balladeer 1.0.11 → 1.0.13

package/dist/cli.js

@@ -19,6 +19,7 @@ import { runStatus } from "./commands/status.js";
 import { runTouchMap } from "./commands/touch-map.js";
 import { runWhoami } from "./commands/whoami.js";
 import { runInstall } from "./install.js";
+import { openInBrowser } from "./open-browser.js";
 import { PUBLISHED_SPECIFIER } from "./release.js";
 import { installUserScope, runningFromCheckout, userHome, } from "./user-scope.js";
 import { updateNotice } from "./currency.js";
@@ -533,10 +534,12 @@ async function dispatch(parsed, write) {
                 wait: parsed.wait,
                 // A person is here when both ends of the terminal are a TTY; an agent
                 // shell has neither and keeps the print-and-return behaviour.
-                interactive: !parsed.noOpen &&
-                    !parsed.json &&
-                    process.stdout.isTTY === true &&
-                    process.stdin.isTTY === true,
+                // A person at the terminal waits ten minutes; an agent's shell, whose
+                // tool may cut the command at two, waits ninety seconds. Both open the
+                // page, because both run on the person's laptop; --no-open and --json
+                // print the link only.
+                interactive: process.stdout.isTTY === true && process.stdin.isTTY === true,
+                ...(parsed.noOpen ? {} : { openLink: openInBrowser }),
                 refresh: parsed.refresh,
                 chooseWorkspace: parsed.chooseWorkspace,
                 ...(parsed.client === undefined ? {} : { client: parsed.client }),

package/dist/commands/setup.d.ts

@@ -9,8 +9,9 @@ export type SetupOptions = Readonly<{
      * link and return. Robert, 22 September 2026.
      */
     interactive?: boolean;
-    /** Opens a page for the person; injected so tests never reach a browser. */
-    openLink?: (url: string) => boolean;
+    /** Opens a page for the person; injected so tests never reach a browser.
+     * `null` is `--no-open`. */
+    openLink?: ((url: string) => boolean) | null;
     repo?: string;
     createWorkspace?: string;
     client?: "codex" | "claude";

