halfcycle 0.7.1 → 0.8.1

package/dist/cli.js

@@ -1,15 +1,9 @@
 #!/usr/bin/env node
 
-// dist/bin.js
-import { existsSync as existsSync12, statSync as statSync2, writeSync as writeSync3 } from "node:fs";
-
-// dist/install.js
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync4, lstatSync, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join6, posix as posix2, relative, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
+// dist/request-shapes.js
+import { appendFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 
 // ../core/dist/guard-record.js
 import { z } from "zod";
@@ -512,6 +506,7 @@ var TASK_PLAN_FILE = "docs/build-records/task-plan.json";
 var TASK_LIST_FILE = "docs/build-records/build-tasks.json";
 var CRITERIA_RECORD_FILE = "docs/build-records/criteria-check.json";
 var AGENT_NAME_MAX = 32;
+var SMALL_PLAN_BUILD_TASKS_MAX = 6;
 var TASK_PLAN_TASKS_MAX = 500;
 var TASK_PLAN_ID_MAX = 64;
 var TASK_PLAN_BUILDS_NONE = "none";
@@ -622,14 +617,14 @@ var taskPlanLineText = {
   O8NoSuchPart: (a, parts, file, partIds) => parts.length === 1 ? `"${a}" builds "${parts[0]}", which is not a part of the system: ${file} has no part with that id. Use an id from ${file}: ${partIds.join(", ")}.` : `"${a}" builds ${parts.map((x) => `"${x}"`).join(", ")}, which are not parts of the system: ${file} has no part with those ids. Use ids from ${file}: ${partIds.join(", ")}.`,
   O8Unusable: (file, why) => `${file} is there but could not be used, so no task was checked for building a part outside this phase's plan: ${why}. Fix it, then run this again.`,
   C1Form: (a, x, first) => `"${a}" names "${x}", which is not a criterion. Write it as <spec name> AC<number>, for example "${first} AC1".`,
-  C1Number: (a, x, folder, slug, n) => `"${a}" names "${x}", but ${folder}/${slug}.md has no AC${n}.`,
+  C1Number: (a, x, folder2, slug, n) => `"${a}" names "${x}", but ${folder2}/${slug}.md has no AC${n}.`,
   C2: (a, x) => `"${a}" names "${x}", which was retired. Remove it, or name the criterion that replaced it.`,
   C3: (slug, n) => `${slug} AC${n} is not delivered by any build task. Add "${slug} AC${n}" to the criteria of the build task that delivers it.`,
   C4: (a) => `"${a}" does not say which acceptance criteria it delivers. Add "criteria" with each one as <spec name> AC<number>. If it delivers none, write "criteria": "${TASK_PLAN_CRITERIA_NONE}".`,
   C5: (a, x, slug) => `"${a}" names "${x}", but "${slug}" is not in the plan's specs. Add it to "specs" if it belongs to this phase, or remove the citation.`,
-  C6None: (folder) => `The plan does not say which feature designs this phase has. Add "specs" with the name of each file in ${folder}/ this phase builds, without ".md". If it has none, write "specs": "${TASK_PLAN_SPECS_NONE}".`,
-  C6Malformed: (x, folder) => `The plan's specs name "${x}", which is not a spec name. Use the name of a file in ${folder}/, without ".md".`,
-  C6Missing: (slug, folder) => `The plan's specs name "${slug}", but there is no ${folder}/${slug}.md.`,
+  C6None: (folder2) => `The plan does not say which feature designs this phase has. Add "specs" with the name of each file in ${folder2}/ this phase builds, without ".md". If it has none, write "specs": "${TASK_PLAN_SPECS_NONE}".`,
+  C6Malformed: (x, folder2) => `The plan's specs name "${x}", which is not a spec name. Use the name of a file in ${folder2}/, without ".md".`,
+  C6Missing: (slug, folder2) => `The plan's specs name "${slug}", but there is no ${folder2}/${slug}.md.`,
   B1: (s, t, x, more) => `"${s}" and "${t}" both own ${x}${more === 0 ? "" : more === 1 ? " and 1 more path" : ` and ${more} more paths`}. A file belongs to one spec: keep it in the Owns of the spec that mainly changes it, and let the other spec's tasks list it in what they touch.`,
   B2: (s, x) => `"${s}" lists "${x}" under Owns, which is not a path inside this project. Use a path from the project's top folder; end a folder with /.`,
   N2: (a, files) => `"${a}" changes files that none of its specs own: ${files.join(", ")}. If that is intended there is nothing to do; otherwise add them to a spec's Owns.`,
@@ -644,7 +639,7 @@ var taskPlanLineText = {
   V1: () => 'The plan has no check of the finished phase against its acceptance criteria. Add a task of kind "check" with "criteriaCheck": true, held by a crew member who builds none of this phase, that waits for every build task.',
   V2: (w, c) => `"${w}" is a walk, and it does not wait for the check of the phase against its acceptance criteria. Add "${c}" to its dependsOn.`,
   V3Unordered: (c, b) => `"${c}" checks the finished phase, but "${b}" could still be running while it does. Add "${b}" to the dependsOn of "${c}", or, if "${b}" fixes what "${c}" found, name it in ${CRITERIA_RECORD_FILE} and make it wait for "${c}".`,
-  V3Ships: (b, c) => `"${b}" ships to users and waits for "${c}", the check of the finished phase. A deploy or a release comes before that check, so the check sees what is live: add "${b}" to the dependsOn of "${c}" and stop "${b}" waiting for "${c}".`,
+  V3Ships: (b, c) => `"${b}" ships to users and waits for "${c}", the check of the finished phase, and no later check waits for "${b}", so no check sees what is live. Add "${b}" to the dependsOn of "${c}" and stop "${b}" waiting for "${c}", or add a check of the phase that waits for "${b}".`,
   V3Unchecked: (b, c) => `"${b}" waits for "${c}", the check of the finished phase, and no later check waits for "${b}", so no check sees what it builds. Add "${b}" to the dependsOn of "${c}" and stop "${b}" waiting for "${c}", or add a check of the phase that waits for "${b}".`,
   V4: (x) => `"${x}" does not say which crew member holds it. Add "agent" with that member's callsign.`,
   V5: (c, m, b) => `"${c}" checks the finished phase, but ${m} also holds "${b}", which builds part of it. Give "${c}" to a crew member who holds no build task in this phase.`,
@@ -711,8 +706,8 @@ function firstSharedItem(a, b) {
           return other.shown;
       }
     }
-    for (const folder of b.folders) {
-      if (file.key.startsWith(folder.key))
+    for (const folder2 of b.folders) {
+      if (file.key.startsWith(folder2.key))
         return file.shown;
     }
   }
@@ -740,8 +735,8 @@ function sharedPaths(a, b) {
           add(other);
       }
     }
-    for (const folder of b.folders) {
-      if (file.key.startsWith(folder.key))
+    for (const folder2 of b.folders) {
+      if (file.key.startsWith(folder2.key))
         add(file);
     }
   }
@@ -1013,19 +1008,19 @@ function liveEdgeCriterionNumbers(criteria) {
   return liveCriterionNumbers(criteria).filter((n) => edge.has(n));
 }
 function specLines(plan, specFiles) {
-  const folder = specFiles.folder;
+  const folder2 = specFiles.folder;
   if (plan.specs === TASK_PLAN_SPECS_NONE)
     return [];
   if (plan.specs === void 0 || plan.specs.length === 0) {
-    return [refusal("C6", taskPlanLineText.C6None(folder))];
+    return [refusal("C6", taskPlanLineText.C6None(folder2))];
   }
   const criteriaOf = specCriteriaBySlug(specFiles);
   const lines = [];
   for (const name of distinct(plan.specs)) {
     if (!isPlanSpecName(name)) {
-      lines.push(refusal("C6", taskPlanLineText.C6Malformed(name, folder)));
+      lines.push(refusal("C6", taskPlanLineText.C6Malformed(name, folder2)));
     } else if ((criteriaOf.get(name) ?? null) === null) {
-      lines.push(refusal("C6", taskPlanLineText.C6Missing(name, folder)));
+      lines.push(refusal("C6", taskPlanLineText.C6Missing(name, folder2)));
     }
   }
   const covered = /* @__PURE__ */ new Set();
@@ -1169,7 +1164,7 @@ function ownershipNotes(plan, specFiles) {
       continue;
     const { files: ownedFiles, folders: ownedFolders } = pathItemsOf(ownPaths);
     const ownedKeys = new Set(ownedFiles.map((f) => f.key));
-    const unowned = pathItemsOf(task.touches?.files ?? []).files.filter((touched) => !ownedKeys.has(touched.key) && !ownedFolders.some((folder) => touched.key.startsWith(folder.key)));
+    const unowned = pathItemsOf(task.touches?.files ?? []).files.filter((touched) => !ownedKeys.has(touched.key) && !ownedFolders.some((folder2) => touched.key.startsWith(folder2.key)));
     if (unowned.length > 0) {
       lines.push(note("N2", taskPlanLineText.N2(task.id, distinct(unowned.map((f) => f.shown)))));
     }
@@ -1212,8 +1207,9 @@ function placementLines(tasks, before) {
     if (q !== void 0)
       batch.set(a, q);
   });
+  const asksForBatches = checkPositions.length > 0 || !isSmallPlan(tasks);
   tasks.forEach((task, a) => {
-    if (build[a] && !batch.has(a))
+    if (asksForBatches && build[a] && !batch.has(a))
       lines.push(refusal("K1", taskPlanLineText.K1(task.id)));
   });
   for (let i = 0; i < checkPositions.length; i += 1) {
@@ -1307,8 +1303,11 @@ function placementLines(tasks, before) {
 function isCriteriaCheck(task) {
   return task.kind === "check" && task.criteriaCheck === true;
 }
-function lacksCriteriaCheck(tasks) {
-  return tasks.some((task) => task.kind === "build") && !tasks.some(isCriteriaCheck);
+function isSmallPlan(tasks) {
+  return tasks.filter((task) => task.kind === "build").length <= SMALL_PLAN_BUILD_TASKS_MAX;
+}
+function printsV1(tasks) {
+  return tasks.some((task) => task.kind === "build") && !tasks.some(isCriteriaCheck) && !isSmallPlan(tasks);
 }
 function mustNameHolder(task) {
   return mustNameParts(task) || isCriteriaCheck(task);
@@ -1329,7 +1328,7 @@ function criteriaCheckLines(tasks, before, record2) {
   const walks = positions((task) => task.kind === "walk");
   const releases = positions((task) => task.ships === "release");
   const exempt = (w) => releases.some((r) => waits(r, w));
-  if (lacksCriteriaCheck(tasks)) {
+  if (printsV1(tasks)) {
     lines.push(refusal("V1", taskPlanLineText.V1()));
   } else {
     const last = [...checks].reverse().find((c) => !checks.some((other) => other !== c && waits(other, c)));
@@ -1348,10 +1347,10 @@ function criteriaCheckLines(tasks, before, record2) {
         const taskWaits = waits(b, c);
         if (!checkWaits && !taskWaits) {
           lines.push(refusal("V3", taskPlanLineText.V3Unordered(cid, bid)));
-        } else if (taskWaits && !fixes.has(bid)) {
+        } else if (taskWaits && !checks.some((other) => other !== c && waits(other, b))) {
           if (tasks[b].ships !== void 0) {
             lines.push(refusal("V3", taskPlanLineText.V3Ships(bid, cid)));
-          } else if (!checks.some((other) => other !== c && waits(other, b))) {
+          } else if (!fixes.has(bid)) {
             lines.push(refusal("V3", taskPlanLineText.V3Unchecked(bid, cid)));
           }
         }
@@ -1480,7 +1479,7 @@ function checkTaskPlan(plan, request) {
   const system = request.system;
   const criteriaOf = specCriteriaBySlug(request.specFiles);
   const phasePlan = request.phasePlan;
-  const noCriteriaCheck = lacksCriteriaCheck(tasks);
+  const v1Prints = printsV1(tasks);
   if (phasePlan !== void 0 && "unusable" in phasePlan) {
     lines.push(refusal("O8", taskPlanLineText.O8Unusable(phasePlan.file, phasePlanUnusableWhy(phasePlan.unusable, request.phase))));
   }
@@ -1546,7 +1545,7 @@ function checkTaskPlan(plan, request) {
           lines.push(line);
       }
     }
-    if (!noCriteriaCheck && mustNameHolder(task) && task.agent === void 0) {
+    if (!v1Prints && mustNameHolder(task) && task.agent === void 0) {
       lines.push(refusal("V4", taskPlanLineText.V4(task.id)));
     }
     const cheap = cheapFirstLine(task, request.crew);
@@ -1601,11 +1600,11 @@ var criteriaRecordLineText = {
   M2: (file, x) => `${file} is from "${x}", which is not a check of the phase against its criteria in the plan. Name the check task that made it.`,
   M3: (file, m, c, k) => `${file} is by ${m}, but "${c}" is held by ${k}. The record names the crew member who holds the check.`,
   M4: (crit) => `${crit} has no row. Check it, and add it as met with what shows it, or as a fix with the gap and the fix task.`,
-  M5: (file, x, folder) => `${file} has a row for "${x}", which is not a live criterion of this phase's features in ${folder}. Remove it, or correct it.`,
+  M5: (file, x, folder2) => `${file} has a row for "${x}", which is not a live criterion of this phase's features in ${folder2}. Remove it, or correct it.`,
   M6: (crit) => `${crit} has more than one row. Keep one.`,
   M7: (crit, x) => `${crit} is fixed by "${x}", but the plan has no build task "${x}" that names ${crit} in its criteria. Add the task, or name it there.`,
-  M8Unmarked: (crit, folder, slug) => `${crit} is not marked an edge case in ${folder}/${slug}.md, so its row does not carry "edge".`,
-  M8Marked: (crit, folder, slug) => `${crit} is marked an edge case in ${folder}/${slug}.md, so its row carries "edge": true.`,
+  M8Unmarked: (crit, folder2, slug) => `${crit} is not marked an edge case in ${folder2}/${slug}.md, so its row does not carry "edge".`,
+  M8Marked: (crit, folder2, slug) => `${crit} is marked an edge case in ${folder2}/${slug}.md, so its row carries "edge": true.`,
   M9Evidence: (crit, t) => `${crit} is an edge case, so it is met only by the test written in "${t}", run on a task that builds it. Give its evidence as a test with "writtenIn": "${t}" and the task that built it.`,
   M9NoTestTask: (crit) => `${crit} is an edge case, and the plan has no task that writes its test, so it cannot be counted as met. Run check-tasks and add that task.`,
   P: (met, fix) => `The record covers every criterion of this phase's features: ${met} met, ${fix} to fix.`
@@ -1647,14 +1646,14 @@ function slugOf(criterion) {
 function refusal2(code, text) {
   return { code, text, refuses: true };
 }
-function edgeRowLines(row, isEdge, testTask, plan, folder) {
+function edgeRowLines(row, isEdge, testTask, plan, folder2) {
   const crit = row.criterion;
   const lines = [];
   const marked = row.edge === true;
   if (marked && !isEdge)
-    lines.push(refusal2("M8", criteriaRecordLineText.M8Unmarked(crit, folder, slugOf(crit))));
+    lines.push(refusal2("M8", criteriaRecordLineText.M8Unmarked(crit, folder2, slugOf(crit))));
   if (!marked && isEdge)
-    lines.push(refusal2("M8", criteriaRecordLineText.M8Marked(crit, folder, slugOf(crit))));
+    lines.push(refusal2("M8", criteriaRecordLineText.M8Marked(crit, folder2, slugOf(crit))));
   if (!isEdge || row.status !== "met")
     return lines;
   if (testTask === null) {
@@ -2161,6 +2160,237 @@ function readyTasks(rows) {
   return { ready: startable.map((entry) => entry.id), person };
 }
 
