honestweek 0.2.0 → 0.3.0

package/lib/preview.mjs

@@ -18,11 +18,13 @@ import { spawn } from 'node:child_process';
 import { createHash } from 'node:crypto';
 
 import { loadConfig, DEFAULT_OUTPUT_FILES } from './config.mjs';
+import { commandConfig } from './config-lookup.mjs';
 import { isLoopbackHost } from './loopback-host.mjs';
 import { systemProgram } from './windows-root.mjs';
 import { SCRIPT as PAGE_SCRIPT } from './emit/page.mjs';
 import { SCRIPT as GOALS_SCRIPT } from './emit/goals-page.mjs';
 import { SCRIPT as CLIENT_SCRIPT } from './emit/client.mjs';
+import { currentCommand } from './invocation.mjs';
 
 // The only inline scripts an HTML preview may run: the fixed ones honestweek's own
 // HTML emitters write (the report page, the goals page, the client report). Each is
@@ -34,6 +36,9 @@ export const HTML_PAGE_CSP = `default-src 'none'; style-src 'unsafe-inline'; scr
 
 const CONFIG_FILE = 'honestweek.config.json';
 const LOOPBACK = '127.0.0.1';
+// preview has no key, so it stops on its own once nobody has opened it for this long.
+export const IDLE_STOP_MS = 30 * 60 * 1000;
+const SYSTEM_TIMERS = { setTimeout, clearTimeout };
 
 function defaultIo() {
   return {
@@ -289,9 +294,11 @@ export function defaultOpener(url, { platform = process.platform, env = process.
  * that ENFORCES the "no external resources" promise. By default it serves `html`
  * at `/`; pass `routes` (a `{ '<path>': html }` map) to serve MULTIPLE pages (the
  * standalone report + goals pair), each under the same CSP. Every other path 404s.
- * Resolves once listening (port 0 yields an OS-assigned free port).
+ * Resolves once listening (port 0 yields an OS-assigned free port). With `idleMs`, it closes
+ * itself that long after the last page it served (or after starting, with none) and then calls
+ * `onIdle`; `timers` replaces setTimeout and clearTimeout for tests.
  */
-export function startServer({ host = LOOPBACK, port = 0, html = '', csp = "default-src 'none'; style-src 'unsafe-inline'", routes = null } = {}) {
+export function startServer({ host = LOOPBACK, port = 0, html = '', csp = "default-src 'none'; style-src 'unsafe-inline'", routes = null, idleMs = 0, onIdle = () => {}, timers = SYSTEM_TIMERS } = {}) {
   // The path -> body table. A single-file preview is just the one '/' route, so the
   // multi-page and single-page paths share exactly one serving codepath.
   const table = routes && typeof routes === 'object' ? routes : { '/': html };
@@ -313,6 +320,20 @@ export function startServer({ host = LOOPBACK, port = 0, html = '', csp = "defau
     res.end(`${msg}\n`);
   };
   return new Promise((resolve, reject) => {
+    let idle = null;
+    const stopIdle = () => {
+      idle = null;
+      server.closeAllConnections?.();
+      server.close(() => onIdle());
+    };
+    // Only a page it serves counts as a visit and restarts the wait. A refused request (another
+    // host, a method it doesn't take, a path it doesn't have) doesn't.
+    const arm = () => {
+      if (!idleMs) return;
+      if (idle !== null) timers.clearTimeout(idle);
+      idle = timers.setTimeout(stopIdle, idleMs);
+      idle?.unref?.();
+    };
     const server = createServer((req, res) => {
       const method = req.method || 'GET';
       if (method !== 'GET' && method !== 'HEAD') return fail(res, 405, '405 method not allowed', { Allow: 'GET, HEAD' });
@@ -320,6 +341,7 @@ export function startServer({ host = LOOPBACK, port = 0, html = '', csp = "defau
       if (!isLoopbackHost(req.headers.host, server.address()?.port, host)) return fail(res, 403, '403 this server answers only 127.0.0.1 and localhost');
       const path = (req.url || '/').split('?')[0];
       if (!Object.prototype.hasOwnProperty.call(table, path)) return fail(res, 404, '404 not found');
+      arm();
       res.writeHead(200, headers('text/html; charset=utf-8'));
       res.end(method === 'HEAD' ? undefined : table[path]);
     });
@@ -327,12 +349,18 @@ export function startServer({ host = LOOPBACK, port = 0, html = '', csp = "defau
     server.listen({ host, port }, () => {
       const addr = server.address();
       const boundPort = addr && typeof addr === 'object' ? addr.port : port;
+      arm();
       resolve({
         server,
         url: `http://${host}:${boundPort}/`,
         port: boundPort,
         host,
-        close: () => new Promise((r) => server.close(() => r())),
+        close: () =>
+          new Promise((r) => {
+            if (idle !== null) timers.clearTimeout(idle);
+            idle = null;
+            server.close(() => r());
+          }),
       });
     });
   });
@@ -354,7 +382,7 @@ function parseValued(argv, name) {
 const HELP = `honestweek preview: serve the built output as HTML on a local-only server.
 
 Usage:
-  honestweek preview [--file <path>] [--port <n>] [--no-open]
+  ${currentCommand()} preview [--file <path>] [--config <file>] [--port <n>] [--no-open]
 
 Reads what build wrote (config.output.file, or --file <path>). A Markdown output
 is converted to a self-contained HTML page; the standalone "page" mode already
@@ -364,8 +392,11 @@ both pages are served so their cross-links resolve. Either way it is served on
 127.0.0.1 (loopback only) under a no-external-egress CSP. Nothing is published and
 nothing leaves your machine.
 
