halfcycle 0.4.1 → 0.4.3

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "halfcycle",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "Halfcycle Method bundle — resolution-stub slash commands, remote method-delivery registration, and governance-hook wiring for a Halfcycle engagement repo. It ships NO worker role files: a project's roles are authored from that project's own recorded decisions at orchestration kickoff (FX-2, W3-F-27).",
   "commands": [
     {

package/README.md

@@ -165,7 +165,7 @@ Nothing you already had is changed. Existing settings are preserved, and a name
 ## Requirements
 
 - Claude Code **2.1.118+**
-- Node 20+
+- Node 18+
 - A git repository
 - On Windows, in PowerShell, use `npx.cmd` instead of `npx` (PowerShell's default settings block the `npx` script; `npx.cmd` always works, with nothing to change).
 

package/bin/bin.bundle.mjs

@@ -15376,6 +15376,9 @@ function infraWarningText() {
 function localFaultText(message) {
   return `[Halfcycle] WARNING: Local fault \u2014 ${message}. The guard service was not contacted. Session continues (fail-open).`;
 }
+function noRepositoryText(failure) {
+  return failure.gitMissing ? "[Halfcycle] WARNING: Git is not installed on this machine, and Halfcycle's checks need it, so nothing will be checked in this session. Install Git, then start a new session." : localFaultText(`Could not find git repo root: ${failure.message}`);
+}
 function contractFaultText(message) {
   return `[Halfcycle] WARNING: Guard response could not be understood \u2014 ${message}
 This is not a service outage: the guard service answered. The suspect is this repository's own installed halfcycle runner, which is out of date with what the service now sends. Update it: run "npx halfcycle" in this repository, then retry. Session continues (fail-open).`;
@@ -15711,7 +15714,7 @@ async function attempt(url2, token, request, fetchFn, retry) {
 
 // dist/git.js
 import { spawnSync } from "node:child_process";
-import { readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { relative } from "node:path";
 var COLOR_AWARE_SUBCOMMANDS = /* @__PURE__ */ new Set(["diff", "show", "log"]);
 function git(args2, cwd, timeoutMs) {
@@ -15722,7 +15725,8 @@ function git(args2, cwd, timeoutMs) {
     ...timeoutMs === void 0 ? {} : { timeout: timeoutMs }
   });
   if (result.error) {
-    return { ok: false, message: `git error: ${result.error.message}` };
+    const missing = result.error.code === "ENOENT" && existsSync(cwd);
+    return { ok: false, message: `git error: ${result.error.message}`, ...missing ? { gitMissing: true } : {} };
   }
   if (result.status !== 0) {
     const stderr = result.stderr?.trim() ?? "";
@@ -16605,7 +16609,7 @@ function resolveWireFields(lines, decls) {
 }
 
 // dist/fixtures-manifest.js
-import { existsSync, mkdirSync, readFileSync as readFileSync3, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync3, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join as join2 } from "node:path";
 function manifestPath(repoRoot) {
   return join2(repoRoot, "test", "fixtures", "captured", "manifest.json");
@@ -16644,7 +16648,7 @@ function upsertManifest(repoRoot, entry) {
 }
 function removeFixtureIfExists(path) {
   try {
-    if (existsSync(path))
+    if (existsSync2(path))
       unlinkSync(path);
   } catch {
   }
@@ -17266,7 +17270,7 @@ function cleanRunSummary(verdict, scope) {
 }
 
 // dist/credential-store.js
-import { chmodSync, existsSync as existsSync2, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
+import { chmodSync, existsSync as existsSync3, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2, realpathSync } from "node:fs";
 import { homedir as homedir2, platform } from "node:os";
 import { dirname as dirname3, join as join5 } from "node:path";
 var REFRESHED_TOKEN_KEYS = ["HALFCYCLE_TOKEN", "GUARD_SERVICE_TOKEN"];
@@ -17275,7 +17279,7 @@ function composeEngagementEnvPath(engagementId, home) {
   return join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, ENGAGEMENT_ENV_FILENAME);
 }
 function hasNotThisAccountMarker(engagementId, home) {
-  return existsSync2(join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, NOT_THIS_ACCOUNT_MARKER_FILENAME));
+  return existsSync3(join5(home ?? homedir2(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, NOT_THIS_ACCOUNT_MARKER_FILENAME));
 }
 function readAccountCredential(controlOrigin, home) {
   let raw;
@@ -17467,7 +17471,7 @@ async function evaluateWithRefresh(opts) {
 
