mason-context 0.19.1 → 0.20.1

package/dist/mason-mcp.js

@@ -138,9 +138,9 @@ async function readBoundedFile(file, maxBytes) {
 async function loadProjectConfig(root) {
   try {
     const canonicalRoot = await fs.realpath(root);
-    const configPath2 = await fs.realpath(path2.join(root, ".mason/config.json"));
-    if (!isWithinRoot(canonicalRoot, configPath2)) throw new Error("Project configuration resolves outside the repository");
-    const raw = await readBoundedFile(configPath2, 64 * 1024);
+    const configPath3 = await fs.realpath(path2.join(root, ".mason/config.json"));
+    if (!isWithinRoot(canonicalRoot, configPath3)) throw new Error("Project configuration resolves outside the repository");
+    const raw = await readBoundedFile(configPath3, 64 * 1024);
     if (raw === null) throw new Error("Project configuration is not a regular file or exceeds 64 KiB");
     const value = JSON.parse(raw);
     if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Expected a configuration object");
@@ -419,15 +419,15 @@ async function readAuditInput(root, file) {
 async function auditGlob(root, patterns, options) {
   if (Array.isArray(patterns) && !patterns.length) return [];
   const directories = /* @__PURE__ */ new Set();
-  const readdir2 = ((directory, opts, callback) => {
-    const relative = path5.relative(root, directory).split(path5.sep).join("/") || ".";
+  const readdir2 = ((directory2, opts, callback) => {
+    const relative = path5.relative(root, directory2).split(path5.sep).join("/") || ".";
     directories.add(relative);
     if (directories.size > MAX_INPUTS) {
       callback(new Error(`${options.label} exceeds ${MAX_INPUTS.toLocaleString("en-US")} directories while inspecting ${relative}. Narrow this check's inputs.`));
       return;
     }
     auditInputPath(root, relative).then(() => {
-      nativeFs.readdir(directory, opts, callback);
+      nativeFs.readdir(directory2, opts, callback);
     }, callback);
   });
   const lstat2 = ((file, callback) => {
@@ -557,25 +557,25 @@ function commandClaims(line, lineNo, cwd, shell = false) {
     if (text2.startsWith("#") || /^(?:echo|printf)\b/.test(text2)) continue;
     const cd = text2.match(/^cd\s+(.+)$/);
     if (cd) {
-      const directory = literal(cd[1]);
-      cwd = directory === null || cwd === null || /\s/.test(directory) && !/^["']/.test(cd[1]) ? null : path6.posix.join(cwd ?? ".", directory);
+      const directory2 = literal(cd[1]);
+      cwd = directory2 === null || cwd === null || /\s/.test(directory2) && !/^["']/.test(cd[1]) ? null : path6.posix.join(cwd ?? ".", directory2);
       continue;
     }
     for (const match of text2.matchAll(COMMAND)) {
       const flags = match[2].trim();
       const selector = flags.match(/^(?:--prefix|--dir|-C)(?:\s+|=)(.+)$/);
-      let directory = cwd;
+      let directory2 = cwd;
       let scopeUnknown;
       if (shell && match.index !== 0 || match[3].startsWith("-")) scopeUnknown = "Unsupported shell wrapper or options before the script.";
       if (selector) {
         const selected = literal(selector[1]);
-        directory = selected === null || cwd === null ? null : path6.posix.join(cwd ?? ".", selected);
+        directory2 = selected === null || cwd === null ? null : path6.posix.join(cwd ?? ".", selected);
       } else if (flags) scopeUnknown = "Unsupported package-manager options before run: " + flags;
       const tail = text2.slice(match.index + match[0].length).split(/\s--(?:\s|$)/)[0];
       if (/(?:^|\s)(?:--workspace(?:s)?|-w|--filter|-F|--prefix|--dir|-C|--if-present)(?:\s|=|$)/.test(tail)) {
         scopeUnknown = "Package selection or conditional options after the script need review.";
       }
-      if (/[|()]/.test(text2) || /\b(?:pushd|popd|if|for|while)\b/.test(text2) || directory === null) {
+      if (/[|()]/.test(text2) || /\b(?:pushd|popd|if|for|while)\b/.test(text2) || directory2 === null) {
         scopeUnknown = "The command's working directory or shell control flow could not be resolved.";
       }
       claims.push({
@@ -583,7 +583,7 @@ function commandClaims(line, lineNo, cwd, shell = false) {
         invocation: match[0],
         excerpt: match[0],
         line: lineNo,
-        ...directory !== void 0 && directory !== null ? { directory } : {},
+        ...directory2 !== void 0 && directory2 !== null ? { directory: directory2 } : {},
         ...scopeUnknown ? { scopeUnknown } : {}
       });
     }
@@ -1128,19 +1128,19 @@ var init_docs = __esm({
 // src/audit/scope.ts
 import fs5 from "fs/promises";
 import path8 from "path";
-function scopedPath(directory, value) {
+function scopedPath(directory2, value) {
   if (path8.posix.isAbsolute(value) || value.includes("\\") || /[\x00-\x1f]/.test(value)) return null;
-  const resolved = path8.posix.normalize(path8.posix.join(directory, value));
+  const resolved = path8.posix.normalize(path8.posix.join(directory2, value));
   return resolved === ".." || resolved.startsWith("../") ? null : resolved;
 }
 function pathClaimScope(doc, claim) {
-  const directory = claim.relativeTo === "document" ? path8.posix.dirname(doc) : documentScope(doc);
-  const local = scopedPath(directory, claim.path);
+  const directory2 = claim.relativeTo === "document" ? path8.posix.dirname(doc) : documentScope(doc);
+  const local = scopedPath(directory2, claim.path);
   if (!local) return null;
-  const candidates = claim.relativeTo === "document" || directory === "." ? [local] : [...new Set([local, scopedPath(".", claim.path)].filter((p) => p !== null))];
+  const candidates = claim.relativeTo === "document" || directory2 === "." ? [local] : [...new Set([local, scopedPath(".", claim.path)].filter((p) => p !== null))];
   return {
-    basis: claim.relativeTo === "document" ? "document-link" : directory === "." ? "repository" : "document",
-    directory,
+    basis: claim.relativeTo === "document" ? "document-link" : directory2 === "." ? "repository" : "document",
+    directory: directory2,
     candidates
   };
 }
@@ -1194,24 +1194,19 @@ async function lockDiagnostic(file) {
   }
   return reason2 + " Retry if a writer is active. For manual recovery, stop all Mason writers for this checkout, confirm they have exited (including other hosts), then remove only confirmed abandoned lock and lock.reclaim files. See docs/reference.md#snapshot-repairs-and-verification.";
 }
-async function withStoreLock(root, directory, run, waitMs = 5e3, label = "Mason store") {
-  const file = await storePath(root, directory + "/lock", true);
+async function withStoreLock(root, directory2, run, waitMs = 5e3, label = "Mason store") {
+  const file = await storePath(root, directory2 + "/lock", true);
   const deadline = Date.now() + waitMs;
   let handle;
   while (!handle) {
     try {
       handle = await fs6.open(file, "wx", 384);
-      try {
-        await handle.writeFile(JSON.stringify({ pid: process.pid, host: os.hostname() }));
-      } catch (error) {
-        await handle.close().catch(() => {
-        });
-        handle = void 0;
-        await fs6.rm(file, { force: true }).catch(() => {
-        });
-        throw error;
-      }
     } catch (error) {
+      if (process.platform === "win32" && error.code === "EPERM") {
+        if (Date.now() >= deadline) throw error;
+        await new Promise((resolve2) => setTimeout(resolve2, 40));
+        continue;
+      }
       if (error.code !== "EEXIST") throw error;
       try {
         const owner = JSON.parse(await fs6.readFile(file, "utf8"));
@@ -1240,6 +1235,17 @@ async function withStoreLock(root, directory, run, waitMs = 5e3, label = "Mason
       if (Date.now() >= deadline) throw new Error(label + " is busy or its lock needs inspection: " + file + ". " + await lockDiagnostic(file));
       await new Promise((resolve2) => setTimeout(resolve2, 40));
     }
+    if (handle) {
+      try {
+        await handle.writeFile(JSON.stringify({ pid: process.pid, host: os.hostname() }));
+      } catch (error) {
+        await handle.close().catch(() => {
+        });
+        await fs6.rm(file, { force: true }).catch(() => {
+        });
+        throw error;
+      }
+    }
   }
   try {
     return await run();
@@ -2044,19 +2050,19 @@ async function commandInputs(root, docs) {
   const resolutions = [];
   for (const doc of docs) for (const claim of doc.claims.commands) {
     const base = documentScope(doc.path);
-    const directory = scopedPath(base, claim.directory ?? ".");
+    const directory2 = scopedPath(base, claim.directory ?? ".");
     const scope = {
       basis: claim.directory === void 0 ? "document" : "explicit",
-      directory: directory ?? base,
+      directory: directory2 ?? base,
       candidates: []
     };
     const resolution = { doc: doc.path, claim, scope, manifest: null, scripts: [], elsewhere: [] };
     resolutions.push(resolution);
-    if (claim.scopeUnknown || directory === null) {
+    if (claim.scopeUnknown || directory2 === null) {
       resolution.problem = claim.scopeUnknown ?? "The command's directory leaves the repository.";
       continue;
     }
-    let cursor = directory;
+    let cursor = directory2;
     while (true) {
       const manifest = path15.posix.join(cursor, "package.json");
       scope.candidates.push(manifest);
@@ -2072,7 +2078,7 @@ async function commandInputs(root, docs) {
       cursor = path15.posix.dirname(cursor);
     }
     if (!resolution.manifest && !resolution.problem) {
-      resolution.problem = `No package.json for the command's scope (${directory}).`;
+      resolution.problem = `No package.json for the command's scope (${directory2}).`;
     }
     if (resolution.problem || resolution.scripts.includes(claim.scriptName) || claim.directory !== void 0) continue;
     inventory ??= await commandManifests(root);
@@ -3182,8 +3188,121 @@ var init_findings = __esm({
   }
 });
 
-// src/automation/store.ts
+// src/automation/notifications.ts
 import { z as z5 } from "zod";
+function condition(finding) {
+  const source = finding.current ?? finding.original;
+  const e = source.evidence;
+  const id = e.kind === "decision-anchor" ? digest([source.type, source.anchor.doc, e.decisionId]) : finding.id;
+  const result = { level: "confidence" in source ? 2 : 1, facts: [] };
+  switch (e.kind) {
+    case "count-mismatch":
+      result.magnitude = Math.abs(e.actual - e.claimed);
+      break;
+    case "unmentioned-dir":
+      result.magnitude = e.sourceFileCount;
+      break;
+    case "decision-anchor":
+      result.facts = [...e.changedFiles].sort();
+      break;
+    case "doc-behind-manifests":
+      result.facts = (e.matches ?? []).map((m) => JSON.stringify([m.manifest, m.dependency, m.after])).sort();
+      break;
+  }
+  return { id, condition: result };
+}
+function notificationConditions(findings) {
+  const active = findings.filter((f) => f.status !== "resolved");
+  const currentIds = new Set(active.filter((f) => f.current).map((f) => condition(f).id));
+  const result = {};
+  for (const f of active) {
+    const value = condition(f);
+    if (!f.current && currentIds.has(value.id)) continue;
+    const previous = result[value.id];
+    result[value.id] = previous ? {
+      level: Math.max(previous.level, value.condition.level),
+      facts: [.../* @__PURE__ */ new Set([...previous.facts, ...value.condition.facts])].sort(),
+      ...previous.magnitude !== void 0 || value.condition.magnitude !== void 0 ? { magnitude: Math.max(previous.magnitude ?? 0, value.condition.magnitude ?? 0) } : {}
+    } : value.condition;
+  }
+  return result;
+}
+function createNotificationState(findings, head) {
+  return { version: 1, baselineHead: head, baseline: notificationConditions(findings), delivered: {}, cleared: [] };
+}
+function worsened(current, previous) {
+  return !previous || current.level > previous.level || (current.magnitude ?? 0) > (previous.magnitude ?? 0) || current.facts.some((fact) => !previous.facts.includes(fact));
+}
+function completionFindings(state, findings) {
+  const current = notificationConditions(findings);
+  const cleared = new Set(state.cleared);
+  const resolvedIds = new Set(findings.filter((f) => f.status === "resolved").map((f) => condition(f).id));
+  for (const id of Object.keys(state.baseline)) if (resolvedIds.has(id) && !current[id]) cleared.add(id);
+  state.cleared = [...cleared];
+  const selected = [];
+  const selectedIds = /* @__PURE__ */ new Set();
+  const delivered = { ...state.delivered };
+  for (const finding of findings) {
+    const value = condition(finding);
+    const previous = state.delivered[value.id];
+    value.condition = current[value.id] ?? value.condition;
+    if (finding.status === "unverified" || !finding.current && finding.status !== "resolved") {
+      continue;
+    }
+    if (finding.status === "resolved") {
+      if (!current[value.id]) delete delivered[value.id];
+      continue;
+    }
+    const eligible = cleared.has(value.id) || worsened(value.condition, state.baseline[value.id]);
+    if (!eligible) continue;
+    if (!selectedIds.has(value.id) && worsened(value.condition, previous)) {
+      selectedIds.add(value.id);
+      const source = finding.current;
+      selected.push(source.evidence.kind === "decision-anchor" ? { ...finding, current: { ...source, evidence: { ...source.evidence, changedFiles: value.condition.facts } } } : finding);
+      if (selected.length <= MAX_COMPLETION_FINDINGS) delivered[value.id] = value.condition;
+    }
+  }
+  state.delivered = delivered;
+  return selected;
+}
+function completionSummary(findings, reportPath) {
+  if (!findings.length) return null;
+  const safe = (value) => value.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").slice(0, 250);
+  return [
+    `Mason: ${findings.length} new or worsened finding(s) since the retained baseline.`,
+    ...findings.slice(0, MAX_COMPLETION_FINDINGS).map((f) => {
+      const source = f.current ?? f.original;
+      const detail = source.evidence.kind === "decision-anchor" ? `Changes to ${source.evidence.changedFiles.join(", ")} may affect decision "${source.evidence.title}". Inspect the diff if relevant; acceptance is not required.` : source.message;
+      return `[${f.status === "unresolved" ? "issue" : "advisory"}] ${safe(source.anchor.doc)}: ${safe(detail)}`;
+    }),
+    ...findings.length > MAX_COMPLETION_FINDINGS ? [`${findings.length - MAX_COMPLETION_FINDINGS} more in the report; pending later feedback.`] : [],
+    `Evidence: ${reportPath}. Explicit audit: mason_automation(action: "check").`,
+    "Inspect findings within the authorized work. Concurrent changes may also contribute; this summary does not establish who introduced them."
+  ].join("\n");
+}
+var conditionSchema, MAX_COMPLETION_FINDINGS, notificationStateSchema;
+var init_notifications = __esm({
+  "src/automation/notifications.ts"() {
+    "use strict";
+    init_findings();
+    conditionSchema = z5.object({
+      level: z5.number(),
+      facts: z5.array(z5.string()),
+      magnitude: z5.number().optional()
+    });
+    MAX_COMPLETION_FINDINGS = 4;
+    notificationStateSchema = z5.object({
+      version: z5.literal(1),
+      baselineHead: z5.string(),
+      baseline: z5.record(conditionSchema),
+      delivered: z5.record(conditionSchema),
+      cleared: z5.array(z5.string())
+    });
+  }
+});
+
+// src/automation/store.ts
+import { z as z6 } from "zod";
 function parseState(raw) {
   try {
     return stateSchema.parse(raw);
@@ -3191,45 +3310,44 @@ function parseState(raw) {
     throw new Error("Invalid automation state; original evidence was retained.", { cause: error });
   }
 }
-function withLock(root, directory, run, waitMs = 5e3) {
-  return withStoreLock(root, directory, run, waitMs, "Automation");
+function withLock(root, directory2, run, waitMs = 5e3) {
+  return withStoreLock(root, directory2, run, waitMs, "Automation");
 }
 var hostSchema, events, stateSchema;
 var init_store = __esm({
   "src/automation/store.ts"() {
     "use strict";
     init_store_lock();
-    hostSchema = z5.enum(["claude", "codex"]);
+    init_notifications();
+    hostSchema = z6.enum(["claude", "codex"]);
     events = ["session_start", "turn_start", "before_tool", "after_tool", "task_end"];
-    stateSchema = z5.object({
-      version: z5.literal(1),
-      root: z5.string(),
-      gitDir: z5.string(),
-      branch: z5.string(),
-      baselines: z5.array(z5.object({ path: z5.string(), at: z5.string(), event: z5.string(), fingerprint: z5.string() })).max(128),
-      sessions: z5.record(z5.object({
+    stateSchema = z6.object({
+      version: z6.literal(1),
+      root: z6.string(),
+      gitDir: z6.string(),
+      branch: z6.string(),
+      baselines: z6.array(z6.object({ path: z6.string(), at: z6.string(), event: z6.string(), fingerprint: z6.string() })).max(128),
+      sessions: z6.record(z6.object({
         host: hostSchema,
-        seen: z5.string().nullable(),
-        continued: z5.boolean(),
-        initialIssues: z5.array(z5.string()),
-        initialDocs: z5.record(z5.string().nullable()),
-        lastUsed: z5.string(),
-        mutationObserved: z5.boolean(),
-        pending: z5.record(z5.string()),
-        coverageGaps: z5.array(z5.string()),
-        events: z5.record(z5.object({ at: z5.string(), count: z5.number().int().positive() }))
+        lastUsed: z6.string(),
+        notifiedDiagnostics: z6.array(z6.string()).default([]),
+        pending: z6.record(z6.string()),
+        coverageGaps: z6.array(z6.string()),
+        events: z6.record(z6.object({ at: z6.string(), count: z6.number().int().positive() }))
       })),
-      updatedAt: z5.string(),
-      fingerprint: z5.string().nullable(),
-      latest: z5.string().nullable(),
-      analysis: z5.object({ id: z5.string(), fingerprint: z5.string(), completedAt: z5.number(), path: z5.string() }).optional()
+      updatedAt: z6.string(),
+      fingerprint: z6.string().nullable(),
+      latest: z6.string().nullable(),
+      notifications: notificationStateSchema.optional(),
+      agentNotifications: notificationStateSchema.optional(),
+      analysis: z6.object({ id: z6.string(), fingerprint: z6.string(), completedAt: z6.number(), path: z6.string() }).optional()
     });
   }
 });
 
