halfcycle 0.3.34 → 0.3.36

package/dist/bin.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // dist/bin.js
-import { execFileSync as execFileSync5 } from "node:child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync10, statSync } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync10, realpathSync, statSync } from "node:fs";
+import { homedir as homedir3 } from "node:os";
 import { join as join10 } from "node:path";
 
 // dist/install.js
@@ -35,6 +35,8 @@ var ENGAGEMENTS_DIR_NAME = "engagements";
 var ENGAGEMENT_ENV_FILENAME = "env";
 var NOT_THIS_ACCOUNT_MARKER_FILENAME = "not-this-account";
 var ACCOUNT_STORE_FILENAME = "account.json";
+var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
+var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var ENGAGEMENT_ID_PATTERN = "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
 var ENGAGEMENT_ID_SHAPE = new RegExp(ENGAGEMENT_ID_PATTERN);
 function isEngagementId(value) {
@@ -1218,6 +1220,7 @@ var ciTokenExchangeResponseSchema = z10.object({
   expiresAt: utcIso8601,
   engagementId: z10.string()
 }).strict();
+var SWITCH_ACCOUNT_ANSWER = 'answer "s" when asked';
 
 // ../events/dist/phase-record.js
 import { z as z11 } from "zod";
@@ -1322,7 +1325,6 @@ function forgetStoredCredential(serviceUrl, home) {
 var ENGAGEMENTS_DIR = ENGAGEMENTS_DIR_NAME;
 var ENV_FILENAME = ENGAGEMENT_ENV_FILENAME;
 var HALFCYCLE_DIR = HALFCYCLE_DIR_NAME;
-var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var InvalidEngagementIdError = class extends Error {
   constructor(engagementId) {
     const shown = JSON.stringify(engagementId.length > 80 ? `${engagementId.slice(0, 80)}\u2026` : engagementId);
@@ -1640,6 +1642,15 @@ function bool(value, field) {
     throw new UnreadableManifestError(`"${field}" is not true or false`);
   return value;
 }
+function appendedTextRecord(value, field) {
+  if (!isRecord(value))
+    throw new UnreadableManifestError(`"${field}" is not an object`);
+  onlyKeys(value, ["created", "appended"], `"${field}"`);
+  return {
+    created: bool(value["created"], `${field}.created`),
+    appended: stringArray(value["appended"], `${field}.appended`)
+  };
+}
 function onlyKeys(value, allowed, where) {
   const extra = Object.keys(value).filter((k) => !allowed.includes(k));
   if (extra.length > 0)
@@ -1654,7 +1665,7 @@ function parseManifest(text) {
   }
   if (!isRecord(raw))
     throw new UnreadableManifestError("it is not a JSON object");
-  onlyKeys(raw, ["format", "files", "createdDirs", "leftAlone", "settings", "mcp", "gitignore"], "the manifest");
+  onlyKeys(raw, ["format", "files", "createdDirs", "leftAlone", "settings", "mcp", "gitignore", "gitattributes"], "the manifest");
   if (raw["format"] !== INSTALL_MANIFEST_FORMAT) {
     throw new UnreadableManifestError(`its format is not ${INSTALL_MANIFEST_FORMAT}`);
   }
@@ -1715,14 +1726,10 @@ function parseManifest(text) {
       ...typeof m["entrySha256"] === "string" ? { entrySha256: m["entrySha256"] } : {}
     };
   }
-  const g = raw["gitignore"];
-  if (!isRecord(g))
+  if (raw["gitignore"] === void 0)
     throw new UnreadableManifestError('"gitignore" is missing');
-  onlyKeys(g, ["created", "appended"], '"gitignore"');
-  const gitignore = {
-    created: bool(g["created"], "gitignore.created"),
-    appended: stringArray(g["appended"], "gitignore.appended")
-  };
+  const gitignore = appendedTextRecord(raw["gitignore"], "gitignore");
+  const gitattributes = raw["gitattributes"] === void 0 ? void 0 : appendedTextRecord(raw["gitattributes"], "gitattributes");
   const paths = files.map((f) => f.path);
   if (new Set(paths).size !== paths.length)
     throw new UnreadableManifestError('"files" names a path twice');
@@ -1737,7 +1744,8 @@ function parseManifest(text) {
     leftAlone,
     settings,
     ...mcp !== void 0 ? { mcp } : {},
-    gitignore
+    gitignore,
+    ...gitattributes !== void 0 ? { gitattributes } : {}
   };
 }
 function startManifest(previous, isMember, isMemberDir) {
@@ -1753,12 +1761,16 @@ function startManifest(previous, isMember, isMemberDir) {
     createdDirs: new Set((previous?.createdDirs ?? []).filter(isMemberDir)),
     settings: previous?.settings,
     mcp: previous?.mcp,
-    gitignore: previous?.gitignore
+    gitignore: previous?.gitignore,
+    gitattributes: previous?.gitattributes
   };
 }
 function recordInstalledFile(draft, path, bytes) {
   draft.files.set(path, { path, sha256: sha256Hex(bytes) });
 }
+function recordRemovedFile(draft, path) {
+  draft.files.delete(path);
+}
 function recordPerMachineFile(draft, path) {
   draft.files.set(path, { path, perMachine: true });
 }
@@ -1801,8 +1813,15 @@ function recordMcp(draft, observed) {
   };
 }
 function recordGitignore(draft, created, appended) {
-  const prev = draft.gitignore;
-  draft.gitignore = {
+  draft.gitignore = carryAppended(draft.gitignore, created, appended);
+}
+function recordGitattributes(draft, created, appended) {
+  if (draft.gitattributes === void 0 && !created && appended.every((a) => a === ""))
