halfcycle 0.3.37 → 0.3.39

package/dist/build-record/obtain.d.ts

@@ -18,7 +18,9 @@
  * `JSON.parse` returned it, key order included — not the schema's output, which
  * would reorder keys. The schema parse decides only whether it is written at all.
  *
- * INV-001: Node builtins, the global `fetch` and `@halfcycle/events` only.
+ * INV-001: Node builtins, the global `fetch`, `@halfcycle/events` and
+ * `@halfcycle/core` only (the latter for the one shared shell-quoting helper,
+ * `quoteForShell`, used by `refetchCommand` below).
  * SHIPS TO CLIENT DISK inside the CLI: every string here is a client-facing
  * sentence, and no comment sits beside an object member.
  */
@@ -74,8 +76,10 @@ export declare function buildRecordUrl(credential: RepoCredential, phase: string
  */
 export declare function obtainBuildRecord(credential: RepoCredential, repoRoot: string, phase: string, io?: RecordPairIo): Promise<ObtainOutcome>;
 /**
- * How to fetch a phase's record later, as a line a person can paste: the phase is
- * quoted for the shell unless it is plain letters, digits and `._+-`.
+ * How to fetch a phase's record later, as a line a person can paste: the phase
+ * is quoted for the shell, through the one home every package that prints a
+ * runnable command shares (`quoteForShell`, `@halfcycle/core`) — not a second
+ * copy of the same escaping.
  */
 export declare function refetchCommand(phase: string): string;
 //# sourceMappingURL=obtain.d.ts.map

package/dist/build-record/obtain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"obtain.d.ts","sourceRoot":"","sources":["../../src/build-record/obtain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAwC,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAErF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;CAM+B,CAAC;AAE9D,8EAA8E;AAC9E,eAAO,MAAM,eAAe,EAAE,SAAS,wBAAwB,EAA2C,CAAC;AAE3G,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhF;AASD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,cAAc,EAC1B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,EAAE,GAAE,YAAkC,GACrC,OAAO,CAAC,aAAa,CAAC,CA0ExB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD"}
+{"version":3,"file":"obtain.d.ts","sourceRoot":"","sources":["../../src/build-record/obtain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAwC,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAErF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;CAM+B,CAAC;AAE9D,8EAA8E;AAC9E,eAAO,MAAM,eAAe,EAAE,SAAS,wBAAwB,EAA2C,CAAC;AAE3G,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhF;AASD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,cAAc,EAC1B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,EAAE,GAAE,YAAkC,GACrC,OAAO,CAAC,aAAa,CAAC,CA0ExB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/build-record/render-v2.d.ts

@@ -32,9 +32,10 @@ import type { BuildRecordV2 } from '@halfcycle/events';
  * Print one string from the record as inert, visible markdown text.
  *
  * Per code point: a hidden character becomes `U+` and its code in uppercase hex,
- * at least four digits; a markdown special character is escaped with a
- * backslash; everything else prints as itself. An empty string prints
- * `(blank)`, so a slot is never silently empty.
+ * at least four digits; a character that could start or end markup where it
+ * stands (`escapeMask`) is escaped with a backslash; everything else, a code
+ * span's contents included, prints as itself. An empty string prints `(blank)`,
+ * so a slot is never silently empty.
  */
 export declare function printRecordText(text: string): string;
 /**

package/dist/build-record/render-v2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-v2.d.ts","sourceRoot":"","sources":["../../src/build-record/render-v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAyBvD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAapD;AAyRD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CA2DzE"}
+{"version":3,"file":"render-v2.d.ts","sourceRoot":"","sources":["../../src/build-record/render-v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AA4JvD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAepD;AAuUD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CA2DzE"}

