@vibe-commit/capture 0.6.0 → 0.7.0

package/dist/copy/strings.d.ts

@@ -21,15 +21,72 @@ export declare const HELP: {
     readonly usage: "vibecommit <command> [options]";
     readonly tagline: "Record Claude Code sessions against the commits they produced.";
     readonly commands: {
-        readonly auth: "Renew or replace this machine's credential. In a git repo it then connects that repo; elsewhere it only saves the credential.";
-        readonly connect: "Connect this repo and capture the current session.";
-        readonly status: "Show whether capture is on for this repo and when it last succeeded.";
+        readonly auth: "Renew or replace this machine's credential. On a terminal it then goes on to connect: in a git repo, or on a machine that captures nothing yet. Otherwise it only saves the credential.";
+        readonly connect: "Choose the repositories to capture, from any folder, and connect them. On a machine with no credential it signs in first.";
+        readonly scan: "List the repositories coding agents have been used in on this machine. Uploads nothing and changes no setting.";
+        readonly backfill: "Upload earlier coding-agent sessions still on this machine, for the repositories you chose. Asks first; no commit links.";
+        readonly status: "Show whether capture is on for this repo, or for this machine outside a repo, and when it last succeeded.";
         readonly off: "Stop capturing for this repo.";
         readonly why: "Show the conversation turns recorded against the commit that last changed this line.";
         readonly report: "Summarise capture coverage over a time window.";
         readonly finalize: "Close a finished session's last turn so commits made in it can be recorded.";
     };
     readonly docsUrl: "https://vibecommit.ai/docs/what-we-upload";
+    /**
+     * PR 6 item 2 (devex review): what `<verb> --help` prints BEYOND the one sentence above, which stays the first
+     * paragraph. Agents read `--help` first, and until now the flags and exit codes existed only in the README.
+     *
+     * ⚠ Every flag here is one the verb's own argv reader acts on (`src/index.ts`, and each verb's parser), and every exit
+     * code is one the verb returns (`src/exit.ts`). A flag the verb ignores, or a code it never returns, would be copy no
+     * gate can check, so `test/verb-help.test.ts` ties each list to the source it describes.
+     */
+    readonly verbs: {
+        readonly connect: {
+            readonly usage: "vibecommit connect [--device] [--sign-in] [--typed]";
+            readonly options: readonly [readonly ["--device", "Sign in with a code approved on another device, for a machine with no browser."], readonly ["--sign-in", "Sign in through the browser before connecting."], readonly ["--typed", "Use the typed prompt even on a terminal, for a screen reader."]];
+            readonly exits: readonly [readonly ["0", "Done."], readonly ["1", "Failed, or a replacement credential was declined."], readonly ["2", "Bad arguments, or no person at a terminal to answer the consent question."], readonly ["3", "Not connected: this machine's credential is not accepted."]];
+        };
+        readonly auth: {
+            readonly usage: "vibecommit auth [--stdin | --paste | --device]";
+            readonly options: readonly [readonly ["--stdin", "Read the credential from standard input and stop after saving it."], readonly ["--paste", "Skip the browser and paste a credential made in Settings."], readonly ["--device", "Sign in with a code approved on another device."]];
+            readonly exits: readonly [readonly ["0", "Credential saved."], readonly ["1", "Nothing was saved."], readonly ["2", "Bad arguments, such as a credential passed as an argument."]];
+        };
+        readonly scan: {
+            readonly usage: "vibecommit scan [--json]";
+            readonly options: readonly [readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Repositories found."], readonly ["4", "None found."]];
+        };
+        readonly backfill: {
+            readonly usage: "vibecommit backfill";
+            readonly options: readonly [];
+            readonly exits: readonly [readonly ["0", "Done, declined at the question, or interrupted with Ctrl+C. Sessions held for an organization's approval count as done."], readonly ["1", "The server stopped the run, could not be reached or refused this machine's credential, or it could not run. Nothing already sent is lost; run it again to resume."], readonly ["2", "No terminal, or an argument was given."], readonly ["3", "Not connected."], readonly ["4", "Nothing to upload."]];
+        };
+        readonly status: {
+            readonly usage: "vibecommit status [--json]";
+            readonly options: readonly [readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Reported."], readonly ["1", "Failed."], readonly ["2", "Bad arguments."], readonly ["3", "Not connected."]];
+        };
+        readonly why: {
+            readonly usage: "vibecommit why <file>:<line> [--json]";
+            readonly options: readonly [readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Answered."], readonly ["1", "Failed."], readonly ["2", "Bad arguments."], readonly ["3", "Not connected."]];
+        };
+        readonly report: {
+            readonly usage: "vibecommit report --since <date> [--ref <ref>] [--json]";
+            readonly options: readonly [readonly ["--since", "Start of the window, as YYYY-MM-DD. Required."], readonly ["--ref", "The branch or commit to count. Default: the current branch."], readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Reported."], readonly ["1", "Failed."], readonly ["2", "Bad arguments."], readonly ["3", "Not connected."], readonly ["4", "The window is empty: nothing to report."]];
+        };
+        readonly finalize: {
+            readonly usage: "vibecommit finalize --session <id> | --latest [--force]";
+            readonly options: readonly [readonly ["--session", "The session to close."], readonly ["--latest", "The most recent session, when only one is recent."], readonly ["--force", "Skip the check that the transcript has stopped changing. Only for a session that is over."]];
+            readonly exits: readonly [readonly ["0", "Closed: the server confirmed the last turn is recorded."], readonly ["1", "Not confirmed closed: not a git repository, a transcript that cannot be read, a credential that is no longer accepted, or a delivery that failed."], readonly ["2", "Nothing was sent: bad arguments, an unknown or still-running session, or several recent sessions for --latest."], readonly ["3", "Not connected: this repo is not captured, or this machine has no credential."], readonly ["5", "Delivered, but the server did not confirm it. Treat it as not closed."]];
+        };
+    };
+    /** The two section labels of a verb's help. */
+    readonly optionsLabel: "Options:";
+    /** A verb with no flags of its own (`backfill`) says so under the label, so "Options:" never sits over nothing. */
+    readonly noOptions: "None. It takes no arguments.";
+    readonly exitCodesLabel: "Exit codes:";
 };
 /**
  * The ENTRY POINT's own chrome and its two usage failures — `CR-090d`.
