@vibe-commit/capture 0.6.1 → 0.8.0

package/dist/copy/strings.d.ts

@@ -21,15 +21,72 @@ export declare const HELP: {
     readonly usage: "vibecommit <command> [options]";
     readonly tagline: "Record Claude Code sessions against the commits they produced.";
     readonly commands: {
-        readonly auth: "Renew or replace this machine's credential. In a git repo it then connects that repo; elsewhere it only saves the credential.";
-        readonly connect: "Connect this repo and capture the current session.";
-        readonly status: "Show whether capture is on for this repo and when it last succeeded.";
+        readonly auth: "Renew or replace this machine's credential. On a terminal it then goes on to connect: in a git repo, or on a machine that captures nothing yet. Otherwise it only saves the credential.";
+        readonly connect: "Choose the repositories to capture, from any folder, and connect them. On a machine with no credential it signs you in after you say yes, unless you choose g, which signs in first to read your account's grants.";
+        readonly scan: "List the repositories coding agents have been used in on this machine. Uploads nothing and changes no setting.";
+        readonly backfill: "Upload earlier coding-agent sessions still on this machine, for the repositories you chose. Asks first; no commit links.";
+        readonly status: "Show whether capture is on for this repo, or for this machine outside a repo, and when it last succeeded.";
         readonly off: "Stop capturing for this repo.";
         readonly why: "Show the conversation turns recorded against the commit that last changed this line.";
         readonly report: "Summarise capture coverage over a time window.";
         readonly finalize: "Close a finished session's last turn so commits made in it can be recorded.";
     };
     readonly docsUrl: "https://vibecommit.ai/docs/what-we-upload";
+    /**
+     * PR 6 item 2 (devex review): what `<verb> --help` prints BEYOND the one sentence above, which stays the first
+     * paragraph. Agents read `--help` first, and until now the flags and exit codes existed only in the README.
+     *
+     * ⚠ Every flag here is one the verb's own argv reader acts on (`src/index.ts`, and each verb's parser), and every exit
+     * code is one the verb returns (`src/exit.ts`). A flag the verb ignores, or a code it never returns, would be copy no
+     * gate can check, so `test/verb-help.test.ts` ties each list to the source it describes.
+     */
+    readonly verbs: {
+        readonly connect: {
+            readonly usage: "vibecommit connect [--device] [--sign-in] [--typed]";
+            readonly options: readonly [readonly ["--device", "Sign in with a code approved on another device, for a machine with no browser."], readonly ["--sign-in", "Sign in through the browser before connecting."], readonly ["--typed", "Use the typed prompt even on a terminal, for a screen reader."]];
+            readonly exits: readonly [readonly ["0", "Done."], readonly ["1", "Failed, or a replacement credential was declined."], readonly ["2", "Bad arguments, or no person at a terminal to answer the consent question."], readonly ["3", "Not connected: this machine's credential is not accepted."]];
+        };
+        readonly auth: {
+            readonly usage: "vibecommit auth [--stdin | --paste | --device]";
+            readonly options: readonly [readonly ["--stdin", "Read the credential from standard input and stop after saving it."], readonly ["--paste", "Skip the browser and paste a credential made in Settings."], readonly ["--device", "Sign in with a code approved on another device."]];
+            readonly exits: readonly [readonly ["0", "Credential saved."], readonly ["1", "Nothing was saved."], readonly ["2", "Bad arguments, such as a credential passed as an argument."]];
+        };
+        readonly scan: {
+            readonly usage: "vibecommit scan [--json]";
+            readonly options: readonly [readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Repositories found."], readonly ["4", "None found."]];
+        };
+        readonly backfill: {
+            readonly usage: "vibecommit backfill";
+            readonly options: readonly [];
+            readonly exits: readonly [readonly ["0", "Done, declined at the question, or interrupted with Ctrl+C. Sessions held for an organization's approval count as done."], readonly ["1", "The server stopped the run, could not be reached or refused this machine's credential, or it could not run. Nothing already sent is lost; run it again to resume."], readonly ["2", "No terminal, or an argument was given."], readonly ["3", "Not connected."], readonly ["4", "Nothing to upload."]];
+        };
+        readonly status: {
+            readonly usage: "vibecommit status [--json]";
+            readonly options: readonly [readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Reported."], readonly ["1", "Failed."], readonly ["2", "Bad arguments."], readonly ["3", "Not connected."]];
+        };
+        readonly why: {
+            readonly usage: "vibecommit why <file>:<line> [--json]";
+            readonly options: readonly [readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Answered."], readonly ["1", "Failed."], readonly ["2", "Bad arguments."], readonly ["3", "Not connected."]];
+        };
+        readonly report: {
+            readonly usage: "vibecommit report --since <date> [--ref <ref>] [--json]";
+            readonly options: readonly [readonly ["--since", "Start of the window, as YYYY-MM-DD. Required."], readonly ["--ref", "The branch or commit to count. Default: the current branch."], readonly ["--json", "Print one JSON document instead of text."]];
+            readonly exits: readonly [readonly ["0", "Reported."], readonly ["1", "Failed."], readonly ["2", "Bad arguments."], readonly ["3", "Not connected."], readonly ["4", "The window is empty: nothing to report."]];
+        };
+        readonly finalize: {
+            readonly usage: "vibecommit finalize --session <id> | --latest [--force]";
+            readonly options: readonly [readonly ["--session", "The session to close."], readonly ["--latest", "The most recent session, when only one is recent."], readonly ["--force", "Skip the check that the transcript has stopped changing. Only for a session that is over."]];
+            readonly exits: readonly [readonly ["0", "Closed: the server confirmed the last turn is recorded."], readonly ["1", "Not confirmed closed: not a git repository, a transcript that cannot be read, a credential that is no longer accepted, or a delivery that failed."], readonly ["2", "Nothing was sent: bad arguments, an unknown or still-running session, or several recent sessions for --latest."], readonly ["3", "Not connected: this repo is not captured, or this machine has no credential."], readonly ["5", "Delivered, but the server did not confirm it. Treat it as not closed."]];
+        };
+    };
+    /** The two section labels of a verb's help. */
+    readonly optionsLabel: "Options:";
+    /** A verb with no flags of its own (`backfill`) says so under the label, so "Options:" never sits over nothing. */
+    readonly noOptions: "None. It takes no arguments.";
+    readonly exitCodesLabel: "Exit codes:";
 };
 /**
  * The ENTRY POINT's own chrome and its two usage failures — `CR-090d`.
@@ -62,8 +119,14 @@ export declare const USAGE: {
     readonly usageLabel: "Usage:";
     readonly commandsLabel: "Commands:";
     readonly docsLabel: "Docs:";
-    /** The unknown-verb line. Help follows it, so this says only what went wrong. */
-    readonly unknownCommand: (verb: string) => string;
+    /**
+     * The unknown-verb block (PR 7, Q6: `UNKNOWN_COMMAND`, routed through the shared renderer). The help text is no longer
+     * dumped after it, so the fix — the way to the list of commands — is the last thing on screen. The verb is whatever
+     * the user typed, so it is cut to a length the line can hold.
+     */
+    readonly unknownCommandWhat: (verb: string) => string;
+    readonly unknownCommandFix: "See the commands:";
+    readonly unknownCommandHelp: "vibecommit --help";
 };
 export declare const STATUS: {
     readonly onForRepo: "Capture is on for this repository.";
@@ -76,6 +139,49 @@ export declare const STATUS: {
      * changed them to match the screen rather than changing the screen.
