@staff0rd/assist 0.314.0 → 0.315.0

package/dist/index.js

@@ -6,7 +6,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@staff0rd/assist",
-  version: "0.314.0",
+  version: "0.315.0",
   type: "module",
   main: "dist/index.js",
   bin: {
@@ -2279,6 +2279,61 @@ async function run(options2 = {}) {
   handleResults(results, entries.length);
 }
 
+// src/commands/verify/settingsGuard.ts
+import { existsSync as existsSync12, readFileSync as readFileSync9 } from "fs";
+
+// src/commands/verify/findAssistReferences.ts
+function offendingEntries(list4) {
+  if (!Array.isArray(list4)) return [];
+  return list4.filter(
+    (entry) => typeof entry === "string" && /\bassist\b/.test(entry)
+  );
+}
+function findAssistReferences(settings) {
+  const permissions = settings?.permissions ?? {};
+  return [
+    ...offendingEntries(permissions.allow).map(
+      (entry) => ({ list: "allow", entry })
+    ),
+    ...offendingEntries(permissions.deny).map(
+      (entry) => ({ list: "deny", entry })
+    )
+  ];
+}
+
+// src/commands/verify/settingsGuard.ts
+var SETTINGS_PATH = "claude/settings.json";
+function settingsGuard() {
+  if (!existsSync12(SETTINGS_PATH)) {
+    console.log(`No ${SETTINGS_PATH}; nothing to guard.`);
+    process.exit(0);
+  }
+  let settings;
+  try {
+    settings = JSON.parse(readFileSync9(SETTINGS_PATH, "utf8"));
+  } catch (error) {
+    console.log(
+      `Could not parse ${SETTINGS_PATH}: ${error.message}`
+    );
+    process.exit(1);
+  }
+  const offenders = findAssistReferences(settings);
+  if (offenders.length === 0) {
+    console.log(`No assist references in ${SETTINGS_PATH} permissions.`);
+    process.exit(0);
+  }
+  console.log(`assist references found in ${SETTINGS_PATH} permissions:
+`);
+  for (const { list: list4, entry } of offenders) {
+    console.log(`  permissions.${list4}: ${entry}`);
+  }
+  console.log(
+    `
+Total: ${offenders.length} entry(ies). Remove every assist reference from the permission lists.`
+  );
+  process.exit(1);
+}
+
 // src/commands/new/registerNew/initGit.ts
 import { execSync as execSync11 } from "child_process";
 import { writeFileSync as writeFileSync9 } from "fs";
@@ -2374,7 +2429,7 @@ async function newCli() {
 
 // src/commands/new/registerNew/newProject.ts
 import { execSync as execSync15 } from "child_process";
-import { existsSync as existsSync13, readFileSync as readFileSync10, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync11, writeFileSync as writeFileSync12 } from "fs";
 
 // src/commands/deploy/init/index.ts
 import { execSync as execSync14 } from "child_process";
@@ -2382,33 +2437,33 @@ import chalk26 from "chalk";
 import enquirer3 from "enquirer";
 
 // src/commands/deploy/init/updateWorkflow.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync3, readFileSync as readFileSync9, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync3, readFileSync as readFileSync10, writeFileSync as writeFileSync11 } from "fs";
 import { dirname as dirname11, join as join9 } from "path";
 import { fileURLToPath } from "url";
 import chalk25 from "chalk";
 var WORKFLOW_PATH = ".github/workflows/build.yml";
 var __dirname2 = dirname11(fileURLToPath(import.meta.url));
 function getExistingSiteId() {
-  if (!existsSync12(WORKFLOW_PATH)) {
+  if (!existsSync13(WORKFLOW_PATH)) {
     return null;
   }
-  const content = readFileSync9(WORKFLOW_PATH, "utf8");
+  const content = readFileSync10(WORKFLOW_PATH, "utf8");
   const match = content.match(/-s\s+([a-f0-9-]{36})/);
   return match ? match[1] : null;
 }
 function getTemplateContent(siteId) {
   const templatePath = join9(__dirname2, "commands/deploy/build.yml");
-  const template = readFileSync9(templatePath, "utf8");
+  const template = readFileSync10(templatePath, "utf8");
   return template.replace("{{NETLIFY_SITE_ID}}", siteId);
 }
 async function updateWorkflow(siteId) {
   const newContent = getTemplateContent(siteId);
   const workflowDir = ".github/workflows";
-  if (!existsSync12(workflowDir)) {
+  if (!existsSync13(workflowDir)) {
     mkdirSync3(workflowDir, { recursive: true });
   }
-  if (existsSync12(WORKFLOW_PATH)) {
-    const oldContent = readFileSync9(WORKFLOW_PATH, "utf8");
+  if (existsSync13(WORKFLOW_PATH)) {
+    const oldContent = readFileSync10(WORKFLOW_PATH, "utf8");
     if (oldContent === newContent) {
       console.log(chalk25.green("build.yml is already up to date"));
       return;
@@ -2502,11 +2557,11 @@ async function newProject() {
 }
 function addViteBaseConfig() {
   const viteConfigPath = "vite.config.ts";
-  if (!existsSync13(viteConfigPath)) {
+  if (!existsSync14(viteConfigPath)) {
     console.log("No vite.config.ts found, skipping base config");
     return;
   }
-  const content = readFileSync10(viteConfigPath, "utf8");
+  const content = readFileSync11(viteConfigPath, "utf8");
   if (content.includes("base:")) {
     console.log("vite.config.ts already has base config");
     return;
@@ -3143,11 +3198,38 @@ function expandTilde2(value) {
 }
 
 // src/commands/backup/scheduleBackup.ts
-import { execSync as execSync17 } from "child_process";
 import { mkdir } from "fs/promises";
 import { join as join10 } from "path";
 import chalk28 from "chalk";
 
+// src/commands/backup/readCrontab.ts
+import { execSync as execSync17 } from "child_process";
+function readCrontab() {
+  try {
+    return execSync17("crontab -l", {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+  } catch {
+    return "";
+  }
+}
+function writeCrontab(content) {
+  try {
+    execSync17("crontab -", {
+      input: content,
+      stdio: ["pipe", "ignore", "pipe"]
+    });
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      throw new Error(
+        "crontab is not available on this system. Backup scheduling requires Linux cron."
+      );
+    }
+    throw error;
+  }
+}
+
 // src/commands/backup/durationToCron.ts
 var MINUTES_PER_HOUR = 60;
 var HOURS_PER_DAY = 24;
@@ -3219,6 +3301,14 @@ function upsertScheduleBlock(crontab, every, cronLine) {
   return `${next3.join("\n")}
 `;
 }
+function removeScheduleBlock(crontab) {
+  const lines = crontab.length === 0 ? [] : crontab.replace(/\n$/, "").split("\n");
+  const range = findBlockRange(lines);
+  if (range === void 0) return crontab;
+  const next3 = [...lines.slice(0, range.start), ...lines.slice(range.end + 1)];
+  return next3.length === 0 ? "" : `${next3.join("\n")}
+`;
+}
 function readScheduleBlock(crontab) {
   const lines = crontab.length === 0 ? [] : crontab.split("\n");
   const range = findBlockRange(lines);
@@ -3235,31 +3325,6 @@ function readScheduleBlock(crontab) {
 }
 
