heyspex 0.2.0 → 0.2.1

package/dist/cli/hs-connect.mjs

@@ -35,11 +35,26 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// scripts/lib/heyspex-home.mjs
+import { homedir } from "node:os";
+function heyspexHome(env = process.env) {
+  const override = env?.HEYSPEX_HOME;
+  if (typeof override === "string" && override.trim().length > 0) {
+    return override.trim();
+  }
+  return homedir();
+}
+var init_heyspex_home = __esm({
+  "scripts/lib/heyspex-home.mjs"() {
+    "use strict";
+  }
+});
+
 // vendor/heyspex-mcp/credentials.mjs
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import os, { homedir } from "node:os";
+import os, { homedir as homedir2 } from "node:os";
 import { dirname, join, resolve } from "node:path";
-function credentialsFilePath(homeDir = homedir()) {
+function credentialsFilePath(homeDir = heyspexHome()) {
   return join(homeDir, ".heyspex", "credentials.yaml");
 }
 function parseMcpToken(raw) {
@@ -152,14 +167,14 @@ function readLegacyConfigAccountId(read, homeDir) {
   const value = raw?.match(CONFIG_ACCOUNT_ID_RE)?.[1]?.trim() ?? "";
   return value || null;
 }
-function readBearer({ env = process.env, homeDir = homedir(), readFile: readFile2, accountId } = {}) {
+function readBearer({ env = process.env, homeDir = heyspexHome(), readFile: readFile2, accountId } = {}) {
   const read = readFile2 ?? ((p) => readFileSync(p, "utf8"));
   const credentialsText = readTextOrNull(read, credentialsFilePath(homeDir));
   const named = typeof accountId === "string" && accountId.trim() ? accountId.trim() : null;
   const legacyAccountId = named && parseCredentialsStore(credentialsText).schemaVersion === 1 ? readLegacyConfigAccountId(read, homeDir) : null;
   return resolveBearer({ envToken: env?.[MCP_TOKEN_ENV], credentialsText, accountId: named, legacyAccountId });
 }
-function readCurrentAccountId({ homeDir = homedir(), readFile: readFile2 } = {}) {
+function readCurrentAccountId({ homeDir = heyspexHome(), readFile: readFile2 } = {}) {
   const read = readFile2 ?? ((p) => readFileSync(p, "utf8"));
   const store = parseCredentialsStore(readTextOrNull(read, credentialsFilePath(homeDir)));
   if (store.schemaVersion === 2 && store.currentAccountId && store.currentAccountId !== LEGACY_ACCOUNT_ID) {
@@ -177,6 +192,7 @@ var MCP_TOKEN_ENV, MCP_TOKEN_LINE_RE, CREDENTIALS_SCHEMA_VERSION, LEGACY_ACCOUNT
 var init_credentials = __esm({
   "vendor/heyspex-mcp/credentials.mjs"() {
     "use strict";
+    init_heyspex_home();
     MCP_TOKEN_ENV = "HEYSPEX_MCP_TOKEN";
     MCP_TOKEN_LINE_RE = /^mcp_token:[ \t]*["']?([^"'\r\n#]+)/m;
     CREDENTIALS_SCHEMA_VERSION = 2;
@@ -189,9 +205,9 @@ var init_credentials = __esm({
 
 // scripts/lib/dev-mode.mjs
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { homedir as homedir3 } from "node:os";
 import { join as join2 } from "node:path";
-function devModeFilePath(homeDir = homedir2()) {
+function devModeFilePath(homeDir = heyspexHome()) {
   return join2(homeDir, ".heyspex", DEV_MODE_FILENAME);
 }
 function normalizeMode(raw) {
@@ -216,7 +232,7 @@ function deriveSemantics(mode, reliance) {
     vaultWriteMode: local ? "local" : "cloud"
   };
 }
-function readLocalDevModeRecord({ homeDir = homedir2(), readFile: readFile2 = defaultReadFile } = {}) {
+function readLocalDevModeRecord({ homeDir = heyspexHome(), readFile: readFile2 = defaultReadFile } = {}) {
   let raw;
   try {
     raw = readFile2(devModeFilePath(homeDir));
@@ -246,7 +262,7 @@ function readLocalDevModeRecord({ homeDir = homedir2(), readFile: readFile2 = de
 }
 function resolveDevMode({
   env = process.env,
-  homeDir = homedir2(),
+  homeDir = heyspexHome(),
   readFile: readFile2 = defaultReadFile,
   cloudSetting = void 0
 } = {}) {
@@ -309,6 +325,7 @@ var CLOUD_CONSOLE_URL, LOCAL_CONSOLE_URL, DEV_MODE_FILENAME, defaultReadFile;
 var init_dev_mode = __esm({
   "scripts/lib/dev-mode.mjs"() {
     "use strict";
+    init_heyspex_home();
     init_credentials();
     CLOUD_CONSOLE_URL = "https://app.heyspex.com";
     LOCAL_CONSOLE_URL = "http://localhost:3000";
@@ -982,21 +999,22 @@ var require_gray_matter = __commonJS({
 import { spawnSync as spawnSync3 } from "node:child_process";
 import {
   copyFileSync,
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync5,
-  readdirSync as readdirSync2,
-  readFileSync as readFileSync10,
+  existsSync as existsSync6,
+  mkdirSync as mkdirSync6,
+  readdirSync as readdirSync3,
+  readFileSync as readFileSync11,
   statSync,
-  writeFileSync as writeFileSync5
+  writeFileSync as writeFileSync6
 } from "node:fs";
 import path6 from "node:path";
 import process4 from "node:process";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // scripts/lib/console-url-resolver.mjs
+init_heyspex_home();
 init_dev_mode();
 import { readFileSync as readFileSync3 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
+import { homedir as homedir4 } from "node:os";
 import { join as join3 } from "node:path";
 var DEFAULT_CONSOLE_URL = LOCAL_CONSOLE_URL;
 function trimTrailingSlash(url) {
@@ -1023,7 +1041,7 @@ function warnStaleLoopbackCredentialsOnce(credentialsUrl, derivedUrl, { log }) {
   } catch {
   }
 }
-function readCredentialsConsoleUrl({ homeDir = homedir3(), readFile: readFile2 = defaultReadFile2 } = {}) {
+function readCredentialsConsoleUrl({ homeDir = heyspexHome(), readFile: readFile2 = defaultReadFile2 } = {}) {
   try {
     const raw = readFile2(join3(homeDir, ".heyspex", "credentials.yaml"));
     const match = String(raw ?? "").match(/^console_url:\s*["']?([^"'\r\n#]+)/m);
@@ -1067,7 +1085,7 @@ function resolveModeEnvelope({ env, homeDir }) {
 function resolveConsoleUrl({
   repoRoot,
   env = process.env,
-  homeDir = homedir3(),
+  homeDir = heyspexHome(),
   strict = false,
   devMode,
   log = (line) => process.stderr.write(line),
@@ -1116,7 +1134,7 @@ function resolveCodeRoot({
 }
 
 // spex-console/src/lib/cli/connect.ts
-import { readdirSync } from "node:fs";
+import { readdirSync as readdirSync2 } from "node:fs";
 
 // dist/cli/._sql-orm-inert.cli-shim.mjs
 var inert = new Proxy(function inert2() {
@@ -1153,14 +1171,24 @@ var uniqueIndex = inert;
 
 // spex-console/src/lib/cli/vault-workspace-shared.ts
 import { readFileSync as readFileSync5 } from "node:fs";
-import os2 from "node:os";
+
+// spex-console/src/lib/heyspex-home.ts
+import { homedir as homedir5 } from "node:os";
+function heyspexHome2(env = process.env) {
+  const override = env?.HEYSPEX_HOME;
+  if (typeof override === "string" && override.trim().length > 0) {
+    return override.trim();
+  }
+  return homedir5();
+}
 
 // vendor/heyspex-mcp/session-owner.mjs
+init_heyspex_home();
 init_credentials();
 import { readFileSync as readFileSync4 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 import { join as join4 } from "node:path";
-function resolveSessionOwnerUncached({ env = process.env, homeDir = homedir4(), readFile: readFile2 } = {}) {
+function resolveSessionOwnerUncached({ env = process.env, homeDir = heyspexHome(), readFile: readFile2 } = {}) {
   const fromEnv = typeof env?.HS_ACCOUNT_ID === "string" ? env.HS_ACCOUNT_ID.trim() : "";
   if (fromEnv) return fromEnv;
   return readCurrentAccountId({ homeDir, readFile: readFile2 });
@@ -1189,7 +1217,7 @@ function resolveOfflineDefaultWorkspace(accountId, localWorkspaceIds) {
 function resolveConfiguredAccountId(opts = {}) {
   return resolveSessionOwnerUncached({
     env: opts.env ?? process.env,
-    homeDir: opts.homeDir ?? os2.homedir(),
+    homeDir: opts.homeDir ?? heyspexHome2(),
     readFile: opts.readFile ?? ((p) => readFileSync5(p, "utf-8"))
   });
 }
@@ -1741,7 +1769,13 @@ var specEventKindEnum = pgEnum("spec_event_kind", [
   "priority_change",
   "parent_change",
   "claim_acquired",
-  "claim_released"
+  "claim_released",
+  // Collaborator write audit (HS-FWB6, migration 0077).
+  "spec_created",
+  "spec_edited",
+  "spec_deleted",
+  "capture_written",
+  "wip_recorded"
 ]);
 var focusPin = pgTable(
   "focus_pin",
@@ -2934,11 +2968,43 @@ var specSettlements = pgTable(
     // `owner/name`
     branch: text("branch").notNull(),
     commitSha: text("commit_sha").notNull(),
-    settledAt: timestamp("settled_at", { withTimezone: true }).notNull().default(sql`now()`)
+    settledAt: timestamp("settled_at", { withTimezone: true }).notNull().default(sql`now()`),
+    // The pull request that carries this settlement
+    // ([[HS-9D25-CWPX-EPIC-branch-lifecycle-open-a-pull-request]]). NULL until
+    // the branch has gone quiet and a PR was opened or found; a write made
+    // after its PR merged stays NULL, which is what triggers the next PR.
+    pullRequestNumber: integer("pull_request_number"),
+    pullRequestUrl: text("pull_request_url")
   },
   (table) => [
     // "latest settlement for this spec" — the read path's only query.
-    index("spec_settlements_spec_settled_idx").on(table.specId, table.settledAt.desc())
+    index("spec_settlements_spec_settled_idx").on(table.specId, table.settledAt.desc()),
+    // The PR sweep's only query: branches with settlements not yet in a PR.
+    index("spec_settlements_unproposed_idx").on(table.vaultId, table.repo, table.branch).where(sql`${table.pullRequestNumber} IS NULL`)
+  ]
+);
+var sessionBranchDeclarations = pgTable(
+  "session_branch_declarations",
+  {
+    id: integer("id").primaryKey().generatedAlwaysAsIdentity(),
+    vaultId: text("vault_id").notNull().default(DEFAULT_VAULT_ID),
+    actorKey: text("actor_key").notNull(),
+    sessionId: text("session_id").notNull(),
+    branch: text("branch").notNull(),
+    declaredAt: timestamp("declared_at", { withTimezone: true }).notNull().default(sql`now()`),
+    expiresAt: timestamp("expires_at", { withTimezone: true }).notNull()
+  },
+  (table) => [
+    uniqueIndex("session_branch_declarations_uq").on(
+      table.vaultId,
+      table.actorKey,
+      table.sessionId
+    ),
+    index("session_branch_declarations_lookup_idx").on(
+      table.vaultId,
+      table.actorKey,
+      table.declaredAt.desc()
+    )
   ]
 );
 