package/dist/cli-contract.d.ts

@@ -125,6 +125,13 @@ export declare function requirementMessage(verb: CliVerb, flag: string): string;
  * RENDERED, not typed out. A remedy string built by hand is the defect this file
  * was opened for; one built here cannot omit a flag, because the flags come from
  * the same table the binary refuses on.
+ *
+ * `phase` is quoted for the shell (`quoteForShell`, `packages/core`) — a phase
+ * name has no closed vocabulary and a space or `#` in it would otherwise paste
+ * back as more than one argument. The one gap that quoting does not close: a
+ * phase starting with a dash still reads as a flag once the shell hands it
+ * back; that needs a `--` end-of-flags marker on both this output and the
+ * argument parser, which is a wider change than this function and is not done.
  */
 export declare function runnableInvocation(verb: CliVerb, phase: string): string;
 //# sourceMappingURL=cli-contract.d.ts.map

package/dist/cli-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-contract.d.ts","sourceRoot":"","sources":["../src/cli-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,iFAAiF;AACjF,eAAO,MAAM,SAAS,+FAAgG,CAAC;AAEvH,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAsFD,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAElE;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAAE,CAyBxF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMvE"}
+{"version":3,"file":"cli-contract.d.ts","sourceRoot":"","sources":["../src/cli-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAIH,iFAAiF;AACjF,eAAO,MAAM,SAAS,+FAAgG,CAAC;AAEvH,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;CAClD;AAsFD,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAElE;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAAE,CAyBxF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMvE"}

package/dist/control-origin.d.ts

@@ -52,8 +52,8 @@
  * second answer to the question this file exists to answer once.
  */
 /**
- * The Halfcycle CONTROL plane — the origin that serves `POST /engagements`,
- * `POST /engagements/:id/join` and `POST /board/enter-codes`.
+ * The Halfcycle CONTROL plane — the origin that serves `POST /engagements` and
+ * `POST /engagements/:id/join`.
  *
  * NOT the MCP origin and NOT the guard origin: the platform reports both of those
  * on the create/join response (T-22, FW-4), and a developer configures neither.

package/dist/create-engagement.d.ts

@@ -47,7 +47,7 @@
  *
  * **THE TWO ORIGINS (T-22, #438).** `baseUrl` here is the CONTROL origin —
  * `HALFCYCLE_SERVICE_URL`, which serves `POST /engagements` and
- * `POST /board/enter-codes`. The MCP endpoint lives on a DIFFERENT deployed
+ * `POST /engagements/:id/join`. The MCP endpoint lives on a DIFFERENT deployed
  * service, and control does not serve `/mcp` at all. Before T-22 one variable was
  * read as the origin for all three routes, so no value satisfied it: pointed at
  * control the installed `.mcp.json` named a 404 and the developer got no method
@@ -136,6 +136,32 @@ export interface CreatedEngagement {
      * gains the fifth.
      */
     controlTelemetryUrl?: string;
+    /**
+     * The engagement's own console address, as the platform reports it (Connect
+     * Phase 4 follow-ups T-01, items 1/14) — built by control from its own
+     * `boardBaseUrl` plus the engagement id, so this package never carries a
+     * hosted host of its own (INV-001). `bin.ts` prints it on its own line, in
+     * the brand's gold.
+     *
+     * ABSENT, not present-and-empty, on a control deployment that predates T-01
+     * or has no console origin configured. There is then nothing honest to
+     * print, and the caller must print NOTHING about the console rather than a
+     * link that cannot work — same posture as the two origins above being
+     * genuinely absent, never a degraded guess.
+     */
+    consoleUrl?: string;
+    /**
+     * The method version this engagement is stamped with (T-01) — the CREATE
+     * route's own deployment default at the moment of creation; the JOIN
+     * route's engagement-level pin, which can be OLDER than this deployment's
+     * current default by the time a second developer joins. `bin.ts` prints it
+     * plainly, and `checkDrift` reads the SAME fact back from the committed pin
+     * without asking the plane again.
+     *
+     * ABSENT on a control deployment that predates T-01, for the same reason
+     * `consoleUrl` can be.
+     */
+    methodVersion?: string;
 }
 /**
  * A refusal the CONTROL PLANE wrote — the origin is right, and it declined (T-08).

