@codacy/verity-cli 0.35.0-experimental.3211f79 → 0.35.0-experimental.7c5e75b

package/bin/verity.js

@@ -10192,14 +10192,14 @@ var require_public_api = __commonJS2({
       const { lineCounter: lineCounter2, prettyErrors } = parseOptions(options);
       const parser$1 = new parser.Parser(lineCounter2?.addNewLine);
       const composer$1 = new composer.Composer(options);
-      const docs2 = Array.from(composer$1.compose(parser$1.parse(source2)));
+      const docs = Array.from(composer$1.compose(parser$1.parse(source2)));
       if (prettyErrors && lineCounter2)
-        for (const doc of docs2) {
+        for (const doc of docs) {
           doc.errors.forEach(errors.prettifyError(source2, lineCounter2));
           doc.warnings.forEach(errors.prettifyError(source2, lineCounter2));
         }
-      if (docs2.length > 0)
-        return docs2;
+      if (docs.length > 0)
+        return docs;
       return Object.assign([], { empty: true }, composer$1.streamInfo());
     }
     function parseDocument(source2, options = {}) {
@@ -24520,36 +24520,8 @@ function collectRiskSignals(root, opts = {}) {
   return out2.slice(0, opts.limit ?? 10);
 }
 
-// src/lib/repo-profile.ts
-var PROFILE_SCHEMA = "repo-profile/v1";
-var PROFILE_FILE = ".verity/repo-profile.json";
-var LIMITS = {
-  languages: 20,
-  frameworks: 50,
-  dependencies: 300,
-  folders: 300,
-  commits: 500,
-  // The server allows 20; 10 keeps a full profile well under its body cap.
-  pathsPerCommit: 10,
-  docs: 8,
-  // A long doc is cut by section (fitDoc), so these bound how much of the
-  // team's conventions reach the writer, not where a doc is cut.
-  docBytes: 12288,
-  nestedDocBytes: 6144,
-  contributorDocBytes: 4096,
-  docsTotalBytes: 32768,
-  subject: 120,
-  path: 200,
-  name: 100
-};
-var WINDOW_DAYS = 180;
-var MAX_PROFILE_BYTES = 120 * 1024;
-var ROOT_DOCS = ["CLAUDE.md", "AGENTS.md", ".cursorrules", ".github/copilot-instructions.md"];
-var CONTRIBUTOR_DOCS = ["CONTRIBUTING.md", "ARCHITECTURE.md"];
-var README = "README.md";
-var README_BYTES = 3072;
-var NESTED_DOC = /^(?:[^./][^/]*\/){1,4}(?:AGENTS|CLAUDE)\.md$/;
-var NOT_THE_TEAMS = /(?:^|\/)(?:examples?|samples?|templates?|[\w-]*-template|fixtures?|tests?|__tests__|vendor|third_party|node_modules)\//i;
+// src/lib/profile-text.ts
+var PATH_MAX = 200;
 var SECRET_PATTERNS = [
   /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/g,
   /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
@@ -24576,63 +24548,77 @@ function redact(text2) {
 function oneLine(text2, max) {
   return redact(text2.replace(/[\r\n\t]+/g, " ")).trim().slice(0, max);
 }
-var DEP = /^[A-Za-z0-9@][A-Za-z0-9@._/:+-]*$/;
-function dependencies(root, files) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const name2 of declaredDependencies(root, files)) {
-    if (name2.length <= LIMITS.name && DEP.test(name2)) seen.add(name2);
-    if (seen.size >= LIMITS.dependencies) break;
-  }
-  return [...seen];
-}
 function safePath(p) {
-  if (!p || p.length > LIMITS.path || p.startsWith("/") || p.includes("\\")) return null;
+  if (!p || p.length > PATH_MAX || p.startsWith("/") || p.includes("\\")) return null;
   if (p.split("/").some((seg) => seg === "" || seg === "..")) return null;
   if (/[\u0000-\u001f\u007f]/.test(p)) return null;
   return p;
 }
-function tree(files) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const file of files) {
-    const parts2 = file.split("/");
-    for (let depth = 1; depth <= Math.min(3, parts2.length - 1); depth++) {
-      const folder = parts2.slice(0, depth).join("/");
-      counts.set(folder, (counts.get(folder) ?? 0) + 1);
-    }
+
+// src/lib/profile-docs.ts
+var DOC_LIMITS = {
+  docs: 8,
+  // A long doc is cut by section (fitDoc), so these bound how much of the
+  // team's conventions reach the writer, not where a doc is cut.
+  docBytes: 12288,
+  nestedDocBytes: 6144,
+  contributorDocBytes: 4096,
+  docsTotalBytes: 32768
+};
+var ROOT_DOCS = ["CLAUDE.md", "AGENTS.md", ".cursorrules", ".github/copilot-instructions.md"];
+var CONTRIBUTOR_DOCS = ["CONTRIBUTING.md", "ARCHITECTURE.md"];
+var README = "README.md";
+var README_BYTES = 3072;
+var NESTED_DOC = /^(?:[^./][^/]*\/){1,4}(?:AGENTS|CLAUDE)\.md$/;
+var NOT_THE_TEAMS = /(?:^|\/)(?:examples?|samples?|templates?|[\w-]*-template|fixtures?|tests?|__tests__|vendor|third_party|node_modules)\//i;
+var MANAGED_START = "<!-- verity-memory:start -->";
+var MANAGED_END = "<!-- verity-memory:end -->";
+var PRESERVE_START2 = "<!-- verity-memory:preserve -->";
+var PRESERVE_END2 = "<!-- /verity-memory:preserve -->";
+var FENCE_OPEN = /^[ \t]*(?:(?:[-*+]|\d+[.)])[ \t]+)*(`{3,}|~{3,})/;
+var FENCE_CLOSE = /^[ \t]*(`{3,}|~{3,})[ \t]*$/;
+var QUOTE = /^(?:[ \t]*>)+ ?/;
+var LIST_ITEM = /^[ \t]*(?:[-*+]|\d+[.)])[ \t]/;
+function indentWidth(line2) {
+  let w = 0;
+  for (const ch of line2) {
+    if (ch === " ") w++;
+    else if (ch === "	") w += 4;
+    else break;
   }
-  return [...counts.entries()].filter(([path]) => safePath(path) !== null).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, LIMITS.folders).map(([path, n2]) => ({ path, files: n2 })).sort((a, b) => a.path.localeCompare(b.path));
+  return w;
 }
-function history(root) {
-  const res = runGitSync(root, [
-    "log",
-    `--since=${WINDOW_DAYS} days ago`,
-    "-n",
-    String(LIMITS.commits),
-    "--no-merges",
-    "--format=@@%x1f%s",
-    "--name-only",
-    "--"
-  ], { timeoutMs: 3e4 });
-  const commits = [];
-  if (!res.ok) return { window_days: WINDOW_DAYS, commits };
-  let current = null;
-  for (const line2 of res.stdout.split("\n")) {
-    if (line2.startsWith("@@")) {
-      if (current && current.subject) commits.push(current);
-      const raw = line2.slice(3);
-      current = { subject: oneLine(raw, LIMITS.subject), paths: [], fix: FIX_SUBJECT.test(raw) };
+function stripCode(text2) {
+  const out2 = [];
+  let fence = null;
+  let underItem = false;
+  for (const line2 of text2.split("\n")) {
+    const body2 = line2.replace(QUOTE, "");
+    if (fence) {
+      const close = FENCE_CLOSE.exec(body2);
+      if (close && close[1][0] === fence[0] && close[1].length >= fence.length) fence = null;
       continue;
     }
-    const path = safePath(line2.trim());
-    if (current && path && current.paths.length < LIMITS.pathsPerCommit) current.paths.push(path);
+    const open = FENCE_OPEN.exec(body2);
+    if (open) {
+      fence = open[1];
+      underItem = false;
+      continue;
+    }
+    if (body2.trim() === "") {
+      out2.push(line2);
+      underItem = false;
+      continue;
+    }
+    if (indentWidth(body2) >= 4) {
+      if (underItem && LIST_ITEM.test(body2)) out2.push(line2);
+      continue;
+    }
+    out2.push(line2);
+    underItem = LIST_ITEM.test(body2);
   }
-  if (current && current.subject) commits.push(current);
-  return { window_days: WINDOW_DAYS, commits: commits.slice(0, LIMITS.commits) };
+  return out2.join("\n");
 }
-var MANAGED_START = "<!-- verity-memory:start -->";
-var MANAGED_END = "<!-- verity-memory:end -->";
-var PRESERVE_START2 = "<!-- verity-memory:preserve -->";
-var PRESERVE_END2 = "<!-- /verity-memory:preserve -->";
 function docText(raw) {
   let text2 = raw;
   const start2 = text2.indexOf(MANAGED_START);
@@ -24644,7 +24630,7 @@ function docText(raw) {
     const kept = ps >= 0 && pe > ps ? block.slice(ps + PRESERVE_START2.length, pe) : "";
     text2 = text2.slice(0, start2) + kept + text2.slice(end + MANAGED_END.length);
   }
-  text2 = text2.replace(/^(```|~~~)[^\n]*\n[\s\S]*?^\1[^\n]*$/gm, "").replace(/<!--[\s\S]*?-->/g, "").replace(/\n{3,}/g, "\n\n");
+  text2 = stripCode(text2.replace(/<!--[\s\S]*?-->/g, "").replace(/<!--[\s\S]*$/, "")).replace(/\n{3,}/g, "\n\n");
   return redact(text2).trim();
 }
 var RULE_TITLE = /convention|pattern|rule|gotcha|footgun|pitfall|best practice|guideline|principle|standard|style|architecture|design|security|database|migration|schema|\bapi\b|error|state|naming|structure|i18n|internationali[sz]|translation|important|critical|warning|do not|don't|never|must|avoid/i;
@@ -24677,18 +24663,23 @@ function sectionRank(s) {
   return title * 1e3 + Math.min(999, s.lines.filter((l) => NORMATIVE.test(l)).length);
 }
 function fitDoc(text2, budget) {
-  if (text2.length <= budget) return text2;
+  if (utf8(text2) <= budget) return text2;
   const all = docSections(text2);
-  const size = (heading, lines) => (heading ? heading.length + 1 : 0) + lines.join("\n").length + 1;
+  const lineBytes = (line2) => utf8(line2) + 1;
+  const GAP = lineBytes("\u2026");
   const chosen = /* @__PURE__ */ new Map();
+  const headingsCounted = /* @__PURE__ */ new Set();
   let used2 = 0;
   for (const s of [...all].sort((a, b) => sectionRank(b) - sectionRank(a) || a.order - b.order)) {
     if (!s.lines.some((l) => l.trim())) continue;
+    const parents = s.parents.filter((p) => !headingsCounted.has(p) && !chosen.has(p));
+    const parentBytes = parents.reduce((n2, p) => n2 + lineBytes(all[p].heading ?? ""), 0);
     const lean = s.lines.filter((l) => NORMATIVE.test(l));
     for (const lines of [s.lines, lean]) {
-      const n2 = size(s.heading, lines);
+      const n2 = (s.heading ? lineBytes(s.heading) : 0) + lines.reduce((m, l) => m + lineBytes(l), 0) + parentBytes + GAP;
       if (lines.length && used2 + n2 <= budget) {
         chosen.set(s.order, lines);
+        for (const p of parents) headingsCounted.add(p);
         used2 += n2;
         break;
       }
@@ -24712,23 +24703,38 @@ function fitDoc(text2, budget) {
     if (s.heading) out2.push(s.heading);
     out2.push(...lines);
   }
-  return out2.join("\n").replace(/\n{3,}/g, "\n\n").trim().slice(0, budget);
+  return cutToBytes(out2.join("\n").replace(/\n{3,}/g, "\n\n").trim(), budget);
+}
+function utf8(text2) {
+  return Buffer.byteLength(text2, "utf8");
+}
+function cutToBytes(text2, max) {
+  if (utf8(text2) <= max) return text2;
+  let out2 = "";
+  let n2 = 0;
+  for (const ch of text2) {
+    const b = utf8(ch);
+    if (n2 + b > max) break;
+    out2 += ch;
+    n2 += b;
+  }
+  return out2;
 }
 var normal = (line2) => line2.trim().toLowerCase().replace(/\s+/g, " ");
-function docs(root, files) {
+function readDocs(root, files) {
   const nested = files.filter((f) => NESTED_DOC.test(f) && !NOT_THE_TEAMS.test(f) && safePath(f) !== null).sort((a, b) => a.split("/").length - b.split("/").length || a.localeCompare(b));
   const plan = [
-    ...ROOT_DOCS.map((n2) => [n2, LIMITS.docBytes]),
-    ...nested.map((n2) => [n2, LIMITS.nestedDocBytes]),
-    ...CONTRIBUTOR_DOCS.map((n2) => [n2, LIMITS.contributorDocBytes]),
+    ...ROOT_DOCS.map((n2) => [n2, DOC_LIMITS.docBytes]),
+    ...nested.map((n2) => [n2, DOC_LIMITS.nestedDocBytes]),
+    ...CONTRIBUTOR_DOCS.map((n2) => [n2, DOC_LIMITS.contributorDocBytes]),
     [README, README_BYTES]
   ];
   const out2 = [];
   const sent = /* @__PURE__ */ new Set();
   let total = 0;
   for (const [name2, cap2] of plan) {
-    const room = Math.min(cap2, LIMITS.docsTotalBytes - total);
-    if (out2.length >= LIMITS.docs || room < 200) break;
+    const room = Math.min(cap2, DOC_LIMITS.docsTotalBytes - total);
+    if (out2.length >= DOC_LIMITS.docs || room < 200) break;
     if (name2 === README && out2.some((d) => ROOT_DOCS.includes(d.name))) continue;
     const read2 = readRegularFileInRoot(root, name2, 256 * 1024);
     if (!read2.ok) continue;
@@ -24736,13 +24742,78 @@ function docs(root, files) {
     const text2 = fitDoc(fresh, room);
     if (!text2) continue;
     for (const l of text2.split("\n")) if (normal(l).length >= 25) sent.add(normal(l));
-    total += text2.length;
+    total += utf8(text2);
     out2.push({ name: name2, text: text2 });
   }
   return out2;
 }
+
+// src/lib/repo-profile.ts
+var PROFILE_SCHEMA = "repo-profile/v1";
+var PROFILE_FILE = ".verity/repo-profile.json";
+var LIMITS = {
+  languages: 20,
+  frameworks: 50,
+  dependencies: 300,
+  folders: 300,
+  commits: 500,
+  // The server allows 20; 10 keeps a full profile well under its body cap.
+  pathsPerCommit: 10,
+  subject: 120,
+  path: 200,
+  name: 100
+};
+var WINDOW_DAYS = 180;
+var MAX_PROFILE_BYTES = 120 * 1024;
+var DEP = /^[A-Za-z0-9@][A-Za-z0-9@._/:+-]*$/;
+function dependencies(root, files) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const name2 of declaredDependencies(root, files)) {
+    if (name2.length <= LIMITS.name && DEP.test(name2)) seen.add(name2);
+    if (seen.size >= LIMITS.dependencies) break;
+  }
+  return [...seen];
+}
+function tree(files) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const file of files) {
+    const parts2 = file.split("/");
+    for (let depth = 1; depth <= Math.min(3, parts2.length - 1); depth++) {
+      const folder = parts2.slice(0, depth).join("/");
+      counts.set(folder, (counts.get(folder) ?? 0) + 1);
+    }
+  }
+  return [...counts.entries()].filter(([path]) => safePath(path) !== null).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, LIMITS.folders).map(([path, n2]) => ({ path, files: n2 })).sort((a, b) => a.path.localeCompare(b.path));
+}
+function history(root) {
+  const res = runGitSync(root, [
+    "log",
+    `--since=${WINDOW_DAYS} days ago`,
+    "-n",
+    String(LIMITS.commits),
+    "--no-merges",
+    "--format=@@%x1f%s",
+    "--name-only",
+    "--"
+  ], { timeoutMs: 3e4 });
+  const commits = [];
+  if (!res.ok) return { window_days: WINDOW_DAYS, commits };
+  let current = null;
+  for (const line2 of res.stdout.split("\n")) {
+    if (line2.startsWith("@@")) {
+      if (current && current.subject) commits.push(current);
+      const raw = line2.slice(3);
+      current = { subject: oneLine(raw, LIMITS.subject), paths: [], fix: FIX_SUBJECT.test(raw) };
+      continue;
+    }
+    const path = safePath(line2.trim());
+    if (current && path && current.paths.length < LIMITS.pathsPerCommit) current.paths.push(path);
+  }
+  if (current && current.subject) commits.push(current);
+  return { window_days: WINDOW_DAYS, commits: commits.slice(0, LIMITS.commits) };
+}
 function fitProfile(p) {
-  const size = () => JSON.stringify(p).length;
+  const size = () => Buffer.byteLength(JSON.stringify(p), "utf8");
   if (size() <= MAX_PROFILE_BYTES) return p;
   const commits = p.history.commits;
   for (const wantFix of [false, true]) {
@@ -24750,6 +24821,9 @@ function fitProfile(p) {
       if (commits[i2].fix === wantFix) commits.splice(i2, 1);
     }
   }
+  while (size() > MAX_PROFILE_BYTES && p.docs.length > 0) p.docs.pop();
+  while (size() > MAX_PROFILE_BYTES && p.tree.length > 0) p.tree.pop();
+  while (size() > MAX_PROFILE_BYTES && p.dependencies.length > 0) p.dependencies.pop();
   return p;
 }
 function buildRepoProfile(root = repoRoot()) {
@@ -24771,7 +24845,7 @@ function buildRepoProfile(root = repoRoot()) {
     dependencies: dependencies(root, files),
     tree: tree(files),
     history: history(root),
-    docs: docs(root, files)
+    docs: readDocs(root, files)
   });
 }
 function describeProfile(p) {
@@ -25163,11 +25237,11 @@ async function currentReviewMoments(pluginMode) {
   const cfg = readProjectConfig();
   const hooks = await checkAllVerityHooks();
   const turn = cfg.turn_review !== "off" && (pluginMode || hooks.stop);
-  const git2 = pluginMode ? cfg.git_moments : hooks.guard ? hooks.guardOn.length > 0 ? hooks.guardOn : cfg.git_moments : [];
+  const git3 = pluginMode ? cfg.git_moments : hooks.guard ? hooks.guardOn.length > 0 ? hooks.guardOn : cfg.git_moments : [];
   return [
     ...turn ? ["stop"] : [],
-    ...git2.includes("commit") ? ["pre-commit"] : [],
-    ...git2.includes("push") ? ["pre-push"] : []
+    ...git3.includes("commit") ? ["pre-commit"] : [],
+    ...git3.includes("push") ? ["pre-push"] : []
   ];
 }
 async function setReviewMoments(moments, pluginMode) {
@@ -26120,7 +26194,7 @@ function createRun(opts, globals) {
 
 // src/commands/analyze/index.ts
 var import_node_fs55 = require("node:fs");
-var import_node_path42 = require("node:path");
+var import_node_path43 = require("node:path");
 
 // src/lib/repo-context.ts
 var import_node_child_process11 = require("node:child_process");
@@ -28244,7 +28318,7 @@ function channelSilence(input) {
 // src/lib/cli-version.ts
 function cliVersion() {
   try {
-    return true ? "0.35.0-experimental.3211f79" : "dev";
+    return true ? "0.35.0-experimental.7c5e75b" : "dev";
   } catch {
     return "dev";
   }
@@ -28285,6 +28359,8 @@ async function sendSkipBeacon(ctx, reason) {
 
