mason-context 0.13.0 → 0.14.0

package/dist/mason-mcp.js

@@ -3504,10 +3504,10 @@ async function analyzeImpact(rootDir, targetFiles) {
     tests
   };
 }
-async function resolveTargetFiles(rootDir, targets) {
+async function resolveTargetFiles(rootDir, targets2) {
   const resolved = [];
   const access = await createFileAccess(rootDir);
-  for (const target of targets) {
+  for (const target of targets2) {
     if (target.includes("/")) {
       const normalized = normalizeRepoPath(target);
       if (normalized) resolved.push(normalized);
@@ -3667,23 +3667,23 @@ __export(assemble_exports, {
 import path22 from "path";
 import fs14 from "fs/promises";
 async function collectImpact(root, candidates) {
-  const targets = /* @__PURE__ */ new Set();
+  const targets2 = /* @__PURE__ */ new Set();
   let sourceFiles;
   for (const candidate of sanitizeRepoPaths(candidates)) {
     const stat = await fs14.stat(path22.join(root, candidate)).catch(() => null);
     if (stat?.isDirectory()) {
       sourceFiles ??= await (await createFileAccess(root)).list();
       for (const file of sourceFiles) {
-        if (anchorMatches(candidate, file)) targets.add(file);
-        if (targets.size >= MAX_IMPACT_TARGETS) break;
+        if (anchorMatches(candidate, file)) targets2.add(file);
+        if (targets2.size >= MAX_IMPACT_TARGETS) break;
       }
     } else {
-      targets.add(candidate);
+      targets2.add(candidate);
     }
-    if (targets.size >= MAX_IMPACT_TARGETS) break;
+    if (targets2.size >= MAX_IMPACT_TARGETS) break;
   }
-  if (!targets.size) return { impact: null, relatedTests: [] };
-  const result = await analyzeImpact(root, [...targets]);
+  if (!targets2.size) return { impact: null, relatedTests: [] };
+  const result = await analyzeImpact(root, [...targets2]);
   return {
     impact: { targets: result.targetFiles, cochange: result.cochange, references: result.references.slice(0, 10) },
     relatedTests: [...new Set(result.tests.map((t) => t.file))]
@@ -4163,7 +4163,7 @@ var init_evidence2 = __esm({
     init_dead_command();
     init_storage();
     exec14 = promisify14(execFile14);
-    engineVersion = true ? "0.13.0" : "development";
+    engineVersion = true ? "0.14.0" : "development";
     hash = (value) => createHash4("sha256").update(JSON.stringify(value)).digest("hex");
     internal = (file) => file === ".mason" || file === ".mason/reports" || file.startsWith(".mason/reports/");
     cacheSchema = z11.object({ version: z11.literal(1), entries: z11.record(z11.object({ key: z11.string(), result: checkResultSchema })), digest: z11.string() });
@@ -4630,7 +4630,8 @@ var init_model = __esm({
     runtimeSchema = z15.object({
       id: z15.string().regex(/^[a-f0-9]{24}$/),
       version: z15.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
-      hashes: z15.record(z15.string().regex(/^[a-f0-9]{64}$/))
+      hashes: z15.record(z15.string().regex(/^[a-f0-9]{64}$/)),
+      bundle: z15.object({ target: z15.string(), manifestHash: z15.string().regex(/^[a-f0-9]{64}$/) }).optional()
     });
     setupHostSchema = z15.object({
       runtime: runtimeSchema,
@@ -4656,40 +4657,109 @@ var init_model = __esm({
   }
 });
 
-// src/setup/runtime.ts
+// src/distribution/bundle.ts
 import fs17 from "fs/promises";
 import path24 from "path";
+import { createHash as createHash5 } from "crypto";
+import { z as z16 } from "zod";
+async function readBundle(root) {
+  const bytes = await fs17.readFile(await storePath(root, "bundle.json"));
+  const manifest = bundleSchema.parse(JSON.parse(bytes.toString("utf8")));
+  const windows = manifest.target.startsWith("win32-");
+  for (const file of Object.keys(manifest.files)) {
+    if (file.includes("\\") || file.split("/").some((p) => !p || p === "." || p === "..") || path24.isAbsolute(file)) {
+      throw new Error("Unsafe path in Mason bundle: " + file);
+    }
+  }
+  for (const required of [windows ? "node.exe" : "node", "app/package.json", "app/dist/mason.js", "app/dist/mason-auto.js", "app/dist/mason-mcp.js"]) {
+    if (!manifest.files[required]) throw new Error("Incomplete Mason bundle: " + required);
+  }
+  return { manifest, manifestHash: sha256(bytes) };
+}
+async function verifyBundle(root, expectedHash) {
+  const bundle = await readBundle(root);
+  if (expectedHash && bundle.manifestHash !== expectedHash) throw new Error("Mason bundle manifest changed.");
+  if (bundle.manifest.target !== `${process.platform}-${process.arch}`) throw new Error("Mason bundle is for another platform. Install this platform's bundle and rerun setup.");
+  const files = Object.keys(bundle.manifest.files);
+  for (let i = 0; i < files.length; i += 8) await Promise.all(files.slice(i, i + 8).map(async (file) => {
+    if (sha256(await fs17.readFile(await storePath(root, file))) !== bundle.manifest.files[file]) throw new Error("Mason bundle checksum mismatch: " + file);
+  }));
+  return bundle;
+}
+var targets, digest2, bundleSchema, sha256;
+var init_bundle = __esm({
+  "src/distribution/bundle.ts"() {
+    "use strict";
+    init_storage();
+    targets = ["darwin-arm64", "darwin-x64", "linux-arm64", "linux-x64", "win32-arm64", "win32-x64"];
+    digest2 = z16.string().regex(/^[a-f0-9]{64}$/);
+    bundleSchema = z16.object({
+      format: z16.literal(1),
+      version: z16.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
+      target: z16.enum(targets),
+      nodeVersion: z16.string(),
+      files: z16.record(digest2)
+    }).strict();
+    sha256 = (bytes) => createHash5("sha256").update(bytes).digest("hex");
+  }
+});
+
+// src/setup/runtime.ts
+import fs18 from "fs/promises";
+import path25 from "path";
 import { fileURLToPath } from "url";
-import { randomUUID as randomUUID5, createHash as createHash5 } from "crypto";
+import { randomUUID as randomUUID5, createHash as createHash6 } from "crypto";
 import { execFile as execFile15 } from "child_process";
 import { promisify as promisify15 } from "util";
 async function packageRoot() {
-  let directory = path24.dirname(fileURLToPath(import.meta.url));
+  let directory = path25.dirname(fileURLToPath(import.meta.url));
   for (let i = 0; i < 8; i++) {
     try {
-      const pkg = JSON.parse(await fs17.readFile(path24.join(directory, "package.json"), "utf8"));
+      const pkg = JSON.parse(await fs18.readFile(path25.join(directory, "package.json"), "utf8"));
       if (pkg.name === "mason-context") return directory;
     } catch {
     }
-    directory = path24.dirname(directory);
+    directory = path25.dirname(directory);
   }
   throw new Error("Cannot locate the executing Mason distribution. Reinstall Mason and rerun setup.");
 }
 async function sourceRuntime() {
   const source = await packageRoot();
-  const pkg = JSON.parse(await fs17.readFile(path24.join(source, "package.json"), "utf8"));
-  const hashes = Object.fromEntries(await Promise.all(BINARIES.map(async (file) => [file, checksum(await fs17.readFile(path24.join(source, file)))])));
+  const pkg = JSON.parse(await fs18.readFile(path25.join(source, "package.json"), "utf8"));
+  const hashes = Object.fromEntries(await Promise.all(BINARIES.map(async (file) => [file, checksum(await fs18.readFile(path25.join(source, file)))])));
+  const bundleRoot = path25.dirname(source);
+  const bundleExists = await fs18.lstat(path25.join(bundleRoot, "bundle.json")).then(() => true, (error) => {
+    if (error.code === "ENOENT") return false;
+    throw error;
+  });
+  if (bundleExists) {
+    const { manifest, manifestHash } = await verifyBundle(bundleRoot);
+    if (manifest.version !== pkg.version) throw new Error("Mason package and bundle versions differ.");
+    return { source, bundleRoot, runtime: runtimeSchema.parse({
+      id: manifestHash.slice(0, 24),
+      version: pkg.version,
+      hashes,
+      bundle: { target: manifest.target, manifestHash }
+    }) };
+  }
   return { source, runtime: runtimeSchema.parse({ id: hash([pkg.version, pkg.dependencies, hashes]).slice(0, 24), version: pkg.version, hashes }) };
 }
 async function verifyRuntime(root, runtime) {
   try {
     const saved = await readStoreJson(root, `.mason/runtime/${runtime.id}/receipt.json`);
     if (JSON.stringify(saved) !== JSON.stringify(runtime)) return false;
+    if (runtime.bundle) {
+      const base2 = await storePath(root, `.mason/runtime/${runtime.id}`);
+      const { manifest } = await verifyBundle(base2, runtime.bundle.manifestHash);
+      if (manifest.version !== runtime.version || manifest.target !== runtime.bundle.target) return false;
+      for (const file of BINARIES) if (manifest.files["app/" + file] !== runtime.hashes[file]) return false;
+      return true;
+    }
     const base = `.mason/runtime/${runtime.id}/node_modules/mason-context/`;
     const pkg = await readStoreJson(root, base + "package.json");
     if (pkg?.name !== "mason-context" || pkg.version !== runtime.version) return false;
