@massu/core 2.5.4 → 2.5.6

package/dist/cli.js

@@ -421,12 +421,12 @@ function runRebuild(pkgDir, abiFrom, abiTo, start) {
   }
   const prebuildBin = resolveLocalBin(pkgDir, "prebuild-install");
   if (prebuildBin) {
-    const r2 = spawnSync2(process.execPath, [prebuildBin], {
+    const r3 = spawnSync2(process.execPath, [prebuildBin], {
       cwd: pkgDir,
       encoding: "utf-8",
       timeout: 12e4
     });
-    if (r2.status === 0) {
+    if (r3.status === 0) {
       const res2 = { healed: true, method: "prebuild-install", abiFrom, abiTo, durationMs: Date.now() - start };
       recordHealEvent({ phase: "success", reason: "abi-mismatch", ...res2 });
       return res2;
@@ -434,12 +434,12 @@ function runRebuild(pkgDir, abiFrom, abiTo, start) {
   }
   const gypBin = resolveNodeGypBin();
   if (gypBin && hasCompiler()) {
-    const r2 = spawnSync2(process.execPath, [gypBin, "rebuild", "--release"], {
+    const r3 = spawnSync2(process.execPath, [gypBin, "rebuild", "--release"], {
       cwd: pkgDir,
       encoding: "utf-8",
       timeout: 3e5
     });
-    if (r2.status === 0) {
+    if (r3.status === 0) {
       const res2 = { healed: true, method: "node-gyp", abiFrom, abiTo, durationMs: Date.now() - start };
       recordHealEvent({ phase: "success", reason: "abi-mismatch", ...res2 });
       return res2;
@@ -518,8 +518,8 @@ function resolveNodeGypBin() {
 function hasCompiler() {
   for (const cc of ["cc", "clang", "gcc"]) {
     try {
-      const r2 = spawnSync2(cc, ["--version"], { encoding: "utf-8", timeout: 5e3 });
-      if (r2.status === 0) return true;
+      const r3 = spawnSync2(cc, ["--version"], { encoding: "utf-8", timeout: 5e3 });
+      if (r3.status === 0) return true;
     } catch {
     }
   }
@@ -593,10 +593,10 @@ function openNodeSqlite(dbPath, opts) {
     const st = raw.prepare(sql);
     return {
       run: (...p19) => {
-        const r2 = st.run(...p19);
+        const r3 = st.run(...p19);
         return {
-          changes: typeof r2.changes === "bigint" ? Number(r2.changes) : r2.changes,
-          lastInsertRowid: r2.lastInsertRowid
+          changes: typeof r3.changes === "bigint" ? Number(r3.changes) : r3.changes,
+          lastInsertRowid: r3.lastInsertRowid
         };
       },
       get: (...p19) => plainRow(st.get(...p19)),
@@ -1170,7 +1170,8 @@ var init_config = __esm({
       input_per_million: z2.number(),
       output_per_million: z2.number(),
       cache_read_per_million: z2.number().optional(),
-      cache_write_per_million: z2.number().optional()
+      cache_write_per_million: z2.number().optional(),
+      cache_write_1h_per_million: z2.number().optional()
     });
     AnalyticsConfigSchema = z2.object({
       quality: z2.object({
@@ -1793,7 +1794,7 @@ function tableExists(db, table) {
 }
 function columns(db, table) {
   const rows = db.prepare(`PRAGMA table_info(${table})`).all();
-  return new Set(rows.map((r2) => r2.name));
+  return new Set(rows.map((r3) => r3.name));
 }
 function migrateRuleDelivery(db) {
   const ADDITIONS = [
@@ -1814,8 +1815,8 @@ function migrateRuleDelivery(db) {
 function undeliveredSnapshot(db) {
   const count = (t2) => {
     if (!tableExists(db, t2)) return 0;
-    const r2 = db.prepare(`SELECT COUNT(*) AS n FROM ${t2}`).get();
-    return r2.n;
+    const r3 = db.prepare(`SELECT COUNT(*) AS n FROM ${t2}`).get();
+    return r3.n;
   };
   const promotions = count("team_promotion_outbound");
   const revocations = count("team_revocation_outbound");
@@ -1825,9 +1826,9 @@ function undeliveredSnapshot(db) {
   for (const t2 of RULE_OUTBOUND_TABLES) {
     if (!tableExists(db, t2)) continue;
     if (!columns(db, t2).has("attempts")) continue;
-    const r2 = db.prepare(`SELECT MAX(attempts) AS a, MIN(created_at) AS c FROM ${t2}`).get();
-    if (r2.a !== null && r2.a > maxAttempts) maxAttempts = r2.a;
-    if (r2.c !== null && (oldest === null || r2.c < oldest)) oldest = r2.c;
+    const r3 = db.prepare(`SELECT MAX(attempts) AS a, MIN(created_at) AS c FROM ${t2}`).get();
+    if (r3.a !== null && r3.a > maxAttempts) maxAttempts = r3.a;
+    if (r3.c !== null && (oldest === null || r3.c < oldest)) oldest = r3.c;
   }
   return {
     promotions,
@@ -1918,9 +1919,9 @@ function setCandidateStatus(db, promptHash, status, destination) {
 }
 function getCandidate(db, promptHash) {
   ensureRuleCandidatesTable(db);
-  const r2 = db.prepare("SELECT * FROM rule_candidates WHERE prompt_hash = ?").get(promptHash);
-  if (!r2) return null;
-  return { ...r2, payload: safeParse(r2.payload_json) };
+  const r3 = db.prepare("SELECT * FROM rule_candidates WHERE prompt_hash = ?").get(promptHash);
+  if (!r3) return null;
+  return { ...r3, payload: safeParse(r3.payload_json) };
 }
 function safeParse(raw) {
   try {
@@ -2138,11 +2139,11 @@ function getActiveEmbedModel() {
 }
 function loadEmbedSettings() {
   try {
-    const r2 = getConfig().memory?.recall;
+    const r3 = getConfig().memory?.recall;
     return {
-      enabled: r2?.embedEnabled ?? true,
-      endpoint: r2?.embedEndpoint,
-      model: r2?.embedModel
+      enabled: r3?.embedEnabled ?? true,
+      endpoint: r3?.embedEndpoint,
+      model: r3?.embedModel
     };
   } catch {
     return { enabled: true };
@@ -2416,13 +2417,13 @@ async function runEmbedSweep(db, cfg, opts = {}) {
         break;
       }
       const units = [];
-      for (const r2 of rows) {
+      for (const r3 of rows) {
         if (cfg.chunked) {
-          const parts = chunkForEmbedding(r2.text);
+          const parts = chunkForEmbedding(r3.text);
           if (parts.length === 0) continue;
-          parts.forEach((text18, chunkIx) => units.push({ id: r2.id, chunkIx, text: text18 }));
+          parts.forEach((text18, chunkIx) => units.push({ id: r3.id, chunkIx, text: text18 }));
         } else {
-          units.push({ id: r2.id, chunkIx: 0, text: r2.text });
+          units.push({ id: r3.id, chunkIx: 0, text: r3.text });
         }
       }
       const vecs = await embedBatch(units.map((u2) => u2.text));
@@ -2541,6 +2542,7 @@ __export(memory_db_exports, {
   pruneToolCostEvents: () => pruneToolCostEvents,
   recordRecallHits: () => recordRecallHits,
   recordTelemetry: () => recordTelemetry,
+  releaseMetaLease: () => releaseMetaLease,
   removePendingSync: () => removePendingSync,
   sanitizeFts5Query: () => sanitizeFts5Query,
   sanitizeFts5QueryOr: () => sanitizeFts5QueryOr,
@@ -2549,6 +2551,7 @@ __export(memory_db_exports, {
   searchObservations: () => searchObservations,
   setLastProcessedLine: () => setLastProcessedLine,
   setMemoryMeta: () => setMemoryMeta,
+  tryAcquireMetaLease: () => tryAcquireMetaLease,
   upsertObservationEmbedding: () => upsertObservationEmbedding,
   usageWarmupElapsed: () => usageWarmupElapsed
 });
@@ -3054,6 +3057,15 @@ function initMemorySchema(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_sc_session ON session_costs(session_id);
   `);
+  const costCols = db.prepare(`PRAGMA table_info(session_costs)`).all();
+  const addCostCol = (name, ddl) => {
+    if (!costCols.some((c2) => c2.name === name)) db.exec(`ALTER TABLE session_costs ADD COLUMN ${ddl}`);
+  };
+  addCostCol("cost_status", `cost_status TEXT NOT NULL DEFAULT 'unknown'`);
+  addCostCol("unpriced_models", `unpriced_models TEXT NOT NULL DEFAULT ''`);
+  addCostCol("priced_responses", `priced_responses INTEGER NOT NULL DEFAULT 0`);
+  addCostCol("unpriced_responses", `unpriced_responses INTEGER NOT NULL DEFAULT 0`);
+  addCostCol("pricing_version", `pricing_version INTEGER NOT NULL DEFAULT 0`);
   db.exec(`
     CREATE TABLE IF NOT EXISTS feature_costs (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -3483,6 +3495,18 @@ function getMemoryMeta(db, key) {
 function setMemoryMeta(db, key, value) {
   db.prepare("INSERT OR REPLACE INTO memory_meta (key, value) VALUES (?, ?)").run(key, value);
 }
+function tryAcquireMetaLease(db, key, ttlSec, nowSec = Math.floor(Date.now() / 1e3)) {
+  const r3 = db.prepare(
+    `INSERT INTO memory_meta (key, value) VALUES (?, ?)
+       ON CONFLICT(key) DO UPDATE SET value = excluded.value
+       WHERE memory_meta.value = ''
+          OR CAST(substr(memory_meta.value, instr(memory_meta.value, ':') + 1) AS INTEGER) <= ?`
+  ).run(key, `${process.pid}:${nowSec + ttlSec}`, nowSec);
+  return Number(r3.changes) === 1;
+}
+function releaseMetaLease(db, key) {
+  db.prepare(`UPDATE memory_meta SET value = '' WHERE key = ? AND value LIKE ?`).run(key, `${process.pid}:%`);
+}
 function upsertObservationEmbedding(db, observationId, vec, modelId, dim) {
   db.prepare(
     `INSERT OR REPLACE INTO observation_embeddings (observation_id, model_id, dim, vec, created_at)
@@ -3524,7 +3548,7 @@ async function embedMissingObservations(db, opts = {}) {
                    )
                  ORDER BY o.id LIMIT ?`
         ).all(cursor, batchSize);
-        return rows.map((r2) => ({ id: r2.id, text: observationEmbedText(r2.title, r2.detail) }));
+        return rows.map((r3) => ({ id: r3.id, text: observationEmbedText(r3.title, r3.detail) }));
       }
     },
     opts
@@ -3612,9 +3636,9 @@ function rescueLearningFromStalePayloads(db, stale) {
         rescued++;
       }
       const revocations = Array.isArray(payload.rule_revocations) ? payload.rule_revocations : [];
-      for (const r2 of revocations) {
-        if (typeof r2?.prompt_hash === "string") {
-          enqueueTeamRevocation(db, r2.prompt_hash);
+      for (const r3 of revocations) {
+        if (typeof r3?.prompt_hash === "string") {
+          enqueueTeamRevocation(db, r3.prompt_hash);
           rescued++;
         }
       }
@@ -4351,7 +4375,7 @@ var init_memory_db = __esm({
     init_rule_candidate_store();
     init_hook_failure_signal();
     init_memory_embed_sweep();
-    MEMORY_SCHEMA_VERSION = 1;
+    MEMORY_SCHEMA_VERSION = 2;
     TOOL_COST_EVENTS_RETENTION_DAYS = 90;
     MAX_DRAFT_TEXT_LEN = 16384;
     FUNNEL_EVENT_OUTBOX_CAP = 2e4;
@@ -5831,7 +5855,7 @@ var init_install_commands = __esm({
 });
 
 // src/lib/hook-timeouts.ts
-var HOOK_TIMEOUTS;
+var HOOK_TIMEOUTS, BACKGROUND_HOOKS;
 var init_hook_timeouts = __esm({
   "src/lib/hook-timeouts.ts"() {
     "use strict";
@@ -5865,6 +5889,43 @@ var init_hook_timeouts = __esm({
       // always fails open on its own terms before the platform kills it.
       "memory-recall": 10
     };
+    BACKGROUND_HOOKS = /* @__PURE__ */ new Set(["session-end"]);
+  }
+});
+
+// src/lib/hook-registry.ts
+function getExpectedHookFiles() {
+  return REGISTERED_HOOKS.map((name) => `${name}.js`);
+}
+var REGISTERED_HOOKS, DECISION_HOOKS;
+var init_hook_registry = __esm({
+  "src/lib/hook-registry.ts"() {
+    "use strict";
+    REGISTERED_HOOKS = [
+      "auto-learning-pipeline",
+      "classify-failure",
+      "cost-tracker",
+      "fix-detector",
+      "incident-pipeline",
+      "intent-suggester",
+      "memory-recall",
+      "post-edit-context",
+      "post-tool-use",
+      "pre-compact",
+      // P-E-019 (1.12.0): security-gate + pre-delete-check are kept registered
+      // for back-compat (operator settings.json may still reference them
+      // individually), but new installs emit only `pre-tool-use-gate` —
+      // the consolidated single-spawn PreToolUse hook.