 // src/lib/static-analysis.ts
 var import_node_child_process12 = require("node:child_process");
+var import_node_module = require("node:module");
+var import_node_path34 = require("node:path");
 var import_node_fs44 = require("node:fs");
 
 // src/lib/static-config.ts
@@ -28331,19 +28407,44 @@ var SEVERITY_ORDER = {
   Low: 3
 };
 function isCodacyAvailable() {
-  return codacyAnalysisPath() !== null;
+  return resolveAnalyzer() !== null;
+}
+var NO_BUNDLED_ANALYZER_ENV = "VERITY_NO_BUNDLED_ANALYZER";
+function bundledAnalyzer(from = __filename) {
+  try {
+    const pkgPath = (0, import_node_module.createRequire)(from).resolve("@codacy/analysis-cli/package.json");
+    const pkg = JSON.parse((0, import_node_fs44.readFileSync)(pkgPath, "utf-8"));
+    const bin = typeof pkg.bin === "string" ? pkg.bin : pkg.bin?.["codacy-analysis"];
+    if (typeof bin !== "string" || bin === "") return null;
+    const entry = (0, import_node_path34.join)((0, import_node_path34.dirname)(pkgPath), bin);
+    if (!(0, import_node_fs44.statSync)(entry).isFile()) return null;
+    return { path: entry, version: typeof pkg.version === "string" ? pkg.version : "unknown" };
+  } catch {
+    return null;
+  }
 }
-function codacyAnalysisPath() {
-  return whichSync("codacy-analysis");
+function resolveAnalyzer(opts = {}) {
+  const env = opts.env ?? process.env;
+  if (env[NO_BUNDLED_ANALYZER_ENV] !== "1") {
+    const bundled = (opts.bundled ?? bundledAnalyzer)();
+    if (bundled) return { source: "bundled", path: bundled.path, version: bundled.version };
+  }
+  const onPath = (opts.onPath ?? (() => whichSync("codacy-analysis")))();
+  return onPath ? { source: "path", path: onPath } : null;
+}
+function analyzerCommand(analyzer, argv, execPath = process.execPath) {
+  if (analyzer.source === "bundled") return { command: execPath, args: [analyzer.path, ...argv] };
+  return { command: analyzer.path, args: argv };
 }
 function startTrivyPrewarm(opts = {}) {
   if ((opts.platform ?? process.platform) === "win32") return false;
   if ((opts.env ?? process.env).CI) return false;
-  const analyzer = codacyAnalysisPath();
+  const analyzer = (opts.resolve ?? resolveAnalyzer)();
   const config = ensureStaticConfig();
   if (!analyzer || !config) return false;
   try {
-    const child = (opts.run ?? import_node_child_process12.spawn)(analyzer, buildAnalyzerArgv([STATIC_ANALYSIS_CONFIG_FILE], config), {
+    const { command, args: args2 } = analyzerCommand(analyzer, buildAnalyzerArgv([STATIC_ANALYSIS_CONFIG_FILE], config));
+    const child = (opts.run ?? import_node_child_process12.spawn)(command, args2, {
       cwd: repoRoot(),
       detached: true,
       stdio: "ignore"
@@ -28390,7 +28491,7 @@ function runCodacyAnalysisIfAvailable(files) {
   if (!isCodacyAvailable()) {
     return withFailure(
       "analyzer_unavailable",
-      "@codacy/analysis-cli was not found on PATH \u2014 no static analysis ran"
+      "@codacy/analysis-cli was not bundled with this Verity install and was not found on PATH \u2014 no static analysis ran. Reinstall Verity: npm install -g @codacy/verity-cli"
     );
   }
   return runCodacyAnalysis(files);
@@ -28413,8 +28514,10 @@ function runCodacyAnalysis(files) {
       "Could not write .verity/static-analysis.json \u2014 no static analysis ran"
     );
   }
-  const analyzer = codacyAnalysisPath() ?? "codacy-analysis";
-  const proc = (0, import_node_child_process12.spawnSync)(analyzer, buildAnalyzerArgv(existingFiles, configPath), {
+  const argv = buildAnalyzerArgv(existingFiles, configPath);
+  const resolved = resolveAnalyzer();
+  const { command, args: args2 } = resolved ? analyzerCommand(resolved, argv) : { command: "codacy-analysis", args: argv };
+  const proc = (0, import_node_child_process12.spawnSync)(command, args2, {
     encoding: "utf-8",
     maxBuffer: 10 * 1024 * 1024
   });
@@ -28678,7 +28781,7 @@ async function scope(run4) {
 
 // src/lib/specs.ts
 var import_node_fs45 = require("node:fs");
-var import_node_path34 = require("node:path");
+var import_node_path35 = require("node:path");
 var SPEC_CANDIDATES = [
   "CLAUDE.md",
   "AGENTS.md",
@@ -28700,7 +28803,7 @@ var UNCONSULTED_TOTAL_BYTES = 30720;
 function readSpecFiles(specsOpt, root) {
   const out2 = [];
   for (const raw of specsOpt.split(",").map((f) => f.trim()).filter(Boolean)) {
-    const candidate = (0, import_node_path34.isAbsolute)(raw) ? (0, import_node_path34.relative)(root, raw) : raw;
+    const candidate = (0, import_node_path35.isAbsolute)(raw) ? (0, import_node_path35.relative)(root, raw) : raw;
     const content = readFileInside(root, candidate, MAX_EXPLICIT_SPEC_FILE_BYTES);
     if (content === null) continue;
     out2.push({ path: raw, content });
@@ -28759,7 +28862,7 @@ function findMdFiles(dir, maxDepth, depth = 0) {
   try {
     const entries = (0, import_node_fs45.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_node_path34.join)(dir, entry.name);
+      const fullPath = (0, import_node_path35.join)(dir, entry.name);
       if (entry.isFile() && entry.name.endsWith(".md")) {
         result.push(fullPath);
       } else if (entry.isDirectory() && depth < maxDepth - 1) {
@@ -28772,10 +28875,10 @@ function findMdFiles(dir, maxDepth, depth = 0) {
 }
 function discoverPlans() {
   const home = process.env.HOME ?? "";
-  const homePlansDir = (0, import_node_path34.join)(home, ".claude", "plans");
+  const homePlansDir = (0, import_node_path35.join)(home, ".claude", "plans");
   const sources = [];
   if (isRealDirectoryChain(process.cwd(), [".claude", "plans"])) {
-    sources.push({ root: process.cwd(), prefix: (0, import_node_path34.join)(".claude", "plans") });
+    sources.push({ root: process.cwd(), prefix: (0, import_node_path35.join)(".claude", "plans") });
   }
   if (home && (0, import_node_fs45.existsSync)(homePlansDir)) sources.push({ root: homePlansDir, prefix: "" });
   const candidates2 = [];
@@ -28783,14 +28886,14 @@ function discoverPlans() {
   for (const source2 of sources) {
     let names2;
     try {
-      names2 = (0, import_node_fs45.readdirSync)(source2.prefix ? (0, import_node_path34.join)(source2.root, source2.prefix) : source2.root);
+      names2 = (0, import_node_fs45.readdirSync)(source2.prefix ? (0, import_node_path35.join)(source2.root, source2.prefix) : source2.root);
     } catch {
       continue;
     }
     for (const f of names2) {
       if (!f.endsWith(".md") || seen.has(f)) continue;
       seen.add(f);
-      const relPath = source2.prefix ? (0, import_node_path34.join)(source2.prefix, f) : f;
+      const relPath = source2.prefix ? (0, import_node_path35.join)(source2.prefix, f) : f;
       const stat3 = statRegularInRoot(source2.root, relPath);
       if (!stat3.ok) continue;
       candidates2.push({ name: f, root: source2.root, relPath, mtime: stat3.mtimeMs, size: stat3.size });
@@ -28808,7 +28911,7 @@ function discoverPlans() {
 function isRealDirectoryChain(root, parts2) {
   let current = root;
   for (const part of parts2) {
-    current = (0, import_node_path34.join)(current, part);
+    current = (0, import_node_path35.join)(current, part);
     try {
       if (!(0, import_node_fs45.lstatSync)(current).isDirectory()) return false;
     } catch {
@@ -29012,7 +29115,7 @@ async function mode(run4) {
 
 // src/lib/fold.ts
 var import_node_fs46 = require("node:fs");
-var import_node_path35 = require("node:path");
+var import_node_path36 = require("node:path");
 var KNOWN_RECORD_TYPES = /* @__PURE__ */ new Set([
   "user",
   "assistant",
@@ -29244,9 +29347,9 @@ function fold(transcriptPath, opts = {}) {
     return result;
   }
   try {
-    const sidecarDir = (0, import_node_path35.join)(
-      (0, import_node_path35.dirname)(transcriptPath),
-      (0, import_node_path35.basename)(transcriptPath).replace(/\.jsonl$/, ""),
+    const sidecarDir = (0, import_node_path36.join)(
+      (0, import_node_path36.dirname)(transcriptPath),
+      (0, import_node_path36.basename)(transcriptPath).replace(/\.jsonl$/, ""),
       "subagents"
     );
     if ((0, import_node_fs46.existsSync)(sidecarDir)) {
@@ -29256,7 +29359,7 @@ function fold(transcriptPath, opts = {}) {
       const walk2 = (d, depth) => {
         if (depth > 4) return;
         for (const e of (0, import_node_fs46.readdirSync)(d, { withFileTypes: true })) {
-          const p = (0, import_node_path35.join)(d, e.name);
+          const p = (0, import_node_path36.join)(d, e.name);
           if (e.isDirectory()) {
             walk2(p, depth + 1);
           } else if (e.name.startsWith("agent-") && e.name.endsWith(".jsonl")) {
@@ -29629,7 +29732,7 @@ async function evidence(run4) {
 
 // src/lib/cache-cleanup.ts
 var import_node_fs47 = require("node:fs");
-var import_node_path36 = require("node:path");
+var import_node_path37 = require("node:path");
 var CACHE_TTL_DAYS = 7;
 function pruneStaleCache() {
   try {
@@ -29637,7 +29740,7 @@ function pruneStaleCache() {
     const cutoff = Date.now() - CACHE_TTL_DAYS * 24 * 3600 * 1e3;
     for (const entry of (0, import_node_fs47.readdirSync)(dir)) {
       if (!entry.startsWith("pending-")) continue;
-      const path = (0, import_node_path36.join)(dir, entry);
+      const path = (0, import_node_path37.join)(dir, entry);
       try {
         const stat3 = (0, import_node_fs47.statSync)(path);
         if (stat3.mtimeMs < cutoff) {
@@ -29872,7 +29975,7 @@ function languageOf2(path) {
 
 // src/lib/code/runtime.ts
 var import_node_fs49 = require("node:fs");
-var import_node_path37 = require("node:path");
+var import_node_path38 = require("node:path");
 var import_web_tree_sitter2 = __toESM2(require_web_tree_sitter2());
 
 // src/lib/code/grammars.json
@@ -29932,12 +30035,12 @@ var grammars_default = {
 var MAX_PARSE_BYTES = 512 * 1024;
 function grammarCandidates(file, pkg, env = process.env) {
   return [
-    ...env.VERITY_GRAMMAR_DIR ? [(0, import_node_path37.join)(env.VERITY_GRAMMAR_DIR, file)] : [],
-    (0, import_node_path37.join)(__dirname, "..", "data", "grammars", file),
+    ...env.VERITY_GRAMMAR_DIR ? [(0, import_node_path38.join)(env.VERITY_GRAMMAR_DIR, file)] : [],
+    (0, import_node_path38.join)(__dirname, "..", "data", "grammars", file),
     // bundled: cli/bin/ → cli/data/grammars/
-    (0, import_node_path37.join)(__dirname, "..", "..", "..", "data", "grammars", file),
+    (0, import_node_path38.join)(__dirname, "..", "..", "..", "data", "grammars", file),
     // tsx: cli/src/lib/code/ → cli/data/grammars/
-    (0, import_node_path37.join)(__dirname, "..", "..", "..", "node_modules", pkg, file)
+    (0, import_node_path38.join)(__dirname, "..", "..", "..", "node_modules", pkg, file)
     // tsx, before a build: the pinned devDependency
   ];
 }
@@ -30673,14 +30776,14 @@ function accessMap(input) {
   const targetWrites = (r) => effects.some((e) => e.op === "write" && sameResource(r, e.resource));
   const excluded = /* @__PURE__ */ new Set([target, ...helpers, ...fileFns.filter((f) => inside(f, target))]);
   const accessors = [];
-  const consider = (fns, p, sameFile, fileState) => {
+  const consider = (fns, p, sameFile2, fileState) => {
     for (const f of fns) {
-      if (sameFile && excluded.has(f)) continue;
-      if (sameFile && inside(target, f)) continue;
-      const theirs = effectsWithHelpers(f, fns, lang, 2, fileState).filter((e) => !(sameFile && e.via.includes(target.name)) && searchable.some((r) => sameResource(r, e.resource) && (e.op === "write" || targetWrites(r))));
+      if (sameFile2 && excluded.has(f)) continue;
+      if (sameFile2 && inside(target, f)) continue;
+      const theirs = effectsWithHelpers(f, fns, lang, 2, fileState).filter((e) => !(sameFile2 && e.via.includes(target.name)) && searchable.some((r) => sameResource(r, e.resource) && (e.op === "write" || targetWrites(r))));
       if (theirs.length === 0) continue;
-      if (sameFile && [...helperNames].includes(f.name)) continue;
-      accessors.push({ fn: f, effects: theirs, writes: theirs.some((e) => e.op === "write"), sameFile });
+      if (sameFile2 && [...helperNames].includes(f.name)) continue;
+      accessors.push({ fn: f, effects: theirs, writes: theirs.some((e) => e.op === "write"), sameFile: sameFile2 });
     }
   };
   consider(fileFns, path, true, state);
@@ -31070,7 +31173,7 @@ var MAX_CALLERS = 30;
 var MAX_READ_BYTES4 = 512 * 1024;
 var IDENT = /^[A-Za-z_$][\w$]*$/;
 var TEST_OR_TOOLING = /(^|\/)(tests?|__tests__|spec|specs|fixtures?|e2e|testdata|experiments|scripts)\/|\.(test|spec)\.[cm]?[jt]sx?$|_test\.(py|go)$|(^|\/)test_[^/]+\.py$/;
-var dirname18 = (p) => p.includes("/") ? p.slice(0, p.lastIndexOf("/")) : "";
+var dirname19 = (p) => p.includes("/") ? p.slice(0, p.lastIndexOf("/")) : "";
 function joinPath(dir, rel) {
   const out2 = dir ? dir.split("/") : [];
   for (const part of rel.split("/")) {
@@ -31195,7 +31298,7 @@ function parseJsonc(text2) {
   return JSON.parse(out2.replace(/,(\s*[}\]])/g, "$1"));
 }
 function tsconfigFor(source2, fromPath, cache) {
-  for (let dir = dirname18(fromPath); ; dir = dirname18(dir)) {
+  for (let dir = dirname19(fromPath); ; dir = dirname19(dir)) {
     const file = dir ? `${dir}/tsconfig.json` : "tsconfig.json";
     if (!cache.has(file)) {
       const read2 = source2.read(file, 256 * 1024);
@@ -31219,7 +31322,7 @@ function tsconfigFor(source2, fromPath, cache) {
 function tsCandidates(spec, fromPath, cfg) {
   const bases = [];
   if (spec.startsWith(".")) {
-    const b = joinPath(dirname18(fromPath), spec);
+    const b = joinPath(dirname19(fromPath), spec);
     if (b !== null) bases.push(b);
   } else if (cfg) {
     const root = cfg.baseUrl !== null ? joinPath(cfg.dir, cfg.baseUrl) : cfg.dir;
@@ -31251,8 +31354,8 @@ function pyCandidates(spec, fromPath) {
   const mod = spec.slice(dots).replace(/\./g, "/");
   const out2 = [];
   if (dots > 0) {
-    let dir = dirname18(fromPath);
-    for (let i2 = 1; i2 < dots; i2++) dir = dirname18(dir);
+    let dir = dirname19(fromPath);
+    for (let i2 = 1; i2 < dots; i2++) dir = dirname19(dir);
     const b = mod ? joinPath(dir, mod) : dir;
     if (b !== null) out2.push(`${b}.py`, `${b}/__init__.py`);
   } else {
@@ -31279,7 +31382,7 @@ function moduleFiles(source2, spec, fromPath, lang, cache = /* @__PURE__ */ new
     const module2 = mod.ok ? /^\s*module\s+(\S+)/m.exec(mod.content)?.[1] : void 0;
     if (!module2 || !(spec === module2 || spec.startsWith(`${module2}/`))) return [];
     const dir = spec.slice(module2.length + 1);
-    return source2.list(dir || void 0).filter((p) => dirname18(p) === dir && p.endsWith(".go") && !p.endsWith("_test.go"));
+    return source2.list(dir || void 0).filter((p) => dirname19(p) === dir && p.endsWith(".go") && !p.endsWith("_test.go"));
   }
   if (lang === "java") {
     const suffix = `${spec.replace(/\./g, "/")}.java`;
@@ -31330,7 +31433,7 @@ function definitionOf(input) {
     if (type?.startsWith(RESULT_OF)) {
       const [fnName, idx] = type.slice(RESULT_OF.length).split("#");
       type = null;
-      const others = lang === "go" ? source2.list(dirname18(path) || void 0).filter((p) => dirname18(p) === dirname18(path) && p.endsWith(".go") && p !== path) : (() => {
+      const others = lang === "go" ? source2.list(dirname19(path) || void 0).filter((p) => dirname19(p) === dirname19(path) && p.endsWith(".go") && p !== path) : (() => {
         const imp = importOf(content, lang, fnName, null);
         return imp ? moduleFiles(source2, imp.spec, path, lang, tsCache) : [];
       })();
@@ -31377,7 +31480,7 @@ function definitionOf(input) {
     }
   }
   if (out2.length === 0 && lang === "go" && !receiver) {
-    for (const f of source2.list(dirname18(path) || void 0).filter((p) => dirname18(p) === dirname18(path) && p.endsWith(".go") && p !== path)) {
+    for (const f of source2.list(dirname19(path) || void 0).filter((p) => dirname19(p) === dirname19(path) && p.endsWith(".go") && p !== path)) {
       add(functionsNamed(outlineOf2(f), name2), "package");
       if (Date.now() > input.deadlineAt) break;
     }
@@ -32273,7 +32376,7 @@ async function repoContext(run4) {
 // src/lib/seed-runner.ts
 var import_promises13 = require("node:fs/promises");
 var import_node_fs50 = require("node:fs");
-var import_node_path38 = require("node:path");
+var import_node_path39 = require("node:path");
 var import_yaml6 = __toESM2(require_dist());
 
 // src/lib/seed.ts
@@ -32496,7 +32599,7 @@ function normalizeTitle(title) {
 async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
   const titles = /* @__PURE__ */ new Set();
   for (const dir of NODE_DIRS) {
-    const full = (0, import_node_path38.join)(memoryDir3, dir);
+    const full = (0, import_node_path39.join)(memoryDir3, dir);
     if (!(0, import_node_fs50.existsSync)(full)) continue;
     let files;
     try {
@@ -32508,7 +32611,7 @@ async function localSeedTitles(memoryDir3 = MEMORY_DIR) {
       if (!file.endsWith(".md")) continue;
       let content;
       try {
-        content = await (0, import_promises13.readFile)((0, import_node_path38.join)(full, file), "utf-8");
+        content = await (0, import_promises13.readFile)((0, import_node_path39.join)(full, file), "utf-8");
       } catch {
         continue;
       }
@@ -32685,7 +32788,7 @@ async function runSeed(opts) {
     }
     const content = typeof res.data.content === "string" && res.data.content.length > 0 ? res.data.content : renderNodeMarkdown(c, nodeId, createdAt);
     try {
-      await (0, import_promises13.mkdir)((0, import_node_path38.dirname)(targetPath), { recursive: true });
+      await (0, import_promises13.mkdir)((0, import_node_path39.dirname)(targetPath), { recursive: true });
       await (0, import_promises13.writeFile)(targetPath, content);
       if (deduplicated) existing++;
       else {
@@ -32702,7 +32805,7 @@ async function runSeed(opts) {
 
