiest changed function; blocks only on a REPRODUCED counterexample" },
+  // No is the default (review of #255): "yes" downloads ≈800 MB and unpacks
+  // 2.7 GB, and a bare Enter must never do that.
+  { id: "no", label: "no", hint: "enable later with: verity config formal push", recommended: true }
 ];
 var MOMENT_CHOICES = [
   { id: "stop", label: "On stop", hint: "after every agent turn \u2014 fast feedback while you work", recommended: true },
@@ -39298,7 +39417,7 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs64.existsSync)(configPath) || !(0, import_node_fs64.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs65.existsSync)(configPath) || !(0, import_node_fs65.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
@@ -39395,17 +39514,17 @@ async function handoffToSetup(enabled, claudeInstalled) {
 async function installSkills(force, step) {
   step("Installing skills");
   const dataDir = resolveDataDir2();
-  const skillsSource = (0, import_node_path48.join)(dataDir, "skills");
+  const skillsSource = (0, import_node_path49.join)(dataDir, "skills");
   const skillsDest = ".claude/skills";
   let skillsInstalled = 0;
   for (const skill of SKILLS) {
-    const src = (0, import_node_path48.join)(skillsSource, skill);
-    const dest = (0, import_node_path48.join)(skillsDest, skill);
-    if (!(0, import_node_fs64.existsSync)(src)) {
+    const src = (0, import_node_path49.join)(skillsSource, skill);
+    const dest = (0, import_node_path49.join)(skillsDest, skill);
+    if (!(0, import_node_fs65.existsSync)(src)) {
       printWarn(`  Skill data not found: ${skill}`);
       continue;
     }
-    if ((0, import_node_fs64.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+    if ((0, import_node_fs65.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
       skillsInstalled++;
       continue;
     }
@@ -39526,16 +39645,24 @@ async function scaffoldProject(step, defaultsOnly, pluginMode, given = {}) {
 }
 async function offerFormalVerification(defaultsOnly, pluginMode) {
   const cfg = readProjectConfig();
-  const toolchain = findToolchain();
+  if (cfg.formal_refused) {
+    printWarn(`  Formal verification: off \u2014 ${formalRefusalMessage(cfg.formal_refused)}`);
+    return;
+  }
   if (cfg.formal === "push") {
-    if (toolchain) printInfo("  Formal verification at push \u2713");
+    if (findToolchain()) printInfo("  Formal verification at push \u2713");
     else printWarn("  Formal verification is on but Lean is missing \u2014 run: verity lean install");
     return;
   }
+  if (cfg.formal === "off") {
+    printInfo("  Formal verification: off (enable with: verity config formal push)");
+    return;
+  }
   if (defaultsOnly || !interactive()) {
     printInfo("  Formal verification (a model-based bug finder at push): off \u2014 enable with: verity config formal push");
     return;
   }
+  const toolchain = findToolchain();
   console.log("");
   console.log("  Formal verification review \u2014 a model-based bug finder for your riskiest code.");
   console.log("    At push, Verity picks the riskiest changed function, checks a small model of");
@@ -39543,9 +39670,10 @@ async function offerFormalVerification(defaultsOnly, pluginMode) {
   console.log("    Verity for that). Only a reproduced bug can block; most pushes get no model.");
   console.log(`    Adds /verity-prove <worry> to check any code on demand.${toolchain ? "" : ` Needs to install Lean 4 (${LEAN_DOWNLOAD_SIZE}) on "yes".`}`);
   console.log("");
-  const wants = await promptChoice("Formal verification at push?", FORMAL_CHOICES, "yes");
+  const wants = await promptChoice("Formal verification at push?", FORMAL_CHOICES, "no");
   if (wants === "yes" && pluginMode) printInfo("  Plugin: the push check works now; /verity:verity-prove arrives with the plugin's next release.");
   if (wants !== "yes") {
+    writeProjectConfig({ formal: "off" });
     printInfo("  Formal verification: off (enable later with: verity config formal push)");
     return;
   }
@@ -39596,7 +39724,7 @@ function registerInitCommand(program2) {
     const staleMarker = clearStalePluginMarker();
     const pluginMode = opts.plugin === false ? false : opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs64.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs65.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -39699,7 +39827,7 @@ function registerInitCommand(program2) {
       untrackMemory: opts.untrackMemory === true,
       untrackState: opts.untrackState === true
     });
-    const globalVerityDir = (0, import_node_path48.join)(process.env.HOME ?? "", ".verity");
+    const globalVerityDir = (0, import_node_path49.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises20.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
@@ -39774,7 +39902,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs64.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs65.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -39804,7 +39932,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.34.0-experimental.145d0fb" : "dev"