+It stops on its own after 30 minutes with no visits. Run it again to see the page.
+
 Options:
   --file <path>  Preview this Markdown file instead of the configured output.file.
+  --config <file>  Read this config instead of the one honestweek finds.
   --port <n>     Bind this port (default: an OS-assigned free port).
   --no-open      Do not launch a browser; just print the URL.
   -h, --help     Show this help.
@@ -376,9 +407,10 @@ Options:
  *
  * 0 on success; 1 on a setup error (no config + no --file, output file absent,
  * bad --port, port in use). It NEVER returns 2 — preview renders, it never
- * judges. When `block` is true (the CLI default) it serves until Ctrl-C. Tests
- * pass `block: false` (and read the live handle via `onServe`) so they never
- * enter the blocking serve loop.
+ * judges. When `block` is true (the CLI default) it serves until Ctrl-C, or until
+ * `idleMs` (30 minutes) pass with no request. Tests pass `block: false` (and read
+ * the live handle via `onServe`) so they never enter the blocking serve loop, and
+ * `timers` to run the idle stop without waiting.
  */
 export async function runPreview({
   cwd = process.cwd(),
@@ -389,6 +421,8 @@ export async function runPreview({
   env = process.env,
   block = true,
   onServe,
+  idleMs = IDLE_STOP_MS,
+  timers = SYSTEM_TIMERS,
 } = {}) {
   if (argv.includes('--help') || argv.includes('-h')) {
     io.out(HELP);
@@ -402,9 +436,16 @@ export async function runPreview({
   if (fileArg) {
     mdPath = isAbsolute(fileArg) ? fileArg : join(cwd, fileArg);
   } else {
+    // The configured output sits beside the config, wherever the lookup found it.
+    const opened = commandConfig({ command: 'preview', cwd, argv, err: io.err, writes: false });
+    if (opened.error) {
+      io.err(`preview: ${opened.error}\n`);
+      return io.exit(1) ?? 1;
+    }
+    cwd = opened.cwd;
     let config;
     try {
-      config = loadConfig(join(cwd, CONFIG_FILE));
+      config = loadConfig(opened.found.path);
     } catch (err) {
       io.err(`preview: ${err.message}\n`);
       io.err(`preview: no ${CONFIG_FILE} to read output.file from. Run init, or pass --file <path>.\n`);
@@ -416,7 +457,7 @@ export async function runPreview({
   }
 
   if (!existsSync(mdPath)) {
-    io.err(`preview: output file not found at ${mdPath}. Run \`honestweek build\` first (or pass --file <path>).\n`);
+    io.err(`preview: output file not found at ${mdPath}. Run \`${currentCommand()} build\` first (or pass --file <path>).\n`);
     return io.exit(1) ?? 1;
   }
 
@@ -466,9 +507,16 @@ export async function runPreview({
     }
   }
 
+  const minutes = Math.round(idleMs / 60000);
+  const idleWords = `${minutes} minute${minutes === 1 ? '' : 's'}`;
+  let finish = () => {};
+  const onIdle = () => {
+    io.out(`\nhonestweek preview: stopped after ${idleWords} with no visits. Run it again to see the page.\n`);
+    finish();
+  };
   let handle;
   try {
-    handle = await startServer({ host: LOOPBACK, port, html, csp, routes });
+    handle = await startServer({ host: LOOPBACK, port, html, csp, routes, idleMs, onIdle, timers });
   } catch (err) {
     if (err && err.code === 'EADDRINUSE') {
       io.err(`preview: port ${port} is already in use. Omit --port to pick a free one, or choose another.\n`);
@@ -481,7 +529,7 @@ export async function runPreview({
   io.out(
     `honestweek preview: serving ${mdPath} at ${handle.url}` +
       (routes ? ` (+ ${handle.url}goals.html)` : '') +
-      ` (press Ctrl+C to stop).\n`
+      (idleMs > 0 ? ` (press Ctrl+C to stop; it stops on its own after ${idleWords} with no visits).\n` : ` (press Ctrl+C to stop).\n`)
   );
   if (typeof onServe === 'function') onServe(handle);
   if (!noOpen) opener(handle.url, { platform, env });
@@ -489,12 +537,17 @@ export async function runPreview({
   if (!block) return 0;
 
   await new Promise((resolve) => {
-    process.once('SIGINT', () => {
+    const onSigint = () => {
       handle.close().then(() => {
         io.out('\nhonestweek preview: stopped.\n');
         resolve();
       });
-    });
+    };
+    finish = () => {
+      process.removeListener('SIGINT', onSigint);
+      resolve();
+    };
+    process.once('SIGINT', onSigint);
   });
   return 0;
 }

package/lib/private-words.mjs

@@ -10,22 +10,42 @@
 //
 // Zero runtime dependencies.
 
+/** Whether a listed word is one the redactor uses: a blank one hides nothing. */
+export const isUsedWord = (t) => typeof t === 'string' && t.trim() !== '';
+
+const used = (list) => (Array.isArray(list) ? list.filter(isUsedWord).length : 0);
+
 /** How many private words a config lists: its redaction names, terms and codenames, counting
  *  only the entries the redactor uses (a blank one hides nothing). */
 export function privateWordCount(config) {
   const r = config?.redaction ?? {};
-  const used = (list) => (Array.isArray(list) ? list.filter((t) => typeof t === 'string' && t.trim()).length : 0);
   return ['names', 'terms', 'codenames'].reduce((n, k) => n + used(r[k]), 0);
 }
 