@@ -62,8 +119,14 @@ export declare const USAGE: {
     readonly usageLabel: "Usage:";
     readonly commandsLabel: "Commands:";
     readonly docsLabel: "Docs:";
-    /** The unknown-verb line. Help follows it, so this says only what went wrong. */
-    readonly unknownCommand: (verb: string) => string;
+    /**
+     * The unknown-verb block (PR 7, Q6: `UNKNOWN_COMMAND`, routed through the shared renderer). The help text is no longer
+     * dumped after it, so the fix — the way to the list of commands — is the last thing on screen. The verb is whatever
+     * the user typed, so it is cut to a length the line can hold.
+     */
+    readonly unknownCommandWhat: (verb: string) => string;
+    readonly unknownCommandFix: "See the commands:";
+    readonly unknownCommandHelp: "vibecommit --help";
 };
 export declare const STATUS: {
     readonly onForRepo: "Capture is on for this repository.";
@@ -76,6 +139,25 @@ export declare const STATUS: {
      * changed them to match the screen rather than changing the screen.
      */
     readonly repoLabel: "repo";
+    /** 0.7.0, D6 · 2A: why this repo is on. One row under `repo`, only inside a repo that is on. */
+    readonly basisLabel: "basis";
+    readonly basisOwner: (owner: string) => string;
+    readonly basisRepo: "repo grant";
+    readonly basisClone: "per clone";
+    /** The machine-level screen (any folder that is not a work tree). */
+    readonly offMachine: "Capture is not on for any repository on this machine.";
+    readonly ownersLabel: "owners";
+    readonly reposLabel: "repos";
+    readonly offLabel: "off";
+    /**
+     * Machine-level `status`: the repos whose own last upload was refused because their org has not approved capture. §10.2's held
+     * vocabulary — the beat word `held`, and the backfill screen's "the org must approve capture" (Alexander, 2026-10-24 17:20).
+     */
+    readonly heldLabel: "held";
+    readonly heldReason: "the org must approve capture";
+    readonly ownerTail: "all its repos, including ones you clone later";
+    readonly changeLabel: "Change what is captured";
+    readonly turnOffInside: "Turn one repo off, run inside it";
     readonly lastSuccessLabel: "last sent";
     readonly dashboardLabel: "dashboard";
     /** `<slug> (git toplevel <path>)` — §10.3's repo row. */
@@ -96,6 +178,21 @@ export declare const STATUS: {
      * after the rows, with the glyph turned `warn`. The date is absolute and in UTC.
      */
     readonly credentialEnding: (date: string, authCommand: string) => string;
+    /**
+     * 0.7.0. A `grants.json` that is present and unreadable denies capture for every clone that has a remote
+     * (`consent.ts`'s `isCaptureAllowed`), and a hook cannot say so, so `status` does. The file name is the user's
+     * to fix; `connect` is where the next consent lands once it is readable.
+     */
+    readonly grantsUnreadable: (connect: string) => string;
+    /**
+     * 0.7.0, `SessionStart` (T21). `npm i -g` alone never adds the event to an agent's config, so a 0.6.x machine is
+     * missing it until `connect` runs. Only said on the npm channel: the plugin ships its own `hooks.json`, and its
+     * contract (no `SessionStart`, no git hooks) is unchanged.
+     */
+    readonly sessionStartMissing: (agents: string, connect: string) => string;
+    /** 0.7.0, D4 · A. A hook the user deleted stays deleted; `connect` is the watched way back. */
+    readonly commitHooksOff: (connect: string) => string;
+    readonly commitHooksForeign: (connect: string) => string;
     readonly credentialShadowed: "VIBECOMMIT_TOKEN is set and takes precedence over the credential saved on this machine. Unset it to use the saved one.";
     /**
      * `CR-228`, `TODOS[142]` — bytes the client ADVANCED PAST without delivering.
@@ -118,7 +215,7 @@ export declare const STATUS: {
      * turn only when a following prompt arrives, so nothing will ever seal this one and the commits made in
      * it cannot be recorded. States the consequence and the command; promises nothing about the commits.
      */
-    readonly openTail: (sessions: number) => string;
+    readonly openTail: (sessions: number, finalizeLatest: string) => string;
     /**
      * `TODOS[145]` — commits the client has seen and is holding because no turn has closed yet. Normal
      * mid-session; shown as a fact, not as a fault.
@@ -189,7 +286,7 @@ export declare const STATUS: {
      * cannot tell a crashed session from one idle at lunch, and closing a session still in progress seals
      * a turn that was not actually over.
      */
-    readonly heldIdle: (bytes: number, sessions: number, commits: number, ids?: readonly string[]) => string;
+    readonly heldIdle: (bytes: number, sessions: number, commits: number, finalizeSession: string, ids?: readonly string[]) => string;
     readonly fixCommandLabel: "To reconnect, run";
     /** §10.3's two trailing actions, rendered as an aligned pair. */
     readonly turnOffLabel: "Turn capture off for this repo";
@@ -220,7 +317,18 @@ export declare const CONNECT: {
      * the nouns are transcribed rather than reworded: *"the output of commands it
      * ran"*, never *"Bash tool results"*.
      */
-    readonly consentHeading: "VibeCommit uploads your Claude Code transcripts for this repo.";
+    readonly consentHeading: "VibeCommit uploads your coding-agent transcripts for this repo.";
+    /**
+     * D23 · 17A: the picker path's heading (every `connect` that shows the picker, in a repo or not). `consentHeading`
+     * above remains only on the no-remote (`local:`) in-repo path, where there is nothing to pick (D35 · 29A: "Claude
+     * Code transcripts" understated what uploads once `connect` also wired Codex and Cursor hooks, 0.2.0).
+     */
+    readonly consentHeadingPicker: "VibeCommit uploads your coding-agent transcripts for the repositories you choose.";
+    /**
+     * ONE sentence, not a paragraph, added on the picker path only (design doc step 2, "The disclosure"): what the grant
+     * covers beyond the repos named on screen. The four paragraphs under either heading stay byte-identical.
