@maycombhq/atticus 2.0.0-beta.21 → 2.0.0-beta.23

package/dist/{chunk-5WERBKLE.js → chunk-RCG5IAAT.js}

@@ -6,7 +6,7 @@ var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   dotInt8,
   textSha
-} from "./chunk-QHJJMZLX.js";
+} from "./chunk-3424TLIJ.js";
 import {
   JOINED_BY_PERSON,
   Question,
@@ -14,8 +14,14 @@ import {
   RecordId,
   answerByWords,
   changesDirOf,
+  decodeText,
   deserializeRecord,
+  globMatcher,
   identifierWords,
+  ignoreRules,
+  ignoredBy,
+  isBinaryBytes,
+  isBinaryPath,
   knowledgeDirOf,
   knowledgeKindOf,
   layoutOf,
@@ -23,14 +29,17 @@ import {
   parseRecord,
   questionsDirOf,
   recordReferences,
-  require_dist,
   serializeRecord,
   specsDirOf,
   specsRelOf,
   splitForms,
   stateDirOf,
-  toCanonicalYaml
-} from "./chunk-PAINMSID.js";
+  toCanonicalYaml,
+  walkRepo
+} from "./chunk-FPBUTZI5.js";
+import {
+  require_dist
+} from "./chunk-BQGDB6ZL.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";
@@ -1006,8 +1015,8 @@ var DOCUMENT_EXTENSIONS = /\.(docx|pptx|xlsx|pdf|md|markdown|html?|txt)$/i;
 async function documentNodes(path, bytes) {
   const out = { nodes: [], names: [], links: [] };
   const [{ readDocument }, { screenFile }] = await Promise.all([
-    import("./chunk-NRQ65LTQ.js"),
-    import("./chunk-UDXWIPCB.js")
+    import("./chunk-MNIPPBCT.js"),
+    import("./chunk-FRCOKUU4.js")
   ]);
   const screen = screenFile(path, bytes);
   if (screen.problem)
@@ -2260,7 +2269,7 @@ ${JSON.stringify(keyed)}`).digest("hex");
 
 // packages/index/dist/catalog-index.js
 import { mkdir } from "node:fs/promises";
-import { dirname as dirname2, join as join3 } from "node:path";
+import { dirname as dirname2, join as join3, resolve } from "node:path";
 
 // packages/index/dist/db.js
 import { createRequire } from "node:module";
@@ -2286,7 +2295,8 @@ function openDb(file) {
 // packages/index/dist/catalog-index.js
 var vectorsFileOf = (file) => join3(dirname2(file), "vectors.sqlite");
 var notInstalled = (e, pkg) => e.code === "ERR_MODULE_NOT_FOUND" && String(e.message).includes(pkg);
-async function embedderOf(root, setting, load = () => import("./chunk-LO3BLMVG.js")) {
+var embedders = /* @__PURE__ */ new Map();
+async function embedderOf(root, setting, load = () => import("./chunk-JSP73CDW.js")) {
   if (setting === "off")
     return { why: "turned off for this command" };
   if (setting && setting !== "auto")
@@ -2304,7 +2314,14 @@ async function embedderOf(root, setting, load = () => import("./chunk-LO3BLMVG.j
   try {
     const { embedderFor } = embed;
     const r = await embedderFor(root);
-    return r.embedder ? { embedder: r.embedder } : { why: r.state.problem ?? "no embedding model" };
+    if (!r.embedder)
+      return { why: r.state.problem ?? "no embedding model" };
+    const key = `${resolve(root)}\0${r.state.dir ?? ""}\0${r.state.id ?? r.embedder.id}`;
+    const had = embedders.get(key);
+    if (had)
+      return { embedder: had };
+    embedders.set(key, r.embedder);
+    return { embedder: r.embedder };
   } catch (e) {
     return { why: `the embedding model couldn't be read: ${e.message.split("\n")[0]}` };
   }
@@ -2312,11 +2329,10 @@ async function embedderOf(root, setting, load = () => import("./chunk-LO3BLMVG.j
 async function openIndex(root, o = {}) {
   const file = o.file ?? join3(stateDirOf(root), ".index", "catalog.sqlite");
   await mkdir(dirname2(file), { recursive: true });
-  const files = await listSources(root);
   const db = openDb(file);
   try {
     const fresh = ensureSchema(db, o.rebuild === true);
