halfcycle 0.3.35 → 0.3.37

package/dist/index.js

@@ -27,6 +27,8 @@ var HALFCYCLE_DIR_NAME = ".halfcycle";
 var ENGAGEMENTS_DIR_NAME = "engagements";
 var ENGAGEMENT_ENV_FILENAME = "env";
 var NOT_THIS_ACCOUNT_MARKER_FILENAME = "not-this-account";
+var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
+var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var ENGAGEMENT_ID_PATTERN = "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
 var ENGAGEMENT_ID_SHAPE = new RegExp(ENGAGEMENT_ID_PATTERN);
 function isEngagementId(value) {
@@ -203,6 +205,10 @@ function looksLikeSecret(text) {
   return false;
 }
 
+// ../core/dist/mcp-registration.js
+var MCP_REGISTRATION_REL = ".mcp.json";
+var MCP_SERVER_KEY = "halfcycle";
+
 // ../events/dist/result.js
 import { z as z2 } from "zod";
 var firedGuardSchema = z2.object({
@@ -999,6 +1005,19 @@ var ciTokenExchangeResponseSchema = z7.object({
   expiresAt: utcIso8601,
   engagementId: z7.string()
 }).strict();
+var NO_CREDENTIAL_PLACEHOLDER = "halfcycle:no-credential";
+var NOT_THIS_ACCOUNT_PLACEHOLDER = "halfcycle:not-this-account";
+var UPDATE_CLAUDE_CODE_PLACEHOLDER = "halfcycle:update-claude-code";
+var SWITCH_ACCOUNT_ANSWER = 'answer "s" when asked';
+var NO_CREDENTIAL_SENTENCE = 'Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "npx halfcycle" in the project folder to sign in again.';
+var NOT_THIS_ACCOUNT_SENTENCE = `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "npx halfcycle" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+var UPDATE_CLAUDE_CODE_SENTENCE = "Halfcycle is not connected: this Claude Code version does not name the server it connects to, so no credential was sent. Update Claude Code, then reopen.";
+var NO_NODE_SENTENCE = "Halfcycle is not connected: Node is not installed, or not on the path this session uses, so nothing here is checked. Install Node, then reopen.";
+var PLACEHOLDER_SENTENCES = Object.freeze({
+  [NO_CREDENTIAL_PLACEHOLDER]: NO_CREDENTIAL_SENTENCE,
+  [NOT_THIS_ACCOUNT_PLACEHOLDER]: NOT_THIS_ACCOUNT_SENTENCE,
+  [UPDATE_CLAUDE_CODE_PLACEHOLDER]: UPDATE_CLAUDE_CODE_SENTENCE
+});
 
 // ../events/dist/phase-record.js
 import { z as z8 } from "zod";
@@ -1053,7 +1072,6 @@ function halfcycleHome(home) {
 var ENGAGEMENTS_DIR = ENGAGEMENTS_DIR_NAME;
 var ENV_FILENAME = ENGAGEMENT_ENV_FILENAME;
 var HALFCYCLE_DIR = HALFCYCLE_DIR_NAME;
-var PIN_ENGAGEMENT_ID_FIELD = "engagementId";
 var InvalidEngagementIdError = class extends Error {
   constructor(engagementId) {
     const shown = JSON.stringify(engagementId.length > 80 ? `${engagementId.slice(0, 80)}\u2026` : engagementId);
@@ -1352,6 +1370,15 @@ function bool(value, field) {
     throw new UnreadableManifestError(`"${field}" is not true or false`);
   return value;
 }
+function appendedTextRecord(value, field) {
+  if (!isRecord(value))
+    throw new UnreadableManifestError(`"${field}" is not an object`);
+  onlyKeys(value, ["created", "appended"], `"${field}"`);
+  return {
+    created: bool(value["created"], `${field}.created`),
+    appended: stringArray(value["appended"], `${field}.appended`)
+  };
+}
 function onlyKeys(value, allowed, where) {
   const extra = Object.keys(value).filter((k) => !allowed.includes(k));
   if (extra.length > 0)
@@ -1366,7 +1393,7 @@ function parseManifest(text) {
   }
   if (!isRecord(raw))
     throw new UnreadableManifestError("it is not a JSON object");
-  onlyKeys(raw, ["format", "files", "createdDirs", "leftAlone", "settings", "mcp", "gitignore"], "the manifest");
+  onlyKeys(raw, ["format", "files", "createdDirs", "leftAlone", "settings", "mcp", "gitignore", "gitattributes"], "the manifest");
   if (raw["format"] !== INSTALL_MANIFEST_FORMAT) {
     throw new UnreadableManifestError(`its format is not ${INSTALL_MANIFEST_FORMAT}`);
   }
@@ -1427,14 +1454,10 @@ function parseManifest(text) {
       ...typeof m["entrySha256"] === "string" ? { entrySha256: m["entrySha256"] } : {}
     };
   }
-  const g = raw["gitignore"];
-  if (!isRecord(g))
+  if (raw["gitignore"] === void 0)
     throw new UnreadableManifestError('"gitignore" is missing');
-  onlyKeys(g, ["created", "appended"], '"gitignore"');
-  const gitignore = {
-    created: bool(g["created"], "gitignore.created"),
-    appended: stringArray(g["appended"], "gitignore.appended")
-  };
+  const gitignore = appendedTextRecord(raw["gitignore"], "gitignore");
