@codacy/verity-cli 0.35.0-experimental.3211f79 → 0.35.0-experimental.3a13a5e

package/bin/verity.js

@@ -10192,14 +10192,14 @@ var require_public_api = __commonJS2({
       const { lineCounter: lineCounter2, prettyErrors } = parseOptions(options);
       const parser$1 = new parser.Parser(lineCounter2?.addNewLine);
       const composer$1 = new composer.Composer(options);
-      const docs2 = Array.from(composer$1.compose(parser$1.parse(source2)));
+      const docs = Array.from(composer$1.compose(parser$1.parse(source2)));
       if (prettyErrors && lineCounter2)
-        for (const doc of docs2) {
+        for (const doc of docs) {
           doc.errors.forEach(errors.prettifyError(source2, lineCounter2));
           doc.warnings.forEach(errors.prettifyError(source2, lineCounter2));
         }
-      if (docs2.length > 0)
-        return docs2;
+      if (docs.length > 0)
+        return docs;
       return Object.assign([], { empty: true }, composer$1.streamInfo());
     }
     function parseDocument(source2, options = {}) {
@@ -23881,7 +23881,7 @@ async function readHookStdin() {
 
 // src/commands/standard.ts
 var import_promises10 = require("node:fs/promises");
-var import_yaml5 = __toESM2(require_dist());
+var import_yaml6 = __toESM2(require_dist());
 
 // src/lib/synthesize.ts
 var import_node_fs35 = require("node:fs");
@@ -24520,36 +24520,8 @@ function collectRiskSignals(root, opts = {}) {
   return out2.slice(0, opts.limit ?? 10);
 }
 
-// src/lib/repo-profile.ts
-var PROFILE_SCHEMA = "repo-profile/v1";
-var PROFILE_FILE = ".verity/repo-profile.json";
-var LIMITS = {
-  languages: 20,
-  frameworks: 50,
-  dependencies: 300,
-  folders: 300,
-  commits: 500,
-  // The server allows 20; 10 keeps a full profile well under its body cap.
-  pathsPerCommit: 10,
-  docs: 8,
-  // A long doc is cut by section (fitDoc), so these bound how much of the
-  // team's conventions reach the writer, not where a doc is cut.
-  docBytes: 12288,
-  nestedDocBytes: 6144,
-  contributorDocBytes: 4096,
-  docsTotalBytes: 32768,
-  subject: 120,
-  path: 200,
-  name: 100
-};
-var WINDOW_DAYS = 180;
-var MAX_PROFILE_BYTES = 120 * 1024;
-var ROOT_DOCS = ["CLAUDE.md", "AGENTS.md", ".cursorrules", ".github/copilot-instructions.md"];
-var CONTRIBUTOR_DOCS = ["CONTRIBUTING.md", "ARCHITECTURE.md"];
-var README = "README.md";
-var README_BYTES = 3072;
-var NESTED_DOC = /^(?:[^./][^/]*\/){1,4}(?:AGENTS|CLAUDE)\.md$/;
-var NOT_THE_TEAMS = /(?:^|\/)(?:examples?|samples?|templates?|[\w-]*-template|fixtures?|tests?|__tests__|vendor|third_party|node_modules)\//i;
+// src/lib/profile-text.ts
+var PATH_MAX = 200;
 var SECRET_PATTERNS = [
   /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/g,
   /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
@@ -24576,63 +24548,77 @@ function redact(text2) {
 function oneLine(text2, max) {
   return redact(text2.replace(/[\r\n\t]+/g, " ")).trim().slice(0, max);
 }
-var DEP = /^[A-Za-z0-9@][A-Za-z0-9@._/:+-]*$/;
-function dependencies(root, files) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const name2 of declaredDependencies(root, files)) {
-    if (name2.length <= LIMITS.name && DEP.test(name2)) seen.add(name2);
-    if (seen.size >= LIMITS.dependencies) break;
-  }
-  return [...seen];
-}
 function safePath(p) {
-  if (!p || p.length > LIMITS.path || p.startsWith("/") || p.includes("\\")) return null;
+  if (!p || p.length > PATH_MAX || p.startsWith("/") || p.includes("\\")) return null;
   if (p.split("/").some((seg) => seg === "" || seg === "..")) return null;
   if (/[\u0000-\u001f\u007f]/.test(p)) return null;
   return p;
 }
-function tree(files) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const file of files) {
-    const parts2 = file.split("/");
-    for (let depth = 1; depth <= Math.min(3, parts2.length - 1); depth++) {
-      const folder = parts2.slice(0, depth).join("/");
-      counts.set(folder, (counts.get(folder) ?? 0) + 1);
-    }
+
+// src/lib/profile-docs.ts
+var DOC_LIMITS = {
+  docs: 8,
+  // A long doc is cut by section (fitDoc), so these bound how much of the
+  // team's conventions reach the writer, not where a doc is cut.
+  docBytes: 12288,
+  nestedDocBytes: 6144,
+  contributorDocBytes: 4096,
+  docsTotalBytes: 32768
+};
+var ROOT_DOCS = ["CLAUDE.md", "AGENTS.md", ".cursorrules", ".github/copilot-instructions.md"];
+var CONTRIBUTOR_DOCS = ["CONTRIBUTING.md", "ARCHITECTURE.md"];
+var README = "README.md";
+var README_BYTES = 3072;
+var NESTED_DOC = /^(?:[^./][^/]*\/){1,4}(?:AGENTS|CLAUDE)\.md$/;
+var NOT_THE_TEAMS = /(?:^|\/)(?:examples?|samples?|templates?|[\w-]*-template|fixtures?|tests?|__tests__|vendor|third_party|node_modules)\//i;
+var MANAGED_START = "<!-- verity-memory:start -->";
+var MANAGED_END = "<!-- verity-memory:end -->";
+var PRESERVE_START2 = "<!-- verity-memory:preserve -->";
+var PRESERVE_END2 = "<!-- /verity-memory:preserve -->";
+var FENCE_OPEN = /^[ \t]*(?:(?:[-*+]|\d+[.)])[ \t]+)*(`{3,}|~{3,})/;
+var FENCE_CLOSE = /^[ \t]*(`{3,}|~{3,})[ \t]*$/;
+var QUOTE = /^(?:[ \t]*>)+ ?/;
+var LIST_ITEM = /^[ \t]*(?:[-*+]|\d+[.)])[ \t]/;
+function indentWidth(line2) {
+  let w = 0;
+  for (const ch of line2) {
+    if (ch === " ") w++;
+    else if (ch === "	") w += 4;
+    else break;
   }
-  return [...counts.entries()].filter(([path]) => safePath(path) !== null).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, LIMITS.folders).map(([path, n2]) => ({ path, files: n2 })).sort((a, b) => a.path.localeCompare(b.path));
+  return w;
 }
-function history(root) {
-  const res = runGitSync(root, [
-    "log",
-    `--since=${WINDOW_DAYS} days ago`,
-    "-n",
-    String(LIMITS.commits),
-    "--no-merges",
-    "--format=@@%x1f%s",
-    "--name-only",
-    "--"
-  ], { timeoutMs: 3e4 });
-  const commits = [];
-  if (!res.ok) return { window_days: WINDOW_DAYS, commits };
-  let current = null;
-  for (const line2 of res.stdout.split("\n")) {
-    if (line2.startsWith("@@")) {
-      if (current && current.subject) commits.push(current);
-      const raw = line2.slice(3);
-      current = { subject: oneLine(raw, LIMITS.subject), paths: [], fix: FIX_SUBJECT.test(raw) };
+function stripCode(text2) {
+  const out2 = [];
+  let fence = null;
+  let underItem = false;
+  for (const line2 of text2.split("\n")) {
+    const body2 = line2.replace(QUOTE, "");
+    if (fence) {
+      const close = FENCE_CLOSE.exec(body2);
+      if (close && close[1][0] === fence[0] && close[1].length >= fence.length) fence = null;
       continue;
     }
-    const path = safePath(line2.trim());
-    if (current && path && current.paths.length < LIMITS.pathsPerCommit) current.paths.push(path);
+    const open = FENCE_OPEN.exec(body2);
+    if (open) {
+      fence = open[1];
+      underItem = false;
+      continue;
+    }
+    if (body2.trim() === "") {
+      out2.push(line2);
+      underItem = false;
+      continue;
+    }
+    if (indentWidth(body2) >= 4) {
+      if (underItem && LIST_ITEM.test(body2)) out2.push(line2);
+      continue;
+    }
+    out2.push(line2);
+    underItem = LIST_ITEM.test(body2);
   }
-  if (current && current.subject) commits.push(current);
-  return { window_days: WINDOW_DAYS, commits: commits.slice(0, LIMITS.commits) };
+  return out2.join("\n");
 }
-var MANAGED_START = "<!-- verity-memory:start -->";
-var MANAGED_END = "<!-- verity-memory:end -->";
-var PRESERVE_START2 = "<!-- verity-memory:preserve -->";
-var PRESERVE_END2 = "<!-- /verity-memory:preserve -->";
 function docText(raw) {
   let text2 = raw;
   const start2 = text2.indexOf(MANAGED_START);
@@ -24644,7 +24630,7 @@ function docText(raw) {
     const kept = ps >= 0 && pe > ps ? block.slice(ps + PRESERVE_START2.length, pe) : "";
     text2 = text2.slice(0, start2) + kept + text2.slice(end + MANAGED_END.length);
   }
-  text2 = text2.replace(/^(```|~~~)[^\n]*\n[\s\S]*?^\1[^\n]*$/gm, "").replace(/<!--[\s\S]*?-->/g, "").replace(/\n{3,}/g, "\n\n");
+  text2 = stripCode(text2.replace(/<!--[\s\S]*?-->/g, "").replace(/<!--[\s\S]*$/, "")).replace(/\n{3,}/g, "\n\n");
   return redact(text2).trim();
 }
 var RULE_TITLE = /convention|pattern|rule|gotcha|footgun|pitfall|best practice|guideline|principle|standard|style|architecture|design|security|database|migration|schema|\bapi\b|error|state|naming|structure|i18n|internationali[sz]|translation|important|critical|warning|do not|don't|never|must|avoid/i;
@@ -24677,18 +24663,23 @@ function sectionRank(s) {
   return title * 1e3 + Math.min(999, s.lines.filter((l) => NORMATIVE.test(l)).length);
 }
 function fitDoc(text2, budget) {
-  if (text2.length <= budget) return text2;
+  if (utf8(text2) <= budget) return text2;
   const all = docSections(text2);
-  const size = (heading, lines) => (heading ? heading.length + 1 : 0) + lines.join("\n").length + 1;
+  const lineBytes = (line2) => utf8(line2) + 1;
+  const GAP = lineBytes("\u2026");
   const chosen = /* @__PURE__ */ new Map();
+  const headingsCounted = /* @__PURE__ */ new Set();
   let used2 = 0;
   for (const s of [...all].sort((a, b) => sectionRank(b) - sectionRank(a) || a.order - b.order)) {
     if (!s.lines.some((l) => l.trim())) continue;
+    const parents = s.parents.filter((p) => !headingsCounted.has(p) && !chosen.has(p));
+    const parentBytes = parents.reduce((n2, p) => n2 + lineBytes(all[p].heading ?? ""), 0);
     const lean = s.lines.filter((l) => NORMATIVE.test(l));
     for (const lines of [s.lines, lean]) {
-      const n2 = size(s.heading, lines);
+      const n2 = (s.heading ? lineBytes(s.heading) : 0) + lines.reduce((m, l) => m + lineBytes(l), 0) + parentBytes + GAP;
       if (lines.length && used2 + n2 <= budget) {
         chosen.set(s.order, lines);
+        for (const p of parents) headingsCounted.add(p);
         used2 += n2;
         break;
       }
@@ -24712,23 +24703,38 @@ function fitDoc(text2, budget) {
     if (s.heading) out2.push(s.heading);
     out2.push(...lines);
   }
-  return out2.join("\n").replace(/\n{3,}/g, "\n\n").trim().slice(0, budget);
+  return cutToBytes(out2.join("\n").replace(/\n{3,}/g, "\n\n").trim(), budget);
+}
+function utf8(text2) {
+  return Buffer.byteLength(text2, "utf8");
+}
+function cutToBytes(text2, max) {
+  if (utf8(text2) <= max) return text2;
+  let out2 = "";
+  let n2 = 0;
+  for (const ch of text2) {
+    const b = utf8(ch);
+    if (n2 + b > max) break;
+    out2 += ch;
+    n2 += b;
+  }
+  return out2;
 }
 var normal = (line2) => line2.trim().toLowerCase().replace(/\s+/g, " ");
-function docs(root, files) {
+function readDocs(root, files) {
   const nested = files.filter((f) => NESTED_DOC.test(f) && !NOT_THE_TEAMS.test(f) && safePath(f) !== null).sort((a, b) => a.split("/").length - b.split("/").length || a.localeCompare(b));
   const plan = [
-    ...ROOT_DOCS.map((n2) => [n2, LIMITS.docBytes]),
-    ...nested.map((n2) => [n2, LIMITS.nestedDocBytes]),
-    ...CONTRIBUTOR_DOCS.map((n2) => [n2, LIMITS.contributorDocBytes]),
+    ...ROOT_DOCS.map((n2) => [n2, DOC_LIMITS.docBytes]),
+    ...nested.map((n2) => [n2, DOC_LIMITS.nestedDocBytes]),
+    ...CONTRIBUTOR_DOCS.map((n2) => [n2, DOC_LIMITS.contributorDocBytes]),
     [README, README_BYTES]
   ];
   const out2 = [];
   const sent = /* @__PURE__ */ new Set();
   let total = 0;
   for (const [name2, cap2] of plan) {
-    const room = Math.min(cap2, LIMITS.docsTotalBytes - total);
-    if (out2.length >= LIMITS.docs || room < 200) break;
+    const room = Math.min(cap2, DOC_LIMITS.docsTotalBytes - total);
+    if (out2.length >= DOC_LIMITS.docs || room < 200) break;
     if (name2 === README && out2.some((d) => ROOT_DOCS.includes(d.name))) continue;
     const read2 = readRegularFileInRoot(root, name2, 256 * 1024);
     if (!read2.ok) continue;
@@ -24736,13 +24742,78 @@ function docs(root, files) {
     const text2 = fitDoc(fresh, room);
     if (!text2) continue;
     for (const l of text2.split("\n")) if (normal(l).length >= 25) sent.add(normal(l));
-    total += text2.length;
+    total += utf8(text2);
     out2.push({ name: name2, text: text2 });
   }
   return out2;
 }
+
+// src/lib/repo-profile.ts
+var PROFILE_SCHEMA = "repo-profile/v1";
+var PROFILE_FILE = ".verity/repo-profile.json";
+var LIMITS = {
+  languages: 20,
+  frameworks: 50,
+  dependencies: 300,
+  folders: 300,
+  commits: 500,
+  // The server allows 20; 10 keeps a full profile well under its body cap.
+  pathsPerCommit: 10,
+  subject: 120,
+  path: 200,
+  name: 100
+};
+var WINDOW_DAYS = 180;
+var MAX_PROFILE_BYTES = 120 * 1024;
+var DEP = /^[A-Za-z0-9@][A-Za-z0-9@._/:+-]*$/;
+function dependencies(root, files) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const name2 of declaredDependencies(root, files)) {
+    if (name2.length <= LIMITS.name && DEP.test(name2)) seen.add(name2);
+    if (seen.size >= LIMITS.dependencies) break;
+  }
+  return [...seen];
+}
+function tree(files) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const file of files) {
+    const parts2 = file.split("/");
+    for (let depth = 1; depth <= Math.min(3, parts2.length - 1); depth++) {
+      const folder = parts2.slice(0, depth).join("/");
+      counts.set(folder, (counts.get(folder) ?? 0) + 1);
+    }
+  }
+  return [...counts.entries()].filter(([path]) => safePath(path) !== null).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, LIMITS.folders).map(([path, n2]) => ({ path, files: n2 })).sort((a, b) => a.path.localeCompare(b.path));
+}
+function history(root) {
+  const res = runGitSync(root, [
+    "log",
+    `--since=${WINDOW_DAYS} days ago`,
+    "-n",
+    String(LIMITS.commits),
+    "--no-merges",
+    "--format=@@%x1f%s",
+    "--name-only",
+    "--"
+  ], { timeoutMs: 3e4 });
+  const commits = [];
+  if (!res.ok) return { window_days: WINDOW_DAYS, commits };
+  let current = null;
+  for (const line2 of res.stdout.split("\n")) {
+    if (line2.startsWith("@@")) {
+      if (current && current.subject) commits.push(current);
+      const raw = line2.slice(3);
+      current = { subject: oneLine(raw, LIMITS.subject), paths: [], fix: FIX_SUBJECT.test(raw) };
+      continue;
+    }
+    const path = safePath(line2.trim());
+    if (current && path && current.paths.length < LIMITS.pathsPerCommit) current.paths.push(path);
+  }
+  if (current && current.subject) commits.push(current);
+  return { window_days: WINDOW_DAYS, commits: commits.slice(0, LIMITS.commits) };
+}
 function fitProfile(p) {
-  const size = () => JSON.stringify(p).length;
+  const size = () => Buffer.byteLength(JSON.stringify(p), "utf8");
   if (size() <= MAX_PROFILE_BYTES) return p;
   const commits = p.history.commits;
   for (const wantFix of [false, true]) {
@@ -24750,6 +24821,9 @@ function fitProfile(p) {
       if (commits[i2].fix === wantFix) commits.splice(i2, 1);
     }
   }
+  while (size() > MAX_PROFILE_BYTES && p.docs.length > 0) p.docs.pop();
+  while (size() > MAX_PROFILE_BYTES && p.tree.length > 0) p.tree.pop();
+  while (size() > MAX_PROFILE_BYTES && p.dependencies.length > 0) p.dependencies.pop();
   return p;
 }
 function buildRepoProfile(root = repoRoot()) {
@@ -24771,7 +24845,7 @@ function buildRepoProfile(root = repoRoot()) {
     dependencies: dependencies(root, files),
     tree: tree(files),
     history: history(root),
-    docs: docs(root, files)
+    docs: readDocs(root, files)
   });
 }
 function describeProfile(p) {
@@ -24795,8 +24869,29 @@ function consentLines(p) {
   ];
 }
 
+// src/commands/standard-generate.ts
+var import_yaml5 = __toESM2(require_dist());
+
 // src/lib/generate-standard.ts
 var import_yaml4 = __toESM2(require_dist());
+async function generationStatus(opts) {
+  const res = await apiRequest({
+    method: "GET",
+    path: "/standards/generate",
+    serviceUrl: opts.serviceUrl,
+    token: opts.token,
+    verbose: opts.verbose,
+    cmd: "standard_generate_status"
+  });
+  if (!res.ok) {
+    if (res.http_status === 404 && /Unknown route/.test(res.error)) return "unsupported";
+    if (res.http_status === 400 && /Version must be a positive integer/.test(res.error)) return "unsupported";
+    return "unknown";
+  }
+  if (res.data.enabled === true) return "on";
+  if (res.data.enabled === false) return "off";
+  return "unknown";
+}
 var GENERATE_TIMEOUT_MS = 6e4;
 function rulesFrom(content, before) {
   const list2 = Array.isArray(content.custom_patterns) ? content.custom_patterns : [];
@@ -24895,6 +24990,94 @@ async function promptYes(question, opts) {
   return a === "" || a === "y" || a === "yes";
 }
 
+// src/commands/standard-generate.ts
+function generationBase() {
+  const local = readRepoFile(STANDARD_FILE);
+  try {
+    const parsed = local !== null ? (0, import_yaml5.parse)(local) : null;
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : buildStandard({ detected: detectProject() }, loadCatalog());
+  } catch (err2) {
+    printError(`${STANDARD_FILE} is not valid YAML: ${err2.message}. Fix it, or delete it, and run this again.`);
+    process.exit(1);
+  }
+}
+async function consentToSend(profile, yes) {
+  try {
+    writeRepoFile(PROFILE_FILE, JSON.stringify(profile, null, 2) + "\n");
+  } catch (err2) {
+    printError(`Could not write ${PROFILE_FILE} for you to read: ${err2.message}`);
+    process.exit(1);
+  }
+  for (const line2 of consentLines(profile)) printInfo(line2);
+  if (yes) return true;
+  if (!interactive()) {
+    printError(`Nothing was sent. Read ${PROFILE_FILE}, then run this again with --yes to send it.`);
+    process.exit(1);
+  }
+  const send = await promptYes("Send the profile? [Y/n] ", { nonInteractive: false });
+  if (!send) printInfo("Not sent. Nothing changed.");
+  return send;
+}
+async function runGenerate(globals, opts) {
+  const tokenResult = await resolveToken(globals.token);
+  const urlResult = await resolveServiceUrl(globals.serviceUrl);
+  if (!tokenResult.ok || !urlResult.ok) {
+    printError("Sign in first: verity login. Rule generation needs your Verity account.");
+    process.exit(1);
+  }
+  const status = await generationStatus({ serviceUrl: urlResult.data, token: tokenResult.data.token, verbose: globals.verbose });
+  if (opts.status) {
+    process.stdout.write(`${status}
+`);
+    return;
+  }
+  if (status === "off") {
+    printWarn("Rule generation is not switched on for this project yet. The built-in rules apply. Nothing was sent.");
+    return;
+  }
+  if (status === "unsupported") {
+    printWarn("This Verity service does not write project rules yet: it is older than this CLI. The built-in rules apply. Nothing was sent.");
+    return;
+  }
+  const base = generationBase();
+  const profile = buildRepoProfile();
+  if (!await consentToSend(profile, opts.yes === true)) return;
+  const spinner = startSpinner("Writing rules for this repository");
+  const outcome = await generateStandard({
+    serviceUrl: urlResult.data,
+    token: tokenResult.data.token,
+    profile,
+    base,
+    verbose: globals.verbose
+  });
+  if (outcome.status === "created") {
+    spinner.succeed(`${outcome.rules.length} ${outcome.rules.length === 1 ? "rule" : "rules"} for this repository \xB7 Standard v${outcome.version}`);
+    for (const r of outcome.rules) {
+      printInfo(`  ${r.id}`);
+      printInfo(`    ${r.description}`);
+      printInfo(`    Applies: ${r.scope} \xB7 ${r.basis}`);
+    }
+    if (outcome.rejected > 0) printInfo(`  ${outcome.rejected} proposed rule(s) were left out: too generic, or not safe to use.`);
+    printInfo(`Edit them in ${STANDARD_FILE}, then: verity standard push`);
+    if (outcome.warning) printWarn(outcome.warning);
+    return;
+  }
+  if (outcome.status === "exists") {
+    spinner.warn('This project already has a Standard on the Verity service. Run "verity init" to use it.');
+    return;
+  }
+  if (outcome.status === "disabled") {
+    spinner.warn("Rule generation is not switched on for this project yet. The built-in rules apply.");
+    return;
+  }
+  if (outcome.status === "unsupported") {
+    spinner.warn("This Verity service does not write project rules yet: it is older than this CLI. The built-in rules apply.");
+    return;
+  }
+  spinner.warn(`The rules could not be written: ${outcome.reason}`);
+  process.exit(1);
+}
+
 // src/commands/standard.ts
 function registerStandardCommands(program2) {
   const standard = program2.command("standard").description("Manage the project Standard");
@@ -24911,15 +25094,15 @@ function registerStandardCommands(program2) {
       serviceUrl: urlResult.ok ? urlResult.data : void 0
     });
     if ("refused" in result) {
-      printWarn(result.refused);
+      printWarn(terminalText(result.refused, 300));
       process.exit(1);
     }
-    printInfo(`  ${describeDetected(result.detected)}`);
-    for (const path of result.written) printInfo(`  ${path} \u2713`);
-    for (const note of result.notes) printWarn(`  ${note}`);
+    printInfo(`  ${terminalText(describeDetected(result.detected), 400)}`);
+    for (const path of result.written) printInfo(`  ${terminalText(path, 200)} \u2713`);
+    for (const note of result.notes) printWarn(`  ${terminalText(note, 300)}`);
     if (opts.push) {
       const pushed = await pushStandard(globals);
-      for (const line2 of pushed.lines) printInfo(`  ${line2}`);
+      for (const line2 of pushed.lines) printInfo(`  ${terminalText(line2, 600)}`);
       if (pushed.standardVersion !== null) {
         await correctVerityMdVersion({
           standard: result.standard,
@@ -24930,7 +25113,7 @@ function registerStandardCommands(program2) {
       }
     }
   });
-  standard.command("generate").description("Have Verity write project-specific rules from a profile of this repository (asks before sending it)").option("--yes", `Send the profile without asking (you have read ${PROFILE_FILE})`).action((opts) => runGenerate(program2.opts(), opts));
+  standard.command("generate").description("Have Verity write project-specific rules from a profile of this repository (asks before sending it)").option("--yes", `Send the profile without asking (you have read ${PROFILE_FILE})`).option("--status", "Print whether the service writes project rules for this project: on, off, unsupported or unknown. Sends nothing.").action((opts) => runGenerate(program2.opts(), opts));
   standard.command("push").description("Upload the project Standard to the service").option("--file <path>", "Path to standard YAML file", STANDARD_FILE).option("--created-by <name>", "Who created this version", "claude-code").action(async (opts) => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
@@ -24952,7 +25135,7 @@ function registerStandardCommands(program2) {
     }
     let content;
     try {
-      content = (0, import_yaml5.parse)(yamlContent);
+      content = (0, import_yaml6.parse)(yamlContent);
     } catch (err2) {
       printError(`Invalid YAML in ${opts.file}: ${err2.message}`);
       process.exit(1);
@@ -24968,10 +25151,10 @@ function registerStandardCommands(program2) {
       verbose: globals.verbose
     });
     if (!result.ok) {
-      printError(result.error);
+      printError(terminalText(result.error, 300));
       process.exit(1);
     }
-    printInfo(`Standard uploaded (version ${result.data.version})`);
+    printInfo(`Standard uploaded (version ${versionText(result.data.version)})`);
     printJson(result.data);
   });
   standard.command("get").description("Get the current Standard from the service").option("--version <n>", "Specific version number").action(async (opts) => {
@@ -24986,7 +25169,15 @@ function registerStandardCommands(program2) {
       printError(urlResult.error);
       process.exit(1);
     }
-    const path = opts.version ? `/standards/${opts.version}` : "/standards/latest";
+    let path = "/standards/latest";
+    if (opts.version !== void 0) {
+      const version = Number(opts.version);
+      if (!/^[1-9][0-9]*$/.test(String(opts.version)) || !Number.isSafeInteger(version)) {
+        printError(`--version: "${terminalText(opts.version, 40)}" is not a Standard version. Use a positive whole number, such as --version 3.`);
+        process.exit(1);
+      }
+      path = `/standards/${version}`;
+    }
     const result = await apiRequest({
       method: "GET",
       path,
@@ -24995,7 +25186,7 @@ function registerStandardCommands(program2) {
       verbose: globals.verbose
     });
     if (!result.ok) {
-      printError(result.error);
+      printError(terminalText(result.error, 300));
       process.exit(1);
     }
     printJson(result.data);
@@ -25020,93 +25211,24 @@ function registerStandardCommands(program2) {
       verbose: globals.verbose
     });
     if (!result.ok) {
-      printError(result.error);
+      printError(terminalText(result.error, 300));
       process.exit(1);
     }
-    const versions = result.data.versions;
+    const versions = Array.isArray(result.data.versions) ? result.data.versions : [];
     if (versions.length === 0) {
       printInfo("No Standard versions found.");
       return;
     }
     printInfo("Standard versions:");
     for (const v of versions) {
-      const date = v.created_at.slice(0, 19).replace("T", " ");
+      const date = typeof v.created_at === "string" ? v.created_at.slice(0, 19).replace("T", " ") : "unknown date";
       const by = v.created_by ?? "unknown";
-      printInfo(`  v${v.version}  ${date}  (by ${by})`);
+      printInfo(`  v${versionText(v.version)}  ${terminalText(date, 40)}  (by ${terminalText(by, 80)})`);
     }
   });
 }
-function generationBase() {
-  const local = readRepoFile(STANDARD_FILE);
-  try {
-    const parsed = local !== null ? (0, import_yaml5.parse)(local) : null;
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : buildStandard({ detected: detectProject() }, loadCatalog());
-  } catch (err2) {
-    printError(`${STANDARD_FILE} is not valid YAML: ${err2.message}. Fix it, or delete it, and run this again.`);
-    process.exit(1);
-  }
-}
-async function consentToSend(profile, yes) {
-  try {
-    writeRepoFile(PROFILE_FILE, JSON.stringify(profile, null, 2) + "\n");
-  } catch (err2) {
-    printError(`Could not write ${PROFILE_FILE} for you to read: ${err2.message}`);
-    process.exit(1);
-  }
-  for (const line2 of consentLines(profile)) printInfo(line2);
-  if (yes) return true;
-  if (!interactive()) {
-    printError(`Nothing was sent. Read ${PROFILE_FILE}, then run this again with --yes to send it.`);
-    process.exit(1);
-  }
-  const send = await promptYes("Send the profile? [Y/n] ", { nonInteractive: false });
-  if (!send) printInfo("Not sent. Nothing changed.");
-  return send;
-}
-async function runGenerate(globals, opts) {
-  const tokenResult = await resolveToken(globals.token);
-  const urlResult = await resolveServiceUrl(globals.serviceUrl);
-  if (!tokenResult.ok || !urlResult.ok) {
-    printError("Sign in first: verity login. Rule generation needs your Verity account.");
-    process.exit(1);
-  }
-  const base = generationBase();
-  const profile = buildRepoProfile();
-  if (!await consentToSend(profile, opts.yes === true)) return;
-  const spinner = startSpinner("Writing rules for this repository");
-  const outcome = await generateStandard({
-    serviceUrl: urlResult.data,
-    token: tokenResult.data.token,
-    profile,
-    base,
-    verbose: globals.verbose
-  });
-  if (outcome.status === "created") {
-    spinner.succeed(`${outcome.rules.length} ${outcome.rules.length === 1 ? "rule" : "rules"} for this repository \xB7 Standard v${outcome.version}`);
-    for (const r of outcome.rules) {
-      printInfo(`  ${r.id}`);
-      printInfo(`    ${r.description}`);
-      printInfo(`    Applies: ${r.scope} \xB7 ${r.basis}`);
-    }
-    if (outcome.rejected > 0) printInfo(`  ${outcome.rejected} proposed rule(s) were left out: too generic, or not safe to use.`);
-    printInfo(`Edit them in ${STANDARD_FILE}, then: verity standard push`);
-    if (outcome.warning) printWarn(outcome.warning);
-    return;
-  }
-  if (outcome.status === "exists") {
-    spinner.warn('This project already has a Standard on the Verity service. Run "verity init" to use it.');
-    return;
-  }
-  if (outcome.status === "disabled") {
-    spinner.warn("Rule generation is not switched on for this project yet. The built-in rules apply.");
-    return;
-  }
-  if (outcome.status === "unsupported") {
-    spinner.warn("This Verity service does not write project rules yet: it is older than this CLI. The built-in rules apply.");
-    return;
-  }
-  spinner.warn(`The rules could not be written: ${outcome.reason}`);
-  process.exit(1);
+function versionText(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) ? String(value) : "?";
 }
 
