halfcycle 0.12.0 → 0.13.0-rc.1

package/dist/cli.js

@@ -2447,7 +2447,7 @@ if (switchedOn) {
 }
 
 // dist/bin.js
-import { existsSync as existsSync18, statSync as statSync3, writeSync as writeSync4 } from "node:fs";
+import { existsSync as existsSync19, statSync as statSync3, writeSync as writeSync4 } from "node:fs";
 
 // dist/install.js
 import { execFileSync as execFileSync2 } from "node:child_process";
@@ -2895,13 +2895,39 @@ var leftForOwnerSchema = z6.object({
 }).strict().refine((v) => v.tasks.length + v.waiting.length > 0, {
   message: "is sent only when some work was left for the owner"
 });
+var TASKS_FILE_PATH = "docs/tasks.md";
+function isTicket(ref, url) {
+  const issue = /^#([1-9][0-9]{0,9})$/.exec(ref);
+  if (issue === null)
+    return ref === TASKS_FILE_PATH && (url === void 0 || url === null);
+  if (url === void 0 || url === null)
+    return true;
+  const address = /^(.*)\/issues\/([1-9][0-9]{0,9})$/.exec(url);
+  return address !== null && address[2] === issue[1] && GITHUB_REPOSITORY_ADDRESS.test(address[1]) && !looksLikeSecret(url);
+}
+var TICKET_MESSAGE = `must be #<number> or ${TASKS_FILE_PATH}, with a link only beside #<number>: https://github.com/<owner>/<repo>/issues/<number>`;
+var ticketSchema = z6.object({
+  ref: z6.string(),
+  url: z6.string().optional()
+}).strict().refine((t) => isTicket(t.ref, t.url), { message: TICKET_MESSAGE });
+var TICKET_TITLE_MAX = 240;
+var TICKETS_MAX = 500;
+var ticketEntrySchema = z6.object({
+  title: plainText(TICKET_TITLE_MAX),
+  ref: z6.string(),
+  url: z6.string().nullable()
+}).strict().refine((t) => isTicket(t.ref, t.url), { message: TICKET_MESSAGE });
+var ticketsSchema = z6.object({
+  entries: z6.array(ticketEntrySchema).min(1).max(TICKETS_MAX)
+}).strict();
 var observedCloseSchema = z6.object({
   sequence: z6.number().int().min(1),
   closedAt: utcIso8601,
   closedBy: closedBySchema,
   crossed: crossedSchema,
   seatCoverage: seatCoverageSchema.nullable(),
-  leftForOwner: leftForOwnerSchema.optional()
+  leftForOwner: leftForOwnerSchema.optional(),
+  tickets: ticketsSchema.optional()
 }).strict();
 var couldNotRunCheckSchema = z6.object({
   check: plainText(),
@@ -3471,7 +3497,8 @@ var buildTaskSchema = z8.object({
   ships: buildTaskShipsSchema.optional(),
   // The commit or version the task reported when it shipped, exactly as reported, as
   // one word with no spaces. Absent until it has shipped, or when it reported none.
-  shipped: z8.string().min(1).max(BUILD_TASK_SHIPPED_MAX).regex(/^[^\s\x00-\x1f\x7f-\x9f]*$/, { message: "must be one word, with no spaces or control characters" }).optional()
+  shipped: z8.string().min(1).max(BUILD_TASK_SHIPPED_MAX).regex(/^[^\s\x00-\x1f\x7f-\x9f]*$/, { message: "must be one word, with no spaces or control characters" }).optional(),
+  ticket: ticketSchema.optional()
 }).strict().superRefine((task, ctx) => {
   if (task.reviews !== void 0 && task.reviews === task.id) {
     ctx.addIssue({
@@ -7322,6 +7349,8 @@ var ownerWaitAddResultSchema = z37.discriminatedUnion("outcome", [
   z37.object({ outcome: z37.literal("refused"), reason: z37.literal("too-many") }).strict()
 ]);
 var ownerWaitUndoableSchema = z37.enum(["yes", "no"]);
+var OWNER_WAIT_STEP_MAX = 64;
+var ownerWaitStepSchema = z37.string().max(OWNER_WAIT_STEP_MAX).refine((v) => stepIdSchema.safeParse(v).success, { message: "must be the id of a step, as the method names it" });
 var ownerWaitDeclareRequestSchema = z37.object({
   engagementId: z37.string().min(1),
   item: ownerWaitItemRefSchema,
@@ -7330,7 +7359,8 @@ var ownerWaitDeclareRequestSchema = z37.object({
   task: buildTaskIdSchema.optional(),
   by: agentNameSchema.optional(),
   undoable: ownerWaitUndoableSchema.optional(),
-  how: statementText(STATEMENT_MAX).optional()
+  how: statementText(STATEMENT_MAX).optional(),
+  step: ownerWaitStepSchema.optional()
 }).strict().refine((r) => r.undoable === "yes" === (r.how !== void 0), {
   message: "says how to undo it exactly when it can be undone",
   path: ["how"]
@@ -10439,7 +10469,11 @@ HC_LEAD="$HC_LEAD|"$'\\xc2\\xa0|\\xe1\\x9a\\x80|\\xe2\\x80[\\x80-\\x8a\\xa8\\xa9
 # reading is the same set or narrower): a number of agents, the most, faster, a
 # vague amount it answers with an ask for a number, or a free share.
 HC_PACE='((run|use|start|go)( +with| +at)? +)?(up +to +|the +)?(faster|more +agents|(-?[0-9]+(\\.[0-9]+)?|one|two|three|four|five|six|seven|eight|nine|ten|eleven|twelve|thirteen|fourteen|fifteen|sixteen|seventeen|eighteen|nineteen|twenty) +agents?|(max|maximum|full|top) +(pace|speed)|(max|maximum)( +possible)?( +number +of)? +agents|as +many +agents +as +(possible|you +can)|(lots +of|a +lot +of|loads +of|plenty +of|many|some|several|a +few|a +bunch +of) +agents)( +(at +once|at +a +time|in +parallel|concurrently|simultaneously|together))?|keep +[0-9]{1,3}% +free|use +up +to +[0-9]{1,3}%'
-if ! printf '%s' "$HC_INPUT" | LC_ALL=C grep -Eiq "\\"prompt\\"[[:space:]]*:[[:space:]]*\\"($HC_LEAD)*((approve|send back|accept|question|carry|drop|reject|autonomy|decline) |allow( +[0-9]{1,4})?($HC_LEAD)*\\"|(keep going|stop|stop here|limit it to [0-9]{1,9}(\\.[0-9]{1,2})? (times|million|billion|million tokens|billion tokens)|limit it to [0-9]{1,3}% of the week)($HC_LEAD)*\\"|(please,? +)?($HC_PACE)(,? +please)?[.!]*($HC_LEAD)*\\")"; then
+# A pace intent anywhere in a short prompt (a short one-line prompt is read from what the
+# person means; the runner decides the count of words and the line, this only lets a
+# candidate through, so it is the same set or wider).
+HC_INTENT='(max|maximum|full|top|fastest)( +[a-z]+){0,2} +(pace|speed)|as +many +agents +as +possible|faster|speed +up|(increase|raise|up)( +the)? +(pace|speed)|more +agents|slower|slow +down|(decrease|lower|reduce)( +the)? +(pace|speed)|fewer +agents|(-?[0-9]+(\\.[0-9]+)?|one|two|three|four|five|six|seven|eight|nine|ten|eleven|twelve|thirteen|fourteen|fifteen|sixteen|seventeen|eighteen|nineteen|twenty) +agents?'
+if ! printf '%s' "$HC_INPUT" | LC_ALL=C grep -Eiq "\\"prompt\\"[[:space:]]*:[[:space:]]*\\"($HC_LEAD)*((approve|send back|accept|question|carry|drop|reject|autonomy|decline) |allow( +[0-9]{1,4})?\\.?($HC_LEAD)*\\"|[^\\"]{0,200}($HC_INTENT)[^\\"]{0,200}\\"|(keep going|stop|stop here|limit it to [0-9]{1,9}(\\.[0-9]{1,2})? (times|million|billion|million tokens|billion tokens)|limit it to [0-9]{1,3}% of the week)($HC_LEAD)*\\"|(please,? +)?($HC_PACE)(,? +please)?[.!]*($HC_LEAD)*\\")"; then
   exit 0
 fi
 
@@ -11759,6 +11793,209 @@ function installSelfBuild(options) {
   return { writtenPaths: report.writtenPaths, credentialWritten };
 }
 
+// dist/worker-copies.js
+import { spawnSync } from "node:child_process";
+import { existsSync as existsSync7, lstatSync as lstatSync2, readdirSync, realpathSync, rmdirSync, rmSync as rmSync3 } from "node:fs";
+import { isAbsolute as isAbsolute3, join as join9, relative as relative2, resolve as resolve2, sep } from "node:path";
+var WORKER_COPY_CACHE_FOLDERS = ["__pycache__", ".pytest_cache", ".mypy_cache", "node_modules"];
+var COPIES_SHOWN = ".claude/worktrees/";
+var CACHE_NAMES = new Set(WORKER_COPY_CACHE_FOLDERS);
+var NOTHING = { removed: 0, kept: [], message: void 0 };
+var NOT_TIDIED = {
+  removed: 0,
+  kept: [],
+  message: `[halfcycle] The worker copies under ${COPIES_SHOWN} were not tidied, because git did not answer.`
+};
+function tidyWorkerCopies(projectDir) {
+  try {
+    return tidy(projectDir);
+  } catch {
+    return NOT_TIDIED;
+  }
+}
+function tidy(projectDir) {
+  let root;
+  try {
+    root = realpathSync(resolve2(projectDir));
+  } catch {
+    return NOTHING;
+  }
+  if (isInsideCopiesFolder(root))
+    return NOTHING;
+  const top = git2(root, ["rev-parse", "--show-toplevel"]);
+  if (!top.ran)
+    return NOT_TIDIED;
+  if (!top.ok)
+    return NOTHING;
+  const listed = git2(root, ["worktree", "list", "--porcelain"]);
+  if (!listed.ok)
+    return NOT_TIDIED;
+  const worktrees = parseWorktrees(listed.out);
+  const main2 = worktrees[0];
+  if (main2 === void 0)
+    return NOT_TIDIED;
+  const mainPath = canonical(main2.path);
+  if (!samePath(mainPath, canonical(top.out.trim())))
+    return NOTHING;
+  const copiesDir = join9(root, ".claude", "worktrees");
+  let removed = 0;
+  const kept = [];
+  for (const tree of worktrees.slice(1)) {
+    if (tree.bare)
+      continue;
+    const at = canonical(tree.path);
+    if (samePath(at, mainPath) || !isInside(copiesDir, at))
+      continue;
+    if (!existsSync7(at))
+      continue;
+    const shown2 = relative2(root, at).split(sep).join("/");
+    if (tree.locked || holdsWork(at)) {
+      kept.push(shown2);
+      continue;
+    }
+    clearCaches(at, at);
+    if (!git2(root, ["worktree", "remove", at]).ok) {
+      kept.push(shown2);
+      continue;
+    }
+    removed += 1;
+    if (tree.branch !== void 0)
+      git2(root, ["branch", "-d", tree.branch]);
+  }
+  return { removed, kept, message: lineFor(removed, kept) };
+}
+function lineFor(removed, kept) {
+  if (removed === 0 && kept.length === 0)
+    return void 0;
+  const head = `[halfcycle] Removed ${removed} worker ${removed === 1 ? "copy" : "copies"} under ${COPIES_SHOWN}.`;
+  return kept.length === 0 ? head : `${head} Kept ${kept.length} that may hold work: ${kept.join(", ")}.`;
+}
+function git2(cwd, args2) {
+  const r = spawnSync("git", [...args2], {
+    cwd,
+    encoding: "utf-8",
+    stdio: ["ignore", "pipe", "pipe"],
+    windowsHide: true,
+    timeout: 12e4,
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+  });
+  if (r.error !== void 0)
+    return { ran: false, ok: false, out: "" };
+  return { ran: true, ok: r.status === 0, out: r.stdout ?? "" };
+}
+function parseWorktrees(porcelain) {
+  const trees = [];
+  let current;
+  for (const line of porcelain.split(/\r?\n/)) {
+    if (line.startsWith("worktree ")) {
+      current = { path: line.slice("worktree ".length), branch: void 0, locked: false, bare: false };
+      trees.push(current);
+    } else if (current === void 0) {
+      continue;
+    } else if (line.startsWith("branch refs/heads/")) {
+      current.branch = line.slice("branch refs/heads/".length);
+    } else if (line === "locked" || line.startsWith("locked ")) {
+      current.locked = true;
+    } else if (line === "bare") {
+      current.bare = true;
+    }
+  }
+  return trees;
+}
+function holdsWork(copyDir) {
+  const status = git2(copyDir, ["status", "--porcelain", "-z", "--untracked-files=all"]);
+  if (!status.ok)
+    return true;
+  const fields = status.out.split("\0");
+  for (let i = 0; i < fields.length; i += 1) {
+    const field = fields[i];
+    if (field === "")
+      continue;
+    const code = field.slice(0, 2);
+    if (code !== "??")
+      return true;
+    const path = field.slice(3);
+    if (!path.split("/").some((segment) => CACHE_NAMES.has(segment)))
+      return true;
+  }
+  return false;
+}
+function clearCaches(copyDir, dir) {
+  let names;
+  try {
+    names = readdirSync(dir);
+  } catch {
+    return;
+  }
+  for (const name of names) {
+    if (name === ".git")
+      continue;
+    const at = join9(dir, name);
+    let entry;
+    try {
+      entry = lstatSync2(at);
+    } catch {
+      continue;
+    }
+    if (entry.isSymbolicLink()) {
+      if (CACHE_NAMES.has(name) && !holdsTracked(copyDir, at))
+        removeLink(at);
+      continue;
+    }
+    if (!entry.isDirectory())
+      continue;
+    if (CACHE_NAMES.has(name)) {
+      if (holdsTracked(copyDir, at))
+        continue;
+      try {
+        rmSync3(at, { recursive: true, force: true });
+      } catch {
+      }
+      continue;
+    }
+    clearCaches(copyDir, at);
+  }
+}
+function holdsTracked(copyDir, path) {
+  const listed = git2(copyDir, ["ls-files", "-z", "--", relative2(copyDir, path).split(sep).join("/")]);
+  return !listed.ok || listed.out !== "";
+}
+function removeLink(at) {
+  try {
+    rmSync3(at, { force: true });
+  } catch {
+    try {
+      rmdirSync(at);
+    } catch {
+    }
+  }
+}
+function canonical(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return resolve2(path);
+  }
+}
+function fold(path) {
+  return process.platform === "win32" ? path.toLowerCase() : path;
+}
+function samePath(a, b) {
+  return fold(resolve2(a)) === fold(resolve2(b));
+}
+function isInside(parent, child) {
+  const rel = relative2(fold(parent), fold(child));
+  return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute3(rel);
+}
+function isInsideCopiesFolder(path) {
+  const segments = fold(path).split(sep);
+  for (let i = 0; i + 2 < segments.length; i += 1) {
+    if (segments[i] === ".claude" && segments[i + 1] === "worktrees")
+      return true;
+  }
+  return false;
+}
+
 // dist/control-origin.js
 var DEFAULT_CONTROL_ORIGIN = "https://control.halfcycle.ai";
 function resolveControlOrigin(env = process.env) {
@@ -11870,14 +12107,14 @@ async function bindLoopback(env = process.env, engagementId, serviceUrl) {
     else
       pending = callback;
   }, engagementId, serviceUrl));
-  const bindProblem = await new Promise((resolve9) => {
+  const bindProblem = await new Promise((resolve10) => {
     const onError = (err) => {
-      resolve9(`${err.code ?? "bind failed"} on ${LOOPBACK_REDIRECT_HOST}:${wanted.port}`);
+      resolve10(`${err.code ?? "bind failed"} on ${LOOPBACK_REDIRECT_HOST}:${wanted.port}`);
     };
     server.once("error", onError);
     server.listen({ host: LOOPBACK_REDIRECT_HOST, port: wanted.port }, () => {
       server.removeListener("error", onError);
-      resolve9(null);
+      resolve10(null);
     });
   });
   if (bindProblem !== null) {
@@ -11893,9 +12130,9 @@ async function bindLoopback(env = process.env, engagementId, serviceUrl) {
     bound: true,
     target: { port: address.port, state },
     boundAddress: address.address,
-    waitForCallback: ({ timeoutMs, onStillWaiting, stillWaitingMs = DEFAULT_STILL_WAITING_MS }) => new Promise((resolve9) => {
+    waitForCallback: ({ timeoutMs, onStillWaiting, stillWaitingMs = DEFAULT_STILL_WAITING_MS }) => new Promise((resolve10) => {
       if (pending !== null) {
-        resolve9(pending);
+        resolve10(pending);
         return;
       }
       const startedAt = Date.now();
@@ -11906,7 +12143,7 @@ async function bindLoopback(env = process.env, engagementId, serviceUrl) {
         clearTimeout(timer);
         deliver = null;
         abandon = null;
-        resolve9(value);
+        resolve10(value);
       };
       const timer = setTimeout(() => finish(null), Math.max(0, timeoutMs));
       deliver = finish;
@@ -11920,23 +12157,23 @@ async function bindLoopback(env = process.env, engagementId, serviceUrl) {
   };
 }
 function closeServer(server) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     server.closeAllConnections();
-    server.close(() => resolve9());
+    server.close(() => resolve10());
   });
 }
 
