@vibe-commit/capture 0.6.1 → 0.7.0

package/dist/agents/types.d.ts

@@ -137,13 +137,27 @@ export type RedactionProfile = "claude-code" | "codex-cli" | "cursor";
  */
 export type DelegatedTranscripts = "discover" | "announce";
 /**
- * The three hook events DESIGN.md §13.7 names.
+ * The four hook events this client registers.
  *
- * Both members of this lane fire the same three; that is exactly why
+ * Every member of this lane fires the same four; that is exactly why
  * `hook_event_name` was REJECTED as an adapter selector (`CR-183`) — the events
  * are shared, so they discriminate nothing.
+ *
+ * ⛔ **`SessionStart` is the fourth, and it is the one that never uploads** (0.7.0,
+ * eng review D3 · A). `Stop`, `PreCompact` and `SessionEnd` flow into the code
+ * that reads a transcript and sends it; `SessionStart` must only install git
+ * hooks and say so, so `hooks/entry.ts` resolves the canonical event FIRST and
+ * branches to its own handler before the consent gate and before anything reads
+ * `transcript_path`. It sits in this list, and not in a table of its own, so the
+ * compiler makes each dialect declare its budget and its spelling.
+ *
+ *   event          Claude Code    Codex          Cursor          reads a transcript
+ *   Stop           Stop           Stop           stop            yes
+ *   PreCompact     PreCompact     PreCompact     preCompact      yes
+ *   SessionEnd     SessionEnd     SessionEnd     sessionEnd      yes
+ *   SessionStart   SessionStart   SessionStart   sessionStart    NEVER
  */
-export declare const HOOK_EVENTS: readonly ["Stop", "PreCompact", "SessionEnd"];
+export declare const HOOK_EVENTS: readonly ["Stop", "PreCompact", "SessionEnd", "SessionStart"];
 export type HookEventName = (typeof HOOK_EVENTS)[number];
 /**
  * One event's two clocks, and the relation between them is the point.
@@ -173,6 +187,77 @@ export interface AgentHookConfig {
     readonly path: (home: string, env: NodeJS.ProcessEnv) => string;
     readonly shape: HookDocShape;
 }
+/**
+ * One transcript file a source adapter saw — `D11 · A`, `scan`.
+ *
+ * ⛔ **`stat`ed for its times and NEVER OPENED.** Everything the picker, the
+ * offer and the backfill count comes from names and times, because opening a
+ * transcript of a repo nobody granted is the read the consent design forbids. A
+ * field that could only be filled by reading the file does not belong here.
+ */
+export interface SourceSession {
+    readonly path: string;
+    readonly mtimeMs: number;
+    /**
+     * When the agent itself says the session began, where it keeps that. Codex's
+     * index does (`created_at`); the folder-keyed agents do not, and for them the
+     * file's mtime stands in everywhere a date is shown.
+     */
+    readonly startedMs?: number;
+}
+/** One agent project folder: its encoded name, and the sessions found in it. */
+export interface SourceFolder {
+    readonly name: string;
+    readonly sessions: readonly SourceSession[];
+}
+/** One index row: a session whose agent already recorded the folder it ran in. */
+export interface SourceRow {
+    readonly cwd: string;
+    readonly origin: string | null;
+    readonly session: SourceSession;
+}
+/** Why a store could not be listed. Each is a different line in `Not listed here`. */
+export type UnreadableReason = "unrecognised index" | "index locked" | "unreadable";
+/**
+ * What one agent's store yields, without a transcript being opened.
+ *
+ * The two shapes are the two ways the three agents keep sessions, and they are
+ * not interchangeable: a FOLDER-keyed agent (Claude Code, Cursor) names the
+ * folder by lossy encoding, so the engine has to resolve it against the
+ * filesystem and can fail to (`encode` and `isHashed` are what that walk needs);
+ * an INDEXED agent (Codex) records the real `cwd`, so it is never ambiguous.
+ *
+ * ⛔ **`unreadable` is an answer, not an exception.** One agent's store failing
+ * hides that agent's rows and nothing else's, and `scan` reports it; a thrown
+ * error here would take the other two agents' rows down with it.