 // src/commands/backup/scheduleBackup.ts
-function readCrontab() {
-  try {
-    return execSync17("crontab -l", {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-  } catch {
-    return "";
-  }
-}
-function writeCrontab(content) {
-  try {
-    execSync17("crontab -", {
-      input: content,
-      stdio: ["pipe", "ignore", "pipe"]
-    });
-  } catch (error) {
-    if (error.code === "ENOENT") {
-      throw new Error(
-        "crontab is not available on this system. Backup scheduling requires Linux cron."
-      );
-    }
-    throw error;
-  }
-}
 function fail(message) {
   console.error(chalk28.red(message));
   process.exit(1);
@@ -3298,6 +3363,19 @@ function scheduleStatus() {
   }
   console.error(`assist backup runs every ${block.every} (${block.cron}).`);
 }
+function scheduleRemove() {
+  const current = readCrontab();
+  if (!readScheduleBlock(current)) {
+    console.error("No assist backup schedule is set; nothing to remove.");
+    return;
+  }
+  try {
+    writeCrontab(removeScheduleBlock(current));
+  } catch (error) {
+    fail(error.message);
+  }
+  console.error(chalk28.green("Removed the assist backup schedule."));
+}
 
 // src/commands/backlog/export/index.ts
 import { writeFile } from "fs/promises";
@@ -3401,6 +3479,9 @@ function registerBackup(program2) {
   ).action(backup);
   const scheduleCommand = backupCommand.command("schedule").description("Manage a recurring crontab entry that runs assist backup").option("--every <duration>", "Cadence to run the backup (e.g. 5m, 6h)").action(scheduleBackup);
   scheduleCommand.command("status").description("Show the active backup schedule, or report that none is set").action(scheduleStatus);
+  scheduleCommand.command("remove").description(
+    "Remove the marked backup schedule block, leaving other crontab lines intact"
+  ).action(scheduleRemove);
 }
 
 // src/commands/backlog/next.ts
@@ -3441,9 +3522,9 @@ function hasLocalChanges() {
 
 // src/commands/backlog/acquireLock.ts
 import {
-  existsSync as existsSync14,
+  existsSync as existsSync15,
   mkdirSync as mkdirSync4,
-  readFileSync as readFileSync11,
+  readFileSync as readFileSync12,
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync13
 } from "fs";
@@ -3465,9 +3546,9 @@ function isProcessAlive(pid) {
 }
 function isLockedByOther(itemId) {
   const lockPath = getLockPath(itemId);
-  if (!existsSync14(lockPath)) return false;
+  if (!existsSync15(lockPath)) return false;
   try {
-    const lock = JSON.parse(readFileSync11(lockPath, "utf8"));
+    const lock = JSON.parse(readFileSync12(lockPath, "utf8"));
     if (lock.pid === process.pid) return false;
     return isProcessAlive(lock.pid);
   } catch {
@@ -3658,19 +3739,19 @@ function buildArgs(prompt, options2) {
 import chalk36 from "chalk";
 
 // src/commands/backlog/migrateLocalBacklog.ts
-import { existsSync as existsSync16 } from "fs";
+import { existsSync as existsSync17 } from "fs";
 import { join as join15 } from "path";
 import chalk35 from "chalk";
 
 // src/commands/backlog/backupLocalBacklogFiles.ts
-import { existsSync as existsSync15, renameSync } from "fs";
+import { existsSync as existsSync16, renameSync } from "fs";
 import { join as join14 } from "path";
 var LOCAL_FILES = ["backlog.jsonl", "backlog.db"];
 function backupLocalBacklogFiles(dir) {
   const moved = [];
   for (const name of LOCAL_FILES) {
     const path57 = join14(dir, ".assist", name);
-    if (existsSync15(path57)) {
+    if (existsSync16(path57)) {
       renameSync(path57, `${path57}.bak`);
       moved.push(`${name} \u2192 ${name}.bak`);
     }
@@ -3920,7 +4001,7 @@ async function loadAllItems(orm, origin) {
 }
 
 // src/commands/backlog/parseBacklogJsonl.ts
-import { readFileSync as readFileSync12 } from "fs";
+import { readFileSync as readFileSync13 } from "fs";
 
 // src/commands/backlog/types.ts
 import { z as z3 } from "zod";
@@ -3965,7 +4046,7 @@ var backlogFileSchema = z3.array(backlogItemSchema);
 
 // src/commands/backlog/parseBacklogJsonl.ts
 function parseBacklogJsonl(path57) {
-  const content = readFileSync12(path57, "utf8").trim();
+  const content = readFileSync13(path57, "utf8").trim();
   if (content.length === 0) return [];
   return content.split("\n").map((line) => line.trim()).filter(Boolean).map((line) => backlogItemSchema.parse(JSON.parse(line)));
 }
@@ -3988,7 +4069,7 @@ async function verifyImport(orm, origin, items2, imported) {
   }
 }
 async function migrateLocalBacklog(orm, dir, origin) {
-  if (!existsSync16(jsonlPath(dir))) return;
+  if (!existsSync17(jsonlPath(dir))) return;
   const existing = (await loadAllItems(orm, origin)).length;
   if (existing > 0) {
     const moved2 = backupLocalBacklogFiles(dir);
@@ -4027,7 +4108,7 @@ async function deleteItem(orm, id2) {
 }
 
 // src/commands/backlog/findBacklogUp.ts
-import { existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync18 } from "fs";
 import { dirname as dirname13, join as join16 } from "path";
 var BACKLOG_MARKERS = [
   join16(".assist", "backlog.db"),
@@ -4037,7 +4118,7 @@ var BACKLOG_MARKERS = [
 function findBacklogUp(startDir) {
   let current = startDir;
   while (current !== dirname13(current)) {
-    if (BACKLOG_MARKERS.some((marker) => existsSync17(join16(current, marker)))) {
+    if (BACKLOG_MARKERS.some((marker) => existsSync18(join16(current, marker)))) {
       return current;
     }
     current = dirname13(current);
@@ -4258,7 +4339,7 @@ async function prepareRun(id2) {
 }
 
 // src/commands/backlog/consumePause.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync15 } from "fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync6, unlinkSync as unlinkSync3, writeFileSync as writeFileSync15 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join17 } from "path";
 function getControlsDir() {
@@ -4282,7 +4363,7 @@ function clearPause(itemId) {
 }
 function consumePause(itemId) {
   const pausePath = getPausePath(itemId);
-  if (!existsSync18(pausePath)) return false;
+  if (!existsSync19(pausePath)) return false;
   try {
     unlinkSync3(pausePath);
   } catch {
@@ -4311,7 +4392,7 @@ Failed to launch Claude for ${context}: ${message}`)
 }
 
 // src/shared/emitActivity.ts
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync13, rmSync as rmSync2, writeFileSync as writeFileSync16 } from "fs";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync14, rmSync as rmSync2, writeFileSync as writeFileSync16 } from "fs";
 import { homedir as homedir7 } from "os";
 import { dirname as dirname14, join as join18 } from "path";
 import { z as z4 } from "zod";
@@ -4337,7 +4418,7 @@ function emitActivity(activity2) {
 }
 function readActivity(path57) {
   try {
-    return JSON.parse(readFileSync13(path57, "utf8"));
+    return JSON.parse(readFileSync14(path57, "utf8"));
   } catch {
     return void 0;
   }
@@ -4468,7 +4549,7 @@ function buildResumePrompt() {
 }
 
 // src/commands/backlog/resolvePhaseResult.ts
-import { existsSync as existsSync20, unlinkSync as unlinkSync4 } from "fs";
+import { existsSync as existsSync21, unlinkSync as unlinkSync4 } from "fs";
 import chalk39 from "chalk";
 
 // src/commands/backlog/handleIncompletePhase.ts
@@ -4488,7 +4569,7 @@ async function handleIncompletePhase() {
 }
 
