heyspex 0.2.0 → 0.2.1

package/dist/cli/hs-join.mjs

@@ -39,11 +39,26 @@ var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__
   mod2
 ));
 
+// scripts/lib/heyspex-home.mjs
+import { homedir as homedir2 } from "node:os";
+function heyspexHome2(env = process.env) {
+  const override = env?.HEYSPEX_HOME;
+  if (typeof override === "string" && override.trim().length > 0) {
+    return override.trim();
+  }
+  return homedir2();
+}
+var init_heyspex_home = __esm({
+  "scripts/lib/heyspex-home.mjs"() {
+    "use strict";
+  }
+});
+
 // vendor/heyspex-mcp/credentials.mjs
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import os, { homedir } from "node:os";
+import os, { homedir as homedir3 } from "node:os";
 import { dirname, join, resolve } from "node:path";
-function credentialsFilePath(homeDir = homedir()) {
+function credentialsFilePath(homeDir = heyspexHome2()) {
   return join(homeDir, ".heyspex", "credentials.yaml");
 }
 function parseMcpToken(raw) {
@@ -156,14 +171,14 @@ function readLegacyConfigAccountId(read2, homeDir) {
   const value = raw?.match(CONFIG_ACCOUNT_ID_RE)?.[1]?.trim() ?? "";
   return value || null;
 }
-function readBearer({ env = process.env, homeDir = homedir(), readFile: readFile3, accountId } = {}) {
+function readBearer({ env = process.env, homeDir = heyspexHome2(), readFile: readFile3, accountId } = {}) {
   const read2 = readFile3 ?? ((p) => readFileSync(p, "utf8"));
   const credentialsText = readTextOrNull(read2, credentialsFilePath(homeDir));
   const named = typeof accountId === "string" && accountId.trim() ? accountId.trim() : null;
   const legacyAccountId = named && parseCredentialsStore(credentialsText).schemaVersion === 1 ? readLegacyConfigAccountId(read2, homeDir) : null;
   return resolveBearer({ envToken: env?.[MCP_TOKEN_ENV], credentialsText, accountId: named, legacyAccountId });
 }
-function readCurrentAccountId({ homeDir = homedir(), readFile: readFile3 } = {}) {
+function readCurrentAccountId({ homeDir = heyspexHome2(), readFile: readFile3 } = {}) {
   const read2 = readFile3 ?? ((p) => readFileSync(p, "utf8"));
   const store = parseCredentialsStore(readTextOrNull(read2, credentialsFilePath(homeDir)));
   if (store.schemaVersion === 2 && store.currentAccountId && store.currentAccountId !== LEGACY_ACCOUNT_ID) {
@@ -181,6 +196,7 @@ var MCP_TOKEN_ENV, MCP_TOKEN_LINE_RE, CREDENTIALS_SCHEMA_VERSION, LEGACY_ACCOUNT
 var init_credentials = __esm({
   "vendor/heyspex-mcp/credentials.mjs"() {
     "use strict";
+    init_heyspex_home();
     MCP_TOKEN_ENV = "HEYSPEX_MCP_TOKEN";
     MCP_TOKEN_LINE_RE = /^mcp_token:[ \t]*["']?([^"'\r\n#]+)/m;
     CREDENTIALS_SCHEMA_VERSION = 2;
@@ -193,9 +209,9 @@ var init_credentials = __esm({
 
 // scripts/lib/dev-mode.mjs
 import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir5 } from "node:os";
 import { join as join4 } from "node:path";
-function devModeFilePath(homeDir = homedir4()) {
+function devModeFilePath(homeDir = heyspexHome2()) {
   return join4(homeDir, ".heyspex", DEV_MODE_FILENAME);
 }
 function normalizeMode(raw) {
@@ -220,7 +236,7 @@ function deriveSemantics(mode, reliance) {
     vaultWriteMode: local ? "local" : "cloud"
   };
 }
-function readLocalDevModeRecord({ homeDir = homedir4(), readFile: readFile3 = defaultReadFile } = {}) {
+function readLocalDevModeRecord({ homeDir = heyspexHome2(), readFile: readFile3 = defaultReadFile } = {}) {
   let raw;
   try {
     raw = readFile3(devModeFilePath(homeDir));
@@ -250,7 +266,7 @@ function readLocalDevModeRecord({ homeDir = homedir4(), readFile: readFile3 = de
 }
 function resolveDevMode({
   env = process.env,
-  homeDir = homedir4(),
+  homeDir = heyspexHome2(),
   readFile: readFile3 = defaultReadFile,
   cloudSetting = void 0
 } = {}) {
@@ -313,6 +329,7 @@ var CLOUD_CONSOLE_URL, LOCAL_CONSOLE_URL, DEV_MODE_FILENAME, defaultReadFile;
 var init_dev_mode = __esm({
   "scripts/lib/dev-mode.mjs"() {
     "use strict";
+    init_heyspex_home();
     init_credentials();
     CLOUD_CONSOLE_URL = "https://app.heyspex.com";
     LOCAL_CONSOLE_URL = "http://localhost:3000";
@@ -22722,14 +22739,14 @@ var require_lib2 = __commonJS({
 
 // spex-console/bin/hs-join.ts
 import { spawn, spawnSync as spawnSync5 } from "node:child_process";
-import { existsSync as existsSync10, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync10, readFileSync as readFileSync15, writeFileSync as writeFileSync10 } from "node:fs";
 import { userInfo } from "node:os";
-import { basename as basename3, dirname as dirname6, join as join15, resolve as resolve5 } from "node:path";
+import { basename as basename4, dirname as dirname6, join as join16, resolve as resolve5 } from "node:path";
 import process4 from "node:process";
 import { createInterface as createInterface2 } from "node:readline/promises";
 
 // spex-console/src/lib/cli/connect.ts
-import { readdirSync } from "node:fs";
+import { readdirSync as readdirSync2 } from "node:fs";
 
 // dist/cli/._sql-orm-inert.cli-shim.mjs
 var inert = new Proxy(function inert2() {
@@ -22767,14 +22784,24 @@ var uniqueIndex = inert;
 
 // spex-console/src/lib/cli/vault-workspace-shared.ts
 import { readFileSync as readFileSync3 } from "node:fs";
-import os2 from "node:os";
+
+// spex-console/src/lib/heyspex-home.ts
+import { homedir } from "node:os";
+function heyspexHome(env = process.env) {
+  const override = env?.HEYSPEX_HOME;
+  if (typeof override === "string" && override.trim().length > 0) {
+    return override.trim();
+  }
+  return homedir();
+}
 
 // vendor/heyspex-mcp/session-owner.mjs
+init_heyspex_home();
 init_credentials();
 import { readFileSync as readFileSync2 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { join as join2 } from "node:path";
-function resolveSessionOwnerUncached({ env = process.env, homeDir = homedir2(), readFile: readFile3 } = {}) {
+function resolveSessionOwnerUncached({ env = process.env, homeDir = heyspexHome2(), readFile: readFile3 } = {}) {
   const fromEnv = typeof env?.HS_ACCOUNT_ID === "string" ? env.HS_ACCOUNT_ID.trim() : "";
   if (fromEnv) return fromEnv;
   return readCurrentAccountId({ homeDir, readFile: readFile3 });
@@ -22803,7 +22830,7 @@ function resolveOfflineDefaultWorkspace(accountId, localWorkspaceIds) {
 function resolveConfiguredAccountId(opts = {}) {
   return resolveSessionOwnerUncached({
     env: opts.env ?? process.env,
-    homeDir: opts.homeDir ?? os2.homedir(),
+    homeDir: opts.homeDir ?? heyspexHome(),
     readFile: opts.readFile ?? ((p) => readFileSync3(p, "utf-8"))
   });
 }
@@ -23367,7 +23394,13 @@ var specEventKindEnum = pgEnum("spec_event_kind", [
   "priority_change",
   "parent_change",
   "claim_acquired",
-  "claim_released"
+  "claim_released",
+  // Collaborator write audit (HS-FWB6, migration 0077).
+  "spec_created",
+  "spec_edited",
+  "spec_deleted",
+  "capture_written",
+  "wip_recorded"
 ]);
 var focusPin = pgTable(
   "focus_pin",
@@ -24560,11 +24593,43 @@ var specSettlements = pgTable(
     // `owner/name`
     branch: text("branch").notNull(),
     commitSha: text("commit_sha").notNull(),
-    settledAt: timestamp("settled_at", { withTimezone: true }).notNull().default(sql`now()`)
+    settledAt: timestamp("settled_at", { withTimezone: true }).notNull().default(sql`now()`),
+    // The pull request that carries this settlement
+    // ([[HS-9D25-CWPX-EPIC-branch-lifecycle-open-a-pull-request]]). NULL until
+    // the branch has gone quiet and a PR was opened or found; a write made
+    // after its PR merged stays NULL, which is what triggers the next PR.
+    pullRequestNumber: integer("pull_request_number"),
+    pullRequestUrl: text("pull_request_url")
   },
   (table) => [
     // "latest settlement for this spec" — the read path's only query.
-    index("spec_settlements_spec_settled_idx").on(table.specId, table.settledAt.desc())
+    index("spec_settlements_spec_settled_idx").on(table.specId, table.settledAt.desc()),
+    // The PR sweep's only query: branches with settlements not yet in a PR.
+    index("spec_settlements_unproposed_idx").on(table.vaultId, table.repo, table.branch).where(sql`${table.pullRequestNumber} IS NULL`)
+  ]
+);
+var sessionBranchDeclarations = pgTable(
+  "session_branch_declarations",
+  {
+    id: integer("id").primaryKey().generatedAlwaysAsIdentity(),
+    vaultId: text("vault_id").notNull().default(DEFAULT_VAULT_ID),
+    actorKey: text("actor_key").notNull(),
+    sessionId: text("session_id").notNull(),
+    branch: text("branch").notNull(),
+    declaredAt: timestamp("declared_at", { withTimezone: true }).notNull().default(sql`now()`),
+    expiresAt: timestamp("expires_at", { withTimezone: true }).notNull()
+  },
+  (table) => [
+    uniqueIndex("session_branch_declarations_uq").on(
+      table.vaultId,
+      table.actorKey,
+      table.sessionId
+    ),
+    index("session_branch_declarations_lookup_idx").on(
+      table.vaultId,
+      table.actorKey,
+      table.declaredAt.desc()
+    )
   ]
 );
 
@@ -24657,7 +24722,6 @@ async function runNeonReachabilityProbe(attempt, options2 = {}, label = "Neon re
 
 // spex-console/src/lib/vault-registry/registry-file.ts
 import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync4, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
 import { dirname as dirname2, join as join3, resolve as resolve2 } from "node:path";
 
 // spex-console/src/lib/vault-registry/types.ts
@@ -24675,7 +24739,7 @@ function emptyVaultRegistry() {
 
 // spex-console/src/lib/vault-registry/registry-file.ts
 function vaultRegistryDir(opts = {}) {
-  return opts.registryDir ?? join3(homedir3(), ".heyspex");
+  return opts.registryDir ?? join3(heyspexHome(), ".heyspex");
 }
 function vaultRegistryFilePath(opts = {}) {
   return join3(vaultRegistryDir(opts), "registry.json");
@@ -24845,7 +24909,7 @@ function samePathLoose(a, b) {
 }
 function assertNotRealHomeRegistryUnderTest(filePath) {
   if (!underTestRunner()) return;
-  if (samePathLoose(dirname2(filePath), join3(homedir3(), ".heyspex"))) {
+  if (samePathLoose(dirname2(filePath), join3(heyspexHome(), ".heyspex"))) {
     throw new Error(
       `registry-file: refusing to write ${filePath} under a test runner \u2014 that is the real ~/.heyspex registry. Pass opts.registryDir (a temp dir).`
     );
@@ -25312,12 +25376,17 @@ async function listWorkspacesNeon(accountId, deps = {}) {
       id: workspaces.id,
       displayName: workspaces.displayName,
       githubOrg: workspaces.githubOrg,
-      createdAt: workspaces.createdAt
+      createdAt: workspaces.createdAt,
+      archived: workspaces.archived
     }).from(workspaces).where(eq(workspaces.accountId, accountId));
     return rows.map((r) => ({
       id: r.id,
       display_name: r.displayName,
       created_at: (r.createdAt instanceof Date ? r.createdAt : /* @__PURE__ */ new Date()).toISOString(),
+      // The flag `setWorkspaceArchivedNeon` writes; `list.ts` filters on it.
+      // On a cloud host this row IS the roster (no registry.json to carry the
+      // flag), so leaving it out made an archived workspace list forever.
+      archived: r.archived,
       ...r.githubOrg ? { github_org: r.githubOrg } : {}
     }));
   } catch {
@@ -25601,9 +25670,10 @@ async function createWorkspace(input, deps = {}) {
 }
 
