@vibe-commit/capture 0.6.1 → 0.8.0

package/README.md

@@ -25,10 +25,12 @@ the approved direction points at `Vibe-Commit/claude-plugin`, which vendors the
 
 | Command | What it does |
 |---|---|
-| `vibecommit connect` | Connect this repo and capture the current session. On a machine with no credential it signs you in through the browser first. |
-| `vibecommit auth` | Replace this machine's credential: sign in through the browser, or `--paste` one you made in Settings. Run it again whenever `status` or a hook says the credential is no longer accepted. Inside a git repo it then goes on to `connect` that repo; outside one it only saves the credential. |
-| `vibecommit status` | Show whether capture is on for this repo and when it last succeeded. |
-| `vibecommit off` | Stop capturing for this repo. |
+| `vibecommit connect` | Choose the repositories to capture, from any folder, and connect them: whole owners, including repos you clone later, or single repos. It shows what is uploaded and asks before it signs in, adds commit hooks to each clone, and offers to upload sessions still on this machine. A repo with no remote keeps the one-repo flow. `--typed` uses the typed prompt instead of the arrow-key list. On a machine with no credential it signs you in through the browser after you say yes; with a browser to sign in with, `g` instead signs in first to read the repositories your account already grants, then asks before anything is captured. |
+| `vibecommit auth` | Replace this machine's credential: sign in through the browser, or `--paste` one you made in Settings. Run it again whenever `status` or a hook says the credential is no longer accepted. On a terminal it then goes on to `connect`: inside a git repo, or outside one on a machine that captures nothing yet; with `--stdin` or no terminal it only saves the credential. On a terminal, a credential it saves on a machine that has already synced with your account is synced before `auth` returns. |
+| `vibecommit scan [--json]` | List the repositories you have used a coding agent in on this machine, from the agents' folder names and Codex's thread index. It opens no session file, uploads nothing and changes no setting. Exit `4` when none is found; `--json` prints one document, including what it could not list and why. |
+| `vibecommit backfill` | Upload the earlier coding-agent sessions still on this machine, for the repositories you chose. It lists them first and asks (default no); a Claude Code session is sent only after reading one value from its transcript, the folder it started in, to check it belongs to that repository. Sessions arrive without commit links. Not offered: Cursor sessions (Cursor does not record that folder), sessions over 50 MiB, and sessions in a clone with no reflog. It asks again about each repository as it goes, so `vibecommit off` stops the rest of that repository. **Exit codes:** `0` done, declined at the question, or interrupted with Ctrl+C (sessions held for an organization's approval are done too), `1` stopped with the resume fix (the server asked to wait, could not be reached, or refused this machine's credential) or could not run, `2` no terminal, or an argument was given, `3` not connected, `4` nothing to upload. **Resuming:** a stopped or interrupted run loses nothing already sent; run it again and it offers only the sessions not yet uploaded. |
+| `vibecommit status` | Show whether capture is on for this repo, or for this machine from outside a repo, and when it last succeeded. Inside a repo it also says why it is on (`basis`). On a machine with a credential it first syncs with your account (3 s at most), and lists what your account grants that this machine has not named. |
+| `vibecommit off` | Stop capturing for this repo, for every clone of it on this machine. On a machine with a credential it also tells your account, so your other machines running VibeCommit 0.8.0 or later stop capturing it once they sync. |
 | `vibecommit why <file>:<line>` | Show the conversation turns recorded against the commit that last changed this line. |
 | `vibecommit report --since <when>` | Summarise capture coverage over a time window. |
 | `vibecommit finalize --session <id>` \| `--latest` | Close a finished session's last turn so commits made in it can be recorded. |
@@ -68,7 +70,10 @@ vibecommit finalize --session <session_id>    # or --latest when only one sessio
 Exit `0` — the server confirmed the last turn is recorded. Exit `5` — the data was delivered
 but the server did not confirm it (a server older than this command): treat as **not** closed.
 Exit `2` — nothing was sent (bad arguments, an unknown or still-running session, or several
-recent sessions for `--latest`). Exit `3` — this repo is not connected. It is safe to run twice.
+recent sessions for `--latest`). Exit `3` — this repo is not connected, this machine has no credential, or its
+credential can't be used (it is not an ingest credential, its file is readable by other accounts, or it can't be read).
+Exit `1` — it was not confirmed closed for any other reason: the folder is not a git repository, the transcript cannot
+be found or read, the credential is no longer accepted, or the delivery failed. It is safe to run twice.
 Resuming the session afterwards opens a new turn; nothing already recorded is changed.
 
