@codacy/verity-cli 0.34.1-experimental.c910405 → 0.34.2-experimental.2cad220

package/bin/verity.js

@@ -2928,7 +2928,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {(string | Function)} text - string to add, or a function returning a string
        * @return {Command} `this` command for chaining
        */
-      addHelpText(position, text) {
+      addHelpText(position, text2) {
         const allowedValues = ["beforeAll", "before", "after", "afterAll"];
         if (!allowedValues.includes(position)) {
           throw new Error(`Unexpected value for position to addHelpText.
@@ -2937,10 +2937,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
         const helpEvent = `${position}Help`;
         this.on(helpEvent, (context) => {
           let helpStr;
-          if (typeof text === "function") {
-            helpStr = text({ error: context.error, command: context.command });
+          if (typeof text2 === "function") {
+            helpStr = text2({ error: context.error, command: context.command });
           } else {
-            helpStr = text;
+            helpStr = text2;
           }
           if (helpStr) {
             context.write(`${helpStr}
@@ -3982,14 +3982,14 @@ var require_foldFlowLines = __commonJS2({
     var FOLD_FLOW = "flow";
     var FOLD_BLOCK = "block";
     var FOLD_QUOTED = "quoted";
-    function foldFlowLines(text, indent, mode2 = "flow", { indentAtStart, lineWidth = 80, minContentWidth = 20, onFold, onOverflow } = {}) {
+    function foldFlowLines(text2, indent, mode2 = "flow", { indentAtStart, lineWidth = 80, minContentWidth = 20, onFold, onOverflow } = {}) {
       if (!lineWidth || lineWidth < 0)
-        return text;
+        return text2;
       if (lineWidth < minContentWidth)
         minContentWidth = 0;
       const endStep = Math.max(1 + minContentWidth, 1 + lineWidth - indent.length);
-      if (text.length <= endStep)
-        return text;
+      if (text2.length <= endStep)
+        return text2;
       const folds = [];
       const escapedFolds = {};
       let end = lineWidth - indent.length;
@@ -4006,14 +4006,14 @@ var require_foldFlowLines = __commonJS2({
       let escStart = -1;
       let escEnd = -1;
       if (mode2 === FOLD_BLOCK) {
-        i2 = consumeMoreIndentedLines(text, i2, indent.length);
+        i2 = consumeMoreIndentedLines(text2, i2, indent.length);
         if (i2 !== -1)
           end = i2 + endStep;
       }
-      for (let ch; ch = text[i2 += 1]; ) {
+      for (let ch; ch = text2[i2 += 1]; ) {
         if (mode2 === FOLD_QUOTED && ch === "\\") {
           escStart = i2;
-          switch (text[i2 + 1]) {
+          switch (text2[i2 + 1]) {
             case "x":
               i2 += 3;
               break;
@@ -4030,12 +4030,12 @@ var require_foldFlowLines = __commonJS2({
         }
         if (ch === "\n") {
           if (mode2 === FOLD_BLOCK)
-            i2 = consumeMoreIndentedLines(text, i2, indent.length);
+            i2 = consumeMoreIndentedLines(text2, i2, indent.length);
           end = i2 + indent.length + endStep;
           split = void 0;
         } else {
           if (ch === " " && prev && prev !== " " && prev !== "\n" && prev !== "	") {
-            const next = text[i2 + 1];
+            const next = text2[i2 + 1];
             if (next && next !== " " && next !== "\n" && next !== "	")
               split = i2;
           }
@@ -4047,12 +4047,12 @@ var require_foldFlowLines = __commonJS2({
             } else if (mode2 === FOLD_QUOTED) {
               while (prev === " " || prev === "	") {
                 prev = ch;
-                ch = text[i2 += 1];
+                ch = text2[i2 += 1];
                 overflow = true;
               }
               const j = i2 > escEnd + 1 ? i2 - 2 : escStart - 1;
               if (escapedFolds[j])
-                return text;
+                return text2;
               folds.push(j);
               escapedFolds[j] = true;
               end = j + endStep;
@@ -4067,39 +4067,39 @@ var require_foldFlowLines = __commonJS2({
       if (overflow && onOverflow)
         onOverflow();
       if (folds.length === 0)
-        return text;
+        return text2;
       if (onFold)
         onFold();
-      let res = text.slice(0, folds[0]);
+      let res = text2.slice(0, folds[0]);
       for (let i3 = 0; i3 < folds.length; ++i3) {
         const fold2 = folds[i3];
-        const end2 = folds[i3 + 1] || text.length;
+        const end2 = folds[i3 + 1] || text2.length;
         if (fold2 === 0)
           res = `
-${indent}${text.slice(0, end2)}`;
+${indent}${text2.slice(0, end2)}`;
         else {
           if (mode2 === FOLD_QUOTED && escapedFolds[fold2])
-            res += `${text[fold2]}\\`;
+            res += `${text2[fold2]}\\`;
           res += `
-${indent}${text.slice(fold2 + 1, end2)}`;
+${indent}${text2.slice(fold2 + 1, end2)}`;
         }
       }
       return res;
     }
-    function consumeMoreIndentedLines(text, i2, indent) {
+    function consumeMoreIndentedLines(text2, i2, indent) {
       let end = i2;
       let start2 = i2 + 1;
-      let ch = text[start2];
+      let ch = text2[start2];
       while (ch === " " || ch === "	") {
         if (i2 < start2 + indent) {
-          ch = text[++i2];
+          ch = text2[++i2];
         } else {
           do {
-            ch = text[++i2];
+            ch = text2[++i2];
           } while (ch && ch !== "\n");
           end = i2;
           start2 = i2 + 1;
-          ch = text[start2];
+          ch = text2[start2];
         }
       }
       return end;
@@ -6975,10 +6975,10 @@ var require_resolve_block_map = __commonJS2({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start: start2, key, sep: sep6, value } = collItem;
+        const { start: start2, key, sep: sep7, value } = collItem;
         const keyProps = resolveProps.resolveProps(start2, {
           indicator: "explicit-key-ind",
-          next: key ?? sep6?.[0],
+          next: key ?? sep7?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -6992,7 +6992,7 @@ var require_resolve_block_map = __commonJS2({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep6) {
+          if (!keyProps.anchor && !keyProps.tag && !sep7) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -7016,7 +7016,7 @@ var require_resolve_block_map = __commonJS2({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep6 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep7 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -7032,7 +7032,7 @@ var require_resolve_block_map = __commonJS2({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep6, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep7, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -7123,7 +7123,7 @@ var require_resolve_end = __commonJS2({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep6 = "";
+        let sep7 = "";
         for (const token of end) {
           const { source: source2, type } = token;
           switch (type) {
@@ -7137,13 +7137,13 @@ var require_resolve_end = __commonJS2({
               if (!comment)
                 comment = cb;
               else
-                comment += sep6 + cb;
-              sep6 = "";
+                comment += sep7 + cb;
+              sep7 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep6 += source2;
+                sep7 += source2;
               hasSpace = true;
               break;
             default:
@@ -7186,18 +7186,18 @@ var require_resolve_flow_collection = __commonJS2({
       let offset = fc.offset + fc.start.source.length;
       for (let i2 = 0; i2 < fc.items.length; ++i2) {
         const collItem = fc.items[i2];
-        const { start: start2, key, sep: sep6, value } = collItem;
+        const { start: start2, key, sep: sep7, value } = collItem;
         const props = resolveProps.resolveProps(start2, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep6?.[0],
+          next: key ?? sep7?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep6 && !value) {
+          if (!props.anchor && !props.tag && !sep7 && !value) {
             if (i2 === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i2 < fc.items.length - 1)
@@ -7251,8 +7251,8 @@ var require_resolve_flow_collection = __commonJS2({
             }
           }
         }
-        if (!isMap && !sep6 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep6, null, props, onError);
+        if (!isMap && !sep7 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep7, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -7264,7 +7264,7 @@ var require_resolve_flow_collection = __commonJS2({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep6 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep7 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -7275,8 +7275,8 @@ var require_resolve_flow_collection = __commonJS2({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep6)
-                for (const st of sep6) {
+              if (sep7)
+                for (const st of sep7) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -7293,7 +7293,7 @@ var require_resolve_flow_collection = __commonJS2({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep6, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep7, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -7473,7 +7473,7 @@ var require_resolve_block_scalar = __commonJS2({
           chompStart = i2 + 1;
       }
       let value = "";
-      let sep6 = "";
+      let sep7 = "";
       let prevMoreIndented = false;
       for (let i2 = 0; i2 < contentStart; ++i2)
         value += lines[i2][0].slice(trimIndent) + "\n";
@@ -7490,24 +7490,24 @@ var require_resolve_block_scalar = __commonJS2({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep6 + indent.slice(trimIndent) + content;
-          sep6 = "\n";
+          value += sep7 + indent.slice(trimIndent) + content;
+          sep7 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep6 === " ")
-            sep6 = "\n";
-          else if (!prevMoreIndented && sep6 === "\n")
-            sep6 = "\n\n";
-          value += sep6 + indent.slice(trimIndent) + content;
-          sep6 = "\n";
+          if (sep7 === " ")
+            sep7 = "\n";
+          else if (!prevMoreIndented && sep7 === "\n")
+            sep7 = "\n\n";
+          value += sep7 + indent.slice(trimIndent) + content;
+          sep7 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep6 === "\n")
+          if (sep7 === "\n")
             value += "\n";
           else
-            sep6 = "\n";
+            sep7 = "\n";
         } else {
-          value += sep6 + content;
-          sep6 = " ";
+          value += sep7 + content;
+          sep7 = " ";
           prevMoreIndented = false;
         }
       }
@@ -7689,25 +7689,25 @@ var require_resolve_flow_scalar = __commonJS2({
       if (!match)
         return source2;
       let res = match[1];
-      let sep6 = " ";
+      let sep7 = " ";
       let pos = first.lastIndex;
       line2.lastIndex = pos;
       while (match = line2.exec(source2)) {
         if (match[1] === "") {
-          if (sep6 === "\n")
-            res += sep6;
+          if (sep7 === "\n")
+            res += sep7;
           else
-            sep6 = "\n";
+            sep7 = "\n";
         } else {
-          res += sep6 + match[1];
-          sep6 = " ";
+          res += sep7 + match[1];
+          sep7 = " ";
         }
         pos = line2.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source2);
-      return res + sep6 + (match?.[1] ?? "");
+      return res + sep7 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source2, onError) {
       let res = "";
@@ -8514,14 +8514,14 @@ var require_cst_stringify = __commonJS2({
         }
       }
     }
-    function stringifyItem({ start: start2, key, sep: sep6, value }) {
+    function stringifyItem({ start: start2, key, sep: sep7, value }) {
       let res = "";
       for (const st of start2)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep6)
-        for (const st of sep6)
+      if (sep7)
+        for (const st of sep7)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -9671,18 +9671,18 @@ var require_parser = __commonJS2({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start2 = getFirstKeyStartProps(prev);
-          let sep6;
+          let sep7;
           if (scalar.end) {
-            sep6 = scalar.end;
-            sep6.push(this.sourceToken);
+            sep7 = scalar.end;
+            sep7.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep6 = [this.sourceToken];
+            sep7 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start: start2, key: scalar, sep: sep6 }]
+            items: [{ start: start2, key: scalar, sep: sep7 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -9835,15 +9835,15 @@ var require_parser = __commonJS2({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start3 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep6 = it.sep;
-                  sep6.push(this.sourceToken);
+                  const sep7 = it.sep;
+                  sep7.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start3, key, sep: sep6 }]
+                    items: [{ start: start3, key, sep: sep7 }]
                   });
                 } else if (start2.length > 0) {
                   it.sep = it.sep.concat(start2, this.sourceToken);
@@ -10037,13 +10037,13 @@ var require_parser = __commonJS2({
             const prev = getPrevProps(parent);
             const start2 = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep6 = fc.end.splice(1, fc.end.length);
-            sep6.push(this.sourceToken);
+            const sep7 = fc.end.splice(1, fc.end.length);
+            sep7.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start: start2, key: fc, sep: sep6 }]
+              items: [{ start: start2, key: fc, sep: sep7 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -13882,11 +13882,11 @@ ${JSON.stringify(symbolNames, null, 2)}`);
         for (const c of captures) {
           if (c.name === captureName) nodes.push(c.node.text);
         }
-        const test = /* @__PURE__ */ __name((text, positive) => {
-          return positive ? regex.test(text) : !regex.test(text);
+        const test = /* @__PURE__ */ __name((text2, positive) => {
+          return positive ? regex.test(text2) : !regex.test(text2);
         }, "test");
         if (nodes.length === 0) return !isPositive;
-        return matchAll2 ? nodes.every((text) => test(text, isPositive)) : nodes.some((text) => test(text, isPositive));
+        return matchAll2 ? nodes.every((text2) => test(text2, isPositive)) : nodes.some((text2) => test(text2, isPositive));
       });
     }
     __name(parseMatchPredicate, "parseMatchPredicate");
@@ -13916,7 +13916,7 @@ ${JSON.stringify(symbolNames, null, 2)}`);
           if (c.name === captureName) nodes.push(c.node.text);
         }
         if (nodes.length === 0) return !isPositive;
-        return nodes.every((text) => values.includes(text)) === isPositive;
+        return nodes.every((text2) => values.includes(text2)) === isPositive;
       });
     }
     __name(parseAnyOfPredicate, "parseAnyOfPredicate");
@@ -15172,8 +15172,8 @@ function filterReviewable(files) {
     const ext = (0, import_node_path4.extname)(f).slice(1);
     if (ANALYZABLE_EXTENSIONS.has(ext)) return false;
     if (REVIEWABLE_EXTENSIONS.has(ext)) return true;
-    const basename9 = f.split("/").pop() ?? "";
-    if (REVIEWABLE_FILENAMES.has(basename9)) return true;
+    const basename11 = f.split("/").pop() ?? "";
+    if (REVIEWABLE_FILENAMES.has(basename11)) return true;
     if (REVIEWABLE_PATH_PATTERNS.some((p) => p.test(f))) return true;
     return false;
   });
@@ -15712,11 +15712,11 @@ function startSpinner(label2, opts = {}) {
     },
     succeed(message) {
       finish(() => {
-        const text = message ?? current;
+        const text2 = message ?? current;
         const clock = showElapsed ? ` (${secondsSince(start2)})` : "";
         stream.write(
-          color ? `  ${GREEN2}\u2713${RESET} ${text}${DIM2}${clock}${RESET}
-` : `  \u2713 ${text}${clock}
+          color ? `  ${GREEN2}\u2713${RESET} ${text2}${DIM2}${clock}${RESET}
+` : `  \u2713 ${text2}${clock}
 `
         );
       });
@@ -16287,6 +16287,15 @@ async function reportLoginOutcome(out2, opts = {}) {
   }
 }
 
+// src/lib/session-env.ts
+function envSessionId(env = process.env) {
+  for (const name2 of ["CLAUDE_SESSION_ID", "CLAUDE_CODE_SESSION_ID"]) {
+    const value = env[name2];
+    if (value) return value;
+  }
+  return void 0;
+}
+
 // src/commands/login.ts
 function registerLoginCommand(program2) {
   program2.command("login").description("Log in to Verity (one GitHub login grants access to all your repositories)").option("--force", "Re-authenticate even if already logged in").option("--start", "Show the GitHub code and return at once (finish with --finish); prints JSON").option("--finish", "Wait for approval of the code --start showed, then log in; prints JSON").option("--wait <seconds>", "With --finish: how long to wait for approval before returning", "100").option("--cancel", "Discard a code --start showed that will not be approved").action(async (opts) => {
@@ -16303,7 +16312,7 @@ function registerLoginCommand(program2) {
       return;
     }
     const split = !!(opts.start || opts.finish);
-    if (!split && !process.stdin.isTTY && (process.env.CLAUDECODE || process.env.CLAUDE_SESSION_ID)) {
+    if (!split && !process.stdin.isTTY && (process.env.CLAUDECODE || envSessionId())) {
       printWarn("Inside a Claude Code session the code below may not be visible until this command ends.");
       printWarn('  Use "verity login --start", then "verity login --finish" once it is approved.');
     }
@@ -17435,13 +17444,13 @@ function scrub(s) {
 var installed = false;
 var wroteBanner = false;
 var banner = "";
-function append(text) {
+function append(text2) {
   try {
     const dir = projectPath(DEBUG_LOG_DIR);
     const file = projectPath(STDERR_LOG_FILE);
     (0, import_node_fs9.mkdirSync)(dir, { recursive: true });
     rotateIfNeeded(file);
-    (0, import_node_fs9.appendFileSync)(file, text);
+    (0, import_node_fs9.appendFileSync)(file, text2);
   } catch {
   }
 }
@@ -17463,19 +17472,19 @@ function installStderrLog(cmd, argv, version) {
     const result = original(...args2);
     try {
       const chunk = args2[0];
-      const text = typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf-8") : String(chunk);
+      const text2 = typeof chunk === "string" ? chunk : Buffer.isBuffer(chunk) ? chunk.toString("utf-8") : String(chunk);
       ensureBanner();
-      append(scrub(text));
+      append(scrub(text2));
     } catch {
     }
     return result;
   };
   process.stderr.write = tee;
 }
-function logToFileOnly(text) {
+function logToFileOnly(text2) {
   if (!installed) return;
   ensureBanner();
-  append(text.endsWith("\n") ? text : `${text}
+  append(text2.endsWith("\n") ? text2 : `${text2}
 `);
 }
 
@@ -18046,8 +18055,8 @@ var import_promises5 = require("node:fs/promises");
 var import_node_fs12 = require("node:fs");
 var import_node_child_process6 = require("node:child_process");
 var import_node_crypto2 = require("node:crypto");
-function stripImageReferences(text) {
-  return text.replace(/\[Image #\d+\]/g, "[screenshot \u2014 not available for review]");
+function stripImageReferences(text2) {
+  return text2.replace(/\[Image #\d+\]/g, "[screenshot \u2014 not available for review]");
 }
 function bufferTmpPath() {
   return `${CONVERSATION_BUFFER_FILE}.${process.pid}.${(0, import_node_crypto2.randomBytes)(4).toString("hex")}.tmp`;
@@ -18913,9 +18922,9 @@ var STOPWORDS = /* @__PURE__ */ new Set([
   "within",
   "without"
 ]);
-function tokenize(text) {
+function tokenize(text2) {
   return new Set(
-    text.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((w) => w.length > 2 && !STOPWORDS.has(w))
+    text2.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((w) => w.length > 2 && !STOPWORDS.has(w))
   );
 }
 function jaccardKeywords(a, b) {
@@ -18992,9 +19001,9 @@ var MAX_BUDGET_TOKENS = 4e3;
 var MAX_NODE_FILE_BYTES = 64 * 1024;
 var MIN_SCORE = RELEVANCE_FLOOR * 0.5;
 var ORG_MIN_SHARED_TERMS = 2;
-function orgTerms(text) {
+function orgTerms(text2) {
   return new Set(
-    text.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((w) => w.length > 2)
+    text2.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((w) => w.length > 2)
   );
 }
 function sharedTerms(a, b) {
@@ -19277,15 +19286,15 @@ function runHook(hooks) {
     return false;
   }
 }
-function appendInRoot(root, name2, text, hooks = {}) {
+function appendInRoot(root, name2, text2, hooks = {}) {
   return writeVerified(root, name2, hooks, true, (fd) => {
-    (0, import_node_fs17.writeSync)(fd, text);
+    (0, import_node_fs17.writeSync)(fd, text2);
   });
 }
-function replaceInRoot(root, name2, text, hooks = {}) {
+function replaceInRoot(root, name2, text2, hooks = {}) {
   return writeVerified(root, name2, hooks, false, (fd) => {
     (0, import_node_fs17.ftruncateSync)(fd, 0);
-    (0, import_node_fs17.writeSync)(fd, text, 0);
+    (0, import_node_fs17.writeSync)(fd, text2, 0);
   });
 }
 