+      "pre-delete-check",
+      "pre-tool-use-gate",
+      "quality-event",
+      "rule-enforcement-pipeline",
+      "security-gate",
+      "session-end",
+      "session-start",
+      "user-prompt"
+    ];
+    DECISION_HOOKS = ["pre-delete-check", "pre-tool-use-gate", "security-gate"];
   }
 });
 
@@ -6583,13 +6644,13 @@ var init_package_detector = __esm({
 // src/detect/framework-detector.ts
 function matchRule(rules, language, kind, deps) {
   let best = null;
-  for (const r2 of rules) {
-    if (r2.language !== language) continue;
-    if (r2.kind !== kind) continue;
-    if (!deps.has(r2.keyword.toLowerCase())) continue;
-    const pr = r2.priority ?? 0;
+  for (const r3 of rules) {
+    if (r3.language !== language) continue;
+    if (r3.kind !== kind) continue;
+    if (!deps.has(r3.keyword.toLowerCase())) continue;
+    const pr = r3.priority ?? 0;
     if (!best || pr > best.priority) {
-      best = { value: r2.value, priority: pr };
+      best = { value: r3.value, priority: pr };
     }
   }
   return best;
@@ -15121,12 +15182,12 @@ async function introspectAsync(detection, projectRoot) {
   }
   return out;
 }
-function serializeAdapterBlock(r2) {
-  const block = { ...r2.conventions };
-  if (Object.keys(r2._provenance).length > 0) {
-    block._provenance = r2._provenance;
+function serializeAdapterBlock(r3) {
+  const block = { ...r3.conventions };
+  if (Object.keys(r3._provenance).length > 0) {
+    block._provenance = r3._provenance;
   }
-  block._confidence = r2.confidence;
+  block._confidence = r3.confidence;
   return block;
 }
 var FIRST_PARTY_ADAPTERS;
@@ -16058,7 +16119,7 @@ var init_dist2 = __esm({
       }
     };
     k2 = (s) => {
-      const { cursor: n, options: t2, style: i } = s, r2 = s.maxItems ?? Number.POSITIVE_INFINITY, c2 = Math.max(process.stdout.rows - 4, 0), o = Math.min(c2, Math.max(r2, 5));
+      const { cursor: n, options: t2, style: i } = s, r3 = s.maxItems ?? Number.POSITIVE_INFINITY, c2 = Math.max(process.stdout.rows - 4, 0), o = Math.min(c2, Math.max(r3, 5));
       let l2 = 0;
       n >= l2 + o - 3 ? l2 = Math.max(Math.min(n - o + 3, t2.length - o), 0) : n < l2 + 2 && (l2 = Math.max(n - 2, 0));
       const $2 = o < t2.length && l2 > 0, d2 = o < t2.length && l2 + o < t2.length;
@@ -16114,12 +16175,12 @@ ${import_picocolors2.default.cyan(m2)}
       return new fD({ active: n, inactive: t2, initialValue: s.initialValue ?? true, render() {
         const i = `${import_picocolors2.default.gray(a)}
 ${y2(this.state)}  ${s.message}
-`, r2 = this.value ? n : t2;
+`, r3 = this.value ? n : t2;
         switch (this.state) {
           case "submit":
-            return `${i}${import_picocolors2.default.gray(a)}  ${import_picocolors2.default.dim(r2)}`;
+            return `${i}${import_picocolors2.default.gray(a)}  ${import_picocolors2.default.dim(r3)}`;
           case "cancel":
-            return `${i}${import_picocolors2.default.gray(a)}  ${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r2))}
+            return `${i}${import_picocolors2.default.gray(a)}  ${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r3))}
 ${import_picocolors2.default.gray(a)}`;
           default:
             return `${i}${import_picocolors2.default.cyan(a)}  ${this.value ? `${import_picocolors2.default.green(j2)} ${n}` : `${import_picocolors2.default.dim(R2)} ${import_picocolors2.default.dim(n)}`} ${import_picocolors2.default.dim("/")} ${this.value ? `${import_picocolors2.default.dim(R2)} ${import_picocolors2.default.dim(t2)}` : `${import_picocolors2.default.green(j2)} ${t2}`}
@@ -16130,16 +16191,16 @@ ${import_picocolors2.default.cyan(m2)}
     };
     de = (s) => {
       const n = (t2, i) => {
-        const r2 = t2.label ?? String(t2.value);
+        const r3 = t2.label ?? String(t2.value);
         switch (i) {
           case "selected":
-            return `${import_picocolors2.default.dim(r2)}`;
+            return `${import_picocolors2.default.dim(r3)}`;
           case "active":
-            return `${import_picocolors2.default.green(j2)} ${r2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}`;
+            return `${import_picocolors2.default.green(j2)} ${r3} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}`;
           case "cancelled":
-            return `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r2))}`;
+            return `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r3))}`;
           default:
-            return `${import_picocolors2.default.dim(R2)} ${import_picocolors2.default.dim(r2)}`;
+            return `${import_picocolors2.default.dim(R2)} ${import_picocolors2.default.dim(r3)}`;
         }
       };
       return new jD({ options: s.options, initialValue: s.initialValue, render() {
@@ -16153,7 +16214,7 @@ ${y2(this.state)}  ${s.message}
             return `${t2}${import_picocolors2.default.gray(a)}  ${n(this.options[this.cursor], "cancelled")}
 ${import_picocolors2.default.gray(a)}`;
           default:
-            return `${t2}${import_picocolors2.default.cyan(a)}  ${k2({ cursor: this.cursor, options: this.options, maxItems: s.maxItems, style: (i, r2) => n(i, r2 ? "active" : "inactive") }).join(`
+            return `${t2}${import_picocolors2.default.cyan(a)}  ${k2({ cursor: this.cursor, options: this.options, maxItems: s.maxItems, style: (i, r3) => n(i, r3 ? "active" : "inactive") }).join(`
 ${import_picocolors2.default.cyan(a)}  `)}
 ${import_picocolors2.default.cyan(m2)}
 `;
@@ -16162,8 +16223,8 @@ ${import_picocolors2.default.cyan(m2)}
     };
     he = (s) => {
       const n = (t2, i = "inactive") => {
-        const r2 = t2.label ?? String(t2.value);
-        return i === "selected" ? `${import_picocolors2.default.dim(r2)}` : i === "cancelled" ? `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r2))}` : i === "active" ? `${import_picocolors2.default.bgCyan(import_picocolors2.default.gray(` ${t2.value} `))} ${r2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : `${import_picocolors2.default.gray(import_picocolors2.default.bgWhite(import_picocolors2.default.inverse(` ${t2.value} `)))} ${r2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}`;
+        const r3 = t2.label ?? String(t2.value);
+        return i === "selected" ? `${import_picocolors2.default.dim(r3)}` : i === "cancelled" ? `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r3))}` : i === "active" ? `${import_picocolors2.default.bgCyan(import_picocolors2.default.gray(` ${t2.value} `))} ${r3} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : `${import_picocolors2.default.gray(import_picocolors2.default.bgWhite(import_picocolors2.default.inverse(` ${t2.value} `)))} ${r3} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}`;
       };
       return new OD({ options: s.options, initialValue: s.initialValue, render() {
         const t2 = `${import_picocolors2.default.gray(a)}
@@ -16176,7 +16237,7 @@ ${y2(this.state)}  ${s.message}
             return `${t2}${import_picocolors2.default.gray(a)}  ${n(this.options[0], "cancelled")}
 ${import_picocolors2.default.gray(a)}`;
           default:
-            return `${t2}${import_picocolors2.default.cyan(a)}  ${this.options.map((i, r2) => n(i, r2 === this.cursor ? "active" : "inactive")).join(`
+            return `${t2}${import_picocolors2.default.cyan(a)}  ${this.options.map((i, r3) => n(i, r3 === this.cursor ? "active" : "inactive")).join(`
 ${import_picocolors2.default.cyan(a)}  `)}
 ${import_picocolors2.default.cyan(m2)}
 `;
@@ -16185,8 +16246,8 @@ ${import_picocolors2.default.cyan(m2)}
     };
     pe = (s) => {
       const n = (t2, i) => {
-        const r2 = t2.label ?? String(t2.value);
-        return i === "active" ? `${import_picocolors2.default.cyan(V2)} ${r2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : i === "selected" ? `${import_picocolors2.default.green(M2)} ${import_picocolors2.default.dim(r2)}` : i === "cancelled" ? `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r2))}` : i === "active-selected" ? `${import_picocolors2.default.green(M2)} ${r2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : i === "submitted" ? `${import_picocolors2.default.dim(r2)}` : `${import_picocolors2.default.dim(G2)} ${import_picocolors2.default.dim(r2)}`;
+        const r3 = t2.label ?? String(t2.value);
+        return i === "active" ? `${import_picocolors2.default.cyan(V2)} ${r3} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : i === "selected" ? `${import_picocolors2.default.green(M2)} ${import_picocolors2.default.dim(r3)}` : i === "cancelled" ? `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(r3))}` : i === "active-selected" ? `${import_picocolors2.default.green(M2)} ${r3} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : i === "submitted" ? `${import_picocolors2.default.dim(r3)}` : `${import_picocolors2.default.dim(G2)} ${import_picocolors2.default.dim(r3)}`;
       };
       return new wD({ options: s.options, initialValues: s.initialValues, required: s.required ?? true, cursorAt: s.cursorAt, validate(t2) {
         if (this.required && t2.length === 0) return `Please select at least one option.
@@ -16194,25 +16255,25 @@ ${import_picocolors2.default.reset(import_picocolors2.default.dim(`Press ${impor
       }, render() {
         const t2 = `${import_picocolors2.default.gray(a)}
 ${y2(this.state)}  ${s.message}
-`, i = (r2, c2) => {
-          const o = this.value.includes(r2.value);
-          return c2 && o ? n(r2, "active-selected") : o ? n(r2, "selected") : n(r2, c2 ? "active" : "inactive");
+`, i = (r3, c2) => {
+          const o = this.value.includes(r3.value);
+          return c2 && o ? n(r3, "active-selected") : o ? n(r3, "selected") : n(r3, c2 ? "active" : "inactive");
         };
         switch (this.state) {
           case "submit":
-            return `${t2}${import_picocolors2.default.gray(a)}  ${this.options.filter(({ value: r2 }) => this.value.includes(r2)).map((r2) => n(r2, "submitted")).join(import_picocolors2.default.dim(", ")) || import_picocolors2.default.dim("none")}`;
+            return `${t2}${import_picocolors2.default.gray(a)}  ${this.options.filter(({ value: r3 }) => this.value.includes(r3)).map((r3) => n(r3, "submitted")).join(import_picocolors2.default.dim(", ")) || import_picocolors2.default.dim("none")}`;
           case "cancel": {
-            const r2 = this.options.filter(({ value: c2 }) => this.value.includes(c2)).map((c2) => n(c2, "cancelled")).join(import_picocolors2.default.dim(", "));
-            return `${t2}${import_picocolors2.default.gray(a)}  ${r2.trim() ? `${r2}
+            const r3 = this.options.filter(({ value: c2 }) => this.value.includes(c2)).map((c2) => n(c2, "cancelled")).join(import_picocolors2.default.dim(", "));
+            return `${t2}${import_picocolors2.default.gray(a)}  ${r3.trim() ? `${r3}
 ${import_picocolors2.default.gray(a)}` : ""}`;
           }
           case "error": {
-            const r2 = this.error.split(`
+            const r3 = this.error.split(`
 `).map((c2, o) => o === 0 ? `${import_picocolors2.default.yellow(m2)}  ${import_picocolors2.default.yellow(c2)}` : `   ${c2}`).join(`
 `);
             return `${t2 + import_picocolors2.default.yellow(a)}  ${k2({ options: this.options, cursor: this.cursor, maxItems: s.maxItems, style: i }).join(`
 ${import_picocolors2.default.yellow(a)}  `)}
-${r2}
+${r3}
 `;
           }
           default:
@@ -16224,8 +16285,8 @@ ${import_picocolors2.default.cyan(m2)}
       } }).prompt();
     };
     ge = (s) => {
-      const n = (t2, i, r2 = []) => {
-        const c2 = t2.label ?? String(t2.value), o = typeof t2.group == "string", l2 = o && (r2[r2.indexOf(t2) + 1] ?? { group: true }), $2 = o && l2.group === true, d2 = o ? `${$2 ? m2 : a} ` : "";
+      const n = (t2, i, r3 = []) => {
+        const c2 = t2.label ?? String(t2.value), o = typeof t2.group == "string", l2 = o && (r3[r3.indexOf(t2) + 1] ?? { group: true }), $2 = o && l2.group === true, d2 = o ? `${$2 ? m2 : a} ` : "";