 // scripts/lib/console-url-resolver.mjs
+init_heyspex_home();
 init_dev_mode();
 import { readFileSync as readFileSync6 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 import { join as join5 } from "node:path";
 var DEFAULT_CONSOLE_URL = LOCAL_CONSOLE_URL;
 function trimTrailingSlash(url) {
@@ -25630,7 +25700,7 @@ function warnStaleLoopbackCredentialsOnce(credentialsUrl, derivedUrl, { log }) {
   } catch {
   }
 }
-function readCredentialsConsoleUrl({ homeDir = homedir5(), readFile: readFile3 = defaultReadFile2 } = {}) {
+function readCredentialsConsoleUrl({ homeDir = heyspexHome2(), readFile: readFile3 = defaultReadFile2 } = {}) {
   try {
     const raw = readFile3(join5(homeDir, ".heyspex", "credentials.yaml"));
     const match = String(raw ?? "").match(/^console_url:\s*["']?([^"'\r\n#]+)/m);
@@ -25674,7 +25744,7 @@ function resolveModeEnvelope({ env, homeDir }) {
 function resolveConsoleUrl({
   repoRoot,
   env = process.env,
-  homeDir = homedir5(),
+  homeDir = heyspexHome2(),
   strict = false,
   devMode,
   log = (line) => process.stderr.write(line),
@@ -25708,7 +25778,134 @@ function resolveConsoleUrl({
 import { createHash } from "node:crypto";
 import fs from "node:fs";
 import path2 from "node:path";
+import os2 from "node:os";
 import { fileURLToPath, pathToFileURL } from "node:url";
+
+// scripts/lib/hook-dispositions.mjs
+var HOSTS = Object.freeze(["claude-code", "cursor", "copilot"]);
+var DISPOSITIONS = Object.freeze(["mapped", "advisory-degraded", "unportable", "not-shipped"]);
+var mapped = (note) => Object.freeze({ disposition: "mapped", ...note ? { note } : {} });
+var degraded = (note) => Object.freeze({ disposition: "advisory-degraded", note });
+var unportable = (control) => Object.freeze({ disposition: "unportable", control });
+var notShipped = Object.freeze({ disposition: "not-shipped" });
+var CC = mapped();
+var COPILOT_PROMPT_DROPPED = "Copilot drops command-hook output on userPromptSubmitted (no prompt-time context channel); the text moves to sessionStart / .github/copilot-instructions.md.";
+var CURSOR_PROMPT_USER_MESSAGE = "Cursor beforeSubmitPrompt honors user_message only (no additional_context): the text surfaces in the transcript instead of as invisible context.";
+var COPILOT_NO_PLAN_TOOL = "MCP preflight refusals (heyspex_claim_spec / heyspex_submit_for_review / heyspex_save_research) + .github/copilot-instructions.md plan rule (state the plan in chat, claim the spec before editing) + HS-20SW directive-obligation-gate claim-before-build deny";
+var HOOK_DISPOSITIONS = Object.freeze({
+  // ── customer: session start / compaction ──────────────────────────────────
+  "wip-checkpoint": {
+    "claude-code": CC,
+    cursor: mapped("preCompact is relayed as SessionStart(compact)."),
+    copilot: mapped("sessionStart additionalContext is delivered; the preCompact leg writes WIP only (no output channel), re-injected at the next sessionStart.")
+  },
+  "inject-doctrine": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext.") },
+  "check-auto-memory-budget": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext.") },
+  "check-claude-md-budget": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext.") },
+  "git-reflog-audit": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext and agentStop.") },
+  "vault-mirror-catchup": { "claude-code": CC, cursor: mapped(), copilot: mapped("Detached side effect on sessionStart.") },
+  // ── customer: every user turn ─────────────────────────────────────────────
+  "preflight-reminder": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(`${COPILOT_PROMPT_DROPPED} Real enforcement is the MCP preflight refusal.`)
+  },
+  "intent-classifier-trigger": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(
+      `${COPILOT_PROMPT_DROPPED} The hook still runs and arms obligation state; the HS-20SW directive-obligation-gate turns that state into a hard deny.`
+    )
+  },
+  "inject-communication-style": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(COPILOT_PROMPT_DROPPED)
+  },
+  "inject-vault-context": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(`${COPILOT_PROMPT_DROPPED} Per-prompt vault retrieval has no Copilot channel at all.`)
+  },
+  // ── customer: before a tool call (hard gates) ─────────────────────────────
+  "git-identity-guard": { "claude-code": CC, cursor: mapped("beforeShellExecution. Always on."), copilot: mapped("preToolUse on bash/powershell. Always on.") },
+  "vault-write-tier-guard": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/edit/bash/powershell.") },
+  "settings-write-gate": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/edit/bash/powershell and the MCP settings tool.") },
+  "emit-claim-status": { "claude-code": CC, cursor: mapped(), copilot: mapped("Telemetry on preToolUse/postToolUse/agentStop; the cloud agent needs a network allow rule for the console.") },
+  "enforce-vault-naming": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/bash/powershell.") },
+  "guard-auto-memory-writes": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/bash/powershell.") },
+  "directive-obligation-gate": {
+    "claude-code": CC,
+    cursor: mapped(),
+    copilot: mapped("HS-20SW: hard deny on task/create/edit/write-shaped shell while a capture obligation is unmet; the only hard capture-on-idea guarantee on Copilot.")
+  },
+  "claim-before-code-gate": {
+    "claude-code": CC,
+    cursor: degraded("Armed only by plan-exit-ingest-gate, which has no Cursor trigger, so it stays dormant; covered by the HS-20SW claim-before-build rule."),
+    copilot: degraded("Armed only by plan-exit-ingest-gate, which has no Copilot trigger (no ExitPlanMode tool), so it stays dormant; covered by the HS-20SW claim-before-build rule.")
+  },
+  "capture-workflow-gate": {
+    "claude-code": CC,
+    cursor: mapped(),
+    copilot: mapped("preToolUse on the MCP heyspex_file_spec tool; MCP tool naming in hook payloads is unverified live (matched by suffix).")
+  },
+  "diagnose-capture-reminder": {
+    "claude-code": CC,
+    cursor: mapped("preToolUse agent_message delivers the reminder."),
+    copilot: degraded("Copilot preToolUse has no context channel for an inject, so this advisory is silent (lost).")
+  },
+  "git-stash-gate": {
+    "claude-code": CC,
+    cursor: mapped(),
+    copilot: mapped('The Claude "ask" becomes a deny where no user is present (cloud agent, CLI autopilot).')
+  },
+  "research-protocol-gate": { "claude-code": CC, cursor: mapped("Always on."), copilot: mapped("preToolUse on web_fetch/web_search and the MCP save_research tool. Always on; the MCP refusal duplicates it.") },
+  "research-method-guard": {
+    "claude-code": CC,
+    cursor: mapped("preToolUse with a Skill|Workflow tool filter. Always on."),
+    copilot: unportable("MCP preflight refusal on heyspex_save_research (hard floor, hook-independent) + .github/copilot-instructions.md research rule; Copilot has no Skill or Workflow tool to hook.")
+  },
+  "deep-research-cost-gate": {
+    "claude-code": CC,
+    cursor: mapped("preToolUse with a Workflow|Skill tool filter."),
+    copilot: unportable("MCP preflight refusal on heyspex_save_research + .github/copilot-instructions.md cost-confirmation rule; Copilot has no Skill or Workflow tool to hook.")
+  },
+  "plan-review-gate": {
+    "claude-code": CC,
+    cursor: unportable(".cursor/rules/plan-review-required.mdc (always-on rule)"),
+    copilot: unportable(COPILOT_NO_PLAN_TOOL)
+  },
+  "plan-exit-ingest-gate": {
+    "claude-code": CC,
+    cursor: unportable(".cursor/rules/plan-review-required.mdc + spec-creation-linkage.mdc"),
+    copilot: unportable(COPILOT_NO_PLAN_TOOL)
+  },
+  // ── customer: end of turn / session ───────────────────────────────────────
+  "naughty-list-gate": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped('agentStop {decision:"block"} re-drive, capped at 8 consecutive blocks.') },
+  "id-display-format-gate": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped("agentStop re-drive; reads the transcript (format is not a stable API).") },
+  "epic-milestone-phrasing-gate": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped("agentStop re-drive; reads the transcript (format is not a stable API).") },
+  "enforce-session-sequence": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped("agentStop re-drive, capped at 8 consecutive blocks.") },
+  "notify-status-flip": { "claude-code": CC, cursor: mapped(), copilot: mapped("Side effect on postToolUse.") },
+  "close-terminal-on-ship": { "claude-code": CC, cursor: mapped(), copilot: mapped("Side effect on postToolUse / sessionEnd.") },
+  "scripts/stamp-provenance-on-edit.mjs": { "claude-code": CC, cursor: mapped(), copilot: mapped("Side effect on postToolUse.") },
+  "session-end": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionEnd.") },
+  // ── platform: heyspex-app development machinery (never installed in a customer repo) ──
+  "inject-dev-server-awareness": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "inject-coo-seat": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "coo-guard-check": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "coo-denylist-gate": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "agent-spawn-delegation-gate": { "claude-code": CC, cursor: mapped("subagentStart."), copilot: notShipped },
+  "capture-execution-gate": { "claude-code": CC, cursor: mapped("beforeShellExecution + subagentStart."), copilot: notShipped },
+  "check-mcp-freshness-hook": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "dev-server-task-reminder": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "env-vault-guard": { "claude-code": CC, cursor: mapped("Always on."), copilot: notShipped },
+  "log-session-activity": { "claude-code": CC, cursor: mapped(), copilot: notShipped }
+});
+function dispositionFor(hook, host) {
+  return HOOK_DISPOSITIONS[hook]?.[host] ?? null;
+}
+
+// scripts/lib/customer-kit.mjs
 var HOOK_SCOPES = Object.freeze({
   // ── customer: vault / workflow / safety gates ─────────────────────────────
   "wip-checkpoint": { scope: "customer", why: "Previous-session WIP handoff, read from the active vault." },
@@ -25724,6 +25921,7 @@ var HOOK_SCOPES = Object.freeze({
   "inject-communication-style": { scope: "customer", why: "Plain-language communication rules each turn." },
   "inject-vault-context": { scope: "customer", why: "Lexical vault retrieval for the prompt." },
   "git-identity-guard": { scope: "customer", why: "Agents never write git identity (owner ruling 2026-09-19)." },
+  "vault-write-tier-guard": { scope: "customer", why: "Cloud write mode: disk edits to vault specs are a mirror the console never reads back (HS-FCNH)." },
   "settings-write-gate": { scope: "customer", why: "Approval before the vault's .heyspex/config.yaml changes." },
   "emit-claim-status": { scope: "customer", why: "Claim liveness heartbeat to the console." },
   "enforce-vault-naming": { scope: "customer", why: "Naming V3 filename guard (HS-RY2N)." },
@@ -25731,7 +25929,10 @@ var HOOK_SCOPES = Object.freeze({
   "plan-review-gate": { scope: "customer", why: "Plan review + QC markers before ExitPlanMode." },
   "plan-exit-ingest-gate": { scope: "customer", why: "Plan ingest on ExitPlanMode; arms claim-before-code." },
   "claim-before-code-gate": { scope: "customer", why: "First code edit after plan exit needs a claim." },
+  "directive-obligation-gate": { scope: "customer", why: "A capture_on_idea directive leaves a durable obligation; an unmet one denies sub-agent spawns, product-code writes and builds, and re-drives Stop once. Also claim-before-build (HS-20SW)." },
   "capture-workflow-gate": { scope: "customer", why: "No implementation spec straight out of an open capture." },
+  "vault-mirror-catchup": { scope: "customer", why: "Cloud write mode: a SessionStart detached `hs pull --apply` closes a stale disk mirror before the first tool call (HS-XJFQ)." },
+  "diagnose-capture-reminder": { scope: "customer", why: "Warn when a diagnose is filed with no capture holding the owner's words (HS-IK2D)." },
   "git-stash-gate": { scope: "customer", why: "Always ask before a mutating git stash." },
   "research-method-guard": { scope: "customer", why: "Research method guard (HS-EN4F)." },
   "deep-research-cost-gate": { scope: "customer", why: "Cost confirmation before a paid deep-research launch." },
@@ -25750,6 +25951,7 @@ var HOOK_SCOPES = Object.freeze({
   "coo-guard-check": { scope: "platform", why: "dev-factory breakdown-delegation guard." },
   "coo-denylist-gate": { scope: "platform", why: "dev-factory COO window deny list." },
   "agent-spawn-delegation-gate": { scope: "platform", why: "dev-factory seat routing for subagents." },
+  "capture-execution-gate": { scope: "platform", why: "Blocks dev-factory research/paid-model/routing surfaces past an ungrounded capture (HS-KNJ8)." },
   "check-mcp-freshness-hook": { scope: "platform", why: "Freshness of the vendored MCP build \u2014 a platform-dev concern." },
   "dev-server-task-reminder": { scope: "platform", why: "spex-console dev server + Neon DB safety." },
   "env-vault-guard": { scope: "platform", why: "Guards heyspex-app's encrypted env vault paths." },
@@ -25768,6 +25970,7 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "SessionStart", hook: "check-claude-md-budget", timeout: 5 },
   { event: "SessionStart", hook: "check-mcp-freshness-hook", timeout: 5 },
   { event: "SessionStart", hook: "git-reflog-audit", timeout: 5 },
+  { event: "SessionStart", hook: "vault-mirror-catchup", timeout: 5 },
   { event: "PreCompact", hook: "wip-checkpoint", timeout: 5 },
   { event: "UserPromptSubmit", hook: "preflight-reminder", timeout: 5 },
   { event: "UserPromptSubmit", hook: "intent-classifier-trigger", timeout: 5 },
@@ -25775,10 +25978,13 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "UserPromptSubmit", hook: "inject-vault-context", timeout: 10 },
   { event: "PreToolUse", matcher: "Write|Edit|MultiEdit|NotebookEdit|Bash|PowerShell", hook: "env-vault-guard", timeout: 5 },
   { event: "PreToolUse", matcher: "Bash|PowerShell", hook: "git-identity-guard", timeout: 5 },
+  { event: "PreToolUse", matcher: "Write|Edit|MultiEdit|NotebookEdit|Bash|PowerShell", hook: "vault-write-tier-guard", timeout: 5 },
   { event: "PreToolUse", matcher: "Write|Edit|NotebookEdit|Bash|PowerShell|mcp__heyspex__heyspex_settings_set", hook: "settings-write-gate", timeout: 5 },
   { event: "PreToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PreToolUse"], timeout: 5 },
   { event: "PreToolUse", matcher: ".*", hook: "coo-denylist-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "Agent|Task", hook: "agent-spawn-delegation-gate", timeout: 5 },
+  { event: "PreToolUse", matcher: "Bash|PowerShell|Agent|Task", hook: "capture-execution-gate", timeout: 5 },
+  { event: "PreToolUse", matcher: "Agent|Task|Edit|Write|MultiEdit|NotebookEdit|Bash|PowerShell", hook: "directive-obligation-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "mcp__heyspex__heyspex_claim_spec", hook: "coo-guard-check", timeout: 5 },
   { event: "PreToolUse", matcher: "Write|NotebookEdit|Bash|PowerShell", hook: "enforce-vault-naming", timeout: 5 },
   { event: "PreToolUse", matcher: "Write|NotebookEdit|Bash|PowerShell", hook: "guard-auto-memory-writes", timeout: 5 },
@@ -25787,6 +25993,7 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "PreToolUse", matcher: "ExitPlanMode", hook: "plan-exit-ingest-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "Edit|MultiEdit|Write", hook: "claim-before-code-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "mcp__heyspex__heyspex_file_spec", hook: "capture-workflow-gate", timeout: 8 },
+  { event: "PreToolUse", matcher: "mcp__heyspex__heyspex_file_spec", hook: "diagnose-capture-reminder", timeout: 5 },
   { event: "PreToolUse", matcher: "Bash|PowerShell|mcp__neon__prepare_database_migration|mcp__neon__complete_database_migration|mcp__neon__reset_from_parent|mcp__neon__delete_branch|mcp__Neon__prepare_database_migration|mcp__Neon__complete_database_migration|mcp__Neon__reset_from_parent|mcp__Neon__delete_branch", hook: "dev-server-task-reminder", timeout: 10 },
   { event: "PreToolUse", matcher: "Bash|PowerShell", hook: "git-stash-gate", timeout: 10 },
   { event: "PreToolUse", matcher: "Skill|Workflow", hook: "research-method-guard", timeout: 5 },
@@ -25799,7 +26006,9 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "Stop", hook: "epic-milestone-phrasing-gate", timeout: 5 },
   { event: "Stop", hook: "git-reflog-audit", timeout: 5 },
   { event: "Stop", hook: "enforce-session-sequence", timeout: 5 },
+  { event: "Stop", hook: "directive-obligation-gate", timeout: 5 },
   { event: "PostToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PostToolUse"], timeout: 5 },
+  { event: "PostToolUse", matcher: "Skill|mcp__heyspex__heyspex_update_capture|mcp__heyspex__heyspex_promote_capture.*|mcp__heyspex__heyspex_file_spec|mcp__heyspex__heyspex_claim_spec|mcp__heyspex__heyspex_release_spec|mcp__heyspex__heyspex_defer_spec", hook: "directive-obligation-gate", timeout: 5 },
   { event: "PostToolUse", matcher: "Edit|Write|MultiEdit", hook: "notify-status-flip", timeout: 5 },
   { event: "PostToolUse", matcher: "Edit|Write|MultiEdit", hook: "close-terminal-on-ship", timeout: 5 },
   { event: "PostToolUse", matcher: "Edit|Write|MultiEdit", hook: "scripts/stamp-provenance-on-edit.mjs", timeout: 5 },
@@ -25884,9 +26093,22 @@ var CUSTOMER_LAUNCHERS = Object.freeze({
 });
 function customerRunnerPrefix(_platformRoot, surface = "claude") {
   const l = CUSTOMER_LAUNCHERS[surface];
+  if (surface === "claude") return CUSTOMER_RUNNER_PREFIX;
   return `node "$${l.projectDirEnv}/${l.rel.join("/")}"`;
 }
-var PLUGIN_RUNNER_PREFIX = 'node "${CLAUDE_PLUGIN_ROOT}/bin/run-hook.mjs"';
+var BOOTSTRAP_WALK = "var d=process.cwd(),r=e.CLAUDE_PROJECT_DIR;if(!r||!f.existsSync(p.join(r,...n))){r='';for(;;){if(f.existsSync(p.join(d,...n))){r=d;break}var q=p.dirname(d);if(q===d)break;d=q}}";
+function buildBootstrap({ plugin = false } = {}) {
+  const walk = BOOTSTRAP_WALK;
+  const body = plugin ? "var f=require('fs'),p=require('path'),u=require('url'),e=process.env,n=['scripts','claude-hooks','_run.mjs'],s='',m=e.CLAUDE_PLUGIN_ROOT||e.COPILOT_PLUGIN_ROOT||e.PLUGIN_ROOT;if(m&&f.existsSync(p.join(m,'bin','run-hook.mjs')))s=p.join(m,'bin','run-hook.mjs');if(!s){" + walk + "if(r){e.CLAUDE_PROJECT_DIR=r;s=p.join(r,...n)}}" : "var f=require('fs'),p=require('path'),u=require('url'),e=process.env,n=['scripts','claude-hooks','_run.mjs'],s='';" + walk + "if(r){e.CLAUDE_PROJECT_DIR=r;s=p.join(r,...n)}";
+  return body + "if(!s)process.exit(0);process.argv=[process.argv[0],s].concat(process.argv.slice(1));import(u.pathToFileURL(s).href).catch(function(){process.exit(0)});" + (plugin ? "//bin/run-hook.mjs" : "//scripts/claude-hooks/_run.mjs");
+}
+var PLATFORM_RUNNER_PREFIX = 'node -e "' + buildBootstrap() + '"';
+var PLUGIN_RUNNER_PREFIX = 'node -e "' + buildBootstrap({ plugin: true }) + '"';
+function buildCustomerBootstrap() {
+  const rel = CUSTOMER_LAUNCHERS.claude.rel.map((s) => "'" + s + "'").join(",");
+  return "var f=require('fs'),p=require('path'),u=require('url'),e=process.env,n=[" + rel + "],s='';" + BOOTSTRAP_WALK + "if(r){e.CLAUDE_PROJECT_DIR=r;s=p.join(r,...n)}if(!s)process.exit(0);process.argv=[process.argv[0],s].concat(process.argv.slice(1));import(u.pathToFileURL(s).href).catch(function(){process.exit(0)});//" + CUSTOMER_LAUNCHERS.claude.rel.join("/");
+}
+var CUSTOMER_RUNNER_PREFIX = 'node -e "' + buildCustomerBootstrap() + '"';
 var LAUNCHER_TEMPLATE = [
   "#!/usr/bin/env node",
   "// HeySpex hook launcher -- GENERATED by hs install / hs connect. Commit it with this repo.",
@@ -25964,7 +26186,12 @@ var LAUNCHER_TEMPLATE = [
   "// (the Cursor one) runs exactly as if Cursor had invoked it directly.",
   "const shim = resolve(root, ...SHIM);",
   "process.argv[1] = shim;",
-  "await import(pathToFileURL(shim).href);",
+  "try {",
+  "  await import(pathToFileURL(shim).href);",
+  "} catch (err) {",
+  "  process.stderr.write('[heyspex] hook ' + (process.argv[2] ?? '?') + ' skipped: ' + (err && err.message ? err.message : err) + '\\n');",
+  "  process.exit(0);",
+  "}",
   ""
 ].join("\n");
 function renderCustomerLauncher(surface = "claude") {
@@ -26071,7 +26298,6 @@ function renderPluginHooksDocument() {
     });
   }
   return {
-    _comment: "GENERATED from scripts/lib/customer-kit.mjs (customer-scoped rows only) \u2014 do not edit by hand; run `node scripts/lib/customer-kit.mjs --write-plugin-hooks`. Every command goes through bin/run-hook.mjs, which finds the hook runtime (HEYSPEX_PLATFORM_ROOT / HEYSPEX_MCP_ENTRY when set in the machine's own env, then the plugin's own location, node_modules/heyspex, $CLAUDE_PROJECT_DIR) \u2014 never $CLAUDE_PROJECT_DIR/scripts, which only exists in heyspex-app. WARNING: a repo whose .claude/settings.json already carries the hs install kit hooks runs every hook twice if this plugin is also enabled \u2014 use one or the other.",
     hooks
   };
 }
@@ -26079,6 +26305,75 @@ function renderPluginHooksText() {
   return `${JSON.stringify(renderPluginHooksDocument(), null, 2)}
 `;
 }
+var COPILOT_EVENT_NAMES = Object.freeze({
+  SessionStart: "sessionStart",
+  SessionEnd: "sessionEnd",
+  UserPromptSubmit: "userPromptSubmitted",
+  PreToolUse: "preToolUse",
+  PostToolUse: "postToolUse",
+  Stop: "agentStop",
+  PreCompact: "preCompact"
+});
+var GITHUB_HOOKS_STATE_ARMING = Object.freeze(["intent-classifier-trigger"]);
+var COPILOT_TOOL_NAMES = Object.freeze({
+  Write: "create",
+  Edit: "edit",
+  MultiEdit: "edit",
+  NotebookEdit: "edit",
+  Bash: "bash",
+  PowerShell: "powershell",
+  Agent: "task",
+  Task: "task",
+  WebFetch: "web_fetch",
+  WebSearch: "web_search"
+});
+function toCopilotMatcher(matcher) {
+  if (!matcher) return void 0;
+  const out = [];
+  for (const part of matcher.split("|")) {
+    let t = null;
+    if (part === ".*") t = ".*";
+    else if (COPILOT_TOOL_NAMES[part]) t = COPILOT_TOOL_NAMES[part];
+    else if (part.startsWith(MCP_PROJECT_PREFIX)) t = ".*" + part.slice(MCP_PROJECT_PREFIX.length);
+    else if (part.startsWith(MCP_PLUGIN_PREFIX)) t = ".*" + part.slice(MCP_PLUGIN_PREFIX.length);
+    if (t && !out.includes(t)) out.push(t);
+  }
+  if (out.includes(".*")) return ".*";
+  return out.length ? out.join("|") : null;
+}
+function githubHookNames() {
+  const names = /* @__PURE__ */ new Set();
+  for (const r of customerHookRows()) {
+    if (dispositionFor(r.hook, "copilot")?.disposition === "mapped" || GITHUB_HOOKS_STATE_ARMING.includes(r.hook)) names.add(r.hook);
+  }
+  return names;
+}
+function githubHookCommand(row2) {
+  const tail = hookTail(row2);
+  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+}
+function renderGithubHooksDocument() {
+  const allowed = githubHookNames();
+  const hooks = {};
+  for (const row2 of customerHookRows()) {
+    if (!allowed.has(row2.hook)) continue;
+    const event = COPILOT_EVENT_NAMES[row2.event];
+    if (!event) continue;
+    const matcher = toCopilotMatcher(row2.matcher);
+    if (matcher === null) continue;
+    (hooks[event] ??= []).push({
+      type: "command",
+      ...matcher ? { matcher } : {},
+      bash: githubHookCommand(row2),
+      timeoutSec: row2.timeout
+    });
+  }
+  return { version: 1, hooks };
+}
+function renderGithubHooksText() {
+  return `${JSON.stringify(renderGithubHooksDocument(), null, 2)}
+`;
+}
 var HARNESS_COMMAND_SURFACES = Object.freeze([
   {
     installedDir: Object.freeze([".claude", "commands"]),
@@ -26211,21 +26506,35 @@ if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
       process.exit(1);
     }
     console.log("customer-kit: plugins/heyspex/hooks/hooks.json up to date");
+  } else if (process.argv.includes("--write-github-hooks") || process.argv.includes("--check-github-hooks")) {
+    const ghTarget = path2.join(platformRoot, ".github", "hooks", "heyspex.json");
+    const ghWant = renderGithubHooksText();
+    const ghSame = (fsDeps.readFile(ghTarget) ?? "").replace(/\r\n/g, "\n") === ghWant;
+    if (process.argv.includes("--write-github-hooks")) {
+      if (!ghSame) {
+        fs.mkdirSync(path2.dirname(ghTarget), { recursive: true });
+        fs.writeFileSync(ghTarget, ghWant, "utf8");
+      }
+      console.log(`customer-kit: ${ghSame ? "unchanged" : "wrote"} ${path2.relative(platformRoot, ghTarget).replace(/\\/g, "/")}`);
+    } else if (!ghSame) {
+      console.error("customer-kit: .github/hooks/heyspex.json is stale - run `node scripts/lib/customer-kit.mjs --write-github-hooks`");
+      process.exit(1);
+    } else {
+      console.log("customer-kit: .github/hooks/heyspex.json up to date");
+    }
   } else {
     console.log("usage: node scripts/lib/customer-kit.mjs --write-plugin-hooks | --check-plugin-hooks");
   }
 }
 
