halfcycle 0.3.35 → 0.3.37

package/bin/bin.bundle.mjs

@@ -14548,7 +14548,10 @@ var matcherSchema = external_exports.discriminatedUnion("kind", [
 var HALFCYCLE_DIR_NAME = ".halfcycle";
 var ENGAGEMENTS_DIR_NAME = "engagements";
 var ENGAGEMENT_ENV_FILENAME = "env";
+var NOT_THIS_ACCOUNT_MARKER_FILENAME = "not-this-account";
 var ACCOUNT_STORE_FILENAME = "account.json";
+var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
+var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var ENGAGEMENT_ID_PATTERN = "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
 var ENGAGEMENT_ID_SHAPE = new RegExp(ENGAGEMENT_ID_PATTERN);
 function isEngagementId(value) {
@@ -14746,6 +14749,10 @@ function looksLikeSecret(text) {
   return false;
 }
 
+// ../core/dist/mcp-registration.js
+var MCP_REGISTRATION_REL = ".mcp.json";
+var MCP_SERVER_KEY = "halfcycle";
+
 // dist/control-origin.js
 var DEFAULT_CONTROL_ORIGIN = "https://control.halfcycle.ai";
 function resolveControlOrigin(env) {
@@ -14761,10 +14768,10 @@ var EXCERPT_DEFAULTS = {
   maxExcerptsPerFile: 5,
   maxExcerptsPerChangeSet: 20
 };
-function readConfig() {
-  const guardServiceUrl = readGuardOrigin().origin;
-  const guardServiceToken = process.env["GUARD_SERVICE_TOKEN"];
-  const guardEngagementId = process.env["GUARD_ENGAGEMENT_ID"];
+function readConfig(env = process.env) {
+  const guardServiceUrl = readGuardOrigin(env).origin;
+  const guardServiceToken = env["GUARD_SERVICE_TOKEN"];
+  const guardEngagementId = env["GUARD_ENGAGEMENT_ID"];
   const missing = [];
   if (!guardServiceToken)
     missing.push("GUARD_SERVICE_TOKEN");
@@ -14786,8 +14793,8 @@ function readNeverConfiguredReason() {
 function isHalfcycleOwnCi() {
   return process.env["HALFCYCLE_INTERNAL_CI"] === "1";
 }
-function readGuardOrigin() {
-  return resolveGuardOrigin(process.env);
+function readGuardOrigin(env = process.env) {
+  return resolveGuardOrigin(env);
 }
 function readActionsOidcEnv() {
   const requestUrl = process.env["ACTIONS_ID_TOKEN_REQUEST_URL"]?.trim();
@@ -14796,11 +14803,19 @@ function readActionsOidcEnv() {
     return void 0;
   return { requestUrl, requestToken };
 }
-function readControlOrigin() {
-  return resolveControlOrigin(process.env);
+function readControlOrigin(env = process.env) {
+  return resolveControlOrigin(env);
+}
+function readEnvFilePath(env = process.env) {
+  const raw = env["HALFCYCLE_ENV_FILE"]?.trim();
+  return raw ? raw : void 0;
+}
+function readEnvironmentToken() {
+  const raw = process.env["HALFCYCLE_TOKEN"];
+  return raw?.trim() ? raw : void 0;
 }
-function readEnvFilePath() {
-  const raw = process.env["HALFCYCLE_ENV_FILE"]?.trim();
+function readMcpServerUrl() {
+  const raw = process.env["CLAUDE_CODE_MCP_SERVER_URL"];
   return raw ? raw : void 0;
 }
 function readExcerptConfig() {
@@ -15281,6 +15296,25 @@ var ciTokenExchangeResponseSchema = external_exports.object({
   expiresAt: utcIso8601,
   engagementId: external_exports.string()
 }).strict();
+var NO_CREDENTIAL_PLACEHOLDER = "halfcycle:no-credential";
+var NOT_THIS_ACCOUNT_PLACEHOLDER = "halfcycle:not-this-account";
+var UPDATE_CLAUDE_CODE_PLACEHOLDER = "halfcycle:update-claude-code";
+var CREDENTIAL_PLACEHOLDERS = [
+  NO_CREDENTIAL_PLACEHOLDER,
+  NOT_THIS_ACCOUNT_PLACEHOLDER,
+  UPDATE_CLAUDE_CODE_PLACEHOLDER
+];
+var SWITCH_ACCOUNT_ANSWER = 'answer "s" when asked';
+var NO_CREDENTIAL_SENTENCE = 'Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "npx halfcycle" in the project folder to sign in again.';
+var NOT_THIS_ACCOUNT_SENTENCE = `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "npx halfcycle" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+var UPDATE_CLAUDE_CODE_SENTENCE = "Halfcycle is not connected: this Claude Code version does not name the server it connects to, so no credential was sent. Update Claude Code, then reopen.";
+var CANNOT_REACH_SENTENCE = "Halfcycle is not connected: its server could not be reached, so its tools are unavailable in this session. Check your network, then reopen the project.";
+var SERVICE_PROBLEM_SENTENCE = "Halfcycle is not connected: its service had a problem just now, so nothing in this session is being checked. Reopen the project to try again.";
