@vibe-commit/capture 0.10.0 → 0.11.0

package/README.md

@@ -356,6 +356,16 @@ request; a waiting revoke row is still retried.
 *Files.* `grants.json` gains `pending` and `synced_at` and stays written only by the commands, never by a hook; a 0.7.0
 command that rewrites it keeps both. `grants-account.json` is new, and the hooks' file. `pending-revoke.json` is new and
 holds a bearer token while a revoke is waiting.
+### Known limits of the background uploader
+
+These are understood and left as they are for now; each fails in the safe direction.
+
+- *One repository's persistent failure holds the session's other repositories.* A session that goes to several repositories is delivered in order; if the server keeps failing for one of them the others wait behind it. The server is shared, so this is rare.
+- *`finalize` treats turns recorded for another server or credential as done* and sends the rest itself; the background process for that other server or credential sends its own.
+- *The lock's stale-reclaim has a narrow race* (two processes judging the same dead holder at once). It predates the background process and is unchanged.
+- *A session whose newest recorded turn belongs to another server or credential is not finished by the idle drain.* A session takes its identity from its last recorded turn.
+- *A turn with more than 200 sub-agent files is sent as its files are when the background process gets to it.* Each turn's upload normally sends a sub-agent file only up to the size it had when the turn ended. Past 200 files (or when the recorded line cannot hold their sizes) the turn is sent as it was before that limit existed, so a sub-agent file written in a later turn can change what is withheld from the earlier turn's copy. It can only make the copy withhold more, never less.
+
 ### Commit file names, and turn numbers (0.10.0)
 
 From 0.10.0 the commits a session makes also send the path of every file they changed, for the repositories you chose and for no
@@ -504,6 +514,20 @@ it, so turns that ran in other folders can appear in its copy. A session run fro
 calls name files inside a repository you chose, and it never gets a folder target. The client does not read its transcripts to look for
 repositories. Backfill does not offer or upload Cursor sessions.
 
+### Uploading happens in a short-lived background process
+
+*What changed.* A hook no longer waits for the network. On each `Stop`, `PreCompact` or `SessionEnd` it writes one line to a local file under `~/.vibecommit/state/notices/_session-targets/` (the session, how far its transcript has grown, and a few facts about the moment: the working folder, the agent, which credential and server) and returns without waiting for the network. A small background process of the same program (`vibecommit __upload-worker`, not a command you run) does the uploading. It is started by the hook if none is running, sends one request at a time, waits as long as the request took (not less than a quarter of a second, not more than 30 seconds) before the next, and exits when nothing is left to send. There is one per machine and credential.
+
+*What this means for you.* The upload can finish after your agent has exited, and one such process may live up to an hour. Whether an agent's own runner ends a background process when the agent quits is not something this client controls and has not been measured; if it does, the line stays on disk and the next agent turn starts a new process. If the server does not answer it keeps asking, 5 seconds apart and backing off to 5 minutes (it waits at least as long as the server's `Retry-After` asks, up to that 5-minute ceiling), and gives up after 30 minutes without progress or one hour in all; the next agent turn starts a new one. It sends what the hook would have sent, under the same consent, the same credential and the same client-side path redaction, and the same server-side scrubber: what is uploaded, and for which repositories, is exactly what *what we upload* describes. It also finishes sessions that ended with bytes still unsent, but only ones idle for 10 minutes, and at most 64 MiB per run (a starting value, not a measured one).
+
+*Notices come one turn later.* The hook can no longer see the outcome of the upload it just recorded, so "VibeCommit captured this session.", "this machine's credential is no longer accepted" and the credential-ending notice appear on the next turn of the same session, from what the background process wrote down (`uploader.<id>.status`, counts, classes and times only, never a body, a path or a credential).
+
+*`vibecommit status`* shows an `upload` row once anything has been recorded for upload: `up to date`, `sending`, `waiting to retry` or `not running`, with how many sessions have recorded turns not yet sent and how many bytes those are, and when the server last acknowledged. "Behind" means recorded turns only: sessions that ended with bytes unsent and have no recorded turn waiting (the background process finishes those on its own, within the limits above) are not counted, and turns recorded for another server or credential are. It is computed from the recorded lines against what was acknowledged and from whether the background process's lock is alive, not from what the process says about itself, so a process that died with bytes behind reads `not running`, never `up to date`. `status --json` adds an `uploader` object to both documents (`state`, `heartbeat_age_ms`, `behind: { sessions, bytes, sessions_checked }`, `last_ack_at_ms`, `last_attempt`); `sessions_checked` is how many recorded sessions were looked at, so an empty scan is not mistaken for a clean one. `last_attempt.status` is always `null`: the process records the kind of outcome, not an HTTP status.