+/** How many words a config keeps out of public renditions only (neverPublicTerms). They're
+ *  left out of privateWordCount, since the private view shows them as written, but `init`
+ *  counts them with the others when it keeps them from an old config and when it says how
+ *  many words the new config lists. */
+export function neverPublicWordCount(config) {
+  return used(config?.privacy?.publicRenditions?.neverPublicTerms);
+}
+
 /**
  * The note for a config with no private words. `command` is how the person runs honestweek;
- * `restart` adds that view must be started again to pick the words up.
+ * `restart` adds that view must be started again to pick the words up. `settings` is false where
+ * Settings can't change this config (one named with --config outside the folder view started
+ * in), so the note doesn't send the person there. `publicOnly`, the count of words the config
+ * keeps out of public renditions only, says those don't hide anything either, so the note
+ * doesn't read as if the config listed none.
  */
-export function privateWordsNote(command = 'honestweek', { restart = true } = {}) {
+export function privateWordsNote(command = 'honestweek', { restart = true, settings = true, publicOnly = 0 } = {}) {
+  const opening = publicOnly
+    ? `Your config keeps ${publicOnly === 1 ? '1 word' : `${publicOnly} words`} out of public versions only, so names and client words in your logs, ${publicOnly === 1 ? 'that one' : 'those'} included, show as written in your own pages, even with Show private text off. `
+    : 'No private words are set up, so names and client words in your logs show as written, even with Show private text off. ';
+  const suggest = settings ? `open Settings in ${command} view and press "Suggest words from my sessions", or ` : '';
   return (
-    'No private words are set up, so names and client words in your logs show as written, even with Show private text off. ' +
+    opening +
     `To hide them, list them under "redaction" in honestweek.config.json, like this: "names": ["Jane Doe"], "terms": ["Acme"]${restart ? `, then start ${command} view again` : ''}. ` +
-    `For a list of candidates from last week's sessions, run ${command} discover, then ${command} harvest, and read honestweek.harvest.json.`
+    `For likely ones, ${suggest}run ${command} discover, then ${command} harvest, and read honestweek.harvest.json.`
   );
 }

package/lib/problems/index.mjs

@@ -135,18 +135,21 @@ export const PATTERN_CHECKS = Object.freeze({
 export const CLAIM_PATTERNS = Object.freeze(['unverified-done-claim', 'claim-contradicts-evidence']);
 /** The levels a finding needs to sit in the page's main list; the rest go under "Possible". */
 export const SURE = Object.freeze(['recorded', 'derived']);
-const isSure = (f) => SURE.includes(f.verdictEvidence);
+export const isSure = (f) => SURE.includes(f.verdictEvidence);
 
 const RANK = { recorded: 0, derived: 1, inferred: 2, missing: 3 };
-const weakest = (levels) => levels.filter((l) => l in RANK).sort((a, b) => RANK[b] - RANK[a])[0] ?? 'inferred';
+export const weakest = (levels) => levels.filter((l) => l in RANK).sort((a, b) => RANK[b] - RANK[a])[0] ?? 'inferred';
 const findingOrder = (x, y) => (x.severity === y.severity ? 0 : x.severity === 'look' ? -1 : 1) || (y.estimate ?? -1) - (x.estimate ?? -1) || String(y.at ?? '').localeCompare(String(x.at ?? ''));
 
 /**
- * runProblems(h, { builtT, longSessionTokens }) -> { window, catalog, groups, priorityRule, patterns, checks,
+ * runProblems(h, { builtT, longSessionTokens, saved }) -> { window, catalog, groups, priorityRule, patterns, checks,
  * coverage, rules, thresholds, ms }. Every pattern carries all its findings, best first; callers
- * trim what they show.
+ * trim what they show. `saved` maps a session that came back from saved results (lib/saved/) to
+ * the findings saved with it, which stand in for whatever the checks find in it now, and
+ * `savedStatus` each such session to the patterns' states when it was checked: a check that can't run
+ * now (no session read this run has the text it needs) counts as run when it ran then.
  */
-export function runProblems(h, { builtT = Date.now(), longSessionTokens = null } = {}) {
+export function runProblems(h, { builtT = Date.now(), longSessionTokens = null, saved = null, savedStatus = null } = {}) {
   const started = Date.now();
   const catalog = loadCatalog();
   const c = createContext(h, { builtT, longSessionTokens });
@@ -160,6 +163,18 @@ export function runProblems(h, { builtT = Date.now(), longSessionTokens = null }
   const groupName = new Map(catalog.groups.map((g) => [g.id, g.name]));
   const allTokens = c.usage.allTokens;
 
