mason-context 0.19.1 → 0.19.2

package/dist/mason-mcp.js

@@ -3182,8 +3182,121 @@ var init_findings = __esm({
   }
 });
 
-// src/automation/store.ts
+// src/automation/notifications.ts
 import { z as z5 } from "zod";
+function condition(finding) {
+  const source = finding.current ?? finding.original;
+  const e = source.evidence;
+  const id = e.kind === "decision-anchor" ? digest([source.type, source.anchor.doc, e.decisionId]) : finding.id;
+  const result = { level: "confidence" in source ? 2 : 1, facts: [] };
+  switch (e.kind) {
+    case "count-mismatch":
+      result.magnitude = Math.abs(e.actual - e.claimed);
+      break;
+    case "unmentioned-dir":
+      result.magnitude = e.sourceFileCount;
+      break;
+    case "decision-anchor":
+      result.facts = [...e.changedFiles].sort();
+      break;
+    case "doc-behind-manifests":
+      result.facts = (e.matches ?? []).map((m) => JSON.stringify([m.manifest, m.dependency, m.after])).sort();
+      break;
+  }
+  return { id, condition: result };
+}
+function notificationConditions(findings) {
+  const active = findings.filter((f) => f.status !== "resolved");
+  const currentIds = new Set(active.filter((f) => f.current).map((f) => condition(f).id));
+  const result = {};
+  for (const f of active) {
+    const value = condition(f);
+    if (!f.current && currentIds.has(value.id)) continue;
+    const previous = result[value.id];
+    result[value.id] = previous ? {
+      level: Math.max(previous.level, value.condition.level),
+      facts: [.../* @__PURE__ */ new Set([...previous.facts, ...value.condition.facts])].sort(),
+      ...previous.magnitude !== void 0 || value.condition.magnitude !== void 0 ? { magnitude: Math.max(previous.magnitude ?? 0, value.condition.magnitude ?? 0) } : {}
+    } : value.condition;
+  }
+  return result;
+}
+function createNotificationState(findings, head) {
+  return { version: 1, baselineHead: head, baseline: notificationConditions(findings), delivered: {}, cleared: [] };
+}
+function worsened(current, previous) {
+  return !previous || current.level > previous.level || (current.magnitude ?? 0) > (previous.magnitude ?? 0) || current.facts.some((fact) => !previous.facts.includes(fact));
+}
+function completionFindings(state, findings) {
+  const current = notificationConditions(findings);
+  const cleared = new Set(state.cleared);
+  const resolvedIds = new Set(findings.filter((f) => f.status === "resolved").map((f) => condition(f).id));
+  for (const id of Object.keys(state.baseline)) if (resolvedIds.has(id) && !current[id]) cleared.add(id);
+  state.cleared = [...cleared];
+  const selected = [];
+  const selectedIds = /* @__PURE__ */ new Set();
+  const delivered = { ...state.delivered };
+  for (const finding of findings) {
+    const value = condition(finding);
+    const previous = state.delivered[value.id];
+    value.condition = current[value.id] ?? value.condition;
+    if (finding.status === "unverified" || !finding.current && finding.status !== "resolved") {
+      continue;
+    }
+    if (finding.status === "resolved") {
+      if (!current[value.id]) delete delivered[value.id];
+      continue;
+    }
+    const eligible = cleared.has(value.id) || worsened(value.condition, state.baseline[value.id]);
+    if (!eligible) continue;
+    if (!selectedIds.has(value.id) && worsened(value.condition, previous)) {
+      selectedIds.add(value.id);
+      const source = finding.current;
+      selected.push(source.evidence.kind === "decision-anchor" ? { ...finding, current: { ...source, evidence: { ...source.evidence, changedFiles: value.condition.facts } } } : finding);
+      if (selected.length <= MAX_COMPLETION_FINDINGS) delivered[value.id] = value.condition;
+    }
+  }
+  state.delivered = delivered;
+  return selected;
+}
+function completionSummary(findings, reportPath) {
+  if (!findings.length) return null;
+  const safe = (value) => value.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").slice(0, 250);
+  return [
+    `Mason: ${findings.length} new or worsened finding(s) since the retained baseline.`,
+    ...findings.slice(0, MAX_COMPLETION_FINDINGS).map((f) => {
+      const source = f.current ?? f.original;
+      const detail = source.evidence.kind === "decision-anchor" ? `Changes to ${source.evidence.changedFiles.join(", ")} may affect decision "${source.evidence.title}". Inspect the diff if relevant; acceptance is not required.` : source.message;
+      return `[${f.status === "unresolved" ? "issue" : "advisory"}] ${safe(source.anchor.doc)}: ${safe(detail)}`;
+    }),
+    ...findings.length > MAX_COMPLETION_FINDINGS ? [`${findings.length - MAX_COMPLETION_FINDINGS} more in the report; pending later feedback.`] : [],
+    `Evidence: ${reportPath}. Explicit audit: mason_automation(action: "check").`,
+    "Inspect findings within the authorized work. Concurrent changes may also contribute; this summary does not establish who introduced them."
+  ].join("\n");
+}
+var conditionSchema, MAX_COMPLETION_FINDINGS, notificationStateSchema;
+var init_notifications = __esm({
+  "src/automation/notifications.ts"() {
+    "use strict";
+    init_findings();
+    conditionSchema = z5.object({
+      level: z5.number(),
+      facts: z5.array(z5.string()),
+      magnitude: z5.number().optional()
+    });
+    MAX_COMPLETION_FINDINGS = 4;
+    notificationStateSchema = z5.object({
+      version: z5.literal(1),
+      baselineHead: z5.string(),
+      baseline: z5.record(conditionSchema),
+      delivered: z5.record(conditionSchema),
+      cleared: z5.array(z5.string())
+    });
+  }
+});
+
+// src/automation/store.ts
+import { z as z6 } from "zod";
 function parseState(raw) {
   try {
     return stateSchema.parse(raw);
@@ -3199,37 +3312,36 @@ var init_store = __esm({
   "src/automation/store.ts"() {
     "use strict";
     init_store_lock();
-    hostSchema = z5.enum(["claude", "codex"]);
+    init_notifications();
+    hostSchema = z6.enum(["claude", "codex"]);
     events = ["session_start", "turn_start", "before_tool", "after_tool", "task_end"];
-    stateSchema = z5.object({
-      version: z5.literal(1),
-      root: z5.string(),
-      gitDir: z5.string(),
-      branch: z5.string(),
-      baselines: z5.array(z5.object({ path: z5.string(), at: z5.string(), event: z5.string(), fingerprint: z5.string() })).max(128),
-      sessions: z5.record(z5.object({
+    stateSchema = z6.object({
+      version: z6.literal(1),
+      root: z6.string(),
+      gitDir: z6.string(),
+      branch: z6.string(),
+      baselines: z6.array(z6.object({ path: z6.string(), at: z6.string(), event: z6.string(), fingerprint: z6.string() })).max(128),
+      sessions: z6.record(z6.object({
         host: hostSchema,
-        seen: z5.string().nullable(),
-        continued: z5.boolean(),
-        initialIssues: z5.array(z5.string()),
-        initialDocs: z5.record(z5.string().nullable()),
-        lastUsed: z5.string(),
-        mutationObserved: z5.boolean(),
-        pending: z5.record(z5.string()),
-        coverageGaps: z5.array(z5.string()),
-        events: z5.record(z5.object({ at: z5.string(), count: z5.number().int().positive() }))
+        lastUsed: z6.string(),
+        notifiedDiagnostics: z6.array(z6.string()).default([]),
+        pending: z6.record(z6.string()),
+        coverageGaps: z6.array(z6.string()),
+        events: z6.record(z6.object({ at: z6.string(), count: z6.number().int().positive() }))
       })),
-      updatedAt: z5.string(),
-      fingerprint: z5.string().nullable(),
-      latest: z5.string().nullable(),
-      analysis: z5.object({ id: z5.string(), fingerprint: z5.string(), completedAt: z5.number(), path: z5.string() }).optional()
+      updatedAt: z6.string(),
+      fingerprint: z6.string().nullable(),
+      latest: z6.string().nullable(),
+      notifications: notificationStateSchema.optional(),
+      agentNotifications: notificationStateSchema.optional(),
+      analysis: z6.object({ id: z6.string(), fingerprint: z6.string(), completedAt: z6.number(), path: z6.string() }).optional()
     });
   }
 });
 