 // src/audit/advisory-review.ts
 import fs10 from "fs/promises";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 async function readRecord(root, id) {
   const raw = await readStoreJson(root, recordPath(id));
   if (raw === null) return null;
@@ -3448,41 +3566,41 @@ var init_advisory_review = __esm({
     init_decisions();
     init_drift2();
     git2 = async (root, ...args) => (await (["log", "ls-tree", "ls-files", "merge-base"].includes(args[0]) ? inspectionGit : execGit)(args, { cwd: root, timeout: 1e4, maxBuffer: 8 * 1024 * 1024 })).stdout;
-    hashSchema = z6.string().regex(/^[a-f0-9]{64}$/);
-    commitSchema2 = z6.string().regex(/^[a-f0-9]{40,64}$/);
-    evidenceSchema2 = z6.object({
+    hashSchema = z7.string().regex(/^[a-f0-9]{64}$/);
+    commitSchema2 = z7.string().regex(/^[a-f0-9]{40,64}$/);
+    evidenceSchema2 = z7.object({
       head: commitSchema2,
       fingerprint: hashSchema,
-      scope: z6.array(z6.string()).min(1).max(1e3),
-      tree: z6.string().max(2 * 1024 * 1024),
+      scope: z7.array(z7.string()).min(1).max(1e3),
+      tree: z7.string().max(2 * 1024 * 1024),
       lastScopeCommit: commitSchema2,
-      paths: z6.array(z6.object({ path: z6.string(), exists: z6.boolean() })).max(1e3)
+      paths: z7.array(z7.object({ path: z7.string(), exists: z7.boolean() })).max(1e3)
     });
-    dismissalReasonSchema = z6.enum(["no-dependency-claims", "unrelated-manifest-change"]);
-    eventSchema2 = z6.object({
-      at: z6.string().datetime(),
-      reviewer: z6.string().trim().min(1).max(200).optional(),
-      note: z6.string().trim().min(1).max(2500),
-      outcome: z6.enum(["addressed", "inapplicable", "deferred", "dismissed"]),
+    dismissalReasonSchema = z7.enum(["no-dependency-claims", "unrelated-manifest-change"]);
+    eventSchema2 = z7.object({
+      at: z7.string().datetime(),
+      reviewer: z7.string().trim().min(1).max(200).optional(),
+      note: z7.string().trim().min(1).max(2500),
+      outcome: z7.enum(["addressed", "inapplicable", "deferred", "dismissed"]),
       reasonCode: dismissalReasonSchema.optional(),
       finding: advisorySchema.refine((finding) => finding.evidence.kind !== "decision-anchor", "Decision findings use decision reviews"),
       evidence: evidenceSchema2
     });
-    recordSchema = z6.object({ version: z6.literal(1), id: hashSchema, events: z6.array(eventSchema2).min(1).max(200), digest: hashSchema });
-    reviewSummarySchema = z6.object({
+    recordSchema = z7.object({ version: z7.literal(1), id: hashSchema, events: z7.array(eventSchema2).min(1).max(200), digest: hashSchema });
+    reviewSummarySchema = z7.object({
       id: hashSchema,
-      status: z6.enum(["current", "reopened", "deferred", "unverified"]),
-      reason: z6.string(),
-      recordPath: z6.string().optional(),
-      reviewer: z6.string().optional(),
-      note: z6.string().optional(),
-      outcome: z6.enum(["addressed", "inapplicable", "deferred", "accepted", "reaffirmed", "retired", "dismissed"]).optional(),
-      reviewedHead: z6.string().optional()
+      status: z7.enum(["current", "reopened", "deferred", "unverified"]),
+      reason: z7.string(),
+      recordPath: z7.string().optional(),
+      reviewer: z7.string().optional(),
+      note: z7.string().optional(),
+      outcome: z7.enum(["addressed", "inapplicable", "deferred", "accepted", "reaffirmed", "retired", "dismissed"]).optional(),
+      reviewedHead: z7.string().optional()
     });
-    advisoryReviewRequest = z6.object({
-      baselinePath: z6.string().min(1),
+    advisoryReviewRequest = z7.object({
+      baselinePath: z7.string().min(1),
       findingId: hashSchema,
-      action: z6.enum(["prepare", "addressed", "inapplicable", "deferred", "dismiss"]).default("prepare"),
+      action: z7.enum(["prepare", "addressed", "inapplicable", "deferred", "dismiss"]).default("prepare"),
       reasonCode: dismissalReasonSchema.optional(),
       reviewer: eventSchema2.shape.reviewer.optional(),
       note: eventSchema2.shape.note.optional(),
@@ -3600,7 +3718,7 @@ __export(repair_exports, {
 import fs12 from "fs/promises";
 import path21 from "path";
 import { randomUUID as randomUUID2 } from "crypto";
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 function recheckable(finding) {
   return !("confidence" in finding) && finding.resolution === "recheck" && ["deleted-reference", "dead-command", "new-module"].includes(finding.type) && ["missing-path", "missing-script", "unmentioned-dir"].includes(finding.evidence.kind);
 }
@@ -3671,7 +3789,7 @@ async function withRepairSession(root, options, run, validate, cachedAudit) {
 }
 async function prepareOriginal(rootDir, checks, options, session) {
   const root = await fs12.realpath(rootDir);
-  const selected = z7.array(checkSchema).nonempty().parse(checks);
+  const selected = z8.array(checkSchema).nonempty().parse(checks);
   const report = await (session ? session.audit(selected) : stableAudit(root, selected, options));
   if (!report) throw new Error("No context files found to prepare a repair.");
   if (!report.gitAvailable) throw new Error("Readable Git history is required to prepare a repair.");
@@ -3828,42 +3946,42 @@ var init_repair = __esm({
     init_findings();
     init_advisory_review();
     init_findings();
-    count2 = z7.number().int().nonnegative();
-    reportSchema = z7.object({
-      version: z7.literal(1),
-      root: z7.string(),
-      gitAvailable: z7.literal(true),
+    count2 = z8.number().int().nonnegative();
+    reportSchema = z8.object({
+      version: z8.literal(1),
+      root: z8.string(),
+      gitAvailable: z8.literal(true),
       headHash: commitSchema.shape.hash,
-      checksRun: z7.array(checkSchema).nonempty(),
-      docs: z7.array(z7.object({
-        path: z7.string().refine((value) => normalizeRepoPath(value) === value),
-        scope: z7.string().optional(),
-        kind: z7.enum(["instructions", "readme", "guide"]).optional(),
+      checksRun: z8.array(checkSchema).nonempty(),
+      docs: z8.array(z8.object({
+        path: z8.string().refine((value) => normalizeRepoPath(value) === value),
+        scope: z8.string().optional(),
+        kind: z8.enum(["instructions", "readme", "guide"]).optional(),
         lastCommit: commitSchema.nullable(),
-        dirty: z7.boolean(),
+        dirty: z8.boolean(),
         lineCount: count2
       })).nonempty(),
-      decisionsChecked: z7.boolean(),
-      clean: z7.boolean(),
-      excludedChecks: z7.array(z7.object({ check: checkSchema, doc: z7.string() })).optional(),
-      issues: z7.array(issueSchema),
-      advisories: z7.array(advisorySchema),
-      suppressedAdvisories: z7.array(advisorySchema).optional(),
-      skippedChecks: z7.array(z7.object({ check: z7.string(), reason: z7.string(), doc: z7.string().optional() }))
+      decisionsChecked: z8.boolean(),
+      clean: z8.boolean(),
+      excludedChecks: z8.array(z8.object({ check: checkSchema, doc: z8.string() })).optional(),
+      issues: z8.array(issueSchema),
+      advisories: z8.array(advisorySchema),
+      suppressedAdvisories: z8.array(advisorySchema).optional(),
+      skippedChecks: z8.array(z8.object({ check: z8.string(), reason: z8.string(), doc: z8.string().optional() }))
     });
-    baselineSchema = z7.object({
-      kind: z7.literal("mason-audit-repair"),
-      version: z7.literal(1),
-      createdAt: z7.string().datetime(),
+    baselineSchema = z8.object({
+      kind: z8.literal("mason-audit-repair"),
+      version: z8.literal(1),
+      createdAt: z8.string().datetime(),
       report: reportSchema,
-      digest: z7.string().regex(/^[a-f0-9]{64}$/)
+      digest: z8.string().regex(/^[a-f0-9]{64}$/)
     });
-    repairFindingSchema = z7.object({
-      id: z7.string(),
-      original: z7.union([issueSchema, advisorySchema]),
-      status: z7.enum(["resolved", "unresolved", "review-required", "unverified"]),
-      reason: z7.string(),
-      current: z7.union([issueSchema, advisorySchema]).optional(),
+    repairFindingSchema = z8.object({
+      id: z8.string(),
+      original: z8.union([issueSchema, advisorySchema]),
+      status: z8.enum(["resolved", "unresolved", "review-required", "unverified"]),
+      reason: z8.string(),
+      current: z8.union([issueSchema, advisorySchema]).optional(),
       review: reviewSummarySchema.optional()
     });
   }
@@ -3874,7 +3992,7 @@ import fs13 from "fs/promises";
 import path22 from "path";
 import { createHash as createHash3 } from "crypto";
 import fg7 from "fast-glob";
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 async function git3(root, ...args) {
   return profilePhase("automation.git", async () => (await execGit(args, { cwd: root, maxBuffer: 16 * 1024 * 1024, timeout: 1e4 })).stdout);
 }
@@ -4017,10 +4135,10 @@ var init_evidence = __esm({
     init_dead_command();
     init_storage();
     init_advisory_review();
-    engineVersion = true ? "0.19.1" : "development";
+    engineVersion = true ? "0.20.1" : "development";
     hash = (value) => createHash3("sha256").update(JSON.stringify(value)).digest("hex");
     content = readAuditInput;
-    cacheSchema = z8.object({ version: z8.literal(1), entries: z8.record(z8.object({ key: z8.string(), result: checkResultSchema })), digest: z8.string() });
+    cacheSchema = z9.object({ version: z9.literal(1), entries: z9.record(z9.object({ key: z9.string(), result: checkResultSchema })), digest: z9.string() });
   }
 });
 
@@ -4036,7 +4154,7 @@ __export(model_exports, {
   setupHostSchema: () => setupHostSchema,
   setupSchema: () => setupSchema
 });
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 import fs14 from "fs/promises";
 import path23 from "path";
 async function loadSetup(root) {
@@ -4070,8 +4188,8 @@ async function effectiveSetup(root) {
   if (inactive && setup) for (const host of inactiveHostsSchema.parse(inactive).hosts) delete setup.hosts[host];
   return { root: inheritedRoot, setup };
 }
-async function loadSetupReceipt(root, directory, host) {
-  const raw = await readStoreJson(root, directory + "/setup-" + host + ".json");
+async function loadSetupReceipt(root, directory2, host) {
+  const raw = await readStoreJson(root, directory2 + "/setup-" + host + ".json");
   if (raw === null) return null;
   const receipt = receiptSchema.parse(raw);
   if (receipt.root !== root || receipt.host !== host) throw new Error("Setup receipt belongs to another installation.");
@@ -4083,29 +4201,29 @@ var init_model = __esm({
     "use strict";
     init_evidence();
     init_storage();
-    setupHostSchema = z9.object({
-      configuredVersion: z9.string(),
-      revision: z9.string().uuid(),
-      fingerprint: z9.string(),
-      mcpFingerprint: z9.string(),
-      instructions: z9.array(z9.string())
+    setupHostSchema = z10.object({
+      configuredVersion: z10.string(),
+      revision: z10.string().uuid(),
+      fingerprint: z10.string(),
+      mcpFingerprint: z10.string(),
+      instructions: z10.array(z10.string())
     });
-    setupSchema = z9.object({ version: z9.literal(2), hosts: z9.object({
+    setupSchema = z10.object({ version: z10.literal(2), hosts: z10.object({
       codex: setupHostSchema.optional(),
       claude: setupHostSchema.optional()
     }) });
     SETUP_PATH = ".mason/local/setup.json";
     INACTIVE_HOSTS_PATH = ".mason/local/inactive-hosts.json";
-    inactiveHostsSchema = z9.object({ version: z9.literal(1), hosts: z9.array(z9.enum(["claude", "codex"])) });
-    receiptSchema = z9.object({
-      version: z9.literal(1),
-      host: z9.enum(["codex", "claude"]),
-      status: z9.enum(["installing", "configured"]),
-      initialReportPath: z9.string(),
-      initialBaselinePaths: z9.array(z9.string()),
-      root: z9.string(),
-      revision: z9.string().uuid(),
-      configuredAt: z9.string().optional()
+    inactiveHostsSchema = z10.object({ version: z10.literal(1), hosts: z10.array(z10.enum(["claude", "codex"])) });
+    receiptSchema = z10.object({
+      version: z10.literal(1),
+      host: z10.enum(["codex", "claude"]),
+      status: z10.enum(["installing", "configured"]),
+      initialReportPath: z10.string(),
+      initialBaselinePaths: z10.array(z10.string()),
+      root: z10.string(),
+      revision: z10.string().uuid(),
+      configuredAt: z10.string().optional()
     });
   }
 });
@@ -4143,7 +4261,7 @@ var init_launcher = __esm({
     "use strict";
     init_evidence();
     init_model();
-    executingVersion = () => true ? "0.19.1" : "development";
+    executingVersion = () => true ? "0.20.1" : "development";
     mcpCommand = (host) => globalCommand(["--setup-host", host, "mcp"]);
     hookCommand = (host) => `mason --setup-host ${host} auto`;
   }
@@ -4327,6 +4445,146 @@ var init_files2 = __esm({
   }
 });
 
