replume-cli 0.2.3 → 0.2.4

package/dist/cli.js

@@ -1107,22 +1107,33 @@ var PATTERNS2 = [
   // go test
   /^test (\S+) \.\.\. FAILED$/,
   // cargo test
-  /^[ \t]*[×✕] (.+?)(?:[ \t]+\(?\d+(?:\.\d+)?[ \t]?ms\)?)?[ \t]*$/
+  /^[ \t]*[×✕] (.+?)(?:[ \t]+\(?\d+(?:\.\d+)?[ \t]?ms\)?)?[ \t]*$/,
   // vitest / jest
+  // jest without --verbose (more than one test file): only the failure header `● describe › name` names the test
+  // (captured from jest 29.7.0 on 30.10.2026); `● Console` and `● Test suite failed to run` are not tests
+  /^[ \t]*● (?!Console[ \t]*$|Test suite failed to run[ \t]*$)(.+?)[ \t]*$/,
+  // vitest's "Failed Tests" block: ` FAIL  test/cart.test.js > name` (captured from vitest 3.2.4); jest's `FAIL file` suite
+  // line has no ` > ` and is not a test name
+  /^[ \t]*FAIL[ \t]+(\S.*? > .+?)[ \t]*$/
 ];
 var MAX_NAMES = 50;
+var ANSI3 = /\u001b\[[0-9;?]*[A-Za-z]|\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)/g;
+var VITEST_FAIL = PATTERNS2[PATTERNS2.length - 1];
 function failingTestNames(output) {
   const names3 = [];
-  for (const line2 of output.split(/\r?\n/)) {
+  const fullNames = [];
+  for (const line2 of output.replace(ANSI3, "").split(/\r?\n/)) {
     for (const re of PATTERNS2) {
       const m = re.exec(line2);
-      if (m && !names3.includes(m[1])) {
-        names3.push(m[1]);
-        break;
-      }
+      if (!m) continue;
+      if (re === VITEST_FAIL) {
+        if (!fullNames.includes(m[1])) fullNames.push(m[1]);
+      } else if (!names3.includes(m[1])) names3.push(m[1]);
+      break;
     }
     if (names3.length >= MAX_NAMES) break;
   }
+  for (const f of fullNames) if (names3.length < MAX_NAMES && !names3.some((n3) => f === n3 || f.endsWith(` > ${n3}`))) names3.push(f);
   return names3;
 }
 