     for (const file of BINARIES) {
-      if (checksum(await fs17.readFile(await storePath(root, base + file))) !== runtime.hashes[file]) return false;
+      if (checksum(await fs18.readFile(await storePath(root, base + file))) !== runtime.hashes[file]) return false;
     }
     return true;
   } catch {
@@ -4702,30 +4772,42 @@ async function installRuntime(root, selected) {
   const relative = `.mason/runtime/${runtime.id}`;
   const target = await storePath(root, relative, true);
   const stage = await storePath(root, ".mason/runtime/.install-" + randomUUID5(), true);
-  await fs17.mkdir(stage);
+  await fs18.mkdir(stage);
   try {
-    const npm = process.platform === "win32" ? "npm.cmd" : "npm";
-    const options = { timeout: 12e4, maxBuffer: 2 * 1024 * 1024, windowsHide: true };
-    const packed = JSON.parse((await exec15(npm, ["pack", "--ignore-scripts", "--json", "--pack-destination", stage], { ...options, cwd: source })).stdout);
-    const filename = packed[0]?.filename;
-    if (typeof filename !== "string" || path24.basename(filename) !== filename) throw new Error("npm did not produce a Mason package archive.");
-    await fs17.rename(path24.join(stage, filename), path24.join(stage, "mason.tgz"));
-    await fs17.writeFile(path24.join(stage, "package.json"), JSON.stringify({ name: "mason-project-runtime", private: true, version: "1.0.0" }));
-    await exec15(npm, ["install", "--ignore-scripts", "--omit=dev", "--no-audit", "--no-fund", "--save-exact", "./mason.tgz"], { ...options, cwd: stage });
-    for (const file of BINARIES) {
-      if (checksum(await fs17.readFile(path24.join(stage, "node_modules/mason-context", file))) !== runtime.hashes[file]) throw new Error("Installed Mason binary differs from the selected distribution.");
+    if (runtime.bundle) {
+      if (!selected.bundleRoot) throw new Error("Standalone bundle source is missing.");
+      const { manifest } = await verifyBundle(selected.bundleRoot, runtime.bundle.manifestHash);
+      for (const file of ["bundle.json", ...Object.keys(manifest.files)]) {
+        const from = await storePath(selected.bundleRoot, file);
+        const to = await storePath(stage, file, true);
+        await fs18.copyFile(from, to);
+        await fs18.chmod(to, (await fs18.stat(from)).mode & 511);
+      }
+      await verifyBundle(stage, runtime.bundle.manifestHash);
+    } else {
+      const npm = process.platform === "win32" ? "npm.cmd" : "npm";
+      const options = { timeout: 12e4, maxBuffer: 2 * 1024 * 1024, windowsHide: true };
+      const packed = JSON.parse((await exec15(npm, ["pack", "--ignore-scripts", "--json", "--pack-destination", stage], { ...options, cwd: source })).stdout);
+      const filename = packed[0]?.filename;
+      if (typeof filename !== "string" || path25.basename(filename) !== filename) throw new Error("npm did not produce a Mason package archive.");
+      await fs18.rename(path25.join(stage, filename), path25.join(stage, "mason.tgz"));
+      await fs18.writeFile(path25.join(stage, "package.json"), JSON.stringify({ name: "mason-project-runtime", private: true, version: "1.0.0" }));
+      await exec15(npm, ["install", "--ignore-scripts", "--omit=dev", "--no-audit", "--no-fund", "--save-exact", "./mason.tgz"], { ...options, cwd: stage });
+      for (const file of BINARIES) {
+        if (checksum(await fs18.readFile(path25.join(stage, "node_modules/mason-context", file))) !== runtime.hashes[file]) throw new Error("Installed Mason binary differs from the selected distribution.");
+      }
     }
-    await fs17.writeFile(path24.join(stage, "receipt.json"), JSON.stringify(runtime, null, 2) + "\n");
+    await fs18.writeFile(path25.join(stage, "receipt.json"), JSON.stringify(runtime, null, 2) + "\n");
     try {
-      await fs17.rename(target, target + ".previous-" + randomUUID5());
+      await fs18.rename(target, target + ".previous-" + randomUUID5());
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
-    await fs17.rename(stage, target);
+    await fs18.rename(stage, target);
     if (!await verifyRuntime(root, runtime)) throw new Error("The installed Mason runtime could not be verified.");
     return runtime;
   } finally {
-    await fs17.rm(stage, { recursive: true, force: true });
+    await fs18.rm(stage, { recursive: true, force: true });
   }
 }
 var exec15, checksum, BINARIES;
@@ -4735,15 +4817,16 @@ var init_runtime2 = __esm({
     init_model();
     init_storage();
     init_evidence2();
+    init_bundle();
     exec15 = promisify15(execFile15);
-    checksum = (bytes) => createHash5("sha256").update(bytes).digest("hex");
+    checksum = (bytes) => createHash6("sha256").update(bytes).digest("hex");
     BINARIES = ["dist/mason-auto.js", "dist/mason-mcp.js"];
   }
 });
 
 // src/setup/files.ts
-import fs18 from "fs/promises";
-import path25 from "path";
+import fs19 from "fs/promises";
+import path26 from "path";
 import { randomUUID as randomUUID6 } from "crypto";
 async function readText(root, file) {
   try {
@@ -4770,10 +4853,10 @@ async function applyEdit(root, edit) {
   if (current === edit.after) return false;
   if (current !== edit.before) throw new Error("Setup input changed during installation: " + edit.path + ". Rerun setup to resume.");
   const file = await storePath(root, edit.path, true);
-  const temporary = path25.join(path25.dirname(file), ".mason-setup-" + randomUUID6() + ".tmp");
+  const temporary = path26.join(path26.dirname(file), ".mason-setup-" + randomUUID6() + ".tmp");
   try {
-    const mode = await fs18.stat(file).then((s) => s.mode & 511, () => 384);
-    const handle = await fs18.open(temporary, "wx", mode);
+    const mode = await fs19.stat(file).then((s) => s.mode & 511, () => 384);
+    const handle = await fs19.open(temporary, "wx", mode);
     try {
       await handle.writeFile(edit.after, "utf8");
       await handle.sync();
@@ -4781,10 +4864,10 @@ async function applyEdit(root, edit) {
       await handle.close();
     }
     if (await readText(root, edit.path) !== edit.before) throw new Error("Setup input changed during installation: " + edit.path);
-    await fs18.rename(temporary, file);
+    await fs19.rename(temporary, file);
     return true;
   } finally {
-    await fs18.rm(temporary, { force: true });
+    await fs19.rm(temporary, { force: true });
   }
 }
 var init_files2 = __esm({
@@ -4796,18 +4879,55 @@ var init_files2 = __esm({
 });
 
 // src/setup/launcher.ts
-var BOOTSTRAP, mcpCommand, hookCommand, LAUNCHER;
+var BOOTSTRAP, POWERSHELL_BOOTSTRAP, mcpCommand, hookCommand, SHELL_LAUNCHER, POWERSHELL_LAUNCHER, LAUNCHER;
 var init_launcher = __esm({
   "src/setup/launcher.ts"() {
     "use strict";
     BOOTSTRAP = "require(require('node:path').join(require('node:child_process').execFileSync('git',['rev-parse','--show-toplevel'],{encoding:'utf8'}).trim(),'.mason','run.cjs'))";
-    mcpCommand = (host) => ({ command: "node", args: ["-e", BOOTSTRAP, "--", host, "mcp"] });
-    hookCommand = (host) => `node -e "${BOOTSTRAP}" -- ${host} auto`;
+    POWERSHELL_BOOTSTRAP = "& (Join-Path (git rev-parse --show-toplevel) '.mason/run.ps1')";
+    mcpCommand = (host, runtime) => !runtime?.bundle ? { command: "node", args: ["-e", BOOTSTRAP, "--", host, "mcp"] } : process.platform === "win32" ? { command: "powershell.exe", args: ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", POWERSHELL_BOOTSTRAP, host, "mcp"] } : { command: "sh", args: ["-c", 'exec sh "$(git rev-parse --show-toplevel)/.mason/run.sh" "$@"', "mason", host, "mcp"] };
+    hookCommand = (host, runtime) => !runtime?.bundle ? `node -e "${BOOTSTRAP}" -- ${host} auto` : process.platform === "win32" ? `powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command "${POWERSHELL_BOOTSTRAP} ${host} auto"` : `sh "$(git rev-parse --show-toplevel)/.mason/run.sh" ${host} auto`;
+    SHELL_LAUNCHER = `#!/bin/sh
+set -eu
+advisory=0
+if [ "\${2-}" = auto ] && [ "\${3-}" = hook ]; then advisory=1; fi
+fail() {
+  if [ "$advisory" -eq 1 ]; then printf '%s\\n' '{"systemMessage":"Mason runtime unavailable. Rerun mason setup for this checkout; verification was not established."}'; exit 0; fi
+  echo 'Mason runtime unavailable. Rerun mason setup for this checkout.' >&2; exit 2
+}
+root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd) || fail
+case "\${1-}" in codex|claude) ;; *) fail ;; esac
+pointer="$root/.mason/runtime/$1.txt"
+[ -f "$pointer" ] || fail
+runtime=$(cat "$pointer") || fail
+case "$runtime" in ''|*[!0-9a-f]*) fail ;; esac
+[ "\${#runtime}" -eq 24 ] || fail
+[ -x "$root/.mason/runtime/$runtime/node" ] || fail
+if [ "$advisory" -eq 1 ]; then
+  "$root/.mason/runtime/$runtime/node" "$root/.mason/run.cjs" "$@" || fail
+else
+  exec "$root/.mason/runtime/$runtime/node" "$root/.mason/run.cjs" "$@"
+fi
+`;
+    POWERSHELL_LAUNCHER = `# Managed by mason setup; no system Node installation is used.