+    return;
+  draft.gitattributes = carryAppended(draft.gitattributes, created, appended);
+}
+function carryAppended(prev, created, appended) {
+  return {
     created: prev?.created ?? created,
     appended: [...prev?.appended ?? [], ...appended.filter((a) => a !== "")]
   };
@@ -1826,7 +1845,8 @@ function finishManifest(draft) {
       denyCreated: false
     },
     ...draft.mcp !== void 0 ? { mcp: draft.mcp } : {},
-    gitignore: draft.gitignore ?? { created: false, appended: [] }
+    gitignore: draft.gitignore ?? { created: false, appended: [] },
+    ...draft.gitattributes !== void 0 ? { gitattributes: draft.gitattributes } : {}
   };
 }
 function union(a, b) {
@@ -1977,11 +1997,12 @@ var WRITE_ALLOWLIST = [
   ".claude/hooks",
   ".claude/settings.json",
   ".halfcycle",
-  ".halfcycle/bundle.json",
+  BUNDLE_PIN_REL,
   ".halfcycle/bin",
   "docs/build-records",
   "test/fixtures/captured",
   ".mcp.json",
+  ".gitattributes",
   ZONE_B_DIR
 ];
 function isAllowlisted(targetRelPath) {
@@ -1991,15 +2012,16 @@ function isAllowlisted(targetRelPath) {
     return normalised === p || normalised.startsWith(p + "/");
   });
 }
-var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
 var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
 var CREW_ROSTER_REL = ".halfcycle/crew.json";
 var CAPTURED_INDEX_REL = "test/fixtures/captured/manifest.json";
 var GITIGNORE_REL = ".gitignore";
+var GITATTRIBUTES_REL = ".gitattributes";
 function commandStubRel(name) {
   return `.claude/commands/${name}.md`;
 }
-var RETIRED_WRITE_SET_FILES = [];
+var RETIRED_MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
+var RETIRED_WRITE_SET_FILES = [RETIRED_MCP_HEADERS_HELPER_REL];
 var RETIRED_DENY_PATTERNS = [];
 function closedWriteSet() {
   const files = /* @__PURE__ */ new Set([
@@ -2014,7 +2036,7 @@ function closedWriteSet() {
     INSTALL_MANIFEST_REL,
     ...RETIRED_WRITE_SET_FILES
   ]);
-  const merged = /* @__PURE__ */ new Set([SETTINGS_REL, MCP_REGISTRATION_REL, GITIGNORE_REL]);
+  const merged = /* @__PURE__ */ new Set([SETTINGS_REL, MCP_REGISTRATION_REL, GITIGNORE_REL, GITATTRIBUTES_REL]);
   const dirs = /* @__PURE__ */ new Set();
   for (const path of [...files, ...merged]) {
     for (let dir = posix.dirname(path); dir !== "."; dir = posix.dirname(dir))
@@ -2028,7 +2050,11 @@ function closedWriteSet() {
     ownedDirs,
     hookCommands: new Set(HALFCYCLE_HOOK_COMMANDS),
     denyRuleSha256: new Set([...DENY_PATTERNS, ...RETIRED_DENY_PATTERNS].map((rule) => sha256Hex(rule))),
-    gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL])
+    gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL]),
+    gitattributesLines: /* @__PURE__ */ new Set([
+      GITATTRIBUTES_HEADER,
+      ...lfRules([...Object.keys(OWNED_GENERATED_HEADERS), ...RETIRED_WRITE_SET_FILES])
+    ])
   };
 }
 function readPreviousManifest(targetRepo) {
@@ -2092,15 +2118,19 @@ function recordMcpAdoptionOnly(draft, existingText) {
 }
 function recordGitignoreReconcile(draft, before, after) {
   const adopted = draft.gitignore === void 0 && before !== null ? adoptOlderGitignoreBlock(before) : "";
-  let appended = "";
-  if (after !== null && after !== before) {
-    if (before === null)
-      appended = after;
-    else if (after.startsWith(before))
-      appended = after.slice(before.length);
-  }
+  const appended = appendedText(before, after);
   recordGitignore(draft, before === null && after !== null, [adopted, appended]);
 }
+function recordGitattributesReconcile(draft, before, after) {
+  recordGitattributes(draft, before === null && after !== null, [appendedText(before, after)]);
+}
+function appendedText(before, after) {
+  if (after === null || after === before)
+    return "";
+  if (before === null)
+    return after;
+  return after.startsWith(before) ? after.slice(before.length) : "";
+}
 function assertManifestInWriteSet(manifest, writeSet) {
   const strays = [
     ...manifest.files.map((f) => f.path).filter((p) => !writeSet.files.has(p)),
@@ -2115,7 +2145,8 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
   const merged = [
     SETTINGS_REL,
     ...manifest.mcp !== void 0 ? [MCP_REGISTRATION_REL] : [],
-    ...manifest.gitignore.created || manifest.gitignore.appended.length > 0 ? [GITIGNORE_REL] : []
+    ...manifest.gitignore.created || manifest.gitignore.appended.length > 0 ? [GITIGNORE_REL] : [],
+    ...manifest.gitattributes !== void 0 && (manifest.gitattributes.created || manifest.gitattributes.appended.length > 0) ? [GITATTRIBUTES_REL] : []
   ];
   const collided = new Set(collidedPaths);
   const dirVerdicts = /* @__PURE__ */ new Map();
@@ -2484,7 +2515,8 @@ set -e
 
 # The project root is resolved from THIS SCRIPT'S OWN LOCATION, never from the
 # session's cwd \u2014 a session started in a subdirectory must find the same root
-# .mcp.json the editor loaded, which is the bug mcp-headers.sh already paid for.
+# .mcp.json the editor loaded, which is the bug the editor's headers command
+# already paid for.