+// src/automation/usefulness.ts
+import fs19 from "fs/promises";
+import { z as z13 } from "zod";
+async function enabled(root) {
+  const raw = await readStoreJson(root, configPath);
+  return raw !== null && configSchema.parse(raw).enabled;
+}
+async function configureUsefulness(dir, value, options = {}) {
+  const ws = await workspace(dir);
+  const configured = await withStoreLock(ws.root, directory, async () => {
+    if (options.onlyIfUnset) {
+      const existing = await readStoreJson(ws.root, configPath);
+      if (existing !== null) return configSchema.parse(existing).enabled;
+    }
+    const ignore = await storePath(ws.root, directory + "/.gitignore", true);
+    try {
+      await fs19.writeFile(ignore, "*\n", { flag: "wx", mode: 384 });
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+    }
+    await writeStoreJson(ws.root, configPath, { version: 1, enabled: value });
+    return value;
+  });
+  return { enabled: configured, storage: directory, note: "Local only. Disabling retains prior observations." };
+}
+async function observeUsefulness(root, event, report, agent, completion, elapsedMs, observedAt = (/* @__PURE__ */ new Date()).toISOString()) {
+  if (!event.host || !event.sessionId || !await enabled(root)) return;
+  const ws = await workspace(root);
+  await withStoreLock(ws.root, directory, async () => {
+    if (!await enabled(root)) return;
+    const raw = await readStoreJson(root, statePath(ws));
+    const state = raw === null ? empty() : stateSchema2.parse(raw);
+    const now = observedAt;
+    const key = hash([event.host, event.sessionId]);
+    const session = state.sessions[key] ??= {
+      host: event.host,
+      updatedAt: now,
+      checks: 0,
+      checkMs: 0,
+      findings: {},
+      decisions: [],
+      retrievalObserved: false,
+      receiptIds: [],
+      reportPath: report.reportPath,
+      truncated: false
+    };
+    const newer = now >= session.updatedAt;
+    if (newer) {
+      session.updatedAt = now;
+      session.reportPath = report.reportPath;
+    }
+    session.checks++;
+    session.checkMs += Math.max(0, elapsedMs);
+    if (newer) {
+      if (event.event === "task_end") session.endedAt = now;
+      else delete session.endedAt;
+    }
+    let latestFindings = [];
+    if (!newer && [...agent.slice(0, 4), ...completion.slice(0, 4)].some((f) => !session.findings[f.id])) {
+      try {
+        if (!session.reportPath.startsWith(ws.directory + "/checks/")) throw new Error("Unexpected report path");
+        latestFindings = z13.object({ findings: z13.array(z13.object({ id: z13.string(), status: findingSchema2.shape.status })) }).parse(await readStoreJson(root, session.reportPath)).findings;
+      } catch {
+      }
+    }
+    for (const [channel, findings] of [["agent", agent], ["completion", completion]]) {
+      for (const finding of findings.slice(0, 4)) {
+        if (!session.findings[finding.id] && Object.keys(session.findings).length >= 200) {
+          session.truncated = true;
+          continue;
+        }
+        const saved = session.findings[finding.id] ??= {
+          type: finding.original.type,
+          channels: [],
+          status: newer ? finding.status : latestFindings.find((f) => f.id === finding.id)?.status ?? "unknown",
+          deliveredAt: now,
+          observedAt: newer ? now : session.updatedAt
+        };
+        if (!saved.channels.includes(channel)) saved.channels.push(channel);
+      }
+    }
+    for (const [id, saved] of Object.entries(session.findings)) {
+      if (now < saved.observedAt) continue;
+      const current = report.findings.find((f) => f.id === id);
+      saved.status = current?.status ?? "unknown";
+      saved.observedAt = now;
+    }
+    if (event.retrievedDecisionIds !== void 0 && event.toolId) {
+      const receipt = hash([event.toolId]);
+      if (!session.receiptIds.includes(receipt)) {
+        session.retrievalObserved = true;
+        const decisions = [.../* @__PURE__ */ new Set([...session.decisions, ...event.retrievedDecisionIds.map((id) => hash([id]))])];
+        if (decisions.length > 200) session.truncated = true;
+        session.decisions = decisions.slice(0, 200);
+        session.receiptIds = [...session.receiptIds, receipt].slice(-200);
+      }
+    }
+    const keys = Object.keys(state.sessions).sort((a, b) => state.sessions[b].updatedAt.localeCompare(state.sessions[a].updatedAt));
+    for (const key2 of keys.slice(50)) delete state.sessions[key2];
+    await writeStoreJson(root, statePath(ws), state);
+  });
+}
+var directory, configPath, configSchema, usefulnessRating, findingSchema2, sessionSchema, stateSchema2, empty, statePath;
+var init_usefulness = __esm({
+  "src/automation/usefulness.ts"() {
+    "use strict";
+    init_evidence();
+    init_storage();
+    init_store_lock();
+    directory = ".mason/local/usefulness";
+    configPath = directory + "/config.json";
+    configSchema = z13.object({ version: z13.literal(1), enabled: z13.boolean() });
+    usefulnessRating = z13.enum(["helpful", "already-knew", "irrelevant", "deferred"]);
+    findingSchema2 = z13.object({
+      type: z13.string(),
+      channels: z13.array(z13.enum(["agent", "completion"])),
+      status: z13.enum(["resolved", "unresolved", "review-required", "unverified", "unknown"]),
+      deliveredAt: z13.string(),
+      observedAt: z13.string(),
+      rating: usefulnessRating.optional()
+    });
+    sessionSchema = z13.object({
+      host: z13.string(),
+      updatedAt: z13.string(),
+      endedAt: z13.string().optional(),
+      checks: z13.number(),
+      checkMs: z13.number(),
+      findings: z13.record(findingSchema2),
+      decisions: z13.array(z13.string()),
+      retrievalObserved: z13.boolean(),
+      receiptIds: z13.array(z13.string()),
+      reportPath: z13.string(),
+      truncated: z13.boolean()
+    });
+    stateSchema2 = z13.object({ version: z13.literal(1), sessions: z13.record(sessionSchema) });
+    empty = () => ({ version: 1, sessions: {} });
+    statePath = (ws) => `${directory}/${hash([ws.root, ws.gitDir, ws.branch]).slice(0, 24)}.json`;
+  }
+});
+
 // src/automation/execution.ts
 var execution_exports = {};
 __export(execution_exports, {
@@ -4338,9 +4596,9 @@ __export(execution_exports, {
   recordExecution: () => recordExecution
 });
 import os2 from "os";
-import fs19 from "fs/promises";
+import fs20 from "fs/promises";
 import { randomUUID as randomUUID4 } from "crypto";
-import { z as z12 } from "zod";
+import { z as z14 } from "zod";
 function parseExecution(raw) {
   try {
     return executionSchema.parse(raw);
@@ -4358,15 +4616,15 @@ function automationFailure(error) {
     codes.add(String(cause.code));
     cause = cause.cause;
   }
-  const code = codes.has("ENOSPC") || codes.has("EDQUOT") ? "storage-full" : /changed during|changed while|changed between/.test(message2) ? "inputs-changed" : /Automation is busy/.test(message2) ? "busy" : /not a git repository|unknown revision|bad revision|different history|unreachable/.test(message2) ? "history-unavailable" : error instanceof z12.ZodError || error instanceof SyntaxError || /Hook input|Expected one command|Unknown automation command|--host/.test(message2) ? "invalid-input" : /store|baseline|modified|symbolic link|Symlink|automation state|state belongs/.test(message2) ? "invalid-evidence" : [...codes].some((c) => /^E[A-Z]+$/.test(c)) ? "io-error" : "internal";
+  const code = codes.has("ENOSPC") || codes.has("EDQUOT") ? "storage-full" : /changed during|changed while|changed between/.test(message2) ? "inputs-changed" : /Automation is busy/.test(message2) ? "busy" : /not a git repository|unknown revision|bad revision|different history|unreachable/.test(message2) ? "history-unavailable" : error instanceof z14.ZodError || error instanceof SyntaxError || /Hook input|Expected one command|Unknown automation command|--host/.test(message2) ? "invalid-input" : /store|baseline|modified|symbolic link|Symlink|automation state|state belongs/.test(message2) ? "invalid-evidence" : [...codes].some((c) => /^E[A-Z]+$/.test(c)) ? "io-error" : "internal";
   return { code, message: message2, retryable: ["inputs-changed", "storage-full", "busy", "io-error"].includes(code), receiptRecorded: false };
 }
 function failureMessage(error) {
   const failure = automationFailure(error);
   return `Mason automation unavailable [${failure.code}]; evidence capture/verification was not established. ${failure.message}` + (failure.receiptRecorded ? "" : " No durable failure receipt was recorded.");
 }
-async function failureNotifications(root, directory) {
-  const raw = await readStoreJson(root, directory + "/notifications.json");
+async function failureNotifications(root, directory2) {
+  const raw = await readStoreJson(root, directory2 + "/notifications.json");
   return raw === null ? { version: 1, sessions: {} } : notificationsSchema.parse(raw);
 }
 async function hookFailureMessage(dir, host, sessionId, error) {
@@ -4396,12 +4654,12 @@ async function hookFailureMessage(dir, host, sessionId, error) {
     return failureMessage(error);
   }
 }
-async function refreshRunning(root, directory, attempts) {
+async function refreshRunning(root, directory2, attempts) {
   for (const attempt of attempts) {
     if (attempt.status !== "running") continue;
     let alive = false;
     try {
-      const owner = await readStoreJson(root, attempt.lease ? leasePath(directory, attempt.id) : directory + "/lock");
+      const owner = await readStoreJson(root, attempt.lease ? leasePath(directory2, attempt.id) : directory2 + "/lock");
       if (attempt.host === os2.hostname() && owner?.pid === attempt.pid && owner.host === attempt.host) {
         try {
           process.kill(attempt.pid, 0);
@@ -4415,12 +4673,12 @@ async function refreshRunning(root, directory, attempts) {
     if (!alive) attempt.status = "unknown";
   }
 }
-async function editExecution(root, directory, edit) {
-  return withLock(root, directory + "/execution-lock", async () => {
-    const file = directory + "/execution.json";
+async function editExecution(root, directory2, edit) {
+  return withLock(root, directory2 + "/execution-lock", async () => {
+    const file = directory2 + "/execution.json";
     const raw = await readStoreJson(root, file);
     const log = raw === null ? { version: 1, attempts: [], discardedAttempts: 0 } : parseExecution(raw);
-    await refreshRunning(root, directory, log.attempts);
+    await refreshRunning(root, directory2, log.attempts);
     edit(log);
     const finished = log.attempts.filter((a) => a.status !== "running");
     const discard = new Set(finished.slice(0, Math.max(0, finished.length - 32)).map((a) => a.id));
@@ -4429,7 +4687,7 @@ async function editExecution(root, directory, edit) {
     await writeStoreJson(root, file, log);
   });
 }
-async function recordExecution(root, directory, event, run) {
+async function recordExecution(root, directory2, event, run) {
   const started = performance.now();
   const attempt = {
     id: randomUUID4(),
@@ -4440,15 +4698,15 @@ async function recordExecution(root, directory, event, run) {
     status: "running",
     lease: true
   };
-  const owner = leasePath(directory, attempt.id);
-  const finish = async (changes) => editExecution(root, directory, (log) => {
+  const owner = leasePath(directory2, attempt.id);
+  const finish = async (changes) => editExecution(root, directory2, (log) => {
     const current = log.attempts.find((a) => a.id === attempt.id);
     if (!current) throw new Error("Automation execution receipt disappeared; completion could not be recorded.");
     Object.assign(current, changes, { finishedAt: (/* @__PURE__ */ new Date()).toISOString(), durationMs: performance.now() - started });
   });
   await writeStoreJson(root, owner, { pid: attempt.pid, host: attempt.host });
   try {
-    await editExecution(root, directory, (log) => {
+    await editExecution(root, directory2, (log) => {
       if (log.attempts.filter((a) => a.status === "running").length >= 128) throw new Error("Too many active automation executions; existing receipts were retained.");
       log.attempts.push(attempt);
     });
@@ -4466,15 +4724,15 @@ async function recordExecution(root, directory, event, run) {
       throw Object.assign(new Error(failure.message, { cause: error }), { failure });
     }
   } finally {
-    await fs19.rm(await storePath(root, owner), { force: true }).catch(() => {
+    await fs20.rm(await storePath(root, owner), { force: true }).catch(() => {
     });
   }
 }
-async function executionStatus(root, directory) {
-  const raw = await readStoreJson(root, directory + "/execution.json");
+async function executionStatus(root, directory2) {
+  const raw = await readStoreJson(root, directory2 + "/execution.json");
   if (raw === null) return { status: "not-observed", attempts: [] };
   const log = parseExecution(raw);
-  await refreshRunning(root, directory, log.attempts);
+  await refreshRunning(root, directory2, log.attempts);
   const completed = [...log.attempts].reverse().find((a) => a.status === "completed");
   const outstanding = [...log.attempts].reverse().find((a) => ["failed", "unknown"].includes(a.status) && (!completed || (a.finishedAt ?? a.startedAt) >= completed.startedAt));
   const status = log.attempts.some((a) => a.status === "running") ? "running" : outstanding?.status ?? log.attempts.at(-1)?.status ?? "not-observed";
@@ -4487,35 +4745,97 @@ var init_execution = __esm({
     init_store();
     init_evidence();
     init_storage();
-    failureSchema = z12.object({
-      code: z12.enum(["inputs-changed", "storage-full", "busy", "invalid-input", "history-unavailable", "invalid-evidence", "io-error", "internal"]),
-      message: z12.string(),
-      retryable: z12.boolean(),
-      receiptRecorded: z12.boolean()
+    failureSchema = z14.object({
+      code: z14.enum(["inputs-changed", "storage-full", "busy", "invalid-input", "history-unavailable", "invalid-evidence", "io-error", "internal"]),
+      message: z14.string(),
+      retryable: z14.boolean(),
+      receiptRecorded: z14.boolean()
     });
-    attemptSchema = z12.object({
-      id: z12.string().regex(/^[a-zA-Z0-9_-]+$/),
-      lease: z12.literal(true).optional(),
-      event: z12.string(),
-      startedAt: z12.string(),
-      finishedAt: z12.string().optional(),
-      durationMs: z12.number().nonnegative().optional(),
-      pid: z12.number().int().positive(),
-      host: z12.string(),
-      status: z12.enum(["running", "completed", "failed", "unknown"]),
-      verificationStatus: z12.string().optional(),
-      reportPath: z12.string().optional(),
+    attemptSchema = z14.object({
+      id: z14.string().regex(/^[a-zA-Z0-9_-]+$/),
+      lease: z14.literal(true).optional(),
+      event: z14.string(),
+      startedAt: z14.string(),
+      finishedAt: z14.string().optional(),
+      durationMs: z14.number().nonnegative().optional(),
+      pid: z14.number().int().positive(),
+      host: z14.string(),
+      status: z14.enum(["running", "completed", "failed", "unknown"]),
+      verificationStatus: z14.string().optional(),
+      reportPath: z14.string().optional(),
       failure: failureSchema.optional()
     });
-    executionSchema = z12.object({ version: z12.literal(1), attempts: z12.array(attemptSchema).max(160), discardedAttempts: z12.number().int().nonnegative().default(0) });
-    notificationsSchema = z12.object({ version: z12.literal(1), sessions: z12.record(z12.object({
-      signature: z12.string(),
+    executionSchema = z14.object({ version: z14.literal(1), attempts: z14.array(attemptSchema).max(160), discardedAttempts: z14.number().int().nonnegative().default(0) });
+    notificationsSchema = z14.object({ version: z14.literal(1), sessions: z14.record(z14.object({
+      signature: z14.string(),
       code: failureSchema.shape.code,
-      message: z12.string(),
-      count: z12.number().int().positive(),
-      lastAt: z12.string()
+      message: z14.string(),
+      count: z14.number().int().positive(),
+      lastAt: z14.string()
     })) });
-    leasePath = (directory, id) => `${directory}/executions/${id}.json`;
+    leasePath = (directory2, id) => `${directory2}/executions/${id}.json`;
+  }
+});
+
+// src/decisions/pending.ts
+var pending_exports = {};
+__export(pending_exports, {
+  pendingKnowledge: () => pendingKnowledge
+});
+async function pendingKnowledge(root, now = Date.now()) {
+  try {
+    const [store, status] = await Promise.all([
+      loadDecisionStore(root),
+      execGit(
+        ["status", "--porcelain=v1", "-z", "--untracked-files=all", "--", ".mason/decisions"],
+        { cwd: root, timeout: 1e4, maxBuffer: 1024 * 1024 }
+      )
+    ]);
+    const changed = /* @__PURE__ */ new Set();
+    const entries = status.stdout.split("\0");
+    for (let i = 0; i < entries.length; i++) {
+      const entry = entries[i];
+      if (!entry) continue;
+      const file = entry.slice(3);
+      if (/^\.mason\/decisions\/[^/]+\.json$/.test(file)) changed.add(file);
+      if (/[RC]/.test(entry.slice(0, 2))) i++;
+    }
+    const records = new Map(store.records.map((record) => [`.mason/decisions/${record.id}.json`, record]));
+    const age = (at) => {
+      const time = at ? Date.parse(at) : NaN;
+      return Number.isFinite(time) ? `${Math.max(0, Math.floor((now - time) / 864e5))} days` : "unknown age";
+    };
+    const safe = (value) => value.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ");
+    const list = (items) => items.slice(0, 5).map(safe).join("; ") + (items.length > 5 ? `; ${items.length - 5} more` : "");
+    const proposals = store.records.filter((record) => record.status === "active" && decisionApproval(record) === "proposed").map((record) => {
+      const history = record.version === 2 ? record.history : [];
+      let lastReview = -1;
+      history.forEach((event, index2) => {
+        if (event.kind === "accepted" || event.kind === "reaffirmed") lastReview = index2;
+      });
+      const since = history.slice(lastReview + 1).find((event) => event.kind === "created" || event.kind === "revised")?.at ?? record.createdAt;
+      return { record, since };
+    }).sort((a, b) => {
+      const timestamp = (value) => Number.isFinite(Date.parse(value)) ? Date.parse(value) : Infinity;
+      return timestamp(a.since) - timestamp(b.since) || a.record.id.localeCompare(b.record.id);
+    });
+    const lines = [];
+    if (changed.size) lines.push(`${changed.size} uncommitted decision record(s): ${list([...changed].sort().map((file) => `${file} (saved-record age: ${age(records.get(file)?.updatedAt)})`))}.`);
+    if (proposals.length) lines.push(`${proposals.length} proposal(s) awaiting review (oldest first): ${list(proposals.map(({ record, since }) => `.mason/decisions/${record.id}.json (${age(since)})`))}.`);
+    if (store.diagnostics.length) lines.push(`${store.diagnostics.length} decision record(s) could not be read; pending knowledge summary is incomplete.`);
+    return lines.length ? `Mason pending knowledge:
+${lines.join("\n")}
+Informational only; review and commit through the normal project workflow. No approval is implied.` : null;
+  } catch {
+    return "Mason pending knowledge: unavailable; decision records or Git status could not be read.";
+  }
+}
+var init_pending = __esm({
+  "src/decisions/pending.ts"() {
+    "use strict";
+    init_git_read();
+    init_decisions();
+    init_provenance();
   }
 });
 
@@ -4528,12 +4848,12 @@ __export(runtime_exports, {
   summarize: () => summarize
 });
 import { randomUUID as randomUUID5 } from "crypto";
-import { z as z13 } from "zod";
+import { z as z15 } from "zod";
 async function observeReadOnlyTool(dir, event) {
   const ws = await profilePhase("automation.workspace", () => workspace(dir));
   await withLock(ws.root, ws.directory, async () => {
-    const statePath = ws.directory + "/state.json";
-    const raw = await readStoreJson(ws.root, statePath);
+    const statePath2 = ws.directory + "/state.json";
+    const raw = await readStoreJson(ws.root, statePath2);
     if (raw === null) return;
     const state = parseState(raw);
     if (state.root !== ws.root || state.gitDir !== ws.gitDir || state.branch !== ws.branch) {
@@ -4544,7 +4864,7 @@ async function observeReadOnlyTool(dir, event) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     session.lastUsed = now;
     session.events[event.event] = { at: now, count: (session.events[event.event]?.count ?? 0) + 1 };
-    await writeStoreJson(ws.root, statePath, state);
+    await writeStoreJson(ws.root, statePath2, state);
   });
   return { root: ws.root, directory: ws.directory };
 }
@@ -4559,7 +4879,7 @@ function summarize(report) {
     }),
     ...open.length > 4 ? [`${open.length - 4} more findings in the report.`] : [],
     ...report.diagnostics.slice(0, 2).map(cleanText),
-    `Evidence: ${report.reportPath}. Resume/check with mason_automation(action: "check") or mason-auto check.`,
+    `Evidence: ${report.reportPath}. Resume/check with mason_automation(action: "check") or mason check.`,
     "Keep original evidence. Address findings relevant to the authorized task; report unrelated findings with a brief scope reason and suggested follow-up. Use review_advisory for authorized assessments; otherwise leave advisories open without approving them."
   ].join("\n");
 }
@@ -4618,7 +4938,7 @@ async function verifyInputs(ws, inputs) {
 async function computeAnalysis(ws, state, inputs, event, previousAudit, cacheDiagnostic) {
   const baselines = [...state.baselines];
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const empty = {
+  const empty2 = {
     version: 1,
     status: "unavailable",
     root: ws.root,
@@ -4635,7 +4955,7 @@ async function computeAnalysis(ws, state, inputs, event, previousAudit, cacheDia
   };
   if (!baselines.length && Object.values(inputs.docs).every((value) => value === null)) {
     await verifyInputs(ws, inputs);
-    return { baselines, report: empty, cache: null };
+    return { baselines, report: empty2, cache: null };
   }
   if (ws.branch === "detached" && state.latest) {
     const previous = await readStoreJson(ws.root, state.latest);
@@ -4737,7 +5057,7 @@ async function analyze(ws, inputs, event, startedAt) {
 async function automate(dir, event) {
   const startedAt = Date.now();
   const ws = await profilePhase("automation.workspace", () => workspace(dir));
-  return recordExecution(ws.root, ws.directory, event.event, () => withRepositoryInspection(ws.root, async () => {
+  const output = await recordExecution(ws.root, ws.directory, event.event, () => withRepositoryInspection(ws.root, async () => {
     const inputs = await readInputs(ws.root);
     const result = await profilePhase("automation.analysis", () => analyze(ws, inputs, event, startedAt));
     if (result.shared) {
@@ -4750,6 +5070,19 @@ async function automate(dir, event) {
       const state = await loadState(ws);
       if (state.analysis?.id !== result.analysis.id) throw new Error("Automation evidence changed during publication; retry against the current inputs.");
       const report = structuredClone(result.analysis.report);
+      if (!state.notifications) {
+        let baseline = { findings: report.findings, head: report.head };
+        if (state.latest) {
+          try {
+            const previous = z15.object({ findings: z15.array(repairFindingSchema), head: z15.string() }).safeParse(await readStoreJson(ws.root, state.latest));
+            if (!previous.success) throw new Error("Unsupported saved report");
+            baseline = previous.data;
+          } catch {
+            report.diagnostics.push("The saved notification baseline could not be read; initialized from the current audit. Original repair evidence is retained. Run an explicit check for all outstanding findings.");
+          }
+        }
+        state.notifications = createNotificationState(baseline.findings, baseline.head);
+      }
       if (result.shared) report.checks = { ...report.checks, ran: [], reused: [.../* @__PURE__ */ new Set([...report.checks.ran, ...report.checks.reused])], shared: true };
       report.reportPath = ws.directory + "/checks/" + randomUUID5() + ".json";
       const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -4762,12 +5095,8 @@ async function automate(dir, event) {
         if (Object.keys(state.sessions).length >= 128) throw new Error("Too many sessions with unfinished tool calls; original evidence was retained.");
         state.sessions[key] = {
           host: event.host,
-          seen: null,
-          continued: false,
-          initialIssues: report.findings.filter((f) => f.status === "unresolved").map((f) => f.id),
-          initialDocs: inputs.docs,
+          notifiedDiagnostics: [],
           lastUsed: now,
-          mutationObserved: false,
           pending: {},
           coverageGaps: [],
           events: {}
@@ -4782,7 +5111,6 @@ async function automate(dir, event) {
           session.pending[event.toolId] = inputs.fingerprint;
         }
         if (event.event === "after_tool" && event.mutating) {
-          session.mutationObserved = true;
           if (!event.toolId || !session.pending[event.toolId]) {
             const gap = "A tool completed without an observed matching pre-tool capture in this checkout; pre-edit coverage is unknown. The tool may have changed checkouts; captures are kept separately for each worktree.";
             if (!session.coverageGaps.includes(gap)) session.coverageGaps.push(gap);
@@ -4793,31 +5121,45 @@ async function automate(dir, event) {
         if (session.coverageGaps.length && report.status !== "unavailable") report.status = "incomplete";
         report.capture = report.status !== "unavailable" && !session.coverageGaps.length && (session.events.session_start || session.events.before_tool) ? "observed" : "unknown";
       }
-      const signature = hash([report.status, report.findings, report.diagnostics, report.checks.skipped]);
-      const relevant = report.findings.some((f) => f.status === "unresolved" && session && (!session.initialIssues.includes(f.id) || session.initialDocs[f.original.anchor.doc] !== inputs.docs[f.original.anchor.doc]));
-      const continueOnce = event.event === "task_end" && !!session?.mutationObserved && relevant && !session.continued && !event.stopHookActive;
-      const notify = !session || newSession || signature !== session.seen || continueOnce;
-      if (session) {
-        session.seen = signature;
-        if (continueOnce) session.continued = true;
-      }
-      const persistReport = !state.latest || state.fingerprint !== inputs.fingerprint || notify || event.event === "task_end";
+      const selected = session && event.event === "task_end" ? completionFindings(state.notifications, report.findings) : [];
+      state.agentNotifications ??= { ...structuredClone(state.notifications), delivered: {} };
+      const feedback = session && ["turn_start", "after_tool"].includes(event.event) ? completionFindings(state.agentNotifications, report.findings) : [];
+      const diagnostics = session ? report.diagnostics.filter((d) => !session.notifiedDiagnostics.includes(d)).slice(0, 2) : [];
+      if (session) session.notifiedDiagnostics = [.../* @__PURE__ */ new Set([
+        ...session.notifiedDiagnostics.filter((d) => report.diagnostics.includes(d)),
+        ...diagnostics
+      ])];
+      const message2 = !session ? summarize(report) : [
+        completionSummary(selected, report.reportPath),
+        completionSummary(feedback, report.reportPath),
+        ...diagnostics.length ? [`Mason: verification limited. ${diagnostics.slice(0, 2).map(cleanText).join(" ")} Evidence: ${report.reportPath}.`] : []
+      ].filter(Boolean).join("\n") || null;
+      const notify = message2 !== null;
+      const persistReport = !state.latest || state.fingerprint !== inputs.fingerprint || notify || newSession || event.event === "task_end";
       if (!persistReport) report.reportPath = state.latest;
       state.updatedAt = now;
       state.fingerprint = inputs.fingerprint;
       state.latest = report.reportPath;
       if (persistReport) await writeStoreJson(ws.root, report.reportPath, report);
       await writeStoreJson(ws.root, ws.directory + "/state.json", state);
-      return { report, message: notify ? summarize(report) : null, continueOnce };
+      return { report, message: message2, observedAt: now, delivery: { agent: feedback.slice(0, 4), completion: selected.slice(0, 4) } };
     }));
   }));
+  try {
+    await observeUsefulness(ws.root, event, output.report, output.delivery.agent, output.delivery.completion, Date.now() - startedAt, output.observedAt);
+  } catch {
+    if (event.event === "task_end") output.message = [output.message, "Mason: local usefulness tracking unavailable; inspect mason stats --json."].filter(Boolean).join("\n");
+  }
+  return output;
 }
 async function automationStatus(dir) {
+  const { pendingKnowledge: pendingKnowledge2 } = await Promise.resolve().then(() => (init_pending(), pending_exports));
   const ws = await profilePhase("automation.workspace", () => workspace(dir));
+  const knowledge = await pendingKnowledge2(ws.root);
   const execution = await executionStatus(ws.root, ws.directory);
   const notifications = await failureNotifications(ws.root, ws.directory);
   const raw = await readStoreJson(ws.root, ws.directory + "/state.json");
-  if (raw === null) return { version: 1, status: execution.status === "not-observed" ? "not-observed" : "unavailable", root: ws.root, branch: ws.branch, baselinePaths: [], hosts: {}, execution, notifications };
+  if (raw === null) return { version: 1, status: execution.status === "not-observed" ? "not-observed" : "unavailable", root: ws.root, branch: ws.branch, baselinePaths: [], hosts: {}, execution, notifications, knowledge };
   const state = parseState(raw);
   if (state.root !== ws.root || state.gitDir !== ws.gitDir || state.branch !== ws.branch) throw new Error("Automation state belongs to another workspace.");
   const inputs = await readInputs(ws.root);
@@ -4840,6 +5182,8 @@ async function automationStatus(dir) {
     hosts,
     execution,
     notifications,
+    knowledge,
+    notificationBaselineHead: state.notifications?.baselineHead ?? null,
     note: "Observed events do not prove all tool paths are intercepted. Run check to verify the retained evidence."
   };
 }
@@ -4847,6 +5191,8 @@ var SCOPE, priority, cleanText, analysisSchema, sharedSchema, baselineDigest;
 var init_runtime = __esm({
   "src/automation/runtime.ts"() {
     "use strict";
+    init_usefulness();
+    init_notifications();
     init_profile();
     init_inspection();
     init_execution();
@@ -4858,34 +5204,34 @@ var init_runtime = __esm({
     SCOPE = "Documentation audit evidence only. Hook receipts show observed events, not complete interception. Resolved findings no longer fail their checks or have a recorded assessment covering current evidence. Repair and review only within the user's task authorization.";
     priority = { resolved: 0, "review-required": 1, unresolved: 2, unverified: 3 };
     cleanText = (text2) => text2.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").slice(0, 250);
-    analysisSchema = z13.object({
-      id: z13.string(),
-      fingerprint: z13.string(),
-      completedAt: z13.number(),
-      baselineDigest: z13.string(),
+    analysisSchema = z15.object({
+      id: z15.string(),
+      fingerprint: z15.string(),
+      completedAt: z15.number(),
+      baselineDigest: z15.string(),
       currentAudit: reportSchema.nullable().optional(),
-      report: z13.object({
-        version: z13.literal(1),
-        status: z13.enum(["verified", "issues-remain", "incomplete", "unavailable"]),
-        root: z13.string(),
-        branch: z13.string(),
-        head: z13.string(),
-        baselinePaths: z13.array(z13.string()),
-        reportPath: z13.string(),
-        findings: z13.array(repairFindingSchema),
-        diagnostics: z13.array(z13.string()),
-        checks: z13.object({
-          ran: z13.array(z13.string()),
-          reused: z13.array(z13.string()),
-          skipped: z13.array(z13.object({ check: z13.string(), reason: z13.string(), doc: z13.string().optional() })),
-          auditReused: z13.boolean().optional()
+      report: z15.object({
+        version: z15.literal(1),
+        status: z15.enum(["verified", "issues-remain", "incomplete", "unavailable"]),
+        root: z15.string(),
+        branch: z15.string(),
+        head: z15.string(),
+        baselinePaths: z15.array(z15.string()),
+        reportPath: z15.string(),
+        findings: z15.array(repairFindingSchema),
+        diagnostics: z15.array(z15.string()),
+        checks: z15.object({
+          ran: z15.array(z15.string()),
+          reused: z15.array(z15.string()),
+          skipped: z15.array(z15.object({ check: z15.string(), reason: z15.string(), doc: z15.string().optional() })),
+          auditReused: z15.boolean().optional()
         }),
-        counts: z13.object({ resolved: z13.number(), unresolved: z13.number(), "review-required": z13.number(), unverified: z13.number() }),
-        capture: z13.enum(["observed", "unknown"]),
-        scope: z13.string()
+        counts: z15.object({ resolved: z15.number(), unresolved: z15.number(), "review-required": z15.number(), unverified: z15.number() }),
+        capture: z15.enum(["observed", "unknown"]),
+        scope: z15.string()
       })
     });
-    sharedSchema = z13.object({ analysis: analysisSchema, digest: z13.string() });
+    sharedSchema = z15.object({ analysis: analysisSchema, digest: z15.string() });
     baselineDigest = async (ws, state) => profilePhase("automation.baselines", async () => hash(await Promise.all(
       state.baselines.map(async (b) => [b.path, await readStoreJson(ws.root, b.path)])
     )));
@@ -4893,7 +5239,7 @@ var init_runtime = __esm({
 });
 
