finitemonkey 0.1.0-next.14 → 0.1.0-next.16

package/dist/finitemonkey.mjs

@@ -40,8 +40,8 @@ var parseJsonObject = (text6) => {
   if (!parsed.ok) return parsed;
   return isRecord(parsed.value) ? accept(parsed.value) : reject("expected a JSON object");
 };
-var optionalString = (record2, key) => {
-  const value = record2[key];
+var optionalString = (record3, key) => {
+  const value = record3[key];
   return typeof value === "string" ? value : void 0;
 };
 
@@ -544,11 +544,11 @@ var parseEntries = (value) => {
   const entries = value.map(parseEntry);
   return entries.every((entry2) => entry2 !== void 0) ? entries : void 0;
 };
-var fromRecord = (record2) => {
-  const { schema, version, preset, installedAt, updatedAt } = record2;
+var fromRecord = (record3) => {
+  const { schema, version, preset, installedAt, updatedAt } = record3;
   const known2 = PRESETS.find((item) => item === preset);
-  const entries = parseEntries(record2["entries"]);
-  const createdDirs = strings(record2["createdDirs"]);
+  const entries = parseEntries(record3["entries"]);
+  const createdDirs = strings(record3["createdDirs"]);
   if (schema !== LOCK_SCHEMA) return reject(`schema is not ${LOCK_SCHEMA}`);
   if (typeof version !== "string" || typeof installedAt !== "string" || typeof updatedAt !== "string") {
     return reject("version, installedAt and updatedAt must be text");
@@ -565,6 +565,134 @@ var parseLock = (text6) => {
 var renderLock = (lock) => `${JSON.stringify(lock, null, 2)}
 `;
 
+// src/policy/policy.ts
+import { join as join3 } from "node:path";
+
+// src/git/project-config.ts
+import { join as join2 } from "node:path";
+var CONFIG_FILE2 = ".finitemonkey/config.yml";
+var unquote = (value) => value.trim().replace(/^(["'])(.*)\1$/s, "$2");
+var stripComment = (line2) => {
+  let quote;
+  for (let index = 0; index < line2.length; index += 1) {
+    const char = line2.charAt(index);
+    if (quote === void 0 && (char === '"' || char === "'")) quote = char;
+    else if (char === quote) quote = void 0;
+    else if (quote === void 0 && char === "#" && (index === 0 || /\s/.test(line2.charAt(index - 1)))) {
+      return line2.slice(0, index);
+    }
+  }
+  return line2;
+};
+var flowList = (value) => {
+  const trimmed = value.trim();
+  if (!trimmed.startsWith("[") || !trimmed.endsWith("]")) return void 0;
+  return trimmed.slice(1, -1).split(",").map(unquote).filter((item) => item !== "");
+};
+var keyValue = (body2) => {
+  const match = /^("[^"]*"|'[^']*'|[^:]+?)\s*:(?:\s+(.*))?$/.exec(body2);
+  if (match === null) return void 0;
+  return { key: unquote(match[1] ?? ""), value: match[2] ?? "" };
+};
+var addItem = (frame, item) => {
+  if (frame.key === void 0) return;
+  const parent = frame.tree[frame.key];
+  if (Array.isArray(parent)) parent.push(item);
+  else frame.tree[frame.key] = [item];
+};
+var placeLine = (stack, indent, body2) => {
+  while (stack.length > 1 && (stack[stack.length - 1]?.indent ?? 0) >= indent && !body2.startsWith("- ")) stack.pop();
+  const top = stack[stack.length - 1];
+  if (top === void 0) return;
+  if (body2.startsWith("- ")) {
+    addItem(top, unquote(body2.slice(2)));
+    return;
+  }
+  const pair = keyValue(body2);
+  if (pair === void 0) return;
+  const parentTree = top.key === void 0 ? top.tree : ensureTree(top.tree, top.key);
+  if (pair.value === "") {
+    stack.push({ indent, tree: parentTree, key: pair.key });
+    return;
+  }
+  parentTree[pair.key] = flowList(pair.value) ?? unquote(pair.value);
+};
+var ensureTree = (tree, key) => {
+  const existing = tree[key];
+  if (existing !== void 0 && typeof existing !== "string" && !Array.isArray(existing)) return existing;
+  const fresh3 = {};
+  tree[key] = fresh3;
+  return fresh3;
+};
+var parseConfigYaml = (text6) => {
+  const root = {};
+  const stack = [{ indent: -1, tree: root, key: void 0 }];
+  for (const raw of text6.split(/\r?\n/)) {
+    const line2 = stripComment(raw).trimEnd();
+    if (line2.trim() === "" || line2.trim() === "---") continue;
+    const indent = line2.length - line2.trimStart().length;
+    placeLine(stack, indent, line2.trim());
+  }
+  return root;
+};
+var isTree = (node) => typeof node === "object" && !Array.isArray(node);
+var configAt = (tree, ...path) => path.reduce((node, key) => isTree(node) ? node[key] : void 0, tree);
+var configList = (tree, ...path) => {
+  const node = configAt(tree, ...path);
+  if (typeof node === "string") return node === "" ? [] : [node];
+  return Array.isArray(node) ? node.filter((item) => typeof item === "string") : [];
+};
+var configMap = (tree, ...path) => {
+  const node = configAt(tree, ...path);
+  if (!isTree(node)) return {};
+  return Object.fromEntries(
+    Object.entries(node).filter((entry2) => typeof entry2[1] === "string")
+  );
+};
+var loadProjectConfig = (runtime, root) => {
+  const text6 = runtime.readText(toAbsolutePath(join2(root, CONFIG_FILE2)));
+  return text6.ok ? parseConfigYaml(text6.value) : {};
+};
+
+// src/policy/policy.ts
+var POLICY_FILE = ".finitemonkey/policy.yml";
+var GUARD_MODES = ["off", "shadow", "active"];
+var LEVELS = ["light", "standard", "strict"];
+var SEVERITIES = ["low", "medium", "high"];
+var DEFAULT_PROMOTE_AFTER = 20;
+var OPTIONAL_GUARDS = ["prose"];
+var DEFAULT_POLICY = {
+  exists: false,
+  level: "standard",
+  severity: "medium",
+  promoteAfter: DEFAULT_PROMOTE_AFTER,
+  guards: {}
+};
+var pick = (options, value, fallback) => options.find((option) => option === value) ?? fallback;
+var parsePolicy = (text6) => {
+  const tree = parseConfigYaml(text6);
+  const raw = configAt(tree, "promoteAfter");
+  const promoteAfter = typeof raw === "string" ? Number.parseInt(raw, 10) : Number.NaN;
+  const guards = Object.fromEntries(
+    Object.entries(configMap(tree, "guards")).flatMap(([id, mode]) => {
+      const known2 = GUARD_MODES.find((option) => option === mode);
+      return known2 === void 0 ? [] : [[id, known2]];
+    })
+  );
+  return {
+    exists: true,
+    level: pick(LEVELS, configAt(tree, "level"), DEFAULT_POLICY.level),
+    severity: pick(SEVERITIES, configAt(tree, "severity"), DEFAULT_POLICY.severity),
+    promoteAfter: Number.isInteger(promoteAfter) && promoteAfter > 0 ? promoteAfter : DEFAULT_PROMOTE_AFTER,
+    guards
+  };
+};
+var policyPath = (root) => toAbsolutePath(join3(root, POLICY_FILE));
+var loadPolicy = (runtime, root) => {
+  const text6 = runtime.readText(policyPath(root));
+  return text6.ok ? parsePolicy(text6.value) : DEFAULT_POLICY;
+};
+
 // src/install/managed-block.ts
 var lineBreak = (text6) => text6.includes("\r\n") ? "\r\n" : "\n";
 var blockRange = (lines3, markers) => {
@@ -594,6 +722,11 @@ var withoutManagedBlock = (text6, markers) => {
 // src/install/templates/en.ts
 var en = {
   configHeader: "Finite Monkey project settings. Commit this file. `finitemonkey update` keeps your edits.",
+  policyHeader: [
+    "Guard policy for this project. Modes: off, shadow (record what it would block), active.",
+    "The guards for secrets, production, lost git work and false done stay active whatever this file says.",
+    "A guard missing from this list starts in shadow and is promoted after promoteAfter firings without a false positive."
+  ],
   agentsBlock: ({ gate, doctor }) => [
     "## Finite Monkey",
     "",
@@ -616,6 +749,11 @@ var en = {
 // src/install/templates/es.ts
 var es = {
   configHeader: "Configuración de Finite Monkey en este proyecto. Versiona este archivo. `finitemonkey update` conserva tus cambios.",
+  policyHeader: [
+    "Política de los guards de este proyecto. Modos: off, shadow (registra lo que bloquearía), active.",
+    "Los guards de secretos, producción, trabajo de git perdido y falso terminado siguen activos diga lo que diga este archivo.",
+    "Un guard que no está en esta lista empieza en shadow y se promueve tras promoteAfter disparos sin falso positivo."
+  ],
   agentsBlock: ({ gate, doctor }) => [
     "## Finite Monkey",
     "",
@@ -638,6 +776,11 @@ var es = {
 // src/install/templates/pt-BR.ts
 var ptBR = {
   configHeader: "Configuração do Finite Monkey neste projeto. Versione este arquivo. O `finitemonkey update` mantém suas edições.",
+  policyHeader: [
+    "Política dos guards deste projeto. Modos: off, shadow (registra o que bloquearia), active.",
+    "Os guards de segredos, produção, trabalho de git perdido e falso pronto ficam ativos, diga o que disser este arquivo.",
+    "Um guard que não está nesta lista começa em shadow e é promovido depois de promoteAfter disparos sem falso positivo."
+  ],
   agentsBlock: ({ gate, doctor }) => [
     "## Finite Monkey",
     "",
@@ -856,7 +999,7 @@ var DENY_FLOOR = {
 var DENY_RULES = [...DENY_FLOOR.secrets, ...DENY_FLOOR.git, ...DENY_FLOOR.proof];
 
 // src/install/detect.ts
-import { join as join2 } from "node:path";
+import { join as join4 } from "node:path";
 
 // src/install/json-text.ts
 var DEFAULT_STYLE = { indent: "  ", finalNewline: true };
@@ -868,11 +1011,11 @@ var renderJson = (value, style) => `${JSON.stringify(value, null, style.indent)}
 var parseSettings = (text6) => text6 === void 0 || text6.trim() === "" ? { ok: true, value: {} } : parseJsonObject(text6);
 var asList = (value) => Array.isArray(value) ? value : [];
 var asRecord = (value) => isRecord(value) ? value : {};
-var setKey = (record2, key, value) => {
-  if (!(key in record2)) return value === void 0 ? record2 : { ...record2, [key]: value };
+var setKey = (record3, key, value) => {
+  if (!(key in record3)) return value === void 0 ? record3 : { ...record3, [key]: value };
   return Object.fromEntries(
-    Object.entries(record2).flatMap(([name, current]) => {
-      if (name !== key) return [[name, current]];
+    Object.entries(record3).flatMap(([name, current2]) => {
+      if (name !== key) return [[name, current2]];
       return value === void 0 ? [] : [[name, value]];
     })
   );
@@ -949,7 +1092,7 @@ var scopeAuthorities = (text6, source) => {
 var userSettingsText = (project, env) => {
   const home = env["CLAUDE_CONFIG_DIR"] ?? env["HOME"] ?? env["USERPROFILE"];
   if (home === void 0) return void 0;
-  const file = env["CLAUDE_CONFIG_DIR"] === void 0 ? join2(home, ".claude", "settings.json") : join2(home, "settings.json");
+  const file = env["CLAUDE_CONFIG_DIR"] === void 0 ? join4(home, ".claude", "settings.json") : join4(home, "settings.json");
   const text6 = project.runtime.readText(toAbsolutePath(file));
   return text6.ok ? text6.value : void 0;
 };
@@ -1041,6 +1184,18 @@ var applyMigrations = (items, previous, version, migrations) => {
 // src/install/migrations/index.ts
 var MIGRATIONS = [];
 
+// src/install/policy-template.ts
+var policyTemplate = (lang) => [
+  `# ${GENERATED_MARKER}`,
+  ...TEMPLATES[lang].policyHeader.map((line2) => `# ${line2}`),
+  "level: standard",
+  "severity: medium",
+  `promoteAfter: ${String(DEFAULT_PROMOTE_AFTER)}`,
+  "guards:",
+  ...OPTIONAL_GUARDS.map((id) => `  ${id}: active`),
+  ""
+].join("\n");
+
 // src/install/settings-merge.ts
 var SETTINGS_SCHEMA_URL = "https://json.schemastore.org/claude-code-settings.json";
 var ATTRIBUTION_OFF = { commit: "", pr: "", sessionUrl: false };
@@ -1095,9 +1250,9 @@ var withPermissions = (settings, lists) => {
 var missing = (wanted, existing) => wanted.filter((rule) => !existing.includes(rule));
 var withoutAdded = (existing, added) => existing.filter((rule) => typeof rule !== "string" || !added.includes(rule));
 var ownHookMatcher = (recorded) => (handler) => isOwnHandler(handler) || recorded.some((own) => JSON.stringify(own) === JSON.stringify(handler));
-var mergeSettings = (current, wanted, recorded) => {
-  const schema = Object.keys(current).length === 0;
-  const base = schema ? { $schema: SETTINGS_SCHEMA_URL } : current;
+var mergeSettings = (current2, wanted, recorded) => {
+  const schema = Object.keys(current2).length === 0;
+  const base = schema ? { $schema: SETTINGS_SCHEMA_URL } : current2;
   const hooks = mergeHooks(asRecord(base["hooks"]), ownHookMatcher(recorded), wanted.hooks);
   const permissions = asRecord(base["permissions"]);
   const existingDeny = asList(permissions["deny"]);
@@ -1122,10 +1277,10 @@ var mergeSettings = (current, wanted, recorded) => {
   return { settings, added: language === void 0 ? added : { ...added, language } };
 };
 var sameAttribution = (value) => JSON.stringify(value) === JSON.stringify(ATTRIBUTION_OFF);
-var unmergeSettings = (current, added, recorded) => {
-  const hooks = mergeHooks(asRecord(current["hooks"]), ownHookMatcher(recorded), {});
-  const permissions = asRecord(current["permissions"]);
-  let settings = withPermissions(withHooks(current, hooks), {
+var unmergeSettings = (current2, added, recorded) => {
+  const hooks = mergeHooks(asRecord(current2["hooks"]), ownHookMatcher(recorded), {});
+  const permissions = asRecord(current2["permissions"]);
+  let settings = withPermissions(withHooks(current2, hooks), {
     deny: withoutAdded(asList(permissions["deny"]), added.deny),
     ask: withoutAdded(asList(permissions["ask"]), added.ask),
     blockReads: added.blockReads && permissions[BLOCK_READS] === true ? void 0 : permissions[BLOCK_READS]
@@ -1202,8 +1357,8 @@ var wantedHooks = (detection) => Object.fromEntries(
 );
 var settingsItem = (project, detection, input, previous) => {
   const before = project.read(SETTINGS_FILE);
-  const current = parseSettings(before);
-  if (!current.ok) return reject({ kind: "settings", detail: current.error });
+  const current2 = parseSettings(before);
+  if (!current2.ok) return reject({ kind: "settings", detail: current2.error });
   const hooks = wantedHooks(detection);
   const wanted = {
     hooks,
@@ -1213,7 +1368,7 @@ var settingsItem = (project, detection, input, previous) => {
     marketplace: input.marketplace,
     language: input.claudeLanguage
   };
-  const merged = mergeSettings(current.value, wanted, previous?.handlers ?? []);
+  const merged = mergeSettings(current2.value, wanted, previous?.handlers ?? []);
   const after = renderJson(merged.settings, before === void 0 ? DEFAULT_STYLE : styleOf(before));
   return accept({
     path: SETTINGS_FILE,
@@ -1254,7 +1409,8 @@ var generatedItem = (project, file, previous) => {
 var generatedFiles = (input, runner, vendor) => {
   const own = [
     { path: CONFIG_FILE, template: configTemplate(input.preset, input.lang), isOurs: hasMarker },
-    { path: VERIFY_SKILL, template: verifySkillTemplate(runner, input.lang), isOurs: isOwnSkill }
+    { path: VERIFY_SKILL, template: verifySkillTemplate(runner, input.lang), isOurs: isOwnSkill },
+    { path: POLICY_FILE, template: policyTemplate(input.lang), isOurs: hasMarker }
   ];
   if (!vendor) return accept(own);
   if (input.bundle === void 0) return reject({ kind: "bundle", detail: "the running finitemonkey is not a bundle" });
@@ -1428,9 +1584,9 @@ var detectLang = (flag2, env, settings = {}) => {
 };
 
 // src/install/project.ts
-import { dirname as dirname4, join as join3 } from "node:path";
+import { dirname as dirname4, join as join5 } from "node:path";
 var projectAt = (root, runtime) => {
-  const abs = (relative9) => toAbsolutePath(join3(root, ...relative9.split("/")));
+  const abs = (relative9) => toAbsolutePath(join5(root, ...relative9.split("/")));
   return {
     root,
     runtime,
@@ -1444,12 +1600,12 @@ var projectAt = (root, runtime) => {
   };
 };
 var findGitRoot = (start, runtime) => {
-  let current = start;
+  let current2 = start;
   for (; ; ) {
-    if (runtime.stat(toAbsolutePath(join3(current, ".git"))) !== void 0) return toAbsolutePath(current);
-    const parent = dirname4(current);
-    if (parent === current) return void 0;
-    current = parent;
+    if (runtime.stat(toAbsolutePath(join5(current2, ".git"))) !== void 0) return toAbsolutePath(current2);
+    const parent = dirname4(current2);
+    if (parent === current2) return void 0;
+    current2 = parent;
   }
 };
 
@@ -1547,7 +1703,7 @@ var applyFixes = (ctx, write3) => {
 };
 
 // src/doctor/report-file.ts
-import { join as join5 } from "node:path";
+import { join as join7 } from "node:path";
 
 // src/evidence/log.ts
 var logEvent = (runtime, paths, event, data) => runtime.appendText(paths.log, `${JSON.stringify({ at: runtime.now(), event, ...data })}
@@ -1620,8 +1776,8 @@ var shannonEntropy = (text6) => {
   const counts = /* @__PURE__ */ new Map();
   for (const char of text6) counts.set(char, (counts.get(char) ?? 0) + 1);
   let entropy = 0;
-  for (const count3 of counts.values()) {
-    const p = count3 / text6.length;
+  for (const count4 of counts.values()) {
+    const p = count4 / text6.length;
     entropy -= p * Math.log2(p);
   }
   return entropy;
@@ -1670,6 +1826,35 @@ var defineRule = (spec2) => ({
   skipTestPaths: spec2.skipTestPaths ?? false,
   placeholders: spec2.placeholders ?? true
 });
+var isWarning = (finding3) => finding3.severity === "warning";
+var blocking = (findings) => findings.filter((finding3) => !isWarning(finding3));
+
+// src/secrets/rules/exposure.ts
+var ARGUMENT_CONTEXT = String.raw`(?:^|\n)[ \t-]*(?:command|entrypoint|CMD|ENTRYPOINT|RUN|ExecStart(?:Pre|Post)?|ExecReload)\b[^\n]*?`;
+var SECRET_FLAG = String.raw`(?<=[\s"'\[,])--?[A-Za-z0-9_-]*(?:password|passwd|pass|secret|token|requirepass|api-?key)`;
+var EXPOSURE_RULES = [
+  defineRule({
+    id: "secret-in-process-args",
+    summary: "Literal password, token or key passed as a command-line argument in compose, a Dockerfile or a systemd unit (visible in ps and docker inspect)",
+    kind: "practice",
+    severity: "warning",
+    keywords: ["command", "entrypoint", "cmd", "run", "execstart", "execreload"],
+    source: String.raw`${ARGUMENT_CONTEXT}${SECRET_FLAG}(?:=["']?|["'][ \t]*,[ \t]*["']|[ \t]+["']?)(?<secret>[^\s"',\]$\x60/][^\s"',\]\x60]{3,127})`,
+    flags: "i",
+    minLength: 4
+  }),
+  defineRule({
+    id: "tls-disabled",
+    summary: "TLS verification turned off in code: sslmode set to disable, rejectUnauthorized or InsecureSkipVerify set to skip checks, Python verify set to False, NODE_TLS_REJECT_UNAUTHORIZED set to 0",
+    kind: "practice",
+    severity: "warning",
+    keywords: ["sslmode", "rejectunauthorized", "verify", "insecureskipverify", "node_tls_reject_unauthorized"],
+    source: String.raw`(?<secret>\bsslmode[ \t]*=[ \t]*["']?disable\b|\brejectUnauthorized["']?[ \t]*:[ \t]*false\b|\bverify[ \t]*=[ \t]*False\b|\bInsecureSkipVerify[ \t]*:[ \t]*true\b|\bNODE_TLS_REJECT_UNAUTHORIZED["']?[ \t]*(?:=|:)[ \t]*["']?0\b)`,
+    minLength: 1,
+    placeholders: false,
+    skipTestPaths: true
+  })
+];
 
 // src/secrets/rules/providers.ts
 var PROVIDER_RULES = [
@@ -1893,7 +2078,7 @@ var STRUCTURAL_RULES = [
 ];
 
 // src/secrets/rules/catalog.ts
-var RULES = [...PROVIDER_RULES, ...STRUCTURAL_RULES];
+var RULES = [...PROVIDER_RULES, ...STRUCTURAL_RULES, ...EXPOSURE_RULES];
 var CREDENTIAL_RULES = RULES.filter((rule) => rule.kind === "credential");
 var ruleById = (id) => RULES.find((rule) => rule.id === id);
 
@@ -1985,11 +2170,11 @@ var maskDeep = (value) => {
 };
 