 HC_SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 HC_PROJECT_ROOT=$(CDPATH= cd -- "$HC_SCRIPT_DIR/../.." && pwd)
 HC_REGISTRATION="$HC_PROJECT_ROOT/${MCP_REGISTRATION_REL}"
@@ -2531,7 +2563,9 @@ function isTrackedAndClean(targetRepo, relPath) {
   return true;
 }
 function removeLegacyCiStanza(targetRepo) {
-  const rel = ".halfcycle/ci-stanza.yml";
+  return removeRetiredGeneratedFile(targetRepo, ".halfcycle/ci-stanza.yml", 0, CI_STANZA_KNOWN_HEADER_HASHES);
+}
+function removeRetiredGeneratedFile(targetRepo, rel, headerLineIndex, knownHeaderHashes) {
   const path = join5(targetRepo, rel);
   if (!existsSync3(path))
     return "absent";
@@ -2541,10 +2575,9 @@ function removeLegacyCiStanza(targetRepo) {
   } catch {
     return "failed";
   }
-  const headerLine = raw.split("\n")[0] ?? "";
+  const headerLine = raw.split("\n")[headerLineIndex] ?? "";
   const digest = createHash2("sha256").update(headerLine, "utf-8").digest("hex");
-  const ours = CI_STANZA_KNOWN_HEADER_HASHES.includes(digest);
-  if (!ours)
+  if (!knownHeaderHashes.includes(digest))
     return "kept-foreign";
   if (!isTrackedAndClean(targetRepo, rel))
     return "kept-uncommitted";
@@ -2557,203 +2590,33 @@ function removeLegacyCiStanza(targetRepo) {
 }
 var MCP_REGISTRATION_REL = ".mcp.json";
 var MCP_SERVER_KEY = "halfcycle";
-var MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
-var MCP_HEADERS_HELPER_COMMAND = `/bin/sh -c 'd=$(pwd); while [ ! -f "$d/${MCP_HEADERS_HELPER_REL}" ] && [ "$d" != / ]; do d=$(dirname "$d"); done; [ -f "$d/${MCP_HEADERS_HELPER_REL}" ] || { echo "halfcycle: ${MCP_HEADERS_HELPER_REL} not found at or above $(pwd); re-run npx halfcycle" >&2; exit 1; }; exec /bin/sh "$d/${MCP_HEADERS_HELPER_REL}"'`;
-var GENERATED_MCP_HEADERS_HEADER = "# Halfcycle MCP connection headers \u2014 generated by";
+var MCP_HEADERS_HELPER_COMMAND = `node -e "${[
+  `const p=require('path'),f=require('fs'),c=require('child_process');`,
+  `let d=process.cwd();`,
+  `for(;;){`,
+  `const b=p.join(d,'${VENDORED_BIN_REL}');`,
+  `if(f.existsSync(b)){`,
+  `const r=c.spawnSync(process.execPath,[b,'mcp-headers'],{stdio:'inherit'});`,
+  `process.exit(typeof r.status==='number'?r.status:1)}`,
+  `const u=p.dirname(d);`,
+  `if(u===d)break;`,
+  `d=u}`,
+  `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run npx halfcycle in the project folder');`,
+  `process.exit(1)`
+].join("")}"`;
+var MCP_HEADERS_KNOWN_HEADER_HASHES = [
+  "37a733ea588b3361b2bbfd86c44e0c95da30d7af6acffd1243ece83c811f0af2",
+  "6732ec6d2d2bf7cb33017749a3d021b59af653dcd07c3811693b5a242d44b1a1"
+];
+function removeRetiredMcpHeadersHelper(targetRepo) {
+  return removeRetiredGeneratedFile(targetRepo, RETIRED_MCP_HEADERS_HELPER_REL, 1, MCP_HEADERS_KNOWN_HEADER_HASHES);
+}
 var OWNED_GENERATED_HEADERS = {
   ".claude/hooks/guard-runner.sh": GENERATED_GUARD_RUNNER_HEADER,
   ".claude/hooks/user-prompt-reminder.sh": GENERATED_USER_PROMPT_REMINDER_HEADER,
   ".claude/hooks/session-end-marker.sh": GENERATED_SESSION_END_HEADER,
-  ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER,
-  ".halfcycle/mcp-headers.sh": GENERATED_MCP_HEADERS_HEADER
+  ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER
 };
-function generateMcpHeadersHelper() {
-  return `#!/bin/sh
-${GENERATED_MCP_HEADERS_HEADER} the Halfcycle installer.
-#
-# Claude Code runs this at MCP connection time, from the session's cwd, and merges
-# its stdout into the connection headers for the "halfcycle" server in .mcp.json.
-#
-# It exists because \${VAR} expansion in .mcp.json reads the PROCESS environment
-# only: nothing loads a credential into a session, so a referenced
-# \${HALFCYCLE_TOKEN} expanded to nothing and the server was silently absent from
-# the tool list.
-#
-# This file is tracked and holds NO secret. NEITHER DOES ANY OTHER FILE IN THIS
-# REPOSITORY (T-09): the credential lives at machine level, outside every checkout,
-# and this script READS one line out of it (never sources \u2014 a credential store is
-# not code).
-set -eu
-
-# The project root is resolved from THIS SCRIPT'S OWN LOCATION, never from the
-# caller's working directory. Claude Code runs the helper from the SESSION's cwd,
-# and a session started in a subdirectory still finds the root .mcp.json \u2014 so a
-# relative read here silently produced no credential for anyone who started the
-# session in any subdirectory of a monorepo.
-SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-PROJECT_ROOT=$(CDPATH= cd -- "$SCRIPT_DIR/.." && pwd)
-
-${engagementResolutionShell()}
-
-# Read one KEY's value out of the credential store into HC_VALUE, in the CALLER's
-# shell (call it as a statement, never inside $(...)). Last assignment wins,
-# matching the shell's own \`.\` semantics. An optional leading \`export \` is
-# tolerated because a hand-edited store may use one.
-halfcycle_store_value() {
-  HC_VALUE=""
-  hc_line=$(grep "^[[:space:]]*\\(export[[:space:]][[:space:]]*\\)\\{0,1\\}$2=" "$1" | tail -n 1)
-  hc_v=\${hc_line#*"$2="}
-  hc_v=$(printf '%s' "$hc_v" | tr -d '\\r')
-
-  # Strip one layer of matching quotes. The store is WRITTEN single-quoted (both
-  # writers use the same shq: this installer and Studio's provider), because
-  # guard-runner.sh SOURCES the same file and an unquoted value carrying a space
-  # would execute its own remainder. This reader greps rather than sources, so it
-  # has to undo the quoting itself \u2014 and it must land on the same value the
-  # sourcing consumer gets, or one file has two answers.
-  case $hc_v in
-    '"'*'"') hc_v=\${hc_v#'"'}; hc_v=\${hc_v%'"'} ;;
-    "'"*"'")
-      hc_v=\${hc_v#"'"}; hc_v=\${hc_v%"'"}
-      # \u2026and undo shq's embedded-quote escape, '\\'' -> '. The backslash is matched
-      # through a BRACKET EXPRESSION on purpose. MEASURED, on GNU sed 4.9 (Linux,
-      # the CI platform) and BSD sed (macOS), feeding each the script from a file so
-      # no shell quoting is in the way:
-      #
-      #   s/'[\\]''/'/g   a'\\''b -> a'b     both      <- shipped
-      #   s/'\\''/'/g     a'\\''b -> a'\\''b   both      <- matches NOTHING, exit 0
-      #
-      # A bare \\' in a BRE is undefined by POSIX, and the obvious pattern therefore
-      # does not fail loudly \u2014 it silently substitutes nothing, on BOTH platforms,
-      # and the token then travels with four stray characters in it. The bracket
-      # expression makes the backslash literal by a construction POSIX does define.
-      hc_v=$(printf '%s' "$hc_v" | sed "s/'[\\]''/'/g") ;;
-  esac
-  HC_VALUE=$hc_v
-}
-
-# The scheme and host[:port] of a URL, lowercased \u2014 or NOTHING when the URL holds
-# a space or a control character anywhere. That refusal is the load-bearing part:
-# a URL parser drops tabs and newlines before it reads the host, so
-# "https://ours<newline>@elsewhere/" is a request to "elsewhere", while a
-# line-by-line reading here would see only "https://ours". The host ends at the
-# first / ? # or backslash, which is where a URL parser ends it for http(s).