      */
     readonly repoLabel: "repo";
+    /** 0.7.0, D6 · 2A: why this repo is on. One row under `repo`, only inside a repo that is on. */
+    readonly basisLabel: "basis";
+    readonly basisOwner: (owner: string) => string;
+    readonly basisRepo: "repo grant";
+    readonly basisClone: "per clone";
+    /**
+     * Slice 2 (S4), brief §3.3: inside a repo that is NOT on, the account may still grant it. The account never admits a repo on
+     * its own (R3-22): naming it here is `connect`'s picker, and the action row already offers `connect`.
+     */
+    readonly basisAccountOnly: "granted on your account, not on this machine";
+    /**
+     * Slice 2 (S4), brief §3.3: the machine screen's account rows, after `off` and before `held`. `on account` lists what the
+     * user's account grants that THIS machine has not named (an owner as `owner/`); the second line says what to do about it.
+     */
+    readonly accountLabel: "on account";
+    readonly accountNotHere: (connect: string) => string;
+    /** Changes queued for the account that no sync has delivered yet. They go out with the next sync; only `connect`, `status`, `off` and a terminal `auth` sync. */
+    readonly pendingLabel: "pending";
+    readonly pendingValue: (n: number) => string;
+    /**
+     * VQ's ruling (ii): a queued change the server refused with 400 is kept (a consent statement is never dropped) but a retry
+     * fails again, so this row does not say "the next command retries". The URL is the one the web app's error state uses.
+     */
+    readonly pendingRejectedValue: (n: number) => string;
+    /**
+     * The first sync uploads what this machine already named (per-clone consents made under 0.6.x/0.7.0 reach the account, R3-21).
+     * Slugs only, never paths; more than three names shows two and "and N more", and the full list follows, one per line. The names arrive as ONE string, a name per line, because the copy corpus renders every template with string arguments.
+     */
+    readonly accountSaving: (namesOnePerLine: string) => string;
+    /** The machine-level screen (any folder that is not a work tree). */
+    readonly offMachine: "Capture is not on for any repository on this machine.";
+    readonly ownersLabel: "owners";
+    readonly reposLabel: "repos";
+    readonly offLabel: "off";
+    /**
+     * Machine-level `status`: the repos whose own last upload was refused because their org has not approved capture. §10.2's held
+     * vocabulary — the beat word `held`, and the backfill screen's "the org must approve capture" (Alexander, 2026-10-24 17:20).
+     */
+    readonly heldLabel: "held";
+    readonly heldReason: "the org must approve capture";
+    readonly ownerTail: "all its repos, including ones you clone later";
+    readonly changeLabel: "Change what is captured";
+    readonly turnOffInside: "Turn one repo off, run inside it";
     readonly lastSuccessLabel: "last sent";
     readonly dashboardLabel: "dashboard";
     /** `<slug> (git toplevel <path>)` — §10.3's repo row. */
@@ -96,6 +202,21 @@ export declare const STATUS: {
      * after the rows, with the glyph turned `warn`. The date is absolute and in UTC.
      */
     readonly credentialEnding: (date: string, authCommand: string) => string;
+    /**
+     * 0.7.0. A `grants.json` that is present and unreadable denies capture for every clone that has a remote
+     * (`consent.ts`'s `isCaptureAllowed`), and a hook cannot say so, so `status` does. The file name is the user's
+     * to fix; `connect` is where the next consent lands once it is readable.
+     */
+    readonly grantsUnreadable: (connect: string) => string;
+    /**
+     * 0.7.0, `SessionStart` (T21). `npm i -g` alone never adds the event to an agent's config, so a 0.6.x machine is
+     * missing it until `connect` runs. Only said on the npm channel: the plugin ships its own `hooks.json`, and its
+     * contract (no `SessionStart`, no git hooks) is unchanged.
+     */
+    readonly sessionStartMissing: (agents: string, connect: string) => string;
+    /** 0.7.0, D4 · A. A hook the user deleted stays deleted; `connect` is the watched way back. */
+    readonly commitHooksOff: (connect: string) => string;
+    readonly commitHooksForeign: (connect: string) => string;
     readonly credentialShadowed: "VIBECOMMIT_TOKEN is set and takes precedence over the credential saved on this machine. Unset it to use the saved one.";
     /**
      * `CR-228`, `TODOS[142]` — bytes the client ADVANCED PAST without delivering.
@@ -118,7 +239,7 @@ export declare const STATUS: {
      * turn only when a following prompt arrives, so nothing will ever seal this one and the commits made in
      * it cannot be recorded. States the consequence and the command; promises nothing about the commits.
      */
-    readonly openTail: (sessions: number) => string;
+    readonly openTail: (sessions: number, finalizeLatest: string) => string;
     /**
      * `TODOS[145]` — commits the client has seen and is holding because no turn has closed yet. Normal
      * mid-session; shown as a fact, not as a fault.
@@ -189,7 +310,7 @@ export declare const STATUS: {
      * cannot tell a crashed session from one idle at lunch, and closing a session still in progress seals
      * a turn that was not actually over.
      */
-    readonly heldIdle: (bytes: number, sessions: number, commits: number, ids?: readonly string[]) => string;
+    readonly heldIdle: (bytes: number, sessions: number, commits: number, finalizeSession: string, ids?: readonly string[]) => string;
     readonly fixCommandLabel: "To reconnect, run";
     /** §10.3's two trailing actions, rendered as an aligned pair. */
     readonly turnOffLabel: "Turn capture off for this repo";
@@ -220,7 +341,18 @@ export declare const CONNECT: {
      * the nouns are transcribed rather than reworded: *"the output of commands it
      * ran"*, never *"Bash tool results"*.
      */
-    readonly consentHeading: "VibeCommit uploads your Claude Code transcripts for this repo.";
+    readonly consentHeading: "VibeCommit uploads your coding-agent transcripts for this repo.";
+    /**
+     * D23 · 17A: the picker path's heading (every `connect` that shows the picker, in a repo or not). `consentHeading`
+     * above remains only on the no-remote (`local:`) in-repo path, where there is nothing to pick (D35 · 29A: "Claude
+     * Code transcripts" understated what uploads once `connect` also wired Codex and Cursor hooks, 0.2.0).
+     */
+    readonly consentHeadingPicker: "VibeCommit uploads your coding-agent transcripts for the repositories you choose.";
+    /**
+     * ONE sentence, not a paragraph, added on the picker path only (design doc step 2, "The disclosure"): what the grant
+     * covers beyond the repos named on screen. The four paragraphs under either heading stay byte-identical.
+     */
+    readonly consentScope: "The choice covers future clones of these repositories too, adds commit hooks to each clone where it can, and is saved to your VibeCommit account so your other machines running VibeCommit 0.8.0 or later can offer it.";
     /**
      * ⚠ "private-repo paths" IS THE APPROVED WORDING, and it is the reason
      * `private` is deliberately NOT registered in `claims.ts`: a substring gate on
@@ -327,11 +459,33 @@ export declare const CONNECT: {
     readonly doneUrlLabel: "View this session";
     /** The `[y/N]` suffix. The capital is the default and the default is NO. */
     readonly consentAnswers: "[y/N]";
-    /** Non-TTY refusal — DESIGN.md §13.7 exit 2, D65 §DR7. */
-    readonly nonInteractiveWhat: "Consent needs an interactive terminal.";
-    readonly nonInteractiveWhy: "Standard input is not a terminal, so the consent prompt cannot be answered. Nothing was read and nothing was uploaded.";
-    readonly nonInteractiveFix: "Run this in a terminal:";
+    /**
+     * Non-TTY refusal — DESIGN.md §13.7 exit 2, D65 §DR7. PR 6 item 6: written for an AGENT that hit it, which is who reaches
+     * this branch. It says who must answer ("a person"), that an agent cannot, and what to relay, and it carries the code
+     * `CONSENT_NEEDS_TTY` for a wrapper to key on — PR 7 registered it and renders it on the block's own code line, so it is not
+     * repeated in the sentence. No `--yes`: that would bypass consent (D65 §DR7). The `what` line has no "you" (§13.6).