 // src/commands/analyze/phases/08-memory-manifest.ts
 var import_node_fs51 = require("node:fs");
-var import_node_path39 = require("node:path");
+var import_node_path40 = require("node:path");
 async function memoryManifest(run4) {
   const { globals } = run4;
   const { serviceUrl, token } = run4;
@@ -32712,7 +32815,7 @@ async function memoryManifest(run4) {
   let autoSeedNotice = null;
   try {
     await ensureMemoryDir();
-    const seedMarker = (0, import_node_path39.join)(VERITY_DIR, ".seeded");
+    const seedMarker = (0, import_node_path40.join)(VERITY_DIR, ".seeded");
     const hasStandard = (0, import_node_fs51.existsSync)(STANDARD_FILE);
     const alreadyTried = (0, import_node_fs51.existsSync)(seedMarker);
     if (hasStandard && !alreadyTried) {
@@ -32833,7 +32936,7 @@ function computeIncrement(reviewedPaths, hashOf, priorAuthored) {
 }
 
 // src/commands/analyze/phases/10-working-memory.ts
-var import_node_path40 = require("node:path");
+var import_node_path41 = require("node:path");
 async function workingMemory(run4) {
   const { opts } = run4;
   const { allForReview, baseline, conversation, foldResult, sessionId, token, transcriptPath } = run4;
@@ -32845,7 +32948,7 @@ async function workingMemory(run4) {
     const priorState = foldForMarks(memorySession.d);
     incrementReport = computeIncrement(
       allForReview,
-      (p) => fileHash((0, import_node_path40.join)(repoRoot(), p)),
+      (p) => fileHash((0, import_node_path41.join)(repoRoot(), p)),
       priorState.authored_all.map((a) => ({
         path: a.path,
         hash_at_last_verdict: a.hash_at_last_verdict
@@ -33474,7 +33577,7 @@ async function transmit(run4) {
 
 // src/commands/analyze/phases/13-reconcile.ts
 var import_node_fs54 = require("node:fs");
-var import_node_path41 = require("node:path");
+var import_node_path42 = require("node:path");
 async function reconcile(run4) {
   const { actionSummary, allChanged, analyzable, baseline, baselineSessionId, codeDelta, contentHash, conversation, decision, foldResult, memory: memory2, memorySession, response, reviewable, securityFiles, turnId } = run4;
   const sentPaths = codeDelta.files.map((f) => f.path);
@@ -33503,7 +33606,7 @@ async function reconcile(run4) {
       const st = foldDossier(memorySession.d);
       openElsewhere = openBlockingElsewhere(st.statements, sentPaths, (file, line2) => {
         try {
-          const src = (0, import_node_fs54.readFileSync)((0, import_node_path41.join)(repoRoot(), file), "utf8").split("\n");
+          const src = (0, import_node_fs54.readFileSync)((0, import_node_path42.join)(repoRoot(), file), "utf8").split("\n");
           const at = src[line2 - 1];
           return at === void 0 ? null : lineSha(at);
         } catch {
@@ -34325,7 +34428,7 @@ function registerAnalyzeCommand(program2) {
 var tracing = () => process.env.VERITY_TRACE_PHASES === "1";
 async function runAnalyze(opts, globals) {
   if (!verityConfigured()) {
-    (0, import_node_fs55.writeSync)(2, isMachineStore((0, import_node_path42.join)(repoRoot(), VERITY_DIR)) ? "[verity] nothing to review in your home directory \u2014 run Verity inside a project.\n" : '[verity] not set up in this project \u2014 run "verity init" first.\n');
+    (0, import_node_fs55.writeSync)(2, isMachineStore((0, import_node_path43.join)(repoRoot(), VERITY_DIR)) ? "[verity] nothing to review in your home directory \u2014 run Verity inside a project.\n" : '[verity] not set up in this project \u2014 run "verity init" first.\n');
     process.exit(0);
   }
   const run4 = createRun(opts, globals);
@@ -34349,23 +34452,23 @@ async function runAnalyze(opts, globals) {
 var import_node_fs60 = require("node:fs");
 var import_node_child_process17 = require("node:child_process");
 var import_node_crypto18 = require("node:crypto");
-var import_node_path47 = require("node:path");
+var import_node_path48 = require("node:path");
 
 // src/lib/prove/runner.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_os9 = require("node:os");
 var import_node_fs58 = require("node:fs");
 var import_node_os10 = require("node:os");
-var import_node_path45 = require("node:path");
+var import_node_path46 = require("node:path");
 
 // src/lib/prove/scaffold.ts
 var import_node_fs57 = require("node:fs");
-var import_node_path44 = require("node:path");
+var import_node_path45 = require("node:path");
 
 // src/lib/prove/safe-write.ts
 var import_node_fs56 = require("node:fs");
 var import_node_crypto15 = require("node:crypto");
-var import_node_path43 = require("node:path");
+var import_node_path44 = require("node:path");
 var SafeWriteError = class extends Error {
   constructor(reason, path) {
     super(`refusing to write ${path}: ${reason}`);
@@ -34377,7 +34480,7 @@ var SafeWriteError = class extends Error {
 var FLAGS3 = import_node_fs56.constants;
 var NOFOLLOW2 = FLAGS3.O_NOFOLLOW ?? 0;
 function assertPlainRelative(rel) {
-  if (!rel || (0, import_node_path43.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
+  if (!rel || (0, import_node_path44.isAbsolute)(rel)) throw new SafeWriteError("bad-path", rel);
   for (const part of rel.split(/[\\/]/)) {
     if (part === ".." || part === "" || part === ".") throw new SafeWriteError("bad-path", rel);
   }
@@ -34386,7 +34489,7 @@ function ensureDirsNoFollow(root, rel) {
   const parts2 = rel.split(/[\\/]/);
   let cur = root;
   for (const part of parts2.slice(0, -1)) {
-    cur = (0, import_node_path43.join)(cur, part);
+    cur = (0, import_node_path44.join)(cur, part);
     let st;
     try {
       st = (0, import_node_fs56.lstatSync)(cur);
@@ -34397,10 +34500,10 @@ function ensureDirsNoFollow(root, rel) {
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", cur);
     if (!st.isDirectory()) throw new SafeWriteError("not-regular", cur);
   }
-  return (0, import_node_path43.join)(root, rel);
+  return (0, import_node_path44.join)(root, rel);
 }
 function insideRoot(realRoot, realPath) {
-  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path43.sep) ? realRoot : realRoot + import_node_path43.sep);
+  return realPath === realRoot || realPath.startsWith(realRoot.endsWith(import_node_path44.sep) ? realRoot : realRoot + import_node_path44.sep);
 }
 function removeQuietly(path) {
   try {
@@ -34411,7 +34514,7 @@ function removeQuietly(path) {
 function writeFileInRootNoFollow(root, rel, content) {
   assertPlainRelative(rel);
   const dest = ensureDirsNoFollow(root, rel);
-  const dir = (0, import_node_path43.dirname)(dest);
+  const dir = (0, import_node_path44.dirname)(dest);
   try {
     const st = (0, import_node_fs56.lstatSync)(dest);
     if (st.isSymbolicLink()) throw new SafeWriteError("symlink", dest);
@@ -34425,7 +34528,7 @@ function writeFileInRootNoFollow(root, rel, content) {
   } catch {
     throw new SafeWriteError("unwritable", root);
   }
-  const tmp = (0, import_node_path43.join)(dir, `.${(0, import_node_path43.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
+  const tmp = (0, import_node_path44.join)(dir, `.${(0, import_node_path44.basename)(dest)}.${(0, import_node_crypto15.randomBytes)(6).toString("hex")}.tmp`);
   let fd;
   try {
     fd = (0, import_node_fs56.openSync)(tmp, import_node_fs56.constants.O_WRONLY | import_node_fs56.constants.O_CREAT | import_node_fs56.constants.O_EXCL | NOFOLLOW2, 420);
@@ -34469,7 +34572,7 @@ function pathHasNoLink(root, rel) {
   }
   let cur = root;
   for (const part of rel.split(/[\\/]/)) {
-    cur = cur + import_node_path43.sep + part;
+    cur = cur + import_node_path44.sep + part;
     try {
       if ((0, import_node_fs56.lstatSync)(cur).isSymbolicLink()) return false;
     } catch {
@@ -34781,20 +34884,20 @@ This directory is machine-local and gitignored (see ../.gitignore). Models are
 never committed; what reaches the team is the bug report and the fix.
 `;
 function scaffoldProofs(root) {
-  const proofsDir = (0, import_node_path44.join)(root, PROOFS_DIR);
+  const proofsDir = (0, import_node_path45.join)(root, PROOFS_DIR);
   const written = [];
   const kept = [];
   for (const stray of ["lakefile.lean"]) {
     const rel = `${PROOFS_DIR}/${stray}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
     try {
-      (0, import_node_fs57.rmSync)((0, import_node_path44.join)(root, rel), { force: true });
+      (0, import_node_fs57.rmSync)((0, import_node_path45.join)(root, rel), { force: true });
     } catch {
     }
   }
   for (const f of PROOFS_TEMPLATE_FILES) {
     const rel = `${PROOFS_DIR}/${f.path}`;
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
     const current = readRegularFileInRoot(root, rel, 4 * 1024 * 1024);
     if (current.ok && current.content === f.content) {
       kept.push(rel);
@@ -34807,8 +34910,8 @@ function scaffoldProofs(root) {
     [`${PROOFS_DIR}/.gitignore`, LOCAL_GITIGNORE],
     [`${MODELS_DIR}/README.md`, MODELS_README]
   ]) {
-    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path44.join)(root, rel));
-    if (existsNoFollow((0, import_node_path44.join)(root, rel))) {
+    if (!pathHasNoLink(root, rel)) throw new SafeWriteError("symlink", (0, import_node_path45.join)(root, rel));
+    if (existsNoFollow((0, import_node_path45.join)(root, rel))) {
       kept.push(rel);
       continue;
     }
@@ -35077,17 +35180,17 @@ function renderReport(r) {
 
 // src/lib/prove/runner.ts
 function verityLeanHome(env = process.env) {
-  return env.VERITY_LEAN_HOME ?? (0, import_node_path45.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".verity", "lean");
+  return env.VERITY_LEAN_HOME ?? (0, import_node_path46.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".verity", "lean");
 }
 function findToolchain(env = process.env) {
-  const managedBin = (0, import_node_path45.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
-  const elanBin = (0, import_node_path45.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "bin");
-  const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path45.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
-  const userPath = (env.PATH ?? "").split(import_node_path45.delimiter).filter((d) => d && (elanHas || (0, import_node_path45.resolve)(d) !== (0, import_node_path45.resolve)(elanBin)));
-  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path45.delimiter);
+  const managedBin = (0, import_node_path46.join)(verityLeanHome(env), LEAN_TOOLCHAIN.replace(/^leanprover\/lean4:/, ""), "bin");
+  const elanBin = (0, import_node_path46.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "bin");
+  const elanHas = (0, import_node_fs58.existsSync)((0, import_node_path46.join)(env.HOME ?? (0, import_node_os10.homedir)(), ".elan", "toolchains", LEAN_TOOLCHAIN.replace("/", "--").replace(":", "---")));
+  const userPath = (env.PATH ?? "").split(import_node_path46.delimiter).filter((d) => d && (elanHas || (0, import_node_path46.resolve)(d) !== (0, import_node_path46.resolve)(elanBin)));
+  const path = [managedBin, ...elanHas ? [elanBin] : [], ...userPath].join(import_node_path46.delimiter);
   const merged = { ...env, PATH: path, ELAN_TOOLCHAIN: env.ELAN_TOOLCHAIN ?? LEAN_TOOLCHAIN };
   const exe = process.platform === "win32" ? "lake.exe" : "lake";
-  const candidates2 = [(0, import_node_path45.join)(managedBin, exe), ...elanHas ? [(0, import_node_path45.join)(elanBin, exe)] : [], exe];
+  const candidates2 = [(0, import_node_path46.join)(managedBin, exe), ...elanHas ? [(0, import_node_path46.join)(elanBin, exe)] : [], exe];
   for (const candidate of candidates2) {
     try {
       (0, import_node_child_process15.execFileSync)(candidate, ["--version"], { env: merged, stdio: ["ignore", "pipe", "pipe"], timeout: 1e4 });
@@ -35166,7 +35269,7 @@ function proofsWorkspaceProblem(root) {
   for (const rel of [".verity", PROOFS_DIR, `${PROOFS_DIR}/.lake`]) {
     let st;
     try {
-      st = (0, import_node_fs58.lstatSync)((0, import_node_path45.join)(root, rel));
+      st = (0, import_node_fs58.lstatSync)((0, import_node_path46.join)(root, rel));
     } catch {
       break;
     }
@@ -35186,44 +35289,44 @@ function refused(problem) {
 function buildLibrary(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return run2(tc, (0, import_node_path45.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return run2(tc, (0, import_node_path46.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 async function buildLibraryAsync(tc, root, timeoutMs = DEFAULT_BUILD_TIMEOUT_MS) {
   const problem = proofsWorkspaceProblem(root);
   if (problem) return refused(problem);
-  return runAsync(tc, (0, import_node_path45.join)(root, PROOFS_DIR), ["build"], timeoutMs);
+  return runAsync(tc, (0, import_node_path46.join)(root, PROOFS_DIR), ["build"], timeoutMs);
 }
 function isModelInRoot(modelsAbs, rel) {
-  if (!rel.endsWith(".lean") || (0, import_node_path45.isAbsolute)(rel) || rel.startsWith("..")) return false;
+  if (!rel.endsWith(".lean") || (0, import_node_path46.isAbsolute)(rel) || rel.startsWith("..")) return false;
   return statRegularInRoot(modelsAbs, rel).ok;
 }
 function resolveModelFile(root, arg) {
-  const modelsAbs = (0, import_node_path45.join)(root, MODELS_DIR);
-  const asPath = (0, import_node_path45.relative)(modelsAbs, (0, import_node_path45.isAbsolute)(arg) ? arg : (0, import_node_path45.resolve)(root, arg));
+  const modelsAbs = (0, import_node_path46.join)(root, MODELS_DIR);
+  const asPath = (0, import_node_path46.relative)(modelsAbs, (0, import_node_path46.isAbsolute)(arg) ? arg : (0, import_node_path46.resolve)(root, arg));
   const candidates2 = arg.includes("/") || arg.includes("\\") ? [asPath] : [arg, `${arg}.lean`];
   for (const rel of candidates2) {
-    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path45.join)(modelsAbs, rel);
+    if (isModelInRoot(modelsAbs, rel)) return (0, import_node_path46.join)(modelsAbs, rel);
   }
   return null;
 }
 function listModelFiles(root) {
-  const modelsAbs = (0, import_node_path45.join)(root, MODELS_DIR);
+  const modelsAbs = (0, import_node_path46.join)(root, MODELS_DIR);
   if (!(0, import_node_fs58.existsSync)(modelsAbs)) return [];
-  return (0, import_node_fs58.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path45.join)(modelsAbs, f));
+  return (0, import_node_fs58.readdirSync)(modelsAbs).filter((f) => isModelInRoot(modelsAbs, f)).sort().map((f) => (0, import_node_path46.join)(modelsAbs, f));
 }
 function trimDiagnostics(text2) {
   return text2.split("\n").filter((l) => !l.startsWith("trace:")).join("\n").trim().slice(0, 4e3);
 }
 function checkModel(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path45.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path45.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path46.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path46.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : run2(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
 }
 async function checkModelAsync(tc, root, modelFile, opts = {}) {
-  const proofsAbs = (0, import_node_path45.join)(root, PROOFS_DIR);
-  const rel = (0, import_node_path45.relative)(proofsAbs, modelFile);
+  const proofsAbs = (0, import_node_path46.join)(root, PROOFS_DIR);
+  const rel = (0, import_node_path46.relative)(proofsAbs, modelFile);
   const problem = proofsWorkspaceProblem(root);
   const res = problem ? refused(problem) : await runAsync(tc, proofsAbs, ["env", "lean", rel], opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
   return toReport(res, root, modelFile, opts.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS);
@@ -35232,10 +35335,10 @@ function toReport(res, root, modelFile, timeoutMs) {
   const parsed = parseVerityLines(res.stdout);
   const combined = `${res.stdout}
 ${res.stderr}`;
-  const name2 = parsed.header?.model ?? (0, import_node_path45.basename)(modelFile, ".lean");
+  const name2 = parsed.header?.model ?? (0, import_node_path46.basename)(modelFile, ".lean");
   const report = {
     model: name2,
-    file: (0, import_node_path45.relative)(root, modelFile),
+    file: (0, import_node_path46.relative)(root, modelFile),
     ok: res.ok,
     header: parsed.header,
     properties: parsed.properties,
@@ -35281,7 +35384,7 @@ var import_node_fs59 = require("node:fs");
 var import_node_crypto17 = require("node:crypto");
 var import_node_child_process16 = require("node:child_process");
 var import_node_os11 = require("node:os");
-var import_node_path46 = require("node:path");
+var import_node_path47 = require("node:path");
 var import_promises15 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
 var RELEASES = "https://releases.lean-lang.org/lean4";
@@ -35295,7 +35398,7 @@ function freeBytes(dir) {
       const st = (0, import_node_fs59.statfsSync)(d);
       return Number(st.bavail) * Number(st.bsize);
     } catch {
-      const up = (0, import_node_path46.join)(d, "..");
+      const up = (0, import_node_path47.join)(d, "..");
       if (up === d) return null;
       d = up;
     }
@@ -35337,13 +35440,13 @@ function leanAssetName(version = pinnedVersion()) {
   return suffix ? `lean-${v}-${suffix}.zip` : null;
 }
 function pinnedVersionDir(env = process.env) {
-  return (0, import_node_path46.join)(verityLeanHome(env), pinnedVersion());
+  return (0, import_node_path47.join)(verityLeanHome(env), pinnedVersion());
 }
 function lakeBinary() {
   return (0, import_node_os11.platform)() === "win32" ? "lake.exe" : "lake";
 }
 function managedInstalled(env = process.env) {
-  return (0, import_node_fs59.existsSync)((0, import_node_path46.join)(pinnedVersionDir(env), "bin", lakeBinary()));
+  return (0, import_node_fs59.existsSync)((0, import_node_path47.join)(pinnedVersionDir(env), "bin", lakeBinary()));
 }
 function unzip(zip, dest) {
   const attempts = (0, import_node_os11.platform)() === "linux" ? [["unzip", ["-q", zip, "-d", dest]], ["python3", ["-m", "zipfile", "-e", zip, dest]], ["tar", ["-xf", zip, "-C", dest]]] : [["tar", ["-xf", zip, "-C", dest]], ["unzip", ["-q", zip, "-d", dest]], ["python3", ["-m", "zipfile", "-e", zip, dest]]];
@@ -35356,7 +35459,7 @@ function unzip(zip, dest) {
     } catch (err2) {
       errors.push(`${cmd}: ${String(err2.message).split("\n")[0].slice(0, 120)}`);
       try {
-        for (const e of (0, import_node_fs59.readdirSync)(dest)) (0, import_node_fs59.rmSync)((0, import_node_path46.join)(dest, e), { recursive: true, force: true });
+        for (const e of (0, import_node_fs59.readdirSync)(dest)) (0, import_node_fs59.rmSync)((0, import_node_path47.join)(dest, e), { recursive: true, force: true });
       } catch {
       }
     }
@@ -35432,10 +35535,10 @@ async function installLean(opts = {}) {
     const gb = (n2) => (n2 / 1024 ** 3).toFixed(1);
     return { ok: false, error: `not enough disk space for Lean: ${gb(free)} GB free where ${home} lives, needs about ${gb(needed)} GB` };
   }
-  const tmp = (0, import_node_path46.join)(home, ".tmp");
+  const tmp = (0, import_node_path47.join)(home, ".tmp");
   (0, import_node_fs59.rmSync)(tmp, { recursive: true, force: true });
   (0, import_node_fs59.mkdirSync)(tmp, { recursive: true });
-  const zip = (0, import_node_path46.join)(tmp, asset);
+  const zip = (0, import_node_path47.join)(tmp, asset);
   say(`downloading ${url}`);
   let lastPct = -1;
   try {
@@ -35458,7 +35561,7 @@ async function installLean(opts = {}) {
     return { ok: false, error: verified.error };
   }
   say("unpacking (this takes a minute)");
-  const unpack = (0, import_node_path46.join)(tmp, "unpack");
+  const unpack = (0, import_node_path47.join)(tmp, "unpack");
   (0, import_node_fs59.mkdirSync)(unpack);
   const unpacked = unzip(zip, unpack);
   if (!unpacked.ok) {
@@ -35466,8 +35569,8 @@ async function installLean(opts = {}) {
     return { ok: false, error: `unpack failed: ${unpacked.error}` };
   }
   const entries = (0, import_node_fs59.readdirSync)(unpack);
-  const top = entries.length === 1 && (0, import_node_fs59.statSync)((0, import_node_path46.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path46.join)(unpack, entries[0]) : unpack;
-  if (!(0, import_node_fs59.existsSync)((0, import_node_path46.join)(top, "bin", lakeBinary()))) {
+  const top = entries.length === 1 && (0, import_node_fs59.statSync)((0, import_node_path47.join)(unpack, entries[0])).isDirectory() ? (0, import_node_path47.join)(unpack, entries[0]) : unpack;
+  if (!(0, import_node_fs59.existsSync)((0, import_node_path47.join)(top, "bin", lakeBinary()))) {
     (0, import_node_fs59.rmSync)(tmp, { recursive: true, force: true });
     return { ok: false, error: "the archive did not contain bin/lake" };
   }
@@ -35551,7 +35654,7 @@ function startBackgroundInstall(opts) {
   const home = verityLeanHome(env);
   try {
     (0, import_node_fs60.mkdirSync)(home, { recursive: true });
-    const log = (0, import_node_fs60.openSync)((0, import_node_path47.join)(home, LOG_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_APPEND | import_node_fs60.constants.O_CREAT | (import_node_fs60.constants.O_NOFOLLOW ?? 0), 384);
+    const log = (0, import_node_fs60.openSync)((0, import_node_path48.join)(home, LOG_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_APPEND | import_node_fs60.constants.O_CREAT | (import_node_fs60.constants.O_NOFOLLOW ?? 0), 384);
     try {
       const child = (opts.run ?? import_node_child_process17.spawn)(process.execPath, [opts.cli, "lean", "install", "--yes", "--background"], {
         detached: true,
@@ -35583,7 +35686,7 @@ function lockToken(env) {
 function acquireInstallLock(env = process.env, now = Date.now()) {
   const home = verityLeanHome(env);
   (0, import_node_fs60.mkdirSync)(home, { recursive: true });
-  const lock = (0, import_node_path47.join)(home, LOCK_FILE);
+  const lock = (0, import_node_path48.join)(home, LOCK_FILE);
   if ((0, import_node_fs60.existsSync)(lock) && !installRunning(env, now)) (0, import_node_fs60.rmSync)(lock, { force: true });
   const token = (0, import_node_crypto18.randomBytes)(16).toString("hex");
   try {
@@ -35599,7 +35702,7 @@ function acquireInstallLock(env = process.env, now = Date.now()) {
 function refreshInstallLock(env = process.env, now = Date.now()) {
   if (!heldToken || lockToken(env) !== heldToken) return;
   try {
-    const fd = (0, import_node_fs60.openSync)((0, import_node_path47.join)(verityLeanHome(env), LOCK_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_TRUNC | (import_node_fs60.constants.O_NOFOLLOW ?? 0));
+    const fd = (0, import_node_fs60.openSync)((0, import_node_path48.join)(verityLeanHome(env), LOCK_FILE), import_node_fs60.constants.O_WRONLY | import_node_fs60.constants.O_TRUNC | (import_node_fs60.constants.O_NOFOLLOW ?? 0));
     try {
       (0, import_node_fs60.writeFileSync)(fd, JSON.stringify({ pid: process.pid, at: now, token: heldToken }));
     } finally {
@@ -35609,7 +35712,7 @@ function refreshInstallLock(env = process.env, now = Date.now()) {
   }
 }
 function releaseInstallLock(env = process.env) {
-  if (heldToken && lockToken(env) === heldToken) (0, import_node_fs60.rmSync)((0, import_node_path47.join)(verityLeanHome(env), LOCK_FILE), { force: true });
+  if (heldToken && lockToken(env) === heldToken) (0, import_node_fs60.rmSync)((0, import_node_path48.join)(verityLeanHome(env), LOCK_FILE), { force: true });
   heldToken = null;
 }
 function writeInstallState(state, env = process.env) {
@@ -35662,14 +35765,14 @@ function resumeInterruptedInstall(opts) {
 
