halfcycle 0.11.1 → 0.12.0-rc.2

package/dist/index.js

@@ -1,10 +1,9 @@
 // dist/install.js
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync4, lstatSync, mkdirSync as mkdirSync4, readFileSync as readFileSync5, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync4, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join6, posix as posix2, relative, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
+import { dirname as dirname4, isAbsolute as isAbsolute2, join as join7, posix as posix2, relative, resolve } from "node:path";
 
 // ../core/dist/guard-record.js
 import { z } from "zod";
@@ -268,14 +267,40 @@ function looksLikeSecret(text) {
 var MCP_REGISTRATION_REL = ".mcp.json";
 var MCP_SERVER_KEY = "halfcycle";
 
+// ../core/dist/release-version.js
+var RELEASE_VERSION_PATTERN = /^\d+\.\d+\.\d+$/;
+
+// ../core/dist/release-tag.js
+var PRE_RELEASE_VERSION_PATTERN = /^(\d+\.\d+\.\d+)-rc\.\d+$/;
+var PACKAGE_COMMAND = "npx halfcycle";
+var COMMAND_FORMS = /npx halfcycle(?:@latest|(?![@\p{L}\p{N}-]))/gu;
+function isPreReleaseVersion(value) {
+  return typeof value === "string" && PRE_RELEASE_VERSION_PATTERN.test(value);
+}
+function releaseTagOfVersion(version) {
+  return isPreReleaseVersion(version) ? "next" : "latest";
+}
+function halfcycleCommand(version) {
+  return `${PACKAGE_COMMAND}@${releaseTagOfVersion(version)}`;
+}
+function bareHalfcycleCommand(version) {
+  return releaseTagOfVersion(version) === "next" ? `${PACKAGE_COMMAND}@next` : PACKAGE_COMMAND;
+}
+function rewriteHalfcycleCommands(text, tag) {
+  if (tag === "latest")
+    return text;
+  return text.replace(COMMAND_FORMS, `${PACKAGE_COMMAND}@${tag}`);
+}
+
 // ../core/dist/shell-quote.js
 function quoteForShell(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
-var HALFCYCLE_COMMAND = "npx halfcycle@latest";
-
-// ../core/dist/release-version.js
-var RELEASE_VERSION_PATTERN = /^\d+\.\d+\.\d+$/;
+var HALFCYCLE_COMMAND = halfcycleCommand();
+function doctorLine(version) {
+  return `Run \`${bareHalfcycleCommand(version)} doctor\` to check set up, sign-in, connection, checks and version.`;
+}
+var DOCTOR_LINE = doctorLine();
 
 // ../core/dist/github-address.js
 var GITHUB_REPOSITORY_ADDRESS = /^https:\/\/github\.com\/[A-Za-z0-9][A-Za-z0-9-]{0,38}\/(?!\.{1,2}$)[A-Za-z0-9._-]{1,100}$/;
@@ -293,8 +318,14 @@ var REMOTE_FORMS = [
 ];
 
 // ../core/dist/sign-in.js
-var SIGN_IN_COMMAND = '"npx halfcycle"';
-var HOOK_REMEDY = `Run ${SIGN_IN_COMMAND} in the project folder to sign in.`;
+function signInCommand(version) {
+  return `"${bareHalfcycleCommand(version)}"`;
+}
+var SIGN_IN_COMMAND = signInCommand();
+function hookRemedy(version) {
+  return `Run ${signInCommand(version)} in the project folder to sign in.`;
+}
+var HOOK_REMEDY = hookRemedy();
 
 // ../core/dist/task-plan.js
 import { z as z2 } from "zod";
@@ -408,7 +439,7 @@ function codexHookCommand(script, args) {
   const invocation = `cd "$(git rev-parse --show-toplevel)" && bash ./${script}`;
   return args === void 0 ? invocation : `${invocation} ${args}`;
 }
-var CODEX_WINDOWS_NOT_SET_UP = "Halfcycle checks did not run because Halfcycle is not set up in this folder or any folder above it; run npx halfcycle in the project folder.";
+var CODEX_WINDOWS_NOT_SET_UP = `Halfcycle checks did not run because Halfcycle is not set up in this folder or any folder above it; run ${bareHalfcycleCommand()} in the project folder.`;
 var CODEX_WINDOWS_NO_GIT_BASH = "Halfcycle checks did not run because Git for Windows was not found; install Git for Windows, then open a new session.";
 function codexHookCommandWindows(script, args) {
   const tick = (text) => "`" + text + "`";
@@ -3111,8 +3142,22 @@ var deviceConfirmResponseSchema = z19.union([
 var DASHBOARD_URL = "https://app.halfcycle.ai";
 
 // ../events/dist/project-page.js
-function projectPageUrl(engagementId) {
-  return isEngagementId(engagementId) ? `${DASHBOARD_URL}/${encodeURIComponent(engagementId)}` : void 0;
+var SERVICE_HOST = /^(?:control|delivery)(-[a-z0-9]+)?\.halfcycle\.ai$/;
+function consoleOrigin(serviceAddress) {
+  const trimmed = serviceAddress?.trim();
+  if (!trimmed)
+    return DASHBOARD_URL;
+  let host;
+  try {
+    host = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`).hostname.toLowerCase();
+  } catch {
+    return DASHBOARD_URL;
+  }
+  const suffix = SERVICE_HOST.exec(host)?.[1];
+  return suffix === void 0 ? DASHBOARD_URL : `https://app${suffix}.halfcycle.ai`;
+}
+function projectPageUrl(engagementId, serviceAddress) {
+  return isEngagementId(engagementId) ? `${consoleOrigin(serviceAddress)}/${encodeURIComponent(engagementId)}` : void 0;
 }
 
 // ../events/dist/credential-wire.js
@@ -3135,8 +3180,14 @@ var NO_CREDENTIAL_PLACEHOLDER = "halfcycle:no-credential";
 var NOT_THIS_ACCOUNT_PLACEHOLDER = "halfcycle:not-this-account";
 var UPDATE_CLAUDE_CODE_PLACEHOLDER = "halfcycle:update-claude-code";
 var SWITCH_ACCOUNT_ANSWER = 'answer "s" when asked';
-var NO_CREDENTIAL_SENTENCE = 'Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "npx halfcycle" in the project folder to sign in again.';
-var NOT_THIS_ACCOUNT_SENTENCE = `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "npx halfcycle" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+function noCredentialSentence(version) {
+  return `Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "${bareHalfcycleCommand(version)}" in the project folder to sign in again.`;
+}
+var NO_CREDENTIAL_SENTENCE = noCredentialSentence();
+function notThisAccountSentence(version) {
+  return `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "${bareHalfcycleCommand(version)}" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+}
+var NOT_THIS_ACCOUNT_SENTENCE = notThisAccountSentence();
 var UPDATE_CLAUDE_CODE_SENTENCE = "Halfcycle is not connected: this Claude Code version does not name the server it connects to, so no credential was sent. Update Claude Code, then reopen.";
 var NO_NODE_SENTENCE = "Halfcycle is not connected: Node is not installed, or not on the path this session uses, so nothing here is checked. Install Node, then reopen.";
 var PLACEHOLDER_SENTENCES = Object.freeze({
@@ -3572,9 +3623,9 @@ var phaseModelsFileSchema = z26.object({
 }).strict();
 
 // dist/engagement-credential.js
-import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { chmodSync, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 
 // dist/account-credential.js
 import { homedir, platform } from "node:os";
@@ -3583,6 +3634,46 @@ function halfcycleHome(home) {
   return join(home ?? homedir(), HALFCYCLE_DIR_NAME);
 }
 
+// dist/own-version.js
+import { existsSync, readFileSync } from "node:fs";
+import { dirname as dirname2, join as join2 } from "node:path";
+import { fileURLToPath } from "node:url";
+var moduleDir = dirname2(fileURLToPath(import.meta.url));
+function findBundleRoot(startDir) {
+  let candidate = startDir;
+  for (let i = 0; i < 4; i++) {
+    const manifest = join2(candidate, ".claude-plugin", "plugin.json");
+    try {
+      if (existsSync(manifest))
+        return candidate;
+    } catch {
+    }
+    candidate = dirname2(candidate);
+  }
+  return join2(startDir, "..");
+}
+var BUNDLE_ROOT = findBundleRoot(moduleDir);
+function bundleVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync(join2(BUNDLE_ROOT, "package.json"), "utf-8"));
+    return typeof pkg.version === "string" ? pkg.version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var cachedVersion;
+function ownVersion() {
+  if (cachedVersion === void 0)
+    cachedVersion = { value: bundleVersion() };
+  return cachedVersion.value;
+}
+function ownCommand() {
+  return halfcycleCommand(ownVersion());
+}
+function ownBareCommand() {
+  return bareHalfcycleCommand(ownVersion());
+}
+
 // dist/engagement-credential.js
 var ENGAGEMENTS_DIR = ENGAGEMENTS_DIR_NAME;
 var ENV_FILENAME = ENGAGEMENT_ENV_FILENAME;
@@ -3590,7 +3681,7 @@ var HALFCYCLE_DIR = HALFCYCLE_DIR_NAME;
 var InvalidEngagementIdError = class extends Error {
   constructor(engagementId) {
     const shown = JSON.stringify(engagementId.length > 80 ? `${engagementId.slice(0, 80)}\u2026` : engagementId);
-    super(`${shown} is not a Halfcycle project id, so it cannot name a folder on this machine and nothing was written. A project id looks like 3f2a1c4e-8b7d-4e2f-9a61-0c5d7e8f9b10. If it is the "${PIN_ENGAGEMENT_ID_FIELD}" in .halfcycle/bundle.json, delete that file and run "npx halfcycle" again: this repository is then set up as a new Halfcycle project.`);
+    super(`${shown} is not a Halfcycle project id, so it cannot name a folder on this machine and nothing was written. A project id looks like 3f2a1c4e-8b7d-4e2f-9a61-0c5d7e8f9b10. If it is the "${PIN_ENGAGEMENT_ID_FIELD}" in .halfcycle/bundle.json, delete that file and run "${ownBareCommand()}" again: this repository is then set up as a new Halfcycle project.`);
     this.name = "InvalidEngagementIdError";
   }
 };
@@ -3600,10 +3691,10 @@ function assertEngagementId(engagementId) {
 }
 function engagementStateDir(engagementId, home) {
   assertEngagementId(engagementId);
-  return join2(halfcycleHome(home), ENGAGEMENTS_DIR, engagementId);
+  return join3(halfcycleHome(home), ENGAGEMENTS_DIR, engagementId);
 }
 function engagementEnvPath(engagementId, home) {
-  return join2(engagementStateDir(engagementId, home), ENV_FILENAME);
+  return join3(engagementStateDir(engagementId, home), ENV_FILENAME);
 }
 var GUARD_ENV_KEYS = [
   "GUARD_SERVICE_URL",
@@ -3625,7 +3716,7 @@ function reconcileEnvText2(existing, values, keys = ENGAGEMENT_ENV_KEYS) {
 }
 function readEngagementEnv(engagementId, home) {
   try {
-    return parseEnvText(readFileSync(engagementEnvPath(engagementId, home), "utf-8"));
+    return parseEnvText(readFileSync2(engagementEnvPath(engagementId, home), "utf-8"));
   } catch {
     return null;
   }
@@ -3635,7 +3726,7 @@ function writeEngagementEnv(engagementId, values, home, keys = ENGAGEMENT_ENV_KE
   const dir = engagementStateDir(engagementId, home);
   let existing;
   try {
-    existing = readFileSync(path, "utf-8");
+    existing = readFileSync2(path, "utf-8");
   } catch {
     existing = null;
   }
@@ -3666,7 +3757,7 @@ function engagementResolutionShell() {
   return `# --- Halfcycle credential resolution (generated; do not edit) ----------------
 # THE CREDENTIAL IS NOT IN THIS REPOSITORY. It lives at
 #   $HOME/${HALFCYCLE_DIR}/${ENGAGEMENTS_DIR}/<engagement-id>/${ENV_FILENAME}
-# written owner-only by \`npx halfcycle\`. What this repository holds is the
+# written owner-only by \`${bareHalfcycleCommand()}\`. What this repository holds is the
 # engagement id, in the committed .halfcycle/bundle.json. So: read the id out of
 # the pin, then name the file. There is no jq here and node is not dependable on a
 # desktop session's PATH, so the id is cut out with sed \u2014 after flattening the
@@ -3720,8 +3811,8 @@ halfcycle_env_file() {
 
