heyspex 0.2.2 → 0.2.4

package/dist/cli/hs-init.mjs

@@ -51,9 +51,9 @@ var init_heyspex_home = __esm({
 });
 
 // vendor/heyspex-mcp/credentials.mjs
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { mkdirSync, readFileSync as readFileSync2, renameSync, writeFileSync } from "node:fs";
 import os, { homedir as homedir2 } from "node:os";
-import { dirname, join, resolve as resolve2 } from "node:path";
+import { dirname as dirname2, join, resolve as resolve3 } from "node:path";
 var init_credentials = __esm({
   "vendor/heyspex-mcp/credentials.mjs"() {
     "use strict";
@@ -62,7 +62,7 @@ var init_credentials = __esm({
 });
 
 // scripts/lib/dev-mode.mjs
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join2 } from "node:path";
 function devModeFilePath(homeDir = heyspexHome()) {
@@ -90,7 +90,7 @@ function deriveSemantics(mode, reliance) {
     vaultWriteMode: local ? "local" : "cloud"
   };
 }
-function readLocalDevModeRecord({ homeDir = heyspexHome(), readFile = defaultReadFile } = {}) {
+function readLocalDevModeRecord({ homeDir = heyspexHome(), readFile = defaultReadFile2 } = {}) {
   let raw;
   try {
     raw = readFile(devModeFilePath(homeDir));
@@ -118,10 +118,15 @@ function readLocalDevModeRecord({ homeDir = heyspexHome(), readFile = defaultRea
     return { record: null, parseError: `unparseable dev-mode.json: ${String(err?.message ?? err)}` };
   }
 }
+function overrideCloudCheck(source, cloudKnown, staleAgainstCloud) {
+  if (source !== "local-override") return "not-applicable";
+  if (!cloudKnown) return "unverified";
+  return staleAgainstCloud ? "stale" : "in-sync";
+}
 function resolveDevMode({
   env = process.env,
   homeDir = heyspexHome(),
-  readFile = defaultReadFile,
+  readFile = defaultReadFile2,
   cloudSetting = void 0
 } = {}) {
   const local = readLocalDevModeRecord({ homeDir, readFile });
@@ -157,6 +162,7 @@ function resolveDevMode({
   const semantics = deriveSemantics(mode, reliance);
   const consoleUrl = source === "local-override" && local.record?.console_url ? local.record.console_url.replace(/\/+$/, "") : semantics.consoleUrl;
   const staleAgainstCloud = source === "local-override" && cloudValue !== null && (cloudValue.mode !== mode || mode === "dev" && cloudValue.reliance !== semantics.reliance);
+  const cloudCheck = overrideCloudCheck(source, cloudKnown, staleAgainstCloud);
   return {
     mode,
     reliance: semantics.reliance,
@@ -174,12 +180,13 @@ function resolveDevMode({
       present: local.record !== null,
       record: local.record,
       parseError: local.parseError,
-      staleAgainstCloud
+      staleAgainstCloud,
+      cloudCheck
     },
     cloudSetting: { known: cloudKnown, value: cloudValue }
   };
 }
-var CLOUD_CONSOLE_URL, LOCAL_CONSOLE_URL, DEV_MODE_FILENAME, defaultReadFile;
+var CLOUD_CONSOLE_URL, LOCAL_CONSOLE_URL, DEV_MODE_FILENAME, defaultReadFile2;
 var init_dev_mode = __esm({
   "scripts/lib/dev-mode.mjs"() {
     "use strict";
@@ -188,7 +195,7 @@ var init_dev_mode = __esm({
     CLOUD_CONSOLE_URL = "https://app.heyspex.com";
     LOCAL_CONSOLE_URL = "http://localhost:3000";
     DEV_MODE_FILENAME = "dev-mode.json";
-    defaultReadFile = (p) => readFileSync2(p, "utf8");
+    defaultReadFile2 = (p) => readFileSync3(p, "utf8");
   }
 });
 
@@ -855,21 +862,23 @@ var require_gray_matter = __commonJS({
 
 // spex-console/bin/hs-init.ts
 import {
-  copyFileSync,
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync6,
+  copyFileSync as copyFileSync2,
+  existsSync as existsSync8,
+  mkdirSync as mkdirSync7,
   readdirSync as readdirSync2,
-  readFileSync as readFileSync11,
-  statSync,
-  writeFileSync as writeFileSync6
+  readFileSync as readFileSync14,
+  statSync as statSync5,
+  writeFileSync as writeFileSync7
 } from "node:fs";
-import { dirname as dirname6, join as join11, resolve as resolve5 } from "node:path";
+import { dirname as dirname7, join as join11, resolve as resolve6 } from "node:path";
 import process4 from "node:process";
 import { createInterface } from "node:readline/promises";
-import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
 
 // scripts/lib/shared-path-helpers.mjs
+import { realpathSync } from "node:fs";
 import { isAbsolute, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
 function resolveCodeRoot({
   explicit,
   packageRoot,
@@ -967,17 +976,118 @@ function writeProjectContract(ctx, options2 = {}) {
 }
 function customerClaudeMdHook(notify) {
   return (ctx) => {
+    if (ctx.mode === "refresh" && ctx.deps.exists(ctx.deps.joinPath(ctx.targetDir, "CLAUDE.md"))) {
+      return;
+    }
     writeProjectContract(ctx, { notify });
   };
 }
 
+// spex-console/src/lib/cli/generated-file-eol.ts
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, relative, resolve as resolve2 } from "node:path";
+function dominantEol(text) {
+  const crlf = (text.match(/\r\n/g) ?? []).length;
+  const lf = (text.match(/\n/g) ?? []).length - crlf;
+  if (crlf === 0 && lf === 0) return null;
+  return crlf > lf ? "\r\n" : "\n";
+}
+function applyEol(text, eol) {
+  const lf = text.replace(/\r\n/g, "\n");
+  return eol === "\n" ? lf : lf.replace(/\n/g, "\r\n");
+}
+function defaultRunGit(args, cwd) {
+  try {
+    const res = spawnSync("git", args, {
+      cwd,
+      encoding: "utf8",
+      windowsHide: true,
+      timeout: 1e4
+    });
+    if (res.status !== 0) return null;
+    return String(res.stdout ?? "").trim();
+  } catch {
+    return null;
+  }
+}
+function defaultReadFile(path7) {
+  try {
+    return readFileSync(path7, "utf8");
+  } catch {
+    return null;
+  }
+}
+function existingAncestor(path7) {
+  let dir = dirname(resolve2(path7));
+  for (; ; ) {
+    if (existsSync(dir)) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return dir;
+    dir = parent;
+  }
+}
+function createGeneratedFileEol(opts) {
+  const readFile = opts.readFile ?? defaultReadFile;
+  const runGit = opts.runGit ?? defaultRunGit;
+  const platform = opts.platform ?? process.platform;
+  const attrCache = /* @__PURE__ */ new Map();
+  let configEol;
+  const configDefault = () => {
+    if (configEol !== void 0) return configEol;
+    if (runGit(["rev-parse", "--is-inside-work-tree"], opts.repoRoot) !== "true") {
+      configEol = null;
+      return configEol;
+    }
+    const get = (key) => runGit(["config", "--get", key], opts.repoRoot);
+    const coreEol = (get("core.eol") ?? "").toLowerCase();
+    if (coreEol === "crlf") configEol = "\r\n";
+    else if (coreEol === "lf") configEol = "\n";
+    else if (platform === "win32" && (get("core.autocrlf") ?? "").toLowerCase() === "true")
+      configEol = "\r\n";
+    else configEol = null;
+    return configEol;
+  };
+  const attrEol = (path7) => {
+    const abs = resolve2(path7);
+    const cwd = existingAncestor(abs);
+    const rel = relative(cwd, abs).replace(/\\/g, "/") || ".";
+    const key = `${cwd}\0${rel}`;
+    let out = attrCache.get(key);
+    if (out === void 0) {
+      out = runGit(["check-attr", "eol", "--", rel], cwd) ?? "";
+      attrCache.set(key, out);
+    }
+    const m = out.match(/:\s*eol:\s*(\S+)\s*$/);
+    const value = (m?.[1] ?? "").toLowerCase();
+    if (value === "crlf") return "\r\n";
+    if (value === "lf") return "\n";
+    return null;
+  };
+  const eolFor = (path7, existing) => {
+    const current = existing === void 0 ? readFile(path7) : existing;
+    if (current !== null) {
+      const have = dominantEol(current);
+      if (have) return have;
+    }
+    return attrEol(path7) ?? configDefault() ?? "\n";
+  };
+  return {
+    eolFor,
+    convert: (path7, content, existing) => {
+      if (!content.includes("\n")) return content;
+      return applyEol(content, eolFor(path7, existing));
+    }
+  };
+}
+
 // spex-console/src/lib/cli/init.ts
 import { randomUUID } from "node:crypto";
 
