halfcycle 0.3.40 → 0.4.1

package/dist/index.js

@@ -1,8 +1,8 @@
 // dist/install.js
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync3, lstatSync, mkdirSync as mkdirSync3, readFileSync as readFileSync4, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname2, join as join5, posix, relative } from "node:path";
+import { existsSync as existsSync3, lstatSync, mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname3, join as join5, posix, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // ../core/dist/guard-record.js
@@ -120,58 +120,70 @@ var GUARD_RUNNER_REL = ".claude/hooks/guard-runner.sh";
 var USER_PROMPT_REMINDER_REL = ".claude/hooks/user-prompt-reminder.sh";
 var SESSION_END_MARKER_REL = ".claude/hooks/session-end-marker.sh";
 var WRITE_CAPABLE_TOOLS = ["Edit", "MultiEdit", "NotebookEdit", "Write"];
+function hookCommand(script, verb) {
+  const invocation = `bash "$CLAUDE_PROJECT_DIR"/${script}`;
+  return verb === void 0 ? invocation : `${invocation} ${verb}`;
+}
 var HALFCYCLE_HOOK_WIRING = [
   {
     event: "SessionStart",
     matcher: null,
     timeout: 5,
-    command: `bash ./${SESSION_START_MARKER_REL}`,
+    command: hookCommand(SESSION_START_MARKER_REL),
     script: SESSION_START_MARKER_REL
   },
   {
     event: "SessionStart",
     matcher: null,
     timeout: 10,
-    command: `bash ./${GUARD_RUNNER_REL} refresh-credential`,
+    command: hookCommand(GUARD_RUNNER_REL, "refresh-credential"),
     script: GUARD_RUNNER_REL
   },
   {
     event: "UserPromptSubmit",
     matcher: null,
     timeout: 5,
-    command: `bash ./${USER_PROMPT_REMINDER_REL}`,
+    command: hookCommand(USER_PROMPT_REMINDER_REL),
     script: USER_PROMPT_REMINDER_REL
   },
   {
     event: "PostToolUse",
     matcher: WRITE_CAPABLE_TOOLS.join("|"),
     timeout: 60,
-    command: `bash ./${GUARD_RUNNER_REL} hook post-tool-use`,
+    command: hookCommand(GUARD_RUNNER_REL, "hook post-tool-use"),
     script: GUARD_RUNNER_REL
   },
   {
     event: "Stop",
     matcher: null,
     timeout: 60,
-    command: `bash ./${GUARD_RUNNER_REL} hook stop`,
+    command: hookCommand(GUARD_RUNNER_REL, "hook stop"),
     script: GUARD_RUNNER_REL
   },
   {
     event: "SubagentStop",
     matcher: null,
     timeout: 60,
-    command: `bash ./${GUARD_RUNNER_REL} hook subagent-stop`,
+    command: hookCommand(GUARD_RUNNER_REL, "hook subagent-stop"),
     script: GUARD_RUNNER_REL
   },
   {
     event: "SessionEnd",
     matcher: null,
     timeout: 5,
-    command: `bash ./${SESSION_END_MARKER_REL}`,
+    command: hookCommand(SESSION_END_MARKER_REL),
     script: SESSION_END_MARKER_REL
   }
 ];
-var RETIRED_HOOK_COMMANDS = [];
+var RETIRED_HOOK_COMMANDS = [
+  "bash ./.claude/hooks/session-start-marker.sh",
+  "bash ./.claude/hooks/guard-runner.sh refresh-credential",
+  "bash ./.claude/hooks/user-prompt-reminder.sh",
+  "bash ./.claude/hooks/guard-runner.sh hook post-tool-use",
+  "bash ./.claude/hooks/guard-runner.sh hook stop",
+  "bash ./.claude/hooks/guard-runner.sh hook subagent-stop",
+  "bash ./.claude/hooks/session-end-marker.sh"
+];
 var HALFCYCLE_HOOK_COMMANDS = /* @__PURE__ */ new Set([
   ...HALFCYCLE_HOOK_WIRING.map((entry) => entry.command),
   ...RETIRED_HOOK_COMMANDS
@@ -1217,10 +1229,11 @@ halfcycle_env_file() {
 
 // dist/identity.js
 import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync as readFileSync2 } from "node:fs";
-import { isAbsolute, join as join3 } from "node:path";
+import { existsSync, linkSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname2, isAbsolute, join as join3 } from "node:path";
 import { randomUUID } from "node:crypto";
 var PROJECT_IDENTITY_NOTE = 'projectId is NOT the engagement id \u2014 it identifies this repository/worktree to Halfcycle, not an engagement. The engagement id lives in .halfcycle/bundle.json, in its "engagementId" field.';
+var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
 var REPOSITORY_LOCATING_GIT_VARS = [
   "GIT_ALTERNATE_OBJECT_DIRECTORIES",
   "GIT_COMMON_DIR",
@@ -1301,21 +1314,45 @@ function mintOrReadIdentity(targetRepoRoot) {
   const path = join3(targetRepoRoot, ".halfcycle", "project.json");
   if (existsSync(path)) {
     const onDisk = JSON.parse(readFileSync2(path, "utf-8"));
-    const identity2 = {
+    const identity = {
       projectId: onDisk.projectId ?? "",
       rootCommit: onDisk.rootCommit ?? null,
       remote: onDisk.remote ?? null,
       note: PROJECT_IDENTITY_NOTE
     };
-    return { identity: identity2, minted: false };
+    return { identity, minted: false };
   }
-  const identity = {
+  return { identity: mintIdentity(targetRepoRoot), minted: true };
+}
+function mintIdentity(targetRepoRoot) {
+  return {
     projectId: randomUUID(),
     rootCommit: readRootCommit(targetRepoRoot),
     remote: readRemote(targetRepoRoot),
     note: PROJECT_IDENTITY_NOTE
   };
-  return { identity, minted: true };
+}
+function serializeProjectIdentity(identity) {
+  return JSON.stringify(identity, null, 2) + "\n";
