halfcycle 0.4.1 → 0.4.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "halfcycle",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Halfcycle Method bundle — resolution-stub slash commands, remote method-delivery registration, and governance-hook wiring for a Halfcycle engagement repo. It ships NO worker role files: a project's roles are authored from that project's own recorded decisions at orchestration kickoff (FX-2, W3-F-27).",
   "commands": [
     {

package/README.md

@@ -165,7 +165,7 @@ Nothing you already had is changed. Existing settings are preserved, and a name
 ## Requirements
 
 - Claude Code **2.1.118+**
-- Node 20+
+- Node 18+
 - A git repository
 - On Windows, in PowerShell, use `npx.cmd` instead of `npx` (PowerShell's default settings block the `npx` script; `npx.cmd` always works, with nothing to change).
 

package/bin/bin.bundle.mjs

@@ -15376,6 +15376,9 @@ function infraWarningText() {
 function localFaultText(message) {
   return `[Halfcycle] WARNING: Local fault \u2014 ${message}. The guard service was not contacted. Session continues (fail-open).`;
 }
+function noRepositoryText(failure) {
+  return failure.gitMissing ? "[Halfcycle] WARNING: Git is not installed on this machine, and Halfcycle's checks need it, so nothing will be checked in this session. Install Git, then start a new session." : localFaultText(`Could not find git repo root: ${failure.message}`);
+}
 function contractFaultText(message) {
   return `[Halfcycle] WARNING: Guard response could not be understood \u2014 ${message}
 This is not a service outage: the guard service answered. The suspect is this repository's own installed halfcycle runner, which is out of date with what the service now sends. Update it: run "npx halfcycle" in this repository, then retry. Session continues (fail-open).`;
@@ -15711,7 +15714,7 @@ async function attempt(url2, token, request, fetchFn, retry) {
 
 // dist/git.js
 import { spawnSync } from "node:child_process";
-import { readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { relative } from "node:path";
 var COLOR_AWARE_SUBCOMMANDS = /* @__PURE__ */ new Set(["diff", "show", "log"]);
 function git(args2, cwd, timeoutMs) {
@@ -15722,7 +15725,8 @@ function git(args2, cwd, timeoutMs) {
     ...timeoutMs === void 0 ? {} : { timeout: timeoutMs }
   });
   if (result.error) {
-    return { ok: false, message: `git error: ${result.error.message}` };
+    const missing = result.error.code === "ENOENT" && existsSync(cwd);
+    return { ok: false, message: `git error: ${result.error.message}`, ...missing ? { gitMissing: true } : {} };
   }
   if (result.status !== 0) {
     const stderr = result.stderr?.trim() ?? "";
@@ -16605,7 +16609,7 @@ function resolveWireFields(lines, decls) {
 }
 
 // dist/fixtures-manifest.js
-import { existsSync, mkdirSync, readFileSync as readFileSync3, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync3, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join as join2 } from "node:path";
 function manifestPath(repoRoot) {
   return join2(repoRoot, "test", "fixtures", "captured", "manifest.json");
@@ -16644,7 +16648,7 @@ function upsertManifest(repoRoot, entry) {
 }
 function removeFixtureIfExists(path) {
   try {
-    if (existsSync(path))
+    if (existsSync2(path))
       unlinkSync(path);
   } catch {
   }
@@ -17266,7 +17270,7 @@ function cleanRunSummary(verdict, scope) {
 }
 
 // dist/credential-store.js
-import { chmodSync, existsSync as existsSync2, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
+import { chmodSync, existsSync as existsSync3, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
 import { homedir as homedir2, platform } from "node:os";
 import { dirname as dirname3, join as join5 } from "node:path";
 var REFRESHED_TOKEN_KEYS = ["HALFCYCLE_TOKEN", "GUARD_SERVICE_TOKEN"];
@@ -17275,7 +17279,7 @@ function composeEngagementEnvPath(engagementId, home) {
   return join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, ENGAGEMENT_ENV_FILENAME);
 }
 function hasNotThisAccountMarker(engagementId, home) {
-  return existsSync2(join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, NOT_THIS_ACCOUNT_MARKER_FILENAME));
+  return existsSync3(join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, NOT_THIS_ACCOUNT_MARKER_FILENAME));
 }
 function readAccountCredential(controlOrigin, home) {
   let raw;
@@ -17467,7 +17471,7 @@ async function evaluateWithRefresh(opts) {
 