 // src/commands/config.ts
@@ -25163,11 +25285,11 @@ async function currentReviewMoments(pluginMode) {
   const cfg = readProjectConfig();
   const hooks = await checkAllVerityHooks();
   const turn = cfg.turn_review !== "off" && (pluginMode || hooks.stop);
-  const git2 = pluginMode ? cfg.git_moments : hooks.guard ? hooks.guardOn.length > 0 ? hooks.guardOn : cfg.git_moments : [];
+  const git3 = pluginMode ? cfg.git_moments : hooks.guard ? hooks.guardOn.length > 0 ? hooks.guardOn : cfg.git_moments : [];
   return [
     ...turn ? ["stop"] : [],
-    ...git2.includes("commit") ? ["pre-commit"] : [],
-    ...git2.includes("push") ? ["pre-push"] : []
+    ...git3.includes("commit") ? ["pre-commit"] : [],
+    ...git3.includes("push") ? ["pre-push"] : []
   ];
 }
 async function setReviewMoments(moments, pluginMode) {
@@ -26120,7 +26242,7 @@ function createRun(opts, globals) {
 
 // src/commands/analyze/index.ts
 var import_node_fs55 = require("node:fs");
-var import_node_path42 = require("node:path");
+var import_node_path43 = require("node:path");
 
 // src/lib/repo-context.ts
 var import_node_child_process11 = require("node:child_process");
@@ -28244,7 +28366,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.35.0-experimental.3211f79" : "dev";
+    return true ? "0.35.0-experimental.3a13a5e" : "dev";
   } catch {
     return "dev";
   }
@@ -28285,6 +28407,8 @@ async function sendSkipBeacon(ctx, reason) {
 
 // src/lib/static-analysis.ts
 var import_node_child_process12 = require("node:child_process");
+var import_node_module = require("node:module");
+var import_node_path34 = require("node:path");
 var import_node_fs44 = require("node:fs");
 
 // src/lib/static-config.ts
@@ -28331,19 +28455,44 @@ var SEVERITY_ORDER = {
   Low: 3
 };
 function isCodacyAvailable() {
-  return codacyAnalysisPath() !== null;
+  return resolveAnalyzer() !== null;
+}
+var NO_BUNDLED_ANALYZER_ENV = "VERITY_NO_BUNDLED_ANALYZER";
+function bundledAnalyzer(from = __filename) {
+  try {
+    const pkgPath = (0, import_node_module.createRequire)(from).resolve("@codacy/analysis-cli/package.json");
+    const pkg = JSON.parse((0, import_node_fs44.readFileSync)(pkgPath, "utf-8"));
+    const bin = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.["codacy-analysis"];
+    if (typeof bin !== "string" || bin === "") return null;
+    const entry = (0, import_node_path34.join)((0, import_node_path34.dirname)(pkgPath), bin);
+    if (!(0, import_node_fs44.statSync)(entry).isFile()) return null;
+    return { path: entry, version: typeof pkg.version === "string" ? pkg.version : "unknown" };
+  } catch {
+    return null;
+  }
 }
-function codacyAnalysisPath() {
-  return whichSync("codacy-analysis");
+function resolveAnalyzer(opts = {}) {
+  const env = opts.env ?? process.env;
+  if (env[NO_BUNDLED_ANALYZER_ENV] !== "1") {
+    const bundled = (opts.bundled ?? bundledAnalyzer)();
+    if (bundled) return { source: "bundled", path: bundled.path, version: bundled.version };
+  }
+  const onPath = (opts.onPath ?? (() => whichSync("codacy-analysis")))();
+  return onPath ? { source: "path", path: onPath } : null;
+}
+function analyzerCommand(analyzer, argv, execPath = process.execPath) {
+  if (analyzer.source === "bundled") return { command: execPath, args: [analyzer.path, ...argv] };
+  return { command: analyzer.path, args: argv };
 }
 function startTrivyPrewarm(opts = {}) {
   if ((opts.platform ?? process.platform) === "win32") return false;
   if ((opts.env ?? process.env).CI) return false;
-  const analyzer = codacyAnalysisPath();
+  const analyzer = (opts.resolve ?? resolveAnalyzer)();
   const config = ensureStaticConfig();
   if (!analyzer || !config) return false;
   try {
-    const child = (opts.run ?? import_node_child_process12.spawn)(analyzer, buildAnalyzerArgv([STATIC_ANALYSIS_CONFIG_FILE], config), {
+    const { command, args: args2 } = analyzerCommand(analyzer, buildAnalyzerArgv([STATIC_ANALYSIS_CONFIG_FILE], config));
+    const child = (opts.run ?? import_node_child_process12.spawn)(command, args2, {
       cwd: repoRoot(),
       detached: true,
       stdio: "ignore"
@@ -28390,7 +28539,7 @@ function runCodacyAnalysisIfAvailable(files) {
   if (!isCodacyAvailable()) {
     return withFailure(
       "analyzer_unavailable",
-      "@codacy/analysis-cli was not found on PATH \u2014 no static analysis ran"
+      "@codacy/analysis-cli was not bundled with this Verity install and was not found on PATH \u2014 no static analysis ran. Reinstall Verity: npm install -g @codacy/verity-cli"
     );
   }
   return runCodacyAnalysis(files);
@@ -28413,8 +28562,10 @@ function runCodacyAnalysis(files) {
       "Could not write .verity/static-analysis.json \u2014 no static analysis ran"
     );
   }
-  const analyzer = codacyAnalysisPath() ?? "codacy-analysis";
-  const proc = (0, import_node_child_process12.spawnSync)(analyzer, buildAnalyzerArgv(existingFiles, configPath), {
+  const argv = buildAnalyzerArgv(existingFiles, configPath);
+  const resolved = resolveAnalyzer();
+  const { command, args: args2 } = resolved ? analyzerCommand(resolved, argv) : { command: "codacy-analysis", args: argv };
+  const proc = (0, import_node_child_process12.spawnSync)(command, args2, {
     encoding: "utf-8",
     maxBuffer: 10 * 1024 * 1024
   });
@@ -28678,7 +28829,7 @@ async function scope(run4) {
 
 // src/lib/specs.ts
 var import_node_fs45 = require("node:fs");
-var import_node_path34 = require("node:path");
+var import_node_path35 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
   "AGENTS.md",
@@ -28700,7 +28851,7 @@ var UNCONSULTED_TOTAL_BYTES = 30720;
 function readSpecFiles(specsOpt, root) {
   const out2 = [];
   for (const raw of specsOpt.split(",").map((f) => f.trim()).filter(Boolean)) {
-    const candidate = (0, import_node_path34.isAbsolute)(raw) ? (0, import_node_path34.relative)(root, raw) : raw;
+    const candidate = (0, import_node_path35.isAbsolute)(raw) ? (0, import_node_path35.relative)(root, raw) : raw;
     const content = readFileInside(root, candidate, MAX_EXPLICIT_SPEC_FILE_BYTES);
     if (content === null) continue;
     out2.push({ path: raw, content });
@@ -28759,7 +28910,7 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   try {
     const entries = (0, import_node_fs45.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_node_path34.join)(dir, entry.name);
+      const fullPath = (0, import_node_path35.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
         result.push(fullPath);
       } else if (entry.isDirectory() && depth < maxDepth - 1) {
@@ -28772,10 +28923,10 @@ function findMdFiles(dir, maxDepth, depth = 0) {
 }
 function discoverPlans() {
   const home = process.env.HOME ?? "";
-  const homePlansDir = (0, import_node_path34.join)(home, ".claude", "plans");
+  const homePlansDir = (0, import_node_path35.join)(home, ".claude", "plans");
   const sources = [];
   if (isRealDirectoryChain(process.cwd(), [".claude", "plans"])) {
-    sources.push({ root: process.cwd(), prefix: (0, import_node_path34.join)(".claude", "plans") });
+    sources.push({ root: process.cwd(), prefix: (0, import_node_path35.join)(".claude", "plans") });
   }
   if (home && (0, import_node_fs45.existsSync)(homePlansDir)) sources.push({ root: homePlansDir, prefix: "" });
   const candidates2 = [];
@@ -28783,14 +28934,14 @@ function discoverPlans() {
   for (const source2 of sources) {
     let names2;
     try {
-      names2 = (0, import_node_fs45.readdirSync)(source2.prefix ? (0, import_node_path34.join)(source2.root, source2.prefix) : source2.root);
+      names2 = (0, import_node_fs45.readdirSync)(source2.prefix ? (0, import_node_path35.join)(source2.root, source2.prefix) : source2.root);
     } catch {
       continue;
     }
     for (const f of names2) {
       if (!f.endsWith(".md") || seen.has(f)) continue;
       seen.add(f);
-      const relPath = source2.prefix ? (0, import_node_path34.join)(source2.prefix, f) : f;
+      const relPath = source2.prefix ? (0, import_node_path35.join)(source2.prefix, f) : f;
       const stat3 = statRegularInRoot(source2.root, relPath);
       if (!stat3.ok) continue;
       candidates2.push({ name: f, root: source2.root, relPath, mtime: stat3.mtimeMs, size: stat3.size });
@@ -28808,7 +28959,7 @@ function discoverPlans() {
 function isRealDirectoryChain(root, parts2) {
   let current = root;
   for (const part of parts2) {
-    current = (0, import_node_path34.join)(current, part);
+    current = (0, import_node_path35.join)(current, part);
     try {
       if (!(0, import_node_fs45.lstatSync)(current).isDirectory()) return false;
     } catch {
@@ -29012,7 +29163,7 @@ async function mode(run4) {
 
 // src/lib/fold.ts
 var import_node_fs46 = require("node:fs");
-var import_node_path35 = require("node:path");
+var import_node_path36 = require("node:path");
 var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "user",
   "assistant",
@@ -29244,9 +29395,9 @@ function fold(transcriptPath, opts = {}) {
     return result;
   }
   try {
-    const sidecarDir = (0, import_node_path35.join)(
-      (0, import_node_path35.dirname)(transcriptPath),
-      (0, import_node_path35.basename)(transcriptPath).replace(/\.jsonl$/, ""),
+    const sidecarDir = (0, import_node_path36.join)(
+      (0, import_node_path36.dirname)(transcriptPath),
+      (0, import_node_path36.basename)(transcriptPath).replace(/\.jsonl$/, ""),
       "subagents"
     );
     if ((0, import_node_fs46.existsSync)(sidecarDir)) {
@@ -29256,7 +29407,7 @@ function fold(transcriptPath, opts = {}) {
       const walk2 = (d, depth) => {
         if (depth > 4) return;
         for (const e of (0, import_node_fs46.readdirSync)(d, { withFileTypes: true })) {
-          const p = (0, import_node_path35.join)(d, e.name);
+          const p = (0, import_node_path36.join)(d, e.name);
           if (e.isDirectory()) {
             walk2(p, depth + 1);
           } else if (e.name.startsWith("agent-") && e.name.endsWith(".jsonl")) {
@@ -29629,7 +29780,7 @@ async function evidence(run4) {
 
 // src/lib/cache-cleanup.ts
 var import_node_fs47 = require("node:fs");
-var import_node_path36 = require("node:path");
+var import_node_path37 = require("node:path");
 var CACHE_TTL_DAYS = 7;
 function pruneStaleCache() {
   try {
@@ -29637,7 +29788,7 @@ function pruneStaleCache() {
     const cutoff = Date.now() - CACHE_TTL_DAYS * 24 * 3600 * 1e3;
     for (const entry of (0, import_node_fs47.readdirSync)(dir)) {
       if (!entry.startsWith("pending-")) continue;
-      const path = (0, import_node_path36.join)(dir, entry);
+      const path = (0, import_node_path37.join)(dir, entry);
       try {
         const stat3 = (0, import_node_fs47.statSync)(path);
         if (stat3.mtimeMs < cutoff) {
@@ -29872,7 +30023,7 @@ function languageOf2(path) {
 
 // src/lib/code/runtime.ts
 var import_node_fs49 = require("node:fs");
-var import_node_path37 = require("node:path");
+var import_node_path38 = require("node:path");
 var import_web_tree_sitter2 = __toESM2(require_web_tree_sitter2());
 
 // src/lib/code/grammars.json
@@ -29932,12 +30083,12 @@ var grammars_default = {
 var MAX_PARSE_BYTES = 512 * 1024;
 function grammarCandidates(file, pkg, env = process.env) {
   return [
-    ...env.VERITY_GRAMMAR_DIR ? [(0, import_node_path37.join)(env.VERITY_GRAMMAR_DIR, file)] : [],
-    (0, import_node_path37.join)(__dirname, "..", "data", "grammars", file),
+    ...env.VERITY_GRAMMAR_DIR ? [(0, import_node_path38.join)(env.VERITY_GRAMMAR_DIR, file)] : [],
+    (0, import_node_path38.join)(__dirname, "..", "data", "grammars", file),
     // bundled: cli/bin/ → cli/data/grammars/
-    (0, import_node_path37.join)(__dirname, "..", "..", "..", "data", "grammars", file),
+    (0, import_node_path38.join)(__dirname, "..", "..", "..", "data", "grammars", file),
     // tsx: cli/src/lib/code/ → cli/data/grammars/
-    (0, import_node_path37.join)(__dirname, "..", "..", "..", "node_modules", pkg, file)
+    (0, import_node_path38.join)(__dirname, "..", "..", "..", "node_modules", pkg, file)
     // tsx, before a build: the pinned devDependency
   ];
 }
@@ -30673,14 +30824,14 @@ function accessMap(input) {
   const targetWrites = (r) => effects.some((e) => e.op === "write" && sameResource(r, e.resource));
   const excluded = /* @__PURE__ */ new Set([target, ...helpers, ...fileFns.filter((f) => inside(f, target))]);
   const accessors = [];
-  const consider = (fns, p, sameFile, fileState) => {
+  const consider = (fns, p, sameFile2, fileState) => {
     for (const f of fns) {
-      if (sameFile && excluded.has(f)) continue;
-      if (sameFile && inside(target, f)) continue;
-      const theirs = effectsWithHelpers(f, fns, lang, 2, fileState).filter((e) => !(sameFile && e.via.includes(target.name)) && searchable.some((r) => sameResource(r, e.resource) && (e.op === "write" || targetWrites(r))));
+      if (sameFile2 && excluded.has(f)) continue;
+      if (sameFile2 && inside(target, f)) continue;
+      const theirs = effectsWithHelpers(f, fns, lang, 2, fileState).filter((e) => !(sameFile2 && e.via.includes(target.name)) && searchable.some((r) => sameResource(r, e.resource) && (e.op === "write" || targetWrites(r))));
       if (theirs.length === 0) continue;
-      if (sameFile && [...helperNames].includes(f.name)) continue;
-      accessors.push({ fn: f, effects: theirs, writes: theirs.some((e) => e.op === "write"), sameFile });
+      if (sameFile2 && [...helperNames].includes(f.name)) continue;
+      accessors.push({ fn: f, effects: theirs, writes: theirs.some((e) => e.op === "write"), sameFile: sameFile2 });
     }
   };
   consider(fileFns, path, true, state);
@@ -31070,7 +31221,7 @@ var MAX_CALLERS = 30;
 var MAX_READ_BYTES4 = 512 * 1024;
 var IDENT = /^[A-Za-z_$][\w$]*$/;
 var TEST_OR_TOOLING = /(^|\/)(tests?|__tests__|spec|specs|fixtures?|e2e|testdata|experiments|scripts)\/|\.(test|spec)\.[cm]?[jt]sx?$|_test\.(py|go)$|(^|\/)test_[^/]+\.py$/;
-var dirname18 = (p) => p.includes("/") ? p.slice(0, p.lastIndexOf("/")) : "";
+var dirname19 = (p) => p.includes("/") ? p.slice(0, p.lastIndexOf("/")) : "";
 function joinPath(dir, rel) {
   const out2 = dir ? dir.split("/") : [];
   for (const part of rel.split("/")) {
@@ -31195,7 +31346,7 @@ function parseJsonc(text2) {
   return JSON.parse(out2.replace(/,(\s*[}\]])/g, "$1"));
 }
 function tsconfigFor(source2, fromPath, cache) {
-  for (let dir = dirname18(fromPath); ; dir = dirname18(dir)) {
+  for (let dir = dirname19(fromPath); ; dir = dirname19(dir)) {
     const file = dir ? `${dir}/tsconfig.json` : "tsconfig.json";
     if (!cache.has(file)) {
       const read2 = source2.read(file, 256 * 1024);
@@ -31219,7 +31370,7 @@ function tsconfigFor(source2, fromPath, cache) {
 function tsCandidates(spec, fromPath, cfg) {
   const bases = [];
   if (spec.startsWith(".")) {
-    const b = joinPath(dirname18(fromPath), spec);
+    const b = joinPath(dirname19(fromPath), spec);
     if (b !== null) bases.push(b);
   } else if (cfg) {
     const root = cfg.baseUrl !== null ? joinPath(cfg.dir, cfg.baseUrl) : cfg.dir;
@@ -31251,8 +31402,8 @@ function pyCandidates(spec, fromPath) {
   const mod = spec.slice(dots).replace(/\./g, "/");
   const out2 = [];
   if (dots > 0) {
-    let dir = dirname18(fromPath);
-    for (let i2 = 1; i2 < dots; i2++) dir = dirname18(dir);
+    let dir = dirname19(fromPath);
+    for (let i2 = 1; i2 < dots; i2++) dir = dirname19(dir);
     const b = mod ? joinPath(dir, mod) : dir;
     if (b !== null) out2.push(`${b}.py`, `${b}/__init__.py`);
   } else {
@@ -31279,7 +31430,7 @@ function moduleFiles(source2, spec, fromPath, lang, cache = /* @__PURE__ */ new
     const module2 = mod.ok ? /^\s*module\s+(\S+)/m.exec(mod.content)?.[1] : void 0;
     if (!module2 || !(spec === module2 || spec.startsWith(`${module2}/`))) return [];
     const dir = spec.slice(module2.length + 1);
-    return source2.list(dir || void 0).filter((p) => dirname18(p) === dir && p.endsWith(".go") && !p.endsWith("_test.go"));
+    return source2.list(dir || void 0).filter((p) => dirname19(p) === dir && p.endsWith(".go") && !p.endsWith("_test.go"));
   }
   if (lang === "java") {
     const suffix = `${spec.replace(/\./g, "/")}.java`;
@@ -31330,7 +31481,7 @@ function definitionOf(input) {
     if (type?.startsWith(RESULT_OF)) {
       const [fnName, idx] = type.slice(RESULT_OF.length).split("#");
       type = null;
-      const others = lang === "go" ? source2.list(dirname18(path) || void 0).filter((p) => dirname18(p) === dirname18(path) && p.endsWith(".go") && p !== path) : (() => {
+      const others = lang === "go" ? source2.list(dirname19(path) || void 0).filter((p) => dirname19(p) === dirname19(path) && p.endsWith(".go") && p !== path) : (() => {
         const imp = importOf(content, lang, fnName, null);
         return imp ? moduleFiles(source2, imp.spec, path, lang, tsCache) : [];
       })();
@@ -31377,7 +31528,7 @@ function definitionOf(input) {
     }
   }
   if (out2.length === 0 && lang === "go" && !receiver) {
-    for (const f of source2.list(dirname18(path) || void 0).filter((p) => dirname18(p) === dirname18(path) && p.endsWith(".go") && p !== path)) {
+    for (const f of source2.list(dirname19(path) || void 0).filter((p) => dirname19(p) === dirname19(path) && p.endsWith(".go") && p !== path)) {
       add(functionsNamed(outlineOf2(f), name2), "package");
       if (Date.now() > input.deadlineAt) break;
     }
@@ -32273,8 +32424,8 @@ async function repoContext(run4) {
 // src/lib/seed-runner.ts
 var import_promises13 = require("node:fs/promises");
 var import_node_fs50 = require("node:fs");
-var import_node_path38 = require("node:path");
-var import_yaml6 = __toESM2(require_dist());
+var import_node_path39 = require("node:path");
+var import_yaml7 = __toESM2(require_dist());
 
 // src/lib/seed.ts
 function extractReadmeIntro(content) {
@@ -32496,7 +32647,7 @@ function normalizeTitle(title) {
 async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
   const titles = /* @__PURE__ */ new Set();
   for (const dir of NODE_DIRS) {
-    const full = (0, import_node_path38.join)(memoryDir3, dir);
+    const full = (0, import_node_path39.join)(memoryDir3, dir);
     if (!(0, import_node_fs50.existsSync)(full)) continue;
     let files;
     try {
@@ -32508,7 +32659,7 @@ async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
       if (!file.endsWith(".md")) continue;
       let content;
       try {
-        content = await (0, import_promises13.readFile)((0, import_node_path38.join)(full, file), "utf-8");
+        content = await (0, import_promises13.readFile)((0, import_node_path39.join)(full, file), "utf-8");
       } catch {
         continue;
       }
@@ -32585,7 +32736,7 @@ async function runSeed(opts) {
   let standardDoc;
   try {
     const raw = await (0, import_promises13.readFile)(STANDARD_FILE, "utf-8");
-    standardDoc = (0, import_yaml6.parse)(raw);
+    standardDoc = (0, import_yaml7.parse)(raw);
   } catch {
     return { created: 0, existing: 0, failed: 0, skipped: "no_standard", candidates: [] };
   }
@@ -32685,7 +32836,7 @@ async function runSeed(opts) {
     }
     const content = typeof res.data.content === "string" && res.data.content.length > 0 ? res.data.content : renderNodeMarkdown(c, nodeId, createdAt);
     try {
-      await (0, import_promises13.mkdir)((0, import_node_path38.dirname)(targetPath), { recursive: true });
+      await (0, import_promises13.mkdir)((0, import_node_path39.dirname)(targetPath), { recursive: true });
       await (0, import_promises13.writeFile)(targetPath, content);
       if (deduplicated) existing++;
       else {
@@ -32702,7 +32853,7 @@ async function runSeed(opts) {
 
 // src/commands/analyze/phases/08-memory-manifest.ts
 var import_node_fs51 = require("node:fs");
-var import_node_path39 = require("node:path");
+var import_node_path40 = require("node:path");
 async function memoryManifest(run4) {
   const { globals } = run4;
   const { serviceUrl, token } = run4;
@@ -32712,7 +32863,7 @@ async function memoryManifest(run4) {
   let autoSeedNotice = null;
   try {
     await ensureMemoryDir();
-    const seedMarker = (0, import_node_path39.join)(VERITY_DIR, ".seeded");
+    const seedMarker = (0, import_node_path40.join)(VERITY_DIR, ".seeded");
     const hasStandard = (0, import_node_fs51.existsSync)(STANDARD_FILE);
     const alreadyTried = (0, import_node_fs51.existsSync)(seedMarker);
     if (hasStandard && !alreadyTried) {
@@ -32833,7 +32984,7 @@ function computeIncrement(reviewedPaths, hashOf, priorAuthored) {
 }
 
 // src/commands/analyze/phases/10-working-memory.ts
-var import_node_path40 = require("node:path");
+var import_node_path41 = require("node:path");
 async function workingMemory(run4) {
   const { opts } = run4;
   const { allForReview, baseline, conversation, foldResult, sessionId, token, transcriptPath } = run4;
@@ -32845,7 +32996,7 @@ async function workingMemory(run4) {
     const priorState = foldForMarks(memorySession.d);
     incrementReport = computeIncrement(
       allForReview,
-      (p) => fileHash((0, import_node_path40.join)(repoRoot(), p)),
+      (p) => fileHash((0, import_node_path41.join)(repoRoot(), p)),
       priorState.authored_all.map((a) => ({
         path: a.path,
         hash_at_last_verdict: a.hash_at_last_verdict
@@ -33474,7 +33625,7 @@ async function transmit(run4) {
 
