@jigyasudham/veto 3.3.0 → 3.5.0

package/dist/cli/leftover-guides.js

@@ -0,0 +1,135 @@
+// Veto guides that `veto init` left inside other CLIs' own files.
+//
+// From v1.4.5 (2026-05-23) through 3.3.0, `veto init` overwrote
+// ~/.gemini/GEMINI.md (Gemini's own memory file) and wrote
+// ~/.codex/AGENTS.override.md, which Codex reads INSTEAD of the user's
+// ~/.codex/AGENTS.md. Init no longer writes either file, so the set of texts it
+// can have left behind is closed: the eight guides below, taken from git
+// history (every VETO_GUIDE src/cli.ts has ever held; no earlier code named
+// either file).
+//
+// Only a file that IS one of those guides, byte for byte once line endings are
+// normalized, is ever moved, and it is renamed rather than deleted. A file with
+// anything else in it (memories Gemini saved below the guide, the user's own
+// edits) is reported and never touched.
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, renameSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export const SHIPPED_GUIDE_SHA256 = new Set([
+    '8c283b8f593027cef97f93cc60e2f5472f84637878f4445f4d1de3456eff3558', // 49 tools (v1.4.5)
+    '125506e5606e8a7113e78ed6ed45dfa1213e5d489e3b10c96171097f83242c2d', // 49 tools
+    '5f7b7c1de6c89fcc73aaa2a6199ca8e57e334b63dd32dc1520c333b7cf20f550', // 62 tools
+    'cfc7a5cd1af02527e05d055745b3ab4511b64f84db96ddaa465f336b81f6b369', // 89 tools
+    '7ba579cfd46bdbcd16a771e9c1d0ccc672c1414726a91c55bb7648e20616dda6', // 90 tools
+    'da098265f2f1d085df681200feef626fcd119ecd1d14e13d771bd4d27bf1e948', // 91 tools
+    '0567c129b23ea49fb4e77b43f3e7e757fed2b1eebc6c385dcb4ac967bb8af870', // 92 tools
+    '2953a1c3f925955eba2967d87f34cdc30ec951f0785639a4dcb138afd6ad43fe', // 93 tools (through 3.3.0)
+]);
+// A guide is 1.4 KB. Anything far larger is the user's own file; it is only
+// ever checked for an embedded guide, and never read past this at startup.
+const MAX_READ_BYTES = 256 * 1024;
+const GUIDE_HEADING_RE = /^# Veto MCP Server[ \t]*$/m;
+const normalize = (raw) => raw.replace(/^\uFEFF/, '').replace(/\r\n?/g, '\n');
+const sha256 = (text) => createHash('sha256').update(text).digest('hex');
+/** The only two files init ever wrote into (always under the home directory, never CODEX_HOME). */
+export function leftoverGuideTargets(home = homedir()) {
+    return [
+        { host: 'codex', path: join(home, '.codex', 'AGENTS.override.md') },
+        { host: 'gemini', path: join(home, '.gemini', 'GEMINI.md') },
+    ];
+}
+function classify(path) {
+    let text;
+    try {
+        if (statSync(path).size > MAX_READ_BYTES)
+            return null;
+        text = normalize(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (SHIPPED_GUIDE_SHA256.has(sha256(text)))
+        return 'exact';
+    return GUIDE_HEADING_RE.test(text) && /\bVeto is active\b/.test(text) ? 'embedded' : null;
+}
+export function findLeftoverGuides(home = homedir()) {
+    const found = [];
+    for (const target of leftoverGuideTargets(home)) {
+        const kind = classify(target.path);
+        if (kind)
+            found.push({ ...target, kind });
+    }
+    return found;
+}
+function freeBackupPath(path, now) {
+    const plain = `${path}.veto-backup`;
+    if (!existsSync(plain))
+        return plain;
+    const stamp = now.toISOString().replace(/[-:]/g, '').replace(/\..*$/, '');
+    return `${plain}-${stamp}`;
+}
+/**
+ * Rename each file that is exactly a guide Veto wrote to `<file>.veto-backup`.
+ * Embedded guides are returned in `kept`, untouched. The file is re-checked
+ * immediately before the rename, so content a host appended in the meantime is
+ * never moved away with it.