 `finalize` refuses a session whose transcript changed in the last few seconds. `--force` skips that check,
@@ -163,17 +168,194 @@ ask `connect`'s consent question; outside a repository, with `--stdin`, or with
 credential, exactly as before, and a refused replacement (`declined`) still exits 1 without connecting. The chained
 `connect` never opens a second sign-in. `vibecommit connect` in a repository where Claude Code has not run yet now
 installs the git and agent hooks and exits 0 (it used to exit 1 and install neither); its "no Claude Code session"
-warning is on stdout, and a `vibecommit` command on PATH that is not this one still exits 1. An organisation that
+warning is on stdout, and a `vibecommit` command on PATH that is not this one still exits 1. An organization that
 has not approved capture yet now gets its hooks installed too: the "capture is armed" screen was previously
 printed without them. The ending reports hook setup first, then prints "Connected." and, when the server's reply
 names the recorded session, a link to that session's page (`/app/conversations/<id>`), falling back to the
 captures list; the PATH check and the unconfirmed-credential note follow it. Only `connect` reads that part of the
-server's reply; the hooks never read a successful response body.
+server's reply; the hooks never read a successful response body (from 0.8.0 one hook does: SessionStart's single, bounded `GET` of
+your account's grants).
 
 0.6.1 changes no contract. When the server answers an upload with an error, the client now stops reading that
 error's body at 64 KiB even when the server does not declare its length; it used to buffer the whole body before
-checking. The hooks still never read a successful response body.
-
+checking. The hooks still never read a successful response body (from 0.8.0 one hook does: SessionStart's single, bounded `GET` of
+your account's grants).
+
+0.7.0 lets you connect from any folder, adds `scan` and `backfill`, puts a stable code on every error, and changes
+the contracts below. The hooks still never read a successful response body (from 0.8.0 one hook does: SessionStart's
+single, bounded `GET` of your account's grants).
+
+*Connecting.* `vibecommit connect` no longer needs a git work tree. It lists the repositories you have used a coding
+agent in (Claude Code, Codex CLI and Cursor) from the agents' folder names and Codex's thread index, without opening
+a session file, and you choose whole owners, including repositories you clone later, or single repositories. The
+disclosure's heading now says "coding-agent transcripts"; its paragraphs are unchanged. Your choices are saved in
+`~/.vibecommit/grants.json`; consent given per clone by 0.6.x keeps working beside it, and a `grants.json` that cannot
+be read stops capture for every repository with a remote until it is fixed. A 0.7.0 command that rewrites it keeps any
+fields it doesn't recognize, so a newer client's state survives it. After "Capture is on", `connect` offers to
+upload the earlier sessions still on this machine, a separate question that defaults to no. Inside a repository it
+shows the same list with that repository ticked, and a repository with no remote keeps the 0.6.0 flow. A repository
+with a remote and no Claude Code session yet ends on "Capture is on" and the dashboard, not 0.6.0's "no Claude Code
+session" warning; the hooks are still installed and the exit is still 0. With no terminal, `connect` refuses with exit
+`2` and the code `CONSENT_NEEDS_TTY`; the disclosure still prints first. A terminal `vibecommit auth` now continues
+into this flow, inside a git repository or outside one on a machine that captures nothing yet, so it may also offer to
+upload earlier sessions (default no); with `--stdin` or no terminal it still only saves the credential. That replaces
+the "outside a repository" clause of the 0.6.0 paragraph above; its `--stdin` and no-terminal clauses, and "The
+chained `connect` never opens a second sign-in", still hold.
+
+*New verbs and changed ones.* `vibecommit scan [--json]` lists repositories and exits `4` when it finds none.
+`vibecommit backfill` uploads earlier sessions for the repositories you chose, after two yeses and without commit
+links; its exit codes are in the table above. `vibecommit status` now answers from any folder; `status --json` gains
+`scope` and `basis` on a repository's document (`basis` is `owner`, `repo` or `per_clone`, or `null` when it is off),
+a machine document with its own keys, and `org_pending`: `{at_ms}` or `null` inside a repository, and the list of
+waiting repositories at machine level. `status` names a repository whose organization has not approved capture yet,
+from inside it or from any folder. `vibecommit off` turns the repository off by its name, for every clone of it on
+this machine.
+
+*Delivery.* A 413 no longer writes off the span. A span goes in deltas of at most 8 MiB cut on a record boundary, a
+413 halves the delta and retries, and only a single record that alone exceeds a limit (8 MiB raw, or 960 KiB
