halfcycle 0.3.36 → 0.3.38

package/dist/index.js

@@ -205,6 +205,15 @@ function looksLikeSecret(text) {
   return false;
 }
 
+// ../core/dist/mcp-registration.js
+var MCP_REGISTRATION_REL = ".mcp.json";
+var MCP_SERVER_KEY = "halfcycle";
+
+// ../core/dist/shell-quote.js
+function quoteForShell(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+
 // ../events/dist/result.js
 import { z as z2 } from "zod";
 var firedGuardSchema = z2.object({
@@ -574,9 +583,14 @@ var closedBySchema = z4.discriminatedUnion("kind", [
   z4.object({ kind: z4.literal("account-removed") }).strict(),
   z4.object({ kind: z4.literal("not-recorded") }).strict()
 ]);
+var STEP_NAME_MAX = 200;
+var stepNameSchema = plainText(STEP_NAME_MAX).refine((v) => v.trim().length > 0, {
+  message: "must not be blank"
+});
 var unfinishedStepSchema = z4.object({
   stepId: plainText(),
-  state: z4.enum(["parked", "failed"])
+  state: z4.enum(["parked", "failed"]),
+  name: stepNameSchema.optional()
 }).strict();
 var crossedSchema = z4.discriminatedUnion("kind", [
   z4.object({ kind: z4.literal("none") }).strict(),
@@ -994,13 +1008,28 @@ var engagementCredentialResponseSchema = z7.object({
   sessionToken: z7.string(),
   mcpUrl: z7.string(),
   guardUrl: z7.string(),
-  controlTelemetryUrl: z7.string()
+  controlTelemetryUrl: z7.string(),
+  methodVersion: z7.string().optional(),
+  consoleUrl: z7.string().optional()
 }).strict();
 var ciTokenExchangeResponseSchema = z7.object({
   token: z7.string(),
   expiresAt: utcIso8601,
   engagementId: z7.string()
 }).strict();
+var NO_CREDENTIAL_PLACEHOLDER = "halfcycle:no-credential";
+var NOT_THIS_ACCOUNT_PLACEHOLDER = "halfcycle:not-this-account";
+var UPDATE_CLAUDE_CODE_PLACEHOLDER = "halfcycle:update-claude-code";
+var SWITCH_ACCOUNT_ANSWER = 'answer "s" when asked';
+var NO_CREDENTIAL_SENTENCE = 'Halfcycle is not connected: this machine has no working Halfcycle credential for this project. Run "npx halfcycle" in the project folder to sign in again.';
+var NOT_THIS_ACCOUNT_SENTENCE = `Halfcycle is not connected: this project belongs to another Halfcycle account. To switch, run "npx halfcycle" in this project and ${SWITCH_ACCOUNT_ANSWER}.`;
+var UPDATE_CLAUDE_CODE_SENTENCE = "Halfcycle is not connected: this Claude Code version does not name the server it connects to, so no credential was sent. Update Claude Code, then reopen.";
+var NO_NODE_SENTENCE = "Halfcycle is not connected: Node is not installed, or not on the path this session uses, so nothing here is checked. Install Node, then reopen.";
+var PLACEHOLDER_SENTENCES = Object.freeze({
+  [NO_CREDENTIAL_PLACEHOLDER]: NO_CREDENTIAL_SENTENCE,
+  [NOT_THIS_ACCOUNT_PLACEHOLDER]: NOT_THIS_ACCOUNT_SENTENCE,
+  [UPDATE_CLAUDE_CODE_PLACEHOLDER]: UPDATE_CLAUDE_CODE_SENTENCE
+});
 
 // ../events/dist/phase-record.js
 import { z as z8 } from "zod";
@@ -1720,7 +1749,7 @@ var WRITE_ALLOWLIST = [
   ".halfcycle/bin",
   "docs/build-records",
   "test/fixtures/captured",
-  ".mcp.json",
+  MCP_REGISTRATION_REL,
   ".gitattributes",
   ZONE_B_DIR
 ];
@@ -2093,6 +2122,20 @@ exec node "$PROJECT_DIR/${VENDORED_BIN_REL}" "$@"
 }
 var GENERATED_SESSION_START_HEADER = "# Session-start marker \u2014 generated by";
