halfcycle 0.4.3 → 0.4.5

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "halfcycle",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "Halfcycle Method bundle — resolution-stub slash commands, remote method-delivery registration, and governance-hook wiring for a Halfcycle engagement repo. It ships NO worker role files: a project's roles are authored from that project's own recorded decisions at orchestration kickoff (FX-2, W3-F-27).",
   "commands": [
     {

package/bin/bin.bundle.mjs

@@ -17520,7 +17520,8 @@ function deleteMarker(repoRoot, sessionId) {
 var SESSION_NOTICE_SUFFIX = {
   "no-repository": ".norepo",
   "credential-rejected": ".credential",
-  "credential-renewed-for-this-run": ".renewed"
+  "credential-renewed-for-this-run": ".renewed",
+  "credential-missing": ".nocredential"
 };
 function firstNoticeThisSession(notice, folder, sessionId) {
   if (!sessionId)
@@ -17810,6 +17811,8 @@ async function evaluateEdit(reply, readSeat) {
   const configResult = readConfig();
   if (!configResult.config) {
     await emitRunRecord({ runType: "hook", outcome: "unconfigured", changeSet });
+    if (!firstNoticeThisSession("credential-missing", repoRoot, input.session_id))
+      return;
     emitNeverConfigured(UNCONFIGURED_EXIT_TOOL_USE, readNeverConfiguredReason());
     return;
   }
@@ -17989,6 +17992,8 @@ async function evaluateSession(input, kind, reply, readSeat) {
   const configResult = readConfig();
   if (!configResult.config) {
     await emitRunRecord({ runType: "hook", outcome: "unconfigured", changeSet, diffBase });
+    if (!firstNoticeThisSession("credential-missing", repoRoot, sessionId))
+      return;
     emitNeverConfigured(UNCONFIGURED_EXIT_STOP_FAMILY, readNeverConfiguredReason());
     return;
   }
@@ -18466,37 +18471,52 @@ function namesItsServer(body) {
 function discardBody(res) {
   res.body?.cancel().catch(() => void 0);
 }
+var CUT_OFF = /* @__PURE__ */ Symbol("cut-off");
+async function postInitialize(url2, bearer, fetchFn, signal) {
+  let res;
+  try {
+    res = await fetchFn(url2, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${bearer}` },
+      body: INITIALIZE_BODY,
+      redirect: "manual",
+      signal
+    });
+  } catch {
+    return CANNOT_REACH_SENTENCE;
+  }
+  if (res.status === 401) {
+    discardBody(res);
+    return NO_CREDENTIAL_SENTENCE;
+  }
+  if (res.status < 200 || res.status > 299) {
+    discardBody(res);
+    return SERVICE_PROBLEM_SENTENCE;
+  }
+  let text;
+  try {
+    text = await res.text();
+  } catch {
+    return signal.aborted ? CANNOT_REACH_SENTENCE : CUT_OFF;
+  }
+  let body;
+  try {
+    body = JSON.parse(text);
+  } catch {
+    return SERVICE_PROBLEM_SENTENCE;
+  }
+  return namesItsServer(body) ? void 0 : SERVICE_PROBLEM_SENTENCE;
+}
 async function probeDelivery(url2, bearer, fetchFn, deadlineMs) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), deadlineMs);
   try {
-    let res;
-    try {
-      res = await fetchFn(url2, {
-        method: "POST",
-        headers: { "content-type": "application/json", authorization: `Bearer ${bearer}` },
-        body: INITIALIZE_BODY,
-        redirect: "manual",
-        signal: controller.signal
-      });
-    } catch {
-      return CANNOT_REACH_SENTENCE;
-    }
-    if (res.status === 401) {
-      discardBody(res);
-      return NO_CREDENTIAL_SENTENCE;
-    }
-    if (res.status < 200 || res.status > 299) {
-      discardBody(res);
-      return SERVICE_PROBLEM_SENTENCE;
-    }
-    let body;
-    try {
-      body = await res.json();
-    } catch {
-      return controller.signal.aborted ? CANNOT_REACH_SENTENCE : SERVICE_PROBLEM_SENTENCE;