@@ -19475,12 +19484,12 @@ function ensureVerityGitignore() {
     if (hasSupersededMemory && !memoryIsCommitted) {
       next = fenceMemoryLines(next);
     }
-    let text = next.join("\n");
+    let text2 = next.join("\n");
     if (!hasMarker) {
-      const sep6 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
-      text = text + sep6 + VERITY_GITIGNORE_BLOCK;
+      const sep7 = text2 === "" ? "" : text2.endsWith("\n") ? "\n" : "\n\n";
+      text2 = text2 + sep7 + VERITY_GITIGNORE_BLOCK;
     }
-    if (text !== content) (0, import_node_fs19.writeFileSync)(".gitignore", text);
+    if (text2 !== content) (0, import_node_fs19.writeFileSync)(".gitignore", text2);
     return verified(
       memoryIsCommitted ? "memory-tracked" : hasSupersededMemory ? "memory-fenced" : needsRepair ? "repaired" : "added"
     );
@@ -19506,13 +19515,13 @@ function writeFencedBlock() {
   const hasMarker = content.includes(VERITY_GITIGNORE_MARKER);
   let lines = content.split("\n").map((l) => BREAKING_ENTRIES.has(l.trim()) ? ".verity/*" : l);
   lines = fenceMemoryLines(lines);
-  let text = lines.join("\n");
+  let text2 = lines.join("\n");
   if (!hasMarker) {
-    const sep6 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
-    text = text + sep6 + VERITY_GITIGNORE_BLOCK;
+    const sep7 = text2 === "" ? "" : text2.endsWith("\n") ? "\n" : "\n\n";
+    text2 = text2 + sep7 + VERITY_GITIGNORE_BLOCK;
   }
   try {
-    (0, import_node_fs19.writeFileSync)(".gitignore", text);
+    (0, import_node_fs19.writeFileSync)(".gitignore", text2);
     return true;
   } catch {
     return false;
@@ -19559,8 +19568,8 @@ function keepMemoryTracked() {
   }
   if (content.includes(MEMORY_OPT_OUT_MARKER)) return "already";
   try {
-    const sep6 = content === "" ? "" : content.endsWith("\n") ? "\n" : "\n\n";
-    (0, import_node_fs19.writeFileSync)(".gitignore", content + sep6 + MEMORY_OPT_OUT_STANZA);
+    const sep7 = content === "" ? "" : content.endsWith("\n") ? "\n" : "\n\n";
+    (0, import_node_fs19.writeFileSync)(".gitignore", content + sep7 + MEMORY_OPT_OUT_STANZA);
   } catch {
     return "failed";
   }
@@ -20491,26 +20500,26 @@ var CLAUDE_MD_PROSE_LEGACY = [
   "superseded \u2014 ignore them unless investigating history."
 ].join("\n");
 var PRESERVE_PLACEHOLDER = "<!-- Add binding, hand-curated guidance here; it survives Verity regeneration. -->";
-function* scanLines(text) {
+function* scanLines(text2) {
   let offset = 0;
   let inFence = false;
-  for (const line2 of text.split("\n")) {
+  for (const line2 of text2.split("\n")) {
     const isFence = /^(`{3,}|~{3,})/.test(line2.trim());
     if (isFence) inFence = !inFence;
     yield { line: line2, start: offset, inFence: inFence || isFence };
     offset += line2.length + 1;
   }
 }
-function findMarker(text, marker, from = 0) {
-  for (const { line: line2, start: start2, inFence } of scanLines(text)) {
+function findMarker(text2, marker, from = 0) {
+  for (const { line: line2, start: start2, inFence } of scanLines(text2)) {
     if (!inFence && start2 >= from && line2.startsWith(marker)) {
       return start2;
     }
   }
   return -1;
 }
-function hasLegacyMemoryBlock(text) {
-  return findMarker(text, LEGACY_MD_START) !== -1;
+function hasLegacyMemoryBlock(text2) {
+  return findMarker(text2, LEGACY_MD_START) !== -1;
 }
 async function ensureClaudeMdPointer(cwd = repoRoot()) {
   const claudeMdPath = (0, import_node_path19.join)(cwd, "CLAUDE.md");
@@ -20710,10 +20719,10 @@ var STOP = /* @__PURE__ */ new Set([
   "verify",
   "check"
 ]);
-function pendingTokens(text) {
-  if (!text || typeof text !== "string") return [];
+function pendingTokens(text2) {
+  if (!text2 || typeof text2 !== "string") return [];
   const out2 = /* @__PURE__ */ new Set();
-  for (const raw of text.toLowerCase().split(/[^a-z0-9]+/)) {
+  for (const raw of text2.toLowerCase().split(/[^a-z0-9]+/)) {
     if (raw.length <= 3) continue;
     if (STOP.has(raw)) continue;
     out2.add(raw);
@@ -20728,8 +20737,8 @@ function overlapCoefficient(a, b) {
   for (const t of a) if (setB.has(t)) shared++;
   return shared / Math.min(a.length, b.length);
 }
-function isRepeatOfAny(text, priorFingerprints, threshold = REPEAT_THRESHOLD) {
-  const tokens = pendingTokens(text);
+function isRepeatOfAny(text2, priorFingerprints, threshold = REPEAT_THRESHOLD) {
+  const tokens = pendingTokens(text2);
   if (tokens.length === 0) return false;
   return priorFingerprints.some((prior) => overlapCoefficient(tokens, prior) >= threshold);
 }
@@ -21419,8 +21428,8 @@ function assessContinuity(i2) {
 // src/lib/dossier/reanchor.ts
 var import_node_crypto8 = require("node:crypto");
 var import_node_fs25 = require("node:fs");
-function lineSha(text) {
-  return (0, import_node_crypto8.createHash)("sha256").update(text.trim()).digest("hex").slice(0, HASH_WIDTH);
+function lineSha(text2) {
+  return (0, import_node_crypto8.createHash)("sha256").update(text2.trim()).digest("hex").slice(0, HASH_WIDTH);
 }
 function fileHash(path) {
   try {
@@ -21893,10 +21902,10 @@ function recordGoal(d, prompt, source2 = "prompt") {
     appendEvent(d, { k: "goal_continue", text: prompt.slice(0, 64) });
     return;
   }
-  const text = prompt.slice(0, MAX_GOAL_CHARS);
+  const text2 = prompt.slice(0, MAX_GOAL_CHARS);
   appendEvent(d, {
     k: "goal",
-    text,
+    text: text2,
     text_len: prompt.length,
     source: source2,
     ...prompt.length > MAX_GOAL_CHARS && { truncated: true }
@@ -22150,13 +22159,13 @@ function registerIntentCommands(program2) {
       if (!prompt) {
         process.exit(0);
       }
-      if (deferredToPlugin("intent capture", event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+      if (deferredToPlugin("intent capture", event.session_id ?? envSessionId() ?? null)) {
         process.exit(0);
       }
       const isPrimitive = isSlashCommand(prompt);
       const authForScope = await resolveToken(program2.opts().token);
       const scopeToken = authForScope.ok ? authForScope.data.token : void 0;
-      const scopeSession = event.session_id || process.env.CLAUDE_SESSION_ID || "";
+      const scopeSession = event.session_id || envSessionId() || "";
       if (!isPrimitive) await appendToConversationBuffer(prompt, sessionScopeKey(scopeToken, scopeSession));
       if (!isPrimitive) {
         try {
@@ -22876,7 +22885,12 @@ function registerLifecycleCommands(program2) {
       }
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
-      const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
+      const resolved = resolveHookSession(opts.sessionId, event, envSessionId());
+      if (!resolved.ok) {
+        logEvent("lifecycle_session_flag_refused", { command: "compact" });
+        process.exit(0);
+      }
+      const sessionId = resolved.sessionId;
       if (deferredToPlugin("compact", sessionId)) process.exit(0);
       const globals = program2.opts();
       const tok = await resolveToken(globals.token);
@@ -22905,9 +22919,14 @@ function registerLifecycleCommands(program2) {
       }
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
-      const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
+      const resolved = resolveHookSession(opts.sessionId, event, envSessionId());
+      if (!resolved.ok) {
+        logEvent("lifecycle_session_flag_refused", { command: "session end" });
+        process.exit(0);
+      }
+      const sessionId = resolved.sessionId;
       if (deferredToPlugin("session end", sessionId)) process.exit(0);
-      const reason = opts.reason ?? event.session_end_reason ?? event.reason ?? "other";
+      const reason = hookWord(opts.reason) ?? event.session_end_reason ?? event.reason ?? "other";
       if (reason === "clear") {
         writeCarry(sessionId ?? void 0, getCurrentCommit());
       }
@@ -22986,25 +23005,61 @@ function buildCompactionContext(session) {
       `${r.projection.fold.refused} earlier finding(s) were dropped because the code they pointed at no longer matches. They are resolved; do not revisit them.`
     );
   }
-  const text = lines.join("\n");
-  if (text.length <= MAX_CHARS) return text;
+  const text2 = lines.join("\n");
+  if (text2.length <= MAX_CHARS) return text2;
   const trimmed = [...lines.slice(0, 5), ...lines.slice(5, 5 + 2)].join("\n");
   return trimmed.length <= MAX_CHARS ? trimmed : null;
 }
+var MAX_HOOK_EVENT_BYTES = 64 * 1024;
+var SESSION_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+var HOOK_WORD = /^[a-z][a-z_]{0,63}$/;
+function isHookSessionId(value) {
+  return typeof value === "string" && SESSION_ID.test(value);
+}
+function hookWord(value) {
+  return typeof value === "string" && HOOK_WORD.test(value) ? value : void 0;
+}
+function resolveHookSession(flag, event, env) {
+  if (flag !== void 0) return isHookSessionId(flag) ? { ok: true, sessionId: flag } : { ok: false };
+  if (event.session_id) return { ok: true, sessionId: event.session_id };
+  return { ok: true, sessionId: isHookSessionId(env) ? env : null };
+}
+function parseHookEvent(raw) {
+  let data;
+  try {
+    data = JSON.parse(raw.trim() || "{}");
+  } catch {
+    return {};
+  }
+  if (!data || typeof data !== "object" || Array.isArray(data)) return {};
+  const o = data;
+  const event = {};
+  if (isHookSessionId(o.session_id)) event.session_id = o.session_id;
+  const compaction = hookWord(o.compaction_type);
+  if (compaction) event.compaction_type = compaction;
+  const endReason = hookWord(o.session_end_reason);
+  if (endReason) event.session_end_reason = endReason;
+  const reason = hookWord(o.reason);
+  if (reason) event.reason = reason;
+  return event;
+}
 async function readHookStdin() {
   try {
     if (process.stdin.isTTY) return {};
     const chunks = [];
+    let size = 0;
     const timeout = new Promise((resolve9) => setTimeout(() => resolve9({}), 500));
     const read2 = new Promise((resolve9) => {
-      process.stdin.on("data", (c) => chunks.push(c));
-      process.stdin.on("end", () => {
-        try {
-          resolve9(JSON.parse(Buffer.concat(chunks).toString("utf-8").trim() || "{}"));
-        } catch {
+      process.stdin.on("data", (c) => {
+        size += c.length;
+        if (size > MAX_HOOK_EVENT_BYTES) {
+          process.stdin.destroy();
           resolve9({});
+          return;
         }
+        chunks.push(c);
       });
+      process.stdin.on("end", () => resolve9(parseHookEvent(Buffer.concat(chunks).toString("utf-8"))));
       process.stdin.on("error", () => resolve9({}));
       process.stdin.resume();
     });
@@ -23269,9 +23324,9 @@ function declaredDependencies(root, files) {
   for (const path of pythonManifests) {
     if (!(0, import_node_fs31.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs31.readFileSync)(path, "utf-8");
-      for (const m of text.matchAll(/^\s*["']?([A-Za-z][A-Za-z0-9._-]+)/gm)) names2.push(m[1]);
-      for (const line2 of text.split("\n")) {
+      const text2 = (0, import_node_fs31.readFileSync)(path, "utf-8");
+      for (const m of text2.matchAll(/^\s*["']?([A-Za-z][A-Za-z0-9._-]+)/gm)) names2.push(m[1]);
+      for (const line2 of text2.split("\n")) {
         if (!/dependencies\s*=/.test(line2)) continue;
         for (const m of line2.matchAll(/["']([A-Za-z][A-Za-z0-9._-]+)/g)) names2.push(m[1]);
       }
@@ -23285,8 +23340,8 @@ function declaredDependencies(root, files) {
   for (const path of goMods) {
     if (!(0, import_node_fs31.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs31.readFileSync)(path, "utf-8");
-      for (const m of text.matchAll(/^\s+([\w.-]+\/[\w./-]+)\s+v/gm)) {
+      const text2 = (0, import_node_fs31.readFileSync)(path, "utf-8");
+      for (const m of text2.matchAll(/^\s+([\w.-]+\/[\w./-]+)\s+v/gm)) {
         names2.push(m[1].replace(/^github\.com\//, ""));
       }
     } catch {
@@ -23296,8 +23351,8 @@ function declaredDependencies(root, files) {
     const path = (0, import_node_path28.join)(root, file);
     if (!(0, import_node_fs31.existsSync)(path)) continue;
     try {
-      const text = (0, import_node_fs31.readFileSync)(path, "utf-8");
-      for (const m of text.matchAll(/["'<]([A-Za-z][A-Za-z0-9._-]{2,})["'>]/g)) names2.push(m[1]);
+      const text2 = (0, import_node_fs31.readFileSync)(path, "utf-8");
+      for (const m of text2.matchAll(/["'<]([A-Za-z][A-Za-z0-9._-]{2,})["'>]/g)) names2.push(m[1]);
     } catch {
     }
   }
@@ -23828,8 +23883,8 @@ async function correctVerityMdVersion(opts) {
     origin: { kind: "synthesized", tools: opts.tools }
   }));
 }
-async function writeFileTo(relative6, body2) {
-  const target = projectPath(relative6);
+async function writeFileTo(relative7, body2) {
+  const target = projectPath(relative7);
   await (0, import_promises10.mkdir)((0, import_node_path29.dirname)(target), { recursive: true });
   await (0, import_promises10.writeFile)(target, body2);
 }
@@ -24908,7 +24963,7 @@ function registerStatusCommand(program2) {
     {
       const tokenForScope = tokenResult.data.token;
       const found = resolveIgnoreState(
-        ignoreStateKeys(tokenForScope, process.env.CLAUDE_SESSION_ID || void 0)
+        ignoreStateKeys(tokenForScope, envSessionId())
       );
       const now = Math.floor(Date.now() / 1e3);
       const active = resolveActive(found?.state ?? null, now);
@@ -25005,9 +25060,9 @@ function readTextInput(value, flag, readStdin2 = () => (0, import_node_fs39.read
   if (raw.length > MAX_STDIN_BYTES) {
     return { ok: false, error: `${flag} from stdin is ${raw.length} bytes; the limit is ${MAX_STDIN_BYTES}.` };
   }
-  const text = raw.toString("utf8").replace(/\r?\n$/, "");
-  if (!text.trim()) return { ok: false, error: `${flag} from stdin is empty.` };
-  return { ok: true, text };
+  const text2 = raw.toString("utf8").replace(/\r?\n$/, "");
+  if (!text2.trim()) return { ok: false, error: `${flag} from stdin is empty.` };
+  return { ok: true, text: text2 };
 }
 