 // src/audit/advisory-review.ts
 import fs10 from "fs/promises";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 async function readRecord(root, id) {
   const raw = await readStoreJson(root, recordPath(id));
   if (raw === null) return null;
@@ -3448,41 +3560,41 @@ var init_advisory_review = __esm({
     init_decisions();
     init_drift2();
     git2 = async (root, ...args) => (await (["log", "ls-tree", "ls-files", "merge-base"].includes(args[0]) ? inspectionGit : execGit)(args, { cwd: root, timeout: 1e4, maxBuffer: 8 * 1024 * 1024 })).stdout;
-    hashSchema = z6.string().regex(/^[a-f0-9]{64}$/);
-    commitSchema2 = z6.string().regex(/^[a-f0-9]{40,64}$/);
-    evidenceSchema2 = z6.object({
+    hashSchema = z7.string().regex(/^[a-f0-9]{64}$/);
+    commitSchema2 = z7.string().regex(/^[a-f0-9]{40,64}$/);
+    evidenceSchema2 = z7.object({
       head: commitSchema2,
       fingerprint: hashSchema,
-      scope: z6.array(z6.string()).min(1).max(1e3),
-      tree: z6.string().max(2 * 1024 * 1024),
+      scope: z7.array(z7.string()).min(1).max(1e3),
+      tree: z7.string().max(2 * 1024 * 1024),
       lastScopeCommit: commitSchema2,
-      paths: z6.array(z6.object({ path: z6.string(), exists: z6.boolean() })).max(1e3)
+      paths: z7.array(z7.object({ path: z7.string(), exists: z7.boolean() })).max(1e3)
     });
-    dismissalReasonSchema = z6.enum(["no-dependency-claims", "unrelated-manifest-change"]);
-    eventSchema2 = z6.object({
-      at: z6.string().datetime(),
-      reviewer: z6.string().trim().min(1).max(200).optional(),
-      note: z6.string().trim().min(1).max(2500),
-      outcome: z6.enum(["addressed", "inapplicable", "deferred", "dismissed"]),
+    dismissalReasonSchema = z7.enum(["no-dependency-claims", "unrelated-manifest-change"]);
+    eventSchema2 = z7.object({
+      at: z7.string().datetime(),
+      reviewer: z7.string().trim().min(1).max(200).optional(),
+      note: z7.string().trim().min(1).max(2500),
+      outcome: z7.enum(["addressed", "inapplicable", "deferred", "dismissed"]),
       reasonCode: dismissalReasonSchema.optional(),
       finding: advisorySchema.refine((finding) => finding.evidence.kind !== "decision-anchor", "Decision findings use decision reviews"),
       evidence: evidenceSchema2
     });
-    recordSchema = z6.object({ version: z6.literal(1), id: hashSchema, events: z6.array(eventSchema2).min(1).max(200), digest: hashSchema });
-    reviewSummarySchema = z6.object({
+    recordSchema = z7.object({ version: z7.literal(1), id: hashSchema, events: z7.array(eventSchema2).min(1).max(200), digest: hashSchema });
+    reviewSummarySchema = z7.object({
       id: hashSchema,
-      status: z6.enum(["current", "reopened", "deferred", "unverified"]),
-      reason: z6.string(),
-      recordPath: z6.string().optional(),
-      reviewer: z6.string().optional(),
-      note: z6.string().optional(),
-      outcome: z6.enum(["addressed", "inapplicable", "deferred", "accepted", "reaffirmed", "retired", "dismissed"]).optional(),
-      reviewedHead: z6.string().optional()
+      status: z7.enum(["current", "reopened", "deferred", "unverified"]),
+      reason: z7.string(),
+      recordPath: z7.string().optional(),
+      reviewer: z7.string().optional(),
+      note: z7.string().optional(),
+      outcome: z7.enum(["addressed", "inapplicable", "deferred", "accepted", "reaffirmed", "retired", "dismissed"]).optional(),
+      reviewedHead: z7.string().optional()
     });
-    advisoryReviewRequest = z6.object({
-      baselinePath: z6.string().min(1),
+    advisoryReviewRequest = z7.object({
+      baselinePath: z7.string().min(1),
       findingId: hashSchema,
-      action: z6.enum(["prepare", "addressed", "inapplicable", "deferred", "dismiss"]).default("prepare"),
+      action: z7.enum(["prepare", "addressed", "inapplicable", "deferred", "dismiss"]).default("prepare"),
       reasonCode: dismissalReasonSchema.optional(),
       reviewer: eventSchema2.shape.reviewer.optional(),
       note: eventSchema2.shape.note.optional(),
@@ -3600,7 +3712,7 @@ __export(repair_exports, {
 import fs12 from "fs/promises";
 import path21 from "path";
 import { randomUUID as randomUUID2 } from "crypto";
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 function recheckable(finding) {
   return !("confidence" in finding) && finding.resolution === "recheck" && ["deleted-reference", "dead-command", "new-module"].includes(finding.type) && ["missing-path", "missing-script", "unmentioned-dir"].includes(finding.evidence.kind);
 }
@@ -3671,7 +3783,7 @@ async function withRepairSession(root, options, run, validate, cachedAudit) {
 }
 async function prepareOriginal(rootDir, checks, options, session) {
   const root = await fs12.realpath(rootDir);
-  const selected = z7.array(checkSchema).nonempty().parse(checks);
+  const selected = z8.array(checkSchema).nonempty().parse(checks);
   const report = await (session ? session.audit(selected) : stableAudit(root, selected, options));
   if (!report) throw new Error("No context files found to prepare a repair.");
   if (!report.gitAvailable) throw new Error("Readable Git history is required to prepare a repair.");
@@ -3828,42 +3940,42 @@ var init_repair = __esm({
     init_findings();
     init_advisory_review();
     init_findings();
-    count2 = z7.number().int().nonnegative();
-    reportSchema = z7.object({
-      version: z7.literal(1),
-      root: z7.string(),
-      gitAvailable: z7.literal(true),
+    count2 = z8.number().int().nonnegative();
+    reportSchema = z8.object({
+      version: z8.literal(1),
+      root: z8.string(),
+      gitAvailable: z8.literal(true),
       headHash: commitSchema.shape.hash,
-      checksRun: z7.array(checkSchema).nonempty(),
-      docs: z7.array(z7.object({
-        path: z7.string().refine((value) => normalizeRepoPath(value) === value),
-        scope: z7.string().optional(),
-        kind: z7.enum(["instructions", "readme", "guide"]).optional(),
+      checksRun: z8.array(checkSchema).nonempty(),
+      docs: z8.array(z8.object({
+        path: z8.string().refine((value) => normalizeRepoPath(value) === value),
+        scope: z8.string().optional(),
+        kind: z8.enum(["instructions", "readme", "guide"]).optional(),
         lastCommit: commitSchema.nullable(),
-        dirty: z7.boolean(),
+        dirty: z8.boolean(),
         lineCount: count2
       })).nonempty(),
-      decisionsChecked: z7.boolean(),
-      clean: z7.boolean(),
-      excludedChecks: z7.array(z7.object({ check: checkSchema, doc: z7.string() })).optional(),
-      issues: z7.array(issueSchema),
-      advisories: z7.array(advisorySchema),
-      suppressedAdvisories: z7.array(advisorySchema).optional(),
-      skippedChecks: z7.array(z7.object({ check: z7.string(), reason: z7.string(), doc: z7.string().optional() }))
+      decisionsChecked: z8.boolean(),
+      clean: z8.boolean(),
+      excludedChecks: z8.array(z8.object({ check: checkSchema, doc: z8.string() })).optional(),
+      issues: z8.array(issueSchema),
+      advisories: z8.array(advisorySchema),
+      suppressedAdvisories: z8.array(advisorySchema).optional(),
+      skippedChecks: z8.array(z8.object({ check: z8.string(), reason: z8.string(), doc: z8.string().optional() }))
     });
-    baselineSchema = z7.object({
-      kind: z7.literal("mason-audit-repair"),
-      version: z7.literal(1),
-      createdAt: z7.string().datetime(),
+    baselineSchema = z8.object({
+      kind: z8.literal("mason-audit-repair"),
+      version: z8.literal(1),
+      createdAt: z8.string().datetime(),
       report: reportSchema,
-      digest: z7.string().regex(/^[a-f0-9]{64}$/)
+      digest: z8.string().regex(/^[a-f0-9]{64}$/)
     });
-    repairFindingSchema = z7.object({
-      id: z7.string(),
-      original: z7.union([issueSchema, advisorySchema]),
-      status: z7.enum(["resolved", "unresolved", "review-required", "unverified"]),
-      reason: z7.string(),
-      current: z7.union([issueSchema, advisorySchema]).optional(),
+    repairFindingSchema = z8.object({
+      id: z8.string(),
+      original: z8.union([issueSchema, advisorySchema]),
+      status: z8.enum(["resolved", "unresolved", "review-required", "unverified"]),
+      reason: z8.string(),
+      current: z8.union([issueSchema, advisorySchema]).optional(),
       review: reviewSummarySchema.optional()
     });
   }
@@ -3874,7 +3986,7 @@ import fs13 from "fs/promises";
 import path22 from "path";
 import { createHash as createHash3 } from "crypto";
 import fg7 from "fast-glob";
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 async function git3(root, ...args) {
   return profilePhase("automation.git", async () => (await execGit(args, { cwd: root, maxBuffer: 16 * 1024 * 1024, timeout: 1e4 })).stdout);
 }
@@ -4017,10 +4129,10 @@ var init_evidence = __esm({
     init_dead_command();
     init_storage();
     init_advisory_review();
-    engineVersion = true ? "0.19.1" : "development";
+    engineVersion = true ? "0.19.2" : "development";
     hash = (value) => createHash3("sha256").update(JSON.stringify(value)).digest("hex");
     content = readAuditInput;
-    cacheSchema = z8.object({ version: z8.literal(1), entries: z8.record(z8.object({ key: z8.string(), result: checkResultSchema })), digest: z8.string() });
+    cacheSchema = z9.object({ version: z9.literal(1), entries: z9.record(z9.object({ key: z9.string(), result: checkResultSchema })), digest: z9.string() });
   }
 });
 
@@ -4036,7 +4148,7 @@ __export(model_exports, {
   setupHostSchema: () => setupHostSchema,
   setupSchema: () => setupSchema
 });
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 import fs14 from "fs/promises";
 import path23 from "path";
 async function loadSetup(root) {
@@ -4083,29 +4195,29 @@ var init_model = __esm({
     "use strict";
     init_evidence();
     init_storage();
-    setupHostSchema = z9.object({
-      configuredVersion: z9.string(),
-      revision: z9.string().uuid(),
-      fingerprint: z9.string(),
-      mcpFingerprint: z9.string(),
-      instructions: z9.array(z9.string())
+    setupHostSchema = z10.object({
+      configuredVersion: z10.string(),
+      revision: z10.string().uuid(),
+      fingerprint: z10.string(),
+      mcpFingerprint: z10.string(),
+      instructions: z10.array(z10.string())
     });
-    setupSchema = z9.object({ version: z9.literal(2), hosts: z9.object({
+    setupSchema = z10.object({ version: z10.literal(2), hosts: z10.object({
       codex: setupHostSchema.optional(),
       claude: setupHostSchema.optional()
     }) });
     SETUP_PATH = ".mason/local/setup.json";
     INACTIVE_HOSTS_PATH = ".mason/local/inactive-hosts.json";
-    inactiveHostsSchema = z9.object({ version: z9.literal(1), hosts: z9.array(z9.enum(["claude", "codex"])) });
-    receiptSchema = z9.object({
-      version: z9.literal(1),
-      host: z9.enum(["codex", "claude"]),
-      status: z9.enum(["installing", "configured"]),
-      initialReportPath: z9.string(),
-      initialBaselinePaths: z9.array(z9.string()),
-      root: z9.string(),
-      revision: z9.string().uuid(),
-      configuredAt: z9.string().optional()
+    inactiveHostsSchema = z10.object({ version: z10.literal(1), hosts: z10.array(z10.enum(["claude", "codex"])) });
+    receiptSchema = z10.object({
+      version: z10.literal(1),
+      host: z10.enum(["codex", "claude"]),
+      status: z10.enum(["installing", "configured"]),
+      initialReportPath: z10.string(),
+      initialBaselinePaths: z10.array(z10.string()),
+      root: z10.string(),
+      revision: z10.string().uuid(),
+      configuredAt: z10.string().optional()
     });
   }
 });
@@ -4143,7 +4255,7 @@ var init_launcher = __esm({
     "use strict";
     init_evidence();
     init_model();
-    executingVersion = () => true ? "0.19.1" : "development";
+    executingVersion = () => true ? "0.19.2" : "development";
     mcpCommand = (host) => globalCommand(["--setup-host", host, "mcp"]);
     hookCommand = (host) => `mason --setup-host ${host} auto`;
   }
@@ -4340,7 +4452,7 @@ __export(execution_exports, {
 import os2 from "os";
 import fs19 from "fs/promises";
 import { randomUUID as randomUUID4 } from "crypto";
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 function parseExecution(raw) {
   try {
     return executionSchema.parse(raw);
@@ -4358,7 +4470,7 @@ function automationFailure(error) {
     codes.add(String(cause.code));
     cause = cause.cause;
   }
-  const code = codes.has("ENOSPC") || codes.has("EDQUOT") ? "storage-full" : /changed during|changed while|changed between/.test(message2) ? "inputs-changed" : /Automation is busy/.test(message2) ? "busy" : /not a git repository|unknown revision|bad revision|different history|unreachable/.test(message2) ? "history-unavailable" : error instanceof z12.ZodError || error instanceof SyntaxError || /Hook input|Expected one command|Unknown automation command|--host/.test(message2) ? "invalid-input" : /store|baseline|modified|symbolic link|Symlink|automation state|state belongs/.test(message2) ? "invalid-evidence" : [...codes].some((c) => /^E[A-Z]+$/.test(c)) ? "io-error" : "internal";
+  const code = codes.has("ENOSPC") || codes.has("EDQUOT") ? "storage-full" : /changed during|changed while|changed between/.test(message2) ? "inputs-changed" : /Automation is busy/.test(message2) ? "busy" : /not a git repository|unknown revision|bad revision|different history|unreachable/.test(message2) ? "history-unavailable" : error instanceof z13.ZodError || error instanceof SyntaxError || /Hook input|Expected one command|Unknown automation command|--host/.test(message2) ? "invalid-input" : /store|baseline|modified|symbolic link|Symlink|automation state|state belongs/.test(message2) ? "invalid-evidence" : [...codes].some((c) => /^E[A-Z]+$/.test(c)) ? "io-error" : "internal";
   return { code, message: message2, retryable: ["inputs-changed", "storage-full", "busy", "io-error"].includes(code), receiptRecorded: false };
 }
 function failureMessage(error) {
@@ -4487,38 +4599,100 @@ var init_execution = __esm({
     init_store();
     init_evidence();
     init_storage();
-    failureSchema = z12.object({
-      code: z12.enum(["inputs-changed", "storage-full", "busy", "invalid-input", "history-unavailable", "invalid-evidence", "io-error", "internal"]),
-      message: z12.string(),
-      retryable: z12.boolean(),
-      receiptRecorded: z12.boolean()
+    failureSchema = z13.object({
+      code: z13.enum(["inputs-changed", "storage-full", "busy", "invalid-input", "history-unavailable", "invalid-evidence", "io-error", "internal"]),
+      message: z13.string(),
+      retryable: z13.boolean(),
+      receiptRecorded: z13.boolean()
     });
-    attemptSchema = z12.object({
-      id: z12.string().regex(/^[a-zA-Z0-9_-]+$/),
-      lease: z12.literal(true).optional(),
-      event: z12.string(),
-      startedAt: z12.string(),
-      finishedAt: z12.string().optional(),
-      durationMs: z12.number().nonnegative().optional(),
-      pid: z12.number().int().positive(),
-      host: z12.string(),
-      status: z12.enum(["running", "completed", "failed", "unknown"]),
-      verificationStatus: z12.string().optional(),
-      reportPath: z12.string().optional(),
+    attemptSchema = z13.object({
+      id: z13.string().regex(/^[a-zA-Z0-9_-]+$/),
+      lease: z13.literal(true).optional(),
+      event: z13.string(),
+      startedAt: z13.string(),
+      finishedAt: z13.string().optional(),
+      durationMs: z13.number().nonnegative().optional(),
+      pid: z13.number().int().positive(),
+      host: z13.string(),
+      status: z13.enum(["running", "completed", "failed", "unknown"]),
+      verificationStatus: z13.string().optional(),
+      reportPath: z13.string().optional(),
       failure: failureSchema.optional()
     });
-    executionSchema = z12.object({ version: z12.literal(1), attempts: z12.array(attemptSchema).max(160), discardedAttempts: z12.number().int().nonnegative().default(0) });
-    notificationsSchema = z12.object({ version: z12.literal(1), sessions: z12.record(z12.object({
-      signature: z12.string(),
+    executionSchema = z13.object({ version: z13.literal(1), attempts: z13.array(attemptSchema).max(160), discardedAttempts: z13.number().int().nonnegative().default(0) });
+    notificationsSchema = z13.object({ version: z13.literal(1), sessions: z13.record(z13.object({
+      signature: z13.string(),
       code: failureSchema.shape.code,
-      message: z12.string(),
-      count: z12.number().int().positive(),
-      lastAt: z12.string()
+      message: z13.string(),
+      count: z13.number().int().positive(),
+      lastAt: z13.string()
     })) });
     leasePath = (directory, id) => `${directory}/executions/${id}.json`;
   }
 });
 
