halfcycle 0.4.1 → 0.4.3

package/dist/confirm-identity.d.ts

@@ -69,15 +69,17 @@
  * silence back permanently and for every future question this CLI asks.
  *
  * So what this population gets instead is a record that does not live in scrollback.
- * The account id settled on here is RETURNED to the caller, which writes it into the
- * committed `.halfcycle/bundle.json` (`writeBundlePin` in `install.ts`) — the id and
- * never the email, because that file is committed into the client's repository. A
- * wrong-identity install is then discoverable afterwards, from the repository, by the
- * person whose repository it is. Printing is not recording.
+ * The account id settled on here is RETURNED to the caller, which on a CREATE writes it
+ * into the committed `.halfcycle/bundle.json` as `createdByAccountId` (`writeBundlePin`
+ * in `install.ts`; only the create writes it — E1, #1598) — the id and never the email,
+ * because that file is committed into the client's repository. A wrong-identity install
+ * is then discoverable afterwards, from the repository, by the person whose repository
+ * it is. Printing is not recording.
  *
- * The measurement is a TTY plus the absence of a CI marker (`isNonInteractive`, whose
- * one home is `device-signin.ts` — the same question the browser handoff already asks).
- * It is never inferred from anything else.
+ * The measurement is `isInteractiveRun` (a TTY plus the absence of a CI marker), whose
+ * one home is `device-signin.ts`. It is never inferred from anything else. (The
+ * browser handoff does NOT ask it: that refuses only a CI run, since the person
+ * finishes in the browser, not at this terminal.)
  *
  * ---------------------------------------------------------------------------
  * ASKING IS BEST-EFFORT ABOUT THE LABEL AND NEVER ABOUT THE GATE. `GET /account` may be
@@ -131,8 +133,9 @@ export interface ConfirmIdentityDeps extends ResolveOptions {
      * every run and it is the wrong thing to put beside the value the reader is being
      * asked to check: a person cannot verify a uuid, and thirty-eight characters of one
      * pushed the email they CAN verify leftward into a longer line. It is not lost —
-     * `.halfcycle/bundle.json` records the account this install acted as, which is the
-     * copy a support conversation can actually be pointed at once the terminal is gone.
+     * `.halfcycle/bundle.json` records the account that created the project, which is
+     * the copy a support conversation can be pointed at once the terminal is gone.
+     * The account a later run acted as is not recorded there (E1, #1598).
      */
     verbose?: boolean;
     /**
@@ -227,9 +230,10 @@ export declare function describeAccount(serviceUrl: string, credential: string,
  * and a human needs the email. The first half of that is true and the conclusion was
  * wrong: this label's reader is a person deciding whether a project should belong to
  * this account, they cannot verify a uuid, and a uuid printed beside the one value they
- * CAN verify buries it. The id has a better home already — `writeBundlePin` records it
- * in `.halfcycle/bundle.json`, which outlives the scrollback — and `--verbose` puts it
- * back on screen for the run that wants it.
+ * CAN verify buries it. The creating account's id has a better home already —
+ * `writeBundlePin` records it in `.halfcycle/bundle.json`, which outlives the
+ * scrollback — and `--verbose` puts this run's id back on screen for the run that
+ * wants it.
  *
  * WITH NO EMAIL the id is all there is, and it is printed: an unnamed account named by
  * its row is better than an unnamed account.
@@ -238,29 +242,20 @@ export declare function describeAccount(serviceUrl: string, credential: string,