+ */
+export function moveAsideLeftoverGuides(home = homedir(), now = new Date()) {
+    const moved = [];
+    const kept = [];
+    for (const guide of findLeftoverGuides(home)) {
+        if (guide.kind !== 'exact' || classify(guide.path) !== 'exact') {
+            kept.push(guide);
+            continue;
+        }
+        const backupPath = freeBackupPath(guide.path, now);
+        try {
+            renameSync(guide.path, backupPath);
+            moved.push({ ...guide, backupPath });
+        }
+        catch {
+            kept.push(guide);
+        }
+    }
+    return { moved, kept };
+}
+/**
+ * One line about a leftover. `owner` is how the file's owner is named: "your"
+ * in the terminal, "the user's" in text handed to the agent.
+ */
+export function describeLeftover(guide, home = homedir(), owner = 'your') {
+    const shown = guide.path.startsWith(home) ? `~${guide.path.slice(home.length).replace(/\\/g, '/')}` : guide.path;
+    const why = guide.host === 'codex' ? `Codex reads it INSTEAD of ${owner} own ~/.codex/AGENTS.md` : "it is Gemini's own memory file";
+    return guide.kind === 'exact'
+        ? `${shown} is an old Veto guide (${why})`
+        : `${shown} starts with an old Veto guide above ${owner} own content`;
+}
+/**
+ * Startup tip for the MCP `instructions` field, present only while a leftover
+ * exists, so it resolves itself. Like the status-line tip, it hands the offer
+ * to the agent; nothing is changed unless the user agrees.
+ */
+export function leftoverGuideInstruction(home = homedir()) {
+    const found = findLeftoverGuides(home);
+    if (found.length === 0)
+        return undefined;
+    const exact = found.filter(g => g.kind === 'exact');
+    const embedded = found.filter(g => g.kind === 'embedded');
+    const lines = [
+        'CLEANUP TIP — old Veto guide files (mention once per session; drop it if the user declines).',
+        'Older versions of `veto init` wrote Veto\'s guide into other CLIs\' own files, which no current version does.',
+    ];
+    if (exact.length) {
+        lines.push(`Found: ${exact.map(g => describeLeftover(g, home, "the user's")).join('; ')}.`);
+        lines.push('Offer to run `veto doctor --fix` for the user (without a global install:'
+            + ' `npx -y --package @jigyasudham/veto@latest veto doctor --fix`). It renames only those Veto-written'
+            + ' copies to *.veto-backup and changes nothing else. Do not run it unless the user agrees.');
+    }
+    if (embedded.length) {
+        lines.push(`Also: ${embedded.map(g => describeLeftover(g, home, "the user's")).join('; ')}. Veto will not edit a file that`
+            + ' holds the user\'s own content; if they want, they can delete the "# Veto MCP Server" block by hand.');
+    }
+    return lines.join(' ');
+}
+//# sourceMappingURL=leftover-guides.js.map

package/dist/cli/leftover-guides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leftover-guides.js","sourceRoot":"","sources":["../../src/cli/leftover-guides.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,gEAAgE;AAChE,2DAA2D;AAC3D,uEAAuE;AACvE,gFAAgF;AAChF,yEAAyE;AACzE,4EAA4E;AAC5E,gBAAgB;AAChB,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,wCAAwC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,kEAAkE,EAAE,oBAAoB;IACxF,kEAAkE,EAAE,WAAW;IAC/E,kEAAkE,EAAE,WAAW;IAC/E,kEAAkE,EAAE,WAAW;IAC/E,kEAAkE,EAAE,WAAW;IAC/E,kEAAkE,EAAE,WAAW;IAC/E,kEAAkE,EAAE,WAAW;IAC/E,kEAAkE,EAAE,2BAA2B;CAChG,CAAC,CAAC;AAEH,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAClC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAWtD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACtF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEjF,mGAAmG;AACnG,MAAM,UAAU,oBAAoB,CAAC,IAAI,GAAG,OAAO,EAAE;IACnD,OAAO;QACL,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,CAAC,EAAE;QACnE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxB,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3D,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAI,GAAG,