@codacy/verity-cli 0.34.0-experimental.380b51f → 0.34.0-experimental.3d4888f

package/bin/verity.js

@@ -20058,97 +20058,6 @@ var LEGACY_MD_END = "<!-- gate-memory:end -->";
 var LEGACY_PRESERVE_START = "<!-- gate-memory:preserve -->";
 var LEGACY_PRESERVE_END = "<!-- /gate-memory:preserve -->";
 var CLAUDE_MD_PROSE = [
-  "## Project Memory",
-  "",
-  "This project has a knowledge graph maintained at `.verity/memory/`. Before starting",
-  "non-trivial work, scan `.verity/memory/index.md` for decisions, gotchas, and patterns",
-  "that may apply to the change you are about to make. Open specific node files via",
-  "the Read tool when the title or scope suggests relevance.",
-  "",
-  "The graph is auto-maintained by Verity. Files at `.verity/memory/_archive/` are",
-  "superseded \u2014 ignore them unless investigating history.",
-  "",
-  "Knowledge the organization's other repositories learned is mirrored outside the",
-  "repo at `~/.verity/orgs/<host>/<owner>/memory/` (`verity memory org` lists it).",
-  "Each claim says where it came from; one that is wrong here is demoted for",
-  'everyone with `verity memory demote <id> --reason "\u2026"`.',
-  "",
-  "## Quality gate: accepted risks",
-  "",
-  "When the Verity pre-commit/pre-push gate FAILs, fix the findings \u2014 that is the",
-  'default. Use `verity waive <pattern-id> --file <path> --reason "\u2026"` ONLY to relay',
-  "a risk a human has explicitly accepted: a named code-review finding, an ADR, or",
-  "the user saying so in this conversation. The --reason must cite that source.",
-  "",
-  "Never waive on your own judgment, to get past a block, or pre-emptively. A waive",
-  "binds to the file's current bytes and voids automatically when the file changes,",
-  "and every waive is recorded in the run ledger. For a pattern-level false positive",
-  "use `verity feedback finding <run-id> <pattern-id> false_positive` instead.",
-  "",
-  "## Post-task reflection",
-  "",
-  `When a task is complete (you've created a PR, the user says "done" or "ship it",`,
-  "or the work is clearly finished), **draft the reflection yourself** \u2014 1\u20133",
-  "concrete things worth remembering (a decision, a gotcha, or a pattern), each",
-  "cited with the files / PR / commands / error-signatures it came from. Skip",
-  "entirely if nothing non-obvious happened \u2014 that judgement is the ONLY filter,",
-  "because nothing reviews the reflection before it lands.",
-  "",
-  "Then record it straight away. There is no confirm step, in any environment:",
-  "",
-  "```bash",
-  "verity reflect --user-input - --kind <kind> <<'VERITY_EOF_<random>'",
-  "<your draft>",
-  "VERITY_EOF_<random>",
-  "```",
-  "",
-  'The draft goes through the quoted heredoc, never inside `"\u2026"` on the command',
-  'line, where a `"` or `$(\u2026)` in it would run in the shell. Replace `<random>`',
-  "with 8 random letters and digits that you pick for this call, the same at both",
-  "ends. Text written before you picked them cannot end the heredoc early.",
-  "",
-  "Add `--confirmed` ONLY when the user authored or dictated the words. Without",
-  "it the node is stored as `source: agent` \u2014 Verity thought this, nobody checked",
-  "it. With it, `source: user` at full confidence \u2014 a person stands behind this.",
-  "Never claim the second for your own draft, however good it is.",
-  "",
-  "**Name the files in the text.** Verity scopes the reflection to the paths it",
-  "cites, and a reflection that names no file in this repo is never retrieved for",
-  "a later review \u2014 it is recorded and then invisible. The command says so when it",
-  "happens; `--file-globs '<path or glob>'` is the fix when the prose cannot carry",
-  "the paths.",
-  "",
-  "Then tell the user, in one line, what you recorded and where: the command",
-  "prints the node id, the path under `.verity/memory/`, and a dashboard link.",
-  "They did not agree to it in advance, so say it happened \u2014 editing or deleting",
-  "that file is how they correct it.",
-  "",
-  "> Durable, hand-curated guidance goes in the preserve region below (it survives",
-  "> regeneration) or anywhere OUTSIDE these markers. Everything else between the",
-  "> markers is tool-owned and overwritten on each run.",
-  "",
-  "## Housekeeping Turns",
-  "",
-  "When a turn will be pure housekeeping \u2014 pulling, installing dependencies,",
-  "rebasing, a formatting sweep you are not authoring \u2014 declare it BEFORE doing it:",
-  "",
-  "```bash",
-  'verity ignore --turn --agent --reason "pulling latest before starting"',
-  "```",
-  "",
-  "This skips the review for that turn, which saves the turn Verity would",
-  "otherwise spend saying it had nothing to say. Use `--for 30m` instead of",
-  "`--turn` when a single piece of housekeeping spans several turns.",
-  "",
-  "**It is a claim about the turn, not a way to silence review.** The declaration",
-  "is checked against what the turn actually did: if anything is authored \u2014 by you,",
-  "by a subagent, or by a shell command that can write files \u2014 it voids, the review",
-  "runs anyway, and the broken declaration is reported. So declare housekeeping you",
-  "are about to do, never work you have already done, and never as a way to get past",
-  "a finding. Declarations are budgeted per session and every one is recorded with",
-  "its reason."
-].join("\n");
-var CLAUDE_MD_PROSE_PRE_STDIN = [
   "## Project Memory",
   "",
   "This project has a knowledge graph maintained at `.verity/memory/`. Before starting",
@@ -20590,7 +20499,6 @@ function stripKnownProse(interior) {
   const trimmed = interior.replace(/^\n+/, "");
   for (const prose of [
     CLAUDE_MD_PROSE,
-    CLAUDE_MD_PROSE_PRE_STDIN,
     CLAUDE_MD_PROSE_PRE_ORG,
     CLAUDE_MD_PROSE_PRE_AUTORECORD,
     CLAUDE_MD_PROSE_PRE_REFLECT,
@@ -24952,56 +24860,20 @@ function registerStatusCommand(program2) {
   });
 }
 
-// src/lib/text-input.ts
-var import_node_fs39 = require("node:fs");
-var MAX_STDIN_BYTES = 64 * 1024;
-function readTextInput(value, flag, readStdin2 = () => (0, import_node_fs39.readFileSync)(0)) {
-  if (value !== "-") return { ok: true, text: value };
-  let raw;
-  try {
-    raw = readStdin2();
-  } catch (err2) {
-    return { ok: false, error: `Could not read ${flag} from stdin: ${err2.message}` };
-  }
-  if (raw.length > MAX_STDIN_BYTES) {
-    return { ok: false, error: `${flag} from stdin is ${raw.length} bytes; the limit is ${MAX_STDIN_BYTES}.` };
-  }
-  const text = raw.toString("utf8").replace(/\r?\n$/, "");
-  if (!text.trim()) return { ok: false, error: `${flag} from stdin is empty.` };
-  return { ok: true, text };
-}
-
-// src/lib/terminal-text.ts
-var CONTROL = /[\x00-\x08\x0b-\x1f\x7f-\x9f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g;
-function terminalText(value, max = 4e3) {
-  if (typeof value !== "string") return "";
-  const clean2 = value.replace(CONTROL, "");
-  return clean2.length > max ? `${clean2.slice(0, max - 1)}\u2026` : clean2;
-}
-function terminalUrl(value) {
-  const clean2 = terminalText(value, 2e3);
-  return /^https?:\/\/\S+$/.test(clean2) ? clean2 : "";
-}
-
 // src/commands/feedback.ts
 function registerFeedbackCommand(program2) {
   const feedbackCmd = program2.command("feedback").description("Send feedback to the Verity team");
-  feedbackCmd.command("message <text>").description("Send general feedback (- reads the message from stdin, so the words never pass through shell quoting)").option("--session-id <id>", "Session identifier").option("--model <name>", "Agent model name").action(async (text, opts) => {
-    await sendMessageArg(text, opts, program2.opts());
+  feedbackCmd.command("message <text>").description("Send general feedback").option("--session-id <id>", "Session identifier").option("--model <name>", "Agent model name").action(async (message, opts) => {
+    const globals = program2.opts();
+    await sendGeneralFeedback(message, opts, globals);
   });
-  feedbackCmd.command("finding <run-id> <pattern-id> <action> [note]").description("Submit per-finding feedback (false_positive, acknowledged, useful, etc.); a note of - is read from stdin").option("--file <path>", "File path the finding applies to").option("--line <n>", "Line number", parseInt).action(async (runId, patternId, action, inlineNote, opts) => {
+  feedbackCmd.command("finding <run-id> <pattern-id> <action> [note]").description("Submit per-finding feedback (false_positive, acknowledged, useful, etc.)").option("--file <path>", "File path the finding applies to").option("--line <n>", "Line number", parseInt).action(async (runId, patternId, action, note, opts) => {
     const globals = program2.opts();
     const validActions = ["false_positive", "acknowledged", "will_fix_later", "wrong_severity", "useful"];
     if (!validActions.includes(action)) {
       printError(`Invalid action "${action}". Must be one of: ${validActions.join(", ")}`);
       process.exit(1);
     }
-    const noteInput = readTextInput(inlineNote, "the note");
-    if (!noteInput.ok) {
-      printError(noteInput.error);
-      process.exit(1);
-    }
-    const note = noteInput.text;
     const tokenResult = await resolveToken(globals.token);
     if (!tokenResult.ok) {
       printError(tokenResult.error);
@@ -25037,28 +24909,21 @@ function registerFeedbackCommand(program2) {
   });
   feedbackCmd.argument("[message]", "Feedback message (for backwards compat)").option("--session-id <id>", "Session identifier").option("--model <name>", "Agent model name").action(async (message, opts) => {
     if (!message) return;
-    await sendMessageArg(message, opts, program2.opts());
+    const globals = program2.opts();
+    await sendGeneralFeedback(message, opts, globals);
   });
 }
-async function sendMessageArg(arg, opts, globals) {
-  const input = readTextInput(arg, "the message");
-  if (!input.ok || !input.text) {
-    printError(input.ok ? "Nothing to send." : input.error);
-    process.exit(1);
-  }
-  await sendGeneralFeedback(input.text, opts, globals);
-}
 async function sendGeneralFeedback(message, opts, globals) {
   const tokenResult = await resolveToken(globals.token);
   if (!tokenResult.ok) {
     printError(tokenResult.error);
-    printInfo(`Your message: ${terminalText(message, message.length)}`);
+    printInfo(`Your message: ${message}`);
     process.exit(1);
   }
   const urlResult = await resolveServiceUrl(globals.serviceUrl);
   if (!urlResult.ok) {
     printError(urlResult.error);
-    printInfo(`Your message: ${terminalText(message, message.length)}`);
+    printInfo(`Your message: ${message}`);
     process.exit(1);
   }
   const body2 = { message };
@@ -25076,7 +24941,7 @@ async function sendGeneralFeedback(message, opts, globals) {
   });
   if (!result.ok) {
     printError(`Couldn't send feedback: ${result.error}`);
-    printInfo(`Your message: ${terminalText(message, message.length)}`);
+    printInfo(`Your message: ${message}`);
     process.exit(1);
   }
   printInfo("Thanks, feedback sent!");
@@ -25161,7 +25026,7 @@ function createRun(opts, globals) {
 }
 