+  // Which checks of each pattern ran when the sessions that came back from saved results were checked.
+  const savedLooked = new Map();
+  for (const list of savedStatus?.values() ?? []) {
+    for (const x of Array.isArray(list) ? list : []) {
+      if (!(x?.status === 'found' || x?.status === 'clear') || !Array.isArray(x.ran)) continue;
+      if (!savedLooked.has(x.id)) savedLooked.set(x.id, new Set());
+      for (const check of x.ran) savedLooked.get(x.id).add(check);
+    }
+  }
+  // How a pattern's check counted tokens when those sessions were checked.
+  const savedCost = new Map();
+  for (const list of savedStatus?.values() ?? []) for (const x of Array.isArray(list) ? list : []) if (x?.tokens && !savedCost.has(x.id)) savedCost.set(x.id, x.tokens);
   const patterns = catalog.patterns.map((p) => {
     const measures = [];
     const found = [];
@@ -183,6 +198,26 @@ export function runProblems(h, { builtT = Date.now(), longSessionTokens = null }
         found.push({ ...f, pattern: p.id, checkTitle: r.title });
       }
     }
+    // A session that came back as saved (lib/saved/) has no raw text for the checks to read, so
+    // its findings are the ones saved with it, each with the evidence word it had then.
+    if (saved?.size) {
+      for (let i = found.length - 1; i >= 0; i -= 1) if (saved.has(found[i].session)) found.splice(i, 1);
+      for (const list of saved.values()) for (const f of list) if (f?.pattern === p.id) found.push({ ...f });
+      // Each check's own count, the same way: its findings in sessions read now, and the ones saved
+      // for the rest. A check that couldn't run now ran when those sessions were checked.
+      for (const m of measures) {
+        const r = byCheck.get(m.check);
+        const pick = PATTERN_CHECKS[p.id].find((x) => x.check === m.check);
+        const live = (pick?.filter ? r.findings.filter(pick.filter) : r.findings).filter((f) => !saved.has(f.session));
+        const kept = [...saved.values()].flat().filter((f) => f?.pattern === p.id && f.check === m.check);
+        m.count = live.length + kept.length;
+        m.look = [...live, ...kept].filter((f) => f.severity === 'look').length;
+        if (!m.ran && savedLooked.get(p.id)?.has(m.check)) {
+          m.ran = true;
+          m.notRun = null;
+        }
+      }
+    }
     found.sort(findingOrder);
     const level = p.detection?.level ?? null;
     const ran = measures.filter((m) => m.ran);
@@ -221,7 +256,7 @@ export function runProblems(h, { builtT = Date.now(), longSessionTokens = null }
       // Riding with the test prompt: a temporary change to make first, an estimate of what the
       // prompt costs, and what to look for when the fix works and when it doesn't.
       ...Object.fromEntries(['testSetup', 'testCost', 'testCostWhy', 'testExpect'].map((k) => [k, PATTERN_CHECKS[p.id] && typeof p.testPrompt === 'string' ? p[k] ?? null : null])),
-      tokens: status === 'found' || status === 'clear' ? tokens : null,
+      tokens: status === 'found' || status === 'clear' ? (saved?.size ? withSavedTokens(tokens, found, savedCost.get(p.id)) : tokens) : null,
       // The weakest level among the findings counted; with none, among the checks that ran.
       countEvidence: found.length ? weakest(found.map((f) => f.verdictEvidence)) : ran.length ? weakest(ran.map((m) => m.evidence)) : null,
       draft: DRAFTS[p.id] ?? null,
@@ -244,7 +279,9 @@ export function runProblems(h, { builtT = Date.now(), longSessionTokens = null }
   // Each check's numbers, as its card states them, and where each comes from: null for
   // honestweek's own choice, or a catalog source's address (context.mjs, NUMBERS).
   const numbersOf = (id) => (CHECKS.find((x) => x.id === id)?.numbers ?? []).map((key) => ({ key, says: NUMBERS[key].says, source: NUMBERS[key].source }));
-  const checks = results.map((r) => ({ id: r.id, title: r.title, how: r.how, evidence: r.evidence, ran: r.ran, notRun: r.notRun, checked: r.checked, stats: r.stats, cost: r.cost, findingsTotal: r.findings.length, patterns: Object.entries(PATTERN_CHECKS).filter(([, ms]) => ms.some((m) => m.check === r.id)).map(([id]) => id), numbers: numbersOf(r.id) }));
+  // A check that couldn't run now but ran on the sessions that came back from saved results says so.
+  const savedChecks = new Set([...savedLooked.values()].flatMap((x) => [...x]));
+  const checks = results.map((r) => ({ id: r.id, title: r.title, how: r.how, evidence: r.evidence, ran: r.ran, notRun: r.notRun, checked: r.checked, ...(saved?.size && !r.ran && savedChecks.has(r.id) ? { saved: { findings: [...saved.values()].flat().filter((f) => f?.check === r.id).length } } : {}), stats: r.stats, cost: r.cost, findingsTotal: r.findings.length, patterns: Object.entries(PATTERN_CHECKS).filter(([, ms]) => ms.some((m) => m.check === r.id)).map(([id]) => id), numbers: numbersOf(r.id) }));
   const statusCounts = { found: 0, clear: 0, unchecked: 0, undetectable: 0 };
   for (const p of patterns) statusCounts[p.status]++;
   return {
@@ -262,6 +299,8 @@ export function runProblems(h, { builtT = Date.now(), longSessionTokens = null }
       tokens: { value: allTokens, evidence: 'recorded' },
       usageRecorded: c.usage.liveCalls > 0,
       rawText: c.hasRaw,
+      // Sessions in the window whose findings came back from saved results, not from this run's checks.
+      ...(saved?.size ? { saved: { value: c.sessions.filter((s) => saved.has(s.key) && (c.eventsBySession.get(s.key) ?? []).some((e) => c.inWin(e.t))).length, evidence: 'derived' } } : {}),
     },
     rules: RULES,
     ruleSources: RULE_SOURCES,
@@ -277,6 +316,20 @@ export function runProblems(h, { builtT = Date.now(), longSessionTokens = null }
 const DAY_MS = 86_400_000;
 const dayOf = (s) => Date.parse(`${s}T00:00:00Z`);
 const dayText = (t) => new Date(t).toISOString().slice(0, 10);
+/**
+ * A pattern's token count once saved findings stand in for some sessions: the estimate of its
+ * findings worth a look is theirs too. When its check couldn't count tokens now (no session read
+ * this run has what it needs), the count is the sum of its findings' estimates, counted the way
+ * the check counted them when those sessions were checked.
+ */
+function withSavedTokens(tokens, found, meta) {
+  const est = (list) => list.reduce((s, f) => s + (Number.isFinite(f.estimate) ? f.estimate : 0), 0);
+  const lookTokens = est(found.filter((f) => f.severity === 'look'));
+  if (tokens) return { ...tokens, lookTokens };
+  if (!meta) return null;
+  return { tokens: est(found), lookTokens, waste: meta.waste !== false, label: String(meta.label ?? ''), evidence: meta.evidence ?? 'inferred' };
+}
+
 /** The window just before from..to (inclusive calendar days), of the same length. */
 export function earlierWindow({ from, to }) {
   const a = dayOf(from);

package/lib/prompt-lane.mjs

@@ -11,6 +11,7 @@ import { curateDigest } from './digest-curation.mjs';
 import { assertNoDigestPending, validateDigestLane, validateDigestReview } from './digest-store.mjs';
 import { assertLifecycleJoins, readCarry } from './digest-carry.mjs';
 import { verifyCarryReceipts } from './carry-receipts.mjs';
+import { currentCommand } from './invocation.mjs';
 