OAAO,EAAE;IACjD,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,GAAS;IAC7C,MAAM,KAAK,GAAG,GAAG,IAAI,cAAc,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1E,OAAO,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACxE,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,IAAI,GAAG,OAAO,EAAE,EAAE,KAAK,GAAG,MAAM;IACrF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACjH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,6BAA6B,KAAK,yBAAyB,CAAC,CAAC,CAAC,gCAAgC,CAAC;IACpI,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO;QAC3B,CAAC,CAAC,GAAG,KAAK,0BAA0B,GAAG,GAAG;QAC1C,CAAC,CAAC,GAAG,KAAK,wCAAwC,KAAK,cAAc,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAI,GAAG,OAAO,EAAE;IACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG;QACZ,8FAA8F;QAC9F,+GAA+G;KAChH,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC,0EAA0E;cACjF,qGAAqG;cACrG,0FAA0F,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC;cACvH,sGAAsG,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/cli/lessons.d.ts

@@ -0,0 +1,17 @@
+type Out = (line?: string) => void;
+export type ConsentIo = {
+    env: NodeJS.ProcessEnv;
+    /** A person can answer: stdin and stdout are a terminal. */
+    interactive: boolean;
+    ask: (question: string) => Promise<string>;
+};
+/** Runs one `veto lessons` subcommand and returns its exit code (a promise only for `on`, which may ask a question). */
+export declare function runLessonsCommand(args: string[], options?: {
+    out?: Out;
+    color?: boolean;
+    cwd?: string;
+    home?: string;
+    io?: ConsentIo;
+}): number | Promise<number>;
+export {};
+//# sourceMappingURL=lessons.d.ts.map

package/dist/cli/lessons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lessons.d.ts","sourceRoot":"","sources":["../../src/cli/lessons.ts"],"names":[],"mappings":"AAeA,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AA4RnC,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,4DAA4D;IAC5D,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5C,CAAC;AAsEF,wHAAwH;AACxH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,SAAS,CAAA;CAAO,GACxF,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB1B"}

package/dist/cli/lessons.js

@@ -0,0 +1,448 @@
+// `veto lessons`: see and control what Veto harvests from each AI's own memory
+// (Harvest-and-Share, council 320c40dc). Nothing here delivers a note to any
+// AI; it only shows the user their notes and where the rules would let them go.
+import { createInterface } from 'node:readline';
+import { LESSON_SOURCES } from '../lessons/adapters/index.js';
+import { acceptLessonsConsent, detectAiSession, lessonsDisclosure } from '../lessons/consent.js';
+import { aliasGroups, explainLesson, excludeProjectDir, findLesson, forgetLesson, HOST_NAMES, includeProjectDir, lessonFlows, lessonReach, lessonsStatus, lessonTitle, listLessons, projectName, recheckSource, refreshLessons, removeProjectAlias, setProjectAlias, turnLessonsOff, unresolvedFolders, } from '../lessons/manage.js';
+const ansi = (code) => (s) => `\x1b[${code}m${s}\x1b[0m`;
+const COLORS = { bold: ansi(1), dim: ansi(2), green: ansi(32), yellow: ansi(33), cyan: ansi(36), red: ansi(31) };
+const PLAIN = { bold: s => s, dim: s => s, green: s => s, yellow: s => s, cyan: s => s, red: s => s };
+const RULE = '─────────────────────────────────────────────────────';
+const SHADOW = 'shadow mode: nothing is delivered to any AI yet';
+const USAGE = [
+    'veto lessons [status]',
+    'veto lessons on             (in your own terminal: you type yes to accept)',
+    'veto lessons list [--scope=user|machine|project] [--source=claude|codex|gemini] [--shared] [--held] [--project=<dir>] [--json]',
+    'veto lessons why <id>',
+    'veto lessons forget <id>',
+    'veto lessons flows',
+    'veto lessons off',
+    'veto lessons exclude [<dir>]   ·   veto lessons include [<dir>]',
+    'veto lessons alias [<path> --to=<dir>]   ·   veto lessons alias --remove <path>',
+    'veto lessons recheck <claude|codex|gemini>',
+];