 // src/task/paths.ts
-import { join as join4 } from "node:path";
+import { join as join6 } from "node:path";
 var FM_DIR = ".finitemonkey";
 var fmPaths = (root) => {
-  const dir = toAbsolutePath(join4(root, FM_DIR));
-  const at = (...parts) => toAbsolutePath(join4(dir, ...parts));
+  const dir = toAbsolutePath(join6(root, FM_DIR));
+  const at = (...parts) => toAbsolutePath(join6(dir, ...parts));
   return {
     root,
     dir,
@@ -2225,16 +2410,16 @@ var reportMarkdown = (env, ctx, envelope) => {
   ];
   return maskText(withoutHome(lines3.join("\n"), env.runtime.homeDir()));
 };
-var reportPath = (env) => toAbsolutePath(join5(env.root, ...REPORTS_DIR.split("/"), `doctor-${stamp(env.runtime.now())}.md`));
+var reportPath = (env) => toAbsolutePath(join7(env.root, ...REPORTS_DIR.split("/"), `doctor-${stamp(env.runtime.now())}.md`));
 
 // src/install/plugin-yield.ts
-import { join as join6 } from "node:path";
+import { join as join8 } from "node:path";
 var PLUGIN_VIA = "plugin";
 var YIELD_STDOUT = `${JSON.stringify({ continue: true })}
 `;
 var projectOwnsHooks = (ctx) => {
   const root = ctx.env["CLAUDE_PROJECT_DIR"] ?? ctx.cwd;
-  const text6 = ctx.runtime.readText(toAbsolutePath(join6(root, ...SETTINGS_FILE.split("/"))));
+  const text6 = ctx.runtime.readText(toAbsolutePath(join8(root, ...SETTINGS_FILE.split("/"))));
   if (!text6.ok) return false;
   const parsed = parseJsonObject(text6.value);
   return parsed.ok && ownHandlersIn(parsed.value) > 0;
@@ -2248,7 +2433,7 @@ var STABLE_PLUGIN_ID = `${PLUGIN_NAME}@${MARKETPLACE_NAME}`;
 var NEXT_PLUGIN_ID = `${PLUGIN_NAME}@${NEXT_MARKETPLACE_NAME}`;
 
 // src/doctor/settings.ts
-import { join as join7 } from "node:path";
+import { join as join9 } from "node:path";
 var MANAGED = {
   darwin: "/Library/Application Support/ClaudeCode/managed-settings.json",
   linux: "/etc/claude-code/managed-settings.json",
@@ -2257,7 +2442,7 @@ var MANAGED = {
 var userSettingsPath = ({ env, runtime }) => {
   const configDir = env["CLAUDE_CONFIG_DIR"];
   return toAbsolutePath(
-    configDir === void 0 ? join7(runtime.homeDir(), ".claude", "settings.json") : join7(configDir, "settings.json")
+    configDir === void 0 ? join9(runtime.homeDir(), ".claude", "settings.json") : join9(configDir, "settings.json")
   );
 };
 var settingsPaths = (env) => {
@@ -2265,8 +2450,8 @@ var settingsPaths = (env) => {
   return [
     ...managed === void 0 ? [] : [{ scope: "managed", path: toAbsolutePath(managed) }],
     { scope: "user", path: userSettingsPath(env) },
-    { scope: "project", path: toAbsolutePath(join7(env.root, ".claude", "settings.json")) },
-    { scope: "local", path: toAbsolutePath(join7(env.root, ".claude", "settings.local.json")) }
+    { scope: "project", path: toAbsolutePath(join9(env.root, ".claude", "settings.json")) },
+    { scope: "local", path: toAbsolutePath(join9(env.root, ".claude", "settings.local.json")) }
   ];
 };
 var readSettings = (env) => settingsPaths(env).flatMap(({ scope: scope2, path }) => {
@@ -2410,7 +2595,7 @@ var checkClaudeSettings = (env) => {
 };
 
 // src/doctor/environment.ts
-import { join as join8 } from "node:path";
+import { join as join10 } from "node:path";
 var AUTH_VARIABLES = [
   "ANTHROPIC_API_KEY",
   "ANTHROPIC_AUTH_TOKEN",
@@ -2448,7 +2633,7 @@ var pathDirs = ({ env, platform }) => {
 var copiesOnPath = (env) => {
   const names = EXECUTABLES[env.platform] ?? ["finitemonkey"];
   const found = pathDirs(env).flatMap(
-    (dir) => names.map((name) => toAbsolutePath(join8(dir, name))).filter((path) => env.runtime.stat(path)?.kind === "file").map((path) => env.runtime.realpath(path))
+    (dir) => names.map((name) => toAbsolutePath(join10(dir, name))).filter((path) => env.runtime.stat(path)?.kind === "file").map((path) => env.runtime.realpath(path))
   );
   const byDir = new Map(found.map((path) => [path.replace(/\.(cmd|exe|ps1)$/i, ""), path]));
   return [...byDir.values()];
@@ -2482,7 +2667,7 @@ var checkAuthVariables = ({ env, platform }) => {
 };
 
 // src/doctor/hooks.ts
-import { join as join29 } from "node:path";
+import { join as join31 } from "node:path";
 
 // src/hooks/events.ts
 var HOOK_EVENTS = [
@@ -2529,9 +2714,9 @@ var deadlineFor = (event, raw) => {
 };
 
 // src/hooks/fields.ts
-var textField = (record2, ...names) => {
+var textField = (record3, ...names) => {
   for (const name of names) {
-    const value = record2[name];
+    const value = record3[name];
     if (typeof value === "string") return value;
   }
   return void 0;
@@ -2626,8 +2811,8 @@ var closeTask = (state, id) => assemble({
 
 // src/guards/release/grants.ts
 var GRANT_MINUTES = 30;
-var text2 = (record2, key) => {
-  const value = record2[key];
+var text2 = (record3, key) => {
+  const value = record3[key];
   return typeof value === "string" ? value : void 0;
 };
 var toGrant = (value) => {
@@ -3162,9 +3347,9 @@ var skipOptions = (args, wrapper) => {
   }
   return index + wrapper.positionals;
 };
-var shift = (stage, count3, name) => ({
+var shift = (stage, count4, name) => ({
   ...stage,
-  argv: stage.argv.slice(count3),
+  argv: stage.argv.slice(count4),
   via: [...stage.via, name]
 });
 var envCommand = (stage) => {
@@ -3269,10 +3454,10 @@ var PS_ENV = /^\$env:([A-Za-z_][A-Za-z0-9_]*)=?(.*)$/is;
 var CHANGES_DIR = /* @__PURE__ */ new Set(["cd", "pushd", "set-location", "push-location"]);
 var lex = (text6, language) => language === "bash" ? lexBash(text6) : lexPowerShell(text6, language === "cmd");
 var isWindowsAbsolute = (path) => /^[A-Za-z]:\//.test(path);
-var joinDir = (current, target) => {
+var joinDir = (current2, target) => {
   const next2 = toPosixPath(target);
   if (next2.startsWith("/") || isWindowsAbsolute(next2) || next2.startsWith("~")) return next2;
-  return current === void 0 ? posix.normalize(next2) : posix.join(current, next2);
+  return current2 === void 0 ? posix.normalize(next2) : posix.join(current2, next2);
 };
 var assignments = (words, language) => {
   if (language !== "bash") {
@@ -3385,9 +3570,9 @@ var COMMIT_VALUE_SHORTS = /* @__PURE__ */ new Set(["m", "F", "C", "c", "t"]);
 var VERIFY_SUBCOMMANDS = /* @__PURE__ */ new Set(["commit", "push", "merge", "am", "rebase", "cherry-pick", "revert", "pull"]);
 var isHooksPath = (value) => /^core\.hookspath(=|$)/i.test(value);
 var envFindings = (command) => {
-  const pairs = Object.entries(command.env);
+  const pairs2 = Object.entries(command.env);
   const exported = command.argv[0] === "export" ? command.argv.slice(1).map((arg) => arg.split("=", 2)) : [];
-  return [...pairs, ...exported].filter(([name = ""]) => HOOK_ENV.test(name)).map(([name = "", value = ""]) => ({ kind: "hook_env", detail: `${name}=${value}` }));
+  return [...pairs2, ...exported].filter(([name = ""]) => HOOK_ENV.test(name)).map(([name = "", value = ""]) => ({ kind: "hook_env", detail: `${name}=${value}` }));
 };
 var splitGit = (args) => {
   let index = 0;
@@ -3545,7 +3730,7 @@ var selfGuard = (input) => {
 };
 
 // src/guards/tests/hook.ts
-import { join as join9, relative as relative3 } from "node:path";
+import { join as join11, relative as relative3 } from "node:path";
 
 // src/guards/tests/patterns.ts
 var JS_TEST = /(^|\/)(__tests__|__test__)\/|\.(test|spec)\.[cm]?[jt]sx?$|(^|\/)tests?\/.*\.[cm]?[jt]sx?$/;
@@ -3735,7 +3920,7 @@ var shellViolations = (input, root) => {
   return parseShell(command).flatMap(
     (simple) => writtenPaths(simple).flatMap((path) => {
       const local = localPath(root, path);
-      const exists = input.runtime.stat(toAbsolutePath(join9(root, local))) !== void 0;
+      const exists = input.runtime.stat(toAbsolutePath(join11(root, local))) !== void 0;
       if (!exists) return [];
       if (isProtectedConfig(local)) return [{ kind: "config_changed", path: local }];
       return isTestFile(local) ? [{ kind: "test_removed", path: local }] : [];
@@ -3755,20 +3940,20 @@ var testsGuard = (input) => {
 };
 
 // src/gate/hooks/config.ts
-import { join as join11 } from "node:path";
+import { join as join13 } from "node:path";
 
 // src/gate/hooks/common.ts
-import { dirname as dirname5, join as join10 } from "node:path";
+import { dirname as dirname5, join as join12 } from "node:path";
 var DEFAULT_GATE_BUDGET_MS = 3e5;
 var sessionCwd = (input) => input.payload.cwd === void 0 ? input.cwd : toAbsolutePath(input.payload.cwd, input.cwd);
 var MAX_DEPTH2 = 64;
 var findRepoRoot = (runtime, start) => {
-  let current = start;
+  let current2 = start;
   for (let depth = 0; depth < MAX_DEPTH2; depth += 1) {
-    if (runtime.stat(toAbsolutePath(join10(current, ".git"))) !== void 0) return current;
-    const parent = toAbsolutePath(dirname5(current));
-    if (parent === current) return void 0;
-    current = parent;
+    if (runtime.stat(toAbsolutePath(join12(current2, ".git"))) !== void 0) return current2;
+    const parent = toAbsolutePath(dirname5(current2));
+    if (parent === current2) return void 0;
+    current2 = parent;
   }
   return void 0;
 };
@@ -3788,7 +3973,7 @@ var contextOutput = (event, additionalContext, systemMessage) => ({
 var human = (text6) => `finitemonkey: ${text6}`;
 
 // src/gate/hooks/config.ts
-var CONFIG_FILE2 = "config-hooks.json";
+var CONFIG_FILE3 = "config-hooks.json";
 var GUARDED_SOURCES = /* @__PURE__ */ new Set(["user_settings", "project_settings", "local_settings"]);
 var countIn = (value) => {
   if (typeof value === "string") return /\bfinitemonkey\b|\bfm hook\b/.test(value) ? 1 : 0;
@@ -3802,20 +3987,20 @@ var censusOf = (text6) => {
   return { hooks: countIn(parsed.value["hooks"]), disabled: parsed.value["disableAllHooks"] === true };
 };
 var settingsFiles = (paths, env) => [
-  toAbsolutePath(join11(paths.root, ".claude", "settings.json")),
-  toAbsolutePath(join11(paths.root, ".claude", "settings.local.json")),
-  ...env["HOME"] === void 0 ? [] : [toAbsolutePath(join11(env["HOME"], ".claude", "settings.json"))]
+  toAbsolutePath(join13(paths.root, ".claude", "settings.json")),
+  toAbsolutePath(join13(paths.root, ".claude", "settings.local.json")),
+  ...env["HOME"] === void 0 ? [] : [toAbsolutePath(join13(env["HOME"], ".claude", "settings.json"))]
 ];
 var read2 = (runtime, path) => {
   const text6 = runtime.readText(path);
   return text6.ok ? text6.value : void 0;
 };
 var known = (runtime, paths) => {
-  const raw = readJsonFile(runtime, paths.cache(CONFIG_FILE2))?.["hooks"];
+  const raw = readJsonFile(runtime, paths.cache(CONFIG_FILE3))?.["hooks"];
   return isRecord(raw) ? Object.fromEntries(Object.entries(raw).filter((entry2) => typeof entry2[1] === "number")) : {};
 };
 var save = (runtime, paths, counts) => {
-  writeJsonFile(runtime, paths.cache(CONFIG_FILE2), { hooks: { ...counts } });
+  writeJsonFile(runtime, paths.cache(CONFIG_FILE3), { hooks: { ...counts } });
 };
 var recordConfigHooks = (runtime, paths, env) => {
   const counts = Object.fromEntries(
@@ -3940,6 +4125,7 @@ var implicitContract = (files) => {
       { id: "prose", kind: "prose" },
       { id: "worktree", kind: "worktree" },
       { id: "merge", kind: "merge" },
+      { id: "callers", kind: "callers" },
       { id: "pr", kind: "pr", requireOpen: false }
     ],
     decisionsNeeded: [],
@@ -3948,7 +4134,7 @@ var implicitContract = (files) => {
 };
 
 // src/gate/prepare.ts
-import { join as join12 } from "node:path";
+import { join as join15 } from "node:path";
 
 // src/core/yaml/scalar.ts
 var ESCAPES = {
@@ -4096,7 +4282,7 @@ var parseValue = (text6) => {
 
 // src/core/yaml/parse.ts
 var BOM = new RegExp(`^${String.fromCharCode(65279)}`);
-var stripComment = (text6) => {
+var stripComment2 = (text6) => {
   for (let index = 0; index < text6.length; index += 1) {
     const char = text6[index];
     if (char === '"' || char === "'") {
@@ -4111,7 +4297,7 @@ var toLines = (source) => {
   const lines3 = [];
   const raw = source.replace(BOM, "").split(/\r?\n/);
   for (const [index, full] of raw.entries()) {
-    const text6 = stripComment(full).trimEnd();
+    const text6 = stripComment2(full).trimEnd();
     const body2 = text6.trimStart();
     if (body2 === "" || body2 === "---" && lines3.length === 0) continue;
     const indentText = text6.slice(0, text6.length - body2.length);
@@ -4219,7 +4405,8 @@ var CHECK_KINDS = [
   "worktree",
   "merge",
   "prod",
-  "prose"
+  "prose",
+  "review"
 ];
 var GIT_REQUIREMENTS = ["committed", "pushed", "pr_open"];
 var SIZES = ["S", "M", "L"];
@@ -4227,8 +4414,8 @@ var TASK_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 var TASK_SCHEMA = "finitemonkey/task@1";
 
 // src/task/validate.ts
-var str = (record2, key, at, issues, required) => {
-  const value = record2[key];
+var str = (record3, key, at, issues, required) => {
+  const value = record3[key];
   if (value === void 0 || value === null) {
     if (required) issues.push(`${at}${key}: required`);
     return void 0;
@@ -4239,8 +4426,8 @@ var str = (record2, key, at, issues, required) => {
   }
   return value;
 };
-var positive = (record2, key, at, issues) => {
-  const value = record2[key];
+var positive = (record3, key, at, issues) => {
+  const value = record3[key];
   if (value === void 0 || value === null) return void 0;
   if (typeof value === "number" && Number.isInteger(value) && value > 0) return value;
   issues.push(`${at}${key}: must be a positive integer`);
@@ -4259,12 +4446,12 @@ var gitRequire = (value, at, issues) => {
   if (known2.some((item) => item === void 0)) issues.push(`${at}: use ${GIT_REQUIREMENTS.join(", ")}`);
   return known2.filter((item) => item !== void 0);
 };
-var checkFields = (record2, kind, at, issues) => {
-  const run4 = str(record2, "run", at, issues, kind === "command");
-  const timeoutS = positive(record2, "timeout_s", at, issues);
-  const description = str(record2, "description", at, issues, kind === "manual");
-  const require2 = kind === "git" ? gitRequire(record2["require"] ?? ["committed"], `${at}require`, issues) : void 0;
-  const open = record2["require_open"];
+var checkFields = (record3, kind, at, issues) => {
+  const run4 = str(record3, "run", at, issues, kind === "command");
+  const timeoutS = positive(record3, "timeout_s", at, issues);
+  const description = str(record3, "description", at, issues, kind === "manual");
+  const require2 = kind === "git" ? gitRequire(record3["require"] ?? ["committed"], `${at}require`, issues) : void 0;
+  const open = record3["require_open"];
   if (open !== void 0 && typeof open !== "boolean") issues.push(`${at}require_open: must be true or false`);
   return {
     ...run4 === void 0 ? {} : { run: run4 },
@@ -4335,6 +4522,7 @@ var validateContract = (value, implicit = false) => {
   const contractScope = scope(value["scope"], issues);
   const checks = acceptance(value["acceptance"], issues);
   const decisionsNeeded = strings2(value["decisions_needed"], "decisions_needed", issues);
+  const callersIgnore = strings2(value["callers_ignore"], "callers_ignore", issues);
   if (issues.length > 0 || id === void 0 || goal === void 0 || size === void 0) return reject(issues);
   return accept({
     id,
@@ -4344,6 +4532,7 @@ var validateContract = (value, implicit = false) => {
     scope: contractScope,
     acceptance: checks,
     decisionsNeeded,
+    ...callersIgnore.length === 0 ? {} : { callersIgnore },
     implicit
   });
 };
@@ -4360,7 +4549,7 @@ var parseContract = (id, text6) => {
   if (valid.value.id !== id) return reject({ kind: "invalid", id, issues: [`id: must match the file name (${id})`] });
   return accept(valid.value);
 };
-var pick = (lock, sources, id) => {
+var pick2 = (lock, sources, id) => {
   const approved = lock.approved[id];
   if (approved !== void 0) return { text: approved, source: "lock" };
   const base = sources.base(taskRelative(id));
@@ -4371,7 +4560,7 @@ var pick = (lock, sources, id) => {
 var loadTask = (files, paths, sources, id) => {
   if (!TASK_ID.test(id)) return reject({ kind: "not_found", id });
   const lock = readTrust(files, paths);
-  const chosen = pick(lock, sources, id);
+  const chosen = pick2(lock, sources, id);
   if (chosen === void 0) return reject({ kind: "not_found", id });
   const parsed = parseContract(id, chosen.text);
   if (!parsed.ok) return parsed;
@@ -4425,6 +4614,9 @@ var readBaseline = (runtime, paths) => {
 };
 var writeBaseline = (runtime, paths, treeHash2, checks) => writeJsonFile(runtime, paths.cache(BASELINE_FILE), { treeHash: treeHash2, checks: { ...checks } }).ok;
 
+// src/gate/diff-shape.ts
+import { join as join14 } from "node:path";
+
 // src/gate/git.ts
 var EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
 var GIT_TIMEOUT_MS = 15e3;
@@ -4524,10 +4716,20 @@ var numstat = (git, base) => {
 };
 var dirtyPaths = (git) => nulFields(git.out(["status", "--porcelain", "-z", "--", ".", EXCLUDE_FM]) ?? "").map((entry2) => entry2.slice(3));
 var aheadOfUpstream = (git) => {
-  const count3 = git.out(["rev-list", "--count", "@{u}..HEAD"])?.trim();
-  return count3 === void 0 ? void 0 : Number(count3);
+  const count4 = git.out(["rev-list", "--count", "@{u}..HEAD"])?.trim();
+  return count4 === void 0 ? void 0 : Number(count4);
 };
 
+// src/gate/diff-shape.ts
+var untrackedLines = (runtime, root, changes) => changes.filter((change) => change.status === "A").reduce((sum, change) => {
+  const text6 = runtime.readText(toAbsolutePath(join14(root, change.path)));
+  return sum + (text6.ok ? text6.value.split("\n").length : 0);
+}, 0);
+var diffShape = (runtime, git, base, changes) => ({
+  files: changes.map((change) => change.path),
+  lines: numstat(git, base).lines + untrackedLines(runtime, git.cwd, changes)
+});
+
 // src/gate/pr-parse.ts
 var FAILED = /* @__PURE__ */ new Set(["FAILURE", "CANCELLED", "TIMED_OUT", "ACTION_REQUIRED", "STARTUP_FAILURE", "ERROR"]);
 var PENDING = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED", "EXPECTED"]);
@@ -4547,18 +4749,18 @@ var ciChecks = (value) => Array.isArray(value) ? value.flatMap((item) => {
 var parsePrView = (text6) => {
   const parsed = parseJsonObject(text6);
   if (!parsed.ok) return void 0;
-  const record2 = parsed.value;
-  const number = record2["number"];
+  const record3 = parsed.value;
+  const number = record3["number"];
   if (typeof number !== "number") return void 0;
   return {
     number,
-    url: optionalString(record2, "url") ?? "",
-    state: optionalString(record2, "state") ?? "",
-    mergeable: optionalString(record2, "mergeable") ?? "UNKNOWN",
-    mergeStateStatus: optionalString(record2, "mergeStateStatus") ?? "UNKNOWN",
-    baseRefName: optionalString(record2, "baseRefName") ?? "",
-    headRefOid: optionalString(record2, "headRefOid") ?? "",
-    checks: ciChecks(record2["statusCheckRollup"])
+    url: optionalString(record3, "url") ?? "",
+    state: optionalString(record3, "state") ?? "",
+    mergeable: optionalString(record3, "mergeable") ?? "UNKNOWN",
+    mergeStateStatus: optionalString(record3, "mergeStateStatus") ?? "UNKNOWN",
+    baseRefName: optionalString(record3, "baseRefName") ?? "",
+    headRefOid: optionalString(record3, "headRefOid") ?? "",
+    checks: ciChecks(record3["statusCheckRollup"])
   };
 };
 var isConflicting = (pr) => pr.mergeable === "CONFLICTING" || pr.mergeStateStatus === "DIRTY";
@@ -4618,13 +4820,118 @@ var conflictFiles = (git, base) => {
   return [];
 };
 
