halfcycle 0.4.2 → 0.4.4

package/dist/confirm-identity.d.ts

@@ -69,11 +69,12 @@
  * silence back permanently and for every future question this CLI asks.
  *
  * So what this population gets instead is a record that does not live in scrollback.
- * The account id settled on here is RETURNED to the caller, which writes it into the
- * committed `.halfcycle/bundle.json` (`writeBundlePin` in `install.ts`) — the id and
- * never the email, because that file is committed into the client's repository. A
- * wrong-identity install is then discoverable afterwards, from the repository, by the
- * person whose repository it is. Printing is not recording.
+ * The account id settled on here is RETURNED to the caller, which on a CREATE writes it
+ * into the committed `.halfcycle/bundle.json` as `createdByAccountId` (`writeBundlePin`
+ * in `install.ts`; only the create writes it — E1, #1598) — the id and never the email,
+ * because that file is committed into the client's repository. A wrong-identity install
+ * is then discoverable afterwards, from the repository, by the person whose repository
+ * it is. Printing is not recording.
  *
  * The measurement is `isInteractiveRun` (a TTY plus the absence of a CI marker), whose
  * one home is `device-signin.ts`. It is never inferred from anything else. (The
@@ -132,8 +133,9 @@ export interface ConfirmIdentityDeps extends ResolveOptions {
      * every run and it is the wrong thing to put beside the value the reader is being
      * asked to check: a person cannot verify a uuid, and thirty-eight characters of one
      * pushed the email they CAN verify leftward into a longer line. It is not lost —
-     * `.halfcycle/bundle.json` records the account this install acted as, which is the
-     * copy a support conversation can actually be pointed at once the terminal is gone.
+     * `.halfcycle/bundle.json` records the account that created the project, which is
+     * the copy a support conversation can be pointed at once the terminal is gone.
+     * The account a later run acted as is not recorded there (E1, #1598).
      */
     verbose?: boolean;
     /**
@@ -228,24 +230,42 @@ export declare function describeAccount(serviceUrl: string, credential: string,
  * and a human needs the email. The first half of that is true and the conclusion was
  * wrong: this label's reader is a person deciding whether a project should belong to
  * this account, they cannot verify a uuid, and a uuid printed beside the one value they
- * CAN verify buries it. The id has a better home already — `writeBundlePin` records it
- * in `.halfcycle/bundle.json`, which outlives the scrollback — and `--verbose` puts it
- * back on screen for the run that wants it.
+ * CAN verify buries it. The creating account's id has a better home already —
+ * `writeBundlePin` records it in `.halfcycle/bundle.json`, which outlives the
+ * scrollback — and `--verbose` puts this run's id back on screen for the run that
+ * wants it.
  *
- * WITH NO EMAIL the id is all there is, and it is printed: an unnamed account named by
- * its row is better than an unnamed account.
+ * WITH NO EMAIL BUT AN ANSWERED ACCOUNT the id is all there is, and it is printed —
+ * ONLY when `identity` itself is defined: an unnamed account named by its row is better
+ * than an unnamed account, but that is a claim about what `GET /account` just said, not
+ * about a credential this run merely holds. `(no email on record for it)` is the
+ * accepted exception to the "no internal words" scan precisely because it is scoped to
+ * this one case.
  *
- * WHEN NOTHING IS KNOWN IT SAYS SO, and does not invent. `'the account this machine
- * signed in as'` is a true sentence about an unnamed account; `'unknown'` printed where
- * a name goes reads as a name.
+ * **`identity === undefined` MEANS THE SAME THING EVERYWHERE THIS FUNCTION IS CALLED,
+ * AND IT MEANS "SAY NOTHING THAT CLAIMS AN ANSWER" (onboarding fix wave 2, F-01, the
+ * review's ruling on RW-02/RW-03 F-2, 2026-10-18).** `storedAccountId` is a credential
+ * this machine holds, not a fact the service stated — printing it, or printing
+ * "(no email on record for it)" beside it, asserts an answer this run never got.
