halfcycle 0.3.34 → 0.3.36

package/dist/index.js

@@ -27,6 +27,8 @@ var HALFCYCLE_DIR_NAME = ".halfcycle";
 var ENGAGEMENTS_DIR_NAME = "engagements";
 var ENGAGEMENT_ENV_FILENAME = "env";
 var NOT_THIS_ACCOUNT_MARKER_FILENAME = "not-this-account";
+var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
+var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var ENGAGEMENT_ID_PATTERN = "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
 var ENGAGEMENT_ID_SHAPE = new RegExp(ENGAGEMENT_ID_PATTERN);
 function isEngagementId(value) {
@@ -1053,7 +1055,6 @@ function halfcycleHome(home) {
 var ENGAGEMENTS_DIR = ENGAGEMENTS_DIR_NAME;
 var ENV_FILENAME = ENGAGEMENT_ENV_FILENAME;
 var HALFCYCLE_DIR = HALFCYCLE_DIR_NAME;
-var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var InvalidEngagementIdError = class extends Error {
   constructor(engagementId) {
     const shown = JSON.stringify(engagementId.length > 80 ? `${engagementId.slice(0, 80)}\u2026` : engagementId);
@@ -1352,6 +1353,15 @@ function bool(value, field) {
     throw new UnreadableManifestError(`"${field}" is not true or false`);
   return value;
 }
+function appendedTextRecord(value, field) {
+  if (!isRecord(value))
+    throw new UnreadableManifestError(`"${field}" is not an object`);
+  onlyKeys(value, ["created", "appended"], `"${field}"`);
+  return {
+    created: bool(value["created"], `${field}.created`),
+    appended: stringArray(value["appended"], `${field}.appended`)
+  };
+}
 function onlyKeys(value, allowed, where) {
   const extra = Object.keys(value).filter((k) => !allowed.includes(k));
   if (extra.length > 0)
@@ -1366,7 +1376,7 @@ function parseManifest(text) {
   }
   if (!isRecord(raw))
     throw new UnreadableManifestError("it is not a JSON object");
-  onlyKeys(raw, ["format", "files", "createdDirs", "leftAlone", "settings", "mcp", "gitignore"], "the manifest");
+  onlyKeys(raw, ["format", "files", "createdDirs", "leftAlone", "settings", "mcp", "gitignore", "gitattributes"], "the manifest");
   if (raw["format"] !== INSTALL_MANIFEST_FORMAT) {
     throw new UnreadableManifestError(`its format is not ${INSTALL_MANIFEST_FORMAT}`);
   }
@@ -1427,14 +1437,10 @@ function parseManifest(text) {
       ...typeof m["entrySha256"] === "string" ? { entrySha256: m["entrySha256"] } : {}
     };
   }
-  const g = raw["gitignore"];
-  if (!isRecord(g))
+  if (raw["gitignore"] === void 0)
     throw new UnreadableManifestError('"gitignore" is missing');
-  onlyKeys(g, ["created", "appended"], '"gitignore"');
-  const gitignore = {
-    created: bool(g["created"], "gitignore.created"),
-    appended: stringArray(g["appended"], "gitignore.appended")
-  };
+  const gitignore = appendedTextRecord(raw["gitignore"], "gitignore");
+  const gitattributes = raw["gitattributes"] === void 0 ? void 0 : appendedTextRecord(raw["gitattributes"], "gitattributes");
   const paths = files.map((f) => f.path);
   if (new Set(paths).size !== paths.length)
     throw new UnreadableManifestError('"files" names a path twice');
@@ -1449,7 +1455,8 @@ function parseManifest(text) {
     leftAlone,
     settings,
     ...mcp !== void 0 ? { mcp } : {},
-    gitignore
+    gitignore,
+    ...gitattributes !== void 0 ? { gitattributes } : {}
   };
 }
 function startManifest(previous, isMember, isMemberDir) {
@@ -1465,12 +1472,16 @@ function startManifest(previous, isMember, isMemberDir) {
     createdDirs: new Set((previous?.createdDirs ?? []).filter(isMemberDir)),
     settings: previous?.settings,
     mcp: previous?.mcp,
-    gitignore: previous?.gitignore
+    gitignore: previous?.gitignore,
+    gitattributes: previous?.gitattributes
   };
 }
 function recordInstalledFile(draft, path, bytes) {