@@ -3031,7 +3097,6 @@ async function runNeonReachabilityProbe(attempt, options2 = {}, label = "Neon re
 
 // spex-console/src/lib/vault-registry/registry-file.ts
 import { existsSync, mkdirSync as mkdirSync3, readFileSync as readFileSync6, renameSync as renameSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
 import { dirname as dirname2, join as join5, resolve as resolve3 } from "node:path";
 
 // spex-console/src/lib/vault-registry/types.ts
@@ -3049,7 +3114,7 @@ function emptyVaultRegistry() {
 
 // spex-console/src/lib/vault-registry/registry-file.ts
 function vaultRegistryDir(opts = {}) {
-  return opts.registryDir ?? join5(homedir5(), ".heyspex");
+  return opts.registryDir ?? join5(heyspexHome2(), ".heyspex");
 }
 function vaultRegistryFilePath(opts = {}) {
   return join5(vaultRegistryDir(opts), "registry.json");
@@ -3219,7 +3284,7 @@ function samePathLoose(a, b) {
 }
 function assertNotRealHomeRegistryUnderTest(filePath) {
   if (!underTestRunner()) return;
-  if (samePathLoose(dirname2(filePath), join5(homedir5(), ".heyspex"))) {
+  if (samePathLoose(dirname2(filePath), join5(heyspexHome2(), ".heyspex"))) {
     throw new Error(
       `registry-file: refusing to write ${filePath} under a test runner \u2014 that is the real ~/.heyspex registry. Pass opts.registryDir (a temp dir).`
     );
@@ -3669,12 +3734,17 @@ async function listWorkspacesNeon(accountId, deps = {}) {
       id: workspaces.id,
       displayName: workspaces.displayName,
       githubOrg: workspaces.githubOrg,
-      createdAt: workspaces.createdAt
+      createdAt: workspaces.createdAt,
+      archived: workspaces.archived
     }).from(workspaces).where(eq(workspaces.accountId, accountId));
     return rows.map((r) => ({
       id: r.id,
       display_name: r.displayName,
       created_at: (r.createdAt instanceof Date ? r.createdAt : /* @__PURE__ */ new Date()).toISOString(),
+      // The flag `setWorkspaceArchivedNeon` writes; `list.ts` filters on it.
+      // On a cloud host this row IS the roster (no registry.json to carry the
+      // flag), so leaving it out made an archived workspace list forever.
+      archived: r.archived,
       ...r.githubOrg ? { github_org: r.githubOrg } : {}
     }));
   } catch {
@@ -3961,7 +4031,134 @@ async function createWorkspace(input, deps = {}) {
 import { createHash } from "node:crypto";
 import fs from "node:fs";
 import path2 from "node:path";
+import os2 from "node:os";
 import { fileURLToPath, pathToFileURL } from "node:url";
+
+// scripts/lib/hook-dispositions.mjs
+var HOSTS = Object.freeze(["claude-code", "cursor", "copilot"]);
+var DISPOSITIONS = Object.freeze(["mapped", "advisory-degraded", "unportable", "not-shipped"]);
+var mapped = (note) => Object.freeze({ disposition: "mapped", ...note ? { note } : {} });
+var degraded = (note) => Object.freeze({ disposition: "advisory-degraded", note });
+var unportable = (control) => Object.freeze({ disposition: "unportable", control });
+var notShipped = Object.freeze({ disposition: "not-shipped" });
+var CC = mapped();
+var COPILOT_PROMPT_DROPPED = "Copilot drops command-hook output on userPromptSubmitted (no prompt-time context channel); the text moves to sessionStart / .github/copilot-instructions.md.";
+var CURSOR_PROMPT_USER_MESSAGE = "Cursor beforeSubmitPrompt honors user_message only (no additional_context): the text surfaces in the transcript instead of as invisible context.";
+var COPILOT_NO_PLAN_TOOL = "MCP preflight refusals (heyspex_claim_spec / heyspex_submit_for_review / heyspex_save_research) + .github/copilot-instructions.md plan rule (state the plan in chat, claim the spec before editing) + HS-20SW directive-obligation-gate claim-before-build deny";
+var HOOK_DISPOSITIONS = Object.freeze({
+  // ── customer: session start / compaction ──────────────────────────────────
+  "wip-checkpoint": {
+    "claude-code": CC,
+    cursor: mapped("preCompact is relayed as SessionStart(compact)."),
+    copilot: mapped("sessionStart additionalContext is delivered; the preCompact leg writes WIP only (no output channel), re-injected at the next sessionStart.")
+  },
+  "inject-doctrine": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext.") },
+  "check-auto-memory-budget": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext.") },
+  "check-claude-md-budget": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext.") },
+  "git-reflog-audit": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionStart additionalContext and agentStop.") },
+  "vault-mirror-catchup": { "claude-code": CC, cursor: mapped(), copilot: mapped("Detached side effect on sessionStart.") },
+  // ── customer: every user turn ─────────────────────────────────────────────
+  "preflight-reminder": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(`${COPILOT_PROMPT_DROPPED} Real enforcement is the MCP preflight refusal.`)
+  },
+  "intent-classifier-trigger": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(
+      `${COPILOT_PROMPT_DROPPED} The hook still runs and arms obligation state; the HS-20SW directive-obligation-gate turns that state into a hard deny.`
+    )
+  },
+  "inject-communication-style": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(COPILOT_PROMPT_DROPPED)
+  },
+  "inject-vault-context": {
+    "claude-code": CC,
+    cursor: degraded(CURSOR_PROMPT_USER_MESSAGE),
+    copilot: degraded(`${COPILOT_PROMPT_DROPPED} Per-prompt vault retrieval has no Copilot channel at all.`)
+  },
+  // ── customer: before a tool call (hard gates) ─────────────────────────────
+  "git-identity-guard": { "claude-code": CC, cursor: mapped("beforeShellExecution. Always on."), copilot: mapped("preToolUse on bash/powershell. Always on.") },
+  "vault-write-tier-guard": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/edit/bash/powershell.") },
+  "settings-write-gate": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/edit/bash/powershell and the MCP settings tool.") },
+  "emit-claim-status": { "claude-code": CC, cursor: mapped(), copilot: mapped("Telemetry on preToolUse/postToolUse/agentStop; the cloud agent needs a network allow rule for the console.") },
+  "enforce-vault-naming": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/bash/powershell.") },
+  "guard-auto-memory-writes": { "claude-code": CC, cursor: mapped(), copilot: mapped("preToolUse on create/bash/powershell.") },
+  "directive-obligation-gate": {
+    "claude-code": CC,
+    cursor: mapped(),
+    copilot: mapped("HS-20SW: hard deny on task/create/edit/write-shaped shell while a capture obligation is unmet; the only hard capture-on-idea guarantee on Copilot.")
+  },
+  "claim-before-code-gate": {
+    "claude-code": CC,
+    cursor: degraded("Armed only by plan-exit-ingest-gate, which has no Cursor trigger, so it stays dormant; covered by the HS-20SW claim-before-build rule."),
+    copilot: degraded("Armed only by plan-exit-ingest-gate, which has no Copilot trigger (no ExitPlanMode tool), so it stays dormant; covered by the HS-20SW claim-before-build rule.")
+  },
+  "capture-workflow-gate": {
+    "claude-code": CC,
+    cursor: mapped(),
+    copilot: mapped("preToolUse on the MCP heyspex_file_spec tool; MCP tool naming in hook payloads is unverified live (matched by suffix).")
+  },
+  "diagnose-capture-reminder": {
+    "claude-code": CC,
+    cursor: mapped("preToolUse agent_message delivers the reminder."),
+    copilot: degraded("Copilot preToolUse has no context channel for an inject, so this advisory is silent (lost).")
+  },
+  "git-stash-gate": {
+    "claude-code": CC,
+    cursor: mapped(),
+    copilot: mapped('The Claude "ask" becomes a deny where no user is present (cloud agent, CLI autopilot).')
+  },
+  "research-protocol-gate": { "claude-code": CC, cursor: mapped("Always on."), copilot: mapped("preToolUse on web_fetch/web_search and the MCP save_research tool. Always on; the MCP refusal duplicates it.") },
+  "research-method-guard": {
+    "claude-code": CC,
+    cursor: mapped("preToolUse with a Skill|Workflow tool filter. Always on."),
+    copilot: unportable("MCP preflight refusal on heyspex_save_research (hard floor, hook-independent) + .github/copilot-instructions.md research rule; Copilot has no Skill or Workflow tool to hook.")
+  },
+  "deep-research-cost-gate": {
+    "claude-code": CC,
+    cursor: mapped("preToolUse with a Workflow|Skill tool filter."),
+    copilot: unportable("MCP preflight refusal on heyspex_save_research + .github/copilot-instructions.md cost-confirmation rule; Copilot has no Skill or Workflow tool to hook.")
+  },
+  "plan-review-gate": {
+    "claude-code": CC,
+    cursor: unportable(".cursor/rules/plan-review-required.mdc (always-on rule)"),
+    copilot: unportable(COPILOT_NO_PLAN_TOOL)
+  },
+  "plan-exit-ingest-gate": {
+    "claude-code": CC,
+    cursor: unportable(".cursor/rules/plan-review-required.mdc + spec-creation-linkage.mdc"),
+    copilot: unportable(COPILOT_NO_PLAN_TOOL)
+  },
+  // ── customer: end of turn / session ───────────────────────────────────────
+  "naughty-list-gate": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped('agentStop {decision:"block"} re-drive, capped at 8 consecutive blocks.') },
+  "id-display-format-gate": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped("agentStop re-drive; reads the transcript (format is not a stable API).") },
+  "epic-milestone-phrasing-gate": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped("agentStop re-drive; reads the transcript (format is not a stable API).") },
+  "enforce-session-sequence": { "claude-code": CC, cursor: mapped("stop followup_message re-drive."), copilot: mapped("agentStop re-drive, capped at 8 consecutive blocks.") },
+  "notify-status-flip": { "claude-code": CC, cursor: mapped(), copilot: mapped("Side effect on postToolUse.") },
+  "close-terminal-on-ship": { "claude-code": CC, cursor: mapped(), copilot: mapped("Side effect on postToolUse / sessionEnd.") },
+  "scripts/stamp-provenance-on-edit.mjs": { "claude-code": CC, cursor: mapped(), copilot: mapped("Side effect on postToolUse.") },
+  "session-end": { "claude-code": CC, cursor: mapped(), copilot: mapped("sessionEnd.") },
+  // ── platform: heyspex-app development machinery (never installed in a customer repo) ──
+  "inject-dev-server-awareness": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "inject-coo-seat": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "coo-guard-check": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "coo-denylist-gate": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "agent-spawn-delegation-gate": { "claude-code": CC, cursor: mapped("subagentStart."), copilot: notShipped },
+  "capture-execution-gate": { "claude-code": CC, cursor: mapped("beforeShellExecution + subagentStart."), copilot: notShipped },
+  "check-mcp-freshness-hook": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "dev-server-task-reminder": { "claude-code": CC, cursor: mapped(), copilot: notShipped },
+  "env-vault-guard": { "claude-code": CC, cursor: mapped("Always on."), copilot: notShipped },
+  "log-session-activity": { "claude-code": CC, cursor: mapped(), copilot: notShipped }
+});
+function dispositionFor(hook, host) {
+  return HOOK_DISPOSITIONS[hook]?.[host] ?? null;
+}
+
+// scripts/lib/customer-kit.mjs
 var HOOK_SCOPES = Object.freeze({
   // ── customer: vault / workflow / safety gates ─────────────────────────────
   "wip-checkpoint": { scope: "customer", why: "Previous-session WIP handoff, read from the active vault." },
@@ -3977,6 +4174,7 @@ var HOOK_SCOPES = Object.freeze({
   "inject-communication-style": { scope: "customer", why: "Plain-language communication rules each turn." },
   "inject-vault-context": { scope: "customer", why: "Lexical vault retrieval for the prompt." },
   "git-identity-guard": { scope: "customer", why: "Agents never write git identity (owner ruling 2026-09-19)." },
+  "vault-write-tier-guard": { scope: "customer", why: "Cloud write mode: disk edits to vault specs are a mirror the console never reads back (HS-FCNH)." },
   "settings-write-gate": { scope: "customer", why: "Approval before the vault's .heyspex/config.yaml changes." },
   "emit-claim-status": { scope: "customer", why: "Claim liveness heartbeat to the console." },
   "enforce-vault-naming": { scope: "customer", why: "Naming V3 filename guard (HS-RY2N)." },
@@ -3984,7 +4182,10 @@ var HOOK_SCOPES = Object.freeze({
   "plan-review-gate": { scope: "customer", why: "Plan review + QC markers before ExitPlanMode." },
   "plan-exit-ingest-gate": { scope: "customer", why: "Plan ingest on ExitPlanMode; arms claim-before-code." },
   "claim-before-code-gate": { scope: "customer", why: "First code edit after plan exit needs a claim." },
+  "directive-obligation-gate": { scope: "customer", why: "A capture_on_idea directive leaves a durable obligation; an unmet one denies sub-agent spawns, product-code writes and builds, and re-drives Stop once. Also claim-before-build (HS-20SW)." },
   "capture-workflow-gate": { scope: "customer", why: "No implementation spec straight out of an open capture." },