 // src/commands/backlog/readSignal.ts
-import { existsSync as existsSync19, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync15 } from "fs";
 
 // src/commands/backlog/writeSignal.ts
 import { writeFileSync as writeFileSync17 } from "fs";
@@ -4507,9 +4588,9 @@ function writeSignal(event, data) {
 // src/commands/backlog/readSignal.ts
 function readSignal() {
   const path57 = getSignalPath();
-  if (!existsSync19(path57)) return void 0;
+  if (!existsSync20(path57)) return void 0;
   try {
-    return JSON.parse(readFileSync14(path57, "utf8"));
+    return JSON.parse(readFileSync15(path57, "utf8"));
   } catch {
     return void 0;
   }
@@ -4518,7 +4599,7 @@ function readSignal() {
 // src/commands/backlog/resolvePhaseResult.ts
 function cleanupSignal() {
   const statusPath = getSignalPath();
-  if (existsSync20(statusPath)) {
+  if (existsSync21(statusPath)) {
     unlinkSync4(statusPath);
   }
 }
@@ -4528,7 +4609,7 @@ async function isTerminalStatus(itemId) {
   return item?.status === "done" || item?.status === "wontdo";
 }
 async function resolvePhaseResult(phaseIndex, itemId) {
-  if (!existsSync20(getSignalPath())) {
+  if (!existsSync21(getSignalPath())) {
     if (await isTerminalStatus(itemId)) return -1;
     const action = await handleIncompletePhase();
     if (action === "abort") return -1;
@@ -4550,11 +4631,11 @@ Phase ${phaseNumber} completed.`));
 }
 
 // src/commands/backlog/watchForMarker.ts
-import { existsSync as existsSync21, unwatchFile, watchFile } from "fs";
+import { existsSync as existsSync22, unwatchFile, watchFile } from "fs";
 function watchForMarker(child, options2) {
   const statusPath = getSignalPath();
   watchFile(statusPath, { interval: 1e3 }, () => {
-    if (!existsSync21(statusPath)) return;
+    if (!existsSync22(statusPath)) return;
     const signal = readSignal();
     if (!signal) return;
     if (signal.event === "done" && !options2?.actOnDone) return;
@@ -5212,12 +5293,12 @@ function delay(ms) {
 
 // src/commands/sessions/web/handleRequest.ts
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync16 } from "fs";
+import { readFileSync as readFileSync17 } from "fs";
 import { createRequire as createRequire2 } from "module";
 
 // src/shared/createBundleHandler.ts
 import { createHash } from "crypto";
-import { readFileSync as readFileSync15 } from "fs";
+import { readFileSync as readFileSync16 } from "fs";
 import { dirname as dirname16, join as join20 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function createBundleHandler(importMetaUrl, bundlePath) {
@@ -5225,7 +5306,7 @@ function createBundleHandler(importMetaUrl, bundlePath) {
   let cache;
   return (req, res) => {
     if (!cache) {
-      const body = readFileSync15(join20(dir, bundlePath), "utf8");
+      const body = readFileSync16(join20(dir, bundlePath), "utf8");
       const etag = `"${createHash("sha256").update(body).digest("hex").slice(0, 16)}"`;
       cache = { body, etag };
     }
@@ -5972,7 +6053,7 @@ function createCssHandler(packageEntry) {
   return (req, res) => {
     if (!cache) {
       const resolved = require3.resolve(packageEntry);
-      const body = readFileSync16(resolved, "utf8");
+      const body = readFileSync17(resolved, "utf8");
       const etag = `"${createHash2("sha256").update(body).digest("hex").slice(0, 16)}"`;
       cache = { body, etag };
     }
@@ -6682,7 +6763,7 @@ import chalk59 from "chalk";
 
 // src/commands/backlog/add/shared.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { mkdtempSync, readFileSync as readFileSync17, unlinkSync as unlinkSync6, writeFileSync as writeFileSync18 } from "fs";
+import { mkdtempSync, readFileSync as readFileSync18, unlinkSync as unlinkSync6, writeFileSync as writeFileSync18 } from "fs";
 import { tmpdir } from "os";
 import { join as join21 } from "path";
 import enquirer6 from "enquirer";
@@ -6732,7 +6813,7 @@ function openEditor() {
     unlinkSync6(filePath);
     return void 0;
   }
-  const content = readFileSync17(filePath, "utf8").trim();
+  const content = readFileSync18(filePath, "utf8").trim();
   unlinkSync6(filePath);
   return content || void 0;
 }
@@ -8203,7 +8284,7 @@ function extractGraphqlQuery(args) {
 }
 
 // src/shared/loadCliReads.ts
-import { existsSync as existsSync22, readFileSync as readFileSync18, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync19, writeFileSync as writeFileSync19 } from "fs";
 import { dirname as dirname17, resolve as resolve8 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 var __filename3 = fileURLToPath4(import.meta.url);
@@ -8212,8 +8293,8 @@ function packageRoot() {
   return __dirname4;
 }
 function readLines(path57) {
-  if (!existsSync22(path57)) return [];
-  return readFileSync18(path57, "utf8").split("\n").filter((line) => line.trim() !== "");
+  if (!existsSync23(path57)) return [];
+  return readFileSync19(path57, "utf8").split("\n").filter((line) => line.trim() !== "");
 }
 var cachedReads;
 var cachedWrites;
@@ -8259,7 +8340,7 @@ function findCliWrite(command) {
 }
 
 // src/shared/readSettingsPerms.ts
-import { existsSync as existsSync23, readFileSync as readFileSync19 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync20 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join23 } from "path";
 function readSettingsPerms(key) {
@@ -8275,9 +8356,9 @@ function readSettingsPerms(key) {
   return entries;
 }
 function readPermissionArray(filePath, key) {
-  if (!existsSync23(filePath)) return [];
+  if (!existsSync24(filePath)) return [];
   try {
-    const data = JSON.parse(readFileSync19(filePath, "utf8"));
+    const data = JSON.parse(readFileSync20(filePath, "utf8"));
     const arr = data?.permissions?.[key];
     return Array.isArray(arr) ? arr.filter((e) => typeof e === "string") : [];
   } catch {
@@ -8539,7 +8620,7 @@ ${reasons.join("\n")}`);
 }
 
 // src/commands/permitCliReads/index.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync10, readFileSync as readFileSync20, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync25, mkdirSync as mkdirSync10, readFileSync as readFileSync21, writeFileSync as writeFileSync20 } from "fs";
 import { homedir as homedir10 } from "os";
 import { join as join24 } from "path";
 
@@ -8834,8 +8915,8 @@ function logPath(cli) {
 }
 function readCache(cli) {
   const path57 = logPath(cli);
-  if (!existsSync24(path57)) return void 0;
-  return readFileSync20(path57, "utf8");
+  if (!existsSync25(path57)) return void 0;
+  return readFileSync21(path57, "utf8");
 }
 function writeCache(cli, output) {
   const dir = join24(homedir10(), ".assist");
@@ -9647,7 +9728,7 @@ function registerConfig(program2) {
 }
 