+ */
+export type SessionSource = {
+    readonly kind: "folders";
+    readonly folders: readonly SourceFolder[];
+    /** This dialect's `encodeProjectPath`, handed over so the walk uses the same one. */
+    readonly encode: (path: string) => string;
+    /** Is this folder name a truncated-and-hashed one, which cannot be inverted? */
+    readonly isHashed: (name: string) => boolean;
+    /**
+     * Paths the agent ITSELF recorded having run in — a second skip signal. A
+     * folder whose name encodes to a recorded path that no longer exists is one
+     * whose sessions may belong to that deleted path, whatever else now matches.
+     * Empty for an agent that keeps no such record.
+     */
+    readonly recorded: readonly string[];
+} | {
+    readonly kind: "rows";
+    readonly rows: readonly SourceRow[];
+    /**
+     * Rollout files on disk that no index row names — counted, never opened. Only
+     * the index's own agent has the notion; a folder-keyed agent has no index to
+     * be missing from.
+     */
+    readonly unindexed: number;
+} | {
+    readonly kind: "unreadable";
+    readonly reason: UnreadableReason;
+};
 /** Where `connect` found the session running right now. */
 export interface LocatedTranscript {
     readonly path: string;
@@ -260,11 +345,14 @@ export interface TranscriptDialect {
      * (lost permanently — that event has no next invocation) and no gap-stamp
      * reserve. Nothing raises and the hook still exits 0.
      *
-     * ⚠ **Widening `HookEventName` was the obvious fix and it is the wrong one.**
-     * The three map 1:1, so a rename belongs in a per-dialect table; widening the
-     * union would make `Readonly<Record<HookEventName, EventBudget>>` non-total
-     * over the real event set and force every dialect to declare budgets for
-     * events it can never receive.
+     * ⚠ **Widening `HookEventName` was the wrong fix for a RENAME, and it is the right
+     * one for a new event** (0.7.0, eng review D3 · A). The first three map 1:1, so a
+     * rename belongs in a per-dialect table. `SessionStart` is a new event that ALL
+     * THREE agents deliver (Claude Code and Codex measured live, Cursor read out of
+     * the shipped bundle — see each dialect), so the argument that stopped the
+     * widening — "force every dialect to declare budgets for events it can never
+     * receive" — no longer holds, and the compiler is now the thing that makes a
+     * dialect added later declare its `SessionStart` spelling and budget.
      *
      * ## ⚠ MEASURED per dialect, and the two measurements differ in kind
      *
@@ -304,6 +392,28 @@ export interface TranscriptDialect {
      * is exactly the cap Codex silently clamps to — measured, not inferred.
      */
     readonly hookConfig: AgentHookConfig;
+    /**
+     * ⛔ **WHAT SESSIONS DOES THIS AGENT HAVE ON DISK — without opening one.**
+     * `D11 · A`, `scan`, the picker and the backfill offer.
+     *
+     * Listed by NAME and TIME only (`SourceSession`). The consent design is that no
+     * path opens a transcript of an ungranted repo, so the thing that decides what
+     * to offer cannot be the thing that reads the transcripts. ⚠ Each adapter fails
+     * closed on its own: an unreadable store is `{ kind: "unreadable" }` and hides
+     * that agent's rows only.
+     *
+     * ⛔ **REQUIRED, not optional, and that is `admitsFile`'s device.** A dialect
+     * added later must ANSWER how its sessions are found, and the compiler is what
+     * asks; an agent that cannot answer without opening a transcript returns
+     * `unreadable` and says so, which is a decision a reviewer sees.
+     *
+     * ⚠ A MEASURED requirement and not a speculative one: Open Question 3 found the
+     * two folder-keyed agents encode a path DIFFERENTLY (Claude Code per UTF-16
+     * unit with no collapsing; Cursor collapsing runs and trimming the ends), and
+     * the shipped `connect` looked in the wrong folder for any repo path holding an
+     * `_` or a space because it assumed one rule.
+     */
+    readonly sessionSource: (home: string, env: NodeJS.ProcessEnv) => SessionSource;
     /** Per-event clocks. See `EventBudget` for the relation that binds them. */
     readonly events: Readonly<Record<HookEventName, EventBudget>>;
     readonly delegatedTranscripts: DelegatedTranscripts;

package/dist/agents/types.js

@@ -57,11 +57,25 @@
  */
 export const UNKNOWN_AGENT_ID = "unknown";
 /**
- * The three hook events DESIGN.md §13.7 names.