+
+*What did not change.* No new data leaves your machine, no setting is needed, the consent prompt is the same (apart from the scrubber count, below), and `vibecommit off` and the per-repository consent checks apply to the background process exactly as to a hook. A session whose id the server cannot take is still written off loudly, as before. Nothing here is claimed for Windows.
+
+*The scrubber now removes 13 known secret formats* (it said 12): a PEM private key block joined the list on the server. The consent screen says 13.
+
 ## Status
 
 **Implemented**, not a scaffold. All six commands above have real bodies — OAuth sign-in

package/dist/agent_hooks.js

@@ -244,7 +244,7 @@ binaryExists = () => true) {
  *   2. **Its command is ours** — see `commandIsOurs`.
  *
  * ⚠ **THE FAILURE DIRECTION IS DELIBERATE.** A false "not ours" costs one
- * duplicate entry, which `claimFiring` (`CR-195`/U4a) already turns into a
+ * duplicate entry, which the worker's no-op replay of a duplicate firing (U6) already turns into a
  * single capture. A false "ours" overwrites a user's hook — the one outcome this
  * module exists to make impossible. Every doubt resolves to "not ours".
  */
@@ -318,7 +318,7 @@ export function hasRegistration(raw, shape, registration, binaryExists = existsS
  * dir) is exactly that: Gate A repointed a machine's working capture at a
  * directory about to be deleted, after which every hook fails quietly and
  * capture stops. Without this arm the same run appends a second entry and the
- * working one keeps firing (`claimFiring` makes it one capture). So: a moved
+ * working one keeps firing (a duplicate firing replays as a no-op, so it is one capture). So: a moved
  * path is claimed only when the binary it names is GONE — the reinstall this
  * arm exists for (an uninstalled prefix, a removed nvm version) — and a live
  * one is left alone. ⚠ Cost, accepted: two live installs leave two entries

package/dist/cli.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `vibecommit` — CLI entry point.
+ *
+ * Verb bodies that are NOT here, each an owned task in
+ * `coordination/CAPTURE_REFACTOR_TASKS.md`:
+ *
+ *   why  CR-086   report  CR-108   connect's live-capture ending  CR-025
+ *   status/off output spec  CR-021   failure policy  CR-018
+ *   repo binding key + X-Repo-Slug  CR-017 / CR-019
+ *
+ * What IS established here, and must not be undone by those tasks:
+ *   - no user-facing string literal in a command body (CR-090 → `src/copy/`)
+ *   - the exit-code contract is split hook vs interactive (CR-022 → `src/exit.ts`)
+ *   - one commit-header renderer taking the grade (CR-090 → `src/copy/grades.ts`)
+ *   - every escape sequence comes from `src/term.ts` (DESIGN.md §13.2)
+ *   - the hook contract is enforced by the entry, not by each verb
+ */
+import { VERBS, isVerb, type Verb } from "./verbs.js";
+export { VERBS, isVerb };
+export type { Verb };
+/**
+ * `--help`, wrapped hard at 80 columns per DESIGN.md §13.4.
+ *
+ * Never reflows to `process.stdout.columns`: identical commands must emit
+ * identical bytes, or issue-paste, screenshots and every golden-file test of the
+ * copy break. `test/help-golden.test.ts` is that golden file.
+ *
+ * No SGR here at all. Colour would have to be resolved before help could be
+ * rendered, and help is the one surface where structure alone is enough —
+ * indentation and the label gutter carry it, which is §13.1's point about
+ * `NO_COLOR` being a lossless degradation rather than a downgrade.
+ */
+export declare function renderHelp(): string;
+/** Run the interactive CLI for `argv` (everything after the binary): guards first, then the verb, then the exit code. */
+export declare function runCli(argv: readonly string[]): void;

package/dist/cli.js

@@ -0,0 +1,412 @@
+/**
+ * `vibecommit` — CLI entry point.
+ *
+ * Verb bodies that are NOT here, each an owned task in
+ * `coordination/CAPTURE_REFACTOR_TASKS.md`:
+ *
+ *   why  CR-086   report  CR-108   connect's live-capture ending  CR-025
+ *   status/off output spec  CR-021   failure policy  CR-018
+ *   repo binding key + X-Repo-Slug  CR-017 / CR-019
+ *
+ * What IS established here, and must not be undone by those tasks:
+ *   - no user-facing string literal in a command body (CR-090 → `src/copy/`)
+ *   - the exit-code contract is split hook vs interactive (CR-022 → `src/exit.ts`)
+ *   - one commit-header renderer taking the grade (CR-090 → `src/copy/grades.ts`)
+ *   - every escape sequence comes from `src/term.ts` (DESIGN.md §13.2)
+ *   - the hook contract is enforced by the entry, not by each verb
+ */
+/**
+ * The INTERACTIVE half of the CLI: every verb a person types.
