halfcycle 0.3.40 → 0.4.1

package/dist/node-floor.d.ts

@@ -0,0 +1,54 @@
+/**
+ * THE ONE HOME of the oldest Node Halfcycle runs on, and of the one-line check that
+ * says so (#1561).
+ *
+ * **Why a check at all.** Everything Halfcycle runs on a developer's machine is
+ * built for a modern Node. On an older one it does not fail with a reason: it fails
+ * while PARSING, before a line of it runs, with `Unexpected token {`, `Unexpected
+ * token .` or a missing built-in, and a stack trace. A GUI-launched editor on macOS
+ * can find an old Node first on its path, so a developer who installed a current
+ * one still meets this.
+ *
+ * **Why it is a program TEXT and not a function.** The check has to run before
+ * anything that would not parse, so it cannot live inside the code it protects.
+ * It is spliced, as source, in front of each thing that starts Node on the
+ * developer's machine:
+ *
+ *  - the installer's entry file (`scripts/bundle-entries.mjs` writes `dist/bin.js`
+ *    from it, in front of a dynamic import of the real CLI);
+ *  - the MCP connection-headers command (`MCP_HEADERS_HELPER_COMMAND`, install.ts);
+ *  - the guard hook wrapper, before it hands over to the vendored runner
+ *    (`generateGuardRunnerWrapper`, install.ts).
+ *
+ * The session-marker scripts' own short `node -e` lines are NOT gated: they already
+ * swallow their errors and fall back, so an old Node there costs a marker, never a
+ * stack trace, and gating them would print the same sentence twice at session start
+ * (the guard wrapper also runs then).
+ *
+ * **What the program text must hold to.**
+ *  - It PARSES ON NODE 10: no `?.`, no `??`, no `??=`, no private class fields,
+ *    nothing newer. The guarded tail is the caller's business; on an old Node it is
+ *    parsed but never run, so it may use any syntax Node 10 can parse (a dynamic
+ *    `import()` parses there; measured).
+ *  - It needs no `require` and no `import`: it runs as a script (Node 10, and the
+ *    `node -e` programs) and as a module (`dist/bin.js` on Node 12+), and only
+ *    `process` and `console` exist in both.
+ *  - It holds none of `"`, `$`, `%`, a backtick, `\` or `!`, because the headers
+ *    command sits inside one pair of double quotes under both a POSIX shell and
+ *    `cmd.exe` (see `MCP_HEADERS_HELPER_COMMAND`), and the hook wrapper quotes it
+ *    the same way.
+ *  - It SETS the exit code rather than calling `process.exit`, so the sentence on
+ *    stderr is never cut short when stderr is a pipe, which it is under a hook.
+ *
+ * **Exit 1 with the sentence on stderr** is how Claude Code shows a hook's
+ * non-blocking error: the first stderr line, in the transcript. It is the channel
+ * the runner already uses when it has never been configured.
+ */
+export declare const NODE_FLOOR_MAJOR = 18;
+/**
+ * Wrap `guarded` (program text) so it runs only on a Node at or above the floor.
+ * Below it, one line goes to stderr and the exit code is 1. Pass `''` for a
+ * check-only program.
+ */
+export declare function nodeFloorProgram(guarded: string): string;
+//# sourceMappingURL=node-floor.d.ts.map

package/dist/node-floor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-floor.d.ts","sourceRoot":"","sources":["../src/node-floor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAKnC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOxD"}