 // src/commands/baseline.ts
 var import_node_fs63 = require("node:fs");
-var import_node_path50 = require("node:path");
+var import_node_path51 = require("node:path");
 
 // src/lib/skew-notice.ts
 var import_node_fs61 = require("node:fs");
-var import_node_path48 = require("node:path");
+var import_node_path49 = require("node:path");
 var MARKER = ".skew-notice.json";
 function markerPath2() {
-  return (0, import_node_path48.join)(verityHome(), MARKER);
+  return (0, import_node_path49.join)(verityHome(), MARKER);
 }
 function today(now) {
   const y = now.getFullYear();
@@ -35695,7 +35798,7 @@ function recordSkewNotice(skew, now = /* @__PURE__ */ new Date()) {
 
 // src/lib/project-skills.ts
 var import_node_fs62 = require("node:fs");
-var import_node_path49 = require("node:path");
+var import_node_path50 = require("node:path");
 var PROJECT_SKILL_NAMES = [
   "verity-setup",
   "verity-analyze",
@@ -35722,13 +35825,13 @@ var ALL = [...PROJECT_SKILL_NAMES, ...LEGACY_SKILL_NAMES];
 function staleProjectSkills() {
   const root = projectPath(".claude/skills");
   if (!(0, import_node_fs62.existsSync)(root)) return [];
-  return ALL.filter((name2) => (0, import_node_fs62.existsSync)((0, import_node_path49.join)(root, name2)));
+  return ALL.filter((name2) => (0, import_node_fs62.existsSync)((0, import_node_path50.join)(root, name2)));
 }
 function removeProjectSkills() {
   const root = projectPath(".claude/skills");
   const removed = [];
   for (const name2 of staleProjectSkills()) {
-    (0, import_node_fs62.rmSync)((0, import_node_path49.join)(root, name2), { recursive: true, force: true });
+    (0, import_node_fs62.rmSync)((0, import_node_path50.join)(root, name2), { recursive: true, force: true });
     removed.push(name2);
   }
   return removed;
@@ -35763,7 +35866,7 @@ function registerBaselineCommands(program2) {
       const loginWarning = "Until they have, do not send them to run `verity login` in a terminal: that runs the global one, which can sign this machine in to a different server.";
       const skewNote = !skew ? null : skewLoud ? `Before anything else, including /verity:init's questions, tell the user their global \`verity\` is ${skew.global}, the hooks run ${skew.hooks}, and \`${skew.remedy}\` fixes it. ${loginWarning}` : `The user's global \`verity\` is ${skew.global} and the hooks run ${skew.hooks}; \`${skew.remedy}\` fixes it. They were already told today, so do not repeat it unprompted \u2014 mention it only where it matters, such as before suggesting a \`verity\` command for their terminal. ${loginWarning}`;
       if (!verityConfigured()) {
-        if (isMachineStore((0, import_node_path50.join)(repoRoot(), VERITY_DIR))) process.exit(0);
+        if (isMachineStore((0, import_node_path51.join)(repoRoot(), VERITY_DIR))) process.exit(0);
         const how = isPluginInvocation() ? "Tell the user to run /verity:init \u2014 they type it; you cannot invoke it." : "Tell the user to run `verity init` in their terminal.";
         const lines = [
           `Verity is installed but this project is not set up yet, so the quality gate will not review anything here. ${how}`
@@ -35907,30 +36010,30 @@ function hookSource(value) {
 
 // src/commands/review.ts
 var import_node_fs64 = require("node:fs");
-var import_node_path51 = require("node:path");
+var import_node_path52 = require("node:path");
 function containReviewPaths(paths, base) {
   const kept = [];
   const refused2 = [];
   for (const raw of paths) {
-    const candidate = (0, import_node_path51.isAbsolute)(raw) ? relativeForm(base, raw) : raw;
+    const candidate = (0, import_node_path52.isAbsolute)(raw) ? relativeForm(base, raw) : raw;
     if (candidate === "" || resolveInside(base, candidate) === null) refused2.push(raw);
     else kept.push(candidate);
   }
   return { kept, refused: refused2 };
 }
 function relativeForm(base, abs) {
-  const lexical = (0, import_node_path51.relative)(base, abs);
-  if (!(lexical === ".." || lexical.startsWith(`..${import_node_path51.sep}`) || (0, import_node_path51.isAbsolute)(lexical))) return lexical;
+  const lexical = (0, import_node_path52.relative)(base, abs);
+  if (!(lexical === ".." || lexical.startsWith(`..${import_node_path52.sep}`) || (0, import_node_path52.isAbsolute)(lexical))) return lexical;
   try {
-    let dir = (0, import_node_path51.dirname)(abs);
-    let rest = (0, import_node_path51.basename)(abs);
+    let dir = (0, import_node_path52.dirname)(abs);
+    let rest = (0, import_node_path52.basename)(abs);
     while (!(0, import_node_fs64.existsSync)(dir)) {
-      const up = (0, import_node_path51.dirname)(dir);
+      const up = (0, import_node_path52.dirname)(dir);
       if (up === dir) return lexical;
-      rest = (0, import_node_path51.join)((0, import_node_path51.basename)(dir), rest);
+      rest = (0, import_node_path52.join)((0, import_node_path52.basename)(dir), rest);
       dir = up;
     }
-    return (0, import_node_path51.relative)((0, import_node_fs64.realpathSync)(base), (0, import_node_path51.join)((0, import_node_fs64.realpathSync)(dir), rest));
+    return (0, import_node_path52.relative)((0, import_node_fs64.realpathSync)(base), (0, import_node_path52.join)((0, import_node_fs64.realpathSync)(dir), rest));
   } catch {
     return lexical;
   }
@@ -36036,11 +36139,11 @@ async function runReview(opts, globals) {
 
 // src/commands/guard.ts
 var import_node_fs67 = require("node:fs");
-var import_node_path55 = require("node:path");
+var import_node_path56 = require("node:path");
 
 // src/lib/vendored.ts
 var import_node_fs65 = require("node:fs");
-var import_node_path52 = require("node:path");
+var import_node_path53 = require("node:path");
 var INSTALLED_SKILL = /^\.claude\/skills\/(verity-[a-z0-9-]+)\/(.+)$/;
 function dataDirOrNull() {
   try {
@@ -36055,7 +36158,7 @@ function shippedSkillFile(path, dataDir = dataDirOrNull()) {
   const [, skill, rel] = m;
   if (rel.split("/").some((seg) => seg === ".." || seg === ".")) return null;
   try {
-    return (0, import_node_fs65.readFileSync)((0, import_node_path52.join)(dataDir, "skills", skill, rel), "utf8");
+    return (0, import_node_fs65.readFileSync)((0, import_node_path53.join)(dataDir, "skills", skill, rel), "utf8");
   } catch {
     return null;
   }
@@ -36166,7 +36269,7 @@ async function runAgentReview(options) {
 
 // src/lib/effort.ts
 var import_node_fs66 = require("node:fs");
-var import_node_path53 = require("node:path");
+var import_node_path54 = require("node:path");
 var import_yaml7 = __toESM2(require_dist());
 var EFFORT_PROFILES = {
   default: { pushDeadlineMs: 18e4, formal: { tier: "fast", maxRounds: 2, minScore: 0.7, costCapUsd: 1, maxTargets: 1, relaxedGates: false, dailyModels: 5, dailyCostUsd: 5 } },
@@ -36179,7 +36282,7 @@ function asEffort(value) {
 function resolveEffort(root, env = process.env) {
   if (env.VERITY_EFFORT) return asEffort(env.VERITY_EFFORT);
   try {
-    const standard = (0, import_yaml7.parse)((0, import_node_fs66.readFileSync)((0, import_node_path53.join)(root, STANDARD_FILE), "utf8"));
+    const standard = (0, import_yaml7.parse)((0, import_node_fs66.readFileSync)((0, import_node_path54.join)(root, STANDARD_FILE), "utf8"));
     return asEffort(standard?.process_constraints?.git_moment_effort);
   } catch {
     return "default";
@@ -36190,7 +36293,7 @@ function effortProfile(root, env = process.env) {
 }
 
 // src/lib/prove/auto.ts
-var import_node_path54 = require("node:path");
+var import_node_path55 = require("node:path");
 var import_node_crypto21 = require("node:crypto");
 
 // src/lib/prove/grounding.ts
@@ -38344,7 +38447,7 @@ async function runFormalPhase(input) {
     modelName = gen.name;
     const rel = `${AUTO_MODELS_DIR}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path54.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path55.join)(root, rel);
     progress.model = { name: gen.name, file: rel, rounds: round };
     progress.step = "check";
     report = await deps.check(root, abs);
@@ -38493,7 +38596,7 @@ async function runFormalPhase(input) {
   return done({
     status: "checked",
     target,
-    model: { name: modelName, file: (0, import_node_path54.relative)(root, (0, import_node_path54.join)(root, modelFile)), rounds },
+    model: { name: modelName, file: (0, import_node_path55.relative)(root, (0, import_node_path55.join)(root, modelFile)), rounds },
     properties: report.properties,
     findings
   });
@@ -38570,7 +38673,7 @@ async function generateAndCheck(root, req, opts) {
     }
     const rel = `${dir}/${gen.name}.lean`;
     writeFileInRootNoFollow(root, rel, gen.source);
-    const abs = resolveModelFile(root, rel) ?? (0, import_node_path54.join)(root, rel);
+    const abs = resolveModelFile(root, rel) ?? (0, import_node_path55.join)(root, rel);
     const report = await opts.deps.check(root, abs);
     const abstracts = report.header?.abstracts ?? [];
     const stray = abstracts.find((a) => !headerFiles.has(a.file)) ?? (abstracts[0] && abstracts[0].file !== req.file ? abstracts[0] : void 0);
@@ -38960,7 +39063,7 @@ var WRITERS_BUDGET_MS = 1500;
 var EXCERPT_MAX_LINES2 = 30;
 var VENDORED_READ_MAX_BYTES = 256 * 1024;
 var GUARD_BLOCK_CAP = 2;
-var GUARD_ITER_FILE = (0, import_node_path55.join)(VERITY_DIR, ".guard-iteration");
+var GUARD_ITER_FILE = (0, import_node_path56.join)(VERITY_DIR, ".guard-iteration");
 function readPreToolUseStdin() {
   const empty = { command: "", cwd: null, sessionId: null };
   return new Promise((resolve9) => {
@@ -39130,11 +39233,11 @@ function buildGuardRequest(moment, files, codeDelta, iter, sessionId, statedInte
     }
   };
   if (coverageTelemetry) requestBody2.coverage_telemetry = coverageTelemetry;
-  const docs2 = discoverGuardDocs(files);
-  if (docs2.length > 0 || statedIntent) {
+  const docs = discoverGuardDocs(files);
+  if (docs.length > 0 || statedIntent) {
     const intentContext = {};
     if (statedIntent) intentContext.user_prompt = statedIntent;
-    if (docs2.length > 0) intentContext.plans = docs2;
+    if (docs.length > 0) intentContext.plans = docs;
     requestBody2.intent_context = intentContext;
   }
   return requestBody2;
@@ -39819,14 +39922,14 @@ function registerWaiveCommand(program2) {
 }
 
 // src/commands/init/index.ts
-var import_node_fs74 = require("node:fs");
+var import_node_fs76 = require("node:fs");
 var import_promises19 = require("node:fs/promises");
-var import_node_path60 = require("node:path");
+var import_node_path64 = require("node:path");
 
 // src/lib/init-trace.ts
 var import_node_crypto23 = require("node:crypto");
 var import_node_fs69 = require("node:fs");
-var import_node_path56 = require("node:path");
+var import_node_path57 = require("node:path");
 var INIT_STEPS = [
   "started",
   "prerequisites",
@@ -39872,9 +39975,9 @@ function traceDisabled(env = process.env) {
 }
 var PENDING_NAME = "init-trace.json";
 var MAX_PENDING_BYTES = 64 * 1024;
-var verityHome2 = () => (0, import_node_path56.join)(process.env.HOME ?? "", ".verity");
+var verityHome2 = () => (0, import_node_path57.join)(process.env.HOME ?? "", ".verity");
 function pendingTracePath() {
-  return (0, import_node_path56.join)(verityHome2(), PENDING_NAME);
+  return (0, import_node_path57.join)(verityHome2(), PENDING_NAME);
 }
 var RUN_ID = /^[0-9a-f]{16}$/;
 var CLI_VERSION = /^[0-9A-Za-z.+-]{1,40}$/;
@@ -40629,20 +40732,201 @@ var Rail = class {
 };
 
 // src/commands/migrate.ts
-var import_node_fs70 = require("node:fs");
-var import_node_path57 = require("node:path");
-var import_node_child_process18 = require("node:child_process");
+var import_node_fs71 = require("node:fs");
+var import_node_path61 = require("node:path");
+var import_node_child_process19 = require("node:child_process");
 