 // src/commands/analyze/phases/13-reconcile.ts
 var import_node_fs54 = require("node:fs");
-var import_node_path41 = require("node:path");
+var import_node_path42 = require("node:path");
 async function reconcile(run4) {
   const { actionSummary, allChanged, analyzable, baseline, baselineSessionId, codeDelta, contentHash, conversation, decision, foldResult, memory: memory2, memorySession, response, reviewable, securityFiles, turnId } = run4;
   const sentPaths = codeDelta.files.map((f) => f.path);
@@ -33503,7 +33654,7 @@ async function reconcile(run4) {
       const st = foldDossier(memorySession.d);
       openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line2) => {
         try {
-          const src = (0, import_node_fs54.readFileSync)((0, import_node_path41.join)(repoRoot(), file), "utf8").split("\n");
+          const src = (0, import_node_fs54.readFileSync)((0, import_node_path42.join)(repoRoot(), file), "utf8").split("\n");
           const at = src[line2 - 1];
           return at === void 0 ? null : lineSha(at);
         } catch {
@@ -34067,11 +34218,11 @@ async function render(run4) {
       const sev = String(f.severity ?? "").toLowerCase();
       return sev === "critical" || sev === "high";
     });
-    const fingerprint = findingsFingerprint(blocking);
+    const fingerprint2 = findingsFingerprint(blocking);
     const prior = readBlockState(currentCommit, {
       newUserPrompt: (conversation?.prompts?.length ?? 0) > 0
     });
-    const sameProblem = isSameProblem(prior.fingerprint, fingerprint);
+    const sameProblem = isSameProblem(prior.fingerprint, fingerprint2);
     const maxIterations = parseInt(opts.maxIterations, 10);
     const attempts = sameProblem ? prior.attempts + 1 : 1;
     const blocks = prior.blocks + 1;
@@ -34084,7 +34235,7 @@ async function render(run4) {
       maxIterations
     });
     if (decisionNow.block) {
-      writeBlockState(currentCommit, { attempts, blocks, fingerprint });
+      writeBlockState(currentCommit, { attempts, blocks, fingerprint: fingerprint2 });
       iteration = attempts;
     } else {
       release = decisionNow.release;
@@ -34095,7 +34246,7 @@ async function render(run4) {
         blocks,
         reviewed_files: codeDelta.files.length,
         cycle_cut: silenced,
-        fingerprint
+        fingerprint: fingerprint2
       });
     }
   }
@@ -34325,7 +34476,7 @@ function registerAnalyzeCommand(program2) {
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
   if (!verityConfigured()) {
-    (0, import_node_fs55.writeSync)(2, isMachineStore((0, import_node_path42.join)(repoRoot(), VERITY_DIR)) ? "[verity] nothing to review in your home directory \u2014 run Verity inside a project.\n" : '[verity] not set up in this project \u2014 run "verity init" first.\n');
+    (0, import_node_fs55.writeSync)(2, isMachineStore((0, import_node_path43.join)(repoRoot(), VERITY_DIR)) ? "[verity] nothing to review in your home directory \u2014 run Verity inside a project.\n" : '[verity] not set up in this project \u2014 run "verity init" first.\n');
     process.exit(0);
   }
   const run4 = createRun(opts, globals);
@@ -34349,23 +34500,23 @@ async function runAnalyze(opts, globals) {
 var import_node_fs60 = require("node:fs");
 var import_node_child_process17 = require("node:child_process");
 var import_node_crypto18 = require("node:crypto");
-var import_node_path47 = require("node:path");
+var import_node_path48 = require("node:path");
 
 // src/lib/prove/runner.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_os9 = require("node:os");
 var import_node_fs58 = require("node:fs");
 var import_node_os10 = require("node:os");
-var import_node_path45 = require("node:path");
+var import_node_path46 = require("node:path");
 
 // src/lib/prove/scaffold.ts
 var import_node_fs57 = require("node:fs");
-var import_node_path44 = require("node:path");
+var import_node_path45 = require("node:path");
 
 // src/lib/prove/safe-write.ts
 var import_node_fs56 = require("node:fs");
 var import_node_crypto15 = require("node:crypto");
-var import_node_path43 = require("node:path");
+var import_node_path44 = require("node:path");
 var SafeWriteError = class extends Error {
   constructor(reason, path) {
     super(`refusing to write ${path}: ${reason}`);
@@ -34377,7 +34528,7 @@ var SafeWriteError = class extends Error {
 var FLAGS3 = import_node_fs56.constants;
 var NOFOLLOW2 = FLAGS3.O_NOFOLLOW ?? 0;
 function assertPlainRelative(rel) {
-  if (!rel || (0, import_node_path43.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
+  if (!rel || (0, import_node_path44.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
   for (const part of rel.split(/[\\/]/)) {
     if (part === ".." || part === "" || part === ".") throw new SafeWriteError("bad-path", rel);
   }
@@ -34386,7 +34537,7 @@ function ensureDirsNoFollow(root, rel) {
   const parts2 = rel.split(/[\\/]/);
   let cur = root;
   for (const part of parts2.slice(0, -1)) {
-    cur = (0, import_node_path43.join)(cur, part);
+    cur = (0, import_node_path44.join)(cur, part);
     let st;
     try {
       st = (0, import_node_fs56.lstatSync)(cur);
@@ -34397,10 +34548,10 @@ function ensureDirsNoFollow(root, rel) {
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", cur);
     if (!st.isDirectory()) throw new SafeWriteError("not-regular", cur);
   }
-  return (0, import_node_path43.join)(root, rel);
+  return (0, import_node_path44.join)(root, rel);
 }
 function insideRoot(realRoot, realPath) {
-  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path43.sep) ? realRoot : realRoot + import_node_path43.sep);
+  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path44.sep) ? realRoot : realRoot + import_node_path44.sep);
 }
 function removeQuietly(path) {
   try {
@@ -34411,7 +34562,7 @@ function removeQuietly(path) {
 function writeFileInRootNoFollow(root, rel, content) {
   assertPlainRelative(rel);
   const dest = ensureDirsNoFollow(root, rel);
-  const dir = (0, import_node_path43.dirname)(dest);
+  const dir = (0, import_node_path44.dirname)(dest);
   try {
     const st = (0, import_node_fs56.lstatSync)(dest);
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", dest);
@@ -34425,7 +34576,7 @@ function writeFileInRootNoFollow(root, rel, content) {
   } catch {
     throw new SafeWriteError("unwritable", root);
   }
-  const tmp = (0, import_node_path43.join)(dir, `.${(0, import_node_path43.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
+  const tmp = (0, import_node_path44.join)(dir, `.${(0, import_node_path44.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
   let fd;
   try {
     fd = (0, import_node_fs56.openSync)(tmp, import_node_fs56.constants.O_WRONLY | import_node_fs56.constants.O_CREAT | import_node_fs56.constants.O_EXCL | NOFOLLOW2, 420);
@@ -34469,7 +34620,7 @@ function pathHasNoLink(root, rel) {
   }
   let cur = root;
   for (const part of rel.split(/[\\/]/)) {
-    cur = cur + import_node_path43.sep + part;
+    cur = cur + import_node_path44.sep + part;
     try {
       if ((0, import_node_fs56.lstatSync)(cur).isSymbolicLink()) return false;
     } catch {
@@ -34781,20 +34932,20 @@ This directory is machine-local and gitignored (see ../.gitignore). Models are
 never committed; what reaches the team is the bug report and the fix.
 `;
 function scaffoldProofs(root) {
-  const proofsDir = (0, import_node_path44.join)(root, PROOFS_DIR);
+  const proofsDir = (0, import_node_path45.join)(root, PROOFS_DIR);
   const written = [];
   const kept = [];
   for (const stray of ["lakefile.lean"]) {
     const rel = `${PROOFS_DIR}/${stray}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
     try {
-      (0, import_node_fs57.rmSync)((0, import_node_path44.join)(root, rel), { force: true });
+      (0, import_node_fs57.rmSync)((0, import_node_path45.join)(root, rel), { force: true });
     } catch {
     }
   }
   for (const f of PROOFS_TEMPLATE_FILES) {
     const rel = `${PROOFS_DIR}/${f.path}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
     const current = readRegularFileInRoot(root, rel, 4 * 1024 * 1024);
     if (current.ok && current.content === f.content) {
       kept.push(rel);
@@ -34807,8 +34958,8 @@ function scaffoldProofs(root) {
     [`${PROOFS_DIR}/.gitignore`, LOCAL_GITIGNORE],
     [`${MODELS_DIR}/README.md`, MODELS_README]
   ]) {
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
-    if (existsNoFollow((0, import_node_path44.join)(root, rel))) {
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
+    if (existsNoFollow((0, import_node_path45.join)(root, rel))) {
       kept.push(rel);
       continue;
     }
@@ -35077,17 +35228,17 @@ function renderReport(r) {
 
 // src/lib/prove/runner.ts
 function verityLeanHome(env = process.env) {
-  return env.VERITY_LEAN_HOME ?? (0, import_node_path45.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".verity", "lean");
+  return env.VERITY_LEAN_HOME ?? (0, import_node_path46.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".verity", "lean");
 }
 function findToolchain(env = process.env) {
-  const managedBin = (0, import_node_path45.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
-  const elanBin = (0, import_node_path45.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "bin");
-  const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path45.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
-  const userPath = (env.PATH ?? "").split(import_node_path45.delimiter).filter((d) => d && (elanHas || (0, import_node_path45.resolve)(d) !== (0, import_node_path45.resolve)(elanBin)));
-  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path45.delimiter);
+  const managedBin = (0, import_node_path46.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
+  const elanBin = (0, import_node_path46.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "bin");
+  const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path46.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const userPath = (env.PATH ?? "").split(import_node_path46.delimiter).filter((d) => d && (elanHas || (0, import_node_path46.resolve)(d) !== (0, import_node_path46.resolve)(elanBin)));
+  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path46.delimiter);
   const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
   const exe = process.platform === "win32" ? "lake.exe" : "lake";
-  const candidates2 = [(0, import_node_path45.join)(managedBin, exe), ...elanHas ? [(0, import_node_path45.join)(elanBin, exe)] : [], exe];
+  const candidates2 = [(0, import_node_path46.join)(managedBin, exe), ...elanHas ? [(0, import_node_path46.join)(elanBin, exe)] : [], exe];
   for (const candidate of candidates2) {
     try {
       (0, import_node_child_process15.execFileSync)(candidate, ["--version"], { env: merged, stdio: ["ignore", "pipe", "pipe"], timeout: 1e4 });
@@ -35166,7 +35317,7 @@ function proofsWorkspaceProblem(root) {
   for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
     let st;
     try {
-      st = (0, import_node_fs58.lstatSync)((0, import_node_path45.join)(root, rel));
+      st = (0, import_node_fs58.lstatSync)((0, import_node_path46.join)(root, rel));
     } catch {
       break;
     }
@@ -35186,44 +35337,44 @@ function refused(problem) {
 function buildLibrary(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return run2(tc, (0, import_node_path45.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return run2(tc, (0, import_node_path46.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 async function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return runAsync(tc, (0, import_node_path45.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return runAsync(tc, (0, import_node_path46.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 function isModelInRoot(modelsAbs, rel) {
-  if (!rel.endsWith(".lean") || (0, import_node_path45.isAbsolute)(rel) || rel.startsWith("..")) return false;
+  if (!rel.endsWith(".lean") || (0, import_node_path46.isAbsolute)(rel) || rel.startsWith("..")) return false;
   return statRegularInRoot(modelsAbs, rel).ok;
 }
 function resolveModelFile(root, arg) {
-  const modelsAbs = (0, import_node_path45.join)(root, MODELS_DIR);
-  const asPath = (0, import_node_path45.relative)(modelsAbs, (0, import_node_path45.isAbsolute)(arg) ? arg : (0, import_node_path45.resolve)(root, arg));
+  const modelsAbs = (0, import_node_path46.join)(root, MODELS_DIR);
+  const asPath = (0, import_node_path46.relative)(modelsAbs, (0, import_node_path46.isAbsolute)(arg) ? arg : (0, import_node_path46.resolve)(root, arg));
   const candidates2 = arg.includes("/") || arg.includes("\\") ? [asPath] : [arg, `${arg}.lean`];
   for (const rel of candidates2) {
-    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path45.join)(modelsAbs, rel);
+    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path46.join)(modelsAbs, rel);
   }
   return null;
 }
 function listModelFiles(root) {
-  const modelsAbs = (0, import_node_path45.join)(root, MODELS_DIR);
+  const modelsAbs = (0, import_node_path46.join)(root, MODELS_DIR);
   if (!(0, import_node_fs58.existsSync)(modelsAbs)) return [];
-  return (0, import_node_fs58.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path45.join)(modelsAbs, f));
+  return (0, import_node_fs58.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path46.join)(modelsAbs, f));
 }
 function trimDiagnostics(text2) {
   return text2.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
 }
 function checkModel(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path45.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path45.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path46.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path46.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 async function checkModelAsync(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path45.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path45.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path46.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path46.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
@@ -35232,10 +35383,10 @@ function toReport(res, root, modelFile, timeoutMs) {
   const parsed = parseVerityLines(res.stdout);
   const combined = `${res.stdout}
 ${res.stderr}`;
-  const name2 = parsed.header?.model ?? (0, import_node_path45.basename)(modelFile, ".lean");
+  const name2 = parsed.header?.model ?? (0, import_node_path46.basename)(modelFile, ".lean");
   const report = {
     model: name2,
-    file: (0, import_node_path45.relative)(root, modelFile),
+    file: (0, import_node_path46.relative)(root, modelFile),
     ok: res.ok,
     header: parsed.header,
     properties: parsed.properties,
@@ -35281,7 +35432,7 @@ var import_node_fs59 = require("node:fs");
 var import_node_crypto17 = require("node:crypto");
 var import_node_child_process16 = require("node:child_process");
 var import_node_os11 = require("node:os");
-var import_node_path46 = require("node:path");
+var import_node_path47 = require("node:path");
 var import_promises15 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
 var RELEASES = "https://releases.lean-lang.org/lean4";
@@ -35295,7 +35446,7 @@ function freeBytes(dir) {
       const st = (0, import_node_fs59.statfsSync)(d);
       return Number(st.bavail) * Number(st.bsize);
     } catch {
-      const up = (0, import_node_path46.join)(d, "..");
+      const up = (0, import_node_path47.join)(d, "..");
       if (up === d) return null;
       d = up;
     }
@@ -35337,13 +35488,13 @@ function leanAssetName(version = pinnedVersion()) {
   return suffix ? `lean-${v}-${suffix}.zip` : null;
 }
 function pinnedVersionDir(env = process.env) {
-  return (0, import_node_path46.join)(verityLeanHome(env), pinnedVersion());
+  return (0, import_node_path47.join)(verityLeanHome(env), pinnedVersion());
 }
 function lakeBinary() {
   return (0, import_node_os11.platform)() === "win32" ? "lake.exe" : "lake";
 }
 function managedInstalled(env = process.env) {
-  return (0, import_node_fs59.existsSync)((0, import_node_path46.join)(pinnedVersionDir(env), "bin", lakeBinary()));
+  return (0, import_node_fs59.existsSync)((0, import_node_path47.join)(pinnedVersionDir(env), "bin", lakeBinary()));
 }
 function unzip(zip, dest) {
   const attempts = (0, import_node_os11.platform)() === "linux" ? [["unzip", ["-q", zip, "-d", dest]], ["python3", ["-m", "zipfile", "-e", zip, dest]], ["tar", ["-xf", zip, "-C", dest]]] : [["tar", ["-xf", zip, "-C", dest]], ["unzip", ["-q", zip, "-d", dest]], ["python3", ["-m", "zipfile", "-e", zip, dest]]];
@@ -35356,7 +35507,7 @@ function unzip(zip, dest) {
     } catch (err2) {
       errors.push(`${cmd}: ${String(err2.message).split("\n")[0].slice(0, 120)}`);
       try {
-        for (const e of (0, import_node_fs59.readdirSync)(dest)) (0, import_node_fs59.rmSync)((0, import_node_path46.join)(dest, e), { recursive: true, force: true });
+        for (const e of (0, import_node_fs59.readdirSync)(dest)) (0, import_node_fs59.rmSync)((0, import_node_path47.join)(dest, e), { recursive: true, force: true });
       } catch {
       }
     }
@@ -35432,10 +35583,10 @@ async function installLean(opts = {}) {
     const gb = (n2) => (n2 / 1024 ** 3).toFixed(1);
     return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
   }
-  const tmp = (0, import_node_path46.join)(home, ".tmp");
+  const tmp = (0, import_node_path47.join)(home, ".tmp");
   (0, import_node_fs59.rmSync)(tmp, { recursive: true, force: true });
   (0, import_node_fs59.mkdirSync)(tmp, { recursive: true });
-  const zip = (0, import_node_path46.join)(tmp, asset);
+  const zip = (0, import_node_path47.join)(tmp, asset);
   say(`downloading ${url}`);
   let lastPct = -1;
   try {
@@ -35458,7 +35609,7 @@ async function installLean(opts = {}) {
     return { ok: false, error: verified.error };
   }
   say("unpacking (this takes a minute)");
-  const unpack = (0, import_node_path46.join)(tmp, "unpack");
+  const unpack = (0, import_node_path47.join)(tmp, "unpack");
   (0, import_node_fs59.mkdirSync)(unpack);
   const unpacked = unzip(zip, unpack);
   if (!unpacked.ok) {
@@ -35466,8 +35617,8 @@ async function installLean(opts = {}) {
     return { ok: false, error: `unpack failed: ${unpacked.error}` };
   }
   const entries = (0, import_node_fs59.readdirSync)(unpack);
-  const top = entries.length === 1 && (0, import_node_fs59.statSync)((0, import_node_path46.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path46.join)(unpack, entries[0]) : unpack;
-  if (!(0, import_node_fs59.existsSync)((0, import_node_path46.join)(top, "bin", lakeBinary()))) {
+  const top = entries.length === 1 && (0, import_node_fs59.statSync)((0, import_node_path47.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path47.join)(unpack, entries[0]) : unpack;
+  if (!(0, import_node_fs59.existsSync)((0, import_node_path47.join)(top, "bin", lakeBinary()))) {
     (0, import_node_fs59.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: "the archive did not contain bin/lake" };
   }
@@ -35551,7 +35702,7 @@ function startBackgroundInstall(opts) {
   const home = verityLeanHome(env);
   try {
     (0, import_node_fs60.mkdirSync)(home, { recursive: true });
-    const log = (0, import_node_fs60.openSync)((0, import_node_path47.join)(home, LOG_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_APPEND | import_node_fs60.constants.O_CREAT | (import_node_fs60.constants.O_NOFOLLOW ?? 0), 384);
+    const log = (0, import_node_fs60.openSync)((0, import_node_path48.join)(home, LOG_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_APPEND | import_node_fs60.constants.O_CREAT | (import_node_fs60.constants.O_NOFOLLOW ?? 0), 384);
     try {
       const child = (opts.run ?? import_node_child_process17.spawn)(process.execPath, [opts.cli, "lean", "install", "--yes", "--background"], {
         detached: true,
@@ -35583,7 +35734,7 @@ function lockToken(env) {
 function acquireInstallLock(env = process.env, now = Date.now()) {
   const home = verityLeanHome(env);
   (0, import_node_fs60.mkdirSync)(home, { recursive: true });
-  const lock = (0, import_node_path47.join)(home, LOCK_FILE);
+  const lock = (0, import_node_path48.join)(home, LOCK_FILE);
   if ((0, import_node_fs60.existsSync)(lock) && !installRunning(env, now)) (0, import_node_fs60.rmSync)(lock, { force: true });
   const token = (0, import_node_crypto18.randomBytes)(16).toString("hex");
   try {
@@ -35599,7 +35750,7 @@ function acquireInstallLock(env = process.env, now = Date.now()) {
 function refreshInstallLock(env = process.env, now = Date.now()) {
   if (!heldToken || lockToken(env) !== heldToken) return;
   try {
-    const fd = (0, import_node_fs60.openSync)((0, import_node_path47.join)(verityLeanHome(env), LOCK_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_TRUNC | (import_node_fs60.constants.O_NOFOLLOW ?? 0));
+    const fd = (0, import_node_fs60.openSync)((0, import_node_path48.join)(verityLeanHome(env), LOCK_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_TRUNC | (import_node_fs60.constants.O_NOFOLLOW ?? 0));
     try {
       (0, import_node_fs60.writeFileSync)(fd, JSON.stringify({ pid: process.pid, at: now, token: heldToken }));
     } finally {
@@ -35609,7 +35760,7 @@ function refreshInstallLock(env = process.env, now = Date.now()) {
   }
 }
 function releaseInstallLock(env = process.env) {
-  if (heldToken && lockToken(env) === heldToken) (0, import_node_fs60.rmSync)((0, import_node_path47.join)(verityLeanHome(env), LOCK_FILE), { force: true });
+  if (heldToken && lockToken(env) === heldToken) (0, import_node_fs60.rmSync)((0, import_node_path48.join)(verityLeanHome(env), LOCK_FILE), { force: true });
   heldToken = null;
 }
 function writeInstallState(state, env = process.env) {
@@ -35662,14 +35813,14 @@ function resumeInterruptedInstall(opts) {
 
 // src/commands/baseline.ts
 var import_node_fs63 = require("node:fs");
-var import_node_path50 = require("node:path");
+var import_node_path51 = require("node:path");
 
 // src/lib/skew-notice.ts
 var import_node_fs61 = require("node:fs");
-var import_node_path48 = require("node:path");
+var import_node_path49 = require("node:path");
 var MARKER = ".skew-notice.json";
 function markerPath2() {
-  return (0, import_node_path48.join)(verityHome(), MARKER);
+  return (0, import_node_path49.join)(verityHome(), MARKER);
 }
 function today(now) {
   const y = now.getFullYear();
@@ -35695,7 +35846,7 @@ function recordSkewNotice(skew, now = /* @__PURE__ */ new Date()) {
 
 // src/lib/project-skills.ts
 var import_node_fs62 = require("node:fs");
-var import_node_path49 = require("node:path");
+var import_node_path50 = require("node:path");
 var PROJECT_SKILL_NAMES = [
   "verity-setup",
   "verity-analyze",
@@ -35722,13 +35873,13 @@ var ALL = [...PROJECT_SKILL_NAMES, ...LEGACY_SKILL_NAMES];
 function staleProjectSkills() {
   const root = projectPath(".claude/skills");
   if (!(0, import_node_fs62.existsSync)(root)) return [];
-  return ALL.filter((name2) => (0, import_node_fs62.existsSync)((0, import_node_path49.join)(root, name2)));
+  return ALL.filter((name2) => (0, import_node_fs62.existsSync)((0, import_node_path50.join)(root, name2)));
 }
 function removeProjectSkills() {
   const root = projectPath(".claude/skills");
   const removed = [];
   for (const name2 of staleProjectSkills()) {
-    (0, import_node_fs62.rmSync)((0, import_node_path49.join)(root, name2), { recursive: true, force: true });
+    (0, import_node_fs62.rmSync)((0, import_node_path50.join)(root, name2), { recursive: true, force: true });
     removed.push(name2);
   }
   return removed;
@@ -35763,7 +35914,7 @@ function registerBaselineCommands(program2) {
       const loginWarning = "Until they have, do not send them to run `verity login` in a terminal: that runs the global one, which can sign this machine in to a different server.";
       const skewNote = !skew ? null : skewLoud ? `Before anything else, including /verity:init's questions, tell the user their global \`verity\` is ${skew.global}, the hooks run ${skew.hooks}, and \`${skew.remedy}\` fixes it. ${loginWarning}` : `The user's global \`verity\` is ${skew.global} and the hooks run ${skew.hooks}; \`${skew.remedy}\` fixes it. They were already told today, so do not repeat it unprompted \u2014 mention it only where it matters, such as before suggesting a \`verity\` command for their terminal. ${loginWarning}`;
       if (!verityConfigured()) {
-        if (isMachineStore((0, import_node_path50.join)(repoRoot(), VERITY_DIR))) process.exit(0);
+        if (isMachineStore((0, import_node_path51.join)(repoRoot(), VERITY_DIR))) process.exit(0);
         const how = isPluginInvocation() ? "Tell the user to run /verity:init \u2014 they type it; you cannot invoke it." : "Tell the user to run `verity init` in their terminal.";
         const lines = [
           `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
@@ -35907,30 +36058,30 @@ function hookSource(value) {
 
 // src/commands/review.ts
 var import_node_fs64 = require("node:fs");
-var import_node_path51 = require("node:path");
+var import_node_path52 = require("node:path");
 function containReviewPaths(paths, base) {
   const kept = [];
   const refused2 = [];
   for (const raw of paths) {
-    const candidate = (0, import_node_path51.isAbsolute)(raw) ? relativeForm(base, raw) : raw;
+    const candidate = (0, import_node_path52.isAbsolute)(raw) ? relativeForm(base, raw) : raw;
     if (candidate === "" || resolveInside(base, candidate) === null) refused2.push(raw);
     else kept.push(candidate);
   }
   return { kept, refused: refused2 };
 }
 function relativeForm(base, abs) {
-  const lexical = (0, import_node_path51.relative)(base, abs);
-  if (!(lexical === ".." || lexical.startsWith(`..${import_node_path51.sep}`) || (0, import_node_path51.isAbsolute)(lexical))) return lexical;
+  const lexical = (0, import_node_path52.relative)(base, abs);
+  if (!(lexical === ".." || lexical.startsWith(`..${import_node_path52.sep}`) || (0, import_node_path52.isAbsolute)(lexical))) return lexical;
   try {
-    let dir = (0, import_node_path51.dirname)(abs);
-    let rest = (0, import_node_path51.basename)(abs);
+    let dir = (0, import_node_path52.dirname)(abs);
+    let rest = (0, import_node_path52.basename)(abs);
     while (!(0, import_node_fs64.existsSync)(dir)) {
-      const up = (0, import_node_path51.dirname)(dir);
+      const up = (0, import_node_path52.dirname)(dir);
       if (up === dir) return lexical;
-      rest = (0, import_node_path51.join)((0, import_node_path51.basename)(dir), rest);
+      rest = (0, import_node_path52.join)((0, import_node_path52.basename)(dir), rest);
       dir = up;
     }
-    return (0, import_node_path51.relative)((0, import_node_fs64.realpathSync)(base), (0, import_node_path51.join)((0, import_node_fs64.realpathSync)(dir), rest));
+    return (0, import_node_path52.relative)((0, import_node_fs64.realpathSync)(base), (0, import_node_path52.join)((0, import_node_fs64.realpathSync)(dir), rest));
   } catch {
     return lexical;
   }
@@ -36036,11 +36187,11 @@ async function runReview(opts, globals) {
 
 // src/commands/guard.ts
 var import_node_fs67 = require("node:fs");
-var import_node_path55 = require("node:path");
+var import_node_path56 = require("node:path");
 
 // src/lib/vendored.ts
 var import_node_fs65 = require("node:fs");
-var import_node_path52 = require("node:path");
+var import_node_path53 = require("node:path");
 var INSTALLED_SKILL = /^\.claude\/skills\/(verity-[a-z0-9-]+)\/(.+)$/;
 function dataDirOrNull() {
   try {
@@ -36055,7 +36206,7 @@ function shippedSkillFile(path, dataDir = dataDirOrNull()) {
   const [, skill, rel] = m;
   if (rel.split("/").some((seg) => seg === ".." || seg === ".")) return null;
   try {
-    return (0, import_node_fs65.readFileSync)((0, import_node_path52.join)(dataDir, "skills", skill, rel), "utf8");
+    return (0, import_node_fs65.readFileSync)((0, import_node_path53.join)(dataDir, "skills", skill, rel), "utf8");
   } catch {
     return null;
   }
@@ -36166,8 +36317,8 @@ async function runAgentReview(options) {
 
 // src/lib/effort.ts
 var import_node_fs66 = require("node:fs");
-var import_node_path53 = require("node:path");
-var import_yaml7 = __toESM2(require_dist());
+var import_node_path54 = require("node:path");
+var import_yaml8 = __toESM2(require_dist());
 var EFFORT_PROFILES = {
   default: { pushDeadlineMs: 18e4, formal: { tier: "fast", maxRounds: 2, minScore: 0.7, costCapUsd: 1, maxTargets: 1, relaxedGates: false, dailyModels: 5, dailyCostUsd: 5 } },
   high: { pushDeadlineMs: 22e4, formal: { tier: "deep", maxRounds: 2, minScore: 0.6, costCapUsd: 2, maxTargets: 2, relaxedGates: false, dailyModels: 15, dailyCostUsd: 15 } },
@@ -36179,7 +36330,7 @@ function asEffort(value) {
 function resolveEffort(root, env = process.env) {
   if (env.VERITY_EFFORT) return asEffort(env.VERITY_EFFORT);
   try {
-    const standard = (0, import_yaml7.parse)((0, import_node_fs66.readFileSync)((0, import_node_path53.join)(root, STANDARD_FILE), "utf8"));
+    const standard = (0, import_yaml8.parse)((0, import_node_fs66.readFileSync)((0, import_node_path54.join)(root, STANDARD_FILE), "utf8"));
     return asEffort(standard?.process_constraints?.git_moment_effort);
   } catch {
     return "default";
@@ -36190,7 +36341,7 @@ function effortProfile(root, env = process.env) {
 }
 
 // src/lib/prove/auto.ts
-var import_node_path54 = require("node:path");
+var import_node_path55 = require("node:path");
 var import_node_crypto21 = require("node:crypto");
 