 // src/automation/hook-root.ts
-import fs20 from "fs/promises";
+import fs21 from "fs/promises";
 import path28 from "path";
 var init_hook_root = __esm({
   "src/automation/hook-root.ts"() {
@@ -4903,7 +5249,7 @@ var init_hook_root = __esm({
 });
 
 // src/automation/adapters.ts
-import { z as z14 } from "zod";
+import { z as z16 } from "zod";
 function managedHookCommand(host, platform = process.platform) {
   const command = `mason --setup-host ${host} auto hook --host ${host}`;
   return platform === "win32" ? `cmd.exe /d /s /c "where mason >nul 2>nul & if errorlevel 1 (exit /b 0) else (${command})"` : `if command -v mason >/dev/null 2>&1; then ${command}; fi`;
@@ -4914,7 +5260,7 @@ function knownManagedHookCommands(host) {
 function compatibleManagedHookCommands(host, platform = process.platform) {
   return [managedHookCommand(host, platform), `mason --setup-host ${host} auto hook --host ${host}`];
 }
-function hookConfig(host, command = "npx --no-install --package mason-context mason-auto") {
+function hookConfig(host, command = "npx --no-install --package mason-context mason auto") {
   const handler = { type: "command", command: command === `mason --setup-host ${host} auto` ? managedHookCommand(host) : command + " hook --host " + host, timeout: 30 };
   return { hooks: Object.fromEntries(HOOK_EVENTS.map((name) => [
     name,
@@ -4925,19 +5271,21 @@ var inputSchema, HOOK_EVENTS;
 var init_adapters = __esm({
   "src/automation/adapters.ts"() {
     "use strict";
+    init_usefulness();
     init_execution();
     init_runtime();
     init_store();
     init_hook_root();
-    inputSchema = z14.object({
-      cwd: z14.string().min(1),
-      session_id: z14.string().min(1).max(500),
-      hook_event_name: z14.enum(["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"]),
-      tool_name: z14.string().optional(),
-      tool_use_id: z14.string().max(500).optional(),
-      tool_input: z14.unknown().optional(),
-      stop_hook_active: z14.boolean().optional(),
-      permission_mode: z14.string().optional()
+    inputSchema = z16.object({
+      cwd: z16.string().min(1),
+      session_id: z16.string().min(1).max(500),
+      hook_event_name: z16.enum(["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"]),
+      tool_name: z16.string().optional(),
+      tool_use_id: z16.string().max(500).optional(),
+      tool_response: z16.unknown().optional(),
+      tool_input: z16.unknown().optional(),
+      stop_hook_active: z16.boolean().optional(),
+      permission_mode: z16.string().optional()
     });
     HOOK_EVENTS = ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "Stop"];
   }
@@ -4953,7 +5301,7 @@ __export(ownership_exports, {
   ownershipEdit: () => ownershipEdit,
   ownershipSchema: () => ownershipSchema
 });
-import { z as z15 } from "zod";
+import { z as z17 } from "zod";
 import { parse } from "smol-toml";
 function blockSpan(text2, start, end) {
   const starts = text2.split(start).length - 1, ends = text2.split(end).length - 1;
@@ -5004,15 +5352,15 @@ var init_ownership = __esm({
       ["<!-- mason:agents:start -->", "<!-- mason:agents:end -->"],
       ["# mason:mcp:start", "# mason:mcp:end"]
     ];
-    fileSchema = z15.object({
-      created: z15.boolean(),
-      initialHash: z15.string(),
-      blocks: z15.record(z15.string()),
-      mcpHash: z15.string().optional(),
-      hookCommands: z15.array(z15.string()).optional(),
-      hooks: z15.record(z15.array(z15.string())).optional()
+    fileSchema = z17.object({
+      created: z17.boolean(),
+      initialHash: z17.string(),
+      blocks: z17.record(z17.string()),
+      mcpHash: z17.string().optional(),
+      hookCommands: z17.array(z17.string()).optional(),
+      hooks: z17.record(z17.array(z17.string())).optional()
     });
-    ownershipSchema = z15.object({ version: z15.literal(1), files: z15.record(fileSchema) });
+    ownershipSchema = z17.object({ version: z17.literal(1), files: z17.record(fileSchema) });
   }
 });
 
@@ -5021,13 +5369,13 @@ var install_exports = {};
 __export(install_exports, {
   AUTOMATION_PATH: () => AUTOMATION_PATH,
   automationConfigSchema: () => automationConfigSchema,
-  configPath: () => configPath,
+  configPath: () => configPath2,
   installAutomation: () => installAutomation,
   installedAutomation: () => installedAutomation,
   planAutomationInstall: () => planAutomationInstall,
   recordSchema: () => recordSchema2
 });
-import { z as z16 } from "zod";
+import { z as z18 } from "zod";
 async function installationRecord(root) {
   return recordSchema2.parse(await readStoreJson(root, AUTOMATION_PATH) ?? { version: 1, hosts: {} });
 }
@@ -5036,7 +5384,7 @@ async function installAutomation(dir, host, command) {
   return withLock(ws.root, ".mason/reports/setup-lock", () => installLocked(ws.root, host, command));
 }
 async function planAutomationInstall(root, host, command) {
-  const file = configPath(host);
+  const file = configPath2(host);
   const before = await readText(root, file);
   const existing = automationConfigSchema.parse(JSON.parse(before ?? "{}"));
   const record = await installationRecord(root);
@@ -5076,7 +5424,7 @@ async function installLocked(root, host, command) {
     status: "configured",
     command: newCommand,
     events: HOOK_EVENTS,
-    next: host === "codex" ? "Review/trust these hooks using Codex /hooks and start a new session. mason-auto status reports observed events separately from configuration." : "Start a new Claude Code session. mason-auto status reports observed events separately from configuration.",
+    next: host === "codex" ? "Review/trust these hooks using Codex /hooks and start a new session. mason status reports observed events separately from configuration." : "Start a new Claude Code session. mason status reports observed events separately from configuration.",
     note: "Install mason-context in the project before using the default command. Ignore .mason/reports/ to keep local evidence out of commits. Hooks preserve evidence and suggest scoped repairs; they do not approve edits or decisions."
   };
 }
@@ -5087,10 +5435,10 @@ async function installedAutomation(dir) {
   for (const host of ["claude", "codex"]) {
     const expected = record.hosts[host];
     if (!expected) continue;
-    const current = automationConfigSchema.parse(await readStoreJson(ws.root, configPath(host)) ?? {});
+    const current = automationConfigSchema.parse(await readStoreJson(ws.root, configPath2(host)) ?? {});
     const configuredEvents = HOOK_EVENTS.filter((event) => current.hooks?.[event]?.some((group) => group.hooks.some((handler) => handler.type === "command" && handler.command === expected.command)));
     result[host] = {
-      configPath: configPath(host),
+      configPath: configPath2(host),
       configuredEvents,
       status: current.disableAllHooks === true ? "disabled" : configuredEvents.length === HOOK_EVENTS.length ? "configured" : "incomplete",
       runtime: "Host version, trust, policy, and tool coverage still determine execution; inspect observed events."
@@ -5098,7 +5446,7 @@ async function installedAutomation(dir) {
   }
   return result;
 }
-var groupSchema, automationConfigSchema, recordSchema2, AUTOMATION_PATH, configPath;
+var groupSchema, automationConfigSchema, recordSchema2, AUTOMATION_PATH, configPath2;
 var init_install = __esm({
   "src/automation/install.ts"() {
     "use strict";
@@ -5108,11 +5456,11 @@ var init_install = __esm({
     init_store();
     init_files2();
     init_ownership();
-    groupSchema = z16.object({ hooks: z16.array(z16.object({ type: z16.string(), command: z16.string().optional() }).passthrough()) }).passthrough();
-    automationConfigSchema = z16.object({ hooks: z16.record(z16.array(groupSchema)).optional() }).passthrough();
-    recordSchema2 = z16.object({ version: z16.literal(1), hosts: z16.record(z16.object({ command: z16.string() })) });
+    groupSchema = z18.object({ hooks: z18.array(z18.object({ type: z18.string(), command: z18.string().optional() }).passthrough()) }).passthrough();
+    automationConfigSchema = z18.object({ hooks: z18.record(z18.array(groupSchema)).optional() }).passthrough();
+    recordSchema2 = z18.object({ version: z18.literal(1), hosts: z18.record(z18.object({ command: z18.string() })) });
     AUTOMATION_PATH = ".mason/local/automation.json";
-    configPath = (host) => host === "claude" ? ".claude/settings.json" : ".codex/hooks.json";
+    configPath2 = (host) => host === "claude" ? ".claude/settings.json" : ".codex/hooks.json";
   }
 });
 
@@ -5128,7 +5476,7 @@ __export(config_exports, {
 });
 import { isDeepStrictEqual } from "util";
 import { parse as parse2, stringify } from "smol-toml";
-import { z as z17 } from "zod";
+import { z as z19 } from "zod";
 async function instructionEdits(root, host) {
   const found = await Promise.all(DOC_CANDIDATES.map(async (file) => ({ path: file, text: await readText(root, file) })));
   const existing = found.find((f) => f.text !== null);
@@ -5187,7 +5535,7 @@ async function mcpEdit(root, host) {
   return { path: file, before, after };
 }
 async function hookEdits(root, host) {
-  const file = configPath(host), before = await readText(root, file);
+  const file = configPath2(host), before = await readText(root, file);
   const { planAutomationInstall: planAutomationInstall2 } = await Promise.resolve().then(() => (init_install(), install_exports));
   const plan = await planAutomationInstall2(root, host, hookCommand(host));
   return [
@@ -5215,7 +5563,7 @@ async function inspectHostConfig(root, host, plannedMcp) {
   const text2 = plannedMcp ?? await readText(root, mcpPath(host));
   const config = host === "codex" ? parse2(text2 ?? "") : object.parse(JSON.parse(text2 ?? "{}"));
   const servers = host === "codex" ? config.mcp_servers : config.mcpServers;
-  const hooks = automationConfigSchema.parse(JSON.parse(await readText(root, configPath(host)) ?? "{}"));
+  const hooks = automationConfigSchema.parse(JSON.parse(await readText(root, configPath2(host)) ?? "{}"));
   const expected = hookConfig(host, hookCommand(host));
   const compatible = compatibleManagedHookCommands(host);
   const mcp = servers?.mason === void 0 ? null : object.parse(servers.mason);
@@ -5239,7 +5587,7 @@ var init_config = __esm({
     init_install();
     init_files2();
     init_launcher();
-    object = z17.record(z17.unknown());
+    object = z19.record(z19.unknown());
     mcpPath = (host) => host === "codex" ? ".codex/config.toml" : ".mcp.json";
     TOML_START = "# mason:mcp:start";
     TOML_END = "# mason:mcp:end";
@@ -5249,7 +5597,7 @@ var init_config = __esm({
 });
 
 // src/mcp/init.ts
-import { z as z18 } from "zod";
+import { z as z20 } from "zod";
 async function loadProjectMarker(rootDir) {
   const raw = await readStoreJson(rootDir, ".mason/local/project.json");
   if (raw === null) return null;
@@ -5257,8 +5605,8 @@ async function loadProjectMarker(rootDir) {
   return { ...marker, features: await loadProjectFeatures(rootDir) };
 }
 async function loadProjectFeatures(rootDir) {
-  const config = z18.record(z18.unknown()).parse(await readStoreJson(rootDir, ".mason/config.json") ?? {});
-  return z18.object({ confluence: z18.boolean().optional() }).passthrough().parse(config.features ?? {});
+  const config = z20.record(z20.unknown()).parse(await readStoreJson(rootDir, ".mason/config.json") ?? {});
+  return z20.object({ confluence: z20.boolean().optional() }).passthrough().parse(config.features ?? {});
 }
 async function saveProjectMarker(rootDir, marker) {
   const { ancillaryEdits: ancillaryEdits2 } = await Promise.resolve().then(() => (init_config(), config_exports));
@@ -5269,10 +5617,10 @@ async function projectMarkerEdits(rootDir, marker) {
   const file = ".mason/local/project.json";
   const edits = [{ path: file, before: await readText(rootDir, file), after: JSON.stringify(local, null, 2) + "\n" }];
   if (features && Object.keys(features).length) {
-    const configPath2 = ".mason/config.json", before = await readText(rootDir, configPath2);
-    const config = z18.record(z18.unknown()).parse(JSON.parse(before ?? "{}"));
-    config.features = { ...z18.record(z18.unknown()).parse(config.features ?? {}), ...features };
-    edits.push({ path: configPath2, before, after: JSON.stringify(config, null, 2) + "\n" });
+    const configPath3 = ".mason/config.json", before = await readText(rootDir, configPath3);
+    const config = z20.record(z20.unknown()).parse(JSON.parse(before ?? "{}"));
+    config.features = { ...z20.record(z20.unknown()).parse(config.features ?? {}), ...features };
+    edits.push({ path: configPath3, before, after: JSON.stringify(config, null, 2) + "\n" });
   }
   return edits;
 }
@@ -5285,10 +5633,10 @@ var init_init = __esm({
     "use strict";
     init_storage();
     init_files2();
-    markerSchema = z18.object({
-      version: z18.literal(1),
-      initializedAt: z18.string(),
-      features: z18.object({ confluence: z18.boolean().optional() }).passthrough().optional()
+    markerSchema = z20.object({
+      version: z20.literal(1),
+      initializedAt: z20.string(),
+      features: z20.object({ confluence: z20.boolean().optional() }).passthrough().optional()
     }).passthrough();
     CLAUDE_MD_SECTION = `<!-- mason:start -->
 ## Mason project knowledge
@@ -5297,9 +5645,10 @@ Mason provides recorded decisions and file impact over MCP. A concept map is opt
 
 - Task, bug, change request, or investigation of why the project works this way \u2192 \`get_context\` with the task text and known files: matching decisions, related tests, impact, and any available map entries.
 - Before editing a file \u2192 \`get_impact\` to check references, tests, and historical change partners.
-- Investigation or correction reveals a reusable project lesson \u2192 \`save_decision\` before finishing. Capture only the lasting constraint and reason, with anchors and known sources, owner, and recorder. This creates a proposal; never infer approval. Preserve uncertain causes and unknown attribution. Route project lessons here; keep personal preferences in agent memory. Skip code summaries, current checkout status, temporary task permissions, session trivia, and secrets. No qualifying lesson means no record.
+- Investigation or correction reveals a reusable project lesson \u2192 \`save_decision\` as soon as the lesson is supported by evidence; do not wait for implementation, task completion, or merge. Record the established observation now and identify unimplemented remedies as tentative. Capture only the lasting constraint and reason, with anchors and known sources, owner, and recorder. This creates a proposal; never infer approval. Preserve uncertain causes and unknown attribution. Route project lessons here; keep personal preferences in agent memory. Skip code summaries, current checkout status, temporary task permissions, session trivia, and secrets. No qualifying lesson means no record.
 - Before saving, compare the lesson with matching \`get_context\` records and any pending proposal. If new evidence changes the same lesson's assumptions, scope, or recommended action, revise it with \`save_decision(id: existingId)\`, including when it is accepted. Preserve supported rationale and sources, replace obsolete instructions, and add the new evidence. Create a separate record for a genuinely distinct lesson; skip unchanged restatements. Revision preserves history and leaves the accepted version operative until authorized review.
 - Consult trust metadata before relying on entries: unknown or changed freshness requires inspection, stale or unknown map verification requires a fresh evidence review, and a recorded failed verdict means the description must be corrected. Check approval too: proposals are suggestions, legacy records are unreviewed, and accepted decisions are recorded constraints subject to freshness checks. An accepted revision remains operative while a pending proposal is reviewed; keep both versions and their freshness distinct.
+- Asked to review pending project knowledge \u2192 \`mason_automation(action: "status")\` lists pending proposals and uncommitted records. For ordinary tasks, inspect matching proposals through \`get_context\`; do not request acceptance merely because a proposal exists.
 - Asked to review or re-verify a decision \u2192 \`review_decision\` first to inspect content, sources, history, and code changes. Record acceptance, reaffirmation, or retirement only when authorized by the user or a cited team review, with the actual reviewer and reason. Never infer approval from unchanged code. Review and commit the local record through the normal project workflow.
 - For an architectural overview, use \`get_snapshot\` if a map is available. If \`map.status\` is missing or invalid, use available decisions and source evidence; do not start building a map unless requested.
 - \`mason_init\` returns documentation audit and committed-diff review results, plus a short setup guide. Pass \`evidence\` with local CI manifest paths to include test and analysis results; the CLI equivalent is \`mason-review --evidence <manifest>\`. State skipped, unavailable, stale, or unknown checks explicitly. Related accepted decisions identify review context, not proven violations.
@@ -5309,13 +5658,13 @@ Mason provides recorded decisions and file impact over MCP. A concept map is opt
 
 - For a dependency advisory, \`review_advisory(action: "dismiss", baselinePath, findingId, reasonCode, note)\` records a one-step dismissal without reviewer or token. Use \`no-dependency-claims\` for a document with no dependency claims (reopens on document content changes), or \`unrelated-manifest-change\` for reviewed changes that do not affect its guidance (reopens on document or manifest changes). Keep the relevant scope committed; commit the dismissal to share it. This never approves a decision.
 