-    const u = await updateIndex(db, root, files, { force: fresh });
+    const u = o.trusted && !fresh ? { changed: [], removed: [], problems: [], rematched: false } : await updateIndex(db, root, await listSources(root), { force: fresh });
     const rebuilt = fresh || u.changed.length > 0 || u.removed.length > 0;
     attachVectors(db, vectorsFileOf(file));
     const e = await embedderOf(root, o.embeddings, o.loadEmbed);
@@ -2896,133 +2912,9 @@ function translate(question, lookup) {
 
 // packages/index/dist/tools.js
 import { existsSync, readdirSync } from "node:fs";
-import { readdir as readdir2, readFile as readFile3, realpath, stat as stat2 } from "node:fs/promises";
-import { isAbsolute, join as join4, relative as relative2, resolve, sep as sep2 } from "node:path";
+import { readFile as readFile3, realpath, stat as stat2 } from "node:fs/promises";
+import { isAbsolute, join as join4, relative as relative2, resolve as resolve2, sep as sep2 } from "node:path";
 import { createContext, runInContext, Script } from "node:vm";
-
-// packages/index/dist/glob.js
-var notSlash = (c) => c !== "/";
-var anyChar = (c) => !/[\n\r\u2028\u2029]/.test(c);
-var Builder = class {
-  states = [];
-  add(s) {
-    this.states.push(s);
-    return this.states.length - 1;
-  }
-  /** `c*` looping on a test, then on to next. */
-  loop(test, next) {
-    const split = this.add({ kind: "split", outs: [] });
-    const ch = this.add({ kind: "char", test, out: split });
-    this.states[split].outs.push(ch, next);
-    return split;
-  }
-  /** `(?:.*\/)?` then next: any folders, or none. */
-  folders(next) {
-    const slash = this.add({ kind: "char", test: (c) => c === "/", out: next });
-    return this.add({ kind: "split", outs: [this.loop(anyChar, slash), next] });
-  }
-};
-function tidy(glob2) {
-  return glob2.trim().replace(/\\/g, "/").replace(/^\.\//, "");
-}
-function compile(b, g, next) {
-  const pieces = [];
-  for (let i = 0; i < g.length; i++) {
-    const ch = g[i];
-    if (ch === "*") {
-      if (g[i + 1] === "*") {
-        const slash = g[i + 2] === "/";
-        pieces.push(slash ? (n) => b.folders(n) : (n) => b.loop(anyChar, n));
-        i += slash ? 2 : 1;
-      } else
-        pieces.push((n) => b.loop(notSlash, n));
-    } else if (ch === "?")
-      pieces.push((n) => b.add({ kind: "char", test: notSlash, out: n }));
-    else if (ch === "[") {
-      const end = g.indexOf("]", i + 2);
-      if (end < 0)
-        pieces.push(lit("["));
-      else {
-        const body = g.slice(i + 1, end).replace(/^!/, "^").replace(/\\/g, "\\\\");
-        const re = new RegExp(`^[${body}]$`);
-        pieces.push((n) => b.add({ kind: "char", test: (c) => re.test(c), out: n }));
-        i = end;
-      }
-    } else if (ch === "{") {
-      const end = g.indexOf("}", i);
-      if (end < 0)
-        pieces.push(lit("{"));
-      else {
-        const parts = g.slice(i + 1, end).split(",").map((p) => {
-          let t = tidy(p);
-          if (t.startsWith("/"))
-            t = t.slice(1);
-          return t;
-        });
-        const probe = new Builder();
-        for (const p of parts)
-          compile(probe, p, probe.add({ kind: "match" }));
-        pieces.push((n) => b.add({ kind: "split", outs: parts.map((p) => compile(b, p, n)) }));
-        i = end;
-      }
-    } else
-      pieces.push(lit(ch));
-  }
-  let at = next;
-  for (let k = pieces.length - 1; k >= 0; k--)
-    at = pieces[k](at);
-  return at;
-  function lit(c) {
-    return (n) => b.add({ kind: "char", test: (x) => x === c, out: n });