 // src/commands/deploy/redirect.ts
-import { existsSync as existsSync25, readFileSync as readFileSync21, writeFileSync as writeFileSync21 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync22, writeFileSync as writeFileSync21 } from "fs";
 import chalk99 from "chalk";
 var TRAILING_SLASH_SCRIPT = `    <script>
       if (!window.location.pathname.endsWith('/')) {
@@ -9656,11 +9737,11 @@ var TRAILING_SLASH_SCRIPT = `    <script>
     </script>`;
 function redirect() {
   const indexPath = "index.html";
-  if (!existsSync25(indexPath)) {
+  if (!existsSync26(indexPath)) {
     console.log(chalk99.yellow("No index.html found"));
     return;
   }
-  const content = readFileSync21(indexPath, "utf8");
+  const content = readFileSync22(indexPath, "utf8");
   if (content.includes("window.location.pathname.endsWith('/')")) {
     console.log(chalk99.dim("Trailing slash script already present"));
     return;
@@ -9703,7 +9784,7 @@ import { execSync as execSync24 } from "child_process";
 import chalk100 from "chalk";
 
 // src/shared/getRepoName.ts
-import { existsSync as existsSync26, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync23 } from "fs";
 import { basename as basename3, join as join26 } from "path";
 function getRepoName() {
   const config = loadConfig();
@@ -9711,9 +9792,9 @@ function getRepoName() {
     return config.devlog.name;
   }
   const packageJsonPath = join26(process.cwd(), "package.json");
-  if (existsSync26(packageJsonPath)) {
+  if (existsSync27(packageJsonPath)) {
     try {
-      const content = readFileSync22(packageJsonPath, "utf8");
+      const content = readFileSync23(packageJsonPath, "utf8");
       const pkg = JSON.parse(content);
       if (pkg.name) {
         return pkg.name;
@@ -9725,7 +9806,7 @@ function getRepoName() {
 }
 
 // src/commands/devlog/loadDevlogEntries.ts
-import { readdirSync, readFileSync as readFileSync23 } from "fs";
+import { readdirSync, readFileSync as readFileSync24 } from "fs";
 import { join as join27 } from "path";
 var DEVLOG_DIR = join27(BLOG_REPO_ROOT, "src/content/devlog");
 function extractFrontmatter(content) {
@@ -9755,7 +9836,7 @@ function readDevlogFiles(callback) {
   try {
     const files = readdirSync(DEVLOG_DIR).filter((f) => f.endsWith(".md"));
     for (const file of files) {
-      const content = readFileSync23(join27(DEVLOG_DIR, file), "utf8");
+      const content = readFileSync24(join27(DEVLOG_DIR, file), "utf8");
       const parsed = parseFrontmatter(content, file);
       if (parsed) callback(parsed);
     }
@@ -10212,12 +10293,12 @@ import { join as join29 } from "path";
 import chalk107 from "chalk";
 
 // src/shared/findRepoRoot.ts
-import { existsSync as existsSync27 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import path22 from "path";
 function findRepoRoot(dir) {
   let current = dir;
   while (current !== path22.dirname(current)) {
-    if (existsSync27(path22.join(current, ".git"))) {
+    if (existsSync28(path22.join(current, ".git"))) {
       return current;
     }
     current = path22.dirname(current);
@@ -10283,11 +10364,11 @@ async function checkBuildLocksCommand() {
 }
 
 // src/commands/dotnet/buildTree.ts
-import { readFileSync as readFileSync24 } from "fs";
+import { readFileSync as readFileSync25 } from "fs";
 import path23 from "path";
 var PROJECT_REF_RE = /<ProjectReference\s+Include="([^"]+)"/g;
 function getProjectRefs(csprojPath) {
-  const content = readFileSync24(csprojPath, "utf8");
+  const content = readFileSync25(csprojPath, "utf8");
   const refs = [];
   for (const match of content.matchAll(PROJECT_REF_RE)) {
     refs.push(match[1].replace(/\\/g, "/"));
@@ -10304,7 +10385,7 @@ function buildTree(csprojPath, repoRoot, visited = /* @__PURE__ */ new Set()) {
   for (const ref of getProjectRefs(abs)) {
     const childAbs = path23.resolve(dir, ref);
     try {
-      readFileSync24(childAbs);
+      readFileSync25(childAbs);
       node.children.push(buildTree(childAbs, repoRoot, visited));
     } catch {
       node.children.push({
@@ -10329,7 +10410,7 @@ function collectAllDeps(node) {
 }
 
 // src/commands/dotnet/findContainingSolutions.ts
-import { readdirSync as readdirSync3, readFileSync as readFileSync25, statSync as statSync2 } from "fs";
+import { readdirSync as readdirSync3, readFileSync as readFileSync26, statSync as statSync2 } from "fs";
 import path24 from "path";
 function findSlnFiles(dir, maxDepth, depth = 0) {
   if (depth > maxDepth) return [];
@@ -10364,7 +10445,7 @@ function findContainingSolutions(csprojPath, repoRoot) {
   const pattern2 = new RegExp(`[\\\\"/]${escapeRegex(csprojBasename)}"`);
   for (const sln of slnFiles) {
     try {
-      const content = readFileSync25(sln, "utf8");
+      const content = readFileSync26(sln, "utf8");
       if (pattern2.test(content)) {
         matches.push(path24.relative(repoRoot, sln));
       }
@@ -10428,12 +10509,12 @@ function printJson(tree, totalCount, solutions) {
 }
 
 // src/commands/dotnet/resolveCsproj.ts
-import { existsSync as existsSync28 } from "fs";
+import { existsSync as existsSync29 } from "fs";
 import path25 from "path";
 import chalk109 from "chalk";
 function resolveCsproj(csprojPath) {
   const resolved = path25.resolve(csprojPath);
-  if (!existsSync28(resolved)) {
+  if (!existsSync29(resolved)) {
     console.error(chalk109.red(`File not found: ${resolved}`));
     process.exit(1);
   }
@@ -10601,7 +10682,7 @@ function filterIssues(issues, all, cliOnly, cliSuppress) {
 }
 
 // src/commands/dotnet/resolveSolution.ts
-import { existsSync as existsSync29 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import path26 from "path";
 import chalk113 from "chalk";
 
@@ -10642,7 +10723,7 @@ function findSolution() {
 function resolveSolution(sln) {
   if (sln) {
     const resolved = path26.resolve(sln);
-    if (!existsSync29(resolved)) {
+    if (!existsSync30(resolved)) {
       console.error(chalk113.red(`Solution file not found: ${resolved}`));
       process.exit(1);
     }
@@ -10682,7 +10763,7 @@ function parseInspectReport(json) {
 
 // src/commands/dotnet/runInspectCode.ts
 import { execSync as execSync28 } from "child_process";
-import { existsSync as existsSync30, readFileSync as readFileSync26, unlinkSync as unlinkSync7 } from "fs";
+import { existsSync as existsSync31, readFileSync as readFileSync27, unlinkSync as unlinkSync7 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
 import path27 from "path";
 import chalk114 from "chalk";
@@ -10713,11 +10794,11 @@ function runInspectCode(slnPath, include, swea) {
     console.error(chalk114.red("jb inspectcode failed"));
     process.exit(1);
   }
-  if (!existsSync30(reportPath)) {
+  if (!existsSync31(reportPath)) {
     console.error(chalk114.red("Report file not generated"));
     process.exit(1);
   }
-  const xml = readFileSync26(reportPath, "utf8");
+  const xml = readFileSync27(reportPath, "utf8");
   unlinkSync7(reportPath);
   return xml;
 }
@@ -11058,9 +11139,9 @@ async function countPendingHandovers(orm, origin) {
 
 // src/commands/handover/migrateDiskHandovers.ts
 import {
-  existsSync as existsSync31,
+  existsSync as existsSync32,
   readdirSync as readdirSync5,
-  readFileSync as readFileSync27,
+  readFileSync as readFileSync28,
   rmSync as rmSync3,
   statSync as statSync3
 } from "fs";
@@ -11113,7 +11194,7 @@ function summariseHandoverContent(content) {
 