+// ../core/dist/request-shape.js
+var REQUEST_SHAPES_DIR_NAME = "debug";
+var REQUEST_SHAPES_SWITCH_FILENAME = "request-shapes.on";
+var REQUEST_SHAPES_LOG_FILENAME = "request-shapes.jsonl";
+var REQUEST_SHAPE_MAX_DEPTH = 8;
+var REQUEST_SHAPE_MAX_ARRAY_SHAPES = 10;
+var REQUEST_SHAPE_MAX_KEY_LENGTH = 64;
+var REQUEST_SHAPE_MAX_LINE_BYTES = 16 * 1024;
+var KEY_NAME = /^[A-Za-z][A-Za-z0-9_]*$/;
+var PATH_WORD = /^[a-z-]+$/;
+function byteLength(text) {
+  return new TextEncoder().encode(text).length;
+}
+function keyOf(key) {
+  return key.length <= REQUEST_SHAPE_MAX_KEY_LENGTH && KEY_NAME.test(key) ? key : "<key>";
+}
+function shapeOfValue(value, depth) {
+  if (value === null)
+    return "null";
+  if (typeof value === "string")
+    return "string";
+  if (typeof value === "number")
+    return "number";
+  if (typeof value === "boolean")
+    return "boolean";
+  if (depth > REQUEST_SHAPE_MAX_DEPTH)
+    return "\u2026";
+  if (Array.isArray(value)) {
+    const seen = [];
+    for (const element of value) {
+      if (seen.length >= REQUEST_SHAPE_MAX_ARRAY_SHAPES)
+        break;
+      const shape = shapeOfValue(element, depth + 1);
+      if (!seen.includes(shape))
+        seen.push(shape);
+    }
+    return `[${seen.join("|")}]`;
+  }
+  if (typeof value === "object") {
+    const entries = Object.entries(value);
+    if (entries.length === 0)
+      return "{}";
+    return `{ ${entries.map(([k, v]) => `${keyOf(k)}: ${shapeOfValue(v, depth + 1)}`).join(", ")} }`;
+  }
+  return "null";
+}
+function requestShapeOf(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return `text ${byteLength(body)} bytes`;
+  }
+  return shapeOfValue(parsed, 1);
+}
+function requestPathShapeOf(pathname) {
+  return pathname.split("/").map((segment) => segment === "" || PATH_WORD.test(segment) ? segment : ":x").join("/");
+}
+function distinct2(names) {
+  const out = [];
+  for (const name of names)
+    if (!out.includes(name))
+      out.push(name);
+  return out;
+}
+function isObject(value) {
+  return typeof value === "object" && value !== null;
+}
+function isRequestLike(value) {
+  return isObject(value) && !(value instanceof URL) && typeof value["url"] === "string" && typeof value["method"] === "string";
+}
+function headerNamesOf(headers) {
+  if (!isObject(headers))
+    return [];
+  const names = [];
+  if (Array.isArray(headers)) {
+    for (const pair of headers)
+      if (Array.isArray(pair) && typeof pair[0] === "string")
+        names.push(pair[0].toLowerCase());
+    return names;
+  }
+  const forEach = headers["forEach"];
+  if (typeof forEach === "function") {
+    forEach.call(headers, (_value, key) => {
+      if (typeof key === "string")
+        names.push(key.toLowerCase());
+    });
+    return names;
+  }
+  return Object.keys(headers).map((k) => k.toLowerCase());
+}
+function bytesShape(bytes) {
+  let text;
+  try {
+    text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    return `text ${bytes.byteLength} bytes`;
+  }
+  return requestShapeOf(text);
+}
+function bodyShapeOf(body) {
+  if (body === void 0 || body === null)
+    return null;
+  if (typeof body === "string")
+    return requestShapeOf(body);
+  if (body instanceof URLSearchParams)
+    return `text ${byteLength(body.toString())} bytes`;
+  if (body instanceof ArrayBuffer)
+    return bytesShape(new Uint8Array(body));
+  if (ArrayBuffer.isView(body))
+    return bytesShape(new Uint8Array(body.buffer, body.byteOffset, body.byteLength));
+  if (isObject(body) && typeof body["size"] === "number" && typeof body["arrayBuffer"] === "function") {
+    return `text ${body["size"]} bytes`;
+  }
+  return "stream";
+}
+function requestLineOf(input, init) {
+  const request = isRequestLike(input) ? input : void 0;
+  const address = request !== void 0 ? request.url : input instanceof URL ? input.href : String(input);
+  let url;
+  try {
+    url = new URL(address);
+  } catch {
+    url = void 0;
+  }
+  const options = isObject(init) ? init : {};
+  const method = (typeof options["method"] === "string" ? options["method"] : request?.method ?? "GET").toUpperCase();
+  const headers = distinct2([
+    ...request !== void 0 ? headerNamesOf(request.headers) : [],
+    ...headerNamesOf(options["headers"])
+  ]);
+  const shape = options["body"] !== void 0 && options["body"] !== null ? bodyShapeOf(options["body"]) : request !== void 0 && request.body !== null && request.body !== void 0 ? "stream" : null;
+  return {
+    method,
+    host: url?.host ?? "",
+    path: url !== void 0 ? requestPathShapeOf(url.pathname) : ":x",
+    query: url !== void 0 ? distinct2([...url.searchParams.keys()]) : [],
+    headers,
+    shape
+  };
+}
+function requestShapeLineText(line) {
+  const ordered = (shape) => JSON.stringify({
+    at: line.at,
+    process: line.process,
+    method: line.method,
+    host: line.host,
+    path: line.path,
+    query: line.query,
+    headers: line.headers,
+    shape,
+    status: line.status
+  });
+  const whole = ordered(line.shape);
+  if (byteLength(whole) <= REQUEST_SHAPE_MAX_LINE_BYTES || line.shape === null)
+    return whole;
+  const room = REQUEST_SHAPE_MAX_LINE_BYTES - byteLength(ordered("")) - byteLength("\u2026");
+  if (room <= 0)
+    return ordered("\u2026");
+  let end = Math.min(line.shape.length, room);
+  for (let over = byteLength(line.shape.slice(0, end)) - room; over > 0; over = byteLength(line.shape.slice(0, end)) - room) {
+    end -= over;
+  }
+  const prefix = line.shape.slice(0, Math.max(0, end));
+  const cut = Math.max(prefix.lastIndexOf(", "), prefix.lastIndexOf("|"));
+  return ordered(`${cut > 0 ? prefix.slice(0, cut) : ""}\u2026`);
+}
+
+// dist/request-shapes.js
+var folder = join(homedir(), HALFCYCLE_DIR_NAME, REQUEST_SHAPES_DIR_NAME);
+var logPath = join(folder, REQUEST_SHAPES_LOG_FILENAME);
+var switchedOn = existsSync(join(folder, REQUEST_SHAPES_SWITCH_FILENAME));
+var knownVerbs = [];
+function knowRequestShapeVerbs(verbs) {
+  knownVerbs = verbs;
+}
+function processName() {
+  const verb = process.argv[2];
+  return verb !== void 0 && knownVerbs.includes(verb) ? `cli ${verb}` : "cli other";
+}
+function write(call, status) {
+  if (call === void 0)
+    return;
+  try {
+    const text = requestShapeLineText({ at: (/* @__PURE__ */ new Date()).toISOString(), process: processName(), ...call, status });
+    appendFileSync(logPath, `${text}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function describe(args2) {
+  try {
+    return requestLineOf(args2[0], args2[1]);
+  } catch {
+    return void 0;
+  }
+}
+if (switchedOn) {
+  const original = globalThis.fetch;
+  if (typeof original === "function") {
+    globalThis.fetch = function recordedFetch(...args2) {
+      const call = describe(args2);
+      let answer;
+      try {
+        answer = original.apply(this, args2);
+      } catch (err) {
+        write(call, "unreachable");
+        throw err;
+      }
+      return answer.then((res) => {
+        write(call, res.status);
+        return res;
+      }, (err) => {
+        write(call, "unreachable");
+        throw err;
+      });
+    };
+  }
+}
+
+// dist/bin.js
+import { existsSync as existsSync14, statSync as statSync2, writeSync as writeSync3 } from "node:fs";
+
+// dist/install.js
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync5, lstatSync, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join7, posix as posix2, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
 // ../events/dist/result.js
 import { z as z3 } from "zod";
 var firedGuardSchema = z3.object({
@@ -4083,9 +4313,9 @@ function whereOf(owns) {
     return isBareFileName(lastSegment) ? `in ${pattern}` : `under ${pattern}/`;
   }
   if (lastSegment === "*") {
-    const folder = segments.slice(0, -1).join("/");
-    if (folder !== "" && !hasWildcard(folder))
-      return `in the ${folder} folder`;
+    const folder2 = segments.slice(0, -1).join("/");
+    if (folder2 !== "" && !hasWildcard(folder2))
+      return `in the ${folder2} folder`;
   }
   const prefix = leadingLiteralPrefix(segments);
   if (ownsEverythingUnderPrefix(segments))
@@ -6361,6 +6591,10 @@ var limitHeldSchema = z33.object({
   raiseBy: z33.number().int().nonnegative(),
   working: z33.number().int().nonnegative()
 }).strict();
+var paceUsageSchema = z33.object({
+  used: z33.number().int().nonnegative(),
+  limit: z33.number().int().positive()
+}).strict();
 var paceRunResultSchema = z33.discriminatedUnion("outcome", [
   z33.object({
     outcome: z33.literal("paced"),
@@ -6372,7 +6606,8 @@ var paceRunResultSchema = z33.discriminatedUnion("outcome", [
     keepFreePercent: keepFreePercentSchema.optional(),
     suggestion: paceSuggestionSchema.optional(),
     limit: z33.literal("reached").optional(),
-    limitHeld: limitHeldSchema.optional()
+    limitHeld: limitHeldSchema.optional(),
+    usage: paceUsageSchema.optional()
   }).strict(),
   z33.object({ outcome: z33.literal("not-paced"), reason: z33.enum(PACE_NOT_PACED_REASONS) }).strict()
 ]);
@@ -6463,6 +6698,12 @@ function paceS2Of(window, k, until, now, keepFreePercent) {
 function paceAllowedNowOf(k) {
   return k === 0 ? "Start no more agents now." : `Up to ${String(k)} more ${k === 1 ? "agent" : "agents"} can start now.`;
 }
+function paceBuildUpToOf(n) {
+  return `This build runs up to ${paceAgentsOf(n)} at once.`;
+}
+function limitUsedOf(used, limit) {
+  return `This phase has used ${tokenCountWordsOf(used)} of its limit of ${tokenCountWordsOf(limit)}.`;
+}
 var PACE_AGENTS_TOO_MANY = `Run at most ${String(PACE_AGENTS_MAX)} agents at once.`;
 var LIMIT_HISTORY_MAX = 20;
 var LIMIT_PARTS = ["half", "three-quarters", "nine-tenths", "limit"];
@@ -6821,9 +7062,13 @@ function routeStartLineOf(holder, task, tier) {
 function routeStartUnknownLineOf(holder, task) {
   return `Start ${holder} on ${task}.`;
 }
+function routePassedLineOf(task, tier) {
+  return `${task} has passed its review, built on the ${tier} tier. There is nothing to start.`;
+}
 function routeNoSuchTaskLineOf(task) {
   return `"${task}" is not a task in the plan. Check the task id, then run this again.`;
 }
+var ROUTING_FILENAME = "routing.json";
 var routingRecordSchema = z36.object({
   phase: z36.string().min(1).max(200),
   cheapStarted: z36.array(z36.string().min(1).max(200)).max(2e3)
@@ -6879,20 +7124,26 @@ function seenModelsLineOf(task, models) {
   return `Seen in your coding agent's own records: ${task} ran on ${joinedOf(models)}.`;
 }
 
+// ../events/dist/checks-report-words.js
+var CHECKS_NO_REPORT_YET_STATE = "Set up, no report yet";
+var CHECKS_NO_REPORT_YET_WHEN = "Halfcycle's checks report after the first file edit they can see. A new shell file counts once added to git.";
+var CHECKS_IF_STILL_UNREPORTED = "If edits go unreported: Codex, approve /hooks; Claude Code, trust this folder.";
+var CHECKS_GONE_QUIET = "Halfcycle's checks have not reported from this machine lately.";
+
 // dist/engagement-credential.js
 import { chmodSync as chmodSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 
 // dist/account-credential.js
 import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir, platform } from "node:os";
-import { dirname, join } from "node:path";
+import { homedir as homedir2, platform } from "node:os";
+import { dirname, join as join2 } from "node:path";
 function halfcycleHome(home) {
-  return join(home ?? homedir(), HALFCYCLE_DIR_NAME);
+  return join2(home ?? homedir2(), HALFCYCLE_DIR_NAME);
 }
 function accountStorePath(home) {
-  return join(halfcycleHome(home), ACCOUNT_STORE_FILENAME);
+  return join2(halfcycleHome(home), ACCOUNT_STORE_FILENAME);
 }
 function readStore(home) {
   try {
@@ -6958,13 +7209,13 @@ function assertEngagementId(engagementId) {
 }
 function engagementStateDir(engagementId, home) {
   assertEngagementId(engagementId);
-  return join2(halfcycleHome(home), ENGAGEMENTS_DIR, engagementId);
+  return join3(halfcycleHome(home), ENGAGEMENTS_DIR, engagementId);
 }
 function engagementEnvPath(engagementId, home) {
-  return join2(engagementStateDir(engagementId, home), ENV_FILENAME);
+  return join3(engagementStateDir(engagementId, home), ENV_FILENAME);
 }
 function notThisAccountMarkerPath(engagementId, home) {
-  return join2(engagementStateDir(engagementId, home), NOT_THIS_ACCOUNT_MARKER_FILENAME);
+  return join3(engagementStateDir(engagementId, home), NOT_THIS_ACCOUNT_MARKER_FILENAME);
 }
 function writeNotThisAccountMarker(engagementId, home) {
   const dir = engagementStateDir(engagementId, home);
@@ -7089,8 +7340,8 @@ halfcycle_env_file() {
 
 // dist/identity.js
 import { execFileSync } from "node:child_process";
-import { existsSync, linkSync, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname2, isAbsolute, join as join3 } from "node:path";
+import { existsSync as existsSync2, linkSync, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname2, isAbsolute, join as join4 } from "node:path";
 import { randomUUID } from "node:crypto";
 var PROJECT_IDENTITY_NOTE = 'projectId is NOT the engagement id \u2014 it identifies this repository/worktree to Halfcycle, not an engagement. The engagement id lives in .halfcycle/bundle.json, in its "engagementId" field.';
 var PROJECT_IDENTITY_REL = ".halfcycle/project.json";
@@ -7221,7 +7472,7 @@ function readIgnoredPaths(targetRepoRoot, paths) {
   const toplevel = git(targetRepoRoot, ["rev-parse", "--show-toplevel"]);
   if (toplevel === null)
     return null;
-  return ignored.map((entry) => isAbsolute(entry.source) ? entry : { ...entry, source: join3(toplevel, entry.source) });
+  return ignored.map((entry) => isAbsolute(entry.source) ? entry : { ...entry, source: join4(toplevel, entry.source) });
 }
 function mintIdentity(targetRepoRoot) {
   return {
@@ -7232,7 +7483,7 @@ function mintIdentity(targetRepoRoot) {
   };
 }
 function plannedRemoteRepair(targetRepoRoot) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
   let onDisk;
   try {
     const parsed = JSON.parse(readFileSync3(path, "utf-8"));
@@ -7254,7 +7505,7 @@ function plannedRemoteRepair(targetRepoRoot) {
   });
 }
 function replaceProjectIdentityFile(targetRepoRoot, text) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
   const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
   try {
     writeFileSync3(temporary, text, { encoding: "utf-8", flag: "wx" });
@@ -7265,8 +7516,8 @@ function replaceProjectIdentityFile(targetRepoRoot, text) {
   }
 }
 function planProjectIdentity(targetRepoRoot) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
-  if (!existsSync(path)) {
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
+  if (!existsSync2(path)) {
     return { action: "add", after: serializeProjectIdentity(mintIdentity(targetRepoRoot)) };
   }
   const repaired = plannedRemoteRepair(targetRepoRoot);
@@ -7284,7 +7535,7 @@ function serializeProjectIdentity(identity) {
   return JSON.stringify(identity, null, 2) + "\n";
 }
 function createProjectIdentityFile(targetRepoRoot, text) {
-  const path = join3(targetRepoRoot, PROJECT_IDENTITY_REL);
+  const path = join4(targetRepoRoot, PROJECT_IDENTITY_REL);
   mkdirSync3(dirname2(path), { recursive: true });
   const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
   try {
@@ -7304,8 +7555,8 @@ function createProjectIdentityFile(targetRepoRoot, text) {
 }
 
 // dist/install-plan.js
-import { existsSync as existsSync3, readFileSync as readFileSync5 } from "node:fs";
-import { join as join5, posix } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "node:fs";
+import { join as join6, posix } from "node:path";
 
 // dist/install-manifest.js
 import { Buffer as Buffer2 } from "node:buffer";
@@ -7656,8 +7907,8 @@ function union(a, b) {
 }
 
 // dist/scan.js
-import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join4 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join5 } from "node:path";
 var HALFCYCLE_STATE_FORMAT = "halfcycle-state-file/v1";
 var HALFCYCLE_STATE_NOTE = [
   "This file is a local cache written ONCE when Halfcycle was installed. It is not a",
@@ -7680,7 +7931,7 @@ var LAYER_ARTEFACT_PATHS = {
 function scanLayers(targetRepo, scannedAt = (/* @__PURE__ */ new Date()).toISOString()) {
   const layers = {};
   for (const [layer, paths] of Object.entries(LAYER_ARTEFACT_PATHS)) {
-    const found = paths.filter((p) => existsSync2(join4(targetRepo, p)));
+    const found = paths.filter((p) => existsSync3(join5(targetRepo, p)));
     if (found.length > 0) {
       layers[layer] = {
         value: "asserted",
@@ -7694,8 +7945,8 @@ function scanLayers(targetRepo, scannedAt = (/* @__PURE__ */ new Date()).toISOSt
 }
 var BOOTSTRAP_STATE_REL = ".halfcycle/state.json";
 function planBootstrapScan(targetRepo) {
-  const statePath = join4(targetRepo, BOOTSTRAP_STATE_REL);
-  if (existsSync2(statePath)) {
+  const statePath = join5(targetRepo, BOOTSTRAP_STATE_REL);
+  if (existsSync3(statePath)) {
     const existing = JSON.parse(readFileSync4(statePath, "utf-8"));
     return { state: existing, text: null };
   }
@@ -7703,8 +7954,8 @@ function planBootstrapScan(targetRepo) {
   return { state, text: JSON.stringify(state, null, 2) + "\n" };
 }
 function writeBootstrapState(targetRepo, text) {
-  mkdirSync4(join4(targetRepo, ".halfcycle"), { recursive: true });
-  writeFileSync4(join4(targetRepo, BOOTSTRAP_STATE_REL), text, "utf-8");
+  mkdirSync4(join5(targetRepo, ".halfcycle"), { recursive: true });
+  writeFileSync4(join5(targetRepo, BOOTSTRAP_STATE_REL), text, "utf-8");
 }
 