 // dist/sign-in-attempt.js
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync8, realpathSync, rmSync as rmSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync8, realpathSync as realpathSync2, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 var ATTEMPT_FILENAME = "sign-in-attempt.json";
 function attemptPath(home) {
-  return join9(home ?? homedir4(), HALFCYCLE_DIR_NAME, ATTEMPT_FILENAME);
+  return join10(home ?? homedir4(), HALFCYCLE_DIR_NAME, ATTEMPT_FILENAME);
 }
 function realFolder(folder2) {
   try {
-    return realpathSync(folder2);
+    return realpathSync2(folder2);
   } catch {
     return folder2;
   }
@@ -11944,7 +12181,7 @@ function realFolder(folder2) {
 function recordSignInAttempt(folder2, expiresAt, home) {
   try {
     const path = attemptPath(home);
-    mkdirSync6(join9(home ?? homedir4(), HALFCYCLE_DIR_NAME), { recursive: true, mode: 448 });
+    mkdirSync6(join10(home ?? homedir4(), HALFCYCLE_DIR_NAME), { recursive: true, mode: 448 });
     const record2 = { folder: realFolder(folder2), expiresAt };
     writeFileSync6(path, `${JSON.stringify(record2)}
 `, { mode: 384 });
@@ -11954,7 +12191,7 @@ function recordSignInAttempt(folder2, expiresAt, home) {
 }
 function clearSignInAttempt(home) {
   try {
-    rmSync3(attemptPath(home), { force: true });
+    rmSync4(attemptPath(home), { force: true });
   } catch {
     return;
   }
@@ -11997,7 +12234,7 @@ function defaultWrite(text) {
   process.stdout.write(text);
 }
 function defaultSleep(ms) {
-  return new Promise((resolve9) => setTimeout(resolve9, ms));
+  return new Promise((resolve10) => setTimeout(resolve10, ms));
 }
 function browserOpenCommand(os, url) {
   if (os === "darwin")
@@ -12044,12 +12281,12 @@ async function openBrowser(url, env = process.env, os = platform3(), spawnImpl =
     };
   }
   const { command, args: args2, windowsVerbatimArguments } = browserOpenCommand(os, url);
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let child;
     try {
       child = spawnImpl(command, args2, { stdio: "ignore", env, windowsVerbatimArguments });
     } catch {
-      resolve9({ opened: false, reason: `${command} could not be run` });
+      resolve10({ opened: false, reason: `${command} could not be run` });
       return;
     }
     let settled = false;
@@ -12058,7 +12295,7 @@ async function openBrowser(url, env = process.env, os = platform3(), spawnImpl =
         return;
       settled = true;
       clearTimeout(timer);
-      resolve9(attempt2);
+      resolve10(attempt2);
     };
     const timer = setTimeout(() => {
       child.unref();
@@ -12203,17 +12440,17 @@ async function pollBesideLoopback(serviceUrl, started, wake, deps) {
       continue;
     }
     if (sleep === void 0) {
-      await new Promise((resolve9) => {
-        const timer = setTimeout(resolve9, started.pollIntervalMs);
+      await new Promise((resolve10) => {
+        const timer = setTimeout(resolve10, started.pollIntervalMs);
         interrupt = () => {
           clearTimeout(timer);
-          resolve9();
+          resolve10();
         };
       });
     } else {
-      await new Promise((resolve9) => {
-        interrupt = resolve9;
-        void sleep(started.pollIntervalMs).then(resolve9);
+      await new Promise((resolve10) => {
+        interrupt = resolve10;
+        void sleep(started.pollIntervalMs).then(resolve10);
       });
     }
     interrupt = null;
@@ -12819,7 +13056,7 @@ function worthAnotherTry(value) {
   return { tryAgain: true, value };
 }
 function realSleep(ms) {
-  return new Promise((resolve9) => setTimeout(resolve9, ms));
+  return new Promise((resolve10) => setTimeout(resolve10, ms));
 }
 async function attemptInTurn(attempt2, options = {}) {
   const timeouts = options.timeouts ?? ATTEMPT_TIMEOUTS_MS;
@@ -13017,9 +13254,9 @@ function wrongAccountVisibility(act) {
 async function askLine(question2) {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
   try {
-    return await new Promise((resolve9) => {
-      rl.once("close", () => resolve9(""));
-      rl.question(question2).then(resolve9, () => resolve9(""));
+    return await new Promise((resolve10) => {
+      rl.once("close", () => resolve10(""));
+      rl.question(question2).then(resolve10, () => resolve10(""));
     });
   } finally {
     rl.close();
@@ -13152,7 +13389,7 @@ async function confirmActingIdentity(serviceUrl, credential, act, deps = {}) {
 }
 
 // dist/project-name.js
-import { basename, resolve as resolve2 } from "node:path";
+import { basename, resolve as resolve3 } from "node:path";
 var MAX_DERIVED_NAME_LEN = 100;
 var EMPTY_SEGMENTS = /* @__PURE__ */ new Set(["", ".", "..", "/", "\\"]);
 function repositoryNameFromRemote(remote) {
@@ -13172,7 +13409,7 @@ function isLocalRemote(remote) {
 function deriveProjectName(targetRepoRoot) {
   const remote = readRemote(targetRepoRoot);
   const fromRemote = remote && !isLocalRemote(remote) ? repositoryNameFromRemote(remote) : void 0;
-  const candidate = fromRemote ?? basename(resolve2(targetRepoRoot));
+  const candidate = fromRemote ?? basename(resolve3(targetRepoRoot));
   const name = candidate.trim();
   if (EMPTY_SEGMENTS.has(name))
     return void 0;
@@ -13261,9 +13498,9 @@ async function joinPinnedEngagement(serviceUrl, engagementId, targetRepo, deps =
 }
 
 // dist/pre-create-checks.js
-import { spawnSync } from "node:child_process";
-import { existsSync as existsSync7, readFileSync as readFileSync9, realpathSync as realpathSync2 } from "node:fs";
-import { delimiter, dirname as dirname5, join as join10 } from "node:path";
+import { spawnSync as spawnSync2 } from "node:child_process";
+import { existsSync as existsSync8, readFileSync as readFileSync9, realpathSync as realpathSync3 } from "node:fs";
+import { delimiter, dirname as dirname5, join as join11 } from "node:path";
 var KEPT_FOLDER_ID_LINE = `Nothing on the Halfcycle service needs undoing, and this folder keeps its project id, so running "${ownBareCommand()}" again picks up where it left off.`;
 var PreCreateRefused = class extends Error {
   constructor(message) {
@@ -13306,14 +13543,14 @@ function refuseSystemFolder(targetRepo, platform6 = process.platform) {
 function refuseInsideProject(targetRepo) {
   let folder2 = realOrLiteral(targetRepo);
   for (let parent = dirname5(folder2); parent !== folder2; folder2 = parent, parent = dirname5(parent)) {
-    if (existsSync7(join10(parent, BUNDLE_PIN_REL))) {
+    if (existsSync8(join11(parent, BUNDLE_PIN_REL))) {
       throw new PreCreateRefused(`${targetRepo} is inside the Halfcycle project at ${parent} \u2014 open that folder in your coding agent instead, or run "${ownBareCommand()}" in a folder outside it.`);
     }
   }
 }
 function realOrLiteral(folder2) {
   try {
-    return realpathSync2(folder2);
+    return realpathSync3(folder2);
   } catch {
     return folder2;
   }
@@ -13330,22 +13567,22 @@ async function offerGitForWindows() {
   throw new PreCreateRefused(`Git for Windows is needed and is not installed \u2014 install it with "${GIT_INSTALL_COMMAND}" or from ${GIT_DOWNLOAD_PAGE}, then open a new terminal and run "${ownBareCommand()}" again.`);
 }
 function gitBashPath(env) {
-  const onPath = (env["PATH"] ?? "").split(delimiter).filter((dir) => dir !== "" && existsSync7(join10(dir, "git.exe"))).map((dir) => join10(dir, "..", "bin", "bash.exe"));
+  const onPath = (env["PATH"] ?? "").split(delimiter).filter((dir) => dir !== "" && existsSync8(join11(dir, "git.exe"))).map((dir) => join11(dir, "..", "bin", "bash.exe"));
   const candidates = [
     env["CLAUDE_CODE_GIT_BASH_PATH"],
     ...onPath,
-    env["ProgramFiles"] === void 0 ? void 0 : join10(env["ProgramFiles"], "Git", "bin", "bash.exe")
+    env["ProgramFiles"] === void 0 ? void 0 : join11(env["ProgramFiles"], "Git", "bin", "bash.exe")
   ];
-  return candidates.find((file) => file !== void 0 && file !== "" && existsSync7(file));
+  return candidates.find((file) => file !== void 0 && file !== "" && existsSync8(file));
 }
 function hasGitBash(env) {
   return gitBashPath(env) !== void 0;
 }
 function runWingetInstall() {
-  return spawnSync("winget", [...GIT_INSTALL_ARGS], { stdio: "inherit" }).status === 0;
+  return spawnSync2("winget", [...GIT_INSTALL_ARGS], { stdio: "inherit" }).status === 0;
 }
 function unreadableProjectRefusal(targetRepo) {
-  return `${join10(targetRepo, PROJECT_IDENTITY_REL)} could not be read as a Halfcycle project file \u2014 delete the .halfcycle folder in ${targetRepo} and run "${ownBareCommand()}" again to start a new project here.`;
+  return `${join11(targetRepo, PROJECT_IDENTITY_REL)} could not be read as a Halfcycle project file \u2014 delete the .halfcycle folder in ${targetRepo} and run "${ownBareCommand()}" again to start a new project here.`;
 }
 function cannotWriteRefusal(targetRepo) {
   return `cannot write to ${targetRepo} \u2014 run "${ownBareCommand()}" in a folder you can write to.`;
@@ -13365,7 +13602,7 @@ function claimFolderId(targetRepo) {
 function readFolderId(targetRepo) {
   let folderId;
   try {
-    const text = readFileSync9(join10(targetRepo, PROJECT_IDENTITY_REL), "utf-8");
+    const text = readFileSync9(join11(targetRepo, PROJECT_IDENTITY_REL), "utf-8");
     folderId = JSON.parse(text)?.projectId;
   } catch {
     return void 0;
@@ -13382,7 +13619,7 @@ function checkSettingsParse(targetRepo) {
 }
 
 // dist/folder-refusals.js
-import { realpathSync as realpathSync3 } from "node:fs";
+import { realpathSync as realpathSync4 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 function folderMissingRefusal(targetRepo) {
   return `halfcycle: no such directory: ${targetRepo}`;
@@ -13402,8 +13639,8 @@ function homeFolderRefusal(targetRepo) {
 }
 function isHomeFolder(dir) {
   try {
-    const target = realpathSync3(dir);
-    const home = realpathSync3(homedir5());
+    const target = realpathSync4(dir);
+    const home = realpathSync4(homedir5());
     return process.platform === "win32" ? target.toLowerCase() === home.toLowerCase() : target === home;
   } catch {
     return false;
@@ -13411,16 +13648,16 @@ function isHomeFolder(dir) {
 }
 