 // src/lib/terminal-text.ts
@@ -25025,8 +25080,8 @@ function terminalUrl(value) {
 // src/commands/feedback.ts
 function registerFeedbackCommand(program2) {
   const feedbackCmd = program2.command("feedback").description("Send feedback to the Verity team");
-  feedbackCmd.command("message <text>").description("Send general feedback (- reads the message from stdin, so the words never pass through shell quoting)").option("--session-id <id>", "Session identifier").option("--model <name>", "Agent model name").action(async (text, opts) => {
-    await sendMessageArg(text, opts, program2.opts());
+  feedbackCmd.command("message <text>").description("Send general feedback (- reads the message from stdin, so the words never pass through shell quoting)").option("--session-id <id>", "Session identifier").option("--model <name>", "Agent model name").action(async (text2, opts) => {
+    await sendMessageArg(text2, opts, program2.opts());
   });
   feedbackCmd.command("finding <run-id> <pattern-id> <action> [note]").description("Submit per-finding feedback (false_positive, acknowledged, useful, etc.); a note of - is read from stdin").option("--file <path>", "File path the finding applies to").option("--line <n>", "Line number", parseInt).action(async (runId, patternId, action, inlineNote, opts) => {
     const globals = program2.opts();
@@ -25101,7 +25156,7 @@ async function sendGeneralFeedback(message, opts, globals) {
     process.exit(1);
   }
   const body2 = { message };
-  const sessionId = opts.sessionId ?? process.env.CLAUDE_SESSION_ID;
+  const sessionId = opts.sessionId ?? envSessionId();
   const model = opts.model ?? process.env.CLAUDE_MODEL ?? "unknown";
   if (sessionId) body2.session_id = sessionId;
   if (model) body2.agent_model = model;
@@ -25631,28 +25686,28 @@ function parseRgLine(line2) {
   return { file: line2.slice(0, first), line: n, text: line2.slice(second + 1) };
 }
 var isWordChar = (c) => c !== void 0 && /[A-Za-z0-9_]/.test(c);
-function wordHit(text, symbol) {
+function wordHit(text2, symbol) {
   let from = 0;
   for (; ; ) {
-    const at = text.indexOf(symbol, from);
+    const at = text2.indexOf(symbol, from);
     if (at < 0) return false;
-    const before = at === 0 ? void 0 : text[at - 1];
-    const after = text[at + symbol.length];
+    const before = at === 0 ? void 0 : text2[at - 1];
+    const after = text2[at + symbol.length];
     if (!isWordChar(before) && !isWordChar(after)) return true;
     from = at + 1;
   }
 }
-function isContractLine(text, symbol) {
+function isContractLine(text2, symbol) {
   for (const kw of ["implements", "extends"]) {
     let from = 0;
     for (; ; ) {
-      const at = text.indexOf(kw, from);
+      const at = text2.indexOf(kw, from);
       if (at < 0) break;
       from = at + 1;
-      const before = at === 0 ? void 0 : text[at - 1];
-      const after = text[at + kw.length];
+      const before = at === 0 ? void 0 : text2[at - 1];
+      const after = text2[at + kw.length];
       if (isWordChar(before) || isWordChar(after)) continue;
-      let clause = text.slice(at + kw.length);
+      let clause = text2.slice(at + kw.length);
       const stop2 = Math.min(
         ...[clause.indexOf(";"), clause.indexOf("{")].filter((i2) => i2 >= 0)
       );
@@ -25684,20 +25739,20 @@ function partitionSites(rgLines, symbols, opts) {
     if (opts.sentPaths.has(h.file)) continue;
     if (opts.isExcluded(h.file)) continue;
     if (!isCodeSiteFile(h.file)) continue;
-    const text = h.text.trim();
-    if (text.length === 0 || IMPORT_LINE.test(h.text)) continue;
-    if (COMMENT_LINE.test(text)) continue;
-    if (BARE_MEMBER_LINE.test(text) || GO_IMPORT_PATH_LINE.test(text)) continue;
+    const text2 = h.text.trim();
+    if (text2.length === 0 || IMPORT_LINE.test(h.text)) continue;
+    if (COMMENT_LINE.test(text2)) continue;
+    if (BARE_MEMBER_LINE.test(text2) || GO_IMPORT_PATH_LINE.test(text2)) continue;
     const n = perFile.get(h.file) ?? 0;
     if (n >= MAX_SITES_PER_FILE) continue;
     const site = {
       file: h.file,
       line: h.line,
-      text: text.slice(0, SITE_TEXT_MAX),
+      text: text2.slice(0, SITE_TEXT_MAX),
       symbol: h.symbol,
       // R2 falls out of R1 for free: a word search for `Sym` already matches
       // `implements Sym` / `extends Sym` lines — classification is all R2 is.
-      ...isContractLine(text, h.symbol) ? { kind: "contract" } : {}
+      ...isContractLine(text2, h.symbol) ? { kind: "contract" } : {}
     };
     if (isTestPath(h.file)) {
       if (tests.length < MAX_TEST_SLOTS) {
@@ -25717,8 +25772,8 @@ var MAX_IMPORTERS_PER_FILE = 2;
 function moduleKey(path) {
   return path.replace(/\.(ts|tsx|js|jsx|mjs|cjs|mts|cts)$/i, "").replace(/\/index$/, "");
 }
-function importSpecifier(text) {
-  const m = /(?:\bfrom|\brequire\s*\(|\bimport\s*\(|^\s*import)\s*['"]([^'"\n]+)['"]/.exec(text);
+function importSpecifier(text2) {
+  const m = /(?:\bfrom|\brequire\s*\(|\bimport\s*\(|^\s*import)\s*['"]([^'"\n]+)['"]/.exec(text2);
   return m?.[1] ?? null;
 }
 function resolveSpecifier(fromFile, spec) {
@@ -25988,8 +26043,8 @@ function extractEnclosingExcerpt(content, siteLine, path) {
     start2 = Math.max(1, siteLine - (EXCERPT_MAX_LINES - 6));
   }
   const end = Math.min(lines.length, start2 + EXCERPT_MAX_LINES - 1);
-  const text = lines.slice(start2 - 1, end).join("\n").slice(0, EXCERPT_MAX_CHARS);
-  return { start_line: start2, text };
+  const text2 = lines.slice(start2 - 1, end).join("\n").slice(0, EXCERPT_MAX_CHARS);
+  return { start_line: start2, text: text2 };
 }
 function upgradeToExcerpts(rc, opts) {
   if (rc.state !== "ok") return;
@@ -26345,7 +26400,7 @@ function resolveFrame(input) {
   const hookDirUsable = !!input.hookCwd && (0, import_node_fs40.existsSync)(input.hookCwd);
   const baseDir = hookDirUsable ? input.hookCwd : process.cwd();
   let anchor = hookDirUsable ? "hook-cwd" : "process-cwd";
-  const refuse = (refusal) => ({
+  const refuse2 = (refusal) => ({
     moment: found?.moment ?? null,
     frame: { worktreeRoot: null, gitDir: null, commonDir: null, isLinkedWorktree: false, branch: null, anchor, refusal }
   });
@@ -26359,19 +26414,19 @@ function resolveFrame(input) {
       if (!kindRes.some((re) => re.test(segments[i2]))) continue;
       const target = extractCommandTarget(input.command, i2, baseDir);
       if (target.named) anchor = "command-target";
-      if (target.unresolvable) return refuse(`target:${target.unresolvable}`);
+      if (target.unresolvable) return refuse2(`target:${target.unresolvable}`);
       dirs.add(target.dir ?? baseDir);
     }
-    if (dirs.size > 1) return refuse(`target:multiple ${found.moment} targets in one command`);
+    if (dirs.size > 1) return refuse2(`target:multiple ${found.moment} targets in one command`);
     const targetDir = dirs.size === 1 ? [...dirs][0] : baseDir;
     if (targetDir !== baseDir) {
-      if (!(0, import_node_fs40.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
+      if (!(0, import_node_fs40.existsSync)(targetDir)) return refuse2(`target:directory does not exist: ${targetDir}`);
       dir = targetDir;
     }
   }
   const toplevel = gitAt(dir, ["rev-parse", "--show-toplevel"]);
   if (!toplevel) {
-    return refuse(anchor === "command-target" ? `target:not a git repository: ${dir}` : `anchor:not a git repository: ${dir}`);
+    return refuse2(anchor === "command-target" ? `target:not a git repository: ${dir}` : `anchor:not a git repository: ${dir}`);
   }
   const gitDirRaw = gitAt(dir, ["rev-parse", "--absolute-git-dir"]);
   const commonRaw = gitAt(dir, ["rev-parse", "--git-common-dir"]);
@@ -26967,7 +27022,7 @@ function sanitizeCommandWithLoss(rawCmd) {
   const lost = lines.slice(1).some((l) => l.trim().length > 0);
   const first = lines[0];
   const cmd = sanitizeCommand(first);
-  const hadSeparator = SEPARATORS.some((sep6) => first.indexOf(sep6) > 0);
+  const hadSeparator = SEPARATORS.some((sep7) => first.indexOf(sep7) > 0);
   return { cmd, lost: lost || !hadSeparator && first.length > MAX_COMMAND_CHARS };
 }
 var SEPARATORS = [" | ", " > ", " >> ", " 2>", " && ", " ; "];
@@ -26976,11 +27031,11 @@ function sanitizeCommand(rawCmd) {
   let cmd = rawCmd.split("\n")[0];
   let cut = -1;
   let marker = "";
-  for (const sep6 of SEPARATORS) {
-    const idx = cmd.indexOf(sep6);
+  for (const sep7 of SEPARATORS) {
+    const idx = cmd.indexOf(sep7);
     if (idx > 0 && (cut === -1 || idx < cut)) {
       cut = idx;
-      marker = sep6.trim();
+      marker = sep7.trim();
     }
   }
   if (cut > -1) cmd = cmd.slice(0, cut);
@@ -27047,13 +27102,13 @@ async function bootstrap(run4) {
     isTTY: process.stdout.isTTY === true
   });
   const { assistantMessage: assistantResponse, stopReason, transcriptPath, sessionId } = await readStopHookStdin();
-  if (deferredToPlugin("analyze", sessionId ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+  if (deferredToPlugin("analyze", sessionId ?? envSessionId() ?? null)) {
     process.exit(0);
   }
   const actionSummary = transcriptPath ? await extractActionSummary(transcriptPath) : null;
   const tokenResult = await resolveToken(globals.token);
   const scopeToken = tokenResult.ok ? tokenResult.data.token : void 0;
-  const rawSessionId = sessionId || process.env.CLAUDE_SESSION_ID || void 0;
+  const rawSessionId = sessionId || envSessionId();
   const baselineSessionId = sessionScopeKey(scopeToken, rawSessionId);
   if (tokenResult.ok) {
     run4.beacon = {
@@ -27086,12 +27141,12 @@ function parseKnowledgeNote(raw) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
   const node_id = typeof o.node_id === "string" ? o.node_id.trim() : "";
-  const text = typeof o.text === "string" ? o.text.trim() : "";
-  if (!node_id || !text) return null;
-  if (text.length > 1e3) return null;
+  const text2 = typeof o.text === "string" ? o.text.trim() : "";
+  if (!node_id || !text2) return null;
+  if (text2.length > 1e3) return null;
   return {
     node_id,
-    text,
+    text: text2,
     file: typeof o.file === "string" && o.file ? o.file : null,
     line: typeof o.line === "number" && Number.isFinite(o.line) && o.line > 0 ? Math.floor(o.line) : null
   };
@@ -27129,10 +27184,10 @@ function episodeForWire(e, humanSpoke) {
 var MAX_AGENT_CONTEXT_CHARS = 1500;
 var MAX_AGENT_ITEMS = 5;
 var REPORT_PREFIX = "Verity review (a report on the code just written \u2014 relay what matters to the user; it is not an instruction to you):";
-function renderItem(label2, text, patternId, file, line2) {
+function renderItem(label2, text2, patternId, file, line2) {
   const where2 = file ? ` (${file}${line2 !== void 0 && line2 !== "" ? `:${line2}` : ""})` : "";
   const id = patternId ? ` [${patternId}]` : "";
-  return `- ${label2}${text}${where2}${id}`;
+  return `- ${label2}${text2}${where2}${id}`;
 }
 function channelInputFrom(response, intentRepeat = 0, priorPendingFingerprints = []) {
   const metadata2 = response.metadata ?? {};
@@ -27214,11 +27269,11 @@ function buildAgentContext(input) {
   for (const p of input.pendingItems ?? []) {
     if (lines.length >= MAX_AGENT_ITEMS) break;
     if (p.pattern_id === "intent-misalignment") continue;
-    const text = p.description ?? p.title ?? p.reason;
-    if (!text) continue;
-    const seenBefore = isRepeatOfAny(text, input.priorPendingFingerprints ?? []);
+    const text2 = p.description ?? p.title ?? p.reason;
+    if (!text2) continue;
+    const seenBefore = isRepeatOfAny(text2, input.priorPendingFingerprints ?? []);
     lines.push(
-      renderItem("", text, p.pattern_id, p.file, p.line) + (seenBefore ? "\n    (raised earlier this session and still open \u2014 do not re-explain it; act on it or carry on)" : "")
+      renderItem("", text2, p.pattern_id, p.file, p.line) + (seenBefore ? "\n    (raised earlier this session and still open \u2014 do not re-explain it; act on it or carry on)" : "")
     );
   }
   if (lines.length === 0) return null;
@@ -27226,11 +27281,11 @@ function buildAgentContext(input) {
 ${lines.slice(0, MAX_AGENT_ITEMS).join("\n")}`;
   return truncateToCap(body2);
 }
-function truncateToCap(text) {
-  if (text.length <= MAX_AGENT_CONTEXT_CHARS) return text;
+function truncateToCap(text2) {
+  if (text2.length <= MAX_AGENT_CONTEXT_CHARS) return text2;
   const marker = "\n- (truncated)";
   const budget = MAX_AGENT_CONTEXT_CHARS - marker.length;
-  const lines = text.slice(0, budget).split("\n");
+  const lines = text2.slice(0, budget).split("\n");
   lines.pop();
   return `${lines.join("\n")}${marker}`;
 }
@@ -27258,7 +27313,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.1-experimental.c910405" : "dev";
+    return true ? "0.34.2-experimental.2cad220" : "dev";
   } catch {
     return "dev";
   }
@@ -28059,7 +28114,7 @@ async function connect(run4) {
 async function mode(run4) {
   const { opts, globals } = run4;
   const { actionSummary, allForReview, assistantResponse, baseline, conversation, memory: memory2, noFilesChanged, serviceUrl, sessionId, token, turnAuthoredCode } = run4;
-  const sessionIdForMemory = sessionId || process.env.CLAUDE_SESSION_ID || "";
+  const sessionIdForMemory = sessionId || envSessionId() || "";
   let predictedMode;
   try {
     const memoryPath2 = sessionIdForMemory ? `/memory?session_id=${encodeURIComponent(sessionIdForMemory)}` : "/memory";
@@ -29434,8 +29489,8 @@ function argResource(kind2, arg) {
   const keyed = keyedCall(arg.text);
   return keyed ? { kind: kind2, name: keyed, confidence: "expression" } : { kind: kind2, name: null, confidence: "unknown" };
 }
-function keyedCall(text) {
-  const t = text.trim();
+function keyedCall(text2) {
+  const t = text2.trim();
   const open = t.indexOf("(");
   if (open <= 0 || !t.endsWith(")")) return null;
   const callee = t.slice(0, open);
@@ -29469,16 +29524,16 @@ var SQL_TABLE = [
   [/\bfrom\s+[`"[]?([\w.]+)/i, "read"]
 ];
 function sqlLiteral(c) {
-  const text = c.args.find((a) => a.literal !== null && SQL.test(a.literal))?.literal;
-  if (!text) return null;
+  const text2 = c.args.find((a) => a.literal !== null && SQL.test(a.literal))?.literal;
+  if (!text2) return null;
   for (const [re, op] of SQL_TABLE) {
-    const m = re.exec(text);
+    const m = re.exec(text2);
     if (m) {
       const name2 = m[1].split(".").pop();
-      return { op, resource: table(name2), rule: "sql.literal", lock: op === "read" && /\bfor\s+(?:no\s+key\s+)?update\b/i.test(text) };
+      return { op, resource: table(name2), rule: "sql.literal", lock: op === "read" && /\bfor\s+(?:no\s+key\s+)?update\b/i.test(text2) };
     }
   }
-  return { op: /^\s*select\b/i.test(text) ? "read" : "write", resource: { kind: "table", name: null, confidence: "unknown" }, rule: "sql.literal" };
+  return { op: /^\s*select\b/i.test(text2) ? "read" : "write", resource: { kind: "table", name: null, confidence: "unknown" }, rule: "sql.literal" };
 }
 var SB_WRITE = /* @__PURE__ */ new Set(["insert", "update", "upsert", "delete"]);
 var SB_FROM = /\bfrom\(\s*(['"`])([\w.-]+)\1\s*\)\s*$/;
@@ -29874,28 +29929,28 @@ var ALIAS_OF = "alias-of:";
 var FIELD_OF = "field-of:";
 var IDENT_CHAR = /[\w$]/;
 var isIdent = (s) => /^[A-Za-z_$][\w$]*$/.test(s);
-function wordAt(text, word) {
+function wordAt(text2, word) {
   const out2 = [];
-  for (let i2 = text.indexOf(word); i2 >= 0; i2 = text.indexOf(word, i2 + 1)) {
-    if (IDENT_CHAR.test(text[i2 - 1] ?? "") || IDENT_CHAR.test(text[i2 + word.length] ?? "")) continue;
+  for (let i2 = text2.indexOf(word); i2 >= 0; i2 = text2.indexOf(word, i2 + 1)) {
+    if (IDENT_CHAR.test(text2[i2 - 1] ?? "") || IDENT_CHAR.test(text2[i2 + word.length] ?? "")) continue;
     out2.push(i2);
   }
   return out2;
 }
 var GO_NOT_TYPES = /* @__PURE__ */ new Set(["int", "int8", "int16", "int32", "int64", "uint", "uint8", "uint16", "uint32", "uint64", "uintptr", "float32", "float64", "complex64", "complex128", "string", "bool", "byte", "rune", "error", "any", "func", "chan", "map", "struct", "interface", "range", "make", "new", "nil", "true", "false"]);
-function typeAt(text, i2, lang) {
+function typeAt(text2, i2, lang) {
   let j = i2;
   const skip = () => {
-    while (j < text.length && /[\s?*&]/.test(text[j])) j++;
+    while (j < text2.length && /[\s?*&]/.test(text2[j])) j++;
   };
   skip();
-  for (const kw of ["new ", "readonly ", "await "]) if (text.startsWith(kw, j)) {
+  for (const kw of ["new ", "readonly ", "await "]) if (text2.startsWith(kw, j)) {
     j += kw.length;
     skip();
   }
   let k = j;
-  while (k < text.length && /[\w$.]/.test(text[k])) k++;
-  const name2 = text.slice(j, k).split(".").pop() ?? "";
+  while (k < text2.length && /[\w$.]/.test(text2[k])) k++;
+  const name2 = text2.slice(j, k).split(".").pop() ?? "";
   if (lang === "go") return /^[A-Za-z_]\w*$/.test(name2) && !GO_NOT_TYPES.has(name2) ? name2 : null;
   return /^[A-Z][\w$]*$/.test(name2) ? name2 : null;
 }
@@ -30045,10 +30100,10 @@ function boundInGo(fnText, name2) {
   const brace = fnText.indexOf("{");
   return wordAt(brace < 0 ? fnText : fnText.slice(0, brace), name2).length > 0;
 }
-function rebindsInGo(text, name2) {
-  for (const i2 of wordAt(text, name2)) {
-    const lineEnd = text.indexOf("\n", i2);
-    const rest = text.slice(i2 + name2.length, lineEnd < 0 ? void 0 : lineEnd);
+function rebindsInGo(text2, name2) {
+  for (const i2 of wordAt(text2, name2)) {
+    const lineEnd = text2.indexOf("\n", i2);
+    const rest = text2.slice(i2 + name2.length, lineEnd < 0 ? void 0 : lineEnd);
     const decl = rest.indexOf(":=");
     if (decl >= 0 && /^[\s\w,]*$/.test(rest.slice(0, decl))) return true;
   }
@@ -30274,15 +30329,15 @@ function importOf(content, lang, name2, receiver) {
   return null;
 }
 var TS_EXTS = [".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs"];
-function parseJsonc(text) {
+function parseJsonc(text2) {
   let out2 = "";
   let inString = false;
-  for (let i2 = 0; i2 < text.length; i2++) {
-    const c = text[i2];
+  for (let i2 = 0; i2 < text2.length; i2++) {
+    const c = text2[i2];
     if (inString) {
       out2 += c;
       if (c === "\\") {
-        out2 += text[++i2] ?? "";
+        out2 += text2[++i2] ?? "";
         continue;
       }
       if (c === '"') inString = false;
@@ -30293,14 +30348,14 @@ function parseJsonc(text) {
       out2 += c;
       continue;
     }
-    if (c === "/" && text[i2 + 1] === "/") {
-      while (i2 < text.length && text[i2] !== "\n") i2++;
+    if (c === "/" && text2[i2 + 1] === "/") {
+      while (i2 < text2.length && text2[i2] !== "\n") i2++;
       out2 += "\n";
       continue;
     }
-    if (c === "/" && text[i2 + 1] === "*") {
+    if (c === "/" && text2[i2 + 1] === "*") {
       i2 += 2;
-      while (i2 < text.length && !(text[i2] === "*" && text[i2 + 1] === "/")) i2++;
+      while (i2 < text2.length && !(text2[i2] === "*" && text2[i2 + 1] === "/")) i2++;
       i2++;
       continue;
     }
@@ -30509,36 +30564,36 @@ function definitionOf(input) {
 }
 var MAX_CALLER_SCAN_FILES = 60;
 var isWordChar2 = (c) => c !== void 0 && /[\w$]/.test(c);
-function callStarts(text, name2) {
+function callStarts(text2, name2) {
   const out2 = [];
-  for (let i2 = text.indexOf(name2); i2 >= 0; i2 = text.indexOf(name2, i2 + 1)) {
+  for (let i2 = text2.indexOf(name2); i2 >= 0; i2 = text2.indexOf(name2, i2 + 1)) {
     let j = i2 + name2.length;
-    if (text[j] === "<") {
+    if (text2[j] === "<") {
       let depth = 0;
-      for (; j < text.length; j++) {
-        if (text[j] === "<") depth++;
-        else if (text[j] === ">" && --depth === 0) break;
+      for (; j < text2.length; j++) {
+        if (text2[j] === "<") depth++;
+        else if (text2[j] === ">" && --depth === 0) break;
       }
       j++;
     }
-    if (text[j] === "(") out2.push({ index: i2, open: j });
+    if (text2[j] === "(") out2.push({ index: i2, open: j });
   }
   return out2;
 }
-function callsName(text, name2) {
-  const t = text.trim();
+function callsName(text2, name2) {
+  const t = text2.trim();
   if (t.startsWith("//") || t.startsWith("*") || t.startsWith("/*") || t.startsWith("#")) return false;
-  for (const at of callStarts(text, name2)) {
+  for (const at of callStarts(text2, name2)) {
     const i2 = at.index;
-    const spread = text.slice(Math.max(0, i2 - 3), i2) === "...";
-    if (isWordChar2(text[i2 - 1]) || text[i2 - 1] === "." && !spread) continue;
+    const spread = text2.slice(Math.max(0, i2 - 3), i2) === "...";
+    if (isWordChar2(text2[i2 - 1]) || text2[i2 - 1] === "." && !spread) continue;
     let depth = 0;
     let j = at.open;
-    for (; j < text.length; j++) {
-      if (text[j] === "(") depth++;
-      else if (text[j] === ")" && --depth === 0) break;
+    for (; j < text2.length; j++) {
+      if (text2[j] === "(") depth++;
+      else if (text2[j] === ")" && --depth === 0) break;
     }
-    const after = text.slice(j + 1).trimStart();
+    const after = text2.slice(j + 1).trimStart();
     if (after.startsWith(":") || after.startsWith("{")) continue;
     return true;
   }
@@ -30628,11 +30683,11 @@ function callersOf(input) {
         if (seen.has(line2) || declared.has(line2)) continue;
         const inside2 = r.value.some((f) => f.start.line <= line2 && line2 <= f.end.line && f.calls.some((c) => c.line === line2 && c.name === name2));
         if (inside2) continue;
-        const text = lines[line2 - 1] ?? "";
-        if (!callsName(text, name2) || /^\s*(?:export\s+)?(?:async\s+)?(?:function|def|func)\b/.test(text)) continue;
+        const text2 = lines[line2 - 1] ?? "";
+        if (!callsName(text2, name2) || /^\s*(?:export\s+)?(?:async\s+)?(?:function|def|func)\b/.test(text2)) continue;
         const enclosing = r.value.filter((f) => f.start.line <= line2 && line2 <= f.end.line).sort((a, b) => a.end.line - a.start.line - (b.end.line - b.start.line))[0];
         seen.add(line2);
-        callers.push({ path: p, caller: enclosing ? enclosing.qualified : null, line: line2, text: text.trim().slice(0, 200), provenance: fileTie });
+        callers.push({ path: p, caller: enclosing ? enclosing.qualified : null, line: line2, text: text2.trim().slice(0, 200), provenance: fileTie });
       }
     }
   }
@@ -30939,16 +30994,16 @@ ${m.accessors.map((x) => `  ${x.fn.path}:${x.fn.start.line} ${x.fn.qualified} \u
   return { ok: true, value: lines.join("\n") };
 };
 var KINDS = ["table", "cache", "file", "http", "queue", "service", "memory"];
-function parseResource(text) {
-  const colon = text.indexOf(":");
-  const kind2 = colon > 0 ? text.slice(0, colon) : "";
-  if (KINDS.includes(kind2)) return { kinds: [kind2], name: text.slice(colon + 1) };
-  return { kinds: KINDS, name: text };
+function parseResource(text2) {
+  const colon = text2.indexOf(":");
+  const kind2 = colon > 0 ? text2.slice(0, colon) : "";
+  if (KINDS.includes(kind2)) return { kinds: [kind2], name: text2.slice(colon + 1) };
+  return { kinds: KINDS, name: text2 };
 }
 var writersOfTool = async (ctx, args2) => {
-  const text = str(args2.resource, 300, "resource");
-  if (!text.ok) return text;
-  const { kinds, name: name2 } = parseResource(text.value);
+  const text2 = str(args2.resource, 300, "resource");
+  if (!text2.ok) return text2;
+  const { kinds, name: name2 } = parseResource(text2.value);
   if (name2.length < 2) return { ok: false, error: "resource name too short to search for" };
   const deadline = Date.now() + TOOL_MS;
   const src = source(ctx);
@@ -30987,7 +31042,7 @@ var writersOfTool = async (ctx, args2) => {
   if (files.size > 25) truncated = true;
   const list2 = (xs) => xs.length ? xs.slice(0, MAX_LIST).map((x) => `  ${x}`).join("\n") + (xs.length > MAX_LIST ? `
   \u2026 ${xs.length - MAX_LIST} more` : "") : "  none found";
-  return { ok: true, value: `${text.value} (${where(ctx)}), heuristic${truncated ? ", search cut short" : ""}
+  return { ok: true, value: `${text2.value} (${where(ctx)}), heuristic${truncated ? ", search cut short" : ""}
 writers:
 ${list2(writers)}
 readers:
@@ -31045,9 +31100,9 @@ function validateRepoPath(value, { allowRoot = false } = {}) {
 function lineNumber(value, fallback) {
   return typeof value === "number" && Number.isInteger(value) && value >= 1 ? value : fallback;
 }
-function capOutput(text) {
-  return text.length > TOOL_LIMITS.outputChars ? `${text.slice(0, TOOL_LIMITS.outputChars)}
-[truncated at ${TOOL_LIMITS.outputChars} characters]` : text;
+function capOutput(text2) {
+  return text2.length > TOOL_LIMITS.outputChars ? `${text2.slice(0, TOOL_LIMITS.outputChars)}
+[truncated at ${TOOL_LIMITS.outputChars} characters]` : text2;
 }
 function git(ctx, args2, opts = {}) {
   return runGit(ctx.root, args2, { timeoutMs: opts.timeoutMs ?? TOOL_LIMITS.gitTimeoutMs, maxBuffer: opts.maxBuffer ?? TOOL_LIMITS.fileBytes });
@@ -31181,8 +31236,8 @@ var listFilesTool = async (ctx, args2) => {
 \u2026 ${more} more` : ""}` : "no matching files" };
 };
 var searchTool = async (ctx, args2) => {
-  const text = args2.text;
-  if (typeof text !== "string" || text.length === 0 || text.length > TOOL_LIMITS.textChars || /[\n\r]/.test(text)) {
+  const text2 = args2.text;
+  if (typeof text2 !== "string" || text2.length === 0 || text2.length > TOOL_LIMITS.textChars || /[\n\r]/.test(text2)) {
     return { ok: false, error: `text must be 1-${TOOL_LIMITS.textChars} characters on one line` };
   }
   const glob = typeof args2.path_glob === "string" && args2.path_glob.length > 0 ? args2.path_glob : null;
@@ -31191,7 +31246,7 @@ var searchTool = async (ctx, args2) => {
   }
   const pathspec = glob ? [`:(glob)${glob}`] : [];
   const revision = ctx.range.kind === "push" ? [ctx.range.head] : ["--cached"];
-  const res = await git(ctx, ["grep", "-n", "-I", "-F", "--no-color", ...revision.filter((r) => r === "--cached"), "-e", text, ...revision.filter((r) => r !== "--cached"), "--", ...pathspec]);
+  const res = await git(ctx, ["grep", "-n", "-I", "-F", "--no-color", ...revision.filter((r) => r === "--cached"), "-e", text2, ...revision.filter((r) => r !== "--cached"), "--", ...pathspec]);
   if (!res.ok) {
     if (res.error === "failed" && res.stderr.trim() === "") return { ok: true, value: "no matches" };
     return { ok: false, error: gitFailure(res, "search") };
@@ -31325,10 +31380,10 @@ function writerExcerpts(codeMap, writers, read2, maxLines, maxChars, budget) {
     if (content === null) continue;
     const win = functionWindow(codeMap, w.file, content, w.line, maxLines);
     if (!win) continue;
-    const text = content.split("\n").slice(win.start_line - 1, win.end_line).join("\n").slice(0, maxChars);
-    if (used + text.length > budget) break;
-    used += text.length;
-    out2.push({ file: w.file, start_line: win.start_line, symbol: `${w.symbol} (writes ${w.resource}, like ${w.changed})`, kind: "writer", text });
+    const text2 = content.split("\n").slice(win.start_line - 1, win.end_line).join("\n").slice(0, maxChars);
+    if (used + text2.length > budget) break;
+    used += text2.length;
+    out2.push({ file: w.file, start_line: win.start_line, symbol: `${w.symbol} (writes ${w.resource}, like ${w.changed})`, kind: "writer", text: text2 });
   }
   return out2;
 }
@@ -31952,7 +32007,7 @@ async function workingMemory(run4) {
   const { opts } = run4;
   const { allForReview, baseline, conversation, foldResult, sessionId, token, transcriptPath } = run4;
   let { reachability } = run4;
-  const memorySession = sessionDossier(token, sessionId ?? process.env.CLAUDE_SESSION_ID ?? null);
+  const memorySession = sessionDossier(token, sessionId ?? envSessionId() ?? null);
   let memory2 = null;
   let incrementReport = null;
   if (memorySession) {
@@ -32225,7 +32280,7 @@ async function buildRequest(run4) {
     context: {
       agent_model: process.env.CLAUDE_MODEL ?? "unknown",
       agent_harness: "claude-code",
-      session_id: sessionId || process.env.CLAUDE_SESSION_ID || "unknown",
+      session_id: sessionId || envSessionId() || "unknown",
       iteration,
       // Makes fleet composition falsifiable — without it, no adoption-gated
       // rollout decision can be checked against anything.
@@ -33522,12 +33577,12 @@ function registerBaselineCommands(program2) {
       if (!process.stdin.isTTY) {
         const input = (await readStdin()).trim();
         if (input) {
-          const event = parseHookEvent(input);
+          const event = parseHookEvent2(input);
           if (opts.sessionId === void 0) sessionId = event.sessionId;
           if (opts.source === void 0) source2 = event.source;
         }
       }
-      const session = sessionId ?? validSessionId(process.env.CLAUDE_SESSION_ID);
+      const session = sessionId ?? validSessionId(envSessionId());
       const cli = pluginCliInvocation();
       const skew = cliVersionSkew();
       const why = skew ? `the \`verity\` on PATH is ${skew.global} but the hooks run ${skew.hooks}, so it is not the CLI they use` : verityOnPath() ? "the `verity` on PATH is a separate install whose version could not be read" : "this machine has no `verity` on PATH \u2014 the plugin carries its own copy";
@@ -33647,7 +33702,7 @@ function registerBaselineCommands(program2) {
     process.exit(0);
   });
 }
-var MAX_HOOK_EVENT_BYTES = 64 * 1024;
+var MAX_HOOK_EVENT_BYTES2 = 64 * 1024;
 var HOOK_SOURCES = /* @__PURE__ */ new Set(["startup", "resume", "clear", "compact"]);
 var SESSION_ID_RE2 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
 async function readStdin() {
@@ -33655,11 +33710,11 @@ async function readStdin() {
   let size = 0;
   for await (const chunk of process.stdin) {
     size += chunk.length;
-    if (size <= MAX_HOOK_EVENT_BYTES) chunks.push(chunk);
+    if (size <= MAX_HOOK_EVENT_BYTES2) chunks.push(chunk);
   }
-  return size > MAX_HOOK_EVENT_BYTES ? "" : Buffer.concat(chunks).toString("utf-8");
+  return size > MAX_HOOK_EVENT_BYTES2 ? "" : Buffer.concat(chunks).toString("utf-8");
 }
-function parseHookEvent(input) {
+function parseHookEvent2(input) {
   let event;
   try {
     event = JSON.parse(input);
@@ -33680,6 +33735,34 @@ function hookSource(value) {
 