+  const gitattributes = raw["gitattributes"] === void 0 ? void 0 : appendedTextRecord(raw["gitattributes"], "gitattributes");
   const paths = files.map((f) => f.path);
   if (new Set(paths).size !== paths.length)
     throw new UnreadableManifestError('"files" names a path twice');
@@ -1449,7 +1472,8 @@ function parseManifest(text) {
     leftAlone,
     settings,
     ...mcp !== void 0 ? { mcp } : {},
-    gitignore
+    gitignore,
+    ...gitattributes !== void 0 ? { gitattributes } : {}
   };
 }
 function startManifest(previous, isMember, isMemberDir) {
@@ -1465,12 +1489,16 @@ function startManifest(previous, isMember, isMemberDir) {
     createdDirs: new Set((previous?.createdDirs ?? []).filter(isMemberDir)),
     settings: previous?.settings,
     mcp: previous?.mcp,
-    gitignore: previous?.gitignore
+    gitignore: previous?.gitignore,
+    gitattributes: previous?.gitattributes
   };
 }
 function recordInstalledFile(draft, path, bytes) {
   draft.files.set(path, { path, sha256: sha256Hex(bytes) });
 }
+function recordRemovedFile(draft, path) {
+  draft.files.delete(path);
+}
 function recordPerMachineFile(draft, path) {
   draft.files.set(path, { path, perMachine: true });
 }
@@ -1513,8 +1541,15 @@ function recordMcp(draft, observed) {
   };
 }
 function recordGitignore(draft, created, appended) {
-  const prev = draft.gitignore;
-  draft.gitignore = {
+  draft.gitignore = carryAppended(draft.gitignore, created, appended);
+}
+function recordGitattributes(draft, created, appended) {
+  if (draft.gitattributes === void 0 && !created && appended.every((a) => a === ""))
+    return;
+  draft.gitattributes = carryAppended(draft.gitattributes, created, appended);
+}
+function carryAppended(prev, created, appended) {
+  return {
     created: prev?.created ?? created,
     appended: [...prev?.appended ?? [], ...appended.filter((a) => a !== "")]
   };
@@ -1538,7 +1573,8 @@ function finishManifest(draft) {
       denyCreated: false
     },
     ...draft.mcp !== void 0 ? { mcp: draft.mcp } : {},
-    gitignore: draft.gitignore ?? { created: false, appended: [] }
+    gitignore: draft.gitignore ?? { created: false, appended: [] },
+    ...draft.gitattributes !== void 0 ? { gitattributes: draft.gitattributes } : {}
   };
 }
 function union(a, b) {
@@ -1697,11 +1733,12 @@ var WRITE_ALLOWLIST = [
   ".claude/hooks",
   ".claude/settings.json",
   ".halfcycle",
-  ".halfcycle/bundle.json",
+  BUNDLE_PIN_REL,
   ".halfcycle/bin",
   "docs/build-records",
   "test/fixtures/captured",
-  ".mcp.json",
+  MCP_REGISTRATION_REL,
+  ".gitattributes",
   ZONE_B_DIR
 ];
 function isAllowlisted(targetRelPath) {
@@ -1711,15 +1748,16 @@ function isAllowlisted(targetRelPath) {
     return normalised === p || normalised.startsWith(p + "/");
   });
 }
-var BUNDLE_PIN_REL = ".halfcycle/bundle.json";
 var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
 var CREW_ROSTER_REL = ".halfcycle/crew.json";
 var CAPTURED_INDEX_REL = "test/fixtures/captured/manifest.json";
 var GITIGNORE_REL = ".gitignore";
+var GITATTRIBUTES_REL = ".gitattributes";
 function commandStubRel(name) {
   return `.claude/commands/${name}.md`;
 }
-var RETIRED_WRITE_SET_FILES = [];
+var RETIRED_MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
+var RETIRED_WRITE_SET_FILES = [RETIRED_MCP_HEADERS_HELPER_REL];
 var RETIRED_DENY_PATTERNS = [];
 function closedWriteSet() {
   const files = /* @__PURE__ */ new Set([
@@ -1734,7 +1772,7 @@ function closedWriteSet() {
     INSTALL_MANIFEST_REL,
     ...RETIRED_WRITE_SET_FILES
   ]);
-  const merged = /* @__PURE__ */ new Set([SETTINGS_REL, MCP_REGISTRATION_REL, GITIGNORE_REL]);
+  const merged = /* @__PURE__ */ new Set([SETTINGS_REL, MCP_REGISTRATION_REL, GITIGNORE_REL, GITATTRIBUTES_REL]);
   const dirs = /* @__PURE__ */ new Set();
   for (const path of [...files, ...merged]) {
     for (let dir = posix.dirname(path); dir !== "."; dir = posix.dirname(dir))
@@ -1748,7 +1786,11 @@ function closedWriteSet() {
     ownedDirs,
     hookCommands: new Set(HALFCYCLE_HOOK_COMMANDS),
     denyRuleSha256: new Set([...DENY_PATTERNS, ...RETIRED_DENY_PATTERNS].map((rule) => sha256Hex(rule))),
-    gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL])
+    gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL]),
+    gitattributesLines: /* @__PURE__ */ new Set([
+      GITATTRIBUTES_HEADER,