+     */
+    readonly consentScope: "The choice covers future clones of these repositories too, and adds commit hooks to each clone where it can.";
     /**
      * ⚠ "private-repo paths" IS THE APPROVED WORDING, and it is the reason
      * `private` is deliberately NOT registered in `claims.ts`: a substring gate on
@@ -327,11 +435,33 @@ export declare const CONNECT: {
     readonly doneUrlLabel: "View this session";
     /** The `[y/N]` suffix. The capital is the default and the default is NO. */
     readonly consentAnswers: "[y/N]";
-    /** Non-TTY refusal — DESIGN.md §13.7 exit 2, D65 §DR7. */
-    readonly nonInteractiveWhat: "Consent needs an interactive terminal.";
-    readonly nonInteractiveWhy: "Standard input is not a terminal, so the consent prompt cannot be answered. Nothing was read and nothing was uploaded.";
-    readonly nonInteractiveFix: "Run this in a terminal:";
+    /**
+     * Non-TTY refusal — DESIGN.md §13.7 exit 2, D65 §DR7. PR 6 item 6: written for an AGENT that hit it, which is who reaches
+     * this branch. It says who must answer ("a person"), that an agent cannot, and what to relay, and it carries the code
+     * `CONSENT_NEEDS_TTY` for a wrapper to key on — PR 7 registered it and renders it on the block's own code line, so it is not
+     * repeated in the sentence. No `--yes`: that would bypass consent (D65 §DR7). The `what` line has no "you" (§13.6).
+     */
+    readonly nonInteractiveWhat: "Consent needs a person at a terminal.";
+    readonly nonInteractiveWhy: "An agent cannot answer it, and standard input is not a terminal. Nothing was read and nothing was uploaded.";
+    /** A repo with no remote has a folder to name; the label is the fix and the command follows it. */
+    readonly nonInteractiveFix: (folder: string) => string;
+    /**
+     * The picker path's refusal (VQ + VT, PR 6 item 6 fit): it names no folder (the picker is not about one repo), has no
+     * "you" in the `what` line, and is reached BEFORE the scan beat, so "Nothing was read and nothing was uploaded" stays
+     * literally true.
+     */
+    readonly pickerNonInteractiveWhat: "Choosing repositories needs a person at a terminal.";
+    readonly pickerNonInteractiveWhy: "An agent cannot answer it, and standard input is not a terminal, so no repository can be chosen and consent cannot be asked. Nothing was read and nothing was uploaded.";
+    readonly pickerNonInteractiveFix: "Ask the user to run this in a terminal:";
     readonly alreadyConnected: "Capture is already on for this repository.";
+    /**
+     * 0.7.0. `grants.json` is present and unreadable, which denies this repository whatever consent it has (see
+     * `consent.ts`'s `isCaptureAllowed`). Answering the consent prompt could not change that, so `connect` stops
+     * BEFORE asking rather than take a yes it cannot honour.
+     */
+    readonly grantsUnreadableWhat: "Capture can't be turned on: ~/.vibecommit/grants.json can't be read.";
+    readonly grantsUnreadableWhy: "Capture is stopped on this machine for every repository that has a remote until the file is readable. Nothing was changed.";
+    readonly grantsUnreadableFixLabel: "Fix the file or move it aside, then run:";
     /**
      * The browser sign-in beat (PKCE loopback → minted ingest credential) is the
      * oauth lane's, not this task's. Until it lands, the supported path is the one
@@ -449,12 +579,12 @@ export declare const COMMIT_HOOK: {
     readonly installed: (repo: string) => string;
     readonly chained: (repo: string) => string;
     readonly already: "Commit capture was already on for this clone.";
-    readonly perClone: "Run `vibecommit connect` in each clone you want commits recorded for — git hooks are per-clone, not per-account.";
+    readonly perClone: (connect: string) => string;
     readonly hooksPathWhat: "Commit capture could NOT be installed for this clone.";
     readonly hooksPathWhy: (configured: string) => string;
     readonly hooksPathFixLabel: "Fix, either one:";
     readonly hooksPathFixUnset: "git config --unset core.hooksPath";
-    readonly hooksPathFixManual: "or add `vibecommit post-commit` to your existing post-commit hook";
+    readonly hooksPathFixManual: (postCommit: string) => string;
     readonly failedWhat: "Commit capture could NOT be installed for this clone.";
     readonly failedWhy: (why: string) => string;
 };
@@ -480,7 +610,7 @@ export declare const AGENT_HOOKS: {
     readonly refusedWhat: (agent: string) => string;
     readonly refusedWhy: (path: string, why: string) => string;
     readonly refusedFixLabel: "Fix:";
-    readonly refusedFix: (path: string) => string;
+    readonly refusedFix: (path: string, connect: string) => string;
     readonly failedWhat: (agent: string) => string;
     readonly failedWhy: (path: string, why: string) => string;
 };
@@ -608,9 +738,269 @@ export declare const SIGNIN: {
     readonly busyWhy: "Only one process may renew a sign-in at a time, and the one holding it did not finish. Nothing was read and the stored sign-in is unchanged.";
     readonly busyFix: "Run it again in a moment:";
 };
+/**
+ * `vibecommit scan` — design review D17 · 11A, D26, D27, D33 · 27A, and the screen VQ drew for it
+ * (style guide §10.13) on 2026-10-24.
+ *
+ * ⛔ **The nouns are the agent-neutral ones** (D11 · A, D35): "coding agent", never "Claude Code
+ * session", because the scan covers three agents and the picker's heading says the same. The agent
+ * NAMES appear only on a repo's second line, where they are facts about which store a count came from.
+ *
+ * ⚠ **Every sentence here is a claims-register row** (the register is `code`'s, VR's PR). None says
+ * "every" or "all": the scan counts transcripts still on disk, and what `cleanupPeriodDays` already
+ * deleted is not among them.
+ */
+export declare const SCAN: {
+    /** The beat line, drawn in the existing beat shape and overwritten once with `done` (D17). */
+    readonly beat: "Looking for repositories on this machine...";
+    readonly beatDone: "done";
+    readonly found: (count: number) => string;
+    readonly sessions: (count: number) => string;
+    readonly since: (date: string) => string;
+    /** What an agent is called on a repo's second line. The ids are wire values, not labels. */
+    readonly agent: {
+        readonly "claude-code": "Claude Code";
+        readonly "codex-cli": "Codex";
+        readonly cursor: "Cursor";
+    };
+    readonly notListed: "Not listed here:";
+    readonly noRemote: (count: number, connect: string) => string;
+    /**
+     * The picker's own line (PR 1 ruling 2): ONE count and ONE line for a folder with two or more
+     * candidate paths, a hashed name (cut, so it cannot be inverted) and a deleted sibling. Claude Code's
+     * and Cursor's only — a Codex row records its real `cwd` and is never ambiguous.