+ * The four hook events this client registers.
  *
- * Both members of this lane fire the same three; that is exactly why
+ * Every member of this lane fires the same four; that is exactly why
  * `hook_event_name` was REJECTED as an adapter selector (`CR-183`) — the events
  * are shared, so they discriminate nothing.
+ *
+ * ⛔ **`SessionStart` is the fourth, and it is the one that never uploads** (0.7.0,
+ * eng review D3 · A). `Stop`, `PreCompact` and `SessionEnd` flow into the code
+ * that reads a transcript and sends it; `SessionStart` must only install git
+ * hooks and say so, so `hooks/entry.ts` resolves the canonical event FIRST and
+ * branches to its own handler before the consent gate and before anything reads
+ * `transcript_path`. It sits in this list, and not in a table of its own, so the
+ * compiler makes each dialect declare its budget and its spelling.
+ *
+ *   event          Claude Code    Codex          Cursor          reads a transcript
+ *   Stop           Stop           Stop           stop            yes
+ *   PreCompact     PreCompact     PreCompact     preCompact      yes
+ *   SessionEnd     SessionEnd     SessionEnd     sessionEnd      yes
+ *   SessionStart   SessionStart   SessionStart   sessionStart    NEVER
  */
-export const HOOK_EVENTS = ["Stop", "PreCompact", "SessionEnd"];
+export const HOOK_EVENTS = ["Stop", "PreCompact", "SessionEnd", "SessionStart"];
 //# sourceMappingURL=types.js.map

package/dist/agents/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AA4BH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AA6D1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AA4BH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AA6D1C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,CAAU,CAAC"}

package/dist/commands/approval_pending.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The org-approval-pending block — style guide §10.2's "held" beat, D65 §DR6, D81. One definition for the two places that
+ * print it: `connect`, on the 403 its own test capture got, and `status`, for a repo whose last upload got that same 403.
+ *
+ * ⚠ EXISTING COPY ONLY. `status` adds no sentence of its own; it prints what `connect` prints, so the two cannot drift
+ * (`org_pending.ts` records that the 403 happened). The shared clause renders on EVERY branch and `owners_notified` `> 0`
+ * ADDS to it (D81); `null` and `0` never claim a notification.
+ */
+export declare function approvalPendingBlock(colour: boolean, repoSlug: string, ownersNotified: number | null): string[];

package/dist/commands/approval_pending.js

@@ -0,0 +1,23 @@
+/**
+ * The org-approval-pending block — style guide §10.2's "held" beat, D65 §DR6, D81. One definition for the two places that
+ * print it: `connect`, on the 403 its own test capture got, and `status`, for a repo whose last upload got that same 403.
+ *
+ * ⚠ EXISTING COPY ONLY. `status` adds no sentence of its own; it prints what `connect` prints, so the two cannot drift
+ * (`org_pending.ts` records that the 403 happened). The shared clause renders on EVERY branch and `owners_notified` `> 0`
+ * ADDS to it (D81); `null` and `0` never claim a notification.