+ *
+ * ⛔ THIS FILE IS LOADED BY `index.ts` WITH A DYNAMIC `import()`, ONLY AFTER THE HOOK, THE UPLOAD WORKER AND THE GIT
+ * HOOK VERBS HAVE BEEN DISPATCHED. It used to be `index.ts` itself, which statically imported every verb, so a
+ * `vibecommit hook` process paid for `auth`, `connect`, `status` and the whole OAuth stack it never runs (import 389 ms
+ * against 132 ms for `hooks/entry.js`, at load 50-89). `test/load-path.test.ts` fails the build if a value import of an
+ * interactive verb is put back on a hook path.
+ */
+import { writeSync } from "node:fs";
+import { homedir } from "node:os";
+import { createInterface } from "node:readline/promises";
+import { Writable } from "node:stream";
+import { resolveAgentId } from "./agents/registry.js";
+import { auth } from "./commands/auth.js";
+import { browserCredential } from "./commands/browser_credential.js";
+import { updateNudge } from "./update_nudge.js";
+import { connect } from "./commands/connect.js";
+import { finalize } from "./commands/finalize.js";
+import { offVerb, statusVerb } from "./commands/status.js";
+import { report } from "./commands/report.js";
+import { backfill, backfillForConnect } from "./commands/backfill.js";
+import { scan } from "./commands/scan.js";
+import { why } from "./commands/why.js";
+import { HELP, INTERNAL, USAGE } from "./copy/index.js";
+import { EXIT } from "./exit.js";
+import { channelCommand, installChannel } from "./install.js";
+import { renderJsonError } from "./json.js";
+import { readStdin } from "./stdin.js";
+import { LABEL_GUTTER, renderErrorBlock, resolveColour, wrap } from "./term.js";
+import { CLIENT_VERSION } from "./version.js";
+import { VERBS, isVerb } from "./verbs.js";
+// `CR-216/U2` adds `auth`, and adding it MOVES `test/help.golden.txt` — which
+// `CR-084d` and the `post-commit` note below were both careful not to do. The
+// difference is the point: those two are a FLAG and a HIDDEN verb, neither of
+// which a human types, so moving the golden file for them would have been noise.
+// `auth` is typed by a human on a new machine before anything else works, so a
+// help screen that omitted it would be the defect one layer up. The golden file
+// exists to make a change to that screen deliberate, not to make it impossible.
+/** The verbs with a `--json` mode (`src/json.ts`'s `JsonVerb`): a failure under the flag is a document, not a block. */
+const JSON_VERBS = ["status", "why", "report", "scan"];
+export { VERBS, isVerb };
+/**
+ * `--help`, wrapped hard at 80 columns per DESIGN.md §13.4.
+ *
+ * Never reflows to `process.stdout.columns`: identical commands must emit
+ * identical bytes, or issue-paste, screenshots and every golden-file test of the
+ * copy break. `test/help-golden.test.ts` is that golden file.
+ *
+ * No SGR here at all. Colour would have to be resolved before help could be
+ * rendered, and help is the one surface where structure alone is enough —
+ * indentation and the label gutter carry it, which is §13.1's point about
+ * `NO_COLOR` being a lossless degradation rather than a downgrade.
+ */
+export function renderHelp() {
+    const lines = [
+        ...wrap(HELP.tagline, 2),
+        "",
+        ...wrap(`${USAGE.usageLabel} ${HELP.usage}`, 2),
+        "",
+        ...wrap(USAGE.commandsLabel, 2),
+    ];
+    for (const verb of VERBS) {
+        // The description is wrapped on its own and the verb column is written over
+        // the first line's indent. Wrapping `verb + padding + description` as one
+        // string would not work: `wrap` normalises whitespace, so the fixed gutter
+        // would collapse to a single space.
+        const head = `    ${verb.padEnd(LABEL_GUTTER)}`;
+        const body = wrap(HELP.commands[verb], head.length);
+        lines.push(head + body[0].slice(head.length), ...body.slice(1));
+    }
+    lines.push("", ...wrap(`${USAGE.docsLabel} ${HELP.docsUrl}`, 2));
+    return lines.join("\n");
+}
+function interactiveContext(argv) {
+    return {
+        env: process.env,
+        home: homedir(),
+        cwd: process.cwd(),
+        nodeVersion: process.versions.node,
+        // `CR-183`. Resolved from argv HERE, the same pure read the hook branch at
+        // the bottom of this file makes — `connect` needs it to know whether the
+        // agent it was told about has a way to find the running session at all.
+        agentId: resolveAgentId(argv),
+        colour: resolveColour({
+            env: process.env,
+            isTty: process.stdout.isTTY === true,
+            noColorFlag: argv.includes("--no-color"),
+            json: argv.includes("--json"),
+        }),
+        stdinIsTty: process.stdin.isTTY === true,
+        stdout: process.stdout,
+        stderr: process.stderr,
+        /**
+         * The readline interface is created HERE, on the first question, and not
+         * once per invocation — CR-117.