 function preflightError(message) {
   const error = new Error(message);
@@ -43,42 +44,42 @@ async function loadValidatedDigestLane({cwd,config,week,now,roots,hasGoals,lane,
   assertNoDigestPending(cwd);
   validateDigestLane(lane,config);
   const outputBinding=await preflightPromptOutput({cwd,config,hasGoals});
-  if(lane.week.start!==week.start||lane.week.end!==week.end)throw new Error(`${PROMPT_LANE} is for another week; rerun honestweek digest prepare.`);
+  if(lane.week.start!==week.start||lane.week.end!==week.end)throw new Error(`${PROMPT_LANE} is for another week; rerun ${currentCommand()} digest prepare.`);
   const storePath=join(cwd,PROMPT_STORE);let initialStoreBytes;
-  try{initialStoreBytes=readFileSync(storePath,'utf8');}catch{throw new Error(`${PROMPT_STORE} not found or unreadable; run honestweek digest prepare.`);}
+  try{initialStoreBytes=readFileSync(storePath,'utf8');}catch{throw new Error(`${PROMPT_STORE} not found or unreadable; run ${currentCommand()} digest prepare.`);}
   const store=validatePromptStore(parsePrivateJson(initialStoreBytes,PROMPT_STORE));
   const reviewPath=join(cwd,'honestweek.curated.json');let initialReviewBytes;
-  try{initialReviewBytes=readFileSync(reviewPath,'utf8');}catch{throw new Error('honestweek.curated.json not found or unreadable; run honestweek digest prepare.');}
+  try{initialReviewBytes=readFileSync(reviewPath,'utf8');}catch{throw new Error(`honestweek.curated.json not found or unreadable; run ${currentCommand()} digest prepare.`);}
   const review=validateDigestReview(parsePrivateJson(initialReviewBytes,'honestweek.curated.json'),config);
   const priorCarry=readCarry(cwd,config,{optional:true});
   await verifyCarryReceipts({ carry:priorCarry.value, week, config, roots, now });
-  if(review.version===3&&review.lifecycle.carryHash!==priorCarry.hash)throw new Error('honestweek.curated.json carry binding is stale; rerun honestweek digest prepare.');
+  if(review.version===3&&review.lifecycle.carryHash!==priorCarry.hash)throw new Error(`honestweek.curated.json carry binding is stale; rerun ${currentCommand()} digest prepare.`);
   assertLifecycleJoins({review,lane,priorCarryHash:priorCarry.hash,config});
   const range=localDateRangeInstants(week.start,week.end,config.week.timezone);
   const scanned=await scanPromptSources({config,weekStart:range.start,weekEnd:range.endExclusive,roots,now});
-  if(Object.values(scanned.sourceStatus).every((s)=>s.state==='absent'))throw new Error('no Claude Code or Codex digest source is available; rerun honestweek digest prepare when a source is present.');
+  if(Object.values(scanned.sourceStatus).every((s)=>s.state==='absent'))throw new Error(`no Claude Code or Codex digest source is available; rerun ${currentCommand()} digest prepare when a source is present.`);
   const freshStore=mergePromptStore(store,scanned,now);
   const evidence=await scanDigestEvidence({config,promptStore:freshStore,roots,sourceStatus:scanned.sourceStatus});
   const rebuilt=curateDigest(freshStore,evidence,config,week,now,{outputBinding,priorReview:review,carry:priorCarry.value,carryHash:priorCarry.hash});
-  if(readFileSync(initialLaneBytes.path,'utf8')!==initialLaneBytes.text||readFileSync(storePath,'utf8')!==initialStoreBytes||readFileSync(reviewPath,'utf8')!==initialReviewBytes)throw new Error('digest controls or sources changed during validation; rerun honestweek digest prepare.');
-  if(JSON.stringify(normalized(review))!==JSON.stringify(normalized(rebuilt.review))||JSON.stringify(normalized(lane))!==JSON.stringify(normalized(rebuilt.lane)))throw new Error(`${PROMPT_LANE} or honestweek.curated.json is stale or non-canonical; rerun honestweek digest prepare.`);
+  if(readFileSync(initialLaneBytes.path,'utf8')!==initialLaneBytes.text||readFileSync(storePath,'utf8')!==initialStoreBytes||readFileSync(reviewPath,'utf8')!==initialReviewBytes)throw new Error(`digest controls or sources changed during validation; rerun ${currentCommand()} digest prepare.`);
+  if(JSON.stringify(normalized(review))!==JSON.stringify(normalized(rebuilt.review))||JSON.stringify(normalized(lane))!==JSON.stringify(normalized(rebuilt.lane)))throw new Error(`${PROMPT_LANE} or honestweek.curated.json is stale or non-canonical; rerun ${currentCommand()} digest prepare.`);
   return{items:lane.items,lane,review};
 }
 