+// src/decisions/pending.ts
+var pending_exports = {};
+__export(pending_exports, {
+  pendingKnowledge: () => pendingKnowledge
+});
+async function pendingKnowledge(root, now = Date.now()) {
+  try {
+    const [store, status] = await Promise.all([
+      loadDecisionStore(root),
+      execGit(
+        ["status", "--porcelain=v1", "-z", "--untracked-files=all", "--", ".mason/decisions"],
+        { cwd: root, timeout: 1e4, maxBuffer: 1024 * 1024 }
+      )
+    ]);
+    const changed = /* @__PURE__ */ new Set();
+    const entries = status.stdout.split("\0");
+    for (let i = 0; i < entries.length; i++) {
+      const entry = entries[i];
+      if (!entry) continue;
+      const file = entry.slice(3);
+      if (/^\.mason\/decisions\/[^/]+\.json$/.test(file)) changed.add(file);
+      if (/[RC]/.test(entry.slice(0, 2))) i++;
+    }
+    const records = new Map(store.records.map((record) => [`.mason/decisions/${record.id}.json`, record]));
+    const age = (at) => {
+      const time = at ? Date.parse(at) : NaN;
+      return Number.isFinite(time) ? `${Math.max(0, Math.floor((now - time) / 864e5))} days` : "unknown age";
+    };
+    const safe = (value) => value.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ");
+    const list = (items) => items.slice(0, 5).map(safe).join("; ") + (items.length > 5 ? `; ${items.length - 5} more` : "");
+    const proposals = store.records.filter((record) => record.status === "active" && decisionApproval(record) === "proposed").map((record) => {
+      const history = record.version === 2 ? record.history : [];
+      let lastReview = -1;
+      history.forEach((event, index2) => {
+        if (event.kind === "accepted" || event.kind === "reaffirmed") lastReview = index2;
+      });
+      const since = history.slice(lastReview + 1).find((event) => event.kind === "created" || event.kind === "revised")?.at ?? record.createdAt;
+      return { record, since };
+    }).sort((a, b) => {
+      const timestamp = (value) => Number.isFinite(Date.parse(value)) ? Date.parse(value) : Infinity;
+      return timestamp(a.since) - timestamp(b.since) || a.record.id.localeCompare(b.record.id);
+    });
+    const lines = [];
+    if (changed.size) lines.push(`${changed.size} uncommitted decision record(s): ${list([...changed].sort().map((file) => `${file} (saved-record age: ${age(records.get(file)?.updatedAt)})`))}.`);
+    if (proposals.length) lines.push(`${proposals.length} proposal(s) awaiting review (oldest first): ${list(proposals.map(({ record, since }) => `.mason/decisions/${record.id}.json (${age(since)})`))}.`);
+    if (store.diagnostics.length) lines.push(`${store.diagnostics.length} decision record(s) could not be read; pending knowledge summary is incomplete.`);
+    return lines.length ? `Mason pending knowledge:
+${lines.join("\n")}
+Informational only; review and commit through the normal project workflow. No approval is implied.` : null;
+  } catch {
+    return "Mason pending knowledge: unavailable; decision records or Git status could not be read.";
+  }
+}
+var init_pending = __esm({
+  "src/decisions/pending.ts"() {
+    "use strict";
+    init_git_read();
+    init_decisions();
+    init_provenance();
+  }
+});
+
 // src/automation/runtime.ts
 var runtime_exports = {};
 __export(runtime_exports, {
@@ -4528,7 +4702,7 @@ __export(runtime_exports, {
   summarize: () => summarize
 });
 import { randomUUID as randomUUID5 } from "crypto";
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 async function observeReadOnlyTool(dir, event) {
   const ws = await profilePhase("automation.workspace", () => workspace(dir));
   await withLock(ws.root, ws.directory, async () => {
@@ -4750,6 +4924,19 @@ async function automate(dir, event) {
       const state = await loadState(ws);
       if (state.analysis?.id !== result.analysis.id) throw new Error("Automation evidence changed during publication; retry against the current inputs.");
       const report = structuredClone(result.analysis.report);
+      if (!state.notifications) {
+        let baseline = { findings: report.findings, head: report.head };
+        if (state.latest) {
+          try {
+            const previous = z14.object({ findings: z14.array(repairFindingSchema), head: z14.string() }).safeParse(await readStoreJson(ws.root, state.latest));
+            if (!previous.success) throw new Error("Unsupported saved report");
+            baseline = previous.data;
+          } catch {
+            report.diagnostics.push("The saved notification baseline could not be read; initialized from the current audit. Original repair evidence is retained. Run an explicit check for all outstanding findings.");
+          }
+        }
+        state.notifications = createNotificationState(baseline.findings, baseline.head);
+      }
       if (result.shared) report.checks = { ...report.checks, ran: [], reused: [.../* @__PURE__ */ new Set([...report.checks.ran, ...report.checks.reused])], shared: true };
       report.reportPath = ws.directory + "/checks/" + randomUUID5() + ".json";
       const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -4762,12 +4949,8 @@ async function automate(dir, event) {
         if (Object.keys(state.sessions).length >= 128) throw new Error("Too many sessions with unfinished tool calls; original evidence was retained.");
         state.sessions[key] = {
           host: event.host,
-          seen: null,
-          continued: false,
-          initialIssues: report.findings.filter((f) => f.status === "unresolved").map((f) => f.id),
-          initialDocs: inputs.docs,
+          notifiedDiagnostics: [],
           lastUsed: now,
-          mutationObserved: false,
           pending: {},
           coverageGaps: [],
           events: {}
@@ -4782,7 +4965,6 @@ async function automate(dir, event) {
           session.pending[event.toolId] = inputs.fingerprint;
         }
         if (event.event === "after_tool" && event.mutating) {
-          session.mutationObserved = true;
           if (!event.toolId || !session.pending[event.toolId]) {
             const gap = "A tool completed without an observed matching pre-tool capture in this checkout; pre-edit coverage is unknown. The tool may have changed checkouts; captures are kept separately for each worktree.";
             if (!session.coverageGaps.includes(gap)) session.coverageGaps.push(gap);
@@ -4793,31 +4975,39 @@ async function automate(dir, event) {
         if (session.coverageGaps.length && report.status !== "unavailable") report.status = "incomplete";
         report.capture = report.status !== "unavailable" && !session.coverageGaps.length && (session.events.session_start || session.events.before_tool) ? "observed" : "unknown";
       }
-      const signature = hash([report.status, report.findings, report.diagnostics, report.checks.skipped]);
-      const relevant = report.findings.some((f) => f.status === "unresolved" && session && (!session.initialIssues.includes(f.id) || session.initialDocs[f.original.anchor.doc] !== inputs.docs[f.original.anchor.doc]));
-      const continueOnce = event.event === "task_end" && !!session?.mutationObserved && relevant && !session.continued && !event.stopHookActive;
-      const notify = !session || newSession || signature !== session.seen || continueOnce;
-      if (session) {
-        session.seen = signature;
-        if (continueOnce) session.continued = true;
-      }
-      const persistReport = !state.latest || state.fingerprint !== inputs.fingerprint || notify || event.event === "task_end";
+      const selected = session && event.event === "task_end" ? completionFindings(state.notifications, report.findings) : [];
+      state.agentNotifications ??= { ...structuredClone(state.notifications), delivered: {} };
+      const feedback = session && ["turn_start", "after_tool"].includes(event.event) ? completionFindings(state.agentNotifications, report.findings) : [];
+      const diagnostics = session ? report.diagnostics.filter((d) => !session.notifiedDiagnostics.includes(d)).slice(0, 2) : [];
+      if (session) session.notifiedDiagnostics = [.../* @__PURE__ */ new Set([
+        ...session.notifiedDiagnostics.filter((d) => report.diagnostics.includes(d)),
+        ...diagnostics
+      ])];
+      const message2 = !session ? summarize(report) : [
+        completionSummary(selected, report.reportPath),
+        completionSummary(feedback, report.reportPath),
+        ...diagnostics.length ? [`Mason: verification limited. ${diagnostics.slice(0, 2).map(cleanText).join(" ")} Evidence: ${report.reportPath}.`] : []
+      ].filter(Boolean).join("\n") || null;
+      const notify = message2 !== null;
+      const persistReport = !state.latest || state.fingerprint !== inputs.fingerprint || notify || newSession || event.event === "task_end";
       if (!persistReport) report.reportPath = state.latest;
       state.updatedAt = now;
       state.fingerprint = inputs.fingerprint;
       state.latest = report.reportPath;
       if (persistReport) await writeStoreJson(ws.root, report.reportPath, report);
       await writeStoreJson(ws.root, ws.directory + "/state.json", state);
-      return { report, message: notify ? summarize(report) : null, continueOnce };
+      return { report, message: message2 };
     }));
   }));
 }
 async function automationStatus(dir) {
+  const { pendingKnowledge: pendingKnowledge2 } = await Promise.resolve().then(() => (init_pending(), pending_exports));
   const ws = await profilePhase("automation.workspace", () => workspace(dir));
+  const knowledge = await pendingKnowledge2(ws.root);
   const execution = await executionStatus(ws.root, ws.directory);
   const notifications = await failureNotifications(ws.root, ws.directory);
   const raw = await readStoreJson(ws.root, ws.directory + "/state.json");
-  if (raw === null) return { version: 1, status: execution.status === "not-observed" ? "not-observed" : "unavailable", root: ws.root, branch: ws.branch, baselinePaths: [], hosts: {}, execution, notifications };
+  if (raw === null) return { version: 1, status: execution.status === "not-observed" ? "not-observed" : "unavailable", root: ws.root, branch: ws.branch, baselinePaths: [], hosts: {}, execution, notifications, knowledge };
   const state = parseState(raw);
   if (state.root !== ws.root || state.gitDir !== ws.gitDir || state.branch !== ws.branch) throw new Error("Automation state belongs to another workspace.");
   const inputs = await readInputs(ws.root);
@@ -4840,6 +5030,8 @@ async function automationStatus(dir) {
     hosts,
     execution,
     notifications,
+    knowledge,
+    notificationBaselineHead: state.notifications?.baselineHead ?? null,
     note: "Observed events do not prove all tool paths are intercepted. Run check to verify the retained evidence."
   };
 }
@@ -4847,6 +5039,7 @@ var SCOPE, priority, cleanText, analysisSchema, sharedSchema, baselineDigest;
 var init_runtime = __esm({
   "src/automation/runtime.ts"() {
     "use strict";
+    init_notifications();
     init_profile();
     init_inspection();
     init_execution();
@@ -4858,34 +5051,34 @@ var init_runtime = __esm({
     SCOPE = "Documentation audit evidence only. Hook receipts show observed events, not complete interception. Resolved findings no longer fail their checks or have a recorded assessment covering current evidence. Repair and review only within the user's task authorization.";
     priority = { resolved: 0, "review-required": 1, unresolved: 2, unverified: 3 };
     cleanText = (text2) => text2.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").slice(0, 250);
-    analysisSchema = z13.object({
-      id: z13.string(),
-      fingerprint: z13.string(),
-      completedAt: z13.number(),
-      baselineDigest: z13.string(),
+    analysisSchema = z14.object({
+      id: z14.string(),
+      fingerprint: z14.string(),
+      completedAt: z14.number(),
+      baselineDigest: z14.string(),
       currentAudit: reportSchema.nullable().optional(),
-      report: z13.object({
-        version: z13.literal(1),
-        status: z13.enum(["verified", "issues-remain", "incomplete", "unavailable"]),
-        root: z13.string(),
-        branch: z13.string(),
-        head: z13.string(),
-        baselinePaths: z13.array(z13.string()),
-        reportPath: z13.string(),
-        findings: z13.array(repairFindingSchema),
-        diagnostics: z13.array(z13.string()),
-        checks: z13.object({
-          ran: z13.array(z13.string()),
-          reused: z13.array(z13.string()),
-          skipped: z13.array(z13.object({ check: z13.string(), reason: z13.string(), doc: z13.string().optional() })),
-          auditReused: z13.boolean().optional()
+      report: z14.object({
+        version: z14.literal(1),
+        status: z14.enum(["verified", "issues-remain", "incomplete", "unavailable"]),
+        root: z14.string(),
+        branch: z14.string(),
+        head: z14.string(),
+        baselinePaths: z14.array(z14.string()),
+        reportPath: z14.string(),
+        findings: z14.array(repairFindingSchema),
+        diagnostics: z14.array(z14.string()),
+        checks: z14.object({
+          ran: z14.array(z14.string()),
+          reused: z14.array(z14.string()),
+          skipped: z14.array(z14.object({ check: z14.string(), reason: z14.string(), doc: z14.string().optional() })),
+          auditReused: z14.boolean().optional()
         }),
-        counts: z13.object({ resolved: z13.number(), unresolved: z13.number(), "review-required": z13.number(), unverified: z13.number() }),
-        capture: z13.enum(["observed", "unknown"]),
-        scope: z13.string()
+        counts: z14.object({ resolved: z14.number(), unresolved: z14.number(), "review-required": z14.number(), unverified: z14.number() }),
+        capture: z14.enum(["observed", "unknown"]),
+        scope: z14.string()
       })
     });
-    sharedSchema = z13.object({ analysis: analysisSchema, digest: z13.string() });
+    sharedSchema = z14.object({ analysis: analysisSchema, digest: z14.string() });
     baselineDigest = async (ws, state) => profilePhase("automation.baselines", async () => hash(await Promise.all(
       state.baselines.map(async (b) => [b.path, await readStoreJson(ws.root, b.path)])
     )));
@@ -4903,7 +5096,7 @@ var init_hook_root = __esm({
 });
 