  * signed in as'` is a true sentence about an unnamed account; `'unknown'` printed where
  * a name goes reads as a name.
  *
- * `confirmed` (onboarding fix wave T-16, #1567) is false only for the re-use arm's
- * offline report: `askAccount` was asked and got no response at all, so "no email on
- * record for it" would be a claim this run never actually confirmed, printed beside a
- * raw account id with nothing true to say about why there is no email. `false` takes
- * neither branch below and says plainly that this run could not confirm who signed in.
+ * THE CALLER DECIDES WHETHER TO PRINT AT ALL, not this function. `bin.ts`'s final
+ * report (E8, the wording batch, onboarding fix wave 2) only calls this when `GET
+ * /account` actually answered with an account — a network error, a timeout, a 5xx
+ * and a reached-but-unidentifiable answer (a 401/403) are all withheld there, rather
+ * than printed through a `confirmed` flag here (onboarding fix wave T-16, #1567's
+ * original shape, since removed: the flag's one caller was that same report line,
+ * and the line it produced — "this run could not reach the service to confirm who
+ * that is" — is now simply never printed, which is the more honest of the two). A
+ * `storedAccountId` with no `identity` can still reach the "no email" branch below
+ * through `confirm-identity.ts`'s OWN prompt line, a different surface with a
+ * different, still-true claim: a stored or environment credential's cached id,
+ * named while this run's own fresh identity read is still pending.
  */
-export declare function accountLabel(identity: AccountIdentity | undefined, storedAccountId: string | undefined, verbose?: boolean, confirmed?: boolean): string;
-/**
- * Whether this run has a human at a keyboard to ask — the ONE measurement this module
- * uses, so a caller outside `confirmActingIdentity` reads the same fact rather than
- * assuming one.
- *
- * A TTY plus the absence of a CI marker (`isNonInteractive`, whose one home is
- * `device-signin.ts` — the same question the browser handoff already asks). Never
- * inferred from anything else — see this module's own docblock. Walk 5 (2026-09-08)
- * found `identitySwitchRemedy` called with no measurement at all (an implicit "assume
- * interactive"), printing "answer \"s\" when asked" into a run that had, moments
- * earlier in the SAME output, already told the reader there was no terminal to ask at.
- * Exported so `identitySwitchRemedy`'s callers outside `confirmActingIdentity` compute
- * the same fact this function's own `interactive` local does, rather than a second,
- * possibly drifting copy of this expression.
- */
-export declare function isInteractiveRun(env?: NodeJS.ProcessEnv): boolean;
+export declare function accountLabel(identity: AccountIdentity | undefined, storedAccountId: string | undefined, verbose?: boolean): string;
 /**
  * Read one line from the terminal. Kept out of the decision so the decision is testable.
  * Also the Git for Windows offer's prompt (`pre-create-checks.ts`), so the terminal is
@@ -326,7 +321,7 @@ export declare function identitySwitchRemedy(home: string | undefined, interacti
  *
  * Returns the credential to use, which is a DIFFERENT one from the one passed in when
  * the person switched account, and which carries the ACCOUNT ID this run acts as so the
- * caller can record it on disk (`writeBundlePin`). Throws `SignInRefused` when they
+ * caller can record it on disk when it creates the project (`writeBundlePin`). Throws `SignInRefused` when they
  * stop, which the CLI already prints as a refusal rather than as a crash: nothing has
  * been created and nothing has been written at the point this is called, and that is
  * what makes stopping a real option rather than an apology.