@@ -1314,6 +1325,300 @@ function matchesAny(path, patterns) {
   return null;
 }
 
+// src/supervisor/layer1.ts
+var TEST_COMMAND = /(?:^|[\s;&|(])(?:(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?test\b|npm\s+t\b|npx\s+(?:vitest|jest|mocha)\b|vitest\b|jest\b|mocha\b|pytest\b|python3?\s+-m\s+(?:pytest|unittest)\b|go\s+test\b|cargo\s+test\b|node\s+--test\b|mvn\s+(?:-\S+\s+)*test\b|gradle\w*\s+test\b|make\s+test\b|rspec\b|phpunit\b|dotnet\s+test\b)/;
+function isTestCommand(command, contractTestCommand) {
+  if (!command) return false;
+  if (contractTestCommand && command.trim() === contractTestCommand.trim()) return true;
+  return TEST_COMMAND.test(command);
+}
+function commandRuns(events) {
+  const runs = [];
+  events.forEach((e, index) => {
+    if (e.type !== "command" || !e.command) return;
+    const raw5 = e.raw ?? {};
+    if (raw5.exitUnknown === true) {
+      runs.push({ index, command: e.command, ok: raw5.ok !== false, exitCode: null, exitUnknown: true });
+      return;
+    }
+    runs.push({ index, command: e.command, ok: raw5.ok !== false, exitCode: raw5.exitCode ?? (raw5.ok === false ? null : 0) });
+  });
+  return runs;
+}
+var lastIndex = (xs, pred) => {
+  for (let i = xs.length - 1; i >= 0; i--) if (pred(xs[i])) return i;
+  return -1;
+};
+var TESTS_PASS = /\b(?:all\s+)?(?:\d+\s+|the\s+)?(?:unit\s+)?tests?\s+(?:now\s+|all\s+|still\s+)?(?:are\s+|is\s+)?(?:now\s+)?(?:pass(?:es|ed|ing)?|green|succeed(?:s|ed)?)\b|\btest\s+suite\s+(?:now\s+)?(?:passes|passed|is\s+green)\b|\bpass(?:es|ing)?\s+all\s+(?:the\s+)?tests\b|\bnpm\s+test\s+(?:now\s+)?(?:passes|passed|succeeds)\b/i;
+var DONE = /\b(?:is|are|now|everything(?:'s| is))\s+(?:done|complete|completed|fixed|working)\b|\b(?:I(?:'ve|\s+have)|has\s+been|have\s+been)\s+(?:implemented|fixed|completed|finished|resolved)\b|\ball\s+done\b|\btask\s+(?:is\s+)?(?:complete|completed|done)\b/i;
+var NEGATION = /\b(?:not|never|no|cannot|can't|couldn't|didn't|don't|doesn't|haven't|hasn't|isn't|aren't|wasn't|weren't|unable|fail(?:s|ed|ing)?|without)\b|n't\b/i;
+var NOTHING_WRONG = /\b(?:0|zero|no|none|without\s+(?:any\s+)?)\s*(?:\w+\s+)?(?:fail(?:s|ed|ures?|ing)?|errors?|regressions?|broken)\b|\bnothing\s+(?:failed|fails|is\s+failing|broke|broken)\b|\b(?:no|without)\s+(?:test\s+)?failures?\b/gi;
+function findClaims(message) {
+  const sentences2 = message.split(/(?<=[.!?])\s+|\n+/).map((s) => s.trim()).filter(Boolean);
+  const denies = (s) => NEGATION.test(s.replace(NOTHING_WRONG, " "));
+  const pick3 = (re) => sentences2.find((s) => re.test(s) && !denies(s)) ?? null;
+  return { testsPass: pick3(TESTS_PASS), done: pick3(DONE) };
+}
+var quote = (s) => {
+  const t = s.replace(/[.!?]+$/, "");
+  return t.length > 160 ? `${t.slice(0, 159)}\u2026` : t;
+};
+function claimVsEvidence(input) {
+  if (input.proposal.kind !== "stop") return null;
+  const { lastAssistantMessage } = input.proposal;
+  const claims = findClaims(lastAssistantMessage);
+  if (!claims.testsPass && !claims.done) return null;
+  const events = input.recent;
+  const contractTest = input.anchor.contract?.test_command;
+  const runs = commandRuns(events).filter((r) => isTestCommand(r.command, contractTest));
+  const lastEdit = lastIndex(events, (e) => e.type === "file_edit");
+  const lastRun = runs.at(-1) ?? null;
+  const lastOk = [...runs].reverse().find((r) => r.ok) ?? null;
+  const editPath = lastEdit >= 0 ? events[lastEdit].paths.join(", ") || "a file" : null;
+  const finding = (rule, claim, fact, reason) => ({
+    layer: "layer1",
+    rule,
+    decision: "steer",
+    message: `Replume: the final message says "${quote(claim)}". ${fact}`,
+    reason
+  });
+  if (claims.testsPass) {
+    if (!runs.length) {
+      return finding("claim_without_evidence", claims.testsPass, "The ledger for this session has no test command that ran.", "tests-pass claim, no test run in session");
+    }
+    if (lastRun && !lastRun.ok) {
+      return finding(
+        "claim_without_evidence",
+        claims.testsPass,
+        `The last test command in this session, \`${lastRun.command}\`, ended with exit code ${lastRun.exitCode ?? "unknown"}.`,
+        "tests-pass claim, last test run failed"
+      );
+    }
+    if (lastOk && lastEdit > lastOk.index) {
+      return finding(
+        "claim_without_evidence",
+        claims.testsPass,
+        `The last successful test run (\`${lastOk.command}\`) was before the last edit (${editPath}).`,
+        "tests-pass claim, edits after the last successful run"
+      );
+    }
+    return null;
+  }
+  if (lastEdit < 0) return null;
+  if (lastRun && lastRun.index > lastEdit && !lastRun.ok) {
+    return finding(
+      "claim_without_evidence",
+      claims.done,
+      `The last test command after the last edit, \`${lastRun.command}\`, ended with exit code ${lastRun.exitCode ?? "unknown"}.`,
+      "done claim, last test run failed"
+    );
+  }
+  const okAfterEdit = runs.some((r) => r.ok && r.index > lastEdit);
+  if (okAfterEdit) return null;
+  if (runs.length) {
+    return finding(
+      "claim_without_evidence",
+      claims.done,
+      `Tests ran earlier in this session (\`${runs.at(-1).command}\`), but no test command succeeded after the last edit (${editPath}).`,
+      "done claim, no successful test run after the last edit"
+    );
+  }
+  if (contractTest) {
+    return finding(
+      "claim_without_evidence",
+      claims.done,
+      `The task contract names the test command \`${contractTest}\`; it did not run in this session.`,
+      "done claim, contract test_command never ran"
+    );
+  }
+  return null;
+}
+function existingRules(input) {
+  if (input.proposal.kind !== "action") return [];
+  const ev = evaluate(input.proposal.action, {
+    contract: input.anchor.contract,
+    history: input.recent,
+    repoRoot: input.repoRoot,
+    scratchDirs: input.scratchDirs,
+    mode: input.mode,
+    baseFailing: input.baseFailing
+  });
+  return ev.hits.map((h) => ({
+    layer: "layer1",
+    rule: h.rule,
+    decision: h.action === "block" ? "block" : "steer",
+    message: h.message,
+    reason: `rule ${h.rule} returned ${h.action}`
+  }));
+}
+function layer1(input) {
+  if (input.proposal.kind === "stop") {
+    if (input.proposal.stopHookActive) return [];
+    if (input.legacyClaim === false) return [];
+    const f = claimVsEvidence(input);
+    return f ? [f] : [];
+  }
+  return existingRules(input);
+}
+
+// src/core/test-counts.ts
+var num = (m) => m ? Number(m[1]) : 0;
+function parseTestCounts(output) {
+  const text = output.replace(/\u001b\[[0-9;?]*[A-Za-z]/g, "");
+  const tests = /^\s*(?:ℹ|#)\s*tests\s+(\d+)\s*$/m.exec(text);
+  if (tests) {
+    const pass = num(/^\s*(?:ℹ|#)\s*pass\s+(\d+)\s*$/m.exec(text));
+    const fail2 = num(/^\s*(?:ℹ|#)\s*fail\s+(\d+)\s*$/m.exec(text));
+    const skipped = num(/^\s*(?:ℹ|#)\s*(?:skipped|skip)\s+(\d+)\s*$/m.exec(text));
+    return { passed: pass, failed: fail2, skipped };
+  }
+  const jest = /^\s*Tests:\s+(.*?)\s+\d+\s+total/m.exec(text);
+  if (jest) return { passed: num(/(\d+)\s+passed/.exec(jest[1])), failed: num(/(\d+)\s+failed/.exec(jest[1])), skipped: num(/(\d+)\s+(?:skipped|todo)/.exec(jest[1])) };
+  const vitest = /^\s*Tests\s{2,}(.*?)\s*\(\d+\)/m.exec(text);
+  if (vitest) return { passed: num(/(\d+)\s+passed/.exec(vitest[1])), failed: num(/(\d+)\s+failed/.exec(vitest[1])), skipped: num(/(\d+)\s+(?:skipped|todo)/.exec(vitest[1])) };
+  const pytest = /^[=\s]*((?:\d+\s+(?:passed|failed|skipped|error|errors|xfailed|xpassed|deselected)(?:,\s*)?)+)\s+in\s+[\d.]+s/m.exec(text);
+  if (pytest) return { passed: num(/(\d+)\s+passed/.exec(pytest[1])), failed: num(/(\d+)\s+(?:failed|errors?)/.exec(pytest[1])), skipped: num(/(\d+)\s+skipped/.exec(pytest[1])) };
+  const cargo = /test result: \w+\.\s+(\d+) passed;\s+(\d+) failed;\s+(\d+) ignored/.exec(text);
+  if (cargo) return { passed: Number(cargo[1]), failed: Number(cargo[2]), skipped: Number(cargo[3]) };
+  return null;
+}
+
+// src/core/commit-gate.ts
+var SEPARATORS = /* @__PURE__ */ new Set([";", "&&", "||", "|", "|&", "&", "(", ")"]);
+var GIT_OPTS_WITH_VALUE = /* @__PURE__ */ new Set(["-c", "-C", "--git-dir", "--work-tree", "--namespace", "--exec-path", "--config-env", "--super-prefix"]);
+function simpleCommands(command) {
+  const groups = [[]];
+  const toks = shellTokens(command);
+  for (let i = 0; i < toks.length; i++) {
+    const t = toks[i];
+    if ("op" in t) {
+      if (SEPARATORS.has(t.op)) groups.push([]);
+      else if (toks[i + 1] && "word" in toks[i + 1]) i++;
+    } else groups[groups.length - 1].push(t.word);
+  }
+  return groups.map((g) => unwrapCommand(g)).filter((g) => g.length);
+}
+var OUTPUT_ONLY = /^(?:--|-q{1,3}|-v{1,3}|-s|--quiet|--verbose|--silent|--no-header|--ci|--colou?rs?|--no-colou?rs?|--colou?rs?=\w+|--tb=\w+|-rA)$/;
+var CWD_COMMANDS = /* @__PURE__ */ new Set(["cd", "pushd", "popd"]);
+var isTestRun = (words6, want) => want.length > 0 && words6.length >= want.length && want.every((w, k) => words6[k] === w) && words6.slice(want.length).every((w) => OUTPUT_ONLY.test(w));
+function segments(command) {
+  const out = [];
+  let words6 = [];
+  const toks = shellTokens(command);
+  for (let i = 0; i < toks.length; i++) {
+    const t = toks[i];
+    if (!("op" in t)) {
+      words6.push(t.word);
+      continue;
+    }
+    if (!SEPARATORS.has(t.op)) {
+      if (toks[i + 1] && "word" in toks[i + 1]) i++;
+      continue;
+    }
+    out.push({ words: unwrapCommand(words6), after: t.op });
+    words6 = [];
+  }
+  out.push({ words: unwrapCommand(words6), after: null });
+  return out.filter((s) => s.words.length || s.after);
+}
+function gateBinding(ran, testCommand) {
+  const want = simpleCommands(testCommand)[0] ?? [];
+  const segs = segments(ran);
+  const hit = segs.findIndex((s) => isTestRun(s.words, want));
+  if (hit < 0 || segs.slice(0, hit).some((s) => CWD_COMMANDS.has(s.words[0] ?? ""))) return "none";
+  const before = segs.slice(0, hit).every((s) => s.after === ";" || s.after === "&&");
+  const after = segs.slice(hit).every((s) => s.after === null || s.after === "&&");
+  return before && after ? "bound" : "masked";
+}
+function gitSubcommand(words6) {
+  if (words6[0]?.split("/").pop() !== "git") return null;
+  let i = 1;
+  while (i < words6.length && words6[i].startsWith("-")) i += GIT_OPTS_WITH_VALUE.has(words6[i]) ? 2 : 1;
+  return words6[i] ?? null;
+}
+function gitPublishVerbs(command) {
+  const out = /* @__PURE__ */ new Set();
+  for (const c of [command, ...innerScripts(command)]) {
+    for (const words6 of simpleCommands(c)) {
+      const sub = gitSubcommand(words6);
+      if (sub === "commit" || sub === "push") out.add(sub);
+    }
+  }
+  return [...out];
+}
+var cursorShell = (e, type) => {
+  const raw5 = e.raw ?? {};
+  return e.agent === "cursor" && e.type === type && raw5.tool_name === "Shell" ? raw5 : null;
+};
+var UNPARSED_SHELL_WRITE = "(a shell command whose write target could not be parsed)";
+function eventWrites(e) {
+  const raw5 = e.raw ?? {};
+  let paths;
+  if (e.type === "file_edit") paths = raw5.ok !== false ? e.paths : [];
+  else if (cursorShell(e, "tool_pre")) {
+    paths = e.action === "block" ? [] : [...Array.isArray(raw5.writes) ? raw5.writes.filter((x) => typeof x === "string") : [], ...raw5.writeNote ? [UNPARSED_SHELL_WRITE] : []];
+  } else paths = commandWrites(e);
+  return paths.filter((p) => !p.startsWith(".replume/"));
+}
+function testRuns(history) {
+  const runs = commandRuns(history).filter((r) => !(history[r.index].agent === "cursor" && history[r.index].raw?.hook_event_name === "beforeShellExecution")).map((r) => ({ ...r, tail: history[r.index].raw?.outputTail }));
+  history.forEach((e, index) => {
+    const raw5 = cursorShell(e, "tool_post");
+    const command = raw5?.tool_input?.command;
+    if (!raw5 || typeof command !== "string") return;
+    runs.push({ index, command, ok: raw5.hook_event_name === "postToolUse", exitCode: null });
+  });
+  return runs.sort((x, y) => x.index - y.index);
+}
+function pipesTestCommand(command, testCommand) {
+  const want = simpleCommands(testCommand)[0] ?? [];
+  return segments(command).some((s) => isTestRun(s.words, want) && (s.after === "|" || s.after === "|&"));
+}
+function testsGateTheCommit(command, testCommand) {
+  if (gateBinding(command, testCommand) !== "bound") return false;
+  const want = simpleCommands(testCommand)[0] ?? [];
+  const segs = segments(command).map((s) => s.words);
+  const t = segs.findIndex((w) => isTestRun(w, want));
+  const c = segs.findIndex((w) => {
+    const s = gitSubcommand(w);
+    return s === "commit" || s === "push";
+  });
+  return t >= 0 && c > t;
+}
+function commitGateStatus(history, testCommand, command, ownWrites = []) {
+  let lastWrite = ownWrites.length ? history.length : -1;
+  if (lastWrite < 0) history.forEach((e, i) => {
+    if (eventWrites(e).length) lastWrite = i;
+  });
+  if (lastWrite < 0) return { ok: true, why: "no_changes", changed: [] };
+  if (testsGateTheCommit(command, testCommand)) return { ok: true, why: "tests_first_in_command", changed: [] };
+  const all = testRuns(history);
+  const runs = all.filter((r) => r.index > lastWrite);
+  const bound = runs.filter((r) => gateBinding(r.command, testCommand) === "bound");
+  const last = bound[bound.length - 1];
+  const counts = typeof last?.tail === "string" ? parseTestCounts(last.tail) : null;
+  const zero = counts !== null && counts.passed + counts.failed === 0;
+  if (last?.ok && !zero) return { ok: true, why: "passed_after_last_change", changed: [] };
+  const passes = all.filter((r) => r.ok && gateBinding(r.command, testCommand) === "bound");
+  const since = passes.length ? passes[passes.length - 1].index : -1;
+  const changed = [.../* @__PURE__ */ new Set([...history.slice(since + 1).flatMap((e) => eventWrites(e)), ...ownWrites])];
+  if (last && zero) return { ok: false, why: "zero_tests", changed };
+  const pipedHere = pipesTestCommand(command, testCommand);
+  const here = pipedHere ? { pipedHere } : {};
+  if (last) return { ok: false, why: "failed", changed, exitCode: last.exitCode, ...here };
+  const masked = runs.filter((r) => gateBinding(r.command, testCommand) === "masked");
+  if (masked.length) return { ok: false, why: "masked", changed, ...here, ...masked.some((r) => pipesTestCommand(r.command, testCommand)) ? { pipedBefore: true } : {} };
+  return { ok: false, why: "not_run", changed, ...here };
+}
+var list = (xs) => xs.length > 5 ? `${xs.slice(0, 5).join(", ")} and ${xs.length - 5} more` : xs.join(", ");
+function commitGateMessage(s, testCommand, verbs) {
+  const what = verbs.includes("commit") ? "commit" : "push";
+  const files = s.changed.length ? `you changed ${list(s.changed)}` : "files changed";
+  const state = s.why === "failed" ? `\`${testCommand}\` failed on its last run after that${s.exitCode !== null && s.exitCode !== void 0 ? ` (exit code ${s.exitCode})` : ""}` : s.why === "zero_tests" ? `the last run of \`${testCommand}\` after that ran zero tests` : s.why === "masked" && s.pipedBefore ? `\`${testCommand}\` ran after that only piped into another command (as in \`${testCommand} | tail\`)` : s.why === "masked" ? `\`${testCommand}\` ran after that only in a form whose exit status does not show the result (e.g. \`${testCommand} || true\`)` : `\`${testCommand}\` has not run after that`;
+  const pipe = s.pipedBefore || s.pipedHere ? ` A run piped into another command does not count: its exit status is the pipe's last command's, not the tests'${s.pipedHere ? ` (this command pipes \`${testCommand}\` too)` : ""}.` : "";
+  return `Replume: no ${what} yet: ${files} after the last passing run of the tests, and ${state}.${pipe} Run \`${testCommand}\`, fix what fails, then ${what} (or run \`${testCommand} && git ${what} \u2026\`).`;
+}
+
 // src/core/rules.ts
 import { createHash as createHash3 } from "crypto";
 import { execFileSync as execFileSync6 } from "child_process";
@@ -1441,14 +1746,14 @@ var unobservable = (command) => SCRIPT_RUN.test(command) || RUNTIME_TARGET.test(
 function hookErrors(eventsFile) {
   return existsSync5(join5(dirname3(eventsFile), "hook-errors.log"));
 }
-var list = (m) => Object.entries(m).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).map(([k, n3]) => `${k} ${n3}`).join(", ");
+var list2 = (m) => Object.entries(m).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).map(([k, n3]) => `${k} ${n3}`).join(", ");
 function renderCapture(c) {
   const out = ["CAPTURE COVERAGE"];
   if (c.ledger !== "present") {
     out.push(`  seen       nothing (ledger ${c.ledger === "absent" ? "file not found" : "empty"})`);
   } else {
-    out.push(`  seen       ${c.events} events from ${c.agents.join(", ")} in ${c.sessions} session${c.sessions === 1 ? "" : "s"} (${c.firstTs} to ${c.lastTs}): ${list(c.byType)}`);
-    if (Object.keys(c.tools).length) out.push(`  tools      ${list(c.tools)}`);
+    out.push(`  seen       ${c.events} events from ${c.agents.join(", ")} in ${c.sessions} session${c.sessions === 1 ? "" : "s"} (${c.firstTs} to ${c.lastTs}): ${list2(c.byType)}`);
+    if (Object.keys(c.tools).length) out.push(`  tools      ${list2(c.tools)}`);
     if (c.changedFilesLanded !== void 0) {
       const a = c.changedFilesAttemptedOnly ?? [];
       out.push(
@@ -2300,7 +2605,7 @@ function redirectTargets(command, depth = 0) {
   return out.filter((p) => p && !DEVICE_SINK.test(p) && !/[$*?{}`]/.test(p) && !/^\d+$/.test(p));
 }
 var FILE_VERBS = /* @__PURE__ */ new Set(["rm", "mv", "cp", "truncate", "tee", "chmod", "chown", "ln", "unlink", "patch", "dd", "install", "touch"]);
-var SEPARATORS = /* @__PURE__ */ new Set([";", "&&", "||", "|", "|&", "&", "(", ")"]);
+var SEPARATORS2 = /* @__PURE__ */ new Set([";", "&&", "||", "|", "|&", "&", "(", ")"]);
 function fileVerbOperands(command, depth = 0) {
   const out = [];
   const simple = [[]];
@@ -2308,7 +2613,7 @@ function fileVerbOperands(command, depth = 0) {
   for (let i = 0; i < toks.length; i++) {
     const t = toks[i];
     if ("op" in t) {
-      if (SEPARATORS.has(t.op)) simple.push([]);
+      if (SEPARATORS2.has(t.op)) simple.push([]);
       else if (WRITE_OPS.has(t.op) || t.op === "<" || t.op === "<<<" || t.op === "<<") i++;
       continue;
     }
@@ -2342,19 +2647,19 @@ function shellWriteTargets(command, depth = 0) {
   let cond = false;
   let base4 = false;
   const orLists = /* @__PURE__ */ new Set();
-  let list4 = 0;
+  let list5 = 0;
   let construct = 0;
   let pendingFunc = false;
   const stack = [];
   const simple = [{ words: [], redirects: [], conditional: false, list: 0, depth: 0, construct: 0, after: ";" }];
-  const next = (after) => simple.push({ words: [], redirects: [], conditional: cond, list: list4, depth: stack.length, construct, after });
+  const next = (after) => simple.push({ words: [], redirects: [], conditional: cond, list: list5, depth: stack.length, construct, after });
   for (let i = 0; i < toks.length; i++) {
     const t = toks[i];
     if ("op" in t) {
       const cur2 = simple[simple.length - 1];
       if (t.op === ";") {
         cond = base4;
-        list4++;
+        list5++;
         pendingFunc = false;
         next(";");
       } else if (t.op === "&&") {
@@ -2362,7 +2667,7 @@ function shellWriteTargets(command, depth = 0) {
         next("&&");
       } else if (t.op === "||") {
         cond = true;
-        orLists.add(list4);
+        orLists.add(list5);
         next("||");
       } else if (t.op === "(") {
         if (cur2.words.length === 1 && /^[A-Za-z_][\w.-]*$/.test(cur2.words[0])) pendingFunc = true;
@@ -2374,7 +2679,7 @@ function shellWriteTargets(command, depth = 0) {
         cond = top?.cond ?? false;
         base4 = top?.base ?? false;
         next(")");
-      } else if (SEPARATORS.has(t.op)) next(t.op);
+      } else if (SEPARATORS2.has(t.op)) next(t.op);
       else if (WRITE_OPS.has(t.op)) {
         const target = toks[i + 1];
         const w = target && "word" in target ? target.word : null;
@@ -2529,7 +2834,7 @@ function packageManagerWrites(verb, args) {
 }
 function deletedOperands(command, depth = 0) {
   const out = [];
-  for (const t of shellTokens(command).reduce((acc, x) => ("op" in x && SEPARATORS.has(x.op) ? acc.push([]) : "word" in x && acc[acc.length - 1].push(x.word), acc), [[]])) {
+  for (const t of shellTokens(command).reduce((acc, x) => ("op" in x && SEPARATORS2.has(x.op) ? acc.push([]) : "word" in x && acc[acc.length - 1].push(x.word), acc), [[]])) {
     const words6 = unwrapCommand(t);
     const verb = words6[0]?.split("/").pop();
     const ops = splitFlags(words6.slice(1)).operands;
@@ -2969,6 +3274,63 @@ var TEST_DECL = /\b(?:test|it|t)(?:\.\w+)?\s*\(\s*['"`]|^\s*(?:async\s+)?def\s+t
 function assertionLiterals(s) {
   return s.split("\n").filter((l) => new RegExp(ASSERTION.source).test(l)).map((l) => l.trim()).sort();
 }
+var TEST_TITLE = /\b(?:test|it|t)(?:\.\w+)?\s*\(\s*(['"`])((?:(?!\1).){1,200})\1|^\s*(?:async\s+)?def\s+(test_\w*)|^\s*func\s+(Test\w*)/;
+function changedSince(repoRoot2, base4, path) {
+  let now = null;
+  try {
+    now = readFileSync9(join10(repoRoot2, path), "utf8");
+  } catch {
+    now = null;
+  }
+  return fileAt(repoRoot2, base4, path) !== now;
+}
+function reachableSources(repoRoot2, testPath) {
+  const seen = /* @__PURE__ */ new Set([testPath]);
+  const queue = [testPath];
+  const out = [];
+  while (queue.length && seen.size < 400) {
+    for (const next of importedSources(repoRoot2, queue.shift())) {
+      if (seen.has(next)) continue;
+      seen.add(next);
+      out.push(next);
+      queue.push(next);
+    }
+  }
+  return out;
+}
+function bentToCode(i) {
+  const afterLines = assertionLiterals(i.after);
+  const gone = assertionLiterals(i.start).filter((l) => {
+    const k = afterLines.indexOf(l);
+    if (k < 0) return true;
+    afterLines.splice(k, 1);
+    return false;
+  });
+  if (!gone.length) return null;
+  const lines = i.start.split("\n");
+  const titles = /* @__PURE__ */ new Set();
+  lines.forEach((l, n3) => {
+    if (!gone.includes(l.trim())) return;
+    for (let k = n3; k >= 0; k--) {
+      const m = TEST_TITLE.exec(lines[k]);
+      if (m) {
+        titles.add(m[2] ?? m[3] ?? m[4]);
+        break;
+      }
+    }
+  });
+  if (!titles.size) return null;
+  const imports = reachableSources(i.repoRoot, i.path);
+  if (!imports.length || imports.some(i.changed)) return null;
+  const failing = i.baseFailing();
+  if (!failing?.length) return null;
+  const tests = [...titles].filter((t) => failing.some((n3) => n3 === t || n3.endsWith(t)));
+  return tests.length ? { tests, imports } : null;
+}
+var quoteList = (xs) => xs.slice(0, 3).map((x) => `"${x}"`).join(", ") + (xs.length > 3 ? ` and ${xs.length - 3} more` : "");
+function bentDetail(path, b) {
+  return `${path}: the expected value of ${quoteList(b.tests)} changed while ${b.tests.length > 1 ? "those tests" : "that test"} failed at the task start, and the code it tests (${b.imports.slice(0, 3).join(", ")}${b.imports.length > 3 ? ", \u2026" : ""}) did not change, so the edit only makes the test agree with the code`;
+}
 var testWeakened = (a, ctx) => {
   if (a.kind === "command" && a.command) {
     if (FORCED_SUCCESS.test(a.command)) {
@@ -2991,6 +3353,7 @@ var testWeakened = (a, ctx) => {
   if (!isWrite(a)) return null;
   const findings = [];
   let severity = "ok";
+  let bent = null;
   const base4 = baseCommitOf(ctx.repoRoot);
   const restoresStart = (ch) => {
     if (!base4) return false;
@@ -3038,6 +3401,15 @@ var testWeakened = (a, ctx) => {
       findings.push(`${ch.path}: ${declsRemoved} test${declsRemoved > 1 ? "s" : ""} removed`);
       severity = "block";
     }
+    if (ch.before && !removedExisting && skipsAdded <= 0 && !bent && base4 && start && ctx.baseFailing && askedTestPaths(ctx).includes(ch.path)) {
+      const after = contentAfter(a, ctx, ch.path);
+      const b = after && !isConfirmed(ctx.repoRoot, ch.path, after.next) ? bentToCode({ repoRoot: ctx.repoRoot, path: ch.path, start, after: after.next, changed: (p) => changedSince(ctx.repoRoot, base4, p), baseFailing: ctx.baseFailing }) : null;
+      if (b && after) {
+        bent = { path: ch.path, next: after.next };
+        findings.push(bentDetail(ch.path, b));
+        severity = "block";
+      }
+    }
     if (ch.before && !removedExisting && skipsAdded <= 0 && !askedTestPaths(ctx).includes(ch.path)) {
       const changed = gone.filter(existing).length;
       if (changed > 0) {
@@ -3047,6 +3419,13 @@ var testWeakened = (a, ctx) => {
     }
   }
   if (!findings.length) return null;
+  if (bent && findings.length === 1) {
+    return {
+      rule: "test_weakened",
+      action: "block",
+      message: `${PREFIX} this edit was not made: ${findings[0]}. Keep the expected value and fix the code instead. If the user asked for exactly this change, do not make it another way: say in your final message that it needs their confirmation, with this command for them to run: \`${confirmCommand(bent.path, bent.next)}\`. After they run it, the same edit goes through.`
+    };
+  }
   return {
     rule: "test_weakened",
     action: severity,
@@ -3116,7 +3495,7 @@ function shellScripts(command, depth = 0) {
   const groups = [[]];
   for (const t of shellTokens(command)) {
     if ("op" in t) {
-      if (SEPARATORS.has(t.op)) groups.push([]);
+      if (SEPARATORS2.has(t.op)) groups.push([]);
     } else groups[groups.length - 1].push(t.word);
   }
   for (const g of groups) {
@@ -3137,7 +3516,7 @@ function deletionTargets(command) {
   const groups = [[]];
   for (const token of shellTokens(command)) {
     if ("op" in token) {
-      if (SEPARATORS.has(token.op)) groups.push([]);
+      if (SEPARATORS2.has(token.op)) groups.push([]);
     } else groups[groups.length - 1].push(token.word);
   }
   const result2 = [];
@@ -3207,7 +3586,7 @@ function blockDeviceWrites(scripts) {
     for (let i = 0; i < toks.length; i++) {
       const t = toks[i];
       if ("op" in t) {
-        if (SEPARATORS.has(t.op)) groups.push([]);
+        if (SEPARATORS2.has(t.op)) groups.push([]);
         else if (WRITE_OPS.has(t.op) || t.op === "<" || t.op === "<<<" || t.op === "<<") i++;
         continue;
       }
@@ -3393,6 +3772,17 @@ var replumeStateWrite = (a, ctx) => {
     message: `${PREFIX} this command appears to write into .replume/, where Replume keeps the contract, scenarios and ledger. Agents must not change them. ${pick(ctx, "If the contract is wrong, ask the user to run \\`replume task\\` again.", "Keep working inside the contract; if you think it is wrong, finish the task within it and write in your final message what you would change.")}`
   };
 };
+var commitWithoutTests = (a, ctx) => {
+  if (ctx.mode !== "auto" || a.kind !== "command" || !a.command) return null;
+  const testCommand = ctx.contract?.test_command;
+  if (!testCommand) return null;
+  const verbs = gitPublishVerbs(a.command);
+  if (!verbs.length) return null;
+  const own = [...a.paths, ...a.writeTargetNotParsed ? [UNPARSED_SHELL_WRITE] : []].filter((p) => !p.startsWith(".replume/"));
+  const s = commitGateStatus(ctx.history, testCommand, a.command, own);
+  if (s.ok) return null;
+  return { rule: "commit_without_tests", action: "block", message: commitGateMessage(s, testCommand, verbs) };
+};
 var RULES = {
   out_of_scope_edit: outOfScopeEdit,
   protected_path_modified: protectedPathModified,
@@ -3401,7 +3791,8 @@ var RULES = {
   destructive_command: destructiveCommand,
   loop,
   secrets_touch: secretsTouch,
-  replume_state_write: replumeStateWrite
+  replume_state_write: replumeStateWrite,
+  commit_without_tests: commitWithoutTests
 };
 var RANK = { ok: 0, warn: 1, block: 2 };
 function evaluate(a, ctx) {
@@ -3419,7 +3810,7 @@ function evaluate(a, ctx) {
 var PATH2 = /(?:^|[\s"'`(<[])((?:\.{0,2}\/)?(?:[\w@.-]+\/)*[\w@.-]+\.[A-Za-z0-9]+)(?=$|[\s"'`)>\],;:!?]|\.(?:\s|$))/g;
 var CHANGE = new RegExp(`\\b(?:${VERB}|fix(?:e[sd])?|fixing|write|writes|wrote|put|insert|implement(?:s|ed|ing)?|belongs?\\s+in|go(?:es)?\\s+(?:in|into)|should\\s+(?:be|go)\\s+in)\\b`, "gi");
 var READ = /\b(?:read|reads|reading|look(?:ing)?\s+at|see|open|inspect|review|check|study|consult|refer\s+to|based\s+on|like)\b/gi;
-var lastIndex = (re, text) => {
+var lastIndex2 = (re, text) => {
   let at = -1;
   for (const m of text.matchAll(re)) at = m.index ?? at;
   return at;
@@ -3432,16 +3823,16 @@ function protectedTestsNamedInTask(task, protect, opts = {}) {
       if (!isTestFile(p) || !matchesAny(p, protect) || out.includes(p)) continue;
       if (opts.askedOnly) {
         const before = sentence.slice(0, m.index ?? 0);
-        if (lastIndex(CHANGE, before) <= lastIndex(READ, before)) continue;
+        if (lastIndex2(CHANGE, before) <= lastIndex2(READ, before)) continue;
       }
       out.push(p);
     }
   }
   return out;
 }
-var list2 = (xs) => xs.length <= 3 ? xs.join(", ") : `${xs.slice(0, 3).join(", ")} and ${xs.length - 3} more`;
+var list3 = (xs) => xs.length <= 3 ? xs.join(", ") : `${xs.slice(0, 3).join(", ")} and ${xs.length - 3} more`;
 function protectedNamedNotice(named) {
-  return `The task names ${list2(named)}, which ${named.length === 1 ? "is" : "are"} protected (existing test files are protected in auto mode): ${named.length === 1 ? "it stays" : "they stay"} blocked. Add new tests in a new test file and say so in your final message.`;
+  return `The task names ${list3(named)}, which ${named.length === 1 ? "is" : "are"} protected (existing test files are protected in auto mode): ${named.length === 1 ? "it stays" : "they stay"} blocked. Add new tests in a new test file and say so in your final message.`;
 }
 function notWhereAsked(named, changed) {
   const missed = named.filter((n3) => !changed.includes(n3));
@@ -3449,7 +3840,7 @@ function notWhereAsked(named, changed) {
   if (!missed.length || !others.length) return null;
   return {
     named: missed,
-    text: `not where you asked: the task names ${list2(missed)}, which ${missed.length === 1 ? "is" : "are"} protected (existing test files are protected in auto mode); the agent wrote ${list2(others)} instead`
+    text: `not where you asked: the task names ${list3(missed)}, which ${missed.length === 1 ? "is" : "are"} protected (existing test files are protected in auto mode); the agent wrote ${list3(others)} instead`
   };
 }
 