package/dist/commands/setup.js

@@ -12,7 +12,6 @@ import { MCP_CONFIG_FILE, currentEntry, entryRepositoryId, isOurEntry, mergeMcpC
 import { DESKTOP_CONFIG_FILE, desktopConfigLocation, desktopServerKey, desktopStdioEntry, mergeDesktopConfig, } from "../desktop-config.js";
 import { selectAgent } from "../agent.js";
 import { installGuidanceLoader } from "../guidance-install.js";
-import { openInBrowser } from "../open-browser.js";
 import { describeEarlier, describeRemoval, findEarlier, removeEarlier } from "../remove-earlier.js";
 import { userHome } from "../user-scope.js";
 import { formatInstant } from "../local-time.js";
@@ -22,8 +21,9 @@ import { StoreError, assertStoreWritable, credentialsPath, dropPendingPairing, f
 import { CLI_VERSION, DELEGATED_SCOPES, } from "../wire.js";
 import { explainText } from "./explain.js";
 import { probeAgentConnection } from "./mcp.js";
-const REFUSAL_SENTENCE = "It may not agree to what a promise means, agree a change to what a promise means, grant an exception, transfer ownership, supersede, retire, or offboard anything.";
+const REFUSAL_SENTENCE = "It may not agree to what a promise means, agree a change to what a promise means, transfer ownership, supersede, retire, or offboard anything.";
 const MAX_WAIT_MS = 10 * 60 * 1000;
+const AGENT_WAIT_MS = 90 * 1000;
 /** The bound the control plane's own name check holds, refused here so a name
  * nobody could create never costs a pairing code. */
 export const CREATE_WORKSPACE_MAX_LENGTH = 120;
@@ -152,8 +152,8 @@ function pendingLines(pending, repository, host, waiting, approvalUri, opened) {
     return [
         ...opening,
         opened
-            ? `  Opened in your browser: ${approvalUri}  (if no page appeared, open that link yourself)`
-            : `  Open: ${approvalUri}`,
+            ? `  FOR THE PERSON AT THIS LAPTOP: a browser tab has opened at ${approvalUri}. Click Approve there. If no tab appeared, open that link yourself.`
+            : `  FOR THE PERSON AT THIS LAPTOP: open ${approvalUri} in your browser and click Approve.`,
         `  The page will show this code: ${pending.userCode}`,
         // A person who belongs to two workspaces approves into whichever one their
         // browser is signed into, and twice that was not the one they meant: the
@@ -164,7 +164,7 @@ function pendingLines(pending, repository, host, waiting, approvalUri, opened) {
         `  Sent to Balladeer so far: a random code, the name "${repository}", and the hostname "${host}". Nothing else.`,
         `  This pairing expires at ${formatInstant(pending.expiresAt)}.`,
         opened
-            ? "  Approve in the browser; this command waits here and finishes on its own."
+            ? "  This command waits here for the approval and finishes on its own; if it returns first, run it again to finish."
             : "  Approve in the browser, then run this command again to finish.",
         "",
         // Printed on the pairing step and nowhere else, because this is the one
@@ -296,11 +296,23 @@ export async function runSetup(options) {
     say(options, `Balladeer setup, version ${CLI_VERSION}.\n`);
     say(options, `Agent client: ${options.client === "codex" ? "Codex" : "Claude"}. Use --client codex or --client claude to choose.`);
     emit(options, { step: "explain", version: CLI_VERSION });
-    say(options, explainText(controlPlane));
     const chosen = chooseRepositories(namedRepositories(options), options.cwd);
     if (chosen.kind === "mismatch") {
         return fail(options, "repository_mismatch", chosen.message, 4);
     }
+    // Where this run is, said before anything else. People paste this command
+    // into an agent whose shell may be in no repository at all; the run still
+    // pairs the laptop, and the first line says what it will and will not do.
+    const inCheckout = repositoryHint(options.cwd) !== "unknown/unknown";
+    if (!inCheckout && (options.repositories ?? []).length === 0)
+        say(options, "This folder isn't a repository checkout. This run pairs this laptop and installs Balladeer for every session; to connect a repository, run this same command inside a checkout of it afterwards.");
+    // The boundary explanation is for a person reading a terminal. An agent
+    // shell gets one line and `balladeer explain`, so the approval link is the
+    // first actionable thing it sees and relays.
+    if (options.interactive === true)
+        say(options, explainText(controlPlane));
+    else
+        say(options, "What Balladeer can and cannot see, and what this run does: `balladeer explain`.");
     // Before the pairing is started, not after: a name the control plane would
     // refuse must cost nobody a code they then have to abandon, and this run has
     // sent nothing yet.
@@ -596,15 +608,26 @@ function terminalRefusal(pending, code) {
  * if none did.
  */
 export function openForPerson(options, url) {
-    if (options.interactive !== true || options.json)
+    // An agent's shell is still on the person's laptop, so the page can open
+    // there too; only --json and --no-open keep it closed.
+    // Only an opener the entry point handed over is used: a test, or any
+    // caller that passed none, never reaches a browser and never waits.
+    if (options.json || !options.openLink)
         return false;
-    return (options.openLink ?? openInBrowser)(url);
+    return options.openLink(url);
+}
+/** How long a run waits for the click: a person at a terminal has ten
+ * minutes; an agent's shell, whose tool may cut the command at two, gets
+ * ninety seconds and the pairing is saved either way. */
+function waitBudgetMs(options) {
+    return options.interactive === true ? MAX_WAIT_MS : AGENT_WAIT_MS;
 }
 async function waitForApproval(options, credentials, pending, pollIntervalSeconds) {
     const sleep = options.sleep ?? ((ms) => new Promise((done) => setTimeout(done, ms)));
     const now = options.now ?? (() => new Date());
-    const deadline = now().getTime() + MAX_WAIT_MS;
-    say(options, `  Waiting up to ${MAX_WAIT_MS / 60_000} minutes for someone to approve ${pending.userCode} at ${approvalLink(options, pending.verificationUri)}. Press Ctrl+C to stop; the pairing is saved either way, and the code stays approvable until ${formatInstant(pending.expiresAt)}.`);
+    const budget = waitBudgetMs(options);
+    const deadline = now().getTime() + budget;
+    say(options, `  Waiting up to ${budget >= 60_000 ? `${budget / 60_000} minutes` : `${budget / 1000} seconds`} for someone to approve ${pending.userCode} at ${approvalLink(options, pending.verificationUri)}. Press Ctrl+C to stop; the pairing is saved either way, and the code stays approvable until ${formatInstant(pending.expiresAt)}.`);
     let interval = pollIntervalSeconds;
     while (now().getTime() < deadline) {
         await sleep(Math.max(interval, 2) * 1000);
@@ -635,6 +658,15 @@ function refusalSentence(error) {
     return error instanceof Error ? error.message : String(error);
 }
 async function runRemainingSteps(options, credentials, session) {
+    // Said to a JSON reader here, after the pairing object, so the step order
+    // every caller relies on is unchanged; a person read it as the first line.
+    if (repositoryHint(options.cwd) === "unknown/unknown" &&
+        (options.repositories ?? []).length === 0)
+        emit(options, {
+            step: "warning",
+            code: "not_in_checkout",
+            message: "This folder isn't a repository checkout; this run paired the laptop and installed Balladeer for every session, and connects no repository.",
+        });
     let state;
     try {
         state = await request(options.controlPlane, {