 export async function loadValidatedPromptLane({cwd,config,week,now=new Date(),roots=resolvePromptRoots(),hasGoals=false}){
   assertNoDigestPending(cwd);
   const path=join(cwd,PROMPT_LANE);if(!existsSync(path))return{items:[],lane:null};
-  const initialLaneBytes=readFileSync(path,'utf8');let lane;try{lane=JSON.parse(initialLaneBytes);}catch(e){throw new Error(`${PROMPT_LANE} is not valid JSON (${e.message}); rerun honestweek prompts curate.`);}
+  const initialLaneBytes=readFileSync(path,'utf8');let lane;try{lane=JSON.parse(initialLaneBytes);}catch(e){throw new Error(`${PROMPT_LANE} is not valid JSON (${e.message}); rerun ${currentCommand()} prompts curate.`);}
   if(lane?.version===2)return loadValidatedDigestLane({cwd,config,week,now,roots,hasGoals,lane,initialLaneBytes:{path,text:initialLaneBytes}});
-  if(!lane||lane.version!==1||!Array.isArray(lane.items)||!lane.week)throw new Error(`${PROMPT_LANE} has an unsupported schema; rerun honestweek prompts curate.`);
+  if(!lane||lane.version!==1||!Array.isArray(lane.items)||!lane.week)throw new Error(`${PROMPT_LANE} has an unsupported schema; rerun ${currentCommand()} prompts curate.`);
   const outputBinding=lane.items.length?await preflightPromptOutput({cwd,config,hasGoals}):lane.outputBinding;
-  if(lane.week.start!==week.start||lane.week.end!==week.end)throw new Error(`${PROMPT_LANE} is for another week; rerun honestweek prompts curate.`);
+  if(lane.week.start!==week.start||lane.week.end!==week.end)throw new Error(`${PROMPT_LANE} is for another week; rerun ${currentCommand()} prompts curate.`);
   const storePath=join(cwd,PROMPT_STORE);const initialStoreBytes=readFileSync(storePath,'utf8');const store=readPromptStore(cwd);
   const range=localDateRangeInstants(week.start,week.end,config.week.timezone);
   const scanned=await scanPromptSources({config,weekStart:range.start,weekEnd:range.endExclusive,roots,now});
-  if(Object.values(scanned.sourceStatus).every((s)=>s.state==='absent'))throw new Error('no Claude Code or Codex prompt source is available; rerun honestweek prompts curate when a source is present.');
+  if(Object.values(scanned.sourceStatus).every((s)=>s.state==='absent'))throw new Error(`no Claude Code or Codex prompt source is available; rerun ${currentCommand()} prompts curate when a source is present.`);
   const freshStore=mergePromptStore(store,scanned,now);const rebuilt=curatePrompts(freshStore,config,week,now,{outputBinding});
-  if(readFileSync(path,'utf8')!==initialLaneBytes||readFileSync(storePath,'utf8')!==initialStoreBytes)throw new Error('prompt controls changed during validation; rerun honestweek prompts curate.');
-  if(JSON.stringify(normalized(lane))!==JSON.stringify(normalized(rebuilt)))throw new Error(`${PROMPT_LANE} is stale or non-canonical; rerun honestweek prompts curate.`);
+  if(readFileSync(path,'utf8')!==initialLaneBytes||readFileSync(storePath,'utf8')!==initialStoreBytes)throw new Error(`prompt controls changed during validation; rerun ${currentCommand()} prompts curate.`);
+  if(JSON.stringify(normalized(lane))!==JSON.stringify(normalized(rebuilt)))throw new Error(`${PROMPT_LANE} is stale or non-canonical; rerun ${currentCommand()} prompts curate.`);
   return{items:lane.items,lane};
 }

package/lib/prompt-store.mjs

@@ -3,6 +3,7 @@ import { join } from 'node:path';
 import { atomicWriteJson } from './atomic-json.mjs';
 import { sha256 } from './prompt-identity.mjs';
 import { DETECTOR_ORDER, REPLACEABLE_DETECTORS } from './prompt-privacy.mjs';
+import { currentCommand } from './invocation.mjs';
 
 export const PROMPT_STORE = 'honestweek.prompts.json';
 export const PROMPT_LANE = 'honestweek.prompt-items.json';
@@ -70,7 +71,7 @@ export function validatePromptStore(store) {
 
 export function readPromptStore(cwd, { optional = false } = {}) {
   const path = join(cwd, PROMPT_STORE);
-  if (!existsSync(path)) { if (optional) return null; throw new Error(`${PROMPT_STORE} not found; run honestweek prompts sync.`); }
+  if (!existsSync(path)) { if (optional) return null; throw new Error(`${PROMPT_STORE} not found; run ${currentCommand()} prompts sync.`); }
   let value; try { value = JSON.parse(readFileSync(path, 'utf8')); } catch (e) { throw new Error(`${PROMPT_STORE} is not valid JSON (${e.message}).`); }
   return validatePromptStore(value);
 }

package/lib/prompts.mjs

@@ -1,6 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { loadConfig } from './config.mjs';
+import { commandConfig, configAgain, takeConfigFlag } from './config-lookup.mjs';
 import { localDateInTimezone, localDateRangeInstants, resolveWeek } from './resolve-week.mjs';
 import { resolvePromptRoots, scanPromptSources } from './prompt-adapters.mjs';
 import { mergePromptStore, PROMPT_GITIGNORE, PROMPT_LANE, readPromptStore, uniquePrompt, writePromptStore } from './prompt-store.mjs';
@@ -11,6 +12,7 @@ import { withPromptLock } from './prompt-lock.mjs';
 import { assertNoDigestPending } from './digest-store.mjs';
 import { assertNoCarryPending } from './digest-carry.mjs';
 import { recoverConfiguredCarry } from './carry-recovery.mjs';
+import { currentCommand } from './invocation.mjs';
 
 function ioDefault(){return{out:(s)=>process.stdout.write(s),err:(s)=>process.stderr.write(s),exit:(c)=>process.exit(c)};}
 function flag(argv,name){const i=argv.indexOf(name);return i>=0?argv[i+1]:undefined;}
@@ -19,7 +21,7 @@ function prefixes(prompts){return new Map(prompts.map((p)=>{let n=12;while(n<64&
 function nextPageCommand(command, args, offset) {
   const kept=[];
   for(let i=0;i<args.length;i++){if(args[i]==='--offset'){i++;continue;}kept.push(args[i]);}
-  return `honestweek prompts ${command}${kept.length?` ${kept.join(' ')}`:''} --offset ${offset}`;
+  return `${currentCommand()} prompts ${command}${kept.length?` ${kept.join(' ')}`:''} --offset ${offset}`;
 }
 function activeLaneVersion(cwd) {
   try { return JSON.parse(readFileSync(join(cwd, PROMPT_LANE), 'utf8'))?.version ?? null; }
@@ -37,11 +39,15 @@ async function sync(cwd,config,argv,now,roots){
 function mutate(cwd,store,ref,state,now){const p=uniquePrompt(store,ref);if(state==='deleted'){const status=store.sourceStatus[p.source];store.version=2;store.prompts=store.prompts.filter((x)=>x.ref!==p.ref);store.tombstones.push({ref:p.ref,refCanonical:p.refCanonical,source:p.source,sessionKey:p.sessionKey,turn:p.turn,deletedAt:now.toISOString(),week:{start:status.weekStart,end:status.weekEnd}});store.tombstones.sort((a,b)=>a.ref.localeCompare(b.ref));}else p.state=state;store.generatedAt=now.toISOString();writePromptStore(cwd,store);return p;}
 