+compressed) is skipped and counted; `status` reports it as "skipped … will not be sent later". A hook sends further
+deltas only while its existing budget lasts and leaves the rest for its next event or `vibecommit finalize`. The test
+capture in `connect` sends at most one hook budget and its first upload times out after about 3 seconds (it was 5).
+
+*Hooks.* Claude Code, Codex and Cursor now register a `SessionStart` hook. In a clone you have granted, it installs the
+commit hooks once, by plain writes only (if either slot holds someone else's hook it writes nothing, and `status`
+says so), says so in one short notice, and uploads nothing, opens no transcript and makes no request. Notices show only
+in the agents' terminal interfaces, so `status` is the record in `claude -p` and `codex exec`; Cursor's `sessionStart`
+has no way to show one, and that hook is registered from reading Cursor's code, not from watching it run. Codex asks you to trust new hooks the next time it starts — until you do, it will not run them. The new `SessionStart` entry arrives untrusted, so
+existing Codex users see one review after upgrading and running `connect`, and again whenever the path of the
+`vibecommit` binary changes (an nvm switch, a plugin update). The Claude Code plugin installs no git hooks, including
+from `SessionStart`.
+
+*Errors.* Every error block now carries a stable code on its own muted line before the fix, with a link:
+`NOT_A_REPO · vibecommit.ai/docs/errors#not-a-repo`. There are 61 codes (`test/error-codes.golden.txt`); a code names
+a condition and carries no exit code. `UNKNOWN_COMMAND` replaces the help dump for an unknown verb: it prints a block
+that points to `vibecommit --help`, and the exit is still `2`. `CONSENT_NEEDS_TTY` is now on its own code line, not in
+parentheses in the sentence. A `--json` failure of `status`, `why` or `report`, and an unexpected error under `scan --json`, is now one document
+on stdout and nothing on stderr, where 0.6.x left stdout empty: `{ schema, verb, outcome: "error", error: { code, what, why, fix } }`.
+`fix` is `null` only when the block has no fix label at all; a label with nothing to type is `{ "label": …,
+"commands": [] }`. Every fix command, in the text and in `--json`, follows the install channel: a machine that has only
+the Claude Code plugin is told `node <path> …`, not a `vibecommit` it does not have. `vibecommit <verb> --help` now
+prints usage, options and exit codes for `connect`, `auth`, `scan`, `status`, `why`, `report`, `finalize` and
+`backfill`. `finalize` outside a git repository still exits `1`, and the README now says so. When `finalize` finds no
+credential it says "This machine isn't connected." (`NO_CREDENTIAL`); a credential that is present but unusable gets
+the same precise block `status` and `connect` print, and both exit `3`. A credential the server rejects still
+reaches the send and exits `1`. `auth` with an empty or wrong-kind credential now puts the settings link first and the
+commands last. Commands written inside a sentence, such as "run `vibecommit connect` to add them", follow the install
+channel too. `CLIENT_TOO_OLD` (the server sent an answer this version is too old to show) now tells an npm install to
+"Update VibeCommit to pick up the current client, then run this again:" with `npm install -g @vibe-commit/capture@latest`;
+the plugin's reinstall line is unchanged. When the folder that holds the credential file, `~/.vibecommit`, is open to
+other accounts, `CREDENTIAL_FILE_INSECURE` names the folder and gives `chmod 700 ~/.vibecommit`, not the file's
+`chmod 600`. The package's `homepage` is `https://www.vibecommit.ai/install`, its `bugs` link is the plugin's
+issues page, and `repository` is dropped, because this repository is private.
+
+*A 0.6.x defect fixed.* For a repository whose path held an `_`, a space or another character outside letters and
+digits, `connect`'s test capture looked in a Claude Code folder that does not exist and skipped the upload; it now
+spells the folder name as Claude Code does.
+
+0.8.0 lets your VibeCommit account remember which repositories you capture, so another machine can offer the same
+choices. It changes the contracts below. It needs a server that has the account-grants routes; against one that has not
+(a 404, a timeout, an answer it cannot read), a sync reads as unavailable: changes wait, and a machine that has never
+synced decides capture by its own choices, as under 0.7.0.
+
+*Account grants.* Your choices (the owners and repositories in `~/.vibecommit/grants.json`, and the repositories you
+turn off) are sent to your account by a sync (`POST /ingest/v1/grants/sync`, in requests of at most 500 changes, all
+within 3 s in total), which reads back what your account grants. A sync runs at the start of `connect` and `status`, at
+the end of `off`, once more in `connect` after the picker's changes and before "Capture is on", and in a terminal `auth`
+that saves a credential on a machine that has already synced, so that `auth` contacts the server before it returns (a