+     */
+    readonly ambiguous: (count: number) => string;
+    /** Scan-only (ruling 5a): a folder, or a Codex `cwd`, that exists but is not inside a git work tree. */
+    readonly nonRepo: (count: number) => string;
+    readonly missingFolder: (count: number) => string;
+    /**
+     * ⛔ CLAIMS ONLY WHAT GIT SHOWS (ruling 7). The test is a session's mtime against the OLDEST reflog entry,
+     * and `gc.reflogExpire` prunes a long-lived clone's oldest entries, so "older than the reflog" is the fact
+     * and "the folder was reused" is a possibility — the same repo deleted and cloned again reads the same.
+     */
+    readonly pathReused: (count: number) => string;
+    /** One clone: the path rides the line. More: this heading, then one indented path per clone. */
+    readonly noReflogOne: (path: string) => string;
+    readonly noReflogMany: (count: number) => string;
+    /** Rollouts on disk that no index row names (ruling 5c) — counted, never opened. */
+    readonly unindexed: (count: number) => string;
+    /**
+     * `Codex sessions couldn't be read (unrecognised index)`, one line per unreadable agent (R3-15). The
+     * bracket names a cause the user can act on; a plain read failure (ruling 6) has none to name, so it
+     * gets none. The `--json` `reason` is the same three words either way.
+     */
+    readonly unreadable: (agent: string, reason: string | null) => string;
+    readonly next: "Choose what is captured:";
+    /** Exit 4. Both screens end on the same command. */
+    readonly none: "No coding-agent sessions were found on this machine.";
+    /**
+     * Exit 4 with `Not listed here:` lines: sessions exist that could not be listed, so `none` would be
+     * untrue. `none` prints only when that block is empty, i.e. the scan saw no session at all (VQ, PR 1
+     * ruling 3).
+     */
+    readonly noneListable: "No repository could be listed from the sessions on this machine.";
+    readonly noneNext: "Choose owners or repos anyway:";
+};
+/**
+ * `vibecommit backfill` — style guide §10.14, design review D14 · 8A, D15 · 9A; capture 0.7.0, PR 5.
+ *
+ * Every sentence here is a claims-register row. ⛔ Three promises it must never make: that a backfilled session is
+ * LINKED to a commit (it arrives without links, and the copy says so), that "every" or "all" earlier sessions are
+ * uploaded (only the ones still on this machine and not yet sent), and that a held session will upload by itself (no
+ * hook fires for an old session, so the held line points at a re-run).
+ *
+ * The two folder reasons are different facts (VQ ruling): `folder differs` is a RECORDED folder that is not this clone,
+ * `folder not recorded` is a transcript that records none.
+ */
+export declare const BACKFILL: {
+    /**
+     * Inside `connect` the repos are the ones it just showed, so "these"; run on its own there is no "these", so it names whose
+     * they are (VQ, PR 5 review).
+     */
+    readonly offerHeading: (repos: number, standalone: boolean) => string;
+    /** The count on a repo row. "Not yet uploaded", so it is never mistaken for the picker's total on disk. */
+    readonly notYetUploaded: (count: number) => string;
+    /**
+     * Cursor sessions are not offered (Alexander, 2026-10-24 13:54 EST: Cursor's transcripts record no folder, so the
+     * folder check cannot run). One muted line, only when a repo you chose has some.
+     */
+    readonly cursorNotUploaded: (count: number) => string;
+    /** Two lines, as §10.14 draws them. */
+    /**
+     * A session over the 50 MiB cap is left out of the count and named here, so the offer never promises an upload the run would
+     * skip on every re-run. (Sub-agent streams are not capped.)
+     */
+    readonly overSizeNote: (count: number) => string;
+    /**
+     * A clone with no reflog cannot be tested for a reused path (a transcript older than the clone's first reflog entry), and
+     * that test is the only guard against one, so its sessions are left out of the count and named here with the clone.
+     */
+    readonly noReflogNote: (count: number, path: string) => string;
+    readonly uploadNote: readonly ["They upload one at a time, the same way new sessions do, without", "commit links."];
+    readonly question: (sessions: number) => string;
+    /** A no. A completed consent flow (§13.7), not an error. */
+    readonly declined: (backfill: string) => string;
+    readonly nothingToUpload: "Nothing to upload: no earlier session on this machine is waiting for a repository you've chosen.";
+    readonly runHeading: (sessions: number) => string;
+    /** Outcome fragments on a repo line, joined by " · ". */
+    readonly uploaded: (count: number) => string;
+    readonly skipped: (count: number, reason: string) => string;
+    readonly held: (count: number) => string;
+    readonly failed: (count: number, reason: string) => string;
+    readonly stopped: "stopped";
+    /** Skip reasons. */
+    readonly overSize: "over 50 MiB";
+    readonly folderDiffers: "folder differs";
+    readonly folderNotRecorded: "folder not recorded";
+    /** The transcript could not be opened at all (permissions), which is a different fact from one that records no folder. */
+    readonly couldntBeRead: "couldn't be read";
+    /** The file vanished between the offer and its upload: a skip, not a refusal by the server. */
+    readonly fileGone: "the file is gone";
+    /** `vibecommit off` (or a grant removed) while the run was going: the rest of that repo is not sent. */
+    readonly turnedOff: "turned off while this ran";
+    readonly outsideAgentFolder: "not in the agent's session folder";
+    /** Failure reasons: a `never`. The server's own code is never shown (§13.6: no bare status, no raw error). */
+    readonly refusedByServer: "the server refused it";
+    readonly repositoryForbidden: "another organization owns this repository";
+    readonly noRepoIdentity: "no repository identity";
+    readonly unrecognisedFileName: "the file name isn't a session id";
+    /** The summary. The glyph is `ok` only when nothing was held, stopped or failed. */
+    readonly summary: (uploaded: number, total: number, skipped: number, held: number, failed: number) => string;
+    /** `owners` is the held repos' owners, already phrased ("acme-corp", "acme-corp or other-org"). */
+    readonly heldBlock: (owners: string) => string;
+    readonly heldThenRun: "Then run:";
+    /**
+     * The stop block: a server `later` (5xx, 429) stops the run, with the resume fix. ⛔ It states only what landed: `uploaded` is
+     * sessions the server took, not sessions looked at, and "not yet uploaded" is what a re-run will OFFER again (skipped and held
+     * sessions among them), not a promise of what it will send.