 // spex-console/src/lib/cli/connect-checks.ts
-import { homedir as homedir9 } from "node:os";
 import { dirname as dirname5 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 
 // spex-console/src/lib/dev-mode.ts
-init_credentials();
 import { mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
 import { join as join6 } from "node:path";
+init_credentials();
 var CLOUD_CONSOLE_URL2 = "https://app.heyspex.com";
 var LOCAL_CONSOLE_URL2 = "http://localhost:3000";
 function normalizeMode2(raw) {
@@ -26258,12 +26567,12 @@ function deriveSemantics2(mode, reliance) {
     vaultWriteMode: local ? "local" : "cloud"
   };
 }
-function devModeFilePath2(homeDir = homedir6()) {
+function devModeFilePath2(homeDir = heyspexHome()) {
   return join6(homeDir, ".heyspex", "dev-mode.json");
 }
 var defaultReadFile3 = (p) => readFileSync7(p, "utf8");
 function readLocalDevModeRecord2({
-  homeDir = homedir6(),
+  homeDir = heyspexHome(),
   readFile: readFile3 = defaultReadFile3
 } = {}) {
   let raw;
@@ -26298,7 +26607,7 @@ function readLocalDevModeRecord2({
 }
 function resolveDevMode2({
   env = process.env,
-  homeDir = homedir6(),
+  homeDir = heyspexHome(),
   readFile: readFile3 = defaultReadFile3,
   cloudSetting = void 0
 } = {}) {
@@ -26409,10 +26718,11 @@ function shellQuote(p) {
 var HS_DISPATCHER_PREFIX = HS_DISPATCHER_PATH ? `node ${shellQuote(HS_DISPATCHER_PATH)}` : HS_BIN_NAME;
 