+// src/core/glob.ts
+var escape = (char) => /[.+^${}()|[\]\\]/.test(char) ? `\\${char}` : char;
+var globToRegExp = (glob) => {
+  const pattern = glob.replace(/^\.\//, "");
+  let out = "";
+  for (let index = 0; index < pattern.length; index += 1) {
+    const char = pattern[index] ?? "";
+    if (char === "*" && pattern[index + 1] === "*") {
+      const slash = pattern[index + 2] === "/";
+      out += slash ? "(?:.*/)?" : ".*";
+      index += slash ? 2 : 1;
+    } else if (char === "*") out += "[^/]*";
+    else if (char === "?") out += "[^/]";
+    else out += escape(char);
+  }
+  return new RegExp(`^${out}${pattern.endsWith("/") ? ".*" : ""}$`);
+};
+var matchesAny = (path, globs) => {
+  const normalized = toPosixPath(path);
+  return globs.some((glob) => globToRegExp(glob).test(normalized));
+};
+
+// src/gate/size.ts
+var DEFAULT_SENSITIVE = [
+  "**/*payment*",
+  "**/*payment*/**",
+  "**/*billing*",
+  "**/*billing*/**",
+  "**/*checkout*/**",
+  "**/auth/**",
+  "**/*auth.*",
+  "**/oauth*",
+  "**/migrations/**",
+  "**/migration/**",
+  "**/*.sql",
+  "**/openapi*.*",
+  "**/swagger*.*",
+  "**/*.proto",
+  "**/*.graphql",
+  "**/*stripe*",
+  "**/*openai*",
+  "**/*anthropic*"
+];
+var DEFAULT_SIZE_CONFIG = {
+  m: { files: 5, lines: 150 },
+  l: { files: 20, lines: 600 },
+  sensitive: DEFAULT_SENSITIVE
+};
+var count2 = (tree, fallback, ...path) => {
+  const value = configAt(tree, ...path);
+  const parsed = typeof value === "string" ? Number(value) : Number.NaN;
+  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
+};
+var threshold = (tree, key, fallback) => ({
+  files: count2(tree, fallback.files, "size", key, "files"),
+  lines: count2(tree, fallback.lines, "size", key, "lines")
+});
+var sizeConfig = (tree) => {
+  const declared = configAt(tree, "size", "sensitive");
+  return {
+    m: threshold(tree, "m", DEFAULT_SIZE_CONFIG.m),
+    l: threshold(tree, "l", DEFAULT_SIZE_CONFIG.l),
+    sensitive: declared === void 0 ? DEFAULT_SENSITIVE : configList(tree, "size", "sensitive")
+  };
+};
+var reaches = (shape, limit) => shape.files.length >= limit.files || shape.lines >= limit.lines;
+var rank = (size) => SIZES.indexOf(size);
+var larger = (a, b) => rank(a) >= rank(b) ? a : b;
+var computeSize = (shape, config) => {
+  const sensitive = shape.files.filter((file) => matchesAny(file, config.sensitive));
+  const byVolume = reaches(shape, config.l) ? "L" : reaches(shape, config.m) ? "M" : "S";
+  const computed = sensitive.length > 0 ? larger(byVolume, "M") : byVolume;
+  return { computed, files: shape.files.length, lines: shape.lines, sensitive };
+};
+var sizeVerdict = (declared, shape, config) => {
+  const result = computeSize(shape, config);
+  return { ...result, declared, effective: larger(declared, result.computed) };
+};
+var upgraded = (verdict) => rank(verdict.effective) > rank(verdict.declared);
+
+// src/gate/size-contract.ts
+var REVIEW_CHECK = "size-review";
+var INVENTORY_CHECK = "size-inventory";
+var DECISION_CHECK = "size-decision";
+var INVENTORY = "inventory of the files, behaviours and callers the change touches";
+var DECISION = "a recorded decision on the approach for a change this large";
+var reviewChecks = (verdict) => verdict.effective === "S" ? [] : [{ id: REVIEW_CHECK, kind: "review" }];
+var largeChecks = (verdict) => verdict.effective === "L" && verdict.declared !== "S" ? [
+  { id: INVENTORY_CHECK, kind: "manual", description: INVENTORY },
+  { id: DECISION_CHECK, kind: "manual", description: DECISION }
+] : [];
+var sizeRequirements = (verdict) => [
+  ...reviewChecks(verdict),
+  ...largeChecks(verdict)
+];
+var applySize = (contract, verdict) => {
+  if (contract.implicit) return contract;
+  const declaredIds = new Set(contract.acceptance.map((check2) => check2.id));
+  const declaredKinds = new Set(contract.acceptance.map((check2) => check2.kind));
+  const extra = sizeRequirements(verdict).filter(
+    (check2) => !declaredIds.has(check2.id) && !(check2.kind === "review" && declaredKinds.has("review"))
+  );
+  return extra.length === 0 && !upgraded(verdict) ? contract : { ...contract, size: verdict.effective, acceptance: [...contract.acceptance, ...extra] };
+};
+
 // src/gate/prepare.ts
 var diskFiles = (runtime, root) => ({
   read: (relative9) => {
-    const text6 = runtime.readText(toAbsolutePath(join12(root, relative9)));
+    const text6 = runtime.readText(toAbsolutePath(join15(root, relative9)));
     return text6.ok ? text6.value : void 0;
   },
-  exists: (relative9) => runtime.stat(toAbsolutePath(join12(root, relative9))) !== void 0
+  exists: (relative9) => runtime.stat(toAbsolutePath(join15(root, relative9))) !== void 0
 });
 var baseFiles = (git, base, disk) => ({
   read: (relative9) => base === EMPTY_TREE ? disk.read(relative9) : fileAt(git, base, relative9),
@@ -4656,6 +4963,7 @@ var skipReason = (runtime, paths, loaded, changes, tree, sessionId) => {
   const session = readSession(runtime, paths);
   return session !== void 0 && session.sessionId === sessionId && session.startTree === tree ? "no_session_edits" : void 0;
 };
+var measureSize = (runtime, git, base, changes, contract) => sizeVerdict(contract.size, diffShape(runtime, git, base, changes), sizeConfig(loadProjectConfig(runtime, git.cwd)));
 var prepareGate = (options) => {
   const probe = gitAt(options.runtime, options.cwd);
   const root = gitRoot(probe);
@@ -4675,11 +4983,13 @@ var prepareGate = (options) => {
   const skip = options.noSkip === true ? void 0 : skipReason(options.runtime, paths, loaded.value, changes, tree, options.sessionId);
   if (skip !== void 0) return { kind: "skipped", reason: skip };
   const pr = memo(() => prStatus(options.runtime, git, paths));
+  const size = measureSize(options.runtime, git, base, changes, loaded.value.contract);
   const ctx = {
     runtime: options.runtime,
     git,
     paths,
-    contract: loaded.value.contract,
+    contract: applySize(loaded.value.contract, size),
+    size,
     trusted: loaded.value.trusted,
     treeHash: tree,
     base,
@@ -4883,19 +5193,19 @@ var params = (value) => isRecord(value) ? Object.fromEntries(
 var notes = (value) => Array.isArray(value) ? value.flatMap(
   (item) => isRecord(item) && typeof item["key"] === "string" ? [{ key: item["key"], params: params(item["params"]) }] : []
 ) : [];
-var text3 = (record2, key) => {
-  const value = record2[key];
+var text3 = (record3, key) => {
+  const value = record3[key];
   return typeof value === "string" ? value : void 0;
 };
-var optional = (record2) => {
-  const exitCode = record2["exitCode"];
-  const durationMs = record2["durationMs"];
-  const command = text3(record2, "command");
-  const stdoutSha256 = text3(record2, "stdoutSha256");
-  const releasedBy = text3(record2, "releasedBy");
-  const reason = oneOf2(UNVERIFIED_REASONS, record2["reason"]);
-  const failures = record2["failures"];
-  const testCount = record2["testCount"];
+var optional = (record3) => {
+  const exitCode = record3["exitCode"];
+  const durationMs = record3["durationMs"];
+  const command = text3(record3, "command");
+  const stdoutSha256 = text3(record3, "stdoutSha256");
+  const releasedBy = text3(record3, "releasedBy");
+  const reason = oneOf2(UNVERIFIED_REASONS, record3["reason"]);
+  const failures = record3["failures"];
+  const testCount = record3["testCount"];
   return {
     ...command === void 0 ? {} : { command },
     ...typeof exitCode === "number" || exitCode === null ? { exitCode } : {},
@@ -4910,14 +5220,14 @@ var optional = (record2) => {
 var parseEvidence = (line2) => {
   const parsed = parseJsonObject(line2);
   if (!parsed.ok) return void 0;
-  const record2 = parsed.value;
-  const status = oneOf2(EVIDENCE_STATUSES, record2["status"]);
-  const task = text3(record2, "task");
-  const check2 = text3(record2, "check");
-  const kind = text3(record2, "kind");
-  const treeHash2 = text3(record2, "treeHash");
-  const at = text3(record2, "at");
-  if (record2["schema"] !== EVIDENCE_SCHEMA || status === void 0) return void 0;
+  const record3 = parsed.value;
+  const status = oneOf2(EVIDENCE_STATUSES, record3["status"]);
+  const task = text3(record3, "task");
+  const check2 = text3(record3, "check");
+  const kind = text3(record3, "kind");
+  const treeHash2 = text3(record3, "treeHash");
+  const at = text3(record3, "at");
+  if (record3["schema"] !== EVIDENCE_SCHEMA || status === void 0) return void 0;
   if (task === void 0 || check2 === void 0 || kind === void 0 || treeHash2 === void 0 || at === void 0) {
     return void 0;
   }
@@ -4929,8 +5239,8 @@ var parseEvidence = (line2) => {
     status,
     treeHash: treeHash2,
     at,
-    notes: notes(record2["notes"]),
-    ...optional(record2)
+    notes: notes(record3["notes"]),
+    ...optional(record3)
   };
 };
 var readLedger = (runtime, path) => {
@@ -5458,7 +5768,26 @@ var en_default = {
   "history.pattern.no_verify": "{count, plural, one {# git command} other {# git commands}} with --no-verify",
   "history.pattern.force_push": "{count, plural, one {# force push} other {# force pushes}}",
   "history.pattern.test_skip": "{count, plural, one {# test edit} other {# test edits}} that added .skip, .only or a skip marker",
-  "history.estimate": "These are estimates from pattern matching, not evidence; nothing was saved and nothing left this machine."
+  "history.estimate": "These are estimates from pattern matching, not evidence; nothing was saved and nothing left this machine.",
+  "gate.require.review": "a reviewer subagent read the change at its current state",
+  "gate.size.declared": "size {effective}: {files, plural, one {# file} other {# files}}, {lines, plural, one {# line} other {# lines}}",
+  "gate.size.grew": "declared {declared}, the diff makes it {effective}: {files, plural, one {# file} other {# files}}, {lines, plural, one {# line} other {# lines}}",
+  "gate.size.sensitive": "sensitive path touched: {file}",
+  "gate.review.missing": "no review of the current state: run a reviewer subagent on the diff, or the person writes `fm: approve {check} <reason>` in the chat",
+  "gate.review.done": "reviewed by {agent} at {at}",
+  "secrets.warn.write": "Finite Monkey warning (the write went through): {found}. A secret passed as a command-line argument shows in ps and docker inspect; disabled TLS verification lets anyone on the path read the traffic. Move the value to an environment variable or a secret file, and keep TLS checks on outside tests.",
+  "gate.secrets.warning": "warning: {rule} at {file}:{line}",
+  "doctor.secrets.remote_credential": "git remote {remotes} has a credential in its URL, stored in plain text in .git/config",
+  "doctor.secrets.fix_remote_credential": "run `git remote set-url {remote} <url without user:token@>`, use a credential helper or SSH, and rotate the token",
+  "secrets.session.remote_credential": "git remote {remotes} has a credential in its URL (plain text in .git/config). Ask the person to run `git remote set-url {remote} <url without user:token@>` and rotate the token; do not print the URL.",
+  "gate.require.callers": "no removed or renamed symbol is still called",
+  "gate.callers.none": "{count, plural, one {# removed definition} other {# removed definitions}}, no caller left",
+  "gate.callers.open": "{name} is gone but still called in {count, plural, one {# place} other {# places}}",
+  "gate.callers.at": "{name} called at {file}:{line}",
+  "gate.callers.warning": "warning only: {percent}% of callers findings were released with callers_ignore ({released} of {total}), above the 5% ceiling",
+  "command.policy_false_positive.summary": "Record a false positive of a guard in shadow so it is not promoted",
+  "policy.error.person_only": "Only the person can record a false positive, and this does not look like their terminal (no TTY, or running inside Claude Code)",
+  "policy.false_positive.recorded": "Recorded for {guard}: {count, plural, one {# false positive} other {# false positives}}; it stays in shadow until you set it in .finitemonkey/policy.yml."
 };
 
 // src/i18n/es.json
@@ -5971,7 +6300,26 @@ var es_default = {
   "history.pattern.no_verify": "{count, plural, one {# comando git} other {# comandos git}} con --no-verify",
   "history.pattern.force_push": "{count, plural, one {# push forzado} other {# push forzados}}",
   "history.pattern.test_skip": "{count, plural, one {# edición} other {# ediciones}} de pruebas que añadieron .skip, .only o una marca para saltar",
-  "history.estimate": "Son estimaciones por patrones de texto, no evidencia; no se guardó nada y nada salió de esta máquina."
+  "history.estimate": "Son estimaciones por patrones de texto, no evidencia; no se guardó nada y nada salió de esta máquina.",
+  "gate.require.review": "un subagente revisor leyó el cambio en su estado actual",
+  "gate.size.declared": "tamaño {effective}: {files, plural, one {# archivo} other {# archivos}}, {lines, plural, one {# línea} other {# líneas}}",
+  "gate.size.grew": "declarada {declared}, el diff la vuelve {effective}: {files, plural, one {# archivo} other {# archivos}}, {lines, plural, one {# línea} other {# líneas}}",
+  "gate.size.sensitive": "ruta sensible tocada: {file}",
+  "gate.review.missing": "ninguna revisión del estado actual: ejecuta un subagente revisor sobre el diff, o la persona escribe `fm: approve {check} <motivo>` en el chat",
+  "gate.review.done": "revisado por {agent} en {at}",
+  "secrets.warn.write": "Aviso de Finite Monkey (la escritura se hizo): {found}. Un secreto pasado como argumento de línea de comandos aparece en ps y en docker inspect; la verificación TLS desactivada deja que cualquiera en el camino lea el tráfico. Lleva el valor a una variable de entorno o a un archivo de secreto y mantén el TLS verificado fuera de las pruebas.",
+  "gate.secrets.warning": "aviso: {rule} en {file}:{line}",
+  "doctor.secrets.remote_credential": "el remoto git {remotes} tiene una credencial en la URL, guardada en texto plano en .git/config",
+  "doctor.secrets.fix_remote_credential": "ejecuta `git remote set-url {remote} <url sin usuario:token@>`, usa un credential helper o SSH y rota el token",
+  "secrets.session.remote_credential": "el remoto git {remotes} tiene una credencial en la URL (texto plano en .git/config). Pide a la persona que ejecute `git remote set-url {remote} <url sin usuario:token@>` y rote el token; no imprimas la URL.",
+  "gate.require.callers": "ningún símbolo eliminado o renombrado sigue siendo llamado",
+  "gate.callers.none": "{count, plural, one {# definición eliminada} other {# definiciones eliminadas}}, ningún llamador quedó",
+  "gate.callers.open": "{name} ya no existe, pero se llama en {count, plural, one {# lugar} other {# lugares}}",
+  "gate.callers.at": "{name} llamado en {file}:{line}",
+  "gate.callers.warning": "solo aviso: {percent}% de los hallazgos de callers se liberaron con callers_ignore ({released} de {total}), por encima del techo de 5%",
+  "command.policy_false_positive.summary": "Registra un falso positivo de un guard en shadow para que no se promueva",
+  "policy.error.person_only": "Solo la persona puede registrar un falso positivo, y esto no parece su terminal (sin TTY, o dentro de Claude Code)",
+  "policy.false_positive.recorded": "Registrado para {guard}: {count, plural, one {# falso positivo} other {# falsos positivos}}; se queda en shadow hasta que fijes el modo en .finitemonkey/policy.yml."
 };
 
 // src/i18n/pt-BR.json
@@ -6484,7 +6832,26 @@ var pt_BR_default = {
   "history.pattern.no_verify": "{count, plural, one {# comando git} other {# comandos git}} com --no-verify",
   "history.pattern.force_push": "{count, plural, one {# push forçado} other {# pushes forçados}}",
   "history.pattern.test_skip": "{count, plural, one {# edição} other {# edições}} de teste que acrescentaram .skip, .only ou marcador de pular",
-  "history.estimate": "São estimativas por padrão de texto, não evidência; nada foi salvo e nada saiu desta máquina."
+  "history.estimate": "São estimativas por padrão de texto, não evidência; nada foi salvo e nada saiu desta máquina.",
+  "gate.require.review": "um subagente revisor leu a mudança no estado atual",
+  "gate.size.declared": "tamanho {effective}: {files, plural, one {# arquivo} other {# arquivos}}, {lines, plural, one {# linha} other {# linhas}}",
+  "gate.size.grew": "declarada {declared}, o diff a torna {effective}: {files, plural, one {# arquivo} other {# arquivos}}, {lines, plural, one {# linha} other {# linhas}}",
+  "gate.size.sensitive": "caminho sensível alterado: {file}",
+  "gate.review.missing": "nenhuma revisão do estado atual: rode um subagente revisor no diff, ou a pessoa escreve `fm: approve {check} <motivo>` no chat",
+  "gate.review.done": "revisado por {agent} em {at}",
+  "secrets.warn.write": "Aviso do Finite Monkey (a escrita foi feita): {found}. Segredo passado como argumento de linha de comando aparece no ps e no docker inspect; verificação TLS desligada deixa qualquer um no caminho ler o tráfego. Leve o valor para uma variável de ambiente ou um arquivo de segredo e mantenha o TLS verificado fora dos testes.",
+  "gate.secrets.warning": "aviso: {rule} em {file}:{line}",
+  "doctor.secrets.remote_credential": "o remoto git {remotes} tem uma credencial na URL, guardada em texto puro no .git/config",
+  "doctor.secrets.fix_remote_credential": "rode `git remote set-url {remote} <url sem usuario:token@>`, use um credential helper ou SSH e rotacione o token",
+  "secrets.session.remote_credential": "o remoto git {remotes} tem uma credencial na URL (texto puro no .git/config). Peça para a pessoa rodar `git remote set-url {remote} <url sem usuario:token@>` e rotacionar o token; não imprima a URL.",
+  "gate.require.callers": "nenhum símbolo removido ou renomeado continua sendo chamado",
+  "gate.callers.none": "{count, plural, one {# definição removida} other {# definições removidas}}, nenhum chamador sobrou",
+  "gate.callers.open": "{name} saiu, mas é chamado em {count, plural, one {# lugar} other {# lugares}}",
+  "gate.callers.at": "{name} chamado em {file}:{line}",
+  "gate.callers.warning": "só aviso: {percent}% dos achados de callers foram liberados com callers_ignore ({released} de {total}), acima do teto de 5%",
+  "command.policy_false_positive.summary": "Registra um falso positivo de um guard em shadow para ele não ser promovido",
+  "policy.error.person_only": "Só a pessoa pode registrar um falso positivo, e isto não parece o terminal dela (sem TTY, ou rodando dentro do Claude Code)",
+  "policy.false_positive.recorded": "Registrado para {guard}: {count, plural, one {# falso positivo} other {# falsos positivos}}; ele fica em shadow até você definir o modo em .finitemonkey/policy.yml."
 };
 
 // src/i18n/review.json
@@ -6998,7 +7365,26 @@ var review_default = {
     "history.pattern.no_verify": "machine",
     "history.pattern.force_push": "machine",
     "history.pattern.test_skip": "machine",
-    "history.estimate": "machine"
+    "history.estimate": "machine",
+    "gate.require.review": "machine",
+    "gate.size.declared": "machine",
+    "gate.size.grew": "machine",
+    "gate.size.sensitive": "machine",
+    "gate.review.missing": "machine",
+    "gate.review.done": "machine",
+    "secrets.warn.write": "machine",
+    "gate.secrets.warning": "machine",
+    "doctor.secrets.remote_credential": "machine",
+    "doctor.secrets.fix_remote_credential": "machine",
+    "secrets.session.remote_credential": "machine",
+    "gate.require.callers": "machine",
+    "gate.callers.none": "machine",
+    "gate.callers.open": "machine",
+    "gate.callers.at": "machine",
+    "gate.callers.warning": "machine",
+    "command.policy_false_positive.summary": "machine",
+    "policy.error.person_only": "machine",
+    "policy.false_positive.recorded": "machine"
   },
   es: {
     "command.init.summary": "machine",
@@ -7509,7 +7895,26 @@ var review_default = {
     "history.pattern.no_verify": "machine",
     "history.pattern.force_push": "machine",
     "history.pattern.test_skip": "machine",
-    "history.estimate": "machine"
+    "history.estimate": "machine",
+    "gate.require.review": "machine",
+    "gate.size.declared": "machine",
+    "gate.size.grew": "machine",
+    "gate.size.sensitive": "machine",
+    "gate.review.missing": "machine",
+    "gate.review.done": "machine",
+    "secrets.warn.write": "machine",
+    "gate.secrets.warning": "machine",
+    "doctor.secrets.remote_credential": "machine",
+    "doctor.secrets.fix_remote_credential": "machine",
+    "secrets.session.remote_credential": "machine",
+    "gate.require.callers": "machine",
+    "gate.callers.none": "machine",
+    "gate.callers.open": "machine",
+    "gate.callers.at": "machine",
+    "gate.callers.warning": "machine",
+    "command.policy_false_positive.summary": "machine",
+    "policy.error.person_only": "machine",
+    "policy.false_positive.recorded": "machine"
   }
 };
 