+}
+function createProjectIdentityFile(targetRepoRoot) {
+  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
+  mkdirSync2(dirname2(path), { recursive: true });
+  const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  try {
+    writeFileSync2(temporary, serializeProjectIdentity(mintIdentity(targetRepoRoot)), {
+      encoding: "utf-8",
+      flag: "wx"
+    });
+    try {
+      linkSync(temporary, path);
+    } catch (err) {
+      if (err.code !== "EEXIST")
+        throw err;
+    }
+  } finally {
+    rmSync(temporary, { force: true });
+  }
 }
 
 // dist/install-manifest.js
@@ -1600,6 +1637,13 @@ function mcpEndpointUrl(origin) {
   return `${origin.trim().replace(/\/+$/, "")}${MCP_ENDPOINT_PATH}`;
 }
 
+// dist/node-floor.js
+var NODE_FLOOR_MAJOR = 18;
+var NODE_FLOOR_SENTENCE_HEAD = `Halfcycle needs Node ${NODE_FLOOR_MAJOR} or newer; you have `;
+function nodeFloorProgram(guarded) {
+  return `if(+process.versions.node.split('.')[0]<${NODE_FLOOR_MAJOR}){console.error('${NODE_FLOOR_SENTENCE_HEAD}'+process.versions.node);process.exitCode=1}else{${guarded}}`;
+}
+
 // dist/project-page.js
 function projectPageUrl(engagementId) {
   return isEngagementId(engagementId) ? `${DASHBOARD_URL}/${encodeURIComponent(engagementId)}` : void 0;
@@ -1615,7 +1659,7 @@ function mergeSettings(existing, generated) {
     merged.$schema = generated.$schema;
   }
   const generatedHooks = generated.hooks ?? {};
-  const halfcycleCommands = /* @__PURE__ */ new Set();
+  const halfcycleCommands = new Set(HALFCYCLE_HOOK_COMMANDS);
   for (const entries of Object.values(generatedHooks)) {
     for (const entry of entries) {
       for (const h of entry.hooks)
@@ -1648,7 +1692,7 @@ function mergePermissions(existing, generated) {
 }
 
 // dist/scan.js
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join4 } from "node:path";
 var HALFCYCLE_STATE_FORMAT = "halfcycle-state-file/v1";
 var HALFCYCLE_STATE_NOTE = [
@@ -1692,8 +1736,8 @@ function runBootstrapScan(targetRepo) {
     return { state: existing, ran: false };
   }
   const state = scanLayers(targetRepo);
-  mkdirSync2(join4(targetRepo, ".halfcycle"), { recursive: true });
-  writeFileSync2(statePath, JSON.stringify(state, null, 2) + "\n", "utf-8");
+  mkdirSync3(join4(targetRepo, ".halfcycle"), { recursive: true });
+  writeFileSync3(statePath, JSON.stringify(state, null, 2) + "\n", "utf-8");
   return { state, ran: true };
 }
 function mergeWithRecords(state, layersWithRealRecords) {
@@ -1715,7 +1759,7 @@ function mergeWithRecords(state, layersWithRealRecords) {
 // dist/install.js
 var ZONE_B_DIR = ".workbench";
 var __filename = fileURLToPath(import.meta.url);
-var __dirname = dirname2(__filename);
+var __dirname = dirname3(__filename);
 function findBundleRoot(startDir) {
   let candidate = startDir;
   for (let i = 0; i < 4; i++) {
@@ -1725,7 +1769,7 @@ function findBundleRoot(startDir) {
         return candidate;
     } catch {
     }
-    candidate = dirname2(candidate);
+    candidate = dirname3(candidate);
   }
   return join5(startDir, "..");
 }
@@ -1739,7 +1783,7 @@ function resolveVendoredBinary() {
     if (existsSync3(candidate))
       return candidate;
   }
-  throw new Error(`[bundle install] Cannot find the self-contained guard binary bin.bundle.mjs. This copy of the halfcycle package is incomplete \u2014 reinstall it, or rebuild it if you are working on it. Looked in: ${candidates.join(", ")}.`);
+  throw new Error(`[halfcycle] Cannot find the self-contained guard binary bin.bundle.mjs. This copy of the halfcycle package is incomplete \u2014 reinstall it, or rebuild it if you are working on it. Looked in: ${candidates.join(", ")}.`);
 }
 var WRITE_ALLOWLIST = [
   ".claude/commands",
@@ -1761,9 +1805,11 @@ function isAllowlisted(targetRelPath) {
     return normalised === p || normalised.startsWith(p + "/");
   });
 }
-var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
 var CREW_ROSTER_REL = ".halfcycle/crew.json";
 var CAPTURED_INDEX_REL = "test/fixtures/captured/manifest.json";
+function capturedIndexScaffold() {
+  return join5(BUNDLE_ROOT, "scaffolding", "test", "fixtures", "captured", "manifest.json");
+}
 var GITIGNORE_REL = ".gitignore";
 var GITATTRIBUTES_REL = ".gitattributes";
 function commandStubRel(name) {
@@ -1773,8 +1819,9 @@ var RETIRED_MCP_HEADERS_HELPER_REL = ".halfcycle/mcp-headers.sh";
 var RETIRED_WRITE_SET_FILES = [RETIRED_MCP_HEADERS_HELPER_REL];
 var RETIRED_DENY_PATTERNS = [];
 function closedWriteSet() {
+  const commands = readPluginManifest().commands ?? [];
   const files = /* @__PURE__ */ new Set([
-    ...(readPluginManifest().commands ?? []).map((cmd) => commandStubRel(cmd.name)),
+    ...commands.map((cmd) => commandStubRel(cmd.name)),
     ...Object.keys(OWNED_GENERATED_HEADERS),
     VENDORED_BIN_REL,
     CREW_ROSTER_REL,
@@ -1803,8 +1850,22 @@ function closedWriteSet() {
     gitattributesLines: /* @__PURE__ */ new Set([
       GITATTRIBUTES_HEADER,
