@codacy/verity-cli 0.34.1 → 0.34.2-experimental.312358d

package/bin/verity.js

@@ -6975,10 +6975,10 @@ var require_resolve_block_map = __commonJS2({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start: start2, key, sep: sep6, value } = collItem;
+        const { start: start2, key, sep: sep7, value } = collItem;
         const keyProps = resolveProps.resolveProps(start2, {
           indicator: "explicit-key-ind",
-          next: key ?? sep6?.[0],
+          next: key ?? sep7?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -6992,7 +6992,7 @@ var require_resolve_block_map = __commonJS2({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep6) {
+          if (!keyProps.anchor && !keyProps.tag && !sep7) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -7016,7 +7016,7 @@ var require_resolve_block_map = __commonJS2({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep6 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep7 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -7032,7 +7032,7 @@ var require_resolve_block_map = __commonJS2({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep6, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep7, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -7123,7 +7123,7 @@ var require_resolve_end = __commonJS2({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep6 = "";
+        let sep7 = "";
         for (const token of end) {
           const { source: source2, type } = token;
           switch (type) {
@@ -7137,13 +7137,13 @@ var require_resolve_end = __commonJS2({
               if (!comment)
                 comment = cb;
               else
-                comment += sep6 + cb;
-              sep6 = "";
+                comment += sep7 + cb;
+              sep7 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep6 += source2;
+                sep7 += source2;
               hasSpace = true;
               break;
             default:
@@ -7186,18 +7186,18 @@ var require_resolve_flow_collection = __commonJS2({
       let offset = fc.offset + fc.start.source.length;
       for (let i2 = 0; i2 < fc.items.length; ++i2) {
         const collItem = fc.items[i2];
-        const { start: start2, key, sep: sep6, value } = collItem;
+        const { start: start2, key, sep: sep7, value } = collItem;
         const props = resolveProps.resolveProps(start2, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep6?.[0],
+          next: key ?? sep7?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep6 && !value) {
+          if (!props.anchor && !props.tag && !sep7 && !value) {
             if (i2 === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i2 < fc.items.length - 1)
@@ -7251,8 +7251,8 @@ var require_resolve_flow_collection = __commonJS2({
             }
           }
         }
-        if (!isMap && !sep6 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep6, null, props, onError);
+        if (!isMap && !sep7 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep7, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -7264,7 +7264,7 @@ var require_resolve_flow_collection = __commonJS2({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep6 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep7 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -7275,8 +7275,8 @@ var require_resolve_flow_collection = __commonJS2({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep6)
-                for (const st of sep6) {
+              if (sep7)
+                for (const st of sep7) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -7293,7 +7293,7 @@ var require_resolve_flow_collection = __commonJS2({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep6, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep7, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -7473,7 +7473,7 @@ var require_resolve_block_scalar = __commonJS2({
           chompStart = i2 + 1;
       }
       let value = "";
-      let sep6 = "";
+      let sep7 = "";
       let prevMoreIndented = false;
       for (let i2 = 0; i2 < contentStart; ++i2)
         value += lines[i2][0].slice(trimIndent) + "\n";
@@ -7490,24 +7490,24 @@ var require_resolve_block_scalar = __commonJS2({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep6 + indent.slice(trimIndent) + content;
-          sep6 = "\n";
+          value += sep7 + indent.slice(trimIndent) + content;
+          sep7 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep6 === " ")
-            sep6 = "\n";
-          else if (!prevMoreIndented && sep6 === "\n")
-            sep6 = "\n\n";
-          value += sep6 + indent.slice(trimIndent) + content;
-          sep6 = "\n";
+          if (sep7 === " ")
+            sep7 = "\n";
+          else if (!prevMoreIndented && sep7 === "\n")
+            sep7 = "\n\n";
+          value += sep7 + indent.slice(trimIndent) + content;
+          sep7 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep6 === "\n")
+          if (sep7 === "\n")
             value += "\n";
           else
-            sep6 = "\n";
+            sep7 = "\n";
         } else {
-          value += sep6 + content;
-          sep6 = " ";
+          value += sep7 + content;
+          sep7 = " ";
           prevMoreIndented = false;
         }
       }
@@ -7689,25 +7689,25 @@ var require_resolve_flow_scalar = __commonJS2({
       if (!match)
         return source2;
       let res = match[1];
-      let sep6 = " ";
+      let sep7 = " ";
       let pos = first.lastIndex;
       line2.lastIndex = pos;
       while (match = line2.exec(source2)) {
         if (match[1] === "") {
-          if (sep6 === "\n")
-            res += sep6;
+          if (sep7 === "\n")
+            res += sep7;
           else
-            sep6 = "\n";
+            sep7 = "\n";
         } else {
-          res += sep6 + match[1];
-          sep6 = " ";
+          res += sep7 + match[1];
+          sep7 = " ";
         }
         pos = line2.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source2);
-      return res + sep6 + (match?.[1] ?? "");
+      return res + sep7 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source2, onError) {
       let res = "";
@@ -8514,14 +8514,14 @@ var require_cst_stringify = __commonJS2({
         }
       }
     }
-    function stringifyItem({ start: start2, key, sep: sep6, value }) {
+    function stringifyItem({ start: start2, key, sep: sep7, value }) {
       let res = "";
       for (const st of start2)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep6)
-        for (const st of sep6)
+      if (sep7)
+        for (const st of sep7)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -9671,18 +9671,18 @@ var require_parser = __commonJS2({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start2 = getFirstKeyStartProps(prev);
-          let sep6;
+          let sep7;
           if (scalar.end) {
-            sep6 = scalar.end;
-            sep6.push(this.sourceToken);
+            sep7 = scalar.end;
+            sep7.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep6 = [this.sourceToken];
+            sep7 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start: start2, key: scalar, sep: sep6 }]
+            items: [{ start: start2, key: scalar, sep: sep7 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -9835,15 +9835,15 @@ var require_parser = __commonJS2({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start3 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep6 = it.sep;
-                  sep6.push(this.sourceToken);
+                  const sep7 = it.sep;
+                  sep7.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start3, key, sep: sep6 }]
+                    items: [{ start: start3, key, sep: sep7 }]
                   });
                 } else if (start2.length > 0) {
                   it.sep = it.sep.concat(start2, this.sourceToken);
@@ -10037,13 +10037,13 @@ var require_parser = __commonJS2({
             const prev = getPrevProps(parent);
             const start2 = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep6 = fc.end.splice(1, fc.end.length);
-            sep6.push(this.sourceToken);
+            const sep7 = fc.end.splice(1, fc.end.length);
+            sep7.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start: start2, key: fc, sep: sep6 }]
+              items: [{ start: start2, key: fc, sep: sep7 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -13782,9 +13782,9 @@ ${JSON.stringify(symbolNames, null, 2)}`);
       PatternStructure: 5
     };
     var QueryError = class _QueryError extends Error {
-      constructor(kind, info2, index, length) {
-        super(_QueryError.formatMessage(kind, info2));
-        this.kind = kind;
+      constructor(kind2, info2, index, length) {
+        super(_QueryError.formatMessage(kind2, info2));
+        this.kind = kind2;
         this.info = info2;
         this.index = index;
         this.length = length;
@@ -13798,8 +13798,8 @@ ${JSON.stringify(symbolNames, null, 2)}`);
         __name(this, "QueryError");
       }
       /** Formats an error message based on the error kind and info */
-      static formatMessage(kind, info2) {
-        switch (kind) {
+      static formatMessage(kind2, info2) {
+        switch (kind2) {
           case QueryErrorKind.NodeName:
             return `Bad node name '${info2.word}'`;
           case QueryErrorKind.FieldName:
@@ -14726,7 +14726,7 @@ var SECURITY_PATTERNS = [
   /Dockerfile/
 ];
 var PROD_SERVICE_URL = "https://ofcamwrjwrkazqvdchko.supabase.co/functions/v1";
-var DEFAULT_SERVICE_URL = "".length > 0 ? "" : PROD_SERVICE_URL;
+var DEFAULT_SERVICE_URL = "https://wukeddyzpijoegyajtnc.supabase.co/functions/v1".length > 0 ? "https://wukeddyzpijoegyajtnc.supabase.co/functions/v1" : PROD_SERVICE_URL;
 var GITHUB_CLIENT_ID = "Iv23li88HxAi3ZrbYzWh";
 var GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
 var GITHUB_ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
@@ -15172,8 +15172,8 @@ function filterReviewable(files) {
     const ext = (0, import_node_path4.extname)(f).slice(1);
     if (ANALYZABLE_EXTENSIONS.has(ext)) return false;
     if (REVIEWABLE_EXTENSIONS.has(ext)) return true;
-    const basename9 = f.split("/").pop() ?? "";
-    if (REVIEWABLE_FILENAMES.has(basename9)) return true;
+    const basename11 = f.split("/").pop() ?? "";
+    if (REVIEWABLE_FILENAMES.has(basename11)) return true;
     if (REVIEWABLE_PATH_PATTERNS.some((p) => p.test(f))) return true;
     return false;
   });
@@ -16278,8 +16278,8 @@ async function reportLoginOutcome(out2, opts = {}) {
       printWarn("  repository will report that account. Remove its line from ~/.verity/credentials");
       printWarn("  only if you want this repository on the login you just completed.");
     } else {
-      const kind = rec.userId != null ? "superseded per-repository" : "anonymous project-specific";
-      printWarn(`  Note: this repository has a ${kind} credential that takes`);
+      const kind2 = rec.userId != null ? "superseded per-repository" : "anonymous project-specific";
+      printWarn(`  Note: this repository has a ${kind2} credential that takes`);
       printWarn("  precedence here. Remove its line from ~/.verity/credentials to use your login.");
       printWarn('  Until then, "verity login" in this repository re-runs the full GitHub flow');
       printWarn("  every time.");
@@ -16287,6 +16287,15 @@ async function reportLoginOutcome(out2, opts = {}) {
   }
 }
 