+     */
+    readonly stopWhat: (uploaded: number, total: number) => string;
+    readonly stopWhy: (notUploaded: number) => string;
+    /** No response at all (a refused connection, a timeout): not the server asking anything. */
+    readonly stopWhyUnreachable: (notUploaded: number) => string;
+    readonly stopFixLabel: "Resume:";
+    /** Ctrl+C at the y/N or during the upload. Exit 0: capture is on. */
+    readonly interrupted: (backfill: string) => string;
+    /** Exit 3. */
+    readonly notConnectedWhat: "This machine isn't connected.";
+    readonly notConnectedWhy: "`backfill` uploads with this machine's credential, and there isn't one. Nothing was read.";
+    readonly notConnectedFixLabel: "Connect first:";
+    /** `grants.json` is present and unreadable: every repo with a remote is denied, so there is nothing honest to offer. */
+    readonly grantsUnreadableWhat: "Backfill can't run: ~/.vibecommit/grants.json can't be read.";
+    readonly grantsUnreadableWhy: "Capture is stopped on this machine for every repository that has a remote until the file is readable. Nothing was read and nothing was uploaded.";
+    readonly grantsUnreadableFixLabel: "Fix the file or move it aside, then run:";
+    /** Exit 2. A prompt that proceeds when nobody can answer it is not a prompt. */
+    readonly nonInteractiveWhat: "`backfill` needs an interactive terminal.";
+    readonly nonInteractiveWhy: "Standard input is not a terminal, so the question before uploading cannot be answered. Nothing was read and nothing was uploaded.";
+    readonly nonInteractiveFix: "Run this in a terminal:";
+    /** The credential was rejected mid-run (a 401): the same block `finalize` shows, in this verb's words. */
+    readonly credentialStoppedWhat: "Upload stopped: this machine's credential is no longer accepted.";
+    readonly credentialStoppedWhy: "Nothing already sent is lost, and a re-run offers the sessions not yet uploaded.";
+    readonly credentialStoppedFixLabel: "Renew it, then run backfill again:";
+    readonly usageWhat: "That is not something `vibecommit backfill` understands.";
+    readonly usageWhy: "Nothing was read and nothing was uploaded. `backfill` takes no arguments.";
+};
+/**
+ * `vibecommit connect` from any folder — the picker, the grant block, the hooks step and the endings (0.7.0, PR 3).
+ * Style guide §10.12, copied from the merged guide and the design doc; the design doc wins where they differ.
+ */
+export declare const PICKER: {
+    readonly onNow: "on now";
+    readonly turnedOff: "turned off";
+    /** Why an `on now` row is on (D5 · 1A), so a 0.6.x upgrader sees what is already captured. */
+    readonly reasonOwner: "owner";
+    readonly reasonRepo: "repo";
+    readonly reasonPerClone: "per clone";
+    /** The owner row ALWAYS states how many repos `aN` covers (D9), so a hidden repo is never covered unseen. */
+    readonly ownerAll: (count: number) => string;
+    readonly ownerOnReposHere: (count: number) => string;
+    readonly turnOnHint: "choose it to turn it back on";
+    /** Where the working folder is a repo, the row is marked so a pre-tick (or a `$HOME` dotfiles repo) is legible. */
+    readonly thisRepo: "this repo";
+    readonly thisFolder: "this folder";
+    readonly moreTyped: (count: number, owner: string) => string;
+    readonly moreChecklist: (count: number, owner: string) => string;
+    /** The typed prompt (D8). */
+    readonly choose: (hasOwners: boolean) => string;
+    readonly removeHint: "Remove one with -N, -owner/ or -owner/repo.";
+    readonly enterNothing: "Press Enter to change nothing.";
+    /** D34 in the typed prompt: the working folder's repo is pre-selected, so Enter leads to the (default No) y/N. */
+    readonly enterThisRepo: (slug: string) => string;
+    readonly promptMark: "> ";
+    /** `tokens` is the already-joined list (`9 (no row 9), acme, corp`): the corpus renders every template with a string. */
+    readonly notUnderstood: (tokens: string) => string;
+    readonly noRow: (n: string) => string;
+    readonly alreadyOn: (token: string, remove: string) => string;
+    readonly notOn: (token: string) => string;
+    /** The empty screen (D12 · 6A): a new laptop, no agent session on disk at all. */
+    readonly emptyNone: "No coding-agent sessions were found on this machine.";
+    readonly emptyExpected: "That's expected on a new machine. Type the owners or repos to capture; every clone of them is captured once Claude Code, Codex or Cursor runs in it.";
+    readonly emptyType: "Type owner/ or owner/repo, for example alexvibecommit/.";
+    /** Sessions exist but none could be listed (the `Not listed here:` block is not empty): scan's own wording. */
+    readonly emptyListable: "Type owner/ or owner/repo, for example alexvibecommit/, to capture a repository that is not listed.";
+    /** The checklist (D28). */
+    readonly hint: "↑↓ move · space choose · enter done · t typed prompt · ctrl+c cancel";
+    readonly hintTyped: (connectTyped: string) => string;
+    /** The enter-with-nothing lines (D5). */
+    readonly nothingGranted: (connect: string) => string;
+    readonly noChanges: (summary: string) => string;
+    readonly cancelled: "Cancelled. Nothing was changed.";
+    /** The grant block (D7 · 3A). */
+    readonly chose: "You chose:";
+    readonly labelOwners: "owners";
+    readonly labelRepos: "repos";
+    readonly labelTurnOn: "turn on";
+    readonly labelStop: "stop";
+    readonly ownerHere: (count: number) => string;
+    readonly noCloneHere: "(no clone here yet)";
+    readonly questionGrant: "Upload transcripts from these repositories?";
+    readonly questionStop: "Stop capturing these repositories?";
+    readonly stopped: "Stopped capturing the repositories above.";
+    /** "1 owner and 2 repos" — the on-now summary of Enter-with-grants, `auth`'s one line and the status heading. */
+    readonly summary: (owners: number, repos: number) => string;
+    readonly authStays: (summary: string) => string;
+    /** The hooks step (D13 · 7A). */
+    readonly hooksBeat: (clones: number) => string;
+    readonly hooksDone: "done";
+    readonly hooksCount: (added: number, chained: number, notAdded: number) => string;
+    readonly hooksNotAdded: (count: number) => string;
+    readonly hooksPathReason: "core.hooksPath is set";
+    /** A hook write that FAILED is a real exception with its own reason (VQ, item 9): neither dropped nor given `hooksPath`'s fix. */
+    readonly hooksFailedReason: "the hook could not be written";
+    readonly hooksStillCaptured: "Sessions there are still captured. To record commits too, either:";
+    readonly hooksStillCapturedOther: "Sessions there are still captured.";
+    readonly hooksFailedFixLabel: "Where the hook could not be written, try again:";
+    /** "Capture is on" (D18 · 12A, D19 · 13A). */
+    readonly onFor: (summary: string) => string;
+    readonly onProof: "The next Claude Code, Codex or Cursor session in any of them is captured. In Claude Code, its first reply then shows \"VibeCommit captured this session.\"";
+    readonly stopOne: "To stop one repo, run inside it:";
+    /**
+     * Alexander's "caveat for other owners" (2026-10-24; amended 17:20), on the "Capture is on" block. It prints for the owners the
+     * test capture did NOT check: from `~` that is every granted owner (there is no session to probe), and in a repo it is every
+     * granted owner except the one whose delta the server answered with a 2xx. For an owner that is not the signed-in person's own
+     * account the client cannot know whether an org is yet to approve capture, so it says one may be. Never printed when every
+     * such owner is the user's own account.