       ...lfRules([...Object.keys(OWNED_GENERATED_HEADERS), ...RETIRED_WRITE_SET_FILES])
-    ])
+    ]),
+    generatedSha256: sha256OfWhatThisVersionWrites(commands)
+  };
+}
+function sha256OfWhatThisVersionWrites(commands) {
+  const out = /* @__PURE__ */ new Map();
+  const fromFile = (rel, src) => {
+    if (existsSync3(src))
+      out.set(rel, sha256Hex(readFileSync4(src)));
   };
+  for (const cmd of commands)
+    fromFile(commandStubRel(cmd.name), join5(BUNDLE_ROOT, ".claude-plugin", cmd.path));
+  for (const [rel, content] of hookScriptsThisVersionWrites())
+    out.set(rel, sha256Hex(content));
+  fromFile(CAPTURED_INDEX_REL, capturedIndexScaffold());
+  return out;
 }
 function readPreviousManifest(targetRepo) {
   try {
@@ -1823,7 +1884,7 @@ function noteFile(draft, targetRepo, rel, outcome) {
 function recordSettingsMerge(draft, existing, generated, preexisted) {
   const generatedHooks = generated.hooks ?? {};
   const hookCommands = Object.values(generatedHooks).flatMap((entries) => entries.flatMap((entry) => entry.hooks.map((h) => h.command)));
-  const ours = new Set(hookCommands);
+  const ours = /* @__PURE__ */ new Set([...hookCommands, ...HALFCYCLE_HOOK_COMMANDS]);
   const existingHooks = isPlainObject(existing.hooks) ? existing.hooks : void 0;
   const heldOurs = Object.values(existingHooks ?? {}).some((entries) => Array.isArray(entries) && entries.some((entry) => isHalfcycleEntry(entry, ours)));
   const existingDeny = Array.isArray(existing.permissions?.deny) ? existing.permissions.deny : [];
@@ -1865,13 +1926,13 @@ function recordMcpAdoptionOnly(draft, existingText) {
     return;
   recordMcp(draft, { created: false, adopted: true, mcpServersCreated: false });
 }
-function recordGitignoreReconcile(draft, before, after) {
-  const adopted = draft.gitignore === void 0 && before !== null ? adoptOlderGitignoreBlock(before) : "";
-  const appended = appendedText(before, after);
-  recordGitignore(draft, before === null && after !== null, [adopted, appended]);
+function recordGitignoreReconcile(draft, before, after, writeSet) {
+  const adopted = draft.gitignore === void 0 && before !== null ? adoptBlockUnderHeader(before, GITIGNORE_HEADER, writeSet.gitignoreLines) : "";
+  recordGitignore(draft, before === null && after !== null, [adopted, appendedText(before, after)]);
 }
-function recordGitattributesReconcile(draft, before, after) {
-  recordGitattributes(draft, before === null && after !== null, [appendedText(before, after)]);
+function recordGitattributesReconcile(draft, before, after, writeSet) {
+  const adopted = draft.gitattributes === void 0 && before !== null ? adoptBlockUnderHeader(before, GITATTRIBUTES_HEADER, writeSet.gitattributesLines) : "";
+  recordGitattributes(draft, before === null && after !== null, [adopted, appendedText(before, after)]);
 }
 function appendedText(before, after) {
   if (after === null || after === before)
@@ -1887,7 +1948,7 @@ function assertManifestInWriteSet(manifest, writeSet) {
     ...manifest.createdDirs.filter((p) => !writeSet.dirs.has(p))
   ];
   if (strays.length > 0) {
-    throw new Error(`[bundle install] the install record names paths outside the write set: ${strays.join(", ")}`);
+    throw new Error(`[halfcycle] the install record names paths outside the write set: ${strays.join(", ")}`);
   }
 }
 function findNotShared(targetRepo, manifest, collidedPaths) {
@@ -1939,6 +2000,13 @@ function lstatOrNull(path) {
     return null;
   }
 }
+function readFileOrNull(path) {
+  try {
+    return readFileSync4(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
 function isPlainObject(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -1951,7 +2019,7 @@ function copyManifestCommands(manifest, targetRepo, report, draft) {
   for (const cmd of manifest.commands ?? []) {
     const srcFile = join5(BUNDLE_ROOT, ".claude-plugin", cmd.path);
     if (!existsSync3(srcFile)) {
-      throw new Error(`[bundle install] plugin.json declares command "${cmd.name}" at "${cmd.path}", but no file exists there (${srcFile}). The manifest and commands/ must agree.`);
+      throw new Error(`[halfcycle] plugin.json declares command "${cmd.name}" at "${cmd.path}", but no file exists there (${srcFile}). The manifest and commands/ must agree.`);
     }
     const rel = commandStubRel(cmd.name);
     const destFile = join5(targetRepo, rel);
@@ -1964,46 +2032,48 @@ function copyManifestCommands(manifest, targetRepo, report, draft) {
 function writeAllowlisted(targetAbsPath, targetRepoRoot, content, writtenPaths) {
   const rel = relative(targetRepoRoot, targetAbsPath).replace(/\\/g, "/");
   if (!isAllowlisted(rel)) {
-    throw new Error(`[bundle install] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
+    throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  mkdirSync3(dirname2(targetAbsPath), { recursive: true });
-  writeFileSync3(targetAbsPath, content, "utf-8");
+  if (readFileOrNull(targetAbsPath) === content)
+    return;