 // dist/preview.js
-import { accessSync, constants, existsSync as existsSync9, readFileSync as readFileSync12, statSync } from "node:fs";
-import { join as join13 } from "node:path";
+import { accessSync, constants, existsSync as existsSync10, readFileSync as readFileSync12, statSync } from "node:fs";
+import { join as join14 } from "node:path";
 
 // dist/halfcycle-monorepo.js
 import { readFileSync as readFileSync10 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 var MONOREPO_PACKAGE_NAME = "halfcycle-monorepo";
 function isHalfcycleMonorepo(dir) {
   try {
-    const pkg = JSON.parse(readFileSync10(join11(dir, "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync10(join12(dir, "package.json"), "utf-8"));
     return pkg.name === MONOREPO_PACKAGE_NAME;
   } catch {
     return false;
@@ -13432,8 +13669,8 @@ function isSelfBuildInstallForm(engagementIdArg, engagementTypeArg) {
 
 // dist/local-allow.js
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync11, rmSync as rmSync4, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname6, join as join12 } from "node:path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync7, readFileSync as readFileSync11, rmSync as rmSync5, writeFileSync as writeFileSync7 } from "node:fs";
+import { dirname as dirname6, join as join13 } from "node:path";
 var LOCAL_SETTINGS_REL2 = ".claude/settings.local.json";
 var LOCAL_ALLOW_RECORD_REL = ".halfcycle/local-allow.json";
 var LOCAL_ALLOW_EDIT_MODE = "acceptEdits";
@@ -13441,7 +13678,6 @@ var SCRIPTS = ["test", "build", "lint", "typecheck"];
 var SCRIPT_RUNNERS = ["npm run", "pnpm", "pnpm run", "yarn", "bun run"];
 var HALFCYCLE_TOOLS_RULE = `mcp__${MCP_SERVER_KEY}`;
 var bash = (command) => `Bash(${command}:*)`;
-var CONTEXT_BUDGET_IGNORE_CHECK = "git check-ignore -q .halfcycle/context-budget.json";
 var COMMIT_FILE_LISTING = "git ls-tree -r --name-only";
 var INSTALLED_HOOK_SCRIPTS = Object.keys(OWNED_GENERATED_HEADERS).filter((path) => path.startsWith(".claude/hooks/"));
 var LOCAL_ALLOW_RULES = [
@@ -13477,7 +13713,6 @@ var LOCAL_ALLOW_RULES = [
   bash("git merge"),
   bash("git worktree add"),
   bash("git worktree list"),
-  `Bash(${CONTEXT_BUDGET_IGNORE_CHECK})`,
   bash("git pull --ff-only"),
   bash("git pull --rebase"),
   bash("npm install"),
@@ -13489,6 +13724,8 @@ var LOCAL_ALLOW_RULES = [
   bash("yarn add"),
   bash("bun install"),
   bash("bun add"),
+  bash("gh repo view"),
+  bash("gh issue create"),
   bash("go mod tidy"),
   bash("go get"),
   bash("cargo add"),
@@ -13528,7 +13765,7 @@ var LOCAL_ALLOW_RULES = [
   bash("tr"),
   HALFCYCLE_TOOLS_RULE
 ];
-var LOCAL_ALLOW_QUESTION = "Let your coding agent work without asking on this computer? It would run your tests and builds, install packages, run local tools, make and move files, use git locally, run Halfcycle, and edit files in this project without a permission prompt. Pushing, publishing, deploying to production, deleting and changing anything on GitHub still ask. This is saved only on this computer, in .claude/settings.local.json, which is not committed.\nType yes to allow it, or press Enter to keep asking: ";
+var LOCAL_ALLOW_QUESTION = "Let your coding agent work without asking on this computer? It would run your tests and builds, install packages, run local tools, make and move files, use git locally, run Halfcycle, and edit files in this project without a permission prompt. Opening a ticket on GitHub does not ask either. Pushing, publishing, deploying to production and deleting still ask. This is saved only on this computer, in .claude/settings.local.json, which is not committed.\nType yes to allow it, or press Enter to keep asking: ";
 var LOCAL_ALLOW_ON_LINE = `Your coding agent can now work without asking on this computer. To undo it, run: ${ownCommand()} allow --remove`;
 var LOCAL_ALLOW_OFF_LINE = `Your coding agent will ask before it runs commands. To stop most of those questions on this computer, run: ${ownCommand()} allow`;
 var LOCAL_ALLOW_TRACKED_LINE = "Your .claude/settings.local.json is committed to git, so Halfcycle will not add rules to it. Remove it from git first if you want them.";
@@ -13550,8 +13787,8 @@ function trackedByGit(repo) {
   }
 }
 function readRecord2(repo) {
-  const path = join12(repo, LOCAL_ALLOW_RECORD_REL);
-  if (!existsSync8(path))
+  const path = join13(repo, LOCAL_ALLOW_RECORD_REL);
+  if (!existsSync9(path))
     return null;
   try {
     const raw = JSON.parse(readFileSync11(path, "utf8"));
@@ -13567,12 +13804,12 @@ function readRecord2(repo) {
   }
 }
 function writeRecord(repo, record2) {
-  const path = join12(repo, LOCAL_ALLOW_RECORD_REL);
+  const path = join13(repo, LOCAL_ALLOW_RECORD_REL);
   mkdirSync7(dirname6(path), { recursive: true });
   writeFileSync7(path, JSON.stringify({ rules: record2.rules, defaultMode: record2.defaultMode, before: record2.before }, null, 2) + "\n");
 }
 function holdsLocalAllowRecord(repo) {
-  return existsSync8(join12(repo, LOCAL_ALLOW_RECORD_REL));
+  return existsSync9(join13(repo, LOCAL_ALLOW_RECORD_REL));
 }
 function layoutOf(text) {
   const eol = text.includes("\r\n") ? "\r\n" : "\n";
@@ -13587,8 +13824,8 @@ function render(value, like) {
 function writeLocalAllow(repo) {
   if (trackedByGit(repo))
     return { kind: "tracked", line: LOCAL_ALLOW_TRACKED_LINE };
-  const path = join12(repo, LOCAL_SETTINGS_REL2);
-  const existed = existsSync8(path);
+  const path = join13(repo, LOCAL_SETTINGS_REL2);
+  const existed = existsSync9(path);
   const text = existed ? readFileSync11(path, "utf8") : null;
   let settings = {};
   if (text !== null) {
@@ -13631,14 +13868,14 @@ function writeLocalAllow(repo) {
 }
 function removeLocalAllow(repo) {
   const record2 = readRecord2(repo);
-  const recordPath = join12(repo, LOCAL_ALLOW_RECORD_REL);
+  const recordPath = join13(repo, LOCAL_ALLOW_RECORD_REL);
   if (record2 === null) {
-    if (existsSync8(recordPath))
-      rmSync4(recordPath, { force: true });
+    if (existsSync9(recordPath))
+      rmSync5(recordPath, { force: true });
     return { kind: "nothing", line: LOCAL_ALLOW_NOTHING_TO_REMOVE_LINE };
   }
-  const path = join12(repo, LOCAL_SETTINGS_REL2);
-  if (existsSync8(path)) {
+  const path = join13(repo, LOCAL_SETTINGS_REL2);
+  if (existsSync9(path)) {
     const text = readFileSync11(path, "utf8");
     let parsed = null;
     try {
@@ -13673,13 +13910,13 @@ function removeLocalAllow(repo) {
       if (record2.before !== null && original !== null && sameJson(next, original)) {
         writeFileSync7(path, record2.before);
       } else if (record2.before === null && Object.keys(next).length === 0) {
-        rmSync4(path, { force: true });
+        rmSync5(path, { force: true });
       } else {
         writeFileSync7(path, render(next, text));
       }
     }
   }
-  rmSync4(recordPath, { force: true });
+  rmSync5(recordPath, { force: true });
   return { kind: "removed", line: LOCAL_ALLOW_REMOVED_LINE };
 }
 function parseObject(text) {
@@ -13693,21 +13930,21 @@ function parseObject(text) {
   }
 }
 function sameJson(a, b) {
-  return JSON.stringify(canonical(a)) === JSON.stringify(canonical(b));
+  return JSON.stringify(canonical2(a)) === JSON.stringify(canonical2(b));
 }
-function canonical(value) {
+function canonical2(value) {
   if (Array.isArray(value))
-    return value.map(canonical);
+    return value.map(canonical2);
   if (isObject2(value)) {
-    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical2(value[key])]));
   }
   return value;
 }
 function shouldAskLocalAllow(repo, interactive) {
   if (!interactive || holdsLocalAllowRecord(repo))
     return false;
-  const path = join12(repo, LOCAL_SETTINGS_REL2);
-  if (!existsSync8(path))
+  const path = join13(repo, LOCAL_SETTINGS_REL2);
+  if (!existsSync9(path))
     return true;
   const parsed = parseObject(readFileSync11(path, "utf8"));
   const allow = isObject2(parsed?.["permissions"]) ? parsed["permissions"]["allow"] : void 0;
@@ -13728,8 +13965,8 @@ function localAllowClosingLine(repo, said) {
 var ENABLED_SERVERS_KEY = "enabledMcpjsonServers";
 var DISABLED_SERVERS_KEY = "disabledMcpjsonServers";
 function registersOwnServer(repo) {
-  const path = join12(repo, MCP_REGISTRATION_REL);
-  const registration = parseObject(existsSync8(path) ? readFileSync11(path, "utf8") : null);
+  const path = join13(repo, MCP_REGISTRATION_REL);
+  const registration = parseObject(existsSync9(path) ? readFileSync11(path, "utf8") : null);
   const servers = registration?.["mcpServers"];
   return isObject2(servers) && isObject2(servers[MCP_SERVER_KEY]);
 }
@@ -13739,15 +13976,15 @@ function stringsIn(value) {
 function approveOwnServer(repo) {
   const plan = planOwnServerApproval(repo, registersOwnServer(repo));
   if (plan.after !== null) {
-    const path = join12(repo, LOCAL_SETTINGS_REL2);
+    const path = join13(repo, LOCAL_SETTINGS_REL2);
     mkdirSync7(dirname6(path), { recursive: true });
     writeFileSync7(path, plan.after);
   }
   return plan.outcome;
 }
 function planOwnServerApproval(repo, registered) {
-  const path = join12(repo, LOCAL_SETTINGS_REL2);
-  const text = existsSync8(path) ? readFileSync11(path, "utf8") : null;
+  const path = join13(repo, LOCAL_SETTINGS_REL2);
+  const text = existsSync9(path) ? readFileSync11(path, "utf8") : null;
   const unchanged = (outcome) => ({ outcome, before: text, after: null });
   if (!registered)
     return unchanged("no-server");
@@ -13783,8 +14020,8 @@ function planOwnServerApproval(repo, registered) {
   return { outcome: "approved", before: text, after: after === text ? null : after };
 }
 function removeOwnServerApproval(repo) {
-  const path = join12(repo, LOCAL_SETTINGS_REL2);
-  if (!existsSync8(path) || trackedByGit(repo))
+  const path = join13(repo, LOCAL_SETTINGS_REL2);
+  if (!existsSync9(path) || trackedByGit(repo))
     return false;
   const text = readFileSync11(path, "utf8");
   const settings = parseObject(text);
@@ -13818,7 +14055,7 @@ function removeOwnServerApproval(repo) {
   if (!changed)
     return false;
   if (Object.keys(next).length === 0)
-    rmSync4(path, { force: true });
+    rmSync5(path, { force: true });
   else
     writeFileSync7(path, render(next, text));
   return true;
@@ -13879,8 +14116,8 @@ function ownServerRow(targetRepo, plan) {
   }
 }
 function claudeMdLine(targetRepo) {
-  const path = join13(targetRepo, CLAUDE_MD_REL);
-  if (!existsSync9(path))
+  const path = join14(targetRepo, CLAUDE_MD_REL);
+  if (!existsSync10(path))
     return void 0;
   let text;
   try {
@@ -13891,7 +14128,7 @@ function claudeMdLine(targetRepo) {
   return text.includes(AGENTS_IMPORT_LINE) ? WORDS.claudeMdAlreadyPoints : WORDS.claudeMdWillAdd;
 }
 function previewRefusal(targetRepo, options) {
-  if (!existsSync9(targetRepo))
+  if (!existsSync10(targetRepo))
     return folderMissingRefusal(targetRepo);
   if (!statSync(targetRepo).isDirectory())
     return folderIsFileRefusal(targetRepo);
@@ -13912,7 +14149,7 @@ function previewRefusal(targetRepo, options) {
   } catch {
     return cannotWriteRefusal(targetRepo);
   }
-  if (existsSync9(join13(targetRepo, PROJECT_IDENTITY_REL)) && readFolderId(targetRepo) === void 0) {
+  if (existsSync10(join14(targetRepo, PROJECT_IDENTITY_REL)) && readFolderId(targetRepo) === void 0) {
     return unreadableProjectRefusal(targetRepo);
   }
   try {
@@ -13972,10 +14209,10 @@ function renderPreview(plan, missingGitForWindows, claudeMdWords, ownServer) {
 }
 