+    for (let attempt2 = 0; attempt2 < 2; attempt2++) {
+      const outcome = await postInitialize(url2, bearer, fetchFn, controller.signal);
+      if (outcome !== CUT_OFF)
+        return outcome;
     }
-    return namesItsServer(body) ? void 0 : SERVICE_PROBLEM_SENTENCE;
+    return CANNOT_REACH_SENTENCE;
   } finally {
     clearTimeout(timer);
   }

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // dist/bin.js
-import { existsSync as existsSync7, readFileSync as readFileSync11, realpathSync as realpathSync3, statSync } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync11, realpathSync as realpathSync3, statSync, writeSync as writeSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join12 } from "node:path";
 
@@ -1648,12 +1648,20 @@ function createProjectIdentityFile(targetRepoRoot) {
 }
 
 // dist/install-manifest.js
+import { Buffer as Buffer2 } from "node:buffer";
 import { createHash } from "node:crypto";
 var INSTALL_MANIFEST_REL = ".halfcycle/install-manifest.json";
 var INSTALL_MANIFEST_FORMAT = "halfcycle-install-manifest/v1";
 function sha256Hex(bytes) {
   return createHash("sha256").update(bytes).digest("hex");
 }
+function lineKey(line) {
+  return line.endsWith("\r") ? line.slice(0, -1) : line;
+}
+function fileSha256(bytes) {
+  const text = typeof bytes === "string" ? bytes : Buffer2.from(bytes).toString("utf-8");
+  return sha256Hex(text.split("\n").map(lineKey).join("\n"));
+}
 function canonicalJson(value) {
   if (Array.isArray(value))
     return value.map(canonicalJson);
@@ -1836,7 +1844,7 @@ function startManifest(previous, isMember, isMemberDir) {
   };
 }
 function recordInstalledFile(draft, path, bytes) {
-  draft.files.set(path, { path, sha256: sha256Hex(bytes) });
+  draft.files.set(path, { path, sha256: fileSha256(bytes) });
 }
 function recordRemovedFile(draft, path) {
   draft.files.delete(path);
@@ -2155,17 +2163,17 @@ function sha256OfWhatThisVersionWrites(commands) {
   const out = /* @__PURE__ */ new Map();
   const fromFile = (rel, src) => {
     if (existsSync3(src))
-      out.set(rel, sha256Hex(readFileSync5(src)));
+      out.set(rel, fileSha256(readFileSync5(src)));
   };
   for (const cmd of commands)
     fromFile(commandStubRel(cmd.name), join5(BUNDLE_ROOT, ".claude-plugin", cmd.path));
   for (const [rel, content] of hookScriptsThisVersionWrites())
-    out.set(rel, sha256Hex(content));
+    out.set(rel, fileSha256(content));
   fromFile(CAPTURED_INDEX_REL, capturedIndexScaffold());
   return out;
 }
 function bytesAreOurs(path, bytes, recorded, writeSet) {
-  const hash = sha256Hex(bytes);
+  const hash = fileSha256(bytes);
   const recordedHash = recorded !== void 0 && "sha256" in recorded ? recorded.sha256 : void 0;
   return hash === recordedHash || hash === writeSet.generatedSha256.get(path);
 }
@@ -2353,16 +2361,17 @@ function writeCollisionSafe(targetAbsPath, targetRepoRoot, content, isOurs) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
   let replacedExisting = false;
-  if (existsSync3(targetAbsPath)) {
-    const current = readFileSync5(targetAbsPath);
-    if (current.toString("utf-8") === content)
+  const current = existsSync3(targetAbsPath) ? readFileSync5(targetAbsPath) : null;
+  const text = inLineEndingOf(current?.toString("utf-8") ?? null, content);
+  if (current !== null) {
+    if (current.toString("utf-8") === text)
       return { outcome: "skipped", replacedExisting: false };
     if (!isOurs(current))
       return { outcome: "collided", replacedExisting: false };
     replacedExisting = true;
   }
   mkdirSync5(dirname3(targetAbsPath), { recursive: true });
-  writeFileSync5(targetAbsPath, content, "utf-8");
