halfcycle 0.11.1 → 0.12.0-rc.2

package/bin/bin.bundle.mjs

@@ -14804,12 +14804,34 @@ function looksLikeSecret(text) {
 var MCP_REGISTRATION_REL = ".mcp.json";
 var MCP_SERVER_KEY = "halfcycle";
 
+// ../core/dist/release-version.js
+var RELEASE_VERSION_PATTERN = /^\d+\.\d+\.\d+$/;
+
+// ../core/dist/release-tag.js
+var PRE_RELEASE_VERSION_PATTERN = /^(\d+\.\d+\.\d+)-rc\.\d+$/;
+var PACKAGE_COMMAND = "npx halfcycle";
+function isPreReleaseVersion(value) {
+  return typeof value === "string" && PRE_RELEASE_VERSION_PATTERN.test(value);
+}
+function releaseTagOfVersion(version2) {
+  return isPreReleaseVersion(version2) ? "next" : "latest";
+}
+function halfcycleCommand(version2) {
+  return `${PACKAGE_COMMAND}@${releaseTagOfVersion(version2)}`;
+}
+function bareHalfcycleCommand(version2) {
+  return releaseTagOfVersion(version2) === "next" ? `${PACKAGE_COMMAND}@next` : PACKAGE_COMMAND;
+}
+
 // ../core/dist/shell-quote.js
 function quoteForShell(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
-var HALFCYCLE_COMMAND = "npx halfcycle@latest";
-var DOCTOR_LINE = "Run `npx halfcycle doctor` to check set up, sign-in, connection, checks and version.";
+var HALFCYCLE_COMMAND = halfcycleCommand();
+function doctorLine(version2) {
+  return `Run \`${bareHalfcycleCommand(version2)} doctor\` to check set up, sign-in, connection, checks and version.`;
+}
+var DOCTOR_LINE = doctorLine();
 
 // ../core/dist/folder-trust.js
 var CLAUDE_STATE_FILENAME = ".claude.json";
@@ -15107,9 +15129,6 @@ function typedPhaseReference(phase, number4) {
   return phase.includes(":") && number4 !== null ? String(number4) : phase;
 }
 
-// ../core/dist/release-version.js
-var RELEASE_VERSION_PATTERN = /^\d+\.\d+\.\d+$/;
-
 // ../core/dist/github-address.js
 var GITHUB_REPOSITORY_ADDRESS = /^https:\/\/github\.com\/[A-Za-z0-9][A-Za-z0-9-]{0,38}\/(?!\.{1,2}$)[A-Za-z0-9._-]{1,100}$/;
 var HOST = "[Gg][Ii][Tt][Hh][Uu][Bb]\\.[Cc][Oo][Mm]";
@@ -15148,8 +15167,14 @@ function githubRepositoryAddress(remote) {
 }
 
 // ../core/dist/sign-in.js
-var SIGN_IN_COMMAND = '"npx halfcycle"';
-var HOOK_REMEDY = `Run ${SIGN_IN_COMMAND} in the project folder to sign in.`;
+function signInCommand(version2) {
+  return `"${bareHalfcycleCommand(version2)}"`;
+}
+var SIGN_IN_COMMAND = signInCommand();
+function hookRemedy(version2) {
+  return `Run ${signInCommand(version2)} in the project folder to sign in.`;
+}
+var HOOK_REMEDY = hookRemedy();
 
 // ../core/dist/task-plan.js
 var TASK_PLAN_FILE = "docs/build-records/task-plan.json";
@@ -15261,7 +15286,7 @@ function codexHookCommand(script, args2) {
   const invocation = `cd "$(git rev-parse --show-toplevel)" && bash ./${script}`;
   return args2 === void 0 ? invocation : `${invocation} ${args2}`;
 }
-var CODEX_WINDOWS_NOT_SET_UP = "Halfcycle checks did not run because Halfcycle is not set up in this folder or any folder above it; run npx halfcycle in the project folder.";
+var CODEX_WINDOWS_NOT_SET_UP = `Halfcycle checks did not run because Halfcycle is not set up in this folder or any folder above it; run ${bareHalfcycleCommand()} in the project folder.`;
 var CODEX_WINDOWS_NO_GIT_BASH = "Halfcycle checks did not run because Git for Windows was not found; install Git for Windows, then open a new session.";
 function codexHookCommandWindows(script, args2) {
   const tick = (text) => "`" + text + "`";
@@ -18925,6 +18950,10 @@ function paceClockOf(at, now) {
   return `${day} ${clock}`;
 }
 var PACE_P5 = "This build may use all of your allowance. It will not slow down to leave room for you.";
+function paceP8Of(version2) {
+  return `For these to work, run "${bareHalfcycleCommand(version2)}" once more in this project.`;
+}
+var PACE_P8 = paceP8Of();
 function paceS1Of(window, k, until, now, keepFreePercent) {
   return `Halfcycle is slowing this build so you keep about ${paceShareWordsOf(keepFreePercent)} of this ${paceWindowWordsOf(window)} for your own work. It will run at most ${paceAgentsOf(k)} at once until ${paceClockOf(until, now)}.`;
 }
@@ -19170,7 +19199,10 @@ var CLIENT_VERSION_HEADER = "x-halfcycle-client";
 var TYPED_APPROVAL_OFF_SENTENCE = "Approving by typing is switched off for now.";
 var HEADLESS_CANNOT_APPROVE = "(a headless session cannot approve, by design)";
 var TYPED_REVIEW_OFF_SENTENCE = "Reviewing by typing is switched off for now.";
-var CLIENT_UPDATE_SENTENCE = `To approve by typing in a session, Halfcycle needs updating: run \`${HALFCYCLE_COMMAND}\` in this project's folder, then reopen your session and ask again.`;
+function clientUpdateSentence(version2) {
+  return `To approve by typing in a session, Halfcycle needs updating: run \`${halfcycleCommand(version2)}\` in this project's folder, then reopen your session and ask again.`;
+}
+var CLIENT_UPDATE_SENTENCE = clientUpdateSentence();
 
 // ../events/dist/device-auth.js
 var utcIso86012 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/, "must be a UTC ISO-8601 timestamp ending in Z");
@@ -19268,17 +19300,31 @@ var deviceConfirmResponseSchema = external_exports.union([
 var DASHBOARD_URL = "https://app.halfcycle.ai";
 
 // ../events/dist/project-page.js
-function projectPageUrl(engagementId) {
-  return isEngagementId(engagementId) ? `${DASHBOARD_URL}/${encodeURIComponent(engagementId)}` : void 0;
+var SERVICE_HOST = /^(?:control|delivery)(-[a-z0-9]+)?\.halfcycle\.ai$/;
+function consoleOrigin(serviceAddress) {
+  const trimmed = serviceAddress?.trim();
+  if (!trimmed)
+    return DASHBOARD_URL;
+  let host;
+  try {
+    host = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`).hostname.toLowerCase();
+  } catch {
+    return DASHBOARD_URL;
+  }
+  const suffix = SERVICE_HOST.exec(host)?.[1];
+  return suffix === void 0 ? DASHBOARD_URL : `https://app${suffix}.halfcycle.ai`;
+}
+function projectPageUrl(engagementId, serviceAddress) {
+  return isEngagementId(engagementId) ? `${consoleOrigin(serviceAddress)}/${encodeURIComponent(engagementId)}` : void 0;
 }
-function systemViewUrl(engagementId, phase) {
-  const page = projectPageUrl(engagementId);
+function systemViewUrl(engagementId, phase, serviceAddress) {
+  const page = projectPageUrl(engagementId, serviceAddress);
   if (page === void 0)
     return void 0;
   return `${page}/console/system-view?${new URLSearchParams({ phase }).toString()}`;
 }
-function requestAccessSentence(engagementId) {
-  const page = projectPageUrl(engagementId) ?? "this project's page on Halfcycle";
+function requestAccessSentence(engagementId, serviceAddress) {
+  const page = projectPageUrl(engagementId, serviceAddress) ?? "this project's page on Halfcycle";
   return `To ask for access, open ${page} signed in as this account and choose "Request access". Then let the project's owner know, so they can approve it.`;
 }
 
@@ -19345,19 +19391,19 @@ function systemViewSentence(offerTyping, address) {
     return [];
   return [offerTyping === "yes" ? `Or they approve it in the System view: ${address}` : `They approve it in the System view: ${address}`];
 }
-function waitingNotice(entry, offerTyping, engagementId) {
+function waitingNotice(entry, offerTyping, engagementId, serviceAddress) {
   return [
     ...entry.changedParts.length > 0 ? [`These parts changed since the owner last decided on this phase, and wait for their approval: ${quotedParts(entry.changedParts)}.`] : [],
     `The scope of ${phaseWords(entry.phase)} is waiting for the project's owner to approve it.`,
     approvalSentence(entry.phase, offerTyping),
-    ...systemViewSentence(offerTyping, systemViewUrl(engagementId, entry.phase))
+    ...systemViewSentence(offerTyping, systemViewUrl(engagementId, entry.phase, serviceAddress))
   ].join(" ");
 }
 function scopeNoticeText(scope, options) {
   const omit2 = options.omitActivePhase === true ? options.activePhase : void 0;
   return {
     sentBack: scope.sentBack.map(sentBackNotice),
-    waiting: scope.waiting.filter((w) => omit2 === void 0 || w.phase !== omit2).map((w) => waitingNotice(w, options.offerTyping, options.engagementId))
+    waiting: scope.waiting.filter((w) => omit2 === void 0 || w.phase !== omit2).map((w) => waitingNotice(w, options.offerTyping, options.engagementId, options.serviceAddress))
   };
 }
 
@@ -19385,15 +19431,15 @@ var reviewNoticesSchema = external_exports.object({
 function phaseCalled(phase) {
   return `phase "${phase}"`;
 }
-function questionNotice(entry) {
-  const answer = `${HALFCYCLE_COMMAND} review ${quoteForShell(entry.phase)} --answer ${quoteForShell(entry.part)} "<your answer>"`;
+function questionNotice(entry, version2) {
+  const answer = `${halfcycleCommand(version2)} review ${quoteForShell(entry.phase)} --answer ${quoteForShell(entry.part)} "<your answer>"`;
   return `Before anything else: the project's owner asked about "${entry.partName}" in the review of ${phaseCalled(entry.phase)}: ${entry.question} Answer it with ${answer}.`;
 }
 function sentBackNotice2(entry) {
   return `Before anything else: the project's owner sent "${entry.partName}" in ${phaseCalled(entry.phase)} back to building: ${entry.note} Rebuild it: add or reopen the tasks that build it. For each task that rebuilds it, add a task that reviews the rebuild, held by a different agent from the one that built it. When each review has passed, report the build with the time each task finished, then run the close step again.`;
 }
-function reviewNoticeText(review) {
-  return [...review.questions.map(questionNotice), ...review.sentBack.map(sentBackNotice2)];
+function reviewNoticeText(review, version2) {
+  return [...review.questions.map((entry) => questionNotice(entry, version2)), ...review.sentBack.map(sentBackNotice2)];
 }
 
 // ../events/dist/credential-wire.js
@@ -19420,8 +19466,14 @@ var CREDENTIAL_PLACEHOLDERS = [
   UPDATE_CLAUDE_CODE_PLACEHOLDER
 ];
 var SWITCH_ACCOUNT_ANSWER = 'answer "s" when asked';
-var NO_CREDENTIAL_SENTENCE = 'Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "npx halfcycle" in the project folder to sign in again.';
-var NOT_THIS_ACCOUNT_SENTENCE = `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "npx halfcycle" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+function noCredentialSentence(version2) {
+  return `Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "${bareHalfcycleCommand(version2)}" in the project folder to sign in again.`;
+}
+var NO_CREDENTIAL_SENTENCE = noCredentialSentence();
+function notThisAccountSentence(version2) {
+  return `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "${bareHalfcycleCommand(version2)}" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+}
+var NOT_THIS_ACCOUNT_SENTENCE = notThisAccountSentence();
 var UPDATE_CLAUDE_CODE_SENTENCE = "Halfcycle is not connected: this Claude Code version does not name the server it connects to, so no credential was sent. Update Claude Code, then reopen.";
 var CANNOT_REACH_SENTENCE = "Halfcycle is not connected: its server could not be reached, so its tools are unavailable in this session. Check your network, then reopen the project.";
 var SERVICE_PROBLEM_SENTENCE = "Halfcycle is not connected: its service had a problem just now, so nothing in this session is being checked. Reopen the project to try again.";
@@ -19432,6 +19484,13 @@ var PLACEHOLDER_SENTENCES = Object.freeze({
   [NOT_THIS_ACCOUNT_PLACEHOLDER]: NOT_THIS_ACCOUNT_SENTENCE,
   [UPDATE_CLAUDE_CODE_PLACEHOLDER]: UPDATE_CLAUDE_CODE_SENTENCE
 });
+function placeholderSentencesOf(version2) {
+  return Object.freeze({
+    [NO_CREDENTIAL_PLACEHOLDER]: noCredentialSentence(version2),
+    [NOT_THIS_ACCOUNT_PLACEHOLDER]: notThisAccountSentence(version2),
+    [UPDATE_CLAUDE_CODE_PLACEHOLDER]: UPDATE_CLAUDE_CODE_SENTENCE
+  });
+}
 
 // ../events/dist/scope-chat.js
 var chatScopeApproveRequestSchema = external_exports.object({
@@ -19862,8 +19921,8 @@ var AUTONOMY_A5 = "Builds in this project wait for you again.";
 function withoutFinalStop(text) {
   return text.endsWith(".") ? text.slice(0, -1) : text;
 }
-function autonomyA9(what, id) {
-  return `Halfcycle saved a copy before this: ${withoutFinalStop(what)}. To bring it back, run: ${HALFCYCLE_COMMAND} restore ${id} (kept for 7 days).`;
+function autonomyA9(what, id, version2) {
+  return `Halfcycle saved a copy before this: ${withoutFinalStop(what)}. To bring it back, run: ${halfcycleCommand(version2)} restore ${id} (kept for 7 days).`;
 }
 function autonomyA10(typeSentence, item) {
   return `${typeSentence} Builds run on their own here, but this still waits for the owner. Declare it with halfcycle_declare_owner_wait, item ${String(item)}, and carry on with other work.`;
@@ -19929,6 +19988,53 @@ function checksReportOfInstructions(text) {
 // dist/hook-protocol.js
 import { writeSync } from "node:fs";
 