 // src/commands/analyze/index.ts
-var import_node_fs53 = require("node:fs");
+var import_node_fs52 = require("node:fs");
 var import_node_path40 = require("node:path");
 
 // src/lib/repo-context.ts
@@ -26126,7 +25991,7 @@ function installRunEvidence(run4) {
 }
 
 // src/lib/git-frame.ts
-var import_node_fs40 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_os6 = require("node:os");
 var import_node_path30 = require("node:path");
 var import_node_path31 = require("node:path");
@@ -26296,14 +26161,14 @@ function gitAt(dir, args2) {
 }
 function realpathOr2(p) {
   try {
-    return import_node_fs40.realpathSync.native(p);
+    return import_node_fs39.realpathSync.native(p);
   } catch {
     return (0, import_node_path30.resolve)(p);
   }
 }
 function resolveFrame(input) {
   const found = findMomentSegment(input.command, input.on);
-  const hookDirUsable = !!input.hookCwd && (0, import_node_fs40.existsSync)(input.hookCwd);
+  const hookDirUsable = !!input.hookCwd && (0, import_node_fs39.existsSync)(input.hookCwd);
   const baseDir = hookDirUsable ? input.hookCwd : process.cwd();
   let anchor = hookDirUsable ? "hook-cwd" : "process-cwd";
   const refuse = (refusal) => ({
@@ -26326,7 +26191,7 @@ function resolveFrame(input) {
     if (dirs.size > 1) return refuse(`target:multiple ${found.moment} targets in one command`);
     const targetDir = dirs.size === 1 ? [...dirs][0] : baseDir;
     if (targetDir !== baseDir) {
-      if (!(0, import_node_fs40.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
+      if (!(0, import_node_fs39.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
       dir = targetDir;
     }
   }
@@ -26513,7 +26378,7 @@ function stagedRange(frame, command) {
     return { kind: "staged", base: "HEAD", head: "INDEX", via: "staged-in-command", refusal: plan.reason };
   }
   const mergeHead = frame.gitDir ? (0, import_node_path31.join)(frame.gitDir, "MERGE_HEAD") : null;
-  if (mergeHead && (0, import_node_fs40.existsSync)(mergeHead)) {
+  if (mergeHead && (0, import_node_fs39.existsSync)(mergeHead)) {
     const vsHead = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "HEAD"]).split("\n").filter(Boolean));
     const vsMerge = new Set(frameGit(frame, ["diff", "--cached", "--name-only", "MERGE_HEAD"]).split("\n").filter(Boolean));
     const resolutions = new Set([...vsHead].filter((f) => vsMerge.has(f) && !isVerityOwnedPath(f)));
@@ -26647,7 +26512,7 @@ function truthy(v) {
 }
 
 // src/lib/transcript.ts
-var import_node_fs41 = require("node:fs");
+var import_node_fs40 = require("node:fs");
 var MAX_READ_BYTES = 256 * 1024;
 var SMALL_FILE_BYTES = 64 * 1024;
 var MAX_FILES_LIST = 20;
@@ -26674,7 +26539,7 @@ async function extractActionSummary(transcriptPath) {
 function readTurnLines(transcriptPath) {
   let size;
   try {
-    size = (0, import_node_fs41.statSync)(transcriptPath).size;
+    size = (0, import_node_fs40.statSync)(transcriptPath).size;
   } catch {
     return null;
   }
@@ -26682,7 +26547,7 @@ function readTurnLines(transcriptPath) {
   let raw;
   let windowed = false;
   if (size <= SMALL_FILE_BYTES) {
-    raw = (0, import_node_fs41.readFileSync)(transcriptPath, "utf-8");
+    raw = (0, import_node_fs40.readFileSync)(transcriptPath, "utf-8");
   } else {
     windowed = true;
     const buf = Buffer.alloc(Math.min(MAX_READ_BYTES, size));
@@ -27252,7 +27117,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.0-experimental.380b51f" : "dev";
+    return true ? "0.34.0-experimental.3d4888f" : "dev";
   } catch {
     return "dev";
   }
@@ -27293,7 +27158,7 @@ async function sendSkipBeacon(ctx, reason) {
 
 // src/lib/static-analysis.ts
 var import_node_child_process12 = require("node:child_process");
-var import_node_fs42 = require("node:fs");
+var import_node_fs41 = require("node:fs");
 var SEVERITY_ORDER = {
   Error: 0,
   Critical: 0,
@@ -27349,7 +27214,7 @@ function runCodacyAnalysis(files) {
   if (files.length === 0) return empty;
   const existingFiles = files.filter((f) => {
     try {
-      return (0, import_node_fs42.existsSync)(f);
+      return (0, import_node_fs41.existsSync)(f);
     } catch {
       return false;
     }
@@ -27618,7 +27483,7 @@ async function scope(run4) {
 }
 
 // src/lib/specs.ts
-var import_node_fs43 = require("node:fs");
+var import_node_fs42 = require("node:fs");
 var import_node_path32 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
@@ -27660,7 +27525,7 @@ function discoverSpecs(consulted = []) {
     const totalCap = relevant ? MAX_TOTAL_SPEC_BYTES : UNCONSULTED_TOTAL_BYTES;
     if (totalBytes >= totalCap) return false;
     if (seen.has(specPath)) return true;
-    if (!(0, import_node_fs43.existsSync)(specPath)) return true;
+    if (!(0, import_node_fs42.existsSync)(specPath)) return true;
     seen.add(specPath);
     const remaining = totalCap - totalBytes;
     const fileCap = relevant ? MAX_SPEC_FILE_BYTES : UNCONSULTED_FILE_BYTES;
@@ -27683,7 +27548,7 @@ function discoverSpecs(consulted = []) {
     if (!addSpec(candidate)) break;
   }
   for (const dir of ["spec", "docs"]) {
-    if (!(0, import_node_fs43.existsSync)(dir)) continue;
+    if (!(0, import_node_fs42.existsSync)(dir)) continue;
     try {
       const mdFiles = findMdFiles(dir, 2).sort();
       for (const mdFile of mdFiles) {
@@ -27698,7 +27563,7 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   if (depth >= maxDepth) return [];
   const result = [];
   try {
-    const entries = (0, import_node_fs43.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_node_fs42.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
       const fullPath = (0, import_node_path32.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
@@ -27718,13 +27583,13 @@ function discoverPlans() {
   if (isRealDirectoryChain(process.cwd(), [".claude", "plans"])) {
     sources.push({ root: process.cwd(), prefix: (0, import_node_path32.join)(".claude", "plans") });
   }
-  if (home && (0, import_node_fs43.existsSync)(homePlansDir)) sources.push({ root: homePlansDir, prefix: "" });
+  if (home && (0, import_node_fs42.existsSync)(homePlansDir)) sources.push({ root: homePlansDir, prefix: "" });
   const candidates2 = [];
   const seen = /* @__PURE__ */ new Set();
   for (const source2 of sources) {
     let names2;
     try {
-      names2 = (0, import_node_fs43.readdirSync)(source2.prefix ? (0, import_node_path32.join)(source2.root, source2.prefix) : source2.root);
+      names2 = (0, import_node_fs42.readdirSync)(source2.prefix ? (0, import_node_path32.join)(source2.root, source2.prefix) : source2.root);
     } catch {
       continue;
     }
@@ -27751,7 +27616,7 @@ function isRealDirectoryChain(root, parts2) {
   for (const part of parts2) {
     current = (0, import_node_path32.join)(current, part);
     try {
-      if (!(0, import_node_fs43.lstatSync)(current).isDirectory()) return false;
+      if (!(0, import_node_fs42.lstatSync)(current).isDirectory()) return false;
     } catch {
       return false;
     }
@@ -27766,7 +27631,7 @@ function discoverGuardDocs(rangeFiles2) {
     if (result.length >= MAX_SPEC_FILES) break;
     if (!GUARD_DOC_EXT.test(path)) continue;
     if (path.startsWith("/") || path.includes("..")) continue;
-    if (!(0, import_node_fs43.existsSync)(path)) continue;
+    if (!(0, import_node_fs42.existsSync)(path)) continue;
     const opened = openRegularInRoot(process.cwd(), path);
     if (!opened.ok) continue;
     if (opened.size > MAX_PLAN_FILE_BYTES || totalBytes + opened.size > MAX_TOTAL_SPEC_BYTES) {
@@ -27952,7 +27817,7 @@ async function mode(run4) {
 }
 
