@vibe-commit/capture 0.9.0 → 0.11.0

package/dist/index.js

@@ -1,59 +1,24 @@
 #!/usr/bin/env node
 /**
- * `vibecommit` — CLI entry point.
+ * `vibecommit` — the process entry. A DISPATCHER, and deliberately nothing more.
  *
- * Verb bodies that are NOT here, each an owned task in
- * `coordination/CAPTURE_REFACTOR_TASKS.md`:
+ * ⛔ THIS FILE'S STATIC IMPORTS ARE THE LOAD COST OF EVERY HOOK. It used to import every interactive verb (`auth`,
+ * `connect`, `status`, the OAuth stack...), so `vibecommit hook` and the git hooks paid ~390 ms of module loading for code
+ * they never run. Now each branch below loads only what it runs, with a dynamic `import()`, and the interactive half
+ * lives in `cli.ts`. `test/load-path.test.ts` fails the build if a value import of an interactive verb reaches a hook path.
  *
- *   why  CR-086   report  CR-108   connect's live-capture ending  CR-025
- *   status/off output spec  CR-021   failure policy  CR-018
- *   repo binding key + X-Repo-Slug  CR-017 / CR-019
- *
- * What IS established here, and must not be undone by those tasks:
+ * What is established in `cli.ts`, and must not be undone:
  *   - no user-facing string literal in a command body (CR-090 → `src/copy/`)
  *   - the exit-code contract is split hook vs interactive (CR-022 → `src/exit.ts`)
- *   - one commit-header renderer taking the grade (CR-090 → `src/copy/grades.ts`)
- *   - every escape sequence comes from `src/term.ts` (DESIGN.md §13.2)
  *   - the hook contract is enforced by the entry, not by each verb
  */
-import { realpathSync, writeSync } from "node:fs";
+import { realpathSync } from "node:fs";
 import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
-import { createInterface } from "node:readline/promises";
-import { Writable } from "node:stream";
-import { resolveAgentId } from "./agents/registry.js";
-import { auth } from "./commands/auth.js";
-import { browserCredential } from "./commands/browser_credential.js";
-import { updateNudge } from "./update_nudge.js";
-import { connect } from "./commands/connect.js";
-import { finalize } from "./commands/finalize.js";
-import { offVerb, statusVerb } from "./commands/status.js";
-import { report } from "./commands/report.js";
-import { backfill, backfillForConnect } from "./commands/backfill.js";
-import { scan } from "./commands/scan.js";
-import { why } from "./commands/why.js";
-import { HELP, INTERNAL, USAGE } from "./copy/index.js";
 import { EXIT } from "./exit.js";
-import { runHook } from "./hooks/entry.js";
-import { runPostCommit } from "./hooks/post_commit.js";
-import { runPostRewrite } from "./hooks/post_rewrite.js";
-import { channelCommand, installChannel } from "./install.js";
-import { renderJsonError } from "./json.js";
-import { LABEL_GUTTER, renderErrorBlock, resolveColour, wrap } from "./term.js";
-import { CLIENT_VERSION } from "./version.js";
-// `CR-216/U2` adds `auth`, and adding it MOVES `test/help.golden.txt` — which
-// `CR-084d` and the `post-commit` note below were both careful not to do. The
-// difference is the point: those two are a FLAG and a HIDDEN verb, neither of
-// which a human types, so moving the golden file for them would have been noise.
-// `auth` is typed by a human on a new machine before anything else works, so a
-// help screen that omitted it would be the defect one layer up. The golden file
-// exists to make a change to that screen deliberate, not to make it impossible.
-/** The verbs with a `--json` mode (`src/json.ts`'s `JsonVerb`): a failure under the flag is a document, not a block. */
-const JSON_VERBS = ["status", "why", "report", "scan"];
-const VERBS = ["auth", "connect", "scan", "backfill", "status", "off", "why", "report", "finalize"];
-export function isVerb(value) {
-    return VERBS.includes(value);
-}
+import { readStdin } from "./stdin.js";
+import { isVerb } from "./verbs.js";
+export { isVerb };
 /**
  * Hook invocations are distinguished by ARGV FIRST, then by env.
  *
@@ -73,359 +38,6 @@ export function invocationMode(env, argv) {
         return "hook";
     return env.CLAUDE_HOOK_EVENT ? "hook" : "interactive";
 }
-/**
- * `--help`, wrapped hard at 80 columns per DESIGN.md §13.4.
- *
- * Never reflows to `process.stdout.columns`: identical commands must emit
- * identical bytes, or issue-paste, screenshots and every golden-file test of the
- * copy break. `test/help-golden.test.ts` is that golden file.
- *
- * No SGR here at all. Colour would have to be resolved before help could be
- * rendered, and help is the one surface where structure alone is enough —
- * indentation and the label gutter carry it, which is §13.1's point about
- * `NO_COLOR` being a lossless degradation rather than a downgrade.