+  mkdirSync4(dirname3(targetAbsPath), { recursive: true });
+  writeFileSync4(targetAbsPath, content, "utf-8");
   writtenPaths.push(rel);
 }
 function writeCollisionSafe(targetAbsPath, targetRepoRoot, content) {
   const rel = relative(targetRepoRoot, targetAbsPath).replace(/\\/g, "/");
   if (!isAllowlisted(rel)) {
-    throw new Error(`[bundle install] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
+    throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
   if (existsSync3(targetAbsPath)) {
     const current = readFileSync4(targetAbsPath, "utf-8");
     return current === content ? "skipped" : "collided";
   }
-  mkdirSync3(dirname2(targetAbsPath), { recursive: true });
-  writeFileSync3(targetAbsPath, content, "utf-8");
+  mkdirSync4(dirname3(targetAbsPath), { recursive: true });
+  writeFileSync4(targetAbsPath, content, "utf-8");
   return "written";
 }
 var INSTALLER_OWNED_DIR = ".halfcycle/";
 function writeOwned(targetAbsPath, targetRepoRoot, content) {
   const rel = relative(targetRepoRoot, targetAbsPath).replace(/\\/g, "/");
   if (!isAllowlisted(rel)) {
-    throw new Error(`[bundle install] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
+    throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
   if (!rel.startsWith(INSTALLER_OWNED_DIR)) {
-    throw new Error(`[bundle install] Path-ownership violation: attempted to claim "${rel}" by path. Only ${INSTALLER_OWNED_DIR} is owned outright by this installer; everywhere else a differing file may be a developer's, so ownership must be proved from the file's own contents (writeOwnedGenerated) rather than assumed from where it sits.`);
+    throw new Error(`[halfcycle] Path-ownership violation: attempted to claim "${rel}" by path. Only ${INSTALLER_OWNED_DIR} is owned outright by this installer; everywhere else a differing file may be a developer's, so ownership must be proved from the file's own contents (writeOwnedGenerated) rather than assumed from where it sits.`);
   }
   if (existsSync3(targetAbsPath) && readFileSync4(targetAbsPath, "utf-8") === content) {
     return "skipped";
   }
-  mkdirSync3(dirname2(targetAbsPath), { recursive: true });
-  writeFileSync3(targetAbsPath, content, "utf-8");
+  mkdirSync4(dirname3(targetAbsPath), { recursive: true });
+  writeFileSync4(targetAbsPath, content, "utf-8");
   return "written";
 }
 var GENERATED_HEADER_LINE_INDEX = 1;
 function writeOwnedGenerated(targetAbsPath, targetRepoRoot, content, generatedMarker) {
   const rel = relative(targetRepoRoot, targetAbsPath).replace(/\\/g, "/");
   if (!isAllowlisted(rel)) {
-    throw new Error(`[bundle install] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
+    throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
   let replacedExisting = false;
   if (existsSync3(targetAbsPath)) {
@@ -2015,8 +2085,8 @@ function writeOwnedGenerated(targetAbsPath, targetRepoRoot, content, generatedMa
       return { outcome: "collided", replacedExisting: false };
     replacedExisting = true;
   }
-  mkdirSync3(dirname2(targetAbsPath), { recursive: true });
-  writeFileSync3(targetAbsPath, content, "utf-8");
+  mkdirSync4(dirname3(targetAbsPath), { recursive: true });
+  writeFileSync4(targetAbsPath, content, "utf-8");
   return { outcome: "written", replacedExisting };
 }
 function recordOwnedGenerated(report, targetAbsPath, targetRepoRoot, content, generatedMarker, rel) {
@@ -2054,6 +2124,26 @@ var DENY_PATTERNS = [
   "Bash(git commit --no-verify:*)"
 ];
 var USER_PROMPT_REMINDER_SENTENCE = "Where this project stands, and what order to work in, is recorded in the Halfcycle service and nowhere in this repository \u2014 call halfcycle_resolve before you answer or plan, because the files here will look complete and current and still be wrong about position.";
+function readExistingSettings(targetRepo) {
+  const settingsPath = join5(targetRepo, SETTINGS_REL);
+  return existsSync3(settingsPath) ? JSON.parse(readFileSync4(settingsPath, "utf-8")) : void 0;
+}
+var SettingsParseRefused = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SettingsParseRefused";
+  }
+};
+function settingsParseRefusal(targetRepo, err) {
+  const file = join5(targetRepo, SETTINGS_REL);
+  const offset = /position (\d+)/.exec(err instanceof Error ? err.message : "")?.[1];
+  let where = "";
+  if (offset !== void 0) {
+    const before = readFileSync4(file, "utf-8").slice(0, Number(offset)).split("\n");
+    where = ` (line ${before.length}, column ${before[before.length - 1].length + 1})`;
+  }
+  return `${file} could not be read as JSON${where} \u2014 fix it and run "npx halfcycle" again.`;
+}
 function generateSettingsJson() {
   const hooks = {};
   for (const { event, matcher, timeout, command } of HALFCYCLE_HOOK_WIRING) {
@@ -2118,6 +2208,10 @@ if [ "$HALFCYCLE_ENV_NOT_THIS_ACCOUNT" = "1" ]; then
   export HALFCYCLE_NOT_THIS_ACCOUNT=1
 fi
 
+# On a Node older than Halfcycle supports, the runner cannot even be read, so
+# say that in one line instead of handing it a stack trace.