 // src/lib/prove/grounding.ts
@@ -37885,8 +38036,8 @@ function readVerified(root, now = Date.now()) {
     return [];
   }
 }
-function findVerified(root, file, symbol, fingerprint, now = Date.now()) {
-  return readVerified(root, now).find((r) => r.file === file && r.symbol === symbol && r.fingerprint === fingerprint) ?? null;
+function findVerified(root, file, symbol, fingerprint2, now = Date.now()) {
+  return readVerified(root, now).find((r) => r.file === file && r.symbol === symbol && r.fingerprint === fingerprint2) ?? null;
 }
 function recordVerified(root, rec, now = Date.now()) {
   const others = readVerified(root, now).filter((r) => !(r.file === rec.file && r.symbol === rec.symbol));
@@ -38344,7 +38495,7 @@ async function runFormalPhase(input) {
     modelName = gen.name;
     const rel = `${AUTO_MODELS_DIR}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path54.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path55.join)(root, rel);
     progress.model = { name: gen.name, file: rel, rounds: round };
     progress.step = "check";
     report = await deps.check(root, abs);
@@ -38493,7 +38644,7 @@ async function runFormalPhase(input) {
   return done({
     status: "checked",
     target,
-    model: { name: modelName, file: (0, import_node_path54.relative)(root, (0, import_node_path54.join)(root, modelFile)), rounds },
+    model: { name: modelName, file: (0, import_node_path55.relative)(root, (0, import_node_path55.join)(root, modelFile)), rounds },
     properties: report.properties,
     findings
   });
@@ -38570,7 +38721,7 @@ async function generateAndCheck(root, req, opts) {
     }
     const rel = `${dir}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path54.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path55.join)(root, rel);
     const report = await opts.deps.check(root, abs);
     const abstracts = report.header?.abstracts ?? [];
     const stray = abstracts.find((a) => !headerFiles.has(a.file)) ?? (abstracts[0] && abstracts[0].file !== req.file ? abstracts[0] : void 0);
@@ -38960,7 +39111,7 @@ var WRITERS_BUDGET_MS = 1500;
 var EXCERPT_MAX_LINES2 = 30;
 var VENDORED_READ_MAX_BYTES = 256 * 1024;
 var GUARD_BLOCK_CAP = 2;
-var GUARD_ITER_FILE = (0, import_node_path55.join)(VERITY_DIR, ".guard-iteration");
+var GUARD_ITER_FILE = (0, import_node_path56.join)(VERITY_DIR, ".guard-iteration");
 function readPreToolUseStdin() {
   const empty = { command: "", cwd: null, sessionId: null };
   return new Promise((resolve9) => {
@@ -39130,11 +39281,11 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
     }
   };
   if (coverageTelemetry) requestBody2.coverage_telemetry = coverageTelemetry;
-  const docs2 = discoverGuardDocs(files);
-  if (docs2.length > 0 || statedIntent) {
+  const docs = discoverGuardDocs(files);
+  if (docs.length > 0 || statedIntent) {
     const intentContext = {};
     if (statedIntent) intentContext.user_prompt = statedIntent;
-    if (docs2.length > 0) intentContext.plans = docs2;
+    if (docs.length > 0) intentContext.plans = docs;
     requestBody2.intent_context = intentContext;
   }
   return requestBody2;
@@ -39819,14 +39970,99 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init/index.ts
-var import_node_fs74 = require("node:fs");
+var import_node_fs77 = require("node:fs");
 var import_promises19 = require("node:fs/promises");
-var import_node_path60 = require("node:path");
+var import_node_path65 = require("node:path");
 
-// src/lib/init-trace.ts
+// src/lib/init-changes.ts
 var import_node_crypto23 = require("node:crypto");
 var import_node_fs69 = require("node:fs");
-var import_node_path56 = require("node:path");
+var import_node_os12 = require("node:os");
+var import_node_path57 = require("node:path");
+var REPO_FILES = [
+  ".gitignore",
+  "CLAUDE.md",
+  ".claude/settings.json",
+  ".claude/settings.local.json",
+  STANDARD_FILE,
+  VERITY_MD_FILE,
+  CODACY_CONFIG_FILE,
+  ".codacy/tools-configs/eslint.config.mjs"
+];
+var SKILLS_DIR = ".claude/skills";
+var MAX_HASH_BYTES = 2 * 1024 * 1024;
+var MAX_TREE_ENTRIES = 2e3;
+function userSettingsDir(env) {
+  return env.CLAUDE_CONFIG_DIR || (0, import_node_path57.join)(env.HOME || (0, import_node_os12.homedir)(), ".claude");
+}
+function fingerprint(root, rel) {
+  const opened = openRegularInRoot(root, rel);
+  if (!opened.ok) {
+    if (opened.reason === "missing") return null;
+    if (opened.reason === "symlink") {
+      try {
+        return `link:${(0, import_node_fs69.readlinkSync)((0, import_node_path57.join)(root, rel))}`;
+      } catch {
+        return "link";
+      }
+    }
+    return `refused:${opened.reason}`;
+  }
+  if (opened.size > MAX_HASH_BYTES) {
+    closeOpened(opened.fd);
+    return `size:${opened.size}`;
+  }
+  try {
+    return (0, import_node_crypto23.createHash)("sha256").update(readOpened(opened.fd, opened.size)).digest("hex");
+  } catch {
+    return "unreadable";
+  }
+}
+function treeFingerprint(root, dirRel) {
+  try {
+    if (!(0, import_node_fs69.lstatSync)((0, import_node_path57.join)(root, dirRel)).isDirectory()) return fingerprint(root, dirRel);
+  } catch {
+    return null;
+  }
+  const parts2 = [];
+  const walk2 = (rel) => {
+    let names2;
+    try {
+      names2 = (0, import_node_fs69.readdirSync)((0, import_node_path57.join)(root, rel)).sort();
+    } catch {
+      return;
+    }
+    for (const name2 of names2) {
+      if (parts2.length >= MAX_TREE_ENTRIES) return;
+      const relPath = `${rel}/${name2}`;
+      let st;
+      try {
+        st = (0, import_node_fs69.lstatSync)((0, import_node_path57.join)(root, relPath));
+      } catch {
+        continue;
+      }
+      if (st.isDirectory()) walk2(relPath);
+      else parts2.push(`${relPath}\0${fingerprint(root, relPath)}`);
+    }
+  };
+  walk2(dirRel);
+  return (0, import_node_crypto23.createHash)("sha256").update(parts2.join("\n")).digest("hex");
+}
+function snapshotInitFiles(root = process.cwd(), env = process.env) {
+  const snap = /* @__PURE__ */ new Map();
+  for (const f of REPO_FILES) snap.set(f, fingerprint(root, f));
+  snap.set(`${SKILLS_DIR}/`, treeFingerprint(root, SKILLS_DIR));
+  snap.set("~/.claude/settings.json", fingerprint(userSettingsDir(env), "settings.json"));
+  return snap;
+}
+function changedSince(before, after) {
+  return [...after.keys()].filter((k) => before.get(k) !== after.get(k));
+}
+
+// src/lib/init-trace.ts
+var import_node_crypto24 = require("node:crypto");
+var import_node_fs70 = require("node:fs");
+var import_node_path58 = require("node:path");
 var INIT_STEPS = [
   "started",
   "prerequisites",
@@ -39872,9 +40108,9 @@ function traceDisabled(env = process.env) {
 }
 var PENDING_NAME = "init-trace.json";
 var MAX_PENDING_BYTES = 64 * 1024;
-var verityHome2 = () => (0, import_node_path56.join)(process.env.HOME ?? "", ".verity");
+var verityHome2 = () => (0, import_node_path58.join)(process.env.HOME ?? "", ".verity");
 function pendingTracePath() {
-  return (0, import_node_path56.join)(verityHome2(), PENDING_NAME);
+  return (0, import_node_path58.join)(verityHome2(), PENDING_NAME);
 }
 var RUN_ID = /^[0-9a-f]{16}$/;
 var CLI_VERSION = /^[0-9A-Za-z.+-]{1,40}$/;
@@ -39932,10 +40168,10 @@ function writePending(runs) {
   try {
     const kept = runs.filter((r) => r.events.length > 0).slice(-MAX_PENDING_RUNS);
     if (kept.length === 0) {
-      (0, import_node_fs69.rmSync)(pendingTracePath(), { force: true });
+      (0, import_node_fs70.rmSync)(pendingTracePath(), { force: true });
       return;
     }
-    (0, import_node_fs69.mkdirSync)(verityHome2(), { recursive: true });
+    (0, import_node_fs70.mkdirSync)(verityHome2(), { recursive: true });
     if (!replaceInRoot(verityHome2(), PENDING_NAME, JSON.stringify(kept))) {
       logEvent("init_trace_save_refused", {});
     }
@@ -39978,7 +40214,7 @@ function startInitTrace(opts) {
   if (traceDisabled()) return NOOP;
   const startedAt = Date.now();
   const current = {
-    run_id: (0, import_node_crypto23.randomBytes)(8).toString("hex"),
+    run_id: (0, import_node_crypto24.randomBytes)(8).toString("hex"),
     mode: opts.mode,
     interactive: opts.interactive,
     cli_version: cliVersion(),
@@ -40628,400 +40864,11 @@ var Rail = class {
   }
 };
 
-// src/commands/migrate.ts
-var import_node_fs70 = require("node:fs");
-var import_node_path57 = require("node:path");
-var import_node_child_process18 = require("node:child_process");
-
-// src/lib/telemetry.ts
-var import_promises16 = require("node:fs/promises");
-var SETTINGS_LOCAL_FILE2 = ".claude/settings.local.json";
-var GITIGNORE_FILE = ".gitignore";
-var GITIGNORE_ENTRY = SETTINGS_LOCAL_IGNORE_ENTRY;
-var OTEL_HEADERS_HELPER_CMD = "verity telemetry headers";
-var LEGACY_TELEMETRY_ENV_KEYS = ["OTEL_EXPORTER_OTLP_HEADERS"];
-function deriveOtlpEndpoint(serviceUrl) {
-  return serviceUrl.replace(/\/+$/, "").replace(/\/v1$/, "") + "/v1/otlp";
-}
-function buildTelemetryEnv(serviceUrl) {
-  return {
-    CLAUDE_CODE_ENABLE_TELEMETRY: "1",
-    OTEL_METRICS_EXPORTER: "otlp",
-    OTEL_TRACES_EXPORTER: "otlp",
-    CLAUDE_CODE_ENHANCED_TELEMETRY_BETA: "1",
-    OTEL_EXPORTER_OTLP_PROTOCOL: "http/json",
-    OTEL_EXPORTER_OTLP_ENDPOINT: deriveOtlpEndpoint(serviceUrl),
-    OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE: "delta",
-    OTEL_LOG_USER_PROMPTS: "0",
-    OTEL_LOG_TOOL_DETAILS: "0",
-    OTEL_LOG_TOOL_CONTENT: "0",
-    OTEL_METRICS_INCLUDE_SESSION_ID: "true",
-    OTEL_METRICS_INCLUDE_ACCOUNT_UUID: "false",
-    OTEL_METRICS_INCLUDE_VERSION: "false",
-    OTEL_METRIC_EXPORT_INTERVAL: "60000"
-  };
-}
-var VERITY_TELEMETRY_KEYS = Object.keys(buildTelemetryEnv(""));
-async function readSettingsLocal() {
-  try {
-    return JSON.parse(await (0, import_promises16.readFile)(projectPath(SETTINGS_LOCAL_FILE2), "utf-8"));
-  } catch {
-    return {};
-  }
-}
-async function writeSettingsLocal(settings) {
-  await writeJsonFilePreservingStyle(projectPath(SETTINGS_LOCAL_FILE2), settings);
-}
-async function ensureGitignore() {
-  const file = projectPath(GITIGNORE_FILE);
-  let content = "";
-  try {
-    content = await (0, import_promises16.readFile)(file, "utf-8");
-  } catch {
-  }
-  const lines = content.split("\n").map((l) => l.trim());
-  if (lines.includes(GITIGNORE_ENTRY) || lines.includes(".claude/") || lines.includes(".claude")) {
-    return;
-  }
-  const block = "# Verity telemetry \u2014 machine-local Claude Code settings\n" + GITIGNORE_ENTRY + "\n";
-  const next = content ? content + (content.endsWith("\n") ? "" : "\n") + "\n" + block : block;
-  await (0, import_promises16.writeFile)(file, next);
-}
-async function installTelemetry(serviceUrl) {
-  const env = buildTelemetryEnv(serviceUrl);
-  const settings = await readSettingsLocal();
-  settings.env = { ...settings.env ?? {}, ...env };
-  for (const key of LEGACY_TELEMETRY_ENV_KEYS) delete settings.env[key];
-  settings.otelHeadersHelper = OTEL_HEADERS_HELPER_CMD;
-  await writeSettingsLocal(settings);
-  await ensureGitignore();
-  return { ok: true, data: { endpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT } };
-}
-async function checkTelemetry() {
-  const env = (await readSettingsLocal()).env ?? {};
-  const enabled = env.CLAUDE_CODE_ENABLE_TELEMETRY === "1" && !!env.OTEL_EXPORTER_OTLP_ENDPOINT;
-  return { enabled, endpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT ?? null, settingsPath: SETTINGS_LOCAL_FILE2 };
-}
-async function uninstallTelemetry() {
-  const settings = await readSettingsLocal();
-  const hadHelper = settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD;
-  if (hadHelper) delete settings.otelHeadersHelper;
-  if (!settings.env) {
-    if (hadHelper) await writeSettingsLocal(settings);
-    return { ok: true, data: { removed: 0 } };
-  }
-  let removed = 0;
-  for (const key of VERITY_TELEMETRY_KEYS) {
-    if (key in settings.env) {
-      delete settings.env[key];
-      removed++;
-    }
-  }
-  for (const key of LEGACY_TELEMETRY_ENV_KEYS) delete settings.env[key];
-  if (Object.keys(settings.env).length === 0) delete settings.env;
-  await writeSettingsLocal(settings);
-  return { ok: true, data: { removed } };
-}
-
-// src/commands/migrate.ts
-var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
-function defaultNpmRemover(pkg) {
-  (0, import_node_child_process18.execSync)(`npm rm -g ${pkg}`, { stdio: "pipe", timeout: 12e4 });
-}
-function isGitTracked(cwd, relPath) {
-  try {
-    (0, import_node_child_process18.execSync)(`git ls-files --error-unmatch ${relPath}`, { cwd, stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function isGitRepo(cwd) {
-  try {
-    (0, import_node_child_process18.execSync)("git rev-parse --is-inside-work-tree", { cwd, stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function runMigration(opts = {}) {
-  const root = opts.cwd ?? repoRoot();
-  const home = opts.home ?? process.env.HOME ?? "";
-  const npmRemover = opts.npmRemover ?? defaultNpmRemover;
-  const actions = [];
-  const movedProjectDir = migrateProjectDir(root, actions);
-  migrateGlobalCredentials(home, actions);
-  await migrateLegacyHooks(root, actions);
-  await migrateClaudeMd(root, actions);
-  migrateStandardFile(root, actions);
-  await migrateTelemetryHeaders(root, actions);
-  removeLegacyPackage(movedProjectDir, npmRemover, actions);
-  return { actions, migrated: actions.length > 0 };
-}
-function migrateProjectDir(root, actions) {
-  const gateDir = (0, import_node_path57.join)(root, ".gate");
-  const verityDir = (0, import_node_path57.join)(root, ".verity");
-  if ((0, import_node_fs70.existsSync)(gateDir) && !(0, import_node_fs70.existsSync)(verityDir)) {
-    return migrateProjectDirRename(root, gateDir, verityDir, actions);
-  }
-  if ((0, import_node_fs70.existsSync)(gateDir) && (0, import_node_fs70.existsSync)(verityDir)) {
-    return migrateProjectDirCarry(gateDir, verityDir, actions);
-  }
-  return false;
-}
-function migrateProjectDirRename(root, gateDir, verityDir, actions) {
-  let moved = false;
-  if (isGitRepo(root) && isGitTracked(root, ".gate")) {
-    if (hasStagedChanges(root)) {
-      printWarn(
-        "Migrating .gate \u2192 .verity with `git mv` while the index has staged changes \u2014 the rename will be staged alongside them. Review `git status` before committing."
-      );
-    }
-    try {
-      (0, import_node_child_process18.execSync)("git mv .gate .verity", { cwd: root, stdio: "pipe" });
-      actions.push("Moved .gate/ \u2192 .verity/ (git mv, staged)");
-      moved = true;
-    } catch {
-    }
-  }
-  if (moved) {
-    if ((0, import_node_fs70.existsSync)(gateDir)) {
-      const carried = carryLegacyContents(gateDir, verityDir);
-      if (carried > 0) {
-        actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
-      }
-      try {
-        (0, import_node_fs70.rmSync)(gateDir, { recursive: true, force: true });
-      } catch {
-      }
-    }
-    return true;
-  }
-  moveDir(gateDir, verityDir);
-  actions.push("Moved .gate/ \u2192 .verity/");
-  return true;
-}
-function migrateProjectDirCarry(gateDir, verityDir, actions) {
-  const carried = carryLegacyContents(gateDir, verityDir);
-  if (carried > 0) {
-    actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
-  }
-  try {
-    (0, import_node_fs70.rmSync)(gateDir, { recursive: true, force: true });
-  } catch {
-  }
-  return carried > 0;
-}
-function migrateGlobalCredentials(home, actions) {
-  if (!home) return;
-  const gateCreds = (0, import_node_path57.join)(home, ".gate", "credentials");
-  const verityCreds = (0, import_node_path57.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs70.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs70.existsSync)(verityCreds)) {
-    (0, import_node_fs70.mkdirSync)((0, import_node_path57.join)(home, ".verity"), { recursive: true });
-    moveFile(gateCreds, verityCreds);
-    actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
-    return;
-  }
-  const added = mergeGlobalCredentials(gateCreds, verityCreds);
-  if (added > 0) {
-    actions.push(
-      `Merged ${added} legacy credential line(s) from ~/.gate/credentials into ~/.verity/credentials`
-    );
-  }
-}
-async function migrateLegacyHooks(root, actions) {
-  const settings = await readSettingsAt(root);
-  const settingsBefore = JSON.stringify(settings);
-  const updatedSettings = removeVerityHooks(settings);
-  if (settingsBefore !== JSON.stringify(updatedSettings)) {
-    await writeSettingsAt(root, updatedSettings);
-    actions.push("Stripped legacy gate hooks from .claude/settings.json");
-  }
-}
-async function migrateClaudeMd(root, actions) {
-  const claudeMd = (0, import_node_path57.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs70.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
-  if (!hadLegacyBlock) return;
-  try {
-    await ensureClaudeMdPointer(root);
-    actions.push("Rewrote legacy gate-memory block in CLAUDE.md");
-  } catch (err2) {
-    printWarn(`Could not rewrite CLAUDE.md block: ${err2.message}`);
-  }
-}
-function migrateStandardFile(root, actions) {
-  const gateMd = (0, import_node_path57.join)(root, "GATE.md");
-  const verityMd = (0, import_node_path57.join)(root, "VERITY.md");
-  if (!(0, import_node_fs70.existsSync)(gateMd) || (0, import_node_fs70.existsSync)(verityMd)) return;
-  let moved = false;
-  if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
-    try {
-      (0, import_node_child_process18.execSync)("git mv GATE.md VERITY.md", { cwd: root, stdio: "pipe" });
-      moved = true;
-    } catch {
-    }
-  }
-  if (!moved) moveFile(gateMd, verityMd);
-  const content = readFileSyncSafe(verityMd);
-  const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs70.writeFileSync)(verityMd, refreshed);
-  actions.push("Renamed GATE.md \u2192 VERITY.md");
-}
-async function migrateTelemetryHeaders(root, actions) {
-  const file = (0, import_node_path57.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs70.existsSync)(file)) return;
-  let settings;
-  try {
-    settings = JSON.parse(readFileSyncSafe(file) || "{}");
-  } catch {
-    return;
-  }
-  const env = settings.env;
-  const hasInlineHeader = !!env && "OTEL_EXPORTER_OTLP_HEADERS" in env;
-  const telemetryEnabled = env?.CLAUDE_CODE_ENABLE_TELEMETRY === "1";
-  const needsHelper = telemetryEnabled && settings.otelHeadersHelper !== OTEL_HEADERS_HELPER_CMD;
-  if (!hasInlineHeader && !needsHelper) return;
-  if (hasInlineHeader && env) delete env["OTEL_EXPORTER_OTLP_HEADERS"];
-  if (telemetryEnabled) settings.otelHeadersHelper = OTEL_HEADERS_HELPER_CMD;
-  await writeJsonFilePreservingStyle(file, settings);
-  actions.push("Moved the telemetry token out of .claude/settings.local.json (now resolved at runtime)");
-}
-function removeLegacyPackage(movedProjectDir, npmRemover, actions) {
-  if (!movedProjectDir) return;
-  try {
-    npmRemover(LEGACY_NPM_PACKAGE);
-    actions.push(`Removed legacy global package ${LEGACY_NPM_PACKAGE}`);
-  } catch (err2) {
-    printWarn(
-      `Could not remove ${LEGACY_NPM_PACKAGE} (${err2.message}). Remove it manually: npm rm -g ${LEGACY_NPM_PACKAGE}`
-    );
-  }
-}
-function credentialRemoteKey(line2) {
-  const trimmed = line2.trim();
-  if (trimmed === "") return null;
-  const idx = trimmed.indexOf(" token:");
-  return idx === -1 ? trimmed : trimmed.slice(0, idx).trim();
-}
-function mergeGlobalCredentials(gateCreds, verityCreds) {
-  const verityContent = readFileSyncSafe(verityCreds);
-  const existingKeys = new Set(
-    verityContent.split("\n").map(credentialRemoteKey).filter((k) => k !== null)
-  );
-  const toAppend = [];
-  for (const line2 of readFileSyncSafe(gateCreds).split("\n")) {
-    const key = credentialRemoteKey(line2);
-    if (key === null || existingKeys.has(key)) continue;
-    existingKeys.add(key);
-    toAppend.push(line2.replace(/\r$/, ""));
-  }
-  if (toAppend.length > 0) {
-    const sep7 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs70.writeFileSync)(verityCreds, verityContent + sep7 + toAppend.join("\n") + "\n");
-  }
-  (0, import_node_fs70.rmSync)(gateCreds, { force: true });
-  return toAppend.length;
-}
-function readFileSyncSafe(path) {
-  try {
-    return (0, import_node_fs70.readFileSync)(path, "utf-8");
-  } catch {
-    return "";
-  }
-}
-function hasStagedChanges(root) {
-  try {
-    (0, import_node_child_process18.execSync)("git diff --cached --quiet", { cwd: root, stdio: "pipe" });
-    return false;
-  } catch {
-    return true;
-  }
-}
-function moveDir(from, to) {
-  try {
-    (0, import_node_fs70.renameSync)(from, to);
-  } catch (err2) {
-    if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs70.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs70.rmSync)(from, { recursive: true, force: true });
-  }
-}
-function moveFile(from, to) {
-  try {
-    (0, import_node_fs70.renameSync)(from, to);
-  } catch (err2) {
-    if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs70.cpSync)(from, to);
-    (0, import_node_fs70.rmSync)(from, { force: true });
-  }
-}
-function carryLegacyContents(gateDir, verityDir) {
-  let copied = 0;
-  const walk2 = (relDir) => {
-    const srcDir = (0, import_node_path57.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs70.readdirSync)(srcDir)) {
-      const rel = relDir ? (0, import_node_path57.join)(relDir, entry) : entry;
-      const src = (0, import_node_path57.join)(gateDir, rel);
-      const dest = (0, import_node_path57.join)(verityDir, rel);
-      if ((0, import_node_fs70.statSync)(src).isDirectory()) {
-        walk2(rel);
-      } else if (!(0, import_node_fs70.existsSync)(dest)) {
-        (0, import_node_fs70.mkdirSync)((0, import_node_path57.dirname)(dest), { recursive: true });
-        (0, import_node_fs70.cpSync)(src, dest);
-        copied++;
-      }
-    }
-  };
-  walk2("");
-  return copied;
-}
-async function needsMigration(root = repoRoot()) {
-  const gateDir = (0, import_node_path57.join)(root, ".gate");
-  const verityDir = (0, import_node_path57.join)(root, ".verity");
-  if ((0, import_node_fs70.existsSync)(gateDir) && !(0, import_node_fs70.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs70.existsSync)(gateDir) && (0, import_node_fs70.existsSync)(verityDir)) {
-    if ((0, import_node_fs70.existsSync)((0, import_node_path57.join)(gateDir, "credentials")) && !(0, import_node_fs70.existsSync)((0, import_node_path57.join)(verityDir, "credentials"))) {
-      return true;
-    }
-    if ((0, import_node_fs70.existsSync)((0, import_node_path57.join)(gateDir, "memory")) && !(0, import_node_fs70.existsSync)((0, import_node_path57.join)(verityDir, "memory"))) {
-      return true;
-    }
-  }
-  const claudeMd = (0, import_node_path57.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs70.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
-    return true;
-  }
-  if ((0, import_node_fs70.existsSync)((0, import_node_path57.join)(root, "GATE.md")) && !(0, import_node_fs70.existsSync)((0, import_node_path57.join)(root, "VERITY.md"))) {
-    return true;
-  }
-  if (await hasLegacyHooksAt(root)) return true;
-  return false;
-}
-function registerMigrateCommand(program2) {
-  program2.command("migrate").description("Migrate a legacy GATE.md install to Verity (.gate \u2192 .verity, hooks, CLAUDE.md)").action(async () => {
-    let result;
-    try {
-      result = await runMigration();
-    } catch (err2) {
-      printError(`Migration failed: ${err2.message}`);
-      process.exitCode = 1;
-      return;
-    }
-    if (!result.migrated) {
-      printInfo("Nothing to migrate \u2014 this project is already on Verity.");
-      return;
-    }
-    printInfo("Migration complete:");
-    for (const a of result.actions) printInfo(`  ${a} \u2713`);
-  });
-}
-
 // src/commands/init/ui.ts
 var import_node_fs71 = require("node:fs");
-var import_node_path58 = require("node:path");
-var import_node_os12 = require("node:os");
-var import_node_child_process19 = require("node:child_process");
+var import_node_path59 = require("node:path");
+var import_node_os13 = require("node:os");
+var import_node_child_process18 = require("node:child_process");
 function createInitUi(opts) {
   const term = opts.term ?? detectTerm();
   const screen = new Screen(term);
@@ -41038,25 +40885,26 @@ function installInterrupt(ui) {
   process.once("SIGINT", stop2);
 }
 var SEEN_FILE = ".init-seen";
-function firstInitOnMachine(home = process.env.HOME || (0, import_node_os12.homedir)()) {
-  return !(0, import_node_fs71.existsSync)((0, import_node_path58.join)(home, ".verity", SEEN_FILE));
+function firstInitOnMachine(home = process.env.HOME || (0, import_node_os13.homedir)()) {
+  return !(0, import_node_fs71.existsSync)((0, import_node_path59.join)(home, ".verity", SEEN_FILE));
 }
-function markInitSeen(home = process.env.HOME || (0, import_node_os12.homedir)()) {
-  replaceInRoot((0, import_node_path58.join)(home, ".verity"), SEEN_FILE, `${(/* @__PURE__ */ new Date()).toISOString()}
+function markInitSeen(home = process.env.HOME || (0, import_node_os13.homedir)()) {
+  replaceInRoot((0, import_node_path59.join)(home, ".verity"), SEEN_FILE, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
 }
 function repoLabel() {
   try {
-    const url = (0, import_node_child_process19.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    const url = (0, import_node_child_process18.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
     const parsed = parseRemote(url);
     if (parsed) return terminalText(`${parsed.owner}/${parsed.repo}`, 120);
   } catch {
   }
-  return terminalText((0, import_node_path58.basename)(repoRoot()), 120);
+  return terminalText((0, import_node_path59.basename)(repoRoot()), 120);
 }
 