 // dist/identity.js
 import { execFileSync } from "node:child_process";
-import { existsSync, linkSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname2, isAbsolute, join as join3 } from "node:path";
+import { existsSync as existsSync2, linkSync, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname3, isAbsolute, join as join4 } from "node:path";
 import { randomUUID } from "node:crypto";
 var PROJECT_IDENTITY_NOTE = 'projectId is NOT the engagement id \u2014 it identifies this repository/worktree to Halfcycle, not an engagement. The engagement id lives in .halfcycle/bundle.json, in its "engagementId" field.';
 var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
@@ -3834,13 +3925,13 @@ function readIgnoredPaths(targetRepoRoot, paths) {
   const toplevel = git(targetRepoRoot, ["rev-parse", "--show-toplevel"]);
   if (toplevel === null)
     return null;
-  return ignored.map((entry) => isAbsolute(entry.source) ? entry : { ...entry, source: join3(toplevel, entry.source) });
+  return ignored.map((entry) => isAbsolute(entry.source) ? entry : { ...entry, source: join4(toplevel, entry.source) });
 }
 function mintOrReadIdentity(targetRepoRoot) {
-  const path = join3(targetRepoRoot, ".halfcycle", "project.json");
-  if (existsSync(path)) {
+  const path = join4(targetRepoRoot, ".halfcycle", "project.json");
+  if (existsSync2(path)) {
     repairRemoteCredential(targetRepoRoot);
-    const onDisk = JSON.parse(readFileSync2(path, "utf-8"));
+    const onDisk = JSON.parse(readFileSync3(path, "utf-8"));
     const identity = {
       projectId: onDisk.projectId ?? "",
       rootCommit: onDisk.rootCommit ?? null,
@@ -3865,10 +3956,10 @@ function repairRemoteCredential(targetRepoRoot) {
     replaceProjectIdentityFile(targetRepoRoot, repaired);
 }
 function plannedRemoteRepair(targetRepoRoot) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
   let onDisk;
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf-8"));
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
       return null;
     onDisk = parsed;
@@ -3887,7 +3978,7 @@ function plannedRemoteRepair(targetRepoRoot) {
   });
 }
 function replaceProjectIdentityFile(targetRepoRoot, text) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
   const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
   try {
     writeFileSync2(temporary, text, { encoding: "utf-8", flag: "wx" });
@@ -3898,8 +3989,8 @@ function replaceProjectIdentityFile(targetRepoRoot, text) {
   }
 }
 function planProjectIdentity(targetRepoRoot) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
-  if (!existsSync(path)) {
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
+  if (!existsSync2(path)) {
     return { action: "add", after: serializeProjectIdentity(mintIdentity(targetRepoRoot)) };
   }
   const repaired = plannedRemoteRepair(targetRepoRoot);
@@ -3907,7 +3998,7 @@ function planProjectIdentity(targetRepoRoot) {
     return { action: "change", after: repaired };
   let current;
   try {
-    current = readFileSync2(path, "utf-8");
+    current = readFileSync3(path, "utf-8");
   } catch {
     current = null;
   }
@@ -3917,8 +4008,8 @@ function serializeProjectIdentity(identity) {
   return JSON.stringify(identity, null, 2) + "\n";
 }
 function createProjectIdentityFile(targetRepoRoot, text) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
-  mkdirSync2(dirname2(path), { recursive: true });
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
+  mkdirSync2(dirname3(path), { recursive: true });
   const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
   try {
     writeFileSync2(temporary, text ?? serializeProjectIdentity(mintIdentity(targetRepoRoot)), {
@@ -3937,8 +4028,8 @@ function createProjectIdentityFile(targetRepoRoot, text) {
 }
 
 // dist/install-plan.js
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
-import { join as join5, posix } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "node:fs";
+import { join as join6, posix } from "node:path";
 
 // dist/install-manifest.js
 import { Buffer as Buffer2 } from "node:buffer";
@@ -4076,11 +4167,15 @@ function parseManifest(text) {
     "hooksCreated",
     "permissionsCreated",
     "denyCreated",
-    "statusLineSha256"
+    "statusLineSha256",
+    "attributionSha256"
   ], '"settings"');
   if (s["statusLineSha256"] !== void 0 && (typeof s["statusLineSha256"] !== "string" || !HEX64.test(s["statusLineSha256"]))) {
     throw new UnreadableManifestError('"settings.statusLineSha256" is not a hash');
   }
+  if (s["attributionSha256"] !== void 0 && (typeof s["attributionSha256"] !== "string" || !HEX64.test(s["attributionSha256"]))) {
+    throw new UnreadableManifestError('"settings.attributionSha256" is not a hash');
+  }
   const settings = {
     created: bool(s["created"], "settings.created"),
     adopted: bool(s["adopted"], "settings.adopted"),
@@ -4091,7 +4186,8 @@ function parseManifest(text) {
     hooksCreated: bool(s["hooksCreated"], "settings.hooksCreated"),
     permissionsCreated: bool(s["permissionsCreated"], "settings.permissionsCreated"),
     denyCreated: bool(s["denyCreated"], "settings.denyCreated"),
-    ...typeof s["statusLineSha256"] === "string" ? { statusLineSha256: s["statusLineSha256"] } : {}
+    ...typeof s["statusLineSha256"] === "string" ? { statusLineSha256: s["statusLineSha256"] } : {},
+    ...typeof s["attributionSha256"] === "string" ? { attributionSha256: s["attributionSha256"] } : {}
   };
   let mcp;
   if (raw["mcp"] !== void 0) {
@@ -4198,6 +4294,7 @@ function recordSettings(draft, observed) {
     return;
   }
   const statusLineSha256 = observed.statusLineSha256 ?? prev.statusLineSha256;
+  const attributionSha256 = observed.attributionSha256 ?? prev.attributionSha256;
   draft.settings = {
     created: prev.created,
     adopted: prev.adopted,
@@ -4208,7 +4305,8 @@ function recordSettings(draft, observed) {
     hooksCreated: prev.hooksCreated,
     permissionsCreated: prev.permissionsCreated,
     denyCreated: prev.denyCreated,
-    ...statusLineSha256 !== void 0 ? { statusLineSha256 } : {}
+    ...statusLineSha256 !== void 0 ? { statusLineSha256 } : {},
+    ...attributionSha256 !== void 0 ? { attributionSha256 } : {}
   };
 }
 function recordDenyRetired(draft, hashes) {
@@ -4289,8 +4387,8 @@ function union(a, b) {
 }
 