+  writeFileSync5(targetAbsPath, text, "utf-8");
   return { outcome: "written", replacedExisting };
 }
 var INSTALLER_OWNED_DIR = ".halfcycle/";
@@ -2374,11 +2383,12 @@ function writeOwned(targetAbsPath, targetRepoRoot, content) {
   if (!rel.startsWith(INSTALLER_OWNED_DIR)) {
     throw new Error(`[halfcycle] Path-ownership violation: attempted to claim "${rel}" by path. Only ${INSTALLER_OWNED_DIR} is owned outright by this installer; everywhere else a differing file may be a developer's, so ownership must be proved from the file's own contents (writeOwnedGenerated) rather than assumed from where it sits.`);
   }
-  if (existsSync3(targetAbsPath) && readFileSync5(targetAbsPath, "utf-8") === content) {
+  const current = readFileOrNull(targetAbsPath);
+  const text = inLineEndingOf(current, content);
+  if (current === text)
     return "skipped";
-  }
   mkdirSync5(dirname3(targetAbsPath), { recursive: true });
-  writeFileSync5(targetAbsPath, content, "utf-8");
+  writeFileSync5(targetAbsPath, text, "utf-8");
   return "written";
 }
 var GENERATED_HEADER_LINE_INDEX = 1;
@@ -2780,13 +2790,13 @@ function adoptBlockUnderHeader(before, header, claimable) {
   }
   return claimed.length > 0 ? claimed.join("\n") + "\n" : "";
 }
-function lineKey(line) {
-  return line.endsWith("\r") ? line.slice(0, -1) : line;
-}
 function lineEndingOf(text) {
   const at = text.indexOf("\n");
   return at > 0 && text[at - 1] === "\r" ? "\r\n" : "\n";
 }
+function inLineEndingOf(existing, generated) {
+  return existing === null ? generated : generated.split("\n").join(lineEndingOf(existing));
+}
 function gitignoreCovers(content) {
   const lines = new Set(content.split("\n").map((l) => l.trim()));
   return REQUIRED_GITIGNORE_ENTRIES.every((entry) => lines.has(entry));
@@ -2879,7 +2889,8 @@ function writeBundlePin(targetRepoRoot, version, engagementId, engagementType, c
     ...projectPage !== void 0 ? { projectPage } : {}
   };
   const pinPath = join5(targetRepoRoot, BUNDLE_PIN_REL);
-  writeAllowlisted(pinPath, targetRepoRoot, JSON.stringify(pin, null, 2) + "\n", writtenPaths);
+  const pinText = inLineEndingOf(readFileOrNull(pinPath), JSON.stringify(pin, null, 2) + "\n");
+  writeAllowlisted(pinPath, targetRepoRoot, pinText, writtenPaths);
 }
 function writeCrewRoster(targetRepoRoot, report) {
   const doc = {
@@ -3068,7 +3079,7 @@ async function install(options) {
   }
   recordSettingsMerge(draft, existingSettings, generatedSettings, settingsPreexisted);
   const mergedSettings = mergeSettings(existingSettings, generatedSettings);
-  const mergedSettingsText = JSON.stringify(mergedSettings, null, 2) + "\n";
+  const mergedSettingsText = inLineEndingOf(readFileOrNull(settingsPath), JSON.stringify(mergedSettings, null, 2) + "\n");
   mkdirSync5(dirname3(settingsPath), { recursive: true });
   writeFileSync5(settingsPath, mergedSettingsText, "utf-8");
   (settingsPreexisted ? report.mergedPaths : report.writtenPaths).push(".claude/settings.json");
@@ -3096,7 +3107,7 @@ async function install(options) {
   if (credential) {
     const mcpPath = join5(targetRepo, MCP_REGISTRATION_REL);
     const existingMcp = existsSync3(mcpPath) ? readFileSync5(mcpPath, "utf-8") : null;
-    const mcpContent = generateMcpRegistration(existingMcp, credential.mcpUrl);
+    const mcpContent = inLineEndingOf(existingMcp, generateMcpRegistration(existingMcp, credential.mcpUrl));
     recordMcpMerge(draft, existingMcp, mcpContent);
     if (existingMcp === null) {
       writeAllowlisted(mcpPath, targetRepo, mcpContent, report.writtenPaths);
@@ -4201,13 +4212,12 @@ async function describeAccount(serviceUrl, credential, fetchImpl = fetch) {