+ * EVERY CALLER funnels through this one branch rather than deciding per-caller: `bin.ts`'s
+ * final report never reaches it (guarded by `identity !== undefined` before the call), and
+ * `confirm-identity.ts`'s own preamble (`accountLine`, gated the same way) and its stop
+ * remedy both go through it. The first cut of this fix gated only the preamble and left the
+ * stop remedy printing `account <id> (no email on record for it)` offline — the review's
+ * finding that fixing one caller and not the function itself reproduces the defect at the
+ * next call site.
  *
- * `confirmed` (onboarding fix wave T-16, #1567) is false only for the re-use arm's
- * offline report: `askAccount` was asked and got no response at all, so "no email on
- * record for it" would be a claim this run never actually confirmed, printed beside a
- * raw account id with nothing true to say about why there is no email. `false` takes
- * neither branch below and says plainly that this run could not confirm who signed in.
+ * **RETURNS `undefined` FOR THAT CASE RATHER THAN A SPLICED-IN NOUN PHRASE (round 2 of the
+ * same review, 2026-10-18).** A first attempt here returned a generic phrase ("the account
+ * this machine's saved sign-in belongs to" / "this credential's account") for every caller
+ * to interpolate — which reads naturally nowhere it is actually interpolated ("This
+ * machine's saved sign-in is for the account this machine's saved sign-in belongs to" / "is
+ * the credential for this credential's account"). Pushing the UNKNOWN case out to
+ * `undefined` keeps the one rule here (no id, no email claim, when `identity` is absent)
+ * while leaving each caller free to write its own grammatically whole sentence for that
+ * case — `armScript` below is the one caller that needs to, and does.
  */
-export declare function accountLabel(identity: AccountIdentity | undefined, storedAccountId: string | undefined, verbose?: boolean, confirmed?: boolean): string;
+export declare function accountLabel(identity: AccountIdentity | undefined, storedAccountId: string | undefined, verbose?: boolean): string | undefined;
 /**
  * Read one line from the terminal. Kept out of the decision so the decision is testable.
  * Also the Git for Windows offer's prompt (`pre-create-checks.ts`), so the terminal is
@@ -311,7 +331,7 @@ export declare function identitySwitchRemedy(home: string | undefined, interacti
  *
  * Returns the credential to use, which is a DIFFERENT one from the one passed in when
  * the person switched account, and which carries the ACCOUNT ID this run acts as so the
- * caller can record it on disk (`writeBundlePin`). Throws `SignInRefused` when they
+ * caller can record it on disk when it creates the project (`writeBundlePin`). Throws `SignInRefused` when they
  * stop, which the CLI already prints as a refusal rather than as a crash: nothing has
  * been created and nothing has been written at the point this is called, and that is
  * what makes stopping a real option rather than an apology.

