@inerrata-corporation/errata 2.0.23-dev.4901 → 2.0.23-dev.4938

package/errata.mjs

@@ -25093,8 +25093,8 @@ function anchorNodeToDiff(store, nodeId, expectLabel, changedPaths, workspaceId2
   const n0 = store.getNode(nodeId);
   if (!n0 || n0.label !== expectLabel) return 0;
   const code = changedPaths.filter((f) => isAnchorableCodePath(f));
-  const cap = opts.maxFiles ?? MAX_ANCHOR_FILES;
-  if (code.length === 0 || code.length > cap) return 0;
+  const cap2 = opts.maxFiles ?? MAX_ANCHOR_FILES;
+  if (code.length === 0 || code.length > cap2) return 0;
   const already = new Set(store.outEdges(nodeId, ["ANCHORED_AT"]).map((e) => e.to));
   let n = 0;
   for (const path3 of code) {
@@ -27937,6 +27937,24 @@ var init_mechanism_liveness = __esm({
         effectCounter: "structureLinksMinted",
         note: "the answer is the agent's; nothing is inferred"
       },
+      {
+        id: "held-ask",
+        what: "asks a session whether a prior it leaned on held; the agent's confirm/refute answers it",
+        pass: "capture",
+        // Opened only by a lean-on cite of a prior the session did not mint —
+        // written-at-all bar. The answers feed confirmedAt/refutedAt locally and
+        // the cloud's corroborate/contradict channels (§5.4 α/β) — the contrastive
+        // verdicts the FEP core needs (docs/reference/plans/fep-core.md §5.7).
+        fed: {
+          labels: ["Problem", "Solution", "RootCause", "Pattern"],
+          attr: "heldAskedAt",
+          minFraction: 0
+        },
+        // Counts only answers to questions a render actually SHOWED — a verdict the
+        // agent would have given unasked does not prove the ask did anything.
+        effectCounter: "heldAnswered",
+        note: "asked, never inferred; the lean is provisional while asked and replaced by the answer; Network-only priors are asked by id"
+      },
       {
         id: "regression-recognize",
         what: "marks a resolved problem as resolutionSuspect when it recurs at the door",
@@ -28931,6 +28949,18 @@ function renderSnapshot(s) {
     }
     lines.push("");
   }
+  if (s.heldAsks?.length) {
+    lines.push("### \u{1F9EA} Did it hold?");
+    lines.push(
+      "_You leaned on these priors this session. Once you know whether each one held up in your work, say so \u2014 a prior nobody judges ranks the same whether it worked or not:_"
+    );
+    for (const p of s.heldAsks) {
+      const what = p.description ? `**${p.description}** \u2014 \`${p.id}\`` : `\`${p.id}\``;
+      lines.push(`- ${what}${p.lifecycle ? ` _(${p.lifecycle})_` : ""}`);
+      lines.push(`  - it held \u2192 ${TAG_VERDICT_TOKENS.confirm(p.id)} \xB7 it didn't \u2192 ${TAG_VERDICT_TOKENS.refute(p.id)}`);
+    }
+    lines.push("");
+  }
   lines.push("### Recently observed problems in this workspace");
   if (s.recentProblems.length === 0 && s.recentResolved.length === 0 && s.recentConstraints.length === 0 && s.regressions.length === 0) {
     lines.push("- _none yet \u2014 errata is still building its model_");
@@ -29234,6 +29264,7 @@ function isolateSnapshot(s) {
     statedIntent: _statedIntent,
     selfCiteSkips: _selfCiteSkips,
     supersessionAsks: _supersessionAsks,
+    heldAsks: _heldAsks,
     pendingUpdate: _pendingUpdate,
     daemonDistress: _daemonDistress,
     reviewItems: _reviewItems,
@@ -35417,13 +35448,13 @@ function runGraphRescore(store, opts = {}) {
 function tryIncrementalRescore(store, lastRescoreAt, started2) {
   const allowedTypes = new Set(pagerankEdgeTypes());
   const liveN = store.nodeCount();
-  const cap = Math.max(1e3, Math.floor(liveN * INCREMENTAL_REGION_MAX_FRACTION));
+  const cap2 = Math.max(1e3, Math.floor(liveN * INCREMENTAL_REGION_MAX_FRACTION));
   const region = new Set(store.dirtyNodeIdsSince(lastRescoreAt));
   for (const e of store.edgeEndpointsTouchedSince(lastRescoreAt)) {
     region.add(e.from);
     region.add(e.to);
   }
-  if (region.size > cap) return null;
+  if (region.size > cap2) return null;
   let frontier = [...region];
   for (let hop = 0; hop < INCREMENTAL_HOPS && frontier.length > 0; hop++) {
     const next = [];
@@ -35434,7 +35465,7 @@ function tryIncrementalRescore(store, lastRescoreAt, started2) {
         next.push(e.to);
       }
     }
-    if (region.size > cap) return null;
+    if (region.size > cap2) return null;
     frontier = next;
   }
   const rank0 = store.ranksForMany([...region]);
@@ -35471,7 +35502,7 @@ function tryIncrementalRescore(store, lastRescoreAt, started2) {
   }
   const boundaryEdges = store.inEdgesForMany(regionIds).filter((e) => allowedTypes.has(e.type) && !inRegion.has(e.from) && (EDGE_WEIGHT[e.type] ?? 1) > 0);
   const boundarySources = [...new Set(boundaryEdges.map((e) => e.from))];
-  if (boundarySources.length > cap) return null;
+  if (boundarySources.length > cap2) return null;
   const boundaryRanks = store.ranksForMany(boundarySources);
   const boundaryOutSum = /* @__PURE__ */ new Map();
   for (const e of store.outEdgesForMany(boundarySources)) {
@@ -38656,14 +38687,14 @@ var init_generalize_graph = __esm({
 });
 
 // src/dual-burst.ts
-function collectiveScore(hit, cap) {
-  if (hit.cloudScore != null) return cap * Math.max(0, Math.min(1, hit.cloudScore));
+function collectiveScore(hit, cap2) {
+  if (hit.cloudScore != null) return cap2 * Math.max(0, Math.min(1, hit.cloudScore));
   const u = hit.usageCount ?? 0;
-  return Math.min(cap, Math.log10(u + 1) / 3);
+  return Math.min(cap2, Math.log10(u + 1) / 3);
 }
 function mergeDualBurst(local, cloud, opts = {}) {
   const boost = opts.corroborationBoost ?? 0.15;
-  const cap = opts.collectiveScoreCap ?? 0.5;
+  const cap2 = opts.collectiveScoreCap ?? 0.5;
   const twins = opts.twins;
   const cloudIdsOf = (id) => twins?.cloudIdsOf(id) ?? [];
   const seedSet = /* @__PURE__ */ new Set();
@@ -38734,7 +38765,7 @@ function mergeDualBurst(local, cloud, opts = {}) {
         id: mine.id,
         label: mine.label,
         name: mine.description,
-        score: collectiveScore(c, cap),
+        score: collectiveScore(c, cap2),
         hops: 1,
         provenance: "local"
       };
@@ -38751,7 +38782,7 @@ function mergeDualBurst(local, cloud, opts = {}) {
       id: c.id,
       label: c.label,
       name: c.description,
-      score: collectiveScore(c, cap),
+      score: collectiveScore(c, cap2),
       hops: 1,
       // adapters surface 1-hop neighbors of the seed
       provenance: "collective",
@@ -78358,18 +78389,18 @@ __export(witness_ledger_exports, {
   summarizeWitnessLedger: () => summarizeWitnessLedger,
   witnessLedgerPath: () => witnessLedgerPath
 });
-import { appendFileSync as appendFileSync3, existsSync as existsSync29, readFileSync as readFileSync33, writeFileSync as writeFileSync22 } from "node:fs";
-import { join as join37 } from "node:path";
+import { appendFileSync as appendFileSync3, existsSync as existsSync29, readFileSync as readFileSync34, writeFileSync as writeFileSync23 } from "node:fs";
+import { join as join38 } from "node:path";
 function witnessLedgerPath(configDir) {
-  return join37(configDir, "witness-ledger.jsonl");
+  return join38(configDir, "witness-ledger.jsonl");
 }
 function appendWitnessLedger(configDir, entry) {
   const path3 = witnessLedgerPath(configDir);
   try {
     appendFileSync3(path3, JSON.stringify(entry) + "\n");
-    const lines = readFileSync33(path3, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync34(path3, "utf8").split("\n").filter(Boolean);
     if (lines.length > LEDGER_MAX_LINES) {
-      writeFileSync22(path3, lines.slice(-Math.floor(LEDGER_MAX_LINES / 2)).join("\n") + "\n");
+      writeFileSync23(path3, lines.slice(-Math.floor(LEDGER_MAX_LINES / 2)).join("\n") + "\n");
     }
   } catch {
   }
@@ -78378,7 +78409,7 @@ function readWitnessLedger(configDir) {
   const path3 = witnessLedgerPath(configDir);
   if (!existsSync29(path3)) return [];
   try {
-    return readFileSync33(path3, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter((e) => typeof e.ts === "number" && typeof e.channel === "string");
+    return readFileSync34(path3, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter((e) => typeof e.ts === "number" && typeof e.channel === "string");
   } catch {
     return [];
   }
@@ -78817,12 +78848,12 @@ var init_report_render = __esm({
 
 // src/cli.ts
 init_src6();
-import { closeSync as closeSync3, existsSync as existsSync42, openSync as openSync3, readFileSync as readFileSync50, renameSync as renameSync10, statSync as statSync17, writeFileSync as writeFileSync34 } from "node:fs";
-import { join as join58, resolve as pathResolve2 } from "node:path";
+import { closeSync as closeSync3, existsSync as existsSync42, openSync as openSync3, readFileSync as readFileSync51, renameSync as renameSync11, statSync as statSync17, writeFileSync as writeFileSync35 } from "node:fs";
+import { join as join59, resolve as pathResolve2 } from "node:path";
 import { spawn as spawn5 } from "node:child_process";
 
 // src/daemon.ts
-import { existsSync as existsSync31, writeFileSync as writeFileSync25 } from "node:fs";
+import { existsSync as existsSync31, writeFileSync as writeFileSync26 } from "node:fs";
 
 // ../../node_modules/.pnpm/@hono+node-server@1.19.11_hono@4.12.34/node_modules/@hono/node-server/dist/index.mjs
 import { createServer as createServerHTTP } from "http";
@@ -79532,8 +79563,8 @@ function knowledgeTag(label, attrs) {
 
 // src/engine.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync30, statSync as statSync12, appendFileSync as appendFileSync4, readdirSync as readdirSync11, renameSync as renameSync5, readFileSync as readFileSync35, writeFileSync as writeFileSync24 } from "node:fs";
-import { basename as basename8, join as join39, relative as relative6, sep as sep5 } from "node:path";
+import { existsSync as existsSync30, statSync as statSync12, appendFileSync as appendFileSync4, readdirSync as readdirSync11, renameSync as renameSync6, readFileSync as readFileSync36, writeFileSync as writeFileSync25 } from "node:fs";
+import { basename as basename8, join as join40, relative as relative6, sep as sep5 } from "node:path";
 
 // src/coalesced-file-pass.ts
 function createCoalescedFilePass(delayMs, run3, onError) {
@@ -80309,9 +80340,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname23 = sysPath.dirname(file2);
+    const dirname24 = sysPath.dirname(file2);
     const basename11 = sysPath.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname23);
+    const parent = this.fsw._getWatchedDir(dirname24);
     let prevStats = stats;
     if (parent.has(basename11))
       return;
@@ -80338,7 +80369,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error48) {
-          this.fsw._remove(dirname23, basename11);
+          this.fsw._remove(dirname24, basename11);
         }
       } else if (parent.has(basename11)) {
         const at = newStats.atimeMs;
@@ -81951,9 +81982,9 @@ function readFrom(path3, fromByte, maxBytes) {
     const start2 = fromByte > 0 && fromByte <= size ? fromByte : 0;
     const remaining = size - start2;
     if (remaining <= 0) return { text: "", nextOffset: size, more: false, ioFailed: false };
-    let cap = maxBytes && maxBytes > 0 ? maxBytes : remaining;
+    let cap2 = maxBytes && maxBytes > 0 ? maxBytes : remaining;
     for (; ; ) {
-      const len = Math.min(cap, remaining);
+      const len = Math.min(cap2, remaining);
       const buf = Buffer.allocUnsafe(len);
       const read2 = readSync2(fd, buf, 0, len, start2);
       if (len >= remaining || read2 < len) {
@@ -81969,7 +82000,7 @@ function readFrom(path3, fromByte, maxBytes) {
           ioFailed: false
         };
       }
-      cap *= 2;
+      cap2 *= 2;
     }
   } catch {
     return { text: "", nextOffset: fromByte, more: false, ioFailed: true };
@@ -83646,7 +83677,7 @@ function harvestInlineTags(store, text, opts) {
           plan.fixes.push({ problemId, ...tag.fixRationale ? { fixNote: tag.fixRationale } : {} });
           const witnessKey = `corrob:${problemId}:${digest({ h: tag.handle })}`.slice(0, 72);
           if (!plan.corroborations.some((c) => c.witnessKey === witnessKey)) {
-            plan.corroborations.push({ nodeId: problemId, witnessKey });
+            plan.corroborations.push({ nodeId: problemId, witnessKey, via: "fix" });
           }
         } else plan.unresolvedFixes.push({ handle: tag.handle, ...tag.fixRationale ? { fixNote: tag.fixRationale } : {} });
       } else if (tag.fixRationale) {
@@ -83807,7 +83838,7 @@ function harvestInlineTags(store, text, opts) {
           if (!plan.corroborations.some((c) => c.witnessKey === witnessKey)) {
             const exposure = typeof store.currentIngestSeq === "function" ? priorExposure(store, targetId, { seq: store.currentIngestSeq(), ts: opts.ts }) : "unshown";
             countExposure(plan, exposure);
-            plan.corroborations.push({ nodeId: targetId, witnessKey, exposure });
+            plan.corroborations.push({ nodeId: targetId, witnessKey, exposure, via: "confirm" });
           }
         } else {
           const witnessKey = `refute:${targetId}:${digest({ s: tag.statement ?? "" })}`.slice(0, 72);
@@ -83826,7 +83857,7 @@ function harvestInlineTags(store, text, opts) {
         if (!plan.corroborations.some((c) => c.witnessKey === witnessKey)) {
           const exposure = typeof store.currentIngestSeq === "function" ? priorExposure(store, targetId, { seq: store.currentIngestSeq(), ts: opts.ts }) : "unshown";
           countExposure(plan, exposure);
-          plan.corroborations.push({ nodeId: targetId, witnessKey, exposure });
+          plan.corroborations.push({ nodeId: targetId, witnessKey, exposure, via: "lean" });
         }
       }
       if (mintPriors && source && target) {
@@ -83982,6 +84013,154 @@ var SupersessionAsks = class {
   }
 };
 