+const VALUE_FLAGS = new Set(['scope', 'source', 'project', 'to']);
+function parseArgs(args) {
+    const positional = [];
+    const flags = new Map();
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (!arg.startsWith('--')) {
+            positional.push(arg);
+            continue;
+        }
+        const eq = arg.indexOf('=');
+        if (eq > 2) {
+            flags.set(arg.slice(2, eq), arg.slice(eq + 1));
+            continue;
+        }
+        const name = arg.slice(2);
+        if (VALUE_FLAGS.has(name) && i + 1 < args.length && !args[i + 1].startsWith('--'))
+            flags.set(name, args[++i]);
+        else
+            flags.set(name, true);
+    }
+    return { positional, flags };
+}
+const shortId = (row) => row.id.slice(0, 8);
+const clip = (text, width) => (text.length > width ? `${text.slice(0, width - 1)}…` : text);
+const plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+function reachLabel(row) {
+    const reach = lessonReach(row);
+    if (reach === 'any-project')
+        return 'any project';
+    if (row.quarantined)
+        return `held: ${row.quarantine_reason ?? 'held'}`;
+    return reach === 'own-project' ? 'own project' : 'nowhere';
+}
+function lookup(found, id, out, c) {
+    if ('row' in found)
+        return found.row;
+    if ('matches' in found) {
+        out(c.red(`  ${id} matches more than one note. Give more of the ID:`));
+        for (const row of found.matches)
+            out(`    ${c.cyan(row.id.slice(0, 12))}  ${clip(lessonTitle(row), 60)}`);
+    }
+    else if (found.error === 'too-short')
+        out(c.red('  Give at least the first 4 characters of the note ID, as veto lessons list shows it.'));
+    else
+        out(c.red(`  No note ${id}. See veto lessons list.`));
+    return null;
+}
+function sharingLine(c) {
+    const s = lessonsStatus();
+    if (s.sharing)
+        return `${c.green('on')}${s.consentAt ? c.dim(` · accepted ${s.consentAt.slice(0, 10)}`) : ''} · ${c.dim(SHADOW)}`;
+    if (s.needsReconsent)
+        return c.yellow('paused: what sharing does has changed since you accepted it') + c.dim(' → veto lessons on');
+    return `${c.dim('off')}${s.notes ? '' : c.dim(": Veto has not read any AI's memory")}`;
+}
+function status(out, c, home) {
+    refreshLessons(home);
+    const s = lessonsStatus();
+    out('');
+    out(c.bold('  Veto Lessons: notes your AIs wrote, shared between them'));
+    out(c.dim(`  ${RULE}`));
+    out(`  Sharing:      ${sharingLine(c)}`);
+    if (s.notes || s.sharing) {
+        out(`  Notes:        ${s.notes} ${c.dim(`(${LESSON_SOURCES.map(host => `${HOST_NAMES[host]} ${s.byHost[host]}`).join(' · ')})`)}`);
+        out(`  Reach:        ${plural(s.anyProject, 'note')} may go to any project · ${s.held} held in their own project`);
+    }
+    for (const [host, reason] of s.disabledHosts) {
+        out(c.yellow(`  Switched off: ${HOST_NAMES[host]}, its memory format changed (${reason})`) + c.dim(` → veto lessons recheck ${host}`));
+    }
+    if (s.excluded.length)
+        out(`  Kept out:     ${s.excluded.map(e => e.project_label ?? e.project_identity).join(', ')} ${c.dim('(nothing leaves, nothing enters)')}`);
+    if (s.unresolved)
+        out(`  Unlinked:     ${plural(s.unresolved, 'memory folder')} with no project Veto can find ${c.dim('→ veto lessons alias')}`);
+    if (s.forgotten)
+        out(`  Forgotten:    ${s.forgotten} ${c.dim('(permanent)')}`);
+    if (s.shadowLog)
+        out(`  Shadow log:   ${plural(s.shadowLog, 'record')} of what would have been shared`);
+    if (s.notes && !s.sharing)
+        out(c.yellow('  Sharing is off, but notes harvested earlier are still stored.') + c.dim(' Delete them with: veto lessons off'));
+    if (!s.sharing && !s.needsReconsent)
+        out(c.dim('  Turn it on, in a terminal of your own: veto lessons on'));
+    out('');
+    out(c.dim('  on · list · why <id> · forget <id> · flows · off · exclude|include [dir] · alias · recheck <host>'));
+    out('');
+    return 0;
+}