package/dist/confirm-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confirm-identity.d.ts","sourceRoot":"","sources":["../src/confirm-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmGG;AAGH,OAAO,EAAmD,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAI1G,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKtG,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErE,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAeD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,aAAa,CAAC,CAiBxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAEtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,UAAQ,EACf,SAAS,UAAO,GACf,MAAM,CAaR;AAsCD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB/D;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAK7D;AAgKD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,CAO3F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,UAAU,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAuD7B"}
+{"version":3,"file":"confirm-identity.d.ts","sourceRoot":"","sources":["../src/confirm-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;AAGH,OAAO,EAAmD,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAI1G,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKtG,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErE,6FAA6F;AAC7F,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,gFAAgF;IAChF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAeD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,aAAa,CAAC,CAiBxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAEtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,UAAQ,GACd,MAAM,GAAG,SAAS,CAMpB;AAsCD;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB/D;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAK7D;AA0MD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,CAO3F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,UAAU,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAwD7B"}

package/dist/device-signin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-signin.d.ts","sourceRoot":"","sources":["../src/device-signin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAG3B;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAEpB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAE6C,CAAC;AAElF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,QAGiB,CAAC;AAQ9D,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACV;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;CAAE,CAUzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO9D;AAaD,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,EAAE,GAAE,MAAmB,EACvB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CA4E7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAG9E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE9E;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAsC1F;AAuDD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,uBAAuB,EAChC,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA6B7B;AAiBD,uCAAuC;AACvC,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,QAIF,CAAC;AAkHpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,MAAM,CAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,UAAU,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAClD,OAAO,CAAC,QAAQ,CAAC,CAiGnB"}
+{"version":3,"file":"device-signin.d.ts","sourceRoot":"","sources":["../src/device-signin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAG3B;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,KAAK;aAEpB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAE6C,CAAC;AAElF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,QAGiB,CAAC;AAQ9D,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,qDAAqD;IACrD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACV;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,wBAAwB,CAAC,EAAE,OAAO,CAAA;CAAE,CAUzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO9D;AAaD,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,EAAE,GAAE,MAAmB,EACvB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CA4E7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAG9E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE9E;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAsC1F;AAuDD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,uBAAuB,EAChC,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,kBAAkB,CAAC,CA6B7B;AAiBD,uCAAuC;AACvC,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,QAIF,CAAC;AAkHpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,MAAM,CAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,UAAU,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAClD,OAAO,CAAC,QAAQ,CAAC,CA0GnB"}