+var PLACEHOLDER_SENTENCES = Object.freeze({
+  [NO_CREDENTIAL_PLACEHOLDER]: NO_CREDENTIAL_SENTENCE,
+  [NOT_THIS_ACCOUNT_PLACEHOLDER]: NOT_THIS_ACCOUNT_SENTENCE,
+  [UPDATE_CLAUDE_CODE_PLACEHOLDER]: UPDATE_CLAUDE_CODE_SENTENCE
+});
 
 // dist/hook-protocol.js
 import { writeSync } from "node:fs";
@@ -15289,7 +15323,7 @@ function emitBlock(reason) {
   process.exit(0);
 }
 function nonBlockingReply(event, text) {
-  if (event === "PostToolUse") {
+  if (event === "PostToolUse" || event === "SessionStart") {
     return JSON.stringify({
       systemMessage: text,
       hookSpecificOutput: { hookEventName: event, additionalContext: text }
@@ -15334,11 +15368,15 @@ This is not a service outage: the guard service answered. The suspect is this re
 }
 var UNCONFIGURED_EXIT_TOOL_USE = 2;
 var UNCONFIGURED_EXIT_STOP_FAMILY = 1;
-function emitNeverConfigured(missing, exitCode, reason) {
-  writeSync(2, neverConfiguredReport(missing, reason));
+function emitNeverConfigured(exitCode, reason) {
+  writeSync(2, neverConfiguredReport(reason));
   process.exitCode = exitCode;
 }
-var HOOK_REMEDY = `Fix it by running "npx halfcycle" in this repository: it may open your browser to sign in first, then writes this engagement's credentials to ~/.halfcycle \u2014 outside the repository \u2014 and the hook loads them itself.`;
+var SIGN_IN_COMMAND = '"npx halfcycle"';
+var HOOK_REMEDY = `Run ${SIGN_IN_COMMAND} in the project folder to sign in.`;
+function namesTheSignInCommand(text) {
+  return text.includes(SIGN_IN_COMMAND);
+}
 var PERMISSIONS_BLOCK = "\n    permissions:\n      contents: read\n      id-token: write\n\n";
 var BOTH_LINES_SENTENCE = "BOTH LINES. Declaring any permission replaces the defaults rather than adding to them, so a block naming only the identity token takes read access away from the checkout step and a private repository stops checking out before this check is reached.";
 var CI_CANNOT_PROVE_PROJECT = "has no way to prove which project it belongs to";
@@ -15346,17 +15384,17 @@ var CI_REMEDY_LEAD = "Add this to the workflow \u2014 at the top of the file, or
 var CI_OLDER_SETUP = "The older setup, GUARD_SERVICE_TOKEN and GUARD_ENGAGEMENT_ID supplied as repository secrets, still works unchanged, and a job that has both needs neither line.";
 var CI_REMEDY = `This job cannot vouch for anything, because it ${CI_CANNOT_PROVE_PROJECT}. ${CI_REMEDY_LEAD} ${CI_OLDER_SETUP}`;
 var CI_NOT_SUPPORTED_MESSAGE = "[Halfcycle CI] This is Halfcycle-internal and is not supported in your CI.\n";
-var NEVER_CONFIGURED_HEADLINE = "GUARD NEVER CONFIGURED";
+var NEVER_CONFIGURED_HEADLINE = "Halfcycle guidance and support won't be available";
 var NOT_A_SERVICE_OUTAGE = "This is not a service outage.";
-function neverConfiguredMessage(missing, remedy, label = "[Halfcycle]") {
-  return `${label} ${NEVER_CONFIGURED_HEADLINE} \u2014 this repository has no guard coverage.
-No evaluation was attempted, because there is nothing to attempt one with: ${missing.join(", ")} ${missing.length === 1 ? "is" : "are"} absent.
-${NOT_A_SERVICE_OUTAGE} It means the guard has never run here \u2014 not on this change, and not on any change before it.
+var NO_SIGN_IN_HERE = `${NEVER_CONFIGURED_HEADLINE} in this project on this machine: there is no Halfcycle sign-in for this project here`;
+function neverConfiguredMessage(remedy, label = "[Halfcycle]") {
+  return `${label} ${NO_SIGN_IN_HERE}. Edits made in this session won't be checked.
+${NOT_A_SERVICE_OUTAGE}
 ${remedy}
 `;
 }
 function ciNeverConfiguredMessage() {
-  return `[Halfcycle CI] ${NEVER_CONFIGURED_HEADLINE} \u2014 this job ${CI_CANNOT_PROVE_PROJECT}, so it checked nothing. ${CI_REMEDY_LEAD}
+  return `[Halfcycle CI] ${NEVER_CONFIGURED_HEADLINE} in this job: it ${CI_CANNOT_PROVE_PROJECT}, so it checked nothing. ${CI_REMEDY_LEAD}
 ${NOT_A_SERVICE_OUTAGE} Nothing was sent: this job holds no credential and was not permitted to ask GitHub for a signed identity token. It speaks for this job on this change only \u2014 other jobs and earlier changes it did not see.