+          cli_version: true ? "0.34.0-experimental.37a6dcf" : "dev"
         }
       });
     } catch (err2) {
@@ -39854,8 +39982,8 @@ function registerInitCommand(program2) {
 }
 // src/commands/uninstall.ts
-var import_node_fs65 = require("node:fs");
-var import_node_path49 = require("node:path");
+var import_node_fs66 = require("node:fs");
+var import_node_path50 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
     const dryRun = opts.dryRun ?? false;
@@ -39864,11 +39992,11 @@ function registerUninstallCommand(program2) {
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
     for (const name2 of PROJECT_SKILL_NAMES) {
-      const dir = (0, import_node_path49.join)(skillsRoot, name2);
-      if ((0, import_node_fs65.existsSync)(dir)) {
+      const dir = (0, import_node_path50.join)(skillsRoot, name2);
+      if ((0, import_node_fs66.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name2}/`,
-          apply: () => (0, import_node_fs65.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs66.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -39882,24 +40010,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs65.existsSync)(verityDir)) {
+    if ((0, import_node_fs66.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs65.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs66.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs65.existsSync)(verityMd)) {
+      if ((0, import_node_fs66.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs65.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs66.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs65.existsSync)(path) && (0, import_node_fs65.statSync)(path).isDirectory() && (0, import_node_fs65.readdirSync)(path).length === 0) {
-        (0, import_node_fs65.rmdirSync)(path);
+      if ((0, import_node_fs66.existsSync)(path) && (0, import_node_fs66.statSync)(path).isDirectory() && (0, import_node_fs66.readdirSync)(path).length === 0) {
+        (0, import_node_fs66.rmdirSync)(path);
       }
     };
     actions.push({
@@ -39910,11 +40038,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path49.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs65.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path50.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs66.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs65.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs66.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -40108,8 +40236,8 @@ function registerTaskCommands(program2) {
 }
 // src/commands/reset.ts
-var import_node_fs66 = require("node:fs");
-var import_node_path50 = require("node:path");
+var import_node_fs67 = require("node:fs");
+var import_node_path51 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -40146,11 +40274,11 @@ function registerResetCommand(program2) {
     }
     const cacheDir = projectPath(CACHE_DIR);
     let purged = 0;
-    if ((0, import_node_fs66.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs66.readdirSync)(cacheDir)) {
+    if ((0, import_node_fs67.existsSync)(cacheDir)) {
+      for (const entry of (0, import_node_fs67.readdirSync)(cacheDir)) {
         if (entry.startsWith("pending-")) {
           try {
-            (0, import_node_fs66.unlinkSync)((0, import_node_path50.join)(cacheDir, entry));
+            (0, import_node_fs67.unlinkSync)((0, import_node_path51.join)(cacheDir, entry));
             purged++;
           } catch {
           }
@@ -40165,19 +40293,19 @@ function registerResetCommand(program2) {
       projectPath(`${VERITY_DIR}/.last-analysis`)
     ];
     for (const file of filesToClear) {
-      if ((0, import_node_fs66.existsSync)(file)) {
+      if ((0, import_node_fs67.existsSync)(file)) {
         try {
-          (0, import_node_fs66.writeFileSync)(file, "");
+          (0, import_node_fs67.writeFileSync)(file, "");
         } catch {
         }
       }
     }
     if (opts.all) {
       const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs66.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs66.readdirSync)(logsDir)) {
+      if ((0, import_node_fs67.existsSync)(logsDir)) {
+        for (const entry of (0, import_node_fs67.readdirSync)(logsDir)) {
           try {
-            (0, import_node_fs66.unlinkSync)((0, import_node_path50.join)(logsDir, entry));
+            (0, import_node_fs67.unlinkSync)((0, import_node_path51.join)(logsDir, entry));
           } catch {
           }
         }
@@ -40189,7 +40317,7 @@ function registerResetCommand(program2) {
 }
 // src/commands/reflect.ts
-var import_node_fs67 = require("node:fs");
+var import_node_fs68 = require("node:fs");
 // src/lib/reflection-globs.ts
 var MAX_GLOBS = 6;
@@ -40227,7 +40355,7 @@ async function writeNodeToDisk(args2) {
       { treePaths: listTrackedFiles(), recordBaseline: false }
     );
     if (written === 0) return false;