-  }
-}
-function globMatcher(glob2, anyDepth = !glob2.replace(/\/$/, "").includes("/")) {
-  let g = tidy(glob2);
-  if (g.startsWith("/")) {
-    g = g.slice(1);
-    anyDepth = false;
-  }
-  const b = new Builder();
-  const end = b.add({ kind: "match" });
-  let start = compile(b, g, end);
-  if (anyDepth)
-    start = b.folders(start);
-  const states = b.states;
-  const close = (set, s) => {
-    const stack = [s];
-    while (stack.length) {
-      const at = stack.pop();
-      if (set.has(at))
-        continue;
-      set.add(at);
-      const st = states[at];
-      if (st.kind === "split")
-        for (const o of st.outs)
-          stack.push(o);
-    }
-  };
-  return {
-    test(path) {
-      let live = /* @__PURE__ */ new Set();
-      close(live, start);
-      for (let i = 0; i < path.length; i++) {
-        const c = path[i];
-        const next = /* @__PURE__ */ new Set();
-        for (const s of live) {
-          const st = states[s];
-          if (st.kind === "char" && st.test(c))
-            close(next, st.out);
-        }
-        if (!next.size)
-          return false;
-        live = next;
-      }
-      return live.has(end);
-    }
-  };
-}
-
-// packages/index/dist/tools.js
 var ContextToolError = class extends Error {
   constructor(message) {
     super(message);
@@ -3398,7 +3290,7 @@ function isCited(ix, root, c) {
 async function insideClone(base, path) {
   if (!path || path.includes("\0") || isAbsolute(path) || /^[a-zA-Z]:/.test(path))
     throw new ContextToolError(`${path} isn't a path inside the repo.`);
-  const full = resolve(base, ...path.split(/[\\/]+/));
+  const full = resolve2(base, ...path.split(/[\\/]+/));
   const rel2 = relative2(base, full);
   if (!rel2 || rel2.startsWith("..") || isAbsolute(rel2))
     throw new ContextToolError(`${path} leaves the repo's checkout; Atticus reads nothing outside it.`);
@@ -3427,7 +3319,7 @@ async function excerpt(root, c, around, o) {
   const size = (await stat2(file)).size;
   if (size > CONTEXT_TOOL_BOUNDS.codeFileBytes)
     return `${c.what} ${c.verb ?? "cites"} ${c.repo}/${c.path}:${c.line}, a file too big to show (${size} bytes).`;
-  const lines = (await readFile3(file, "utf8")).split(/\r?\n/);
+  const lines = decodeText(await readFile3(file)).split(/\r?\n/);
   if (c.line > lines.length)
     return `${c.what} ${c.verb ?? "cites"} ${c.repo}/${c.path}:${c.line}, but the file has ${lines.length} lines now: the cite is stale.`;
   const from = Math.max(1, c.line - around);
@@ -3556,17 +3448,20 @@ async function namesInCode(root, names, o = {}) {
       const names2 = open.filter((n) => !found.has(n) && DECLARABLE.test(n));
       if (!names2.length)
         return;
-      const buf = await readFile3(join4(dir, ...p.split("/"))).catch(() => void 0);
+      const file = join4(dir, ...p.split("/"));
+      if (!await readableCode(file, p))
+        return;
+      const buf = await readFile3(file).catch(() => void 0);
       if (!buf || buf.length > B.codeFileBytes)
         return;
-      if (buf.subarray(0, 8e3).includes(0))
+      if (isBinaryBytes(buf))
         return;
       bytes += buf.length;
       if (bytes > B.grepBytes) {
         cut = true;
         return false;
       }
-      const text = buf.toString("utf8");
+      const text = decodeText(buf);
       if (!names2.some((n) => text.includes(n)))
         return;
       const decls = await o.outline(p, text).catch(() => void 0);
@@ -3629,50 +3524,12 @@ function reposOf(root, input, o) {