 // src/lib/fold.ts
-var import_node_fs44 = require("node:fs");
+var import_node_fs43 = require("node:fs");
 var import_node_path33 = require("node:path");
 var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "user",
@@ -28090,7 +27955,7 @@ function candidateRoots(repoRoot2) {
   const norm2 = repoRoot2.replace(/\\/g, "/").replace(/\/+$/, "");
   const out2 = [norm2];
   try {
-    const real = import_node_fs44.realpathSync.native(norm2).replace(/\\/g, "/").replace(/\/+$/, "");
+    const real = import_node_fs43.realpathSync.native(norm2).replace(/\\/g, "/").replace(/\/+$/, "");
     if (real !== norm2) out2.push(real);
   } catch {
   }
@@ -28178,8 +28043,8 @@ function fold(transcriptPath, opts = {}) {
     }
   };
   try {
-    if (!(0, import_node_fs44.existsSync)(transcriptPath)) return result;
-    ingest((0, import_node_fs44.readFileSync)(transcriptPath, "utf8"), "agent");
+    if (!(0, import_node_fs43.existsSync)(transcriptPath)) return result;
+    ingest((0, import_node_fs43.readFileSync)(transcriptPath, "utf8"), "agent");
     result.coverage.complete = true;
   } catch {
     return result;
@@ -28190,19 +28055,19 @@ function fold(transcriptPath, opts = {}) {
       (0, import_node_path33.basename)(transcriptPath).replace(/\.jsonl$/, ""),
       "subagents"
     );
-    if ((0, import_node_fs44.existsSync)(sidecarDir)) {
+    if ((0, import_node_fs43.existsSync)(sidecarDir)) {
       const maxFiles = opts.maxSidecars ?? 200;
       const maxBytes = opts.maxSidecarBytes ?? 16 * 1024 * 1024;
       const found = [];
       const walk2 = (d, depth) => {
         if (depth > 4) return;
-        for (const e of (0, import_node_fs44.readdirSync)(d, { withFileTypes: true })) {
+        for (const e of (0, import_node_fs43.readdirSync)(d, { withFileTypes: true })) {
           const p = (0, import_node_path33.join)(d, e.name);
           if (e.isDirectory()) {
             walk2(p, depth + 1);
           } else if (e.name.startsWith("agent-") && e.name.endsWith(".jsonl")) {
             try {
-              const st = (0, import_node_fs44.statSync)(p);
+              const st = (0, import_node_fs43.statSync)(p);
               found.push({ path: p, size: st.size, mtimeMs: st.mtimeMs });
             } catch {
               result.coverage.malformed++;
@@ -28219,7 +28084,7 @@ function fold(transcriptPath, opts = {}) {
           continue;
         }
         try {
-          ingest((0, import_node_fs44.readFileSync)(f.path, "utf8"), "subagent");
+          ingest((0, import_node_fs43.readFileSync)(f.path, "utf8"), "subagent");
           bytes += f.size;
           result.coverage.subagentFiles++;
         } catch {
@@ -28254,7 +28119,7 @@ function fold(transcriptPath, opts = {}) {
 }
 function classifyUnobserved(path) {
   try {
-    const st = (0, import_node_fs44.statSync)(path);
+    const st = (0, import_node_fs43.statSync)(path);
     if (!st.isFile()) return "unreadable";
   } catch {
     return "unreadable";
@@ -28569,20 +28434,20 @@ async function evidence(run4) {
 }
 
 // src/lib/cache-cleanup.ts
-var import_node_fs45 = require("node:fs");
+var import_node_fs44 = require("node:fs");
 var import_node_path34 = require("node:path");
 var CACHE_TTL_DAYS = 7;
 function pruneStaleCache() {
   try {
     const dir = projectPath(CACHE_DIR);
     const cutoff = Date.now() - CACHE_TTL_DAYS * 24 * 3600 * 1e3;
-    for (const entry of (0, import_node_fs45.readdirSync)(dir)) {
+    for (const entry of (0, import_node_fs44.readdirSync)(dir)) {
       if (!entry.startsWith("pending-")) continue;
       const path = (0, import_node_path34.join)(dir, entry);
       try {
-        const stat3 = (0, import_node_fs45.statSync)(path);
+        const stat3 = (0, import_node_fs44.statSync)(path);
         if (stat3.mtimeMs < cutoff) {
-          (0, import_node_fs45.unlinkSync)(path);
+          (0, import_node_fs44.unlinkSync)(path);
           logEvent("cache_entry_pruned", {
             path: entry,
             age_days: Math.round((Date.now() - stat3.mtimeMs) / 864e5)
@@ -28596,7 +28461,7 @@ function pruneStaleCache() {
 }
 
 // src/lib/context-files.ts
-var import_node_fs46 = require("node:fs");
+var import_node_fs45 = require("node:fs");
 var import_node_os7 = require("node:os");
 var MAX_CONTEXT_FILES = 10;
 var MAX_CONTEXT_FILE_BYTES = 10240;
@@ -28654,7 +28519,7 @@ function gatherContextFiles(contextPaths, deltaFiles, opts) {
       continue;
     }
     try {
-      const content = (0, import_node_fs46.readFileSync)(safePath, "utf8");
+      const content = (0, import_node_fs45.readFileSync)(safePath, "utf8");
       const bytes = Buffer.byteLength(content);
       if (bytes > MAX_CONTEXT_FILE_BYTES) {
         logEvent("context_file_skipped", { path: filePath, reason: "too_large", bytes });
@@ -28812,7 +28677,7 @@ function languageOf2(path) {
 }
 
 // src/lib/code/runtime.ts
-var import_node_fs47 = require("node:fs");
+var import_node_fs46 = require("node:fs");
 var import_node_path35 = require("node:path");
 var import_web_tree_sitter2 = __toESM2(require_web_tree_sitter2());
 
@@ -28884,7 +28749,7 @@ function grammarCandidates(file, pkg, env = process.env) {
 }
 function locateGrammar(id, env = process.env) {
   const g = grammars_default[id];
-  return grammarCandidates(g.file, g.package, env).find((p) => (0, import_node_fs47.existsSync)(p)) ?? null;
+  return grammarCandidates(g.file, g.package, env).find((p) => (0, import_node_fs46.existsSync)(p)) ?? null;
 }
 var loading = null;
 function loadRuntime(env = process.env) {
@@ -31213,7 +31078,7 @@ async function repoContext(run4) {
 
 // src/lib/seed-runner.ts
 var import_promises15 = require("node:fs/promises");
-var import_node_fs48 = require("node:fs");
+var import_node_fs47 = require("node:fs");
 var import_node_path36 = require("node:path");
 var import_yaml4 = __toESM2(require_dist());
 
@@ -31438,7 +31303,7 @@ async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
   const titles = /* @__PURE__ */ new Set();
   for (const dir of NODE_DIRS) {
     const full = (0, import_node_path36.join)(memoryDir3, dir);
-    if (!(0, import_node_fs48.existsSync)(full)) continue;
+    if (!(0, import_node_fs47.existsSync)(full)) continue;
     let files;
     try {
       files = await (0, import_promises15.readdir)(full);
@@ -31520,7 +31385,7 @@ function renderNodeMarkdown(candidate, nodeId, createdAt) {
   return fm;
 }
 async function runSeed(opts) {
-  if (!(0, import_node_fs48.existsSync)(STANDARD_FILE)) {
+  if (!(0, import_node_fs47.existsSync)(STANDARD_FILE)) {
     return { created: 0, existing: 0, failed: 0, skipped: "no_standard", candidates: [] };
   }
   let standardDoc;
@@ -31532,7 +31397,7 @@ async function runSeed(opts) {
   }
   const knowledgeSpec = standardDoc.knowledge_spec ?? {};
   let readmeContent;
-  if ((0, import_node_fs48.existsSync)("README.md")) {
+  if ((0, import_node_fs47.existsSync)("README.md")) {
     try {
       readmeContent = await (0, import_promises15.readFile)("README.md", "utf-8");
     } catch {
@@ -31540,7 +31405,7 @@ async function runSeed(opts) {
   }
   let claudeMdContent;
   for (const p of ["CLAUDE.md", ".claude/CLAUDE.md"]) {
-    if ((0, import_node_fs48.existsSync)(p)) {
+    if ((0, import_node_fs47.existsSync)(p)) {
       try {
         claudeMdContent = await (0, import_promises15.readFile)(p, "utf-8");
         break;
@@ -31620,7 +31485,7 @@ async function runSeed(opts) {
       continue;
     }
     const deduplicated = res.data.deduplicated === true;
-    if (deduplicated && (0, import_node_fs48.existsSync)(targetPath)) {
+    if (deduplicated && (0, import_node_fs47.existsSync)(targetPath)) {
       existing++;
       continue;
     }
@@ -31642,7 +31507,7 @@ async function runSeed(opts) {
 }
 