+      ...lfRules([...Object.keys(OWNED_GENERATED_HEADERS), ...RETIRED_WRITE_SET_FILES])
+    ])
   };
 }
 function readPreviousManifest(targetRepo) {
@@ -1812,15 +1854,19 @@ function recordMcpAdoptionOnly(draft, existingText) {
 }
 function recordGitignoreReconcile(draft, before, after) {
   const adopted = draft.gitignore === void 0 && before !== null ? adoptOlderGitignoreBlock(before) : "";
-  let appended = "";
-  if (after !== null && after !== before) {
-    if (before === null)
-      appended = after;
-    else if (after.startsWith(before))
-      appended = after.slice(before.length);
-  }
+  const appended = appendedText(before, after);
   recordGitignore(draft, before === null && after !== null, [adopted, appended]);
 }
+function recordGitattributesReconcile(draft, before, after) {
+  recordGitattributes(draft, before === null && after !== null, [appendedText(before, after)]);
+}
+function appendedText(before, after) {
+  if (after === null || after === before)
+    return "";
+  if (before === null)
+    return after;
+  return after.startsWith(before) ? after.slice(before.length) : "";
+}
 function assertManifestInWriteSet(manifest, writeSet) {
   const strays = [
     ...manifest.files.map((f) => f.path).filter((p) => !writeSet.files.has(p)),
@@ -1835,7 +1881,8 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
   const merged = [
     SETTINGS_REL,
     ...manifest.mcp !== void 0 ? [MCP_REGISTRATION_REL] : [],
-    ...manifest.gitignore.created || manifest.gitignore.appended.length > 0 ? [GITIGNORE_REL] : []
+    ...manifest.gitignore.created || manifest.gitignore.appended.length > 0 ? [GITIGNORE_REL] : [],
+    ...manifest.gitattributes !== void 0 && (manifest.gitattributes.created || manifest.gitattributes.appended.length > 0) ? [GITATTRIBUTES_REL] : []
   ];
   const collided = new Set(collidedPaths);
   const dirVerdicts = /* @__PURE__ */ new Map();
@@ -2063,6 +2110,20 @@ exec node "$PROJECT_DIR/${VENDORED_BIN_REL}" "$@"
 }
 var GENERATED_SESSION_START_HEADER = "# Session-start marker \u2014 generated by";
 var SESSION_ID_FROM_HOOK_INPUT_SH = `SESSION_ID="$(printf '%s' "$INPUT" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{try{const j=JSON.parse(s);process.stdout.write(typeof j.session_id==="string"?j.session_id:"")}catch{process.stdout.write("")}})' 2>/dev/null || true)"`;
+var REPO_HASH_FROM_ROOT_SH = `HASH="$(printf '%s' "$REPO_ROOT" | node -e 'const c=[];process.stdin.on("data",d=>c.push(d)).on("end",()=>{process.stdout.write(require("node:crypto").createHash("sha256").update(Buffer.concat(c)).digest("hex").slice(0,12))})' 2>/dev/null || true)"`;
+function noNodeReplyShell() {
+  const reply = JSON.stringify({
+    systemMessage: NO_NODE_SENTENCE,
+    hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: NO_NODE_SENTENCE }
+  });
+  if (reply.includes("'")) {
+    throw new Error("[bundle install] the no-Node notice cannot be single-quoted; refusing to write the session-start script.");
+  }
+  return `if ! command -v node >/dev/null 2>&1; then
+  printf '%s\\n' '${reply}'
+  exit 0
+fi`;
+}
 function generateSessionStartMarker() {
   return `#!/usr/bin/env bash
 ${GENERATED_SESSION_START_HEADER} the Halfcycle installer.
@@ -2071,10 +2132,15 @@ ${GENERATED_SESSION_START_HEADER} the Halfcycle installer.
 # it began instead of only against the latest commit. The session id comes in on
 # stdin with the hook input; without one, the older session-less name is written
 # and the stop-time check compares against the latest commit as it used to.
+#
+# Without Node nothing Halfcycle installs here can run, so this says so once and
+# writes no marker.
+${noNodeReplyShell()}
 INPUT="$(cat 2>/dev/null || true)"
 REPO_ROOT="\${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null)}"
 if [ -z "$REPO_ROOT" ]; then exit 0; fi
-HASH="$(printf '%s' "$REPO_ROOT" | shasum -a 256 | cut -c1-12)"
+${REPO_HASH_FROM_ROOT_SH}
+if [ -z "$HASH" ]; then exit 0; fi
 ${SESSION_ID_FROM_HOOK_INPUT_SH}
 MARKER_DIR="\${TMPDIR:-/tmp}"
 MARKER_DIR="\${MARKER_DIR%/}"    # strip trailing slash (macOS TMPDIR ends in /)
@@ -2084,64 +2150,6 @@ else
   MARKER_FILE="\${MARKER_DIR}/halfcycle-session-\${HASH}.ref"
 fi
 git -C "$REPO_ROOT" rev-parse HEAD > "$MARKER_FILE" 2>/dev/null || true
-
-# ---------------------------------------------------------------------------
-# STANDING GUARD-COVERAGE STATEMENT (T-27; two arms since T-02b).