-// src/lib/telemetry.ts
+// src/lib/telemetry-local.ts
+var import_node_path59 = require("node:path");
+
+// src/lib/telemetry-settings.ts
 var import_promises16 = require("node:fs/promises");
+var import_node_os12 = require("node:os");
+var import_node_path58 = require("node:path");
 var SETTINGS_LOCAL_FILE2 = ".claude/settings.local.json";
-var GITIGNORE_FILE = ".gitignore";
-var GITIGNORE_ENTRY = SETTINGS_LOCAL_IGNORE_ENTRY;
 var OTEL_HEADERS_HELPER_CMD = "verity telemetry headers";
-var LEGACY_TELEMETRY_ENV_KEYS = ["OTEL_EXPORTER_OTLP_HEADERS"];
+var LEGACY_HEADER_KEY = "OTEL_EXPORTER_OTLP_HEADERS";
+var OTLP_ENDPOINT_KEYS = [
+  "OTEL_EXPORTER_OTLP_ENDPOINT",
+  "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT",
+  "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT",
+  "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT"
+];
+function claudeConfigDir2() {
+  return process.env.CLAUDE_CONFIG_DIR || (0, import_node_path58.join)((0, import_node_os12.homedir)(), ".claude");
+}
+function userSettingsPath() {
+  return (0, import_node_path58.join)(claudeConfigDir2(), "settings.json");
+}
 function deriveOtlpEndpoint(serviceUrl) {
   return serviceUrl.replace(/\/+$/, "").replace(/\/v1$/, "") + "/v1/otlp";
 }
+function isVerityOtlpEndpoint(value, also) {
+  if (typeof value !== "string" || value.trim() === "") return false;
+  if (also && value.replace(/\/+$/, "") === also.replace(/\/+$/, "")) return true;
+  try {
+    return /\/functions\/v1\/otlp\/?$/.test(new URL(value).pathname);
+  } catch {
+    return false;
+  }
+}
+function sameUrl(a, b) {
+  const norm3 = (raw) => {
+    const trimmed = raw.trim().replace(/\/+$/, "");
+    try {
+      const u = new URL(trimmed);
+      return `${u.protocol}//${u.host.toLowerCase()}${u.pathname.replace(/\/+$/, "")}`;
+    } catch {
+      return trimmed.toLowerCase();
+    }
+  };
+  return norm3(a) === norm3(b);
+}
+function envOf(settings) {
+  const env = settings.env;
+  return env && typeof env === "object" && !Array.isArray(env) ? env : {};
+}
+function displayPath(path) {
+  const home = (0, import_node_os12.homedir)();
+  return home && path.startsWith(home + "/") ? "~" + path.slice(home.length) : path;
+}
+async function readSettingsFile(path) {
+  let raw;
+  try {
+    raw = await (0, import_promises16.readFile)(path, "utf-8");
+  } catch (err2) {
+    if (err2.code === "ENOENT") return { ok: true, settings: {}, exists: false };
+    return { ok: false, error: `Could not read ${displayPath(path)}: ${err2.message}` };
+  }
+  try {
+    const parsed = raw.trim() === "" ? {} : JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return { ok: false, error: `${displayPath(path)} is not a JSON object. Fix it, then run the command again. Nothing was changed.` };
+    }
+    return { ok: true, settings: parsed, exists: true };
+  } catch {
+    return { ok: false, error: `${displayPath(path)} is not valid JSON. Fix it, then run the command again. Nothing was changed.` };
+  }
+}
+
+// src/lib/telemetry-local.ts
+var MAX_LOCAL_SETTINGS_BYTES = 1024 * 1024;
+function nextLocalBytes(raw, value) {
+  try {
+    if (jsonSemanticEqual(JSON.parse(raw), value)) return null;
+  } catch {
+  }
+  const next = JSON.stringify(value, null, detectJsonIndent(raw)) + "\n";
+  return next === raw ? null : next;
+}
+var OLD_LOCAL_WRITER_VALUES = {
+  CLAUDE_CODE_ENABLE_TELEMETRY: "1",
+  OTEL_METRICS_EXPORTER: "otlp",
+  OTEL_TRACES_EXPORTER: "otlp",
+  CLAUDE_CODE_ENHANCED_TELEMETRY_BETA: "1",
+  OTEL_EXPORTER_OTLP_PROTOCOL: "http/json",
+  OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE: "delta",
+  OTEL_LOG_USER_PROMPTS: "0",
+  OTEL_LOG_TOOL_DETAILS: "0",
+  OTEL_LOG_TOOL_CONTENT: "0",
+  OTEL_METRICS_INCLUDE_SESSION_ID: "true",
+  OTEL_METRICS_INCLUDE_ACCOUNT_UUID: "false",
+  OTEL_METRICS_INCLUDE_VERSION: "false",
+  OTEL_METRIC_EXPORT_INTERVAL: "60000"
+};
+var LEGACY_VERITY_HEADER = /^Authorization=Bearer (?:verity|gate)_/;
+function planLocalHeal(settings) {
+  const env = envOf(settings);
+  const envKeys = [];
+  if (typeof env[LEGACY_HEADER_KEY] === "string" && LEGACY_VERITY_HEADER.test(env[LEGACY_HEADER_KEY])) {
+    envKeys.push(LEGACY_HEADER_KEY);
+  }
+  if (isVerityOtlpEndpoint(env.OTEL_EXPORTER_OTLP_ENDPOINT)) {
+    envKeys.push("OTEL_EXPORTER_OTLP_ENDPOINT");
+    for (const [key, value] of Object.entries(OLD_LOCAL_WRITER_VALUES)) {
+      if (env[key] === value) envKeys.push(key);
+    }
+  }
+  return { envKeys, helper: settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD };
+}
+function readLocalSettings(root) {
+  const read2 = readRegularFileInRoot(root, SETTINGS_LOCAL_FILE2, MAX_LOCAL_SETTINGS_BYTES);
+  if (!read2.ok) return null;
+  try {
+    const parsed = JSON.parse(read2.content);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+    return { raw: read2.content, settings: parsed };
+  } catch {
+    return null;
+  }
+}
+function localTelemetryLeftovers(root = repoRoot()) {
+  const local = readLocalSettings(root);
+  if (!local) return [];
+  const plan = planLocalHeal(local.settings);
+  return [...plan.envKeys, ...plan.helper ? ["otelHeadersHelper"] : []];
+}
+async function healLocalTelemetry(root = repoRoot()) {
+  const local = readLocalSettings(root);
+  if (!local) return { removed: [] };
+  const settings = local.settings;
+  const plan = planLocalHeal(settings);
+  if (plan.envKeys.length === 0 && !plan.helper) return { removed: [] };
+  const env = envOf(settings);
+  for (const key of plan.envKeys) delete env[key];
+  if (settings.env && Object.keys(env).length === 0) delete settings.env;
+  if (plan.helper) delete settings.otelHeadersHelper;
+  const next = nextLocalBytes(local.raw, settings);
+  if (next !== null && !replaceInRoot((0, import_node_path59.join)(root, ".claude"), "settings.local.json", next)) {
+    return { removed: [] };
+  }
+  return { removed: [...plan.envKeys, ...plan.helper ? ["otelHeadersHelper"] : []] };
+}
+
+// src/lib/telemetry-gate.ts
+var import_node_child_process18 = require("node:child_process");
+var import_node_fs70 = require("node:fs");
+var import_node_path60 = require("node:path");
+var PROJECT_MARKERS = ["setup.json", "config.json"];
+function writtenOnThisMachine(root, rel) {
+  const r = (0, import_node_child_process18.spawnSync)("git", hardenedGitArgv(["ls-files", "--error-unmatch", "--", rel]), {
+    cwd: root,
+    env: hardenedGitEnv(),
+    encoding: "utf-8",
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: 5e3
+  });
+  if (r.status === 1) return true;
+  if (r.status === 128 && /not a git repository/i.test(r.stderr ?? "")) return true;
+  return false;
+}
+function isTelemetryProject() {
+  for (const root of [repoRoot(), mainWorktreeRoot()]) {
+    if (!root) continue;
+    const dir = (0, import_node_path60.join)(root, VERITY_DIR);
+    if (isMachineStore(dir)) continue;
+    for (const marker of PROJECT_MARKERS) {
+      if ((0, import_node_fs70.existsSync)((0, import_node_path60.join)(dir, marker)) && writtenOnThisMachine(root, `${VERITY_DIR}/${marker}`)) return true;
+    }
+  }
+  return false;
+}
+async function telemetryPinRefusal(token, endpoint) {
+  const serviceUrl = endpoint.trim().replace(/\/+$/, "").replace(/\/otlp$/, "");
+  const pin = await checkTokenPin(token, serviceUrl);
+  if (pin.attach) return null;
+  if (pin.reason === "mismatch" && sameUrl(deriveOtlpEndpoint(pin.mintedFor), endpoint)) return null;
+  return pinRefusalMessage(pin, serviceUrl);
+}
+async function sessionExportEndpoints() {
+  const pick = (env) => OTLP_ENDPOINT_KEYS.map((key) => env[key]).filter((v) => typeof v === "string" && v.trim() !== "");
+  const fromEnv = pick(process.env);
+  if (fromEnv.length > 0) return fromEnv;
+  const read2 = await readSettingsFile(userSettingsPath());
+  return read2.ok ? pick(envOf(read2.settings)) : [];
+}
+
+// src/lib/telemetry.ts
 function buildTelemetryEnv(serviceUrl) {
   return {
     CLAUDE_CODE_ENABLE_TELEMETRY: "1",
@@ -40658,79 +40942,110 @@ function buildTelemetryEnv(serviceUrl) {
     OTEL_METRICS_INCLUDE_SESSION_ID: "true",
     OTEL_METRICS_INCLUDE_ACCOUNT_UUID: "false",
     OTEL_METRICS_INCLUDE_VERSION: "false",
+    OTEL_METRICS_INCLUDE_REPOSITORY: "true",
     OTEL_METRIC_EXPORT_INTERVAL: "60000"
   };
 }
 var VERITY_TELEMETRY_KEYS = Object.keys(buildTelemetryEnv(""));
-async function readSettingsLocal() {
-  try {
-    return JSON.parse(await (0, import_promises16.readFile)(projectPath(SETTINGS_LOCAL_FILE2), "utf-8"));
-  } catch {
-    return {};
+var EXPORTER_KEYS = ["OTEL_METRICS_EXPORTER", "OTEL_TRACES_EXPORTER"];
+function foreignExportKey(settings, endpoint) {
+  const helper = settings.otelHeadersHelper;
+  if (typeof helper === "string" && helper.trim() !== "" && helper !== OTEL_HEADERS_HELPER_CMD) {
+    return "otelHeadersHelper";
+  }
+  const env = envOf(settings);
+  for (const key of OTLP_ENDPOINT_KEYS) {
+    const value = env[key];
+    if (value !== void 0 && value !== "" && !isVerityOtlpEndpoint(value, endpoint)) return key;
+  }
+  if (env[LEGACY_HEADER_KEY] !== void 0 && env[LEGACY_HEADER_KEY] !== "") return LEGACY_HEADER_KEY;
+  for (const key of EXPORTER_KEYS) {
+    const value = env[key];
+    if (value !== void 0 && value !== "" && value !== "otlp") return key;
   }
+  return null;
 }
-async function writeSettingsLocal(settings) {
-  await writeJsonFilePreservingStyle(projectPath(SETTINGS_LOCAL_FILE2), settings);
-}
-async function ensureGitignore() {
-  const file = projectPath(GITIGNORE_FILE);
-  let content = "";
-  try {
-    content = await (0, import_promises16.readFile)(file, "utf-8");
-  } catch {
+async function installTelemetry(serviceUrl, opts = {}) {
+  const path = userSettingsPath();
+  const read2 = await readSettingsFile(path);
+  if (!read2.ok) return { ok: false, error: read2.error };
+  const settings = read2.settings;
+  const env = buildTelemetryEnv(serviceUrl);
+  const foreign = foreignExportKey(settings, env.OTEL_EXPORTER_OTLP_ENDPOINT);
+  if (foreign) {
+    return {
+      ok: false,
+      error: `Telemetry not installed: ${displayPath(path)} already sets ${foreign}, so you export somewhere else already. Nothing was changed.`
+    };
   }
-  const lines = content.split("\n").map((l) => l.trim());
-  if (lines.includes(GITIGNORE_ENTRY) || lines.includes(".claude/") || lines.includes(".claude")) {
-    return;
+  let token = opts.token;
+  if (!token) {
+    const resolved = await resolveToken();
+    if (!resolved.ok) {
+      return { ok: false, error: 'Telemetry not installed: no Verity token on this machine. Run "verity login". Nothing was changed.' };
+    }
+    token = resolved.data.token;
   }
-  const block = "# Verity telemetry \u2014 machine-local Claude Code settings\n" + GITIGNORE_ENTRY + "\n";
-  const next = content ? content + (content.endsWith("\n") ? "" : "\n") + "\n" + block : block;
-  await (0, import_promises16.writeFile)(file, next);
-}
-async function installTelemetry(serviceUrl) {
-  const env = buildTelemetryEnv(serviceUrl);
-  const settings = await readSettingsLocal();
-  settings.env = { ...settings.env ?? {}, ...env };
-  for (const key of LEGACY_TELEMETRY_ENV_KEYS) delete settings.env[key];
+  const refusal = await telemetryPinRefusal(token, env.OTEL_EXPORTER_OTLP_ENDPOINT);
+  if (refusal) {
+    return { ok: false, error: `Telemetry not installed: ${refusal} Nothing was changed.` };
+  }
+  settings.env = { ...envOf(settings), ...env };
   settings.otelHeadersHelper = OTEL_HEADERS_HELPER_CMD;
-  await writeSettingsLocal(settings);
-  await ensureGitignore();
-  return { ok: true, data: { endpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT } };
+  await writeJsonFilePreservingStyle(path, settings);
+  const healed = await healLocalTelemetry();
+  return {
+    ok: true,
+    data: { endpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT, settingsPath: path, healedLocalKeys: healed.removed }
+  };
 }
 async function checkTelemetry() {
-  const env = (await readSettingsLocal()).env ?? {};
-  const enabled = env.CLAUDE_CODE_ENABLE_TELEMETRY === "1" && !!env.OTEL_EXPORTER_OTLP_ENDPOINT;
-  return { enabled, endpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT ?? null, settingsPath: SETTINGS_LOCAL_FILE2 };
+  const path = userSettingsPath();
+  const read2 = await readSettingsFile(path);
+  const settings = read2.ok ? read2.settings : {};
+  const env = envOf(settings);
+  const endpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT || null;
+  const enabled = env.CLAUDE_CODE_ENABLE_TELEMETRY === "1" && !!endpoint && settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD;
+  return { enabled, endpoint, settingsPath: path, staleLocalKeys: localTelemetryLeftovers() };
 }
 async function uninstallTelemetry() {
-  const settings = await readSettingsLocal();
-  const hadHelper = settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD;
-  if (hadHelper) delete settings.otelHeadersHelper;
-  if (!settings.env) {
-    if (hadHelper) await writeSettingsLocal(settings);
-    return { ok: true, data: { removed: 0 } };
-  }
+  const path = userSettingsPath();
+  const read2 = await readSettingsFile(path);
+  if (!read2.ok) return { ok: false, error: read2.error };
+  const settings = read2.settings;
+  const env = envOf(settings);
   let removed = 0;
-  for (const key of VERITY_TELEMETRY_KEYS) {
-    if (key in settings.env) {
-      delete settings.env[key];
-      removed++;
+  const endpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT;
+  const foreignEndpoint = endpoint !== void 0 && endpoint !== "" && !isVerityOtlpEndpoint(endpoint);
+  if (isVerityOtlpEndpoint(endpoint)) {
+    const verityValues = buildTelemetryEnv("");
+    for (const key of VERITY_TELEMETRY_KEYS) {
+      if (key === "OTEL_EXPORTER_OTLP_ENDPOINT" || env[key] === verityValues[key]) {
+        if (key in env) {
+          delete env[key];
+          removed++;
+        }
+      }
     }
+    if (settings.otelHeadersHelper === OTEL_HEADERS_HELPER_CMD) delete settings.otelHeadersHelper;
+    if (settings.env && Object.keys(env).length === 0) delete settings.env;
+    await writeJsonFilePreservingStyle(path, settings);
   }
-  for (const key of LEGACY_TELEMETRY_ENV_KEYS) delete settings.env[key];
-  if (Object.keys(settings.env).length === 0) delete settings.env;
-  await writeSettingsLocal(settings);
-  return { ok: true, data: { removed } };
+  const healed = await healLocalTelemetry();
+  return { ok: true, data: { removed, settingsPath: path, foreignEndpoint, healedLocalKeys: healed.removed } };
 }
 