package/dist/own-engagement.d.ts

@@ -101,6 +101,24 @@ export interface OutcomeBRefusal {
 }
 /** Discriminate `joinPinnedEngagement`'s result without inspecting an error. */
 export declare function isOutcomeBRefusal(result: OwnedEngagement | OutcomeBRefusal): result is OutcomeBRefusal;
+/**
+ * What `createOwnedEngagement` RETURNS, never throws, when the folder's id names a
+ * project another account owns (`project-identity-reuse` AC4, #1555) — someone else's
+ * committed `.halfcycle/project.json`, with no pin beside it.
+ *
+ * A return rather than a throw for the same reason `OutcomeBRefusal` is one: the caller
+ * must tell this apart from every other refusal without reading an error message. It is
+ * NOT `OutcomeBRefusal`, because the two outcomes are opposite: the join arm installs
+ * uninstrumented against an engagement id it already has, while this arm has no
+ * project to pin the folder to and stops (`bin.ts` exits 1 with the reset line).
+ */
+export interface ProjectOwnedElsewhere {
+    readonly outcome: 'project-owned-elsewhere';
+    /** The service's own sentence, forwarded verbatim. */
+    readonly message: string;
+}
+/** Discriminate `createOwnedEngagement`'s result without inspecting an error. */
+export declare function isProjectOwnedElsewhere(result: OwnedEngagement | ProjectOwnedElsewhere): result is ProjectOwnedElsewhere;
 /**
  * Sign in if needed, then create an engagement owned by whoever signed in (T-08).
  *
@@ -126,9 +144,11 @@ export declare function isOutcomeBRefusal(result: OwnedEngagement | OutcomeBRefu
  * attempt's credential has source `browser-handoff`, for which
  * `replaceRefusedCredential` always returns `null`.
  *
- * NOTHING HAS BEEN WRITTEN when any of this fails. Every throw here happens before
- * `install()`, and `createEngagement` itself refuses a half-formed 201 rather than
- * returning one.
+ * NOTHING MORE HAS BEEN WRITTEN when any of this fails. Every throw here happens before
+ * `install()`, and the request itself refuses a half-formed answer rather than returning
+ * one. The one file already in the folder is `.halfcycle/project.json`, written before
+ * this function by `runPreCreateChecks` so that `projectId` exists before any request
+ * (#1555): whatever fails here, a re-run asks for the same project.
  *
  * ---------------------------------------------------------------------------
  * **THE CONFIRMATION IS BETWEEN THE TWO STATEMENTS, AND ITS POSITION IS THE FIX**
@@ -144,7 +164,7 @@ export declare function isOutcomeBRefusal(result: OwnedEngagement | OutcomeBRefu
  * ignored the return would print a browser handoff and then create the project under
  * the account the person had just rejected.
  */
-export declare function createOwnedEngagement(serviceUrl: string, targetRepo: string, deps?: OwnEngagementDeps): Promise<OwnedEngagement>;
+export declare function createOwnedEngagement(serviceUrl: string, targetRepo: string, projectId: string, deps?: OwnEngagementDeps): Promise<OwnedEngagement | ProjectOwnedElsewhere>;
 /**
  * Sign in if needed, then obtain THIS caller's own credential for the engagement the
  * repository is already pinned to (T-24, #610).
@@ -209,7 +229,7 @@ export declare function createOwnedEngagement(serviceUrl: string, targetRepo: st
  * this client knows something about that the plane does not.
  *
  * A rethrown `CreateEngagementRefused` already carries a client-safe composed message
- * (the plane's sentence inside `[bundle install] Join-engagement failed: …`), so the
+ * (the plane's sentence inside `[halfcycle] Join-engagement failed: …`), so the
  * caller prints the fact and adds nothing. **Nothing is retried and nothing is
  * written** either way; the difference is only whether this client speaks.
  *

package/dist/own-engagement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"own-engagement.d.ts","sourceRoot":"","sources":["../src/own-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGxF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,GAAG,eAAe,GACxC,MAAM,IAAI,eAAe,CAE3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAgD1B;AAmDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,eAAe,GAAG,eAAe,CAAC,CAoF5C"}
+{"version":3,"file":"own-engagement.d.ts","sourceRoot":"","sources":["../src/own-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGxF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC;CAC3C;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,GAAG,eAAe,GACxC,MAAM,IAAI,eAAe,CAE3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,eAAe,GAAG,qBAAqB,GAC9C,MAAM,IAAI,qBAAqB,CAEjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,eAAe,GAAG,qBAAqB,CAAC,CAwDlD;AAmDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,eAAe,GAAG,eAAe,CAAC,CAoF5C"}