 var SESSION_ID_FROM_HOOK_INPUT_SH = `SESSION_ID="$(printf '%s' "$INPUT" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{try{const j=JSON.parse(s);process.stdout.write(typeof j.session_id==="string"?j.session_id:"")}catch{process.stdout.write("")}})' 2>/dev/null || true)"`;
+var REPO_HASH_FROM_ROOT_SH = `HASH="$(printf '%s' "$REPO_ROOT" | node -e 'const c=[];process.stdin.on("data",d=>c.push(d)).on("end",()=>{process.stdout.write(require("node:crypto").createHash("sha256").update(Buffer.concat(c)).digest("hex").slice(0,12))})' 2>/dev/null || true)"`;
+function noNodeReplyShell() {
+  const reply = JSON.stringify({
+    systemMessage: NO_NODE_SENTENCE,
+    hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: NO_NODE_SENTENCE }
+  });
+  if (reply.includes("'")) {
+    throw new Error("[bundle install] the no-Node notice cannot be single-quoted; refusing to write the session-start script.");
+  }
+  return `if ! command -v node >/dev/null 2>&1; then
+  printf '%s\\n' '${reply}'
+  exit 0
+fi`;
+}
 function generateSessionStartMarker() {
   return `#!/usr/bin/env bash
 ${GENERATED_SESSION_START_HEADER} the Halfcycle installer.
@@ -2101,10 +2144,15 @@ ${GENERATED_SESSION_START_HEADER} the Halfcycle installer.
 # it began instead of only against the latest commit. The session id comes in on
 # stdin with the hook input; without one, the older session-less name is written
 # and the stop-time check compares against the latest commit as it used to.
+#
+# Without Node nothing Halfcycle installs here can run, so this says so once and
+# writes no marker.
+${noNodeReplyShell()}
 INPUT="$(cat 2>/dev/null || true)"
 REPO_ROOT="\${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null)}"
 if [ -z "$REPO_ROOT" ]; then exit 0; fi
-HASH="$(printf '%s' "$REPO_ROOT" | shasum -a 256 | cut -c1-12)"
+${REPO_HASH_FROM_ROOT_SH}
+if [ -z "$HASH" ]; then exit 0; fi
 ${SESSION_ID_FROM_HOOK_INPUT_SH}
 MARKER_DIR="\${TMPDIR:-/tmp}"
 MARKER_DIR="\${MARKER_DIR%/}"    # strip trailing slash (macOS TMPDIR ends in /)
@@ -2114,64 +2162,6 @@ else
   MARKER_FILE="\${MARKER_DIR}/halfcycle-session-\${HASH}.ref"
 fi
 git -C "$REPO_ROOT" rev-parse HEAD > "$MARKER_FILE" 2>/dev/null || true
-
-# ---------------------------------------------------------------------------
-# STANDING GUARD-COVERAGE STATEMENT (T-27; two arms since T-02b).
-#
-# A repository with no credential on this machine is UNGUARDED: the PostToolUse
-# hook will find nothing to evaluate with, and it says so once per edit, after
-# the edit. This says it once, up front, before anything is written \u2014 which is
-# the one thing a session-start hook can do that nothing else can.
-#
-# TWO REASONS TO HAVE NO CREDENTIAL, TWO DIFFERENT THINGS TO SAY (T-02b,
-# solo-project-ownership \u2014 outcome B). "You have not signed in here yet" is
-# fixed by re-running the installer; "this is not your project" is permanent,
-# and the same remedy would send the reader in a circle forever. The two are
-# told apart by HALFCYCLE_ENV_NOT_THIS_ACCOUNT, set by \`halfcycle_env_file\`
-# below from a machine-level marker beside the credential store.
-#
-# Everything below runs in a SUBSHELL: it sources a credential store, and a
-# session-start hook must not leak an engagement's variables into whatever the
-# editor runs next. Any failure inside it is swallowed; this script's exit
-# status is 0 either way, and the marker above has already been written.