 // src/commands/analyze/phases/08-memory-manifest.ts
-var import_node_fs49 = require("node:fs");
+var import_node_fs48 = require("node:fs");
 var import_node_path37 = require("node:path");
 async function memoryManifest(run4) {
   const { globals } = run4;
@@ -31654,8 +31519,8 @@ async function memoryManifest(run4) {
   try {
     await ensureMemoryDir();
     const seedMarker = (0, import_node_path37.join)(VERITY_DIR, ".seeded");
-    const hasStandard = (0, import_node_fs49.existsSync)(STANDARD_FILE);
-    const alreadyTried = (0, import_node_fs49.existsSync)(seedMarker);
+    const hasStandard = (0, import_node_fs48.existsSync)(STANDARD_FILE);
+    const alreadyTried = (0, import_node_fs48.existsSync)(seedMarker);
     if (hasStandard && !alreadyTried) {
       const preManifest = await buildManifest();
       if (preManifest.nodes.length === 0) {
@@ -31668,7 +31533,7 @@ async function memoryManifest(run4) {
             dryRun: false
           });
           if (seedResult.created > 0 || seedResult.existing > 0) {
-            (0, import_node_fs49.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created} existing=${seedResult.existing}
+            (0, import_node_fs48.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} created=${seedResult.created} existing=${seedResult.existing}
 `);
             if (seedResult.created > 0) {
               autoSeedNotice = `Seeded ${seedResult.created} knowledge node(s) from your existing Standard (one-time).`;
@@ -31679,7 +31544,7 @@ async function memoryManifest(run4) {
               failed: seedResult.failed
             });
           } else if (seedResult.skipped === "already_seeded") {
-            (0, import_node_fs49.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
+            (0, import_node_fs48.writeFileSync)(seedMarker, `${(/* @__PURE__ */ new Date()).toISOString()} skipped=already_seeded
 `);
           } else {
             logEvent("auto_seed_noop", {
@@ -31884,7 +31749,7 @@ function boundPaths(paths, first, max = MAX_WIRE_PATHS) {
 }
 
 // src/lib/note-budget.ts
-var import_node_fs50 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 var ADVISORY_BUDGET = { PASS: 1, WARN: 2 };
 var EPISODE_STALE_SECONDS = 30 * 60;
 var FRESH = { delivered: 0, tasksCompleted: 0, ts: 0 };
@@ -31906,9 +31771,9 @@ function advisoryBudgetSpent(episode, rawDecision) {
 }
 function readAdvisoryEpisode(sessionId) {
   const file = scopedFile(ADVISORY_EPISODE_FILE, sessionId);
-  if (!(0, import_node_fs50.existsSync)(file)) return null;
+  if (!(0, import_node_fs49.existsSync)(file)) return null;
   try {
-    const o = JSON.parse((0, import_node_fs50.readFileSync)(file, "utf-8")) ?? {};
+    const o = JSON.parse((0, import_node_fs49.readFileSync)(file, "utf-8")) ?? {};
     const delivered = typeof o.delivered === "number" ? o.delivered : NaN;
     if (isNaN(delivered)) return null;
     return {
@@ -31922,8 +31787,8 @@ function readAdvisoryEpisode(sessionId) {
 }
 function writeAdvisoryEpisode(episode, sessionId) {
   try {
-    (0, import_node_fs50.mkdirSync)(VERITY_DIR, { recursive: true });
-    (0, import_node_fs50.writeFileSync)(
+    (0, import_node_fs49.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs49.writeFileSync)(
       scopedFile(ADVISORY_EPISODE_FILE, sessionId),
       JSON.stringify({ v: 1, ...episode })
     );
@@ -32260,14 +32125,14 @@ async function buildRequest(run4) {
 }
 
 // src/lib/offline.ts
-var import_node_fs51 = require("node:fs");
+var import_node_fs50 = require("node:fs");
 var import_node_crypto14 = require("node:crypto");
 function cacheRequest(body2) {
   try {
-    (0, import_node_fs51.mkdirSync)(CACHE_DIR, { recursive: true });
+    (0, import_node_fs50.mkdirSync)(CACHE_DIR, { recursive: true });
     const suffix = (0, import_node_crypto14.randomBytes)(4).toString("hex");
     const filename = `pending-${Math.floor(Date.now() / 1e3)}-${suffix}.json`;
-    (0, import_node_fs51.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body2)));
+    (0, import_node_fs50.writeFileSync)(`${CACHE_DIR}/${filename}`, JSON.stringify(redactRequest(body2)));
   } catch {
   }
 }
@@ -32389,7 +32254,7 @@ async function transmit(run4) {
 }
 
 // src/commands/analyze/phases/13-reconcile.ts
-var import_node_fs52 = require("node:fs");
+var import_node_fs51 = require("node:fs");
 var import_node_path39 = require("node:path");
 async function reconcile(run4) {
   const { actionSummary, allChanged, analyzable, baseline, baselineSessionId, codeDelta, contentHash, conversation, decision, foldResult, memory: memory2, memorySession, response, reviewable, securityFiles, turnId } = run4;
@@ -32419,7 +32284,7 @@ async function reconcile(run4) {
       const st = foldDossier(memorySession.d);
       openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line2) => {
         try {
-          const src = (0, import_node_fs52.readFileSync)((0, import_node_path39.join)(repoRoot(), file), "utf8").split("\n");
+          const src = (0, import_node_fs51.readFileSync)((0, import_node_path39.join)(repoRoot(), file), "utf8").split("\n");
           const at = src[line2 - 1];
           return at === void 0 ? null : lineSha(at);
         } catch {
@@ -33241,7 +33106,7 @@ function registerAnalyzeCommand(program2) {
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
   if (!verityConfigured()) {
-    (0, import_node_fs53.writeSync)(2, isMachineStore((0, import_node_path40.join)(repoRoot(), VERITY_DIR)) ? "[verity] nothing to review in your home directory \u2014 run Verity inside a project.\n" : '[verity] not set up in this project \u2014 run "verity init" first.\n');
+    (0, import_node_fs52.writeSync)(2, isMachineStore((0, import_node_path40.join)(repoRoot(), VERITY_DIR)) ? "[verity] nothing to review in your home directory \u2014 run Verity inside a project.\n" : '[verity] not set up in this project \u2014 run "verity init" first.\n');
     process.exit(0);
   }
   const run4 = createRun(opts, globals);
@@ -33262,11 +33127,11 @@ async function runAnalyze(opts, globals) {
 }
 
 // src/commands/baseline.ts
-var import_node_fs55 = require("node:fs");
+var import_node_fs54 = require("node:fs");
 var import_node_path42 = require("node:path");
 
 // src/lib/project-skills.ts
-var import_node_fs54 = require("node:fs");
+var import_node_fs53 = require("node:fs");
 var import_node_path41 = require("node:path");
 var PROJECT_SKILL_NAMES = [
   "verity-setup",
@@ -33293,14 +33158,14 @@ var LEGACY_SKILL_NAMES = [
 var ALL = [...PROJECT_SKILL_NAMES, ...LEGACY_SKILL_NAMES];
 function staleProjectSkills() {
   const root = projectPath(".claude/skills");
-  if (!(0, import_node_fs54.existsSync)(root)) return [];
-  return ALL.filter((name2) => (0, import_node_fs54.existsSync)((0, import_node_path41.join)(root, name2)));
+  if (!(0, import_node_fs53.existsSync)(root)) return [];
+  return ALL.filter((name2) => (0, import_node_fs53.existsSync)((0, import_node_path41.join)(root, name2)));
 }
 function removeProjectSkills() {
   const root = projectPath(".claude/skills");
   const removed = [];
   for (const name2 of staleProjectSkills()) {
-    (0, import_node_fs54.rmSync)((0, import_node_path41.join)(root, name2), { recursive: true, force: true });
+    (0, import_node_fs53.rmSync)((0, import_node_path41.join)(root, name2), { recursive: true, force: true });
     removed.push(name2);
   }
   return removed;
@@ -33366,13 +33231,13 @@ function registerBaselineCommands(program2) {
       let memoryMsg = null;
       let memoryAgentLine = null;
       const memoryNotice = projectPath(`${VERITY_DIR}/.memory-fence-notice`);
-      if (realStart && !(0, import_node_fs55.existsSync)(memoryNotice)) {
+      if (realStart && !(0, import_node_fs54.existsSync)(memoryNotice)) {
         const trackedGraph = memoryOptOut() ? 0 : committedMemoryFiles().length;
         if (trackedGraph > 0) {
           memoryMsg = `Verity: this project commits its knowledge base (${trackedGraph} files under .verity/memory/), so Verity's generated notes show up in every diff and pull request. Run \`verity memory untrack\` to keep them on disk but out of git, or \`verity memory track\` to keep committing them on purpose.`;
           memoryAgentLine = `This project has ${trackedGraph} knowledge-graph files tracked in git under .verity/memory/. As of Verity 0.32.6 the graph is machine-local by default \u2014 it is rebuilt from the service, and committing it puts generated notes in every pull request. If the user wants that stopped, run \`verity memory untrack\` for them: it keeps every file on disk and stages their removal from the index, so they only need to commit \u2014 and their teammates' working copies will vanish on the next pull and re-sync from the service, which is expected. If they would rather keep committing it, \`verity memory track\` records that and nothing will offer again.`;
           try {
-            (0, import_node_fs55.writeFileSync)(memoryNotice, (/* @__PURE__ */ new Date()).toISOString() + "\n");
+            (0, import_node_fs54.writeFileSync)(memoryNotice, (/* @__PURE__ */ new Date()).toISOString() + "\n");
           } catch {
           }
         }
@@ -33473,16 +33338,10 @@ function hookSource(value) {
 }
 
 // src/commands/review.ts
-var import_node_fs56 = require("node:fs");
+var import_node_fs55 = require("node:fs");
 function registerReviewCommand(program2) {
-  program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars); - reads it from stdin, so the words never pass through shell quoting").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
+  program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars)").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
-    const intent = readTextInput(opts.intent, "--intent");
-    if (!intent.ok) {
-      printError(intent.error);
-      process.exit(0);
-    }
-    opts.intent = intent.text;
     try {
       await runReview(opts, globals);
     } catch (err2) {
@@ -33496,7 +33355,7 @@ async function runReview(opts, globals) {
   const changedFiles = opts.changed ? opts.changed.split(",").map((f) => f.trim()).filter(Boolean) : allFiles;
   const analyzable = filterAnalyzable(allFiles);
   const securityFiles = filterSecurity(allFiles);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs56.existsSync)(f) || resolveFile(f) !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs55.existsSync)(f) || resolveFile(f) !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const codeDelta = collectCodeDelta(allFiles);
   const tokenResult = await resolveToken(globals.token);
@@ -33562,9 +33421,21 @@ async function runReview(opts, globals) {
 }
 