         return i === "active" ? `${import_picocolors2.default.dim(d2)}${import_picocolors2.default.cyan(V2)} ${c2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : i === "group-active" ? `${d2}${import_picocolors2.default.cyan(V2)} ${import_picocolors2.default.dim(c2)}` : i === "group-active-selected" ? `${d2}${import_picocolors2.default.green(M2)} ${import_picocolors2.default.dim(c2)}` : i === "selected" ? `${import_picocolors2.default.dim(d2)}${import_picocolors2.default.green(M2)} ${import_picocolors2.default.dim(c2)}` : i === "cancelled" ? `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(c2))}` : i === "active-selected" ? `${import_picocolors2.default.dim(d2)}${import_picocolors2.default.green(M2)} ${c2} ${t2.hint ? import_picocolors2.default.dim(`(${t2.hint})`) : ""}` : i === "submitted" ? `${import_picocolors2.default.dim(c2)}` : `${import_picocolors2.default.dim(d2)}${import_picocolors2.default.dim(G2)} ${import_picocolors2.default.dim(c2)}`;
       };
       return new dD({ options: s.options, initialValues: s.initialValues, required: s.required ?? true, cursorAt: s.cursorAt, validate(t2) {
@@ -16239,25 +16300,25 @@ ${y2(this.state)}  ${s.message}
           case "submit":
             return `${t2}${import_picocolors2.default.gray(a)}  ${this.options.filter(({ value: i }) => this.value.includes(i)).map((i) => n(i, "submitted")).join(import_picocolors2.default.dim(", "))}`;
           case "cancel": {
-            const i = this.options.filter(({ value: r2 }) => this.value.includes(r2)).map((r2) => n(r2, "cancelled")).join(import_picocolors2.default.dim(", "));
+            const i = this.options.filter(({ value: r3 }) => this.value.includes(r3)).map((r3) => n(r3, "cancelled")).join(import_picocolors2.default.dim(", "));
             return `${t2}${import_picocolors2.default.gray(a)}  ${i.trim() ? `${i}
 ${import_picocolors2.default.gray(a)}` : ""}`;
           }
           case "error": {
             const i = this.error.split(`
-`).map((r2, c2) => c2 === 0 ? `${import_picocolors2.default.yellow(m2)}  ${import_picocolors2.default.yellow(r2)}` : `   ${r2}`).join(`
+`).map((r3, c2) => c2 === 0 ? `${import_picocolors2.default.yellow(m2)}  ${import_picocolors2.default.yellow(r3)}` : `   ${r3}`).join(`
 `);
-            return `${t2}${import_picocolors2.default.yellow(a)}  ${this.options.map((r2, c2, o) => {
-              const l2 = this.value.includes(r2.value) || r2.group === true && this.isGroupSelected(`${r2.value}`), $2 = c2 === this.cursor;
-              return !$2 && typeof r2.group == "string" && this.options[this.cursor].value === r2.group ? n(r2, l2 ? "group-active-selected" : "group-active", o) : $2 && l2 ? n(r2, "active-selected", o) : l2 ? n(r2, "selected", o) : n(r2, $2 ? "active" : "inactive", o);
+            return `${t2}${import_picocolors2.default.yellow(a)}  ${this.options.map((r3, c2, o) => {
+              const l2 = this.value.includes(r3.value) || r3.group === true && this.isGroupSelected(`${r3.value}`), $2 = c2 === this.cursor;
+              return !$2 && typeof r3.group == "string" && this.options[this.cursor].value === r3.group ? n(r3, l2 ? "group-active-selected" : "group-active", o) : $2 && l2 ? n(r3, "active-selected", o) : l2 ? n(r3, "selected", o) : n(r3, $2 ? "active" : "inactive", o);
             }).join(`
 ${import_picocolors2.default.yellow(a)}  `)}
 ${i}
 `;
           }
           default:
-            return `${t2}${import_picocolors2.default.cyan(a)}  ${this.options.map((i, r2, c2) => {
-              const o = this.value.includes(i.value) || i.group === true && this.isGroupSelected(`${i.value}`), l2 = r2 === this.cursor;
+            return `${t2}${import_picocolors2.default.cyan(a)}  ${this.options.map((i, r3, c2) => {
+              const o = this.value.includes(i.value) || i.group === true && this.isGroupSelected(`${i.value}`), l2 = r3 === this.cursor;
               return !l2 && typeof i.group == "string" && this.options[this.cursor].value === i.group ? n(i, o ? "group-active-selected" : "group-active", c2) : l2 && o ? n(i, "active-selected", c2) : o ? n(i, "selected", c2) : n(i, l2 ? "active" : "inactive", c2);
             }).join(`
 ${import_picocolors2.default.cyan(a)}  `)}
@@ -16270,15 +16331,15 @@ ${import_picocolors2.default.cyan(m2)}
       const t2 = `
 ${s}
 `.split(`
-`), i = T2(n).length, r2 = Math.max(t2.reduce((o, l2) => {
+`), i = T2(n).length, r3 = Math.max(t2.reduce((o, l2) => {
         const $2 = T2(l2);
         return $2.length > o ? $2.length : o;
-      }, 0), i) + 2, c2 = t2.map((o) => `${import_picocolors2.default.gray(a)}  ${import_picocolors2.default.dim(o)}${" ".repeat(r2 - T2(o).length)}${import_picocolors2.default.gray(a)}`).join(`
+      }, 0), i) + 2, c2 = t2.map((o) => `${import_picocolors2.default.gray(a)}  ${import_picocolors2.default.dim(o)}${" ".repeat(r3 - T2(o).length)}${import_picocolors2.default.gray(a)}`).join(`
 `);
       process.stdout.write(`${import_picocolors2.default.gray(a)}
-${import_picocolors2.default.green(S2)}  ${import_picocolors2.default.reset(n)} ${import_picocolors2.default.gray(N2.repeat(Math.max(r2 - i - 1, 1)) + re)}
+${import_picocolors2.default.green(S2)}  ${import_picocolors2.default.reset(n)} ${import_picocolors2.default.gray(N2.repeat(Math.max(r3 - i - 1, 1)) + re)}
 ${c2}
-${import_picocolors2.default.gray(ie + N2.repeat(r2 + 2) + ne)}
+${import_picocolors2.default.gray(ie + N2.repeat(r3 + 2) + ne)}
 `);
     };
     ve = (s = "") => {
@@ -16299,9 +16360,9 @@ ${import_picocolors2.default.gray(m2)}  ${s}
     v2 = { message: (s = "", { symbol: n = import_picocolors2.default.gray(a) } = {}) => {
       const t2 = [`${import_picocolors2.default.gray(a)}`];
       if (s) {
-        const [i, ...r2] = s.split(`
+        const [i, ...r3] = s.split(`
 `);
-        t2.push(`${n}  ${i}`, ...r2.map((c2) => `${import_picocolors2.default.gray(a)}  ${c2}`));
+        t2.push(`${n}  ${i}`, ...r3.map((c2) => `${import_picocolors2.default.gray(a)}  ${c2}`));
       }
       process.stdout.write(`${t2.join(`
 `)}
@@ -16321,7 +16382,7 @@ ${import_picocolors2.default.gray(m2)}  ${s}
     } };
     L2 = () => {
       const s = E ? ["\u25D2", "\u25D0", "\u25D3", "\u25D1"] : ["\u2022", "o", "O", "0"], n = E ? 80 : 120, t2 = process.env.CI === "true";
-      let i, r2, c2 = false, o = "", l2;
+      let i, r3, c2 = false, o = "", l2;
       const $2 = (h2) => {
         const g2 = h2 > 1 ? "Something went wrong" : "Canceled";
         c2 && P2(g2, h2);
@@ -16340,14 +16401,14 @@ ${import_picocolors2.default.gray(m2)}  ${s}
         c2 = true, i = cD(), o = x2(h2), process.stdout.write(`${import_picocolors2.default.gray(a)}
 `);
         let g2 = 0, f2 = 0;
-        b2(), r2 = setInterval(() => {
+        b2(), r3 = setInterval(() => {
           if (t2 && o === l2) return;
           I2(), l2 = o;
           const W2 = import_picocolors2.default.magenta(s[g2]), _2 = t2 ? "..." : ".".repeat(Math.floor(f2)).slice(0, 3);
           process.stdout.write(`${W2}  ${o}${_2}`), g2 = g2 + 1 < s.length ? g2 + 1 : 0, f2 = f2 < s.length ? f2 + 0.125 : 0;
         }, n);
       }, P2 = (h2 = "", g2 = 0) => {
-        c2 = false, clearInterval(r2), I2();
+        c2 = false, clearInterval(r3), I2();
         const f2 = g2 === 0 ? import_picocolors2.default.green(S2) : g2 === 1 ? import_picocolors2.default.red(A2) : import_picocolors2.default.red(B);
         o = x2(h2 ?? o), process.stdout.write(`${f2}  ${o}
 `), C(), i();
@@ -16358,15 +16419,15 @@ ${import_picocolors2.default.gray(m2)}  ${s}
     };
     be = async (s, n) => {
       const t2 = {}, i = Object.keys(s);
-      for (const r2 of i) {
-        const c2 = s[r2], o = await c2({ results: t2 })?.catch((l2) => {
+      for (const r3 of i) {
+        const c2 = s[r3], o = await c2({ results: t2 })?.catch((l2) => {
           throw l2;
         });
         if (typeof n?.onCancel == "function" && BD(o)) {
-          t2[r2] = "canceled", n.onCancel({ results: t2 });
+          t2[r3] = "canceled", n.onCancel({ results: t2 });
           continue;
         }
-        t2[r2] = o;
+        t2[r3] = o;
       }
       return t2;
     };
@@ -16901,10 +16962,10 @@ function validateWrittenConfig(configPath, projectRoot, checkPaths = true) {
         }
         const mRoots = cfg.paths.monorepo_roots;
         if (Array.isArray(mRoots)) {
-          for (const r2 of mRoots) {
-            if (typeof r2 !== "string" || r2 === ".") continue;
-            if (!existsSync21(resolve12(projectRoot, r2))) {
-              return `paths.monorepo_roots '${r2}' does not exist on disk`;
+          for (const r3 of mRoots) {
+            if (typeof r3 !== "string" || r3 === ".") continue;
+            if (!existsSync21(resolve12(projectRoot, r3))) {
+              return `paths.monorepo_roots '${r3}' does not exist on disk`;
             }
           }
         }
@@ -17077,6 +17138,22 @@ fi
 MASSU_VERSION="$1"
 shift
 MASSU_CLI="\${HOME}/.massu/runtime/\${MASSU_VERSION}/node_modules/@massu/core/dist/cli.js"
+# A DECIDING hook's exit code is its verdict: 0 allows, 2 denies. If the launch itself fails
+# (a runtime that cannot load exits 1), Claude Code would RUN the call, so for these hooks
+# any other status becomes a deny. Every other subcommand keeps the exec path below.
+if [ "\${1:-}" = hook-runner ]; then
+  case "\${2:-}" in
+    ${DECISION_HOOKS.join("|")})
+      if [ -f "$MASSU_CLI" ]; then node "$MASSU_CLI" "$@"; else npx -y "@massu/core@\${MASSU_VERSION}" "$@"; fi
+      st=$?
+      if [ "$st" -ne 0 ] && [ "$st" -ne 2 ]; then
+        echo "MASSU SECURITY GATE \u2014 BLOCKED: the $2 hook ended without a verdict (exit $st)" >&2
+        exit 2
+      fi
+      exit "$st"
+      ;;
+  esac
+fi
 if [ -f "$MASSU_CLI" ]; then
   exec node "$MASSU_CLI" "$@"
 fi
@@ -17121,13 +17198,19 @@ function hookCmd(version, hookName, shim) {
 function getHookTimeout(name) {
   return HOOK_TIMEOUTS[name] ?? 5;
 }
+function hookEntry(version, name, shim) {
+  const entry = { type: "command", command: hookCmd(version, name, shim), timeout: getHookTimeout(name) };
+  if (BACKGROUND_HOOKS.has(name)) entry.async = true;
+  if (DECISION_HOOKS.includes(name)) entry.onFailure = "block";
+  return entry;
+}
 function buildHooksConfig(_hooksDir, shim = resolveMassuShim()) {
   const version = getInstallerVersion();
   return {
     SessionStart: [
       {
         hooks: [
-          { type: "command", command: hookCmd(version, "session-start", shim), timeout: getHookTimeout("session-start") }
+          hookEntry(version, "session-start", shim)
         ]
       }
     ],
@@ -17142,26 +17225,26 @@ function buildHooksConfig(_hooksDir, shim = resolveMassuShim()) {
       {
         matcher: "Bash|Write|Edit",
         hooks: [
-          { type: "command", command: hookCmd(version, "pre-tool-use-gate", shim), timeout: getHookTimeout("pre-tool-use-gate") }
+          hookEntry(version, "pre-tool-use-gate", shim)
         ]
       }
     ],
     PostToolUse: [
       {
         hooks: [
-          { type: "command", command: hookCmd(version, "post-tool-use", shim), timeout: getHookTimeout("post-tool-use") },
-          { type: "command", command: hookCmd(version, "quality-event", shim), timeout: getHookTimeout("quality-event") },
-          { type: "command", command: hookCmd(version, "cost-tracker", shim), timeout: getHookTimeout("cost-tracker") }
+          hookEntry(version, "post-tool-use", shim),
+          hookEntry(version, "quality-event", shim),
+          hookEntry(version, "cost-tracker", shim)
         ]
       },
       {
         matcher: "Edit|Write",
         hooks: [
-          { type: "command", command: hookCmd(version, "post-edit-context", shim), timeout: getHookTimeout("post-edit-context") },
+          hookEntry(version, "post-edit-context", shim),
           // Auto-learning pipeline — classifies failures and detects fixes on
           // file changes. See Phase 5-6 of the autodetect plan.
-          { type: "command", command: hookCmd(version, "fix-detector", shim), timeout: getHookTimeout("fix-detector") },
-          { type: "command", command: hookCmd(version, "classify-failure", shim), timeout: getHookTimeout("classify-failure") }
+          hookEntry(version, "fix-detector", shim),
+          hookEntry(version, "classify-failure", shim)
         ]
       },
       {
@@ -17169,35 +17252,35 @@ function buildHooksConfig(_hooksDir, shim = resolveMassuShim()) {
         hooks: [
           // Incident + rule enforcement pipelines fire on Write-only (incidents
           // are authored as .md files; rules are enforced after new-file drops).