+     */
+    readonly ownerApproval: (status: string) => string;
+    readonly onNewLaptop: (names: string) => string;
+    readonly onNewLaptopProof: "No clone of it is here yet. Clone one and open a coding agent in it; that session is captured.";
+};
 /** `vibecommit off`. */
 export declare const OFF: {
     readonly done: "Capture is off for this repository.";
+    /**
+     * 0.7.0, a claims-register row. A repo with a remote is turned off BY SLUG, which reaches every clone of it on this
+     * machine. Slice 2 extends the sentence to the other machines once they sync; until then it says only what is true.
+     */
+    readonly doneSlug: (slug: string) => string;
+    /** D31: bare `off` outside a repository. The picker is where an owner or another repo is unticked. */
+    readonly outsideRepoWhat: "`off` turns off the repository you're in.";
+    readonly outsideRepoFixLabel: "To stop capturing an owner or another repo, untick it in the picker:";
+    /** `grants.json` is unreadable, so the exclusion could not be recorded. The clone's own consent was still withdrawn. */
+    readonly grantsUnreadableWhat: "The turn-off could not be recorded: ~/.vibecommit/grants.json can't be read.";
+    readonly grantsUnreadableWhy: "Capture is already stopped for this repository while the file can't be read, and this clone's own consent was withdrawn.";
+    readonly grantsUnreadableFixLabel: "Fix the file or move it aside, then run:";
     readonly alreadyOff: "Capture was already off for this repository.";
     readonly note: "Sessions already recorded are unaffected.";
     readonly unrecognizedArgWhat: "That is not something `vibecommit off` understands.";
@@ -892,7 +1282,10 @@ export declare const WHY: {
      */
     readonly skewWhat: "The record service sent an answer this version is too old to show.";
     readonly skewWhy: "The service described this commit in a way this build does not recognise. The record itself is fine — this copy of the client cannot render it, so it showed nothing rather than guessing at part of it.";
+    /** The PLUGIN channel's remedy (`COMMANDS.pluginInstall`). */
     readonly skewFix: "Reinstall the VibeCommit plugin to pick up the current client, then run this again:";
+    /** The npm channel's remedy (`COMMANDS.npmUpdate`): an npm install has no plugin to reinstall. */
+    readonly skewFixNpm: "Update VibeCommit to pick up the current client, then run this again:";
     /** The bearer is dead after one refresh and one retry. Exit 3, not 1. */
     readonly signedOutWhat: "This machine is not signed in to VibeCommit.";
     readonly signedOutWhy: "Reading a record needs a signed-in user, and no usable sign-in was found on this machine.";
@@ -1277,20 +1670,42 @@ export declare const ABSENCE: {
  * know were bound: `closed` says the last turn is recorded, not that any commit matched it.
  */
 export declare const FINALIZE: {
-    readonly needTarget: "Say which session to close: --session <id>, or --latest.";
+    readonly needTarget: "Say which session to close.";
+    readonly needTargetFix: "Name one, or take the latest:";
     readonly badSessionId: "That is not a session id (letters, digits, dot, dash and underscore only).";
-    readonly noRecentSession: "No session in this repository has delivered anything in the last 24 hours. Use --session <id>.";
-    readonly severalRecent: "More than one session in this repository is recent. Name one with --session <id>:";
+    readonly noRecentSession: "No session in this repository has delivered anything in the last 24 hours.";
+    readonly noRecentSessionFix: "Name a session:";
+    readonly severalRecent: "More than one session in this repository is recent.";
+    readonly severalRecentFix: "Name one:";
+    /** `finalize --session <id>` for a session that is known, e.g. the one whose delivery just failed. */
+    readonly commandSession: (id: string) => string;
+    /** The same with the placeholder, for a fix line written before a session is known. */
+    readonly commandSessionAny: "vibecommit finalize --session <id>";
+    /** The command without its id, for a sentence that names the id itself (`status`'s held-idle line). */
+    readonly commandSessionBase: "vibecommit finalize --session";
+    readonly commandSessionForce: (id: string) => string;
     readonly recentRow: (id: string, minutesAgo: number) => string;
     readonly unknownSession: (id: string) => string;
     readonly transcriptMissing: (id: string) => string;
-    readonly stillWriting: "That session's transcript changed a moment ago. Wait for the session to finish, or pass --force if it is over.";
+    readonly stillWriting: "That session's transcript changed a moment ago.";
+    readonly stillWritingFix: "Wait for the session to finish, or if it is over, run:";
     readonly closed: (id: string) => string;
     readonly alreadyClosed: (id: string) => string;
     readonly notAcknowledged: "The server accepted the data but did not confirm that it closed the session; it may predate this command. The last turn may still be open.";
-    readonly refused: "The server declined to close the session on this attempt. Run the command again.";
-    readonly notDelivered: "Could not deliver the session. Nothing was closed. Run the command again.";
-    readonly credentialStopped: "VibeCommit stopped sending for this credential. Run `vibecommit auth` to replace it.";
+    readonly refused: "The server declined to close the session on this attempt.";
+    readonly retryFix: "Run it again:";
+    readonly notDelivered: "Could not deliver the session. Nothing was closed.";
+    readonly credentialStopped: "VibeCommit stopped sending for this credential.";
+    readonly credentialStoppedFix: "Replace it:";
+    /**
+     * PR 7 (Q2, VQ's wording): the ingest address in the environment (`VIBECOMMIT_INGEST_URL`) is one this client refuses to
+     * send to, so retrying cannot help. Shared by `finalize` and `backfill`, so the `why` says only "Nothing was sent": it must
+     * not claim a session was or was not closed. The VALUE is never echoed (a URL can carry a secret).