+  "vault-mirror-catchup": { scope: "customer", why: "Cloud write mode: a SessionStart detached `hs pull --apply` closes a stale disk mirror before the first tool call (HS-XJFQ)." },
+  "diagnose-capture-reminder": { scope: "customer", why: "Warn when a diagnose is filed with no capture holding the owner's words (HS-IK2D)." },
   "git-stash-gate": { scope: "customer", why: "Always ask before a mutating git stash." },
   "research-method-guard": { scope: "customer", why: "Research method guard (HS-EN4F)." },
   "deep-research-cost-gate": { scope: "customer", why: "Cost confirmation before a paid deep-research launch." },
@@ -4003,6 +4204,7 @@ var HOOK_SCOPES = Object.freeze({
   "coo-guard-check": { scope: "platform", why: "dev-factory breakdown-delegation guard." },
   "coo-denylist-gate": { scope: "platform", why: "dev-factory COO window deny list." },
   "agent-spawn-delegation-gate": { scope: "platform", why: "dev-factory seat routing for subagents." },
+  "capture-execution-gate": { scope: "platform", why: "Blocks dev-factory research/paid-model/routing surfaces past an ungrounded capture (HS-KNJ8)." },
   "check-mcp-freshness-hook": { scope: "platform", why: "Freshness of the vendored MCP build \u2014 a platform-dev concern." },
   "dev-server-task-reminder": { scope: "platform", why: "spex-console dev server + Neon DB safety." },
   "env-vault-guard": { scope: "platform", why: "Guards heyspex-app's encrypted env vault paths." },
@@ -4021,6 +4223,7 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "SessionStart", hook: "check-claude-md-budget", timeout: 5 },
   { event: "SessionStart", hook: "check-mcp-freshness-hook", timeout: 5 },
   { event: "SessionStart", hook: "git-reflog-audit", timeout: 5 },
+  { event: "SessionStart", hook: "vault-mirror-catchup", timeout: 5 },
   { event: "PreCompact", hook: "wip-checkpoint", timeout: 5 },
   { event: "UserPromptSubmit", hook: "preflight-reminder", timeout: 5 },
   { event: "UserPromptSubmit", hook: "intent-classifier-trigger", timeout: 5 },
@@ -4028,10 +4231,13 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "UserPromptSubmit", hook: "inject-vault-context", timeout: 10 },
   { event: "PreToolUse", matcher: "Write|Edit|MultiEdit|NotebookEdit|Bash|PowerShell", hook: "env-vault-guard", timeout: 5 },
   { event: "PreToolUse", matcher: "Bash|PowerShell", hook: "git-identity-guard", timeout: 5 },
+  { event: "PreToolUse", matcher: "Write|Edit|MultiEdit|NotebookEdit|Bash|PowerShell", hook: "vault-write-tier-guard", timeout: 5 },
   { event: "PreToolUse", matcher: "Write|Edit|NotebookEdit|Bash|PowerShell|mcp__heyspex__heyspex_settings_set", hook: "settings-write-gate", timeout: 5 },
   { event: "PreToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PreToolUse"], timeout: 5 },
   { event: "PreToolUse", matcher: ".*", hook: "coo-denylist-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "Agent|Task", hook: "agent-spawn-delegation-gate", timeout: 5 },
+  { event: "PreToolUse", matcher: "Bash|PowerShell|Agent|Task", hook: "capture-execution-gate", timeout: 5 },
+  { event: "PreToolUse", matcher: "Agent|Task|Edit|Write|MultiEdit|NotebookEdit|Bash|PowerShell", hook: "directive-obligation-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "mcp__heyspex__heyspex_claim_spec", hook: "coo-guard-check", timeout: 5 },
   { event: "PreToolUse", matcher: "Write|NotebookEdit|Bash|PowerShell", hook: "enforce-vault-naming", timeout: 5 },
   { event: "PreToolUse", matcher: "Write|NotebookEdit|Bash|PowerShell", hook: "guard-auto-memory-writes", timeout: 5 },
@@ -4040,6 +4246,7 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "PreToolUse", matcher: "ExitPlanMode", hook: "plan-exit-ingest-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "Edit|MultiEdit|Write", hook: "claim-before-code-gate", timeout: 5 },
   { event: "PreToolUse", matcher: "mcp__heyspex__heyspex_file_spec", hook: "capture-workflow-gate", timeout: 8 },
+  { event: "PreToolUse", matcher: "mcp__heyspex__heyspex_file_spec", hook: "diagnose-capture-reminder", timeout: 5 },
   { event: "PreToolUse", matcher: "Bash|PowerShell|mcp__neon__prepare_database_migration|mcp__neon__complete_database_migration|mcp__neon__reset_from_parent|mcp__neon__delete_branch|mcp__Neon__prepare_database_migration|mcp__Neon__complete_database_migration|mcp__Neon__reset_from_parent|mcp__Neon__delete_branch", hook: "dev-server-task-reminder", timeout: 10 },
   { event: "PreToolUse", matcher: "Bash|PowerShell", hook: "git-stash-gate", timeout: 10 },
   { event: "PreToolUse", matcher: "Skill|Workflow", hook: "research-method-guard", timeout: 5 },
@@ -4052,7 +4259,9 @@ var CLAUDE_HOOK_ROWS = Object.freeze([
   { event: "Stop", hook: "epic-milestone-phrasing-gate", timeout: 5 },
   { event: "Stop", hook: "git-reflog-audit", timeout: 5 },
   { event: "Stop", hook: "enforce-session-sequence", timeout: 5 },
+  { event: "Stop", hook: "directive-obligation-gate", timeout: 5 },
   { event: "PostToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PostToolUse"], timeout: 5 },
+  { event: "PostToolUse", matcher: "Skill|mcp__heyspex__heyspex_update_capture|mcp__heyspex__heyspex_promote_capture.*|mcp__heyspex__heyspex_file_spec|mcp__heyspex__heyspex_claim_spec|mcp__heyspex__heyspex_release_spec|mcp__heyspex__heyspex_defer_spec", hook: "directive-obligation-gate", timeout: 5 },
   { event: "PostToolUse", matcher: "Edit|Write|MultiEdit", hook: "notify-status-flip", timeout: 5 },
   { event: "PostToolUse", matcher: "Edit|Write|MultiEdit", hook: "close-terminal-on-ship", timeout: 5 },
   { event: "PostToolUse", matcher: "Edit|Write|MultiEdit", hook: "scripts/stamp-provenance-on-edit.mjs", timeout: 5 },
@@ -4137,9 +4346,22 @@ var CUSTOMER_LAUNCHERS = Object.freeze({
 });
 function customerRunnerPrefix(_platformRoot, surface = "claude") {
   const l = CUSTOMER_LAUNCHERS[surface];
+  if (surface === "claude") return CUSTOMER_RUNNER_PREFIX;
   return `node "$${l.projectDirEnv}/${l.rel.join("/")}"`;
 }
-var PLUGIN_RUNNER_PREFIX = 'node "${CLAUDE_PLUGIN_ROOT}/bin/run-hook.mjs"';
+var BOOTSTRAP_WALK = "var d=process.cwd(),r=e.CLAUDE_PROJECT_DIR;if(!r||!f.existsSync(p.join(r,...n))){r='';for(;;){if(f.existsSync(p.join(d,...n))){r=d;break}var q=p.dirname(d);if(q===d)break;d=q}}";
+function buildBootstrap({ plugin = false } = {}) {
+  const walk = BOOTSTRAP_WALK;
+  const body = plugin ? "var f=require('fs'),p=require('path'),u=require('url'),e=process.env,n=['scripts','claude-hooks','_run.mjs'],s='',m=e.CLAUDE_PLUGIN_ROOT||e.COPILOT_PLUGIN_ROOT||e.PLUGIN_ROOT;if(m&&f.existsSync(p.join(m,'bin','run-hook.mjs')))s=p.join(m,'bin','run-hook.mjs');if(!s){" + walk + "if(r){e.CLAUDE_PROJECT_DIR=r;s=p.join(r,...n)}}" : "var f=require('fs'),p=require('path'),u=require('url'),e=process.env,n=['scripts','claude-hooks','_run.mjs'],s='';" + walk + "if(r){e.CLAUDE_PROJECT_DIR=r;s=p.join(r,...n)}";
+  return body + "if(!s)process.exit(0);process.argv=[process.argv[0],s].concat(process.argv.slice(1));import(u.pathToFileURL(s).href).catch(function(){process.exit(0)});" + (plugin ? "//bin/run-hook.mjs" : "//scripts/claude-hooks/_run.mjs");
+}
+var PLATFORM_RUNNER_PREFIX = 'node -e "' + buildBootstrap() + '"';
+var PLUGIN_RUNNER_PREFIX = 'node -e "' + buildBootstrap({ plugin: true }) + '"';
+function buildCustomerBootstrap() {
+  const rel = CUSTOMER_LAUNCHERS.claude.rel.map((s) => "'" + s + "'").join(",");
+  return "var f=require('fs'),p=require('path'),u=require('url'),e=process.env,n=[" + rel + "],s='';" + BOOTSTRAP_WALK + "if(r){e.CLAUDE_PROJECT_DIR=r;s=p.join(r,...n)}if(!s)process.exit(0);process.argv=[process.argv[0],s].concat(process.argv.slice(1));import(u.pathToFileURL(s).href).catch(function(){process.exit(0)});//" + CUSTOMER_LAUNCHERS.claude.rel.join("/");
+}
+var CUSTOMER_RUNNER_PREFIX = 'node -e "' + buildCustomerBootstrap() + '"';
 var LAUNCHER_TEMPLATE = [
   "#!/usr/bin/env node",
   "// HeySpex hook launcher -- GENERATED by hs install / hs connect. Commit it with this repo.",
@@ -4217,7 +4439,12 @@ var LAUNCHER_TEMPLATE = [
   "// (the Cursor one) runs exactly as if Cursor had invoked it directly.",
   "const shim = resolve(root, ...SHIM);",
   "process.argv[1] = shim;",
-  "await import(pathToFileURL(shim).href);",
+  "try {",
+  "  await import(pathToFileURL(shim).href);",
+  "} catch (err) {",
+  "  process.stderr.write('[heyspex] hook ' + (process.argv[2] ?? '?') + ' skipped: ' + (err && err.message ? err.message : err) + '\\n');",
+  "  process.exit(0);",
+  "}",
   ""
 ].join("\n");
 function renderCustomerLauncher(surface = "claude") {
@@ -4324,7 +4551,6 @@ function renderPluginHooksDocument() {
     });
   }
   return {
-    _comment: "GENERATED from scripts/lib/customer-kit.mjs (customer-scoped rows only) \u2014 do not edit by hand; run `node scripts/lib/customer-kit.mjs --write-plugin-hooks`. Every command goes through bin/run-hook.mjs, which finds the hook runtime (HEYSPEX_PLATFORM_ROOT / HEYSPEX_MCP_ENTRY when set in the machine's own env, then the plugin's own location, node_modules/heyspex, $CLAUDE_PROJECT_DIR) \u2014 never $CLAUDE_PROJECT_DIR/scripts, which only exists in heyspex-app. WARNING: a repo whose .claude/settings.json already carries the hs install kit hooks runs every hook twice if this plugin is also enabled \u2014 use one or the other.",
     hooks
   };
 }
@@ -4332,6 +4558,75 @@ function renderPluginHooksText() {
   return `${JSON.stringify(renderPluginHooksDocument(), null, 2)}
 `;
 }
+var COPILOT_EVENT_NAMES = Object.freeze({
+  SessionStart: "sessionStart",
+  SessionEnd: "sessionEnd",
+  UserPromptSubmit: "userPromptSubmitted",
+  PreToolUse: "preToolUse",
+  PostToolUse: "postToolUse",
+  Stop: "agentStop",
+  PreCompact: "preCompact"
+});
+var GITHUB_HOOKS_STATE_ARMING = Object.freeze(["intent-classifier-trigger"]);
+var COPILOT_TOOL_NAMES = Object.freeze({
+  Write: "create",
+  Edit: "edit",
+  MultiEdit: "edit",
+  NotebookEdit: "edit",
+  Bash: "bash",
+  PowerShell: "powershell",
+  Agent: "task",
+  Task: "task",
+  WebFetch: "web_fetch",
+  WebSearch: "web_search"
+});
+function toCopilotMatcher(matcher) {
+  if (!matcher) return void 0;
+  const out = [];
+  for (const part of matcher.split("|")) {
+    let t = null;
+    if (part === ".*") t = ".*";
+    else if (COPILOT_TOOL_NAMES[part]) t = COPILOT_TOOL_NAMES[part];
+    else if (part.startsWith(MCP_PROJECT_PREFIX)) t = ".*" + part.slice(MCP_PROJECT_PREFIX.length);
+    else if (part.startsWith(MCP_PLUGIN_PREFIX)) t = ".*" + part.slice(MCP_PLUGIN_PREFIX.length);
+    if (t && !out.includes(t)) out.push(t);
+  }
+  if (out.includes(".*")) return ".*";
+  return out.length ? out.join("|") : null;
+}
+function githubHookNames() {
+  const names = /* @__PURE__ */ new Set();
+  for (const r of customerHookRows()) {
+    if (dispositionFor(r.hook, "copilot")?.disposition === "mapped" || GITHUB_HOOKS_STATE_ARMING.includes(r.hook)) names.add(r.hook);
+  }
+  return names;
+}
+function githubHookCommand(row2) {
+  const tail = hookTail(row2);
+  return `R=node_modules/heyspex/scripts/claude-hooks/_run.mjs; [ -f "$R" ] || R=./scripts/claude-hooks/_run.mjs; [ -f "$R" ] || exit 0; exec node "$R" ${tail}`;
+}
+function renderGithubHooksDocument() {
+  const allowed = githubHookNames();
+  const hooks = {};
+  for (const row2 of customerHookRows()) {
+    if (!allowed.has(row2.hook)) continue;
+    const event = COPILOT_EVENT_NAMES[row2.event];
+    if (!event) continue;
+    const matcher = toCopilotMatcher(row2.matcher);
+    if (matcher === null) continue;
+    (hooks[event] ??= []).push({
+      type: "command",
+      ...matcher ? { matcher } : {},
+      bash: githubHookCommand(row2),
+      timeoutSec: row2.timeout
+    });
+  }
+  return { version: 1, hooks };
+}
+function renderGithubHooksText() {
+  return `${JSON.stringify(renderGithubHooksDocument(), null, 2)}
+`;
+}
 var HARNESS_COMMAND_SURFACES = Object.freeze([
   {
     installedDir: Object.freeze([".claude", "commands"]),
@@ -4464,21 +4759,35 @@ if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
       process.exit(1);
     }
     console.log("customer-kit: plugins/heyspex/hooks/hooks.json up to date");
+  } else if (process.argv.includes("--write-github-hooks") || process.argv.includes("--check-github-hooks")) {
+    const ghTarget = path2.join(platformRoot, ".github", "hooks", "heyspex.json");
+    const ghWant = renderGithubHooksText();
+    const ghSame = (fsDeps.readFile(ghTarget) ?? "").replace(/\r\n/g, "\n") === ghWant;
+    if (process.argv.includes("--write-github-hooks")) {
+      if (!ghSame) {
+        fs.mkdirSync(path2.dirname(ghTarget), { recursive: true });
+        fs.writeFileSync(ghTarget, ghWant, "utf8");
+      }
+      console.log(`customer-kit: ${ghSame ? "unchanged" : "wrote"} ${path2.relative(platformRoot, ghTarget).replace(/\\/g, "/")}`);
+    } else if (!ghSame) {
+      console.error("customer-kit: .github/hooks/heyspex.json is stale - run `node scripts/lib/customer-kit.mjs --write-github-hooks`");
+      process.exit(1);
+    } else {
+      console.log("customer-kit: .github/hooks/heyspex.json up to date");
+    }
   } else {
     console.log("usage: node scripts/lib/customer-kit.mjs --write-plugin-hooks | --check-plugin-hooks");
   }
 }
 