   draft.files.set(path, { path, sha256: sha256Hex(bytes) });
 }
+function recordRemovedFile(draft, path) {
+  draft.files.delete(path);
+}
 function recordPerMachineFile(draft, path) {
   draft.files.set(path, { path, perMachine: true });
 }
@@ -1513,8 +1524,15 @@ function recordMcp(draft, observed) {
   };
 }
 function recordGitignore(draft, created, appended) {
-  const prev = draft.gitignore;
-  draft.gitignore = {
+  draft.gitignore = carryAppended(draft.gitignore, created, appended);
+}
+function recordGitattributes(draft, created, appended) {
+  if (draft.gitattributes === void 0 && !created && appended.every((a) => a === ""))
+    return;
+  draft.gitattributes = carryAppended(draft.gitattributes, created, appended);
+}
+function carryAppended(prev, created, appended) {
+  return {
     created: prev?.created ?? created,
     appended: [...prev?.appended ?? [], ...appended.filter((a) => a !== "")]
   };
@@ -1538,7 +1556,8 @@ function finishManifest(draft) {
       denyCreated: false
     },
     ...draft.mcp !== void 0 ? { mcp: draft.mcp } : {},
-    gitignore: draft.gitignore ?? { created: false, appended: [] }
+    gitignore: draft.gitignore ?? { created: false, appended: [] },
+    ...draft.gitattributes !== void 0 ? { gitattributes: draft.gitattributes } : {}
   };
 }
 function union(a, b) {
@@ -1697,11 +1716,12 @@ var WRITE_ALLOWLIST = [
   ".claude/hooks",
   ".claude/settings.json",
   ".halfcycle",
-  ".halfcycle/bundle.json",
+  BUNDLE_PIN_REL,
   ".halfcycle/bin",
   "docs/build-records",
   "test/fixtures/captured",
   ".mcp.json",
+  ".gitattributes",
   ZONE_B_DIR
 ];
 function isAllowlisted(targetRelPath) {
@@ -1711,15 +1731,16 @@ function isAllowlisted(targetRelPath) {
     return normalised === p || normalised.startsWith(p + "/");
   });
 }
-var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
 var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
 var CREW_ROSTER_REL = ".halfcycle/crew.json";
 var CAPTURED_INDEX_REL = "test/fixtures/captured/manifest.json";
 var GITIGNORE_REL = ".gitignore";
+var GITATTRIBUTES_REL = ".gitattributes";
 function commandStubRel(name) {
   return `.claude/commands/${name}.md`;
 }
-var RETIRED_WRITE_SET_FILES = [];
+var RETIRED_MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
+var RETIRED_WRITE_SET_FILES = [RETIRED_MCP_HEADERS_HELPER_REL];
 var RETIRED_DENY_PATTERNS = [];
 function closedWriteSet() {
   const files = /* @__PURE__ */ new Set([
@@ -1734,7 +1755,7 @@ function closedWriteSet() {
     INSTALL_MANIFEST_REL,
     ...RETIRED_WRITE_SET_FILES
   ]);
-  const merged = /* @__PURE__ */ new Set([SETTINGS_REL, MCP_REGISTRATION_REL, GITIGNORE_REL]);
+  const merged = /* @__PURE__ */ new Set([SETTINGS_REL, MCP_REGISTRATION_REL, GITIGNORE_REL, GITATTRIBUTES_REL]);
   const dirs = /* @__PURE__ */ new Set();
   for (const path of [...files, ...merged]) {
     for (let dir = posix.dirname(path); dir !== "."; dir = posix.dirname(dir))
@@ -1748,7 +1769,11 @@ function closedWriteSet() {
     ownedDirs,
     hookCommands: new Set(HALFCYCLE_HOOK_COMMANDS),
     denyRuleSha256: new Set([...DENY_PATTERNS, ...RETIRED_DENY_PATTERNS].map((rule) => sha256Hex(rule))),
-    gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL])
+    gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL]),
+    gitattributesLines: /* @__PURE__ */ new Set([
+      GITATTRIBUTES_HEADER,
+      ...lfRules([...Object.keys(OWNED_GENERATED_HEADERS), ...RETIRED_WRITE_SET_FILES])
+    ])
   };
 }
 function readPreviousManifest(targetRepo) {
@@ -1812,15 +1837,19 @@ function recordMcpAdoptionOnly(draft, existingText) {
 }
 function recordGitignoreReconcile(draft, before, after) {
   const adopted = draft.gitignore === void 0 && before !== null ? adoptOlderGitignoreBlock(before) : "";