+node -e "${nodeFloorProgram("")}" || exit
+
 exec node "$PROJECT_DIR/${VENDORED_BIN_REL}" "$@"
 `;
 }
@@ -2130,7 +2224,7 @@ function noNodeReplyShell() {
     hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: NO_NODE_SENTENCE }
   });
   if (reply.includes("'")) {
-    throw new Error("[bundle install] the no-Node notice cannot be single-quoted; refusing to write the session-start script.");
+    throw new Error("[halfcycle] the no-Node notice cannot be single-quoted; refusing to write the session-start script.");
   }
   return `if ! command -v node >/dev/null 2>&1; then
   printf '%s\\n' '${reply}'
@@ -2293,13 +2387,13 @@ function removeRetiredGeneratedFile(targetRepo, rel, headerLineIndex, knownHeade
   if (!isTrackedAndClean(targetRepo, rel))
     return "kept-uncommitted";
   try {
-    rmSync(path);
+    rmSync2(path);
   } catch {
     return "failed";
   }
   return "removed";
 }
-var MCP_HEADERS_HELPER_COMMAND = `node -e "${[
+var MCP_HEADERS_HELPER_COMMAND = `node -e "${nodeFloorProgram([
   `const p=require('path'),f=require('fs'),c=require('child_process');`,
   `let d=process.cwd();`,
   `for(;;){`,
@@ -2312,7 +2406,7 @@ var MCP_HEADERS_HELPER_COMMAND = `node -e "${[
   `d=u}`,
   `console.error('halfcycle: no ${VENDORED_BIN_REL} at or above '+process.cwd()+'; run npx halfcycle in the project folder');`,
   `process.exit(1)`
-].join("")}"`;
+].join(""))}"`;
 var MCP_HEADERS_KNOWN_HEADER_HASHES = [
   "37a733ea588b3361b2bbfd86c44e0c95da30d7af6acffd1243ece83c811f0af2",
   "6732ec6d2d2bf7cb33017749a3d021b59af653dcd07c3811693b5a242d44b1a1"
@@ -2326,6 +2420,14 @@ var OWNED_GENERATED_HEADERS = {
   ".claude/hooks/session-end-marker.sh": GENERATED_SESSION_END_HEADER,
   ".claude/hooks/session-start-marker.sh": GENERATED_SESSION_START_HEADER
 };
+function hookScriptsThisVersionWrites() {
+  return [
+    [".claude/hooks/guard-runner.sh", generateGuardRunnerWrapper()],
+    [".claude/hooks/session-end-marker.sh", generateSessionEndMarker()],
+    [".claude/hooks/user-prompt-reminder.sh", generateUserPromptReminderHook()],
+    [".claude/hooks/session-start-marker.sh", generateSessionStartMarker()]
+  ];
+}
 function generateMcpRegistration(existing, mcpOrigin) {
   let base = { mcpServers: {} };
   if (existing !== null) {
@@ -2346,13 +2448,12 @@ function generateMcpRegistration(existing, mcpOrigin) {
 }
 var REQUIRED_GITIGNORE_ENTRIES = [".halfcycle/state.json", `${ZONE_B_DIR}/`];
 var GITIGNORE_HEADER = "# Halfcycle \u2014 machine-local secrets/state and Zone-B (never push to client remote)";
-function adoptOlderGitignoreBlock(before) {
-  const claimable = /* @__PURE__ */ new Set([...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL]);
+function adoptBlockUnderHeader(before, header, claimable) {
   const claimed = [];
   let underHeader = false;
   const lines = before.split("\n");
   for (const [i, line] of lines.entries()) {
-    if (line === GITIGNORE_HEADER) {
+    if (line === header) {
       if (i > 0 && lines[i - 1] === "")
         claimed.push("");
       claimed.push(line);
@@ -2375,7 +2476,7 @@ function reconcileGitignore(targetRepo) {
   try {
     if (!existsSync3(gitignorePath)) {
       const body = [header, ...REQUIRED_GITIGNORE_ENTRIES].join("\n") + "\n";
-      writeFileSync3(gitignorePath, body, "utf-8");
+      writeFileSync4(gitignorePath, body, "utf-8");
       return "written";
     }
     const existing = readFileSync4(gitignorePath, "utf-8");
@@ -2386,7 +2487,7 @@ function reconcileGitignore(targetRepo) {
     const suffix = (existing.endsWith("\n") ? "" : "\n") + `
 ${header}
 ` + toAdd.join("\n") + "\n";
-    writeFileSync3(gitignorePath, existing + suffix, "utf-8");
+    writeFileSync4(gitignorePath, existing + suffix, "utf-8");
     return "written";
   } catch {
     return "failed";
@@ -2494,12 +2595,9 @@ function checkDrift(targetRepoRoot) {
   return { drifted: installed !== current, installed, current, methodVersion: pin?.methodVersion ?? null };
 }
 function writeProjectIdentity(targetRepo) {
-  const path = join5(targetRepo, PROJECT_IDENTITY_REL);
-  const { identity } = mintOrReadIdentity(targetRepo);
-  const serialized = JSON.stringify(identity, null, 2) + "\n";
-  if (existsSync3(path) && readFileSync4(path, "utf-8") === serialized)
+  if (existsSync3(join5(targetRepo, PROJECT_IDENTITY_REL)))
     return "skipped";
-  writeFileSync3(path, serialized, "utf-8");
+  createProjectIdentityFile(targetRepo);
   return "written";
 }
 function writeEngagementCredential(credential, engagementId, home) {
@@ -2562,10 +2660,10 @@ function migrateLegacyEnvLocal(targetRepo, stored) {
   const substantive = kept.filter((line) => line.trim() !== "" && !line.trim().startsWith("# Halfcycle"));
   try {
     if (substantive.length === 0) {
-      rmSync(path);
+      rmSync2(path);
       return { outcome: "removed", unbacked: [], missingForAdoption: [] };
     }
-    writeFileSync3(path, kept.join("\n"), "utf-8");
+    writeFileSync4(path, kept.join("\n"), "utf-8");
     return { outcome: "stripped", unbacked: [], missingForAdoption: [] };
   } catch {
     return { outcome: "failed", unbacked: [], missingForAdoption: [] };
@@ -2575,7 +2673,7 @@ async function install(options) {
   const { targetRepo, engagementId, engagementType, credential, home, accountId } = options;
   assertEngagementId(engagementId);
   if (!existsSync3(targetRepo)) {
-    throw new Error(`[bundle install] Target repo does not exist: ${targetRepo}`);
+    throw new Error(`[halfcycle] Target repo does not exist: ${targetRepo}`);
   }
   const manifest = readPluginManifest();