-# ---------------------------------------------------------------------------
-${engagementResolutionShell()}
-
-(
-  if halfcycle_env_file "$REPO_ROOT"; then
-    set -a
-    . "$HALFCYCLE_ENV_FILE"
-    set +a
-  fi
-  if [ "$HALFCYCLE_ENV_NOT_THIS_ACCOUNT" = "1" ]; then
-    # OUTCOME B (T-02b, solo-project-ownership). This is not the missing-keys
-    # case below wearing different words: there is nothing to fix, and the loop
-    # that follows is skipped entirely rather than run and then overridden \u2014 a
-    # repository whose credential is absent for THIS reason must never be told
-    # to re-run the installer, which can never obtain one for it.
-    echo "[halfcycle] This project belongs to another Halfcycle account, so nothing here is checked."
-    echo "[halfcycle] Your work carries on exactly as it would without Halfcycle \u2014 no edit is"
-    echo "[halfcycle] evaluated, and nothing you do is reported as having passed."
-    echo "[halfcycle] Halfcycle is Solo today \u2014 one developer per project \u2014 with Team plans coming."
-    echo "[halfcycle] Ask the project's owner for view access."
-    echo "[halfcycle] If this account is wrong, sign in as the one that owns the project and run"
-    echo "[halfcycle] \\"npx halfcycle\\" again."
-  else
-    hc_missing=""
-    for hc_key in ${GUARD_COVERAGE_REQUIRED_KEYS.join(" ")}; do
-      eval "hc_value=\\\${$hc_key:-}"
-      if [ -z "$hc_value" ]; then hc_missing="$hc_missing $hc_key"; fi
-    done
-    if [ -n "$hc_missing" ]; then
-      echo "[halfcycle] NO GUARD COVERAGE IN THIS REPOSITORY. Nothing will evaluate the edits made in"
-      echo "[halfcycle] this session: this machine has no Halfcycle credential for it, so the guard hook"
-      echo "[halfcycle] has nothing to call with (missing:$hc_missing)."
-      echo "[halfcycle] Run \\"npx halfcycle\\" in this repository to fix it \u2014 it signs you in through your"
-      echo "[halfcycle] browser if needed, writes the credential to \\$HOME/.halfcycle outside this tree,"
-      echo "[halfcycle] and needs nothing configured first."
-    fi
-  fi
-) 2>/dev/null || true
 exit 0
 `;
 }
@@ -2187,7 +2177,8 @@ INPUT="$(cat 2>/dev/null || true)"
 
 REPO_ROOT="\${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null)}"
 if [ -z "$REPO_ROOT" ]; then exit 0; fi
-HASH="$(printf '%s' "$REPO_ROOT" | shasum -a 256 | cut -c1-12)"
+${REPO_HASH_FROM_ROOT_SH}
+if [ -z "$HASH" ]; then exit 0; fi
 