-#
-# A repository with no credential on this machine is UNGUARDED: the PostToolUse
-# hook will find nothing to evaluate with, and it says so once per edit, after
-# the edit. This says it once, up front, before anything is written \u2014 which is
-# the one thing a session-start hook can do that nothing else can.
-#
-# TWO REASONS TO HAVE NO CREDENTIAL, TWO DIFFERENT THINGS TO SAY (T-02b,
-# solo-project-ownership \u2014 outcome B). "You have not signed in here yet" is
-# fixed by re-running the installer; "this is not your project" is permanent,
-# and the same remedy would send the reader in a circle forever. The two are
-# told apart by HALFCYCLE_ENV_NOT_THIS_ACCOUNT, set by \`halfcycle_env_file\`
-# below from a machine-level marker beside the credential store.
-#
-# Everything below runs in a SUBSHELL: it sources a credential store, and a
-# session-start hook must not leak an engagement's variables into whatever the
-# editor runs next. Any failure inside it is swallowed; this script's exit
-# status is 0 either way, and the marker above has already been written.
-# ---------------------------------------------------------------------------
-${engagementResolutionShell()}
-
-(
-  if halfcycle_env_file "$REPO_ROOT"; then
-    set -a
-    . "$HALFCYCLE_ENV_FILE"
-    set +a
-  fi
-  if [ "$HALFCYCLE_ENV_NOT_THIS_ACCOUNT" = "1" ]; then
-    # OUTCOME B (T-02b, solo-project-ownership). This is not the missing-keys
-    # case below wearing different words: there is nothing to fix, and the loop
-    # that follows is skipped entirely rather than run and then overridden \u2014 a
-    # repository whose credential is absent for THIS reason must never be told
-    # to re-run the installer, which can never obtain one for it.
-    echo "[halfcycle] This project belongs to another Halfcycle account, so nothing here is checked."
-    echo "[halfcycle] Your work carries on exactly as it would without Halfcycle \u2014 no edit is"
-    echo "[halfcycle] evaluated, and nothing you do is reported as having passed."
-    echo "[halfcycle] Halfcycle is Solo today \u2014 one developer per project \u2014 with Team plans coming."
-    echo "[halfcycle] Ask the project's owner for view access."
-    echo "[halfcycle] If this account is wrong, sign in as the one that owns the project and run"
-    echo "[halfcycle] \\"npx halfcycle\\" again."
-  else
-    hc_missing=""
-    for hc_key in ${GUARD_COVERAGE_REQUIRED_KEYS.join(" ")}; do
-      eval "hc_value=\\\${$hc_key:-}"
-      if [ -z "$hc_value" ]; then hc_missing="$hc_missing $hc_key"; fi
-    done
-    if [ -n "$hc_missing" ]; then
-      echo "[halfcycle] NO GUARD COVERAGE IN THIS REPOSITORY. Nothing will evaluate the edits made in"
-      echo "[halfcycle] this session: this machine has no Halfcycle credential for it, so the guard hook"
-      echo "[halfcycle] has nothing to call with (missing:$hc_missing)."
-      echo "[halfcycle] Run \\"npx halfcycle\\" in this repository to fix it \u2014 it signs you in through your"
-      echo "[halfcycle] browser if needed, writes the credential to \\$HOME/.halfcycle outside this tree,"
-      echo "[halfcycle] and needs nothing configured first."
-    fi
-  fi
-) 2>/dev/null || true
 exit 0
 `;
 }
@@ -2157,7 +2165,8 @@ INPUT="$(cat 2>/dev/null || true)"
 
 REPO_ROOT="\${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null)}"
 if [ -z "$REPO_ROOT" ]; then exit 0; fi
-HASH="$(printf '%s' "$REPO_ROOT" | shasum -a 256 | cut -c1-12)"
+${REPO_HASH_FROM_ROOT_SH}
+if [ -z "$HASH" ]; then exit 0; fi
 
 # The session id arrives on stdin as part of the hook payload. Empty when absent.
 ${SESSION_ID_FROM_HOOK_INPUT_SH}
@@ -2204,7 +2213,8 @@ set -e
 
 # The project root is resolved from THIS SCRIPT'S OWN LOCATION, never from the
 # session's cwd \u2014 a session started in a subdirectory must find the same root
-# .mcp.json the editor loaded, which is the bug mcp-headers.sh already paid for.
+# .mcp.json the editor loaded, which is the bug the editor's headers command
+# already paid for.