package/dist/confirm-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confirm-identity.d.ts","sourceRoot":"","sources":["../src/confirm-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AAGH,OAAO,EAAmD,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAI1G,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKtG,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErE,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAeD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,aAAa,CAAC,CAiBxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAEtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,UAAQ,EACf,SAAS,UAAO,GACf,MAAM,CAaR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE9E;AAsCD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB/D;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAK7D;AAgKD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,CAO3F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,UAAU,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAuD7B"}
+{"version":3,"file":"confirm-identity.d.ts","sourceRoot":"","sources":["../src/confirm-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;AAGH,OAAO,EAAmD,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAI1G,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKtG,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErE,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAeD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,aAAa,CAAC,CAiBxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAEtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,UAAQ,GACd,MAAM,CASR;AAsCD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB/D;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAK7D;AAoKD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,CAO3F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,UAAU,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAsD7B"}

package/dist/create-engagement.d.ts

@@ -343,10 +343,12 @@ export declare function joinEngagement(baseUrl: string, engagementId: string, cr
  * A project that belongs to another account is a `CreateEngagementRefused` carrying
  * the declared not-this-account `reason`; telling it apart is `own-engagement.ts`'s.
  *
- * Its failure sentences say the FOLDER was not set up, never that no project was
- * created: an answer lost after control created the project is exactly the case this
- * route makes recoverable, so "nothing was created" could be false. A re-run gets
- * that project back.
+ * Its failure sentences say Halfcycle did not finish setting up the folder, never that
+ * no project was created: an answer lost after control created the project is exactly
+ * the case this route makes recoverable, so "nothing was created" could be false. Nor
+ * that the folder "was not set up" (FW-1): its id file is already on disk, and the
+ * walks read that sentence as false. A re-run gets that project back, which `bin.ts`
+ * says once after every stopped install (`KEPT_FOLDER_ID_LINE`).
  *
  * @param derivedName The guessed name (`deriveProjectName`), or `''` when there is none —
  *                    the field is required, and control names an empty one by default.

package/dist/create-engagement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-engagement.d.ts","sourceRoot":"","sources":["../src/create-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AAKH;;oCAEoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,6CAA6C;aAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;aAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;aAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;aACa,MAAM,EAAE,MAAM,GAAG,SAAS;;IAnB1C,6CAA6C;IAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;IAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;IAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;IACa,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM;IAMjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,WAAW,IAAI,OAAO,CAGzB;CACF;AA8ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAgB5B"}
+{"version":3,"file":"create-engagement.d.ts","sourceRoot":"","sources":["../src/create-engagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AAKH;;oCAEoC;AACpC,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,6CAA6C;aAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;aAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;aAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;aACa,MAAM,EAAE,MAAM,GAAG,SAAS;;IAnB1C,6CAA6C;IAC7B,MAAM,EAAE,MAAM;IAC9B,8DAA8D;IAC9C,aAAa,EAAE,MAAM;IACrC,+DAA+D;IAC/C,SAAS,EAAE,MAAM,GAAG,SAAS;IAC7C;;;;;;;;;;;;OAYG;IACa,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1C,OAAO,EAAE,MAAM;IAMjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,WAAW,IAAI,OAAO,CAGzB;CACF;AA8ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAgB5B"}