 // dist/install-plan.js
@@ -7854,12 +8105,12 @@ function planInstall(options) {
       throw new Error("[halfcycle] a plan for a project needs its kind as well as its id.");
     }
   }
-  if (!existsSync3(targetRepo)) {
+  if (!existsSync4(targetRepo)) {
     throw new Error(`[halfcycle] Target repo does not exist: ${targetRepo}`);
   }
   const writeSet = closedWriteSet();
   const previous = readPreviousManifest(targetRepo);
-  const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync3(join5(targetRepo, dir))));
+  const dirsBefore = new Set([...writeSet.dirs].filter((dir) => existsSync4(join6(targetRepo, dir))));
   const { version, commands } = planCommandStubs(targetRepo, previous, writeSet);
   const codexSkills = planCodexSkills(targetRepo, previous, writeSet);
   const vendored = planVendoredBinary(targetRepo);
@@ -7881,7 +8132,7 @@ function planInstall(options) {
   const gitattributes = planGitattributes(targetRepo);
   const identity = planProjectIdentity(targetRepo);
   if (identity.after === null)
-    readFileSync5(join5(targetRepo, PROJECT_IDENTITY_REL));
+    readFileSync5(join6(targetRepo, PROJECT_IDENTITY_REL));
   const credentialPlan = !preview && credential !== void 0 ? planEngagementCredential(credential, engagementId, home) : null;
   const credentialWrite = credentialPlan === null ? null : { outcome: credentialPlan.outcome, existed: credentialPlan.existed, path: engagementEnvPath(engagementId, home) };
   const storedAfter = credentialPlan?.storedAfter ?? (preview ? Object.fromEntries(ENGAGEMENT_ENV_KEYS.map((key) => [key, "supplied at sign-in"])) : readEngagementEnv(engagementId, home) ?? {});
@@ -8014,7 +8265,7 @@ function entriesOf(steps, record2) {
     }
   };
   const pending = (rel) => {
-    const there = existsSync3(join5(targetRepo, rel));
+    const there = existsSync4(join6(targetRepo, rel));
     entries.push({ path: rel, action: there ? "change" : "add", kind: kindOf(rel), bytes: PENDING });
   };
   steps.commands.forEach(fromFile);
@@ -8062,7 +8313,7 @@ function entriesOf(steps, record2) {
         action: "leave",
         kind: "codex-server",
         bytes: null,
-        ...existsSync3(join5(targetRepo, CODEX_CONFIG_REL2)) ? { yours: true } : {}
+        ...existsSync4(join6(targetRepo, CODEX_CONFIG_REL2)) ? { yours: true } : {}
       });
       break;
   }
@@ -8103,11 +8354,11 @@ function outsideOf(steps) {
       outside.push({ kind: "new-project" });
     return outside;
   }
-  const write = steps.credentialWrite;
-  if (write === null)
+  const write2 = steps.credentialWrite;
+  if (write2 === null)
     return [];
-  const action = write.outcome === "skipped" ? "leave" : write.existed ? "change" : "add";
-  return [{ kind: "sign-in", path: write.path, action }];
+  const action = write2.outcome === "skipped" ? "leave" : write2.existed ? "change" : "add";
+  return [{ kind: "sign-in", path: write2.path, action }];
 }
 function projectPinned(targetRepo) {
   try {
@@ -8141,10 +8392,10 @@ function applyInstallPlan(plan) {
   putPlannedCodexHooks(targetRepo, steps.codexHooks);
   putPlannedCodexConfig(targetRepo, steps.codexConfig);
   const gitignore = putPlannedGitignore(targetRepo, steps.gitignore);
-  const gitignorePath = join5(targetRepo, GITIGNORE_REL);
-  const gitignoreAfter = existsSync3(gitignorePath) ? readFileSync5(gitignorePath, "utf-8") : null;
+  const gitignorePath = join6(targetRepo, GITIGNORE_REL);
+  const gitignoreAfter = existsSync4(gitignorePath) ? readFileSync5(gitignorePath, "utf-8") : null;
   const gitattributes = putPlannedGitattributes(targetRepo, steps.gitattributes);
-  const gitattributesAfter = readTextOrNull(join5(targetRepo, GITATTRIBUTES_REL));
+  const gitattributesAfter = readTextOrNull(join6(targetRepo, GITATTRIBUTES_REL));
   writeProjectIdentity(targetRepo, steps.identity);
   const credential = steps.credential;
   const credentialOutcome = steps.credentialWrite !== null && credential !== void 0 ? writeEngagementCredential(credential, engagementId, steps.home) : null;
@@ -8165,9 +8416,9 @@ function applyInstallPlan(plan) {
     gitattributesAfter,
     credential: credentialOutcome,
     legacy,
-    bytesAfter: (rel) => readFileSync5(join5(targetRepo, rel)),
-    dirExistsAfter: (dir) => existsSync3(join5(targetRepo, dir)),
-    stateExistsAfter: existsSync3(join5(targetRepo, BOOTSTRAP_STATE_REL))
+    bytesAfter: (rel) => readFileSync5(join6(targetRepo, rel)),
+    dirExistsAfter: (dir) => existsSync4(join6(targetRepo, dir)),
+    stateExistsAfter: existsSync4(join6(targetRepo, BOOTSTRAP_STATE_REL))
   });
   const record2 = planInstallRecord(targetRepo, manifestText);
   putPlannedFile(targetRepo, record2);
@@ -8524,10 +8775,10 @@ function crewProfileRel(agent, callsign) {
   return agent === "claude-code" ? `${CLAUDE_AGENTS_DIR}/${callsign}.md` : `${CODEX_AGENTS_DIR}/${callsign.toLowerCase()}.toml`;
 }
 function crewProfileTarget(targetRepo, rel) {
-  const folder = rel.startsWith(`${CLAUDE_AGENTS_DIR}/`) ? CLAUDE_AGENTS_DIR : CODEX_AGENTS_DIR;
-  const target = resolve(join6(targetRepo, rel));
-  if (dirname3(target) !== resolve(targetRepo, folder)) {
-    throw new Error(`[halfcycle] crew profile "${rel}" does not sit directly in ${folder}.`);
+  const folder2 = rel.startsWith(`${CLAUDE_AGENTS_DIR}/`) ? CLAUDE_AGENTS_DIR : CODEX_AGENTS_DIR;
+  const target = resolve(join7(targetRepo, rel));
+  if (dirname3(target) !== resolve(targetRepo, folder2)) {
+    throw new Error(`[halfcycle] crew profile "${rel}" does not sit directly in ${folder2}.`);
   }
   return target;
 }
@@ -8614,35 +8865,35 @@ var __dirname = dirname3(__filename);
 function findBundleRoot(startDir) {
   let candidate = startDir;
   for (let i = 0; i < 4; i++) {
-    const manifest = join6(candidate, ".claude-plugin", "plugin.json");
+    const manifest = join7(candidate, ".claude-plugin", "plugin.json");
     try {
-      if (existsSync4(manifest))
+      if (existsSync5(manifest))
         return candidate;
     } catch {
     }
     candidate = dirname3(candidate);
   }
-  return join6(startDir, "..");
+  return join7(startDir, "..");
 }
 var BUNDLE_ROOT = findBundleRoot(__dirname);
 function resolveVendoredBinary() {
   const candidates = [
-    join6(BUNDLE_ROOT, "bin", "bin.bundle.mjs"),
-    join6(BUNDLE_ROOT, "..", "runner", "dist", "bin.bundle.mjs")
+    join7(BUNDLE_ROOT, "bin", "bin.bundle.mjs"),
+    join7(BUNDLE_ROOT, "..", "runner", "dist", "bin.bundle.mjs")
   ];
   for (const candidate of candidates) {
-    if (existsSync4(candidate))
+    if (existsSync5(candidate))
       return candidate;
   }
   throw new Error(`[halfcycle] Cannot find the self-contained guard binary bin.bundle.mjs. This copy of the halfcycle package is incomplete \u2014 reinstall it, or rebuild it if you are working on it. Looked in: ${candidates.join(", ")}.`);
 }
 function resolvePreFilterShell() {
   const candidates = [
-    join6(BUNDLE_ROOT, "bin", PRE_FILTER_SHELL_FILENAME),
-    join6(BUNDLE_ROOT, "..", "runner", "dist", PRE_FILTER_SHELL_FILENAME)
+    join7(BUNDLE_ROOT, "bin", PRE_FILTER_SHELL_FILENAME),
+    join7(BUNDLE_ROOT, "..", "runner", "dist", PRE_FILTER_SHELL_FILENAME)
   ];
   for (const candidate of candidates) {
-    if (existsSync4(candidate))
+    if (existsSync5(candidate))
       return readFileSync6(candidate, "utf-8");
   }
   throw new Error(`[halfcycle] Cannot find ${PRE_FILTER_SHELL_FILENAME}. This copy of the halfcycle package is incomplete \u2014 reinstall it, or rebuild it if you are working on it. Looked in: ${candidates.join(", ")}.`);
@@ -8682,7 +8933,7 @@ function isAllowlisted(targetRelPath) {
 var CREW_ROSTER_REL = ".halfcycle/crew.json";
 var CAPTURED_INDEX_REL = "test/fixtures/captured/manifest.json";
 function capturedIndexScaffold() {
-  return join6(BUNDLE_ROOT, "scaffolding", "test", "fixtures", "captured", "manifest.json");
+  return join7(BUNDLE_ROOT, "scaffolding", "test", "fixtures", "captured", "manifest.json");
 }
 var GITIGNORE_REL = ".gitignore";
 var GITATTRIBUTES_REL = ".gitattributes";
@@ -8757,13 +9008,13 @@ function closedWriteSet() {
 function sha256OfWhatThisVersionWrites(commands) {
   const out = /* @__PURE__ */ new Map();
   const fromFile = (rel, src) => {
-    if (existsSync4(src))
+    if (existsSync5(src))
       out.set(rel, fileSha256(readFileSync6(src)));
   };
   for (const cmd of commands) {
-    const srcFile = join6(BUNDLE_ROOT, ".claude-plugin", cmd.path);
+    const srcFile = join7(BUNDLE_ROOT, ".claude-plugin", cmd.path);
     fromFile(commandStubRel(cmd.name), srcFile);
-    if (existsSync4(srcFile)) {
+    if (existsSync5(srcFile)) {
       out.set(skillRel(cmd.name), fileSha256(Buffer.from(codexSkillContent(cmd.name, readFileSync6(srcFile, "utf-8")), "utf-8")));
     }
   }
@@ -8781,7 +9032,7 @@ function bytesAreOurs(path, bytes, recorded, writeSet) {
 }
 function readPreviousManifest(targetRepo) {
   try {
-    return parseManifest(readFileSync6(join6(targetRepo, INSTALL_MANIFEST_REL), "utf-8"));
+    return parseManifest(readFileSync6(join7(targetRepo, INSTALL_MANIFEST_REL), "utf-8"));
   } catch {
     return null;
   }
@@ -8885,8 +9136,8 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
     for (let dir = posix2.dirname(rel); dir !== "."; dir = posix2.dirname(dir)) {
       let plain = dirVerdicts.get(dir);
       if (plain === void 0) {
-        const abs = join6(targetRepo, dir);
-        plain = !lstatOrNull(abs)?.isSymbolicLink() && lstatOrNull(join6(abs, ".git")) === null;
+        const abs = join7(targetRepo, dir);
+        plain = !lstatOrNull(abs)?.isSymbolicLink() && lstatOrNull(join7(abs, ".git")) === null;
         dirVerdicts.set(dir, plain);
       }
       if (!plain)
@@ -8900,7 +9151,7 @@ function findNotShared(targetRepo, manifest, collidedPaths) {
       ...merged,
       INSTALL_MANIFEST_REL
     ])
-  ].filter((rel) => !collided.has(rel)).filter((rel) => lstatOrNull(join6(targetRepo, rel)) !== null).filter(travelsThroughPlainDirs).sort();
+  ].filter((rel) => !collided.has(rel)).filter((rel) => lstatOrNull(join7(targetRepo, rel)) !== null).filter(travelsThroughPlainDirs).sort();
   const ignored = readIgnoredPaths(targetRepo, paths);
   if (ignored === null)
     return null;
@@ -8932,7 +9183,7 @@ function isPlainObject2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function readPluginManifest() {
-  const manifestPath = join6(BUNDLE_ROOT, ".claude-plugin", "plugin.json");
+  const manifestPath = join7(BUNDLE_ROOT, ".claude-plugin", "plugin.json");
   const raw = readFileSync6(manifestPath, "utf-8");
   return JSON.parse(raw);
 }
@@ -8988,14 +9239,14 @@ ${transformed}`;
 function planManifestCommands(manifest, targetRepo, previous, writeSet) {
   const recordedFiles = new Map((previous?.files ?? []).filter((file) => writeSet.files.has(file.path)).map((file) => [file.path, file]));
   return (manifest.commands ?? []).map((cmd) => {
-    const srcFile = join6(BUNDLE_ROOT, ".claude-plugin", cmd.path);
-    if (!existsSync4(srcFile)) {
+    const srcFile = join7(BUNDLE_ROOT, ".claude-plugin", cmd.path);
+    if (!existsSync5(srcFile)) {
       throw new Error(`[halfcycle] plugin.json declares command "${cmd.name}" at "${cmd.path}", but no file exists there (${srcFile}). The manifest and commands/ must agree.`);
     }
     const rel = commandStubRel(cmd.name);
     const content = readFileSync6(srcFile, "utf-8");
     const recorded = recordedFiles.get(rel);
-    const planned = decideCollisionSafe(join6(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
+    const planned = decideCollisionSafe(join7(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
     return { ...planned, editedCollided: planned.outcome === "collided" && recorded !== void 0 };
   });
 }
@@ -9005,7 +9256,7 @@ function putPlannedFile(targetRepoRoot, planned) {
   if (!isAllowlisted(planned.rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${planned.rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  const target = join6(targetRepoRoot, planned.rel);
+  const target = join7(targetRepoRoot, planned.rel);
   mkdirSync5(dirname3(target), { recursive: true });
   writeFileSync5(target, planned.text, "utf-8");
 }
@@ -9025,7 +9276,7 @@ function decideCollisionSafe(targetAbsPath, targetRepoRoot, content, isOurs) {
   if (!isAllowlisted(rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  const current = existsSync4(targetAbsPath) ? readFileSync6(targetAbsPath) : null;
+  const current = existsSync5(targetAbsPath) ? readFileSync6(targetAbsPath) : null;
   const text = inLineEndingOf(current?.toString("utf-8") ?? null, content);
   if (current === null)
     return { rel, text, outcome: "written", replacedExisting: false };
@@ -9053,7 +9304,7 @@ function decideOwned(targetAbsPath, targetRepoRoot, content) {
   const text = inLineEndingOf(current, content);
   if (current === text)
     return { rel, text, outcome: "skipped", replacedExisting: false };
-  return { rel, text, outcome: "written", replacedExisting: existsSync4(targetAbsPath) };
+  return { rel, text, outcome: "written", replacedExisting: existsSync5(targetAbsPath) };
 }
 var GENERATED_HEADER_LINE_INDEX = 1;
 function decideOwnedGenerated(targetAbsPath, targetRepoRoot, content, generatedMarker) {
@@ -9061,7 +9312,7 @@ function decideOwnedGenerated(targetAbsPath, targetRepoRoot, content, generatedM
   if (!isAllowlisted(rel)) {
     throw new Error(`[halfcycle] Write-allowlist violation: attempted to write "${rel}". Only the method surface and scaffolding paths are writable.`);
   }
-  if (!existsSync4(targetAbsPath))
+  if (!existsSync5(targetAbsPath))
     return { rel, text: content, outcome: "written", replacedExisting: false };
   const current = readFileSync6(targetAbsPath, "utf-8");
   if (current === content)
@@ -9079,7 +9330,7 @@ function recordOwnedGenerated(report, planned) {
   return planned.outcome;
 }
 function recordOwned(report, targetAbsPath, targetRepoRoot, content, rel) {
-  const existedBefore = existsSync4(targetAbsPath);
+  const existedBefore = existsSync5(targetAbsPath);
   const outcome = writeOwned(targetAbsPath, targetRepoRoot, content);
   record(report, outcome, rel);
   if (outcome === "written" && existedBefore)
@@ -9101,8 +9352,8 @@ var DENY_PATTERNS = [
 ];
 var USER_PROMPT_REMINDER_SENTENCE = "Where this project stands, and what order to work in, is recorded in the Halfcycle service and nowhere in this repository \u2014 call halfcycle_resolve before you answer or plan, because the files here will look complete and current and still be wrong about position.";
 function readExistingSettings(targetRepo) {
-  const settingsPath = join6(targetRepo, SETTINGS_REL);
-  return existsSync4(settingsPath) ? JSON.parse(readFileSync6(settingsPath, "utf-8")) : void 0;
+  const settingsPath = join7(targetRepo, SETTINGS_REL);
+  return existsSync5(settingsPath) ? JSON.parse(readFileSync6(settingsPath, "utf-8")) : void 0;
 }
 var SettingsParseRefused = class extends Error {
   constructor(message) {
@@ -9111,7 +9362,7 @@ var SettingsParseRefused = class extends Error {
   }
 };
 function settingsParseRefusal(targetRepo, err) {
-  const file = join6(targetRepo, SETTINGS_REL);
+  const file = join7(targetRepo, SETTINGS_REL);
   const offset = /position (\d+)/.exec(err instanceof Error ? err.message : "")?.[1];
   let where = "";
   if (offset !== void 0) {
@@ -9125,15 +9376,15 @@ var HALFCYCLE_STATUS_LINE = Object.freeze({
   type: "command",
   command: 'bash "$CLAUDE_PROJECT_DIR"/.claude/hooks/guard-runner.sh statusline'
 });
-function statusLineSetElsewhere(targetRepo, home = homedir2(), env = process.env) {
-  const places = [join6(targetRepo, ".claude", "settings.local.json"), join6(home, ".claude", "settings.json")];
+function statusLineSetElsewhere(targetRepo, home = homedir3(), env = process.env) {
+  const places = [join7(targetRepo, ".claude", "settings.local.json"), join7(home, ".claude", "settings.json")];
   const configDir = env["CLAUDE_CONFIG_DIR"];
   if (configDir !== void 0 && configDir !== "") {
-    const expanded = configDir === "~" ? home : configDir.startsWith("~/") ? join6(home, configDir.slice(2)) : configDir;
-    places.push(join6(isAbsolute2(expanded) ? expanded : resolve(expanded), "settings.json"));
+    const expanded = configDir === "~" ? home : configDir.startsWith("~/") ? join7(home, configDir.slice(2)) : configDir;
+    places.push(join7(isAbsolute2(expanded) ? expanded : resolve(expanded), "settings.json"));
   }
   return places.some((path) => {
-    if (!existsSync4(path))
+    if (!existsSync5(path))
       return false;
     let value;
     try {
@@ -9478,7 +9729,8 @@ ${GENERATED_USER_PROMPT_SCOPE_HEADER} the Halfcycle installer, now also for the
 # <phase>/<part>", "question <phase>/<part>: <words>", "carry <phase>/<part>:
 # <words>", "drop <phase>/<part>: <words>", "reject <phase>/<task>: <words>",
 # "autonomy on" or "autonomy off". Also lets the person who is typing let one
-# step Halfcycle paused run once, by typing "allow" as the whole prompt, and change
+# step Halfcycle paused run once, by typing "allow", or "allow" and the step's
+# number ("allow 2"), as the whole prompt, and change
 # how a build is paced, by typing "faster", "run 5 agents", "keep 30% free" or
 # "use up to 70%" as the whole prompt, and answer a phase's usage limit by
 # typing "keep going", "stop", "limit it to 1.5 times" or "limit it to 300
@@ -9488,7 +9740,8 @@ ${GENERATED_USER_PROMPT_SCOPE_HEADER} the Halfcycle installer, now also for the
 # looks only at the start of the prompt's value. Unless the prompt begins, after
 # any whitespace (typed, or escaped in the input), with "approve ", "send back ",
 # "accept ", "question ", "carry ", "drop ", "reject " or "autonomy ", in any case,
-# or is "allow", one of the five pacing phrases or one of the usage-limit phrases
+# or is "allow" (alone, or with spaces and a number of up to four digits), one
+# of the five pacing phrases or one of the usage-limit phrases
 # and nothing else but whitespace,
 # it exits 0 with no output, and Node never starts. A quote inside any other field arrives
 # escaped, so no other field (the folder the session is in, for one) can read as
@@ -9516,7 +9769,7 @@ IFS= read -r -d '' HC_INPUT || true
 # \\u escape, or as the UTF-8 bytes of a Unicode space. Compared byte for byte.
 HC_LEAD='[[:space:]]|\\\\[nrtf]|\\\\u(000[9a-d]|0020|00a0|1680|200[0-9a]|202[89f]|205f|3000|feff)'
 HC_LEAD="$HC_LEAD|"$'\\xc2\\xa0|\\xe1\\x9a\\x80|\\xe2\\x80[\\x80-\\x8a\\xa8\\xa9\\xaf]|\\xe2\\x81\\x9f|\\xe3\\x80\\x80|\\xef\\xbb\\xbf'
-if ! printf '%s' "$HC_INPUT" | LC_ALL=C grep -Eiq "\\"prompt\\"[[:space:]]*:[[:space:]]*\\"($HC_LEAD)*((approve|send back|accept|question|carry|drop|reject|autonomy|decline) |allow($HC_LEAD)*\\"|(faster|go faster|run [0-9]{1,3} agents?|keep [0-9]{1,3}% free|use up to [0-9]{1,3}%|keep going|stop|stop here|limit it to [0-9]{1,9}(\\.[0-9]{1,2})? (times|million|billion|million tokens|billion tokens))($HC_LEAD)*\\")"; then
+if ! printf '%s' "$HC_INPUT" | LC_ALL=C grep -Eiq "\\"prompt\\"[[:space:]]*:[[:space:]]*\\"($HC_LEAD)*((approve|send back|accept|question|carry|drop|reject|autonomy|decline) |allow( +[0-9]{1,4})?($HC_LEAD)*\\"|(faster|go faster|run [0-9]{1,3} agents?|keep [0-9]{1,3}% free|use up to [0-9]{1,3}%|keep going|stop|stop here|limit it to [0-9]{1,9}(\\.[0-9]{1,2})? (times|million|billion|million tokens|billion tokens))($HC_LEAD)*\\")"; then
   exit 0
 fi
 