+// src/held-asks.ts
+import { readFileSync as readFileSync22, renameSync as renameSync4, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname15, join as join26 } from "node:path";
+var HELD_ASK_TTL_MS = 2 * 60 * 6e4;
+var HELD_ASK_END_GRACE_MS = 2 * 6e4;
+var HELD_ASKS_SHOWN = 3;
+var REMEMBERED_PER_SESSION = 200;
+var SESSION_IDLE_MS2 = 24 * 60 * 6e4;
+var cap = (xs) => xs.slice(-REMEMBERED_PER_SESSION);
+var HeldAsks = class {
+  sessions = /* @__PURE__ */ new Map();
+  constructor(snapshot) {
+    const isWitness = (w) => typeof w?.nodeId === "string" && typeof w?.witnessKey === "string";
+    for (const s of snapshot?.sessions ?? []) {
+      if (typeof s?.id !== "string" || !Array.isArray(s.asks)) continue;
+      this.sessions.set(s.id, {
+        asks: s.asks.filter((a) => typeof a?.priorId === "string" && isWitness(a.witness)),
+        judged: Array.isArray(s.judged) ? s.judged.filter((j) => typeof j === "string") : [],
+        released: Array.isArray(s.released) ? s.released.filter(isWitness) : [],
+        touchedAt: Number(s.touchedAt) || 0,
+        ...typeof s.endedAt === "number" ? { endedAt: s.endedAt } : {}
+      });
+    }
+  }
+  /**
+   * One harvest's leans and verdicts for a session — see the module doc for the
+   * rules. `canOpen` is whether this turn can be asked (a live main session's own
+   * turn); when it can't, leans still settle against what the session holds but
+   * open nothing, and a lean on a prior it holds nothing for passes through.
+   */
+  record(sessionId, harvest, now = Date.now()) {
+    const out2 = {
+      withheld: /* @__PURE__ */ new Set(),
+      opened: [],
+      answered: [],
+      answeredShown: [],
+      release: [],
+      changed: false
+    };
+    if (!sessionId) return out2;
+    const existing = this.sessions.get(sessionId);
+    if (!existing && harvest.leaned.length === 0) return out2;
+    const state = existing ?? { asks: [], judged: [], released: [], touchedAt: now };
+    state.touchedAt = now;
+    if (harvest.canOpen) delete state.endedAt;
+    out2.changed = true;
+    const said = new Set(state.judged);
+    for (const v of harvest.verdicts) {
+      const open2 = state.asks.find((a) => a.priorId === v.priorId);
+      if (open2) {
+        state.asks = state.asks.filter((a) => a !== open2);
+        if (v.kind === "link") {
+          out2.release.push({ sessionId, witness: open2.witness });
+          state.released = cap([...state.released, open2.witness]);
+        } else {
+          out2.answered.push(v.priorId);
+          if (open2.shownAt != null && open2.shownAt < now) out2.answeredShown.push(v.priorId);
+        }
+      } else if ((v.kind === "confirm" || v.kind === "fix") && v.witnessKey && state.released.some((w) => w.nodeId === v.priorId)) {
+        out2.withheld.add(v.witnessKey);
+      }
+      if (v.kind !== "link") said.add(v.priorId);
+    }
+    state.judged = cap([...said]);
+    for (const w of harvest.leaned) {
+      const open2 = state.asks.find((a) => a.priorId === w.nodeId);
+      if (open2 || said.has(w.nodeId) || state.released.some((r) => r.nodeId === w.nodeId)) {
+        out2.withheld.add(w.witnessKey);
+        if (open2) open2.leanedAt = Math.max(open2.leanedAt, now);
+        continue;
+      }
+      if (!harvest.canOpen || harvest.verdicts.some((v) => v.priorId === w.nodeId && v.kind === "link")) {
+        state.released = cap([...state.released, w]);
+        continue;
+      }
+      out2.withheld.add(w.witnessKey);
+      state.asks.push({ priorId: w.nodeId, leanedAt: now, witness: w });
+      out2.opened.push(w.nodeId);
+    }
+    this.sessions.set(sessionId, state);
+    return out2;
+  }
+  /** Open questions, newest first (the caller drops dead priors, then shows the first few). */
+  forSession(sessionId, now = Date.now()) {
+    const state = this.sessions.get(sessionId);
+    if (!state || state.endedAt != null) return [];
+    return state.asks.filter((a) => now - a.leanedAt < HELD_ASK_TTL_MS).sort((a, b) => b.leanedAt - a.leanedAt);
+  }
+  /** A render showed these questions. */
+  markShown(sessionId, priorIds, now = Date.now()) {
+    for (const a of this.sessions.get(sessionId)?.asks ?? []) if (priorIds.includes(a.priorId)) a.shownAt ??= now;
+  }
+  /** The prior is gone (invalidated): drop the question and its witness — there is nothing to corroborate. */
+  discard(sessionId, priorId) {
+    const state = this.sessions.get(sessionId);
+    if (state) state.asks = state.asks.filter((a) => a.priorId !== priorId);
+  }
+  /** The session ended: its questions are released after a short grace (see {@link HELD_ASK_END_GRACE_MS}). */
+  endSession(sessionId, now = Date.now()) {
+    const state = this.sessions.get(sessionId);
+    if (!state || state.endedAt != null) return false;
+    state.endedAt = now;
+    return true;
+  }
+  /** Questions past their TTL, or of sessions ended past the grace, across sessions: their leans are released. */
+  expire(now = Date.now()) {
+    const released = [];
+    for (const [sessionId, state] of this.sessions) {
+      const ended = state.endedAt != null && now - state.endedAt >= HELD_ASK_END_GRACE_MS;
+      const keep = [];
+      for (const a of state.asks) {
+        if (ended || now - a.leanedAt >= HELD_ASK_TTL_MS) {
+          released.push({ sessionId, witness: a.witness });
+          state.released = cap([...state.released, a.witness]);
+        } else keep.push(a);
+      }
+      state.asks = keep;
+      if (keep.length === 0 && now - state.touchedAt > SESSION_IDLE_MS2) this.sessions.delete(sessionId);
+    }
+    return released;
+  }
+  /** A cache-key fingerprint of what this session's block could show. */
+  version(sessionId, now = Date.now()) {
+    return this.forSession(sessionId, now).map((a) => a.priorId).join(",");
+  }
+  snapshot() {
+    return { sessions: [...this.sessions].map(([id, s]) => ({ id, ...s })) };
+  }
+};
+function heldAsksPath(workspaceConfigDir) {
+  return join26(workspaceConfigDir, "held-asks.json");
+}
+function loadHeldAsks(path3) {
+  try {
+    return new HeldAsks(JSON.parse(readFileSync22(path3, "utf8")));
+  } catch {
+    return new HeldAsks();
+  }
+}
+function saveHeldAsks(path3, asks) {
+  try {
+    const tmp = join26(dirname15(path3), `.${Date.now()}.held-asks.tmp`);
+    writeFileSync16(tmp, JSON.stringify(asks.snapshot()), "utf8");
+    renameSync4(tmp, path3);
+  } catch {
+  }
+}
+
 // src/rollup.ts
 function readConversation(transcriptPath, includeThinking = true, maxChars = 6e4) {
   const raw2 = readTail(transcriptPath, 4e6);
@@ -84070,8 +84249,8 @@ ${conversation}` }]
 // src/constraint-backfill.ts
 init_src5();
 init_src2();
-import { existsSync as existsSync22, readFileSync as readFileSync22, readdirSync as readdirSync8, writeFileSync as writeFileSync16 } from "node:fs";
-import { join as join26 } from "node:path";
+import { existsSync as existsSync22, readFileSync as readFileSync23, readdirSync as readdirSync8, writeFileSync as writeFileSync17 } from "node:fs";
+import { join as join27 } from "node:path";
 import { homedir as homedir5 } from "node:os";
 var BACKFILL_VERSION = 1;
 var EMPTY = {
@@ -84085,13 +84264,13 @@ var EMPTY = {
   recoverable: 0
 };
 function markerPath(configDir) {
-  return join26(configDir, "constraint-backfill.json");
+  return join27(configDir, "constraint-backfill.json");
 }
 function alreadyDone(configDir) {
   const p = markerPath(configDir);
   if (!existsSync22(p)) return false;
   try {
-    const raw2 = JSON.parse(readFileSync22(p, "utf8"));
+    const raw2 = JSON.parse(readFileSync23(p, "utf8"));
     return raw2?.version === BACKFILL_VERSION;
   } catch {
     return false;
@@ -84111,7 +84290,7 @@ function replay(root) {
   for (const f of names) {
     let lines;
     try {
-      lines = readFileSync22(join26(dir, f), "utf8").split("\n");
+      lines = readFileSync23(join27(dir, f), "utf8").split("\n");
     } catch {
       continue;
     }
@@ -84225,7 +84404,7 @@ function backfillConstraintKind(store, opts) {
     }
   });
   try {
-    writeFileSync16(
+    writeFileSync17(
       markerPath(opts.configDir),
       JSON.stringify({ version: BACKFILL_VERSION, at: opts.now, ...report, cloudTwins: report.cloudTwins.length }, null, 2),
       "utf8"
@@ -84238,8 +84417,8 @@ function backfillConstraintKind(store, opts) {
 // src/edge-repair.ts
 init_src();
 init_src5();
-import { existsSync as existsSync23, readFileSync as readFileSync23, writeFileSync as writeFileSync17 } from "node:fs";
-import { join as join27 } from "node:path";
+import { existsSync as existsSync23, readFileSync as readFileSync24, writeFileSync as writeFileSync18 } from "node:fs";
+import { join as join28 } from "node:path";
 function citeEdgeId(from, type, to) {
   return `edge_${digest({ from, type, to })}`.slice(0, 24);
 }
@@ -84254,13 +84433,13 @@ var EMPTY2 = {
   byType: {}
 };
 function markerPath2(configDir) {
-  return join27(configDir, "edge-repair.json");
+  return join28(configDir, "edge-repair.json");
 }
 function alreadyDone2(configDir) {
   const p = markerPath2(configDir);
   if (!existsSync23(p)) return false;
   try {
-    return JSON.parse(readFileSync23(p, "utf8"))?.version === EDGE_REPAIR_VERSION;
+    return JSON.parse(readFileSync24(p, "utf8"))?.version === EDGE_REPAIR_VERSION;
   } catch {
     return false;
   }
@@ -84309,7 +84488,7 @@ function repairInvalidEdges(store, opts) {
   });
   store.pruneEdgeRejections(opts.now - REJECTION_RETENTION_MS);
   try {
-    writeFileSync17(
+    writeFileSync18(
       markerPath2(opts.configDir),
       JSON.stringify({ version: EDGE_REPAIR_VERSION, at: opts.now, ...report }, null, 2),
       "utf8"
@@ -84323,8 +84502,8 @@ function repairInvalidEdges(store, opts) {
 init_reconcile();
 
 // src/pass-ledger.ts
-import { appendFileSync as appendFileSync2, existsSync as existsSync24, readFileSync as readFileSync24, writeFileSync as writeFileSync18 } from "node:fs";
-import { join as join28 } from "node:path";
+import { appendFileSync as appendFileSync2, existsSync as existsSync24, readFileSync as readFileSync25, writeFileSync as writeFileSync19 } from "node:fs";
+import { join as join29 } from "node:path";
 
 // src/isolate-census.ts
 var live3 = 0;
@@ -84355,7 +84534,7 @@ var HOUR_MS = 36e5;
 var TRIM_EVERY = 50;
 var appendsSinceTrim = /* @__PURE__ */ new Map();
 function passLedgerPath(configDir) {
-  return join28(configDir, "pass-ledger.jsonl");
+  return join29(configDir, "pass-ledger.jsonl");
 }
 function appendPassLedger(configDir, kind, durationMs, counts) {
   const path3 = passLedgerPath(configDir);
@@ -84387,7 +84566,7 @@ function appendPassLedger(configDir, kind, durationMs, counts) {
       return;
     }
     appendsSinceTrim.set(path3, 0);
-    const lines = readFileSync24(path3, "utf8").split("\n").filter(Boolean);
+    const lines = readFileSync25(path3, "utf8").split("\n").filter(Boolean);
     const keptByKind = /* @__PURE__ */ new Map();
     const tailHours = /* @__PURE__ */ new Map();
     const tailFloor = Date.now() - LEVEL_TAIL_DAYS * 24 * HOUR_MS;
@@ -84415,7 +84594,7 @@ function appendPassLedger(configDir, kind, durationMs, counts) {
       kept.push(lines[i2]);
     }
     if (kept.length < lines.length) {
-      writeFileSync18(path3, kept.reverse().join("\n") + "\n");
+      writeFileSync19(path3, kept.reverse().join("\n") + "\n");
     }
   } catch {
   }
@@ -84424,7 +84603,7 @@ function readPassLedger(configDir) {
   const path3 = passLedgerPath(configDir);
   if (!existsSync24(path3)) return [];
   try {
-    return readFileSync24(path3, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter(
+    return readFileSync25(path3, "utf8").split("\n").filter(Boolean).map((l) => JSON.parse(l)).filter(
       (e) => typeof e?.ts === "number" && typeof e?.kind === "string" && typeof e?.durationMs === "number"
     ).map((e) => ({ ...e, counts: e.counts ?? {} }));
   } catch {
@@ -84867,11 +85046,11 @@ init_outbox();
 init_src10();
 init_src();
 init_src2();
-import { readFileSync as readFileSync25 } from "node:fs";
-import { join as join29 } from "node:path";
+import { readFileSync as readFileSync26 } from "node:fs";
+import { join as join30 } from "node:path";
 function loadClaimIgnorePatterns(workspaceRoot) {
   try {
-    return readFileSync25(join29(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
+    return readFileSync26(join30(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
   } catch {
     return [];
   }
@@ -85254,9 +85433,9 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
 // src/retrieval-stack.ts
 init_src();
 import { execFileSync as execFileSync5 } from "node:child_process";
-import { existsSync as existsSync25, readFileSync as readFileSync26, statSync as statSync11 } from "node:fs";
+import { existsSync as existsSync25, readFileSync as readFileSync27, statSync as statSync11 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 var RETRIEVAL_STACK_CAP = 24;
 var MANIFEST_SCAN_CAP = 400;
 var RUNTIME_TOKENS = /* @__PURE__ */ new Set([
@@ -85546,51 +85725,51 @@ function mavenGroupIsSelfDisclosing(name2, selfTokens) {
 function loadRegistryPolicy(root, env2 = process.env, repoLocator) {
   const read2 = (p) => {
     try {
-      return readFileSync26(p, "utf8");
+      return readFileSync27(p, "utf8");
     } catch {
       return null;
     }
   };
   const texts = (...paths) => paths.map(read2).filter((t) => t !== null);
   const home = homedir6();
-  const npm = parseNpmrcPolicy(texts(join30(root, ".npmrc"), join30(home, ".npmrc")));
+  const npm = parseNpmrcPolicy(texts(join31(root, ".npmrc"), join31(home, ".npmrc")));
   const blocked = /* @__PURE__ */ new Set();
   if (!npm.defaultPublic) blocked.add("npm");
   if (pypiIndexIsPrivate(
     texts(
-      join30(root, "pip.conf"),
-      join30(root, "pip.ini"),
-      join30(root, "pyproject.toml"),
-      join30(root, "requirements.txt"),
-      join30(home, ".pip", "pip.conf"),
-      join30(home, ".config", "pip", "pip.conf"),
-      join30(env2["APPDATA"] ?? home, "pip", "pip.ini")
+      join31(root, "pip.conf"),
+      join31(root, "pip.ini"),
+      join31(root, "pyproject.toml"),
+      join31(root, "requirements.txt"),
+      join31(home, ".pip", "pip.conf"),
+      join31(home, ".config", "pip", "pip.conf"),
+      join31(env2["APPDATA"] ?? home, "pip", "pip.ini")
     )
   )) {
     blocked.add("pypi");
   }
   if (cargoRegistryIsPrivate(
     texts(
-      join30(root, ".cargo", "config.toml"),
-      join30(root, ".cargo", "config"),
-      join30(home, ".cargo", "config.toml"),
-      join30(home, ".cargo", "config")
+      join31(root, ".cargo", "config.toml"),
+      join31(root, ".cargo", "config"),
+      join31(home, ".cargo", "config.toml"),
+      join31(home, ".cargo", "config")
     )
   )) {
     blocked.add("cargo");
   }
   if (nugetSourcesArePrivate(
     texts(
-      join30(root, "NuGet.config"),
-      join30(root, "nuget.config"),
-      join30(root, "NuGet.Config"),
-      join30(env2["APPDATA"] ?? home, "NuGet", "NuGet.Config"),
-      join30(home, ".nuget", "NuGet", "NuGet.Config")
+      join31(root, "NuGet.config"),
+      join31(root, "nuget.config"),
+      join31(root, "NuGet.Config"),
+      join31(env2["APPDATA"] ?? home, "NuGet", "NuGet.Config"),
+      join31(home, ".nuget", "NuGet", "NuGet.Config")
     )
   )) {
     blocked.add("nuget");
   }
-  const goEnvFile = env2["GOENV"] ?? join30(env2["APPDATA"] ?? join30(home, ".config"), "go", "env");
+  const goEnvFile = env2["GOENV"] ?? join31(env2["APPDATA"] ?? join31(home, ".config"), "go", "env");
   const goEnvText = read2(goEnvFile) ?? "";
   const fromFile = ["GOPRIVATE", "GONOSUMDB", "GONOSUMCHECK"].map(
     (k) => new RegExp(`^${k}=(.*)$`, "m").exec(goEnvText)?.[1]
@@ -85601,10 +85780,10 @@ function loadRegistryPolicy(root, env2 = process.env, repoLocator) {
     env2["GONOSUMCHECK"],
     ...fromFile
   ]);
-  const gemfiles = texts(join30(root, "Gemfile"));
+  const gemfiles = texts(join31(root, "Gemfile"));
   if (gemSourceIsPrivate(gemfiles)) blocked.add("gem");
   if (mavenReposArePrivate(
-    texts(join30(root, "pom.xml"), join30(home, ".m2", "settings.xml"))
+    texts(join31(root, "pom.xml"), join31(home, ".m2", "settings.xml"))
   )) {
     blocked.add("maven");
   }
@@ -85676,7 +85855,7 @@ function isLocalSpec(version3) {
   return v.startsWith("workspace:") || v.startsWith("link:") || v.startsWith("file:") || v.startsWith("portal:") || v.startsWith("path:") || v.startsWith("git:") || v.startsWith("git+") || v.includes("://") || VCS_HOST_SHORTHAND.test(v) || SCP_STYLE_REMOTE.test(v) || BARE_REPO_SHORTHAND.test(v);
 }
 function retrievalStackTokens(input) {
-  const cap = input.cap ?? RETRIEVAL_STACK_CAP;
+  const cap2 = input.cap ?? RETRIEVAL_STACK_CAP;
   const registry2 = input.registry ?? PUBLIC_REGISTRY_POLICY;
   const ignore2 = input.ignorePatterns ?? [];
   const ignored = (token) => ignore2.length > 0 && ignore2.some((p) => token.includes(p));
@@ -85734,10 +85913,10 @@ function retrievalStackTokens(input) {
   }
   const queues = [...byEcosystem.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([ecosystem, cs]) => ({ ecosystem, items: rankCandidates(cs) }));
   const usedEcosystems = /* @__PURE__ */ new Set();
-  for (let round2 = 0; tokens.length < cap; round2++) {
+  for (let round2 = 0; tokens.length < cap2; round2++) {
     let emittedThisRound = false;
     for (const q of queues) {
-      if (tokens.length >= cap) break;
+      if (tokens.length >= cap2) break;
       const c = q.items[round2];
       if (!c) continue;
       emittedThisRound = true;
@@ -85750,14 +85929,14 @@ function retrievalStackTokens(input) {
   }
   if (packagesAllowed) {
     for (const t of normStackTokens(input.profileStack)) {
-      if (tokens.length >= cap) break;
+      if (tokens.length >= cap2) break;
       if (isRuntimeToken(t)) continue;
       if (!isPublicDep({ ecosystem: "npm", name: t }, registry2)) continue;
       push(t);
     }
   }
   const source = fromLockfile > 0 && fromManifest > 0 ? "both" : fromLockfile > 0 ? "lockfile" : fromManifest > 0 ? "manifest" : "profile";
-  return { tokens: tokens.slice(0, cap), source, ecosystems: [...usedEcosystems].sort() };
+  return { tokens: tokens.slice(0, cap2), source, ecosystems: [...usedEcosystems].sort() };
 }
 var LOCKFILES = [
   { file: "pnpm-lock.yaml", family: "npm", parse: parsePnpmLock },
@@ -85771,7 +85950,7 @@ function readDirectDependencies(root) {
   const familiesSeen = /* @__PURE__ */ new Set();
   for (const c of LOCKFILES) {
     if (familiesSeen.has(c.family)) continue;
-    const p = join30(root, c.file);
+    const p = join31(root, c.file);
     if (!existsSync25(p)) continue;
     try {
       const s = statSync11(p);
@@ -85792,7 +85971,7 @@ function readDirectDependencies(root) {
   const direct = [];
   for (const { c, path: path3 } of found) {
     try {
-      direct.push(...c.parse(readFileSync26(path3, "utf8")).direct ?? []);
+      direct.push(...c.parse(readFileSync27(path3, "utf8")).direct ?? []);
     } catch {
     }
   }
@@ -85835,14 +86014,14 @@ function manifestPaths(root) {
     "project.godot"
   ];
   return {
-    paths: ROOT_MANIFESTS.filter((f) => existsSync25(join30(root, f))),
+    paths: ROOT_MANIFESTS.filter((f) => existsSync25(join31(root, f))),
     tracked: false,
     truncated: false
   };
 }
 var WORKSPACE_MARKERS = ["pnpm-workspace.yaml", "lerna.json", "go.work", "settings.gradle", "settings.gradle.kts"];
 function rootDeclaresWorkspace(root, texts) {
-  if (WORKSPACE_MARKERS.some((f) => existsSync25(join30(root, f)))) return true;
+  if (WORKSPACE_MARKERS.some((f) => existsSync25(join31(root, f)))) return true;
   return /"workspaces"\s*:/.test(texts.get("package.json") ?? "") || /<modules>/.test(texts.get("pom.xml") ?? "") || /^\s*\[workspace\]/m.test(texts.get("Cargo.toml") ?? "");
 }
 var EMPTY_SCAN = { deps: [], self: [], complete: true };
@@ -85856,11 +86035,11 @@ function scanManifests(root) {
   const texts = /* @__PURE__ */ new Map();
   const stamps = [];
   for (const rel of paths) {
-    const abs = join30(root, rel);
+    const abs = join31(root, rel);
     try {
       const s = statSync11(abs);
       stamps.push(`${rel}:${s.mtimeMs}:${s.size}`);
-      texts.set(rel, readFileSync26(abs, "utf8"));
+      texts.set(rel, readFileSync27(abs, "utf8"));
     } catch {
     }
   }
@@ -85896,22 +86075,22 @@ function readRetrievalInputs(root, repoLocator) {
 }
 