 ${CI_OLDER_SETUP}
 `;
@@ -15365,10 +15403,10 @@ function notThisAccountReport(label) {
   return `${label} This project belongs to another Halfcycle account. Halfcycle is Solo today \u2014 one person works on a project at a time \u2014 so no credential exists for this machine and none will be issued. Nothing here needs fixing; this copy simply is not checked. Ask the project's owner for view access, or \u2014 if this account is wrong \u2014 sign in as the one that owns the project and run "npx halfcycle" again.
 `;
 }
-function neverConfiguredReport(missing, reason, label = "[Halfcycle]") {
+function neverConfiguredReport(reason, label = "[Halfcycle]") {
   switch (reason) {
     case "no-credential-yet":
-      return neverConfiguredMessage(missing, HOOK_REMEDY, label);
+      return neverConfiguredMessage(HOOK_REMEDY, label);
     case "not-this-account":
       return notThisAccountReport(label);
   }
@@ -15424,6 +15462,21 @@ function credentialRenewalFailedMessage(remedy, label = "[Halfcycle]") {
 ${remedy}
 `;
 }
+function noCoverageStatement(reason, remedySaid = false) {
+  if (reason === "not-this-account") {
+    return [
+      "[halfcycle] This project belongs to another Halfcycle account, so nothing here is checked.",
+      "[halfcycle] Your work carries on exactly as it would without Halfcycle \u2014 no edit is",
+      "[halfcycle] evaluated, and nothing you do is reported as having passed.",
+      "[halfcycle] Halfcycle is Solo today \u2014 one developer per project \u2014 with Team plans coming.",
+      "[halfcycle] Ask the project's owner for view access.",
+      "[halfcycle] If this account is wrong, sign in as the one that owns the project and run",
+      '[halfcycle] "npx halfcycle" again.'
+    ].join("\n");
+  }
+  const statement = `${NO_SIGN_IN_HERE}, so edits made in this session won't be checked.`;
+  return remedySaid ? statement : `${statement} ${HOOK_REMEDY}`;
+}
 function notRunReport(notRun, label = "[Halfcycle]") {
   if (!notRun || notRun.length === 0)
     return "";
@@ -17186,7 +17239,7 @@ function cleanRunSummary(verdict, scope) {
 }
 
 // dist/credential-store.js
-import { chmodSync, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
+import { chmodSync, existsSync as existsSync2, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
 import { homedir as homedir2, platform } from "node:os";
 import { dirname as dirname3, join as join5 } from "node:path";
 var REFRESHED_TOKEN_KEYS = ["HALFCYCLE_TOKEN", "GUARD_SERVICE_TOKEN"];
@@ -17194,6 +17247,9 @@ var TOKEN_READ_KEY = "GUARD_SERVICE_TOKEN";
 function composeEngagementEnvPath(engagementId, home) {
   return join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, ENGAGEMENT_ENV_FILENAME);
 }
+function hasNotThisAccountMarker(engagementId, home) {
+  return existsSync2(join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, NOT_THIS_ACCOUNT_MARKER_FILENAME));
+}
 function readAccountCredential(controlOrigin, home) {
   let raw;
   try {
@@ -17208,13 +17264,20 @@ function readAccountCredential(controlOrigin, home) {
   return entry.credential;
 }
 function readStoredEngagementToken(envFilePath) {
+  const values = readEngagementStore(envFilePath);
+  return values === void 0 ? void 0 : storedEngagementToken(values);
+}
+function readEngagementStore(envFilePath) {
   let raw;
   try {
     raw = readFileSync5(envFilePath, "utf-8");
   } catch {
     return void 0;
   }
-  const value = parseEnvText(raw)[TOKEN_READ_KEY];
+  return parseEnvText(raw);
+}
+function storedEngagementToken(values) {
+  const value = values[TOKEN_READ_KEY];
   return value && value.trim() !== "" ? value : void 0;
 }
 function writeRefreshedToken(opts) {
@@ -17263,6 +17326,7 @@ function writeRefreshedToken(opts) {
 
 // dist/credential-refresh.js
 var CONTROL_TIMEOUT_MS = 5e3;
+var CONNECTION_CHECK_DEADLINE_MS = 3e3;
 var UNAUTHORIZED = 401;
 async function probeAccount(controlOrigin, credential, fetchFn = globalThis.fetch) {
   const controller = new AbortController();
@@ -17325,14 +17389,14 @@ var UNREACHABLE_REMEDY = "The Halfcycle service could not be reached to renew th
 var UNREADABLE_REFUSAL_REMEDY = "The Halfcycle service declined to renew this credential and gave no reason this version could read.";
 var UNREADABLE_MINT_REMEDY = 'The Halfcycle service answered with a credential this version could not read. Update the installed Halfcycle runner: run "npx halfcycle" in this repository.';