package/dist/guidance-hook.mjs

@@ -2027,7 +2027,7 @@ var require_toml = __commonJS({
 });
 
 // src/wire.ts
-var CLI_VERSION = "1.0.11";
+var CLI_VERSION = "1.0.13";
 var CLIENT_HEADER = "x-balladeer-client";
 var CLIENT_HEADER_VALUE = `balladeer/${CLI_VERSION}`;
 var DEFAULT_CONTROL_PLANE = "https://envelopes.balladeer.ai";

package/dist/open-browser.d.ts

@@ -10,4 +10,4 @@ import { spawn } from "node:child_process";
  * link staying on screen, never by this command hanging. Nothing here reads
  * the page or learns what happened in it.
  */
-export declare function openInBrowser(url: string, platform?: NodeJS.Platform, run?: typeof spawn): boolean;
+export declare function openInBrowser(url: string, platform?: NodeJS.Platform, run?: typeof spawn, environment?: NodeJS.ProcessEnv): boolean;

package/dist/open-browser.js

@@ -10,9 +10,14 @@ import { spawn } from "node:child_process";
  * link staying on screen, never by this command hanging. Nothing here reads
  * the page or learns what happened in it.
  */
-export function openInBrowser(url, platform = process.platform, run = spawn) {
+export function openInBrowser(url, platform = process.platform, run = spawn, environment = process.env) {
     if (!/^https:\/\//.test(url))
         return false;
+    // A Linux box with no display (a CI runner, a server over SSH) has nowhere
+    // to open a page, and saying it opened one would make the run wait for a
+    // click that cannot come.
+    if (platform === "linux" && !environment.DISPLAY && !environment.WAYLAND_DISPLAY)
+        return false;
     const [command, args] = platform === "darwin"
         ? ["open", [url]]
         : platform === "win32"