 // dist/doctor.js
-import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync10, lstatSync as lstatSync2, readFileSync as readFileSync13, realpathSync as realpathSync4, statSync as statSync2 } from "node:fs";
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { existsSync as existsSync11, lstatSync as lstatSync3, readFileSync as readFileSync13, realpathSync as realpathSync5, statSync as statSync2 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 var GUARD_RUNNER_REL2 = ".claude/hooks/guard-runner.sh";
 var CONNECTION_VERB = "check-connection";
 var WRAPPER_TIMEOUT_MS = 3e4;
@@ -14014,7 +14251,7 @@ function runDoctor(root, options) {
   };
 }
 function setUpLine(root, upToDate) {
-  if (!existsSync10(join14(root, BUNDLE_PIN_REL))) {
+  if (!existsSync11(join15(root, BUNDLE_PIN_REL))) {
     return {
       state: "no",
       hooksMissing: false,
@@ -14028,9 +14265,9 @@ function setUpLine(root, upToDate) {
   const missing = [];
   if (!pinNamesProject(root))
     missing.push("Halfcycle's project record");
-  if (!existsSync10(join14(root, INSTALL_MANIFEST_REL)))
+  if (!existsSync11(join15(root, INSTALL_MANIFEST_REL)))
     missing.push("the install record");
-  if (!existsSync10(join14(root, VENDORED_BIN_REL)))
+  if (!existsSync11(join15(root, VENDORED_BIN_REL)))
     missing.push("Halfcycle's check program");
   if (!mcpNamesServer(root))
     missing.push("Halfcycle's server entry");
@@ -14056,14 +14293,14 @@ function pinNamesProject(root) {
   }
 }
 function mcpNamesServer(root) {
-  const parsed = readJson(join14(root, MCP_REGISTRATION_REL));
+  const parsed = readJson(join15(root, MCP_REGISTRATION_REL));
   if (!isObject3(parsed) || !isObject3(parsed["mcpServers"]))
     return false;
   const entry = parsed["mcpServers"][MCP_SERVER_KEY];
   return isObject3(entry) && typeof entry["url"] === "string";
 }
 function settingsRegisterEveryCommand(root) {
-  const parsed = readJson(join14(root, SETTINGS_REL));
+  const parsed = readJson(join15(root, SETTINGS_REL));
   if (!isObject3(parsed) || !isObject3(parsed["hooks"]))
     return false;
   const registered = /* @__PURE__ */ new Set();
@@ -14094,10 +14331,10 @@ function startWrapper(root, options) {
     }
     shell = gitBash;
   }
-  const wrapper = join14(root, GUARD_RUNNER_REL2);
-  if (!existsSync10(wrapper))
+  const wrapper = join15(root, GUARD_RUNNER_REL2);
+  if (!existsSync11(wrapper))
     return failed(repairSentence());
-  const run = spawnSync2(shell, [wrapper, CONNECTION_VERB], {
+  const run = spawnSync3(shell, [wrapper, CONNECTION_VERB], {
     cwd: root,
     env: { ...options.env, CLAUDE_PROJECT_DIR: root },
     encoding: "utf-8",
@@ -14122,7 +14359,7 @@ function startWrapper(root, options) {
 }
 function settingsDisablingHooks(root) {
   for (const rel of [SETTINGS_REL, LOCAL_SETTINGS_REL]) {
-    const parsed = readJson(join14(root, rel));
+    const parsed = readJson(join15(root, rel));
     if (isObject3(parsed) && parsed["disableAllHooks"] === true)
       return rel;
   }
@@ -14212,8 +14449,8 @@ function folderTrustLine(root, options) {
   if (!mcpNamesServer(root))
     return void 0;
   const configFolder = options.env["CLAUDE_CONFIG_DIR"];
-  const stateFile = join14(configFolder !== void 0 && configFolder !== "" ? configFolder : options.home ?? homedir6(), CLAUDE_STATE_FILENAME);
-  const trust = trustOfWorkingFolder(root, stateFile, options.platform, { lstatSync: lstatSync2, readFileSync: readFileSync13, realpathSync: realpathSync4 });
+  const stateFile = join15(configFolder !== void 0 && configFolder !== "" ? configFolder : options.home ?? homedir6(), CLAUDE_STATE_FILENAME);
+  const trust = trustOfWorkingFolder(root, stateFile, options.platform, { lstatSync: lstatSync3, readFileSync: readFileSync13, realpathSync: realpathSync5 });
   return trust === "not-trusted" ? { ok: true, text: `Folder trust: ${FOLDER_NOT_TRUSTED_SENTENCE}` } : void 0;
 }
 function signInCodeLine(root, running, now, options) {
@@ -14287,7 +14524,7 @@ var CODEX_EVENT_SNAKE = {
 };
 function codexHomeDir(options) {
   const codexHome = options.env["CODEX_HOME"];
-  return codexHome !== void 0 && codexHome !== "" ? codexHome : join14(homedir6(), ".codex");
+  return codexHome !== void 0 && codexHome !== "" ? codexHome : join15(homedir6(), ".codex");
 }
 function isDirectory(path) {
   try {
@@ -14297,8 +14534,8 @@ function isDirectory(path) {
   }
 }
 function codexLine(root, options) {
-  const hooksPath = join14(root, CODEX_HOOKS_REL2);
-  if (!existsSync10(hooksPath))
+  const hooksPath = join15(root, CODEX_HOOKS_REL2);
+  if (!existsSync11(hooksPath))
     return void 0;
   if (!isDirectory(codexHomeDir(options)))
     return void 0;
@@ -14340,7 +14577,7 @@ function codexEntryPositions(hooksPath) {
   return positions;
 }
 function codexApprovalStatus(root, positions, options) {
-  const configPath = join14(codexHomeDir(options), "config.toml");
+  const configPath = join15(codexHomeDir(options), "config.toml");
   let text;
   try {
     text = readFileSync13(configPath, "utf-8");
@@ -14349,7 +14586,7 @@ function codexApprovalStatus(root, positions, options) {
   }
   let hooksPath;
   try {
-    hooksPath = join14(realpathSync4(root), CODEX_HOOKS_REL2);
+    hooksPath = join15(realpathSync5(root), CODEX_HOOKS_REL2);
   } catch {
     return "not-approved";
   }
@@ -14379,7 +14616,7 @@ function naturalList(items) {
   return `${items.slice(0, -1).join(", ")} and ${items[items.length - 1]}`;
 }
 function readJson(path) {
-  if (!existsSync10(path))
+  if (!existsSync11(path))
     return void 0;
   try {
     return JSON.parse(readFileSync13(path, "utf-8"));
@@ -14393,8 +14630,8 @@ function isObject3(value) {
 
 // dist/claude-version-probe.js
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync11, realpathSync as realpathSync5 } from "node:fs";
-import { delimiter as delimiter2, join as join15 } from "node:path";
+import { existsSync as existsSync12, realpathSync as realpathSync6 } from "node:fs";
+import { delimiter as delimiter2, join as join16 } from "node:path";
 function execVersionCommand(command, timeoutMs, deps) {
   const platform6 = deps.platform ?? process.platform;
   const exec = deps.exec ?? execFileSync4;
@@ -14437,10 +14674,10 @@ var INSTALL_METHOD_RULES = [
 function probeClaudeCodeInstallMethod(deps = {}) {
   const env = deps.env ?? process.env;
   const platform6 = deps.platform ?? process.platform;
-  const exists = deps.exists ?? existsSync11;
+  const exists = deps.exists ?? existsSync12;
   const realpath = deps.realpath ?? ((file) => {
     try {
-      return realpathSync5(file);
+      return realpathSync6(file);
     } catch {
       return file;
     }
@@ -14449,7 +14686,7 @@ function probeClaudeCodeInstallMethod(deps = {}) {
   const dirs = (env["PATH"] ?? "").split(delimiter2).filter((dir) => dir !== "");
   for (const dir of dirs) {
     for (const name of names) {
-      const file = join15(dir, name);
+      const file = join16(dir, name);
       if (!exists(file))
         continue;
       const real = realpath(file);
@@ -14484,8 +14721,8 @@ function codexInstallLine(codex) {
 }
 
 // dist/build-record/write.js
-import { existsSync as existsSync12, mkdirSync as mkdirSync8, rmSync as rmSync6 } from "node:fs";
-import { basename as basename2, join as join16, resolve as resolve3, relative as relative2, isAbsolute as isAbsolute3 } from "node:path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync8, rmSync as rmSync7 } from "node:fs";
+import { basename as basename2, join as join17, resolve as resolve4, relative as relative3, isAbsolute as isAbsolute4 } from "node:path";
 
 // dist/build-record/render-v2.js
 var HIDDEN = /[\p{Cc}\p{Zl}\p{Zp}\p{Default_Ignorable_Code_Point}]/u;
@@ -14831,6 +15068,20 @@ function leftForYouLines(left, p) {
   }
   return lines;
 }
+var TASKS_FILE_LINK = "../tasks.md";
+function ticketLines(tickets, p) {
+  if (tickets === void 0)
+    return [];
+  const lines = ["- Tickets:"];
+  for (const entry of tickets.entries) {
+    lines.push(`  - ${entry.ref} ${p.text(entry.title)}`);
+    if (entry.url !== null)
+      lines.push(`    - Link: [${entry.ref}](${entry.url})`);
+    else if (entry.ref === TASKS_FILE_PATH)
+      lines.push(`    - Link: [${entry.ref}](${TASKS_FILE_LINK})`);
+  }
+  return lines;
+}
 function shownBy(steps) {
   const named2 = steps.filter((s) => s.name !== void 0).length;
   if (named2 === 0)
@@ -14904,6 +15155,7 @@ function renderClose(heading, observed, attested, checks, p, closingRound = fals
       `- Signed in as: ${signedInAs(observed.closedBy, p)}`,
       ...outstanding(observed.crossed, p),
       ...leftForYouLines(observed.leftForOwner, p),
+      ...ticketLines(observed.tickets, p),
       machines(observed.seatCoverage, checks)
     ].join("\n"),
     STATED_LABEL,
@@ -15076,7 +15328,7 @@ function renderBuildRecordV2Markdown(record2) {
 }
 
 // dist/build-record/pair-io.js
-import { closeSync, openSync, readFileSync as readFileSync14, renameSync as renameSync2, rmSync as rmSync5, writeSync as writeSync2 } from "node:fs";
+import { closeSync, openSync, readFileSync as readFileSync14, renameSync as renameSync2, rmSync as rmSync6, writeSync as writeSync2 } from "node:fs";
 function createExclusiveOnDisk(path, data) {
   const bytes = typeof data === "string" ? Buffer.from(data, "utf-8") : data;
   const fd = openSync(path, "wx");
@@ -15087,7 +15339,7 @@ function createExclusiveOnDisk(path, data) {
     }
   } catch (err) {
     closeSync(fd);
-    rmSync5(path, { force: true });
+    rmSync6(path, { force: true });
     throw err;
   }
   closeSync(fd);
@@ -15121,28 +15373,28 @@ function createPairExclusive(io, jsonPath, jsonText, mdPath, mdText) {
     return "created";
   } catch (err) {
     if (createdJson)
-      rmSync5(jsonPath, { force: true });
+      rmSync6(jsonPath, { force: true });
     if (!isEexist(err))
       throw err;
     return "exists";
   }
 }
 function replaceOne(io, tmp, finalPath, text) {
-  rmSync5(tmp, { force: true });
+  rmSync6(tmp, { force: true });
   try {
     io.createExclusive(tmp, text);
     io.rename(tmp, finalPath);
   } catch (err) {
-    rmSync5(tmp, { force: true });
+    rmSync6(tmp, { force: true });
     throw err;
   }
 }
 
 // dist/build-record/write.js
-var BUILD_RECORD_DIR = join16("docs", "build-records");
+var BUILD_RECORD_DIR = join17("docs", "build-records");
 function assertInsideOutDir(outDir, candidate, identity) {
-  const rel = relative2(outDir, resolve3(candidate));
-  const isPlainFilename = rel !== "" && rel !== ".." && !isAbsolute3(rel) && rel === basename2(rel);
+  const rel = relative3(outDir, resolve4(candidate));
+  const isPlainFilename = rel !== "" && rel !== ".." && !isAbsolute4(rel) && rel === basename2(rel);
   if (!isPlainFilename) {
     throw new InvalidPhaseIdentityError(identity, BUILD_RECORD_DIR);
   }
@@ -15175,10 +15427,10 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   if (!isValidPhaseIdentity(phase)) {
     throw new InvalidPhaseIdentityError(phase, BUILD_RECORD_DIR);
   }
-  const outDir = resolve3(repoRoot, BUILD_RECORD_DIR);
+  const outDir = resolve4(repoRoot, BUILD_RECORD_DIR);
   const segment = renderPhaseSegment(phase);
-  const jsonPath = join16(outDir, `${segment}.json`);
-  const mdPath = join16(outDir, `${segment}.md`);
+  const jsonPath = join17(outDir, `${segment}.json`);
+  const mdPath = join17(outDir, `${segment}.md`);
   const jsonTmp = `${jsonPath}.tmp`;
   const mdTmp = `${mdPath}.tmp`;
   for (const candidate of [jsonPath, mdPath, jsonTmp, mdTmp]) {
@@ -15192,7 +15444,7 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   }
   const existingJson = readIfPresent(jsonPath);
   if (existingJson === null) {
-    return { kind: "in-the-way", path: existsSync12(jsonPath) ? jsonPath : mdPath };
+    return { kind: "in-the-way", path: existsSync13(jsonPath) ? jsonPath : mdPath };
   }
   if (existingJson === jsonText) {
     replaceOne(io, mdTmp, mdPath, mdText);
@@ -15208,7 +15460,7 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
     try {
       replaceOne(io, jsonTmp, jsonPath, existingJson);
     } catch {
-      rmSync6(jsonPath, { force: true });
+      rmSync7(jsonPath, { force: true });
     }
     throw err;
   }
@@ -15216,24 +15468,24 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
 }
 
 // dist/build-record/obtain.js
-import { relative as relative5 } from "node:path";
+import { relative as relative6 } from "node:path";
 
 // dist/open-phase.js
 import { readFileSync as readFileSync20 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 
 // dist/close-phase.js
 import { execFile, execFileSync as execFileSync6 } from "node:child_process";
 import { readFileSync as readFileSync19 } from "node:fs";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 
 // dist/plan.js
-import { existsSync as existsSync14, readFileSync as readFileSync18 } from "node:fs";
-import { join as join22 } from "node:path";
+import { existsSync as existsSync15, readFileSync as readFileSync18 } from "node:fs";
+import { join as join23 } from "node:path";
 