+// dist/pinned-engagement.js
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+function readPinnedId(root) {
+  let raw;
+  try {
+    raw = readFileSync(resolve(root, BUNDLE_PIN_REL), "utf-8");
+  } catch {
+    return { problem: "no-pin" };
+  }
+  let pin;
+  try {
+    pin = JSON.parse(raw);
+  } catch {
+    return { problem: "no-id" };
+  }
+  const id = typeof pin === "object" && pin !== null ? pin[PIN_ENGAGEMENT_ID_FIELD] : void 0;
+  return typeof id === "string" && id !== "" ? { id } : { problem: "no-id" };
+}
+function pinnedEngagementId(root) {
+  const pinned = readPinnedId(root);
+  return "id" in pinned && isEngagementId(pinned.id) ? pinned.id : void 0;
+}
+function projectFolder(env = process.env) {
+  const dir = env["CLAUDE_PROJECT_DIR"];
+  return dir !== void 0 && dir !== "" ? dir : process.cwd();
+}
+function readPinnedVersion(root) {
+  let raw;
+  try {
+    raw = readFileSync(resolve(root, BUNDLE_PIN_REL), "utf-8");
+  } catch {
+    return void 0;
+  }
+  let pin;
+  try {
+    pin = JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+  const version2 = typeof pin === "object" && pin !== null ? pin["version"] : void 0;
+  return typeof version2 === "string" && version2 !== "" ? version2 : void 0;
+}
+function installedVersion(env = process.env) {
+  return readPinnedVersion(projectFolder(env));
+}
+
 // dist/agent-argument.js
 var AGENT_FLAG = "--agent";
 function agentFromArguments(rest) {
@@ -19996,9 +20102,10 @@ function hookReply(event, profile = AGENT_PROFILES["claude-code"]) {
     if (!owesDoctorLine || doctorLineSaid)
       return;
     doctorLineSaid = true;
-    queued.push(DOCTOR_LINE);
+    const doctor = doctorLine(installedVersion());
+    queued.push(doctor);
     if (personOwedDoctorLine)
-      forPerson.push(DOCTOR_LINE);
+      forPerson.push(doctor);
   };
   return {
     notice(text) {
@@ -20020,7 +20127,7 @@ function hookReply(event, profile = AGENT_PROFILES["claude-code"]) {
     },
     loud(text, exitCode, notAFailure) {
       const said = notAFailure !== void 0 || doctorLineSaid ? text : `${text.trimEnd()}
-${DOCTOR_LINE}
+${doctorLine(installedVersion())}
 `;
       if (notAFailure === void 0)
         doctorLineSaid = true;
@@ -20112,7 +20219,7 @@ function lastResortReply(argv, text) {
 function answerUnexpectedError(argv, err, out) {
   const text = `halfcycle-runner: unexpected error: ${err instanceof Error ? err.message : String(err)}
 Contact hello@halfcycle.ai if this keeps happening.
-${DOCTOR_LINE}
+${doctorLine(installedVersion())}
 `;
   const reply = lastResortReply(argv, text);
   if (reply !== null) {
@@ -20150,7 +20257,7 @@ function noRepositoryText(failure) {
 }
 function contractFaultText(message) {
   return `[Halfcycle] WARNING: Guard response could not be understood \u2014 ${message}
-This is not a service outage: the guard service answered. The suspect is this repository's own installed halfcycle runner, which is out of date with what the service now sends. Update it: run "npx halfcycle" in this repository, then retry. Session continues (fail-open).`;
+This is not a service outage: the guard service answered. The suspect is this repository's own installed halfcycle runner, which is out of date with what the service now sends. Update it: run ${signInCommand(installedVersion())} in this repository, then retry. Session continues (fail-open).`;
 }
 var UNCONFIGURED_EXIT_TOOL_USE = 2;
 var UNCONFIGURED_EXIT_STOP_FAMILY = 1;
@@ -20166,8 +20273,8 @@ function emitNeverConfigured(exitCode, reason, engagementId, reply) {
   writeSync(2, text);
   process.exitCode = exitCode;
 }
-function namesTheSignInCommand(text) {
-  return text.includes(SIGN_IN_COMMAND);
+function namesTheSignInCommand(text, version2) {
+  return text.includes(signInCommand(version2 ?? installedVersion()));
 }
 var PERMISSIONS_BLOCK = "\n    permissions:\n      contents: read\n      id-token: write\n\n";
 var BOTH_LINES_SENTENCE = "BOTH LINES. Declaring any permission replaces the defaults rather than adding to them, so a block naming only the identity token takes read access away from the checkout step and a private repository stops checking out before this check is reached.";
@@ -20192,13 +20299,13 @@ ${CI_OLDER_SETUP}
 `;
 }
 function notThisAccountReport(label, engagementId) {
-  return `${label} This project belongs to another Halfcycle account. Halfcycle is Solo today \u2014 one person works on a project at a time \u2014 so no credential exists for this machine and none will be issued. Nothing here needs fixing; this copy simply is not checked. ${requestAccessSentence(engagementId)} If this account is wrong, sign in as the one that owns the project and run "npx halfcycle" again.
+  return `${label} This project belongs to another Halfcycle account. Halfcycle is Solo today \u2014 one person works on a project at a time \u2014 so no credential exists for this machine and none will be issued. Nothing here needs fixing; this copy simply is not checked. ${requestAccessSentence(engagementId, readControlOrigin().origin)} If this account is wrong, sign in as the one that owns the project and run ${signInCommand(installedVersion())} again.
 `;
 }
 function neverConfiguredReport(reason, label = "[Halfcycle]", engagementId) {
   switch (reason) {
     case "no-credential-yet":
-      return neverConfiguredMessage(HOOK_REMEDY, label);
+      return neverConfiguredMessage(hookRemedy(installedVersion()), label);
     case "not-this-account":
       return notThisAccountReport(label, engagementId);
   }
@@ -20242,7 +20349,7 @@ This is not a service outage. The guard service is up and replying; ${cause}, so
 ${remedy}
 `;
 }
-function emitCredentialRejected(statusCode, serviceMessage, exitCode, remedy = HOOK_REMEDY, reply) {
+function emitCredentialRejected(statusCode, serviceMessage, exitCode, remedy = hookRemedy(installedVersion()), reply) {
   const text = credentialRejectedMessage(statusCode, serviceMessage, remedy);
   if (reply !== void 0) {
     reply.loud(text, exitCode);
@@ -20256,20 +20363,20 @@ function credentialRenewalFailedMessage(remedy, label = "[Halfcycle]") {
 ${remedy}
 `;
 }
-function noCoverageStatement(reason, remedySaid = false, engagementId) {
+function noCoverageStatement(reason, remedySaid = false, engagementId, version2 = installedVersion()) {
   if (reason === "not-this-account") {
     return [
       "[halfcycle] This project belongs to another Halfcycle account, so nothing here is checked.",
       "[halfcycle] Your work carries on exactly as it would without Halfcycle \u2014 no edit is",
       "[halfcycle] evaluated, and nothing you do is reported as having passed.",
       "[halfcycle] Halfcycle is Solo today \u2014 one developer per project \u2014 with Team plans coming.",
-      `[halfcycle] ${requestAccessSentence(engagementId)}`,
+      `[halfcycle] ${requestAccessSentence(engagementId, readControlOrigin().origin)}`,
       "[halfcycle] If this account is wrong, sign in as the one that owns the project and run",
-      '[halfcycle] "npx halfcycle" again.'
+      `[halfcycle] ${signInCommand(version2)} again.`
     ].join("\n");
   }
   const statement = `${NO_SIGN_IN_HERE}, so edits made in this session won't be checked.`;
-  return remedySaid ? statement : `${statement} ${HOOK_REMEDY}`;
+  return remedySaid ? statement : `${statement} ${hookRemedy(version2)}`;
 }
 function notRunReport(notRun, label = "[Halfcycle]") {
   if (!notRun || notRun.length === 0)
@@ -20494,7 +20601,7 @@ async function attempt2(url2, token, request, fetchFn, retry) {
 
 // dist/git.js
 import { spawnSync } from "node:child_process";
-import { existsSync as existsSync2, readFileSync } from "node:fs";
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
 import { relative } from "node:path";
 var COLOR_AWARE_SUBCOMMANDS = /* @__PURE__ */ new Set(["diff", "show", "log"]);
 function spawnGit(args2, cwd, timeoutMs, extra) {
@@ -20527,7 +20634,7 @@ function getSingleFileDiff(absFilePath, repoRoot) {
     return diffResult.value;
   }
   try {
-    const content = readFileSync(absFilePath, "utf-8");
+    const content = readFileSync2(absFilePath, "utf-8");
     if (!content.trim())
       return "";
     const lines2 = content.split("\n");
@@ -21354,7 +21461,7 @@ function detectBlastRadiusMarkers(filePath, diffContent) {
 }
 
 // dist/extract/numeric-columns.js
-import { readFileSync as readFileSync2, readdirSync } from "node:fs";
+import { readFileSync as readFileSync3, readdirSync } from "node:fs";
 import { join as join2 } from "node:path";
 function extractNumericColumns(diffContent, context = {}) {
   const addedLines = [];
@@ -21432,7 +21539,7 @@ function walkForRegistrations(dir, repoRoot, acc) {
       continue;
     let content;
     try {
-      content = readFileSync2(absPath, "utf-8");
+      content = readFileSync3(absPath, "utf-8");
     } catch {
       continue;
     }
@@ -21569,7 +21676,7 @@ function resolveWireFields(lines2, decls) {
 }
 
 // dist/fixtures-manifest.js
-import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync4, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join as join3 } from "node:path";
 function manifestPath(repoRoot) {
   return join3(repoRoot, "test", "fixtures", "captured", "manifest.json");
@@ -21582,7 +21689,7 @@ function loadManifest(repoRoot) {
     return [];
   let raw;
   try {
-    raw = readFileSync3(manifestPath(repoRoot), "utf-8");
+    raw = readFileSync4(manifestPath(repoRoot), "utf-8");
   } catch {
     return [];
   }
@@ -21855,7 +21962,7 @@ function toAstShapes(markers) {
 }
 
 // dist/extract/context.js
-import { readFileSync as readFileSync4, readdirSync as readdirSync2 } from "node:fs";
+import { readFileSync as readFileSync5, readdirSync as readdirSync2 } from "node:fs";
 import { join as join4, relative as relative2, sep } from "node:path";
 
 // dist/extract/repo-facts.js
@@ -22005,7 +22112,7 @@ function walk(dir, repoRoot, acc, facts, underDocs = false) {
     noteFileName(facts, entry.name, underDocs);
     if (!underDocs && isFactManifest(entry.name)) {
       try {
-        noteManifest(facts, entry.name, readFileSync4(join4(dir, entry.name), "utf-8"));
+        noteManifest(facts, entry.name, readFileSync5(join4(dir, entry.name), "utf-8"));
       } catch {
         continue;
       }
@@ -22016,7 +22123,7 @@ function walk(dir, repoRoot, acc, facts, underDocs = false) {
     const absPath = join4(dir, entry.name);
     let content;
     try {
-      content = readFileSync4(absPath, "utf-8");
+      content = readFileSync5(absPath, "utf-8");
     } catch {
       continue;
     }
@@ -22088,11 +22195,8 @@ async function postTelemetry(run, baseUrl, token, logger, fetchFn) {
     if (!response.ok) {
       logger.warn(`[Halfcycle telemetry] Control-plane POST returned ${response.status} (dropped \u2014 best-effort)`);
     }
-  } catch (err) {
+  } catch {
     clearTimeout(timer);
-    const isTimeout = err instanceof Error && err.name === "AbortError";
-    const msg = isTimeout ? `Control-plane timed out after ${TELEMETRY_TIMEOUT_MS}ms (dropped \u2014 best-effort)` : err instanceof Error ? `Control-plane unreachable: ${err.message} (dropped \u2014 best-effort)` : `Control-plane error: ${String(err)} (dropped \u2014 best-effort)`;
-    logger.warn(`[Halfcycle telemetry] ${msg}`);
   }
 }
 function changeSetDescriptorCount(changeSet) {
@@ -22350,34 +22454,6 @@ function cleanRunSummary(verdict, scope) {
   return `[Halfcycle CI] ${verdict} ${files}, ${scope.signals} signal(s) checked.`;
 }
 
-// dist/pinned-engagement.js
-import { readFileSync as readFileSync5 } from "node:fs";
-import { resolve } from "node:path";
-function readPinnedId(root) {
-  let raw;
-  try {
-    raw = readFileSync5(resolve(root, BUNDLE_PIN_REL), "utf-8");
-  } catch {
-    return { problem: "no-pin" };
-  }
-  let pin;
-  try {
-    pin = JSON.parse(raw);
-  } catch {
-    return { problem: "no-id" };
-  }
-  const id = typeof pin === "object" && pin !== null ? pin[PIN_ENGAGEMENT_ID_FIELD] : void 0;
-  return typeof id === "string" && id !== "" ? { id } : { problem: "no-id" };
-}
-function pinnedEngagementId(root) {
-  const pinned = readPinnedId(root);
-  return "id" in pinned && isEngagementId(pinned.id) ? pinned.id : void 0;
-}
-function projectFolder(env = process.env) {
-  const dir = env["CLAUDE_PROJECT_DIR"];
-  return dir !== void 0 && dir !== "" ? dir : process.cwd();
-}
-
 // dist/credential-store.js
 import { chmodSync, existsSync as existsSync4, readFileSync as readFileSync6, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
 import { homedir as homedir3, platform } from "node:os";
@@ -22514,12 +22590,12 @@ async function mintThroughJoin(controlOrigin, engagementId, accountCredential, f
   }
   if (!response.ok) {
     if (response.status === UNAUTHORIZED)
-      return { ok: false, remedy: HOOK_REMEDY };
+      return { ok: false, remedy: hookRemedy(installedVersion()) };
     return { ok: false, remedy: planeSentence(body) ?? UNREADABLE_REFUSAL_REMEDY };
   }
   const parsed = engagementCredentialResponseSchema.safeParse(body);
   if (!parsed.success)
-    return { ok: false, remedy: UNREADABLE_MINT_REMEDY };
+    return { ok: false, remedy: unreadableMintRemedy() };
   return { ok: true, token: parsed.data.sessionToken, source: "mint" };
 }
 function planeSentence(body) {
@@ -22530,11 +22606,13 @@ function planeSentence(body) {
 }
 var UNREACHABLE_REMEDY = "The Halfcycle service could not be reached to renew this credential. Nothing is wrong with this repository; the next change will try again.";
 var UNREADABLE_REFUSAL_REMEDY = "The Halfcycle service declined to renew this credential and gave no reason this version could read.";
-var UNREADABLE_MINT_REMEDY = 'The Halfcycle service answered with a credential this version could not read. Update the installed Halfcycle runner: run "npx halfcycle" in this repository.';
+function unreadableMintRemedy() {
+  return `The Halfcycle service answered with a credential this version could not read. Update the installed Halfcycle runner: run ${signInCommand(installedVersion())} in this repository.`;
+}
 async function refreshEngagementCredential(opts) {
   const envFilePath = readEnvFilePath(opts.source);
   if (!envFilePath)
-    return { ok: false, remedy: HOOK_REMEDY };
+    return { ok: false, remedy: hookRemedy(installedVersion()) };
   const stored = readStoredEngagementToken(envFilePath);
   if (stored !== void 0 && stored !== opts.refusedToken) {
     return { ok: true, token: stored, source: "disk" };
@@ -22542,7 +22620,7 @@ async function refreshEngagementCredential(opts) {
   const controlOrigin = readControlOrigin(opts.source).origin;
   const accountCredential = readAccountCredential(controlOrigin, opts.home);
   if (!accountCredential)
-    return { ok: false, remedy: HOOK_REMEDY };
+    return { ok: false, remedy: hookRemedy(installedVersion()) };
   const minted = await mintThroughJoin(controlOrigin, opts.engagementId, accountCredential, opts.fetchFn ?? globalThis.fetch);
   if (!minted.ok)
     return minted;
@@ -22563,10 +22641,10 @@ async function evaluateWithRefresh(opts) {
   const fetchFn = opts.fetchFn ?? globalThis.fetch;
   const first = await evaluate(opts.guardServiceUrl, opts.token, opts.request, fetchFn);
   if (first.ok)
-    return { result: first, token: opts.token, remedy: HOOK_REMEDY };
+    return { result: first, token: opts.token, remedy: hookRemedy(installedVersion()) };
   const failure = classifyFailure(first);
   if (failure.kind !== "credential" || failure.statusCode !== UNAUTHORIZED) {
-    return { result: first, token: opts.token, remedy: HOOK_REMEDY };
+    return { result: first, token: opts.token, remedy: hookRemedy(installedVersion()) };
   }
   const refreshed = await refreshEngagementCredential({
     engagementId: opts.engagementId,
@@ -22578,7 +22656,7 @@ async function evaluateWithRefresh(opts) {
   if (!refreshed.ok)
     return { result: first, token: opts.token, remedy: refreshed.remedy };
   const retry = await evaluate(opts.guardServiceUrl, refreshed.token, opts.request, fetchFn);
-  return { result: retry, token: refreshed.token, remedy: HOOK_REMEDY };
+  return { result: retry, token: refreshed.token, remedy: hookRemedy(installedVersion()) };
 }
 
 // dist/hooks/marker.js
@@ -23708,7 +23786,7 @@ async function observeChanges(sessionId, reply, deps = {}) {
 var R1_START_NOT_HERE = "Halfcycle cannot count what this phase has changed on this computer yet, because the commit the phase started from is not here. Get the project's latest history, and it counts again at the end of the next reply.";
 var R2_START_NOT_ON_BRANCH = "Halfcycle cannot count what this phase has changed on this branch, because the branch does not contain the commit the phase started from. Switch to the branch the phase is built on, and it counts again at the end of the next reply.";
 function r3NoStartRecorded(phase) {
-  return `Halfcycle cannot count what phase "${phase}" changes, because no starting commit was recorded when it opened. To count from where the project is now, run: ${HALFCYCLE_COMMAND} open-phase ${quoteForShell(phase)} --actor "you" --evidence "<what shows this phase is ready to start>"`;
+  return `Halfcycle cannot count what phase "${phase}" changes, because no starting commit was recorded when it opened. To count from where the project is now, run: ${halfcycleCommand(installedVersion())} open-phase ${quoteForShell(phase)} --actor "you" --evidence "<what shows this phase is ready to start>"`;
 }
 function r4OutsideThePlan(parts) {
   const first = parts.length === 1 ? "Halfcycle saw changes to a part this phase's plan does not include:" : "Halfcycle saw changes to parts this phase's plan does not include:";
@@ -27197,12 +27275,12 @@ function runsBesideOtherWork(toolInput, record2) {
 }
 
 // dist/pace-hook.js
-import { mkdirSync as mkdirSync9, readFileSync as readFileSync21, renameSync as renameSync11, unlinkSync as unlinkSync8, writeFileSync as writeFileSync13 } from "node:fs";
+import { mkdirSync as mkdirSync10, readFileSync as readFileSync22, renameSync as renameSync12, unlinkSync as unlinkSync8, writeFileSync as writeFileSync14 } from "node:fs";
 import nodePath6 from "node:path";
 