package/dist/remove-earlier.js

@@ -94,8 +94,15 @@ function claudeConnector(home, controlPlane, now) {
         },
     ];
 }
+// This product's own hook runs `guidance --hook claude|codex --event ...`,
+// whether by npx, by a checkout path, or by the installed command's absolute
+// path (1.0.11 and later). The July client's hook ran nothing of the kind, so
+// that shape is the line: a hook that names it is ours and is never "earlier".
+// Found on 22 September 2026: the installed-path form was being removed as
+// the older client on every setup run, leaving the laptop with no hook.
 const isEarlierHook = (command) => typeof command === "string" &&
     /balladeer/i.test(command) &&
+    !/\bguidance --hook (?:claude|codex)\b/.test(command) &&
     !/balladeer@(?:latest|\d+\.\d+\.\d+)\b/.test(command) &&
     !/\bpackages[/\\]cli[/\\]dist[/\\]cli\.js\b/.test(command);
 function claudeSettings(home, now) {

package/dist/user-scope.d.ts

@@ -15,6 +15,8 @@
  * shape, never by trust in the name.
  */
 export declare const USER_SCOPE_OWNER = "Balladeer current guidance (user scope, loader 1)";
+/** Every tool of the server named `balladeer`, in Claude Code's permission rule form. */
+export declare const USER_SCOPE_ALLOW_RULE = "mcp__balladeer__*";
 export type UserScopeHost = "claude" | "codex";
 export type UserScopeWrite = Readonly<{
     host: UserScopeHost;

package/dist/user-scope.js

@@ -22,6 +22,8 @@ import { writeJsonAtomically } from "./mcp-config.js";
  */
 export const USER_SCOPE_OWNER = "Balladeer current guidance (user scope, loader 1)";
 const CLAUDE_EVENTS = ["SessionStart", "UserPromptSubmit", "SubagentStart"];
+/** Every tool of the server named `balladeer`, in Claude Code's permission rule form. */
+export const USER_SCOPE_ALLOW_RULE = "mcp__balladeer__*";
 /**
  * The command a host runs to reach Balladeer, with no repository named: the
  * directory decides.
@@ -43,10 +45,22 @@ export function userScopeCommand(published, installed) {
 function ordinaryFile(path) {
     return !existsSync(path) || (lstatSync(path).isFile() && !lstatSync(path).isSymbolicLink());
 }
+/** The home the entries go under has to exist; a home that does not is a
+ * refusal in a sentence, never a stack trace. */
+function homeExists(home) {
+    try {
+        return lstatSync(home).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
 /** `~/.claude.json` carries the user-scope MCP list under `mcpServers`. */
 export function mergeClaudeUserMcp(home, published, installed) {
     const path = join(home, ".claude.json");
     const host = "claude";
+    if (!homeExists(home))
+        return { host, path, status: "refused", reason: "home directory missing" };
     if (!ordinaryFile(path))
         return { host, path, status: "refused", reason: "not an ordinary file" };
     let root = {};
@@ -96,8 +110,15 @@ export function isOurUserEntry(entry) {
             args[0] === "-y" &&
             /^balladeer@(?:latest|1|\d+\.\d+\.\d+)$/.test(args[1]) &&
             args[2] === "mcp");
+    // A checkout of this repository at any path: the entry setup writes when it
+    // runs from source, on this laptop or another. Ours to replace, never to
+    // refuse; refusing it once left a developer's laptop with no entry at all.
     if (record.command === "node" || String(record.command).endsWith("/node"))
-        return args.length === 2 && args[0] === checkoutEntryPath() && args[1] === "mcp";
+        return (args.length === 2 &&
+            typeof args[0] === "string" &&
+            isAbsolute(args[0]) &&
+            /[\\/]packages[\\/]cli[\\/]dist[\\/]cli\.js$/.test(args[0]) &&
+            args[1] === "mcp");
     // The durable command by absolute path: ours when it sits where this
     // product's installer puts it and is asked for `mcp` alone. The July client
     // also registered an absolute `balladeer mcp`, from its own home, so the
@@ -127,6 +148,8 @@ export function isInstalledCommandPath(command) {
 export function mergeClaudeUserHooks(home, published, installed) {
     const path = join(home, ".claude", "settings.json");
     const host = "claude";
+    if (!homeExists(home))
+        return { host, path, status: "refused", reason: "home directory missing" };
     if (!ordinaryFile(path))
         return { host, path, status: "refused", reason: "not an ordinary file" };
     let root = {};
@@ -171,6 +194,24 @@ export function mergeClaudeUserHooks(home, published, installed) {
         hooks[event] = [...rows.filter((row) => !own.includes(row)), expected];
         changed = true;
     }
+    // Claude Code asks the person before every call to a server's tools unless
+    // a rule allows them. Without one, each read the guidance asks for costs a
+    // click, and a session that says no once hears no offer at all (measured
+    // 23 September 2026). The rule names this server's tools and nothing else;
+    // a deny rule the person wrote for them is theirs and is left to win.
+    const permissions = root.permissions && typeof root.permissions === "object" && !Array.isArray(root.permissions)
+        ? { ...root.permissions }
+        : {};
+    const allow = permissions.allow === undefined ? [] : permissions.allow;
+    if (!Array.isArray(allow))
+        return { host, path, status: "refused", reason: "permissions.allow is not a list" };
+    const deny = Array.isArray(permissions.deny) ? permissions.deny : [];
+    const denied = deny.some((rule) => typeof rule === "string" && /^mcp__balladeer(__|$)/.test(rule));
+    if (!denied && !allow.some((rule) => rule === USER_SCOPE_ALLOW_RULE)) {
+        permissions.allow = [...allow, USER_SCOPE_ALLOW_RULE];
+        root.permissions = permissions;
+        changed = true;
+    }
     if (!changed)
         return { host, path, status: "current" };
     root.hooks = hooks;