 // src/git-sensor.ts
-import { existsSync as existsSync26, readFileSync as readFileSync27, watch as fsWatch } from "node:fs";
-import { join as join31 } from "node:path";
+import { existsSync as existsSync26, readFileSync as readFileSync28, watch as fsWatch } from "node:fs";
+import { join as join32 } from "node:path";
 function readFirstLine(path3) {
   try {
-    return readFileSync27(path3, "utf8").split(/\r?\n/, 1)[0].trim();
+    return readFileSync28(path3, "utf8").split(/\r?\n/, 1)[0].trim();
   } catch {
     return null;
   }
 }
 function readGitRefState(gitDir) {
-  const head2 = readFirstLine(join31(gitDir, "HEAD"));
+  const head2 = readFirstLine(join32(gitDir, "HEAD"));
   const m = head2 ? /^ref:\s*refs\/heads\/(.+)$/.exec(head2) : null;
   const branch = m ? m[1] : null;
   let sha2 = null;
   if (branch) {
-    sha2 = readFirstLine(join31(gitDir, "refs", "heads", branch));
+    sha2 = readFirstLine(join32(gitDir, "refs", "heads", branch));
     if (!sha2) sha2 = shaFromPackedRefs(gitDir, `refs/heads/${branch}`);
   } else if (head2 && /^[0-9a-f]{7,40}$/i.test(head2)) {
     sha2 = head2;
@@ -85919,13 +86098,13 @@ function readGitRefState(gitDir) {
   return {
     branch,
     sha: sha2,
-    mergeHeadExists: existsSync26(join31(gitDir, "MERGE_HEAD")),
-    origHeadExists: existsSync26(join31(gitDir, "ORIG_HEAD"))
+    mergeHeadExists: existsSync26(join32(gitDir, "MERGE_HEAD")),
+    origHeadExists: existsSync26(join32(gitDir, "ORIG_HEAD"))
   };
 }
 function shaFromPackedRefs(gitDir, ref) {
   try {
-    for (const line of readFileSync27(join31(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync28(join32(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
       const [sha2, name2] = line.split(/\s+/);
       if (name2 === ref && sha2) return sha2;
     }
@@ -85959,7 +86138,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
   const settle = () => {
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
-      if (existsSync26(join31(gitDir, "index.lock"))) {
+      if (existsSync26(join32(gitDir, "index.lock"))) {
         settle();
         return;
       }
@@ -85970,7 +86149,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
     }, debounceMs);
   };
   for (const sub of ["HEAD", "logs/HEAD", "MERGE_HEAD", "ORIG_HEAD"]) {
-    const p = join31(gitDir, sub);
+    const p = join32(gitDir, sub);
     try {
       watchers.push(fsWatch(p, settle));
     } catch {
@@ -86200,8 +86379,8 @@ var TelemetryRecorder = class {
 };
 
 // src/file-activity.ts
-import { readFileSync as readFileSync29 } from "node:fs";
-import { join as join33 } from "node:path";
+import { readFileSync as readFileSync30 } from "node:fs";
+import { join as join34 } from "node:path";
 import { createHash as createHash17 } from "node:crypto";
 
 // ../../packages/privacy/src/patterns/credentials.ts
@@ -86953,8 +87132,8 @@ init_git_remote();
 // src/history-bundle.ts
 init_src();
 import { execFile as execFile3 } from "node:child_process";
-import { readFileSync as readFileSync28 } from "node:fs";
-import { join as join32 } from "node:path";
+import { readFileSync as readFileSync29 } from "node:fs";
+import { join as join33 } from "node:path";
 var DEFAULT_MAX_TOKENS = 6e3;
 var FILE_LIST_CAP = 60;
 var DIFF_FILE_CAP = 40;
@@ -86993,7 +87172,7 @@ function pathAllowedByFloor(path3) {
 function loadRepoIgnore(root, extraPatterns = []) {
   let source = "";
   try {
-    source = readFileSync28(join32(root, ".errataignore"), "utf8");
+    source = readFileSync29(join33(root, ".errataignore"), "utf8");
   } catch {
     source = "";
   }
@@ -87298,7 +87477,7 @@ function readActivityBranch(root) {
   try {
     const gitDir = resolveGitDir(root);
     if (!gitDir) return null;
-    const head2 = readFileSync29(join33(gitDir, "HEAD"), "utf8").trim();
+    const head2 = readFileSync30(join34(gitDir, "HEAD"), "utf8").trim();
     const branch = head2.startsWith("ref: refs/heads/") ? head2.slice(16) : /^[a-f0-9]{40,64}$/i.test(head2) ? "HEAD" : null;
     return branch && branch.length <= 256 && !/[\x00-\x1f\x7f]/.test(branch) ? branch : null;
   } catch {
@@ -87457,19 +87636,19 @@ var FileActivityReporter = class {
 import {
   existsSync as existsSync27,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync30,
+  readFileSync as readFileSync31,
   readdirSync as readdirSync9,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync19
+  writeFileSync as writeFileSync20
 } from "node:fs";
-import { basename as basename7, join as join34 } from "node:path";
+import { basename as basename7, join as join35 } from "node:path";
 function skillFileName(id) {
   return `${id.replace(/[^A-Za-z0-9_.-]/g, "_")}.md`;
 }
 function readSkillManifest(manifestPath) {
   if (!existsSync27(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync30(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync31(manifestPath, "utf8"));
     return (parsed.skills ?? []).map((s) => ({
       title: s.title ?? "",
       layer: s.layer ?? "technique",
@@ -87493,7 +87672,7 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
   for (const s of res.skills) {
     const fileName = skillFileName(s.id);
     keep.add(fileName);
-    writeFileSync19(join34(paths.skillsDir, fileName), s.markdown, "utf8");
+    writeFileSync20(join35(paths.skillsDir, fileName), s.markdown, "utf8");
     rows.push({
       id: s.id,
       title: s.title,
@@ -87506,7 +87685,7 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
     const fileName = skillFileName(p.id);
     if (keep.has(fileName)) continue;
     keep.add(fileName);
-    writeFileSync19(join34(paths.skillsDir, fileName), p.markdown, "utf8");
+    writeFileSync20(join35(paths.skillsDir, fileName), p.markdown, "utf8");
     rows.push({
       id: p.id,
       title: p.title,
@@ -87520,13 +87699,13 @@ async function syncSkills(paths, client, seed, pins = [], techSeed) {
     if (!f.endsWith(".md")) continue;
     if (keep.has(basename7(f))) continue;
     try {
-      unlinkSync4(join34(paths.skillsDir, f));
+      unlinkSync4(join35(paths.skillsDir, f));
       pruned++;
     } catch {
     }
   }
   rows.sort((a, b) => a.id.localeCompare(b.id));
-  writeFileSync19(
+  writeFileSync20(
     paths.skillsManifest,
     JSON.stringify({ generatedAt: Date.now(), skills: rows }, null, 2),
     "utf8"
@@ -87541,19 +87720,19 @@ import {
   existsSync as existsSync28,
   lstatSync,
   mkdirSync as mkdirSync8,
-  readFileSync as readFileSync31,
+  readFileSync as readFileSync32,
   readdirSync as readdirSync10,
   rmSync as rmSync3,
   symlinkSync,
-  writeFileSync as writeFileSync20
+  writeFileSync as writeFileSync21
 } from "node:fs";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 var SKILL_NS = "errata-";
 var HARNESS_SKILL_DIRS = [
-  { configDir: ".claude", skillsDir: join35(".claude", "skills") },
+  { configDir: ".claude", skillsDir: join36(".claude", "skills") },
   // Cursor adopted the standard; its exact project dir is still moving — kept
   // best-effort and gated on `.cursor/` presence so we never create it blind.
-  { configDir: ".cursor", skillsDir: join35(".cursor", "skills") }
+  { configDir: ".cursor", skillsDir: join36(".cursor", "skills") }
 ];
 function skillSlug(title, id) {
   const base = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || id.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "skill";
@@ -87603,7 +87782,7 @@ function reconcileNamespaced(dir, keep) {
   for (const name2 of readdirSync10(dir)) {
     if (!name2.startsWith(SKILL_NS) || keep.has(name2)) continue;
     try {
-      rmSync3(join35(dir, name2), { recursive: true, force: true });
+      rmSync3(join36(dir, name2), { recursive: true, force: true });
       pruned++;
     } catch {
     }
@@ -87633,7 +87812,7 @@ function safeLstat(p) {
   }
 }
 function emitAndProjectSkills(root, skills) {
-  const agentsSkillsDir = join35(root, ".agents", "skills");
+  const agentsSkillsDir = join36(root, ".agents", "skills");
   mkdirSync8(agentsSkillsDir, { recursive: true });
   const slugs = [];
   const keep = /* @__PURE__ */ new Set();
@@ -87641,7 +87820,7 @@ function emitAndProjectSkills(root, skills) {
   for (const s of skills) {
     let body2;
     try {
-      body2 = readFileSync31(s.bodyPath, "utf8");
+      body2 = readFileSync32(s.bodyPath, "utf8");
     } catch {
       continue;
     }
@@ -87650,9 +87829,9 @@ function emitAndProjectSkills(root, skills) {
     keep.add(slug2);
     slugs.push(slug2);
     const description = deriveDescription(s.title, s.layer, body2);
-    mkdirSync8(join35(agentsSkillsDir, slug2), { recursive: true });
-    writeFileSync20(
-      join35(agentsSkillsDir, slug2, "SKILL.md"),
+    mkdirSync8(join36(agentsSkillsDir, slug2), { recursive: true });
+    writeFileSync21(
+      join36(agentsSkillsDir, slug2, "SKILL.md"),
       renderSkillMd(slug2, description, body2, skillCiteHandle(s)),
       "utf8"
     );
@@ -87661,11 +87840,11 @@ function emitAndProjectSkills(root, skills) {
   reconcileNamespaced(agentsSkillsDir, keep);
   let projected = 0;
   for (const h of HARNESS_SKILL_DIRS) {
-    if (!existsSync28(join35(root, h.configDir))) continue;
-    const dir = join35(root, h.skillsDir);
+    if (!existsSync28(join36(root, h.configDir))) continue;
+    const dir = join36(root, h.skillsDir);
     mkdirSync8(dir, { recursive: true });
     for (const slug2 of slugs) {
-      linkOrCopy(join35(dir, slug2), join35(agentsSkillsDir, slug2));
+      linkOrCopy(join36(dir, slug2), join36(agentsSkillsDir, slug2));
       projected++;
     }
     reconcileNamespaced(dir, keep);
@@ -87676,13 +87855,13 @@ function emitAndProjectSkills(root, skills) {
 function emitInputsFromManifest(erretaDir, manifestPath) {
   if (!existsSync28(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync31(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync32(manifestPath, "utf8"));
     return (parsed.skills ?? []).filter((s) => Boolean(s.id && s.file)).map((s) => ({
       id: s.id,
       title: s.title ?? s.id,
       layer: s.layer ?? "technique",
       confidence: s.confidence ?? 0,
-      bodyPath: join35(erretaDir, s.file)
+      bodyPath: join36(erretaDir, s.file)
     }));
   } catch {
     return [];
@@ -87696,17 +87875,17 @@ var GITIGNORE_LINES = [
   ".cursor/skills/errata-*/"
 ];
 function ensureSkillGitignore(root) {
-  const path3 = join35(root, ".gitignore");
+  const path3 = join36(root, ".gitignore");
   let current = "";
   try {
-    current = existsSync28(path3) ? readFileSync31(path3, "utf8") : "";
+    current = existsSync28(path3) ? readFileSync32(path3, "utf8") : "";
   } catch {
     return;
   }
   if (current.includes(GITIGNORE_MARK)) return;
   const prefix = current.length > 0 && !current.endsWith("\n") ? "\n" : "";
   try {
-    writeFileSync20(path3, `${current}${prefix}
+    writeFileSync21(path3, `${current}${prefix}
 ${GITIGNORE_LINES.join("\n")}
 `, "utf8");
   } catch {
@@ -87896,18 +88075,18 @@ init_paths();
 init_profile2();
 