 // src/commands/handover/migrateDiskHandovers.ts
 function collectMarkdown(dir) {
-  if (!existsSync31(dir)) return [];
+  if (!existsSync32(dir)) return [];
   const out = [];
   for (const entry of readdirSync5(dir, { withFileTypes: true })) {
     const full = join34(dir, entry.name);
@@ -11123,7 +11204,7 @@ function collectMarkdown(dir) {
   return out;
 }
 async function migrateFile(orm, origin, file, createdAt) {
-  const content = readFileSync27(file, "utf8");
+  const content = readFileSync28(file, "utf8");
   await saveHandover(orm, {
     origin,
     summary: summariseHandoverContent(content),
@@ -11140,7 +11221,7 @@ async function migrateDiskHandovers(orm, origin, cwd = process.cwd()) {
     migrated++;
   }
   const handoverPath = getHandoverPath(cwd);
-  if (existsSync31(handoverPath)) {
+  if (existsSync32(handoverPath)) {
     await migrateFile(orm, origin, handoverPath, statSync3(handoverPath).mtime);
     migrated++;
   }
@@ -11385,7 +11466,7 @@ function acceptanceCriteria(issueKey) {
 import { execSync as execSync31 } from "child_process";
 
 // src/shared/loadJson.ts
-import { existsSync as existsSync32, mkdirSync as mkdirSync11, readFileSync as readFileSync28, writeFileSync as writeFileSync24 } from "fs";
+import { existsSync as existsSync33, mkdirSync as mkdirSync11, readFileSync as readFileSync29, writeFileSync as writeFileSync24 } from "fs";
 import { homedir as homedir12 } from "os";
 import { join as join35 } from "path";
 function getStoreDir() {
@@ -11396,9 +11477,9 @@ function getStorePath(filename) {
 }
 function loadJson(filename) {
   const path57 = getStorePath(filename);
-  if (existsSync32(path57)) {
+  if (existsSync33(path57)) {
     try {
-      return JSON.parse(readFileSync28(path57, "utf8"));
+      return JSON.parse(readFileSync29(path57, "utf8"));
     } catch {
       return {};
     }
@@ -11407,7 +11488,7 @@ function loadJson(filename) {
 }
 function saveJson(filename, data) {
   const dir = getStoreDir();
-  if (!existsSync32(dir)) {
+  if (!existsSync33(dir)) {
     mkdirSync11(dir, { recursive: true });
   }
   writeFileSync24(getStorePath(filename), JSON.stringify(data, null, 2));
@@ -11554,7 +11635,7 @@ import { resolve as resolve11 } from "path";
 import chalk125 from "chalk";
 
 // src/commands/mermaid/exportFile.ts
-import { readFileSync as readFileSync29, writeFileSync as writeFileSync25 } from "fs";
+import { readFileSync as readFileSync30, writeFileSync as writeFileSync25 } from "fs";
 import { basename as basename6, extname, resolve as resolve10 } from "path";
 import chalk124 from "chalk";
 
@@ -11580,7 +11661,7 @@ async function renderBlock(krokiUrl, source) {
 
 // src/commands/mermaid/exportFile.ts
 async function exportFile(file, outDir, krokiUrl, onlyIndex) {
-  const content = readFileSync29(file, "utf8");
+  const content = readFileSync30(file, "utf8");
   const blocks = extractMermaidBlocks(content);
   const stem = basename6(file, extname(file));
   if (onlyIndex !== void 0) {
@@ -11864,7 +11945,7 @@ import { join as join40 } from "path";
 import chalk128 from "chalk";
 
 // src/commands/netcap/extractPostsFromCapture.ts
-import { readFileSync as readFileSync30 } from "fs";
+import { readFileSync as readFileSync31 } from "fs";
 
 // src/commands/netcap/parseRscRows.ts
 var isRscRef = (v) => typeof v === "string" && /^\$[0-9a-fL@]/.test(v);
@@ -12260,7 +12341,7 @@ function extractVoyagerPosts(body) {
 
 // src/commands/netcap/extractPostsFromCapture.ts
 function captureEntries(captureFile) {
-  const lines = readFileSync30(captureFile, "utf8").split("\n").filter(Boolean);
+  const lines = readFileSync31(captureFile, "utf8").split("\n").filter(Boolean);
   const entries = [];
   for (const line of lines) {
     let entry;
@@ -12744,7 +12825,7 @@ import { tmpdir as tmpdir5 } from "os";
 import { join as join42 } from "path";
 
 // src/commands/prs/loadCommentsCache.ts
-import { existsSync as existsSync33, readFileSync as readFileSync31, unlinkSync as unlinkSync9 } from "fs";
+import { existsSync as existsSync34, readFileSync as readFileSync32, unlinkSync as unlinkSync9 } from "fs";
 import { join as join41 } from "path";
 import { parse as parse2 } from "yaml";
 function getCachePath(prNumber) {
@@ -12752,15 +12833,15 @@ function getCachePath(prNumber) {
 }
 function loadCommentsCache(prNumber) {
   const cachePath = getCachePath(prNumber);
-  if (!existsSync33(cachePath)) {
+  if (!existsSync34(cachePath)) {
     return null;
   }
-  const content = readFileSync31(cachePath, "utf8");
+  const content = readFileSync32(cachePath, "utf8");
   return parse2(content);
 }
 function deleteCommentsCache(prNumber) {
   const cachePath = getCachePath(prNumber);
-  if (existsSync33(cachePath)) {
+  if (existsSync34(cachePath)) {
     unlinkSync9(cachePath);
     console.log("No more unresolved line comments. Cache dropped.");
   }
@@ -12860,7 +12941,7 @@ function fixed(commentId, sha) {
 }
 
 // src/commands/prs/listComments/index.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync13, writeFileSync as writeFileSync29 } from "fs";
+import { existsSync as existsSync35, mkdirSync as mkdirSync13, writeFileSync as writeFileSync29 } from "fs";
 import { join as join44 } from "path";
 import { stringify } from "yaml";
 
@@ -12986,7 +13067,7 @@ function printComments2(result) {
 // src/commands/prs/listComments/index.ts
 function writeCommentsCache(prNumber, comments3) {
   const assistDir = join44(process.cwd(), ".assist");
-  if (!existsSync34(assistDir)) {
+  if (!existsSync35(assistDir)) {
     mkdirSync13(assistDir, { recursive: true });
   }
   const cacheData = {
@@ -15690,7 +15771,7 @@ function gatherContext() {
 }
 
 // src/commands/review/postReviewToPr.ts
-import { readFileSync as readFileSync32 } from "fs";
+import { readFileSync as readFileSync33 } from "fs";
 
 // src/commands/review/parseFindings.ts
 var SEVERITIES = ["blocker", "major", "minor", "nit"];
@@ -16000,7 +16081,7 @@ async function confirmPost(prNumber, count6, options2) {
 async function postReviewToPr(synthesisPath, options2) {
   const prInfo = fetchPrDiffInfo();
   const prNumber = prInfo.prNumber;
-  const markdown = readFileSync32(synthesisPath, "utf8");
+  const markdown = readFileSync33(synthesisPath, "utf8");
   const findings = parseFindings(markdown);
   if (findings.length === 0) {
     console.log("Synthesis contains no findings; nothing to post.");
@@ -16082,10 +16163,10 @@ async function handlePostSynthesis(synthesisPath, options2) {
 }
 