package/dist/pre-create-checks.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The checks the installer runs BEFORE it sends anything (`project-identity-reuse`
+ * AC1 and AC2, #1555 decision D1; #1567's settings-file and read-only messages; #1563's
+ * system folders and nested projects; #1557's Git for Windows offer, decision D2).
+ * Two halves of one sequence: `runLocalChecks` (writes nothing) runs on every arm before
+ * the first request; `runPreCreateChecks` (claims the folder id) runs on the create arm
+ * before the create.
+ *
+ * An install that is going to fail must fail before a project exists on the server.
+ * Until this module it failed inside `install()`, after the create: a read-only folder
+ * or a `.claude/settings.json` with a comment in it left an orphan project behind on
+ * every attempt, and each re-run made another.
+ *
+ * ONE STRAIGHT SEQUENCE, IN ORDER, EACH STEP A REFUSAL OR NOTHING. `runPreCreateChecks`
+ * is a list of statements, not a decision tree: a later check that belongs before the
+ * create is one more line in it, in the position its cost earns. A check that must not
+ * write into the folder at all (a system folder, a folder inside another project) goes
+ * ABOVE `claimFolderId`, which is the first step that writes.
+ *
+ * Every refusal is a `PreCreateRefused` carrying one client-safe sentence that names
+ * the folder or the file and the one thing to do. `bin.ts` prints it and exits 1.
+ *
+ * INV-001: Node builtins, `@halfcycle/events`, and bundle-internal modules. The folder
+ * id is judged by `projectIdSchema` — the same schema control uses to answer `400` —
+ * so this package holds no second idea of what a usable id looks like.
+ */
+/** A local check refused the install. `message` is the sentence to print. */
+export declare class PreCreateRefused extends Error {
+    constructor(message: string);
+}
+/**
+ * THE FIRST HALF OF THE SEQUENCE, ON EVERY ARM: the checks that write nothing. `bin.ts`
+ * runs it before the first request any arm sends (a re-run's `askAccount` comes before
+ * the arms decide), so a system folder, a folder inside another project and a Windows
+ * machine without Git Bash are refused whether the run would create, join or reuse.
+ * Returns whether Git for Windows was installed by this run. Sends no request; throws
+ * `PreCreateRefused`.
+ */
+export declare function runLocalChecks(targetRepo: string): Promise<{
+    readonly gitInstalled: boolean;
+}>;
+/**
+ * THE SECOND HALF, ON THE CREATE ARM ONLY: claim the folder id — the first step that
+ * writes — then the settings file. Returns the folder id the create request must carry.
+ * Not run on the join and reuse arms, which never write before their request (a refused
+ * join leaves the tree exactly as it was — `project-identity-reuse` AC7). Sends no
+ * request; throws `PreCreateRefused`.
+ */
+export declare function runPreCreateChecks(targetRepo: string): string;
+export declare function refuseSystemFolder(targetRepo: string, platform?: NodeJS.Platform): void;
+/**
+ * A folder inside a folder that is already a Halfcycle project (#1563): some PARENT
+ * holds the committed pin. Refused, naming that parent, and never reused or created
+ * here — a second project nested in the first is what 0.4.0 made. The target's own
+ * pin is not looked at (that is a re-run, decided by the arms in `bin.ts`). Edge cases
+ * such as monorepos are deliberately not special-cased here (#1570).
+ */
+export declare function refuseInsideProject(targetRepo: string): void;
+/** The one install command the offer runs and the refusal names (#1557, decision D2). */
+export declare const GIT_INSTALL_ARGS: readonly string[];
+//# sourceMappingURL=pre-create-checks.d.ts.map

package/dist/pre-create-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-create-checks.d.ts","sourceRoot":"","sources":["../src/pre-create-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAUH,6EAA6E;AAC7E,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC,CAKpG;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI7D;AA0BD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,IAAI,CAWzG;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAU5D;AAUD,yFAAyF;AACzF,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAA+D,CAAC"}

package/dist/resolve-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-credential.d.ts","sourceRoot":"","sources":["../src/resolve-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB;AAC1B,+EAA+E;AAC7E,aAAa;AACf,uEAAuE;GACrE,QAAQ;AACV,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAiB7B;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAWpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAqBxE"}
+{"version":3,"file":"resolve-credential.d.ts","sourceRoot":"","sources":["../src/resolve-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB;AAC1B,+EAA+E;AAC7E,aAAa;AACf,uEAAuE;GACrE,QAAQ;AACV,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAiB7B;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAWpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAyBxE"}