+$ErrorActionPreference = 'Stop'
+$advisory = $args.Count -ge 3 -and $args[1] -eq 'auto' -and $args[2] -eq 'hook'
+try {
+  if ($args.Count -lt 2 -or $args[0] -notin @('codex','claude')) { throw 'Invalid Mason host.' }
+  $runtime = (Get-Content -LiteralPath (Join-Path $PSScriptRoot ('runtime/' + $args[0] + '.txt')) -Raw).Trim()
+  if ($runtime -cnotmatch '^[a-f0-9]{24}$') { throw 'Invalid Mason runtime pointer.' }
+  & (Join-Path $PSScriptRoot ('runtime/' + $runtime + '/node.exe')) (Join-Path $PSScriptRoot 'run.cjs') @args
+  if ($LASTEXITCODE -ne 0) { throw 'Mason runtime failed.' }
+} catch {
+  if ($advisory) { Write-Output '{"systemMessage":"Mason runtime unavailable. Rerun mason setup for this checkout; verification was not established."}'; exit 0 }
+  [Console]::Error.WriteLine($_.Exception.Message); exit 2
+}
+`;
     LAUNCHER = `// Managed by mason-auto setup. Rerun setup to install this checkout's pinned runtime.
 const fs = require('node:fs');
 const path = require('node:path');
 const {pathToFileURL} = require('node:url');
-const launchArgs = process.argv.slice(1);
+const launchArgs = process.argv.slice(process.argv[1] && path.resolve(process.argv[1]) === __filename ? 2 : 1);
 (async () => {
   const root = path.dirname(__dirname);
   const args = launchArgs;
@@ -4816,7 +4936,13 @@ const launchArgs = process.argv.slice(1);
   const setup = JSON.parse(fs.readFileSync(path.join(__dirname, 'setup.json'), 'utf8'));
   const entry = setup.hosts?.[host];
   if (setup.version !== 1 || !entry || !/^[a-f0-9]{24}$/.test(entry.runtime?.id)) throw new Error('Mason is not configured for this host. Rerun mason-auto setup.');
-  const binary = path.join(__dirname, 'runtime', entry.runtime.id, 'node_modules', 'mason-context', 'dist', 'mason-' + command + '.js');
+  const base = path.join(__dirname, 'runtime', entry.runtime.id);
+  if (entry.runtime.bundle) {
+    const node = process.platform === 'win32' ? 'node.exe' : 'node';
+    if (fs.realpathSync(process.execPath) !== fs.realpathSync(path.join(base, node))) throw new Error('Mason runtime pointer differs from the configured version. Rerun setup.');
+  }
+  const binary = entry.runtime.bundle ? path.join(base, 'app', 'dist', 'mason-' + command + '.js')
+    : path.join(base, 'node_modules', 'mason-context', 'dist', 'mason-' + command + '.js');
   if (!fs.existsSync(binary)) throw new Error('The pinned Mason runtime is missing in this checkout. Rerun mason-auto setup --host ' + host + '.');
   process.env.MASON_SETUP_ROOT = root;
   process.env.MASON_SETUP_HOST = host;
@@ -4835,7 +4961,7 @@ const launchArgs = process.argv.slice(1);
 // src/setup/config.ts
 import { isDeepStrictEqual } from "util";
 import { parse, stringify } from "smol-toml";
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 async function instructionEdits(root, host) {
   const found = await Promise.all(DOC_CANDIDATES.map(async (file) => ({ path: file, text: await readText(root, file) })));
   const existing = found.find((f) => f.text !== null);
@@ -4864,22 +4990,22 @@ async function instructionEdits(root, host) {
   }
   return edits;
 }
-function managedMcp(previous, host) {
+function managedMcp(previous, host, runtime) {
   const options = previous === void 0 ? {} : object.parse(previous);
   for (const key of ["command", "args", "url", "type", "headers", "http_headers", "env_http_headers", "bearer_token_env_var"]) delete options[key];
-  return { ...options, ...mcpCommand(host) };
+  return { ...options, ...mcpCommand(host, runtime) };
 }
-async function mcpEdit(root, host) {
+async function mcpEdit(root, host, runtime) {
   const file = mcpPath(host), before = await readText(root, file);
   if (host === "claude") {
     const config2 = before === null ? {} : object.parse(JSON.parse(before));
     const servers2 = object.parse(config2.mcpServers ?? {});
-    return { path: file, before, after: JSON.stringify({ ...config2, mcpServers: { ...servers2, mason: managedMcp(servers2.mason, host) } }, null, 2) + "\n" };
+    return { path: file, before, after: JSON.stringify({ ...config2, mcpServers: { ...servers2, mason: managedMcp(servers2.mason, host, runtime) } }, null, 2) + "\n" };
   }
   const config = parse(before ?? "");
   const managed = (before ?? "").includes(TOML_START);
   const servers = config.mcp_servers;
-  const desired = managedMcp(servers?.mason, host);
+  const desired = managedMcp(servers?.mason, host, runtime);
   let base = before ?? "";
   if (servers?.mason && !managed) {
     const headers = [...base.matchAll(/^\s*\[\[?.+?\]\]?[^\S\r\n]*(?:#.*)?$/gm)];
@@ -4893,10 +5019,10 @@ async function mcpEdit(root, host) {
   if (!isDeepStrictEqual(parsed, expected)) throw new Error("Could not safely configure the Mason MCP entry without changing other settings.");
   return { path: file, before, after };
 }
-async function hookEdits(root, host) {
+async function hookEdits(root, host, runtime) {
   const file = configPath(host), before = await readText(root, file);
   const { planAutomationInstall: planAutomationInstall2 } = await Promise.resolve().then(() => (init_install(), install_exports));
-  const plan = await planAutomationInstall2(root, host, hookCommand(host));
+  const plan = await planAutomationInstall2(root, host, hookCommand(host, runtime));
   return [
     { path: file, before, after: JSON.stringify(plan.config, null, 2) + "\n" },
     { path: ".mason/automation.json", before: await readText(root, ".mason/automation.json"), after: JSON.stringify(plan.record, null, 2) + "\n" }
@@ -4912,18 +5038,20 @@ async function ancillaryEdits(root) {
     if (error.code !== 1) throw error;
   }
   const retainParentRule = parentIgnored || !!ignore?.replace(/\r\n/g, "\n").includes("# mason:ignore:start\n!/.mason/\n/.mason/*");
-  const rules = [...retainParentRule ? ["!/.mason/", "/.mason/*"] : [], "!/.mason/decisions/", "!/.mason/decisions/**", "!/.mason/setup.json", "!/.mason/automation.json", "!/.mason/project.json", "!/.mason/run.cjs", "/.mason/reports/", "/.mason/runtime/"].join("\n");
+  const rules = [...retainParentRule ? ["!/.mason/", "/.mason/*"] : [], "!/.mason/decisions/", "!/.mason/decisions/**", "!/.mason/setup.json", "!/.mason/automation.json", "!/.mason/project.json", "!/.mason/run.cjs", "!/.mason/run.sh", "!/.mason/run.ps1", "/.mason/reports/", "/.mason/runtime/"].join("\n");
   return [
     { path: ".gitignore", before: ignore, after: managedBlock(ignore ?? "", "# mason:ignore:start", "# mason:ignore:end", rules) },
-    { path: ".mason/run.cjs", before: await readText(root, ".mason/run.cjs"), after: LAUNCHER }
+    { path: ".mason/run.cjs", before: await readText(root, ".mason/run.cjs"), after: LAUNCHER },
+    { path: ".mason/run.sh", before: await readText(root, ".mason/run.sh"), after: SHELL_LAUNCHER },
+    { path: ".mason/run.ps1", before: await readText(root, ".mason/run.ps1"), after: POWERSHELL_LAUNCHER }
   ];
 }
-async function inspectHostConfig(root, host, plannedMcp) {
+async function inspectHostConfig(root, host, plannedMcp, runtime) {
   const text2 = plannedMcp ?? await readText(root, mcpPath(host));
   const config = host === "codex" ? parse(text2 ?? "") : object.parse(JSON.parse(text2 ?? "{}"));
   const servers = host === "codex" ? config.mcp_servers : config.mcpServers;
   const hooks = automationConfigSchema.parse(JSON.parse(await readText(root, configPath(host)) ?? "{}"));
-  const expected = hookConfig(host, hookCommand(host));
+  const expected = hookConfig(host, hookCommand(host, runtime));
   const mcp = servers?.mason === void 0 ? null : object.parse(servers.mason);
   return {
     mcp,
@@ -4945,7 +5073,7 @@ var init_config = __esm({
     init_install();
     init_files2();
     init_launcher();
-    object = z16.record(z16.unknown());
+    object = z17.record(z17.unknown());
     mcpPath = (host) => host === "codex" ? ".codex/config.toml" : ".mcp.json";
     TOML_START = "# mason:mcp:start";
     TOML_END = "# mason:mcp:end";
@@ -4961,8 +5089,8 @@ __export(observations_exports, {
   observeActivation: () => observeActivation,
   readObservation: () => readObservation
 });
-import fs19 from "fs/promises";
-import { z as z17 } from "zod";
+import fs20 from "fs/promises";
+import { z as z18 } from "zod";