     throw new ContextToolError("No repo is cloned in the workspace.");
   return out;
 }
-function ignoreRules(text, base) {
-  const out = [];
-  for (let line of text.split(/\r?\n/)) {
-    line = line.replace(/(?<!\\)\s+$/, "");
-    if (!line || line.startsWith("#"))
-      continue;
-    let negate = false;
-    if (line.startsWith("!")) {
-      negate = true;
-      line = line.slice(1);
-    } else if (line.startsWith("\\!") || line.startsWith("\\#"))
-      line = line.slice(1);
-    const dirOnly = line.endsWith("/");
-    if (dirOnly)
-      line = line.slice(0, -1);
-    if (!line)
-      continue;
-    const anchored = line.includes("/");
-    try {
-      out.push({ base, re: globMatcher(line.replace(/^\//, ""), !anchored), negate, dirOnly });
-    } catch {
-    }
-  }
-  return out;
-}
-function ignored(rules, path, isDir) {
-  let out = false;
-  for (const r of rules) {
-    if (r.dirOnly && !isDir)
-      continue;
-    if (r.base && !path.startsWith(`${r.base}/`))
-      continue;
-    const rel2 = r.base ? path.slice(r.base.length + 1) : path;
-    if (r.re.test(rel2))
-      out = !r.negate;
-  }
-  return out;
-}
 async function rulesFor(dir, path) {
   const parts = path.split("/").slice(0, -1);
   const rules = [];
   for (let i = 0; i <= parts.length; i++) {
     const base = parts.slice(0, i).join("/");
-    const text = await readFile3(join4(dir, ...parts.slice(0, i), ".gitignore"), "utf8").catch(() => void 0);
+    const text = await readFile3(join4(dir, ...parts.slice(0, i), ".gitignore")).then(decodeText, () => void 0);
     if (text)
       rules.push(...ignoreRules(text, base));
   }
@@ -3682,50 +3539,18 @@ async function isIgnored(dir, path) {
   const rules = await rulesFor(dir, path);
   const parts = path.split("/");
   for (let i = 1; i < parts.length; i++)
-    if (ignored(rules, parts.slice(0, i).join("/"), true))
+    if (ignoredBy(rules, parts.slice(0, i).join("/"), true))
       return true;
-  return ignored(rules, path, false);
+  return ignoredBy(rules, path, false);
 }
-async function walkClone(dir, max, visit) {
-  let files = 0;
-  let cut = false;
-  const go = async (rel2, inherited) => {
-    let entries;
-    try {
-      entries = await readdir2(rel2 ? join4(dir, ...rel2.split("/")) : dir, { withFileTypes: true });
-    } catch {
-      return true;
-    }
-    const here = entries.find((e) => e.name === ".gitignore" && e.isFile());
-    const rules = here ? [
-      ...inherited,
-      ...ignoreRules(await readFile3(join4(dir, ...rel2.split("/"), ".gitignore"), "utf8"), rel2)
-    ] : inherited;
-    for (const e of entries.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
-      if (e.isSymbolicLink() || e.name === ".git")
-        continue;
-      const p = rel2 ? `${rel2}/${e.name}` : e.name;
-      if (e.isDirectory()) {
-        if (ignored(rules, p, true))
-          continue;
-        if (!await go(p, rules))
-          return false;
-      } else if (e.isFile()) {
-        if (ignored(rules, p, false))
-          continue;
-        if (files >= max) {
-          cut = true;
-          return false;
-        }
-        files++;
-        if (await visit(p) === false)
-          return false;
-      }
-    }
-    return true;
-  };
-  await go("", []);
-  return { files, cut };
+function walkClone(dir, max, visit) {
+  return walkRepo(dir, visit, { max });
+}
+async function readableCode(file, path) {
+  if (isBinaryPath(path))
+    return false;
+  const size = (await stat2(file).catch(() => void 0))?.size;
+  return size !== void 0 && size <= CONTEXT_TOOL_BOUNDS.codeFileBytes;