 // dist/pace-verb.js
-import { mkdirSync as mkdirSync8, readdirSync as readdirSync8, readFileSync as readFileSync20, renameSync as renameSync10, statSync as statSync6, writeFileSync as writeFileSync12 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
+import { mkdirSync as mkdirSync9, readdirSync as readdirSync8, readFileSync as readFileSync21, renameSync as renameSync11, statSync as statSync6, writeFileSync as writeFileSync13 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
 import nodePath5 from "node:path";
 
 // dist/plan-report.js
@@ -27356,12 +27434,72 @@ async function planUsageReport(input, deps = {}) {
   }
 }
 
+// dist/relayed-choices.js
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync20, renameSync as renameSync10, rmSync as rmSync3, writeFileSync as writeFileSync12 } from "node:fs";
+import { homedir as homedir9 } from "node:os";
+import { dirname as dirname6, join as join15 } from "node:path";
+function relayedChoicesFilePath(engagementId, home) {
+  if (!isEngagementId(engagementId))
+    return null;
+  return join15(home ?? homedir9(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, PACING_DIR_NAME, RELAYED_CHOICES_FILENAME);
+}
+function readRelayedChoices(engagementId, phase, home) {
+  const path = relayedChoicesFilePath(engagementId, home);
+  if (path === null)
+    return null;
+  try {
+    const parsed = relayedChoicesFileSchema.safeParse(JSON.parse(readFileSync20(path, "utf-8")));
+    return parsed.success && parsed.data.phase === phase ? parsed.data : null;
+  } catch {
+    return null;
+  }
+}
+function keptSaid(said) {
+  const cut = said.trim().slice(0, RELAYED_SAID_MAX);
+  const last = cut.charCodeAt(cut.length - 1);
+  return (last >= 55296 && last <= 56319 ? cut.slice(0, -1) : cut).trim();
+}
+function recordRelayedChoice(opts) {
+  const target = relayedChoicesFilePath(opts.engagementId, opts.home);
+  if (target === null || !phaseNameSchema.safeParse(opts.phase).success)
+    return false;
+  const said = keptSaid(opts.said);
+  if (said === "")
+    return false;
+  const when = opts.now ?? /* @__PURE__ */ new Date();
+  if (Number.isNaN(when.getTime()))
+    return false;
+  const entry = { at: when.toISOString(), said };
+  const before = readRelayedChoices(opts.engagementId, opts.phase, opts.home);
+  const file2 = relayedChoicesFileSchema.safeParse({
+    phase: opts.phase,
+    entries: [...before?.entries ?? [], entry]
+  });
+  if (!file2.success)
+    return false;
+  const temp = join15(dirname6(target), `.${RELAYED_CHOICES_FILENAME}.${process.pid}.tmp`);
+  try {
+    mkdirSync8(dirname6(target), { recursive: true, mode: 448 });
+    writeFileSync12(temp, `${JSON.stringify(file2.data)}
+`, { mode: 384 });
+    renameSync10(temp, target);
+    return true;
+  } catch {
+    try {
+      rmSync3(temp, { force: true });
+    } catch {
+    }
+    return false;
+  }
+}
+
 // dist/pace-verb.js
 var PACE_WINDOW_MINUTES = 300;
 var PACE_BASIS_DEADLINE_MS = 5e3;
 var PACE_FIRST_READ_WAIT_MS = 10 * 60 * 1e3;
 var PACE_LATER_READ_WAIT_MS = 5e3;
 var BUILD_NUMBER_FILENAME = "build.json";
+var PROJECT_PACE_FILENAME = "project-pace.json";
 function layoutGraph(tasks, agents, medianTaskMinutes) {
   const index = /* @__PURE__ */ new Map();
   tasks.forEach((t2, i) => {
@@ -27479,14 +27617,14 @@ function weekCeilingFor(key, home) {
 function enginePacingDir(engagementId, home) {
   if (!isEngagementId(engagementId))
     return null;
-  return nodePath5.join(home ?? homedir9(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, PACING_DIR_NAME);
+  return nodePath5.join(home ?? homedir10(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, PACING_DIR_NAME);
 }
 function readBuildNumber(engagementId, home) {
   const dir = enginePacingDir(engagementId, home);
   if (dir === null)
     return null;
   try {
-    const v = JSON.parse(readFileSync20(nodePath5.join(dir, BUILD_NUMBER_FILENAME), "utf-8"));
+    const v = JSON.parse(readFileSync21(nodePath5.join(dir, BUILD_NUMBER_FILENAME), "utf-8"));
     const n = v["number"];
     if (typeof v["phase"] === "string" && typeof n === "number" && Number.isInteger(n) && n >= 1 && n <= PACE_AGENTS_MAX && typeof v["namedByOwner"] === "boolean") {
       return { phase: v["phase"], number: n, namedByOwner: v["namedByOwner"] };
@@ -27503,11 +27641,54 @@ function writeBuildNumber(engagementId, value, home) {
   const dir = enginePacingDir(engagementId, home);
   if (dir === null)
     throw new Error("not an engagement id");
-  mkdirSync8(dir, { recursive: true, mode: 448 });
+  mkdirSync9(dir, { recursive: true, mode: 448 });
   const path = nodePath5.join(dir, BUILD_NUMBER_FILENAME);
   const tmp = `${path}.${String(process.pid)}.tmp`;
-  writeFileSync12(tmp, JSON.stringify(value), { mode: 384 });
-  renameSync10(tmp, path);
+  writeFileSync13(tmp, JSON.stringify(value), { mode: 384 });
+  renameSync11(tmp, path);
+}
+var NO_PROJECT_PACE = { number: null, relayed: [] };
+function readProjectPace(engagementId, home) {
+  const dir = enginePacingDir(engagementId, home);
+  if (dir === null)
+    return NO_PROJECT_PACE;
+  try {
+    const v = JSON.parse(readFileSync21(nodePath5.join(dir, PROJECT_PACE_FILENAME), "utf-8"));
+    const n = v["number"];
+    const number4 = typeof n === "number" && Number.isInteger(n) && n >= 1 && n <= PACE_AGENTS_MAX ? n : null;
+    const list = Array.isArray(v["relayed"]) ? v["relayed"] : [];
+    const relayed = list.flatMap((e) => {
+      if (typeof e !== "object" || e === null)
+        return [];
+      const { at, said } = e;
+      return typeof at === "string" && typeof said === "string" ? [{ at, said }] : [];
+    });
+    return { number: number4, relayed };
+  } catch {
+    return NO_PROJECT_PACE;
+  }
+}
+function writeProjectPace(engagementId, value, home) {
+  const dir = enginePacingDir(engagementId, home);
+  if (dir === null)
+    throw new Error("not an engagement id");
+  mkdirSync9(dir, { recursive: true, mode: 448 });
+  const path = nodePath5.join(dir, PROJECT_PACE_FILENAME);
+  const tmp = `${path}.${String(process.pid)}.tmp`;
+  writeFileSync13(tmp, JSON.stringify(value), { mode: 384 });
+  renameSync11(tmp, path);
+}
+function moveRelayedToPhase(engagementId, phase, project, home) {
+  if (project.relayed.length === 0)
+    return;
+  try {
+    for (const e of project.relayed) {
+      const at = new Date(e.at);
+      recordRelayedChoice({ engagementId, phase, said: e.said, now: Number.isNaN(at.getTime()) ? void 0 : at, home });
+    }
+    writeProjectPace(engagementId, { number: project.number, relayed: [] }, home);
+  } catch {
+  }
 }
 function liveSubAgentsIn(cwd, deps = {}) {
   try {
@@ -27681,7 +27862,8 @@ async function runPaceVerb(args2, deps = {}) {
     let limitFile = null;
     if (parsed.kind === "start") {
       const stored = buildNumberFor(engagementId, parsed.phase, deps.home);
-      const kept = stored !== null && stored.namedByOwner ? stored.number : null;
+      const project = readProjectPace(engagementId, deps.home);
+      const kept = stored !== null && stored.namedByOwner ? stored.number : project.number;
       const sameGraph = basis !== null && basis.phase === parsed.phase;
       const suggestFor = (named2) => suggestPace({
         keepFreePercent,
@@ -27701,6 +27883,7 @@ async function runPaceVerb(args2, deps = {}) {
       suggestion = { ...named === null ? suggested : suggestFor(named), ...ceiling };
       number4 = suggestion.number;
       writeBuildNumber(engagementId, { phase: parsed.phase, number: number4, namedByOwner: named !== null }, deps.home);
+      moveRelayedToPhase(engagementId, parsed.phase, project, deps.home);
       const limitBasis = basis === null ? null : { tasks: sameGraph ? basis.tasks : [], medianTaskTokens: basis.medianTaskTokens };
       limitFile = limitAtStart(pacingDir2, parsed.phase, limitBasis, suggestion.minutes, readPhaseUsage(pacingDir2, parsed.phase));
       if (limitFile !== null) {
@@ -27715,7 +27898,7 @@ async function runPaceVerb(args2, deps = {}) {
       }
     } else {
       const stored = basis === null ? readBuildNumber(engagementId, deps.home) : basis.phase === null ? null : buildNumberFor(engagementId, basis.phase, deps.home);
-      number4 = stored?.number ?? CAREFUL_START_AGENTS;
+      number4 = stored?.number ?? readProjectPace(engagementId, deps.home).number ?? CAREFUL_START_AGENTS;
       if (basis !== null) {
         limitFile = basis.phase === null ? null : limitInForce(pacingDir2, basis.phase, { tasks: basis.tasks, medianTaskTokens: basis.medianTaskTokens }, readPhaseUsage(pacingDir2, basis.phase));
       } else {
@@ -27785,17 +27968,17 @@ function objectOf2(v) {
 }
 function readJson(path) {
   try {
-    return objectOf2(JSON.parse(readFileSync21(path, "utf-8")));
+    return objectOf2(JSON.parse(readFileSync22(path, "utf-8")));
   } catch {
     return null;
   }
 }
 function writeJsonWhole2(path, value) {
-  mkdirSync9(nodePath6.dirname(path), { recursive: true, mode: 448 });
+  mkdirSync10(nodePath6.dirname(path), { recursive: true, mode: 448 });
   const tmp = `${path}.${String(process.pid)}.${Math.random().toString(36).slice(2, 10)}.tmp`;
   try {
-    writeFileSync13(tmp, JSON.stringify(value), { mode: 384 });
-    renameSync11(tmp, path);
+    writeFileSync14(tmp, JSON.stringify(value), { mode: 384 });
+    renameSync12(tmp, path);
   } catch (err) {
     try {
       unlinkSync8(tmp);
@@ -27932,7 +28115,7 @@ async function paceAtTurnEnd(input, reply, deps = {}) {
     }
     const reported = readReportedAccount(key, { home: deps.home });
     const build = buildNumberFor(engagementId, basis.phase, deps.home);
-    const number4 = build?.number ?? CAREFUL_START_AGENTS;
+    const number4 = build?.number ?? readProjectPace(engagementId, deps.home).number ?? CAREFUL_START_AGENTS;
     const decision = paceOf({ number: number4, keepFreePercent: basis.keepFreePercent, learned, reported, now });
     const settled2 = {
       pace: decision.pace,
@@ -28104,14 +28287,14 @@ function paceHoldText(input, toolInput, deps = {}) {
 
 // dist/risky/account-names.js
 import { randomBytes } from "node:crypto";
-import { mkdirSync as mkdirSync10, readFileSync as readFileSync23, renameSync as renameSync12, rmSync as rmSync3, statSync as statSync8, writeFileSync as writeFileSync14 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { isAbsolute as isAbsolute5, join as join16, posix as posix2, resolve as resolve7, sep as sep6 } from "node:path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync24, renameSync as renameSync13, rmSync as rmSync4, statSync as statSync8, writeFileSync as writeFileSync15 } from "node:fs";
+import { homedir as homedir12 } from "node:os";
+import { isAbsolute as isAbsolute5, join as join17, posix as posix2, resolve as resolve7, sep as sep6 } from "node:path";
 
 // dist/risky/facts.js
-import { existsSync as existsSync8, lstatSync as lstatSync3, readdirSync as readdirSync9, readFileSync as readFileSync22, realpathSync as realpathSync7, statSync as statSync7 } from "node:fs";
-import { homedir as homedir10, tmpdir as tmpdir2 } from "node:os";
-import { basename as pathBasename, dirname as dirname6, isAbsolute as isAbsolute4, join as join15, relative as relative7, resolve as resolve6, sep as sep5 } from "node:path";
+import { existsSync as existsSync8, lstatSync as lstatSync3, readdirSync as readdirSync9, readFileSync as readFileSync23, realpathSync as realpathSync7, statSync as statSync7 } from "node:fs";
+import { homedir as homedir11, tmpdir as tmpdir2 } from "node:os";
+import { basename as pathBasename, dirname as dirname7, isAbsolute as isAbsolute4, join as join16, relative as relative7, resolve as resolve6, sep as sep5 } from "node:path";
 