 // src/commands/guard.ts
-var import_node_fs60 = require("node:fs");
+var import_node_fs59 = require("node:fs");
 var import_node_path47 = require("node:path");
 
+// src/lib/terminal-text.ts
+var CONTROL = /[\x00-\x08\x0b-\x1f\x7f-\x9f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g;
+function terminalText(value, max = 4e3) {
+  if (typeof value !== "string") return "";
+  const clean2 = value.replace(CONTROL, "");
+  return clean2.length > max ? `${clean2.slice(0, max - 1)}\u2026` : clean2;
+}
+function terminalUrl(value) {
+  const clean2 = terminalText(value, 2e3);
+  return /^https?:\/\/\S+$/.test(clean2) ? clean2 : "";
+}
+
 // src/lib/agent-driver.ts
 var AGENT_DEADLINE_MS = {
   "pre-commit": 9e4,
@@ -35386,16 +35257,16 @@ function renderReplay(model, property, r) {
 // src/lib/prove/runner.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_os8 = require("node:os");
-var import_node_fs59 = require("node:fs");
+var import_node_fs58 = require("node:fs");
 var import_node_os9 = require("node:os");
 var import_node_path45 = require("node:path");
 
 // src/lib/prove/scaffold.ts
-var import_node_fs58 = require("node:fs");
+var import_node_fs57 = require("node:fs");
 var import_node_path44 = require("node:path");
 
 // src/lib/prove/safe-write.ts
-var import_node_fs57 = require("node:fs");
+var import_node_fs56 = require("node:fs");
 var import_node_crypto15 = require("node:crypto");
 var import_node_path43 = require("node:path");
 var SafeWriteError = class extends Error {
@@ -35406,7 +35277,7 @@ var SafeWriteError = class extends Error {
     this.name = "SafeWriteError";
   }
 };
-var FLAGS3 = import_node_fs57.constants;
+var FLAGS3 = import_node_fs56.constants;
 var NOFOLLOW2 = FLAGS3.O_NOFOLLOW ?? 0;
 function assertPlainRelative(rel) {
   if (!rel || (0, import_node_path43.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
@@ -35421,9 +35292,9 @@ function ensureDirsNoFollow(root, rel) {
     cur = (0, import_node_path43.join)(cur, part);
     let st;
     try {
-      st = (0, import_node_fs57.lstatSync)(cur);
+      st = (0, import_node_fs56.lstatSync)(cur);
     } catch {
-      (0, import_node_fs57.mkdirSync)(cur);
+      (0, import_node_fs56.mkdirSync)(cur);
       continue;
     }
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", cur);
@@ -35436,7 +35307,7 @@ function insideRoot(realRoot, realPath) {
 }
 function removeQuietly(path) {
   try {
-    (0, import_node_fs57.unlinkSync)(path);
+    (0, import_node_fs56.unlinkSync)(path);
   } catch {
   }
 }
@@ -35445,7 +35316,7 @@ function writeFileInRootNoFollow(root, rel, content) {
   const dest = ensureDirsNoFollow(root, rel);
   const dir = (0, import_node_path43.dirname)(dest);
   try {
-    const st = (0, import_node_fs57.lstatSync)(dest);
+    const st = (0, import_node_fs56.lstatSync)(dest);
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", dest);
     if (!st.isFile()) throw new SafeWriteError("not-regular", dest);
   } catch (err2) {
@@ -35453,41 +35324,41 @@ function writeFileInRootNoFollow(root, rel, content) {
   }
   let realRoot;
   try {
-    realRoot = (0, import_node_fs57.realpathSync)(root);
+    realRoot = (0, import_node_fs56.realpathSync)(root);
   } catch {
     throw new SafeWriteError("unwritable", root);
   }
   const tmp = (0, import_node_path43.join)(dir, `.${(0, import_node_path43.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
   let fd;
   try {
-    fd = (0, import_node_fs57.openSync)(tmp, import_node_fs57.constants.O_WRONLY | import_node_fs57.constants.O_CREAT | import_node_fs57.constants.O_EXCL | NOFOLLOW2, 420);
+    fd = (0, import_node_fs56.openSync)(tmp, import_node_fs56.constants.O_WRONLY | import_node_fs56.constants.O_CREAT | import_node_fs56.constants.O_EXCL | NOFOLLOW2, 420);
   } catch {
     throw new SafeWriteError("unwritable", tmp);
   }
   try {
-    const opened = (0, import_node_fs57.fstatSync)(fd, { bigint: true });
+    const opened = (0, import_node_fs56.fstatSync)(fd, { bigint: true });
     let realTmp;
     try {
-      realTmp = (0, import_node_fs57.realpathSync)(tmp);
+      realTmp = (0, import_node_fs56.realpathSync)(tmp);
     } catch {
       throw new SafeWriteError("escaped", tmp);
     }
-    const there = (0, import_node_fs57.lstatSync)(realTmp, { bigint: true });
+    const there = (0, import_node_fs56.lstatSync)(realTmp, { bigint: true });
     if (!opened.isFile() || there.ino !== opened.ino || there.dev !== opened.dev || !insideRoot(realRoot, realTmp)) {
       throw new SafeWriteError("escaped", tmp);
     }
     const buf = Buffer.from(content, "utf-8");
     let off = 0;
-    while (off < buf.length) off += (0, import_node_fs57.writeSync)(fd, buf, off, buf.length - off);
+    while (off < buf.length) off += (0, import_node_fs56.writeSync)(fd, buf, off, buf.length - off);
   } catch (err2) {
-    (0, import_node_fs57.closeSync)(fd);
+    (0, import_node_fs56.closeSync)(fd);
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", tmp);
   }
-  (0, import_node_fs57.closeSync)(fd);
+  (0, import_node_fs56.closeSync)(fd);
   try {
-    if (!insideRoot(realRoot, (0, import_node_fs57.realpathSync)(dir)) || (0, import_node_fs57.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
-    (0, import_node_fs57.renameSync)(tmp, dest);
+    if (!insideRoot(realRoot, (0, import_node_fs56.realpathSync)(dir)) || (0, import_node_fs56.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
+    (0, import_node_fs56.renameSync)(tmp, dest);
   } catch (err2) {
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", dest);
@@ -35503,7 +35374,7 @@ function pathHasNoLink(root, rel) {
   for (const part of rel.split(/[\\/]/)) {
     cur = cur + import_node_path43.sep + part;
     try {
-      if ((0, import_node_fs57.lstatSync)(cur).isSymbolicLink()) return false;
+      if ((0, import_node_fs56.lstatSync)(cur).isSymbolicLink()) return false;
     } catch {
       return true;
     }
@@ -35820,7 +35691,7 @@ function scaffoldProofs(root) {
     const rel = `${PROOFS_DIR}/${stray}`;
     if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
     try {
-      (0, import_node_fs58.rmSync)((0, import_node_path44.join)(root, rel), { force: true });
+      (0, import_node_fs57.rmSync)((0, import_node_path44.join)(root, rel), { force: true });
     } catch {
     }
   }
@@ -35851,7 +35722,7 @@ function scaffoldProofs(root) {
 }
 function existsNoFollow(abs) {
   try {
-    (0, import_node_fs58.lstatSync)(abs);
+    (0, import_node_fs57.lstatSync)(abs);
     return true;
   } catch {
     return false;
@@ -36114,7 +35985,7 @@ function verityLeanHome(env = process.env) {
 function findToolchain(env = process.env) {
   const managedBin = (0, import_node_path45.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
   const elanBin = (0, import_node_path45.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
-  const elanHas = (0, import_node_fs59.existsSync)((0, import_node_path45.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path45.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
   const userPath = (env.PATH ?? "").split(import_node_path45.delimiter).filter((d) => d && (elanHas || (0, import_node_path45.resolve)(d) !== (0, import_node_path45.resolve)(elanBin)));
   const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path45.delimiter);
   const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
@@ -36198,7 +36069,7 @@ function proofsWorkspaceProblem(root) {
   for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
     let st;
     try {
-      st = (0, import_node_fs59.lstatSync)((0, import_node_path45.join)(root, rel));
+      st = (0, import_node_fs58.lstatSync)((0, import_node_path45.join)(root, rel));
     } catch {
       break;
     }
@@ -36240,8 +36111,8 @@ function resolveModelFile(root, arg) {
 }
 function listModelFiles(root) {
   const modelsAbs = (0, import_node_path45.join)(root, MODELS_DIR);
-  if (!(0, import_node_fs59.existsSync)(modelsAbs)) return [];
-  return (0, import_node_fs59.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path45.join)(modelsAbs, f));
+  if (!(0, import_node_fs58.existsSync)(modelsAbs)) return [];
+  return (0, import_node_fs58.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path45.join)(modelsAbs, f));
 }
 function trimDiagnostics(text) {
   return text.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
@@ -37196,7 +37067,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs60.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs59.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -37216,10 +37087,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs60.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs59.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs60.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs59.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -37229,10 +37100,10 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs60.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs60.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs59.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs59.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs60.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs60.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs59.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs59.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
@@ -37302,7 +37173,7 @@ function hasBlockingFinding(response, sentFiles) {
 function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedIntent, coverageTelemetry) {
   const analyzable = filterAnalyzable(files);
   const securityFiles = filterSecurity(files);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs60.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs59.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const trigger = moment === "pre-commit" ? "hook:pre-commit" : "hook:pre-push";
   const requestBody = {
@@ -37920,7 +37791,7 @@ function registerIgnoreCommand(program2) {
 