- */
-export function renderHelp() {
-    const lines = [
-        ...wrap(HELP.tagline, 2),
-        "",
-        ...wrap(`${USAGE.usageLabel} ${HELP.usage}`, 2),
-        "",
-        ...wrap(USAGE.commandsLabel, 2),
-    ];
-    for (const verb of VERBS) {
-        // The description is wrapped on its own and the verb column is written over
-        // the first line's indent. Wrapping `verb + padding + description` as one
-        // string would not work: `wrap` normalises whitespace, so the fixed gutter
-        // would collapse to a single space.
-        const head = `    ${verb.padEnd(LABEL_GUTTER)}`;
-        const body = wrap(HELP.commands[verb], head.length);
-        lines.push(head + body[0].slice(head.length), ...body.slice(1));
-    }
-    lines.push("", ...wrap(`${USAGE.docsLabel} ${HELP.docsUrl}`, 2));
-    return lines.join("\n");
-}
-function interactiveContext(argv) {
-    return {
-        env: process.env,
-        home: homedir(),
-        cwd: process.cwd(),
-        nodeVersion: process.versions.node,
-        // `CR-183`. Resolved from argv HERE, the same pure read the hook branch at
-        // the bottom of this file makes — `connect` needs it to know whether the
-        // agent it was told about has a way to find the running session at all.
-        agentId: resolveAgentId(argv),
-        colour: resolveColour({
-            env: process.env,
-            isTty: process.stdout.isTTY === true,
-            noColorFlag: argv.includes("--no-color"),
-            json: argv.includes("--json"),
-        }),
-        stdinIsTty: process.stdin.isTTY === true,
-        stdout: process.stdout,
-        stderr: process.stderr,
-        /**
-         * The readline interface is created HERE, on the first question, and not
-         * once per invocation — CR-117.
-         *
-         * `createInterface` RESUMES stdin, and a resumed stdin keeps the event loop
-         * alive until it ends. Built eagerly, a verb that returns without ever
-         * prompting sat there until the pipe closed: `connect` refusing a non-TTY,
-         * and `status` / `off`, which never ask anything. On a terminal that looked
-         * fine, because stdin ends at EOF; under `cmd | vibecommit connect` in CI it
-         * is the hang the source finding names first, burning the job's whole
-         * timeout with the refusal already on screen and no way to explain it.
-         *
-         * It also makes style guide §10.2 rule 2 literally true rather than nearly
-         * true: on the refusal path stdin is not read, resumed, or opened at all.
-         */
-        ask: async (question) => {
-            const rl = createInterface({ input: process.stdin, output: process.stdout });
-            try {
-                return await rl.question(question);
-            }
-            finally {
-                rl.close();
-            }
-        },
-        now: () => new Date(),
-        selfPath: process.argv[1] ?? "",
-    };
-}
-async function main(argv) {
-    const [verb] = argv;
-    if (verb === undefined || verb === "--help" || verb === "-h") {
-        process.stdout.write(`${renderHelp()}\n`);
-        return EXIT.ok;
-    }
-    if (verb === "--version" || verb === "-v") {
-        process.stdout.write(`${CLIENT_VERSION}\n`);
-        return EXIT.ok;
-    }
-    if (!isVerb(verb)) {
-        // PR 7 (Q6): a block like every other failure — a code, and the way to the command list as the LAST line. No help dump.
-        const colour = resolveColour({
-            env: process.env,
-            isTty: process.stderr.isTTY === true,
-            noColorFlag: argv.includes("--no-color"),
-            json: false,
-        });
-        process.stderr.write(`${renderErrorBlock({
-            kind: "bad",
-            code: "UNKNOWN_COMMAND",
-            what: USAGE.unknownCommandWhat(verb),
-            why: [],
-            fixLabel: USAGE.unknownCommandFix,
-            fixes: [channelCommand(process.env, process.argv[1] ?? "", USAGE.unknownCommandHelp)],
-        }, colour).join("\n")}\n`);
-        return EXIT.usage;
-    }
-    const ctx = interactiveContext(argv);
-    // Slice 2 (S4, R3-11): a credential `g` made and did not keep is revoked by the NEXT verb that runs — once, at its start, silent,
-    // needing no credential, inside one 3 s bound across every row. Not for `--help`, not for `scan` (network-free by contract,
-    // README), not for a `--stdin`, piped or no-terminal `auth` (below), and never from a hook (this is the verb path; hooks branch off at the bottom of this file).
-    // F8 (L10): nor for `auth` run with `--stdin`, piped or with no terminal ("it only saves the credential" stays exactly true of it).
-    const authSavesOnly = verb === "auth" && (argv.includes("--stdin") || !ctx.stdinIsTty);
-    if (verb !== "scan" && !authSavesOnly && !argv.includes("--help") && !argv.includes("-h")) {
-        // Loaded HERE, on the verb path only (the connect.ts rule): `vibecommit hook` never imports the module that holds a token.