   return (await askAccount(serviceUrl, credential, fetchImpl)).identity;
 }
 function accountLabel(identity, storedAccountId, verbose2 = false) {
-  const accountId = identity?.accountId ?? storedAccountId;
-  if (identity?.email !== void 0 && identity.email.trim() !== "") {
-    return verbose2 && accountId !== void 0 ? `${identity.email} (account ${accountId})` : identity.email;
+  if (identity === void 0)
+    return void 0;
+  if (identity.email !== void 0 && identity.email.trim() !== "") {
+    return verbose2 ? `${identity.email} (account ${identity.accountId})` : identity.email;
   }
-  if (accountId !== void 0)
-    return `account ${accountId} (no email on record for it)`;
-  return "the account this credential belongs to, which this service did not name";
+  return `account ${identity.accountId} (no email on record for it)`;
 }
 function onlyDate(iso) {
   if (iso === void 0)
@@ -4253,7 +4263,11 @@ function actingAs(credential, identity) {
 function question(colour) {
   return `[halfcycle] Continue as that account?  ${ink("good", "[y]", colour)} yes   ${ink("key", "[s]", colour)} sign in as someone else   ${ink("faint", "[anything else]", colour)} stop: `;
 }
-function armScript(credential, act, label, plainLabel, home) {
+function accountLine(identity, label) {
+  return identity === void 0 ? "" : `[halfcycle]   Account: ${label}
+`;
+}
+function armScript(credential, act, accountLineText, plainLabel, home) {
   switch (credential.source) {
     case "browser-handoff":
       return {
@@ -4265,11 +4279,11 @@ function armScript(credential, act, label, plainLabel, home) {
         stopRemedy: "",
         afterSwitch: ""
       };
-    case "environment":
+    case "environment": {
+      const credentialSentence = plainLabel !== void 0 ? `HALFCYCLE_TOKEN in this environment is the credential for ${plainLabel}, and it takes precedence over any saved sign-in` : `The credential in your environment could not be checked, because the Halfcycle service did not answer, and it takes precedence over any saved sign-in`;
       return {
         preamble: `[halfcycle] HALFCYCLE_TOKEN is set in this environment, and this install will use it.
-[halfcycle]   Account: ${label}
-[halfcycle]   About to ${actClause(act)}
+` + accountLineText + `[halfcycle]   About to ${actClause(act)}
 [halfcycle] A variable exported by a shell profile is not a choice about this run \u2014 if that is not your account, ${wrongAccountConsequence(act)}.
 `,
         asks: true,
@@ -4279,19 +4293,20 @@ function armScript(credential, act, label, plainLabel, home) {
         noTerminalNote: "",
         switchOpening: `[halfcycle] Signing you in through your browser \u2014 this install will use that account instead.
 `,
-        stopRemedy: `Stopped before anything was set up. HALFCYCLE_TOKEN in this environment is the credential for ${plainLabel}, and it takes precedence over any saved sign-in \u2014 so unset it, or set it to your own account's credential, before running this again.`,
+        stopRemedy: `Stopped before anything was set up. ${credentialSentence} \u2014 so unset it, or set it to your own account's credential, before running this again.`,
         // The switch is real for THIS run (the new credential is what gets used) and it
         // does not persist: `obtainCredential` reads the variable first, so the next run
         // is the same variable again. Said here rather than discovered tomorrow.
         afterSwitch: `[halfcycle] HALFCYCLE_TOKEN is still set in this environment and still wins over a saved sign-in \u2014 unset it, or the next run will use it again.