 // dist/hooks/marker.js
 import { createHash } from "node:crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3, statSync } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3, statSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join6 } from "node:path";
 var MARKER_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -17496,7 +17500,7 @@ function dedupePath(repoRoot, sessionId) {
 }
 function readMarker(repoRoot, sessionId) {
   const path = markerPath(repoRoot, sessionId);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return null;
   try {
     return readFileSync6(path, "utf-8").trim() || null;
@@ -17507,7 +17511,7 @@ function readMarker(repoRoot, sessionId) {
 function deleteMarker(repoRoot, sessionId) {
   for (const path of [markerPath(repoRoot, sessionId), dedupePath(repoRoot, sessionId)]) {
     try {
-      if (existsSync3(path))
+      if (existsSync4(path))
         unlinkSync3(path);
     } catch {
     }
@@ -17527,7 +17531,7 @@ function firstNoRepoNoticeThisSession(folder, sessionId) {
 }
 function readDedupe(repoRoot, sessionId) {
   const path = dedupePath(repoRoot, sessionId);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync6(path, "utf-8"));
@@ -17599,7 +17603,7 @@ function orphanSweep(repoRoot, refKnown, keepSessionId, now = Date.now()) {
 }
 
 // dist/seat-configuration.js
-import { existsSync as existsSync4, readFileSync as readFileSync7, realpathSync as realpathSync2 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync7, realpathSync as realpathSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join7, relative as relative3, resolve } from "node:path";
 function gatherSeatConfiguration(repoRoot, read = readSeatConfiguration) {
@@ -17708,7 +17712,7 @@ function readPathStates(projectDir, repoRoot) {
   const status = getWiringStatus(HALFCYCLE_HOOK_WIRING_PATHS, projectDir);
   if (!status.ok)
     return unknown2();
-  const mapped = mapWiringStatus(status.value, prefix, HALFCYCLE_HOOK_WIRING_PATHS, (rel) => existsSync4(join7(projectDir, rel)));
+  const mapped = mapWiringStatus(status.value, prefix, HALFCYCLE_HOOK_WIRING_PATHS, (rel) => existsSync5(join7(projectDir, rel)));
   return mapped ?? unknown2();
 }
 function mapWiringStatus(output, prefix, paths, onDisk) {
@@ -17774,7 +17778,7 @@ async function evaluateEdit(reply, readSeat) {
   const repoRootResult = getRepoRoot(process.cwd());
   if (!repoRootResult.ok) {
     if (firstNoRepoNoticeThisSession(process.cwd(), input.session_id)) {
-      reply.notice(localFaultText(`Could not find git repo root: ${repoRootResult.message}`));
+      reply.notice(noRepositoryText(repoRootResult));
     }
     return;
   }
@@ -17934,7 +17938,7 @@ async function evaluateSession(input, kind, reply, readSeat) {
   const repoRootResult = getRepoRoot(process.cwd());
   if (!repoRootResult.ok) {
     if (firstNoRepoNoticeThisSession(process.cwd(), input.session_id)) {
-      reply.notice(localFaultText(`Could not find git repo root: ${repoRootResult.message}`));
+      reply.notice(noRepositoryText(repoRootResult));
     }
     return;
   }
@@ -18110,14 +18114,14 @@ async function runStop() {
 }
 
 // dist/resolve-engagement.js
-import { existsSync as existsSync5, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
 import { join as join8, sep as sep2 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function defaultRegistryPath() {
   return join8(homedir4(), ".halfcycle", "registry.json");
 }
 function readRegistry(registryPath = defaultRegistryPath()) {
-  if (!existsSync5(registryPath))
+  if (!existsSync6(registryPath))
     return {};
   try {
     const parsed = JSON.parse(readFileSync8(registryPath, "utf-8"));
@@ -18407,7 +18411,7 @@ async function refreshCredentialToken(opts) {
   return { token: refreshed.token };
 }
 var CHECKED_SOURCES = /* @__PURE__ */ new Set(["startup", "resume"]);
-var CONNECTED_SENTENCE = "Halfcycle connected.";
+var CONNECTED_SENTENCE = `Halfcycle's sign-in works and its service answered. If Halfcycle's tools are missing, turn on ${MCP_SERVER_KEY} in /mcp; if /mcp does not list it, run "claude mcp reset-project-choices" in this folder and restart Claude Code.`;
 var INITIALIZE_BODY = JSON.stringify({ jsonrpc: "2.0", id: 1, method: "initialize", params: {} });
 function registeredMcpUrl(projectRoot) {
   let parsed;
@@ -18522,8 +18526,11 @@ async function runRefreshCredential(opts) {
       const remedySaid = parts.some(namesTheSignInCommand);
       parts.push(noCoverageStatement(readNeverConfiguredReason(), remedySaid));
     }
-    for (const said of renewalSaid)
+    for (const said of renewalSaid) {
+      if (namesTheSignInCommand(said) && parts.some(namesTheSignInCommand))
+        continue;
       parts.push(said.trimEnd());
+    }
     return parts.length === 0 ? "" : `${nonBlockingReply("SessionStart", parts.join("\n"))}
 `;
   } catch (err) {
@@ -18541,7 +18548,7 @@ async function runRefreshCredential(opts) {
 import { fileURLToPath } from "node:url";
 