@@ -7632,7 +8037,7 @@ var buildReport = (input) => {
     );
     return fromEvidence(check2.id, check2.kind, entry2, hasStale(ledger, check2.id, treeHash2));
   });
-  const count3 = (status) => items.filter((item) => item.status === status).length;
+  const count4 = (status) => items.filter((item) => item.status === status).length;
   return {
     schema: GATE_SCHEMA,
     task: contract.id,
@@ -7643,7 +8048,7 @@ var buildReport = (input) => {
     source: input.source,
     contractEdited: input.contractEdited,
     verdict: verdictOf(items),
-    counts: { passed: count3("passed"), failed: count3("failed"), unverified: count3("unverified") },
+    counts: { passed: count4("passed"), failed: count4("failed"), unverified: count4("unverified") },
     items,
     decisionsNeeded: contract.decisionsNeeded,
     fastPath: input.fastPath
@@ -7767,6 +8172,277 @@ var preCompact = (input) => {
   return { kind: "allow" };
 };
 
+// src/gate/review.ts
+var REVIEWS_FILE = "reviews.json";
+var REVIEWER_AGENT = /(^|:)[\w-]*reviewer$/i;
+var KEEP = 50;
+var toReview = (value) => {
+  if (!isRecord(value)) return void 0;
+  const { treeHash: treeHash2, agent, at } = value;
+  return typeof treeHash2 === "string" && typeof agent === "string" && typeof at === "string" ? { treeHash: treeHash2, agent, at } : void 0;
+};
+var readReviews = (runtime, paths) => {
+  const raw = readJsonFile(runtime, paths.cache(REVIEWS_FILE))?.["reviews"];
+  return Array.isArray(raw) ? raw.flatMap((item) => {
+    const review2 = toReview(item);
+    return review2 === void 0 ? [] : [review2];
+  }) : [];
+};
+var recordReview = (runtime, paths, treeHash2, agent) => {
+  const reviews = [...readReviews(runtime, paths), { treeHash: treeHash2, agent, at: runtime.now() }].slice(-KEEP);
+  return writeJsonFile(runtime, paths.cache(REVIEWS_FILE), { reviews: reviews.map((review2) => ({ ...review2 })) }).ok;
+};
+
+// src/gate/callers/rate.ts
+var FLAGGED_EVENT = "callers.flagged";
+var RELEASED_EVENT = "callers.released";
+var MIN_SAMPLE = 20;
+var MAX_FALSE_POSITIVE = 0.05;
+var pairs = (record3) => {
+  const { task, names } = record3;
+  if (typeof task !== "string" || !Array.isArray(names)) return [];
+  return names.filter((name) => typeof name === "string").map((name) => `${task}\0${name}`);
+};
+var callersRate = (runtime, paths) => {
+  const text6 = runtime.readText(paths.log);
+  const flagged = /* @__PURE__ */ new Set();
+  const released2 = /* @__PURE__ */ new Set();
+  for (const line2 of text6.ok ? text6.value.split("\n") : []) {
+    const parsed = line2.trim() === "" ? void 0 : parseJsonObject(line2);
+    if (parsed === void 0 || !parsed.ok || !isRecord(parsed.value)) continue;
+    const event = parsed.value["event"];
+    const target = event === FLAGGED_EVENT ? flagged : event === RELEASED_EVENT ? released2 : void 0;
+    if (target !== void 0) for (const pair of pairs(parsed.value)) target.add(pair);
+  }
+  const total = (/* @__PURE__ */ new Set([...flagged, ...released2])).size;
+  const rate = total === 0 ? 0 : released2.size / total;
+  return {
+    flagged: total,
+    released: released2.size,
+    rate,
+    downgraded: total >= MIN_SAMPLE && rate > MAX_FALSE_POSITIVE
+  };
+};
+
+// src/gate/callers/scan.ts
+import { join as join16 } from "node:path";
+
+// src/gate/callers/imports.ts
+import { posix as posix2 } from "node:path";
+var JS_SPECIFIER = /(?:\bfrom\s*|\bimport\s*\(?\s*|\brequire\s*\(\s*)["']([^"']+)["']/g;
+var JS_EXTENSION = /\.(?:[cm]?[jt]sx?)$/;
+var stripModule = (path) => path.replace(JS_EXTENSION, "").replace(/\/index$/, "");
+var jsSpecifiers = (text6) => [...text6.matchAll(JS_SPECIFIER)].map((match) => match[1] ?? "");
+var jsImports = (callerPath, callerText, origin) => {
+  const target = stripModule(origin);
+  return jsSpecifiers(callerText).some((specifier) => {
+    if (specifier.startsWith(".")) {
+      return stripModule(posix2.normalize(posix2.join(posix2.dirname(callerPath), specifier))) === target;
+    }
+    const bare = stripModule(specifier.replace(/^[@~#]\//, ""));
+    return target === bare || target.endsWith(`/${bare}`);
+  });
+};
+var pyImports = (callerText, origin) => {
+  const stem = posix2.basename(origin).replace(/\.py$/, "");
+  const module = stem === "__init__" ? posix2.basename(posix2.dirname(origin)) : stem;
+  const word2 = new RegExp(`\\b${module}\\b`);
+  return callerText.split(/\r?\n/).some((line2) => /^\s*(?:from|import)\s/.test(line2) && word2.test(line2));
+};
+var goImports = (callerPath, callerText, origin) => {
+  const dir = posix2.dirname(origin);
+  if (posix2.dirname(callerPath) === dir) return true;
+  const last = posix2.basename(dir);
+  return new RegExp(`"[^"]*\\b${last}"`).test(callerText);
+};
+var importsOrigin = (language, callerPath, callerText, origins) => origins.some((origin) => {
+  if (callerPath === origin) return true;
+  switch (language.imports) {
+    case "none":
+      return true;
+    case "package":
+      return goImports(callerPath, callerText, origin);
+    case "module":
+      return language.id === "py" ? pyImports(callerText, origin) : jsImports(callerPath, callerText, origin);
+  }
+});
+
+// src/gate/callers/languages.ts
+import { extname } from "node:path";
+var JS_NAME = "[A-Za-z_$][\\w$]*";
+var LANGUAGES2 = [
+  {
+    id: "js",
+    extensions: [".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx", ".mts", ".cts"],
+    definitions: [
+      new RegExp(`^\\s*(?:export\\s+)?(?:default\\s+)?(?:async\\s+)?function\\s*\\*?\\s*(${JS_NAME})`),
+      new RegExp(`^\\s*(?:export\\s+)?(?:default\\s+)?(?:abstract\\s+)?class\\s+(${JS_NAME})`),
+      new RegExp(`^\\s*export\\s+(?:declare\\s+)?(?:const|let|var|enum|interface|type)\\s+(${JS_NAME})`),
+      new RegExp(
+        `^\\s+(?:public\\s+)?(?:static\\s+)?(?:async\\s+)?(${JS_NAME})\\s*\\([^)]*\\)\\s*(?::[^{=]+)?\\{\\s*$`
+      )
+    ],
+    imports: "module",
+    comment: /^\s*(?:\/\/|\/\*|\*)/
+  },
+  {
+    id: "py",
+    extensions: [".py"],
+    definitions: [/^\s*(?:async\s+)?def\s+([A-Za-z]\w*)/, /^\s*class\s+([A-Za-z]\w*)/],
+    imports: "module",
+    comment: /^\s*#/
+  },
+  {
+    id: "go",
+    extensions: [".go"],
+    definitions: [/^func\s+(?:\([^)]*\)\s*)?([A-Za-z]\w*)/, /^type\s+([A-Za-z]\w*)\s+(?:struct|interface)/],
+    imports: "package",
+    comment: /^\s*\/\//
+  },
+  {
+    id: "rb",
+    extensions: [".rb"],
+    definitions: [/^\s*def\s+(?:self\.)?([A-Za-z]\w*[?!]?)/, /^\s*(?:class|module)\s+([A-Z]\w*)/],
+    imports: "none",
+    comment: /^\s*#/
+  },
+  {
+    id: "rs",
+    extensions: [".rs"],
+    definitions: [
+      /^\s*(?:pub(?:\([^)]*\))?\s+)?(?:async\s+)?fn\s+([A-Za-z]\w*)/,
+      /^\s*(?:pub\s+)?(?:struct|enum|trait)\s+([A-Z]\w*)/
+    ],
+    imports: "none",
+    comment: /^\s*\/\//
+  }
+];
+var KEYWORDS = /* @__PURE__ */ new Set([
+  "if",
+  "for",
+  "while",
+  "switch",
+  "catch",
+  "function",
+  "return",
+  "constructor",
+  "with",
+  "do",
+  "else"
+]);
+var languageOf = (path) => {
+  const extension = extname(path).toLowerCase();
+  return LANGUAGES2.find((language) => language.extensions.includes(extension));
+};
+var definitionsIn = (language, text6) => {
+  const names = /* @__PURE__ */ new Set();
+  for (const line2 of text6.split(/\r?\n/)) {
+    for (const pattern of language.definitions) {
+      const name = pattern.exec(line2)?.[1];
+      if (name !== void 0 && !KEYWORDS.has(name)) names.add(name);
+    }
+  }
+  return names;
+};
+var definesName = (language, line2, name) => language.definitions.some((pattern) => pattern.exec(line2)?.[1] === name);
+
+// src/gate/callers/scan.ts
+var MAX_SYMBOLS = 200;
+var current = (runtime, root, path) => {
+  const text6 = runtime.readText(toAbsolutePath(join16(root, path)));
+  return text6.ok ? text6.value : "";
+};
+var keyOf = (language, name) => `${language.id}\0${name}`;
+var redefinedNames = (runtime, git, changes) => {
+  const keys = /* @__PURE__ */ new Set();
+  for (const change of changes) {
+    const language = languageOf(change.path);
+    if (language === void 0 || change.status === "D") continue;
+    for (const name of definitionsIn(language, current(runtime, git.cwd, change.path))) keys.add(keyOf(language, name));
+  }
+  return keys;
+};
+var removedSymbols = (runtime, git, base, changes) => {
+  const redefined = redefinedNames(runtime, git, changes);
+  const found = /* @__PURE__ */ new Map();
+  for (const change of changes) {
+    const language = languageOf(change.oldPath ?? change.path);
+    if (language === void 0 || change.status === "A") continue;
+    const before = definitionsIn(language, fileAt(git, base, change.oldPath ?? change.path) ?? "");
+    const origins = [change.path, ...change.oldPath === void 0 ? [] : [change.oldPath]];
+    for (const name of before) {
+      const key = keyOf(language, name);
+      if (redefined.has(key)) continue;
+      const prior = found.get(key);
+      found.set(key, { name, language, origins: [...prior?.origins ?? [], ...origins] });
+    }
+  }
+  return [...found.values()].slice(0, MAX_SYMBOLS);
+};
+var parseGrep = (output) => output.split("\n").filter((row) => row !== "").flatMap((row) => {
+  const [file = "", line2 = "", ...rest] = row.split("\0");
+  const number = Number(line2);
+  return file === "" || !Number.isInteger(number) ? [] : [{ file: toPosixPath(file), line: number, text: rest.join("\0") }];
+});
+var grep = (git, names) => {
+  if (names.length === 0) return [];
+  const patterns = names.flatMap((name) => ["-e", name]);
+  return parseGrep(
+    git.out(["grep", "-n", "-z", "-w", "-I", "--untracked", "--no-color", ...patterns, "--", ".", EXCLUDE_FM]) ?? ""
+  );
+};
+var mentions = (text6, name) => new RegExp(`(?<![\\w$])${name.replace(/[$?!]/g, "\\$&")}(?![\\w$])`).test(text6);
+var callSites = (runtime, git, symbols) => {
+  const hits = grep(git, [...new Set(symbols.map((symbol) => symbol.name))]);
+  const texts = /* @__PURE__ */ new Map();
+  const textOf4 = (file) => {
+    const cached2 = texts.get(file) ?? current(runtime, git.cwd, file);
+    texts.set(file, cached2);
+    return cached2;
+  };
+  return symbols.flatMap(
+    (symbol) => hits.filter((hit3) => languageOf(hit3.file)?.id === symbol.language.id && mentions(hit3.text, symbol.name)).filter((hit3) => !symbol.language.comment.test(hit3.text) && !definesName(symbol.language, hit3.text, symbol.name)).filter((hit3) => importsOrigin(symbol.language, hit3.file, textOf4(hit3.file), symbol.origins)).map((hit3) => ({ name: symbol.name, file: hit3.file, line: hit3.line }))
+  );
+};
+
+// src/gate/checks/callers.ts
+var MAX_SITES = 10;
+var byName = (sites) => {
+  const grouped = /* @__PURE__ */ new Map();
+  for (const site of sites) grouped.set(site.name, [...grouped.get(site.name) ?? [], site]);
+  return grouped;
+};
+var siteNotes = (open) => [
+  ...[...open].map(([name, sites]) => note("gate.callers.open", { name, count: sites.length })),
+  ...[...open.values()].flat().slice(0, MAX_SITES).map((site) => note("gate.callers.at", { name: site.name, file: site.file, line: site.line }))
+];
+var record = (ctx, event, names) => {
+  if (names.length > 0) logEvent(ctx.runtime, ctx.paths, event, { task: ctx.contract.id, names: [...names] });
+};
+var callersCheck = (_check, ctx) => {
+  const symbols = removedSymbols(ctx.runtime, ctx.git, ctx.base, ctx.changes);
+  const grouped = byName(callSites(ctx.runtime, ctx.git, symbols));
+  const ignore = new Set(ctx.contract.callersIgnore ?? []);
+  const open = new Map([...grouped].filter(([name]) => !ignore.has(name)));
+  record(
+    ctx,
+    RELEASED_EVENT,
+    [...grouped.keys()].filter((name) => ignore.has(name))
+  );
+  record(ctx, FLAGGED_EVENT, [...open.keys()]);
+  if (open.size === 0) return passed([note("gate.callers.none", { count: symbols.length })]);
+  const rate = callersRate(ctx.runtime, ctx.paths);
+  if (!rate.downgraded) return failed(siteNotes(open));
+  return passed([
+    note("gate.callers.warning", {
+      percent: Math.round(rate.rate * 100),
+      released: rate.released,
+      total: rate.flagged
+    }),
+    ...siteNotes(open)
+  ]);
+};
+
 // src/gate/test-summary.ts
 var ANSI2 = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
 var COUNTERS = [
@@ -7906,44 +8582,14 @@ var runShellCheck = (check2, run4, ctx) => {
 };
 var commandCheck = (check2, ctx) => check2.run === void 0 ? unverified("not_implemented") : runShellCheck(check2, check2.run, ctx);
 
-// src/gate/checks/diff.ts
-import { join as join13 } from "node:path";
-
-// src/core/glob.ts
-var escape = (char) => /[.+^${}()|[\]\\]/.test(char) ? `\\${char}` : char;
-var globToRegExp = (glob) => {
-  const pattern = glob.replace(/^\.\//, "");
-  let out = "";
-  for (let index = 0; index < pattern.length; index += 1) {
-    const char = pattern[index] ?? "";
-    if (char === "*" && pattern[index + 1] === "*") {
-      const slash = pattern[index + 2] === "/";
-      out += slash ? "(?:.*/)?" : ".*";
-      index += slash ? 2 : 1;
-    } else if (char === "*") out += "[^/]*";
-    else if (char === "?") out += "[^/]";
-    else out += escape(char);
-  }
-  return new RegExp(`^${out}${pattern.endsWith("/") ? ".*" : ""}$`);
-};
-var matchesAny = (path, globs) => {
-  const normalized = toPosixPath(path);
-  return globs.some((glob) => globToRegExp(glob).test(normalized));
-};
-
 // src/gate/checks/diff.ts
 var MAX_LISTED = 10;
-var untrackedLines = (ctx) => ctx.changes.filter((change) => change.status === "A").reduce((sum, change) => {
-  const text6 = ctx.runtime.readText(toAbsolutePath(join13(ctx.paths.root, change.path)));
-  return sum + (text6.ok ? text6.value.split("\n").length : 0);
-}, 0);
 var diffCheck = (_check, ctx) => {
   const { paths, diffBudget } = ctx.contract.scope;
   if (paths.length === 0 && diffBudget === void 0) return passed([note("gate.diff.no_scope")]);
   const outside = paths.length === 0 ? [] : ctx.changes.filter((change) => !matchesAny(change.path, paths));
-  const stat = numstat(ctx.git, ctx.base);
   const files = ctx.changes.length;
-  const lines3 = stat.lines + untrackedLines(ctx);
+  const lines3 = diffShape(ctx.runtime, ctx.git, ctx.base, ctx.changes).lines;
   const notes2 = [
     ...outside.slice(0, MAX_LISTED).map((change) => note("gate.diff.outside", { file: change.path })),
     ...diffBudget?.files !== void 0 && files > diffBudget.files ? [note("gate.diff.too_many_files", { count: files, max: diffBudget.files })] : [],
@@ -7993,13 +8639,13 @@ var manualCheck = (check2, ctx) => {
 };
 
 // src/gate/checks/placeholders.ts
-import { join as join14 } from "node:path";
+import { join as join17 } from "node:path";
 var MAX_LISTED2 = 10;
 var SKIP_FILES = /\.(md|mdx|txt|rst|lock|snap|svg|png|jpg|gif|json)$|(^|\/)(CHANGELOG|LICENSE)/i;
 var PLACEHOLDER = /\b(TODO|FIXME|XXX)\b|not implemented|NotImplementedError|unimplemented!|todo!\(|lorem ipsum/i;
 var findPlaceholders = (lines3) => lines3.filter((line2) => !isTestFile(line2.path) && !SKIP_FILES.test(line2.path) && PLACEHOLDER.test(line2.text));
 var untrackedAdded = (ctx) => ctx.changes.filter((change) => change.status === "A" && !SKIP_FILES.test(change.path)).flatMap((change) => {
-  const text6 = ctx.runtime.readText(toAbsolutePath(join14(ctx.paths.root, change.path)));
+  const text6 = ctx.runtime.readText(toAbsolutePath(join17(ctx.paths.root, change.path)));
   return text6.ok ? text6.value.split("\n").map((line2, index) => ({ path: change.path, line: index + 1, text: line2 })) : [];
 });
 var placeholdersCheck = (_check, ctx) => {
@@ -8511,10 +9157,10 @@ var hit = (rule, units, index, weight) => {
   return { rule, unit: index, line: unit?.line ?? 0, weight, excerpt: unit?.text ?? "" };
 };
 var isProse = (unit) => unit?.kind === "sentence";
-var samePara = (units, from, count3) => {
+var samePara = (units, from, count4) => {
   const first = units[from];
   if (!isProse(first)) return false;
-  return units.slice(from, from + count3).every((unit) => isProse(unit) && unit.paragraph === first.paragraph);
+  return units.slice(from, from + count4).every((unit) => isProse(unit) && unit.paragraph === first.paragraph);
 };
 var runsOf = (units, size, matches) => {
   const starts = [];
@@ -8571,13 +9217,13 @@ var emoji = (units) => units.flatMap(
 var dashes = (units) => {
   const perParagraph = /* @__PURE__ */ new Map();
   for (const unit of units) {
-    const count3 = unit.text.split("—").length - 1;
-    perParagraph.set(unit.paragraph, (perParagraph.get(unit.paragraph) ?? 0) + count3);
+    const count4 = unit.text.split("—").length - 1;
+    perParagraph.set(unit.paragraph, (perParagraph.get(unit.paragraph) ?? 0) + count4);
   }
-  return [...perParagraph].flatMap(([paragraph, count3]) => {
-    if (count3 === 0) return [];
+  return [...perParagraph].flatMap(([paragraph, count4]) => {
+    if (count4 === 0) return [];
     const index = units.findIndex((unit) => unit.paragraph === paragraph && unit.text.includes("—"));
-    const weight = count3 >= 2 ? STRUCTURE_WEIGHTS.dashSeries : STRUCTURE_WEIGHTS.dash;
+    const weight = count4 >= 2 ? STRUCTURE_WEIGHTS.dashSeries : STRUCTURE_WEIGHTS.dash;
     return [hit("em-dash-series", units, index, weight)];
   });
 };
@@ -8605,11 +9251,11 @@ var windowEnd = (units, from, size) => {
   return to;
 };
 var windowScore = (hits, window) => hits.filter((item) => item.unit >= window.from && item.unit <= window.to).reduce((sum, item) => sum + item.weight, 0);
-var hotWindows = (hits, units, size, threshold) => {
+var hotWindows = (hits, units, size, threshold2) => {
   const windows = [];
   for (let from = 0; from < units.length; from += 1) {
     const window = { from, to: windowEnd(units, from, size) };
-    if (windowScore(hits, window) >= threshold) windows.push(window);
+    if (windowScore(hits, window) >= threshold2) windows.push(window);
   }
   return windows;
 };
@@ -8636,10 +9282,10 @@ var byPosition = (left, right) => left.unit - right.unit || left.line - right.li
 var scoreProse = (text6, options = {}) => {
   const { units, allowed: allowed2 } = extractProse(text6);
   const size = options.window ?? DENSITY_WINDOW;
-  const threshold = options.threshold ?? DENSITY_THRESHOLD;
+  const threshold2 = options.threshold ?? DENSITY_THRESHOLD;
   const catalog = options.context === "record" ? [...phraseRules(), ...recordRules()] : phraseRules();
   const hits = [...phraseHits(units, catalog), ...structureHits(units)].sort(byPosition);
-  const spans = mergeSpans(hits, hotWindows(hits, units, size, threshold));
+  const spans = mergeSpans(hits, hotWindows(hits, units, size, threshold2));
   return { hits, spans, allowed: allowed2 };
 };
 var isFlagged = (report2) => report2.spans.length > 0;
@@ -8689,24 +9335,57 @@ var MAX_LISTED3 = 10;
 var rulesOf = (span) => [...new Set(span.hits.map((hit3) => hit3.rule))].join(", ");
 var proseOutcome = (status) => {
   if (!status.ok) return unverified("tool_missing", [note("gate.prose.unavailable")]);
-  const { files, flagged, blocking } = status.value;
-  const key = blocking ? "gate.prose.finding" : "gate.prose.warning";
+  const { files, flagged, blocking: blocking2 } = status.value;
+  const key = blocking2 ? "gate.prose.finding" : "gate.prose.warning";
   const notes2 = flagged.flatMap((item) => item.report.spans.map((span) => ({ file: item.file, span }))).slice(0, MAX_LISTED3).map(({ file, span }) => note(key, { file, line: span.startLine, rules: rulesOf(span) }));
   if (notes2.length === 0) return passed([note("gate.prose.clean", { count: files.length })]);
-  return blocking ? failed(notes2) : passed(notes2);
+  return blocking2 ? failed(notes2) : passed(notes2);
 };
 var proseCheck = (_check, ctx) => proseOutcome(proseGateStatus(ctx.runtime, ctx.paths.root));
 