 // vendor/heyspex-mcp/console-fetch.mjs
+init_heyspex_home();
 init_credentials();
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync10 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 
 // vendor/heyspex-mcp/vault-less-endpoints.mjs
 var VAULT_LESS_ENDPOINTS = Object.freeze([
@@ -26438,10 +26748,41 @@ function isVaultLessEndpoint(method, path9) {
   });
 }
 
+// vendor/heyspex-mcp/write-outbox.mjs
+import {
+  readdirSync,
+  readFileSync as readFileSync8,
+  writeFileSync as writeFileSync5,
+  mkdirSync as mkdirSync5,
+  existsSync as existsSync3,
+  renameSync as renameSync3,
+  rmSync
+} from "node:fs";
+import { basename, join as join8, isAbsolute as isAbsolute2 } from "node:path";
+
+// scripts/lib/shared-path-helpers.mjs
+import { isAbsolute, resolve as resolve3, sep } from "node:path";
+function resolveCodeRoot({
+  explicit,
+  packageRoot,
+  vaultRoot,
+  env = process.env
+} = {}) {
+  const fromExplicit = typeof explicit === "string" ? explicit.trim() : "";
+  if (fromExplicit) return fromExplicit;
+  const fromEnv = typeof env?.HS_PKG_ROOT === "string" ? env.HS_PKG_ROOT.trim() : "";
+  if (fromEnv) return fromEnv;
+  const fromPackage = typeof packageRoot === "string" ? packageRoot.trim() : "";
+  if (fromPackage) return fromPackage;
+  const fromVault = typeof vaultRoot === "string" ? vaultRoot.trim() : "";
+  return fromVault;
+}
+
 // vendor/heyspex-mcp/vault-resolve.mjs
-import { existsSync as existsSync3, readFileSync as readFileSync8 } from "node:fs";
+init_heyspex_home();
+import { existsSync as existsSync4, readFileSync as readFileSync9 } from "node:fs";
 import { homedir as homedir7, tmpdir } from "node:os";
-import { dirname as dirname4, join as join8, resolve as resolve3 } from "node:path";
+import { dirname as dirname4, join as join9, resolve as resolve4 } from "node:path";
 
 // vendor/heyspex-mcp/console-fetch.mjs
 var SCOPE_REFUSAL_CODES = Object.freeze(["VAULT_SCOPE_MISMATCH", "ACCOUNT_MISMATCH", "VAULT_NOT_REGISTERED"]);
@@ -26749,7 +27090,7 @@ function runInit(args, deps) {
     };
   }
   const vaultId = existingVaultId ?? args.adoptedVaultId ?? mintVaultId();
-  const accountId = args.accountId ?? (existingContent ? parseAccountId(existingContent) : null);
+  const accountId = null;
   const content = renderHeyspexYaml({ ...args, vaultId, accountId });
   try {
     deps.writeFile(markerPath, content);
@@ -27015,6 +27356,62 @@ function isAbsolutePathForCompare(p) {
   const s = p.trim();
   return /^[\\/]/.test(s) || /^[a-zA-Z]:[\\/]/.test(s);
 }
+function expandPinPlaceholders(value, repoRoot) {
+  return value.replace(/\$\{(?:CLAUDE_PROJECT_DIR|workspaceFolder)(?::-[^}]*)?\}/g, repoRoot);
+}
+function lexicalJoin(base, rel) {
+  const parts = `${base}/${rel}`.replace(/\\/g, "/").split("/");
+  const out = [];
+  for (const seg of parts) {
+    if (seg === "" && out.length > 0) continue;
+    if (seg === ".") continue;
+    if (seg === ".." && out.length > 1) {
+      out.pop();
+      continue;
+    }
+    out.push(seg);
+  }
+  return out.join("/");
+}
+function parseMarkerVaultPath(content) {
+  const m = content.match(/^vault_path:[ \t]*(.+?)[ \t]*$/m);
+  if (!m) return null;
+  const v = m[1].trim().replace(/\s+#.*$/, "").replace(/^"(.*)"$/, "$1").replace(/^'(.*)'$/, "$1").trim();
+  if (!v || v.includes("${") || /^[\\/]/.test(v) || /^[a-zA-Z]:[\\/]/.test(v)) return null;
+  return v;
+}
+function markerVaultIdOf(content) {
+  const m = content.match(/^vault_id:\s*(.+?)\s*$/m);
+  if (!m) return null;
+  const v = m[1].trim().replace(/^"(.*)"$/, "$1").replace(/^'(.*)'$/, "$1");
+  return v.length > 0 ? v : null;
+}
+function detectMarkerAttachment(repoRoot, deps) {
+  const markerPath = deps.joinPath(repoRoot, "heyspex.yaml");
+  if (!deps.fileExists(markerPath)) return null;
+  const raw = deps.readFile(markerPath);
+  const vaultPath = raw ? parseMarkerVaultPath(raw) : null;
+  if (!raw || !vaultPath) return null;
+  const vaultRootAbs = lexicalJoin(repoRoot, vaultPath);
+  const markerId = markerVaultIdOf(raw);
+  let cloned = deps.fileExists(deps.joinPath(vaultRootAbs, "specs"));
+  if (cloned && markerId) {
+    const theirs = deps.readFile(deps.joinPath(vaultRootAbs, "heyspex.yaml"));
+    const theirId = theirs ? markerVaultIdOf(theirs) : null;
+    if (theirId && theirId !== markerId) cloned = false;
+  }
+  const registry = loadVaultRegistry(deps.registryOpts);
+  const record = registry.vaults.find((v) => samePath(v.repo_root_abs, vaultRootAbs));
+  return {
+    vaultRootAbs,
+    vaultId: markerId ?? record?.id ?? null,
+    pins: [{ source: "heyspex.yaml", value: vaultRootAbs }],
+    conflicting: false,
+    viaMarker: true,
+    cloned,
+    vaultPath
+  };
+}
 function readPinnedVaultRoot(repoRoot, deps) {
   const pins = [];
   for (const rel of SATELLITE_MANIFEST_RELS) {
@@ -27031,13 +27428,19 @@ function readPinnedVaultRoot(repoRoot, deps) {
     }
     if (typeof value !== "string") continue;
     const trimmed = value.trim();
-    if (!trimmed || trimmed.includes("${")) continue;
-    if (!isAbsolutePathForCompare(trimmed)) continue;
-    pins.push({ source: rel.join("/"), value: trimmed });
+    if (!trimmed) continue;
+    const expanded = expandPinPlaceholders(trimmed, repoRoot);
+    if (expanded.includes("${")) continue;
+    if (/^[a-zA-Z]:(?![\\/])/.test(expanded)) continue;
+    const abs = isAbsolutePathForCompare(expanded) ? expanded.includes("..") ? lexicalJoin(expanded, ".") : expanded : lexicalJoin(repoRoot, expanded);
+    if (expanded !== trimmed && isAtOrUnder(abs, repoRoot)) continue;
+    pins.push({ source: rel.join("/"), value: abs });
   }
   return pins;
 }
 function detectSatelliteAttachment(repoRoot, deps) {
+  const viaMarker = detectMarkerAttachment(repoRoot, deps);
+  if (viaMarker) return viaMarker;
   const pins = readPinnedVaultRoot(repoRoot, deps).filter(
     (pin) => !isAtOrUnder(pin.value, repoRoot)
   );
@@ -27153,7 +27556,7 @@ function workspaceAgreementRow(vaultRecord, cloudWorkspaceId) {
 function checksHomeDir(deps) {
   if (deps.homeDir) return deps.homeDir;
   const registryDir = deps.registryOpts?.registryDir;
-  return registryDir ? dirname5(registryDir) : homedir9();
+  return registryDir ? dirname5(registryDir) : heyspexHome();
 }
 function accountAgreementRow(yamlContent, vaultRecord, deps, opts) {
   const id = "account_agreement";
@@ -27161,14 +27564,14 @@ function accountAgreementRow(yamlContent, vaultRecord, deps, opts) {
   if (yamlContent === null) {
     return { id, label, status: "not_applicable", detail: "no heyspex.yaml yet" };
   }
-  const recorded = parseAccountId(yamlContent);
+  const legacyMarkerAccount = parseAccountId(yamlContent);
+  const recorded = vaultRecord && vaultRecord.account_id && vaultRecord.account_id !== LEGACY_REGISTRY_ACCOUNT_ID ? vaultRecord.account_id : null;
   if (!recorded) {
     return {
       id,
       label,
-      status: "stale",
-      detail: "heyspex.yaml records no account: (written before accounts were recorded) -- run `hs connect` to record the account this repo is connected under",
-      remedy: "hs connect"
+      status: "not_applicable",
+      detail: "the account binding is machine-local (the registry row), and none exists on this machine yet; the signed-in account is used" + (legacyMarkerAccount ? ` (legacy account: ${legacyMarkerAccount} in heyspex.yaml is ignored)` : "")
     };
   }
   const cloud = opts.cloudVaultAccountId ?? null;
@@ -27196,28 +27599,25 @@ function accountAgreementRow(yamlContent, vaultRecord, deps, opts) {
       remedy
     };
   }
-  if (vaultRecord && vaultRecord.account_id !== recorded) {
-    const legacy = vaultRecord.account_id === LEGACY_REGISTRY_ACCOUNT_ID;
-    return {
-      id,
-      label,
-      status: "stale",
-      detail: `the registry row for this repo is keyed to ${legacy ? "no account (legacy)" : vaultRecord.account_id}, heyspex.yaml says ${recorded} -- run \`hs connect\` to backfill it`,
-      remedy: "hs connect"
-    };
-  }
   const current = resolveSessionOwnerUncached({
     env,
     homeDir,
     readFile: (p) => readFile3(p) ?? ""
   });
   const signedIn = current && current !== recorded ? `; signed in as ${current} -- sessions here still use ${recorded}'s sign-in` : "";
-  return { id, label, status: "present", detail: `account: ${recorded}${signedIn}` };
+  const legacyNote = legacyMarkerAccount && legacyMarkerAccount !== recorded ? `; legacy account: ${legacyMarkerAccount} in heyspex.yaml is ignored` : "";
+  return {
+    id,
+    label,
+    status: "present",
+    detail: `account: ${recorded} (machine-local)${signedIn}${legacyNote}`
+  };
 }
 function runConnectChecks(repoRoot, deps, opts = {}) {
   const checks = [];
   const satellite = opts.satellite !== void 0 ? opts.satellite : detectSatelliteAttachment(repoRoot, deps);
-  const vaultSubject = satellite ? satellite.vaultRootAbs : repoRoot;
+  const cloudOnly = Boolean(satellite?.viaMarker) && satellite?.cloned === false;
+  const vaultSubject = satellite && !cloudOnly ? satellite.vaultRootAbs : repoRoot;
   const yamlPath = deps.joinPath(vaultSubject, "heyspex.yaml");
   const yamlContent = readIfExists(deps, yamlPath);
   const vaultId = yamlContent ? parseVaultId(yamlContent) : null;
@@ -27245,11 +27645,12 @@ function runConnectChecks(repoRoot, deps, opts = {}) {
     )
   );
   const workspaceRecord = vaultRecord ? registry.workspaces.find((w) => w.id === vaultRecord.workspace_id) : void 0;
+  const ownVaultRegistered = Boolean(vaultId) && Boolean(vaultRecord) && vaultRecord?.id === vaultId;
   checks.push(
     row(
       "workspace_registered",
       "workspace registered in ~/.heyspex/registry.json",
-      Boolean(workspaceRecord),
+      Boolean(workspaceRecord) || ownVaultRegistered,
       satelliteDetail(
         satellite,
         workspaceRecord ? `id: ${workspaceRecord.id}` : vaultRecord ? `vault's workspace "${vaultRecord.workspace_id}" not found in registry` : satellite ? "the attached vault is not registered on this machine" : "no vault registered for this repo"
@@ -27370,9 +27771,38 @@ function runConnectChecks(repoRoot, deps, opts = {}) {
       id: "satellite_attachment",
       label: "attached vault (satellite repo)",
       status: satellite.conflicting ? "stale" : "present",
-      detail: satellite.conflicting ? `manifests pin different vaults (${pinned}) -- re-run \`hs install --attach-vault <id> --force\` to make them agree` : `${satellite.vaultId ?? "(unregistered)"} at ${satellite.vaultRootAbs} (${pinned})`
+      detail: satellite.viaMarker ? `${satellite.vaultId ?? "(no vault_id)"} via heyspex.yaml vault_path ${satellite.vaultPath} -> ${satellite.vaultRootAbs} (${satellite.cloned ? "cloned here" : "NOT cloned here: cloud-only mode"})` : satellite.conflicting ? `manifests pin different vaults (${pinned}) -- re-run \`hs install --attach-vault <id> --force\` to make them agree` : `${satellite.vaultId ?? "(unregistered)"} at ${satellite.vaultRootAbs} (${pinned})`
     });
   }
+  if (satellite?.viaMarker) {
+    const na = (id, detail) => {
+      const r = checks.find((c) => c.id === id);
+      if (r && (r.status === "missing" || r.status === "stale")) {
+        r.status = "not_applicable";
+        r.detail = detail;
+        delete r.remedy;
+      }
+    };
+    const noRow = "not required: this repo's committed heyspex.yaml binds the vault by id (a registry row appears after `hs connect` in the vault clone)";
+    na("vault_registered", noRow);
+    na("workspace_registered", noRow);
+    na("id_agreement", noRow);
+    na("account_agreement", "portable marker records no account; the signed-in account is used");
+    if (cloudOnly) {
+      na(
+        "specs_dir",
+        `satellite, vault not cloned locally -- cloud mode (clone the vault repo at ${satellite.vaultPath ?? "its vault_path"} for local reads and \`hs pull\`)`
+      );
+    }
+    if (!vaultId) {
+      const y = checks.find((c) => c.id === "heyspex_yaml");
+      if (y) {
+        y.status = "stale";
+        y.detail = "heyspex.yaml has a vault_path but no vault_id; the satellite cannot name its vault";
+        y.remedy = "add `vault_id: <the vault's uuid>` to heyspex.yaml (find it with `hs vault list`), then re-run `hs connect --check`";
+      }
+    }
+  }
   const connected = checks.every((c) => c.status === "present" || c.status === "not_applicable");
   return {
     repo_root: repoRoot,
@@ -27381,7 +27811,8 @@ function runConnectChecks(repoRoot, deps, opts = {}) {
     ...satellite ? {
       satellite: {
         attached_vault_root: satellite.vaultRootAbs,
-        attached_vault_id: satellite.vaultId
+        attached_vault_id: satellite.vaultId,
+        ...satellite.viaMarker ? { via_marker: true, cloned: satellite.cloned === true } : {}
       }
     } : {}
   };
@@ -27507,6 +27938,22 @@ function pointerVsRepoVerdict(input) {
     repair: `hs vault switch ${repoVault}`,
     detail: `the cloud pointer names ${cloudPointer ?? "(none)"} but the registry pointer (its local cache) names ${registryPointer}: the cache is stale`
   });
+  if (markerVaultId && input.markerBoundSatellite && !registryRowId) {
+    return {
+      branch: "explicit_vault",
+      agree: true,
+      repair: null,
+      detail: `this marker-bound satellite names ${markerVaultId} in its committed heyspex.yaml, so CLI and MCP requests route to it by id; no registry row is needed and the account pointer (${cloudPointer ?? "(none)"}) is informational`
+    };
+  }
+  if (markerVaultId && registryRowId === markerVaultId) {
+    return {
+      branch: "explicit_vault",
+      agree: true,
+      repair: null,
+      detail: cloudPointer === markerVaultId && (registryPointer === null || registryPointer === markerVaultId) ? `both pointers name ${markerVaultId}` : `the account's active pointer names ${cloudPointer ?? "(none)"} (the browser console's choice${registryPointer !== null && registryPointer !== cloudPointer ? `; the local cache names ${registryPointer}` : ""}); this repo names its own vault ${markerVaultId} explicitly in heyspex.yaml, so CLI and MCP requests route to it and the difference is informational (optional: \`hs vault switch ${markerVaultId}\`)`
+    };
+  }
   if (markerVaultId) {
     if (registryRowId !== markerVaultId) {
       const rekey = ROUTING_FACTS.find((f) => f.id === "C")?.caches.find((c) => c.id === "registry-vault-id")?.repair ?? "hs vault migrate-registry";
@@ -27722,7 +28169,7 @@ async function readCloudView(http, tokens) {
 }
 async function runCloudViewChecks(repoRoot, deps, opts = {}) {
   const satellite = opts.satellite !== void 0 ? opts.satellite : detectSatelliteAttachment(repoRoot, deps);
-  const vaultSubject = satellite ? satellite.vaultRootAbs : repoRoot;
+  const vaultSubject = satellite && !(satellite.viaMarker && satellite.cloned === false) ? satellite.vaultRootAbs : repoRoot;
   const marker = readIfExists(deps, deps.joinPath(vaultSubject, "heyspex.yaml"));
   const vaultId = marker ? parseVaultId(marker) : null;
   const env = deps.env ?? process.env;
@@ -27733,7 +28180,11 @@ async function runCloudViewChecks(repoRoot, deps, opts = {}) {
     homeDir,
     readFile: (p) => readFile3(p) ?? ""
   });
-  const repoAccount = (marker ? parseAccountId(marker) : null) ?? signedInLocal ?? null;
+  const rowForAccount = loadVaultRegistry(deps.registryOpts).vaults.find(
+    (v) => samePath(v.repo_root_abs, vaultSubject)
+  );
+  const boundAccount = rowForAccount?.account_id && rowForAccount.account_id !== LEGACY_REGISTRY_ACCOUNT_ID ? rowForAccount.account_id : null;
+  const repoAccount = boundAccount ?? signedInLocal ?? null;
   const http = deps.http;
   let tokens = { current: null, repo: null };
   if (http && http.token !== void 0) tokens = { current: http.token, repo: http.token };
@@ -27767,7 +28218,8 @@ async function runCloudViewChecks(repoRoot, deps, opts = {}) {
         markerVaultId: vaultId,
         registryRowId: vaultRecord?.id ?? null,
         cloudPointer: view.cloudPointer,
-        registryPointer: localPointer
+        registryPointer: localPointer,
+        markerBoundSatellite: Boolean(satellite?.viaMarker)
       });
       rows.push(
         compared(
@@ -27840,6 +28292,19 @@ async function runCloudViewChecks(repoRoot, deps, opts = {}) {
       rows.push(notApplicableRow(id, "no heyspex.yaml and no signed-in account"));
     } else if (view.sessionFailure) {
       rows.push(unknownRow(id, repoAccount, view.sessionFailure));
+    } else if (!repoAccount && satellite?.viaMarker) {
+      rows.push(
+        compared(
+          id,
+          {
+            local: "(portable marker: no account recorded)",
+            cloud: view.email ? `${view.userId} (${view.email})` : view.userId
+          },
+          true,
+          "hs login",
+          `portable marker; signed in as ${view.email ?? view.userId}`
+        )
+      );
     } else {
       const agree = repoAccount !== null && (repoAccount === view.userId || repoAccount === view.email);
       rows.push(
@@ -27977,7 +28442,7 @@ function writeProjectContract(ctx, options2 = {}) {
 }
 