-  let appended = "";
-  if (after !== null && after !== before) {
-    if (before === null)
-      appended = after;
-    else if (after.startsWith(before))
-      appended = after.slice(before.length);
-  }
+  const appended = appendedText(before, after);
   recordGitignore(draft, before === null && after !== null, [adopted, appended]);
 }
+function recordGitattributesReconcile(draft, before, after) {
+  recordGitattributes(draft, before === null && after !== null, [appendedText(before, after)]);
+}
+function appendedText(before, after) {
+  if (after === null || after === before)
+    return "";
+  if (before === null)
+    return after;
+  return after.startsWith(before) ? after.slice(before.length) : "";
+}
 function assertManifestInWriteSet(manifest, writeSet) {
   const strays = [
     ...manifest.files.map((f) => f.path).filter((p) => !writeSet.files.has(p)),
@@ -1835,7 +1864,8 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
   const merged = [
     SETTINGS_REL,
     ...manifest.mcp !== void 0 ? [MCP_REGISTRATION_REL] : [],
-    ...manifest.gitignore.created || manifest.gitignore.appended.length > 0 ? [GITIGNORE_REL] : []
+    ...manifest.gitignore.created || manifest.gitignore.appended.length > 0 ? [GITIGNORE_REL] : [],
+    ...manifest.gitattributes !== void 0 && (manifest.gitattributes.created || manifest.gitattributes.appended.length > 0) ? [GITATTRIBUTES_REL] : []
   ];
   const collided = new Set(collidedPaths);
   const dirVerdicts = /* @__PURE__ */ new Map();
@@ -2204,7 +2234,8 @@ set -e
 
 # The project root is resolved from THIS SCRIPT'S OWN LOCATION, never from the
 # session's cwd \u2014 a session started in a subdirectory must find the same root
-# .mcp.json the editor loaded, which is the bug mcp-headers.sh already paid for.
+# .mcp.json the editor loaded, which is the bug the editor's headers command
+# already paid for.
 HC_SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 HC_PROJECT_ROOT=$(CDPATH= cd -- "$HC_SCRIPT_DIR/../.." && pwd)
 HC_REGISTRATION="$HC_PROJECT_ROOT/${MCP_REGISTRATION_REL}"
@@ -2251,7 +2282,9 @@ function isTrackedAndClean(targetRepo, relPath) {
   return true;
 }
 function removeLegacyCiStanza(targetRepo) {
-  const rel = ".halfcycle/ci-stanza.yml";
+  return removeRetiredGeneratedFile(targetRepo, ".halfcycle/ci-stanza.yml", 0, CI_STANZA_KNOWN_HEADER_HASHES);
+}
+function removeRetiredGeneratedFile(targetRepo, rel, headerLineIndex, knownHeaderHashes) {
   const path = join5(targetRepo, rel);
   if (!existsSync3(path))
     return "absent";
@@ -2261,10 +2294,9 @@ function removeLegacyCiStanza(targetRepo) {
   } catch {
     return "failed";
   }
-  const headerLine = raw.split("\n")[0] ?? "";
+  const headerLine = raw.split("\n")[headerLineIndex] ?? "";
   const digest = createHash2("sha256").update(headerLine, "utf-8").digest("hex");
-  const ours = CI_STANZA_KNOWN_HEADER_HASHES.includes(digest);
-  if (!ours)
+  if (!knownHeaderHashes.includes(digest))
     return "kept-foreign";
   if (!isTrackedAndClean(targetRepo, rel))
     return "kept-uncommitted";
@@ -2277,203 +2309,33 @@ function removeLegacyCiStanza(targetRepo) {
 }
 var MCP_REGISTRATION_REL = ".mcp.json";
 var MCP_SERVER_KEY = "halfcycle";
-var MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
-var MCP_HEADERS_HELPER_COMMAND = `/bin/sh -c 'd=$(pwd); while [ ! -f "$d/${MCP_HEADERS_HELPER_REL}" ] && [ "$d" != / ]; do d=$(dirname "$d"); done; [ -f "$d/${MCP_HEADERS_HELPER_REL}" ] || { echo "halfcycle: ${MCP_HEADERS_HELPER_REL} not found at or above $(pwd); re-run npx halfcycle" >&2; exit 1; }; exec /bin/sh "$d/${MCP_HEADERS_HELPER_REL}"'`;
-var GENERATED_MCP_HEADERS_HEADER = "# Halfcycle MCP connection headers \u2014 generated by";