+// src/lib/session-env.ts
+function envSessionId(env = process.env) {
+  for (const name2 of ["CLAUDE_SESSION_ID", "CLAUDE_CODE_SESSION_ID"]) {
+    const value = env[name2];
+    if (value) return value;
+  }
+  return void 0;
+}
+
 // src/commands/login.ts
 function registerLoginCommand(program2) {
   program2.command("login").description("Log in to Verity (one GitHub login grants access to all your repositories)").option("--force", "Re-authenticate even if already logged in").option("--start", "Show the GitHub code and return at once (finish with --finish); prints JSON").option("--finish", "Wait for approval of the code --start showed, then log in; prints JSON").option("--wait <seconds>", "With --finish: how long to wait for approval before returning", "100").option("--cancel", "Discard a code --start showed that will not be approved").action(async (opts) => {
@@ -16303,7 +16312,7 @@ function registerLoginCommand(program2) {
       return;
     }
     const split = !!(opts.start || opts.finish);
-    if (!split && !process.stdin.isTTY && (process.env.CLAUDECODE || process.env.CLAUDE_SESSION_ID)) {
+    if (!split && !process.stdin.isTTY && (process.env.CLAUDECODE || envSessionId())) {
       printWarn("Inside a Claude Code session the code below may not be visible until this command ends.");
       printWarn('  Use "verity login --start", then "verity login --finish" once it is approved.');
     }
@@ -16851,6 +16860,7 @@ var VERITY_SESSION_END_HOOK = {
   command: "verity session end"
 };
 var GUARD_TIMEOUT = 300;
+var GUARD_TIMEOUT_MS = GUARD_TIMEOUT * 1e3;
 function buildGuardHook(on) {
   return {
     type: "command",
@@ -17606,9 +17616,9 @@ function pointsAtVerity(src) {
 }
 function describeSource(src) {
   if (!src || typeof src !== "object") return "an unrecognised source";
-  const kind = typeof src.source === "string" ? src.source : "unknown";
+  const kind2 = typeof src.source === "string" ? src.source : "unknown";
   const target = typeof src.repo === "string" && src.repo || typeof src.url === "string" && src.url || typeof src.path === "string" && src.path || "";
-  return target ? `${kind} \u2192 ${target}` : kind;
+  return target ? `${kind2} \u2192 ${target}` : kind2;
 }
 function legacyMarketplaceInstall() {
   const plugins = readJsonFile((0, import_node_path11.join)(claudeConfigDir(), "plugins", "installed_plugins.json"))?.plugins;
@@ -18532,8 +18542,8 @@ function slugify(s) {
   return s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 60);
 }
 function orgNodePath(node) {
-  const kind = ORG_KINDS.includes(node.kind) ? node.kind : "domain";
-  return `${kind}/${slugify(node.title) || "claim"}-${node.tag_id.replace(/-/g, "").slice(0, 8)}.md`;
+  const kind2 = ORG_KINDS.includes(node.kind) ? node.kind : "domain";
+  return `${kind2}/${slugify(node.title) || "claim"}-${node.tag_id.replace(/-/g, "").slice(0, 8)}.md`;
 }
 function renderOrgNode(node, orgName) {
   const fm = [
@@ -18622,10 +18632,10 @@ function renderIndex(orgName, nodes) {
   ];
   const byKind = /* @__PURE__ */ new Map();
   for (const n of nodes) byKind.set(n.kind, [...byKind.get(n.kind) ?? [], n]);
-  for (const kind of ORG_KINDS) {
-    const list2 = byKind.get(kind);
+  for (const kind2 of ORG_KINDS) {
+    const list2 = byKind.get(kind2);
     if (!list2?.length) continue;
-    lines.push(`## ${kind}/ (${list2.length})`);
+    lines.push(`## ${kind2}/ (${list2.length})`);
     for (const n of list2) lines.push(`- [[${orgNodePath(n).split("/")[1].replace(/\.md$/, "")}]] \u2014 ${n.title} \xB7 ${n.origin}`);
     lines.push("");
   }
@@ -18684,8 +18694,8 @@ async function readOrgMirror(remote = requestRemote()) {
   const dir = orgMirrorDir(remote);
   if (!dir || !(0, import_node_fs14.existsSync)(dir)) return [];
   const out2 = [];
-  for (const kind of ORG_KINDS) {
-    const kindDir = (0, import_node_path14.join)(dir, kind);
+  for (const kind2 of ORG_KINDS) {
+    const kindDir = (0, import_node_path14.join)(dir, kind2);
     if (!(0, import_node_fs14.existsSync)(kindDir)) continue;
     let files;
     try {
@@ -18953,16 +18963,16 @@ function relevance(node, ctx) {
   return { score, via: { glob: globHit, tag: tagScore, text: textScore } };
 }
 var KIND_POOL_STRENGTH = 20;
-function priorFor(kind, pooled) {
-  const base = KIND_PRIOR_MEAN[kind] ?? DEFAULT_PRIOR_MEAN;
+function priorFor(kind2, pooled) {
+  const base = KIND_PRIOR_MEAN[kind2] ?? DEFAULT_PRIOR_MEAN;
   const a = pooled ? Math.max(0, pooled.alpha) : 0;
   const b = pooled ? Math.max(0, pooled.beta) : 0;
-  const mean = pooled && kind !== "integration" ? (KIND_POOL_STRENGTH * base + a) / (KIND_POOL_STRENGTH + a + b) : base;
+  const mean = pooled && kind2 !== "integration" ? (KIND_POOL_STRENGTH * base + a) / (KIND_POOL_STRENGTH + a + b) : base;
   return { alpha: mean * PRIOR_STRENGTH, beta: (1 - mean) * PRIOR_STRENGTH };
 }
-function posteriorFor(kind, own, pooled) {
-  const p = priorFor(kind, pooled);
-  if (!own || kind === "integration") return p;
+function posteriorFor(kind2, own, pooled) {
+  const p = priorFor(kind2, pooled);
+  if (!own || kind2 === "integration") return p;
   return { alpha: p.alpha + Math.max(0, own.alpha), beta: p.beta + Math.max(0, own.beta) };
 }
 function posteriorMean(p) {
@@ -19476,8 +19486,8 @@ function ensureVerityGitignore() {
     }
     let text = next.join("\n");
     if (!hasMarker) {
-      const sep6 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
-      text = text + sep6 + VERITY_GITIGNORE_BLOCK;
+      const sep7 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
+      text = text + sep7 + VERITY_GITIGNORE_BLOCK;
     }
     if (text !== content) (0, import_node_fs19.writeFileSync)(".gitignore", text);
     return verified(
@@ -19507,8 +19517,8 @@ function writeFencedBlock() {
   lines = fenceMemoryLines(lines);
   let text = lines.join("\n");
   if (!hasMarker) {
-    const sep6 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
-    text = text + sep6 + VERITY_GITIGNORE_BLOCK;
+    const sep7 = text === "" ? "" : text.endsWith("\n") ? "\n" : "\n\n";
+    text = text + sep7 + VERITY_GITIGNORE_BLOCK;
   }
   try {
     (0, import_node_fs19.writeFileSync)(".gitignore", text);
@@ -19558,8 +19568,8 @@ function keepMemoryTracked() {
   }
   if (content.includes(MEMORY_OPT_OUT_MARKER)) return "already";
   try {
-    const sep6 = content === "" ? "" : content.endsWith("\n") ? "\n" : "\n\n";
-    (0, import_node_fs19.writeFileSync)(".gitignore", content + sep6 + MEMORY_OPT_OUT_STANZA);
+    const sep7 = content === "" ? "" : content.endsWith("\n") ? "\n" : "\n\n";
+    (0, import_node_fs19.writeFileSync)(".gitignore", content + sep7 + MEMORY_OPT_OUT_STANZA);
   } catch {
     return "failed";
   }
@@ -20002,7 +20012,7 @@ async function regenerateIndex() {
         try {
           const content = await (0, import_promises9.readFile)((0, import_node_path19.join)(domainDir, file), "utf-8");
           const title = pickFrontmatter(content, "title") ?? slug;
-          const kind = pickFrontmatter(content, "kind") ?? "-";
+          const kind2 = pickFrontmatter(content, "kind") ?? "-";
           const confidence = pickFrontmatter(content, "confidence");
           const globs = pickFrontmatterArray(content, "file_globs");
           const status = pickFrontmatter(content, "status") ?? "active";
@@ -20010,7 +20020,7 @@ async function regenerateIndex() {
           const globPart = globs.length > 0 ? ` \xB7 scope: \`${globs.slice(0, 3).join("`, `")}\`` : "";
           const statusPart = status !== "active" ? ` \xB7 *${status}*` : "";
           lines.push(`- [[${slug}]] \u2014 **${title}**`);
-          lines.push(`  *${kind}*${confPart}${globPart}${statusPart}`);
+          lines.push(`  *${kind2}*${confPart}${globPart}${statusPart}`);
         } catch {
           lines.push(`- [[${slug}]]`);
         }
@@ -22053,8 +22063,8 @@ function toRegister(severity) {
       return "NOTE";
   }
 }
-function recordMark(d, kind, from, to) {
-  appendEvent(d, { k: "mark", kind, from: from ?? null, to: to ?? null });
+function recordMark(d, kind2, from, to) {
+  appendEvent(d, { k: "mark", kind: kind2, from: from ?? null, to: to ?? null });
 }
 function recordCapabilities(d, c, known) {
   const put = (field, value, tier) => {
@@ -22149,13 +22159,13 @@ function registerIntentCommands(program2) {
       if (!prompt) {
         process.exit(0);
       }
-      if (deferredToPlugin("intent capture", event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+      if (deferredToPlugin("intent capture", event.session_id ?? envSessionId() ?? null)) {
         process.exit(0);
       }
       const isPrimitive = isSlashCommand(prompt);
       const authForScope = await resolveToken(program2.opts().token);
       const scopeToken = authForScope.ok ? authForScope.data.token : void 0;
-      const scopeSession = event.session_id || process.env.CLAUDE_SESSION_ID || "";
+      const scopeSession = event.session_id || envSessionId() || "";
       if (!isPrimitive) await appendToConversationBuffer(prompt, sessionScopeKey(scopeToken, scopeSession));
       if (!isPrimitive) {
         try {
@@ -22875,7 +22885,12 @@ function registerLifecycleCommands(program2) {
       }
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
-      const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
+      const resolved = resolveHookSession(opts.sessionId, event, envSessionId());
+      if (!resolved.ok) {
+        logEvent("lifecycle_session_flag_refused", { command: "compact" });
+        process.exit(0);
+      }
+      const sessionId = resolved.sessionId;
       if (deferredToPlugin("compact", sessionId)) process.exit(0);
       const globals = program2.opts();
       const tok = await resolveToken(globals.token);
@@ -22904,9 +22919,14 @@ function registerLifecycleCommands(program2) {
       }
       if (!verityConfigured()) process.exit(0);
       const event = await readHookStdin();
-      const sessionId = opts.sessionId ?? event.session_id ?? process.env.CLAUDE_SESSION_ID ?? null;
+      const resolved = resolveHookSession(opts.sessionId, event, envSessionId());
+      if (!resolved.ok) {
+        logEvent("lifecycle_session_flag_refused", { command: "session end" });
+        process.exit(0);
+      }
+      const sessionId = resolved.sessionId;
       if (deferredToPlugin("session end", sessionId)) process.exit(0);
-      const reason = opts.reason ?? event.session_end_reason ?? event.reason ?? "other";
+      const reason = hookWord(opts.reason) ?? event.session_end_reason ?? event.reason ?? "other";
       if (reason === "clear") {
         writeCarry(sessionId ?? void 0, getCurrentCommit());
       }
@@ -22990,20 +23010,56 @@ function buildCompactionContext(session) {
   const trimmed = [...lines.slice(0, 5), ...lines.slice(5, 5 + 2)].join("\n");
   return trimmed.length <= MAX_CHARS ? trimmed : null;
 }
+var MAX_HOOK_EVENT_BYTES = 64 * 1024;
+var SESSION_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+var HOOK_WORD = /^[a-z][a-z_]{0,63}$/;
+function isHookSessionId(value) {
+  return typeof value === "string" && SESSION_ID.test(value);
+}
+function hookWord(value) {
+  return typeof value === "string" && HOOK_WORD.test(value) ? value : void 0;
+}
+function resolveHookSession(flag, event, env) {
+  if (flag !== void 0) return isHookSessionId(flag) ? { ok: true, sessionId: flag } : { ok: false };
+  if (event.session_id) return { ok: true, sessionId: event.session_id };
+  return { ok: true, sessionId: isHookSessionId(env) ? env : null };
+}
+function parseHookEvent(raw) {
+  let data;
+  try {
+    data = JSON.parse(raw.trim() || "{}");
+  } catch {
+    return {};
+  }
+  if (!data || typeof data !== "object" || Array.isArray(data)) return {};
+  const o = data;
+  const event = {};
+  if (isHookSessionId(o.session_id)) event.session_id = o.session_id;
+  const compaction = hookWord(o.compaction_type);
+  if (compaction) event.compaction_type = compaction;
+  const endReason = hookWord(o.session_end_reason);
+  if (endReason) event.session_end_reason = endReason;
+  const reason = hookWord(o.reason);
+  if (reason) event.reason = reason;
+  return event;
+}
 async function readHookStdin() {
   try {
     if (process.stdin.isTTY) return {};
     const chunks = [];
+    let size = 0;
     const timeout = new Promise((resolve9) => setTimeout(() => resolve9({}), 500));
     const read2 = new Promise((resolve9) => {
-      process.stdin.on("data", (c) => chunks.push(c));
-      process.stdin.on("end", () => {
-        try {
-          resolve9(JSON.parse(Buffer.concat(chunks).toString("utf-8").trim() || "{}"));
-        } catch {
+      process.stdin.on("data", (c) => {
+        size += c.length;
+        if (size > MAX_HOOK_EVENT_BYTES) {
+          process.stdin.destroy();
           resolve9({});
+          return;
         }
+        chunks.push(c);
       });
+      process.stdin.on("end", () => resolve9(parseHookEvent(Buffer.concat(chunks).toString("utf-8"))));
       process.stdin.on("error", () => resolve9({}));
       process.stdin.resume();
     });
@@ -23827,8 +23883,8 @@ async function correctVerityMdVersion(opts) {
     origin: { kind: "synthesized", tools: opts.tools }
   }));
 }
-async function writeFileTo(relative6, body2) {
-  const target = projectPath(relative6);
+async function writeFileTo(relative7, body2) {
+  const target = projectPath(relative7);
   await (0, import_promises10.mkdir)((0, import_node_path29.dirname)(target), { recursive: true });
   await (0, import_promises10.writeFile)(target, body2);
 }
@@ -24907,7 +24963,7 @@ function registerStatusCommand(program2) {
     {
       const tokenForScope = tokenResult.data.token;
       const found = resolveIgnoreState(
-        ignoreStateKeys(tokenForScope, process.env.CLAUDE_SESSION_ID || void 0)
+        ignoreStateKeys(tokenForScope, envSessionId())
       );
       const now = Math.floor(Date.now() / 1e3);
       const active = resolveActive(found?.state ?? null, now);
@@ -25100,7 +25156,7 @@ async function sendGeneralFeedback(message, opts, globals) {
     process.exit(1);
   }
   const body2 = { message };
-  const sessionId = opts.sessionId ?? process.env.CLAUDE_SESSION_ID;
+  const sessionId = opts.sessionId ?? envSessionId();
   const model = opts.model ?? process.env.CLAUDE_MODEL ?? "unknown";
   if (sessionId) body2.session_id = sessionId;
   if (model) body2.agent_model = model;
@@ -26344,7 +26400,7 @@ function resolveFrame(input) {
   const hookDirUsable = !!input.hookCwd && (0, import_node_fs40.existsSync)(input.hookCwd);
   const baseDir = hookDirUsable ? input.hookCwd : process.cwd();
   let anchor = hookDirUsable ? "hook-cwd" : "process-cwd";
-  const refuse = (refusal) => ({
+  const refuse2 = (refusal) => ({
     moment: found?.moment ?? null,
     frame: { worktreeRoot: null, gitDir: null, commonDir: null, isLinkedWorktree: false, branch: null, anchor, refusal }
   });
@@ -26358,19 +26414,19 @@ function resolveFrame(input) {
       if (!kindRes.some((re) => re.test(segments[i2]))) continue;
       const target = extractCommandTarget(input.command, i2, baseDir);
       if (target.named) anchor = "command-target";
-      if (target.unresolvable) return refuse(`target:${target.unresolvable}`);
+      if (target.unresolvable) return refuse2(`target:${target.unresolvable}`);
       dirs.add(target.dir ?? baseDir);
     }
-    if (dirs.size > 1) return refuse(`target:multiple ${found.moment} targets in one command`);
+    if (dirs.size > 1) return refuse2(`target:multiple ${found.moment} targets in one command`);
     const targetDir = dirs.size === 1 ? [...dirs][0] : baseDir;
     if (targetDir !== baseDir) {
-      if (!(0, import_node_fs40.existsSync)(targetDir)) return refuse(`target:directory does not exist: ${targetDir}`);
+      if (!(0, import_node_fs40.existsSync)(targetDir)) return refuse2(`target:directory does not exist: ${targetDir}`);
       dir = targetDir;
     }
   }
   const toplevel = gitAt(dir, ["rev-parse", "--show-toplevel"]);
   if (!toplevel) {
-    return refuse(anchor === "command-target" ? `target:not a git repository: ${dir}` : `anchor:not a git repository: ${dir}`);
+    return refuse2(anchor === "command-target" ? `target:not a git repository: ${dir}` : `anchor:not a git repository: ${dir}`);
   }
   const gitDirRaw = gitAt(dir, ["rev-parse", "--absolute-git-dir"]);
   const commonRaw = gitAt(dir, ["rev-parse", "--git-common-dir"]);
@@ -26966,7 +27022,7 @@ function sanitizeCommandWithLoss(rawCmd) {
   const lost = lines.slice(1).some((l) => l.trim().length > 0);
   const first = lines[0];
   const cmd = sanitizeCommand(first);
-  const hadSeparator = SEPARATORS.some((sep6) => first.indexOf(sep6) > 0);
+  const hadSeparator = SEPARATORS.some((sep7) => first.indexOf(sep7) > 0);
   return { cmd, lost: lost || !hadSeparator && first.length > MAX_COMMAND_CHARS };
 }
 var SEPARATORS = [" | ", " > ", " >> ", " 2>", " && ", " ; "];
@@ -26975,11 +27031,11 @@ function sanitizeCommand(rawCmd) {
   let cmd = rawCmd.split("\n")[0];
   let cut = -1;
   let marker = "";
-  for (const sep6 of SEPARATORS) {
-    const idx = cmd.indexOf(sep6);
+  for (const sep7 of SEPARATORS) {
+    const idx = cmd.indexOf(sep7);
     if (idx > 0 && (cut === -1 || idx < cut)) {
       cut = idx;
-      marker = sep6.trim();
+      marker = sep7.trim();
     }
   }
   if (cut > -1) cmd = cmd.slice(0, cut);
@@ -27046,13 +27102,13 @@ async function bootstrap(run4) {
     isTTY: process.stdout.isTTY === true
   });
   const { assistantMessage: assistantResponse, stopReason, transcriptPath, sessionId } = await readStopHookStdin();
-  if (deferredToPlugin("analyze", sessionId ?? process.env.CLAUDE_SESSION_ID ?? null)) {
+  if (deferredToPlugin("analyze", sessionId ?? envSessionId() ?? null)) {
     process.exit(0);
   }
   const actionSummary = transcriptPath ? await extractActionSummary(transcriptPath) : null;
   const tokenResult = await resolveToken(globals.token);
   const scopeToken = tokenResult.ok ? tokenResult.data.token : void 0;
-  const rawSessionId = sessionId || process.env.CLAUDE_SESSION_ID || void 0;
+  const rawSessionId = sessionId || envSessionId();
   const baselineSessionId = sessionScopeKey(scopeToken, rawSessionId);
   if (tokenResult.ok) {
     run4.beacon = {
@@ -27257,7 +27313,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.34.1" : "dev";
+    return true ? "0.34.2-experimental.312358d" : "dev";
   } catch {
     return "dev";
   }
@@ -27497,10 +27553,10 @@ var EMPTY_RESULT = {
   findings: [],
   summary: { total_findings: 0, by_severity: {}, tools_run: [] }
 };
-function withFailure(kind, detail) {
+function withFailure(kind2, detail) {
   return {
     ...EMPTY_RESULT,
-    summary: { ...EMPTY_RESULT.summary, failure: { kind, detail: detail.slice(0, 300) } }
+    summary: { ...EMPTY_RESULT.summary, failure: { kind: kind2, detail: detail.slice(0, 300) } }
   };
 }
 function runCodacyAnalysisIfAvailable(files) {
@@ -28058,7 +28114,7 @@ async function connect(run4) {
 async function mode(run4) {
   const { opts, globals } = run4;
   const { actionSummary, allForReview, assistantResponse, baseline, conversation, memory: memory2, noFilesChanged, serviceUrl, sessionId, token, turnAuthoredCode } = run4;
-  const sessionIdForMemory = sessionId || process.env.CLAUDE_SESSION_ID || "";
+  const sessionIdForMemory = sessionId || envSessionId() || "";
   let predictedMode;
   try {
     const memoryPath2 = sessionIdForMemory ? `/memory?session_id=${encodeURIComponent(sessionIdForMemory)}` : "/memory";
@@ -28259,11 +28315,11 @@ var rootCandidateCache = /* @__PURE__ */ new Map();
 function candidateRoots(repoRoot2) {
   const cached2 = rootCandidateCache.get(repoRoot2);
   if (cached2) return cached2;
-  const norm2 = repoRoot2.replace(/\\/g, "/").replace(/\/+$/, "");
-  const out2 = [norm2];
+  const norm3 = repoRoot2.replace(/\\/g, "/").replace(/\/+$/, "");
+  const out2 = [norm3];
   try {
-    const real = import_node_fs44.realpathSync.native(norm2).replace(/\\/g, "/").replace(/\/+$/, "");
-    if (real !== norm2) out2.push(real);
+    const real = import_node_fs44.realpathSync.native(norm3).replace(/\\/g, "/").replace(/\/+$/, "");
+    if (real !== norm3) out2.push(real);
   } catch {
   }
   for (const r of [...out2]) {
@@ -29114,39 +29170,39 @@ function extentOf(node) {
 }
 function definitionsIn(root, spec) {
   const out2 = [];
-  const add = (name2, kind, extent, fn, owner, last = extent) => {
+  const add = (name2, kind2, extent, fn, owner, last = extent) => {
     const q = qualifierOf(owner, spec);
-    out2.push({ name: name2, qualified: q ? `${q}.${name2}` : name2, kind, extent, last, fn });
+    out2.push({ name: name2, qualified: q ? `${q}.${name2}` : name2, kind: kind2, extent, last, fn });
   };
   const visit = (n) => {
-    const kind = spec.definitions[n.type];
-    if (kind && n.childForFieldName("body")) {
+    const kind2 = spec.definitions[n.type];
+    if (kind2 && n.childForFieldName("body")) {
       const nameNode = n.childForFieldName("name");
       if (nameNode && nameNode.type !== "computed_property_name") {
         const inClass = qualifierOf(n, spec) !== null;
-        const k = spec.id === "python" ? inClass ? "method" : "function" : kind;
+        const k = spec.id === "python" ? inClass ? "method" : "function" : kind2;
         add(nameNode.text, k, extentOf(n), n, n, n.parent?.type === "decorated_definition" ? n.parent : n);
       }
     } else if (spec.functionValues.has(n.type) && n.parent) {
       const p = n.parent;
-      const kind2 = n.type === "arrow_function" ? "arrow" : n.type === "lambda" || n.type === "lambda_expression" ? "lambda" : "function";
+      const kind3 = n.type === "arrow_function" ? "arrow" : n.type === "lambda" || n.type === "lambda_expression" ? "lambda" : "function";
       const bound = p.childForFieldName("value")?.id === n.id;
       if (bound && p.type === "variable_declarator" && p.childForFieldName("name")?.type === "identifier") {
         const decl = p.parent && p.parent.namedChildren.filter((c) => c.type === "variable_declarator").length === 1 ? p.parent : p;
-        add(p.childForFieldName("name").text, kind2, decl, n, p);
+        add(p.childForFieldName("name").text, kind3, decl, n, p);
       } else if (bound && (p.type === "public_field_definition" || p.type === "field_definition")) {
         const nameNode = p.childForFieldName("name") ?? p.childForFieldName("property");
-        if (nameNode && nameNode.type !== "computed_property_name") add(nameNode.text, kind2, extentOf(p), n, p, p);
+        if (nameNode && nameNode.type !== "computed_property_name") add(nameNode.text, kind3, extentOf(p), n, p, p);
       } else if (bound && p.type === "pair") {
         const key = p.childForFieldName("key");
-        if (key && (key.type === "property_identifier" || key.type === "identifier")) add(key.text, kind2, p, n, p);
+        if (key && (key.type === "property_identifier" || key.type === "identifier")) add(key.text, kind3, p, n, p);
       } else if (p.type === "arguments" && moduleCall(p.parent)) {
         const call = p.parent;
         const route = p.namedChildren[0];
         const quoted = route && route.id !== n.id && route.type === "string" ? unquote2(route.text) : null;
         const path = quoted && /^[\w/:.{}*-]{1,60}$/.test(quoted) ? quoted : null;
         const callee = call.childForFieldName("function").text;
-        add(path ? `${callee} ${path}` : callee, kind2, call.parent, n, call);
+        add(path ? `${callee} ${path}` : callee, kind3, call.parent, n, call);
       }
     }
     for (const c of n.namedChildren) visit(c);
@@ -29423,15 +29479,15 @@ var STABLE_EXPRESSION = (t) => {
   const root = t.split(".")[0];
   return root === "this" || root === "self" || /^[A-Z]/.test(root);
 };
-function argResource(kind, arg) {
-  if (!arg) return { kind, name: null, confidence: "unknown" };
+function argResource(kind2, arg) {
+  if (!arg) return { kind: kind2, name: null, confidence: "unknown" };
   if (arg.literal !== null) {
     const n = literalName(arg.literal);
-    return n ? { kind, name: n.name, confidence: n.confidence } : { kind, name: null, confidence: "unknown" };
+    return n ? { kind: kind2, name: n.name, confidence: n.confidence } : { kind: kind2, name: null, confidence: "unknown" };
   }
-  if (SIMPLE_EXPRESSION.test(arg.text) && STABLE_EXPRESSION(arg.text)) return { kind, name: arg.text, confidence: "expression" };
+  if (SIMPLE_EXPRESSION.test(arg.text) && STABLE_EXPRESSION(arg.text)) return { kind: kind2, name: arg.text, confidence: "expression" };
   const keyed = keyedCall(arg.text);
-  return keyed ? { kind, name: keyed, confidence: "expression" } : { kind, name: null, confidence: "unknown" };
+  return keyed ? { kind: kind2, name: keyed, confidence: "expression" } : { kind: kind2, name: null, confidence: "unknown" };
 }
 function keyedCall(text) {
   const t = text.trim();
@@ -30940,8 +30996,8 @@ ${m.accessors.map((x) => `  ${x.fn.path}:${x.fn.start.line} ${x.fn.qualified} \u
 var KINDS = ["table", "cache", "file", "http", "queue", "service", "memory"];
 function parseResource(text) {
   const colon = text.indexOf(":");
-  const kind = colon > 0 ? text.slice(0, colon) : "";
-  if (KINDS.includes(kind)) return { kinds: [kind], name: text.slice(colon + 1) };
+  const kind2 = colon > 0 ? text.slice(0, colon) : "";
+  if (KINDS.includes(kind2)) return { kinds: [kind2], name: text.slice(colon + 1) };
   return { kinds: KINDS, name: text };
 }
 var writersOfTool = async (ctx, args2) => {
@@ -31951,7 +32007,7 @@ async function workingMemory(run4) {
   const { opts } = run4;
   const { allForReview, baseline, conversation, foldResult, sessionId, token, transcriptPath } = run4;
   let { reachability } = run4;
-  const memorySession = sessionDossier(token, sessionId ?? process.env.CLAUDE_SESSION_ID ?? null);
+  const memorySession = sessionDossier(token, sessionId ?? envSessionId() ?? null);
   let memory2 = null;
   let incrementReport = null;
   if (memorySession) {
@@ -32224,7 +32280,7 @@ async function buildRequest(run4) {
     context: {
       agent_model: process.env.CLAUDE_MODEL ?? "unknown",
       agent_harness: "claude-code",
-      session_id: sessionId || process.env.CLAUDE_SESSION_ID || "unknown",
+      session_id: sessionId || envSessionId() || "unknown",
       iteration,
       // Makes fleet composition falsifiable — without it, no adoption-gated
       // rollout decision can be checked against anything.
@@ -33434,12 +33490,41 @@ async function runAnalyze(opts, globals) {
 }
 
 // src/commands/baseline.ts
-var import_node_fs55 = require("node:fs");
-var import_node_path42 = require("node:path");
+var import_node_fs56 = require("node:fs");
+var import_node_path43 = require("node:path");
 