 // dist/draw/write.js
-import { closeSync as closeSync2, lstatSync as lstatSync3, mkdirSync as mkdirSync9, openSync as openSync2, readFileSync as readFileSync15, readSync, realpathSync as realpathSync6, rmSync as rmSync7 } from "node:fs";
-import { dirname as dirname7, isAbsolute as isAbsolute4, join as join17, relative as relative3, resolve as resolve4, sep } from "node:path";
+import { closeSync as closeSync2, lstatSync as lstatSync4, mkdirSync as mkdirSync9, openSync as openSync2, readFileSync as readFileSync15, readSync, realpathSync as realpathSync7, rmSync as rmSync8 } from "node:fs";
+import { dirname as dirname7, isAbsolute as isAbsolute5, join as join18, relative as relative4, resolve as resolve5, sep as sep2 } from "node:path";
 var DOCS_DIR = "docs";
 var DIAGRAMS_DIR = "diagrams";
 var DIAGRAM_DIR_REL = `${DOCS_DIR}/${DIAGRAMS_DIR}`;
@@ -15288,10 +15540,10 @@ function embedImageLink(base, doc) {
   return `${up}${DIAGRAMS_DIR}/${markdownLinkName(embedImageName(base))}`;
 }
 function diagramPaths(repoRoot, base) {
-  const root = resolve4(repoRoot);
-  const dir = join17(root, DOCS_DIR, DIAGRAMS_DIR);
+  const root = resolve5(repoRoot);
+  const dir = join18(root, DOCS_DIR, DIAGRAMS_DIR);
   const names = fileNames(base);
-  const file = Object.fromEntries(DIAGRAM_FILES.map((which) => [which, join17(dir, names[which])]));
+  const file = Object.fromEntries(DIAGRAM_FILES.map((which) => [which, join18(dir, names[which])]));
   return { repoRoot: root, dir, file };
 }
 function diagramRel(base, which) {
@@ -15308,19 +15560,19 @@ function spokenList(items) {
 }
 function lstatOrNull2(path) {
   try {
-    return lstatSync3(path);
+    return lstatSync4(path);
   } catch {
     return null;
   }
 }
-function isInside(outer, inner) {
-  const rel = relative3(outer, inner);
-  return rel === "" || !isAbsolute4(rel) && rel !== ".." && !rel.startsWith(`..${sep}`);
+function isInside2(outer, inner) {
+  const rel = relative4(outer, inner);
+  return rel === "" || !isAbsolute5(rel) && rel !== ".." && !rel.startsWith(`..${sep2}`);
 }
 function checkDiagramPlace(paths) {
   let root;
   try {
-    root = realpathSync6(paths.repoRoot);
+    root = realpathSync7(paths.repoRoot);
   } catch {
     return { ok: false, why: `the folder ${paths.repoRoot} could not be opened. Check the path, then run this again.` };
   }
@@ -15333,14 +15585,14 @@ function checkDiagramPlace(paths) {
   }
   let real;
   try {
-    real = realpathSync6(ancestor);
+    real = realpathSync7(ancestor);
   } catch {
     return {
       ok: false,
       why: `${DIAGRAM_DIR_REL} leads to a place that does not exist. Remove the link in the way, then run this again.`
     };
   }
-  if (!isInside(root, real)) {
+  if (!isInside2(root, real)) {
     return {
       ok: false,
       why: `${DIAGRAM_DIR_REL} leads outside this repository, so nothing was written. Remove the link in the way, then run this again.`
@@ -15348,12 +15600,12 @@ function checkDiagramPlace(paths) {
   }
   let isFolder = false;
   try {
-    isFolder = lstatSync3(real).isDirectory();
+    isFolder = lstatSync4(real).isDirectory();
   } catch {
     isFolder = false;
   }
   if (!isFolder) {
-    const name = relative3(root, real).split("\\").join("/");
+    const name = relative4(root, real).split("\\").join("/");
     return {
       ok: false,
       why: `${name === "" ? "this repository" : name} is not a folder, so ${DIAGRAM_DIR_REL} cannot be made. Move it, then run this again.`
@@ -15468,7 +15720,7 @@ function checkPictures(drawn, base) {
 }
 function removeQuietly(path) {
   try {
-    rmSync7(path, { force: true });
+    rmSync8(path, { force: true });
   } catch {
     return;
   }
@@ -15534,10 +15786,10 @@ function restore(io, paths, renamed, existing) {
     const tmp = tempPath(paths, which);
     try {
       if (previous === null) {
-        rmSync7(finalPath, { force: true });
+        rmSync8(finalPath, { force: true });
         continue;
       }
-      rmSync7(tmp, { force: true });
+      rmSync8(tmp, { force: true });
       io.createExclusive(tmp, previous);
       io.rename(tmp, finalPath);
     } catch {
@@ -15564,7 +15816,7 @@ function isMissingRoute(method, status, body) {
 }
 
 // dist/change.js
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 
 // dist/cli-contract.js
 var CLI_VERBS = ["install", "check-drift", "build-record", "open-phase", "close-phase", "system", "draw", "plan", "review", "check-tasks", "check-criteria", "check-report", "ready", "uninstall", "change", "pace", "route", "prove", "preview", "doctor", "restore", "request-shapes", "allow", "size", "regression", "crew"];
@@ -15809,11 +16061,11 @@ function placeholderRefusal(verb, tokens) {
 // dist/system-report.js
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { readFileSync as readFileSync16 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function readDescriptionFile(repoRoot) {
   let text;
   try {
-    text = readFileSync16(join18(repoRoot, SYSTEM_DESCRIPTION_REL), "utf-8");
+    text = readFileSync16(join19(repoRoot, SYSTEM_DESCRIPTION_REL), "utf-8");
   } catch (err) {
     const code = err.code;
     return code === "ENOENT" || code === "ENOTDIR" ? { kind: "missing" } : { kind: "unreadable" };
@@ -16037,8 +16289,8 @@ async function runSystem(repoRoot, deps) {
 }
 
 // dist/build-record/write-change.js
-import { existsSync as existsSync13, mkdirSync as mkdirSync10 } from "node:fs";
-import { basename as basename3, isAbsolute as isAbsolute5, join as join19, relative as relative4, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync14, mkdirSync as mkdirSync10 } from "node:fs";
+import { basename as basename3, isAbsolute as isAbsolute6, join as join20, relative as relative5, resolve as resolve6 } from "node:path";
 
 // dist/build-record/render-change.js
 function counted2(n, one, many) {
@@ -16183,7 +16435,7 @@ function renderChangeRecordMarkdown(record2) {
 }
 
 // dist/build-record/write-change.js
-var CHANGE_RECORD_DIR = join19("docs", "build-records", "changes");
+var CHANGE_RECORD_DIR = join20("docs", "build-records", "changes");
 var InvalidChangeIdError = class extends Error {
   id;
   constructor(id) {
@@ -16193,8 +16445,8 @@ var InvalidChangeIdError = class extends Error {
   }
 };
 function assertInsideChangeDir(outDir, candidate, id) {
-  const rel = relative4(outDir, resolve5(candidate));
-  const isPlainFilename = rel !== "" && rel !== ".." && !isAbsolute5(rel) && rel === basename3(rel);
+  const rel = relative5(outDir, resolve6(candidate));
+  const isPlainFilename = rel !== "" && rel !== ".." && !isAbsolute6(rel) && rel === basename3(rel);
   if (!isPlainFilename)
     throw new InvalidChangeIdError(id);
 }
@@ -16202,9 +16454,9 @@ function writeChangeRecordPair(repoRoot, sortingId, rawRecord, record2, io = NOD
   const checked = sortingIdSchema.safeParse(sortingId);
   if (!checked.success)
     throw new InvalidChangeIdError(sortingId);
-  const outDir = resolve5(repoRoot, CHANGE_RECORD_DIR);
-  const jsonPath = join19(outDir, `${checked.data}.json`);
-  const mdPath = join19(outDir, `${checked.data}.md`);
+  const outDir = resolve6(repoRoot, CHANGE_RECORD_DIR);
+  const jsonPath = join20(outDir, `${checked.data}.json`);
+  const mdPath = join20(outDir, `${checked.data}.md`);
   const mdTmp = `${mdPath}.tmp`;
   for (const candidate of [jsonPath, mdPath, mdTmp]) {
     assertInsideChangeDir(outDir, candidate, sortingId);
@@ -16217,7 +16469,7 @@ function writeChangeRecordPair(repoRoot, sortingId, rawRecord, record2, io = NOD
   }
   const existingJson = readIfPresent(jsonPath);
   if (existingJson === null) {
-    return { kind: "in-the-way", path: existsSync13(jsonPath) ? jsonPath : mdPath };
+    return { kind: "in-the-way", path: existsSync14(jsonPath) ? jsonPath : mdPath };
   }
   if (existingJson !== jsonText)
     return { kind: "in-the-way", path: jsonPath };
@@ -16480,7 +16732,7 @@ function writePairLines(deps, repoRoot, sortingId, found) {
       };
     }
     return {
-      stdout: `[halfcycle] Its record is in ${join20(CHANGE_RECORD_DIR, `${sortingId}.md`)}.
+      stdout: `[halfcycle] Its record is in ${join21(CHANGE_RECORD_DIR, `${sortingId}.md`)}.
 `,
       stderr: "",
       ok: true
@@ -16721,12 +16973,12 @@ function runChange(repoRoot, args2, deps) {
 // dist/shown-record.js
 import { chmodSync as chmodSync3, mkdirSync as mkdirSync11, readFileSync as readFileSync17, renameSync as renameSync3, unlinkSync, writeFileSync as writeFileSync8 } from "node:fs";
 import { platform as platform4 } from "node:os";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function updateShownRecord(engagementId, update, home) {
   let temp = null;
   try {
     const dir = engagementStateDir(engagementId, home);
-    const path = join21(dir, SHOWN_PLANS_FILENAME);
+    const path = join22(dir, SHOWN_PLANS_FILENAME);
     let current;
     try {
       current = parseShownRecord(readFileSync17(path, "utf-8"));
@@ -16736,7 +16988,7 @@ function updateShownRecord(engagementId, update, home) {
     const next = update(current);
     const body = serialiseShownRecord(next);
     mkdirSync11(dir, { recursive: true, mode: 448 });
-    temp = join21(dir, `.${SHOWN_PLANS_FILENAME}.${process.pid}.tmp`);
+    temp = join22(dir, `.${SHOWN_PLANS_FILENAME}.${process.pid}.tmp`);
     writeFileSync8(temp, body, { mode: 384 });
     if (platform4() !== "win32")
       chmodSync3(temp, 384);
@@ -16813,7 +17065,7 @@ function readAndCheckPlan(repoRoot, phase, description, verb) {
   const fileRel = planFileRel(phase);
   let text;
   try {
-    text = readFileSync18(join22(repoRoot, fileRel), "utf-8");
+    text = readFileSync18(join23(repoRoot, fileRel), "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR") {
@@ -16969,7 +17221,7 @@ function removalOwedLines(verb, parts) {
 function redrawLine(repoRoot, phase) {
   let exists;
   try {
-    exists = existsSync14(join22(repoRoot, DIAGRAM_DIR_REL, embedImageName(phaseDiagramBase(phase))));
+    exists = existsSync15(join23(repoRoot, DIAGRAM_DIR_REL, embedImageName(phaseDiagramBase(phase))));
   } catch {
     return null;
   }
@@ -17553,7 +17805,7 @@ function readObserveLine(stdout) {
 function runRunnerChild(binary, args2, credential, repoRoot, readLine, fallback) {
   if (binary instanceof Error)
     return Promise.resolve(fallback);
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     try {
       execFile(process.execPath, [binary, ...args2], {
         cwd: repoRoot,
@@ -17563,10 +17815,10 @@ function runRunnerChild(binary, args2, credential, repoRoot, readLine, fallback)
         windowsHide: true
       }, (err, stdout) => {
         const stopped = err !== null && err.killed === true;
-        resolve9(stopped || typeof stdout !== "string" ? fallback : readLine(stdout));
+        resolve10(stopped || typeof stdout !== "string" ? fallback : readLine(stdout));
       });
     } catch {
-      resolve9(fallback);
+      resolve10(fallback);
     }
   });
 }
@@ -17929,7 +18181,7 @@ var PHASE_MODELS_FILENAME = "phase-models.json";
 var PACING_FOLDER = "pacing";
 function pacingFile(engagementId, name, home) {
   try {
-    return join23(engagementStateDir(engagementId, home), PACING_FOLDER, name);
+    return join24(engagementStateDir(engagementId, home), PACING_FOLDER, name);
   } catch {
     return null;
   }
@@ -18101,7 +18353,7 @@ function readRepoCredential(repoRoot, env = process.env, home) {
   if (pinned !== null)
     assertEngagementId(pinned);
   const fromStore = pinned === null ? null : readEngagementEnv(pinned, home);
-  const looked = pinned === null ? `${join24(repoRoot, ".halfcycle", "bundle.json")} (which names no engagement)` : engagementEnvPath(pinned, home);
+  const looked = pinned === null ? `${join25(repoRoot, ".halfcycle", "bundle.json")} (which names no engagement)` : engagementEnvPath(pinned, home);
   const values = {};
   for (const key of OPEN_PHASE_ENV_KEYS) {
     const value = (env[key] ?? fromStore?.[key] ?? "").trim();
@@ -18118,7 +18370,7 @@ function readRepoCredential(repoRoot, env = process.env, home) {
 }
 function readPinnedEngagementId(repoRoot) {
   try {
-    const pin = JSON.parse(readFileSync20(join24(repoRoot, ".halfcycle", "bundle.json"), "utf-8"));
+    const pin = JSON.parse(readFileSync20(join25(repoRoot, ".halfcycle", "bundle.json"), "utf-8"));
     const id = pin[PIN_ENGAGEMENT_ID_FIELD];
     return typeof id === "string" && id !== "" ? id : null;
   } catch {
@@ -18268,12 +18520,12 @@ async function obtainBuildRecord(credential, repoRoot, phase, io = NODE_RECORD_P
       };
     }
     if (result.kind === "in-the-way") {
-      return { kind: "exists", path: relative5(repoRoot, result.path) };
+      return { kind: "exists", path: relative6(repoRoot, result.path) };
     }
     return {
       kind: "written",
-      jsonPath: relative5(repoRoot, result.jsonPath),
-      mdPath: relative5(repoRoot, result.mdPath),
+      jsonPath: relative6(repoRoot, result.jsonPath),
+      mdPath: relative6(repoRoot, result.mdPath),
       headline: latestCloseHeadline(answer.record),
       stampFailure: clearStampFor(credential.engagementId, phase, home)
     };
@@ -18606,7 +18858,7 @@ async function writeDrawOutcome(repoRoot, deps, outcome, target, warnings, canno
 