 // dist/scan.js
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join4 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "node:fs";
+import { join as join5 } from "node:path";
 var HALFCYCLE_STATE_FORMAT = "halfcycle-state-file/v1";
 var HALFCYCLE_STATE_NOTE = [
   "This file is a local cache written ONCE when Halfcycle was installed. It is not a",
@@ -4313,7 +4411,7 @@ var LAYER_ARTEFACT_PATHS = {
 function scanLayers(targetRepo, scannedAt = (/* @__PURE__ */ new Date()).toISOString()) {
   const layers = {};
   for (const [layer, paths] of Object.entries(LAYER_ARTEFACT_PATHS)) {
-    const found = paths.filter((p) => existsSync2(join4(targetRepo, p)));
+    const found = paths.filter((p) => existsSync3(join5(targetRepo, p)));
     if (found.length > 0) {
       layers[layer] = {
         value: "asserted",
@@ -4333,17 +4431,17 @@ function runBootstrapScan(targetRepo) {
   return { state: planned.state, ran: planned.text !== null };
 }
 function planBootstrapScan(targetRepo) {
-  const statePath = join4(targetRepo, BOOTSTRAP_STATE_REL);
-  if (existsSync2(statePath)) {
-    const existing = JSON.parse(readFileSync3(statePath, "utf-8"));
+  const statePath = join5(targetRepo, BOOTSTRAP_STATE_REL);
+  if (existsSync3(statePath)) {
+    const existing = JSON.parse(readFileSync4(statePath, "utf-8"));
     return { state: existing, text: null };
   }
   const state = scanLayers(targetRepo);
   return { state, text: JSON.stringify(state, null, 2) + "\n" };
 }
 function writeBootstrapState(targetRepo, text) {
-  mkdirSync3(join4(targetRepo, ".halfcycle"), { recursive: true });
-  writeFileSync3(join4(targetRepo, BOOTSTRAP_STATE_REL), text, "utf-8");
+  mkdirSync3(join5(targetRepo, ".halfcycle"), { recursive: true });
+  writeFileSync3(join5(targetRepo, BOOTSTRAP_STATE_REL), text, "utf-8");
 }
 function mergeWithRecords(state, layersWithRealRecords) {
   const merged = {};
@@ -4500,7 +4598,7 @@ function kindOf(rel) {
 }
 var STEPS = /* @__PURE__ */ new WeakMap();
 function planInstall(options) {
-  const { targetRepo, engagementId, engagementType, credential, home, env, createdByAccountId } = options;
+  const { targetRepo, engagementId, engagementType, credential, home, env, createdByAccountId, serviceUrl } = options;
   const preview = engagementId === void 0;
   if (!preview) {
     assertEngagementId(engagementId);
@@ -4508,12 +4606,12 @@ function planInstall(options) {
       throw new Error("[halfcycle] a plan for a project needs its kind as well as its id.");
     }
   }
-  if (!existsSync3(targetRepo)) {
+  if (!existsSync4(targetRepo)) {
     throw new Error(`[halfcycle] Target repo does not exist: ${targetRepo}`);
   }
   const writeSet = closedWriteSet();
   const previous = readPreviousManifest(targetRepo);
-  const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync3(join5(targetRepo, dir))));
+  const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync4(join6(targetRepo, dir))));
   const { version, commands } = planCommandStubs(targetRepo, previous, writeSet);
   const codexSkills = planCodexSkills(targetRepo, previous, writeSet);
   const vendored = planVendoredBinary(targetRepo);
@@ -4535,12 +4633,12 @@ function planInstall(options) {
   const gitattributes = planGitattributes(targetRepo);
   const identity = planProjectIdentity(targetRepo);
   if (identity.after === null)
-    readFileSync4(join5(targetRepo, PROJECT_IDENTITY_REL));
+    readFileSync5(join6(targetRepo, PROJECT_IDENTITY_REL));
   const credentialPlan = !preview && credential !== void 0 ? planEngagementCredential(credential, engagementId, home) : null;
   const credentialWrite = credentialPlan === null ? null : { outcome: credentialPlan.outcome, existed: credentialPlan.existed, path: engagementEnvPath(engagementId, home) };
   const storedAfter = credentialPlan?.storedAfter ?? (preview ? Object.fromEntries(ENGAGEMENT_ENV_KEYS.map((key) => [key, "supplied at sign-in"])) : readEngagementEnv(engagementId, home) ?? {});
   const legacy = migrateLegacyEnvLocal(targetRepo, storedAfter);
-  const pin = preview ? planBundlePinPreview(targetRepo, version, home) : planBundlePin(targetRepo, version, engagementId, engagementType, createdByAccountId, credential?.methodVersion);
+  const pin = preview ? planBundlePinPreview(targetRepo, version, home) : planBundlePin(targetRepo, version, engagementId, engagementType, createdByAccountId, credential?.methodVersion, credential?.serviceUrl ?? serviceUrl);
   const crew = planCrewRoster(targetRepo);
   const crewProfiles = planCrewProfiles(targetRepo, previous, writeSet);
   const scan = { text: planBootstrapScan(targetRepo).text };
@@ -4668,7 +4766,7 @@ function entriesOf(steps, record2) {
     }
   };
   const pending = (rel) => {
-    const there = existsSync3(join5(targetRepo, rel));
+    const there = existsSync4(join6(targetRepo, rel));
     entries.push({ path: rel, action: there ? "change" : "add", kind: kindOf(rel), bytes: PENDING });
   };
   steps.commands.forEach(fromFile);
@@ -4716,7 +4814,7 @@ function entriesOf(steps, record2) {
         action: "leave",
         kind: "codex-server",
         bytes: null,
-        ...existsSync3(join5(targetRepo, CODEX_CONFIG_REL2)) ? { yours: true } : {}
+        ...existsSync4(join6(targetRepo, CODEX_CONFIG_REL2)) ? { yours: true } : {}
       });
       break;
   }
@@ -4795,10 +4893,10 @@ function applyInstallPlan(plan) {
   putPlannedCodexHooks(targetRepo, steps.codexHooks);
   putPlannedCodexConfig(targetRepo, steps.codexConfig);
   const gitignore = putPlannedGitignore(targetRepo, steps.gitignore);
-  const gitignorePath = join5(targetRepo, GITIGNORE_REL);
-  const gitignoreAfter = existsSync3(gitignorePath) ? readFileSync4(gitignorePath, "utf-8") : null;
+  const gitignorePath = join6(targetRepo, GITIGNORE_REL);
+  const gitignoreAfter = existsSync4(gitignorePath) ? readFileSync5(gitignorePath, "utf-8") : null;
   const gitattributes = putPlannedGitattributes(targetRepo, steps.gitattributes);
-  const gitattributesAfter = readTextOrNull(join5(targetRepo, GITATTRIBUTES_REL));
+  const gitattributesAfter = readTextOrNull(join6(targetRepo, GITATTRIBUTES_REL));
   writeProjectIdentity(targetRepo, steps.identity);
   const credential = steps.credential;
   const credentialOutcome = steps.credentialWrite !== null && credential !== void 0 ? writeEngagementCredential(credential, engagementId, steps.home) : null;
@@ -4819,9 +4917,9 @@ function applyInstallPlan(plan) {
     gitattributesAfter,
     credential: credentialOutcome,
     legacy,
-    bytesAfter: (rel) => readFileSync4(join5(targetRepo, rel)),
-    dirExistsAfter: (dir) => existsSync3(join5(targetRepo, dir)),
-    stateExistsAfter: existsSync3(join5(targetRepo, BOOTSTRAP_STATE_REL))
+    bytesAfter: (rel) => readFileSync5(join6(targetRepo, rel)),
+    dirExistsAfter: (dir) => existsSync4(join6(targetRepo, dir)),
+    stateExistsAfter: existsSync4(join6(targetRepo, BOOTSTRAP_STATE_REL))
   });
   const record2 = planInstallRecord(targetRepo, manifestText);
   putPlannedFile(targetRepo, record2);
@@ -4876,7 +4974,7 @@ function withoutHalfcycleCommands(entry, halfcycleCommands) {
   const remaining = entry.hooks.filter((h) => !isHalfcycleCommand(h, halfcycleCommands));
   return remaining.length > 0 ? { ...entry, hooks: remaining } : null;
 }
-function mergeSettings(existing, generated, retiredOurs, statusLine) {
+function mergeSettings(existing, generated, retiredOurs, statusLine, attribution) {
   const merged = { ...existing };
   if (generated.$schema !== void 0) {
     merged.$schema = generated.$schema;
@@ -4902,6 +5000,9 @@ function mergeSettings(existing, generated, retiredOurs, statusLine) {
   if (statusLine !== void 0 && !("statusLine" in existing)) {
     merged.statusLine = { ...statusLine };
   }
+  if (attribution !== void 0 && !("attribution" in existing) && !("includeCoAuthoredBy" in existing)) {
+    merged.attribution = { ...attribution };
+  }
   return merged;
 }
 function isPlainRecord(value) {
@@ -5172,8 +5273,8 @@ function crewProfileRel(agent, callsign) {
 }
 function crewProfileTarget(targetRepo, rel) {
   const folder = rel.startsWith(`${CLAUDE_AGENTS_DIR}/`) ? CLAUDE_AGENTS_DIR : CODEX_AGENTS_DIR;
-  const target = resolve(join6(targetRepo, rel));
-  if (dirname3(target) !== resolve(targetRepo, folder)) {
+  const target = resolve(join7(targetRepo, rel));
+  if (dirname4(target) !== resolve(targetRepo, folder)) {
     throw new Error(`[halfcycle] crew profile "${rel}" does not sit directly in ${folder}.`);
   }
   return target;
@@ -5256,41 +5357,25 @@ function renderCrewProfiles(roster = CREW_ROSTER) {
     ])
   ];
 }
-var __filename = fileURLToPath(import.meta.url);
-var __dirname = dirname3(__filename);
-function findBundleRoot(startDir) {
-  let candidate = startDir;
-  for (let i = 0; i < 4; i++) {
-    const manifest = join6(candidate, ".claude-plugin", "plugin.json");
-    try {
-      if (existsSync4(manifest))
-        return candidate;
-    } catch {
-    }
-    candidate = dirname3(candidate);
-  }
-  return join6(startDir, "..");
-}
-var BUNDLE_ROOT = findBundleRoot(__dirname);
 function resolveVendoredBinary() {
   const candidates = [
-    join6(BUNDLE_ROOT, "bin", "bin.bundle.mjs"),
-    join6(BUNDLE_ROOT, "..", "runner", "dist", "bin.bundle.mjs")
+    join7(BUNDLE_ROOT, "bin", "bin.bundle.mjs"),
+    join7(BUNDLE_ROOT, "..", "runner", "dist", "bin.bundle.mjs")
   ];
   for (const candidate of candidates) {
-    if (existsSync4(candidate))
+    if (existsSync5(candidate))
       return candidate;
   }
   throw new Error(`[halfcycle] Cannot find the self-contained guard binary bin.bundle.mjs. This copy of the halfcycle package is incomplete \u2014 reinstall it, or rebuild it if you are working on it. Looked in: ${candidates.join(", ")}.`);
 }
 function resolvePreFilterShell() {
   const candidates = [
-    join6(BUNDLE_ROOT, "bin", PRE_FILTER_SHELL_FILENAME),
-    join6(BUNDLE_ROOT, "..", "runner", "dist", PRE_FILTER_SHELL_FILENAME)
+    join7(BUNDLE_ROOT, "bin", PRE_FILTER_SHELL_FILENAME),
+    join7(BUNDLE_ROOT, "..", "runner", "dist", PRE_FILTER_SHELL_FILENAME)
   ];
   for (const candidate of candidates) {
-    if (existsSync4(candidate))
-      return readFileSync5(candidate, "utf-8");
+    if (existsSync5(candidate))
+      return readFileSync6(candidate, "utf-8");
   }
   throw new Error(`[halfcycle] Cannot find ${PRE_FILTER_SHELL_FILENAME}. This copy of the halfcycle package is incomplete \u2014 reinstall it, or rebuild it if you are working on it. Looked in: ${candidates.join(", ")}.`);
 }
@@ -5329,7 +5414,7 @@ function isAllowlisted(targetRelPath) {
 var CREW_ROSTER_REL = ".halfcycle/crew.json";
 var CAPTURED_INDEX_REL = "test/fixtures/captured/manifest.json";
 function capturedIndexScaffold() {
-  return join6(BUNDLE_ROOT, "scaffolding", "test", "fixtures", "captured", "manifest.json");
+  return join7(BUNDLE_ROOT, "scaffolding", "test", "fixtures", "captured", "manifest.json");
 }
 var GITIGNORE_REL = ".gitignore";
 var GITATTRIBUTES_REL = ".gitattributes";
@@ -5398,20 +5483,22 @@ function closedWriteSet() {
       ...lfRules([...Object.keys(OWNED_GENERATED_HEADERS), ...RETIRED_WRITE_SET_FILES])
     ]),
     generatedSha256: sha256OfWhatThisVersionWrites(commands),
-    statusLineSha256: /* @__PURE__ */ new Set([canonicalSha256(HALFCYCLE_STATUS_LINE)])
+    statusLineSha256: /* @__PURE__ */ new Set([canonicalSha256(HALFCYCLE_STATUS_LINE)]),
+    attributionSha256: /* @__PURE__ */ new Set([canonicalSha256(HALFCYCLE_ATTRIBUTION)])
   };
 }
 function sha256OfWhatThisVersionWrites(commands) {
   const out = /* @__PURE__ */ new Map();
   const fromFile = (rel, src) => {
-    if (existsSync4(src))
-      out.set(rel, fileSha256(readFileSync5(src)));
+    if (existsSync5(src))
+      out.set(rel, fileSha256(readFileSync6(src)));
   };
   for (const cmd of commands) {
-    const srcFile = join6(BUNDLE_ROOT, ".claude-plugin", cmd.path);
-    fromFile(commandStubRel(cmd.name), srcFile);
-    if (existsSync4(srcFile)) {
-      out.set(skillRel(cmd.name), fileSha256(Buffer.from(codexSkillContent(cmd.name, readFileSync5(srcFile, "utf-8")), "utf-8")));
+    const srcFile = join7(BUNDLE_ROOT, ".claude-plugin", cmd.path);
+    if (existsSync5(srcFile)) {
+      const text = commandFileText(readFileSync6(srcFile, "utf-8"), ownVersion());
+      out.set(commandStubRel(cmd.name), fileSha256(Buffer.from(text, "utf-8")));
+      out.set(skillRel(cmd.name), fileSha256(Buffer.from(codexSkillContent(cmd.name, text), "utf-8")));
     }
   }
   for (const [rel, content] of hookScriptsThisVersionWrites())
@@ -5428,7 +5515,7 @@ function bytesAreOurs(path, bytes, recorded, writeSet) {
 }
 function readPreviousManifest(targetRepo) {
   try {
-    return parseManifest(readFileSync5(join6(targetRepo, INSTALL_MANIFEST_REL), "utf-8"));
+    return parseManifest(readFileSync6(join7(targetRepo, INSTALL_MANIFEST_REL), "utf-8"));
   } catch {
     return null;
   }
@@ -5458,7 +5545,8 @@ function recordSettingsMerge(draft, existing, generated, preexisted, merged) {
     hooksCreated: existing.hooks === void 0,
     permissionsCreated: existing.permissions === void 0,
     denyCreated: existing.permissions?.deny === void 0,
-    ...ourStatusLineSha256(merged) !== void 0 ? { statusLineSha256: ourStatusLineSha256(merged) } : {}
+    ...ourStatusLineSha256(merged) !== void 0 ? { statusLineSha256: ourStatusLineSha256(merged) } : {},
+    ...attributionWrittenThisRun(existing, merged) ? { attributionSha256: canonicalSha256(HALFCYCLE_ATTRIBUTION) } : {}
   });
 }