 // src/commands/waive.ts
 var import_node_crypto20 = require("node:crypto");
-var import_node_fs61 = require("node:fs");
+var import_node_fs60 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -37949,7 +37820,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body2.file = opts.file;
       try {
-        body2.file_sha256 = (0, import_node_crypto20.createHash)("sha256").update((0, import_node_fs61.readFileSync)(opts.file)).digest("hex");
+        body2.file_sha256 = (0, import_node_crypto20.createHash)("sha256").update((0, import_node_fs60.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -37974,7 +37845,7 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs66 = require("node:fs");
+var import_node_fs65 = require("node:fs");
 var import_promises20 = require("node:fs/promises");
 var import_yaml6 = __toESM2(require_dist());
 var import_node_path51 = require("node:path");
@@ -38056,7 +37927,7 @@ function printPhase(n, of, title, subtitle) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs62 = require("node:fs");
+var import_node_fs61 = require("node:fs");
 
 // src/lib/prereqs.ts
 var import_node_child_process16 = require("node:child_process");
@@ -38264,11 +38135,11 @@ async function buildReport() {
   const hooks = wiring.status;
   const provenance = cliProvenance();
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs62.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs61.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs62.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs61.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs62.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs61.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -38427,7 +38298,7 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/migrate.ts
-var import_node_fs63 = require("node:fs");
+var import_node_fs62 = require("node:fs");
 var import_node_path48 = require("node:path");
 var import_node_child_process17 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
@@ -38467,10 +38338,10 @@ async function runMigration(opts = {}) {
 function migrateProjectDir(root, actions) {
   const gateDir = (0, import_node_path48.join)(root, ".gate");
   const verityDir = (0, import_node_path48.join)(root, ".verity");
-  if ((0, import_node_fs63.existsSync)(gateDir) && !(0, import_node_fs63.existsSync)(verityDir)) {
+  if ((0, import_node_fs62.existsSync)(gateDir) && !(0, import_node_fs62.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs63.existsSync)(gateDir) && (0, import_node_fs63.existsSync)(verityDir)) {
+  if ((0, import_node_fs62.existsSync)(gateDir) && (0, import_node_fs62.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -38491,13 +38362,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs63.existsSync)(gateDir)) {
+    if ((0, import_node_fs62.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs63.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs62.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -38513,7 +38384,7 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs63.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs62.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
@@ -38522,9 +38393,9 @@ function migrateGlobalCredentials(home, actions) {
   if (!home) return;
   const gateCreds = (0, import_node_path48.join)(home, ".gate", "credentials");
   const verityCreds = (0, import_node_path48.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs63.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs63.existsSync)(verityCreds)) {
-    (0, import_node_fs63.mkdirSync)((0, import_node_path48.join)(home, ".verity"), { recursive: true });
+  if (!(0, import_node_fs62.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs62.existsSync)(verityCreds)) {
+    (0, import_node_fs62.mkdirSync)((0, import_node_path48.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -38547,7 +38418,7 @@ async function migrateLegacyHooks(root, actions) {
 }
 async function migrateClaudeMd(root, actions) {
   const claudeMd = (0, import_node_path48.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs63.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const hadLegacyBlock = (0, import_node_fs62.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -38559,7 +38430,7 @@ async function migrateClaudeMd(root, actions) {
 function migrateStandardFile(root, actions) {
   const gateMd = (0, import_node_path48.join)(root, "GATE.md");
   const verityMd = (0, import_node_path48.join)(root, "VERITY.md");
-  if (!(0, import_node_fs63.existsSync)(gateMd) || (0, import_node_fs63.existsSync)(verityMd)) return;
+  if (!(0, import_node_fs62.existsSync)(gateMd) || (0, import_node_fs62.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -38571,12 +38442,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs63.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs62.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
   const file = (0, import_node_path48.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs63.existsSync)(file)) return;
+  if (!(0, import_node_fs62.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -38624,14 +38495,14 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
   }
   if (toAppend.length > 0) {
     const sep5 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs63.writeFileSync)(verityCreds, verityContent + sep5 + toAppend.join("\n") + "\n");
+    (0, import_node_fs62.writeFileSync)(verityCreds, verityContent + sep5 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs63.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs62.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs63.readFileSync)(path, "utf-8");
+    return (0, import_node_fs62.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -38646,35 +38517,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs63.renameSync)(from, to);
+    (0, import_node_fs62.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs63.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs63.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs62.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs62.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs63.renameSync)(from, to);
+    (0, import_node_fs62.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs63.cpSync)(from, to);
-    (0, import_node_fs63.rmSync)(from, { force: true });
+    (0, import_node_fs62.cpSync)(from, to);
+    (0, import_node_fs62.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
     const srcDir = (0, import_node_path48.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs63.readdirSync)(srcDir)) {
+    for (const entry of (0, import_node_fs62.readdirSync)(srcDir)) {
       const rel = relDir ? (0, import_node_path48.join)(relDir, entry) : entry;
       const src = (0, import_node_path48.join)(gateDir, rel);
       const dest = (0, import_node_path48.join)(verityDir, rel);
-      if ((0, import_node_fs63.statSync)(src).isDirectory()) {
+      if ((0, import_node_fs62.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs63.existsSync)(dest)) {
-        (0, import_node_fs63.mkdirSync)((0, import_node_path48.dirname)(dest), { recursive: true });
-        (0, import_node_fs63.cpSync)(src, dest);
+      } else if (!(0, import_node_fs62.existsSync)(dest)) {
+        (0, import_node_fs62.mkdirSync)((0, import_node_path48.dirname)(dest), { recursive: true });
+        (0, import_node_fs62.cpSync)(src, dest);
         copied++;
       }
     }
@@ -38685,20 +38556,20 @@ function carryLegacyContents(gateDir, verityDir) {
 async function needsMigration(root = repoRoot()) {
   const gateDir = (0, import_node_path48.join)(root, ".gate");
   const verityDir = (0, import_node_path48.join)(root, ".verity");
-  if ((0, import_node_fs63.existsSync)(gateDir) && !(0, import_node_fs63.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs63.existsSync)(gateDir) && (0, import_node_fs63.existsSync)(verityDir)) {
-    if ((0, import_node_fs63.existsSync)((0, import_node_path48.join)(gateDir, "credentials")) && !(0, import_node_fs63.existsSync)((0, import_node_path48.join)(verityDir, "credentials"))) {
+  if ((0, import_node_fs62.existsSync)(gateDir) && !(0, import_node_fs62.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs62.existsSync)(gateDir) && (0, import_node_fs62.existsSync)(verityDir)) {
+    if ((0, import_node_fs62.existsSync)((0, import_node_path48.join)(gateDir, "credentials")) && !(0, import_node_fs62.existsSync)((0, import_node_path48.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs63.existsSync)((0, import_node_path48.join)(gateDir, "memory")) && !(0, import_node_fs63.existsSync)((0, import_node_path48.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs62.existsSync)((0, import_node_path48.join)(gateDir, "memory")) && !(0, import_node_fs62.existsSync)((0, import_node_path48.join)(verityDir, "memory"))) {
       return true;
     }
   }
   const claudeMd = (0, import_node_path48.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs63.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  if ((0, import_node_fs62.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs63.existsSync)((0, import_node_path48.join)(root, "GATE.md")) && !(0, import_node_fs63.existsSync)((0, import_node_path48.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs62.existsSync)((0, import_node_path48.join)(root, "GATE.md")) && !(0, import_node_fs62.existsSync)((0, import_node_path48.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -38979,7 +38850,7 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 
 // src/lib/prove/lean-install.ts
-var import_node_fs64 = require("node:fs");
+var import_node_fs63 = require("node:fs");
 var import_node_crypto21 = require("node:crypto");
 var import_node_child_process18 = require("node:child_process");
 var import_node_os10 = require("node:os");
@@ -38994,7 +38865,7 @@ function freeBytes(dir) {
   let d = dir;
   for (let i2 = 0; i2 < 64; i2++) {
     try {
-      const st = (0, import_node_fs64.statfsSync)(d);
+      const st = (0, import_node_fs63.statfsSync)(d);
       return Number(st.bavail) * Number(st.bsize);
     } catch {
       const up = (0, import_node_path49.join)(d, "..");
@@ -39019,7 +38890,7 @@ function expectedSha256(asset, version = pinnedVersion()) {
 function sha256File(path) {
   return new Promise((resolve9, reject) => {
     const hash = (0, import_node_crypto21.createHash)("sha256");
-    (0, import_node_fs64.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve9(hash.digest("hex"))).on("error", reject);
+    (0, import_node_fs63.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve9(hash.digest("hex"))).on("error", reject);
   });
 }
 async function verifyDownload(zip, asset, version = pinnedVersion()) {
@@ -39050,12 +38921,12 @@ function unzip(zip, dest) {
   for (const [cmd, args2] of attempts) {
     try {
       (0, import_node_child_process18.execFileSync)(cmd, args2, { stdio: ["ignore", "ignore", "pipe"], timeout: 15 * 6e4 });
-      if ((0, import_node_fs64.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
+      if ((0, import_node_fs63.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
       errors.push(`${cmd}: produced nothing`);
     } catch (err2) {
       errors.push(`${cmd}: ${String(err2.message).split("\n")[0].slice(0, 120)}`);
       try {
-        for (const e of (0, import_node_fs64.readdirSync)(dest)) (0, import_node_fs64.rmSync)((0, import_node_path49.join)(dest, e), { recursive: true, force: true });
+        for (const e of (0, import_node_fs63.readdirSync)(dest)) (0, import_node_fs63.rmSync)((0, import_node_path49.join)(dest, e), { recursive: true, force: true });
       } catch {
       }
     }
@@ -39081,7 +38952,7 @@ async function download(url, dest, onProgress, stallMs = DOWNLOAD_STALL_MS) {
       seen += chunk.length;
       onProgress(seen, total);
     });
-    await (0, import_promises18.pipeline)(stream, (0, import_node_fs64.createWriteStream)(dest), { signal: ctrl.signal });
+    await (0, import_promises18.pipeline)(stream, (0, import_node_fs63.createWriteStream)(dest), { signal: ctrl.signal });
   } catch (err2) {
     if (ctrl.signal.aborted) throw new Error(`download stalled: nothing received for ${Math.round(stallMs / 1e3)} s`);
     throw err2;
@@ -39132,8 +39003,8 @@ async function installLean(opts = {}) {
     return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
   }
   const tmp = (0, import_node_path49.join)(home, ".tmp");
-  (0, import_node_fs64.rmSync)(tmp, { recursive: true, force: true });
-  (0, import_node_fs64.mkdirSync)(tmp, { recursive: true });
+  (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs63.mkdirSync)(tmp, { recursive: true });
   const zip = (0, import_node_path49.join)(tmp, asset);
   say(`downloading ${url}`);
   let lastPct = -1;
@@ -39147,38 +39018,38 @@ async function installLean(opts = {}) {
       }
     });
   } catch (err2) {
-    (0, import_node_fs64.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: err2.message };
   }
   say("verifying checksum");
   const verified = await verifyDownload(zip, asset);
   if (!verified.ok) {
-    (0, import_node_fs64.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: verified.error };
   }
   say("unpacking (this takes a minute)");
   const unpack = (0, import_node_path49.join)(tmp, "unpack");
-  (0, import_node_fs64.mkdirSync)(unpack);
+  (0, import_node_fs63.mkdirSync)(unpack);
   const unpacked = unzip(zip, unpack);
   if (!unpacked.ok) {
-    (0, import_node_fs64.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: `unpack failed: ${unpacked.error}` };
   }
-  const entries = (0, import_node_fs64.readdirSync)(unpack);
-  const top = entries.length === 1 && (0, import_node_fs64.statSync)((0, import_node_path49.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path49.join)(unpack, entries[0]) : unpack;
-  if (!(0, import_node_fs64.existsSync)((0, import_node_path49.join)(top, "bin", lakeBinary()))) {
-    (0, import_node_fs64.rmSync)(tmp, { recursive: true, force: true });
+  const entries = (0, import_node_fs63.readdirSync)(unpack);
+  const top = entries.length === 1 && (0, import_node_fs63.statSync)((0, import_node_path49.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path49.join)(unpack, entries[0]) : unpack;
+  if (!(0, import_node_fs63.existsSync)((0, import_node_path49.join)(top, "bin", lakeBinary()))) {
+    (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: "the archive did not contain bin/lake" };
   }
-  (0, import_node_fs64.rmSync)(dir, { recursive: true, force: true });
-  (0, import_node_fs64.mkdirSync)(home, { recursive: true });
-  (0, import_node_fs64.renameSync)(top, dir);
-  (0, import_node_fs64.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs63.rmSync)(dir, { recursive: true, force: true });
+  (0, import_node_fs63.mkdirSync)(home, { recursive: true });
+  (0, import_node_fs63.renameSync)(top, dir);
+  (0, import_node_fs63.rmSync)(tmp, { recursive: true, force: true });
   return { ok: true, dir };
 }
 