 HC_SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 HC_PROJECT_ROOT=$(CDPATH= cd -- "$HC_SCRIPT_DIR/../.." && pwd)
 HC_REGISTRATION="$HC_PROJECT_ROOT/${MCP_REGISTRATION_REL}"
@@ -2251,7 +2261,9 @@ function isTrackedAndClean(targetRepo, relPath) {
   return true;
 }
 function removeLegacyCiStanza(targetRepo) {
-  const rel = ".halfcycle/ci-stanza.yml";
+  return removeRetiredGeneratedFile(targetRepo, ".halfcycle/ci-stanza.yml", 0, CI_STANZA_KNOWN_HEADER_HASHES);
+}
+function removeRetiredGeneratedFile(targetRepo, rel, headerLineIndex, knownHeaderHashes) {
   const path = join5(targetRepo, rel);
   if (!existsSync3(path))
     return "absent";
@@ -2261,10 +2273,9 @@ function removeLegacyCiStanza(targetRepo) {
   } catch {
     return "failed";
   }
-  const headerLine = raw.split("\n")[0] ?? "";
+  const headerLine = raw.split("\n")[headerLineIndex] ?? "";
   const digest = createHash2("sha256").update(headerLine, "utf-8").digest("hex");
-  const ours = CI_STANZA_KNOWN_HEADER_HASHES.includes(digest);
-  if (!ours)
+  if (!knownHeaderHashes.includes(digest))
     return "kept-foreign";
   if (!isTrackedAndClean(targetRepo, rel))
     return "kept-uncommitted";
@@ -2275,205 +2286,33 @@ function removeLegacyCiStanza(targetRepo) {
   }
   return "removed";
 }
-var MCP_REGISTRATION_REL = ".mcp.json";
-var MCP_SERVER_KEY = "halfcycle";
-var MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
-var MCP_HEADERS_HELPER_COMMAND = `/bin/sh -c 'd=$(pwd); while [ ! -f "$d/${MCP_HEADERS_HELPER_REL}" ] && [ "$d" != / ]; do d=$(dirname "$d"); done; [ -f "$d/${MCP_HEADERS_HELPER_REL}" ] || { echo "halfcycle: ${MCP_HEADERS_HELPER_REL} not found at or above $(pwd); re-run npx halfcycle" >&2; exit 1; }; exec /bin/sh "$d/${MCP_HEADERS_HELPER_REL}"'`;
-var GENERATED_MCP_HEADERS_HEADER = "# Halfcycle MCP connection headers \u2014 generated by";
+var MCP_HEADERS_HELPER_COMMAND = `node -e "${[
+  `const p=require('path'),f=require('fs'),c=require('child_process');`,
+  `let d=process.cwd();`,
+  `for(;;){`,
+  `const b=p.join(d,'${VENDORED_BIN_REL}');`,
+  `if(f.existsSync(b)){`,
+  `const r=c.spawnSync(process.execPath,[b,'mcp-headers'],{stdio:'inherit'});`,
+  `process.exit(typeof r.status==='number'?r.status:1)}`,
+  `const u=p.dirname(d);`,
+  `if(u===d)break;`,
+  `d=u}`,
+  `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run npx halfcycle in the project folder');`,
+  `process.exit(1)`
+].join("")}"`;
+var MCP_HEADERS_KNOWN_HEADER_HASHES = [
+  "37a733ea588b3361b2bbfd86c44e0c95da30d7af6acffd1243ece83c811f0af2",
+  "6732ec6d2d2bf7cb33017749a3d021b59af653dcd07c3811693b5a242d44b1a1"
+];
+function removeRetiredMcpHeadersHelper(targetRepo) {
+  return removeRetiredGeneratedFile(targetRepo, RETIRED_MCP_HEADERS_HELPER_REL, 1, MCP_HEADERS_KNOWN_HEADER_HASHES);
+}
 var OWNED_GENERATED_HEADERS = {
   ".claude/hooks/guard-runner.sh": GENERATED_GUARD_RUNNER_HEADER,
   ".claude/hooks/user-prompt-reminder.sh": GENERATED_USER_PROMPT_REMINDER_HEADER,
   ".claude/hooks/session-end-marker.sh": GENERATED_SESSION_END_HEADER,
-  ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER,
-  ".halfcycle/mcp-headers.sh": GENERATED_MCP_HEADERS_HEADER
+  ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER
 };
-function generateMcpHeadersHelper() {
-  return `#!/bin/sh
-${GENERATED_MCP_HEADERS_HEADER} the Halfcycle installer.
-#
-# Claude Code runs this at MCP connection time, from the session's cwd, and merges
-# its stdout into the connection headers for the "halfcycle" server in .mcp.json.
-#
-# It exists because \${VAR} expansion in .mcp.json reads the PROCESS environment
-# only: nothing loads a credential into a session, so a referenced
-# \${HALFCYCLE_TOKEN} expanded to nothing and the server was silently absent from
-# the tool list.
-#
-# This file is tracked and holds NO secret. NEITHER DOES ANY OTHER FILE IN THIS
-# REPOSITORY (T-09): the credential lives at machine level, outside every checkout,
-# and this script READS one line out of it (never sources \u2014 a credential store is
-# not code).
-set -eu
-
-# The project root is resolved from THIS SCRIPT'S OWN LOCATION, never from the
-# caller's working directory. Claude Code runs the helper from the SESSION's cwd,
-# and a session started in a subdirectory still finds the root .mcp.json \u2014 so a
-# relative read here silently produced no credential for anyone who started the
-# session in any subdirectory of a monorepo.
-SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-PROJECT_ROOT=$(CDPATH= cd -- "$SCRIPT_DIR/.." && pwd)
-
-${engagementResolutionShell()}
-
-# Read one KEY's value out of the credential store into HC_VALUE, in the CALLER's
-# shell (call it as a statement, never inside $(...)). Last assignment wins,
-# matching the shell's own \`.\` semantics. An optional leading \`export \` is
-# tolerated because a hand-edited store may use one.
-halfcycle_store_value() {
-  HC_VALUE=""
-  hc_line=$(grep "^[[:space:]]*\\(export[[:space:]][[:space:]]*\\)\\{0,1\\}$2=" "$1" | tail -n 1)
-  hc_v=\${hc_line#*"$2="}
-  hc_v=$(printf '%s' "$hc_v" | tr -d '\\r')
-
-  # Strip one layer of matching quotes. The store is WRITTEN single-quoted (both
-  # writers use the same shq: this installer and Studio's provider), because
-  # guard-runner.sh SOURCES the same file and an unquoted value carrying a space
-  # would execute its own remainder. This reader greps rather than sources, so it
-  # has to undo the quoting itself \u2014 and it must land on the same value the
-  # sourcing consumer gets, or one file has two answers.
-  case $hc_v in
-    '"'*'"') hc_v=\${hc_v#'"'}; hc_v=\${hc_v%'"'} ;;
-    "'"*"'")
-      hc_v=\${hc_v#"'"}; hc_v=\${hc_v%"'"}
-      # \u2026and undo shq's embedded-quote escape, '\\'' -> '. The backslash is matched
-      # through a BRACKET EXPRESSION on purpose. MEASURED, on GNU sed 4.9 (Linux,
-      # the CI platform) and BSD sed (macOS), feeding each the script from a file so
-      # no shell quoting is in the way:
-      #
-      #   s/'[\\]''/'/g   a'\\''b -> a'b     both      <- shipped
-      #   s/'\\''/'/g     a'\\''b -> a'\\''b   both      <- matches NOTHING, exit 0
-      #
-      # A bare \\' in a BRE is undefined by POSIX, and the obvious pattern therefore
-      # does not fail loudly \u2014 it silently substitutes nothing, on BOTH platforms,
-      # and the token then travels with four stray characters in it. The bracket
-      # expression makes the backslash literal by a construction POSIX does define.
-      hc_v=$(printf '%s' "$hc_v" | sed "s/'[\\]''/'/g") ;;
-  esac
-  HC_VALUE=$hc_v
-}
-
-# The scheme and host[:port] of a URL, lowercased \u2014 or NOTHING when the URL holds
-# a space or a control character anywhere. That refusal is the load-bearing part:
-# a URL parser drops tabs and newlines before it reads the host, so
-# "https://ours<newline>@elsewhere/" is a request to "elsewhere", while a
-# line-by-line reading here would see only "https://ours". The host ends at the
-# first / ? # or backslash, which is where a URL parser ends it for http(s).
-halfcycle_origin() {
-  hc_u=$1
-  if [ "$(printf '%s' "$hc_u" | tr -d '[:cntrl:][:space:]')" != "$hc_u" ]; then
-    return 0
-  fi
-  printf '%s\\n' "$hc_u" | sed -n 's|^\\([A-Za-z][A-Za-z0-9+.-]*://[^/?#\\\\]*\\).*$|\\1|p' | tr '[:upper:]' '[:lower:]'
-}
-
-# HALFCYCLE_TOKEN in the environment WINS, and it is the CI arm: a job with no
-# browser and no per-user store exports the credential, and a stale store on a
-# long-lived runner must not silently win over it. Same order, and the same reason,
-# as the CLI's own resolver (\`resolve-credential.ts\`). The server it may be sent
-# to is NOT taken from the environment: it is read from this machine's store in
-# both arms, so a token supplied this way still goes only where this machine was
-# set up to send it.
-# The pin names an id that is not a project id. Re-running the installer against
-# that pin refuses it too, so the one remedy that works is a fresh pin.
-halfcycle_bad_id_message() {
-  echo "halfcycle: $PROJECT_ROOT/.halfcycle/bundle.json names an engagement id that is not a Halfcycle project id," >&2
-  echo "halfcycle: so no credential was read. Delete that file and run \\"npx halfcycle\\" again: this repository" >&2
-  echo "halfcycle: is then set up as a new Halfcycle project." >&2
-}
-
-TOKEN=\${HALFCYCLE_TOKEN:-}
-MCP_URL=""
-
-if [ -n "$TOKEN" ]; then
-  if halfcycle_env_file "$PROJECT_ROOT"; then
-    halfcycle_store_value "$HALFCYCLE_ENV_FILE" HALFCYCLE_MCP_URL
-    MCP_URL=$HC_VALUE
-  fi
-else
-  if ! halfcycle_env_file "$PROJECT_ROOT"; then
-    case $HALFCYCLE_ENV_PROBLEM in
-      no-pin)
-        echo "halfcycle: no .halfcycle/bundle.json in $PROJECT_ROOT, so this repository has no Halfcycle engagement." >&2
-        echo "halfcycle: run \\"npx halfcycle\\" here to install one." >&2 ;;
-      no-id)
-        echo "halfcycle: $PROJECT_ROOT/.halfcycle/bundle.json names no engagement id." >&2
-        echo "halfcycle: run \\"npx halfcycle\\" here to rewrite it." >&2 ;;
-      bad-id)
-        halfcycle_bad_id_message ;;
-      no-home)
-        echo "halfcycle: HOME is not set, so the credential store cannot be located." >&2 ;;
-      *)
-        # OUTCOME B (T-02b, solo-project-ownership) is a \`no-credential\` PROBLEM
-        # with a REASON attached, checked here rather than as a fifth case value
-        # \u2014 see \`engagementResolutionShell\`'s own docblock for why. Re-running
-        # this installer can never obtain a credential for this reason, so it is
-        # the one sentence in this file that must not say to.