 // dist/capture.js
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync6 } from "node:fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync7 } from "node:fs";
 import { dirname as dirname5 } from "node:path";
 function runCapture(provider, endpoint, opts = {}) {
   const repoRoot = opts.repoRoot ?? process.cwd();

package/dist/cli.js

@@ -1566,6 +1566,14 @@ function readRootCommit(targetRepoRoot) {
 function isGitWorkTree(targetRepoRoot) {
   return git(targetRepoRoot, ["rev-parse", "--is-inside-work-tree"]) === "true";
 }
+function gitIsInstalled() {
+  try {
+    execFileSync("git", ["--version"], { stdio: "ignore", env: gitEnvForNamedRepo() });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function readRemote(targetRepoRoot) {
   return git(targetRepoRoot, ["remote", "get-url", "origin"]);
 }
@@ -2143,6 +2151,11 @@ function sha256OfWhatThisVersionWrites(commands) {
   fromFile(CAPTURED_INDEX_REL, capturedIndexScaffold());
   return out;
 }
+function bytesAreOurs(path, bytes, recorded, writeSet) {
+  const hash = sha256Hex(bytes);
+  const recordedHash = recorded !== void 0 && "sha256" in recorded ? recorded.sha256 : void 0;
+  return hash === recordedHash || hash === writeSet.generatedSha256.get(path);
+}
 function readPreviousManifest(targetRepo) {
   try {
     return parseManifest(readFileSync5(join5(targetRepo, INSTALL_MANIFEST_REL), "utf-8"));
@@ -2291,7 +2304,7 @@ function readPluginManifest() {
   const raw = readFileSync5(manifestPath, "utf-8");
   return JSON.parse(raw);
 }
-function copyManifestCommands(manifest, targetRepo, report, draft) {
+function copyManifestCommands(manifest, targetRepo, report, draft, writeSet) {
   for (const cmd of manifest.commands ?? []) {
     const srcFile = join5(BUNDLE_ROOT, ".claude-plugin", cmd.path);
     if (!existsSync3(srcFile)) {
@@ -2300,8 +2313,11 @@ function copyManifestCommands(manifest, targetRepo, report, draft) {
     const rel = commandStubRel(cmd.name);
     const destFile = join5(targetRepo, rel);
     const content = readFileSync5(srcFile, "utf-8");
-    const outcome = writeCollisionSafe(destFile, targetRepo, content);
+    const recorded = draft.files.get(rel);
+    const { outcome, replacedExisting } = writeCollisionSafe(destFile, targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
     record(report, outcome, rel);
+    if (replacedExisting)
+      report.replacedPaths.push(rel);
     noteFile(draft, targetRepo, rel, outcome);
   }
 }
@@ -2316,18 +2332,23 @@ function writeAllowlisted(targetAbsPath, targetRepoRoot, content, writtenPaths)
   writeFileSync5(targetAbsPath, content, "utf-8");
   writtenPaths.push(rel);
 }
-function writeCollisionSafe(targetAbsPath, targetRepoRoot, content) {
+function writeCollisionSafe(targetAbsPath, targetRepoRoot, content, isOurs) {
   const rel = relative(targetRepoRoot, targetAbsPath).replace(/\\/g, "/");
   if (!isAllowlisted(rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
+  let replacedExisting = false;
   if (existsSync3(targetAbsPath)) {
-    const current = readFileSync5(targetAbsPath, "utf-8");
-    return current === content ? "skipped" : "collided";
+    const current = readFileSync5(targetAbsPath);
+    if (current.toString("utf-8") === content)
+      return { outcome: "skipped", replacedExisting: false };
+    if (!isOurs(current))
+      return { outcome: "collided", replacedExisting: false };
+    replacedExisting = true;
   }
   mkdirSync5(dirname3(targetAbsPath), { recursive: true });
   writeFileSync5(targetAbsPath, content, "utf-8");
-  return "written";
+  return { outcome: "written", replacedExisting };
 }
 var INSTALLER_OWNED_DIR = ".halfcycle/";
 function writeOwned(targetAbsPath, targetRepoRoot, content) {
@@ -3003,7 +3024,7 @@ async function install(options) {
   const writeSet = closedWriteSet();
   const draft = startManifest(readPreviousManifest(targetRepo), (path) => writeSet.files.has(path), (path) => writeSet.dirs.has(path));