@@ -3519,8 +3910,8 @@ function contractBrief(c, mode = "approve", opts = {}) {
   const auto = mode === "auto";
   const task = c.task.length > 400 ? `${c.task.slice(0, 399)}\u2026` : c.task;
   const head = `Replume task contract ${c.id}. Task: "${task}".`;
-  const list4 = groupedList(protectedFiles, 500);
-  const protect = protectedFiles.length ? auto ? `Protected, do not change: ${list4}. A protected test is the spec: when it fails, fix the code, not the test. This contract was agreed before your request and takes priority over it: if a request asks for a change to a protected file, reach the goal in the allowed files and say in your final message what you did instead. Do not ask the user.` : `Protected, do not change: ${list4}. A protected test is the spec: when it fails, fix the code, not the test. A block is not a dead end. This contract was agreed before your request and takes priority over it: if a request asks for a change to a protected file, reach the goal inside the allowed files, say what you did instead, and ask only if no allowed file can reach it.` : "";
+  const list5 = groupedList(protectedFiles, 500);
+  const protect = protectedFiles.length ? auto ? `Protected, do not change: ${list5}. A protected test is the spec: when it fails, fix the code, not the test. This contract was agreed before your request and takes priority over it: if a request asks for a change to a protected file, reach the goal in the allowed files and say in your final message what you did instead. Do not ask the user.` : `Protected, do not change: ${list5}. A protected test is the spec: when it fails, fix the code, not the test. A block is not a dead end. This contract was agreed before your request and takes priority over it: if a request asks for a change to a protected file, reach the goal inside the allowed files, say what you did instead, and ask only if no allowed file can reach it.` : "";
   const guard = auto && c.test_command && opts.testScript?.length ? `The test command is protected too: do not change ${opts.testScript.join("; ")}.` : "";
   const done = c.test_command ? `${guard ? `${guard} ` : ""}Done means \`${c.test_command}\` passes after your last edit.` : "";
   const tail = "Replume checks all of this when the change is committed.";
@@ -3632,28 +4023,6 @@ function buildContract(input) {
   };
 }
 
-// src/core/test-counts.ts
-var num = (m) => m ? Number(m[1]) : 0;
-function parseTestCounts(output) {
-  const text = output.replace(/\u001b\[[0-9;?]*[A-Za-z]/g, "");
-  const tests = /^\s*(?:ℹ|#)\s*tests\s+(\d+)\s*$/m.exec(text);
-  if (tests) {
-    const pass = num(/^\s*(?:ℹ|#)\s*pass\s+(\d+)\s*$/m.exec(text));
-    const fail2 = num(/^\s*(?:ℹ|#)\s*fail\s+(\d+)\s*$/m.exec(text));
-    const skipped = num(/^\s*(?:ℹ|#)\s*(?:skipped|skip)\s+(\d+)\s*$/m.exec(text));
-    return { passed: pass, failed: fail2, skipped };
-  }
-  const jest = /^\s*Tests:\s+(.*?)\s+\d+\s+total/m.exec(text);
-  if (jest) return { passed: num(/(\d+)\s+passed/.exec(jest[1])), failed: num(/(\d+)\s+failed/.exec(jest[1])), skipped: num(/(\d+)\s+(?:skipped|todo)/.exec(jest[1])) };
-  const vitest = /^\s*Tests\s{2,}(.*?)\s*\(\d+\)/m.exec(text);
-  if (vitest) return { passed: num(/(\d+)\s+passed/.exec(vitest[1])), failed: num(/(\d+)\s+failed/.exec(vitest[1])), skipped: num(/(\d+)\s+(?:skipped|todo)/.exec(vitest[1])) };
-  const pytest = /^[=\s]*((?:\d+\s+(?:passed|failed|skipped|error|errors|xfailed|xpassed|deselected)(?:,\s*)?)+)\s+in\s+[\d.]+s/m.exec(text);
-  if (pytest) return { passed: num(/(\d+)\s+passed/.exec(pytest[1])), failed: num(/(\d+)\s+(?:failed|errors?)/.exec(pytest[1])), skipped: num(/(\d+)\s+skipped/.exec(pytest[1])) };
-  const cargo = /test result: \w+\.\s+(\d+) passed;\s+(\d+) failed;\s+(\d+) ignored/.exec(text);
-  if (cargo) return { passed: Number(cargo[1]), failed: Number(cargo[2]), skipped: Number(cargo[3]) };
-  return null;
-}
-
 // src/supervisor/base-run.ts
 import { readFileSync as readFileSync11 } from "fs";
 var spawnRunner = (command, cwd, timeoutSec) => {
@@ -3740,6 +4109,15 @@ function baseRunFor(i) {
   }
   return run;
 }
+function baseFailingFor(i) {
+  let memo;
+  return () => {
+    if (memo !== void 0) return memo;
+    const command = i.command?.trim();
+    const run = command ? baseRunFor({ repoRoot: i.repoRoot, sessionId: i.session[0]?.sessionId ?? "", session: i.session, command, timeoutSec: Math.min(i.timeoutSec, 20), runner: i.runner ?? spawnRunner }) : null;
+    return memo = run?.ok ? run.failing : null;
+  };
+}
 function splitFailures(i) {
   if (requiresWholeSuite(i.task)) return { blocking: i.nowFailing, preExisting: [] };
   const task = i.task.toLowerCase();
@@ -3810,7 +4188,7 @@ function makeTouchesChangedCode(repoRoot2, changedSources) {
   };
   return Object.assign(touches, { detail });
 }
-var names = (list4) => list4.slice(0, 3).map((n3) => `"${n3}"`).join(", ") + (list4.length > 3 ? ` and ${list4.length - 3} more` : "");
+var names = (list5) => list5.slice(0, 3).map((n3) => `"${n3}"`).join(", ") + (list5.length > 3 ? ` and ${list5.length - 3} more` : "");
 function whyBlocking(blocking, i) {
   if (!blocking.length) return "no failing test was there at the task start";
   const base4 = new Set(i.base.failing);
@@ -3972,141 +4350,6 @@ function preExistingScenario(scenario, before, after, contract, changedPaths) {
   return true;
 }
 