 function observationPath(directory, host, revision) {
   return `${directory}/activation/${host}-${revision}.json`;
 }
@@ -4978,8 +5106,8 @@ async function observeActivation(dir, event, options = {}) {
   if (host !== "codex" && host !== "claude" || !revision || !process.env.MASON_SETUP_ROOT) return null;
   try {
     const capturedDirectory = options.reportPath?.match(/^(\.mason\/reports\/automation\/[a-f0-9]{24})\/checks\//)?.[1];
-    const ws = capturedDirectory ? { root: await fs19.realpath(dir), directory: capturedDirectory } : await workspace(dir);
-    if (ws.root !== await fs19.realpath(process.env.MASON_SETUP_ROOT)) return null;
+    const ws = capturedDirectory ? { root: await fs20.realpath(dir), directory: capturedDirectory } : await workspace(dir);
+    if (ws.root !== await fs20.realpath(process.env.MASON_SETUP_ROOT)) return null;
     const setup = await loadSetup(ws.root);
     if (setup?.hosts[host]?.revision !== revision) return "Mason setup changed; restart the assistant to observe the current integration.";
     const directory = ws.directory + "/activation";
@@ -5025,18 +5153,18 @@ var init_observations = __esm({
     init_store();
     init_storage();
     init_model();
-    observationSchema = z17.object({
-      version: z17.literal(1),
-      root: z17.string(),
-      revision: z17.string(),
-      host: z17.enum(["codex", "claude"]),
-      contextCalls: z17.number().int().nonnegative(),
-      lastContextAt: z17.string().optional(),
-      sessions: z17.record(z17.object({
-        events: z17.array(z17.enum(events)),
-        at: z17.string(),
-        verificationStatus: z17.string().optional(),
-        reportPath: z17.string().optional()
+    observationSchema = z18.object({
+      version: z18.literal(1),
+      root: z18.string(),
+      revision: z18.string(),
+      host: z18.enum(["codex", "claude"]),
+      contextCalls: z18.number().int().nonnegative(),
+      lastContextAt: z18.string().optional(),
+      sessions: z18.record(z18.object({
+        events: z18.array(z18.enum(events)),
+        at: z18.string(),
+        verificationStatus: z18.string().optional(),
+        reportPath: z18.string().optional()
       }))
     });
   }
@@ -5066,17 +5194,18 @@ async function setupStatus(dir) {
     };
   }
   const hosts = {};
-  const launcherCurrent = await readText(ws.root, ".mason/run.cjs") === LAUNCHER;
+  const commonLauncherCurrent = await readText(ws.root, ".mason/run.cjs") === LAUNCHER;
   const automation = await automationStatus(ws.root);
   for (const host of ["codex", "claude"]) {
     const entry = setup.hosts[host];
     if (!entry) continue;
+    const launcherCurrent = commonLauncherCurrent && (!entry.runtime.bundle || await readText(ws.root, ".mason/run.sh") === SHELL_LAUNCHER && await readText(ws.root, ".mason/run.ps1") === POWERSHELL_LAUNCHER && await readText(ws.root, `.mason/runtime/${host}.txt`) === entry.runtime.id + "\n");
     const instructions = await instructionEdits(ws.root, host);
     const instructionsCurrent = instructions.every((edit) => edit.before === edit.after);
     const installed = await verifyRuntime(ws.root, entry.runtime);
-    const config = await inspectHostConfig(ws.root, host);
-    const mcp = !config.mcpDisabled && hash(config.mcp) === entry.mcpFingerprint && isDeepStrictEqual2({ command: config.mcp?.command, args: config.mcp?.args }, mcpCommand(host));
-    const hooks = isDeepStrictEqual2(config.hooks, hookConfig(host, hookCommand(host)).hooks) && !config.disabled;
+    const config = await inspectHostConfig(ws.root, host, void 0, entry.runtime);
+    const mcp = !config.mcpDisabled && hash(config.mcp) === entry.mcpFingerprint && isDeepStrictEqual2({ command: config.mcp?.command, args: config.mcp?.args }, mcpCommand(host, entry.runtime));
+    const hooks = isDeepStrictEqual2(config.hooks, hookConfig(host, hookCommand(host, entry.runtime)).hooks) && !config.disabled;
     const local = await loadSetupReceipt(ws.root, ws.directory, host);
     const configured = local?.status === "configured" && local.root === ws.root && local.revision === entry.revision;
     const observation = await readObservation(ws.root, ws.directory, host, entry.revision);
@@ -5170,15 +5299,15 @@ async function setupProject(dir, options = {}) {
     const existing = await loadSetup(ws.root);
     const previousReceipt = await loadSetupReceipt(ws.root, ws.directory, host);
     const marker = await loadProjectMarker(ws.root);
+    const selected = await sourceRuntime();
     const instructions = await instructionEdits(ws.root, host);
-    const mcp = await mcpEdit(ws.root, host);
-    const hooks = await hookEdits(ws.root, host);
+    const mcp = await mcpEdit(ws.root, host, selected.runtime);
+    const hooks = await hookEdits(ws.root, host, selected.runtime);
     const ancillary = await ancillaryEdits(ws.root);
     const edits = [...ancillary, ...instructions, mcp, ...hooks];
     const setupBefore = await readText(ws.root, ".mason/setup.json");
-    const selected = await sourceRuntime();
-    const mcpFingerprint = hash((await inspectHostConfig(ws.root, host, mcp.after)).mcp);
-    const desiredHooks = hookConfig(host, hookCommand(host)).hooks;
+    const mcpFingerprint = hash((await inspectHostConfig(ws.root, host, mcp.after, selected.runtime)).mcp);
+    const desiredHooks = hookConfig(host, hookCommand(host, selected.runtime)).hooks;
     const fingerprint = hash({
       runtime: selected.runtime,
       launcher: LAUNCHER,
@@ -5206,6 +5335,10 @@ async function setupProject(dir, options = {}) {
       revision
     });
     await installRuntime(ws.root, selected);
+    if (selected.runtime.bundle) {
+      const pointer = `.mason/runtime/${host}.txt`;
+      await applyEdit(ws.root, { path: pointer, before: await readText(ws.root, pointer), after: selected.runtime.id + "\n" });
+    }
     const changedFiles = [];
     for (const edit of edits) if (await applyEdit(ws.root, edit)) changedFiles.push(edit.path);
     if (await applyEdit(ws.root, { path: ".mason/setup.json", before: setupBefore, after: JSON.stringify(setup, null, 2) + "\n" })) changedFiles.push(".mason/setup.json");
@@ -5214,7 +5347,7 @@ async function setupProject(dir, options = {}) {
       changedFiles.push(".mason/project.json");
     }
     const checked = await automate(ws.root, { event: "turn_start" });
-    const configured = await inspectHostConfig(ws.root, host);
+    const configured = await inspectHostConfig(ws.root, host, void 0, selected.runtime);
     await writeStoreJson(ws.root, receiptPath, {
       version: 1,
       host,
@@ -5283,8 +5416,8 @@ __export(client_exports, {
 function createConfluenceClient(config, fetchFn = fetch) {
   const baseUrl = config.baseUrl.replace(/\/+$/, "");
   const auth = "Basic " + Buffer.from(`${config.email}:${config.apiToken}`).toString("base64");
-  async function call(method, path29, body) {
-    const res = await fetchFn(`${baseUrl}${path29}`, {
+  async function call(method, path30, body) {
+    const res = await fetchFn(`${baseUrl}${path30}`, {
       method,
       headers: {
         Authorization: auth,
@@ -5296,7 +5429,7 @@ function createConfluenceClient(config, fetchFn = fetch) {
     if (!res.ok) {
       const text2 = await res.text();
       throw new Error(
-        `Confluence ${method} ${path29} failed: ${res.status} ${res.statusText} \u2014 ${text2}`
+        `Confluence ${method} ${path30} failed: ${res.status} ${res.statusText} \u2014 ${text2}`
       );
     }
     if (res.status === 204) return null;
@@ -5397,28 +5530,28 @@ __export(config_exports, {
   saveConfluenceConfig: () => saveConfluenceConfig,
   validateProvider: () => validateProvider
 });
-import fs20 from "fs/promises";
-import path26 from "path";
+import fs21 from "fs/promises";
+import path27 from "path";
 import os3 from "os";
 import { execFile as execFile16 } from "child_process";
 import { promisify as promisify16 } from "util";
 function configDir() {
-  return path26.join(os3.homedir(), ".mason");
+  return path27.join(os3.homedir(), ".mason");
 }
 function configFile() {
-  return path26.join(configDir(), "config.json");
+  return path27.join(configDir(), "config.json");
 }