 // dist/risky/shell.js
 var MAX_DEPTH = 8;
@@ -29412,21 +29595,281 @@ function recogniseSimple(cmd) {
 function programForms(words) {
   const forms = [words];
   const prog = basename3(words[0].text);
+  const args2 = words.slice(1);
   let rest;
   if (prog === "npx" || prog === "bunx" || prog === "pnpx") {
-    rest = skipRunnerOptions(words.slice(1));
+    rest = skipRunnerOptions(args2);
   } else if (prog === "npm" || prog === PNPM || prog === "yarn" || prog === "bun") {
-    const lead = skipLeading(words.slice(1), MANAGER_VALUE_OPTIONS);
+    const lead = skipLeading(args2, MANAGER_VALUE_OPTIONS);
     const sub = lead[0]?.text;
     if (sub === "exec" || sub === "dlx" || sub === "x")
       rest = skipRunnerOptions(lead.slice(1));
     else if (sub !== void 0 && prog !== "npm")
       rest = lead;
+  } else {
+    const started = PYTHON_PROGRAM.test(prog) ? pythonStarts(args2) : prog === "ruby" ? rubyStarts(args2) : prog === "bundle" ? bundleExecStarts(args2) : prog === "go" ? goRunStarts(args2) : prog === "cargo" ? cargoRunStarts(args2) : prog === "uv" ? uvRunStarts(args2) : prog === DENO ? denoRunStarts(args2) : void 0;
+    if (started !== void 0 && started.length > 0 && startsPublisher(started[0]))
+      rest = started;
+    else if (prog === "uv" && started !== void 0 && started.length > 0) {
+      for (const inner of programForms(started).slice(1))
+        if (startsPublisher(inner[0]))
+          forms.push(inner);
+    }
   }
   if (rest !== void 0 && rest.length > 0)
     forms.push(rest);
   return forms;
 }
+var DENO = "deno";
+var UV_VALUE_OPTIONS = /* @__PURE__ */ new Set([
+  "--directory",
+  "--project",
+  "--config-file",
+  "--cache-dir",
+  "--python",
+  "-p",
+  "--with",
+  "--with-editable",
+  "--with-requirements",
+  "--env-file",
+  "--package",
+  "--extra",
+  "--group",
+  "--no-group",
+  "--only-group",
+  "--index",
+  "--default-index",
+  "--index-url",
+  "-i",
+  "--extra-index-url",
+  "--find-links",
+  "-f",
+  "--index-strategy",
+  "--keyring-provider",
+  "--resolution",
+  "--prerelease",
+  "--exclude-newer",
+  "--link-mode",
+  "--color",
+  "--refresh-package",
+  "--reinstall-package",
+  "--upgrade-package",
+  "-P",
+  "--python-preference"
+]);
+function uvRunStarts(args2) {
+  const lead = skipLeading(args2, UV_VALUE_OPTIONS);
+  if (lead[0]?.text !== "run")
+    return void 0;
+  const rest = lead.slice(1);
+  let j = 0;
+  while (j < rest.length) {
+    const t = rest[j].text;
+    if (t === "--")
+      return rest.slice(j + 1);
+    if (t === "-m" || t === "--module")
+      return rest.slice(j + 1);
+    if (!t.startsWith("-"))
+      return rest.slice(j);
+    j += UV_VALUE_OPTIONS.has(t) ? 2 : 1;
+  }
+  return void 0;
+}
+var DENO_VALUE_OPTIONS = /* @__PURE__ */ new Set([
+  "-c",
+  "--config",
+  "--import-map",
+  "--lock",
+  "--cert",
+  "--location",
+  "--seed",
+  "--v8-flags"
+]);
+function denoRunStarts(args2) {
+  if (args2[0]?.text !== "run")
+    return void 0;
+  const rest = args2.slice(1);
+  let j = 0;
+  while (j < rest.length) {
+    const t = rest[j].text;
+    if (t === "--") {
+      j++;
+      break;
+    }
+    if (!t.startsWith("-"))
+      break;
+    j += DENO_VALUE_OPTIONS.has(t) ? 2 : 1;
+  }
+  const spec = rest[j];
+  const m = spec === void 0 ? null : /^(?:npm|jsr):(.+)$/.exec(spec.text);
+  if (spec === void 0 || m === null)
+    return void 0;
+  const parts = m[1].split("/").filter((p) => p !== "");
+  const name = parts[0]?.startsWith("@") ? parts[1] : parts[0];
+  const bare = name?.replace(/@.*$/, "");
+  return bare === void 0 || bare === "" ? void 0 : [{ text: bare, literal: spec.literal }, ...rest.slice(j + 1)];
+}
+var PYTHON_PROGRAM = /^python(\d+(\.\d+)*)?$/;
+function startsPublisher(word) {
+  const prog = basename3(word.text);
+  return Object.hasOwn(PUBLISH_SEQUENCES, prog) || Object.hasOwn(DEPLOY_SEQUENCES, prog) || prog === VERCEL;
+}
+function readCluster(args2, i, letters) {
+  const word = args2[i];
+  const t = word.text;
+  for (let k = 1; k < t.length; k++) {
+    const c = t[k];
+    if (letters.stop.includes(c))
+      return null;
+    const tail = t.slice(k + 1);
+    if (letters.start.includes(c))
+      return tail !== "" ? [{ text: tail, literal: word.literal }, ...args2.slice(i + 1)] : args2.slice(i + 1);
+    if (letters.value.includes(c))
+      return tail !== "" ? i + 1 : i + 2;
+    if (letters.attached.includes(c))
+      return i + 1;
+  }
+  return i + 1;
+}
+function interpreterStarts(args2, letters) {
+  let i = 0;
+  while (i < args2.length) {
+    const t = args2[i].text;
+    if (t === "--")
+      return args2.slice(i + 1);
+    if (t === "-")
+      return void 0;
+    if (!t.startsWith("-"))
+      return args2.slice(i);
+    if (t.startsWith("--")) {
+      i++;
+      continue;
+    }
+    const next = readCluster(args2, i, letters);
+    if (next === null)
+      return void 0;
+    if (typeof next !== "number")
+      return next;
+    i = next;
+  }
+  return void 0;
+}
+function pythonStarts(args2) {
+  return interpreterStarts(args2, { stop: "c", start: "m", value: "WX", attached: "" });
+}
+function rubyStarts(args2) {
+  return interpreterStarts(args2, { stop: "e", start: "S", value: "IrCE", attached: "0FiKTWx" });
+}
+function bundleExecStarts(args2) {
+  const lead = skipLeading(args2, EMPTY);
+  return lead[0]?.text === "exec" ? skipLeading(lead.slice(1), EMPTY) : void 0;
+}
+var GO_BUILD_VALUE_FLAGS = /* @__PURE__ */ new Set([
+  "C",
+  "p",
+  "asmflags",
+  "buildmode",
+  "compiler",
+  "coverpkg",
+  "covermode",
+  "exec",
+  "gccgoflags",
+  "gcflags",
+  "installsuffix",
+  "ldflags",
+  "mod",
+  "modfile",
+  "overlay",
+  "pgo",
+  "pkgdir",
+  "tags",
+  "toolexec"
+]);
+function goRunStarts(args2) {
+  if (args2[0]?.text !== "run")
+    return void 0;
+  const rest = args2.slice(1);
+  let i = 0;
+  while (i < rest.length) {
+    const t = rest[i].text;
+    if (t === "--") {
+      i++;
+      break;
+    }
+    if (!t.startsWith("-"))
+      break;
+    const name = t.replace(/^--?/, "");
+    i += !name.includes("=") && GO_BUILD_VALUE_FLAGS.has(name) ? 2 : 1;
+  }
+  const pkg = rest[i];
+  if (pkg === void 0 || pkg.text.startsWith(".") || pkg.text.startsWith("/") || pkg.text.endsWith(".go"))
+    return void 0;
+  const parts = pkg.text.split("@")[0].split("/").filter((p) => p !== "");
+  let last = parts.pop();
+  if (last !== void 0 && /^v\d+$/.test(last) && parts.length > 0)
+    last = parts.pop();
+  return last === void 0 ? void 0 : [{ text: last, literal: pkg.literal }, ...rest.slice(i + 1)];
+}
+var CARGO_VALUE_OPTIONS = /* @__PURE__ */ new Set(["-C", "-Z", "--config", "--color"]);
+var CARGO_RUN_VALUE_OPTIONS = /* @__PURE__ */ new Set([
+  "-F",
+  "--features",
+  "--target",
+  "--target-dir",
+  "--manifest-path",
+  "-j",
+  "--jobs",
+  "--profile",
+  "--color",
+  "--config",
+  "-Z",
+  "--message-format",
+  "--lockfile-path"
+]);
+var CARGO_PROGRAM_OPTIONS = ["--bin", "--example", "-p", "--package"];
+function cargoRunStarts(args2) {
+  let i = 0;
+  while (i < args2.length) {
+    const t = args2[i].text;
+    if (t === "--" || !(t.startsWith("-") || t.startsWith("+")))
+      break;
+    i += CARGO_VALUE_OPTIONS.has(t) ? 2 : 1;
+  }
+  const sub = args2[i]?.text;
+  if (sub !== "run" && sub !== "r")
+    return void 0;
+  const rest = args2.slice(i + 1);
+  let named;
+  let namedByPackage = false;
+  const passed = [];
+  for (let j = 0; j < rest.length; j++) {
+    const word = rest[j];
+    const t = word.text;
+    if (t === "--") {
+      passed.push(...rest.slice(j + 1));
+      break;
+    }
+    if (!t.startsWith("-")) {
+      passed.push(word);
+      continue;
+    }
+    const eq = t.indexOf("=");
+    const attachedP = /^-p[^=]/.test(t);
+    const name = attachedP ? "-p" : eq < 0 ? t : t.slice(0, eq);
+    if (CARGO_PROGRAM_OPTIONS.includes(name)) {
+      const value = attachedP ? { text: t.slice(2), literal: word.literal } : eq < 0 ? rest[++j] : { text: t.slice(eq + 1), literal: word.literal };
+      const byPackage = name === "-p" || name === "--package";
+      if (value !== void 0 && (named === void 0 || namedByPackage && !byPackage)) {
+        named = value;
+        namedByPackage = byPackage;
+      }
+      continue;
+    }
+    if (eq < 0 && CARGO_RUN_VALUE_OPTIONS.has(name))
+      j++;
+  }
+  return named === void 0 ? void 0 : [named, ...passed];
+}
 var MANAGER_VALUE_OPTIONS = /* @__PURE__ */ new Set(["--filter", "-F", "-C", "--dir", "--prefix", "--cwd", "--workspace"]);
 function skipLeading(words, valueOptions) {
   let j = 0;
@@ -30065,7 +30508,12 @@ var PUBLISH_SEQUENCES = {
   docker: [["push"]],
   podman: [["push"]],
   vsce: [["publish"]],
-  dotnet: [["nuget", "push"]]
+  dotnet: [["nuget", "push"]],
+  rake: [["release"]],
+  flit: [["publish"]],
+  hatch: [["publish"]],
+  pdm: [["publish"]],
+  uv: [["publish"]]
 };
 var DEPLOY_SEQUENCES = {
   netlify: [["deploy"]],
@@ -30075,7 +30523,9 @@ var DEPLOY_SEQUENCES = {
   wrangler: [["deploy"]],
   terraform: [["apply"], ["destroy"]],
   tofu: [["apply"], ["destroy"]],
-  kubectl: [["apply"], ["delete"]]
+  kubectl: [["apply"], ["delete"]],
+  cap: [["deploy"]],
+  mkdocs: [["gh-deploy"]]
 };
 function publishMatch(cmd, prog, args2) {
   const seqs = PUBLISH_SEQUENCES[prog];
@@ -30083,11 +30533,13 @@ function publishMatch(cmd, prog, args2) {
     return [];
   if (hasLong(args2, "--dry-run"))
     return [];
-  return containsSequence(operandTexts(args2), seqs) ? [{ type: "publish", program: prog, command: cmd }] : [];
+  const words = prog === "uv" ? operandTexts(skipLeading(args2, UV_VALUE_OPTIONS)).slice(0, 1) : operandTexts(args2);
+  return containsSequence(words, seqs) ? [{ type: "publish", program: prog, command: cmd }] : [];
 }
+var VERCEL = "vercel";
 var PRODUCTION_DEPLOY_OPTIONS = ["--prod", "--production"];
 function deployMatch(cmd, prog, args2) {
-  if (prog === "vercel") {
+  if (prog === VERCEL) {
     return hasLong(args2, ...PRODUCTION_DEPLOY_OPTIONS) ? [{ type: "deploy", program: prog, command: cmd }] : [];
   }
   const seqs = DEPLOY_SEQUENCES[prog];
@@ -30323,7 +30775,7 @@ var Env = class {
   constructor(ctx) {
     this.projectDir = realOrSelf(resolve6(ctx.projectDir));
     this.cwd = realOrSelf(resolve6(this.projectDir, ctx.cwd));
-    this.home = realOrSelf(resolve6(ctx.home ?? homedir10()));
+    this.home = realOrSelf(resolve6(ctx.home ?? homedir11()));
     this.timeoutMs = ctx.gitTimeoutMs ?? FACTS_GIT_TIMEOUT_MS;
     this.tempDir = realOrSelf(resolve6(ctx.tempDir ?? tmpdir2()));
     const roots = ctx.tempRoots ?? [this.tempDir, tmpdir2(), ...TEMP_ROOTS];
@@ -30347,7 +30799,7 @@ var Env = class {
       return this.description;
     this.description = null;
     try {
-      const raw = JSON.parse(readFileSync22(join15(repoRoot, SYSTEM_DESCRIPTION_REL), "utf-8"));
+      const raw = JSON.parse(readFileSync23(join16(repoRoot, SYSTEM_DESCRIPTION_REL), "utf-8"));
       const checked = checkSystemDescription(raw);
       if (checked.ok)
         this.description = checked.description;
@@ -30378,7 +30830,7 @@ var Env = class {
       return false;
     let dir = abs;
     while (!isDirectory(dir)) {
-      const up = dirname6(dir);
+      const up = dirname7(dir);
       if (up === dir)
         return false;
       dir = up;
@@ -30411,18 +30863,18 @@ function resolveHome(text, home, base) {
   if (text === "~")
     return home;
   if (text.startsWith("~/"))
-    return join15(home, text.slice(2));
+    return join16(home, text.slice(2));
   return resolve6(base, text);
 }
 function realTarget(abs) {
-  const parent = dirname6(abs);
+  const parent = dirname7(abs);
   if (parent === abs)
     return abs;
-  return join15(realOrSelf(parent), pathBasename(abs));
+  return join16(realOrSelf(parent), pathBasename(abs));
 }
 function wordPath(word, base, env) {
   if (word.temp !== void 0) {
-    const root = word.temp.base === "mktemp" ? join15(env.tempDir, ".halfcycle-mktemp-new") : env.tempDir;
+    const root = word.temp.base === "mktemp" ? join16(env.tempDir, ".halfcycle-mktemp-new") : env.tempDir;
     return resolve6(`${root}${word.temp.suffix}`);
   }
   return word.literal ? resolveHome(word.text, env.home, base) : null;
@@ -30568,7 +31020,7 @@ function globPath(abs) {
     const next = [];
     if (!/[*?[]/.test(segment)) {
       for (const c of current)
-        next.push(join15(c, segment));
+        next.push(join16(c, segment));
     } else {
       const re = segmentPattern(segment);
       for (const c of current) {
@@ -30582,7 +31034,7 @@ function globPath(abs) {
           if (n.startsWith(".") && !segment.startsWith("."))
             continue;
           if (re.test(n))
-            next.push(join15(c, n));
+            next.push(join16(c, n));
         }
       }
     }
@@ -30710,7 +31162,7 @@ function findKeeps(filter, roots, repoRoot) {
   const names = filter.names.map((n) => findPattern(n.pattern, n.fold, false));
   const excluded = filter.excluded.map((p) => findPattern(p, false, true));
   const steps = (rel) => {
-    const abs = join15(repoRoot, rel);
+    const abs = join16(repoRoot, rel);
     const out = [];
     for (const r of roots) {
       if (!isInside(abs, r.abs))
@@ -30782,9 +31234,9 @@ function credentialFilesIn(folders, repoRoot, deadline, skip) {
   const out = [];
   const stack = [];
   for (const f of folders) {
-    if (isDirectory(join15(repoRoot, f)))
+    if (isDirectory(join16(repoRoot, f)))
       stack.push(f);
-    else if (pathExists(join15(repoRoot, f)) && isCredentialPath(f))
+    else if (pathExists(join16(repoRoot, f)) && isCredentialPath(f))
       out.push(f);
   }
   let seen = 0;
@@ -30792,7 +31244,7 @@ function credentialFilesIn(folders, repoRoot, deadline, skip) {
     const rel = stack.pop();
     let entries;
     try {
-      entries = readdirSync9(join15(repoRoot, rel), { withFileTypes: true });
+      entries = readdirSync9(join16(repoRoot, rel), { withFileTypes: true });
     } catch {
       continue;
     }
@@ -30905,7 +31357,7 @@ function deleteFilesFacts(m, env) {
   const targets = plainFolderRefused ? inside2.filter((t) => !isDirectory(t)) : inside2;
   if (targets.length === 0)
     return silentDelete(m);
-  const repoRoot = env.repoRoot(dirname6(targets[0])) ?? env.repoRoot(env.projectDir);
+  const repoRoot = env.repoRoot(dirname7(targets[0])) ?? env.repoRoot(env.projectDir);
   if (repoRoot === null || !targets.every((t) => isInside(t, repoRoot)))
     return cannot(thingFor([], targets, null, env));
   const keep = m.findFilter === void 0 ? void 0 : findKeeps(m.findFilter, targets.map((t) => ({ abs: t, text: written.get(t) ?? null })), repoRoot);
@@ -30950,7 +31402,7 @@ function closeFoldsAll(targets, env) {
       return false;
     let at = root;
     for (const seg of rel.split("/")) {
-      at = join15(at, seg);
+      at = join16(at, seg);
       try {
         if (lstatSync3(at).isSymbolicLink())
           return false;
@@ -31533,7 +31985,7 @@ function publishFacts(m, env) {
   const start = startFolder(m, env);
   if (start !== null && PACKAGE_JSON_PROGRAMS.has(m.program)) {
     try {
-      const pkg = JSON.parse(readFileSync22(join15(start, "package.json"), "utf-8"));
+      const pkg = JSON.parse(readFileSync23(join16(start, "package.json"), "utf-8"));
       if (typeof pkg["name"] === "string" && typeof pkg["version"] === "string" && pkg["name"] !== "" && pkg["version"] !== "") {
         name = pkg["name"];
         version2 = pkg["version"];
@@ -31583,7 +32035,7 @@ function shrinkRecordFacts(m, env) {
     try {
       if (!lstatSync3(file2.abs).isFile())
         continue;
-      before = readFileSync22(file2.abs, "utf-8");
+      before = readFileSync23(file2.abs, "utf-8");
     } catch {
       continue;
     }
@@ -31635,7 +32087,7 @@ function recordRoot(abs, env) {
     return null;
   let dir = abs;
   while (!isDirectory(dir)) {
-    const up = dirname6(dir);
+    const up = dirname7(dir);
     if (up === dir)
       return null;
     dir = up;
@@ -31660,7 +32112,7 @@ function recordFilesUnder(folder2, env) {
   const starts = /* @__PURE__ */ new Set();
   for (const { pattern } of PROJECT_RECORD_PATTERNS) {
     if (relFolder === "" || patternOwns(relFolder, pattern))
-      starts.add(join15(root, pattern));
+      starts.add(join16(root, pattern));
     else if (patternOwns(pattern, relFolder))
       starts.add(folder2);
   }
@@ -31686,7 +32138,7 @@ function recordFilesUnder(folder2, env) {
         continue;
       }
       for (const n of names)
-        stack.push(join15(p, n));
+        stack.push(join16(p, n));
     } else if (st.isFile()) {
       const r = recordFileAt(p, env);
       if (r !== null)
@@ -31699,7 +32151,7 @@ function recordHistory(files, env) {
   const out = /* @__PURE__ */ new Map();
   const byTree = /* @__PURE__ */ new Map();
   for (const abs of files) {
-    const top = env.repoRoot(dirname6(abs));
+    const top = env.repoRoot(dirname7(abs));
     if (top === null || !isInside(abs, top))
       continue;
     const list = byTree.get(top) ?? [];
@@ -31776,9 +32228,9 @@ function isRecord2(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function placesFor(home, env) {
-  const claude = join16(readClaudeConfigFolder(env) ?? home, CLAUDE_SETTINGS_FILENAME);
-  const codex = join16(codexHomeOf(env, home), CODEX_SETTINGS_FILENAME);
-  return { claude, codex, home, list: join16(home, HALFCYCLE_DIR_NAME, ACCOUNT_NAMES_FILENAME), firstLine: `${claude}	${codex}` };
+  const claude = join17(readClaudeConfigFolder(env) ?? home, CLAUDE_SETTINGS_FILENAME);
+  const codex = join17(codexHomeOf(env, home), CODEX_SETTINGS_FILENAME);
+  return { claude, codex, home, list: join17(home, HALFCYCLE_DIR_NAME, ACCOUNT_NAMES_FILENAME), firstLine: `${claude}	${codex}` };
 }
 function claudeNames(text) {
   const root = JSON.parse(text);
@@ -31818,7 +32270,7 @@ function canonical(stored) {
 function readSource(path, parse3) {
   let text;
   try {
-    text = readFileSync23(path, "utf-8");
+    text = readFileSync24(path, "utf-8");
   } catch (e) {
     const code = e.code;
     return { names: [], broken: code !== "ENOENT" && code !== "ENOTDIR" };
@@ -31847,7 +32299,7 @@ function namesFromList(p) {
   }
   let lines2;
   try {
-    lines2 = readFileSync23(p.list, "utf-8").split("\n");
+    lines2 = readFileSync24(p.list, "utf-8").split("\n");
   } catch {
     return null;
   }
@@ -31863,13 +32315,13 @@ function writeList(p, names) {
   const lines2 = [p.firstLine, ...comparable.length === names.length ? [] : [ACCOUNT_NAMES_ANY], ...comparable];
   const temp = `${p.list}.${String(process.pid)}.${randomBytes(4).toString("hex")}`;
   try {
-    mkdirSync10(join16(p.home, HALFCYCLE_DIR_NAME), { recursive: true, mode: 448 });
-    writeFileSync14(temp, `${lines2.join("\n")}
+    mkdirSync11(join17(p.home, HALFCYCLE_DIR_NAME), { recursive: true, mode: 448 });
+    writeFileSync15(temp, `${lines2.join("\n")}
 `, { mode: 384, flag: "wx" });
-    renameSync12(temp, p.list);
+    renameSync13(temp, p.list);
   } catch {
     try {
-      rmSync3(temp, { force: true });
+      rmSync4(temp, { force: true });
     } catch {
       return;
     }
@@ -31925,7 +32377,7 @@ function sumOf(texts, name) {
 }
 function textOf(path) {
   try {
-    return readFileSync23(path, "utf-8");
+    return readFileSync24(path, "utf-8");
   } catch {
     return "";
   }
@@ -32020,7 +32472,7 @@ function accountNamesFacts(calls, context) {
     const writes = calls.filter(readsAccountNames);
     if (writes.length === 0)
       return [];
-    const names = readNames(placesFor(context.home ?? homedir11(), context.env ?? process.env));
+    const names = readNames(placesFor(context.home ?? homedir12(), context.env ?? process.env));
     if (names.length === 0)
       return [];
     const perCall = context.gitTimeoutMs ?? FACTS_GIT_TIMEOUT_MS;
@@ -32548,7 +33000,7 @@ function isOneCall(call) {
 