-        if [ "$HALFCYCLE_ENV_NOT_THIS_ACCOUNT" = "1" ]; then
-          echo "halfcycle: this project belongs to another Halfcycle account, so this machine has no" >&2
-          echo "halfcycle: credential for it and the Halfcycle tools are not available here. Nothing is" >&2
-          echo "halfcycle: broken \u2014 ask the project's owner for view access, or sign in as the account" >&2
-          echo "halfcycle: that owns it and run \\"npx halfcycle\\" again." >&2
-        else
-          echo "halfcycle: this machine holds no credential for engagement $HALFCYCLE_ENV_ENGAGEMENT." >&2
-          echo "halfcycle: run \\"npx halfcycle\\" in this repository \u2014 it will sign you in through your browser if needed, and write the credential to $HOME/.halfcycle, outside this repository." >&2
-        fi ;;
-    esac
-    exit 1
-  fi
-  ENV_FILE="$HALFCYCLE_ENV_FILE"
-
-  halfcycle_store_value "$ENV_FILE" HALFCYCLE_TOKEN
-  TOKEN=$HC_VALUE
-  if [ -z "$TOKEN" ]; then
-    echo "halfcycle: HALFCYCLE_TOKEN is absent or empty in $ENV_FILE." >&2
-    echo "halfcycle: run \\"npx halfcycle\\" in this repository to rewrite this machine's credential." >&2
-    exit 1
-  fi
-  halfcycle_store_value "$ENV_FILE" HALFCYCLE_MCP_URL
-  MCP_URL=$HC_VALUE
-fi
-
-# THE TOKEN GOES ONLY TO THIS MACHINE'S HALFCYCLE SERVER. .mcp.json is a tracked
-# file: anyone who can land a commit can change the server's url, and this script
-# would then hand the credential to whatever it names. Claude Code tells the helper
-# which url it is about to connect to (CLAUDE_CODE_MCP_SERVER_URL); the server this
-# machine was set up against is recorded OUTSIDE the repository, beside the
-# credential. The two must share scheme, host and port, or nothing is printed.
-# No url at all is a refusal too: sending the credential without knowing where it
-# is going is the thing this check exists to stop.
-REQUESTED=\${CLAUDE_CODE_MCP_SERVER_URL:-}
-if [ -z "$REQUESTED" ]; then
-  echo "halfcycle: Claude Code did not say which server it is connecting to, so the Halfcycle credential was not sent." >&2
-  echo "halfcycle: update Claude Code, then reconnect." >&2
-  exit 1
-fi
-if [ -z "$MCP_URL" ] && [ "\${HALFCYCLE_ENV_PROBLEM:-}" = "bad-id" ]; then
-  halfcycle_bad_id_message
-  exit 1
-fi
-if [ -z "$MCP_URL" ]; then
-  echo "halfcycle: this machine has no Halfcycle server address recorded for this repository, so the credential was not sent." >&2
-  echo "halfcycle: run \\"npx halfcycle\\" in this repository on this machine to record it." >&2
-  exit 1
-fi
-WANT=$(halfcycle_origin "$MCP_URL")
-GOT=$(halfcycle_origin "$REQUESTED")
-if [ -z "$WANT" ] || [ "$GOT" != "$WANT" ]; then
-  SHOWN=$(printf '%s' "$REQUESTED" | tr -cd '[:graph:]' | cut -c1-200)
-  echo "halfcycle: .mcp.json asks for this repository's Halfcycle credential to be sent to $SHOWN," >&2
-  echo "halfcycle: which is not this machine's Halfcycle server (\${WANT:-none recorded}). The credential was NOT sent." >&2
-  echo "halfcycle: if nobody meant to change .mcp.json, treat that change as suspect; \\"npx halfcycle\\" restores the entry." >&2
-  exit 1
-fi
-
-# JSON-escape: backslash first, then double quote. A token carrying either would
-# otherwise emit invalid JSON, and invalid JSON is dropped SILENTLY \u2014 the
-# connection succeeds carrying no Authorization header at all.