-        const { retryPendingRevokes } = await import("./pending_revoke.js");
-        await retryPendingRevokes(ctx.home, ctx.env, globalThis.fetch, ctx.now());
-    }
-    const code = await runVerb(verb, argv, ctx);
-    // `13A`: the nudge is the LAST line of a verb that SUCCEEDED — never after an error (the §13.6 fix
-    // line must stay last) and never with `--json`. It lives here, not in the verbs, so no verb's own
-    // output or exit path can reach it by accident; `updateNudge` itself fails silent.
-    if (code === EXIT.ok &&
-        (verb === "status" || verb === "connect" || verb === "auth") &&
-        !argv.includes("--json") &&
-        !argv.includes("--help") &&
-        !argv.includes("-h")) {
-        const lines = await updateNudge(ctx);
-        if (lines.length > 0)
-            process.stdout.write(`${lines.join("\n")}\n`);
-    }
-    return code;
-}
-/** The real browser beat for `auth` and `connect`: the real network and the real clock, plus `--device`. */
-const realBrowser = (ctx, retry, options) => browserCredential(ctx, retry, {}, options);
-async function runVerb(verb, argv, ctx) {
-    switch (verb) {
-        case "auth":
-            // `CR-216/U2`. Both readers are injected here rather than reached for
-            // inside the verb, the same way `why` takes its reader: the suite drives
-            // every arm, and neither a TTY nor a pipe can be typed into by a test.
-            return await auth(ctx, argv.slice(1), {
-                readSecret: readSecretFromTty,
-                readStdin,
-                // `CR-226`. The browser mint, first on a terminal; the two readers above
-                // stay the fallback. Injected HERE and nowhere else — the verb's default
-                // is paste-only, so this line is what makes the route reachable.
-                browser: realBrowser,
-                // `CR-236`. After a save inside a git work tree on a terminal, `auth` continues into `connect`.
-                // ⛔ NO `browser` HERE, AND THAT IS THE "ONE AUTH" GUARANTEE: this verb just saved a credential, so
-                // the chained `connect` finds one; were it ever absent it falls to the old warning, never to a
-                // second sign-in. `test/auth-connect-chain.test.ts` brace-matches this call to keep it so.
-                // The backfill offer IS passed: it is not a sign-in, it asks its own y/N (default N) on a terminal only, and the chain
-                // itself runs only on a terminal (the `!piped` gate, D32 guard 1), so a piped or CI `auth` never reaches it.
-                // Slice 2: the account's network is passed (it is not a sign-in), so the chained `connect` syncs and shows the picker's
-                // "on your account" group. `g` needs a `browser`, which this call never has, so the chain can never reach it.
-                connect: (c) => connect(c, {}, { backfill: backfillForConnect, account: { fetch: globalThis.fetch } }),
-                // R3-7: a credential this verb saves, off the chain, is synced before it returns (only on a machine that has synced before).
-                account: { fetch: globalThis.fetch },
-            });
-        case "connect":
-            // `--sign-in` (CR-084d) is a FLAG, not a verb: `VERBS` is what `renderHelp`
-            // iterates, so a sixth verb would move `test/help.golden.txt`, and the
-            // brief for this task is explicit that the golden file must not move.
-            // `CR-226`: the browser beat for a fresh machine. Same rule as `auth` —
-            // `connect`'s default never opens a browser, so without this argument the
-            // route is unreachable from the install path.
-            // `TODOS[184]`: `help` added — `connect` has no `argv` param, so its `--help`/`-h` check reads this
-            // option field, computed the same way `signIn` already is.
-            return await connect(ctx, {
-                signIn: argv.includes("--sign-in"),
-                // `CR-234d`: sign in by code.
-                device: argv.includes("--device"),
-                // `D28`: the typed prompt even on a terminal — the checklist's way out for a screen reader.
-                typed: argv.includes("--typed"),
-                help: argv.includes("--help") || argv.includes("-h"),
-            }, 
-            // `D14`/`D15`: the backfill offer after "Capture is on" (PR 5's `backfillForConnect`).
-            // Slice 2: `account` is the network for the sync, the "on your account" group, `g` and the joining-machine question.
-            { browser: realBrowser, backfill: backfillForConnect, account: { fetch: globalThis.fetch } });
-        case "scan":
-            // `D33 · 27A`. Read-only, no network, and a public verb so an agent can list capturable repos
-            // without entering a consent flow. Reads its own `--json` like `status`.
-            return scan(ctx, argv.slice(1));
-        case "backfill":
-            // `D14`/`D15`. Asks first (default N), uploads earlier sessions one at a time, no commit links. Takes no arguments.
-            return await backfill(ctx, argv.slice(1));
-        case "status":
-            // `argv.slice(1)` for the same reason `why` and `report` take it: `status`
-            // reads its own `--json` flag rather than this package acquiring an
-            // argument parser it has deliberately never had (DESIGN.md §13.3).
-            // Slice 2 (S4): one bounded account sync first, then the screen. The sync only refreshes the files `status` reads.
-            return await statusVerb(ctx, argv.slice(1), { fetch: globalThis.fetch });
-        case "off":
-            // `TODOS[184]`: `off` now takes its trailing argv, so a stray argument (including `--help`
-            // landing here by accident) can no longer silently revoke consent.