 async function loadConfig() {
   try {
-    const raw = await fs20.readFile(configFile(), "utf-8");
+    const raw = await fs21.readFile(configFile(), "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
   }
 }
 async function saveConfig(config) {
-  await fs20.mkdir(configDir(), { recursive: true });
-  await fs20.writeFile(configFile(), JSON.stringify(config, null, 2), "utf-8");
+  await fs21.mkdir(configDir(), { recursive: true });
+  await fs21.writeFile(configFile(), JSON.stringify(config, null, 2), "utf-8");
 }
 function getDefaultModel(provider) {
   return DEFAULT_MODELS[provider];
@@ -5578,21 +5711,21 @@ var init_renderer = __esm({
 });
 
 // src/confluence/diff.ts
-import fs21 from "fs/promises";
-import path27 from "path";
-import { createHash as createHash6 } from "crypto";
+import fs22 from "fs/promises";
+import path28 from "path";
+import { createHash as createHash7 } from "crypto";
 function hashDescription(description) {
-  return createHash6("sha256").update(description, "utf8").digest("hex");
+  return createHash7("sha256").update(description, "utf8").digest("hex");
 }
 function syncStateDir(rootDir) {
-  return path27.join(rootDir, ".mason");
+  return path28.join(rootDir, ".mason");
 }
 function syncStatePath(rootDir) {
-  return path27.join(syncStateDir(rootDir), "confluence-sync.json");
+  return path28.join(syncStateDir(rootDir), "confluence-sync.json");
 }
 async function loadSyncState(rootDir) {
   try {
-    const raw = await fs21.readFile(syncStatePath(rootDir), "utf-8");
+    const raw = await fs22.readFile(syncStatePath(rootDir), "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed.version !== 2) return null;
     return parsed;
@@ -5601,8 +5734,8 @@ async function loadSyncState(rootDir) {
   }
 }
 async function saveSyncState(rootDir, state) {
-  await fs21.mkdir(syncStateDir(rootDir), { recursive: true });
-  await fs21.writeFile(
+  await fs22.mkdir(syncStateDir(rootDir), { recursive: true });
+  await fs22.writeFile(
     syncStatePath(rootDir),
     JSON.stringify(state, null, 2),
     "utf-8"
@@ -6152,12 +6285,12 @@ var init_sync = __esm({
 init_provenance();
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 
 // src/mcp/tools.ts
 init_repair();
-import fs22 from "fs/promises";
-import path28 from "path";
+import fs23 from "fs/promises";
+import path29 from "path";
 import { execFile as execFile18 } from "child_process";
 import { promisify as promisify18 } from "util";
 
@@ -7062,7 +7195,7 @@ async function buildContext(dir) {
   };
 }
 async function analyzeProject(dir) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const context = await buildContext(rootDir);
   const results = await runAll(context);
   const projectSnapshot = await detectProjectSnapshot(rootDir);
@@ -7117,7 +7250,7 @@ async function detectProjectSnapshot(rootDir) {
   const present = [];
   for (const file of buildFiles) {
     try {
-      await fs22.access(path28.join(rootDir, file));
+      await fs23.access(path29.join(rootDir, file));
       present.push(file);
     } catch {
     }
@@ -7159,7 +7292,7 @@ async function detectProjectSnapshot(rootDir) {
   const sourceFiles = await access.list();
   const fileCounts = {};
   for (const file of sourceFiles) {
-    const ext = path28.extname(file).slice(1);
+    const ext = path29.extname(file).slice(1);
     fileCounts[ext] = (fileCounts[ext] ?? 0) + 1;
   }
   return {
@@ -7170,7 +7303,7 @@ async function detectProjectSnapshot(rootDir) {
   };
 }
 async function getCodeSamples(dir, count3 = 15) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const samples = await sampleFiles(rootDir, count3);
   const output = {
     note: "These are previews (first ~60 lines). Read the file directly with your own tools to see it in full.",
@@ -7213,7 +7346,7 @@ async function unmappedContextResponse(rootDir) {
   });
 }
 async function getProjectStructure(dir) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const allFiles = await (await createFileAccess(rootDir)).list("**/*");
   const dirInfo = /* @__PURE__ */ new Map();
   for (const file of allFiles) {
@@ -7225,7 +7358,7 @@ async function getProjectStructure(dir) {
       }
       const info = dirInfo.get(dirPath);
       info.fileCount++;
-      const ext = path28.extname(file).slice(1);
+      const ext = path29.extname(file).slice(1);
       if (ext) {
         info.extensions.set(ext, (info.extensions.get(ext) ?? 0) + 1);
       }
@@ -7270,7 +7403,7 @@ async function buildChangedFilePreviews(rootDir, changedFiles) {
   return previews2;
 }
 async function getSnapshot(dir) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const snapshot = await loadSnapshot(rootDir);
   if (!snapshot) {
     return unmappedContextResponse(rootDir);
@@ -7371,7 +7504,7 @@ function driftHint(report) {
   return "Read the changed files under staleFeatures/staleFlows, update those entries (fold unmappedFiles into the right features), and call save_snapshot with only the affected entries \u2014 unchanged entries are preserved. Drop ghostFiles from any entries that reference them, and delete features/flows that no longer exist via save_snapshot's removeFeatures/removeFlows.";
 }
 async function checkDrift(dir) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const report = await computeDrift(rootDir);
   if (!report) {
     return JSON.stringify({
@@ -7402,7 +7535,7 @@ async function checkDrift(dir) {
   return JSON.stringify({ exists: true, ...report, verification, hint });
 }
 async function generateSnapshotBatch(dir, offset = 0, batchSize = DEFAULT_BATCH_SIZE, files) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const scoped = files !== void 0 && files.length > 0;
   const scopeFiles = scoped ? sanitizePaths(rootDir, files) : void 0;
   const batch = await prepareSnapshotBatch(dir, offset, batchSize, scopeFiles);
@@ -7449,7 +7582,7 @@ async function generateSnapshotBatch(dir, offset = 0, batchSize = DEFAULT_BATCH_
   );
 }
 async function saveSnapshotPartial(dir, batchId, offset, features, flows) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   for (const feat of Object.values(features)) {
     feat.files = sanitizePaths(rootDir, feat.files);
     if (feat.tests) feat.tests = sanitizePaths(rootDir, feat.tests);
@@ -7478,7 +7611,7 @@ async function saveSnapshotPartial(dir, batchId, offset, features, flows) {
   );
 }
 async function reduceSnapshot(dir) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const partials = await loadAllPartials(rootDir);
   if (partials.length === 0) {
     return JSON.stringify(
@@ -7540,7 +7673,7 @@ async function reduceSnapshot(dir) {
   );
 }
 async function fullAnalysis(dir) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const [analysis, structure, samples, testMap, snapshot] = await Promise.all([
     analyzeProject(dir),
     getProjectStructure(dir),
@@ -7569,7 +7702,7 @@ function sanitizePaths(rootDir, files) {
   return sanitizeRepoPaths(files);
 }
 async function saveSnapshotData(dir, features, flows, removeFeatures = [], removeFlows = []) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const gitHash = await getCurrentGitHash(rootDir);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   for (const feat of Object.values(features)) {
@@ -7653,7 +7786,7 @@ async function saveSnapshotData(dir, features, flows, removeFeatures = [], remov
   });
 }
 async function getImpact(dir, files) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const { analyzeImpact: analyzeImpact2 } = await Promise.resolve().then(() => (init_impact(), impact_exports));
   const result = await analyzeImpact2(rootDir, files);
   return JSON.stringify(result, null, 2);
@@ -7662,7 +7795,7 @@ var VERIFY_DEFAULT_SAMPLE = 5;
 var VERIFY_MAX_FILES_PER_ENTRY = 8;
 var VERIFY_SKELETON_CHARS = 500;
 async function verifySnapshot(dir, sample = VERIFY_DEFAULT_SAMPLE) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const snapshot = await loadSnapshot(rootDir);
   if (!snapshot) {
     return JSON.stringify({
@@ -7727,7 +7860,7 @@ async function verifySnapshot(dir, sample = VERIFY_DEFAULT_SAMPLE) {
   });
 }
 async function saveVerification(dir, verdicts) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const snapshot = await loadSnapshot(rootDir);