 // src/commands/review.ts
 var import_node_fs57 = require("node:fs");
+var import_node_path44 = require("node:path");
+function containReviewPaths(paths, base) {
+  const kept = [];
+  const refused2 = [];
+  for (const raw of paths) {
+    const candidate = (0, import_node_path44.isAbsolute)(raw) ? relativeForm(base, raw) : raw;
+    if (candidate === "" || resolveInside(base, candidate) === null) refused2.push(raw);
+    else kept.push(candidate);
+  }
+  return { kept, refused: refused2 };
+}
+function relativeForm(base, abs) {
+  const lexical = (0, import_node_path44.relative)(base, abs);
+  if (!(lexical === ".." || lexical.startsWith(`..${import_node_path44.sep}`) || (0, import_node_path44.isAbsolute)(lexical))) return lexical;
+  try {
+    let dir = (0, import_node_path44.dirname)(abs);
+    let rest = (0, import_node_path44.basename)(abs);
+    while (!(0, import_node_fs57.existsSync)(dir)) {
+      const up = (0, import_node_path44.dirname)(dir);
+      if (up === dir) return lexical;
+      rest = (0, import_node_path44.join)((0, import_node_path44.basename)(dir), rest);
+      dir = up;
+    }
+    return (0, import_node_path44.relative)((0, import_node_fs57.realpathSync)(base), (0, import_node_path44.join)((0, import_node_fs57.realpathSync)(dir), rest));
+  } catch {
+    return lexical;
+  }
+}
 function registerReviewCommand(program2) {
   program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars); - reads it from stdin, so the words never pass through shell quoting").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
@@ -33698,8 +33781,20 @@ function registerReviewCommand(program2) {
   });
 }
 async function runReview(opts, globals) {
-  const allFiles = opts.files.split(",").map((f) => f.trim()).filter(Boolean);
-  const changedFiles = opts.changed ? opts.changed.split(",").map((f) => f.trim()).filter(Boolean) : allFiles;
+  const base = process.cwd();
+  const files = containReviewPaths(opts.files.split(",").map((f) => f.trim()).filter(Boolean), base);
+  const changed = opts.changed ? containReviewPaths(opts.changed.split(",").map((f) => f.trim()).filter(Boolean), base) : files;
+  const refused2 = Array.from(/* @__PURE__ */ new Set([...files.refused, ...changed.refused]));
+  if (refused2.length > 0) {
+    printJsonCompact({
+      gate_decision: "WARN",
+      systemMessage: `Verity: refused ${refused2.length} path(s) outside this repository \u2014 nothing was reviewed. Pass paths inside the repository you run \`verity review\` from.`,
+      refused_paths: refused2
+    });
+    process.exit(0);
+  }
+  const allFiles = files.kept;
+  const changedFiles = changed.kept;
   const analyzable = filterAnalyzable(allFiles);
   const securityFiles = filterSecurity(allFiles);
   const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs57.existsSync)(f) || resolveFile(f) !== null);
@@ -33727,7 +33822,7 @@ async function runReview(opts, globals) {
     context: {
       agent_model: process.env.CLAUDE_MODEL ?? "unknown",
       agent_harness: "claude-code",
-      session_id: process.env.CLAUDE_SESSION_ID ?? "unknown",
+      session_id: envSessionId() ?? "unknown",
       trigger: "review",
       iteration: 1
     }
@@ -33768,12 +33863,12 @@ async function runReview(opts, globals) {
 }
 
 // src/commands/guard.ts
-var import_node_fs62 = require("node:fs");
-var import_node_path49 = require("node:path");
+var import_node_fs63 = require("node:fs");
+var import_node_path51 = require("node:path");
 
 // src/lib/vendored.ts
 var import_node_fs58 = require("node:fs");
-var import_node_path44 = require("node:path");
+var import_node_path45 = require("node:path");
 var INSTALLED_SKILL = /^\.claude\/skills\/(verity-[a-z0-9-]+)\/(.+)$/;
 function dataDirOrNull() {
   try {
@@ -33788,7 +33883,7 @@ function shippedSkillFile(path, dataDir = dataDirOrNull()) {
   const [, skill, rel] = m;
   if (rel.split("/").some((seg) => seg === ".." || seg === ".")) return null;
   try {
-    return (0, import_node_fs58.readFileSync)((0, import_node_path44.join)(dataDir, "skills", skill, rel), "utf8");
+    return (0, import_node_fs58.readFileSync)((0, import_node_path45.join)(dataDir, "skills", skill, rel), "utf8");
   } catch {
     return null;
   }
@@ -33897,8 +33992,33 @@ async function runAgentReview(options) {
   return { kind: "finished", response: finished.data };
 }
 
+// src/lib/effort.ts
+var import_node_fs59 = require("node:fs");
+var import_node_path46 = require("node:path");
+var import_yaml5 = __toESM2(require_dist());
+var EFFORT_PROFILES = {
+  default: { pushDeadlineMs: 18e4, formal: { tier: "fast", maxRounds: 2, minScore: 0.7, costCapUsd: 1, maxTargets: 1, relaxedGates: false, dailyModels: 5, dailyCostUsd: 5 } },
+  high: { pushDeadlineMs: 22e4, formal: { tier: "deep", maxRounds: 2, minScore: 0.6, costCapUsd: 2, maxTargets: 2, relaxedGates: false, dailyModels: 15, dailyCostUsd: 15 } },
+  max: { pushDeadlineMs: 27e4, formal: { tier: "deep", maxRounds: 3, minScore: 0.5, costCapUsd: 4, maxTargets: 3, relaxedGates: true, dailyModels: 30, dailyCostUsd: 30 } }
+};
+function asEffort(value) {
+  return value === "high" || value === "max" ? value : "default";
+}
+function resolveEffort(root, env = process.env) {
+  if (env.VERITY_EFFORT) return asEffort(env.VERITY_EFFORT);
+  try {
+    const standard = (0, import_yaml5.parse)((0, import_node_fs59.readFileSync)((0, import_node_path46.join)(root, STANDARD_FILE), "utf8"));
+    return asEffort(standard?.process_constraints?.git_moment_effort);
+  } catch {
+    return "default";
+  }
+}
+function effortProfile(root, env = process.env) {
+  return EFFORT_PROFILES[resolveEffort(root, env)];
+}
+
 // src/lib/prove/auto.ts
-var import_node_path48 = require("node:path");
+var import_node_path50 = require("node:path");
 var import_node_crypto19 = require("node:crypto");
 
 // src/lib/prove/signals.ts
@@ -33961,14 +34081,14 @@ function trackedSourceFiles(root, opts = {}) {
   return files.slice(0, opts.maxFiles ?? 5e3);
 }
 var EFFECT_LINE = /\bawait\b|\basync\s+with\b|\.then\(|\bsetTimeout\(|\bsetInterval\(|\bwith\s+\w[\w.]*\.(?:lock|acquire)\b|\bLock\(\)/;
-function countEffects(text) {
+function countEffects(text2) {
   let n = 0;
-  for (const line2 of text.split("\n")) if (EFFECT_LINE.test(line2)) n++;
+  for (const line2 of text2.split("\n")) if (EFFECT_LINE.test(line2)) n++;
   return n;
 }
-function scanRisk(text) {
+function scanRisk(text2) {
   const counts = Object.fromEntries(RISK_PATTERNS.map(([c]) => [c, 0]));
-  for (const line2 of text.split("\n")) {
+  for (const line2 of text2.split("\n")) {
     for (const [category, re] of RISK_PATTERNS) {
       if (re.test(line2)) counts[category]++;
     }
@@ -34262,13 +34382,13 @@ var lunaRanker = {
         signal: controller.signal
       });
       if (!res.ok) {
-        const text2 = await res.text().catch(() => "");
-        return { ok: false, ranker: "luna", error: `OpenAI ${res.status}: ${text2.slice(0, 200)}`, ranked: fallback };
+        const text3 = await res.text().catch(() => "");
+        return { ok: false, ranker: "luna", error: `OpenAI ${res.status}: ${text3.slice(0, 200)}`, ranked: fallback };
       }
       const data = await res.json();
-      const text = (data.output ?? []).flatMap((o) => o.content ?? []).find((c) => c.type === "output_text")?.text;
-      if (!text) return { ok: false, ranker: "luna", error: "no output_text in response", ranked: fallback };
-      const parsed = JSON.parse(text);
+      const text2 = (data.output ?? []).flatMap((o) => o.content ?? []).find((c) => c.type === "output_text")?.text;
+      if (!text2) return { ok: false, ranker: "luna", error: "no output_text in response", ranked: fallback };
+      const parsed = JSON.parse(text2);
       const items = parsed.items.map((i2) => {
         const legacy = i2.critical === void 0 && i2.hazard === void 0 && i2.error_prone === void 0;
         const criteria = legacy ? { critical: Number(i2.score) || 0, hazard: Number(i2.score) || 0, error_prone: Number(i2.score) || 0 } : { critical: Number(i2.critical) || 0, hazard: Number(i2.hazard) || 0, error_prone: Number(i2.error_prone) || 0 };
@@ -34903,19 +35023,19 @@ var PURE_METHODS2 = /* @__PURE__ */ new Set([
   "test",
   "match"
 ]);
-function callsOn(text, name2) {
+function callsOn(text2, name2) {
   const needle = `${name2}.`;
-  for (let i2 = text.indexOf(needle); i2 >= 0; i2 = text.indexOf(needle, i2 + 1)) {
-    if (i2 > 0 && IDENT_CHAR2.test(text[i2 - 1])) continue;
-    const call = CALL_AFTER_DOT.exec(text.slice(i2 + needle.length));
+  for (let i2 = text2.indexOf(needle); i2 >= 0; i2 = text2.indexOf(needle, i2 + 1)) {
+    if (i2 > 0 && IDENT_CHAR2.test(text2[i2 - 1])) continue;
+    const call = CALL_AFTER_DOT.exec(text2.slice(i2 + needle.length));
     if (call && !PURE_METHODS2.has(call[1])) return true;
   }
   return false;
 }
-function callsDirect(text, name2) {
+function callsDirect(text2, name2) {
   const needle = `${name2}(`;
-  for (let i2 = text.indexOf(needle); i2 >= 0; i2 = text.indexOf(needle, i2 + 1)) {
-    if (i2 > 0 && IDENT_CHAR2.test(text[i2 - 1])) continue;
+  for (let i2 = text2.indexOf(needle); i2 >= 0; i2 = text2.indexOf(needle, i2 + 1)) {
+    if (i2 > 0 && IDENT_CHAR2.test(text2[i2 - 1])) continue;
     return true;
   }
   return false;
@@ -35071,11 +35191,11 @@ async function generateModel(target, opts) {
     return { ok: false, error: name2 === "TimeoutError" || name2 === "AbortError" ? "timed out" : err2.message };
   }
   const usage = data.usage ? { inputTokens: Number(data.usage.input_tokens ?? 0), outputTokens: Number(data.usage.output_tokens ?? 0) } : null;
-  const text = (data.output ?? []).flatMap((o) => o.content ?? []).find((c) => c.type === "output_text")?.text;
-  if (!text) return { ok: false, error: "no output_text in response", usage };
+  const text2 = (data.output ?? []).flatMap((o) => o.content ?? []).find((c) => c.type === "output_text")?.text;
+  if (!text2) return { ok: false, error: "no output_text in response", usage };
   let parsed;
   try {
-    parsed = JSON.parse(text);
+    parsed = JSON.parse(text2);
   } catch {
     return { ok: false, error: "answer was not JSON", usage };
   }
@@ -35085,8 +35205,8 @@ async function generateModel(target, opts) {
 // src/lib/prove/replay.ts
 var MAX_SOURCE_BYTES = 96 * 1024;
 var MAX_MODEL_BYTES = 32 * 1024;
-function numberLines(text, from = 1) {
-  return text.split("\n").map((l, i2) => `${String(i2 + from).padStart(5)}| ${l}`).join("\n");
+function numberLines(text2, from = 1) {
+  return text2.split("\n").map((l, i2) => `${String(i2 + from).padStart(5)}| ${l}`).join("\n");
 }
 var PY_DECL = /^\s*(?:async\s+)?def\s+([A-Za-z_]\w*)\s*\(/;
 var TS_DECLS = [
@@ -35160,9 +35280,9 @@ function extractSymbolBody(source2, symbol, file, range) {
   }
   return null;
 }
-function significantLines(text) {
+function significantLines(text2) {
   const out2 = [];
-  for (const raw of text.split("\n")) {
+  for (const raw of text2.split("\n")) {
     const l = raw.trim();
     if (l.length < 12) continue;
     if (/^(\/\/|\/\*|\*|#)/.test(l)) continue;
@@ -35187,14 +35307,14 @@ function isTrackedInRoot(root, file) {
 function buildReplayBrief(root, report, property, modelSource, readSource) {
   const sources = (report.header?.abstracts ?? []).map((a) => {
     const read2 = readSource ? readSource(a.file, MAX_SOURCE_BYTES) : isTrackedInRoot(root, a.file) ? readRegularFileInRoot(root, a.file, MAX_SOURCE_BYTES) : { ok: false, reason: "not tracked by git \u2014 models may only abstract tracked source" };
-    const text = read2.ok ? read2.content : "";
+    const text2 = read2.ok ? read2.content : "";
     return {
       file: a.file,
       symbol: a.symbol,
-      numbered: text ? numberLines(text) : `(could not read ${a.file}: ${read2.ok ? "" : read2.reason})`,
-      symbolBody: text ? extractSymbolBody(text, a.symbol, a.file, a.lines) : null,
+      numbered: text2 ? numberLines(text2) : `(could not read ${a.file}: ${read2.ok ? "" : read2.reason})`,
+      symbolBody: text2 ? extractSymbolBody(text2, a.symbol, a.file, a.lines) : null,
       lines: a.lines,
-      content: text
+      content: text2
     };
   });
   return { model: report.model, property, modelSource: modelSource.slice(0, MAX_MODEL_BYTES), sources };
@@ -35276,7 +35396,7 @@ function parseReplayOutput(output) {
   let executedCalls = 0;
   const shellTexts = [];
   const outputTexts = [];
-  let text = null;
+  let text2 = null;
   for (const item of output) {
     if (item.type === "shell_call") {
       shellCalls++;
@@ -35292,13 +35412,13 @@ function parseReplayOutput(output) {
       }
     } else if (item.type === "message" && Array.isArray(item.content)) {
       const t = item.content.find((c) => c.type === "output_text")?.text;
-      if (typeof t === "string") text = t;
+      if (typeof t === "string") text2 = t;
     }
   }
   let claim = null;
-  if (text) {
+  if (text2) {
     try {
-      const o = JSON.parse(text);
+      const o = JSON.parse(text2);
       const verdict = o.verdict;
       if (verdict === "reproduced" || verdict === "diverged" || verdict === "unreplayable") {
         claim = {
@@ -35585,9 +35705,9 @@ async function runReplay(brief, opts) {
   if (opts.auth) return runReplayViaServer(brief, opts.auth, opts.timeoutMs);
   const env = opts.env ?? process.env;
   const none = { covered: 0, total: 0, ratio: 0, basis: "none" };
-  const refuse = (error) => ({ claimed: null, verdict: "unverified", reason: "", downgrade: error, executedCalls: 0, shellCalls: 0, verbatim: none, executedOutput: "", harnessFiles: [], usage: null, durationMs: 0, containerId: null, error });
-  if (env.VERITY_PROVE_DIRECT !== "1") return refuse("not logged in (run `verity login`); replays run on the Verity service");
-  if (!opts.apiKey) return refuse("OPENAI_API_KEY is not set");
+  const refuse2 = (error) => ({ claimed: null, verdict: "unverified", reason: "", downgrade: error, executedCalls: 0, shellCalls: 0, verbatim: none, executedOutput: "", harnessFiles: [], usage: null, durationMs: 0, containerId: null, error });
+  if (env.VERITY_PROVE_DIRECT !== "1") return refuse2("not logged in (run `verity login`); replays run on the Verity service");
+  if (!opts.apiKey) return refuse2("OPENAI_API_KEY is not set");
   return runReplayInContainer(brief, { apiKey: opts.apiKey, model: opts.model, timeoutMs: opts.timeoutMs, maxRounds: opts.maxRounds, fetchImpl: opts.fetchImpl });
 }
 function renderReplay(model, property, r) {
@@ -35625,18 +35745,18 @@ function renderReplay(model, property, r) {
 // src/lib/prove/runner.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_os8 = require("node:os");
-var import_node_fs61 = require("node:fs");
+var import_node_fs62 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path47 = require("node:path");
+var import_node_path49 = require("node:path");
 
 // src/lib/prove/scaffold.ts
-var import_node_fs60 = require("node:fs");
-var import_node_path46 = require("node:path");
+var import_node_fs61 = require("node:fs");
+var import_node_path48 = require("node:path");
 
 // src/lib/prove/safe-write.ts
-var import_node_fs59 = require("node:fs");
+var import_node_fs60 = require("node:fs");
 var import_node_crypto15 = require("node:crypto");
-var import_node_path45 = require("node:path");
+var import_node_path47 = require("node:path");
 var SafeWriteError = class extends Error {
   constructor(reason, path) {
     super(`refusing to write ${path}: ${reason}`);
@@ -35645,10 +35765,10 @@ var SafeWriteError = class extends Error {
     this.name = "SafeWriteError";
   }
 };
-var FLAGS3 = import_node_fs59.constants;
+var FLAGS3 = import_node_fs60.constants;
 var NOFOLLOW2 = FLAGS3.O_NOFOLLOW ?? 0;
 function assertPlainRelative(rel) {
-  if (!rel || (0, import_node_path45.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
+  if (!rel || (0, import_node_path47.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
   for (const part of rel.split(/[\\/]/)) {
     if (part === ".." || part === "" || part === ".") throw new SafeWriteError("bad-path", rel);
   }
@@ -35657,34 +35777,34 @@ function ensureDirsNoFollow(root, rel) {
   const parts2 = rel.split(/[\\/]/);
   let cur = root;
   for (const part of parts2.slice(0, -1)) {
-    cur = (0, import_node_path45.join)(cur, part);
+    cur = (0, import_node_path47.join)(cur, part);
     let st;
     try {
-      st = (0, import_node_fs59.lstatSync)(cur);
+      st = (0, import_node_fs60.lstatSync)(cur);
     } catch {
-      (0, import_node_fs59.mkdirSync)(cur);
+      (0, import_node_fs60.mkdirSync)(cur);
       continue;
     }
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", cur);
     if (!st.isDirectory()) throw new SafeWriteError("not-regular", cur);
   }
-  return (0, import_node_path45.join)(root, rel);
+  return (0, import_node_path47.join)(root, rel);
 }
 function insideRoot(realRoot, realPath) {
-  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path45.sep) ? realRoot : realRoot + import_node_path45.sep);
+  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path47.sep) ? realRoot : realRoot + import_node_path47.sep);
 }
 function removeQuietly(path) {
   try {
-    (0, import_node_fs59.unlinkSync)(path);
+    (0, import_node_fs60.unlinkSync)(path);
   } catch {
   }
 }
 function writeFileInRootNoFollow(root, rel, content) {
   assertPlainRelative(rel);
   const dest = ensureDirsNoFollow(root, rel);
-  const dir = (0, import_node_path45.dirname)(dest);
+  const dir = (0, import_node_path47.dirname)(dest);
   try {
-    const st = (0, import_node_fs59.lstatSync)(dest);
+    const st = (0, import_node_fs60.lstatSync)(dest);
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", dest);
     if (!st.isFile()) throw new SafeWriteError("not-regular", dest);
   } catch (err2) {
@@ -35692,41 +35812,41 @@ function writeFileInRootNoFollow(root, rel, content) {
   }
   let realRoot;
   try {
-    realRoot = (0, import_node_fs59.realpathSync)(root);
+    realRoot = (0, import_node_fs60.realpathSync)(root);
   } catch {
     throw new SafeWriteError("unwritable", root);
   }
-  const tmp = (0, import_node_path45.join)(dir, `.${(0, import_node_path45.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
+  const tmp = (0, import_node_path47.join)(dir, `.${(0, import_node_path47.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
   let fd;
   try {
-    fd = (0, import_node_fs59.openSync)(tmp, import_node_fs59.constants.O_WRONLY | import_node_fs59.constants.O_CREAT | import_node_fs59.constants.O_EXCL | NOFOLLOW2, 420);
+    fd = (0, import_node_fs60.openSync)(tmp, import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_CREAT | import_node_fs60.constants.O_EXCL | NOFOLLOW2, 420);
   } catch {
     throw new SafeWriteError("unwritable", tmp);
   }
   try {
-    const opened = (0, import_node_fs59.fstatSync)(fd, { bigint: true });
+    const opened = (0, import_node_fs60.fstatSync)(fd, { bigint: true });
     let realTmp;
     try {
-      realTmp = (0, import_node_fs59.realpathSync)(tmp);
+      realTmp = (0, import_node_fs60.realpathSync)(tmp);
     } catch {
       throw new SafeWriteError("escaped", tmp);
     }
-    const there = (0, import_node_fs59.lstatSync)(realTmp, { bigint: true });
+    const there = (0, import_node_fs60.lstatSync)(realTmp, { bigint: true });
     if (!opened.isFile() || there.ino !== opened.ino || there.dev !== opened.dev || !insideRoot(realRoot, realTmp)) {
       throw new SafeWriteError("escaped", tmp);
     }
     const buf = Buffer.from(content, "utf-8");
     let off = 0;
-    while (off < buf.length) off += (0, import_node_fs59.writeSync)(fd, buf, off, buf.length - off);
+    while (off < buf.length) off += (0, import_node_fs60.writeSync)(fd, buf, off, buf.length - off);
   } catch (err2) {
-    (0, import_node_fs59.closeSync)(fd);
+    (0, import_node_fs60.closeSync)(fd);
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", tmp);
   }
-  (0, import_node_fs59.closeSync)(fd);
+  (0, import_node_fs60.closeSync)(fd);
   try {
-    if (!insideRoot(realRoot, (0, import_node_fs59.realpathSync)(dir)) || (0, import_node_fs59.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
-    (0, import_node_fs59.renameSync)(tmp, dest);
+    if (!insideRoot(realRoot, (0, import_node_fs60.realpathSync)(dir)) || (0, import_node_fs60.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
+    (0, import_node_fs60.renameSync)(tmp, dest);
   } catch (err2) {
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", dest);
@@ -35740,9 +35860,9 @@ function pathHasNoLink(root, rel) {
   }
   let cur = root;
   for (const part of rel.split(/[\\/]/)) {
-    cur = cur + import_node_path45.sep + part;
+    cur = cur + import_node_path47.sep + part;
     try {
-      if ((0, import_node_fs59.lstatSync)(cur).isSymbolicLink()) return false;
+      if ((0, import_node_fs60.lstatSync)(cur).isSymbolicLink()) return false;
     } catch {
       return true;
     }
@@ -36052,20 +36172,20 @@ This directory is machine-local and gitignored (see ../.gitignore). Models are
 never committed; what reaches the team is the bug report and the fix.
 `;
 function scaffoldProofs(root) {
-  const proofsDir = (0, import_node_path46.join)(root, PROOFS_DIR);
+  const proofsDir = (0, import_node_path48.join)(root, PROOFS_DIR);
   const written = [];
   const kept = [];
   for (const stray of ["lakefile.lean"]) {
     const rel = `${PROOFS_DIR}/${stray}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path46.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path48.join)(root, rel));
     try {
-      (0, import_node_fs60.rmSync)((0, import_node_path46.join)(root, rel), { force: true });
+      (0, import_node_fs61.rmSync)((0, import_node_path48.join)(root, rel), { force: true });
     } catch {
     }
   }
   for (const f of PROOFS_TEMPLATE_FILES) {
     const rel = `${PROOFS_DIR}/${f.path}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path46.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path48.join)(root, rel));
     const current = readRegularFileInRoot(root, rel, 4 * 1024 * 1024);
     if (current.ok && current.content === f.content) {
       kept.push(rel);
@@ -36078,8 +36198,8 @@ function scaffoldProofs(root) {
     [`${PROOFS_DIR}/.gitignore`, LOCAL_GITIGNORE],
     [`${MODELS_DIR}/README.md`, MODELS_README]
   ]) {
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path46.join)(root, rel));
-    if (existsNoFollow((0, import_node_path46.join)(root, rel))) {
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path48.join)(root, rel));
+    if (existsNoFollow((0, import_node_path48.join)(root, rel))) {
       kept.push(rel);
       continue;
     }
@@ -36090,7 +36210,7 @@ function scaffoldProofs(root) {
 }
 function existsNoFollow(abs) {
   try {
-    (0, import_node_fs60.lstatSync)(abs);
+    (0, import_node_fs61.lstatSync)(abs);
     return true;
   } catch {
     return false;
@@ -36348,17 +36468,17 @@ function renderReport(r) {
 