 // spex-console/src/lib/cli/connect-checks.ts
-import { homedir as homedir9 } from "node:os";
 import { dirname as dirname5 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 
 // spex-console/src/lib/dev-mode.ts
-init_credentials();
 import { mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
 import { join as join6 } from "node:path";
+init_credentials();
 var CLOUD_CONSOLE_URL2 = "https://app.heyspex.com";
 var LOCAL_CONSOLE_URL2 = "http://localhost:3000";
 function normalizeMode2(raw) {
@@ -4511,12 +4820,12 @@ function deriveSemantics2(mode, reliance) {
     vaultWriteMode: local ? "local" : "cloud"
   };
 }
-function devModeFilePath2(homeDir = homedir6()) {
+function devModeFilePath2(homeDir = heyspexHome2()) {
   return join6(homeDir, ".heyspex", "dev-mode.json");
 }
 var defaultReadFile3 = (p) => readFileSync7(p, "utf8");
 function readLocalDevModeRecord2({
-  homeDir = homedir6(),
+  homeDir = heyspexHome2(),
   readFile: readFile2 = defaultReadFile3
 } = {}) {
   let raw;
@@ -4551,7 +4860,7 @@ function readLocalDevModeRecord2({
 }
 function resolveDevMode2({
   env = process.env,
-  homeDir = homedir6(),
+  homeDir = heyspexHome2(),
   readFile: readFile2 = defaultReadFile3,
   cloudSetting = void 0
 } = {}) {
@@ -4662,10 +4971,11 @@ function shellQuote(p) {
 var HS_DISPATCHER_PREFIX = HS_DISPATCHER_PATH ? `node ${shellQuote(HS_DISPATCHER_PATH)}` : HS_BIN_NAME;
 