+     */
+    readonly nonInteractiveWhat: "Consent needs a person at a terminal.";
+    readonly nonInteractiveWhy: "An agent cannot answer it, and standard input is not a terminal. Nothing was read and nothing was uploaded.";
+    /** A repo with no remote has a folder to name; the label is the fix and the command follows it. */
+    readonly nonInteractiveFix: (folder: string) => string;
+    /**
+     * The picker path's refusal (VQ + VT, PR 6 item 6 fit): it names no folder (the picker is not about one repo), has no
+     * "you" in the `what` line, and is reached BEFORE the scan beat, so "Nothing was read and nothing was uploaded" stays
+     * literally true.
+     */
+    readonly pickerNonInteractiveWhat: "Choosing repositories needs a person at a terminal.";
+    readonly pickerNonInteractiveWhy: "An agent cannot answer it, and standard input is not a terminal, so no repository can be chosen and consent cannot be asked. Nothing was read and nothing was uploaded.";
+    readonly pickerNonInteractiveFix: "Ask the user to run this in a terminal:";
     readonly alreadyConnected: "Capture is already on for this repository.";
+    /**
+     * 0.7.0. `grants.json` is present and unreadable, which denies this repository whatever consent it has (see
+     * `consent.ts`'s `isCaptureAllowed`). Answering the consent prompt could not change that, so `connect` stops
+     * BEFORE asking rather than take a yes it cannot honour.
+     */
+    readonly grantsUnreadableWhat: "Capture can't be turned on: ~/.vibecommit/grants.json can't be read.";
+    readonly grantsUnreadableWhy: "Capture is stopped on this machine for every repository that has a remote until the file is readable. Nothing was changed.";
+    readonly grantsUnreadableFixLabel: "Fix the file or move it aside, then run:";
     /**
      * The browser sign-in beat (PKCE loopback → minted ingest credential) is the
      * oauth lane's, not this task's. Until it lands, the supported path is the one
@@ -449,12 +603,12 @@ export declare const COMMIT_HOOK: {
     readonly installed: (repo: string) => string;
     readonly chained: (repo: string) => string;
     readonly already: "Commit capture was already on for this clone.";
-    readonly perClone: "Run `vibecommit connect` in each clone you want commits recorded for — git hooks are per-clone, not per-account.";
+    readonly perClone: (connect: string) => string;
     readonly hooksPathWhat: "Commit capture could NOT be installed for this clone.";
     readonly hooksPathWhy: (configured: string) => string;
     readonly hooksPathFixLabel: "Fix, either one:";
     readonly hooksPathFixUnset: "git config --unset core.hooksPath";
-    readonly hooksPathFixManual: "or add `vibecommit post-commit` to your existing post-commit hook";
+    readonly hooksPathFixManual: (postCommit: string) => string;
     readonly failedWhat: "Commit capture could NOT be installed for this clone.";
     readonly failedWhy: (why: string) => string;
 };
@@ -480,7 +634,7 @@ export declare const AGENT_HOOKS: {
     readonly refusedWhat: (agent: string) => string;
     readonly refusedWhy: (path: string, why: string) => string;
     readonly refusedFixLabel: "Fix:";
-    readonly refusedFix: (path: string) => string;
+    readonly refusedFix: (path: string, connect: string) => string;
     readonly failedWhat: (agent: string) => string;
     readonly failedWhy: (path: string, why: string) => string;
 };
@@ -608,10 +762,346 @@ export declare const SIGNIN: {
     readonly busyWhy: "Only one process may renew a sign-in at a time, and the one holding it did not finish. Nothing was read and the stored sign-in is unchanged.";
     readonly busyFix: "Run it again in a moment:";
 };
+/**
+ * `vibecommit scan` — design review D17 · 11A, D26, D27, D33 · 27A, and the screen VQ drew for it
+ * (style guide §10.13) on 2026-10-24.
+ *
+ * ⛔ **The nouns are the agent-neutral ones** (D11 · A, D35): "coding agent", never "Claude Code
+ * session", because the scan covers three agents and the picker's heading says the same. The agent
+ * NAMES appear only on a repo's second line, where they are facts about which store a count came from.
+ *
+ * ⚠ **Every sentence here is a claims-register row** (the register is `code`'s, VR's PR). None says
+ * "every" or "all": the scan counts transcripts still on disk, and what `cleanupPeriodDays` already
+ * deleted is not among them.
+ */
+export declare const SCAN: {
+    /** The beat line, drawn in the existing beat shape and overwritten once with `done` (D17). */
+    readonly beat: "Looking for repositories on this machine...";
+    readonly beatDone: "done";
+    readonly found: (count: number) => string;
+    readonly sessions: (count: number) => string;
+    readonly since: (date: string) => string;
+    /** What an agent is called on a repo's second line. The ids are wire values, not labels. */
+    readonly agent: {
+        readonly "claude-code": "Claude Code";
+        readonly "codex-cli": "Codex";
+        readonly cursor: "Cursor";
+    };
+    readonly notListed: "Not listed here:";
+    readonly noRemote: (count: number, connect: string) => string;
+    /**
+     * The picker's own line (PR 1 ruling 2): ONE count and ONE line for a folder with two or more
+     * candidate paths, a hashed name (cut, so it cannot be inverted) and a deleted sibling. Claude Code's
+     * and Cursor's only — a Codex row records its real `cwd` and is never ambiguous.
+     */
+    readonly ambiguous: (count: number) => string;
+    /** Scan-only (ruling 5a): a folder, or a Codex `cwd`, that exists but is not inside a git work tree. */
+    readonly nonRepo: (count: number) => string;
+    readonly missingFolder: (count: number) => string;
+    /**
+     * ⛔ CLAIMS ONLY WHAT GIT SHOWS (ruling 7). The test is a session's mtime against the OLDEST reflog entry,
+     * and `gc.reflogExpire` prunes a long-lived clone's oldest entries, so "older than the reflog" is the fact
+     * and "the folder was reused" is a possibility — the same repo deleted and cloned again reads the same.
+     */
+    readonly pathReused: (count: number) => string;
+    /** One clone: the path rides the line. More: this heading, then one indented path per clone. */
+    readonly noReflogOne: (path: string) => string;
+    readonly noReflogMany: (count: number) => string;
+    /** Rollouts on disk that no index row names (ruling 5c) — counted, never opened. */
+    readonly unindexed: (count: number) => string;
+    /**
+     * `Codex sessions couldn't be read (unrecognised index)`, one line per unreadable agent (R3-15). The
+     * bracket names a cause the user can act on; a plain read failure (ruling 6) has none to name, so it
+     * gets none. The `--json` `reason` is the same three words either way.
+     */
+    readonly unreadable: (agent: string, reason: string | null) => string;
+    readonly next: "Choose what is captured:";
+    /** Exit 4. Both screens end on the same command. */
+    readonly none: "No coding-agent sessions were found on this machine.";
+    /**
+     * Exit 4 with `Not listed here:` lines: sessions exist that could not be listed, so `none` would be
+     * untrue. `none` prints only when that block is empty, i.e. the scan saw no session at all (VQ, PR 1
+     * ruling 3).