-// src/supervisor/layer1.ts
-var TEST_COMMAND = /(?:^|[\s;&|(])(?:(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?test\b|npm\s+t\b|npx\s+(?:vitest|jest|mocha)\b|vitest\b|jest\b|mocha\b|pytest\b|python3?\s+-m\s+(?:pytest|unittest)\b|go\s+test\b|cargo\s+test\b|node\s+--test\b|mvn\s+(?:-\S+\s+)*test\b|gradle\w*\s+test\b|make\s+test\b|rspec\b|phpunit\b|dotnet\s+test\b)/;
-function isTestCommand(command, contractTestCommand) {
-  if (!command) return false;
-  if (contractTestCommand && command.trim() === contractTestCommand.trim()) return true;
-  return TEST_COMMAND.test(command);
-}
-function commandRuns(events) {
-  const runs = [];
-  events.forEach((e, index) => {
-    if (e.type !== "command" || !e.command) return;
-    const raw5 = e.raw ?? {};
-    if (raw5.exitUnknown === true) {
-      runs.push({ index, command: e.command, ok: raw5.ok !== false, exitCode: null, exitUnknown: true });
-      return;
-    }
-    runs.push({ index, command: e.command, ok: raw5.ok !== false, exitCode: raw5.exitCode ?? (raw5.ok === false ? null : 0) });
-  });
-  return runs;
-}
-var lastIndex2 = (xs, pred) => {
-  for (let i = xs.length - 1; i >= 0; i--) if (pred(xs[i])) return i;
-  return -1;
-};
-var TESTS_PASS = /\b(?:all\s+)?(?:\d+\s+|the\s+)?(?:unit\s+)?tests?\s+(?:now\s+|all\s+|still\s+)?(?:are\s+|is\s+)?(?:now\s+)?(?:pass(?:es|ed|ing)?|green|succeed(?:s|ed)?)\b|\btest\s+suite\s+(?:now\s+)?(?:passes|passed|is\s+green)\b|\bpass(?:es|ing)?\s+all\s+(?:the\s+)?tests\b|\bnpm\s+test\s+(?:now\s+)?(?:passes|passed|succeeds)\b/i;
-var DONE = /\b(?:is|are|now|everything(?:'s| is))\s+(?:done|complete|completed|fixed|working)\b|\b(?:I(?:'ve|\s+have)|has\s+been|have\s+been)\s+(?:implemented|fixed|completed|finished|resolved)\b|\ball\s+done\b|\btask\s+(?:is\s+)?(?:complete|completed|done)\b/i;
-var NEGATION = /\b(?:not|never|no|cannot|can't|couldn't|didn't|don't|doesn't|haven't|hasn't|isn't|aren't|wasn't|weren't|unable|fail(?:s|ed|ing)?|without)\b|n't\b/i;
-var NOTHING_WRONG = /\b(?:0|zero|no|none|without\s+(?:any\s+)?)\s*(?:\w+\s+)?(?:fail(?:s|ed|ures?|ing)?|errors?|regressions?|broken)\b|\bnothing\s+(?:failed|fails|is\s+failing|broke|broken)\b|\b(?:no|without)\s+(?:test\s+)?failures?\b/gi;
-function findClaims(message) {
-  const sentences2 = message.split(/(?<=[.!?])\s+|\n+/).map((s) => s.trim()).filter(Boolean);
-  const denies = (s) => NEGATION.test(s.replace(NOTHING_WRONG, " "));
-  const pick3 = (re) => sentences2.find((s) => re.test(s) && !denies(s)) ?? null;
-  return { testsPass: pick3(TESTS_PASS), done: pick3(DONE) };
-}
-var quote = (s) => {
-  const t = s.replace(/[.!?]+$/, "");
-  return t.length > 160 ? `${t.slice(0, 159)}\u2026` : t;
-};
-function claimVsEvidence(input) {
-  if (input.proposal.kind !== "stop") return null;
-  const { lastAssistantMessage } = input.proposal;
-  const claims = findClaims(lastAssistantMessage);
-  if (!claims.testsPass && !claims.done) return null;
-  const events = input.recent;
-  const contractTest = input.anchor.contract?.test_command;
-  const runs = commandRuns(events).filter((r) => isTestCommand(r.command, contractTest));
-  const lastEdit = lastIndex2(events, (e) => e.type === "file_edit");
-  const lastRun = runs.at(-1) ?? null;
-  const lastOk = [...runs].reverse().find((r) => r.ok) ?? null;
-  const editPath = lastEdit >= 0 ? events[lastEdit].paths.join(", ") || "a file" : null;
-  const finding = (rule, claim, fact, reason) => ({
-    layer: "layer1",
-    rule,
-    decision: "steer",
-    message: `Replume: the final message says "${quote(claim)}". ${fact}`,
-    reason
-  });
-  if (claims.testsPass) {
-    if (!runs.length) {
-      return finding("claim_without_evidence", claims.testsPass, "The ledger for this session has no test command that ran.", "tests-pass claim, no test run in session");
-    }
-    if (lastRun && !lastRun.ok) {
-      return finding(
-        "claim_without_evidence",
-        claims.testsPass,
-        `The last test command in this session, \`${lastRun.command}\`, ended with exit code ${lastRun.exitCode ?? "unknown"}.`,
-        "tests-pass claim, last test run failed"
-      );
-    }
-    if (lastOk && lastEdit > lastOk.index) {
-      return finding(
-        "claim_without_evidence",
-        claims.testsPass,
-        `The last successful test run (\`${lastOk.command}\`) was before the last edit (${editPath}).`,
-        "tests-pass claim, edits after the last successful run"
-      );
-    }
-    return null;
-  }
-  if (lastEdit < 0) return null;
-  if (lastRun && lastRun.index > lastEdit && !lastRun.ok) {
-    return finding(
-      "claim_without_evidence",
-      claims.done,
-      `The last test command after the last edit, \`${lastRun.command}\`, ended with exit code ${lastRun.exitCode ?? "unknown"}.`,
-      "done claim, last test run failed"
-    );
-  }
-  const okAfterEdit = runs.some((r) => r.ok && r.index > lastEdit);
-  if (okAfterEdit) return null;
-  if (runs.length) {
-    return finding(
-      "claim_without_evidence",
-      claims.done,
-      `Tests ran earlier in this session (\`${runs.at(-1).command}\`), but no test command succeeded after the last edit (${editPath}).`,
-      "done claim, no successful test run after the last edit"
-    );
-  }
-  if (contractTest) {
-    return finding(
-      "claim_without_evidence",
-      claims.done,
-      `The task contract names the test command \`${contractTest}\`; it did not run in this session.`,
-      "done claim, contract test_command never ran"
-    );
-  }
-  return null;
-}
-function existingRules(input) {
-  if (input.proposal.kind !== "action") return [];
-  const ev = evaluate(input.proposal.action, {
-    contract: input.anchor.contract,
-    history: input.recent,
-    repoRoot: input.repoRoot,
-    scratchDirs: input.scratchDirs,
-    mode: input.mode
-  });
-  return ev.hits.map((h) => ({
-    layer: "layer1",
-    rule: h.rule,
-    decision: h.action === "block" ? "block" : "steer",
-    message: h.message,
-    reason: `rule ${h.rule} returned ${h.action}`
-  }));
-}
-function layer1(input) {
-  if (input.proposal.kind === "stop") {
-    if (input.proposal.stopHookActive) return [];
-    if (input.legacyClaim === false) return [];
-    const f = claimVsEvidence(input);
-    return f ? [f] : [];
-  }
-  return existingRules(input);
-}
-
 // src/supervisor/checks/text.ts
 function langOf(path) {
   const p = path.toLowerCase();
@@ -5170,7 +5413,7 @@ var git4 = (root, args) => {
     return null;
   }
 };
-var sources = (list4) => (list4 ?? "").split("\0").filter((p) => p && titleSource(p) && !isDependencyPath(p)).slice(0, MAX_FILES);
+var sources = (list5) => (list5 ?? "").split("\0").filter((p) => p && titleSource(p) && !isDependencyPath(p)).slice(0, MAX_FILES);
 function workingTreeTestTitles(repoRoot2) {
   const out = /* @__PURE__ */ new Set();
   for (const p of sources(git4(repoRoot2, ["ls-files", "-z", "--cached", "--others", "--exclude-standard"]))) {
@@ -5352,7 +5595,10 @@ async function tamperingFindings(repo, base4, commit, entries, opts) {
       const confirmed = after !== null && isConfirmed(opts.repoRoot, e.path, after);
       if (asked || confirmed) {
         const w2 = weakening(await patch2(...e.status === "R" ? [e.oldPath, e.path] : [e.path]), await atBase(e.oldPath ?? e.path)).filter((x) => !/assertions? changed/.test(x));
+        const start = !w2.length && !confirmed && after !== null && opts.baseFailing && e.status === "M" ? blobAt(repo, base4, e.path) : null;
+        const bent = start !== null && after !== null && opts.baseFailing ? bentToCode({ repoRoot: opts.repoRoot, path: e.path, start, after, changed: (p) => entries.some((x) => x.path === p || x.oldPath === p), baseFailing: opts.baseFailing }) : null;
         if (w2.length) findings.push({ rule: "test_weakened", path: e.path, detail: `${w2.join(", ")} (the task${confirmed ? " or a person" : ""} allowed a change to this test, not a weaker test)` });
+        else if (bent) findings.push({ rule: "test_weakened", path: e.path, detail: `${bentDetail(e.path, bent).slice(e.path.length + 2)} (the task allowed a change to this test, not a test that states the bug)` });
         else {
           const rule = confirmed ? TEST_CHANGE_CONFIRMED : TEST_CHANGE_ASKED;
           const what2 = confirmed ? "this content was confirmed by a person (replume confirm-config; informational)" : "changed as the task asks (informational; review it)";
@@ -7226,8 +7472,8 @@ function projectHooksConfigured(root) {
 var TEST_RUNNER = /\b(?:npm\s+(?:run\s+)?test|npm\s+t|vitest|jest|pytest|cargo\s+test|node\s+--test|go\s+test)\b/;
 var ZERO_TESTS = /^\s*(?:ℹ|#)?\s*tests\s+0\s*$|^\s*1\.\.0\b|<!--\s*tests\s+0\s*-->|^[ \t]*(?:running[ \t]+)?0 tests?\b|\b(?:ran|executed|found|collected)[ \t]+0[ \t]+tests?\b|\b0 passing\b|collected 0 items|no tests? ran|no tests found|no test files|no tests to run/im;
 var TEST_EVIDENCE = /^[ \t]*(?:ℹ|#)[ \t]*tests[ \t]+[1-9]\d*[ \t]*$|^[ \t]*1\.\.[1-9]\d*\b|^ok[ \t]+[1-9]\d*\b|<!--[ \t]*tests[ \t]+[1-9]\d*[ \t]*-->|<testcase\b|^[.]+$|\b[1-9]\d*[ \t]+passing\b|\b[1-9]\d*[ \t]+passed\b|\brunning[ \t]+[1-9]\d*[ \t]+tests?\b|^ok[ \t]+\S+[ \t]|^--- PASS\b/m;
-var ANSI3 = /\u001b\[[0-9;?]*[A-Za-z]|\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)/g;
-var stripAnsi = (s) => s.replace(ANSI3, "");
+var ANSI4 = /\u001b\[[0-9;?]*[A-Za-z]|\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)/g;
+var stripAnsi = (s) => s.replace(ANSI4, "");
 var UNRECOGNISED = "test output not recognised: cannot confirm that any test ran";
 async function execute(s, run, defaultTimeout, requireEvidence = false) {
   const timeout = s.timeout_sec ?? defaultTimeout;
@@ -7479,7 +7725,12 @@ async function runVerify(opts) {
   const agentEntries = entries.filter((e) => !setup.has(e.path));
   const paths = entryPaths(agentEntries);
   const auto = loadConfig(repo).mode === "auto";
-  const tampering = await tamperingFindings(repo, base4, commit, agentEntries, { auto, repoRoot: repo, askedTests: auto ? testEditsAskedFor(contract.task, repo, void 0, base4).paths : [] });
+  const baseFailing = () => {
+    if (!contract.test_command?.trim()) return null;
+    const run = baseRunFor({ repoRoot: repo, sessionId: "verify", session: readEvents(safeRelative(repo, opts.eventsPath ?? ".replume/events.jsonl")).events, command: contract.test_command.trim(), timeoutSec: opts.timeoutSecDefault ?? 120, runner: spawnRunner, record: false });
+    return run?.ok ? run.failing : null;
+  };
+  const tampering = await tamperingFindings(repo, base4, commit, agentEntries, { auto, repoRoot: repo, askedTests: auto ? testEditsAskedFor(contract.task, repo, void 0, base4).paths : [], ...auto ? { baseFailing } : {} });
   const newTests = agentEntries.filter((e) => e.status === "A" && TEST_PATH.test(e.path) && !tampering.some((t) => t.path === e.path)).map((e) => e.path);
   const dependencies = await dependencySection(repo, base4, commit, paths, contract, opts);
   const eventsFile = safeRelative(repo, opts.eventsPath ?? ".replume/events.jsonl");
@@ -7819,9 +8070,9 @@ var AUTO_NOT_CHECKED_RULE = "auto_not_checked";
 var AUTO_SKIPPED_RULE = "auto_gate_skipped";
 var NO_CHANGES_SKIP = "no changes, gate skipped";
 var MAX_SUMMARY = 1200;
-var ANSI4 = /\u001b\[[0-9;?]*[A-Za-z]/g;
+var ANSI5 = /\u001b\[[0-9;?]*[A-Za-z]/g;
 function summarizeFailure(output) {
-  const text = output.replace(ANSI4, "");
+  const text = output.replace(ANSI5, "");
   const names3 = failingTestNames(text).slice(0, 5);
   const lines = text.split(/\r?\n/).map((l) => l.trimEnd()).filter((l) => l.trim());
   const interesting = lines.filter((l) => /\b(fail|error|expected|actual|assert|not ok|✗|✖)/i.test(l)).slice(-10);
@@ -7835,7 +8086,7 @@ function classify3(r) {
   const output = `${r.stdout}
 ${r.stderr}`;
   const tail = outputTailOf(r.stdout, r.stderr);
-  const run = classifyRun(r, output.replace(ANSI4, ""));
+  const run = classifyRun(r, output.replace(ANSI5, ""));
   return tail ? { ...run, ...tail } : run;
 }
 function classifyRun(r, output) {
@@ -7909,7 +8160,7 @@ function autoStopGate(opts = {}) {
     let whyYours = run.status === "failed" && requiresWholeSuite(contract.task) ? "the task asks for a green suite" : null;
     if (run.status === "failed" && !requiresWholeSuite(contract.task)) {
       const output = `${r0.stdout}
-${r0.stderr}`.replace(ANSI4, "");
+${r0.stderr}`.replace(ANSI5, "");
       const nowFailing = failingTestNames(output);
       const left = Number.isFinite(budget) ? budget - run.durationMs / 1e3 : c.config.auto.test_timeout_sec;
       if (!nowFailing.length) whyYours = "Replume could not read the failing test names from this run, so it cannot compare with the task start";
@@ -7929,13 +8180,13 @@ ${r0.stderr}`.replace(ANSI4, "");
           const verdict = preExistingOnly({ output, nowFailing, base: base4, task: contract.task, changedTestSources: sources2, touchesChangedCode: makeTouchesChangedCode(c.repoRoot, netChanged(c.repoRoot, sessionSourceWrites(c.session))) });
           if (!verdict.ok && base4.ok) whyYours = verdict.why;
           if (verdict.ok) {
-            const list4 = verdict.preExisting.slice(0, 10);
+            const list5 = verdict.preExisting.slice(0, 10);
             return {
               rule: AUTO_GATE_RULE,
               outcome: "pass",
               message: null,
               summary: `${AUTO_GATE_RULE}: \`${command}\` fails only in ${verdict.preExisting.length} test(s) that were already failing before the task, not sent back`,
-              raw: { ...raw5, outcome: "passed", preExisting: list4, preExistingCount: verdict.preExisting.length },
+              raw: { ...raw5, outcome: "passed", preExisting: list5, preExistingCount: verdict.preExisting.length },
               ran: { ...ran, ok: true, preExistingOnly: true }
             };
           }
@@ -8555,14 +8806,14 @@ function stripReplumeHooks(config, ours) {
   const isOurs = (h) => obj2(h) && [h.command, h.bash].some((c) => typeof c === "string" && ours.test(c.trim()));
   const hooks = {};
   const events = [];
-  for (const [event, list4] of Object.entries(config.hooks)) {
-    if (!Array.isArray(list4)) {
-      hooks[event] = list4;
+  for (const [event, list5] of Object.entries(config.hooks)) {
+    if (!Array.isArray(list5)) {
+      hooks[event] = list5;
       continue;
     }
     let removed = false;
     const kept = [];
-    for (const item of list4) {
+    for (const item of list5) {
       if (obj2(item) && Array.isArray(item.hooks)) {
         const inner = item.hooks.filter((h) => !isOurs(h));
         if (inner.length === item.hooks.length) {
@@ -8749,7 +9000,7 @@ import { Command, Option } from "commander";
 // package.json
 var package_default = {
   name: "replume-cli",
-  version: "0.2.3",
+  version: "0.2.4",
   type: "module",
   bin: {
     replume: "dist/cli.js"
@@ -8798,7 +9049,7 @@ var package_default = {
 