 export async function runPrompts({cwd=process.cwd(),argv=[],now=new Date(),io=ioDefault(),roots}={}){
-  const [command,...rest]=argv;
+  const taken=takeConfigFlag(argv);
+  const [command,...rest]=taken.argv;
   // Help before config, and anywhere in argv: `prompts sync --help` used to run
   // a live sync. Asking what a command does must not require a config or do work.
-  if(!command||argv.some((a)=>a==='-h'||a==='--help')){io.out('Usage: honestweek prompts <sync|list|source|review|keep|hide|delete|curate> [options]\n');return 0;}
-  let config;try{config=loadConfig(join(cwd,'honestweek.config.json'));}catch(e){io.err(`prompts: ${e.message}\n`);return io.exit(1)??1;}
+  if(!command||argv.some((a)=>a==='-h'||a==='--help')){io.out(`Usage: ${currentCommand()} prompts <sync|list|source|review|keep|hide|delete|curate> [options] [--config <file>]\n`);return 0;}
+  if(taken.error){io.err(`prompts: ${taken.error}\n`);return io.exit(1)??1;}
+  // The prompt files sit beside the config, wherever the lookup found it.
+  const opened=commandConfig({command:'prompts',cwd,argv,err:io.err});cwd=opened.cwd;
+  let config;try{config=loadConfig(opened.found.path);}catch(e){io.err(`prompts: ${e.message}\n`);return io.exit(1)??1;}
   let privateInboxUpdated = false;
   try{
     return await withPromptLock(cwd,async()=>{
@@ -62,7 +68,7 @@ export async function runPrompts({cwd=process.cwd(),argv=[],now=new Date(),io=io
     }
     if(command==='keep'||command==='hide'||command==='delete'){
       const store=readPromptStore(cwd);
-      if(command==='delete'){if(!rest.includes('--yes'))throw new Error('delete requires --yes.');const laneVersion=activeLaneVersion(cwd);const p=mutate(cwd,store,rest[0],'deleted',now);const refresh=laneVersion===2?'honestweek digest prepare':'honestweek prompts curate';io.out(`prompts delete: removed private prompt ${p.ref.slice(0,12)} and left a no-text tombstone. This cannot recall ${PROMPT_LANE} or ${config.output.file??'the built page'}. Run ${refresh}, honestweek validate, then honestweek build; remove the local output now if needed.\n`);return 0;}
+      if(command==='delete'){if(!rest.includes('--yes'))throw new Error('delete requires --yes.');const laneVersion=activeLaneVersion(cwd);const p=mutate(cwd,store,rest[0],'deleted',now);const refresh=laneVersion===2?`${currentCommand()} digest prepare`:`${currentCommand()} prompts curate`;io.out(`prompts delete: removed private prompt ${p.ref.slice(0,12)} and left a no-text tombstone. This cannot recall ${PROMPT_LANE} or ${config.output.file??'the built page'}. Run ${refresh}, ${currentCommand()} validate, then ${currentCommand()} build; remove the local output now if needed.\n`);return 0;}
       const p=mutate(cwd,store,rest[0],command==='keep'?'kept':'hidden',now);io.out(`prompts ${command}: ${p.ref.slice(0,12)} is ${command==='keep'?'kept':'hidden'}. Keep never overrides receipt or privacy gates.\n`);return 0;
     }
     const store=readPromptStore(cwd);
@@ -82,7 +88,7 @@ export async function runPrompts({cwd=process.cwd(),argv=[],now=new Date(),io=io
       const pre=prefixes(store.prompts);for(const p of rows.slice(offset,offset+limit)){const e=decisions?.get(p.ref);io.out(`${pre.get(p.ref)}  ${p.state}  ${p.source}  ${p.timestamp}  ${p.project??'private'}${e?`  decision=${e.decision} score=${e.score} reason=${e.p.state==='kept'?'explicit keep':e.codes.join(',')||e.decision}`:''}  ${[...p.text].slice(0,120).join('')} [source session ${p.sessionKey.slice(0,12)} turn ${p.turn}]\n`);}
       if(command==='review')io.out('Review controls: use prompts hide <ref> or prompts delete <ref> --yes. Keep cannot override receipt or privacy gates.\n');
       const shown=Math.min(limit,Math.max(0,rows.length-offset));const remaining=Math.max(0,rows.length-offset-shown);const start=shown?offset+1:0;const end=shown?offset+shown:0;
-      io.out(`prompts ${command}: showing ${start}-${end} of ${rows.length}; remaining ${remaining}.${remaining?` Next: ${nextPageCommand(command,rest,offset+shown)}.`:''}\n`);return 0;
+      io.out(`prompts ${command}: showing ${start}-${end} of ${rows.length}; remaining ${remaining}.${remaining?` Next: ${nextPageCommand(command,[...rest,...configAgain(taken.config)],offset+shown)}.`:''}\n`);return 0;
     }
     if(command==='source'){
       const p=uniquePrompt(store,rest[0]);const status=store.sourceStatus[p.source];const range=localDateRangeInstants(status.weekStart,status.weekEnd,config.week.timezone);
@@ -92,7 +98,7 @@ export async function runPrompts({cwd=process.cwd(),argv=[],now=new Date(),io=io
     throw new Error(`unknown prompts command ${JSON.stringify(command)}.`);
     });
   }catch(e){
-    if(privateInboxUpdated)io.err('prompts: private inbox updated; prompt lane not updated; rerun honestweek prompts curate.\n');
+    if(privateInboxUpdated)io.err(`prompts: private inbox updated; prompt lane not updated; rerun ${currentCommand()} prompts curate.\n`);
     io.err(`prompts: ${e.message}\n`);const code=command==='list'||command==='source'||e?.promptPreflight?1:2;return io.exit(code)??code;
   }
 }