 // src/lib/prove/runner.ts
 function verityLeanHome(env = process.env) {
-  return env.VERITY_LEAN_HOME ?? (0, import_node_path47.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".verity", "lean");
+  return env.VERITY_LEAN_HOME ?? (0, import_node_path49.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".verity", "lean");
 }
 function findToolchain(env = process.env) {
-  const managedBin = (0, import_node_path47.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
-  const elanBin = (0, import_node_path47.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
-  const elanHas = (0, import_node_fs61.existsSync)((0, import_node_path47.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
-  const userPath = (env.PATH ?? "").split(import_node_path47.delimiter).filter((d) => d && (elanHas || (0, import_node_path47.resolve)(d) !== (0, import_node_path47.resolve)(elanBin)));
-  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path47.delimiter);
+  const managedBin = (0, import_node_path49.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
+  const elanBin = (0, import_node_path49.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
+  const elanHas = (0, import_node_fs62.existsSync)((0, import_node_path49.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const userPath = (env.PATH ?? "").split(import_node_path49.delimiter).filter((d) => d && (elanHas || (0, import_node_path49.resolve)(d) !== (0, import_node_path49.resolve)(elanBin)));
+  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path49.delimiter);
   const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
   const exe = process.platform === "win32" ? "lake.exe" : "lake";
-  const candidates2 = [(0, import_node_path47.join)(managedBin, exe), ...elanHas ? [(0, import_node_path47.join)(elanBin, exe)] : [], exe];
+  const candidates2 = [(0, import_node_path49.join)(managedBin, exe), ...elanHas ? [(0, import_node_path49.join)(elanBin, exe)] : [], exe];
   for (const candidate of candidates2) {
     try {
       (0, import_node_child_process15.execFileSync)(candidate, ["--version"], { env: merged, stdio: ["ignore", "pipe", "pipe"], timeout: 1e4 });
@@ -36437,7 +36557,7 @@ function proofsWorkspaceProblem(root) {
   for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
     let st;
     try {
-      st = (0, import_node_fs61.lstatSync)((0, import_node_path47.join)(root, rel));
+      st = (0, import_node_fs62.lstatSync)((0, import_node_path49.join)(root, rel));
     } catch {
       break;
     }
@@ -36457,44 +36577,44 @@ function refused(problem) {
 function buildLibrary(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return run2(tc, (0, import_node_path47.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return run2(tc, (0, import_node_path49.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 async function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return runAsync(tc, (0, import_node_path47.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return runAsync(tc, (0, import_node_path49.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 function isModelInRoot(modelsAbs, rel) {
-  if (!rel.endsWith(".lean") || (0, import_node_path47.isAbsolute)(rel) || rel.startsWith("..")) return false;
+  if (!rel.endsWith(".lean") || (0, import_node_path49.isAbsolute)(rel) || rel.startsWith("..")) return false;
   return statRegularInRoot(modelsAbs, rel).ok;
 }
 function resolveModelFile(root, arg) {
-  const modelsAbs = (0, import_node_path47.join)(root, MODELS_DIR);
-  const asPath = (0, import_node_path47.relative)(modelsAbs, (0, import_node_path47.isAbsolute)(arg) ? arg : (0, import_node_path47.resolve)(root, arg));
+  const modelsAbs = (0, import_node_path49.join)(root, MODELS_DIR);
+  const asPath = (0, import_node_path49.relative)(modelsAbs, (0, import_node_path49.isAbsolute)(arg) ? arg : (0, import_node_path49.resolve)(root, arg));
   const candidates2 = arg.includes("/") || arg.includes("\\") ? [asPath] : [arg, `${arg}.lean`];
   for (const rel of candidates2) {
-    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path47.join)(modelsAbs, rel);
+    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path49.join)(modelsAbs, rel);
   }
   return null;
 }
 function listModelFiles(root) {
-  const modelsAbs = (0, import_node_path47.join)(root, MODELS_DIR);
-  if (!(0, import_node_fs61.existsSync)(modelsAbs)) return [];
-  return (0, import_node_fs61.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path47.join)(modelsAbs, f));
+  const modelsAbs = (0, import_node_path49.join)(root, MODELS_DIR);
+  if (!(0, import_node_fs62.existsSync)(modelsAbs)) return [];
+  return (0, import_node_fs62.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path49.join)(modelsAbs, f));
 }
-function trimDiagnostics(text) {
-  return text.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
+function trimDiagnostics(text2) {
+  return text2.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
 }
 function checkModel(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path47.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path47.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path49.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path49.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 async function checkModelAsync(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path47.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path47.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path49.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path49.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
@@ -36503,10 +36623,10 @@ function toReport(res, root, modelFile, timeoutMs) {
   const parsed = parseVerityLines(res.stdout);
   const combined = `${res.stdout}
 ${res.stderr}`;
-  const name2 = parsed.header?.model ?? (0, import_node_path47.basename)(modelFile, ".lean");
+  const name2 = parsed.header?.model ?? (0, import_node_path49.basename)(modelFile, ".lean");
   const report = {
     model: name2,
-    file: (0, import_node_path47.relative)(root, modelFile),
+    file: (0, import_node_path49.relative)(root, modelFile),
     ok: res.ok,
     header: parsed.header,
     properties: parsed.properties,
@@ -36551,33 +36671,70 @@ function writeResult(root, report) {
 function isCrashTrace(trace) {
   return trace.some((s) => /\b(crash\w*|kill\w*|restart\w*|interrupt\w*|power|abort\w*|process (dies|exit\w*)|lost (reply|response))\b/i.test(s));
 }
+function formalDisposition(f) {
+  if (f.verdict !== "reproduced" || f.waived) return "none";
+  const c = f.check;
+  if (!c || c.outcome !== "answered") return "block";
+  switch (c.verdict) {
+    case "REAL":
+      return c.introduced === "no" ? "report" : "block";
+    case "REAL-LOW":
+      return "report";
+    case "PREVENTED":
+    case "ARTIFACT":
+      return "checked";
+    default:
+      return "block";
+  }
+}
+var CAUTION = { block: 3, report: 2, checked: 1, none: 0 };
+function cautiousCheck(f, checks) {
+  if (checks.length === 0) return void 0;
+  let chosen = checks[0];
+  for (const c of checks.slice(1)) if (CAUTION[formalDisposition({ ...f, check: c })] > CAUTION[formalDisposition({ ...f, check: chosen })]) chosen = c;
+  return { ...chosen, votes: checks.map((c) => c.outcome === "answered" && c.verdict ? c.verdict : c.outcome), costUsd: checks.reduce((n, c) => n + c.costUsd, 0), unpriced: checks.reduce((n, c) => n + c.unpriced, 0) };
+}
+function checkLine(f) {
+  const c = f.check;
+  if (!c || c.outcome !== "answered" || !c.verdict) return "";
+  const why = c.verdict === "PREVENTED" ? c.preventedBy || c.reason : c.reason;
+  const from = c.trigger ? ` Reached from: ${c.trigger}.` : "";
+  const pre = c.introduced === "no" ? " Already possible before this change." : "";
+  const votes = c.votes && c.votes.length > 1 ? ` (${c.votes.length} checks: ${c.votes.join(", ")})` : "";
+  return `Checked: ${c.verdict}${votes}.${from}${pre} ${why ?? ""}`.trim();
+}
 function mergeFormalFindings(response, outcome, pushedFiles) {
-  if (!outcome) return { blocking: 0 };
+  if (!outcome) return { blocking: 0, reported: 0 };
   const norm3 = (p) => p.replace(/\\/g, "/");
   const pushed = new Set(pushedFiles.map(norm3));
-  const blocking = outcome.findings.filter((f) => f.verdict === "reproduced" && !f.waived && pushed.has(norm3(f.file)));
-  if (blocking.length === 0) return { blocking: 0 };
+  const onPush = outcome.findings.filter((f) => pushed.has(norm3(f.file)));
+  const blocking = onPush.filter((f) => formalDisposition(f) === "block");
+  const reported = onPush.filter((f) => formalDisposition(f) === "report");
+  if (blocking.length === 0 && reported.length === 0) return { blocking: 0, reported: 0 };
   const existing = Array.isArray(response.findings) ? response.findings : [];
-  response.findings = [
-    ...existing,
-    ...blocking.map((f) => ({
+  const asFinding = (f, blocks) => {
+    const checked = checkLine(f);
+    return {
       pattern_id: "formal-counterexample",
-      severity: "high",
-      scope: "change",
+      severity: blocks ? "high" : "medium",
+      // A bug this change did not introduce is filed the way the gate files everything it will not block on.
+      scope: f.check?.introduced === "no" && !blocks ? "pre-existing" : "change",
       file: f.file,
       line: outcome.target?.lines?.from ?? null,
       // Worded as the VIOLATION: the property text is what should hold, and
       // as a title it read backwards (e2e, 2026-09-26). A trace that needs a
       // crash between two writes is labelled: reproducing it means injecting
       // the crash, so it is a crash-consistency finding, not a race.
-      title: `Formal: ${terminalText(f.symbol, 128)} breaks "${terminalText(f.desc, 280)}"${isCrashTrace(f.trace) ? " after a crash (crash consistency)" : ""} \u2014 reproduced on the real code`,
-      description: terminalText(f.reason ?? "", 2e3),
+      title: `Formal: ${terminalText(f.symbol, 128)} breaks "${terminalText(f.desc, 280)}"${isCrashTrace(f.trace) ? " after a crash (crash consistency)" : ""} \u2014 reproduced on the real code${f.check?.outcome === "answered" ? `, checked ${f.check.verdict}` : ""}`,
+      description: terminalText([f.reason ?? "", checked].filter(Boolean).join(" "), 2e3),
       fix: { description: `Trace: ${terminalText(f.trace.join(" \u2192 ") || "(initial state)", 2e3)}. Replay: ${terminalText(f.reason ?? "reproduced in the container", 2e3)}` },
       source: "formal"
-    }))
-  ];
-  if (response.gate_decision !== "FAIL") response.gate_decision = "FAIL";
-  return { blocking: blocking.length };
+    };
+  };
+  response.findings = [...existing, ...blocking.map((f) => asFinding(f, true)), ...reported.map((f) => asFinding(f, false))];
+  if (blocking.length > 0) response.gate_decision = "FAIL";
+  else if (response.gate_decision === "PASS") response.gate_decision = "WARN";
+  return { blocking: blocking.length, reported: reported.length };
 }
 
 // src/lib/prove/scalpel.ts
@@ -36814,6 +36971,8 @@ function bumpLedger(root) {
 }
 var REPLAY_RESERVE_MS = 45e3;
 var MAX_REPLAYS = 3;
+var MAX_CHECKS = 2;
+var CHECK_VOTES = 2;
 function isNetworkError(message) {
   return /Network error|fetch failed|ETIMEDOUT|ECONNRESET|ECONNREFUSED|EAI_AGAIN|socket hang up/i.test(message);
 }
@@ -36896,12 +37055,14 @@ async function runFormalPhase(input) {
         symbol: f.symbol,
         verdict: "reproduced",
         reason: f.waived ? `waived ${f.waived.at.slice(0, 10)}: ${f.waived.reason} (standing since ${f.at.slice(0, 10)}; the file has not changed)` : `${f.reason ?? "reproduced on the real code"} (standing since ${f.at.slice(0, 10)}; the file has not changed)`,
-        ...f.waived ? { waived: true } : {}
+        ...f.waived ? { waived: true } : {},
+        // Same bytes, same answer: the check is not paid for twice.
+        ...f.check ? { check: { outcome: "answered", rounds: 0, costUsd: 0, unpriced: 0, durationMs: 0, ...f.check } } : {}
       });
     }
   }
   if (kept.length !== persisted.length) writePersistedFindings(root, kept);
-  if (standing.length > 0) {
+  if (standing.length > 0 && !input.skipStanding) {
     const first = kept.find((f) => f.file === standing[0].file);
     return done({
       status: "checked",
@@ -36929,7 +37090,7 @@ async function runFormalPhase(input) {
       return a.source === "tree-sitter" && a.value.effects.length >= 2;
     })());
   };
-  const eligible = signals.filter((s) => isEligible(s, largePush).ok || mapEligible(s.file)).slice(0, 5);
+  const eligible = signals.filter((s) => input.relaxedGates || isEligible(s, largePush).ok || mapEligible(s.file)).slice(0, 5);
   if (eligible.length === 0) {
     const best = signals[0];
     return done({ status: "skipped", skip: "not-eligible", detail: `${best.file}: ${isEligible(best, largePush).why}` });
@@ -36983,6 +37144,10 @@ async function runFormalPhase(input) {
       }
     }
     if (d.resolved && d.resolved !== c.ai.symbol) c.ai.symbol = d.resolved;
+    if (input.exclude?.has(`${c.file}#${c.ai.symbol}`)) {
+      note("verified", `${c.ai.symbol}: modelled earlier in this push`);
+      continue;
+    }
     if (input.changedLines) {
       const changed = input.changedLines.get(c.file) ?? [];
       if (changed.length === 0) {
@@ -37024,7 +37189,7 @@ async function runFormalPhase(input) {
       const hazard = hasHazard(functionHazard(d.numbered));
       const shared = contextHazard(context);
       const judged = (c.ai.criteria?.hazard ?? 0) >= 0.8;
-      if (!hazard.ok && !shared?.ok && !judged) {
+      if (!input.relaxedGates && !hazard.ok && !shared?.ok && !judged) {
         note("no-hazard", `${c.ai.symbol}: ${hazard.why}`);
         continue;
       }
@@ -37057,7 +37222,7 @@ async function runFormalPhase(input) {
   let report = null;
   let modelName = "";
   let rounds = 0;
-  for (let round = 1; round <= 2; round++) {
+  for (let round = 1; round <= (input.maxRounds ?? 2); round++) {
     if (round > 1 && overCap()) return done({ status: "skipped", skip: "cost-cap", detail: `$${usage.costUsd.toFixed(2)} spent, cap $${costCap.toFixed(2)}; no retry`, target, model: { name: modelName, file: `${AUTO_MODELS_DIR}/${modelName}.lean`, rounds } });
     if (cancelled()) return done({ status: "skipped", skip: "deadline", detail: "cut off before generation", target });
     rounds = round;
@@ -37076,7 +37241,7 @@ async function runFormalPhase(input) {
     modelName = gen.name;
     const rel = `${AUTO_MODELS_DIR}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path48.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path50.join)(root, rel);
     progress.model = { name: gen.name, file: rel, rounds: round };
     progress.step = "check";
     report = await deps.check(root, abs);
@@ -37172,13 +37337,40 @@ async function runFormalPhase(input) {
     const verdict = r.verdict === "reproduced" ? "reproduced" : r.verdict === "diverged" ? "diverged" : r.verdict === "unreplayable" ? "model-only" : "unverified";
     findings.push({ ...baseOf(p), verdict, reason: r.reason || r.downgrade || void 0 });
   }
+  const toCheck = deps.verify && !cancelled() ? findings.filter((f) => f.verdict === "reproduced").slice(0, MAX_CHECKS) : [];
+  if (toCheck.length > 0) {
+    progress.step = "verify";
+    const share = Math.max(0, costCap - usage.costUsd) / (toCheck.length * CHECK_VOTES);
+    const failed = (error) => ({ outcome: "failed", verdict: null, introduced: "unknown", rounds: 0, costUsd: 0, unpriced: 0, durationMs: 0, error });
+    await Promise.all(toCheck.map(async (f) => {
+      const checks = await Promise.all(Array.from({ length: CHECK_VOTES }, () => deps.verify(f, { ...lines ? { lines } : {}, changedLines: input.changedLines?.get(f.file) ?? [], deadlineAt: input.deadlineAt, costLeftUsd: share }).catch((err2) => failed(String(err2?.message ?? err2).slice(0, 120)))));
+      for (const c of checks) {
+        if (c.costUsd > 0) spend({ costUsd: c.costUsd });
+        for (let i2 = 0; i2 < c.unpriced; i2++) usage.unpriced++;
+      }
+      if (!cancelled()) f.check = cautiousCheck(f, checks);
+    }));
+  }
   const reproduced = findings.filter((f) => f.verdict === "reproduced");
   if (reproduced.length > 0 && !cancelled()) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const others = readPersistedFindings(root).filter((f) => f.file !== top.file);
     writePersistedFindings(root, [
       ...others,
-      ...reproduced.map((f) => ({ file: f.file, symbol: f.symbol, sha256: sha2562, property: f.property, desc: f.desc, kind: f.kind, trace: f.trace, model: modelName, reason: f.reason, ...lines ? { lines } : {}, at: now }))
+      ...reproduced.map((f) => ({
+        file: f.file,
+        symbol: f.symbol,
+        sha256: sha2562,
+        property: f.property,
+        desc: f.desc,
+        kind: f.kind,
+        trace: f.trace,
+        model: modelName,
+        reason: f.reason,
+        ...lines ? { lines } : {},
+        at: now,
+        ...f.check?.outcome === "answered" ? { check: { verdict: f.check.verdict, introduced: f.check.introduced, trigger: f.check.trigger, preventedBy: f.check.preventedBy, effect: f.check.effect, reason: f.check.reason, ...f.check.votes ? { votes: f.check.votes } : {} } } : {}
+      }))
     ]);
   }
   const clean2 = findings.every((f) => f.verdict === "diverged");
@@ -37198,7 +37390,7 @@ async function runFormalPhase(input) {
   return done({
     status: "checked",
     target,
-    model: { name: modelName, file: (0, import_node_path48.relative)(root, (0, import_node_path48.join)(root, modelFile)), rounds },
+    model: { name: modelName, file: (0, import_node_path50.relative)(root, (0, import_node_path50.join)(root, modelFile)), rounds },
     properties: report.properties,
     findings
   });
@@ -37275,7 +37467,7 @@ async function generateAndCheck(root, req, opts) {
     }
     const rel = `${dir}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path48.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path50.join)(root, rel);
     const report = await opts.deps.check(root, abs);
     const abstracts = report.header?.abstracts ?? [];
     const stray = abstracts.find((a) => !headerFiles.has(a.file)) ?? (abstracts[0] && abstracts[0].file !== req.file ? abstracts[0] : void 0);
@@ -37307,7 +37499,7 @@ async function generateAndCheck(root, req, opts) {
 function skippedOutcome(skip, detail) {
   return { status: "skipped", skip, ...detail ? { detail } : {}, findings: [], usage: { inputTokens: 0, outputTokens: 0, costUsd: 0, unpriced: 0 }, durationMs: 0 };
 }
-async function prepareFormalPhase(root, env = process.env, auth2, readSource, codeSource) {
+async function prepareFormalPhase(root, env = process.env, auth2, readSource, codeSource, opts = {}) {
   const direct = env.VERITY_PROVE_DIRECT === "1" && !!env.OPENAI_API_KEY;
   if (!auth2 && !direct) return { ok: false, skip: "not-logged-in" };
   const apiKey = direct ? env.OPENAI_API_KEY : void 0;
@@ -37323,7 +37515,7 @@ async function prepareFormalPhase(root, env = process.env, auth2, readSource, co
   const build = await buildLibraryAsync(toolchain, root, 9e4);
   if (!build.ok) return { ok: false, skip: "library-build-failed", detail: build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).join(" ").slice(0, 200) };
   const code = await loadCodeContext(root, env, codeSource);
-  return { ok: true, deps: { ...defaultDeps({ auth: auth2, apiKey, env, toolchain, readSource, ...code }), codeSource: code.codeSource } };
+  return { ok: true, deps: { ...defaultDeps({ auth: auth2, apiKey, env, toolchain, readSource, ...opts.tier ? { tier: opts.tier } : {}, ...code }), codeSource: code.codeSource } };
 }
 async function loadCodeContext(root, env = process.env, codeSource) {
   const loaded = await loadCodeMap(env);
@@ -37376,10 +37568,52 @@ function runFormalPhaseWithin(input) {
       resolve9(cutOffOutcome(progress, `hard stop after ${Math.round(left / 1e3)} s during ${progress.step ?? "setup"}`, left));
     }, left);
   });
-  return Promise.race([runFormalPhase({ ...input, progress }), cutoff]).finally(() => {
+  return Promise.race([runFormalPhaseTargets({ ...input, progress }), cutoff]).finally(() => {
     if (timer) clearTimeout(timer);
   });
 }
+var NOTHING_ELSE_QUALIFIES = /* @__PURE__ */ new Set(["no-source-files", "not-eligible", "no-candidate", "no-symbol", "symbol-not-in-push", "verified", "no-hazard", "too-large"]);
+async function runFormalPhaseTargets(input) {
+  const first = await runFormalPhase(input);
+  const max = Math.max(1, Math.floor(input.maxTargets ?? 1));
+  if (max === 1 || first.status !== "checked" || !first.target) return first;
+  const outcomes = [first];
+  const exclude = /* @__PURE__ */ new Set([`${first.target.file}#${first.target.symbol}`]);
+  const cap2 = input.costCapUsd ?? PUSH_COST_CAP_USD;
+  let stoppedAt;
+  while (outcomes.length < max) {
+    if (input.progress?.cancelled) {
+      stoppedAt = { skip: "deadline", detail: "cut off between targets" };
+      break;
+    }
+    const left = input.deadlineAt - input.deps.now();
+    if (left < GENERATE_RESERVE_MS + REPLAY_RESERVE_MS) {
+      stoppedAt = { skip: "not-enough-time", detail: `${Math.round(left / 1e3)} s left before target ${outcomes.length + 1}` };
+      break;
+    }
+    const spent = outcomes.reduce((sum, o) => sum + o.usage.costUsd, 0);
+    if (spent >= cap2) {
+      stoppedAt = { skip: "cost-cap", detail: `$${spent.toFixed(2)} spent, cap $${cap2.toFixed(2)}` };
+      break;
+    }
+    const next = await runFormalPhase({ ...input, exclude, skipStanding: true, costCapUsd: cap2 - spent, progress: {} });
+    if (next.status !== "checked" && next.skip && !NOTHING_ELSE_QUALIFIES.has(next.skip)) stoppedAt = { skip: next.skip, ...next.detail ? { detail: next.detail } : {} };
+    if (!next.target || next.status !== "checked" && exclude.has(`${next.target.file}#${next.target.symbol}`)) break;
+    exclude.add(`${next.target.file}#${next.target.symbol}`);
+    outcomes.push(next);
+    if (next.status !== "checked") break;
+  }
+  if (outcomes.length === 1) return stoppedAt ? { ...first, stoppedAt } : first;
+  return {
+    ...first,
+    ...stoppedAt ? { stoppedAt } : {},
+    findings: outcomes.flatMap((o) => o.findings),
+    properties: outcomes.flatMap((o) => o.properties ?? []),
+    targets: outcomes.flatMap((o) => o.target ? [{ file: o.target.file, symbol: o.target.symbol, status: o.status, ...o.skip ? { skip: o.skip } : {}, findings: o.findings.length }] : []),
+    usage: outcomes.reduce((u, o) => ({ inputTokens: u.inputTokens + o.usage.inputTokens, outputTokens: u.outputTokens + o.usage.outputTokens, costUsd: Math.round((u.costUsd + o.usage.costUsd) * 1e6) / 1e6, unpriced: u.unpriced + o.usage.unpriced }), { inputTokens: 0, outputTokens: 0, costUsd: 0, unpriced: 0 }),
+    durationMs: outcomes.reduce((sum, o) => sum + o.durationMs, 0)
+  };
+}
 function cutOffOutcome(p, detail, elapsedMs) {
   const usage = p.usage ?? { inputTokens: 0, outputTokens: 0, costUsd: 0, unpriced: 0 };
   if (!p.report || !p.target || !p.model) {
@@ -37398,7 +37632,9 @@ function describeFormalOutcome(o) {
   if (o.status === "skipped") return `formal: skipped (${o.skip}${o.detail ? `: ${o.detail}` : ""})`;
   const parts2 = o.properties?.map((p) => {
     const f = o.findings.find((x) => x.property === p.id);
-    const tag = p.result === "counterexample" ? f ? f.verdict.toUpperCase() + (f.waived ? " (waived)" : "") : "counterexample" : p.result;
+    const votes = f?.check?.votes && f.check.votes.length > 1 ? ` [${f.check.votes.join(", ")}]` : "";
+    const checked = f?.check ? f.check.outcome === "answered" ? ` \u2192 checked ${f.check.verdict}${f.check.introduced === "no" ? " (pre-existing)" : ""}${votes}` : ` \u2192 not checked (${f.check.outcome})${votes}` : "";
+    const tag = p.result === "counterexample" ? f ? f.verdict.toUpperCase() + (f.waived ? " (waived)" : "") + checked : "counterexample" : p.result;
     return `${p.id} ${tag}`;
   }) ?? [];
   const cost = o.usage.costUsd > 0 ? ` \xB7 $${o.usage.costUsd.toFixed(2)}` : "";
@@ -37406,6 +37642,88 @@ function describeFormalOutcome(o) {
   return `formal: ${o.model?.name ?? "?"} on ${o.target?.file ?? "?"}#${o.target?.symbol ?? "?"} (${o.model?.rounds ?? 1} round${o.model?.rounds === 1 ? "" : "s"}) \xB7 ${parts2.join(" \xB7 ")} \xB7 ${Math.round(o.durationMs / 1e3)} s${cost}${cut}`;
 }
 