 // src/cli.ts
 import { execFileSync as execFileSync34 } from "child_process";
-import { existsSync as existsSync47, lstatSync as lstatSync6, mkdtempSync as mkdtempSync8, readFileSync as readFileSync52, unlinkSync } from "fs";
+import { existsSync as existsSync47, lstatSync as lstatSync6, mkdtempSync as mkdtempSync8, readFileSync as readFileSync51, unlinkSync } from "fs";
 import { homedir as homedir8, tmpdir as tmpdir16 } from "os";
 import { join as join59, resolve as resolve16 } from "path";
 
@@ -8837,9 +9088,6 @@ function runSessionStart(input) {
   writeStartSha(input.repoDir, input.sessionId, sha2);
 }
 
-// src/hooks/session-end.ts
-import { readFileSync as readFileSync26 } from "fs";
-
 // src/commit-range.ts
 import { execFileSync as execFileSync20 } from "child_process";
 function resolveCommitRange(repoDir, startSha) {
@@ -8860,42 +9108,135 @@ function resolveCommitRange(repoDir, startSha) {
   return { commits, ok: true };
 }
 
+// src/core/transcript-read.ts
+import { closeSync, constants, fstatSync, openSync, readSync } from "fs";
+var TRANSCRIPT_MAX_BYTES = 32 * 1024 * 1024;
+var TRANSCRIPT_MAX_LINES = 2e5;
+var TRANSCRIPT_MAX_LINE_BYTES = 4 * 1024 * 1024;
+var TRANSCRIPT_HEAD_BYTES = 256 * 1024;
+function transcriptEntries(text, limits = {}, cut = false) {
+  const maxLines = limits.maxLines ?? TRANSCRIPT_MAX_LINES;
+  const maxLine = limits.maxLineBytes ?? TRANSCRIPT_MAX_LINE_BYTES;
+  const lines = text.split("\n");
+  if (cut) lines.pop();
+  const entries = [];
+  let skipped = 0;
+  let truncated = cut;
+  for (let i = 0; i < lines.length; i++) {
+    if (i >= maxLines) {
+      truncated = true;
+      break;
+    }
+    const line2 = lines[i].trim();
+    if (!line2) continue;
+    if (line2.length > maxLine) {
+      skipped++;
+      continue;
+    }
+    let v2;
+    try {
+      v2 = JSON.parse(line2);
+    } catch {
+      skipped++;
+      continue;
+    }
+    if (v2 && typeof v2 === "object" && !Array.isArray(v2)) entries.push(v2);
+    else skipped++;
+  }
+  return { entries, truncated, skipped };
+}
+function readTranscript(path, limits = {}) {
+  if (typeof path !== "string" || !path.endsWith(".jsonl")) return null;
+  const maxBytes = limits.maxBytes ?? TRANSCRIPT_MAX_BYTES;
+  let fd;
+  try {
+    fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  } catch {
+    return null;
+  }
+  try {
+    const st = fstatSync(fd);
+    if (!st.isFile()) return null;
+    const size = Math.min(st.size, maxBytes);
+    const buf = Buffer.alloc(size);
+    let got = 0;
+    while (got < size) {
+      const n3 = readSync(fd, buf, got, size - got, got);
+      if (n3 <= 0) break;
+      got += n3;
+    }
+    return transcriptEntries(buf.subarray(0, got).toString("utf8"), limits, st.size > got);
+  } catch {
+    return null;
+  } finally {
+    closeSync(fd);
+  }
+}
+function contentText(content) {
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return null;
+  const texts = content.filter((c) => !!c && typeof c === "object" && c.type === "text" && typeof c.text === "string").map((c) => c.text);
+  return texts.length ? texts.join("\n") : null;
+}
+var INJECTED = /^\s*(?:<command-name>|<command-message>|<local-command-|<system-reminder>|<task-notification>|\[Request interrupted)/;
+function claudeTypedPrompt(e) {
+  if (e.type !== "user") return null;
+  if (e.isMeta === true || e.isCompactSummary === true || e.isVisibleInTranscriptOnly === true || e.isSidechain === true) return null;
+  if (e.promptSource === "system" || e.turnOrigin === "task_notification") return null;
+  const origin = e.origin;
+  if (origin && typeof origin === "object" && origin.kind !== void 0 && origin.kind !== "human") return null;
+  const msg = e.message;
+  if (!msg || typeof msg !== "object" || msg.role !== void 0 && msg.role !== "user") return null;
+  const text = contentText(msg.content);
+  if (!text || !text.trim() || INJECTED.test(text)) return null;
+  return text;
+}
+function cursorUserQuery(e) {
+  if (e.role !== "user") return null;
+  const text = contentText(e.message?.content);
+  if (!text) return null;
+  const q = /<user_query>\s*([\s\S]*?)\s*<\/user_query>/.exec(text)?.[1] ?? text.replace(/<timestamp>[\s\S]*?<\/timestamp>/g, "").trim();
+  return q || null;
+}
+var MAX_PROMPT_CHARS = 4e3;
+function firstPromptIn(path, pick3) {
+  const t = readTranscript(path, { maxBytes: TRANSCRIPT_HEAD_BYTES });
+  if (!t) return null;
+  for (const e of t.entries) {
+    const p = pick3(e);
+    if (p) return p.trim().slice(0, MAX_PROMPT_CHARS);
+  }
+  return null;
+}
+
 // src/transcript-parser.ts
-function parseTranscript(jsonlContent) {
+function parseTranscriptFile(path) {
+  const t = readTranscript(path);
+  return t ? parseEntries(t) : null;
+}
+function parseEntries(t) {
   const userTexts = [];
   const toolCalls = [];
-  for (const line2 of jsonlContent.split("\n")) {
-    const trimmed = line2.trim();
-    if (!trimmed) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch {
+  for (const e of t.entries) {
+    if (e.type === "user") {
+      const text = claudeTypedPrompt(e);
+      if (text) userTexts.push(text);
       continue;
     }
-    if (parsed.type !== "user" && parsed.type !== "assistant") continue;
-    const content = parsed.message?.content;
+    if (e.type !== "assistant") continue;
+    const content = e.message?.content;
     if (!Array.isArray(content)) continue;
-    if (parsed.type === "user") {
-      for (const block of content) {
-        if (block.type === "text" && typeof block.text === "string") {
-          userTexts.push(block.text);
-        }
-      }
-    }
-    if (parsed.type === "assistant") {
-      for (const block of content) {
-        if (block.type === "tool_use" && typeof block.id === "string" && typeof block.name === "string" && typeof block.input === "object" && block.input !== null) {
-          toolCalls.push({
-            id: block.id,
-            name: block.name,
-            input: block.input
-          });
-        }
+    for (const block of content) {
+      if (block?.type === "tool_use" && typeof block.id === "string" && typeof block.name === "string" && typeof block.input === "object" && block.input !== null) {
+        toolCalls.push({
+          id: block.id,
+          name: block.name,
+          input: block.input
+        });
       }
     }
   }
-  return { prompt: userTexts.join("\n\n"), toolCalls };
+  return { prompt: userTexts.join("\n\n"), toolCalls, truncated: t.truncated };
 }
 
 // src/git-notes.ts
@@ -8932,8 +9273,7 @@ function runSessionEnd(input) {
     clearStartSha(input.repoDir, input.sessionId);
     return;
   }
-  const transcriptRaw = readFileSync26(input.transcriptPath, "utf-8");
-  const { prompt: prompt2, toolCalls } = parseTranscript(transcriptRaw);
+  const { prompt: prompt2, toolCalls } = parseTranscriptFile(input.transcriptPath) ?? { prompt: "", toolCalls: [] };
   const now = (/* @__PURE__ */ new Date()).toISOString();
   for (const sha2 of commits) {
     const note = {
@@ -8958,7 +9298,7 @@ function runSessionEnd(input) {
 }
 
 // src/install.ts
-import { existsSync as existsSync23, mkdirSync as mkdirSync12, readFileSync as readFileSync27, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync23, mkdirSync as mkdirSync12, readFileSync as readFileSync26, writeFileSync as writeFileSync13 } from "fs";
 import { join as join32 } from "path";
 
 // templates/workflow.yml.ts
@@ -9003,7 +9343,7 @@ function writeSettingsHooks(claudeSettingsPath2) {
   mkdirSync12(join32(claudeSettingsPath2, ".."), { recursive: true });
   let settings = {};
   if (existsSync23(claudeSettingsPath2)) {
-    settings = JSON.parse(readFileSync27(claudeSettingsPath2, "utf-8"));
+    settings = JSON.parse(readFileSync26(claudeSettingsPath2, "utf-8"));
   }
   settings.hooks = {
     ...settings.hooks,
@@ -9294,7 +9634,7 @@ async function runVerify2(opts) {
 }
 
 // src/supervisor/review-at-stop.ts
-import { readFileSync as readFileSync33 } from "fs";
+import { readFileSync as readFileSync32 } from "fs";
 import { join as join39 } from "path";
 
 // src/core/removed-tests.ts
@@ -9396,7 +9736,7 @@ var confirmHermesEdits = (root, sid) => confirmEdits(root, sid, "hermes");
 
 // src/core/auto-report.ts
 import { execFileSync as execFileSync25 } from "child_process";
-import { existsSync as existsSync27, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync6, readFileSync as readFileSync32, rmSync as rmSync11, writeFileSync as writeFileSync17 } from "fs";
+import { existsSync as existsSync27, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync6, readFileSync as readFileSync31, rmSync as rmSync11, writeFileSync as writeFileSync17 } from "fs";
 import { tmpdir as tmpdir11 } from "os";
 import { join as join38 } from "path";
 
@@ -9647,7 +9987,7 @@ function renderSessionReport(ledgerEvents, extras = {}) {
 }
 
 // src/core/time-tokens.ts
-import { existsSync as existsSync25, readdirSync as readdirSync7, readFileSync as readFileSync28, statSync as statSync7 } from "fs";
+import { existsSync as existsSync25, readdirSync as readdirSync7, readFileSync as readFileSync27, statSync as statSync7 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join34 } from "path";
 var AGENT_STEPS = /* @__PURE__ */ new Set(["prompt", "tool_pre", "tool_post", "file_edit", "command", "stop"]);
@@ -9720,7 +10060,7 @@ function codexTokens(sessionId2, codexHome) {
   if (!file3) return null;
   try {
     if (statSync7(file3).size > 5e7) return null;
-    const counts = codexUsage(readFileSync28(file3, "utf8"));
+    const counts = codexUsage(readFileSync27(file3, "utf8"));
     return counts ? { counts, file: file3 } : null;
   } catch {
     return null;
@@ -9781,7 +10121,7 @@ ${reportTest.stderrTail}` : details.outputTail;
 import { spawn as spawn4 } from "child_process";
 import { execFileSync as execFileSync23 } from "child_process";
 import { createHash as createHash4 } from "crypto";
-import { mkdirSync as mkdirSync14, readFileSync as readFileSync29, writeFileSync as writeFileSync14 } from "fs";
+import { mkdirSync as mkdirSync14, readFileSync as readFileSync28, writeFileSync as writeFileSync14 } from "fs";
 import { tmpdir as tmpdir9 } from "os";
 import { join as join35 } from "path";
 
@@ -10700,7 +11040,7 @@ function fullDiff(repoRoot2, maxChars = 6e4) {
   let out = git10(["diff", "HEAD", "--", ".", ":(exclude).replume", ":(exclude).claude", ":(exclude).cursor", ":(exclude).codex"]);
   for (const f of git10(["ls-files", "--others", "--exclude-standard"]).split("\n").filter((f2) => f2 && !/^\.(?:replume|claude|cursor|codex)\//.test(f2)).slice(0, 20)) {
     try {
-      const text = readFileSync29(join35(repoRoot2, f), "utf8");
+      const text = readFileSync28(join35(repoRoot2, f), "utf8");
       out += `
 ${diffText("", text.slice(0, 2e4), f).replace("@@ -1,0 ", "@@ -0,0 ")}`;
     } catch {
@@ -10757,7 +11097,7 @@ function modelJudgeExtras(events, fresh) {
 // src/supervisor/unattributed.ts
 import { execFileSync as execFileSync24 } from "child_process";
 import { createHash as createHash5 } from "crypto";
-import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync30, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "fs";
+import { mkdtempSync as mkdtempSync5, readFileSync as readFileSync29, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "fs";
 import { tmpdir as tmpdir10 } from "os";
 import { join as join36 } from "path";
 var UNATTRIBUTED_RULE = "changed_outside_tools";
@@ -10882,7 +11222,7 @@ function contractTampered(repoRoot2, now = /* @__PURE__ */ new Date()) {
   if (b.status !== "ok") return null;
   let current = null;
   try {
-    current = readFileSync30(path);
+    current = readFileSync29(path);
   } catch {
     current = null;
   }
@@ -10899,7 +11239,7 @@ function contractTampered(repoRoot2, now = /* @__PURE__ */ new Date()) {
   }
   const copy = currentContractCopy(path);
   try {
-    const saved = readFileSync30(copy);
+    const saved = readFileSync29(copy);
     if (hash2(saved) === b.baseline.policy_hash && (current === null || savedTo !== null)) {
       writeFileSync15(path, saved);
       return { restored: true, savedTo };
@@ -10928,9 +11268,9 @@ function unattributedCheck() {
     const prot = found.filter((f) => f.protectedBy);
     const outsideFingerprint = createHash5("sha256").update(found.map((f) => `${f.path}:${f.blob}`).join("\n")).digest("hex").slice(0, 16);
     const raw5 = { files: found.map((f) => ({ path: f.path, protectedBy: f.protectedBy })), base: base4, outsideFingerprint };
-    const list4 = found.map((f) => f.path).join(", ");
+    const list5 = found.map((f) => f.path).join(", ");
     if (!prot.length || !auto) {
-      return { rule: UNATTRIBUTED_RULE, outcome: "pass", message: null, summary: `${UNATTRIBUTED_RULE}: ${list4} changed outside captured tools`, raw: { ...raw5, outcome: "listed" }, outsideFingerprint };
+      return { rule: UNATTRIBUTED_RULE, outcome: "pass", message: null, summary: `${UNATTRIBUTED_RULE}: ${list5} changed outside captured tools`, raw: { ...raw5, outcome: "listed" }, outsideFingerprint };
     }
     const max = c.config.auto.max_retries;
     const sofar = c.session.filter(isBlock).length;
@@ -10946,7 +11286,7 @@ function unattributedCheck() {
 