+     */
+    readonly ingestUrlWhat: "The address VibeCommit sends sessions to can't be used.";
+    readonly ingestUrlWhy: "VIBECOMMIT_INGEST_URL must be an https address, or an http address on this machine, and it isn't. Nothing was sent.";
+    readonly ingestUrlFix: "Correct it, or remove it to use the default address:";
+    readonly ingestUrlCommand: "unset VIBECOMMIT_INGEST_URL";
     /**
      * `TODOS[177]` follow-up (VL, 2026-10-08, VG's silent-loss finding) — ONE stderr line for the whole run when
      * `finalize` sets any inferred-squash pairs aside (the main delivery, the drain loop, or both, summed). Printed
@@ -1318,8 +1733,8 @@ export declare const REJECTED: {
      * command across lines; `unconfirmed` is their join, the sentence the plan wrote.
      */
     readonly unconfirmedWhat: "Couldn't confirm this machine's credential with the server.";
-    readonly unconfirmedFix: "Run `vibecommit status` later.";
-    readonly unconfirmed: "Couldn't confirm this machine's credential with the server. Run `vibecommit status` later.";
+    readonly unconfirmedFix: (status: string) => string;
+    readonly unconfirmed: (status: string) => string;
 };
 /** `TODOS[184]`-style one-sentence facts the retire step prints; every one is true whatever the server did. */
 export declare const RETIRE: {
@@ -1351,6 +1766,12 @@ export declare const REPLACE: {
     readonly questionUnconfirmed: "Upload this machine's transcripts to the workspace you signed in to?";
     readonly replacesValue: (org: string) => string;
     readonly question: (org: string) => string;
+    /**
+     * 0.7.0, D7 · 3A: on the PICKER path the question names the repos, not the machine, and is the second of at most three
+     * questions in a run. The workspace is cut to 28 columns (not `question`'s 30) so the line stays within 80 with `[y/N]`.
+     */
+    readonly questionRepos: (org: string) => string;
+    readonly questionReposUnconfirmed: "Upload transcripts from the repos above to your signed-in workspace?";
     readonly declined: "Nothing was saved. The approval is discarded.";
     /** Ctrl+C at the question (the prompt was aborted): the same outcome as N, said as what it was. */
     readonly cancelled: "Cancelled. Nothing was saved.";
@@ -1445,11 +1866,17 @@ export declare const UPDATE: {
     readonly plugin: (latest: string) => string;
 };
 export declare const ERRORS: {
-    readonly notConnected: "This repository is not connected. Run `vibecommit connect`.";
+    readonly notConnected: "This repository is not connected.";
+    /** PR 7 (Q7): the remedy was a sentence inside the `what` line; it is a command now, so it moves to the fix block. */
+    readonly notConnectedFix: "Connect it:";
     readonly networkLater: "Could not reach VibeCommit. This session will be recorded on the next turn.";
     readonly authFatal: "This machine's credential is no longer accepted.";
     readonly payloadNever: "This session was too large to record and has been skipped.";
     readonly notAGitRepo: "Not a git repository.";
+    /** PR 7 (VQ): names the folder, tilde-shortened and cut from the LEFT by the caller (`truncatePath`, §13.4). */
+    readonly notAGitRepoWhy: (folder: string) => string;
+    /** A fix with no command to give: the remedy is where to run it, so the block has a label and no commands. */
+    readonly notAGitRepoFix: "Run it again inside a git repository.";
 };
 /**
  * The interactive top-level catch (CR-022).
@@ -1469,7 +1896,7 @@ export declare const INTERNAL: {
     readonly unexpectedWhat: "VibeCommit stopped on an unexpected error.";
     readonly unexpectedWhy: "The command did not finish.";
     readonly unexpectedFix: "Run it again with the error detail shown:";
-    readonly unexpectedDebugCommand: "VIBECOMMIT_DEBUG=1 vibecommit <command>";
+    readonly unexpectedDebugCommand: (command: string) => string;
 };
 /**
  * Credential-loading failures (CR-016).
@@ -1497,6 +1924,10 @@ export declare const CREDENTIAL: {
     readonly insecureFileModeLabel: "mode";
     readonly insecureFileWhy: "It was not read. A credential file must be readable only by its owner.";
     readonly insecureFileFix: "Restore the mode, then reconnect:";
+    /** The FOLDER (`~/.vibecommit`) is open to other accounts, not the file: same code, its own what, why and `chmod`. */
+    readonly insecureDirWhat: "The folder that holds the credential file is open to other accounts on this machine.";
+    readonly insecureDirWhyLabel: "folder";
+    readonly insecureDirWhy: "The credential was not read. This folder must be accessible only to its owner.";
     readonly unreadableWhat: "The credential file could not be read.";
     readonly unreadableWhy: "It exists but does not contain a credential in the expected form.";
     /** `CR-216/U4`. Was "Replace it by reconnecting:" — see `wrongClassFix` above. */
@@ -1530,15 +1961,26 @@ export declare const AUTH: {
     readonly nextCommand: "vibecommit connect";
     readonly emptyWhat: "No credential was given.";
     readonly emptyWhy: "Nothing was read, so nothing was written.";
-    readonly emptyFix: "Mint one, then run:";
+    /**
+     * PR 6 item 1. Was "Mint one, then run:" over the URL alone, so the label promised a command and printed a link, and the
+     * non-interactive path was named nowhere. The URL comes FIRST (inside the label, where it cannot be wrapped away from
+     * its sentence) and the commands LAST, so the fix stays last (§13.6). A function because `URLS` is declared below.