-            // Slice 2 (S4): the turn-off is local first; with a credential it is then queued for the account and synced once.
-            return await offVerb(ctx, argv.slice(1), { fetch: globalThis.fetch });
-        case "why":
-            // CR-086. `argv.slice(1)` is everything after the verb — there is no
-            // argument parser in this package and `why` does not add one; it reads
-            // `<file>:<line>` and refuses `--json`, which is the smallest shape that
-            // satisfies the verbatim-approved `--help` sentence.
-            return await why(ctx, argv.slice(1));
-        case "report":
-            // CR-108, W10. Same shape as `why`: `argv.slice(1)` is everything after
-            // the verb, and the verb reads its own two flags rather than adding an
-            // argument parser this package deliberately does not have.
-            return await report(ctx, argv.slice(1));
-        case "finalize":
-            // `TODOS[146]`. Same shape as `report`: the verb reads its own flags.
-            return await finalize(ctx, argv.slice(1));
-    }
-}
-/**
- * Read a secret from the terminal WITHOUT ECHOING IT — `CR-216/U2`.
- *
- * `ctx.ask` is not reusable for this. It is the consent prompt: it echoes, which
- * is correct for `y/N` and wrong for a long-lived credential, which would then
- * sit in the terminal's scrollback to be scrolled back to, screenshotted into a
- * bug report, or captured by a terminal logger.
- *
- * The mute is the ordinary readline technique: `output` receives the prompt
- * first and is muted only for the keystrokes that follow, so the question is
- * still visible and the answer never is. The trailing newline is ours to write —
- * the user's own Return was swallowed with the rest, and without it whatever
- * prints next lands on the prompt line.
- *
- * Nothing here holds the secret: `rl.question`'s resolved string goes straight to
- * the caller, which wraps it in an `IngestCredential` before doing anything else
- * with it.
- */
-function readSecretFromTty(prompt) {
-    let muted = false;
-    const muffled = new Writable({
-        write(chunk, encoding, cb) {
-            if (!muted)
-                process.stdout.write(chunk, encoding);
-            cb();
-        },
-    });
-    const rl = createInterface({ input: process.stdin, output: muffled, terminal: true });
-    const answer = rl.question(prompt);
-    muted = true;
-    return answer.finally(() => {
-        rl.close();
-        process.stdout.write("\n");
-    });
-}
-function readStdin() {
-    return new Promise((resolve) => {
-        let buf = "";
-        process.stdin.setEncoding("utf8");
-        process.stdin.on("data", (chunk) => {
-            buf += chunk;
-        });
-        process.stdin.on("end", () => resolve(buf));
-        process.stdin.on("error", () => resolve(""));
-    });
-}
-/**
- * The INTERACTIVE half of the split exit contract — CR-022, D61 round 3 §D8.
- *
- * The hook half is enforced in `hooks/entry.ts`: swallow everything, exit 0, stay
- * silent, because a non-zero hook feeds stderr back into the user's agent and
- * derails the task they were actually doing. **An interactive verb must not
- * inherit that blanket.** As originally written the exit-0/stdout-empty rule read
- * as governing the whole binary, which would make `why` on a read-lane 5xx exit 0
- * and print nothing — a read verb failing silently, which is the defect this
- * split exists to prevent.
- *
- * So: same fault, same binary, two modes, two behaviours. Interactive gets exit 1
- * and §13.6's shape.
- *
- * Two things this deliberately does NOT do:
- *   - **No signal handling.** `Ctrl-C` cancelling a `connect` prompt is normal
- *     CLI behaviour, and suppressing `SIGINT` globally would be a UX regression
- *     dressed up as a fix. The hook's signal override stays scoped to hook mode.
- *   - **No stack trace** unless `VIBECOMMIT_DEBUG` is set (§13.6, first
- *     prohibition). The detail then goes out RAW, after the block, rather than
- *     through `wrap()`, which would reflow a stack into nonsense.
- */
-function reportUnexpected(error, argv) {
-    const colour = resolveColour({
-        env: process.env,
-        isTty: process.stderr.isTTY === true,
-        noColorFlag: argv.includes("--no-color"),
-        json: argv.includes("--json"),
-    });
-    const block = {
-        kind: "bad",
-        code: "INTERNAL_ERROR",
-        what: INTERNAL.unexpectedWhat,
-        why: [INTERNAL.unexpectedWhy],
-        fixLabel: INTERNAL.unexpectedFix,
-        fixes: [INTERNAL.unexpectedDebugCommand(installChannel(process.env, process.argv[1] ?? "").command)],
-    };
-    // PR 7: under `--json` on a read verb the failure is ONE document on stdout and nothing on stderr — the same shape every
-    // other `--json` failure has. (`VIBECOMMIT_DEBUG` is an explicit opt-in to the raw detail on stderr, and still prints.)
-    const jsonVerb = argv.includes("--json") ? JSON_VERBS.find((v) => v === argv[0]) : undefined;
-    const lines = jsonVerb === undefined ? renderErrorBlock(block, colour) : [];
-    if (jsonVerb !== undefined) {
-        try {
-            writeSync(1, renderJsonError(jsonVerb, block));
-        }
-        catch {
-            // An unwritable stdout is not worth a second exception on this path.