 # The session id arrives on stdin as part of the hook payload. Empty when absent.
 ${SESSION_ID_FROM_HOOK_INPUT_SH}
@@ -2307,8 +2298,6 @@ function removeRetiredGeneratedFile(targetRepo, rel, headerLineIndex, knownHeade
   }
   return "removed";
 }
-var MCP_REGISTRATION_REL = ".mcp.json";
-var MCP_SERVER_KEY = "halfcycle";
 var MCP_HEADERS_HELPER_COMMAND = `node -e "${[
   `const p=require('path'),f=require('fs'),c=require('child_process');`,
   `let d=process.cwd();`,
@@ -2451,9 +2440,10 @@ function previousPinForEngagement(targetRepoRoot, engagementId) {
 function nonEmpty(value) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
-function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, accountId, writtenPaths) {
+function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, accountId, methodVersion, writtenPaths) {
   const previous = previousPinForEngagement(targetRepoRoot, engagementId);
   const carried = nonEmpty(accountId) ?? nonEmpty(previous?.accountId);
+  const carriedMethodVersion = nonEmpty(methodVersion) ?? nonEmpty(previous?.methodVersion);
   const installedAt = nonEmpty(previous?.installedAt) ?? (/* @__PURE__ */ new Date()).toISOString();
   const projectPage = projectPageUrl(engagementId);
   const pin = {
@@ -2462,6 +2452,7 @@ function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, a
     engagementType,
     installedAt,
     ...carried !== void 0 ? { accountId: carried } : {},
+    ...carriedMethodVersion !== void 0 ? { methodVersion: carriedMethodVersion } : {},
     ...projectPage !== void 0 ? { projectPage } : {}
   };
   const pinPath = join5(targetRepoRoot, BUNDLE_PIN_REL);
@@ -2499,7 +2490,7 @@ function checkDrift(targetRepoRoot) {
   const pin = readBundlePin(targetRepoRoot);
   const installed = pin?.version ?? null;
   const current = manifest.version;
-  return { drifted: installed !== current, installed, current };
+  return { drifted: installed !== current, installed, current, methodVersion: pin?.methodVersion ?? null };
 }
 function writeProjectIdentity(targetRepo) {
   const path = join5(targetRepo, PROJECT_IDENTITY_REL);
@@ -2730,7 +2721,7 @@ async function install(options) {
     case "absent":
       break;
   }
-  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, accountId, report.writtenPaths);
+  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, accountId, credential?.methodVersion, report.writtenPaths);
   noteFile(draft, targetRepo, BUNDLE_PIN_REL, "written");
   noteFile(draft, targetRepo, CREW_ROSTER_REL, writeCrewRoster(targetRepo, report));
   const scanResult = runBootstrapScan(targetRepo);
@@ -2820,7 +2811,7 @@ function planeRefusal(detail) {
     reason: typeof candidate.reason === "string" ? candidate.reason : void 0
   };
 }
-var CONTROL_ORIGIN_HINT = `This CLI talks to ${DEFAULT_CONTROL_ORIGIN}; it must be the CONTROL origin \u2014 the one that serves /engagements and /board/enter-codes. The MCP server runs at a different address, and the platform supplies that one itself; you configure neither.`;
+var CONTROL_ORIGIN_HINT = `This CLI talks to ${DEFAULT_CONTROL_ORIGIN}; it must be the CONTROL origin \u2014 the one that serves /engagements. The MCP server runs at a different address, and the platform supplies that one itself; you configure neither.`;
 async function createEngagement(baseUrl, name, credential, derivedName) {
   return requestEngagementValues(
     `${baseUrl.replace(/\/+$/, "")}/engagements`,
@@ -2893,43 +2884,16 @@ async function requestEngagementValues(url, requestBody, credential, shape) {
     }).join(", ");
     throw new Error(`[bundle install] ${shape.action} response from ${url} is not the credential response this CLI is built to read (${fields}). ${shape.nothingHappened}. Either that service is a different version from this installer, or ${url} is not a Halfcycle service.`);
   }
+  const consoleUrl = typeof body.consoleUrl === "string" && body.consoleUrl.trim() !== "" ? body.consoleUrl.trim() : void 0;
+  const methodVersion = typeof body.methodVersion === "string" && body.methodVersion.trim() !== "" ? body.methodVersion.trim() : void 0;
   return {
     engagementId: body.engagementId,