-// src/lib/project-skills.ts
+// src/lib/skew-notice.ts
 var import_node_fs54 = require("node:fs");
 var import_node_path41 = require("node:path");
+var MARKER = ".skew-notice.json";
+function markerPath2() {
+  return (0, import_node_path41.join)(verityHome(), MARKER);
+}
+function today(now) {
+  const y = now.getFullYear();
+  const m = String(now.getMonth() + 1).padStart(2, "0");
+  const d = String(now.getDate()).padStart(2, "0");
+  return `${y}-${m}-${d}`;
+}
+function skewNoticeDue(skew, now = /* @__PURE__ */ new Date()) {
+  try {
+    const seen = JSON.parse((0, import_node_fs54.readFileSync)(markerPath2(), "utf-8"));
+    return !(seen.global === skew.global && seen.hooks === skew.hooks && seen.day === today(now));
+  } catch {
+    return true;
+  }
+}
+function recordSkewNotice(skew, now = /* @__PURE__ */ new Date()) {
+  try {
+    (0, import_node_fs54.mkdirSync)(verityHome(), { recursive: true, mode: 448 });
+    (0, import_node_fs54.writeFileSync)(markerPath2(), JSON.stringify({ global: skew.global, hooks: skew.hooks, day: today(now) }) + "\n");
+  } catch {
+  }
+}
+
+// src/lib/project-skills.ts
+var import_node_fs55 = require("node:fs");
+var import_node_path42 = require("node:path");
 var PROJECT_SKILL_NAMES = [
   "verity-setup",
   "verity-analyze",
@@ -33465,14 +33550,14 @@ var LEGACY_SKILL_NAMES = [
 var ALL = [...PROJECT_SKILL_NAMES, ...LEGACY_SKILL_NAMES];
 function staleProjectSkills() {
   const root = projectPath(".claude/skills");
-  if (!(0, import_node_fs54.existsSync)(root)) return [];
-  return ALL.filter((name2) => (0, import_node_fs54.existsSync)((0, import_node_path41.join)(root, name2)));
+  if (!(0, import_node_fs55.existsSync)(root)) return [];
+  return ALL.filter((name2) => (0, import_node_fs55.existsSync)((0, import_node_path42.join)(root, name2)));
 }
 function removeProjectSkills() {
   const root = projectPath(".claude/skills");
   const removed = [];
   for (const name2 of staleProjectSkills()) {
-    (0, import_node_fs54.rmSync)((0, import_node_path41.join)(root, name2), { recursive: true, force: true });
+    (0, import_node_fs55.rmSync)((0, import_node_path42.join)(root, name2), { recursive: true, force: true });
     removed.push(name2);
   }
   return removed;
@@ -33492,20 +33577,22 @@ function registerBaselineCommands(program2) {
       if (!process.stdin.isTTY) {
         const input = (await readStdin()).trim();
         if (input) {
-          const event = parseHookEvent(input);
+          const event = parseHookEvent2(input);
           if (opts.sessionId === void 0) sessionId = event.sessionId;
           if (opts.source === void 0) source2 = event.source;
         }
       }
-      const session = sessionId ?? validSessionId(process.env.CLAUDE_SESSION_ID);
+      const session = sessionId ?? validSessionId(envSessionId());
       const cli = pluginCliInvocation();
       const skew = cliVersionSkew();
       const why = skew ? `the \`verity\` on PATH is ${skew.global} but the hooks run ${skew.hooks}, so it is not the CLI they use` : verityOnPath() ? "the `verity` on PATH is a separate install whose version could not be read" : "this machine has no `verity` on PATH \u2014 the plugin carries its own copy";
       const cliLine = cli ? `Verity CLI: ${why}. When a Verity skill tells you to run \`verity <args>\`, run \`${cli} <args>\` instead. Everything else about the command is identical.` : null;
-      const skewMsg = skew ? `Verity: your global \`verity\` CLI is ${skew.global} but the hooks run ${skew.hooks}. Fix it before using \`verity\` in a terminal: ${skew.remedy}` : null;
-      const skewNote = skew ? `Before anything else, including /verity:init's questions, tell the user their global \`verity\` is ${skew.global}, the hooks run ${skew.hooks}, and \`${skew.remedy}\` fixes it. Until they have, do not send them to run \`verity login\` in a terminal: that runs the global one, which can sign this machine in to a different server.` : null;
+      const skewLoud = !!skew && skewNoticeDue(skew);
+      const skewMsg = skew && skewLoud ? `Verity: your global \`verity\` CLI is ${skew.global} but the hooks run ${skew.hooks}. Fix it before using \`verity\` in a terminal: ${skew.remedy}` : null;
+      const loginWarning = "Until they have, do not send them to run `verity login` in a terminal: that runs the global one, which can sign this machine in to a different server.";
+      const skewNote = !skew ? null : skewLoud ? `Before anything else, including /verity:init's questions, tell the user their global \`verity\` is ${skew.global}, the hooks run ${skew.hooks}, and \`${skew.remedy}\` fixes it. ${loginWarning}` : `The user's global \`verity\` is ${skew.global} and the hooks run ${skew.hooks}; \`${skew.remedy}\` fixes it. They were already told today, so do not repeat it unprompted \u2014 mention it only where it matters, such as before suggesting a \`verity\` command for their terminal. ${loginWarning}`;
       if (!verityConfigured()) {
-        if (isMachineStore((0, import_node_path42.join)(repoRoot(), VERITY_DIR))) process.exit(0);
+        if (isMachineStore((0, import_node_path43.join)(repoRoot(), VERITY_DIR))) process.exit(0);
         const how = isPluginInvocation() ? "Tell the user to run /verity:init \u2014 they type it; you cannot invoke it." : "Tell the user to run `verity init` in their terminal.";
         const lines = [
           `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
@@ -33532,19 +33619,20 @@ function registerBaselineCommands(program2) {
             }
           }) + "\n"
         );
+        if (skew && skewMsg) recordSkewNotice(skew);
         process.exit(0);
       }
       const realStart = source2 === void 0 || source2 === "startup" || source2 === "clear";
       let memoryMsg = null;
       let memoryAgentLine = null;
       const memoryNotice = projectPath(`${VERITY_DIR}/.memory-fence-notice`);
-      if (realStart && !(0, import_node_fs55.existsSync)(memoryNotice)) {
+      if (realStart && !(0, import_node_fs56.existsSync)(memoryNotice)) {
         const trackedGraph = memoryOptOut() ? 0 : committedMemoryFiles().length;
         if (trackedGraph > 0) {
           memoryMsg = `Verity: this project commits its knowledge base (${trackedGraph} files under .verity/memory/), so Verity's generated notes show up in every diff and pull request. Run \`verity memory untrack\` to keep them on disk but out of git, or \`verity memory track\` to keep committing them on purpose.`;
           memoryAgentLine = `This project has ${trackedGraph} knowledge-graph files tracked in git under .verity/memory/. As of Verity 0.32.6 the graph is machine-local by default \u2014 it is rebuilt from the service, and committing it puts generated notes in every pull request. If the user wants that stopped, run \`verity memory untrack\` for them: it keeps every file on disk and stages their removal from the index, so they only need to commit \u2014 and their teammates' working copies will vanish on the next pull and re-sync from the service, which is expected. If they would rather keep committing it, \`verity memory track\` records that and nothing will offer again.`;
           try {
-            (0, import_node_fs55.writeFileSync)(memoryNotice, (/* @__PURE__ */ new Date()).toISOString() + "\n");
+            (0, import_node_fs56.writeFileSync)(memoryNotice, (/* @__PURE__ */ new Date()).toISOString() + "\n");
           } catch {
           }
         }
@@ -33572,7 +33660,7 @@ function registerBaselineCommands(program2) {
           }
         }
         if (memoryAgentLine) notices.push(memoryAgentLine);
-        if (notices.length > 0) {
+        if (notices.length > 0 || skewMsg) {
           process.stdout.write(
             JSON.stringify({
               ...userMsg || skewMsg || memoryMsg ? { systemMessage: [skewMsg, userMsg, memoryMsg].filter(Boolean).join("\n") } : {},
@@ -33582,6 +33670,7 @@ function registerBaselineCommands(program2) {
               }
             }) + "\n"
           );
+          if (skew && skewMsg) recordSkewNotice(skew);
         }
       } else if (memoryMsg) {
         process.stdout.write(
@@ -33613,7 +33702,7 @@ function registerBaselineCommands(program2) {
     process.exit(0);
   });
 }
-var MAX_HOOK_EVENT_BYTES = 64 * 1024;
+var MAX_HOOK_EVENT_BYTES2 = 64 * 1024;
 var HOOK_SOURCES = /* @__PURE__ */ new Set(["startup", "resume", "clear", "compact"]);
 var SESSION_ID_RE2 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
 async function readStdin() {
@@ -33621,11 +33710,11 @@ async function readStdin() {
   let size = 0;
   for await (const chunk of process.stdin) {
     size += chunk.length;
-    if (size <= MAX_HOOK_EVENT_BYTES) chunks.push(chunk);
+    if (size <= MAX_HOOK_EVENT_BYTES2) chunks.push(chunk);
   }
-  return size > MAX_HOOK_EVENT_BYTES ? "" : Buffer.concat(chunks).toString("utf-8");
+  return size > MAX_HOOK_EVENT_BYTES2 ? "" : Buffer.concat(chunks).toString("utf-8");
 }
-function parseHookEvent(input) {
+function parseHookEvent2(input) {
   let event;
   try {
     event = JSON.parse(input);
@@ -33645,7 +33734,35 @@ function hookSource(value) {
 }
 
 // src/commands/review.ts
-var import_node_fs56 = require("node:fs");
+var import_node_fs57 = require("node:fs");
+var import_node_path44 = require("node:path");
+function containReviewPaths(paths, base) {
+  const kept = [];
+  const refused2 = [];
+  for (const raw of paths) {
+    const candidate = (0, import_node_path44.isAbsolute)(raw) ? relativeForm(base, raw) : raw;
+    if (candidate === "" || resolveInside(base, candidate) === null) refused2.push(raw);
+    else kept.push(candidate);
+  }
+  return { kept, refused: refused2 };
+}
+function relativeForm(base, abs) {
+  const lexical = (0, import_node_path44.relative)(base, abs);
+  if (!(lexical === ".." || lexical.startsWith(`..${import_node_path44.sep}`) || (0, import_node_path44.isAbsolute)(lexical))) return lexical;
+  try {
+    let dir = (0, import_node_path44.dirname)(abs);
+    let rest = (0, import_node_path44.basename)(abs);
+    while (!(0, import_node_fs57.existsSync)(dir)) {
+      const up = (0, import_node_path44.dirname)(dir);
+      if (up === dir) return lexical;
+      rest = (0, import_node_path44.join)((0, import_node_path44.basename)(dir), rest);
+      dir = up;
+    }
+    return (0, import_node_path44.relative)((0, import_node_fs57.realpathSync)(base), (0, import_node_path44.join)((0, import_node_fs57.realpathSync)(dir), rest));
+  } catch {
+    return lexical;
+  }
+}
 function registerReviewCommand(program2) {
   program2.command("review").description("Run on-demand Verity analysis (advisory, never blocks)").requiredOption("--files <paths>", "Comma-separated file list").option("--changed <paths>", "Subset of --files that were modified").option("--intent <text>", "User intent description (max 2000 chars); - reads it from stdin, so the words never pass through shell quoting").option("--specs <paths>", "Comma-separated spec file paths").option("--json", "Output raw JSON response").action(async (opts) => {
     const globals = program2.opts();
@@ -33664,11 +33781,23 @@ function registerReviewCommand(program2) {
   });
 }
 async function runReview(opts, globals) {
-  const allFiles = opts.files.split(",").map((f) => f.trim()).filter(Boolean);
-  const changedFiles = opts.changed ? opts.changed.split(",").map((f) => f.trim()).filter(Boolean) : allFiles;
+  const base = process.cwd();
+  const files = containReviewPaths(opts.files.split(",").map((f) => f.trim()).filter(Boolean), base);
+  const changed = opts.changed ? containReviewPaths(opts.changed.split(",").map((f) => f.trim()).filter(Boolean), base) : files;
+  const refused2 = Array.from(/* @__PURE__ */ new Set([...files.refused, ...changed.refused]));
+  if (refused2.length > 0) {
+    printJsonCompact({
+      gate_decision: "WARN",
+      systemMessage: `Verity: refused ${refused2.length} path(s) outside this repository \u2014 nothing was reviewed. Pass paths inside the repository you run \`verity review\` from.`,
+      refused_paths: refused2
+    });
+    process.exit(0);
+  }
+  const allFiles = files.kept;
+  const changedFiles = changed.kept;
   const analyzable = filterAnalyzable(allFiles);
   const securityFiles = filterSecurity(allFiles);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs56.existsSync)(f) || resolveFile(f) !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).filter((f) => (0, import_node_fs57.existsSync)(f) || resolveFile(f) !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const codeDelta = collectCodeDelta(allFiles);
   const tokenResult = await resolveToken(globals.token);
@@ -33693,7 +33822,7 @@ async function runReview(opts, globals) {
     context: {
       agent_model: process.env.CLAUDE_MODEL ?? "unknown",
       agent_harness: "claude-code",
-      session_id: process.env.CLAUDE_SESSION_ID ?? "unknown",
+      session_id: envSessionId() ?? "unknown",
       trigger: "review",
       iteration: 1
     }
@@ -33734,12 +33863,12 @@ async function runReview(opts, globals) {
 }
 
 // src/commands/guard.ts
-var import_node_fs61 = require("node:fs");
-var import_node_path48 = require("node:path");
+var import_node_fs63 = require("node:fs");
+var import_node_path51 = require("node:path");
 
 // src/lib/vendored.ts
-var import_node_fs57 = require("node:fs");
-var import_node_path43 = require("node:path");
+var import_node_fs58 = require("node:fs");
+var import_node_path45 = require("node:path");
 var INSTALLED_SKILL = /^\.claude\/skills\/(verity-[a-z0-9-]+)\/(.+)$/;
 function dataDirOrNull() {
   try {
@@ -33754,7 +33883,7 @@ function shippedSkillFile(path, dataDir = dataDirOrNull()) {
   const [, skill, rel] = m;
   if (rel.split("/").some((seg) => seg === ".." || seg === ".")) return null;
   try {
-    return (0, import_node_fs57.readFileSync)((0, import_node_path43.join)(dataDir, "skills", skill, rel), "utf8");
+    return (0, import_node_fs58.readFileSync)((0, import_node_path45.join)(dataDir, "skills", skill, rel), "utf8");
   } catch {
     return null;
   }
@@ -33863,8 +33992,33 @@ async function runAgentReview(options) {
   return { kind: "finished", response: finished.data };
 }
 
+// src/lib/effort.ts
+var import_node_fs59 = require("node:fs");
+var import_node_path46 = require("node:path");
+var import_yaml5 = __toESM2(require_dist());
+var EFFORT_PROFILES = {
+  default: { pushDeadlineMs: 18e4, formal: { tier: "fast", maxRounds: 2, minScore: 0.7, costCapUsd: 1, maxTargets: 1, relaxedGates: false, dailyModels: 5, dailyCostUsd: 5 } },
+  high: { pushDeadlineMs: 22e4, formal: { tier: "deep", maxRounds: 2, minScore: 0.6, costCapUsd: 2, maxTargets: 2, relaxedGates: false, dailyModels: 15, dailyCostUsd: 15 } },
+  max: { pushDeadlineMs: 27e4, formal: { tier: "deep", maxRounds: 3, minScore: 0.5, costCapUsd: 4, maxTargets: 3, relaxedGates: true, dailyModels: 30, dailyCostUsd: 30 } }
+};
+function asEffort(value) {
+  return value === "high" || value === "max" ? value : "default";
+}
+function resolveEffort(root, env = process.env) {
+  if (env.VERITY_EFFORT) return asEffort(env.VERITY_EFFORT);
+  try {
+    const standard = (0, import_yaml5.parse)((0, import_node_fs59.readFileSync)((0, import_node_path46.join)(root, STANDARD_FILE), "utf8"));
+    return asEffort(standard?.process_constraints?.git_moment_effort);
+  } catch {
+    return "default";
+  }
+}
+function effortProfile(root, env = process.env) {
+  return EFFORT_PROFILES[resolveEffort(root, env)];
+}
+
 // src/lib/prove/auto.ts
-var import_node_path47 = require("node:path");
+var import_node_path50 = require("node:path");
 var import_node_crypto19 = require("node:crypto");
 
 // src/lib/prove/signals.ts
@@ -34906,9 +35060,9 @@ function effectSites(numbered2) {
     const t = r.text.trim();
     if (!t || t.startsWith("//") || t.startsWith("#") || t.startsWith("*")) continue;
     const onParam = [...params].some((p) => callsOn(t, p) || callsDirect(t, p));
-    const kind = EFFECT_LINE2.test(t) || onParam ? "effect" : CONTROL_LINE.test(t) ? "control" : null;
-    if (!kind) continue;
-    out2.push(`L${r.n} [${kind}] ${t.length > 160 ? t.slice(0, 157) + "\u2026" : t}`);
+    const kind2 = EFFECT_LINE2.test(t) || onParam ? "effect" : CONTROL_LINE.test(t) ? "control" : null;
+    if (!kind2) continue;
+    out2.push(`L${r.n} [${kind2}] ${t.length > 160 ? t.slice(0, 157) + "\u2026" : t}`);
     if (out2.length >= MAX_EFFECT_SITES) break;
   }
   return out2;
@@ -35551,9 +35705,9 @@ async function runReplay(brief, opts) {
   if (opts.auth) return runReplayViaServer(brief, opts.auth, opts.timeoutMs);
   const env = opts.env ?? process.env;
   const none = { covered: 0, total: 0, ratio: 0, basis: "none" };
-  const refuse = (error) => ({ claimed: null, verdict: "unverified", reason: "", downgrade: error, executedCalls: 0, shellCalls: 0, verbatim: none, executedOutput: "", harnessFiles: [], usage: null, durationMs: 0, containerId: null, error });
-  if (env.VERITY_PROVE_DIRECT !== "1") return refuse("not logged in (run `verity login`); replays run on the Verity service");
-  if (!opts.apiKey) return refuse("OPENAI_API_KEY is not set");
+  const refuse2 = (error) => ({ claimed: null, verdict: "unverified", reason: "", downgrade: error, executedCalls: 0, shellCalls: 0, verbatim: none, executedOutput: "", harnessFiles: [], usage: null, durationMs: 0, containerId: null, error });
+  if (env.VERITY_PROVE_DIRECT !== "1") return refuse2("not logged in (run `verity login`); replays run on the Verity service");
+  if (!opts.apiKey) return refuse2("OPENAI_API_KEY is not set");
   return runReplayInContainer(brief, { apiKey: opts.apiKey, model: opts.model, timeoutMs: opts.timeoutMs, maxRounds: opts.maxRounds, fetchImpl: opts.fetchImpl });
 }
 function renderReplay(model, property, r) {
@@ -35591,18 +35745,18 @@ function renderReplay(model, property, r) {
 // src/lib/prove/runner.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_os8 = require("node:os");
-var import_node_fs60 = require("node:fs");
+var import_node_fs62 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path46 = require("node:path");
+var import_node_path49 = require("node:path");
 
 // src/lib/prove/scaffold.ts
-var import_node_fs59 = require("node:fs");
-var import_node_path45 = require("node:path");
+var import_node_fs61 = require("node:fs");
+var import_node_path48 = require("node:path");
 