+function list(flags, out, c, home) {
+    const scope = flags.get('scope');
+    const source = flags.get('source');
+    const project = flags.get('project');
+    if (scope !== undefined && !['user', 'machine', 'project'].includes(String(scope))) {
+        out(c.red('  --scope must be user, machine or project.'));
+        return 1;
+    }
+    if (source !== undefined && !LESSON_SOURCES.includes(String(source))) {
+        out(c.red('  --source must be claude, codex or gemini.'));
+        return 1;
+    }
+    refreshLessons(home);
+    const rows = listLessons({
+        scope: typeof scope === 'string' ? scope : undefined,
+        source: typeof source === 'string' ? source : undefined,
+        projectDir: typeof project === 'string' ? project : undefined,
+        shared: flags.has('shared'),
+        held: flags.has('held'),
+    });
+    if (flags.has('json')) {
+        out(JSON.stringify(rows, null, 2));
+        return 0;
+    }
+    out('');
+    out(c.bold(`  Notes Veto has read from your AIs' memory: ${rows.length}`));
+    out(c.dim(`  ${RULE}`));
+    out(`  Sharing: ${sharingLine(c)}`);
+    let group = null;
+    for (const row of rows) {
+        const name = projectName(row);
+        if (name !== group) {
+            group = name;
+            out('');
+            out(`  ${c.bold(name)}`);
+        }
+        out(`    ${c.cyan(shortId(row))}  ${HOST_NAMES[row.source_cli].padEnd(6)}  ${c.dim(row.source_mtime.slice(0, 10))}  ${reachLabel(row).padEnd(13)}  ${clip(lessonTitle(row), 60)}`);
+    }
+    if (!rows.length)
+        out(c.dim(flags.size ? '  (no notes match)' : '  (none)'));
+    out('');
+    out(c.dim('  why <id> shows a note and where it may go · forget <id> removes it for good'));
+    out('');
+    return 0;
+}
+function why(id, out, c, home) {
+    if (!id) {
+        out(c.red('  Usage: veto lessons why <id>'));
+        return 1;
+    }
+    refreshLessons(home);
+    const row = lookup(findLesson(id), id, out, c);
+    if (!row)
+        return 1;
+    const e = explainLesson(row);
+    out('');
+    out(c.bold(`  Note ${shortId(row)}`) + c.dim(`  ${e.provenance}`));
+    out(c.dim(`  ${RULE}`));
+    out(`  Source     ${row.source_path} ${c.dim(`(section: ${row.section_anchor})`)}`);
+    out(`  Scope      ${e.scope}`);
+    if (e.held)
+        out(`  Held       ${e.held}`);
+    out(`  May reach  ${e.reach}`);
+    if (e.hostDisabled)
+        out(c.yellow(`  Paused     ${HOST_NAMES[row.source_cli]}'s memory format changed, so none of its notes are used (${e.hostDisabled})`));
+    out(`  Delivered  ${c.dim(`never yet: ${SHADOW}`)}`);
+    out('');
+    out(c.dim('  ┌─ the note as it would be shared (email addresses, home folders and secrets masked)'));
+    for (const line of row.text_masked.split('\n'))
+        out(`${c.dim('  │')} ${line}`);
+    out(c.dim('  └─'));
+    out('');
+    out(c.dim(`  Forget it for good: veto lessons forget ${shortId(row)}`));
+    out('');
+    return 0;
+}
+function forget(id, out, c) {
+    if (!id) {
+        out(c.red('  Usage: veto lessons forget <id>'));
+        return 1;
+    }
+    const row = lookup(findLesson(id), id, out, c);
+    if (!row)
+        return 1;
+    const { removed } = forgetLesson(row);
+    out('');
+    out(c.green(`  ✓ Forgot ${shortId(row)}: ${clip(lessonTitle(row), 60)}`));
+    if (removed > 1)
+        out(c.dim(`    Also removed ${plural(removed - 1, 'copy', 'copies')} of it kept elsewhere.`));
+    out(c.dim(`    It will not be read again, even if ${HOST_NAMES[row.source_cli]} edits it. Its memory file is untouched.`));
+    out('');
+    return 0;
+}
+function flows(out, c, home) {
+    refreshLessons(home);
+    const all = lessonFlows();
+    const s = lessonsStatus();
+    out('');
+    out(c.bold('  Where each AI\'s notes may go'));
+    out(c.dim(`  ${RULE}`));
+    out(`  Sharing: ${sharingLine(c)}`);
+    for (const flow of all) {
+        out('');
+        out(`  ${c.bold(`${HOST_NAMES[flow.source]} memory · ${flow.projectLabel}`)}  ${c.dim(plural(flow.notes, 'note'))}`);