+     */
+    readonly noneListable: "No repository could be listed from the sessions on this machine.";
+    readonly noneNext: "Choose owners or repos anyway:";
+};
+/**
+ * `vibecommit backfill` — style guide §10.14, design review D14 · 8A, D15 · 9A; capture 0.7.0, PR 5.
+ *
+ * Every sentence here is a claims-register row. ⛔ Three promises it must never make: that a backfilled session is
+ * LINKED to a commit (it arrives without links, and the copy says so), that "every" or "all" earlier sessions are
+ * uploaded (only the ones still on this machine and not yet sent), and that a held session will upload by itself (no
+ * hook fires for an old session, so the held line points at a re-run).
+ *
+ * The two folder reasons are different facts (VQ ruling): `folder differs` is a RECORDED folder that is not this clone,
+ * `folder not recorded` is a transcript that records none.
+ */
+export declare const BACKFILL: {
+    /**
+     * Inside `connect` the repos are the ones it just showed, so "these"; run on its own there is no "these", so it names whose
+     * they are (VQ, PR 5 review).
+     */
+    readonly offerHeading: (repos: number, standalone: boolean) => string;
+    /** The count on a repo row. "Not yet uploaded", so it is never mistaken for the picker's total on disk. */
+    readonly notYetUploaded: (count: number) => string;
+    /**
+     * Cursor sessions are not offered (Alexander, 2026-10-24 13:54 EST: Cursor's transcripts record no folder, so the
+     * folder check cannot run). One muted line, only when a repo you chose has some.
+     */
+    readonly cursorNotUploaded: (count: number) => string;
+    /** Two lines, as §10.14 draws them. */
+    /**
+     * A session over the 50 MiB cap is left out of the count and named here, so the offer never promises an upload the run would
+     * skip on every re-run. (Sub-agent streams are not capped.)
+     */
+    readonly overSizeNote: (count: number) => string;
+    /**
+     * A clone with no reflog cannot be tested for a reused path (a transcript older than the clone's first reflog entry), and
+     * that test is the only guard against one, so its sessions are left out of the count and named here with the clone.
+     */
+    readonly noReflogNote: (count: number, path: string) => string;
+    readonly uploadNote: readonly ["They upload one at a time, the same way new sessions do, without", "commit links."];
+    readonly question: (sessions: number) => string;
+    /** A no. A completed consent flow (§13.7), not an error. */
+    readonly declined: (backfill: string) => string;
+    readonly nothingToUpload: "Nothing to upload: no earlier session on this machine is waiting for a repository you've chosen.";
+    readonly runHeading: (sessions: number) => string;
+    /** Outcome fragments on a repo line, joined by " · ". */
+    readonly uploaded: (count: number) => string;
+    readonly skipped: (count: number, reason: string) => string;
+    readonly held: (count: number) => string;
+    readonly failed: (count: number, reason: string) => string;
+    readonly stopped: "stopped";
+    /** Skip reasons. */
+    readonly overSize: "over 50 MiB";
+    readonly folderDiffers: "folder differs";
+    readonly folderNotRecorded: "folder not recorded";
+    /** The transcript could not be opened at all (permissions), which is a different fact from one that records no folder. */
+    readonly couldntBeRead: "couldn't be read";
+    /** The file vanished between the offer and its upload: a skip, not a refusal by the server. */
+    readonly fileGone: "the file is gone";
+    /** `vibecommit off` (or a grant removed) while the run was going: the rest of that repo is not sent. */
+    readonly turnedOff: "turned off while this ran";
+    readonly outsideAgentFolder: "not in the agent's session folder";
+    /** Failure reasons: a `never`. The server's own code is never shown (§13.6: no bare status, no raw error). */
+    readonly refusedByServer: "the server refused it";
+    readonly repositoryForbidden: "another organization owns this repository";
+    readonly noRepoIdentity: "no repository identity";
+    readonly unrecognisedFileName: "the file name isn't a session id";
+    /** The summary. The glyph is `ok` only when nothing was held, stopped or failed. */
+    readonly summary: (uploaded: number, total: number, skipped: number, held: number, failed: number) => string;
+    /** `owners` is the held repos' owners, already phrased ("acme-corp", "acme-corp or other-org"). */
+    readonly heldBlock: (owners: string) => string;
+    readonly heldThenRun: "Then run:";
+    /**
+     * The stop block: a server `later` (5xx, 429) stops the run, with the resume fix. ⛔ It states only what landed: `uploaded` is
+     * sessions the server took, not sessions looked at, and "not yet uploaded" is what a re-run will OFFER again (skipped and held
+     * sessions among them), not a promise of what it will send.
+     */
+    readonly stopWhat: (uploaded: number, total: number) => string;
+    readonly stopWhy: (notUploaded: number) => string;
+    /** No response at all (a refused connection, a timeout): not the server asking anything. */
+    readonly stopWhyUnreachable: (notUploaded: number) => string;
+    readonly stopFixLabel: "Resume:";
+    /** Ctrl+C at the y/N or during the upload. Exit 0: capture is on. */
+    readonly interrupted: (backfill: string) => string;
+    /** Exit 3. */
+    readonly notConnectedWhat: "This machine isn't connected.";
+    readonly notConnectedWhy: "`backfill` uploads with this machine's credential, and there isn't one. Nothing was read.";
+    readonly notConnectedFixLabel: "Connect first:";
+    /** `grants.json` is present and unreadable: every repo with a remote is denied, so there is nothing honest to offer. */
+    readonly grantsUnreadableWhat: "Backfill can't run: ~/.vibecommit/grants.json can't be read.";
+    readonly grantsUnreadableWhy: "Capture is stopped on this machine for every repository that has a remote until the file is readable. Nothing was read and nothing was uploaded.";
+    readonly grantsUnreadableFixLabel: "Fix the file or move it aside, then run:";
+    /** Exit 2. A prompt that proceeds when nobody can answer it is not a prompt. */
+    readonly nonInteractiveWhat: "`backfill` needs an interactive terminal.";
+    readonly nonInteractiveWhy: "Standard input is not a terminal, so the question before uploading cannot be answered. Nothing was read and nothing was uploaded.";
+    readonly nonInteractiveFix: "Run this in a terminal:";
+    /** The credential was rejected mid-run (a 401): the same block `finalize` shows, in this verb's words. */
+    readonly credentialStoppedWhat: "Upload stopped: this machine's credential is no longer accepted.";
+    readonly credentialStoppedWhy: "Nothing already sent is lost, and a re-run offers the sessions not yet uploaded.";
+    readonly credentialStoppedFixLabel: "Renew it, then run backfill again:";
+    readonly usageWhat: "That is not something `vibecommit backfill` understands.";
+    readonly usageWhy: "Nothing was read and nothing was uploaded. `backfill` takes no arguments.";
+};
+/**
+ * `vibecommit connect` from any folder — the picker, the grant block, the hooks step and the endings (0.7.0, PR 3).
+ * Style guide §10.12, copied from the merged guide and the design doc; the design doc wins where they differ.