 // src/lib/prove/safe-write.ts
-var import_node_fs58 = require("node:fs");
+var import_node_fs60 = require("node:fs");
 var import_node_crypto15 = require("node:crypto");
-var import_node_path44 = require("node:path");
+var import_node_path47 = require("node:path");
 var SafeWriteError = class extends Error {
   constructor(reason, path) {
     super(`refusing to write ${path}: ${reason}`);
@@ -35611,10 +35765,10 @@ var SafeWriteError = class extends Error {
     this.name = "SafeWriteError";
   }
 };
-var FLAGS3 = import_node_fs58.constants;
+var FLAGS3 = import_node_fs60.constants;
 var NOFOLLOW2 = FLAGS3.O_NOFOLLOW ?? 0;
 function assertPlainRelative(rel) {
-  if (!rel || (0, import_node_path44.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
+  if (!rel || (0, import_node_path47.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
   for (const part of rel.split(/[\\/]/)) {
     if (part === ".." || part === "" || part === ".") throw new SafeWriteError("bad-path", rel);
   }
@@ -35623,34 +35777,34 @@ function ensureDirsNoFollow(root, rel) {
   const parts2 = rel.split(/[\\/]/);
   let cur = root;
   for (const part of parts2.slice(0, -1)) {
-    cur = (0, import_node_path44.join)(cur, part);
+    cur = (0, import_node_path47.join)(cur, part);
     let st;
     try {
-      st = (0, import_node_fs58.lstatSync)(cur);
+      st = (0, import_node_fs60.lstatSync)(cur);
     } catch {
-      (0, import_node_fs58.mkdirSync)(cur);
+      (0, import_node_fs60.mkdirSync)(cur);
       continue;
     }
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", cur);
     if (!st.isDirectory()) throw new SafeWriteError("not-regular", cur);
   }
-  return (0, import_node_path44.join)(root, rel);
+  return (0, import_node_path47.join)(root, rel);
 }
 function insideRoot(realRoot, realPath) {
-  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path44.sep) ? realRoot : realRoot + import_node_path44.sep);
+  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path47.sep) ? realRoot : realRoot + import_node_path47.sep);
 }
 function removeQuietly(path) {
   try {
-    (0, import_node_fs58.unlinkSync)(path);
+    (0, import_node_fs60.unlinkSync)(path);
   } catch {
   }
 }
 function writeFileInRootNoFollow(root, rel, content) {
   assertPlainRelative(rel);
   const dest = ensureDirsNoFollow(root, rel);
-  const dir = (0, import_node_path44.dirname)(dest);
+  const dir = (0, import_node_path47.dirname)(dest);
   try {
-    const st = (0, import_node_fs58.lstatSync)(dest);
+    const st = (0, import_node_fs60.lstatSync)(dest);
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", dest);
     if (!st.isFile()) throw new SafeWriteError("not-regular", dest);
   } catch (err2) {
@@ -35658,41 +35812,41 @@ function writeFileInRootNoFollow(root, rel, content) {
   }
   let realRoot;
   try {
-    realRoot = (0, import_node_fs58.realpathSync)(root);
+    realRoot = (0, import_node_fs60.realpathSync)(root);
   } catch {
     throw new SafeWriteError("unwritable", root);
   }
-  const tmp = (0, import_node_path44.join)(dir, `.${(0, import_node_path44.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
+  const tmp = (0, import_node_path47.join)(dir, `.${(0, import_node_path47.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
   let fd;
   try {
-    fd = (0, import_node_fs58.openSync)(tmp, import_node_fs58.constants.O_WRONLY | import_node_fs58.constants.O_CREAT | import_node_fs58.constants.O_EXCL | NOFOLLOW2, 420);
+    fd = (0, import_node_fs60.openSync)(tmp, import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_CREAT | import_node_fs60.constants.O_EXCL | NOFOLLOW2, 420);
   } catch {
     throw new SafeWriteError("unwritable", tmp);
   }
   try {
-    const opened = (0, import_node_fs58.fstatSync)(fd, { bigint: true });
+    const opened = (0, import_node_fs60.fstatSync)(fd, { bigint: true });
     let realTmp;
     try {
-      realTmp = (0, import_node_fs58.realpathSync)(tmp);
+      realTmp = (0, import_node_fs60.realpathSync)(tmp);
     } catch {
       throw new SafeWriteError("escaped", tmp);
     }
-    const there = (0, import_node_fs58.lstatSync)(realTmp, { bigint: true });
+    const there = (0, import_node_fs60.lstatSync)(realTmp, { bigint: true });
     if (!opened.isFile() || there.ino !== opened.ino || there.dev !== opened.dev || !insideRoot(realRoot, realTmp)) {
       throw new SafeWriteError("escaped", tmp);
     }
     const buf = Buffer.from(content, "utf-8");
     let off = 0;
-    while (off < buf.length) off += (0, import_node_fs58.writeSync)(fd, buf, off, buf.length - off);
+    while (off < buf.length) off += (0, import_node_fs60.writeSync)(fd, buf, off, buf.length - off);
   } catch (err2) {
-    (0, import_node_fs58.closeSync)(fd);
+    (0, import_node_fs60.closeSync)(fd);
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", tmp);
   }
-  (0, import_node_fs58.closeSync)(fd);
+  (0, import_node_fs60.closeSync)(fd);
   try {
-    if (!insideRoot(realRoot, (0, import_node_fs58.realpathSync)(dir)) || (0, import_node_fs58.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
-    (0, import_node_fs58.renameSync)(tmp, dest);
+    if (!insideRoot(realRoot, (0, import_node_fs60.realpathSync)(dir)) || (0, import_node_fs60.lstatSync)(dir).isSymbolicLink()) throw new SafeWriteError("escaped", dir);
+    (0, import_node_fs60.renameSync)(tmp, dest);
   } catch (err2) {
     removeQuietly(tmp);
     throw err2 instanceof SafeWriteError ? err2 : new SafeWriteError("unwritable", dest);
@@ -35706,9 +35860,9 @@ function pathHasNoLink(root, rel) {
   }
   let cur = root;
   for (const part of rel.split(/[\\/]/)) {
-    cur = cur + import_node_path44.sep + part;
+    cur = cur + import_node_path47.sep + part;
     try {
-      if ((0, import_node_fs58.lstatSync)(cur).isSymbolicLink()) return false;
+      if ((0, import_node_fs60.lstatSync)(cur).isSymbolicLink()) return false;
     } catch {
       return true;
     }
@@ -36018,20 +36172,20 @@ This directory is machine-local and gitignored (see ../.gitignore). Models are
 never committed; what reaches the team is the bug report and the fix.
 `;
 function scaffoldProofs(root) {
-  const proofsDir = (0, import_node_path45.join)(root, PROOFS_DIR);
+  const proofsDir = (0, import_node_path48.join)(root, PROOFS_DIR);
   const written = [];
   const kept = [];
   for (const stray of ["lakefile.lean"]) {
     const rel = `${PROOFS_DIR}/${stray}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path48.join)(root, rel));
     try {
-      (0, import_node_fs59.rmSync)((0, import_node_path45.join)(root, rel), { force: true });
+      (0, import_node_fs61.rmSync)((0, import_node_path48.join)(root, rel), { force: true });
     } catch {
     }
   }
   for (const f of PROOFS_TEMPLATE_FILES) {
     const rel = `${PROOFS_DIR}/${f.path}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path48.join)(root, rel));
     const current = readRegularFileInRoot(root, rel, 4 * 1024 * 1024);
     if (current.ok && current.content === f.content) {
       kept.push(rel);
@@ -36044,8 +36198,8 @@ function scaffoldProofs(root) {
     [`${PROOFS_DIR}/.gitignore`, LOCAL_GITIGNORE],
     [`${MODELS_DIR}/README.md`, MODELS_README]
   ]) {
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
-    if (existsNoFollow((0, import_node_path45.join)(root, rel))) {
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path48.join)(root, rel));
+    if (existsNoFollow((0, import_node_path48.join)(root, rel))) {
       kept.push(rel);
       continue;
     }
@@ -36056,7 +36210,7 @@ function scaffoldProofs(root) {
 }
 function existsNoFollow(abs) {
   try {
-    (0, import_node_fs59.lstatSync)(abs);
+    (0, import_node_fs61.lstatSync)(abs);
     return true;
   } catch {
     return false;
@@ -36135,12 +36289,12 @@ function parseHeader(obj) {
 function parseProperty(obj) {
   const model = ident(obj.model);
   const id = ident(obj.id);
-  const kind = typeof obj.kind === "string" && KINDS2.has(obj.kind) ? obj.kind : null;
+  const kind2 = typeof obj.kind === "string" && KINDS2.has(obj.kind) ? obj.kind : null;
   const result = typeof obj.result === "string" && RESULTS.has(obj.result) ? obj.result : null;
   const source2 = obj.source === void 0 ? "" : str2(obj.source, LIMITS.text);
   const desc = obj.desc === void 0 ? "" : str2(obj.desc, LIMITS.text);
-  if (!model || !id || !kind || !result || source2 === null || desc === null) return null;
-  const p = { model, id, kind, source: source2, desc, result };
+  if (!model || !id || !kind2 || !result || source2 === null || desc === null) return null;
+  const p = { model, id, kind: kind2, source: source2, desc, result };
   if (obj.bound !== void 0) {
     const n = nat(obj.bound);
     if (n === null) return null;
@@ -36314,17 +36468,17 @@ function renderReport(r) {
 
 // src/lib/prove/runner.ts
 function verityLeanHome(env = process.env) {
-  return env.VERITY_LEAN_HOME ?? (0, import_node_path46.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".verity", "lean");
+  return env.VERITY_LEAN_HOME ?? (0, import_node_path49.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".verity", "lean");
 }
 function findToolchain(env = process.env) {
-  const managedBin = (0, import_node_path46.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
-  const elanBin = (0, import_node_path46.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
-  const elanHas = (0, import_node_fs60.existsSync)((0, import_node_path46.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
-  const userPath = (env.PATH ?? "").split(import_node_path46.delimiter).filter((d) => d && (elanHas || (0, import_node_path46.resolve)(d) !== (0, import_node_path46.resolve)(elanBin)));
-  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path46.delimiter);
+  const managedBin = (0, import_node_path49.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
+  const elanBin = (0, import_node_path49.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "bin");
+  const elanHas = (0, import_node_fs62.existsSync)((0, import_node_path49.join)(env.HOME ?? (0, import_node_os9.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const userPath = (env.PATH ?? "").split(import_node_path49.delimiter).filter((d) => d && (elanHas || (0, import_node_path49.resolve)(d) !== (0, import_node_path49.resolve)(elanBin)));
+  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path49.delimiter);
   const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
   const exe = process.platform === "win32" ? "lake.exe" : "lake";
-  const candidates2 = [(0, import_node_path46.join)(managedBin, exe), ...elanHas ? [(0, import_node_path46.join)(elanBin, exe)] : [], exe];
+  const candidates2 = [(0, import_node_path49.join)(managedBin, exe), ...elanHas ? [(0, import_node_path49.join)(elanBin, exe)] : [], exe];
   for (const candidate of candidates2) {
     try {
       (0, import_node_child_process15.execFileSync)(candidate, ["--version"], { env: merged, stdio: ["ignore", "pipe", "pipe"], timeout: 1e4 });
@@ -36403,7 +36557,7 @@ function proofsWorkspaceProblem(root) {
   for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
     let st;
     try {
-      st = (0, import_node_fs60.lstatSync)((0, import_node_path46.join)(root, rel));
+      st = (0, import_node_fs62.lstatSync)((0, import_node_path49.join)(root, rel));
     } catch {
       break;
     }
@@ -36423,44 +36577,44 @@ function refused(problem) {
 function buildLibrary(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return run2(tc, (0, import_node_path46.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return run2(tc, (0, import_node_path49.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 async function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return runAsync(tc, (0, import_node_path46.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return runAsync(tc, (0, import_node_path49.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 function isModelInRoot(modelsAbs, rel) {
-  if (!rel.endsWith(".lean") || (0, import_node_path46.isAbsolute)(rel) || rel.startsWith("..")) return false;
+  if (!rel.endsWith(".lean") || (0, import_node_path49.isAbsolute)(rel) || rel.startsWith("..")) return false;
   return statRegularInRoot(modelsAbs, rel).ok;
 }
 function resolveModelFile(root, arg) {
-  const modelsAbs = (0, import_node_path46.join)(root, MODELS_DIR);
-  const asPath = (0, import_node_path46.relative)(modelsAbs, (0, import_node_path46.isAbsolute)(arg) ? arg : (0, import_node_path46.resolve)(root, arg));
+  const modelsAbs = (0, import_node_path49.join)(root, MODELS_DIR);
+  const asPath = (0, import_node_path49.relative)(modelsAbs, (0, import_node_path49.isAbsolute)(arg) ? arg : (0, import_node_path49.resolve)(root, arg));
   const candidates2 = arg.includes("/") || arg.includes("\\") ? [asPath] : [arg, `${arg}.lean`];
   for (const rel of candidates2) {
-    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path46.join)(modelsAbs, rel);
+    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path49.join)(modelsAbs, rel);
   }
   return null;
 }
 function listModelFiles(root) {
-  const modelsAbs = (0, import_node_path46.join)(root, MODELS_DIR);
-  if (!(0, import_node_fs60.existsSync)(modelsAbs)) return [];
-  return (0, import_node_fs60.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path46.join)(modelsAbs, f));
+  const modelsAbs = (0, import_node_path49.join)(root, MODELS_DIR);
+  if (!(0, import_node_fs62.existsSync)(modelsAbs)) return [];
+  return (0, import_node_fs62.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path49.join)(modelsAbs, f));
 }
 function trimDiagnostics(text) {
   return text.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
 }
 function checkModel(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path46.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path46.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path49.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path49.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 async function checkModelAsync(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path46.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path46.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path49.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path49.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
@@ -36469,10 +36623,10 @@ function toReport(res, root, modelFile, timeoutMs) {
   const parsed = parseVerityLines(res.stdout);
   const combined = `${res.stdout}
 ${res.stderr}`;
-  const name2 = parsed.header?.model ?? (0, import_node_path46.basename)(modelFile, ".lean");
+  const name2 = parsed.header?.model ?? (0, import_node_path49.basename)(modelFile, ".lean");
   const report = {
     model: name2,
-    file: (0, import_node_path46.relative)(root, modelFile),
+    file: (0, import_node_path49.relative)(root, modelFile),
     ok: res.ok,
     header: parsed.header,
     properties: parsed.properties,
@@ -36519,9 +36673,9 @@ function isCrashTrace(trace) {
 }
 function mergeFormalFindings(response, outcome, pushedFiles) {
   if (!outcome) return { blocking: 0 };
-  const norm2 = (p) => p.replace(/\\/g, "/");
-  const pushed = new Set(pushedFiles.map(norm2));
-  const blocking = outcome.findings.filter((f) => f.verdict === "reproduced" && !f.waived && pushed.has(norm2(f.file)));
+  const norm3 = (p) => p.replace(/\\/g, "/");
+  const pushed = new Set(pushedFiles.map(norm3));
+  const blocking = outcome.findings.filter((f) => f.verdict === "reproduced" && !f.waived && pushed.has(norm3(f.file)));
   if (blocking.length === 0) return { blocking: 0 };
   const existing = Array.isArray(response.findings) ? response.findings : [];
   response.findings = [
@@ -36717,15 +36871,15 @@ function nonNegative(v) {
   return typeof v === "number" && Number.isFinite(v) && v > 0 ? v : 0;
 }
 function readLedger(root) {
-  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  const empty = { day: today, models: 0, costUsd: 0 };
+  const today2 = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const empty = { day: today2, models: 0, costUsd: 0 };
   if (!isLocalState(root, AUTO_LEDGER)) return empty;
   const read2 = readRegularFileInRoot(root, AUTO_LEDGER, 4096);
   if (!read2.ok) return empty;
   try {
     const o = JSON.parse(read2.content);
-    if (o.day !== today || typeof o.models !== "number") return empty;
-    return { day: today, models: nonNegative(o.models), costUsd: nonNegative(o.costUsd) };
+    if (o.day !== today2 || typeof o.models !== "number") return empty;
+    return { day: today2, models: nonNegative(o.models), costUsd: nonNegative(o.costUsd) };
   } catch {
     return empty;
   }
@@ -36867,7 +37021,7 @@ async function runFormalPhase(input) {
     }
   }
   if (kept.length !== persisted.length) writePersistedFindings(root, kept);
-  if (standing.length > 0) {
+  if (standing.length > 0 && !input.skipStanding) {
     const first = kept.find((f) => f.file === standing[0].file);
     return done({
       status: "checked",
@@ -36895,7 +37049,7 @@ async function runFormalPhase(input) {
       return a.source === "tree-sitter" && a.value.effects.length >= 2;
     })());
   };
-  const eligible = signals.filter((s) => isEligible(s, largePush).ok || mapEligible(s.file)).slice(0, 5);
+  const eligible = signals.filter((s) => input.relaxedGates || isEligible(s, largePush).ok || mapEligible(s.file)).slice(0, 5);
   if (eligible.length === 0) {
     const best = signals[0];
     return done({ status: "skipped", skip: "not-eligible", detail: `${best.file}: ${isEligible(best, largePush).why}` });
@@ -36903,7 +37057,7 @@ async function runFormalPhase(input) {
   const ranked = await deps.rank(eligible, root, input.changedLines);
   if (!ranked.ok && ranked.disabled) return done({ status: "skipped", skip: "disabled-by-server", detail: ranked.error });
   if (ranked.ok) spend(ranked);
-  candidates2 = ranked.ranked.slice(0, 5).map((c) => ({ file: c.file, symbol: c.ai?.symbol ?? null, score: c.ai?.score ?? null, criteria: c.ai?.criteria ?? null, reasked: !!c.ai?.reasked, reasons: (c.ai?.reasons ?? []).map((r) => r.slice(0, 200)) }));
+  candidates2 = ranked.ranked.slice(0, 5).map((c) => ({ file: c.file, symbol: c.ai?.symbol ?? null, score: c.ai?.score ?? null, criteria: c.ai?.criteria ?? null, reasked: !!c.ai?.reasked, reasons: (c.ai?.reasons ?? []).map((r) => r.slice(0, 200)), commits: c.commits, fixCommits: c.fixCommits, risk: c.risk }));
   if (cancelled()) return done({ status: "skipped", skip: "deadline", detail: "cut off after ranking" });
   const minScore = input.minScore ?? DEFAULT_MIN_SCORE;
   let qualified = ranked.ranked.filter((c) => c.ai && c.ai.score >= minScore);
@@ -36949,6 +37103,10 @@ async function runFormalPhase(input) {
       }
     }
     if (d.resolved && d.resolved !== c.ai.symbol) c.ai.symbol = d.resolved;
+    if (input.exclude?.has(`${c.file}#${c.ai.symbol}`)) {
+      note("verified", `${c.ai.symbol}: modelled earlier in this push`);
+      continue;
+    }
     if (input.changedLines) {
       const changed = input.changedLines.get(c.file) ?? [];
       if (changed.length === 0) {
@@ -36990,7 +37148,7 @@ async function runFormalPhase(input) {
       const hazard = hasHazard(functionHazard(d.numbered));
       const shared = contextHazard(context);
       const judged = (c.ai.criteria?.hazard ?? 0) >= 0.8;
-      if (!hazard.ok && !shared?.ok && !judged) {
+      if (!input.relaxedGates && !hazard.ok && !shared?.ok && !judged) {
         note("no-hazard", `${c.ai.symbol}: ${hazard.why}`);
         continue;
       }
@@ -37012,7 +37170,7 @@ async function runFormalPhase(input) {
   const sha2562 = sha256Of(chosen.content);
   const chosenContent = chosen.content;
   const { lines, numbered: numbered2 } = chosen;
-  const target = { file: top.file, symbol: top.ai.symbol, lines, score: top.ai.score, reasons: [...top.reasons, ...top.ai.reasons], extent: chosen.extent, ...chosen.context ? { context: chosen.context.stats } : {}, ...floor ? { floor: true } : {} };
+  const target = { file: top.file, symbol: top.ai.symbol, lines, score: top.ai.score, reasons: [...top.reasons, ...top.ai.reasons], extent: chosen.extent, ...chosen.context ? { context: chosen.context.stats } : {}, ...floor ? { floor: true } : {}, signals: { commits: top.commits, fixCommits: top.fixCommits, risk: top.risk } };
   progress.target = target;
   if (!REPLAYABLE.test(top.file)) return done({ status: "skipped", skip: "replay-unsupported", detail: `${top.file}: replay supports TS/JS and Python`, target });
   if (timeLeft() < GENERATE_RESERVE_MS) return done({ status: "skipped", skip: "not-enough-time", detail: `${Math.round(timeLeft() / 1e3)} s left before generation`, target });
@@ -37023,7 +37181,7 @@ async function runFormalPhase(input) {
   let report = null;
   let modelName = "";
   let rounds = 0;
-  for (let round = 1; round <= 2; round++) {
+  for (let round = 1; round <= (input.maxRounds ?? 2); round++) {
     if (round > 1 && overCap()) return done({ status: "skipped", skip: "cost-cap", detail: `$${usage.costUsd.toFixed(2)} spent, cap $${costCap.toFixed(2)}; no retry`, target, model: { name: modelName, file: `${AUTO_MODELS_DIR}/${modelName}.lean`, rounds } });
     if (cancelled()) return done({ status: "skipped", skip: "deadline", detail: "cut off before generation", target });
     rounds = round;
@@ -37042,7 +37200,7 @@ async function runFormalPhase(input) {
     modelName = gen.name;
     const rel = `${AUTO_MODELS_DIR}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path47.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path50.join)(root, rel);
     progress.model = { name: gen.name, file: rel, rounds: round };
     progress.step = "check";
     report = await deps.check(root, abs);
@@ -37164,7 +37322,7 @@ async function runFormalPhase(input) {
   return done({
     status: "checked",
     target,
-    model: { name: modelName, file: (0, import_node_path47.relative)(root, (0, import_node_path47.join)(root, modelFile)), rounds },
+    model: { name: modelName, file: (0, import_node_path50.relative)(root, (0, import_node_path50.join)(root, modelFile)), rounds },
     properties: report.properties,
     findings
   });
@@ -37197,7 +37355,19 @@ async function generateAndCheck(root, req, opts) {
   const read2 = readSrc(req.file, 96 * 1024);
   if (!read2.ok) return { ok: false, error: `${req.file}: ${read2.reason}`, rounds: 0, costUsd: 0 };
   const sha2562 = sha256Of(read2.content);
-  const { lines, numbered: numbered2 } = describeTarget(read2.content, req.symbol, req.file, req.lines, { codeMap: opts.deps.codeMap });
+  const { lines, numbered: numbered2, extent } = describeTarget(read2.content, req.symbol, req.file, req.lines, { codeMap: opts.deps.codeMap });
+  let warning;
+  if (!lines) {
+    const outline = extent === "fallback:not-found" ? opts.deps.codeMap?.outline(req.file, read2.content) : void 0;
+    if (outline?.source === "tree-sitter") {
+      const names2 = [...new Set(outline.value.filter((f) => f.name && f.kind !== "lambda").map((f) => f.qualified))];
+      const last = (req.symbol.split(/[.#:]/).pop() ?? req.symbol).toLowerCase();
+      const close = names2.filter((n) => n.toLowerCase().includes(last));
+      const shown = (close.length > 0 ? close : names2).slice(0, 12);
+      return { ok: false, error: `no function \`${req.symbol}\` in ${req.file}${shown.length ? ` (it has: ${shown.join(", ")})` : ""}. Name one as ${req.file}#<name>, or pass --lines a-b`, rounds: 0, costUsd: 0 };
+    }
+    warning = `could not find the lines of \`${req.symbol}\` in ${req.file} (${extent}): the model is written from the start of the file, and a replay must copy half of the whole file. Pass --lines a-b to name the code.`;
+  }
   const target = {
     file: req.file,
     symbol: req.symbol,
@@ -37205,7 +37375,9 @@ async function generateAndCheck(root, req, opts) {
     sha256: sha2562,
     numbered: numbered2,
     reasons: req.hint ? [`the user's worry, in their words: ${req.hint.slice(0, 280)}`] : [],
-    properties: []
+    properties: [],
+    // The run row records which extractor answered, as at push.
+    extentSource: extent
   };
   const context = opts.deps.codeMap && !req.lines ? targetContext({ codeMap: opts.deps.codeMap, codeSource: opts.deps.codeSource, readSource: readSrc, file: req.file, content: read2.content, symbol: req.symbol }) : null;
   Object.assign(target, context?.fields ?? {});
@@ -37227,7 +37399,7 @@ async function generateAndCheck(root, req, opts) {
     }
     const rel = `${dir}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path47.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path50.join)(root, rel);
     const report = await opts.deps.check(root, abs);
     const abstracts = report.header?.abstracts ?? [];
     const stray = abstracts.find((a) => !headerFiles.has(a.file)) ?? (abstracts[0] && abstracts[0].file !== req.file ? abstracts[0] : void 0);
@@ -37241,14 +37413,14 @@ async function generateAndCheck(root, req, opts) {
         const g = basisOf(p.source, files);
         return g.ok ? [] : [`${p.id}: ${g.why}`];
       });
-      if (bad.length === 0) return { ok: true, name: gen.name, file: rel, report, rounds: round, costUsd };
+      if (bad.length === 0) return { ok: true, name: gen.name, file: rel, report, rounds: round, costUsd, ...warning ? { warning } : {} };
       lastError = ungroundedMessage(bad.join("; "));
       if (round < maxRounds) {
         previous = { source: gen.source, error: lastError };
         continue;
       }
       const grounded = report.properties.filter((p) => basisOf(p.source, files).ok);
-      if (grounded.length > 0) return { ok: true, name: gen.name, file: rel, report: { ...report, properties: grounded }, rounds: round, costUsd };
+      if (grounded.length > 0) return { ok: true, name: gen.name, file: rel, report: { ...report, properties: grounded }, rounds: round, costUsd, ...warning ? { warning } : {} };
       break;
     }
     lastError = stray ? `the model abstracts ${stray.file}, not ${req.file}` : report.error ?? (report.malformed ? "the model printed malformed VERITY lines" : "the model reported no property");
@@ -37259,7 +37431,7 @@ async function generateAndCheck(root, req, opts) {
 function skippedOutcome(skip, detail) {
   return { status: "skipped", skip, ...detail ? { detail } : {}, findings: [], usage: { inputTokens: 0, outputTokens: 0, costUsd: 0, unpriced: 0 }, durationMs: 0 };
 }
-async function prepareFormalPhase(root, env = process.env, auth2, readSource, codeSource) {
+async function prepareFormalPhase(root, env = process.env, auth2, readSource, codeSource, opts = {}) {
   const direct = env.VERITY_PROVE_DIRECT === "1" && !!env.OPENAI_API_KEY;
   if (!auth2 && !direct) return { ok: false, skip: "not-logged-in" };
   const apiKey = direct ? env.OPENAI_API_KEY : void 0;
@@ -37274,9 +37446,16 @@ async function prepareFormalPhase(root, env = process.env, auth2, readSource, co
   }
   const build = await buildLibraryAsync(toolchain, root, 9e4);
   if (!build.ok) return { ok: false, skip: "library-build-failed", detail: build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).join(" ").slice(0, 200) };
+  const code = await loadCodeContext(root, env, codeSource);
+  return { ok: true, deps: { ...defaultDeps({ auth: auth2, apiKey, env, toolchain, readSource, ...opts.tier ? { tier: opts.tier } : {}, ...code }), codeSource: code.codeSource } };
+}
+async function loadCodeContext(root, env = process.env, codeSource) {
   const loaded = await loadCodeMap(env);
-  const source2 = codeSource ?? withoutPaths(worktreeSource(root), isDeniedPath);
-  return { ok: true, deps: { ...defaultDeps({ auth: auth2, apiKey, env, toolchain, readSource, codeMap: loaded.ok ? loaded.map : null, codeSource: source2 }), codeSource: source2 } };
+  return { codeMap: loaded.ok ? loaded.map : null, codeSource: codeSource ?? withoutPaths(worktreeSource(root), isDeniedPath) };
+}
+async function onDemandDeps(root, opts) {
+  const code = await loadCodeContext(root, opts.env);
+  return { ...defaultDeps({ ...opts, tier: "deep", ...code }), codeSource: code.codeSource };
 }
 function changedFunction(codeMap, file, content, changed) {
   const outline = codeMap.outline(file, content);
@@ -37321,10 +37500,52 @@ function runFormalPhaseWithin(input) {
       resolve9(cutOffOutcome(progress, `hard stop after ${Math.round(left / 1e3)} s during ${progress.step ?? "setup"}`, left));
     }, left);
   });
-  return Promise.race([runFormalPhase({ ...input, progress }), cutoff]).finally(() => {
+  return Promise.race([runFormalPhaseTargets({ ...input, progress }), cutoff]).finally(() => {
     if (timer) clearTimeout(timer);
   });
 }
+var NOTHING_ELSE_QUALIFIES = /* @__PURE__ */ new Set(["no-source-files", "not-eligible", "no-candidate", "no-symbol", "symbol-not-in-push", "verified", "no-hazard", "too-large"]);
+async function runFormalPhaseTargets(input) {
+  const first = await runFormalPhase(input);
+  const max = Math.max(1, Math.floor(input.maxTargets ?? 1));
+  if (max === 1 || first.status !== "checked" || !first.target) return first;
+  const outcomes = [first];
+  const exclude = /* @__PURE__ */ new Set([`${first.target.file}#${first.target.symbol}`]);
+  const cap2 = input.costCapUsd ?? PUSH_COST_CAP_USD;
+  let stoppedAt;
+  while (outcomes.length < max) {
+    if (input.progress?.cancelled) {
+      stoppedAt = { skip: "deadline", detail: "cut off between targets" };
+      break;
+    }
+    const left = input.deadlineAt - input.deps.now();
+    if (left < GENERATE_RESERVE_MS + REPLAY_RESERVE_MS) {
+      stoppedAt = { skip: "not-enough-time", detail: `${Math.round(left / 1e3)} s left before target ${outcomes.length + 1}` };
+      break;
+    }
+    const spent = outcomes.reduce((sum, o) => sum + o.usage.costUsd, 0);
+    if (spent >= cap2) {
+      stoppedAt = { skip: "cost-cap", detail: `$${spent.toFixed(2)} spent, cap $${cap2.toFixed(2)}` };
+      break;
+    }
+    const next = await runFormalPhase({ ...input, exclude, skipStanding: true, costCapUsd: cap2 - spent, progress: {} });
+    if (next.status !== "checked" && next.skip && !NOTHING_ELSE_QUALIFIES.has(next.skip)) stoppedAt = { skip: next.skip, ...next.detail ? { detail: next.detail } : {} };
+    if (!next.target || next.status !== "checked" && exclude.has(`${next.target.file}#${next.target.symbol}`)) break;
+    exclude.add(`${next.target.file}#${next.target.symbol}`);
+    outcomes.push(next);
+    if (next.status !== "checked") break;
+  }
+  if (outcomes.length === 1) return stoppedAt ? { ...first, stoppedAt } : first;
+  return {
+    ...first,
+    ...stoppedAt ? { stoppedAt } : {},
+    findings: outcomes.flatMap((o) => o.findings),
+    properties: outcomes.flatMap((o) => o.properties ?? []),
+    targets: outcomes.flatMap((o) => o.target ? [{ file: o.target.file, symbol: o.target.symbol, status: o.status, ...o.skip ? { skip: o.skip } : {}, findings: o.findings.length }] : []),
+    usage: outcomes.reduce((u, o) => ({ inputTokens: u.inputTokens + o.usage.inputTokens, outputTokens: u.outputTokens + o.usage.outputTokens, costUsd: Math.round((u.costUsd + o.usage.costUsd) * 1e6) / 1e6, unpriced: u.unpriced + o.usage.unpriced }), { inputTokens: 0, outputTokens: 0, costUsd: 0, unpriced: 0 }),
+    durationMs: outcomes.reduce((sum, o) => sum + o.durationMs, 0)
+  };
+}
 function cutOffOutcome(p, detail, elapsedMs) {
   const usage = p.usage ?? { inputTokens: 0, outputTokens: 0, costUsd: 0, unpriced: 0 };
   if (!p.report || !p.target || !p.model) {
@@ -37351,13 +37572,138 @@ function describeFormalOutcome(o) {
   return `formal: ${o.model?.name ?? "?"} on ${o.target?.file ?? "?"}#${o.target?.symbol ?? "?"} (${o.model?.rounds ?? 1} round${o.model?.rounds === 1 ? "" : "s"}) \xB7 ${parts2.join(" \xB7 ")} \xB7 ${Math.round(o.durationMs / 1e3)} s${cost}${cut}`;
 }
 