   const report = {
@@ -2589,17 +2687,6 @@ async function install(options) {
   const draft = startManifest(readPreviousManifest(targetRepo), (path) => writeSet.files.has(path), (path) => writeSet.dirs.has(path));
   const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync3(join5(targetRepo, dir))));
   copyManifestCommands(manifest, targetRepo, report, draft);
-  const capturedManifest = join5(targetRepo, CAPTURED_INDEX_REL);
-  const srcManifest = join5(BUNDLE_ROOT, "scaffolding", "test", "fixtures", "captured", "manifest.json");
-  if (!existsSync3(capturedManifest)) {
-    writeAllowlisted(capturedManifest, targetRepo, readFileSync4(srcManifest, "utf-8"), report.writtenPaths);
-    noteFile(draft, targetRepo, CAPTURED_INDEX_REL, "written");
-  } else {
-    report.skippedPaths.push(CAPTURED_INDEX_REL);
-    if (readFileSync4(capturedManifest).equals(readFileSync4(srcManifest))) {
-      noteFile(draft, targetRepo, CAPTURED_INDEX_REL, "skipped");
-    }
-  }
   const vendoredBinSrc = resolveVendoredBinary();
   const vendoredBinDest = join5(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs");
   const vendoredOutcome = recordOwned(report, vendoredBinDest, targetRepo, readFileSync4(vendoredBinSrc, "utf-8"), VENDORED_BIN_REL);
@@ -2607,21 +2694,20 @@ async function install(options) {
   const settingsPath = join5(targetRepo, SETTINGS_REL);
   const settingsPreexisted = existsSync3(settingsPath);
   const generatedSettings = JSON.parse(generateSettingsJson());
-  const existingSettings = settingsPreexisted ? JSON.parse(readFileSync4(settingsPath, "utf-8")) : {};
+  let existingSettings;
+  try {
+    existingSettings = readExistingSettings(targetRepo) ?? {};
+  } catch (err) {
+    throw new SettingsParseRefused(settingsParseRefusal(targetRepo, err));
+  }
   recordSettingsMerge(draft, existingSettings, generatedSettings, settingsPreexisted);
   const mergedSettings = mergeSettings(existingSettings, generatedSettings);
   const mergedSettingsText = JSON.stringify(mergedSettings, null, 2) + "\n";
-  mkdirSync3(dirname2(settingsPath), { recursive: true });
-  writeFileSync3(settingsPath, mergedSettingsText, "utf-8");
+  mkdirSync4(dirname3(settingsPath), { recursive: true });
+  writeFileSync4(settingsPath, mergedSettingsText, "utf-8");
   (settingsPreexisted ? report.mergedPaths : report.writtenPaths).push(".claude/settings.json");
-  for (const [name, content] of [
-    ["guard-runner.sh", generateGuardRunnerWrapper()],
-    ["session-end-marker.sh", generateSessionEndMarker()],
-    ["user-prompt-reminder.sh", generateUserPromptReminderHook()],
-    ["session-start-marker.sh", generateSessionStartMarker()]
-  ]) {
-    const rel = `.claude/hooks/${name}`;
-    const hookPath = join5(targetRepo, ".claude", "hooks", name);
+  for (const [rel, content] of hookScriptsThisVersionWrites()) {
+    const hookPath = join5(targetRepo, rel);
     const outcome = recordOwnedGenerated(report, hookPath, targetRepo, content, OWNED_GENERATED_HEADERS[rel], rel);
     noteFile(draft, targetRepo, rel, outcome);
   }
@@ -2680,7 +2766,7 @@ async function install(options) {
   const gitignorePath = join5(targetRepo, GITIGNORE_REL);
   const gitignoreBefore = existsSync3(gitignorePath) ? readFileSync4(gitignorePath, "utf-8") : null;
   const gitignoreOutcome = reconcileGitignore(targetRepo);
-  recordGitignoreReconcile(draft, gitignoreBefore, existsSync3(gitignorePath) ? readFileSync4(gitignorePath, "utf-8") : null);
+  recordGitignoreReconcile(draft, gitignoreBefore, existsSync3(gitignorePath) ? readFileSync4(gitignorePath, "utf-8") : null, writeSet);
   if (gitignoreOutcome === "failed") {
     report.skippedPaths.push(".gitignore (write failed \u2014 see credential refusal)");
   } else {
@@ -2689,7 +2775,7 @@ async function install(options) {
   const gitattributesPath = join5(targetRepo, GITATTRIBUTES_REL);
   const gitattributesBefore = readTextOrNull(gitattributesPath);
   const gitattributesOutcome = reconcileGitattributes(targetRepo);
-  recordGitattributesReconcile(draft, gitattributesBefore, readTextOrNull(gitattributesPath));
+  recordGitattributesReconcile(draft, gitattributesBefore, readTextOrNull(gitattributesPath), writeSet);
   if (gitattributesOutcome === "failed") {
     report.skippedPaths.push(`${GITATTRIBUTES_REL} (write failed \u2014 a clone made with core.autocrlf=true may check the hook scripts out with CRLF line endings)`);
   } else {
@@ -2812,16 +2898,22 @@ function planeRefusal(detail) {
     reason: typeof candidate.reason === "string" ? candidate.reason : void 0
   };
 }
-var CONTROL_ORIGIN_HINT = `This CLI talks to ${DEFAULT_CONTROL_ORIGIN}; it must be the CONTROL origin \u2014 the one that serves /engagements. The MCP server runs at a different address, and the platform supplies that one itself; you configure neither.`;
+var CONTROL_ORIGIN_HINT = `This CLI talks to the Halfcycle service at ${DEFAULT_CONTROL_ORIGIN} \u2014 the same address for every user, and not something you set. Halfcycle also uses a second, different address for editor commands, which is not yours to set either. If something else answered here, it is most likely a network problem or an outage rather than something to configure.`;
 async function createEngagement(baseUrl, name, credential, derivedName) {
   return requestEngagementValues(
+    "POST",
     `${baseUrl.replace(/\/+$/, "")}/engagements`,
     // A stated name wins over a guess, and the body carries at most one of them —
     // the plane applies the same ordering, so the two cannot disagree about which
     // one a row was named from.