   const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync3(join5(targetRepo, dir))));
-  copyManifestCommands(manifest, targetRepo, report, draft);
+  copyManifestCommands(manifest, targetRepo, report, draft, writeSet);
   const vendoredBinSrc = resolveVendoredBinary();
   const vendoredBinDest = join5(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs");
   const vendoredOutcome = recordOwned(report, vendoredBinDest, targetRepo, readFileSync5(vendoredBinSrc, "utf-8"), VENDORED_BIN_REL);
@@ -3329,8 +3350,8 @@ var SignInRefused = class extends Error {
   }
 };
 var SIGN_IN_TIMED_OUT = "timed-out";
-var SIGN_IN_TIMEOUT_MESSAGE = "Sign-in timed out: the Halfcycle service stopped answering while this terminal was waiting for the browser. Nothing was created. Check your connection and run the command again.";
-var SIGN_IN_NON_INTERACTIVE_MESSAGE = "Halfcycle needs a signed-in account and this looks like a non-interactive run (CI is set), so there is no browser to sign in with. Set HALFCYCLE_TOKEN in the environment to a Halfcycle credential and run this again. Nothing was created.";
+var SIGN_IN_TIMEOUT_MESSAGE = "Sign-in timed out: the Halfcycle service stopped answering while this terminal was waiting for the browser. Check your connection and run the command again.";
+var SIGN_IN_NON_INTERACTIVE_MESSAGE = "Halfcycle needs a signed-in account and this looks like a non-interactive run (CI is set), so there is no browser to sign in with. Set HALFCYCLE_TOKEN in the environment to a Halfcycle credential and run this again.";
 var DEADLINE_SLACK_INTERVALS = 1;
 var STILL_WAITING_MS = 15e3;
 var DEFAULT_SIGN_IN_REASON = "set up this project";
@@ -3425,6 +3446,9 @@ function isNonInteractive(env = process.env) {
   const ci = (env["CI"] ?? "").trim().toLowerCase();
   return ci !== "" && ci !== "0" && ci !== "false";
 }
+function isInteractiveRun(env = process.env) {
+  return process.stdin.isTTY === true && !isNonInteractive(env);
+}
 async function startDeviceAuth(serviceUrl) {
   const url = `${serviceUrl.replace(/\/+$/, "")}/auth/device/start`;
   let res;
@@ -3435,16 +3459,16 @@ async function startDeviceAuth(serviceUrl) {
       body: "{}"
     });
   } catch (err) {
-    throw new SignInRefused(SIGN_IN_TIMED_OUT, `Could not reach the Halfcycle service at ${url} to start a sign-in: ${err instanceof Error ? err.message : String(err)}. Nothing was created.`);
+    throw new SignInRefused(SIGN_IN_TIMED_OUT, `Could not reach the Halfcycle service at ${url} to start a sign-in: ${err instanceof Error ? err.message : String(err)}.`);
   }
   const body = await res.json().catch(() => null);
   if (res.status !== 201) {
     const refusal = tryRefusal(body);
-    throw new SignInRefused(refusal?.status ?? String(res.status), refusal?.message ?? `Sign-in could not be started: ${url} answered ${res.status}. Nothing was created.`);
+    throw new SignInRefused(refusal?.status ?? String(res.status), refusal?.message ?? `Sign-in could not be started: ${url} answered ${res.status}.`);
   }
   const parsed = deviceAuthStartResponseSchema.safeParse(body);
   if (!parsed.success) {
-    throw new SignInRefused(SIGN_IN_TIMED_OUT, `The Halfcycle service at ${url} answered a sign-in start this client cannot read. Either that service is older than this installer, or the address is not a Halfcycle service. Nothing was created.`);
+    throw new SignInRefused(SIGN_IN_TIMED_OUT, `The Halfcycle service at ${url} answered a sign-in start this client cannot read. Either that service is older than this installer, or the address is not a Halfcycle service.`);
   }
   return parsed.data;
 }
@@ -3709,7 +3733,7 @@ async function createEngagementForProject(baseUrl, projectId, credential, derive
   const body = { derivedName };
   return requestEngagementValues("PUT", `${baseUrl.replace(/\/+$/, "")}/engagements/by-project/${encodeURIComponent(projectId)}`, body, credential, {