     sessionToken: body.sessionToken,
     mcpUrl: body.mcpUrl.trim().replace(/\/+$/, ""),
     guardUrl: body.guardUrl.trim().replace(/\/+$/, ""),
-    ...controlTelemetryUrl !== void 0 ? { controlTelemetryUrl } : {}
-  };
-}
-
-// dist/mint-board-code.js
-async function mintBoardEnterCode(baseUrl, sessionToken) {
-  const url = `${baseUrl.replace(/\/+$/, "")}/board/enter-codes`;
-  let res;
-  try {
-    res = await fetch(url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${sessionToken}`
-      },
-      body: "{}"
-    });
-  } catch (err) {
-    throw new Error(`[bundle install] Could not reach the Halfcycle board mint endpoint at ${url}: ${err instanceof Error ? err.message : String(err)}.`);
-  }
-  if (!res.ok) {
-    throw new Error(`[bundle install] Board code mint failed: ${url} returned ${res.status}.`);
-  }
-  const body = await res.json().catch(() => null);
-  if (!body || typeof body.enterCode !== "string" || typeof body.engagementId !== "string" || typeof body.boardUrl !== "string" || typeof body.expiresAt !== "string") {
-    throw new Error(`[bundle install] Board code mint response from ${url} did not carry {enterCode, engagementId, boardUrl, expiresAt}.`);
-  }
-  return {
-    enterCode: body.enterCode,
-    engagementId: body.engagementId,
-    boardUrl: body.boardUrl,
-    expiresAt: body.expiresAt
+    ...controlTelemetryUrl !== void 0 ? { controlTelemetryUrl } : {},
+    ...consoleUrl !== void 0 ? { consoleUrl } : {},
+    ...methodVersion !== void 0 ? { methodVersion } : {}
   };
 }
 
@@ -3384,20 +3348,127 @@ function buildEngagementRecord(input) {
 
 // dist/build-record/render-v2.js
 var HIDDEN = /[\p{Cc}\p{Zl}\p{Zp}\p{Default_Ignorable_Code_Point}]/u;
-var MARKDOWN_SPECIAL = /* @__PURE__ */ new Set(["\\", "`", "*", "_", "[", "]", "<", "|", "~", "#", "&", "$"]);
+var SPACE = new RegExp("\\p{Zs}", "u");
+var WORD = /[\p{L}\p{N}]/u;
+var ASCII_PUNCTUATION = /[!-/:-@[-`{-~]/;
+var CHARACTER_REFERENCE = /^#?[A-Za-z0-9]+;/;
+var PAIRED = ["*", "_", "~", "$"];
+function codeSpanMask(cps) {
+  const mask = cps.map(() => false);
+  const runs = [];
+  for (let i = 0; i < cps.length; ) {
+    if (cps[i] !== "`") {
+      i++;
+      continue;
+    }
+    let j = i;
+    while (j < cps.length && cps[j] === "`")
+      j++;
+    runs.push({ start: i, length: j - i });
+    i = j;
+  }
+  for (let k = 0; k < runs.length; ) {
+    const open = runs[k];
+    let m = k + 1;
+    while (m < runs.length && runs[m].length !== open.length)
+      m++;
+    if (m === runs.length) {
+      k++;
+      continue;
+    }
+    const close = runs[m];
+    for (let i = open.start; i < close.start + close.length; i++)
+      mask[i] = true;
+    k = m + 1;
+  }
+  return mask;
+}
+function escapeMask(cps, inSpan) {
+  const n = cps.length;
+  const escape = cps.map(() => false);
+  const isSpace = (i) => i >= 0 && i < n && SPACE.test(cps[i]) && !HIDDEN.test(cps[i]);
+  const isWord = (i) => i >= 0 && i < n && WORD.test(cps[i]);
+  const rest = (i) => cps.slice(i).join("");
+  for (let i = 0; i < n; i++) {
+    if (inSpan[i])
+      continue;
+    const ch = cps[i];
+    const next = i + 1 < n ? cps[i + 1] : null;
+    switch (ch) {
+      case "\\":
+        escape[i] = next === null || ASCII_PUNCTUATION.test(next);
+        break;
+      case "<":
+        escape[i] = next !== null && !isSpace(i + 1) && rest(i + 1).includes(">");
+        break;
+      case "&":
+        escape[i] = CHARACTER_REFERENCE.test(rest(i + 1));
+        break;
+      case "]":
+        escape[i] = next === "(";
+        break;
+      case "[":
+      case "{":
+        escape[i] = (next === "+" || next === "-") && (rest(i + 2).includes(`${next}]`) || rest(i + 2).includes(`${next}}`));
+        break;
+      default:
+        break;
+    }
+  }
+  for (let i = 0; i < n; ) {
+    if (inSpan[i] || cps[i] !== "#") {
+      i++;
+      continue;
+    }
+    let j = i;
+    while (j < n && cps[j] === "#" && !inSpan[j])
+      j++;
+    let k = j;
+    while (k < n && isSpace(k))
+      k++;
+    if (k === n && (i === 0 || isSpace(i - 1)))
+      for (let m = i; m < j; m++)
+        escape[m] = true;
+    i = j;
+  }
+  for (const c of PAIRED) {