package/dist/wire.d.ts

@@ -5,10 +5,10 @@
  * runtime dependency at all: Node 22 builtins and global fetch, nothing else.
  * A contract test compares the scope list below against the server's.
  */
-export declare const CLI_VERSION = "1.0.11";
+export declare const CLI_VERSION = "1.0.13";
 export declare const CLI_INVOCATION = "npx -y balladeer@latest";
 export declare const CLIENT_HEADER = "x-balladeer-client";
-export declare const CLIENT_HEADER_VALUE = "balladeer/1.0.11";
+export declare const CLIENT_HEADER_VALUE = "balladeer/1.0.13";
 export declare const DEFAULT_CONTROL_PLANE = "https://envelopes.balladeer.ai";
 export type DelegatedScope = "repository:enroll" | "agent:issue" | "ci:connect" | "workspace:invite" | "candidate:propose";
 export declare const DELEGATED_SCOPES: readonly DelegatedScope[];
@@ -345,7 +345,7 @@ export type JsonStep = Readonly<{
     reason?: string;
 }> | Readonly<{
     step: "warning";
-    code: "enforcement_unavailable";
+    code: "enforcement_unavailable" | "not_in_checkout";
     message: string;
 }> | Readonly<{
     step: "promise";

package/dist/wire.js

@@ -5,7 +5,7 @@
  * runtime dependency at all: Node 22 builtins and global fetch, nothing else.
  * A contract test compares the scope list below against the server's.
  */
-export const CLI_VERSION = "1.0.11";
+export const CLI_VERSION = "1.0.13";
 export const CLI_INVOCATION = "npx -y balladeer@latest";
 export const CLIENT_HEADER = "x-balladeer-client";
 export const CLIENT_HEADER_VALUE = `balladeer/${CLI_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "balladeer",
-  "version": "1.0.11",
+  "version": "1.0.13",
   "description": "Set up Balladeer from your terminal, or from a coding agent's.",
   "license": "Apache-2.0",
   "private": false,