 // scripts/lib/console-url-resolver.mjs
 init_heyspex_home();
 init_dev_mode();
-import { readFileSync as readFileSync3 } from "node:fs";
+import { readFileSync as readFileSync4 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join3 } from "node:path";
 var DEFAULT_CONSOLE_URL = LOCAL_CONSOLE_URL;
@@ -1005,7 +1115,7 @@ function warnStaleLoopbackCredentialsOnce(credentialsUrl, derivedUrl, { log }) {
   } catch {
   }
 }
-function readCredentialsConsoleUrl({ homeDir = heyspexHome(), readFile = defaultReadFile2 } = {}) {
+function readCredentialsConsoleUrl({ homeDir = heyspexHome(), readFile = defaultReadFile3 } = {}) {
   try {
     const raw = readFile(join3(homeDir, ".heyspex", "credentials.yaml"));
     const match = String(raw ?? "").match(/^console_url:\s*["']?([^"'\r\n#]+)/m);
@@ -1015,10 +1125,10 @@ function readCredentialsConsoleUrl({ homeDir = heyspexHome(), readFile = default
     return null;
   }
 }
-function defaultReadFile2(p) {
-  return readFileSync3(p, "utf8");
+function defaultReadFile3(p) {
+  return readFileSync4(p, "utf8");
 }
-function readDiscoveryFileConsoleUrl(repoRoot, { readDiscovery = defaultReadFile2 } = {}) {
+function readDiscoveryFileConsoleUrl(repoRoot, { readDiscovery = defaultReadFile3 } = {}) {
   if (!repoRoot) return null;
   try {
     const discovery = String(readDiscovery(join3(repoRoot, ".heyspex", "console-url")) ?? "").trim();
@@ -1053,8 +1163,8 @@ function resolveConsoleUrl({
   strict = false,
   devMode,
   log = (line) => process.stderr.write(line),
-  readFile = defaultReadFile2,
-  readDiscovery = defaultReadFile2
+  readFile = defaultReadFile3,
+  readDiscovery = defaultReadFile3
 } = {}) {
   const envUrl = env.HEYSPEX_CONSOLE_URL?.trim();
   if (envUrl) return trimTrailingSlash(envUrl);
@@ -1080,17 +1190,17 @@ function resolveConsoleUrl({
 }
 
 // spex-console/src/lib/cli/control-shared.ts
-import path from "node:path";
+import path2 from "node:path";
 
 // scripts/lib/hs-command.mjs
-import { existsSync } from "node:fs";
-import { delimiter, dirname as dirname2, join as join4 } from "node:path";
-import { fileURLToPath } from "node:url";
+import { existsSync as existsSync2 } from "node:fs";
+import { delimiter, dirname as dirname3, join as join4 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 var HS_BIN_NAME = "hs";
 var HS_DISPATCHER_PATH = (() => {
   try {
-    const here = dirname2(fileURLToPath(import.meta.url));
-    return join4(dirname2(dirname2(here)), "bin", "hs.mjs");
+    const here = dirname3(fileURLToPath2(import.meta.url));
+    return join4(dirname3(dirname3(here)), "bin", "hs.mjs");
   } catch {
     return null;
   }
@@ -1103,14 +1213,14 @@ var HS_DISPATCHER_PREFIX = HS_DISPATCHER_PATH ? `node ${shellQuote(HS_DISPATCHER
 // vendor/heyspex-mcp/console-fetch.mjs
 init_heyspex_home();
 init_credentials();
-import { readFileSync as readFileSync7 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
+import { readFileSync as readFileSync9 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
 import { join as join8 } from "node:path";
 
 // vendor/heyspex-mcp/session-owner.mjs
 init_heyspex_home();
 init_credentials();
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join5 } from "node:path";
 
@@ -1128,10 +1238,10 @@ var VAULT_LESS_ENDPOINTS = Object.freeze([
 // vendor/heyspex-mcp/write-outbox.mjs
 import {
   readdirSync,
-  readFileSync as readFileSync5,
+  readFileSync as readFileSync6,
   writeFileSync as writeFileSync3,
   mkdirSync as mkdirSync3,
-  existsSync as existsSync2,
+  existsSync as existsSync3,
   renameSync as renameSync2,
   rmSync
 } from "node:fs";
@@ -1139,9 +1249,30 @@ import { basename, join as join6, isAbsolute as isAbsolute2 } from "node:path";
 
 // vendor/heyspex-mcp/vault-resolve.mjs
 init_heyspex_home();
-import { existsSync as existsSync3, readFileSync as readFileSync6 } from "node:fs";
-import { homedir as homedir6, tmpdir } from "node:os";
-import { dirname as dirname3, join as join7, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync5, readFileSync as readFileSync8, realpathSync as realpathSync3, statSync as statSync3 } from "node:fs";
+import { homedir as homedir7, tmpdir } from "node:os";
+
+// vendor/heyspex-mcp/usable-dir-env.mjs
+import { statSync } from "node:fs";
+import { isAbsolute as isAbsolute3 } from "node:path";
+
+// vendor/heyspex-mcp/vault-resolve.mjs
+import { basename as basename2, dirname as dirname4, join as join7, resolve as resolve4 } from "node:path";
+
+// vendor/heyspex-mcp/vault-binding.mjs
+import {
+  copyFileSync,
+  existsSync as existsSync4,
+  mkdirSync as mkdirSync4,
+  readFileSync as readFileSync7,
+  realpathSync as realpathSync2,
+  renameSync as renameSync3,
+  statSync as statSync2,
+  unlinkSync,
+  writeFileSync as writeFileSync4
+} from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import path from "node:path";
 