-- When Mason automation is installed, use \`mason_automation(action: "status")\` to inspect configured hooks and observed events, and \`mason_automation(action: "check")\` to resume its retained repair evidence. CLI fallback: \`mason-auto status\` / \`mason-auto check\`. Preserve existing baselines across sessions. Automatic checks do not authorize unrelated repairs or approve advisories.
+- When Mason automation is installed, use \`mason_automation(action: "status")\` to inspect configured hooks and observed events, and \`mason_automation(action: "check")\` to resume its retained repair evidence. CLI fallback: \`mason status\` / \`mason check\`. Preserve existing baselines across sessions. Automatic checks do not authorize unrelated repairs or approve advisories.
 
 Inspect source for what the retrieved context does not answer.
 <!-- mason:end -->`;
     ASSISTANT_SETUP = `UNIFIED SETUP
-When the user requests Mason setup, call mason_init again with mode: "setup" and host: "codex" or "claude" for the assistant being configured. This uses the same engine as mason-auto setup: retain the initial audit before instruction edits, use the installed mason command on PATH, merge project MCP configuration and hooks, update marker-delimited instructions and Git ignore rules, and record setup. A concept map is optional.
-If the user only requested inspection or review, report findings without running setup. The setup result distinguishes configured from observed activation. Explain the host's native trust step and request a new session; never trust hooks on the user's behalf or claim activation from generated configuration alone. After a normal task finishes, mason_automation(action: "status") or mason-auto status reports observed context use and hook events. Existing findings remain reviewable; setup does not approve advisories or manufacture decisions.
+When the user requests Mason setup, call mason_init again with mode: "setup" and host: "codex" or "claude" for the assistant being configured. This uses the same engine as mason setup: retain the initial audit before instruction edits, use the installed mason command on PATH, merge project MCP configuration and hooks, update marker-delimited instructions and Git ignore rules, and record setup. A concept map is optional.
+If the user only requested inspection or review, report findings without running setup. The setup result distinguishes configured from observed activation. Explain the host's native trust step and request a new session; never trust hooks on the user's behalf or claim activation from generated configuration alone. After a normal task finishes, mason_automation(action: "status") or mason status reports observed context use and hook events. Existing findings remain reviewable; setup does not approve advisories or manufacture decisions.
 
 The managed project guidance is:
 ${CLAUDE_MD_SECTION}`;
@@ -5323,7 +5672,7 @@ ${CLAUDE_MD_SECTION}`;
 
 1. Explain the actionable findings with their source evidence. Separate audit issues, advisories, and skipped checks. The review covers committed changes from the merge base to HEAD; workingTree paths are not included in that review. An unavailable or empty check is not proof that the project is correct. Use the CLI for full output if a summary is truncated.
 2. Address findings within the user's requested scope. Setup alone authorizes Mason host configuration, hooks, instructions, and ignore rules; rewriting existing project claims requires repair scope. If repair is authorized, call \`mason_repair(dir, action: "prepare")\` before editing; it saves the full original findings even when this summary is truncated. Inspect relevant source, make grounded edits, then call \`mason_repair(dir, action: "verify", baselinePath)\` with that same baseline, including after any final doc commit. Report resolved, unresolved, review-required, unverified, and new findings. Keep suppressed advisories visible even when setup has already dirtied a doc. Do not invent a decision just to populate the store.
-3. When the task reveals a real lesson or constraint, compare matching \`get_context\` records first. If its assumptions, scope, or recommended action changed, revise that record using \`save_decision(id: existingId)\`; create a separate record for a genuinely distinct lesson and skip unchanged restatements. Include title, body, category, anchors, and known owner/source/actor information. Preserve supported rationale and sources, replace obsolete instructions, and add new evidence. Missing attribution can be added later. The tool writes a local proposal; editing it preserves revision history and requires a new acceptance, while any earlier accepted revision remains operative. An unchanged save never refreshes its evidence. When decision review is requested, \`review_decision\` prepares the record and code evidence before any authorized verdict. Review and commit records through the normal workflow. Retrieve it on the next relevant task with \`get_context(dir, task, files)\`.
+3. Capture a supported lesson as soon as it is established; do not wait for implementation, task completion, or merge. Keep unimplemented remedies tentative. When the task reveals a real lesson or constraint, compare matching \`get_context\` records first. If its assumptions, scope, or recommended action changed, revise that record using \`save_decision(id: existingId)\`; create a separate record for a genuinely distinct lesson and skip unchanged restatements. Include title, body, category, anchors, and known owner/source/actor information. Preserve supported rationale and sources, replace obsolete instructions, and add new evidence. Missing attribution can be added later. The tool writes a local proposal; editing it preserves revision history and requires a new acceptance, while any earlier accepted revision remains operative. An unchanged save never refreshes its evidence. When decision review is requested, \`review_decision\` prepares the record and code evidence before any authorized verdict. Review and commit records through the normal workflow. Retrieve it on the next relevant task with \`get_context(dir, task, files)\`.
 
 ${ASSISTANT_SETUP}
 
@@ -5486,7 +5835,7 @@ var init_types2 = __esm({
 });
 
 // src/review/evidence/vitest.ts
-import { z as z19 } from "zod";
+import { z as z21 } from "zod";
 function parseVitest(raw, sourceRoot) {
   const report = schema.parse(raw);
   const findings = [], diagnostics = [];
@@ -5535,24 +5884,24 @@ var init_vitest = __esm({
     "use strict";
     init_paths2();
     init_types2();
-    count3 = z19.number().int().nonnegative();
-    schema = z19.object({
-      success: z19.boolean(),
+    count3 = z21.number().int().nonnegative();
+    schema = z21.object({
+      success: z21.boolean(),
       numTotalTests: count3,
       numPassedTests: count3,
       numFailedTests: count3,
       numPendingTests: count3,
       numTodoTests: count3,
       numFailedTestSuites: count3,
-      testResults: z19.array(z19.object({
-        name: z19.string().min(1),
-        status: z19.enum(["passed", "failed"]),
-        message: z19.string().optional(),
-        assertionResults: z19.array(z19.object({
-          fullName: z19.string(),
-          status: z19.enum(["passed", "failed", "pending", "skipped", "todo", "disabled"]),
-          failureMessages: z19.array(z19.string()).nullable().optional(),
-          location: z19.object({ line: count3, column: count3 }).nullable().optional()
+      testResults: z21.array(z21.object({
+        name: z21.string().min(1),
+        status: z21.enum(["passed", "failed"]),
+        message: z21.string().optional(),
+        assertionResults: z21.array(z21.object({
+          fullName: z21.string(),
+          status: z21.enum(["passed", "failed", "pending", "skipped", "todo", "disabled"]),
+          failureMessages: z21.array(z21.string()).nullable().optional(),
+          location: z21.object({ line: count3, column: count3 }).nullable().optional()
         }))
       }))
     });
@@ -5560,7 +5909,7 @@ var init_vitest = __esm({
 });
 
 // src/review/evidence/sarif.ts
-import { z as z20 } from "zod";
+import { z as z22 } from "zod";
 function parseSarif(raw, sourceRoot) {
   const report = schema2.parse(raw), findings = [], diagnostics = [];
   let active = 0, suppressed = 0, absent = 0, unresolved = 0;
@@ -5651,29 +6000,29 @@ var init_sarif = __esm({
     "use strict";
     init_paths2();
     init_types2();
-    index = z20.number().int().nonnegative();
-    artifact = z20.object({ uri: z20.string().optional(), uriBaseId: z20.string().optional(), index: index.optional() });
-    message = z20.object({ text: z20.string().optional(), markdown: z20.string().optional(), id: z20.string().optional(), arguments: z20.array(z20.string()).optional() });
-    level = z20.enum(["error", "warning", "note", "none"]);
-    location = z20.object({ physicalLocation: z20.object({ artifactLocation: artifact.optional(), region: z20.object({ startLine: index.optional(), startColumn: index.optional() }).optional() }).optional() });
-    schema2 = z20.object({
-      version: z20.literal("2.1.0"),
-      runs: z20.array(z20.object({
-        tool: z20.object({ driver: z20.object({ name: z20.string().min(1), rules: z20.array(z20.object({ id: z20.string(), defaultConfiguration: z20.object({ level: level.optional() }).optional(), messageStrings: z20.record(message).optional() })).optional(), globalMessageStrings: z20.record(message).optional() }) }),
-        invocations: z20.array(z20.object({ executionSuccessful: z20.boolean(), commandLine: z20.string().optional(), toolExecutionNotifications: z20.array(z20.object({ level: level.optional(), message })).optional() })).optional(),
-        versionControlProvenance: z20.array(z20.object({ revisionId: z20.string().optional() })).optional(),
-        originalUriBaseIds: z20.record(artifact).optional(),
-        artifacts: z20.array(z20.object({ location: artifact.optional() })).optional(),
-        results: z20.array(z20.object({
-          ruleId: z20.string().optional(),
+    index = z22.number().int().nonnegative();
+    artifact = z22.object({ uri: z22.string().optional(), uriBaseId: z22.string().optional(), index: index.optional() });
+    message = z22.object({ text: z22.string().optional(), markdown: z22.string().optional(), id: z22.string().optional(), arguments: z22.array(z22.string()).optional() });
+    level = z22.enum(["error", "warning", "note", "none"]);
+    location = z22.object({ physicalLocation: z22.object({ artifactLocation: artifact.optional(), region: z22.object({ startLine: index.optional(), startColumn: index.optional() }).optional() }).optional() });
+    schema2 = z22.object({
+      version: z22.literal("2.1.0"),
+      runs: z22.array(z22.object({
+        tool: z22.object({ driver: z22.object({ name: z22.string().min(1), rules: z22.array(z22.object({ id: z22.string(), defaultConfiguration: z22.object({ level: level.optional() }).optional(), messageStrings: z22.record(message).optional() })).optional(), globalMessageStrings: z22.record(message).optional() }) }),
+        invocations: z22.array(z22.object({ executionSuccessful: z22.boolean(), commandLine: z22.string().optional(), toolExecutionNotifications: z22.array(z22.object({ level: level.optional(), message })).optional() })).optional(),
+        versionControlProvenance: z22.array(z22.object({ revisionId: z22.string().optional() })).optional(),
+        originalUriBaseIds: z22.record(artifact).optional(),
+        artifacts: z22.array(z22.object({ location: artifact.optional() })).optional(),
+        results: z22.array(z22.object({
+          ruleId: z22.string().optional(),
           ruleIndex: index.optional(),
           message,
           level: level.optional(),
-          kind: z20.enum(["fail", "pass", "open", "informational", "notApplicable", "review"]).optional(),
-          baselineState: z20.enum(["new", "unchanged", "updated", "absent"]).optional(),
-          suppressions: z20.array(z20.object({ kind: z20.enum(["inSource", "external"]), status: z20.enum(["accepted", "underReview", "rejected"]).optional() })).nullable().optional(),
-          locations: z20.array(location).optional(),
-          relatedLocations: z20.array(location).optional()
+          kind: z22.enum(["fail", "pass", "open", "informational", "notApplicable", "review"]).optional(),
+          baselineState: z22.enum(["new", "unchanged", "updated", "absent"]).optional(),
+          suppressions: z22.array(z22.object({ kind: z22.enum(["inSource", "external"]), status: z22.enum(["accepted", "underReview", "rejected"]).optional() })).nullable().optional(),
+          locations: z22.array(location).optional(),
+          relatedLocations: z22.array(location).optional()
         })).optional()
       }))
     });
@@ -5681,7 +6030,7 @@ var init_sarif = __esm({
 });
 
 // src/review/evidence/check.ts
-import { z as z21 } from "zod";
+import { z as z23 } from "zod";
 function parseCheck(raw, sourceRoot) {
   const report = schema3.parse(raw);
   const diagnostics = [], findings = [];
@@ -5721,17 +6070,17 @@ var init_check = __esm({
     "use strict";
     init_paths2();
     init_types2();
-    schema3 = z21.object({
-      version: z21.literal(1),
-      commit: z21.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).optional(),
-      results: z21.array(z21.object({
-        name: z21.string().min(1).max(1e3),
-        status: z21.enum(["passed", "failed", "skipped"]),
-        message: z21.string().max(1e5).optional(),
-        locations: z21.array(z21.object({
-          file: z21.string().min(1).max(4e3),
-          line: z21.number().int().positive().optional(),
-          column: z21.number().int().positive().optional()
+    schema3 = z23.object({
+      version: z23.literal(1),
+      commit: z23.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).optional(),
+      results: z23.array(z23.object({
+        name: z23.string().min(1).max(1e3),
+        status: z23.enum(["passed", "failed", "skipped"]),
+        message: z23.string().max(1e5).optional(),
+        locations: z23.array(z23.object({
+          file: z23.string().min(1).max(4e3),
+          line: z23.number().int().positive().optional(),
+          column: z23.number().int().positive().optional()
         })).max(100).default([])
       })).max(1e5)
     });
@@ -5740,7 +6089,7 @@ var init_check = __esm({
 
 // src/review/evidence.ts
 import path29 from "path";
-import { z as z22 } from "zod";
+import { z as z24 } from "zod";
 function relativeArtifact(root, file) {
   const relative = path29.isAbsolute(file) ? path29.relative(root, file) : file;
   const normalized = normalizeRepoPath(relative);
@@ -5781,7 +6130,7 @@ async function collectReviewEvidence(root, manifests, changedFiles, decisions, d
     let manifest, raw;
     try {
       manifest = relativeArtifact(root, supplied);
-      raw = z22.object({ version: z22.literal(1), checks: z22.array(z22.unknown()) }).parse(await readStoreJson(root, manifest));
+      raw = z24.object({ version: z24.literal(1), checks: z24.array(z24.unknown()) }).parse(await readStoreJson(root, manifest));
     } catch (error) {
       output.diagnostics.push(`${supplied}: ${String(error)}`);
       continue;
@@ -5936,31 +6285,31 @@ var init_evidence2 = __esm({
     init_sarif();
     init_check();
     init_types2();
-    checkSchema2 = z22.object({
-      id: z22.string().min(1).max(100),
-      kind: z22.enum(["tests", "static-analysis", "security", "complexity", "duplication", "documentation"]),
-      tool: z22.string().min(1).max(200),
-      command: z22.string().min(1).max(2e3),
-      commit: z22.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).nullable().optional(),
-      workingTreeClean: z22.boolean().optional(),
-      source: z22.string().max(2e3).optional(),
-      sourceRoot: z22.string().min(1).max(4e3).optional(),
-      status: z22.enum(["completed", "skipped", "unavailable"]).default("completed"),
-      reason: z22.string().min(1).max(2e3).optional(),
-      exitCode: z22.number().int().nullable().optional(),
-      environment: z22.object({
-        toolVersion: z22.string().min(1).max(200),
-        runtime: z22.string().min(1).max(200).optional(),
-        platform: z22.string().min(1).max(200).optional(),
-        configuration: z22.array(z22.string().min(1).max(4e3)).max(100).optional()
+    checkSchema2 = z24.object({
+      id: z24.string().min(1).max(100),
+      kind: z24.enum(["tests", "static-analysis", "security", "complexity", "duplication", "documentation"]),
+      tool: z24.string().min(1).max(200),
+      command: z24.string().min(1).max(2e3),
+      commit: z24.string().regex(/^(?:[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/).nullable().optional(),
+      workingTreeClean: z24.boolean().optional(),
+      source: z24.string().max(2e3).optional(),
+      sourceRoot: z24.string().min(1).max(4e3).optional(),
+      status: z24.enum(["completed", "skipped", "unavailable"]).default("completed"),
+      reason: z24.string().min(1).max(2e3).optional(),
+      exitCode: z24.number().int().nullable().optional(),
+      environment: z24.object({
+        toolVersion: z24.string().min(1).max(200),
+        runtime: z24.string().min(1).max(200).optional(),
+        platform: z24.string().min(1).max(200).optional(),
+        configuration: z24.array(z24.string().min(1).max(4e3)).max(100).optional()
       }).optional(),
-      report: z22.object({ format: z22.enum(["vitest-json", "sarif", "mason-check-json"]), path: z22.string().min(1).max(4e3) }).optional()
+      report: z24.object({ format: z24.enum(["vitest-json", "sarif", "mason-check-json"]), path: z24.string().min(1).max(4e3) }).optional()
     });
   }
 });
 