 // src/lib/prereqs.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
+var import_node_fs72 = require("node:fs");
 var MIN_NODE_MAJOR = 20;
 function which(bin) {
   return whichSync(bin, { real: false });
@@ -41077,7 +40925,7 @@ function checkNode() {
 function checkGit() {
   let detail = "";
   try {
-    detail = (0, import_node_child_process20.execSync)("git --version", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    detail = (0, import_node_child_process19.execSync)("git --version", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return {
       id: "git",
@@ -41101,21 +40949,38 @@ function checkClaude() {
     required: false
   };
 }
-function checkAnalysisCli() {
-  const path = which("codacy-analysis");
+var ANALYSIS_CLI_REMEDY = "Reinstall Verity, which includes it: npm install -g @codacy/verity-cli";
+function checkAnalysisCli(opts = {}) {
+  const base = { id: "analysis-cli", label: "@codacy/analysis-cli", required: false };
+  const analyzer = resolveAnalyzer(opts);
+  const shown = (opts.onPathDisplay ?? (() => which("codacy-analysis")))();
+  if (!analyzer) {
+    return { ...base, status: "warn", detail: "not found", remedy: `${ANALYSIS_CLI_REMEDY} (static findings are unavailable until then)` };
+  }
+  if (analyzer.source === "path") {
+    return { ...base, status: "ok", detail: `${shown ?? analyzer.path} (on PATH)`, source: "path" };
+  }
+  const unused = shown && !sameFile(shown, analyzer.path) ? shown : void 0;
   return {
-    id: "analysis-cli",
-    label: "@codacy/analysis-cli",
-    status: path ? "ok" : "warn",
-    detail: path ?? "not found",
-    remedy: path ? void 0 : "npm install -g @codacy/analysis-cli (static findings are unavailable until then)",
-    required: false
+    ...base,
+    status: "ok",
+    detail: `${analyzer.version} (bundled with Verity)`,
+    source: "bundled",
+    version: analyzer.version,
+    ...unused && { unused }
   };
 }
+function sameFile(a, b) {
+  try {
+    return (0, import_node_fs72.realpathSync)(a) === (0, import_node_fs72.realpathSync)(b);
+  } catch {
+    return false;
+  }
+}
 var INSTALL_TIMEOUT_MS = 12e4;
 function run3(command, args2, opts = {}) {
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process20.spawn)(command, args2, {
+    const child = (0, import_node_child_process19.spawn)(command, args2, {
       stdio: opts.inherit ? "inherit" : "pipe",
       timeout: INSTALL_TIMEOUT_MS
     });
@@ -41145,7 +41010,7 @@ async function installAnalysisCli(opts = {}) {
       label: "@codacy/analysis-cli",
       status: "warn",
       detail: "install failed",
-      remedy: "Install manually: npm install -g @codacy/analysis-cli",
+      remedy: ANALYSIS_CLI_REMEDY,
       required: false
     };
     if (opts.sudo === false || !process.stdin.isTTY || !process.stdout.isTTY) return failed;
@@ -41166,6 +41031,305 @@ async function checkPrereqs(opts = {}) {
   return { checks, blocked: checks.some((c) => c.required && c.status !== "ok") };
 }
 
+// src/lib/telemetry-local.ts
+var import_node_path61 = require("node:path");
+
+// src/lib/telemetry-settings.ts
+var import_promises16 = require("node:fs/promises");
+var import_node_os14 = require("node:os");
+var import_node_path60 = require("node:path");
+var SETTINGS_LOCAL_FILE2 = ".claude/settings.local.json";
+var OTEL_HEADERS_HELPER_CMD = "verity telemetry headers";
+var LEGACY_HEADER_KEY = "OTEL_EXPORTER_OTLP_HEADERS";
+var OTLP_ENDPOINT_KEYS = [
+  "OTEL_EXPORTER_OTLP_ENDPOINT",
+  "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT",
+  "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT",
+  "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT"
+];
+function claudeConfigDir2() {
+  return process.env.CLAUDE_CONFIG_DIR || (0, import_node_path60.join)((0, import_node_os14.homedir)(), ".claude");
+}
+function userSettingsPath() {
+  return (0, import_node_path60.join)(claudeConfigDir2(), "settings.json");
+}
+function deriveOtlpEndpoint(serviceUrl) {
+  return serviceUrl.replace(/\/+$/, "").replace(/\/v1$/, "") + "/v1/otlp";
+}
+function isVerityOtlpEndpoint(value, also) {
+  if (typeof value !== "string" || value.trim() === "") return false;
+  if (also && value.replace(/\/+$/, "") === also.replace(/\/+$/, "")) return true;
+  try {
+    return /\/functions\/v1\/otlp\/?$/.test(new URL(value).pathname);
+  } catch {
+    return false;
+  }
+}
+function sameUrl(a, b) {
+  const norm3 = (raw) => {
+    const trimmed = raw.trim().replace(/\/+$/, "");
+    try {
+      const u = new URL(trimmed);
+      return `${u.protocol}//${u.host.toLowerCase()}${u.pathname.replace(/\/+$/, "")}`;
+    } catch {
+      return trimmed.toLowerCase();
+    }
+  };
+  return norm3(a) === norm3(b);
+}
+function envOf(settings) {
+  const env = settings.env;
+  return env && typeof env === "object" && !Array.isArray(env) ? env : {};
+}
+function displayPath(path) {
+  const home = (0, import_node_os14.homedir)();
+  return home && path.startsWith(home + "/") ? "~" + path.slice(home.length) : path;
+}
+async function readSettingsFile(path) {
+  let raw;
+  try {
+    raw = await (0, import_promises16.readFile)(path, "utf-8");
+  } catch (err2) {
+    if (err2.code === "ENOENT") return { ok: true, settings: {}, exists: false };
+    return { ok: false, error: `Could not read ${displayPath(path)}: ${err2.message}` };
+  }
+  try {
+    const parsed = raw.trim() === "" ? {} : JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return { ok: false, error: `${displayPath(path)} is not a JSON object. Fix it, then run the command again. Nothing was changed.` };
+    }
+    return { ok: true, settings: parsed, exists: true };
+  } catch {
+    return { ok: false, error: `${displayPath(path)} is not valid JSON. Fix it, then run the command again. Nothing was changed.` };
+  }
+}
+
+// src/lib/telemetry-local.ts
+var MAX_LOCAL_SETTINGS_BYTES = 1024 * 1024;
+function nextLocalBytes(raw, value) {
+  try {
+    if (jsonSemanticEqual(JSON.parse(raw), value)) return null;
+  } catch {
+  }
+  const next = JSON.stringify(value, null, detectJsonIndent(raw)) + "\n";
+  return next === raw ? null : next;
+}
+var OLD_LOCAL_WRITER_VALUES = {
+  CLAUDE_CODE_ENABLE_TELEMETRY: "1",
+  OTEL_METRICS_EXPORTER: "otlp",
+  OTEL_TRACES_EXPORTER: "otlp",
+  CLAUDE_CODE_ENHANCED_TELEMETRY_BETA: "1",
+  OTEL_EXPORTER_OTLP_PROTOCOL: "http/json",
+  OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE: "delta",
+  OTEL_LOG_USER_PROMPTS: "0",
+  OTEL_LOG_TOOL_DETAILS: "0",
+  OTEL_LOG_TOOL_CONTENT: "0",
+  OTEL_METRICS_INCLUDE_SESSION_ID: "true",
+  OTEL_METRICS_INCLUDE_ACCOUNT_UUID: "false",
+  OTEL_METRICS_INCLUDE_VERSION: "false",
+  OTEL_METRIC_EXPORT_INTERVAL: "60000"
+};
+var LEGACY_VERITY_HEADER = /^Authorization=Bearer (?:verity|gate)_/;
+function planLocalHeal(settings) {
+  const env = envOf(settings);
+  const envKeys = [];
+  if (typeof env[LEGACY_HEADER_KEY] === "string" && LEGACY_VERITY_HEADER.test(env[LEGACY_HEADER_KEY])) {
+    envKeys.push(LEGACY_HEADER_KEY);
+  }
+  if (isVerityOtlpEndpoint(env.OTEL_EXPORTER_OTLP_ENDPOINT)) {
+    envKeys.push("OTEL_EXPORTER_OTLP_ENDPOINT");
+    for (const [key, value] of Object.entries(OLD_LOCAL_WRITER_VALUES)) {
+      if (env[key] === value) envKeys.push(key);
+    }
+  }
+  return { envKeys, helper: settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD };
+}
+function readLocalSettings(root) {
+  const read2 = readRegularFileInRoot(root, SETTINGS_LOCAL_FILE2, MAX_LOCAL_SETTINGS_BYTES);
+  if (!read2.ok) return null;
+  try {
+    const parsed = JSON.parse(read2.content);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+    return { raw: read2.content, settings: parsed };
+  } catch {
+    return null;
+  }
+}
+function localTelemetryLeftovers(root = repoRoot()) {
+  const local = readLocalSettings(root);
+  if (!local) return [];
+  const plan = planLocalHeal(local.settings);
+  return [...plan.envKeys, ...plan.helper ? ["otelHeadersHelper"] : []];
+}
+async function healLocalTelemetry(root = repoRoot()) {
+  const local = readLocalSettings(root);
+  if (!local) return { removed: [] };
+  const settings = local.settings;
+  const plan = planLocalHeal(settings);
+  if (plan.envKeys.length === 0 && !plan.helper) return { removed: [] };
+  const env = envOf(settings);
+  for (const key of plan.envKeys) delete env[key];
+  if (settings.env && Object.keys(env).length === 0) delete settings.env;
+  if (plan.helper) delete settings.otelHeadersHelper;
+  const next = nextLocalBytes(local.raw, settings);
+  if (next !== null && !replaceInRoot((0, import_node_path61.join)(root, ".claude"), "settings.local.json", next)) {
+    return { removed: [] };
+  }
+  return { removed: [...plan.envKeys, ...plan.helper ? ["otelHeadersHelper"] : []] };
+}
+
+// src/lib/telemetry-gate.ts
+var import_node_child_process20 = require("node:child_process");
+var import_node_fs73 = require("node:fs");
+var import_node_path62 = require("node:path");
+var PROJECT_MARKERS = ["setup.json", "config.json"];
+function writtenOnThisMachine(root, rel) {
+  const r = (0, import_node_child_process20.spawnSync)("git", hardenedGitArgv(["ls-files", "--error-unmatch", "--", rel]), {
+    cwd: root,
+    env: hardenedGitEnv(),
+    encoding: "utf-8",
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: 5e3
+  });
+  if (r.status === 1) return true;
+  if (r.status === 128 && /not a git repository/i.test(r.stderr ?? "")) return true;
+  return false;
+}
+function isTelemetryProject() {
+  for (const root of [repoRoot(), mainWorktreeRoot()]) {
+    if (!root) continue;
+    const dir = (0, import_node_path62.join)(root, VERITY_DIR);
+    if (isMachineStore(dir)) continue;
+    for (const marker of PROJECT_MARKERS) {
+      if ((0, import_node_fs73.existsSync)((0, import_node_path62.join)(dir, marker)) && writtenOnThisMachine(root, `${VERITY_DIR}/${marker}`)) return true;
+    }
+  }
+  return false;
+}
+async function telemetryPinRefusal(token, endpoint) {
+  const serviceUrl = endpoint.trim().replace(/\/+$/, "").replace(/\/otlp$/, "");
+  const pin = await checkTokenPin(token, serviceUrl);
+  if (pin.attach) return null;
+  if (pin.reason === "mismatch" && sameUrl(deriveOtlpEndpoint(pin.mintedFor), endpoint)) return null;
+  return pinRefusalMessage(pin, serviceUrl);
+}
+async function sessionExportEndpoints() {
+  const pick = (env) => OTLP_ENDPOINT_KEYS.map((key) => env[key]).filter((v) => typeof v === "string" && v.trim() !== "");
+  const fromEnv = pick(process.env);
+  if (fromEnv.length > 0) return fromEnv;
+  const read2 = await readSettingsFile(userSettingsPath());
+  return read2.ok ? pick(envOf(read2.settings)) : [];
+}
+
+// src/lib/telemetry.ts
+function buildTelemetryEnv(serviceUrl) {
+  return {
+    CLAUDE_CODE_ENABLE_TELEMETRY: "1",
+    OTEL_METRICS_EXPORTER: "otlp",
+    OTEL_TRACES_EXPORTER: "otlp",
+    CLAUDE_CODE_ENHANCED_TELEMETRY_BETA: "1",
+    OTEL_EXPORTER_OTLP_PROTOCOL: "http/json",
+    OTEL_EXPORTER_OTLP_ENDPOINT: deriveOtlpEndpoint(serviceUrl),
+    OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE: "delta",
+    OTEL_LOG_USER_PROMPTS: "0",
+    OTEL_LOG_TOOL_DETAILS: "0",
+    OTEL_LOG_TOOL_CONTENT: "0",
+    OTEL_METRICS_INCLUDE_SESSION_ID: "true",
+    OTEL_METRICS_INCLUDE_ACCOUNT_UUID: "false",
+    OTEL_METRICS_INCLUDE_VERSION: "false",
+    OTEL_METRICS_INCLUDE_REPOSITORY: "true",
+    OTEL_METRIC_EXPORT_INTERVAL: "60000"
+  };
+}
+var VERITY_TELEMETRY_KEYS = Object.keys(buildTelemetryEnv(""));
+var EXPORTER_KEYS = ["OTEL_METRICS_EXPORTER", "OTEL_TRACES_EXPORTER"];
+function foreignExportKey(settings, endpoint) {
+  const helper = settings.otelHeadersHelper;
+  if (typeof helper === "string" && helper.trim() !== "" && helper !== OTEL_HEADERS_HELPER_CMD) {
+    return "otelHeadersHelper";
+  }
+  const env = envOf(settings);
+  for (const key of OTLP_ENDPOINT_KEYS) {
+    const value = env[key];
+    if (value !== void 0 && value !== "" && !isVerityOtlpEndpoint(value, endpoint)) return key;
+  }
+  if (env[LEGACY_HEADER_KEY] !== void 0 && env[LEGACY_HEADER_KEY] !== "") return LEGACY_HEADER_KEY;
+  for (const key of EXPORTER_KEYS) {
+    const value = env[key];
+    if (value !== void 0 && value !== "" && value !== "otlp") return key;
+  }
+  return null;
+}
+async function installTelemetry(serviceUrl, opts = {}) {
+  const path = userSettingsPath();
+  const read2 = await readSettingsFile(path);
+  if (!read2.ok) return { ok: false, error: read2.error };
+  const settings = read2.settings;
+  const env = buildTelemetryEnv(serviceUrl);
+  const foreign = foreignExportKey(settings, env.OTEL_EXPORTER_OTLP_ENDPOINT);
+  if (foreign) {
+    return {
+      ok: false,
+      error: `Telemetry not installed: ${displayPath(path)} already sets ${foreign}, so you export somewhere else already. Nothing was changed.`
+    };
+  }
+  let token = opts.token;
+  if (!token) {
+    const resolved = await resolveToken();
+    if (!resolved.ok) {
+      return { ok: false, error: 'Telemetry not installed: no Verity token on this machine. Run "verity login". Nothing was changed.' };
+    }
+    token = resolved.data.token;
+  }
+  const refusal = await telemetryPinRefusal(token, env.OTEL_EXPORTER_OTLP_ENDPOINT);
+  if (refusal) {
+    return { ok: false, error: `Telemetry not installed: ${refusal} Nothing was changed.` };
+  }
+  settings.env = { ...envOf(settings), ...env };
+  settings.otelHeadersHelper = OTEL_HEADERS_HELPER_CMD;
+  await writeJsonFilePreservingStyle(path, settings);
+  const healed = await healLocalTelemetry();
+  return {
+    ok: true,
+    data: { endpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT, settingsPath: path, healedLocalKeys: healed.removed }
+  };
+}
+async function checkTelemetry() {
+  const path = userSettingsPath();
+  const read2 = await readSettingsFile(path);
+  const settings = read2.ok ? read2.settings : {};
+  const env = envOf(settings);
+  const endpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT || null;
+  const enabled = env.CLAUDE_CODE_ENABLE_TELEMETRY === "1" && !!endpoint && settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD;
+  return { enabled, endpoint, settingsPath: path, staleLocalKeys: localTelemetryLeftovers() };
+}
+async function uninstallTelemetry() {
+  const path = userSettingsPath();
+  const read2 = await readSettingsFile(path);
+  if (!read2.ok) return { ok: false, error: read2.error };
+  const settings = read2.settings;
+  const env = envOf(settings);
+  let removed = 0;
+  const endpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT;
+  const foreignEndpoint = endpoint !== void 0 && endpoint !== "" && !isVerityOtlpEndpoint(endpoint);
+  if (isVerityOtlpEndpoint(endpoint)) {
+    const verityValues = buildTelemetryEnv("");
+    for (const key of VERITY_TELEMETRY_KEYS) {
+      if (key === "OTEL_EXPORTER_OTLP_ENDPOINT" || env[key] === verityValues[key]) {
+        if (key in env) {
+          delete env[key];
+          removed++;
+        }
+      }
+    }
+    if (settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD) delete settings.otelHeadersHelper;
+    if (settings.env && Object.keys(env).length === 0) delete settings.env;
+    await writeJsonFilePreservingStyle(path, settings);
+  }
+  const healed = await healLocalTelemetry();
+  return { ok: true, data: { removed, settingsPath: path, foreignEndpoint, healedLocalKeys: healed.removed } };
+}
+
 // src/commands/init/steps.ts
 function languageShares(d) {
   const total = d.languages.reduce((n2, l) => n2 + (d.languageCounts[l] ?? 0), 0);
@@ -41234,19 +41398,19 @@ async function prerequisitesStep(ui) {
   const analysis = report.checks.find((c) => c.id === "analysis-cli");
   if (analysis && analysis.status !== "ok") {
     const s = ui.screen.s;
-    const installed2 = await ui.screen.spin(`${s.gray}\u2502${s.reset}  `, () => "Installing the Codacy analysis CLI (it runs the Trivy security scan)", installAnalysisCli({ quiet: true, sudo: false }));
+    const installed2 = await ui.screen.spin(`${s.gray}\u2502${s.reset}  `, () => "Verity's copy of the Codacy analysis CLI is missing. Installing it (it runs the Trivy security scan)", installAnalysisCli({ quiet: true, sudo: false }));
     report.checks[report.checks.indexOf(analysis)] = installed2;
     if (installed2.status === "ok") ui.rail.ticked("Installed the Codacy analysis CLI");
   }
   for (const c of report.checks) {
     if (c.status === "ok") continue;
-    ui.rail.warn(`${c.label}: ${c.detail}`);
-    if (c.remedy) ui.rail.line(c.remedy);
+    ui.rail.warn(terminalText(`${c.label}: ${c.detail}`, 300));
+    if (c.remedy) ui.rail.line(terminalText(c.remedy, 300));
   }
   ui.rail.settle();
   return !report.checks.some((c) => c.required && c.status !== "ok");
 }
-async function telemetryStep(ui, answer, resumeDeferred, globals) {
+async function telemetryStep(ui, answer, resumeDeferred, globals, previous) {
   if (answer === "already-on") return "enabled";
   if (answer === "no") return "declined";
   if (answer === "turn-off") {
@@ -41256,7 +41420,16 @@ async function telemetryStep(ui, answer, resumeDeferred, globals) {
     ui.rail.settle();
     return "declined";
   }
-  if (answer !== "yes" && !resumeDeferred) return void 0;
+  if (answer === "not-asked" && !resumeDeferred) {
+    if (!ui.asking || previous === "declined") return void 0;
+    if (!(await resolveToken(globals.token)).ok) return void 0;
+    if ((await checkTelemetry()).enabled) return "enabled";
+    if (!await askTelemetry(ui)) {
+      ui.rail.line("Telemetry stays off. Turn it on later: verity telemetry install", "muted");
+      ui.rail.settle();
+      return "declined";
+    }
+  }
   const token = await resolveToken(globals.token);
   const url = await resolveServiceUrl(globals.serviceUrl);
   if (!token.ok || !url.ok) {
@@ -41273,7 +41446,18 @@ async function telemetryStep(ui, answer, resumeDeferred, globals) {
   }
   ui.rail.gap();
   ui.rail.settle();
-  return installed2.ok ? "enabled" : "deferred";
+  return installed2.ok ? "enabled" : void 0;
+}
+async function askTelemetry(ui) {
+  const { rail, screen } = ui;
+  rail.active("Send Claude Code cost and usage from this machine to Verity?");
+  rail.line("Token counts, cost, models, tool names and the repository name, from every Claude Code session on this machine. No prompts, no code, no file contents.");
+  rail.line("See it on the /usage page. Turn it off any time: verity telemetry uninstall");
+  rail.gap();
+  rail.keys([["Enter", "yes"], ["n", "no"]]);
+  const k = await screen.key(["enter", "n"], "enter", { freshMs: 300 });
+  rail.collapse();
+  return k !== "n";
 }
 function signInDetail(outcome) {
   if (outcome === "already" || outcome === "new") return ["ok", outcome];
@@ -41324,6 +41508,55 @@ function backgroundStep(ui, opts) {
 
 // src/commands/init/scaffold.ts
 var import_promises17 = require("node:fs/promises");
+
+// src/lib/codacy-legacy.ts
+var import_node_child_process21 = require("node:child_process");
+var VERITY_ESLINT_CONFIG_FILE = ".codacy/tools-configs/eslint.config.mjs";
+var VERITY_ESLINT_LOCAL_PATH = "./.codacy/tools-configs/eslint.config.mjs";
+var VERITY_ESLINT_FIRST_LINE = "// Verity-owned ESLint config for the quality gate.";
+var MAX_BYTES = 256 * 1024;
+function classifyCodacyConfig(root = repoRoot()) {
+  const cfg = readRegularFileInRoot(root, CODACY_CONFIG_FILE, MAX_BYTES);
+  if (!cfg.ok) return cfg.reason === "missing" ? "none" : "foreign";
+  let parsed;
+  try {
+    parsed = JSON.parse(cfg.content);
+  } catch {
+    return "foreign";
+  }
+  const tools = typeof parsed === "object" && parsed !== null ? parsed.tools : void 0;
+  const pointsAtVerity2 = Array.isArray(tools) && tools.some((t) => typeof t === "object" && t !== null && t.localConfigurationFile === VERITY_ESLINT_LOCAL_PATH);
+  if (!pointsAtVerity2) return "foreign";
+  const eslint = readRegularFileInRoot(root, VERITY_ESLINT_CONFIG_FILE, MAX_BYTES);
+  return eslint.ok && eslint.content.startsWith(VERITY_ESLINT_FIRST_LINE) ? "verity" : "foreign";
+}
+function isTracked(root, path) {
+  try {
+    (0, import_node_child_process21.execFileSync)("git", ["ls-files", "--error-unmatch", "--", path], { cwd: root, stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function removeVerityCodacyConfig(root = repoRoot()) {
+  const removed = [];
+  const untracked = [];
+  try {
+    for (const f of [CODACY_CONFIG_FILE, VERITY_ESLINT_CONFIG_FILE]) {
+      if (!isTracked(root, f)) {
+        untracked.push(f);
+        continue;
+      }
+      (0, import_node_child_process21.execFileSync)("git", ["rm", "--quiet", "--", f], { cwd: root, stdio: "pipe" });
+      removed.push(f);
+    }
+  } catch (err2) {
+    return { ok: false, removed, error: err2.message };
+  }
+  return { ok: true, removed, untracked };
+}
+
+// src/commands/init/scaffold.ts
 async function scaffoldStep(ui, given = {}) {
   const { rail } = ui;
   await (0, import_promises17.mkdir)(VERITY_DIR, { recursive: true });
@@ -41351,15 +41584,16 @@ async function scaffoldStep(ui, given = {}) {
   }
   const tracked = committedVerityState();
   if (tracked.length > 0) {
-    if (given.untrackState) {
+    if (given.untrackState || ui.asking && await askUntrackState(ui, tracked)) {
       const result = untrackVerityState();
       if (result === "untracked") rail.line("Untracked the Verity state files (staged). Commit to finish.");
       else if (result === "failed") rail.line("Could not untrack them. Run: git rm -r --cached .verity && git add .verity/standard.yaml", "warn");
     } else {
       rail.warn(`${tracked.length} Verity state file(s) are tracked in git`);
-      rail.line(`For example ${tracked[0]}. Fix: git rm -r --cached .verity && git add .verity/standard.yaml`);
+      rail.line(`For example ${terminalText(tracked[0], 200)}. Fix: git rm -r --cached .verity && git add .verity/standard.yaml`);
     }
   }
+  retireCodacyConfig(ui);
   try {
     await ensureClaudeMdPointer();
   } catch (err2) {
@@ -41369,11 +41603,44 @@ async function scaffoldStep(ui, given = {}) {
   if (cfg.formal_refused) rail.line(`Formal verification: off \u2014 ${formalRefusalMessage(cfg.formal_refused)}`, "warn");
   rail.settle();
 }
+async function askUntrackState(ui, tracked) {
+  const { rail, screen } = ui;
+  rail.active(`${tracked.length} Verity state file(s) are tracked in git`);
+  rail.line(`For example ${terminalText(tracked[0], 200)}. They can hold copies of secrets the gate flagged, and each push shares them.`);
+  rail.line("Stop tracking them? The files stay on disk, and the removal is staged for you to commit.");
+  rail.line("Copies already pushed stay in the git history: rotate any secret the gate flagged.");
+  rail.gap();
+  rail.keys([["Enter", "stop tracking them"], ["n", "keep them tracked"]]);
+  const k = await screen.key(["enter", "n"], "enter", { freshMs: 300 });
+  rail.collapse();
+  return k !== "n";
+}
+function retireCodacyConfig(ui) {
+  const kind2 = classifyCodacyConfig();
+  if (kind2 === "none") return;
+  if (kind2 === "foreign") {
+    ui.rail.line("Verity no longer reads .codacy/. Remove it if nothing else uses it.", "muted");
+    return;
+  }
+  const result = removeVerityCodacyConfig();
+  if (result.ok) {
+    if (result.removed.length > 0) {
+      ui.rail.done("Removed the .codacy/ config that an older Verity wrote (staged)");
+      ui.rail.line("Verity runs Trivy from .verity/static-analysis.json now. To keep the files: git restore --staged --worktree .codacy");
+    }
+    if (result.untracked.length > 0) {
+      ui.rail.line(`An older Verity wrote ${result.untracked.join(" and ")}, and Verity no longer uses them. Remove them by hand: rm ${result.untracked.join(" ")}`, "warn");
+    }
+  } else {
+    ui.rail.warn("Could not remove the .codacy/ config that an older Verity wrote");
+    ui.rail.line(terminalText(result.error, 200));
+  }
+}
 
 // src/commands/init/wiring.ts
-var import_node_fs72 = require("node:fs");
+var import_node_fs74 = require("node:fs");
 var import_promises18 = require("node:fs/promises");
-var import_node_path59 = require("node:path");
+var import_node_path63 = require("node:path");
 var DEFAULT_MOMENTS = ["stop", "pre-commit", "pre-push"];
 async function momentsFromInstalledHooks() {
   const status = await checkAllVerityHooks();
@@ -41446,12 +41713,12 @@ var SKILLS = [
 ];
 function resolveDataDir2() {
   const candidates2 = [
-    (0, import_node_path59.join)(__dirname, "..", "data"),
-    (0, import_node_path59.join)(__dirname, "..", "..", "data"),
-    (0, import_node_path59.join)(process.cwd(), "cli", "data")
+    (0, import_node_path63.join)(__dirname, "..", "data"),
+    (0, import_node_path63.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path63.join)(process.cwd(), "cli", "data")
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs72.existsSync)((0, import_node_path59.join)(candidate, "skills"))) return candidate;
+    if ((0, import_node_fs74.existsSync)((0, import_node_path63.join)(candidate, "skills"))) return candidate;
   }
   throw new Error("Could not find Verity skill data. Reinstall: npm install -g @codacy/verity-cli");
 }
@@ -41459,9 +41726,9 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out2 = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs72.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs74.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk2((0, import_node_path59.join)(d, e.name), rel);
+        if (e.isDirectory()) walk2((0, import_node_path63.join)(d, e.name), rel);
         else if (e.isFile()) out2.push(rel);
       }
     };
@@ -41472,7 +41739,7 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      if (await (0, import_promises18.readFile)((0, import_node_path59.join)(src, rel), "utf-8") !== await (0, import_promises18.readFile)((0, import_node_path59.join)(dest, rel), "utf-8")) return false;
+      if (await (0, import_promises18.readFile)((0, import_node_path63.join)(src, rel), "utf-8") !== await (0, import_promises18.readFile)((0, import_node_path63.join)(dest, rel), "utf-8")) return false;
     }
     return true;
   } catch {
@@ -41480,16 +41747,16 @@ async function skillIsCurrent(src, dest) {
   }
 }
 async function installSkills(force) {
-  const source2 = (0, import_node_path59.join)(resolveDataDir2(), "skills");
+  const source2 = (0, import_node_path63.join)(resolveDataDir2(), "skills");
   const missing = [];
   for (const skill of SKILLS) {
-    const src = (0, import_node_path59.join)(source2, skill);
-    const dest = (0, import_node_path59.join)(".claude/skills", skill);
-    if (!(0, import_node_fs72.existsSync)(src)) {
+    const src = (0, import_node_path63.join)(source2, skill);
+    const dest = (0, import_node_path63.join)(".claude/skills", skill);
+    if (!(0, import_node_fs74.existsSync)(src)) {
       missing.push(skill);
       continue;
     }
-    if ((0, import_node_fs72.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) continue;
+    if ((0, import_node_fs74.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) continue;
     await (0, import_promises18.mkdir)(dest, { recursive: true });
     await (0, import_promises18.cp)(src, dest, { recursive: true, force: true });
   }
@@ -41528,8 +41795,651 @@ async function hooksStep(ui, ctx) {
   rail.settle();
 }
 