+         *
+         * `createInterface` RESUMES stdin, and a resumed stdin keeps the event loop
+         * alive until it ends. Built eagerly, a verb that returns without ever
+         * prompting sat there until the pipe closed: `connect` refusing a non-TTY,
+         * and `status` / `off`, which never ask anything. On a terminal that looked
+         * fine, because stdin ends at EOF; under `cmd | vibecommit connect` in CI it
+         * is the hang the source finding names first, burning the job's whole
+         * timeout with the refusal already on screen and no way to explain it.
+         *
+         * It also makes style guide §10.2 rule 2 literally true rather than nearly
+         * true: on the refusal path stdin is not read, resumed, or opened at all.
+         */
+        ask: async (question) => {
+            const rl = createInterface({ input: process.stdin, output: process.stdout });
+            try {
+                return await rl.question(question);
+            }
+            finally {
+                rl.close();
+            }
+        },
+        now: () => new Date(),
+        selfPath: process.argv[1] ?? "",
+    };
+}
+async function main(argv) {
+    const [verb] = argv;
+    if (verb === undefined || verb === "--help" || verb === "-h") {
+        process.stdout.write(`${renderHelp()}\n`);
+        return EXIT.ok;
+    }
+    if (verb === "--version" || verb === "-v") {
+        process.stdout.write(`${CLIENT_VERSION}\n`);
+        return EXIT.ok;
+    }
+    if (!isVerb(verb)) {
+        // PR 7 (Q6): a block like every other failure — a code, and the way to the command list as the LAST line. No help dump.
+        const colour = resolveColour({
+            env: process.env,
+            isTty: process.stderr.isTTY === true,
+            noColorFlag: argv.includes("--no-color"),
+            json: false,
+        });
+        process.stderr.write(`${renderErrorBlock({
+            kind: "bad",
+            code: "UNKNOWN_COMMAND",
+            what: USAGE.unknownCommandWhat(verb),
+            why: [],
+            fixLabel: USAGE.unknownCommandFix,
+            fixes: [channelCommand(process.env, process.argv[1] ?? "", USAGE.unknownCommandHelp)],
+        }, colour).join("\n")}\n`);
+        return EXIT.usage;
+    }
+    const ctx = interactiveContext(argv);
+    // Slice 2 (S4, R3-11): a credential `g` made and did not keep is revoked by the NEXT verb that runs — once, at its start, silent,
+    // needing no credential, inside one 3 s bound across every row. Not for `--help`, not for `scan` (network-free by contract,
+    // README), not for a `--stdin`, piped or no-terminal `auth` (below), and never from a hook (this is the verb path; hooks branch off at the bottom of this file).
+    // F8 (L10): nor for `auth` run with `--stdin`, piped or with no terminal ("it only saves the credential" stays exactly true of it).
+    const authSavesOnly = verb === "auth" && (argv.includes("--stdin") || !ctx.stdinIsTty);
+    if (verb !== "scan" && !authSavesOnly && !argv.includes("--help") && !argv.includes("-h")) {
+        // Loaded HERE, on the verb path only (the connect.ts rule): `vibecommit hook` never imports the module that holds a token.
+        const { retryPendingRevokes } = await import("./pending_revoke.js");
+        await retryPendingRevokes(ctx.home, ctx.env, globalThis.fetch, ctx.now());
+    }
+    const code = await runVerb(verb, argv, ctx);
+    // `13A`: the nudge is the LAST line of a verb that SUCCEEDED — never after an error (the §13.6 fix
+    // line must stay last) and never with `--json`. It lives here, not in the verbs, so no verb's own
+    // output or exit path can reach it by accident; `updateNudge` itself fails silent.
+    if (code === EXIT.ok &&
+        (verb === "status" || verb === "connect" || verb === "auth") &&
+        !argv.includes("--json") &&
+        !argv.includes("--help") &&
+        !argv.includes("-h")) {
+        const lines = await updateNudge(ctx);
+        if (lines.length > 0)
+            process.stdout.write(`${lines.join("\n")}\n`);
+    }
+    return code;
+}
+/** The real browser beat for `auth` and `connect`: the real network and the real clock, plus `--device`. */
+const realBrowser = (ctx, retry, options) => browserCredential(ctx, retry, {}, options);
+async function runVerb(verb, argv, ctx) {
+    switch (verb) {
+        case "auth":
+            // `CR-216/U2`. Both readers are injected here rather than reached for
+            // inside the verb, the same way `why` takes its reader: the suite drives
+            // every arm, and neither a TTY nor a pipe can be typed into by a test.
+            return await auth(ctx, argv.slice(1), {
+                readSecret: readSecretFromTty,
+                readStdin,
+                // `CR-226`. The browser mint, first on a terminal; the two readers above
+                // stay the fallback. Injected HERE and nowhere else — the verb's default
+                // is paste-only, so this line is what makes the route reachable.