package/dist/index.d.ts

@@ -8,7 +8,7 @@
  *
  * INV-001: imports only from @halfcycle/core, @halfcycle/events, or Node builtins.
  */
-export { install, checkDrift, readBundlePin, ZONE_B_DIR } from './install.js';
+export { install, checkDrift, readBundlePin, pinCreatedByAccountId, ZONE_B_DIR } from './install.js';
 export type { InstallOptions, InstallResult, BundlePin, EngagementType, DeviceCredential } from './install.js';
 export { mintOrReadIdentity, readRootCommit, readRemote } from './identity.js';
 export type { ProjectIdentity } from './identity.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAyBhE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnG,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI1F,cAAc,kBAAkB,CAAC;AAKjC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrG,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAyBhE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnG,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI1F,cAAc,kBAAkB,CAAC;AAKjC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -1356,12 +1356,20 @@ function createProjectIdentityFile(targetRepoRoot) {
 }
 
 // dist/install-manifest.js
+import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
 var INSTALL_MANIFEST_REL = ".halfcycle/install-manifest.json";
 var INSTALL_MANIFEST_FORMAT = "halfcycle-install-manifest/v1";
 function sha256Hex(bytes) {
   return createHash("sha256").update(bytes).digest("hex");
 }
+function lineKey(line) {
+  return line.endsWith("\r") ? line.slice(0, -1) : line;
+}
+function fileSha256(bytes) {
+  const text = typeof bytes === "string" ? bytes : Buffer.from(bytes).toString("utf-8");
+  return sha256Hex(text.split("\n").map(lineKey).join("\n"));
+}
 function canonicalJson(value) {
   if (Array.isArray(value))
     return value.map(canonicalJson);
@@ -1544,7 +1552,7 @@ function startManifest(previous, isMember, isMemberDir) {
   };
 }
 function recordInstalledFile(draft, path, bytes) {
-  draft.files.set(path, { path, sha256: sha256Hex(bytes) });
+  draft.files.set(path, { path, sha256: fileSha256(bytes) });
 }
 function recordRemovedFile(draft, path) {
   draft.files.delete(path);
@@ -1650,8 +1658,20 @@ function projectPageUrl(engagementId) {
 }
 
 // dist/merge-settings.js
+function isHalfcycleCommand(hook, halfcycleCommands) {
+  if (typeof hook !== "object" || hook === null)
+    return false;
+  const command = hook.command;
+  return typeof command === "string" && halfcycleCommands.has(command);
+}
 function isHalfcycleEntry(entry, halfcycleCommands) {
-  return entry.hooks.some((h) => halfcycleCommands.has(h.command));
+  return entry.hooks.some((h) => isHalfcycleCommand(h, halfcycleCommands));
+}
+function withoutHalfcycleCommands(entry, halfcycleCommands) {
+  if (!isHalfcycleEntry(entry, halfcycleCommands))
+    return entry;
+  const remaining = entry.hooks.filter((h) => !isHalfcycleCommand(h, halfcycleCommands));
+  return remaining.length > 0 ? { ...entry, hooks: remaining } : null;
 }
 function mergeSettings(existing, generated) {
   const merged = { ...existing };
@@ -1670,7 +1690,7 @@ function mergeSettings(existing, generated) {
   const mergedHooks = {};
   const events = /* @__PURE__ */ new Set([...Object.keys(existingHooks), ...Object.keys(generatedHooks)]);
   for (const event of events) {
-    const developerEntries = (existingHooks[event] ?? []).filter((entry) => !isHalfcycleEntry(entry, halfcycleCommands));
+    const developerEntries = (existingHooks[event] ?? []).flatMap((entry) => withoutHalfcycleCommands(entry, halfcycleCommands) ?? []);
     const halfcycleEntries = generatedHooks[event] ?? [];
     mergedHooks[event] = [...developerEntries, ...halfcycleEntries];
   }
@@ -1846,6 +1866,7 @@ function closedWriteSet() {
     ownedDirs,
     hookCommands: new Set(HALFCYCLE_HOOK_COMMANDS),
     denyRuleSha256: new Set([...DENY_PATTERNS, ...RETIRED_DENY_PATTERNS].map((rule) => sha256Hex(rule))),