package/dist/device-signin.d.ts

@@ -39,7 +39,7 @@
  * ---------------------------------------------------------------------------
  * FOUR WAYS THIS ENDS, and each is a different sentence and a non-zero exit:
  *
- *   `declined`  — a human refused at the page. Nothing was created.
+ *   `declined`  — a human refused at the page.
  *   `expired`   — the code's window closed on CONTROL's clock before anyone acted.
  *   `unknown`   — the server is not waiting on this code (never minted, or spent).
  *   unreachable — the plane stopped answering mid-poll. This one is OURS to word,
@@ -95,6 +95,15 @@ export declare const SIGN_IN_TIMEOUT_MESSAGE: string;
  * burns the job's time and then reports something that reads like a platform
  * outage. It refuses immediately instead, and names the ONE thing a workflow can
  * actually do.
+ *
+ * "Non-interactive" here is a CI run (`isNonInteractive`), not `isInteractiveRun`: a
+ * piped stdin with no `CI` still gets the browser sign-in, because that is how an
+ * agent runs the first install (its shell has no terminal; the person at the screen
+ * finishes in the browser). Onboarding fix wave FW-1 tried gating this on
+ * `isInteractiveRun` and reverted it (FW-1a). The sentence says nothing about what
+ * was or was not created: on the create arm the folder id is already on disk, and
+ * `bin.ts` says the one true thing about that after every refusal
+ * (`KEPT_FOLDER_ID_LINE`).
  */
 export declare const SIGN_IN_NON_INTERACTIVE_MESSAGE: string;
 /** Everything this module touches that a test may need to hold still. */
@@ -274,8 +283,32 @@ export interface BrowserOpenAttempt {
  * unchanged.
  */
 export declare function openBrowser(url: string, env?: NodeJS.ProcessEnv, os?: string, spawnImpl?: typeof spawn): Promise<BrowserOpenAttempt>;
-/** True iff this run has no human at the keyboard. */
+/**
+ * True iff the environment marks this as a CI run — the browser sign-in's gate, and one
+ * half of `isInteractiveRun`.
+ */
 export declare function isNonInteractive(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Whether this run has a human at a keyboard to ask — THE ONE MEASUREMENT, read by
+ * every caller that needs to ASK a question: the identity confirmation
+ * (`confirm-identity.ts`) and the Git for Windows offer (`pre-create-checks.ts`).
+ *
+ * A TTY plus the absence of a CI marker (`isNonInteractive`). Never inferred from
+ * anything else. Walk 5 (2026-09-08) found `identitySwitchRemedy` called with no
+ * measurement at all (an implicit "assume interactive"), printing "answer \"s\" when
+ * asked" into a run that had, moments earlier in the SAME output, already told the
+ * reader there was no terminal to ask at.
+ *
+ * NOT the browser sign-in's gate. `signIn` asks nothing at the terminal — the person
+ * finishes in the browser — so it refuses only a CI run (`isNonInteractive`). An agent
+ * running the first install through its shell has no terminal on stdin, and its
+ * person signs in at the browser; gating `signIn` on this would refuse that install
+ * (onboarding fix wave FW-1a reverted exactly that).
+ *
+ * It lives here, beside `isNonInteractive`, so `confirm-identity.ts` (which imports
+ * this module) and `pre-create-checks.ts` read one definition, not two copies.
+ */
+export declare function isInteractiveRun(env?: NodeJS.ProcessEnv): boolean;
 /** `POST /auth/device/start` — mint a code. Throws `SignInRefused` on a refusal. */
 export declare function startDeviceAuth(serviceUrl: string): Promise<DeviceAuthStartResponse>;
 /**

package/dist/device-signin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-signin.d.ts","sourceRoot":"","sources":["../src/device-signin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAG3B;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAEpB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAGV,CAAC;AAE3B;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,QAGsC,CAAC;AAQnF,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACV;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;CAAE,CAUzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO9D;AAaD,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,EAAE,GAAE,MAAmB,EACvB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CA4E7B;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAG9E;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAsC1F;AAuDD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,uBAAuB,EAChC,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA6B7B;AAiBD,uCAAuC;AACvC,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,QAIF,CAAC;AAkHpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,MAAM,CAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,UAAU,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAClD,OAAO,CAAC,QAAQ,CAAC,CAiGnB"}
+{"version":3,"file":"device-signin.d.ts","sourceRoot":"","sources":["../src/device-signin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAG3B;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAEpB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAE6C,CAAC;AAElF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,QAGiB,CAAC;AAQ9D,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACV;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;CAAE,CAUzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO9D;AAaD,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,EAAE,GAAE,MAAmB,EACvB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CA4E7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAG9E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE9E;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAsC1F;AAuDD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,uBAAuB,EAChC,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA6B7B;AAiBD,uCAAuC;AACvC,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,QAIF,CAAC;AAkHpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,MAAM,CAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,UAAU,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAClD,OAAO,CAAC,QAAQ,CAAC,CA0GnB"}

package/dist/identity.d.ts

@@ -74,6 +74,13 @@ export declare function readRootCommit(targetRepoRoot: string): string | null;
  * AC8) — outside a repository there is nothing to commit them to.
  */
 export declare function isGitWorkTree(targetRepoRoot: string): boolean;
+/**
+ * Can this machine run `git` at all? Asked only once `isGitWorkTree` has said no,
+ * because `git()` above answers `null` for "not a repository" and for "no git" alike —
+ * and the advice differs: `git init` cannot help someone who has no Git (the macOS and
+ * Linux walks' B5, onboarding fix wave FW-1).
+ */
+export declare function gitIsInstalled(): boolean;
 /** Read the `origin` remote URL. */
 export declare function readRemote(targetRepoRoot: string): string | null;
 /**