@@ -9609,8 +9862,8 @@ function removeRetiredGeneratedFile(targetRepo, rel, headerLineIndex, knownHeade
   return decided === "removed" ? removePlannedRetiredFile(targetRepo, rel) : decided;
 }
 function decideRetiredRemoval(targetRepo, rel, headerLineIndex, knownHeaderHashes) {
-  const path = join6(targetRepo, rel);
-  if (!existsSync4(path))
+  const path = join7(targetRepo, rel);
+  if (!existsSync5(path))
     return "absent";
   let raw;
   try {
@@ -9628,7 +9881,7 @@ function decideRetiredRemoval(targetRepo, rel, headerLineIndex, knownHeaderHashe
 }
 function removePlannedRetiredFile(targetRepo, rel) {
   try {
-    rmSync2(join6(targetRepo, rel));
+    rmSync2(join7(targetRepo, rel));
   } catch {
     return "failed";
   }
@@ -10004,9 +10257,9 @@ function gitignoreCovers(content) {
   return REQUIRED_GITIGNORE_ENTRIES.every((entry) => lines.has(entry));
 }
 function planGitignore(targetRepo) {
-  const gitignorePath = join6(targetRepo, GITIGNORE_REL);
+  const gitignorePath = join7(targetRepo, GITIGNORE_REL);
   const header = GITIGNORE_HEADER;
-  const before = existsSync4(gitignorePath) ? readFileSync6(gitignorePath, "utf-8") : null;
+  const before = existsSync5(gitignorePath) ? readFileSync6(gitignorePath, "utf-8") : null;
   if (before === null) {
     return { before, after: [header, ...REQUIRED_GITIGNORE_ENTRIES].join("\n") + "\n", outcome: "written" };
   }
@@ -10022,7 +10275,7 @@ function putPlannedGitignore(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.after === null)
     return planned.outcome;
   try {
-    writeFileSync5(join6(targetRepo, GITIGNORE_REL), planned.after, "utf-8");
+    writeFileSync5(join7(targetRepo, GITIGNORE_REL), planned.after, "utf-8");
     return "written";
   } catch {
     return "failed";
@@ -10041,12 +10294,12 @@ function lfRules(paths) {
 }
 var REQUIRED_GITATTRIBUTES_RULES = lfRules(Object.keys(OWNED_GENERATED_HEADERS));
 function planGitattributes(targetRepo) {
-  const path = join6(targetRepo, GITATTRIBUTES_REL);
+  const path = join7(targetRepo, GITATTRIBUTES_REL);
   const rules = REQUIRED_GITATTRIBUTES_RULES;
   const before = readTextOrNull(path);
   if (lstatOrNull(path)?.isSymbolicLink() === true)
     return { before, after: before, outcome: "failed" };
-  if (!existsSync4(path)) {
+  if (!existsSync5(path)) {
     return { before, after: [GITATTRIBUTES_HEADER, ...rules].join("\n") + "\n", outcome: "written" };
   }
   if (before === null)
@@ -10064,7 +10317,7 @@ function putPlannedGitattributes(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.after === null)
     return planned.outcome;
   try {
-    writeAllowlisted(join6(targetRepo, GITATTRIBUTES_REL), targetRepo, planned.after, []);
+    writeAllowlisted(join7(targetRepo, GITATTRIBUTES_REL), targetRepo, planned.after, []);
     return "written";
   } catch {
     return "failed";
@@ -10098,7 +10351,7 @@ function planBundlePin(targetRepoRoot, version, engagementId, engagementType, cr
     ...carriedMethodVersion !== void 0 ? { methodVersion: carriedMethodVersion } : {},
     ...projectPage !== void 0 ? { projectPage } : {}
   };
-  const current = readFileOrNull(join6(targetRepoRoot, BUNDLE_PIN_REL));
+  const current = readFileOrNull(join7(targetRepoRoot, BUNDLE_PIN_REL));
   const text = inLineEndingOf(current, JSON.stringify(pin, null, 2) + "\n");
   return {
     rel: BUNDLE_PIN_REL,
@@ -10129,7 +10382,7 @@ function planBundlePinPreview(targetRepoRoot, version, home) {
   return planBundlePin(targetRepoRoot, version, existing.engagementId, existing.engagementType, void 0, void 0);
 }
 function writeBundlePin(targetRepoRoot, planned, writtenPaths) {
-  const pinPath = join6(targetRepoRoot, BUNDLE_PIN_REL);
+  const pinPath = join7(targetRepoRoot, BUNDLE_PIN_REL);
   writeAllowlisted(pinPath, targetRepoRoot, planned.text, writtenPaths);
 }
 function updatePinnedMethodVersion(repoRoot, engagementId, version) {
@@ -10141,7 +10394,7 @@ function updatePinnedMethodVersion(repoRoot, engagementId, version) {
   }
   if (pin === null || pin.engagementId !== engagementId)
     return;
-  const pinPath = join6(repoRoot, BUNDLE_PIN_REL);
+  const pinPath = join7(repoRoot, BUNDLE_PIN_REL);
   const updated = { ...pin, methodVersion: version };
   const pinText = inLineEndingOf(readFileOrNull(pinPath), JSON.stringify(updated, null, 2) + "\n");
   try {
@@ -10161,15 +10414,15 @@ function renderCrewRoster() {
 }
 function writeCrewRoster(targetRepoRoot, report) {
   const rendered = renderCrewRoster();
-  const crewPath = join6(targetRepoRoot, CREW_ROSTER_REL);
+  const crewPath = join7(targetRepoRoot, CREW_ROSTER_REL);
   return recordOwned(report, crewPath, targetRepoRoot, rendered, CREW_ROSTER_REL);
 }
 function pinCreatedByAccountId(pin) {
   return nonEmpty(pin?.createdByAccountId) ?? nonEmpty(pin?.accountId);
 }
 function readBundlePin(targetRepoRoot) {
-  const pinPath = join6(targetRepoRoot, BUNDLE_PIN_REL);
-  if (!existsSync4(pinPath))
+  const pinPath = join7(targetRepoRoot, BUNDLE_PIN_REL);
+  if (!existsSync5(pinPath))
     return null;
   return JSON.parse(readFileSync6(pinPath, "utf-8"));
 }
@@ -10194,7 +10447,7 @@ function readPinnedEngagement(targetRepoRoot, home) {
 }
 function readLegacyEnvLocal(targetRepoRoot) {
   try {
-    return parseEnvText(readFileSync6(join6(targetRepoRoot, LEGACY_ENV_LOCAL_REL), "utf-8"));
+    return parseEnvText(readFileSync6(join7(targetRepoRoot, LEGACY_ENV_LOCAL_REL), "utf-8"));
   } catch {
     return null;
   }
@@ -10289,8 +10542,8 @@ function engagementCredentialValues(credential, engagementId) {
 }
 var LEGACY_ENV_LOCAL_REL = ".env.local";
 function migrateLegacyEnvLocal(targetRepo, stored) {
-  const path = join6(targetRepo, LEGACY_ENV_LOCAL_REL);
-  if (!existsSync4(path))
+  const path = join7(targetRepo, LEGACY_ENV_LOCAL_REL);
+  if (!existsSync5(path))
     return { outcome: "absent", unbacked: [], missingForAdoption: [] };
   let raw;
   try {
@@ -10320,7 +10573,7 @@ function migrateLegacyEnvLocal(targetRepo, stored) {
   return { outcome: "stripped", unbacked: [], missingForAdoption: [], keptText: kept.join("\n") };
 }
 function applyLegacyMigration(targetRepo, decided) {
-  const path = join6(targetRepo, LEGACY_ENV_LOCAL_REL);
+  const path = join7(targetRepo, LEGACY_ENV_LOCAL_REL);
   try {
     if (decided.outcome === "removed") {
       rmSync2(path);
@@ -10346,23 +10599,23 @@ function planCodexSkills(targetRepo, previous, writeSet) {
   const manifest = readPluginManifest();
   const recordedFiles = new Map((previous?.files ?? []).filter((file) => writeSet.files.has(file.path)).map((file) => [file.path, file]));
   return (manifest.commands ?? []).map((cmd) => {
-    const srcFile = join6(BUNDLE_ROOT, ".claude-plugin", cmd.path);
-    if (!existsSync4(srcFile)) {
+    const srcFile = join7(BUNDLE_ROOT, ".claude-plugin", cmd.path);
+    if (!existsSync5(srcFile)) {
       throw new Error(`[halfcycle] plugin.json declares command "${cmd.name}" at "${cmd.path}", but no file exists there (${srcFile}). The manifest and commands/ must agree.`);
     }
     const rel = skillRel(cmd.name);
     const content = codexSkillContent(cmd.name, readFileSync6(srcFile, "utf-8"));
     const recorded = recordedFiles.get(rel);
-    const planned = decideCollisionSafe(join6(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
+    const planned = decideCollisionSafe(join7(targetRepo, rel), targetRepo, content, (current) => bytesAreOurs(rel, current, recorded, writeSet));
     return { ...planned, editedCollided: planned.outcome === "collided" && recorded !== void 0 };
   });
 }
 function planVendoredBinary(targetRepo) {
-  return decideOwned(join6(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs"), targetRepo, readFileSync6(resolveVendoredBinary(), "utf-8"));
+  return decideOwned(join7(targetRepo, ".halfcycle", "bin", "bin.bundle.mjs"), targetRepo, readFileSync6(resolveVendoredBinary(), "utf-8"));
 }
 function planSettings(targetRepo, previous, home, env) {
-  const settingsPath = join6(targetRepo, SETTINGS_REL);
-  const preexisted = existsSync4(settingsPath);
+  const settingsPath = join7(targetRepo, SETTINGS_REL);
+  const preexisted = existsSync5(settingsPath);
   const generated = JSON.parse(generateSettingsJson());
   let existing;
   try {
@@ -10386,11 +10639,11 @@ function planSettings(targetRepo, previous, home, env) {
   return { file, preexisted, existing, generated, merged, retiredOurs };
 }
 function planHookScripts(targetRepo) {
-  return hookScriptsThisVersionWrites().map(([rel, content]) => decideOwnedGenerated(join6(targetRepo, rel), targetRepo, content, OWNED_GENERATED_HEADERS[rel]));
+  return hookScriptsThisVersionWrites().map(([rel, content]) => decideOwnedGenerated(join7(targetRepo, rel), targetRepo, content, OWNED_GENERATED_HEADERS[rel]));
 }
 function planMcpRegistration(targetRepo, credential) {
-  const mcpPath = join6(targetRepo, MCP_REGISTRATION_REL);
-  const existing = existsSync4(mcpPath) ? readFileSync6(mcpPath, "utf-8") : null;
+  const mcpPath = join7(targetRepo, MCP_REGISTRATION_REL);
+  const existing = existsSync5(mcpPath) ? readFileSync6(mcpPath, "utf-8") : null;
   if (credential === void 0)
     return { kind: "none", existing };
   if (credential === "pending")
@@ -10402,11 +10655,11 @@ function planMcpRegistration(targetRepo, credential) {
 function putPlannedMcp(targetRepo, planned) {
   if (planned.kind !== "write" || planned.outcome === "skipped")
     return;
-  writeAllowlisted(join6(targetRepo, MCP_REGISTRATION_REL), targetRepo, planned.text, []);
+  writeAllowlisted(join7(targetRepo, MCP_REGISTRATION_REL), targetRepo, planned.text, []);
 }
 function fileInFolderPlace(root, rel) {
   for (let dir = posix2.dirname(rel); dir !== "."; dir = posix2.dirname(dir)) {
-    const found = lstatOrNull(join6(root, dir));
+    const found = lstatOrNull(join7(root, dir));
     if (found !== null && !found.isDirectory())
       return true;
   }
@@ -10415,7 +10668,7 @@ function fileInFolderPlace(root, rel) {
 function symlinkOnPath(root, rel) {
   let current = root;
   for (const segment of rel.split("/")) {
-    current = join6(current, segment);
+    current = join7(current, segment);
     try {
       if (lstatSync(current).isSymbolicLink())
         return true;
@@ -10436,10 +10689,10 @@ function planCodexHooks(targetRepo) {
   });
   if (symlinkOnPath(targetRepo, CODEX_HOOKS_REL2))
     return leave("link", null);
-  const folder = lstatOrNull(join6(targetRepo, posix2.dirname(CODEX_HOOKS_REL2)));
-  if (folder !== null && !folder.isDirectory())
+  const folder2 = lstatOrNull(join7(targetRepo, posix2.dirname(CODEX_HOOKS_REL2)));
+  if (folder2 !== null && !folder2.isDirectory())
     return leave("unreadable", null);
-  const path = join6(targetRepo, CODEX_HOOKS_REL2);
+  const path = join7(targetRepo, CODEX_HOOKS_REL2);
   let before = null;
   if (lstatOrNull(path) !== null) {
     try {
@@ -10477,13 +10730,13 @@ function planCodexHooks(targetRepo) {
 function putPlannedCodexHooks(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.text === null)
     return;
-  writeAllowlisted(join6(targetRepo, CODEX_HOOKS_REL2), targetRepo, planned.text, []);
+  writeAllowlisted(join7(targetRepo, CODEX_HOOKS_REL2), targetRepo, planned.text, []);
 }
 function readCodexConfig(targetRepo) {
-  const folder = lstatOrNull(join6(targetRepo, posix2.dirname(CODEX_CONFIG_REL2)));
-  if (folder !== null && !folder.isDirectory())
+  const folder2 = lstatOrNull(join7(targetRepo, posix2.dirname(CODEX_CONFIG_REL2)));
+  if (folder2 !== null && !folder2.isDirectory())
     return "unreadable";
-  const path = join6(targetRepo, CODEX_CONFIG_REL2);
+  const path = join7(targetRepo, CODEX_CONFIG_REL2);
   const stat = lstatOrNull(path);
   if (stat === null)
     return { text: null };
@@ -10537,10 +10790,10 @@ function planCodexConfig(targetRepo, credential) {
 function putPlannedCodexConfig(targetRepo, planned) {
   if (planned.outcome !== "written" || planned.text === null)
     return;
-  writeAllowlisted(join6(targetRepo, CODEX_CONFIG_REL2), targetRepo, planned.text, []);
+  writeAllowlisted(join7(targetRepo, CODEX_CONFIG_REL2), targetRepo, planned.text, []);
 }
 function planCrewRoster(targetRepo) {
-  return decideOwned(join6(targetRepo, CREW_ROSTER_REL), targetRepo, renderCrewRoster());
+  return decideOwned(join7(targetRepo, CREW_ROSTER_REL), targetRepo, renderCrewRoster());
 }
 function planCrewProfiles(targetRepo, previous, writeSet) {
   const recordedFiles = new Map((previous?.files ?? []).filter((file) => writeSet.files.has(file.path)).map((file) => [file.path, file]));
@@ -10555,7 +10808,7 @@ function planCrewProfiles(targetRepo, previous, writeSet) {
   });
 }
 function planInstallRecord(targetRepo, text) {
-  return decideOwned(join6(targetRepo, INSTALL_MANIFEST_REL), targetRepo, text);
+  return decideOwned(join7(targetRepo, INSTALL_MANIFEST_REL), targetRepo, text);
 }
 function accountInstall(steps, actual) {
   const { targetRepo, writeSet, pin } = steps;
@@ -10783,7 +11036,7 @@ function mcpHasHalfcycleEntry(text) {
 function writeMissingSelfBuildCrewProfiles(targetRepoRoot, report) {
   for (const { rel, text } of renderCrewProfiles()) {
     const target = crewProfileTarget(targetRepoRoot, rel);
-    if (existsSync4(target))
+    if (existsSync5(target))
       continue;
     writeAllowlisted(target, targetRepoRoot, text, report.writtenPaths);
   }
@@ -10791,7 +11044,7 @@ function writeMissingSelfBuildCrewProfiles(targetRepoRoot, report) {
 function installSelfBuild(options) {
   const { targetRepo, engagementId, credential, freshlyMinted, home } = options;
   assertEngagementId(engagementId);
-  if (!existsSync4(targetRepo)) {
+  if (!existsSync5(targetRepo)) {
     throw new Error(`[halfcycle] Target repo does not exist: ${targetRepo}`);
   }
   const report = {
@@ -10802,7 +11055,7 @@ function installSelfBuild(options) {
     editedCollidedPaths: [],
     replacedPaths: []
   };
-  const at = (rel) => join6(targetRepo, rel);
+  const at = (rel) => join7(targetRepo, rel);
   const version = readPluginManifest().version;
   const existingMcp = readFileOrNull(at(MCP_REGISTRATION_REL));
   const mcpText = existingMcp === null || !mcpHasHalfcycleEntry(existingMcp) ? inLineEndingOf(existingMcp, generateMcpRegistration(existingMcp, credential.mcpUrl)) : null;
@@ -10813,17 +11066,17 @@ function installSelfBuild(options) {
   if (mcpText !== null) {
     writeAllowlisted(at(MCP_REGISTRATION_REL), targetRepo, mcpText, report.writtenPaths);
   }
-  if (!existsSync4(at(VENDORED_BIN_REL))) {
+  if (!existsSync5(at(VENDORED_BIN_REL))) {
     recordOwned(report, at(VENDORED_BIN_REL), targetRepo, readFileSync6(resolveVendoredBinary(), "utf-8"), VENDORED_BIN_REL);
   }
-  if (!existsSync4(at(SELF_BUILD_GITIGNORE_REL))) {
+  if (!existsSync5(at(SELF_BUILD_GITIGNORE_REL))) {
     writeAllowlisted(at(SELF_BUILD_GITIGNORE_REL), targetRepo, SELF_BUILD_GITIGNORE_TEXT, report.writtenPaths);
   }
-  if (!existsSync4(at(CREW_ROSTER_REL))) {
+  if (!existsSync5(at(CREW_ROSTER_REL))) {
     writeCrewRoster(targetRepo, report);
   }
   writeMissingSelfBuildCrewProfiles(targetRepo, report);
-  if (!existsSync4(at(BUNDLE_PIN_REL))) {
+  if (!existsSync5(at(BUNDLE_PIN_REL))) {
     writeBundlePin(targetRepo, planBundlePin(targetRepo, version, engagementId, "self-build", void 0, credential.methodVersion), report.writtenPaths);
   }
   return { writtenPaths: report.writtenPaths, credentialWritten };
@@ -11159,7 +11412,7 @@ function localDeadline(started) {
   return new Date(started.expiresAt).getTime() + started.pollIntervalMs * DEADLINE_SLACK_INTERVALS;
 }
 async function pollForCredential(serviceUrl, started, deps = {}) {
-  const write = deps.write ?? defaultWrite;
+  const write2 = deps.write ?? defaultWrite;
   const sleep = deps.sleep ?? defaultSleep;
   const now = deps.now ?? Date.now;
   const url = tokenUrlFor(serviceUrl);
@@ -11181,7 +11434,7 @@ async function pollForCredential(serviceUrl, started, deps = {}) {
     }
     if (now() - announcedAt >= (deps.stillWaitingMs ?? STILL_WAITING_MS)) {
       announcedAt = now();
-      write(stillWaitingLine(announcedAt - startedAt, started));
+      write2(stillWaitingLine(announcedAt - startedAt, started));
     }
     await sleep(interval);
   }
@@ -11240,13 +11493,13 @@ async function pollBesideLoopback(serviceUrl, started, wake, deps) {
   }
 }
 async function signIn(serviceUrl, deps = {}) {
-  const write = deps.write ?? defaultWrite;
+  const write2 = deps.write ?? defaultWrite;
   const now = deps.now ?? Date.now;
   const env = deps.env ?? process.env;
   if (isNonInteractive(env)) {
     throw new SignInRefused(SIGN_IN_TIMED_OUT, SIGN_IN_NON_INTERACTIVE_MESSAGE);
   }
-  write(`[halfcycle] Halfcycle needs an account before it can ${deps.reason ?? DEFAULT_SIGN_IN_REASON} \u2014 signing you in through your browser.
+  write2(`[halfcycle] Halfcycle needs an account before it can ${deps.reason ?? DEFAULT_SIGN_IN_REASON} \u2014 signing you in through your browser.
 `);
   const bind = await bindLoopback(env, deps.onwardEngagementId);
   let closed = false;
@@ -11262,17 +11515,17 @@ async function signIn(serviceUrl, deps = {}) {
       const url = loopbackVerificationUrl(started.verificationUrl, bind.target);
       const attempt = await openBrowser(url, env);
       if (attempt.opened) {
-        write(`[halfcycle] Opened your browser to finish signing in. Code: ${started.userCode}. If a browser did not open, go to: ${started.verificationUrl}. This terminal is waiting.
+        write2(`[halfcycle] Opened your browser to finish signing in. Code: ${started.userCode}. If a browser did not open, go to: ${started.verificationUrl}. This terminal is waiting.
 `);
         const startedAt = now();
         const redirect = bind.waitForCallback({
           timeoutMs: localDeadline(started) - startedAt,
-          onStillWaiting: (elapsed) => write(stillWaitingLine(elapsed, started)),
+          onStillWaiting: (elapsed) => write2(stillWaitingLine(elapsed, started)),
           stillWaitingMs: deps.stillWaitingMs ?? STILL_WAITING_MS
         });
         const approved = await pollBesideLoopback(serviceUrl, started, redirect.then(() => void 0), deps);
         await closeListener();
-        write(`[halfcycle] Signed in \u2014 continuing.
+        write2(`[halfcycle] Signed in \u2014 continuing.
 `);
         return {
           accountId: approved.accountId,
@@ -11281,10 +11534,10 @@ async function signIn(serviceUrl, deps = {}) {
         };
       }
       await closeListener();
-      write(`[halfcycle] Falling back to the code-based sign-in: ${attempt.reason}.
+      write2(`[halfcycle] Falling back to the code-based sign-in: ${attempt.reason}.
 `);
     } else {
-      write(`[halfcycle] Falling back to the code-based sign-in: ${bind.reason}.
+      write2(`[halfcycle] Falling back to the code-based sign-in: ${bind.reason}.
 `);
     }
     return await deviceCodeSignIn(serviceUrl, started, env, deps);
@@ -11293,21 +11546,21 @@ async function signIn(serviceUrl, deps = {}) {
   }
 }
 async function deviceCodeSignIn(serviceUrl, started, env, deps) {
-  const write = deps.write ?? defaultWrite;
-  write(`[halfcycle] Your sign-in code: ${started.userCode}
+  const write2 = deps.write ?? defaultWrite;
+  write2(`[halfcycle] Your sign-in code: ${started.userCode}
 `);
   const attempt = await openBrowser(started.verificationUrl, env);
   if (attempt.opened) {
-    write(`[halfcycle] Opened your browser at ${started.verificationUrl}
+    write2(`[halfcycle] Opened your browser at ${started.verificationUrl}
 `);
   } else {
-    write(`[halfcycle] Open this address to sign in: ${started.verificationUrl}
+    write2(`[halfcycle] Open this address to sign in: ${started.verificationUrl}
 `);
   }
-  write(`[halfcycle] Check the code on that page matches the one above, then sign in. This terminal is waiting.
+  write2(`[halfcycle] Check the code on that page matches the one above, then sign in. This terminal is waiting.
 `);
   const approved = await pollForCredential(serviceUrl, started, deps);
-  write(`[halfcycle] Signed in \u2014 continuing.
+  write2(`[halfcycle] Signed in \u2014 continuing.
 `);
   return {
     accountId: approved.accountId,
@@ -11947,40 +12200,40 @@ function identitySwitchRemedy(home, interactive) {
   return interactive ? `To act as a different account: run this again and ${SWITCH_ACCOUNT_ANSWER}, ${setOrRemove} to be asked for a sign-in next time.` : `To act as a different account: ${setOrRemove} and run this again with a terminal to sign in.`;
 }
 async function confirmActingIdentity(serviceUrl, credential, act, deps = {}) {
-  const write = deps.write ?? ((text) => process.stdout.write(text));
+  const write2 = deps.write ?? ((text) => process.stdout.write(text));
   const colour = deps.colour ?? decideColour({ isTTY: process.stdout.isTTY === true, env: deps.env ?? process.env });
   const identity = await describeAccount(serviceUrl, credential.credential, deps.fetchImpl);
   const plainLabel = accountLabel(identity, credential.accountId, deps.verbose === true);
   const label = plainLabel !== void 0 ? ink("keyBold", plainLabel, colour) : "";
   const acting = actingAs(credential, identity);
   const script = armScript(credential, act, accountLine(identity, label), plainLabel, deps.home);
-  write(script.preamble);
+  write2(script.preamble);
   if (!script.asks)
     return acting;
   if (deps.assumeYes === true) {
-    write(`[halfcycle] Continuing as that account without asking, because --yes was given.
+    write2(`[halfcycle] Continuing as that account without asking, because --yes was given.
 `);
     return acting;
   }
   const interactive = deps.interactive ?? isInteractiveRun(deps.env);
   if (!interactive) {
     if (script.noTerminalNote !== "")
-      write(script.noTerminalNote);
+      write2(script.noTerminalNote);
     return acting;
   }
   const ask = deps.ask ?? askLine;
-  write("\n");
+  write2("\n");
   const decision = readDecision(await ask(question(colour)));
   if (decision === "proceed")
     return acting;
   if (decision === "switch-account") {
-    write(script.switchOpening);
+    write2(script.switchOpening);
     const replacement = await switchAccount(serviceUrl, deps);
     const replacementIdentity = await describeAccount(serviceUrl, replacement.credential, deps.fetchImpl);
-    write(`[halfcycle] Signed in. This install will ${actClause(act)}.
+    write2(`[halfcycle] Signed in. This install will ${actClause(act)}.
 `);
     if (script.afterSwitch !== "")
-      write(script.afterSwitch);
+      write2(script.afterSwitch);
     return actingAs(replacement, replacementIdentity);
   }
   throw new SignInRefused(IDENTITY_DECLINED, script.stopRemedy);
@@ -12091,8 +12344,8 @@ async function joinPinnedEngagement(serviceUrl, engagementId, targetRepo, deps =
 