+                browser: realBrowser,
+                // `CR-236`. After a save inside a git work tree on a terminal, `auth` continues into `connect`.
+                // ⛔ NO `browser` HERE, AND THAT IS THE "ONE AUTH" GUARANTEE: this verb just saved a credential, so
+                // the chained `connect` finds one; were it ever absent it falls to the old warning, never to a
+                // second sign-in. `test/auth-connect-chain.test.ts` brace-matches this call to keep it so.
+                // The backfill offer IS passed: it is not a sign-in, it asks its own y/N (default N) on a terminal only, and the chain
+                // itself runs only on a terminal (the `!piped` gate, D32 guard 1), so a piped or CI `auth` never reaches it.
+                // Slice 2: the account's network is passed (it is not a sign-in), so the chained `connect` syncs and shows the picker's
+                // "on your account" group. `g` needs a `browser`, which this call never has, so the chain can never reach it.
+                connect: (c) => connect(c, {}, { backfill: backfillForConnect, account: { fetch: globalThis.fetch } }),
+                // R3-7: a credential this verb saves, off the chain, is synced before it returns (only on a machine that has synced before).
+                account: { fetch: globalThis.fetch },
+            });
+        case "connect":
+            // `--sign-in` (CR-084d) is a FLAG, not a verb: `VERBS` is what `renderHelp`
+            // iterates, so a sixth verb would move `test/help.golden.txt`, and the
+            // brief for this task is explicit that the golden file must not move.
+            // `CR-226`: the browser beat for a fresh machine. Same rule as `auth` —
+            // `connect`'s default never opens a browser, so without this argument the
+            // route is unreachable from the install path.
+            // `TODOS[184]`: `help` added — `connect` has no `argv` param, so its `--help`/`-h` check reads this
+            // option field, computed the same way `signIn` already is.
+            return await connect(ctx, {
+                signIn: argv.includes("--sign-in"),
+                // `CR-234d`: sign in by code.
+                device: argv.includes("--device"),
+                // `D28`: the typed prompt even on a terminal — the checklist's way out for a screen reader.
+                typed: argv.includes("--typed"),
+                help: argv.includes("--help") || argv.includes("-h"),
+            }, 
+            // `D14`/`D15`: the backfill offer after "Capture is on" (PR 5's `backfillForConnect`).
+            // Slice 2: `account` is the network for the sync, the "on your account" group, `g` and the joining-machine question.
+            { browser: realBrowser, backfill: backfillForConnect, account: { fetch: globalThis.fetch } });
+        case "scan":
+            // `D33 · 27A`. Read-only, no network, and a public verb so an agent can list capturable repos
+            // without entering a consent flow. Reads its own `--json` like `status`.
+            return scan(ctx, argv.slice(1));
+        case "backfill":
+            // `D14`/`D15`. Asks first (default N), uploads earlier sessions one at a time, no commit links. Takes no arguments.
+            return await backfill(ctx, argv.slice(1));
+        case "status":
+            // `argv.slice(1)` for the same reason `why` and `report` take it: `status`
+            // reads its own `--json` flag rather than this package acquiring an
+            // argument parser it has deliberately never had (DESIGN.md §13.3).
+            // Slice 2 (S4): one bounded account sync first, then the screen. The sync only refreshes the files `status` reads.
+            return await statusVerb(ctx, argv.slice(1), { fetch: globalThis.fetch });
+        case "off":
+            // `TODOS[184]`: `off` now takes its trailing argv, so a stray argument (including `--help`
+            // landing here by accident) can no longer silently revoke consent.
+            // Slice 2 (S4): the turn-off is local first; with a credential it is then queued for the account and synced once.
+            return await offVerb(ctx, argv.slice(1), { fetch: globalThis.fetch });
+        case "why":
+            // CR-086. `argv.slice(1)` is everything after the verb — there is no
+            // argument parser in this package and `why` does not add one; it reads
+            // `<file>:<line>` and refuses `--json`, which is the smallest shape that
+            // satisfies the verbatim-approved `--help` sentence.
+            return await why(ctx, argv.slice(1));
+        case "report":
+            // CR-108, W10. Same shape as `why`: `argv.slice(1)` is everything after
+            // the verb, and the verb reads its own two flags rather than adding an
+            // argument parser this package deliberately does not have.
+            return await report(ctx, argv.slice(1));
+        case "finalize":
+            // `TODOS[146]`. Same shape as `report`: the verb reads its own flags.
+            return await finalize(ctx, argv.slice(1));
+    }
+}
+/**
+ * Read a secret from the terminal WITHOUT ECHOING IT — `CR-216/U2`.