 // src/core/project-memory.ts
 import { createHash as createHash6 } from "crypto";
-import { appendFileSync as appendFileSync7, existsSync as existsSync26, lstatSync as lstatSync3, mkdirSync as mkdirSync15, readFileSync as readFileSync31, readdirSync as readdirSync8, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "fs";
+import { appendFileSync as appendFileSync7, existsSync as existsSync26, lstatSync as lstatSync3, mkdirSync as mkdirSync15, readFileSync as readFileSync30, readdirSync as readdirSync8, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "fs";
 import { join as join37 } from "path";
 var dirOf = (root) => join37(root, ".replume", "memory");
 var clip2 = (value, max, root) => redactLedgerText(value.replace(/\s+/g, " ").trim(), root).slice(0, max);
@@ -10957,7 +11297,7 @@ function ensureIgnored(root) {
     writeFileSync16(gi, DEFAULT_REPLUME_GITIGNORE + "memory/\n");
     return;
   }
-  const current = readFileSync31(gi, "utf8");
+  const current = readFileSync30(gi, "utf8");
   if (!current.split(/\r?\n/).some((line2) => line2.trim() === "memory/"))
     appendFileSync7(gi, `${current.endsWith("\n") || !current ? "" : "\n"}memory/
 `);
@@ -11012,7 +11352,7 @@ function listProjectMemory(root) {
       const path = join37(dir2, name);
       const st = lstatSync3(path);
       if (!st.isFile() || st.size > 8192) continue;
-      const e = JSON.parse(readFileSync31(path, "utf8"));
+      const e = JSON.parse(readFileSync30(path, "utf8"));
       if (e.v === 1 && typeof e.id === "string" && typeof e.task === "string" && typeof e.at === "string" && Array.isArray(e.files) && e.files.every((f) => typeof f === "string") && Array.isArray(e.steers) && e.steers.every((s) => s && typeof s.kind === "string" && typeof s.reason === "string") && typeof e.verdict === "string")
         out.push({ v: 1, id: clip2(e.id, 80, root), at: e.at, task: clip2(e.task, 200, root), files: e.files.slice(0, 16).map((f) => clip2(f, 120, root)), steers: e.steers.slice(0, 4).map((s) => ({ kind: clip2(s.kind, 32, root), reason: clip2(s.reason, 150, root) })), verdict: clip2(e.verdict, 24, root) });
     } catch {
@@ -11122,12 +11462,12 @@ function refreshReportTime(repoRoot2, sessionId2) {
     const lines = timeAndTokensLines(repoRoot2, sessionId2, agentOfSession(repoRoot2, sessionId2), sessionEvents(repoRoot2, sessionId2));
     const esc = (t) => t.replace(/([\\`*_[])/g, "\\$1");
     const htmlEsc = (t) => t.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-    const md2 = readFileSync32(mdPath, "utf8");
+    const md2 = readFileSync31(mdPath, "utf8");
     const mdNew = md2.replace(/(## Time and tokens\n\n)((?:- .*\n?)+)/, (_m, head) => `${head}${lines.map((l) => `- ${esc(l)}`).join("\n")}
 `);
     if (mdNew !== md2) writeFileSync17(mdPath, mdNew);
     if (existsSync27(htmlPath)) {
-      const html2 = readFileSync32(htmlPath, "utf8");
+      const html2 = readFileSync31(htmlPath, "utf8");
       const htmlNew = html2.replace(/(<h2>Time and tokens<\/h2>\s*<ul>)([\s\S]*?)(<\/ul>)/, (_m, a, _b, c) => `${a}${lines.map((l) => `<li>${htmlEsc(l)}</li>`).join("")}${c}`);
       if (htmlNew !== html2) writeFileSync17(htmlPath, htmlNew);
     }
@@ -11546,7 +11886,7 @@ function reviewAtStop(i) {
       ...testEditsAskedFor(i.contract.task, i.repoRoot, void 0, base4).paths,
       ...changedFiles.filter((p) => {
         try {
-          return isConfirmed(i.repoRoot, p, readFileSync33(join39(i.repoRoot, p), "utf8"));
+          return isConfirmed(i.repoRoot, p, readFileSync32(join39(i.repoRoot, p), "utf8"));
         } catch {
           return false;
         }
@@ -11574,11 +11914,11 @@ import { homedir as homedir4 } from "os";
 import { execFileSync as execFileSync27 } from "child_process";
 import { existsSync as existsSync30 } from "fs";
 import { join as join41 } from "path";
-import { readFileSync as readFileSync36 } from "fs";
+import { readFileSync as readFileSync35 } from "fs";
 
 // src/core/draft.ts
 import { execFileSync as execFileSync26 } from "child_process";
-import { existsSync as existsSync28, lstatSync as lstatSync4, readFileSync as readFileSync34 } from "fs";
+import { existsSync as existsSync28, lstatSync as lstatSync4, readFileSync as readFileSync33 } from "fs";
 import { join as join40, posix as posix2 } from "path";
 var LOCKFILES = ["package-lock.json", "npm-shrinkwrap.json", "yarn.lock", "pnpm-lock.yaml", "bun.lockb", "poetry.lock", "Pipfile.lock", "uv.lock", "Cargo.lock", "go.sum", "Gemfile.lock", "composer.lock"];
 var CI_CONFIG = [
@@ -11604,7 +11944,7 @@ function trackedFiles(repoRoot2) {
 }
 var read3 = (repoRoot2, rel3) => {
   try {
-    return readFileSync34(join40(repoRoot2, rel3), "utf-8");
+    return readFileSync33(join40(repoRoot2, rel3), "utf-8");
   } catch {
     return "";
   }
@@ -11643,8 +11983,8 @@ function draftContract(input) {
   const notes = [];
   const allow = [];
   const protect = [];
-  const add2 = (list4, glob, note) => {
-    if (!list4.includes(glob)) list4.push(glob);
+  const add2 = (list5, glob, note) => {
+    if (!list5.includes(glob)) list5.push(glob);
     notes.push(note);
   };
   const t = detectTestCommand(input.repoRoot, files);
@@ -11653,7 +11993,7 @@ function draftContract(input) {
     const path = join40(input.repoRoot, f);
     try {
       if (!lstatSync4(path).isFile() || lstatSync4(path).isSymbolicLink()) return [];
-      const s = parseScenario(readFileSync34(path, "utf8"), f);
+      const s = parseScenario(readFileSync33(path, "utf8"), f);
       return [s.id === posix2.basename(f).replace(/\.ya?ml$/, "") ? s : null].filter((x) => x !== null);
     } catch {
       notes.push(`must_check: skipped invalid scenario ${f}; fix it before verification`);
@@ -11750,7 +12090,7 @@ function allowHasNoSource(allow) {
 var ALLOW_NO_SOURCE_WARNING = "allow contains no source files; the agent may have no allowed way to finish this task. Name the files in --task or edit allow.";
 
 // src/core/mode.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync17, readFileSync as readFileSync35, writeFileSync as writeFileSync18 } from "fs";
+import { existsSync as existsSync29, mkdirSync as mkdirSync17, readFileSync as readFileSync34, writeFileSync as writeFileSync18 } from "fs";
 import { dirname as dirname11 } from "path";
 function readMode(repoRoot2) {
   return loadConfig(repoRoot2).mode;
@@ -11759,7 +12099,7 @@ function writeMode(repoRoot2, mode) {
   const path = configPath(repoRoot2);
   mkdirSync17(dirname11(path), { recursive: true });
   const line2 = `mode: ${mode}`;
-  const current = existsSync29(path) ? readFileSync35(path, "utf8") : "";
+  const current = existsSync29(path) ? readFileSync34(path, "utf8") : "";
   if (/^mode:.*$/m.test(current)) writeFileSync18(path, current.replace(/^mode:.*$/m, line2));
   else writeFileSync18(path, `${line2}
 ${current}`);
@@ -11963,7 +12303,7 @@ function failingProtectedTests(repoRoot2, protect, output) {
     if (output.includes(t) || output.includes(join41(repoRoot2, t))) return true;
     let text = "";
     try {
-      text = readFileSync36(join41(repoRoot2, t), "utf8");
+      text = readFileSync35(join41(repoRoot2, t), "utf8");
     } catch {
       return false;
     }
@@ -12030,7 +12370,7 @@ function modifiedNow(repoRoot2) {
 }
 
 // src/agents/claude/install.ts
-import { copyFileSync as copyFileSync5, existsSync as existsSync31, mkdirSync as mkdirSync18, readFileSync as readFileSync37, writeFileSync as writeFileSync19 } from "fs";
+import { copyFileSync as copyFileSync5, existsSync as existsSync31, mkdirSync as mkdirSync18, readFileSync as readFileSync36, writeFileSync as writeFileSync19 } from "fs";
 import { dirname as dirname12, join as join42 } from "path";
 var DEFAULT_HOOK_COMMAND = "replume hook claude";
 var HOOK_EVENTS = ["PreToolUse", "PostToolUse", "PostToolUseFailure", "UserPromptSubmit", "Stop", "SessionEnd"];
@@ -12073,7 +12413,7 @@ function installClaudeHooks(repoRoot2, opts = {}) {
   let current = {};
   let original = null;
   if (existsSync31(settingsPath)) {
-    original = readFileSync37(settingsPath, "utf-8");
+    original = readFileSync36(settingsPath, "utf-8");
     try {
       const parsed = original.trim() ? JSON.parse(original) : {};
       if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new Error("not a JSON object");
@@ -12097,7 +12437,7 @@ function installClaudeHooks(repoRoot2, opts = {}) {
 }
 function replumeStopTimeoutSec(repoRoot2) {
   try {
-    const settings = JSON.parse(readFileSync37(claudeSettingsPath(repoRoot2), "utf-8"));
+    const settings = JSON.parse(readFileSync36(claudeSettingsPath(repoRoot2), "utf-8"));
     for (const g of settings.hooks?.Stop ?? []) for (const h of g.hooks ?? []) if (isReplume2(h, DEFAULT_HOOK_COMMAND) && typeof h.timeout === "number") return h.timeout;
   } catch {
   }
@@ -12107,7 +12447,7 @@ function replumeStopTimeoutSec(repoRoot2) {
 // src/core/shell-observe.ts
 import { execFileSync as execFileSync28 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { existsSync as existsSync32, lstatSync as lstatSync5, mkdirSync as mkdirSync19, readFileSync as readFileSync38, rmSync as rmSync12, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync32, lstatSync as lstatSync5, mkdirSync as mkdirSync19, readFileSync as readFileSync37, rmSync as rmSync12, writeFileSync as writeFileSync20 } from "fs";
 import { tmpdir as tmpdir12 } from "os";
 import { join as join43, resolve as resolve6 } from "path";
 var MAX_TRACKED = 5e3;
@@ -12163,7 +12503,7 @@ function treeState(repoRoot2) {
     return null;
   }
 }
-function changedSince(repoRoot2, before) {
+function changedSince2(repoRoot2, before) {
   try {
     const now = changedNow(repoRoot2);
     if (!now) return [];
@@ -12210,14 +12550,14 @@ function takeTreeChanges(repoRoot2, sessionId2, toolUseId) {
   let state;
   try {
     if (!existsSync32(f)) return null;
-    state = JSON.parse(readFileSync38(f, "utf-8"));
+    state = JSON.parse(readFileSync37(f, "utf-8"));
   } catch {
     return null;
   } finally {
     rmSync12(f, { force: true });
   }
   if (!state || typeof state.files !== "object" || state.files === null) return null;
-  return changedSince(repoRoot2, state);
+  return changedSince2(repoRoot2, state);
 }
 function forgetTree(repoRoot2, sessionId2, toolUseId) {
   if (toolUseId) rmSync12(stateFile(repoRoot2, sessionId2, toolUseId), { force: true });
@@ -12278,14 +12618,14 @@ async function supervise(input, opts) {
 }
 
 // src/supervisor/done.ts
-import { existsSync as existsSync33, readFileSync as readFileSync39 } from "fs";
+import { existsSync as existsSync33, readFileSync as readFileSync38 } from "fs";
 import { join as join44 } from "path";
 var DONE_RULE = "done_unmet";
 var DEFAULT_MAX_STOP_BLOCKS = 2;
 var LIST_OPS2 = /* @__PURE__ */ new Set([";", "&&", "||", "|", "|&", "&", "(", ")"]);
 var REDIRECT_OPS2 = /* @__PURE__ */ new Set([">", ">>", ">|", "&>", "&>>", ">&", "<", "<<", "<<<", "<&"]);
 var HELP_ONLY = /* @__PURE__ */ new Set(["--help", "-h", "--version"]);
-var CWD_COMMANDS = /* @__PURE__ */ new Set(["cd", "pushd", "popd"]);
+var CWD_COMMANDS2 = /* @__PURE__ */ new Set(["cd", "pushd", "popd"]);
 var ENV_PREFIX = /^[A-Za-z_][A-Za-z0-9_]*=/;
 function stripEnv(words6) {
   let w = words6;
@@ -12303,7 +12643,7 @@ function runBinding(ran, wanted) {
     const helpish = (a) => HELP_ONLY.has(a) || a === "--";
     const isHelp = extra.length > 0 && extra.every(helpish) && extra.some((a) => HELP_ONLY.has(a));
     if (extra.length > 0 && !isHelp) return;
-    if (segs.slice(0, i).some((earlier) => CWD_COMMANDS.has(earlier[0] ?? ""))) return;
+    if (segs.slice(0, i).some((earlier) => CWD_COMMANDS2.has(earlier[0] ?? ""))) return;
     hit = i;
     help = isHelp;
   });
@@ -12356,7 +12696,7 @@ function doneStatus(contract, sessionEvents2, repoRoot2) {
       const file3 = join44(".replume", "scenarios", `${d.scenario}.yaml`);
       let run = null;
       try {
-        if (existsSync33(join44(repoRoot2, file3))) run = parseScenario(readFileSync39(join44(repoRoot2, file3), "utf-8"), file3).run;
+        if (existsSync33(join44(repoRoot2, file3))) run = parseScenario(readFileSync38(join44(repoRoot2, file3), "utf-8"), file3).run;
       } catch {
         run = null;
       }
@@ -12376,7 +12716,7 @@ function doneMessage(s, allow = [], mode = "approve") {
 