+     */
+    readonly mintFix: (url: string) => string;
+    /**
+     * The two ways to hand it over: piped (a script or an agent), or typed at a terminal. `--stdin` never continues into `connect`
+     * (D32 guard 1). `auth` is `authCommandFor(env, selfPath)`: a plugin-only machine has no `vibecommit` on PATH, so the line names
+     * `node <path> auth` there (README, "Keeping a machine connected"), and handing it `vibecommit auth` would be a new wrong output.
+     */
+    readonly mintCommands: (auth: string) => readonly string[];
     readonly wrongClassWhat: "That is not a VibeCommit ingest credential.";
     readonly wrongClassWhy: "An ingest credential begins vcik_. Nothing was written and nothing was sent.";
-    readonly wrongClassFix: "Mint one, then run:";
     readonly argvWhat: "A credential must not be passed as an argument.";
     readonly argvWhy: "Arguments are written to your shell history and are readable by other processes on this machine while the command runs. Treat the one you just typed as exposed and revoke it.";
     readonly argvFix: "Read it from the terminal, or from a pipe:";
     readonly argvFixPrompt: "vibecommit auth";
-    readonly argvFixStdin: "printf %s \"$TOKEN\" | vibecommit auth --stdin";
+    /** A pipe, so `channelCommand` cannot rewrite it: it takes the channel's `auth` (`authCommandFor`) instead. */
+    readonly argvFixStdin: (auth: string) => string;
     /**
      * Printed before the request, naming the label the credential will carry in
      * `/app/settings` — the list a user revokes from, so the name they will look
@@ -1628,6 +2070,18 @@ export declare const SYSTEM_MESSAGE: {
      * users and its hash chain detects post-write tampering").
      */
     readonly captureConfirmed: (dashboardUrl: string) => string;
+    /**
+     * States 6-9 — style guide §10.1 (0.7.0, design review D16 · 10A), all emitted by the `SessionStart` hook. One
+     * plain-text line each, ≤120 characters, no SGR. The wording is the design doc's and the merged style guide's,
+     * byte for byte; `test/session-start.test.ts` pins the length of every one.
+     *
+     * 6 — hooks added, once per clone. 7 — `core.hooksPath` is set, once per clone. 8 — the clone has its own
+     * commit hook, once per clone. 9 — `grants.json` is unreadable, once per (machine, day).
+     */
+    readonly hooksAdded: "VibeCommit added its post-commit and post-rewrite hooks to this clone, so commits can link to sessions.";
+    readonly hooksPathSet: "VibeCommit captures sessions here, not commits: core.hooksPath is set. Run `vibecommit status` here for the fix.";
+    readonly ownCommitHook: "VibeCommit didn't add its commit hook here: this clone has its own. Run `vibecommit connect` here to chain it.";
+    readonly grantsUnreadable: "VibeCommit capture stopped on this machine: ~/.vibecommit/grants.json can't be read. Run `vibecommit status`.";
 };
 /**
  * The out-of-tree redaction marker — `CR-024d`, D57 §OV8d.
@@ -1658,6 +2112,10 @@ export declare const REDACTION: {
 /** Commands the copy points at. One definition, so a rename cannot half-land. */
 export declare const COMMANDS: {
     readonly connect: "vibecommit connect";
+    /** `D33 · 27A`. */
+    readonly scan: "vibecommit scan";
+    /** `D14`/`D15`. */
+    readonly backfill: "vibecommit backfill";
     /**
      * `CR-216/U2`. The only verb a credential FAULT's fix line may name — it can
      * replace the credential from any state. `CR-226` lets `connect` mint one
@@ -1678,6 +2136,10 @@ export declare const COMMANDS: {
     /** The ref form, for the detached-HEAD refusal. */
     readonly reportRef: "vibecommit report --since 2026-07-08 --ref main";
     readonly off: "vibecommit off";
+    /** The picker's screen-reader flag: a FLAG on `connect`, like `signIn`. */
+    readonly connectTyped: "vibecommit connect --typed";
+    /** The git hook's own verb. `hooksPathFixManual` tells a user to add it to a hook they keep. */
+    readonly postCommit: "vibecommit post-commit";
     /**
      * `CR-086`. The ARGUMENT SHAPE, shown once so the usage error and the retry
      * fix line cannot drift apart. There is no argument parser in this package —
@@ -1688,6 +2150,8 @@ export declare const COMMANDS: {
      */
     readonly why: "vibecommit why src/auth/session.ts:47";
     readonly chmodCredentials: "chmod 600 ~/.vibecommit/credentials.json";
+    /** The folder's remedy, for `CREDENTIAL_FILE_INSECURE` when the folder is the one with the wrong mode. */
+    readonly chmodDirectory: "chmod 700 ~/.vibecommit";
     /**
      * ⛔ THE INSTALL COMMAND, TRANSCRIBED FROM `claude-plugin/README.md:12` — and
      * it is deliberately NOT an invented update verb (`U1`, 2026-08-30).
@@ -1705,6 +2169,8 @@ export declare const COMMANDS: {
      * together — the wording and the command are one unit.
      */
     readonly pluginInstall: "/plugin install vibecommit@vibecommit-capture";
+    /** The npm channel's way to a newer client: the package's own documented install, at `latest`. */
+    readonly npmUpdate: "npm install -g @vibe-commit/capture@latest";
 };
 /**
  * Every URL the CLI prints. Here rather than inline for the same reason as the
@@ -1726,6 +2192,8 @@ export declare const URLS: {
      * deepening this constant is that task's, not a later guess.
      */
     readonly commits: "https://vibecommit.ai/app/commits";
+    /** `/app/conversations`: where an uploaded backfill lands (D19). `/app` (`dashboard`) is the ending after a no. */
+    readonly conversations: "https://vibecommit.ai/app/conversations";
     /**
      * One recorded session — the ending's link when the ingest 2xx carried a `conversation_id` (`DX D8`).
      * Verified by file: `vibecommit-web` `app/app/conversations/[id]/page.tsx` exists on `main`, and an