+// src/lib/prove/verify.ts
+var MIN_VERIFY_TURN_MS = 15e3;
+var MIN_VERIFY_START_MS = 45e3;
+var VERIFY_TURN_HOLD_USD = 0.1;
+var MAX_TURNS2 = 14;
+var VERDICTS = ["REAL", "REAL-LOW", "PREVENTED", "ARTIFACT", "UNSURE"];
+var verdictOf = (v) => typeof v === "string" && VERDICTS.includes(v) ? v : null;
+var introducedOf = (v) => v === "yes" || v === "no" ? v : "unknown";
+var text = (v, n) => typeof v === "string" ? v.slice(0, n) : "";
+function verifyPost(auth2) {
+  return async (body2, timeoutMs) => {
+    const res = await apiRequest({
+      method: "POST",
+      path: "/prove/verify",
+      serviceUrl: auth2.serviceUrl,
+      token: auth2.token,
+      // Streamed with a heartbeat, like generate and replay (decision 53).
+      extraHeaders: { "X-Verity-Keepalive": "1" },
+      body: body2,
+      timeout: timeoutMs,
+      cmd: "prove-verify"
+    });
+    return res.ok ? { ok: true, data: res.data ?? {} } : { ok: false, error: res.error };
+  };
+}
+async function verifyFinding(input, opts) {
+  const now = opts.now ?? Date.now;
+  const startedAt = now();
+  const remaining = () => opts.deadlineAt - now();
+  let rounds = 0;
+  let costUsd = 0;
+  let unpriced = 0;
+  const end = (outcome, extra = {}) => ({ outcome, verdict: null, introduced: "unknown", rounds, costUsd, unpriced, durationMs: now() - startedAt, ...extra });
+  if (remaining() < MIN_VERIFY_START_MS) return end("deadline", { error: "not enough time left" });
+  let body2 = {
+    target: {
+      file: input.file,
+      symbol: input.symbol,
+      ...input.lines ? { lines: input.lines } : {},
+      property: input.property,
+      replay_reason: input.replayReason,
+      changed_lines: input.changedLines.slice(0, 200)
+    },
+    local_tools: opts.localTools
+  };
+  for (let turn = 0; turn < MAX_TURNS2; turn++) {
+    if (remaining() < MIN_VERIFY_TURN_MS) return end("deadline");
+    if (costUsd + VERIFY_TURN_HOLD_USD > opts.costLeftUsd) return end("cost-cap");
+    const res = await opts.post({ ...body2, remaining_ms: remaining() }, Math.max(1, remaining()));
+    if (!res.ok) return end("failed", { error: res.error.slice(0, 200) });
+    const d = res.data;
+    if (d.enabled === false) return end("disabled", { error: text(d.reason, 60) });
+    if (d.error && typeof d.error === "object") return end("failed", { error: text(d.error.code, 60) || "SERVICE_ERROR" });
+    rounds = typeof d.round === "number" ? d.round : rounds + 1;
+    if (typeof d.cost_usd === "number") costUsd += d.cost_usd;
+    else unpriced++;
+    if (d.done) {
+      const a = d.answer;
+      if (!a) return end("failed", { error: text(d.error, 60) || "no verdict" });
+      const verdict = verdictOf(a.verdict);
+      if (!verdict) return end("failed", { error: "unknown verdict" });
+      return end("answered", {
+        verdict,
+        claimed: verdictOf(a.claimed),
+        introduced: introducedOf(a.introduced),
+        trigger: text(a.trigger, 400),
+        preventedBy: typeof a.prevented_by === "string" ? a.prevented_by.slice(0, 600) : null,
+        effect: text(a.effect, 600),
+        reason: text(a.reason, 2e3),
+        quotes: (Array.isArray(a.quotes) ? a.quotes : []).slice(0, 12).flatMap((q) => {
+          const o = q ?? {};
+          return typeof o.path === "string" && typeof o.text === "string" ? [{ path: o.path.slice(0, 400), text: o.text.slice(0, 600), witnessed: o.witnessed === true }] : [];
+        })
+      });
+    }
+    if (typeof d.state !== "string" || !Array.isArray(d.calls)) return end("failed", { error: "malformed turn" });
+    const results = await opts.executeTools(d.calls);
+    body2 = { state: d.state, results };
+  }
+  return end("failed", { error: "too many turns" });
+}
+
 // src/lib/prove/record.ts
 var RECORD_TIMEOUT_MS = 8e3;
 var HOOK_EXIT_MARGIN_MS = 5e3;
@@ -37446,7 +37764,7 @@ var kind = (k) => k === "intent" ? "intent" : "structural";
 var signalsOf = (c) => c && typeof c.commits === "number" && typeof c.fixCommits === "number" ? { commits: c.commits, fix_commits: c.fixCommits, risk: Object.fromEntries(Object.entries(c.risk ?? {}).filter(([, n]) => typeof n === "number" && n > 0).slice(0, 16)) } : null;
 function buildPhaseRecord(outcome, ctx) {
   const pushed = new Set(ctx.pushedFiles.map(norm2));
-  const blocks = (f) => ctx.moment === "push" && f.verdict === "reproduced" && !f.waived && pushed.has(norm2(f.file));
+  const blocks = (f) => ctx.moment === "push" && formalDisposition(f) === "block" && pushed.has(norm2(f.file));
   const symbol = (s) => ident2(s, SYMBOL, 200);
   return {
     moment: ctx.moment,
@@ -37486,7 +37804,9 @@ function buildPhaseRecord(outcome, ctx) {
       symbol: f.symbol,
       verdict: f.verdict,
       waived: f.waived === true,
-      blocked: blocks(f)
+      blocked: blocks(f),
+      // The check's closed codes only (decision 91): never its reason, trigger or quotes.
+      check: f.check ? { outcome: f.check.outcome, verdict: f.check.verdict, introduced: f.check.introduced, rounds: f.check.rounds } : null
     })),
     grounding: outcome.grounding ? {
       sent_back: outcome.grounding.sentBack,
@@ -37537,7 +37857,7 @@ var WRITERS_BUDGET_MS = 1500;
 var EXCERPT_MAX_LINES2 = 30;
 var VENDORED_READ_MAX_BYTES = 256 * 1024;
 var GUARD_BLOCK_CAP = 2;
-var GUARD_ITER_FILE = (0, import_node_path49.join)(VERITY_DIR, ".guard-iteration");
+var GUARD_ITER_FILE = (0, import_node_path51.join)(VERITY_DIR, ".guard-iteration");
 function readPreToolUseStdin() {
   const empty = { command: "", cwd: null, sessionId: null };
   return new Promise((resolve9) => {
@@ -37582,7 +37902,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs62.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs63.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -37602,10 +37922,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs62.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs63.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs62.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs63.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -37615,10 +37935,10 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs62.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs62.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs63.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs63.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs62.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs62.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs63.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs63.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
@@ -37668,17 +37988,17 @@ function parsePrIntent(command) {
 }
 var TRIVIAL_INTENT = /^(wip|tmp|temp|test|fix|chore|amend|\.+|fixup!.*|squash!.*|merge\b.*)$/i;
 var SHELL_PLUMBING = /\$\(|`|<<-?\s*['"]?[A-Za-z_]/;
-function isSubstantiveIntent(text) {
-  if (!text) return false;
-  const t = text.trim();
+function isSubstantiveIntent(text2) {
+  if (!text2) return false;
+  const t = text2.trim();
   if (t.length < 12) return false;
   if (TRIVIAL_INTENT.test(t)) return false;
   if (SHELL_PLUMBING.test(t)) return false;
   return true;
 }
 function extractStatedIntent(moment, command, pushedMessages = null) {
-  const text = moment === "pre-commit" ? parseCommitMessage(command) : parsePrIntent(command) ?? pushedMessages;
-  return isSubstantiveIntent(text) ? text : null;
+  const text2 = moment === "pre-commit" ? parseCommitMessage(command) : parsePrIntent(command) ?? pushedMessages;
+  return isSubstantiveIntent(text2) ? text2 : null;
 }
 function hasBlockingFinding(response, sentFiles) {
   const findings = response.findings ?? [];
@@ -37688,7 +38008,7 @@ function hasBlockingFinding(response, sentFiles) {
 function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedIntent, coverageTelemetry) {
   const analyzable = filterAnalyzable(files);
   const securityFiles = filterSecurity(files);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs62.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs63.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const trigger = moment === "pre-commit" ? "hook:pre-commit" : "hook:pre-push";
   const requestBody = {
@@ -37701,7 +38021,7 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
       agent_harness: "claude-code",
       // Prefer the session id Claude Code passes on the hook payload; fall back
       // to the env var, then 'unknown'.
-      session_id: sessionId ?? process.env.CLAUDE_SESSION_ID ?? "unknown",
+      session_id: sessionId ?? envSessionId() ?? "unknown",
       trigger,
       iteration: iter + 1
     }
@@ -37769,6 +38089,14 @@ function oneShotLostOutcome(input) {
   return input.agentGate === "FAIL" && input.agentBlocking ? "block" : "allow-without-review";
 }
 function withAgentVerdict(oneShot, agent) {
+  if (agent.one_shot_source === "none" && agent.findings_mode === "agent" && agent.gate_decision !== null) {
+    return {
+      ...oneShot,
+      gate_decision: worstGate(agent.gate_decision, "WARN", "WARN"),
+      findings: agent.findings.filter((f) => f.agent_added === true),
+      agent_review: { ...agent.agent_review, gate_decision_before: oneShot.gate_decision ?? null, one_shot_source: "none", cleared: [], downgraded: [] }
+    };
+  }
   if (agent.one_shot_source === "none" && typeof oneShot.gate_decision === "string") {
     const added = agent.findings.filter((f) => f.agent_added === true);
     return {
@@ -37832,7 +38160,8 @@ function startAgentReview(input) {
       http: http2,
       executeTools: makeToolExecutor(ctx),
       startedAt: input.hookStartedAt,
-      deadlineMs: AGENT_DEADLINE_MS[input.moment],
+      // The push's deadline follows the review effort (lib/effort.ts); the commit's never does.
+      deadlineMs: input.moment === "pre-push" ? effortProfile(input.root).pushDeadlineMs : AGENT_DEADLINE_MS[input.moment],
       start: {
         moment: input.moment,
         iteration: input.iteration,
@@ -37857,7 +38186,8 @@ function startFormalPhase(input) {
   const env = process.env.VERITY_GIT_MOMENT_FORMAL;
   if (env === "off") return null;
   if (env !== "push" && readProjectConfig().formal !== "push") return null;
-  const deadlineAt = input.hookStartedAt + AGENT_DEADLINE_MS["pre-push"] - 1e4;
+  const profile = effortProfile(input.root);
+  const deadlineAt = input.hookStartedAt + profile.pushDeadlineMs - 1e4;
   const ig = loadVerityIgnore();
   const files = input.files.filter((f) => !isVerityOwnedPath(f) && !isIgnored3(ig, f));
   let changedLines = /* @__PURE__ */ new Map();
@@ -37879,9 +38209,17 @@ function startFormalPhase(input) {
     return { ok: true, content };
   } : void 0;
   const run4 = async () => {
-    const prep = await prepareFormalPhase(input.root, process.env, input.auth, readSource, withoutPaths(tip ? revisionSource(input.root, tip) : worktreeSource(input.root), isDeniedPath));
+    const prep = await prepareFormalPhase(input.root, process.env, input.auth, readSource, withoutPaths(tip ? revisionSource(input.root, tip) : worktreeSource(input.root), isDeniedPath), { tier: profile.formal.tier });
     if (!prep.ok) return skippedOutcome(prep.skip, prep.detail);
-    return runFormalPhaseWithin({ root: input.root, files, changedLines, deadlineAt, deps: prep.deps });
+    if (process.env.VERITY_FORMAL_VERIFY !== "off") {
+      const ctx = { root: input.root, range: input.range, codeMap: prep.deps.codeMap ?? null };
+      const post = verifyPost(input.auth);
+      prep.deps.verify = (f, v) => verifyFinding(
+        { file: f.file, symbol: f.symbol, ...v.lines ? { lines: v.lines } : {}, property: { desc: f.desc, kind: f.kind, trace: f.trace }, replayReason: f.reason ?? "", changedLines: v.changedLines },
+        { executeTools: makeToolExecutor(ctx), localTools: offeredLocalTools(ctx), deadlineAt: v.deadlineAt, costLeftUsd: v.costLeftUsd, post }
+      );
+    }
+    return runFormalPhaseWithin({ root: input.root, files, changedLines, deadlineAt, deps: prep.deps, minScore: profile.formal.minScore, maxRounds: profile.formal.maxRounds, costCapUsd: profile.formal.costCapUsd, maxTargets: profile.formal.maxTargets, relaxedGates: profile.formal.relaxedGates, dailyCap: profile.formal.dailyModels, dailyCostCapUsd: profile.formal.dailyCostUsd });
   };
   return run4().catch((err2) => skippedOutcome("error", String(err2?.message ?? err2).slice(0, 200)));
 }
@@ -38073,6 +38411,9 @@ async function runGuard(opts, globals) {
       rounds: formalOutcome.model?.rounds ?? null,
       properties: formalOutcome.properties?.map((p) => `${p.id}:${p.result}`) ?? [],
       findings: formalOutcome.findings.map((f) => `${f.property}:${f.verdict}`),
+      // Review effort "max" models more than one function: each one, and why the search stopped early.
+      targets: (formalOutcome.targets ?? []).map((t) => `${t.file}#${t.symbol}:${t.status}${t.skip ? `(${t.skip})` : ""}`),
+      stopped_at: formalOutcome.stoppedAt?.skip ?? null,
       // Decision 81: what each property rests on (a rule, or "line"), what was
       // sent back or dropped as ungrounded, and which counterexamples lack their
       // property's trigger (shadow). Ids and rule names only, never code.
@@ -38229,7 +38570,7 @@ function writeBlockMessage(moment, response, covDetail) {
 
 // src/commands/ignore.ts
 function registerIgnoreCommand(program2) {
-  const ignore = program2.command("ignore").description("Declare the next turn (or a short window) as housekeeping \u2014 no review needed").option("--turn", "Cover the next turn only (the default)").option("--for <duration>", "Cover a window: 30m, 45s, 1h (max 60m)").option("--reason <reason>", "Why this window needs no review \u2014 required, and recorded").option("--agent", "Mark the declaration as agent-invoked (a ledger label, not a permission)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID)").option("--json", "Output raw JSON").action(async (opts) => {
+  const ignore = program2.command("ignore").description("Declare the next turn (or a short window) as housekeeping \u2014 no review needed").option("--turn", "Cover the next turn only (the default)").option("--for <duration>", "Cover a window: 30m, 45s, 1h (max 60m)").option("--reason <reason>", "Why this window needs no review \u2014 required, and recorded").option("--agent", "Mark the declaration as agent-invoked (a ledger label, not a permission)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID, then $CLAUDE_CODE_SESSION_ID)").option("--json", "Output raw JSON").action(async (opts) => {
     const globals = program2.opts();
     const now = Math.floor(Date.now() / 1e3);
     const reason = opts.reason?.trim();
@@ -38256,7 +38597,7 @@ function registerIgnoreCommand(program2) {
     }
     const tokenResult = await resolveToken(globals.token);
     const token = tokenResult.ok ? tokenResult.data.token : void 0;
-    const sessionId = opts.sessionId || process.env.CLAUDE_SESSION_ID || void 0;
+    const sessionId = opts.sessionId || envSessionId();
     const keys = ignoreStateKeys(token, sessionId);
     const existing = resolveIgnoreState(keys);
     const spent = existing?.state.spent ?? 0;
@@ -38302,11 +38643,11 @@ function registerIgnoreCommand(program2) {
     printInfo(`Verity will skip ${window2} \u2014 "${reason}" (${spent + 1}/${IGNORE_BUDGET} this session).`);
     printInfo("It covers turns that author nothing. If anything is written, the declaration voids and the review runs.");
   });
-  ignore.command("clear").description("Cancel the active declaration (the spent budget is not refunded)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID)").action(async (opts) => {
+  ignore.command("clear").description("Cancel the active declaration (the spent budget is not refunded)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID, then $CLAUDE_CODE_SESSION_ID)").action(async (opts) => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
     const token = tokenResult.ok ? tokenResult.data.token : void 0;
-    const sessionId = opts.sessionId || process.env.CLAUDE_SESSION_ID || void 0;
+    const sessionId = opts.sessionId || envSessionId();
     const found = resolveIgnoreState(ignoreStateKeys(token, sessionId));
     const active = resolveActive(found?.state ?? null, Math.floor(Date.now() / 1e3));
     if (!found || !active) {
@@ -38321,7 +38662,7 @@ function registerIgnoreCommand(program2) {
 