+`--stdin`, piped or no-terminal `auth` only saves the credential and sends nothing else). Changes a sync could not
+deliver wait in `grants.json` (`pending`) and go out with the next sync, and `status` and `off` say so. On a machine
+that has synced before, a repository whose only basis here is a grant still waiting to be delivered is held: its
+sessions wait on this machine, with nothing dropped, and go once a sync delivers the grant. What your account grants is
+shown, never acted on: a repository your account grants but you have not named on this machine is not captured here
+until you choose it in `connect`. What your account turns off does apply here: a repository turned off on your account,
+or refused as turned off, is not captured on this machine once this machine has learned of it (at a sync, at a read of
+your account, or from the refusal itself). The first sync on a machine also sends the choices it already holds
+(including repositories consented to per clone by 0.6.x or 0.7.0), and says so on a terminal: `Saving this machine's
+repository choices to your VibeCommit account: <names>.` Past three names it shows two and `and N more`, then all of
+them. It waits off a terminal and under `--json`. The consent sentence of the disclosure now ends: "…and is saved to
+your VibeCommit account so your other machines running VibeCommit 0.8.0 or later can offer it." Its other paragraphs are
+unchanged.
+
+*Hooks.* The hooks now read one successful response body. SessionStart makes a single `GET /ingest/v1/grants`, only when
+all of these hold: this machine's account state is stale (an upload's answer carried an `X-Grant-Epoch` that differs
+from the recorded one; no recorded state counts as epoch `0`), the last such request was over an hour ago (across all
+clones), the machine has a credential, and the hook has time left. It waits at most 1,000 ms and reads at most 64 KiB;
+if the answer stalls, is cut off, is too large or is not what the contract says, the state stays stale and nothing else
+happens. The request carries the credential and the client version and nothing about the clone: no query, no repository,
+no path. From a clone this machine does not capture it is made only when the cached account state already names an owner
+or a repository. What the GET learns is written only to `~/.vibecommit/grants-account.json` (`account`, `refused`,
+`stale`, `last_get_at`; written whole and atomically; an unreadable one is ignored, never read as "deny everything"),
+never to `grants.json`: an upload's refusal writes `refused`, an upload's epoch header writes `stale`, and the GET
+writes `account` and `last_get_at`, clears `stale`, and leaves `refused` alone. This amends three sentences above: "the
+hooks never read a successful response body" in the 0.6.0 and 0.6.1 paragraphs and "The hooks still never read a
+successful response body." in the 0.7.0 paragraph; each now carries a pointer here. The client reads `X-Grant-Epoch`
+among the headers of every credential-lane upload answer, and nothing in the body of a successful one. When that GET
+finds grants this machine has not named, SessionStart says so once per machine per account epoch, in Claude Code and
+Codex on an npm install: "Your account grants 2 repositories not captured on this machine yet. Run `vibecommit status`."
+(owners and repositories counted separately); Cursor makes no such request. The "installed but not connected" notice
+that the plugin's Stop hook can show now names the connect command of the install channel, and falls back to `Connect
+it: vibecommit.ai/install` when the line would pass 120 characters; on npm it is unchanged.
+
+*Refusals.* A server that has seen a machine sync may answer an upload with `403` and the error `repository_not_granted`
+or `repository_excluded`; the client tells them apart by that code alone. `repository_not_granted` is retried later: the
+bytes wait. `repository_excluded` is not retried: the slug is remembered in `grants-account.json`, so this machine stops
+capturing that repository until a sync clears it. A `403` with any other, missing, cut-off or unreadable body is retried
+later, as before. On a machine that has synced, a grant that has not reached your account yet holds that repository's
+uploads back on this machine (they wait; nothing is dropped), unless the clone's own per-clone consent admits it or the
+last synced state already grants it. Under the server's contract (vibecommit-mcp), only a credential that has synced may
+be refused; a machine running only 0.6.x or 0.7.0 never syncs. The refusal follows the credential, not the version. Once
+a 0.8.0 command has synced on a machine, a 0.7.0 plugin hook there that uses the same credential is refused for a
+repository your account doesn't grant yet. It holds what it would have uploaded, and drops the oldest of it once that is
+more than 24 hours old or the total passes 8 MiB. A repository chosen in a 0.8.0 command reaches your account with that
+command's sync or the next one, and what is still held then goes. A repository chosen with a 0.7.0 command after that