 // dist/hooks/marker.js
 import { createHash } from "node:crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3, statSync } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3, statSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join6 } from "node:path";
 var MARKER_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -17496,7 +17500,7 @@ function dedupePath(repoRoot, sessionId) {
 }
 function readMarker(repoRoot, sessionId) {
   const path = markerPath(repoRoot, sessionId);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return null;
   try {
     return readFileSync6(path, "utf-8").trim() || null;
@@ -17507,17 +17511,22 @@ function readMarker(repoRoot, sessionId) {
 function deleteMarker(repoRoot, sessionId) {
   for (const path of [markerPath(repoRoot, sessionId), dedupePath(repoRoot, sessionId)]) {
     try {
-      if (existsSync3(path))
+      if (existsSync4(path))
         unlinkSync3(path);
     } catch {
     }
   }
 }
-var NO_REPO_NOTICE_SUFFIX = ".norepo";
-function firstNoRepoNoticeThisSession(folder, sessionId) {
+var SESSION_NOTICE_SUFFIX = {
+  "no-repository": ".norepo",
+  "credential-rejected": ".credential",
+  "credential-renewed-for-this-run": ".renewed"
+};
+function firstNoticeThisSession(notice, folder, sessionId) {
   if (!sessionId)
     return true;
-  const path = join6(markerDir(), `${MARKER_PREFIX}${repoHash(folder)}-${sessionId}${NO_REPO_NOTICE_SUFFIX}`);
+  const suffix = SESSION_NOTICE_SUFFIX[notice];
+  const path = join6(markerDir(), `${MARKER_PREFIX}${repoHash(folder)}-${sessionId}${suffix}`);
   try {
     writeFileSync3(path, "", { encoding: "utf-8", flag: "wx" });
     return true;
@@ -17525,9 +17534,18 @@ function firstNoRepoNoticeThisSession(folder, sessionId) {
     return err.code !== "EEXIST";
   }
 }
+function warnOnceThisSession(notice, folder, sessionId) {
+  return (message) => {
+    if (firstNoticeThisSession(notice, folder, sessionId))
+      process.stderr.write(message);
+  };
+}
+function firstNoRepoNoticeThisSession(folder, sessionId) {
+  return firstNoticeThisSession("no-repository", folder, sessionId);
+}
 function readDedupe(repoRoot, sessionId) {
   const path = dedupePath(repoRoot, sessionId);
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync6(path, "utf-8"));
@@ -17599,7 +17617,7 @@ function orphanSweep(repoRoot, refKnown, keepSessionId, now = Date.now()) {
 }
 
 // dist/seat-configuration.js
-import { existsSync as existsSync4, readFileSync as readFileSync7, realpathSync as realpathSync2 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync7, realpathSync as realpathSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join7, relative as relative3, resolve } from "node:path";
 function gatherSeatConfiguration(repoRoot, read = readSeatConfiguration) {
@@ -17708,7 +17726,7 @@ function readPathStates(projectDir, repoRoot) {
   const status = getWiringStatus(HALFCYCLE_HOOK_WIRING_PATHS, projectDir);
   if (!status.ok)
     return unknown2();
-  const mapped = mapWiringStatus(status.value, prefix, HALFCYCLE_HOOK_WIRING_PATHS, (rel) => existsSync4(join7(projectDir, rel)));
+  const mapped = mapWiringStatus(status.value, prefix, HALFCYCLE_HOOK_WIRING_PATHS, (rel) => existsSync5(join7(projectDir, rel)));
   return mapped ?? unknown2();
 }
 function mapWiringStatus(output, prefix, paths, onDisk) {
@@ -17774,7 +17792,7 @@ async function evaluateEdit(reply, readSeat) {
   const repoRootResult = getRepoRoot(process.cwd());
   if (!repoRootResult.ok) {
     if (firstNoRepoNoticeThisSession(process.cwd(), input.session_id)) {
-      reply.notice(localFaultText(`Could not find git repo root: ${repoRootResult.message}`));
+      reply.notice(noRepositoryText(repoRootResult));
     }
     return;
   }
@@ -17801,7 +17819,8 @@ async function evaluateEdit(reply, readSeat) {
     guardServiceUrl,
     token: guardServiceToken,
     engagementId: guardEngagementId,
-    request: buildEvaluationRequest(guardEngagementId, changeSet, context, seatConfiguration)
+    request: buildEvaluationRequest(guardEngagementId, changeSet, context, seatConfiguration),
+    warn: warnOnceThisSession("credential-renewed-for-this-run", repoRoot, input.session_id)
   });
   const clientResult = evaluation.result;
   if (!clientResult.ok) {
@@ -17816,6 +17835,8 @@ async function evaluateEdit(reply, readSeat) {
       credentialRefused: failure.kind === "credential"
     });
     if (failure.kind === "credential") {
+      if (!firstNoticeThisSession("credential-rejected", repoRoot, input.session_id))
+        return;
       emitCredentialRejected(
         failure.statusCode,
         failure.message,
@@ -17934,7 +17955,7 @@ async function evaluateSession(input, kind, reply, readSeat) {
   const repoRootResult = getRepoRoot(process.cwd());
   if (!repoRootResult.ok) {
     if (firstNoRepoNoticeThisSession(process.cwd(), input.session_id)) {
-      reply.notice(localFaultText(`Could not find git repo root: ${repoRootResult.message}`));
+      reply.notice(noRepositoryText(repoRootResult));
     }
     return;
   }
@@ -17977,7 +17998,8 @@ async function evaluateSession(input, kind, reply, readSeat) {
     guardServiceUrl,
     token: guardServiceToken,
     engagementId: guardEngagementId,
-    request: buildEvaluationRequest(guardEngagementId, changeSet, context, seatConfiguration)
+    request: buildEvaluationRequest(guardEngagementId, changeSet, context, seatConfiguration),
+    warn: warnOnceThisSession("credential-renewed-for-this-run", repoRoot, sessionId)
   });
   const clientResult = evaluation.result;
   if (!clientResult.ok) {
@@ -17993,6 +18015,8 @@ async function evaluateSession(input, kind, reply, readSeat) {
       credentialRefused: failure.kind === "credential"
     });
     if (failure.kind === "credential") {
+      if (!firstNoticeThisSession("credential-rejected", repoRoot, sessionId))
+        return;
       emitCredentialRejected(
         failure.statusCode,
         failure.message,
@@ -18110,14 +18134,14 @@ async function runStop() {
 }
 