-          { type: "command", command: hookCmd(version, "incident-pipeline", shim), timeout: getHookTimeout("incident-pipeline") },
-          { type: "command", command: hookCmd(version, "rule-enforcement-pipeline", shim), timeout: getHookTimeout("rule-enforcement-pipeline") }
+          hookEntry(version, "incident-pipeline", shim),
+          hookEntry(version, "rule-enforcement-pipeline", shim)
         ]
       }
     ],
     Stop: [
       {
         hooks: [
-          { type: "command", command: hookCmd(version, "session-end", shim), timeout: getHookTimeout("session-end") },
+          hookEntry(version, "session-end", shim),
           // Session-end auto-learning aggregation (failure-class roll-up).
-          { type: "command", command: hookCmd(version, "auto-learning-pipeline", shim), timeout: getHookTimeout("auto-learning-pipeline") }
+          hookEntry(version, "auto-learning-pipeline", shim)
         ]
       }
     ],
     PreCompact: [
       {
         hooks: [
-          { type: "command", command: hookCmd(version, "pre-compact", shim), timeout: getHookTimeout("pre-compact") }
+          hookEntry(version, "pre-compact", shim)
         ]
       }
     ],
     UserPromptSubmit: [
       {
         hooks: [
-          { type: "command", command: hookCmd(version, "user-prompt", shim), timeout: getHookTimeout("user-prompt") },
-          { type: "command", command: hookCmd(version, "intent-suggester", shim), timeout: getHookTimeout("intent-suggester") },
+          hookEntry(version, "user-prompt", shim),
+          hookEntry(version, "intent-suggester", shim),
           // plan-living-memory-slice-1 P3-002: automatic relevant-recall.
           // Injects a compact "🧠 Relevant memory" block; fails open (empty).
-          { type: "command", command: hookCmd(version, "memory-recall", shim), timeout: getHookTimeout("memory-recall") }
+          hookEntry(version, "memory-recall", shim)
         ]
       }
     ]
@@ -17675,6 +17758,7 @@ var init_init = __esm({
     init_settings_local();
     init_memory_path();
     init_hook_timeouts();
+    init_hook_registry();
     init_detect();
     init_drift();
     __filename2 = fileURLToPath3(import.meta.url);
@@ -18261,41 +18345,6 @@ var init_license = __esm({
   }
 });
 
-// src/lib/hook-registry.ts
-function getExpectedHookFiles() {
-  return REGISTERED_HOOKS.map((name) => `${name}.js`);
-}
-var REGISTERED_HOOKS;
-var init_hook_registry = __esm({
-  "src/lib/hook-registry.ts"() {
-    "use strict";
-    REGISTERED_HOOKS = [
-      "auto-learning-pipeline",
-      "classify-failure",
-      "cost-tracker",
-      "fix-detector",
-      "incident-pipeline",
-      "intent-suggester",
-      "memory-recall",
-      "post-edit-context",
-      "post-tool-use",
-      "pre-compact",
-      // P-E-019 (1.12.0): security-gate + pre-delete-check are kept registered
-      // for back-compat (operator settings.json may still reference them
-      // individually), but new installs emit only `pre-tool-use-gate` —
-      // the consolidated single-spawn PreToolUse hook.
-      "pre-delete-check",
-      "pre-tool-use-gate",
-      "quality-event",
-      "rule-enforcement-pipeline",
-      "security-gate",
-      "session-end",
-      "session-start",
-      "user-prompt"
-    ];
-  }
-});
-
 // src/preflight.ts
 import { existsSync as existsSync22 } from "fs";
 function assertCodegraphUsable(dbPath) {
@@ -18382,6 +18431,7 @@ var init_preflight = __esm({
 var hook_runner_exports = {};
 __export(hook_runner_exports, {
   HOOK_NAME_TO_FILE: () => HOOK_NAME_TO_FILE,
+  decisionExitCode: () => decisionExitCode,
   resolveHookFile: () => resolveHookFile,
   runHookRunner: () => runHookRunner
 });
@@ -18413,6 +18463,16 @@ function resolveHookFile(hookName) {
     `Hook file not found for "${hookName}". Searched: ${candidates.join(", ")}. This indicates a broken @massu/core install. Re-run \`npx -y @massu/core init\`.`
   );
 }
+function decisionExitCode(hookName, code) {
+  if (!DECISION_HOOKS.includes(hookName) || code === 0 || code === 2) return code;
+  process.stderr.write(
+    `MASSU SECURITY GATE \u2014 BLOCKED
+
+The ${hookName} hook ended without a verdict (exit ${code}). A gate that did not decide has not approved this call.
+`
+  );
+  return 2;
+}
 async function runHookRunner(args2) {
   const hookName = args2[0];
   if (!hookName) {
@@ -18441,11 +18501,7 @@ Recognized: ${Object.keys(HOOK_NAME_TO_FILE).join(", ")}
       env: { ...process.env, MASSU_HOOK_RUNTIME: "1" }
     });
     child.on("exit", (code, signal) => {
-      if (signal) {
-        resolvePromise({ exitCode: 128 });
-        return;
-      }
-      resolvePromise({ exitCode: code ?? 0 });
+      resolvePromise({ exitCode: decisionExitCode(hookName, signal ? 128 : code ?? 0) });
     });
     child.on("error", (err) => {
       process.stderr.write(`massu hook-runner: failed to spawn hook "${hookName}": ${err.message}
@@ -20165,7 +20221,7 @@ async function embedMissingChunks(db, opts = {}) {
                    )
                  ORDER BY c.id LIMIT ?`
         ).all(cursor, batchSize);
-        return rows.map((r2) => ({ id: r2.id, text: chunkEmbedText(r2.heading, r2.content) }));
+        return rows.map((r3) => ({ id: r3.id, text: chunkEmbedText(r3.heading, r3.content) }));
       }
     },
     opts
@@ -21285,7 +21341,7 @@ function buildIndexLines(db, memoryDir, planned, config) {
         ORDER BY o.importance DESC, o.created_at_epoch DESC
         LIMIT ?`
   ).all(config.indexMaxLines + planned.length);
-  const byPath = new Map(rows.map((r2) => [r2.rel_path.toLowerCase(), r2]));
+  const byPath = new Map(rows.map((r3) => [r3.rel_path.toLowerCase(), r3]));
   for (const p19 of planned) {
     byPath.set(p19.relPath.toLowerCase(), {
       rel_path: p19.relPath,
@@ -21294,11 +21350,11 @@ function buildIndexLines(db, memoryDir, planned, config) {
       created_at_epoch: 0
     });
   }
-  const live = [...byPath.values()].filter((r2) => !isTombstoned(memoryDir, r2.rel_path));
+  const live = [...byPath.values()].filter((r3) => !isTombstoned(memoryDir, r3.rel_path));
   const ranked = live.sort(
     (a2, b2) => b2.importance - a2.importance || b2.created_at_epoch - a2.created_at_epoch
   );
-  return ranked.slice(0, config.indexMaxLines).map((r2) => `- [${oneLine(r2.name)}](${r2.rel_path}) \u2014 learned by Massu`);
+  return ranked.slice(0, config.indexMaxLines).map((r3) => `- [${oneLine(r3.name)}](${r3.rel_path}) \u2014 learned by Massu`);
 }
 function oneLine(s) {
   return s.replace(/[\r\n]+/g, " ").slice(0, 120);
@@ -21494,14 +21550,14 @@ function memoryRestore(memoryDir, opts = {}) {
     return { exitCode: 1, output: "No backups exist yet. Nothing to restore." };
   }
   try {
-    const r2 = restoreBackup(memoryDir, { ...opts, home });
+    const r3 = restoreBackup(memoryDir, { ...opts, home });
     const lines = [
-      r2.dryRun ? `--dry-run: would restore ${r2.wouldRestore.length} file(s) from ${r2.stamp}. Nothing changed.` : `Restored ${r2.filesRestored} file(s) from ${r2.stamp}.`
+      r3.dryRun ? `--dry-run: would restore ${r3.wouldRestore.length} file(s) from ${r3.stamp}. Nothing changed.` : `Restored ${r3.filesRestored} file(s) from ${r3.stamp}.`
     ];
-    for (const f2 of r2.wouldRestore) lines.push(`  ${f2}`);
-    if (r2.presentButNotInBackup.length > 0) {
+    for (const f2 of r3.wouldRestore) lines.push(`  ${f2}`);
+    if (r3.presentButNotInBackup.length > 0) {
       lines.push("", "These files exist now but are NOT in the backup. Massu left them alone:");
-      for (const f2 of r2.presentButNotInBackup) lines.push(`  ${f2}`);
+      for (const f2 of r3.presentButNotInBackup) lines.push(`  ${f2}`);
     }
     return { exitCode: 0, output: lines.join("\n") };
   } catch (err) {
@@ -21535,8 +21591,8 @@ function loadRenderCandidates(db) {
         ORDER BY importance DESC, created_at_epoch DESC
         LIMIT ${CANDIDATE_WINDOW}`
   ).all(cfg.renderMinImportance, ...RENDERABLE_MEMORY_TYPES);
-  const reingest = rows.filter((r2) => r2.title.startsWith("[memory-file]"));
-  const kept = rows.filter((r2) => !r2.title.startsWith("[memory-file]"));
+  const reingest = rows.filter((r3) => r3.title.startsWith("[memory-file]"));
+  const kept = rows.filter((r3) => !r3.title.startsWith("[memory-file]"));
   const excluded = reingest.length ? [{ reason: EXCLUSION_MEMORY_FILE_REINGEST, count: reingest.length }] : [];
   const ledger = {
     population,
@@ -21553,13 +21609,13 @@ function loadRenderCandidates(db) {
   }
   return {
     ledger,
-    candidates: kept.map((r2) => ({
-      observationId: r2.id,
-      name: r2.title,
-      title: r2.title,
-      body: r2.detail ?? "",
-      importance: r2.importance,
-      origin: r2.origin
+    candidates: kept.map((r3) => ({
+      observationId: r3.id,
+      name: r3.title,
+      title: r3.title,
+      body: r3.detail ?? "",
+      importance: r3.importance,
+      origin: r3.origin
     }))
   };
 }
@@ -21742,8 +21798,8 @@ async function runMemoryRenderCli(sub, args2) {
         }
         if (result.refusals.length > 0) {
           lines.push("", `${result.refusals.length} memory/memories REFUSED:`);
-          for (const r2 of result.refusals) {
-            lines.push(`  ${r2.name}: ${r2.reason}${r2.detail ? ` (${r2.detail})` : ""}`);
+          for (const r3 of result.refusals) {
+            lines.push(`  ${r3.name}: ${r3.reason}${r3.detail ? ` (${r3.detail})` : ""}`);
           }
         }
         lines.push("", `Bytes written: ${result.bytesWritten} (a dry run always writes 0).`);
@@ -21765,7 +21821,7 @@ async function runMemoryRenderCli(sub, args2) {
           "",
           "Sample (first 10):"
         ];
-        for (const r2 of sampleNoise2(db, 10)) lines.push(`  [${r2.reason}] id=${r2.id} ${r2.type}: ${r2.title.slice(0, 60)}`);
+        for (const r3 of sampleNoise2(db, 10)) lines.push(`  [${r3.reason}] id=${r3.id} ${r3.type}: ${r3.title.slice(0, 60)}`);
         if (apply) {
           const result = pruneNoiseObservations2(db, { dryRun: false });
           lines.push("", `Expired ${result.expired} row(s) (CR-61: expired, NOT deleted; still asOf-queryable).`);
@@ -21859,12 +21915,12 @@ function readReposRegistry(home = homedir13()) {
   try {
     const parsed = JSON.parse(readFileSync29(p19, "utf-8"));
     if (!parsed || typeof parsed !== "object") return emptyRegistry();
-    const r2 = parsed;
-    if (!Array.isArray(r2.repos)) return emptyRegistry();
-    const repos = r2.repos.filter(
+    const r3 = parsed;
+    if (!Array.isArray(r3.repos)) return emptyRegistry();
+    const repos = r3.repos.filter(
       (e2) => !!e2 && typeof e2 === "object" && typeof e2.repo_id === "string" && typeof e2.label === "string"
     );
-    return { version: typeof r2.version === "number" ? r2.version : REPOS_REGISTRY_VERSION, repos };
+    return { version: typeof r3.version === "number" ? r3.version : REPOS_REGISTRY_VERSION, repos };
   } catch {
     return emptyRegistry();
   }
@@ -22038,7 +22094,7 @@ function acceptSharedMemory(db, recordHash, opts = {}) {
   const verdict = verifyLocalShareEnvelope(env, pinned, home);
   if (verdict.kind !== "valid") return refuse(db, recordHash, `reverify_${verdict.kind}`);
   if (!hasSignedLoadBearingKeys(env)) return refuse(db, recordHash, "unsigned_field");
-  const signed = parseRecords(env.records_json).find((r2) => r2.record_hash === recordHash);
+  const signed = parseRecords(env.records_json).find((r3) => r3.record_hash === recordHash);
   if (!signed) return refuse(db, recordHash, "not_in_signed_records");
   if (hashSharedMemoryRecord(stripHash(signed)) !== recordHash) {
     return refuse(db, recordHash, "record_hash_mismatch");
@@ -22134,20 +22190,20 @@ function listPendingSharedMemories(db, opts = {}) {
         LIMIT 500`
   ).all();
   const out = [];
-  for (const r2 of rows) {
+  for (const r3 of rows) {
     let rec = null;
     let valid = false;
     try {
-      rec = JSON.parse(r2.record_json);
-      const env = JSON.parse(r2.envelope_raw);
-      const pinned = getSharedPin(db, r2.origin_repo_id);
+      rec = JSON.parse(r3.record_json);
+      const env = JSON.parse(r3.envelope_raw);
+      const pinned = getSharedPin(db, r3.origin_repo_id);
       valid = !!pinned && verifyLocalShareEnvelope(env, pinned, home).kind === "valid";
     } catch {