+// src/gate/checks/review.ts
+var MAX_SENSITIVE = 5;
+var sizeNotes = (ctx) => {
+  const size = ctx.size;
+  if (size === void 0) return [];
+  return [
+    note(size.declared === size.effective ? "gate.size.declared" : "gate.size.grew", {
+      declared: size.declared,
+      effective: size.effective,
+      files: size.files,
+      lines: size.lines
+    }),
+    ...size.sensitive.slice(0, MAX_SENSITIVE).map((file) => note("gate.size.sensitive", { file }))
+  ];
+};
+var reviewCheck = (check2, ctx) => {
+  const review2 = readReviews(ctx.runtime, ctx.paths).findLast((entry2) => entry2.treeHash === ctx.treeHash);
+  if (review2 !== void 0) {
+    return { status: "passed", notes: [note("gate.review.done", { agent: review2.agent, at: review2.at })] };
+  }
+  const approval = readApprovals(ctx.runtime, ctx.paths).findLast(
+    (item) => item.task === ctx.contract.id && item.check === check2.id
+  );
+  if (approval !== void 0) {
+    return {
+      status: "passed",
+      notes: [note("gate.manual.approved", { at: approval.at, reason: approval.reason })],
+      releasedBy: `person@${approval.at}`
+    };
+  }
+  return failed([...sizeNotes(ctx), note("gate.review.missing", { check: check2.id })]);
+};
+
 // src/secrets/baseline.ts
-import { join as join15 } from "node:path";
+import { join as join18 } from "node:path";
 var BASELINE_FILE2 = ".finitemonkey/findings/baseline.json";
 var BASELINE_SCHEMA = "finitemonkey/secrets-baseline@1";
 var BASELINE_STATES = ["aceito", "falso-positivo"];
 var EXCEPTION_MAX_DAYS = 90;
 var EMPTY_BASELINE = { schema: BASELINE_SCHEMA, entries: [] };
-var baselinePath = (root) => toAbsolutePath(join15(root, BASELINE_FILE2));
-var text5 = (record2, key) => {
-  const value = record2[key];
+var baselinePath = (root) => toAbsolutePath(join18(root, BASELINE_FILE2));
+var text5 = (record3, key) => {
+  const value = record3[key];
   return typeof value === "string" && value !== "" ? value : void 0;
 };
 var stateOf = (value) => BASELINE_STATES.find((state) => state === value);
@@ -8764,22 +9443,22 @@ var withoutFixed = (baseline, fixed) => {
 var acceptedFingerprints = (baseline, now) => new Set(baseline.entries.filter((entry2) => entry2.expiresAt >= now).map((entry2) => entry2.fingerprint));
 
 // src/secrets/incidents.ts
-import { join as join16 } from "node:path";
+import { join as join19 } from "node:path";
 var INCIDENTS_DIR = ".finitemonkey/incidents";
 var INCIDENT_STATES = ["aberto", "exposicao-local", "rotacionado", "fechado"];
 var INCIDENT_SOURCES = ["tool-output", "prompt", "history", "scan"];
 var ID = /^inc-[0-9a-f]{12}$/;
 var incidentId = (rule, fingerprint) => `inc-${sha256Hex(`${rule}\0${fingerprint}`).slice(0, 12)}`;
-var incidentsDir = (root) => toAbsolutePath(join16(root, INCIDENTS_DIR));
-var incidentFile = (root, id) => toAbsolutePath(join16(incidentsDir(root), `${id}.json`));
-var pick2 = (options, value) => options.find((option) => option === value);
-var str2 = (record2, key) => {
-  const value = record2[key];
+var incidentsDir = (root) => toAbsolutePath(join19(root, INCIDENTS_DIR));
+var incidentFile = (root, id) => toAbsolutePath(join19(incidentsDir(root), `${id}.json`));
+var pick3 = (options, value) => options.find((option) => option === value);
+var str2 = (record3, key) => {
+  const value = record3[key];
   return typeof value === "string" ? value : void 0;
 };
 var parseEvent = (value) => {
   if (!isRecord(value)) return void 0;
-  const state = pick2(INCIDENT_STATES, value["state"]);
+  const state = pick3(INCIDENT_STATES, value["state"]);
   const at = str2(value, "at");
   const by = str2(value, "by");
   return state === void 0 || at === void 0 || by === void 0 ? void 0 : { state, at, by };
@@ -8792,12 +9471,12 @@ var parseHistory = (value) => {
 var parseIncident = (raw) => {
   const parsed = parseJsonObject(raw);
   if (!parsed.ok) return parsed;
-  const record2 = parsed.value;
-  const [id, rule, where, fingerprint, createdAt, updatedAt] = ["id", "rule", "where", "fingerprint", "createdAt", "updatedAt"].map((key) => str2(record2, key));
-  const state = pick2(INCIDENT_STATES, record2["state"]);
-  const source = pick2(INCIDENT_SOURCES, record2["source"]);
-  const history = parseHistory(record2["history"]);
-  const firstCommit = str2(record2, "firstCommit");
+  const record3 = parsed.value;
+  const [id, rule, where, fingerprint, createdAt, updatedAt] = ["id", "rule", "where", "fingerprint", "createdAt", "updatedAt"].map((key) => str2(record3, key));
+  const state = pick3(INCIDENT_STATES, record3["state"]);
+  const source = pick3(INCIDENT_SOURCES, record3["source"]);
+  const history = parseHistory(record3["history"]);
+  const firstCommit = str2(record3, "firstCommit");
   if (id === void 0 || !ID.test(id) || rule === void 0 || where === void 0) return reject("incomplete");
   if (fingerprint === void 0 || createdAt === void 0 || updatedAt === void 0) return reject("incomplete");
   if (state === void 0 || source === void 0 || history === void 0) return reject("incomplete");
@@ -8826,7 +9505,7 @@ var listIncidents = (runtime, root) => {
   return names.value.filter((name) => name.endsWith(".json")).map((name) => readIncident(runtime, root, name.slice(0, -".json".length))).flatMap((parsed) => parsed.ok ? [parsed.value] : []).sort((a, b) => a.createdAt.localeCompare(b.createdAt));
 };
 var saveIncident = (runtime, root, incident) => {
-  const ignore = runtime.writeText(toAbsolutePath(join16(incidentsDir(root), ".gitignore")), "*\n");
+  const ignore = runtime.writeText(toAbsolutePath(join19(incidentsDir(root), ".gitignore")), "*\n");
   if (!ignore.ok) return ignore;
   return runtime.writeText(incidentFile(root, incident.id), `${JSON.stringify(incident, null, 2)}
 `);
@@ -8873,7 +9552,7 @@ var moveIncident = (incident, to, now, by) => ({
 var isRotated = (incident) => incident.state === "rotacionado" || incident.state === "fechado";
 
 // src/secrets/scan.ts
-import { join as join17, relative as relative4 } from "node:path";
+import { join as join20, relative as relative4 } from "node:path";
 
 // src/secrets/located.ts
 var findingId = (ruleId, file, fingerprint) => `fm-${sha256Hex(`${ruleId}\0${file}\0${fingerprint}`).slice(0, 16)}`;
@@ -8973,7 +9652,7 @@ var listed2 = (runtime, root, target) => {
   const base = toAbsolutePath(target, root);
   const walked = runtime.walkFiles(base);
   if (!walked.ok) return walked;
-  return accept(walked.value.map((name) => toPosixPath(relative4(root, join17(base, toPosixPath(name))))));
+  return accept(walked.value.map((name) => toPosixPath(relative4(root, join20(base, toPosixPath(name))))));
 };
 var scanFile = (runtime, root, file) => {
   const text6 = runtime.readText(toAbsolutePath(file, root));
@@ -9033,15 +9712,17 @@ var secretsCheck = (_check, ctx) => {
   const status = secretsGateStatus(ctx.runtime, ctx.paths.root, sinceOf(ctx));
   if (!status.ok) return unverified("tool_missing", [note("gate.secrets.unavailable")]);
   const { findings, openIncidents } = status.value;
+  const warnings = findings.filter(isWarning).slice(0, MAX_LISTED4).map((finding3) => note("gate.secrets.warning", { file: finding3.file, line: finding3.line, rule: finding3.ruleId }));
   const notes2 = [
-    ...findings.slice(0, MAX_LISTED4).map((finding3) => note("gate.secrets.finding", { file: finding3.file, line: finding3.line, rule: finding3.ruleId })),
+    ...blocking(findings).slice(0, MAX_LISTED4).map((finding3) => note("gate.secrets.finding", { file: finding3.file, line: finding3.line, rule: finding3.ruleId })),
     ...openIncidents.slice(0, MAX_LISTED4).map((incident) => note("gate.secrets.incident", { id: incident.id, state: incident.state }))
   ];
-  return notes2.length > 0 ? failed(notes2) : passed([note("gate.secrets.clean")]);
+  if (notes2.length > 0) return failed([...notes2, ...warnings]);
+  return passed(warnings.length > 0 ? warnings : [note("gate.secrets.clean")]);
 };
 
 // src/gate/checks/tests.ts
-import { join as join18 } from "node:path";
+import { join as join21 } from "node:path";
 
 // src/guards/tests/tree.ts
 var outOfScope = (input, change) => input.testsProtected && input.scopePaths.length > 0 && change.status !== "A" && isTestFile(change.path) && !matchesAny(change.path, input.scopePaths) ? [{ kind: "out_of_scope", path: change.path }] : [];
@@ -9073,7 +9754,7 @@ var treeViolations = (ctx) => {
     changes: relevant,
     before: (path) => fileAt(ctx.git, ctx.base, path),
     after: (path) => {
-      const text6 = ctx.runtime.readText(toAbsolutePath(join18(ctx.paths.root, path)));
+      const text6 = ctx.runtime.readText(toAbsolutePath(join21(ctx.paths.root, path)));
       return text6.ok ? text6.value : void 0;
     },
     acceptedConfigs: ctx.trust.configs,
@@ -9094,7 +9775,7 @@ var testsCheck = (check2, ctx) => {
 };
 
 // src/git/tree.ts
-import { join as join19 } from "node:path";
+import { join as join22 } from "node:path";
 
 // src/secrets/guards/paths.ts
 var SAFE_ENV = /^\.env\.(?:example|sample|template|dist|defaults|schema)$/i;
@@ -9133,7 +9814,7 @@ var dropSensitive = (runtime, repo, env, options) => {
   return removed.ok ? accept(void 0) : removed;
 };
 var withTempIndex = (runtime, repo, options, work) => {
-  const path = toAbsolutePath(join19(repo.gitDir, `finitemonkey-${options.stamp}.index`));
+  const path = toAbsolutePath(join22(repo.gitDir, `finitemonkey-${options.stamp}.index`));
   const env = { GIT_INDEX_FILE: path, GIT_OPTIONAL_LOCKS: "0" };
   try {
     return work(env);
@@ -9366,112 +10047,26 @@ var entryOf2 = (kind, xy, path) => ({
   staged: kind !== "untracked" && !xy.startsWith("."),
   unstaged: kind === "untracked" || xy.charAt(1) !== "."
 });
-var afterFields = (record2, count3) => record2.split(" ").slice(count3).join(" ");
+var afterFields = (record3, count4) => record3.split(" ").slice(count4).join(" ");
 var parsePorcelainV2 = (stdout) => {
   const records = stdout.split("\0");
   const out = [];
   for (let index = 0; index < records.length; index += 1) {
-    const record2 = records[index] ?? "";
-    const xy = record2.split(" ")[1] ?? "..";
-    if (record2.startsWith("1 ")) out.push(entryOf2("changed", xy, afterFields(record2, PORCELAIN_FIELDS.ordinary)));
-    else if (record2.startsWith("2 ")) {
-      out.push(entryOf2("changed", xy, afterFields(record2, PORCELAIN_FIELDS.renamed)));
+    const record3 = records[index] ?? "";
+    const xy = record3.split(" ")[1] ?? "..";
+    if (record3.startsWith("1 ")) out.push(entryOf2("changed", xy, afterFields(record3, PORCELAIN_FIELDS.ordinary)));
+    else if (record3.startsWith("2 ")) {
+      out.push(entryOf2("changed", xy, afterFields(record3, PORCELAIN_FIELDS.renamed)));
       index += 1;
-    } else if (record2.startsWith("u ")) {
-      out.push(entryOf2("unmerged", xy, afterFields(record2, PORCELAIN_FIELDS.unmerged)));
-    } else if (record2.startsWith("? ")) out.push(entryOf2("untracked", "??", record2.slice(2)));
+    } else if (record3.startsWith("u ")) {
+      out.push(entryOf2("unmerged", xy, afterFields(record3, PORCELAIN_FIELDS.unmerged)));
+    } else if (record3.startsWith("? ")) out.push(entryOf2("untracked", "??", record3.slice(2)));
   }
   return out.filter((entry2) => entry2.path !== "" && !entry2.path.startsWith(STATE_PREFIX));
 };
 
-// src/git/project-config.ts
-import { join as join20 } from "node:path";
-var CONFIG_FILE3 = ".finitemonkey/config.yml";
-var unquote = (value) => value.trim().replace(/^(["'])(.*)\1$/s, "$2");
-var stripComment2 = (line2) => {
-  let quote;
-  for (let index = 0; index < line2.length; index += 1) {
-    const char = line2.charAt(index);
-    if (quote === void 0 && (char === '"' || char === "'")) quote = char;
-    else if (char === quote) quote = void 0;
-    else if (quote === void 0 && char === "#" && (index === 0 || /\s/.test(line2.charAt(index - 1)))) {
-      return line2.slice(0, index);
-    }
-  }
-  return line2;
-};
-var flowList = (value) => {
-  const trimmed = value.trim();
-  if (!trimmed.startsWith("[") || !trimmed.endsWith("]")) return void 0;
-  return trimmed.slice(1, -1).split(",").map(unquote).filter((item) => item !== "");
-};
-var keyValue = (body2) => {
-  const match = /^("[^"]*"|'[^']*'|[^:]+?)\s*:(?:\s+(.*))?$/.exec(body2);
-  if (match === null) return void 0;
-  return { key: unquote(match[1] ?? ""), value: match[2] ?? "" };
-};
-var addItem = (frame, item) => {
-  if (frame.key === void 0) return;
-  const parent = frame.tree[frame.key];
-  if (Array.isArray(parent)) parent.push(item);
-  else frame.tree[frame.key] = [item];
-};
-var placeLine = (stack, indent, body2) => {
-  while (stack.length > 1 && (stack[stack.length - 1]?.indent ?? 0) >= indent && !body2.startsWith("- ")) stack.pop();
-  const top = stack[stack.length - 1];
-  if (top === void 0) return;
-  if (body2.startsWith("- ")) {
-    addItem(top, unquote(body2.slice(2)));
-    return;
-  }
-  const pair = keyValue(body2);
-  if (pair === void 0) return;
-  const parentTree = top.key === void 0 ? top.tree : ensureTree(top.tree, top.key);
-  if (pair.value === "") {
-    stack.push({ indent, tree: parentTree, key: pair.key });
-    return;
-  }
-  parentTree[pair.key] = flowList(pair.value) ?? unquote(pair.value);
-};
-var ensureTree = (tree, key) => {
-  const existing = tree[key];
-  if (existing !== void 0 && typeof existing !== "string" && !Array.isArray(existing)) return existing;
-  const fresh3 = {};
-  tree[key] = fresh3;
-  return fresh3;
-};
-var parseConfigYaml = (text6) => {
-  const root = {};
-  const stack = [{ indent: -1, tree: root, key: void 0 }];
-  for (const raw of text6.split(/\r?\n/)) {
-    const line2 = stripComment2(raw).trimEnd();
-    if (line2.trim() === "" || line2.trim() === "---") continue;
-    const indent = line2.length - line2.trimStart().length;
-    placeLine(stack, indent, line2.trim());
-  }
-  return root;
-};
-var isTree = (node) => typeof node === "object" && !Array.isArray(node);
-var configAt = (tree, ...path) => path.reduce((node, key) => isTree(node) ? node[key] : void 0, tree);
-var configList = (tree, ...path) => {
-  const node = configAt(tree, ...path);
-  if (typeof node === "string") return node === "" ? [] : [node];
-  return Array.isArray(node) ? node.filter((item) => typeof item === "string") : [];
-};
-var configMap = (tree, ...path) => {
-  const node = configAt(tree, ...path);
-  if (!isTree(node)) return {};
-  return Object.fromEntries(
-    Object.entries(node).filter((entry2) => typeof entry2[1] === "string")
-  );
-};
-var loadProjectConfig = (runtime, root) => {
-  const text6 = runtime.readText(toAbsolutePath(join20(root, CONFIG_FILE3)));
-  return text6.ok ? parseConfigYaml(text6.value) : {};
-};
-
 // src/git/merge/dropped.ts
-import { join as join21 } from "node:path";
+import { join as join23 } from "node:path";
 
 // src/git/merge/lines.ts
 var normalizeLine = (line2) => line2.replace(/\r$/, "").trim().replace(/\s*,$/, "");
@@ -9551,7 +10146,7 @@ var parseDropped = (text6) => {
   return accept({ items, invalid });
 };
 var loadDropped = (runtime, root, file) => {
-  const path = toAbsolutePath(file ?? join21(root, DROPPED_FILE), root);
+  const path = toAbsolutePath(file ?? join23(root, DROPPED_FILE), root);
   const text6 = runtime.readText(path);
   if (!text6.ok) return file === void 0 ? accept({ items: [], invalid: [] }) : reject(`${file}: ${text6.error}`);
   return parseDropped(text6.value);
@@ -9561,7 +10156,7 @@ var isDropped = (finding3, items) => items.some(
 );
 
 // src/git/merge/generated.ts
-import { join as join22 } from "node:path";
+import { join as join24 } from "node:path";
 var LOCKFILES3 = /* @__PURE__ */ new Set([
   "package-lock.json",
   "npm-shrinkwrap.json",
@@ -9624,7 +10219,7 @@ var verifyGenerated = (runtime, repo, inputs, paths, generators) => {
   if (declared.length === 0) return accept([]);
   const commit2 = resultCommit(runtime, repo, inputs);
   if (!commit2.ok) return commit2;
-  const dir = join22(repo.gitDir, `finitemonkey-generate-${runtime.now().replace(/[:.]/g, "-")}`);
+  const dir = join24(repo.gitDir, `finitemonkey-generate-${runtime.now().replace(/[:.]/g, "-")}`);
   if (!runtime.git(["worktree", "add", "--detach", dir, commit2.value], repo.root).ok)
     return reject("could not check out the merge result");
   try {
@@ -9634,7 +10229,7 @@ var verifyGenerated = (runtime, repo, inputs, paths, generators) => {
     }
     return accept(
       declared.flatMap(({ path }) => {
-        const fresh3 = runtime.readText(toAbsolutePath(join22(dir, path)));
+        const fresh3 = runtime.readText(toAbsolutePath(join24(dir, path)));
         const merged = blobText(runtime, repo, commit2.value, path);
         if (fresh3.ok && fresh3.value === merged) return [];
         return [{ kind: "generated-differs", file: path, side: void 0, line: void 0, text: path, weak: false }];
@@ -9848,16 +10443,16 @@ var failed2 = (error, inputs) => ({
   generated: [],
   error
 });
-var keyOf = (diff) => (diff.status === "added" || diff.status === "copied" ? diff.newPath : diff.oldPath ?? diff.newPath) ?? "";
+var keyOf2 = (diff) => (diff.status === "added" || diff.status === "copied" ? diff.newPath : diff.oldPath ?? diff.newPath) ?? "";
 var pairsOf = (ours, theirs) => {
-  const keys = [...new Set([...ours, ...theirs].map(keyOf))].filter((key) => key !== "").sort();
+  const keys = [...new Set([...ours, ...theirs].map(keyOf2))].filter((key) => key !== "").sort();
   return keys.map((key) => ({
     key,
-    ours: ours.find((diff) => keyOf(diff) === key),
-    theirs: theirs.find((diff) => keyOf(diff) === key)
+    ours: ours.find((diff) => keyOf2(diff) === key),
+    theirs: theirs.find((diff) => keyOf2(diff) === key)
   }));
 };
-var contextOf2 = (runtime, repo, inputs, pairs) => {
+var contextOf2 = (runtime, repo, inputs, pairs2) => {
   const resultText = memoBy((path) => blobText(runtime, repo, inputs.result, path));
   const context = {
     runtime,
@@ -9865,7 +10460,7 @@ var contextOf2 = (runtime, repo, inputs, pairs) => {
     inputs,
     resultText,
     resultFiles: memo2(
-      () => pairs.flatMap((pair) => {
+      () => pairs2.flatMap((pair) => {
         const path = resultPathOf(context, pair);
         return path === void 0 ? [] : [path];
       })
@@ -9882,24 +10477,24 @@ var verifyMerge = (runtime, repo, options = {}) => {
   const theirs = sideDiff(runtime, repo, inputs.value.base, inputs.value.theirs);
   if (!ours.ok) return failed2(ours.error, inputs.value);
   if (!theirs.ok) return failed2(theirs.error, inputs.value);
-  const pairs = pairsOf(ours.value, theirs.value);
+  const pairs2 = pairsOf(ours.value, theirs.value);
   const generators = configMap(loadProjectConfig(runtime, repo.root), "merge", "generators");
   const generated = generatedPaths(
     runtime,
     repo,
-    pairs.map((pair) => pair.key),
+    pairs2.map((pair) => pair.key),
     generators
   );
   const context = contextOf2(
     runtime,
     repo,
     inputs.value,
-    pairs.filter((pair) => !generated.has(pair.key))
+    pairs2.filter((pair) => !generated.has(pair.key))
   );
   const regenerated = verifyGenerated(runtime, repo, inputs.value, [...generated], generators);
   if (!regenerated.ok) return failed2(regenerated.error, inputs.value);
   const all = [
-    ...pairs.filter((pair) => !generated.has(pair.key)).flatMap((pair) => verifyFile(context, pair)),
+    ...pairs2.filter((pair) => !generated.has(pair.key)).flatMap((pair) => verifyFile(context, pair)),
     ...regenerated.value
   ];
   const open = [...dropped.value.invalid, ...all.filter((item) => !isDropped(item, dropped.value.items))];
@@ -9911,7 +10506,7 @@ var verifyMerge = (runtime, repo, options = {}) => {
     theirs: inputs.value.theirs,
     result: inputs.value.result,
     bases: inputs.value.bases,
-    files: pairs.length,
+    files: pairs2.length,
     findings: open,
     justified: all.length - (open.length - dropped.value.invalid.length),
     generated: [...generated].sort(),
@@ -9920,19 +10515,19 @@ var verifyMerge = (runtime, repo, options = {}) => {
 };
 