   if (!snapshot) {
     return JSON.stringify({ exists: false, hint: "No concept map exists." });
@@ -7765,16 +7898,16 @@ async function saveVerification(dir, verdicts) {
   });
 }
 async function saveDecision(dir, input) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const { upsertDecision: upsertDecision2 } = await Promise.resolve().then(() => (init_decisions(), decisions_exports));
   const result = await upsertDecision2(rootDir, input);
   return JSON.stringify(result);
 }
 async function reviewDecision2(dir, input) {
-  return JSON.stringify(await reviewDecision(path28.resolve(dir), input));
+  return JSON.stringify(await reviewDecision(path29.resolve(dir), input));
 }
 async function getContext(dir, task, files) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const { assembleContext: assembleContext2 } = await Promise.resolve().then(() => (init_assemble(), assemble_exports));
   const bundle = await assembleContext2(rootDir, task, files);
   return JSON.stringify(bundle);
@@ -7816,7 +7949,7 @@ async function masonInit(dir, options = {}) {
     return JSON.stringify(await setupProject2(dir, options), null, 2);
   }
   if (options.host) throw new Error("host applies only to mode: setup.");
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const marker = await loadProjectMarker(rootDir);
   const mode = options.mode ?? "quickstart";
   const findings = await inspectOnboarding(rootDir, options.base, options.evidence);
@@ -7834,7 +7967,7 @@ async function masonInit(dir, options = {}) {
   );
 }
 async function masonCompleteInit(dir, options = {}) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const existing = await loadProjectMarker(rootDir);
   const marker = {
     version: 1,
@@ -7942,7 +8075,7 @@ async function masonSetConfluence(input) {
   );
 }
 async function exportToConfluenceTool(dir, overrides) {
-  const rootDir = path28.resolve(dir);
+  const rootDir = path29.resolve(dir);
   const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config2(), config_exports));
   const { exportToConfluence: exportToConfluence2 } = await Promise.resolve().then(() => (init_sync(), sync_exports));
   const config = await loadConfig2();
@@ -7980,7 +8113,7 @@ function createMcpServer() {
   const server = new McpServer(
     {
       name: "mason",
-      version: "0.13.0"
+      version: "0.14.0"
     },
     {
       instructions: 'Mason retrieves recorded decisions, file impact, and optional feature/flow maps. Use get_context with the task and known files, and get_impact before editing. Save learned rationale and constraints with save_decision; review and commit the local records through the project workflow. These tools work without initialization or a concept map. Consult trust and diagnostics: changed or unknown freshness needs source inspection, failed verification needs correction, and proposals are suggestions and legacy records are unreviewed. Accepted decisions are recorded team constraints, still subject to freshness checks. Use review_decision to prepare code evidence and record only authorized acceptance, reaffirmation, or retirement. Never invent a reviewer or treat these recorded identities as authenticated approval. mason_init returns documentation audit and committed-diff review findings with a quickstart guide. Use mode: "map" only when a full architecture map is requested. A missing map is not a setup failure; use decisions and source evidence. get_snapshot provides architecture navigation when a map is available. The mason-audit and mason-review CLIs also work without setup.'
@@ -7990,11 +8123,11 @@ function createMcpServer() {
     "mason_init",
     "Inspect this project now: returns documentation audit findings, committed-diff review findings, decision/map status, and a quickstart playbook. Quickstart and map modes are read-only and deterministic. Explicit mode: setup installs a pinned project runtime, MCP configuration, instructions and lifecycle hooks while retaining original audit evidence; use it only when the user requests setup. Optional host selects codex or claude. Optional base selects the review comparison; evidence imports CI manifests with check outcomes, commit freshness, and links to changed files and accepted decisions. mode: map returns the full Map-Reduce build workflow. Repeat calls refresh findings even after setup.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      mode: z18.enum(["quickstart", "map", "setup"]).optional().default("quickstart").describe("Quickstart inspects without edits; map requests an architecture build; setup installs the shared onboarding flow."),
-      host: z18.enum(["codex", "claude"]).optional().describe("Assistant to configure in setup mode; inferred only when unambiguous."),
-      base: z18.string().optional().describe("Git ref for committed-diff review. Defaults to the first available main branch ref."),
-      evidence: z18.array(z18.string()).max(10).optional().describe("Repository-local CI evidence manifests to include in the review. Imports Vitest JSON and SARIF without executing check commands.")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      mode: z19.enum(["quickstart", "map", "setup"]).optional().default("quickstart").describe("Quickstart inspects without edits; map requests an architecture build; setup installs the shared onboarding flow."),
+      host: z19.enum(["codex", "claude"]).optional().describe("Assistant to configure in setup mode; inferred only when unambiguous."),
+      base: z19.string().optional().describe("Git ref for committed-diff review. Defaults to the first available main branch ref."),
+      evidence: z19.array(z19.string()).max(10).optional().describe("Repository-local CI evidence manifests to include in the review. Imports Vitest JSON and SARIF without executing check commands.")
     },
     async ({ dir, mode, host, base, evidence }) => {
       const result = await masonInit(dir, { mode, host, base, evidence });
@@ -8005,8 +8138,8 @@ function createMcpServer() {
     "mason_automation",
     "Inspect installed automation and observed host events, or resume/check retained documentation repair evidence across sessions. status is read-only; check saves local baselines and verification reports without editing source or approving advisories. Returns concise results with a full report path. Works without a map.",
     {
-      dir: z18.string().describe("Absolute path to the project directory"),
-      action: z18.enum(["status", "check"]).describe("Inspect configuration and receipts, or capture/resume and verify original audit evidence.")
+      dir: z19.string().describe("Absolute path to the project directory"),
+      action: z19.enum(["status", "check"]).describe("Inspect configuration and receipts, or capture/resume and verify original audit evidence.")
     },
     async ({ dir, action }) => ({ content: [{ type: "text", text: await masonAutomation(dir, action) }] })
   );
@@ -8014,10 +8147,10 @@ function createMcpServer() {
     "mason_repair",
     "Track documentation repairs against original audit evidence. prepare saves a local baseline and returns a scoped work order; verify reads that baseline and reports resolved, unresolved, review-required, unverified, and new findings. Suppressed advisories remain unresolved. Does not edit documentation or approve decisions. No map required.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      action: z18.enum(["prepare", "verify"]),
-      baselinePath: z18.string().optional().describe("Original baseline path returned by prepare; required for verify."),
-      checks: z18.array(z18.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"])).min(1).optional().describe("Optional audit check subset for prepare. Verification always uses the original checks.")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      action: z19.enum(["prepare", "verify"]),
+      baselinePath: z19.string().optional().describe("Original baseline path returned by prepare; required for verify."),
+      checks: z19.array(z19.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"])).min(1).optional().describe("Optional audit check subset for prepare. Verification always uses the original checks.")