+// src/lib/prove/record.ts
+var RECORD_TIMEOUT_MS = 8e3;
+var HOOK_EXIT_MARGIN_MS = 5e3;
+var MIN_RECORD_POST_MS = 1e3;
+function guardRecordDeadline(hookStartedAt) {
+  return hookStartedAt + GUARD_TIMEOUT_MS - HOOK_EXIT_MARGIN_MS;
+}
+function recordPostTimeout(now, deadlineAt, timeoutMs = RECORD_TIMEOUT_MS) {
+  if (deadlineAt === void 0) return timeoutMs;
+  const left = deadlineAt - now;
+  return left < MIN_RECORD_POST_MS ? null : Math.min(timeoutMs, left);
+}
+var norm2 = (p) => p.replace(/\\/g, "/");
+var SAFE_SEGMENT = /^[A-Za-z0-9._@+~$()[\]-]{1,255}$/;
+function safeRepoPath(p) {
+  const n = norm2(p);
+  if (!n || n.length > 512 || n.startsWith("/") || /^[A-Za-z]:\//.test(n)) return null;
+  return n.split("/").every((s) => s !== "." && s !== ".." && SAFE_SEGMENT.test(s)) ? n : null;
+}
+var SYMBOL = /^[A-Za-z_$][\w$]*(?:[.#:][A-Za-z_$][\w$]*)*$/;
+var IDENT3 = /^[A-Za-z][\w]*$/;
+var TRACE_STEP = /^[A-Za-z_]\w{0,63}$/;
+var ELIDED_STEP = "\u2026";
+function recordBasis(source2) {
+  if (typeof source2 !== "string") return "";
+  if (/^rule:[a-z-]+$/.test(source2)) return source2;
+  const m = /^(?:([^:\s]+):)?L(\d+)(?::|$)/.exec(source2);
+  return m ? m[1] ? `${norm2(m[1])}:L${m[2]}` : `L${m[2]}` : "";
+}
+function recordTrace(trace) {
+  return trace.slice(0, 16).map((s) => {
+    const name2 = (s.trim().split(/[\s(]/, 1)[0] ?? "").split(".").pop() ?? "";
+    return TRACE_STEP.test(name2) ? name2 : ELIDED_STEP;
+  });
+}
+var ident2 = (s, re, max) => typeof s === "string" && s.length <= max && re.test(s) ? s : null;
+var kind = (k) => k === "intent" ? "intent" : "structural";
+var signalsOf = (c) => c && typeof c.commits === "number" && typeof c.fixCommits === "number" ? { commits: c.commits, fix_commits: c.fixCommits, risk: Object.fromEntries(Object.entries(c.risk ?? {}).filter(([, n]) => typeof n === "number" && n > 0).slice(0, 16)) } : null;
+function buildPhaseRecord(outcome, ctx) {
+  const pushed = new Set(ctx.pushedFiles.map(norm2));
+  const blocks = (f) => ctx.moment === "push" && f.verdict === "reproduced" && !f.waived && pushed.has(norm2(f.file));
+  const symbol = (s) => ident2(s, SYMBOL, 200);
+  return {
+    moment: ctx.moment,
+    status: outcome.status,
+    skip: outcome.skip ?? null,
+    parent_run_id: ctx.parentRunId,
+    target: outcome.target && symbol(outcome.target.symbol) && safeRepoPath(outcome.target.file) ? {
+      file: safeRepoPath(outcome.target.file),
+      symbol: symbol(outcome.target.symbol),
+      lines: outcome.target.lines ?? null,
+      score: Math.max(0, Math.min(1, outcome.target.score)),
+      extent: ident2(outcome.target.extent, /^[a-z-]+(?::[a-z-]+)?$/, 60),
+      signals: signalsOf(outcome.target.signals)
+    } : null,
+    candidates: (outcome.candidates ?? []).filter((c) => safeRepoPath(c.file)).slice(0, 12).map((c) => ({
+      file: safeRepoPath(c.file),
+      symbol: c.symbol === null ? null : symbol(c.symbol),
+      score: c.score === null ? null : Math.max(0, Math.min(1, c.score)),
+      criteria: c.criteria,
+      reasked: c.reasked,
+      signals: signalsOf(c)
+    })),
+    model: outcome.model && ident2(outcome.model.name, /^[A-Za-z][\w]*(?:\.[A-Za-z][\w]*)*$/, 120) ? { name: outcome.model.name, rounds: Math.max(0, Math.min(20, outcome.model.rounds)) } : null,
+    properties: (outcome.properties ?? []).filter((p) => ident2(p.id, IDENT3, 120)).slice(0, 16).map((p) => ({
+      id: p.id,
+      kind: kind(p.kind),
+      basis: recordBasis(p.source),
+      result: p.result,
+      bound: p.bound ?? null,
+      states: p.states ?? null
+    })),
+    findings: outcome.findings.filter((f) => ident2(f.property, IDENT3, 120) && symbol(f.symbol) && safeRepoPath(f.file)).slice(0, 8).map((f) => ({
+      property: f.property,
+      kind: kind(f.kind),
+      trace: recordTrace(f.trace),
+      file: safeRepoPath(f.file),
+      symbol: f.symbol,
+      verdict: f.verdict,
+      waived: f.waived === true,
+      blocked: blocks(f)
+    })),
+    grounding: outcome.grounding ? {
+      sent_back: outcome.grounding.sentBack,
+      dropped: outcome.grounding.dropped.filter((id) => ident2(id, IDENT3, 120)).slice(0, 16),
+      trigger_missing: (outcome.grounding.triggerMissing ?? []).filter((id) => ident2(id, IDENT3, 120)).slice(0, 16)
+    } : null,
+    usage: {
+      input_tokens: outcome.usage.inputTokens,
+      output_tokens: outcome.usage.outputTokens,
+      cost_usd: outcome.usage.costUsd,
+      unpriced: outcome.usage.unpriced
+    },
+    duration_ms: Math.round(outcome.durationMs)
+  };
+}
+async function postPhaseRecord(outcome, ctx, post) {
+  try {
+    const timeout = recordPostTimeout((post.now ?? Date.now)(), post.deadlineAt, post.timeoutMs ?? RECORD_TIMEOUT_MS);
+    if (timeout === null) {
+      logEvent("formal_record_skipped", { moment: ctx.moment, reason: "hook-deadline" });
+      return null;
+    }
+    const res = await apiRequest({
+      method: "POST",
+      path: "/prove/record",
+      serviceUrl: post.serviceUrl,
+      token: post.token,
+      body: buildPhaseRecord(outcome, ctx),
+      timeout,
+      cmd: "prove-record"
+    });
+    if (!res.ok) {
+      logEvent("formal_record_failed", { moment: ctx.moment, category: res.category ?? "unknown", http_status: res.http_status ?? null });
+      return null;
+    }
+    const runId = typeof res.data?.run_id === "string" ? res.data.run_id : null;
+    logEvent("formal_record", { moment: ctx.moment, run_id: runId });
+    return runId;
+  } catch (err2) {
+    logEvent("formal_record_failed", { moment: ctx.moment, category: "exception", name: err2?.constructor?.name ?? "Error" });
+    return null;
+  }
+}
+
 // src/commands/guard.ts
 var EXCERPT_SOURCE_MAX_BYTES = 2 * 1024 * 1024;
 var WRITERS_BUDGET_MS = 1500;
 var EXCERPT_MAX_LINES2 = 30;
 var VENDORED_READ_MAX_BYTES = 256 * 1024;
 var GUARD_BLOCK_CAP = 2;
-var GUARD_ITER_FILE = (0, import_node_path48.join)(VERITY_DIR, ".guard-iteration");
+var GUARD_ITER_FILE = (0, import_node_path51.join)(VERITY_DIR, ".guard-iteration");
 function readPreToolUseStdin() {
   const empty = { command: "", cwd: null, sessionId: null };
   return new Promise((resolve9) => {
@@ -37402,7 +37748,7 @@ function readPreToolUseStdin() {
 }
 function readIterMap() {
   try {
-    const raw = JSON.parse((0, import_node_fs61.readFileSync)(GUARD_ITER_FILE, "utf-8"));
+    const raw = JSON.parse((0, import_node_fs63.readFileSync)(GUARD_ITER_FILE, "utf-8"));
     if (raw && typeof raw === "object") {
       if (typeof raw.moment === "string" && typeof raw.count === "number") {
         return { [raw.moment]: raw.count };
@@ -37422,10 +37768,10 @@ function readIter(moment) {
 }
 function writeIter(moment, count) {
   try {
-    (0, import_node_fs61.mkdirSync)(VERITY_DIR, { recursive: true });
+    (0, import_node_fs63.mkdirSync)(VERITY_DIR, { recursive: true });
     const map = readIterMap();
     map[moment] = count;
-    (0, import_node_fs61.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+    (0, import_node_fs63.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
   } catch {
   }
 }
@@ -37435,10 +37781,10 @@ function resetIter(moment) {
     if (!(moment in map)) return;
     delete map[moment];
     if (Object.keys(map).length === 0) {
-      if ((0, import_node_fs61.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs61.unlinkSync)(GUARD_ITER_FILE);
+      if ((0, import_node_fs63.existsSync)(GUARD_ITER_FILE)) (0, import_node_fs63.unlinkSync)(GUARD_ITER_FILE);
     } else {
-      (0, import_node_fs61.mkdirSync)(VERITY_DIR, { recursive: true });
-      (0, import_node_fs61.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
+      (0, import_node_fs63.mkdirSync)(VERITY_DIR, { recursive: true });
+      (0, import_node_fs63.writeFileSync)(GUARD_ITER_FILE, JSON.stringify(map));
     }
   } catch {
   }
@@ -37508,7 +37854,7 @@ function hasBlockingFinding(response, sentFiles) {
 function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedIntent, coverageTelemetry) {
   const analyzable = filterAnalyzable(files);
   const securityFiles = filterSecurity(files);
-  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs61.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
+  const scannable = Array.from(/* @__PURE__ */ new Set([...analyzable, ...securityFiles])).map((f) => (0, import_node_fs63.existsSync)(f) ? f : resolveFile(f)).filter((f) => f !== null);
   const staticResults = runCodacyAnalysisIfAvailable(scannable);
   const trigger = moment === "pre-commit" ? "hook:pre-commit" : "hook:pre-push";
   const requestBody = {
@@ -37521,7 +37867,7 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
       agent_harness: "claude-code",
       // Prefer the session id Claude Code passes on the hook payload; fall back
       // to the env var, then 'unknown'.
-      session_id: sessionId ?? process.env.CLAUDE_SESSION_ID ?? "unknown",
+      session_id: sessionId ?? envSessionId() ?? "unknown",
       trigger,
       iteration: iter + 1
     }
@@ -37652,7 +37998,8 @@ function startAgentReview(input) {
       http: http2,
       executeTools: makeToolExecutor(ctx),
       startedAt: input.hookStartedAt,
-      deadlineMs: AGENT_DEADLINE_MS[input.moment],
+      // The push's deadline follows the review effort (lib/effort.ts); the commit's never does.
+      deadlineMs: input.moment === "pre-push" ? effortProfile(input.root).pushDeadlineMs : AGENT_DEADLINE_MS[input.moment],
       start: {
         moment: input.moment,
         iteration: input.iteration,
@@ -37677,7 +38024,8 @@ function startFormalPhase(input) {
   const env = process.env.VERITY_GIT_MOMENT_FORMAL;
   if (env === "off") return null;
   if (env !== "push" && readProjectConfig().formal !== "push") return null;
-  const deadlineAt = input.hookStartedAt + AGENT_DEADLINE_MS["pre-push"] - 1e4;
+  const profile = effortProfile(input.root);
+  const deadlineAt = input.hookStartedAt + profile.pushDeadlineMs - 1e4;
   const ig = loadVerityIgnore();
   const files = input.files.filter((f) => !isVerityOwnedPath(f) && !isIgnored3(ig, f));
   let changedLines = /* @__PURE__ */ new Map();
@@ -37699,9 +38047,9 @@ function startFormalPhase(input) {
     return { ok: true, content };
   } : void 0;
   const run4 = async () => {
-    const prep = await prepareFormalPhase(input.root, process.env, input.auth, readSource, withoutPaths(tip ? revisionSource(input.root, tip) : worktreeSource(input.root), isDeniedPath));
+    const prep = await prepareFormalPhase(input.root, process.env, input.auth, readSource, withoutPaths(tip ? revisionSource(input.root, tip) : worktreeSource(input.root), isDeniedPath), { tier: profile.formal.tier });
     if (!prep.ok) return skippedOutcome(prep.skip, prep.detail);
-    return runFormalPhaseWithin({ root: input.root, files, changedLines, deadlineAt, deps: prep.deps });
+    return runFormalPhaseWithin({ root: input.root, files, changedLines, deadlineAt, deps: prep.deps, minScore: profile.formal.minScore, maxRounds: profile.formal.maxRounds, costCapUsd: profile.formal.costCapUsd, maxTargets: profile.formal.maxTargets, relaxedGates: profile.formal.relaxedGates, dailyCap: profile.formal.dailyModels, dailyCostCapUsd: profile.formal.dailyCostUsd });
   };
   return run4().catch((err2) => skippedOutcome("error", String(err2?.message ?? err2).slice(0, 200)));
 }
@@ -37893,6 +38241,9 @@ async function runGuard(opts, globals) {
       rounds: formalOutcome.model?.rounds ?? null,
       properties: formalOutcome.properties?.map((p) => `${p.id}:${p.result}`) ?? [],
       findings: formalOutcome.findings.map((f) => `${f.property}:${f.verdict}`),
+      // Review effort "max" models more than one function: each one, and why the search stopped early.
+      targets: (formalOutcome.targets ?? []).map((t) => `${t.file}#${t.symbol}:${t.status}${t.skip ? `(${t.skip})` : ""}`),
+      stopped_at: formalOutcome.stoppedAt?.skip ?? null,
       // Decision 81: what each property rests on (a rule, or "line"), what was
       // sent back or dropped as ungrounded, and which counterexamples lack their
       // property's trigger (shadow). Ids and rule names only, never code.
@@ -37925,6 +38276,13 @@ async function runGuard(opts, globals) {
   const witnessed = [...codeDelta.files.map((f) => f.path), ...agentVerdict?.witnessed_files ?? []];
   mergeFormalFindings(response, formalOutcome, files);
   decision = response.gate_decision ?? "(unrecognised)";
+  if (formalOutcome) {
+    await postPhaseRecord(formalOutcome, {
+      moment: "push",
+      parentRunId: typeof response.run_id === "string" ? response.run_id : null,
+      pushedFiles: files
+    }, { serviceUrl: urlResult.data, token: tokenResult.data.token, deadlineAt: guardRecordDeadline(hookStartedAt) });
+  }
   if (!result.ok) {
     const authRemedy = result.error.startsWith("STALE_VERIFICATION") ? " Your GitHub verification expired \u2014 run `verity login` to re-verify." : result.error.startsWith("FORBIDDEN") ? " No access grant for this repository \u2014 run `verity login` to refresh your grants." : result.error.startsWith("INVALID_TOKEN") ? " Your Verity login expired or was revoked \u2014 run `verity login` to sign in again." : "";
     if (oneShotLostOutcome({ agentGate: decision, agentBlocking: hasBlockingFinding(response, witnessed) }) === "block") {
@@ -38042,7 +38400,7 @@ function writeBlockMessage(moment, response, covDetail) {
 