 function ourStatusLineSha256(settings) {
@@ -5467,6 +5555,11 @@ function ourStatusLineSha256(settings) {
   const hash = canonicalSha256(settings["statusLine"]);
   return hash === canonicalSha256(HALFCYCLE_STATUS_LINE) ? hash : void 0;
 }
+function attributionWrittenThisRun(existing, merged) {
+  if ("attribution" in existing || "includeCoAuthoredBy" in existing)
+    return false;
+  return "attribution" in merged && canonicalSha256(merged["attribution"]) === canonicalSha256(HALFCYCLE_ATTRIBUTION);
+}
 function recordMcpMerge(draft, existingText, writtenText) {
   const before = existingText === null ? void 0 : JSON.parse(existingText);
   const servers = isPlainObject(before) ? before["mcpServers"] : void 0;
@@ -5532,8 +5625,8 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
     for (let dir = posix2.dirname(rel); dir !== "."; dir = posix2.dirname(dir)) {
       let plain = dirVerdicts.get(dir);
       if (plain === void 0) {
-        const abs = join6(targetRepo, dir);
-        plain = !lstatOrNull(abs)?.isSymbolicLink() && lstatOrNull(join6(abs, ".git")) === null;
+        const abs = join7(targetRepo, dir);
+        plain = !lstatOrNull(abs)?.isSymbolicLink() && lstatOrNull(join7(abs, ".git")) === null;
         dirVerdicts.set(dir, plain);
       }
       if (!plain)
@@ -5547,7 +5640,7 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
       ...merged,
       INSTALL_MANIFEST_REL
     ])
-  ].filter((rel) => !collided.has(rel)).filter((rel) => lstatOrNull(join6(targetRepo, rel)) !== null).filter(travelsThroughPlainDirs).sort();
+  ].filter((rel) => !collided.has(rel)).filter((rel) => lstatOrNull(join7(targetRepo, rel)) !== null).filter(travelsThroughPlainDirs).sort();
   const ignored = readIgnoredPaths(targetRepo, paths);
   if (ignored === null)
     return null;
@@ -5570,7 +5663,7 @@ function lstatOrNull(path) {
 }
 function readFileOrNull(path) {
   try {
-    return readFileSync5(path, "utf-8");
+    return readFileSync6(path, "utf-8");
   } catch {
     return null;
   }
@@ -5579,8 +5672,8 @@ function isPlainObject(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function readPluginManifest() {
-  const manifestPath = join6(BUNDLE_ROOT, ".claude-plugin", "plugin.json");
-  const raw = readFileSync5(manifestPath, "utf-8");
+  const manifestPath = join7(BUNDLE_ROOT, ".claude-plugin", "plugin.json");
+  const raw = readFileSync6(manifestPath, "utf-8");
   return JSON.parse(raw);
 }
 function parseCommandStub(raw, name) {
@@ -5623,6 +5716,9 @@ function codexSkillBody(name, sourceBody) {
   }
   return transformed;
 }
+function commandFileText(source, version) {
+  return rewriteHalfcycleCommands(source, releaseTagOfVersion(version));
+}
 function codexSkillContent(name, sourceRaw) {
   const { description, body } = parseCommandStub(sourceRaw, name);
   const transformed = codexSkillBody(name, body);
@@ -5635,14 +5731,14 @@ ${transformed}`;
 function planManifestCommands(manifest, targetRepo, previous, writeSet) {
   const recordedFiles = new Map((previous?.files ?? []).filter((file) => writeSet.files.has(file.path)).map((file) => [file.path, file]));
   return (manifest.commands ?? []).map((cmd) => {
-    const srcFile = join6(BUNDLE_ROOT, ".claude-plugin", cmd.path);
-    if (!existsSync4(srcFile)) {
+    const srcFile = join7(BUNDLE_ROOT, ".claude-plugin", cmd.path);
+    if (!existsSync5(srcFile)) {
       throw new Error(`[halfcycle] plugin.json declares command "${cmd.name}" at "${cmd.path}", but no file exists there (${srcFile}). The manifest and commands/ must agree.`);
     }
     const rel = commandStubRel(cmd.name);
-    const content = readFileSync5(srcFile, "utf-8");
+    const content = commandFileText(readFileSync6(srcFile, "utf-8"), ownVersion());
     const recorded = recordedFiles.get(rel);
-    const planned = decideCollisionSafe(join6(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
+    const planned = decideCollisionSafe(join7(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
     return { ...planned, editedCollided: planned.outcome === "collided" && recorded !== void 0 };
   });
 }
@@ -5652,8 +5748,8 @@ function putPlannedFile(targetRepoRoot, planned) {
   if (!isAllowlisted(planned.rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${planned.rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  const target = join6(targetRepoRoot, planned.rel);
-  mkdirSync4(dirname3(target), { recursive: true });
+  const target = join7(targetRepoRoot, planned.rel);
+  mkdirSync4(dirname4(target), { recursive: true });
   writeFileSync4(target, planned.text, "utf-8");
 }
 function writeAllowlisted(targetAbsPath, targetRepoRoot, content, writtenPaths) {
@@ -5663,7 +5759,7 @@ function writeAllowlisted(targetAbsPath, targetRepoRoot, content, writtenPaths)
   }
   if (readFileOrNull(targetAbsPath) === content)
     return;
-  mkdirSync4(dirname3(targetAbsPath), { recursive: true });
+  mkdirSync4(dirname4(targetAbsPath), { recursive: true });
   writeFileSync4(targetAbsPath, content, "utf-8");
   writtenPaths.push(rel);
 }
@@ -5672,7 +5768,7 @@ function decideCollisionSafe(targetAbsPath, targetRepoRoot, content, isOurs) {
   if (!isAllowlisted(rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  const current = existsSync4(targetAbsPath) ? readFileSync5(targetAbsPath) : null;
+  const current = existsSync5(targetAbsPath) ? readFileSync6(targetAbsPath) : null;
   const text = inLineEndingOf(current?.toString("utf-8") ?? null, content);
   if (current === null)
     return { rel, text, outcome: "written", replacedExisting: false };
@@ -5695,7 +5791,7 @@ function decideOwned(targetAbsPath, targetRepoRoot, content) {
   const text = inLineEndingOf(current, content);
   if (current === text)
     return { rel, text, outcome: "skipped", replacedExisting: false };
-  return { rel, text, outcome: "written", replacedExisting: existsSync4(targetAbsPath) };
+  return { rel, text, outcome: "written", replacedExisting: existsSync5(targetAbsPath) };
 }
 var GENERATED_HEADER_LINE_INDEX = 1;
 function decideOwnedGenerated(targetAbsPath, targetRepoRoot, content, generatedMarker) {
@@ -5703,9 +5799,9 @@ function decideOwnedGenerated(targetAbsPath, targetRepoRoot, content, generatedM
   if (!isAllowlisted(rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  if (!existsSync4(targetAbsPath))
+  if (!existsSync5(targetAbsPath))
     return { rel, text: content, outcome: "written", replacedExisting: false };
-  const current = readFileSync5(targetAbsPath, "utf-8");
+  const current = readFileSync6(targetAbsPath, "utf-8");
   if (current === content)
     return { rel, text: content, outcome: "skipped", replacedExisting: false };
   const headerLine = current.split("\n")[GENERATED_HEADER_LINE_INDEX] ?? "";
@@ -5735,8 +5831,8 @@ var DENY_PATTERNS = [
 ];
 var USER_PROMPT_REMINDER_SENTENCE = "Where this project stands, and what order to work in, is recorded in the Halfcycle service and nowhere in this repository \u2014 call halfcycle_resolve before you answer or plan, because the files here will look complete and current and still be wrong about position.";
 function readExistingSettings(targetRepo) {
-  const settingsPath = join6(targetRepo, SETTINGS_REL);
-  return existsSync4(settingsPath) ? JSON.parse(readFileSync5(settingsPath, "utf-8")) : void 0;
+  const settingsPath = join7(targetRepo, SETTINGS_REL);
+  return existsSync5(settingsPath) ? JSON.parse(readFileSync6(settingsPath, "utf-8")) : void 0;
 }
 var SettingsParseRefused = class extends Error {
   constructor(message) {
@@ -5745,33 +5841,37 @@ var SettingsParseRefused = class extends Error {
   }
 };
 function settingsParseRefusal(targetRepo, err) {
-  const file = join6(targetRepo, SETTINGS_REL);
+  const file = join7(targetRepo, SETTINGS_REL);
   const offset = /position (\d+)/.exec(err instanceof Error ? err.message : "")?.[1];
   let where = "";
   if (offset !== void 0) {
-    const before = readFileSync5(file, "utf-8").slice(0, Number(offset)).split("\n");
+    const before = readFileSync6(file, "utf-8").slice(0, Number(offset)).split("\n");
     where = ` (line ${before.length}, column ${before[before.length - 1].length + 1})`;
   }
-  return `${file} could not be read as JSON${where} \u2014 fix it and run "npx halfcycle" again.`;
+  return `${file} could not be read as JSON${where} \u2014 fix it and run "${ownBareCommand()}" again.`;
 }
 var SETTINGS_SCHEMA = "https://json.schemastore.org/claude-code-settings.json";
 var HALFCYCLE_STATUS_LINE = Object.freeze({
   type: "command",
   command: 'bash "$CLAUDE_PROJECT_DIR"/.claude/hooks/guard-runner.sh statusline'
 });
+var HALFCYCLE_ATTRIBUTION = Object.freeze({
+  commit: "",
+  pr: ""
+});
 function statusLineSetElsewhere(targetRepo, home = homedir2(), env = process.env) {
-  const places = [join6(targetRepo, ".claude", "settings.local.json"), join6(home, ".claude", "settings.json")];
+  const places = [join7(targetRepo, ".claude", "settings.local.json"), join7(home, ".claude", "settings.json")];
   const configDir = env["CLAUDE_CONFIG_DIR"];
   if (configDir !== void 0 && configDir !== "") {
-    const expanded = configDir === "~" ? home : configDir.startsWith("~/") ? join6(home, configDir.slice(2)) : configDir;
-    places.push(join6(isAbsolute2(expanded) ? expanded : resolve(expanded), "settings.json"));
+    const expanded = configDir === "~" ? home : configDir.startsWith("~/") ? join7(home, configDir.slice(2)) : configDir;
+    places.push(join7(isAbsolute2(expanded) ? expanded : resolve(expanded), "settings.json"));
   }
   return places.some((path) => {
-    if (!existsSync4(path))
+    if (!existsSync5(path))
       return false;
     let value;
     try {
-      value = JSON.parse(readFileSync5(path, "utf-8"));
+      value = JSON.parse(readFileSync6(path, "utf-8"));
     } catch {
       return true;
     }
@@ -6114,8 +6214,10 @@ ${GENERATED_USER_PROMPT_SCOPE_HEADER} the Halfcycle installer, now also for the
 # "autonomy on" or "autonomy off". Also lets the person who is typing let one
 # step Halfcycle paused run once, by typing "allow", or "allow" and the step's
 # number ("allow 2"), as the whole prompt, and change
-# how a build is paced, by typing "faster", "run 5 agents", "keep 30% free" or
-# "use up to 70%" as the whole prompt, and answer a phase's usage limit by
+# how many agents a build runs, by typing "faster", "run 5 agents", "run 20
+# agents at once", "max pace" or "as many agents as possible", or how much is
+# kept free, by typing "keep 30% free" or "use up to 70%", as the whole prompt,
+# with or without a build running, and answer a phase's usage limit by
 # typing "keep going", "stop", "limit it to 1.5 times" or "limit it to 10% of
 # the week" as the whole prompt.
 #
@@ -6124,7 +6226,7 @@ ${GENERATED_USER_PROMPT_SCOPE_HEADER} the Halfcycle installer, now also for the
 # any whitespace (typed, or escaped in the input), with "approve ", "send back ",
 # "accept ", "question ", "carry ", "drop ", "reject " or "autonomy ", in any case,
 # or is "allow" (alone, or with spaces and a number of up to four digits), one
-# of the five pacing phrases or one of the usage-limit phrases
+# of the pacing phrases or one of the usage-limit phrases
 # and nothing else but whitespace,
 # it exits 0 with no output, and Node never starts. A quote inside any other field arrives
 # escaped, so no other field (the folder the session is in, for one) can read as
@@ -6152,7 +6254,11 @@ IFS= read -r -d '' HC_INPUT || true
 # \\u escape, or as the UTF-8 bytes of a Unicode space. Compared byte for byte.
 HC_LEAD='[[:space:]]|\\\\[nrtf]|\\\\u(000[9a-d]|0020|00a0|1680|200[0-9a]|202[89f]|205f|3000|feff)'
 HC_LEAD="$HC_LEAD|"$'\\xc2\\xa0|\\xe1\\x9a\\x80|\\xe2\\x80[\\x80-\\x8a\\xa8\\xa9\\xaf]|\\xe2\\x81\\x9f|\\xe3\\x80\\x80|\\xef\\xbb\\xbf'
-if ! printf '%s' "$HC_INPUT" | LC_ALL=C grep -Eiq "\\"prompt\\"[[:space:]]*:[[:space:]]*\\"($HC_LEAD)*((approve|send back|accept|question|carry|drop|reject|autonomy|decline) |allow( +[0-9]{1,4})?($HC_LEAD)*\\"|(faster|go faster|run [0-9]{1,3} agents?|keep [0-9]{1,3}% free|use up to [0-9]{1,3}%|keep going|stop|stop here|limit it to [0-9]{1,9}(\\.[0-9]{1,2})? (times|million|billion|million tokens|billion tokens)|limit it to [0-9]{1,3}% of the week)($HC_LEAD)*\\")"; then
+# The pace phrases, matched whole after an optional "please" (the verb's own
+# reading is the same set or narrower): a number of agents, the most, faster, a
+# vague amount it answers with an ask for a number, or a free share.
+HC_PACE='((run|use|start|go)( +with| +at)? +)?(up +to +|the +)?(faster|more +agents|(-?[0-9]+(\\.[0-9]+)?|one|two|three|four|five|six|seven|eight|nine|ten|eleven|twelve|thirteen|fourteen|fifteen|sixteen|seventeen|eighteen|nineteen|twenty) +agents?|(max|maximum|full|top) +(pace|speed)|(max|maximum)( +possible)?( +number +of)? +agents|as +many +agents +as +(possible|you +can)|(lots +of|a +lot +of|loads +of|plenty +of|many|some|several|a +few|a +bunch +of) +agents)( +(at +once|at +a +time|in +parallel|concurrently|simultaneously|together))?|keep +[0-9]{1,3}% +free|use +up +to +[0-9]{1,3}%'
+if ! printf '%s' "$HC_INPUT" | LC_ALL=C grep -Eiq "\\"prompt\\"[[:space:]]*:[[:space:]]*\\"($HC_LEAD)*((approve|send back|accept|question|carry|drop|reject|autonomy|decline) |allow( +[0-9]{1,4})?($HC_LEAD)*\\"|(keep going|stop|stop here|limit it to [0-9]{1,9}(\\.[0-9]{1,2})? (times|million|billion|million tokens|billion tokens)|limit it to [0-9]{1,3}% of the week)($HC_LEAD)*\\"|(please,? +)?($HC_PACE)(,? +please)?[.!]*($HC_LEAD)*\\")"; then
   exit 0
 fi
 