     },
     async ({ dir, action, baselinePath, checks }) => {
       const result = await masonRepair(dir, { action, baselinePath, checks });
@@ -8028,8 +8161,8 @@ function createMcpServer() {
     "mason_complete_init",
     "Record completion of assistant instruction setup in .mason/project.json. Other tools work without this marker. Repeated calls preserve the original setup time and existing settings; pass confluenceConfigured only to change that setting.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      confluenceConfigured: z18.boolean().optional().describe("Set the Confluence setup status; omit to preserve the existing value")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      confluenceConfigured: z19.boolean().optional().describe("Set the Confluence setup status; omit to preserve the existing value")
     },
     async ({ dir, confluenceConfigured }) => {
       const result = await masonCompleteInit(dir, { confluenceConfigured });
@@ -8040,11 +8173,11 @@ function createMcpServer() {
     "mason_set_confluence",
     "Configure Confluence credentials. Two-step flow: (1) call without `spaceKey` to validate the credentials and receive a list of available spaces \u2014 relay them to the user. (2) call again with the same `baseUrl`/`email`/`apiToken` plus the chosen `spaceKey` to persist. Credentials are stored in `~/.mason/config.json`. Warn the user that the API token will be visible in chat history before they paste it.",
     {
-      baseUrl: z18.string().describe("Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically)."),
-      email: z18.string().describe("User's Atlassian account email"),
-      apiToken: z18.string().describe("API token from id.atlassian.com/manage-profile/security/api-tokens"),
-      spaceKey: z18.string().optional().describe("Confluence space key. Omit on the first call to list available spaces."),
-      parentPageId: z18.string().optional().describe("Optional parent page ID under which Mason's index page is created")
+      baseUrl: z19.string().describe("Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically)."),
+      email: z19.string().describe("User's Atlassian account email"),
+      apiToken: z19.string().describe("API token from id.atlassian.com/manage-profile/security/api-tokens"),
+      spaceKey: z19.string().optional().describe("Confluence space key. Omit on the first call to list available spaces."),
+      parentPageId: z19.string().optional().describe("Optional parent page ID under which Mason's index page is created")
     },
     async ({ baseUrl, email, apiToken, spaceKey, parentPageId }) => {
       const result = await masonSetConfluence({
@@ -8061,7 +8194,7 @@ function createMcpServer() {
     "full_analysis",
     "One-shot orientation for a project WITHOUT a concept map (get_snapshot returned exists:false). Returns git history stats, project structure with file counts, curated code sample previews (~60 lines each), and test-to-source mapping. On a mapped project, prefer get_snapshot \u2014 it is cheaper and answers feature/architecture questions directly.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory")
+      dir: z19.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await fullAnalysis(dir);
@@ -8074,7 +8207,7 @@ function createMcpServer() {
     "analyze_project",
     "Run git history analysis on a codebase. Returns commit convention patterns, stale directories, and frequently changed files. These are aggregate stats across hundreds of commits that would be expensive to compute manually.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory")
+      dir: z19.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await analyzeProject(dir);
@@ -8087,8 +8220,8 @@ function createMcpServer() {
     "get_code_samples",
     "Get previews (first ~60 lines) of representative source files from the codebase. Includes entry points, config files, hot files (frequently changed), test examples, and one file per directory for breadth. Read files natively for full content.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      count: z18.number().optional().default(15).describe("Maximum number of files to sample (default: 15)")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      count: z19.number().optional().default(15).describe("Maximum number of files to sample (default: 15)")
     },
     async ({ dir, count: count3 }) => {
       const result = await getCodeSamples(dir, count3);
@@ -8101,7 +8234,7 @@ function createMcpServer() {
     "get_snapshot",
     "Return the optional feature-to-file architecture map with drift and trust evidence. If no map exists, returns exists:false plus project structure, Git signals, and test pairs. Decision capture, get_context, and get_impact still work. No initialization required.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory")
+      dir: z19.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await getSnapshot(dir);
@@ -8114,9 +8247,9 @@ function createMcpServer() {
     "get_context",
     "Assemble task context: matching decisions with rationale, approval, owner, sources, last review, and freshness, plus related tests, file impact, and any available map entries. Proposals are suggestions; legacy records are unreviewed; accepted decisions are constraints subject to freshness. No initialization or map required. Pass task and optional files. map.status and diagnostics preserve missing or invalid knowledge. Impact covers up to three unique files, expanding directory anchors.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      task: z18.string().describe("The task, bug, or change request in natural language \u2014 e.g. 'add rate limiting to the API client' or a ticket description"),
-      files: z18.array(z18.string()).optional().describe("Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      task: z19.string().describe("The task, bug, or change request in natural language \u2014 e.g. 'add rate limiting to the API client' or a ticket description"),
+      files: z19.array(z19.string()).optional().describe("Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.")
     },
     async ({ dir, task, files }) => {
       const result = await getContext(dir, task, files);
@@ -8132,10 +8265,10 @@ function createMcpServer() {
     "generate_snapshot_batch",
     "Map step of the concept-map build. Returns one batch of source files (skeletons of every file in the batch plus a few deeper-read bodies for grounding), along with a system prompt instructing you to derive features and flows for ONLY this batch. Call repeatedly with the returned `nextOffset` until it is null, calling `save_partial_snapshot` between each call. Use product-natural feature names so partials merge cleanly in the reduce step.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      offset: z18.number().int().optional().describe("0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls."),
-      batchSize: z18.number().int().optional().describe("Files per batch. Defaults to 50."),
-      files: z18.array(z18.string()).optional().describe("Scope the batch walk to this explicit file list \u2014 e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh mode: reduce_snapshot will merge the partials into the existing map instead of rebuilding it.")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      offset: z19.number().int().optional().describe("0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls."),
+      batchSize: z19.number().int().optional().describe("Files per batch. Defaults to 50."),
+      files: z19.array(z19.string()).optional().describe("Scope the batch walk to this explicit file list \u2014 e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh mode: reduce_snapshot will merge the partials into the existing map instead of rebuilding it.")
     },
     async ({ dir, offset, batchSize, files }) => {
       const result = await generateSnapshotBatch(dir, offset, batchSize, files);
@@ -8148,23 +8281,23 @@ function createMcpServer() {
     "save_partial_snapshot",
     "Persist the partial concept map you derived for one batch. Call this once per batch, with the `batchId` from the `generate_snapshot_batch` response. Partials accumulate in `.mason/partial-snapshots/` and are merged in the reduce step.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      batchId: z18.string().describe("The `batchId` returned by `generate_snapshot_batch`."),
-      offset: z18.number().int().describe("The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step."),
-      features: z18.record(
-        z18.object({
-          description: z18.string(),
-          files: z18.array(z18.string()),
-          tests: z18.array(z18.string()).optional(),
-          type: z18.enum(["capability", "infrastructure"]).optional().describe(
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      batchId: z19.string().describe("The `batchId` returned by `generate_snapshot_batch`."),
+      offset: z19.number().int().describe("The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step."),
+      features: z19.record(
+        z19.object({
+          description: z19.string(),
+          files: z19.array(z19.string()),
+          tests: z19.array(z19.string()).optional(),
+          type: z19.enum(["capability", "infrastructure"]).optional().describe(
             '"capability" (user-facing functionality) or "infrastructure" (internal plumbing with no end user \u2014 DI/service wiring, config, logging, adapters). Defaults to "capability".'
           )
         })
       ).describe("Partial features for this batch only \u2014 files outside the batch will be added by other partials."),
-      flows: z18.record(
-        z18.object({
-          description: z18.string(),
-          chain: z18.array(z18.string())
+      flows: z19.record(
+        z19.object({
+          description: z19.string(),
+          chain: z19.array(z19.string())
         })
       ).describe("Partial flows whose entire chain is in this batch. Cross-batch flows are reconstructed in reduce.")
     },
@@ -8179,7 +8312,7 @@ function createMcpServer() {
     "reduce_snapshot",
     "Reduce step of the concept-map build. Returns every partial snapshot plus a system prompt asking you to merge them into one coherent project-wide map. Resolve platform variants into single product features, dedupe near-duplicates, and ensure no file is dropped. After producing the unified map, call `save_snapshot` to persist it (this also clears the partials).",
     {
-      dir: z18.string().describe("Absolute path to the project root directory")
+      dir: z19.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await reduceSnapshot(dir);
@@ -8192,25 +8325,25 @@ function createMcpServer() {
     "save_snapshot",
     "Save a concept-to-files map as a persistent project snapshot. Maps feature names and data flows to the files that implement them. Persists across conversations \u2014 future sessions can call get_snapshot to instantly find relevant files. No API key needed \u2014 you are the LLM generating the map.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      features: z18.record(
-        z18.object({
-          description: z18.string().describe("One-line description of the feature"),
-          files: z18.array(z18.string()).describe("File paths that implement this feature"),
-          tests: z18.array(z18.string()).optional().describe("Test file paths for this feature"),
-          type: z18.enum(["capability", "infrastructure"]).optional().describe(
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      features: z19.record(
+        z19.object({
+          description: z19.string().describe("One-line description of the feature"),
+          files: z19.array(z19.string()).describe("File paths that implement this feature"),
+          tests: z19.array(z19.string()).optional().describe("Test file paths for this feature"),
+          type: z19.enum(["capability", "infrastructure"]).optional().describe(
             'Classification: "capability" for user-facing functionality, "infrastructure" for internal plumbing with no end user (DI/service wiring, config, logging, adapters). Capabilities are published to Confluence; infrastructure stays in the AI concept map only. Defaults to "capability".'
           )
         })
       ).describe("Map of feature names to their implementing files"),
-      flows: z18.record(
-        z18.object({
-          description: z18.string().describe("One-line description of the flow"),
-          chain: z18.array(z18.string()).describe("Ordered list of file paths showing data/call flow")
+      flows: z19.record(
+        z19.object({
+          description: z19.string().describe("One-line description of the flow"),
+          chain: z19.array(z19.string()).describe("Ordered list of file paths showing data/call flow")
         })
       ).describe("Map of flow names to ordered file chains"),
-      removeFeatures: z18.array(z18.string()).optional().describe("Feature names to delete from the existing map \u2014 for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves."),
-      removeFlows: z18.array(z18.string()).optional().describe("Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.")
+      removeFeatures: z19.array(z19.string()).optional().describe("Feature names to delete from the existing map \u2014 for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves."),
+      removeFlows: z19.array(z19.string()).optional().describe("Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.")