+ */
+export declare const PICKER: {
+    readonly onNow: "on now";
+    readonly turnedOff: "turned off";
+    /** Why an `on now` row is on (D5 · 1A), so a 0.6.x upgrader sees what is already captured. */
+    readonly reasonOwner: "owner";
+    readonly reasonRepo: "repo";
+    readonly reasonPerClone: "per clone";
+    /** The owner row ALWAYS states how many repos `aN` covers (D9), so a hidden repo is never covered unseen. */
+    readonly ownerAll: (count: number) => string;
+    readonly ownerOnReposHere: (count: number) => string;
+    readonly turnOnHint: "choose it to turn it back on";
+    /** Where the working folder is a repo, the row is marked so a pre-tick (or a `$HOME` dotfiles repo) is legible. */
+    readonly thisRepo: "this repo";
+    readonly thisFolder: "this folder";
+    readonly moreTyped: (count: number, owner: string) => string;
+    readonly moreChecklist: (count: number, owner: string) => string;
+    /** The typed prompt (D8). */
+    readonly choose: (hasOwners: boolean) => string;
+    readonly removeHint: "Remove one with -N, -owner/ or -owner/repo.";
+    readonly enterNothing: "Press Enter to change nothing.";
+    /** D34 in the typed prompt: the working folder's repo is pre-selected, so Enter leads to the (default No) y/N. */
+    readonly enterThisRepo: (slug: string) => string;
+    readonly promptMark: "> ";
+    /** `tokens` is the already-joined list (`9 (no row 9), acme, corp`): the corpus renders every template with a string. */
+    readonly notUnderstood: (tokens: string) => string;
+    readonly noRow: (n: string) => string;
+    readonly alreadyOn: (token: string, remove: string) => string;
+    readonly notOn: (token: string) => string;
+    /** The empty screen (D12 · 6A): a new laptop, no agent session on disk at all. */
+    readonly emptyNone: "No coding-agent sessions were found on this machine.";
+    readonly emptyExpected: "That's expected on a new machine. Type the owners or repos to capture; every clone of them is captured once Claude Code, Codex or Cursor runs in it.";
+    readonly emptyType: "Type owner/ or owner/repo, for example alexvibecommit/.";
+    /** Sessions exist but none could be listed (the `Not listed here:` block is not empty): scan's own wording. */
+    readonly emptyListable: "Type owner/ or owner/repo, for example alexvibecommit/, to capture a repository that is not listed.";
+    /** The checklist (D28). */
+    readonly hint: "↑↓ move · space choose · enter done · t typed prompt · ctrl+c cancel";
+    readonly hintTyped: (connectTyped: string) => string;
+    /** The enter-with-nothing lines (D5). */
+    readonly nothingGranted: (connect: string) => string;
+    readonly noChanges: (summary: string) => string;
+    readonly cancelled: "Cancelled. Nothing was changed.";
+    /** The grant block (D7 · 3A). */
+    readonly chose: "You chose:";
+    readonly labelOwners: "owners";
+    readonly labelRepos: "repos";
+    readonly labelTurnOn: "turn on";
+    readonly labelStop: "stop";
+    readonly ownerHere: (count: number) => string;
+    readonly noCloneHere: "(no clone here yet)";
+    readonly questionGrant: "Upload transcripts from these repositories?";
+    readonly questionStop: "Stop capturing these repositories?";
+    readonly stopped: "Stopped capturing the repositories above.";
+    /** "1 owner and 2 repos" — the on-now summary of Enter-with-grants, `auth`'s one line and the status heading. */
+    readonly summary: (owners: number, repos: number) => string;
+    readonly authStays: (summary: string) => string;
+    /** The hooks step (D13 · 7A). */
+    readonly hooksBeat: (clones: number) => string;
+    readonly hooksDone: "done";
+    readonly hooksCount: (added: number, chained: number, notAdded: number) => string;
+    readonly hooksNotAdded: (count: number) => string;
+    readonly hooksPathReason: "core.hooksPath is set";
+    /** A hook write that FAILED is a real exception with its own reason (VQ, item 9): neither dropped nor given `hooksPath`'s fix. */
+    readonly hooksFailedReason: "the hook could not be written";
+    readonly hooksStillCaptured: "Sessions there are still captured. To record commits too, either:";
+    readonly hooksStillCapturedOther: "Sessions there are still captured.";
+    readonly hooksFailedFixLabel: "Where the hook could not be written, try again:";
+    /** "Capture is on" (D18 · 12A, D19 · 13A). */
+    readonly onFor: (summary: string) => string;
+    readonly onProof: "The next Claude Code, Codex or Cursor session in any of them is captured. In Claude Code, its first reply then shows \"VibeCommit captured this session.\"";
+    readonly stopOne: "To stop one repo, run inside it:";
+    /**
+     * Alexander's "caveat for other owners" (2026-10-24; amended 17:20), on the "Capture is on" block. It prints for the owners the
+     * test capture did NOT check: from `~` that is every granted owner (there is no session to probe), and in a repo it is every
+     * granted owner except the one whose delta the server answered with a 2xx. For an owner that is not the signed-in person's own
+     * account the client cannot know whether an org is yet to approve capture, so it says one may be. Never printed when every
+     * such owner is the user's own account.
+     */
+    readonly ownerApproval: (status: string) => string;
+    readonly onNewLaptop: (names: string) => string;
+    readonly onNewLaptopProof: "No clone of it is here yet. Clone one and open a coding agent in it; that session is captured.";
+    /** The group of account grants this machine has not named (§2): numbered, unticked until chosen, like any other row. */
+    readonly onAccount: "on your account";
+    readonly onAccountHint: "choose it to capture it here";
+    /** A `turn on` row whose repo was turned off on the ACCOUNT (not only here): the yes re-includes it everywhere. */
+    readonly turnedOffOnAccount: "(turned off on your account)";
+    /** Screen 1a: the second line of the prompt block, on a machine with no credential, a terminal and a browser to sign in with. */
+    readonly gLine: "Or type g for the repositories your account already grants. It signs in first.";
+    /** The one token a mixed answer is refused for; `notUnderstood` wraps it in D8's line. */
+    readonly gMixedToken: "g can't be combined with other choices";
+    /** Screen 1b: the grant block's heading when the list is the account's, not the person's picks. */
+    readonly accountGrants: "Your account grants:";
+    /** Screen 1b, N: the credential `g` signed in with is revoked. The removed-here variant is a revoke that could not reach the server. */
+    readonly gDeclinedRevoked: "Nothing is captured on this machine. The credential made for this was revoked.";
+    readonly gDeclinedRemoved: "Nothing is captured on this machine. The credential made for this was removed here; the server will be told on the next vibecommit command that contacts the server.";
+    /** Ctrl+C after a mint (VQ's correction): never "Nothing was changed", because a credential was made and then removed. */
+    readonly gCancelledRevoked: "Cancelled. Nothing is captured on this machine. The credential made for this was revoked.";
+    readonly gCancelledRemoved: "Cancelled. Nothing is captured on this machine. The credential made for this was removed here; the server will be told on the next vibecommit command that contacts the server.";
+    /**
+     * `g` stopped because this machine could not make the write-ahead record of the credential it had just been given (an unwritable,
+     * unreadable or full queue). The credential is revoked at once (`REPLACE.declinedRevoked`), or `REPLACE.declinedOrphan` says where
+     * to remove it. An insecure queue file gets the insecure-file block instead of this line.
+     */
+    readonly gNotRecorded: "g stopped: this machine couldn't keep a record of the credential it was just given.";
+    /**
+     * The yes found `g`'s own record of the credential UNUSABLE (the queue file became insecure or unreadable while the question was
+     * open): nothing was revoked by anyone, this machine just cannot keep the record, so no credential is kept.