+ */
+import { CONNECT, URLS } from "../copy/index.js";
+import { renderErrorBlock } from "../term.js";
+export function approvalPendingBlock(colour, repoSlug, ownersNotified) {
+    const why = ownersNotified !== null && ownersNotified > 0
+        ? `${CONNECT.pendingRecorded} ${CONNECT.pendingNotified(ownersNotified)}`
+        : CONNECT.pendingRecorded;
+    return renderErrorBlock({
+        kind: "warn",
+        what: CONNECT.pendingWhat,
+        why: [CONNECT.pendingWhy(repoSlug), why, CONNECT.pendingBuffered],
+        fixLabel: CONNECT.pendingTrackLabel,
+        fixes: [URLS.captureAccess],
+    }, colour);
+}
+//# sourceMappingURL=approval_pending.js.map

package/dist/commands/approval_pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval_pending.js","sourceRoot":"","sources":["../../src/commands/approval_pending.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,UAAU,oBAAoB,CAAC,MAAe,EAAE,QAAgB,EAAE,cAA6B;IACnG,MAAM,GAAG,GACP,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,CAAC;QAC3C,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;QACzE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAC9B,OAAO,gBAAgB,CACrB;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO,CAAC,WAAW;QACzB,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC;QACjE,QAAQ,EAAE,OAAO,CAAC,iBAAiB;QACnC,KAAK,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC;KAC5B,EACD,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/commands/auth.js

@@ -73,11 +73,13 @@
  * @provenance vibecommit-mcp src/transport/server.ts — POST /oauth/ingest-credential is the mint route, verified
  * @provenance vibecommit-web app/api/ingest-credentials/route.ts — the dashboard producer the paste path still serves, verified
  */
-import { AUTH, COMMANDS, DEVICE, HELP, URLS } from "../copy/index.js";
-import { authCommandFor } from "../install.js";
+import { AUTH, DEVICE, PICKER, URLS } from "../copy/index.js";
+import { renderVerbHelp } from "../verb_help.js";
+import { authCommandFor, channelCommand } from "../install.js";
 import { writeLines } from "./context.js";
 import { EXIT } from "../exit.js";
 import { INGEST_TOKEN_PREFIX, IngestCredential, saveCredential } from "../credential.js";
+import { machineCapture, machineSummary } from "../machine_state.js";
 import { credentialsPath } from "../paths.js";
 import { resolveProjectKeys } from "../project.js";
 import { paint, renderErrorBlock, tildePath, wrap } from "../term.js";
@@ -98,10 +100,11 @@ export async function auth(ctx, argv, deps = {}) {
     if (positional.length > 0) {
         writeLines(ctx.stderr, renderErrorBlock({
             kind: "bad",
+            code: "CREDENTIAL_IN_ARGV",
             what: AUTH.argvWhat,
             why: [AUTH.argvWhy],
             fixLabel: AUTH.argvFix,
-            fixes: [AUTH.argvFixPrompt, AUTH.argvFixStdin],
+            fixes: [channelCommand(ctx.env, ctx.selfPath, AUTH.argvFixPrompt), AUTH.argvFixStdin(authCommandFor(ctx.env, ctx.selfPath))],
         }, ctx.colour));
         return EXIT.usage;
     }
@@ -110,7 +113,8 @@ export async function auth(ctx, argv, deps = {}) {
     // exactly that a usage error) runs first. By the time this is reached, `positional.length === 0`, so
     // `--help` still has no side effects — nothing below has read or written anything yet either way.
     if (argv.includes("--help") || argv.includes("-h")) {
-        writeLines(ctx.stdout, [HELP.commands.auth]);
+        const helpVerb = "auth"; // an identifier, not a literal, at the writer: `copy-inline-literals` follows argument positions
+        writeLines(ctx.stdout, renderVerbHelp(helpVerb));
         return EXIT.ok;
     }
     const piped = argv.includes(STDIN_FLAG) || !ctx.stdinIsTty;
@@ -119,6 +123,7 @@ export async function auth(ctx, argv, deps = {}) {
         writeLines(ctx.stderr, renderErrorBlock(piped
             ? {
                 kind: "bad",
+                code: "SIGNIN_CODE_NEEDS_TTY",
                 what: DEVICE.needsTerminalWhat,
                 why: [DEVICE.needsTerminalWhy],
                 fixLabel: DEVICE.needsTerminalFix,
@@ -126,10 +131,11 @@ export async function auth(ctx, argv, deps = {}) {
             }
             : {
                 kind: "bad",
+                code: "AUTH_FLAGS_CONFLICT",
                 what: DEVICE.conflictWhat,
                 why: [DEVICE.conflictWhy],
                 fixLabel: DEVICE.conflictFix,
-                fixes: [COMMANDS.auth, `${COMMANDS.auth} ${PASTE_FLAG}`],
+                fixes: [authCommandFor(ctx.env, ctx.selfPath), `${authCommandFor(ctx.env, ctx.selfPath)} ${PASTE_FLAG}`],
             }, ctx.colour));
         return EXIT.usage;
     }
@@ -161,10 +167,11 @@ export async function auth(ctx, argv, deps = {}) {
     if (secret === "") {
         writeLines(ctx.stderr, renderErrorBlock({