 // src/commands/ignore.ts
 function registerIgnoreCommand(program2) {
-  const ignore = program2.command("ignore").description("Declare the next turn (or a short window) as housekeeping \u2014 no review needed").option("--turn", "Cover the next turn only (the default)").option("--for <duration>", "Cover a window: 30m, 45s, 1h (max 60m)").option("--reason <reason>", "Why this window needs no review \u2014 required, and recorded").option("--agent", "Mark the declaration as agent-invoked (a ledger label, not a permission)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID)").option("--json", "Output raw JSON").action(async (opts) => {
+  const ignore = program2.command("ignore").description("Declare the next turn (or a short window) as housekeeping \u2014 no review needed").option("--turn", "Cover the next turn only (the default)").option("--for <duration>", "Cover a window: 30m, 45s, 1h (max 60m)").option("--reason <reason>", "Why this window needs no review \u2014 required, and recorded").option("--agent", "Mark the declaration as agent-invoked (a ledger label, not a permission)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID, then $CLAUDE_CODE_SESSION_ID)").option("--json", "Output raw JSON").action(async (opts) => {
     const globals = program2.opts();
     const now = Math.floor(Date.now() / 1e3);
     const reason = opts.reason?.trim();
@@ -38069,7 +38427,7 @@ function registerIgnoreCommand(program2) {
     }
     const tokenResult = await resolveToken(globals.token);
     const token = tokenResult.ok ? tokenResult.data.token : void 0;
-    const sessionId = opts.sessionId || process.env.CLAUDE_SESSION_ID || void 0;
+    const sessionId = opts.sessionId || envSessionId();
     const keys = ignoreStateKeys(token, sessionId);
     const existing = resolveIgnoreState(keys);
     const spent = existing?.state.spent ?? 0;
@@ -38115,11 +38473,11 @@ function registerIgnoreCommand(program2) {
     printInfo(`Verity will skip ${window2} \u2014 "${reason}" (${spent + 1}/${IGNORE_BUDGET} this session).`);
     printInfo("It covers turns that author nothing. If anything is written, the declaration voids and the review runs.");
   });
-  ignore.command("clear").description("Cancel the active declaration (the spent budget is not refunded)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID)").action(async (opts) => {
+  ignore.command("clear").description("Cancel the active declaration (the spent budget is not refunded)").option("--session-id <id>", "Session id (defaults to $CLAUDE_SESSION_ID, then $CLAUDE_CODE_SESSION_ID)").action(async (opts) => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
     const token = tokenResult.ok ? tokenResult.data.token : void 0;
-    const sessionId = opts.sessionId || process.env.CLAUDE_SESSION_ID || void 0;
+    const sessionId = opts.sessionId || envSessionId();
     const found = resolveIgnoreState(ignoreStateKeys(token, sessionId));
     const active = resolveActive(found?.state ?? null, Math.floor(Date.now() / 1e3));
     if (!found || !active) {
@@ -38134,7 +38492,7 @@ function registerIgnoreCommand(program2) {
 
 // src/commands/waive.ts
 var import_node_crypto20 = require("node:crypto");
-var import_node_fs62 = require("node:fs");
+var import_node_fs64 = require("node:fs");
 function registerWaiveCommand(program2) {
   program2.command("waive <pattern-id>").description("Record an accepted-risk disposition for an open finding (voids when the file changes)").option("--file <path>", "File the finding is anchored to, REPO-RELATIVE (recommended \u2014 narrows the waive)").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action(async (patternId, opts) => {
     const globals = program2.opts();
@@ -38163,7 +38521,7 @@ function registerWaiveCommand(program2) {
     if (opts.file) {
       body2.file = opts.file;
       try {
-        body2.file_sha256 = (0, import_node_crypto20.createHash)("sha256").update((0, import_node_fs62.readFileSync)(opts.file)).digest("hex");
+        body2.file_sha256 = (0, import_node_crypto20.createHash)("sha256").update((0, import_node_fs64.readFileSync)(opts.file)).digest("hex");
       } catch {
         printError(`Cannot read ${opts.file} \u2014 run from the repo root, or omit --file to waive by pattern.`);
         process.exit(1);
@@ -38188,10 +38546,10 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init.ts
-var import_node_fs67 = require("node:fs");
+var import_node_fs69 = require("node:fs");
 var import_promises20 = require("node:fs/promises");
-var import_yaml6 = __toESM2(require_dist());
-var import_node_path52 = require("node:path");
+var import_yaml7 = __toESM2(require_dist());
+var import_node_path55 = require("node:path");
 var import_node_os11 = require("node:os");
 var import_node_child_process19 = require("node:child_process");
 
@@ -38271,7 +38629,7 @@ function printPhase(n, of, title, subtitle) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs63 = require("node:fs");
+var import_node_fs65 = require("node:fs");
 
 // src/lib/prereqs.ts
 var import_node_child_process16 = require("node:child_process");
@@ -38479,11 +38837,11 @@ async function buildReport() {
   const hooks = wiring.status;
   const provenance = cliProvenance();
   const telemetry = await checkTelemetry();
-  const hasConfig = (0, import_node_fs63.existsSync)(projectPath(CODACY_CONFIG_FILE));
+  const hasConfig = (0, import_node_fs65.existsSync)(projectPath(CODACY_CONFIG_FILE));
   const artifacts = {
-    standard: (0, import_node_fs63.existsSync)(projectPath(STANDARD_FILE)),
+    standard: (0, import_node_fs65.existsSync)(projectPath(STANDARD_FILE)),
     analysisConfig: hasConfig,
-    verityMd: (0, import_node_fs63.existsSync)(projectPath(VERITY_MD_FILE)),
+    verityMd: (0, import_node_fs65.existsSync)(projectPath(VERITY_MD_FILE)),
     analysisConfigIds: hasConfig ? validatePatternIds().status : "absent"
   };
   const next = [];
@@ -38642,8 +39000,8 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/migrate.ts
-var import_node_fs64 = require("node:fs");
-var import_node_path49 = require("node:path");
+var import_node_fs66 = require("node:fs");
+var import_node_path52 = require("node:path");
 var import_node_child_process17 = require("node:child_process");
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
 function defaultNpmRemover(pkg) {
@@ -38680,12 +39038,12 @@ async function runMigration(opts = {}) {
   return { actions, migrated: actions.length > 0 };
 }
 function migrateProjectDir(root, actions) {
-  const gateDir = (0, import_node_path49.join)(root, ".gate");
-  const verityDir = (0, import_node_path49.join)(root, ".verity");
-  if ((0, import_node_fs64.existsSync)(gateDir) && !(0, import_node_fs64.existsSync)(verityDir)) {
+  const gateDir = (0, import_node_path52.join)(root, ".gate");
+  const verityDir = (0, import_node_path52.join)(root, ".verity");
+  if ((0, import_node_fs66.existsSync)(gateDir) && !(0, import_node_fs66.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs64.existsSync)(gateDir) && (0, import_node_fs64.existsSync)(verityDir)) {
+  if ((0, import_node_fs66.existsSync)(gateDir) && (0, import_node_fs66.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -38706,13 +39064,13 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
     }
   }
   if (moved) {
-    if ((0, import_node_fs64.existsSync)(gateDir)) {
+    if ((0, import_node_fs66.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs64.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs66.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -38728,18 +39086,18 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs64.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs66.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
 }
 function migrateGlobalCredentials(home, actions) {
   if (!home) return;
-  const gateCreds = (0, import_node_path49.join)(home, ".gate", "credentials");
-  const verityCreds = (0, import_node_path49.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs64.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs64.existsSync)(verityCreds)) {
-    (0, import_node_fs64.mkdirSync)((0, import_node_path49.join)(home, ".verity"), { recursive: true });
+  const gateCreds = (0, import_node_path52.join)(home, ".gate", "credentials");
+  const verityCreds = (0, import_node_path52.join)(home, ".verity", "credentials");
+  if (!(0, import_node_fs66.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs66.existsSync)(verityCreds)) {
+    (0, import_node_fs66.mkdirSync)((0, import_node_path52.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -38761,8 +39119,8 @@ async function migrateLegacyHooks(root, actions) {
   }
 }
 async function migrateClaudeMd(root, actions) {
-  const claudeMd = (0, import_node_path49.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs64.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const claudeMd = (0, import_node_path52.join)(root, "CLAUDE.md");
+  const hadLegacyBlock = (0, import_node_fs66.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -38772,9 +39130,9 @@ async function migrateClaudeMd(root, actions) {
   }
 }
 function migrateStandardFile(root, actions) {
-  const gateMd = (0, import_node_path49.join)(root, "GATE.md");
-  const verityMd = (0, import_node_path49.join)(root, "VERITY.md");
-  if (!(0, import_node_fs64.existsSync)(gateMd) || (0, import_node_fs64.existsSync)(verityMd)) return;
+  const gateMd = (0, import_node_path52.join)(root, "GATE.md");
+  const verityMd = (0, import_node_path52.join)(root, "VERITY.md");
+  if (!(0, import_node_fs66.existsSync)(gateMd) || (0, import_node_fs66.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
@@ -38786,12 +39144,12 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs64.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs66.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
 async function migrateTelemetryHeaders(root, actions) {
-  const file = (0, import_node_path49.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs64.existsSync)(file)) return;
+  const file = (0, import_node_path52.join)(root, ".claude", "settings.local.json");
+  if (!(0, import_node_fs66.existsSync)(file)) return;
   let settings;
   try {
     settings = JSON.parse(readFileSyncSafe(file) || "{}");
@@ -38838,15 +39196,15 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
     toAppend.push(line2.replace(/\r$/, ""));
   }
   if (toAppend.length > 0) {
-    const sep6 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs64.writeFileSync)(verityCreds, verityContent + sep6 + toAppend.join("\n") + "\n");
+    const sep7 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
+    (0, import_node_fs66.writeFileSync)(verityCreds, verityContent + sep7 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs64.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs66.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs64.readFileSync)(path, "utf-8");
+    return (0, import_node_fs66.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
@@ -38861,35 +39219,35 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs64.renameSync)(from, to);
+    (0, import_node_fs66.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs64.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs64.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs66.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs66.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs64.renameSync)(from, to);
+    (0, import_node_fs66.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs64.cpSync)(from, to);
-    (0, import_node_fs64.rmSync)(from, { force: true });
+    (0, import_node_fs66.cpSync)(from, to);
+    (0, import_node_fs66.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
   let copied = 0;
   const walk2 = (relDir) => {
-    const srcDir = (0, import_node_path49.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs64.readdirSync)(srcDir)) {
-      const rel = relDir ? (0, import_node_path49.join)(relDir, entry) : entry;
-      const src = (0, import_node_path49.join)(gateDir, rel);
-      const dest = (0, import_node_path49.join)(verityDir, rel);
-      if ((0, import_node_fs64.statSync)(src).isDirectory()) {
+    const srcDir = (0, import_node_path52.join)(gateDir, relDir);
+    for (const entry of (0, import_node_fs66.readdirSync)(srcDir)) {
+      const rel = relDir ? (0, import_node_path52.join)(relDir, entry) : entry;
+      const src = (0, import_node_path52.join)(gateDir, rel);
+      const dest = (0, import_node_path52.join)(verityDir, rel);
+      if ((0, import_node_fs66.statSync)(src).isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs64.existsSync)(dest)) {
-        (0, import_node_fs64.mkdirSync)((0, import_node_path49.dirname)(dest), { recursive: true });
-        (0, import_node_fs64.cpSync)(src, dest);
+      } else if (!(0, import_node_fs66.existsSync)(dest)) {
+        (0, import_node_fs66.mkdirSync)((0, import_node_path52.dirname)(dest), { recursive: true });
+        (0, import_node_fs66.cpSync)(src, dest);
         copied++;
       }
     }
@@ -38898,22 +39256,22 @@ function carryLegacyContents(gateDir, verityDir) {
   return copied;
 }
 async function needsMigration(root = repoRoot()) {
-  const gateDir = (0, import_node_path49.join)(root, ".gate");
-  const verityDir = (0, import_node_path49.join)(root, ".verity");
-  if ((0, import_node_fs64.existsSync)(gateDir) && !(0, import_node_fs64.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs64.existsSync)(gateDir) && (0, import_node_fs64.existsSync)(verityDir)) {
-    if ((0, import_node_fs64.existsSync)((0, import_node_path49.join)(gateDir, "credentials")) && !(0, import_node_fs64.existsSync)((0, import_node_path49.join)(verityDir, "credentials"))) {
+  const gateDir = (0, import_node_path52.join)(root, ".gate");
+  const verityDir = (0, import_node_path52.join)(root, ".verity");
+  if ((0, import_node_fs66.existsSync)(gateDir) && !(0, import_node_fs66.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs66.existsSync)(gateDir) && (0, import_node_fs66.existsSync)(verityDir)) {
+    if ((0, import_node_fs66.existsSync)((0, import_node_path52.join)(gateDir, "credentials")) && !(0, import_node_fs66.existsSync)((0, import_node_path52.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs64.existsSync)((0, import_node_path49.join)(gateDir, "memory")) && !(0, import_node_fs64.existsSync)((0, import_node_path49.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs66.existsSync)((0, import_node_path52.join)(gateDir, "memory")) && !(0, import_node_fs66.existsSync)((0, import_node_path52.join)(verityDir, "memory"))) {
       return true;
     }
   }
-  const claudeMd = (0, import_node_path49.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs64.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  const claudeMd = (0, import_node_path52.join)(root, "CLAUDE.md");
+  if ((0, import_node_fs66.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs64.existsSync)((0, import_node_path49.join)(root, "GATE.md")) && !(0, import_node_fs64.existsSync)((0, import_node_path49.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs66.existsSync)((0, import_node_path52.join)(root, "GATE.md")) && !(0, import_node_fs66.existsSync)((0, import_node_path52.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -39194,11 +39552,11 @@ async function promptMultiSelect(question, choices, fallback) {
 }
 