 // src/automation/adapters.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 function managedHookCommand(host, platform = process.platform) {
   const command = `mason --setup-host ${host} auto hook --host ${host}`;
   return platform === "win32" ? `cmd.exe /d /s /c "where mason >nul 2>nul & if errorlevel 1 (exit /b 0) else (${command})"` : `if command -v mason >/dev/null 2>&1; then ${command}; fi`;
@@ -4929,15 +5122,15 @@ var init_adapters = __esm({
     init_runtime();
     init_store();
     init_hook_root();
-    inputSchema = z14.object({
-      cwd: z14.string().min(1),
-      session_id: z14.string().min(1).max(500),
-      hook_event_name: z14.enum(["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"]),
-      tool_name: z14.string().optional(),
-      tool_use_id: z14.string().max(500).optional(),
-      tool_input: z14.unknown().optional(),
-      stop_hook_active: z14.boolean().optional(),
-      permission_mode: z14.string().optional()
+    inputSchema = z15.object({
+      cwd: z15.string().min(1),
+      session_id: z15.string().min(1).max(500),
+      hook_event_name: z15.enum(["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"]),
+      tool_name: z15.string().optional(),
+      tool_use_id: z15.string().max(500).optional(),
+      tool_input: z15.unknown().optional(),
+      stop_hook_active: z15.boolean().optional(),
+      permission_mode: z15.string().optional()
     });
     HOOK_EVENTS = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"];
   }
@@ -4953,7 +5146,7 @@ __export(ownership_exports, {
   ownershipEdit: () => ownershipEdit,
   ownershipSchema: () => ownershipSchema
 });
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 import { parse } from "smol-toml";
 function blockSpan(text2, start, end) {
   const starts = text2.split(start).length - 1, ends = text2.split(end).length - 1;
@@ -5004,15 +5197,15 @@ var init_ownership = __esm({
       ["<!-- mason:agents:start -->", "<!-- mason:agents:end -->"],
       ["# mason:mcp:start", "# mason:mcp:end"]
     ];
-    fileSchema = z15.object({
-      created: z15.boolean(),
-      initialHash: z15.string(),
-      blocks: z15.record(z15.string()),
-      mcpHash: z15.string().optional(),
-      hookCommands: z15.array(z15.string()).optional(),
-      hooks: z15.record(z15.array(z15.string())).optional()
+    fileSchema = z16.object({
+      created: z16.boolean(),
+      initialHash: z16.string(),
+      blocks: z16.record(z16.string()),
+      mcpHash: z16.string().optional(),
+      hookCommands: z16.array(z16.string()).optional(),
+      hooks: z16.record(z16.array(z16.string())).optional()
     });
-    ownershipSchema = z15.object({ version: z15.literal(1), files: z15.record(fileSchema) });
+    ownershipSchema = z16.object({ version: z16.literal(1), files: z16.record(fileSchema) });
   }
 });
 
@@ -5027,7 +5220,7 @@ __export(install_exports, {
   planAutomationInstall: () => planAutomationInstall,
   recordSchema: () => recordSchema2
 });
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 async function installationRecord(root) {
   return recordSchema2.parse(await readStoreJson(root, AUTOMATION_PATH) ?? { version: 1, hosts: {} });
 }
@@ -5108,9 +5301,9 @@ var init_install = __esm({
     init_store();
     init_files2();
     init_ownership();
-    groupSchema = z16.object({ hooks: z16.array(z16.object({ type: z16.string(), command: z16.string().optional() }).passthrough()) }).passthrough();
-    automationConfigSchema = z16.object({ hooks: z16.record(z16.array(groupSchema)).optional() }).passthrough();
-    recordSchema2 = z16.object({ version: z16.literal(1), hosts: z16.record(z16.object({ command: z16.string() })) });
+    groupSchema = z17.object({ hooks: z17.array(z17.object({ type: z17.string(), command: z17.string().optional() }).passthrough()) }).passthrough();
+    automationConfigSchema = z17.object({ hooks: z17.record(z17.array(groupSchema)).optional() }).passthrough();
+    recordSchema2 = z17.object({ version: z17.literal(1), hosts: z17.record(z17.object({ command: z17.string() })) });
     AUTOMATION_PATH = ".mason/local/automation.json";
     configPath = (host) => host === "claude" ? ".claude/settings.json" : ".codex/hooks.json";
   }
@@ -5128,7 +5321,7 @@ __export(config_exports, {
 });
 import { isDeepStrictEqual } from "util";
 import { parse as parse2, stringify } from "smol-toml";
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 async function instructionEdits(root, host) {
   const found = await Promise.all(DOC_CANDIDATES.map(async (file) => ({ path: file, text: await readText(root, file) })));
   const existing = found.find((f) => f.text !== null);
@@ -5239,7 +5432,7 @@ var init_config = __esm({
     init_install();
     init_files2();
     init_launcher();
-    object = z17.record(z17.unknown());
+    object = z18.record(z18.unknown());
     mcpPath = (host) => host === "codex" ? ".codex/config.toml" : ".mcp.json";
     TOML_START = "# mason:mcp:start";
     TOML_END = "# mason:mcp:end";
@@ -5249,7 +5442,7 @@ var init_config = __esm({
 });
 
 // src/mcp/init.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 async function loadProjectMarker(rootDir) {
   const raw = await readStoreJson(rootDir, ".mason/local/project.json");
   if (raw === null) return null;
@@ -5257,8 +5450,8 @@ async function loadProjectMarker(rootDir) {
   return { ...marker, features: await loadProjectFeatures(rootDir) };
 }
 async function loadProjectFeatures(rootDir) {
-  const config = z18.record(z18.unknown()).parse(await readStoreJson(rootDir, ".mason/config.json") ?? {});
-  return z18.object({ confluence: z18.boolean().optional() }).passthrough().parse(config.features ?? {});
+  const config = z19.record(z19.unknown()).parse(await readStoreJson(rootDir, ".mason/config.json") ?? {});
+  return z19.object({ confluence: z19.boolean().optional() }).passthrough().parse(config.features ?? {});
 }
 async function saveProjectMarker(rootDir, marker) {
   const { ancillaryEdits: ancillaryEdits2 } = await Promise.resolve().then(() => (init_config(), config_exports));
@@ -5270,8 +5463,8 @@ async function projectMarkerEdits(rootDir, marker) {
   const edits = [{ path: file, before: await readText(rootDir, file), after: JSON.stringify(local, null, 2) + "\n" }];
   if (features && Object.keys(features).length) {
     const configPath2 = ".mason/config.json", before = await readText(rootDir, configPath2);
-    const config = z18.record(z18.unknown()).parse(JSON.parse(before ?? "{}"));
-    config.features = { ...z18.record(z18.unknown()).parse(config.features ?? {}), ...features };
+    const config = z19.record(z19.unknown()).parse(JSON.parse(before ?? "{}"));
+    config.features = { ...z19.record(z19.unknown()).parse(config.features ?? {}), ...features };
     edits.push({ path: configPath2, before, after: JSON.stringify(config, null, 2) + "\n" });
   }
   return edits;
@@ -5285,10 +5478,10 @@ var init_init = __esm({
     "use strict";
     init_storage();
     init_files2();
-    markerSchema = z18.object({
-      version: z18.literal(1),
-      initializedAt: z18.string(),
-      features: z18.object({ confluence: z18.boolean().optional() }).passthrough().optional()
+    markerSchema = z19.object({
+      version: z19.literal(1),
+      initializedAt: z19.string(),
+      features: z19.object({ confluence: z19.boolean().optional() }).passthrough().optional()
     }).passthrough();
     CLAUDE_MD_SECTION = `<!-- mason:start -->
 ## Mason project knowledge
@@ -5297,9 +5490,10 @@ Mason provides recorded decisions and file impact over MCP. A concept map is opt
 
 - Task, bug, change request, or investigation of why the project works this way \u2192 \`get_context\` with the task text and known files: matching decisions, related tests, impact, and any available map entries.
 - Before editing a file \u2192 \`get_impact\` to check references, tests, and historical change partners.
-- Investigation or correction reveals a reusable project lesson \u2192 \`save_decision\` before finishing. Capture only the lasting constraint and reason, with anchors and known sources, owner, and recorder. This creates a proposal; never infer approval. Preserve uncertain causes and unknown attribution. Route project lessons here; keep personal preferences in agent memory. Skip code summaries, current checkout status, temporary task permissions, session trivia, and secrets. No qualifying lesson means no record.
+- Investigation or correction reveals a reusable project lesson \u2192 \`save_decision\` as soon as the lesson is supported by evidence; do not wait for implementation, task completion, or merge. Record the established observation now and identify unimplemented remedies as tentative. Capture only the lasting constraint and reason, with anchors and known sources, owner, and recorder. This creates a proposal; never infer approval. Preserve uncertain causes and unknown attribution. Route project lessons here; keep personal preferences in agent memory. Skip code summaries, current checkout status, temporary task permissions, session trivia, and secrets. No qualifying lesson means no record.
 - Before saving, compare the lesson with matching \`get_context\` records and any pending proposal. If new evidence changes the same lesson's assumptions, scope, or recommended action, revise it with \`save_decision(id: existingId)\`, including when it is accepted. Preserve supported rationale and sources, replace obsolete instructions, and add the new evidence. Create a separate record for a genuinely distinct lesson; skip unchanged restatements. Revision preserves history and leaves the accepted version operative until authorized review.
 - Consult trust metadata before relying on entries: unknown or changed freshness requires inspection, stale or unknown map verification requires a fresh evidence review, and a recorded failed verdict means the description must be corrected. Check approval too: proposals are suggestions, legacy records are unreviewed, and accepted decisions are recorded constraints subject to freshness checks. An accepted revision remains operative while a pending proposal is reviewed; keep both versions and their freshness distinct.
+- Asked to review pending project knowledge \u2192 \`mason_automation(action: "status")\` lists pending proposals and uncommitted records. For ordinary tasks, inspect matching proposals through \`get_context\`; do not request acceptance merely because a proposal exists.
 - Asked to review or re-verify a decision \u2192 \`review_decision\` first to inspect content, sources, history, and code changes. Record acceptance, reaffirmation, or retirement only when authorized by the user or a cited team review, with the actual reviewer and reason. Never infer approval from unchanged code. Review and commit the local record through the normal project workflow.
 - For an architectural overview, use \`get_snapshot\` if a map is available. If \`map.status\` is missing or invalid, use available decisions and source evidence; do not start building a map unless requested.
 - \`mason_init\` returns documentation audit and committed-diff review results, plus a short setup guide. Pass \`evidence\` with local CI manifest paths to include test and analysis results; the CLI equivalent is \`mason-review --evidence <manifest>\`. State skipped, unavailable, stale, or unknown checks explicitly. Related accepted decisions identify review context, not proven violations.
@@ -5323,7 +5517,7 @@ ${CLAUDE_MD_SECTION}`;
 
 1. Explain the actionable findings with their source evidence. Separate audit issues, advisories, and skipped checks. The review covers committed changes from the merge base to HEAD; workingTree paths are not included in that review. An unavailable or empty check is not proof that the project is correct. Use the CLI for full output if a summary is truncated.
 2. Address findings within the user's requested scope. Setup alone authorizes Mason host configuration, hooks, instructions, and ignore rules; rewriting existing project claims requires repair scope. If repair is authorized, call \`mason_repair(dir, action: "prepare")\` before editing; it saves the full original findings even when this summary is truncated. Inspect relevant source, make grounded edits, then call \`mason_repair(dir, action: "verify", baselinePath)\` with that same baseline, including after any final doc commit. Report resolved, unresolved, review-required, unverified, and new findings. Keep suppressed advisories visible even when setup has already dirtied a doc. Do not invent a decision just to populate the store.
-3. When the task reveals a real lesson or constraint, compare matching \`get_context\` records first. If its assumptions, scope, or recommended action changed, revise that record using \`save_decision(id: existingId)\`; create a separate record for a genuinely distinct lesson and skip unchanged restatements. Include title, body, category, anchors, and known owner/source/actor information. Preserve supported rationale and sources, replace obsolete instructions, and add new evidence. Missing attribution can be added later. The tool writes a local proposal; editing it preserves revision history and requires a new acceptance, while any earlier accepted revision remains operative. An unchanged save never refreshes its evidence. When decision review is requested, \`review_decision\` prepares the record and code evidence before any authorized verdict. Review and commit records through the normal workflow. Retrieve it on the next relevant task with \`get_context(dir, task, files)\`.
+3. Capture a supported lesson as soon as it is established; do not wait for implementation, task completion, or merge. Keep unimplemented remedies tentative. When the task reveals a real lesson or constraint, compare matching \`get_context\` records first. If its assumptions, scope, or recommended action changed, revise that record using \`save_decision(id: existingId)\`; create a separate record for a genuinely distinct lesson and skip unchanged restatements. Include title, body, category, anchors, and known owner/source/actor information. Preserve supported rationale and sources, replace obsolete instructions, and add new evidence. Missing attribution can be added later. The tool writes a local proposal; editing it preserves revision history and requires a new acceptance, while any earlier accepted revision remains operative. An unchanged save never refreshes its evidence. When decision review is requested, \`review_decision\` prepares the record and code evidence before any authorized verdict. Review and commit records through the normal workflow. Retrieve it on the next relevant task with \`get_context(dir, task, files)\`.
 