     }
     out.push({
-      record_hash: r2.record_hash,
-      origin_repo_label: deriveRepoLabel(r2.origin_repo_label),
-      received_at_epoch: r2.received_at_epoch,
+      record_hash: r3.record_hash,
+      origin_repo_label: deriveRepoLabel(r3.origin_repo_label),
+      received_at_epoch: r3.received_at_epoch,
       type: rec?.type ?? "unknown",
       title: sanitizeCrossRepoTitle(rec?.title ?? ""),
       detail: sanitizeCrossRepoBody(rec?.detail ?? ""),
@@ -22168,14 +22224,14 @@ function parseRecords(json) {
     return [];
   }
 }
-function stripHash(r2) {
+function stripHash(r3) {
   return {
-    type: r2.type,
-    title: r2.title,
-    detail: r2.detail,
-    importance: r2.importance,
-    created_at_epoch: r2.created_at_epoch,
-    superseded_by_hash: r2.superseded_by_hash
+    type: r3.type,
+    title: r3.title,
+    detail: r3.detail,
+    importance: r3.importance,
+    created_at_epoch: r3.created_at_epoch,
+    superseded_by_hash: r3.superseded_by_hash
   };
 }
 function clampImportance(n) {
@@ -22902,40 +22958,40 @@ function validateCandidatePayload(raw) {
   if (!raw || typeof raw !== "object") {
     throw new CandidatePayloadValidationError("payload is not an object");
   }
-  const r2 = raw;
-  if (typeof r2.prompt !== "string" || r2.prompt.length === 0) {
+  const r3 = raw;
+  if (typeof r3.prompt !== "string" || r3.prompt.length === 0) {
     throw new CandidatePayloadValidationError("prompt must be a non-empty string");
   }
-  if (typeof r2.prompt_hash !== "string" || !/^[a-f0-9]{16}$/.test(r2.prompt_hash)) {
+  if (typeof r3.prompt_hash !== "string" || !/^[a-f0-9]{16}$/.test(r3.prompt_hash)) {
     throw new CandidatePayloadValidationError("prompt_hash must be 16 hex chars");
   }
-  if (typeof r2.score !== "number" || r2.score < -200 || r2.score > 200 || !Number.isFinite(r2.score)) {
+  if (typeof r3.score !== "number" || r3.score < -200 || r3.score > 200 || !Number.isFinite(r3.score)) {
     throw new CandidatePayloadValidationError("score must be a finite number in [-200, 200]");
   }
-  if (!Array.isArray(r2.signals)) {
+  if (!Array.isArray(r3.signals)) {
     throw new CandidatePayloadValidationError("signals must be an array");
   }
-  for (const s of r2.signals) {
+  for (const s of r3.signals) {
     if (!s || typeof s !== "object") throw new CandidatePayloadValidationError("signal entry not an object");
     const sig = s;
     if (typeof sig.name !== "string") throw new CandidatePayloadValidationError("signal.name must be a string");
     if (typeof sig.baseWeight !== "number") throw new CandidatePayloadValidationError("signal.baseWeight must be a number");
     if (typeof sig.applied !== "number") throw new CandidatePayloadValidationError("signal.applied must be a number");
   }
-  if (!Array.isArray(r2.prior_turn_files)) {
+  if (!Array.isArray(r3.prior_turn_files)) {
     throw new CandidatePayloadValidationError("prior_turn_files must be an array");
   }
-  if (typeof r2.timestamp !== "string") {
+  if (typeof r3.timestamp !== "string") {
     throw new CandidatePayloadValidationError("timestamp must be a string");
   }
-  if (typeof r2.session_id !== "string") {
+  if (typeof r3.session_id !== "string") {
     throw new CandidatePayloadValidationError("session_id must be a string");
   }
-  if (r2.provenance !== void 0) {
-    if (!r2.provenance || typeof r2.provenance !== "object") {
+  if (r3.provenance !== void 0) {
+    if (!r3.provenance || typeof r3.provenance !== "object") {
       throw new CandidatePayloadValidationError("provenance must be an object when present");
     }
-    const p19 = r2.provenance;
+    const p19 = r3.provenance;
     const origin = p19.origin;
     const isTeamOrPack = origin === "team" || origin === "pack";
     const isRepo = typeof origin === "string" && isCrossRepoOrigin(origin);
@@ -22960,17 +23016,17 @@ function validateCandidatePayload(raw) {
       if (p19.apply_mac !== void 0 && typeof p19.apply_mac !== "string") {
         throw new CandidatePayloadValidationError("provenance.apply_mac, when present, must be a string");
       }
-      if (!isRuleDestination(r2.destination)) {
+      if (!isRuleDestination(r3.destination)) {
         throw new CandidatePayloadValidationError("provenance-bearing candidate must declare a valid destination");
       }
-      if (r2.draft_text !== void 0 && typeof r2.draft_text !== "string") {
+      if (r3.draft_text !== void 0 && typeof r3.draft_text !== "string") {
         throw new CandidatePayloadValidationError("draft_text must be a string when present");
       }
     }
-  } else if (r2.destination !== void 0 && !isRuleDestination(r2.destination)) {
+  } else if (r3.destination !== void 0 && !isRuleDestination(r3.destination)) {
     throw new CandidatePayloadValidationError("destination, when present, must be a valid RuleDestination");
   }
-  return r2;
+  return r3;
 }
 async function applyRuleCandidate(db, opts) {
   const ent = await assertAutoLearningEntitled();
@@ -23325,8 +23381,8 @@ function dismissRuleCandidate(db, opts) {
     `);
     for (const sig of candidate.signals) {
       if (sig.baseWeight <= 0) continue;
-      const r2 = upsert.run(sig.name);
-      blacklistUpdates += r2.changes;
+      const r3 = upsert.run(sig.name);
+      blacklistUpdates += r3.changes;
     }
     const entry = {
       eventType: "rule_dismissed",
@@ -23758,27 +23814,27 @@ function validateRulePackRule(rule) {
   if (typeof rule !== "object" || rule === null || Array.isArray(rule)) {
     return { valid: false, errors: ["rule must be a non-null object"], requiresHardened: false };
   }
-  const r2 = rule;
-  if (!isNonEmptyString(r2.title)) {
+  const r3 = rule;
+  if (!isNonEmptyString(r3.title)) {
     errors.push("missing required field: title");
   }
-  if (!isNonEmptyString(r2.description)) {
+  if (!isNonEmptyString(r3.description)) {
     errors.push("missing required field: description");
   }
-  if (!isNonEmptyString(r2.severity)) {
+  if (!isNonEmptyString(r3.severity)) {
     errors.push("missing required field: severity");
   }
-  const destinationKnown = isRuleDestination2(r2.destination);
+  const destinationKnown = isRuleDestination2(r3.destination);
   if (!destinationKnown) {
     errors.push(
-      `invalid destination: ${JSON.stringify(r2.destination)} is not a known RuleDestination (one of ${RULE_DESTINATIONS.join(", ")})`
+      `invalid destination: ${JSON.stringify(r3.destination)} is not a known RuleDestination (one of ${RULE_DESTINATIONS.join(", ")})`
     );
   }
   if (destinationKnown) {
-    const destination = r2.destination;
-    const hasPattern = isNonEmptyString(r2.pattern);
-    const hasCheck = isNonEmptyString(r2.check);
-    const hasTextBody = isNonEmptyString(r2.description);
+    const destination = r3.destination;
+    const hasPattern = isNonEmptyString(r3.pattern);
+    const hasCheck = isNonEmptyString(r3.check);
+    const hasTextBody = isNonEmptyString(r3.description);
     switch (destination) {
       case "pattern-scanner":
         if (!hasPattern && !hasCheck) {
@@ -23804,7 +23860,7 @@ function validateRulePackRule(rule) {
         break;
     }
   }
-  const requiresHardened = destinationKnown && isExecutableDestination(r2.destination);
+  const requiresHardened = destinationKnown && isExecutableDestination(r3.destination);
   return { valid: errors.length === 0, errors, requiresHardened };
 }
 var RULE_DESTINATIONS;
@@ -23916,8 +23972,8 @@ function countUntrusted(envelope) {
 }
 function isValidInstalledPack(p19) {
   if (!p19 || typeof p19 !== "object") return false;
-  const r2 = p19;
-  return typeof r2.slug === "string" && r2.slug.length > 0 && Array.isArray(r2.rules);
+  const r3 = p19;
+  return typeof r3.slug === "string" && r3.slug.length > 0 && Array.isArray(r3.rules);
 }
 function packRulePromptHash(slug, rule) {
   const { createHash: createHash17 } = __require("node:crypto");
@@ -24403,14 +24459,14 @@ function collectObservations(memDb, queryText, pool, nowMs, loadVec, modelId, di
          WHERE observations_fts MATCH ?${bm25Temporal ? ` AND ${bm25Temporal}` : ""}
          ORDER BY rank LIMIT ?`
     ).all(sanitizeFts5QueryOr(queryText), pool);
-    rows.forEach((r2, i) => {
-      map.set(r2.id, {
-        id: r2.id,
+    rows.forEach((r3, i) => {
+      map.set(r3.id, {
+        id: r3.id,
         source: "observation",
-        title: r2.title,
-        snippet: snippetOf(r2.detail ?? r2.title),
-        importance: r2.importance,
-        ageDays: ageDaysFrom(r2.created_at_epoch * 1e3, nowMs),
+        title: r3.title,
+        snippet: snippetOf(r3.detail ?? r3.title),
+        importance: r3.importance,
+        ageDays: ageDaysFrom(r3.created_at_epoch * 1e3, nowMs),
         bm25Order: i,
         vecs: []
       });
@@ -24421,15 +24477,15 @@ function collectObservations(memDb, queryText, pool, nowMs, loadVec, modelId, di
     `SELECT id, title, detail, importance, created_at_epoch
        FROM observations${plainTemporal ? ` WHERE ${plainTemporal}` : ""} ORDER BY created_at_epoch DESC LIMIT ?`
   ).all(pool);
-  for (const r2 of recent) {
-    if (!map.has(r2.id)) {
-      map.set(r2.id, {
-        id: r2.id,
+  for (const r3 of recent) {
+    if (!map.has(r3.id)) {
+      map.set(r3.id, {
+        id: r3.id,
         source: "observation",
-        title: r2.title,
-        snippet: snippetOf(r2.detail ?? r2.title),
-        importance: r2.importance,
-        ageDays: ageDaysFrom(r2.created_at_epoch * 1e3, nowMs),
+        title: r3.title,
+        snippet: snippetOf(r3.detail ?? r3.title),
+        importance: r3.importance,
+        ageDays: ageDaysFrom(r3.created_at_epoch * 1e3, nowMs),
         bm25Order: null,
         vecs: []
       });
@@ -24469,14 +24525,14 @@ function collectLikeSource(db, source, cfg, queryText, pool, nowMs) {
            FROM ${cfg.table} WHERE (${likeClause})${cfg.temporalClause ? ` AND ${cfg.temporalClause}` : ""}
            ORDER BY ${cfg.createdCol} DESC LIMIT ?`
       ).all(...params, pool);
-      rows.forEach((r2, i) => {
-        map.set(r2.id, {
-          id: r2.id,
+      rows.forEach((r3, i) => {
+        map.set(r3.id, {
+          id: r3.id,
           source,
-          title: r2.title,
-          snippet: snippetOf(r2.snippet ?? r2.title),
+          title: r3.title,
+          snippet: snippetOf(r3.snippet ?? r3.title),
           importance: 3,
-          ageDays: ageExpr(r2.created),
+          ageDays: ageExpr(r3.created),
           bm25Order: i,
           vecs: []
         });
@@ -24489,15 +24545,15 @@ function collectLikeSource(db, source, cfg, queryText, pool, nowMs) {
               ${cfg.snippetCol} AS snippet, ${cfg.createdCol} AS created
        FROM ${cfg.table}${cfg.temporalClause ? ` WHERE ${cfg.temporalClause}` : ""} ORDER BY ${cfg.createdCol} DESC LIMIT ?`
   ).all(pool);
-  for (const r2 of recent) {
-    if (!map.has(r2.id)) {
-      map.set(r2.id, {
-        id: r2.id,
+  for (const r3 of recent) {
+    if (!map.has(r3.id)) {
+      map.set(r3.id, {
+        id: r3.id,
         source,
-        title: r2.title,
-        snippet: snippetOf(r2.snippet ?? r2.title),
+        title: r3.title,
+        snippet: snippetOf(r3.snippet ?? r3.title),
         importance: 3,
-        ageDays: ageExpr(r2.created),
+        ageDays: ageExpr(r3.created),
         bm25Order: null,
         vecs: []
       });
@@ -24517,14 +24573,14 @@ function collectKnowledgeChunks(knowledgeDb, queryText, pool, nowMs, loadVec, mo
          WHERE knowledge_fts MATCH ?
          ORDER BY rank LIMIT ?`
     ).all(sanitizeFts5QueryOr(queryText), pool);
-    rows.forEach((r2, i) => {
-      map.set(r2.id, {
-        id: r2.id,
+    rows.forEach((r3, i) => {
+      map.set(r3.id, {
+        id: r3.id,
         source: "knowledge_chunk",
-        title: r2.heading || snippetOf(r2.content, 60),
-        snippet: snippetOf(r2.content),
+        title: r3.heading || snippetOf(r3.content, 60),
+        snippet: snippetOf(r3.content),
         importance: 3,
-        ageDays: ageDaysFrom((r2.epoch ?? 0) * 1e3, nowMs),
+        ageDays: ageDaysFrom((r3.epoch ?? 0) * 1e3, nowMs),
         bm25Order: i,
         vecs: []
       });
@@ -24556,9 +24612,9 @@ function loadEmbeddings(db, table, idCol, ids, modelId, dim, assign) {
          WHERE ${idCol} IN (${placeholders}) AND model_id = ? AND dim = ?