 // src/supervisor/wire.ts
 import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync34, mkdirSync as mkdirSync20, readFileSync as readFileSync40, rmSync as rmSync13, statSync as statSync8, writeFileSync as writeFileSync21 } from "fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync20, readFileSync as readFileSync39, rmSync as rmSync13, statSync as statSync8, writeFileSync as writeFileSync21 } from "fs";
 import { tmpdir as tmpdir13 } from "os";
 import { dirname as dirname13, join as join45, resolve as resolve7 } from "path";
 var STEER_RULE_PREFIX = "supervisor_";
@@ -12387,7 +12727,7 @@ var stashFile = (repoRoot2, sessionId2, rel3, toolUseId) => join45(stashDir(repo
 function readText(abs) {
   try {
     if (!existsSync34(abs) || statSync8(abs).size > MAX_FILE_BYTES) return null;
-    return readFileSync40(abs, "utf-8");
+    return readFileSync39(abs, "utf-8");
   } catch {
     return null;
   }
@@ -12408,7 +12748,7 @@ function takeBefore(repoRoot2, sessionId2, rel3, toolUseId) {
   const f = stashFile(repoRoot2, sessionId2, rel3, toolUseId);
   try {
     if (!existsSync34(f)) return null;
-    const v2 = JSON.parse(readFileSync40(f, "utf-8"));
+    const v2 = JSON.parse(readFileSync39(f, "utf-8"));
     rmSync13(f, { force: true });
     return typeof v2.text === "string" ? v2.text : null;
   } catch {
@@ -12567,7 +12907,7 @@ function ranToEvent(ran, session) {
 }
 
 // src/agents/claude/payload.ts
-import { existsSync as existsSync35, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync35, readFileSync as readFileSync40 } from "fs";
 import { isAbsolute as isAbsolute5, resolve as resolve8 } from "path";
 function parsePayload(text) {
   const x = JSON.parse(text);
@@ -12580,7 +12920,7 @@ function parsePayload(text) {
 var str2 = (v2) => typeof v2 === "string" ? v2 : "";
 function readIfExists(path) {
   try {
-    return existsSync35(path) ? readFileSync41(path, "utf-8") : "";
+    return existsSync35(path) ? readFileSync40(path, "utf-8") : "";
   } catch {
     return "";
   }
@@ -12763,7 +13103,16 @@ function decide2(p, repoRoot2, proposal, sessionEvents2, env, deps) {
   const contract = loaded && !isDraft(loaded) ? effectivePolicy(loaded) : null;
   const layer2 = layer2ConfigFromEnv(env);
   const judge = deps.judge !== void 0 ? layer2.mode === "off" ? null : deps.judge : judgeFromConfig(layer2);
-  const input = { anchor: taskAnchor(contract, sessionEvents2), recent: sessionEvents2, proposal, repoRoot: repoRoot2, scratchDirs: p.scratchpad_dir ? [p.scratchpad_dir] : [], mode: loadConfig(repoRoot2).mode, legacyClaim: !loadConfig(repoRoot2).supervisor.checks };
+  const input = {
+    anchor: taskAnchor(contract, sessionEvents2),
+    recent: sessionEvents2,
+    proposal,
+    repoRoot: repoRoot2,
+    scratchDirs: p.scratchpad_dir ? [p.scratchpad_dir] : [],
+    mode: loadConfig(repoRoot2).mode,
+    legacyClaim: !loadConfig(repoRoot2).supervisor.checks,
+    baseFailing: baseFailingFor({ repoRoot: repoRoot2, session: sessionEvents2, command: contract?.test_command, timeoutSec: loadConfig(repoRoot2).auto.test_timeout_sec, runner: deps.testRunner })
+  };
   const ledger = ledgerPath(repoRoot2);
   const slot = {
     reserve: () => {
@@ -12795,6 +13144,17 @@ function wireContext(p, repoRoot2) {
   }
   return { repoRoot: repoRoot2, sessionId: p.session_id, agent: "claude-code", config: loadConfig(repoRoot2), contract };
 }
+function contractFromTranscript(p, repoRoot2, session, hook2) {
+  if (!p.transcript_path || session.some((e) => e.type === "prompt")) return false;
+  try {
+    if (loadConfig(repoRoot2).mode !== "auto") return false;
+    const prompt2 = firstPromptIn(p.transcript_path, claudeTypedPrompt);
+    if (!prompt2) return false;
+    return ensureAutoContractLate({ repoRoot: repoRoot2, sessionId: p.session_id, agent: "claude-code", hook: hook2, fallbackPrompt: () => prompt2 }) === "created";
+  } catch {
+    return false;
+  }
+}
 function preToolUse(p, repoRoot2, env, deps) {
   const ledger = ledgerPath(repoRoot2);
   const action = toProposedAction(p, repoRoot2);
@@ -12802,7 +13162,8 @@ function preToolUse(p, repoRoot2, env, deps) {
     if (loadConfig(repoRoot2).supervisor.checks) stashBefore(repoRoot2, p.session_id, action.paths, p.tool_use_id);
   }
   const comparing = needsTreeCompare(action) && rememberTree(repoRoot2, p.session_id, p.tool_use_id);
-  const session = readEvents(ledger).events.filter((e) => e.sessionId === p.session_id);
+  let session = readEvents(ledger).events.filter((e) => e.sessionId === p.session_id);
+  if (contractFromTranscript(p, repoRoot2, session, "PreToolUse")) session = readEvents(ledger).events.filter((e) => e.sessionId === p.session_id);
   return andThen(decide2(p, repoRoot2, { kind: "action", action }, session, env, deps), ({ result: result2, contract }) => {
     const deciding = result2.findings.find((f) => f.decision === result2.decision);
     if (comparing && result2.decision === "block") forgetTree(repoRoot2, p.session_id, p.tool_use_id);
@@ -12921,6 +13282,7 @@ function stop(p, repoRoot2, env, deps) {
   const startedAtMs = Date.now();
   const ledger = ledgerPath(repoRoot2);
   let session = readEvents(ledger).events.filter((e) => e.sessionId === p.session_id);
+  if (contractFromTranscript(p, repoRoot2, session, "Stop")) session = readEvents(ledger).events.filter((e) => e.sessionId === p.session_id);
   const lastAssistantMessage = typeof p.last_assistant_message === "string" ? p.last_assistant_message : "";
   const stopHookActive = p.stop_hook_active === true;
   return Promise.resolve(decide2(p, repoRoot2, { kind: "stop", lastAssistantMessage, stopHookActive }, session, env, deps)).then(async ({ result: result2, contract }) => {
@@ -13230,7 +13592,6 @@ function handleClaudeHook(stdinText, env = process.env, deps = {}) {
 }
 
 // src/agents/cursor/handler.ts
-import { closeSync, openSync, readSync } from "fs";
 import { isAbsolute as isAbsolute8, relative as relative8, resolve as resolve9, sep as sep5 } from "path";
 
 // src/agents/cursor/adapter.ts
@@ -13526,7 +13887,7 @@ function cursorPayloadToAction(raw5, repoRoot2, fallback = {}) {
 
 // src/agents/codex/auto.ts
 import { spawn as spawn6 } from "child_process";
-import { existsSync as existsSync36, readFileSync as readFileSync42 } from "fs";
+import { existsSync as existsSync36, readFileSync as readFileSync41 } from "fs";
 import { join as join48 } from "path";
 function policy(repoRoot2) {
   try {
@@ -13721,7 +14082,7 @@ function autoSessionEnd(i) {
 
 // src/agents/cursor/install.ts
 import { createHash as createHash9 } from "crypto";
-import { existsSync as existsSync37, mkdirSync as mkdirSync22, readFileSync as readFileSync43, renameSync, rmSync as rmSync14, writeFileSync as writeFileSync22 } from "fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync22, readFileSync as readFileSync42, renameSync, rmSync as rmSync14, writeFileSync as writeFileSync22 } from "fs";
 import { dirname as dirname14, join as join49 } from "path";
 var CURSOR_HOOK_COMMAND = "replume hook cursor";
 var CURSOR_HOOK_EVENTS = [
@@ -13769,7 +14130,7 @@ function exactInstalledEntry(x, command, event) {
 function validateCursorHooksConfig(root, opts = {}) {
   const path = cursorHooksPath(root);
   const command = opts.command ?? CURSOR_HOOK_COMMAND;
-  const config = existsSync37(path) ? parseConfig2(readFileSync43(path, "utf8"), path) : {};
+  const config = existsSync37(path) ? parseConfig2(readFileSync42(path, "utf8"), path) : {};
   const hooks = config.hooks ?? {};
   for (const event of CURSOR_HOOK_EVENTS) {
     if (hooks[event] !== void 0 && !Array.isArray(hooks[event]))
@@ -13779,7 +14140,7 @@ function validateCursorHooksConfig(root, opts = {}) {
   if (existsSync37(statePath)) {
     let state;
     try {
-      state = JSON.parse(readFileSync43(statePath, "utf8"));
+      state = JSON.parse(readFileSync42(statePath, "utf8"));
     } catch {
       throw new Error(`${statePath} is not valid JSON; nothing was changed. Fix it and run replume init again.`);
     }
@@ -13793,7 +14154,7 @@ function installCursorHooks(root, opts = {}) {
   const statePath = statePathFor(path);
   const hadOriginal = existsSync37(path);
   const command = opts.command ?? CURSOR_HOOK_COMMAND;
-  const original = hadOriginal ? readFileSync43(path, "utf8") : null;
+  const original = hadOriginal ? readFileSync42(path, "utf8") : null;
   const config = original === null ? {} : parseConfig2(original, path);
   const hooks = { ...config.hooks ?? {} };
   const added = [];
@@ -13824,7 +14185,7 @@ function installCursorHooks(root, opts = {}) {
     if (original !== null) writeFileSync22(backupPath, original, { flag: "wx" });
     writeFileSync22(statePath, JSON.stringify({ hadOriginal, installedHash: hash(updated), added, command }) + "\n", { flag: "wx" });
   } else {
-    const state = JSON.parse(readFileSync43(statePath, "utf8"));
+    const state = JSON.parse(readFileSync42(statePath, "utf8"));
     if (state.command !== command) throw new Error(`Cursor hooks already installed with a different command; uninstall first`);
     state.added = [.../* @__PURE__ */ new Set([...state.added, ...added])];
     state.installedHash = hash(updated);
@@ -13840,13 +14201,13 @@ function uninstallCursorHooks(root) {
   const backupPath = backupPathFor(path);
   const statePath = statePathFor(path);
   if (!existsSync37(statePath)) return { restored: false, path };
-  const state = JSON.parse(readFileSync43(statePath, "utf8"));
-  const current = existsSync37(path) ? readFileSync43(path, "utf8") : null;
+  const state = JSON.parse(readFileSync42(statePath, "utf8"));
+  const current = existsSync37(path) ? readFileSync42(path, "utf8") : null;
   const unchanged = current !== null && hash(current) === state.installedHash;
   if (unchanged) {
     if (state.hadOriginal) {
       if (!existsSync37(backupPath)) throw new Error(`Cursor hook backup missing: ${backupPath}`);
-      writeFileSync22(path, readFileSync43(backupPath));
+      writeFileSync22(path, readFileSync42(backupPath));
     } else rmSync14(path);
   } else if (current !== null) {
     const config = parseConfig2(current, path);
@@ -13871,7 +14232,7 @@ function uninstallCursorHooks(root) {
 function cursorStopSettings(root, command = CURSOR_HOOK_COMMAND) {
   const fallback = { timeoutSec: null, loopLimit: 5 };
   try {
-    const config = parseConfig2(readFileSync43(cursorHooksPath(root), "utf8"), cursorHooksPath(root));
+    const config = parseConfig2(readFileSync42(cursorHooksPath(root), "utf8"), cursorHooksPath(root));
     const entries = config.hooks?.stop;
     const ours = (x) => managedEntry(x, command) || isObject(x) && typeof x.command === "string" && /\bhook cursor\s*$/.test(x.command);
     const entry = Array.isArray(entries) ? entries.find(ours) : void 0;
@@ -13887,33 +14248,7 @@ function cursorStopSettings(root, command = CURSOR_HOOK_COMMAND) {
 // src/agents/cursor/handler.ts
 var relPath = (root, p) => (isAbsolute8(p) ? relative8(root, p) : p).split(sep5).join("/");
 function firstPromptFromTranscript(path) {
-  if (typeof path !== "string" || !path.endsWith(".jsonl")) return null;
-  let head = "";
-  try {
-    const fd = openSync(path, "r");
-    try {
-      const buf = Buffer.alloc(64 * 1024);
-      head = buf.subarray(0, readSync(fd, buf, 0, buf.length, 0)).toString("utf8");
-    } finally {
-      closeSync(fd);
-    }
-  } catch {
-    return null;
-  }
-  for (const line2 of head.split("\n")) {
-    let m;
-    try {
-      m = JSON.parse(line2);
-    } catch {
-      continue;
-    }
-    const msg = m;
-    if (msg?.role !== "user" || !Array.isArray(msg.message?.content)) continue;
-    const text = msg.message.content.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("\n");
-    const q = /<user_query>\s*([\s\S]*?)\s*<\/user_query>/.exec(text)?.[1] ?? text.replace(/<timestamp>[\s\S]*?<\/timestamp>/g, "").trim();
-    if (q) return q.slice(0, 4e3);
-  }
-  return null;
+  return firstPromptIn(path, cursorUserQuery);
 }
 function handleCursorHook(stdinText, env = process.env, deps = {}) {
   try {
@@ -13965,7 +14300,7 @@ function handleCursorHook(stdinText, env = process.env, deps = {}) {
     const contract = isDraft(loaded) ? null : loaded;
     const action = cursorPayloadToAction(raw5, root, { tool: event.tool, paths: event.paths, command: event.command });
     const canEvaluate = event.type === "tool_pre" || event.type === "command" && raw5.hook_event_name === "beforeShellExecution" || event.type === "file_edit";
-    const evaluation = canEvaluate ? evaluate(action, { contract, history, repoRoot: root, mode: loadConfig(root).mode }) : null;
+    const evaluation = canEvaluate ? evaluate(action, { contract, history, repoRoot: root, mode: loadConfig(root).mode, baseFailing: baseFailingFor({ repoRoot: root, session: history, command: contract?.test_command, timeoutSec: loadConfig(root).auto.test_timeout_sec }) }) : null;
     const decision2 = {
       rule: evaluation?.hits[0]?.rule ?? null,
       action: evaluation?.action ?? "ok",
@@ -14011,7 +14346,7 @@ function handleCursorHook(stdinText, env = process.env, deps = {}) {
 // src/agents/codex/handler.ts
 import { execFileSync as execFileSync30 } from "child_process";
 import { createHash as createHash10 } from "crypto";
-import { existsSync as existsSync39, readFileSync as readFileSync45 } from "fs";
+import { existsSync as existsSync39, readFileSync as readFileSync44 } from "fs";
 import { resolve as resolve11 } from "path";
 