 }
 var plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
 async function runCodeTool(root, name, input, o) {
@@ -3801,10 +3626,13 @@ async function grepTool(root, input, o) {
     const walked = await walkClone(dir, B.walkFiles - read, async (p) => {
       if (only && !only.test(p))
         return;
-      const buf = await readFile3(join4(dir, ...p.split("/"))).catch(() => void 0);
+      const file = join4(dir, ...p.split("/"));
+      if (!await readableCode(file, p))
+        return;
+      const buf = await readFile3(file).catch(() => void 0);
       if (!buf || buf.length > B.codeFileBytes)
         return;
-      if (buf.subarray(0, 8e3).includes(0))
+      if (isBinaryBytes(buf))
         return;
       bytes += buf.length;
       if (bytes > B.grepBytes) {
@@ -3812,7 +3640,7 @@ async function grepTool(root, input, o) {
         return false;
       }
       read++;
-      const lines = buf.toString("utf8").split(/\r?\n/).map((l) => l.slice(0, 2e3));
+      const lines = decodeText(buf).split(/\r?\n/).map((l) => l.slice(0, 2e3));
       const found = matching(lines);
       if (!found) {
         cut = true;
@@ -3926,7 +3754,7 @@ async function outlineTool(root, input, o) {
   const size = (await stat2(file)).size;
   if (size > CONTEXT_TOOL_BOUNDS.codeFileBytes)
     throw new ContextToolError(`${path} is too big to outline (${size} bytes).`);
-  const text = await readFile3(file, "utf8");
+  const text = decodeText(await readFile3(file));
   const head = `Outline of ${repo}:${rel2}`;
   let how;
   let lines;

package/dist/chunk-RGZFOKVO.js

@@ -0,0 +1,106 @@
+import { createRequire as __atticusCreateRequire } from "node:module";
+import { fileURLToPath as __atticusFileURLToPath } from "node:url";
+var require = __atticusCreateRequire(import.meta.url);
+var __atticusUrl = (p) => new URL("./" + p, import.meta.url).href;
+var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
+import {
+  readUserState,
+  writeUserState
+} from "./chunk-KVVNAUIG.js";
+import {
+  loadOrgPack,
+  orgPackDirOf
+} from "./chunk-FPBUTZI5.js";
+
+// packages/cli/dist/model-address.js
+import { AsyncLocalStorage } from "node:async_hooks";
+var ADDRESS = /url|endpoint|host|address/i;
+function whereKeyGoes(m) {
+  const s = m?.settings ?? {};
+  const picked = Object.keys(s).filter((k) => k === "keyEnv" || k === "caFile" || ADDRESS.test(k)).sort().map((k) => [k, s[k]]);
+  return JSON.stringify([m?.type ?? null, picked]);
+}
+function addressWords(m) {
+  const s = m?.settings ?? {};
+  const at = Object.keys(s).filter((k) => k === "caFile" || ADDRESS.test(k)).map((k) => `${k} ${String(s[k])}`);
+  return `${String(m?.type ?? "no provider")}${at.length ? ` (${at.join(", ")})` : " at its own address"}`;
+}
+var OWN_ADDRESS = /* @__PURE__ */ new Set(["anthropic", "bedrock"]);
+function atProvidersOwnAddress(m) {
+  if (typeof m?.type !== "string" || !OWN_ADDRESS.has(m.type))
+    return false;
+  return !Object.keys(m.settings ?? {}).some((k) => k === "caFile" || ADDRESS.test(k));
+}
+var FILE = "model-address.json";
+async function confirmedAddress(root, env = process.env) {
+  const r = await readUserState(root, FILE, env);
+  return typeof r?.address === "string" ? r.address : void 0;
+}
+async function recordConfirmedAddress(root, m, env = process.env) {
+  await writeUserState(root, FILE, { address: whereKeyGoes(m), at: (/* @__PURE__ */ new Date()).toISOString() }, env);
+}
+async function addressRefusal(root, m, env = process.env) {
+  if (!m || m.type === void 0 || m.type === "mock")