package/dist/create-engagement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-engagement.d.ts","sourceRoot":"","sources":["../src/create-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AAKH;;oCAEoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,6CAA6C;aAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;aAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;aAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;aACa,MAAM,EAAE,MAAM,GAAG,SAAS;;IAnB1C,6CAA6C;IAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;IAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;IAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;IACa,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM;IAMjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,WAAW,IAAI,OAAO,CAGzB;CACF;AA4ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}
+{"version":3,"file":"create-engagement.d.ts","sourceRoot":"","sources":["../src/create-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AAKH;;oCAEoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,6CAA6C;aAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;aAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;aAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;aACa,MAAM,EAAE,MAAM,GAAG,SAAS;;IAnB1C,6CAA6C;IAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;IAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;IAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;IACa,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM;IAMjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,WAAW,IAAI,OAAO,CAGzB;CACF;AA4ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAW5B"}

package/dist/index.d.ts

@@ -14,8 +14,6 @@ export { mintOrReadIdentity, readRootCommit, readRemote } from './identity.js';
 export type { ProjectIdentity } from './identity.js';
 export { createEngagement, CreateEngagementRefused } from './create-engagement.js';
 export type { CreatedEngagement } from './create-engagement.js';
-export { mintBoardEnterCode } from './mint-board-code.js';
-export type { MintedBoardCode } from './mint-board-code.js';
 export { mergeSettings } from './merge-settings.js';
 export type { ClaudeSettings, HookEntry, HookCommand } from './merge-settings.js';
 export { runBootstrapScan, scanLayers, mergeWithRecords, HALFCYCLE_STATE_FORMAT } from './scan.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAyBhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnG,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI1F,cAAc,kBAAkB,CAAC;AAKjC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAyBhE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnG,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI1F,cAAc,kBAAkB,CAAC;AAKjC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -209,6 +209,11 @@ function looksLikeSecret(text) {
 var MCP_REGISTRATION_REL = ".mcp.json";
 var MCP_SERVER_KEY = "halfcycle";
 