+     */
+    readonly gRecordUnusable: (connect: string) => string;
+    /**
+     * The yes found a `credentials.json` already there (another run saved one while the question was open): that one is kept, this run's
+     * is not, and the grants the yes wrote are saved — capture IS on, so this never says nothing is captured. The fate of the
+     * credential this run made follows on its own line (`REPLACE.declinedRevoked`, `gRemovedWillTell`, or `REPLACE.declinedOrphan`).
+     */
+    readonly gOccupied: (connect: string) => string;
+    /** The fate line for `gOccupied` when a readable row still holds the credential this run made. */
+    readonly gRemovedWillTell: "The credential just created was removed here; the server will be told on the next vibecommit command that contacts the server.";
+    /**
+     * The yes found `g`'s own record of the credential gone: another vibecommit command (a retry that ran while the question was open)
+     * had already revoked it. No credential is kept, and the grants the yes wrote stay. `connect` is THIS install's command.
+     */
+    readonly gRevokedElsewhere: (connect: string) => string;
+    /** Screen 1c: `g` found no grants on the account. The credential is kept and the person chooses here. */
+    readonly gEmpty: "Your account doesn't grant any repositories yet. Choose them here instead:";
+    /**
+     * `g` signed in but the account's grants could not be read (the server did not answer, or answered off-contract). It must not
+     * say the account is empty, and it says what to do: run `connect` again. `connect` is THIS install's command (a function of it).
+     */
+    readonly gUnavailable: (connect: string) => string;
+    /** Screen 2: a machine joining an account by picking local repos is asked about the rest of the account's grants. */
+    readonly joinAlso: (namesOnePerLine: string) => string;
+    readonly joinQuestion: "Capture those here too?";
+    /**
+     * Under "Capture is on" when the sync after `connect`'s writes did not reach the server (VQ, on VT's question). Capture IS on —
+     * local grants admit the repo — so this is not a warning; it only tells the truth about the account. Only `connect`, `status` and
+     * `off` sync, so it names `status` (the install channel's command); a 400 and a 401 have their own lines (below and `ERRORS`).
+     */
+    readonly accountNotTold: (status: string) => string;
+    /**
+     * "0.8.0 truth fixes" F2: the same line on a machine that HAS SYNCED before. There a grant the account has not been told about
+     * holds the repository's sessions on this machine (`isCaptureAllowed`, step 3), so "Capture is on" needs the truth about it.
+     * A machine that has never synced holds nothing and keeps `accountNotTold`.
+     */
+    readonly accountNotToldHeld: (status: string) => string;
+    readonly joinDeclined: (status: string) => string;
+};
 /** `vibecommit off`. */
 export declare const OFF: {
     readonly done: "Capture is off for this repository.";
+    /**
+     * 0.7.0, a claims-register row. A repo with a remote is turned off BY SLUG, which reaches every clone of it on this
+     * machine. Slice 2 extends the sentence to the other machines once they sync; until then it says only what is true.
+     */
+    readonly doneSlug: (slug: string) => string;
+    /** D31: bare `off` outside a repository. The picker is where an owner or another repo is unticked. */
+    readonly outsideRepoWhat: "`off` turns off the repository you're in.";
+    readonly outsideRepoFixLabel: "To stop capturing an owner or another repo, untick it in the picker:";
+    /** `grants.json` is unreadable, so the exclusion could not be recorded. The clone's own consent was still withdrawn. */
+    readonly grantsUnreadableWhat: "The turn-off could not be recorded: ~/.vibecommit/grants.json can't be read.";
+    readonly grantsUnreadableWhy: "Capture is already stopped for this repository while the file can't be read, and this clone's own consent was withdrawn.";
+    readonly grantsUnreadableFixLabel: "Fix the file or move it aside, then run:";
     readonly alreadyOff: "Capture was already off for this repository.";
+    /**
+     * Slice 2 (S4), brief §2 and §5. On a machine with a credential the exclusion is also queued for the account and synced
+     * (3 s), so the success line says where else it reaches; `unsyncedOthers` says who keeps capturing until they sync; and
+     * `notSentYet` is the design's sentence for a write that could not reach the server (it stays queued).
+     */
+    readonly doneSlugAccount: (slug: string) => string;
+    readonly unsyncedOthers: (n: number) => string;
+    readonly notSentYet: "Stopped here. Your other machines running VibeCommit 0.8.0 or later don't know yet; it will retry.";
+    /** The write was stopped, not just unsent (a 400, a 401, too large, unreadable): "it will retry" would be false, so it does not say so. */
+    readonly notSentStopped: "Stopped here. Your other machines running VibeCommit 0.8.0 or later don't know yet.";
+    /** The account already had it turned off (another machine, or the dashboard); this machine now agrees. */
+    readonly alreadyOffAccount: "Already off on your account; now off on this machine too.";
     readonly note: "Sessions already recorded are unaffected.";
     readonly unrecognizedArgWhat: "That is not something `vibecommit off` understands.";
     readonly unrecognizedArgWhy: "Nothing was changed. `off` takes no arguments.";
@@ -892,7 +1382,10 @@ export declare const WHY: {
      */
     readonly skewWhat: "The record service sent an answer this version is too old to show.";
     readonly skewWhy: "The service described this commit in a way this build does not recognise. The record itself is fine — this copy of the client cannot render it, so it showed nothing rather than guessing at part of it.";
+    /** The PLUGIN channel's remedy (`COMMANDS.pluginInstall`). */
     readonly skewFix: "Reinstall the VibeCommit plugin to pick up the current client, then run this again:";
+    /** The npm channel's remedy (`COMMANDS.npmUpdate`): an npm install has no plugin to reinstall. */
+    readonly skewFixNpm: "Update VibeCommit to pick up the current client, then run this again:";
     /** The bearer is dead after one refresh and one retry. Exit 3, not 1. */
     readonly signedOutWhat: "This machine is not signed in to VibeCommit.";
     readonly signedOutWhy: "Reading a record needs a signed-in user, and no usable sign-in was found on this machine.";
@@ -1277,20 +1770,42 @@ export declare const ABSENCE: {
  * know were bound: `closed` says the last turn is recorded, not that any commit matched it.
  */
 export declare const FINALIZE: {
-    readonly needTarget: "Say which session to close: --session <id>, or --latest.";
+    readonly needTarget: "Say which session to close.";
+    readonly needTargetFix: "Name one, or take the latest:";
     readonly badSessionId: "That is not a session id (letters, digits, dot, dash and underscore only).";
-    readonly noRecentSession: "No session in this repository has delivered anything in the last 24 hours. Use --session <id>.";
-    readonly severalRecent: "More than one session in this repository is recent. Name one with --session <id>:";
+    readonly noRecentSession: "No session in this repository has delivered anything in the last 24 hours.";
+    readonly noRecentSessionFix: "Name a session:";
+    readonly severalRecent: "More than one session in this repository is recent.";
+    readonly severalRecentFix: "Name one:";
+    /** `finalize --session <id>` for a session that is known, e.g. the one whose delivery just failed. */
+    readonly commandSession: (id: string) => string;
+    /** The same with the placeholder, for a fix line written before a session is known. */
+    readonly commandSessionAny: "vibecommit finalize --session <id>";
+    /** The command without its id, for a sentence that names the id itself (`status`'s held-idle line). */
+    readonly commandSessionBase: "vibecommit finalize --session";
+    readonly commandSessionForce: (id: string) => string;
     readonly recentRow: (id: string, minutesAgo: number) => string;
     readonly unknownSession: (id: string) => string;
     readonly transcriptMissing: (id: string) => string;
-    readonly stillWriting: "That session's transcript changed a moment ago. Wait for the session to finish, or pass --force if it is over.";
+    readonly stillWriting: "That session's transcript changed a moment ago.";
+    readonly stillWritingFix: "Wait for the session to finish, or if it is over, run:";
     readonly closed: (id: string) => string;
     readonly alreadyClosed: (id: string) => string;
     readonly notAcknowledged: "The server accepted the data but did not confirm that it closed the session; it may predate this command. The last turn may still be open.";
-    readonly refused: "The server declined to close the session on this attempt. Run the command again.";
-    readonly notDelivered: "Could not deliver the session. Nothing was closed. Run the command again.";
-    readonly credentialStopped: "VibeCommit stopped sending for this credential. Run `vibecommit auth` to replace it.";
+    readonly refused: "The server declined to close the session on this attempt.";
+    readonly retryFix: "Run it again:";
+    readonly notDelivered: "Could not deliver the session. Nothing was closed.";
+    readonly credentialStopped: "VibeCommit stopped sending for this credential.";
+    readonly credentialStoppedFix: "Replace it:";
+    /**
+     * PR 7 (Q2, VQ's wording): the ingest address in the environment (`VIBECOMMIT_INGEST_URL`) is one this client refuses to
+     * send to, so retrying cannot help. Shared by `finalize` and `backfill`, so the `why` says only "Nothing was sent": it must
+     * not claim a session was or was not closed. The VALUE is never echoed (a URL can carry a secret).