+ *
+ * `ctx.ask` is not reusable for this. It is the consent prompt: it echoes, which
+ * is correct for `y/N` and wrong for a long-lived credential, which would then
+ * sit in the terminal's scrollback to be scrolled back to, screenshotted into a
+ * bug report, or captured by a terminal logger.
+ *
+ * The mute is the ordinary readline technique: `output` receives the prompt
+ * first and is muted only for the keystrokes that follow, so the question is
+ * still visible and the answer never is. The trailing newline is ours to write —
+ * the user's own Return was swallowed with the rest, and without it whatever
+ * prints next lands on the prompt line.
+ *
+ * Nothing here holds the secret: `rl.question`'s resolved string goes straight to
+ * the caller, which wraps it in an `IngestCredential` before doing anything else
+ * with it.
+ */
+function readSecretFromTty(prompt) {
+    let muted = false;
+    const muffled = new Writable({
+        write(chunk, encoding, cb) {
+            if (!muted)
+                process.stdout.write(chunk, encoding);
+            cb();
+        },
+    });
+    const rl = createInterface({ input: process.stdin, output: muffled, terminal: true });
+    const answer = rl.question(prompt);
+    muted = true;
+    return answer.finally(() => {
+        rl.close();
+        process.stdout.write("\n");
+    });
+}
+/**
+ * The INTERACTIVE half of the split exit contract — CR-022, D61 round 3 §D8.
+ *
+ * The hook half is enforced in `hooks/entry.ts`: swallow everything, exit 0, stay
+ * silent, because a non-zero hook feeds stderr back into the user's agent and
+ * derails the task they were actually doing. **An interactive verb must not
+ * inherit that blanket.** As originally written the exit-0/stdout-empty rule read
+ * as governing the whole binary, which would make `why` on a read-lane 5xx exit 0
+ * and print nothing — a read verb failing silently, which is the defect this
+ * split exists to prevent.
+ *
+ * So: same fault, same binary, two modes, two behaviours. Interactive gets exit 1
+ * and §13.6's shape.
+ *
+ * Two things this deliberately does NOT do:
+ *   - **No signal handling.** `Ctrl-C` cancelling a `connect` prompt is normal
+ *     CLI behaviour, and suppressing `SIGINT` globally would be a UX regression
+ *     dressed up as a fix. The hook's signal override stays scoped to hook mode.
+ *   - **No stack trace** unless `VIBECOMMIT_DEBUG` is set (§13.6, first
+ *     prohibition). The detail then goes out RAW, after the block, rather than
+ *     through `wrap()`, which would reflow a stack into nonsense.
+ */
+function reportUnexpected(error, argv) {
+    const colour = resolveColour({
+        env: process.env,
+        isTty: process.stderr.isTTY === true,
+        noColorFlag: argv.includes("--no-color"),
+        json: argv.includes("--json"),
+    });
+    const block = {
+        kind: "bad",
+        code: "INTERNAL_ERROR",
+        what: INTERNAL.unexpectedWhat,
+        why: [INTERNAL.unexpectedWhy],
+        fixLabel: INTERNAL.unexpectedFix,
+        fixes: [INTERNAL.unexpectedDebugCommand(installChannel(process.env, process.argv[1] ?? "").command)],
+    };
+    // PR 7: under `--json` on a read verb the failure is ONE document on stdout and nothing on stderr — the same shape every
+    // other `--json` failure has. (`VIBECOMMIT_DEBUG` is an explicit opt-in to the raw detail on stderr, and still prints.)
+    const jsonVerb = argv.includes("--json") ? JSON_VERBS.find((v) => v === argv[0]) : undefined;
+    const lines = jsonVerb === undefined ? renderErrorBlock(block, colour) : [];
+    if (jsonVerb !== undefined) {
+        try {
+            writeSync(1, renderJsonError(jsonVerb, block));
+        }
+        catch {
+            // An unwritable stdout is not worth a second exception on this path.
+        }
+    }
+    if (process.env.VIBECOMMIT_DEBUG !== undefined)
+        lines.push(...(lines.length > 0 ? [""] : []), detailOf(error));
+    if (lines.length === 0)
+        return;
+    // `writeSync(2, …)` rather than `process.stderr.write`: stderr to a pipe is
+    // asynchronous and `process.exit` does not flush it, so the caller below would
+    // race its own diagnostic away. Same reason `finish()` uses it on fd 1.
+    try {
+        writeSync(2, `${lines.join("\n")}\n`);
+    }
+    catch {
+        // An unwritable stderr is not worth a second exception on this path.
+    }
+}
+/**
+ * The raw detail, for `VIBECOMMIT_DEBUG` only.
+ *
+ * Interpolating an error is safe by construction here: an `IngestCredential`
+ * renders `vcik_…redacted` through `toString`, `toJSON` and the inspect hook, so
+ * a stack that embedded one cannot print the plaintext.