     action: "Project setup",
-    nothingHappened: "This folder was not set up",
+    nothingHappened: "Halfcycle did not finish setting up this folder",
     route: "PUT /engagements/by-project/:projectId",
     // FALSE on this call, and only this one: the folder's id is already on
     // disk by the time this request is sent. See CallShape.alsoNothingWritten.
@@ -4159,9 +4183,6 @@ function accountLabel(identity, storedAccountId, verbose2 = false, confirmed = t
     return `account ${accountId} (no email on record for it)`;
   return "the account this credential belongs to, which this service did not name";
 }
-function isInteractiveRun(env = process.env) {
-  return process.stdin.isTTY === true && !isNonInteractive(env);
-}
 function onlyDate(iso) {
   if (iso === void 0)
     return void 0;
@@ -4232,7 +4253,7 @@ function armScript(credential, act, label, plainLabel, home) {
         noTerminalNote: "",
         switchOpening: `[halfcycle] Signing you in through your browser \u2014 this install will use that account instead.
 `,
-        stopRemedy: `Stopped before anything was created \u2014 nothing was created and nothing was written. HALFCYCLE_TOKEN in this environment is the credential for ${plainLabel}, and it takes precedence over any saved sign-in \u2014 so unset it, or set it to your own account's credential, before running this again.`,
+        stopRemedy: `Stopped before anything was set up. HALFCYCLE_TOKEN in this environment is the credential for ${plainLabel}, and it takes precedence over any saved sign-in \u2014 so unset it, or set it to your own account's credential, before running this again.`,
         // The switch is real for THIS run (the new credential is what gets used) and it
         // does not persist: `obtainCredential` reads the variable first, so the next run
         // is the same variable again. Said here rather than discovered tomorrow.
@@ -4258,7 +4279,7 @@ function armScript(credential, act, label, plainLabel, home) {
 `,
         switchOpening: `[halfcycle] Forgetting this machine's saved sign-in and signing you in through your browser.
 `,
-        stopRemedy: `Stopped before anything was created \u2014 nothing was created and nothing was written. This machine's saved sign-in is for ${plainLabel}. Run this again and answer "s" to sign in as a different account, or remove ${accountStorePath(home)} to be asked for a sign-in next time.`,
+        stopRemedy: `Stopped before anything was set up. This machine's saved sign-in is for ${plainLabel}. Run this again and answer "s" to sign in as a different account, or remove ${accountStorePath(home)} to be asked for a sign-in next time.`,
         afterSwitch: ""
       };
     }
@@ -4415,6 +4436,7 @@ async function joinPinnedEngagement(serviceUrl, engagementId, targetRepo, deps =
 import { spawnSync } from "node:child_process";
 import { existsSync as existsSync4, readFileSync as readFileSync6, realpathSync } from "node:fs";
 import { delimiter, dirname as dirname4, join as join6 } from "node:path";
+var KEPT_FOLDER_ID_LINE = 'Nothing on the Halfcycle service needs undoing, and this folder keeps its project id, so running "npx halfcycle" again picks up where it left off.';
 var PreCreateRefused = class extends Error {
   constructor(message) {
     super(message);
@@ -4497,18 +4519,22 @@ function claimFolderId(targetRepo) {
   } catch {
     throw new PreCreateRefused(`cannot write to ${targetRepo} \u2014 run "npx halfcycle" in a folder you can write to.`);
   }
-  const file = join6(targetRepo, PROJECT_IDENTITY_REL);
+  const folderId = readFolderId(targetRepo);
+  if (folderId === void 0) {
+    throw new PreCreateRefused(`${join6(targetRepo, PROJECT_IDENTITY_REL)} could not be read as a Halfcycle project file \u2014 delete the .halfcycle folder in ${targetRepo} and run "npx halfcycle" again to start a new project here.`);
+  }
+  return folderId;