package/dist/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,qBAAqB,QAGF,CAAC;AAEjC,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gEAAgE;IAChE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AA6BD,gFAAgF;AAChF,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAItD;AAqBD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMpE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,oCAAoC;AACpC,wBAAgB,UAAU,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKrE;AAED,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAyBvG;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAazG;AAYD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAiBtE"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,qBAAqB,QAGF,CAAC;AAEjC,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gEAAgE;IAChE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AA6BD,gFAAgF;AAChF,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAItD;AAqBD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMpE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAOxC;AAED,oCAAoC;AACpC,wBAAgB,UAAU,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKrE;AAED,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAyBvG;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAazG;AAYD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAiBtE"}

package/dist/index.d.ts

@@ -8,7 +8,7 @@
  *
  * INV-001: imports only from @halfcycle/core, @halfcycle/events, or Node builtins.
  */
-export { install, checkDrift, readBundlePin, ZONE_B_DIR } from './install.js';
+export { install, checkDrift, readBundlePin, pinCreatedByAccountId, ZONE_B_DIR } from './install.js';
 export type { InstallOptions, InstallResult, BundlePin, EngagementType, DeviceCredential } from './install.js';
 export { mintOrReadIdentity, readRootCommit, readRemote } from './identity.js';
 export type { ProjectIdentity } from './identity.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAyBhE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnG,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI1F,cAAc,kBAAkB,CAAC;AAKjC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrG,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAyBhE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnG,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI1F,cAAc,kBAAkB,CAAC;AAKjC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -1650,8 +1650,20 @@ function projectPageUrl(engagementId) {
 }
 