+        const to = flow.source === 'claude' ? 'Codex, Gemini, and Claude in other folders'
+            : `${LESSON_SOURCES.filter(host => host !== flow.source).map(host => HOST_NAMES[host]).join(', ')}`;
+        if (flow.anyProject)
+            out(`    ${String(flow.anyProject).padStart(4)}  → any project, in ${to}`);
+        if (flow.ownProject)
+            out(`    ${String(flow.ownProject).padStart(4)}  → ${flow.projectLabel} only, in ${to}`);
+        if (flow.nowhere) {
+            out(`    ${String(flow.nowhere).padStart(4)}  → nowhere ${c.dim(flow.unresolved ? '(no known project folder: see veto lessons alias)' : '(held back, and no project of their own)')}`);
+        }
+        const held = Object.entries(flow.heldBack);
+        if (held.length)
+            out(c.dim(`          held in their project instead of shared: ${held.map(([reason, n]) => `${n} ${reason}`).join(', ')}`));
+        if (s.disabledHosts.has(flow.source))
+            out(c.yellow(`          paused: ${HOST_NAMES[flow.source]}'s memory format changed → veto lessons recheck ${flow.source}`));
+    }
+    if (!all.length) {
+        out('');
+        out(c.dim('  (no notes)'));
+    }
+    if (s.excluded.length) {
+        out('');
+        out(`  Kept out: ${s.excluded.map(e => e.project_label ?? e.project_identity).join(', ')} ${c.dim('(nothing leaves, nothing enters)')}`);
+    }
+    out('');
+    out(c.dim('  A note is only ever shared into the project it came from, unless it is about you or this machine'));
+    out(c.dim('  and carries no command, web address, credential or instruction.'));
+    out('');
+    return 0;
+}
+function off(out, c) {
+    const r = turnLessonsOff();
+    out('');
+    out(c.green(`  ✓ Sharing is off${r.wasOn ? '' : ' (it already was)'}.`));
+    out(`    Deleted ${plural(r.notes, 'harvested note')} and ${plural(r.shadowLog, 'shadow-log record')}.`);
+    if (r.remaining === 0)
+        out(c.dim('    Checked: nothing harvested is left in Veto\'s database. Your AIs\' own memory files are untouched.'));
+    else
+        out(c.red(`    ${r.remaining} rows could not be deleted. Run this again, or report it.`));
+    out(c.dim('    Forgotten notes, excluded projects and aliases are kept, so they still apply if you turn sharing back on.'));
+    out('');
+    return r.remaining === 0 ? 0 : 1;
+}
+function excludeOrInclude(sub, dir, out, c) {
+    if (sub === 'exclude') {
+        const r = excludeProjectDir(dir);
+        out('');
+        out(c.green(`  ✓ ${r.label} is kept out of sharing${r.added ? '' : ' (it already was)'}.`) + c.dim(' Its notes are not read, and no note is chosen for it.'));
+        if (r.removed)
+            out(c.dim(`    Deleted ${plural(r.removed, 'note')} already harvested from it.`));
+        out('');
+        return 0;
+    }
+    const r = includeProjectDir(dir);
+    out('');
+    out(r.removed ? c.green(`  ✓ ${r.label} takes part in sharing again.`) : c.dim(`  ${r.label} was not kept out.`));
+    out('');
+    return 0;
+}
+function alias(positional, flags, out, c, home) {
+    const remove = flags.get('remove');
+    const target = flags.get('to');
+    const path = typeof remove === 'string' ? remove : positional[0];
+    if (remove !== undefined) {
+        if (!path) {
+            out(c.red('  Usage: veto lessons alias --remove <path>'));
+            return 1;
+        }
+        out(removeProjectAlias(path) ? c.green(`  ✓ ${path} is no longer linked to another project.`) : c.dim(`  ${path} had no link.`));
+        return 0;
+    }
+    if (path) {
+        if (typeof target !== 'string') {
+            out(c.red('  Usage: veto lessons alias <path> --to=<project folder>'));
+            return 1;
+        }
+        const r = setProjectAlias(path, target);
+        if (!r.ok) {
+            out(c.red(r.error === 'target-missing' ? `  ${target} is not a folder on this machine.`
+                : r.error === 'same-folder' ? '  Those are the same folder.'