+var MCP_HEADERS_HELPER_COMMAND = `node -e "${[
+  `const p=require('path'),f=require('fs'),c=require('child_process');`,
+  `let d=process.cwd();`,
+  `for(;;){`,
+  `const b=p.join(d,'${VENDORED_BIN_REL}');`,
+  `if(f.existsSync(b)){`,
+  `const r=c.spawnSync(process.execPath,[b,'mcp-headers'],{stdio:'inherit'});`,
+  `process.exit(typeof r.status==='number'?r.status:1)}`,
+  `const u=p.dirname(d);`,
+  `if(u===d)break;`,
+  `d=u}`,
+  `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run npx halfcycle in the project folder');`,
+  `process.exit(1)`
+].join("")}"`;
+var MCP_HEADERS_KNOWN_HEADER_HASHES = [
+  "37a733ea588b3361b2bbfd86c44e0c95da30d7af6acffd1243ece83c811f0af2",
+  "6732ec6d2d2bf7cb33017749a3d021b59af653dcd07c3811693b5a242d44b1a1"
+];
+function removeRetiredMcpHeadersHelper(targetRepo) {
+  return removeRetiredGeneratedFile(targetRepo, RETIRED_MCP_HEADERS_HELPER_REL, 1, MCP_HEADERS_KNOWN_HEADER_HASHES);
+}
 var OWNED_GENERATED_HEADERS = {
   ".claude/hooks/guard-runner.sh": GENERATED_GUARD_RUNNER_HEADER,
   ".claude/hooks/user-prompt-reminder.sh": GENERATED_USER_PROMPT_REMINDER_HEADER,
   ".claude/hooks/session-end-marker.sh": GENERATED_SESSION_END_HEADER,
-  ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER,
-  ".halfcycle/mcp-headers.sh": GENERATED_MCP_HEADERS_HEADER
+  ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER
 };
-function generateMcpHeadersHelper() {
-  return `#!/bin/sh
-${GENERATED_MCP_HEADERS_HEADER} the Halfcycle installer.
-#
-# Claude Code runs this at MCP connection time, from the session's cwd, and merges
-# its stdout into the connection headers for the "halfcycle" server in .mcp.json.
-#
-# It exists because \${VAR} expansion in .mcp.json reads the PROCESS environment
-# only: nothing loads a credential into a session, so a referenced
-# \${HALFCYCLE_TOKEN} expanded to nothing and the server was silently absent from
-# the tool list.
-#
-# This file is tracked and holds NO secret. NEITHER DOES ANY OTHER FILE IN THIS
-# REPOSITORY (T-09): the credential lives at machine level, outside every checkout,
-# and this script READS one line out of it (never sources \u2014 a credential store is
-# not code).
-set -eu
-
-# The project root is resolved from THIS SCRIPT'S OWN LOCATION, never from the
-# caller's working directory. Claude Code runs the helper from the SESSION's cwd,
-# and a session started in a subdirectory still finds the root .mcp.json \u2014 so a
-# relative read here silently produced no credential for anyone who started the
-# session in any subdirectory of a monorepo.
-SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-PROJECT_ROOT=$(CDPATH= cd -- "$SCRIPT_DIR/.." && pwd)
-
-${engagementResolutionShell()}
-
-# Read one KEY's value out of the credential store into HC_VALUE, in the CALLER's
-# shell (call it as a statement, never inside $(...)). Last assignment wins,
-# matching the shell's own \`.\` semantics. An optional leading \`export \` is
-# tolerated because a hand-edited store may use one.
-halfcycle_store_value() {
-  HC_VALUE=""
-  hc_line=$(grep "^[[:space:]]*\\(export[[:space:]][[:space:]]*\\)\\{0,1\\}$2=" "$1" | tail -n 1)
-  hc_v=\${hc_line#*"$2="}
-  hc_v=$(printf '%s' "$hc_v" | tr -d '\\r')
-
-  # Strip one layer of matching quotes. The store is WRITTEN single-quoted (both
-  # writers use the same shq: this installer and Studio's provider), because
-  # guard-runner.sh SOURCES the same file and an unquoted value carrying a space
-  # would execute its own remainder. This reader greps rather than sources, so it
-  # has to undo the quoting itself \u2014 and it must land on the same value the
-  # sourcing consumer gets, or one file has two answers.