-    return (0, import_node_fs67.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
+    return (0, import_node_fs68.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
   } catch {
     return false;
   }
@@ -40659,9 +40787,9 @@ function registerRunCommand(program2) {
 }
 // src/commands/telemetry.ts
-var import_node_fs68 = require("node:fs");
+var import_node_fs69 = require("node:fs");
 async function recordTelemetryChoice(choice) {
-  if (!(0, import_node_fs68.existsSync)(projectPath(SETUP_STATE_FILE))) return;
+  if (!(0, import_node_fs69.existsSync)(projectPath(SETUP_STATE_FILE))) return;
   try {
     if ((await readSetupState())?.telemetry === choice) return;
     await writeSetupState({ telemetry: choice });
@@ -40738,8 +40866,8 @@ function registerTelemetryCommands(program2) {
 }
 // src/commands/prove.ts
-var import_node_fs69 = require("node:fs");
-var import_node_path51 = require("node:path");
+var import_node_fs70 = require("node:fs");
+var import_node_path52 = require("node:path");
 // src/lib/prove/hint-pool.ts
 var STOP2 = /* @__PURE__ */ new Set([
@@ -40875,7 +41003,7 @@ function registerProveCommand(program2) {
       process.exit(2);
     }
     const limit = Math.max(1, Math.min(50, Number(opts.limit) || 10));
-    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path51.relative)(root, (0, import_node_path51.resolve)(p)) || ".") });
+    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path52.relative)(root, (0, import_node_path52.resolve)(p)) || ".") });
     if (opts.hint && paths.length === 0) {
       const hit = hintMatches(root, opts.hint);
       if (hit.files.length > 0) {
@@ -40929,7 +41057,7 @@ function registerProveCommand(program2) {
   });
   prove.command("check [model]").description("Elaborate a model (or every model) with the local Lean toolchain and report each property").option("--timeout <ms>", "Per-model timeout in ms", "120000").option("--json", "Machine-readable output").action((model, opts) => {
     const root = repoRoot();
-    if (!(0, import_node_fs69.existsSync)((0, import_node_path51.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs70.existsSync)((0, import_node_path52.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -40953,7 +41081,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
     const reports = [];
     for (const f of files) {
       const report = checkModel(tc, root, f, { timeoutMs: Math.max(1e3, Number(opts.timeout) || 12e4) });
-      report.file = (0, import_node_path51.relative)(root, f);
+      report.file = (0, import_node_path52.relative)(root, f);
       reports.push(report);
       try {
         writeResult(root, report);
@@ -40991,7 +41119,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
       printError("Not logged in \u2014 replays run on the Verity service. Run `verity login` first.");
       process.exit(2);
     }
-    if (!(0, import_node_fs69.existsSync)((0, import_node_path51.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs70.existsSync)((0, import_node_path52.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41022,7 +41150,7 @@ ${report.error ?? ""}`);
       printInfo(opts.property ? `${model} ${opts.property} has no counterexample to replay` : `${model} has no counterexample to replay`);
       return;
     }
-    const modelSource = readRegularFileInRoot(root, (0, import_node_path51.relative)(root, file), 512 * 1024);
+    const modelSource = readRegularFileInRoot(root, (0, import_node_path52.relative)(root, file), 512 * 1024);
     if (!opts.json) printInfo(`replaying ${targets.length} counterexample(s) of ${model} in network-less containers (${Math.min(targets.length, REPLAY_CONCURRENCY)} at a time)\u2026`);
     const outcomes = await mapPool(targets, REPLAY_CONCURRENCY, async (p) => {
       const brief = buildReplayBrief(root, report, p, modelSource.ok ? modelSource.content : "");
@@ -41042,7 +41170,7 @@ ${report.error ?? ""}`);
   });
   prove.command("auto [files...]").description("The formal phase the pre-push guard runs: select one risky symbol among changed files, generate a model, check it, replay counterexamples (default files: the commits ahead of upstream)").option("--deadline <ms>", "Budget for the whole phase", "170000").option("--json", "Machine-readable output").action(async (paths, opts) => {
     const root = repoRoot();
-    let files = paths.map((p) => (0, import_node_path51.relative)(root, (0, import_node_path51.resolve)(p)));
+    let files = paths.map((p) => (0, import_node_path52.relative)(root, (0, import_node_path52.resolve)(p)));
     if (files.length === 0) {
       const ahead = runGitSync(root, ["diff", "--name-only", "@{upstream}...HEAD"]);
       const fallback = ahead.ok ? ahead : runGitSync(root, ["diff", "--name-only", "HEAD~1..HEAD"]);
@@ -41102,7 +41230,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
     let revise;
     if (opts.revise) {
       const existing = resolveModelFile(root, opts.revise);