 // dist/pre-create-checks.js
 import { spawnSync } from "node:child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync7, realpathSync } from "node:fs";
-import { delimiter, dirname as dirname4, join as join7 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync7, realpathSync } from "node:fs";
+import { delimiter, dirname as dirname4, join as join8 } from "node:path";
 var KEPT_FOLDER_ID_LINE = 'Nothing on the Halfcycle service needs undoing, and this folder keeps its project id, so running "npx halfcycle" again picks up where it left off.';
 var PreCreateRefused = class extends Error {
   constructor(message) {
@@ -12122,29 +12375,29 @@ var SYSTEM_FOLDERS = [
   "C:\\Program Files",
   "C:\\Program Files (x86)"
 ];
-function refuseSystemFolder(targetRepo, platform5 = process.platform) {
-  const key = (folder) => {
-    const real = realOrLiteral(folder);
-    return platform5 === "win32" ? real.toLowerCase() : real;
+function refuseSystemFolder(targetRepo, platform6 = process.platform) {
+  const key = (folder2) => {
+    const real = realOrLiteral(folder2);
+    return platform6 === "win32" ? real.toLowerCase() : real;
   };
   const target = key(targetRepo);
-  if (SYSTEM_FOLDERS.some((folder) => key(folder) === target)) {
+  if (SYSTEM_FOLDERS.some((folder2) => key(folder2) === target)) {
     throw new PreCreateRefused(`${targetRepo} is a system folder \u2014 run "npx halfcycle" inside a project folder.`);
   }
 }
 function refuseInsideProject(targetRepo) {
-  let folder = realOrLiteral(targetRepo);
-  for (let parent = dirname4(folder); parent !== folder; folder = parent, parent = dirname4(parent)) {
-    if (existsSync5(join7(parent, BUNDLE_PIN_REL))) {
+  let folder2 = realOrLiteral(targetRepo);
+  for (let parent = dirname4(folder2); parent !== folder2; folder2 = parent, parent = dirname4(parent)) {
+    if (existsSync6(join8(parent, BUNDLE_PIN_REL))) {
       throw new PreCreateRefused(`${targetRepo} is inside the Halfcycle project at ${parent} \u2014 open that folder in your coding agent instead, or run "npx halfcycle" in a folder outside it.`);
     }
   }
 }
-function realOrLiteral(folder) {
+function realOrLiteral(folder2) {
   try {
-    return realpathSync(folder);
+    return realpathSync(folder2);
   } catch {
-    return folder;
+    return folder2;
   }
 }
 var GIT_INSTALL_ARGS = ["install", "--id", "Git.Git", "-e", "--source", "winget"];
@@ -12159,13 +12412,13 @@ async function offerGitForWindows() {
   throw new PreCreateRefused(`Git for Windows is needed and is not installed \u2014 install it with "${GIT_INSTALL_COMMAND}" or from ${GIT_DOWNLOAD_PAGE}, then open a new terminal and run "npx halfcycle" again.`);
 }
 function gitBashPath(env) {
-  const onPath = (env["PATH"] ?? "").split(delimiter).filter((dir) => dir !== "" && existsSync5(join7(dir, "git.exe"))).map((dir) => join7(dir, "..", "bin", "bash.exe"));
+  const onPath = (env["PATH"] ?? "").split(delimiter).filter((dir) => dir !== "" && existsSync6(join8(dir, "git.exe"))).map((dir) => join8(dir, "..", "bin", "bash.exe"));
   const candidates = [
     env["CLAUDE_CODE_GIT_BASH_PATH"],
     ...onPath,
-    env["ProgramFiles"] === void 0 ? void 0 : join7(env["ProgramFiles"], "Git", "bin", "bash.exe")
+    env["ProgramFiles"] === void 0 ? void 0 : join8(env["ProgramFiles"], "Git", "bin", "bash.exe")
   ];
-  return candidates.find((file) => file !== void 0 && file !== "" && existsSync5(file));
+  return candidates.find((file) => file !== void 0 && file !== "" && existsSync6(file));
 }
 function hasGitBash(env) {
   return gitBashPath(env) !== void 0;
@@ -12174,7 +12427,7 @@ function runWingetInstall() {
   return spawnSync("winget", [...GIT_INSTALL_ARGS], { stdio: "inherit" }).status === 0;
 }
 function unreadableProjectRefusal(targetRepo) {
-  return `${join7(targetRepo, PROJECT_IDENTITY_REL)} could not be read as a Halfcycle project file \u2014 delete the .halfcycle folder in ${targetRepo} and run "npx halfcycle" again to start a new project here.`;
+  return `${join8(targetRepo, PROJECT_IDENTITY_REL)} could not be read as a Halfcycle project file \u2014 delete the .halfcycle folder in ${targetRepo} and run "npx halfcycle" again to start a new project here.`;
 }
 function cannotWriteRefusal(targetRepo) {
   return `cannot write to ${targetRepo} \u2014 run "npx halfcycle" in a folder you can write to.`;
@@ -12194,7 +12447,7 @@ function claimFolderId(targetRepo) {
 function readFolderId(targetRepo) {
   let folderId;
   try {
-    const text = readFileSync7(join7(targetRepo, PROJECT_IDENTITY_REL), "utf-8");
+    const text = readFileSync7(join8(targetRepo, PROJECT_IDENTITY_REL), "utf-8");
     folderId = JSON.parse(text)?.projectId;
   } catch {
     return void 0;
@@ -12212,7 +12465,7 @@ function checkSettingsParse(targetRepo) {
 
 // dist/folder-refusals.js
 import { realpathSync as realpathSync2 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 function folderMissingRefusal(targetRepo) {
   return `halfcycle: no such directory: ${targetRepo}`;
 }
@@ -12232,7 +12485,7 @@ function homeFolderRefusal(targetRepo) {
 function isHomeFolder(dir) {
   try {
     const target = realpathSync2(dir);
-    const home = realpathSync2(homedir3());
+    const home = realpathSync2(homedir4());
     return process.platform === "win32" ? target.toLowerCase() === home.toLowerCase() : target === home;
   } catch {
     return false;
@@ -12240,16 +12493,16 @@ function isHomeFolder(dir) {
 }
 
 // dist/preview.js
-import { accessSync, constants, existsSync as existsSync6, readFileSync as readFileSync9, statSync } from "node:fs";
-import { join as join9 } from "node:path";
+import { accessSync, constants, existsSync as existsSync7, readFileSync as readFileSync9, statSync } from "node:fs";
+import { join as join10 } from "node:path";
 
 // dist/halfcycle-monorepo.js
 import { readFileSync as readFileSync8 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var MONOREPO_PACKAGE_NAME = "halfcycle-monorepo";
 function isHalfcycleMonorepo(dir) {
   try {
-    const pkg = JSON.parse(readFileSync8(join8(dir, "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync8(join9(dir, "package.json"), "utf-8"));
     return pkg.name === MONOREPO_PACKAGE_NAME;
   } catch {
     return false;
@@ -12291,8 +12544,8 @@ function runPreview(targetRepo, options) {
   };
 }
 function claudeMdLine(targetRepo) {
-  const path = join9(targetRepo, CLAUDE_MD_REL);
-  if (!existsSync6(path))
+  const path = join10(targetRepo, CLAUDE_MD_REL);
+  if (!existsSync7(path))
     return void 0;
   let text;
   try {
@@ -12303,7 +12556,7 @@ function claudeMdLine(targetRepo) {
   return text.includes(AGENTS_IMPORT_LINE) ? WORDS.claudeMdAlreadyPoints : WORDS.claudeMdWillAdd;
 }
 function previewRefusal(targetRepo, options) {
-  if (!existsSync6(targetRepo))
+  if (!existsSync7(targetRepo))
     return folderMissingRefusal(targetRepo);
   if (!statSync(targetRepo).isDirectory())
     return folderIsFileRefusal(targetRepo);
@@ -12324,7 +12577,7 @@ function previewRefusal(targetRepo, options) {
   } catch {
     return cannotWriteRefusal(targetRepo);
   }
-  if (existsSync6(join9(targetRepo, PROJECT_IDENTITY_REL)) && readFolderId(targetRepo) === void 0) {
+  if (existsSync7(join10(targetRepo, PROJECT_IDENTITY_REL)) && readFolderId(targetRepo) === void 0) {
     return unreadableProjectRefusal(targetRepo);
   }
   try {
@@ -12382,9 +12635,9 @@ function renderPreview(plan, missingGitForWindows, claudeMdWords) {
 