 // vendor/heyspex-mcp/console-fetch.mjs
 var SCOPE_REFUSAL_CODES = Object.freeze(["VAULT_SCOPE_MISMATCH", "ACCOUNT_MISMATCH", "VAULT_NOT_REGISTERED"]);
@@ -1150,11 +1281,11 @@ var SCOPE_REFUSAL_CODES = Object.freeze(["VAULT_SCOPE_MISMATCH", "ACCOUNT_MISMAT
 init_credentials();
 
 // spex-console/src/lib/vault-registry/registry-file.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync8, renameSync as renameSync3, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname4, join as join9, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync10, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname5, join as join9, resolve as resolve5 } from "node:path";
 
 // spex-console/src/lib/heyspex-home.ts
-import { homedir as homedir8 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 
 // spex-console/src/lib/cli/control-shared.ts
 var EXIT = {
@@ -1547,12 +1678,15 @@ var HELP = [
   "(spex-console/src/lib/cli/template-manifest.ts) \u2014 universal docs",
   "copied verbatim, template-shape docs written as author-prompt skeletons \u2014",
   "plus a generated CLAUDE.md, the kept-principles index, and the template_version",
-  "pin; with --git, one initial `git init` + commit. Rerunnable: a <dir> that already",
-  "holds heyspex.yaml and an empty/placeholder-only specs/ is accepted, existing",
-  "files are never overwritten (an existing CLAUDE.md gets a CLAUDE.md.template",
-  "beside it), and the result lists each manifest row as created or kept. Refuses a",
-  "non-empty <dir> without heyspex.yaml, or a specs/ holding managed specs.",
-  "See init.customer-vault.ts.",
+  "pin; with --git, one initial `git init` + commit. On an EXISTING vault (<dir>",
+  "holds heyspex.yaml with a vault_id) it is a REFRESH \u2014 the repair `hs doctor`'s",
+  "vault-template row names: only missing shipped files are added, template_version",
+  "is written/updated in heyspex.yaml (every other byte and the vault_id kept),",
+  "nothing existing is ever overwritten (an existing CLAUDE.md gets a",
+  "CLAUDE.md.template beside it), the result lists each manifest row as created or",
+  "kept, and a second run writes nothing. <dir> may be any path (a satellite repo",
+  "names its vault, e.g. `hs init --customer-vault ../my-specs`). Refuses only a",
+  "non-empty <dir> that has no heyspex.yaml. See init.customer-vault.ts.",
   "",
   "Flags:",
   "  --console-url <url>  console_url value (default: the mode-aware console --",
@@ -1575,7 +1709,7 @@ var HELP = [
 ].join("\n");
 
 // spex-console/src/lib/cli/init.customer-vault.ts
-import { basename as basename2 } from "node:path";
+import { basename as basename3 } from "node:path";
 