 // dist/risky/allow-once.js
 import { createHash as createHash5 } from "node:crypto";
-import { appendFileSync as appendFileSync5, readFileSync as readFileSync24, realpathSync as realpathSync8, renameSync as renameSync13, statSync as statSync9, unlinkSync as unlinkSync9, writeFileSync as writeFileSync15 } from "node:fs";
+import { appendFileSync as appendFileSync5, readFileSync as readFileSync25, realpathSync as realpathSync8, renameSync as renameSync14, statSync as statSync9, unlinkSync as unlinkSync9, writeFileSync as writeFileSync16 } from "node:fs";
 import { isAbsolute as isAbsolute6, relative as relative8, resolve as resolve8, sep as sep7 } from "node:path";
 var ALLOW_ONCE_MS = 5 * 60 * 1e3;
 var HELD_STEP_MAX_AGE_MS = 60 * 60 * 1e3;
@@ -32709,7 +33161,7 @@ function numberKept(path, key) {
 function readNumbers(path) {
   let text;
   try {
-    text = readFileSync24(path, "utf8");
+    text = readFileSync25(path, "utf8");
   } catch (err) {
     return err.code === "ENOENT" ? { next: 1, steps: /* @__PURE__ */ new Map() } : null;
   }
@@ -32821,13 +33273,13 @@ function distinctSteps(held, numbersPath) {
 function claimHeld(path, session, now) {
   const claimed = `${path}.${process.pid}.${now}.claim`;
   try {
-    renameSync13(path, claimed);
+    renameSync14(path, claimed);
   } catch {
     return [];
   }
   let text = "";
   try {
-    text = readFileSync24(claimed, "utf8");
+    text = readFileSync25(claimed, "utf8");
   } catch {
     text = "";
   }
@@ -32882,7 +33334,7 @@ function nowOf(deps) {
 }
 function readRecord2(path, session) {
   try {
-    return parseRecord(readFileSync24(path, "utf8"), session);
+    return parseRecord(readFileSync25(path, "utf8"), session);
   } catch {
     return null;
   }
@@ -32920,8 +33372,8 @@ function writeRecord(path, record2) {
 function writeWhole2(path, body) {
   const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
   try {
-    writeFileSync15(tmp, body, { mode: 384 });
-    renameSync13(tmp, path);
+    writeFileSync16(tmp, body, { mode: 384 });
+    renameSync14(tmp, path);
     return true;
   } catch {
     removeQuietly(tmp);
@@ -33021,8 +33473,8 @@ function decideAutonomous(facts, mayPublishNow) {
 }
 
 // dist/risky/own-copy.js
-import { readFileSync as readFileSync25 } from "node:fs";
-import { join as join17, posix as posix3, win32 as win322 } from "node:path";
+import { readFileSync as readFileSync26 } from "node:fs";
+import { join as join18, posix as posix3, win32 as win322 } from "node:path";
 var OWN_COPY_START_TOOL = "Agent";
 var OWN_COPY_WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
 var OWN_COPY_ISOLATION = "worktree";
@@ -33043,7 +33495,7 @@ function stringField2(o, key) {
 }
 function readOr(deps, path) {
   try {
-    return (deps.readFile ?? ((p) => readFileSync25(p, "utf-8")))(path);
+    return (deps.readFile ?? ((p) => readFileSync26(p, "utf-8")))(path);
   } catch {
     return null;
   }
@@ -33083,7 +33535,7 @@ function typeCanChangeFiles(subagentType, deps) {
     return true;
   if (AGENT_FILE_NAME.test(type)) {
     for (const base of [deps.projectDir, deps.home]) {
-      const text = readOr(deps, join17(base, ".claude", "agents", `${type}.md`));
+      const text = readOr(deps, join18(base, ".claude", "agents", `${type}.md`));
       if (text === null)
         continue;
       const tools = frontmatterTools(text);
@@ -33187,20 +33639,111 @@ function judgeChange(input, call, deps) {
   };
 }
 
+// dist/risky/skip-checks.js
+var SKIP_CHECKS_GIT_SUBCOMMANDS = ["commit", "push"];
+var GIT_PROGRAM = "git";
+var NO_VERIFY = "--no-verify";
+var COMMIT_LONG_VALUE = /* @__PURE__ */ new Set([
+  "--message",
+  "--file",
+  "--template",
+  "--reuse-message",
+  "--reedit-message",
+  "--author",
+  "--date",
+  "--cleanup",
+  "--fixup",
+  "--squash",
+  "--trailer",
+  "--pathspec-from-file"
+]);
+var COMMIT_GRAMMAR = {
+  shortSkip: "n",
+  shortValue: /* @__PURE__ */ new Set(["m", "F", "c", "C", "t", "u", "S"]),
+  shortSeparateValue: /* @__PURE__ */ new Set(["m", "F", "c", "C", "t"]),
+  longValue: COMMIT_LONG_VALUE
+};
+var PUSH_LONG_VALUE = /* @__PURE__ */ new Set(["--push-option", "--repo", "--receive-pack", "--exec"]);
+var PUSH_GRAMMAR = {
+  shortSkip: null,
+  shortValue: /* @__PURE__ */ new Set(["o"]),
+  shortSeparateValue: /* @__PURE__ */ new Set(["o"]),
+  longValue: PUSH_LONG_VALUE
+};
+var GRAMMARS = {
+  commit: COMMIT_GRAMMAR,
+  push: PUSH_GRAMMAR
+};
+function skipsChecks(command) {
+  const out = [];
+  for (const cmd of splitCommand(command)) {
+    if (cmd.words.length === 0 || basename3(cmd.words[0].text) !== GIT_PROGRAM)
+      continue;
+    const args2 = cmd.words.slice(1);
+    const { at } = gitArgsOf(args2);
+    const sub = args2[at]?.text;
+    const verb = SKIP_CHECKS_GIT_SUBCOMMANDS.find((v) => v === sub);
+    if (verb === void 0)
+      continue;
+    if (carriesSkip(args2.slice(at + 1), GRAMMARS[verb]))
+      out.push({ verb, command: cmd });
+  }
+  return out;
+}
+function carriesSkip(rest, grammar) {
+  for (let i = 0; i < rest.length; i++) {
+    const word = rest[i];
+    const t = word.text;
+    if (t === "--")
+      return false;
+    if (t.startsWith("--")) {
+      if (!t.includes("=") && grammar.longValue.has(t)) {
+        i++;
+        continue;
+      }
+      if (hasLongAsGitReads([word], NO_VERIFY))
+        return true;
+      continue;
+    }
+    if (t.length < 2 || !t.startsWith("-"))
+      continue;
+    for (let k = 1; k < t.length; k++) {
+      const letter = t[k];
+      if (letter === grammar.shortSkip)
+        return true;
+      if (grammar.shortValue.has(letter)) {
+        if (k === t.length - 1 && grammar.shortSeparateValue.has(letter))
+          i++;
+        break;
+      }
+    }
+  }
+  return false;
+}
+var SKIP_CHECKS_COMMIT_FIX = "Run it again without --no-verify or -n. If a check fails, fix what it found.";
+var SKIP_CHECKS_PUSH_FIX = "Run it again without --no-verify. If a check fails, fix what it found.";
+function skipChecksRefusal(match, description) {
+  const what = match.verb === "commit" ? "A commit" : "A push";
+  return {
+    person: `Halfcycle: ${what} was stopped. It would skip this project's own checks, and those always run here. ${reasonSentence(description)} ${NOTHING_WAS_CHANGED}`,
+    agent: match.verb === "commit" ? SKIP_CHECKS_COMMIT_FIX : SKIP_CHECKS_PUSH_FIX
+  };
+}
+
 // dist/risky/save.js
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { chmodSync as chmodSync2, constants as fsConstants, copyFileSync, lstatSync as lstatSync4, mkdirSync as mkdirSync11, readdirSync as readdirSync10, readFileSync as readFileSync26, readlinkSync, realpathSync as realpathSync9, renameSync as renameSync14, rmSync as rmSync4, statSync as statSync10, symlinkSync, writeFileSync as writeFileSync16 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { dirname as dirname7, isAbsolute as isAbsolute7, join as join18, resolve as resolve9 } from "node:path";
+import { chmodSync as chmodSync2, constants as fsConstants, copyFileSync, lstatSync as lstatSync4, mkdirSync as mkdirSync12, readdirSync as readdirSync10, readFileSync as readFileSync27, readlinkSync, realpathSync as realpathSync9, renameSync as renameSync15, rmSync as rmSync5, statSync as statSync10, symlinkSync, writeFileSync as writeFileSync17 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { dirname as dirname8, isAbsolute as isAbsolute7, join as join19, resolve as resolve9 } from "node:path";
 var SAVE_LIMIT_BYTES = 2e8;
 var SAVE_BUDGET_MS = 5e3;
 function notSaved(reason) {
   return { saved: false, reason };
 }
-function savedFolderOf(engagementId, home = homedir12()) {
+function savedFolderOf(engagementId, home = homedir13()) {
   if (!isEngagementId(engagementId))
     return null;
-  return join18(home, HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, SAVED_DIR_NAME);
+  return join19(home, HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, SAVED_DIR_NAME);
 }
 function saveFirst(staked, ctx) {
   const now = ctx.now ?? Date.now;
@@ -33231,20 +33774,20 @@ function saveFirst(staked, ctx) {
     const id = freshId(folder2, ctx.newId);
     if (id === null)
       return notSaved(AUTONOMY_SAVE_FAILED_REASON);
-    saveDir = join18(folder2, id);
+    saveDir = join19(folder2, id);
     const repository = repositoryOf(g);
     if (repository === null)
       return failed(saveDir);
-    writeFileSync16(join18(saveDir, SAVED_REPOSITORY_FILE_NAME), `${repository}
+    writeFileSync17(join19(saveDir, SAVED_REPOSITORY_FILE_NAME), `${repository}
 `, { mode: 384 });
-    const privateIndex = join18(saveDir, PRIVATE_INDEX_NAME);
+    const privateIndex = join19(saveDir, PRIVATE_INDEX_NAME);
     const commit = saveCommit(id, headCommit2, found2.tracked, plan.lines, privateIndex, g, now());
-    rmSync4(privateIndex, { force: true });
+    rmSync5(privateIndex, { force: true });
     if (commit === null)
       return failed(saveDir);
-    const copiesDir = join18(saveDir, SAVED_COPIES_DIR_NAME);
+    const copiesDir = join19(saveDir, SAVED_COPIES_DIR_NAME);
     for (const rel of found2.copies) {
-      if (now() > deadline || !copyOne(join18(plan.root, rel), join18(copiesDir, rel)))
+      if (now() > deadline || !copyOne(join19(plan.root, rel), join19(copiesDir, rel)))
         return failed(saveDir);
     }
     const description = savedSchema.safeParse({
@@ -33260,10 +33803,10 @@ function saveFirst(staked, ctx) {
     });
     if (!description.success)
       return failed(saveDir);
-    const file2 = join18(saveDir, SAVED_FILE_NAME);
-    writeFileSync16(`${file2}.part`, `${JSON.stringify(description.data, null, 2)}
+    const file2 = join19(saveDir, SAVED_FILE_NAME);
+    writeFileSync17(`${file2}.part`, `${JSON.stringify(description.data, null, 2)}
 `, { mode: 384 });
-    renameSync14(`${file2}.part`, file2);
+    renameSync15(`${file2}.part`, file2);
     ctx.beforeRef?.();
     const ref = g.run(["update-ref", "--no-deref", savedRefOf(id), commit, ""]);
     if (!ref.ok)
@@ -33276,7 +33819,7 @@ function saveFirst(staked, ctx) {
 var PRIVATE_INDEX_NAME = "index.part";
 function failed(saveDir) {
   try {
-    rmSync4(saveDir, { recursive: true, force: true });
+    rmSync5(saveDir, { recursive: true, force: true });
   } catch {
   }
   return notSaved(AUTONOMY_SAVE_FAILED_REASON);
@@ -33340,7 +33883,7 @@ function filesOf(plan, g, deadline) {
     trackedAll.add(path);
     if (!reached(path, plan.specs))
       continue;
-    const st = lstatOrNull(join18(plan.root, path));
+    const st = lstatOrNull(join19(plan.root, path));
     if (st !== null && (st.isFile() || st.isSymbolicLink()))
       tracked.add(path);
   }
@@ -33352,7 +33895,7 @@ function filesOf(plan, g, deadline) {
     const rel = stack.pop();
     if (rel === ".git")
       continue;
-    const abs = rel === "." ? plan.root : join18(plan.root, rel);
+    const abs = rel === "." ? plan.root : join19(plan.root, rel);
     const st = lstatOrNull(abs);
     if (st === null)
       continue;
@@ -33383,7 +33926,7 @@ function copyOne(src, dst) {
   const st = lstatOrNull(src);
   if (st === null)
     return false;
-  mkdirSync11(dirname7(dst), { recursive: true, mode: 448 });
+  mkdirSync12(dirname8(dst), { recursive: true, mode: 448 });
   if (st.isSymbolicLink()) {
     symlinkSync(readlinkSync(src), dst);
     return true;
@@ -33459,13 +34002,13 @@ var SaveGit = class {
   }
 };
 function freshId(folder2, newId) {
-  mkdirSync11(folder2, { recursive: true, mode: 448 });
+  mkdirSync12(folder2, { recursive: true, mode: 448 });
   for (let i = 0; i < 5; i++) {
     const id = newId?.() ?? defaultId();
     if (!savedIdSchema.safeParse(id).success)
       return null;
     try {
-      mkdirSync11(join18(folder2, id), { mode: 448 });
+      mkdirSync12(join19(folder2, id), { mode: 448 });
       return id;
     } catch (e) {
       if (e.code !== "EEXIST")
@@ -33490,7 +34033,7 @@ function repositoryOf(g) {
 }
 function markedRepository(dir) {
   try {
-    const text = readFileSync26(join18(dir, SAVED_REPOSITORY_FILE_NAME), "utf-8").trim();
+    const text = readFileSync27(join19(dir, SAVED_REPOSITORY_FILE_NAME), "utf-8").trim();
     return text === "" ? null : text;
   } catch {
     return null;
@@ -33524,7 +34067,7 @@ function pruneSaves(root, engagementId, ctx = {}) {
     if (!savedIdSchema.safeParse(id).success)
       continue;
     here.add(id);
-    const dir = join18(folder2, id);
+    const dir = join19(folder2, id);
     const st = lstatOrNull(dir);
     const answer = savedPruneAnswer({
       refMadeAt: refs.get(id) ?? null,
@@ -33532,9 +34075,9 @@ function pruneSaves(root, engagementId, ctx = {}) {
       folderRepository: markedRepository(dir)
     }, { repository, now: now() });
     if (answer === "remove-folder")
-      rmSync4(dir, { recursive: true, force: true });
+      rmSync5(dir, { recursive: true, force: true });
     else if (answer === "remove-ref-then-folder" && g.run(["update-ref", "-d", savedRefOf(id)]).ok) {
-      rmSync4(dir, { recursive: true, force: true });
+      rmSync5(dir, { recursive: true, force: true });
     } else if (answer === "remove-ref")
       g.run(["update-ref", "-d", savedRefOf(id)]);
   }
@@ -33563,19 +34106,19 @@ function realOrSelf3(p) {
 