 // dist/doctor.js
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync7, readFileSync as readFileSync10, realpathSync as realpathSync3 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync10, realpathSync as realpathSync3 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { join as join11 } from "node:path";
 var GUARD_RUNNER_REL2 = ".claude/hooks/guard-runner.sh";
 var CONNECTION_VERB = "check-connection";
 var WRAPPER_TIMEOUT_MS = 3e4;
@@ -12406,16 +12659,17 @@ function runDoctor(root, options) {
   const version = offline ? notChecked("Up to date", "Connected") : upToDate ? { ok: true, text: `Up to date: yes (${current}).` } : { ok: false, text: versionNoLine(installed, current) };
   const lines = [setUp.line, connection.signedIn, connection.connected, checksRunning, version];
   const failing = lines.filter((line) => !line.ok && !line.cascading).length;
-  const closing = failing === 0 ? "Everything is working." : `${failing} of these ${failing === 1 ? "needs" : "need"} fixing; each line above says what to do.`;
-  const codex = codexLine(root, options);
-  const printed = codex === void 0 ? lines : [...lines.slice(0, 4), codex, ...lines.slice(4)];
+  const report = running.state === "answered" ? running.report : "none";
+  const closing = failing === 0 ? closingWithNothingFailing(report) : `${failing} of these ${failing === 1 ? "needs" : "need"} fixing; each line above says what to do.`;
+  const extras = [codexLine(root, options), reportsLine(report)].filter((line) => line !== void 0);
+  const printed = [...lines.slice(0, 4), ...extras, ...lines.slice(4)];
   return {
     text: [...printed.map((line) => line.text), closing].join("\n"),
     exitCode: failing === 0 ? 0 : 1
   };
 }
 function setUpLine(root, upToDate) {
-  if (!existsSync7(join10(root, BUNDLE_PIN_REL))) {
+  if (!existsSync8(join11(root, BUNDLE_PIN_REL))) {
     return {
       state: "no",
       hooksMissing: false,
@@ -12429,9 +12683,9 @@ function setUpLine(root, upToDate) {
   const missing = [];
   if (!pinNamesProject(root))
     missing.push("Halfcycle's project record");
-  if (!existsSync7(join10(root, INSTALL_MANIFEST_REL)))
+  if (!existsSync8(join11(root, INSTALL_MANIFEST_REL)))
     missing.push("the install record");
-  if (!existsSync7(join10(root, VENDORED_BIN_REL)))
+  if (!existsSync8(join11(root, VENDORED_BIN_REL)))
     missing.push("Halfcycle's check program");
   if (!mcpNamesServer(root))
     missing.push("Halfcycle's server entry");
@@ -12457,25 +12711,25 @@ function pinNamesProject(root) {
   }
 }
 function mcpNamesServer(root) {
-  const parsed = readJson(join10(root, MCP_REGISTRATION_REL));
-  if (!isObject(parsed) || !isObject(parsed["mcpServers"]))
+  const parsed = readJson(join11(root, MCP_REGISTRATION_REL));
+  if (!isObject2(parsed) || !isObject2(parsed["mcpServers"]))
     return false;
   const entry = parsed["mcpServers"][MCP_SERVER_KEY];
-  return isObject(entry) && typeof entry["url"] === "string";
+  return isObject2(entry) && typeof entry["url"] === "string";
 }
 function settingsRegisterEveryCommand(root) {
-  const parsed = readJson(join10(root, SETTINGS_REL));
-  if (!isObject(parsed) || !isObject(parsed["hooks"]))
+  const parsed = readJson(join11(root, SETTINGS_REL));
+  if (!isObject2(parsed) || !isObject2(parsed["hooks"]))
     return false;
   const registered = /* @__PURE__ */ new Set();
   for (const groups of Object.values(parsed["hooks"])) {
     if (!Array.isArray(groups))
       continue;
     for (const group of groups) {
-      if (!isObject(group) || !Array.isArray(group["hooks"]))
+      if (!isObject2(group) || !Array.isArray(group["hooks"]))
         continue;
       for (const hook of group["hooks"]) {
-        if (isObject(hook) && typeof hook["command"] === "string")
+        if (isObject2(hook) && typeof hook["command"] === "string")
           registered.add(hook["command"]);
       }
     }
@@ -12495,8 +12749,8 @@ function startWrapper(root, options) {
     }
     shell = gitBash;
   }
-  const wrapper = join10(root, GUARD_RUNNER_REL2);
-  if (!existsSync7(wrapper))
+  const wrapper = join11(root, GUARD_RUNNER_REL2);
+  if (!existsSync8(wrapper))
     return failed(repairSentence());
   const run = spawnSync2(shell, [wrapper, CONNECTION_VERB], {
     cwd: root,
@@ -12523,8 +12777,8 @@ function startWrapper(root, options) {
 }
 function settingsDisablingHooks(root) {
   for (const rel of [SETTINGS_REL, LOCAL_SETTINGS_REL]) {
-    const parsed = readJson(join10(root, rel));
-    if (isObject(parsed) && parsed["disableAllHooks"] === true)
+    const parsed = readJson(join11(root, rel));
+    if (isObject2(parsed) && parsed["disableAllHooks"] === true)
       return rel;
   }
   return void 0;
@@ -12539,14 +12793,16 @@ function parseAnswer(stdout) {
   } catch {
     return void 0;
   }
-  if (!isObject(parsed) || typeof parsed["kind"] !== "string" || !KNOWN_KINDS.includes(parsed["kind"]))
+  if (!isObject2(parsed) || typeof parsed["kind"] !== "string" || !KNOWN_KINDS.includes(parsed["kind"]))
     return void 0;
   const sentence = parsed["sentence"];
   if (sentence !== null && typeof sentence !== "string")
     return void 0;
   if (parsed["kind"] !== "not-registered" && typeof sentence !== "string")
     return void 0;
-  return { kind: parsed["kind"], sentence };
+  const said = parsed["report"];
+  const report = parsed["kind"] === "connected" && (said === "no-report-yet" || said === "gone-quiet") ? said : "none";
+  return { kind: parsed["kind"], sentence, report };
 }
 function checksRunningLine(running, hooksMissing) {
   if (running.state === "not-run")
@@ -12587,6 +12843,17 @@ function connectionLines(running) {
     connected: { ok: false, text: `Connected: no. ${sentence ?? ""}`.trimEnd() }
   };
 }
+function reportsLine(report) {
+  if (report === "no-report-yet") {
+    return { ok: true, text: `Reports: ${CHECKS_NO_REPORT_YET_STATE}. ${CHECKS_NO_REPORT_YET_WHEN} ${CHECKS_IF_STILL_UNREPORTED}` };
+  }
+  return report === "gone-quiet" ? { ok: true, text: `Reports: ${CHECKS_GONE_QUIET}` } : void 0;
+}
+function closingWithNothingFailing(report) {
+  if (report === "no-report-yet")
+    return `${CHECKS_NO_REPORT_YET_STATE}.`;
+  return report === "gone-quiet" ? CHECKS_GONE_QUIET : "Everything is working.";
+}
 function installedVersion(root) {
   try {
     return checkDrift(root).installed;
@@ -12610,8 +12877,8 @@ var CODEX_EVENT_SNAKE = {
   SessionEnd: "session_end"
 };
 function codexLine(root, options) {
-  const hooksPath = join10(root, CODEX_HOOKS_REL2);
-  if (!existsSync7(hooksPath))
+  const hooksPath = join11(root, CODEX_HOOKS_REL2);
+  if (!existsSync8(hooksPath))
     return void 0;
   const positions = codexEntryPositions(hooksPath);
   if (positions === void 0) {
@@ -12624,7 +12891,7 @@ function codexLine(root, options) {
 }
 function codexEntryPositions(hooksPath) {
   const parsed = readJson(hooksPath);
-  if (!isObject(parsed) || !isObject(parsed["hooks"]))
+  if (!isObject2(parsed) || !isObject2(parsed["hooks"]))
     return void 0;
   const positions = [];
   for (const entry of AGENT_PROFILES.codex.wiring) {
@@ -12634,11 +12901,11 @@ function codexEntryPositions(hooksPath) {
     let found;
     for (let g = 0; g < groups.length && found === void 0; g += 1) {
       const group = groups[g];
-      if (!isObject(group) || !Array.isArray(group["hooks"]))
+      if (!isObject2(group) || !Array.isArray(group["hooks"]))
         continue;
       for (let h = 0; h < group["hooks"].length; h += 1) {
         const hook = group["hooks"][h];
-        if (isObject(hook) && hook["command"] === entry.command) {
+        if (isObject2(hook) && hook["command"] === entry.command) {
           found = { group: g, hook: h };
           break;
         }
@@ -12652,7 +12919,7 @@ function codexEntryPositions(hooksPath) {
 }
 function codexApprovalStatus(root, positions, options) {
   const codexHome = options.env["CODEX_HOME"];
-  const configPath = join10(codexHome !== void 0 && codexHome !== "" ? codexHome : join10(homedir4(), ".codex"), "config.toml");
+  const configPath = join11(codexHome !== void 0 && codexHome !== "" ? codexHome : join11(homedir5(), ".codex"), "config.toml");
   let text;
   try {
     text = readFileSync10(configPath, "utf-8");
@@ -12661,7 +12928,7 @@ function codexApprovalStatus(root, positions, options) {
   }
   let hooksPath;
   try {
-    hooksPath = join10(realpathSync3(root), CODEX_HOOKS_REL2);
+    hooksPath = join11(realpathSync3(root), CODEX_HOOKS_REL2);
   } catch {
     return "not-approved";
   }
@@ -12691,7 +12958,7 @@ function naturalList(items) {
   return `${items.slice(0, -1).join(", ")} and ${items[items.length - 1]}`;
 }
 function readJson(path) {
-  if (!existsSync7(path))
+  if (!existsSync8(path))
     return void 0;
   try {
     return JSON.parse(readFileSync10(path, "utf-8"));
@@ -12699,7 +12966,7 @@ function readJson(path) {
     return void 0;
   }
 }
-function isObject(value) {
+function isObject2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -12757,13 +13024,13 @@ async function probeMcpOrigin(mcpUrl, token) {
 
 // dist/claude-version-probe.js
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync8, realpathSync as realpathSync4 } from "node:fs";
-import { delimiter as delimiter2, join as join11 } from "node:path";
+import { existsSync as existsSync9, realpathSync as realpathSync4 } from "node:fs";
+import { delimiter as delimiter2, join as join12 } from "node:path";
 function execVersionCommand(command, timeoutMs, deps) {
-  const platform5 = deps.platform ?? process.platform;
+  const platform6 = deps.platform ?? process.platform;
   const exec = deps.exec ?? execFileSync3;
   try {
-    return platform5 === "win32" ? exec("cmd.exe", ["/d", "/s", "/c", `"${command} --version"`], {
+    return platform6 === "win32" ? exec("cmd.exe", ["/d", "/s", "/c", `"${command} --version"`], {
       encoding: "utf-8",
       timeout: timeoutMs,
       stdio: ["ignore", "pipe", "ignore"],
@@ -12800,8 +13067,8 @@ var INSTALL_METHOD_RULES = [
 ];
 function probeClaudeCodeInstallMethod(deps = {}) {
   const env = deps.env ?? process.env;
-  const platform5 = deps.platform ?? process.platform;
-  const exists = deps.exists ?? existsSync8;
+  const platform6 = deps.platform ?? process.platform;
+  const exists = deps.exists ?? existsSync9;
   const realpath = deps.realpath ?? ((file) => {
     try {
       return realpathSync4(file);
@@ -12809,11 +13076,11 @@ function probeClaudeCodeInstallMethod(deps = {}) {
       return file;
     }
   });
-  const names = platform5 === "win32" ? ["claude.exe", "claude.cmd"] : ["claude"];
+  const names = platform6 === "win32" ? ["claude.exe", "claude.cmd"] : ["claude"];
   const dirs = (env["PATH"] ?? "").split(delimiter2).filter((dir) => dir !== "");
   for (const dir of dirs) {
     for (const name of names) {
-      const file = join11(dir, name);
+      const file = join12(dir, name);
       if (!exists(file))
         continue;
       const real = realpath(file);
@@ -12848,8 +13115,8 @@ function codexInstallLine(codex) {
 }
 
 // dist/build-record/write.js
-import { existsSync as existsSync9, mkdirSync as mkdirSync6, rmSync as rmSync4 } from "node:fs";
-import { basename as basename2, join as join12, resolve as resolve3, relative as relative2, isAbsolute as isAbsolute3 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync6, rmSync as rmSync4 } from "node:fs";
+import { basename as basename2, join as join13, resolve as resolve3, relative as relative2, isAbsolute as isAbsolute3 } from "node:path";
 
 // dist/build-record/render-v2.js
 var HIDDEN = /[\p{Cc}\p{Zl}\p{Zp}\p{Default_Ignorable_Code_Point}]/u;
@@ -13498,7 +13765,7 @@ function replaceOne(io, tmp, finalPath, text) {
 }
 
 // dist/build-record/write.js
-var BUILD_RECORD_DIR = join12("docs", "build-records");
+var BUILD_RECORD_DIR = join13("docs", "build-records");
 function assertInsideOutDir(outDir, candidate, identity) {
   const rel = relative2(outDir, resolve3(candidate));
   const isPlainFilename = rel !== "" && rel !== ".." && !isAbsolute3(rel) && rel === basename2(rel);
@@ -13536,8 +13803,8 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   }
   const outDir = resolve3(repoRoot, BUILD_RECORD_DIR);
   const segment = renderPhaseSegment(phase);
-  const jsonPath = join12(outDir, `${segment}.json`);
-  const mdPath = join12(outDir, `${segment}.md`);
+  const jsonPath = join13(outDir, `${segment}.json`);
+  const mdPath = join13(outDir, `${segment}.md`);
   const jsonTmp = `${jsonPath}.tmp`;
   const mdTmp = `${mdPath}.tmp`;
   for (const candidate of [jsonPath, mdPath, jsonTmp, mdTmp]) {
@@ -13551,7 +13818,7 @@ function writeRecordPair(repoRoot, phase, rawRecord, record2, io = NODE_RECORD_P
   }
   const existingJson = readIfPresent(jsonPath);
   if (existingJson === null) {
-    return { kind: "in-the-way", path: existsSync9(jsonPath) ? jsonPath : mdPath };
+    return { kind: "in-the-way", path: existsSync10(jsonPath) ? jsonPath : mdPath };
   }
   if (existingJson === jsonText) {
     replaceOne(io, mdTmp, mdPath, mdText);
@@ -13579,20 +13846,20 @@ import { relative as relative5 } from "node:path";
 
 // dist/open-phase.js
 import { readFileSync as readFileSync17 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 
 // dist/close-phase.js
 import { execFile, execFileSync as execFileSync5 } from "node:child_process";
 import { readFileSync as readFileSync16 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 
 // dist/plan.js
-import { existsSync as existsSync11, readFileSync as readFileSync15 } from "node:fs";
-import { join as join18 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync15 } from "node:fs";
+import { join as join19 } from "node:path";
 
 // dist/draw/write.js
 import { closeSync as closeSync2, lstatSync as lstatSync2, mkdirSync as mkdirSync7, openSync as openSync2, readFileSync as readFileSync12, readSync, realpathSync as realpathSync5, rmSync as rmSync5 } from "node:fs";
-import { dirname as dirname5, isAbsolute as isAbsolute4, join as join13, relative as relative3, resolve as resolve4, sep } from "node:path";
+import { dirname as dirname5, isAbsolute as isAbsolute4, join as join14, relative as relative3, resolve as resolve4, sep } from "node:path";
 var DOCS_DIR = "docs";
 var DIAGRAMS_DIR = "diagrams";
 var DIAGRAM_DIR_REL = `${DOCS_DIR}/${DIAGRAMS_DIR}`;
@@ -13648,9 +13915,9 @@ function embedImageLink(base, doc) {
 }
 function diagramPaths(repoRoot, base) {
   const root = resolve4(repoRoot);
-  const dir = join13(root, DOCS_DIR, DIAGRAMS_DIR);
+  const dir = join14(root, DOCS_DIR, DIAGRAMS_DIR);
   const names = fileNames(base);
-  const file = Object.fromEntries(DIAGRAM_FILES.map((which) => [which, join13(dir, names[which])]));
+  const file = Object.fromEntries(DIAGRAM_FILES.map((which) => [which, join14(dir, names[which])]));
   return { repoRoot: root, dir, file };
 }
 function diagramRel(base, which) {
@@ -13923,10 +14190,10 @@ function isMissingRoute(method, status, body) {
 }
 
 // dist/change.js
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 
 // dist/cli-contract.js
-var CLI_VERBS = ["install", "check-drift", "build-record", "open-phase", "close-phase", "system", "draw", "plan", "review", "check-tasks", "check-criteria", "check-report", "ready", "uninstall", "change", "pace", "route", "prove", "preview", "doctor", "restore"];
+var CLI_VERBS = ["install", "check-drift", "build-record", "open-phase", "close-phase", "system", "draw", "plan", "review", "check-tasks", "check-criteria", "check-report", "ready", "uninstall", "change", "pace", "route", "prove", "preview", "doctor", "restore", "request-shapes"];
 var CONTRACTS = [
   { verb: "install", required: [], conditional: [] },
   { verb: "check-drift", required: [], conditional: [] },
@@ -13945,6 +14212,17 @@ var CONTRACTS = [
   { verb: "preview", required: [], conditional: [] },
   { verb: "doctor", required: [], conditional: [] },
   { verb: "restore", required: [], conditional: [] },
+  {
+    verb: "request-shapes",
+    required: [],
+    conditional: [],
+    forms: [
+      { form: "on", required: [], conditional: [] },
+      { form: "off", required: [], conditional: [] },
+      { form: "show", required: [], conditional: [] },
+      { form: "clear", required: [], conditional: [] }
+    ]
+  },
   {
     verb: "check-report",
     required: [
@@ -14136,11 +14414,11 @@ function placeholderRefusal(verb, tokens) {
 // dist/system-report.js
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { readFileSync as readFileSync13 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function readDescriptionFile(repoRoot) {
   let text;
   try {
-    text = readFileSync13(join14(repoRoot, SYSTEM_DESCRIPTION_REL), "utf-8");
+    text = readFileSync13(join15(repoRoot, SYSTEM_DESCRIPTION_REL), "utf-8");
   } catch (err) {
     const code = err.code;
     return code === "ENOENT" || code === "ENOTDIR" ? { kind: "missing" } : { kind: "unreadable" };
@@ -14364,8 +14642,8 @@ async function runSystem(repoRoot, deps) {
 }
 
 // dist/build-record/write-change.js
-import { existsSync as existsSync10, mkdirSync as mkdirSync8 } from "node:fs";
-import { basename as basename3, isAbsolute as isAbsolute5, join as join15, relative as relative4, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync8 } from "node:fs";
+import { basename as basename3, isAbsolute as isAbsolute5, join as join16, relative as relative4, resolve as resolve5 } from "node:path";
 
 // dist/build-record/render-change.js
 function counted2(n, one, many) {
@@ -14510,7 +14788,7 @@ function renderChangeRecordMarkdown(record2) {
 }
 