 // spex-console/src/lib/cli/template-manifest.sources.mjs
 var UNIVERSAL_TEMPLATE_ROWS = [
@@ -2060,41 +2194,42 @@ var SCAFFOLD_FOLDERS = [
   "checks",
   "events"
 ];
-var PLACEHOLDER_FILES = /* @__PURE__ */ new Set([".gitkeep"]);
-function isDir(deps, path5, name) {
-  if (deps.isDirectory) return deps.isDirectory(path5);
-  try {
-    const kids = deps.readdir(path5);
-    return kids.length > 0 || !name.includes(".");
-  } catch {
-    return false;
-  }
+function defaultVaultName(targetDir) {
+  return basename3(targetDir) || targetDir;
 }
-function findManagedSpecs(deps, targetDir, manifestDests) {
-  const out = [];
-  const walk = (abs, rel) => {
-    for (const name of deps.readdir(abs)) {
-      const childAbs = deps.joinPath(abs, name);
-      const childRel = `${rel}/${name}`;
-      if (isDir(deps, childAbs, name)) walk(childAbs, childRel);
-      else if (!PLACEHOLDER_FILES.has(name) && name.endsWith(".md") && !manifestDests.has(childRel))
-        out.push(childRel);
-    }
-  };
-  const specsRoot = deps.joinPath(targetDir, "specs");
-  if (deps.exists(specsRoot)) walk(specsRoot, "specs");
-  return out;
+function readTemplateVersionPin(yamlText) {
+  const m = yamlText.match(/^template_version:[ \t]*(.*?)[ \t]*$/m);
+  if (!m) return null;
+  const raw = m[1].trim();
+  const unquoted = raw.replace(/^"(.*)"$/, "$1").replace(/^'(.*)'$/, "$1");
+  return unquoted.length > 0 ? unquoted : null;
 }
-function defaultVaultName(targetDir) {
-  return basename2(targetDir) || targetDir;
+function stampTemplateVersion(content, version) {
+  if (readTemplateVersionPin(content) === version) return content;
+  const eol = content.includes("\r\n") ? "\r\n" : "\n";
+  const line = `template_version: ${version}`;
+  if (/^template_version:[^\r\n]*$/m.test(content)) {
+    return content.replace(/^template_version:[^\r\n]*$/m, line);
+  }
+  const body = content.replace(/(?:\r?\n)+$/, "");
+  return body.length === 0 ? `${line}${eol}` : `${body}${eol}${line}${eol}`;
+}
+function parentDirOf(deps, targetDir, dest) {
+  const segments = dest.split("/");
+  if (segments.length < 2) return null;
+  return deps.joinPath(targetDir, ...segments.slice(0, -1));
 }
 function runCustomerVaultInit(args, deps, options2 = {}) {
   const { targetDir } = args;
   const written = [];
   const filter = options2.manifestFilter ?? (() => true);
   const rows = TEMPLATE_MANIFEST.filter(filter);
+  const heyspexYamlPath = deps.joinPath(targetDir, "heyspex.yaml");
+  const markerPresent = deps.exists(targetDir) && deps.exists(heyspexYamlPath);
+  const existingYaml = markerPresent ? deps.readFile?.(heyspexYamlPath) ?? null : null;
+  const existingVaultId = existingYaml ? parseVaultId(existingYaml) : null;
+  const mode = markerPresent && existingVaultId ? "refresh" : "scaffold";
   if (deps.exists(targetDir)) {
-    const markerPresent = deps.exists(deps.joinPath(targetDir, "heyspex.yaml"));
     if (!markerPresent && deps.readdir(targetDir).length > 0) {
       return {
         code: EXIT.INVALID_ARG,
@@ -2104,43 +2239,43 @@ function runCustomerVaultInit(args, deps, options2 = {}) {
         written: []
       };
     }
-    if (markerPresent) {
-      const manifestDests = new Set(TEMPLATE_MANIFEST.map((r) => r.dest));
-      const managed = findManagedSpecs(deps, targetDir, manifestDests);
-      if (managed.length > 0) {
-        return {
-          code: EXIT.INVALID_ARG,
-          message: `${targetDir}/specs already holds managed spec(s) (${managed.slice(0, 3).join(", ")}${managed.length > 3 ? ", ..." : ""}) \u2014 customer-vault init refuses to write over an existing vault.`,
-          payload: { ok: false, error: "specs_not_empty", path: targetDir, specs: managed },
-          isError: true,
-          written: []
-        };
-      }
-    }
   } else {
     deps.mkdirRecursive(targetDir);
   }
-  const specsRoot = deps.joinPath(targetDir, "specs");
-  deps.mkdirRecursive(specsRoot);
-  for (const folder of SCAFFOLD_FOLDERS) {
-    deps.mkdirRecursive(deps.joinPath(specsRoot, folder));
+  if (mode === "scaffold") {
+    const specsRoot = deps.joinPath(targetDir, "specs");
+    deps.mkdirRecursive(specsRoot);
+    for (const folder of SCAFFOLD_FOLDERS) {
+      deps.mkdirRecursive(deps.joinPath(specsRoot, folder));
+    }
   }
-  const heyspexYamlPath = deps.joinPath(targetDir, "heyspex.yaml");
   let vaultId;
-  if (deps.exists(heyspexYamlPath)) {
-    const existingYaml = deps.readFile?.(heyspexYamlPath) ?? null;
-    vaultId = (existingYaml ? parseVaultId(existingYaml) : null) ?? "";
+  let pin;
+  if (markerPresent) {
+    vaultId = existingVaultId ?? "";
+    const stamped = existingYaml === null ? null : stampTemplateVersion(existingYaml, TEMPLATE_VERSION);
+    if (stamped !== null && stamped !== existingYaml) {
+      deps.writeFile(heyspexYamlPath, stamped);
+      written.push(heyspexYamlPath);
+      pin = "written";
+    } else {
+      pin = "kept";
+    }
   } else {
     vaultId = mintVaultId();
     deps.writeFile(
       heyspexYamlPath,
-      renderHeyspexYaml({
-        consoleUrl: options2.consoleUrl ?? DEFAULT_CONSOLE_URL2,
-        vaultRoot: "specs/",
-        vaultId
-      })
+      stampTemplateVersion(
+        renderHeyspexYaml({
+          consoleUrl: options2.consoleUrl ?? DEFAULT_CONSOLE_URL2,
+          vaultRoot: "specs/",
+          vaultId
+        }),
+        TEMPLATE_VERSION
+      )
     );
     written.push(heyspexYamlPath);
+    pin = "written";
   }
   const readConfigSeed2 = deps.readConfigSeed;
   const configSeed = seedConfigYaml(
@@ -2156,6 +2291,10 @@ function runCustomerVaultInit(args, deps, options2 = {}) {
       rowResults.push({ dest: row.dest, action: "kept" });
       continue;
     }
+    if (mode === "refresh") {
+      const parent = parentDirOf(deps, targetDir, row.dest);
+      if (parent && !deps.exists(parent)) deps.mkdirRecursive(parent);
+    }
     if (row.classification === "universal-template") {
       const srcAbs = deps.joinPath(deps.platformRoot, ...row.source.split("/"));
       deps.copyFile(srcAbs, destAbs);
@@ -2175,24 +2314,41 @@ function runCustomerVaultInit(args, deps, options2 = {}) {
       targetDir,
       vaultName: options2.vaultName ?? defaultVaultName(targetDir),
       templateVersion: TEMPLATE_VERSION,
+      mode,
       manifestRows: rows,
       rows: rowResults,
       deps,
-      recordWrite: (path5) => {
-        written.push(path5);
+      recordWrite: (path7) => {
+        written.push(path7);
       }
     };
     for (const hook of options2.afterScaffold) hook(ctx);
   }
   const createdCount = rowResults.filter((r) => r.action === "created").length;
   const keptCount = rowResults.length - createdCount;
+  const added = rowResults.filter((r) => r.action === "created").map((r) => r.dest);
+  let message;
+  if (mode === "refresh") {
+    const parts = [];
+    if (added.length > 0)
+      parts.push(`added ${added.length} missing template file(s): ${added.join(", ")}`);
+    if (pin === "written")
+      parts.push(`pinned template_version: ${TEMPLATE_VERSION} in heyspex.yaml`);
+    const hookWrites = written.length - added.length - (pin === "written" ? 1 : 0);
+    if (hookWrites > 0) parts.push(`${hookWrites} other file(s) written`);
+    message = parts.length > 0 ? `Refreshed customer vault at ${targetDir}: ${parts.join("; ")} (${keptCount} existing file(s) kept untouched).` : `Customer vault at ${targetDir} is already current (template v${TEMPLATE_VERSION}, ${keptCount} file(s) kept) \u2014 nothing written.`;
+  } else {
+    message = `Initialized customer vault at ${targetDir} (${written.length} files written, ${createdCount} manifest rows created, ${keptCount} kept, template v${TEMPLATE_VERSION}).`;
+  }
   return {
     code: EXIT.OK,
-    message: `Initialized customer vault at ${targetDir} (${written.length} files written, ${createdCount} manifest rows created, ${keptCount} kept, template v${TEMPLATE_VERSION}).`,
+    message,
     payload: {
       ok: true,
+      mode,
       targetDir,
       templateVersion: TEMPLATE_VERSION,
+      templatePin: pin,
       vaultId,
       written,
       rows: rowResults,
@@ -2205,10 +2361,10 @@ function runCustomerVaultInit(args, deps, options2 = {}) {
 }
 
 // spex-console/src/lib/cli/init-git-finalize.ts
-import { spawnSync } from "node:child_process";
+import { spawnSync as spawnSync2 } from "node:child_process";
 var nodeGitRunner = {
   run(args, cwd) {
-    const result = spawnSync("git", args, { cwd, encoding: "utf8" });
+    const result = spawnSync2("git", args, { cwd, encoding: "utf8" });
     return {
       ok: result.error === void 0 && result.status === 0,
       stdout: result.stdout ?? "",
@@ -2271,12 +2427,21 @@ function gitFinalizeHook(runner, notify) {
 }
 
 // spex-console/src/lib/cli/install.ts
-import { isAbsolute as isAbsolute3, resolve as resolveNodePath2 } from "node:path";
+import { isAbsolute as isAbsolute4, resolve as resolveNodePath2 } from "node:path";
+
+// spex-console/src/lib/vault-resolve/index.ts
+import { existsSync as existsSync7, readFileSync as readFileSync11, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
+import { tmpdir as tmpdir2 } from "node:os";
+import path3 from "node:path";
+
+// spex-console/src/lib/cli/satellite.ts
+import { resolve as resolveNodePath } from "node:path";
+import process2 from "node:process";
 
 // scripts/install-cursor-hooks.mjs
 import fs2 from "node:fs";
-import path3 from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
+import path5 from "node:path";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // scripts/cursor-hooks/manifest.mjs
 var SHIM = "scripts/cursor-hooks/_run.mjs";
@@ -2422,9 +2587,9 @@ function timeoutFor(entry) {
 // scripts/lib/customer-kit.mjs
 import { createHash } from "node:crypto";
 import fs from "node:fs";
-import path2 from "node:path";
+import path4 from "node:path";
 import os2 from "node:os";
-import { fileURLToPath as fileURLToPath2, pathToFileURL } from "node:url";
+import { fileURLToPath as fileURLToPath3, pathToFileURL } from "node:url";
 