 // src/git/ownership.ts
-import { join as join23 } from "node:path";
+import { join as join25 } from "node:path";
 var OWNERSHIP_DIR = ".finitemonkey/git";
 var ownerKey = (raw) => {
   const cleaned = (raw ?? "").replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 80);
   return cleaned === "" ? "unknown" : cleaned;
 };
-var fileOf = (repo, kind, owner) => toAbsolutePath(join23(repo.root, OWNERSHIP_DIR, kind, `${ownerKey(owner)}.json`));
+var fileOf = (repo, kind, owner) => toAbsolutePath(join25(repo.root, OWNERSHIP_DIR, kind, `${ownerKey(owner)}.json`));
 var readDirty = (runtime, root) => {
   const status = runtime.git(["status", "--porcelain=v2", "-z", "--untracked-files=all"], root);
   return status.ok ? parsePorcelainV2(status.stdout) : void 0;
 };
 var hashDirty = (runtime, repo, entries) => {
-  const present2 = entries.filter((entry2) => runtime.stat(toAbsolutePath(join23(repo.root, entry2.path)))?.kind === "file");
+  const present2 = entries.filter((entry2) => runtime.stat(toAbsolutePath(join25(repo.root, entry2.path)))?.kind === "file");
   const hashed = present2.length === 0 ? void 0 : runtime.gitWith(["hash-object", "--stdin-paths"], repo.root, {
     input: `${present2.map((entry2) => entry2.path).join("\n")}
 `
@@ -10184,7 +10779,9 @@ var DEFAULT_CHECKS = {
   secrets: secretsCheck,
   prose: proseCheck,
   worktree: worktreeCheck,
-  merge: mergeCheck
+  merge: mergeCheck,
+  review: reviewCheck,
+  callers: callersCheck
 };
 
 // src/gate/run.ts
@@ -10364,10 +10961,21 @@ var isOwnWorktree = (input) => {
   const main2 = findRepoRoot(runtime, input.cwd);
   return front !== void 0 && main2 !== void 0 && front !== main2;
 };
-var subagentStopGate = (input) => isOwnWorktree(input) ? stopGate(input) : { kind: "allow" };
+var noteReview = (input) => {
+  const agent = textField(input.payload.raw, "agent_type") ?? "";
+  if (!REVIEWER_AGENT.test(agent)) return;
+  const root = findRepoRoot(input.runtime, sessionCwd(input));
+  if (root === void 0) return;
+  const tree = treeHash(gitAt(input.runtime, root));
+  if (tree !== void 0) recordReview(input.runtime, fmPaths(root), tree, agent);
+};
+var subagentStopGate = (input) => {
+  noteReview(input);
+  return isOwnWorktree(input) ? stopGate(input) : { kind: "allow" };
+};
 
 // src/gate/hooks/subagent.ts
-import { join as join24 } from "node:path";
+import { join as join26 } from "node:path";
 var NO_CONTRACT_AGENTS = /(^|:)(reviewer|verifier|explore|plan|claude-code-guide|statusline-setup)$/i;
 var KNOWN_KINDS = /* @__PURE__ */ new Set([
   "command",
@@ -10380,7 +10988,9 @@ var KNOWN_KINDS = /* @__PURE__ */ new Set([
   "secrets",
   "prose",
   "worktree",
-  "merge"
+  "merge",
+  "review",
+  "callers"
 ]);
 var requirementText = (t, check2) => {
   const key = `gate.require.${check2.kind}`;
@@ -10401,12 +11011,12 @@ var subagentStart = (input) => {
   const active = readState(runtime, paths).active;
   if (active === void 0) return { kind: "allow" };
   const disk = (relative9) => {
-    const text6 = runtime.readText(toAbsolutePath(join24(paths.root, relative9)));
+    const text6 = runtime.readText(toAbsolutePath(join26(paths.root, relative9)));
     return text6.ok ? text6.value : void 0;
   };
   const loaded = loadTask(runtime, paths, { disk, base: () => void 0 }, active);
   if (!loaded.ok) return { kind: "allow" };
-  const briefing = runtime.stat(toAbsolutePath(join24(paths.dir, "briefing.md"))) !== void 0;
+  const briefing = runtime.stat(toAbsolutePath(join26(paths.dir, "briefing.md"))) !== void 0;
   return { kind: "allow", output: contextOutput("SubagentStart", contractFacts(t, loaded.value.contract, briefing)) };
 };
 
@@ -10423,7 +11033,7 @@ var PORTAO_HANDLERS = {
 };
 
 // src/prod/guard.ts
-import { join as join26 } from "node:path";
+import { join as join28 } from "node:path";
 
 // src/git/command-text.ts
 var MAX_SHOWN = 160;
@@ -10765,7 +11375,7 @@ var remoteHostsOf = (command) => {
 };
 
 // src/prod/targets.ts
-import { join as join25 } from "node:path";
+import { join as join27 } from "node:path";
 var DEPLOY_FILES = [
   "deploy.sh",
   "scripts/deploy.sh",
@@ -10789,12 +11399,12 @@ var hostsInText = (text6) => {
   return [...urls, ...keyed, ...commands].filter((host) => host !== "" && !host.includes("$"));
 };
 var workflowFiles = (runtime, root) => {
-  const listed4 = runtime.listDir(toAbsolutePath(join25(root, ".github", "workflows")));
+  const listed4 = runtime.listDir(toAbsolutePath(join27(root, ".github", "workflows")));
   if (!listed4.ok) return [];
   return listed4.value.filter((name) => /deploy/i.test(name) && /\.ya?ml$/i.test(name)).map((name) => `.github/workflows/${name}`);
 };
 var detectedHosts = (runtime, root, files) => files.flatMap((file) => {
-  const text6 = runtime.readText(toAbsolutePath(join25(root, file)));
+  const text6 = runtime.readText(toAbsolutePath(join27(root, file)));
   return text6.ok ? hostsInText(text6.value) : [];
 });
 var loadProdTargets = (runtime, root, config) => {
@@ -10806,7 +11416,7 @@ var loadProdTargets = (runtime, root, config) => {
     ...detectedHosts(runtime, root, deployFiles)
   ];
   const declaredDeploy = configAt(config, "prod", "deploy");
-  const existing = deployFiles.find((file) => runtime.stat(toAbsolutePath(join25(root, file))) !== void 0);
+  const existing = deployFiles.find((file) => runtime.stat(toAbsolutePath(join27(root, file))) !== void 0);
   return {
     hosts: new Set(hosts.map(hostKey).filter((host) => host !== "")),
     kubeContexts: configList(config, "prod", "kube_contexts"),
@@ -10983,8 +11593,8 @@ var recordEvidence = (runtime, root, owner, reads) => {
     ] : []
   );
   if (lines3.length === 0) return;
-  const path = toAbsolutePath(join26(root, EVIDENCE_FILE));
-  runtime.mkdir(toAbsolutePath(join26(root, ".finitemonkey")));
+  const path = toAbsolutePath(join28(root, EVIDENCE_FILE));
+  runtime.mkdir(toAbsolutePath(join28(root, ".finitemonkey")));
   const before = runtime.readText(path);
   const text6 = before.ok ? before.value : "";
   runtime.writeAtomic(path, `${text6}${text6 === "" || text6.endsWith("\n") ? "" : "\n"}${lines3.join("\n")}
@@ -11086,7 +11696,7 @@ var withAlias = (invocation, expansion) => ({
 });
 
 // src/git/path-key.ts
-import { posix as posix2 } from "node:path";
+import { posix as posix3 } from "node:path";
 var WSL_MOUNT3 = /^\/mnt\/([a-zA-Z])(\/|$)/;
 var DRIVE = /^([a-zA-Z]):(\/|$)/;
 var pathKey = (path) => {
@@ -11095,7 +11705,7 @@ var pathKey = (path) => {
     (_match, letter, slash) => `${letter}:${slash || "/"}`
   );
   const drive = DRIVE.exec(posixPath);
-  const normalized = posix2.normalize(drive === null ? posixPath : posixPath.slice(2) || "/");
+  const normalized = posix3.normalize(drive === null ? posixPath : posixPath.slice(2) || "/");
   const trimmed = normalized.length > 1 ? normalized.replace(/\/+$/, "") : normalized;
   return drive === null ? trimmed : `${(drive[1] ?? "").toLowerCase()}:${trimmed}`.toLowerCase();
 };
@@ -11111,15 +11721,15 @@ var isRootLike = (path, home) => {
   if (key === "/" || /^[a-z]:\/?$/.test(key)) return true;
   return home !== void 0 && home !== "" && key === pathKey(home);
 };
-var resolveFrom = (base, ...parts) => parts.reduce((current, part2) => {
-  if (part2 === void 0 || part2 === "") return current;
+var resolveFrom = (base, ...parts) => parts.reduce((current2, part2) => {
+  if (part2 === void 0 || part2 === "") return current2;
   const next2 = toPosixPath(part2);
   if (next2.startsWith("/") || DRIVE.test(next2)) return next2;
-  return posix2.join(toPosixPath(current), next2);
+  return posix3.join(toPosixPath(current2), next2);
 }, toPosixPath(base));
 
 // src/git/pathspec.ts
-import { posix as posix3 } from "node:path";
+import { posix as posix4 } from "node:path";
 var MAGIC = /^:(?:\(([^)]*)\)|([!^/]*))(.*)$/s;
 var GLOB = /[*?[]/;
 var specOf = (raw, prefix) => {
@@ -11129,7 +11739,7 @@ var specOf = (raw, prefix) => {
   const rest = magic === null ? posixRaw : magic[3] ?? "";
   const exclude = /(?:^|,)exclude(?:,|$)|[!^]/.test(words);
   const top = /(?:^|,)top(?:,|$)|\//.test(words);
-  const joined = posix3.normalize(top ? rest : posix3.join(prefix === "" ? "." : prefix, rest));
+  const joined = posix4.normalize(top ? rest : posix4.join(prefix === "" ? "." : prefix, rest));
   return { pattern: joined === "./" ? "." : joined.replace(/\/$/, ""), exclude };
 };
 var globRegex3 = (pattern) => {
@@ -11162,7 +11772,7 @@ var discard = (op, scope2, pathspecs = []) => ({
   discard: { scope: scope2, pathspecs }
 });
 var SEVERITY = { pass: 0, snapshot: 1, discard: 2, block: 3 };
-var worst = (verdicts) => verdicts.reduce((current, next2) => SEVERITY[next2.kind] > SEVERITY[current.kind] ? next2 : current, PASS);
+var worst = (verdicts) => verdicts.reduce((current2, next2) => SEVERITY[next2.kind] > SEVERITY[current2.kind] ? next2 : current2, PASS);
 
 // src/git/options.ts
 var canonical = (name, spec2) => {
@@ -11523,24 +12133,24 @@ var branchName = (ref) => {
   if (ref.startsWith("refs/tags/")) return void 0;
   return ref.replace(/^refs\/heads\//, "");
 };
-var refspecTarget = (refspec, current) => {
+var refspecTarget = (refspec, current2) => {
   const plain = refspec.replace(/^\+/, "");
   const colon = plain.indexOf(":");
   const destination = colon < 0 ? plain : plain.slice(colon + 1);
-  if (destination === "HEAD" || colon < 0 && plain === "HEAD") return current;
+  if (destination === "HEAD" || colon < 0 && plain === "HEAD") return current2;
   if (destination === "" || destination.startsWith("refs/tags/")) return void 0;
   return branchName(destination);
 };
 var pushDestinations = (parsed, facts) => {
   if (hasAny(parsed, "--all", "--branches", "--mirror")) return "all";
   const refspecs = parsed.positionals.slice(1).filter((refspec) => refspec !== ":");
-  const current = facts.currentBranch();
+  const current2 = facts.currentBranch();
   if (refspecs.length === 0) {
-    if (hasAny(parsed, "--tags") || current === void 0) return [];
-    return [facts.upstream(current)?.branch ?? current];
+    if (hasAny(parsed, "--tags") || current2 === void 0) return [];
+    return [facts.upstream(current2)?.branch ?? current2];
   }
   return refspecs.flatMap((refspec) => {
-    const target = refspecTarget(refspec, current);
+    const target = refspecTarget(refspec, current2);
     return target === void 0 ? [] : [target];
   });
 };
@@ -11548,10 +12158,10 @@ var leaseVerdict = (parsed, facts) => {
   const leases = valuesOf(parsed, "--force-with-lease");
   const explicit = leases.length > 0 && leases.every((lease) => /^[^:]+:.+$/.test(lease));
   if (!explicit || !hasAny(parsed, "--force-if-includes")) return block2("force-push", "--force-with-lease");
-  const current = facts.currentBranch();
+  const current2 = facts.currentBranch();
   const leased = leases.map((lease) => branchName(lease.slice(0, lease.indexOf(":"))));
   const destinations = pushDestinations(parsed, facts);
-  const own = current !== void 0 && !facts.isProtected(current) && leased.every((name) => name === current) && destinations !== "all" && destinations.every((name) => name === current);
+  const own = current2 !== void 0 && !facts.isProtected(current2) && leased.every((name) => name === current2) && destinations !== "all" && destinations.every((name) => name === current2);
   return own ? PASS : block2("lease-not-own", leased.join(", "));
 };
 var pushVerdict = (invocation, facts) => {
@@ -11574,8 +12184,8 @@ var LEAVES = /* @__PURE__ */ new Set(["--abort", "--quit", "--skip", "--dry-run"
 var commitVerdict = (invocation, facts) => {
   if (invocation.args.some((arg) => LEAVES.has(arg))) return PASS;
   if (invocation.subcommand === "rebase") return PASS;
-  const current = facts.currentBranch();
-  return current !== void 0 && facts.isProtected(current) ? block2("protected-commit", current) : PASS;
+  const current2 = facts.currentBranch();
+  return current2 !== void 0 && facts.isProtected(current2) ? block2("protected-commit", current2) : PASS;
 };
 var pushVerdict2 = (invocation, facts) => {
   const parsed = parseOptions(invocation.args, PUSH_OPTIONS);
@@ -11796,33 +12406,33 @@ var listWorktrees = (runtime, cwd) => {
 };
 
 // src/git/journal.ts
-import { join as join27 } from "node:path";
+import { join as join29 } from "node:path";
 var JOURNAL_FILE = ".finitemonkey/git-journal.jsonl";
 var JOURNAL_SCHEMA = "finitemonkey/git-journal@1";
-var journalPath = (root) => toAbsolutePath(join27(root, JOURNAL_FILE));
+var journalPath = (root) => toAbsolutePath(join29(root, JOURNAL_FILE));
 var headsOf = (value) => isRecord(value) ? Object.fromEntries(
   Object.entries(value).filter((entry2) => typeof entry2[1] === "string")
 ) : {};
 var parseJournalLine = (line2) => {
   const parsed = parseJsonObject(line2);
   if (!parsed.ok) return void 0;
-  const record2 = parsed.value;
-  const ref = optionalString(record2, "ref");
-  const commit2 = optionalString(record2, "commit");
-  const at = optionalString(record2, "at");
+  const record3 = parsed.value;
+  const ref = optionalString(record3, "ref");
+  const commit2 = optionalString(record3, "commit");
+  const at = optionalString(record3, "at");
   if (ref === void 0 || commit2 === void 0 || at === void 0) return void 0;
   return {
     schema: JOURNAL_SCHEMA,
     at,
-    op: optionalString(record2, "op") ?? "",
+    op: optionalString(record3, "op") ?? "",
     ref,
     commit: commit2,
-    head: optionalString(record2, "head"),
-    branch: optionalString(record2, "branch"),
-    index: optionalString(record2, "index"),
-    owner: optionalString(record2, "owner"),
-    command: optionalString(record2, "command"),
-    heads: headsOf(record2["heads"])
+    head: optionalString(record3, "head"),
+    branch: optionalString(record3, "branch"),
+    index: optionalString(record3, "index"),
+    owner: optionalString(record3, "owner"),
+    command: optionalString(record3, "command"),
+    heads: headsOf(record3["heads"])
   };
 };
 var readJournal = (runtime, root) => {
@@ -11835,7 +12445,7 @@ var readJournal = (runtime, root) => {
 };
 var appendJournal = (runtime, root, entry2) => {
   const path = journalPath(root);
-  const made = runtime.mkdir(toAbsolutePath(join27(root, ".finitemonkey")));
+  const made = runtime.mkdir(toAbsolutePath(join29(root, ".finitemonkey")));
   if (!made.ok) return made;
   const previous = runtime.readText(path);
   const before = previous.ok ? previous.value : "";
@@ -12077,6 +12687,83 @@ var GIT_HANDLERS = {
   PostToolUse: [gitPostToolUse]
 };
 
+// src/policy/guards.ts
+var SHADOW_FILE = "shadow.json";
+var numberOf = (value) => typeof value === "number" && Number.isInteger(value) ? value : 0;
+var readShadow = (runtime, paths) => {
+  const text6 = runtime.readText(paths.cache(SHADOW_FILE));
+  const parsed = text6.ok ? parseJsonObject(text6.value) : void 0;
+  if (parsed?.ok !== true) return {};
+  return Object.fromEntries(
+    Object.entries(parsed.value).flatMap(
+      ([id, value]) => isRecord(value) ? [
+        [
+          id,
+          {
+            firings: numberOf(value["firings"]),
+            falsePositives: numberOf(value["falsePositives"]),
+            promoted: value["promoted"] === true
+          }
+        ]
+      ] : []
+    )
+  );
+};
+var writeShadow = (runtime, paths, state) => {
+  runtime.writeText(paths.cache(SHADOW_FILE), `${JSON.stringify(state, null, 2)}
+`);
+};
+var modeOf2 = (set, policy, shadow) => {
+  if (set.damage) return "active";
+  const chosen = policy.guards[set.id];
+  if (chosen !== void 0) return chosen;
+  if (!policy.exists) return "active";
+  return shadow[set.id]?.promoted === true ? "active" : "shadow";
+};
+var recordShadow = (input, paths, set, policy, reason) => {
+  const { runtime } = input;
+  const state = readShadow(runtime, paths);
+  const before = state[set.id] ?? { firings: 0, falsePositives: 0, promoted: false };
+  const firings = before.firings + 1;
+  const promoted = !before.promoted && firings >= policy.promoteAfter && before.falsePositives === 0;
+  writeShadow(runtime, paths, { ...state, [set.id]: { ...before, firings, promoted: before.promoted || promoted } });
+  logEvent(runtime, paths, "guard_shadow", {
+    guard: set.id,
+    hook: input.event,
+    tool: toolName2(input.payload),
+    wouldHave: "block",
+    reason
+  });
+  if (promoted) {
+    logEvent(runtime, paths, "guard_promoted", {
+      guard: set.id,
+      firings,
+      falsePositives: before.falsePositives,
+      promoteAfter: policy.promoteAfter
+    });
+  }
+};
+var governed = (set, handler) => async (input) => {
+  const paths = projectPaths(input);
+  if (paths === void 0) return handler(input);
+  const policy = loadPolicy(input.runtime, paths.root);
+  const mode = modeOf2(set, policy, readShadow(input.runtime, paths));
+  if (mode === "off") return { kind: "allow" };
+  const decision = await handler(input);
+  if (mode === "active" || decision.kind !== "block") return decision;
+  recordShadow(input, paths, set, policy, decision.reason);
+  return { kind: "allow" };
+};
+var withPolicy = (set) => {
+  if (set.damage) return set.handlers;
+  const wrapped = {};
+  for (const event of HOOK_EVENTS) {
+    const list4 = set.handlers[event];
+    if (list4 !== void 0) wrapped[event] = list4.map((handler) => governed(set, handler));
+  }
+  return wrapped;
+};
+
 // src/prose/marker-guard.ts
 import { relative as relative6 } from "node:path";
 