 async function refreshEngagementCredential(opts) {
-  const envFilePath = readEnvFilePath();
+  const envFilePath = readEnvFilePath(opts.source);
   if (!envFilePath)
     return { ok: false, remedy: HOOK_REMEDY };
   const stored = readStoredEngagementToken(envFilePath);
   if (stored !== void 0 && stored !== opts.refusedToken) {
     return { ok: true, token: stored, source: "disk" };
   }
-  const controlOrigin = readControlOrigin().origin;
+  const controlOrigin = readControlOrigin(opts.source).origin;
   const accountCredential = readAccountCredential(controlOrigin, opts.home);
   if (!accountCredential)
     return { ok: false, remedy: HOOK_REMEDY };
@@ -17375,7 +17439,7 @@ async function evaluateWithRefresh(opts) {
 }
 
 // dist/seat-configuration.js
-import { existsSync as existsSync2, readFileSync as readFileSync6, realpathSync as realpathSync2 } from "node:fs";
+import { existsSync as existsSync3, readFileSync as readFileSync6, realpathSync as realpathSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join6, relative as relative3, resolve } from "node:path";
 function gatherSeatConfiguration(repoRoot, read = readSeatConfiguration) {
@@ -17484,7 +17548,7 @@ function readPathStates(projectDir, repoRoot) {
   const status = getWiringStatus(HALFCYCLE_HOOK_WIRING_PATHS, projectDir);
   if (!status.ok)
     return unknown2();
-  const mapped = mapWiringStatus(status.value, prefix, HALFCYCLE_HOOK_WIRING_PATHS, (rel) => existsSync2(join6(projectDir, rel)));
+  const mapped = mapWiringStatus(status.value, prefix, HALFCYCLE_HOOK_WIRING_PATHS, (rel) => existsSync3(join6(projectDir, rel)));
   return mapped ?? unknown2();
 }
 function mapWiringStatus(output, prefix, paths, onDisk) {
@@ -17566,7 +17630,7 @@ async function evaluateEdit(reply, readSeat) {
   const configResult = readConfig();
   if (!configResult.config) {
     await emitRunRecord({ runType: "hook", outcome: "unconfigured", changeSet });
-    emitNeverConfigured(configResult.missing, UNCONFIGURED_EXIT_TOOL_USE, readNeverConfiguredReason());
+    emitNeverConfigured(UNCONFIGURED_EXIT_TOOL_USE, readNeverConfiguredReason());
     return;
   }
   const { guardServiceUrl, guardServiceToken, guardEngagementId } = configResult.config;
@@ -17656,17 +17720,17 @@ ${guardLines}${notRunBlock}`);
   }
 }
 function readStdin() {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve4, reject) => {
     const chunks = [];
     process.stdin.on("data", (chunk) => chunks.push(chunk));
-    process.stdin.on("end", () => resolve2(Buffer.concat(chunks).toString("utf-8")));
+    process.stdin.on("end", () => resolve4(Buffer.concat(chunks).toString("utf-8")));
     process.stdin.on("error", reject);
   });
 }
 
 // dist/hooks/marker.js
 import { createHash } from "node:crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3, statSync } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3, statSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join7 } from "node:path";
 var MARKER_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -17695,7 +17759,7 @@ function dedupePath(repoRoot, sessionId) {
 }
 function readMarker(repoRoot, sessionId) {
   const path = markerPath(repoRoot, sessionId);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return null;
   try {
     return readFileSync7(path, "utf-8").trim() || null;
@@ -17706,7 +17770,7 @@ function readMarker(repoRoot, sessionId) {
 function deleteMarker(repoRoot, sessionId) {
   for (const path of [markerPath(repoRoot, sessionId), dedupePath(repoRoot, sessionId)]) {
     try {
-      if (existsSync3(path))
+      if (existsSync4(path))
         unlinkSync3(path);
     } catch {
     }
@@ -17714,7 +17778,7 @@ function deleteMarker(repoRoot, sessionId) {
 }
 function readDedupe(repoRoot, sessionId) {
   const path = dedupePath(repoRoot, sessionId);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync7(path, "utf-8"));
@@ -17861,7 +17925,7 @@ async function evaluateSession(input, kind, reply, readSeat) {
   const configResult = readConfig();
   if (!configResult.config) {
     await emitRunRecord({ runType: "hook", outcome: "unconfigured", changeSet, diffBase });
-    emitNeverConfigured(configResult.missing, UNCONFIGURED_EXIT_STOP_FAMILY, readNeverConfiguredReason());
+    emitNeverConfigured(UNCONFIGURED_EXIT_STOP_FAMILY, readNeverConfiguredReason());
     return;
   }
   const { guardServiceUrl, guardServiceToken, guardEngagementId } = configResult.config;
@@ -17954,6 +18018,7 @@ ${guardLines}${notRunBlock}`);