 // scripts/lib/hook-dispositions.mjs
 var HOSTS = Object.freeze(["claude-code", "cursor", "copilot"]);
@@ -2691,7 +2856,7 @@ function toPosixPath(p) {
 function samePlatformPath(a, b) {
   if (!a || !b) return false;
   const norm = (p) => {
-    const s = toPosixPath(path2.resolve(p));
+    const s = toPosixPath(path4.resolve(p));
     return process.platform === "win32" ? s.toLowerCase() : s;
   };
   return norm(a) === norm(b);
@@ -2764,8 +2929,16 @@ var LAUNCHER_TEMPLATE = [
   "//   4. node_modules/heyspex up from $__ENV__, $CLAUDE_PROJECT_DIR, $CURSOR_PROJECT_DIR, cwd",
   "//   5. <npm root -g>/heyspex                    a global install, last resort",
   "// Nothing found -> one stderr line and exit 0 (fail-open, like the shim itself).",
+  "//",
+  "// The same resolution starts the package's other entrypoints, so no committed",
+  "// file names node_modules/heyspex directly and a repo with no node_modules of",
+  "// its own still works off a global install:",
+  "//   --mcp         the stdio MCP server          (.mcp.json, .cursor/mcp.json)",
+  "//   --statusline  the Claude Code status line   (statusLine.command)",
+  "//   --resolve     print the package root, exit 0; exit 1 when none (hs doctor)",
   "import { spawnSync } from 'node:child_process';",
-  "import { existsSync } from 'node:fs';",
+  "import { existsSync, readdirSync, readFileSync, realpathSync } from 'node:fs';",
+  "import { homedir } from 'node:os';",
   "import { dirname, resolve } from 'node:path';",
   "import { fileURLToPath, pathToFileURL } from 'node:url';",
   "",
@@ -2775,6 +2948,7 @@ var LAUNCHER_TEMPLATE = [
   "const text = (v) => (typeof v === 'string' && v.trim() ? v.trim() : null);",
   "const hasShim = (root) => Boolean(root) && existsSync(resolve(root, ...SHIM));",
   "",
+  "__YIELD__",
   "function packageUpFrom(start) {",
   "  let dir = resolve(start);",
   "  for (;;) {",
@@ -2809,31 +2983,109 @@ var LAUNCHER_TEMPLATE = [
   "  if (hasShim(global)) root = global;",
   "}",
   "",
+  "const ENTRYPOINTS = {",
+  "  '--mcp': 'vendor/heyspex-mcp/cli.mjs',",
+  "  '--statusline': 'scripts/claude-statusline/statusline-command.mjs',",
+  "};",
+  "const mode = process.argv[2];",
+  "const entry = Object.hasOwn(ENTRYPOINTS, mode) ? ENTRYPOINTS[mode] : null;",
+  "",
   "if (!root) {",
+  "  const what = entry || mode === '--resolve' ? mode : 'hook ' + (mode ?? '?');",
   "  process.stderr.write(",
-  "    '[heyspex] hook ' + (process.argv[2] ?? '?') + ' skipped: no heyspex package found ' +",
-  `      '(run "npm install heyspex" in this repo, or set HEYSPEX_PLATFORM_ROOT). Looked for __SHIM__ under ' +`,
-  "      'HEYSPEX_PLATFORM_ROOT, HEYSPEX_MCP_ENTRY, node_modules/heyspex up from ' + starts.join(', ') + ', and npm root -g.\\n',",
+  "    '[heyspex] ' + what + ' skipped: no heyspex package found ' +",
+  `      '(run "npm install heyspex" or "npm link heyspex" in this repo, install it globally, or set HEYSPEX_PLATFORM_ROOT). ' +`,
+  "      'Looked for __SHIM__ under HEYSPEX_PLATFORM_ROOT, HEYSPEX_MCP_ENTRY, node_modules/heyspex up from ' + starts.join(', ') + ', and npm root -g.\\n',",
   "  );",
+  "  // Hooks and the status line fail open; the MCP server and --resolve fail",
+  "  // loudly, so the client and hs doctor both see it.",
+  "  process.exit(mode === '--mcp' || mode === '--resolve' ? 1 : 0);",
+  "}",
+  "if (mode === '--resolve') {",
+  "  process.stdout.write(root + '\\n');",
   "  process.exit(0);",
   "}",
   "",
   "// argv is already [node, <this file>, <hook>, ...args] -- the shape the shim",
-  '// reads; the shim path replaces this file so a shim guarded by "am I main?"',
-  "// (the Cursor one) runs exactly as if Cursor had invoked it directly.",
-  "const shim = resolve(root, ...SHIM);",
-  "process.argv[1] = shim;",
+  '// reads; the target replaces this file so a script guarded by "am I main?"',
+  "// runs exactly as if it had been invoked directly. Real path, so that guard",
+  "// still matches when node_modules/heyspex is an npm link or a junction (node",
+  "// realpaths import.meta.url but leaves argv[1] alone).",
+  "let target = resolve(root, ...(entry ? entry.split('/') : SHIM));",
+  "try {",
+  "  target = realpathSync(target);",
+  "} catch {",
+  "  // keep the resolved path",
+  "}",
+  "if (entry) process.argv.splice(2, 1);",
+  "process.argv[1] = target;",
   "try {",
-  "  await import(pathToFileURL(shim).href);",
+  "  await import(pathToFileURL(target).href);",
   "} catch (err) {",
-  "  process.stderr.write('[heyspex] hook ' + (process.argv[2] ?? '?') + ' skipped: ' + (err && err.message ? err.message : err) + '\\n');",
+  "  process.stderr.write('[heyspex] ' + (entry ? mode : 'hook ' + (process.argv[2] ?? '?')) + ' skipped: ' + (err && err.message ? err.message : err) + '\\n');",
+  "  // Hooks and the status line fail open; the MCP server fails loudly.",
+  "  if (mode === '--mcp') process.exit(1);",
   "  process.exit(0);",
   "}",
   ""
 ].join("\n");
+var LAUNCHER_YIELD_MARKER = "// yields-to-plugin: v1";
+var LAUNCHER_YIELD_BLOCK = [
+  LAUNCHER_YIELD_MARKER + " -- one source of hooks: when the heyspex plugin is enabled on this machine",
+  "// its own launcher (plugins/heyspex/bin/run-hook.mjs, which never calls this file) already runs every",
+  "// hook, so this committed row exits 0 silently before resolving anything and each hook fires ONCE.",
+  "//   HEYSPEX_REPO_HOOKS=1                      never yield (the repo rows are the chosen source);",
+  `//   enabledPlugins["heyspex@..."] === false    in ~/.claude/settings.json or this repo's .claude/`,
+  "//                                             settings[.local].json: plugin off here, the row runs;",
+  "//   plugin evidence (what `hs doctor` hook-double-fire reads): a heyspex@... key in",
+  "//     ~/.claude/plugins/installed_plugins.json, enabledPlugins naming heyspex with a non-false",
+  "//     value, or a heyspex directory under ~/.copilot/installed-plugins | ~/.copilot/plugins.",
+  "function readJson(file) {",
+  "  try { return JSON.parse(readFileSync(file, 'utf8')); } catch { return undefined; }",
+  "}",
+  "function listDir(dir) {",
+  "  try { return readdirSync(dir); } catch { return []; }",
+  "}",
+  "function pluginTakesThisHook() {",
+  "  const flag = text(env.HEYSPEX_REPO_HOOKS);",
+  "  if (flag && flag !== '0' && flag.toLowerCase() !== 'false') return false;",
+  "  const home = homedir();",
+  "  const repo = resolve(here, '..', '..');",
+  "  const isHeyspex = (k) => /^heyspex(@|$)/i.test(k);",
+  "  let enabled = false;",
+  "  for (const f of [resolve(home, '.claude', 'settings.json'), resolve(repo, '.claude', 'settings.json'), resolve(repo, '.claude', 'settings.local.json')]) {",
+  "    const settings = readJson(f);",
+  "    const ep = settings && typeof settings === 'object' ? settings.enabledPlugins : null;",
+  "    if (!ep || typeof ep !== 'object') continue;",
+  "    for (const [k, v] of Object.entries(ep)) {",
+  "      if (!isHeyspex(k)) continue;",
+  "      if (v === false) return false;",
+  "      enabled = true;",
+  "    }",
+  "  }",
+  "  if (enabled) return true;",
+  "  const installed = readJson(resolve(home, '.claude', 'plugins', 'installed_plugins.json'));",
+  "  if (installed && typeof installed === 'object' && Object.keys(installed.plugins && typeof installed.plugins === 'object' ? installed.plugins : installed).some(isHeyspex)) return true;",
+  "  for (const sub of ['installed-plugins', 'plugins']) {",
+  "    const dir = resolve(home, '.copilot', sub);",
+  "    const names = listDir(dir);",
+  "    if (names.some((n) => /heyspex/i.test(n))) return true;",
+  "    if (names.some((n) => listDir(resolve(dir, n)).some((m) => /heyspex/i.test(m)))) return true;",
+  "  }",
+  "  return false;",
+  "}",
+  "// Only a HOOK EVENT yields: --mcp / --statusline / --resolve and an agent-run",
+  "// `<script> --directive <key>` fetch are not hook events the plugin could run in",
+  "// our place, so they always go on to the package below.",
+  "const yieldMode = process.argv[2];",
+  "const notAHookEvent = ['--mcp', '--statusline', '--resolve'].includes(yieldMode) || process.argv.includes('--directive');",
+  "if (!notAHookEvent && pluginTakesThisHook()) process.exit(0);",
+  "",
+  ""
+].join("\n");
 function renderCustomerLauncher(surface = "claude") {
   const l = CUSTOMER_LAUNCHERS[surface];
-  return LAUNCHER_TEMPLATE.replace(
+  return LAUNCHER_TEMPLATE.replace("__YIELD__\n", surface === "claude" ? LAUNCHER_YIELD_BLOCK : "").replace(
     /__(REGISTRY|ENV|LAUNCHER|SHIM)__/g,
     (_m, token) => token === "REGISTRY" ? l.registry : token === "ENV" ? l.projectDirEnv : token === "LAUNCHER" ? l.rel.join("/") : l.shim
   );
@@ -2965,7 +3217,7 @@ var SCRIPT_VERBS = Object.freeze({
 });
 var PORTABLE_PACKAGE_DIR = "node_modules/heyspex";
 var fsDeps = {
-  joinPath: (...s) => path2.join(...s),
+  joinPath: (...s) => path4.join(...s),
   readFile: (p) => {
     try {
       return fs.readFileSync(p, "utf8");
@@ -2984,22 +3236,22 @@ var fsDeps = {
 function invokedDirectly(importMetaUrl, selfBasename, argv1 = process.argv[1]) {
   try {
     if (!argv1) return false;
-    const self = fileURLToPath2(importMetaUrl);
-    if (path2.basename(self) !== selfBasename) return false;
-    return pathToFileURL(path2.resolve(argv1)).href === pathToFileURL(self).href;
+    const self = fileURLToPath3(importMetaUrl);
+    if (path4.basename(self) !== selfBasename) return false;
+    return pathToFileURL(path4.resolve(argv1)).href === pathToFileURL(self).href;
   } catch {
     return false;
   }
 }
-var SELF = fileURLToPath2(import.meta.url);
+var SELF = fileURLToPath3(import.meta.url);
 if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
-  const platformRoot = path2.resolve(path2.dirname(SELF), "..", "..");
-  const target = path2.join(platformRoot, "plugins", "heyspex", "hooks", "hooks.json");
+  const platformRoot = path4.resolve(path4.dirname(SELF), "..", "..");
+  const target = path4.join(platformRoot, "plugins", "heyspex", "hooks", "hooks.json");
   const want = renderPluginHooksText();
   const same = (fsDeps.readFile(target) ?? "").replace(/\r\n/g, "\n") === want;
   if (process.argv.includes("--write-plugin-hooks")) {
     if (!same) fs.writeFileSync(target, want, "utf8");
-    console.log(`customer-kit: ${same ? "unchanged" : "wrote"} ${path2.relative(platformRoot, target)}`);
+    console.log(`customer-kit: ${same ? "unchanged" : "wrote"} ${path4.relative(platformRoot, target)}`);
   } else if (process.argv.includes("--check-plugin-hooks")) {
     if (!same) {
       console.error("customer-kit: plugins/heyspex/hooks/hooks.json is stale \u2014 run `node scripts/lib/customer-kit.mjs --write-plugin-hooks`");
@@ -3007,15 +3259,15 @@ if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
     }
     console.log("customer-kit: plugins/heyspex/hooks/hooks.json up to date");
   } else if (process.argv.includes("--write-github-hooks") || process.argv.includes("--check-github-hooks")) {
-    const ghTarget = path2.join(platformRoot, ".github", "hooks", "heyspex.json");
+    const ghTarget = path4.join(platformRoot, ".github", "hooks", "heyspex.json");
     const ghWant = renderGithubHooksText();
     const ghSame = (fsDeps.readFile(ghTarget) ?? "").replace(/\r\n/g, "\n") === ghWant;
     if (process.argv.includes("--write-github-hooks")) {
       if (!ghSame) {
-        fs.mkdirSync(path2.dirname(ghTarget), { recursive: true });
+        fs.mkdirSync(path4.dirname(ghTarget), { recursive: true });
         fs.writeFileSync(ghTarget, ghWant, "utf8");
       }
-      console.log(`customer-kit: ${ghSame ? "unchanged" : "wrote"} ${path2.relative(platformRoot, ghTarget).replace(/\\/g, "/")}`);
+      console.log(`customer-kit: ${ghSame ? "unchanged" : "wrote"} ${path4.relative(platformRoot, ghTarget).replace(/\\/g, "/")}`);
     } else if (!ghSame) {
       console.error("customer-kit: .github/hooks/heyspex.json is stale - run `node scripts/lib/customer-kit.mjs --write-github-hooks`");
       process.exit(1);
@@ -3028,9 +3280,9 @@ if (invokedDirectly(import.meta.url, "customer-kit.mjs")) {
 }
 