 // dist/merge-settings.js
+function isHalfcycleCommand(hook, halfcycleCommands) {
+  if (typeof hook !== "object" || hook === null)
+    return false;
+  const command = hook.command;
+  return typeof command === "string" && halfcycleCommands.has(command);
+}
 function isHalfcycleEntry(entry, halfcycleCommands) {
-  return entry.hooks.some((h) => halfcycleCommands.has(h.command));
+  return entry.hooks.some((h) => isHalfcycleCommand(h, halfcycleCommands));
+}
+function withoutHalfcycleCommands(entry, halfcycleCommands) {
+  if (!isHalfcycleEntry(entry, halfcycleCommands))
+    return entry;
+  const remaining = entry.hooks.filter((h) => !isHalfcycleCommand(h, halfcycleCommands));
+  return remaining.length > 0 ? { ...entry, hooks: remaining } : null;
 }
 function mergeSettings(existing, generated) {
   const merged = { ...existing };
@@ -1670,7 +1682,7 @@ function mergeSettings(existing, generated) {
   const mergedHooks = {};
   const events = /* @__PURE__ */ new Set([...Object.keys(existingHooks), ...Object.keys(generatedHooks)]);
   for (const event of events) {
-    const developerEntries = (existingHooks[event] ?? []).filter((entry) => !isHalfcycleEntry(entry, halfcycleCommands));
+    const developerEntries = (existingHooks[event] ?? []).flatMap((entry) => withoutHalfcycleCommands(entry, halfcycleCommands) ?? []);
     const halfcycleEntries = generatedHooks[event] ?? [];
     mergedHooks[event] = [...developerEntries, ...halfcycleEntries];
   }
@@ -1846,6 +1858,7 @@ function closedWriteSet() {
     ownedDirs,
     hookCommands: new Set(HALFCYCLE_HOOK_COMMANDS),
     denyRuleSha256: new Set([...DENY_PATTERNS, ...RETIRED_DENY_PATTERNS].map((rule) => sha256Hex(rule))),
+    settingsSchema: SETTINGS_SCHEMA,
     gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL]),
     gitattributesLines: /* @__PURE__ */ new Set([
       GITATTRIBUTES_HEADER,
@@ -1867,6 +1880,11 @@ function sha256OfWhatThisVersionWrites(commands) {
   fromFile(CAPTURED_INDEX_REL, capturedIndexScaffold());
   return out;
 }
+function bytesAreOurs(path, bytes, recorded, writeSet) {
+  const hash = sha256Hex(bytes);
+  const recordedHash = recorded !== void 0 && "sha256" in recorded ? recorded.sha256 : void 0;
+  return hash === recordedHash || hash === writeSet.generatedSha256.get(path);
+}
 function readPreviousManifest(targetRepo) {
   try {
     return parseManifest(readFileSync4(join5(targetRepo, INSTALL_MANIFEST_REL), "utf-8"));
@@ -2015,7 +2033,7 @@ function readPluginManifest() {
   const raw = readFileSync4(manifestPath, "utf-8");
   return JSON.parse(raw);
 }
-function copyManifestCommands(manifest, targetRepo, report, draft) {
+function copyManifestCommands(manifest, targetRepo, report, draft, writeSet) {
   for (const cmd of manifest.commands ?? []) {
     const srcFile = join5(BUNDLE_ROOT, ".claude-plugin", cmd.path);
     if (!existsSync3(srcFile)) {
@@ -2024,8 +2042,13 @@ function copyManifestCommands(manifest, targetRepo, report, draft) {
     const rel = commandStubRel(cmd.name);
     const destFile = join5(targetRepo, rel);
     const content = readFileSync4(srcFile, "utf-8");
-    const outcome = writeCollisionSafe(destFile, targetRepo, content);
+    const recorded = draft.files.get(rel);
+    const { outcome, replacedExisting } = writeCollisionSafe(destFile, targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
     record(report, outcome, rel);
+    if (replacedExisting)
+      report.replacedPaths.push(rel);
+    if (outcome === "collided" && recorded !== void 0)
+      report.editedCollidedPaths.push(rel);
     noteFile(draft, targetRepo, rel, outcome);
   }
 }
@@ -2040,18 +2063,23 @@ function writeAllowlisted(targetAbsPath, targetRepoRoot, content, writtenPaths)
   writeFileSync4(targetAbsPath, content, "utf-8");
   writtenPaths.push(rel);
 }
-function writeCollisionSafe(targetAbsPath, targetRepoRoot, content) {
+function writeCollisionSafe(targetAbsPath, targetRepoRoot, content, isOurs) {
   const rel = relative(targetRepoRoot, targetAbsPath).replace(/\\/g, "/");
   if (!isAllowlisted(rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