package/dist/legacy.d.ts

@@ -1,41 +0,0 @@
-/**
- * The earlier Balladeer, still installed, found before this one writes anything.
- *
- * A team that used the July client has a program on their machine that this one
- * knows nothing about: it updates itself from its own server rather than from
- * npm, it registers an MCP server named `balladeer` for the whole machine, and
- * it installs a session hook and a conventions block of its own. This product
- * registers an MCP server under the same name, per repository. Nothing breaks
- * loudly when both are present, which is the problem: the older session hook
- * keeps firing inside the repository somebody enrolled today, one file ends up
- * carrying two conventions blocks, and the person reads the result as this
- * product misbehaving.
- *
- * The older client can take itself off, reversibly, with `balladeer uninstall`
- * followed by the removal command it prints. So this is a warning that stops
- * rather than a refusal that stands: the sentence names the one thing to do,
- * and `--force` is there for whoever has decided to run both anyway.
- */
-export type LegacyInstall = Readonly<{
-    /** Which file said so, in the form a person can go and open. */
-    where: string;
-    /** What was found there, bounded, so a config file cannot become an essay. */
-    detail: string;
-}>;
-/**
- * The instruction, in the same words `docs/didero-day-one.md` and
- * `docs/didero-mcp-walkthrough.md` print. A person who hits this in the terminal
- * and a person who read the document ahead of time are told to do the same
- * thing, by the same sentence.
- */
-export declare const UNINSTALL_INSTRUCTION = "If you used the earlier Balladeer on this machine: run `balladeer uninstall`, then the removal command it prints, then continue.";
-/**
- * The older install this machine still carries, or nothing.
- *
- * Two places, because those are the two the older client owns that reach into a
- * session in a repository enrolled today: the machine-wide MCP entry under our
- * own name, and the hook that fires at session start.
- */
-export declare function findLegacyInstall(environment: NodeJS.ProcessEnv, controlPlane: string): LegacyInstall | undefined;
-/** What the person reads, whichever of the two files said so. */
-export declare function legacyMessage(found: LegacyInstall): string;