 // src/commands/review/prepareReviewDir.ts
-import { existsSync as existsSync35, mkdirSync as mkdirSync14, unlinkSync as unlinkSync12, writeFileSync as writeFileSync30 } from "fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync14, unlinkSync as unlinkSync12, writeFileSync as writeFileSync30 } from "fs";
 function clearReviewFiles(paths) {
   for (const path57 of [paths.claudePath, paths.codexPath, paths.synthesisPath]) {
-    if (existsSync35(path57)) unlinkSync12(path57);
+    if (existsSync36(path57)) unlinkSync12(path57);
   }
 }
 function prepareReviewDir(paths, requestBody, force) {
@@ -16370,7 +16451,7 @@ function printReviewerFailures(results) {
 }
 
 // src/commands/review/runAndSynthesise.ts
-import { existsSync as existsSync37, unlinkSync as unlinkSync14 } from "fs";
+import { existsSync as existsSync38, unlinkSync as unlinkSync14 } from "fs";
 
 // src/commands/review/buildReviewerStdin.ts
 var REVIEW_PROMPT = `You are acting as a reviewer for a proposed code change made by another engineer. The full review request \u2014 branch, base, changed files, and unified diff \u2014 is in the request file whose absolute path is given below.
@@ -16790,7 +16871,7 @@ function resolveClaude(args) {
 }
 
 // src/commands/review/runCodexReviewer.ts
-import { existsSync as existsSync36, unlinkSync as unlinkSync13 } from "fs";
+import { existsSync as existsSync37, unlinkSync as unlinkSync13 } from "fs";
 
 // src/commands/review/parseCodexEvent.ts
 function isItemStarted(value) {
@@ -16842,7 +16923,7 @@ async function runCodexReviewer(spec) {
       reportReviewerToolUse(spec.name, event, spinner);
     }
   });
-  if (result.exitCode !== 0 && existsSync36(spec.outputPath)) {
+  if (result.exitCode !== 0 && existsSync37(spec.outputPath)) {
     unlinkSync13(spec.outputPath);
   }
   return finaliseReviewerRun({ ...spec, command }, spinner, result);
@@ -16884,7 +16965,7 @@ async function runReviewers(reviewDir, claudePath, codexPath, stdinPrompt, optio
 }
 
 // src/commands/review/synthesise.ts
-import { readFileSync as readFileSync33 } from "fs";
+import { readFileSync as readFileSync34 } from "fs";
 
 // src/commands/review/buildSynthesisStdin.ts
 var SYNTHESIS_PROMPT = `You are consolidating two independent code reviews of the same change. The original review request is in request.md. The two reviews are in claude.md and codex.md in the current working directory.
@@ -16940,7 +17021,7 @@ Files:
 
 // src/commands/review/synthesise.ts
 function printSummary2(synthesisPath) {
-  const markdown = readFileSync33(synthesisPath, "utf8");
+  const markdown = readFileSync34(synthesisPath, "utf8");
   console.log("");
   console.log(buildReviewSummary(markdown));
   console.log("");
@@ -16988,7 +17069,7 @@ async function runAndSynthesise(args) {
     console.error("Both reviewers failed; skipping synthesis.");
     return { ok: false, failures };
   }
-  if (anyFresh && existsSync37(paths.synthesisPath)) {
+  if (anyFresh && existsSync38(paths.synthesisPath)) {
     unlinkSync14(paths.synthesisPath);
   }
   const synthesisResult = await synthesise(paths, { multi });
@@ -17767,7 +17848,7 @@ function registerSql(program2) {
 }
 
 // src/commands/transcript/shared.ts
-import { existsSync as existsSync38, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
+import { existsSync as existsSync39, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
 import { basename as basename8, join as join46, relative as relative2 } from "path";
 import * as readline2 from "readline";
 var DATE_PREFIX_REGEX = /^\d{4}-\d{2}-\d{2}/;
@@ -17783,7 +17864,7 @@ function isValidDatePrefix(filename) {
   return DATE_PREFIX_REGEX.test(filename);
 }
 function collectFiles(dir, extension) {
-  if (!existsSync38(dir)) return [];
+  if (!existsSync39(dir)) return [];
   const results = [];
   for (const entry of readdirSync7(dir)) {
     const fullPath = join46(dir, entry);
@@ -17880,7 +17961,7 @@ async function configure() {
 }
 
 // src/commands/transcript/format/index.ts
-import { existsSync as existsSync40 } from "fs";
+import { existsSync as existsSync41 } from "fs";
 
 // src/commands/transcript/format/fixInvalidDatePrefixes/index.ts
 import { dirname as dirname22, join as join48 } from "path";
@@ -17954,7 +18035,7 @@ async function fixInvalidDatePrefixes(vttFiles) {
 }
 
 // src/commands/transcript/format/processVttFile/index.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync15, readFileSync as readFileSync34, writeFileSync as writeFileSync32 } from "fs";
+import { existsSync as existsSync40, mkdirSync as mkdirSync15, readFileSync as readFileSync35, writeFileSync as writeFileSync32 } from "fs";
 import { basename as basename9, dirname as dirname23, join as join49 } from "path";
 
 // src/commands/transcript/cleanText.ts
@@ -18179,7 +18260,7 @@ function logSkipped(relativeDir, mdFile) {
   return "skipped";
 }
 function ensureDirectory(dir, label2) {
-  if (!existsSync39(dir)) {
+  if (!existsSync40(dir)) {
     mkdirSync15(dir, { recursive: true });
     console.log(`Created ${label2}: ${dir}`);
   }
@@ -18202,7 +18283,7 @@ function logReduction(cueCount, messageCount) {
 }
 function readAndParseCues(inputPath) {
   console.log(`Reading: ${inputPath}`);
-  return processCues(readFileSync34(inputPath, "utf8"));
+  return processCues(readFileSync35(inputPath, "utf8"));
 }
 function writeFormatted(outputPath, content) {
   writeFileSync32(outputPath, content, "utf8");
@@ -18215,7 +18296,7 @@ function convertVttToMarkdown(inputPath, outputPath) {
   logReduction(cues.length, chatMessages.length);
 }
 function tryProcessVtt(vttFile, paths) {
-  if (existsSync39(paths.outputPath))
+  if (existsSync40(paths.outputPath))
     return logSkipped(paths.relativeDir, paths.mdFile);
   convertVttToMarkdown(vttFile.absolutePath, paths.outputPath);
   return "processed";
@@ -18241,7 +18322,7 @@ function processAllFiles(vttFiles, transcriptsDir) {
   logSummary(counts);
 }
 function requireVttDir(vttDir) {
-  if (!existsSync40(vttDir)) {
+  if (!existsSync41(vttDir)) {
     console.error(`VTT directory not found: ${vttDir}`);
     process.exit(1);
   }
@@ -18273,14 +18354,14 @@ async function format() {
 }
 
 // src/commands/transcript/summarise/index.ts
-import { existsSync as existsSync42 } from "fs";
+import { existsSync as existsSync43 } from "fs";
 import { basename as basename10, dirname as dirname25, join as join51, relative as relative3 } from "path";
 