-        }
-    }
-    if (process.env.VIBECOMMIT_DEBUG !== undefined)
-        lines.push(...(lines.length > 0 ? [""] : []), detailOf(error));
-    if (lines.length === 0)
-        return;
-    // `writeSync(2, …)` rather than `process.stderr.write`: stderr to a pipe is
-    // asynchronous and `process.exit` does not flush it, so the caller below would
-    // race its own diagnostic away. Same reason `finish()` uses it on fd 1.
-    try {
-        writeSync(2, `${lines.join("\n")}\n`);
-    }
-    catch {
-        // An unwritable stderr is not worth a second exception on this path.
-    }
-}
-/**
- * The raw detail, for `VIBECOMMIT_DEBUG` only.
- *
- * Interpolating an error is safe by construction here: an `IngestCredential`
- * renders `vcik_…redacted` through `toString`, `toJSON` and the inspect hook, so
- * a stack that embedded one cannot print the plaintext.
- */
-function detailOf(error) {
-    if (error instanceof Error && typeof error.stack === "string")
-        return error.stack;
-    return String(error);
-}
-/**
- * Catch what escapes `main()` entirely — a stray timer's throw, a rejection from
- * a promise nobody awaited. Without these, Node prints its own stack trace to
- * stderr, which §13.6 forbids outright.
- *
- * These force an exit rather than setting `process.exitCode`, because by
- * definition something unexpected is still in flight and may be holding the event
- * loop open. The `main()` rejection path below does not: nothing is in flight
- * there, and letting the loop drain preserves whatever the verb already wrote.
- */
-function installInteractiveGuards(argv) {
-    const fail = (error) => {
-        reportUnexpected(error, argv);
-        process.exit(EXIT.failure);
-    };
-    process.on("uncaughtException", fail);
-    process.on("unhandledRejection", fail);
-}
 /**
  * Swallow EPIPE.
  *
@@ -478,83 +90,80 @@ function invokedAsBinary() {
         return false;
     }
 }
+/**
+ * Every dispatch below is a dynamic `import()` that FAILS CLOSED to the verb's own contract. A hook, `post-commit` and
+ * `post-rewrite` run inside the user's agent or `git commit`: an import that throws (a plugin update replacing `bin/` under a
+ * running process, a truncated install) must exit 0 and print nothing, not put a stack trace in their terminal. The
+ * interactive branch is the opposite on purpose: a broken install should be LOUD there, so its rejection is not caught.
+ */
 if (invokedAsBinary()) {
     installPipeGuards();
     const argv = process.argv.slice(2);
     if (argv[0] === "post-commit") {
-        // ⛔ A HIDDEN VERB, dispatched here rather than through `main`, and NOT in
-        // `VERBS` — `renderHelp` iterates that list, so adding it would move
-        // `test/help.golden.txt` for a verb no human ever types. `hook` is dispatched
-        // the same way, for the same reason.
+        // ⛔ A HIDDEN VERB, dispatched here rather than through `main`, and NOT in `VERBS` — `renderHelp` iterates that list, so
+        // adding it would move `test/help.golden.txt` for a verb no human ever types. `hook` is dispatched the same way.
         //
-        // It runs inside the user's `git commit`, so it exits 0 unconditionally and
-        // writes nothing to either stream (`hooks/post_commit.ts`).
+        // It runs inside the user's `git commit`, so it exits 0 unconditionally and writes nothing to either stream
+        // (`hooks/post_commit.ts`).
         //
-        // ⛔ `env` IS THE LADDER'S FIRST RUNG. Claude Code exports
-        // `CLAUDE_CODE_SESSION_ID` into the Bash tool's environment and git passes it
-        // through to us (`M1`), so the committing session identifies ITSELF instead of
-        // being guessed at by mtime. This is the one place the real environment is
-        // read on this path; everything below takes it as a parameter.
-        process.exit(runPostCommit({ home: homedir(), cwd: process.cwd(), env: process.env }));
-    }
-    if (argv[0] === "post-rewrite") {
-        // The other hidden verb, for the same reason — and it is `post-commit`'s
-        // other half: `--amend` and `rebase` fire `post-commit` for a sha they then
-        // DESTROY (`M5`), and this is the only hook git tells about the pairing.
+        // ⛔ `env` IS THE LADDER'S FIRST RUNG. Claude Code exports `CLAUDE_CODE_SESSION_ID` into the Bash tool's environment and
+        // git passes it through to us (`M1`), so the committing session identifies ITSELF instead of being guessed at by mtime.
+        // This is the one place the real environment is read on this path; everything below takes it as a parameter.
+        void import("./hooks/post_commit.js")
+            .then(({ runPostCommit }) => process.exit(runPostCommit({ home: homedir(), cwd: process.cwd(), env: process.env })))
+            .catch(() => process.exit(EXIT.ok));
+    }
+    else if (argv[0] === "post-rewrite") {
+        // The other hidden verb, for the same reason — and it is `post-commit`'s other half: `--amend` and `rebase` fire
+        // `post-commit` for a sha they then DESTROY (`M5`), and this is the only hook git tells about the pairing.