+    return void 0;
+  const confirmed = await confirmedAddress(root, env);
+  const ok = confirmed !== void 0 ? confirmed === whereKeyGoes(m) : atProvidersOwnAddress(m);
+  if (ok)
+    return void 0;
+  return `runtime.yaml sends the model's key to ${addressWords(m)}, which you haven't confirmed${confirmed !== void 0 ? " (it changed since you last did)" : ""}, so nothing was sent. Open AI settings in the Atticus app and press Test: it asks you to confirm where the key goes. Or run the step yourself in a terminal (ADR 0186).`;
+}
+var fromApp = new AsyncLocalStorage();
+var serving = 0;
+var asTheApp = (f) => fromApp.run(true, f);
+function servingTheApp(on) {
+  serving = Math.max(0, serving + (on ? 1 : -1));
+}
+function whoStarts(env = process.env, tty = process.stdin.isTTY === true) {
+  if (fromApp.getStore() || serving > 0)
+    return "app";
+  if (env.ATTICUS_ACP_SESSION)
+    return "session";
+  return tty ? "person" : "unattended";
+}
+async function refusalError(message) {
+  const { RuntimeConfigError } = await import("./chunk-BFMTGNAQ.js");
+  const e = new RuntimeConfigError(message);
+  return Object.assign(e, { modelAddress: true });
+}
+async function guardModelAddress(o, env = process.env, tty = process.stdin.isTTY === true) {
+  const who = whoStarts(env, tty);
+  if (who === "unattended")
+    return;
+  const m = { type: o.type, settings: o.settings };
+  if (who === "person") {
+    if (await confirmedAddress(o.root) !== whereKeyGoes(m))
+      await recordConfirmedAddress(o.root, m).catch(() => void 0);
+    return;
+  }
+  const no = await addressRefusal(o.root, m);
+  if (no)
+    throw await refusalError(no);
+}
+async function requireConfirmedModel(root, mode, env = process.env) {
+  const op = await loadOrgPack(orgPackDirOf(root));
+  const effective = mode ?? env.ATTICUS_RUNTIME ?? op.runtime.modes.default;
+  if (effective !== "model")
+    return;
+  const no = await addressRefusal(root, op.runtime.adapters.model, env);
+  if (!no)
+    return;
+  const { HttpError } = await import("./chunk-4R3TO4VL.js");
+  throw new HttpError(403, "Confirm where the model's key goes", no, { confirm: "ai-test" });
+}
+
+export {
+  whereKeyGoes,
+  atProvidersOwnAddress,
+  confirmedAddress,
+  recordConfirmedAddress,
+  addressRefusal,
+  asTheApp,
+  servingTheApp,
+  whoStarts,
+  guardModelAddress,
+  requireConfirmedModel
+};

package/dist/{chunk-C7CEK3KW.js → chunk-RLZFL76D.js}

@@ -5,14 +5,14 @@ var __atticusUrl = (p) => new URL("./" + p, import.meta.url).href;
 var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   repoFor
-} from "./chunk-TGVVUKTG.js";
+} from "./chunk-XOMEQVLK.js";
 import {
   draftRepoType,
   matchRepoType
-} from "./chunk-4SLBCEPD.js";
+} from "./chunk-IKAW2KJU.js";
 import {
   fsRepo
-} from "./chunk-7AB6OWTV.js";
+} from "./chunk-PQQKZPBU.js";
 import {
   CONVENTIONS_SCHEMA_VERSION,
   ChecklistPack,
@@ -29,10 +29,12 @@ import {
   noteRuleDrafts,
   notesFor,
   orgPackDirOf,
-  require_dist,
   termAnswerNote,
   termOfQuestion
-} from "./chunk-PAINMSID.js";
+} from "./chunk-FPBUTZI5.js";
+import {
+  require_dist
+} from "./chunk-BQGDB6ZL.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";

package/dist/{chunk-PTQ3ZALZ.js → chunk-RPQITJNX.js}

@@ -22,7 +22,7 @@ import {
   roundsUsed,
   runCritic,
   waitingLenses
-} from "./chunk-K332XW7K.js";
+} from "./chunk-D6BVLTDV.js";
 import {
   changeFolder,
   changeStore,
@@ -30,21 +30,23 @@ import {
   phaseStage,
   stageCommand,
   statePhase
-} from "./chunk-HSZMPH5T.js";
+} from "./chunk-WZYM5M4U.js";