 // dist/autonomy-state.js
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync12, readFileSync as readFileSync27, renameSync as renameSync15, rmSync as rmSync5, writeFileSync as writeFileSync17 } from "node:fs";
-import { homedir as homedir13, platform as platform2 } from "node:os";
-import { dirname as dirname8, join as join19 } from "node:path";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync13, readFileSync as readFileSync28, renameSync as renameSync16, rmSync as rmSync6, writeFileSync as writeFileSync18 } from "node:fs";
+import { homedir as homedir14, platform as platform2 } from "node:os";
+import { dirname as dirname9, join as join20 } from "node:path";
 var AUTONOMY_STATE_FILENAME = "autonomy.json";
 var AUTONOMY_STATE_DEADLINE_MS = 1500;
 function autonomyStateFilePath(engagementId, home) {
-  return join19(home ?? homedir13(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, AUTONOMY_STATE_FILENAME);
+  return join20(home ?? homedir14(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, AUTONOMY_STATE_FILENAME);
 }
 function readCachedAutonomy(engagementId, nowMs, home) {
   if (!isEngagementId(engagementId))
     return null;
   try {
-    const parsed = autonomyStateFileSchema.safeParse(JSON.parse(readFileSync27(autonomyStateFilePath(engagementId, home), "utf-8")));
+    const parsed = autonomyStateFileSchema.safeParse(JSON.parse(readFileSync28(autonomyStateFilePath(engagementId, home), "utf-8")));
     if (!parsed.success || !parsed.data.on)
       return null;
     const age = nowMs - Date.parse(parsed.data.readAt);
@@ -33616,24 +34159,24 @@ var LIVE_READ_PROGRAM = [
 ].join("");
 function deleteAutonomyStateFile(engagementId, home) {
   try {
-    rmSync5(autonomyStateFilePath(engagementId, home), { force: true });
+    rmSync6(autonomyStateFilePath(engagementId, home), { force: true });
   } catch {
   }
 }
 function writeAutonomyStateFile(engagementId, file2, home) {
   const target = autonomyStateFilePath(engagementId, home);
-  const temp = join19(dirname8(target), `.${AUTONOMY_STATE_FILENAME}.${process.pid}.tmp`);
+  const temp = join20(dirname9(target), `.${AUTONOMY_STATE_FILENAME}.${process.pid}.tmp`);
   try {
-    mkdirSync12(dirname8(target), { recursive: true, mode: 448 });
-    writeFileSync17(temp, `${JSON.stringify(file2)}
+    mkdirSync13(dirname9(target), { recursive: true, mode: 448 });
+    writeFileSync18(temp, `${JSON.stringify(file2)}
 `, { mode: 384 });
     if (platform2() !== "win32")
       chmodSync3(temp, 384);
-    renameSync15(temp, target);
+    renameSync16(temp, target);
     return true;
   } catch {
     try {
-      rmSync5(temp, { force: true });
+      rmSync6(temp, { force: true });
     } catch {
     }
     return false;
@@ -33756,7 +34299,7 @@ function shellWord(text) {
 
 // dist/hooks/pre-tool-use.js
 import { performance } from "node:perf_hooks";
-import { homedir as homedir14 } from "node:os";
+import { homedir as homedir15 } from "node:os";
 var UNREADABLE_INPUT_NOTICE = "Halfcycle could not read what the coding agent was about to do, so that step went ahead without being checked for anything that cannot be undone. If this keeps happening, update Halfcycle.";
 var PRE_TOOL_USE_LIMIT_MS = (HALFCYCLE_HOOK_WIRING.find((e) => e.event === "PreToolUse")?.timeout ?? 10) * 1e3;
 var AUTONOMY_REPLY_MARGIN_MS = 1e3;
@@ -33789,6 +34332,9 @@ function runPreToolUse(deps) {
   if (calls === null || !calls.every((c) => CHECKED.has(c.toolName)))
     return unreadable(deps, input);
   const call = calls[0] ?? { toolName: stringOf(input, "tool_name") ?? "", toolInput: {} };
+  const skipped = skippedChecksReply(calls);
+  if (skipped !== null)
+    return skipped;
   let answer;
   try {
     answer = riskyAnswer(calls, () => {
@@ -33859,6 +34405,24 @@ function runPreToolUse(deps) {
     return "";
   }
 }
+function skippedChecksReply(calls) {
+  try {
+    for (const c of calls) {
+      const command = c.toolName === "Bash" ? c.toolInput["command"] : void 0;
+      if (typeof command !== "string")
+        continue;
+      const match = skipsChecks(command)[0];
+      if (match === void 0)
+        continue;
+      const text = skipChecksRefusal(match, reasonOf(c));
+      return `${preToolUseReplyText("refuse", text.person, text.agent)}
+`;
+    }
+  } catch {
+    return null;
+  }
+  return null;
+}
 function clockOf(deps) {
   return deps.now ?? (() => /* @__PURE__ */ new Date());
 }
@@ -33926,7 +34490,7 @@ function autonomousAnswer(call, staked, sendsSaves, mode, autonomy, deps) {
       });
       if (!saved.saved)
         return refuse(autonomyA12(typeSentenceFor(saved.reason === AUTONOMY_COULD_NOT_TELL_REASON ? [] : staked), saved.reason));
-      return `${preToolUseSavedText(autonomyA9(what, saved.id))}
+      return `${preToolUseSavedText(autonomyA9(what, saved.id, installedVersion(deps.env ?? process.env)))}
 `;
     }
     default: {
@@ -33983,7 +34547,7 @@ function ownCopyOf(input, call, deps) {
     const walk2 = deps.walk ?? deps.liveness?.walk;
     return judgeOwnCopy(input, call, {
       projectDir: projectDirOf(deps),
-      home: deps.home ?? homedir14(),
+      home: deps.home ?? homedir15(),
       ...walk2 === void 0 ? {} : { walk: walk2 },
       ...deps.liveness === void 0 ? {} : { liveness: deps.liveness }
     });
@@ -34017,7 +34581,7 @@ function unreadable(deps, input) {
 
 // dist/hooks/session-diff.js
 import { unlinkSync as unlinkSync10 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 var STOP_HOOK_EVENT = {
   stop: "Stop",
   "subagent-stop": "SubagentStop"
@@ -34082,7 +34646,7 @@ async function evaluateSession(input, kind, reply, readSeat, profile) {
   const candidates = ownEditedFiles(repoRoot, sessionId).filter((relPath) => !tracked.has(relPath));
   const untracked = getUntrackedFiles(repoRoot, candidates);
   const created = untracked.ok ? untracked.value.filter((relPath) => !tracked.has(relPath)) : [];
-  const getDiff = (relPath) => tracked.has(relPath) ? collected.getDiff(relPath) : getSingleFileDiff(join20(repoRoot, relPath), repoRoot);
+  const getDiff = (relPath) => tracked.has(relPath) ? collected.getDiff(relPath) : getSingleFileDiff(join21(repoRoot, relPath), repoRoot);
   const { evaluated } = partitionInstallerOutput(collected.files);
   const { evaluated: createdEvaluated } = partitionInstallerOutput(created);
   const changedFiles2 = [...ownChangedFiles(repoRoot, evaluated, sessionId), ...createdEvaluated];
@@ -34293,65 +34857,6 @@ async function runStop(observeDeps = {}, timeDeps = {}, paceDeps = {}, profile =
   }, profile);
 }
 
-// dist/relayed-choices.js
-import { mkdirSync as mkdirSync13, readFileSync as readFileSync28, renameSync as renameSync16, rmSync as rmSync6, writeFileSync as writeFileSync18 } from "node:fs";
-import { homedir as homedir15 } from "node:os";
-import { dirname as dirname9, join as join21 } from "node:path";
-function relayedChoicesFilePath(engagementId, home) {
-  if (!isEngagementId(engagementId))
-    return null;
-  return join21(home ?? homedir15(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, PACING_DIR_NAME, RELAYED_CHOICES_FILENAME);
-}
-function readRelayedChoices(engagementId, phase, home) {
-  const path = relayedChoicesFilePath(engagementId, home);
-  if (path === null)
-    return null;
-  try {
-    const parsed = relayedChoicesFileSchema.safeParse(JSON.parse(readFileSync28(path, "utf-8")));
-    return parsed.success && parsed.data.phase === phase ? parsed.data : null;
-  } catch {
-    return null;
-  }
-}
-function keptSaid(said) {
-  const cut = said.trim().slice(0, RELAYED_SAID_MAX);
-  const last = cut.charCodeAt(cut.length - 1);
-  return (last >= 55296 && last <= 56319 ? cut.slice(0, -1) : cut).trim();
-}
-function recordRelayedChoice(opts) {
-  const target = relayedChoicesFilePath(opts.engagementId, opts.home);
-  if (target === null || !phaseNameSchema.safeParse(opts.phase).success)
-    return false;
-  const said = keptSaid(opts.said);
-  if (said === "")
-    return false;
-  const when = opts.now ?? /* @__PURE__ */ new Date();
-  if (Number.isNaN(when.getTime()))
-    return false;
-  const entry = { at: when.toISOString(), said };
-  const before = readRelayedChoices(opts.engagementId, opts.phase, opts.home);
-  const file2 = relayedChoicesFileSchema.safeParse({
-    phase: opts.phase,
-    entries: [...before?.entries ?? [], entry]
-  });
-  if (!file2.success)
-    return false;
-  const temp = join21(dirname9(target), `.${RELAYED_CHOICES_FILENAME}.${process.pid}.tmp`);
-  try {
-    mkdirSync13(dirname9(target), { recursive: true, mode: 448 });
-    writeFileSync18(temp, `${JSON.stringify(file2.data)}
-`, { mode: 384 });
-    renameSync16(temp, target);
-    return true;
-  } catch {
-    try {
-      rmSync6(temp, { force: true });
-    } catch {
-    }
-    return false;
-  }
-}
-
 // dist/hooks/scope-phrase.js
 var APPROVE_PREFIX = /^approve /i;
 var SEND_BACK_PREFIX = /^send back /i;
@@ -34449,21 +34954,61 @@ function autonomyPhraseShape(prompt) {
 }
 