+// ../core/dist/shell-quote.js
+function quoteForShell(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+
 // ../events/dist/result.js
 import { z as z2 } from "zod";
 var firedGuardSchema = z2.object({
@@ -578,9 +583,14 @@ var closedBySchema = z4.discriminatedUnion("kind", [
   z4.object({ kind: z4.literal("account-removed") }).strict(),
   z4.object({ kind: z4.literal("not-recorded") }).strict()
 ]);
+var STEP_NAME_MAX = 200;
+var stepNameSchema = plainText(STEP_NAME_MAX).refine((v) => v.trim().length > 0, {
+  message: "must not be blank"
+});
 var unfinishedStepSchema = z4.object({
   stepId: plainText(),
-  state: z4.enum(["parked", "failed"])
+  state: z4.enum(["parked", "failed"]),
+  name: stepNameSchema.optional()
 }).strict();
 var crossedSchema = z4.discriminatedUnion("kind", [
   z4.object({ kind: z4.literal("none") }).strict(),
@@ -998,7 +1008,9 @@ var engagementCredentialResponseSchema = z7.object({
   sessionToken: z7.string(),
   mcpUrl: z7.string(),
   guardUrl: z7.string(),
-  controlTelemetryUrl: z7.string()
+  controlTelemetryUrl: z7.string(),
+  methodVersion: z7.string().optional(),
+  consoleUrl: z7.string().optional()
 }).strict();
 var ciTokenExchangeResponseSchema = z7.object({
   token: z7.string(),
@@ -2428,9 +2440,10 @@ function previousPinForEngagement(targetRepoRoot, engagementId) {
 function nonEmpty(value) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
-function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, accountId, writtenPaths) {
+function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, accountId, methodVersion, writtenPaths) {
   const previous = previousPinForEngagement(targetRepoRoot, engagementId);
   const carried = nonEmpty(accountId) ?? nonEmpty(previous?.accountId);
+  const carriedMethodVersion = nonEmpty(methodVersion) ?? nonEmpty(previous?.methodVersion);
   const installedAt = nonEmpty(previous?.installedAt) ?? (/* @__PURE__ */ new Date()).toISOString();
   const projectPage = projectPageUrl(engagementId);
   const pin = {
@@ -2439,6 +2452,7 @@ function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, a
     engagementType,
     installedAt,
     ...carried !== void 0 ? { accountId: carried } : {},
+    ...carriedMethodVersion !== void 0 ? { methodVersion: carriedMethodVersion } : {},
     ...projectPage !== void 0 ? { projectPage } : {}
   };
   const pinPath = join5(targetRepoRoot, BUNDLE_PIN_REL);
@@ -2476,7 +2490,7 @@ function checkDrift(targetRepoRoot) {
   const pin = readBundlePin(targetRepoRoot);
   const installed = pin?.version ?? null;
   const current = manifest.version;
-  return { drifted: installed !== current, installed, current };
+  return { drifted: installed !== current, installed, current, methodVersion: pin?.methodVersion ?? null };
 }
 function writeProjectIdentity(targetRepo) {
   const path = join5(targetRepo, PROJECT_IDENTITY_REL);
@@ -2707,7 +2721,7 @@ async function install(options) {
     case "absent":
       break;
   }
-  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, accountId, report.writtenPaths);
+  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, accountId, credential?.methodVersion, report.writtenPaths);
   noteFile(draft, targetRepo, BUNDLE_PIN_REL, "written");
   noteFile(draft, targetRepo, CREW_ROSTER_REL, writeCrewRoster(targetRepo, report));
   const scanResult = runBootstrapScan(targetRepo);
@@ -2797,7 +2811,7 @@ function planeRefusal(detail) {
     reason: typeof candidate.reason === "string" ? candidate.reason : void 0
   };
 }
-var CONTROL_ORIGIN_HINT = `This CLI talks to ${DEFAULT_CONTROL_ORIGIN}; it must be the CONTROL origin \u2014 the one that serves /engagements and /board/enter-codes. The MCP server runs at a different address, and the platform supplies that one itself; you configure neither.`;
+var CONTROL_ORIGIN_HINT = `This CLI talks to ${DEFAULT_CONTROL_ORIGIN}; it must be the CONTROL origin \u2014 the one that serves /engagements. The MCP server runs at a different address, and the platform supplies that one itself; you configure neither.`;
 async function createEngagement(baseUrl, name, credential, derivedName) {
   return requestEngagementValues(
     `${baseUrl.replace(/\/+$/, "")}/engagements`,
@@ -2870,43 +2884,16 @@ async function requestEngagementValues(url, requestBody, credential, shape) {
     }).join(", ");
     throw new Error(`[bundle install] ${shape.action} response from ${url} is not the credential response this CLI is built to read (${fields}). ${shape.nothingHappened}. Either that service is a different version from this installer, or ${url} is not a Halfcycle service.`);
   }
+  const consoleUrl = typeof body.consoleUrl === "string" && body.consoleUrl.trim() !== "" ? body.consoleUrl.trim() : void 0;
+  const methodVersion = typeof body.methodVersion === "string" && body.methodVersion.trim() !== "" ? body.methodVersion.trim() : void 0;
   return {
     engagementId: body.engagementId,
     sessionToken: body.sessionToken,
     mcpUrl: body.mcpUrl.trim().replace(/\/+$/, ""),
     guardUrl: body.guardUrl.trim().replace(/\/+$/, ""),
-    ...controlTelemetryUrl !== void 0 ? { controlTelemetryUrl } : {}
-  };
-}
-
-// dist/mint-board-code.js
-async function mintBoardEnterCode(baseUrl, sessionToken) {
-  const url = `${baseUrl.replace(/\/+$/, "")}/board/enter-codes`;
-  let res;
-  try {
-    res = await fetch(url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${sessionToken}`
-      },
-      body: "{}"
-    });
-  } catch (err) {
-    throw new Error(`[bundle install] Could not reach the Halfcycle board mint endpoint at ${url}: ${err instanceof Error ? err.message : String(err)}.`);
-  }
-  if (!res.ok) {
-    throw new Error(`[bundle install] Board code mint failed: ${url} returned ${res.status}.`);
-  }
-  const body = await res.json().catch(() => null);
-  if (!body || typeof body.enterCode !== "string" || typeof body.engagementId !== "string" || typeof body.boardUrl !== "string" || typeof body.expiresAt !== "string") {
-    throw new Error(`[bundle install] Board code mint response from ${url} did not carry {enterCode, engagementId, boardUrl, expiresAt}.`);
-  }
-  return {
-    enterCode: body.enterCode,
-    engagementId: body.engagementId,
-    boardUrl: body.boardUrl,
-    expiresAt: body.expiresAt
+    ...controlTelemetryUrl !== void 0 ? { controlTelemetryUrl } : {},
+    ...consoleUrl !== void 0 ? { consoleUrl } : {},
+    ...methodVersion !== void 0 ? { methodVersion } : {}
   };
 }
 