 // scripts/install-cursor-hooks.mjs
-var PLATFORM_ROOT = path3.resolve(path3.dirname(fileURLToPath3(import.meta.url)), "..");
-var REPO_ROOT = process.env.HS_SETUP_TARGET?.trim() ? path3.resolve(process.env.HS_SETUP_TARGET.trim()) : PLATFORM_ROOT;
-var SETTINGS_PATH = path3.join(REPO_ROOT, ".cursor", "hooks.json");
+var PLATFORM_ROOT = path5.resolve(path5.dirname(fileURLToPath4(import.meta.url)), "..");
+var REPO_ROOT = process.env.HS_SETUP_TARGET?.trim() ? path5.resolve(process.env.HS_SETUP_TARGET.trim()) : PLATFORM_ROOT;
+var SETTINGS_PATH = path5.join(REPO_ROOT, ".cursor", "hooks.json");
 function cursorKitFor(targetRoot, platformRoot = PLATFORM_ROOT) {
   const customer = !samePlatformPath(targetRoot, platformRoot);
   return {
@@ -3042,7 +3294,7 @@ function cursorKitFor(targetRoot, platformRoot = PLATFORM_ROOT) {
 }
 var KIT = cursorKitFor(REPO_ROOT);
 var ACTIVE_HOOKS = KIT.hooks;
-var LAUNCHER_PATH = path3.join(REPO_ROOT, ...CUSTOMER_LAUNCHERS.cursor.rel);
+var LAUNCHER_PATH = path5.join(REPO_ROOT, ...CUSTOMER_LAUNCHERS.cursor.rel);
 var LEGACY_MARKER = "scripts/claude-hooks/";
 function readSettings() {
   try {
@@ -3061,7 +3313,7 @@ function readSettings() {
   return { version: 1, hooks: {} };
 }
 function writeSettings(settings) {
-  fs2.mkdirSync(path3.dirname(SETTINGS_PATH), { recursive: true });
+  fs2.mkdirSync(path5.dirname(SETTINGS_PATH), { recursive: true });
   fs2.writeFileSync(SETTINGS_PATH, `${JSON.stringify(settings, null, 2)}
 `, "utf8");
 }
@@ -3096,7 +3348,7 @@ function sameEntry(raw, entry, render = KIT.commandFor) {
   const want = desiredEntry(entry, render);
   return commandOf(raw) === want.command && raw.timeout === want.timeout && (raw.matcher ?? void 0) === (want.matcher ?? void 0);
 }
-var PLUGIN_HOOKS_PATH = path3.join(REPO_ROOT, "plugins", "heyspex", "hooks", "cursor-hooks.json");
+var PLUGIN_HOOKS_PATH = path5.join(REPO_ROOT, "plugins", "heyspex", "hooks", "cursor-hooks.json");
 function pluginHooksDocument() {
   const hooks = {};
   for (const entry of HOOKS) {
@@ -3126,7 +3378,7 @@ function syncPluginHooks() {
     have = null;
   }
   if (have === want) return false;
-  fs2.mkdirSync(path3.dirname(PLUGIN_HOOKS_PATH), { recursive: true });
+  fs2.mkdirSync(path5.dirname(PLUGIN_HOOKS_PATH), { recursive: true });
   fs2.writeFileSync(PLUGIN_HOOKS_PATH, want, "utf8");
   return true;
 }
@@ -3199,7 +3451,7 @@ function install({ json = false } = {}) {
   if (KIT.customer) {
     const plan = launcherPlan();
     if (plan.write) {
-      fs2.mkdirSync(path3.dirname(LAUNCHER_PATH), { recursive: true });
+      fs2.mkdirSync(path5.dirname(LAUNCHER_PATH), { recursive: true });
       fs2.writeFileSync(LAUNCHER_PATH, plan.text, "utf8");
       launcherWritten = true;
     }
@@ -3226,10 +3478,10 @@ function install({ json = false } = {}) {
     return;
   }
   if (pluginChanged) {
-    console.log(`install-cursor-hooks: regenerated ${path3.relative(REPO_ROOT, PLUGIN_HOOKS_PATH)}`);
+    console.log(`install-cursor-hooks: regenerated ${path5.relative(REPO_ROOT, PLUGIN_HOOKS_PATH)}`);
   }
   if (launcherWritten) {
-    console.log(`install-cursor-hooks: wrote ${path3.relative(REPO_ROOT, LAUNCHER_PATH)} (resolves node_modules/heyspex)`);
+    console.log(`install-cursor-hooks: wrote ${path5.relative(REPO_ROOT, LAUNCHER_PATH)} (resolves node_modules/heyspex)`);
   }
   if (!settingsChanged) {
     console.log(`install-cursor-hooks: already installed (${ACTIVE_HOOKS.length} hooks, no changes).`);
@@ -3240,7 +3492,7 @@ function install({ json = false } = {}) {
   if (repaired.length) parts.push(`repaired ${repaired.length}`);
   if (removed.length) parts.push(`removed ${removed.length}`);
   console.log(
-    `install-cursor-hooks: ${parts.join("; ")} \u2192 ${path3.relative(REPO_ROOT, SETTINGS_PATH)} (${ACTIVE_HOOKS.length} hooks registered)`
+    `install-cursor-hooks: ${parts.join("; ")} \u2192 ${path5.relative(REPO_ROOT, SETTINGS_PATH)} (${ACTIVE_HOOKS.length} hooks registered)`
   );
   for (const line of removed) console.log(`  - ${line}`);
   console.log(
@@ -3342,30 +3594,26 @@ if (invokedDirectly(import.meta.url, "install-cursor-hooks.mjs")) {
 init_credentials();
 