 // dist/hooks/pace-phrase.js
-var FASTER = /^(?:go )?faster$/i;
-var AGENTS = /^run ([0-9]{1,3}) agents?$/i;
+var NUMBER_WORDS = [
+  "one",
+  "two",
+  "three",
+  "four",
+  "five",
+  "six",
+  "seven",
+  "eight",
+  "nine",
+  "ten",
+  "eleven",
+  "twelve",
+  "thirteen",
+  "fourteen",
+  "fifteen",
+  "sixteen",
+  "seventeen",
+  "eighteen",
+  "nineteen",
+  "twenty"
+];
+var POLITE = /^(?:please,? )?(.*?)(?:,? please)?[.!]*$/i;
+var VERB = "(?:(?:run|use|start)(?: with)? )?";
+var QUALIFIER = "(?: (?:at once|at a time|in parallel|concurrently|simultaneously|together))?";
+var FASTER = /^(?:(?:go )?faster|(?:run )?more agents)$/i;
+var AGENTS = new RegExp(`^${VERB}(?:up to )?(-?[0-9]+(?:\\.[0-9]+)?|${NUMBER_WORDS.join("|")}) agents?${QUALIFIER}$`, "i");
+var MAX_PACE = /^(?:(?:go|run)(?: at)? )?(?:max|maximum|full|top) (?:pace|speed)$/i;
+var MAX_AGENTS = new RegExp(`^${VERB}(?:the )?(?:max|maximum)(?: possible)?(?: number of)? agents${QUALIFIER}$`, "i");
+var AS_MANY = new RegExp(`^${VERB}as many agents as (?:possible|you can)${QUALIFIER}$`, "i");
+var VAGUE = new RegExp(`^${VERB}(?:lots of|a lot of|loads of|plenty of|many|some|several|a few|a bunch of) agents${QUALIFIER}$`, "i");
 var KEEP_FREE = /^keep ([0-9]{1,3})% free$/i;
 var USE_UP_TO = /^use up to ([0-9]{1,3})%$/i;
+function countOf(said) {
+  const word = NUMBER_WORDS.indexOf(said.toLowerCase());
+  return word >= 0 ? word + 1 : Number(said);
+}
 function pacePhraseShape(prompt) {
   if (typeof prompt !== "string")
     return null;
-  const line2 = prompt.trim();
-  if (LINE_BREAK.test(line2))
+  const trimmed = prompt.trim();
+  if (trimmed === "" || LINE_BREAK.test(trimmed))
+    return null;
+  const line2 = POLITE.exec(trimmed.replace(/ +/g, " "))?.[1] ?? "";
+  if (line2 === "")
     return null;
   if (FASTER.test(line2))
     return { kind: "faster" };
   const agents = AGENTS.exec(line2);
   if (agents !== null)
-    return { kind: "agents", count: Number(agents[1]) };
+    return { kind: "agents", count: countOf(agents[1]) };
+  if (MAX_PACE.test(line2) || MAX_AGENTS.test(line2) || AS_MANY.test(line2))
+    return { kind: "max" };
+  if (VAGUE.test(line2))
+    return { kind: "vague" };
   const keep = KEEP_FREE.exec(line2);
   if (keep !== null)
     return { kind: "keep-free", percent: Number(keep[1]) };
@@ -34661,7 +35206,7 @@ function nothingDone(act) {
   return act === "approve" ? "Nothing was approved" : "Nothing was sent back";
 }
 function showCommand(phase) {
-  return `\`${HALFCYCLE_COMMAND} plan ${quoteForShell(phase)} --show\``;
+  return `\`${halfcycleCommand(installedVersion())} plan ${quoteForShell(phase)} --show\``;
 }
 function recordedLine(act, phase, planVersion) {
   return act === "approve" ? line(`Approved "${phase}", plan version ${planVersion}, in your session.`) : line(`Sent "${phase}" back with your note, plan version ${planVersion}, in your session. The note is given first to the next session that asks what to do.`);
@@ -34670,13 +35215,13 @@ function notAttendedLine(act) {
   return line(`${nothingDone(act)}: approving or sending back by typing counts only when a person types it into an open session.`);
 }
 function notSignedInLine(act) {
-  return line(`${nothingDone(act)}: this project is not signed in on this computer. ${HOOK_REMEDY}`);
+  return line(`${nothingDone(act)}: this project is not signed in on this computer. ${hookRemedy(installedVersion())}`);
 }
 function notOwnerLine(act) {
   return line(`${nothingDone(act)}: only the project's owner can approve or send back this scope.`);
 }
 function showFirstLine(act) {
-  return line(`${nothingDone(act)}: that phase has not been listed here. List its parts first with \`${HALFCYCLE_COMMAND} plan <phase> --show\`, then type the line again.`);
+  return line(`${nothingDone(act)}: that phase has not been listed here. List its parts first with \`${halfcycleCommand(installedVersion())} plan <phase> --show\`, then type the line again.`);
 }
 function namedPhases(phases) {
   const quoted2 = phases.map((phase) => `"${phase}"`);
@@ -34701,7 +35246,7 @@ function noteRefusedLine() {
   return line("Nothing was sent back: the note was not accepted. Reword it in plain words and type the send-back again.");
 }
 function approveRefusedLine() {
-  return line(`${nothingDone("approve")}: Halfcycle did not accept the request. ${CLIENT_UPDATE_SENTENCE}`);
+  return line(`${nothingDone("approve")}: Halfcycle did not accept the request. ${clientUpdateSentence(installedVersion())}`);
 }
 function cannotReachLine(act) {
   return line(`${nothingDone(act)}: Halfcycle could not be reached just now. Type the line again in a minute.`);
@@ -34742,7 +35287,7 @@ function reviewNotAttendedLine() {
   return line(`${NOTHING_RECORDED}: reviewing by typing counts only when a person types it into an open session.`);
 }
 function reviewNotSignedInLine() {
-  return line(`${NOTHING_RECORDED}: this project is not signed in on this computer. ${HOOK_REMEDY}`);
+  return line(`${NOTHING_RECORDED}: this project is not signed in on this computer. ${hookRemedy(installedVersion())}`);
 }
 function reviewCannotReachLine() {
   return line(`${NOTHING_RECORDED}: Halfcycle could not be reached just now. Type the line again in a minute.`);
@@ -34838,7 +35383,7 @@ function reviewCloseRefusedLine(phase, steps) {
   return line([head, ...steps.map(unfinishedStepLine), "Then type the line again."].join(" "));
 }
 function reviewRefusedLine(act) {
-  return act === "accept" ? line(`${NOTHING_RECORDED}: Halfcycle did not accept the request. Update Halfcycle by running \`${HALFCYCLE_COMMAND}\` in this project's folder, then type the line again.`) : line(`${NOTHING_RECORDED}: the words were not accepted. Reword them in plain words and type the line again.`);
+  return act === "accept" ? line(`${NOTHING_RECORDED}: Halfcycle did not accept the request. Update Halfcycle by running \`${halfcycleCommand(installedVersion())}\` in this project's folder, then type the line again.`) : line(`${NOTHING_RECORDED}: the words were not accepted. Reword them in plain words and type the line again.`);
 }
 function stillWaitingOf(phase, waiting) {
   const named = namedPhase(phase);
@@ -34955,7 +35500,7 @@ function autonomyNotAttendedLine() {
   return line(`${AUTONOMY_NOTHING_CHANGED}: turning this on or off by typing counts only when a person types it into an open session.`);
 }
 function autonomyNotSignedInLine() {
-  return line(`${AUTONOMY_NOTHING_CHANGED}: this project is not signed in on this computer. ${HOOK_REMEDY}`);
+  return line(`${AUTONOMY_NOTHING_CHANGED}: this project is not signed in on this computer. ${hookRemedy(installedVersion())}`);
 }
 function autonomyNotOwnerLine() {
   return line(`${AUTONOMY_NOTHING_CHANGED}: only the project's owner can turn this on or off.`);
@@ -35037,7 +35582,7 @@ function waitNotAttendedLine() {
   return line(`${NOTHING_RECORDED}: an answer counts only when a person types it into an open session.`);
 }
 function waitNotSignedInLine() {
-  return line(`${NOTHING_RECORDED}: this project is not signed in on this computer. ${HOOK_REMEDY}`);
+  return line(`${NOTHING_RECORDED}: this project is not signed in on this computer. ${hookRemedy(installedVersion())}`);
 }
 function waitNotOwnerLine() {
   return line(`${NOTHING_RECORDED}: only the project's owner can answer a decision that waits for them.`);
@@ -35094,10 +35639,15 @@ var PACE_NOTHING_CHANGED_OPENING = "Nothing changed";
 function paceAnswerLine(text, _agent) {
   return codexLine(text);
 }
-function paceNumberDoneText(n, more) {
-  const head = `Done. This build now runs up to ${paceAgentsOf(n)} at once.`;
+function paceNumberDoneText(n, more, running) {
+  const when = running ? "starting now and in every later build" : "from the next build on";
+  const most = n >= PACE_AGENTS_MAX ? " That is the most Halfcycle runs." : "";
+  const head = `Done. This project now runs up to ${paceAgentsOf(n)} at once, ${when}.${most}`;
   return more ? `${head} This uses your allowance faster.` : head;
 }
+function paceVagueText() {
+  return `${PACE_NOTHING_CHANGED_OPENING}: say how many agents to run at once, from 1 to ${String(PACE_AGENTS_MAX)}, like "run 5 agents", or say "max pace".`;
+}
 function paceKeepFreeDoneText(percent) {
   if (percent === 0)
     return PACE_P5;
@@ -35109,7 +35659,7 @@ function paceUseUpToDoneText(percent) {
   return `Done. This build may use up to ${String(percent)}% of each usage window.`;
 }
 function paceNoBuildText() {
-  return `${PACE_NOTHING_CHANGED_OPENING}: no build is running in this project yet. Start one first, then say this.`;
+  return `${PACE_NOTHING_CHANGED_OPENING}: no build is running in this project yet, so there is no pace to raise. Say a number instead, like "run 5 agents", or say "max pace".`;
 }
 function paceAgentsRangeText() {
   return `${PACE_NOTHING_CHANGED_OPENING}: run between 1 and ${String(PACE_AGENTS_MAX)} agents at once.`;
@@ -35124,7 +35674,7 @@ function paceNotAttendedText() {
   return `${PACE_NOTHING_CHANGED_OPENING}: a choice that uses more of your allowance counts only when a person types it into an open session.`;
 }
 function paceNotSignedInText() {
-  return `${PACE_NOTHING_CHANGED_OPENING}: this project is not signed in on this computer. ${HOOK_REMEDY}`;
+  return `${PACE_NOTHING_CHANGED_OPENING}: this project is not signed in on this computer. ${hookRemedy(installedVersion())}`;
 }
 function paceNotOwnerText() {
   return `${PACE_NOTHING_CHANGED_OPENING}: only the project's owner can change this.`;
@@ -35350,30 +35900,51 @@ async function decidePace(shape, opts) {
   const say = (text) => paceAnswerLine(text, agent);
   const env = opts.env ?? process.env;
   const typed = whoTyped(opts);
+  if (shape.kind === "vague")
+    return say(paceVagueText());
   const read = readConfig(env);
   if (read.config === null) {
     return say(readNeverConfiguredReason(env) === "not-this-account" ? paceNotOwnerText() : paceNotSignedInText());
   }
   const { guardServiceToken, guardEngagementId } = read.config;
   const dir = enginePacingDir(guardEngagementId, opts.home);
+  if (dir === null)
+    return say(paceNotSignedInText());
   const build = readBuildNumber(guardEngagementId, opts.home);
-  const phase = dir === null ? null : readPaceStateFile(dir).basis?.phase ?? null;
-  if (dir === null || build === null || phase === null || build.phase !== phase)
-    return say(paceNoBuildText());
+  const phase = readPaceStateFile(dir).basis?.phase ?? null;
+  const running = build !== null && phase !== null && build.phase === phase ? { build, phase } : null;
+  const project = readProjectPace(guardEngagementId, opts.home);
+  const at = new Date((opts.now ?? Date.now)());
   const said = String(promptOf(opts.input)).trim();
-  if (shape.kind === "faster" || shape.kind === "agents") {
-    const number4 = shape.kind === "faster" ? build.number + 1 : shape.count;
-    if (number4 < 1 || number4 > PACE_AGENTS_MAX)
+  const relay = () => {
+    if (running !== null) {
+      recordRelayedChoice({ engagementId: guardEngagementId, phase: running.phase, said, now: at, home: opts.home });
+      return;
+    }
+    try {
+      const held = readProjectPace(guardEngagementId, opts.home);
+      writeProjectPace(guardEngagementId, { ...held, relayed: [...held.relayed, { at: at.toISOString(), said }] }, opts.home);
+    } catch {
+    }
+  };
+  if (shape.kind === "faster" || shape.kind === "agents" || shape.kind === "max") {
+    if (shape.kind === "faster" && running === null)
+      return say(paceNoBuildText());
+    const number4 = shape.kind === "faster" ? running.build.number + 1 : shape.kind === "max" ? PACE_AGENTS_MAX : shape.count;
+    if (!Number.isInteger(number4) || number4 < 1 || number4 > PACE_AGENTS_MAX)
       return say(paceAgentsRangeText());
-    const more = number4 > build.number;
+    const before = running !== null ? running.build.number : project.number ?? CAREFUL_START_AGENTS;
+    const more = number4 > before;
     if (more && typed === "not-attended")
       return say(paceNotAttendedText());
-    writeBuildNumber(guardEngagementId, { phase, number: number4, namedByOwner: true }, opts.home);
-    adjustPaceState(dir, opts, number4);
-    if (more && typed === "cannot-tell") {
-      recordRelayedChoice({ engagementId: guardEngagementId, phase, said, now: new Date((opts.now ?? Date.now)()), home: opts.home });
+    if (running !== null) {
+      writeBuildNumber(guardEngagementId, { phase: running.phase, number: number4, namedByOwner: true }, opts.home);
+      adjustPaceState(dir, opts, number4);
     }
-    return say(paceNumberDoneText(number4, more));
+    writeProjectPace(guardEngagementId, { ...project, number: number4 }, opts.home);
+    if (more && typed === "cannot-tell")
+      relay();
+    return say(paceNumberDoneText(number4, more, running !== null));
   }
   if (shape.kind === "keep-free" && shape.percent > KEEP_FREE_MAX)
     return say(paceKeepFreeRangeText());
@@ -35401,9 +35972,8 @@ async function decidePace(shape, opts) {
       case "recorded":
         if (response.status !== 200)
           return say(paceCannotReachText());
-        if (givenIn === "relayed" && parsed.data.moreAllowance === true) {
-          recordRelayedChoice({ engagementId: guardEngagementId, phase, said, now: new Date((opts.now ?? Date.now)()), home: opts.home });
-        }
+        if (givenIn === "relayed" && parsed.data.moreAllowance === true)
+          relay();
         return say(done);
       case "needs-the-person":
         return say(paceNotAttendedText());
@@ -35884,12 +36454,11 @@ function runResolveEngagement(cwd, registryPath) {
 }
 
 // dist/refresh-credential.js
-import { lstatSync as lstatSync5, readFileSync as readFileSync32, realpathSync as realpathSync11 } from "node:fs";
+import { lstatSync as lstatSync5, readFileSync as readFileSync31, realpathSync as realpathSync11 } from "node:fs";
 import { homedir as homedir19 } from "node:os";
 import { join as join24, resolve as resolve12 } from "node:path";
 