             kind: "bad",
+            code: "CREDENTIAL_EMPTY",
             what: AUTH.emptyWhat,
             why: [AUTH.emptyWhy],
-            fixLabel: AUTH.emptyFix,
-            fixes: [URLS.settings],
+            fixLabel: AUTH.mintFix(URLS.settings),
+            fixes: AUTH.mintCommands(authCommandFor(ctx.env, ctx.selfPath)),
         }, ctx.colour));
         return EXIT.failure;
     }
@@ -175,10 +182,11 @@ export async function auth(ctx, argv, deps = {}) {
     if (!secret.startsWith(INGEST_TOKEN_PREFIX)) {
         writeLines(ctx.stderr, renderErrorBlock({
             kind: "bad",
+            code: "CREDENTIAL_NOT_INGEST",
             what: AUTH.wrongClassWhat,
             why: [AUTH.wrongClassWhy],
-            fixLabel: AUTH.wrongClassFix,
-            fixes: [URLS.settings],
+            fixLabel: AUTH.mintFix(URLS.settings),
+            fixes: AUTH.mintCommands(authCommandFor(ctx.env, ctx.selfPath)),
         }, ctx.colour));
         return EXIT.failure;
     }
@@ -194,14 +202,26 @@ export async function auth(ctx, argv, deps = {}) {
  * block and the exit are exactly what they were.
  */
 async function saved(ctx, deps, piped, notes = []) {
-    const shouldConnect = !piped && deps.connect !== undefined && resolveProjectKeys(ctx.cwd) !== null;
+    // 0.7.0, D32 · 26A (supersedes only L6's "outside a repository" clause). Inside a work tree the chain is unchanged (L2).
+    // Outside one, the continuation is the picker flow, and only on a machine that has nothing captured yet; a machine that
+    // already captures prints one line and no picker. ⛔ BOTH of 0.6.0's other guards stay: `piped` (`--stdin`, or no
+    // terminal) NEVER continues, so a CI runner with no grant still saves the credential and exits 0 instead of reaching the
+    // non-terminal refusal and exiting 2; and the continuation gets no `browser` (`index.ts` hands `connect` none), so a
+    // second sign-in cannot start.
+    const inRepo = resolveProjectKeys(ctx.cwd) !== null;
+    const capture = inRepo || piped || deps.connect === undefined ? null : machineCapture(ctx.home);
+    const shouldConnect = !piped && deps.connect !== undefined && (inRepo || capture?.kind === "none");
+    const staysOn = capture?.kind === "on";
     writeLines(ctx.stdout, [
         ...renderErrorBlock({
             kind: "ok",
             what: AUTH.savedWhat,
             why: [AUTH.savedWhy(tildePath(credentialsPath(ctx.home), ctx.home)), ...notes],
-            ...(shouldConnect ? {} : { fixLabel: AUTH.nextLabel, fixes: [AUTH.nextCommand] }),
+            ...(shouldConnect || staysOn
+                ? {}
+                : { fixLabel: AUTH.nextLabel, fixes: [channelCommand(ctx.env, ctx.selfPath, AUTH.nextCommand)] }),
         }, ctx.colour),
+        ...(capture?.kind === "on" ? ["", ...wrap(PICKER.authStays(machineSummary(capture)), 2)] : []),
     ]);
     if (shouldConnect && deps.connect !== undefined)
         return await deps.connect(ctx);

package/dist/commands/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AA+BtE;;;GAGG;AACH,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,gEAAgE;AAChE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,yEAAyE;AACzE,MAAM,WAAW,GAAG,UAAU,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,GAAmB,EACnB,IAAuB,EACvB,OAAiB,EAAE;IAEnB,2EAA2E;IAC3E,6EAA6E;IAC7E,8BAA8B;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YACnB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,KAAK,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC;SAC/C,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,kGAAkG;IAClG,oGAAoG;IACpG,qGAAqG;IACrG,kGAAkG;IAClG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;IAE3D,mGAAmG;IACnG,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACvE,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd,KAAK;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,MAAM,CAAC,iBAAiB;gBAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;gBACjC,KAAK,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;aAC5E;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,MAAM,CAAC,YAAY;gBACzB,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,WAAW;gBAC5B,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;aACzD,EACL,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChF,kGAAkG;QAClG,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACpD,wEAAwE;QACxE,sEAAsE;QACtE,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE;YACF,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAClC,qEAAqE;YACrE,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YACjD,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,KAAK;QACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACzD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAExE,+EAA+E;IAC/E,+EAA+E;IAC/E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE1B,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SACvB,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yEAAyE;IACzE,+EAA+E;IAC/E,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5C,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI,CAAC,cAAc;YACzB,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC;YACzB,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SACvB,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,KAAK,CAClB,GAAmB,EACnB,IAAc,EACd,KAAc,EACd,QAA2B,EAAE;IAE7B,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IACnG,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;QACrB,GAAG,gBAAgB,CACjB;YACE,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC;YAC9E,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;SAClF,EACD,GAAG,CAAC,MAAM,CACX;KACF,CAAC,CAAC;IACH,IAAI,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AA+BtE;;;GAGG;AACH,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,gEAAgE;AAChE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,yEAAyE;AACzE,MAAM,WAAW,GAAG,UAAU,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,GAAmB,EACnB,IAAuB,EACvB,OAAiB,EAAE;IAEnB,2EAA2E;IAC3E,6EAA6E;IAC7E,8BAA8B;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YACnB,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,KAAK,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;SAC7H,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,kGAAkG;IAClG,oGAAoG;IACpG,qGAAqG;IACrG,kGAAkG;IAClG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAe,CAAC,CAAC,iGAAiG;QACnI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;IAE3D,mGAAmG;IACnG,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACvE,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd,KAAK;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,MAAM,CAAC,iBAAiB;gBAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;gBACjC,KAAK,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;aAC5E;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,MAAM,CAAC,YAAY;gBACzB,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,WAAW;gBAC5B,KAAK,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;aACzG,EACL,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChF,kGAAkG;QAClG,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACpD,wEAAwE;QACxE,sEAAsE;QACtE,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE;YACF,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAClC,qEAAqE;YACrE,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YACjD,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,KAAK;QACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACzD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAExE,+EAA+E;IAC/E,+EAA+E;IAC/E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE1B,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;SAChE,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yEAAyE;IACzE,+EAA+E;IAC/E,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5C,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,IAAI,CAAC,cAAc;YACzB,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC;YACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;SAChE,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,KAAK,CAClB,GAAmB,EACnB,IAAc,EACd,KAAc,EACd,QAA2B,EAAE;IAE7B,yHAAyH;IACzH,wHAAwH;IACxH,iHAAiH;IACjH,yHAAyH;IACzH,qHAAqH;IACrH,+BAA+B;IAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChG,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC;IACvC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;QACrB,GAAG,gBAAgB,CACjB;YACE,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC;YAC9E,GAAG,CAAC,aAAa,IAAI,OAAO;gBAC1B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;SACpG,EACD,GAAG,CAAC,MAAM,CACX;QACD,GAAG,CAAC,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC,CAAC;IACH,IAAI,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}

package/dist/commands/backfill.d.ts

@@ -0,0 +1,160 @@
+/**
+ * `vibecommit backfill` — style guide §10.14, design review D14 · 8A, D15 · 9A; capture 0.7.0, PR 5.
+ *
+ * Claude Code keeps about 30 days of transcripts and then deletes them. This uploads the ones still on this machine,
+ * for the repositories the user chose, once they say yes — and says plainly that a backfilled session arrives WITHOUT
+ * commit links. It is offered by `connect` (`backfillForConnect`, for its seam) and is a verb in its own right.
+ *
+ * ## What it is made of
+ *
+ * - **Which sessions** come from the scan engine (`scanMachine`): folder names and Codex's index, no transcript opened.
+ *   Only repos the consent gate admits (`isCaptureAllowed`) are offered, and only sessions with unsent bytes. A session in
+ *   a clone with no reflog, over the 50 MiB cap, or from Cursor is left OUT of the count and named in a muted line, so the
+ *   offer never promises an upload the run would skip.