 // src/witness-queue.ts
-import { readFileSync as readFileSync32, renameSync as renameSync4, writeFileSync as writeFileSync21 } from "node:fs";
-import { dirname as dirname15, join as join36 } from "node:path";
+import { readFileSync as readFileSync33, renameSync as renameSync5, writeFileSync as writeFileSync22 } from "node:fs";
+import { dirname as dirname16, join as join37 } from "node:path";
 var WITNESS_QUEUE_CAP = 500;
 var WITNESS_TTL_MS = 14 * 24 * 60 * 60 * 1e3;
 var WITNESS_MAX_ATTEMPTS = 5;
 function witnessQueuePath(workspaceConfigDir) {
-  return join36(workspaceConfigDir, "witness-queue.json");
+  return join37(workspaceConfigDir, "witness-queue.json");
 }
 function loadWitnessQueueWithLosses(path3) {
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync32(path3, "utf8"));
+    raw2 = JSON.parse(readFileSync33(path3, "utf8"));
   } catch (err2) {
     const absent = err2?.code === "ENOENT";
     return { queue: [], fileUnreadable: !absent, malformedEntries: 0 };
@@ -87920,9 +88099,9 @@ function loadWitnessQueueWithLosses(path3) {
 }
 function saveWitnessQueue(path3, queue) {
   try {
-    const tmp = join36(dirname15(path3), `.${Date.now()}.witness-queue.tmp`);
-    writeFileSync21(tmp, JSON.stringify(queue), "utf8");
-    renameSync4(tmp, path3);
+    const tmp = join37(dirname16(path3), `.${Date.now()}.witness-queue.tmp`);
+    writeFileSync22(tmp, JSON.stringify(queue), "utf8");
+    renameSync5(tmp, path3);
   } catch {
   }
 }
@@ -87940,6 +88119,9 @@ function pruneWitnessQueueWithDispositions(queue, now) {
   }
   return { queue: live4, dropped };
 }
+function enqueueWitnesses(queue, fresh, now) {
+  return enqueueWitnessesWithDispositions(queue, fresh, now).queue;
+}
 function enqueueWitnessesWithDispositions(queue, fresh, now) {
   const byKey = new Map(queue.map((w) => [`${w.channel}:${w.witnessKey}`, w]));
   for (const f of fresh) {
@@ -88230,8 +88412,8 @@ function maybeFlushDigests() {
 
 // src/liveness-watch.ts
 init_src5();
-import { readFileSync as readFileSync34, writeFileSync as writeFileSync23 } from "node:fs";
-import { join as join38 } from "node:path";
+import { readFileSync as readFileSync35, writeFileSync as writeFileSync24 } from "node:fs";
+import { join as join39 } from "node:path";
 
 // src/loop-lag.ts
 var HEARTBEAT_MS = 500;
@@ -88363,11 +88545,11 @@ function watchCensusLine(c = watchCensus(), now = Date.now()) {
 var LIVENESS_WATCH_INTERVAL_MS = 60 * 60 * 1e3;
 var ALARM_RENOTIFY_MS = 24 * 60 * 60 * 1e3;
 function alarmStatePath(configDir) {
-  return join38(configDir, "liveness-alarms.json");
+  return join39(configDir, "liveness-alarms.json");
 }
 function loadAlarmState(path3) {
   try {
-    const raw2 = JSON.parse(readFileSync34(path3, "utf8"));
+    const raw2 = JSON.parse(readFileSync35(path3, "utf8"));
     return new Map(Object.entries(raw2).filter((e) => typeof e[1] === "number"));
   } catch {
     return /* @__PURE__ */ new Map();
@@ -88375,7 +88557,7 @@ function loadAlarmState(path3) {
 }
 function saveAlarmState(path3, state) {
   try {
-    writeFileSync23(path3, JSON.stringify(Object.fromEntries(state)));
+    writeFileSync24(path3, JSON.stringify(Object.fromEntries(state)));
   } catch {
   }
 }
@@ -88631,7 +88813,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.23-dev.4901" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.23-dev.4938" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -88644,7 +88826,7 @@ function appendIdentityAudit(path3, record2, line) {
   if (!record2.accepted && record2.score <= 0) return;
   try {
     if (existsSync30(path3) && statSync12(path3).size >= IDENTITY_AUDIT_MAX_BYTES) {
-      renameSync5(path3, `${path3}.1`);
+      renameSync6(path3, `${path3}.1`);
     }
     appendFileSync4(path3, line);
   } catch {
@@ -88653,7 +88835,7 @@ function appendIdentityAudit(path3, record2, line) {
 var yieldToLoop = () => new Promise((r) => setImmediate(r));
 function loadTurnCursors(path3) {
   try {
-    const raw2 = JSON.parse(readFileSync35(path3, "utf8"));
+    const raw2 = JSON.parse(readFileSync36(path3, "utf8"));
     return new Map(
       Object.entries(raw2).map(([k, v]) => [k, typeof v === "string" ? v : String(v?.uuid ?? "")])
     );
@@ -88663,7 +88845,7 @@ function loadTurnCursors(path3) {
 }
 function loadTurnOffsets(path3) {
   try {
-    const raw2 = JSON.parse(readFileSync35(path3, "utf8"));
+    const raw2 = JSON.parse(readFileSync36(path3, "utf8"));
     const out2 = /* @__PURE__ */ new Map();
     for (const [k, v] of Object.entries(raw2)) {
       const off2 = typeof v === "object" && v !== null ? v.offset : void 0;
@@ -88676,7 +88858,7 @@ function loadTurnOffsets(path3) {
 }
 function loadTurnMoves(path3) {
   try {
-    const raw2 = JSON.parse(readFileSync35(path3, "utf8"));
+    const raw2 = JSON.parse(readFileSync36(path3, "utf8"));
     const out2 = /* @__PURE__ */ new Map();
     for (const [k, v] of Object.entries(raw2)) {
       const to = typeof v === "object" && v !== null ? v.movedTo : void 0;
@@ -88693,11 +88875,11 @@ function saveTurnCursors(path3, cursors, offsets, moves = /* @__PURE__ */ new Ma
     for (const [k, uuid3] of cursors) merged[k] = { uuid: uuid3, offset: offsets.get(k) ?? 0 };
     for (const [k, offset] of offsets) if (!merged[k]) merged[k] = { uuid: "", offset };
     for (const [k, movedTo] of moves) merged[k] = { ...merged[k] ?? { uuid: "", offset: 0 }, movedTo };
-    writeFileSync24(path3, JSON.stringify(merged), "utf8");
+    writeFileSync25(path3, JSON.stringify(merged), "utf8");
   } catch {
   }
 }
-var turnCursorFile = (configDir) => join39(configDir, "turn-cursors.json");
+var turnCursorFile = (configDir) => join40(configDir, "turn-cursors.json");
 function turnCursorOnDisk(configDir, sessionId) {
   const path3 = turnCursorFile(configDir);
   const offset = loadTurnOffsets(path3).get(sessionId);
@@ -88729,7 +88911,7 @@ function gitSourceWatchTargets(root) {
         ["-C", root, "ls-files", "--others", "--ignored", "--exclude-standard", "--directory", "-z"],
         { encoding: "utf8", maxBuffer: 256 * 1024 * 1024, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
       );
-      ignoredDirs = igOut.split("\0").filter(Boolean).map((d) => d.replace(/\/+$/, "")).filter((d) => !IGNORED_PATH.test(join39(root, d) + sep5));
+      ignoredDirs = igOut.split("\0").filter(Boolean).map((d) => d.replace(/\/+$/, "")).filter((d) => !IGNORED_PATH.test(join40(root, d) + sep5));
     } catch {
     }
     const hasIgnoredChild = (dir) => ignoredDirs.some((ig) => ig.startsWith(dir + "/"));
@@ -88741,19 +88923,19 @@ function gitSourceWatchTargets(root) {
         if (!f.startsWith(prefix)) continue;
         const rest2 = f.slice(prefix.length);
         if (rest2.includes("/")) children.add(dir === "" ? rest2.slice(0, rest2.indexOf("/")) : dir + "/" + rest2.slice(0, rest2.indexOf("/")));
-        else targets.add(join39(root, f));
+        else targets.add(join40(root, f));
       }
       for (const c of children) {
-        if (IGNORED_PATH.test(join39(root, c) + sep5)) continue;
+        if (IGNORED_PATH.test(join40(root, c) + sep5)) continue;
         if (hasIgnoredChild(c)) addUnder(c);
-        else targets.add(join39(root, c));
+        else targets.add(join40(root, c));
       }
     };
     addUnder("");
     if (targets.size > 0) return [...targets];
   } catch {
   }
-  return readdirSync11(root, { withFileTypes: true }).filter((e) => e.isDirectory() && !IGNORED_PATH.test(join39(root, String(e.name)) + sep5)).map((e) => join39(root, String(e.name)));
+  return readdirSync11(root, { withFileTypes: true }).filter((e) => e.isDirectory() && !IGNORED_PATH.test(join40(root, String(e.name)) + sep5)).map((e) => join40(root, String(e.name)));
 }
 function createWorkspaceEngine(opts) {
   const paths = workspacePaths(opts.workspaceRoot);
@@ -88955,7 +89137,7 @@ function createWorkspaceEngine(opts) {
       const srcPaths = diff.changedPaths.filter((p) => /\.(ts|tsx|js|jsx|mjs|cjs|py)$/i.test(p));
       let episodeId2;
       if (srcPaths.length > 0) {
-        const abs = srcPaths.map((p) => join39(opts.workspaceRoot, p));
+        const abs = srcPaths.map((p) => join40(opts.workspaceRoot, p));
         try {
           const r = await runReindexPass(
             `git-reindex:${profile.name} (${abs.length} files)`,
@@ -88991,7 +89173,7 @@ function createWorkspaceEngine(opts) {
         `[errata] git: ${ev.kind} ${ev.newSha.slice(0, 7)} by ${meta3.authorName} \u2014 ${diff.changedPaths.length} file(s), ${diff.renames.length} rename(s)`
       );
     };
-    const gitDir = join39(opts.workspaceRoot, ".git");
+    const gitDir = join40(opts.workspaceRoot, ".git");
     if (existsSync30(gitDir)) {
       stopGit = startGitSensor(gitDir, (ev) => {
         void handleGitEvent(ev).catch((err2) => {
@@ -89053,7 +89235,7 @@ function createWorkspaceEngine(opts) {
     },
     onAlarms: (alarms) => {
       toastLivenessAlarms(
-        sharedAlarmToastGate(join39(globalDir(), "liveness-toasts.json")),
+        sharedAlarmToastGate(join40(globalDir(), "liveness-toasts.json")),
         { root: opts.workspaceRoot, name: profile.name },
         alarms,
         (body2, key) => notifyEvent("mechanism-stalled", body2, { key }),
@@ -89080,10 +89262,27 @@ function createWorkspaceEngine(opts) {
   let subagentBase = null;
   let subagentBaseVersion = 0;
   const subagentRenders = /* @__PURE__ */ new Map();
-  const sessions = createSessionRegistry({ originsPath: join39(paths.configDir, "session-origins.json") });
+  const sessions = createSessionRegistry({ originsPath: join40(paths.configDir, "session-origins.json") });
   const sessionRenders = /* @__PURE__ */ new Map();
   const selfCiteSkipsBySession = /* @__PURE__ */ new Map();
   const supersessionAsks = new SupersessionAsks();
+  const heldAsks = loadHeldAsks(heldAsksPath(paths.configDir));
+  const releaseHeld = (all, t) => {
+    const released = all.filter((r) => store.getNode(r.witness.nodeId)?.validTo == null);
+    if (all.length > 0 && released.length === 0) saveHeldAsks(heldAsksPath(paths.configDir), heldAsks);
+    if (released.length === 0) return { stamped: 0, fixHeld: 0 };
+    const { stamped } = applyLocalConfirmations(store, released.map((r) => r.witness), t);
+    let fixHeld = 0;
+    for (const r of released) if (store.getNode(r.witness.nodeId)?.label === "Solution") fixHeld += confirmFixHeld(store, r.witness.nodeId, t);
+    witnessQueue = enqueueWitnesses(
+      witnessQueue,
+      released.map((r) => ({ channel: "corroborate", ...r.witness, sessionKey: sessionOriginKey(r.sessionId), counted: false })),
+      Date.now()
+    );
+    saveWitnessQueue(witnessQueuePath(paths.configDir), witnessQueue);
+    saveHeldAsks(heldAsksPath(paths.configDir), heldAsks);
+    return { stamped, fixHeld };
+  };
   const toolRuns = createToolRunState();
   let ctxRefreshTimer = null;
   let contextDirty = false;
@@ -89163,6 +89362,23 @@ function createWorkspaceEngine(opts) {
     const priors = a.priorIds.map((id) => store.getNode(id)).filter((n) => n !== null && n.validTo == null).map((n) => ({ id: n.id, description: n.description, ...lifecycleField(n) }));
     return fix && priors.length > 0 ? [{ fix: { id: fix.id, description: fix.description }, priors }] : [];
   });
+  const heldAsksFor = (sessionId) => {
+    const shown = [];
+    let discarded = false;
+    for (const a of heldAsks.forSession(sessionId)) {
+      if (shown.length >= HELD_ASKS_SHOWN) break;
+      const n = store.getNode(a.priorId);
+      if (n && n.validTo != null) {
+        heldAsks.discard(sessionId, a.priorId);
+        discarded = true;
+        continue;
+      }
+      shown.push(n ? { id: n.id, description: n.description, ...lifecycleField(n) } : { id: a.priorId });
+    }
+    heldAsks.markShown(sessionId, shown.map((s) => s.id));
+    if (discarded) saveHeldAsks(heldAsksPath(paths.configDir), heldAsks);
+    return shown;
+  };
   const statedIntentFor = (intent) => {
     const collective = intentRemote?.forIntent === intent ? intentRemote : null;
     return {
@@ -89185,7 +89401,7 @@ function createWorkspaceEngine(opts) {
     const elicit = isEdgeElicitationEnabled();
     const snapOpts = {
       profile,
-      atCommit: readGitRefState(join39(opts.workspaceRoot, ".git")).sha ?? void 0,
+      atCommit: readGitRefState(join40(opts.workspaceRoot, ".git")).sha ?? void 0,
       reviewCount: pendingCount(paths),
       reviewUiUrl: opts.reviewUrl(),
       workingFile: workingFiles.mostRecent() ?? void 0,
@@ -89225,7 +89441,7 @@ function createWorkspaceEngine(opts) {
       );
       return null;
     }) : null;
-    if (snapOpts.atCommit !== (readGitRefState(join39(opts.workspaceRoot, ".git")).sha ?? void 0)) {
+    if (snapOpts.atCommit !== (readGitRefState(join40(opts.workspaceRoot, ".git")).sha ?? void 0)) {
       contextDirty = true;
       return;
     }
@@ -89271,10 +89487,10 @@ function createWorkspaceEngine(opts) {
     } catch (err2) {
       console.warn("[errata] context card failed:", err2.message?.slice(0, 120));
     }
-    const target = join39(opts.workspaceRoot, "AGENTS.md");
+    const target = join40(opts.workspaceRoot, "AGENTS.md");
     writeManagedBlock(target, { body: AGENTS_POINTER_BODY, stable: true, force: true });
     if (elicit) {
-      writePrimingHandles(join39(paths.configDir, "priming-handles.json"), [
+      writePrimingHandles(join40(paths.configDir, "priming-handles.json"), [
         ...snapshot.recentProblems.map((r) => r.node),
         // Resolved-band handles: the ✓ problem AND its Solution are citable
         // (a fix tag on an already-resolved problem no-ops idempotently; the
@@ -89582,8 +89798,8 @@ function createWorkspaceEngine(opts) {
     const cached2 = subagentRenders.get(a.agentId);
     if (cached2?.key === key) return cached2.block;
     const elicit = isEdgeElicitationEnabled();
-    const handlesPath = join39(paths.configDir, "priming-handles.json");
-    const atCommit = readGitRefState(join39(opts.workspaceRoot, ".git")).sha ?? void 0;
+    const handlesPath = join40(paths.configDir, "priming-handles.json");
+    const atCommit = readGitRefState(join40(opts.workspaceRoot, ".git")).sha ?? void 0;
     const block = renderSubagentBlock({
       store,
       entry,
@@ -89616,8 +89832,10 @@ function createWorkspaceEngine(opts) {
       sessions.touch(e.sessionId, now, origin);
       return;
     }
-    if (e.ended) sessions.end(e.sessionId);
-    else sessions.touch(e.sessionId, now, origin);
+    if (e.ended) {
+      sessions.end(e.sessionId);
+      if (heldAsks.endSession(e.sessionId, now)) saveHeldAsks(heldAsksPath(paths.configDir), heldAsks);
+    } else sessions.touch(e.sessionId, now, origin);
   };
   const sessionContext = (sessionId) => {
     if (!sessionId || !subagentBase) return null;
@@ -89627,6 +89845,7 @@ function createWorkspaceEngine(opts) {
     const skips = selfCiteSkipsBySession.get(sessionId) ?? 0;
     const key = JSON.stringify([
       supersessionAsks.version(sessionId),
+      heldAsks.version(sessionId),
       subagentBaseVersion,
       lastRemoteAt,
       sessions.version(now),
@@ -89638,7 +89857,7 @@ function createWorkspaceEngine(opts) {
     const cached2 = sessionRenders.get(sessionId);
     if (cached2?.key === key) return cached2.block;
     const elicit = isEdgeElicitationEnabled();
-    const atCommit = readGitRefState(join39(opts.workspaceRoot, ".git")).sha ?? void 0;
+    const atCommit = readGitRefState(join40(opts.workspaceRoot, ".git")).sha ?? void 0;
     const scoped = scopeSnapshot(structuredClone(subagentBase), (n) => !hiddenFrom(n, sessionId, sessions, now));
     delete scoped.workingFile;
     if (workingFile) {
@@ -89650,6 +89869,9 @@ function createWorkspaceEngine(opts) {
     delete scoped.supersessionAsks;
     const asks = supersessionAsksFor(sessionId);
     if (asks.length > 0) scoped.supersessionAsks = asks;
+    delete scoped.heldAsks;
+    const held = heldAsksFor(sessionId);
+    if (held.length > 0) scoped.heldAsks = held;
     if (taskPriorsOn) {
       scoped.recentProblems = [];
       scoped.recentResolved = [];
@@ -89690,7 +89912,7 @@ function createWorkspaceEngine(opts) {
       ]
     };
     if (elicit && block.handleNodes.length) {
-      writePrimingHandles(join39(paths.configDir, "priming-handles.json"), block.handleNodes);
+      writePrimingHandles(join40(paths.configDir, "priming-handles.json"), block.handleNodes);
     }
     sessionRenders.delete(sessionId);
     sessionRenders.set(sessionId, { key, block });
@@ -89798,6 +90020,8 @@ function createWorkspaceEngine(opts) {
     let confirmsStamped = 0;
     let supersessionAsked = 0;
     let structureLinksMinted = 0;
+    let heldAsked = 0;
+    let heldAnswered = 0;
     let recurrencesMarked = 0;
     let reopenedFromRegression = 0;
     let fixHeldConfirmed = 0;
@@ -89824,7 +90048,7 @@ function createWorkspaceEngine(opts) {
     let processedTurns = 0;
     const seqAtStart = store.currentIngestSeq();
     const elicit = isEdgeElicitationEnabled();
-    const handleMap = elicit ? readPrimingHandles(join39(paths.configDir, "priming-handles.json")) : {};
+    const handleMap = elicit ? readPrimingHandles(join40(paths.configDir, "priming-handles.json")) : {};
     const wsRoot = (opts.workspaceRoot ?? "").replace(/\\/g, "/");
     const toRel = (abs) => {
       const p = abs.replace(/\\/g, "/");
@@ -89988,6 +90212,45 @@ function createWorkspaceEngine(opts) {
         corroboratedEdges += plan.corroboratedEdges;
         citeAnchorsAccrued += plan.citeAnchorsAccrued;
         citeAnchorsPromoted += plan.citeAnchorsPromoted;
+        {
+          const expired = releaseHeld(heldAsks.expire(t), t);
+          confirmsStamped += expired.stamped;
+          fixHeldConfirmed += expired.fixHeld;
+        }
+        let withheldLeanIds = [];
+        if (sessions.originOf(sessionId) === void 0) {
+          const subagentTurn = turn.agentId != null || sessionId.startsWith("agent-");
+          const canOpen = !subagentTurn && sessions.isLive(sessionId, t);
+          const mintedBySession = (nodeId) => store.getNode(nodeId)?.attrs["sources"]?.[0] === sessionId;
+          const held = heldAsks.record(
+            sessionId,
+            {
+              canOpen,
+              leaned: plan.corroborations.filter((c) => c.via === "lean" && !mintedBySession(c.nodeId)).map(({ nodeId, witnessKey }) => ({ nodeId, witnessKey })),
+              // A subagent's verdict is its own, not an answer to the parent's question.
+              verdicts: subagentTurn ? [] : [
+                ...plan.corroborations.filter((c) => c.via === "confirm" || c.via === "fix").map((c) => ({ priorId: c.nodeId, kind: c.via, witnessKey: c.witnessKey })),
+                ...plan.refutes.map((r) => ({ priorId: r.nodeId, kind: "refute" })),
+                ...plan.solutionLinks.flatMap((sl) => sl.targetIds.map((id) => ({ priorId: id, kind: "link" })))
+              ]
+            },
+            t
+          );
+          if (held.withheld.size > 0) {
+            withheldLeanIds = plan.corroborations.filter((c) => c.via === "lean" && held.withheld.has(c.witnessKey)).map((c) => c.nodeId);
+            plan.corroborations = plan.corroborations.filter((c) => !held.withheld.has(c.witnessKey));
+          }
+          const linked2 = releaseHeld(held.release, t);
+          confirmsStamped += linked2.stamped;
+          fixHeldConfirmed += linked2.fixHeld;
+          heldAnswered += held.answeredShown.length;
+          for (const id of held.opened) {
+            const n = store.getNode(id);
+            if (n) store.updateNode(id, { attrs: { ...n.attrs, heldAskedAt: t }, lastUpdatedAt: t });
+            heldAsked++;
+          }
+          if (held.changed) saveHeldAsks(heldAsksPath(paths.configDir), heldAsks);
+        }
         const refuteResult = applyLocalRefutations(store, plan.refutes, t);
         refutesStamped += refuteResult.stamped;
         if (sessions.originOf(sessionId) === void 0) {
@@ -90047,7 +90310,7 @@ function createWorkspaceEngine(opts) {
             let anchorReadFailed = false;
             if (p.location) {
               try {
-                fileText = readFileSync35(join39(opts.workspaceRoot, p.location.path), "utf8");
+                fileText = readFileSync36(join40(opts.workspaceRoot, p.location.path), "utf8");
               } catch {
                 anchorReadFailed = true;
               }
@@ -90210,10 +90473,10 @@ function createWorkspaceEngine(opts) {
                 let enclosing = {};
                 if (p.location?.line !== void 0) {
                   try {
-                    const headSha = readGitRefState(join39(opts.workspaceRoot, ".git")).sha ?? void 0;
+                    const headSha = readGitRefState(join40(opts.workspaceRoot, ".git")).sha ?? void 0;
                     enclosing = {
                       line: p.location.line,
-                      fileText: readFileSync35(join39(opts.workspaceRoot, anchorPath), "utf8"),
+                      fileText: readFileSync36(join40(opts.workspaceRoot, anchorPath), "utf8"),
                       ...headSha ? { headSha } : {}
                     };
                   } catch {
@@ -90502,6 +90765,7 @@ function createWorkspaceEngine(opts) {
           /* @__PURE__ */ new Set([
             ...plan.solutionLinks.flatMap((sl) => sl.targetIds),
             ...plan.corroborations.map((c) => c.nodeId),
+            ...withheldLeanIds,
             ...plan.refutes.map((r) => r.nodeId)
           ])
         );
@@ -90715,6 +90979,8 @@ function createWorkspaceEngine(opts) {
         confirmsStamped,
         supersessionAsked,
         structureLinksMinted,
+        heldAsked,
+        heldAnswered,
         // RG-recognize tier A: resolved problems the door saw recur this pass.
         recurrencesMarked,
         // RG-reopen: closes flipped open on the two-touch evidence bar.
@@ -91088,7 +91354,7 @@ B: ${b}`,
     try {
       const inputs = emitInputsFromManifest(paths.configDir, paths.skillsManifest);
       emitAndProjectSkills(opts.workspaceRoot, inputs);
-      writePrimingHandles(join39(paths.configDir, "priming-handles.json"), skillHandleNodes(inputs));
+      writePrimingHandles(join40(paths.configDir, "priming-handles.json"), skillHandleNodes(inputs));
     } catch (err2) {
       console.warn("[skills] agent-skills projection failed (non-fatal):", err2 instanceof Error ? err2.message : err2);
     }
@@ -91599,7 +91865,7 @@ async function startDaemon(opts) {
     reviewUrl: () => webUiUrl + "/review"
   });
   const writeLockFile = (url2) => {
-    writeFileSync25(
+    writeFileSync26(
       engine.paths.daemonLock,
       daemonLockPayload({ pid: process.pid, webUiUrl: url2, processStartedAt, version: DAEMON_VERSION }),
       "utf8"
@@ -91852,8 +92118,8 @@ async function linkRegisteredWorkspaces(cfg, loggedInProfile = cfg.activeInstall
 }
 