@@ -12337,10 +13024,10 @@ var textOf2 = (input, found) => {
   }
   return accept(parts.join("\n\n"));
 };
-var decisionFor = (input, found, blocking) => {
+var decisionFor = (input, found, blocking2) => {
   const text6 = textOf2(input, found);
   if (!text6.ok) {
-    return blocking ? { kind: "block", reason: input.t("prose.block.unreadable", { ...text6.error }) } : void 0;
+    return blocking2 ? { kind: "block", reason: input.t("prose.block.unreadable", { ...text6.error }) } : void 0;
   }
   const report2 = scoreProse(text6.value, { context: "record" });
   if (report2.allowed || report2.spans.length === 0) return void 0;
@@ -12349,7 +13036,7 @@ var decisionFor = (input, found, blocking) => {
     spans: describeSpans(input.t, report2.spans),
     fixes: describeFixes(input.t, report2.spans)
   };
-  if (blocking) return { kind: "block", reason: input.t("prose.block.command", params2) };
+  if (blocking2) return { kind: "block", reason: input.t("prose.block.command", params2) };
   const additionalContext = `finitemonkey: ${input.t("prose.warn.command", params2)}`;
   return { kind: "allow", output: { hookSpecificOutput: { hookEventName: "PreToolUse", additionalContext } } };
 };
@@ -12357,9 +13044,9 @@ var proseCommandGuard = (input) => {
   if (!SHELLS3.has(toolName2(input.payload))) return ALLOW4;
   const found = proseInCommand(optionalString(toolInput2(input.payload), "command") ?? "");
   if (found.length === 0) return ALLOW4;
-  const blocking = projectPreset(input.runtime, projectRoot(input)) === "gabriel";
+  const blocking2 = projectPreset(input.runtime, projectRoot(input)) === "gabriel";
   for (const item of found) {
-    const decision = decisionFor(input, item, blocking);
+    const decision = decisionFor(input, item, blocking2);
     if (decision !== void 0) return decision;
   }
   return ALLOW4;
@@ -12386,7 +13073,7 @@ var liveFindings = (input, texts) => {
   const accepted2 = acceptedFingerprints(baseline.ok ? baseline.value : EMPTY_BASELINE, input.runtime.now());
   return texts.flatMap((text6) => scanText(text6, { rules: CREDENTIAL_RULES })).filter((finding3) => !accepted2.has(finding3.fingerprint));
 };
-var record = (input, findings, draft, where) => {
+var record2 = (input, findings, draft, where) => {
   const ids2 = findings.map((finding3) => {
     const saved = recordIncident(
       input.runtime,
@@ -12402,7 +13089,7 @@ var secretsUserPromptSubmit = (input) => {
   const prompt = optionalString(input.payload.raw, "prompt") ?? "";
   const findings = liveFindings(input, [prompt]);
   if (findings.length === 0) return { kind: "allow" };
-  const incident = record(input, findings, { source: "prompt", state: "exposicao-local" }, "prompt");
+  const incident = record2(input, findings, { source: "prompt", state: "exposicao-local" }, "prompt");
   const items = findings.map((finding3) => ({ ruleId: finding3.ruleId, where: lineWhere(input.t, finding3) }));
   return {
     kind: "block",
@@ -12413,7 +13100,7 @@ var secretsPostToolUse = (input) => {
   const findings = liveFindings(input, stringLeaves(input.payload.raw["tool_response"]));
   if (findings.length === 0) return { kind: "allow" };
   const tool = toolName2(input.payload) || "tool";
-  const incident = record(input, findings, { source: "tool-output", state: "aberto" }, `tool-output:${tool}`);
+  const incident = record2(input, findings, { source: "tool-output", state: "aberto" }, `tool-output:${tool}`);
   const items = findings.map((finding3) => ({ ruleId: finding3.ruleId, where: lineWhere(input.t, finding3) }));
   const context = input.t("secrets.post.context", { tool, found: describeFindings(input.t, items), incident });
   return {
@@ -12523,11 +13210,24 @@ var relativeFile = (cwd, file) => {
   const rel = relative7(cwd, file).split("\\").join("/");
   return rel.startsWith("..") || rel === "" ? file : rel;
 };
+var warningDecision = (t, warnings) => {
+  if (warnings.length === 0) return ALLOW5;
+  const context = t("secrets.warn.write", { found: describeFindings(t, warnings) });
+  return { kind: "allow", output: { hookSpecificOutput: { hookEventName: "PreToolUse", additionalContext: context } } };
+};
 var writeDecision = (input, tool) => {
   const { t } = input;
+  const warnings = [];
   for (const written of writtenTexts(tool, toolInput2(input.payload))) {
     const file = relativeFile(input.cwd, written.file);
-    const found = scanText(written.text, { path: file });
+    const all = scanText(written.text, { path: file });
+    warnings.push(
+      ...all.filter(isWarning).map((finding3) => ({
+        ruleId: finding3.ruleId,
+        where: t("secrets.where.file", { file, line: finding3.line, column: finding3.column })
+      }))
+    );
+    const found = blocking(all);
     if (found.length === 0) continue;
     const items = found.map((finding3) => ({
       ruleId: finding3.ruleId,
@@ -12535,7 +13235,7 @@ var writeDecision = (input, tool) => {
     }));
     return { kind: "block", reason: t("secrets.block.write", { file, found: describeFindings(t, items) }) };
   }
-  return ALLOW5;
+  return warningDecision(t, warnings);
 };
 var bashMessage = (t, finding3) => {
   switch (finding3.kind) {
@@ -12549,8 +13249,9 @@ var bashMessage = (t, finding3) => {
 };
 var commitDecision = (input, includeUnstaged) => {
   const staged = scanStaged(input.runtime, input.cwd, includeUnstaged);
-  if (!staged.ok || staged.value.length === 0) return ALLOW5;
-  const items = staged.value.map((finding3) => ({
+  const found = staged.ok ? blocking(staged.value) : [];
+  if (found.length === 0) return ALLOW5;
+  const items = found.map((finding3) => ({
     ruleId: finding3.ruleId,
     where: input.t("secrets.where.file", { file: finding3.file, line: finding3.line, column: finding3.column })
   }));
@@ -12562,7 +13263,7 @@ var bashDecision = (input) => {
   const segments = segmentsOf(command);
   const [first] = bashFindings(command, segments);
   if (first !== void 0) return { kind: "block", reason: bashMessage(input.t, first) };
-  const found = scanText(command);
+  const found = blocking(scanText(command));
   if (found.length > 0) {
     const items = found.map((finding3) => ({ ruleId: finding3.ruleId, where: lineWhere(input.t, finding3) }));
     return { kind: "block", reason: input.t("secrets.block.bash", { found: describeFindings(input.t, items) }) };
@@ -12587,6 +13288,44 @@ var secretsPreToolUse = (input) => {
   return ALLOW5;
 };
 
+// src/secrets/remotes.ts
+var USER_AND_SECRET = /^[a-z][a-z0-9+.-]*:\/\/[^\s/@:]+:[^\s/@]+@/i;
+var USERINFO = /^[a-z][a-z0-9+.-]*:\/\/(?<user>[^\s/@]+)@/i;
+var hasCredential = (url) => {
+  if (USER_AND_SECRET.test(url)) return true;
+  const user = USERINFO.exec(url)?.groups?.["user"];
+  return user !== void 0 && scanText(user, { rules: CREDENTIAL_RULES }).length > 0;
+};
+var parseRemotes = (output) => {
+  const remotes = /* @__PURE__ */ new Map();
+  for (const line2 of output.split(/\r?\n/)) {
+    const [name, url] = line2.trim().split(/\s+/);
+    if (name === void 0 || url === void 0 || name === "") continue;
+    remotes.set(name, [...remotes.get(name) ?? [], url]);
+  }
+  return remotes;
+};
+var remotesWithCredentials = (runtime, root) => {
+  const listed4 = runtime.git(["remote", "-v"], root);
+  if (!listed4.ok) return [];
+  return [...parseRemotes(listed4.stdout)].filter(([, urls]) => urls.some(hasCredential)).map(([name]) => name).sort();
+};
+
+// src/secrets/guards/session.ts
+var secretsSessionStart = (input) => {
+  const remotes = remotesWithCredentials(input.runtime, input.cwd);
+  if (remotes.length === 0) return { kind: "allow" };
+  const params2 = { remotes: remotes.join(", "), remote: remotes[0] ?? "origin" };
+  const text6 = input.t("secrets.session.remote_credential", params2);
+  return {
+    kind: "allow",
+    output: {
+      systemMessage: `finitemonkey: ${text6}`,
+      hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: text6 }
+    }
+  };
+};
+
 // src/hooks/handlers.ts
 var allow = () => ({ kind: "allow" });
 var DECISION_RANK = { allow: 0, defer: 0, ask: 1, deny: 2 };
@@ -12640,14 +13379,16 @@ var mergeHandlers = (...sets) => {
 var SECRETS_HANDLERS = {
   PreToolUse: [secretsPreToolUse],
   UserPromptSubmit: [secretsUserPromptSubmit],
-  PostToolUse: [secretsPostToolUse]
-};
-var DEFAULT_HANDLERS = mergeHandlers(
-  SECRETS_HANDLERS,
-  PORTAO_HANDLERS,
-  PROSE_HANDLERS,
-  GIT_HANDLERS
-);
+  PostToolUse: [secretsPostToolUse],
+  SessionStart: [secretsSessionStart]
+};
+var GUARD_SETS = [
+  { id: "secrets", damage: true, handlers: SECRETS_HANDLERS },
+  { id: "gate", damage: true, handlers: PORTAO_HANDLERS },
+  { id: "prose", damage: false, handlers: PROSE_HANDLERS },
+  { id: "git", damage: true, handlers: GIT_HANDLERS }
+];
+var DEFAULT_HANDLERS = mergeHandlers(...GUARD_SETS.map(withPolicy));
 
 // src/hooks/payload.ts
 var EMPTY_PAYLOAD = {
@@ -13058,12 +13799,12 @@ var hookSchemaProblems = (hooks, claude) => {
 };
 
 // src/doctor/hook-sources.ts
-import { join as join28 } from "node:path";
+import { join as join30 } from "node:path";
 var entriesOf = (source, hooks, own) => Object.entries(asRecord(hooks)).flatMap(
   ([event, groups]) => asList(groups).flatMap((group) => {
-    const record2 = asRecord(group);
-    const matcher = optionalString(record2, "matcher");
-    return asList(record2["hooks"]).filter((handler) => isRecord(handler) && own(handler)).map((handler) => ({ source, event, matcher, handler }));
+    const record3 = asRecord(group);
+    const matcher = optionalString(record3, "matcher");
+    return asList(record3["hooks"]).filter((handler) => isRecord(handler) && own(handler)).map((handler) => ({ source, event, matcher, handler }));
   })
 );
 var PROJECT_SCOPES = { project: "project", local: "local" };
@@ -13071,10 +13812,10 @@ var projectHookFiles = (env) => readSettings(env).flatMap(({ scope: scope2, path
   const source = PROJECT_SCOPES[scope2];
   return source === void 0 || !("hooks" in settings) ? [] : [{ source, path, hooks: settings["hooks"] }];
 });
-var pluginsDir = ({ env, runtime }) => join28(env["CLAUDE_CONFIG_DIR"] ?? join28(runtime.homeDir(), ".claude"), "plugins");
+var pluginsDir = ({ env, runtime }) => join30(env["CLAUDE_CONFIG_DIR"] ?? join30(runtime.homeDir(), ".claude"), "plugins");
 var installRecord = (value, root) => {
   const records = Array.isArray(value) ? value.filter(isRecord) : isRecord(value) ? [value] : [];
-  return records.find((record2) => record2["projectPath"] === root) ?? records[0];
+  return records.find((record3) => record3["projectPath"] === root) ?? records[0];
 };
 var readJson = (env, path) => {
   const text6 = env.runtime.readText(path);
@@ -13082,18 +13823,18 @@ var readJson = (env, path) => {
   return parsed?.ok === true ? parsed.value : void 0;
 };
 var installedPlugin = (env) => {
-  const index = readJson(env, toAbsolutePath(join28(pluginsDir(env), "installed_plugins.json")));
-  const record2 = installRecord(asRecord(index?.["plugins"])[PLUGIN_ID], env.root);
-  const installPath = record2 === void 0 ? void 0 : optionalString(record2, "installPath");
-  if (record2 === void 0 || installPath === void 0) return void 0;
+  const index = readJson(env, toAbsolutePath(join30(pluginsDir(env), "installed_plugins.json")));
+  const record3 = installRecord(asRecord(index?.["plugins"])[PLUGIN_ID], env.root);
+  const installPath = record3 === void 0 ? void 0 : optionalString(record3, "installPath");
+  if (record3 === void 0 || installPath === void 0) return void 0;
   const root = toAbsolutePath(installPath);
-  const manifest = readJson(env, toAbsolutePath(join28(root, ".claude-plugin", "plugin.json")));
-  const hooksPath = toAbsolutePath(join28(root, "hooks", "hooks.json"));
+  const manifest = readJson(env, toAbsolutePath(join30(root, ".claude-plugin", "plugin.json")));
+  const hooksPath = toAbsolutePath(join30(root, "hooks", "hooks.json"));
   const text6 = env.runtime.readText(hooksPath);
   const parsed = text6.ok ? parseJsonObject(text6.value) : void 0;
   return {
     root,
-    version: (manifest === void 0 ? void 0 : optionalString(manifest, "version")) ?? optionalString(record2, "version"),
+    version: (manifest === void 0 ? void 0 : optionalString(manifest, "version")) ?? optionalString(record3, "version"),
     hooksFile: parsed?.ok === true ? { source: "plugin", path: hooksPath, hooks: parsed.value["hooks"] } : void 0,
     hooksText: text6.ok ? text6.value : void 0
   };
@@ -13133,7 +13874,7 @@ var schemaFindings = (env, plugin, claude) => {
   const files = [...projectHookFiles(env), ...plugin?.hooksFile === void 0 ? [] : [plugin.hooksFile]];
   const invalidJson = [
     ...unreadableProjectFiles(env),
-    ...plugin?.hooksText !== void 0 && plugin.hooksFile === void 0 ? [toAbsolutePath(join29(plugin.root, "hooks", "hooks.json"))] : []
+    ...plugin?.hooksText !== void 0 && plugin.hooksFile === void 0 ? [toAbsolutePath(join31(plugin.root, "hooks", "hooks.json"))] : []
   ];
   return [
     ...invalidJson.flatMap((file) => schemaFinding(file, ["not valid JSON"], label2)),
@@ -13154,7 +13895,7 @@ var pluginFindings = (env, projectOwn) => {
   ];
 };
 var coverageFindings = (env, entries) => {
-  const installed = env.runtime.stat(toAbsolutePath(join29(env.root, ...LOCK_FILE.split("/")))) !== void 0;
+  const installed = env.runtime.stat(toAbsolutePath(join31(env.root, ...LOCK_FILE.split("/")))) !== void 0;
   if (entries.length === 0 && !installed) {
     return [finding("hooks.registered", "warn", "doctor.hooks.none", {}, "doctor.hooks.fix_none")];
   }
@@ -13206,17 +13947,17 @@ var checkHooks = (env) => {
 };
 
 // src/doctor/instructions.ts
-import { join as join30 } from "node:path";
+import { join as join32 } from "node:path";
 var INSTRUCTION_LINE_CEILING = 200;
 var TOP_INSTRUCTIONS = ["AGENTS.md", "CLAUDE.md", ".claude/CLAUDE.md", "CLAUDE.local.md"];
 var RULES_DIR = ".claude/rules";
 var SHOWN = 3;
 var readProjectFile = (env, relative9) => {
-  const text6 = env.runtime.readText(toAbsolutePath(join30(env.root, ...relative9.split("/"))));
+  const text6 = env.runtime.readText(toAbsolutePath(join32(env.root, ...relative9.split("/"))));
   return text6.ok ? text6.value : void 0;
 };
 var instructionFiles = (env) => {
-  const listed4 = env.runtime.listDir(toAbsolutePath(join30(env.root, ...RULES_DIR.split("/"))));
+  const listed4 = env.runtime.listDir(toAbsolutePath(join32(env.root, ...RULES_DIR.split("/"))));
   const rules = listed4.ok ? listed4.value.filter((name) => name.endsWith(".md")).map((name) => `${RULES_DIR}/${name}`) : [];
   return [...TOP_INSTRUCTIONS, ...rules].flatMap((path) => {
     const text6 = readProjectFile(env, path);
@@ -13321,12 +14062,12 @@ var checkInstructions = (env) => {
 };
 
 // src/doctor/line-endings.ts
-import { join as join31 } from "node:path";
+import { join as join33 } from "node:path";
 var LF_RULE = /^\*\s.*\beol=lf\b/m;
 var checkLineEndings = ({ root, runtime }) => {
   const autocrlf = runtime.git(["config", "--get", "core.autocrlf"], root);
   if (!autocrlf.ok || autocrlf.stdout.trim().toLowerCase() !== "true") return [];
-  const attributes = runtime.readText(toAbsolutePath(join31(root, ".gitattributes")));
+  const attributes = runtime.readText(toAbsolutePath(join33(root, ".gitattributes")));
   if (attributes.ok && LF_RULE.test(attributes.value)) return [];
   return [
     finding("git.autocrlf", "warn", "doctor.git.autocrlf", { file: ".gitattributes" }, "doctor.git.fix_autocrlf")
@@ -13334,7 +14075,7 @@ var checkLineEndings = ({ root, runtime }) => {
 };
 
 // src/doctor/memory.ts
-import { join as join32 } from "node:path";
+import { join as join34 } from "node:path";
 var ceilingOf = (config) => {
   const value = configAt(parseConfigYaml(config ?? ""), "memory", "maxLines");
   const parsed = typeof value === "string" ? Number.parseInt(value, 10) : Number.NaN;
@@ -13342,9 +14083,9 @@ var ceilingOf = (config) => {
 };
 var lineCount2 = (text6) => text6.replace(/\r?\n$/, "").split(/\r?\n/).length;
 var checkAgentsFile = ({ root, runtime }) => {
-  const text6 = runtime.readText(toAbsolutePath(join32(root, AGENTS_FILE)));
+  const text6 = runtime.readText(toAbsolutePath(join34(root, AGENTS_FILE)));
   if (!text6.ok) return [];
-  const config = runtime.readText(toAbsolutePath(join32(root, CONFIG_FILE)));
+  const config = runtime.readText(toAbsolutePath(join34(root, CONFIG_FILE)));
   const max = ceilingOf(config.ok ? config.value : void 0);
   const lines3 = lineCount2(text6.value);
   const params2 = { file: AGENTS_FILE, lines: lines3, max };
@@ -13352,7 +14093,7 @@ var checkAgentsFile = ({ root, runtime }) => {
 };
 
 // src/doctor/project-files.ts
-import { join as join33 } from "node:path";
+import { join as join35 } from "node:path";
 var variants = (base, extensions) => extensions.map((extension) => `${base}${extension}`);
 var SCRIPT = [".js", ".cjs", ".mjs", ".ts", ".cts", ".mts"];
 var DATA = ["", ".json", ".yml", ".yaml"];
@@ -13383,7 +14124,7 @@ var CONFIG_GROUPS = [
     files: [...variants("commitlint.config", SCRIPT), ...variants(".commitlintrc", [...DATA, ".js"])]
   }
 ];
-var present = (env, files) => files.filter((file) => env.runtime.stat(toAbsolutePath(join33(env.root, file)))?.kind === "file");
+var present = (env, files) => files.filter((file) => env.runtime.stat(toAbsolutePath(join35(env.root, file)))?.kind === "file");
 var crowded = (env, groups, build) => groups.flatMap(({ name, files }) => {
   const found = present(env, files);
   return found.length > 1 ? [build(name, found.join(", "))] : [];
@@ -13407,6 +14148,22 @@ var checkProjectFiles = (env) => [
   )
 ];
 
+// src/doctor/remotes.ts
+var checkRemoteCredentials = ({ root, runtime }) => {
+  const remotes = remotesWithCredentials(runtime, root);
+  if (remotes.length === 0) return [];
+  const params2 = { remotes: remotes.join(", "), remote: remotes[0] ?? "origin" };
+  return [
+    finding(
+      "secrets.remote_credential",
+      "warn",
+      "doctor.secrets.remote_credential",
+      params2,
+      "doctor.secrets.fix_remote_credential"
+    )
+  ];
+};
+
 // src/doctor/run.ts
 var DOCTOR_SCHEMA = "finitemonkey/doctor@1";
 var CHECKS = [
@@ -13422,6 +14179,7 @@ var CHECKS = [
   checkInstructions,
   checkProjectFiles,
   checkLineEndings,
+  checkRemoteCredentials,
   checkAgentsFile,
   checkHooks
 ];
@@ -13449,7 +14207,7 @@ var toItem = (ctx, finding3) => ({
   detail: ctx.t(finding3.messageKey, finding3.params),
   ...finding3.fixKey === void 0 ? {} : { fix: ctx.t(finding3.fixKey, finding3.params) }
 });
-var count2 = (items, status) => items.filter((item) => item.status === status).length;
+var count3 = (items, status) => items.filter((item) => item.status === status).length;
 var hookItems = (ctx, findings) => findings.flatMap(
   (finding3) => finding3.hook === void 0 ? [] : [
     {
@@ -13465,7 +14223,7 @@ var buildReport2 = (ctx, findings) => {
     schema: DOCTOR_SCHEMA,
     checks,
     hooks: hookItems(ctx, findings),
-    summary: { ok: count2(checks, "ok"), warn: count2(checks, "warn"), fail: count2(checks, "fail") }
+    summary: { ok: count3(checks, "ok"), warn: count3(checks, "warn"), fail: count3(checks, "fail") }
   };
 };
 