 // spex-console/src/lib/cli/init.customer-vault.ts
-import { basename } from "node:path";
+import { basename as basename2 } from "node:path";
 
 // spex-console/src/lib/cli/template-manifest.sources.mjs
 var UNIVERSAL_TEMPLATE_ROWS = [
@@ -28488,7 +28953,7 @@ function findManagedSpecs(deps, targetDir, manifestDests) {
   return out;
 }
 function defaultVaultName(targetDir) {
-  return basename(targetDir) || targetDir;
+  return basename2(targetDir) || targetDir;
 }
 function runCustomerVaultInit(args, deps, options2 = {}) {
   const { targetDir } = args;
@@ -28636,14 +29101,14 @@ function templatePinHook() {
 }
 
 // spex-console/src/lib/cli/principle-selection.ts
-import { basename as basename2 } from "node:path";
+import { basename as basename3 } from "node:path";
 var PRINCIPLES_INDEX_DEST = "specs/principles-index.md";
 function principleKey(row2) {
-  const base = basename2(row2.dest, ".md");
+  const base = basename3(row2.dest, ".md");
   return base.startsWith("principle-") ? base.slice("principle-".length) : base;
 }
 function principleWikilink(row2) {
-  return basename2(row2.dest, ".md");
+  return basename3(row2.dest, ".md");
 }
 function parsePrinciplesFlag(value, rows) {
   const principleRows = rows.filter((row2) => row2.group === "principle");
@@ -28754,7 +29219,7 @@ function applyCustomerTemplate(args) {
 }
 
 // spex-console/src/lib/cli/install.ts
-import { homedir as homedir10 } from "node:os";
+import { isAbsolute as isAbsolute3, resolve as resolveNodePath2 } from "node:path";
 