 // dist/build-record/write-change.js
-var CHANGE_RECORD_DIR = join15("docs", "build-records", "changes");
+var CHANGE_RECORD_DIR = join16("docs", "build-records", "changes");
 var InvalidChangeIdError = class extends Error {
   id;
   constructor(id) {
@@ -14530,8 +14808,8 @@ function writeChangeRecordPair(repoRoot, sortingId, rawRecord, record2, io = NOD
   if (!checked.success)
     throw new InvalidChangeIdError(sortingId);
   const outDir = resolve5(repoRoot, CHANGE_RECORD_DIR);
-  const jsonPath = join15(outDir, `${checked.data}.json`);
-  const mdPath = join15(outDir, `${checked.data}.md`);
+  const jsonPath = join16(outDir, `${checked.data}.json`);
+  const mdPath = join16(outDir, `${checked.data}.md`);
   const mdTmp = `${mdPath}.tmp`;
   for (const candidate of [jsonPath, mdPath, mdTmp]) {
     assertInsideChangeDir(outDir, candidate, sortingId);
@@ -14544,7 +14822,7 @@ function writeChangeRecordPair(repoRoot, sortingId, rawRecord, record2, io = NOD
   }
   const existingJson = readIfPresent(jsonPath);
   if (existingJson === null) {
-    return { kind: "in-the-way", path: existsSync10(jsonPath) ? jsonPath : mdPath };
+    return { kind: "in-the-way", path: existsSync11(jsonPath) ? jsonPath : mdPath };
   }
   if (existingJson !== jsonText)
     return { kind: "in-the-way", path: jsonPath };
@@ -14807,7 +15085,7 @@ function writePairLines(deps, repoRoot, sortingId, found) {
       };
     }
     return {
-      stdout: `[halfcycle] Its record is in ${join16(CHANGE_RECORD_DIR, `${sortingId}.md`)}.
+      stdout: `[halfcycle] Its record is in ${join17(CHANGE_RECORD_DIR, `${sortingId}.md`)}.
 `,
       stderr: "",
       ok: true
@@ -15048,12 +15326,12 @@ function runChange(repoRoot, args2, deps) {
 // dist/shown-record.js
 import { chmodSync as chmodSync3, mkdirSync as mkdirSync9, readFileSync as readFileSync14, renameSync as renameSync3, unlinkSync, writeFileSync as writeFileSync6 } from "node:fs";
 import { platform as platform4 } from "node:os";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 function updateShownRecord(engagementId, update, home) {
   let temp = null;
   try {
     const dir = engagementStateDir(engagementId, home);
-    const path = join17(dir, SHOWN_PLANS_FILENAME);
+    const path = join18(dir, SHOWN_PLANS_FILENAME);
     let current;
     try {
       current = parseShownRecord(readFileSync14(path, "utf-8"));
@@ -15063,7 +15341,7 @@ function updateShownRecord(engagementId, update, home) {
     const next = update(current);
     const body = serialiseShownRecord(next);
     mkdirSync9(dir, { recursive: true, mode: 448 });
-    temp = join17(dir, `.${SHOWN_PLANS_FILENAME}.${process.pid}.tmp`);
+    temp = join18(dir, `.${SHOWN_PLANS_FILENAME}.${process.pid}.tmp`);
     writeFileSync6(temp, body, { mode: 384 });
     if (platform4() !== "win32")
       chmodSync3(temp, 384);
@@ -15140,7 +15418,7 @@ function readAndCheckPlan(repoRoot, phase, description, verb) {
   const fileRel = planFileRel(phase);
   let text;
   try {
-    text = readFileSync15(join18(repoRoot, fileRel), "utf-8");
+    text = readFileSync15(join19(repoRoot, fileRel), "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR") {
@@ -15296,7 +15574,7 @@ function removalOwedLines(verb, parts) {
 function redrawLine(repoRoot, phase) {
   let exists;
   try {
-    exists = existsSync11(join18(repoRoot, DIAGRAM_DIR_REL, embedImageName(phaseDiagramBase(phase))));
+    exists = existsSync12(join19(repoRoot, DIAGRAM_DIR_REL, embedImageName(phaseDiagramBase(phase))));
   } catch {
     return null;
   }
@@ -15917,7 +16195,7 @@ function readTimeLine(stdout) {
   }
 }
 function runTimeChild(binary, credential, repoRoot) {
-  return runRunnerChild(binary, ["time"], credential, repoRoot, readTimeLine, TIME_UNREACHABLE);
+  return runRunnerChild(binary, ["time", "--final"], credential, repoRoot, readTimeLine, TIME_UNREACHABLE);
 }
 function runProveQueueChild(binary, credential, repoRoot) {
   return runRunnerChild(binary, ["prove", "--send-queued"], credential, repoRoot, () => void 0, void 0);
@@ -16243,7 +16521,7 @@ var PHASE_MODELS_FILENAME = "phase-models.json";
 var PACING_FOLDER = "pacing";
 function pacingFile(engagementId, name, home) {
   try {
-    return join19(engagementStateDir(engagementId, home), PACING_FOLDER, name);
+    return join20(engagementStateDir(engagementId, home), PACING_FOLDER, name);
   } catch {
     return null;
   }
@@ -16397,7 +16675,7 @@ function readRepoCredential(repoRoot, env = process.env, home) {
   if (pinned !== null)
     assertEngagementId(pinned);
   const fromStore = pinned === null ? null : readEngagementEnv(pinned, home);
-  const looked = pinned === null ? `${join20(repoRoot, ".halfcycle", "bundle.json")} (which names no engagement)` : engagementEnvPath(pinned, home);
+  const looked = pinned === null ? `${join21(repoRoot, ".halfcycle", "bundle.json")} (which names no engagement)` : engagementEnvPath(pinned, home);
   const values = {};
   for (const key of OPEN_PHASE_ENV_KEYS) {
     const value = (env[key] ?? fromStore?.[key] ?? "").trim();
@@ -16414,7 +16692,7 @@ function readRepoCredential(repoRoot, env = process.env, home) {
 }
 function readPinnedEngagementId(repoRoot) {
   try {
-    const pin = JSON.parse(readFileSync17(join20(repoRoot, ".halfcycle", "bundle.json"), "utf-8"));
+    const pin = JSON.parse(readFileSync17(join21(repoRoot, ".halfcycle", "bundle.json"), "utf-8"));
     const id = pin[PIN_ENGAGEMENT_ID_FIELD];
     return typeof id === "string" && id !== "" ? id : null;
   } catch {
@@ -16895,7 +17173,7 @@ async function writeDrawOutcome(repoRoot, deps, outcome, target, warnings, canno
 
 // dist/check-tasks.js
 import { readFileSync as readFileSync18 } from "node:fs";
-import { join as join21, resolve as resolve6 } from "node:path";
+import { join as join22, resolve as resolve6 } from "node:path";
 var CHECK_TASKS_USAGE = `${HALFCYCLE_COMMAND} check-tasks <phase> [--with-task-list] [--repo <root>]`;
 function parseCheckTasksArgs(argv) {
   const positionals = [];
@@ -16993,7 +17271,7 @@ function readPhasePlanParts(repoRoot, phase, description) {
   const file = planFileRel(phase);
   let text;
   try {
-    text = readFileSync18(join21(repoRoot, file), "utf-8");
+    text = readFileSync18(join22(repoRoot, file), "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR")
@@ -17026,7 +17304,7 @@ function readPlanSpecFiles(repoRoot, plan) {
     const rel = `${SPEC_FOLDER}/${slug}.md`;
     let text;
     try {
-      text = readFileSync18(join21(repoRoot, rel), "utf-8");
+      text = readFileSync18(join22(repoRoot, rel), "utf-8");
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT" || code === "ENOTDIR") {
@@ -17417,8 +17695,8 @@ function runProveChild(binary, credential, repoRoot, words, deps = {}) {
 
 // dist/uninstall.js
 import { lstatSync as lstatSync3, readFileSync as readFileSync20, readdirSync, rmSync as rmSync6, rmdirSync, writeFileSync as writeFileSync7 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
-import { dirname as dirname6, join as join22, relative as relative6, sep as sep2 } from "node:path";
+import { homedir as homedir6 } from "node:os";
+import { dirname as dirname6, join as join23, relative as relative6, sep as sep2 } from "node:path";
 var REMOVE_CREDENTIAL_FLAG = "--remove-credential";
 function parseUninstallArgs(args2) {
   let removeCredential = false;
@@ -17453,7 +17731,7 @@ function readMergedJson(targetRepo, rule) {
   const { rel } = rule;
   if (symlinkOnPath(targetRepo, rel))
     return { state: "symlink" };
-  const path = join22(targetRepo, rel);
+  const path = join23(targetRepo, rel);
   if (!lexists(path))
     return { state: "absent" };
   let text;
@@ -17476,8 +17754,8 @@ function readMergedJson(targetRepo, rule) {
 }
 function validate(options, rules) {
   const { targetRepo, removeCredential, home } = options;
-  const manifestPath = join22(targetRepo, INSTALL_MANIFEST_REL);
-  const pinPath = join22(targetRepo, BUNDLE_PIN_REL);
+  const manifestPath = join23(targetRepo, INSTALL_MANIFEST_REL);
+  const pinPath = join23(targetRepo, BUNDLE_PIN_REL);
   if (symlinkOnPath(targetRepo, INSTALL_MANIFEST_REL) || symlinkOnPath(targetRepo, BUNDLE_PIN_REL)) {
     throw new Refusal(`.halfcycle, or a file Halfcycle keeps in it, is a symbolic link here, so nothing was followed and nothing was removed.`);
   }
@@ -17518,7 +17796,7 @@ function validate(options, rules) {
       throw new Refusal(`the project id in ${BUNDLE_PIN_REL} is not a valid Halfcycle project id, so it cannot name a folder on this machine. Nothing was removed, here or under ~/.halfcycle.`);
     }
     if (engagementId !== void 0) {
-      const expectedParent = join22(home ?? homedir5(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME);
+      const expectedParent = join23(home ?? homedir6(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME);
       if (dirname6(engagementStateDir(engagementId, home)) !== expectedParent) {
         throw new Refusal(`the project id in ${BUNDLE_PIN_REL} does not name a folder under ~/.halfcycle/engagements. Nothing was removed.`);
       }
@@ -17544,7 +17822,7 @@ function mergedFileRules(writeSet) {
 function writeBack(targetRepo, rel, current, next, lists, name) {
   if (next === current)
     return;
-  const path = join22(targetRepo, rel);
+  const path = join23(targetRepo, rel);
   try {
     if (next === null) {
       rmSync6(path);
@@ -17561,7 +17839,7 @@ function statusLineClaimedFromTree(targetRepo, writeSet) {
   try {
     if (symlinkOnPath(targetRepo, SETTINGS_REL))
       return {};
-    const value = JSON.parse(readFileSync20(join22(targetRepo, SETTINGS_REL), "utf-8"));
+    const value = JSON.parse(readFileSync20(join23(targetRepo, SETTINGS_REL), "utf-8"));
     if (!isPlainObject3(value) || !("statusLine" in value))
       return {};
     const hash = canonicalSha256(value["statusLine"]);
@@ -17575,7 +17853,7 @@ function noRecord(targetRepo, writeSet) {
   const claim = (rel, header, lines) => {
     let text;
     try {
-      text = symlinkOnPath(targetRepo, rel) ? "" : readFileSync20(join22(targetRepo, rel), "utf-8");
+      text = symlinkOnPath(targetRepo, rel) ? "" : readFileSync20(join23(targetRepo, rel), "utf-8");
     } catch {
       text = "";
     }
@@ -17816,7 +18094,7 @@ function lastOccurrence(text, block) {
 }
 function coveredPathExists(targetRepo, line) {
   const path = line.trim().replace(/^\//, "").replace(/\/$/, "");
-  return path !== "" && lexists(join22(targetRepo, path));
+  return path !== "" && lexists(join23(targetRepo, path));
 }
 function selfBuildMergedFileRules() {
   return {
@@ -17830,7 +18108,7 @@ function removeSelfBuildOwnedFile(targetRepo, rel, lists, name) {
     name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
     return;
   }
-  const abs = join22(targetRepo, rel);
+  const abs = join23(targetRepo, rel);
   let isFile;
   try {
     isFile = lstatSync3(abs).isFile();
@@ -17854,7 +18132,7 @@ function removeSelfBuildCrewRoster(targetRepo, lists, name) {
     name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
     return;
   }
-  const abs = join22(targetRepo, rel);
+  const abs = join23(targetRepo, rel);
   let bytes;
   try {
     bytes = readFileSync20(abs);
@@ -17881,7 +18159,7 @@ function removeSelfBuildCrewProfile(targetRepo, rel, text, lists, name) {
     name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
     return;
   }
-  const abs = join22(targetRepo, rel);
+  const abs = join23(targetRepo, rel);
   let bytes;
   try {
     bytes = readFileSync20(abs);
@@ -17906,7 +18184,7 @@ function removeSelfBuildCrewProfile(targetRepo, rel, text, lists, name) {
 function removeSelfBuildEmptyDir(targetRepo, dir, lists, name) {
   if (symlinkOnPath(targetRepo, dir))
     return;
-  const abs = join22(targetRepo, dir);
+  const abs = join23(targetRepo, dir);
   try {
     if (!lstatSync3(abs).isDirectory() || readdirSync(abs).length > 0)
       return;
@@ -17940,7 +18218,7 @@ function uninstallSelfBuild(options) {
     throw err;
   }
   const { targetRepo } = options;
-  const pinExisted = lexists(join22(targetRepo, BUNDLE_PIN_REL));
+  const pinExisted = lexists(join23(targetRepo, BUNDLE_PIN_REL));
   const name = (list2, text, _path) => {
     list2.push(text);
   };
@@ -18056,7 +18334,7 @@ function uninstall(options) {
   const gitattributes = manifest.gitattributes ?? { created: false, appended: [] };
   trimAppendedFile(targetRepo, gitattributes, deleteWhenEmpty(gitattributes.created), gitattributesRules(writeSet), result, name);
   const foundNothing = result.removed.length + result.restored.length + result.kept.length + result.failed.length === 0 && result.keptIgnoreLines.length === 0;
-  if (checked.manifest === null && !lexists(join22(targetRepo, BUNDLE_PIN_REL)) && foundNothing) {
+  if (checked.manifest === null && !lexists(join23(targetRepo, BUNDLE_PIN_REL)) && foundNothing) {
     return { outcome: "not-installed", exitCode: 0, ...result, credential: nothingToSay };
   }
   const credential = handleCredential(options, checked);
@@ -18064,7 +18342,7 @@ function uninstall(options) {
   if (result.failed.length === 0 && !credentialFailed) {
     removeInstalledFile(targetRepo, BUNDLE_PIN_REL, recorded.get(BUNDLE_PIN_REL), writeSet, result, name);
     try {
-      rmSync6(join22(targetRepo, INSTALL_MANIFEST_REL), { force: true });
+      rmSync6(join23(targetRepo, INSTALL_MANIFEST_REL), { force: true });
       named2.add(INSTALL_MANIFEST_REL);
     } catch {
       name(result.failed, INSTALL_MANIFEST_REL, INSTALL_MANIFEST_REL);
@@ -18099,13 +18377,13 @@ function applyMergedJson(targetRepo, rule, file, deleteWhenEmpty, lists, name, e
     return;
   const empty = Object.keys(value).length === 0 && deleteWhenEmpty;
   writeBack(targetRepo, rel, file.text, empty ? null : inLineEndingOf(file.text, serializeJson(value)), lists, name);
-  if (adopted && lexists(join22(targetRepo, rel))) {
+  if (adopted && lexists(join23(targetRepo, rel))) {
     name(lists.leftAlone, `${rel} (Halfcycle's hooks were taken out. There is no record of this file from before the install, so a permission rule or "$schema" Halfcycle added may still be there \u2014 it cannot be told apart from your own)`, rel);
   }
 }
 function removeCodexConfigBlock(targetRepo, record2, deleteWhenEmpty, lists, name) {
   const rel = CODEX_CONFIG_REL2;
-  const path = join22(targetRepo, rel);
+  const path = join23(targetRepo, rel);
   if (symlinkOnPath(targetRepo, rel)) {
     if (lexists(path))
       name(lists.leftAlone, `${rel} (a symbolic link, or inside one \u2014 not followed)`, rel);
@@ -18150,7 +18428,7 @@ function removeInstalledFile(targetRepo, path, entry, writeSet, lists, name) {
     name(lists.leftAlone, `${path} (a symbolic link, or inside one \u2014 not followed)`, path);
     return;
   }
-  const abs = join22(targetRepo, path);
+  const abs = join23(targetRepo, path);
   let isFile;
   try {
     isFile = lstatSync3(abs).isFile();
@@ -18184,7 +18462,7 @@ function removeInstalledFile(targetRepo, path, entry, writeSet, lists, name) {
 function removeEmptyDir(targetRepo, dir, writeSet, lists, name) {
   if (!writeSet.dirs.has(dir) || symlinkOnPath(targetRepo, dir))
     return;
-  const abs = join22(targetRepo, dir);
+  const abs = join23(targetRepo, dir);
   try {
     if (!lstatSync3(abs).isDirectory() || readdirSync(abs).length > 0)
       return;
@@ -18203,7 +18481,7 @@ function trimAppendedFile(targetRepo, rec, deleteWhenEmpty, rules, lists, name)
     name(lists.leftAlone, `${rel} (a symbolic link \u2014 not followed)`, rel);
     return [];
   }
-  const path = join22(targetRepo, rel);
+  const path = join23(targetRepo, rel);
   let before;
   try {
     before = readFileSync20(path, "utf-8");
@@ -18250,16 +18528,16 @@ function filesUnder(root, rel) {
   const walk = (dirRel) => {
     let names;
     try {
-      if (!lstatSync3(join22(root, dirRel)).isDirectory())
+      if (!lstatSync3(join23(root, dirRel)).isDirectory())
         return;
-      names = readdirSync(join22(root, dirRel));
+      names = readdirSync(join23(root, dirRel));
     } catch {
       return;
     }
     for (const entry of names.sort()) {
       const childRel = `${dirRel}/${entry}`;
       try {
-        if (lstatSync3(join22(root, childRel)).isDirectory())
+        if (lstatSync3(join23(root, childRel)).isDirectory())
           walk(childRel);
         else
           out.push(childRel);
@@ -18272,7 +18550,7 @@ function filesUnder(root, rel) {
   return out;
 }
 function shownPath(path, home) {
-  const base = home ?? homedir5();
+  const base = home ?? homedir6();
   const rel = relative6(base, path);
   const under = rel !== "" && !rel.startsWith("..") && !rel.startsWith(sep2);
   return `${under ? `~/${rel.split(sep2).join("/")}` : path}/`;
@@ -18332,7 +18610,7 @@ function renderUninstallReport(result, home) {
 
 // dist/banner-facts.js
 import { readFileSync as readFileSync21 } from "node:fs";
-import { basename as basename4, join as join23, resolve as resolve7 } from "node:path";
+import { basename as basename4, join as join24, resolve as resolve7 } from "node:path";
 var BRAND_URL = "halfcycle.ai";
 var TAGLINE = [
   "Fewer cycles.",
@@ -18345,7 +18623,7 @@ var TAGLINE_NARROW = [
 ];
 function bundleVersion() {
   try {
-    const pkg = JSON.parse(readFileSync21(join23(BUNDLE_ROOT, "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync21(join24(BUNDLE_ROOT, "package.json"), "utf-8"));
     return typeof pkg.version === "string" ? pkg.version : void 0;
   } catch {
     return void 0;
@@ -18441,7 +18719,7 @@ function safeBasename(dir) {
 // dist/pace.js
 import { spawn as spawn3 } from "node:child_process";
 import { readFileSync as readFileSync22 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 var PACE_USAGE = `${HALFCYCLE_COMMAND} pace [--agent claude-code|codex] [--start <phase> [--agents <n>]] [--repo <root>]`;
 function parsePaceArgs(argv) {
   let repoRoot;
@@ -18555,7 +18833,7 @@ function notPacedLine(reason) {
 }
 function readPromptScript(repoRoot) {
   try {
-    return readFileSync22(join24(repoRoot, ".claude", "hooks", "user-prompt-scope.sh"), "utf-8");
+    return readFileSync22(join25(repoRoot, ".claude", "hooks", "user-prompt-scope.sh"), "utf-8");
   } catch {
     return null;
   }
@@ -18593,14 +18871,17 @@ async function runPace(repoRoot, start, deps, agent = null) {
     return { stdout: `${paceStartLinesOf(result.suggestion, behind).join("\n")}
 `, stderr: "", exitCode: 0 };
   }
-  const lines = [paceAllowedNowOf(result.allowedNow)];
+  const share = result.keepFreePercent ?? KEEP_FREE_DEFAULT;
+  const lines = [paceBuildUpToOf(result.number), paceAllowedNowOf(result.allowedNow), share === 0 ? PACE_P5 : paceP3Of(share)];
+  if (result.limit !== "reached" && result.usage !== void 0) {
+    lines.push(limitUsedOf(result.usage.used, result.usage.limit));
+  }
   if (result.limit === "reached" && result.limitHeld !== void 0) {
     const held = result.limitHeld;
     lines.push(limitReachedLineOf(held.used, held.limit, held.working, held.raiseBy));
   }
   if (result.windowKind !== void 0 && result.until !== void 0) {
     const until = new Date(result.until);
-    const share = result.keepFreePercent ?? KEEP_FREE_DEFAULT;
     if (result.pace === "slowing")
       lines.push(paceS1Of(result.windowKind, result.allowedNow, until, deps.now(), share));
     else if (result.pace === "holding")
@@ -18611,10 +18892,9 @@ async function runPace(repoRoot, start, deps, agent = null) {
 }
 