+ */
+function detailOf(error) {
+    if (error instanceof Error && typeof error.stack === "string")
+        return error.stack;
+    return String(error);
+}
+/**
+ * Catch what escapes `main()` entirely — a stray timer's throw, a rejection from
+ * a promise nobody awaited. Without these, Node prints its own stack trace to
+ * stderr, which §13.6 forbids outright.
+ *
+ * These force an exit rather than setting `process.exitCode`, because by
+ * definition something unexpected is still in flight and may be holding the event
+ * loop open. The `main()` rejection path below does not: nothing is in flight
+ * there, and letting the loop drain preserves whatever the verb already wrote.
+ */
+function installInteractiveGuards(argv) {
+    const fail = (error) => {
+        reportUnexpected(error, argv);
+        process.exit(EXIT.failure);
+    };
+    process.on("uncaughtException", fail);
+    process.on("unhandledRejection", fail);
+}
+/** Run the interactive CLI for `argv` (everything after the binary): guards first, then the verb, then the exit code. */
+export function runCli(argv) {
+    installInteractiveGuards(argv);
+    void main(argv).then((code) => {
+        process.exitCode = code;
+    }, (error) => {
+        reportUnexpected(error, argv);
+        process.exitCode = EXIT.failure;
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAmC,MAAM,kCAAkC,CAAC;AACtG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAExC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAiB,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAa,MAAM,YAAY,CAAC;AAEtD,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,wHAAwH;AACxH,MAAM,UAAU,GAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE5E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAGzB;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAa;QACtB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxB,EAAE;QACF,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,EAAE;QACF,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;KAChC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAuB;IACjD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,OAAO,EAAE;QACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAClC,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,aAAa,CAAC;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC;QACF,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB;;;;;;;;;;;;;;WAcG;QACH,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAuB;IACzC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEpB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,wHAAwH;QACxH,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxC,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,gBAAgB,CACjB;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACpC,GAAG,EAAE,EAAE;YACP,QAAQ,EAAE,KAAK,CAAC,iBAAiB;YACjC,KAAK,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;SACtF,EACD,MAAM,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,kIAAkI;IAClI,4HAA4H;IAC5H,iKAAiK;IACjK,oIAAoI;IACpI,MAAM,aAAa,GAAG,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,2HAA2H;QAC3H,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpE,MAAM,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,mGAAmG;IACnG,kGAAkG;IAClG,mFAAmF;IACnF,IACE,IAAI,KAAK,IAAI,CAAC,EAAE;QAChB,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC;QAC5D,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4GAA4G;AAC5G,MAAM,WAAW,GAAG,CAAC,GAAmB,EAAE,KAAY,EAAE,OAAwB,EAAE,EAAE,CAClF,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAE7C,KAAK,UAAU,OAAO,CAAC,IAAU,EAAE,IAAuB,EAAE,GAAmB;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,sEAAsE;YACtE,yEAAyE;YACzE,uEAAuE;YACvE,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACpC,UAAU,EAAE,iBAAiB;gBAC7B,SAAS;gBACT,yEAAyE;gBACzE,yEAAyE;gBACzE,iEAAiE;gBACjE,OAAO,EAAE,WAAW;gBACpB,gGAAgG;gBAChG,mGAAmG;gBACnG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,uHAAuH;gBACvH,6GAA6G;gBAC7G,wHAAwH;gBACxH,8GAA8G;gBAC9G,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtG,6HAA6H;gBAC7H,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;aACrC,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,4EAA4E;YAC5E,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,0EAA0E;YAC1E,8CAA8C;YAC9C,oGAAoG;YACpG,2DAA2D;YAC3D,OAAO,MAAM,OAAO,CAClB,GAAG,EACH;gBACE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAClC,8BAA8B;gBAC9B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACjC,4FAA4F;gBAC5F,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aACrD;YACD,uFAAuF;YACvF,qHAAqH;YACrH,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,CAC7F,CAAC;QACJ,KAAK,MAAM;YACT,8FAA8F;YAC9F,yEAAyE;YACzE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,oHAAoH;YACpH,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK,QAAQ;YACX,2EAA2E;YAC3E,oEAAoE;YACpE,mEAAmE;YACnE,mHAAmH;YACnH,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,KAAK,KAAK;YACR,2FAA2F;YAC3F,mEAAmE;YACnE,kHAAkH;YAClH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,KAAK,KAAK;YACR,qEAAqE;YACrE,uEAAuE;YACvE,yEAAyE;YACzE,qDAAqD;YACrD,OAAO,MAAM,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,wEAAwE;YACxE,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,UAAU;YACb,sEAAsE;YACtE,