+ * - **How one is sent** is `closeSession` (the code `finalize` runs): sub-agent streams first, then the main stream, then
+ *   — only for a session quiet for 30 minutes — the seal. Through `deliver()` with `byHook: false`, each clone's own
+ *   confinement roots, and the hooks' own offset ledger, so a re-run sends only what is new.
+ * - **Each session goes through its OWN agent's dialect** (transport, redaction profile, confinement root); the file is
+ *   admitted only if it lies under that agent's transcript root (`admitsTranscript`), which for Codex is
+ *   `~/.codex/sessions`.
+ * - **The consent gate runs again before EACH session.** The offer is a plan; `vibecommit off` in another terminal during a
+ *   long run must stop the rest of that repo, so `uploadOne` asks `isCaptureAllowed` first.
+ *
+ * ## ⛔ The one transcript read before an upload (exception 1)
+ *
+ * Alexander ruled (2026-10-24 10:53 EST) that the deleted-sibling case — a folder whose original path is gone and whose
+ * encoded name now resolves to a different surviving repo — is CLOSED, not accepted. So, after both the grant y/N and the
+ * backfill y/N, one session at a time just before its upload, a Claude Code session has ONE value read from its
+ * transcript: the `cwd` of the first record that carries one (`firstRecordedCwd`). It uploads only if that path is
+ * absolute, exists, is a git work tree, and is the same clone (common dir) the folder was matched to. This is an exception
+ * to D60 §D6 (the client may display transcripts but not analyze them), and it is the ONLY one: the scan, the picker and
+ * the offer open no transcript, and nothing else is read from this one. Codex needs no check (its index already holds the
+ * real `cwd`). Cursor records no folder at all (measured, STATIC), so its sessions are never uploaded and are counted instead.
+ */
+import type { AgentId } from "../agents/types.js";
+import { type CommandContext } from "./context.js";
+import { closeSession } from "./finalize.js";
+import { scanMachine, type ScanResult } from "./scan.js";
+/** One session that may be uploaded: a file the scan attributed to a granted repo, with unsent bytes. */
+interface Candidate {
+    readonly agent: AgentId;
+    /** The repo's slug as the plan names it — what the consent gate is asked about again before the upload. */
+    readonly slug: string;
+    readonly sessionId: string | null;
+    readonly path: string;
+    readonly dir: string;
+    readonly clone: string;
+    readonly commonDir: string;
+    readonly mtimeMs: number;
+    readonly startedMs: number;
+    readonly size: number;
+}
+interface RepoPlan {
+    readonly slug: string;
+    readonly candidates: readonly Candidate[];
+}
+export interface BackfillPlan {
+    readonly repos: readonly RepoPlan[];
+    /** Sessions that will be offered. */
+    readonly total: number;
+    /** Cursor sessions in the repos chosen that have unsent bytes. Never uploaded (OQ 7), so never in `total`. */
+    readonly cursorSessions: number;
+    /** Sessions over the 50 MiB cap, left out of `total` and named in one line. */
+    readonly overSize: number;
+    /** Sessions in a clone with no reflog, left out of `total`: the reflog test is the only guard against a reused path. */
+    readonly noReflog: readonly {
+        readonly path: string;
+        readonly sessions: number;
+    }[];
+}
+/** How `runBackfill` ended — what a caller (`connect`) needs to choose its closing URL. */
+export type BackfillEnd = "uploaded" | "declined" | "nothing" | "interrupted" | "stopped" | "refused";
+export interface BackfillResult {
+    readonly exit: number;
+    readonly end: BackfillEnd;
+    readonly uploaded: number;
+}
+/** What the folder check found. A transcript that cannot be opened is a different fact from one that records no folder. */
+export type RecordedCwd = {
+    readonly kind: "found";
+    readonly cwd: string;
+} | {
+    readonly kind: "none";
+} | {
+    readonly kind: "unreadable";
+};
+export interface BackfillDeps {
+    readonly scanMachine?: typeof scanMachine;
+    readonly closeSession?: typeof closeSession;
+    /** Ctrl+C during the upload. Absent: a real SIGINT listener for the duration of the run. */
+    readonly signal?: AbortSignal;
+    /** How long a repo runs before its `…` line prints. A test seam. */
+    readonly slowAfterMs?: number;
+    /** The folder check's reader — a test seam. Defaults to `firstRecordedCwd`. */
+    readonly readCwd?: (path: string) => RecordedCwd;
+    /** Run inside `connect` (the repos are the ones it just showed). Absent: the verb on its own. */
+    readonly fromConnect?: boolean;
+}
+/**
+ * Plan the offer from a scan. ⛔ Opens no transcript: a session's size is its `lstat`, and "unsent" is a comparison with the
+ * offset ledger the hooks already keep — a state file, not a transcript.