@@ -6238,12 +6344,12 @@ function isTrackedAndClean(targetRepo, relPath) {
   return true;
 }
 function decideRetiredRemoval(targetRepo, rel, headerLineIndex, knownHeaderHashes) {
-  const path = join6(targetRepo, rel);
-  if (!existsSync4(path))
+  const path = join7(targetRepo, rel);
+  if (!existsSync5(path))
     return "absent";
   let raw;
   try {
-    raw = readFileSync5(path, "utf-8");
+    raw = readFileSync6(path, "utf-8");
   } catch {
     return "failed";
   }
@@ -6257,7 +6363,7 @@ function decideRetiredRemoval(targetRepo, rel, headerLineIndex, knownHeaderHashe
 }
 function removePlannedRetiredFile(targetRepo, rel) {
   try {
-    rmSync2(join6(targetRepo, rel));
+    rmSync2(join7(targetRepo, rel));
   } catch {
     return "failed";
   }
@@ -6278,7 +6384,7 @@ var MCP_HEADERS_HELPER_COMMAND = `node -e "${nodeFloorProgram([
   `const u=p.dirname(d);`,
   `if(u===d)break;`,
   `d=u}`,
-  `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run npx halfcycle in the project folder');`,
+  `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run ${ownBareCommand()} in the project folder');`,
   `process.exit(1)`
 ].join(""))}"`;
 var CODEX_ADDRESS_PATTERN = /^https?:\/\/[A-Za-z0-9.-]+(:[0-9]{1,5})?(\/[A-Za-z0-9._-]+)*\/mcp$/;
@@ -6302,7 +6408,7 @@ function codexMcpHeadersHelperCommand(address) {
     `if(u===d)break;`,
     `d=u}`,
     `if(b===''){`,
-    `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run npx halfcycle in the project folder');`,
+    `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run ${ownBareCommand()} in the project folder');`,
     `n()}else{`,
     `const r=c.spawnSync(process.execPath,[b,'mcp-headers','--url','${address}'],{stdio:['ignore','pipe','inherit']});`,
     `if(r.status===0&&r.stdout&&r.stdout.length){o=1;process.stdout.write(r.stdout)}else{n()}}`,
@@ -6628,9 +6734,9 @@ function gitignoreCovers(content) {
   return REQUIRED_GITIGNORE_ENTRIES.every((entry) => lines.has(entry));
 }
 function planGitignore(targetRepo) {
-  const gitignorePath = join6(targetRepo, GITIGNORE_REL);
+  const gitignorePath = join7(targetRepo, GITIGNORE_REL);
   const header = GITIGNORE_HEADER;
-  const before = existsSync4(gitignorePath) ? readFileSync5(gitignorePath, "utf-8") : null;
+  const before = existsSync5(gitignorePath) ? readFileSync6(gitignorePath, "utf-8") : null;
   if (before === null) {
     return { before, after: [header, ...REQUIRED_GITIGNORE_ENTRIES].join("\n") + "\n", outcome: "written" };
   }
@@ -6646,7 +6752,7 @@ function putPlannedGitignore(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.after === null)
     return planned.outcome;
   try {
-    writeFileSync4(join6(targetRepo, GITIGNORE_REL), planned.after, "utf-8");
+    writeFileSync4(join7(targetRepo, GITIGNORE_REL), planned.after, "utf-8");
     return "written";
   } catch {
     return "failed";
@@ -6655,7 +6761,7 @@ function putPlannedGitignore(targetRepo, planned) {
 var GITATTRIBUTES_HEADER = "# Halfcycle \u2014 generated scripts keep LF line endings";
 function readTextOrNull(path) {
   try {
-    return readFileSync5(path, "utf-8");
+    return readFileSync6(path, "utf-8");
   } catch {
     return null;
   }
@@ -6665,12 +6771,12 @@ function lfRules(paths) {
 }
 var REQUIRED_GITATTRIBUTES_RULES = lfRules(Object.keys(OWNED_GENERATED_HEADERS));
 function planGitattributes(targetRepo) {
-  const path = join6(targetRepo, GITATTRIBUTES_REL);
+  const path = join7(targetRepo, GITATTRIBUTES_REL);
   const rules = REQUIRED_GITATTRIBUTES_RULES;
   const before = readTextOrNull(path);
   if (lstatOrNull(path)?.isSymbolicLink() === true)
     return { before, after: before, outcome: "failed" };
-  if (!existsSync4(path)) {
+  if (!existsSync5(path)) {
     return { before, after: [GITATTRIBUTES_HEADER, ...rules].join("\n") + "\n", outcome: "written" };
   }
   if (before === null)
@@ -6688,7 +6794,7 @@ function putPlannedGitattributes(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.after === null)
     return planned.outcome;
   try {
-    writeAllowlisted(join6(targetRepo, GITATTRIBUTES_REL), targetRepo, planned.after, []);
+    writeAllowlisted(join7(targetRepo, GITATTRIBUTES_REL), targetRepo, planned.after, []);
     return "written";
   } catch {
     return "failed";
@@ -6707,12 +6813,12 @@ function previousPinForEngagement(targetRepoRoot, engagementId) {
 function nonEmpty(value) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
-function planBundlePin(targetRepoRoot, version, engagementId, engagementType, createdByAccountId, methodVersion) {
+function planBundlePin(targetRepoRoot, version, engagementId, engagementType, createdByAccountId, methodVersion, serviceUrl) {
   const previous = previousPinForEngagement(targetRepoRoot, engagementId);
   const carried = pinCreatedByAccountId(previous) ?? nonEmpty(createdByAccountId);
   const carriedMethodVersion = nonEmpty(methodVersion) ?? nonEmpty(previous?.methodVersion);
   const installedAt = nonEmpty(previous?.installedAt) ?? (/* @__PURE__ */ new Date()).toISOString();
-  const projectPage = projectPageUrl(engagementId);
+  const projectPage = projectPageUrl(engagementId, serviceUrl);
   const pin = {
     version,
     engagementId,
@@ -6722,7 +6828,7 @@ function planBundlePin(targetRepoRoot, version, engagementId, engagementType, cr
     ...carriedMethodVersion !== void 0 ? { methodVersion: carriedMethodVersion } : {},
     ...projectPage !== void 0 ? { projectPage } : {}
   };
-  const current = readFileOrNull(join6(targetRepoRoot, BUNDLE_PIN_REL));
+  const current = readFileOrNull(join7(targetRepoRoot, BUNDLE_PIN_REL));
   const text = inLineEndingOf(current, JSON.stringify(pin, null, 2) + "\n");
   return {
     rel: BUNDLE_PIN_REL,
@@ -6750,10 +6856,10 @@ function planBundlePinPreview(targetRepoRoot, version, home) {
   if (pinned === null || pinned.engagementId !== existing.engagementId || pinned.credential === void 0) {
     return null;
   }
-  return planBundlePin(targetRepoRoot, version, existing.engagementId, existing.engagementType, void 0, void 0);
+  return planBundlePin(targetRepoRoot, version, existing.engagementId, existing.engagementType, void 0, void 0, pinned.credential.serviceUrl);
 }
 function writeBundlePin(targetRepoRoot, planned, writtenPaths) {
-  const pinPath = join6(targetRepoRoot, BUNDLE_PIN_REL);
+  const pinPath = join7(targetRepoRoot, BUNDLE_PIN_REL);
   writeAllowlisted(pinPath, targetRepoRoot, planned.text, writtenPaths);
 }
 function renderCrewRoster() {
@@ -6768,10 +6874,10 @@ function pinCreatedByAccountId(pin) {
   return nonEmpty(pin?.createdByAccountId) ?? nonEmpty(pin?.accountId);
 }
 function readBundlePin(targetRepoRoot) {
-  const pinPath = join6(targetRepoRoot, BUNDLE_PIN_REL);
-  if (!existsSync4(pinPath))
+  const pinPath = join7(targetRepoRoot, BUNDLE_PIN_REL);
+  if (!existsSync5(pinPath))
     return null;
-  return JSON.parse(readFileSync5(pinPath, "utf-8"));
+  return JSON.parse(readFileSync6(pinPath, "utf-8"));
 }
 function readPinnedEngagement(targetRepoRoot, home) {
   const pin = readBundlePin(targetRepoRoot);
@@ -6794,7 +6900,7 @@ function readPinnedEngagement(targetRepoRoot, home) {
 }
 function readLegacyEnvLocal(targetRepoRoot) {
   try {
-    return parseEnvText(readFileSync5(join6(targetRepoRoot, LEGACY_ENV_LOCAL_REL), "utf-8"));
+    return parseEnvText(readFileSync6(join7(targetRepoRoot, LEGACY_ENV_LOCAL_REL), "utf-8"));
   } catch {
     return null;
   }
@@ -6843,7 +6949,7 @@ function writeEngagementCredential(credential, engagementId, home) {
 function planEngagementCredential(credential, engagementId, home) {
   let existing;
   try {
-    existing = readFileSync5(engagementEnvPath(engagementId, home), "utf-8");
+    existing = readFileSync6(engagementEnvPath(engagementId, home), "utf-8");
   } catch {
     existing = null;
   }
@@ -6886,12 +6992,12 @@ function engagementCredentialValues(credential, engagementId) {
 }
 var LEGACY_ENV_LOCAL_REL = ".env.local";
 function migrateLegacyEnvLocal(targetRepo, stored) {
-  const path = join6(targetRepo, LEGACY_ENV_LOCAL_REL);
-  if (!existsSync4(path))
+  const path = join7(targetRepo, LEGACY_ENV_LOCAL_REL);
+  if (!existsSync5(path))
     return { outcome: "absent", unbacked: [], missingForAdoption: [] };
   let raw;
   try {
-    raw = readFileSync5(path, "utf-8");
+    raw = readFileSync6(path, "utf-8");
   } catch {
     return { outcome: "failed", unbacked: [], missingForAdoption: [] };
   }
@@ -6917,7 +7023,7 @@ function migrateLegacyEnvLocal(targetRepo, stored) {
   return { outcome: "stripped", unbacked: [], missingForAdoption: [], keptText: kept.join("\n") };
 }
 function applyLegacyMigration(targetRepo, decided) {
-  const path = join6(targetRepo, LEGACY_ENV_LOCAL_REL);
+  const path = join7(targetRepo, LEGACY_ENV_LOCAL_REL);
   try {
     if (decided.outcome === "removed") {
       rmSync2(path);
@@ -6943,23 +7049,23 @@ function planCodexSkills(targetRepo, previous, writeSet) {
   const manifest = readPluginManifest();
   const recordedFiles = new Map((previous?.files ?? []).filter((file) => writeSet.files.has(file.path)).map((file) => [file.path, file]));
   return (manifest.commands ?? []).map((cmd) => {
-    const srcFile = join6(BUNDLE_ROOT, ".claude-plugin", cmd.path);
-    if (!existsSync4(srcFile)) {
+    const srcFile = join7(BUNDLE_ROOT, ".claude-plugin", cmd.path);
+    if (!existsSync5(srcFile)) {
       throw new Error(`[halfcycle] plugin.json declares command "${cmd.name}" at "${cmd.path}", but no file exists there (${srcFile}). The manifest and commands/ must agree.`);
     }
     const rel = skillRel(cmd.name);
-    const content = codexSkillContent(cmd.name, readFileSync5(srcFile, "utf-8"));
+    const content = codexSkillContent(cmd.name, commandFileText(readFileSync6(srcFile, "utf-8"), ownVersion()));
     const recorded = recordedFiles.get(rel);
-    const planned = decideCollisionSafe(join6(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
+    const planned = decideCollisionSafe(join7(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
     return { ...planned, editedCollided: planned.outcome === "collided" && recorded !== void 0 };
   });
 }
 function planVendoredBinary(targetRepo) {
-  return decideOwned(join6(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs"), targetRepo, readFileSync5(resolveVendoredBinary(), "utf-8"));
+  return decideOwned(join7(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs"), targetRepo, readFileSync6(resolveVendoredBinary(), "utf-8"));
 }
 function planSettings(targetRepo, previous, home, env) {
-  const settingsPath = join6(targetRepo, SETTINGS_REL);
-  const preexisted = existsSync4(settingsPath);
+  const settingsPath = join7(targetRepo, SETTINGS_REL);
+  const preexisted = existsSync5(settingsPath);
   const generated = JSON.parse(generateSettingsJson());
   let existing;
   try {
@@ -6969,7 +7075,7 @@ function planSettings(targetRepo, previous, home, env) {
   }
   const retiredOurs = retiredRulesThisInstallAdded(previous);
   const statusLine = statusLineSetElsewhere(targetRepo, home, env) ? void 0 : HALFCYCLE_STATUS_LINE;
-  const merged = mergeSettings(existing, generated, retiredOurs, statusLine);
+  const merged = mergeSettings(existing, generated, retiredOurs, statusLine, HALFCYCLE_ATTRIBUTION);
   const current = readFileOrNull(settingsPath);
   const text = inLineEndingOf(current, JSON.stringify(merged, null, 2) + "\n");
   const file = {
@@ -6983,11 +7089,11 @@ function planSettings(targetRepo, previous, home, env) {
   return { file, preexisted, existing, generated, merged, retiredOurs };
 }
 function planHookScripts(targetRepo) {
-  return hookScriptsThisVersionWrites().map(([rel, content]) => decideOwnedGenerated(join6(targetRepo, rel), targetRepo, content, OWNED_GENERATED_HEADERS[rel]));
+  return hookScriptsThisVersionWrites().map(([rel, content]) => decideOwnedGenerated(join7(targetRepo, rel), targetRepo, content, OWNED_GENERATED_HEADERS[rel]));
 }
 function planMcpRegistration(targetRepo, credential) {
-  const mcpPath = join6(targetRepo, MCP_REGISTRATION_REL);
-  const existing = existsSync4(mcpPath) ? readFileSync5(mcpPath, "utf-8") : null;
+  const mcpPath = join7(targetRepo, MCP_REGISTRATION_REL);
+  const existing = existsSync5(mcpPath) ? readFileSync6(mcpPath, "utf-8") : null;
   if (credential === void 0)
     return { kind: "none", existing };
   if (credential === "pending")
@@ -6999,11 +7105,11 @@ function planMcpRegistration(targetRepo, credential) {
 function putPlannedMcp(targetRepo, planned) {
   if (planned.kind !== "write" || planned.outcome === "skipped")
     return;
-  writeAllowlisted(join6(targetRepo, MCP_REGISTRATION_REL), targetRepo, planned.text, []);
+  writeAllowlisted(join7(targetRepo, MCP_REGISTRATION_REL), targetRepo, planned.text, []);
 }
 function fileInFolderPlace(root, rel) {
   for (let dir = posix2.dirname(rel); dir !== "."; dir = posix2.dirname(dir)) {
-    const found = lstatOrNull(join6(root, dir));
+    const found = lstatOrNull(join7(root, dir));
     if (found !== null && !found.isDirectory())
       return true;
   }
@@ -7012,7 +7118,7 @@ function fileInFolderPlace(root, rel) {
 function symlinkOnPath(root, rel) {
   let current = root;
   for (const segment of rel.split("/")) {
-    current = join6(current, segment);
+    current = join7(current, segment);
     try {
       if (lstatSync(current).isSymbolicLink())
         return true;
@@ -7033,14 +7139,14 @@ function planCodexHooks(targetRepo) {
   });
   if (symlinkOnPath(targetRepo, CODEX_HOOKS_REL2))
     return leave("link", null);
-  const folder = lstatOrNull(join6(targetRepo, posix2.dirname(CODEX_HOOKS_REL2)));
+  const folder = lstatOrNull(join7(targetRepo, posix2.dirname(CODEX_HOOKS_REL2)));
   if (folder !== null && !folder.isDirectory())
     return leave("unreadable", null);
-  const path = join6(targetRepo, CODEX_HOOKS_REL2);
+  const path = join7(targetRepo, CODEX_HOOKS_REL2);
   let before = null;
   if (lstatOrNull(path) !== null) {
     try {
-      before = readFileSync5(path, "utf-8");
+      before = readFileSync6(path, "utf-8");
     } catch {
       return leave("unreadable", null);
     }
@@ -7074,13 +7180,13 @@ function planCodexHooks(targetRepo) {
 function putPlannedCodexHooks(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.text === null)
     return;
-  writeAllowlisted(join6(targetRepo, CODEX_HOOKS_REL2), targetRepo, planned.text, []);
+  writeAllowlisted(join7(targetRepo, CODEX_HOOKS_REL2), targetRepo, planned.text, []);
 }
 function readCodexConfig(targetRepo) {
-  const folder = lstatOrNull(join6(targetRepo, posix2.dirname(CODEX_CONFIG_REL2)));
+  const folder = lstatOrNull(join7(targetRepo, posix2.dirname(CODEX_CONFIG_REL2)));
   if (folder !== null && !folder.isDirectory())
     return "unreadable";
-  const path = join6(targetRepo, CODEX_CONFIG_REL2);
+  const path = join7(targetRepo, CODEX_CONFIG_REL2);
   const stat = lstatOrNull(path);
   if (stat === null)
     return { text: null };
@@ -7088,7 +7194,7 @@ function readCodexConfig(targetRepo) {
     return "unreadable";
   let bytes;
   try {
-    bytes = readFileSync5(path);
+    bytes = readFileSync6(path);
   } catch {
     return "unreadable";
   }
@@ -7134,10 +7240,10 @@ function planCodexConfig(targetRepo, credential) {
 function putPlannedCodexConfig(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.text === null)
     return;
-  writeAllowlisted(join6(targetRepo, CODEX_CONFIG_REL2), targetRepo, planned.text, []);
+  writeAllowlisted(join7(targetRepo, CODEX_CONFIG_REL2), targetRepo, planned.text, []);
 }
 function planCrewRoster(targetRepo) {
-  return decideOwned(join6(targetRepo, CREW_ROSTER_REL), targetRepo, renderCrewRoster());
+  return decideOwned(join7(targetRepo, CREW_ROSTER_REL), targetRepo, renderCrewRoster());
 }
 function planCrewProfiles(targetRepo, previous, writeSet) {
   const recordedFiles = new Map((previous?.files ?? []).filter((file) => writeSet.files.has(file.path)).map((file) => [file.path, file]));
@@ -7152,7 +7258,7 @@ function planCrewProfiles(targetRepo, previous, writeSet) {
   });
 }
 function planInstallRecord(targetRepo, text) {
-  return decideOwned(join6(targetRepo, INSTALL_MANIFEST_REL), targetRepo, text);
+  return decideOwned(join7(targetRepo, INSTALL_MANIFEST_REL), targetRepo, text);
 }
 function accountInstall(steps, actual) {
   const { targetRepo, writeSet, pin } = steps;
@@ -7526,8 +7632,8 @@ async function requestEngagementValues(method, url, requestBody, credential, sha
 }
 