 // src/commands/migrate.ts
 var LEGACY_NPM_PACKAGE = "@codacy/gate-cli";
 function defaultNpmRemover(pkg) {
-  (0, import_node_child_process18.execSync)(`npm rm -g ${pkg}`, { stdio: "pipe", timeout: 12e4 });
+  (0, import_node_child_process19.execSync)(`npm rm -g ${pkg}`, { stdio: "pipe", timeout: 12e4 });
+}
+function git2(cwd, args2) {
+  (0, import_node_child_process19.execFileSync)("git", hardenedGitArgv(args2), { cwd, stdio: "pipe", env: hardenedGitEnv() });
 }
 function isGitTracked(cwd, relPath) {
   try {
-    (0, import_node_child_process18.execSync)(`git ls-files --error-unmatch ${relPath}`, { cwd, stdio: "pipe" });
+    git2(cwd, ["ls-files", "--error-unmatch", "--", relPath]);
     return true;
   } catch {
     return false;
@@ -40738,7 +41053,7 @@ function isGitTracked(cwd, relPath) {
 }
 function isGitRepo(cwd) {
   try {
-    (0, import_node_child_process18.execSync)("git rev-parse --is-inside-work-tree", { cwd, stdio: "pipe" });
+    git2(cwd, ["rev-parse", "--is-inside-work-tree"]);
     return true;
   } catch {
     return false;
@@ -40754,17 +41069,17 @@ async function runMigration(opts = {}) {
   await migrateLegacyHooks(root, actions);
   await migrateClaudeMd(root, actions);
   migrateStandardFile(root, actions);
-  await migrateTelemetryHeaders(root, actions);
+  await migrateLocalTelemetry(root, actions);
   removeLegacyPackage(movedProjectDir, npmRemover, actions);
   return { actions, migrated: actions.length > 0 };
 }
 function migrateProjectDir(root, actions) {
-  const gateDir = (0, import_node_path57.join)(root, ".gate");
-  const verityDir = (0, import_node_path57.join)(root, ".verity");
-  if ((0, import_node_fs70.existsSync)(gateDir) && !(0, import_node_fs70.existsSync)(verityDir)) {
+  const gateDir = (0, import_node_path61.join)(root, ".gate");
+  const verityDir = (0, import_node_path61.join)(root, ".verity");
+  if ((0, import_node_fs71.existsSync)(gateDir) && !(0, import_node_fs71.existsSync)(verityDir)) {
     return migrateProjectDirRename(root, gateDir, verityDir, actions);
   }
-  if ((0, import_node_fs70.existsSync)(gateDir) && (0, import_node_fs70.existsSync)(verityDir)) {
+  if ((0, import_node_fs71.existsSync)(gateDir) && (0, import_node_fs71.existsSync)(verityDir)) {
     return migrateProjectDirCarry(gateDir, verityDir, actions);
   }
   return false;
@@ -40778,20 +41093,20 @@ function migrateProjectDirRename(root, gateDir, verityDir, actions) {
       );
     }
     try {
-      (0, import_node_child_process18.execSync)("git mv .gate .verity", { cwd: root, stdio: "pipe" });
+      git2(root, ["mv", "--", ".gate", ".verity"]);
       actions.push("Moved .gate/ \u2192 .verity/ (git mv, staged)");
       moved = true;
     } catch {
     }
   }
   if (moved) {
-    if ((0, import_node_fs70.existsSync)(gateDir)) {
+    if ((0, import_node_fs71.existsSync)(gateDir)) {
       const carried = carryLegacyContents(gateDir, verityDir);
       if (carried > 0) {
         actions.push(`Carried ${carried} untracked legacy file(s) from .gate/ into .verity/`);
       }
       try {
-        (0, import_node_fs70.rmSync)(gateDir, { recursive: true, force: true });
+        (0, import_node_fs71.rmSync)(gateDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -40807,18 +41122,18 @@ function migrateProjectDirCarry(gateDir, verityDir, actions) {
     actions.push(`Carried ${carried} legacy file(s) from .gate/ into .verity/`);
   }
   try {
-    (0, import_node_fs70.rmSync)(gateDir, { recursive: true, force: true });
+    (0, import_node_fs71.rmSync)(gateDir, { recursive: true, force: true });
   } catch {
   }
   return carried > 0;
 }
 function migrateGlobalCredentials(home, actions) {
   if (!home) return;
-  const gateCreds = (0, import_node_path57.join)(home, ".gate", "credentials");
-  const verityCreds = (0, import_node_path57.join)(home, ".verity", "credentials");
-  if (!(0, import_node_fs70.existsSync)(gateCreds)) return;
-  if (!(0, import_node_fs70.existsSync)(verityCreds)) {
-    (0, import_node_fs70.mkdirSync)((0, import_node_path57.join)(home, ".verity"), { recursive: true });
+  const gateCreds = (0, import_node_path61.join)(home, ".gate", "credentials");
+  const verityCreds = (0, import_node_path61.join)(home, ".verity", "credentials");
+  if (!(0, import_node_fs71.existsSync)(gateCreds)) return;
+  if (!(0, import_node_fs71.existsSync)(verityCreds)) {
+    (0, import_node_fs71.mkdirSync)((0, import_node_path61.join)(home, ".verity"), { recursive: true });
     moveFile(gateCreds, verityCreds);
     actions.push("Moved ~/.gate/credentials \u2192 ~/.verity/credentials");
     return;
@@ -40840,8 +41155,8 @@ async function migrateLegacyHooks(root, actions) {
   }
 }
 async function migrateClaudeMd(root, actions) {
-  const claudeMd = (0, import_node_path57.join)(root, "CLAUDE.md");
-  const hadLegacyBlock = (0, import_node_fs70.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
+  const claudeMd = (0, import_node_path61.join)(root, "CLAUDE.md");
+  const hadLegacyBlock = (0, import_node_fs71.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd));
   if (!hadLegacyBlock) return;
   try {
     await ensureClaudeMdPointer(root);
@@ -40851,13 +41166,13 @@ async function migrateClaudeMd(root, actions) {
   }
 }
 function migrateStandardFile(root, actions) {
-  const gateMd = (0, import_node_path57.join)(root, "GATE.md");
-  const verityMd = (0, import_node_path57.join)(root, "VERITY.md");
-  if (!(0, import_node_fs70.existsSync)(gateMd) || (0, import_node_fs70.existsSync)(verityMd)) return;
+  const gateMd = (0, import_node_path61.join)(root, "GATE.md");
+  const verityMd = (0, import_node_path61.join)(root, "VERITY.md");
+  if (!(0, import_node_fs71.existsSync)(gateMd) || (0, import_node_fs71.existsSync)(verityMd)) return;
   let moved = false;
   if (isGitRepo(root) && isGitTracked(root, "GATE.md")) {
     try {
-      (0, import_node_child_process18.execSync)("git mv GATE.md VERITY.md", { cwd: root, stdio: "pipe" });
+      git2(root, ["mv", "--", "GATE.md", "VERITY.md"]);
       moved = true;
     } catch {
     }
@@ -40865,27 +41180,15 @@ function migrateStandardFile(root, actions) {
   if (!moved) moveFile(gateMd, verityMd);
   const content = readFileSyncSafe(verityMd);
   const refreshed = content.split("GATE.md").join("VERITY.md");
-  if (refreshed !== content) (0, import_node_fs70.writeFileSync)(verityMd, refreshed);
+  if (refreshed !== content) (0, import_node_fs71.writeFileSync)(verityMd, refreshed);
   actions.push("Renamed GATE.md \u2192 VERITY.md");
 }
-async function migrateTelemetryHeaders(root, actions) {
-  const file = (0, import_node_path57.join)(root, ".claude", "settings.local.json");
-  if (!(0, import_node_fs70.existsSync)(file)) return;
-  let settings;
-  try {
-    settings = JSON.parse(readFileSyncSafe(file) || "{}");
-  } catch {
-    return;
-  }
-  const env = settings.env;
-  const hasInlineHeader = !!env && "OTEL_EXPORTER_OTLP_HEADERS" in env;
-  const telemetryEnabled = env?.CLAUDE_CODE_ENABLE_TELEMETRY === "1";
-  const needsHelper = telemetryEnabled && settings.otelHeadersHelper !== OTEL_HEADERS_HELPER_CMD;
-  if (!hasInlineHeader && !needsHelper) return;
-  if (hasInlineHeader && env) delete env["OTEL_EXPORTER_OTLP_HEADERS"];
-  if (telemetryEnabled) settings.otelHeadersHelper = OTEL_HEADERS_HELPER_CMD;
-  await writeJsonFilePreservingStyle(file, settings);
-  actions.push("Moved the telemetry token out of .claude/settings.local.json (now resolved at runtime)");
+async function migrateLocalTelemetry(root, actions) {
+  const { removed } = await healLocalTelemetry(root);
+  if (removed.length === 0) return;
+  actions.push(
+    `Removed ${removed.length} old Verity telemetry key(s) from ${SETTINGS_LOCAL_FILE2} (Claude Code ignores them there). Run "verity telemetry install" to export from this machine.`
+  );
 }
 function removeLegacyPackage(movedProjectDir, npmRemover, actions) {
   if (!movedProjectDir) return;
@@ -40918,21 +41221,21 @@ function mergeGlobalCredentials(gateCreds, verityCreds) {
   }
   if (toAppend.length > 0) {
     const sep7 = verityContent.endsWith("\n") || verityContent === "" ? "" : "\n";
-    (0, import_node_fs70.writeFileSync)(verityCreds, verityContent + sep7 + toAppend.join("\n") + "\n");
+    (0, import_node_fs71.writeFileSync)(verityCreds, verityContent + sep7 + toAppend.join("\n") + "\n");
   }
-  (0, import_node_fs70.rmSync)(gateCreds, { force: true });
+  (0, import_node_fs71.rmSync)(gateCreds, { force: true });
   return toAppend.length;
 }
 function readFileSyncSafe(path) {
   try {
-    return (0, import_node_fs70.readFileSync)(path, "utf-8");
+    return (0, import_node_fs71.readFileSync)(path, "utf-8");
   } catch {
     return "";
   }
 }
 function hasStagedChanges(root) {
   try {
-    (0, import_node_child_process18.execSync)("git diff --cached --quiet", { cwd: root, stdio: "pipe" });
+    git2(root, ["diff", "--cached", "--quiet", ...DIFF_READ_FLAGS]);
     return false;
   } catch {
     return true;
@@ -40940,59 +41243,90 @@ function hasStagedChanges(root) {
 }
 function moveDir(from, to) {
   try {
-    (0, import_node_fs70.renameSync)(from, to);
+    (0, import_node_fs71.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs70.cpSync)(from, to, { recursive: true });
-    (0, import_node_fs70.rmSync)(from, { recursive: true, force: true });
+    (0, import_node_fs71.cpSync)(from, to, { recursive: true });
+    (0, import_node_fs71.rmSync)(from, { recursive: true, force: true });
   }
 }
 function moveFile(from, to) {
   try {
-    (0, import_node_fs70.renameSync)(from, to);
+    (0, import_node_fs71.renameSync)(from, to);
   } catch (err2) {
     if (err2.code !== "EXDEV") throw err2;
-    (0, import_node_fs70.cpSync)(from, to);
-    (0, import_node_fs70.rmSync)(from, { force: true });
+    (0, import_node_fs71.cpSync)(from, to);
+    (0, import_node_fs71.rmSync)(from, { force: true });
   }
 }
 function carryLegacyContents(gateDir, verityDir) {
+  if (!isRealDir(gateDir) || !isRealDir(verityDir)) return 0;
   let copied = 0;
   const walk2 = (relDir) => {
-    const srcDir = (0, import_node_path57.join)(gateDir, relDir);
-    for (const entry of (0, import_node_fs70.readdirSync)(srcDir)) {
-      const rel = relDir ? (0, import_node_path57.join)(relDir, entry) : entry;
-      const src = (0, import_node_path57.join)(gateDir, rel);
-      const dest = (0, import_node_path57.join)(verityDir, rel);
-      if ((0, import_node_fs70.statSync)(src).isDirectory()) {
+    let entries;
+    try {
+      entries = (0, import_node_fs71.readdirSync)((0, import_node_path61.join)(gateDir, relDir), { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const rel = relDir ? (0, import_node_path61.join)(relDir, entry.name) : entry.name;
+      if (entry.isSymbolicLink()) continue;
+      if (entry.isDirectory()) {
         walk2(rel);
-      } else if (!(0, import_node_fs70.existsSync)(dest)) {
-        (0, import_node_fs70.mkdirSync)((0, import_node_path57.dirname)(dest), { recursive: true });
-        (0, import_node_fs70.cpSync)(src, dest);
+        continue;
+      }
+      if (!entry.isFile() || !ensureRealDirs(verityDir, relDir)) continue;
+      const opened = openRegularInRoot(gateDir, rel);
+      if (!opened.ok) continue;
+      try {
+        (0, import_node_fs71.writeFileSync)((0, import_node_path61.join)(verityDir, rel), readOpened(opened.fd, opened.size), { flag: "wx", mode: 384 });
         copied++;
+      } catch {
       }
     }
   };
   walk2("");
   return copied;
 }
+function isRealDir(path) {
+  try {
+    const st = (0, import_node_fs71.lstatSync)(path);
+    return st.isDirectory() && !st.isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function ensureRealDirs(root, relDir) {
+  let current = root;
+  for (const segment of relDir.split(/[\\/]/).filter(Boolean)) {
+    current = (0, import_node_path61.join)(current, segment);
+    try {
+      (0, import_node_fs71.mkdirSync)(current);
+    } catch (e) {
+      if (e.code !== "EEXIST") return false;
+    }
+    if (!isRealDir(current)) return false;
+  }
+  return true;
+}
 async function needsMigration(root = repoRoot()) {
-  const gateDir = (0, import_node_path57.join)(root, ".gate");
-  const verityDir = (0, import_node_path57.join)(root, ".verity");
-  if ((0, import_node_fs70.existsSync)(gateDir) && !(0, import_node_fs70.existsSync)(verityDir)) return true;
-  if ((0, import_node_fs70.existsSync)(gateDir) && (0, import_node_fs70.existsSync)(verityDir)) {
-    if ((0, import_node_fs70.existsSync)((0, import_node_path57.join)(gateDir, "credentials")) && !(0, import_node_fs70.existsSync)((0, import_node_path57.join)(verityDir, "credentials"))) {
+  const gateDir = (0, import_node_path61.join)(root, ".gate");
+  const verityDir = (0, import_node_path61.join)(root, ".verity");
+  if ((0, import_node_fs71.existsSync)(gateDir) && !(0, import_node_fs71.existsSync)(verityDir)) return true;
+  if ((0, import_node_fs71.existsSync)(gateDir) && (0, import_node_fs71.existsSync)(verityDir)) {
+    if ((0, import_node_fs71.existsSync)((0, import_node_path61.join)(gateDir, "credentials")) && !(0, import_node_fs71.existsSync)((0, import_node_path61.join)(verityDir, "credentials"))) {
       return true;
     }
-    if ((0, import_node_fs70.existsSync)((0, import_node_path57.join)(gateDir, "memory")) && !(0, import_node_fs70.existsSync)((0, import_node_path57.join)(verityDir, "memory"))) {
+    if ((0, import_node_fs71.existsSync)((0, import_node_path61.join)(gateDir, "memory")) && !(0, import_node_fs71.existsSync)((0, import_node_path61.join)(verityDir, "memory"))) {
       return true;
     }
   }
-  const claudeMd = (0, import_node_path57.join)(root, "CLAUDE.md");
-  if ((0, import_node_fs70.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
+  const claudeMd = (0, import_node_path61.join)(root, "CLAUDE.md");
+  if ((0, import_node_fs71.existsSync)(claudeMd) && hasLegacyMemoryBlock(readFileSyncSafe(claudeMd))) {
     return true;
   }
-  if ((0, import_node_fs70.existsSync)((0, import_node_path57.join)(root, "GATE.md")) && !(0, import_node_fs70.existsSync)((0, import_node_path57.join)(root, "VERITY.md"))) {
+  if ((0, import_node_fs71.existsSync)((0, import_node_path61.join)(root, "GATE.md")) && !(0, import_node_fs71.existsSync)((0, import_node_path61.join)(root, "VERITY.md"))) {
     return true;
   }
   if (await hasLegacyHooksAt(root)) return true;
@@ -41018,10 +41352,10 @@ function registerMigrateCommand(program2) {
 }
 
 // src/commands/init/ui.ts
-var import_node_fs71 = require("node:fs");
-var import_node_path58 = require("node:path");
-var import_node_os12 = require("node:os");
-var import_node_child_process19 = require("node:child_process");
+var import_node_fs72 = require("node:fs");
+var import_node_path62 = require("node:path");
+var import_node_os13 = require("node:os");
+var import_node_child_process20 = require("node:child_process");
 function createInitUi(opts) {
   const term = opts.term ?? detectTerm();
   const screen = new Screen(term);
@@ -41038,25 +41372,26 @@ function installInterrupt(ui) {
   process.once("SIGINT", stop2);
 }
 var SEEN_FILE = ".init-seen";
-function firstInitOnMachine(home = process.env.HOME || (0, import_node_os12.homedir)()) {
-  return !(0, import_node_fs71.existsSync)((0, import_node_path58.join)(home, ".verity", SEEN_FILE));
+function firstInitOnMachine(home = process.env.HOME || (0, import_node_os13.homedir)()) {
+  return !(0, import_node_fs72.existsSync)((0, import_node_path62.join)(home, ".verity", SEEN_FILE));
 }
-function markInitSeen(home = process.env.HOME || (0, import_node_os12.homedir)()) {
-  replaceInRoot((0, import_node_path58.join)(home, ".verity"), SEEN_FILE, `${(/* @__PURE__ */ new Date()).toISOString()}
+function markInitSeen(home = process.env.HOME || (0, import_node_os13.homedir)()) {
+  replaceInRoot((0, import_node_path62.join)(home, ".verity"), SEEN_FILE, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
 }
 function repoLabel() {
   try {
-    const url = (0, import_node_child_process19.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    const url = (0, import_node_child_process20.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
     const parsed = parseRemote(url);
     if (parsed) return terminalText(`${parsed.owner}/${parsed.repo}`, 120);
   } catch {
   }
-  return terminalText((0, import_node_path58.basename)(repoRoot()), 120);
+  return terminalText((0, import_node_path62.basename)(repoRoot()), 120);
 }
 
 // src/lib/prereqs.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process21 = require("node:child_process");
+var import_node_fs73 = require("node:fs");
 var MIN_NODE_MAJOR = 20;
 function which(bin) {
   return whichSync(bin, { real: false });
@@ -41077,7 +41412,7 @@ function checkNode() {
 function checkGit() {
   let detail = "";
   try {
-    detail = (0, import_node_child_process20.execSync)("git --version", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    detail = (0, import_node_child_process21.execSync)("git --version", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return {
       id: "git",
@@ -41101,21 +41436,38 @@ function checkClaude() {
     required: false
   };
 }
-function checkAnalysisCli() {
-  const path = which("codacy-analysis");
+var ANALYSIS_CLI_REMEDY = "Reinstall Verity, which includes it: npm install -g @codacy/verity-cli";
+function checkAnalysisCli(opts = {}) {
+  const base = { id: "analysis-cli", label: "@codacy/analysis-cli", required: false };
+  const analyzer = resolveAnalyzer(opts);
+  const shown = (opts.onPathDisplay ?? (() => which("codacy-analysis")))();
+  if (!analyzer) {
+    return { ...base, status: "warn", detail: "not found", remedy: `${ANALYSIS_CLI_REMEDY} (static findings are unavailable until then)` };
+  }
+  if (analyzer.source === "path") {
+    return { ...base, status: "ok", detail: `${shown ?? analyzer.path} (on PATH)`, source: "path" };
+  }
+  const unused = shown && !sameFile(shown, analyzer.path) ? shown : void 0;
   return {
-    id: "analysis-cli",
-    label: "@codacy/analysis-cli",
-    status: path ? "ok" : "warn",
-    detail: path ?? "not found",
-    remedy: path ? void 0 : "npm install -g @codacy/analysis-cli (static findings are unavailable until then)",
-    required: false
+    ...base,
+    status: "ok",
+    detail: `${analyzer.version} (bundled with Verity)`,
+    source: "bundled",
+    version: analyzer.version,
+    ...unused && { unused }
   };
 }
+function sameFile(a, b) {
+  try {
+    return (0, import_node_fs73.realpathSync)(a) === (0, import_node_fs73.realpathSync)(b);
+  } catch {
+    return false;
+  }
+}
 var INSTALL_TIMEOUT_MS = 12e4;
 function run3(command, args2, opts = {}) {
   return new Promise((resolve9) => {
-    const child = (0, import_node_child_process20.spawn)(command, args2, {
+    const child = (0, import_node_child_process21.spawn)(command, args2, {
       stdio: opts.inherit ? "inherit" : "pipe",
       timeout: INSTALL_TIMEOUT_MS
     });
@@ -41145,7 +41497,7 @@ async function installAnalysisCli(opts = {}) {
       label: "@codacy/analysis-cli",
       status: "warn",
       detail: "install failed",
-      remedy: "Install manually: npm install -g @codacy/analysis-cli",
+      remedy: ANALYSIS_CLI_REMEDY,
       required: false
     };
     if (opts.sudo === false || !process.stdin.isTTY || !process.stdout.isTTY) return failed;
@@ -41234,7 +41586,7 @@ async function prerequisitesStep(ui) {
   const analysis = report.checks.find((c) => c.id === "analysis-cli");
   if (analysis && analysis.status !== "ok") {
     const s = ui.screen.s;
-    const installed2 = await ui.screen.spin(`${s.gray}\u2502${s.reset}  `, () => "Installing the Codacy analysis CLI (it runs the Trivy security scan)", installAnalysisCli({ quiet: true, sudo: false }));
+    const installed2 = await ui.screen.spin(`${s.gray}\u2502${s.reset}  `, () => "Verity's copy of the Codacy analysis CLI is missing. Installing it (it runs the Trivy security scan)", installAnalysisCli({ quiet: true, sudo: false }));
     report.checks[report.checks.indexOf(analysis)] = installed2;
     if (installed2.status === "ok") ui.rail.ticked("Installed the Codacy analysis CLI");
   }
@@ -41371,9 +41723,9 @@ async function scaffoldStep(ui, given = {}) {
 }
 