 // dist/check-tasks.js
 import { readFileSync as readFileSync21 } from "node:fs";
-import { join as join25, resolve as resolve6 } from "node:path";
+import { join as join26, resolve as resolve7 } from "node:path";
 var CHECK_TASKS_USAGE = `${ownCommand()} check-tasks <phase> [--with-task-list] [--repo <root>]`;
 function parseCheckTasksArgs(argv) {
   const positionals = [];
@@ -18647,7 +18899,7 @@ function issuePlace(rel, path) {
 function readJsonFile(repoRoot, rel, parse) {
   let text;
   try {
-    text = readFileSync21(resolve6(repoRoot, rel), "utf-8");
+    text = readFileSync21(resolve7(repoRoot, rel), "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR")
@@ -18705,7 +18957,7 @@ function readPhasePlanParts(repoRoot, phase, description) {
   const file = planFileRel(phase);
   let text;
   try {
-    text = readFileSync21(join25(repoRoot, file), "utf-8");
+    text = readFileSync21(join26(repoRoot, file), "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR")
@@ -18738,7 +18990,7 @@ function readPlanSpecFiles(repoRoot, plan) {
     const rel = `${SPEC_FOLDER}/${slug}.md`;
     let text;
     try {
-      text = readFileSync21(join25(repoRoot, rel), "utf-8");
+      text = readFileSync21(join26(repoRoot, rel), "utf-8");
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT" || code === "ENOTDIR") {
@@ -18994,8 +19246,8 @@ function runCheckReport(source, head, deps = {}) {
 
 // dist/setup-committed.js
 import { execFileSync as execFileSync7 } from "node:child_process";
-import { existsSync as existsSync15 } from "node:fs";
-import { join as join26 } from "node:path";
+import { existsSync as existsSync16 } from "node:fs";
+import { join as join27 } from "node:path";
 var SETUP_COMMIT_MESSAGE = "Add Halfcycle setup files";
 var SETUP_UNCOMMITTED_LINES = {
   intro: () => "Halfcycle's setup files are not committed, so the copies your agents build in would not have Halfcycle. Nothing was started. Commit them, then run this again:",
@@ -19006,7 +19258,7 @@ function shellWord(path) {
   return /^[A-Za-z0-9._/@+=-]+$/.test(path) ? path : `'${path.replace(/'/g, `'\\''`)}'`;
 }
 function uncommittedSetupFiles(repoRoot) {
-  if (!existsSync15(join26(repoRoot, INSTALL_MANIFEST_REL)))
+  if (!existsSync16(join27(repoRoot, INSTALL_MANIFEST_REL)))
     return [];
   const manifest = readPreviousManifest(repoRoot);
   if (manifest === null)
@@ -19250,13 +19502,13 @@ function proveCouldNotStart(err) {
 function runProveChild(binary, credential, repoRoot, words, deps = {}) {
   const out = deps.stdout ?? process.stdout;
   const err = deps.stderr ?? process.stderr;
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let settled = false;
     const finish = (code) => {
       if (settled)
         return;
       settled = true;
-      resolve9(code);
+      resolve10(code);
     };
     let child;
     try {
@@ -19282,9 +19534,9 @@ function runProveChild(binary, credential, repoRoot, words, deps = {}) {
 }
 
 // dist/uninstall.js
-import { existsSync as existsSync16, lstatSync as lstatSync4, readFileSync as readFileSync23, readdirSync, rmSync as rmSync8, rmdirSync, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync17, lstatSync as lstatSync5, readFileSync as readFileSync23, readdirSync as readdirSync2, rmSync as rmSync9, rmdirSync as rmdirSync2, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { dirname as dirname8, join as join27, relative as relative6, sep as sep2 } from "node:path";
+import { dirname as dirname8, join as join28, relative as relative7, sep as sep3 } from "node:path";
 var REMOVE_CREDENTIAL_FLAG = "--remove-credential";
 function parseUninstallArgs(args2) {
   let removeCredential = false;
@@ -19301,7 +19553,7 @@ function parseUninstallArgs(args2) {
 }
 function lexists(path) {
   try {
-    lstatSync4(path);
+    lstatSync5(path);
     return true;
   } catch {
     return false;
@@ -19319,7 +19571,7 @@ function readMergedJson(targetRepo, rule) {
   const { rel } = rule;
   if (symlinkOnPath(targetRepo, rel))
     return { state: "symlink" };
-  const path = join27(targetRepo, rel);
+  const path = join28(targetRepo, rel);
   if (!lexists(path))
     return { state: "absent" };
   let text;
@@ -19342,8 +19594,8 @@ function readMergedJson(targetRepo, rule) {
 }
 function validate(options, rules) {
   const { targetRepo, removeCredential, home } = options;
-  const manifestPath = join27(targetRepo, INSTALL_MANIFEST_REL);
-  const pinPath = join27(targetRepo, BUNDLE_PIN_REL);
+  const manifestPath = join28(targetRepo, INSTALL_MANIFEST_REL);
+  const pinPath = join28(targetRepo, BUNDLE_PIN_REL);
   if (symlinkOnPath(targetRepo, INSTALL_MANIFEST_REL) || symlinkOnPath(targetRepo, BUNDLE_PIN_REL)) {
     throw new Refusal(`.halfcycle, or a file Halfcycle keeps in it, is a symbolic link here, so nothing was followed and nothing was removed.`);
   }
@@ -19384,7 +19636,7 @@ function validate(options, rules) {
       throw new Refusal(`the project id in ${BUNDLE_PIN_REL} is not a valid Halfcycle project id, so it cannot name a folder on this machine. Nothing was removed, here or under ~/.halfcycle.`);
     }
     if (engagementId !== void 0) {
-      const expectedParent = join27(home ?? homedir7(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME);
+      const expectedParent = join28(home ?? homedir7(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME);
       if (dirname8(engagementStateDir(engagementId, home)) !== expectedParent) {
         throw new Refusal(`the project id in ${BUNDLE_PIN_REL} does not name a folder under ~/.halfcycle/engagements. Nothing was removed.`);
       }
@@ -19410,10 +19662,10 @@ function mergedFileRules(writeSet) {
 function writeBack(targetRepo, rel, current, next, lists, name) {
   if (next === current)
     return;
-  const path = join27(targetRepo, rel);
+  const path = join28(targetRepo, rel);
   try {
     if (next === null) {
-      rmSync8(path);
+      rmSync9(path);
       name(lists.removed, rel, rel);
     } else {
       writeFileSync9(path, next, "utf-8");
@@ -19427,7 +19679,7 @@ function statusLineClaimedFromTree(targetRepo, writeSet) {
   try {
     if (symlinkOnPath(targetRepo, SETTINGS_REL))
       return {};
-    const value = JSON.parse(readFileSync23(join27(targetRepo, SETTINGS_REL), "utf-8"));
+    const value = JSON.parse(readFileSync23(join28(targetRepo, SETTINGS_REL), "utf-8"));
     if (!isPlainObject4(value) || !("statusLine" in value))
       return {};
     const hash = canonicalSha256(value["statusLine"]);
@@ -19440,7 +19692,7 @@ function attributionClaimedFromTree(targetRepo, writeSet) {
   try {
     if (symlinkOnPath(targetRepo, SETTINGS_REL))
       return {};
-    const value = JSON.parse(readFileSync23(join27(targetRepo, SETTINGS_REL), "utf-8"));
+    const value = JSON.parse(readFileSync23(join28(targetRepo, SETTINGS_REL), "utf-8"));
     if (!isPlainObject4(value) || !("attribution" in value))
       return {};
     const hash = canonicalSha256(value["attribution"]);
@@ -19454,7 +19706,7 @@ function noRecord(targetRepo, writeSet) {
   const claim = (rel, header, lines) => {
     let text;
     try {
-      text = symlinkOnPath(targetRepo, rel) ? "" : readFileSync23(join27(targetRepo, rel), "utf-8");
+      text = symlinkOnPath(targetRepo, rel) ? "" : readFileSync23(join28(targetRepo, rel), "utf-8");
     } catch {
       text = "";
     }
@@ -19700,7 +19952,7 @@ function lastOccurrence(text, block) {
 }
 function coveredPathExists(targetRepo, line) {
   const path = line.trim().replace(/^\//, "").replace(/\/$/, "");
-  return path !== "" && lexists(join27(targetRepo, path));
+  return path !== "" && lexists(join28(targetRepo, path));
 }
 function selfBuildMergedFileRules() {
   return {
@@ -19714,10 +19966,10 @@ function removeSelfBuildOwnedFile(targetRepo, rel, lists, name) {
     name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
     return;
   }
-  const abs = join27(targetRepo, rel);
+  const abs = join28(targetRepo, rel);
   let isFile;
   try {
-    isFile = lstatSync4(abs).isFile();
+    isFile = lstatSync5(abs).isFile();
   } catch {
     return;
   }
@@ -19726,7 +19978,7 @@ function removeSelfBuildOwnedFile(targetRepo, rel, lists, name) {
     return;
   }
   try {
-    rmSync8(abs);
+    rmSync9(abs);
     name(lists.removed, rel, rel);
   } catch {
     name(lists.failed, rel, rel);
@@ -19738,14 +19990,14 @@ function removeSelfBuildCrewRoster(targetRepo, lists, name) {
     name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
     return;
   }
-  const abs = join27(targetRepo, rel);
+  const abs = join28(targetRepo, rel);
   let bytes;
   try {
     bytes = readFileSync23(abs);
   } catch {
     return;
   }
-  if (!lstatSync4(abs).isFile()) {
+  if (!lstatSync5(abs).isFile()) {
     name(lists.leftAlone, `${rel} (not a file)`, rel);
     return;
   }
@@ -19754,7 +20006,7 @@ function removeSelfBuildCrewRoster(targetRepo, lists, name) {
     return;
   }
   try {
-    rmSync8(abs);
+    rmSync9(abs);
     name(lists.removed, rel, rel);
   } catch {
     name(lists.failed, rel, rel);
@@ -19765,14 +20017,14 @@ function removeSelfBuildCrewProfile(targetRepo, rel, text, lists, name) {
     name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
     return;
   }
-  const abs = join27(targetRepo, rel);
+  const abs = join28(targetRepo, rel);
   let bytes;
   try {
     bytes = readFileSync23(abs);
   } catch {
     return;
   }
-  if (!lstatSync4(abs).isFile()) {
+  if (!lstatSync5(abs).isFile()) {
     name(lists.leftAlone, `${rel} (not a file)`, rel);
     return;
   }
@@ -19781,7 +20033,7 @@ function removeSelfBuildCrewProfile(targetRepo, rel, text, lists, name) {
     return;
   }
   try {
-    rmSync8(abs);
+    rmSync9(abs);
     name(lists.removed, rel, rel);
   } catch {
     name(lists.failed, rel, rel);
@@ -19790,15 +20042,15 @@ function removeSelfBuildCrewProfile(targetRepo, rel, text, lists, name) {
 function removeSelfBuildEmptyDir(targetRepo, dir, lists, name) {
   if (symlinkOnPath(targetRepo, dir))
     return;
-  const abs = join27(targetRepo, dir);
+  const abs = join28(targetRepo, dir);
   try {
-    if (!lstatSync4(abs).isDirectory() || readdirSync(abs).length > 0)
+    if (!lstatSync5(abs).isDirectory() || readdirSync2(abs).length > 0)
       return;
   } catch {
     return;
   }
   try {
-    rmdirSync(abs);
+    rmdirSync2(abs);
   } catch {
     name(lists.failed, `${dir}/`, dir);
   }
@@ -19824,7 +20076,7 @@ function uninstallSelfBuild(options) {
     throw err;
   }
   const { targetRepo } = options;
-  const pinExisted = lexists(join27(targetRepo, BUNDLE_PIN_REL));
+  const pinExisted = lexists(join28(targetRepo, BUNDLE_PIN_REL));
   const name = (list2, text, _path) => {
     list2.push(text);
   };
@@ -19911,7 +20163,7 @@ function uninstall(options) {
   }
   const serverRemoved = removeOwnServerApproval(targetRepo);
   if (listRemoved || serverRemoved) {
-    if (existsSync16(join27(targetRepo, LOCAL_SETTINGS_REL2))) {
+    if (existsSync17(join28(targetRepo, LOCAL_SETTINGS_REL2))) {
       name(result.restored, LOCAL_SETTINGS_REL2, LOCAL_SETTINGS_REL2);
     } else {
       name(result.removed, LOCAL_SETTINGS_REL2, LOCAL_SETTINGS_REL2);
@@ -19953,7 +20205,7 @@ function uninstall(options) {
   const gitattributes = manifest.gitattributes ?? { created: false, appended: [] };
   trimAppendedFile(targetRepo, gitattributes, deleteWhenEmpty(gitattributes.created), gitattributesRules(writeSet), result, name);
   const foundNothing = result.removed.length + result.restored.length + result.kept.length + result.failed.length === 0 && result.keptIgnoreLines.length === 0;
-  if (checked.manifest === null && !lexists(join27(targetRepo, BUNDLE_PIN_REL)) && foundNothing) {
+  if (checked.manifest === null && !lexists(join28(targetRepo, BUNDLE_PIN_REL)) && foundNothing) {
     return { outcome: "not-installed", exitCode: 0, ...result, credential: nothingToSay };
   }
   const credential = handleCredential(options, checked);
@@ -19961,7 +20213,7 @@ function uninstall(options) {
   if (result.failed.length === 0 && !credentialFailed) {
     removeInstalledFile(targetRepo, BUNDLE_PIN_REL, recorded.get(BUNDLE_PIN_REL), writeSet, result, name);
     try {
-      rmSync8(join27(targetRepo, INSTALL_MANIFEST_REL), { force: true });
+      rmSync9(join28(targetRepo, INSTALL_MANIFEST_REL), { force: true });
       named2.add(INSTALL_MANIFEST_REL);
     } catch {
       name(result.failed, INSTALL_MANIFEST_REL, INSTALL_MANIFEST_REL);
@@ -19996,13 +20248,13 @@ function applyMergedJson(targetRepo, rule, file, deleteWhenEmpty, lists, name, e
     return;
   const empty = Object.keys(value).length === 0 && deleteWhenEmpty;
   writeBack(targetRepo, rel, file.text, empty ? null : inLineEndingOf(file.text, serializeJson(value)), lists, name);
-  if (adopted && lexists(join27(targetRepo, rel))) {
+  if (adopted && lexists(join28(targetRepo, rel))) {
     name(lists.leftAlone, `${rel} (Halfcycle's hooks were taken out. There is no record of this file from before the install, so a permission rule or "$schema" Halfcycle added may still be there \u2014 it cannot be told apart from your own)`, rel);
   }
 }
 function removeCodexConfigBlock(targetRepo, record2, deleteWhenEmpty, lists, name) {
   const rel = CODEX_CONFIG_REL2;
-  const path = join27(targetRepo, rel);
+  const path = join28(targetRepo, rel);
   if (symlinkOnPath(targetRepo, rel)) {
     if (lexists(path))
       name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
@@ -20010,7 +20262,7 @@ function removeCodexConfigBlock(targetRepo, record2, deleteWhenEmpty, lists, nam
   }
   let text;
   try {
-    if (!lstatSync4(path).isFile())
+    if (!lstatSync5(path).isFile())
       return;
     text = readFileSync23(path, "utf-8");
   } catch {
@@ -20047,10 +20299,10 @@ function removeInstalledFile(targetRepo, path, entry, writeSet, lists, name) {
     name(lists.leftAlone, `${path} (a symbolic link, or inside one \u2014 not followed)`, path);
     return;
   }
-  const abs = join27(targetRepo, path);
+  const abs = join28(targetRepo, path);
   let isFile;
   try {
-    isFile = lstatSync4(abs).isFile();
+    isFile = lstatSync5(abs).isFile();
   } catch {
     return;
   }
@@ -20072,7 +20324,7 @@ function removeInstalledFile(targetRepo, path, entry, writeSet, lists, name) {
     }
   }
   try {
-    rmSync8(abs);
+    rmSync9(abs);
     name(lists.removed, path, path);
   } catch {
     name(lists.failed, path, path);
@@ -20081,15 +20333,15 @@ function removeInstalledFile(targetRepo, path, entry, writeSet, lists, name) {
 function removeEmptyDir(targetRepo, dir, writeSet, lists, name) {
   if (!writeSet.dirs.has(dir) || symlinkOnPath(targetRepo, dir))
     return;
-  const abs = join27(targetRepo, dir);
+  const abs = join28(targetRepo, dir);
   try {
-    if (!lstatSync4(abs).isDirectory() || readdirSync(abs).length > 0)
+    if (!lstatSync5(abs).isDirectory() || readdirSync2(abs).length > 0)
       return;
   } catch {
     return;
   }
   try {
-    rmdirSync(abs);
+    rmdirSync2(abs);
   } catch {
     name(lists.failed, `${dir}/`, dir);
   }
@@ -20100,7 +20352,7 @@ function trimAppendedFile(targetRepo, rec, deleteWhenEmpty, rules, lists, name)
     name(lists.leftAlone, `${rel} (a symbolic link \u2014 not followed)`, rel);
     return [];
   }
-  const path = join27(targetRepo, rel);
+  const path = join28(targetRepo, rel);
   let before;
   try {
     before = readFileSync23(path, "utf-8");
@@ -20131,12 +20383,12 @@ function handleCredential(options, checked) {
   if (!lexists(dir))
     return { kind: "not-held", dir };
   try {
-    if (lstatSync4(dir).isSymbolicLink())
+    if (lstatSync5(dir).isSymbolicLink())
       return { kind: "failed", dir, reason: "it is a symbolic link" };
-    rmSync8(engagementEnvPath(engagementId, home), { force: true });
-    rmSync8(notThisAccountMarkerPath(engagementId, home), { force: true });
-    if (readdirSync(dir).length === 0)
-      rmdirSync(dir);
+    rmSync9(engagementEnvPath(engagementId, home), { force: true });
+    rmSync9(notThisAccountMarkerPath(engagementId, home), { force: true });
+    if (readdirSync2(dir).length === 0)
+      rmdirSync2(dir);
   } catch (err) {
     return { kind: "failed", dir, reason: err instanceof Error ? err.message : String(err) };
   }
@@ -20147,16 +20399,16 @@ function filesUnder(root, rel) {
   const walk = (dirRel) => {
     let names;
     try {
-      if (!lstatSync4(join27(root, dirRel)).isDirectory())
+      if (!lstatSync5(join28(root, dirRel)).isDirectory())
         return;
-      names = readdirSync(join27(root, dirRel));
+      names = readdirSync2(join28(root, dirRel));
     } catch {
       return;
     }
     for (const entry of names.sort()) {
       const childRel = `${dirRel}/${entry}`;
       try {
-        if (lstatSync4(join27(root, childRel)).isDirectory())
+        if (lstatSync5(join28(root, childRel)).isDirectory())
           walk(childRel);
         else
           out.push(childRel);
@@ -20170,9 +20422,9 @@ function filesUnder(root, rel) {
 }
 function shownPath(path, home) {
   const base = home ?? homedir7();
-  const rel = relative6(base, path);
-  const under = rel !== "" && !rel.startsWith("..") && !rel.startsWith(sep2);
-  return `${under ? `~/${rel.split(sep2).join("/")}` : path}/`;
+  const rel = relative7(base, path);
+  const under = rel !== "" && !rel.startsWith("..") && !rel.startsWith(sep3);
+  return `${under ? `~/${rel.split(sep3).join("/")}` : path}/`;
 }
 function renderUninstallReport(result, home) {
   if (result.outcome === "refused") {
@@ -20228,7 +20480,7 @@ function renderUninstallReport(result, home) {
 }
 