-ESCAPED=$(printf '%s' "$TOKEN" | sed -e 's/\\\\/\\\\\\\\/g' -e 's/"/\\\\"/g')
-
-printf '{"Authorization":"Bearer %s"}\\n' "$ESCAPED"
-`;
-}
 function generateMcpRegistration(existing, mcpOrigin) {
   let base = { mcpServers: {} };
   if (existing !== null) {
@@ -2540,6 +2379,42 @@ ${header}
     return "failed";
   }
 }
+var GITATTRIBUTES_HEADER = "# Halfcycle \u2014 generated scripts keep LF line endings";
+function readTextOrNull(path) {
+  try {
+    return readFileSync4(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
+function lfRules(paths) {
+  return [...paths].filter((path) => path.endsWith(".sh")).map((path) => `${path} text eol=lf`);
+}
+var REQUIRED_GITATTRIBUTES_RULES = lfRules(Object.keys(OWNED_GENERATED_HEADERS));
+function reconcileGitattributes(targetRepo) {
+  const path = join5(targetRepo, GITATTRIBUTES_REL);
+  const rules = REQUIRED_GITATTRIBUTES_RULES;
+  const routed = [];
+  try {
+    if (lstatOrNull(path)?.isSymbolicLink() === true)
+      return "failed";
+    if (!existsSync3(path)) {
+      writeAllowlisted(path, targetRepo, [GITATTRIBUTES_HEADER, ...rules].join("\n") + "\n", routed);
+      return "written";
+    }
+    const existing = readFileSync4(path, "utf-8");
+    const present = new Set(existing.split("\n").map((l) => l.trim()));
+    const toAdd = rules.filter((rule) => !present.has(rule));
+    if (toAdd.length === 0)
+      return "skipped";
+    const separator = existing === "" ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join("\n") + "\n";
+    writeAllowlisted(path, targetRepo, existing + suffix, routed);
+    return "written";
+  } catch {
+    return "failed";
+  }
+}
 function previousPinForEngagement(targetRepoRoot, engagementId) {
   try {
     const existing = readBundlePin(targetRepoRoot);
@@ -2752,9 +2627,6 @@ async function install(options) {
       break;
   }
   if (credential) {
-    const helperPath = join5(targetRepo, MCP_HEADERS_HELPER_REL);
-    const helperOutcome = recordOwnedGenerated(report, helperPath, targetRepo, generateMcpHeadersHelper(), OWNED_GENERATED_HEADERS[MCP_HEADERS_HELPER_REL], MCP_HEADERS_HELPER_REL);
-    noteFile(draft, targetRepo, MCP_HEADERS_HELPER_REL, helperOutcome);
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
     const existingMcp = existsSync3(mcpPath) ? readFileSync4(mcpPath, "utf-8") : null;
     const mcpContent = generateMcpRegistration(existingMcp, credential.mcpUrl);
@@ -2766,6 +2638,24 @@ async function install(options) {
     } else {
       report.skippedPaths.push(MCP_REGISTRATION_REL);
     }
+    const helperRel = RETIRED_MCP_HEADERS_HELPER_REL;
+    switch (removeRetiredMcpHeadersHelper(targetRepo)) {
+      case "removed":
+        recordRemovedFile(draft, helperRel);
+        report.writtenPaths.push(`${helperRel} (REMOVED \u2014 Halfcycle no longer uses this file)`);
+        break;
+      case "kept-foreign":
+        report.skippedPaths.push(`${helperRel} (KEPT \u2014 Halfcycle no longer uses this file, and it is not one Halfcycle generated byte for byte, so it was left alone; delete it if nothing of yours needs it)`);
+        break;
+      case "kept-uncommitted":
+        report.skippedPaths.push(`${helperRel} (KEPT \u2014 Halfcycle no longer uses this file, but it is not a clean, committed copy in this repository, so it was left alone rather than risk losing an edit; delete it when you are ready)`);
+        break;
+      case "failed":
+        report.skippedPaths.push(`${helperRel} (could not be removed \u2014 Halfcycle no longer uses this file, DELETE IT BY HAND)`);
+        break;
+      case "absent":
+        break;
+    }
   } else {
     report.skippedPaths.push(`${MCP_REGISTRATION_REL} (no MCP origin \u2014 no credential supplied)`);
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
@@ -2781,6 +2671,15 @@ async function install(options) {
   } else {
     record(report, gitignoreOutcome, ".gitignore");
   }
+  const gitattributesPath = join5(targetRepo, GITATTRIBUTES_REL);
+  const gitattributesBefore = readTextOrNull(gitattributesPath);
+  const gitattributesOutcome = reconcileGitattributes(targetRepo);
+  recordGitattributesReconcile(draft, gitattributesBefore, readTextOrNull(gitattributesPath));
+  if (gitattributesOutcome === "failed") {
+    report.skippedPaths.push(`${GITATTRIBUTES_REL} (write failed \u2014 a clone made with core.autocrlf=true may check the hook scripts out with CRLF line endings)`);
+  } else {
+    record(report, gitattributesOutcome, GITATTRIBUTES_REL);
+  }
   const identityOutcome = writeProjectIdentity(targetRepo);
   record(report, identityOutcome, PROJECT_IDENTITY_REL);
   noteFile(draft, targetRepo, PROJECT_IDENTITY_REL, identityOutcome);