+                    : `  ${path} is a different repository from ${target}, so its notes are not ${target}'s. Nothing was linked.`));
+            return 1;
+        }
+        out(c.green(`  ✓ Notes from ${path} now count as ${r.label}'s.`));
+        if (!r.memoryFolders)
+            out(c.yellow("    No AI memory Veto has read belongs to that path, so nothing moves yet. Check the spelling against veto lessons alias."));
+        const report = refreshLessons(home);
+        if (report)
+            out(c.dim(`    Re-read your AIs' memory: ${report.updated} notes moved or changed.`));
+        return 0;
+    }
+    refreshLessons(home);
+    const groups = aliasGroups();
+    const unresolved = unresolvedFolders();
+    out('');
+    out(c.bold('  Folders Veto treats as one project'));
+    out(c.dim(`  ${RULE}`));
+    if (!groups.length)
+        out(c.dim('  (none: each project is checked out in one place)'));
+    for (const group of groups)
+        out(`  ${group.paths.join(c.dim('  =  '))}`);
+    if (unresolved.length) {
+        out('');
+        out(c.bold('  Memory with no project folder'));
+        out(c.dim('  Its project notes reach no session until you link it, for example a copy on a drive that is not plugged in:'));
+        for (const folder of unresolved) {
+            out(`  ${folder.label}  ${c.dim(plural(folder.notes, 'note'))}`);
+            const s = folder.suggestion;
+            if (s)
+                out(`      ${c.dim(s.aliasPath ? 'link it:' : 'probably this project; give its folder:')} veto lessons alias "${s.aliasPath ?? '<its folder>'}" --to="${s.targetDir}"`);
+        }
+        out(c.dim('  Link one with: veto lessons alias "<its folder>" --to="<the project folder on this machine>"'));
+    }
+    out('');
+    return 0;
+}
+function recheck(host, out, c, home) {
+    if (!host || !LESSON_SOURCES.includes(host)) {
+        out(c.red('  Usage: veto lessons recheck <claude|codex|gemini>'));
+        return 1;
+    }
+    const r = recheckSource(host, home);
+    out('');
+    if (r.stillDisabled)
+        out(c.yellow(`  ${HOST_NAMES[host]}'s memory still has a format Veto does not recognise (${r.stillDisabled}), so it stays off.`));
+    else if (!r.report)
+        out(c.green(`  ✓ ${HOST_NAMES[host]} is back on.`) + c.dim(' It will be read once sharing is on.'));
+    else
+        out(c.green(`  ✓ ${HOST_NAMES[host]} is back on${r.wasDisabled ? '' : ' (it was not off)'}.`) + c.dim(` Read ${plural(r.report.harvested, 'file')}.`));
+    out('');
+    return r.stillDisabled ? 1 : 0;
+}
+function terminalIo() {
+    return {
+        env: process.env,
+        interactive: Boolean(process.stdin.isTTY && process.stdout.isTTY),
+        ask: question => new Promise(resolve => {
+            const rl = createInterface({ input: process.stdin, output: process.stdout });
+            let answered = false;
+            rl.on('close', () => { if (!answered)
+                resolve(''); });
+            rl.question(question, answer => { answered = true; rl.close(); resolve(answer); });
+        }),
+    };
+}
+/**
+ * Consent v2. The disclosure is shown to anyone, but only a person typing
+ * "yes" in their own terminal can accept it. A command an AI runs is refused
+ * before any question is asked, so no AI can turn sharing on for the user.