@@ -3361,20 +3348,127 @@ function buildEngagementRecord(input) {
 
 // dist/build-record/render-v2.js
 var HIDDEN = /[\p{Cc}\p{Zl}\p{Zp}\p{Default_Ignorable_Code_Point}]/u;
-var MARKDOWN_SPECIAL = /* @__PURE__ */ new Set(["\\", "`", "*", "_", "[", "]", "<", "|", "~", "#", "&", "$"]);
+var SPACE = new RegExp("\\p{Zs}", "u");
+var WORD = /[\p{L}\p{N}]/u;
+var ASCII_PUNCTUATION = /[!-/:-@[-`{-~]/;
+var CHARACTER_REFERENCE = /^#?[A-Za-z0-9]+;/;
+var PAIRED = ["*", "_", "~", "$"];
+function codeSpanMask(cps) {
+  const mask = cps.map(() => false);
+  const runs = [];
+  for (let i = 0; i < cps.length; ) {
+    if (cps[i] !== "`") {
+      i++;
+      continue;
+    }
+    let j = i;
+    while (j < cps.length && cps[j] === "`")
+      j++;
+    runs.push({ start: i, length: j - i });
+    i = j;
+  }
+  for (let k = 0; k < runs.length; ) {
+    const open = runs[k];
+    let m = k + 1;
+    while (m < runs.length && runs[m].length !== open.length)
+      m++;
+    if (m === runs.length) {
+      k++;
+      continue;
+    }
+    const close = runs[m];
+    for (let i = open.start; i < close.start + close.length; i++)
+      mask[i] = true;
+    k = m + 1;
+  }
+  return mask;
+}
+function escapeMask(cps, inSpan) {
+  const n = cps.length;
+  const escape = cps.map(() => false);
+  const isSpace = (i) => i >= 0 && i < n && SPACE.test(cps[i]) && !HIDDEN.test(cps[i]);
+  const isWord = (i) => i >= 0 && i < n && WORD.test(cps[i]);
+  const rest = (i) => cps.slice(i).join("");
+  for (let i = 0; i < n; i++) {
+    if (inSpan[i])
+      continue;
+    const ch = cps[i];
+    const next = i + 1 < n ? cps[i + 1] : null;
+    switch (ch) {
+      case "\\":
+        escape[i] = next === null || ASCII_PUNCTUATION.test(next);
+        break;
+      case "<":
+        escape[i] = next !== null && !isSpace(i + 1) && rest(i + 1).includes(">");
+        break;
+      case "&":
+        escape[i] = CHARACTER_REFERENCE.test(rest(i + 1));
+        break;
+      case "]":
+        escape[i] = next === "(";
+        break;
+      case "[":
+      case "{":
+        escape[i] = (next === "+" || next === "-") && (rest(i + 2).includes(`${next}]`) || rest(i + 2).includes(`${next}}`));
+        break;
+      default:
+        break;
+    }
+  }
+  for (let i = 0; i < n; ) {
+    if (inSpan[i] || cps[i] !== "#") {
+      i++;
+      continue;
+    }
+    let j = i;
+    while (j < n && cps[j] === "#" && !inSpan[j])
+      j++;
+    let k = j;
+    while (k < n && isSpace(k))
+      k++;
+    if (k === n && (i === 0 || isSpace(i - 1)))
+      for (let m = i; m < j; m++)
+        escape[m] = true;
+    i = j;
+  }
+  for (const c of PAIRED) {
+    const live = [];
+    for (let i = 0; i < n; ) {
+      if (inSpan[i] || cps[i] !== c) {
+        i++;
+        continue;
+      }
+      let j = i;
+      while (j < n && cps[j] === c && !inSpan[j])
+        j++;
+      const inert = c !== "$" && (isSpace(i - 1) && isSpace(j) || c === "_" && isWord(i - 1) && isWord(j));
+      if (!inert)
+        live.push({ start: i, end: j });
+      i = j;
+    }
+    if (live.length < 2)
+      continue;
+    for (const run of live)
+      for (let m = run.start; m < run.end; m++)
+        escape[m] = true;
+  }
+  return escape;
+}
 function printRecordText(text) {
   if (text === "")
     return "(blank)";
+  const cps = [...text];
+  const escape = escapeMask(cps, codeSpanMask(cps));
   let out = "";
-  for (const ch of text) {
+  cps.forEach((ch, i) => {
     if (HIDDEN.test(ch)) {
       out += `U+${ch.codePointAt(0).toString(16).toUpperCase().padStart(4, "0")}`;
-    } else if (MARKDOWN_SPECIAL.has(ch)) {
+    } else if (escape[i]) {
       out += `\\${ch}`;
     } else {
       out += ch;
     }
-  }
+  });
   return out;