 // src/review/review.ts
-import fs21 from "fs/promises";
+import fs22 from "fs/promises";
 import path30 from "path";
 import { execFile as execFile7 } from "child_process";
 import { promisify as promisify7 } from "util";
@@ -6040,7 +6389,7 @@ async function computeReview(rootDir, base, options = {}) {
     analyzed,
     async (relPath) => {
       try {
-        await fs21.access(path30.join(resolvedRoot, relPath));
+        await fs22.access(path30.join(resolvedRoot, relPath));
         return true;
       } catch {
         return false;
@@ -6516,12 +6865,12 @@ __export(assemble_exports, {
   assembleContext: () => assembleContext
 });
 import path33 from "path";
-import fs22 from "fs/promises";
+import fs23 from "fs/promises";
 async function collectImpact(root, candidates) {
   const targets2 = /* @__PURE__ */ new Set();
   let sourceFiles;
   for (const candidate of sanitizeRepoPaths(candidates)) {
-    const stat = await fs22.stat(path33.join(root, candidate)).catch(() => null);
+    const stat = await fs23.stat(path33.join(root, candidate)).catch(() => null);
     if (stat?.isDirectory()) {
       sourceFiles ??= await (await createFileAccess(root)).list();
       for (const file of sourceFiles) {
@@ -6743,13 +7092,13 @@ __export(observations_exports, {
   observeActivation: () => observeActivation,
   readObservation: () => readObservation
 });
-import fs23 from "fs/promises";
-import { z as z23 } from "zod";
-function observationPath(directory, host, revision, version = executingVersion()) {
-  return `${directory}/activation/${host}-${revision}-${hash(version).slice(0, 12)}.json`;
+import fs24 from "fs/promises";
+import { z as z25 } from "zod";
+function observationPath(directory2, host, revision, version = executingVersion()) {
+  return `${directory2}/activation/${host}-${revision}-${hash(version).slice(0, 12)}.json`;
 }
-async function readObservation(root, directory, host, revision, version = executingVersion()) {
-  const raw = await readStoreJson(root, observationPath(directory, host, revision, version));
+async function readObservation(root, directory2, host, revision, version = executingVersion()) {
+  const raw = await readStoreJson(root, observationPath(directory2, host, revision, version));
   if (raw === null) return null;
   const record = observationSchema.parse(raw);
   if (record.root !== root || record.host !== host || record.revision !== revision || record.masonVersion !== version) throw new Error("Activation receipt belongs to another installation.");
@@ -6766,12 +7115,12 @@ async function observeActivation(dir, event, options = {}) {
       return inactiveSetupMessage();
     }
     const capturedDirectory = options.directory?.match(/^\.mason\/reports\/automation\/[a-f0-9]{24}$/)?.[0] ?? options.reportPath?.match(/^(\.mason\/reports\/automation\/[a-f0-9]{24})\/checks\//)?.[1];
-    const ws = capturedDirectory ? { root: await fs23.realpath(dir), directory: capturedDirectory } : await workspace(dir);
-    if (ws.root !== await fs23.realpath(process.env.MASON_SETUP_ROOT)) return null;
+    const ws = capturedDirectory ? { root: await fs24.realpath(dir), directory: capturedDirectory } : await workspace(dir);
+    if (ws.root !== await fs24.realpath(process.env.MASON_SETUP_ROOT)) return null;
     const { setup } = await effectiveSetup(ws.root);
     if (setup?.hosts[host]?.revision !== revision) return "Mason setup changed; restart the assistant to observe the current integration.";
-    const directory = ws.directory + "/activation";
-    await withLock(ws.root, directory, async () => {
+    const directory2 = ws.directory + "/activation";
+    await withLock(ws.root, directory2, async () => {
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const record = await readObservation(ws.root, ws.directory, host, revision) ?? {
         version: 1,
@@ -6815,19 +7164,19 @@ var init_observations = __esm({
     init_storage();
     init_model();
     init_launcher();
-    observationSchema = z23.object({
-      version: z23.literal(1),
-      masonVersion: z23.string(),
-      root: z23.string(),
-      revision: z23.string(),
-      host: z23.enum(["codex", "claude"]),
-      contextCalls: z23.number().int().nonnegative(),
-      lastContextAt: z23.string().optional(),
-      sessions: z23.record(z23.object({
-        events: z23.array(z23.enum(events)),
-        at: z23.string(),
-        verificationStatus: z23.string().optional(),
-        reportPath: z23.string().optional()
+    observationSchema = z25.object({
+      version: z25.literal(1),
+      masonVersion: z25.string(),
+      root: z25.string(),
+      revision: z25.string(),
+      host: z25.enum(["codex", "claude"]),
+      contextCalls: z25.number().int().nonnegative(),
+      lastContextAt: z25.string().optional(),
+      sessions: z25.record(z25.object({
+        events: z25.array(z25.enum(events)),
+        at: z25.string(),
+        verificationStatus: z25.string().optional(),
+        reportPath: z25.string().optional()
       }))
     });
   }
@@ -6854,7 +7203,7 @@ async function setupStatus(dir) {
       version: 1,
       status: pending.length ? "incomplete" : "not-configured",
       hosts: {},
-      next: pending.length ? "Setup did not finish. Rerun mason-auto setup --host " + pending[0] + " to resume using the retained original evidence." : "Project hooks are inactive until local setup. Run mason setup --host codex or --host claude."
+      next: pending.length ? "Setup did not finish. Rerun mason setup --host " + pending[0] + " to resume using the retained original evidence." : "Project hooks are inactive until local setup. Run mason setup --host codex or --host claude."
     };
   }
   const hosts = {};
@@ -6888,7 +7237,7 @@ async function setupStatus(dir) {
     if (!mcp || !hooks || !instructionsCurrent || !configured) pending.push("Rerun setup to reconcile project configuration; inspect any disabled host settings.");
     if (!observation?.contextCalls) pending.push("Start a new assistant session and request task context through Mason's get_context tool.");
     if (!complete) pending.push("Review/trust the host configuration, then complete a normal task to observe the full hook lifecycle.");
-    if (automation.status === "unavailable") pending.push("The latest automation attempt did not establish verification. Run mason-auto check and inspect its diagnostics.");
+    if (automation.status === "unavailable") pending.push("The latest automation attempt did not establish verification. Run mason check and inspect its diagnostics.");
     const healthy = installed.available && mcp && hooks && instructionsCurrent && configured && automation.status !== "unavailable";
     hosts[host] = {
       status: healthy ? complete && observation?.contextCalls ? "active" : "pending" : "attention",
@@ -7022,6 +7371,11 @@ async function setupProject(dir, options = {}) {
     options.progress?.step("Checking configuration and retained findings");
     const checked = await automate(ws.root, { event: "turn_start" });
     const configured = await inspectHostConfig(ws.root, host, void 0);
+    const stats = await configureUsefulness(ws.root, true, { onlyIfUnset: true }).catch(() => ({
+      enabled: null,
+      storage: ".mason/local/usefulness",
+      note: "Local stats unavailable. Inspect mason stats --json, or use mason stats --disable to reset the preference. Existing observations were retained."
+    }));
     await writeStoreJson(ws.root, receiptPath, {
       version: 1,
       host,
@@ -7044,6 +7398,7 @@ async function setupProject(dir, options = {}) {
       findings,
       reportPath: checked.report.reportPath,
       activation: await setupStatus(ws.root),
+      stats,
       next: configured.disabled || configured.mcpDisabled ? "Mason hooks or MCP are disabled in project configuration. Review that setting before activation." : host === "codex" ? "Review/trust this project's MCP configuration and hooks in Codex (/hooks in the CLI), then start a new session and give it a normal task." : "Approve the project MCP server in Claude Code, then start a new session and give it a normal task."
     };
   });
@@ -7055,18 +7410,20 @@ function summarizeSetup(result) {
     "  MCP server and lifecycle hooks use mason from PATH.",
     "  Project instructions updated; original audit evidence retained.",
     `  ${result.changedFiles.length} files changed.`,
+    result.stats.enabled === null ? result.stats.note : result.stats.enabled ? "Local stats enabled: metadata stays in .mason/local/usefulness/; nothing is uploaded. View with mason stats; disable with mason stats --disable." : "Local stats remain disabled by your saved preference. Enable with mason stats --enable.",
     `Initial audit: ${audit.status}${"counts" in audit ? `; ${audit.counts.issues} issues, ${audit.counts.advisories + audit.counts.suppressedAdvisories} advisories` : ""}.`,
     ..."issues" in audit ? audit.issues.slice(0, 3).map((f) => "  " + f.message) : [],
     `Original evidence: ${result.initialReportPath}`,
     "Activation: " + result.activation.status + ".",
     result.next,
     "If the assistant cannot find mason, restart the desktop app so it picks up PATH.",
-    "After the task finishes, run mason-auto status. Configuration alone does not establish activation."
+    "After the task finishes, run mason status. Configuration alone does not establish activation."
   ].join("\n");
 }
 var init_setup = __esm({
   "src/setup/setup.ts"() {
     "use strict";
+    init_usefulness();
     init_evidence();
     init_store();
     init_runtime();
@@ -7204,7 +7561,7 @@ __export(config_exports2, {
   saveConfluenceConfig: () => saveConfluenceConfig,
   validateProvider: () => validateProvider
 });
-import fs24 from "fs/promises";
+import fs25 from "fs/promises";
 import path34 from "path";
 import os3 from "os";
 import { execFile as execFile9 } from "child_process";
@@ -7217,15 +7574,15 @@ function configFile() {
 }
 async function loadConfig() {
   try {
-    const raw = await fs24.readFile(configFile(), "utf-8");
+    const raw = await fs25.readFile(configFile(), "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
   }
 }
 async function saveConfig(config) {
-  await fs24.mkdir(configDir(), { recursive: true });
-  await fs24.writeFile(configFile(), JSON.stringify(config, null, 2), "utf-8");
+  await fs25.mkdir(configDir(), { recursive: true });
+  await fs25.writeFile(configFile(), JSON.stringify(config, null, 2), "utf-8");
 }
 function getDefaultModel(provider) {
   return DEFAULT_MODELS[provider];
@@ -7385,7 +7742,7 @@ var init_renderer = __esm({
 });
 
 // src/confluence/diff.ts
-import fs25 from "fs/promises";
+import fs26 from "fs/promises";
 import path35 from "path";
 import { createHash as createHash6 } from "crypto";
 function hashDescription(description) {
@@ -7399,7 +7756,7 @@ function syncStatePath(rootDir) {
 }
 async function loadSyncState(rootDir) {
   try {
-    const raw = await fs25.readFile(syncStatePath(rootDir), "utf-8");
+    const raw = await fs26.readFile(syncStatePath(rootDir), "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed.version !== 2) return null;
     return parsed;
@@ -7408,8 +7765,8 @@ async function loadSyncState(rootDir) {
   }
 }
 async function saveSyncState(rootDir, state) {
-  await fs25.mkdir(syncStateDir(rootDir), { recursive: true });
-  await fs25.writeFile(
+  await fs26.mkdir(syncStateDir(rootDir), { recursive: true });
+  await fs26.writeFile(
     syncStatePath(rootDir),
     JSON.stringify(state, null, 2),
     "utf-8"
@@ -7962,12 +8319,12 @@ init_advisory_review();
 init_decisions();
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z as z24 } from "zod";
+import { z as z26 } from "zod";
 