          LIMIT ?`
     ).all(...ids, modelId, dim, ids.length);
-    for (const r2 of rows) {
-      const v3 = blobToFloat32(r2.vec);
-      if (v3 && v3.length === dim) assign(r2.id, v3);
+    for (const r3 of rows) {
+      const v3 = blobToFloat32(r3.vec);
+      if (v3 && v3.length === dim) assign(r3.id, v3);
     }
   } catch {
   }
@@ -24668,17 +24724,17 @@ function hybridSearch(memDb, knowledgeDb, opts) {
       ageDays: c2.ageDays
     };
   });
-  const top = ranked.filter((r2) => r2.score >= minScore).sort((a2, b2) => b2.score - a2.score || a2.ageDays - b2.ageDays).slice(0, limit);
+  const top = ranked.filter((r3) => r3.score >= minScore).sort((a2, b2) => b2.score - a2.score || a2.ageDays - b2.ageDays).slice(0, limit);
   if (includeSuperseded && opts.asOf == null) {
-    for (const r2 of top) {
-      const table = r2.source === "observation" ? "observations" : r2.source === "architecture_decision" ? "architecture_decisions" : null;
+    for (const r3 of top) {
+      const table = r3.source === "observation" ? "observations" : r3.source === "architecture_decision" ? "architecture_decisions" : null;
       if (!table) continue;
       try {
-        const row = memDb.prepare(`SELECT valid_to, superseded_by, expired_at_epoch FROM ${table} WHERE id = ?`).get(r2.id);
+        const row = memDb.prepare(`SELECT valid_to, superseded_by, expired_at_epoch FROM ${table} WHERE id = ?`).get(r3.id);
         if (row && row.expired_at_epoch != null) {
           const when = row.valid_to ? row.valid_to.slice(0, 10) : "an earlier date";
           const by = row.superseded_by != null ? ` by #${row.superseded_by}` : "";
-          r2.snippet = `(superseded on ${when}${by}) ${r2.snippet}`;
+          r3.snippet = `(superseded on ${when}${by}) ${r3.snippet}`;
         }
       } catch {
       }
@@ -24808,11 +24864,11 @@ async function supersedeIfContradicted(memDb, knowledgeDb, args2) {
       candidatePool: 20
     });
     const scored = [];
-    for (const r2 of results) {
-      if (r2.id === args2.newId) continue;
+    for (const r3 of results) {
+      if (r3.id === args2.newId) continue;
       if (Date.now() - start > cfg.budgetMs) break;
-      const vec = await candidateVec(memDb, args2.source, r2.id);
-      if (vec) scored.push({ id: r2.id, source: args2.source, cosine: cosineSim(queryVec, vec) });
+      const vec = await candidateVec(memDb, args2.source, r3.id);
+      if (vec) scored.push({ id: r3.id, source: args2.source, cosine: cosineSim(queryVec, vec) });
     }
     let verdict = null;
     if (cfg.judgeEndpoint && Date.now() - start < cfg.budgetMs) {
@@ -24871,17 +24927,11 @@ function emptyResult() {
   };
 }
 function acquireLease(db, now, ttlSec) {
-  const raw = getMemoryMeta(db, LEASE_KEY);
-  if (raw) {
-    const expiry = Number(raw.split(":")[1]);
-    if (Number.isFinite(expiry) && expiry > now) return false;
-  }
-  setMemoryMeta(db, LEASE_KEY, `${process.pid}:${now + ttlSec}`);
-  return true;
+  return tryAcquireMetaLease(db, LEASE_KEY, ttlSec, now);
 }
 function releaseLease(db) {
   try {
-    setMemoryMeta(db, LEASE_KEY, "");
+    releaseMetaLease(db, LEASE_KEY);
   } catch {
   }
 }
@@ -24900,19 +24950,19 @@ async function stageDedupe(db, cfg, deadline, now) {
     return 0;
   }
   let deduped = 0;
-  for (const r2 of rows) {
+  for (const r3 of rows) {
     if (Date.now() > deadline) break;
-    const live = db.prepare(`SELECT expired_at FROM observations WHERE id = ?`).get(r2.id);
+    const live = db.prepare(`SELECT expired_at FROM observations WHERE id = ?`).get(r3.id);
     if (!live || live.expired_at != null) continue;
     const res = await supersedeIfContradicted(db, null, {
-      text: `${r2.title}
-${r2.detail ?? ""}`.trim(),
+      text: `${r3.title}
+${r3.detail ?? ""}`.trim(),
       source: "observation",
-      newId: r2.id,
+      newId: r3.id,
       nowEpochSec: now
     });
     if (res.superseded != null) deduped++;
-    setMemoryMeta(db, DEDUPE_CURSOR, String(r2.id));
+    setMemoryMeta(db, DEDUPE_CURSOR, String(r3.id));
   }
   return deduped;
 }
@@ -24990,11 +25040,11 @@ async function stagePromote(db, cfg, projectRoot, deadline, now, dryRun) {
   ).all(MAX_ROWS_PER_STAGE);
   if (rows.length === 0) return { promoted: 0, refusedByTier: 0, embedderUnavailable: false };
   const vecs = /* @__PURE__ */ new Map();
-  for (const r2 of rows) {
+  for (const r3 of rows) {
     if (Date.now() > deadline) break;
-    const v3 = await embed(`${r2.title}
-${r2.detail ?? ""}`.trim());
-    if (v3) vecs.set(r2.id, v3);
+    const v3 = await embed(`${r3.title}
+${r3.detail ?? ""}`.trim());
+    if (v3) vecs.set(r3.id, v3);
   }
   if (vecs.size === 0) {
     return { promoted: 0, refusedByTier: 0, embedderUnavailable: true };
@@ -25002,13 +25052,13 @@ ${r2.detail ?? ""}`.trim());
   const CLUSTER_THRESHOLD = 0.8;
   const used = /* @__PURE__ */ new Set();
   const clusters = [];
-  for (const r2 of rows) {
-    if (used.has(r2.id) || !vecs.has(r2.id)) continue;
-    const cluster = [r2];
-    used.add(r2.id);
+  for (const r3 of rows) {
+    if (used.has(r3.id) || !vecs.has(r3.id)) continue;
+    const cluster = [r3];
+    used.add(r3.id);
     for (const other of rows) {
       if (used.has(other.id) || !vecs.has(other.id)) continue;
-      if (cosineSim(vecs.get(r2.id), vecs.get(other.id)) >= CLUSTER_THRESHOLD) {
+      if (cosineSim(vecs.get(r3.id), vecs.get(other.id)) >= CLUSTER_THRESHOLD) {
         cluster.push(other);
         used.add(other.id);
       }
@@ -25107,14 +25157,14 @@ function stageReweight(db, cfg, now) {
      ON CONFLICT(source, record_id) DO UPDATE SET last_reweight_epoch = excluded.last_reweight_epoch`
   );
   const tx = db.transaction(() => {
-    for (const r2 of promote) {
-      bump.run(r2.id);
-      mark.run(r2.id, now);
+    for (const r3 of promote) {
+      bump.run(r3.id);
+      mark.run(r3.id, now);
       changed++;
     }
-    for (const r2 of demote) {
-      drop.run(r2.id);
-      mark.run(r2.id, now);
+    for (const r3 of demote) {
+      drop.run(r3.id);
+      mark.run(r3.id, now);
       changed++;
     }
   });
@@ -28060,8 +28110,8 @@ async function runAdaptersList(_args) {
 `);
     }
   } else {
-    for (const r2 of manifestResult.reasons) {
-      process.stderr.write(`[manifest] ${r2}
+    for (const r3 of manifestResult.reasons) {
+      process.stderr.write(`[manifest] ${r3}
 `);
     }
   }
@@ -28980,9 +29030,9 @@ var init_security_utils = __esm({
 
 // src/rules.ts
 function getPatternRules() {
-  return getConfig().rules.map((r2) => ({
-    match: r2.pattern,
-    rules: r2.rules
+  return getConfig().rules.map((r3) => ({
+    match: r3.pattern,
+    rules: r3.rules
   }));
 }
 function matchRules(filePath) {
@@ -31244,8 +31294,8 @@ function handleSearch(args2, db) {
   const lines = [`## Search Results for "${query}" (${results.length} matches)`, ""];
   lines.push("| ID | Type | Title | Date | Importance |");
   lines.push("|----|------|-------|------|------------|");
-  for (const r2 of results) {
-    lines.push(`| ${r2.id} | ${r2.type} | ${r2.title.slice(0, 80)} | ${r2.created_at.split("T")[0]} | ${r2.importance} |`);
+  for (const r3 of results) {
+    lines.push(`| ${r3.id} | ${r3.type} | ${r3.title.slice(0, 80)} | ${r3.created_at.split("T")[0]} | ${r3.importance} |`);
   }
   lines.push("");
   lines.push(`Use ${p3("memory_detail")} with IDs for full details.`);
@@ -31678,9 +31728,9 @@ function handleDocsAudit(args2) {
       }
     }
   }
-  const staleCount = results.filter((r2) => r2.status === "STALE").length;
-  const newCount = results.filter((r2) => r2.status === "NEW").length;
-  const okCount = results.filter((r2) => r2.status === "OK").length;
+  const staleCount = results.filter((r3) => r3.status === "STALE").length;
+  const newCount = results.filter((r3) => r3.status === "NEW").length;
+  const okCount = results.filter((r3) => r3.status === "OK").length;
   const report = {
     affectedPages: results,
     summary: `${results.length} pages checked: ${staleCount} STALE, ${newCount} NEW, ${okCount} OK. ${staleCount + newCount > 0 ? `${staleCount + newCount} pages need updates.` : "All docs are current."}`
@@ -31932,8 +31982,8 @@ function handlePromptAnalysis(args2, db) {
   const lines = [`## Prompt Search: "${query}" (${results.length} results)`, ""];
   lines.push("| Session | Turn | Prompt (truncated) | Tools | Response Tokens | Date |");
   lines.push("|---------|------|--------------------|-------|-----------------|------|");
-  for (const r2 of results) {
-    lines.push(`| ${r2.session_id.slice(0, 8)}... | ${r2.turn_number} | ${r2.user_prompt.slice(0, 60).replace(/\|/g, "\\|")} | ${r2.tool_call_count} | ${r2.response_tokens ?? "-"} | ${r2.created_at.split("T")[0]} |`);
+  for (const r3 of results) {
+    lines.push(`| ${r3.session_id.slice(0, 8)}... | ${r3.turn_number} | ${r3.user_prompt.slice(0, 60).replace(/\|/g, "\\|")} | ${r3.tool_call_count} | ${r3.response_tokens ?? "-"} | ${r3.created_at.split("T")[0]} |`);
   }
   return text4(lines.join("\n"));
 }
@@ -33373,12 +33423,49 @@ var init_analytics = __esm({
   }
 });
 
+// src/model-pricing.ts
+var PRICE_TABLE_SOURCE, PRICE_TABLE_AS_OF, r2, US, BUILT_IN_PRICES;
+var init_model_pricing = __esm({
+  "src/model-pricing.ts"() {
+    "use strict";
+    PRICE_TABLE_SOURCE = "https://platform.claude.com/docs/en/about-claude/pricing";
+    PRICE_TABLE_AS_OF = "2026-11-09";
+    r2 = (input, cacheWrite5m, cacheWrite1h, cacheRead, output) => ({ input, cacheWrite5m, cacheWrite1h, cacheRead, output });
+    US = 1.1;
+    BUILT_IN_PRICES = {
+      "claude-fable-5-1": { ...r2(10, 12.5, 20, 0.25, 50), usGeoMultiplier: US },
+      "claude-mythos-5-1": { ...r2(10, 12.5, 20, 0.25, 50), usGeoMultiplier: US },
+      "claude-fable-5": { ...r2(10, 12.5, 20, 1, 50), usGeoMultiplier: US },
+      "claude-mythos-5": { ...r2(10, 12.5, 20, 1, 50), usGeoMultiplier: US },
+      "claude-opus-5-5": { ...r2(4, 5, 8, 0.2, 20), fast: { input: 8, output: 40 }, usGeoMultiplier: US },
+      "claude-opus-5": { ...r2(5, 6.25, 10, 0.5, 25), fast: { input: 10, output: 50 }, usGeoMultiplier: US },
+      "claude-opus-4-8": { ...r2(5, 6.25, 10, 0.5, 25), fast: { input: 10, output: 50 }, usGeoMultiplier: US },
+      "claude-opus-4-7": { ...r2(5, 6.25, 10, 0.5, 25), usGeoMultiplier: US },
+      "claude-opus-4-6": { ...r2(5, 6.25, 10, 0.5, 25), usGeoMultiplier: US },
+      "claude-opus-4-5": r2(5, 6.25, 10, 0.5, 25),
+      "claude-opus-4-1": r2(15, 18.75, 30, 1.5, 75),
+      "claude-opus-4": r2(15, 18.75, 30, 1.5, 75),
+      "claude-sonnet-5-5": { ...r2(2, 2.5, 4, 0.1, 10), usGeoMultiplier: US },
+      "claude-sonnet-5": { ...r2(2, 2.5, 4, 0.2, 10), usGeoMultiplier: US },
+      "claude-sonnet-4-6": { ...r2(3, 3.75, 6, 0.3, 15), usGeoMultiplier: US },
+      "claude-sonnet-4-5": r2(3, 3.75, 6, 0.3, 15),
+      "claude-sonnet-4": r2(3, 3.75, 6, 0.3, 15),
+      "claude-haiku-5-5": {
+        ...r2(0.1, 0.125, 0.2, 0.01, 0.5),
+        longPrompt: { overTokens: 1e5, rates: r2(0.5, 0.625, 1, 0.05, 2.5) },
+        usGeoMultiplier: US
+      },
+      "claude-haiku-4-5": r2(1, 1.25, 2, 0.1, 5)
+    };
+  }
+});
+
 // src/cost-tracker.ts
 function p8(baseName) {
   return `${getConfig().toolPrefix}_${baseName}`;
 }
-function getModelPricing() {
-  return getConfig().analytics?.cost?.models ?? DEFAULT_MODEL_PRICING;
+function getCurrency() {
+  return getConfig().analytics?.cost?.currency ?? "USD";
 }
 function getCostToolDefinitions() {
   return [