-  case $hc_v in
-    '"'*'"') hc_v=\${hc_v#'"'}; hc_v=\${hc_v%'"'} ;;
-    "'"*"'")
-      hc_v=\${hc_v#"'"}; hc_v=\${hc_v%"'"}
-      # \u2026and undo shq's embedded-quote escape, '\\'' -> '. The backslash is matched
-      # through a BRACKET EXPRESSION on purpose. MEASURED, on GNU sed 4.9 (Linux,
-      # the CI platform) and BSD sed (macOS), feeding each the script from a file so
-      # no shell quoting is in the way:
-      #
-      #   s/'[\\]''/'/g   a'\\''b -> a'b     both      <- shipped
-      #   s/'\\''/'/g     a'\\''b -> a'\\''b   both      <- matches NOTHING, exit 0
-      #
-      # A bare \\' in a BRE is undefined by POSIX, and the obvious pattern therefore
-      # does not fail loudly \u2014 it silently substitutes nothing, on BOTH platforms,
-      # and the token then travels with four stray characters in it. The bracket
-      # expression makes the backslash literal by a construction POSIX does define.
-      hc_v=$(printf '%s' "$hc_v" | sed "s/'[\\]''/'/g") ;;
-  esac
-  HC_VALUE=$hc_v
-}
-
-# The scheme and host[:port] of a URL, lowercased \u2014 or NOTHING when the URL holds
-# a space or a control character anywhere. That refusal is the load-bearing part:
-# a URL parser drops tabs and newlines before it reads the host, so
-# "https://ours<newline>@elsewhere/" is a request to "elsewhere", while a
-# line-by-line reading here would see only "https://ours". The host ends at the
-# first / ? # or backslash, which is where a URL parser ends it for http(s).
-halfcycle_origin() {
-  hc_u=$1
-  if [ "$(printf '%s' "$hc_u" | tr -d '[:cntrl:][:space:]')" != "$hc_u" ]; then
-    return 0
-  fi
-  printf '%s\\n' "$hc_u" | sed -n 's|^\\([A-Za-z][A-Za-z0-9+.-]*://[^/?#\\\\]*\\).*$|\\1|p' | tr '[:upper:]' '[:lower:]'
-}
-
-# HALFCYCLE_TOKEN in the environment WINS, and it is the CI arm: a job with no
-# browser and no per-user store exports the credential, and a stale store on a
-# long-lived runner must not silently win over it. Same order, and the same reason,
-# as the CLI's own resolver (\`resolve-credential.ts\`). The server it may be sent
-# to is NOT taken from the environment: it is read from this machine's store in
-# both arms, so a token supplied this way still goes only where this machine was
-# set up to send it.
-# The pin names an id that is not a project id. Re-running the installer against
-# that pin refuses it too, so the one remedy that works is a fresh pin.
-halfcycle_bad_id_message() {
-  echo "halfcycle: $PROJECT_ROOT/.halfcycle/bundle.json names an engagement id that is not a Halfcycle project id," >&2
-  echo "halfcycle: so no credential was read. Delete that file and run \\"npx halfcycle\\" again: this repository" >&2
-  echo "halfcycle: is then set up as a new Halfcycle project." >&2
-}
-
-TOKEN=\${HALFCYCLE_TOKEN:-}
-MCP_URL=""
-
-if [ -n "$TOKEN" ]; then
-  if halfcycle_env_file "$PROJECT_ROOT"; then
-    halfcycle_store_value "$HALFCYCLE_ENV_FILE" HALFCYCLE_MCP_URL
-    MCP_URL=$HC_VALUE
-  fi
-else
-  if ! halfcycle_env_file "$PROJECT_ROOT"; then
-    case $HALFCYCLE_ENV_PROBLEM in
-      no-pin)
-        echo "halfcycle: no .halfcycle/bundle.json in $PROJECT_ROOT, so this repository has no Halfcycle engagement." >&2
-        echo "halfcycle: run \\"npx halfcycle\\" here to install one." >&2 ;;
-      no-id)
-        echo "halfcycle: $PROJECT_ROOT/.halfcycle/bundle.json names no engagement id." >&2
-        echo "halfcycle: run \\"npx halfcycle\\" here to rewrite it." >&2 ;;
-      bad-id)
-        halfcycle_bad_id_message ;;
-      no-home)
-        echo "halfcycle: HOME is not set, so the credential store cannot be located." >&2 ;;
-      *)
-        # OUTCOME B (T-02b, solo-project-ownership) is a \`no-credential\` PROBLEM
-        # with a REASON attached, checked here rather than as a fifth case value
-        # \u2014 see \`engagementResolutionShell\`'s own docblock for why. Re-running
-        # this installer can never obtain a credential for this reason, so it is
-        # the one sentence in this file that must not say to.