 }
 function makePrinter() {
@@ -3464,12 +3558,18 @@ function headline(observed, attested, checks) {
       if (problemsReported) {
         return "**Closed with problems reported.** Halfcycle saw nothing outstanding, and the person closing the phase reported problems found in its acceptance walk.";
       }
-      return checks === "not-observed" ? "**Closed with nothing outstanding, but no checks ran.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met, but Halfcycle has no record of any check running during this phase, so this is not a clean result." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
+      return checks === "not-observed" ? "**Closed with nothing outstanding, but no check on record.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met, but Halfcycle has no record of any check running during this phase, so this is not a clean result." : "**Closed cleanly.** Halfcycle saw nothing outstanding, and the person closing the phase stated its finish conditions were met.";
     case "unfinished-steps":
     case "clean-over-findings":
-      return met ? "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase stated its finish conditions were met anyway." : "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase chose to override it.";
+      if (!met) {
+        return "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase chose to override it.";
+      }
+      return problemsReported ? "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase closed it as it stood, reporting problems found in its acceptance walk." : "**Closed over outstanding work.** Halfcycle saw work still outstanding, and the person closing the phase stated its finish conditions were met anyway.";
     case "not-recorded":
-      return met ? "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase stated its finish conditions were met." : "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase chose to override.";
+      if (!met) {
+        return "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase chose to override.";
+      }
+      return problemsReported ? "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase reported problems found in its acceptance walk." : "**Outstanding work not recorded.** Halfcycle has no record of what was outstanding at this close. The person closing the phase stated its finish conditions were met.";
   }
 }
 function closedAtText(closedAt, p) {
@@ -3488,30 +3588,38 @@ function signedInAs(closedBy, p) {
       return "not recorded for this close";
   }
 }
+var OUTSTANDING_LABEL = "- Outstanding work in Halfcycle's own records of this phase (the method's steps, and problems recorded against the phase): ";
 function outstanding(crossed, p) {
   switch (crossed.kind) {
     case "none":
-      return ["- Outstanding work Halfcycle could see: none."];
+      return [`${OUTSTANDING_LABEL}none.`];
     case "not-recorded":
-      return ["- Outstanding work Halfcycle could see: not recorded for this close."];
+      return [`${OUTSTANDING_LABEL}not recorded for this close.`];
     case "clean-over-findings":
-      return [
-        `- Outstanding work Halfcycle could see: ${counted(crossed.findings, "problem", "problems")} recorded against this phase.`
-      ];
+      return [`${OUTSTANDING_LABEL}${counted(crossed.findings, "problem", "problems")} recorded against this phase.`];
     case "unfinished-steps":
       return [
-        `- Outstanding work Halfcycle could see: ${counted(crossed.steps.length, "step", "steps")} of the method left unfinished. Each is shown by the method's own label for it:`,
-        ...crossed.steps.map((step) => `  - Step: ${p.text(step.stepId)} \u2014 ${step.state === "failed" ? "failed" : "set aside unfinished"}`)