package/dist/legacy.js

@@ -1,143 +0,0 @@
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import { isOurEntry } from "./mcp-config.js";
-/**
- * The instruction, in the same words `docs/didero-day-one.md` and
- * `docs/didero-mcp-walkthrough.md` print. A person who hits this in the terminal
- * and a person who read the document ahead of time are told to do the same
- * thing, by the same sentence.
- */
-export const UNINSTALL_INSTRUCTION = "If you used the earlier Balladeer on this machine: run `balladeer uninstall`, then the removal command it prints, then continue.";
-/** How much of a foreign command line is worth printing back. */
-const DETAIL_LIMIT = 120;
-/**
- * Where the agent host keeps its configuration, read from the environment this
- * command was handed and never from the ambient process.
- *
- * Every command in this package takes its configuration as a parameter, which is
- * what lets a test plant a whole home directory. When the environment names no
- * home there is nothing to read, and a check that cannot read cannot warn: it
- * stays silent rather than guessing at a path.
- */
-function agentHome(environment) {
-    const home = environment.HOME?.trim() || environment.USERPROFILE?.trim() || "";
-    return home.length > 0 ? home : undefined;
-}
-function readJson(path) {
-    try {
-        return JSON.parse(readFileSync(path, "utf8"));
-    }
-    catch {
-        // Absent, unreadable, or somebody's hand-edited file mid-save. None of those
-        // is evidence of an older install, and none of them is this command's to fix.
-        return undefined;
-    }
-}
-function bounded(text) {
-    const flattened = text.replace(/\s+/g, " ").trim();
-    return flattened.length > DETAIL_LIMIT ? `${flattened.slice(0, DETAIL_LIMIT)}...` : flattened;
-}
-/** The command line an MCP entry runs, in the shape a person would recognise. */
-function describeEntry(entry) {
-    const record = entry;
-    if (record !== null && typeof record?.url === "string")
-        return bounded(record.url);
-    const command = typeof record?.command === "string" ? record.command : "";
-    const args = Array.isArray(record?.args)
-        ? record.args.filter((value) => typeof value === "string")
-        : [];
-    const line = [command, ...args].join(" ").trim();
-    return line.length > 0 ? bounded(line) : "a command this copy does not recognise";
-}
-/**
- * Whether a hook's command line is one of ours.
- *
- * This product installs no agent-host hook at all, so in practice every hook
- * naming `balladeer` belongs to the older client. The exception is written down
- * anyway: a team that wired one of our own published or checkout invocations
- * into a hook of their own must not be told their own line is somebody else's
- * program.
- */
-function isOurCommandLine(command) {
-    if (/balladeer@(?:latest|\d+\.\d+\.\d+)\b/.test(command))
-        return true;
-    return /\bnode\b[^\n]*\bpackages[/\\]cli[/\\]dist[/\\]cli\.js\b/.test(command);
-}
-/** Every `command` string anywhere under an agent host's `hooks` setting. */
-function hookCommands(value, found = []) {
-    if (Array.isArray(value)) {
-        for (const item of value)
-            hookCommands(item, found);
-        return found;
-    }
-    if (value === null || typeof value !== "object")
-        return found;
-    for (const [key, child] of Object.entries(value)) {
-        if (key === "command" && typeof child === "string")
-            found.push(child);
-        else
-            hookCommands(child, found);
-    }
-    return found;
-}
-/**
- * The older Balladeer's own MCP entry, if the agent host still carries one.
- *
- * Only the machine-wide block counts. This product writes its entry into the
- * repository's `.mcp.json`, and a host that also records a per-project entry
- * under `projects` records ours there: reading those as foreign would stop
- * setup on the very install it just performed. Under the machine-wide key, an
- * entry named `balladeer` that is not one of our recognised shapes is the older
- * client, because nothing else has reason to claim that name.
- */
-function legacyMcpEntry(home, controlPlane) {
-    const parsed = readJson(join(home, ".claude.json"));
-    const servers = parsed?.mcpServers;
-    if (servers === null || typeof servers !== "object")
-        return undefined;
-    const entry = servers.balladeer;
-    if (entry === undefined || entry === null)
-        return undefined;
-    if (isOurEntry(entry, controlPlane))
-        return undefined;
-    return {
-        where: join(home, ".claude.json"),
-        detail: `an MCP server named balladeer, registered for the whole machine, running ${describeEntry(entry)}`,
-    };
-}
-/** The older Balladeer's session hook, if the agent host still runs one. */
-function legacyHook(home) {
-    const parsed = readJson(join(home, ".claude", "settings.json"));
-    const hooks = parsed?.hooks;
-    if (hooks === undefined)
-        return undefined;
-    const command = hookCommands(hooks).find((line) => /balladeer/i.test(line) && !isOurCommandLine(line));
-    if (command === undefined)
-        return undefined;
-    return {
-        where: join(home, ".claude", "settings.json"),
-        detail: `a hook that runs ${bounded(command)}`,
-    };
-}
-/**
- * The older install this machine still carries, or nothing.
- *
- * Two places, because those are the two the older client owns that reach into a
- * session in a repository enrolled today: the machine-wide MCP entry under our
- * own name, and the hook that fires at session start.
- */
-export function findLegacyInstall(environment, controlPlane) {
-    const home = agentHome(environment);
-    if (home === undefined)
-        return undefined;
-    return legacyMcpEntry(home, controlPlane) ?? legacyHook(home);
-}
-/** What the person reads, whichever of the two files said so. */
-export function legacyMessage(found) {
-    return [
-        `An earlier Balladeer is still installed on this machine: ${found.where} carries ${found.detail}.`,
-        "Both products register an MCP server named balladeer and the earlier one keeps firing its own session hook, so leaving it in place puts two Balladeers in the sessions you open in this repository.",
-        UNINSTALL_INSTRUCTION,
-        "Nothing was changed. Run this command again with --force to set up anyway.",
-    ].join("\n");
-}