-        if [ "$HALFCYCLE_ENV_NOT_THIS_ACCOUNT" = "1" ]; then
-          echo "halfcycle: this project belongs to another Halfcycle account, so this machine has no" >&2
-          echo "halfcycle: credential for it and the Halfcycle tools are not available here. Nothing is" >&2
-          echo "halfcycle: broken \u2014 ask the project's owner for view access, or sign in as the account" >&2
-          echo "halfcycle: that owns it and run \\"npx halfcycle\\" again." >&2
-        else
-          echo "halfcycle: this machine holds no credential for engagement $HALFCYCLE_ENV_ENGAGEMENT." >&2
-          echo "halfcycle: run \\"npx halfcycle\\" in this repository \u2014 it will sign you in through your browser if needed, and write the credential to $HOME/.halfcycle, outside this repository." >&2
-        fi ;;
-    esac
-    exit 1
-  fi
-  ENV_FILE="$HALFCYCLE_ENV_FILE"
-
-  halfcycle_store_value "$ENV_FILE" HALFCYCLE_TOKEN
-  TOKEN=$HC_VALUE
-  if [ -z "$TOKEN" ]; then
-    echo "halfcycle: HALFCYCLE_TOKEN is absent or empty in $ENV_FILE." >&2
-    echo "halfcycle: run \\"npx halfcycle\\" in this repository to rewrite this machine's credential." >&2
-    exit 1
-  fi
-  halfcycle_store_value "$ENV_FILE" HALFCYCLE_MCP_URL
-  MCP_URL=$HC_VALUE
-fi
-
-# THE TOKEN GOES ONLY TO THIS MACHINE'S HALFCYCLE SERVER. .mcp.json is a tracked
-# file: anyone who can land a commit can change the server's url, and this script
-# would then hand the credential to whatever it names. Claude Code tells the helper
-# which url it is about to connect to (CLAUDE_CODE_MCP_SERVER_URL); the server this
-# machine was set up against is recorded OUTSIDE the repository, beside the
-# credential. The two must share scheme, host and port, or nothing is printed.
-# No url at all is a refusal too: sending the credential without knowing where it
-# is going is the thing this check exists to stop.
-REQUESTED=\${CLAUDE_CODE_MCP_SERVER_URL:-}
-if [ -z "$REQUESTED" ]; then
-  echo "halfcycle: Claude Code did not say which server it is connecting to, so the Halfcycle credential was not sent." >&2
-  echo "halfcycle: update Claude Code, then reconnect." >&2
-  exit 1
-fi
-if [ -z "$MCP_URL" ] && [ "\${HALFCYCLE_ENV_PROBLEM:-}" = "bad-id" ]; then
-  halfcycle_bad_id_message
-  exit 1
-fi
-if [ -z "$MCP_URL" ]; then
-  echo "halfcycle: this machine has no Halfcycle server address recorded for this repository, so the credential was not sent." >&2
-  echo "halfcycle: run \\"npx halfcycle\\" in this repository on this machine to record it." >&2
-  exit 1
-fi
-WANT=$(halfcycle_origin "$MCP_URL")
-GOT=$(halfcycle_origin "$REQUESTED")
-if [ -z "$WANT" ] || [ "$GOT" != "$WANT" ]; then
-  SHOWN=$(printf '%s' "$REQUESTED" | tr -cd '[:graph:]' | cut -c1-200)
-  echo "halfcycle: .mcp.json asks for this repository's Halfcycle credential to be sent to $SHOWN," >&2
-  echo "halfcycle: which is not this machine's Halfcycle server (\${WANT:-none recorded}). The credential was NOT sent." >&2
-  echo "halfcycle: if nobody meant to change .mcp.json, treat that change as suspect; \\"npx halfcycle\\" restores the entry." >&2
-  exit 1
-fi
-
-# JSON-escape: backslash first, then double quote. A token carrying either would
-# otherwise emit invalid JSON, and invalid JSON is dropped SILENTLY \u2014 the
-# connection succeeds carrying no Authorization header at all.