 // src/commands/init/wiring.ts
-var import_node_fs72 = require("node:fs");
+var import_node_fs74 = require("node:fs");
 var import_promises18 = require("node:fs/promises");
-var import_node_path59 = require("node:path");
+var import_node_path63 = require("node:path");
 var DEFAULT_MOMENTS = ["stop", "pre-commit", "pre-push"];
 async function momentsFromInstalledHooks() {
   const status = await checkAllVerityHooks();
@@ -41446,12 +41798,12 @@ var SKILLS = [
 ];
 function resolveDataDir2() {
   const candidates2 = [
-    (0, import_node_path59.join)(__dirname, "..", "data"),
-    (0, import_node_path59.join)(__dirname, "..", "..", "data"),
-    (0, import_node_path59.join)(process.cwd(), "cli", "data")
+    (0, import_node_path63.join)(__dirname, "..", "data"),
+    (0, import_node_path63.join)(__dirname, "..", "..", "data"),
+    (0, import_node_path63.join)(process.cwd(), "cli", "data")
   ];
   for (const candidate of candidates2) {
-    if ((0, import_node_fs72.existsSync)((0, import_node_path59.join)(candidate, "skills"))) return candidate;
+    if ((0, import_node_fs74.existsSync)((0, import_node_path63.join)(candidate, "skills"))) return candidate;
   }
   throw new Error("Could not find Verity skill data. Reinstall: npm install -g @codacy/verity-cli");
 }
@@ -41459,9 +41811,9 @@ async function skillIsCurrent(src, dest) {
   const list2 = (dir) => {
     const out2 = [];
     const walk2 = (d, prefix) => {
-      for (const e of (0, import_node_fs72.readdirSync)(d, { withFileTypes: true })) {
+      for (const e of (0, import_node_fs74.readdirSync)(d, { withFileTypes: true })) {
         const rel = prefix ? `${prefix}/${e.name}` : e.name;
-        if (e.isDirectory()) walk2((0, import_node_path59.join)(d, e.name), rel);
+        if (e.isDirectory()) walk2((0, import_node_path63.join)(d, e.name), rel);
         else if (e.isFile()) out2.push(rel);
       }
     };
@@ -41472,7 +41824,7 @@ async function skillIsCurrent(src, dest) {
     const shipped = list2(src);
     if (JSON.stringify(shipped) !== JSON.stringify(list2(dest))) return false;
     for (const rel of shipped) {
-      if (await (0, import_promises18.readFile)((0, import_node_path59.join)(src, rel), "utf-8") !== await (0, import_promises18.readFile)((0, import_node_path59.join)(dest, rel), "utf-8")) return false;
+      if (await (0, import_promises18.readFile)((0, import_node_path63.join)(src, rel), "utf-8") !== await (0, import_promises18.readFile)((0, import_node_path63.join)(dest, rel), "utf-8")) return false;
     }
     return true;
   } catch {
@@ -41480,16 +41832,16 @@ async function skillIsCurrent(src, dest) {
   }
 }
 async function installSkills(force) {
-  const source2 = (0, import_node_path59.join)(resolveDataDir2(), "skills");
+  const source2 = (0, import_node_path63.join)(resolveDataDir2(), "skills");
   const missing = [];
   for (const skill of SKILLS) {
-    const src = (0, import_node_path59.join)(source2, skill);
-    const dest = (0, import_node_path59.join)(".claude/skills", skill);
-    if (!(0, import_node_fs72.existsSync)(src)) {
+    const src = (0, import_node_path63.join)(source2, skill);
+    const dest = (0, import_node_path63.join)(".claude/skills", skill);
+    if (!(0, import_node_fs74.existsSync)(src)) {
       missing.push(skill);
       continue;
     }
-    if ((0, import_node_fs72.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) continue;
+    if ((0, import_node_fs74.existsSync)(dest) && !force && await skillIsCurrent(src, dest)) continue;
     await (0, import_promises18.mkdir)(dest, { recursive: true });
     await (0, import_promises18.cp)(src, dest, { recursive: true, force: true });
   }
@@ -41529,7 +41881,7 @@ async function hooksStep(ui, ctx) {
 }
 
 // src/commands/init/sign-in.ts
-var import_node_child_process21 = require("node:child_process");
+var import_node_child_process22 = require("node:child_process");
 async function classifyExistingLogin(serviceUrl, remote, opts) {
   const existing = await resolveToken(opts.token);
   if (!existing.ok) return { kind: "none" };
@@ -41554,7 +41906,7 @@ async function classifyExistingLogin(serviceUrl, remote, opts) {
 }
 function gitRemote() {
   try {
-    return (0, import_node_child_process21.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    return (0, import_node_child_process22.execSync)("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return "";
   }
@@ -41686,7 +42038,7 @@ async function signInStep(ui, resolution, opts) {
 }
 
 // src/commands/init/standard.ts
-var import_node_fs73 = require("node:fs");
+var import_node_fs75 = require("node:fs");
 
 // src/commands/init/rules.ts
 async function projectLabel(token, serviceUrl, verbose) {
@@ -41766,13 +42118,13 @@ async function generate(ui, globals, profile, replaces) {
     return { status: "fallback" };
   }
   const secs2 = Math.max(1, Math.round((Date.now() - started) / 1e3));
-  const docs2 = profile.docs.length;
+  const docs = profile.docs.length;
   if (outcome.rules.length === 0) {
     rail.warn("No project rules this time");
     rail.line("The proposed rules were too generic, or not safe to use. The built-in rules apply.");
   } else {
     const n2 = outcome.rules.length;
-    const from = [`${commits} ${commits === 1 ? "commit" : "commits"}`, ...docs2 ? [`${docs2} ${docs2 === 1 ? "doc" : "docs"}`] : []].join(" and ");
+    const from = [`${commits} ${commits === 1 ? "commit" : "commits"}`, ...docs ? [`${docs} ${docs === 1 ? "doc" : "docs"}`] : []].join(" and ");
     rail.done(`${n2} ${n2 === 1 ? "rule" : "rules"} for this repository ${s.gray}\xB7 from ${from} \xB7 ${secs2}s${s.reset}`);
     await rail.rules(outcome.rules);
     if (outcome.rejected > 0) rail.line(`${outcome.rejected} proposed ${outcome.rejected === 1 ? "rule was" : "rules were"} left out: too generic, or not safe to use.`);
@@ -41885,7 +42237,7 @@ async function standardStep(ui, ctx) {
     const d = await deriveFromCatalogue(ui, ctx.globals);
     return end({ source: d.ok ? "derived" : "none", version: d.version, profile: profile2 });
   };
-  if ((0, import_node_fs73.existsSync)(projectPath(STANDARD_FILE))) {
+  if ((0, import_node_fs75.existsSync)(projectPath(STANDARD_FILE))) {
     const sync = await pushLocalStandardIfMissing(ctx.globals);
     rail.done("Kept your Standard");
     rail.line(`${STANDARD_FILE} is already here, so this run leaves it as it is.`);
@@ -42010,7 +42362,7 @@ async function runInit(program2, opts) {
     standardAnswer = v;
   }
   const projectMarkers = [".git", "package.json", "pyproject.toml", "go.mod", "Cargo.toml", "Gemfile", "pom.xml", "build.gradle"];
-  if (!projectMarkers.some((m) => (0, import_node_fs74.existsSync)(m))) {
+  if (!projectMarkers.some((m) => (0, import_node_fs76.existsSync)(m))) {
     printError('No project detected in the current directory. Run "verity init" from your project root.');
     process.exit(1);
   }
@@ -42046,10 +42398,10 @@ async function runInit(program2, opts) {
     trace.mark("prerequisites", "ok");
     await scaffoldStep(ui, { untrackMemory: opts.untrackMemory === true, untrackState: opts.untrackState === true });
     trace.mark("scaffold", "ok");
-    await (0, import_promises19.mkdir)((0, import_node_path60.join)(process.env.HOME ?? "", ".verity"), { recursive: true });
+    await (0, import_promises19.mkdir)((0, import_node_path64.join)(process.env.HOME ?? "", ".verity"), { recursive: true });
     await repoStep(ui, detectProject());
     const previous = await readSetupState();
-    const setUpBefore = (0, import_node_fs74.existsSync)(projectPath(STANDARD_FILE));
+    const setUpBefore = (0, import_node_fs76.existsSync)(projectPath(STANDARD_FILE));
     const answers = await askSetupQuestions(defaultsOnly, previous, { moments: givenMoments, telemetry: givenTelemetry });
     trace.mark("questions", "ok", givenMoments || givenTelemetry !== void 0 || profileAnswer || standardAnswer ? "asked" : "defaults");
     const plan = planMoments(answers.moments, { given: givenMoments !== void 0, defaultsOnly });
@@ -42093,7 +42445,7 @@ async function runInit(program2, opts) {
         // The effective answer: the next run starts from this record.
         moments: plan.momentIds,
         ...telemetry ? { telemetry } : {},
-        init: { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.35.0-experimental.3211f79" : "dev" }
+        init: { completed_at: (/* @__PURE__ */ new Date()).toISOString(), cli_version: true ? "0.35.0-experimental.7c5e75b" : "dev" }
       });
     } catch (err2) {
       rail.line(`Could not record the setup answers: ${terminalText(err2.message, 200)}`, "warn");
@@ -42124,7 +42476,7 @@ function registerInitCommand(program2) {
 }
 
 // src/commands/doctor.ts
-var import_node_fs75 = require("node:fs");
+var import_node_fs77 = require("node:fs");
 async function buildReport() {
   const prereqs = await checkPrereqs({ install: false });
   const state = await readSetupState();
@@ -42133,8 +42485,8 @@ async function buildReport() {
   const provenance = cliProvenance();
   const telemetry = await checkTelemetry();
   const artifacts = {
-    standard: (0, import_node_fs75.existsSync)(projectPath(STANDARD_FILE)),
-    verityMd: (0, import_node_fs75.existsSync)(projectPath(VERITY_MD_FILE))
+    standard: (0, import_node_fs77.existsSync)(projectPath(STANDARD_FILE)),
+    verityMd: (0, import_node_fs77.existsSync)(projectPath(VERITY_MD_FILE))
   };
   const next = [];
   for (const c of prereqs.checks) {
@@ -42173,6 +42525,11 @@ async function buildReport() {
   if (state?.telemetry === "deferred") {
     next.push('Telemetry was requested but needs a token \u2014 run "verity login", then "verity telemetry install".');
   }
+  if (telemetry.staleLocalKeys.length > 0) {
+    next.push(
+      `.claude/settings.local.json still holds ${telemetry.staleLocalKeys.length} old Verity telemetry key(s). Claude Code 2.1.282 and later ignores them there, so nothing is exported from them. Run "verity telemetry install" to export from this machine instead (it removes them), or "verity telemetry uninstall" to turn telemetry off and remove them.`
+    );
+  }
   const memory2 = {
     posture: memoryPosture(),
     trackedFiles: committedMemoryFiles().length,
@@ -42220,7 +42577,7 @@ async function buildReport() {
       noAnalysisMoment,
       versions
     },
-    telemetry: { enabled: telemetry.enabled, endpoint: telemetry.endpoint },
+    telemetry: { enabled: telemetry.enabled, endpoint: telemetry.endpoint, staleLocalKeys: telemetry.staleLocalKeys },
     artifacts,
     memory: memory2,
     trackedState,
@@ -42243,6 +42600,7 @@ function registerDoctorCommand(program2) {
     for (const c of report.prerequisites) {
       if (c.status === "ok") printInfo(`  ${c.label} ${c.detail} \u2713`);
       else printWarn(`  ${c.label}: ${c.detail}${c.remedy ? ` \u2014 ${c.remedy}` : ""}`);
+      if (c.unused) printInfo(`    ${c.unused}: not used (Verity runs its bundled copy)`);
     }
     printInfo("Setup:");
     printInfo(`  verity init: ${report.phases.init.done ? `done ${report.phases.init.completed_at ?? ""}`.trim() : "NOT run here"}`);
@@ -42264,7 +42622,9 @@ function registerDoctorCommand(program2) {
       if (cfg.formal_refused) printWarn(`    ${formalRefusalMessage(cfg.formal_refused)}`);
     }
     printInfo(`  Infra (intent/baseline/compact/session-end): ${[report.hooks.intent, report.hooks.baseline, report.hooks.compact, report.hooks.sessionEnd].filter(Boolean).length}/4`);
-    printInfo(`Telemetry: ${report.telemetry.enabled ? `enabled \u2192 ${report.telemetry.endpoint}` : "disabled"}`);
+    printInfo(
+      `Telemetry: ${report.telemetry.enabled ? `enabled \u2192 ${report.telemetry.endpoint} (every Claude Code session on this machine)` : "disabled"}`
+    );
     if (process.platform === "win32") printWarn(WINDOWS_STATIC_NOTE);
     else printInfo("Static analysis: Trivy (dependencies, malicious packages, secrets)");
     printInfo("Artifacts:");
@@ -42285,8 +42645,8 @@ function registerDoctorCommand(program2) {
 }
 
 // src/commands/uninstall.ts
-var import_node_fs76 = require("node:fs");
-var import_node_path61 = require("node:path");
+var import_node_fs78 = require("node:fs");
+var import_node_path65 = require("node:path");
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("Remove Verity from this project (skills, hooks, .verity/, VERITY.md)").option("--dry-run", "Show what would be removed without doing it").option("--purge-global", "Also remove ~/.verity/ (deletes saved tokens \u2014 reconnect requires re-registration)").option("--keep-verity-md", "Keep the project root VERITY.md file").action(async (opts) => {
     const dryRun = opts.dryRun ?? false;
@@ -42295,11 +42655,11 @@ function registerUninstallCommand(program2) {
     const actions = [];
     const skillsRoot = projectPath(".claude/skills");
     for (const name2 of PROJECT_SKILL_NAMES) {
-      const dir = (0, import_node_path61.join)(skillsRoot, name2);
-      if ((0, import_node_fs76.existsSync)(dir)) {
+      const dir = (0, import_node_path65.join)(skillsRoot, name2);
+      if ((0, import_node_fs78.existsSync)(dir)) {
         actions.push({
           label: `Remove .claude/skills/${name2}/`,
-          apply: () => (0, import_node_fs76.rmSync)(dir, { recursive: true, force: true })
+          apply: () => (0, import_node_fs78.rmSync)(dir, { recursive: true, force: true })
         });
       }
     }
@@ -42313,24 +42673,24 @@ function registerUninstallCommand(program2) {
       });
     }
     const verityDir = projectPath(VERITY_DIR);
-    if ((0, import_node_fs76.existsSync)(verityDir)) {
+    if ((0, import_node_fs78.existsSync)(verityDir)) {
       actions.push({
         label: `Remove ${VERITY_DIR}/`,
-        apply: () => (0, import_node_fs76.rmSync)(verityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs78.rmSync)(verityDir, { recursive: true, force: true })
       });
     }
     if (!keepVerityMd) {
       const verityMd = projectPath(VERITY_MD_FILE);
-      if ((0, import_node_fs76.existsSync)(verityMd)) {
+      if ((0, import_node_fs78.existsSync)(verityMd)) {
         actions.push({
           label: `Remove ${VERITY_MD_FILE}`,
-          apply: () => (0, import_node_fs76.rmSync)(verityMd, { force: true })
+          apply: () => (0, import_node_fs78.rmSync)(verityMd, { force: true })
         });
       }
     }
     const cleanupEmptyDir = (path) => {
-      if ((0, import_node_fs76.existsSync)(path) && (0, import_node_fs76.statSync)(path).isDirectory() && (0, import_node_fs76.readdirSync)(path).length === 0) {
-        (0, import_node_fs76.rmdirSync)(path);
+      if ((0, import_node_fs78.existsSync)(path) && (0, import_node_fs78.statSync)(path).isDirectory() && (0, import_node_fs78.readdirSync)(path).length === 0) {
+        (0, import_node_fs78.rmdirSync)(path);
       }
     };
     actions.push({
@@ -42341,11 +42701,11 @@ function registerUninstallCommand(program2) {
       }
     });
     const home = process.env.HOME ?? "";
-    const globalVerityDir = (0, import_node_path61.join)(home, ".verity");
-    if (purgeGlobal && (0, import_node_fs76.existsSync)(globalVerityDir)) {
+    const globalVerityDir = (0, import_node_path65.join)(home, ".verity");
+    if (purgeGlobal && (0, import_node_fs78.existsSync)(globalVerityDir)) {
       actions.push({
         label: `Remove ~/.verity/ (global credentials \u2014 reconnect requires re-registration)`,
-        apply: () => (0, import_node_fs76.rmSync)(globalVerityDir, { recursive: true, force: true })
+        apply: () => (0, import_node_fs78.rmSync)(globalVerityDir, { recursive: true, force: true })
       });
     }
     if (actions.length === 0) {
@@ -42564,8 +42924,8 @@ function registerTaskCommands(program2) {
 }
 
 // src/commands/reset.ts
-var import_node_fs77 = require("node:fs");
-var import_node_path62 = require("node:path");
+var import_node_fs79 = require("node:fs");
+var import_node_path66 = require("node:path");
 function registerResetCommand(program2) {
   program2.command("reset").description("Close the current task and clear transient state").option("--keep-task", "Only purge caches; leave the current task open").option("--all", "Also purge diagnostic logs (.verity/.logs/)").action(async (opts) => {
     const globals = program2.opts();
@@ -42605,18 +42965,18 @@ function registerResetCommand(program2) {
       } catch {
       }
     }
-    const purged = purgeVerityDir((0, import_node_path62.basename)(CACHE_DIR), (name2) => name2.startsWith("pending-"));
+    const purged = purgeVerityDir((0, import_node_path66.basename)(CACHE_DIR), (name2) => name2.startsWith("pending-"));
     if (purged === null) printError(`Did not purge ${CACHE_DIR}: it is not a directory inside ${VERITY_DIR}.`);
     const stateDir2 = projectPath(VERITY_DIR);
     const filesToClear = [
-      (0, import_node_path62.basename)(INTENT_FILE),
-      (0, import_node_path62.basename)(HASH_FILE),
-      (0, import_node_path62.basename)(BASELINE_SHA_FILE),
+      (0, import_node_path66.basename)(INTENT_FILE),
+      (0, import_node_path66.basename)(HASH_FILE),
+      (0, import_node_path66.basename)(BASELINE_SHA_FILE),
       ".iteration-count",
       ".last-analysis"
     ];
     for (const name2 of filesToClear) {
-      if (lstatOrNull((0, import_node_path62.join)(stateDir2, name2)) && !replaceInRoot(stateDir2, name2, "")) {
+      if (lstatOrNull((0, import_node_path66.join)(stateDir2, name2)) && !replaceInRoot(stateDir2, name2, "")) {
         printError(`Did not clear ${VERITY_DIR}/${name2}: it is not a regular file inside ${VERITY_DIR}.`);
       }
     }
@@ -42631,29 +42991,29 @@ function registerResetCommand(program2) {
 }
 function lstatOrNull(path) {
   try {
-    return (0, import_node_fs77.lstatSync)(path);
+    return (0, import_node_fs79.lstatSync)(path);
   } catch {
     return null;
   }
 }
 function purgeVerityDir(child, select) {
   const verityDir = projectPath(VERITY_DIR);
-  const dir = (0, import_node_path62.join)(verityDir, child);
+  const dir = (0, import_node_path66.join)(verityDir, child);
   const parent = lstatOrNull(verityDir);
   const st = lstatOrNull(dir);
   if (!st) return 0;
   if (!parent || parent.isSymbolicLink() || !parent.isDirectory()) return null;
   if (st.isSymbolicLink() || !st.isDirectory()) return null;
   try {
-    if ((0, import_node_fs77.realpathSync)(dir) !== (0, import_node_path62.join)((0, import_node_fs77.realpathSync)(verityDir), child)) return null;
+    if ((0, import_node_fs79.realpathSync)(dir) !== (0, import_node_path66.join)((0, import_node_fs79.realpathSync)(verityDir), child)) return null;
   } catch {
     return null;
   }
   let removed = 0;
-  for (const entry of (0, import_node_fs77.readdirSync)(dir, { withFileTypes: true })) {
+  for (const entry of (0, import_node_fs79.readdirSync)(dir, { withFileTypes: true })) {
     if (entry.isDirectory() || !select(entry.name)) continue;
     try {
-      (0, import_node_fs77.unlinkSync)((0, import_node_path62.join)(dir, entry.name));
+      (0, import_node_fs79.unlinkSync)((0, import_node_path66.join)(dir, entry.name));
       removed++;
     } catch {
     }
@@ -42662,7 +43022,7 @@ function purgeVerityDir(child, select) {
 }
 