+ */
+async function on(out, c, home, io) {
+    const s = lessonsStatus();
+    if (s.sharing) {
+        out('');
+        out(c.green(`  Sharing is already on${s.consentAt ? ` (accepted ${s.consentAt.slice(0, 10)})` : ''}.`) + c.dim(' Turn it off with: veto lessons off'));
+        out('');
+        return 0;
+    }
+    out('');
+    for (const line of lessonsDisclosure().split('\n'))
+        out(line ? `  ${line}` : '');
+    out('');
+    const marker = detectAiSession(io.env);
+    if (marker) {
+        out(c.yellow(`  An AI is running this command (${marker} is set), so it cannot accept for you. Nothing changed.`));
+        out('  To turn sharing on, open a terminal window yourself and run: veto lessons on');
+        out('');
+        return 1;
+    }
+    if (!io.interactive) {
+        out(c.yellow('  Accepting needs you to type yes in a terminal window. Nothing changed.'));
+        out('  Open one and run: veto lessons on');
+        out('');
+        return 1;
+    }
+    let answer = '';
+    try {
+        answer = await io.ask('  Type yes to turn sharing on: ');
+    }
+    catch {
+        answer = '';
+    }
+    if (answer.trim().toLowerCase() !== 'yes') {
+        out(c.dim('  Nothing changed. Sharing is still off.'));
+        out('');
+        return 0;
+    }
+    const r = acceptLessonsConsent(home);
+    out('');
+    out(c.green('  ✓ Sharing is on.'));
+    out('');
+    const hosts = LESSON_SOURCES.map(host => `${HOST_NAMES[host]} ${r.byHost[host]}`).join(' · ');
+    out(`  Veto read ${plural(r.report.sources, 'memory file')} and found ${plural(r.notes, 'note')} ${c.dim(`(${hosts})`)}${r.projects ? ` across ${plural(r.projects, 'project')}` : ''}.`);
+    if (r.notes) {
+        out(`    ${String(r.anyProject).padStart(4)}  may be shared into any project: they are about you or this computer`);
+        out(`    ${String(r.ownProject).padStart(4)}  stay in their own project: they are about it, or hold a command, web address or credential`);
+    }
+    if (r.unlinked)
+        out(`    ${String(r.unlinked).padStart(4)}  ${r.unlinked === 1 ? 'memory folder is' : 'memory folders are'} on a drive Veto cannot see; link ${r.unlinked === 1 ? 'it' : 'them'} with: veto lessons alias`);
+    for (const host of r.disabledHosts)
+        out(c.yellow(`  ${HOST_NAMES[host]}'s memory is in a format Veto does not recognise, so it was skipped.`));
+    out('');
+    out(c.dim('  This is the trial: nothing has been given to any AI. See every note with: veto lessons list'));
+    out('');
+    return 0;
+}
+/** Runs one `veto lessons` subcommand and returns its exit code (a promise only for `on`, which may ask a question). */
+export function runLessonsCommand(args, options = {}) {
+    const out = options.out ?? ((line = '') => console.log(line));
+    const c = options.color === false ? PLAIN : COLORS;
+    const [sub = 'status', ...rest] = args;
+    const { positional, flags } = parseArgs(rest);
+    const cwd = options.cwd ?? process.cwd();
+    const home = options.home;
+    switch (sub) {
+        case 'on': return on(out, c, home, options.io ?? terminalIo());
+        case 'status': return status(out, c, home);
+        case 'list': return list(flags, out, c, home);
+        case 'why': return why(positional[0], out, c, home);
+        case 'forget': return forget(positional[0], out, c);
+        case 'flows': return flows(out, c, home);
+        case 'off': return off(out, c);
+        case 'exclude':
+        case 'include': return excludeOrInclude(sub, positional[0] ?? cwd, out, c);
+        case 'alias': return alias(positional, flags, out, c, home);
+        case 'recheck': return recheck(positional[0], out, c, home);
+        default:
+            out(c.red(`  Unknown lessons subcommand: ${sub}`));
+            for (const line of USAGE)
+                out(c.dim(`  ${line}`));
+            return 1;
+    }
+}
+//# sourceMappingURL=lessons.js.map