 // dist/banner-facts.js
-import { basename as basename4, resolve as resolve7 } from "node:path";
+import { basename as basename4, resolve as resolve8 } from "node:path";
 var BRAND_URL = "halfcycle.ai";
 var TAGLINE = [
   "Fewer cycles.",
@@ -20270,15 +20522,44 @@ var REAL_PROBES = {
       return void 0;
     }
   },
-  websiteHost: (env) => {
+  websiteHost: (env, dir) => {
     try {
-      const resolved = resolveControlOrigin(env);
-      return resolved.source === "default" ? BRAND_URL : new URL(resolved.origin).host;
+      return serviceHost4(env, dir);
     } catch {
       return void 0;
     }
   }
 };
+function serviceHost4(env, projectDir, home) {
+  const fromEnv = resolveControlOrigin(env);
+  const origin = fromEnv.source === "environment" ? fromEnv.origin : storedServiceOrigin(projectDir, home) ?? fromEnv.origin;
+  if (origin === DEFAULT_CONTROL_ORIGIN)
+    return BRAND_URL;
+  try {
+    return new URL(origin).host || BRAND_URL;
+  } catch {
+    return BRAND_URL;
+  }
+}
+function storedServiceOrigin(projectDir, home) {
+  let engagementId;
+  try {
+    engagementId = readBundlePin(projectDir)?.engagementId;
+  } catch {
+    return void 0;
+  }
+  if (typeof engagementId !== "string" || engagementId === "")
+    return void 0;
+  try {
+    const stored = readEngagementEnv(engagementId, home)?.["HALFCYCLE_SERVICE_URL"];
+    if (stored === void 0)
+      return void 0;
+    const resolved = resolveControlOrigin({ HALFCYCLE_SERVICE_URL: stored });
+    return resolved.source === "environment" ? resolved.origin : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function fact(label, value, narrow) {
   if (value === void 0 || value === "")
     return void 0;
@@ -20304,14 +20585,14 @@ function openingBannerContent(projectDir, env = process.env, probes = REAL_PROBE
     // `Website`, NOT `Plane` — see this function's docblock. (No issue number here:
     // a comment beside a property survives into the published entry, unlike a
     // leading docblock, which esbuild drops.)
-    fact("Website", probes.websiteHost(env))
+    fact("Website", probes.websiteHost(env, projectDir))
   ].filter((f) => f !== void 0);
   return {
     head: `halfcycle@${name}`,
     facts,
     tag: TAGLINE,
     tagNarrow: TAGLINE_NARROW,
-    url: probes.websiteHost(env) ?? BRAND_URL,
+    url: probes.websiteHost(env, projectDir) ?? BRAND_URL,
     // `''` when even this package's own manifest could not be read. The one-line cut
     // drops the whole `vX.Y.Z` clause in that case rather than printing a bare `v`.
     version: version ?? ""
@@ -20319,7 +20600,7 @@ function openingBannerContent(projectDir, env = process.env, probes = REAL_PROBE
 }
 function safeBasename(dir) {
   try {
-    const name = basename4(resolve7(dir)).trim();
+    const name = basename4(resolve8(dir)).trim();
     return name === "" ? "project" : name;
   } catch {
     return "project";
@@ -20661,7 +20942,7 @@ async function runCrew(repoRoot, deps) {
 // dist/pace.js
 import { spawn as spawn3 } from "node:child_process";
 import { readFileSync as readFileSync24 } from "node:fs";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 var PACE_USAGE = `${ownCommand()} pace [--agent claude-code|codex] [--start <phase> [--agents <n>]] [--repo <root>]`;
 function parsePaceArgs(argv) {
   let repoRoot;
@@ -20726,13 +21007,13 @@ function runPaceChild(binary, credential, repoRoot, args2, deps = {}) {
   if (binary instanceof Error)
     return Promise.resolve({ code: 1, stdout: "" });
   const err = deps.stderr ?? process.stderr;
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let settled = false;
     const done = (output) => {
       if (settled)
         return;
       settled = true;
-      resolve9(output);
+      resolve10(output);
     };
     try {
       const child = spawn3(process.execPath, [binary, "pace", ...args2], {
@@ -20775,7 +21056,7 @@ function notPacedLine(reason) {
 }
 function readPromptScript(repoRoot) {
   try {
-    return readFileSync24(join28(repoRoot, ".claude", "hooks", "user-prompt-scope.sh"), "utf-8");
+    return readFileSync24(join29(repoRoot, ".claude", "hooks", "user-prompt-scope.sh"), "utf-8");
   } catch {
     return null;
   }
@@ -20835,7 +21116,7 @@ async function runPace(repoRoot, start, deps, agent = null) {
 
 // dist/route.js
 import { readFileSync as readFileSync25 } from "node:fs";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 var ROUTE_USAGE = `${ownCommand()} route <phase> <task> [--agent claude-code|codex] [--repo <root>]`;
 var ROUTE_WORK_READ_DEADLINE_MS = 5e3;
 function parseRouteArgs(argv) {
@@ -20878,7 +21159,7 @@ function parseRouteArgs(argv) {
   return { ok: true, phase: positionals[0], task: positionals[1], agent: agent ?? "claude-code", repoRoot };
 }
 function routingPath(engagementId, home) {
-  return join29(engagementStateDir(engagementId, home), ROUTING_FILENAME);
+  return join30(engagementStateDir(engagementId, home), ROUTING_FILENAME);
 }
 function readCheapStarted(path, phase) {
   try {
@@ -20901,8 +21182,8 @@ function lastTierOf(attempts) {
 }
 async function readWorkInTime(deps, credential, phase) {
   let timer;
-  const late = new Promise((resolve9) => {
-    timer = setTimeout(() => resolve9({ kind: "unreachable" }), ROUTE_WORK_READ_DEADLINE_MS);
+  const late = new Promise((resolve10) => {
+    timer = setTimeout(() => resolve10({ kind: "unreachable" }), ROUTE_WORK_READ_DEADLINE_MS);
     timer.unref?.();
   });
   try {
@@ -20968,10 +21249,10 @@ async function runRoute(repoRoot, phase, taskId, agent, deps) {
 }
 