 // vendor/heyspex-mcp/console-fetch.mjs
+init_heyspex_home();
 init_credentials();
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync10 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 
 // vendor/heyspex-mcp/vault-less-endpoints.mjs
 var VAULT_LESS_ENDPOINTS = Object.freeze([
@@ -4691,10 +5001,23 @@ function isVaultLessEndpoint(method, path7) {
   });
 }
 
+// vendor/heyspex-mcp/write-outbox.mjs
+import {
+  readdirSync,
+  readFileSync as readFileSync8,
+  writeFileSync as writeFileSync5,
+  mkdirSync as mkdirSync5,
+  existsSync as existsSync3,
+  renameSync as renameSync3,
+  rmSync
+} from "node:fs";
+import { basename, join as join8, isAbsolute as isAbsolute2 } from "node:path";
+
 // vendor/heyspex-mcp/vault-resolve.mjs
-import { existsSync as existsSync3, readFileSync as readFileSync8 } from "node:fs";
+init_heyspex_home();
+import { existsSync as existsSync4, readFileSync as readFileSync9 } from "node:fs";
 import { homedir as homedir7, tmpdir } from "node:os";
-import { dirname as dirname4, join as join8, resolve as resolve4 } from "node:path";
+import { dirname as dirname4, join as join9, resolve as resolve4 } from "node:path";
 
 // vendor/heyspex-mcp/console-fetch.mjs
 var SCOPE_REFUSAL_CODES = Object.freeze(["VAULT_SCOPE_MISMATCH", "ACCOUNT_MISMATCH", "VAULT_NOT_REGISTERED"]);
@@ -5002,7 +5325,7 @@ function runInit(args, deps) {
     };
   }
   const vaultId = existingVaultId ?? args.adoptedVaultId ?? mintVaultId();
-  const accountId = args.accountId ?? (existingContent ? parseAccountId(existingContent) : null);
+  const accountId = null;
   const content = renderHeyspexYaml({ ...args, vaultId, accountId });
   try {
     deps.writeFile(markerPath, content);
@@ -5268,6 +5591,62 @@ function isAbsolutePathForCompare(p) {
   const s = p.trim();
   return /^[\\/]/.test(s) || /^[a-zA-Z]:[\\/]/.test(s);
 }
+function expandPinPlaceholders(value, repoRoot) {
+  return value.replace(/\$\{(?:CLAUDE_PROJECT_DIR|workspaceFolder)(?::-[^}]*)?\}/g, repoRoot);
+}
+function lexicalJoin(base, rel) {
+  const parts = `${base}/${rel}`.replace(/\\/g, "/").split("/");
+  const out = [];
+  for (const seg of parts) {
+    if (seg === "" && out.length > 0) continue;
+    if (seg === ".") continue;
+    if (seg === ".." && out.length > 1) {
+      out.pop();
+      continue;
+    }
+    out.push(seg);
+  }
+  return out.join("/");
+}
+function parseMarkerVaultPath(content) {
+  const m = content.match(/^vault_path:[ \t]*(.+?)[ \t]*$/m);
+  if (!m) return null;
+  const v = m[1].trim().replace(/\s+#.*$/, "").replace(/^"(.*)"$/, "$1").replace(/^'(.*)'$/, "$1").trim();
+  if (!v || v.includes("${") || /^[\\/]/.test(v) || /^[a-zA-Z]:[\\/]/.test(v)) return null;
+  return v;
+}
+function markerVaultIdOf(content) {
+  const m = content.match(/^vault_id:\s*(.+?)\s*$/m);
+  if (!m) return null;
+  const v = m[1].trim().replace(/^"(.*)"$/, "$1").replace(/^'(.*)'$/, "$1");
+  return v.length > 0 ? v : null;
+}
+function detectMarkerAttachment(repoRoot, deps) {
+  const markerPath = deps.joinPath(repoRoot, "heyspex.yaml");
+  if (!deps.fileExists(markerPath)) return null;
+  const raw = deps.readFile(markerPath);
+  const vaultPath = raw ? parseMarkerVaultPath(raw) : null;
+  if (!raw || !vaultPath) return null;
+  const vaultRootAbs = lexicalJoin(repoRoot, vaultPath);
+  const markerId = markerVaultIdOf(raw);
+  let cloned = deps.fileExists(deps.joinPath(vaultRootAbs, "specs"));
+  if (cloned && markerId) {
+    const theirs = deps.readFile(deps.joinPath(vaultRootAbs, "heyspex.yaml"));
+    const theirId = theirs ? markerVaultIdOf(theirs) : null;
+    if (theirId && theirId !== markerId) cloned = false;
+  }
+  const registry = loadVaultRegistry(deps.registryOpts);
+  const record = registry.vaults.find((v) => samePath(v.repo_root_abs, vaultRootAbs));
+  return {
+    vaultRootAbs,
+    vaultId: markerId ?? record?.id ?? null,
+    pins: [{ source: "heyspex.yaml", value: vaultRootAbs }],
+    conflicting: false,
+    viaMarker: true,
+    cloned,
+    vaultPath
+  };
+}
 function readPinnedVaultRoot(repoRoot, deps) {
   const pins = [];
   for (const rel of SATELLITE_MANIFEST_RELS) {
@@ -5284,13 +5663,19 @@ function readPinnedVaultRoot(repoRoot, deps) {
     }
     if (typeof value !== "string") continue;
     const trimmed = value.trim();
-    if (!trimmed || trimmed.includes("${")) continue;
-    if (!isAbsolutePathForCompare(trimmed)) continue;
-    pins.push({ source: rel.join("/"), value: trimmed });
+    if (!trimmed) continue;
+    const expanded = expandPinPlaceholders(trimmed, repoRoot);
+    if (expanded.includes("${")) continue;
+    if (/^[a-zA-Z]:(?![\\/])/.test(expanded)) continue;
+    const abs = isAbsolutePathForCompare(expanded) ? expanded.includes("..") ? lexicalJoin(expanded, ".") : expanded : lexicalJoin(repoRoot, expanded);
+    if (expanded !== trimmed && isAtOrUnder(abs, repoRoot)) continue;
+    pins.push({ source: rel.join("/"), value: abs });
   }
   return pins;
 }
 function detectSatelliteAttachment(repoRoot, deps) {
+  const viaMarker = detectMarkerAttachment(repoRoot, deps);
+  if (viaMarker) return viaMarker;
   const pins = readPinnedVaultRoot(repoRoot, deps).filter(
     (pin) => !isAtOrUnder(pin.value, repoRoot)
   );
@@ -5304,6 +5689,7 @@ function detectSatelliteAttachment(repoRoot, deps) {
 function findSatelliteRepoRoot(startDir, deps) {
   let dir = deps.resolveDir(startDir);
   for (let i = 0; i < 256; i += 1) {
+    if (detectMarkerAttachment(dir, deps)) return dir;
     const pins = readPinnedVaultRoot(dir, deps);
     if (pins.some((pin) => !isAtOrUnder(deps.resolveDir(pin.value), dir))) {
       return dir;
@@ -5419,7 +5805,7 @@ function workspaceAgreementRow(vaultRecord, cloudWorkspaceId) {
 function checksHomeDir(deps) {
   if (deps.homeDir) return deps.homeDir;
   const registryDir = deps.registryOpts?.registryDir;
-  return registryDir ? dirname5(registryDir) : homedir9();
+  return registryDir ? dirname5(registryDir) : heyspexHome2();
 }
 function accountAgreementRow(yamlContent, vaultRecord, deps, opts) {
   const id = "account_agreement";
@@ -5427,14 +5813,14 @@ function accountAgreementRow(yamlContent, vaultRecord, deps, opts) {
   if (yamlContent === null) {
     return { id, label, status: "not_applicable", detail: "no heyspex.yaml yet" };
   }
-  const recorded = parseAccountId(yamlContent);
+  const legacyMarkerAccount = parseAccountId(yamlContent);
+  const recorded = vaultRecord && vaultRecord.account_id && vaultRecord.account_id !== LEGACY_REGISTRY_ACCOUNT_ID ? vaultRecord.account_id : null;
   if (!recorded) {
     return {
       id,
       label,
-      status: "stale",
-      detail: "heyspex.yaml records no account: (written before accounts were recorded) -- run `hs connect` to record the account this repo is connected under",
-      remedy: "hs connect"
+      status: "not_applicable",
+      detail: "the account binding is machine-local (the registry row), and none exists on this machine yet; the signed-in account is used" + (legacyMarkerAccount ? ` (legacy account: ${legacyMarkerAccount} in heyspex.yaml is ignored)` : "")
     };
   }
   const cloud = opts.cloudVaultAccountId ?? null;
@@ -5462,28 +5848,25 @@ function accountAgreementRow(yamlContent, vaultRecord, deps, opts) {
       remedy
     };
   }
-  if (vaultRecord && vaultRecord.account_id !== recorded) {
-    const legacy = vaultRecord.account_id === LEGACY_REGISTRY_ACCOUNT_ID;
-    return {
-      id,
-      label,
-      status: "stale",
-      detail: `the registry row for this repo is keyed to ${legacy ? "no account (legacy)" : vaultRecord.account_id}, heyspex.yaml says ${recorded} -- run \`hs connect\` to backfill it`,
-      remedy: "hs connect"
-    };
-  }
   const current = resolveSessionOwnerUncached({
     env,
     homeDir,
     readFile: (p) => readFile2(p) ?? ""
   });
   const signedIn = current && current !== recorded ? `; signed in as ${current} -- sessions here still use ${recorded}'s sign-in` : "";
-  return { id, label, status: "present", detail: `account: ${recorded}${signedIn}` };
+  const legacyNote = legacyMarkerAccount && legacyMarkerAccount !== recorded ? `; legacy account: ${legacyMarkerAccount} in heyspex.yaml is ignored` : "";
+  return {
+    id,
+    label,
+    status: "present",
+    detail: `account: ${recorded} (machine-local)${signedIn}${legacyNote}`
+  };
 }
 function runConnectChecks(repoRoot, deps, opts = {}) {
   const checks = [];
   const satellite = opts.satellite !== void 0 ? opts.satellite : detectSatelliteAttachment(repoRoot, deps);
-  const vaultSubject = satellite ? satellite.vaultRootAbs : repoRoot;
+  const cloudOnly = Boolean(satellite?.viaMarker) && satellite?.cloned === false;
+  const vaultSubject = satellite && !cloudOnly ? satellite.vaultRootAbs : repoRoot;
   const yamlPath = deps.joinPath(vaultSubject, "heyspex.yaml");
   const yamlContent = readIfExists(deps, yamlPath);
   const vaultId = yamlContent ? parseVaultId(yamlContent) : null;
@@ -5511,11 +5894,12 @@ function runConnectChecks(repoRoot, deps, opts = {}) {
     )
   );
   const workspaceRecord = vaultRecord ? registry.workspaces.find((w) => w.id === vaultRecord.workspace_id) : void 0;
+  const ownVaultRegistered = Boolean(vaultId) && Boolean(vaultRecord) && vaultRecord?.id === vaultId;
   checks.push(
     row(
       "workspace_registered",
       "workspace registered in ~/.heyspex/registry.json",
-      Boolean(workspaceRecord),
+      Boolean(workspaceRecord) || ownVaultRegistered,
       satelliteDetail(
         satellite,
         workspaceRecord ? `id: ${workspaceRecord.id}` : vaultRecord ? `vault's workspace "${vaultRecord.workspace_id}" not found in registry` : satellite ? "the attached vault is not registered on this machine" : "no vault registered for this repo"
@@ -5636,9 +6020,38 @@ function runConnectChecks(repoRoot, deps, opts = {}) {
       id: "satellite_attachment",
       label: "attached vault (satellite repo)",
       status: satellite.conflicting ? "stale" : "present",
-      detail: satellite.conflicting ? `manifests pin different vaults (${pinned}) -- re-run \`hs install --attach-vault <id> --force\` to make them agree` : `${satellite.vaultId ?? "(unregistered)"} at ${satellite.vaultRootAbs} (${pinned})`
+      detail: satellite.viaMarker ? `${satellite.vaultId ?? "(no vault_id)"} via heyspex.yaml vault_path ${satellite.vaultPath} -> ${satellite.vaultRootAbs} (${satellite.cloned ? "cloned here" : "NOT cloned here: cloud-only mode"})` : satellite.conflicting ? `manifests pin different vaults (${pinned}) -- re-run \`hs install --attach-vault <id> --force\` to make them agree` : `${satellite.vaultId ?? "(unregistered)"} at ${satellite.vaultRootAbs} (${pinned})`
     });
   }
+  if (satellite?.viaMarker) {
+    const na = (id, detail) => {
+      const r = checks.find((c) => c.id === id);
+      if (r && (r.status === "missing" || r.status === "stale")) {
+        r.status = "not_applicable";
+        r.detail = detail;
+        delete r.remedy;
+      }
+    };
+    const noRow = "not required: this repo's committed heyspex.yaml binds the vault by id (a registry row appears after `hs connect` in the vault clone)";
+    na("vault_registered", noRow);
+    na("workspace_registered", noRow);
+    na("id_agreement", noRow);
+    na("account_agreement", "portable marker records no account; the signed-in account is used");
+    if (cloudOnly) {
+      na(
+        "specs_dir",
+        `satellite, vault not cloned locally -- cloud mode (clone the vault repo at ${satellite.vaultPath ?? "its vault_path"} for local reads and \`hs pull\`)`
+      );
+    }
+    if (!vaultId) {
+      const y = checks.find((c) => c.id === "heyspex_yaml");
+      if (y) {
+        y.status = "stale";
+        y.detail = "heyspex.yaml has a vault_path but no vault_id; the satellite cannot name its vault";
+        y.remedy = "add `vault_id: <the vault's uuid>` to heyspex.yaml (find it with `hs vault list`), then re-run `hs connect --check`";
+      }
+    }
+  }
   const connected = checks.every((c) => c.status === "present" || c.status === "not_applicable");
   return {
     repo_root: repoRoot,
@@ -5647,7 +6060,8 @@ function runConnectChecks(repoRoot, deps, opts = {}) {
     ...satellite ? {
       satellite: {
         attached_vault_root: satellite.vaultRootAbs,
-        attached_vault_id: satellite.vaultId
+        attached_vault_id: satellite.vaultId,
+        ...satellite.viaMarker ? { via_marker: true, cloned: satellite.cloned === true } : {}
       }
     } : {}
   };
@@ -5773,6 +6187,22 @@ function pointerVsRepoVerdict(input) {
     repair: `hs vault switch ${repoVault}`,
     detail: `the cloud pointer names ${cloudPointer ?? "(none)"} but the registry pointer (its local cache) names ${registryPointer}: the cache is stale`
   });
+  if (markerVaultId && input.markerBoundSatellite && !registryRowId) {
+    return {
+      branch: "explicit_vault",
+      agree: true,
+      repair: null,
+      detail: `this marker-bound satellite names ${markerVaultId} in its committed heyspex.yaml, so CLI and MCP requests route to it by id; no registry row is needed and the account pointer (${cloudPointer ?? "(none)"}) is informational`
+    };
+  }
+  if (markerVaultId && registryRowId === markerVaultId) {
+    return {
+      branch: "explicit_vault",
+      agree: true,
+      repair: null,
+      detail: cloudPointer === markerVaultId && (registryPointer === null || registryPointer === markerVaultId) ? `both pointers name ${markerVaultId}` : `the account's active pointer names ${cloudPointer ?? "(none)"} (the browser console's choice${registryPointer !== null && registryPointer !== cloudPointer ? `; the local cache names ${registryPointer}` : ""}); this repo names its own vault ${markerVaultId} explicitly in heyspex.yaml, so CLI and MCP requests route to it and the difference is informational (optional: \`hs vault switch ${markerVaultId}\`)`
+    };
+  }
   if (markerVaultId) {
     if (registryRowId !== markerVaultId) {
       const rekey = ROUTING_FACTS.find((f) => f.id === "C")?.caches.find((c) => c.id === "registry-vault-id")?.repair ?? "hs vault migrate-registry";
@@ -5988,7 +6418,7 @@ async function readCloudView(http, tokens) {
 }
 async function runCloudViewChecks(repoRoot, deps, opts = {}) {
   const satellite = opts.satellite !== void 0 ? opts.satellite : detectSatelliteAttachment(repoRoot, deps);
-  const vaultSubject = satellite ? satellite.vaultRootAbs : repoRoot;
+  const vaultSubject = satellite && !(satellite.viaMarker && satellite.cloned === false) ? satellite.vaultRootAbs : repoRoot;
   const marker = readIfExists(deps, deps.joinPath(vaultSubject, "heyspex.yaml"));
   const vaultId = marker ? parseVaultId(marker) : null;
   const env = deps.env ?? process.env;
@@ -5999,7 +6429,11 @@ async function runCloudViewChecks(repoRoot, deps, opts = {}) {
     homeDir,
     readFile: (p) => readFile2(p) ?? ""
   });
-  const repoAccount = (marker ? parseAccountId(marker) : null) ?? signedInLocal ?? null;
+  const rowForAccount = loadVaultRegistry(deps.registryOpts).vaults.find(
+    (v) => samePath(v.repo_root_abs, vaultSubject)
+  );
+  const boundAccount = rowForAccount?.account_id && rowForAccount.account_id !== LEGACY_REGISTRY_ACCOUNT_ID ? rowForAccount.account_id : null;
+  const repoAccount = boundAccount ?? signedInLocal ?? null;
   const http = deps.http;
   let tokens = { current: null, repo: null };
   if (http && http.token !== void 0) tokens = { current: http.token, repo: http.token };
@@ -6033,7 +6467,8 @@ async function runCloudViewChecks(repoRoot, deps, opts = {}) {
         markerVaultId: vaultId,
         registryRowId: vaultRecord?.id ?? null,
         cloudPointer: view.cloudPointer,
-        registryPointer: localPointer
+        registryPointer: localPointer,
+        markerBoundSatellite: Boolean(satellite?.viaMarker)
       });
       rows.push(
         compared(
@@ -6106,6 +6541,19 @@ async function runCloudViewChecks(repoRoot, deps, opts = {}) {
       rows.push(notApplicableRow(id, "no heyspex.yaml and no signed-in account"));
     } else if (view.sessionFailure) {
       rows.push(unknownRow(id, repoAccount, view.sessionFailure));
+    } else if (!repoAccount && satellite?.viaMarker) {
+      rows.push(
+        compared(
+          id,
+          {
+            local: "(portable marker: no account recorded)",
+            cloud: view.email ? `${view.userId} (${view.email})` : view.userId
+          },
+          true,
+          "hs login",
+          `portable marker; signed in as ${view.email ?? view.userId}`
+        )
+      );
     } else {
       const agree = repoAccount !== null && (repoAccount === view.userId || repoAccount === view.email);
       rows.push(
@@ -6243,7 +6691,7 @@ function writeProjectContract(ctx, options2 = {}) {
 }
 