 import {
   AiOffError,
   HandoffRuntime,
   RuntimeConfigError,
   runtimeForCli
-} from "./chunk-QHJJMZLX.js";
+} from "./chunk-3424TLIJ.js";
 import {
   CriticQuestion,
   LEGACY_LENSES,
   Lens,
-  require_dist,
   runsDirOf,
   runsRelOf
-} from "./chunk-PAINMSID.js";
+} from "./chunk-FPBUTZI5.js";
+import {
+  require_dist
+} from "./chunk-BQGDB6ZL.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";
@@ -108,7 +110,7 @@ function statusLine(s, change = "<change>") {
     return owner;
   if (s.humanDecides)
     return `The ${s.gate} gate is closed (${counts}) and ${roundsUsed(s)}: a person decides now. Once a person acts on round ${s.round}'s findings, ${checkRoundRule(s.round)}.`;
-  return `The ${s.gate} gate is closed: ${counts}. Act on each with atticus finding <id> <action>.`;
+  return `The ${s.gate} gate is closed: ${counts}. Act on each with atticus finding ${change} <id> <action>.`;
 }
 async function runtimeOf(root, mode, deps) {
   if (deps.runtime)
@@ -229,7 +231,7 @@ async function critic(root, changeId, o, io, deps = {}) {
     io.out(`${l.lens} lens ${l.state}: ${l.reason ?? ""}`.trimEnd());
   if (r.discarded.length)
     io.out(`Discarded ${r.discarded.length} AI finding${r.discarded.length > 1 ? "s" : ""} without valid evidence.`);
-  io.out(statusLine(s));
+  io.out(statusLine(s, r.change));
   return s.mayProceed ? 0 : 1;
 }
 function printCompleted(c, io) {
@@ -242,7 +244,7 @@ function printCompleted(c, io) {
   if (c.waiting.length)
     io.out(`${plural(c.waiting.length, "AI lens", "AI lenses")} ${c.waiting.length === 1 ? "is" : "are"} still with your assistant: ${c.waiting.map((w) => `${w.lens} (atticus handoff done ${w.runId})`).join(", ")}.`);
   else
-    io.out(statusLine(c.status));
+    io.out(statusLine(c.status, c.change));
   return c.waiting.length === 0;
 }
 async function completeCriticLens(root, run, io, o = {}) {
@@ -279,7 +281,7 @@ async function completeCriticBatch(root, batch, result, io, o = {}) {
     if (last.waiting.length)
       io.out(`${plural(last.waiting.length, "AI lens", "AI lenses")} ${last.waiting.length === 1 ? "is" : "are"} still with your assistant: ${last.waiting.map((w) => w.lens).join(", ")}.`);
     else
-      io.out(statusLine(last.status));
+      io.out(statusLine(last.status, last.change));
   }
   return batch.state === "validated" && read.every((c) => c.lens.state === "ran") ? 0 : 1;
 }
@@ -315,7 +317,7 @@ async function resumeLenses(root, changeId, o, io, deps) {
     for (const gate of gates) {
       const s = await gateStatus(root, changeId, gate);
       if (!statusPrinted && (any || s.round !== void 0))
-        io.out(statusLine(s));
+        io.out(statusLine(s, changeId));
       mayProceed = s.mayProceed && s.round !== void 0;
     }
     return mayProceed ? 0 : 1;
@@ -372,7 +374,7 @@ async function findings(root, changeId, o, io) {
       f.finding.summary
     ])))
       io.out(`  ${line}`);
-    io.out(statusLine(s));
+    io.out(statusLine(s, changeId));
   }
   return 0;
 }
@@ -401,7 +403,7 @@ async function findingAction(root, changeId, findingId, action, o, io, deps = {}
     });
     io.out(r.message);
     if (r.finding.state !== "open") {
-      const { retireChangeEscalations } = await import("./chunk-NTAVOWYD.js");
+      const { retireChangeEscalations } = await import("./chunk-APDN6UOR.js");
       const at = deps.now ?? (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z");
       const stages = await retireChangeEscalations(root, changeId, at).catch(() => []);
       if (stages.length)