 `
       };
+    }
     case "stored": {
       const savedOn = onlyDate(credential.signedInAt);
+      const savedSignInSentence = plainLabel !== void 0 ? `This machine's saved sign-in is for ${plainLabel}.` : `This machine's saved sign-in could not be checked, because the Halfcycle service did not answer.`;
       return {
         preamble: `[halfcycle] This machine already has a Halfcycle sign-in saved, and this install will use it.
-[halfcycle]   Account: ${label}
-` + (savedOn !== void 0 ? `[halfcycle]   Saved on this machine: ${savedOn}
+` + accountLineText + (savedOn !== void 0 ? `[halfcycle]   Saved on this machine: ${savedOn}
 ` : "") + `[halfcycle]   About to ${actClause(act)}
 [halfcycle] If that is not your account, ${wrongAccountConsequence(act)}${wrongAccountVisibility(act) === void 0 ? "" : ` \u2014 ${wrongAccountVisibility(act)}`}.
 `,
@@ -4305,7 +4320,7 @@ function armScript(credential, act, label, plainLabel, home) {
 `,
         switchOpening: `[halfcycle] Forgetting this machine's saved sign-in and signing you in through your browser.
 `,
-        stopRemedy: `Stopped before anything was set up. This machine's saved sign-in is for ${plainLabel}. Run this again and answer "s" to sign in as a different account, or remove ${accountStorePath(home)} to be asked for a sign-in next time.`,
+        stopRemedy: `Stopped before anything was set up. ${savedSignInSentence} Run this again and answer "s" to sign in as a different account, or remove ${accountStorePath(home)} to be asked for a sign-in next time.`,
         afterSwitch: ""
       };
     }
@@ -4320,9 +4335,9 @@ async function confirmActingIdentity(serviceUrl, credential, act, deps = {}) {
   const colour = deps.colour ?? decideColour({ isTTY: process.stdout.isTTY === true, env: deps.env ?? process.env });
   const identity = await describeAccount(serviceUrl, credential.credential, deps.fetchImpl);
   const plainLabel = accountLabel(identity, credential.accountId, deps.verbose === true);
-  const label = ink("keyBold", plainLabel, colour);
+  const label = plainLabel !== void 0 ? ink("keyBold", plainLabel, colour) : "";
   const acting = actingAs(credential, identity);
-  const script = armScript(credential, act, label, plainLabel, deps.home);
+  const script = armScript(credential, act, accountLine(identity, label), plainLabel, deps.home);
   write(script.preamble);
   if (!script.asks)
     return acting;
@@ -6164,7 +6179,7 @@ function applyMergedJson(targetRepo, rule, file, deleteWhenEmpty, lists, name, e
   if (!changed)
     return;
   const empty = Object.keys(value).length === 0 && deleteWhenEmpty;
-  writeBack(targetRepo, rel, file.text, empty ? null : serializeJson(value), lists, name);
+  writeBack(targetRepo, rel, file.text, empty ? null : inLineEndingOf(file.text, serializeJson(value)), lists, name);
   if (adopted && lexists(join10(targetRepo, rel))) {
     name(lists.leftAlone, `${rel} (Halfcycle's hooks were taken out. There is no record of this file from before the install, so a permission rule or "$schema" Halfcycle added may still be there \u2014 it cannot be told apart from your own)`, rel);
   }
@@ -6608,14 +6623,21 @@ ${USAGE}`);
       process.exit(1);
       return;
     }
+    let interrupted = false;
     const onInstallSigint = () => {
+      if (interrupted)
+        return;
+      interrupted = true;
       const kept = readFolderId(targetRepo) !== void 0 ? `${KEPT_FOLDER_ID_LINE}
 ` : "";
-      process.stderr.write(`halfcycle: interrupted.
+      try {
+        writeSync2(2, `halfcycle: interrupted.
 ${kept}`);
+      } catch {
+      }
       process.exit(1);
     };
-    process.once("SIGINT", onInstallSigint);
+    process.on("SIGINT", onInstallSigint);
     try {
       const controlOrigin = resolveControlOrigin(process.env);
       const serviceUrl = controlOrigin.origin;