-halfcycle_origin() {
-  hc_u=$1
-  if [ "$(printf '%s' "$hc_u" | tr -d '[:cntrl:][:space:]')" != "$hc_u" ]; then
-    return 0
-  fi
-  printf '%s\\n' "$hc_u" | sed -n 's|^\\([A-Za-z][A-Za-z0-9+.-]*://[^/?#\\\\]*\\).*$|\\1|p' | tr '[:upper:]' '[:lower:]'
-}
-
-# HALFCYCLE_TOKEN in the environment WINS, and it is the CI arm: a job with no
-# browser and no per-user store exports the credential, and a stale store on a
-# long-lived runner must not silently win over it. Same order, and the same reason,
-# as the CLI's own resolver (\`resolve-credential.ts\`). The server it may be sent
-# to is NOT taken from the environment: it is read from this machine's store in
-# both arms, so a token supplied this way still goes only where this machine was
-# set up to send it.
-# The pin names an id that is not a project id. Re-running the installer against
-# that pin refuses it too, so the one remedy that works is a fresh pin.
-halfcycle_bad_id_message() {
-  echo "halfcycle: $PROJECT_ROOT/.halfcycle/bundle.json names an engagement id that is not a Halfcycle project id," >&2
-  echo "halfcycle: so no credential was read. Delete that file and run \\"npx halfcycle\\" again: this repository" >&2
-  echo "halfcycle: is then set up as a new Halfcycle project." >&2
-}
-
-TOKEN=\${HALFCYCLE_TOKEN:-}
-MCP_URL=""
-
-if [ -n "$TOKEN" ]; then
-  if halfcycle_env_file "$PROJECT_ROOT"; then
-    halfcycle_store_value "$HALFCYCLE_ENV_FILE" HALFCYCLE_MCP_URL
-    MCP_URL=$HC_VALUE
-  fi
-else
-  if ! halfcycle_env_file "$PROJECT_ROOT"; then
-    case $HALFCYCLE_ENV_PROBLEM in
-      no-pin)
-        echo "halfcycle: no .halfcycle/bundle.json in $PROJECT_ROOT, so this repository has no Halfcycle engagement." >&2
-        echo "halfcycle: run \\"npx halfcycle\\" here to install one." >&2 ;;
-      no-id)
-        echo "halfcycle: $PROJECT_ROOT/.halfcycle/bundle.json names no engagement id." >&2
-        echo "halfcycle: run \\"npx halfcycle\\" here to rewrite it." >&2 ;;
-      bad-id)
-        halfcycle_bad_id_message ;;
-      no-home)
-        echo "halfcycle: HOME is not set, so the credential store cannot be located." >&2 ;;
-      *)
-        # OUTCOME B (T-02b, solo-project-ownership) is a \`no-credential\` PROBLEM
-        # with a REASON attached, checked here rather than as a fifth case value
-        # \u2014 see \`engagementResolutionShell\`'s own docblock for why. Re-running
-        # this installer can never obtain a credential for this reason, so it is
-        # the one sentence in this file that must not say to.
-        if [ "$HALFCYCLE_ENV_NOT_THIS_ACCOUNT" = "1" ]; then
-          echo "halfcycle: this project belongs to another Halfcycle account, so this machine has no" >&2
-          echo "halfcycle: credential for it and the Halfcycle tools are not available here. Nothing is" >&2
-          echo "halfcycle: broken \u2014 ask the project's owner for view access, or sign in as the account" >&2
-          echo "halfcycle: that owns it and run \\"npx halfcycle\\" again." >&2
-        else
-          echo "halfcycle: this machine holds no credential for engagement $HALFCYCLE_ENV_ENGAGEMENT." >&2
-          echo "halfcycle: run \\"npx halfcycle\\" in this repository \u2014 it will sign you in through your browser if needed, and write the credential to $HOME/.halfcycle, outside this repository." >&2
-        fi ;;
-    esac
-    exit 1
-  fi
-  ENV_FILE="$HALFCYCLE_ENV_FILE"
-
-  halfcycle_store_value "$ENV_FILE" HALFCYCLE_TOKEN
-  TOKEN=$HC_VALUE
-  if [ -z "$TOKEN" ]; then
-    echo "halfcycle: HALFCYCLE_TOKEN is absent or empty in $ENV_FILE." >&2
-    echo "halfcycle: run \\"npx halfcycle\\" in this repository to rewrite this machine's credential." >&2
-    exit 1
-  fi
-  halfcycle_store_value "$ENV_FILE" HALFCYCLE_MCP_URL
-  MCP_URL=$HC_VALUE
-fi
-
-# THE TOKEN GOES ONLY TO THIS MACHINE'S HALFCYCLE SERVER. .mcp.json is a tracked
-# file: anyone who can land a commit can change the server's url, and this script
-# would then hand the credential to whatever it names. Claude Code tells the helper
-# which url it is about to connect to (CLAUDE_CODE_MCP_SERVER_URL); the server this
-# machine was set up against is recorded OUTSIDE the repository, beside the
-# credential. The two must share scheme, host and port, or nothing is printed.
-# No url at all is a refusal too: sending the credential without knowing where it
-# is going is the thing this check exists to stop.
-REQUESTED=\${CLAUDE_CODE_MCP_SERVER_URL:-}
-if [ -z "$REQUESTED" ]; then
-  echo "halfcycle: Claude Code did not say which server it is connecting to, so the Halfcycle credential was not sent." >&2
-  echo "halfcycle: update Claude Code, then reconnect." >&2
-  exit 1
-fi
-if [ -z "$MCP_URL" ] && [ "\${HALFCYCLE_ENV_PROBLEM:-}" = "bad-id" ]; then
-  halfcycle_bad_id_message
-  exit 1
-fi
-if [ -z "$MCP_URL" ]; then
-  echo "halfcycle: this machine has no Halfcycle server address recorded for this repository, so the credential was not sent." >&2
-  echo "halfcycle: run \\"npx halfcycle\\" in this repository on this machine to record it." >&2
-  exit 1
-fi
-WANT=$(halfcycle_origin "$MCP_URL")
-GOT=$(halfcycle_origin "$REQUESTED")
-if [ -z "$WANT" ] || [ "$GOT" != "$WANT" ]; then
-  SHOWN=$(printf '%s' "$REQUESTED" | tr -cd '[:graph:]' | cut -c1-200)
-  echo "halfcycle: .mcp.json asks for this repository's Halfcycle credential to be sent to $SHOWN," >&2
-  echo "halfcycle: which is not this machine's Halfcycle server (\${WANT:-none recorded}). The credential was NOT sent." >&2
-  echo "halfcycle: if nobody meant to change .mcp.json, treat that change as suspect; \\"npx halfcycle\\" restores the entry." >&2
-  exit 1
-fi
-
-# JSON-escape: backslash first, then double quote. A token carrying either would
-# otherwise emit invalid JSON, and invalid JSON is dropped SILENTLY \u2014 the
-# connection succeeds carrying no Authorization header at all.