+// src/commands/init/standard.ts
+var import_node_fs75 = require("node:fs");
+
+// src/commands/init/rules.ts
+async function projectLabel(token, serviceUrl, verbose) {
+  try {
+    const who = await whoami(token, serviceUrl, verbose);
+    return who.ok ? who.data.project_id : null;
+  } catch {
+    return null;
+  }
+}
+function profilePreview(profile) {
+  return JSON.stringify(profile, null, 2).split("\n").slice(0, 12).map((l) => terminalText(l, 400)).concat(["\u2026", `The whole profile: ${PROFILE_FILE}`]);
+}
+async function rulesOffered(ui, globals) {
+  const token = await resolveToken(globals.token);
+  const url = await resolveServiceUrl(globals.serviceUrl);
+  if (!token.ok || !url.ok) return false;
+  const status = await generationStatus({ serviceUrl: url.data, token: token.data.token, verbose: globals.verbose });
+  if (status === "off") ui.rail.line("Project rules are not switched on for this project yet. The built-in rules apply.");
+  if (status === "unsupported") {
+    ui.rail.line(`This Verity service (${terminalText(url.data, 200)}) does not write project rules yet: it is older than this CLI. The built-in rules apply.`);
+  }
+  return status === "on" || status === "unknown";
+}
+async function askToSend(ui, profile) {
+  const { rail, screen } = ui;
+  const lines = consentLines(profile);
+  rail.active("Write review rules for this repository?");
+  rail.box(lines.slice(1, -1));
+  rail.line(lines[lines.length - 1]);
+  rail.gap();
+  rail.keys([["Enter", "send"], ["v", "view the profile"], ["n", "skip"]]);
+  let allowed = ["enter", "v", "n"];
+  for (; ; ) {
+    const k = await screen.key(allowed, "n", { freshMs: 300 });
+    if (k !== "v") {
+      rail.collapse();
+      return k === "enter";
+    }
+    rail.gap();
+    for (const l of profilePreview(profile)) rail.line(l);
+    rail.gap();
+    rail.keys([["Enter", "send"], ["n", "skip"]]);
+    allowed = ["enter", "n"];
+  }
+}
+async function generate(ui, globals, profile, replaces) {
+  const { rail, screen } = ui;
+  const s = screen.s;
+  const token = await resolveToken(globals.token);
+  const url = await resolveServiceUrl(globals.serviceUrl);
+  if (!token.ok || !url.ok) return { status: "fallback" };
+  const commits = profile.history.commits.length;
+  const fixes = profile.history.commits.filter((c) => c.fix).length;
+  const reverts = profile.history.commits.filter((c) => /^revert\b/i.test(c.subject)).length;
+  rail.active("Writing review rules");
+  await rail.counted(([c, f, r]) => `${s.green}\u2713${s.reset} Read ${c} commits ${s.gray}\xB7${s.reset} ${f} fixes ${s.gray}\xB7${s.reset} ${r} reverts`, [commits, fixes, reverts]);
+  if (profile.docs.length) rail.ticked(`Read ${profile.docs.map((d) => terminalText(d.name, 120)).join(" and ")}`);
+  if (ui.term.screen && !ui.term.motion) rail.line("Writing rules for this repository\u2026");
+  const started = Date.now();
+  const base = buildStandard({ detected: detectProject() }, loadCatalog());
+  const outcome = await screen.spin(`${s.gray}\u2502${s.reset}  `, () => "Writing rules for this repository", generateStandard({
+    serviceUrl: url.data,
+    token: token.data.token,
+    profile,
+    base,
+    projectId: await projectLabel(token.data.token, url.data, globals.verbose),
+    verbose: globals.verbose,
+    replaces
+  }));
+  rail.collapse();
+  if (outcome.status === "exists") return { status: "exists" };
+  if (outcome.status === "disabled") {
+    rail.line("Project rules are not switched on for this project yet. The built-in rules apply.");
+    rail.gap();
+    return { status: "fallback" };
+  }
+  if (outcome.status === "unsupported") {
+    rail.line(`This Verity service (${terminalText(url.data, 200)}) does not write project rules yet: it is older than this CLI. The built-in rules apply.`);
+    rail.gap();
+    return { status: "fallback" };
+  }
+  if (outcome.status === "failed") {
+    rail.warn("The rules could not be written this time");
+    rail.line(terminalText(outcome.reason, 300));
+    rail.line("The built-in rules apply. Try again later: verity standard generate");
+    rail.gap();
+    return { status: "fallback" };
+  }
+  const secs2 = Math.max(1, Math.round((Date.now() - started) / 1e3));
+  const docs = profile.docs.length;
+  if (outcome.rules.length === 0) {
+    rail.warn("No project rules this time");
+    rail.line("The proposed rules were too generic, or not safe to use. The built-in rules apply.");
+  } else {
+    const n2 = outcome.rules.length;
+    const from = [`${commits} ${commits === 1 ? "commit" : "commits"}`, ...docs ? [`${docs} ${docs === 1 ? "doc" : "docs"}`] : []].join(" and ");
+    rail.done(`${n2} ${n2 === 1 ? "rule" : "rules"} for this repository ${s.gray}\xB7 from ${from} \xB7 ${secs2}s${s.reset}`);
+    await rail.rules(outcome.rules);
+    if (outcome.rejected > 0) rail.line(`${outcome.rejected} proposed ${outcome.rejected === 1 ? "rule was" : "rules were"} left out: too generic, or not safe to use.`);
+  }
+  rail.gap();
+  rail.done(`Standard v${outcome.version} saved`);
+  rail.line(`Your team gets the same rules. Edit them in ${STANDARD_FILE}`);
+  if (outcome.warning) rail.line(terminalText(outcome.warning, 600), "warn");
+  return { status: "created", version: outcome.version };
+}
+
+// src/commands/init/team-standard.ts
+async function lookUpTeamStandard(opts) {
+  if (!opts.adopt) return { status: "skipped", why: "no-adopt" };
+  const token = await resolveToken(opts.globals.token);
+  const url = await resolveServiceUrl(opts.globals.serviceUrl);
+  if (!token.ok || !url.ok) return { status: "skipped", why: "not-signed-in" };
+  const found = await fetchRemoteSetup({ token: token.data.token, serviceUrl: url.data, verbose: opts.globals.verbose });
+  if (found.status === "unavailable") return { status: "unavailable", reason: terminalText(found.reason, 300) };
+  if (found.status === "none") return { status: "none" };
+  if (opts.previous?.declinedStandardVersion === found.standard.version) {
+    return { status: "declined-before", version: found.standard.version };
+  }
+  return { status: "found", found, version: found.standard.version };
+}
+async function writeTeamStandard(team, opts) {
+  const token = await resolveToken(opts.globals.token);
+  const url = await resolveServiceUrl(opts.globals.serviceUrl);
+  if (!token.ok || !url.ok) return { status: "skipped", why: "not-signed-in" };
+  const found = team.found;
+  try {
+    const outcome = await adoptRemoteSetup(found, {
+      serviceUrl: url.data,
+      projectId: await projectLabel(token.data.token, url.data, opts.globals.verbose)
+    });
+    if (opts.previous?.declinedStandardVersion != null) {
+      await writeSetupState({ declinedStandardVersion: void 0 }).catch(() => {
+      });
+    }
+    return { status: "adopted", version: found.standard.version, summary: describeRemote(found), notes: outcome.notes };
+  } catch (err2) {
+    return { status: "write-failed", reason: terminalText(err2.message, 300) };
+  }
+}
+async function adoptTeamStandard(opts) {
+  const team = await lookUpTeamStandard(opts);
+  return team.status === "found" ? writeTeamStandard(team, opts) : team;
+}
+async function askTeamChoice(ui, team) {
+  const { rail, screen } = ui;
+  rail.active("Your team already has a Standard for this repository");
+  rail.line(describeRemote(team.found));
+  rail.line(`Use it to review with the same rules as everyone else. A new one becomes v${team.version + 1} for the whole team.`);
+  rail.gap();
+  rail.keys([["Enter", "use it"], ["n", "create a new one"]]);
+  const k = await screen.key(["enter", "n"], "enter", { freshMs: 300 });
+  rail.collapse();
+  return k === "n" ? "new" : "use";
+}
+function sayAdopted(ui, team) {
+  ui.rail.done(`Using your team's Standard v${team.version}`);
+  ui.rail.line(terminalText(team.summary, 300));
+  ui.rail.line(`Edit it in ${STANDARD_FILE}, then share the change: verity standard push`);
+  for (const note of team.notes) ui.rail.line(terminalText(note, 300), "warn");
+}
+
+// src/commands/init/standard.ts
+async function deriveFromCatalogue(ui, globals) {
+  const url = await resolveServiceUrl(globals.serviceUrl);
+  try {
+    const result = await runSynthesis({ serviceUrl: url.ok ? url.data : void 0 });
+    if ("refused" in result) {
+      ui.rail.warn("No Standard was written");
+      ui.rail.line(terminalText(result.refused, 300));
+      return { ok: false, version: null };
+    }
+    const pushed = await pushStandard(globals);
+    if (pushed.standardVersion !== null) {
+      await correctVerityMdVersion({
+        standard: result.standard,
+        version: pushed.standardVersion,
+        tools: result.tools,
+        serviceUrl: url.ok ? url.data : void 0
+      });
+      ui.rail.done(`Standard v${pushed.standardVersion} saved`);
+      ui.rail.line(`Your team gets the same rules. Edit them in ${STANDARD_FILE}`);
+    } else {
+      ui.rail.done("Standard saved on this machine");
+    }
+    for (const line2 of pushed.lines) {
+      if (line2.startsWith("Standard pushed")) continue;
+      if (line2.startsWith("Not signed in")) ui.rail.line(`Sign in to share it with your team: verity login, then verity standard push. Edit it in ${STANDARD_FILE}`);
+      else ui.rail.line(terminalText(line2, 600), "warn");
+    }
+    for (const note of result.notes) ui.rail.line(terminalText(note, 300), "warn");
+    return { ok: true, version: pushed.standardVersion };
+  } catch (err2) {
+    ui.rail.warn("No Standard was written");
+    ui.rail.line(terminalText(err2.message, 300));
+    return { ok: false, version: null };
+  }
+}
+async function standardStep(ui, ctx) {
+  const { rail } = ui;
+  const s = ui.screen.s;
+  const notAsked = { outcome: "skipped", detail: "none" };
+  const end = (r) => {
+    rail.gap();
+    rail.settle();
+    return r;
+  };
+  const derived = async (profile2) => {
+    const d = await deriveFromCatalogue(ui, ctx.globals);
+    return end({ source: d.ok ? "derived" : "none", version: d.version, profile: profile2 });
+  };
+  if ((0, import_node_fs75.existsSync)(projectPath(STANDARD_FILE))) {
+    const sync = await pushLocalStandardIfMissing(ctx.globals);
+    rail.done("Kept your Standard");
+    rail.line(`${STANDARD_FILE} is already here, so this run leaves it as it is. Edit it there, then share the change: verity standard push`);
+    if (sync.status === "pushed") {
+      rail.line(sync.version !== null ? `It was only on this machine. It is shared now as v${sync.version}.` : "It is only on this machine:", sync.version !== null ? "muted" : "warn");
+      for (const line2 of sync.lines) if (!line2.startsWith("Standard pushed")) rail.line(terminalText(line2, 600), "warn");
+    }
+    return end({ source: "kept", version: sync.status === "pushed" ? sync.version : null, profile: notAsked });
+  }
+  const team = await lookUpTeamStandard(ctx);
+  let replaces;
+  if (team.status === "found") {
+    const choice = ctx.standard ?? (ui.asking ? await askTeamChoice(ui, team) : "use");
+    if (choice === "use") {
+      const adopted = await writeTeamStandard(team, ctx);
+      if (adopted.status === "adopted") {
+        sayAdopted(ui, adopted);
+        return end({ source: "adopted", version: adopted.version, profile: notAsked });
+      }
+      rail.warn("Could not write the team's Standard here");
+      if (adopted.status === "write-failed") rail.line(terminalText(adopted.reason, 300));
+      return derived(notAsked);
+    }
+    await writeSetupState({ declinedStandardVersion: team.version }).catch(() => {
+    });
+    rail.done(`Creating a new Standard ${s.gray}\xB7 it becomes v${team.version + 1} for the team${ctx.standard ? " (--standard new)" : ""}${s.reset}`);
+    replaces = team.version;
+  } else if (team.status === "declined-before") {
+    rail.line(`This project turned down the team's Standard v${team.version} before, so this run builds its own.`);
+    return derived(notAsked);
+  }
+  if (team.status === "unavailable") {
+    rail.warn("Could not ask the Verity service for this repository's Standard");
+    rail.line(terminalText(team.reason, 300));
+    return derived(notAsked);
+  }
+  if (team.status === "skipped") return derived(notAsked);
+  if (!await rulesOffered(ui, ctx.globals)) return derived(notAsked);
+  const profile = buildRepoProfile();
+  try {
+    writeRepoFile(PROFILE_FILE, JSON.stringify(profile, null, 2) + "\n");
+  } catch (err2) {
+    rail.warn(`Could not write ${PROFILE_FILE} for you to read, so nothing was sent`);
+    rail.line(terminalText(err2.message, 200));
+    return derived({ outcome: "failed", detail: "error" });
+  }
+  let detail;
+  let send;
+  if (ctx.profile) {
+    send = ctx.profile === "send";
+    detail = "given";
+  } else if (ui.asking) {
+    send = await askToSend(ui, profile);
+    detail = send ? "asked" : "declined";
+  } else {
+    send = false;
+    detail = "unattended";
+  }
+  if (!send) {
+    rail.warn("Profile not sent");
+    rail.line(detail === "unattended" ? "Nobody was asked, so nothing was sent. Your Standard has the built-in rules only." : "Your Standard has the built-in rules only.");
+    rail.line(`Add project rules later: verity standard generate (read ${PROFILE_FILE} first)`);
+    rail.gap();
+    return derived({ outcome: "skipped", detail });
+  }
+  if (detail === "given") rail.done(`Profile sent ${s.gray}\xB7 no source code (--profile send)${s.reset}`);
+  else rail.done(`Profile sent ${s.gray}\xB7 no source code${s.reset}`);
+  rail.gap();
+  rail.settle();
+  const generated = await generate(ui, ctx.globals, profile, replaces);
+  if (generated.status === "created") {
+    return end({ source: "generated", version: generated.version, profile: { outcome: "ok", detail } });
+  }
+  if (generated.status === "exists") {
+    const again = await adoptTeamStandard(ctx);
+    if (again.status === "adopted") {
+      sayAdopted(ui, again);
+      return end({ source: "adopted", version: again.version, profile: { outcome: "ok", detail } });
+    }
+  }
+  return derived({ outcome: "ok", detail });
+}
+
+// src/commands/init/finish.ts
+async function finishRun(ui, ctx) {
+  const { rail } = ui;
+  const s = ui.screen.s;
+  const secs2 = Math.max(1, Math.round((Date.now() - ctx.started) / 1e3));
+  if (!ctx.haveStandard) {
+    sayChanged(ui, ctx.before);
+    rail.end(`${s.yellow}Not finished:${s.reset} no Standard was written, so the gate cannot review.`, "Fix the error above, then run verity init again.");
+    return;
+  }
+  if (ctx.pluginMode) {
+    const version = activePluginVersion();
+    if (version) await writeSetupState({ pluginSetup: { version, completed_at: (/* @__PURE__ */ new Date()).toISOString() }, wiring: void 0 });
+  } else if (ctx.noPlugin) {
+    await writeSetupState({ wiring: "project" });
+  }
+  sayChanged(ui, ctx.before);
+  const next = ctx.momentIds.length === 0 ? "Verity reviews nothing until you turn a moment on: verity config moments turn,commit,push" : ctx.pluginMode ? ctx.signedIn ? "Verity reviews from your next turn." : "The security scan runs from your next turn. Sign in for AI review: verity login" : ctx.signedIn ? "Start a new Claude Code session. Verity reviews from its first turn." : "Start a new Claude Code session. The security scan runs from the first turn.";
+  rail.end(`${s.green}${s.bold}Ready${s.reset} ${s.gray}in ${secs2}s.${s.reset}`, next);
+}
+function sayChanged(ui, before) {
+  const changed = changedSince(before, snapshotInitFiles());
+  if (changed.length === 0) return;
+  ui.rail.line(`Changed: ${changed.join(", ")}. Details: verity doctor`, "muted");
+}
+
+// src/commands/migrate.ts
+var import_node_fs76 = require("node:fs");
+var import_node_path64 = require("node:path");
+var import_node_child_process22 = require("node:child_process");
+var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
+function defaultNpmRemover(pkg) {
+  (0, import_node_child_process22.execSync)(`npm rm -g ${pkg}`, { stdio: "pipe", timeout: 12e4 });
+}
+function git2(cwd, args2) {
+  (0, import_node_child_process22.execFileSync)("git", hardenedGitArgv(args2), { cwd, stdio: "pipe", env: hardenedGitEnv() });
+}
+function isGitTracked(cwd, relPath) {
+  try {
+    git2(cwd, ["ls-files", "--error-unmatch", "--", relPath]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isGitRepo(cwd) {
+  try {
+    git2(cwd, ["rev-parse", "--is-inside-work-tree"]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function runMigration(opts = {}) {
+  const root = opts.cwd ?? repoRoot();
+  const home = opts.home ?? process.env.HOME ?? "";
+  const npmRemover = opts.npmRemover ?? defaultNpmRemover;
+  const actions = [];
+  const movedProjectDir = migrateProjectDir(root, actions);
+  migrateGlobalCredentials(home, actions);
+  await migrateLegacyHooks(root, actions);
+  await migrateClaudeMd(root, actions);
+  migrateStandardFile(root, actions);
+  await migrateLocalTelemetry(root, actions);
+  removeLegacyPackage(movedProjectDir, npmRemover, actions);
+  return { actions, migrated: actions.length > 0 };
+}
+function migrateProjectDir(root, actions) {
+  const gateDir = (0, import_node_path64.join)(root, ".gate");
+  const verityDir = (0, import_node_path64.join)(root, ".verity");
+  if ((0, import_node_fs76.existsSync)(gateDir) && !(0, import_node_fs76.existsSync)(verityDir)) {
+    return migrateProjectDirRename(root, gateDir, verityDir, actions);
+  }
+  if ((0, import_node_fs76.existsSync)(gateDir) && (0, import_node_fs76.existsSync)(verityDir)) {
+    return migrateProjectDirCarry(gateDir, verityDir, actions);
+  }
+  return false;
+}
+function migrateProjectDirRename(root, gateDir, verityDir, actions) {
+  let moved = false;
+  if (isGitRepo(root) && isGitTracked(root, ".gate")) {
+    if (hasStagedChanges(root)) {
+      printWarn(
+        "Migrating .gate \u2192 .verity with `git mv` while the index has staged changes \u2014 the rename will be staged alongside them. Review `git status` before committing."
+      );
+    }
+    try {
+      git2(root, ["mv", "--", ".gate", ".verity"]);
+      actions.push("Moved .gate/ \u2192 .verity/ (git mv, staged)");
+      moved = true;
+    } catch {
+    }
+  }
+  if (moved) {
+    if ((0, import_node_fs76.existsSync)(gateDir)) {
+      const carried = carryLegacyContents(gateDir, verityDir);
+      if (carried > 0) {
+        actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
+      }
+      try {
+        (0, import_node_fs76.rmSync)(gateDir, { recursive: true, force: true });
+      } catch {
+      }
+    }
+    return true;
+  }
+  moveDir(gateDir, verityDir);
+  actions.push("Moved .gate/ \u2192 .verity/");
+  return true;
+}
+function migrateProjectDirCarry(gateDir, verityDir, actions) {
+  const carried = carryLegacyContents(gateDir, verityDir);
+  if (carried > 0) {
+    actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
+  }
+  try {
+    (0, import_node_fs76.rmSync)(gateDir, { recursive: true, force: true });
+  } catch {
+  }
+  return carried > 0;
+}
+function migrateGlobalCredentials(home, actions) {
+  if (!home) return;
+  const gateCreds = (0, import_node_path64.join)(home, ".gate", "credentials");
+  const verityCreds = (0, import_node_path64.join)(home, ".verity", "credentials");
+  if (!(0, import_node_fs76.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs76.existsSync)(verityCreds)) {
+    (0, import_node_fs76.mkdirSync)((0, import_node_path64.join)(home, ".verity"), { recursive: true });
+    moveFile(gateCreds, verityCreds);
+    actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
+    return;
+  }
+  const added = mergeGlobalCredentials(gateCreds, verityCreds);
+  if (added > 0) {
+    actions.push(
+      `Merged ${added} legacy credential line(s) from ~/.gate/credentials into ~/.verity/credentials`
+    );
+  }
+}
+async function migrateLegacyHooks(root, actions) {
+  const settings = await readSettingsAt(root);
+  const settingsBefore = JSON.stringify(settings);
+  const updatedSettings = removeVerityHooks(settings);
+  if (settingsBefore !== JSON.stringify(updatedSettings)) {
+    await writeSettingsAt(root, updatedSettings);
+    actions.push("Stripped legacy gate hooks from .claude/settings.json");
+  }
+}
+async function migrateClaudeMd(root, actions) {
+  const claudeMd = (0, import_node_path64.join)(root, "CLAUDE.md");
+  const hadLegacyBlock = (0, import_node_fs76.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  if (!hadLegacyBlock) return;
+  try {
+    await ensureClaudeMdPointer(root);
+    actions.push("Rewrote legacy gate-memory block in CLAUDE.md");
+  } catch (err2) {
+    printWarn(`Could not rewrite CLAUDE.md block: ${err2.message}`);
+  }
+}
+function migrateStandardFile(root, actions) {
+  const gateMd = (0, import_node_path64.join)(root, "GATE.md");
+  const verityMd = (0, import_node_path64.join)(root, "VERITY.md");
+  if (!(0, import_node_fs76.existsSync)(gateMd) || (0, import_node_fs76.existsSync)(verityMd)) return;
+  let moved = false;
+  if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
+    try {
+      git2(root, ["mv", "--", "GATE.md", "VERITY.md"]);
+      moved = true;
+    } catch {
+    }
+  }
+  if (!moved) moveFile(gateMd, verityMd);
+  const content = readFileSyncSafe(verityMd);
+  const refreshed = content.split("GATE.md").join("VERITY.md");
+  if (refreshed !== content) (0, import_node_fs76.writeFileSync)(verityMd, refreshed);
+  actions.push("Renamed GATE.md \u2192 VERITY.md");
+}
+async function migrateLocalTelemetry(root, actions) {
+  const { removed } = await healLocalTelemetry(root);
+  if (removed.length === 0) return;
+  actions.push(
+    `Removed ${removed.length} old Verity telemetry key(s) from ${SETTINGS_LOCAL_FILE2} (Claude Code ignores them there). Run "verity telemetry install" to export from this machine.`
+  );
+}
+function removeLegacyPackage(movedProjectDir, npmRemover, actions) {
+  if (!movedProjectDir) return;
+  try {
+    npmRemover(LEGACY_NPM_PACKAGE);
+    actions.push(`Removed legacy global package ${LEGACY_NPM_PACKAGE}`);
+  } catch (err2) {
+    printWarn(
+      `Could not remove ${LEGACY_NPM_PACKAGE} (${err2.message}). Remove it manually: npm rm -g ${LEGACY_NPM_PACKAGE}`
+    );
+  }
+}
+function credentialRemoteKey(line2) {
+  const trimmed = line2.trim();
+  if (trimmed === "") return null;
+  const idx = trimmed.indexOf(" token:");
+  return idx === -1 ? trimmed : trimmed.slice(0, idx).trim();
+}
+function mergeGlobalCredentials(gateCreds, verityCreds) {
+  const verityContent = readFileSyncSafe(verityCreds);
+  const existingKeys = new Set(
+    verityContent.split("\n").map(credentialRemoteKey).filter((k) => k !== null)
+  );
+  const toAppend = [];
+  for (const line2 of readFileSyncSafe(gateCreds).split("\n")) {
+    const key = credentialRemoteKey(line2);
+    if (key === null || existingKeys.has(key)) continue;
+    existingKeys.add(key);
+    toAppend.push(line2.replace(/\r$/, ""));
+  }
+  if (toAppend.length > 0) {
+    const sep7 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
+    (0, import_node_fs76.writeFileSync)(verityCreds, verityContent + sep7 + toAppend.join("\n") + "\n");
+  }
+  (0, import_node_fs76.rmSync)(gateCreds, { force: true });
+  return toAppend.length;
+}
+function readFileSyncSafe(path) {
+  try {
+    return (0, import_node_fs76.readFileSync)(path, "utf-8");
+  } catch {
+    return "";
+  }
+}
+function hasStagedChanges(root) {
+  try {
+    git2(root, ["diff", "--cached", "--quiet", ...DIFF_READ_FLAGS]);
+    return false;
+  } catch {
+    return true;
+  }
+}
+function moveDir(from, to) {
+  try {
+    (0, import_node_fs76.renameSync)(from, to);
+  } catch (err2) {
+    if (err2.code !== "EXDEV") throw err2;
+    (0, import_node_fs76.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs76.rmSync)(from, { recursive: true, force: true });
+  }
+}
+function moveFile(from, to) {
+  try {
+    (0, import_node_fs76.renameSync)(from, to);
+  } catch (err2) {
+    if (err2.code !== "EXDEV") throw err2;
+    (0, import_node_fs76.cpSync)(from, to);
+    (0, import_node_fs76.rmSync)(from, { force: true });
+  }
+}
+function carryLegacyContents(gateDir, verityDir) {
+  if (!isRealDir(gateDir) || !isRealDir(verityDir)) return 0;
+  let copied = 0;
+  const walk2 = (relDir) => {
+    let entries;
+    try {
+      entries = (0, import_node_fs76.readdirSync)((0, import_node_path64.join)(gateDir, relDir), { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const rel = relDir ? (0, import_node_path64.join)(relDir, entry.name) : entry.name;
+      if (entry.isSymbolicLink()) continue;
+      if (entry.isDirectory()) {
+        walk2(rel);
+        continue;
+      }
+      if (!entry.isFile() || !ensureRealDirs(verityDir, relDir)) continue;
+      const opened = openRegularInRoot(gateDir, rel);
+      if (!opened.ok) continue;
+      try {
+        (0, import_node_fs76.writeFileSync)((0, import_node_path64.join)(verityDir, rel), readOpened(opened.fd, opened.size), { flag: "wx", mode: 384 });
+        copied++;
+      } catch {
+      }
+    }
+  };
+  walk2("");
+  return copied;
+}
+function isRealDir(path) {
+  try {
+    const st = (0, import_node_fs76.lstatSync)(path);
+    return st.isDirectory() && !st.isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function ensureRealDirs(root, relDir) {
+  let current = root;
+  for (const segment of relDir.split(/[\\/]/).filter(Boolean)) {
+    current = (0, import_node_path64.join)(current, segment);
+    try {
+      (0, import_node_fs76.mkdirSync)(current);
+    } catch (e) {
+      if (e.code !== "EEXIST") return false;
+    }
+    if (!isRealDir(current)) return false;
+  }
+  return true;
+}
+async function needsMigration(root = repoRoot()) {
+  const gateDir = (0, import_node_path64.join)(root, ".gate");
+  const verityDir = (0, import_node_path64.join)(root, ".verity");
+  if ((0, import_node_fs76.existsSync)(gateDir) && !(0, import_node_fs76.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs76.existsSync)(gateDir) && (0, import_node_fs76.existsSync)(verityDir)) {
+    if ((0, import_node_fs76.existsSync)((0, import_node_path64.join)(gateDir, "credentials")) && !(0, import_node_fs76.existsSync)((0, import_node_path64.join)(verityDir, "credentials"))) {
+      return true;
+    }
+    if ((0, import_node_fs76.existsSync)((0, import_node_path64.join)(gateDir, "memory")) && !(0, import_node_fs76.existsSync)((0, import_node_path64.join)(verityDir, "memory"))) {
+      return true;
+    }
+  }
+  const claudeMd = (0, import_node_path64.join)(root, "CLAUDE.md");
+  if ((0, import_node_fs76.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+    return true;
+  }
+  if ((0, import_node_fs76.existsSync)((0, import_node_path64.join)(root, "GATE.md")) && !(0, import_node_fs76.existsSync)((0, import_node_path64.join)(root, "VERITY.md"))) {
+    return true;
+  }
+  if (await hasLegacyHooksAt(root)) return true;
+  return false;
+}
+function registerMigrateCommand(program2) {
+  program2.command("migrate").description("Migrate a legacy GATE.md install to Verity (.gate \u2192 .verity, hooks, CLAUDE.md)").action(async () => {
+    let result;
+    try {
+      result = await runMigration();
+    } catch (err2) {
+      printError(`Migration failed: ${err2.message}`);
+      process.exitCode = 1;
+      return;
+    }
+    if (!result.migrated) {
+      printInfo("Nothing to migrate \u2014 this project is already on Verity.");
+      return;
+    }
+    printInfo("Migration complete:");
+    for (const a of result.actions) printInfo(`  ${a} \u2713`);
+  });
+}
+
 // src/commands/init/sign-in.ts
-var import_node_child_process21 = require("node:child_process");
+var import_node_child_process23 = require("node:child_process");
 async function classifyExistingLogin(serviceUrl, remote, opts) {
   const existing = await resolveToken(opts.token);
   if (!existing.ok) return { kind: "none" };
@@ -41554,7 +42464,7 @@ async function classifyExistingLogin(serviceUrl, remote, opts) {
 }
 function gitRemote() {
   try {
-    return (0, import_node_child_process21.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    return (0, import_node_child_process23.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return "";
   }
@@ -41685,299 +42595,54 @@ async function signInStep(ui, resolution, opts) {
   return end("new");
 }
 