     name ? { name } : derivedName ? { derivedName } : {},
     credential,
-    { action: "Create-engagement", nothingHappened: "No engagement was created", route: "POST /engagements" }
+    {
+      action: "Create-engagement",
+      nothingHappened: "No engagement was created",
+      route: "POST /engagements",
+      alsoNothingWritten: true
+    }
   );
 }
 function withDeclaredTelemetryKey(raw) {
@@ -2830,12 +2922,12 @@ function withDeclaredTelemetryKey(raw) {
   const obj = raw;
   return "controlTelemetryUrl" in obj ? obj : { ...obj, controlTelemetryUrl: "" };
 }
-async function requestEngagementValues(url, requestBody, credential, shape) {
+async function requestEngagementValues(method, url, requestBody, credential, shape) {
   const bearer = credential?.trim();
   let res;
   try {
     res = await fetch(url, {
-      method: "POST",
+      method,
       headers: {
         "content-type": "application/json",
         ...bearer ? { authorization: `Bearer ${bearer}` } : {}
@@ -2843,36 +2935,36 @@ async function requestEngagementValues(url, requestBody, credential, shape) {
       body: JSON.stringify(requestBody)
     });
   } catch (err) {
-    throw new Error(`[bundle install] Could not reach the Halfcycle service at ${url}: ${err instanceof Error ? err.message : String(err)}. ${shape.nothingHappened}. ` + CONTROL_ORIGIN_HINT);
+    throw new Error(`[halfcycle] Could not reach the Halfcycle service at ${url}: ${err instanceof Error ? err.message : String(err)}. ${shape.nothingHappened}. ` + CONTROL_ORIGIN_HINT);
   }
   if (!res.ok) {
     const detail = await res.text().catch(() => "");
     const refusal = res.status === 404 ? void 0 : planeRefusal(detail);
     if (refusal) {
-      throw new CreateEngagementRefused(res.status, refusal.message, refusal.error, refusal.reason, `[bundle install] ${shape.action} failed: ${url} returned ${res.status}. ${refusal.message} ${shape.nothingHappened}.`);
+      throw new CreateEngagementRefused(res.status, refusal.message, refusal.error, refusal.reason, `[halfcycle] ${shape.action} failed: ${url} returned ${res.status}. ${refusal.message} ${shape.nothingHappened}.`);
     }
     const wrongOrigin = res.status === 404 ? `That address answered, but it does not serve ${shape.route} \u2014 so it is not the Halfcycle service. ` : "";
-    throw new Error(`[bundle install] ${shape.action} failed: ${url} returned ${res.status}. ${wrongOrigin}${detail ? `Response: ${detail.slice(0, 300)}. ` : ""}${shape.nothingHappened}. ` + CONTROL_ORIGIN_HINT);
+    throw new Error(`[halfcycle] ${shape.action} failed: ${url} returned ${res.status}. ${wrongOrigin}${detail ? `Response: ${detail.slice(0, 300)}. ` : ""}${shape.nothingHappened}. ` + CONTROL_ORIGIN_HINT);
   }
   const candidate = withDeclaredTelemetryKey(await res.json().catch(() => null));
   const declared = engagementCredentialResponseSchema.safeParse(candidate);
   const body = declared.success ? declared.data : candidate;
   if (!body || typeof body.engagementId !== "string" || typeof body.sessionToken !== "string") {
-    throw new Error(`[bundle install] ${shape.action} response from ${url} did not carry {engagementId, sessionToken}. ${shape.nothingHappened}. ` + CONTROL_ORIGIN_HINT);
+    throw new Error(`[halfcycle] ${shape.action} response from ${url} did not carry {engagementId, sessionToken}. ${shape.nothingHappened}. ` + CONTROL_ORIGIN_HINT);
   }
   for (const [field, value] of [
     ["engagementId", body.engagementId],
     ["sessionToken", body.sessionToken]
   ]) {
     if (value.trim() === "") {
-      throw new Error(`[bundle install] The Halfcycle service at ${url} answered with a blank ${field} (the field is present but empty). An install cannot proceed on it: it would be written into this engagement's credential store, read back as a configured value, and every guard evaluation would fail against it for the life of the engagement. ${shape.nothingHappened} and nothing was written. ` + CONTROL_ORIGIN_HINT);
+      throw new Error(`[halfcycle] The Halfcycle service at ${url} answered with a blank ${field} (the field is present but empty). An install cannot proceed on it: it would be written into this engagement's credential store, read back as a configured value, and every guard evaluation would fail against it for the life of the engagement. ${shape.nothingHappened}${shape.alsoNothingWritten ? " and nothing was written" : ""}. ` + CONTROL_ORIGIN_HINT);
     }
   }
   if (typeof body.mcpUrl !== "string" || body.mcpUrl.trim() === "") {
-    throw new Error(`[bundle install] The Halfcycle service at ${url} created an engagement but did not say where its MCP server lives (no mcpUrl on the response). Without that address the install would write an MCP registration pointing nowhere, so nothing was written. Either that service is older than this installer, or ${url} is not a Halfcycle service.`);
+    throw new Error(`[halfcycle] The Halfcycle service at ${url} created an engagement but did not say where its MCP server lives (no mcpUrl on the response). Without that address the install would write an MCP registration pointing nowhere, so it does not continue. Either that service is older than this installer, or ${url} is not a Halfcycle service.`);
   }
   if (typeof body.guardUrl !== "string" || body.guardUrl.trim() === "") {
-    throw new Error(`[bundle install] The Halfcycle service at ${url} created an engagement but did not say where its guard service lives (no guardUrl on the response). Without that address the install would wire a guard hook that evaluates nothing, so nothing was written. Either that service is older than this installer, or ${url} is not a Halfcycle service.`);
+    throw new Error(`[halfcycle] The Halfcycle service at ${url} created an engagement but did not say where its guard service lives (no guardUrl on the response). Without that address the install would wire a guard hook that evaluates nothing, so it does not continue. Either that service is older than this installer, or ${url} is not a Halfcycle service.`);
   }
   const controlTelemetryUrl = typeof body.controlTelemetryUrl === "string" && body.controlTelemetryUrl.trim() !== "" ? body.controlTelemetryUrl.trim().replace(/\/+$/, "") : void 0;