 // src/commands/waive.ts
 var import_node_crypto20 = require("node:crypto");
-var import_node_fs63 = require("node:fs");
+var import_node_fs64 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -38350,7 +38691,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body2.file = opts.file;
       try {
-        body2.file_sha256 = (0, import_node_crypto20.createHash)("sha256").update((0, import_node_fs63.readFileSync)(opts.file)).digest("hex");
+        body2.file_sha256 = (0, import_node_crypto20.createHash)("sha256").update((0, import_node_fs64.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -38375,10 +38716,10 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs68 = require("node:fs");
+var import_node_fs69 = require("node:fs");
 var import_promises20 = require("node:fs/promises");
-var import_yaml6 = __toESM2(require_dist());
-var import_node_path53 = require("node:path");
+var import_yaml7 = __toESM2(require_dist());
+var import_node_path55 = require("node:path");
 var import_node_os11 = require("node:os");
 var import_node_child_process19 = require("node:child_process");
 
@@ -38413,12 +38754,12 @@ function printBanner(opts) {
   const color = colorEnabled();
   const version = `v${cliVersion()}`;
   const art = [WORDMARK, WORDMARK_NARROW].find((a) => artWidth(a) <= columns) ?? null;
-  const dim = (text) => color ? `${DIM3}${text}${RESET2}` : text;
+  const dim = (text2) => color ? `${DIM3}${text2}${RESET2}` : text2;
   process.stderr.write("\n");
   if (!art) {
     const candidates2 = [`Verity ${version}`, "Verity"];
-    const text = candidates2.find((c) => c.length + INDENT.length <= columns);
-    if (text) process.stderr.write(`${INDENT}${dim(text)}
+    const text2 = candidates2.find((c) => c.length + INDENT.length <= columns);
+    if (text2) process.stderr.write(`${INDENT}${dim(text2)}
 `);
     process.stderr.write("\n");
     return;
@@ -38458,7 +38799,7 @@ function printPhase(n, of, title, subtitle) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs64 = require("node:fs");
+var import_node_fs65 = require("node:fs");
 
 // src/lib/prereqs.ts
 var import_node_child_process16 = require("node:child_process");
@@ -38666,11 +39007,11 @@ async function buildReport() {
   const hooks = wiring.status;
   const provenance = cliProvenance();
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs64.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs65.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs64.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs65.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs64.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs65.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -38829,8 +39170,8 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/migrate.ts
-var import_node_fs65 = require("node:fs");
-var import_node_path50 = require("node:path");
+var import_node_fs66 = require("node:fs");
+var import_node_path52 = require("node:path");
 var import_node_child_process17 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
 function defaultNpmRemover(pkg) {
@@ -38867,12 +39208,12 @@ async function runMigration(opts = {}) {
   return { actions, migrated: actions.length > 0 };
 }
 function migrateProjectDir(root, actions) {
-  const gateDir = (0, import_node_path50.join)(root, ".gate");
-  const verityDir = (0, import_node_path50.join)(root, ".verity");
-  if ((0, import_node_fs65.existsSync)(gateDir) && !(0, import_node_fs65.existsSync)(verityDir)) {
+  const gateDir = (0, import_node_path52.join)(root, ".gate");
+  const verityDir = (0, import_node_path52.join)(root, ".verity");
+  if ((0, import_node_fs66.existsSync)(gateDir) && !(0, import_node_fs66.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs65.existsSync)(gateDir) && (0, import_node_fs65.existsSync)(verityDir)) {
+  if ((0, import_node_fs66.existsSync)(gateDir) && (0, import_node_fs66.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -38893,13 +39234,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs65.existsSync)(gateDir)) {
+    if ((0, import_node_fs66.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs65.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs66.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -38915,18 +39256,18 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs65.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs66.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
 }
 function migrateGlobalCredentials(home, actions) {
   if (!home) return;
-  const gateCreds = (0, import_node_path50.join)(home, ".gate", "credentials");
-  const verityCreds = (0, import_node_path50.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs65.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs65.existsSync)(verityCreds)) {
-    (0, import_node_fs65.mkdirSync)((0, import_node_path50.join)(home, ".verity"), { recursive: true });
+  const gateCreds = (0, import_node_path52.join)(home, ".gate", "credentials");
+  const verityCreds = (0, import_node_path52.join)(home, ".verity", "credentials");
+  if (!(0, import_node_fs66.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs66.existsSync)(verityCreds)) {
+    (0, import_node_fs66.mkdirSync)((0, import_node_path52.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -38948,8 +39289,8 @@ async function migrateLegacyHooks(root, actions) {
   }
 }
 async function migrateClaudeMd(root, actions) {
-  const claudeMd = (0, import_node_path50.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs65.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const claudeMd = (0, import_node_path52.join)(root, "CLAUDE.md");
+  const hadLegacyBlock = (0, import_node_fs66.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -38959,9 +39300,9 @@ async function migrateClaudeMd(root, actions) {
   }
 }
 function migrateStandardFile(root, actions) {
-  const gateMd = (0, import_node_path50.join)(root, "GATE.md");
-  const verityMd = (0, import_node_path50.join)(root, "VERITY.md");
-  if (!(0, import_node_fs65.existsSync)(gateMd) || (0, import_node_fs65.existsSync)(verityMd)) return;
+  const gateMd = (0, import_node_path52.join)(root, "GATE.md");
+  const verityMd = (0, import_node_path52.join)(root, "VERITY.md");
+  if (!(0, import_node_fs66.existsSync)(gateMd) || (0, import_node_fs66.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -38973,12 +39314,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs65.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs66.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
-  const file = (0, import_node_path50.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs65.existsSync)(file)) return;
+  const file = (0, import_node_path52.join)(root, ".claude", "settings.local.json");
+  if (!(0, import_node_fs66.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -39025,15 +39366,15 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
     toAppend.push(line2.replace(/\r$/, ""));
   }
   if (toAppend.length > 0) {
-    const sep6 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs65.writeFileSync)(verityCreds, verityContent + sep6 + toAppend.join("\n") + "\n");
+    const sep7 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
+    (0, import_node_fs66.writeFileSync)(verityCreds, verityContent + sep7 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs65.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs66.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs65.readFileSync)(path, "utf-8");
+    return (0, import_node_fs66.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -39048,35 +39389,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs65.renameSync)(from, to);
+    (0, import_node_fs66.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs65.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs65.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs66.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs66.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs65.renameSync)(from, to);
+    (0, import_node_fs66.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs65.cpSync)(from, to);
-    (0, import_node_fs65.rmSync)(from, { force: true });
+    (0, import_node_fs66.cpSync)(from, to);
+    (0, import_node_fs66.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
-    const srcDir = (0, import_node_path50.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs65.readdirSync)(srcDir)) {
-      const rel = relDir ? (0, import_node_path50.join)(relDir, entry) : entry;
-      const src = (0, import_node_path50.join)(gateDir, rel);
-      const dest = (0, import_node_path50.join)(verityDir, rel);
-      if ((0, import_node_fs65.statSync)(src).isDirectory()) {
+    const srcDir = (0, import_node_path52.join)(gateDir, relDir);
+    for (const entry of (0, import_node_fs66.readdirSync)(srcDir)) {
+      const rel = relDir ? (0, import_node_path52.join)(relDir, entry) : entry;
+      const src = (0, import_node_path52.join)(gateDir, rel);
+      const dest = (0, import_node_path52.join)(verityDir, rel);
+      if ((0, import_node_fs66.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs65.existsSync)(dest)) {
-        (0, import_node_fs65.mkdirSync)((0, import_node_path50.dirname)(dest), { recursive: true });
-        (0, import_node_fs65.cpSync)(src, dest);
+      } else if (!(0, import_node_fs66.existsSync)(dest)) {
+        (0, import_node_fs66.mkdirSync)((0, import_node_path52.dirname)(dest), { recursive: true });
+        (0, import_node_fs66.cpSync)(src, dest);
         copied++;
       }
     }
@@ -39085,22 +39426,22 @@ function carryLegacyContents(gateDir, verityDir) {
   return copied;
 }
 async function needsMigration(root = repoRoot()) {
-  const gateDir = (0, import_node_path50.join)(root, ".gate");
-  const verityDir = (0, import_node_path50.join)(root, ".verity");
-  if ((0, import_node_fs65.existsSync)(gateDir) && !(0, import_node_fs65.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs65.existsSync)(gateDir) && (0, import_node_fs65.existsSync)(verityDir)) {
-    if ((0, import_node_fs65.existsSync)((0, import_node_path50.join)(gateDir, "credentials")) && !(0, import_node_fs65.existsSync)((0, import_node_path50.join)(verityDir, "credentials"))) {
+  const gateDir = (0, import_node_path52.join)(root, ".gate");
+  const verityDir = (0, import_node_path52.join)(root, ".verity");
+  if ((0, import_node_fs66.existsSync)(gateDir) && !(0, import_node_fs66.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs66.existsSync)(gateDir) && (0, import_node_fs66.existsSync)(verityDir)) {
+    if ((0, import_node_fs66.existsSync)((0, import_node_path52.join)(gateDir, "credentials")) && !(0, import_node_fs66.existsSync)((0, import_node_path52.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs65.existsSync)((0, import_node_path50.join)(gateDir, "memory")) && !(0, import_node_fs65.existsSync)((0, import_node_path50.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs66.existsSync)((0, import_node_path52.join)(gateDir, "memory")) && !(0, import_node_fs66.existsSync)((0, import_node_path52.join)(verityDir, "memory"))) {
       return true;
     }
   }
-  const claudeMd = (0, import_node_path50.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs65.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  const claudeMd = (0, import_node_path52.join)(root, "CLAUDE.md");
+  if ((0, import_node_fs66.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs65.existsSync)((0, import_node_path50.join)(root, "GATE.md")) && !(0, import_node_fs65.existsSync)((0, import_node_path50.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs66.existsSync)((0, import_node_path52.join)(root, "GATE.md")) && !(0, import_node_fs66.existsSync)((0, import_node_path52.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -39202,7 +39543,7 @@ var DIM4 = "\x1B[2m";
 var BOLD2 = "\x1B[1m";
 var RESET3 = "\x1B[0m";
 function renderSelect(question, choices, state, mode2, color = colorEnabled()) {
-  const paint = (text, code) => color ? `${code}${text}${RESET3}` : text;
+  const paint = (text2, code) => color ? `${code}${text2}${RESET3}` : text2;
   const lines = ["", `  ${question}`];
   const labelOf = (c) => `${c.label}${c.recommended ? " (recommended)" : ""}`;
   const gutter = Math.max(...choices.map((c) => labelOf(c).length));
@@ -39381,11 +39722,11 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 
 // src/lib/prove/lean-install.ts
-var import_node_fs66 = require("node:fs");
+var import_node_fs67 = require("node:fs");
 var import_node_crypto21 = require("node:crypto");
 var import_node_child_process18 = require("node:child_process");
 var import_node_os10 = require("node:os");
-var import_node_path51 = require("node:path");
+var import_node_path53 = require("node:path");
 var import_promises18 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
 var RELEASES = "https://releases.lean-lang.org/lean4";
@@ -39396,10 +39737,10 @@ function freeBytes(dir) {
   let d = dir;
   for (let i2 = 0; i2 < 64; i2++) {
     try {
-      const st = (0, import_node_fs66.statfsSync)(d);
+      const st = (0, import_node_fs67.statfsSync)(d);
       return Number(st.bavail) * Number(st.bsize);
     } catch {
-      const up = (0, import_node_path51.join)(d, "..");
+      const up = (0, import_node_path53.join)(d, "..");
       if (up === d) return null;
       d = up;
     }
@@ -39421,7 +39762,7 @@ function expectedSha256(asset, version = pinnedVersion()) {
 function sha256File(path) {
   return new Promise((resolve9, reject) => {
     const hash = (0, import_node_crypto21.createHash)("sha256");
-    (0, import_node_fs66.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve9(hash.digest("hex"))).on("error", reject);
+    (0, import_node_fs67.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve9(hash.digest("hex"))).on("error", reject);
   });
 }
 async function verifyDownload(zip, asset, version = pinnedVersion()) {
@@ -39441,7 +39782,7 @@ function leanAssetName(version = pinnedVersion()) {
   return suffix ? `lean-${v}-${suffix}.zip` : null;
 }
 function pinnedVersionDir(env = process.env) {
-  return (0, import_node_path51.join)(verityLeanHome(env), pinnedVersion());
+  return (0, import_node_path53.join)(verityLeanHome(env), pinnedVersion());
 }
 function lakeBinary() {
   return (0, import_node_os10.platform)() === "win32" ? "lake.exe" : "lake";
@@ -39452,12 +39793,12 @@ function unzip(zip, dest) {
   for (const [cmd, args2] of attempts) {
     try {
       (0, import_node_child_process18.execFileSync)(cmd, args2, { stdio: ["ignore", "ignore", "pipe"], timeout: 15 * 6e4 });
-      if ((0, import_node_fs66.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
+      if ((0, import_node_fs67.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
       errors.push(`${cmd}: produced nothing`);
     } catch (err2) {
       errors.push(`${cmd}: ${String(err2.message).split("\n")[0].slice(0, 120)}`);
       try {
-        for (const e of (0, import_node_fs66.readdirSync)(dest)) (0, import_node_fs66.rmSync)((0, import_node_path51.join)(dest, e), { recursive: true, force: true });
+        for (const e of (0, import_node_fs67.readdirSync)(dest)) (0, import_node_fs67.rmSync)((0, import_node_path53.join)(dest, e), { recursive: true, force: true });
       } catch {
       }
     }
@@ -39483,7 +39824,7 @@ async function download(url, dest, onProgress, stallMs = DOWNLOAD_STALL_MS) {
       seen += chunk.length;
       onProgress(seen, total);
     });
-    await (0, import_promises18.pipeline)(stream, (0, import_node_fs66.createWriteStream)(dest), { signal: ctrl.signal });
+    await (0, import_promises18.pipeline)(stream, (0, import_node_fs67.createWriteStream)(dest), { signal: ctrl.signal });
   } catch (err2) {
     if (ctrl.signal.aborted) throw new Error(`download stalled: nothing received for ${Math.round(stallMs / 1e3)} s`);
     throw err2;
@@ -39533,10 +39874,10 @@ async function installLean(opts = {}) {
     const gb = (n) => (n / 1024 ** 3).toFixed(1);
     return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
   }
-  const tmp = (0, import_node_path51.join)(home, ".tmp");
-  (0, import_node_fs66.rmSync)(tmp, { recursive: true, force: true });
-  (0, import_node_fs66.mkdirSync)(tmp, { recursive: true });
-  const zip = (0, import_node_path51.join)(tmp, asset);
+  const tmp = (0, import_node_path53.join)(home, ".tmp");
+  (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs67.mkdirSync)(tmp, { recursive: true });
+  const zip = (0, import_node_path53.join)(tmp, asset);
   say(`downloading ${url}`);
   let lastPct = -1;
   try {
@@ -39549,41 +39890,41 @@ async function installLean(opts = {}) {
       }
     });
   } catch (err2) {
-    (0, import_node_fs66.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: err2.message };
   }
   say("verifying checksum");
   const verified = await verifyDownload(zip, asset);
   if (!verified.ok) {
-    (0, import_node_fs66.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: verified.error };
   }
   say("unpacking (this takes a minute)");
-  const unpack = (0, import_node_path51.join)(tmp, "unpack");
-  (0, import_node_fs66.mkdirSync)(unpack);
+  const unpack = (0, import_node_path53.join)(tmp, "unpack");
+  (0, import_node_fs67.mkdirSync)(unpack);
   const unpacked = unzip(zip, unpack);
   if (!unpacked.ok) {
-    (0, import_node_fs66.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: `unpack failed: ${unpacked.error}` };
   }
-  const entries = (0, import_node_fs66.readdirSync)(unpack);
-  const top = entries.length === 1 && (0, import_node_fs66.statSync)((0, import_node_path51.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path51.join)(unpack, entries[0]) : unpack;
-  if (!(0, import_node_fs66.existsSync)((0, import_node_path51.join)(top, "bin", lakeBinary()))) {
-    (0, import_node_fs66.rmSync)(tmp, { recursive: true, force: true });
+  const entries = (0, import_node_fs67.readdirSync)(unpack);
+  const top = entries.length === 1 && (0, import_node_fs67.statSync)((0, import_node_path53.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path53.join)(unpack, entries[0]) : unpack;
+  if (!(0, import_node_fs67.existsSync)((0, import_node_path53.join)(top, "bin", lakeBinary()))) {
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: "the archive did not contain bin/lake" };
   }
-  (0, import_node_fs66.rmSync)(dir, { recursive: true, force: true });
-  (0, import_node_fs66.mkdirSync)(home, { recursive: true });
-  (0, import_node_fs66.renameSync)(top, dir);
-  (0, import_node_fs66.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs67.rmSync)(dir, { recursive: true, force: true });
+  (0, import_node_fs67.mkdirSync)(home, { recursive: true });
+  (0, import_node_fs67.renameSync)(top, dir);
+  (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
   return { ok: true, dir };
 }
 
 // src/lib/remote-config.ts
-var import_node_fs67 = require("node:fs");
+var import_node_fs68 = require("node:fs");
 var import_promises19 = require("node:fs/promises");
-var import_node_path52 = require("node:path");
-var import_yaml5 = __toESM2(require_dist());
+var import_node_path54 = require("node:path");
+var import_yaml6 = __toESM2(require_dist());
 var IGNORE_RIDER = "verityignore";
 async function fetchRemoteSetup(opts) {
   const standard = await apiRequest({
@@ -39623,11 +39964,11 @@ async function adoptRemoteSetup(found, opts) {
   const content = { ...found.standard.content };
   const rider = typeof content[IGNORE_RIDER] === "string" ? content[IGNORE_RIDER] : null;
   delete content[IGNORE_RIDER];
-  await writeOut(STANDARD_FILE, (0, import_yaml5.stringify)(content));
+  await writeOut(STANDARD_FILE, (0, import_yaml6.stringify)(content));
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs67.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs68.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -39658,9 +39999,9 @@ async function adoptRemoteSetup(found, opts) {
   written.push(VERITY_MD_FILE);
   return { written, notes };
 }
-async function writeOut(relative6, body2) {
-  const target = projectPath(relative6);
-  await (0, import_promises19.mkdir)((0, import_node_path52.dirname)(target), { recursive: true });
+async function writeOut(relative7, body2) {
+  const target = projectPath(relative7);
+  await (0, import_promises19.mkdir)((0, import_node_path54.dirname)(target), { recursive: true });
   await (0, import_promises19.writeFile)(target, body2);
 }
 function describeRemote(found) {
@@ -39777,15 +40118,15 @@ async function runOptionalAuth(resolution, opts = {}) {
 }
 function resolveDataDir2() {
   const candidates2 = [
-    (0, import_node_path53.join)(__dirname, "..", "data"),
+    (0, import_node_path55.join)(__dirname, "..", "data"),
     // installed: node_modules/@codacy/verity-cli/data
-    (0, import_node_path53.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path55.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
-    (0, import_node_path53.join)(process.cwd(), "cli", "data")
+    (0, import_node_path55.join)(process.cwd(), "cli", "data")
     // local dev: running from repo root
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs68.existsSync)((0, import_node_path53.join)(candidate, "skills"))) {
+    if ((0, import_node_fs69.existsSync)((0, import_node_path55.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -39801,9 +40142,9 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out2 = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs68.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs69.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk2((0, import_node_path53.join)(d, e.name), rel);
+        if (e.isDirectory()) walk2((0, import_node_path55.join)(d, e.name), rel);
         else if (e.isFile()) out2.push(rel);
       }
     };
@@ -39814,8 +40155,8 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      const a = await (0, import_promises20.readFile)((0, import_node_path53.join)(src, rel), "utf-8");
-      const b = await (0, import_promises20.readFile)((0, import_node_path53.join)(dest, rel), "utf-8");
+      const a = await (0, import_promises20.readFile)((0, import_node_path55.join)(src, rel), "utf-8");
+      const b = await (0, import_promises20.readFile)((0, import_node_path55.join)(dest, rel), "utf-8");
       if (a !== b) return false;
     }
     return true;
@@ -39911,7 +40252,7 @@ function parseTelemetryAnswer(raw) {
   return null;
 }
 function insideClaudeCode() {
-  return !!process.env.CLAUDECODE || !!process.env.CLAUDE_SESSION_ID;
+  return !!process.env.CLAUDECODE || !!envSessionId();
 }
 function resumeDeferredPending(previous) {
   return previous?.telemetry === "deferred";
@@ -40018,13 +40359,13 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs68.existsSync)(configPath) || !(0, import_node_fs68.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs69.existsSync)(configPath) || !(0, import_node_fs69.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
   printWarn("  running silently with nothing enabled. Re-deriving it from your Standard\u2026");
   try {
-    const content = (0, import_yaml6.parse)(await (0, import_promises20.readFile)(standardPath, "utf-8"));
+    const content = (0, import_yaml7.parse)(await (0, import_promises20.readFile)(standardPath, "utf-8"));
     const derived = await deriveConfigForStandard(content);
     for (const path of derived.written) printInfo(`  ${path} \u2713 (re-derived)`);
     for (const note of derived.notes) printWarn(`  ${note}`);
@@ -40115,17 +40456,17 @@ async function handoffToSetup(enabled, claudeInstalled) {
 async function installSkills(force, step) {
   step("Installing skills");
   const dataDir = resolveDataDir2();
-  const skillsSource = (0, import_node_path53.join)(dataDir, "skills");
+  const skillsSource = (0, import_node_path55.join)(dataDir, "skills");
   const skillsDest = ".claude/skills";
   let skillsInstalled = 0;
   for (const skill of SKILLS) {
-    const src = (0, import_node_path53.join)(skillsSource, skill);
-    const dest = (0, import_node_path53.join)(skillsDest, skill);
-    if (!(0, import_node_fs68.existsSync)(src)) {
+    const src = (0, import_node_path55.join)(skillsSource, skill);
+    const dest = (0, import_node_path55.join)(skillsDest, skill);
+    if (!(0, import_node_fs69.existsSync)(src)) {
       printWarn(`  Skill data not found: ${skill}`);
       continue;
     }
-    if ((0, import_node_fs68.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+    if ((0, import_node_fs69.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
       skillsInstalled++;
       continue;
     }
@@ -40274,7 +40615,7 @@ async function offerFormalVerification(defaultsOnly, pluginMode) {
   if (!toolchain) {
     const dir = pinnedVersionDir();
     const home = (0, import_node_os11.homedir)();
-    const shown = dir.startsWith(home + import_node_path53.sep) ? `~${dir.slice(home.length)}` : dir;
+    const shown = dir.startsWith(home + import_node_path55.sep) ? `~${dir.slice(home.length)}` : dir;
     console.log("");
     console.log(`    "yes" installs Lean 4 (${LEAN_DOWNLOAD_SIZE}) into ${shown}`);
   }
@@ -40333,7 +40674,7 @@ function registerInitCommand(program2) {
     const staleMarker = clearStalePluginMarker();
     const pluginMode = opts.plugin === false ? false : opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs68.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs69.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -40436,7 +40777,7 @@ function registerInitCommand(program2) {
       untrackMemory: opts.untrackMemory === true,
       untrackState: opts.untrackState === true
     });
-    const globalVerityDir = (0, import_node_path53.join)(process.env.HOME ?? "", ".verity");
+    const globalVerityDir = (0, import_node_path55.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises20.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
@@ -40511,7 +40852,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs68.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs69.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -40541,7 +40882,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.34.1-experimental.c910405" : "dev"
+          cli_version: true ? "0.34.2-experimental.2cad220" : "dev"
         }
       });
     } catch (err2) {
@@ -40591,8 +40932,8 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs69 = require("node:fs");
-var import_node_path54 = require("node:path");
+var import_node_fs70 = require("node:fs");
+var import_node_path56 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
     const dryRun = opts.dryRun ?? false;
@@ -40601,11 +40942,11 @@ function registerUninstallCommand(program2) {
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
     for (const name2 of PROJECT_SKILL_NAMES) {
-      const dir = (0, import_node_path54.join)(skillsRoot, name2);
-      if ((0, import_node_fs69.existsSync)(dir)) {
+      const dir = (0, import_node_path56.join)(skillsRoot, name2);
+      if ((0, import_node_fs70.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name2}/`,
-          apply: () => (0, import_node_fs69.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs70.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -40619,24 +40960,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs69.existsSync)(verityDir)) {
+    if ((0, import_node_fs70.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs69.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs70.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs69.existsSync)(verityMd)) {
+      if ((0, import_node_fs70.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs69.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs70.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs69.existsSync)(path) && (0, import_node_fs69.statSync)(path).isDirectory() && (0, import_node_fs69.readdirSync)(path).length === 0) {
-        (0, import_node_fs69.rmdirSync)(path);
+      if ((0, import_node_fs70.existsSync)(path) && (0, import_node_fs70.statSync)(path).isDirectory() && (0, import_node_fs70.readdirSync)(path).length === 0) {
+        (0, import_node_fs70.rmdirSync)(path);
       }
     };
     actions.push({
@@ -40647,11 +40988,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path54.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs69.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path56.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs70.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs69.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs70.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -40678,9 +41019,26 @@ function registerUninstallCommand(program2) {
 