+     */
+    readonly ingestUrlWhat: "The address VibeCommit sends sessions to can't be used.";
+    readonly ingestUrlWhy: "VIBECOMMIT_INGEST_URL must be an https address, or an http address on this machine, and it isn't. Nothing was sent.";
+    readonly ingestUrlFix: "Correct it, or remove it to use the default address:";
+    readonly ingestUrlCommand: "unset VIBECOMMIT_INGEST_URL";
     /**
      * `TODOS[177]` follow-up (VL, 2026-10-08, VG's silent-loss finding) — ONE stderr line for the whole run when
      * `finalize` sets any inferred-squash pairs aside (the main delivery, the drain loop, or both, summed). Printed
@@ -1318,8 +1833,8 @@ export declare const REJECTED: {
      * command across lines; `unconfirmed` is their join, the sentence the plan wrote.
      */
     readonly unconfirmedWhat: "Couldn't confirm this machine's credential with the server.";
-    readonly unconfirmedFix: "Run `vibecommit status` later.";
-    readonly unconfirmed: "Couldn't confirm this machine's credential with the server. Run `vibecommit status` later.";
+    readonly unconfirmedFix: (status: string) => string;
+    readonly unconfirmed: (status: string) => string;
 };
 /** `TODOS[184]`-style one-sentence facts the retire step prints; every one is true whatever the server did. */
 export declare const RETIRE: {
@@ -1351,6 +1866,12 @@ export declare const REPLACE: {
     readonly questionUnconfirmed: "Upload this machine's transcripts to the workspace you signed in to?";
     readonly replacesValue: (org: string) => string;
     readonly question: (org: string) => string;
+    /**
+     * 0.7.0, D7 · 3A: on the PICKER path the question names the repos, not the machine, and is the second of at most three
+     * questions in a run. The workspace is cut to 28 columns (not `question`'s 30) so the line stays within 80 with `[y/N]`.
+     */
+    readonly questionRepos: (org: string) => string;
+    readonly questionReposUnconfirmed: "Upload transcripts from the repos above to your signed-in workspace?";
     readonly declined: "Nothing was saved. The approval is discarded.";
     /** Ctrl+C at the question (the prompt was aborted): the same outcome as N, said as what it was. */
     readonly cancelled: "Cancelled. Nothing was saved.";
@@ -1445,11 +1966,17 @@ export declare const UPDATE: {
     readonly plugin: (latest: string) => string;
 };
 export declare const ERRORS: {
-    readonly notConnected: "This repository is not connected. Run `vibecommit connect`.";
+    readonly notConnected: "This repository is not connected.";
+    /** PR 7 (Q7): the remedy was a sentence inside the `what` line; it is a command now, so it moves to the fix block. */
+    readonly notConnectedFix: "Connect it:";
     readonly networkLater: "Could not reach VibeCommit. This session will be recorded on the next turn.";
     readonly authFatal: "This machine's credential is no longer accepted.";
     readonly payloadNever: "This session was too large to record and has been skipped.";
     readonly notAGitRepo: "Not a git repository.";
+    /** PR 7 (VQ): names the folder, tilde-shortened and cut from the LEFT by the caller (`truncatePath`, §13.4). */
+    readonly notAGitRepoWhy: (folder: string) => string;
+    /** A fix with no command to give: the remedy is where to run it, so the block has a label and no commands. */
+    readonly notAGitRepoFix: "Run it again inside a git repository.";
 };
 /**
  * The interactive top-level catch (CR-022).
@@ -1469,7 +1996,7 @@ export declare const INTERNAL: {
     readonly unexpectedWhat: "VibeCommit stopped on an unexpected error.";
     readonly unexpectedWhy: "The command did not finish.";
     readonly unexpectedFix: "Run it again with the error detail shown:";
-    readonly unexpectedDebugCommand: "VIBECOMMIT_DEBUG=1 vibecommit <command>";
+    readonly unexpectedDebugCommand: (command: string) => string;
 };
 /**
  * Credential-loading failures (CR-016).
@@ -1497,6 +2024,10 @@ export declare const CREDENTIAL: {
     readonly insecureFileModeLabel: "mode";
     readonly insecureFileWhy: "It was not read. A credential file must be readable only by its owner.";
     readonly insecureFileFix: "Restore the mode, then reconnect:";
+    /** The FOLDER (`~/.vibecommit`) is open to other accounts, not the file: same code, its own what, why and `chmod`. */
+    readonly insecureDirWhat: "The folder that holds the credential file is open to other accounts on this machine.";
+    readonly insecureDirWhyLabel: "folder";
+    readonly insecureDirWhy: "The credential was not read. This folder must be accessible only to its owner.";
     readonly unreadableWhat: "The credential file could not be read.";
     readonly unreadableWhy: "It exists but does not contain a credential in the expected form.";
     /** `CR-216/U4`. Was "Replace it by reconnecting:" — see `wrongClassFix` above. */
@@ -1530,15 +2061,26 @@ export declare const AUTH: {
     readonly nextCommand: "vibecommit connect";
     readonly emptyWhat: "No credential was given.";
     readonly emptyWhy: "Nothing was read, so nothing was written.";
-    readonly emptyFix: "Mint one, then run:";
+    /**
+     * PR 6 item 1. Was "Mint one, then run:" over the URL alone, so the label promised a command and printed a link, and the
+     * non-interactive path was named nowhere. The URL comes FIRST (inside the label, where it cannot be wrapped away from
+     * its sentence) and the commands LAST, so the fix stays last (§13.6). A function because `URLS` is declared below.
+     */
+    readonly mintFix: (url: string) => string;
+    /**
+     * The two ways to hand it over: piped (a script or an agent), or typed at a terminal. `--stdin` never continues into `connect`
+     * (D32 guard 1). `auth` is `authCommandFor(env, selfPath)`: a plugin-only machine has no `vibecommit` on PATH, so the line names
+     * `node <path> auth` there (README, "Keeping a machine connected"), and handing it `vibecommit auth` would be a new wrong output.