+        `${OUTSTANDING_LABEL}${counted(crossed.steps.length, "step", "steps")} of the method left unfinished. ${shownBy(crossed.steps)}`,
+        ...crossed.steps.map((step) => `  - Step: ${p.text(step.name ?? step.stepId)} \u2014 ${step.state === "failed" ? "failed" : "set aside unfinished"}`)
       ];
   }
 }
-function machines(coverage) {
+function shownBy(steps) {
+  const named = steps.filter((s) => s.name !== void 0).length;
+  if (named === 0)
+    return "Each is shown by the method's own label for it:";
+  if (named === steps.length)
+    return "Each is shown by the method's own name for it:";
+  return "Each is shown by the method's own name for it, or by its label where the record holds no name:";
+}
+function machines(coverage, checks) {
   const label = "- Computers signed in to Halfcycle for this project when the phase closed: ";
   if (coverage === null)
     return `${label}not recorded.`;
   if (coverage.enrolled === 0)
     return `${label}none.`;
-  return `${label}${String(coverage.enrolled)}. Of these, ${String(coverage.conformant)} had reported Halfcycle's checks as fully set up.`;
+  const line = `${label}${String(coverage.enrolled)}. Of these, ${String(coverage.conformant)} had reported Halfcycle's checks as fully set up.`;
+  return checks === "not-observed" && coverage.conformant > 0 ? `${line} Set up is not the same as running: Halfcycle has no record of any check running during this phase.` : line;
 }
 function walkLines(walk, p) {
   const label = "> - Acceptance walk (the finished work tried as a user would, by someone other than its builder): ";
@@ -3531,9 +3639,15 @@ function walkLines(walk, p) {
 function statedOrNot(value, p) {
   return value === null ? "Not stated by the client." : p.text(value);
 }
+function decisionLine(attested) {
+  if (attested.decision === "override") {
+    return "> - Decision: close the phase by override, without stating its finish conditions were met.";
+  }
+  return attested.walk !== null && attested.walk.verdict === "defects" ? "> - Decision: close the phase as it stood, with the problems its acceptance walk found." : "> - Decision: the phase's agreed finish conditions were met.";
+}
 function renderStated(attested, p) {
   const lines = [
-    attested.decision === "done-when-met" ? "> - Decision: the phase's agreed finish conditions were met." : "> - Decision: close the phase by override, without stating its finish conditions were met.",
+    decisionLine(attested),
     `> - Name given: ${attested.actor === null ? "removed with the account that made this close" : p.text(attested.actor)}`,
     `> - Reason given: ${attested.reason === null ? "none." : p.text(attested.reason)}`,
     ...walkLines(attested.walk, p),
@@ -3561,7 +3675,7 @@ function renderClose(heading, observed, attested, checks, p) {
       `- Closed at: ${closedAtText(observed.closedAt, p)}`,
       `- Signed in as: ${signedInAs(observed.closedBy, p)}`,
       ...outstanding(observed.crossed, p),
-      machines(observed.seatCoverage)
+      machines(observed.seatCoverage, checks)
     ].join("\n"),
     STATED_LABEL,
     renderStated(attested, p)
@@ -3824,8 +3938,7 @@ async function obtainBuildRecord(credential, repoRoot, phase, io = NODE_RECORD_P
   };
 }
 function refetchCommand(phase) {
-  const quoted = /^[A-Za-z0-9._+-]+$/.test(phase) ? phase : `'${phase.replace(/'/g, `'\\''`)}'`;
-  return `npx halfcycle@latest build-record ${quoted}`;
+  return `npx halfcycle@latest build-record ${quoteForShell(phase)}`;
 }
 export {
   BUILD_RECORD_DIR,
@@ -3855,7 +3968,6 @@ export {
   layerDocumentRow,
   mergeSettings,
   mergeWithRecords,
-  mintBoardEnterCode,
   mintOrReadIdentity,
   obtainBuildRecord,
   questionsToPut,