 // dist/setup/manifest.js
-import { existsSync as existsSync5, lstatSync as lstatSync2, mkdirSync as mkdirSync5, readFileSync as readFileSync6, statSync, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname4, join as join7, posix as posix3 } from "node:path";
+import { existsSync as existsSync6, lstatSync as lstatSync2, mkdirSync as mkdirSync5, readFileSync as readFileSync7, statSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname5, join as join8, posix as posix3 } from "node:path";
 var DECLARED_ROOT_FILES = ["CLAUDE.md", "AGENTS.md", "ENGAGEMENT.md"];
 var DECLARED_DIR_PREFIX = "docs";
 var RESERVED_METHOD_PATH = "docs/method";
@@ -7612,7 +7718,7 @@ function firstSymlinkOnPath(targetRepo, path) {
   const segments = path.split("/").filter((s) => s.length > 0);
   let walked = targetRepo;
   for (let i = 0; i < segments.length; i++) {
-    walked = join7(walked, segments[i]);
+    walked = join8(walked, segments[i]);
     try {
       if (lstatSync2(walked).isSymbolicLink())
         return segments.slice(0, i + 1).join("/");
@@ -7630,30 +7736,30 @@ function symlinkEntry(path, link, isDirectoryRow) {
   };
 }
 function applyFileRow(targetRepo, path, content) {
-  const abs = join7(targetRepo, path);
+  const abs = join8(targetRepo, path);
   const link = firstSymlinkOnPath(targetRepo, path);
   if (link !== null)
     return symlinkEntry(path, link, false);
-  if (existsSync5(abs)) {
-    const current = readFileSync6(abs, "utf-8");
+  if (existsSync6(abs)) {
+    const current = readFileSync7(abs, "utf-8");
     return current === content ? { path, outcome: "already-present", note: "already present and correct \u2014 nothing written" } : { path, outcome: "left-alone", note: "you already own this file \u2014 left exactly as it was" };
   }
-  mkdirSync5(dirname4(abs), { recursive: true });
+  mkdirSync5(dirname5(abs), { recursive: true });
   writeFileSync5(abs, content, "utf-8");
   return { path, outcome: "created", note: "created" };
 }
 function applySectionRow(targetRepo, path, heading, body) {
-  const abs = join7(targetRepo, path);
+  const abs = join8(targetRepo, path);
   const link = firstSymlinkOnPath(targetRepo, path);
   if (link !== null)
     return symlinkEntry(path, link, false);
   const section = renderSection(heading, body);
-  if (!existsSync5(abs)) {
-    mkdirSync5(dirname4(abs), { recursive: true });
+  if (!existsSync6(abs)) {
+    mkdirSync5(dirname5(abs), { recursive: true });
     writeFileSync5(abs, section, "utf-8");
     return { path, outcome: "created", note: `created, with a "${heading}" section` };
   }
-  const existing = readFileSync6(abs, "utf-8");
+  const existing = readFileSync7(abs, "utf-8");
   if (hasSection(existing, heading)) {
     return {
       path,
@@ -7670,11 +7776,11 @@ function applySectionRow(targetRepo, path, heading, body) {
   };
 }
 function applyDirectoryRow(targetRepo, path) {
-  const abs = join7(targetRepo, path);
+  const abs = join8(targetRepo, path);
   const link = firstSymlinkOnPath(targetRepo, path);
   if (link !== null)
     return symlinkEntry(path, link, true);
-  if (existsSync5(abs)) {
+  if (existsSync6(abs)) {
     const kind = statSync(abs).isDirectory() ? "directory" : "file";
     return kind === "directory" ? { path: `${path}/`, outcome: "already-present", note: "already there \u2014 nothing written" } : { path, outcome: "left-alone", note: "you already own this path \u2014 left exactly as it was" };
   }
@@ -7682,7 +7788,7 @@ function applyDirectoryRow(targetRepo, path) {
   return { path: `${path}/`, outcome: "created", note: "created" };
 }
 function applySetupWrites(targetRepo, rows) {
-  if (!existsSync5(targetRepo)) {
+  if (!existsSync6(targetRepo)) {
     throw new Error(`[halfcycle setup] The project directory does not exist: ${targetRepo}`);
   }
   assertNoConflictingDuplicates(rows);
@@ -7793,8 +7899,8 @@ function trackerHomeRow(home = FLAT_FILE_TRACKER_HOME) {
 }
 