 // src/commands/transcript/summarise/processStagedFile/index.ts
 import {
-  existsSync as existsSync41,
+  existsSync as existsSync42,
   mkdirSync as mkdirSync16,
-  readFileSync as readFileSync35,
+  readFileSync as readFileSync36,
   renameSync as renameSync3,
   rmSync as rmSync4
 } from "fs";
@@ -18315,7 +18396,7 @@ function validateStagedContent(filename, content) {
 // src/commands/transcript/summarise/processStagedFile/index.ts
 var STAGING_DIR = join50(process.cwd(), ".assist", "transcript");
 function processStagedFile() {
-  if (!existsSync41(STAGING_DIR)) {
+  if (!existsSync42(STAGING_DIR)) {
     return false;
   }
   const stagedFiles = findMdFilesRecursive(STAGING_DIR);
@@ -18324,7 +18405,7 @@ function processStagedFile() {
   }
   const { transcriptsDir, summaryDir } = getTranscriptConfig();
   const stagedFile = stagedFiles[0];
-  const content = readFileSync35(stagedFile.absolutePath, "utf8");
+  const content = readFileSync36(stagedFile.absolutePath, "utf8");
   validateStagedContent(stagedFile.filename, content);
   const stagedBaseName = getTranscriptBaseName(stagedFile.filename);
   const transcriptFiles = findMdFilesRecursive(transcriptsDir);
@@ -18339,7 +18420,7 @@ function processStagedFile() {
   }
   const destPath = join50(summaryDir, matchingTranscript.relativePath);
   const destDir = dirname24(destPath);
-  if (!existsSync41(destDir)) {
+  if (!existsSync42(destDir)) {
     mkdirSync16(destDir, { recursive: true });
   }
   renameSync3(stagedFile.absolutePath, destPath);
@@ -18366,7 +18447,7 @@ function buildSummaryIndex(summaryDir) {
 function summarise2() {
   processStagedFile();
   const { transcriptsDir, summaryDir } = getTranscriptConfig();
-  if (!existsSync42(transcriptsDir)) {
+  if (!existsSync43(transcriptsDir)) {
     console.log("No transcripts directory found.");
     return;
   }
@@ -18413,6 +18494,13 @@ function registerTranscript(program2) {
 }
 
 // src/commands/registerVerify.ts
+function runScope(scope, options2) {
+  if (scope && scope !== "all") {
+    console.error(`Unknown scope: "${scope}". Use "all" to run all checks.`);
+    process.exit(1);
+  }
+  run({ ...options2, all: scope === "all" });
+}
 function registerVerify(program2) {
   const verifyCommand = program2.command("verify").description("Run all verify:* commands in parallel").argument(
     "[scope]",
@@ -18420,15 +18508,7 @@ function registerVerify(program2) {
   ).option(
     "--measure",
     "Print a summary table of each command's status and duration after the run"
-  ).option("--verbose", "Show all output (bypass CLAUDECODE suppression)").action((scope, options2) => {
-    if (scope && scope !== "all") {
-      console.error(
-        `Unknown scope: "${scope}". Use "all" to run all checks.`
-      );
-      process.exit(1);
-    }
-    run({ ...options2, all: scope === "all" });
-  });
+  ).option("--verbose", "Show all output (bypass CLAUDECODE suppression)").action(runScope);
   verifyCommand.command("list").description("List configured verify commands").action(list);
   verifyCommand.command("init").description("Add verify scripts to a project").option(
     "--package-json",
@@ -18437,6 +18517,9 @@ function registerVerify(program2) {
   verifyCommand.command("hardcoded-colors").description("Check for hardcoded hex colors in src/").action(hardcodedColors);
   verifyCommand.command("comment-policy").description("Check for undocumented comments added on changed lines").action(commentPolicy);
   verifyCommand.command("no-venv").description("Check that no venv folders exist in the repo").action(noVenv);
+  verifyCommand.command("settings-guard").description(
+    "Check that claude/settings.json permission lists contain no assist references"
+  ).action(settingsGuard);
 }
 
 // src/commands/voice/devices.ts
@@ -18477,14 +18560,14 @@ function devices() {
 }
 
 // src/commands/voice/logs.ts
-import { existsSync as existsSync43, readFileSync as readFileSync36 } from "fs";
+import { existsSync as existsSync44, readFileSync as readFileSync37 } from "fs";
 function logs(options2) {
-  if (!existsSync43(voicePaths.log)) {
+  if (!existsSync44(voicePaths.log)) {
     console.log("No voice log file found");
     return;
   }
   const count6 = Number.parseInt(options2.lines ?? "150", 10);
-  const content = readFileSync36(voicePaths.log, "utf8").trim();
+  const content = readFileSync37(voicePaths.log, "utf8").trim();
   if (!content) {
     console.log("Voice log is empty");
     return;
@@ -18511,7 +18594,7 @@ import { join as join55 } from "path";
 
 // src/commands/voice/checkLockFile.ts
 import { execSync as execSync49 } from "child_process";
-import { existsSync as existsSync44, mkdirSync as mkdirSync17, readFileSync as readFileSync37, writeFileSync as writeFileSync33 } from "fs";
+import { existsSync as existsSync45, mkdirSync as mkdirSync17, readFileSync as readFileSync38, writeFileSync as writeFileSync33 } from "fs";
 import { join as join54 } from "path";
 function isProcessAlive2(pid) {
   try {
@@ -18523,9 +18606,9 @@ function isProcessAlive2(pid) {
 }
 function checkLockFile() {
   const lockFile = getLockFile();
-  if (!existsSync44(lockFile)) return;
+  if (!existsSync45(lockFile)) return;
   try {
-    const lock = JSON.parse(readFileSync37(lockFile, "utf8"));
+    const lock = JSON.parse(readFileSync38(lockFile, "utf8"));
     if (lock.pid && isProcessAlive2(lock.pid)) {
       console.error(
         `Voice daemon already running (PID ${lock.pid}, env: ${lock.env}). Stop it first with: assist voice stop`
@@ -18536,7 +18619,7 @@ function checkLockFile() {
   }
 }
 function bootstrapVenv() {
-  if (existsSync44(getVenvPython())) return;
+  if (existsSync45(getVenvPython())) return;
   console.log("Setting up Python environment...");
   const pythonDir = getPythonDir();
   execSync49(
@@ -18627,7 +18710,7 @@ function start2(options2) {
 }
 
 // src/commands/voice/status.ts
-import { existsSync as existsSync45, readFileSync as readFileSync38 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync39 } from "fs";
 function isProcessAlive3(pid) {
   try {
     process.kill(pid, 0);
@@ -18637,16 +18720,16 @@ function isProcessAlive3(pid) {
   }
 }
 function readRecentLogs(count6) {
-  if (!existsSync45(voicePaths.log)) return [];
-  const lines = readFileSync38(voicePaths.log, "utf8").trim().split("\n");
+  if (!existsSync46(voicePaths.log)) return [];
+  const lines = readFileSync39(voicePaths.log, "utf8").trim().split("\n");
   return lines.slice(-count6);
 }
 function status() {
-  if (!existsSync45(voicePaths.pid)) {
+  if (!existsSync46(voicePaths.pid)) {
     console.log("Voice daemon: not running (no PID file)");
     return;
   }
-  const pid = Number.parseInt(readFileSync38(voicePaths.pid, "utf8").trim(), 10);
+  const pid = Number.parseInt(readFileSync39(voicePaths.pid, "utf8").trim(), 10);
   const alive = isProcessAlive3(pid);
   console.log(`Voice daemon: ${alive ? "running" : "dead"} (PID ${pid})`);
   const recent = readRecentLogs(5);
@@ -18665,13 +18748,13 @@ function status() {
 }
 