 }
 
 // dist/hooks/stdin.js
+var HOOK_STDIN_GRACE_MS = 2e3;
 async function readHookStdin() {
   try {
     const raw = await readStdin2();
@@ -17968,9 +18033,9 @@ async function readHookStdin() {
   }
 }
 function readStdin2() {
-  return new Promise((resolve2) => {
+  return new Promise((resolve4) => {
     if (process.stdin.isTTY) {
-      resolve2("");
+      resolve4("");
       return;
     }
     const chunks = [];
@@ -17980,9 +18045,9 @@ function readStdin2() {
         return;
       settled = true;
       clearTimeout(timer);
-      resolve2(Buffer.concat(chunks).toString("utf-8"));
+      resolve4(Buffer.concat(chunks).toString("utf-8"));
     };
-    const timer = setTimeout(done, 2e3);
+    const timer = setTimeout(done, HOOK_STDIN_GRACE_MS);
     process.stdin.on("data", (chunk) => chunks.push(chunk));
     process.stdin.on("end", done);
     process.stdin.on("error", done);
@@ -18002,14 +18067,14 @@ async function runStop() {
 }
 
 // dist/resolve-engagement.js
-import { existsSync as existsSync4, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
 import { join as join8, sep as sep2 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function defaultRegistryPath() {
   return join8(homedir4(), ".halfcycle", "registry.json");
 }
 function readRegistry(registryPath = defaultRegistryPath()) {
-  if (!existsSync4(registryPath))
+  if (!existsSync5(registryPath))
     return {};
   try {
     const parsed = JSON.parse(readFileSync8(registryPath, "utf-8"));
@@ -18059,41 +18124,380 @@ function runResolveEngagement(cwd, registryPath) {
   return 0;
 }
 
+// dist/refresh-credential.js
+import { readFileSync as readFileSync10 } from "node:fs";
+import { resolve as resolve3 } from "node:path";
+
+// dist/mcp-headers.js
+import { readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname4, resolve as resolve2 } from "node:path";
+function defaultWriteErr(text) {
+  process.stderr.write(text);
+}
+function headerLine(bearer) {
+  return `${JSON.stringify({ Authorization: `Bearer ${bearer}` })}
+`;
+}
+function projectRootFromBinary(binaryPath) {
+  const depth = VENDORED_BIN_REL.split("/").length - 1;
+  return resolve2(dirname4(binaryPath), ...Array(depth).fill(".."));
+}
+function readPinnedId(root) {
+  let raw;
+  try {
+    raw = readFileSync9(resolve2(root, BUNDLE_PIN_REL), "utf-8");
+  } catch {
+    return { problem: "no-pin" };
+  }
+  let pin;
+  try {
+    pin = JSON.parse(raw);
+  } catch {
+    return { problem: "no-id" };
+  }
+  const id = typeof pin === "object" && pin !== null ? pin[PIN_ENGAGEMENT_ID_FIELD] : void 0;
+  return typeof id === "string" && id !== "" ? { id } : { problem: "no-id" };
+}
+function resolveStore(root, home) {
+  const pinned = readPinnedId(root);
+  if ("problem" in pinned)
+    return { ok: false, problem: pinned.problem };
+  if (!isEngagementId(pinned.id))
+    return { ok: false, problem: "bad-id" };
+  const notThisAccount = hasNotThisAccountMarker(pinned.id, home);
+  const path = composeEngagementEnvPath(pinned.id, home);
+  const values = readEngagementStore(path);
+  if (values === void 0) {
+    return { ok: false, problem: notThisAccount ? "not-this-account" : "no-credential", engagementId: pinned.id };
+  }
+  return { ok: true, path, values };
+}
+function urlOrigin(url2) {
+  if (/[\s\u0000-\u001f\u007f-\u009f]/u.test(url2))
+    return void 0;
+  const match = /^([A-Za-z][A-Za-z0-9+.-]*:\/\/[^/?#\\]*)/.exec(url2);
+  return match ? match[1].toLowerCase() : void 0;
+}
+function shownUrl(url2) {
+  return url2.replace(/[^\x21-\x7e]/g, "").slice(0, 200);
+}
+function sentences(lines) {
+  return lines.map((line) => `halfcycle: ${line}
+`).join("");
+}
+function badIdSentence(root) {
+  return sentences([
+    `${resolve2(root, BUNDLE_PIN_REL)} names an engagement id that is not a Halfcycle project id,`,
+    'so no credential was read. Delete that file and run "npx halfcycle" again: this repository',
+    "is then set up as a new Halfcycle project."
+  ]);
+}
+function storeProblemSentence(problem, root, home, engagementId) {
+  switch (problem) {
+    case "no-pin":
+      return sentences([
+        `no ${BUNDLE_PIN_REL} in ${root}, so this repository has no Halfcycle engagement.`,
+        'run "npx halfcycle" here to install one.'
+      ]);
+    case "no-id":
+      return sentences([
+        `${resolve2(root, BUNDLE_PIN_REL)} names no engagement id.`,
+        'run "npx halfcycle" here to rewrite it.'