 // dist/restore.js
-import { spawnSync as spawnSync3 } from "node:child_process";
-import { closeSync as closeSync3, fchmodSync, lstatSync as lstatSync5, mkdirSync as mkdirSync12, openSync as openSync3, readdirSync as readdirSync2, readFileSync as readFileSync26, readlinkSync, realpathSync as realpathSync7, rmSync as rmSync9, symlinkSync, writeSync as writeSync3 } from "node:fs";
+import { spawnSync as spawnSync4 } from "node:child_process";
+import { closeSync as closeSync3, fchmodSync, lstatSync as lstatSync6, mkdirSync as mkdirSync12, openSync as openSync3, readdirSync as readdirSync3, readFileSync as readFileSync26, readlinkSync, realpathSync as realpathSync8, rmSync as rmSync10, symlinkSync, writeSync as writeSync3 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join30, resolve as resolve8 } from "node:path";
+import { join as join31, resolve as resolve9 } from "node:path";
 var RESTORE_USAGE = `${ownCommand()} restore [<id>]`;
 function parseRestoreArgs(rest) {
   if (rest.length > 1)
@@ -20984,7 +21265,7 @@ function parseRestoreArgs(rest) {
 var LIST_COMMAND = `${ownCommand()} restore`;
 function runRestore(cwd, id, options = {}) {
   const now = options.now ?? Date.now;
-  const top = git2(cwd, ["rev-parse", "--show-toplevel"]);
+  const top = git3(cwd, ["rev-parse", "--show-toplevel"]);
   if (!top.ok || top.text.trim() === "") {
     return refused2("This folder is not in a project kept with git, so Halfcycle has saved nothing here to bring back.");
   }
@@ -20993,7 +21274,7 @@ function runRestore(cwd, id, options = {}) {
   if (engagementId === null) {
     return refused2(`Halfcycle is not set up in this project, so it has saved nothing here. To set it up, run: ${ownCommand()}`);
   }
-  const folder2 = join30(options.home ?? homedir8(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, SAVED_DIR_NAME);
+  const folder2 = join31(options.home ?? homedir8(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, SAVED_DIR_NAME);
   const refs = savedRefs(root);
   if (refs === null)
     return refused2("Halfcycle could not read the saved copies in this project, so nothing was put back.");
@@ -21069,7 +21350,7 @@ function restoreOne(root, folder2, refs, rawId) {
     if (p.keptIn === "commit")
       fromCommit.push(p.path);
     else
-      restoreCopy(root, join30(folder2, id), p.path, out);
+      restoreCopy(root, join31(folder2, id), p.path, out);
   }
   if (fromCommit.length > 0)
     restoreFromCommit(root, ref, fromCommit, out);
@@ -21097,7 +21378,7 @@ function makeFolders(root, rel) {
   const segments = rel.split("/");
   let at = root;
   for (let i = 0; i < segments.length - 1; i++) {
-    at = join30(at, segments[i]);
+    at = join31(at, segments[i]);
     const shown2 = segments.slice(0, i + 1).join("/");
     let st = lstatOrNull3(at);
     if (st === null) {
@@ -21117,7 +21398,7 @@ function makeFolders(root, rel) {
   return null;
 }
 function place(root, rel, content, out) {
-  const abs = join30(root, rel);
+  const abs = join31(root, rel);
   const there = lstatOrNull3(abs);
   if (there !== null) {
     if (sameAs(abs, there, content))
@@ -21165,14 +21446,14 @@ function restoreCopy(root, saveDir, rel, out) {
   let at = saveDir;
   const chain = [SAVED_COPIES_DIR_NAME, ...segments];
   for (let i = 0; i < chain.length - 1; i++) {
-    at = join30(at, chain[i]);
+    at = join31(at, chain[i]);
     const st2 = lstatOrNull3(at);
     if (st2 === null || st2.isSymbolicLink() || !st2.isDirectory()) {
       out.left.push(`${rel}: the saved copy does not hold it`);
       return;
     }
   }
-  const src = join30(at, chain[chain.length - 1]);
+  const src = join31(at, chain[chain.length - 1]);
   const st = lstatOrNull3(src);
   try {
     if (st !== null && st.isSymbolicLink())
@@ -21187,7 +21468,7 @@ function restoreFromCommit(root, ref, rels, out) {
   const entries = /* @__PURE__ */ new Map();
   for (let i = 0; i < rels.length; i += 200) {
     const chunk = rels.slice(i, i + 200);
-    const listed = git2(root, ["--literal-pathspecs", "ls-tree", "-z", "--full-tree", `${ref}^{commit}`, "--", ...chunk]);
+    const listed = git3(root, ["--literal-pathspecs", "ls-tree", "-z", "--full-tree", `${ref}^{commit}`, "--", ...chunk]);
     if (!listed.ok) {
       for (const rel of rels)
         out.left.push(`${rel}: the saved copy could not be read`);
@@ -21218,7 +21499,7 @@ function restoreFromCommit(root, ref, rels, out) {
   }
 }
 function readBlobs(root, objects) {
-  const r = spawnSync3("git", ["cat-file", "--batch"], {
+  const r = spawnSync4("git", ["cat-file", "--batch"], {
     cwd: root,
     env: gitEnvForNamedRepo(),
     input: `${objects.join("\n")}
@@ -21246,12 +21527,12 @@ function readBlobs(root, objects) {
 function restoreLines(root, ref, saved, out) {
   if (saved.branches.length === 0)
     return;
-  const parents = git2(root, ["rev-list", "--parents", "-n", "1", `${ref}^{commit}`]);
+  const parents = git3(root, ["rev-list", "--parents", "-n", "1", `${ref}^{commit}`]);
   const held = new Set(parents.ok ? parents.text.trim().split(/\s+/).slice(1) : []);
   for (const b of saved.branches) {
     const shown2 = `the line of work "${b.name}"`;
     const full = `refs/heads/${b.name}`;
-    if (!git2(root, ["check-ref-format", full]).ok) {
+    if (!git3(root, ["check-ref-format", full]).ok) {
       out.left.push(`${shown2}: its name cannot be used`);
       continue;
     }
@@ -21259,7 +21540,7 @@ function restoreLines(root, ref, saved, out) {
       out.left.push(`${shown2}: the saved copy does not hold its commit`);
       continue;
     }
-    const now = git2(root, ["rev-parse", "--verify", "--quiet", `${full}^{commit}`]);
+    const now = git3(root, ["rev-parse", "--verify", "--quiet", `${full}^{commit}`]);
     if (now.ok && now.text.trim() !== "") {
       if (now.text.trim() === b.commit)
         out.already.push(`${shown2}, at its saved commit ${b.commit.slice(0, 12)}`);
@@ -21267,7 +21548,7 @@ function restoreLines(root, ref, saved, out) {
         out.left.push(`${shown2}: one with this name exists now; rename it and run this again to bring back the saved one`);
       continue;
     }
-    const made = git2(root, ["update-ref", "--no-deref", full, b.commit, ""]);
+    const made = git3(root, ["update-ref", "--no-deref", full, b.commit, ""]);
     if (made.ok)
       out.back.push(`${shown2}, at its saved commit ${b.commit.slice(0, 12)}`);
     else
@@ -21276,14 +21557,14 @@ function restoreLines(root, ref, saved, out) {
 }
 function pinnedEngagement(root) {
   try {
-    const pin = JSON.parse(readFileSync26(join30(root, BUNDLE_PIN_REL), "utf-8"));
+    const pin = JSON.parse(readFileSync26(join31(root, BUNDLE_PIN_REL), "utf-8"));
     return isEngagementId(pin.engagementId) ? pin.engagementId : null;
   } catch {
     return null;
   }
 }
 function savedRefs(root) {
-  const listed = git2(root, ["for-each-ref", "--format=%(refname)%00%(committerdate:unix)", SAVED_REF_PREFIX]);
+  const listed = git3(root, ["for-each-ref", "--format=%(refname)%00%(committerdate:unix)", SAVED_REF_PREFIX]);
   if (!listed.ok)
     return null;
   const refs = /* @__PURE__ */ new Map();
@@ -21298,11 +21579,11 @@ function savedRefs(root) {
   return refs;
 }
 function readSaved(folder2, id) {
-  const dir = join30(folder2, id);
+  const dir = join31(folder2, id);
   const st = lstatOrNull3(dir);
   if (st === null || !st.isDirectory())
     return null;
-  const file = join30(dir, SAVED_FILE_NAME);
+  const file = join31(dir, SAVED_FILE_NAME);
   const fst = lstatOrNull3(file);
   if (fst === null || !fst.isFile())
     return null;
@@ -21315,11 +21596,11 @@ function readSaved(folder2, id) {
 }
 function pruneAtRestore(root, folder2, refs, now) {
   try {
-    const common = git2(root, ["rev-parse", "--git-common-dir"]);
-    const repository = common.ok && common.text.trim() !== "" ? realOrSelf(resolve8(root, common.text.trim())) : null;
+    const common = git3(root, ["rev-parse", "--git-common-dir"]);
+    const repository = common.ok && common.text.trim() !== "" ? realOrSelf(resolve9(root, common.text.trim())) : null;
     let names = [];
     try {
-      names = readdirSync2(folder2);
+      names = readdirSync3(folder2);
     } catch {
       names = [];
     }
@@ -21328,7 +21609,7 @@ function pruneAtRestore(root, folder2, refs, now) {
       if (!savedIdSchema.safeParse(id).success)
         continue;
       here.add(id);
-      const dir = join30(folder2, id);
+      const dir = join31(folder2, id);
       const st = lstatOrNull3(dir);
       const answer = savedPruneAnswer({
         refMadeAt: refs.get(id) ?? null,
@@ -21336,11 +21617,11 @@ function pruneAtRestore(root, folder2, refs, now) {
         folderRepository: markedRepository(dir)
       }, { repository, now });
       if (answer === "remove-folder")
-        rmSync9(dir, { recursive: true, force: true });
-      else if (answer === "remove-ref-then-folder" && git2(root, ["update-ref", "-d", savedRefOf(id)]).ok) {
+        rmSync10(dir, { recursive: true, force: true });
+      else if (answer === "remove-ref-then-folder" && git3(root, ["update-ref", "-d", savedRefOf(id)]).ok) {
         refs.delete(id);
-        rmSync9(dir, { recursive: true, force: true });
-      } else if (answer === "remove-ref" && git2(root, ["update-ref", "-d", savedRefOf(id)]).ok) {
+        rmSync10(dir, { recursive: true, force: true });
+      } else if (answer === "remove-ref" && git3(root, ["update-ref", "-d", savedRefOf(id)]).ok) {
         refs.delete(id);
       }
     }
@@ -21348,7 +21629,7 @@ function pruneAtRestore(root, folder2, refs, now) {
       if (here.has(id))
         continue;
       const answer = savedPruneAnswer({ refMadeAt: madeAt, folderChangedAt: null, folderRepository: null }, { repository, now });
-      if (answer === "remove-ref" && git2(root, ["update-ref", "-d", savedRefOf(id)]).ok)
+      if (answer === "remove-ref" && git3(root, ["update-ref", "-d", savedRefOf(id)]).ok)
         refs.delete(id);
     }
   } catch {
@@ -21356,15 +21637,15 @@ function pruneAtRestore(root, folder2, refs, now) {
 }
 function markedRepository(dir) {
   try {
-    const text = readFileSync26(join30(dir, SAVED_REPOSITORY_FILE_NAME), "utf-8").trim();
+    const text = readFileSync26(join31(dir, SAVED_REPOSITORY_FILE_NAME), "utf-8").trim();
     return text === "" ? null : text;
   } catch {
     return null;
   }
 }
-function git2(cwd, args2) {
+function git3(cwd, args2) {
   try {
-    const r = spawnSync3("git", args2, { cwd, encoding: "utf-8", env: gitEnvForNamedRepo(), maxBuffer: 64 * 1024 * 1024 });
+    const r = spawnSync4("git", args2, { cwd, encoding: "utf-8", env: gitEnvForNamedRepo(), maxBuffer: 64 * 1024 * 1024 });
     return r.status === 0 ? { ok: true, text: r.stdout ?? "" } : { ok: false };
   } catch {
     return { ok: false };
@@ -21372,23 +21653,23 @@ function git2(cwd, args2) {
 }
 function lstatOrNull3(p) {
   try {
-    return lstatSync5(p);
+    return lstatSync6(p);
   } catch {
     return null;
   }
 }
 function realOrSelf(p) {
   try {
-    return realpathSync7(p);
+    return realpathSync8(p);
   } catch {
     return p;
   }
 }
 
 // dist/request-shapes-verb.js
-import { chmodSync as chmodSync4, existsSync as existsSync17, mkdirSync as mkdirSync13, readFileSync as readFileSync27, rmSync as rmSync10, writeFileSync as writeFileSync10 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync18, mkdirSync as mkdirSync13, readFileSync as readFileSync27, rmSync as rmSync11, writeFileSync as writeFileSync10 } from "node:fs";
 import { homedir as homedir9, platform as platform5 } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 var REQUEST_SHAPES_USAGE = `${ownCommand()} request-shapes on|off|show|clear`;
 var REQUEST_SHAPES_FORMS = ["on", "off", "show", "clear"];
 var REQUEST_SHAPES_ON_LINE = "Halfcycle will write down the shape of every request this computer sends to it, never what is in them, until you run request-shapes off.";
@@ -21433,7 +21714,7 @@ function formatLine(line) {
 function showLog(logPath2) {
   let text = "";
   try {
-    text = existsSync17(logPath2) ? readFileSync27(logPath2, "utf-8") : "";
+    text = existsSync18(logPath2) ? readFileSync27(logPath2, "utf-8") : "";
   } catch {
     text = "";
   }
@@ -21451,9 +21732,9 @@ function ownerOnly(path, mode) {
     chmodSync4(path, mode);
 }
 function runRequestShapes(form, home = homedir9()) {
-  const folder2 = join31(home, HALFCYCLE_DIR_NAME, REQUEST_SHAPES_DIR_NAME);
-  const switchPath = join31(folder2, REQUEST_SHAPES_SWITCH_FILENAME);
-  const logPath2 = join31(folder2, REQUEST_SHAPES_LOG_FILENAME);
+  const folder2 = join32(home, HALFCYCLE_DIR_NAME, REQUEST_SHAPES_DIR_NAME);
+  const switchPath = join32(folder2, REQUEST_SHAPES_SWITCH_FILENAME);
+  const logPath2 = join32(folder2, REQUEST_SHAPES_LOG_FILENAME);
   try {
     switch (form) {
       case "on":
@@ -21464,13 +21745,13 @@ function runRequestShapes(form, home = homedir9()) {
         return { stdout: `${REQUEST_SHAPES_ON_LINE}
 `, stderr: "", exitCode: 0 };
       case "off":
-        rmSync10(switchPath, { force: true });
+        rmSync11(switchPath, { force: true });
         return { stdout: `${REQUEST_SHAPES_OFF_LINE}
 `, stderr: "", exitCode: 0 };
       case "show":
         return { stdout: showLog(logPath2), stderr: "", exitCode: 0 };
       case "clear":
-        if (existsSync17(logPath2)) {
+        if (existsSync18(logPath2)) {
           writeFileSync10(logPath2, "", { mode: 384 });
           ownerOnly(logPath2, 384);
         }
@@ -21779,7 +22060,7 @@ ${USAGE}`);
   if (installArm) {
     const engagementIdArg = positionals[1];
     const engagementTypeRaw = positionals[2] ?? "client";
-    if (!existsSync18(targetRepo)) {
+    if (!existsSync19(targetRepo)) {
       process.stderr.write(`${folderMissingRefusal(targetRepo)}
 `);
       process.exit(1);
@@ -22187,6 +22468,13 @@ ${USAGE}`);
       const obtained = await obtainBuildRecord(credential, repoRoot, phaseArg);
       if (obtained.kind === "written") {
         process.stdout.write(writtenLines(obtained));
+        const stamped = readEngagementEnv(credential.engagementId)?.[PHASE_STAMP_ENV_KEY]?.trim();
+        if (stamped === void 0 || stamped === "" || stamped === phaseArg) {
+          const tidied = tidyWorkerCopies(repoRoot);
+          if (tidied.message !== void 0)
+            process.stdout.write(`${tidied.message}
+`);
+        }
         if (obtained.stampFailure) {
           process.stderr.write(`halfcycle build-record: the record was written, but this machine's record of the open phase could not be cleared: ${obtained.stampFailure.reason}
 halfcycle build-record: until ${obtained.stampFailure.path} can be written, the checks run on this computer are still filed under the phase that closed.