 // dist/setup/discovery.js
-import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync, statSync as statSync2 } from "node:fs";
-import { join as join8 } from "node:path";
+import { existsSync as existsSync7, readFileSync as readFileSync8, readdirSync, statSync as statSync2 } from "node:fs";
+import { join as join9 } from "node:path";
 function renderAnchor(anchor) {
   return anchor.kind === "file" ? `${anchor.path}:${anchor.line}` : `$ ${anchor.command}`;
 }
@@ -7818,8 +7924,8 @@ function lineOf(text, needle) {
   return null;
 }
 function readOrNull(repo, rel) {
-  const abs = join8(repo, rel);
-  return existsSync6(abs) && statSync2(abs).isFile() ? readFileSync7(abs, "utf-8") : null;
+  const abs = join9(repo, rel);
+  return existsSync7(abs) && statSync2(abs).isFile() ? readFileSync8(abs, "utf-8") : null;
 }
 function anchoredIn(repo, rel, needle, value) {
   const text = readOrNull(repo, rel);
@@ -7831,8 +7937,8 @@ function anchoredIn(repo, rel, needle, value) {
   return { value, anchor: { kind: "file", path: rel, line } };
 }
 function presenceAnchor(repo, rel) {
-  const abs = join8(repo, rel);
-  if (!existsSync6(abs))
+  const abs = join9(repo, rel);
+  if (!existsSync7(abs))
     return null;
   return statSync2(abs).isDirectory() ? { kind: "command", command: `ls -d ${rel}`, output: `${rel}/` } : { kind: "file", path: rel, line: 1 };
 }
@@ -7873,8 +7979,8 @@ function firstMatch(items, f) {
 }
 var CONTEXT_INDEX_FILES = ["AGENTS.md", "CLAUDE.md"];
 function ciWorkflows(repo) {
-  const dir = join8(repo, ".github", "workflows");
-  if (!existsSync6(dir) || !statSync2(dir).isDirectory())
+  const dir = join9(repo, ".github", "workflows");
+  if (!existsSync7(dir) || !statSync2(dir).isDirectory())
     return [];
   return readdirSync(dir).filter((f) => f.endsWith(".yml") || f.endsWith(".yaml")).sort();
 }
@@ -7882,21 +7988,21 @@ function existingLayerDocuments(repo) {
   const found = [];
   for (const paths of Object.values(LAYER_ARTEFACT_PATHS)) {
     for (const p of paths ?? []) {
-      if (existsSync6(join8(repo, p)))
+      if (existsSync7(join9(repo, p)))
         found.push(p);
     }
   }
   return found.sort();
 }
 function discoverRepository(targetRepo) {
-  if (!existsSync6(targetRepo)) {
+  if (!existsSync7(targetRepo)) {
     throw new Error(`[halfcycle setup] The project directory does not exist: ${targetRepo}`);
   }
   const findings = [];
   const questions = [];
   settleOrAsk("project-language", firstMatch(MANIFESTS, ([file, needle, language]) => anchoredIn(targetRepo, file, needle, language)), "What is this project written in?", findings, questions);
   settleOrAsk("package-manager", firstMatch(LOCKFILES, ([file, manager]) => anchoredByPresence(targetRepo, file, manager)), "Which package manager does this project use?", findings, questions);
-  settleOrAsk("repo-structure", firstMatch(WORKSPACE_MARKERS, ([file, needle, shape]) => anchoredIn(targetRepo, file, needle, shape)) ?? (existsSync6(join8(targetRepo, "package.json")) || existsSync6(join8(targetRepo, "go.mod")) || existsSync6(join8(targetRepo, "pyproject.toml")) ? anchoredByPresence(targetRepo, "package.json", "a single-package repository") ?? anchoredByPresence(targetRepo, "go.mod", "a single-package repository") ?? anchoredByPresence(targetRepo, "pyproject.toml", "a single-package repository") : null), "Is this one repository for one product, or one of several?", findings, questions);
+  settleOrAsk("repo-structure", firstMatch(WORKSPACE_MARKERS, ([file, needle, shape]) => anchoredIn(targetRepo, file, needle, shape)) ?? (existsSync7(join9(targetRepo, "package.json")) || existsSync7(join9(targetRepo, "go.mod")) || existsSync7(join9(targetRepo, "pyproject.toml")) ? anchoredByPresence(targetRepo, "package.json", "a single-package repository") ?? anchoredByPresence(targetRepo, "go.mod", "a single-package repository") ?? anchoredByPresence(targetRepo, "pyproject.toml", "a single-package repository") : null), "Is this one repository for one product, or one of several?", findings, questions);
   const workflows = ciWorkflows(targetRepo);
   settleOrAsk("ci-strategy", workflows.length > 0 ? {
     value: `GitHub Actions \u2014 ${workflows.length === 1 ? "one workflow" : `${workflows.length} workflows`}: ${workflows.join(", ")}`,
@@ -8566,11 +8672,11 @@ function renderBuildRecordV2Markdown(record2) {
 }
 