 // scripts/install-cursor-hooks.mjs
 import fs2 from "node:fs";
@@ -28771,10 +29236,13 @@ var HOOKS = [
   { event: "sessionStart", hook: "wip-checkpoint", why: "Surface the previous session WIP handoff before work resumes." },
   { event: "sessionStart", hook: "inject-dev-server-awareness", why: "Once-per-session reminder that dev-server status is a tool call, not a guess." },
   { event: "sessionStart", hook: "inject-coo-seat", why: "Inject the dev-factory COO seat mandate when the COO window is open." },
+  { event: "sessionStart", hook: "inject-doctrine", why: "Inject the baseline SpexCode Doctrine edition at session start." },
   { event: "sessionStart", hook: "coo-guard-check", why: "Warn at session start when a breakdown has not been delegated." },
   { event: "sessionStart", hook: "check-auto-memory-budget", why: "Self-heal and budget-check the auto-memory index." },
   { event: "sessionStart", hook: "check-claude-md-budget", why: "Advisory budget check on the always-loaded agent contract." },
   { event: "sessionStart", hook: "check-mcp-freshness-hook", why: "Warn when the running MCP server is stale versus vendor." },
+  { event: "sessionStart", hook: "git-reflog-audit", why: "Session-start git audit (stash/reset/rebase witness)." },
+  { event: "sessionStart", hook: "vault-mirror-catchup", why: "Cloud write mode: detached hs pull --apply closes a stale disk mirror (HS-XJFQ)." },
   // ── Compaction ──────────────────────────────────────────────────────────
   // Claude re-runs SessionStart(source: compact) after compaction; Cursor fires
   // preCompact BEFORE it, so the shim relays this one as SessionStart(compact)
@@ -28788,6 +29256,7 @@ var HOOKS = [
   { event: "beforeSubmitPrompt", hook: "preflight-reminder", why: "Name the required procedure before a filing/destructive/protocol turn." },
   { event: "beforeSubmitPrompt", hook: "intent-classifier-trigger", why: "Route capture / research / settings / defer intents to the right skill." },
   { event: "beforeSubmitPrompt", hook: "inject-communication-style", why: "Re-assert the plain-language communication rules each turn." },
+  { event: "beforeSubmitPrompt", hook: "inject-vault-context", timeout: 10, why: "Lexical vault retrieval for the prompt (surfaced as a user message)." },
   // ── Before every tool call (any tool) ───────────────────────────────────
   { event: "preToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PreToolUse"], why: "Claim liveness heartbeat to the console." },
   { event: "preToolUse", matcher: ".*", hook: "coo-denylist-gate", why: "Hard deny the COO-window deny list." },
@@ -28798,21 +29267,27 @@ var HOOKS = [
   // the vault guard because removing a profile file is the loss it exists to
   // prevent, and Claude had no separate delete tool to list.
   { event: "preToolUse", matcher: "Write|Delete", hook: "env-vault-guard", why: "Block destructive writes to the encrypted env vault (ALWAYS ON)." },
+  { event: "preToolUse", matcher: "Write", hook: "vault-write-tier-guard", why: "Deny disk writes to vault specs in cloud write mode (HS-FCNH)." },
   { event: "preToolUse", matcher: "Write", hook: "settings-write-gate", why: "Require approval before .heyspex/config.yaml changes." },
   { event: "preToolUse", matcher: "Write", hook: "enforce-vault-naming", why: "Block vault filenames that violate the naming registry." },
   { event: "preToolUse", matcher: "Write", hook: "guard-auto-memory-writes", why: "Block new topic files in the auto-memory directory." },
   { event: "preToolUse", matcher: "Write", hook: "preflight-reminder", why: "Preflight reminder on the edit path itself." },
   { event: "preToolUse", matcher: "Write", hook: "claim-before-code-gate", why: "Deny the first code edit after plan exit with no claim." },
+  { event: "preToolUse", matcher: "Write", hook: "directive-obligation-gate", why: "Deny product-code writes while a capture_on_idea obligation is unmet, and (claim-before-build) with no claim/capture (HS-20SW)." },
   // ── Before a shell command ──────────────────────────────────────────────
   // beforeShellExecution, not preToolUse/Shell: it is the only event guaranteed
   // to carry the command string, and Cursor honors allow/deny/ask on it.
   { event: "beforeShellExecution", hook: "env-vault-guard", why: "Block shell writes/exfiltration targeting the env vault (ALWAYS ON)." },
+  { event: "beforeShellExecution", hook: "vault-write-tier-guard", why: "Deny shell writes to vault specs in cloud write mode (HS-FCNH)." },
   { event: "beforeShellExecution", hook: "settings-write-gate", why: "Catch shell writes to .heyspex/config.yaml." },
   { event: "beforeShellExecution", hook: "enforce-vault-naming", why: "Catch vault files created via the shell." },
   { event: "beforeShellExecution", hook: "guard-auto-memory-writes", why: "Catch auto-memory topic files created via the shell." },
   { event: "beforeShellExecution", hook: "preflight-reminder", why: "Preflight reminder on rm -rf / force-push shaped commands." },
   { event: "beforeShellExecution", hook: "dev-server-task-reminder", timeout: 10, why: "Dev-server start/stop hard gate plus DB-safety reminder." },
   { event: "beforeShellExecution", hook: "git-stash-gate", timeout: 10, why: "Always ask before a mutating git stash." },
+  { event: "beforeShellExecution", hook: "git-identity-guard", why: "Agents never write git identity (owner ruling 2026-09-19, ALWAYS ON)." },
+  { event: "beforeShellExecution", hook: "capture-execution-gate", why: "Block dev-factory research/paid-model/routing shell commands past an ungrounded capture (HS-KNJ8, platform)." },
+  { event: "beforeShellExecution", hook: "directive-obligation-gate", why: "Deny build commands and product-code shell writes while a capture obligation is unmet (HS-20SW)." },
   // ── Before specific MCP tools ───────────────────────────────────────────
   // Cursor fires preToolUse for MCP tools too (matcher `MCP:<name>`), so these
   // stay on preToolUse rather than beforeMCPExecution — registering both would
@@ -28822,15 +29297,20 @@ var HOOKS = [
   { event: "preToolUse", matcher: ".*", tool: "heyspex_file_spec$", hook: "capture-workflow-gate", timeout: 8, why: "Deny filing an implementation spec straight out of an open capture." },
   { event: "preToolUse", matcher: ".*", tool: "heyspex_settings_set$", hook: "settings-write-gate", why: "Require approval for settings changes made through MCP." },
   { event: "preToolUse", matcher: ".*", tool: "[Nn]eon__(prepare_database_migration|complete_database_migration|reset_from_parent|delete_branch)$", hook: "dev-server-task-reminder", timeout: 10, why: "DB-safety gate on Neon migration/reset/delete tools." },
+  { event: "preToolUse", matcher: ".*", tool: "heyspex_file_spec$", hook: "diagnose-capture-reminder", why: "Warn when a diagnose is filed with no capture holding the owner words (HS-IK2D)." },
+  { event: "preToolUse", matcher: ".*", tool: "^(Workflow|Skill)$", hook: "research-method-guard", why: "Research method guard on Skill/Workflow launches (HS-EN4F, ALWAYS ON)." },
   { event: "preToolUse", matcher: ".*", tool: "^(Workflow|Skill)$", hook: "deep-research-cost-gate", why: "Cost confirmation before a paid deep-research harness launch." },
   { event: "preToolUse", matcher: ".*", tool: "^(WebSearch|WebFetch|web_search|web_fetch)$|heyspex_save_research$", hook: "research-protocol-gate", why: "WebSearch/WebFetch/save_research refused until the research preflight ran (HS-K0ZP, HS-EN4F)." },
   // ── Before a subagent spawn ─────────────────────────────────────────────
   // subagentStart over preToolUse/Task: it carries subagent_type and the model,
   // which is exactly what the routing gate decides on, and it can deny.
   { event: "subagentStart", hook: "agent-spawn-delegation-gate", why: "Block a build/breakdown/critic subagent on an off-routing model." },
+  { event: "subagentStart", hook: "capture-execution-gate", why: "Block a dev-factory subagent spawn past an ungrounded capture (HS-KNJ8, platform)." },
+  { event: "subagentStart", hook: "directive-obligation-gate", why: "Deny a build subagent while a capture obligation is unmet or the session has no claim/capture (HS-20SW)." },
   // ── After every tool call ───────────────────────────────────────────────
   { event: "postToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PostToolUse"], why: "Claim liveness heartbeat after the call resolves." },
   { event: "postToolUse", matcher: ".*", hook: "log-session-activity", args: ["--event=PostToolUse"], why: "Append the tool result row to the session log." },
+  { event: "postToolUse", matcher: ".*", hook: "directive-obligation-gate", why: "Discharge the capture obligation on a capture write; track claim acquire/release (HS-20SW)." },
   { event: "postToolUse", matcher: ".*", hook: "close-terminal-on-ship", why: "Close the Launch terminal once the spec ships." },
   { event: "postToolUse", matcher: "Write", hook: "notify-status-flip", why: "Sound on an in_review status flip." },
   { event: "postToolUse", matcher: "Write", hook: "scripts/stamp-provenance-on-edit.mjs", why: "Stamp assisted_by provenance on direct spec edits." },
@@ -28843,7 +29323,11 @@ var HOOKS = [
   // hook re-drives the agent — the same effect as Claude's exit-2 block.
   { event: "stop", hook: "emit-claim-status", args: ["--event=Stop"], why: "Mark the claim pending-on-response." },
   { event: "stop", hook: "naughty-list-gate", why: "Re-drive the turn when the final message uses banned jargon." },
+  { event: "stop", hook: "id-display-format-gate", why: "Re-drive the turn when a reply breaks the Naming V3 display-id format." },
+  { event: "stop", hook: "epic-milestone-phrasing-gate", why: "Re-drive the turn when a reply breaks the epic/milestone phrasing rules." },
+  { event: "stop", hook: "git-reflog-audit", why: "Session-close git audit backstop (stash/reset/rebase witness)." },
   { event: "stop", hook: "enforce-session-sequence", why: "Re-drive the turn when work shipped without record_wip." },
+  { event: "stop", hook: "directive-obligation-gate", why: "Re-drive the turn ONCE (followup_message) when a capture obligation is still unmet (HS-20SW)." },
   // ── Session end ─────────────────────────────────────────────────────────
   { event: "sessionEnd", hook: "session-end", why: "Release the claim and notify the console." },
   { event: "sessionEnd", hook: "close-terminal-on-ship", why: "Final terminal cleanup." }
@@ -30481,6 +30965,7 @@ var INSTALL_HELP = [
   "  hs install [--target <dir>] [--platform <dir>] [--force] [--dry-run] [--json]",
   "             [--no-cursor] [--no-claude] [--claude-apply]",
   "             [--plugin | --plugin-apply] [--plugin-scope user|project|local]",
+  "             [--copilot-hooks | --copilot-plugin | --copilot-plugin-apply]",
   "             [--no-statusline]",
   "             [--cc | --command-code] [--register-vault [--workspace <id>]]",
   "             [--remote[=<url>]]",
@@ -30539,6 +31024,15 @@ var INSTALL_HELP = [
   `                     the platform's .claude-plugin/marketplace.json (fallback: ${PLUGIN_INSTALL_SPEC}).`,
   "  --plugin-scope <s> Plugin install scope: user, project (default), or local.",
   "                     Implies --plugin.",
+  "  --copilot-hooks    Write .github/hooks/heyspex.json (GitHub Copilot hooks) into the",
+  "                     target. Commands resolve node_modules/heyspex first, so an npm-only",
+  "                     install (no heyspex repo checkout) works. Pick this OR the plugin.",
+  "  --copilot-plugin   Print `copilot plugin marketplace add '<platform>'` +",
+  "                     `copilot plugin install <plugin>@<marketplace>` (the platform root is",
+  "                     node_modules/heyspex for a published install).",
+  "  --copilot-plugin-apply  Run those two commands when `copilot` is on PATH.",
+  "                     Requesting the Copilot plugin AND --copilot-hooks warns and skips the",
+  "                     hooks file (both would fire every hook twice).",
   "  --remote[=<url>]   Write .mcp.json for the REMOTE (cloud) MCP endpoint instead of",
   `                     the local stdio server \u2014 the Streamable-HTTP form against`,
   `                     ${DEFAULT_REMOTE_MCP_URL} (or <url>), authenticated by the`,
@@ -30587,35 +31081,15 @@ var INSTALL_HELP = [
 
 // spex-console/src/lib/cli/install-identity.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync4 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync5 } from "node:fs";
+import { join as join11 } from "node:path";
 import { createInterface } from "node:readline/promises";
-
-// scripts/lib/shared-path-helpers.mjs
-import { isAbsolute, resolve as resolve4, sep } from "node:path";
-function resolveCodeRoot({
-  explicit,
-  packageRoot,
-  vaultRoot,
-  env = process.env
-} = {}) {
-  const fromExplicit = typeof explicit === "string" ? explicit.trim() : "";
-  if (fromExplicit) return fromExplicit;
-  const fromEnv = typeof env?.HS_PKG_ROOT === "string" ? env.HS_PKG_ROOT.trim() : "";
-  if (fromEnv) return fromEnv;
-  const fromPackage = typeof packageRoot === "string" ? packageRoot.trim() : "";
-  if (fromPackage) return fromPackage;
-  const fromVault = typeof vaultRoot === "string" ? vaultRoot.trim() : "";
-  return fromVault;
-}
-
-// spex-console/src/lib/cli/install-identity.ts
 init_credentials();
 
 // vendor/heyspex-mcp/whoami.mjs
+init_heyspex_home();
 init_credentials();
-import { homedir as homedir11 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 var SESSION_PATH = "/api/mcp/session";
 async function probeCredentialIdentity({ consoleUrl, token, fetchImpl = fetch } = {}) {
   if (!token) return { kind: "no_credential" };
@@ -30870,7 +31344,7 @@ async function runIdentityGate(io, flags, verb, wording = ATTACH_WORDING) {
     "identity_unconfirmed"
   );
 }
-function readConfiguredAccountId(env = process.env, homeDir = homedir12()) {
+function readConfiguredAccountId(env = process.env, homeDir = heyspexHome()) {
   return resolveSessionOwnerUncached({ env, homeDir });
 }
 function accountMismatchRepair(repoAccount) {
@@ -30899,7 +31373,7 @@ function isInteractiveTerminal() {
 }
 function defaultIdentityGateIo(opts) {
   const consoleUrl = opts.consoleUrl.trim().replace(/\/+$/, "");
-  const loginCli = [opts.platformRoot, resolveCodeRoot({})].filter((r) => Boolean(r && r.trim())).map((r) => join10(r, "vendor", "heyspex-mcp", "cli.mjs")).find((p) => existsSync4(p));
+  const loginCli = [opts.platformRoot, resolveCodeRoot({})].filter((r) => Boolean(r && r.trim())).map((r) => join11(r, "vendor", "heyspex-mcp", "cli.mjs")).find((p) => existsSync5(p));
   return {
     consoleUrl,
     interactive: opts.interactive ?? isInteractiveTerminal(),
@@ -31030,7 +31504,7 @@ function remedyFor(row2, satellite) {
     case "heyspex_yaml":
     case "vault_registered":
     case "workspace_registered":
-      return satellite ? null : "hs connect";
+      return satellite ? row2.remedy ?? null : "hs connect";
     case "mcp_entry":
       return satellite ? "hs install --attach-vault <vault-id> --force" : "hs connect";
     case "plugin_surface":
@@ -31038,7 +31512,7 @@ function remedyFor(row2, satellite) {
     case "git_hooks":
       return "node scripts/install-git-hooks.mjs";
     case "satellite_attachment":
-      return "hs install --attach-vault <vault-id> --force";
+      return row2.remedy ?? "hs install --attach-vault <vault-id> --force";
     case "active_vault":
     case "account_agreement":
     case "workspace_agreement":
@@ -31061,7 +31535,10 @@ function formatReport(report) {
   const lines = [
     `hs connect --check \u2014 ${report.repo_root}`,
     ...report.satellite ? [
-      `satellite repo \u2014 attached to vault ${report.satellite.attached_vault_id ?? "(unregistered)"} at ${report.satellite.attached_vault_root}; the vault rows below describe THAT repo.`
+      `satellite repo \u2014 attached to vault ${report.satellite.attached_vault_id ?? "(unregistered)"} at ${report.satellite.attached_vault_root}; the vault rows below describe THAT repo.`,
+      ...report.satellite.via_marker ? [
+        report.satellite.cloned ? "bound by this repo's committed heyspex.yaml (vault_id + relative vault_path)." : "bound by this repo's committed heyspex.yaml; vault not cloned locally -- cloud mode (cloud reads and writes work; clone the vault at its vault_path for local reads)."
+      ] : []
     ] : [],
     "",
     ...report.checks.flatMap((c) => [
@@ -31137,7 +31614,7 @@ var CANONICAL_VAULT_SUBFOLDERS = [
 function bareSpecsDirWarning(specsDir, deps) {
   let entries = [];
   try {
-    entries = readdirSync(specsDir);
+    entries = readdirSync2(specsDir);
   } catch {
     return null;
   }
@@ -31259,9 +31736,10 @@ async function runConnectFullRun(args, deps) {
     };
   }
   if (!satellite && strictAccount.ok) {
-    const markerPath = deps.joinPath(repoRoot, "heyspex.yaml");
-    const markerText = deps.fileExists(markerPath) ? deps.readFile(markerPath) : null;
-    const repoAccount = markerText ? parseAccountId(markerText) : null;
+    const boundRow = loadVaultRegistry(deps.registryOpts).vaults.find(
+      (v) => samePath(v.repo_root_abs, repoRoot)
+    );
+    const repoAccount = boundRow?.account_id && boundRow.account_id !== "legacy" ? boundRow.account_id : null;
     if (repoAccount && repoAccount !== strictAccount.accountId) {
       return accountMismatchRefusal("hs connect", repoAccount, strictAccount.accountId);
     }
@@ -31364,37 +31842,14 @@ async function runConnectFullRun(args, deps) {
     if (isPresent("heyspex_yaml")) {
       const content = deps.fileExists(yamlPath) ? deps.readFile(yamlPath) : null;
       vaultId = content ? parseVaultId(content) ?? void 0 : void 0;
-      const accountUpdate = content !== null && accountId ? recordMarkerAccount(content, accountId) : null;
-      if (accountUpdate?.action !== "added") {
-        steps.push({
-          id: "heyspex_yaml",
-          label: "heyspex.yaml vault marker",
-          status: "skipped",
-          detail: "already initialized",
-          confirmed_by: "read heyspex.yaml"
-        });
-      } else if (args.dryRun) {
-        steps.push({
-          id: "heyspex_yaml",
-          label: "heyspex.yaml vault marker",
-          status: "run",
-          detail: `would record account: ${accountId} in ${yamlPath}`
-        });
-      } else {
-        try {
-          deps.writeFile(yamlPath, accountUpdate.content);
-          assertMarker(deps.readFile(yamlPath), yamlPath, vaultId, accountId);
-          steps.push({
-            id: "heyspex_yaml",
-            label: "heyspex.yaml vault marker",
-            status: "run",
-            detail: `recorded account: ${accountId} in ${yamlPath}`,
-            confirmed_by: "read heyspex.yaml"
-          });
-        } catch (err) {
-          failStep("heyspex_yaml", "heyspex.yaml vault marker", err);
-        }
-      }
+      const legacyAccount = content ? parseAccountId(content) : null;
+      steps.push({
+        id: "heyspex_yaml",
+        label: "heyspex.yaml vault marker",
+        status: "skipped",
+        detail: legacyAccount ? `already initialized (legacy account: ${legacyAccount} in the marker is ignored -- the account binding is machine-local)` : "already initialized",
+        confirmed_by: "read heyspex.yaml"
+      });
     } else if (args.dryRun) {
       steps.push({
         id: "heyspex_yaml",
@@ -31432,8 +31887,7 @@ async function runConnectFullRun(args, deps) {
           vaultRoot: "specs/",
           force: false,
           json: false,
-          adoptedVaultId,
-          ...accountId ? { accountId } : {}
+          adoptedVaultId
         },
         initDeps
       );
@@ -32452,9 +32906,6 @@ function assertMarker(content, path9, vaultId, accountId) {
   if (vaultId && back !== vaultId) {
     throw new Error(`${path9} reads back vault_id ${back ?? "(none)"}, not ${vaultId}`);
   }
-  if (accountId && parseAccountId(content) !== accountId) {
-    throw new Error(`${path9} does not record account: ${accountId} after the write`);
-  }
 }
 var MIRRORED_SKILL_DIRS = [
   [".claude", "skills"],
@@ -32796,7 +33247,6 @@ var HELP3 = [
 