 // spex-console/src/lib/cli/connect-checks.ts
-import { dirname as dirname5 } from "node:path";
+import { dirname as dirname6 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 
 // spex-console/src/lib/dev-mode.ts
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync12, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join10 } from "node:path";
 init_credentials();
 
 // spex-console/src/lib/cli/connect-checks.ts
 init_credentials();
 
-// spex-console/src/lib/cli/satellite.ts
-import { resolve as resolveNodePath } from "node:path";
-import process2 from "node:process";
-
 // spex-console/src/lib/cli/principle-selection.ts
-import { basename as basename3 } from "node:path";
+import { basename as basename4 } from "node:path";
 var PRINCIPLES_INDEX_DEST = "specs/principles-index.md";
 function principleKey(row) {
-  const base = basename3(row.dest, ".md");
+  const base = basename4(row.dest, ".md");
   return base.startsWith("principle-") ? base.slice("principle-".length) : base;
 }
 function principleWikilink(row) {
-  return basename3(row.dest, ".md");
+  return basename4(row.dest, ".md");
 }
 function parsePrinciplesFlag(value, rows) {
   const principleRows = rows.filter((row) => row.group === "principle");
@@ -3441,24 +3689,28 @@ var ALL_FIELDS = [
 ];
 
 // spex-console/src/lib/cli/vault-workspace-shared.ts
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync13 } from "node:fs";
 