-// src/commands/init/standard.ts
-var import_node_fs73 = require("node:fs");
-
-// src/commands/init/rules.ts
-async function projectLabel(token, serviceUrl, verbose) {
+// src/commands/init/phases.ts
+async function moveGateInstall(ui) {
+  if (!await needsMigration()) return;
   try {
-    const who = await whoami(token, serviceUrl, verbose);
-    return who.ok ? who.data.project_id : null;
-  } catch {
-    return null;
-  }
-}
-function profilePreview(profile) {
-  return JSON.stringify(profile, null, 2).split("\n").slice(0, 12).map((l) => terminalText(l, 400)).concat(["\u2026", `The whole profile: ${PROFILE_FILE}`]);
-}
-async function askToSend(ui, profile) {
-  const { rail, screen } = ui;
-  const lines = consentLines(profile);
-  rail.active("Write review rules for this repository?");
-  rail.box(lines.slice(1, -1));
-  rail.line(lines[lines.length - 1]);
-  rail.gap();
-  rail.keys([["Enter", "send"], ["v", "view the profile"], ["n", "skip"]]);
-  let allowed = ["enter", "v", "n"];
-  for (; ; ) {
-    const k = await screen.key(allowed, "n", { freshMs: 300 });
-    if (k !== "v") {
-      rail.collapse();
-      return k === "enter";
-    }
-    rail.gap();
-    for (const l of profilePreview(profile)) rail.line(l);
-    rail.gap();
-    rail.keys([["Enter", "send"], ["n", "skip"]]);
-    allowed = ["enter", "n"];
-  }
-}
-async function generate(ui, globals, profile, replaces) {
-  const { rail, screen } = ui;
-  const s = screen.s;
-  const token = await resolveToken(globals.token);
-  const url = await resolveServiceUrl(globals.serviceUrl);
-  if (!token.ok || !url.ok) return { status: "fallback" };
-  const commits = profile.history.commits.length;
-  const fixes = profile.history.commits.filter((c) => c.fix).length;
-  const reverts = profile.history.commits.filter((c) => /^revert\b/i.test(c.subject)).length;
-  rail.active("Writing review rules");
-  await rail.counted(([c, f, r]) => `${s.green}\u2713${s.reset} Read ${c} commits ${s.gray}\xB7${s.reset} ${f} fixes ${s.gray}\xB7${s.reset} ${r} reverts`, [commits, fixes, reverts]);
-  if (profile.docs.length) rail.ticked(`Read ${profile.docs.map((d) => terminalText(d.name, 120)).join(" and ")}`);
-  if (ui.term.screen && !ui.term.motion) rail.line("Writing rules for this repository\u2026");
-  const started = Date.now();
-  const base = buildStandard({ detected: detectProject() }, loadCatalog());
-  const outcome = await screen.spin(`${s.gray}\u2502${s.reset}  `, () => "Writing rules for this repository", generateStandard({
-    serviceUrl: url.data,
-    token: token.data.token,
-    profile,
-    base,
-    projectId: await projectLabel(token.data.token, url.data, globals.verbose),
-    verbose: globals.verbose,
-    replaces
-  }));
-  rail.collapse();
-  if (outcome.status === "exists") return { status: "exists" };
-  if (outcome.status === "disabled") {
-    rail.line("Project rules are not switched on for this project yet. The built-in rules apply.");
-    rail.gap();
-    return { status: "fallback" };
-  }
-  if (outcome.status === "unsupported") {
-    rail.line(`This Verity service (${terminalText(url.data, 200)}) does not write project rules yet: it is older than this CLI. The built-in rules apply.`);
-    rail.gap();
-    return { status: "fallback" };
-  }
-  if (outcome.status === "failed") {
-    rail.warn("The rules could not be written this time");
-    rail.line(terminalText(outcome.reason, 300));
-    rail.line("The built-in rules apply. Try again later: verity standard generate");
-    rail.gap();
-    return { status: "fallback" };
-  }
-  const secs2 = Math.max(1, Math.round((Date.now() - started) / 1e3));
-  const docs2 = profile.docs.length;
-  if (outcome.rules.length === 0) {
-    rail.warn("No project rules this time");
-    rail.line("The proposed rules were too generic, or not safe to use. The built-in rules apply.");
-  } else {
-    const n2 = outcome.rules.length;
-    const from = [`${commits} ${commits === 1 ? "commit" : "commits"}`, ...docs2 ? [`${docs2} ${docs2 === 1 ? "doc" : "docs"}`] : []].join(" and ");
-    rail.done(`${n2} ${n2 === 1 ? "rule" : "rules"} for this repository ${s.gray}\xB7 from ${from} \xB7 ${secs2}s${s.reset}`);
-    await rail.rules(outcome.rules);
-    if (outcome.rejected > 0) rail.line(`${outcome.rejected} proposed ${outcome.rejected === 1 ? "rule was" : "rules were"} left out: too generic, or not safe to use.`);
-  }
-  rail.gap();
-  rail.done(`Standard v${outcome.version} saved`);
-  rail.line(`Your team gets the same rules. Edit them in ${STANDARD_FILE}`);
-  if (outcome.warning) rail.line(terminalText(outcome.warning, 600), "warn");
-  return { status: "created", version: outcome.version };
-}
-
-// src/commands/init/standard.ts
-async function lookUpTeamStandard(opts) {
-  if (!opts.adopt) return { status: "skipped", why: "no-adopt" };
-  const token = await resolveToken(opts.globals.token);
-  const url = await resolveServiceUrl(opts.globals.serviceUrl);
-  if (!token.ok || !url.ok) return { status: "skipped", why: "not-signed-in" };
-  const found = await fetchRemoteSetup({ token: token.data.token, serviceUrl: url.data, verbose: opts.globals.verbose });
-  if (found.status === "unavailable") return { status: "unavailable", reason: terminalText(found.reason, 300) };
-  if (found.status === "none") return { status: "none" };
-  if (opts.previous?.declinedStandardVersion === found.standard.version) {
-    return { status: "declined-before", version: found.standard.version };
+    const result = await runMigration();
+    ui.rail.done("Moved a GATE.md install to Verity");
+    for (const a of result.actions) ui.rail.line(a);
+  } catch (err2) {
+    ui.rail.warn(`The GATE.md migration failed: ${terminalText(err2.message, 200)}`);
   }
-  return { status: "found", found, version: found.standard.version };
+  ui.rail.settle();
 }
-async function writeTeamStandard(team, opts) {
-  const token = await resolveToken(opts.globals.token);
-  const url = await resolveServiceUrl(opts.globals.serviceUrl);
-  if (!token.ok || !url.ok) return { status: "skipped", why: "not-signed-in" };
-  const found = team.found;
+async function signInSafely(ui, globals) {
   try {
-    const outcome = await adoptRemoteSetup(found, {
-      serviceUrl: url.data,
-      projectId: await projectLabel(token.data.token, url.data, opts.globals.verbose)
-    });
-    if (opts.previous?.declinedStandardVersion != null) {
-      await writeSetupState({ declinedStandardVersion: void 0 }).catch(() => {
-      });
-    }
-    return { status: "adopted", version: found.standard.version, summary: describeRemote(found), notes: outcome.notes };
+    return await signInStep(ui, await resolveServiceUrlForAuth(globals.serviceUrl), { token: globals.token, verbose: globals.verbose, repo: repoLabel() });
   } catch (err2) {
-    return { status: "write-failed", reason: terminalText(err2.message, 300) };
+    ui.rail.collapse();
+    ui.rail.warn(`Sign-in did not complete: ${terminalText(err2.message, 200)}`);
+    ui.rail.gap();
+    ui.rail.settle();
+    return "failed";
   }
 }
-async function adoptTeamStandard(opts) {
-  const team = await lookUpTeamStandard(opts);
-  return team.status === "found" ? writeTeamStandard(team, opts) : team;
+function traceTelemetry(trace, telemetry, answer) {
+  if (telemetry === "enabled") trace.mark("telemetry", "ok", answer === "already-on" ? "already" : "new");
+  else if (telemetry === "declined") trace.mark("telemetry", "skipped", "declined");
+  else if (telemetry === "deferred") trace.mark("telemetry", "failed", "none");
+  else trace.mark("telemetry", "skipped", "unattended");
 }
-async function askTeamChoice(ui, team) {
-  const { rail, screen } = ui;
-  rail.active("Your team already has a Standard for this repository");
-  rail.line(describeRemote(team.found));
-  rail.line(`Use it to review with the same rules as everyone else. A new one becomes v${team.version + 1} for the whole team.`);
-  rail.gap();
-  rail.keys([["Enter", "use it"], ["n", "create a new one"]]);
-  const k = await screen.key(["enter", "n"], "enter", { freshMs: 300 });
-  rail.collapse();
-  return k === "n" ? "new" : "use";
-}
-function sayAdopted(ui, team) {
-  ui.rail.done(`Using your team's Standard v${team.version}`);
-  ui.rail.line(terminalText(team.summary, 300));
-  for (const note of team.notes) ui.rail.line(terminalText(note, 300), "warn");
-}
-async function deriveFromCatalogue(ui, globals) {
-  const url = await resolveServiceUrl(globals.serviceUrl);
+async function recordAnswers(ui, momentIds, telemetry) {
   try {
-    const result = await runSynthesis({ serviceUrl: url.ok ? url.data : void 0 });
-    if ("refused" in result) {
-      ui.rail.warn("No Standard was written");
-      ui.rail.line(result.refused);
-      return { ok: false, version: null };
-    }
-    const pushed = await pushStandard(globals);
-    if (pushed.standardVersion !== null) {
-      await correctVerityMdVersion({
-        standard: result.standard,
-        version: pushed.standardVersion,
-        tools: result.tools,
-        serviceUrl: url.ok ? url.data : void 0
-      });
-      ui.rail.done(`Standard v${pushed.standardVersion} saved`);
-      ui.rail.line(`Your team gets the same rules. Edit them in ${STANDARD_FILE}`);
-    } else {
-      ui.rail.done("Standard saved on this machine");
-    }
-    for (const line2 of pushed.lines) {
-      if (line2.startsWith("Standard pushed")) continue;
-      if (line2.startsWith("Not signed in")) ui.rail.line(`Sign in to share it with your team: verity login, then verity standard push. Edit it in ${STANDARD_FILE}`);
-      else ui.rail.line(line2, "warn");
-    }
-    for (const note of result.notes) ui.rail.line(note, "warn");
-    return { ok: true, version: pushed.standardVersion };
-  } catch (err2) {
-    ui.rail.warn("No Standard was written");
-    ui.rail.line(terminalText(err2.message, 300));
-    return { ok: false, version: null };
-  }
-}
-async function standardStep(ui, ctx) {
-  const { rail } = ui;
-  const s = ui.screen.s;
-  const notAsked = { outcome: "skipped", detail: "none" };
-  const end = (r) => {
-    rail.gap();
-    rail.settle();
-    return r;
-  };
-  const derived = async (profile2) => {
-    const d = await deriveFromCatalogue(ui, ctx.globals);
-    return end({ source: d.ok ? "derived" : "none", version: d.version, profile: profile2 });
-  };
-  if ((0, import_node_fs73.existsSync)(projectPath(STANDARD_FILE))) {
-    const sync = await pushLocalStandardIfMissing(ctx.globals);
-    rail.done("Kept your Standard");
-    rail.line(`${STANDARD_FILE} is already here, so this run leaves it as it is.`);
-    if (sync.status === "pushed") {
-      rail.line(sync.version !== null ? `It was only on this machine. It is shared now as v${sync.version}.` : "It is only on this machine:", sync.version !== null ? "muted" : "warn");
-      for (const line2 of sync.lines) if (!line2.startsWith("Standard pushed")) rail.line(line2, "warn");
-    }
-    return end({ source: "kept", version: sync.status === "pushed" ? sync.version : null, profile: notAsked });
-  }
-  const team = await lookUpTeamStandard(ctx);
-  let replaces;
-  if (team.status === "found") {
-    const choice = ctx.standard ?? (ui.asking ? await askTeamChoice(ui, team) : "use");
-    if (choice === "use") {
-      const adopted = await writeTeamStandard(team, ctx);
-      if (adopted.status === "adopted") {
-        sayAdopted(ui, adopted);
-        return end({ source: "adopted", version: adopted.version, profile: notAsked });
-      }
-      rail.warn("Could not write the team's Standard here");
-      if (adopted.status === "write-failed") rail.line(adopted.reason);
-      return derived(notAsked);
-    }
-    await writeSetupState({ declinedStandardVersion: team.version }).catch(() => {
+    await writeSetupState({
+      moments: momentIds,
+      ...telemetry ? { telemetry } : {},
+      init: { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.35.0-experimental.3a13a5e" : "dev" }
     });
-    rail.done(`Creating a new Standard ${s.gray}\xB7 it becomes v${team.version + 1} for the team${ctx.standard ? " (--standard new)" : ""}${s.reset}`);
-    replaces = team.version;
-  } else if (team.status === "declined-before") {
-    rail.line(`This project turned down the team's Standard v${team.version} before, so this run builds its own.`);
-    return derived(notAsked);
-  }
-  if (team.status === "unavailable") {
-    rail.warn("Could not ask the Verity service for this repository's Standard");
-    rail.line(team.reason);
-    return derived(notAsked);
-  }
-  if (team.status === "skipped") return derived(notAsked);
-  const profile = buildRepoProfile();
-  try {
-    writeRepoFile(PROFILE_FILE, JSON.stringify(profile, null, 2) + "\n");
   } catch (err2) {
-    rail.warn(`Could not write ${PROFILE_FILE} for you to read, so nothing was sent`);
-    rail.line(terminalText(err2.message, 200));
-    return derived({ outcome: "failed", detail: "error" });
+    ui.rail.line(`Could not record the setup answers: ${terminalText(err2.message, 200)}`, "warn");
   }
-  let detail;
-  let send;
-  if (ctx.profile) {
-    send = ctx.profile === "send";
-    detail = "given";
-  } else if (ui.asking) {
-    send = await askToSend(ui, profile);
-    detail = send ? "asked" : "declined";
-  } else {
-    send = false;
-    detail = "unattended";
-  }
-  if (!send) {
-    rail.warn("Profile not sent");
-    rail.line(detail === "unattended" ? "Nobody was asked, so nothing was sent. Your Standard has the built-in rules only." : "Your Standard has the built-in rules only.");
-    rail.line(`Add project rules later: verity standard generate (read ${PROFILE_FILE} first)`);
-    rail.gap();
-    return derived({ outcome: "skipped", detail });
-  }
-  if (detail === "given") rail.done(`Profile sent ${s.gray}\xB7 no source code (--profile send)${s.reset}`);
-  else rail.done(`Profile sent ${s.gray}\xB7 no source code${s.reset}`);
-  rail.gap();
-  rail.settle();
-  const generated = await generate(ui, ctx.globals, profile, replaces);
-  if (generated.status === "created") {
-    return end({ source: "generated", version: generated.version, profile: { outcome: "ok", detail } });
-  }
-  if (generated.status === "exists") {
-    const again = await adoptTeamStandard(ctx);
-    if (again.status === "adopted") {
-      sayAdopted(ui, again);
-      return end({ source: "adopted", version: again.version, profile: { outcome: "ok", detail } });
-    }
-  }
-  return derived({ outcome: "ok", detail });
 }
 
 // src/commands/init/index.ts
-async function runInit(program2, opts) {
-  const started = Date.now();
-  const globals = program2.opts();
-  const defaultsOnly = (opts.yes ?? false) || !interactive();
+function parseInitFlags(opts) {
   let givenMoments;
   if (opts.moments != null) {
     const parsed = parseMomentSelection(String(opts.moments));
     if ("error" in parsed) {
-      printError(parsed.error);
+      printError(terminalText(parsed.error, 300));
       process.exit(1);
     }
     givenMoments = parsed.moments;
@@ -41986,7 +42651,7 @@ async function runInit(program2, opts) {
   if (opts.telemetry != null) {
     const parsed = parseTelemetryAnswer(String(opts.telemetry));
     if (parsed === null) {
-      printError(`--telemetry: unrecognised "${opts.telemetry}". Valid: on, off.`);
+      printError(`--telemetry: unrecognised "${terminalText(String(opts.telemetry), 60)}". Valid: on, off.`);
       process.exit(1);
     }
     givenTelemetry = parsed;
@@ -41995,7 +42660,7 @@ async function runInit(program2, opts) {
   if (opts.profile != null) {
     const v = String(opts.profile).trim().toLowerCase();
     if (v !== "send" && v !== "skip") {
-      printError(`--profile: unrecognised "${opts.profile}". Valid: send, skip.`);
+      printError(`--profile: unrecognised "${terminalText(String(opts.profile), 60)}". Valid: send, skip.`);
       process.exit(1);
     }
     profileAnswer = v;
@@ -42004,16 +42669,24 @@ async function runInit(program2, opts) {
   if (opts.standard != null) {
     const v = String(opts.standard).trim().toLowerCase();
     if (v !== "use" && v !== "new") {
-      printError(`--standard: unrecognised "${opts.standard}". Valid: use, new.`);
+      printError(`--standard: unrecognised "${terminalText(String(opts.standard), 60)}". Valid: use, new.`);
       process.exit(1);
     }
     standardAnswer = v;
   }
+  return { givenMoments, givenTelemetry, profileAnswer, standardAnswer };
+}
+async function runInit(program2, opts) {
+  const started = Date.now();
+  const globals = program2.opts();
+  const defaultsOnly = (opts.yes ?? false) || !interactive();
+  const { givenMoments, givenTelemetry, profileAnswer, standardAnswer } = parseInitFlags(opts);
   const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-  if (!projectMarkers.some((m) => (0, import_node_fs74.existsSync)(m))) {
+  if (!projectMarkers.some((m) => (0, import_node_fs77.existsSync)(m))) {
     printError('No project detected in the current directory. Run "verity init" from your project root.');
     process.exit(1);
   }
+  const before = snapshotInitFiles();
   const stale = clearStalePluginMarker();
   const pluginMode = opts.plugin === false ? false : opts.pluginMode ?? pluginActiveHere();
   const install = pluginMode ? activePluginInstall() : null;
@@ -42026,16 +42699,7 @@ async function runInit(program2, opts) {
     await wordmark(ui.screen, { reveal: firstInitOnMachine() });
     rail.open(repoLabel());
     if (opts.intensity != null) rail.line("--intensity is ignored: static analysis is Trivy only.", "warn");
-    if (await needsMigration()) {
-      try {
-        const result = await runMigration();
-        rail.done("Moved a GATE.md install to Verity");
-        for (const a of result.actions) rail.line(a);
-      } catch (err2) {
-        rail.warn(`The GATE.md migration failed: ${terminalText(err2.message, 200)}`);
-      }
-      rail.settle();
-    }
+    await moveGateInstall(ui);
     if (!await prerequisitesStep(ui)) {
       rail.end("Stopped: a required tool is missing.", "Install it, then run verity init again.");
       trace.mark("prerequisites", "failed", "blocked");
@@ -42046,10 +42710,10 @@ async function runInit(program2, opts) {
     trace.mark("prerequisites", "ok");
     await scaffoldStep(ui, { untrackMemory: opts.untrackMemory === true, untrackState: opts.untrackState === true });
     trace.mark("scaffold", "ok");
-    await (0, import_promises19.mkdir)((0, import_node_path60.join)(process.env.HOME ?? "", ".verity"), { recursive: true });
+    await (0, import_promises19.mkdir)((0, import_node_path65.join)(process.env.HOME ?? "", ".verity"), { recursive: true });
     await repoStep(ui, detectProject());
     const previous = await readSetupState();
-    const setUpBefore = (0, import_node_fs74.existsSync)(projectPath(STANDARD_FILE));
+    const setUpBefore = (0, import_node_fs77.existsSync)(projectPath(STANDARD_FILE));
     const answers = await askSetupQuestions(defaultsOnly, previous, { moments: givenMoments, telemetry: givenTelemetry });
     trace.mark("questions", "ok", givenMoments || givenTelemetry !== void 0 || profileAnswer || standardAnswer ? "asked" : "defaults");
     const plan = planMoments(answers.moments, { given: givenMoments !== void 0, defaultsOnly });
@@ -42065,66 +42729,40 @@ async function runInit(program2, opts) {
       force: opts.force ?? false
     });
     trace.mark("hooks", "ok", pluginMode ? "plugin" : "project");
-    let signIn;
-    try {
-      signIn = await signInStep(ui, await resolveServiceUrlForAuth(globals.serviceUrl), { token: globals.token, verbose: globals.verbose, repo: repoLabel() });
-    } catch (err2) {
-      rail.collapse();
-      rail.warn(`Sign-in did not complete: ${terminalText(err2.message, 200)}`);
-      rail.gap();
-      rail.settle();
-      signIn = "failed";
-    }
+    const signIn = await signInSafely(ui, globals);
     trace.mark("sign_in", ...signInDetail(signIn));
     const signedIn = signIn === "already" || signIn === "new" || signIn === "unreachable";
-    const telemetry = await telemetryStep(ui, answers.telemetry, answers.telemetry === "not-asked" && previous?.telemetry === "deferred", globals);
-    if (telemetry === "enabled") trace.mark("telemetry", "ok", answers.telemetry === "already-on" ? "already" : "new");
-    else if (telemetry === "declined") trace.mark("telemetry", "skipped", "declined");
-    else if (telemetry === "deferred") trace.mark("telemetry", "failed", "none");
-    else trace.mark("telemetry", "skipped", "unattended");
+    const telemetry = await telemetryStep(ui, answers.telemetry, answers.telemetry === "not-asked" && previous?.telemetry === "deferred", globals, previous?.telemetry);
+    traceTelemetry(trace, telemetry, answers.telemetry);
     const standard = await standardStep(ui, { globals, previous, adopt: opts.adopt !== false, profile: profileAnswer, standard: standardAnswer });
     trace.mark("profile", standard.profile.outcome, standard.profile.detail);
     const haveStandard = standard.source !== "none";
     trace.mark("standard", haveStandard ? "ok" : "failed", standard.source);
     const formalNew = formalDefault(previous, { setUpBefore });
     backgroundStep(ui, { cli: process.argv[1], formalNew });
-    try {
-      await writeSetupState({
-        // The effective answer: the next run starts from this record.
-        moments: plan.momentIds,
-        ...telemetry ? { telemetry } : {},
-        init: { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.35.0-experimental.3211f79" : "dev" }
-      });
-    } catch (err2) {
-      rail.line(`Could not record the setup answers: ${terminalText(err2.message, 200)}`, "warn");
-    }
+    await recordAnswers(ui, plan.momentIds, telemetry);
     trace.mark("completed", haveStandard ? "ok" : "failed", haveStandard ? void 0 : "none");
     await trace.settle();
-    const secs2 = Math.max(1, Math.round((Date.now() - started) / 1e3));
-    const s = ui.screen.s;
-    if (!haveStandard) {
-      rail.end(`${s.yellow}Not finished:${s.reset} this project has no Standard, so the gate cannot review.`, "Run verity init again, or /verity-setup in Claude Code.");
-    } else {
-      if (pluginMode) {
-        const version = activePluginVersion();
-        if (version) await writeSetupState({ pluginSetup: { version, completed_at: (/* @__PURE__ */ new Date()).toISOString() }, wiring: void 0 });
-      } else if (opts.plugin === false) {
-        await writeSetupState({ wiring: "project" });
-      }
-      const next = plan.momentIds.length === 0 ? "Verity reviews nothing until you turn a moment on: verity config moments turn,commit,push" : pluginMode ? signedIn ? "Verity reviews from your next turn." : "The security scan runs from your next turn. Sign in for AI review: verity login" : signedIn ? "Start a new Claude Code session. Verity reviews from its first turn." : "Start a new Claude Code session. The security scan runs from the first turn.";
-      rail.end(`${s.green}${s.bold}Ready${s.reset} ${s.gray}in ${secs2}s.${s.reset}`, next);
-    }
+    await finishRun(ui, {
+      started,
+      before,
+      haveStandard,
+      pluginMode,
+      noPlugin: opts.plugin === false,
+      signedIn,
+      momentIds: plan.momentIds
+    });
     markInitSeen();
   } finally {
     ui.screen.release();
   }
 }
 function registerInitCommand(program2) {
-  program2.command("init").alias("setup").description("Set up Verity in this project: two questions (sign in, and send a repo profile); every other choice is a stated default").option("--force", "Reinstall the skills even when they are up to date (hooks are always reconciled)").option("-y, --yes", "Ask nothing: skip sign-in unless already signed in, and send the profile only with --profile send").option("--profile <send|skip>", "Answer the repo-profile question without asking (the plugin asks in the session)").option("--standard <use|new>", "When the team already has a Standard: use it, or create a new one (the plugin asks in the session; unattended runs use it)").option("--no-setup", "Ignored: init no longer hands off to /verity-setup (kept for old scripts)").option("--plugin-mode", "The Claude Code plugin owns the skills and hooks: install neither, and remove any this project already has").option("--no-plugin", "Ignore any Claude Code plugin here and wire this project's own skills and hooks").option("--no-adopt", "Don't use this repository's Standard from the service; build a new one").option("--moments <list>", 'Set when Verity reviews without the default: stop,pre-commit,pre-push \u2014 or "none"').option("--intensity <level>", "Ignored: static analysis is Trivy only (kept so older plugin skills keep working)").option("--telemetry <on|off>", "Turn cost & usage telemetry on or off (init does not ask)").option("--untrack-memory", "Stop tracking the knowledge graph in git (init does not ask)").option("--untrack-state", "Untrack committed Verity state (init does not ask)").action((opts) => runInit(program2, opts));
+  program2.command("init").alias("setup").description("Set up Verity in this project: sign in, telemetry, and the Standard; every other choice is a stated default").option("--force", "Reinstall the skills even when they are up to date (hooks are always reconciled)").option("-y, --yes", "Ask nothing: skip sign-in unless already signed in, and send the profile only with --profile send").option("--profile <send|skip>", "Answer the repo-profile question without asking (the plugin asks in the session)").option("--standard <use|new>", "When the team already has a Standard: use it, or create a new one (the plugin asks in the session; unattended runs use it)").option("--no-setup", "Ignored: init no longer hands off to /verity-setup (kept for old scripts)").option("--plugin-mode", "The Claude Code plugin owns the skills and hooks: install neither, and remove any this project already has").option("--no-plugin", "Ignore any Claude Code plugin here and wire this project's own skills and hooks").option("--no-adopt", "Don't use this repository's Standard from the service; build a new one").option("--moments <list>", 'Set when Verity reviews without the default: stop,pre-commit,pre-push \u2014 or "none"').option("--intensity <level>", "Ignored: static analysis is Trivy only (kept so older plugin skills keep working)").option("--telemetry <on|off>", "Answer the telemetry question without asking: send cost & usage from this machine, or not").option("--untrack-memory", "Stop tracking the knowledge graph in git (init does not ask)").option("--untrack-state", "Untrack committed Verity state without asking (a terminal run asks when it finds some)").action((opts) => runInit(program2, opts));
 }
 