         //
-        // ⛔ THE PAIRS ARRIVE ON STDIN, and it is read HERE so `hooks/post_rewrite.ts`
-        // opens nothing — the same seam that keeps every other module in this package
-        // free of a real file descriptor. ⚠ `readStdin` REUSED rather than a second
-        // synchronous reader beside it: it already resolves an `error` to `""`, and
-        // two stdin readers in one file is how the two come to disagree about what an
-        // unreadable stream means. An empty read parses to zero pairs, which is an
-        // ordinary answer rather than a failure.
-        void readStdin().then((stdin) => process.exit(runPostRewrite({
+        // ⛔ THE PAIRS ARRIVE ON STDIN, and it is read HERE so `hooks/post_rewrite.ts` opens nothing — the same seam that keeps
+        // every other module in this package free of a real file descriptor. `readStdin` resolves an `error` to `""`, and an empty
+        // read parses to zero pairs, which is an ordinary answer rather than a failure.
+        void Promise.all([import("./hooks/post_rewrite.js"), readStdin()])
+            .then(([{ runPostRewrite }, stdin]) => process.exit(runPostRewrite({
             home: homedir(),
             cwd: process.cwd(),
             env: process.env,
             // git's own `argv[1]` — `amend` or `rebase`.
             kind: argv[1] ?? "",
             stdin,
-        })));
-        // ⛔ `else if` FROM HERE, AND THE BRANCH ABOVE IS WHY. Reading stdin is
-        // asynchronous, so unlike `post-commit` this block RETURNS rather than
-        // exiting — and a plain `if` below would then run `main(["post-rewrite"])`
-        // synchronously, print an unknown-verb error, and put it in the terminal of
-        // someone in the middle of a `git rebase`. The contract this hook is held to
-        // is silence.
+        })))
+            .catch(() => process.exit(EXIT.ok));
+    }
+    else if (argv[0] === "__upload-worker") {
+        // The third hidden verb: the detached upload worker (U5). Spawned by a hook with `stdio: "ignore"`, so it has nobody to talk to and exits 0
+        // unconditionally. Dispatched BEFORE the env-keyed hook branch below, so an inherited `CLAUDE_HOOK_EVENT` cannot route it into the hook.
+        // Not in `VERBS`, for the same reason `hook` is not: `renderHelp` iterates that list and no human types this.
+        void import("./commands/upload_worker.js")
+            .then(({ runUploadWorkerMain }) => runUploadWorkerMain(process.env, homedir()))
+            .then((code) => process.exit(code))
+            .catch(() => process.exit(EXIT.ok));
     }
     else if (invocationMode(process.env, argv) === "hook") {
-        // `runHook` installs the contract guards before it does any work and always
-        // calls `process.exit(0)`. It never returns, so nothing follows it.
-        void runHook({
+        // `runHook` installs the contract guards before it does any work and always calls `process.exit(0)`. It never returns, so
+        // nothing follows it.
+        void Promise.all([import("./hooks/entry.js"), import("./agents/registry.js")])
+            .then(([{ runHook }, { resolveAgentId }]) => runHook({
             env: process.env,
             home: homedir(),
             nodeVersion: process.versions.node,
-            // ⛔ `CR-183` — THE ONE PLACE THE FLAG IS READ ON THIS PATH, and it is read
-            // HERE rather than inside the hook for a structural reason: `runHook` never
-            // receives argv at all, and `parseHookInput` must not select the adapter
-            // because stdin is the input the confinement boundary exists to constrain.
-            // This is the seam that already injects `home` and `nodeVersion`.
+            // ⛔ `CR-183` — THE ONE PLACE THE FLAG IS READ ON THIS PATH, and it is read HERE rather than inside the hook for a
+            // structural reason: `runHook` never receives argv at all, and `parseHookInput` must not select the adapter because
+            // stdin is the input the confinement boundary exists to constrain. This is the seam that already injects `home` and
+            // `nodeVersion`.
             //
-            // ⚠ Note what the line ABOVE this block does and does not do: resolving an
-            // id is not entering hook mode. `invocationMode` keys on `argv[0]`, so the
-            // registered command MUST lead with the `hook` verb — put the flag first
-            // and this branch is never taken.