@@ -33452,25 +33539,31 @@ function handleCostSession(args2, db) {
   if (!cost) {
     return text7(`No cost data found for session ${sessionId}. Cost data is recorded automatically when sessions end via the session-end hook. If the session is still active, data will appear after it completes. Try: ${p8("cost_trend")} { days: 30 } to see aggregate cost data instead.`);
   }
-  const modelPricing = getModelPricing();
-  const mp = modelPricing[cost.model] ?? modelPricing["claude-sonnet-4-5"] ?? { input_per_million: 3, output_per_million: 15 };
-  const inputCost = cost.input_tokens / 1e6 * mp.input_per_million;
-  const outputCost = cost.output_tokens / 1e6 * mp.output_per_million;
-  const cacheReadCost = cost.cache_read_tokens / 1e6 * (mp.cache_read_per_million ?? 0);
-  const cacheWriteCost = cost.cache_write_tokens / 1e6 * (mp.cache_write_per_million ?? 0);
+  const status = cost.cost_status ?? "unknown";
+  const dollars = cost.estimated_cost_usd;
+  const headline = status === "unknown" ? "unknown" : `$${dollars.toFixed(4)}${status === "partial" ? " (partial, see below)" : ""}`;
   const lines = [
-    `## Session Cost: $${cost.estimated_cost_usd.toFixed(4)}`,
-    `Model: ${cost.model}`,
+    `## Session Cost: ${headline}`,
+    `Model: ${cost.model ?? "unknown"}`,
     "",
     "### Token Usage",
-    `| Type | Tokens | Est. Cost |`,
-    `|------|--------|-----------|`,
-    `| Input | ${cost.input_tokens.toLocaleString()} | $${inputCost.toFixed(4)} |`,
-    `| Output | ${cost.output_tokens.toLocaleString()} | $${outputCost.toFixed(4)} |`,
-    `| Cache Read | ${cost.cache_read_tokens.toLocaleString()} | $${cacheReadCost.toFixed(4)} |`,
-    `| Cache Write | ${cost.cache_write_tokens.toLocaleString()} | $${cacheWriteCost.toFixed(4)} |`,
-    `| **Total** | ${cost.total_tokens.toLocaleString()} | **$${cost.estimated_cost_usd.toFixed(4)}** |`
+    `| Type | Tokens |`,
+    `|------|--------|`,
+    `| Input | ${cost.input_tokens.toLocaleString()} |`,
+    `| Output | ${cost.output_tokens.toLocaleString()} |`,
+    `| Cache Read | ${cost.cache_read_tokens.toLocaleString()} |`,
+    `| Cache Write | ${cost.cache_write_tokens.toLocaleString()} |`,
+    `| **Total** | ${cost.total_tokens.toLocaleString()} |`,
+    "",
+    `Responses priced: ${cost.priced_responses ?? 0}; without a price: ${cost.unpriced_responses ?? 0}.`
   ];
+  if (status === "unknown" && !cost.unpriced_responses) {
+    lines.push("No transcript was available to price this session.");
+  }
+  if (cost.unpriced_models) {
+    lines.push(`No price known for: ${cost.unpriced_models}. Add it under analytics.cost.models in massu.config.yaml.`);
+  }
+  lines.push(`Prices: ${PRICE_TABLE_SOURCE} as of ${PRICE_TABLE_AS_OF} (${getCurrency()}).`);
   return text7(lines.join("\n"));
 }
 function handleCostTrend(args2, db) {
@@ -33481,17 +33574,21 @@ function handleCostTrend(args2, db) {
   }
   const sql = groupBy === "week" ? `SELECT strftime('%Y-W%W', created_at) as period,
              COUNT(*) as sessions,
-             SUM(estimated_cost_usd) as total_cost,
+             SUM(CASE WHEN cost_status = 'unknown' THEN 0 ELSE estimated_cost_usd END) as total_cost,
              SUM(total_tokens) as total_tokens,
-             AVG(estimated_cost_usd) as avg_cost
+             SUM(CASE WHEN cost_status = 'priced' THEN 1 ELSE 0 END) as priced_sessions,
+             SUM(CASE WHEN cost_status = 'partial' THEN 1 ELSE 0 END) as partial_sessions,
+             SUM(CASE WHEN cost_status = 'unknown' THEN 1 ELSE 0 END) as unknown_sessions
        FROM session_costs
        WHERE created_at >= datetime('now', ?)
        GROUP BY period
        ORDER BY period ASC` : `SELECT strftime('%Y-%m-%d', created_at) as period,
              COUNT(*) as sessions,
-             SUM(estimated_cost_usd) as total_cost,
+             SUM(CASE WHEN cost_status = 'unknown' THEN 0 ELSE estimated_cost_usd END) as total_cost,
              SUM(total_tokens) as total_tokens,
-             AVG(estimated_cost_usd) as avg_cost
+             SUM(CASE WHEN cost_status = 'priced' THEN 1 ELSE 0 END) as priced_sessions,
+             SUM(CASE WHEN cost_status = 'partial' THEN 1 ELSE 0 END) as partial_sessions,
+             SUM(CASE WHEN cost_status = 'unknown' THEN 1 ELSE 0 END) as unknown_sessions
        FROM session_costs
        WHERE created_at >= datetime('now', ?)
        GROUP BY period
@@ -33500,22 +33597,28 @@ function handleCostTrend(args2, db) {
   if (rows.length === 0) {
     return text7(`No cost data found in the last ${days} days. Cost tracking records token usage automatically at session end via hooks. Ensure session-end hooks are configured in your settings. Try: ${p8("cost_session")} { session_id: "..." } to check a specific session.`);
   }
-  const totalCost = rows.reduce((sum, r2) => sum + r2.total_cost, 0);
-  const totalSessions = rows.reduce((sum, r2) => sum + r2.sessions, 0);
+  const sum = (k3) => rows.reduce((acc, r3) => acc + (r3[k3] ?? 0), 0);
+  const totalCost = sum("total_cost");
+  const totalSessions = sum("sessions");
+  const known = sum("priced_sessions") + sum("partial_sessions");
+  const unknown = sum("unknown_sessions");
+  const partial = sum("partial_sessions");
   const lines = [
     `## Cost Trend (${days} days)`,
-    `Total: $${totalCost.toFixed(2)} across ${totalSessions} sessions`,
-    `Average per session: $${(totalCost / totalSessions).toFixed(4)}`,
+    `Total: $${totalCost.toFixed(2)} across ${known} priced session(s)` + (unknown ? `; ${unknown} session(s) of ${totalSessions} have unknown cost and are NOT in this total` : ""),
+    known ? `Average per priced session: $${(totalCost / known).toFixed(4)}` : "No session has a known cost in this window."
+  ];
+  if (partial) lines.push(`${partial} session(s) are partial: a model they used has no price, so they are under-counted.`);
+  lines.push(
     "",
     `### By ${groupBy === "week" ? "Week" : "Day"}`,
-    `| Period | Sessions | Cost | Avg/Session |`,
-    `|--------|----------|------|-------------|`
-  ];
+    `| Period | Sessions | Cost | Unknown |`,
+    `|--------|----------|------|---------|`
+  );
   for (const row of rows) {
-    lines.push(
-      `| ${row.period} | ${row.sessions} | $${row.total_cost.toFixed(2)} | $${row.avg_cost.toFixed(4)} |`
-    );
+    lines.push(`| ${row.period} | ${row.sessions} | $${row.total_cost.toFixed(2)} | ${row.unknown_sessions} |`);
   }
+  lines.push("", `Prices: ${PRICE_TABLE_SOURCE} as of ${PRICE_TABLE_AS_OF} (${getCurrency()}).`);
   return text7(lines.join("\n"));
 }
 function handleCostFeature(args2, db) {
@@ -33528,12 +33631,13 @@ function handleCostFeature(args2, db) {
     ORDER BY total_cost DESC
   `).all(`-${days} days`);
   if (rows.length === 0) {
-    return text7(`No feature cost data found in the last ${days} days. Feature costs are attributed automatically when sessions work on registered features. Ensure features are registered, then costs are tracked per-session. Try: ${p8("cost_trend")} { days: 30 } for session-level cost trends instead.`);
+    return text7(`No feature cost data found in the last ${days} days. Each session's priced cost is allocated across registered features (massu_sentinel_register) by the files it touched; sessions with unknown cost are skipped. Try: ${p8("cost_trend")} { days: 30 } for session-level cost trends instead.`);
   }
-  const totalCost = rows.reduce((sum, r2) => sum + r2.total_cost, 0);
+  const totalCost = rows.reduce((sum, r3) => sum + r3.total_cost, 0);
   const lines = [
     `## Feature Cost Attribution (${days} days)`,
-    `Total: $${totalCost.toFixed(2)} across ${rows.length} features`,
+    `Total: $${totalCost.toFixed(2)} across ${rows.length} feature row(s)`,
+    "Each session's priced cost is ALLOCATED across the registered features whose files it touched, in proportion to those touches. It is an allocation by activity, not a measured per-feature cost. Sessions with unknown cost are not included.",
     "",
     "| Feature | Cost | Tokens | Sessions | % of Total |",
     "|---------|------|--------|----------|------------|"
@@ -33549,18 +33653,12 @@ function handleCostFeature(args2, db) {
 function text7(content) {
   return { content: [{ type: "text", text: content }] };
 }
-var DEFAULT_MODEL_PRICING, COST_BASE_NAMES;
+var COST_BASE_NAMES;
 var init_cost_tracker = __esm({
   "src/cost-tracker.ts"() {
     "use strict";
     init_config();
-    DEFAULT_MODEL_PRICING = {
-      "claude-opus-4-6": { input_per_million: 15, output_per_million: 75, cache_read_per_million: 1.5, cache_write_per_million: 18.75 },
-      "claude-sonnet-4-6": { input_per_million: 3, output_per_million: 15, cache_read_per_million: 0.3, cache_write_per_million: 3.75 },
-      "claude-sonnet-4-5": { input_per_million: 3, output_per_million: 15, cache_read_per_million: 0.3, cache_write_per_million: 3.75 },
-      "claude-haiku-4-5-20251001": { input_per_million: 0.8, output_per_million: 4, cache_read_per_million: 0.08, cache_write_per_million: 1 },
-      "default": { input_per_million: 3, output_per_million: 15, cache_read_per_million: 0.3, cache_write_per_million: 3.75 }
-    };
+    init_model_pricing();
     COST_BASE_NAMES = /* @__PURE__ */ new Set(["cost_session", "cost_trend", "cost_feature"]);
   }
 });
@@ -33973,8 +34071,8 @@ function handleValidationReport(args2, db) {
   if (results.length === 0) {
     return text9(`No validation results found in the last ${days} days. Run ${p10("validation_check")} { file: "src/path/to/file.ts" } on specific files to generate validation data, or try a longer time range with { days: 90 }.`);
   }
-  const passedCount = results.filter((r2) => r2.passed === 1).length;
-  const failedCount = results.filter((r2) => r2.passed === 0).length;
+  const passedCount = results.filter((r3) => r3.passed === 1).length;
+  const failedCount = results.filter((r3) => r3.passed === 0).length;
   const lines = [
     `## Validation Report (${days} days)`,
     `Files validated: ${results.length}`,
@@ -33985,11 +34083,11 @@ function handleValidationReport(args2, db) {
     "| File | Rules Violated | Date |",
     "|------|----------------|------|"
   ];
-  const failedResults = results.filter((r2) => r2.passed === 0);
-  for (const r2 of failedResults.slice(0, 30)) {
-    const filename = r2.file_path.split("/").pop();
-    const rules = r2.rules_violated ?? "-";
-    lines.push(`| ${filename} | ${rules.slice(0, 60)} | ${r2.created_at.slice(0, 10)} |`);
+  const failedResults = results.filter((r3) => r3.passed === 0);
+  for (const r3 of failedResults.slice(0, 30)) {
+    const filename = r3.file_path.split("/").pop();
+    const rules = r3.rules_violated ?? "-";
+    lines.push(`| ${filename} | ${rules.slice(0, 60)} | ${r3.created_at.slice(0, 10)} |`);
   }
   if (failedResults.length > 30) {
     lines.push(`... and ${failedResults.length - 30} more`);
@@ -34918,9 +35016,9 @@ function handleTeamSearch(args2, db) {
     "| Developer | Type | Summary | Module | Date |",
     "|-----------|------|---------|--------|------|"
   ];
-  for (const r2 of results) {
+  for (const r3 of results) {
     lines.push(
-      `| ${r2.developer_id} | ${r2.observation_type} | ${r2.summary.slice(0, 60)} | ${r2.module ?? "-"} | ${r2.created_at.split("T")[0]} |`
+      `| ${r3.developer_id} | ${r3.observation_type} | ${r3.summary.slice(0, 60)} | ${r3.module ?? "-"} | ${r3.created_at.split("T")[0]} |`
     );
   }
   return text13(lines.join("\n"));
@@ -36013,10 +36111,10 @@ function handleSearch3(db, args2) {
     } else {