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC;QAC3B,KAAK,CAAC,KAAsB,EAAE,QAAQ,EAAE,EAAE;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAe,EAAE,QAAQ,CAAC,CAAC;YAC5D,EAAE,EAAE,CAAC;QACP,CAAC;KACF,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,GAAG,IAAI,CAAC;IACb,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QACzB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAuB;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACxC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,IAAI,EAAE,KAAc;QACpB,IAAI,EAAE,gBAAyB;QAC/B,IAAI,EAAE,QAAQ,CAAC,cAAc;QAC7B,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC7B,QAAQ,EAAE,QAAQ,CAAC,aAAa;QAChC,KAAK,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;KACrG,CAAC;IACF,yHAAyH;IACzH,wHAAwH;IACxH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,4EAA4E;IAC5E,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,CAAC;QACH,SAAS,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAClF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,IAAuB;IACvD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;QACpC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,MAAM,CAAC,IAAuB;IAC5C,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE;QACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/commands/backfill.js

@@ -50,6 +50,7 @@ import { glyph, paint, renderErrorBlock, tildePath, truncateMiddle, truncatePath
 import { writeLines } from "./context.js";
 import { credentialProblem } from "./credential_problem.js";
 import { authCommandFor, channelCommand, connectCommandFor } from "../install.js";
+import { identityDigest } from "../identity.js";
 import { closeSession, closeSpecOf, ingestUrlUnavailableBlock, resolveSessionTargets } from "./finalize.js";
 import { scanMachine } from "./scan.js";
 import { renderVerbHelp } from "../verb_help.js";
@@ -501,6 +502,18 @@ function classify(outcome) {
         }
     }
 }
+/**
+ * U5b — what a session's recorded firings are replayed with (`finalize.takeSessionLock`), under the lock `resolveSessionTargets` takes, BEFORE
+ * the close reads the spool union: after U6 the hook promotes nothing and writes no state file, so a replay is the only thing that does.
+ */
+function replayConfigOf(run) {
+    const { ctx } = run;
+    return { home: ctx.home, env: ctx.env, nodeVersion: ctx.nodeVersion, identity: identityDigest({ url: run.url, env: ctx.env }), url: run.url };
+}
+/** A replay that left a firing unconsumed: no close, so no seal over lines it still owes. A rejected credential is the run's `rejected`. */
+function replayStopped(step) {
+    return step.kind === "fatal" && step.why === "rejected" ? { kind: "rejected" } : { kind: "failed", reason: BACKFILL.replayStopped };
+}
 async function uploadOne(run, candidate) {
     const { ctx } = run;
     const found = statFile(candidate.path);
@@ -546,9 +559,11 @@ async function uploadOne(run, candidate) {
         // `turnEndCwd` is the folder the OFFER verified this session belongs to (the agent's own index, or the first `cwd` the transcript
         // records): the evidence that put it in this repo's offer, handed to the resolver so a transcript with no `cwd` of its own still
         // resolves. It cannot name a repo the offer did not (the candidate is this repo's) and it is no fallback identity.
-        const resolved = await resolveSessionTargets({ home: ctx.home, env: ctx.env, nowMs: ctx.now().getTime(), turnEndCwd: candidate.dir }, candidate.sessionId, candidate.path, { keys, slugOf: onceStrictRepoSlug(keys.worktree) }, releases);
+        const resolved = await resolveSessionTargets({ home: ctx.home, env: ctx.env, nowMs: ctx.now().getTime(), turnEndCwd: candidate.dir }, candidate.sessionId, candidate.path, { keys, slugOf: onceStrictRepoSlug(keys.worktree) }, releases, { replay: replayConfigOf(run) });
         if (resolved.kind === "busy")
             return { kind: "skipped", reason: BACKFILL.parentBusy };
+        if (resolved.kind === "replay-stopped")
+            return replayStopped(resolved.step);
         const heartbeat = resolved.heartbeat;
         // This repo's target: one of its work trees, or any work tree of the same git common dir (a session recorded in a LINKED work tree
         // belongs to the clone the offer was made for).
@@ -612,9 +627,11 @@ async function uploadParent(run, candidate) {
         return { kind: "skipped", reason: BACKFILL.turnedOff };
     const releases = [];
     try {
-        const resolved = await resolveSessionTargets({ home: ctx.home, env: ctx.env, nowMs: ctx.now().getTime(), turnEndCwd: null }, candidate.sessionId, candidate.path, null, releases);
+        const resolved = await resolveSessionTargets({ home: ctx.home, env: ctx.env, nowMs: ctx.now().getTime(), turnEndCwd: null }, candidate.sessionId, candidate.path, null, releases, { replay: replayConfigOf(run) });
         if (resolved.kind === "busy")
             return { kind: "skipped", reason: BACKFILL.parentBusy };
+        if (resolved.kind === "replay-stopped")
+            return replayStopped(resolved.step);
         const heartbeat = resolved.heartbeat;
         if (resolved.targets.length === 0)
             return { kind: "skipped", reason: BACKFILL.parentTouchedNothing };