 // dist/mcp-headers.js
-import { readFileSync as readFileSync31 } from "node:fs";
 import { homedir as homedir18 } from "node:os";
 import { dirname as dirname10, resolve as resolve11 } from "node:path";
 var URL_FLAG = "--url";
@@ -35920,22 +36489,6 @@ function projectRootFromBinary(binaryPath) {
   const depth = VENDORED_BIN_REL.split("/").length - 1;
   return resolve11(dirname10(binaryPath), ...Array(depth).fill(".."));
 }
-function readPinnedVersion(root) {
-  let raw;
-  try {
-    raw = readFileSync31(resolve11(root, BUNDLE_PIN_REL), "utf-8");
-  } catch {
-    return void 0;
-  }
-  let pin;
-  try {
-    pin = JSON.parse(raw);
-  } catch {
-    return void 0;
-  }
-  const version2 = typeof pin === "object" && pin !== null ? pin["version"] : void 0;
-  return typeof version2 === "string" && version2 !== "" ? version2 : void 0;
-}
 function resolveStore(root, home) {
   const pinned = readPinnedId(root);
   if ("problem" in pinned)
@@ -35964,23 +36517,25 @@ function sentences(lines2) {
 `).join("");
 }
 function badIdSentence(root) {
+  const signIn = signInCommand(readPinnedVersion(root));
   return sentences([
     `${resolve11(root, BUNDLE_PIN_REL)} names an engagement id that is not a Halfcycle project id,`,
-    'so no credential was read. Delete that file and run "npx halfcycle" again: this repository',
+    `so no credential was read. Delete that file and run ${signIn} again: this repository`,
     "is then set up as a new Halfcycle project."
   ]);
 }
 function storeProblemSentence(problem, root, home, engagementId) {
+  const signIn = signInCommand(readPinnedVersion(root));
   switch (problem) {
     case "no-pin":
       return sentences([
         `no ${BUNDLE_PIN_REL} in ${root}, so this repository has no Halfcycle engagement.`,
-        'run "npx halfcycle" here to install one.'
+        `run ${signIn} here to install one.`
       ]);
     case "no-id":
       return sentences([
         `${resolve11(root, BUNDLE_PIN_REL)} names no engagement id.`,
-        'run "npx halfcycle" here to rewrite it.'
+        `run ${signIn} here to rewrite it.`
       ]);
     case "bad-id":
       return badIdSentence(root);
@@ -35989,14 +36544,14 @@ function storeProblemSentence(problem, root, home, engagementId) {
         "this project belongs to another Halfcycle account, so this machine has no",
         "credential for it and the Halfcycle tools are not available here. Nothing is",
         "broken.",
-        requestAccessSentence(engagementId),
+        requestAccessSentence(engagementId, readControlOrigin().origin),
         "If this account is wrong, sign in as the account that owns it and run",
-        '"npx halfcycle" again.'
+        `${signIn} again.`
       ]);
     case "no-credential":
       return sentences([
         `this machine holds no credential for engagement ${engagementId ?? ""}.`,
-        `run "npx halfcycle" in this repository \u2014 it will sign you in through your browser if needed, and write the credential to ${resolve11(home, HALFCYCLE_DIR_NAME)}, outside this repository.`
+        `run ${signIn} in this repository \u2014 it will sign you in through your browser if needed, and write the credential to ${resolve11(home, HALFCYCLE_DIR_NAME)}, outside this repository.`
       ]);
   }
 }
@@ -36021,6 +36576,7 @@ async function chooseBearer(opts) {
   const writeErr = opts.writeErr ?? defaultWriteErr;
   const home = opts.home ?? homedir18();
   const root = projectRootFromBinary(opts.binaryPath);
+  const signIn = signInCommand(readPinnedVersion(root));
   const environmentToken = opts.environmentTokenFirst ? readEnvironmentToken() : void 0;
   const store = resolveStore(root, home);
   let storedToken;
@@ -36033,7 +36589,7 @@ async function chooseBearer(opts) {
     if (storedToken === void 0) {
       writeErr(sentences([
         `GUARD_SERVICE_TOKEN is absent or empty in ${store.path}.`,
-        `run "npx halfcycle" in this repository to rewrite this machine's credential.`
+        `run ${signIn} in this repository to rewrite this machine's credential.`
       ]));
       return NO_CREDENTIAL_PLACEHOLDER;
     }
@@ -36053,7 +36609,7 @@ async function chooseBearer(opts) {
     } else {
       writeErr(sentences([
         "this machine has no Halfcycle server address recorded for this repository, so the credential was not sent.",
-        'run "npx halfcycle" in this repository on this machine to record it.'
+        `run ${signIn} in this repository on this machine to record it.`
       ]));
     }
     return NO_CREDENTIAL_PLACEHOLDER;
@@ -36065,7 +36621,7 @@ async function chooseBearer(opts) {
     writeErr(sentences([
       `${registrationFile} asks for this repository's Halfcycle credential to be sent to ${shownUrl(requested ?? "")},`,
       `which is not this machine's Halfcycle server (${want ?? "none recorded"}). The credential was NOT sent.`,
-      `if nobody meant to change ${registrationFile}, treat that change as suspect; "npx halfcycle" restores the entry.`
+      `if nobody meant to change ${registrationFile}, treat that change as suspect; ${signIn} restores the entry.`
     ]));
     return NO_CREDENTIAL_PLACEHOLDER;
   }
@@ -36085,6 +36641,7 @@ async function chooseBearer(opts) {
 async function mcpHeaders(opts) {
   const writeErr = opts.writeErr ?? defaultWriteErr;
   const root = projectRootFromBinary(opts.binaryPath);
+  const signIn = signInCommand(readPinnedVersion(root));
   const variableUrl = readMcpServerUrl();
   try {
     return headerLine(await chooseBearer({
@@ -36102,7 +36659,7 @@ async function mcpHeaders(opts) {
     try {
       writeErr(sentences([
         `the credential could not be read: ${err instanceof Error ? err.message : String(err)}`,
-        `run "npx halfcycle" in this repository to rewrite this machine's credential.`
+        `run ${signIn} in this repository to rewrite this machine's credential.`
       ]));
     } catch {
       return headerLine(NO_CREDENTIAL_PLACEHOLDER, readPinnedVersion(root));
@@ -36117,11 +36674,13 @@ async function headersVerbLine(binaryPath, rest, run = mcpHeaders, writeErr = de
   } catch (err) {
     if (url2 === void 0)
       throw err;
-    const fallback = headerLine(NO_CREDENTIAL_PLACEHOLDER, readPinnedVersion(projectRootFromBinary(binaryPath)));
+    const version2 = readPinnedVersion(projectRootFromBinary(binaryPath));
+    const signIn = signInCommand(version2);
+    const fallback = headerLine(NO_CREDENTIAL_PLACEHOLDER, version2);
     try {
       writeErr(sentences([
         `the credential could not be read: ${err instanceof Error ? err.message : String(err)}`,
-        `run "npx halfcycle" in this repository to rewrite this machine's credential.`
+        `run ${signIn} in this repository to rewrite this machine's credential.`
       ]));
     } catch {
       return fallback;
@@ -36185,7 +36744,7 @@ var SESSION_START_PROBE_ATTEMPTS = 2;
 function registeredMcpUrl(projectRoot) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync32(resolve12(projectRoot, MCP_REGISTRATION_REL), "utf-8"));
+    parsed = JSON.parse(readFileSync31(resolve12(projectRoot, MCP_REGISTRATION_REL), "utf-8"));
   } catch {
     return void 0;
   }
@@ -36220,7 +36779,7 @@ function reportOf(body) {
   const instructions = body["result"]["instructions"];
   return typeof instructions === "string" ? checksReportOfInstructions(instructions) : "none";
 }
-async function postInitialize(url2, bearer, fetchFn, signal) {
+async function postInitialize(url2, bearer, fetchFn, signal, version2) {
   let res;
   try {
     res = await fetchFn(url2, {
@@ -36235,7 +36794,7 @@ async function postInitialize(url2, bearer, fetchFn, signal) {
   }
   if (res.status === 401) {
     discardBody(res);
-    return NO_CREDENTIAL_SENTENCE;
+    return noCredentialSentence(version2);
   }
   if (res.status < 200 || res.status > 299) {
     discardBody(res);
@@ -36255,12 +36814,12 @@ async function postInitialize(url2, bearer, fetchFn, signal) {
   }
   return namesItsServer(body) ? { report: reportOf(body) } : SERVICE_PROBLEM_SENTENCE;
 }
-async function probeDelivery(url2, bearer, fetchFn, deadlineMs, maxAttempts) {
+async function probeDelivery(url2, bearer, fetchFn, deadlineMs, maxAttempts, version2) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), deadlineMs);
   try {
     for (let attempt3 = 0; attempt3 < maxAttempts; attempt3++) {
-      const outcome = await postInitialize(url2, bearer, fetchFn, controller.signal);
+      const outcome = await postInitialize(url2, bearer, fetchFn, controller.signal, version2);
       if (outcome !== CUT_OFF)
         return outcome;
     }
@@ -36271,9 +36830,11 @@ async function probeDelivery(url2, bearer, fetchFn, deadlineMs, maxAttempts) {
 }
 async function checkConnection(renewedToken, opts) {
   const profile = opts.profile ?? AGENT_PROFILES["claude-code"];
-  const url2 = registeredMcpUrl(projectRootFromBinary(opts.binaryPath));
+  const root = projectRootFromBinary(opts.binaryPath);
+  const url2 = registeredMcpUrl(root);
   if (url2 === void 0)
     return void 0;
+  const version2 = readPinnedVersion(root);
   const bearer = await chooseBearer({
     binaryPath: opts.binaryPath,
     home: opts.home,
@@ -36284,9 +36845,9 @@ async function checkConnection(renewedToken, opts) {
     environmentTokenFirst: false
   });
   if (CREDENTIAL_PLACEHOLDERS.includes(bearer)) {
-    return { sentence: PLACEHOLDER_SENTENCES[bearer], url: url2, bearer, connected: false };
+    return { sentence: placeholderSentencesOf(version2)[bearer], url: url2, bearer, connected: false };
   }
-  const outcome = await probeDelivery(url2, bearer, opts.fetchFn ?? globalThis.fetch, opts.checkDeadlineMs ?? CONNECTION_CHECK_DEADLINE_MS, opts.maxAttempts ?? SESSION_START_PROBE_ATTEMPTS);
+  const outcome = await probeDelivery(url2, bearer, opts.fetchFn ?? globalThis.fetch, opts.checkDeadlineMs ?? CONNECTION_CHECK_DEADLINE_MS, opts.maxAttempts ?? SESSION_START_PROBE_ATTEMPTS, version2);
   if (typeof outcome === "string")
     return { sentence: outcome, url: url2, bearer, connected: false };
   return { sentence: connectedSentenceFor(profile), url: url2, bearer, connected: true, report: outcome.report };
@@ -36361,7 +36922,11 @@ async function fetchPositionNotices(url2, bearer, engagementId, fetchFn, deadlin
   }
 }
 function scopeNoticeLines(scope, engagementId) {
-  const text = scopeNoticeText(scope, { engagementId, offerTyping: scope.typedApprovalOffered ? "yes" : "off" });
+  const text = scopeNoticeText(scope, {
+    engagementId,
+    serviceAddress: readControlOrigin().origin,
+    offerTyping: scope.typedApprovalOffered ? "yes" : "off"
+  });
   return [...text.sentBack, ...text.waiting];
 }
 function defaultWriteErr2(text) {
@@ -36374,12 +36939,13 @@ function headlessInUntrustedFolder(input, profile, opts) {
   const cwd = input["cwd"];
   const folder2 = typeof cwd === "string" && cwd !== "" ? cwd : projectRootFromBinary(opts.binaryPath);
   const stateFile = join24(readClaudeConfigFolder() ?? opts.home ?? homedir19(), CLAUDE_STATE_FILENAME);
-  return trustOfWorkingFolder(folder2, stateFile, process.platform, { lstatSync: lstatSync5, readFileSync: readFileSync32, realpathSync: realpathSync11 }) === "not-trusted";
+  return trustOfWorkingFolder(folder2, stateFile, process.platform, { lstatSync: lstatSync5, readFileSync: readFileSync31, realpathSync: realpathSync11 }) === "not-trusted";
 }
 async function runRefreshCredential(opts) {
   const writeErr = opts.writeErr ?? defaultWriteErr2;
   const profile = opts.profile ?? AGENT_PROFILES["claude-code"];
   const startedAt = Date.now();
+  const startVersion = readPinnedVersion(projectRootFromBinary(opts.binaryPath));
   try {
     const renewalSaid = [];
     let renewalOpen = true;
@@ -36410,7 +36976,7 @@ async function runRefreshCredential(opts) {
               if (notices?.scope !== void 0)
                 parts.push(...scopeNoticeLines(notices.scope, engagementId));
               if (notices?.review !== void 0)
-                parts.push(...reviewNoticeText(notices.review));
+                parts.push(...reviewNoticeText(notices.review, startVersion));
               for (const entry of notices?.approvedInConsole ?? [])
                 parts.push(approvedInConsoleSentence(entry.phase));
             }
@@ -36438,18 +37004,18 @@ async function runRefreshCredential(opts) {
       return `${nonBlockingReply("SessionStart", FOLDER_NOT_TRUSTED_NOTICE)}
 `;
     if (readConfig().config === null) {
-      const remedySaid = parts.some(namesTheSignInCommand);
+      const remedySaid = parts.some((part) => namesTheSignInCommand(part, startVersion));
       aFailureOfOurs = true;
-      parts.push(noCoverageStatement(readNeverConfiguredReason(), remedySaid, pinnedEngagementId(projectRootFromBinary(opts.binaryPath))));
+      parts.push(noCoverageStatement(readNeverConfiguredReason(), remedySaid, pinnedEngagementId(projectRootFromBinary(opts.binaryPath)), startVersion));
     }
     for (const said of renewalSaid) {
       aFailureOfOurs = true;
-      if (namesTheSignInCommand(said) && parts.some(namesTheSignInCommand))
+      if (namesTheSignInCommand(said, startVersion) && parts.some((part) => namesTheSignInCommand(part, startVersion)))
         continue;
       parts.push(said.trimEnd());
     }
     if (aFailureOfOurs)
-      parts.push(DOCTOR_LINE);
+      parts.push(doctorLine(startVersion));
     return parts.length === 0 ? "" : `${nonBlockingReply("SessionStart", parts.join("\n"))}
 `;
   } catch (err) {
@@ -36467,7 +37033,7 @@ async function runRefreshCredential(opts) {
 import { fileURLToPath } from "node:url";
 
 // dist/capture.js
-import { readFileSync as readFileSync33, writeFileSync as writeFileSync20, mkdirSync as mkdirSync14, existsSync as existsSync10 } from "node:fs";
+import { readFileSync as readFileSync32, writeFileSync as writeFileSync20, mkdirSync as mkdirSync14, existsSync as existsSync10 } from "node:fs";
 import { dirname as dirname11 } from "node:path";
 function runCapture(provider, endpoint, opts = {}) {
   const repoRoot = opts.repoRoot ?? process.cwd();
@@ -36535,7 +37101,7 @@ function readInputFile(fromFile) {
   if (!fromFile)
     return void 0;
   try {
-    return readFileSync33(fromFile, "utf-8");
+    return readFileSync32(fromFile, "utf-8");
   } catch {
     return void 0;
   }
@@ -36548,7 +37114,7 @@ function relativeFixturePath(repoRoot, fixture) {
 // dist/prove.js
 import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash6, randomUUID as randomUUID3 } from "node:crypto";
-import { createWriteStream, mkdirSync as mkdirSync15, readdirSync as readdirSync11, readFileSync as readFileSync34, renameSync as renameSync18, unlinkSync as unlinkSync12, writeFileSync as writeFileSync21 } from "node:fs";
+import { createWriteStream, mkdirSync as mkdirSync15, readdirSync as readdirSync11, readFileSync as readFileSync33, renameSync as renameSync18, unlinkSync as unlinkSync12, writeFileSync as writeFileSync21 } from "node:fs";
 import { homedir as homedir20 } from "node:os";
 import { dirname as dirname12, join as join25 } from "node:path";
 
@@ -36560,11 +37126,15 @@ function firstNumber(line2, pattern) {
   const match = line2.match(pattern);
   return match ? Number(match[1]) : void 0;
 }
-function nodeTestRunnerCounts(output) {
-  const passedLines = [...output.matchAll(/^# pass (\d+)$/gm)];
+var NODE_PASS_LINE = /^(?:# |ℹ️? )pass (\d+)[ \t\r]*$/gm;
+var NODE_FAIL_LINE = /^(?:# |ℹ️? )fail (\d+)[ \t\r]*$/gm;
+var NODE_COLOUR_CODE = /\u001b\[[0-9;]*m/g;
+function nodeTestRunnerCounts(rawOutput) {
+  const output = rawOutput.replace(NODE_COLOUR_CODE, "");
+  const passedLines = [...output.matchAll(NODE_PASS_LINE)];
   if (passedLines.length === 0)
     return null;
-  const failedLines = [...output.matchAll(/^# fail (\d+)$/gm)];
+  const failedLines = [...output.matchAll(NODE_FAIL_LINE)];
   return {
     passed: sum(passedLines.map((m) => Number(m[1]))),
     failed: sum(failedLines.map((m) => Number(m[1])))
@@ -36625,13 +37195,56 @@ function cargoTestCounts(output) {
     failed: sum(lines2.map((m) => Number(m[2])))
   };
 }
+var UNITTEST_COLOUR_CODE = /\u001b\[[0-9;]*m/g;
+var UNITTEST_RAN_LINE = /^Ran (\d+) tests? in \d+(?:\.\d+)?s\s*$/;
+var UNITTEST_STATUS_LINE = /^(?:OK|FAILED|NO TESTS RAN)(?: \((.*)\))?$/;
+var UNITTEST_PAIR = /^(failures|errors|skipped|expected failures|unexpected successes)=(\d+)$/;
+function unittestPairs(list) {
+  const pairs = /* @__PURE__ */ new Map();
+  if (list === void 0)
+    return pairs;
+  for (const part of list.split(",")) {
+    const match = part.trim().match(UNITTEST_PAIR);
+    if (!match)
+      return null;
+    pairs.set(match[1], (pairs.get(match[1]) ?? 0) + Number(match[2]));
+  }
+  return pairs;
+}
+function unittestCounts(output) {
+  const lines2 = output.split("\n").map((line2) => line2.endsWith("\r") ? line2.slice(0, -1) : line2);
+  let total = null;
+  for (let i = 0; i < lines2.length; i++) {
+    const ran = lines2[i].match(UNITTEST_RAN_LINE);
+    if (!ran)
+      continue;
+    let next = i + 1;
+    while (next < lines2.length && lines2[next].trim() === "")
+      next++;
+    if (next >= lines2.length)
+      continue;
+    const status = lines2[next].replace(UNITTEST_COLOUR_CODE, "").trim().match(UNITTEST_STATUS_LINE);
+    if (!status)
+      continue;
+    const pairs = unittestPairs(status[1]);
+    if (!pairs)
+      continue;
+    const count = (key) => pairs.get(key) ?? 0;
+    const failed2 = count("failures") + count("errors") + count("unexpected successes");
+    const accounted = failed2 + count("skipped") + count("expected failures");
+    const passed = Math.max(0, Number(ran[1]) - accounted);
+    total = total ? { passed: total.passed + passed, failed: total.failed + failed2 } : { passed, failed: failed2 };
+  }
+  return total;
+}
 var FORMAT_PARSERS = [
   nodeTestRunnerCounts,
   mochaCounts,
   jestCounts,
   vitestCounts,
   pytestCounts,
-  cargoTestCounts
+  cargoTestCounts,
+  unittestCounts
 ];
 function parseTestCounts(output) {
   let total = null;
@@ -36759,7 +37372,7 @@ function keptCheckPath(dir, subject, label) {
 }
 function readKeptCheck(dir, subject, label) {
   try {
-    const raw = JSON.parse(readFileSync34(keptCheckPath(dir, subject, label), "utf-8"));
+    const raw = JSON.parse(readFileSync33(keptCheckPath(dir, subject, label), "utf-8"));
     if (typeof raw.command !== "string" || raw.command === "" || typeof raw.commandId !== "string")
       return null;
     const b = raw.before;
@@ -36784,7 +37397,7 @@ function readQueue(dir) {
     const path = join25(dir, QUEUE_DIR_NAME, name);
     let parsed = null;
     try {
-      parsed = testRunReportSchema.safeParse(JSON.parse(readFileSync34(path, "utf-8")));
+      parsed = testRunReportSchema.safeParse(JSON.parse(readFileSync33(path, "utf-8")));
     } catch {
       parsed = null;
     }
@@ -37027,7 +37640,7 @@ ${PROVE_USAGE}`);
   const end = await runCommand(command, repoRoot, logPath2, env, deps);
   let output = "";
   try {
-    output = readFileSync34(logPath2, "utf-8");
+    output = readFileSync33(logPath2, "utf-8");
   } catch {
     output = "";
   }
@@ -37077,7 +37690,7 @@ ${PROVE_USAGE}`);
 
 // dist/statusline.js
 import { spawn as spawn3 } from "node:child_process";
-import { readFileSync as readFileSync35 } from "node:fs";
+import { readFileSync as readFileSync34 } from "node:fs";
 import nodePath7 from "node:path";
 var OWN_STATUS_LINE_DEADLINE_MS = 5e3;
 var PERSON_SETTINGS_FILENAME = "settings.json";
@@ -37115,7 +37728,7 @@ function halfcycleStatusLineOf(figures) {
 }
 function personStatusLineCommand(configFolder) {
   try {
-    const v = JSON.parse(readFileSync35(nodePath7.join(configFolder, PERSON_SETTINGS_FILENAME), "utf-8"));
+    const v = JSON.parse(readFileSync34(nodePath7.join(configFolder, PERSON_SETTINGS_FILENAME), "utf-8"));
     const line2 = v["statusLine"];
     if (typeof line2 !== "object" || line2 === null)
       return null;
@@ -37233,7 +37846,7 @@ function usageFigures2(env, deps = {}) {
   }
   return figures;
 }
-function connectionKind(bearer, sentence) {
+function connectionKind(bearer, sentence, version2) {
   if (bearer === NOT_THIS_ACCOUNT_PLACEHOLDER)
     return "other-account";
   if (bearer === UPDATE_CLAUDE_CODE_PLACEHOLDER)
@@ -37246,7 +37859,7 @@ function connectionKind(bearer, sentence) {
     return "cannot-reach";
   if (sentence === SERVICE_PROBLEM_SENTENCE)
     return "service-problem";
-  if (sentence === NO_CREDENTIAL_SENTENCE)
+  if (sentence === noCredentialSentence(version2))
     return "signed-out";
   throw new Error("the connection check gave an outcome with no kind");
 }
@@ -37260,7 +37873,7 @@ async function checkConnectionLine(opts) {
   const withUsage = usage.length === 0 ? {} : { usage };
   if (result === void 0)
     return { kind: "not-registered", sentence: null, ...withUsage };
-  const line2 = { kind: connectionKind(result.bearer, result.sentence), sentence: result.sentence };
+  const line2 = { kind: connectionKind(result.bearer, result.sentence, readPinnedVersion(projectRootFromBinary(opts.binaryPath))), sentence: result.sentence };
   const report = result.report === void 0 || result.report === "none" ? {} : { report: result.report };
   return { ...line2, ...report, ...withUsage };
 }