 // spex-console/src/lib/cli/join.ts
 init_credentials();
-import { homedir as homedir14 } from "node:os";
 
 // spex-console/src/lib/env-vault/crypto.ts
 import {
@@ -33113,17 +33563,17 @@ import {
 import {
   appendFileSync,
   closeSync,
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync5,
+  existsSync as existsSync6,
+  mkdirSync as mkdirSync6,
   openSync,
-  readFileSync as readFileSync10,
-  renameSync as renameSync3,
+  readFileSync as readFileSync11,
+  renameSync as renameSync4,
   statSync,
   unlinkSync,
-  writeFileSync as writeFileSync5,
+  writeFileSync as writeFileSync6,
   writeSync
 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 var STORE_FILE = "env-tokens.json";
 var LOCK_FILE = "env-tokens.lock";
 var FILE_MODE = 384;
@@ -33159,15 +33609,15 @@ function unwrapPrivateKey(token, wrapSaltHex, wrapped) {
   return plaintext.toString("utf8");
 }
 function heyspexDir(vaultRoot) {
-  const dir = join11(vaultRoot, ".heyspex");
-  mkdirSync5(dir, { recursive: true });
+  const dir = join12(vaultRoot, ".heyspex");
+  mkdirSync6(dir, { recursive: true });
   return dir;
 }
 function memberTokenStorePath(vaultRoot) {
-  return join11(vaultRoot, ".heyspex", STORE_FILE);
+  return join12(vaultRoot, ".heyspex", STORE_FILE);
 }
 function memberTokenStorePresent(vaultRoot) {
-  return existsSync5(memberTokenStorePath(vaultRoot));
+  return existsSync6(memberTokenStorePath(vaultRoot));
 }
 function sleepSync(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
@@ -33198,7 +33648,7 @@ function acquireLock(lockPath) {
   }
 }
 function withTokenLock(vaultRoot, fn) {
-  const lockPath = join11(heyspexDir(vaultRoot), LOCK_FILE);
+  const lockPath = join12(heyspexDir(vaultRoot), LOCK_FILE);
   const fd = acquireLock(lockPath);
   try {
     return fn();
@@ -33215,19 +33665,19 @@ function withTokenLock(vaultRoot, fn) {
 }
 function readStore(vaultRoot) {
   const p = memberTokenStorePath(vaultRoot);
-  if (!existsSync5(p)) return [];
+  if (!existsSync6(p)) return [];
   try {
-    const parsed = JSON.parse(readFileSync10(p, "utf8"));
+    const parsed = JSON.parse(readFileSync11(p, "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
   }
 }
 function writeStore(vaultRoot, records) {
-  const p = join11(heyspexDir(vaultRoot), STORE_FILE);
+  const p = join12(heyspexDir(vaultRoot), STORE_FILE);
   const tmp = `${p}.tmp`;
-  writeFileSync5(tmp, JSON.stringify(records, null, 2) + "\n", { mode: FILE_MODE });
-  renameSync3(tmp, p);
+  writeFileSync6(tmp, JSON.stringify(records, null, 2) + "\n", { mode: FILE_MODE });
+  renameSync4(tmp, p);
 }
 function isLive(r, nowMs) {
   if (r.revokedAt) return false;
@@ -33282,23 +33732,23 @@ import { randomBytes as randomBytes3, scryptSync as scryptSync2, timingSafeEqual
 import {
   appendFileSync as appendFileSync2,
   closeSync as closeSync2,
-  existsSync as existsSync7,
-  mkdirSync as mkdirSync6,
+  existsSync as existsSync8,
+  mkdirSync as mkdirSync7,
   openSync as openSync2,
-  readFileSync as readFileSync11,
-  renameSync as renameSync4,
+  readFileSync as readFileSync12,
+  renameSync as renameSync5,
   statSync as statSync2,
   unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync6,
+  writeFileSync as writeFileSync7,
   writeSync as writeSync2
 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 
 // spex-console/src/lib/env-vault/sops.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
-import { existsSync as existsSync6 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
+import { existsSync as existsSync7 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
 import path6 from "node:path";
 function ageRecipientFingerprint(recipient, length = 12) {
   return createHash5("sha256").update(recipient, "utf8").digest("hex").slice(0, length);
@@ -33332,14 +33782,14 @@ function candidateInvocations(tool) {
       "mise",
       "bin"
     );
-    const extra = existsSync6(miseBin) ? [miseBin] : [];
+    const extra = existsSync7(miseBin) ? [miseBin] : [];
     candidates.push({
       command: path6.join(local, "mise", "shims", `${tool}.exe`),
       env: withExtendedPath(extra)
     });
   }
   candidates.push({
-    command: path6.join(homedir13(), ".local", "share", "mise", "shims", tool),
+    command: path6.join(homedir10(), ".local", "share", "mise", "shims", tool),
     env: process.env
   });
   return candidates;
@@ -33647,9 +34097,9 @@ function formatCode(bytes) {
 function normalizeEnvPairingCode(raw) {
   const compact = raw.replace(/[\s-]+/g, "").toUpperCase();
   if (LEGACY_CANONICAL_CODE.test(compact)) return group(compact);
-  const mapped = compact.replace(/O/g, "0").replace(/[IL]/g, "1");
-  if (!CANONICAL_CODE.test(mapped)) return null;
-  return group(mapped);
+  const mapped2 = compact.replace(/O/g, "0").replace(/[IL]/g, "1");
+  if (!CANONICAL_CODE.test(mapped2)) return null;
+  return group(mapped2);
 }
 var SCRYPT2 = { N: 1 << 14, r: 8, p: 1, maxmem: 64 * 1024 * 1024 };
 var SCRYPT_KEYLEN2 = 32;
@@ -33663,18 +34113,18 @@ function hashEquals2(a, b) {
   return timingSafeEqual2(bufA, bufB);
 }
 function heyspexDir2(vaultRoot) {
-  const dir = join12(vaultRoot, ".heyspex");
-  mkdirSync6(dir, { recursive: true });
+  const dir = join13(vaultRoot, ".heyspex");
+  mkdirSync7(dir, { recursive: true });
   return dir;
 }
 function envPairingStorePath(vaultRoot) {
-  return join12(vaultRoot, ".heyspex", STORE_FILE2);
+  return join13(vaultRoot, ".heyspex", STORE_FILE2);
 }
 function envPairingStorePresent(vaultRoot) {
-  return existsSync7(envPairingStorePath(vaultRoot));
+  return existsSync8(envPairingStorePath(vaultRoot));
 }
 function auditPath(vaultRoot) {
-  return join12(heyspexDir2(vaultRoot), AUDIT_FILE);
+  return join13(heyspexDir2(vaultRoot), AUDIT_FILE);
 }
 function sleepSync2(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
@@ -33705,7 +34155,7 @@ function acquireLock2(lockPath) {
   }
 }
 function withPairingLock(vaultRoot, fn) {
-  const lockPath = join12(heyspexDir2(vaultRoot), LOCK_FILE2);
+  const lockPath = join13(heyspexDir2(vaultRoot), LOCK_FILE2);
   const fd = acquireLock2(lockPath);
   try {
     return fn();
@@ -33722,9 +34172,9 @@ function withPairingLock(vaultRoot, fn) {
 }
 function readStore2(vaultRoot) {
   const p = envPairingStorePath(vaultRoot);
-  if (!existsSync7(p)) return [];
+  if (!existsSync8(p)) return [];
   try {
-    const parsed = JSON.parse(readFileSync11(p, "utf8"));
+    const parsed = JSON.parse(readFileSync12(p, "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -33738,10 +34188,10 @@ function prune(records) {
   });
 }
 function writeStore2(vaultRoot, records) {
-  const p = join12(heyspexDir2(vaultRoot), STORE_FILE2);
+  const p = join13(heyspexDir2(vaultRoot), STORE_FILE2);
   const tmp = `${p}.tmp`;
-  writeFileSync6(tmp, JSON.stringify(prune(records), null, 2) + "\n", { mode: FILE_MODE2 });
-  renameSync4(tmp, p);
+  writeFileSync7(tmp, JSON.stringify(prune(records), null, 2) + "\n", { mode: FILE_MODE2 });
+  renameSync5(tmp, p);
 }
 function appendEnvPairingAudit(vaultRoot, event) {
   const line = {
@@ -33755,18 +34205,18 @@ function appendEnvPairingAudit(vaultRoot, event) {
   appendFileSync2(auditPath(vaultRoot), JSON.stringify(line) + "\n", { mode: FILE_MODE2 });
 }
 function strikesPath(vaultRoot) {
-  return join12(heyspexDir2(vaultRoot), STRIKES_FILE);
+  return join13(heyspexDir2(vaultRoot), STRIKES_FILE);
 }
 function readStrikes(vaultRoot) {
   try {
-    const parsed = JSON.parse(readFileSync11(strikesPath(vaultRoot), "utf8"));
+    const parsed = JSON.parse(readFileSync12(strikesPath(vaultRoot), "utf8"));
     return typeof parsed.count === "number" && Number.isFinite(parsed.count) ? Math.max(0, Math.floor(parsed.count)) : 0;
   } catch {
     return 0;
   }
 }
 function writeStrikes(vaultRoot, count) {
-  writeFileSync6(
+  writeFileSync7(
     strikesPath(vaultRoot),
     JSON.stringify({ count, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }) + "\n",
     { mode: FILE_MODE2 }
@@ -33975,7 +34425,7 @@ function markEnvInviteApplied(vaultRoot, id) {
 }
 