     },
     async ({ dir, features, flows, removeFeatures, removeFlows }) => {
       const result = await saveSnapshotData(
@@ -8229,17 +8362,17 @@ function createMcpServer() {
     "save_decision",
     "Capture or revise a decision proposal with rationale, anchors, optional owner, sources, and a known actor. No setup or map required. Writes a local record and preserves content history. Changes create a pending proposal while the last accepted revision remains operative; unchanged content does not re-verify or refresh it. Use review_decision for authorized acceptance or reaffirmation. A proposal cannot supersede a record with an operative accepted revision; review its replacement and retire the original separately.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      title: z18.string().max(80).describe("Short, specific headline \u2014 becomes the stable record id"),
-      body: z18.string().max(1500).describe("The knowledge itself: what was tried/decided, why, and what to avoid. Must contain information NOT derivable by reading the code."),
-      category: z18.enum(["decision", "gotcha", "deprecation", "convention"]),
-      files: z18.array(z18.string()).optional().describe("Repo-relative files or directory prefixes this applies to. Matching is shared by retrieval, hooks, review, and drift checking; changes flag the decision for re-verification."),
-      id: z18.string().optional().describe("Existing id to revise. Changed content becomes a proposal; unchanged content leaves the review and freshness untouched."),
-      supersedes: z18.string().optional().describe("Id of an unreviewed record or proposal with no accepted revision to replace. Operative accepted decisions require separate review and retirement."),
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      title: z19.string().max(80).describe("Short, specific headline \u2014 becomes the stable record id"),
+      body: z19.string().max(1500).describe("The knowledge itself: what was tried/decided, why, and what to avoid. Must contain information NOT derivable by reading the code."),
+      category: z19.enum(["decision", "gotcha", "deprecation", "convention"]),
+      files: z19.array(z19.string()).optional().describe("Repo-relative files or directory prefixes this applies to. Matching is shared by retrieval, hooks, review, and drift checking; changes flag the decision for re-verification."),
+      id: z19.string().optional().describe("Existing id to revise. Changed content becomes a proposal; unchanged content leaves the review and freshness untouched."),
+      supersedes: z19.string().optional().describe("Id of an unreviewed record or proposal with no accepted revision to replace. Operative accepted decisions require separate review and retirement."),
       owner: attributionSchema.shape.owner.describe("Responsible person or team, when known. Null clears it. Required for acceptance."),
       sources: attributionSchema.shape.sources.describe("Known PR, issue, incident, discussion, or document references. Omit to preserve; [] clears. At least one is required for acceptance."),
       actor: attributionSchema.shape.actor.describe("Known person or agent recording this revision. Omit if unknown; do not infer from Git identity."),
-      force: z18.boolean().optional().describe("Save even when a near-duplicate was detected")
+      force: z19.boolean().optional().describe("Save even when a near-duplicate was detected")
     },
     async ({ dir, title, body, category, files, id, supersedes, force, owner, sources, actor }) => {
       const result = await saveDecision(dir, {
@@ -8261,12 +8394,12 @@ function createMcpServer() {
     "review_decision",
     "Prepare a decision review: returns the full record and history, any operative accepted revision, provenance, changes and previews for both sets of anchors, and a reviewToken. Then record accept, reaffirm, or retire with that token, the authorized reviewer, and a reason. Acceptance replaces the operative revision; retirement withdraws the entire record including its proposal. Acceptance requires owner, source, readable Git HEAD, and committed anchor changes. Changed records or code invalidate the token. Identities and approvals are recorded assertions for normal PR review, not authenticated proof.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      id: z18.string().regex(/^[a-zA-Z0-9_-]+$/).describe("Decision id from get_context or save_decision"),
-      action: z18.enum(["prepare", "accept", "reaffirm", "retire"]).optional().default("prepare").describe("Prepare is read-only. Other actions record an explicitly authorized review."),
-      reviewer: z18.string().trim().min(1).max(200).optional().describe("Identity of the actual reviewer; required for a verdict. Never invent one."),
-      note: z18.string().trim().min(1).max(1500).optional().describe("Review rationale; required for a verdict. Cite evidence for the decision."),
-      reviewToken: z18.string().regex(/^[a-f0-9]{64}$/).optional().describe("Token from the prepared review; rejects stale record or code revisions")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      id: z19.string().regex(/^[a-zA-Z0-9_-]+$/).describe("Decision id from get_context or save_decision"),
+      action: z19.enum(["prepare", "accept", "reaffirm", "retire"]).optional().default("prepare").describe("Prepare is read-only. Other actions record an explicitly authorized review."),
+      reviewer: z19.string().trim().min(1).max(200).optional().describe("Identity of the actual reviewer; required for a verdict. Never invent one."),
+      note: z19.string().trim().min(1).max(1500).optional().describe("Review rationale; required for a verdict. Cite evidence for the decision."),
+      reviewToken: z19.string().regex(/^[a-f0-9]{64}$/).optional().describe("Token from the prepared review; rejects stale record or code revisions")
     },
     async ({ dir, ...input }) => {
       const result = await reviewDecision2(dir, input);
@@ -8277,7 +8410,7 @@ function createMcpServer() {
     "mason_check_drift",
     "Check how far the concept map has drifted from HEAD. Deterministic (git + filesystem, no LLM). Returns which features/flows are stale and the changed files behind them, new source files not yet mapped, ghost files (mapped but deleted), renames, and a `recommendation`: `up-to-date` (nothing to do), `incremental` (update just the stale entries via save_snapshot), or `full-rebuild` (re-run the Map-Reduce build). Call this before trusting the map in a long session, or periodically to keep the map and any synced wikis fresh.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory")
+      dir: z19.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await checkDrift(dir);
@@ -8290,8 +8423,8 @@ function createMcpServer() {
     "verify_snapshot",
     "Spot-check the concept map's CORRECTNESS (drift checks freshness; this checks entries were right to begin with). Returns a sample of entries \u2014 always the never-verified and least-recently-verified first \u2014 with skeletons of their claimed files, for you to judge whether the files actually implement what the entry claims. Report verdicts back via save_verification. Run periodically, or after an automated refresh wrote entries no human reviewed.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      sample: z18.number().int().optional().describe("Entries to sample (default 5)")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      sample: z19.number().int().optional().describe("Entries to sample (default 5)")
     },
     async ({ dir, sample }) => {
       const result = await verifySnapshot(dir, sample);
@@ -8302,11 +8435,11 @@ function createMcpServer() {
     "save_verification",
     "Record verify_snapshot verdicts. Entries judged ok are stamped verifiedAt; failures are flagged verificationFailed with your note and surface in get_context, get_snapshot, and mason_check_drift until corrected. Verdict notes are required for failures.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      verdicts: z18.record(
-        z18.object({
-          ok: z18.boolean(),
-          note: z18.string().optional().describe("One line on what's wrong \u2014 required when ok is false")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      verdicts: z19.record(
+        z19.object({
+          ok: z19.boolean(),
+          note: z19.string().optional().describe("One line on what's wrong \u2014 required when ok is false")
         })
       ).describe("Entry name \u2192 verdict, exactly as returned by verify_snapshot")
     },
@@ -8319,8 +8452,8 @@ function createMcpServer() {
     "get_impact",
     "Trace the impact of changing files: historical co-change partners, references, and related tests. Deterministic, read-only, and usable without initialization, saved decisions, or a concept map.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      files: z18.array(z18.string()).describe("File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      files: z19.array(z19.string()).describe("File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])")
     },
     async ({ dir, files }) => {
       const result = await getImpact(dir, files);
@@ -8333,12 +8466,12 @@ function createMcpServer() {
     "export_to_confluence",
     "Sync the project's concept map to Confluence as product-readable wiki pages: an index page, one page per feature (PM-language descriptions, no file paths), and a changelog page. Mason replaces managed page bodies; manual edits to those bodies are overwritten. Requires `mason_set_confluence` to have been called first.",
     {
-      dir: z18.string().describe("Absolute path to the project root directory"),
-      spaceKey: z18.string().optional().describe("Override the configured space key"),
-      parentPageId: z18.string().optional().describe("Override the configured parent page ID"),
-      indexPageTitle: z18.string().optional().describe("Title of the index page (default: 'Mason \u2014 System Map')"),
-      changelogPageTitle: z18.string().optional().describe("Title of the changelog page (default: 'Mason \u2014 Changelog')"),
-      featurePagePrefix: z18.string().optional().describe("Prefix for each feature page title (default: 'Feature: ')")
+      dir: z19.string().describe("Absolute path to the project root directory"),
+      spaceKey: z19.string().optional().describe("Override the configured space key"),
+      parentPageId: z19.string().optional().describe("Override the configured parent page ID"),
+      indexPageTitle: z19.string().optional().describe("Title of the index page (default: 'Mason \u2014 System Map')"),
+      changelogPageTitle: z19.string().optional().describe("Title of the changelog page (default: 'Mason \u2014 Changelog')"),
+      featurePagePrefix: z19.string().optional().describe("Prefix for each feature page title (default: 'Feature: ')")
     },
     async ({ dir, spaceKey, parentPageId, indexPageTitle, changelogPageTitle, featurePagePrefix }) => {
       const result = await exportToConfluenceTool(dir, {