 ${ASSISTANT_SETUP}
 
@@ -5486,7 +5680,7 @@ var init_types2 = __esm({
 });
 
 // src/review/evidence/vitest.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 function parseVitest(raw, sourceRoot) {
   const report = schema.parse(raw);
   const findings = [], diagnostics = [];
@@ -5535,24 +5729,24 @@ var init_vitest = __esm({
     "use strict";
     init_paths2();
     init_types2();
-    count3 = z19.number().int().nonnegative();
-    schema = z19.object({
-      success: z19.boolean(),
+    count3 = z20.number().int().nonnegative();
+    schema = z20.object({
+      success: z20.boolean(),
       numTotalTests: count3,
       numPassedTests: count3,
       numFailedTests: count3,
       numPendingTests: count3,
       numTodoTests: count3,
       numFailedTestSuites: count3,
-      testResults: z19.array(z19.object({
-        name: z19.string().min(1),
-        status: z19.enum(["passed", "failed"]),
-        message: z19.string().optional(),
-        assertionResults: z19.array(z19.object({
-          fullName: z19.string(),
-          status: z19.enum(["passed", "failed", "pending", "skipped", "todo", "disabled"]),
-          failureMessages: z19.array(z19.string()).nullable().optional(),
-          location: z19.object({ line: count3, column: count3 }).nullable().optional()
+      testResults: z20.array(z20.object({
+        name: z20.string().min(1),
+        status: z20.enum(["passed", "failed"]),
+        message: z20.string().optional(),
+        assertionResults: z20.array(z20.object({
+          fullName: z20.string(),
+          status: z20.enum(["passed", "failed", "pending", "skipped", "todo", "disabled"]),
+          failureMessages: z20.array(z20.string()).nullable().optional(),
+          location: z20.object({ line: count3, column: count3 }).nullable().optional()
         }))
       }))
     });
@@ -5560,7 +5754,7 @@ var init_vitest = __esm({
 });
 
 // src/review/evidence/sarif.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 function parseSarif(raw, sourceRoot) {
   const report = schema2.parse(raw), findings = [], diagnostics = [];
   let active = 0, suppressed = 0, absent = 0, unresolved = 0;
@@ -5651,29 +5845,29 @@ var init_sarif = __esm({
     "use strict";
     init_paths2();
     init_types2();
-    index = z20.number().int().nonnegative();
-    artifact = z20.object({ uri: z20.string().optional(), uriBaseId: z20.string().optional(), index: index.optional() });
-    message = z20.object({ text: z20.string().optional(), markdown: z20.string().optional(), id: z20.string().optional(), arguments: z20.array(z20.string()).optional() });
-    level = z20.enum(["error", "warning", "note", "none"]);
-    location = z20.object({ physicalLocation: z20.object({ artifactLocation: artifact.optional(), region: z20.object({ startLine: index.optional(), startColumn: index.optional() }).optional() }).optional() });
-    schema2 = z20.object({
-      version: z20.literal("2.1.0"),
-      runs: z20.array(z20.object({
-        tool: z20.object({ driver: z20.object({ name: z20.string().min(1), rules: z20.array(z20.object({ id: z20.string(), defaultConfiguration: z20.object({ level: level.optional() }).optional(), messageStrings: z20.record(message).optional() })).optional(), globalMessageStrings: z20.record(message).optional() }) }),
-        invocations: z20.array(z20.object({ executionSuccessful: z20.boolean(), commandLine: z20.string().optional(), toolExecutionNotifications: z20.array(z20.object({ level: level.optional(), message })).optional() })).optional(),
-        versionControlProvenance: z20.array(z20.object({ revisionId: z20.string().optional() })).optional(),
-        originalUriBaseIds: z20.record(artifact).optional(),
-        artifacts: z20.array(z20.object({ location: artifact.optional() })).optional(),
-        results: z20.array(z20.object({
-          ruleId: z20.string().optional(),
+    index = z21.number().int().nonnegative();
+    artifact = z21.object({ uri: z21.string().optional(), uriBaseId: z21.string().optional(), index: index.optional() });
+    message = z21.object({ text: z21.string().optional(), markdown: z21.string().optional(), id: z21.string().optional(), arguments: z21.array(z21.string()).optional() });
+    level = z21.enum(["error", "warning", "note", "none"]);
+    location = z21.object({ physicalLocation: z21.object({ artifactLocation: artifact.optional(), region: z21.object({ startLine: index.optional(), startColumn: index.optional() }).optional() }).optional() });
+    schema2 = z21.object({
+      version: z21.literal("2.1.0"),
+      runs: z21.array(z21.object({
+        tool: z21.object({ driver: z21.object({ name: z21.string().min(1), rules: z21.array(z21.object({ id: z21.string(), defaultConfiguration: z21.object({ level: level.optional() }).optional(), messageStrings: z21.record(message).optional() })).optional(), globalMessageStrings: z21.record(message).optional() }) }),
+        invocations: z21.array(z21.object({ executionSuccessful: z21.boolean(), commandLine: z21.string().optional(), toolExecutionNotifications: z21.array(z21.object({ level: level.optional(), message })).optional() })).optional(),
+        versionControlProvenance: z21.array(z21.object({ revisionId: z21.string().optional() })).optional(),
+        originalUriBaseIds: z21.record(artifact).optional(),
+        artifacts: z21.array(z21.object({ location: artifact.optional() })).optional(),
+        results: z21.array(z21.object({
+          ruleId: z21.string().optional(),
           ruleIndex: index.optional(),
           message,
           level: level.optional(),
-          kind: z20.enum(["fail", "pass", "open", "informational", "notApplicable", "review"]).optional(),
-          baselineState: z20.enum(["new", "unchanged", "updated", "absent"]).optional(),
-          suppressions: z20.array(z20.object({ kind: z20.enum(["inSource", "external"]), status: z20.enum(["accepted", "underReview", "rejected"]).optional() })).nullable().optional(),
-          locations: z20.array(location).optional(),
-          relatedLocations: z20.array(location).optional()
+          kind: z21.enum(["fail", "pass", "open", "informational", "notApplicable", "review"]).optional(),
+          baselineState: z21.enum(["new", "unchanged", "updated", "absent"]).optional(),
+          suppressions: z21.array(z21.object({ kind: z21.enum(["inSource", "external"]), status: z21.enum(["accepted", "underReview", "rejected"]).optional() })).nullable().optional(),
+          locations: z21.array(location).optional(),
+          relatedLocations: z21.array(location).optional()
         })).optional()
       }))
     });
@@ -5681,7 +5875,7 @@ var init_sarif = __esm({
 });
 
 // src/review/evidence/check.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 function parseCheck(raw, sourceRoot) {
   const report = schema3.parse(raw);
   const diagnostics = [], findings = [];
@@ -5721,17 +5915,17 @@ var init_check = __esm({
     "use strict";
     init_paths2();
     init_types2();
-    schema3 = z21.object({
-      version: z21.literal(1),
-      commit: z21.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).optional(),
-      results: z21.array(z21.object({
-        name: z21.string().min(1).max(1e3),
-        status: z21.enum(["passed", "failed", "skipped"]),
-        message: z21.string().max(1e5).optional(),
-        locations: z21.array(z21.object({
-          file: z21.string().min(1).max(4e3),
-          line: z21.number().int().positive().optional(),
-          column: z21.number().int().positive().optional()
+    schema3 = z22.object({
+      version: z22.literal(1),
+      commit: z22.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).optional(),
+      results: z22.array(z22.object({
+        name: z22.string().min(1).max(1e3),
+        status: z22.enum(["passed", "failed", "skipped"]),
+        message: z22.string().max(1e5).optional(),
+        locations: z22.array(z22.object({
+          file: z22.string().min(1).max(4e3),
+          line: z22.number().int().positive().optional(),
+          column: z22.number().int().positive().optional()
         })).max(100).default([])
       })).max(1e5)
     });
@@ -5740,7 +5934,7 @@ var init_check = __esm({
 