+sync is never granted on your account (a sync names it but asks for no grant), so every hook on the machine is refused
+for it, with the same holding and dropping, until you add it at vibecommit.ai/app/settings/repos. The plugin's update to
+0.8.0 ends both cases for new choices.
+
+*Connecting.* `vibecommit connect` on a machine with a credential syncs before it builds the picker, and the picker
+gains a group, "on your account", of what your account grants and this machine has not named; choosing one is an
+ordinary addition, with the same disclosure and question. A repository your account has turned off shows as `turn on …
+(turned off on your account)`, and a yes there turns it back on for the account too. A machine that had no credential
+when the picker was shown asks one more question after its own: `Your account also grants … Capture those here too?
+[y/N]` (past three names, two and `and N more`, then all of them); no leaves them granted on your account and not
+captured here, and `status` lists them. If the sync after the picker's changes does not reach your account, a muted line
+under "Capture is on" says so: "Your account hasn't been told yet; running `status` retries." on a machine that had not
+synced before, or when nothing you just chose waits for it, and otherwise "Your account hasn't been told yet. Until it
+is, sessions in the repositories you just chose that it doesn't grant wait on this machine; running `status` retries."
+(the install channel's command). On a terminal, on a machine with no credential, typing `g` instead of choosing signs in
+first, reads the repositories your account grants with one request, and then shows them under the same disclosure and
+asks; it is never offered by `auth` or without a terminal. The credential `g` makes is held in memory until you say yes:
+the moment it is made, a row for it goes into `~/.vibecommit/pending-revoke.json` (mode 0600 in a 0700 folder, atomic,
+never printed; it holds the token, so it is the same exposure as `credentials.json`), and `credentials.json` is written
+only after the grants. Any other ending tries to revoke it, within 3 s, at the server that made it: no, Enter, Ctrl+C, a
+run that grants nothing (including an account that grants nothing yet, if you then choose nothing here), a yes that only
+removes, a failed write, an error, or a yes whose commit is refused because another command revoked the credential, its
+record became unusable, or a credential was saved meanwhile (No, Enter, a run that grants nothing and a yes that only
+removes exit `0`; Ctrl+C, a failed write, an error and a refused commit exit `1`, and a refused commit says which). A
+revoke that gets no answer, or a kill that stops the process first, leaves the row, and the next command tries again. A
+row leaves on a revoke that was answered (revoked, or already not accepted), on a server that cannot revoke it (`g` then
+says where to revoke it in Settings), or 91 days after it was made, is never dropped before that, and the queue refuses
+a ninth row rather than drop one. If the row cannot be written, `g` tries to revoke it at once, says where to revoke it
+in Settings if that gets no answer, and ends with exit `1`. Every verb except `scan`, `--help`, `--version` and a
+`--stdin`, piped or no-terminal `auth` retries waiting rows once at its start, silently, inside one 3 s bound; `scan`
+stays free of network requests, and no hook retries.
+
+*`status` and `off`.* Both now contact the server on a machine with a credential. `status` shows `on account` (what your
+account grants that this machine has not named; an owner is written `owner/`) and `pending` (changes not yet sent, or
+`your account didn't accept · report this: github.com/Vibe-Commit/claude-plugin/issues`); machine `status --json` gains
+`account`, `account_not_here`, `pending` and `pending_rejected`, and a repository's `basis` gains the value
+`"account_not_here"` (granted on your account, not on this machine; the exit is still `3`): read `outcome` for on or
+off, not `basis !== null`. `off` turns the repository off here first, as before, and then tells your account: `Turned
+off <slug> for every clone on this machine, and on your other machines running VibeCommit 0.8.0 or later once they
+sync.`, with `N of your machines haven't synced and keep capturing it until they sync on VibeCommit 0.8.0 or later.`
+when your account knows of unsynced machines, or `Stopped here. Your other machines running VibeCommit 0.8.0 or later
+don't know yet; it will retry.` when it could not reach it; a repository your account has already turned off says so and
+is turned off here too. A machine with no credential gets 0.7.0's `off` output, byte for byte, and makes no grants
+request; a waiting revoke row is still retried.
+
+*Files.* `grants.json` gains `pending` and `synced_at` and stays written only by the commands, never by a hook; a 0.7.0
+command that rewrites it keeps both. `grants-account.json` is new, and the hooks' file. `pending-revoke.json` is new and
+holds a bearer token while a revoke is waiting.
 ## Status
 