+    settingsSchema: SETTINGS_SCHEMA,
     gitignoreLines: /* @__PURE__ */ new Set([GITIGNORE_HEADER, ...REQUIRED_GITIGNORE_ENTRIES, LEGACY_ENV_LOCAL_REL]),
     gitattributesLines: /* @__PURE__ */ new Set([
       GITATTRIBUTES_HEADER,
@@ -1858,17 +1879,17 @@ function sha256OfWhatThisVersionWrites(commands) {
   const out = /* @__PURE__ */ new Map();
   const fromFile = (rel, src) => {
     if (existsSync3(src))
-      out.set(rel, sha256Hex(readFileSync4(src)));
+      out.set(rel, fileSha256(readFileSync4(src)));
   };
   for (const cmd of commands)
     fromFile(commandStubRel(cmd.name), join5(BUNDLE_ROOT, ".claude-plugin", cmd.path));
   for (const [rel, content] of hookScriptsThisVersionWrites())
-    out.set(rel, sha256Hex(content));
+    out.set(rel, fileSha256(content));
   fromFile(CAPTURED_INDEX_REL, capturedIndexScaffold());
   return out;
 }
 function bytesAreOurs(path, bytes, recorded, writeSet) {
-  const hash = sha256Hex(bytes);
+  const hash = fileSha256(bytes);
   const recordedHash = recorded !== void 0 && "sha256" in recorded ? recorded.sha256 : void 0;
   return hash === recordedHash || hash === writeSet.generatedSha256.get(path);
 }
@@ -2034,6 +2055,8 @@ function copyManifestCommands(manifest, targetRepo, report, draft, writeSet) {
     record(report, outcome, rel);
     if (replacedExisting)
       report.replacedPaths.push(rel);
+    if (outcome === "collided" && recorded !== void 0)
+      report.editedCollidedPaths.push(rel);
     noteFile(draft, targetRepo, rel, outcome);
   }
 }
@@ -2054,16 +2077,17 @@ function writeCollisionSafe(targetAbsPath, targetRepoRoot, content, isOurs) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
   let replacedExisting = false;
-  if (existsSync3(targetAbsPath)) {
-    const current = readFileSync4(targetAbsPath);
-    if (current.toString("utf-8") === content)
+  const current = existsSync3(targetAbsPath) ? readFileSync4(targetAbsPath) : null;
+  const text = inLineEndingOf(current?.toString("utf-8") ?? null, content);
+  if (current !== null) {
+    if (current.toString("utf-8") === text)
       return { outcome: "skipped", replacedExisting: false };
     if (!isOurs(current))
       return { outcome: "collided", replacedExisting: false };
     replacedExisting = true;
   }
   mkdirSync4(dirname3(targetAbsPath), { recursive: true });
-  writeFileSync4(targetAbsPath, content, "utf-8");
+  writeFileSync4(targetAbsPath, text, "utf-8");
   return { outcome: "written", replacedExisting };
 }
 var INSTALLER_OWNED_DIR = ".halfcycle/";
@@ -2075,11 +2099,12 @@ function writeOwned(targetAbsPath, targetRepoRoot, content) {
   if (!rel.startsWith(INSTALLER_OWNED_DIR)) {
     throw new Error(`[halfcycle] Path-ownership violation: attempted to claim "${rel}" by path. Only ${INSTALLER_OWNED_DIR} is owned outright by this installer; everywhere else a differing file may be a developer's, so ownership must be proved from the file's own contents (writeOwnedGenerated) rather than assumed from where it sits.`);
   }
-  if (existsSync3(targetAbsPath) && readFileSync4(targetAbsPath, "utf-8") === content) {
+  const current = readFileOrNull(targetAbsPath);
+  const text = inLineEndingOf(current, content);
+  if (current === text)
     return "skipped";
-  }
   mkdirSync4(dirname3(targetAbsPath), { recursive: true });
-  writeFileSync4(targetAbsPath, content, "utf-8");
+  writeFileSync4(targetAbsPath, text, "utf-8");
   return "written";
 }
 var GENERATED_HEADER_LINE_INDEX = 1;
@@ -2157,6 +2182,7 @@ function settingsParseRefusal(targetRepo, err) {
   }
   return `${file} could not be read as JSON${where} \u2014 fix it and run "npx halfcycle" again.`;
 }
+var SETTINGS_SCHEMA = "https://json.schemastore.org/claude-code-settings.json";
 function generateSettingsJson() {
   const hooks = {};
   for (const { event, matcher, timeout, command } of HALFCYCLE_HOOK_WIRING) {
@@ -2166,7 +2192,7 @@ function generateSettingsJson() {
     });
   }
   const settings = {
-    $schema: "https://json.schemastore.org/claude-code-settings.json",
+    $schema: SETTINGS_SCHEMA,
     permissions: {
       // deny ONLY. See DENY_PATTERNS — an allow list evaporates under bypass mode
       // and is the machine owner's grant to make, not ours.