 // dist/resolve-engagement.js
-import { existsSync as existsSync5, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync8, realpathSync as realpathSync3 } from "node:fs";
 import { join as join8, sep as sep2 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function defaultRegistryPath() {
   return join8(homedir4(), ".halfcycle", "registry.json");
 }
 function readRegistry(registryPath = defaultRegistryPath()) {
-  if (!existsSync5(registryPath))
+  if (!existsSync6(registryPath))
     return {};
   try {
     const parsed = JSON.parse(readFileSync8(registryPath, "utf-8"));
@@ -18407,7 +18431,7 @@ async function refreshCredentialToken(opts) {
   return { token: refreshed.token };
 }
 var CHECKED_SOURCES = /* @__PURE__ */ new Set(["startup", "resume"]);
-var CONNECTED_SENTENCE = "Halfcycle connected.";
+var CONNECTED_SENTENCE = `Halfcycle's sign-in works and its service answered. If its tools are missing, turn on ${MCP_SERVER_KEY} in /mcp; if it is not listed, run "claude mcp reset-project-choices" here and restart Claude Code.`;
 var INITIALIZE_BODY = JSON.stringify({ jsonrpc: "2.0", id: 1, method: "initialize", params: {} });
 function registeredMcpUrl(projectRoot) {
   let parsed;
@@ -18522,8 +18546,11 @@ async function runRefreshCredential(opts) {
       const remedySaid = parts.some(namesTheSignInCommand);
       parts.push(noCoverageStatement(readNeverConfiguredReason(), remedySaid));
     }
-    for (const said of renewalSaid)
+    for (const said of renewalSaid) {
+      if (namesTheSignInCommand(said) && parts.some(namesTheSignInCommand))
+        continue;
       parts.push(said.trimEnd());
+    }
     return parts.length === 0 ? "" : `${nonBlockingReply("SessionStart", parts.join("\n"))}
 `;
   } catch (err) {
@@ -18541,7 +18568,7 @@ async function runRefreshCredential(opts) {
 import { fileURLToPath } from "node:url";
 
 // dist/capture.js
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync6 } from "node:fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync7 } from "node:fs";
 import { dirname as dirname5 } from "node:path";
 function runCapture(provider, endpoint, opts = {}) {
   const repoRoot = opts.repoRoot ?? process.cwd();

package/dist/claude-version-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-version-probe.d.ts","sourceRoot":"","sources":["../src/claude-version-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH;0DAC0D;AAC1D,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CAC7C,KACE,MAAM,CAAC;AAEZ,MAAM,WAAW,sBAAsB;IACrC,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,sBAA2B,GAAG,MAAM,GAAG,SAAS,CAqB/G;AAMD;kCACkC;AAClC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAK1E,CAAC;AAaF,MAAM,WAAW,uBAAuB;IACtC,iCAAiC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C;sDACkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,GAAE,uBAA4B,GAAG,mBAAmB,GAAG,SAAS,CAwBhH"}
+{"version":3,"file":"claude-version-probe.d.ts","sourceRoot":"","sources":["../src/claude-version-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH;0DAC0D;AAC1D,MAAM,MAAM,iBAAiB,GAAG,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CAC7C,KACE,MAAM,CAAC;AAEZ,MAAM,WAAW,sBAAsB;IACrC,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,sBAA2B,GAAG,MAAM,GAAG,SAAS,CAqB/G;AAMD;kCACkC;AAClC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAK1E,CAAC;AAyBF,MAAM,WAAW,uBAAuB;IACtC,iCAAiC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C;sDACkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,GAAE,uBAA4B,GAAG,mBAAmB,GAAG,SAAS,CAwBhH"}