 **Implemented**, not a scaffold. All six commands above have real bodies — OAuth sign-in

package/dist/account_not_here.d.ts

@@ -0,0 +1,15 @@
+/**
+ * What the account grants that THIS machine has not named — the pure rule behind `status`'s "on account" row and SessionStart's notice 10.
+ *
+ * Its own module so the hook path can use the rule without importing `grants_verb.ts`, which is a verb's (it syncs, prints and reaches the
+ * network); the hook-path import-graph cell in `test/connect-g-lifecycle.test.ts` keeps hooks off that module.
+ *
+ * ⛔ "Not on this machine" is what THIS machine has not named: not in its owners, its repos, or a per-clone consent, and not turned off here
+ * or on the account. A repo under an owner the account grants is covered by that owner's row, not listed again. An owner or repo the user
+ * turned off is a choice, not a gap.
+ */
+import { type AccountGrants, type Grants } from "./consent.js";
+/** `owner/` for an owner, the slug for a repo — the way every account row and the first-sync line name them. */
+export declare const ownerName: (owner: string) => string;
+/** The account's owners (as `owner/`) and then its repos this machine has not named. Pure. */
+export declare function accountNotHere(grants: Grants, account: AccountGrants, perCloneSlugs: readonly string[]): string[];

package/dist/account_not_here.js

@@ -0,0 +1,25 @@
+/**
+ * What the account grants that THIS machine has not named — the pure rule behind `status`'s "on account" row and SessionStart's notice 10.
+ *
+ * Its own module so the hook path can use the rule without importing `grants_verb.ts`, which is a verb's (it syncs, prints and reaches the
+ * network); the hook-path import-graph cell in `test/connect-g-lifecycle.test.ts` keeps hooks off that module.
+ *
+ * ⛔ "Not on this machine" is what THIS machine has not named: not in its owners, its repos, or a per-clone consent, and not turned off here
+ * or on the account. A repo under an owner the account grants is covered by that owner's row, not listed again. An owner or repo the user
+ * turned off is a choice, not a gap.
+ */
+import { normalizeSlug, ownerOfSlug } from "./consent.js";
+/** `owner/` for an owner, the slug for a repo — the way every account row and the first-sync line name them. */
+export const ownerName = (owner) => `${owner}/`;
+/** The account's owners (as `owner/`) and then its repos this machine has not named. Pure. */
+export function accountNotHere(grants, account, perCloneSlugs) {
+    const off = new Set([...grants.excluded, ...account.excluded]);
+    const named = new Set([...grants.repos, ...perCloneSlugs.map(normalizeSlug)]);
+    const owners = account.owners.filter((o) => !grants.owners.includes(o));
+    const repos = account.repos.filter((r) => !off.has(r) &&
+        !named.has(r) &&
+        !grants.owners.includes(ownerOfSlug(r)) &&
+        !account.owners.includes(ownerOfSlug(r)));
+    return [...owners.map(ownerName), ...repos];
+}
+//# sourceMappingURL=account_not_here.js.map

package/dist/account_not_here.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account_not_here.js","sourceRoot":"","sources":["../src/account_not_here.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,WAAW,EAAmC,MAAM,cAAc,CAAC;AAE3F,gHAAgH;AAChH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC;AAEhE,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,OAAsB,EAAE,aAAgC;IACrG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACX,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACb,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;IACF,OAAO,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;AAC9C,CAAC"}

package/dist/agent_hooks.d.ts

@@ -146,6 +146,14 @@ export declare function mergeHookDocument(raw: string | null, shape: HookDocShap
  * and costs at most a duplicate. `writeAgentHooks` passes `existsSync`.
  */
 binaryExists?: (path: string) => boolean): MergeOutcome;
+/**
+ * Is one of OUR entries registered for this event in `raw`? Read-only, for `status` (0.7.0): a 0.6.x machine has
+ * `Stop`, `PreCompact` and `SessionEnd` but no `SessionStart`, and `npm i -g` alone never adds one.
+ *
+ * Unparseable, absent or the wrong shape all answer false — "not registered" is the honest reading of a file
+ * this client cannot use, and `connect` is the verb that explains a refusal.
+ */
+export declare function hasRegistration(raw: string | null, shape: HookDocShape, registration: HookRegistration, binaryExists?: (path: string) => boolean): boolean;
 export type AgentHookInstall = {
     readonly kind: "installed";
     readonly path: string;

package/dist/agent_hooks.js

@@ -268,6 +268,28 @@ function isOurs(entry, shape, registration, binaryExists) {
         typeof inner.command === "string" &&
         commandIsOurs(inner.command, registration.command, binaryExists));
 }
+/**
+ * Is one of OUR entries registered for this event in `raw`? Read-only, for `status` (0.7.0): a 0.6.x machine has
+ * `Stop`, `PreCompact` and `SessionEnd` but no `SessionStart`, and `npm i -g` alone never adds one.
+ *
+ * Unparseable, absent or the wrong shape all answer false — "not registered" is the honest reading of a file
+ * this client cannot use, and `connect` is the verb that explains a refusal.
+ */
+export function hasRegistration(raw, shape, registration, binaryExists = existsSync) {
+    if (raw === null)
+        return false;
+    let doc;
+    try {
+        doc = JSON.parse(raw);
+    }
+    catch {
+        return false;
+    }
+    if (!isRecord(doc) || !isRecord(doc.hooks))
+        return false;
+    const entries = doc.hooks[registration.event];
+    return Array.isArray(entries) && entries.some((e) => isOurs(e, shape, registration, binaryExists));
+}
 /**
  * ⛔ **THE WHOLE STRING, NEVER A SUBSTRING — the trap `TODOS[138]` names.**
  *
@@ -368,6 +390,15 @@ export function writeAgentHooks(path, shape, registrations) {
     const merged = mergeHookDocument(raw, shape, registrations, existsSync);
     if (merged.kind === "refused")
         return { kind: "refused", path, why: merged.why };
+    const events = registrations.map((registration) => registration.event);
+    // ⛔ **A BYTE-IDENTICAL RESULT IS NOT WRITTEN AT ALL** (0.7.0, VQ ruling). Codex hashes each hook's normalized
+    // config (event, matcher, command, timeout) and runs a user-level hook only while a persisted hash matches, so
+    // the entry this client writes is something the user has to APPROVE. A re-`connect` with the same binary path
+    // rebuilds the same entry; rewriting the file anyway churns its mtime for nothing and invites every tool that
+    // watches it to react. A MOVED binary path still lands here as different text and is refreshed, because a stale
+    // path is worse than a fresh review — the hook would point at a binary that is gone.
+    if (raw !== null && merged.text === raw)
+        return { kind: "already", path, events };
     const temp = join(dirname(path), `.${AGENT_HOOK_MARKER.replace(/\W+/g, "-")}.tmp`);
     try {
         mkdirSync(dirname(path), { recursive: true });
@@ -379,7 +410,6 @@ export function writeAgentHooks(path, shape, registrations) {
     catch (error) {
         return { kind: "failed", path, why: error instanceof Error ? error.message : "write failed" };
     }
-    const events = registrations.map((registration) => registration.event);
     // "already" is not "nothing happened" — the command was still refreshed. It is
     // the answer to *did this connect ADD anything*, which is what a user reads.
     return merged.added.length === 0