   if (!declared.success) {
@@ -2883,7 +2975,7 @@ async function requestEngagementValues(url, requestBody, credential, shape) {
       }
       return issue.path.length > 0 ? issue.path.map(String).join(".") : "(the body itself)";
     }).join(", ");
-    throw new Error(`[bundle install] ${shape.action} response from ${url} is not the credential response this CLI is built to read (${fields}). ${shape.nothingHappened}. Either that service is a different version from this installer, or ${url} is not a Halfcycle service.`);
+    throw new Error(`[halfcycle] ${shape.action} response from ${url} is not the credential response this CLI is built to read (${fields}). ${shape.nothingHappened}. Either that service is a different version from this installer, or ${url} is not a Halfcycle service.`);
   }
   const consoleUrl = typeof body.consoleUrl === "string" && body.consoleUrl.trim() !== "" ? body.consoleUrl.trim() : void 0;
   const methodVersion = typeof body.methodVersion === "string" && body.methodVersion.trim() !== "" ? body.methodVersion.trim() : void 0;
@@ -2899,8 +2991,8 @@ async function requestEngagementValues(url, requestBody, credential, shape) {
 }
 
 // dist/setup/manifest.js
-import { existsSync as existsSync4, lstatSync as lstatSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync5, statSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname3, join as join6, posix as posix2 } from "node:path";
+import { existsSync as existsSync4, lstatSync as lstatSync2, mkdirSync as mkdirSync5, readFileSync as readFileSync5, statSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname4, join as join6, posix as posix2 } from "node:path";
 var DECLARED_ROOT_FILES = ["CLAUDE.md", "AGENTS.md", "ENGAGEMENT.md"];
 var DECLARED_DIR_PREFIX = "docs";
 var RESERVED_METHOD_PATH = "docs/method";
@@ -3011,8 +3103,8 @@ function applyFileRow(targetRepo, path, content) {
     const current = readFileSync5(abs, "utf-8");
     return current === content ? { path, outcome: "already-present", note: "already present and correct \u2014 nothing written" } : { path, outcome: "left-alone", note: "you already own this file \u2014 left exactly as it was" };
   }
-  mkdirSync4(dirname3(abs), { recursive: true });
-  writeFileSync4(abs, content, "utf-8");
+  mkdirSync5(dirname4(abs), { recursive: true });
+  writeFileSync5(abs, content, "utf-8");
   return { path, outcome: "created", note: "created" };
 }
 function applySectionRow(targetRepo, path, heading, body) {
@@ -3022,8 +3114,8 @@ function applySectionRow(targetRepo, path, heading, body) {
     return symlinkEntry(path, link, false);
   const section = renderSection(heading, body);
   if (!existsSync4(abs)) {
-    mkdirSync4(dirname3(abs), { recursive: true });
-    writeFileSync4(abs, section, "utf-8");
+    mkdirSync5(dirname4(abs), { recursive: true });
+    writeFileSync5(abs, section, "utf-8");
     return { path, outcome: "created", note: `created, with a "${heading}" section` };
   }
   const existing = readFileSync5(abs, "utf-8");
@@ -3035,7 +3127,7 @@ function applySectionRow(targetRepo, path, heading, body) {
     };
   }
   const separator = existing.endsWith("\n") ? "\n" : "\n\n";
-  writeFileSync4(abs, existing + separator + section, "utf-8");
+  writeFileSync5(abs, existing + separator + section, "utf-8");
   return {
     path,
     outcome: "section-added",
@@ -3051,7 +3143,7 @@ function applyDirectoryRow(targetRepo, path) {
     const kind = statSync(abs).isDirectory() ? "directory" : "file";
     return kind === "directory" ? { path: `${path}/`, outcome: "already-present", note: "already there \u2014 nothing written" } : { path, outcome: "left-alone", note: "you already own this path \u2014 left exactly as it was" };
   }
-  mkdirSync4(abs, { recursive: true });
+  mkdirSync5(abs, { recursive: true });
   return { path: `${path}/`, outcome: "created", note: "created" };
 }
 function applySetupWrites(targetRepo, rows) {
@@ -3734,7 +3826,7 @@ function renderBuildRecordV2Markdown(record2) {
 }
 
 // dist/build-record/write.js
-import { closeSync, existsSync as existsSync6, mkdirSync as mkdirSync5, openSync, readFileSync as readFileSync7, renameSync, rmSync as rmSync2, writeSync } from "node:fs";
+import { closeSync, existsSync as existsSync6, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync7, renameSync, rmSync as rmSync3, writeSync } from "node:fs";
 import { basename, join as join8, resolve, relative as relative2, isAbsolute as isAbsolute2 } from "node:path";
 var BUILD_RECORD_DIR = join8("docs", "build-records");
 function assertInsideOutDir(outDir, candidate, identity) {
@@ -3750,7 +3842,7 @@ function createExclusiveOnDisk(path, text) {
     writeSync(fd, text);
   } catch (err) {
     closeSync(fd);
-    rmSync2(path, { force: true });
+    rmSync3(path, { force: true });
     throw err;
   }
   closeSync(fd);
@@ -3814,7 +3906,7 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   }
   const jsonText = serialiseServedRecord(rawRecord);
   const mdText = renderBuildRecordV2Markdown(record2);
-  mkdirSync5(outDir, { recursive: true });
+  mkdirSync6(outDir, { recursive: true });
   let createdJson = false;
   try {
     io.createExclusive(jsonPath, jsonText);
@@ -3823,7 +3915,7 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
     return { kind: "created", jsonPath, mdPath };
   } catch (err) {
     if (createdJson)
-      rmSync2(jsonPath, { force: true });
+      rmSync3(jsonPath, { force: true });
     if (!isEexist(err))
       throw err;
   }
@@ -3845,19 +3937,19 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
     try {
       replaceOne(io, jsonTmp, jsonPath, existingJson);
     } catch {
-      rmSync2(jsonPath, { force: true });
+      rmSync3(jsonPath, { force: true });
     }
     throw err;
   }
   return { kind: "replaced", jsonPath, mdPath };
 }
 function replaceOne(io, tmp, finalPath, text) {
-  rmSync2(tmp, { force: true });
+  rmSync3(tmp, { force: true });
   try {
     io.createExclusive(tmp, text);
     io.rename(tmp, finalPath);
   } catch (err) {
-    rmSync2(tmp, { force: true });
+    rmSync3(tmp, { force: true });
     throw err;
   }
 }