       lines.push(`Found ${results.length} result(s):`);
       lines.push("");
-      for (const r2 of results) {
-        const preview = r2.content.length > 500 ? r2.content.substring(0, 500) + "..." : r2.content;
-        lines.push(`### ${r2.heading || r2.title} [${r2.chunk_type}]`);
-        lines.push(`**File**: ${claudeDir}/${r2.file_path} | **Category**: ${r2.category}`);
+      for (const r3 of results) {
+        const preview = r3.content.length > 500 ? r3.content.substring(0, 500) + "..." : r3.content;
+        lines.push(`### ${r3.heading || r3.title} [${r3.chunk_type}]`);
+        lines.push(`**File**: ${claudeDir}/${r3.file_path} | **Category**: ${r3.category}`);
         lines.push("");
         lines.push(preview);
         lines.push("");
@@ -36250,11 +36348,11 @@ function handlePattern(db, args2) {
         LIMIT 10
       `).all(sanitizeFts5Query(topic), ...docIds);
       if (topicResults.length > 0) {
-        for (const r2 of topicResults) {
-          lines.push(`### ${r2.heading || "(section)"} [${r2.chunk_type}]`);
-          lines.push(`*Source: ${claudeDir}/${r2.file_path}*`);
+        for (const r3 of topicResults) {
+          lines.push(`### ${r3.heading || "(section)"} [${r3.chunk_type}]`);
+          lines.push(`*Source: ${claudeDir}/${r3.file_path}*`);
           lines.push("");
-          lines.push(r2.content.length > 800 ? r2.content.substring(0, 800) + "..." : r2.content);
+          lines.push(r3.content.length > 800 ? r3.content.substring(0, 800) + "..." : r3.content);
           lines.push("");
           lines.push("---");
           lines.push("");
@@ -36298,8 +36396,8 @@ function handlePattern(db, args2) {
       if (ftsResults.length > 0) {
         lines.push("### Broad Search Results");
         lines.push("");
-        for (const r2 of ftsResults) {
-          lines.push(`- **${r2.heading || "(section)"}** (${claudeDir}/${r2.file_path}): ${r2.content.substring(0, 200)}...`);
+        for (const r3 of ftsResults) {
+          lines.push(`- **${r3.heading || "(section)"}** (${claudeDir}/${r3.file_path}): ${r3.content.substring(0, 200)}...`);
         }
       }
     } catch {
@@ -36447,9 +36545,9 @@ function handleCommand(db, args2) {
     `).all(`%${keyword}%`, `%${keyword}%`);
     lines.push(`## Commands matching "${keyword}" (${results.length} found)`);
     lines.push("");
-    for (const r2 of results) {
-      const preview = r2.content.substring(0, 200).replace(/\n/g, " ");
-      lines.push(`- **${r2.heading}** (${claudeDir}/${r2.file_path}): ${preview}...`);
+    for (const r3 of results) {
+      const preview = r3.content.substring(0, 200).replace(/\n/g, " ");
+      lines.push(`- **${r3.heading}** (${claudeDir}/${r3.file_path}): ${preview}...`);
     }
   } else {
     const commands = db.prepare(`
@@ -36534,8 +36632,8 @@ function handlePlan(db, args2) {
     `).all(`%${basename12(file)}%`);
     lines.push(`## Plans referencing \`${file}\` (${results.length} found)`);
     lines.push("");
-    for (const r2 of results) {
-      lines.push(`- **${r2.title}** (${r2.file_path})`);
+    for (const r3 of results) {
+      lines.push(`- **${r3.title}** (${r3.file_path})`);
     }
   } else if (keyword) {
     try {
@@ -36550,8 +36648,8 @@ function handlePlan(db, args2) {
       `).all(sanitizeFts5Query(keyword));
       lines.push(`## Plans matching "${keyword}" (${results.length} found)`);
       lines.push("");
-      for (const r2 of results) {
-        lines.push(`- **${r2.title}** (${r2.file_path})`);
+      for (const r3 of results) {
+        lines.push(`- **${r3.title}** (${r3.file_path})`);
       }
     } catch {
       lines.push(`FTS search error for "${keyword}". Try simpler terms.`);
@@ -36744,7 +36842,7 @@ function handleEffectiveness2(db, args2) {
   }
   if (ruleId || mode === "detail") {
     const targetRule = ruleId || "";
-    const rule = allRules.find((r2) => r2.rule_id === targetRule);
+    const rule = allRules.find((r3) => r3.rule_id === targetRule);
     if (!rule) {
       return text15(`Rule ${targetRule} not found.`);
     }
@@ -36767,10 +36865,10 @@ function handleEffectiveness2(db, args2) {
     lines.push(`| Linked Corrections | ${correctionEdges.cnt} |`);
     lines.push(`| Effectiveness Score | ${violations === 0 ? "HIGH (never violated)" : violations < 3 ? "MEDIUM" : "LOW (frequently violated)"} |`);
   } else {
-    const rulesWithCounts = allRules.map((r2) => ({
-      ...r2,
-      violations: violationCounts.get(r2.rule_id) || 0,
-      last_at: lastViolated.get(r2.rule_id) || "Never"
+    const rulesWithCounts = allRules.map((r3) => ({
+      ...r3,
+      violations: violationCounts.get(r3.rule_id) || 0,
+      last_at: lastViolated.get(r3.rule_id) || "Never"
     }));
     if (mode === "most_violated") {
       rulesWithCounts.sort((a2, b2) => b2.violations - a2.violations);
@@ -36786,9 +36884,9 @@ function handleEffectiveness2(db, args2) {
     lines.push("");
     lines.push(`| Rule | Text | Violations | Last Violated |`);
     lines.push(`|------|------|------------|---------------|`);
-    for (const r2 of rulesWithCounts.slice(0, topN)) {
-      const ruleText = r2.rule_text.length > 40 ? r2.rule_text.substring(0, 40) + "..." : r2.rule_text;
-      lines.push(`| ${r2.rule_id} | ${ruleText} | ${r2.violations} | ${r2.last_at} |`);
+    for (const r3 of rulesWithCounts.slice(0, topN)) {
+      const ruleText = r3.rule_text.length > 40 ? r3.rule_text.substring(0, 40) + "..." : r3.rule_text;
+      lines.push(`| ${r3.rule_id} | ${ruleText} | ${r3.violations} | ${r3.last_at} |`);
     }
   }
   return text15(lines.join("\n"));
@@ -37085,21 +37183,21 @@ function handlePyRoutes(args2, dataDb) {
   const routes = dataDb.prepare(query).all(...params);
   if (args2.uncoupled) {
     const callerCountStmt = dataDb.prepare(`SELECT COUNT(*) as cnt FROM ${t("py_route_callers")} WHERE route_id = ?`);
-    const uncoupledRoutes = routes.filter((r2) => {
-      const callers = callerCountStmt.get(r2.id).cnt;
+    const uncoupledRoutes = routes.filter((r3) => {
+      const callers = callerCountStmt.get(r3.id).cnt;
       return callers === 0;
     });
     lines.push(`## Uncoupled Routes (${uncoupledRoutes.length} with no frontend callers)`);
-    for (const r2 of uncoupledRoutes) {
-      lines.push(`- ${r2.method} ${r2.path} \u2192 ${r2.function_name} (${r2.file}:${r2.line})`);
+    for (const r3 of uncoupledRoutes) {
+      lines.push(`- ${r3.method} ${r3.path} \u2192 ${r3.function_name} (${r3.file}:${r3.line})`);
     }
   } else {
     lines.push(`## Python Routes (${routes.length} found)`);
-    for (const r2 of routes) {
-      const auth = r2.is_authenticated ? "" : " [UNAUTH]";
-      const deps = safeParseArray(r2.dependencies);
-      lines.push(`- ${r2.method} ${r2.path} \u2192 ${r2.function_name} (${r2.file}:${r2.line})${auth}`);
-      if (r2.response_model) lines.push(`  Response: ${r2.response_model}`);
+    for (const r3 of routes) {
+      const auth = r3.is_authenticated ? "" : " [UNAUTH]";
+      const deps = safeParseArray(r3.dependencies);
+      lines.push(`- ${r3.method} ${r3.path} \u2192 ${r3.function_name} (${r3.file}:${r3.line})${auth}`);
+      if (r3.response_model) lines.push(`  Response: ${r3.response_model}`);
       if (deps.length > 0) lines.push(`  Depends: ${deps.join(", ")}`);
     }
   }
@@ -37301,8 +37399,8 @@ function handlePyImpact(args2, dataDb) {
   if (routes.length > 0) {
     lines.push(`
 ### Routes Defined (${routes.length})`);
-    for (const r2 of routes) {
-      lines.push(`- ${r2.method} ${r2.path} \u2192 ${r2.function_name}`);
+    for (const r3 of routes) {
+      lines.push(`- ${r3.method} ${r3.path} \u2192 ${r3.function_name}`);
     }
   }
   const models = dataDb.prepare(
@@ -37320,7 +37418,7 @@ function handlePyImpact(args2, dataDb) {
     const placeholders = routeIds.map(() => "?").join(",");
     const callers = dataDb.prepare(
       `SELECT DISTINCT frontend_file FROM ${t("py_route_callers")} WHERE route_id IN (${placeholders}) LIMIT 100000`
-    ).all(...routeIds.map((r2) => r2.id));
+    ).all(...routeIds.map((r3) => r3.id));
     if (callers.length > 0) {
       lines.push(`
 ### Frontend Callers (${callers.length} files)`);
@@ -37363,8 +37461,8 @@ function handlePyContext(args2, dataDb) {
   const routes = dataDb.prepare(`SELECT method, path, function_name, line FROM ${t("py_routes")} WHERE file = ? LIMIT 10000`).all(file);
   if (routes.length > 0) {
     lines.push("\n### Routes");
-    for (const r2 of routes) {
-      lines.push(`- ${r2.method} ${r2.path} \u2192 ${r2.function_name} (L${r2.line})`);
+    for (const r3 of routes) {
+      lines.push(`- ${r3.method} ${r3.path} \u2192 ${r3.function_name} (L${r3.line})`);
     }
   }
   const models = dataDb.prepare(`SELECT class_name, table_name, line FROM ${t("py_models")} WHERE file = ? LIMIT 10000`).all(file);
@@ -37375,8 +37473,8 @@ function handlePyContext(args2, dataDb) {
     }
   }
   const rules = config.rules || [];
-  const matchingRules = rules.filter((r2) => {
-    const pattern = r2.pattern;
+  const matchingRules = rules.filter((r3) => {
+    const pattern = r3.pattern;
     if (pattern === "**") return true;
     if (pattern.includes("**/*.py")) return file.endsWith(".py");
     return file.includes(pattern.replace(/\*\*/g, ""));
@@ -37384,8 +37482,8 @@ function handlePyContext(args2, dataDb) {
   if (matchingRules.length > 0) {
     lines.push("\n### Applicable Rules");
     for (const rule of matchingRules) {
-      for (const r2 of rule.rules) {
-        lines.push(`- ${r2}`);
+      for (const r3 of rule.rules) {
+        lines.push(`- ${r3}`);
       }
     }
   }
@@ -37791,8 +37889,8 @@ function handleContext(file, dataDb, codegraphDb) {
     lines.push("## Applicable Rules");
     for (const rule of rules) {
       const severity = rule.severity ? `[${rule.severity}]` : "";
-      for (const r2 of rule.rules) {
-        lines.push(`- ${severity} ${r2}`);
+      for (const r3 of rule.rules) {
+        lines.push(`- ${severity} ${r3}`);
       }
       if (rule.patternFile) {
         lines.push(`  See: .claude/${rule.patternFile}`);
@@ -37880,7 +37978,7 @@ function handleContext(file, dataDb, codegraphDb) {
                   WHERE kf.content MATCH ? AND kc.chunk_type = 'rule'
                   LIMIT 8
                 `).all(ftsQuery);
-                ftsRuleIds = ftsResults.map((r2) => r2.rule_id).filter((id) => id.startsWith("CR-"));
+                ftsRuleIds = ftsResults.map((r3) => r3.rule_id).filter((id) => id.startsWith("CR-"));
               } catch {
               }
             }
@@ -38234,7 +38332,7 @@ function handleDomains(args2, dataDb, codegraphDb) {
     }
     lines.push("");
     lines.push(`### Routers (${files.routers.length})`);
-    for (const r2 of files.routers) lines.push(`- ${r2}`);
+    for (const r3 of files.routers) lines.push(`- ${r3}`);
     lines.push("");
     lines.push(`### Pages (${files.pages.length})`);
     for (const p19 of files.pages) lines.push(`- ${p19}`);
@@ -39324,8 +39422,8 @@ function winManagerDirs(env) {
 function windowsAllowlistRoots(env) {
   const d2 = winManagerDirs(env);
   const roots = [];
-  for (const r2 of [d2.userprofile, d2.nvmHome, d2.nvmSymlink, d2.fnmDir, d2.voltaHome, d2.localappdata]) {
-    if (r2) roots.push(r2);
+  for (const r3 of [d2.userprofile, d2.nvmHome, d2.nvmSymlink, d2.fnmDir, d2.voltaHome, d2.localappdata]) {
+    if (r3) roots.push(r3);
   }
   roots.push("C:\\Program Files\\nodejs", "C:\\Program Files (x86)\\nodejs");
   return roots;