package/dist/agent_hooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent_hooks.js","sourceRoot":"","sources":["../src/agent_hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIpD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAE9D,oFAAoF;AACpF,MAAM,UAAU,GAAG,aAAa,CAAC;AAKjC,+DAA+D;AAC/D,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAgB;IAC3D,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,6DAA6D;AAC7D,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,8DAA8D,CAAC;AAEpF,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChF,CAAC;AAyBD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAkB,EAClB,KAAmB,EACnB,aAA0C;AAC1C;;;;;GAKG;AACH,eAA0C,GAAG,EAAE,CAAC,IAAI;IAEpD,IAAI,GAA4B,CAAC;IAEjC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;SAAM,CAAC;QACN,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,oDAAoD;YACpD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;aAC/D,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,mCAAmC,EAAE,CAAC;QACvE,CAAC;QACD,GAAG,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;IACnD,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,GAAG,CAAC,OAAO,GAAG,qBAAqB,CAAC;IACtC,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC;IAChC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,aAAa,KAAK,IAAI,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAChG,4EAA4E;YAC5E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,yCAAyC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAA4B;QACrC,GAAG,CAAE,aAAqD,IAAI,EAAE,CAAC;KAClE,CAAC;IAEF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,WAAW,YAAY,CAAC,KAAK,mCAAmC;aACtE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAE,OAAiC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3F,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,yEAAyE;YACzE,2EAA2E;YAC3E,wDAAwD;YACxD,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;YACnB,uEAAuE;YACvE,2EAA2E;YAC3E,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,4EAA4E;YAC5E,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChG,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,MAAM,CACb,KAAc,EACd,KAAmB,EACnB,YAA8B,EAC9B,YAAuC;IAEvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAEzD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAS,aAAa,CACpB,SAAiB,EACjB,IAAY,EACZ,YAAuC;IAEvC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;QAC/B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,OAA0B;IAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,sEAAsE;AACtE,SAAS,QAAQ,CAAC,KAAmB,EAAE,YAA8B;IACnE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,0EAA0E;QAC1E,6EAA6E;QAC7E,wCAAwC;QACxC,OAAO;YACL,CAAC,UAAU,CAAC,EAAE,iBAAiB;YAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,OAAO,EAAE,YAAY,CAAC,UAAU;SACjC,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,6BAA6B;IAC7B,OAAO;QACL,CAAC,UAAU,CAAC,EAAE,iBAAiB;QAC/B,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,UAAU,EAAE;SACrF;KACF,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAmB,EACnB,aAA0C;IAE1C,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,qDAAqD;QACrD,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAEjF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvE,+EAA+E;IAC/E,6EAA6E;IAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QACnC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"agent_hooks.js","sourceRoot":"","sources":["../src/agent_hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIpD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAE9D,oFAAoF;AACpF,MAAM,UAAU,GAAG,aAAa,CAAC;AAKjC,+DAA+D;AAC/D,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAgB;IAC3D,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,6DAA6D;AAC7D,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,8DAA8D,CAAC;AAEpF,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChF,CAAC;AAyBD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAkB,EAClB,KAAmB,EACnB,aAA0C;AAC1C;;;;;GAKG;AACH,eAA0C,GAAG,EAAE,CAAC,IAAI;IAEpD,IAAI,GAA4B,CAAC;IAEjC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;SAAM,CAAC;QACN,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,oDAAoD;YACpD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;aAC/D,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,mCAAmC,EAAE,CAAC;QACvE,CAAC;QACD,GAAG,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;IACnD,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,GAAG,CAAC,OAAO,GAAG,qBAAqB,CAAC;IACtC,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC;IAChC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,aAAa,KAAK,IAAI,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAChG,4EAA4E;YAC5E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,yCAAyC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAA4B;QACrC,GAAG,CAAE,aAAqD,IAAI,EAAE,CAAC;KAClE,CAAC;IAEF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,WAAW,YAAY,CAAC,KAAK,mCAAmC;aACtE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAE,OAAiC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3F,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,yEAAyE;YACzE,2EAA2E;YAC3E,wDAAwD;YACxD,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;YACnB,uEAAuE;YACvE,2EAA2E;YAC3E,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,4EAA4E;YAC5E,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChG,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,MAAM,CACb,KAAc,EACd,KAAmB,EACnB,YAA8B,EAC9B,YAAuC;IAEvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAEzD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAkB,EAClB,KAAmB,EACnB,YAA8B,EAC9B,eAA0C,UAAU;IAEpD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAS,aAAa,CACpB,SAAiB,EACjB,IAAY,EACZ,YAAuC;IAEvC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;QAC/B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,OAA0B;IAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,sEAAsE;AACtE,SAAS,QAAQ,CAAC,KAAmB,EAAE,YAA8B;IACnE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,0EAA0E;QAC1E,6EAA6E;QAC7E,wCAAwC;QACxC,OAAO;YACL,CAAC,UAAU,CAAC,EAAE,iBAAiB;YAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,OAAO,EAAE,YAAY,CAAC,UAAU;SACjC,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,6BAA6B;IAC7B,OAAO;QACL,CAAC,UAAU,CAAC,EAAE,iBAAiB;QAC/B,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,UAAU,EAAE;SACrF;KACF,CAAC;AACJ,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAmB,EACnB,aAA0C;IAE1C,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,qDAAqD;QACrD,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAEjF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAEvE,8GAA8G;IAC9G,+GAA+G;IAC/G,8GAA8G;IAC9G,8GAA8G;IAC9G,gHAAgH;IAChH,qFAAqF;IACrF,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAElF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IAChG,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QACnC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/agents/claude_code.d.ts