-ESCAPED=$(printf '%s' "$TOKEN" | sed -e 's/\\\\/\\\\\\\\/g' -e 's/"/\\\\"/g')
-
-printf '{"Authorization":"Bearer %s"}\\n' "$ESCAPED"
-`;
-}
 function generateMcpRegistration(existing, mcpOrigin) {
   let base = { mcpServers: {} };
   if (existing !== null) {
@@ -2540,6 +2402,42 @@ ${header}
     return "failed";
   }
 }
+var GITATTRIBUTES_HEADER = "# Halfcycle \u2014 generated scripts keep LF line endings";
+function readTextOrNull(path) {
+  try {
+    return readFileSync4(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
+function lfRules(paths) {
+  return [...paths].filter((path) => path.endsWith(".sh")).map((path) => `${path} text eol=lf`);
+}
+var REQUIRED_GITATTRIBUTES_RULES = lfRules(Object.keys(OWNED_GENERATED_HEADERS));
+function reconcileGitattributes(targetRepo) {
+  const path = join5(targetRepo, GITATTRIBUTES_REL);
+  const rules = REQUIRED_GITATTRIBUTES_RULES;
+  const routed = [];
+  try {
+    if (lstatOrNull(path)?.isSymbolicLink() === true)
+      return "failed";
+    if (!existsSync3(path)) {
+      writeAllowlisted(path, targetRepo, [GITATTRIBUTES_HEADER, ...rules].join("\n") + "\n", routed);
+      return "written";
+    }
+    const existing = readFileSync4(path, "utf-8");
+    const present = new Set(existing.split("\n").map((l) => l.trim()));
+    const toAdd = rules.filter((rule) => !present.has(rule));
+    if (toAdd.length === 0)
+      return "skipped";
+    const separator = existing === "" ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join("\n") + "\n";
+    writeAllowlisted(path, targetRepo, existing + suffix, routed);
+    return "written";
+  } catch {
+    return "failed";
+  }
+}
 function previousPinForEngagement(targetRepoRoot, engagementId) {
   try {
     const existing = readBundlePin(targetRepoRoot);
@@ -2752,9 +2650,6 @@ async function install(options) {
       break;
   }
   if (credential) {
-    const helperPath = join5(targetRepo, MCP_HEADERS_HELPER_REL);
-    const helperOutcome = recordOwnedGenerated(report, helperPath, targetRepo, generateMcpHeadersHelper(), OWNED_GENERATED_HEADERS[MCP_HEADERS_HELPER_REL], MCP_HEADERS_HELPER_REL);
-    noteFile(draft, targetRepo, MCP_HEADERS_HELPER_REL, helperOutcome);
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
     const existingMcp = existsSync3(mcpPath) ? readFileSync4(mcpPath, "utf-8") : null;
     const mcpContent = generateMcpRegistration(existingMcp, credential.mcpUrl);
@@ -2766,6 +2661,24 @@ async function install(options) {
     } else {
       report.skippedPaths.push(MCP_REGISTRATION_REL);
     }
+    const helperRel = RETIRED_MCP_HEADERS_HELPER_REL;
+    switch (removeRetiredMcpHeadersHelper(targetRepo)) {
+      case "removed":
+        recordRemovedFile(draft, helperRel);
+        report.writtenPaths.push(`${helperRel} (REMOVED \u2014 Halfcycle no longer uses this file)`);
+        break;
+      case "kept-foreign":
+        report.skippedPaths.push(`${helperRel} (KEPT \u2014 Halfcycle no longer uses this file, and it is not one Halfcycle generated byte for byte, so it was left alone; delete it if nothing of yours needs it)`);
+        break;
+      case "kept-uncommitted":
+        report.skippedPaths.push(`${helperRel} (KEPT \u2014 Halfcycle no longer uses this file, but it is not a clean, committed copy in this repository, so it was left alone rather than risk losing an edit; delete it when you are ready)`);
+        break;
+      case "failed":
+        report.skippedPaths.push(`${helperRel} (could not be removed \u2014 Halfcycle no longer uses this file, DELETE IT BY HAND)`);
+        break;
+      case "absent":
+        break;
+    }
   } else {
     report.skippedPaths.push(`${MCP_REGISTRATION_REL} (no MCP origin \u2014 no credential supplied)`);
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
@@ -2781,6 +2694,15 @@ async function install(options) {
   } else {
     record(report, gitignoreOutcome, ".gitignore");
   }
+  const gitattributesPath = join5(targetRepo, GITATTRIBUTES_REL);
+  const gitattributesBefore = readTextOrNull(gitattributesPath);