 // src/mcp/tools.ts
 init_repair();
 init_advisory_review();
-import fs26 from "fs/promises";
+import fs27 from "fs/promises";
 import path36 from "path";
 import { execFile as execFile11 } from "child_process";
 import { promisify as promisify11 } from "util";
@@ -8591,14 +8948,14 @@ init_files();
 import { createHash as createHash4 } from "crypto";
 import { execFile as execFile5 } from "child_process";
 import { promisify as promisify5 } from "util";
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var exec3 = promisify5(execFile5);
-var requestSchema = z10.object({
-  id: z10.string().regex(/^[a-zA-Z0-9_-]+$/),
-  action: z10.enum(["prepare", "accept", "reaffirm", "retire"]).default("prepare"),
-  reviewer: z10.string().trim().min(1).max(200).optional(),
-  note: z10.string().trim().min(1).max(1500).optional(),
-  reviewToken: z10.string().regex(/^[a-f0-9]{64}$/).optional()
+var requestSchema = z11.object({
+  id: z11.string().regex(/^[a-zA-Z0-9_-]+$/),
+  action: z11.enum(["prepare", "accept", "reaffirm", "retire"]).default("prepare"),
+  reviewer: z11.string().trim().min(1).max(200).optional(),
+  note: z11.string().trim().min(1).max(1500).optional(),
+  reviewToken: z11.string().regex(/^[a-f0-9]{64}$/).optional()
 });
 async function reviewState(root, record) {
   const [headHash, workingTree, changes] = await Promise.all([
@@ -8825,16 +9182,16 @@ init_lock();
 init_storage();
 init_snapshot();
 import fs17 from "fs/promises";
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var DIRECTORY = ".mason/partial-snapshots";
-var partialSchema = z11.object({
-  batchId: z11.string().regex(/^[a-zA-Z0-9_-]+$/),
-  offset: z11.number().int().nonnegative(),
-  features: z11.record(featureSchema),
-  flows: z11.record(flowSchema),
-  savedAt: z11.string()
+var partialSchema = z12.object({
+  batchId: z12.string().regex(/^[a-zA-Z0-9_-]+$/),
+  offset: z12.number().int().nonnegative(),
+  features: z12.record(featureSchema),
+  flows: z12.record(flowSchema),
+  savedAt: z12.string()
 });
-var scopeSchema2 = z11.object({ files: z11.array(z11.string()), savedAt: z11.string() });
+var scopeSchema2 = z12.object({ files: z12.array(z12.string()), savedAt: z12.string() });
 async function savePartial(rootDir, partial) {
   if (!/^[a-zA-Z0-9_-]+$/.test(partial.batchId)) throw new Error(`Invalid batchId: ${partial.batchId}`);
   await withSnapshotWrite(rootDir, () => writeStoreJson(rootDir, `${DIRECTORY}/${partial.batchId}.json`, partialSchema.parse(partial)));
@@ -8941,7 +9298,7 @@ async function detectProjectSnapshot(rootDir) {
   const present = [];
   for (const file of buildFiles) {
     try {
-      await fs26.access(path36.join(rootDir, file));
+      await fs27.access(path36.join(rootDir, file));
       present.push(file);
     } catch {
     }
@@ -9833,21 +10190,21 @@ function createMcpServer() {
   const server = new McpServer(
     {
       name: "mason",
-      version: "0.19.1"
+      version: "0.20.1"
     },
     {
-      instructions: (setupNotice ? setupNotice + "\n\n" : "") + 'Mason retrieves recorded decisions, file impact, and optional feature/flow maps. Use get_context with the task and known files, and get_impact before editing. Save learned rationale and constraints with save_decision; review and commit the local records through the project workflow. These tools work without initialization or a concept map. Consult trust and diagnostics: changed or unknown freshness needs source inspection, stale or unknown map verification needs a fresh review, recorded failed verdicts need correction, and proposals are suggestions and legacy records are unreviewed. Accepted decisions are recorded team constraints, still subject to freshness checks. Use review_decision to prepare code evidence and record only authorized acceptance, reaffirmation, or retirement. Never invent a reviewer or treat these recorded identities as authenticated approval. mason_init returns documentation audit and committed-diff review findings with a quickstart guide. Use mode: "map" only when a full architecture map is requested. A missing map is not a setup failure; use decisions and source evidence. get_snapshot provides architecture navigation when a map is available. The mason-audit and mason-review CLIs also work without setup.'
+      instructions: (setupNotice ? setupNotice + "\n\n" : "") + 'Mason retrieves recorded decisions, file impact, and optional feature/flow maps. Use get_context with the task and known files, and get_impact before editing. Save learned rationale and constraints with save_decision as soon as evidence supports them, without waiting for implementation or merge; review and commit the local records through the project workflow. These tools work without initialization or a concept map. Consult trust and diagnostics: changed or unknown freshness needs source inspection, stale or unknown map verification needs a fresh review, recorded failed verdicts need correction, and proposals are suggestions and legacy records are unreviewed. Accepted decisions are recorded team constraints, still subject to freshness checks. Use review_decision to prepare code evidence and record only authorized acceptance, reaffirmation, or retirement. Never invent a reviewer or treat these recorded identities as authenticated approval. mason_init returns documentation audit and committed-diff review findings with a quickstart guide. Use mode: "map" only when a full architecture map is requested. A missing map is not a setup failure; use decisions and source evidence. get_snapshot provides architecture navigation when a map is available. The mason-audit and mason-review CLIs also work without setup.'
     }
   );
   server.tool(
     "mason_init",
     "Inspect this project now: returns documentation audit findings, committed-diff review findings, decision/map status, and a quickstart playbook. Quickstart and map modes are read-only and deterministic. Explicit mode: setup configures MCP, instructions and lifecycle hooks to use mason on PATH while retaining original audit evidence; use it only when the user requests setup. Optional host selects codex or claude. Optional base selects the review comparison; evidence imports CI manifests with check outcomes, commit freshness, and links to changed files and accepted decisions. mode: map returns the full Map-Reduce build workflow. Repeat calls refresh findings even after setup.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      mode: z24.enum(["quickstart", "map", "setup"]).optional().default("quickstart").describe("Quickstart inspects without edits; map requests an architecture build; setup installs the shared onboarding flow."),
-      host: z24.enum(["codex", "claude"]).optional().describe("Assistant to configure in setup mode; inferred only when unambiguous."),
-      base: z24.string().optional().describe("Git ref for committed-diff review. Defaults to the first available main branch ref."),
-      evidence: z24.array(z24.string()).max(10).optional().describe("Repository-local CI evidence manifests to include in the review. Imports Vitest JSON, SARIF, and native-validator mason-check-json results without executing check commands.")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      mode: z26.enum(["quickstart", "map", "setup"]).optional().default("quickstart").describe("Quickstart inspects without edits; map requests an architecture build; setup installs the shared onboarding flow."),
+      host: z26.enum(["codex", "claude"]).optional().describe("Assistant to configure in setup mode; inferred only when unambiguous."),
+      base: z26.string().optional().describe("Git ref for committed-diff review. Defaults to the first available main branch ref."),
+      evidence: z26.array(z26.string()).max(10).optional().describe("Repository-local CI evidence manifests to include in the review. Imports Vitest JSON, SARIF, and native-validator mason-check-json results without executing check commands.")
     },
     async ({ dir, mode, host, base, evidence }) => {
       const result = await masonInit(dir, { mode, host, base, evidence });
@@ -9856,10 +10213,10 @@ function createMcpServer() {
   );
   server.tool(
     "mason_automation",
-    "Inspect installed automation and observed host events, or resume/check retained documentation repair evidence across sessions. status is read-only; check saves local baselines and verification reports without editing source or approving advisories. Returns concise results with a full report path. Works without a map.",
+    "Inspect installed automation, observed host events, pending decision records and the notification baseline, or check all retained documentation findings across sessions. status is read-only; check saves local baselines and verification reports without editing source, approving advisories or consuming pending completion notices. Returns concise results with a full report path. Works without a map.",
     {
-      dir: z24.string().describe("Absolute path to the project directory"),
-      action: z24.enum(["status", "check"]).describe("Inspect configuration and receipts, or capture/resume and verify original audit evidence.")
+      dir: z26.string().describe("Absolute path to the project directory"),
+      action: z26.enum(["status", "check"]).describe("Inspect configuration and receipts, or capture/resume and verify original audit evidence.")
     },
     async ({ dir, action }) => ({ content: [{ type: "text", text: await masonAutomation(dir, action) }] })
   );
@@ -9867,10 +10224,10 @@ function createMcpServer() {
     "mason_repair",
     "Track documentation repairs against original audit evidence. prepare saves a local baseline and returns a scoped work order; verify reads that baseline and reports resolved, unresolved, review-required, unverified, and new findings. Suppressed advisories remain unresolved. Does not edit documentation or approve decisions. No map required.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      action: z24.enum(["prepare", "verify"]),
-      baselinePath: z24.string().optional().describe("Original baseline path returned by prepare; required for verify."),
-      checks: z24.array(z24.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"])).min(1).optional().describe("Optional audit check subset for prepare. Verification always uses the original checks.")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      action: z26.enum(["prepare", "verify"]),
+      baselinePath: z26.string().optional().describe("Original baseline path returned by prepare; required for verify."),
+      checks: z26.array(z26.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"])).min(1).optional().describe("Optional audit check subset for prepare. Verification always uses the original checks.")
     },
     async ({ dir, action, baselinePath, checks }) => {
       const result = await masonRepair(dir, { action, baselinePath, checks });
@@ -9880,15 +10237,15 @@ function createMcpServer() {
   server.tool(
     "review_advisory",
     "Prepare an assessment of an original repair advisory and its exact repository scope, then record authorized addressed, inapplicable or deferred outcomes with reviewToken, reviewer and note. Relevant changes reopen reviews; unrelated commits preserve them. Records belong in Git. Decision findings route to review_decision; this tool never approves decisions. Recorded identities are assertions, not authenticated approvals. For dependency advisories, action dismiss with reasonCode and note records a one-step dismissal without a token or reviewer. no-dependency-claims reopens only on document content changes; unrelated-manifest-change also tracks scoped manifests.",
-    { dir: z24.string().describe("Absolute path to the project root"), ...advisoryReviewRequest.shape },
+    { dir: z26.string().describe("Absolute path to the project root"), ...advisoryReviewRequest.shape },
     async ({ dir, ...request }) => ({ content: [{ type: "text", text: await masonReviewAdvisory(dir, request) }] })
   );
   server.tool(
     "mason_complete_init",
     "Record assistant instruction setup locally in ignored .mason/local/project.json, with feature settings in shared .mason/config.json. Other tools work without this marker. Repeated calls preserve the original setup time and existing settings; pass confluenceConfigured only to change that setting.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      confluenceConfigured: z24.boolean().optional().describe("Set the Confluence setup status; omit to preserve the existing value")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      confluenceConfigured: z26.boolean().optional().describe("Set the Confluence setup status; omit to preserve the existing value")
     },
     async ({ dir, confluenceConfigured }) => {
       const result = await masonCompleteInit(dir, { confluenceConfigured });
@@ -9899,11 +10256,11 @@ function createMcpServer() {
     "mason_set_confluence",
     "Configure Confluence credentials. Two-step flow: (1) call without `spaceKey` to validate the credentials and receive a list of available spaces \u2014 relay them to the user. (2) call again with the same `baseUrl`/`email`/`apiToken` plus the chosen `spaceKey` to persist. Credentials are stored in `~/.mason/config.json`. Warn the user that the API token will be visible in chat history before they paste it.",
     {
-      baseUrl: z24.string().describe("Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically)."),
-      email: z24.string().describe("User's Atlassian account email"),
-      apiToken: z24.string().describe("API token from id.atlassian.com/manage-profile/security/api-tokens"),
-      spaceKey: z24.string().optional().describe("Confluence space key. Omit on the first call to list available spaces."),
-      parentPageId: z24.string().optional().describe("Optional parent page ID under which Mason's index page is created")
+      baseUrl: z26.string().describe("Confluence base URL. Accepts `acme`, `acme.atlassian.net`, or `https://acme.atlassian.net` (normalized automatically)."),
+      email: z26.string().describe("User's Atlassian account email"),
+      apiToken: z26.string().describe("API token from id.atlassian.com/manage-profile/security/api-tokens"),
+      spaceKey: z26.string().optional().describe("Confluence space key. Omit on the first call to list available spaces."),
+      parentPageId: z26.string().optional().describe("Optional parent page ID under which Mason's index page is created")
     },
     async ({ baseUrl, email, apiToken, spaceKey, parentPageId }) => {
       const result = await masonSetConfluence({
@@ -9920,7 +10277,7 @@ function createMcpServer() {
     "full_analysis",
     "One-shot orientation for a project WITHOUT a concept map (get_snapshot returned exists:false). Returns git history stats, project structure with file counts, curated code sample previews (~60 lines each), and test-to-source mapping. On a mapped project, prefer get_snapshot \u2014 it is cheaper and answers feature/architecture questions directly.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z26.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await fullAnalysis(dir);
@@ -9933,7 +10290,7 @@ function createMcpServer() {
     "analyze_project",
     "Run git history analysis on a codebase. Returns commit convention patterns, stale directories, and frequently changed files. These are aggregate stats across hundreds of commits that would be expensive to compute manually.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z26.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await analyzeProject(dir);
@@ -9946,8 +10303,8 @@ function createMcpServer() {
     "get_code_samples",
     "Get previews (first ~60 lines) of representative source files from the codebase. Includes entry points, config files, hot files (frequently changed), test examples, and one file per directory for breadth. Read files natively for full content.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      count: z24.number().optional().default(15).describe("Maximum number of files to sample (default: 15)")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      count: z26.number().optional().default(15).describe("Maximum number of files to sample (default: 15)")
     },
     async ({ dir, count: count4 }) => {
       const result = await getCodeSamples(dir, count4);
@@ -9960,7 +10317,7 @@ function createMcpServer() {
     "get_snapshot",
     "Return the optional feature-to-file architecture map with drift and trust evidence. Map verification is rechecked against sampled source contents; stale or unknown verification requires a fresh review, and recordedVerdict preserves the historical verdict. If no map exists, returns exists:false plus project structure, Git signals, and test pairs. Decision capture, get_context, and get_impact still work. No initialization required.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z26.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await getSnapshot(dir);
@@ -9973,9 +10330,9 @@ function createMcpServer() {
     "get_context",
     "Assemble task context: matching decisions with rationale, approval, owner, sources, last review, and freshness, plus related tests, file impact, and any available map entries. Map verification is rechecked against sampled source contents; stale or unknown verification requires a fresh review, and recordedVerdict preserves the historical verdict. Proposals are suggestions; legacy records are unreviewed; accepted decisions are constraints subject to freshness. No initialization or map required. Pass task and optional files. map.status and diagnostics preserve missing or invalid knowledge. Impact covers up to three unique files, expanding directory anchors.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      task: z24.string().describe("The task, bug, or change request in natural language \u2014 e.g. 'add rate limiting to the API client' or a ticket description"),
-      files: z24.array(z24.string()).optional().describe("Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      task: z26.string().describe("The task, bug, or change request in natural language \u2014 e.g. 'add rate limiting to the API client' or a ticket description"),
+      files: z26.array(z26.string()).optional().describe("Optional file paths already known to be involved (e.g. from a diff or stack trace). Entries containing them are boosted above pure text matches.")
     },
     async ({ dir, task, files }) => {
       const result = await getContext(dir, task, files);
@@ -9991,10 +10348,10 @@ function createMcpServer() {
     "generate_snapshot_batch",
     "Map step of the concept-map build. Returns one batch of source files (skeletons of every file in the batch plus a few deeper-read bodies for grounding), along with a system prompt instructing you to derive features and flows for ONLY this batch. Call repeatedly with the returned `nextOffset` until it is null, calling `save_partial_snapshot` between each call. Use product-natural feature names so partials merge cleanly in the reduce step.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      offset: z24.number().int().optional().describe("0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls."),
-      batchSize: z24.number().int().optional().describe("Files per batch. Defaults to 50."),
-      files: z24.array(z24.string()).optional().describe("Scope the batch walk to this explicit file list \u2014 e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh mode: reduce_snapshot will merge the partials into the existing map instead of rebuilding it.")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      offset: z26.number().int().optional().describe("0-indexed file offset to start the batch at. Omit on the first call; pass the `nextOffset` from the previous response for subsequent calls."),
+      batchSize: z26.number().int().optional().describe("Files per batch. Defaults to 50."),
+      files: z26.array(z26.string()).optional().describe("Scope the batch walk to this explicit file list \u2014 e.g. the drift set from mason_check_drift (changedFiles + unmappedFiles). Pass the SAME list on every batch call of one refresh run. Triggers refresh mode: reduce_snapshot will merge the partials into the existing map instead of rebuilding it.")
     },
     async ({ dir, offset, batchSize, files }) => {
       const result = await generateSnapshotBatch(dir, offset, batchSize, files);
@@ -10007,23 +10364,23 @@ function createMcpServer() {
     "save_partial_snapshot",
     "Persist the partial concept map you derived for one batch. Call this once per batch, with the `batchId` from the `generate_snapshot_batch` response. Partials accumulate in `.mason/partial-snapshots/` and are merged in the reduce step.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      batchId: z24.string().describe("The `batchId` returned by `generate_snapshot_batch`."),
-      offset: z24.number().int().describe("The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step."),
-      features: z24.record(
-        z24.object({
-          description: z24.string(),
-          files: z24.array(z24.string()),
-          tests: z24.array(z24.string()).optional(),
-          type: z24.enum(["capability", "infrastructure"]).optional().describe(
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      batchId: z26.string().describe("The `batchId` returned by `generate_snapshot_batch`."),
+      offset: z26.number().int().describe("The `offset` returned by `generate_snapshot_batch`. Used to order partials in the reduce step."),
+      features: z26.record(
+        z26.object({
+          description: z26.string(),
+          files: z26.array(z26.string()),
+          tests: z26.array(z26.string()).optional(),
+          type: z26.enum(["capability", "infrastructure"]).optional().describe(
             '"capability" (user-facing functionality) or "infrastructure" (internal plumbing with no end user \u2014 DI/service wiring, config, logging, adapters). Defaults to "capability".'
           )
         })
       ).describe("Partial features for this batch only \u2014 files outside the batch will be added by other partials."),
-      flows: z24.record(
-        z24.object({
-          description: z24.string(),
-          chain: z24.array(z24.string())
+      flows: z26.record(
+        z26.object({
+          description: z26.string(),
+          chain: z26.array(z26.string())
         })
       ).describe("Partial flows whose entire chain is in this batch. Cross-batch flows are reconstructed in reduce.")
     },
@@ -10038,7 +10395,7 @@ function createMcpServer() {
     "reduce_snapshot",
     "Reduce step of the concept-map build. Returns every partial snapshot plus a system prompt asking you to merge them into one coherent project-wide map. Resolve platform variants into single product features, dedupe near-duplicates, and ensure no file is dropped. After producing the unified map, call `save_snapshot` to persist it (this also clears the partials).",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z26.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await reduceSnapshot(dir);
@@ -10051,25 +10408,25 @@ function createMcpServer() {
     "save_snapshot",
     "Save a concept-to-files map as a persistent project snapshot. Maps feature names and data flows to the files that implement them. Persists across conversations \u2014 future sessions can call get_snapshot to instantly find relevant files. No API key needed \u2014 you are the LLM generating the map.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      features: z24.record(
-        z24.object({
-          description: z24.string().describe("One-line description of the feature"),
-          files: z24.array(z24.string()).describe("File paths that implement this feature"),
-          tests: z24.array(z24.string()).optional().describe("Test file paths for this feature"),
-          type: z24.enum(["capability", "infrastructure"]).optional().describe(
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      features: z26.record(
+        z26.object({
+          description: z26.string().describe("One-line description of the feature"),
+          files: z26.array(z26.string()).describe("File paths that implement this feature"),
+          tests: z26.array(z26.string()).optional().describe("Test file paths for this feature"),
+          type: z26.enum(["capability", "infrastructure"]).optional().describe(
             'Classification: "capability" for user-facing functionality, "infrastructure" for internal plumbing with no end user (DI/service wiring, config, logging, adapters). Capabilities are published to Confluence; infrastructure stays in the AI concept map only. Defaults to "capability".'
           )
         })
       ).describe("Map of feature names to their implementing files"),
-      flows: z24.record(
-        z24.object({
-          description: z24.string().describe("One-line description of the flow"),
-          chain: z24.array(z24.string()).describe("Ordered list of file paths showing data/call flow")
+      flows: z26.record(
+        z26.object({
+          description: z26.string().describe("One-line description of the flow"),
+          chain: z26.array(z26.string()).describe("Ordered list of file paths showing data/call flow")
         })
       ).describe("Map of flow names to ordered file chains"),
-      removeFeatures: z24.array(z24.string()).optional().describe("Feature names to delete from the existing map \u2014 for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves."),
-      removeFlows: z24.array(z24.string()).optional().describe("Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.")
+      removeFeatures: z26.array(z26.string()).optional().describe("Feature names to delete from the existing map \u2014 for features that were renamed or no longer exist. Applied before merging; only meaningful on incremental saves."),
+      removeFlows: z26.array(z26.string()).optional().describe("Flow names to delete from the existing map. Applied before merging; only meaningful on incremental saves.")
     },
     async ({ dir, features, flows, removeFeatures, removeFlows }) => {
       const result = await saveSnapshotData(
@@ -10086,19 +10443,19 @@ function createMcpServer() {
   );
   server.tool(
     "save_decision",
-    "Capture or revise a decision proposal with rationale, anchors, optional owner, sources, and a known actor. Compare matching get_context records and pending proposals before saving. When new evidence changes the same lesson's assumptions, scope, or recommended action, pass its existing id, including for accepted records. Preserve supported rationale and sources and replace obsolete instructions. Create a new record for a genuinely distinct lesson; skip unchanged restatements. No setup or map required. Writes a local record and preserves content history. Changes create a pending proposal while the last accepted revision remains operative; unchanged content does not re-verify or refresh it. Use review_decision for authorized acceptance or reaffirmation. A proposal cannot supersede a record with an operative accepted revision; review its replacement and retire the original separately.",
+    "Capture or revise a decision proposal as soon as the lesson is supported by evidence, without waiting for implementation or merge. Keep unimplemented remedies tentative. Include rationale, anchors, optional owner, sources, and a known actor. Compare matching get_context records and pending proposals before saving. When new evidence changes the same lesson's assumptions, scope, or recommended action, pass its existing id, including for accepted records. Preserve supported rationale and sources and replace obsolete instructions. Create a new record for a genuinely distinct lesson; skip unchanged restatements. No setup or map required. Writes a local record and preserves content history. Changes create a pending proposal while the last accepted revision remains operative; unchanged content does not re-verify or refresh it. Use review_decision for authorized acceptance or reaffirmation. A proposal cannot supersede a record with an operative accepted revision; review its replacement and retire the original separately.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
+      dir: z26.string().describe("Absolute path to the project root directory"),
       title: decisionTitleSchema.describe(`Short, specific headline (max ${TITLE_MAX_CHARS} characters). Generates a stable id on creation; revising the title keeps the existing id.`),
       body: decisionBodySchema.describe(`The knowledge itself: what was tried/decided, why, and what to avoid. Must contain information NOT derivable by reading the code. Aim for ${BODY_RECOMMENDED_CHARS} characters or fewer; up to ${BODY_MAX_CHARS} is accepted with a warning above the target. Matching context and hooks include the full body. Preserve exceptions; use sources for supporting references.`),
-      category: z24.enum(["decision", "gotcha", "deprecation", "convention"]),
-      files: z24.array(z24.string()).optional().describe("Repo-relative files or directory prefixes this applies to. Matching is shared by retrieval, hooks, review, and drift checking; changes flag the decision for re-verification."),
-      id: z24.string().optional().describe("Pass the matching record's existing id when evidence changes that lesson's assumptions, scope, or recommended action, including for accepted records. Changed content becomes a proposal while the accepted version remains operative; unchanged content leaves review and freshness untouched."),
-      supersedes: z24.string().optional().describe("Id of an unreviewed record or proposal with no accepted revision to replace. Operative accepted decisions require separate review and retirement."),
+      category: z26.enum(["decision", "gotcha", "deprecation", "convention"]),
+      files: z26.array(z26.string()).optional().describe("Repo-relative files or directory prefixes this applies to. Matching is shared by retrieval, hooks, review, and drift checking; changes flag the decision for re-verification."),
+      id: z26.string().optional().describe("Pass the matching record's existing id when evidence changes that lesson's assumptions, scope, or recommended action, including for accepted records. Changed content becomes a proposal while the accepted version remains operative; unchanged content leaves review and freshness untouched."),
+      supersedes: z26.string().optional().describe("Id of an unreviewed record or proposal with no accepted revision to replace. Operative accepted decisions require separate review and retirement."),
       owner: attributionSchema.shape.owner.describe("Responsible person or team, when known. Null clears it. Required for acceptance."),
       sources: attributionSchema.shape.sources.describe("Known PR, issue, incident, discussion, or document references. Omit to preserve; [] clears. At least one is required for acceptance."),
       actor: attributionSchema.shape.actor.describe("Known person or agent recording this revision. Omit if unknown; do not infer from Git identity."),
-      force: z24.boolean().optional().describe("Save even when a near-duplicate was detected")
+      force: z26.boolean().optional().describe("Save even when a near-duplicate was detected")
     },
     async ({ dir, title, body, category, files, id, supersedes, force, owner, sources, actor }) => {
       const result = await saveDecision(dir, {
@@ -10120,12 +10477,12 @@ function createMcpServer() {
     "review_decision",
     "Prepare a decision review: returns the full record and history, any operative accepted revision, provenance, changes and previews for both sets of anchors, and a reviewToken. Then record accept, reaffirm, or retire with that token, the authorized reviewer, and a reason. Acceptance replaces the operative revision; retirement withdraws the entire record including its proposal. Acceptance requires owner, source, readable Git HEAD, and committed anchor changes. Changed records or code invalidate the token. Identities and approvals are recorded assertions for normal PR review, not authenticated proof.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      id: z24.string().regex(/^[a-zA-Z0-9_-]+$/).describe("Decision id from get_context or save_decision"),
-      action: z24.enum(["prepare", "accept", "reaffirm", "retire"]).optional().default("prepare").describe("Prepare is read-only. Other actions record an explicitly authorized review."),
-      reviewer: z24.string().trim().min(1).max(200).optional().describe("Identity of the actual reviewer; required for a verdict. Never invent one."),
-      note: z24.string().trim().min(1).max(1500).optional().describe("Review rationale; required for a verdict. Cite evidence for the decision."),
-      reviewToken: z24.string().regex(/^[a-f0-9]{64}$/).optional().describe("Token from the prepared review; rejects stale record or code revisions")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      id: z26.string().regex(/^[a-zA-Z0-9_-]+$/).describe("Decision id from get_context or save_decision"),
+      action: z26.enum(["prepare", "accept", "reaffirm", "retire"]).optional().default("prepare").describe("Prepare is read-only. Other actions record an explicitly authorized review."),
+      reviewer: z26.string().trim().min(1).max(200).optional().describe("Identity of the actual reviewer; required for a verdict. Never invent one."),
+      note: z26.string().trim().min(1).max(1500).optional().describe("Review rationale; required for a verdict. Cite evidence for the decision."),
+      reviewToken: z26.string().regex(/^[a-f0-9]{64}$/).optional().describe("Token from the prepared review; rejects stale record or code revisions")
     },
     async ({ dir, ...input }) => {
       const result = await reviewDecision2(dir, input);
@@ -10136,7 +10493,7 @@ function createMcpServer() {
     "mason_check_drift",
     "Check how far the concept map has drifted from HEAD. Deterministic (git + filesystem, no LLM). Returns which features/flows are stale and the changed files behind them, new source files not yet mapped, ghost files (mapped but deleted), renames, and a `recommendation`: `up-to-date` (nothing to do), `incremental` (update just the stale entries via save_snapshot), or `full-rebuild` (re-run the Map-Reduce build). Call this before trusting the map in a long session, or periodically to keep the map and any synced wikis fresh.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory")
+      dir: z26.string().describe("Absolute path to the project root directory")
     },
     async ({ dir }) => {
       const result = await checkDrift(dir);
@@ -10149,8 +10506,8 @@ function createMcpServer() {
     "verify_snapshot",
     "Spot-check the concept map's CORRECTNESS (drift checks freshness; this checks entries were right to begin with). Returns a sample of entries \u2014 always the never-verified and least-recently-verified first \u2014 with skeletons of their claimed files, for you to judge whether the files actually implement what the entry claims. Report verdicts back via save_verification with each entry\u2019s kind and reviewToken. Tokens bind the entry and bounded source evidence; changed evidence requires a fresh review. Run periodically, or after an automated refresh wrote entries no human reviewed.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      sample: z24.number().int().optional().describe("Entries to sample (default 5)")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      sample: z26.number().int().optional().describe("Entries to sample (default 5)")
     },
     async ({ dir, sample }) => {
       const result = await verifySnapshot(dir, sample);
@@ -10161,13 +10518,13 @@ function createMcpServer() {
     "save_verification",
     "Record verify_snapshot verdicts using each entry\u2019s kind and reviewToken. Missing tokens request a fresh review; changed or deleted entries return conflicts without being stamped. Entries judged ok are stamped verifiedAt; failures are flagged verificationFailed with your note and surface in get_context, get_snapshot, and mason_check_drift until corrected. Verdict notes are required for failures.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      verdicts: z24.record(
-        z24.object({
-          kind: z24.enum(["feature", "flow"]).optional().describe("Entry kind returned by verify_snapshot; required to record a verdict"),
-          reviewToken: z24.string().optional().describe("Copy the reviewToken from verify_snapshot after inspecting its evidence; required to record a verdict"),
-          ok: z24.boolean(),
-          note: z24.string().optional().describe("One line on what's wrong \u2014 required when ok is false")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      verdicts: z26.record(
+        z26.object({
+          kind: z26.enum(["feature", "flow"]).optional().describe("Entry kind returned by verify_snapshot; required to record a verdict"),
+          reviewToken: z26.string().optional().describe("Copy the reviewToken from verify_snapshot after inspecting its evidence; required to record a verdict"),
+          ok: z26.boolean(),
+          note: z26.string().optional().describe("One line on what's wrong \u2014 required when ok is false")
         })
       ).describe("Entry name \u2192 verdict, exactly as returned by verify_snapshot")
     },
@@ -10180,8 +10537,8 @@ function createMcpServer() {
     "get_impact",
     "Trace historical co-change partners, related tests, and references with evidence: resolved imports, explicit paths, or uncertain name candidates. Candidates are not proven dependencies. Deterministic and read-only; no initialization or concept map required.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      files: z24.array(z24.string()).describe("File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      files: z26.array(z26.string()).describe("File paths or names to analyze (e.g., ['WeatherRepository.kt'] or ['src/services/auth.ts'])")
     },
     async ({ dir, files }) => {
       const result = await getImpact(dir, files);
@@ -10194,12 +10551,12 @@ function createMcpServer() {
     "export_to_confluence",
     "Sync the project's concept map to Confluence as product-readable wiki pages: an index page, one page per feature (PM-language descriptions, no file paths), and a changelog page. Mason replaces managed page bodies; manual edits to those bodies are overwritten. Requires `mason_set_confluence` to have been called first.",
     {
-      dir: z24.string().describe("Absolute path to the project root directory"),
-      spaceKey: z24.string().optional().describe("Override the configured space key"),
-      parentPageId: z24.string().optional().describe("Override the configured parent page ID"),
-      indexPageTitle: z24.string().optional().describe("Title of the index page (default: 'Mason \u2014 System Map')"),
-      changelogPageTitle: z24.string().optional().describe("Title of the changelog page (default: 'Mason \u2014 Changelog')"),
-      featurePagePrefix: z24.string().optional().describe("Prefix for each feature page title (default: 'Feature: ')")
+      dir: z26.string().describe("Absolute path to the project root directory"),
+      spaceKey: z26.string().optional().describe("Override the configured space key"),
+      parentPageId: z26.string().optional().describe("Override the configured parent page ID"),
+      indexPageTitle: z26.string().optional().describe("Title of the index page (default: 'Mason \u2014 System Map')"),
+      changelogPageTitle: z26.string().optional().describe("Title of the changelog page (default: 'Mason \u2014 Changelog')"),
+      featurePagePrefix: z26.string().optional().describe("Prefix for each feature page title (default: 'Feature: ')")
     },
     async ({ dir, spaceKey, parentPageId, indexPageTitle, changelogPageTitle, featurePagePrefix }) => {
       const result = await exportToConfluenceTool(dir, {
@@ -10224,32 +10581,32 @@ async function startMcpServer(onClose) {
 // src/distribution/updates.ts
 init_store();
 init_storage();
-import fs33 from "fs/promises";
+import fs34 from "fs/promises";
 import path42 from "path";
 import { spawn as spawn3 } from "child_process";
 import { randomUUID as randomUUID11 } from "crypto";
-import { z as z30 } from "zod";
+import { z as z32 } from "zod";
 