@@ -8,4 +8,38 @@
  * confinement call, which now runs against the registry's union.
  */
 import type { TranscriptDialect } from "./types.js";
+/**
+ * The longest folder name Claude Code writes verbatim.
+ *
+ * ⛔ **MEASURED (Open Question 3, VS, 2026-10-24).** An encoded path that would
+ * pass 200 characters is cut to 200, then `-`, then 6 hash characters (a
+ * measured name was 207 long, `…-x911fg`). The hash is not invertible from here,
+ * so such a folder cannot be matched to a path — and so a name LONGER than this
+ * is always a hashed one, since a verbatim name never exceeds it.
+ */
+export declare const CLAUDE_NAME_LIMIT = 200;
+/**
+ * The folder name Claude Code gives a project path — Open Question 3.
+ *
+ * ⛔ **EVERY UTF-16 CODE UNIT OUTSIDE `[A-Za-z0-9]` BECOMES ONE `-`.** Measured by
+ * running throwaway sessions in folders named with `. _`, a space, `@ + ~ ( ) ' =
+ * , # % &`, `é` and an emoji: all of them, and the emoji TWICE, because the
+ * regular expression below runs over code units (no `u` flag) and an emoji is
+ * two. Runs do NOT collapse (`501/-Users` gave `501--Users`), a literal `-` stays
+ * itself, case is kept, and a leading `/` gives a leading `-`.
+ *
+ * ⚠ **This replaces `/[/.]/g`, which was the rule the first version of
+ * `locateCurrentTranscript` derived from 17 folders none of which held anything
+ * else.** For a repo whose path held an `_` or a space, `connect`'s test capture
+ * looked in a folder that does not exist and skipped the beat (a 0.6.x defect;
+ * `test/scan-encodings.test.ts` carries its regression cell).
+ *
+ * ⚠ **It returns the FULL encoding even past the limit**, and the callers decide
+ * what that means: `locateCurrentTranscript` cannot find a hashed folder, and the
+ * scan's walk compares PREFIXES of a name that is itself at most the limit, so a
+ * longer prefix simply never matches. One function, no second spelling of the rule.
+ */
+export declare function encodeProjectPath(path: string): string;
+/** Is this folder name one Claude Code cut and hashed? See `CLAUDE_NAME_LIMIT`. */
+export declare function isHashedProjectName(name: string): boolean;
 export declare const CLAUDE_CODE: TranscriptDialect;