+      ]);
+    case "bad-id":
+      return badIdSentence(root);
+    case "not-this-account":
+      return sentences([
+        "this project belongs to another Halfcycle account, so this machine has no",
+        "credential for it and the Halfcycle tools are not available here. Nothing is",
+        "broken \u2014 ask the project's owner for view access, or sign in as the account",
+        'that owns it and run "npx halfcycle" again.'
+      ]);
+    case "no-credential":
+      return sentences([
+        `this machine holds no credential for engagement ${engagementId ?? ""}.`,
+        `run "npx halfcycle" in this repository \u2014 it will sign you in through your browser if needed, and write the credential to ${resolve2(home, HALFCYCLE_DIR_NAME)}, outside this repository.`
+      ]);
+  }
+}
+async function refreshWithinDeadline(source, opts, writeErr) {
+  let timer;
+  const deadline = new Promise((settle) => {
+    timer = setTimeout(() => settle(void 0), opts.deadlineMs ?? CONTROL_TIMEOUT_MS);
+  });
+  const refresh = refreshCredentialToken({
+    fetchFn: opts.fetchFn,
+    home: opts.home,
+    write: writeErr,
+    source
+  }).then((result) => result.token, () => void 0);
+  try {
+    return await Promise.race([refresh, deadline]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function chooseBearer(opts) {
+  const writeErr = opts.writeErr ?? defaultWriteErr;
+  const home = opts.home ?? homedir5();
+  const root = projectRootFromBinary(opts.binaryPath);
+  const environmentToken = opts.environmentTokenFirst ? readEnvironmentToken() : void 0;
+  const store = resolveStore(root, home);
+  let storedToken;
+  if (environmentToken === void 0) {
+    if (!store.ok) {
+      writeErr(storeProblemSentence(store.problem, root, home, store.engagementId));
+      return store.problem === "not-this-account" ? NOT_THIS_ACCOUNT_PLACEHOLDER : NO_CREDENTIAL_PLACEHOLDER;
+    }
+    storedToken = storedEngagementToken(store.values);
+    if (storedToken === void 0) {
+      writeErr(sentences([
+        `GUARD_SERVICE_TOKEN is absent or empty in ${store.path}.`,
+        `run "npx halfcycle" in this repository to rewrite this machine's credential.`
+      ]));
+      return NO_CREDENTIAL_PLACEHOLDER;
+    }
+  }
+  const requested = opts.requestedUrl;
+  const recorded = store.ok ? store.values["HALFCYCLE_MCP_URL"] : void 0;
+  if (requested === void 0 && store.ok) {
+    writeErr(sentences([
+      "Claude Code did not say which server it is connecting to, so the Halfcycle credential was not sent.",
+      "update Claude Code, then reconnect."
+    ]));
+    return UPDATE_CLAUDE_CODE_PLACEHOLDER;
+  }
+  if (!recorded) {
+    if (!store.ok && store.problem === "bad-id") {
+      writeErr(badIdSentence(root));
+    } else {
+      writeErr(sentences([
+        "this machine has no Halfcycle server address recorded for this repository, so the credential was not sent.",
+        'run "npx halfcycle" in this repository on this machine to record it.'
+      ]));
+    }
+    return NO_CREDENTIAL_PLACEHOLDER;
+  }
+  const want = urlOrigin(recorded);
+  const got = requested === void 0 ? void 0 : urlOrigin(requested);
+  if (want === void 0 || got !== want) {
+    writeErr(sentences([
+      `.mcp.json asks for this repository's Halfcycle credential to be sent to ${shownUrl(requested ?? "")},`,
+      `which is not this machine's Halfcycle server (${want ?? "none recorded"}). The credential was NOT sent.`,
+      'if nobody meant to change .mcp.json, treat that change as suspect; "npx halfcycle" restores the entry.'