+     */
+    readonly mintCommands: (auth: string) => readonly string[];
     readonly wrongClassWhat: "That is not a VibeCommit ingest credential.";
     readonly wrongClassWhy: "An ingest credential begins vcik_. Nothing was written and nothing was sent.";
-    readonly wrongClassFix: "Mint one, then run:";
     readonly argvWhat: "A credential must not be passed as an argument.";
     readonly argvWhy: "Arguments are written to your shell history and are readable by other processes on this machine while the command runs. Treat the one you just typed as exposed and revoke it.";
     readonly argvFix: "Read it from the terminal, or from a pipe:";
     readonly argvFixPrompt: "vibecommit auth";
-    readonly argvFixStdin: "printf %s \"$TOKEN\" | vibecommit auth --stdin";
+    /** A pipe, so `channelCommand` cannot rewrite it: it takes the channel's `auth` (`authCommandFor`) instead. */
+    readonly argvFixStdin: (auth: string) => string;
     /**
      * Printed before the request, naming the label the credential will carry in
      * `/app/settings` — the list a user revokes from, so the name they will look
@@ -1588,7 +2130,14 @@ export declare const RUNTIME: {
  *   4. No URL longer than the line.
  */
 export declare const SYSTEM_MESSAGE: {
-    readonly notConnected: "VibeCommit is installed but not connected. Run `vibecommit connect` to start capturing.";
+    /**
+     * State 1. The command is the channel's (`installChannel`): `vibecommit connect` on npm, `node <path> connect` for the plugin
+     * bundle, which has no `vibecommit` on PATH (slice 2, design Next Steps 6, the mechanism state 2 already uses). On npm the line is
+     * the same bytes it always was.
+     */
+    readonly notConnected: (connectCommand: string) => string;
+    /** State 1 when the channel's command would blow `credentialRejectedBudget` (a long plugin realpath). */
+    readonly notConnectedFallback: "VibeCommit is installed but not connected. Connect it: vibecommit.ai/install";
     /**
      * State 2 — `11A`. House prefix kept, ONE line, and the cause is no longer named: the server's 401
      * body is opaque on purpose (it cannot say "revoked" vs "expired"), so "revoked" was a guess that
@@ -1628,6 +2177,30 @@ export declare const SYSTEM_MESSAGE: {
      * users and its hash chain detects post-write tampering").
      */
     readonly captureConfirmed: (dashboardUrl: string) => string;
+    /**
+     * States 6-9 — style guide §10.1 (0.7.0, design review D16 · 10A), all emitted by the `SessionStart` hook. One
+     * plain-text line each, ≤120 characters, no SGR. The wording is the design doc's and the merged style guide's,
+     * byte for byte; `test/session-start.test.ts` pins the length of every one.
+     *
+     * 6 — hooks added, once per clone. 7 — `core.hooksPath` is set, once per clone. 8 — the clone has its own
+     * commit hook, once per clone. 9 — `grants.json` is unreadable, once per (machine, day).
+     */
+    readonly hooksAdded: "VibeCommit added its post-commit and post-rewrite hooks to this clone, so commits can link to sessions.";
+    readonly hooksPathSet: "VibeCommit captures sessions here, not commits: core.hooksPath is set. Run `vibecommit status` here for the fix.";
+    readonly ownCommitHook: "VibeCommit didn't add its commit hook here: this clone has its own. Run `vibecommit connect` here to chain it.";
+    readonly grantsUnreadable: "VibeCommit capture stopped on this machine: ~/.vibecommit/grants.json can't be read. Run `vibecommit status`.";
+    /**
+     * State 10 — slice 2 (`CR-259`, brief §3 item 4). Emitted by the `SessionStart` hook, once per (machine, account epoch), when its one
+     * bounded `GET` found account grants this machine has not named. SessionStart-only like states 6-9 (the plugin registers no
+     * SessionStart), so it names the CLI by its own name, in backticks as 7-9 do; ≤120 characters.
+     *
+     * The counts are of what `status` lists under "on account", split: `owners` are the account's owner grants this machine has not named
+     * (`octocat/`), `repos` its repository grants not named here, not under a named owner, and not turned off. The forms: "2 repositories",
+     * "1 owner and 3 repositories", "2 owners"; the singulars are "1 repository" and "1 owner".
+     */
+    readonly accountGrantsNotHere: (owners: number, repos: number) => string;
+    /** State 10 when the counts would blow the ≤120 budget (an absurd number of grants): no counts, the same command. */
+    readonly accountGrantsNotHereFallback: "Your account grants repositories not captured on this machine yet. Run `vibecommit status`.";
 };
 /**
  * The out-of-tree redaction marker — `CR-024d`, D57 §OV8d.
@@ -1658,6 +2231,10 @@ export declare const REDACTION: {
 /** Commands the copy points at. One definition, so a rename cannot half-land. */
 export declare const COMMANDS: {
     readonly connect: "vibecommit connect";
+    /** `D33 · 27A`. */
+    readonly scan: "vibecommit scan";
+    /** `D14`/`D15`. */
+    readonly backfill: "vibecommit backfill";
     /**
      * `CR-216/U2`. The only verb a credential FAULT's fix line may name — it can
      * replace the credential from any state. `CR-226` lets `connect` mint one
@@ -1678,6 +2255,10 @@ export declare const COMMANDS: {
     /** The ref form, for the detached-HEAD refusal. */
     readonly reportRef: "vibecommit report --since 2026-07-08 --ref main";
     readonly off: "vibecommit off";
+    /** The picker's screen-reader flag: a FLAG on `connect`, like `signIn`. */
+    readonly connectTyped: "vibecommit connect --typed";
+    /** The git hook's own verb. `hooksPathFixManual` tells a user to add it to a hook they keep. */
+    readonly postCommit: "vibecommit post-commit";
     /**
      * `CR-086`. The ARGUMENT SHAPE, shown once so the usage error and the retry
      * fix line cannot drift apart. There is no argument parser in this package —
@@ -1688,6 +2269,8 @@ export declare const COMMANDS: {
      */
     readonly why: "vibecommit why src/auth/session.ts:47";
     readonly chmodCredentials: "chmod 600 ~/.vibecommit/credentials.json";
+    /** The folder's remedy, for `CREDENTIAL_FILE_INSECURE` when the folder is the one with the wrong mode. */
+    readonly chmodDirectory: "chmod 700 ~/.vibecommit";
     /**
      * ⛔ THE INSTALL COMMAND, TRANSCRIBED FROM `claude-plugin/README.md:12` — and
      * it is deliberately NOT an invented update verb (`U1`, 2026-08-30).
@@ -1705,6 +2288,8 @@ export declare const COMMANDS: {
      * together — the wording and the command are one unit.
      */
     readonly pluginInstall: "/plugin install vibecommit@vibecommit-capture";
+    /** The npm channel's way to a newer client: the package's own documented install, at `latest`. */
+    readonly npmUpdate: "npm install -g @vibe-commit/capture@latest";
 };
 /**
  * Every URL the CLI prints. Here rather than inline for the same reason as the
@@ -1726,6 +2311,8 @@ export declare const URLS: {
      * deepening this constant is that task's, not a later guess.
      */
     readonly commits: "https://vibecommit.ai/app/commits";
+    /** `/app/conversations`: where an uploaded backfill lands (D19). `/app` (`dashboard`) is the ending after a no. */
+    readonly conversations: "https://vibecommit.ai/app/conversations";
     /**
      * One recorded session — the ending's link when the ingest 2xx carried a `conversation_id` (`DX D8`).
      * Verified by file: `vibecommit-web` `app/app/conversations/[id]/page.tsx` exists on `main`, and an