 // src/lib/remote-config.ts
-var import_node_fs65 = require("node:fs");
+var import_node_fs64 = require("node:fs");
 var import_promises19 = require("node:fs/promises");
 var import_node_path50 = require("node:path");
 var import_yaml5 = __toESM2(require_dist());
@@ -39225,7 +39096,7 @@ async function adoptRemoteSetup(found, opts) {
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs65.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs64.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -39383,7 +39254,7 @@ function resolveDataDir2() {
     // local dev: running from repo root
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs66.existsSync)((0, import_node_path51.join)(candidate, "skills"))) {
+    if ((0, import_node_fs65.existsSync)((0, import_node_path51.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -39399,7 +39270,7 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out2 = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs66.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs65.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
         if (e.isDirectory()) walk2((0, import_node_path51.join)(d, e.name), rel);
         else if (e.isFile()) out2.push(rel);
@@ -39616,7 +39487,7 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs66.existsSync)(configPath) || !(0, import_node_fs66.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs65.existsSync)(configPath) || !(0, import_node_fs65.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
@@ -39719,11 +39590,11 @@ async function installSkills(force, step) {
   for (const skill of SKILLS) {
     const src = (0, import_node_path51.join)(skillsSource, skill);
     const dest = (0, import_node_path51.join)(skillsDest, skill);
-    if (!(0, import_node_fs66.existsSync)(src)) {
+    if (!(0, import_node_fs65.existsSync)(src)) {
       printWarn(`  Skill data not found: ${skill}`);
       continue;
     }
-    if ((0, import_node_fs66.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+    if ((0, import_node_fs65.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
       skillsInstalled++;
       continue;
     }
@@ -39923,7 +39794,7 @@ function registerInitCommand(program2) {
     const staleMarker = clearStalePluginMarker();
     const pluginMode = opts.plugin === false ? false : opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs66.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs65.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -40101,7 +39972,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs66.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs65.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -40131,7 +40002,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.34.0-experimental.380b51f" : "dev"
+          cli_version: true ? "0.34.0-experimental.3d4888f" : "dev"
         }
       });
     } catch (err2) {
@@ -40181,7 +40052,7 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs67 = require("node:fs");
+var import_node_fs66 = require("node:fs");
 var import_node_path52 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
@@ -40192,10 +40063,10 @@ function registerUninstallCommand(program2) {
     const skillsRoot = projectPath(".claude/skills");
     for (const name2 of PROJECT_SKILL_NAMES) {
       const dir = (0, import_node_path52.join)(skillsRoot, name2);
-      if ((0, import_node_fs67.existsSync)(dir)) {
+      if ((0, import_node_fs66.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name2}/`,
-          apply: () => (0, import_node_fs67.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs66.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -40209,24 +40080,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs67.existsSync)(verityDir)) {
+    if ((0, import_node_fs66.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs67.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs66.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs67.existsSync)(verityMd)) {
+      if ((0, import_node_fs66.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs67.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs66.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs67.existsSync)(path) && (0, import_node_fs67.statSync)(path).isDirectory() && (0, import_node_fs67.readdirSync)(path).length === 0) {
-        (0, import_node_fs67.rmdirSync)(path);
+      if ((0, import_node_fs66.existsSync)(path) && (0, import_node_fs66.statSync)(path).isDirectory() && (0, import_node_fs66.readdirSync)(path).length === 0) {
+        (0, import_node_fs66.rmdirSync)(path);
       }
     };
     actions.push({
@@ -40238,10 +40109,10 @@ function registerUninstallCommand(program2) {
     });
     const home = process.env.HOME ?? "";
     const globalVerityDir = (0, import_node_path52.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs67.existsSync)(globalVerityDir)) {
+    if (purgeGlobal && (0, import_node_fs66.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs67.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs66.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -40435,7 +40306,7 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs68 = require("node:fs");
+var import_node_fs67 = require("node:fs");
 var import_node_path53 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
@@ -40473,11 +40344,11 @@ function registerResetCommand(program2) {
     }
     const cacheDir = projectPath(CACHE_DIR);
     let purged = 0;
-    if ((0, import_node_fs68.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs68.readdirSync)(cacheDir)) {
+    if ((0, import_node_fs67.existsSync)(cacheDir)) {
+      for (const entry of (0, import_node_fs67.readdirSync)(cacheDir)) {
         if (entry.startsWith("pending-")) {
           try {
-            (0, import_node_fs68.unlinkSync)((0, import_node_path53.join)(cacheDir, entry));
+            (0, import_node_fs67.unlinkSync)((0, import_node_path53.join)(cacheDir, entry));
             purged++;
           } catch {
           }
@@ -40492,19 +40363,19 @@ function registerResetCommand(program2) {
       projectPath(`${VERITY_DIR}/.last-analysis`)
     ];
     for (const file of filesToClear) {
-      if ((0, import_node_fs68.existsSync)(file)) {
+      if ((0, import_node_fs67.existsSync)(file)) {
         try {
-          (0, import_node_fs68.writeFileSync)(file, "");
+          (0, import_node_fs67.writeFileSync)(file, "");
         } catch {
         }
       }
     }
     if (opts.all) {
       const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs68.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs68.readdirSync)(logsDir)) {
+      if ((0, import_node_fs67.existsSync)(logsDir)) {
+        for (const entry of (0, import_node_fs67.readdirSync)(logsDir)) {
           try {
-            (0, import_node_fs68.unlinkSync)((0, import_node_path53.join)(logsDir, entry));
+            (0, import_node_fs67.unlinkSync)((0, import_node_path53.join)(logsDir, entry));
           } catch {
           }
         }
@@ -40516,7 +40387,7 @@ function registerResetCommand(program2) {
 }
 
 // src/commands/reflect.ts
-var import_node_fs69 = require("node:fs");
+var import_node_fs68 = require("node:fs");
 