-ESCAPED=$(printf '%s' "$TOKEN" | sed -e 's/\\\\/\\\\\\\\/g' -e 's/"/\\\\"/g')
-
-printf '{"Authorization":"Bearer %s"}\\n' "$ESCAPED"
-`;
-}
 function generateMcpRegistration(existing, mcpOrigin) {
   let base = { mcpServers: {} };
   if (existing !== null) {
@@ -2820,6 +2683,42 @@ ${header}
     return "failed";
   }
 }
+var GITATTRIBUTES_HEADER = "# Halfcycle \u2014 generated scripts keep LF line endings";
+function readTextOrNull(path) {
+  try {
+    return readFileSync5(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
+function lfRules(paths) {
+  return [...paths].filter((path) => path.endsWith(".sh")).map((path) => `${path} text eol=lf`);
+}
+var REQUIRED_GITATTRIBUTES_RULES = lfRules(Object.keys(OWNED_GENERATED_HEADERS));
+function reconcileGitattributes(targetRepo) {
+  const path = join5(targetRepo, GITATTRIBUTES_REL);
+  const rules = REQUIRED_GITATTRIBUTES_RULES;
+  const routed = [];
+  try {
+    if (lstatOrNull(path)?.isSymbolicLink() === true)
+      return "failed";
+    if (!existsSync3(path)) {
+      writeAllowlisted(path, targetRepo, [GITATTRIBUTES_HEADER, ...rules].join("\n") + "\n", routed);
+      return "written";
+    }
+    const existing = readFileSync5(path, "utf-8");
+    const present = new Set(existing.split("\n").map((l) => l.trim()));
+    const toAdd = rules.filter((rule) => !present.has(rule));
+    if (toAdd.length === 0)
+      return "skipped";
+    const separator = existing === "" ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join("\n") + "\n";
+    writeAllowlisted(path, targetRepo, existing + suffix, routed);
+    return "written";
+  } catch {
+    return "failed";
+  }
+}
 function previousPinForEngagement(targetRepoRoot, engagementId) {
   try {
     const existing = readBundlePin(targetRepoRoot);
@@ -3070,9 +2969,6 @@ async function install(options) {
       break;
   }
   if (credential) {
-    const helperPath = join5(targetRepo, MCP_HEADERS_HELPER_REL);
-    const helperOutcome = recordOwnedGenerated(report, helperPath, targetRepo, generateMcpHeadersHelper(), OWNED_GENERATED_HEADERS[MCP_HEADERS_HELPER_REL], MCP_HEADERS_HELPER_REL);
-    noteFile(draft, targetRepo, MCP_HEADERS_HELPER_REL, helperOutcome);
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
     const existingMcp = existsSync3(mcpPath) ? readFileSync5(mcpPath, "utf-8") : null;
     const mcpContent = generateMcpRegistration(existingMcp, credential.mcpUrl);
@@ -3084,6 +2980,24 @@ async function install(options) {
     } else {
       report.skippedPaths.push(MCP_REGISTRATION_REL);
     }
+    const helperRel = RETIRED_MCP_HEADERS_HELPER_REL;
+    switch (removeRetiredMcpHeadersHelper(targetRepo)) {
+      case "removed":
+        recordRemovedFile(draft, helperRel);
+        report.writtenPaths.push(`${helperRel} (REMOVED \u2014 Halfcycle no longer uses this file)`);
+        break;
+      case "kept-foreign":
+        report.skippedPaths.push(`${helperRel} (KEPT \u2014 Halfcycle no longer uses this file, and it is not one Halfcycle generated byte for byte, so it was left alone; delete it if nothing of yours needs it)`);
+        break;
+      case "kept-uncommitted":
+        report.skippedPaths.push(`${helperRel} (KEPT \u2014 Halfcycle no longer uses this file, but it is not a clean, committed copy in this repository, so it was left alone rather than risk losing an edit; delete it when you are ready)`);
+        break;
+      case "failed":
+        report.skippedPaths.push(`${helperRel} (could not be removed \u2014 Halfcycle no longer uses this file, DELETE IT BY HAND)`);
+        break;
+      case "absent":
+        break;
+    }
   } else {
     report.skippedPaths.push(`${MCP_REGISTRATION_REL} (no MCP origin \u2014 no credential supplied)`);
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
@@ -3099,6 +3013,15 @@ async function install(options) {
   } else {
     record(report, gitignoreOutcome, ".gitignore");
   }
+  const gitattributesPath = join5(targetRepo, GITATTRIBUTES_REL);
+  const gitattributesBefore = readTextOrNull(gitattributesPath);
+  const gitattributesOutcome = reconcileGitattributes(targetRepo);
+  recordGitattributesReconcile(draft, gitattributesBefore, readTextOrNull(gitattributesPath));
+  if (gitattributesOutcome === "failed") {
+    report.skippedPaths.push(`${GITATTRIBUTES_REL} (write failed \u2014 a clone made with core.autocrlf=true may check the hook scripts out with CRLF line endings)`);
+  } else {
+    record(report, gitattributesOutcome, GITATTRIBUTES_REL);
+  }
   const identityOutcome = writeProjectIdentity(targetRepo);
   record(report, identityOutcome, PROJECT_IDENTITY_REL);
   noteFile(draft, targetRepo, PROJECT_IDENTITY_REL, identityOutcome);
@@ -4214,7 +4137,7 @@ function armScript(credential, act, label, plainLabel, home) {
 }
 function identitySwitchRemedy(home, interactive) {
   const setOrRemove = `set HALFCYCLE_TOKEN for that account, or remove ${accountStorePath(home)}`;
-  return interactive ? `To act as a different account: run this again and answer "s" when asked, ${setOrRemove} to be asked for a sign-in next time.` : `To act as a different account: ${setOrRemove} and run this again with a terminal to sign in.`;
+  return interactive ? `To act as a different account: run this again and ${SWITCH_ACCOUNT_ANSWER}, ${setOrRemove} to be asked for a sign-in next time.` : `To act as a different account: ${setOrRemove} and run this again with a terminal to sign in.`;
 }
 async function confirmActingIdentity(serviceUrl, credential, act, deps = {}) {
   const write = deps.write ?? ((text) => process.stdout.write(text));
@@ -4384,7 +4307,7 @@ async function mintBoardEnterCode(baseUrl, sessionToken) {
 
 // dist/probe-mcp.js
 var PROBE_TIMEOUT_MS = 5e3;
-async function probeMcpOrigin(mcpUrl) {
+async function probeMcpOrigin(mcpUrl, token) {
   const url = mcpEndpointUrl(mcpUrl);
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
@@ -4392,32 +4315,71 @@ async function probeMcpOrigin(mcpUrl) {
   try {
     res = await fetch(url, {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
       body: JSON.stringify({ jsonrpc: "2.0", id: 1, method: "initialize", params: {} }),
+      redirect: "manual",
       signal: controller.signal
     });
   } catch (err) {
     return {
       reached: false,
+      credentialRefused: false,
       problem: controller.signal.aborted ? `it did not answer within ${PROBE_TIMEOUT_MS / 1e3} seconds` : `it could not be reached (${err instanceof Error ? err.message : String(err)})`
     };
   } finally {
     clearTimeout(timer);
   }
   if (res.status === 404) {
-    return { reached: false, problem: "that address answered, but it serves no /mcp endpoint" };
+    return { reached: false, credentialRefused: false, problem: "that address answered, but it serves no /mcp endpoint" };
+  }