 // src/review/evidence.ts
 import path29 from "path";
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 function relativeArtifact(root, file) {
   const relative = path29.isAbsolute(file) ? path29.relative(root, file) : file;
   const normalized = normalizeRepoPath(relative);
@@ -5781,7 +5975,7 @@ async function collectReviewEvidence(root, manifests, changedFiles, decisions, d
     let manifest, raw;
     try {
       manifest = relativeArtifact(root, supplied);
-      raw = z22.object({ version: z22.literal(1), checks: z22.array(z22.unknown()) }).parse(await readStoreJson(root, manifest));
+      raw = z23.object({ version: z23.literal(1), checks: z23.array(z23.unknown()) }).parse(await readStoreJson(root, manifest));
     } catch (error) {
       output.diagnostics.push(`${supplied}: ${String(error)}`);
       continue;
@@ -5936,25 +6130,25 @@ var init_evidence2 = __esm({
     init_sarif();
     init_check();
     init_types2();
-    checkSchema2 = z22.object({
-      id: z22.string().min(1).max(100),
-      kind: z22.enum(["tests", "static-analysis", "security", "complexity", "duplication", "documentation"]),
-      tool: z22.string().min(1).max(200),
-      command: z22.string().min(1).max(2e3),
-      commit: z22.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).nullable().optional(),
-      workingTreeClean: z22.boolean().optional(),
-      source: z22.string().max(2e3).optional(),
-      sourceRoot: z22.string().min(1).max(4e3).optional(),
-      status: z22.enum(["completed", "skipped", "unavailable"]).default("completed"),
-      reason: z22.string().min(1).max(2e3).optional(),
-      exitCode: z22.number().int().nullable().optional(),
-      environment: z22.object({
-        toolVersion: z22.string().min(1).max(200),
-        runtime: z22.string().min(1).max(200).optional(),
-        platform: z22.string().min(1).max(200).optional(),
-        configuration: z22.array(z22.string().min(1).max(4e3)).max(100).optional()
+    checkSchema2 = z23.object({
+      id: z23.string().min(1).max(100),
+      kind: z23.enum(["tests", "static-analysis", "security", "complexity", "duplication", "documentation"]),
+      tool: z23.string().min(1).max(200),
+      command: z23.string().min(1).max(2e3),
+      commit: z23.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).nullable().optional(),
+      workingTreeClean: z23.boolean().optional(),
+      source: z23.string().max(2e3).optional(),
+      sourceRoot: z23.string().min(1).max(4e3).optional(),
+      status: z23.enum(["completed", "skipped", "unavailable"]).default("completed"),
+      reason: z23.string().min(1).max(2e3).optional(),
+      exitCode: z23.number().int().nullable().optional(),
+      environment: z23.object({
+        toolVersion: z23.string().min(1).max(200),
+        runtime: z23.string().min(1).max(200).optional(),
+        platform: z23.string().min(1).max(200).optional(),
+        configuration: z23.array(z23.string().min(1).max(4e3)).max(100).optional()
       }).optional(),
-      report: z22.object({ format: z22.enum(["vitest-json", "sarif", "mason-check-json"]), path: z22.string().min(1).max(4e3) }).optional()
+      report: z23.object({ format: z23.enum(["vitest-json", "sarif", "mason-check-json"]), path: z23.string().min(1).max(4e3) }).optional()
     });
   }
 });
@@ -6744,7 +6938,7 @@ __export(observations_exports, {
   readObservation: () => readObservation
 });
 import fs23 from "fs/promises";
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 function observationPath(directory, host, revision, version = executingVersion()) {
   return `${directory}/activation/${host}-${revision}-${hash(version).slice(0, 12)}.json`;
 }
@@ -6815,19 +7009,19 @@ var init_observations = __esm({
     init_storage();
     init_model();
     init_launcher();
-    observationSchema = z23.object({
-      version: z23.literal(1),
-      masonVersion: z23.string(),
-      root: z23.string(),
-      revision: z23.string(),
-      host: z23.enum(["codex", "claude"]),
-      contextCalls: z23.number().int().nonnegative(),
-      lastContextAt: z23.string().optional(),
-      sessions: z23.record(z23.object({
-        events: z23.array(z23.enum(events)),
-        at: z23.string(),
-        verificationStatus: z23.string().optional(),
-        reportPath: z23.string().optional()
+    observationSchema = z24.object({
+      version: z24.literal(1),
+      masonVersion: z24.string(),
+      root: z24.string(),
+      revision: z24.string(),
+      host: z24.enum(["codex", "claude"]),
+      contextCalls: z24.number().int().nonnegative(),
+      lastContextAt: z24.string().optional(),
+      sessions: z24.record(z24.object({
+        events: z24.array(z24.enum(events)),
+        at: z24.string(),
+        verificationStatus: z24.string().optional(),
+        reportPath: z24.string().optional()
       }))
     });
   }
@@ -7962,7 +8156,7 @@ init_advisory_review();
 init_decisions();
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 
 // src/mcp/tools.ts
 init_repair();
@@ -8591,14 +8785,14 @@ init_files();
 import { createHash as createHash4 } from "crypto";
 import { execFile as execFile5 } from "child_process";
 import { promisify as promisify5 } from "util";
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var exec3 = promisify5(execFile5);
-var requestSchema = z10.object({
-  id: z10.string().regex(/^[a-zA-Z0-9_-]+$/),
-  action: z10.enum(["prepare", "accept", "reaffirm", "retire"]).default("prepare"),
-  reviewer: z10.string().trim().min(1).max(200).optional(),
-  note: z10.string().trim().min(1).max(1500).optional(),
-  reviewToken: z10.string().regex(/^[a-f0-9]{64}$/).optional()
+var requestSchema = z11.object({
+  id: z11.string().regex(/^[a-zA-Z0-9_-]+$/),
+  action: z11.enum(["prepare", "accept", "reaffirm", "retire"]).default("prepare"),
+  reviewer: z11.string().trim().min(1).max(200).optional(),
+  note: z11.string().trim().min(1).max(1500).optional(),
+  reviewToken: z11.string().regex(/^[a-f0-9]{64}$/).optional()
 });
 async function reviewState(root, record) {
   const [headHash, workingTree, changes] = await Promise.all([
@@ -8825,16 +9019,16 @@ init_lock();
 init_storage();
 init_snapshot();
 import fs17 from "fs/promises";
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var DIRECTORY = ".mason/partial-snapshots";
-var partialSchema = z11.object({
-  batchId: z11.string().regex(/^[a-zA-Z0-9_-]+$/),
-  offset: z11.number().int().nonnegative(),
-  features: z11.record(featureSchema),
-  flows: z11.record(flowSchema),
-  savedAt: z11.string()
+var partialSchema = z12.object({
+  batchId: z12.string().regex(/^[a-zA-Z0-9_-]+$/),
+  offset: z12.number().int().nonnegative(),
+  features: z12.record(featureSchema),
+  flows: z12.record(flowSchema),
+  savedAt: z12.string()
 });
-var scopeSchema2 = z11.object({ files: z11.array(z11.string()), savedAt: z11.string() });
+var scopeSchema2 = z12.object({ files: z12.array(z12.string()), savedAt: z12.string() });
 async function savePartial(rootDir, partial) {
   if (!/^[a-zA-Z0-9_-]+$/.test(partial.batchId)) throw new Error(`Invalid batchId: ${partial.batchId}`);
   await withSnapshotWrite(rootDir, () => writeStoreJson(rootDir, `${DIRECTORY}/${partial.batchId}.json`, partialSchema.parse(partial)));
@@ -9833,21 +10027,21 @@ function createMcpServer() {
   const server = new McpServer(
     {
       name: "mason",
-      version: "0.19.1"
+      version: "0.19.2"
     },
     {
-      instructions: (setupNotice ? setupNotice + "\n\n" : "") + 'Mason retrieves recorded decisions, file impact, and optional feature/flow maps. Use get_context with the task and known files, and get_impact before editing. Save learned rationale and constraints with save_decision; review and commit the local records through the project workflow. These tools work without initialization or a concept map. Consult trust and diagnostics: changed or unknown freshness needs source inspection, stale or unknown map verification needs a fresh review, recorded failed verdicts need correction, and proposals are suggestions and legacy records are unreviewed. Accepted decisions are recorded team constraints, still subject to freshness checks. Use review_decision to prepare code evidence and record only authorized acceptance, reaffirmation, or retirement. Never invent a reviewer or treat these recorded identities as authenticated approval. mason_init returns documentation audit and committed-diff review findings with a quickstart guide. Use mode: "map" only when a full architecture map is requested. A missing map is not a setup failure; use decisions and source evidence. get_snapshot provides architecture navigation when a map is available. The mason-audit and mason-review CLIs also work without setup.'
+      instructions: (setupNotice ? setupNotice + "\n\n" : "") + 'Mason retrieves recorded decisions, file impact, and optional feature/flow maps. Use get_context with the task and known files, and get_impact before editing. Save learned rationale and constraints with save_decision as soon as evidence supports them, without waiting for implementation or merge; review and commit the local records through the project workflow. These tools work without initialization or a concept map. Consult trust and diagnostics: changed or unknown freshness needs source inspection, stale or unknown map verification needs a fresh review, recorded failed verdicts need correction, and proposals are suggestions and legacy records are unreviewed. Accepted decisions are recorded team constraints, still subject to freshness checks. Use review_decision to prepare code evidence and record only authorized acceptance, reaffirmation, or retirement. Never invent a reviewer or treat these recorded identities as authenticated approval. mason_init returns documentation audit and committed-diff review findings with a quickstart guide. Use mode: "map" only when a full architecture map is requested. A missing map is not a setup failure; use decisions and source evidence. get_snapshot provides architecture navigation when a map is available. The mason-audit and mason-review CLIs also work without setup.'
     }
   );
   server.tool(
     "mason_init",
     "Inspect this project now: returns documentation audit findings, committed-diff review findings, decision/map status, and a quickstart playbook. Quickstart and map modes are read-only and deterministic. Explicit mode: setup configures MCP, instructions and lifecycle hooks to use mason on PATH while retaining original audit evidence; use it only when the user requests setup. Optional host selects codex or claude. Optional base selects the review comparison; evidence imports CI manifests with check outcomes, commit freshness, and links to changed files and accepted decisions. mode: map returns the full Map-Reduce build workflow. Repeat calls refresh findings even after setup.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      mode: z24.enum(["quickstart", "map", "setup"]).optional().default("quickstart").describe("Quickstart inspects without edits; map requests an architecture build; setup installs the shared onboarding flow."),
-      host: z24.enum(["codex", "claude"]).optional().describe("Assistant to configure in setup mode; inferred only when unambiguous."),
-      base: z24.string().optional().describe("Git ref for committed-diff review. Defaults to the first available main branch ref."),
-      evidence: z24.array(z24.string()).max(10).optional().describe("Repository-local CI evidence manifests to include in the review. Imports Vitest JSON, SARIF, and native-validator mason-check-json results without executing check commands.")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      mode: z25.enum(["quickstart", "map", "setup"]).optional().default("quickstart").describe("Quickstart inspects without edits; map requests an architecture build; setup installs the shared onboarding flow."),
+      host: z25.enum(["codex", "claude"]).optional().describe("Assistant to configure in setup mode; inferred only when unambiguous."),
+      base: z25.string().optional().describe("Git ref for committed-diff review. Defaults to the first available main branch ref."),
+      evidence: z25.array(z25.string()).max(10).optional().describe("Repository-local CI evidence manifests to include in the review. Imports Vitest JSON, SARIF, and native-validator mason-check-json results without executing check commands.")
     },
     async ({ dir, mode, host, base, evidence }) => {
       const result = await masonInit(dir, { mode, host, base, evidence });
@@ -9856,10 +10050,10 @@ function createMcpServer() {
   );
   server.tool(
     "mason_automation",
-    "Inspect installed automation and observed host events, or resume/check retained documentation repair evidence across sessions. status is read-only; check saves local baselines and verification reports without editing source or approving advisories. Returns concise results with a full report path. Works without a map.",
+    "Inspect installed automation, observed host events, pending decision records and the notification baseline, or check all retained documentation findings across sessions. status is read-only; check saves local baselines and verification reports without editing source, approving advisories or consuming pending completion notices. Returns concise results with a full report path. Works without a map.",
     {
-      dir: z24.string().describe("Absolute path to the project directory"),
-      action: z24.enum(["status", "check"]).describe("Inspect configuration and receipts, or capture/resume and verify original audit evidence.")
+      dir: z25.string().describe("Absolute path to the project directory"),
+      action: z25.enum(["status", "check"]).describe("Inspect configuration and receipts, or capture/resume and verify original audit evidence.")
     },
     async ({ dir, action }) => ({ content: [{ type: "text", text: await masonAutomation(dir, action) }] })
   );
@@ -9867,10 +10061,10 @@ function createMcpServer() {
     "mason_repair",
     "Track documentation repairs against original audit evidence. prepare saves a local baseline and returns a scoped work order; verify reads that baseline and reports resolved, unresolved, review-required, unverified, and new findings. Suppressed advisories remain unresolved. Does not edit documentation or approve decisions. No map required.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      action: z24.enum(["prepare", "verify"]),
-      baselinePath: z24.string().optional().describe("Original baseline path returned by prepare; required for verify."),
-      checks: z24.array(z24.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"])).min(1).optional().describe("Optional audit check subset for prepare. Verification always uses the original checks.")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      action: z25.enum(["prepare", "verify"]),
+      baselinePath: z25.string().optional().describe("Original baseline path returned by prepare; required for verify."),
+      checks: z25.array(z25.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"])).min(1).optional().describe("Optional audit check subset for prepare. Verification always uses the original checks.")
     },
     async ({ dir, action, baselinePath, checks }) => {
       const result = await masonRepair(dir, { action, baselinePath, checks });
@@ -9880,15 +10074,15 @@ function createMcpServer() {
   server.tool(
     "review_advisory",
     "Prepare an assessment of an original repair advisory and its exact repository scope, then record authorized addressed, inapplicable or deferred outcomes with reviewToken, reviewer and note. Relevant changes reopen reviews; unrelated commits preserve them. Records belong in Git. Decision findings route to review_decision; this tool never approves decisions. Recorded identities are assertions, not authenticated approvals. For dependency advisories, action dismiss with reasonCode and note records a one-step dismissal without a token or reviewer. no-dependency-claims reopens only on document content changes; unrelated-manifest-change also tracks scoped manifests.",
-    { dir: z24.string().describe("Absolute path to the project root"), ...advisoryReviewRequest.shape },
+    { dir: z25.string().describe("Absolute path to the project root"), ...advisoryReviewRequest.shape },
     async ({ dir, ...request }) => ({ content: [{ type: "text", text: await masonReviewAdvisory(dir, request) }] })
   );
   server.tool(
     "mason_complete_init",
     "Record assistant instruction setup locally in ignored .mason/local/project.json, with feature settings in shared .mason/config.json. Other tools work without this marker. Repeated calls preserve the original setup time and existing settings; pass confluenceConfigured only to change that setting.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      confluenceConfigured: z24.boolean().optional().describe("Set the Confluence setup status; omit to preserve the existing value")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      confluenceConfigured: z25.boolean().optional().describe("Set the Confluence setup status; omit to preserve the existing value")
     },
     async ({ dir, confluenceConfigured }) => {
       const result = await masonCompleteInit(dir, { confluenceConfigured });
@@ -9899,11 +10093,11 @@ function createMcpServer() {
     "mason_set_confluence",
     "Configure Confluence credentials. Two-step flow: (1) call without `spaceKey` to validate the credentials and receive a list of available spaces \u2014 relay them to the user. (2) call again with the same `baseUrl`/`email`/`apiToken` plus the chosen `spaceKey` to persist. Credentials are stored in `~/.mason/config.json`. Warn the user that the API token will be visible in chat history before they paste it.",
     {
-      baseUrl: z24.string().describe("Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically)."),
-      email: z24.string().describe("User's Atlassian account email"),
-      apiToken: z24.string().describe("API token from id.atlassian.com/manage-profile/security/api-tokens"),
-      spaceKey: z24.string().optional().describe("Confluence space key. Omit on the first call to list available spaces."),
-      parentPageId: z24.string().optional().describe("Optional parent page ID under which Mason's index page is created")
+      baseUrl: z25.string().describe("Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically)."),
+      email: z25.string().describe("User's Atlassian account email"),
+      apiToken: z25.string().describe("API token from id.atlassian.com/manage-profile/security/api-tokens"),
+      spaceKey: z25.string().optional().describe("Confluence space key. Omit on the first call to list available spaces."),
+      parentPageId: z25.string().optional().describe("Optional parent page ID under which Mason's index page is created")
     },
     async ({ baseUrl, email, apiToken, spaceKey, parentPageId }) => {
       const result = await masonSetConfluence({
@@ -9920,7 +10114,7 @@ function createMcpServer() {
     "full_analysis",
     "One-shot orientation for a project WITHOUT a concept map (get_snapshot returned exists:false). Returns git history stats, project structure with file counts, curated code sample previews (~60 lines each), and test-to-source mapping. On a mapped project, prefer get_snapshot \u2014 it is cheaper and answers feature/architecture questions directly.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z25.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await fullAnalysis(dir);
@@ -9933,7 +10127,7 @@ function createMcpServer() {
     "analyze_project",
     "Run git history analysis on a codebase. Returns commit convention patterns, stale directories, and frequently changed files. These are aggregate stats across hundreds of commits that would be expensive to compute manually.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z25.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await analyzeProject(dir);
@@ -9946,8 +10140,8 @@ function createMcpServer() {
     "get_code_samples",
     "Get previews (first ~60 lines) of representative source files from the codebase. Includes entry points, config files, hot files (frequently changed), test examples, and one file per directory for breadth. Read files natively for full content.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      count: z24.number().optional().default(15).describe("Maximum number of files to sample (default: 15)")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      count: z25.number().optional().default(15).describe("Maximum number of files to sample (default: 15)")
     },
     async ({ dir, count: count4 }) => {
       const result = await getCodeSamples(dir, count4);
@@ -9960,7 +10154,7 @@ function createMcpServer() {
     "get_snapshot",
     "Return the optional feature-to-file architecture map with drift and trust evidence. Map verification is rechecked against sampled source contents; stale or unknown verification requires a fresh review, and recordedVerdict preserves the historical verdict. If no map exists, returns exists:false plus project structure, Git signals, and test pairs. Decision capture, get_context, and get_impact still work. No initialization required.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z25.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await getSnapshot(dir);
@@ -9973,9 +10167,9 @@ function createMcpServer() {
     "get_context",
     "Assemble task context: matching decisions with rationale, approval, owner, sources, last review, and freshness, plus related tests, file impact, and any available map entries. Map verification is rechecked against sampled source contents; stale or unknown verification requires a fresh review, and recordedVerdict preserves the historical verdict. Proposals are suggestions; legacy records are unreviewed; accepted decisions are constraints subject to freshness. No initialization or map required. Pass task and optional files. map.status and diagnostics preserve missing or invalid knowledge. Impact covers up to three unique files, expanding directory anchors.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      task: z24.string().describe("The task, bug, or change request in natural language \u2014 e.g. 'add rate limiting to the API client' or a ticket description"),