+  let replacedExisting = false;
   if (existsSync3(targetAbsPath)) {
-    const current = readFileSync4(targetAbsPath, "utf-8");
-    return current === content ? "skipped" : "collided";
+    const current = readFileSync4(targetAbsPath);
+    if (current.toString("utf-8") === content)
+      return { outcome: "skipped", replacedExisting: false };
+    if (!isOurs(current))
+      return { outcome: "collided", replacedExisting: false };
+    replacedExisting = true;
   }
   mkdirSync4(dirname3(targetAbsPath), { recursive: true });
   writeFileSync4(targetAbsPath, content, "utf-8");
-  return "written";
+  return { outcome: "written", replacedExisting };
 }
 var INSTALLER_OWNED_DIR = ".halfcycle/";
 function writeOwned(targetAbsPath, targetRepoRoot, content) {
@@ -2144,6 +2172,7 @@ function settingsParseRefusal(targetRepo, err) {
   }
   return `${file} could not be read as JSON${where} \u2014 fix it and run "npx halfcycle" again.`;
 }
+var SETTINGS_SCHEMA = "https://json.schemastore.org/claude-code-settings.json";
 function generateSettingsJson() {
   const hooks = {};
   for (const { event, matcher, timeout, command } of HALFCYCLE_HOOK_WIRING) {
@@ -2153,7 +2182,7 @@ function generateSettingsJson() {
     });
   }
   const settings = {
-    $schema: "https://json.schemastore.org/claude-code-settings.json",
+    $schema: SETTINGS_SCHEMA,
     permissions: {
       // deny ONLY. See DENY_PATTERNS — an allow list evaporates under bypass mode
       // and is the machine owner's grant to make, not ours.
@@ -2453,19 +2482,27 @@ function adoptBlockUnderHeader(before, header, claimable) {
   let underHeader = false;
   const lines = before.split("\n");
   for (const [i, line] of lines.entries()) {
-    if (line === header) {
-      if (i > 0 && lines[i - 1] === "")
-        claimed.push("");
+    const key = lineKey(line);
+    if (key === header) {
+      if (i > 0 && lineKey(lines[i - 1]) === "")
+        claimed.push(lines[i - 1]);
       claimed.push(line);
       underHeader = true;
-    } else if (line.trim() === "") {
+    } else if (key.trim() === "") {
       underHeader = false;
-    } else if (underHeader && claimable.has(line)) {
+    } else if (underHeader && claimable.has(key)) {
       claimed.push(line);
     }
   }
   return claimed.length > 0 ? claimed.join("\n") + "\n" : "";
 }
+function lineKey(line) {
+  return line.endsWith("\r") ? line.slice(0, -1) : line;
+}
+function lineEndingOf(text) {
+  const at = text.indexOf("\n");
+  return at > 0 && text[at - 1] === "\r" ? "\r\n" : "\n";
+}
 function gitignoreCovers(content) {
   const lines = new Set(content.split("\n").map((l) => l.trim()));
   return REQUIRED_GITIGNORE_ENTRIES.every((entry) => lines.has(entry));
@@ -2484,9 +2521,8 @@ function reconcileGitignore(targetRepo) {
       return "skipped";
     const existingLines = new Set(existing.split("\n").map((l) => l.trim()));
     const toAdd = REQUIRED_GITIGNORE_ENTRIES.filter((entry) => !existingLines.has(entry));
-    const suffix = (existing.endsWith("\n") ? "" : "\n") + `
-${header}
-` + toAdd.join("\n") + "\n";
+    const eol = lineEndingOf(existing);
+    const suffix = (existing.endsWith("\n") ? "" : eol) + eol + [header, ...toAdd].join(eol) + eol;
     writeFileSync4(gitignorePath, existing + suffix, "utf-8");
     return "written";
   } catch {
@@ -2521,8 +2557,9 @@ function reconcileGitattributes(targetRepo) {
     const toAdd = rules.filter((rule) => !present.has(rule));
     if (toAdd.length === 0)
       return "skipped";
-    const separator = existing === "" ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
-    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join("\n") + "\n";
+    const eol = lineEndingOf(existing);
+    const separator = existing === "" ? "" : existing.endsWith("\n") ? eol : eol + eol;
+    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join(eol) + eol;
     writeAllowlisted(path, targetRepo, existing + suffix, routed);
     return "written";
   } catch {
@@ -2542,9 +2579,9 @@ function previousPinForEngagement(targetRepoRoot, engagementId) {