-      const src = existing ? readRegularFileInRoot(root, (0, import_node_path51.relative)(root, existing), 64 * 1024) : null;
+      const src = existing ? readRegularFileInRoot(root, (0, import_node_path52.relative)(root, existing), 64 * 1024) : null;
       if (!src || !src.ok || !opts.note) {
         printError('--revise needs an existing model under Models/ and --note "<what the replay showed>"');
         process.exit(2);
@@ -41141,8 +41269,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("waive <file>").description("Dismiss the remembered formal finding(s) on a file for its current bytes \u2014 the accepted-risk path for a formal block").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action((file, opts) => {
     const root = repoRoot();
-    const rel0 = (0, import_node_path51.relative)(root, (0, import_node_path51.isAbsolute)(file) ? file : (0, import_node_path51.join)(root, file)).replace(/\\/g, "/");
-    const rel = rel0.startsWith("..") || (0, import_node_path51.isAbsolute)(rel0) ? null : rel0;
+    const rel0 = (0, import_node_path52.relative)(root, (0, import_node_path52.isAbsolute)(file) ? file : (0, import_node_path52.join)(root, file)).replace(/\\/g, "/");
+    const rel = rel0.startsWith("..") || (0, import_node_path52.isAbsolute)(rel0) ? null : rel0;
     if (!rel) {
       printError(`${file} is not inside this repository`);
       process.exit(2);
@@ -41158,8 +41286,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("hash <file>").description("Print the sha256 of a file, for a model header (Verity.model \u2026 sha256). Path is REPO-relative, as in the header").action((file) => {
     const root = repoRoot();
-    const rel = (0, import_node_path51.relative)(root, (0, import_node_path51.isAbsolute)(file) ? file : (0, import_node_path51.join)(root, file));
-    const digest = rel.startsWith("..") || (0, import_node_path51.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
+    const rel = (0, import_node_path52.relative)(root, (0, import_node_path52.isAbsolute)(file) ? file : (0, import_node_path52.join)(root, file));
+    const digest = rel.startsWith("..") || (0, import_node_path52.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
     if (!digest) {
       printError(`Cannot hash ${file}: it must be a regular file inside this repository (not a symlink)`);
       process.exit(2);
@@ -41193,10 +41321,10 @@ function refreshScaffold(root) {
 }
 // src/commands/lean.ts
-var import_node_fs70 = require("node:fs");
+var import_node_fs71 = require("node:fs");
 var import_node_child_process20 = require("node:child_process");
 var import_node_os11 = require("node:os");
-var import_node_path52 = require("node:path");
+var import_node_path53 = require("node:path");
 function registerLeanCommand(program2) {
   const lean = program2.command("lean").description("The Lean 4 toolchain formal verification needs (managed download, pinned by this CLI)");
   lean.command("status").option("--json", "Machine-readable output").description("Which toolchain would run, and whether it matches the pinned version").action((opts) => {
@@ -41213,7 +41341,7 @@ function registerLeanCommand(program2) {
     const managed = pinnedVersionDir();
     const matches = version ? version.includes(pin) : false;
     if (opts.json) {
-      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs70.existsSync)((0, import_node_path52.join)(managed, "bin")), asset: leanAssetName() });
+      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs71.existsSync)((0, import_node_path53.join)(managed, "bin")), asset: leanAssetName() });
       return;
     }
     printInfo(`pinned: ${LEAN_TOOLCHAIN}`);
@@ -41231,7 +41359,7 @@ function registerLeanCommand(program2) {
       process.exit(2);
     }
     const dir = pinnedVersionDir();
-    if ((0, import_node_fs70.existsSync)((0, import_node_path52.join)(dir, "bin", "lake")) && !opts.force) {
+    if ((0, import_node_fs71.existsSync)((0, import_node_path53.join)(dir, "bin", "lake")) && !opts.force) {
       printInfo(`already installed at ${dir}`);
       return;
     }
@@ -41267,18 +41395,18 @@ function registerLeanCommand(program2) {
   });
   lean.command("remove").description("Delete the Verity-managed toolchain for the pinned version").action(() => {
     const dir = pinnedVersionDir();
-    if (!(0, import_node_fs70.existsSync)(dir)) {
+    if (!(0, import_node_fs71.existsSync)(dir)) {
       printInfo("nothing to remove");
       return;
     }
-    (0, import_node_fs70.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs71.rmSync)(dir, { recursive: true, force: true });
     printInfo(`removed ${dir}`);
   });
 }
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.145d0fb").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.145d0fb");
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.37a6dcf").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.37a6dcf");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();