 // spex-console/src/lib/env-vault/policy.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync12, renameSync as renameSync5, writeFileSync as writeFileSync7 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync8, readFileSync as readFileSync13, renameSync as renameSync6, writeFileSync as writeFileSync8 } from "node:fs";
 import path7 from "node:path";
 var POLICY_REL_PATH = ".heyspex/env/policy.json";
 var POLICY_VERSION = 1;
@@ -34008,7 +34458,7 @@ function readPolicy(vaultRoot, profile) {
   const file = policyPath(vaultRoot);
   let text2;
   try {
-    text2 = readFileSync12(file, "utf-8");
+    text2 = readFileSync13(file, "utf-8");
   } catch {
     return { mode: "allow", source: "default" };
   }
@@ -34028,8 +34478,8 @@ function serializePolicyFile(file) {
 }
 function loadForWrite(vaultRoot) {
   const file = policyPath(vaultRoot);
-  if (!existsSync8(file)) return { version: POLICY_VERSION, profiles: {} };
-  const parsed = parsePolicyFile(readFileSync12(file, "utf-8"));
+  if (!existsSync9(file)) return { version: POLICY_VERSION, profiles: {} };
+  const parsed = parsePolicyFile(readFileSync13(file, "utf-8"));
   if (parsed === null) {
     throw new Error(
       `${POLICY_REL_PATH} exists but is not a valid v${POLICY_VERSION} policy file \u2014 fix or remove it before changing policy (refusing to overwrite what it meant to say).`
@@ -34039,10 +34489,10 @@ function loadForWrite(vaultRoot) {
 }
 function writePolicyFile(vaultRoot, file) {
   const target = policyPath(vaultRoot);
-  mkdirSync7(path7.dirname(target), { recursive: true });
+  mkdirSync8(path7.dirname(target), { recursive: true });
   const tmp = `${target}.tmp`;
-  writeFileSync7(tmp, serializePolicyFile(file), "utf-8");
-  renameSync5(tmp, target);
+  writeFileSync8(tmp, serializePolicyFile(file), "utf-8");
+  renameSync6(tmp, target);
 }
 function writePolicy(vaultRoot, profile, mode) {
   if (!isPolicyMode(mode)) {
@@ -34054,7 +34504,7 @@ function writePolicy(vaultRoot, profile, mode) {
 }
 function clearPolicy(vaultRoot, profile) {
   const file = policyPath(vaultRoot);
-  if (!existsSync8(file)) return;
+  if (!existsSync9(file)) return;
   const parsed = loadForWrite(vaultRoot);
   if (!(profile in parsed.profiles)) return;
   delete parsed.profiles[profile];
@@ -34645,7 +35095,7 @@ function readJoinManifest(deps, repoRoot, profile) {
   }
 }
 function hasLoginCredentials(deps) {
-  const raw = deps.readFile(deps.joinPath(homedir14(), ".heyspex", "credentials.yaml"));
+  const raw = deps.readFile(deps.joinPath(heyspexHome(), ".heyspex", "credentials.yaml"));
   return parseMcpToken(raw) !== null;
 }
 function repoTargetName(repo) {
@@ -35661,16 +36111,16 @@ import { spawnSync as spawnSync4 } from "node:child_process";
 import { randomBytes as randomBytes5 } from "node:crypto";
 import {
   chmodSync,
-  existsSync as existsSync9,
-  mkdirSync as mkdirSync8,
-  readdirSync as readdirSync2,
-  readFileSync as readFileSync13,
-  renameSync as renameSync6,
+  existsSync as existsSync10,
+  mkdirSync as mkdirSync9,
+  readdirSync as readdirSync3,
+  readFileSync as readFileSync14,
+  renameSync as renameSync7,
   statSync as statSync3,
   unlinkSync as unlinkSync3,
-  writeFileSync as writeFileSync8
+  writeFileSync as writeFileSync9
 } from "node:fs";
-import { homedir as homedir16 } from "node:os";
+import { homedir as homedir12 } from "node:os";
 import path8 from "node:path";
 
 // node_modules/sops-age/dist/index.js
@@ -40592,7 +41042,7 @@ function alphabet(letters) {
   };
 }
 // @__NO_SIDE_EFFECTS__
-function join13(separator = "") {
+function join14(separator = "") {
   astr("join", separator);
   return {
     encode: (from) => {
@@ -40722,9 +41172,9 @@ var base64 = hasBase64Builtin ? {
   decode(s) {
     return decodeBase64Builtin(s, false);
   }
-} : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join13(""));
-var base64nopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ join13(""));
-var BECH_ALPHABET = /* @__PURE__ */ chain(/* @__PURE__ */ alphabet("qpzry9x8gf2tvdw0s3jn54khce6mua7l"), /* @__PURE__ */ join13(""));
+} : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join14(""));
+var base64nopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ join14(""));
+var BECH_ALPHABET = /* @__PURE__ */ chain(/* @__PURE__ */ alphabet("qpzry9x8gf2tvdw0s3jn54khce6mua7l"), /* @__PURE__ */ join14(""));
 var POLYMOD_GENERATORS = [996825010, 642813549, 513874426, 1027748829, 705979059];
 function bech32Polymod(pre) {
   const b = pre >> 25;
@@ -44340,8 +44790,8 @@ var gcm = /* @__PURE__ */ wrapCipher({ blockSize: 16, nonceLength: 12, tagLength
 
 // node_modules/sops-age/dist/index.js
 import { readFile } from "node:fs/promises";
-import { join as join14 } from "node:path";
-import { homedir as homedir15, platform } from "node:os";
+import { join as join15 } from "node:path";
+import { homedir as homedir11, platform } from "node:os";
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
 var import_sshpk = __toESM(require_lib2(), 1);
@@ -44682,11 +45132,11 @@ async function getUserConfigDir() {
       if (!appData) throw new Error("APPDATA env var not set");
       return appData;
     case "darwin":
-      return join14(homedir15(), "Library", "Application Support");
+      return join15(homedir11(), "Library", "Application Support");
     default:
       const xdgConfigHome = process.env.XDG_CONFIG_HOME;
       if (xdgConfigHome && xdgConfigHome.trim() !== "") return xdgConfigHome;
-      return join14(homedir15(), ".config");
+      return join15(homedir11(), ".config");
   }
 }
 async function findAllAgeKeys() {
@@ -44707,11 +45157,11 @@ async function findAllAgeKeys() {
       );
     }
   } else {
-    const userHomeDir = homedir15();
+    const userHomeDir = homedir11();
     if (userHomeDir) {
       const defaultSshPaths = [
-        join14(userHomeDir, ".ssh", "id_ed25519"),
-        join14(userHomeDir, ".ssh", "id_rsa")
+        join15(userHomeDir, ".ssh", "id_ed25519"),
+        join15(userHomeDir, ".ssh", "id_rsa")
       ];
       for (const sshPath of defaultSshPaths) {
         if (foundKeySource && convertedSshKeys.length > 0) {
@@ -44788,7 +45238,7 @@ async function findAllAgeKeys() {
     }
   }
   if (userConfigDirPath) {
-    const sopsKeysFilePath = join14(
+    const sopsKeysFilePath = join15(
       userConfigDirPath,
       SOPS_AGE_KEY_USER_CONFIG_PATH
     );
@@ -45281,14 +45731,14 @@ function keysPath(vaultRoot) {
   return path8.join(vaultRoot, ".heyspex", "env.keys");
 }
 function homeKeysPath() {
-  return path8.join(process.env.HEYSPEX_ENV_KEYS_HOME || homedir16(), ".heyspex", "env.keys");
+  return path8.join(process.env.HEYSPEX_ENV_KEYS_HOME || homedir12(), ".heyspex", "env.keys");
 }
 function dotenvPath(vaultRoot) {
   return path8.join(vaultRoot, ".env");
 }
 function readOrNull(file) {
   try {
-    return readFileSync13(file, "utf-8");
+    return readFileSync14(file, "utf-8");
   } catch {
     return null;
   }
@@ -45302,7 +45752,7 @@ function renameWithRetry(tmp, file) {
   const retryable = /* @__PURE__ */ new Set(["EPERM", "EBUSY", "EACCES"]);
   for (let attempt = 0; ; attempt++) {
     try {
-      renameSync6(tmp, file);
+      renameSync7(tmp, file);
       return;
     } catch (err) {
       const code = err.code ?? "";
@@ -45320,14 +45770,14 @@ function unlinkQuiet(file) {
 function atomicWrite(file, content, mode = 420) {
   const secret = mode === SECRET_MODE;
   const dir = path8.dirname(file);
-  mkdirSync8(dir, { recursive: true, ...secret ? { mode: SECRET_DIR_MODE } : {} });
+  mkdirSync9(dir, { recursive: true, ...secret ? { mode: SECRET_DIR_MODE } : {} });
   const tmp = path8.join(
     dir,
     `.${path8.basename(file)}.${process.pid}.${randomBytes5(4).toString("hex")}.tmp`
   );
   let renamed = false;
   try {
-    writeFileSync8(tmp, content, { encoding: "utf-8", mode });
+    writeFileSync9(tmp, content, { encoding: "utf-8", mode });
     if (secret) chmodOwnerOnly(tmp);
     renameWithRetry(tmp, file);
     renamed = true;
@@ -45341,11 +45791,11 @@ var LOCK_RETRY_MS3 = 50;
 var LOCK_STALE_MS3 = 5e3;
 function withFileLock(file, fn) {
   const lock = `${file}.lock`;
-  mkdirSync8(path8.dirname(file), { recursive: true, mode: SECRET_DIR_MODE });
+  mkdirSync9(path8.dirname(file), { recursive: true, mode: SECRET_DIR_MODE });
   let held = false;
   for (let attempt = 0; attempt < LOCK_RETRIES && !held; attempt++) {
     try {
-      writeFileSync8(lock, `${process.pid}
+      writeFileSync9(lock, `${process.pid}
 `, { flag: "wx" });
       held = true;
     } catch (err) {
@@ -45537,7 +45987,7 @@ function legacyDecryptAllSync(vaultRoot, name) {
 }
 function initProfile(vaultRoot, name = DEFAULT_PROFILE2, opts = {}) {
   const pFile = profilePath(vaultRoot, name);
-  if (existsSync9(pFile) && !opts.force) {
+  if (existsSync10(pFile) && !opts.force) {
     throw new EnvVaultConfigError(
       `Env profile "${name}" already exists at ${pFile}. Pass --force to re-key it (this discards existing values and mints a new keypair).`
     );
@@ -45583,7 +46033,7 @@ function listProfiles(vaultRoot) {
   } catch {
     return [];
   }
-  return readdirSync2(dir).filter((f) => f.endsWith(".env")).map((f) => f.slice(0, -".env".length)).sort();
+  return readdirSync3(dir).filter((f) => f.endsWith(".env")).map((f) => f.slice(0, -".env".length)).sort();
 }
 function listProfilesStatus(vaultRoot) {
   return listProfiles(vaultRoot).map((name) => {
@@ -45923,7 +46373,7 @@ function removeGrant(vaultRoot, profileName, name, opts = {}) {
 }
 async function exportProfile(vaultRoot, name = DEFAULT_PROFILE2, opts = {}) {
   const target = dotenvPath(vaultRoot);
-  if (existsSync9(target) && !opts.force) {
+  if (existsSync10(target) && !opts.force) {
     throw new EnvVaultConfigError(
       `${target} already exists. Pass --force to overwrite it (it is disposable \u2014 the encrypted profile is the system of record).`
     );
@@ -45952,7 +46402,7 @@ function writeTextFile(vaultRoot, filePath, content) {
   atomicWrite(resolveVaultPath(vaultRoot, filePath), content, SECRET_MODE);
 }
 function pathExists(vaultRoot, filePath) {
-  return existsSync9(resolveVaultPath(vaultRoot, filePath));
+  return existsSync10(resolveVaultPath(vaultRoot, filePath));
 }
 function fileMtime(vaultRoot, filePath) {
   const resolved = resolveVaultPath(vaultRoot, filePath);
@@ -45979,7 +46429,7 @@ function listRepoSourceFiles(vaultRoot) {
   const walk = (dir, rel) => {
     let entries;
     try {
-      entries = readdirSync2(dir, { withFileTypes: true });
+      entries = readdirSync3(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -46134,7 +46584,7 @@ async function confirm(question) {
 function findRepoRoot(start) {
   let dir = resolve5(start);
   for (; ; ) {
-    if (existsSync10(join15(dir, ".git"))) return dir;
+    if (existsSync11(join16(dir, ".git"))) return dir;
     const parent = dirname6(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -46142,7 +46592,7 @@ function findRepoRoot(start) {
 }
 function readFile2(p) {
   try {
-    return readFileSync14(p, "utf-8");
+    return readFileSync15(p, "utf-8");
   } catch {
     return null;
   }
@@ -46150,12 +46600,12 @@ function readFile2(p) {
 function connectCliDeps(repoRoot) {
   return {
     repoRoot,
-    fileExists: (p) => existsSync10(p),
+    fileExists: (p) => existsSync11(p),
     readFile: readFile2,
-    writeFile: (p, c) => writeFileSync9(p, c, "utf-8"),
-    mkdir: (p) => mkdirSync9(p, { recursive: true }),
-    joinPath: (...s) => join15(...s),
-    basename: (p) => basename3(p),
+    writeFile: (p, c) => writeFileSync10(p, c, "utf-8"),
+    mkdir: (p) => mkdirSync10(p, { recursive: true }),
+    joinPath: (...s) => join16(...s),
+    basename: (p) => basename4(p),
     now: () => (/* @__PURE__ */ new Date()).toISOString(),
     spawn: (command, spawnArgs, opts) => {
       const res = spawnSync5(command, spawnArgs, {
@@ -46204,7 +46654,7 @@ async function main() {
   const launchCwd = process4.env.HS_JOIN_CWD ? resolve5(process4.env.HS_JOIN_CWD) : process4.cwd();
   const walked = findRepoRoot(launchCwd);
   const rawHint = walked ?? (process4.env.HS_VAULT_ROOT ? resolve5(process4.env.HS_VAULT_ROOT) : null);
-  const repoRootHint = rawHint && existsSync10(join15(rawHint, "package.json")) ? rawHint : null;
+  const repoRootHint = rawHint && existsSync11(join16(rawHint, "package.json")) ? rawHint : null;
   let userName = null;
   try {
     userName = userInfo().username || null;
@@ -46217,9 +46667,9 @@ async function main() {
     platform: process4.platform,
     interactive: INTERACTIVE,
     userName,
-    pathExists: (p) => existsSync10(p),
+    pathExists: (p) => existsSync11(p),
     readFile: readFile2,
-    joinPath: (...s) => join15(...s),
+    joinPath: (...s) => join16(...s),
     resolvePath: (...s) => resolve5(...s),
     commandExists,
     // npm/mise/git resolve through the shell on Windows (.cmd shims).
@@ -46266,9 +46716,9 @@ async function main() {
     connect: {
       isConnected: (repoRoot) => Promise.resolve(
         runConnectChecks(repoRoot, {
-          fileExists: (p) => existsSync10(p),
+          fileExists: (p) => existsSync11(p),
           readFile: readFile2,
-          joinPath: (...s) => join15(...s)
+          joinPath: (...s) => join16(...s)
         }).connected
       ),
       findUnconnectedVaultForRemote: async (githubRemote) => {