+  if (res.status === 401) {
+    return {
+      reached: false,
+      credentialRefused: true,
+      problem: "it answered, but refused this machine's Halfcycle credential"
+    };
+  }
+  if (res.status >= 300 && res.status < 400) {
+    return {
+      reached: false,
+      credentialRefused: false,
+      problem: `it redirected elsewhere (${res.status}), which is not followed, so the credential was not sent on`
+    };
   }
   if (!res.ok) {
-    return { reached: false, problem: `it answered ${res.status}` };
+    return { reached: false, credentialRefused: false, problem: `it answered ${res.status}` };
   }
   const body = await res.json().catch(() => null);
   const name = body?.result?.serverInfo?.name;
   if (typeof name !== "string" || name === "") {
-    return { reached: false, problem: "it answered, but not as an MCP server" };
+    return { reached: false, credentialRefused: false, problem: "it answered, but not as an MCP server" };
   }
   return { reached: true, serverName: name };
 }
 
+// dist/claude-version-probe.js
+import { execFileSync as execFileSync3 } from "node:child_process";
+function probeClaudeCodeVersion(timeoutMs, deps = {}) {
+  const platform4 = deps.platform ?? process.platform;
+  const exec = deps.exec ?? execFileSync3;
+  let raw;
+  try {
+    raw = platform4 === "win32" ? exec("cmd.exe", ["/d", "/s", "/c", '"claude --version"'], {
+      encoding: "utf-8",
+      timeout: timeoutMs,
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsVerbatimArguments: true
+    }) : exec("claude", ["--version"], {
+      encoding: "utf-8",
+      timeout: timeoutMs,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+  } catch {
+    return void 0;
+  }
+  return /(\d+\.\d+\.\d+)/.exec(raw)?.[1];
+}
+
 // dist/build-record/write.js
 import { closeSync, existsSync as existsSync4, mkdirSync as mkdirSync5, openSync, readFileSync as readFileSync6, renameSync, rmSync as rmSync2, writeSync } from "node:fs";
 import { basename as basename2, join as join6, resolve as resolve2, relative as relative2, isAbsolute as isAbsolute2 } from "node:path";
@@ -4516,7 +4478,7 @@ function renderCouldNotRun(entries, p) {
   }
   return lines.join("\n");
 }
-function headline(observed, attested) {
+function headline(observed, attested, checks) {
   const met = attested.decision === "done-when-met";
   const problemsReported = attested.walk !== null && attested.walk.verdict === "defects";
   switch (observed.crossed.kind) {
@@ -4524,7 +4486,10 @@ function headline(observed, attested) {
       if (!met) {
         return "**Closed by override.** Halfcycle saw nothing outstanding, and the person closing the phase chose to override rather than state its finish conditions were met.";
       }
-      return problemsReported ? "**Closed with problems reported.** Halfcycle saw nothing outstanding, and the person closing the phase reported problems found in its acceptance walk." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
+      if (problemsReported) {
+        return "**Closed with problems reported.** Halfcycle saw nothing outstanding, and the person closing the phase reported problems found in its acceptance walk.";
+      }
+      return checks === "not-observed" ? "**Closed with nothing outstanding, but no checks ran.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met, but Halfcycle has no record of any check running during this phase, so this is not a clean result." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
     case "unfinished-steps":
     case "clean-over-findings":
       return met ? "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase stated its finish conditions were met anyway." : "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase chose to override it.";
@@ -4612,10 +4577,10 @@ function renderStated(attested, p) {
   }
   return lines.join("\n");
 }
-function renderClose(heading, observed, attested, p) {
+function renderClose(heading, observed, attested, checks, p) {
   return [
     heading,
-    headline(observed, attested),
+    headline(observed, attested, checks),
     OBSERVED_LABEL,
     [
       `- Closed at: ${closedAtText(observed.closedAt, p)}`,
@@ -4650,12 +4615,12 @@ function renderBuildRecordV2Markdown(record2) {
     ].join("\n"),
     total === 1 ? "This phase was closed once." : `This phase was closed ${String(total)} times. The latest close is described first; each earlier close follows, as it was recorded when it was made.`,
     ...renderChecks(record2.observed.checks, p),
-    ...renderClose(total === 1 ? "## The close" : `## The latest close (close ${String(latest.sequence)} of ${String(total)})`, latest, attestedBySequence.get(latest.sequence), p)
+    ...renderClose(total === 1 ? "## The close" : `## The latest close (close ${String(latest.sequence)} of ${String(total)})`, latest, attestedBySequence.get(latest.sequence), record2.observed.checks.state, p)
   ];
   if (total > 1) {
     body.push("## Earlier closes");
     for (const close of closes.slice(0, -1)) {
-      body.push(...renderClose(`### Close ${String(close.sequence)} of ${String(total)}`, close, attestedBySequence.get(close.sequence), p));
+      body.push(...renderClose(`### Close ${String(close.sequence)} of ${String(total)}`, close, attestedBySequence.get(close.sequence), record2.observed.checks.state, p));
     }
   }
   const header = [`${TITLE_PREFIX}${phase}`, HEADER_WHAT, HEADER_REGISTERS, HEADER_CHECKS, HEADER_KEPT];
@@ -4990,7 +4955,7 @@ async function openPhase(credential, phase, entry, home) {
 }
 
 // dist/close-phase.js
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 var NO_STATEMENTS = { thesis: null, outcome: null, deviations: [] };
 function readCloseCommit(repoRoot) {
   if (repoRoot === void 0) {
@@ -5001,7 +4966,7 @@ function readCloseCommit(repoRoot) {
   }
   let out;
   try {
-    out = execFileSync3("git", ["-C", repoRoot, "rev-parse", "HEAD"], {
+    out = execFileSync4("git", ["-C", repoRoot, "rev-parse", "HEAD"], {
       encoding: "utf-8",
       env: gitEnvForNamedRepo(),
       stdio: ["ignore", "pipe", "ignore"]
@@ -5296,7 +5261,7 @@ function validate(options) {
   if (lexists(pinPath)) {
     try {
       const pin = JSON.parse(readFileSync8(pinPath, "utf-8"));
-      const id = isPlainObject2(pin) ? pin["engagementId"] : void 0;
+      const id = isPlainObject2(pin) ? pin[PIN_ENGAGEMENT_ID_FIELD] : void 0;
       engagementId = typeof id === "string" && id !== "" ? id : void 0;
     } catch {
       pinReadable = false;
@@ -5438,17 +5403,33 @@ function unmergeMcp(value, rec) {
   }
   return { changed, keptEntry };
 }
-function trimGitignore(targetRepo, text, rec, writeSet) {
+function gitignoreRules(targetRepo, writeSet) {
+  return {
+    rel: GITIGNORE_REL,
+    header: GITIGNORE_HEADER,