 // src/edge-park.ts
-import { readFileSync as readFileSync36, renameSync as renameSync6, writeFileSync as writeFileSync26 } from "node:fs";
-import { dirname as dirname16, join as join40 } from "node:path";
+import { readFileSync as readFileSync37, renameSync as renameSync7, writeFileSync as writeFileSync27 } from "node:fs";
+import { dirname as dirname17, join as join41 } from "node:path";
 var EDGE_PARK_CAP = 2e3;
 var EDGE_PARK_TTL_MS = 14 * 24 * 60 * 60 * 1e3;
 var EDGE_PARK_MAX_ATTEMPTS = 6;
@@ -91868,12 +92134,12 @@ function wireEdgeKey(from, type, to) {
   return JSON.stringify([from, type, to]);
 }
 function edgeParkPath(workspaceConfigDir, destinationKey) {
-  return join40(workspaceConfigDir, `edge-park.${destinationKey.slice(0, 16)}.json`);
+  return join41(workspaceConfigDir, `edge-park.${destinationKey.slice(0, 16)}.json`);
 }
 function loadEdgePark(path3) {
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync36(path3, "utf8"));
+    raw2 = JSON.parse(readFileSync37(path3, "utf8"));
   } catch {
     return [];
   }
@@ -91884,9 +92150,9 @@ function loadEdgePark(path3) {
 }
 function saveEdgePark(path3, queue) {
   try {
-    const tmp = join40(dirname16(path3), `.${Date.now()}.edge-park.tmp`);
-    writeFileSync26(tmp, JSON.stringify(queue), "utf8");
-    renameSync6(tmp, path3);
+    const tmp = join41(dirname17(path3), `.${Date.now()}.edge-park.tmp`);
+    writeFileSync27(tmp, JSON.stringify(queue), "utf8");
+    renameSync7(tmp, path3);
   } catch {
   }
 }
@@ -92207,8 +92473,8 @@ function invalidateInstanceReceipt(current, destination, failedId, mirrorLegacy)
 // src/multi.ts
 init_dist();
 init_src5();
-import { existsSync as existsSync36, readFileSync as readFileSync42, writeFileSync as writeFileSync29 } from "node:fs";
-import { basename as basename10, dirname as dirname19, join as join49, resolve as pathResolve } from "node:path";
+import { existsSync as existsSync36, readFileSync as readFileSync43, writeFileSync as writeFileSync30 } from "node:fs";
+import { basename as basename10, dirname as dirname20, join as join50, resolve as pathResolve } from "node:path";
 
 // src/principle-sync.ts
 init_src5();
@@ -92236,8 +92502,8 @@ init_reconcile();
 
 // src/lockfile-auto.ts
 init_src();
-import { existsSync as existsSync32, readFileSync as readFileSync37 } from "node:fs";
-import { join as join41 } from "node:path";
+import { existsSync as existsSync32, readFileSync as readFileSync38 } from "node:fs";
+import { join as join42 } from "node:path";
 
 // src/package-index.ts
 init_src();
@@ -92410,11 +92676,11 @@ function runLockfilePass(opts) {
     { file: "package-lock.json", parse: parsePackageLockJson }
   ];
   for (const c of candidates) {
-    const p = join41(opts.root, c.file);
+    const p = join42(opts.root, c.file);
     if (!existsSync32(p)) continue;
     let sbom;
     try {
-      sbom = c.parse(readFileSync37(p, "utf8"));
+      sbom = c.parse(readFileSync38(p, "utf8"));
     } catch {
       continue;
     }
@@ -92477,8 +92743,8 @@ init_profile2();
 init_session_registry();
 
 // src/public-symbols.ts
-import { readFileSync as readFileSync38, readdirSync as readdirSync12, existsSync as existsSync33 } from "node:fs";
-import { join as join42 } from "node:path";
+import { readFileSync as readFileSync39, readdirSync as readdirSync12, existsSync as existsSync33 } from "node:fs";
+import { join as join43 } from "node:path";
 var HEAD_BYTES = 8 * 1024;
 var INDEX_TTL_MS = 10 * 60 * 1e3;
 var MIN_SYMBOL_LEN = 4;
@@ -92511,20 +92777,20 @@ function bindingNames(clause) {
 function internalPackageNames(workspaceRoot) {
   const names = /* @__PURE__ */ new Set();
   const tryRead = (dir) => {
-    const pj = join42(dir, "package.json");
+    const pj = join43(dir, "package.json");
     if (!existsSync33(pj)) return;
     try {
-      const name2 = JSON.parse(readFileSync38(pj, "utf8")).name;
+      const name2 = JSON.parse(readFileSync39(pj, "utf8")).name;
       if (typeof name2 === "string" && name2.length > 0) names.add(name2);
     } catch {
     }
   };
   tryRead(workspaceRoot);
   for (const group of ["packages", "apps"]) {
-    const groupDir = join42(workspaceRoot, group);
+    const groupDir = join43(workspaceRoot, group);
     if (!existsSync33(groupDir)) continue;
     try {
-      for (const entry of readdirSync12(groupDir)) tryRead(join42(groupDir, entry));
+      for (const entry of readdirSync12(groupDir)) tryRead(join43(groupDir, entry));
     } catch {
     }
   }
@@ -92543,7 +92809,7 @@ function publicSymbolIndex(store, workspaceRoot, deps = {}) {
   }
   const readHead = deps.readHead ?? ((absPath) => {
     try {
-      return readFileSync38(absPath, "utf8").slice(0, HEAD_BYTES);
+      return readFileSync39(absPath, "utf8").slice(0, HEAD_BYTES);
     } catch {
       return "";
     }
@@ -92563,7 +92829,7 @@ function publicSymbolIndex(store, workspaceRoot, deps = {}) {
   }
   const symbols = /* @__PURE__ */ new Set();
   for (const rel of files) {
-    const head2 = readHead(join42(workspaceRoot, rel));
+    const head2 = readHead(join43(workspaceRoot, rel));
     if (!head2) continue;
     for (const re of [NAMED_IMPORT_RE, REQUIRE_RE]) {
       re.lastIndex = 0;
@@ -93594,7 +93860,7 @@ init_config();
 
 // src/update.ts
 import { spawn as spawn2 } from "node:child_process";
-import { isAbsolute as isAbsolute6, join as join43 } from "node:path";
+import { isAbsolute as isAbsolute6, join as join44 } from "node:path";
 var PACKAGE_NAME = "@inerrata-corporation/errata";
 function parse3(v) {
   const m = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z][0-9A-Za-z.-]*))?/.exec(v.trim());
@@ -93743,7 +94009,7 @@ async function runInstalledHookRefresh() {
   let worst = 0;
   for (const harness of ["codex", "claude"]) {
     const code = await new Promise((resolve11) => {
-      const child = spawn2(process.execPath, [join43(root, PACKAGE_NAME, "errata.mjs"), "install-hooks", harness, "--refresh-existing"], {
+      const child = spawn2(process.execPath, [join44(root, PACKAGE_NAME, "errata.mjs"), "install-hooks", harness, "--refresh-existing"], {
         windowsHide: true,
         stdio: "inherit",
         timeout: 3e4
@@ -93892,12 +94158,12 @@ function landCloudEdge(store, e, from, to) {
 }
 
 // src/causal-edge-queue.ts
-import { readFileSync as readFileSync39, renameSync as renameSync7, writeFileSync as writeFileSync27 } from "node:fs";
-import { dirname as dirname17, join as join44 } from "node:path";
+import { readFileSync as readFileSync40, renameSync as renameSync8, writeFileSync as writeFileSync28 } from "node:fs";
+import { dirname as dirname18, join as join45 } from "node:path";
 var CAUSAL_EDGE_QUEUE_CAP = 5e3;
 var CAUSAL_EDGE_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
 function causalEdgeQueuePath(workspaceConfigDir) {
-  return join44(workspaceConfigDir, "causal-edge-queue.json");
+  return join45(workspaceConfigDir, "causal-edge-queue.json");
 }
 function parkedEdgeKey(e) {
   return `${e.from}|${e.type}|${e.to}`;
@@ -93905,7 +94171,7 @@ function parkedEdgeKey(e) {
 function loadCausalEdgeQueue(path3) {
   let raw2;
   try {
-    raw2 = JSON.parse(readFileSync39(path3, "utf8"));
+    raw2 = JSON.parse(readFileSync40(path3, "utf8"));
   } catch {
     return [];
   }
@@ -93916,9 +94182,9 @@ function loadCausalEdgeQueue(path3) {
 }
 function saveCausalEdgeQueue(path3, queue) {
   try {
-    const tmp = join44(dirname17(path3), `.${Date.now()}.causal-edge-queue.tmp`);
-    writeFileSync27(tmp, JSON.stringify(queue), "utf8");
-    renameSync7(tmp, path3);
+    const tmp = join45(dirname18(path3), `.${Date.now()}.causal-edge-queue.tmp`);
+    writeFileSync28(tmp, JSON.stringify(queue), "utf8");
+    renameSync8(tmp, path3);
   } catch {
   }
 }
@@ -94348,9 +94614,9 @@ init_src11();
 init_src();
 import { execFile as execFile6 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
-import { extname as extname3, join as join45 } from "node:path";
+import { extname as extname3, join as join46 } from "node:path";
 import { createHash as createHash19 } from "node:crypto";
-import { readFileSync as readFileSync40 } from "node:fs";
+import { readFileSync as readFileSync41 } from "node:fs";
 