 // src/commands/voice/stop.ts
-import { existsSync as existsSync46, readFileSync as readFileSync39, unlinkSync as unlinkSync15 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync40, unlinkSync as unlinkSync15 } from "fs";
 function stop2() {
-  if (!existsSync46(voicePaths.pid)) {
+  if (!existsSync47(voicePaths.pid)) {
     console.log("Voice daemon is not running (no PID file)");
     return;
   }
-  const pid = Number.parseInt(readFileSync39(voicePaths.pid, "utf8").trim(), 10);
+  const pid = Number.parseInt(readFileSync40(voicePaths.pid, "utf8").trim(), 10);
   try {
     process.kill(pid, "SIGTERM");
     console.log(`Sent SIGTERM to voice daemon (PID ${pid})`);
@@ -18684,7 +18767,7 @@ function stop2() {
   }
   try {
     const lockFile = getLockFile();
-    if (existsSync46(lockFile)) unlinkSync15(lockFile);
+    if (existsSync47(lockFile)) unlinkSync15(lockFile);
   } catch {
   }
   console.log("Voice daemon stopped");
@@ -18862,7 +18945,7 @@ async function auth() {
 
 // src/commands/roam/postRoamActivity.ts
 import { execFileSync as execFileSync7 } from "child_process";
-import { readdirSync as readdirSync8, readFileSync as readFileSync40, statSync as statSync6 } from "fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync41, statSync as statSync6 } from "fs";
 import { join as join57 } from "path";
 function findPortFile(roamDir) {
   let entries;
@@ -18888,7 +18971,7 @@ function postRoamActivity(app, event) {
   if (!portFile) return;
   let port;
   try {
-    port = readFileSync40(portFile, "utf8").trim();
+    port = readFileSync41(portFile, "utf8").trim();
   } catch {
     return;
   }
@@ -19030,7 +19113,7 @@ function runPreCommands(pre, cwd) {
 
 // src/commands/run/spawnRunCommand.ts
 import { execFileSync as execFileSync8, spawn as spawn8 } from "child_process";
-import { existsSync as existsSync47 } from "fs";
+import { existsSync as existsSync48 } from "fs";
 import { dirname as dirname27, join as join58, resolve as resolve13 } from "path";
 function resolveCommand2(command) {
   if (process.platform !== "win32" || command !== "bash") return command;
@@ -19038,7 +19121,7 @@ function resolveCommand2(command) {
     const gitPath = execFileSync8("where", ["git"], { encoding: "utf8" }).trim().split("\r\n")[0];
     const gitRoot = resolve13(dirname27(gitPath), "..");
     const gitBash = join58(gitRoot, "bin", "bash.exe");
-    if (existsSync47(gitBash)) return gitBash;
+    if (existsSync48(gitBash)) return gitBash;
   } catch {
   }
   return command;
@@ -19249,7 +19332,7 @@ function link2() {
 }
 
 // src/commands/run/remove.ts
-import { existsSync as existsSync48, unlinkSync as unlinkSync16 } from "fs";
+import { existsSync as existsSync49, unlinkSync as unlinkSync16 } from "fs";
 import { join as join60 } from "path";
 function findRemoveIndex() {
   const idx = process.argv.indexOf("remove");
@@ -19266,7 +19349,7 @@ function parseRemoveName() {
 }
 function deleteCommandFile(name) {
   const filePath = join60(".claude", "commands", `${name}.md`);
-  if (existsSync48(filePath)) {
+  if (existsSync49(filePath)) {
     unlinkSync16(filePath);
     console.log(`Deleted command file: ${filePath}`);
   }
@@ -19305,7 +19388,7 @@ function registerRun(program2) {
 
 // src/commands/screenshot/index.ts
 import { execSync as execSync51 } from "child_process";
-import { existsSync as existsSync49, mkdirSync as mkdirSync21, unlinkSync as unlinkSync17, writeFileSync as writeFileSync36 } from "fs";
+import { existsSync as existsSync50, mkdirSync as mkdirSync21, unlinkSync as unlinkSync17, writeFileSync as writeFileSync36 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
 import { join as join61, resolve as resolve15 } from "path";
 import chalk173 from "chalk";
@@ -19437,7 +19520,7 @@ Write-Output $OutputPath
 
 // src/commands/screenshot/index.ts
 function buildOutputPath(outputDir, processName) {
-  if (!existsSync49(outputDir)) {
+  if (!existsSync50(outputDir)) {
     mkdirSync21(outputDir, { recursive: true });
   }
   const timestamp4 = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
@@ -19521,7 +19604,7 @@ function applyLine(result, pending, line) {
 }
 
 // src/commands/sessions/daemon/reportStolenSocket.ts
-import { readFileSync as readFileSync41 } from "fs";
+import { readFileSync as readFileSync42 } from "fs";
 function reportStolenSocket(socketPid) {
   if (!socketPid) return;
   const filePid = readPidFile();
@@ -19533,7 +19616,7 @@ function reportStolenSocket(socketPid) {
 function readPidFile() {
   try {
     const pid = Number.parseInt(
-      readFileSync41(daemonPaths.pid, "utf8").trim(),
+      readFileSync42(daemonPaths.pid, "utf8").trim(),
       10
     );
     return Number.isInteger(pid) ? pid : void 0;
@@ -19819,7 +19902,7 @@ var ClientHub = class extends Set {
 import * as pty from "node-pty";
 
 // src/commands/sessions/daemon/ensureSpawnHelperExecutable.ts
-import { chmodSync, existsSync as existsSync50, statSync as statSync7 } from "fs";
+import { chmodSync, existsSync as existsSync51, statSync as statSync7 } from "fs";
 import { createRequire as createRequire3 } from "module";
 import path49 from "path";
 var require4 = createRequire3(import.meta.url);
@@ -19834,7 +19917,7 @@ function ensureSpawnHelperExecutable() {
     `${process.platform}-${process.arch}`,
     "spawn-helper"
   );
-  if (!existsSync50(helper)) return;
+  if (!existsSync51(helper)) return;
   const mode = statSync7(helper).mode;
   if ((mode & 73) === 0) chmodSync(helper, mode | 493);
 }
@@ -20194,7 +20277,7 @@ function resumeSession(id2, sessionId, cwd, name) {
 }
 
 // src/commands/sessions/daemon/watchActivity.ts
-import { existsSync as existsSync51, mkdirSync as mkdirSync22, watch } from "fs";
+import { existsSync as existsSync52, mkdirSync as mkdirSync22, watch } from "fs";
 import { dirname as dirname28 } from "path";
 
 // src/commands/sessions/daemon/applyReviewPause.ts
@@ -20236,7 +20319,7 @@ function watchActivity(session, notify2) {
     if (timer) clearTimeout(timer);
     timer = setTimeout(read, DEBOUNCE_MS);
   });
-  if (existsSync51(path57)) read();
+  if (existsSync52(path57)) read();
 }
 function refreshActivity(session) {
   if (session.commandType !== "assist" || !session.cwd) return;
@@ -21394,7 +21477,7 @@ function handleConnection(socket, manager) {
 import { unlinkSync as unlinkSync18, writeFileSync as writeFileSync37 } from "fs";
 
 // src/commands/sessions/daemon/startPidFileWatchdog.ts
-import { readFileSync as readFileSync42 } from "fs";
+import { readFileSync as readFileSync43 } from "fs";
 var WATCHDOG_INTERVAL_MS = 5e3;
 function startPidFileWatchdog(onLost, intervalMs = WATCHDOG_INTERVAL_MS) {
   const timer = setInterval(() => {
@@ -21405,7 +21488,7 @@ function startPidFileWatchdog(onLost, intervalMs = WATCHDOG_INTERVAL_MS) {
 }
 function ownsPidFile() {
   try {
-    return readFileSync42(daemonPaths.pid, "utf8").trim() === String(process.pid);
+    return readFileSync43(daemonPaths.pid, "utf8").trim() === String(process.pid);
   } catch {
     return false;
   }