+    ourLines: writeSet.gitignoreLines,
+    keepLine: (line) => coveredPathExists(targetRepo, line)
+  };
+}
+function gitattributesRules(writeSet) {
+  return {
+    rel: GITATTRIBUTES_REL,
+    header: GITATTRIBUTES_HEADER,
+    ourLines: writeSet.gitattributesLines,
+    keepLine: () => false
+  };
+}
+function trimAppendedBlocks(text, rec, rules) {
   const keptLines = [];
   const foreignLines = [];
   let current = text;
   for (const block of [...rec.appended].reverse()) {
     const lines = block.split("\n").filter((line) => line !== "");
-    const foreign = lines.filter((line) => !writeSet.gitignoreLines.has(line));
+    const foreign = lines.filter((line) => !rules.ourLines.has(line));
     foreignLines.push(...foreign);
-    const ours = lines.filter((line) => writeSet.gitignoreLines.has(line));
-    const entries = ours.filter((line) => line !== GITIGNORE_HEADER);
-    const kept = entries.filter((line) => coveredPathExists(targetRepo, line));
+    const ours = lines.filter((line) => rules.ourLines.has(line));
+    const entries = ours.filter((line) => line !== rules.header);
+    const kept = entries.filter((line) => rules.keepLine(line));
     keptLines.push(...kept);
     if (kept.length === 0 && foreign.length === 0 && current.includes(block)) {
       const at = current.lastIndexOf(block);
@@ -5456,13 +5437,13 @@ function trimGitignore(targetRepo, text, rec, writeSet) {
       continue;
     }
     const separated = block.startsWith("\n") || block.includes("\n\n");
-    const removable = ours.filter((line) => line === GITIGNORE_HEADER ? kept.length === 0 && foreign.length === 0 : !kept.includes(line));
+    const removable = ours.filter((line) => line === rules.header ? kept.length === 0 && foreign.length === 0 : !kept.includes(line));
     for (const line of removable) {
       const fileLines = current.split("\n");
       const at = fileLines.lastIndexOf(line);
       if (at < 0)
         continue;
-      const withSeparator = line === GITIGNORE_HEADER && separated && at > 0 && fileLines[at - 1] === "";
+      const withSeparator = line === rules.header && separated && at > 0 && fileLines[at - 1] === "";
       fileLines.splice(withSeparator ? at - 1 : at, withSeparator ? 2 : 1);
       current = fileLines.join("\n");
     }
@@ -5554,7 +5535,13 @@ function uninstall(options) {
       continue;
     removeEmptyCreatedDir(targetRepo, dir, writeSet, result, name);
   }
-  trimGitignoreFile(targetRepo, manifest.gitignore, writeSet, result, name);
+  const keptIgnoreLines = trimAppendedFile(targetRepo, manifest.gitignore, gitignoreRules(targetRepo, writeSet), result, name);
+  for (const line of keptIgnoreLines) {
+    result.keptIgnoreLines.push(`${line.trim()} \u2014 ${line.trim().replace(/^\//, "")} still exists`);
+  }
+  if (manifest.gitattributes !== void 0) {
+    trimAppendedFile(targetRepo, manifest.gitattributes, gitattributesRules(writeSet), result, name);
+  }
   const credential = handleCredential(options, checked);
   const credentialFailed = credential.kind === "failed";
   if (result.failed.length === 0 && !credentialFailed) {
@@ -5668,40 +5655,39 @@ function removeEmptyCreatedDir(targetRepo, dir, writeSet, lists, name) {
     name(lists.failed, `${dir}/`, dir);
   }
 }
-function trimGitignoreFile(targetRepo, rec, writeSet, lists, name) {
+function trimAppendedFile(targetRepo, rec, rules, lists, name) {
+  const { rel } = rules;
   if (rec.appended.length === 0)
-    return;
-  if (symlinkOnPath(targetRepo, GITIGNORE_REL)) {
-    name(lists.leftAlone, `${GITIGNORE_REL} (a symbolic link \u2014 not followed)`, GITIGNORE_REL);
-    return;
+    return [];
+  if (symlinkOnPath(targetRepo, rel)) {
+    name(lists.leftAlone, `${rel} (a symbolic link \u2014 not followed)`, rel);
+    return [];
   }
-  const path = join8(targetRepo, GITIGNORE_REL);
+  const path = join8(targetRepo, rel);
   let before;
   try {
     before = readFileSync8(path, "utf-8");
   } catch {
-    return;
+    return [];
   }
-  const { text, keptLines, foreignLines } = trimGitignore(targetRepo, before, rec, writeSet);
+  const { text, keptLines, foreignLines } = trimAppendedBlocks(before, rec, rules);
   for (const line of foreignLines) {
-    name(lists.leftAlone, `${GITIGNORE_REL}: the line ${JSON.stringify(line)} (Halfcycle never writes it, so it was kept)`);
-  }
-  for (const line of keptLines) {
-    lists.keptIgnoreLines.push(`${line.trim()} \u2014 ${line.trim().replace(/^\//, "")} still exists`);
+    name(lists.leftAlone, `${rel}: the line ${JSON.stringify(line)} (Halfcycle never writes it, so it was kept)`);
   }
   if (text === before)
-    return;
+    return keptLines;
   try {
     if (text === "" && rec.created) {
       rmSync3(path);
-      name(lists.removed, GITIGNORE_REL, GITIGNORE_REL);
+      name(lists.removed, rel, rel);
     } else {
       writeFileSync5(path, text, "utf-8");
-      name(lists.restored, GITIGNORE_REL, GITIGNORE_REL);
+      name(lists.restored, rel, rel);
     }
   } catch {
-    name(lists.failed, GITIGNORE_REL, GITIGNORE_REL);
+    name(lists.failed, rel, rel);
   }
+  return keptLines;
 }
 function handleCredential(options, checked) {
   const { removeCredential, home } = options;
@@ -5817,7 +5803,6 @@ function renderUninstallReport(result, home) {
 }
 
 // dist/banner-facts.js
-import { execFileSync as execFileSync4 } from "node:child_process";
 import { readFileSync as readFileSync9 } from "node:fs";
 import { basename as basename3, join as join9, resolve as resolve3 } from "node:path";
 var BRAND_URL = "halfcycle.ai";
@@ -5838,17 +5823,8 @@ function bundleVersion() {
     return void 0;
   }
 }
-function claudeCodeVersion() {
-  try {
-    const raw = execFileSync4("claude", ["--version"], {
-      encoding: "utf-8",
-      timeout: 3e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    return /(\d+\.\d+\.\d+)/.exec(raw)?.[1];
-  } catch {
-    return void 0;
-  }
+function claudeCodeVersion(deps = {}) {
+  return probeClaudeCodeVersion(3e3, deps);
 }
 var REAL_PROBES = {
   bundleVersion,
@@ -5949,21 +5925,10 @@ function compareVersions(a, b) {
   }
   return 0;
 }
-function reportClaudeCodeVersion(verbose2) {
-  let raw;
-  try {
-    raw = execFileSync5("claude", ["--version"], {
-      encoding: "utf-8",
-      timeout: 5e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-  } catch {
+function reportClaudeCodeVersion(verbose2, deps = {}) {
+  const version = probeClaudeCodeVersion(5e3, deps);
+  if (version === void 0)
     return;
-  }
-  const found = /(\d+\.\d+\.\d+)/.exec(raw);
-  if (!found)
-    return;
-  const version = found[1];
   if (compareVersions(version, MIN_HEADERS_HELPER_VERSION) >= 0) {
     if (verbose2) {
       process.stdout.write(`[halfcycle] Claude Code ${version} detected \u2014 new enough for the credential helper.