package/dist/uninstall.d.ts

@@ -2,18 +2,40 @@
  * `halfcycle uninstall` — takes back exactly what the installer put in this
  * repository, and nothing else (`client-uninstall.md`, T-21).
  *
- * WHAT DECIDES THAT A PATH IS OURS: two keys, both required (INV-023). The committed
- * install manifest (`install-manifest.ts`) must list it, AND it must be a member of
- * the closed write set held in code (`install.ts`, `closedWriteSet`). The manifest is
- * a file anyone who can land a commit can edit, so on its own it decides nothing.
- * A file is then removed only while its bytes still hash to what the installer last
- * wrote; one that changed is kept and named. A symbolic link, or a path under one, is
- * never followed.
+ * WHAT DECIDES THAT SOMETHING IS OURS: WHAT IT IS, NEVER WHETHER A RECORD LISTS IT
+ * (#1568). The committed install manifest (`install-manifest.ts`) is a file anyone
+ * can edit, delete with `.halfcycle/`, or never get, when an install stops part-way.
+ * So nothing is removed because the manifest names it, and nothing is kept because
+ * the manifest is missing. Every path acted on is a member of the closed write set
+ * held in code (`install.ts`, `closedWriteSet`), and within it:
+ *   - an ENTRY that runs Halfcycle goes: every hook command in
+ *     `HALFCYCLE_HOOK_COMMANDS` (current and retired, `@halfcycle/core`) and the
+ *     `halfcycle` MCP server — the same entries a re-install replaces;
+ *   - a FILE goes when it sits in `.halfcycle/`, the directory the installer owns by
+ *     path, or when its bytes are bytes Halfcycle wrote there: the hash the record
+ *     holds, or what this version writes (`generatedSha256`). Any other file is kept
+ *     and named;
+ *   - a MERGED FILE (`.claude/settings.json`, `.mcp.json`, `.gitignore`,
+ *     `.gitattributes`) loses our entries and nothing else, always: the same
+ *     predicate decides them on every path (`ourHookEntries`, `ourMcpServers`, the
+ *     block under our header). Nothing is written that the developer did not have —
+ *     no copy from git, no earlier version of the file — so their content always
+ *     stays; a merged JSON file comes back in the installer's formatting, and one
+ *     left empty goes (T-17c: putting git's copy back lost uncommitted edits);
+ *   - a write-set directory goes, once empty, only when an install recorded creating
+ *     it or the installer owns it by path — never one that may be the developer's.
+ * The record supplies only what nothing else can show: the deny rules and `$schema`
+ * an install added, the blocks it appended to `.gitignore` and `.gitattributes`, and
+ * which keys it created. With no record those come from the tree by the installer's
+ * own first-run rule (`noRecord`), which claims nothing it cannot see — so our deny
+ * rules and `$schema` stay. A symbolic link, or a path under one, is never
+ * followed.
  *
  * THE ORDER OF WORK IS THE SPEC'S, and it is load-bearing:
  *   1. validate everything and change nothing on any failure — the arguments (in
- *      `bin.ts`), the manifest, the pin, the project id when the credential is to go,
- *      and that each merged JSON file present parses as a JSON object;
+ *      `bin.ts`), the manifest when there is one, the pin, the project id when the
+ *      credential is to go, and that each merged JSON file present either parses as
+ *      a JSON object or holds nothing of Halfcycle's;
  *   2. unmerge `.claude/settings.json` first, so no hook points at a deleted script,
  *      then `.mcp.json`, so no registration points at a deleted helper;
  *   3. remove the recorded files, except the pin and the manifest, and the CI

package/dist/uninstall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../src/uninstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA0CH,2BAA2B;AAC3B,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAc7G;AA6YD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAoIpE;AA+OD,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAmEhH"}
+{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../src/uninstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AA2CH,2BAA2B;AAC3B,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAc7G;AA4hBD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAiJpE;AA8OD,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAmEhH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "halfcycle",
-  "version": "0.3.40",
+  "version": "0.4.1",
   "description": "Your coding agents are the engineers. Halfcycle is the rest of the team: product owner, architect, planner and independent reviewer for Claude Code.",
   "keywords": [
     "claude",
@@ -24,6 +24,9 @@
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
+  "engines": {
+    "node": ">=18"
+  },
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
@@ -44,7 +47,8 @@
   "scripts": {
     "build": "tsc -p tsconfig.json && node scripts/bundle-entries.mjs && node scripts/vendor-runner-bin.mjs",
     "typecheck": "tsc --noEmit -p tsconfig.test.json",
-    "test": "tsc -p tsconfig.test.json && node --test \"dist-test/test/\"*.test.js"
+    "build:test": "tsc -p tsconfig.test.json",
+    "test": "node -e \"const{existsSync,readdirSync}=require('fs');const d='dist-test/test';if(!existsSync(d)||!readdirSync(d).some(f=>f.endsWith('.test.js'))){console.error('dist-test/test has no compiled *.test.js files — run pnpm run build:test first');process.exit(1)}\" && node --test \"dist-test/test/\"*.test.js"
   },
   "dependencies": {
     "zod": "^4.4.3"