+    ]));
+    return NO_CREDENTIAL_PLACEHOLDER;
+  }
+  if (environmentToken !== void 0)
+    return environmentToken;
+  if (!store.ok || storedToken === void 0)
+    return NO_CREDENTIAL_PLACEHOLDER;
+  const source = {
+    HALFCYCLE_ENV_FILE: store.path,
+    GUARD_SERVICE_TOKEN: storedToken,
+    GUARD_ENGAGEMENT_ID: store.values["GUARD_ENGAGEMENT_ID"],
+    HALFCYCLE_SERVICE_URL: store.values["HALFCYCLE_SERVICE_URL"]
+  };
+  const renewed = opts.renewal === "renew-here" ? await refreshWithinDeadline(source, opts, writeErr) : opts.renewal.token;
+  return renewed ?? storedToken;
+}
+async function mcpHeaders(opts) {
+  const writeErr = opts.writeErr ?? defaultWriteErr;
+  try {
+    return headerLine(await chooseBearer({
+      ...opts,
+      writeErr,
+      requestedUrl: readMcpServerUrl(),
+      renewal: "renew-here",
+      environmentTokenFirst: true
+    }));
+  } catch (err) {
+    try {
+      writeErr(sentences([
+        `the credential could not be read: ${err instanceof Error ? err.message : String(err)}`,
+        `run "npx halfcycle" in this repository to rewrite this machine's credential.`
+      ]));
+    } catch {
+      return headerLine(NO_CREDENTIAL_PLACEHOLDER);
+    }
+    return headerLine(NO_CREDENTIAL_PLACEHOLDER);
+  }
+}
+
 // dist/refresh-credential.js
 var UNAUTHORIZED2 = 401;
-async function runRefreshCredential(opts) {
+var LIVE_PROBE_STATUSES = /* @__PURE__ */ new Set([200, 403]);
+async function refreshCredentialToken(opts) {
+  const source = opts?.source;
   if (readNeverConfiguredReason() === "not-this-account")
-    return 0;
-  if (!readEnvFilePath())
-    return 0;
-  const configResult = readConfig();
+    return { token: void 0 };
+  if (!readEnvFilePath(source))
+    return { token: void 0 };
+  const configResult = readConfig(source);
   if (!configResult.config)
-    return 0;
+    return { token: void 0 };
   const { guardServiceToken, guardEngagementId } = configResult.config;
-  const controlOrigin = readControlOrigin().origin;
+  const controlOrigin = readControlOrigin(source).origin;
   const fetchFn = opts?.fetchFn ?? globalThis.fetch;
   const accountCredential = readAccountCredential(controlOrigin, opts?.home);
   if (accountCredential)
     await probeAccount(controlOrigin, accountCredential, fetchFn);
   const probe = await probeAccount(controlOrigin, guardServiceToken, fetchFn);
-  if (!probe.reached || probe.status !== UNAUTHORIZED2)
-    return 0;
+  if (!probe.reached)
+    return { token: void 0 };
+  if (probe.status !== UNAUTHORIZED2) {
+    return { token: LIVE_PROBE_STATUSES.has(probe.status) ? guardServiceToken : void 0 };
+  }
   const refreshed = await refreshEngagementCredential({
     engagementId: guardEngagementId,
     refusedToken: guardServiceToken,
     fetchFn,
-    home: opts?.home
+    home: opts?.home,
+    source
   });
   if (!refreshed.ok) {
     const write = opts?.write ?? ((text) => process.stdout.write(text));
     write(credentialRenewalFailedMessage(refreshed.remedy));
+    return { token: void 0 };
   }
-  return 0;
+  return { token: refreshed.token };
 }
+var CHECKED_SOURCES = /* @__PURE__ */ new Set(["startup", "resume"]);
+var INITIALIZE_BODY = JSON.stringify({ jsonrpc: "2.0", id: 1, method: "initialize", params: {} });
+function registeredMcpUrl(projectRoot) {
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync10(resolve3(projectRoot, MCP_REGISTRATION_REL), "utf-8"));
+  } catch {
+    return void 0;
+  }
+  if (typeof parsed !== "object" || parsed === null)
+    return void 0;
+  const servers = parsed["mcpServers"];
+  if (typeof servers !== "object" || servers === null || !Object.hasOwn(servers, MCP_SERVER_KEY))
+    return void 0;
+  const entry = servers[MCP_SERVER_KEY];
+  if (typeof entry !== "object" || entry === null)
+    return void 0;
+  const url2 = entry["url"];
+  return typeof url2 === "string" ? url2 : void 0;
+}
+function namesItsServer(body) {
+  if (typeof body !== "object" || body === null)
+    return false;
+  const result = body["result"];
+  if (typeof result !== "object" || result === null)
+    return false;
+  const info = result["serverInfo"];
+  if (typeof info !== "object" || info === null)
+    return false;
+  const name = info["name"];
+  return typeof name === "string" && name !== "";
+}
+function discardBody(res) {
+  res.body?.cancel().catch(() => void 0);
+}
+async function probeDelivery(url2, bearer, fetchFn, deadlineMs) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), deadlineMs);
+  try {
+    let res;
+    try {
+      res = await fetchFn(url2, {
+        method: "POST",
+        headers: { "content-type": "application/json", authorization: `Bearer ${bearer}` },
+        body: INITIALIZE_BODY,
+        redirect: "manual",
+        signal: controller.signal
+      });
+    } catch {
+      return CANNOT_REACH_SENTENCE;
+    }
+    if (res.status === 401) {
+      discardBody(res);
+      return NO_CREDENTIAL_SENTENCE;
+    }