 // src/commands/doctor.ts
-var import_node_fs75 = require("node:fs");
+var import_node_fs78 = require("node:fs");
 async function buildReport() {
   const prereqs = await checkPrereqs({ install: false });
   const state = await readSetupState();
@@ -42133,8 +42771,8 @@ async function buildReport() {
   const provenance = cliProvenance();
   const telemetry = await checkTelemetry();
   const artifacts = {
-    standard: (0, import_node_fs75.existsSync)(projectPath(STANDARD_FILE)),
-    verityMd: (0, import_node_fs75.existsSync)(projectPath(VERITY_MD_FILE))
+    standard: (0, import_node_fs78.existsSync)(projectPath(STANDARD_FILE)),
+    verityMd: (0, import_node_fs78.existsSync)(projectPath(VERITY_MD_FILE))
   };
   const next = [];
   for (const c of prereqs.checks) {
@@ -42173,6 +42811,11 @@ async function buildReport() {
   if (state?.telemetry === "deferred") {
     next.push('Telemetry was requested but needs a token \u2014 run "verity login", then "verity telemetry install".');
   }
+  if (telemetry.staleLocalKeys.length > 0) {
+    next.push(
+      `.claude/settings.local.json still holds ${telemetry.staleLocalKeys.length} old Verity telemetry key(s). Claude Code 2.1.282 and later ignores them there, so nothing is exported from them. Run "verity telemetry install" to export from this machine instead (it removes them), or "verity telemetry uninstall" to turn telemetry off and remove them.`
+    );
+  }
   const memory2 = {
     posture: memoryPosture(),
     trackedFiles: committedMemoryFiles().length,
@@ -42220,7 +42863,7 @@ async function buildReport() {
       noAnalysisMoment,
       versions
     },
-    telemetry: { enabled: telemetry.enabled, endpoint: telemetry.endpoint },
+    telemetry: { enabled: telemetry.enabled, endpoint: telemetry.endpoint, staleLocalKeys: telemetry.staleLocalKeys },
     artifacts,
     memory: memory2,
     trackedState,
@@ -42243,6 +42886,7 @@ function registerDoctorCommand(program2) {
     for (const c of report.prerequisites) {
       if (c.status === "ok") printInfo(`  ${c.label} ${c.detail} \u2713`);
       else printWarn(`  ${c.label}: ${c.detail}${c.remedy ? ` \u2014 ${c.remedy}` : ""}`);
+      if (c.unused) printInfo(`    ${c.unused}: not used (Verity runs its bundled copy)`);
     }
     printInfo("Setup:");
     printInfo(`  verity init: ${report.phases.init.done ? `done ${report.phases.init.completed_at ?? ""}`.trim() : "NOT run here"}`);
@@ -42264,7 +42908,9 @@ function registerDoctorCommand(program2) {
       if (cfg.formal_refused) printWarn(`    ${formalRefusalMessage(cfg.formal_refused)}`);
     }
     printInfo(`  Infra (intent/baseline/compact/session-end): ${[report.hooks.intent, report.hooks.baseline, report.hooks.compact, report.hooks.sessionEnd].filter(Boolean).length}/4`);
-    printInfo(`Telemetry: ${report.telemetry.enabled ? `enabled \u2192 ${report.telemetry.endpoint}` : "disabled"}`);
+    printInfo(
+      `Telemetry: ${report.telemetry.enabled ? `enabled \u2192 ${report.telemetry.endpoint} (every Claude Code session on this machine)` : "disabled"}`
+    );
     if (process.platform === "win32") printWarn(WINDOWS_STATIC_NOTE);
     else printInfo("Static analysis: Trivy (dependencies, malicious packages, secrets)");
     printInfo("Artifacts:");
@@ -42285,8 +42931,8 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs76 = require("node:fs");
-var import_node_path61 = require("node:path");
+var import_node_fs79 = require("node:fs");
+var import_node_path66 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
     const dryRun = opts.dryRun ?? false;
@@ -42295,11 +42941,11 @@ function registerUninstallCommand(program2) {
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
     for (const name2 of PROJECT_SKILL_NAMES) {
-      const dir = (0, import_node_path61.join)(skillsRoot, name2);
-      if ((0, import_node_fs76.existsSync)(dir)) {
+      const dir = (0, import_node_path66.join)(skillsRoot, name2);
+      if ((0, import_node_fs79.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name2}/`,
-          apply: () => (0, import_node_fs76.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs79.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -42313,24 +42959,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs76.existsSync)(verityDir)) {
+    if ((0, import_node_fs79.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs76.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs79.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs76.existsSync)(verityMd)) {
+      if ((0, import_node_fs79.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs76.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs79.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs76.existsSync)(path) && (0, import_node_fs76.statSync)(path).isDirectory() && (0, import_node_fs76.readdirSync)(path).length === 0) {
-        (0, import_node_fs76.rmdirSync)(path);
+      if ((0, import_node_fs79.existsSync)(path) && (0, import_node_fs79.statSync)(path).isDirectory() && (0, import_node_fs79.readdirSync)(path).length === 0) {
+        (0, import_node_fs79.rmdirSync)(path);
       }
     };
     actions.push({
@@ -42341,11 +42987,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path61.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs76.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path66.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs79.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs76.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs79.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -42564,8 +43210,8 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs77 = require("node:fs");
-var import_node_path62 = require("node:path");
+var import_node_fs80 = require("node:fs");
+var import_node_path67 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -42605,18 +43251,18 @@ function registerResetCommand(program2) {
       } catch {
       }
     }
-    const purged = purgeVerityDir((0, import_node_path62.basename)(CACHE_DIR), (name2) => name2.startsWith("pending-"));
+    const purged = purgeVerityDir((0, import_node_path67.basename)(CACHE_DIR), (name2) => name2.startsWith("pending-"));
     if (purged === null) printError(`Did not purge ${CACHE_DIR}: it is not a directory inside ${VERITY_DIR}.`);
     const stateDir2 = projectPath(VERITY_DIR);
     const filesToClear = [
-      (0, import_node_path62.basename)(INTENT_FILE),
-      (0, import_node_path62.basename)(HASH_FILE),
-      (0, import_node_path62.basename)(BASELINE_SHA_FILE),
+      (0, import_node_path67.basename)(INTENT_FILE),
+      (0, import_node_path67.basename)(HASH_FILE),
+      (0, import_node_path67.basename)(BASELINE_SHA_FILE),
       ".iteration-count",
       ".last-analysis"
     ];
     for (const name2 of filesToClear) {
-      if (lstatOrNull((0, import_node_path62.join)(stateDir2, name2)) && !replaceInRoot(stateDir2, name2, "")) {
+      if (lstatOrNull((0, import_node_path67.join)(stateDir2, name2)) && !replaceInRoot(stateDir2, name2, "")) {
         printError(`Did not clear ${VERITY_DIR}/${name2}: it is not a regular file inside ${VERITY_DIR}.`);
       }
     }
@@ -42631,29 +43277,29 @@ function registerResetCommand(program2) {
 }
 function lstatOrNull(path) {
   try {
-    return (0, import_node_fs77.lstatSync)(path);
+    return (0, import_node_fs80.lstatSync)(path);
   } catch {
     return null;
   }
 }
 function purgeVerityDir(child, select) {
   const verityDir = projectPath(VERITY_DIR);
-  const dir = (0, import_node_path62.join)(verityDir, child);
+  const dir = (0, import_node_path67.join)(verityDir, child);
   const parent = lstatOrNull(verityDir);
   const st = lstatOrNull(dir);
   if (!st) return 0;
   if (!parent || parent.isSymbolicLink() || !parent.isDirectory()) return null;
   if (st.isSymbolicLink() || !st.isDirectory()) return null;
   try {
-    if ((0, import_node_fs77.realpathSync)(dir) !== (0, import_node_path62.join)((0, import_node_fs77.realpathSync)(verityDir), child)) return null;
+    if ((0, import_node_fs80.realpathSync)(dir) !== (0, import_node_path67.join)((0, import_node_fs80.realpathSync)(verityDir), child)) return null;
   } catch {
     return null;
   }
   let removed = 0;
-  for (const entry of (0, import_node_fs77.readdirSync)(dir, { withFileTypes: true })) {
+  for (const entry of (0, import_node_fs80.readdirSync)(dir, { withFileTypes: true })) {
     if (entry.isDirectory() || !select(entry.name)) continue;
     try {
-      (0, import_node_fs77.unlinkSync)((0, import_node_path62.join)(dir, entry.name));
+      (0, import_node_fs80.unlinkSync)((0, import_node_path67.join)(dir, entry.name));
       removed++;
     } catch {
     }
@@ -42662,7 +43308,7 @@ function purgeVerityDir(child, select) {
 }
 
 // src/commands/reflect.ts
-var import_node_fs78 = require("node:fs");
+var import_node_fs81 = require("node:fs");
 
 // src/lib/reflection-globs.ts
 var MAX_GLOBS = 6;
@@ -42700,7 +43346,7 @@ async function writeNodeToDisk(args2) {
       { treePaths: listTrackedFiles(), recordBaseline: false }
     );
     if (written === 0) return false;
-    return (0, import_node_fs78.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
+    return (0, import_node_fs81.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
   } catch {
     return false;
   }
@@ -43137,9 +43783,15 @@ function registerRunCommand(program2) {
 }
 
 // src/commands/telemetry.ts
-var import_node_fs79 = require("node:fs");
+var import_node_fs82 = require("node:fs");
+var SCOPE = "every Claude Code session on this machine";
+function declineHeaders(why) {
+  process.stderr.write(`Verity telemetry is off here: ${why} Nothing is exported from this session.
+`);
+  process.exitCode = 1;
+}
 async function recordTelemetryChoice(choice) {
-  if (!(0, import_node_fs79.existsSync)(projectPath(SETUP_STATE_FILE))) return;
+  if (!(0, import_node_fs82.existsSync)(projectPath(SETUP_STATE_FILE))) return;
   try {
     if ((await readSetupState())?.telemetry === choice) return;
     await writeSetupState({ telemetry: choice });
@@ -43147,8 +43799,8 @@ async function recordTelemetryChoice(choice) {
   }
 }
 function registerTelemetryCommands(program2) {
-  const telemetry = program2.command("telemetry").description("Manage Claude Code OpenTelemetry export to Verity (cost & usage)");
-  telemetry.command("install").description("Enable Claude Code telemetry export to Verity (writes .claude/settings.local.json)").action(async () => {
+  const telemetry = program2.command("telemetry").description(`Manage Claude Code OpenTelemetry export to Verity (cost & usage) for ${SCOPE}`);
+  telemetry.command("install").description(`Export cost & usage to Verity from ${SCOPE} (writes your Claude Code user settings)`).action(async () => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
     if (!tokenResult.ok) {
@@ -43160,35 +43812,51 @@ function registerTelemetryCommands(program2) {
       printError(urlResult.error);
       process.exit(1);
     }
-    const pin = await checkTokenPin(tokenResult.data.token, urlResult.data);
-    if (!pin.attach && pin.reason === "unpinnable") {
-      printWarn("Your Verity credential does not record which service issued it, so this endpoint");
-      printWarn("  cannot be verified \u2014 a repository could point your telemetry elsewhere.");
-      printWarn('  Run "verity login" to re-issue the credential; Verity can check it after that.');
-    }
-    const result = await installTelemetry(urlResult.data);
+    const result = await installTelemetry(urlResult.data, { token: tokenResult.data.token });
     if (!result.ok) {
       printError(result.error);
       process.exit(1);
     }
     await recordTelemetryChoice("enabled");
     printInfo(`Telemetry enabled \u2192 ${result.data.endpoint}`);
-    printInfo(`  wrote ${SETTINGS_LOCAL_FILE2} (no token stored \u2014 resolved at runtime via otelHeadersHelper)`);
+    printInfo(`  scope: ${SCOPE}`);
+    printInfo(`  wrote ${displayPath(result.data.settingsPath)} (no token stored \u2014 resolved at runtime via otelHeadersHelper)`);
+    if (result.data.healedLocalKeys.length > 0) {
+      printInfo(`  removed ${result.data.healedLocalKeys.length} old telemetry key(s) from ${SETTINGS_LOCAL_FILE2}`);
+    }
+    printInfo("  only Verity projects send data. In other repositories Claude Code shows a startup");
+    printInfo('  warning that "verity telemetry headers" exited 1, and it exports nothing there.');
     printInfo("  takes effect on your NEXT Claude Code session; first metrics appear within ~60s of activity");
     printInfo("  view cost & usage at /usage");
   });
-  telemetry.command("headers").description("Print the OTLP Authorization header as JSON (used by Claude Code otelHeadersHelper)").action(async () => {
+  telemetry.command("headers").description("Print the OTLP headers as JSON for Claude Code otelHeadersHelper (exits 1 outside a Verity project)").action(async () => {
+    if (!isTelemetryProject()) {
+      declineHeaders("this directory is not in a Verity project.");
+      return;
+    }
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
-    if (tokenResult.ok) {
-      const remote = requestRemote();
-      printJsonCompact({
-        Authorization: `Bearer ${tokenResult.data.token}`,
-        ...remote ? { "X-Verity-Remote": remote } : {}
-      });
-    } else {
-      printJsonCompact({});
+    if (!tokenResult.ok) {
+      declineHeaders('this Verity project has no token on this machine. Run "verity login".');
+      return;
+    }
+    const endpoints = await sessionExportEndpoints();
+    if (endpoints.length === 0) {
+      declineHeaders("no OTLP endpoint is configured for this session.");
+      return;
+    }
+    for (const endpoint of endpoints) {
+      const refusal = await telemetryPinRefusal(tokenResult.data.token, endpoint);
+      if (refusal) {
+        declineHeaders(refusal);
+        return;
+      }
     }
+    const remote = requestRemote();
+    printJsonCompact({
+      Authorization: `Bearer ${tokenResult.data.token}`,
+      ...remote ? { "X-Verity-Remote": remote } : {}
+    });
   });
   telemetry.command("check").description("Show whether Claude Code telemetry export to Verity is enabled").option("--json", "Output status as JSON").action(async (opts) => {
     const status = await checkTelemetry();
@@ -43197,21 +43865,36 @@ function registerTelemetryCommands(program2) {
       return;
     }
     if (status.enabled) {
-      printInfo(`Telemetry: enabled \u2192 ${status.endpoint}`);
+      printInfo(`Telemetry: enabled \u2192 ${status.endpoint} (${SCOPE})`);
     } else {
       printWarn('Telemetry: disabled. Run "verity telemetry install" to enable cost & usage tracking.');
     }
+    if (status.staleLocalKeys.length > 0) {
+      printWarn(
+        `  ${SETTINGS_LOCAL_FILE2} still holds ${status.staleLocalKeys.length} old Verity telemetry key(s), which Claude Code ignores there. "verity telemetry install" removes them.`
+      );
+    }
   });
-  telemetry.command("uninstall").description("Disable Claude Code telemetry export to Verity").action(async () => {
+  telemetry.command("uninstall").description(`Stop the telemetry export to Verity from ${SCOPE}`).action(async () => {
     const result = await uninstallTelemetry();
     if (!result.ok) {
       printError(result.error);
       process.exit(1);
     }
     await recordTelemetryChoice("declined");
-    printInfo(
-      result.data.removed > 0 ? `Telemetry disabled (${result.data.removed} keys removed from ${SETTINGS_LOCAL_FILE2})` : "Telemetry was not enabled \u2014 nothing to remove."
-    );
+    const { removed, settingsPath, foreignEndpoint, healedLocalKeys } = result.data;
+    if (removed > 0) {
+      printInfo(`Telemetry disabled (${removed} keys removed from ${displayPath(settingsPath)})`);
+    } else if (foreignEndpoint) {
+      printInfo(
+        `${displayPath(settingsPath)} exports to another destination, so Verity left it unchanged.`
+      );
+    } else {
+      printInfo("Telemetry was not enabled \u2014 nothing to remove.");
+    }
+    if (healedLocalKeys.length > 0) {
+      printInfo(`  removed ${healedLocalKeys.length} old telemetry key(s) from ${SETTINGS_LOCAL_FILE2}`);
+    }
   });
 }
 
@@ -43253,8 +43936,8 @@ function renderSeatUsage(d, now = /* @__PURE__ */ new Date()) {
   lines.push(
     `Session ${utcHm(d.session.start)}\u2013${utcHm(d.session.resets_at)} (resets in ${inText(now, new Date(d.session.resets_at))}) \xB7 week from Mon ${utcDay2(d.week.start)} (resets Mon ${utcDay2(d.week.resets_at)}, 00:00 UTC)`
   );
-  if (!d.plan) lines.push("No plan is set for this org: counts only. Plan limits apply from Nov 2.");
-  else if (!d.enforced) lines.push("Limits are shown for information. They are not enforced before Nov 2.");
+  if (!d.plan) lines.push("No plan is set for this org: counts only.");
+  else if (!d.enforced) lines.push("Limits are shown for information. They are not enforced yet.");
   const me = d.members.find((m) => m.me);
   if (me) {
     const w = me.weeks[0];
@@ -43358,8 +44041,8 @@ function registerUsageCommand(program2) {
 }
 
 // src/commands/prove.ts
-var import_node_fs80 = require("node:fs");
-var import_node_path63 = require("node:path");
+var import_node_fs83 = require("node:fs");
+var import_node_path68 = require("node:path");
 
 // src/lib/prove/hint-pool.ts
 var STOP2 = /* @__PURE__ */ new Set([
@@ -43501,7 +44184,7 @@ function registerProveCommand(program2) {
       process.exit(2);
     }
     const limit = Math.max(1, Math.min(50, Number(opts.limit) || 10));
-    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path63.relative)(root, (0, import_node_path63.resolve)(p)) || ".") });
+    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path68.relative)(root, (0, import_node_path68.resolve)(p)) || ".") });
     if (opts.hint && paths.length === 0) {
       const hit = hintMatches(root, opts.hint);
       if (hit.files.length > 0) {
@@ -43555,7 +44238,7 @@ function registerProveCommand(program2) {
   });
   prove.command("check [model]").description("Elaborate a model (or every model) with the local Lean toolchain and report each property").option("--timeout <ms>", "Per-model timeout in ms", "120000").option("--json", "Machine-readable output").action((model, opts) => {
     const root = repoRoot();
-    if (!(0, import_node_fs80.existsSync)((0, import_node_path63.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs83.existsSync)((0, import_node_path68.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -43579,7 +44262,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
     const reports = [];
     for (const f of files) {
       const report = checkModel(tc, root, f, { timeoutMs: Math.max(1e3, Number(opts.timeout) || 12e4) });
-      report.file = (0, import_node_path63.relative)(root, f);
+      report.file = (0, import_node_path68.relative)(root, f);
       reports.push(report);
       try {
         writeResult(root, report);
@@ -43617,7 +44300,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
       printError("Not logged in \u2014 replays run on the Verity service. Run `verity login` first.");
       process.exit(2);
     }
-    if (!(0, import_node_fs80.existsSync)((0, import_node_path63.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs83.existsSync)((0, import_node_path68.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -43648,7 +44331,7 @@ ${report.error ?? ""}`);
       printInfo(opts.property ? `${model} ${opts.property} has no counterexample to replay` : `${model} has no counterexample to replay`);
       return;
     }
-    const modelSource = readRegularFileInRoot(root, (0, import_node_path63.relative)(root, file), 512 * 1024);
+    const modelSource = readRegularFileInRoot(root, (0, import_node_path68.relative)(root, file), 512 * 1024);
     if (!opts.json) printInfo(`replaying ${targets.length} counterexample(s) of ${model} in network-less containers (${Math.min(targets.length, REPLAY_CONCURRENCY)} at a time)\u2026`);
     const outcomes = await mapPool(targets, REPLAY_CONCURRENCY, async (p) => {
       const brief = buildReplayBrief(root, report, p, modelSource.ok ? modelSource.content : "");
@@ -43668,7 +44351,7 @@ ${report.error ?? ""}`);
   });
   prove.command("auto [files...]").description("The formal phase the pre-push guard runs: select one risky symbol among changed files, generate a model, check it, replay counterexamples (default files: the commits ahead of upstream)").option("--deadline <ms>", "Budget for the whole phase", "170000").option("--json", "Machine-readable output").action(async (paths, opts) => {
     const root = repoRoot();
-    let files = paths.map((p) => (0, import_node_path63.relative)(root, (0, import_node_path63.resolve)(p)));
+    let files = paths.map((p) => (0, import_node_path68.relative)(root, (0, import_node_path68.resolve)(p)));
     if (files.length === 0) {
       const ahead = runGitSync(root, ["diff", "--name-only", "@{upstream}...HEAD"]);
       const fallback = ahead.ok ? ahead : runGitSync(root, ["diff", "--name-only", "HEAD~1..HEAD"]);
@@ -43742,7 +44425,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
     let revise;
     if (opts.revise) {
       const existing = resolveModelFile(root, opts.revise);
-      const src = existing ? readRegularFileInRoot(root, (0, import_node_path63.relative)(root, existing), 64 * 1024) : null;
+      const src = existing ? readRegularFileInRoot(root, (0, import_node_path68.relative)(root, existing), 64 * 1024) : null;
       if (!src || !src.ok || !opts.note) {
         printError("--revise needs an existing model under Models/ and --note - with what the replay showed on stdin");
         process.exit(2);
@@ -43782,8 +44465,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("waive <file>").description("Dismiss the remembered formal finding(s) on a file for its current bytes \u2014 the accepted-risk path for a formal block").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action((file, opts) => {
     const root = repoRoot();
-    const rel0 = (0, import_node_path63.relative)(root, (0, import_node_path63.isAbsolute)(file) ? file : (0, import_node_path63.join)(root, file)).replace(/\\/g, "/");
-    const rel = rel0.startsWith("..") || (0, import_node_path63.isAbsolute)(rel0) ? null : rel0;
+    const rel0 = (0, import_node_path68.relative)(root, (0, import_node_path68.isAbsolute)(file) ? file : (0, import_node_path68.join)(root, file)).replace(/\\/g, "/");
+    const rel = rel0.startsWith("..") || (0, import_node_path68.isAbsolute)(rel0) ? null : rel0;
     if (!rel) {
       printError(`${file} is not inside this repository`);
       process.exit(2);
@@ -43799,8 +44482,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("hash <file>").description("Print the sha256 of a file, for a model header (Verity.model \u2026 sha256). Path is REPO-relative, as in the header").action((file) => {
     const root = repoRoot();
-    const rel = (0, import_node_path63.relative)(root, (0, import_node_path63.isAbsolute)(file) ? file : (0, import_node_path63.join)(root, file));
-    const digest = rel.startsWith("..") || (0, import_node_path63.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
+    const rel = (0, import_node_path68.relative)(root, (0, import_node_path68.isAbsolute)(file) ? file : (0, import_node_path68.join)(root, file));
+    const digest = rel.startsWith("..") || (0, import_node_path68.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
     if (!digest) {
       printError(`Cannot hash ${file}: it must be a regular file inside this repository (not a symlink)`);
       process.exit(2);
@@ -43834,10 +44517,10 @@ function refreshScaffold(root) {
 }
 
 // src/commands/lean.ts
-var import_node_fs81 = require("node:fs");
-var import_node_child_process22 = require("node:child_process");
-var import_node_os13 = require("node:os");
-var import_node_path64 = require("node:path");
+var import_node_fs84 = require("node:fs");
+var import_node_child_process24 = require("node:child_process");
+var import_node_os15 = require("node:os");
+var import_node_path69 = require("node:path");
 function registerLeanCommand(program2) {
   const lean = program2.command("lean").description("The Lean 4 toolchain formal verification needs (managed download, pinned by this CLI)");
   lean.command("status").option("--json", "Machine-readable output").description("Which toolchain would run, and whether it matches the pinned version").action((opts) => {
@@ -43845,7 +44528,7 @@ function registerLeanCommand(program2) {
     let version = null;
     if (tc) {
       try {
-        version = (0, import_node_child_process22.execFileSync)(tc.lake.replace(/lake(\.exe)?$/, "lean$1"), ["--version"], { env: tc.env, encoding: "utf-8", timeout: 1e4 }).trim();
+        version = (0, import_node_child_process24.execFileSync)(tc.lake.replace(/lake(\.exe)?$/, "lean$1"), ["--version"], { env: tc.env, encoding: "utf-8", timeout: 1e4 }).trim();
       } catch {
         version = null;
       }
@@ -43856,7 +44539,7 @@ function registerLeanCommand(program2) {
     const bg = readInstallState();
     const background = bg ? { ...bg, running: bg.state === "running" && installRunning() } : null;
     if (opts.json) {
-      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs81.existsSync)((0, import_node_path64.join)(managed, "bin")), asset: leanAssetName(), background });
+      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs84.existsSync)((0, import_node_path69.join)(managed, "bin")), asset: leanAssetName(), background });
       return;
     }
     printInfo(`pinned: ${LEAN_TOOLCHAIN}`);
@@ -43873,11 +44556,11 @@ function registerLeanCommand(program2) {
     if (opts.background) process.exit(await runBackgroundInstall());
     const asset = leanAssetName();
     if (!asset) {
-      printError(`no Lean release for ${(0, import_node_os13.platform)()}/${(0, import_node_os13.arch)()}`);
+      printError(`no Lean release for ${(0, import_node_os15.platform)()}/${(0, import_node_os15.arch)()}`);
       process.exit(2);
     }
     const dir = pinnedVersionDir();
-    if ((0, import_node_fs81.existsSync)((0, import_node_path64.join)(dir, "bin", "lake")) && !opts.force) {
+    if ((0, import_node_fs84.existsSync)((0, import_node_path69.join)(dir, "bin", "lake")) && !opts.force) {
       printInfo(`already installed at ${dir}`);
       return;
     }
@@ -43913,18 +44596,21 @@ function registerLeanCommand(program2) {
   });
   lean.command("remove").description("Delete the Verity-managed toolchain for the pinned version").action(() => {
     const dir = pinnedVersionDir();
-    if (!(0, import_node_fs81.existsSync)(dir)) {
+    if (!(0, import_node_fs84.existsSync)(dir)) {
       printInfo("nothing to remove");
       return;
     }
-    (0, import_node_fs81.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs84.rmSync)(dir, { recursive: true, force: true });
     printInfo(`removed ${dir}`);
   });
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.35.0-experimental.3211f79").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.35.0-experimental.3211f79");
+program.name("verity").description("CLI for Verity quality gate service").version("0.35.0-experimental.3a13a5e").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  const isTelemetryHelper = actionCommand.name() === "headers" && actionCommand.parent?.name() === "telemetry";
+  if (!isTelemetryHelper) {
+    installStderrLog(actionCommand.name(), process.argv.slice(2), "0.35.0-experimental.3a13a5e");
+  }
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();