+  const gitattributesOutcome = reconcileGitattributes(targetRepo);
+  recordGitattributesReconcile(draft, gitattributesBefore, readTextOrNull(gitattributesPath));
+  if (gitattributesOutcome === "failed") {
+    report.skippedPaths.push(`${GITATTRIBUTES_REL} (write failed \u2014 a clone made with core.autocrlf=true may check the hook scripts out with CRLF line endings)`);
+  } else {
+    record(report, gitattributesOutcome, GITATTRIBUTES_REL);
+  }
   const identityOutcome = writeProjectIdentity(targetRepo);
   record(report, identityOutcome, PROJECT_IDENTITY_REL);
   noteFile(draft, targetRepo, PROJECT_IDENTITY_REL, identityOutcome);
@@ -3554,7 +3476,7 @@ function renderCouldNotRun(entries, p) {
   }
   return lines.join("\n");
 }
-function headline(observed, attested) {
+function headline(observed, attested, checks) {
   const met = attested.decision === "done-when-met";
   const problemsReported = attested.walk !== null && attested.walk.verdict === "defects";
   switch (observed.crossed.kind) {
@@ -3562,7 +3484,10 @@ function headline(observed, attested) {
       if (!met) {
         return "**Closed by override.** Halfcycle saw nothing outstanding, and the person closing the phase chose to override rather than state its finish conditions were met.";
       }
-      return problemsReported ? "**Closed with problems reported.** Halfcycle saw nothing outstanding, and the person closing the phase reported problems found in its acceptance walk." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
+      if (problemsReported) {
+        return "**Closed with problems reported.** Halfcycle saw nothing outstanding, and the person closing the phase reported problems found in its acceptance walk.";
+      }
+      return checks === "not-observed" ? "**Closed with nothing outstanding, but no checks ran.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met, but Halfcycle has no record of any check running during this phase, so this is not a clean result." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
     case "unfinished-steps":
     case "clean-over-findings":
       return met ? "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase stated its finish conditions were met anyway." : "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase chose to override it.";
@@ -3650,10 +3575,10 @@ function renderStated(attested, p) {
   }
   return lines.join("\n");
 }
-function renderClose(heading, observed, attested, p) {
+function renderClose(heading, observed, attested, checks, p) {
   return [
     heading,
-    headline(observed, attested),
+    headline(observed, attested, checks),
     OBSERVED_LABEL,
     [
       `- Closed at: ${closedAtText(observed.closedAt, p)}`,
@@ -3688,12 +3613,12 @@ function renderBuildRecordV2Markdown(record2) {
     ].join("\n"),
     total === 1 ? "This phase was closed once." : `This phase was closed ${String(total)} times. The latest close is described first; each earlier close follows, as it was recorded when it was made.`,
     ...renderChecks(record2.observed.checks, p),
-    ...renderClose(total === 1 ? "## The close" : `## The latest close (close ${String(latest.sequence)} of ${String(total)})`, latest, attestedBySequence.get(latest.sequence), p)
+    ...renderClose(total === 1 ? "## The close" : `## The latest close (close ${String(latest.sequence)} of ${String(total)})`, latest, attestedBySequence.get(latest.sequence), record2.observed.checks.state, p)
   ];
   if (total > 1) {
     body.push("## Earlier closes");
     for (const close of closes.slice(0, -1)) {
-      body.push(...renderClose(`### Close ${String(close.sequence)} of ${String(total)}`, close, attestedBySequence.get(close.sequence), p));
+      body.push(...renderClose(`### Close ${String(close.sequence)} of ${String(total)}`, close, attestedBySequence.get(close.sequence), record2.observed.checks.state, p));
     }
   }
   const header = [`${TITLE_PREFIX}${phase}`, HEADER_WHAT, HEADER_REGISTERS, HEADER_CHECKS, HEADER_KEPT];