@@ -2466,19 +2492,27 @@ function adoptBlockUnderHeader(before, header, claimable) {
   let underHeader = false;
   const lines = before.split("\n");
   for (const [i, line] of lines.entries()) {
-    if (line === header) {
-      if (i > 0 && lines[i - 1] === "")
-        claimed.push("");
+    const key = lineKey(line);
+    if (key === header) {
+      if (i > 0 && lineKey(lines[i - 1]) === "")
+        claimed.push(lines[i - 1]);
       claimed.push(line);
       underHeader = true;
-    } else if (line.trim() === "") {
+    } else if (key.trim() === "") {
       underHeader = false;
-    } else if (underHeader && claimable.has(line)) {
+    } else if (underHeader && claimable.has(key)) {
       claimed.push(line);
     }
   }
   return claimed.length > 0 ? claimed.join("\n") + "\n" : "";
 }
+function lineEndingOf(text) {
+  const at = text.indexOf("\n");
+  return at > 0 && text[at - 1] === "\r" ? "\r\n" : "\n";
+}
+function inLineEndingOf(existing, generated) {
+  return existing === null ? generated : generated.split("\n").join(lineEndingOf(existing));
+}
 function gitignoreCovers(content) {
   const lines = new Set(content.split("\n").map((l) => l.trim()));
   return REQUIRED_GITIGNORE_ENTRIES.every((entry) => lines.has(entry));
@@ -2497,9 +2531,8 @@ function reconcileGitignore(targetRepo) {
       return "skipped";
     const existingLines = new Set(existing.split("\n").map((l) => l.trim()));
     const toAdd = REQUIRED_GITIGNORE_ENTRIES.filter((entry) => !existingLines.has(entry));
-    const suffix = (existing.endsWith("\n") ? "" : "\n") + `
-${header}
-` + toAdd.join("\n") + "\n";
+    const eol = lineEndingOf(existing);
+    const suffix = (existing.endsWith("\n") ? "" : eol) + eol + [header, ...toAdd].join(eol) + eol;
     writeFileSync4(gitignorePath, existing + suffix, "utf-8");
     return "written";
   } catch {
@@ -2534,8 +2567,9 @@ function reconcileGitattributes(targetRepo) {
     const toAdd = rules.filter((rule) => !present.has(rule));
     if (toAdd.length === 0)
       return "skipped";
-    const separator = existing === "" ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
-    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join("\n") + "\n";
+    const eol = lineEndingOf(existing);
+    const separator = existing === "" ? "" : existing.endsWith("\n") ? eol : eol + eol;
+    const suffix = separator + [GITATTRIBUTES_HEADER, ...toAdd].join(eol) + eol;
     writeAllowlisted(path, targetRepo, existing + suffix, routed);
     return "written";
   } catch {
@@ -2555,9 +2589,9 @@ function previousPinForEngagement(targetRepoRoot, engagementId) {
 function nonEmpty(value) {
   return typeof value === "string" && value.trim() !== "" ? value : void 0;
 }
-function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, accountId, methodVersion, writtenPaths) {
+function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, createdByAccountId, methodVersion, writtenPaths) {
   const previous = previousPinForEngagement(targetRepoRoot, engagementId);
-  const carried = nonEmpty(accountId) ?? nonEmpty(previous?.accountId);
+  const carried = pinCreatedByAccountId(previous) ?? nonEmpty(createdByAccountId);
   const carriedMethodVersion = nonEmpty(methodVersion) ?? nonEmpty(previous?.methodVersion);
   const installedAt = nonEmpty(previous?.installedAt) ?? (/* @__PURE__ */ new Date()).toISOString();
   const projectPage = projectPageUrl(engagementId);
@@ -2566,12 +2600,13 @@ function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, a
     engagementId,
     engagementType,
     installedAt,
-    ...carried !== void 0 ? { accountId: carried } : {},
+    ...carried !== void 0 ? { createdByAccountId: carried } : {},
     ...carriedMethodVersion !== void 0 ? { methodVersion: carriedMethodVersion } : {},
     ...projectPage !== void 0 ? { projectPage } : {}
   };
   const pinPath = join5(targetRepoRoot, BUNDLE_PIN_REL);