 // src/history-dependency-snapshot.ts
 init_src();
@@ -94461,9 +94727,9 @@ var carryRefused = /* @__PURE__ */ new Set();
 var carryFailures = /* @__PURE__ */ new Map();
 var CARRY_ATTEMPTS = 3;
 var Bounded = class extends Map {
-  constructor(cap) {
+  constructor(cap2) {
     super();
-    this.cap = cap;
+    this.cap = cap2;
   }
   set(key, value) {
     if (!this.has(key) && this.size >= this.cap) this.delete(this.keys().next().value);
@@ -94473,7 +94739,7 @@ var Bounded = class extends Map {
 var DEFAULT_GIT = {};
 function readFileSafe(path3) {
   try {
-    return readFileSync40(path3, "utf8");
+    return readFileSync41(path3, "utf8");
   } catch {
     return "";
   }
@@ -94527,7 +94793,7 @@ async function syncHistoryRevisionPage(opts, resolve11) {
   const projectId = profile.projectId;
   const git3 = opts.git ?? (async (args2) => (await exec2("git", ["-C", root, ...args2], { windowsHide: true, maxBuffer: 8 * 1024 * 1024 })).stdout);
   const caches = cachesFor(opts.git ?? DEFAULT_GIT);
-  const ignoreKey = createHash19("sha256").update(JSON.stringify(profile.ignoreExtra ?? [])).update(readFileSafe(join45(root, ".errataignore"))).digest("hex").slice(0, 16);
+  const ignoreKey = createHash19("sha256").update(JSON.stringify(profile.ignoreExtra ?? [])).update(readFileSafe(join46(root, ".errataignore"))).digest("hex").slice(0, 16);
   const atCommit = (await git3(["rev-parse", "--verify", "HEAD"])).trim();
   if (!/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(atCommit)) throw new Error("history revision is not a full Git object id");
   const oldCursor = profile.historyRevisionCursor;
@@ -94847,8 +95113,8 @@ ${await git3(["rev-list", "--parents", "-1", from])}`.split("\n").map((row) => r
 init_src7();
 init_src();
 import { execFile as execFile7 } from "node:child_process";
-import { readFileSync as readFileSync41 } from "node:fs";
-import { join as join46 } from "node:path";
+import { readFileSync as readFileSync42 } from "node:fs";
+import { join as join47 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 
 // src/history-walk.ts
@@ -95407,7 +95673,7 @@ async function defaultGit(root, args2) {
 function readIgnoreLines(root, profile) {
   let lines = [];
   try {
-    lines = readFileSync41(join46(root, ".errataignore"), "utf8").split("\n");
+    lines = readFileSync42(join47(root, ".errataignore"), "utf8").split("\n");
   } catch {
   }
   return [...lines, ...profile.ignoreExtra ?? []].map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
@@ -95588,7 +95854,7 @@ async function walk10(root, input, client, opts, readBlob) {
   const settle = (p) => p.then((res) => ({ res }), (err2) => ({ err: err2 }));
   const prepared = /* @__PURE__ */ new Map();
   const launched = /* @__PURE__ */ new Map();
-  const cap = opts.maxUnits;
+  const cap2 = opts.maxUnits;
   const edgeParked = /* @__PURE__ */ new Set();
   const parkedEarlier = new Set((profile.historyStage?.coverageGaps ?? []).filter((g) => g.reason === "edge-blocked" && !recoveryKeys.has(unitKey(g))).map(unitKey));
   units.forEach((u, j) => {
@@ -95681,7 +95947,7 @@ async function walk10(root, input, client, opts, readBlob) {
     if (!doorOrders || lookahead === 0) return;
     let ahead = 0;
     for (let j = k + 1; j < units.length && ahead < lookahead; j++) {
-      if (cap !== void 0 && processed + (j - k) >= cap) break;
+      if (cap2 !== void 0 && processed + (j - k) >= cap2) break;
       if (units[j].skip || edgeParked.has(j)) continue;
       ahead += 1;
       await launch(j);
@@ -95689,7 +95955,7 @@ async function walk10(root, input, client, opts, readBlob) {
   };
   for (let k = 0; k < units.length; k++) {
     const u = units[k];
-    if (cap !== void 0 && processed >= cap) break;
+    if (cap2 !== void 0 && processed >= cap2) break;
     const label = `${u.sha.slice(0, 12)}${u.subIndex ? `/${u.subIndex}` : ""}`;
     const recovering = recoveryKeys.has(unitKey(u));
     const walkIncrement = recovering ? 0 : 1;
@@ -95987,8 +96253,8 @@ async function startHistoryStage(root, input, client, walk11 = {}) {
 init_cloud_auth();
 import { createHash as createHash20 } from "node:crypto";
 import { execFileSync as execFileSync7 } from "node:child_process";
-import { existsSync as existsSync34, writeFileSync as writeFileSync28 } from "node:fs";
-import { join as join47 } from "node:path";
+import { existsSync as existsSync34, writeFileSync as writeFileSync29 } from "node:fs";
+import { join as join48 } from "node:path";
 
 // src/device-poll.ts
 var THROTTLED_POLL_MIN_WAIT_MS = 11e3;
@@ -96447,9 +96713,9 @@ function applyLinkDecision(root, profile, config2, decision, now = Date.now) {
   delete nextProfile.projectLinkHold;
   let wroteIgnore = false;
   if (decision.writeIgnoreStarter !== false) {
-    const target = join47(root, ".errataignore");
+    const target = join48(root, ".errataignore");
     if (!existsSync34(target)) {
-      writeFileSync28(target, IGNORE_STARTER, "utf8");
+      writeFileSync29(target, IGNORE_STARTER, "utf8");
       wroteIgnore = true;
     }
   }
@@ -96463,12 +96729,12 @@ init_registry();
 // src/adopt.ts
 init_git_remote();
 import { existsSync as existsSync35 } from "node:fs";
-import { dirname as dirname18, join as join48 } from "node:path";
+import { dirname as dirname19, join as join49 } from "node:path";
 function findGitRoot(absPath) {
   let dir = absPath;
   for (let depth = 0; depth < 64; depth++) {
-    if (existsSync35(join48(dir, ".git"))) return dir;
-    const parent = dirname18(dir);
+    if (existsSync35(join49(dir, ".git"))) return dir;
+    const parent = dirname19(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -97110,7 +97376,7 @@ async function startMultiDaemon(opts = {}) {
   };
   const sharedDbPath = sharedStorePath();
   ensureParent(sharedDbPath);
-  if (sharedDbPath !== ":memory:") excludeFromIndexing(dirname19(sharedDbPath));
+  if (sharedDbPath !== ":memory:") excludeFromIndexing(dirname20(sharedDbPath));
   await prepareStore(sharedDbPath, process.cwd(), "shared");
   const sharedStore = openGraphStore({ path: sharedDbPath });
   const bundledRun = import.meta.url.endsWith(".mjs");
@@ -97254,7 +97520,7 @@ async function startMultiDaemon(opts = {}) {
       held.push(...quarantined);
       let ignoreFile = "";
       try {
-        ignoreFile = readFileSync42(join49(r.root, ".errataignore"), "utf8");
+        ignoreFile = readFileSync43(join50(r.root, ".errataignore"), "utf8");
       } catch {
       }
       const retryInputs = JSON.stringify([
@@ -97322,7 +97588,7 @@ async function startMultiDaemon(opts = {}) {
     const id = entry.id;
     const castaliaPath = workspacePaths(entry.path).castalia;
     ensureParent(castaliaPath);
-    excludeFromIndexing(dirname19(castaliaPath));
+    excludeFromIndexing(dirname20(castaliaPath));
     await prepareStore(castaliaPath, entry.path, id);
     if (stopping) throw new Error("daemon stopping");
     const wsIdentity = identityFor(entry);
@@ -97459,7 +97725,7 @@ async function startMultiDaemon(opts = {}) {
     records.push(rec);
     void ambientLinkAll();
     try {
-      writeFileSync29(
+      writeFileSync30(
         rec.engine.paths.daemonLock,
         daemonLockPayload({
           pid: process.pid,
@@ -97835,10 +98101,10 @@ async function startMultiDaemon(opts = {}) {
   };
   const MISFILED_SWEEP_DELAY_MS = 2 * 6e4;
   const sweepMisfiled = async (rec) => {
-    const checkedPath = join49(workspacePaths(rec.root).configDir, "rehome-checked.json");
+    const checkedPath = join50(workspacePaths(rec.root).configDir, "rehome-checked.json");
     let checked;
     try {
-      checked = new Set(JSON.parse(readFileSync42(checkedPath, "utf8")));
+      checked = new Set(JSON.parse(readFileSync43(checkedPath, "utf8")));
     } catch {
       checked = /* @__PURE__ */ new Set();
     }
@@ -97854,7 +98120,7 @@ async function startMultiDaemon(opts = {}) {
       if (to) await rehomeMisfiled(sid, rec, to, "its captures were raised in its files");
       await new Promise((r) => setImmediate(r));
     }
-    if (changed) writeFileSync29(checkedPath, JSON.stringify([...checked]), "utf8");
+    if (changed) writeFileSync30(checkedPath, JSON.stringify([...checked]), "utf8");
   };
   afterAttach = (rec) => {
     const t = setTimeout(() => {
@@ -98030,7 +98296,7 @@ async function startMultiDaemon(opts = {}) {
   baseUrl = `http://127.0.0.1:${port}`;
   try {
     ensureDir(globalDir());
-    writeFileSync29(
+    writeFileSync30(
       lockPath,
       daemonLockPayload({ pid: process.pid, webUiUrl: baseUrl, processStartedAt: PROCESS_STARTED_AT, entry: SELF_ENTRY, version: DAEMON_VERSION }),
       "utf8"
@@ -98039,7 +98305,7 @@ async function startMultiDaemon(opts = {}) {
   }
   for (const r of records) {
     try {
-      writeFileSync29(
+      writeFileSync30(
         r.engine.paths.daemonLock,
         daemonLockPayload({
           pid: process.pid,
@@ -99586,7 +99852,7 @@ import { spawnSync as spawnSync2 } from "node:child_process";
 
 // src/codex-runtime.ts
 import { readdirSync as readdirSync13, statSync as statSync13 } from "node:fs";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 function resolveCodexExecutable(options = {}) {
   const platform = options.platform ?? process.platform;
   const env2 = options.env ?? process.env;
@@ -99601,13 +99867,13 @@ function resolveCodexExecutable(options = {}) {
   };
   for (const dir of (env2["PATH"] ?? env2["Path"] ?? "").split(";")) {
     if (!dir.trim()) continue;
-    const path3 = join50(dir.trim().replace(/^"|"$/g, ""), "codex.exe");
+    const path3 = join51(dir.trim().replace(/^"|"$/g, ""), "codex.exe");
     if (fileTime(path3) !== null) return path3;
   }
   if (!env2["LOCALAPPDATA"]) return "codex";
-  const root = join50(env2["LOCALAPPDATA"], "OpenAI", "Codex", "bin");
+  const root = join51(env2["LOCALAPPDATA"], "OpenAI", "Codex", "bin");
   try {
-    const candidates = readdirSync13(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join50(root, entry.name, "codex.exe")).map((path3) => ({ path: path3, mtime: fileTime(path3) })).filter((candidate) => candidate.mtime !== null).sort((a, b) => b.mtime - a.mtime || a.path.localeCompare(b.path));
+    const candidates = readdirSync13(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join51(root, entry.name, "codex.exe")).map((path3) => ({ path: path3, mtime: fileTime(path3) })).filter((candidate) => candidate.mtime !== null).sort((a, b) => b.mtime - a.mtime || a.path.localeCompare(b.path));
     return candidates[0]?.path ?? "codex";
   } catch {
     return "codex";
@@ -99746,14 +100012,14 @@ async function diagnoseInstallation(cfg, dependencies) {
 }
 
 // src/credential-scan.ts
-import { readFileSync as readFileSync44, statSync as statSync14 } from "node:fs";
+import { readFileSync as readFileSync45, statSync as statSync14 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join52 } from "node:path";
+import { join as join53 } from "node:path";
 
 // src/claude-statusline.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync9, readFileSync as readFileSync43, writeFileSync as writeFileSync30 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync9, readFileSync as readFileSync44, writeFileSync as writeFileSync31 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { dirname as dirname20, join as join51 } from "node:path";
+import { dirname as dirname21, join as join52 } from "node:path";
 var STATUSLINE_RELAY_SOURCE = String.raw`// errata-managed: regenerated by errata init / install-hooks claude
 import { readFileSync } from 'node:fs';
 
@@ -99801,8 +100067,8 @@ function isSameInstall(value, relay) {
   return command.includes(relay.replace(/\\/g, "/").toLowerCase());
 }
 function userClaudeSettingsPath() {
-  const base = process.env["CLAUDE_CONFIG_DIR"] ?? join51(homedir7(), ".claude");
-  return join51(base, "settings.json");
+  const base = process.env["CLAUDE_CONFIG_DIR"] ?? join52(homedir7(), ".claude");
+  return join52(base, "settings.json");
 }
 function ensureUserStatusLine(opts) {
   const env2 = opts.env ?? process.env;
@@ -99812,21 +100078,21 @@ function ensureUserStatusLine(opts) {
   let settings = {};
   if (existsSync37(settingsPath)) {
     try {
-      const parsed = JSON.parse(readFileSync43(settingsPath, "utf8"));
+      const parsed = JSON.parse(readFileSync44(settingsPath, "utf8"));
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return "unreadable";
       settings = parsed;
     } catch {
       return "unreadable";
     }
   }
-  const relay = join51(opts.relayDir, STATUSLINE_RELAY_FILE);
+  const relay = join52(opts.relayDir, STATUSLINE_RELAY_FILE);
   const keep = (value) => value !== void 0 && (!isErrataStatusLine(value) || !isSameInstall(value, relay));
   const ownMain = keep(settings["statusLine"]);
   const ownRows = keep(settings["subagentStatusLine"]);
   if (ownMain && ownRows) return "kept-own";
   mkdirSync9(opts.relayDir, { recursive: true });
-  if (!existsSync37(relay) || readFileSync43(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
-    writeFileSync30(relay, STATUSLINE_RELAY_SOURCE, "utf8");
+  if (!existsSync37(relay) || readFileSync44(relay, "utf8") !== STATUSLINE_RELAY_SOURCE) {
+    writeFileSync31(relay, STATUSLINE_RELAY_SOURCE, "utf8");
   }
   const nodePath = opts.nodePath ?? process.execPath;
   const next = {
@@ -99837,8 +100103,8 @@ function ensureUserStatusLine(opts) {
     return ownMain ? "kept-own" : "unchanged";
   }
   Object.assign(settings, next);
-  mkdirSync9(dirname20(settingsPath), { recursive: true });
-  writeFileSync30(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  mkdirSync9(dirname21(settingsPath), { recursive: true });
+  writeFileSync31(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
   return "installed";
 }
 function describeStatusLineOutcome(outcome) {
@@ -99879,36 +100145,36 @@ function findCredentialLines(text) {
 function harnessConfigPaths(root) {
   const env2 = process.env;
   const home = homedir8();
-  const codexHome = env2["CODEX_HOME"] || join52(home, ".codex");
-  const geminiHome = join52(env2["GEMINI_CLI_HOME"] ?? home, ".gemini");
+  const codexHome = env2["CODEX_HOME"] || join53(home, ".codex");
+  const geminiHome = join53(env2["GEMINI_CLI_HOME"] ?? home, ".gemini");
   return [
     // Claude Code: user settings, `claude mcp add` (local/user scope), project.
     userClaudeSettingsPath(),
-    join52(env2["CLAUDE_CONFIG_DIR"] ?? home, ".claude.json"),
-    join52(root, ".claude", "settings.json"),
-    join52(root, ".claude", "settings.local.json"),
-    join52(root, ".mcp.json"),
+    join53(env2["CLAUDE_CONFIG_DIR"] ?? home, ".claude.json"),
+    join53(root, ".claude", "settings.json"),
+    join53(root, ".claude", "settings.local.json"),
+    join53(root, ".mcp.json"),
     // Codex
-    join52(codexHome, "config.toml"),
-    join52(root, ".codex", "config.toml"),
+    join53(codexHome, "config.toml"),
+    join53(root, ".codex", "config.toml"),
     // Gemini CLI
-    join52(geminiHome, "settings.json"),
-    join52(root, ".gemini", "settings.json"),
+    join53(geminiHome, "settings.json"),
+    join53(root, ".gemini", "settings.json"),
     // Cursor
-    join52(home, ".cursor", "mcp.json"),
-    join52(root, ".cursor", "mcp.json"),
+    join53(home, ".cursor", "mcp.json"),
+    join53(root, ".cursor", "mcp.json"),
     // VS Code (user profile mcp.json + workspace)
-    join52(vscodeUserDir(home, env2), "mcp.json"),
-    join52(root, ".vscode", "mcp.json"),
+    join53(vscodeUserDir(home, env2), "mcp.json"),
+    join53(root, ".vscode", "mcp.json"),
     // OpenCode (XDG on every platform; the daemon's installer writes the project one)
-    join52(env2["XDG_CONFIG_HOME"] ?? join52(home, ".config"), "opencode", "opencode.json"),
-    join52(root, "opencode.json")
+    join53(env2["XDG_CONFIG_HOME"] ?? join53(home, ".config"), "opencode", "opencode.json"),
+    join53(root, "opencode.json")
   ];
 }
 function vscodeUserDir(home, env2) {
-  if (process.platform === "win32") return join52(env2["APPDATA"] ?? join52(home, "AppData", "Roaming"), "Code", "User");
-  if (process.platform === "darwin") return join52(home, "Library", "Application Support", "Code", "User");
-  return join52(env2["XDG_CONFIG_HOME"] ?? join52(home, ".config"), "Code", "User");
+  if (process.platform === "win32") return join53(env2["APPDATA"] ?? join53(home, "AppData", "Roaming"), "Code", "User");
+  if (process.platform === "darwin") return join53(home, "Library", "Application Support", "Code", "User");
+  return join53(env2["XDG_CONFIG_HOME"] ?? join53(home, ".config"), "Code", "User");
 }
 function scanHarnessConfigs(paths, read2 = readBounded) {
   const findings = [];
@@ -99925,7 +100191,7 @@ function readBounded(path3) {
   try {
     const stat4 = statSync14(path3);
     if (!stat4.isFile() || stat4.size > MAX_SCAN_BYTES) return null;
-    return readFileSync44(path3, "utf8");
+    return readFileSync45(path3, "utf8");
   } catch {
     return null;
   }
@@ -99950,14 +100216,14 @@ function credentialHygieneCheck(scan2) {
 