+ */
+export declare function planBackfill(ctx: Pick<CommandContext, "home" | "env">, scanFn?: typeof scanMachine): BackfillPlan;
+/**
+ * The offer, as lines (§10.14, as VQ redrew it after the PR 5 review). SGR roles: `text` the repo rows and the question,
+ * `muted` the folder rows and the not-offered lines. `nowMs` is an argument so a golden file pins the clock.
+ *
+ * ## Widths
+ *
+ * ⛔ A folder path is cut from the LEFT to fit 80 columns whatever the slug width (§13.4, D27): the folder column is never
+ * narrowed to the slug column. The right-hand text (counts, agents) starts at one shared column: the slug column, or further
+ * right if a path needs it, and never so far that a line passes 80.
+ */
+export declare function renderOffer(plan: BackfillPlan, options: {
+    colour: boolean;
+    home: string;
+    nowMs: number;
+    standalone?: boolean;
+}): string[];
+/**
+ * The `cwd` of the transcript's first record that has one. ⛔ ONE VALUE. The record is parsed to read its top-level `cwd`
+ * and nothing else is looked at, kept, returned or sent; a line that does not mention `"cwd"` is not parsed at all.
+ * `none` (no record carries one in the first `FOLDER_CHECK_MAX_BYTES`) and `unreadable` (the file cannot be opened) both
+ * fail closed — the session is skipped — but they are different facts and are told apart.
+ */
+export declare function firstRecordedCwd(path: string): RecordedCwd;
+/**
+ * Ask, then upload. Everything `backfill` and `connect` share. `connect` calls it AFTER its own grant y/N and its
+ * "Capture is on" block (through `backfillForConnect`), and chooses its closing URL from `end`.
+ */
+export declare function runBackfill(ctx: CommandContext, deps?: BackfillDeps): Promise<BackfillResult>;
+/**
+ * What `connect` needs back to choose its closing URL (D19). `stopped` means the run printed its stop block with the
+ * `vibecommit backfill` resume fix: `connect` still exits 0, because capture is already on (D18).
+ */
+export type BackfillForConnect = {
+    readonly kind: "declined";
+} | {
+    readonly kind: "ran";
+    readonly uploaded: number;
+} | {
+    readonly kind: "stopped";
+    readonly uploaded: number;
+};
+/**
+ * `connect`'s backfill step. It is handed the repos `connect`'s own scan found (the picker's), asks the backfill y/N
+ * and runs, so the picker's scan is not repeated. It owns its Ctrl+C: stopping a backfill is `ran`, and the run has
+ * already printed the stop line. A no, nothing waiting, and a refusal are all `declined`: `connect` ends on `/app`.
+ *
+ * ⚠ The consent gate runs HERE, over what `connect` just granted, not over what the scan saw before the grant: a repo the
+ * user did not choose is dropped by `planBackfill` however it got into `repos`; so is a clone with no reflog, which the plan asks
+ * git about itself.
+ */
+export declare function backfillForConnect(ctx: CommandContext, repos: ScanResult["repos"], deps?: BackfillDeps): Promise<BackfillForConnect>;
+/**
+ * `vibecommit backfill`. Exit `0` done (held sessions included: org-pending is 0, as in §10.2), `1` stopped with the resume
+ * fix, `2` no terminal, `3` not connected, `4` nothing to upload. It ends on the dashboard URL after a completed run or a
+ * no, and on its resume fix after a stop.
+ */
+export declare function backfill(ctx: CommandContext, argv?: readonly string[], deps?: BackfillDeps): Promise<number>;
+export {};