 // spex-console/src/lib/cli/init.customer-vault.ts
-import { basename } from "node:path";
+import { basename as basename2 } from "node:path";
 
 // spex-console/src/lib/cli/template-manifest.sources.mjs
 var UNIVERSAL_TEMPLATE_ROWS = [
@@ -6754,7 +7202,7 @@ function findManagedSpecs(deps, targetDir, manifestDests) {
   return out;
 }
 function defaultVaultName(targetDir) {
-  return basename(targetDir) || targetDir;
+  return basename2(targetDir) || targetDir;
 }
 function runCustomerVaultInit(args, deps, options2 = {}) {
   const { targetDir } = args;
@@ -6902,14 +7350,14 @@ function templatePinHook() {
 }
 
 // spex-console/src/lib/cli/principle-selection.ts
-import { basename as basename2 } from "node:path";
+import { basename as basename3 } from "node:path";
 var PRINCIPLES_INDEX_DEST = "specs/principles-index.md";
 function principleKey(row2) {
-  const base = basename2(row2.dest, ".md");
+  const base = basename3(row2.dest, ".md");
   return base.startsWith("principle-") ? base.slice("principle-".length) : base;
 }
 function principleWikilink(row2) {
-  return basename2(row2.dest, ".md");
+  return basename3(row2.dest, ".md");
 }
 function parsePrinciplesFlag(value, rows) {
   const principleRows = rows.filter((row2) => row2.group === "principle");
@@ -7020,7 +7468,7 @@ function applyCustomerTemplate(args) {
 }
 
 // spex-console/src/lib/cli/install.ts
-import { homedir as homedir10 } from "node:os";
+import { isAbsolute as isAbsolute3, resolve as resolveNodePath2 } from "node:path";
 