 // src/codex-doctor.ts
 import { spawn as spawn4 } from "node:child_process";
-import { readFileSync as readFileSync46, statSync as statSync15 } from "node:fs";
-import { join as join54 } from "node:path";
+import { readFileSync as readFileSync47, statSync as statSync15 } from "node:fs";
+import { join as join55 } from "node:path";
 import { createInterface } from "node:readline";
 
 // src/codex-hooks.ts
-import { existsSync as existsSync38, mkdirSync as mkdirSync10, readFileSync as readFileSync45, renameSync as renameSync8, unlinkSync as unlinkSync5, writeFileSync as writeFileSync31 } from "node:fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync10, readFileSync as readFileSync46, renameSync as renameSync9, unlinkSync as unlinkSync5, writeFileSync as writeFileSync32 } from "node:fs";
 import { homedir as homedir9 } from "node:os";
-import { join as join53 } from "node:path";
+import { join as join54 } from "node:path";
 
 // src/hook-commands.ts
 function hookCurlCommand(port, path3 = "/api/hook") {
@@ -100213,34 +100479,34 @@ function buildCodexRelaySource(workspaceRoot) {
 init_checkout_root();
 var CODEX_HOOK_REVIEW_HELP = "Codex desktop: Settings > Hooks, select this project, expand each event and Trust the Errata hook. CLI users can use /hooks.";
 function writeRelay(file2, source) {
-  if (existsSync38(file2) && readFileSync45(file2, "utf8") === source) return;
+  if (existsSync38(file2) && readFileSync46(file2, "utf8") === source) return;
   const temp = `${file2}.${process.pid}.tmp`;
   try {
-    writeFileSync31(temp, source, { encoding: "utf8", mode: 384 });
-    renameSync8(temp, file2);
+    writeFileSync32(temp, source, { encoding: "utf8", mode: 384 });
+    renameSync9(temp, file2);
   } finally {
     if (existsSync38(temp)) unlinkSync5(temp);
   }
 }
 function refreshCodexRelay(root) {
-  const config2 = join53(root, ".codex", "config.toml");
+  const config2 = join54(root, ".codex", "config.toml");
   if (!existsSync38(config2)) return "absent";
-  const existing = readFileSync45(config2, "utf8");
+  const existing = readFileSync46(config2, "utf8");
   if (!existing.includes(CODEX_HOOKS_BEGIN) && !existing.includes(CODEX_HOOKS_END)) return "absent";
   replaceCodexHooks(existing, "");
-  const relay = join53(root, ".codex", "hooks", "errata-relay.mjs");
-  const prior = existsSync38(relay) ? readFileSync45(relay, "utf8") : "";
+  const relay = join54(root, ".codex", "hooks", "errata-relay.mjs");
+  const prior = existsSync38(relay) ? readFileSync46(relay, "utf8") : "";
   if (prior && !prior.startsWith("// errata-managed: regenerated by errata install-hooks codex")) {
     throw new Error("Codex relay is not Errata-managed; preserved it. Run errata install-hooks codex to explicitly replace it.");
   }
   const source = buildCodexRelaySource(checkoutRootOf(root));
   if (prior === source) return "current";
-  mkdirSync10(join53(root, ".codex", "hooks"), { recursive: true });
+  mkdirSync10(join54(root, ".codex", "hooks"), { recursive: true });
   writeRelay(relay, source);
   return "updated";
 }
-function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join53(homedir9(), ".codex")) {
-  return existsSync38(join53(root, ".codex")) || existsSync38(codexHome);
+function hasCodexConfig(root, codexHome = process.env["CODEX_HOME"] || join54(homedir9(), ".codex")) {
+  return existsSync38(join54(root, ".codex")) || existsSync38(codexHome);
 }
 function replaceCodexHooks(existing, block) {
   const begin = existing.indexOf(CODEX_HOOKS_BEGIN);
@@ -100256,14 +100522,14 @@ function replaceCodexHooks(existing, block) {
   return existing.trimEnd() + (existing.trim() ? "\n\n" : "") + block;
 }
 function writeCodexHooks(root, port, nodePath = process.execPath) {
-  const dir = join53(root, ".codex");
-  const file2 = join53(dir, "config.toml");
-  const relay = join53(dir, "hooks", "errata-relay.mjs");
+  const dir = join54(root, ".codex");
+  const file2 = join54(dir, "config.toml");
+  const relay = join54(dir, "hooks", "errata-relay.mjs");
   const block = buildCodexHooksToml(port, { nodePath, relayPath: relay });
-  const final = replaceCodexHooks(existsSync38(file2) ? readFileSync45(file2, "utf8") : "", block);
-  mkdirSync10(join53(dir, "hooks"), { recursive: true });
+  const final = replaceCodexHooks(existsSync38(file2) ? readFileSync46(file2, "utf8") : "", block);
+  mkdirSync10(join54(dir, "hooks"), { recursive: true });
   writeRelay(relay, buildCodexRelaySource(checkoutRootOf(root)));
-  if (!existsSync38(file2) || readFileSync45(file2, "utf8") !== final) writeFileSync31(file2, final, "utf8");
+  if (!existsSync38(file2) || readFileSync46(file2, "utf8") !== final) writeFileSync32(file2, final, "utf8");
   return file2;
 }
 
@@ -100272,7 +100538,7 @@ init_checkout_root();
 function inspectCodexRelay(cwd) {
   const root = nearestGitRoot(cwd) ?? cwd;
   try {
-    const source = readFileSync46(join54(root, ".codex", "hooks", "errata-relay.mjs"), "utf8");
+    const source = readFileSync47(join55(root, ".codex", "hooks", "errata-relay.mjs"), "utf8");
     if (source === buildCodexRelaySource(checkoutRootOf(root))) {
       return { id: "codex_relay", status: "pass", detail: "Installed Codex relay matches this Errata version" };
     }
@@ -100283,8 +100549,8 @@ function inspectCodexRelay(cwd) {
 function inspectCodexContext(cwd) {
   const root = checkoutRootOf(nearestGitRoot(cwd) ?? cwd);
   try {
-    const file2 = join54(root, ".errata", "context.md");
-    if (statSync15(file2).size <= 128 * 1024 && readFileSync46(file2, "utf8").trim()) {
+    const file2 = join55(root, ".errata", "context.md");
+    if (statSync15(file2).size <= 128 * 1024 && readFileSync47(file2, "utf8").trim()) {
       return { id: "codex_context", status: "pass", detail: "Saved workspace context is readable by the relay; this does not prove live daemon freshness" };
     }
   } catch {
@@ -100423,9 +100689,9 @@ function effectiveMomentumThreshold(policy, liveNodes) {
   return Math.max(policy.momentumThreshold, Math.ceil(liveNodes * policy.momentumRatio));
 }
 function nextMomentumThreshold(args2) {
-  const { current, consumed, landmarkFlips, floor, cap } = args2;
+  const { current, consumed, landmarkFlips, floor, cap: cap2 } = args2;
   const next = landmarkFlips > 0 ? Math.min(current, Math.round(consumed / 2)) : Math.max(current, Math.round(consumed * 1.5));
-  return Math.max(floor, Math.min(cap, next));
+  return Math.max(floor, Math.min(cap2, next));
 }
 var DEFAULT_CONSOLIDATION_POLICY = {
   baseFloorMs: 6e4,
@@ -100462,9 +100728,9 @@ function consolidationGapMs(lastPassMs, policy) {
 
 // src/codex-context-plugin.ts
 import { createHash as createHash21 } from "node:crypto";
-import { cpSync as cpSync2, existsSync as existsSync39, mkdirSync as mkdirSync11, readFileSync as readFileSync47, renameSync as renameSync9, writeFileSync as writeFileSync32 } from "node:fs";
+import { cpSync as cpSync2, existsSync as existsSync39, mkdirSync as mkdirSync11, readFileSync as readFileSync48, renameSync as renameSync10, writeFileSync as writeFileSync33 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { join as join55 } from "node:path";
+import { join as join56 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // ../../node_modules/.pnpm/smol-toml@1.6.1/node_modules/smol-toml/dist/error.js
@@ -101162,23 +101428,23 @@ var NAME = "errata-context";
 var PREFIX2 = `./.errata/plugins/${NAME}/`;
 var object2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 function readText(file2) {
-  return existsSync39(file2) ? readFileSync47(file2, "utf8") : "";
+  return existsSync39(file2) ? readFileSync48(file2, "utf8") : "";
 }
 function writeChanged(file2, content) {
   if (readText(file2) === content) return;
   const temp = `${file2}.${process.pid}.tmp`;
-  writeFileSync32(temp, content, "utf8");
-  renameSync9(temp, file2);
+  writeFileSync33(temp, content, "utf8");
+  renameSync10(temp, file2);
 }
 function bundledContextPlugin() {
   const packaged = fileURLToPath4(new URL("./resources/context-plugin/", import.meta.url));
-  if (existsSync39(join55(packaged, ".codex-plugin/plugin.json"))) return packaged;
+  if (existsSync39(join56(packaged, ".codex-plugin/plugin.json"))) return packaged;
   return fileURLToPath4(new URL("../dist/resources/context-plugin/", import.meta.url));
 }
 function refreshCodexContextPlugin(root) {
-  const file2 = join55(root, ".agents", "plugins", "marketplace.json");
+  const file2 = join56(root, ".agents", "plugins", "marketplace.json");
   if (!existsSync39(file2)) return false;
-  const marketplace = JSON.parse(readFileSync47(file2, "utf8"));
+  const marketplace = JSON.parse(readFileSync48(file2, "utf8"));
   const entries = Array.isArray(marketplace.plugins) ? marketplace.plugins : [];
   const entry = entries.map(object2).find((value) => value.name === NAME && String(object2(value.source).path).startsWith(PREFIX2));
   if (!entry) return false;
@@ -101189,24 +101455,24 @@ function refreshCodexContextPlugin(root) {
 function installCodexContextPlugin(root, options = {}) {
   const bundle = options.bundle ?? bundledContextPlugin();
   const manifest = JSON.parse(
-    readFileSync47(join55(bundle, ".codex-plugin/plugin.json"), "utf8")
+    readFileSync48(join56(bundle, ".codex-plugin/plugin.json"), "utf8")
   );
   if (manifest.name !== NAME || typeof manifest.version !== "string" || !/^[\w.-]+$/.test(manifest.version)) {
     throw new Error("Invalid bundled Errata Context manifest.");
   }
-  const checksums = readFileSync47(join55(bundle, "SHA256SUMS"), "utf8");
+  const checksums = readFileSync48(join56(bundle, "SHA256SUMS"), "utf8");
   for (const line of checksums.trim().split("\n")) {
     const match2 = /^([a-f0-9]{64})  ([\w./-]+)$/.exec(line);
     if (!match2 || match2[2].startsWith("/") || match2[2].split("/").includes("..")) {
       throw new Error("Invalid bundled Errata Context checksum manifest.");
     }
-    const actual = createHash21("sha256").update(readFileSync47(join55(bundle, match2[2]))).digest("hex");
+    const actual = createHash21("sha256").update(readFileSync48(join56(bundle, match2[2]))).digest("hex");
     if (actual !== match2[1])
       throw new Error(`Bundled Errata Context checksum mismatch: ${match2[2]}`);
   }
   const release = `${manifest.version}-${createHash21("sha256").update(checksums).digest("hex").slice(0, 12)}`;
-  const plugin = join55(root, ".errata", "plugins", NAME, release);
-  const marketplaceFile = join55(root, ".agents", "plugins", "marketplace.json");
+  const plugin = join56(root, ".errata", "plugins", NAME, release);
+  const marketplaceFile = join56(root, ".agents", "plugins", "marketplace.json");
   const priorMarketplace = readText(marketplaceFile);
   const marketplace = priorMarketplace ? JSON.parse(priorMarketplace) : {
     name: "errata-local",
@@ -101227,12 +101493,12 @@ function installCodexContextPlugin(root, options = {}) {
     );
   }
   const key = `${NAME}@${marketplace.name}`;
-  const configFile = join55(root, ".codex", "config.toml");
+  const configFile = join56(root, ".codex", "config.toml");
   const config2 = readText(configFile);
   const parsed = parse4(config2);
   const plugins = object2(parsed.plugins);
-  const codexHome = options.codexHome ?? process.env["CODEX_HOME"] ?? join55(homedir10(), ".codex");
-  const globalPlugins = object2(parse4(readText(join55(codexHome, "config.toml"))).plugins);
+  const codexHome = options.codexHome ?? process.env["CODEX_HOME"] ?? join56(homedir10(), ".codex");
+  const globalPlugins = object2(parse4(readText(join56(codexHome, "config.toml"))).plugins);
   const disabledGlobally = Object.entries(globalPlugins).some(
     ([name2, value]) => (name2 === NAME || name2.startsWith(`${NAME}@`)) && object2(value).enabled === false
   );
@@ -101256,13 +101522,13 @@ enabled = ${enabled}
   mkdirSync11(plugin, { recursive: true });
   cpSync2(bundle, plugin, { recursive: true });
   writeChanged(
-    join55(plugin, ".mcp.json"),
+    join56(plugin, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
           errata_context: {
             command: options.nodePath ?? process.execPath,
-            args: [join55(plugin, "dist", "mcp-server.mjs")],
+            args: [join56(plugin, "dist", "mcp-server.mjs")],
             env: { ERRATA_WORKSPACE: root, ERRATA_CONTEXT_VERSION: manifest.version }
           }
         }
@@ -101271,8 +101537,8 @@ enabled = ${enabled}
       2
     ) + "\n"
   );
-  mkdirSync11(join55(root, ".agents", "plugins"), { recursive: true });
-  mkdirSync11(join55(root, ".codex"), { recursive: true });
+  mkdirSync11(join56(root, ".agents", "plugins"), { recursive: true });
+  mkdirSync11(join56(root, ".codex"), { recursive: true });
   writeChanged(marketplaceFile, JSON.stringify(marketplace, null, 2) + "\n");
   writeChanged(configFile, nextConfig);
   return { plugin, enabled, marketplace: marketplaceFile };
@@ -101280,15 +101546,15 @@ enabled = ${enabled}
 
 // src/codex-hook-refresh.ts
 init_checkout_root();
-import { existsSync as existsSync40, readdirSync as readdirSync14, readFileSync as readFileSync48 } from "node:fs";
-import { dirname as dirname21, join as join56, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync40, readdirSync as readdirSync14, readFileSync as readFileSync49 } from "node:fs";
+import { dirname as dirname22, join as join57, resolve as resolve9 } from "node:path";
 init_registry();
 function codexHookRoots(roots) {
   const found = new Set(roots.map((root) => resolve9(root)));
   for (const root of [...found]) {
     const main2 = mainCheckoutOfWorktree(root) ?? root;
     found.add(main2);
-    const dir = join56(main2, ".git", "worktrees");
+    const dir = join57(main2, ".git", "worktrees");
     if (!existsSync40(dir)) continue;
     let names;
     try {
@@ -101298,7 +101564,7 @@ function codexHookRoots(roots) {
     }
     for (const name2 of names) {
       try {
-        const checkout = dirname21(readFileSync48(join56(dir, name2, "gitdir"), "utf8").trim());
+        const checkout = dirname22(readFileSync49(join57(dir, name2, "gitdir"), "utf8").trim());
         if (mainCheckoutOfWorktree(checkout) === main2) found.add(checkout);
       } catch {
       }
@@ -101321,8 +101587,8 @@ function refreshInstalledCodexRelays(roots = listWorkspaceEntries().map((entry)
 