 // dist/route.js
-import { mkdirSync as mkdirSync10, readFileSync as readFileSync23, renameSync as renameSync4, writeFileSync as writeFileSync8 } from "node:fs";
-import { dirname as dirname7, join as join25 } from "node:path";
+import { readFileSync as readFileSync23 } from "node:fs";
+import { join as join26 } from "node:path";
 var ROUTE_USAGE = `${HALFCYCLE_COMMAND} route <phase> <task> [--agent claude-code|codex] [--repo <root>]`;
-var ROUTING_FILENAME = "routing.json";
 var ROUTE_WORK_READ_DEADLINE_MS = 5e3;
 function parseRouteArgs(argv) {
   const positionals = [];
@@ -18656,7 +18936,7 @@ function parseRouteArgs(argv) {
   return { ok: true, phase: positionals[0], task: positionals[1], agent: agent ?? "claude-code", repoRoot };
 }
 function routingPath(engagementId, home) {
-  return join25(engagementStateDir(engagementId, home), ROUTING_FILENAME);
+  return join26(engagementStateDir(engagementId, home), ROUTING_FILENAME);
 }
 function readCheapStarted(path, phase) {
   try {
@@ -18668,19 +18948,11 @@ function readCheapStarted(path, phase) {
     return [];
   }
 }
-function recordCheapStarted(path, phase, task) {
-  const started = readCheapStarted(path, phase);
-  const record2 = { phase, cheapStarted: started.includes(task) ? started : [...started, task] };
-  mkdirSync10(dirname7(path), { recursive: true, mode: 448 });
-  const tmp = `${path}.${String(process.pid)}.tmp`;
-  writeFileSync8(tmp, `${JSON.stringify(record2)}
-`, { mode: 384 });
-  renameSync4(tmp, path);
-}
-function attemptsOf(read, task) {
+function workOf(read, task) {
   if (read.kind !== "work")
     return null;
-  return read.work.tasks.find((t) => t.task === task)?.attempts ?? [];
+  const entry = read.work.tasks.find((t) => t.task === task);
+  return { attempts: entry?.attempts ?? [], passed: entry?.standing === "passed" };
 }
 function lastTierOf(attempts) {
   return [...attempts].sort((a, b) => b.attempt - a.attempt)[0].builderTier;
@@ -18734,9 +19006,11 @@ async function runRoute(repoRoot, phase, taskId, agent, deps) {
   } catch {
     return answer(routeStartLineOf(holder, taskId, member.tier));
   }
-  const attempts = attemptsOf(await readWorkInTime(deps, credential, phase), taskId);
-  if (attempts !== null && attempts.length > 0) {
-    return answer(routeStartLineOf(holder, taskId, tierAboveOf(lastTierOf(attempts))));
+  const work = workOf(await readWorkInTime(deps, credential, phase), taskId);
+  if (work !== null && work.attempts.length > 0) {
+    if (work.passed)
+      return answer(routePassedLineOf(taskId, lastTierOf(work.attempts)));
+    return answer(routeStartLineOf(holder, taskId, tierAboveOf(lastTierOf(work.attempts))));
   }
   if (agent === "codex" && !hasCheaperRole(member))
     return answer(routeStartLineOf(holder, taskId, member.tier));
@@ -18748,19 +19022,14 @@ async function runRoute(repoRoot, phase, taskId, agent, deps) {
   }
   if (readCheapStarted(path, phase).includes(taskId))
     return answer(routeStartLineOf(holder, taskId, member.tier));
-  try {
-    recordCheapStarted(path, phase, taskId);
-  } catch {
-    return answer(routeStartLineOf(holder, taskId, member.tier));
-  }
   return answer(agent === "codex" ? routeCheaperCodexLineOf(holder, taskId) : routeCheaperClaudeLineOf(holder, taskId, AGENT_PROFILES["claude-code"].tierModels.fast.model));
 }
 
 // dist/restore.js
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { closeSync as closeSync3, fchmodSync, lstatSync as lstatSync4, mkdirSync as mkdirSync11, openSync as openSync3, readdirSync as readdirSync2, readFileSync as readFileSync24, readlinkSync, realpathSync as realpathSync6, rmSync as rmSync7, symlinkSync, writeSync as writeSync2 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join26, resolve as resolve8 } from "node:path";
+import { closeSync as closeSync3, fchmodSync, lstatSync as lstatSync4, mkdirSync as mkdirSync10, openSync as openSync3, readdirSync as readdirSync2, readFileSync as readFileSync24, readlinkSync, realpathSync as realpathSync6, rmSync as rmSync7, symlinkSync, writeSync as writeSync2 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join27, resolve as resolve8 } from "node:path";
 var RESTORE_USAGE = `${HALFCYCLE_COMMAND} restore [<id>]`;
 function parseRestoreArgs(rest) {
   if (rest.length > 1)
@@ -18782,28 +19051,28 @@ function runRestore(cwd, id, options = {}) {
   if (engagementId === null) {
     return refused2(`Halfcycle is not set up in this project, so it has saved nothing here. To set it up, run: ${HALFCYCLE_COMMAND}`);
   }
-  const folder = join26(options.home ?? homedir6(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, SAVED_DIR_NAME);
+  const folder2 = join27(options.home ?? homedir7(), HALFCYCLE_DIR_NAME, ENGAGEMENTS_DIR_NAME, engagementId, SAVED_DIR_NAME);
   const refs = savedRefs(root);
   if (refs === null)
     return refused2("Halfcycle could not read the saved copies in this project, so nothing was put back.");
-  pruneAtRestore(root, folder, refs, now());
+  pruneAtRestore(root, folder2, refs, now());
   for (const [saveId, madeAt] of [...refs]) {
     const answer = savedPruneAnswer({ refMadeAt: madeAt, folderChangedAt: 0, folderRepository: null }, { repository: null, now: now() });
     if (answer !== "keep")
       refs.delete(saveId);
   }
   if (id === void 0)
-    return list(root, folder, refs);
-  return restoreOne(root, folder, refs, id);
+    return list(root, folder2, refs);
+  return restoreOne(root, folder2, refs, id);
 }
 function refused2(line) {
   return { stdout: "", stderr: `${line}
 `, exitCode: 1 };
 }
-function list(root, folder, refs) {
+function list(root, folder2, refs) {
   const rows = [];
   for (const [id, at] of refs) {
-    const saved = readSaved(folder, id);
+    const saved = readSaved(folder2, id);
     if (saved !== null)
       rows.push({ id, at, what: saved.what });
   }
@@ -18833,14 +19102,14 @@ function whenOf(ms) {
 function printable(text) {
   return text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/g, " ");
 }
-function restoreOne(root, folder, refs, rawId) {
+function restoreOne(root, folder2, refs, rawId) {
   const valid = savedIdSchema.safeParse(rawId);
   const named2 = valid.success ? `"${rawId}"` : "with that name";
   if (!valid.success || !refs.has(rawId)) {
     return refused2(`No saved copy ${named2} is kept in this project. Saved copies are kept for 7 days. To see the ones there are, run: ${LIST_COMMAND}`);
   }
   const id = valid.data;
-  const saved = readSaved(folder, id);
+  const saved = readSaved(folder2, id);
   if (saved === null)
     return refused2(`The saved copy "${id}" could not be read, so nothing was put back.`);
   const ref = savedRefOf(id);
@@ -18858,7 +19127,7 @@ function restoreOne(root, folder, refs, rawId) {
     if (p.keptIn === "commit")
       fromCommit.push(p.path);
     else
-      restoreCopy(root, join26(folder, id), p.path, out);
+      restoreCopy(root, join27(folder2, id), p.path, out);
   }
   if (fromCommit.length > 0)
     restoreFromCommit(root, ref, fromCommit, out);
@@ -18886,12 +19155,12 @@ function makeFolders(root, rel) {
   const segments = rel.split("/");
   let at = root;
   for (let i = 0; i < segments.length - 1; i++) {
-    at = join26(at, segments[i]);
+    at = join27(at, segments[i]);
     const shown2 = segments.slice(0, i + 1).join("/");
     let st = lstatOrNull3(at);
     if (st === null) {
       try {
-        mkdirSync11(at);
+        mkdirSync10(at);
       } catch {
       }
       st = lstatOrNull3(at);
@@ -18906,7 +19175,7 @@ function makeFolders(root, rel) {
   return null;
 }
 function place(root, rel, content, out) {
-  const abs = join26(root, rel);
+  const abs = join27(root, rel);
   const there = lstatOrNull3(abs);
   if (there !== null) {
     if (sameAs(abs, there, content))
@@ -18954,14 +19223,14 @@ function restoreCopy(root, saveDir, rel, out) {
   let at = saveDir;
   const chain = [SAVED_COPIES_DIR_NAME, ...segments];
   for (let i = 0; i < chain.length - 1; i++) {
-    at = join26(at, chain[i]);
+    at = join27(at, chain[i]);
     const st2 = lstatOrNull3(at);
     if (st2 === null || st2.isSymbolicLink() || !st2.isDirectory()) {
       out.left.push(`${rel}: the saved copy does not hold it`);
       return;
     }
   }
-  const src = join26(at, chain[chain.length - 1]);
+  const src = join27(at, chain[chain.length - 1]);
   const st = lstatOrNull3(src);
   try {
     if (st !== null && st.isSymbolicLink())
@@ -19065,7 +19334,7 @@ function restoreLines(root, ref, saved, out) {
 }
 function pinnedEngagement(root) {
   try {
-    const pin = JSON.parse(readFileSync24(join26(root, BUNDLE_PIN_REL), "utf-8"));
+    const pin = JSON.parse(readFileSync24(join27(root, BUNDLE_PIN_REL), "utf-8"));
     return isEngagementId(pin.engagementId) ? pin.engagementId : null;
   } catch {
     return null;
@@ -19086,12 +19355,12 @@ function savedRefs(root) {
   }
   return refs;
 }
-function readSaved(folder, id) {
-  const dir = join26(folder, id);
+function readSaved(folder2, id) {
+  const dir = join27(folder2, id);
   const st = lstatOrNull3(dir);
   if (st === null || !st.isDirectory())
     return null;
-  const file = join26(dir, SAVED_FILE_NAME);
+  const file = join27(dir, SAVED_FILE_NAME);
   const fst = lstatOrNull3(file);
   if (fst === null || !fst.isFile())
     return null;
@@ -19102,13 +19371,13 @@ function readSaved(folder, id) {
     return null;
   }
 }
-function pruneAtRestore(root, folder, refs, now) {
+function pruneAtRestore(root, folder2, refs, now) {
   try {
     const common = git2(root, ["rev-parse", "--git-common-dir"]);
     const repository = common.ok && common.text.trim() !== "" ? realOrSelf(resolve8(root, common.text.trim())) : null;
     let names = [];
     try {
-      names = readdirSync2(folder);
+      names = readdirSync2(folder2);
     } catch {
       names = [];
     }
@@ -19117,7 +19386,7 @@ function pruneAtRestore(root, folder, refs, now) {
       if (!savedIdSchema.safeParse(id).success)
         continue;
       here.add(id);
-      const dir = join26(folder, id);
+      const dir = join27(folder2, id);
       const st = lstatOrNull3(dir);
       const answer = savedPruneAnswer({
         refMadeAt: refs.get(id) ?? null,
@@ -19145,7 +19414,7 @@ function pruneAtRestore(root, folder, refs, now) {
 }
 function markedRepository(dir) {
   try {
-    const text = readFileSync24(join26(dir, SAVED_REPOSITORY_FILE_NAME), "utf-8").trim();
+    const text = readFileSync24(join27(dir, SAVED_REPOSITORY_FILE_NAME), "utf-8").trim();
     return text === "" ? null : text;
   } catch {
     return null;
@@ -19174,7 +19443,110 @@ function realOrSelf(p) {
   }
 }
 
+// dist/request-shapes-verb.js
+import { chmodSync as chmodSync4, existsSync as existsSync13, mkdirSync as mkdirSync11, readFileSync as readFileSync25, rmSync as rmSync8, writeFileSync as writeFileSync8 } from "node:fs";
+import { homedir as homedir8, platform as platform5 } from "node:os";
+import { join as join28 } from "node:path";
+var REQUEST_SHAPES_USAGE = `${HALFCYCLE_COMMAND} request-shapes on|off|show|clear`;
+var REQUEST_SHAPES_FORMS = ["on", "off", "show", "clear"];
+var REQUEST_SHAPES_ON_LINE = "Halfcycle will write down the shape of every request this computer sends to it, never what is in them, until you run request-shapes off.";
+var REQUEST_SHAPES_OFF_LINE = "Halfcycle has stopped writing down requests. What it wrote is still there: run request-shapes show to read it, or request-shapes clear to remove it.";
+var REQUEST_SHAPES_EMPTY_LINE = "No requests have been written down.";
+var REQUEST_SHAPES_CLEARED_LINE = "Halfcycle has removed the requests it wrote down.";
+function parseRequestShapesArgs(rest) {
+  if (rest.length !== 1)
+    return null;
+  const form = rest[0];
+  return REQUEST_SHAPES_FORMS.includes(form ?? "") ? form : null;
+}
+function asLoggedLine(text) {
+  let value;
+  try {
+    value = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (typeof value !== "object" || value === null)
+    return null;
+  const v = value;
+  const str = (k) => typeof v[k] === "string" ? v[k] : "";
+  return {
+    at: str("at"),
+    process: str("process"),
+    method: str("method"),
+    host: str("host"),
+    path: str("path"),
+    query: Array.isArray(v["query"]) ? v["query"].filter((q) => typeof q === "string") : [],
+    shape: typeof v["shape"] === "string" ? v["shape"] : null,
+    status: typeof v["status"] === "number" || typeof v["status"] === "string" ? v["status"] : ""
+  };
+}
+function formatLine(line) {
+  const at = line.at.replace(/\.\d+Z$/, "Z");
+  const query = line.query.length > 0 ? `?${line.query.join("&")}` : "";
+  const head = `${at}  ${line.process.padEnd(22)} ${line.method.padEnd(4)} ${line.host} ${line.path}${query}  -> ${String(line.status)}`;
+  return line.shape === null ? head : `${head}
+  ${line.shape}`;
+}
+function showLog(logPath2) {
+  let text = "";
+  try {
+    text = existsSync13(logPath2) ? readFileSync25(logPath2, "utf-8") : "";
+  } catch {
+    text = "";
+  }
+  const lines = text.split("\n").filter((l) => l.trim() !== "").map(asLoggedLine).filter((l) => l !== null);
+  if (lines.length === 0)
+    return `${REQUEST_SHAPES_EMPTY_LINE}
+`;
+  const count = lines.length === 1 ? "1 request." : `${lines.length} requests.`;
+  return `${lines.map(formatLine).join("\n")}
+${count}
+`;
+}
+function ownerOnly(path, mode) {
+  if (platform5() !== "win32")
+    chmodSync4(path, mode);
+}
+function runRequestShapes(form, home = homedir8()) {
+  const folder2 = join28(home, HALFCYCLE_DIR_NAME, REQUEST_SHAPES_DIR_NAME);
+  const switchPath = join28(folder2, REQUEST_SHAPES_SWITCH_FILENAME);
+  const logPath2 = join28(folder2, REQUEST_SHAPES_LOG_FILENAME);
+  try {
+    switch (form) {
+      case "on":
+        mkdirSync11(folder2, { recursive: true, mode: 448 });
+        ownerOnly(folder2, 448);
+        writeFileSync8(switchPath, "", { mode: 384 });
+        ownerOnly(switchPath, 384);
+        return { stdout: `${REQUEST_SHAPES_ON_LINE}
+`, stderr: "", exitCode: 0 };
+      case "off":
+        rmSync8(switchPath, { force: true });
+        return { stdout: `${REQUEST_SHAPES_OFF_LINE}
+`, stderr: "", exitCode: 0 };
+      case "show":
+        return { stdout: showLog(logPath2), stderr: "", exitCode: 0 };
+      case "clear":
+        if (existsSync13(logPath2)) {
+          writeFileSync8(logPath2, "", { mode: 384 });
+          ownerOnly(logPath2, 384);
+        }
+        return { stdout: `${REQUEST_SHAPES_CLEARED_LINE}
+`, stderr: "", exitCode: 0 };
+    }
+  } catch {
+    return {
+      stdout: "",
+      stderr: `halfcycle request-shapes: Halfcycle could not change its settings folder in your home folder. Check that you can write to it, then run this again.
+`,
+      exitCode: 1
+    };
+  }
+}
+
 // dist/bin.js
+knowRequestShapeVerbs(CLI_VERBS);
 var ASSUME_YES_FLAGS = /* @__PURE__ */ new Set(["--yes", "-y"]);
 var QUIET_FLAGS = /* @__PURE__ */ new Set(["--quiet", "-q"]);
 var VERBOSE_FLAGS = /* @__PURE__ */ new Set(["--verbose", "-v"]);
@@ -19267,6 +19639,9 @@ var USAGE = `  ${HALFCYCLE_COMMAND} [install] [target-repo] [engagement-id] [sel
          show what setting up this folder would add, change, remove or leave alone; writes nothing
   ${HALFCYCLE_COMMAND} doctor
          check this folder: set up, signed in, connected, checks running, up to date; says what to do for each one that is not; changes nothing
+  ${REQUEST_SHAPES_USAGE}
+         write down the shape of every request this computer sends to Halfcycle, never what is in
+         them; show what was written; empty it; stop
   ${RESTORE_USAGE}
          list the copies Halfcycle saved before a change it let through, or bring one back; never
          replaces a file or a line of work that exists now
@@ -19396,6 +19771,22 @@ ${USAGE}`);
     process.exitCode = report.exitCode;
     return;
   }
+  if (cmd === "request-shapes") {
+    const form = parseRequestShapesArgs(rest);
+    if (form === null) {
+      process.stderr.write(`halfcycle request-shapes: usage: ${REQUEST_SHAPES_USAGE}
+`);
+      process.exitCode = 2;
+      return;
+    }
+    const run = runRequestShapes(form);
+    if (run.stdout !== "")
+      process.stdout.write(run.stdout);
+    if (run.stderr !== "")
+      process.stderr.write(run.stderr);
+    process.exitCode = run.exitCode;
+    return;
+  }
   if (cmd === "restore") {
     const parsed = parseRestoreArgs(rest);
     if (!parsed.ok) {
@@ -19415,7 +19806,7 @@ ${USAGE}`);
   if (installArm) {
     const engagementIdArg = positionals[1];
     const engagementTypeRaw = positionals[2] ?? "client";
-    if (!existsSync12(targetRepo)) {
+    if (!existsSync14(targetRepo)) {
       process.stderr.write(`${folderMissingRefusal(targetRepo)}
 `);
       process.exit(1);