 // src/lib/reflection-globs.ts
 var MAX_GLOBS = 6;
@@ -40554,19 +40425,14 @@ async function writeNodeToDisk(args2) {
       { treePaths: listTrackedFiles(), recordBaseline: false }
     );
     if (written === 0) return false;
-    return (0, import_node_fs69.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
+    return (0, import_node_fs68.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
   } catch {
     return false;
   }
 }
 function registerReflectCommand(program2) {
-  program2.command("reflect").description("Capture learnings \u2014 auto-extract or record a reflection").option("--user-input <text>", "The reflection to record (the agent-drafted or user-dictated text); - reads it from stdin, so the words never pass through shell quoting").option("--kind <kind>", "Node kind (decision, gotcha, pattern, security, quality, intent, domain, integration)", "gotcha").option("--task-id <id>", "Task to reflect on (defaults to current task)").option("--confirmed", "The USER authored or confirmed these exact words \u2014 records as human-authored (source: user, confidence 1.0)").option("--file-globs <glob...>", "Files this reflection is about. Without any, the paths cited in the text are used; a reflection matching no file never surfaces in a review").option("--autonomous", "(deprecated, ignored) reflections are always recorded without a confirm step").action(async (opts) => {
+  program2.command("reflect").description("Capture learnings \u2014 auto-extract or record a reflection").option("--user-input <text>", "The reflection to record (the agent-drafted or user-dictated text)").option("--kind <kind>", "Node kind (decision, gotcha, pattern, security, quality, intent, domain, integration)", "gotcha").option("--task-id <id>", "Task to reflect on (defaults to current task)").option("--confirmed", "The USER authored or confirmed these exact words \u2014 records as human-authored (source: user, confidence 1.0)").option("--file-globs <glob...>", "Files this reflection is about. Without any, the paths cited in the text are used; a reflection matching no file never surfaces in a review").option("--autonomous", "(deprecated, ignored) reflections are always recorded without a confirm step").action(async (opts) => {
     const globals = program2.opts();
-    const input = readTextInput(opts.userInput, "--user-input");
-    if (!input.ok) {
-      printError(input.error);
-      process.exit(1);
-    }
     await ensureMemoryDir();
     const tokenResult = await resolveToken(globals.token);
     if (!tokenResult.ok) {
@@ -40627,7 +40493,7 @@ function registerReflectCommand(program2) {
       taskResolution = "none";
       printWarn("No active task found \u2014 saving as an unattached reflection.");
     }
-    const userInput = input.text;
+    const userInput = opts.userInput;
     if (userInput) {
       const validKinds = ["decision", "gotcha", "pattern", "security", "quality", "intent", "domain", "integration"];
       const kind = validKinds.includes(opts.kind) ? opts.kind : "gotcha";
@@ -40991,9 +40857,9 @@ function registerRunCommand(program2) {
 }
 
 // src/commands/telemetry.ts
-var import_node_fs70 = require("node:fs");
+var import_node_fs69 = require("node:fs");
 async function recordTelemetryChoice(choice) {
-  if (!(0, import_node_fs70.existsSync)(projectPath(SETUP_STATE_FILE))) return;
+  if (!(0, import_node_fs69.existsSync)(projectPath(SETUP_STATE_FILE))) return;
   try {
     if ((await readSetupState())?.telemetry === choice) return;
     await writeSetupState({ telemetry: choice });
@@ -41070,7 +40936,7 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/commands/prove.ts
-var import_node_fs71 = require("node:fs");
+var import_node_fs70 = require("node:fs");
 var import_node_path54 = require("node:path");
 
 // src/lib/prove/hint-pool.ts
@@ -41198,13 +41064,7 @@ async function proveAuth(program2) {
 }
 function registerProveCommand(program2) {
   const prove = program2.command("prove").description("Formal verification (Lean 4) of small, risky pieces of code \u2014 on demand");
-  prove.command("candidates [paths...]").description("Rank code worth a formal model, from git history and risk signals").option("--since <when>", `git --since window (default: "${DEFAULT_SINCE}")`).option("--limit <n>", "Candidates to show", "10").option("--rank <ranker>", "deterministic | luna | jev (luna and jev need an API key)", "deterministic").option("--hint <text>", "What the user wants checked, in their words (biases the rank; implies --rank luna); - reads it from stdin, so the words never pass through shell quoting").option("--json", "Machine-readable output").action(async (paths, opts) => {
-    const hint = readTextInput(opts.hint, "--hint");
-    if (!hint.ok) {
-      printError(hint.error);
-      process.exit(2);
-    }
-    opts.hint = hint.text;
+  prove.command("candidates [paths...]").description("Rank code worth a formal model, from git history and risk signals").option("--since <when>", `git --since window (default: "${DEFAULT_SINCE}")`).option("--limit <n>", "Candidates to show", "10").option("--rank <ranker>", "deterministic | luna | jev (luna and jev need an API key)", "deterministic").option("--hint <text>", "What the user wants checked, in their words (biases the rank; implies --rank luna)").option("--json", "Machine-readable output").action(async (paths, opts) => {
     if (opts.hint && opts.rank === "deterministic") opts.rank = "luna";
     const root = repoRoot();
     const ranker = RANKERS[opts.rank];
@@ -41267,7 +41127,7 @@ function registerProveCommand(program2) {
   });
   prove.command("check [model]").description("Elaborate a model (or every model) with the local Lean toolchain and report each property").option("--timeout <ms>", "Per-model timeout in ms", "120000").option("--json", "Machine-readable output").action((model, opts) => {
     const root = repoRoot();
-    if (!(0, import_node_fs71.existsSync)((0, import_node_path54.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs70.existsSync)((0, import_node_path54.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41329,7 +41189,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
       printError("Not logged in \u2014 replays run on the Verity service. Run `verity login` first.");
       process.exit(2);
     }
-    if (!(0, import_node_fs71.existsSync)((0, import_node_path54.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs70.existsSync)((0, import_node_path54.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41409,19 +41269,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
     }
     process.exit(outcome.findings.some((f) => f.verdict === "reproduced") ? 1 : 0);
   });
-  prove.command("generate <target>").description("Have the Verity service write a Lean model of one symbol (file#symbol), lint it, and check it here \u2014 up to 3 rounds").option("--lines <a-b>", "Model a region of the file (1-based, inclusive) instead of a named symbol").option("--hint <text>", "The user's worry, in their words (may become an intent property); - reads it from stdin").option("--revise <model>", "Revise this existing model after a diverged replay (with --note)").option("--note <text>", "What the replay showed was different (with --revise); - reads it from stdin").option("--json", "Machine-readable output").action(async (targetArg, opts) => {
-    if (opts.hint === "-" && opts.note === "-") {
-      printError("Only one of --hint and --note can read stdin (-).");
-      process.exit(2);
-    }
-    for (const flag of ["hint", "note"]) {
-      const input = readTextInput(opts[flag], `--${flag}`);
-      if (!input.ok) {
-        printError(input.error);
-        process.exit(2);
-      }
-      opts[flag] = input.text;
-    }
+  prove.command("generate <target>").description("Have the Verity service write a Lean model of one symbol (file#symbol), lint it, and check it here \u2014 up to 3 rounds").option("--lines <a-b>", "Model a region of the file (1-based, inclusive) instead of a named symbol").option("--hint <text>", "The user's worry, in their words (may become an intent property)").option("--revise <model>", "Revise this existing model after a diverged replay (with --note)").option("--note <text>", "What the replay showed was different (with --revise)").option("--json", "Machine-readable output").action(async (targetArg, opts) => {
     const root = repoRoot();
     const auth2 = await proveAuth(program2);
     if (!auth2 && !(process.env.VERITY_PROVE_DIRECT === "1" && process.env.OPENAI_API_KEY)) {
@@ -41454,7 +41302,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
       const existing = resolveModelFile(root, opts.revise);
       const src = existing ? readRegularFileInRoot(root, (0, import_node_path54.relative)(root, existing), 64 * 1024) : null;
       if (!src || !src.ok || !opts.note) {
-        printError("--revise needs an existing model under Models/ and --note - with what the replay showed on stdin");
+        printError('--revise needs an existing model under Models/ and --note "<what the replay showed>"');
         process.exit(2);
       }
       revise = { source: src.content, note: opts.note };
@@ -41543,7 +41391,7 @@ function refreshScaffold(root) {
 }
 
 // src/commands/lean.ts
-var import_node_fs72 = require("node:fs");
+var import_node_fs71 = require("node:fs");
 var import_node_child_process20 = require("node:child_process");
 var import_node_os11 = require("node:os");
 var import_node_path55 = require("node:path");
@@ -41563,7 +41411,7 @@ function registerLeanCommand(program2) {
     const managed = pinnedVersionDir();
     const matches = version ? version.includes(pin) : false;
     if (opts.json) {
-      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs72.existsSync)((0, import_node_path55.join)(managed, "bin")), asset: leanAssetName() });
+      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs71.existsSync)((0, import_node_path55.join)(managed, "bin")), asset: leanAssetName() });
       return;
     }
     printInfo(`pinned: ${LEAN_TOOLCHAIN}`);
@@ -41581,7 +41429,7 @@ function registerLeanCommand(program2) {
       process.exit(2);
     }
     const dir = pinnedVersionDir();
-    if ((0, import_node_fs72.existsSync)((0, import_node_path55.join)(dir, "bin", "lake")) && !opts.force) {
+    if ((0, import_node_fs71.existsSync)((0, import_node_path55.join)(dir, "bin", "lake")) && !opts.force) {
       printInfo(`already installed at ${dir}`);
       return;
     }
@@ -41617,18 +41465,18 @@ function registerLeanCommand(program2) {
   });
   lean.command("remove").description("Delete the Verity-managed toolchain for the pinned version").action(() => {
     const dir = pinnedVersionDir();
-    if (!(0, import_node_fs72.existsSync)(dir)) {
+    if (!(0, import_node_fs71.existsSync)(dir)) {
       printInfo("nothing to remove");
       return;
     }
-    (0, import_node_fs72.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs71.rmSync)(dir, { recursive: true, force: true });
     printInfo(`removed ${dir}`);
   });
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.380b51f").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.380b51f");
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.0-experimental.3d4888f").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.0-experimental.3d4888f");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();