 // src/claude-mods.ts
 import { createHash as createHash22 } from "node:crypto";
-import { cpSync as cpSync3, existsSync as existsSync41, mkdirSync as mkdirSync12, readFileSync as readFileSync49, readdirSync as readdirSync15, rmSync as rmSync4, statSync as statSync16, writeFileSync as writeFileSync33 } from "node:fs";
-import { delimiter as delimiter2, dirname as dirname22, join as join57, relative as relative7, resolve as resolve10, sep as sep6 } from "node:path";
+import { cpSync as cpSync3, existsSync as existsSync41, mkdirSync as mkdirSync12, readFileSync as readFileSync50, readdirSync as readdirSync15, rmSync as rmSync4, statSync as statSync16, writeFileSync as writeFileSync34 } from "node:fs";
+import { delimiter as delimiter2, dirname as dirname23, join as join58, relative as relative7, resolve as resolve10, sep as sep6 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var CLAUDE_PLUGIN_DIRS_ENV = "CLAUDE_CODE_PLUGIN_DIRS";
 var HASH_FILE = ".errata-mod-hash";
@@ -101337,7 +101603,7 @@ function isEngineOwned(relPath) {
 function listFiles(root, dir = root) {
   const out2 = [];
   for (const name2 of readdirSync15(dir)) {
-    const abs = join57(dir, name2);
+    const abs = join58(dir, name2);
     if (isEngineOwned(relative7(root, abs))) continue;
     if (statSync16(abs).isDirectory()) out2.push(...listFiles(root, abs));
     else out2.push(abs);
@@ -101349,14 +101615,14 @@ function modHash(dir) {
   for (const abs of listFiles(dir).sort()) {
     h.update(relative7(dir, abs).split(sep6).join("/"));
     h.update("\0");
-    h.update(readFileSync49(abs));
+    h.update(readFileSync50(abs));
     h.update("\0");
   }
   return h.digest("hex");
 }
 function bundledMods(bundleDir) {
   if (!existsSync41(bundleDir)) return [];
-  return readdirSync15(bundleDir).filter((name2) => existsSync41(join57(bundleDir, name2, ".claude-plugin", "plugin.json")));
+  return readdirSync15(bundleDir).filter((name2) => existsSync41(join58(bundleDir, name2, ".claude-plugin", "plugin.json")));
 }
 function sameDir(a, b) {
   const norm = (p) => resolve10(p).replace(/[\\/]+$/, "").toLowerCase();
@@ -101373,7 +101639,7 @@ function off(env2) {
 function readSettings(path3) {
   if (!existsSync41(path3)) return {};
   try {
-    const parsed = JSON.parse(readFileSync49(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync50(path3, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
     return parsed;
   } catch {
@@ -101397,13 +101663,13 @@ function currentDirs(settings) {
   return raw2.split(delimiter2).map((s) => s.trim()).filter(Boolean);
 }
 function writeSettings(path3, settings) {
-  mkdirSync12(dirname22(path3), { recursive: true });
-  writeFileSync33(path3, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  mkdirSync12(dirname23(path3), { recursive: true });
+  writeFileSync34(path3, JSON.stringify(settings, null, 2) + "\n", "utf8");
 }
 function ensureClaudeMods(opts) {
   const env2 = opts.env ?? process.env;
   const settingsPath = opts.userSettingsPath ?? userClaudeSettingsPath();
-  const modsRoot = join57(opts.installRoot, "claude-mods");
+  const modsRoot = join58(opts.installRoot, "claude-mods");
   if (off(env2)) {
     const settings2 = readSettings(settingsPath);
     if (!settings2) return { kind: "unreadable" };
@@ -101420,14 +101686,14 @@ function ensureClaudeMods(opts) {
   let changed = false;
   const installed = [];
   for (const name2 of names) {
-    const src = join57(bundleDir, name2);
-    const dest = join57(modsRoot, name2);
+    const src = join58(bundleDir, name2);
+    const dest = join58(modsRoot, name2);
     const hash2 = modHash(src);
-    const hashFile = join57(dest, HASH_FILE);
-    if (!existsSync41(hashFile) || readFileSync49(hashFile, "utf8") !== hash2) {
+    const hashFile = join58(dest, HASH_FILE);
+    if (!existsSync41(hashFile) || readFileSync50(hashFile, "utf8") !== hash2) {
       rmSync4(dest, { recursive: true, force: true });
       cpSync3(src, dest, { recursive: true, filter: (p) => !isEngineOwned(relative7(src, p)) });
-      writeFileSync33(hashFile, hash2, "utf8");
+      writeFileSync34(hashFile, hash2, "utf8");
       changed = true;
     }
     installed.push(dest);
@@ -101858,9 +102124,9 @@ function resolveHookPort(explicit) {
       }
     }
   }
-  const settingsPath = join58(ROOT, ".claude", "settings.json");
+  const settingsPath = join59(ROOT, ".claude", "settings.json");
   try {
-    if (existsSync42(settingsPath)) return installedHookPort(readFileSync50(settingsPath, "utf8")) ?? 7891;
+    if (existsSync42(settingsPath)) return installedHookPort(readFileSync51(settingsPath, "utf8")) ?? 7891;
   } catch {
   }
   return 7891;
@@ -101886,13 +102152,13 @@ async function cmdInit() {
     console.log("");
     console.log("installing harness hooks...");
     const { existsSync: existsSync43 } = await import("node:fs");
-    const { join: join59 } = await import("node:path");
+    const { join: join60 } = await import("node:path");
     try {
       await installClaudeHooks(port);
     } catch (err2) {
       console.warn(`  \u26A0\uFE0F  Claude hook install failed: ${err2 instanceof Error ? err2.message : err2}`);
     }
-    if (existsSync43(join59(ROOT, ".cursor"))) {
+    if (existsSync43(join60(ROOT, ".cursor"))) {
       try {
         await installCursorMcpConfig();
       } catch (err2) {
@@ -103118,7 +103384,7 @@ async function cmdReview() {
     console.log("(review queue empty)");
     return;
   }
-  const queue = JSON.parse(readFileSync50(paths.reviewQueue, "utf8"));
+  const queue = JSON.parse(readFileSync51(paths.reviewQueue, "utf8"));
   if (queue.length === 0) {
     console.log("(review queue empty)");
     return;
@@ -103857,7 +104123,7 @@ async function gatherReportData(generatedAt) {
   };
 }
 async function cmdReport(args2) {
-  const { mkdirSync: mkdirSync13, writeFileSync: writeFileSync35 } = await import("node:fs");
+  const { mkdirSync: mkdirSync13, writeFileSync: writeFileSync36 } = await import("node:fs");
   const { renderReport: renderReport2 } = await Promise.resolve().then(() => (init_report_render(), report_render_exports));
   const includeFutureVerbs = args2.includes("--future-verbs");
   const now = /* @__PURE__ */ new Date();
@@ -103870,8 +104136,8 @@ async function cmdReport(args2) {
   const outDir = workspacePaths(ROOT).configDir;
   mkdirSync13(outDir, { recursive: true });
   const files = renderReport2(data, { includeFutureVerbs });
-  for (const f of files) writeFileSync35(join58(outDir, f.name), f.html, "utf8");
-  const indexPath = join58(outDir, "report.html");
+  for (const f of files) writeFileSync36(join59(outDir, f.name), f.html, "utf8");
+  const indexPath = join59(outDir, "report.html");
   console.log(`report \u2192 ${indexPath}`);
   console.log(
     `  ${data.repos.length} repo(s) \xB7 ${files.length} file(s) \xB7 ${data.rollup.nodes.toLocaleString("en-US")} nodes`
@@ -103927,7 +104193,7 @@ function spawnDaemonDetached(options = {}) {
   try {
     const logPath = daemonLogPath();
     try {
-      if (statSync17(logPath).size > 5 * 1024 * 1024) renameSync10(logPath, `${logPath}.1`);
+      if (statSync17(logPath).size > 5 * 1024 * 1024) renameSync11(logPath, `${logPath}.1`);
     } catch {
     }
     out2 = openSync3(logPath, "a");
@@ -104000,24 +104266,24 @@ async function cmdInstallHooks(args2) {
   }
 }
 async function installOpencodePlugin(port) {
-  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync51, writeFileSync: writeFileSync35 } = await import("node:fs");
-  const { join: join59 } = await import("node:path");
-  const dir = join59(ROOT, ".opencode", "plugin");
+  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync52, writeFileSync: writeFileSync36 } = await import("node:fs");
+  const { join: join60 } = await import("node:path");
+  const dir = join60(ROOT, ".opencode", "plugin");
   if (!existsSync43(dir)) mkdirSync13(dir, { recursive: true });
-  const file2 = join59(dir, "inerrata.js");
+  const file2 = join60(dir, "inerrata.js");
   if (existsSync43(file2)) {
-    const head2 = readFileSync51(file2, "utf8").split("\n")[0] ?? "";
+    const head2 = readFileSync52(file2, "utf8").split("\n")[0] ?? "";
     if (head2.trim() !== OPENCODE_PLUGIN_MARKER) {
       console.error(`refusing to overwrite ${file2}: not an errata-managed plugin (line 1 lacks the marker)`);
       process.exit(2);
     }
   }
-  writeFileSync35(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
-  const cfgFile = join59(ROOT, "opencode.json");
+  writeFileSync36(file2, buildOpencodePluginSource(port, { version: DAEMON_VERSION }), "utf8");
+  const cfgFile = join60(ROOT, "opencode.json");
   let cfg = { $schema: "https://opencode.ai/config.json" };
   if (existsSync43(cfgFile)) {
     try {
-      cfg = JSON.parse(readFileSync51(cfgFile, "utf8"));
+      cfg = JSON.parse(readFileSync52(cfgFile, "utf8"));
     } catch {
       console.error(`refusing to touch invalid JSON at ${cfgFile} \u2014 fix it and re-run`);
       process.exit(2);
@@ -104028,7 +104294,7 @@ async function installOpencodePlugin(port) {
   if (!hadErrata) {
     const inv = errataMcpInvocation();
     cfg.mcp["errata"] = { type: "local", command: [inv.command, ...inv.args] };
-    writeFileSync35(cfgFile, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+    writeFileSync36(cfgFile, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   }
   console.log(`installed OpenCode plugin \u2192 ${file2}`);
   if (hadErrata) console.log(`  mcp.errata already present in ${cfgFile} \u2014 left untouched`);
@@ -104062,15 +104328,15 @@ function installClaudeMods() {
   }
 }
 async function installClaudeHooks(port) {
-  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync51, writeFileSync: writeFileSync35 } = await import("node:fs");
-  const { join: join59 } = await import("node:path");
-  const dir = join59(ROOT, ".claude");
+  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync52, writeFileSync: writeFileSync36 } = await import("node:fs");
+  const { join: join60 } = await import("node:path");
+  const dir = join60(ROOT, ".claude");
   if (!existsSync43(dir)) mkdirSync13(dir, { recursive: true });
-  const file2 = join59(dir, "settings.json");
+  const file2 = join60(dir, "settings.json");
   let settings = {};
   if (existsSync43(file2)) {
     try {
-      settings = JSON.parse(readFileSync51(file2, "utf8"));
+      settings = JSON.parse(readFileSync52(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -104078,12 +104344,12 @@ async function installClaudeHooks(port) {
   }
   applyClaudeErrataHooks(settings, port);
   removeProjectStatusLine(settings);
-  writeFileSync35(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  writeFileSync36(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code hooks \u2192 ${file2}`);
   console.log(`  ${ensureStatusLine(port)}`);
   console.log(`  ${installClaudeMods().line}`);
   await installClaudeMcpConfig();
-  const claudeMd = join59(ROOT, "CLAUDE.md");
+  const claudeMd = join60(ROOT, "CLAUDE.md");
   const recall = writeManagedBlock(claudeMd, { body: RECALL_FIRST_BLOCK });
   if (recall.kind === "collision") {
     console.warn(
@@ -104095,15 +104361,15 @@ async function installClaudeHooks(port) {
   console.log(`  endpoint: http://127.0.0.1:${port}/api/hook`);
 }
 async function installClaudeMcpConfig() {
-  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync51, writeFileSync: writeFileSync35 } = await import("node:fs");
-  const { join: join59, dirname: dirname23 } = await import("node:path");
-  const file2 = join59(ROOT, ".mcp.json");
-  const dir = dirname23(file2);
+  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync52, writeFileSync: writeFileSync36 } = await import("node:fs");
+  const { join: join60, dirname: dirname24 } = await import("node:path");
+  const file2 = join60(ROOT, ".mcp.json");
+  const dir = dirname24(file2);
   if (!existsSync43(dir)) mkdirSync13(dir, { recursive: true });
   let cfg = {};
   if (existsSync43(file2)) {
     try {
-      cfg = JSON.parse(readFileSync51(file2, "utf8"));
+      cfg = JSON.parse(readFileSync52(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -104111,21 +104377,21 @@ async function installClaudeMcpConfig() {
   }
   cfg.mcpServers ??= {};
   cfg.mcpServers["errata"] = errataMcpInvocation();
-  writeFileSync35(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+  writeFileSync36(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code MCP server config \u2192 ${file2}`);
   console.log(`  Claude Code will spawn \`errata mcp\` on workspace open.`);
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses / show / similar`);
 }
 async function installCursorMcpConfig() {
-  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync51, writeFileSync: writeFileSync35 } = await import("node:fs");
-  const { join: join59 } = await import("node:path");
-  const dir = join59(ROOT, ".cursor");
+  const { mkdirSync: mkdirSync13, existsSync: existsSync43, readFileSync: readFileSync52, writeFileSync: writeFileSync36 } = await import("node:fs");
+  const { join: join60 } = await import("node:path");
+  const dir = join60(ROOT, ".cursor");
   if (!existsSync43(dir)) mkdirSync13(dir, { recursive: true });
-  const file2 = join59(dir, "mcp.json");
+  const file2 = join60(dir, "mcp.json");
   let cfg = {};
   if (existsSync43(file2)) {
     try {
-      cfg = JSON.parse(readFileSync51(file2, "utf8"));
+      cfg = JSON.parse(readFileSync52(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -104133,7 +104399,7 @@ async function installCursorMcpConfig() {
   }
   cfg.mcpServers ??= {};
   cfg.mcpServers["errata"] = errataMcpInvocation();
-  writeFileSync35(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+  writeFileSync36(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   console.log(`installed Cursor MCP server config \u2192 ${file2}`);
   console.log(`  Cursor will spawn \`errata mcp\` on workspace open.`);
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses`);
@@ -104144,7 +104410,7 @@ async function installCodexHooks(port) {
   const gitRoot = nearestGitRoot(process.cwd());
   const hookRoot = gitRoot && mainCheckoutOfWorktree(gitRoot) ? gitRoot : ROOT;
   const file2 = writeCodexHooks(hookRoot, port);
-  const instructions = writeManagedBlock(join58(hookRoot, "AGENTS.md"), {
+  const instructions = writeManagedBlock(join59(hookRoot, "AGENTS.md"), {
     body: AGENTS_POINTER_BODY,
     stable: true
   });
@@ -104192,12 +104458,12 @@ function refreshExistingClaudeHooks() {
   let ok = true;
   const roots = [...listWorkspaceEntries().map((entry) => entry.path), process.cwd()];
   for (const root of codexHookRoots(roots)) {
-    const file2 = join58(root, ".claude", "settings.json");
+    const file2 = join59(root, ".claude", "settings.json");
     try {
       if (!existsSync42(file2) || isReplayCheckout(root)) continue;
-      const next = refreshClaudeHookSettings(readFileSync50(file2, "utf8"));
+      const next = refreshClaudeHookSettings(readFileSync51(file2, "utf8"));
       if (next === null) continue;
-      writeFileSync34(file2, next, "utf8");
+      writeFileSync35(file2, next, "utf8");
       console.log(`updated existing Claude Code hooks \u2192 ${file2}`);
     } catch (error48) {
       ok = false;
@@ -104609,9 +104875,9 @@ async function cmdDash(args2) {
       await yieldToLoop2();
       try {
         const items = selectDurableMemory(handle2.sharedStore, r.engine.profile, {
-          atCommit: readGitRefState(join58(r.root, ".git")).sha ?? void 0
+          atCommit: readGitRefState(join59(r.root, ".git")).sha ?? void 0
         });
-        const res = bleedRules(join58(r.root, ".claude", "rules"), items);
+        const res = bleedRules(join59(r.root, ".claude", "rules"), items);
         if (res.written || res.pruned) {
           console.log(
             `[rules:${r.entry.name}] ${res.written} collective principle(s) \u2192 .claude/rules` + (res.pruned ? `, ${res.pruned} pruned` : "")