+            // ⚠ Resolving an id is not entering hook mode. `invocationMode` keys on `argv[0]`, so the registered command MUST
+            // lead with the `hook` verb — put the flag first and this branch is never taken.
             agentId: resolveAgentId(argv),
             readStdin,
             // `11A`: state 2 names the command that reconnects THIS install.
             selfPath: process.argv[1] ?? "",
-        });
+        }))
+            .catch(() => process.exit(EXIT.ok));
     }
     else {
-        installInteractiveGuards(argv);
-        void main(argv).then((code) => {
-            process.exitCode = code;
-        }, (error) => {
-            reportUnexpected(error, argv);
-            process.exitCode = EXIT.failure;
-        });
+        void import("./cli.js").then(({ runCli }) => runCli(argv));
     }
 }
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAmC,MAAM,kCAAkC,CAAC;AACtG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAExC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAuB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAiB,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,wHAAwH;AACxH,MAAM,UAAU,GAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE5E,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAG7G,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAQ,KAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,GAAsB,EAAE,IAAuB;IAC5E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAa;QACtB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACxB,EAAE;QACF,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,EAAE;QACF,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;KAChC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAuB;IACjD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,OAAO,EAAE;QACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAClC,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,aAAa,CAAC;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC;QACF,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB;;;;;;;;;;;;;;WAcG;QACH,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAuB;IACzC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEpB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,wHAAwH;QACxH,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxC,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,gBAAgB,CACjB;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACpC,GAAG,EAAE,EAAE;YACP,QAAQ,EAAE,KAAK,CAAC,iBAAiB;YACjC,KAAK,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;SACtF,EACD,MAAM,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,kIAAkI;IAClI,4HAA4H;IAC5H,iKAAiK;IACjK,oIAAoI;IACpI,MAAM,aAAa,GAAG,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,2HAA2H;QAC3H,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpE,MAAM,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,mGAAmG;IACnG,kGAAkG;IAClG,mFAAmF;IACnF,IACE,IAAI,KAAK,IAAI,CAAC,EAAE;QAChB,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC;QAC5D,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4GAA4G;AAC5G,MAAM,WAAW,GAAG,CAAC,GAAmB,EAAE,KAAY,EAAE,OAAwB,EAAE,EAAE,CAClF,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAE7C,KAAK,UAAU,OAAO,CAAC,IAAU,EAAE,IAAuB,EAAE,GAAmB;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,sEAAsE;YACtE,yEAAyE;YACzE,uEAAuE;YACvE,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACpC,UAAU,EAAE,iBAAiB;gBAC7B,SAAS;gBACT,yEAAyE;gBACzE,yEAAyE;gBACzE,iEAAiE;gBACjE,OAAO,EAAE,WAAW;gBACpB,gGAAgG;gBAChG,mGAAmG;gBACnG,+FAA+F;gBAC/F,2FAA2F;gBAC3F,uHAAuH;gBACvH,6GAA6G;gBAC7G,wHAAwH;gBACxH,8GAA8G;gBAC9G,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtG,6HAA6H;gBAC7H,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;aACrC,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,4EAA4E;YAC5E,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,0EAA0E;YAC1E,8CAA8C;YAC9C,oGAAoG;YACpG,2DAA2D;YAC3D,OAAO,MAAM,OAAO,CAClB,GAAG,EACH;gBACE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAClC,8BAA8B;gBAC9B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACjC,4FAA4F;gBAC5F,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aACrD;YACD,uFAAuF;YACvF,qHAAqH;YACrH,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,CAC7F,CAAC;QACJ,KAAK,MAAM;YACT,8FAA8F;YAC9F,yEAAyE;YACzE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,oHAAoH;YACpH,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,KAAK,QAAQ;YACX,2EAA2E;YAC3E,oEAAoE;YACpE,mEAAmE;YACnE,mHAAmH;YACnH,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,KAAK,KAAK;YACR,2FAA2F;YAC3F,mEAAmE;YACnE,kHAAkH;YAClH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,KAAK,KAAK;YACR,qEAAqE;YACrE,uEAAuE;YACvE,yEAAyE;YACzE,qDAAqD;YACrD,OAAO,MAAM,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,wEAAwE;YACxE,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,UAAU;YACb,sEAAsE;YACtE,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC;QAC3B,KAAK,CAAC,KAAsB,EAAE,QAAQ,EAAE,EAAE;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAe,EAAE,QAAQ,CAAC,CAAC;YAC5D,EAAE,EAAE,CAAC;QACP,CAAC;KACF,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,GAAG,IAAI,CAAC;IACb,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QACzB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,GAAG,IAAI,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAuB;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACxC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,IAAI,EAAE,KAAc;QACpB,IAAI,EAAE,gBAAyB;QAC/B,IAAI,EAAE,QAAQ,CAAC,cAAc;QAC7B,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC7B,QAAQ,EAAE,QAAQ,CAAC,aAAa;QAChC,KAAK,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;KACrG,CAAC;IACF,yHAAyH;IACzH,wHAAwH;IACxH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,4EAA4E;IAC5E,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,CAAC;QACH,SAAS,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAClF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