+    const live = [];
+    for (let i = 0; i < n; ) {
+      if (inSpan[i] || cps[i] !== c) {
+        i++;
+        continue;
+      }
+      let j = i;
+      while (j < n && cps[j] === c && !inSpan[j])
+        j++;
+      const inert = c !== "$" && (isSpace(i - 1) && isSpace(j) || c === "_" && isWord(i - 1) && isWord(j));
+      if (!inert)
+        live.push({ start: i, end: j });
+      i = j;
+    }
+    if (live.length < 2)
+      continue;
+    for (const run of live)
+      for (let m = run.start; m < run.end; m++)
+        escape[m] = true;
+  }
+  return escape;
+}
 function printRecordText(text) {
   if (text === "")
     return "(blank)";
+  const cps = [...text];
+  const escape = escapeMask(cps, codeSpanMask(cps));
   let out = "";
-  for (const ch of text) {
+  cps.forEach((ch, i) => {
     if (HIDDEN.test(ch)) {
       out += `U+${ch.codePointAt(0).toString(16).toUpperCase().padStart(4, "0")}`;
-    } else if (MARKDOWN_SPECIAL.has(ch)) {
+    } else if (escape[i]) {
       out += `\\${ch}`;
     } else {
       out += ch;
     }
-  }
+  });
   return out;
 }
 function makePrinter() {
@@ -3487,12 +3558,18 @@ function headline(observed, attested, checks) {
       if (problemsReported) {
         return "**Closed with problems reported.** Halfcycle saw nothing outstanding, and the person closing the phase reported problems found in its acceptance walk.";
       }
-      return checks === "not-observed" ? "**Closed with nothing outstanding, but no checks ran.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met, but Halfcycle has no record of any check running during this phase, so this is not a clean result." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
+      return checks === "not-observed" ? "**Closed with nothing outstanding, but no check on record.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met, but Halfcycle has no record of any check running during this phase, so this is not a clean result." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
     case "unfinished-steps":
     case "clean-over-findings":
-      return met ? "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase stated its finish conditions were met anyway." : "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase chose to override it.";
+      if (!met) {
+        return "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase chose to override it.";
+      }
+      return problemsReported ? "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase closed it as it stood, reporting problems found in its acceptance walk." : "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase stated its finish conditions were met anyway.";
     case "not-recorded":
-      return met ? "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase stated its finish conditions were met." : "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase chose to override.";
+      if (!met) {
+        return "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase chose to override.";
+      }
+      return problemsReported ? "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase reported problems found in its acceptance walk." : "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase stated its finish conditions were met.";
   }
 }
 function closedAtText(closedAt, p) {
@@ -3511,30 +3588,38 @@ function signedInAs(closedBy, p) {
       return "not recorded for this close";
   }
 }
+var OUTSTANDING_LABEL = "- Outstanding work in Halfcycle's own records of this phase (the method's steps, and problems recorded against the phase): ";
 function outstanding(crossed, p) {
   switch (crossed.kind) {
     case "none":
-      return ["- Outstanding work Halfcycle could see: none."];
+      return [`${OUTSTANDING_LABEL}none.`];
     case "not-recorded":
-      return ["- Outstanding work Halfcycle could see: not recorded for this close."];
+      return [`${OUTSTANDING_LABEL}not recorded for this close.`];
     case "clean-over-findings":
-      return [
-        `- Outstanding work Halfcycle could see: ${counted(crossed.findings, "problem", "problems")} recorded against this phase.`
-      ];