 // src/commands/reflect.ts
-var import_node_fs78 = require("node:fs");
+var import_node_fs80 = require("node:fs");
 
 // src/lib/reflection-globs.ts
 var MAX_GLOBS = 6;
@@ -42700,7 +43060,7 @@ async function writeNodeToDisk(args2) {
       { treePaths: listTrackedFiles(), recordBaseline: false }
     );
     if (written === 0) return false;
-    return (0, import_node_fs78.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
+    return (0, import_node_fs80.existsSync)(projectPath(`${VERITY_DIR}/memory/${args2.filePath}`));
   } catch {
     return false;
   }
@@ -43137,9 +43497,15 @@ function registerRunCommand(program2) {
 }
 
 // src/commands/telemetry.ts
-var import_node_fs79 = require("node:fs");
+var import_node_fs81 = require("node:fs");
+var SCOPE = "every Claude Code session on this machine";
+function declineHeaders(why) {
+  process.stderr.write(`Verity telemetry is off here: ${why} Nothing is exported from this session.
+`);
+  process.exitCode = 1;
+}
 async function recordTelemetryChoice(choice) {
-  if (!(0, import_node_fs79.existsSync)(projectPath(SETUP_STATE_FILE))) return;
+  if (!(0, import_node_fs81.existsSync)(projectPath(SETUP_STATE_FILE))) return;
   try {
     if ((await readSetupState())?.telemetry === choice) return;
     await writeSetupState({ telemetry: choice });
@@ -43147,8 +43513,8 @@ async function recordTelemetryChoice(choice) {
   }
 }
 function registerTelemetryCommands(program2) {
-  const telemetry = program2.command("telemetry").description("Manage Claude Code OpenTelemetry export to Verity (cost & usage)");
-  telemetry.command("install").description("Enable Claude Code telemetry export to Verity (writes .claude/settings.local.json)").action(async () => {
+  const telemetry = program2.command("telemetry").description(`Manage Claude Code OpenTelemetry export to Verity (cost & usage) for ${SCOPE}`);
+  telemetry.command("install").description(`Export cost & usage to Verity from ${SCOPE} (writes your Claude Code user settings)`).action(async () => {
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
     if (!tokenResult.ok) {
@@ -43160,35 +43526,51 @@ function registerTelemetryCommands(program2) {
       printError(urlResult.error);
       process.exit(1);
     }
-    const pin = await checkTokenPin(tokenResult.data.token, urlResult.data);
-    if (!pin.attach && pin.reason === "unpinnable") {
-      printWarn("Your Verity credential does not record which service issued it, so this endpoint");
-      printWarn("  cannot be verified \u2014 a repository could point your telemetry elsewhere.");
-      printWarn('  Run "verity login" to re-issue the credential; Verity can check it after that.');
-    }
-    const result = await installTelemetry(urlResult.data);
+    const result = await installTelemetry(urlResult.data, { token: tokenResult.data.token });
     if (!result.ok) {
       printError(result.error);
       process.exit(1);
     }
     await recordTelemetryChoice("enabled");
     printInfo(`Telemetry enabled \u2192 ${result.data.endpoint}`);
-    printInfo(`  wrote ${SETTINGS_LOCAL_FILE2} (no token stored \u2014 resolved at runtime via otelHeadersHelper)`);
+    printInfo(`  scope: ${SCOPE}`);
+    printInfo(`  wrote ${displayPath(result.data.settingsPath)} (no token stored \u2014 resolved at runtime via otelHeadersHelper)`);
+    if (result.data.healedLocalKeys.length > 0) {
+      printInfo(`  removed ${result.data.healedLocalKeys.length} old telemetry key(s) from ${SETTINGS_LOCAL_FILE2}`);
+    }
+    printInfo("  only Verity projects send data. In other repositories Claude Code shows a startup");
+    printInfo('  warning that "verity telemetry headers" exited 1, and it exports nothing there.');
     printInfo("  takes effect on your NEXT Claude Code session; first metrics appear within ~60s of activity");
     printInfo("  view cost & usage at /usage");
   });
-  telemetry.command("headers").description("Print the OTLP Authorization header as JSON (used by Claude Code otelHeadersHelper)").action(async () => {
+  telemetry.command("headers").description("Print the OTLP headers as JSON for Claude Code otelHeadersHelper (exits 1 outside a Verity project)").action(async () => {
+    if (!isTelemetryProject()) {
+      declineHeaders("this directory is not in a Verity project.");
+      return;
+    }
     const globals = program2.opts();
     const tokenResult = await resolveToken(globals.token);
-    if (tokenResult.ok) {
-      const remote = requestRemote();
-      printJsonCompact({
-        Authorization: `Bearer ${tokenResult.data.token}`,
-        ...remote ? { "X-Verity-Remote": remote } : {}
-      });
-    } else {
-      printJsonCompact({});
+    if (!tokenResult.ok) {
+      declineHeaders('this Verity project has no token on this machine. Run "verity login".');
+      return;
+    }
+    const endpoints = await sessionExportEndpoints();
+    if (endpoints.length === 0) {
+      declineHeaders("no OTLP endpoint is configured for this session.");
+      return;
+    }
+    for (const endpoint of endpoints) {
+      const refusal = await telemetryPinRefusal(tokenResult.data.token, endpoint);
+      if (refusal) {
+        declineHeaders(refusal);
+        return;
+      }
     }
+    const remote = requestRemote();
+    printJsonCompact({
+      Authorization: `Bearer ${tokenResult.data.token}`,
+      ...remote ? { "X-Verity-Remote": remote } : {}
+    });
   });
   telemetry.command("check").description("Show whether Claude Code telemetry export to Verity is enabled").option("--json", "Output status as JSON").action(async (opts) => {
     const status = await checkTelemetry();
@@ -43197,21 +43579,36 @@ function registerTelemetryCommands(program2) {
       return;
     }
     if (status.enabled) {
-      printInfo(`Telemetry: enabled \u2192 ${status.endpoint}`);
+      printInfo(`Telemetry: enabled \u2192 ${status.endpoint} (${SCOPE})`);
     } else {
       printWarn('Telemetry: disabled. Run "verity telemetry install" to enable cost & usage tracking.');
     }
+    if (status.staleLocalKeys.length > 0) {
+      printWarn(
+        `  ${SETTINGS_LOCAL_FILE2} still holds ${status.staleLocalKeys.length} old Verity telemetry key(s), which Claude Code ignores there. "verity telemetry install" removes them.`
+      );
+    }
   });
-  telemetry.command("uninstall").description("Disable Claude Code telemetry export to Verity").action(async () => {
+  telemetry.command("uninstall").description(`Stop the telemetry export to Verity from ${SCOPE}`).action(async () => {
     const result = await uninstallTelemetry();
     if (!result.ok) {
       printError(result.error);
       process.exit(1);
     }
     await recordTelemetryChoice("declined");
-    printInfo(
-      result.data.removed > 0 ? `Telemetry disabled (${result.data.removed} keys removed from ${SETTINGS_LOCAL_FILE2})` : "Telemetry was not enabled \u2014 nothing to remove."
-    );
+    const { removed, settingsPath, foreignEndpoint, healedLocalKeys } = result.data;
+    if (removed > 0) {
+      printInfo(`Telemetry disabled (${removed} keys removed from ${displayPath(settingsPath)})`);
+    } else if (foreignEndpoint) {
+      printInfo(
+        `${displayPath(settingsPath)} exports to another destination, so Verity left it unchanged.`
+      );
+    } else {
+      printInfo("Telemetry was not enabled \u2014 nothing to remove.");
+    }
+    if (healedLocalKeys.length > 0) {
+      printInfo(`  removed ${healedLocalKeys.length} old telemetry key(s) from ${SETTINGS_LOCAL_FILE2}`);
+    }
   });
 }
 
@@ -43253,8 +43650,8 @@ function renderSeatUsage(d, now = /* @__PURE__ */ new Date()) {
   lines.push(
     `Session ${utcHm(d.session.start)}\u2013${utcHm(d.session.resets_at)} (resets in ${inText(now, new Date(d.session.resets_at))}) \xB7 week from Mon ${utcDay2(d.week.start)} (resets Mon ${utcDay2(d.week.resets_at)}, 00:00 UTC)`
   );
-  if (!d.plan) lines.push("No plan is set for this org: counts only. Plan limits apply from Nov 2.");
-  else if (!d.enforced) lines.push("Limits are shown for information. They are not enforced before Nov 2.");
+  if (!d.plan) lines.push("No plan is set for this org: counts only.");
+  else if (!d.enforced) lines.push("Limits are shown for information. They are not enforced yet.");
   const me = d.members.find((m) => m.me);
   if (me) {
     const w = me.weeks[0];
@@ -43358,8 +43755,8 @@ function registerUsageCommand(program2) {
 }
 
 // src/commands/prove.ts
-var import_node_fs80 = require("node:fs");
-var import_node_path63 = require("node:path");
+var import_node_fs82 = require("node:fs");
+var import_node_path67 = require("node:path");
 
 // src/lib/prove/hint-pool.ts
 var STOP2 = /* @__PURE__ */ new Set([
@@ -43501,7 +43898,7 @@ function registerProveCommand(program2) {
       process.exit(2);
     }
     const limit = Math.max(1, Math.min(50, Number(opts.limit) || 10));
-    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path63.relative)(root, (0, import_node_path63.resolve)(p)) || ".") });
+    let signals = collectRiskSignals(root, { since: opts.since, limit, paths: paths.map((p) => (0, import_node_path67.relative)(root, (0, import_node_path67.resolve)(p)) || ".") });
     if (opts.hint && paths.length === 0) {
       const hit = hintMatches(root, opts.hint);
       if (hit.files.length > 0) {
@@ -43555,7 +43952,7 @@ function registerProveCommand(program2) {
   });
   prove.command("check [model]").description("Elaborate a model (or every model) with the local Lean toolchain and report each property").option("--timeout <ms>", "Per-model timeout in ms", "120000").option("--json", "Machine-readable output").action((model, opts) => {
     const root = repoRoot();
-    if (!(0, import_node_fs80.existsSync)((0, import_node_path63.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs82.existsSync)((0, import_node_path67.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -43579,7 +43976,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
     const reports = [];
     for (const f of files) {
       const report = checkModel(tc, root, f, { timeoutMs: Math.max(1e3, Number(opts.timeout) || 12e4) });
-      report.file = (0, import_node_path63.relative)(root, f);
+      report.file = (0, import_node_path67.relative)(root, f);
       reports.push(report);
       try {
         writeResult(root, report);
@@ -43617,7 +44014,7 @@ ${build.stderr.split("\n").filter((l) => !l.startsWith("trace:")).slice(0, 20).j
       printError("Not logged in \u2014 replays run on the Verity service. Run `verity login` first.");
       process.exit(2);
     }
-    if (!(0, import_node_fs80.existsSync)((0, import_node_path63.join)(root, PROOFS_DIR, "lakefile.toml"))) {
+    if (!(0, import_node_fs82.existsSync)((0, import_node_path67.join)(root, PROOFS_DIR, "lakefile.toml"))) {
       printError(`No ${PROOFS_DIR}/ project here. Run \`verity prove init\` first.`);
       process.exit(2);
     }
@@ -43648,7 +44045,7 @@ ${report.error ?? ""}`);
       printInfo(opts.property ? `${model} ${opts.property} has no counterexample to replay` : `${model} has no counterexample to replay`);
       return;
     }
-    const modelSource = readRegularFileInRoot(root, (0, import_node_path63.relative)(root, file), 512 * 1024);
+    const modelSource = readRegularFileInRoot(root, (0, import_node_path67.relative)(root, file), 512 * 1024);
     if (!opts.json) printInfo(`replaying ${targets.length} counterexample(s) of ${model} in network-less containers (${Math.min(targets.length, REPLAY_CONCURRENCY)} at a time)\u2026`);
     const outcomes = await mapPool(targets, REPLAY_CONCURRENCY, async (p) => {
       const brief = buildReplayBrief(root, report, p, modelSource.ok ? modelSource.content : "");
@@ -43668,7 +44065,7 @@ ${report.error ?? ""}`);
   });
   prove.command("auto [files...]").description("The formal phase the pre-push guard runs: select one risky symbol among changed files, generate a model, check it, replay counterexamples (default files: the commits ahead of upstream)").option("--deadline <ms>", "Budget for the whole phase", "170000").option("--json", "Machine-readable output").action(async (paths, opts) => {
     const root = repoRoot();
-    let files = paths.map((p) => (0, import_node_path63.relative)(root, (0, import_node_path63.resolve)(p)));
+    let files = paths.map((p) => (0, import_node_path67.relative)(root, (0, import_node_path67.resolve)(p)));
     if (files.length === 0) {
       const ahead = runGitSync(root, ["diff", "--name-only", "@{upstream}...HEAD"]);
       const fallback = ahead.ok ? ahead : runGitSync(root, ["diff", "--name-only", "HEAD~1..HEAD"]);
@@ -43742,7 +44139,7 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
     let revise;
     if (opts.revise) {
       const existing = resolveModelFile(root, opts.revise);
-      const src = existing ? readRegularFileInRoot(root, (0, import_node_path63.relative)(root, existing), 64 * 1024) : null;
+      const src = existing ? readRegularFileInRoot(root, (0, import_node_path67.relative)(root, existing), 64 * 1024) : null;
       if (!src || !src.ok || !opts.note) {
         printError("--revise needs an existing model under Models/ and --note - with what the replay showed on stdin");
         process.exit(2);
@@ -43782,8 +44179,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("waive <file>").description("Dismiss the remembered formal finding(s) on a file for its current bytes \u2014 the accepted-risk path for a formal block").requiredOption("--reason <text>", "The human disposition this records (reviewer finding, ADR, \u2026)").action((file, opts) => {
     const root = repoRoot();
-    const rel0 = (0, import_node_path63.relative)(root, (0, import_node_path63.isAbsolute)(file) ? file : (0, import_node_path63.join)(root, file)).replace(/\\/g, "/");
-    const rel = rel0.startsWith("..") || (0, import_node_path63.isAbsolute)(rel0) ? null : rel0;
+    const rel0 = (0, import_node_path67.relative)(root, (0, import_node_path67.isAbsolute)(file) ? file : (0, import_node_path67.join)(root, file)).replace(/\\/g, "/");
+    const rel = rel0.startsWith("..") || (0, import_node_path67.isAbsolute)(rel0) ? null : rel0;
     if (!rel) {
       printError(`${file} is not inside this repository`);
       process.exit(2);
@@ -43799,8 +44196,8 @@ ${f.reason ? `      ${terminalText(f.reason, 2e3)}
   });
   prove.command("hash <file>").description("Print the sha256 of a file, for a model header (Verity.model \u2026 sha256). Path is REPO-relative, as in the header").action((file) => {
     const root = repoRoot();
-    const rel = (0, import_node_path63.relative)(root, (0, import_node_path63.isAbsolute)(file) ? file : (0, import_node_path63.join)(root, file));
-    const digest = rel.startsWith("..") || (0, import_node_path63.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
+    const rel = (0, import_node_path67.relative)(root, (0, import_node_path67.isAbsolute)(file) ? file : (0, import_node_path67.join)(root, file));
+    const digest = rel.startsWith("..") || (0, import_node_path67.isAbsolute)(rel) ? null : sha256InRoot(root, rel);
     if (!digest) {
       printError(`Cannot hash ${file}: it must be a regular file inside this repository (not a symlink)`);
       process.exit(2);
@@ -43834,10 +44231,10 @@ function refreshScaffold(root) {
 }
 
 // src/commands/lean.ts
-var import_node_fs81 = require("node:fs");
-var import_node_child_process22 = require("node:child_process");
-var import_node_os13 = require("node:os");
-var import_node_path64 = require("node:path");
+var import_node_fs83 = require("node:fs");
+var import_node_child_process23 = require("node:child_process");
+var import_node_os14 = require("node:os");
+var import_node_path68 = require("node:path");
 function registerLeanCommand(program2) {
   const lean = program2.command("lean").description("The Lean 4 toolchain formal verification needs (managed download, pinned by this CLI)");
   lean.command("status").option("--json", "Machine-readable output").description("Which toolchain would run, and whether it matches the pinned version").action((opts) => {
@@ -43845,7 +44242,7 @@ function registerLeanCommand(program2) {
     let version = null;
     if (tc) {
       try {
-        version = (0, import_node_child_process22.execFileSync)(tc.lake.replace(/lake(\.exe)?$/, "lean$1"), ["--version"], { env: tc.env, encoding: "utf-8", timeout: 1e4 }).trim();
+        version = (0, import_node_child_process23.execFileSync)(tc.lake.replace(/lake(\.exe)?$/, "lean$1"), ["--version"], { env: tc.env, encoding: "utf-8", timeout: 1e4 }).trim();
       } catch {
         version = null;
       }
@@ -43856,7 +44253,7 @@ function registerLeanCommand(program2) {
     const bg = readInstallState();
     const background = bg ? { ...bg, running: bg.state === "running" && installRunning() } : null;
     if (opts.json) {
-      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs81.existsSync)((0, import_node_path64.join)(managed, "bin")), asset: leanAssetName(), background });
+      printJson({ pinned: LEAN_TOOLCHAIN, found: tc?.lake ?? null, version, matches_pin: matches, managed_dir: managed, managed_installed: (0, import_node_fs83.existsSync)((0, import_node_path68.join)(managed, "bin")), asset: leanAssetName(), background });
       return;
     }
     printInfo(`pinned: ${LEAN_TOOLCHAIN}`);
@@ -43873,11 +44270,11 @@ function registerLeanCommand(program2) {
     if (opts.background) process.exit(await runBackgroundInstall());
     const asset = leanAssetName();
     if (!asset) {
-      printError(`no Lean release for ${(0, import_node_os13.platform)()}/${(0, import_node_os13.arch)()}`);
+      printError(`no Lean release for ${(0, import_node_os14.platform)()}/${(0, import_node_os14.arch)()}`);
       process.exit(2);
     }
     const dir = pinnedVersionDir();
-    if ((0, import_node_fs81.existsSync)((0, import_node_path64.join)(dir, "bin", "lake")) && !opts.force) {
+    if ((0, import_node_fs83.existsSync)((0, import_node_path68.join)(dir, "bin", "lake")) && !opts.force) {
       printInfo(`already installed at ${dir}`);
       return;
     }
@@ -43913,18 +44310,21 @@ function registerLeanCommand(program2) {
   });
   lean.command("remove").description("Delete the Verity-managed toolchain for the pinned version").action(() => {
     const dir = pinnedVersionDir();
-    if (!(0, import_node_fs81.existsSync)(dir)) {
+    if (!(0, import_node_fs83.existsSync)(dir)) {
       printInfo("nothing to remove");
       return;
     }
-    (0, import_node_fs81.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs83.rmSync)(dir, { recursive: true, force: true });
     printInfo(`removed ${dir}`);
   });
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.35.0-experimental.3211f79").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
-  installStderrLog(actionCommand.name(), process.argv.slice(2), "0.35.0-experimental.3211f79");
+program.name("verity").description("CLI for Verity quality gate service").version("0.35.0-experimental.7c5e75b").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr").hook("preAction", async (_thisCommand, actionCommand) => {
+  const isTelemetryHelper = actionCommand.name() === "headers" && actionCommand.parent?.name() === "telemetry";
+  if (!isTelemetryHelper) {
+    installStderrLog(actionCommand.name(), process.argv.slice(2), "0.35.0-experimental.7c5e75b");
+  }
   setUserNamedServiceUrl(program.opts().serviceUrl);
   try {
     await foldLegacyLocalCredential();