+}
+function readFolderId(targetRepo) {
   let folderId;
   try {
-    folderId = JSON.parse(readFileSync6(file, "utf-8"))?.projectId;
+    const text = readFileSync6(join6(targetRepo, PROJECT_IDENTITY_REL), "utf-8");
+    folderId = JSON.parse(text)?.projectId;
   } catch {
-    folderId = void 0;
+    return void 0;
   }
   const parsed = projectIdSchema.safeParse(folderId);
-  if (!parsed.success) {
-    throw new PreCreateRefused(`${file} could not be read as a Halfcycle project file \u2014 delete the .halfcycle folder in ${targetRepo} and run "npx halfcycle" again to start a new project here.`);
-  }
-  return parsed.data;
+  return parsed.success ? parsed.data : void 0;
 }
 function checkSettingsParse(targetRepo) {
   try {
@@ -6111,16 +6137,15 @@ function removeInstalledFile(targetRepo, path, entry, writeSet, lists, name) {
     return;
   }
   if (!writeSet.ownedDirs.has(path.slice(0, path.lastIndexOf("/")))) {
-    let hash;
+    let bytes;
     try {
-      hash = sha256Hex(readFileSync9(abs));
+      bytes = readFileSync9(abs);
     } catch {
       name(lists.failed, path, path);
       return;
     }
-    const recordedHash = entry !== void 0 && "sha256" in entry ? entry.sha256 : void 0;
-    if (hash !== recordedHash && hash !== writeSet.generatedSha256.get(path)) {
-      name(recordedHash !== void 0 ? lists.kept : lists.leftAlone, path, path);
+    if (!bytesAreOurs(path, bytes, entry, writeSet)) {
+      name(entry !== void 0 && "sha256" in entry ? lists.kept : lists.leftAlone, path, path);
       return;
     }
   }
@@ -6732,7 +6757,8 @@ ${PROJECT_RESET_LINE}
         process.stdout.write(`[halfcycle] Commit the files Halfcycle set up here, including ${BUNDLE_PIN_REL} and ${PROJECT_IDENTITY_REL}, so every copy of this project joins it and runs the same checks.
 `);
       } else if (credential) {
-        process.stdout.write(`[halfcycle] This folder is not a git repository. Halfcycle's checks compare against your git history, so run "git init" here to get checks on every edit.
+        process.stdout.write(process.platform !== "win32" && !gitIsInstalled() ? `[halfcycle] Halfcycle needs Git, and it is not installed on this machine \u2014 get it from https://git-scm.com/downloads, then run "git init" here to get checks on every edit.
+` : `[halfcycle] This folder is not a git repository. Halfcycle's checks compare against your git history, so run "git init" here to get checks on every edit.
 `);
       }
       if (credential) {
@@ -6759,22 +6785,23 @@ ${PROJECT_RESET_LINE}
 `);
       process.exit(0);
     } catch (err) {
-      if (err instanceof SignInRefused || err instanceof PreCreateRefused || err instanceof SettingsParseRefused) {
-        process.stderr.write(`halfcycle: ${err.message}
-`);
+      const stop = (message) => {
+        const kept = readFolderId(targetRepo) !== void 0 ? `${KEPT_FOLDER_ID_LINE}
+` : "";
+        process.stderr.write(`${message}
+${kept}`);
         process.exit(1);
+      };
+      if (err instanceof SignInRefused || err instanceof PreCreateRefused || err instanceof SettingsParseRefused) {
+        stop(`halfcycle: ${err.message}`);
         return;
       }
       const fsCode = typeof err === "object" && err !== null && "code" in err ? String(err.code) : void 0;
       if (fsCode !== void 0) {
-        process.stderr.write(`halfcycle: could not write to ${targetRepo} \u2014 check that you can write to this folder and run "npx halfcycle" again.
-`);
-        process.exit(1);
+        stop(`halfcycle: could not write to ${targetRepo} \u2014 check that you can write to this folder and run "npx halfcycle" again.`);
         return;
       }
-      process.stderr.write(`halfcycle install failed: ${err instanceof Error ? err.message : String(err)}
-`);
-      process.exit(1);
+      stop(`halfcycle install failed: ${err instanceof Error ? err.message : String(err)}`);
     }
     return;
   }