 function nonEmpty(value) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
-function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, accountId, methodVersion, writtenPaths) {
+function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, createdByAccountId, methodVersion, writtenPaths) {
   const previous = previousPinForEngagement(targetRepoRoot, engagementId);
-  const carried = nonEmpty(accountId) ?? nonEmpty(previous?.accountId);
+  const carried = pinCreatedByAccountId(previous) ?? nonEmpty(createdByAccountId);
   const carriedMethodVersion = nonEmpty(methodVersion) ?? nonEmpty(previous?.methodVersion);
   const installedAt = nonEmpty(previous?.installedAt) ?? (/* @__PURE__ */ new Date()).toISOString();
   const projectPage = projectPageUrl(engagementId);
@@ -2553,7 +2590,7 @@ function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, a
     engagementId,
     engagementType,
     installedAt,
-    ...carried !== void 0 ? { accountId: carried } : {},
+    ...carried !== void 0 ? { createdByAccountId: carried } : {},
     ...carriedMethodVersion !== void 0 ? { methodVersion: carriedMethodVersion } : {},
     ...projectPage !== void 0 ? { projectPage } : {}
   };
@@ -2570,6 +2607,9 @@ function writeCrewRoster(targetRepoRoot, report) {
   const crewPath = join5(targetRepoRoot, CREW_ROSTER_REL);
   return recordOwned(report, crewPath, targetRepoRoot, rendered, CREW_ROSTER_REL);
 }
+function pinCreatedByAccountId(pin) {
+  return nonEmpty(pin?.createdByAccountId) ?? nonEmpty(pin?.accountId);
+}
 function readBundlePin(targetRepoRoot) {
   const pinPath = join5(targetRepoRoot, BUNDLE_PIN_REL);
   if (!existsSync3(pinPath))
@@ -2670,7 +2710,7 @@ function migrateLegacyEnvLocal(targetRepo, stored) {
   }
 }
 async function install(options) {
-  const { targetRepo, engagementId, engagementType, credential, home, accountId } = options;
+  const { targetRepo, engagementId, engagementType, credential, home, createdByAccountId } = options;
   assertEngagementId(engagementId);
   if (!existsSync3(targetRepo)) {
     throw new Error(`[halfcycle] Target repo does not exist: ${targetRepo}`);
@@ -2681,12 +2721,13 @@ async function install(options) {
     skippedPaths: [],
     mergedPaths: [],
     collidedPaths: [],
+    editedCollidedPaths: [],
     replacedPaths: []
   };
   const writeSet = closedWriteSet();
   const draft = startManifest(readPreviousManifest(targetRepo), (path) => writeSet.files.has(path), (path) => writeSet.dirs.has(path));
   const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync3(join5(targetRepo, dir))));
-  copyManifestCommands(manifest, targetRepo, report, draft);
+  copyManifestCommands(manifest, targetRepo, report, draft, writeSet);
   const vendoredBinSrc = resolveVendoredBinary();
   const vendoredBinDest = join5(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs");
   const vendoredOutcome = recordOwned(report, vendoredBinDest, targetRepo, readFileSync4(vendoredBinSrc, "utf-8"), VENDORED_BIN_REL);
@@ -2808,7 +2849,7 @@ async function install(options) {
     case "absent":
       break;
   }
-  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, accountId, credential?.methodVersion, report.writtenPaths);
+  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, createdByAccountId, credential?.methodVersion, report.writtenPaths);
   noteFile(draft, targetRepo, BUNDLE_PIN_REL, "written");
   noteFile(draft, targetRepo, CREW_ROSTER_REL, writeCrewRoster(targetRepo, report));
   const scanResult = runBootstrapScan(targetRepo);
@@ -2828,6 +2869,7 @@ async function install(options) {
     skippedPaths: report.skippedPaths,
     mergedPaths: report.mergedPaths,
     collidedPaths: report.collidedPaths,
+    editedCollidedPaths: report.editedCollidedPaths,
     replacedPaths: report.replacedPaths,
     bootstrapScanRan: scanResult.ran,
     legacyCredentialKept: migration.outcome === "kept" ? { keys: migration.unbacked, missing: migration.missingForAdoption } : null,
@@ -4077,6 +4119,7 @@ export {
   mergeWithRecords,
   mintOrReadIdentity,
   obtainBuildRecord,
+  pinCreatedByAccountId,
   questionsToPut,
   readBundlePin,
   readRemote,