 // src/distribution/state.ts
 init_storage();
 import os5 from "os";
 import path38 from "path";
 import { fileURLToPath } from "url";
-import fs28 from "fs/promises";
-import { z as z26 } from "zod";
+import fs29 from "fs/promises";
+import { z as z28 } from "zod";
 
 // src/distribution/path.ts
-import fs27 from "fs/promises";
+import fs28 from "fs/promises";
 import os4 from "os";
 import path37 from "path";
 import { execFile as execFile12 } from "child_process";
 import { promisify as promisify12 } from "util";
 import { createHash as createHash7, randomUUID as randomUUID7 } from "crypto";
-import { z as z25 } from "zod";
+import { z as z27 } from "zod";
 var execute2 = promisify12(execFile12);
-var pathChangeSchema = z25.discriminatedUnion("kind", [
-  z25.object({ kind: z25.literal("profile"), file: z25.string(), block: z25.string(), created: z25.boolean() }),
-  z25.object({ kind: z25.literal("windows"), entry: z25.string(), created: z25.boolean() })
+var pathChangeSchema = z27.discriminatedUnion("kind", [
+  z27.object({ kind: z27.literal("profile"), file: z27.string(), block: z27.string(), created: z27.boolean() }),
+  z27.object({ kind: z27.literal("windows"), entry: z27.string(), created: z27.boolean() })
 ]);
 var quote = (s) => "'" + s.replace(/'/g, "'\\''") + "'";
 async function configurePath(bin, previous, save, options = {}) {
@@ -10286,7 +10643,7 @@ ${alreadyOnPath ? "" : `Add ${bin} to your PATH.
     else {
       const candidates = [".bash_profile", ".bash_login", ".profile"].map((name) => path37.join(userHome, name));
       let login = candidates[2];
-      for (const file of candidates) if (await fs27.lstat(file).then(() => true, (error) => {
+      for (const file of candidates) if (await fs28.lstat(file).then(() => true, (error) => {
         if (error.code === "ENOENT") return false;
         throw error;
       })) {
@@ -10297,12 +10654,12 @@ ${alreadyOnPath ? "" : `Add ${bin} to your PATH.
     }
     const marker = `# >>> mason PATH ${createHash7("sha256").update(bin).digest("hex").slice(0, 12)} >>>`;
     for (const profile of profiles2) {
-      const stat = await fs27.lstat(profile).catch((error) => {
+      const stat = await fs28.lstat(profile).catch((error) => {
         if (error.code === "ENOENT") return null;
         throw error;
       });
-      const file = stat?.isSymbolicLink() ? await fs27.realpath(profile) : path37.resolve(profile);
-      const original = await fs27.readFile(file).catch((error) => {
+      const file = stat?.isSymbolicLink() ? await fs28.realpath(profile) : path37.resolve(profile);
+      const original = await fs28.readFile(file).catch((error) => {
         if (error.code === "ENOENT" && !stat) return null;
         throw error;
       });
@@ -10317,8 +10674,8 @@ ${alreadyOnPath ? "" : `Add ${bin} to your PATH.
         changes.push({ kind: "profile", file, block, created: original === null });
         await save(changes);
       }
-      await fs27.mkdir(path37.dirname(file), { recursive: true });
-      const handle = await fs27.open(file, original === null ? "ax+" : "a+", 384);
+      await fs28.mkdir(path37.dirname(file), { recursive: true });
+      const handle = await fs28.open(file, original === null ? "ax+" : "a+", 384);
       try {
         if (!(await handle.readFile()).equals(original ?? Buffer.alloc(0))) throw new Error(`Shell profile changed during installation: ${profile}`);
         await handle.writeFile(block);
@@ -10369,32 +10726,32 @@ try {
 }
 
 // src/distribution/state.ts
-var releaseVersion = z26.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/);
-var bundleId = z26.string().regex(/^[a-f0-9]{24}$/);
-var updatePolicySchema = z26.object({
-  enabled: z26.boolean(),
-  revision: z26.string(),
+var releaseVersion = z28.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/);
+var bundleId = z28.string().regex(/^[a-f0-9]{24}$/);
+var updatePolicySchema = z28.object({
+  enabled: z28.boolean(),
+  revision: z28.string(),
   pinnedVersion: releaseVersion.optional(),
-  mirror: z26.string().optional()
+  mirror: z28.string().optional()
 });
-var recordSchema3 = z26.object({
-  format: z26.literal(1),
-  home: z26.string(),
-  bin: z26.string(),
+var recordSchema3 = z28.object({
+  format: z28.literal(1),
+  home: z28.string(),
+  bin: z28.string(),
   current: bundleId,
   version: releaseVersion,
-  launchers: z26.record(z26.string()),
-  previousLaunchers: z26.record(z26.string()).optional(),
-  pathChanges: z26.array(pathChangeSchema).optional(),
+  launchers: z28.record(z28.string()),
+  previousLaunchers: z28.record(z28.string()).optional(),
+  pathChanges: z28.array(pathChangeSchema).optional(),
   updates: updatePolicySchema.optional(),
-  previous: z26.object({ id: bundleId, version: releaseVersion }).optional(),
-  pending: z26.object({ id: bundleId, version: releaseVersion, policyRevision: z26.string() }).optional()
+  previous: z28.object({ id: bundleId, version: releaseVersion }).optional(),
+  pending: z28.object({ id: bundleId, version: releaseVersion, policyRevision: z28.string() }).optional()
 });
 async function readInstallation(home) {
   const raw = await readStoreJson(home, "install.json");
   if (!raw) throw new Error("Run this command from a standalone installation. npm users can upgrade with npm.");
   const record = recordSchema3.parse(raw);
-  if (record.home !== await fs28.realpath(home)) throw new Error("Invalid standalone installation receipt.");
+  if (record.home !== await fs29.realpath(home)) throw new Error("Invalid standalone installation receipt.");
   return record;
 }
 function standaloneLocation() {
@@ -10426,22 +10783,22 @@ function newerStableVersion(candidate, installed) {
 
 // src/distribution/bundle.ts
 init_storage();
-import fs29 from "fs/promises";
+import fs30 from "fs/promises";
 import path39 from "path";
 import { createHash as createHash8 } from "crypto";
-import { z as z27 } from "zod";
+import { z as z29 } from "zod";
 var targets = ["darwin-arm64", "darwin-x64", "linux-arm64", "linux-x64", "win32-arm64", "win32-x64"];
-var digest2 = z27.string().regex(/^[a-f0-9]{64}$/);
-var bundleSchema = z27.object({
-  format: z27.literal(1),
-  version: z27.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
-  target: z27.enum(targets),
-  nodeVersion: z27.string(),
-  files: z27.record(digest2)
+var digest2 = z29.string().regex(/^[a-f0-9]{64}$/);
+var bundleSchema = z29.object({
+  format: z29.literal(1),
+  version: z29.string().regex(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/),
+  target: z29.enum(targets),
+  nodeVersion: z29.string(),
+  files: z29.record(digest2)
 }).strict();
 var sha256 = (bytes) => createHash8("sha256").update(bytes).digest("hex");
 async function readBundle(root) {
-  const bytes = await fs29.readFile(await storePath(root, "bundle.json"));
+  const bytes = await fs30.readFile(await storePath(root, "bundle.json"));
   const manifest = bundleSchema.parse(JSON.parse(bytes.toString("utf8")));
   const windows = manifest.target.startsWith("win32-");
   for (const file of Object.keys(manifest.files)) {
@@ -10449,7 +10806,7 @@ async function readBundle(root) {
       throw new Error("Unsafe path in Mason bundle: " + file);
     }
   }
-  for (const required of [windows ? "node.exe" : "node", "app/package.json", "app/dist/mason.js", "app/dist/mason-auto.js", "app/dist/mason-mcp.js"]) {
+  for (const required of [windows ? "node.exe" : "node", "app/package.json", "app/dist/mason.js", "app/dist/mason-mcp.js"]) {
     if (!manifest.files[required]) throw new Error("Incomplete Mason bundle: " + required);
   }
   return { manifest, manifestHash: sha256(bytes) };
@@ -10460,7 +10817,7 @@ async function verifyBundle(root, expectedHash) {
   if (bundle.manifest.target !== `${process.platform}-${process.arch}`) throw new Error("Mason bundle is for another platform. Install this platform's bundle and rerun setup.");
   const files = Object.keys(bundle.manifest.files);
   for (let i = 0; i < files.length; i += 8) await Promise.all(files.slice(i, i + 8).map(async (file) => {
-    if (sha256(await fs29.readFile(await storePath(root, file))) !== bundle.manifest.files[file]) throw new Error("Mason bundle checksum mismatch: " + file);
+    if (sha256(await fs30.readFile(await storePath(root, file))) !== bundle.manifest.files[file]) throw new Error("Mason bundle checksum mismatch: " + file);
   }));
   return bundle;
 }
@@ -10468,16 +10825,21 @@ async function verifyBundle(root, expectedHash) {
 // src/distribution/runtime.ts
 init_store();
 init_storage();
-import fs30 from "fs/promises";
+import fs31 from "fs/promises";
 import { unlinkSync } from "fs";
 import os6 from "os";
 import path40 from "path";
 import { randomUUID as randomUUID8 } from "crypto";
-import { z as z28 } from "zod";
-var leaseSchema = z28.object({ pid: z28.number().int().positive(), host: z28.string(), bundle: z28.string().regex(/^[a-f0-9]{24}$/) });
+import { z as z30 } from "zod";
+
+// src/distribution/trust.ts
+import tls from "tls";
+
+// src/distribution/runtime.ts
+var leaseSchema = z30.object({ pid: z30.number().int().positive(), host: z30.string(), bundle: z30.string().regex(/^[a-f0-9]{24}$/) });
 
 // src/distribution/install.ts
-import fs32 from "fs/promises";
+import fs33 from "fs/promises";
 import os8 from "os";
 import path41 from "path";
 import { execFile as execFile13, spawn as spawn2 } from "child_process";
@@ -10488,14 +10850,14 @@ init_store();
 
 // src/distribution/sessions.ts
 init_storage();
-import fs31 from "fs/promises";
+import fs32 from "fs/promises";
 import os7 from "os";
 import { randomUUID as randomUUID9 } from "crypto";
-import { z as z29 } from "zod";
-var leaseSchema2 = z29.object({ pid: z29.number().int().positive(), host: z29.string() });
+import { z as z31 } from "zod";
+var leaseSchema2 = z31.object({ pid: z31.number().int().positive(), host: z31.string() });
 async function hasRunningMcp(home) {
-  const directory = await storePath(home, "sessions");
-  const files = await fs31.readdir(directory).catch((error) => {
+  const directory2 = await storePath(home, "sessions");
+  const files = await fs32.readdir(directory2).catch((error) => {
     if (error.code === "ENOENT") return [];
     throw error;
   });
@@ -10513,7 +10875,7 @@ async function hasRunningMcp(home) {
       } catch (error) {
         if (error.code !== "ESRCH") return true;
       }
-      await fs31.rm(await storePath(home, relative), { force: true });
+      await fs32.rm(await storePath(home, relative), { force: true });
     } catch {
       return true;
     }
@@ -10524,7 +10886,7 @@ async function registerMcp(home) {
   const name = `sessions/${randomUUID9()}.json`;
   await writeStoreJson(home, name, { pid: process.pid, host: os7.hostname() });
   return async () => {
-    await fs31.rm(await storePath(home, name), { force: true }).catch(() => {
+    await fs32.rm(await storePath(home, name), { force: true }).catch(() => {
     });
   };
 }
@@ -10537,10 +10899,10 @@ var launcherNames = ["mason", "mason.cmd", "mason.ps1", "mason-launcher.ps1"];
 async function replace(file, content2, mode = 384) {
   const temp = file + ".tmp-" + randomUUID10();
   try {
-    await fs32.writeFile(temp, content2, { mode, flag: "wx" });
-    await fs32.rename(temp, file);
+    await fs33.writeFile(temp, content2, { mode, flag: "wx" });
+    await fs33.rename(temp, file);
   } finally {
-    await fs32.rm(temp, { force: true });
+    await fs33.rm(temp, { force: true });
   }
 }
 function assertUpdatePolicy(record, version, revision) {
@@ -10552,17 +10914,17 @@ async function installLocked2(home, source, bundle, progress, options, alreadySt
   const raw = await readStoreJson(home, "install.json");
   const previous = raw === null ? null : recordSchema3.parse(raw);
   if (options.stageOnly) assertUpdatePolicy(previous, bundle.manifest.version, options.policyRevision);
-  if (!previous) for (const file of await fs32.readdir(home)) {
+  if (!previous) for (const file of await fs33.readdir(home)) {
     if (file === ".install-lock") continue;
-    const directory = path41.join(home, file);
-    const stat = await fs32.lstat(directory);
-    if (!["versions", "bin"].includes(file) || !stat.isDirectory() || (await fs32.readdir(directory)).length) {
+    const directory2 = path41.join(home, file);
+    const stat = await fs33.lstat(directory2);
+    if (!["versions", "bin"].includes(file) || !stat.isDirectory() || (await fs33.readdir(directory2)).length) {
       throw new Error("Mason installation directory is not empty and has no ownership receipt.");
     }
   }
   const selectedBin = path41.resolve(process.env.MASON_BIN_DIR ?? previous?.bin ?? (process.platform === "win32" ? path41.join(home, "bin") : path41.join(os8.homedir(), ".local/bin")));
-  await fs32.mkdir(selectedBin, { recursive: true });
-  const bin = await fs32.realpath(selectedBin);
+  await fs33.mkdir(selectedBin, { recursive: true });
+  const bin = await fs33.realpath(selectedBin);
   if (previous && (previous.home !== home || previous.bin !== bin)) throw new Error("Installation paths differ from the existing Mason receipt.");
   const id = bundle.manifestHash.slice(0, 24);
   const destination = await storePath(home, "versions/" + id);
@@ -10594,7 +10956,7 @@ exec ${shQuote(path41.join(destination, "node"))} ${shQuote(path41.join(destinat
 ` };
   for (const [name, content2] of Object.entries(launchers)) {
     const file = await storePath(bin, name);
-    const old = await fs32.readFile(file, "utf8").catch((error) => {
+    const old = await fs33.readFile(file, "utf8").catch((error) => {
       if (error.code === "ENOENT") return null;
       throw error;
     });
@@ -10603,7 +10965,7 @@ exec ${shQuote(path41.join(destination, "node"))} ${shQuote(path41.join(destinat
   const retired = Object.entries({ ...previous?.previousLaunchers, ...previous?.launchers }).filter(([name]) => !(name in launchers));
   const checkRetired = async (name, expected) => {
     if (!launcherNames.includes(name)) throw new Error("Invalid owned launcher name.");
-    const actual = await fs32.readFile(await storePath(bin, name), "utf8").catch((error) => {
+    const actual = await fs33.readFile(await storePath(bin, name), "utf8").catch((error) => {
       if (error.code === "ENOENT") return null;
       throw error;
     });
@@ -10638,7 +11000,7 @@ exec ${shQuote(path41.join(destination, "node"))} ${shQuote(path41.join(destinat
     for (const [name, content2] of Object.entries(launchers)) await replace(await storePath(bin, name, true), content2, 493);
     for (const [name, expected] of retired) {
       await checkRetired(name, expected);
-      await fs32.rm(await storePath(bin, name), { force: true });
+      await fs33.rm(await storePath(bin, name), { force: true });
     }
     await writeStoreJson(home, "install.json", receipt);
   } catch (error) {
@@ -10657,7 +11019,7 @@ exec ${shQuote(path41.join(destination, "node"))} ${shQuote(path41.join(destinat
   return { home, bin, version: bundle.manifest.version, previousVersion: previous?.version, path: pathResult };
 }
 async function copyBundle(home, source, destination, bundle) {
-  const exists = await fs32.lstat(destination).then(() => true, (error) => {
+  const exists = await fs33.lstat(destination).then(() => true, (error) => {
     if (error.code === "ENOENT") return false;
     throw error;
   });
@@ -10666,16 +11028,16 @@ async function copyBundle(home, source, destination, bundle) {
     return;
   }
   const stage = await storePath(home, "versions/.install-" + randomUUID10(), true);
-  await fs32.mkdir(stage);
+  await fs33.mkdir(stage);
   try {
     for (const file of ["bundle.json", ...Object.keys(bundle.manifest.files)]) {
       const from = await storePath(source, file), to = await storePath(stage, file, true);
-      await fs32.copyFile(from, to);
-      await fs32.chmod(to, (await fs32.stat(from)).mode & 511);
+      await fs33.copyFile(from, to);
+      await fs33.chmod(to, (await fs33.stat(from)).mode & 511);
     }
     await verifyBundle(stage, bundle.manifestHash);
     try {
-      await fs32.rename(stage, destination);
+      await fs33.rename(stage, destination);
     } catch (error) {
       try {
         await verifyBundle(destination, bundle.manifestHash);
@@ -10684,7 +11046,7 @@ async function copyBundle(home, source, destination, bundle) {
       }
     }
   } finally {
-    await fs32.rm(stage, { recursive: true, force: true });
+    await fs33.rm(stage, { recursive: true, force: true });
   }
 }
 async function prepareStandaloneMcp(home) {
@@ -10722,14 +11084,14 @@ async function prepareStandaloneMcp(home) {
 // src/distribution/updates.ts
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var RELEASE_AGE_MS = 24 * 60 * 60 * 1e3;
-var releaseListSchema = z30.array(z30.object({ tag_name: z30.string(), draft: z30.boolean(), prerelease: z30.boolean(), published_at: z30.string().nullable() }));
-var updateManifestSchema = z30.object({
-  format: z30.literal(1),
-  version: z30.string().regex(/^\d+\.\d+\.\d+$/),
-  publishedAt: z30.string().datetime(),
-  assets: z30.record(z30.string().regex(/^[a-f0-9]{64}$/))
+var releaseListSchema = z32.array(z32.object({ tag_name: z32.string(), draft: z32.boolean(), prerelease: z32.boolean(), published_at: z32.string().nullable() }));
+var updateManifestSchema = z32.object({
+  format: z32.literal(1),
+  version: z32.string().regex(/^\d+\.\d+\.\d+$/),
+  publishedAt: z32.string().datetime(),
+  assets: z32.record(z32.string().regex(/^[a-f0-9]{64}$/))
 }).strict();
-var statusSchema2 = z30.object({ lastAttempt: z30.number(), availableVersion: z30.string().optional(), error: z30.string().optional() });
+var statusSchema2 = z32.object({ lastAttempt: z32.number(), availableVersion: z32.string().optional(), error: z32.string().optional() });
 async function scheduleAutomaticUpdate() {
   try {
     const { home, record } = await currentInstallation();