 // spex-console/src/lib/indexer/parser.ts
 var import_gray_matter = __toESM(require_gray_matter(), 1);
 import { createHash as createHash2 } from "node:crypto";
 import { promises as fs3 } from "node:fs";
-import path4 from "node:path";
+import path6 from "node:path";
 
 // spex-console/src/lib/cli/install.ts
 var MCP_REL = ["vendor", "heyspex-mcp", "cli.mjs"];
 var PORTABLE_MCP_CLI = Object.freeze({
+  claude: `\${CLAUDE_PROJECT_DIR:-.}/${CUSTOMER_LAUNCHERS.claude.rel.join("/")}`,
+  cursor: `\${workspaceFolder}/${CUSTOMER_LAUNCHERS.cursor.rel.join("/")}`
+});
+var LEGACY_PORTABLE_MCP_CLI = Object.freeze({
   claude: `\${CLAUDE_PROJECT_DIR:-.}/${PORTABLE_PACKAGE_DIR}/${MCP_REL.join("/")}`,
   cursor: `\${workspaceFolder}/${PORTABLE_PACKAGE_DIR}/${MCP_REL.join("/")}`
 });
 function resolveCallerPath(p, env, fallbackCwd) {
   const trimmed = p?.trim() ?? "";
   if (!trimmed) return "";
-  if (isAbsolute3(trimmed)) return trimmed;
+  if (isAbsolute4(trimmed)) return trimmed;
   const base = env.HS_INVOKED_CWD?.trim() || fallbackCwd;
   return resolveNodePath2(base, trimmed);
 }
@@ -3473,7 +3725,6 @@ var WRITE_TARGET_KIND = {
   claudeMcp: "claude_mcp",
   claudeMd: "claude_md",
   agentsMd: "agents_md",
-  statuslineVendor: "statusline_vendor",
   gitignore: "gitignore",
   claudeMdTemplate: "claude_md_template",
   agentsMdTemplate: "agents_md_template"
@@ -3530,12 +3781,6 @@ var INSTALL_WRITE_TARGETS = [
     path: (targetDir, joinPath) => joinPath(targetDir, "AGENTS.md.template"),
     appliesTo: (args, opts) => Boolean(args.registerVault) && !opts.attached && opts.installContract
   },
-  {
-    kind: WRITE_TARGET_KIND.statuslineVendor,
-    rel: "scripts/claude-statusline",
-    path: (targetDir, joinPath) => joinPath(targetDir, "scripts", "claude-statusline"),
-    appliesTo: (args) => (args.statusline ?? true) && args.claude
-  },
   {
     kind: WRITE_TARGET_KIND.gitignore,
     rel: ".gitignore",
@@ -3696,13 +3941,13 @@ function runEntry(name, main2, options2 = {}) {
 
 // spex-console/bin/hs-init.ts
 var INTERACTIVE = process4.stdin.isTTY === true;
-var PKG_ROOT = resolve5(
-  resolveCodeRoot({ packageRoot: resolve5(dirname6(fileURLToPath4(import.meta.url)), "..", "..") })
+var PKG_ROOT = resolve6(
+  resolveCodeRoot({ packageRoot: resolve6(dirname7(fileURLToPath5(import.meta.url)), "..", "..") })
 );
 var CONFIG_SEED_PATH = join11(PKG_ROOT, "vendor", "heyspex-mcp", "config-seed.yaml");
 function readConfigSeed() {
   try {
-    return readFileSync11(CONFIG_SEED_PATH, "utf8");
+    return readFileSync14(CONFIG_SEED_PATH, "utf8");
   } catch {
     process4.stderr.write(
       `hs init: warning \u2014 config seed template not found at ${CONFIG_SEED_PATH}; .heyspex/config.yaml was not seeded (run \`hs settings set <key> <value>\` to create it).
@@ -3736,7 +3981,7 @@ async function resolvePrincipleSelection(principlesFlag) {
   return parsePrinciplesFlag(void 0, TEMPLATE_MANIFEST);
 }
 async function main() {
-  const repoRoot = process4.env.HS_VAULT_ROOT ? resolve5(process4.env.HS_VAULT_ROOT) : process4.cwd();
+  const repoRoot = process4.env.HS_VAULT_ROOT ? resolve6(process4.env.HS_VAULT_ROOT) : process4.cwd();
   const parsed = parseInitArgs(process4.argv.slice(3));
   if (parsed.help) {
     process4.stdout.write(`${HELP}
@@ -3752,28 +3997,29 @@ async function main() {
   }
   const args = parsed.args;
   if (args.customerVaultDir) {
-    const here = dirname6(fileURLToPath4(import.meta.url));
-    const platformRoot = resolve5(here, "..", "..");
-    const targetDir = resolve5(resolveCallerPath(args.customerVaultDir, process4.env, process4.cwd()));
+    const here = dirname7(fileURLToPath5(import.meta.url));
+    const platformRoot = resolve6(here, "..", "..");
+    const targetDir = resolve6(resolveCallerPath(args.customerVaultDir, process4.env, process4.cwd()));
+    const eol = createGeneratedFileEol({ repoRoot: targetDir });
     const deps = {
       platformRoot,
-      exists: (p) => existsSync5(p),
+      exists: (p) => existsSync8(p),
       readdir: (p) => readdirSync2(p),
       mkdirRecursive: (p) => {
-        mkdirSync6(p, { recursive: true });
+        mkdirSync7(p, { recursive: true });
       },
-      writeFile: (p, c) => writeFileSync6(p, c, "utf8"),
-      copyFile: (src, dest) => copyFileSync(src, dest),
+      writeFile: (p, c) => writeFileSync7(p, eol.convert(p, c), "utf8"),
+      copyFile: (src, dest) => copyFileSync2(src, dest),
       joinPath: (...s) => join11(...s),
       readConfigSeed,
       readFile: (p) => {
         try {
-          return readFileSync11(p, "utf8");
+          return readFileSync14(p, "utf8");
         } catch {
           return null;
         }
       },
-      isDirectory: (p) => statSync(p).isDirectory()
+      isDirectory: (p) => statSync5(p).isDirectory()
     };
     const principlesResult = await resolvePrincipleSelection(args.principles);
     if (!principlesResult.ok) {
@@ -3811,20 +4057,21 @@ async function main() {
     process4.exitCode = result2.code;
     return;
   }
+  const repoEol = createGeneratedFileEol({ repoRoot });
   const result = runInit(args, {
     repoRoot,
-    fileExists: (p) => existsSync5(p),
+    fileExists: (p) => existsSync8(p),
     readFile: (p) => {
       try {
-        return readFileSync11(p, "utf8");
+        return readFileSync14(p, "utf8");
       } catch {
         return null;
       }
     },
-    writeFile: (p, c) => writeFileSync6(p, c, "utf8"),
+    writeFile: (p, c) => writeFileSync7(p, repoEol.convert(p, c), "utf8"),
     joinPath: (...s) => join11(...s),
     mkdirRecursive: (p) => {
-      mkdirSync6(p, { recursive: true });
+      mkdirSync7(p, { recursive: true });
     },
     readConfigSeed
   });