 // src/lib/prove/lean-install.ts
-var import_node_fs65 = require("node:fs");
+var import_node_fs67 = require("node:fs");
 var import_node_crypto21 = require("node:crypto");
 var import_node_child_process18 = require("node:child_process");
 var import_node_os10 = require("node:os");
-var import_node_path50 = require("node:path");
+var import_node_path53 = require("node:path");
 var import_promises18 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
 var RELEASES = "https://releases.lean-lang.org/lean4";
@@ -39209,10 +39567,10 @@ function freeBytes(dir) {
   let d = dir;
   for (let i2 = 0; i2 < 64; i2++) {
     try {
-      const st = (0, import_node_fs65.statfsSync)(d);
+      const st = (0, import_node_fs67.statfsSync)(d);
       return Number(st.bavail) * Number(st.bsize);
     } catch {
-      const up = (0, import_node_path50.join)(d, "..");
+      const up = (0, import_node_path53.join)(d, "..");
       if (up === d) return null;
       d = up;
     }
@@ -39234,7 +39592,7 @@ function expectedSha256(asset, version = pinnedVersion()) {
 function sha256File(path) {
   return new Promise((resolve9, reject) => {
     const hash = (0, import_node_crypto21.createHash)("sha256");
-    (0, import_node_fs65.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve9(hash.digest("hex"))).on("error", reject);
+    (0, import_node_fs67.createReadStream)(path).on("data", (chunk) => hash.update(chunk)).on("end", () => resolve9(hash.digest("hex"))).on("error", reject);
   });
 }
 async function verifyDownload(zip, asset, version = pinnedVersion()) {
@@ -39254,7 +39612,7 @@ function leanAssetName(version = pinnedVersion()) {
   return suffix ? `lean-${v}-${suffix}.zip` : null;
 }
 function pinnedVersionDir(env = process.env) {
-  return (0, import_node_path50.join)(verityLeanHome(env), pinnedVersion());
+  return (0, import_node_path53.join)(verityLeanHome(env), pinnedVersion());
 }
 function lakeBinary() {
   return (0, import_node_os10.platform)() === "win32" ? "lake.exe" : "lake";
@@ -39265,12 +39623,12 @@ function unzip(zip, dest) {
   for (const [cmd, args2] of attempts) {
     try {
       (0, import_node_child_process18.execFileSync)(cmd, args2, { stdio: ["ignore", "ignore", "pipe"], timeout: 15 * 6e4 });
-      if ((0, import_node_fs65.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
+      if ((0, import_node_fs67.readdirSync)(dest).length > 0) return { ok: true, via: cmd };
       errors.push(`${cmd}: produced nothing`);
     } catch (err2) {
       errors.push(`${cmd}: ${String(err2.message).split("\n")[0].slice(0, 120)}`);
       try {
-        for (const e of (0, import_node_fs65.readdirSync)(dest)) (0, import_node_fs65.rmSync)((0, import_node_path50.join)(dest, e), { recursive: true, force: true });
+        for (const e of (0, import_node_fs67.readdirSync)(dest)) (0, import_node_fs67.rmSync)((0, import_node_path53.join)(dest, e), { recursive: true, force: true });
       } catch {
       }
     }
@@ -39296,7 +39654,7 @@ async function download(url, dest, onProgress, stallMs = DOWNLOAD_STALL_MS) {
       seen += chunk.length;
       onProgress(seen, total);
     });
-    await (0, import_promises18.pipeline)(stream, (0, import_node_fs65.createWriteStream)(dest), { signal: ctrl.signal });
+    await (0, import_promises18.pipeline)(stream, (0, import_node_fs67.createWriteStream)(dest), { signal: ctrl.signal });
   } catch (err2) {
     if (ctrl.signal.aborted) throw new Error(`download stalled: nothing received for ${Math.round(stallMs / 1e3)} s`);
     throw err2;
@@ -39346,10 +39704,10 @@ async function installLean(opts = {}) {
     const gb = (n) => (n / 1024 ** 3).toFixed(1);
     return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
   }
-  const tmp = (0, import_node_path50.join)(home, ".tmp");
-  (0, import_node_fs65.rmSync)(tmp, { recursive: true, force: true });
-  (0, import_node_fs65.mkdirSync)(tmp, { recursive: true });
-  const zip = (0, import_node_path50.join)(tmp, asset);
+  const tmp = (0, import_node_path53.join)(home, ".tmp");
+  (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs67.mkdirSync)(tmp, { recursive: true });
+  const zip = (0, import_node_path53.join)(tmp, asset);
   say(`downloading ${url}`);
   let lastPct = -1;
   try {
@@ -39362,41 +39720,41 @@ async function installLean(opts = {}) {
       }
     });
   } catch (err2) {
-    (0, import_node_fs65.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: err2.message };
   }
   say("verifying checksum");
   const verified = await verifyDownload(zip, asset);
   if (!verified.ok) {
-    (0, import_node_fs65.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: verified.error };
   }
   say("unpacking (this takes a minute)");
-  const unpack = (0, import_node_path50.join)(tmp, "unpack");
-  (0, import_node_fs65.mkdirSync)(unpack);
+  const unpack = (0, import_node_path53.join)(tmp, "unpack");
+  (0, import_node_fs67.mkdirSync)(unpack);
   const unpacked = unzip(zip, unpack);
   if (!unpacked.ok) {
-    (0, import_node_fs65.rmSync)(tmp, { recursive: true, force: true });
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: `unpack failed: ${unpacked.error}` };
   }
-  const entries = (0, import_node_fs65.readdirSync)(unpack);
-  const top = entries.length === 1 && (0, import_node_fs65.statSync)((0, import_node_path50.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path50.join)(unpack, entries[0]) : unpack;
-  if (!(0, import_node_fs65.existsSync)((0, import_node_path50.join)(top, "bin", lakeBinary()))) {
-    (0, import_node_fs65.rmSync)(tmp, { recursive: true, force: true });
+  const entries = (0, import_node_fs67.readdirSync)(unpack);
+  const top = entries.length === 1 && (0, import_node_fs67.statSync)((0, import_node_path53.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path53.join)(unpack, entries[0]) : unpack;
+  if (!(0, import_node_fs67.existsSync)((0, import_node_path53.join)(top, "bin", lakeBinary()))) {
+    (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: "the archive did not contain bin/lake" };
   }
-  (0, import_node_fs65.rmSync)(dir, { recursive: true, force: true });
-  (0, import_node_fs65.mkdirSync)(home, { recursive: true });
-  (0, import_node_fs65.renameSync)(top, dir);
-  (0, import_node_fs65.rmSync)(tmp, { recursive: true, force: true });
+  (0, import_node_fs67.rmSync)(dir, { recursive: true, force: true });
+  (0, import_node_fs67.mkdirSync)(home, { recursive: true });
+  (0, import_node_fs67.renameSync)(top, dir);
+  (0, import_node_fs67.rmSync)(tmp, { recursive: true, force: true });
   return { ok: true, dir };
 }
 
 // src/lib/remote-config.ts
-var import_node_fs66 = require("node:fs");
+var import_node_fs68 = require("node:fs");
 var import_promises19 = require("node:fs/promises");
-var import_node_path51 = require("node:path");
-var import_yaml5 = __toESM2(require_dist());
+var import_node_path54 = require("node:path");
+var import_yaml6 = __toESM2(require_dist());
 var IGNORE_RIDER = "verityignore";
 async function fetchRemoteSetup(opts) {
   const standard = await apiRequest({
@@ -39436,11 +39794,11 @@ async function adoptRemoteSetup(found, opts) {
   const content = { ...found.standard.content };
   const rider = typeof content[IGNORE_RIDER] === "string" ? content[IGNORE_RIDER] : null;
   delete content[IGNORE_RIDER];
-  await writeOut(STANDARD_FILE, (0, import_yaml5.stringify)(content));
+  await writeOut(STANDARD_FILE, (0, import_yaml6.stringify)(content));
   written.push(STANDARD_FILE);
   if (rider !== null) {
     const localIgnore = projectPath(VERITYIGNORE_FILE);
-    if (!(0, import_node_fs66.existsSync)(localIgnore)) {
+    if (!(0, import_node_fs68.existsSync)(localIgnore)) {
       await writeOut(VERITYIGNORE_FILE, rider);
       written.push(VERITYIGNORE_FILE);
     } else {
@@ -39471,9 +39829,9 @@ async function adoptRemoteSetup(found, opts) {
   written.push(VERITY_MD_FILE);
   return { written, notes };
 }
-async function writeOut(relative6, body2) {
-  const target = projectPath(relative6);
-  await (0, import_promises19.mkdir)((0, import_node_path51.dirname)(target), { recursive: true });
+async function writeOut(relative7, body2) {
+  const target = projectPath(relative7);
+  await (0, import_promises19.mkdir)((0, import_node_path54.dirname)(target), { recursive: true });
   await (0, import_promises19.writeFile)(target, body2);
 }
 function describeRemote(found) {
@@ -39590,15 +39948,15 @@ async function runOptionalAuth(resolution, opts = {}) {
 }
 function resolveDataDir2() {
   const candidates2 = [
-    (0, import_node_path52.join)(__dirname, "..", "data"),
+    (0, import_node_path55.join)(__dirname, "..", "data"),
     // installed: node_modules/@codacy/verity-cli/data
-    (0, import_node_path52.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path55.join)(__dirname, "..", "..", "data"),
     // edge case: nested resolution
-    (0, import_node_path52.join)(process.cwd(), "cli", "data")
+    (0, import_node_path55.join)(process.cwd(), "cli", "data")
     // local dev: running from repo root
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs67.existsSync)((0, import_node_path52.join)(candidate, "skills"))) {
+    if ((0, import_node_fs69.existsSync)((0, import_node_path55.join)(candidate, "skills"))) {
       return candidate;
     }
   }
@@ -39614,9 +39972,9 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out2 = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs67.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs69.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk2((0, import_node_path52.join)(d, e.name), rel);
+        if (e.isDirectory()) walk2((0, import_node_path55.join)(d, e.name), rel);
         else if (e.isFile()) out2.push(rel);
       }
     };
@@ -39627,8 +39985,8 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      const a = await (0, import_promises20.readFile)((0, import_node_path52.join)(src, rel), "utf-8");
-      const b = await (0, import_promises20.readFile)((0, import_node_path52.join)(dest, rel), "utf-8");
+      const a = await (0, import_promises20.readFile)((0, import_node_path55.join)(src, rel), "utf-8");
+      const b = await (0, import_promises20.readFile)((0, import_node_path55.join)(dest, rel), "utf-8");
       if (a !== b) return false;
     }
     return true;
@@ -39724,7 +40082,7 @@ function parseTelemetryAnswer(raw) {
   return null;
 }
 function insideClaudeCode() {
-  return !!process.env.CLAUDECODE || !!process.env.CLAUDE_SESSION_ID;
+  return !!process.env.CLAUDECODE || !!envSessionId();
 }
 function resumeDeferredPending(previous) {
   return previous?.telemetry === "deferred";
@@ -39831,13 +40189,13 @@ async function synthesizeLocally(opts) {
 async function healStaleAnalysisConfig(globals) {
   const configPath = projectPath(CODACY_CONFIG_FILE);
   const standardPath = projectPath(STANDARD_FILE);
-  if (!(0, import_node_fs67.existsSync)(configPath) || !(0, import_node_fs67.existsSync)(standardPath)) return;
+  if (!(0, import_node_fs69.existsSync)(configPath) || !(0, import_node_fs69.existsSync)(standardPath)) return;
   const validation = validatePatternIds();
   if (validation.status !== "invalid") return;
   printWarn("  Your analysis config names pattern ids that no longer resolve \u2014 those tools were");
   printWarn("  running silently with nothing enabled. Re-deriving it from your Standard\u2026");
   try {
-    const content = (0, import_yaml6.parse)(await (0, import_promises20.readFile)(standardPath, "utf-8"));
+    const content = (0, import_yaml7.parse)(await (0, import_promises20.readFile)(standardPath, "utf-8"));
     const derived = await deriveConfigForStandard(content);
     for (const path of derived.written) printInfo(`  ${path} \u2713 (re-derived)`);
     for (const note of derived.notes) printWarn(`  ${note}`);
@@ -39928,17 +40286,17 @@ async function handoffToSetup(enabled, claudeInstalled) {
 async function installSkills(force, step) {
   step("Installing skills");
   const dataDir = resolveDataDir2();
-  const skillsSource = (0, import_node_path52.join)(dataDir, "skills");
+  const skillsSource = (0, import_node_path55.join)(dataDir, "skills");
   const skillsDest = ".claude/skills";
   let skillsInstalled = 0;
   for (const skill of SKILLS) {
-    const src = (0, import_node_path52.join)(skillsSource, skill);
-    const dest = (0, import_node_path52.join)(skillsDest, skill);
-    if (!(0, import_node_fs67.existsSync)(src)) {
+    const src = (0, import_node_path55.join)(skillsSource, skill);
+    const dest = (0, import_node_path55.join)(skillsDest, skill);
+    if (!(0, import_node_fs69.existsSync)(src)) {
       printWarn(`  Skill data not found: ${skill}`);
       continue;
     }
-    if ((0, import_node_fs67.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
+    if ((0, import_node_fs69.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) {
       skillsInstalled++;
       continue;
     }
@@ -40087,7 +40445,7 @@ async function offerFormalVerification(defaultsOnly, pluginMode) {
   if (!toolchain) {
     const dir = pinnedVersionDir();
     const home = (0, import_node_os11.homedir)();
-    const shown = dir.startsWith(home + import_node_path52.sep) ? `~${dir.slice(home.length)}` : dir;
+    const shown = dir.startsWith(home + import_node_path55.sep) ? `~${dir.slice(home.length)}` : dir;
     console.log("");
     console.log(`    "yes" installs Lean 4 (${LEAN_DOWNLOAD_SIZE}) into ${shown}`);
   }
@@ -40146,7 +40504,7 @@ function registerInitCommand(program2) {
     const staleMarker = clearStalePluginMarker();
     const pluginMode = opts.plugin === false ? false : opts.pluginMode ?? pluginActiveHere();
     const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-    const isProject = projectMarkers.some((m) => (0, import_node_fs67.existsSync)(m));
+    const isProject = projectMarkers.some((m) => (0, import_node_fs69.existsSync)(m));
     if (!isProject) {
       printError("No project detected in the current directory.");
       printInfo('Run "verity init" from your project root.');
@@ -40249,7 +40607,7 @@ function registerInitCommand(program2) {
       untrackMemory: opts.untrackMemory === true,
       untrackState: opts.untrackState === true
     });
-    const globalVerityDir = (0, import_node_path52.join)(process.env.HOME ?? "", ".verity");
+    const globalVerityDir = (0, import_node_path55.join)(process.env.HOME ?? "", ".verity");
     await (0, import_promises20.mkdir)(globalVerityDir, { recursive: true });
     console.log("");
     step("Wiring Claude Code hooks");
@@ -40324,7 +40682,7 @@ function registerInitCommand(program2) {
     }
     step("Your project's Standard");
     let haveStandard = false;
-    if ((0, import_node_fs67.existsSync)(projectPath(STANDARD_FILE))) {
+    if ((0, import_node_fs69.existsSync)(projectPath(STANDARD_FILE))) {
       printInfo("  This project already has .verity/standard.yaml \u2014 keeping it.");
       haveStandard = true;
     } else {
@@ -40354,7 +40712,7 @@ function registerInitCommand(program2) {
         ...telemetryChoice ? { telemetry: telemetryChoice } : {},
         init: {
           completed_at: (/* @__PURE__ */ new Date()).toISOString(),
-          cli_version: true ? "0.34.1" : "dev"
+          cli_version: true ? "0.34.2-experimental.312358d" : "dev"
         }
       });
     } catch (err2) {
@@ -40404,8 +40762,8 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs68 = require("node:fs");
-var import_node_path53 = require("node:path");
+var import_node_fs70 = require("node:fs");
+var import_node_path56 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
     const dryRun = opts.dryRun ?? false;
@@ -40414,11 +40772,11 @@ function registerUninstallCommand(program2) {
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
     for (const name2 of PROJECT_SKILL_NAMES) {
-      const dir = (0, import_node_path53.join)(skillsRoot, name2);
-      if ((0, import_node_fs68.existsSync)(dir)) {
+      const dir = (0, import_node_path56.join)(skillsRoot, name2);
+      if ((0, import_node_fs70.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name2}/`,
-          apply: () => (0, import_node_fs68.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs70.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -40432,24 +40790,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs68.existsSync)(verityDir)) {
+    if ((0, import_node_fs70.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs68.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs70.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs68.existsSync)(verityMd)) {
+      if ((0, import_node_fs70.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs68.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs70.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs68.existsSync)(path) && (0, import_node_fs68.statSync)(path).isDirectory() && (0, import_node_fs68.readdirSync)(path).length === 0) {
-        (0, import_node_fs68.rmdirSync)(path);
+      if ((0, import_node_fs70.existsSync)(path) && (0, import_node_fs70.statSync)(path).isDirectory() && (0, import_node_fs70.readdirSync)(path).length === 0) {
+        (0, import_node_fs70.rmdirSync)(path);
       }
     };
     actions.push({
@@ -40460,11 +40818,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path53.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs68.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path56.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs70.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs68.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs70.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -40491,9 +40849,26 @@ function registerUninstallCommand(program2) {
 