 // dist/build-record/write.js
-import { existsSync as existsSync7, mkdirSync as mkdirSync6, rmSync as rmSync4 } from "node:fs";
-import { basename, join as join9, resolve as resolve2, relative as relative2, isAbsolute as isAbsolute3 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync6, rmSync as rmSync4 } from "node:fs";
+import { basename, join as join10, resolve as resolve2, relative as relative2, isAbsolute as isAbsolute3 } from "node:path";
 
 // dist/build-record/pair-io.js
-import { closeSync, openSync, readFileSync as readFileSync8, renameSync as renameSync2, rmSync as rmSync3, writeSync } from "node:fs";
+import { closeSync, openSync, readFileSync as readFileSync9, renameSync as renameSync2, rmSync as rmSync3, writeSync } from "node:fs";
 function createExclusiveOnDisk(path, data) {
   const bytes = typeof data === "string" ? Buffer.from(data, "utf-8") : data;
   const fd = openSync(path, "wx");
@@ -8601,7 +8707,7 @@ function isEexist(err) {
 }
 function readIfPresent(path) {
   try {
-    return readFileSync8(path, "utf-8");
+    return readFileSync9(path, "utf-8");
   } catch {
     return null;
   }
@@ -8633,7 +8739,7 @@ function replaceOne(io, tmp, finalPath, text) {
 }
 
 // dist/build-record/write.js
-var BUILD_RECORD_DIR = join9("docs", "build-records");
+var BUILD_RECORD_DIR = join10("docs", "build-records");
 function assertInsideOutDir(outDir, candidate, identity) {
   const rel = relative2(outDir, resolve2(candidate));
   const isPlainFilename = rel !== "" && rel !== ".." && !isAbsolute3(rel) && rel === basename(rel);
@@ -8671,8 +8777,8 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   }
   const outDir = resolve2(repoRoot, BUILD_RECORD_DIR);
   const segment = renderPhaseSegment(phase);
-  const jsonPath = join9(outDir, `${segment}.json`);
-  const mdPath = join9(outDir, `${segment}.md`);
+  const jsonPath = join10(outDir, `${segment}.json`);
+  const mdPath = join10(outDir, `${segment}.md`);
   const jsonTmp = `${jsonPath}.tmp`;
   const mdTmp = `${mdPath}.tmp`;
   for (const candidate of [jsonPath, mdPath, jsonTmp, mdTmp]) {
@@ -8686,7 +8792,7 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   }
   const existingJson = readIfPresent(jsonPath);
   if (existingJson === null) {
-    return { kind: "in-the-way", path: existsSync7(jsonPath) ? jsonPath : mdPath };
+    return { kind: "in-the-way", path: existsSync8(jsonPath) ? jsonPath : mdPath };
   }
   if (existingJson === jsonText) {
     replaceOne(io, mdTmp, mdPath, mdText);
@@ -8748,20 +8854,20 @@ function isMissingRoute(method, status, body) {
 }
 
 // dist/build-record/write-change.js
-import { basename as basename2, isAbsolute as isAbsolute4, join as join10, relative as relative3, resolve as resolve3 } from "node:path";
-var CHANGE_RECORD_DIR = join10("docs", "build-records", "changes");
+import { basename as basename2, isAbsolute as isAbsolute4, join as join11, relative as relative3, resolve as resolve3 } from "node:path";
+var CHANGE_RECORD_DIR = join11("docs", "build-records", "changes");
 
 // dist/change.js
-var CHANGE_USAGE = `${HALFCYCLE_COMMAND} change sort --request "<one line>" --touches <path>\u2026 [--contract <from>:<to>]\u2026 [--stored-data] [--standing-rule] [--new-part] [--repo <root>]
-  ${HALFCYCLE_COMMAND} change up <mini|full> (--change <id> | --phase <phase>) [--repo <root>]
-  ${HALFCYCLE_COMMAND} change done <id> [--repo <root>]`;
+var CHANGE_USAGE = `${ownCommand()} change sort --request "<one line>" --touches <path>\u2026 [--contract <from>:<to>]\u2026 [--stored-data] [--standing-rule] [--new-part] [--repo <root>]
+  ${ownCommand()} change up <mini|full> (--change <id> | --phase <phase>) [--repo <root>]
+  ${ownCommand()} change done <id> [--repo <root>]`;
 
 // dist/plan.js
-var PLAN_USAGE = `${HALFCYCLE_COMMAND} plan <phase> [--show] [--repo <root>]`;
+var PLAN_USAGE = `${ownCommand()} plan <phase> [--show] [--repo <root>]`;
 
 // dist/review.js
-var REVIEW_USAGE = `${HALFCYCLE_COMMAND} review <phase> (--show | --answer <part> "<answer>") [--repo <root>]`;
-var RV9_LINE = `halfcycle review: this project is not signed in on this computer. ${HOOK_REMEDY}`;
+var REVIEW_USAGE = `${ownCommand()} review <phase> (--show | --answer <part> "<answer>") [--repo <root>]`;
+var RV9_LINE = `halfcycle review: this project is not signed in on this computer. ${hookRemedy(ownVersion())}`;
 
 // dist/open-phase.js
 var OPEN_FROM_SIZE_REFUSALS = Object.freeze({
@@ -8877,16 +8983,16 @@ async function obtainBuildRecord(credential, repoRoot, phase, io = NODE_RECORD_P
   };
 }
 function refetchCommand(phase) {
-  return `${HALFCYCLE_COMMAND} build-record ${quoteForShell(phase)}`;
+  return `${ownCommand()} build-record ${quoteForShell(phase)}`;
 }
 
 // dist/check-tasks.js
-var CHECK_TASKS_USAGE = `${HALFCYCLE_COMMAND} check-tasks <phase> [--with-task-list] [--repo <root>]`;
+var CHECK_TASKS_USAGE = `${ownCommand()} check-tasks <phase> [--with-task-list] [--repo <root>]`;
 var MISSING_PLAN_LINE = `there is no ${TASK_PLAN_FILE} in this project yet. Run the task-graph step to write it, then run this again.`;
 var SPEC_FOLDER = LAYER_ARTEFACT_PATHS.l4[0];
 
 // dist/ready.js
-var READY_USAGE = `${HALFCYCLE_COMMAND} ready <phase> [--cap <n>] [--repo <root>]`;
+var READY_USAGE = `${ownCommand()} ready <phase> [--cap <n>] [--repo <root>]`;
 var STATES_TEXT = buildTaskStateSchema.options.join(", ");
 var READY_LINES = {
   start: (id, title) => `Ready to start: ${named(id, title)}`,