 // src/commands/task.ts
 function memoryPath() {
-  const sid = process.env.CLAUDE_SESSION_ID;
+  const sid = envSessionId();
   return sid ? `/memory?session_id=${encodeURIComponent(sid)}` : "/memory";
 }
+var TASK_STATUSES = ["active", "closed", "merged"];
+var TASK_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isTaskId(value) {
+  return typeof value === "string" && TASK_ID.test(value);
+}
+function taskListPath(status) {
+  if (status === void 0) return "/tasks";
+  if (!TASK_STATUSES.includes(status)) return null;
+  return `/tasks?status=${encodeURIComponent(status)}`;
+}
+function taskActionPath(taskId, action) {
+  return isTaskId(taskId) ? `/tasks/${encodeURIComponent(taskId)}/${action}` : null;
+}
+function refuse(message) {
+  printError(message);
+  process.exit(1);
+}
 function timeAgo2(isoDate) {
   const ms = Date.now() - new Date(isoDate).getTime();
   const mins = Math.floor(ms / 6e4);
@@ -40708,10 +41066,11 @@ function registerTaskCommands(program2) {
   task.command("list").description("List tasks").option("--status <status>", "Filter by status (active, closed, merged)").action(async (opts) => {
     const globals = program2.opts();
     const { token, serviceUrl } = await getAuth(globals);
-    const statusParam = opts.status ? `?status=${opts.status}` : "";
+    const listPath = taskListPath(opts.status);
+    if (!listPath) refuse(`Unknown status ${JSON.stringify(String(opts.status).slice(0, 40))} \u2014 use one of: ${TASK_STATUSES.join(", ")}`);
     const result = await apiRequest({
       method: "GET",
-      path: `/tasks${statusParam}`,
+      path: listPath,
       serviceUrl,
       token,
       verbose: globals.verbose,
@@ -40760,9 +41119,11 @@ function registerTaskCommands(program2) {
       }
       taskId = ct.id;
     }
+    const closePath = taskActionPath(taskId, "close");
+    if (!closePath) refuse(`Not a task id (expected a UUID): ${JSON.stringify(String(taskId).slice(0, 80))}`);
     const result = await apiRequest({
       method: "POST",
-      path: `/tasks/${taskId}/close`,
+      path: closePath,
       serviceUrl,
       token,
       verbose: globals.verbose,
@@ -40809,9 +41170,11 @@ function registerTaskCommands(program2) {
       }
       taskId = ct.id;
     }
+    const renamePath = taskActionPath(taskId, "rename");
+    if (!renamePath) refuse(`Not a task id (expected a UUID): ${JSON.stringify(String(taskId).slice(0, 80))}`);
     const result = await apiRequest({
       method: "POST",
-      path: `/tasks/${taskId}/rename`,
+      path: renamePath,
       serviceUrl,
       token,
       body: { label: label2.slice(0, 120) },
@@ -40826,6 +41189,9 @@ function registerTaskCommands(program2) {
   });
   task.command("merge <source> <target>").description("Merge source task into target task").action(async (source2, target) => {
     const globals = program2.opts();
+    if (!isTaskId(source2) || !isTaskId(target)) {
+      refuse("task merge takes two task ids (UUIDs): `verity task merge <source> <target>`");
+    }
     const { token, serviceUrl } = await getAuth(globals);
     const result = await apiRequest({
       method: "POST",
@@ -40845,8 +41211,8 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs70 = require("node:fs");
-var import_node_path55 = require("node:path");
+var import_node_fs71 = require("node:fs");
+var import_node_path57 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -40855,78 +41221,95 @@ function registerResetCommand(program2) {
         const tokenResult = await resolveToken(globals.token);
         const urlResult = await resolveServiceUrl(globals.serviceUrl);
         if (tokenResult.ok && urlResult.ok) {
+          const sessionId = envSessionId();
           const mem = await apiRequest({
             method: "GET",
-            path: process.env.CLAUDE_SESSION_ID ? `/memory?session_id=${encodeURIComponent(process.env.CLAUDE_SESSION_ID)}` : "/memory",
+            path: sessionId ? `/memory?session_id=${encodeURIComponent(sessionId)}` : "/memory",
             serviceUrl: urlResult.data,
             token: tokenResult.data.token,
             timeout: 1e4,
             cmd: "reset_lookup"
           });
           const ct = mem.ok ? mem.data.current_task : null;
-          if (ct?.id) {
+          const closePath = ct?.id ? taskActionPath(ct.id, "close") : null;
+          if (ct?.id && !closePath) {
+            printError("The current task in the service response has a malformed id \u2014 not closing it.");
+          }
+          if (closePath) {
             const closeResult = await apiRequest({
               method: "POST",
-              path: `/tasks/${ct.id}/close`,
+              path: closePath,
               serviceUrl: urlResult.data,
               token: tokenResult.data.token,
               timeout: 1e4,
               cmd: "reset_close"
             });
             if (closeResult.ok) {
-              printInfo(`Closed task: "${ct.label}"`);
+              printInfo(`Closed task: "${terminalText(ct?.label, 200) || "(unnamed)"}"`);
             }
           }
         }
       } catch {
       }
     }
-    const cacheDir = projectPath(CACHE_DIR);
-    let purged = 0;
-    if ((0, import_node_fs70.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs70.readdirSync)(cacheDir)) {
-        if (entry.startsWith("pending-")) {
-          try {
-            (0, import_node_fs70.unlinkSync)((0, import_node_path55.join)(cacheDir, entry));
-            purged++;
-          } catch {
-          }
-        }
-      }
-    }
+    const purged = purgeVerityDir((0, import_node_path57.basename)(CACHE_DIR), (name2) => name2.startsWith("pending-"));
+    if (purged === null) printError(`Did not purge ${CACHE_DIR}: it is not a directory inside ${VERITY_DIR}.`);
+    const stateDir2 = projectPath(VERITY_DIR);
     const filesToClear = [
-      projectPath(INTENT_FILE),
-      projectPath(HASH_FILE),
-      projectPath(BASELINE_SHA_FILE),
-      projectPath(`${VERITY_DIR}/.iteration-count`),
-      projectPath(`${VERITY_DIR}/.last-analysis`)
+      (0, import_node_path57.basename)(INTENT_FILE),
+      (0, import_node_path57.basename)(HASH_FILE),
+      (0, import_node_path57.basename)(BASELINE_SHA_FILE),
+      ".iteration-count",
+      ".last-analysis"
     ];
-    for (const file of filesToClear) {
-      if ((0, import_node_fs70.existsSync)(file)) {
-        try {
-          (0, import_node_fs70.writeFileSync)(file, "");
-        } catch {
-        }
+    for (const name2 of filesToClear) {
+      if (lstatOrNull((0, import_node_path57.join)(stateDir2, name2)) && !replaceInRoot(stateDir2, name2, "")) {
+        printError(`Did not clear ${VERITY_DIR}/${name2}: it is not a regular file inside ${VERITY_DIR}.`);
       }
     }
     if (opts.all) {
-      const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs70.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs70.readdirSync)(logsDir)) {
-          try {
-            (0, import_node_fs70.unlinkSync)((0, import_node_path55.join)(logsDir, entry));
-          } catch {
-          }
-        }
-      }
-      printInfo("Cleared diagnostic logs.");
+      const logs = purgeVerityDir(".logs", () => true);
+      if (logs === null) printError(`Did not clear ${VERITY_DIR}/.logs: it is not a directory inside ${VERITY_DIR}.`);
+      else printInfo("Cleared diagnostic logs.");
     }
-    printInfo(`Reset complete. Purged ${purged} cached request${purged !== 1 ? "s" : ""}.${opts.keepTask ? "" : " Next run starts a new task."}`);
+    const count = purged ?? 0;
+    printInfo(`Reset complete. Purged ${count} cached request${count !== 1 ? "s" : ""}.${opts.keepTask ? "" : " Next run starts a new task."}`);
   });
 }
+function lstatOrNull(path) {
+  try {
+    return (0, import_node_fs71.lstatSync)(path);
+  } catch {
+    return null;
+  }
+}
+function purgeVerityDir(child, select) {
+  const verityDir = projectPath(VERITY_DIR);
+  const dir = (0, import_node_path57.join)(verityDir, child);
+  const parent = lstatOrNull(verityDir);
+  const st = lstatOrNull(dir);
+  if (!st) return 0;
+  if (!parent || parent.isSymbolicLink() || !parent.isDirectory()) return null;
+  if (st.isSymbolicLink() || !st.isDirectory()) return null;
+  try {
+    if ((0, import_node_fs71.realpathSync)(dir) !== (0, import_node_path57.join)((0, import_node_fs71.realpathSync)(verityDir), child)) return null;
+  } catch {
+    return null;
+  }
+  let removed = 0;
+  for (const entry of (0, import_node_fs71.readdirSync)(dir, { withFileTypes: true })) {
+    if (entry.isDirectory() || !select(entry.name)) continue;
+    try {
+      (0, import_node_fs71.unlinkSync)((0, import_node_path57.join)(dir, entry.name));
+      removed++;
+    } catch {
+    }
+  }
+  return removed;
+}
 
 // src/commands/reflect.ts
-var import_node_fs71 = require("node:fs");
+var import_node_fs72 = require("node:fs");
 
 // src/lib/reflection-globs.ts
 var MAX_GLOBS = 6;
@@ -40940,11 +41323,11 @@ function resolve7(token, treePaths) {
   const matches = treePaths.filter((p) => p.endsWith(suffix));
   return matches.length === 1 ? matches[0] : null;
 }
-function deriveFileGlobs(text, treePaths) {
-  if (!text || treePaths.length === 0) return [];
+function deriveFileGlobs(text2, treePaths) {
+  if (!text2 || treePaths.length === 0) return [];
   const out2 = [];
   const seen = /* @__PURE__ */ new Set();
-  for (const raw of text.match(PATH_TOKEN) ?? []) {
+  for (const raw of text2.match(PATH_TOKEN) ?? []) {
     const token = clean(raw);
     if (!token) continue;
     const path = resolve7(token, treePaths);
@@ -40964,7 +41347,7 @@ async function writeNodeToDisk(args2) {
       { treePaths: listTrackedFiles(), recordBaseline: false }
     );
     if (written === 0) return false;
-    return (0, import_node_fs71.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
+    return (0, import_node_fs72.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
   } catch {
     return false;
   }
@@ -40995,7 +41378,7 @@ function registerReflectCommand(program2) {
     let taskResolution = "flag";
     let inheritedGlobs = [];
     if (!taskId) {
-      const sessionId = process.env.CLAUDE_SESSION_ID ?? "";
+      const sessionId = envSessionId() ?? "";
       const memPath = sessionId ? `/memory?session_id=${encodeURIComponent(sessionId)}` : "/memory";
       const mem = await apiRequest({
         method: "GET",
@@ -41401,9 +41784,9 @@ function registerRunCommand(program2) {
 }
 
 // src/commands/telemetry.ts
-var import_node_fs72 = require("node:fs");
+var import_node_fs73 = require("node:fs");
 async function recordTelemetryChoice(choice) {
-  if (!(0, import_node_fs72.existsSync)(projectPath(SETUP_STATE_FILE))) return;
+  if (!(0, import_node_fs73.existsSync)(projectPath(SETUP_STATE_FILE))) return;
   try {
     if ((await readSetupState())?.telemetry === choice) return;
     await writeSetupState({ telemetry: choice });
@@ -41480,8 +41863,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/commands/prove.ts
-var import_node_fs73 = require("node:fs");
-var import_node_path56 = require("node:path");
+var import_node_fs74 = require("node:fs");
+var import_node_path58 = require("node:path");
 
 // src/lib/prove/hint-pool.ts
 var STOP2 = /* @__PURE__ */ new Set([
@@ -41623,7 +42006,7 @@ function registerProveCommand(program2) {
       process.exit(2);
     }
     const limit = Math.max(1, Math.min(50, Number(opts.limit) || 10));
-    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path56.relative)(root, (0, import_node_path56.resolve)(p)) || ".") });
+    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path58.relative)(root, (0, import_node_path58.resolve)(p)) || ".") });
     if (opts.hint && paths.length === 0) {
       const hit = hintMatches(root, opts.hint);
       if (hit.files.length > 0) {
@@ -41677,7 +42060,7 @@ function registerProveCommand(program2) {
   });
   prove.command("check [model]").description("Elaborate a model (or every model) with the local Lean toolchain and report each property").option("--timeout <ms>", "Per-model timeout in ms", "120000").option("--json", "Machine-readable output").action((model, opts) => {
     const root = repoRoot();
-    if (!(0, import_node_fs73.existsSync)((0, import_node_path56.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs74.existsSync)((0, import_node_path58.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41701,7 +42084,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
     const reports = [];
     for (const f of files) {
       const report = checkModel(tc, root, f, { timeoutMs: Math.max(1e3, Number(opts.timeout) || 12e4) });
-      report.file = (0, import_node_path56.relative)(root, f);
+      report.file = (0, import_node_path58.relative)(root, f);
       reports.push(report);
       try {
         writeResult(root, report);
@@ -41739,7 +42122,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
       printError("Not logged in \u2014 replays run on the Verity service. Run `verity login` first.");
       process.exit(2);
     }
-    if (!(0, import_node_fs73.existsSync)((0, import_node_path56.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs74.existsSync)((0, import_node_path58.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41770,7 +42153,7 @@ ${report.error ?? ""}`);
       printInfo(opts.property ? `${model} ${opts.property} has no counterexample to replay` : `${model} has no counterexample to replay`);
       return;
     }
-    const modelSource = readRegularFileInRoot(root, (0, import_node_path56.relative)(root, file), 512 * 1024);
+    const modelSource = readRegularFileInRoot(root, (0, import_node_path58.relative)(root, file), 512 * 1024);
     if (!opts.json) printInfo(`replaying ${targets.length} counterexample(s) of ${model} in network-less containers (${Math.min(targets.length, REPLAY_CONCURRENCY)} at a time)\u2026`);
     const outcomes = await mapPool(targets, REPLAY_CONCURRENCY, async (p) => {
       const brief = buildReplayBrief(root, report, p, modelSource.ok ? modelSource.content : "");
@@ -41790,7 +42173,7 @@ ${report.error ?? ""}`);
   });
   prove.command("auto [files...]").description("The formal phase the pre-push guard runs: select one risky symbol among changed files, generate a model, check it, replay counterexamples (default files: the commits ahead of upstream)").option("--deadline <ms>", "Budget for the whole phase", "170000").option("--json", "Machine-readable output").action(async (paths, opts) => {
     const root = repoRoot();
-    let files = paths.map((p) => (0, import_node_path56.relative)(root, (0, import_node_path56.resolve)(p)));
+    let files = paths.map((p) => (0, import_node_path58.relative)(root, (0, import_node_path58.resolve)(p)));
     if (files.length === 0) {
       const ahead = runGitSync(root, ["diff", "--name-only", "@{upstream}...HEAD"]);
       const fallback = ahead.ok ? ahead : runGitSync(root, ["diff", "--name-only", "HEAD~1..HEAD"]);
@@ -41864,7 +42247,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
     let revise;
     if (opts.revise) {
       const existing = resolveModelFile(root, opts.revise);
-      const src = existing ? readRegularFileInRoot(root, (0, import_node_path56.relative)(root, existing), 64 * 1024) : null;
+      const src = existing ? readRegularFileInRoot(root, (0, import_node_path58.relative)(root, existing), 64 * 1024) : null;
       if (!src || !src.ok || !opts.note) {
         printError("--revise needs an existing model under Models/ and --note - with what the replay showed on stdin");
         process.exit(2);
@@ -41904,8 +42287,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("waive <file>").description("Dismiss the remembered formal finding(s) on a file for its current bytes \u2014 the accepted-risk path for a formal block").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action((file, opts) => {
     const root = repoRoot();
-    const rel0 = (0, import_node_path56.relative)(root, (0, import_node_path56.isAbsolute)(file) ? file : (0, import_node_path56.join)(root, file)).replace(/\\/g, "/");
-    const rel = rel0.startsWith("..") || (0, import_node_path56.isAbsolute)(rel0) ? null : rel0;
+    const rel0 = (0, import_node_path58.relative)(root, (0, import_node_path58.isAbsolute)(file) ? file : (0, import_node_path58.join)(root, file)).replace(/\\/g, "/");
+    const rel = rel0.startsWith("..") || (0, import_node_path58.isAbsolute)(rel0) ? null : rel0;
     if (!rel) {
       printError(`${file} is not inside this repository`);
       process.exit(2);
@@ -41921,8 +42304,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("hash <file>").description("Print the sha256 of a file, for a model header (Verity.model \u2026 sha256). Path is REPO-relative, as in the header").action((file) => {
     const root = repoRoot();
-    const rel = (0, import_node_path56.relative)(root, (0, import_node_path56.isAbsolute)(file) ? file : (0, import_node_path56.join)(root, file));
-    const digest = rel.startsWith("..") || (0, import_node_path56.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
+    const rel = (0, import_node_path58.relative)(root, (0, import_node_path58.isAbsolute)(file) ? file : (0, import_node_path58.join)(root, file));
+    const digest = rel.startsWith("..") || (0, import_node_path58.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
     if (!digest) {
       printError(`Cannot hash ${file}: it must be a regular file inside this repository (not a symlink)`);
       process.exit(2);
@@ -41956,10 +42339,10 @@ function refreshScaffold(root) {
 }
 
 // src/commands/lean.ts
-var import_node_fs74 = require("node:fs");
+var import_node_fs75 = require("node:fs");
 var import_node_child_process20 = require("node:child_process");
 var import_node_os12 = require("node:os");
-var import_node_path57 = require("node:path");
+var import_node_path59 = require("node:path");
 function registerLeanCommand(program2) {
   const lean = program2.command("lean").description("The Lean 4 toolchain formal verification needs (managed download, pinned by this CLI)");
   lean.command("status").option("--json", "Machine-readable output").description("Which toolchain would run, and whether it matches the pinned version").action((opts) => {
@@ -41976,7 +42359,7 @@ function registerLeanCommand(program2) {
     const managed = pinnedVersionDir();
     const matches = version ? version.includes(pin) : false;
     if (opts.json) {
-      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs74.existsSync)((0, import_node_path57.join)(managed, "bin")), asset: leanAssetName() });
+      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs75.existsSync)((0, import_node_path59.join)(managed, "bin")), asset: leanAssetName() });
       return;
     }
     printInfo(`pinned: ${LEAN_TOOLCHAIN}`);
@@ -41994,7 +42377,7 @@ function registerLeanCommand(program2) {
       process.exit(2);
     }
     const dir = pinnedVersionDir();
-    if ((0, import_node_fs74.existsSync)((0, import_node_path57.join)(dir, "bin", "lake")) && !opts.force) {
+    if ((0, import_node_fs75.existsSync)((0, import_node_path59.join)(dir, "bin", "lake")) && !opts.force) {
       printInfo(`already installed at ${dir}`);
       return;
     }
@@ -42030,18 +42413,18 @@ function registerLeanCommand(program2) {
   });
   lean.command("remove").description("Delete the Verity-managed toolchain for the pinned version").action(() => {
     const dir = pinnedVersionDir();
-    if (!(0, import_node_fs74.existsSync)(dir)) {
+    if (!(0, import_node_fs75.existsSync)(dir)) {
       printInfo("nothing to remove");
       return;
     }
-    (0, import_node_fs74.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs75.rmSync)(dir, { recursive: true, force: true });
     printInfo(`removed ${dir}`);
   });
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.1-experimental.c910405").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.1-experimental.c910405");
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.2-experimental.2cad220").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.2-experimental.2cad220");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();