-  writeAllowlisted(pinPath, targetRepoRoot, JSON.stringify(pin, null, 2) + "\n", writtenPaths);
+  const pinText = inLineEndingOf(readFileOrNull(pinPath), JSON.stringify(pin, null, 2) + "\n");
+  writeAllowlisted(pinPath, targetRepoRoot, pinText, writtenPaths);
 }
 function writeCrewRoster(targetRepoRoot, report) {
   const doc = {
@@ -2583,6 +2618,9 @@ function writeCrewRoster(targetRepoRoot, report) {
   const crewPath = join5(targetRepoRoot, CREW_ROSTER_REL);
   return recordOwned(report, crewPath, targetRepoRoot, rendered, CREW_ROSTER_REL);
 }
+function pinCreatedByAccountId(pin) {
+  return nonEmpty(pin?.createdByAccountId) ?? nonEmpty(pin?.accountId);
+}
 function readBundlePin(targetRepoRoot) {
   const pinPath = join5(targetRepoRoot, BUNDLE_PIN_REL);
   if (!existsSync3(pinPath))
@@ -2683,7 +2721,7 @@ function migrateLegacyEnvLocal(targetRepo, stored) {
   }
 }
 async function install(options) {
-  const { targetRepo, engagementId, engagementType, credential, home, accountId } = options;
+  const { targetRepo, engagementId, engagementType, credential, home, createdByAccountId } = options;
   assertEngagementId(engagementId);
   if (!existsSync3(targetRepo)) {
     throw new Error(`[halfcycle] Target repo does not exist: ${targetRepo}`);
@@ -2694,6 +2732,7 @@ async function install(options) {
     skippedPaths: [],
     mergedPaths: [],
     collidedPaths: [],
+    editedCollidedPaths: [],
     replacedPaths: []
   };
   const writeSet = closedWriteSet();
@@ -2715,7 +2754,7 @@ async function install(options) {
   }
   recordSettingsMerge(draft, existingSettings, generatedSettings, settingsPreexisted);
   const mergedSettings = mergeSettings(existingSettings, generatedSettings);
-  const mergedSettingsText = JSON.stringify(mergedSettings, null, 2) + "\n";
+  const mergedSettingsText = inLineEndingOf(readFileOrNull(settingsPath), JSON.stringify(mergedSettings, null, 2) + "\n");
   mkdirSync4(dirname3(settingsPath), { recursive: true });
   writeFileSync4(settingsPath, mergedSettingsText, "utf-8");
   (settingsPreexisted ? report.mergedPaths : report.writtenPaths).push(".claude/settings.json");
@@ -2743,7 +2782,7 @@ async function install(options) {
   if (credential) {
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
     const existingMcp = existsSync3(mcpPath) ? readFileSync4(mcpPath, "utf-8") : null;
-    const mcpContent = generateMcpRegistration(existingMcp, credential.mcpUrl);
+    const mcpContent = inLineEndingOf(existingMcp, generateMcpRegistration(existingMcp, credential.mcpUrl));
     recordMcpMerge(draft, existingMcp, mcpContent);
     if (existingMcp === null) {
       writeAllowlisted(mcpPath, targetRepo, mcpContent, report.writtenPaths);
@@ -2821,7 +2860,7 @@ async function install(options) {
     case "absent":
       break;
   }
-  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, accountId, credential?.methodVersion, report.writtenPaths);
+  writeBundlePin(targetRepo, manifest.version, engagementId, engagementType, createdByAccountId, credential?.methodVersion, report.writtenPaths);
   noteFile(draft, targetRepo, BUNDLE_PIN_REL, "written");
   noteFile(draft, targetRepo, CREW_ROSTER_REL, writeCrewRoster(targetRepo, report));
   const scanResult = runBootstrapScan(targetRepo);
@@ -2841,6 +2880,7 @@ async function install(options) {
     skippedPaths: report.skippedPaths,
     mergedPaths: report.mergedPaths,
     collidedPaths: report.collidedPaths,
+    editedCollidedPaths: report.editedCollidedPaths,
     replacedPaths: report.replacedPaths,
     bootstrapScanRan: scanResult.ran,
     legacyCredentialKept: migration.outcome === "kept" ? { keys: migration.unbacked, missing: migration.missingForAdoption } : null,
@@ -4090,6 +4130,7 @@ export {
   mergeWithRecords,
   mintOrReadIdentity,
   obtainBuildRecord,
+  pinCreatedByAccountId,
   questionsToPut,
   readBundlePin,
   readRemote,