 // src/commands/task.ts
 function memoryPath() {
-  const sid = process.env.CLAUDE_SESSION_ID;
+  const sid = envSessionId();
   return sid ? `/memory?session_id=${encodeURIComponent(sid)}` : "/memory";
 }
+var TASK_STATUSES = ["active", "closed", "merged"];
+var TASK_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isTaskId(value) {
+  return typeof value === "string" && TASK_ID.test(value);
+}
+function taskListPath(status) {
+  if (status === void 0) return "/tasks";
+  if (!TASK_STATUSES.includes(status)) return null;
+  return `/tasks?status=${encodeURIComponent(status)}`;
+}
+function taskActionPath(taskId, action) {
+  return isTaskId(taskId) ? `/tasks/${encodeURIComponent(taskId)}/${action}` : null;
+}
+function refuse(message) {
+  printError(message);
+  process.exit(1);
+}
 function timeAgo2(isoDate) {
   const ms = Date.now() - new Date(isoDate).getTime();
   const mins = Math.floor(ms / 6e4);
@@ -40521,10 +40896,11 @@ function registerTaskCommands(program2) {
   task.command("list").description("List tasks").option("--status <status>", "Filter by status (active, closed, merged)").action(async (opts) => {
     const globals = program2.opts();
     const { token, serviceUrl } = await getAuth(globals);
-    const statusParam = opts.status ? `?status=${opts.status}` : "";
+    const listPath = taskListPath(opts.status);
+    if (!listPath) refuse(`Unknown status ${JSON.stringify(String(opts.status).slice(0, 40))} \u2014 use one of: ${TASK_STATUSES.join(", ")}`);
     const result = await apiRequest({
       method: "GET",
-      path: `/tasks${statusParam}`,
+      path: listPath,
       serviceUrl,
       token,
       verbose: globals.verbose,
@@ -40573,9 +40949,11 @@ function registerTaskCommands(program2) {
       }
       taskId = ct.id;
     }
+    const closePath = taskActionPath(taskId, "close");
+    if (!closePath) refuse(`Not a task id (expected a UUID): ${JSON.stringify(String(taskId).slice(0, 80))}`);
     const result = await apiRequest({
       method: "POST",
-      path: `/tasks/${taskId}/close`,
+      path: closePath,
       serviceUrl,
       token,
       verbose: globals.verbose,
@@ -40622,9 +41000,11 @@ function registerTaskCommands(program2) {
       }
       taskId = ct.id;
     }
+    const renamePath = taskActionPath(taskId, "rename");
+    if (!renamePath) refuse(`Not a task id (expected a UUID): ${JSON.stringify(String(taskId).slice(0, 80))}`);
     const result = await apiRequest({
       method: "POST",
-      path: `/tasks/${taskId}/rename`,
+      path: renamePath,
       serviceUrl,
       token,
       body: { label: label2.slice(0, 120) },
@@ -40639,6 +41019,9 @@ function registerTaskCommands(program2) {
   });
   task.command("merge <source> <target>").description("Merge source task into target task").action(async (source2, target) => {
     const globals = program2.opts();
+    if (!isTaskId(source2) || !isTaskId(target)) {
+      refuse("task merge takes two task ids (UUIDs): `verity task merge <source> <target>`");
+    }
     const { token, serviceUrl } = await getAuth(globals);
     const result = await apiRequest({
       method: "POST",
@@ -40658,8 +41041,8 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs69 = require("node:fs");
-var import_node_path54 = require("node:path");
+var import_node_fs71 = require("node:fs");
+var import_node_path57 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -40668,78 +41051,95 @@ function registerResetCommand(program2) {
         const tokenResult = await resolveToken(globals.token);
         const urlResult = await resolveServiceUrl(globals.serviceUrl);
         if (tokenResult.ok && urlResult.ok) {
+          const sessionId = envSessionId();
           const mem = await apiRequest({
             method: "GET",
-            path: process.env.CLAUDE_SESSION_ID ? `/memory?session_id=${encodeURIComponent(process.env.CLAUDE_SESSION_ID)}` : "/memory",
+            path: sessionId ? `/memory?session_id=${encodeURIComponent(sessionId)}` : "/memory",
             serviceUrl: urlResult.data,
             token: tokenResult.data.token,
             timeout: 1e4,
             cmd: "reset_lookup"
           });
           const ct = mem.ok ? mem.data.current_task : null;
-          if (ct?.id) {
+          const closePath = ct?.id ? taskActionPath(ct.id, "close") : null;
+          if (ct?.id && !closePath) {
+            printError("The current task in the service response has a malformed id \u2014 not closing it.");
+          }
+          if (closePath) {
             const closeResult = await apiRequest({
               method: "POST",
-              path: `/tasks/${ct.id}/close`,
+              path: closePath,
               serviceUrl: urlResult.data,
               token: tokenResult.data.token,
               timeout: 1e4,
               cmd: "reset_close"
             });
             if (closeResult.ok) {
-              printInfo(`Closed task: "${ct.label}"`);
+              printInfo(`Closed task: "${terminalText(ct?.label, 200) || "(unnamed)"}"`);
             }
           }
         }
       } catch {
       }
     }
-    const cacheDir = projectPath(CACHE_DIR);
-    let purged = 0;
-    if ((0, import_node_fs69.existsSync)(cacheDir)) {
-      for (const entry of (0, import_node_fs69.readdirSync)(cacheDir)) {
-        if (entry.startsWith("pending-")) {
-          try {
-            (0, import_node_fs69.unlinkSync)((0, import_node_path54.join)(cacheDir, entry));
-            purged++;
-          } catch {
-          }
-        }
-      }
-    }
+    const purged = purgeVerityDir((0, import_node_path57.basename)(CACHE_DIR), (name2) => name2.startsWith("pending-"));
+    if (purged === null) printError(`Did not purge ${CACHE_DIR}: it is not a directory inside ${VERITY_DIR}.`);
+    const stateDir2 = projectPath(VERITY_DIR);
     const filesToClear = [
-      projectPath(INTENT_FILE),
-      projectPath(HASH_FILE),
-      projectPath(BASELINE_SHA_FILE),
-      projectPath(`${VERITY_DIR}/.iteration-count`),
-      projectPath(`${VERITY_DIR}/.last-analysis`)
+      (0, import_node_path57.basename)(INTENT_FILE),
+      (0, import_node_path57.basename)(HASH_FILE),
+      (0, import_node_path57.basename)(BASELINE_SHA_FILE),
+      ".iteration-count",
+      ".last-analysis"
     ];
-    for (const file of filesToClear) {
-      if ((0, import_node_fs69.existsSync)(file)) {
-        try {
-          (0, import_node_fs69.writeFileSync)(file, "");
-        } catch {
-        }
+    for (const name2 of filesToClear) {
+      if (lstatOrNull((0, import_node_path57.join)(stateDir2, name2)) && !replaceInRoot(stateDir2, name2, "")) {
+        printError(`Did not clear ${VERITY_DIR}/${name2}: it is not a regular file inside ${VERITY_DIR}.`);
       }
     }
     if (opts.all) {
-      const logsDir = projectPath(`${VERITY_DIR}/.logs`);
-      if ((0, import_node_fs69.existsSync)(logsDir)) {
-        for (const entry of (0, import_node_fs69.readdirSync)(logsDir)) {
-          try {
-            (0, import_node_fs69.unlinkSync)((0, import_node_path54.join)(logsDir, entry));
-          } catch {
-          }
-        }
-      }
-      printInfo("Cleared diagnostic logs.");
+      const logs = purgeVerityDir(".logs", () => true);
+      if (logs === null) printError(`Did not clear ${VERITY_DIR}/.logs: it is not a directory inside ${VERITY_DIR}.`);
+      else printInfo("Cleared diagnostic logs.");
     }
-    printInfo(`Reset complete. Purged ${purged} cached request${purged !== 1 ? "s" : ""}.${opts.keepTask ? "" : " Next run starts a new task."}`);
+    const count = purged ?? 0;
+    printInfo(`Reset complete. Purged ${count} cached request${count !== 1 ? "s" : ""}.${opts.keepTask ? "" : " Next run starts a new task."}`);
   });
 }
+function lstatOrNull(path) {
+  try {
+    return (0, import_node_fs71.lstatSync)(path);
+  } catch {
+    return null;
+  }
+}
+function purgeVerityDir(child, select) {
+  const verityDir = projectPath(VERITY_DIR);
+  const dir = (0, import_node_path57.join)(verityDir, child);
+  const parent = lstatOrNull(verityDir);
+  const st = lstatOrNull(dir);
+  if (!st) return 0;
+  if (!parent || parent.isSymbolicLink() || !parent.isDirectory()) return null;
+  if (st.isSymbolicLink() || !st.isDirectory()) return null;
+  try {
+    if ((0, import_node_fs71.realpathSync)(dir) !== (0, import_node_path57.join)((0, import_node_fs71.realpathSync)(verityDir), child)) return null;
+  } catch {
+    return null;
+  }
+  let removed = 0;
+  for (const entry of (0, import_node_fs71.readdirSync)(dir, { withFileTypes: true })) {
+    if (entry.isDirectory() || !select(entry.name)) continue;
+    try {
+      (0, import_node_fs71.unlinkSync)((0, import_node_path57.join)(dir, entry.name));
+      removed++;
+    } catch {
+    }
+  }
+  return removed;
+}
 
 // src/commands/reflect.ts
-var import_node_fs70 = require("node:fs");
+var import_node_fs72 = require("node:fs");
 
 // src/lib/reflection-globs.ts
 var MAX_GLOBS = 6;
@@ -40777,7 +41177,7 @@ async function writeNodeToDisk(args2) {
       { treePaths: listTrackedFiles(), recordBaseline: false }
     );
     if (written === 0) return false;
-    return (0, import_node_fs70.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
+    return (0, import_node_fs72.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
   } catch {
     return false;
   }
@@ -40808,7 +41208,7 @@ function registerReflectCommand(program2) {
     let taskResolution = "flag";
     let inheritedGlobs = [];
     if (!taskId) {
-      const sessionId = process.env.CLAUDE_SESSION_ID ?? "";
+      const sessionId = envSessionId() ?? "";
       const memPath = sessionId ? `/memory?session_id=${encodeURIComponent(sessionId)}` : "/memory";
       const mem = await apiRequest({
         method: "GET",
@@ -40853,7 +41253,7 @@ function registerReflectCommand(program2) {
     const userInput = input.text;
     if (userInput) {
       const validKinds = ["decision", "gotcha", "pattern", "security", "quality", "intent", "domain", "integration"];
-      const kind = validKinds.includes(opts.kind) ? opts.kind : "gotcha";
+      const kind2 = validKinds.includes(opts.kind) ? opts.kind : "gotcha";
       const confirmed = opts.confirmed === true;
       const source2 = confirmed ? "user" : "agent";
       const explicitGlobs = Array.isArray(opts.fileGlobs) ? opts.fileGlobs.map((g) => g.trim()).filter(Boolean) : [];
@@ -40865,7 +41265,7 @@ function registerReflectCommand(program2) {
         serviceUrl,
         token,
         body: {
-          kind,
+          kind: kind2,
           title: userInput.slice(0, 200),
           body: userInput,
           domains: [],
@@ -41214,9 +41614,9 @@ function registerRunCommand(program2) {
 }
 
 // src/commands/telemetry.ts
-var import_node_fs71 = require("node:fs");
+var import_node_fs73 = require("node:fs");
 async function recordTelemetryChoice(choice) {
-  if (!(0, import_node_fs71.existsSync)(projectPath(SETUP_STATE_FILE))) return;
+  if (!(0, import_node_fs73.existsSync)(projectPath(SETUP_STATE_FILE))) return;
   try {
     if ((await readSetupState())?.telemetry === choice) return;
     await writeSetupState({ telemetry: choice });
@@ -41293,8 +41693,8 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/commands/prove.ts
-var import_node_fs72 = require("node:fs");
-var import_node_path55 = require("node:path");
+var import_node_fs74 = require("node:fs");
+var import_node_path58 = require("node:path");
 
 // src/lib/prove/hint-pool.ts
 var STOP2 = /* @__PURE__ */ new Set([
@@ -41436,7 +41836,7 @@ function registerProveCommand(program2) {
       process.exit(2);
     }
     const limit = Math.max(1, Math.min(50, Number(opts.limit) || 10));
-    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path55.relative)(root, (0, import_node_path55.resolve)(p)) || ".") });
+    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path58.relative)(root, (0, import_node_path58.resolve)(p)) || ".") });
     if (opts.hint && paths.length === 0) {
       const hit = hintMatches(root, opts.hint);
       if (hit.files.length > 0) {
@@ -41490,7 +41890,7 @@ function registerProveCommand(program2) {
   });
   prove.command("check [model]").description("Elaborate a model (or every model) with the local Lean toolchain and report each property").option("--timeout <ms>", "Per-model timeout in ms", "120000").option("--json", "Machine-readable output").action((model, opts) => {
     const root = repoRoot();
-    if (!(0, import_node_fs72.existsSync)((0, import_node_path55.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs74.existsSync)((0, import_node_path58.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41514,7 +41914,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
     const reports = [];
     for (const f of files) {
       const report = checkModel(tc, root, f, { timeoutMs: Math.max(1e3, Number(opts.timeout) || 12e4) });
-      report.file = (0, import_node_path55.relative)(root, f);
+      report.file = (0, import_node_path58.relative)(root, f);
       reports.push(report);
       try {
         writeResult(root, report);
@@ -41552,7 +41952,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
       printError("Not logged in \u2014 replays run on the Verity service. Run `verity login` first.");
       process.exit(2);
     }
-    if (!(0, import_node_fs72.existsSync)((0, import_node_path55.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs74.existsSync)((0, import_node_path58.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -41583,7 +41983,7 @@ ${report.error ?? ""}`);
       printInfo(opts.property ? `${model} ${opts.property} has no counterexample to replay` : `${model} has no counterexample to replay`);
       return;
     }
-    const modelSource = readRegularFileInRoot(root, (0, import_node_path55.relative)(root, file), 512 * 1024);
+    const modelSource = readRegularFileInRoot(root, (0, import_node_path58.relative)(root, file), 512 * 1024);
     if (!opts.json) printInfo(`replaying ${targets.length} counterexample(s) of ${model} in network-less containers (${Math.min(targets.length, REPLAY_CONCURRENCY)} at a time)\u2026`);
     const outcomes = await mapPool(targets, REPLAY_CONCURRENCY, async (p) => {
       const brief = buildReplayBrief(root, report, p, modelSource.ok ? modelSource.content : "");
@@ -41603,7 +42003,7 @@ ${report.error ?? ""}`);
   });
   prove.command("auto [files...]").description("The formal phase the pre-push guard runs: select one risky symbol among changed files, generate a model, check it, replay counterexamples (default files: the commits ahead of upstream)").option("--deadline <ms>", "Budget for the whole phase", "170000").option("--json", "Machine-readable output").action(async (paths, opts) => {
     const root = repoRoot();
-    let files = paths.map((p) => (0, import_node_path55.relative)(root, (0, import_node_path55.resolve)(p)));
+    let files = paths.map((p) => (0, import_node_path58.relative)(root, (0, import_node_path58.resolve)(p)));
     if (files.length === 0) {
       const ahead = runGitSync(root, ["diff", "--name-only", "@{upstream}...HEAD"]);
       const fallback = ahead.ok ? ahead : runGitSync(root, ["diff", "--name-only", "HEAD~1..HEAD"]);
@@ -41613,8 +42013,10 @@ ${report.error ?? ""}`);
       printInfo("No changed files to consider (nothing ahead of upstream). Pass paths explicitly.");
       return;
     }
-    const prep = await prepareFormalPhase(root, process.env, await proveAuth(program2) ?? void 0);
+    const auth2 = await proveAuth(program2);
+    const prep = await prepareFormalPhase(root, process.env, auth2 ?? void 0);
     const outcome = prep.ok ? await runFormalPhaseWithin({ root, files, deadlineAt: Date.now() + Math.max(3e4, Number(opts.deadline) || 17e4), deps: prep.deps }).catch((err2) => skippedOutcome("error", String(err2?.message ?? err2).slice(0, 200))) : skippedOutcome(prep.skip, prep.detail);
+    if (auth2) await postPhaseRecord(outcome, { moment: "on-demand", parentRunId: null, pushedFiles: [] }, auth2);
     if (opts.json) {
       printJson(outcome);
     } else {
@@ -41675,7 +42077,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
     let revise;
     if (opts.revise) {
       const existing = resolveModelFile(root, opts.revise);
-      const src = existing ? readRegularFileInRoot(root, (0, import_node_path55.relative)(root, existing), 64 * 1024) : null;
+      const src = existing ? readRegularFileInRoot(root, (0, import_node_path58.relative)(root, existing), 64 * 1024) : null;
       if (!src || !src.ok || !opts.note) {
         printError("--revise needs an existing model under Models/ and --note - with what the replay showed on stdin");
         process.exit(2);
@@ -41688,21 +42090,22 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
       printError("Verity library did not build");
       process.exit(2);
     }
-    const deps = defaultDeps({ auth: auth2 ?? void 0, apiKey: process.env.VERITY_PROVE_DIRECT === "1" ? process.env.OPENAI_API_KEY : void 0, toolchain: tc, tier: "deep" });
+    const deps = await onDemandDeps(root, { auth: auth2 ?? void 0, apiKey: process.env.VERITY_PROVE_DIRECT === "1" ? process.env.OPENAI_API_KEY : void 0, toolchain: tc });
     if (!opts.json) printInfo(`asking the Verity service for a model of ${symbol || `${file}:${opts.lines}`} \u2026`);
     const out2 = await generateAndCheck(root, { file, symbol: symbol || `${file}:${opts.lines}`, lines, hint: opts.hint, revise }, { deps, maxRounds: 3 });
     if (!out2.ok) {
       if (opts.json) printJson(out2);
-      else printError(`${out2.error} (${out2.rounds} round(s)${out2.costUsd ? `, $${out2.costUsd.toFixed(2)}` : ""}) \u2014 write the model by hand (Models/README.md) or narrow the target`);
+      else printError(out2.rounds === 0 ? out2.error : `${out2.error} (${out2.rounds} round(s)${out2.costUsd ? `, $${out2.costUsd.toFixed(2)}` : ""}) \u2014 write the model by hand (Models/README.md) or narrow the target`);
       process.exit(2);
     }
+    if (out2.warning && !opts.json) printWarn(out2.warning);
     try {
       writeResult(root, out2.report);
     } catch (err2) {
       if (!(err2 instanceof SafeWriteError)) throw err2;
     }
     if (opts.json) {
-      printJson({ name: out2.name, file: out2.file, rounds: out2.rounds, cost_usd: out2.costUsd, report: { ...out2.report, passes: reportPasses(out2.report), summary: summarize(out2.report) } });
+      printJson({ name: out2.name, file: out2.file, rounds: out2.rounds, cost_usd: out2.costUsd, ...out2.warning ? { warning: out2.warning } : {}, report: { ...out2.report, passes: reportPasses(out2.report), summary: summarize(out2.report) } });
       return;
     }
     printInfo(`wrote ${out2.file} (${out2.rounds} round(s)${out2.costUsd ? `, $${out2.costUsd.toFixed(2)}` : ""})`);
@@ -41714,8 +42117,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("waive <file>").description("Dismiss the remembered formal finding(s) on a file for its current bytes \u2014 the accepted-risk path for a formal block").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action((file, opts) => {
     const root = repoRoot();
-    const rel0 = (0, import_node_path55.relative)(root, (0, import_node_path55.isAbsolute)(file) ? file : (0, import_node_path55.join)(root, file)).replace(/\\/g, "/");
-    const rel = rel0.startsWith("..") || (0, import_node_path55.isAbsolute)(rel0) ? null : rel0;
+    const rel0 = (0, import_node_path58.relative)(root, (0, import_node_path58.isAbsolute)(file) ? file : (0, import_node_path58.join)(root, file)).replace(/\\/g, "/");
+    const rel = rel0.startsWith("..") || (0, import_node_path58.isAbsolute)(rel0) ? null : rel0;
     if (!rel) {
       printError(`${file} is not inside this repository`);
       process.exit(2);
@@ -41731,8 +42134,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("hash <file>").description("Print the sha256 of a file, for a model header (Verity.model \u2026 sha256). Path is REPO-relative, as in the header").action((file) => {
     const root = repoRoot();
-    const rel = (0, import_node_path55.relative)(root, (0, import_node_path55.isAbsolute)(file) ? file : (0, import_node_path55.join)(root, file));
-    const digest = rel.startsWith("..") || (0, import_node_path55.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
+    const rel = (0, import_node_path58.relative)(root, (0, import_node_path58.isAbsolute)(file) ? file : (0, import_node_path58.join)(root, file));
+    const digest = rel.startsWith("..") || (0, import_node_path58.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
     if (!digest) {
       printError(`Cannot hash ${file}: it must be a regular file inside this repository (not a symlink)`);
       process.exit(2);
@@ -41766,10 +42169,10 @@ function refreshScaffold(root) {
 }
 
 // src/commands/lean.ts
-var import_node_fs73 = require("node:fs");
+var import_node_fs75 = require("node:fs");
 var import_node_child_process20 = require("node:child_process");
 var import_node_os12 = require("node:os");
-var import_node_path56 = require("node:path");
+var import_node_path59 = require("node:path");
 function registerLeanCommand(program2) {
   const lean = program2.command("lean").description("The Lean 4 toolchain formal verification needs (managed download, pinned by this CLI)");
   lean.command("status").option("--json", "Machine-readable output").description("Which toolchain would run, and whether it matches the pinned version").action((opts) => {
@@ -41786,7 +42189,7 @@ function registerLeanCommand(program2) {
     const managed = pinnedVersionDir();
     const matches = version ? version.includes(pin) : false;
     if (opts.json) {
-      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs73.existsSync)((0, import_node_path56.join)(managed, "bin")), asset: leanAssetName() });
+      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs75.existsSync)((0, import_node_path59.join)(managed, "bin")), asset: leanAssetName() });
       return;
     }
     printInfo(`pinned: ${LEAN_TOOLCHAIN}`);
@@ -41804,7 +42207,7 @@ function registerLeanCommand(program2) {
       process.exit(2);
     }
     const dir = pinnedVersionDir();
-    if ((0, import_node_fs73.existsSync)((0, import_node_path56.join)(dir, "bin", "lake")) && !opts.force) {
+    if ((0, import_node_fs75.existsSync)((0, import_node_path59.join)(dir, "bin", "lake")) && !opts.force) {
       printInfo(`already installed at ${dir}`);
       return;
     }
@@ -41840,18 +42243,18 @@ function registerLeanCommand(program2) {
   });
   lean.command("remove").description("Delete the Verity-managed toolchain for the pinned version").action(() => {
     const dir = pinnedVersionDir();
-    if (!(0, import_node_fs73.existsSync)(dir)) {
+    if (!(0, import_node_fs75.existsSync)(dir)) {
       printInfo("nothing to remove");
       return;
     }
-    (0, import_node_fs73.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs75.rmSync)(dir, { recursive: true, force: true });
     printInfo(`removed ${dir}`);
   });
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.34.1").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.1");
+program.name("verity").description("CLI for Verity quality gate service").version("0.34.2-experimental.312358d").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.34.2-experimental.312358d");
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();