@@ -13782,7 +14540,7 @@ var resultOf = (ctx, checked) => {
     const problem4 = gitProblem("merge_unanalyzable", "git.error.merge_unanalyzable", detail, "git status");
     return failureFrom(ctx.t, { ...problem4, exitCode: ExitCode.Usage, data }, human2);
   }
-  const lost = checked.reduce((count3, item) => count3 + item.report.findings.length, 0);
+  const lost = checked.reduce((count4, item) => count4 + item.report.findings.length, 0);
   if (lost === 0) return success(data, human2);
   return failureFrom(
     ctx.t,
@@ -13845,11 +14603,11 @@ var unreachable = (runtime, repo, shas) => {
 var fsckDangling = (runtime, repo) => {
   const result = runtime.git(["fsck", "--no-reflogs", "--no-progress", "--dangling"], repo.root);
   const lines3 = linesOf(result.stdout);
-  const pick3 = (kind) => lines3.flatMap((line2) => {
+  const pick4 = (kind) => lines3.flatMap((line2) => {
     const [label2, type, sha] = line2.split(" ");
     return label2 === "dangling" && type === kind && sha !== void 0 ? [sha] : [];
   });
-  return { commits: pick3("commit"), blobs: pick3("blob").length };
+  return { commits: pick4("commit"), blobs: pick4("blob").length };
 };
 var describe = (runtime, repo, shas) => {
   if (shas.length === 0) return /* @__PURE__ */ new Map();
@@ -13949,7 +14707,7 @@ var rescueCommand = {
 };
 
 // src/git/undo.ts
-import { basename as basename3, dirname as dirname8, join as join34 } from "node:path";
+import { basename as basename3, dirname as dirname8, join as join36 } from "node:path";
 var INDEX_SUBJECT = "finitemonkey index:";
 var gitLine = (runtime, repo, args) => {
   const result = runtime.git(args, repo.root);
@@ -13992,7 +14750,7 @@ var findSnapshot = (views, wanted) => {
 };
 var stampOf2 = (iso) => iso.replace(/[:.]/g, "-");
 var worktreePath = (runtime, repo) => {
-  const base = join34(dirname8(repo.root), `${basename3(repo.root)}-undo-${stampOf2(runtime.now())}`);
+  const base = join36(dirname8(repo.root), `${basename3(repo.root)}-undo-${stampOf2(runtime.now())}`);
   return toAbsolutePath(runtime.stat(toAbsolutePath(base)) === void 0 ? base : `${base}-2`);
 };
 var intoWorktree = (runtime, repo, view2) => {
@@ -14005,8 +14763,8 @@ var step2 = (runtime, repo, args) => {
   return result.ok ? accept(void 0) : reject(failure2(args.join(" "), result));
 };
 var inPlace = (runtime, repo, view2) => {
-  const current = gitLine(runtime, repo, ["rev-parse", "--verify", "--quiet", "HEAD"]);
-  if (view2.head !== void 0 && view2.head !== current) {
+  const current2 = gitLine(runtime, repo, ["rev-parse", "--verify", "--quiet", "HEAD"]);
+  if (view2.head !== void 0 && view2.head !== current2) {
     const moved = step2(runtime, repo, ["reset", "--soft", view2.head]);
     if (!moved.ok) return moved;
   }
@@ -14227,7 +14985,7 @@ var hookCommand = {
 };
 
 // src/commands/i18n-check.ts
-import { join as join35 } from "node:path";
+import { join as join37 } from "node:path";
 
 // src/i18n/message.ts
 var ARG = /^\s*([a-zA-Z][a-zA-Z0-9_]*)\s*(?:,\s*(plural|select)\s*,)?/;
@@ -14313,17 +15071,17 @@ var rulesFor = (locale) => {
 var branchFor = (node, value, locale) => {
   const { branches } = node;
   if (node.kind === "select") return branches[String(value)] ?? branches["other"];
-  const count3 = typeof value === "number" ? value : Number(value);
-  if (!Number.isFinite(count3)) return branches["other"];
-  return branches[`=${String(count3)}`] ?? branches[rulesFor(locale).select(count3)] ?? branches["other"];
+  const count4 = typeof value === "number" ? value : Number(value);
+  if (!Number.isFinite(count4)) return branches["other"];
+  return branches[`=${String(count4)}`] ?? branches[rulesFor(locale).select(count4)] ?? branches["other"];
 };
-var render = (nodes, params2, locale, count3) => nodes.map((node) => {
+var render = (nodes, params2, locale, count4) => nodes.map((node) => {
   if (node.kind === "text") return node.text;
-  if (node.kind === "count") return count3 === void 0 ? "#" : String(count3);
+  if (node.kind === "count") return count4 === void 0 ? "#" : String(count4);
   const value = params2[node.name];
   if (node.kind === "arg") return value === void 0 ? `{${node.name}}` : String(value);
   const branch = branchFor(node, value, locale) ?? [];
-  return render(branch, params2, locale, node.kind === "plural" ? value : count3);
+  return render(branch, params2, locale, node.kind === "plural" ? value : count4);
 }).join("");
 var formatMessage = (source, params2, locale) => render(parseMessage(source), params2, locale, void 0);
 var walk = (nodes, visit2) => {
@@ -14353,7 +15111,7 @@ var choicesOf = (source) => {
 var requiredPluralBranches = (locale) => {
   const rules = rulesFor(locale);
   const seen = /* @__PURE__ */ new Set(["other"]);
-  for (let count3 = 0; count3 <= 1e3; count3 += 1) seen.add(rules.select(count3));
+  for (let count4 = 0; count4 <= 1e3; count4 += 1) seen.add(rules.select(count4));
   return [...seen].sort();
 };
 
@@ -14429,7 +15187,7 @@ var unreadable = (dir, file, detail) => ({
   exitCode: ExitCode.NotConfigured
 });
 var readCatalog = (ctx, dir, lang) => {
-  const file = toAbsolutePath(join35(dir, `${lang}.json`));
+  const file = toAbsolutePath(join37(dir, `${lang}.json`));
   const text6 = ctx.runtime.readText(file);
   if (!text6.ok) return reject(unreadable(dir, file, text6.error));
   const parsed = parseJsonObject(text6.value);
@@ -14452,7 +15210,7 @@ var describeProblem = (ctx, problem4) => {
   return `  ${problem4.lang}  ${problem4.key}  ${kind}`;
 };
 var loadReview = (ctx, dir) => {
-  const text6 = ctx.runtime.readText(toAbsolutePath(join35(dir, "review.json")));
+  const text6 = ctx.runtime.readText(toAbsolutePath(join37(dir, "review.json")));
   const parsed = text6.ok ? parseJsonObject(text6.value) : void 0;
   if (parsed?.ok !== true) return void 0;
   const statuses = (lang) => {
@@ -14493,10 +15251,10 @@ var i18nCheckCommand = {
 };
 
 // src/history/look-back.ts
-import { join as join36 } from "node:path";
+import { join as join38 } from "node:path";
 
 // src/history/patterns.ts
-import { posix as posix4 } from "node:path";
+import { posix as posix5 } from "node:path";
 var PATTERNS = ["done_after_failing_tests", "env_read", "no_verify", "force_push", "test_skip"];
 var TEST_COMMAND = /(^|[\s;&|(])((npm|pnpm|yarn|bun)\s+(run\s+)?(test|check)\b|npx\s+(vitest|jest)\b|vitest\b|jest\b|pytest\b|go\s+test\b|cargo\s+test\b|node\s+--test\b|mocha\b)/;
 var DONE_CLAIM = /\b(done|all (tests|checks) (pass|passed|are passing)|everything (passes|works)|it works|pronto|feito|conclu[ií]do|listo|terminado)\b/i;
@@ -14518,7 +15276,7 @@ var stringField = (tool, name) => {
   return typeof value === "string" ? value : "";
 };
 var isEnvPath = (path) => {
-  const name = posix4.basename(path.replace(/\\/g, "/"));
+  const name = posix5.basename(path.replace(/\\/g, "/"));
   return /^\.env(\.[A-Za-z0-9_-]+)?$/.test(name) && !ENV_TEMPLATE.test(name);
 };
 var envRead = (tool) => {
@@ -14606,7 +15364,7 @@ var addResults = (draft, blocks) => {
 };
 var parseTranscript = (jsonl) => {
   const turns = [];
-  let current;
+  let current2;
   for (const line2 of jsonl.split(/\r?\n/)) {
     if (line2.trim() === "") continue;
     const parsed = parseJsonObject(line2);
@@ -14614,13 +15372,13 @@ var parseTranscript = (jsonl) => {
     const entry2 = parsed.value;
     const blocks = blocksOf(entry2["message"]);
     if (entry2["type"] === "user") {
-      if (current !== void 0 && addResults(current, blocks)) continue;
+      if (current2 !== void 0 && addResults(current2, blocks)) continue;
       const prompt = blocks.map(textOf3).join("\n").trim();
       if (prompt === "") continue;
-      current = startTurn(prompt);
-      turns.push(current);
-    } else if (entry2["type"] === "assistant" && current !== void 0) {
-      addAssistant(current, blocks);
+      current2 = startTurn(prompt);
+      turns.push(current2);
+    } else if (entry2["type"] === "assistant" && current2 !== void 0) {
+      addAssistant(current2, blocks);
     }
   }
   return turns;
@@ -14629,7 +15387,7 @@ var parseTranscript = (jsonl) => {
 // src/history/look-back.ts
 var SAMPLES = 3;
 var projectLogKey = (root) => root.replace(/[^A-Za-z0-9-]/g, "-");
-var projectLogDir = (runtime, root, env) => join36(env["CLAUDE_CONFIG_DIR"] ?? join36(runtime.homeDir(), ".claude"), "projects", projectLogKey(root));
+var projectLogDir = (runtime, root, env) => join38(env["CLAUDE_CONFIG_DIR"] ?? join38(runtime.homeDir(), ".claude"), "projects", projectLogKey(root));
 var lookBack = (runtime, root, env) => {
   const dir = projectLogDir(runtime, root, env);
   const listed4 = runtime.listDir(toAbsolutePath(dir));
@@ -14650,7 +15408,7 @@ var lookBack = (runtime, root, env) => {
   };
   let turns = 0;
   for (const name of files) {
-    const text6 = runtime.readText(toAbsolutePath(join36(dir, name)));
+    const text6 = runtime.readText(toAbsolutePath(join38(dir, name)));
     if (!text6.ok) continue;
     for (const turn of parseTranscript(text6.value)) {
       turns += 1;
@@ -14666,6 +15424,7 @@ var lookBack = (runtime, root, env) => {
 
 // src/install/diff.ts
 var MAX_DIFF_LINES = 120;
+var MAX_LCS_CELLS = 4e6;
 var table = (a, b) => {
   const rows = Array.from({ length: a.length + 1 }, () => new Array(b.length + 1).fill(0));
   for (let i = a.length - 1; i >= 0; i -= 1) {
@@ -14700,8 +15459,27 @@ var walk2 = (a, b) => {
   return ops;
 };
 var splitLines = (text6) => text6 === "" ? [] : text6.replace(/\r?\n$/, "").split(/\r?\n/);
+var sharedPrefix = (a, b) => {
+  let count4 = 0;
+  while (count4 < a.length && count4 < b.length && a[count4] === b[count4]) count4 += 1;
+  return count4;
+};
+var sharedSuffix = (a, b, prefix) => {
+  let count4 = 0;
+  while (count4 < a.length - prefix && count4 < b.length - prefix && a[a.length - 1 - count4] === b[b.length - 1 - count4])
+    count4 += 1;
+  return count4;
+};
+var changedOps = (a, b) => {
+  const prefix = sharedPrefix(a, b);
+  const suffix = sharedSuffix(a, b, prefix);
+  const left = a.slice(prefix, a.length - suffix);
+  const right = b.slice(prefix, b.length - suffix);
+  if (left.length * right.length <= MAX_LCS_CELLS) return walk2(left, right).filter(([op]) => op !== "=");
+  return [...left.map((line2) => ["-", line2]), ...right.map((line2) => ["+", line2])];
+};
 var lineDiff = (path, before, after) => {
-  const changes = walk2(splitLines(before), splitLines(after)).filter(([op]) => op !== "=");
+  const changes = changedOps(splitLines(before), splitLines(after));
   if (changes.length === 0) return [];
   const lines3 = changes.map(([op, line2]) => `${op} ${line2}`);
   const shown3 = lines3.slice(0, MAX_DIFF_LINES);
@@ -14846,6 +15624,32 @@ var initCommand = {
   }
 };
 
+// src/commands/policy.ts
+var FIX = `finitemonkey policy false-positive <${OPTIONAL_GUARDS.join("|")}>`;
+var recordFalsePositive = (ctx, guard) => {
+  if (!isPerson(ctx)) return failureFrom(ctx.t, needsPersonProblem("policy.error.person_only", FIX));
+  if (!OPTIONAL_GUARDS.some((id) => id === guard)) {
+    return failureFrom(ctx.t, usageProblem("invalid_arguments", "error.invalid_arguments", FIX, { detail: guard }));
+  }
+  const paths = fmPaths(findRepoRoot(ctx.runtime, ctx.cwd) ?? ctx.cwd);
+  const state = readShadow(ctx.runtime, paths);
+  const before = state[guard] ?? { firings: 0, falsePositives: 0, promoted: false };
+  const falsePositives = before.falsePositives + 1;
+  writeShadow(ctx.runtime, paths, { ...state, [guard]: { ...before, falsePositives } });
+  logEvent(ctx.runtime, paths, "guard_false_positive", { guard, falsePositives });
+  return success({ guard, falsePositives }, [
+    ctx.t("policy.false_positive.recorded", { guard, count: falsePositives })
+  ]);
+};
+var policyFalsePositiveCommand = {
+  path: ["policy", "false-positive"],
+  summaryKey: "command.policy_false_positive.summary",
+  usage: FIX,
+  status: "ready",
+  maxPositionals: 1,
+  run: (ctx, args) => Promise.resolve(recordFalsePositive(ctx, args.positionals[0] ?? ""))
+};
+
 // src/commands/prose-check.ts
 import { relative as relative8 } from "node:path";
 
@@ -15208,7 +16012,7 @@ var view = (finding3, status) => ({
   status,
   ...finding3.commit === void 0 ? {} : { commit: finding3.commit }
 });
-var modeOf2 = (values) => {
+var modeOf3 = (values) => {
   const chosen = [values["staged"] === true, values["history"] === true, stringOption(values, "path") !== void 0];
   if (chosen.filter(Boolean).length > 1) return void 0;
   if (chosen[0] === true) return "staged";
@@ -15274,7 +16078,7 @@ var humanOf2 = (ctx, data) => [
 ];
 var resultOf3 = (ctx, data) => {
   const human2 = humanOf2(ctx, data);
-  const failing = data.summary.new + data.summary.expired;
+  const failing = data.findings.filter((item) => item.status !== "known" && item.severity !== "warning").length;
   if (failing === 0) return success(data, human2);
   return failureFrom(
     ctx.t,
@@ -15299,7 +16103,7 @@ var secretsScanCommand = {
   status: "ready",
   options: { staged: { type: "boolean" }, history: { type: "boolean" }, path: { type: "string" } },
   run: async (ctx, args) => {
-    const mode = modeOf2(args.values);
+    const mode = modeOf3(args.values);
     const fix = "finitemonkey help secrets scan";
     if (mode === void 0) return failureFrom(ctx.t, usageProblem("invalid_arguments", "secrets.error.one_mode", fix));
     const root = projectRoot(ctx);
@@ -15321,7 +16125,7 @@ var secretsScanCommand = {
 };
 
 // src/task/create.ts
-import { join as join37 } from "node:path";
+import { join as join39 } from "node:path";
 
 // src/core/yaml/write.ts
 var PLAIN_SAFE = /^[A-Za-z_./][A-Za-z0-9_./ ()-]*$/;
@@ -15380,7 +16184,8 @@ var contractYaml = (contract) => ({
     tests_protected: contract.scope.testsProtected
   },
   acceptance: contract.acceptance.map(checkYaml),
-  decisions_needed: [...contract.decisionsNeeded]
+  decisions_needed: [...contract.decisionsNeeded],
+  ...contract.callersIgnore === void 0 ? {} : { callers_ignore: [...contract.callersIgnore] }
 });
 var contractJson = (contract) => ({
   id: contract.id,
@@ -15405,10 +16210,10 @@ var explicitChecks = (draft) => [
 var draftChecks = (runtime, paths, draft) => {
   const disk = {
     read: (relative9) => {
-      const text6 = runtime.readText(toAbsolutePath(join37(paths.root, relative9)));
+      const text6 = runtime.readText(toAbsolutePath(join39(paths.root, relative9)));
       return text6.ok ? text6.value : void 0;
     },
-    exists: (relative9) => runtime.stat(toAbsolutePath(join37(paths.root, relative9))) !== void 0
+    exists: (relative9) => runtime.stat(toAbsolutePath(join39(paths.root, relative9))) !== void 0
   };
   const detected = detectChecks(disk);
   const base = draft.runs.length > 0 || draft.tests !== void 0 ? explicitChecks(draft) : detected;
@@ -15421,6 +16226,7 @@ var draftChecks = (runtime, paths, draft) => {
     { id: "prose", kind: "prose" },
     { id: "worktree", kind: "worktree" },
     { id: "merge", kind: "merge" },
+    { id: "callers", kind: "callers" },
     ...draft.paths.length > 0 || draft.budget !== void 0 ? [{ id: "diff", kind: "diff" }] : [],
     ...draft.git.length > 0 ? [{ id: "git", kind: "git", require: draft.git }] : [],
     { id: "pr", kind: "pr", requireOpen: draft.git.includes("pr_open") },
@@ -15610,15 +16416,15 @@ var taskDoneCommand = {
 };
 
 // src/install/uninstall.ts
-var structural = (entry2, current) => {
+var structural = (entry2, current2) => {
   if (entry2.kind === "gitignore" || entry2.kind === "markdown") {
-    const text6 = entry2.kind === "gitignore" ? withoutBlock(current) : withoutMarkdownBlock(current);
+    const text6 = entry2.kind === "gitignore" ? withoutBlock(current2) : withoutMarkdownBlock(current2);
     return text6 === "" && !entry2.existed ? void 0 : text6;
   }
-  const parsed = parseSettings(current);
-  if (!parsed.ok || entry2.added === void 0) return current;
+  const parsed = parseSettings(current2);
+  if (!parsed.ok || entry2.added === void 0) return current2;
   const settings = unmergeSettings(parsed.value, entry2.added, entry2.handlers ?? []);
-  return Object.keys(settings).length === 0 && !entry2.existed ? void 0 : renderJson(settings, styleOf(current));
+  return Object.keys(settings).length === 0 && !entry2.existed ? void 0 : renderJson(settings, styleOf(current2));
 };
 var unchanged = (project, entry2) => {
   if (!entry2.existed) return { path: entry2.path, action: "delete", after: void 0 };
@@ -15626,17 +16432,17 @@ var unchanged = (project, entry2) => {
   return original === void 0 ? void 0 : { path: entry2.path, action: "restore", after: original };
 };
 var removalFor = (project, entry2, options) => {
-  const current = project.read(entry2.path);
-  if (current === void 0) return { path: entry2.path, action: "gone", after: void 0 };
+  const current2 = project.read(entry2.path);
+  if (current2 === void 0) return { path: entry2.path, action: "gone", after: void 0 };
   if (entry2.kind === "generated" && options.keepGenerated) {
-    return { path: entry2.path, action: "keep-generated", after: current };
+    return { path: entry2.path, action: "keep-generated", after: current2 };
   }
-  if (hashText(current) === entry2.hash) {
+  if (hashText(current2) === entry2.hash) {
     const exact2 = unchanged(project, entry2);
     if (exact2 !== void 0) return exact2;
   }
-  if (entry2.kind === "generated") return { path: entry2.path, action: "keep-edited", after: current };
-  const after = structural(entry2, current);
+  if (entry2.kind === "generated") return { path: entry2.path, action: "keep-edited", after: current2 };
+  const after = structural(entry2, current2);
   return { path: entry2.path, action: after === void 0 ? "delete" : "unmerge", after };
 };
 var planRemoval = (project, lock, options) => ({
@@ -15801,6 +16607,7 @@ var REGISTRY = [
   taskDoneCommand,
   secretsScanCommand,
   secretsAcceptCommand,
+  policyFalsePositiveCommand,
   secretsIncidentCommand,
   proseCheckCommand,
   snapshotCommand,
@@ -15812,7 +16619,7 @@ var REGISTRY = [
 ];
 
 // src/i18n/lang-settings.ts
-import { join as join38 } from "node:path";
+import { join as join40 } from "node:path";
 var read3 = (runtime, path) => {
   const text6 = runtime.readText(toAbsolutePath(path));
   return text6.ok ? text6.value : void 0;
@@ -15827,14 +16634,14 @@ var languageIn = (text6) => {
   const value = parsed.ok && isRecord(parsed.value) ? parsed.value["language"] : void 0;
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 };
-var claudeDir = (runtime, env) => env["CLAUDE_CONFIG_DIR"] ?? join38(runtime.homeDir(), ".claude");
+var claudeDir = (runtime, env) => env["CLAUDE_CONFIG_DIR"] ?? join40(runtime.homeDir(), ".claude");
 var langSettings = (runtime, cwd, env, platform) => {
   const root = findGitRoot(cwd, runtime) ?? cwd;
-  const config = parseConfigYaml(read3(runtime, join38(root, CONFIG_FILE)) ?? "");
+  const config = parseConfigYaml(read3(runtime, join40(root, CONFIG_FILE)) ?? "");
   const claudeFiles = [
-    join38(root, ".claude", "settings.local.json"),
-    join38(root, ".claude", "settings.json"),
-    join38(claudeDir(runtime, env), "settings.json")
+    join40(root, ".claude", "settings.local.json"),
+    join40(root, ".claude", "settings.json"),
+    join40(claudeDir(runtime, env), "settings.json")
   ];
   return {
     config: configText(config, "lang"),