+      return [`${OUTSTANDING_LABEL}${counted(crossed.findings, "problem", "problems")} recorded against this phase.`];
     case "unfinished-steps":
       return [
-        `- Outstanding work Halfcycle could see: ${counted(crossed.steps.length, "step", "steps")} of the method left unfinished. Each is shown by the method's own label for it:`,
-        ...crossed.steps.map((step) => `  - Step: ${p.text(step.stepId)} \u2014 ${step.state === "failed" ? "failed" : "set aside unfinished"}`)
+        `${OUTSTANDING_LABEL}${counted(crossed.steps.length, "step", "steps")} of the method left unfinished. ${shownBy(crossed.steps)}`,
+        ...crossed.steps.map((step) => `  - Step: ${p.text(step.name ?? step.stepId)} \u2014 ${step.state === "failed" ? "failed" : "set aside unfinished"}`)
       ];
   }
 }
-function machines(coverage) {
+function shownBy(steps) {
+  const named = steps.filter((s) => s.name !== void 0).length;
+  if (named === 0)
+    return "Each is shown by the method's own label for it:";
+  if (named === steps.length)
+    return "Each is shown by the method's own name for it:";
+  return "Each is shown by the method's own name for it, or by its label where the record holds no name:";
+}
+function machines(coverage, checks) {
   const label = "- Computers signed in to Halfcycle for this project when the phase closed: ";
   if (coverage === null)
     return `${label}not recorded.`;
   if (coverage.enrolled === 0)
     return `${label}none.`;
-  return `${label}${String(coverage.enrolled)}. Of these, ${String(coverage.conformant)} had reported Halfcycle's checks as fully set up.`;
+  const line = `${label}${String(coverage.enrolled)}. Of these, ${String(coverage.conformant)} had reported Halfcycle's checks as fully set up.`;
+  return checks === "not-observed" && coverage.conformant > 0 ? `${line} Set up is not the same as running: Halfcycle has no record of any check running during this phase.` : line;
 }
 function walkLines(walk, p) {
   const label = "> - Acceptance walk (the finished work tried as a user would, by someone other than its builder): ";
@@ -3554,9 +3639,15 @@ function walkLines(walk, p) {
 function statedOrNot(value, p) {
   return value === null ? "Not stated by the client." : p.text(value);
 }
+function decisionLine(attested) {
+  if (attested.decision === "override") {
+    return "> - Decision: close the phase by override, without stating its finish conditions were met.";
+  }
+  return attested.walk !== null && attested.walk.verdict === "defects" ? "> - Decision: close the phase as it stood, with the problems its acceptance walk found." : "> - Decision: the phase's agreed finish conditions were met.";
+}
 function renderStated(attested, p) {
   const lines = [
-    attested.decision === "done-when-met" ? "> - Decision: the phase's agreed finish conditions were met." : "> - Decision: close the phase by override, without stating its finish conditions were met.",
+    decisionLine(attested),
     `> - Name given: ${attested.actor === null ? "removed with the account that made this close" : p.text(attested.actor)}`,
     `> - Reason given: ${attested.reason === null ? "none." : p.text(attested.reason)}`,
     ...walkLines(attested.walk, p),
@@ -3584,7 +3675,7 @@ function renderClose(heading, observed, attested, checks, p) {
       `- Closed at: ${closedAtText(observed.closedAt, p)}`,
       `- Signed in as: ${signedInAs(observed.closedBy, p)}`,
       ...outstanding(observed.crossed, p),
-      machines(observed.seatCoverage)
+      machines(observed.seatCoverage, checks)
     ].join("\n"),
     STATED_LABEL,
     renderStated(attested, p)
@@ -3847,8 +3938,7 @@ async function obtainBuildRecord(credential, repoRoot, phase, io = NODE_RECORD_P
   };
 }
 function refetchCommand(phase) {
-  const quoted = /^[A-Za-z0-9._+-]+$/.test(phase) ? phase : `'${phase.replace(/'/g, `'\\''`)}'`;
-  return `npx halfcycle@latest build-record ${quoted}`;
+  return `npx halfcycle@latest build-record ${quoteForShell(phase)}`;
 }
 export {
   BUILD_RECORD_DIR,
@@ -3878,7 +3968,6 @@ export {
   layerDocumentRow,
   mergeSettings,
   mergeWithRecords,
-  mintBoardEnterCode,
   mintOrReadIdentity,
   obtainBuildRecord,
   questionsToPut,