,IAAuB;IACvD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;QACpC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB;IACxB,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,eAAe,EAAE,EAAE,CAAC;IACtB,iBAAiB,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,qEAAqE;QACrE,8EAA8E;QAC9E,qCAAqC;QACrC,EAAE;QACF,4EAA4E;QAC5E,4DAA4D;QAC5D,EAAE;QACF,0DAA0D;QAC1D,8EAA8E;QAC9E,+EAA+E;QAC/E,2EAA2E;QAC3E,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QAC/B,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,EAAE;QACF,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,8EAA8E;QAC9E,2EAA2E;QAC3E,yCAAyC;QACzC,KAAK,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,CACV,cAAc,CAAC;YACb,IAAI,EAAE,OAAO,EAAE;YACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,6CAA6C;YAC7C,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YACnB,KAAK;SACN,CAAC,CACH,CACF,CAAC;QACF,uEAAuE;QACvE,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,cAAc;IAChB,CAAC;SAAM,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;QACxD,4EAA4E;QAC5E,oEAAoE;QACpE,KAAK,OAAO,CAAC;YACX,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,EAAE;YACf,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAClC,2EAA2E;YAC3E,4EAA4E;YAC5E,yEAAyE;YACzE,2EAA2E;YAC3E,kEAAkE;YAClE,EAAE;YACF,2EAA2E;YAC3E,2EAA2E;YAC3E,yEAAyE;YACzE,kCAAkC;YAClC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;YAC7B,SAAS;YACT,iEAAiE;YACjE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE;YACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAClC,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAuB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,MAAM,EAAa,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,CAAC;AAGlB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,GAAsB,EAAE,IAAuB;IAC5E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB;IACxB,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,IAAI,eAAe,EAAE,EAAE,CAAC;IACtB,iBAAiB,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC9B,wHAAwH;QACxH,iHAAiH;QACjH,EAAE;QACF,4GAA4G;QAC5G,4BAA4B;QAC5B,EAAE;QACF,wHAAwH;QACxH,wHAAwH;QACxH,6GAA6G;QAC7G,KAAK,MAAM,CAAC,wBAAwB,CAAC;aAClC,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;aACnH,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QACtC,iHAAiH;QACjH,2GAA2G;QAC3G,EAAE;QACF,uHAAuH;QACvH,2HAA2H;QAC3H,gFAAgF;QAChF,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;aAC/D,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CACpC,OAAO,CAAC,IAAI,CACV,cAAc,CAAC;YACb,IAAI,EAAE,OAAO,EAAE;YACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,6CAA6C;YAC7C,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YACnB,KAAK;SACN,CAAC,CACH,CACF;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,iBAAiB,EAAE,CAAC;QACzC,4IAA4I;QAC5I,yIAAyI;QACzI,8GAA8G;QAC9G,KAAK,MAAM,CAAC,6BAA6B,CAAC;aACvC,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;aAC9E,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAClC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;QACxD,0HAA0H;QAC1H,sBAAsB;QACtB,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;aAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,CAC1C,OAAO,CAAC;YACN,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,EAAE;YACf,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAClC,kHAAkH;YAClH,oHAAoH;YACpH,oHAAoH;YACpH,iBAAiB;YACjB,EAAE;YACF,kHAAkH;YAClH,iFAAiF;YACjF,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;YAC7B,SAAS;YACT,iEAAiE;YACjE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;SAChC,CAAC,CACH;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/paths.d.ts

@@ -205,6 +205,24 @@ export declare function targetsDir(home: string): string;
 export declare function sessionsRoot(home: string): string;
 /** One session's target record: scan cursors, resolved roots, targets, undecided names. Not a `.json` (see `targetsDir`). */
 export declare function sessionTargetsPath(home: string, sessionId: string): string;
+/**
+ * U3 — a session's FIRING LOG: one line per hook that ended a turn, appended by the hook and replayed by the upload worker
+ * (`firing.ts`). Beside the session's target record, never under a repo digest: a firing belongs to the SESSION, and the repos it
+ * touches are named inside the line. `.firings.jsonl` is not `.json`, for the reason the whole directory is (`targetsDir`).
+ */
+export declare function sessionFiringsPath(home: string, sessionId: string): string;
+/** U3 — the worker's progress through `sessionFiringsPath`, written only under the session's writer lock. */
+export declare function sessionFiringsCursorPath(home: string, sessionId: string): string;
+/** U5 — the machine-wide upload worker's lock for ONE identity (`identity.ts`). Beside the session records; neither a `.targets` nor a `.json`; the status file is `.status` for the same reason. */
+export declare function uploaderLockPath(home: string, identity: string): string;
+/** U5 — what the worker reports about itself, for `status` and the hook's notices: counts and classes, never a body, a path or a credential. */
+export declare function uploaderStatusPath(home: string, identity: string): string;
+/**
+ * U3 — `<repo digest>/<session>.live`: the HOOK-only liveness stamp (`firing.ts`). Beside the session's state file, with an extension
+ * that is neither `.json` nor `.jsonl`, so no scan of state files (`lastSendForRepo`, `stuckForRepo`) takes it for a session.
+ * Null on no repo, for the reason `sessionStatePath` is.
+ */
+export declare function sessionLivePath(home: string, key: SessionKey): string | null;
 /** Which work tree a state digest names — written by `spool.ts` when a commit is spooled. Null for no repo key. */
 export declare function repoKeyNotePath(home: string, repoKey: string): string | null;
 /** The digest a work tree's state directory is named by (`repoSessionsDir`). Exposed for the spool-evidence reader. */