 // scripts/install-cursor-hooks.mjs
 import fs2 from "node:fs";
@@ -7037,10 +7485,13 @@ var HOOKS = [
   { event: "sessionStart", hook: "wip-checkpoint", why: "Surface the previous session WIP handoff before work resumes." },
   { event: "sessionStart", hook: "inject-dev-server-awareness", why: "Once-per-session reminder that dev-server status is a tool call, not a guess." },
   { event: "sessionStart", hook: "inject-coo-seat", why: "Inject the dev-factory COO seat mandate when the COO window is open." },
+  { event: "sessionStart", hook: "inject-doctrine", why: "Inject the baseline SpexCode Doctrine edition at session start." },
   { event: "sessionStart", hook: "coo-guard-check", why: "Warn at session start when a breakdown has not been delegated." },
   { event: "sessionStart", hook: "check-auto-memory-budget", why: "Self-heal and budget-check the auto-memory index." },
   { event: "sessionStart", hook: "check-claude-md-budget", why: "Advisory budget check on the always-loaded agent contract." },
   { event: "sessionStart", hook: "check-mcp-freshness-hook", why: "Warn when the running MCP server is stale versus vendor." },
+  { event: "sessionStart", hook: "git-reflog-audit", why: "Session-start git audit (stash/reset/rebase witness)." },
+  { event: "sessionStart", hook: "vault-mirror-catchup", why: "Cloud write mode: detached hs pull --apply closes a stale disk mirror (HS-XJFQ)." },
   // ── Compaction ──────────────────────────────────────────────────────────
   // Claude re-runs SessionStart(source: compact) after compaction; Cursor fires
   // preCompact BEFORE it, so the shim relays this one as SessionStart(compact)
@@ -7054,6 +7505,7 @@ var HOOKS = [
   { event: "beforeSubmitPrompt", hook: "preflight-reminder", why: "Name the required procedure before a filing/destructive/protocol turn." },
   { event: "beforeSubmitPrompt", hook: "intent-classifier-trigger", why: "Route capture / research / settings / defer intents to the right skill." },
   { event: "beforeSubmitPrompt", hook: "inject-communication-style", why: "Re-assert the plain-language communication rules each turn." },
+  { event: "beforeSubmitPrompt", hook: "inject-vault-context", timeout: 10, why: "Lexical vault retrieval for the prompt (surfaced as a user message)." },
   // ── Before every tool call (any tool) ───────────────────────────────────
   { event: "preToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PreToolUse"], why: "Claim liveness heartbeat to the console." },
   { event: "preToolUse", matcher: ".*", hook: "coo-denylist-gate", why: "Hard deny the COO-window deny list." },
@@ -7064,21 +7516,27 @@ var HOOKS = [
   // the vault guard because removing a profile file is the loss it exists to
   // prevent, and Claude had no separate delete tool to list.
   { event: "preToolUse", matcher: "Write|Delete", hook: "env-vault-guard", why: "Block destructive writes to the encrypted env vault (ALWAYS ON)." },
+  { event: "preToolUse", matcher: "Write", hook: "vault-write-tier-guard", why: "Deny disk writes to vault specs in cloud write mode (HS-FCNH)." },
   { event: "preToolUse", matcher: "Write", hook: "settings-write-gate", why: "Require approval before .heyspex/config.yaml changes." },
   { event: "preToolUse", matcher: "Write", hook: "enforce-vault-naming", why: "Block vault filenames that violate the naming registry." },
   { event: "preToolUse", matcher: "Write", hook: "guard-auto-memory-writes", why: "Block new topic files in the auto-memory directory." },
   { event: "preToolUse", matcher: "Write", hook: "preflight-reminder", why: "Preflight reminder on the edit path itself." },
   { event: "preToolUse", matcher: "Write", hook: "claim-before-code-gate", why: "Deny the first code edit after plan exit with no claim." },
+  { event: "preToolUse", matcher: "Write", hook: "directive-obligation-gate", why: "Deny product-code writes while a capture_on_idea obligation is unmet, and (claim-before-build) with no claim/capture (HS-20SW)." },
   // ── Before a shell command ──────────────────────────────────────────────
   // beforeShellExecution, not preToolUse/Shell: it is the only event guaranteed
   // to carry the command string, and Cursor honors allow/deny/ask on it.
   { event: "beforeShellExecution", hook: "env-vault-guard", why: "Block shell writes/exfiltration targeting the env vault (ALWAYS ON)." },
+  { event: "beforeShellExecution", hook: "vault-write-tier-guard", why: "Deny shell writes to vault specs in cloud write mode (HS-FCNH)." },
   { event: "beforeShellExecution", hook: "settings-write-gate", why: "Catch shell writes to .heyspex/config.yaml." },
   { event: "beforeShellExecution", hook: "enforce-vault-naming", why: "Catch vault files created via the shell." },
   { event: "beforeShellExecution", hook: "guard-auto-memory-writes", why: "Catch auto-memory topic files created via the shell." },
   { event: "beforeShellExecution", hook: "preflight-reminder", why: "Preflight reminder on rm -rf / force-push shaped commands." },
   { event: "beforeShellExecution", hook: "dev-server-task-reminder", timeout: 10, why: "Dev-server start/stop hard gate plus DB-safety reminder." },
   { event: "beforeShellExecution", hook: "git-stash-gate", timeout: 10, why: "Always ask before a mutating git stash." },
+  { event: "beforeShellExecution", hook: "git-identity-guard", why: "Agents never write git identity (owner ruling 2026-09-19, ALWAYS ON)." },
+  { event: "beforeShellExecution", hook: "capture-execution-gate", why: "Block dev-factory research/paid-model/routing shell commands past an ungrounded capture (HS-KNJ8, platform)." },
+  { event: "beforeShellExecution", hook: "directive-obligation-gate", why: "Deny build commands and product-code shell writes while a capture obligation is unmet (HS-20SW)." },
   // ── Before specific MCP tools ───────────────────────────────────────────
   // Cursor fires preToolUse for MCP tools too (matcher `MCP:<name>`), so these
   // stay on preToolUse rather than beforeMCPExecution — registering both would
@@ -7088,15 +7546,20 @@ var HOOKS = [
   { event: "preToolUse", matcher: ".*", tool: "heyspex_file_spec$", hook: "capture-workflow-gate", timeout: 8, why: "Deny filing an implementation spec straight out of an open capture." },
   { event: "preToolUse", matcher: ".*", tool: "heyspex_settings_set$", hook: "settings-write-gate", why: "Require approval for settings changes made through MCP." },
   { event: "preToolUse", matcher: ".*", tool: "[Nn]eon__(prepare_database_migration|complete_database_migration|reset_from_parent|delete_branch)$", hook: "dev-server-task-reminder", timeout: 10, why: "DB-safety gate on Neon migration/reset/delete tools." },
+  { event: "preToolUse", matcher: ".*", tool: "heyspex_file_spec$", hook: "diagnose-capture-reminder", why: "Warn when a diagnose is filed with no capture holding the owner words (HS-IK2D)." },
+  { event: "preToolUse", matcher: ".*", tool: "^(Workflow|Skill)$", hook: "research-method-guard", why: "Research method guard on Skill/Workflow launches (HS-EN4F, ALWAYS ON)." },
   { event: "preToolUse", matcher: ".*", tool: "^(Workflow|Skill)$", hook: "deep-research-cost-gate", why: "Cost confirmation before a paid deep-research harness launch." },
   { event: "preToolUse", matcher: ".*", tool: "^(WebSearch|WebFetch|web_search|web_fetch)$|heyspex_save_research$", hook: "research-protocol-gate", why: "WebSearch/WebFetch/save_research refused until the research preflight ran (HS-K0ZP, HS-EN4F)." },
   // ── Before a subagent spawn ─────────────────────────────────────────────
   // subagentStart over preToolUse/Task: it carries subagent_type and the model,
   // which is exactly what the routing gate decides on, and it can deny.
   { event: "subagentStart", hook: "agent-spawn-delegation-gate", why: "Block a build/breakdown/critic subagent on an off-routing model." },
+  { event: "subagentStart", hook: "capture-execution-gate", why: "Block a dev-factory subagent spawn past an ungrounded capture (HS-KNJ8, platform)." },
+  { event: "subagentStart", hook: "directive-obligation-gate", why: "Deny a build subagent while a capture obligation is unmet or the session has no claim/capture (HS-20SW)." },
   // ── After every tool call ───────────────────────────────────────────────
   { event: "postToolUse", matcher: ".*", hook: "emit-claim-status", args: ["--event=PostToolUse"], why: "Claim liveness heartbeat after the call resolves." },
   { event: "postToolUse", matcher: ".*", hook: "log-session-activity", args: ["--event=PostToolUse"], why: "Append the tool result row to the session log." },
+  { event: "postToolUse", matcher: ".*", hook: "directive-obligation-gate", why: "Discharge the capture obligation on a capture write; track claim acquire/release (HS-20SW)." },
   { event: "postToolUse", matcher: ".*", hook: "close-terminal-on-ship", why: "Close the Launch terminal once the spec ships." },
   { event: "postToolUse", matcher: "Write", hook: "notify-status-flip", why: "Sound on an in_review status flip." },
   { event: "postToolUse", matcher: "Write", hook: "scripts/stamp-provenance-on-edit.mjs", why: "Stamp assisted_by provenance on direct spec edits." },
@@ -7109,7 +7572,11 @@ var HOOKS = [
   // hook re-drives the agent — the same effect as Claude's exit-2 block.
   { event: "stop", hook: "emit-claim-status", args: ["--event=Stop"], why: "Mark the claim pending-on-response." },
   { event: "stop", hook: "naughty-list-gate", why: "Re-drive the turn when the final message uses banned jargon." },
+  { event: "stop", hook: "id-display-format-gate", why: "Re-drive the turn when a reply breaks the Naming V3 display-id format." },
+  { event: "stop", hook: "epic-milestone-phrasing-gate", why: "Re-drive the turn when a reply breaks the epic/milestone phrasing rules." },
+  { event: "stop", hook: "git-reflog-audit", why: "Session-close git audit backstop (stash/reset/rebase witness)." },
   { event: "stop", hook: "enforce-session-sequence", why: "Re-drive the turn when work shipped without record_wip." },
+  { event: "stop", hook: "directive-obligation-gate", why: "Re-drive the turn ONCE (followup_message) when a capture obligation is still unmet (HS-20SW)." },
   // ── Session end ─────────────────────────────────────────────────────────
   { event: "sessionEnd", hook: "session-end", why: "Release the claim and notify the console." },
   { event: "sessionEnd", hook: "close-terminal-on-ship", why: "Final terminal cleanup." }
@@ -8747,6 +9214,7 @@ var INSTALL_HELP = [
   "  hs install [--target <dir>] [--platform <dir>] [--force] [--dry-run] [--json]",
   "             [--no-cursor] [--no-claude] [--claude-apply]",
   "             [--plugin | --plugin-apply] [--plugin-scope user|project|local]",
+  "             [--copilot-hooks | --copilot-plugin | --copilot-plugin-apply]",
   "             [--no-statusline]",
   "             [--cc | --command-code] [--register-vault [--workspace <id>]]",
   "             [--remote[=<url>]]",
@@ -8805,6 +9273,15 @@ var INSTALL_HELP = [
   `                     the platform's .claude-plugin/marketplace.json (fallback: ${PLUGIN_INSTALL_SPEC}).`,
   "  --plugin-scope <s> Plugin install scope: user, project (default), or local.",
   "                     Implies --plugin.",
+  "  --copilot-hooks    Write .github/hooks/heyspex.json (GitHub Copilot hooks) into the",
+  "                     target. Commands resolve node_modules/heyspex first, so an npm-only",
+  "                     install (no heyspex repo checkout) works. Pick this OR the plugin.",
+  "  --copilot-plugin   Print `copilot plugin marketplace add '<platform>'` +",
+  "                     `copilot plugin install <plugin>@<marketplace>` (the platform root is",
+  "                     node_modules/heyspex for a published install).",
+  "  --copilot-plugin-apply  Run those two commands when `copilot` is on PATH.",
+  "                     Requesting the Copilot plugin AND --copilot-hooks warns and skips the",
+  "                     hooks file (both would fire every hook twice).",
   "  --remote[=<url>]   Write .mcp.json for the REMOTE (cloud) MCP endpoint instead of",
   `                     the local stdio server \u2014 the Streamable-HTTP form against`,
   `                     ${DEFAULT_REMOTE_MCP_URL} (or <url>), authenticated by the`,
@@ -8853,15 +9330,15 @@ var INSTALL_HELP = [
 