package/lib/replay/assemble.mjs

@@ -64,6 +64,9 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
   const shared = new Map(); // "copy->original" -> count
   const eventIndex = new Map();
   for (const p of parsed) for (const e of p.result.events) eventIndex.set(e.id, e);
+  // A saved session's copied records (lib/replay/saved-sessions.mjs): never steps, only what the
+  // original needs to say it was copied.
+  for (const p of parsed) for (const e of p.result.copyStubs ?? []) if (!eventIndex.has(e.id)) eventIndex.set(e.id, e);
   const lastAtOf = (key) => bySource.get(key)?.result.stats.lastAt ?? '';
   for (const list of owners.values()) {
     if (list.length < 2) continue;
@@ -80,7 +83,9 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
         const gone = eventIndex.get(id);
         if (!keep || !gone || keep.kind !== gone.kind || id.split('.').at(-1) !== keep.id.split('.').at(-1)) return;
         drop.set(id, keep.id);
-        keep.copies = [...(keep.copies ?? []), ...gone.refs];
+        // A saved step (lib/replay/saved-sessions.mjs) may already name this copy.
+        const known = (r) => keep._saved && (keep.copies ?? []).some((c) => c.src === r.src && c.line === r.line && c.off === r.off);
+        keep.copies = [...(keep.copies ?? []), ...gone.refs.filter((r) => !known(r))];
         // Which file's session the record belongs to is the rule's choice, not a record's.
         if (!keep.inferred.some((x) => x.key === 'canonicalCopy')) keep.inferred.push({ key: 'canonicalCopy', value: keep.session, rule: 'canonical.earliest-ending-copy' });
         // A resumed copy can hold the result the original never recorded (the first
@@ -203,10 +208,11 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
     if (call.end && call.facts.handback?._status === 'completed') agent.completion = { at: call.end.at, status: 'completed', via: 'call-result', harnessDurationMs: call.facts.handback.harnessDurationMs };
   }
   for (const [agentId, call] of launchByAgentId) {
-    if (!agentIdToKey.has(agentId)) call.missing.push('agent-transcript');
+    // A saved step's missing evidence is as it was saved (lib/replay/saved-sessions.mjs).
+    if (!agentIdToKey.has(agentId) && !call._saved) call.missing.push('agent-transcript');
   }
   for (const e of events) {
-    if (e.kind === 'action' && e.facts.category === 'delegate' && e.facts.tool !== 'Workflow' && e.source.startsWith('cc-') && !e.facts.spawnedAgent && !e.missing.includes('agent-transcript') && !e.missing.includes('result')) {
+    if (!e._saved && e.kind === 'action' && e.facts.category === 'delegate' && e.facts.tool !== 'Workflow' && e.source.startsWith('cc-') && !e.facts.spawnedAgent && !e.missing.includes('agent-transcript') && !e.missing.includes('result')) {
       e.missing.push('agent-transcript');
     }
   }
@@ -232,7 +238,7 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
       } else if (call) {
         n.event.facts.about = call.id;
         links.push({ type: 'completion-notice', from: n.event.id, to: call.id, evidence: EVIDENCE.RECORDED });
-      } else {
+      } else if (!n.event._saved) {
         n.event.missing.push('reported-task');
       }
     }
@@ -347,7 +353,8 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
         const target = sessionsByKey.get(key);
         if (!(sessionStartT.get(key) >= c.event.t)) continue;
         links.push({ type: 'handoff', from: c.event.id, to: key, evidence: EVIDENCE.INFERRED, inferred: [{ key: 'handoff', value: true, rule: 'handoff.chip-start' }] });
-        c.event.inferred.push({ key: 'startedSession', value: key, rule: 'handoff.chip-start' });
+        // A saved step already carries it (lib/replay/saved-sessions.mjs); it's said once.
+        if (!(c.event._saved && c.event.inferred.some((x) => x.key === 'startedSession' && x.value === key))) c.event.inferred.push({ key: 'startedSession', value: key, rule: 'handoff.chip-start' });
         if (target) target.startedFrom = c.event.id;
       }
     }
@@ -463,6 +470,18 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
   }
 
   // Threads: sessions joined by recorded or derived links only.
+  const sourceSession = new Map(parsed.map((p) => [p.source.key, p.source.sessionKey]));
+  const threads = threadsOf(sessionsByKey, links, sourceSession);
+
+  return { events, links, anomalies, agents, sessionsByKey, turns, threads };
+}
+
+/**
+ * threadsOf(sessionsByKey, links, sourceSession) -> threads
+ * Sessions joined by a continuation (a resumed copy) or a delivered message, each group a thread
+ * whose id is a hash of its earliest member. Sets each session's `thread`.
+ */
+export function threadsOf(sessionsByKey, links, sourceSession) {
   const parent = new Map([...sessionsByKey.keys()].map((k) => [k, k]));
   const find = (k) => {
     while (parent.get(k) !== k) {
@@ -477,7 +496,6 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
     const rb = find(b);
     if (ra !== rb) parent.set(ra < rb ? rb : ra, ra < rb ? ra : rb);
   };
-  const sourceSession = new Map(parsed.map((p) => [p.source.key, p.source.sessionKey]));
   for (const l of links) {
     if (l.type === 'continuation') union(sourceSession.get(l.from), sourceSession.get(l.to));
     if (l.type === 'message-delivered') union(l.sessions[0], l.sessions[1]);
@@ -504,8 +522,7 @@ export function assemble({ parsed, quietMs = DEFAULT_QUIET_MS }) {
     const fb = sessionsByKey.get(b.sessions[0]).firstAt ?? '';
     return fa < fb ? -1 : fa > fb ? 1 : a.id < b.id ? -1 : 1;
   });
-
-  return { events, links, anomalies, agents, sessionsByKey, turns, threads };
+  return threads;
 }
 
 /** What the last records of a session show. Never "ended": logs do not record that. */