@@ -6005,6 +5970,15 @@ function isHalfcycleMonorepo(dir) {
     return false;
   }
 }
+function isHomeFolder(dir) {
+  try {
+    const target = realpathSync(dir);
+    const home = realpathSync(homedir3());
+    return process.platform === "win32" ? target.toLowerCase() === home.toLowerCase() : target === home;
+  } catch {
+    return false;
+  }
+}
 var RETIRED_VERBS = /* @__PURE__ */ new Map([
   ["ci", '"ci" was removed \u2014 CI setup is part of your project, not Halfcycle']
 ]);
@@ -6044,6 +6018,12 @@ ${USAGE}`);
   product's own source tree \u2014 installing here would write over tracked files.
   To see what this CLI does:      halfcycle --help
   To install into a real project: halfcycle <path-to-that-repo>
+`);
+      process.exit(1);
+      return;
+    }
+    if (isHomeFolder(targetRepo)) {
+      process.stderr.write(`halfcycle: refusing to set up in your home folder (${targetRepo}). Run "npx halfcycle" inside a project folder.
 `);
       process.exit(1);
       return;
@@ -6186,12 +6166,16 @@ ${USAGE}`);
 `);
       }
       if (credential) {
-        const probe = await probeMcpOrigin(credential.mcpUrl);
+        const probe = await probeMcpOrigin(credential.mcpUrl, credential.token);
         if (probe.reached) {
           if (verbose) {
             process.stdout.write(`[halfcycle] Method delivery (MCP): ${credential.mcpUrl} \u2014 reachable (${probe.serverName})
 `);
           }
+        } else if (probe.credentialRefused) {
+          process.stdout.write(`[halfcycle] Method delivery (MCP): ${credential.mcpUrl} \u2014 ${probe.problem}.
+[halfcycle] The address is right, but the Halfcycle commands will have no method context until it accepts this machine's credential. Re-run "npx halfcycle" in this folder; if it says this again, the refusal is on Halfcycle's side, not in this project.
+`);
         } else {
           process.stdout.write(`[halfcycle] Method delivery (MCP): ${credential.mcpUrl} \u2014 NOT reachable: ${probe.problem}.
 [halfcycle] The Halfcycle commands will have no method context until that address answers. This is the SECOND of two origins and the platform supplied it, so it is not the CONTROL origin (${credential.serviceUrl}) that is wrong \u2014 that one just worked. It is recorded as HALFCYCLE_MCP_URL in this engagement's credential store; re-run this installer once the service is up.
@@ -6201,11 +6185,11 @@ ${USAGE}`);
       if (credential && verbose) {
         process.stdout.write(`[halfcycle] Guard evaluation: ON \u2014 the hook evaluates against ${credential.guardUrl}. Credentials (${GUARD_COVERAGE_REQUIRED_KEYS.join(", ")}) are in ${engagementEnvPath(engagementId)}, outside this repository; the hook loads them itself, so you do not export anything and nothing here can be committed.
 `);
-        process.stdout.write(`[halfcycle] Your credential is at ${engagementEnvPath(engagementId)} \u2014 outside this repository, readable only by you. .mcp.json reads it at connection time through .halfcycle/mcp-headers.sh, so there is no token in this tree to commit and nothing for you to export.
+        process.stdout.write(`[halfcycle] Your credential is at ${engagementEnvPath(engagementId)} \u2014 outside this repository, readable only by you. .mcp.json reads it at connection time through the Halfcycle runner in ${VENDORED_BIN_REL}, so there is no token in this tree to commit and nothing for you to export.
 `);
-        process.stdout.write(`[halfcycle] Expect a workspace trust prompt the first time you open this folder \u2014 the helper is a shell command, and Claude Code will not run it until you accept. Needs Claude Code ${MIN_HEADERS_HELPER_VERSION} or newer (${MIN_HEADER_ROTATION_VERSION}+ to re-authenticate a rotated token without restarting).
+        process.stdout.write(`[halfcycle] Expect a workspace trust prompt the first time you open this folder \u2014 the connection runs a command from this project, and Claude Code will not run it until you accept. Needs Claude Code ${MIN_HEADERS_HELPER_VERSION} or newer (${MIN_HEADER_ROTATION_VERSION}+ to re-authenticate a rotated token without restarting).
 `);
-        process.stdout.write(`[halfcycle] If Halfcycle tools appear but every call returns 401, the helper could not read HALFCYCLE_TOKEN from ${engagementEnvPath(engagementId)} \u2014 re-run this installer.
+        process.stdout.write(`[halfcycle] If Halfcycle reads as not connected, or every call returns 401, the connection could not read GUARD_SERVICE_TOKEN from ${engagementEnvPath(engagementId)} \u2014 re-run this installer.
 `);
       }
       if (credential === void 0 && notThisAccountMessage !== void 0) {