 // spex-console/src/lib/cli/install-identity.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync4 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync5 } from "node:fs";
+import { join as join11 } from "node:path";
 import { createInterface } from "node:readline/promises";
 init_credentials();
 
 // vendor/heyspex-mcp/whoami.mjs
+init_heyspex_home();
 init_credentials();
-import { homedir as homedir11 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 var SESSION_PATH = "/api/mcp/session";
 async function probeCredentialIdentity({ consoleUrl, token, fetchImpl = fetch } = {}) {
   if (!token) return { kind: "no_credential" };
@@ -9116,7 +9593,7 @@ async function runIdentityGate(io, flags, verb, wording = ATTACH_WORDING) {
     "identity_unconfirmed"
   );
 }
-function readConfiguredAccountId(env = process.env, homeDir = homedir12()) {
+function readConfiguredAccountId(env = process.env, homeDir = heyspexHome2()) {
   return resolveSessionOwnerUncached({ env, homeDir });
 }
 function accountMismatchRepair(repoAccount) {
@@ -9145,7 +9622,7 @@ function isInteractiveTerminal() {
 }
 function defaultIdentityGateIo(opts) {
   const consoleUrl = opts.consoleUrl.trim().replace(/\/+$/, "");
-  const loginCli = [opts.platformRoot, resolveCodeRoot({})].filter((r) => Boolean(r && r.trim())).map((r) => join10(r, "vendor", "heyspex-mcp", "cli.mjs")).find((p) => existsSync4(p));
+  const loginCli = [opts.platformRoot, resolveCodeRoot({})].filter((r) => Boolean(r && r.trim())).map((r) => join11(r, "vendor", "heyspex-mcp", "cli.mjs")).find((p) => existsSync5(p));
   return {
     consoleUrl,
     interactive: opts.interactive ?? isInteractiveTerminal(),
@@ -9393,7 +9870,7 @@ function remedyFor(row2, satellite) {
     case "heyspex_yaml":
     case "vault_registered":
     case "workspace_registered":
-      return satellite ? null : "hs connect";
+      return satellite ? row2.remedy ?? null : "hs connect";
     case "mcp_entry":
       return satellite ? "hs install --attach-vault <vault-id> --force" : "hs connect";
     case "plugin_surface":
@@ -9401,7 +9878,7 @@ function remedyFor(row2, satellite) {
     case "git_hooks":
       return "node scripts/install-git-hooks.mjs";
     case "satellite_attachment":
-      return "hs install --attach-vault <vault-id> --force";
+      return row2.remedy ?? "hs install --attach-vault <vault-id> --force";
     case "active_vault":
     case "account_agreement":
     case "workspace_agreement":
@@ -9424,7 +9901,10 @@ function formatReport(report) {
   const lines = [
     `hs connect --check \u2014 ${report.repo_root}`,
     ...report.satellite ? [
-      `satellite repo \u2014 attached to vault ${report.satellite.attached_vault_id ?? "(unregistered)"} at ${report.satellite.attached_vault_root}; the vault rows below describe THAT repo.`
+      `satellite repo \u2014 attached to vault ${report.satellite.attached_vault_id ?? "(unregistered)"} at ${report.satellite.attached_vault_root}; the vault rows below describe THAT repo.`,
+      ...report.satellite.via_marker ? [
+        report.satellite.cloned ? "bound by this repo's committed heyspex.yaml (vault_id + relative vault_path)." : "bound by this repo's committed heyspex.yaml; vault not cloned locally -- cloud mode (cloud reads and writes work; clone the vault at its vault_path for local reads)."
+      ] : []
     ] : [],
     "",
     ...report.checks.flatMap((c) => [
@@ -9504,7 +9984,7 @@ var CANONICAL_VAULT_SUBFOLDERS = [
 function bareSpecsDirWarning(specsDir, deps) {
   let entries = [];
   try {
-    entries = readdirSync(specsDir);
+    entries = readdirSync2(specsDir);
   } catch {
     return null;
   }
@@ -9626,9 +10106,10 @@ async function runConnectFullRun(args, deps) {
     };
   }
   if (!satellite && strictAccount.ok) {
-    const markerPath = deps.joinPath(repoRoot, "heyspex.yaml");
-    const markerText = deps.fileExists(markerPath) ? deps.readFile(markerPath) : null;
-    const repoAccount = markerText ? parseAccountId(markerText) : null;
+    const boundRow = loadVaultRegistry(deps.registryOpts).vaults.find(
+      (v) => samePath(v.repo_root_abs, repoRoot)
+    );
+    const repoAccount = boundRow?.account_id && boundRow.account_id !== "legacy" ? boundRow.account_id : null;
     if (repoAccount && repoAccount !== strictAccount.accountId) {
       return accountMismatchRefusal("hs connect", repoAccount, strictAccount.accountId);
     }
@@ -9731,37 +10212,14 @@ async function runConnectFullRun(args, deps) {
     if (isPresent("heyspex_yaml")) {
       const content = deps.fileExists(yamlPath) ? deps.readFile(yamlPath) : null;
       vaultId = content ? parseVaultId(content) ?? void 0 : void 0;
-      const accountUpdate = content !== null && accountId ? recordMarkerAccount(content, accountId) : null;
-      if (accountUpdate?.action !== "added") {
-        steps.push({
-          id: "heyspex_yaml",
-          label: "heyspex.yaml vault marker",
-          status: "skipped",
-          detail: "already initialized",
-          confirmed_by: "read heyspex.yaml"
-        });
-      } else if (args.dryRun) {
-        steps.push({
-          id: "heyspex_yaml",
-          label: "heyspex.yaml vault marker",
-          status: "run",
-          detail: `would record account: ${accountId} in ${yamlPath}`
-        });
-      } else {
-        try {
-          deps.writeFile(yamlPath, accountUpdate.content);
-          assertMarker(deps.readFile(yamlPath), yamlPath, vaultId, accountId);
-          steps.push({
-            id: "heyspex_yaml",
-            label: "heyspex.yaml vault marker",
-            status: "run",
-            detail: `recorded account: ${accountId} in ${yamlPath}`,
-            confirmed_by: "read heyspex.yaml"
-          });
-        } catch (err) {
-          failStep("heyspex_yaml", "heyspex.yaml vault marker", err);
-        }
-      }
+      const legacyAccount = content ? parseAccountId(content) : null;
+      steps.push({
+        id: "heyspex_yaml",
+        label: "heyspex.yaml vault marker",
+        status: "skipped",
+        detail: legacyAccount ? `already initialized (legacy account: ${legacyAccount} in the marker is ignored -- the account binding is machine-local)` : "already initialized",
+        confirmed_by: "read heyspex.yaml"
+      });
     } else if (args.dryRun) {
       steps.push({
         id: "heyspex_yaml",
@@ -9799,8 +10257,7 @@ async function runConnectFullRun(args, deps) {
           vaultRoot: "specs/",
           force: false,
           json: false,
-          adoptedVaultId,
-          ...accountId ? { accountId } : {}
+          adoptedVaultId
         },
         initDeps
       );
@@ -10828,9 +11285,6 @@ function assertMarker(content, path7, vaultId, accountId) {
   if (vaultId && back !== vaultId) {
     throw new Error(`${path7} reads back vault_id ${back ?? "(none)"}, not ${vaultId}`);
   }
-  if (accountId && parseAccountId(content) !== accountId) {
-    throw new Error(`${path7} does not record account: ${accountId} after the write`);
-  }
 }
 var MIRRORED_SKILL_DIRS = [
   [".claude", "skills"],
@@ -11201,21 +11655,21 @@ function runEntry(name, main2, options2 = {}) {
 // spex-console/bin/hs-connect.ts
 function readFile(p) {
   try {
-    return readFileSync10(p, "utf8");
+    return readFileSync11(p, "utf8");
   } catch {
     return null;
   }
 }
 function listDir(p) {
   try {
-    return readdirSync2(p, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name);
+    return readdirSync3(p, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name);
   } catch {
     return [];
   }
 }
 var packageRoot = path6.resolve(path6.dirname(fileURLToPath4(import.meta.url)), "..", "..");
 var satelliteWalkDeps = {
-  fileExists: (p) => existsSync5(p),
+  fileExists: (p) => existsSync6(p),
   readFile,
   joinPath: (...segments) => path6.join(...segments),
   parentDir: (p) => path6.dirname(p),
@@ -11272,11 +11726,11 @@ async function main() {
     repoRoot,
     cwd,
     platformRoot: path6.resolve(platformRoot),
-    fileExists: (p) => existsSync5(p),
+    fileExists: (p) => existsSync6(p),
     readFile,
     listDir,
-    writeFile: (p, c) => writeFileSync5(p, c, "utf8"),
-    mkdir: (p) => mkdirSync5(p, { recursive: true }),
+    writeFile: (p, c) => writeFileSync6(p, c, "utf8"),
+    mkdir: (p) => mkdirSync6(p, { recursive: true }),
     copyFile: (src, dest) => copyFileSync(src, dest),
     isDirectory: (p) => {
       try {