-      files: z24.array(z24.string()).optional().describe("Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      task: z25.string().describe("The task, bug, or change request in natural language \u2014 e.g. 'add rate limiting to the API client' or a ticket description"),
+      files: z25.array(z25.string()).optional().describe("Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.")
     },
     async ({ dir, task, files }) => {
       const result = await getContext(dir, task, files);
@@ -9991,10 +10185,10 @@ function createMcpServer() {
     "generate_snapshot_batch",
     "Map step of the concept-map build. Returns one batch of source files (skeletons of every file in the batch plus a few deeper-read bodies for grounding), along with a system prompt instructing you to derive features and flows for ONLY this batch. Call repeatedly with the returned `nextOffset` until it is null, calling `save_partial_snapshot` between each call. Use product-natural feature names so partials merge cleanly in the reduce step.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      offset: z24.number().int().optional().describe("0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls."),
-      batchSize: z24.number().int().optional().describe("Files per batch. Defaults to 50."),
-      files: z24.array(z24.string()).optional().describe("Scope the batch walk to this explicit file list \u2014 e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh mode: reduce_snapshot will merge the partials into the existing map instead of rebuilding it.")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      offset: z25.number().int().optional().describe("0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls."),
+      batchSize: z25.number().int().optional().describe("Files per batch. Defaults to 50."),
+      files: z25.array(z25.string()).optional().describe("Scope the batch walk to this explicit file list \u2014 e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh mode: reduce_snapshot will merge the partials into the existing map instead of rebuilding it.")
     },
     async ({ dir, offset, batchSize, files }) => {
       const result = await generateSnapshotBatch(dir, offset, batchSize, files);
@@ -10007,23 +10201,23 @@ function createMcpServer() {
     "save_partial_snapshot",
     "Persist the partial concept map you derived for one batch. Call this once per batch, with the `batchId` from the `generate_snapshot_batch` response. Partials accumulate in `.mason/partial-snapshots/` and are merged in the reduce step.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      batchId: z24.string().describe("The `batchId` returned by `generate_snapshot_batch`."),
-      offset: z24.number().int().describe("The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step."),
-      features: z24.record(
-        z24.object({
-          description: z24.string(),
-          files: z24.array(z24.string()),
-          tests: z24.array(z24.string()).optional(),
-          type: z24.enum(["capability", "infrastructure"]).optional().describe(
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      batchId: z25.string().describe("The `batchId` returned by `generate_snapshot_batch`."),
+      offset: z25.number().int().describe("The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step."),
+      features: z25.record(
+        z25.object({
+          description: z25.string(),
+          files: z25.array(z25.string()),
+          tests: z25.array(z25.string()).optional(),
+          type: z25.enum(["capability", "infrastructure"]).optional().describe(
             '"capability" (user-facing functionality) or "infrastructure" (internal plumbing with no end user \u2014 DI/service wiring, config, logging, adapters). Defaults to "capability".'
           )
         })
       ).describe("Partial features for this batch only \u2014 files outside the batch will be added by other partials."),
-      flows: z24.record(
-        z24.object({
-          description: z24.string(),
-          chain: z24.array(z24.string())
+      flows: z25.record(
+        z25.object({
+          description: z25.string(),
+          chain: z25.array(z25.string())
         })
       ).describe("Partial flows whose entire chain is in this batch. Cross-batch flows are reconstructed in reduce.")
     },
@@ -10038,7 +10232,7 @@ function createMcpServer() {
     "reduce_snapshot",
     "Reduce step of the concept-map build. Returns every partial snapshot plus a system prompt asking you to merge them into one coherent project-wide map. Resolve platform variants into single product features, dedupe near-duplicates, and ensure no file is dropped. After producing the unified map, call `save_snapshot` to persist it (this also clears the partials).",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z25.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await reduceSnapshot(dir);
@@ -10051,25 +10245,25 @@ function createMcpServer() {
     "save_snapshot",
     "Save a concept-to-files map as a persistent project snapshot. Maps feature names and data flows to the files that implement them. Persists across conversations \u2014 future sessions can call get_snapshot to instantly find relevant files. No API key needed \u2014 you are the LLM generating the map.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      features: z24.record(
-        z24.object({
-          description: z24.string().describe("One-line description of the feature"),
-          files: z24.array(z24.string()).describe("File paths that implement this feature"),
-          tests: z24.array(z24.string()).optional().describe("Test file paths for this feature"),
-          type: z24.enum(["capability", "infrastructure"]).optional().describe(
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      features: z25.record(
+        z25.object({
+          description: z25.string().describe("One-line description of the feature"),
+          files: z25.array(z25.string()).describe("File paths that implement this feature"),
+          tests: z25.array(z25.string()).optional().describe("Test file paths for this feature"),
+          type: z25.enum(["capability", "infrastructure"]).optional().describe(
             'Classification: "capability" for user-facing functionality, "infrastructure" for internal plumbing with no end user (DI/service wiring, config, logging, adapters). Capabilities are published to Confluence; infrastructure stays in the AI concept map only. Defaults to "capability".'
           )
         })
       ).describe("Map of feature names to their implementing files"),
-      flows: z24.record(
-        z24.object({
-          description: z24.string().describe("One-line description of the flow"),
-          chain: z24.array(z24.string()).describe("Ordered list of file paths showing data/call flow")
+      flows: z25.record(
+        z25.object({
+          description: z25.string().describe("One-line description of the flow"),
+          chain: z25.array(z25.string()).describe("Ordered list of file paths showing data/call flow")
         })
       ).describe("Map of flow names to ordered file chains"),
-      removeFeatures: z24.array(z24.string()).optional().describe("Feature names to delete from the existing map \u2014 for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves."),
-      removeFlows: z24.array(z24.string()).optional().describe("Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.")
+      removeFeatures: z25.array(z25.string()).optional().describe("Feature names to delete from the existing map \u2014 for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves."),
+      removeFlows: z25.array(z25.string()).optional().describe("Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.")
     },
     async ({ dir, features, flows, removeFeatures, removeFlows }) => {
       const result = await saveSnapshotData(
@@ -10086,19 +10280,19 @@ function createMcpServer() {
   );
   server.tool(
     "save_decision",
-    "Capture or revise a decision proposal with rationale, anchors, optional owner, sources, and a known actor. Compare matching get_context records and pending proposals before saving. When new evidence changes the same lesson's assumptions, scope, or recommended action, pass its existing id, including for accepted records. Preserve supported rationale and sources and replace obsolete instructions. Create a new record for a genuinely distinct lesson; skip unchanged restatements. No setup or map required. Writes a local record and preserves content history. Changes create a pending proposal while the last accepted revision remains operative; unchanged content does not re-verify or refresh it. Use review_decision for authorized acceptance or reaffirmation. A proposal cannot supersede a record with an operative accepted revision; review its replacement and retire the original separately.",
+    "Capture or revise a decision proposal as soon as the lesson is supported by evidence, without waiting for implementation or merge. Keep unimplemented remedies tentative. Include rationale, anchors, optional owner, sources, and a known actor. Compare matching get_context records and pending proposals before saving. When new evidence changes the same lesson's assumptions, scope, or recommended action, pass its existing id, including for accepted records. Preserve supported rationale and sources and replace obsolete instructions. Create a new record for a genuinely distinct lesson; skip unchanged restatements. No setup or map required. Writes a local record and preserves content history. Changes create a pending proposal while the last accepted revision remains operative; unchanged content does not re-verify or refresh it. Use review_decision for authorized acceptance or reaffirmation. A proposal cannot supersede a record with an operative accepted revision; review its replacement and retire the original separately.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
+      dir: z25.string().describe("Absolute path to the project root directory"),
       title: decisionTitleSchema.describe(`Short, specific headline (max ${TITLE_MAX_CHARS} characters). Generates a stable id on creation; revising the title keeps the existing id.`),
       body: decisionBodySchema.describe(`The knowledge itself: what was tried/decided, why, and what to avoid. Must contain information NOT derivable by reading the code. Aim for ${BODY_RECOMMENDED_CHARS} characters or fewer; up to ${BODY_MAX_CHARS} is accepted with a warning above the target. Matching context and hooks include the full body. Preserve exceptions; use sources for supporting references.`),
-      category: z24.enum(["decision", "gotcha", "deprecation", "convention"]),
-      files: z24.array(z24.string()).optional().describe("Repo-relative files or directory prefixes this applies to. Matching is shared by retrieval, hooks, review, and drift checking; changes flag the decision for re-verification."),
-      id: z24.string().optional().describe("Pass the matching record's existing id when evidence changes that lesson's assumptions, scope, or recommended action, including for accepted records. Changed content becomes a proposal while the accepted version remains operative; unchanged content leaves review and freshness untouched."),
-      supersedes: z24.string().optional().describe("Id of an unreviewed record or proposal with no accepted revision to replace. Operative accepted decisions require separate review and retirement."),
+      category: z25.enum(["decision", "gotcha", "deprecation", "convention"]),
+      files: z25.array(z25.string()).optional().describe("Repo-relative files or directory prefixes this applies to. Matching is shared by retrieval, hooks, review, and drift checking; changes flag the decision for re-verification."),
+      id: z25.string().optional().describe("Pass the matching record's existing id when evidence changes that lesson's assumptions, scope, or recommended action, including for accepted records. Changed content becomes a proposal while the accepted version remains operative; unchanged content leaves review and freshness untouched."),
+      supersedes: z25.string().optional().describe("Id of an unreviewed record or proposal with no accepted revision to replace. Operative accepted decisions require separate review and retirement."),
       owner: attributionSchema.shape.owner.describe("Responsible person or team, when known. Null clears it. Required for acceptance."),
       sources: attributionSchema.shape.sources.describe("Known PR, issue, incident, discussion, or document references. Omit to preserve; [] clears. At least one is required for acceptance."),
       actor: attributionSchema.shape.actor.describe("Known person or agent recording this revision. Omit if unknown; do not infer from Git identity."),
-      force: z24.boolean().optional().describe("Save even when a near-duplicate was detected")
+      force: z25.boolean().optional().describe("Save even when a near-duplicate was detected")
     },
     async ({ dir, title, body, category, files, id, supersedes, force, owner, sources, actor }) => {
       const result = await saveDecision(dir, {
@@ -10120,12 +10314,12 @@ function createMcpServer() {
     "review_decision",
     "Prepare a decision review: returns the full record and history, any operative accepted revision, provenance, changes and previews for both sets of anchors, and a reviewToken. Then record accept, reaffirm, or retire with that token, the authorized reviewer, and a reason. Acceptance replaces the operative revision; retirement withdraws the entire record including its proposal. Acceptance requires owner, source, readable Git HEAD, and committed anchor changes. Changed records or code invalidate the token. Identities and approvals are recorded assertions for normal PR review, not authenticated proof.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      id: z24.string().regex(/^[a-zA-Z0-9_-]+$/).describe("Decision id from get_context or save_decision"),
-      action: z24.enum(["prepare", "accept", "reaffirm", "retire"]).optional().default("prepare").describe("Prepare is read-only. Other actions record an explicitly authorized review."),
-      reviewer: z24.string().trim().min(1).max(200).optional().describe("Identity of the actual reviewer; required for a verdict. Never invent one."),
-      note: z24.string().trim().min(1).max(1500).optional().describe("Review rationale; required for a verdict. Cite evidence for the decision."),
-      reviewToken: z24.string().regex(/^[a-f0-9]{64}$/).optional().describe("Token from the prepared review; rejects stale record or code revisions")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      id: z25.string().regex(/^[a-zA-Z0-9_-]+$/).describe("Decision id from get_context or save_decision"),
+      action: z25.enum(["prepare", "accept", "reaffirm", "retire"]).optional().default("prepare").describe("Prepare is read-only. Other actions record an explicitly authorized review."),
+      reviewer: z25.string().trim().min(1).max(200).optional().describe("Identity of the actual reviewer; required for a verdict. Never invent one."),
+      note: z25.string().trim().min(1).max(1500).optional().describe("Review rationale; required for a verdict. Cite evidence for the decision."),
+      reviewToken: z25.string().regex(/^[a-f0-9]{64}$/).optional().describe("Token from the prepared review; rejects stale record or code revisions")
     },
     async ({ dir, ...input }) => {
       const result = await reviewDecision2(dir, input);
@@ -10136,7 +10330,7 @@ function createMcpServer() {
     "mason_check_drift",
     "Check how far the concept map has drifted from HEAD. Deterministic (git + filesystem, no LLM). Returns which features/flows are stale and the changed files behind them, new source files not yet mapped, ghost files (mapped but deleted), renames, and a `recommendation`: `up-to-date` (nothing to do), `incremental` (update just the stale entries via save_snapshot), or `full-rebuild` (re-run the Map-Reduce build). Call this before trusting the map in a long session, or periodically to keep the map and any synced wikis fresh.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z25.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await checkDrift(dir);
@@ -10149,8 +10343,8 @@ function createMcpServer() {
     "verify_snapshot",
     "Spot-check the concept map's CORRECTNESS (drift checks freshness; this checks entries were right to begin with). Returns a sample of entries \u2014 always the never-verified and least-recently-verified first \u2014 with skeletons of their claimed files, for you to judge whether the files actually implement what the entry claims. Report verdicts back via save_verification with each entry\u2019s kind and reviewToken. Tokens bind the entry and bounded source evidence; changed evidence requires a fresh review. Run periodically, or after an automated refresh wrote entries no human reviewed.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      sample: z24.number().int().optional().describe("Entries to sample (default 5)")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      sample: z25.number().int().optional().describe("Entries to sample (default 5)")
     },
     async ({ dir, sample }) => {
       const result = await verifySnapshot(dir, sample);
@@ -10161,13 +10355,13 @@ function createMcpServer() {
     "save_verification",
     "Record verify_snapshot verdicts using each entry\u2019s kind and reviewToken. Missing tokens request a fresh review; changed or deleted entries return conflicts without being stamped. Entries judged ok are stamped verifiedAt; failures are flagged verificationFailed with your note and surface in get_context, get_snapshot, and mason_check_drift until corrected. Verdict notes are required for failures.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      verdicts: z24.record(
-        z24.object({
-          kind: z24.enum(["feature", "flow"]).optional().describe("Entry kind returned by verify_snapshot; required to record a verdict"),
-          reviewToken: z24.string().optional().describe("Copy the reviewToken from verify_snapshot after inspecting its evidence; required to record a verdict"),
-          ok: z24.boolean(),
-          note: z24.string().optional().describe("One line on what's wrong \u2014 required when ok is false")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      verdicts: z25.record(
+        z25.object({
+          kind: z25.enum(["feature", "flow"]).optional().describe("Entry kind returned by verify_snapshot; required to record a verdict"),
+          reviewToken: z25.string().optional().describe("Copy the reviewToken from verify_snapshot after inspecting its evidence; required to record a verdict"),
+          ok: z25.boolean(),
+          note: z25.string().optional().describe("One line on what's wrong \u2014 required when ok is false")
         })
       ).describe("Entry name \u2192 verdict, exactly as returned by verify_snapshot")
     },
@@ -10180,8 +10374,8 @@ function createMcpServer() {
     "get_impact",
     "Trace historical co-change partners, related tests, and references with evidence: resolved imports, explicit paths, or uncertain name candidates. Candidates are not proven dependencies. Deterministic and read-only; no initialization or concept map required.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      files: z24.array(z24.string()).describe("File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      files: z25.array(z25.string()).describe("File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])")
     },
     async ({ dir, files }) => {
       const result = await getImpact(dir, files);
@@ -10194,12 +10388,12 @@ function createMcpServer() {
     "export_to_confluence",
     "Sync the project's concept map to Confluence as product-readable wiki pages: an index page, one page per feature (PM-language descriptions, no file paths), and a changelog page. Mason replaces managed page bodies; manual edits to those bodies are overwritten. Requires `mason_set_confluence` to have been called first.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      spaceKey: z24.string().optional().describe("Override the configured space key"),
-      parentPageId: z24.string().optional().describe("Override the configured parent page ID"),
-      indexPageTitle: z24.string().optional().describe("Title of the index page (default: 'Mason \u2014 System Map')"),
-      changelogPageTitle: z24.string().optional().describe("Title of the changelog page (default: 'Mason \u2014 Changelog')"),
-      featurePagePrefix: z24.string().optional().describe("Prefix for each feature page title (default: 'Feature: ')")
+      dir: z25.string().describe("Absolute path to the project root directory"),
+      spaceKey: z25.string().optional().describe("Override the configured space key"),
+      parentPageId: z25.string().optional().describe("Override the configured parent page ID"),
+      indexPageTitle: z25.string().optional().describe("Title of the index page (default: 'Mason \u2014 System Map')"),
+      changelogPageTitle: z25.string().optional().describe("Title of the changelog page (default: 'Mason \u2014 Changelog')"),
+      featurePagePrefix: z25.string().optional().describe("Prefix for each feature page title (default: 'Feature: ')")
     },
     async ({ dir, spaceKey, parentPageId, indexPageTitle, changelogPageTitle, featurePagePrefix }) => {
       const result = await exportToConfluenceTool(dir, {
@@ -10228,7 +10422,7 @@ import fs33 from "fs/promises";
 import path42 from "path";
 import { spawn as spawn3 } from "child_process";
 import { randomUUID as randomUUID11 } from "crypto";
-import { z as z30 } from "zod";
+import { z as z31 } from "zod";
 