+    if (res.status < 200 || res.status > 299) {
+      discardBody(res);
+      return SERVICE_PROBLEM_SENTENCE;
+    }
+    let body;
+    try {
+      body = await res.json();
+    } catch {
+      return controller.signal.aborted ? CANNOT_REACH_SENTENCE : SERVICE_PROBLEM_SENTENCE;
+    }
+    return namesItsServer(body) ? void 0 : SERVICE_PROBLEM_SENTENCE;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function checkConnection(renewedToken, opts) {
+  const url2 = registeredMcpUrl(projectRootFromBinary(opts.binaryPath));
+  if (url2 === void 0)
+    return void 0;
+  const bearer = await chooseBearer({
+    binaryPath: opts.binaryPath,
+    home: opts.home,
+    fetchFn: opts.fetchFn,
+    writeErr: opts.writeErr,
+    requestedUrl: url2,
+    renewal: { token: renewedToken },
+    environmentTokenFirst: false
+  });
+  if (CREDENTIAL_PLACEHOLDERS.includes(bearer)) {
+    return PLACEHOLDER_SENTENCES[bearer];
+  }
+  return probeDelivery(url2, bearer, opts.fetchFn ?? globalThis.fetch, opts.checkDeadlineMs ?? CONNECTION_CHECK_DEADLINE_MS);
+}
+function defaultWriteErr2(text) {
+  process.stderr.write(text);
+}
+async function runRefreshCredential(opts) {
+  const writeErr = opts.writeErr ?? defaultWriteErr2;
+  try {
+    const renewalSaid = [];
+    let renewalOpen = true;
+    const [input, renewedToken] = await Promise.all([
+      (opts.readInput ?? readHookStdin)(),
+      refreshWithinDeadline(void 0, { fetchFn: opts.fetchFn, home: opts.home, deadlineMs: opts.renewalDeadlineMs }, (text) => {
+        if (renewalOpen)
+          renewalSaid.push(text);
+      })
+    ]);
+    renewalOpen = false;
+    const parts = [];
+    if (CHECKED_SOURCES.has(input["source"])) {
+      const outcome = await checkConnection(renewedToken, { ...opts, writeErr });
+      if (outcome !== void 0)
+        parts.push(outcome);
+    }
+    if (readConfig().config === null) {
+      const remedySaid = parts.some(namesTheSignInCommand);
+      parts.push(noCoverageStatement(readNeverConfiguredReason(), remedySaid));
+    }
+    for (const said of renewalSaid)
+      parts.push(said.trimEnd());
+    return parts.length === 0 ? "" : `${nonBlockingReply("SessionStart", parts.join("\n"))}
+`;
+  } catch (err) {
+    try {
+      writeErr(`halfcycle: the session-start check could not finish: ${(err instanceof Error ? err.message : String(err)).replace(/\s+/g, " ")}
+`);
+    } catch {
+      return "";
+    }
+    return "";
+  }
+}
+
+// dist/bin.js
+import { fileURLToPath } from "node:url";
 
 // dist/capture.js
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync5 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync6 } from "node:fs";
+import { dirname as dirname5 } from "node:path";
 function runCapture(provider, endpoint, opts = {}) {
   const repoRoot = opts.repoRoot ?? process.cwd();
   const raw = opts.input ?? readInputFile(opts.fromFile);
@@ -18128,7 +18532,7 @@ function runCapture(provider, endpoint, opts = {}) {
   const fixture = fixturePath(repoRoot, provider, slug);
   const manifestFile = manifestPath(repoRoot);
   try {
-    mkdirSync3(dirname4(fixture), { recursive: true });
+    mkdirSync3(dirname5(fixture), { recursive: true });
     writeFileSync4(fixture, JSON.stringify(parsed, null, 2) + "\n", "utf-8");
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -18160,7 +18564,7 @@ function readInputFile(fromFile) {
   if (!fromFile)
     return void 0;
   try {
-    return readFileSync9(fromFile, "utf-8");
+    return readFileSync11(fromFile, "utf-8");
   } catch {
     return void 0;
   }
@@ -18180,8 +18584,13 @@ async function main() {
     return;
   }
   if (cmd === "refresh-credential") {
-    const code = await runRefreshCredential();
-    process.exit(code);
+    const reply = await runRefreshCredential({ binaryPath: fileURLToPath(import.meta.url) });
+    process.stdout.write(reply, () => process.exit(0));
+    return;
+  }
+  if (cmd === "mcp-headers") {
+    const line = await mcpHeaders({ binaryPath: fileURLToPath(import.meta.url) });
+    process.stdout.write(line, () => process.exit(0));
     return;
   }
   if (cmd === "resolve-engagement") {
@@ -18249,16 +18658,17 @@ Commit the fixture; the next guard evaluation of this endpoint will pass.
          halfcycle-runner hook stop
          halfcycle-runner hook subagent-stop
          halfcycle-runner refresh-credential
+         halfcycle-runner mcp-headers
          halfcycle-runner resolve-engagement <cwd>
          halfcycle-runner capture <provider> <endpoint> [--from <file>]
 `);
   process.exit(1);
 }
 function readStdin3() {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve4, reject) => {
     const chunks = [];
     process.stdin.on("data", (chunk) => chunks.push(chunk));
-    process.stdin.on("end", () => resolve2(Buffer.concat(chunks).toString("utf-8")));
+    process.stdin.on("end", () => resolve4(Buffer.concat(chunks).toString("utf-8")));
     process.stdin.on("error", reject);
   });
 }