package/dist/quiet.d.ts

@@ -1,25 +0,0 @@
-/**
- * Where a person said "not here".
- *
- * With Balladeer registered once per laptop, every session in every folder
- * asks whether this folder is tracked. In one that is not, the hook says so
- * once and names the command that would track it; a person who does not want
- * to hear that again in a scratch clone silences the folder, and one who does
- * not want it for a whole product silences the remote. The default is the
- * folder, because "not here" usually means this checkout and not the repository.
- */
-export type QuietList = Readonly<{
-    schemaVersion: 1;
-    folders: string[];
-    remotes: string[];
-}>;
-export declare function quietPath(environment?: NodeJS.ProcessEnv): string;
-export declare function readQuiet(environment?: NodeJS.ProcessEnv): QuietList;
-/** The folder a session is in, as git names it, so a worktree and a clone are
- * each their own folder while the remote stays one thing. */
-export declare function folderKey(cwd: string): string;
-export declare function isQuiet(cwd: string, environment?: NodeJS.ProcessEnv): boolean;
-export declare function setQuiet(cwd: string, scope: "folder" | "repo", quiet: boolean, environment?: NodeJS.ProcessEnv): {
-    key: string;
-    changed: boolean;
-};

package/dist/quiet.js

@@ -1,73 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync, realpathSync } from "node:fs";
-import { join } from "node:path";
-import { writeJsonAtomically } from "./mcp-config.js";
-import { repositoryHint } from "./repository.js";
-import { configHome } from "./store.js";
-const EMPTY = { schemaVersion: 1, folders: [], remotes: [] };
-export function quietPath(environment = process.env) {
-    return join(configHome(environment), "quiet.json");
-}
-export function readQuiet(environment = process.env) {
-    const path = quietPath(environment);
-    if (!existsSync(path))
-        return EMPTY;
-    try {
-        const parsed = JSON.parse(readFileSync(path, "utf8"));
-        if (parsed.schemaVersion !== 1)
-            return EMPTY;
-        return {
-            schemaVersion: 1,
-            folders: Array.isArray(parsed.folders) ? parsed.folders.filter(isString) : [],
-            remotes: Array.isArray(parsed.remotes) ? parsed.remotes.filter(isString) : [],
-        };
-    }
-    catch {
-        return EMPTY;
-    }
-}
-const isString = (value) => typeof value === "string";
-function writeQuiet(list, environment) {
-    mkdirSync(configHome(environment), { recursive: true, mode: 0o700 });
-    writeJsonAtomically(quietPath(environment), JSON.stringify(list, null, 2) + "\n");
-}
-/** The folder a session is in, as git names it, so a worktree and a clone are
- * each their own folder while the remote stays one thing. */
-export function folderKey(cwd) {
-    try {
-        return realpathSync(execFileSync("git", ["-C", cwd, "rev-parse", "--show-toplevel"], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-            timeout: 1000,
-        }).trim());
-    }
-    catch {
-        return realpathSync(cwd);
-    }
-}
-export function isQuiet(cwd, environment = process.env) {
-    const list = readQuiet(environment);
-    const folder = folderKey(cwd);
-    const remote = repositoryHint(cwd);
-    return (list.folders.includes(folder) ||
-        (remote !== "unknown/unknown" &&
-            list.remotes.some((r) => r.toLowerCase() === remote.toLowerCase())));
-}
-export function setQuiet(cwd, scope, quiet, environment = process.env) {
-    const list = readQuiet(environment);
-    const key = scope === "folder" ? folderKey(cwd) : repositoryHint(cwd);
-    if (scope === "repo" && key === "unknown/unknown")
-        throw new Error("This folder has no GitHub origin remote, so there is no repository to name.");
-    const field = scope === "folder" ? "folders" : "remotes";
-    const has = list[field].some((x) => x.toLowerCase() === key.toLowerCase());
-    if (has === quiet)
-        return { key, changed: false };
-    const next = {
-        ...list,
-        [field]: quiet
-            ? [...list[field], key]
-            : list[field].filter((x) => x.toLowerCase() !== key.toLowerCase()),
-    };
-    writeQuiet(next, environment);
-    return { key, changed: true };
-}