 // src/distribution/state.ts
 init_storage();
@@ -10236,7 +10430,7 @@ import os5 from "os";
 import path38 from "path";
 import { fileURLToPath } from "url";
 import fs28 from "fs/promises";
-import { z as z26 } from "zod";
+import { z as z27 } from "zod";
 
 // src/distribution/path.ts
 import fs27 from "fs/promises";
@@ -10245,11 +10439,11 @@ import path37 from "path";
 import { execFile as execFile12 } from "child_process";
 import { promisify as promisify12 } from "util";
 import { createHash as createHash7, randomUUID as randomUUID7 } from "crypto";
-import { z as z25 } from "zod";
+import { z as z26 } from "zod";
 var execute2 = promisify12(execFile12);
-var pathChangeSchema = z25.discriminatedUnion("kind", [
-  z25.object({ kind: z25.literal("profile"), file: z25.string(), block: z25.string(), created: z25.boolean() }),
-  z25.object({ kind: z25.literal("windows"), entry: z25.string(), created: z25.boolean() })
+var pathChangeSchema = z26.discriminatedUnion("kind", [
+  z26.object({ kind: z26.literal("profile"), file: z26.string(), block: z26.string(), created: z26.boolean() }),
+  z26.object({ kind: z26.literal("windows"), entry: z26.string(), created: z26.boolean() })
 ]);
 var quote = (s) => "'" + s.replace(/'/g, "'\\''") + "'";
 async function configurePath(bin, previous, save, options = {}) {
@@ -10369,26 +10563,26 @@ try {
 }
 
 // src/distribution/state.ts
-var releaseVersion = z26.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/);
-var bundleId = z26.string().regex(/^[a-f0-9]{24}$/);
-var updatePolicySchema = z26.object({
-  enabled: z26.boolean(),
-  revision: z26.string(),
+var releaseVersion = z27.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/);
+var bundleId = z27.string().regex(/^[a-f0-9]{24}$/);
+var updatePolicySchema = z27.object({
+  enabled: z27.boolean(),
+  revision: z27.string(),
   pinnedVersion: releaseVersion.optional(),
-  mirror: z26.string().optional()
+  mirror: z27.string().optional()
 });
-var recordSchema3 = z26.object({
-  format: z26.literal(1),
-  home: z26.string(),
-  bin: z26.string(),
+var recordSchema3 = z27.object({
+  format: z27.literal(1),
+  home: z27.string(),
+  bin: z27.string(),
   current: bundleId,
   version: releaseVersion,
-  launchers: z26.record(z26.string()),
-  previousLaunchers: z26.record(z26.string()).optional(),
-  pathChanges: z26.array(pathChangeSchema).optional(),
+  launchers: z27.record(z27.string()),
+  previousLaunchers: z27.record(z27.string()).optional(),
+  pathChanges: z27.array(pathChangeSchema).optional(),
   updates: updatePolicySchema.optional(),
-  previous: z26.object({ id: bundleId, version: releaseVersion }).optional(),
-  pending: z26.object({ id: bundleId, version: releaseVersion, policyRevision: z26.string() }).optional()
+  previous: z27.object({ id: bundleId, version: releaseVersion }).optional(),
+  pending: z27.object({ id: bundleId, version: releaseVersion, policyRevision: z27.string() }).optional()
 });
 async function readInstallation(home) {
   const raw = await readStoreJson(home, "install.json");
@@ -10429,15 +10623,15 @@ init_storage();
 import fs29 from "fs/promises";
 import path39 from "path";
 import { createHash as createHash8 } from "crypto";
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 var targets = ["darwin-arm64", "darwin-x64", "linux-arm64", "linux-x64", "win32-arm64", "win32-x64"];
-var digest2 = z27.string().regex(/^[a-f0-9]{64}$/);
-var bundleSchema = z27.object({
-  format: z27.literal(1),
-  version: z27.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
-  target: z27.enum(targets),
-  nodeVersion: z27.string(),
-  files: z27.record(digest2)
+var digest2 = z28.string().regex(/^[a-f0-9]{64}$/);
+var bundleSchema = z28.object({
+  format: z28.literal(1),
+  version: z28.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
+  target: z28.enum(targets),
+  nodeVersion: z28.string(),
+  files: z28.record(digest2)
 }).strict();
 var sha256 = (bytes) => createHash8("sha256").update(bytes).digest("hex");
 async function readBundle(root) {
@@ -10473,8 +10667,13 @@ import { unlinkSync } from "fs";
 import os6 from "os";
 import path40 from "path";
 import { randomUUID as randomUUID8 } from "crypto";
-import { z as z28 } from "zod";
-var leaseSchema = z28.object({ pid: z28.number().int().positive(), host: z28.string(), bundle: z28.string().regex(/^[a-f0-9]{24}$/) });
+import { z as z29 } from "zod";
+
+// src/distribution/trust.ts
+import tls from "tls";
+
+// src/distribution/runtime.ts
+var leaseSchema = z29.object({ pid: z29.number().int().positive(), host: z29.string(), bundle: z29.string().regex(/^[a-f0-9]{24}$/) });
 
 // src/distribution/install.ts
 import fs32 from "fs/promises";
@@ -10491,8 +10690,8 @@ init_storage();
 import fs31 from "fs/promises";
 import os7 from "os";
 import { randomUUID as randomUUID9 } from "crypto";
-import { z as z29 } from "zod";
-var leaseSchema2 = z29.object({ pid: z29.number().int().positive(), host: z29.string() });
+import { z as z30 } from "zod";
+var leaseSchema2 = z30.object({ pid: z30.number().int().positive(), host: z30.string() });
 async function hasRunningMcp(home) {
   const directory = await storePath(home, "sessions");
   const files = await fs31.readdir(directory).catch((error) => {
@@ -10722,14 +10921,14 @@ async function prepareStandaloneMcp(home) {
 // src/distribution/updates.ts
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var RELEASE_AGE_MS = 24 * 60 * 60 * 1e3;
-var releaseListSchema = z30.array(z30.object({ tag_name: z30.string(), draft: z30.boolean(), prerelease: z30.boolean(), published_at: z30.string().nullable() }));
-var updateManifestSchema = z30.object({
-  format: z30.literal(1),
-  version: z30.string().regex(/^\d+\.\d+\.\d+$/),
-  publishedAt: z30.string().datetime(),
-  assets: z30.record(z30.string().regex(/^[a-f0-9]{64}$/))
+var releaseListSchema = z31.array(z31.object({ tag_name: z31.string(), draft: z31.boolean(), prerelease: z31.boolean(), published_at: z31.string().nullable() }));
+var updateManifestSchema = z31.object({
+  format: z31.literal(1),
+  version: z31.string().regex(/^\d+\.\d+\.\d+$/),
+  publishedAt: z31.string().datetime(),
+  assets: z31.record(z31.string().regex(/^[a-f0-9]{64}$/))
 }).strict();
-var statusSchema2 = z30.object({ lastAttempt: z30.number(), availableVersion: z30.string().optional(), error: z30.string().optional() });
+var statusSchema2 = z31.object({ lastAttempt: z31.number(), availableVersion: z31.string().optional(), error: z31.string().optional() });
 async function scheduleAutomaticUpdate() {
   try {
     const { home, record } = await currentInstallation();