 // src/agents/codex/action.ts
@@ -14040,7 +14375,7 @@ function codexAction(payload, root) {
 }
 
 // src/agents/codex/install.ts
-import { copyFileSync as copyFileSync6, existsSync as existsSync38, mkdirSync as mkdirSync23, readFileSync as readFileSync44, writeFileSync as writeFileSync23 } from "fs";
+import { copyFileSync as copyFileSync6, existsSync as existsSync38, mkdirSync as mkdirSync23, readFileSync as readFileSync43, writeFileSync as writeFileSync23 } from "fs";
 import { dirname as dirname15, join as join50 } from "path";
 var CODEX_HOOK_COMMAND = "replume hook codex";
 var CODEX_HOOK_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop", "SessionEnd"];
@@ -14078,7 +14413,7 @@ function validateCodexHooks(root) {
   const path = codexHooksPath(root);
   if (!existsSync38(path)) return;
   try {
-    const parsed = JSON.parse(readFileSync44(path, "utf8"));
+    const parsed = JSON.parse(readFileSync43(path, "utf8"));
     if (!obj3(parsed)) throw new Error("expected an object");
     mergeCodexHooks(parsed);
   } catch (e) {
@@ -14088,7 +14423,7 @@ function validateCodexHooks(root) {
 function installCodexHooks(root) {
   validateCodexHooks(root);
   const path = codexHooksPath(root);
-  const original = existsSync38(path) ? readFileSync44(path, "utf8") : null;
+  const original = existsSync38(path) ? readFileSync43(path, "utf8") : null;
   const parsed = original ? JSON.parse(original) : {};
   const { config, added, updated } = mergeCodexHooks(parsed);
   if (added.length || updated.length) {
@@ -14100,7 +14435,7 @@ function installCodexHooks(root) {
 }
 function codexStopTimeoutSec(root, command = CODEX_HOOK_COMMAND) {
   try {
-    const parsed = JSON.parse(readFileSync44(codexHooksPath(root), "utf8"));
+    const parsed = JSON.parse(readFileSync43(codexHooksPath(root), "utf8"));
     const groups = obj3(parsed) && obj3(parsed.hooks) ? parsed.hooks.Stop : void 0;
     if (!Array.isArray(groups)) return null;
     for (const g of groups) {
@@ -14121,7 +14456,7 @@ var str4 = (x) => typeof x === "string" ? x : "";
 var result = (stdout) => ({ ...QUIET2, stdout });
 var fileHash = (path) => {
   try {
-    return createHash10("sha256").update(readFileSync45(path)).digest("hex");
+    return createHash10("sha256").update(readFileSync44(path)).digest("hex");
   } catch {
     return null;
   }
@@ -14225,7 +14560,7 @@ ${stop2.message}${note}` }));
     if (event === "PreToolUse") {
       if (a.kind === "edit" && a.paths.length && loadConfig(root).supervisor.checks) stashBefore(root, str4(p.session_id), a.paths, str4(p.tool_use_id) || void 0);
       const history = readEvents(ledger).events.filter((e) => e.sessionId === str4(p.session_id));
-      const verdict = evaluate(a, { contract, history, repoRoot: root, mode: loadConfig(root).mode });
+      const verdict = evaluate(a, { contract, history, repoRoot: root, mode: loadConfig(root).mode, baseFailing: baseFailingFor({ repoRoot: root, session: history, command: contract?.test_command, timeoutSec: loadConfig(root).auto.test_timeout_sec }) });
       const first = verdict.hits[0];
       appendEvent(ledger, {
         ...base4("tool_pre"),
@@ -14473,7 +14808,7 @@ function handleCopilotHook(stdinText, deps = {}) {
       const loaded = loadContract(contractPath(root));
       const contract = isDraft(loaded) ? null : loaded;
       const history = readEvents(ledgerPath(root)).events.filter((e) => e.sessionId === sid);
-      const verdict = evaluate(action, { contract, history, repoRoot: root, mode: loadConfig(root).mode });
+      const verdict = evaluate(action, { contract, history, repoRoot: root, mode: loadConfig(root).mode, baseFailing: baseFailingFor({ repoRoot: root, session: history, command: contract?.test_command, timeoutSec: loadConfig(root).auto.test_timeout_sec }) });
       appendEvent(ledgerPath(root), {
         ...base4("tool_pre"),
         tool: toolName,
@@ -14520,7 +14855,7 @@ function handleCopilotHook(stdinText, deps = {}) {
 }
 
 // src/agents/copilot/install.ts
-import { copyFileSync as copyFileSync7, existsSync as existsSync41, mkdirSync as mkdirSync24, readFileSync as readFileSync46, writeFileSync as writeFileSync24 } from "fs";
+import { copyFileSync as copyFileSync7, existsSync as existsSync41, mkdirSync as mkdirSync24, readFileSync as readFileSync45, writeFileSync as writeFileSync24 } from "fs";
 import { dirname as dirname17, join as join52 } from "path";
 var COPILOT_HOOK_COMMAND = "replume hook copilot";
 var COPILOT_HOOK_FILE = join52(".github", "hooks", "replume.json");
@@ -14536,18 +14871,18 @@ function mergeCopilotHooks(config, command = COPILOT_HOOK_COMMAND) {
   const added = [];
   const ours = (h) => obj4(h) && (h.bash === command || h.command === command);
   for (const event of EVENTS) {
-    const list4 = hooks[event] ?? [];
-    if (!Array.isArray(list4)) throw new Error(`hooks.${event} must be an array`);
-    if (list4.some(ours)) continue;
+    const list5 = hooks[event] ?? [];
+    if (!Array.isArray(list5)) throw new Error(`hooks.${event} must be an array`);
+    if (list5.some(ours)) continue;
     const timeoutSec = event === "agentStop" ? COPILOT_STOP_TIMEOUT_SEC : 15;
-    hooks[event] = [...list4, { type: "command", bash: command, command, timeoutSec }];
+    hooks[event] = [...list5, { type: "command", bash: command, command, timeoutSec }];
     added.push(event);
   }
   return { config: { ...config, version: 1, hooks }, added };
 }
 function installCopilotHooks(root) {
   const path = copilotHooksPath(root);
-  const original = existsSync41(path) ? readFileSync46(path, "utf8") : null;
+  const original = existsSync41(path) ? readFileSync45(path, "utf8") : null;
   let parsed = {};
   if (original !== null) {
     try {
@@ -14569,7 +14904,7 @@ function installCopilotHooks(root) {
 
 // src/agents/hermes/handler.ts
 import { execFileSync as execFileSync32 } from "child_process";
-import { existsSync as existsSync42, readFileSync as readFileSync47, rmSync as rmSync15, statSync as statSync9, writeFileSync as writeFileSync25 } from "fs";
+import { existsSync as existsSync42, readFileSync as readFileSync46, rmSync as rmSync15, statSync as statSync9, writeFileSync as writeFileSync25 } from "fs";
 import { realpathSync as realpathSync4 } from "fs";
 import { tmpdir as tmpdir14 } from "os";
 import { basename as basename4, dirname as dirname18, isAbsolute as isAbsolute10, join as join53, relative as relative10, resolve as resolve14 } from "path";
@@ -14654,7 +14989,7 @@ function rememberPrompt(sessionId2, text) {
 function takePrompt(sessionId2) {
   const file3 = promptFile(sessionId2);
   try {
-    const text = readFileSync47(file3, "utf8");
+    const text = readFileSync46(file3, "utf8");
     rmSync15(file3, { force: true });
     return text;
   } catch {
@@ -14750,7 +15085,7 @@ ${memory.text}` : memory.text;
       const loaded = loadContract(contractPath(root));
       const contract = isDraft(loaded) ? null : loaded;
       const history = readEvents(ledgerPath(root)).events.filter((e) => e.sessionId === sid);
-      const verdict = evaluate(action, { contract, history, repoRoot: root, mode: loadConfig(root).mode });
+      const verdict = evaluate(action, { contract, history, repoRoot: root, mode: loadConfig(root).mode, baseFailing: baseFailingFor({ repoRoot: root, session: history, command: contract?.test_command, timeoutSec: loadConfig(root).auto.test_timeout_sec }) });
       appendEvent(ledgerPath(root), {
         ...base4("tool_pre"),
         tool,
@@ -14835,7 +15170,7 @@ async function replayHooks(content, opts = {}) {
 
 // src/core/init.ts
 import { execFileSync as execFileSync33 } from "child_process";
-import { existsSync as existsSync43, mkdirSync as mkdirSync26, readFileSync as readFileSync48, writeFileSync as writeFileSync27 } from "fs";
+import { existsSync as existsSync43, mkdirSync as mkdirSync26, readFileSync as readFileSync47, writeFileSync as writeFileSync27 } from "fs";
 import { homedir as homedir5 } from "os";
 import { delimiter, join as join55 } from "path";
 
@@ -14979,7 +15314,7 @@ function uncommittedSetup(repoRoot2, files) {
 function runnerNotInstalled(repoRoot2) {
   let pkg;
   try {
-    pkg = JSON.parse(readFileSync48(join55(repoRoot2, "package.json"), "utf8"));
+    pkg = JSON.parse(readFileSync47(join55(repoRoot2, "package.json"), "utf8"));
   } catch {
     return null;
   }
@@ -14994,7 +15329,7 @@ function runnerNotInstalled(repoRoot2) {
 }
 
 // src/core/share.ts
-import { appendFileSync as appendFileSync9, existsSync as existsSync44, mkdirSync as mkdirSync27, readFileSync as readFileSync49, readdirSync as readdirSync9, statSync as statSync10, writeFileSync as writeFileSync28 } from "fs";
+import { appendFileSync as appendFileSync9, existsSync as existsSync44, mkdirSync as mkdirSync27, readFileSync as readFileSync48, readdirSync as readdirSync9, statSync as statSync10, writeFileSync as writeFileSync28 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join56, resolve as resolve15 } from "path";
 var SHARE_ENDPOINT = "https://replume.dev";
@@ -15082,14 +15417,14 @@ function saveShare(repoRoot2, r) {
   const dir2 = join56(repoRoot2, ".replume");
   mkdirSync27(dir2, { recursive: true });
   const ignore = join56(dir2, ".gitignore");
-  const prior = existsSync44(ignore) ? readFileSync49(ignore, "utf8") : "";
+  const prior = existsSync44(ignore) ? readFileSync48(ignore, "utf8") : "";
   if (!prior.split(/\r?\n/).includes("shares.jsonl")) writeFileSync28(ignore, `${prior}${prior && !prior.endsWith("\n") ? "\n" : ""}shares.jsonl
 `);
   appendFileSync9(sharesFile(repoRoot2), JSON.stringify(r) + "\n", { mode: 384 });
 }
 function readShares(repoRoot2) {
   if (!existsSync44(sharesFile(repoRoot2))) return [];
-  return readFileSync49(sharesFile(repoRoot2), "utf8").split(/\r?\n/).flatMap((l) => {
+  return readFileSync48(sharesFile(repoRoot2), "utf8").split(/\r?\n/).flatMap((l) => {
     try {
       const r = JSON.parse(l);
       return typeof r.id === "string" && typeof r.deleteToken === "string" ? [r] : [];
@@ -15120,7 +15455,7 @@ function destination(repo, pr) {
   if (!Number.isSafeInteger(pr) || pr < 1) throw new Error("--pr must be a positive PR number");
   return `https://github.com/${repo}/pull/${pr}`;
 }
-var list3 = (items) => items.length ? items.slice(0, 100).map((x) => `- ${x}`).join("\n") : "- none";
+var list4 = (items) => items.length ? items.slice(0, 100).map((x) => `- ${x}`).join("\n") : "- none";
 function verifyReportToPayload(r, client) {
   const verdict = r.verdict === "pass" ? "PASS" : r.verdict === "fail" ? "FAIL" : "INCOMPLETE";
   const markdown = [
@@ -15129,14 +15464,14 @@ function verifyReportToPayload(r, client) {
     "## What was asked",
     "- Task text is not stored in the verify JSON; see the local contract.",
     "## Tests",
-    list3([
+    list4([
       ...r.done.map((x) => `DONE: ${x.id}`),
       ...r.failed.map((x) => `FAILED: ${x.id}`),
       ...r.scenarios.map((x) => `${x.id}: ${x.status}`),
       ...(r.jiraCriteria ?? []).map((x) => `Jira criterion ${x.status}: ${x.text}`)
     ]),
     "## What was NOT checked",
-    list3(r.notChecked.map((x) => `${x.path}: ${x.reason}`)),
+    list4(r.notChecked.map((x) => `${x.path}: ${x.reason}`)),
     "## Agent hook limits",
     "- This saved verify report does not prove agent steps were captured in CI."
   ].join("\n");
@@ -15173,7 +15508,7 @@ async function postComment2(opts) {
 }
 
 // src/core/watch.ts
-import { existsSync as existsSync45, readFileSync as readFileSync50, statSync as statSync11, watchFile, unwatchFile } from "fs";
+import { existsSync as existsSync45, readFileSync as readFileSync49, statSync as statSync11, watchFile, unwatchFile } from "fs";
 import { basename as basename5 } from "path";
 var rawOf = (e) => e.raw && typeof e.raw === "object" && !Array.isArray(e.raw) ? e.raw : {};
 function clean(value) {
@@ -15287,7 +15622,7 @@ var flushes = (e) => e.type === "prompt" || e.type === "stop" || e.type === "rul
 function formatEvents(events, state, opts = {}) {
   const out = [];
   const flushAll = () => {
-    for (const list4 of state.pending.values()) for (const p of list4) out.push(formatEvent(p, opts));
+    for (const list5 of state.pending.values()) for (const p of list5) out.push(formatEvent(p, opts));
     state.pending.clear();
   };
   for (const e of events) {
@@ -15323,7 +15658,7 @@ function readNew(path, offset, opts = {}, state) {
   const size = statSync11(path).size;
   if (size < offset) offset = 0;
   if (size === offset) return { lines: [], offset, bad: 0 };
-  const buf = readFileSync50(path);
+  const buf = readFileSync49(path);
   const chunk = buf.subarray(offset, size).toString("utf-8");
   const lastNl = chunk.lastIndexOf("\n");
   if (lastNl < 0) return { lines: [], offset, bad: 0 };
@@ -15755,7 +16090,7 @@ function formatEvalReport(report) {
 }
 
 // src/core/doctor.ts
-import { existsSync as existsSync46, readFileSync as readFileSync51 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync50 } from "fs";
 import { homedir as homedir7 } from "os";
 import { isAbsolute as isAbsolute12, join as join58 } from "path";
 var object7 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
@@ -15799,7 +16134,7 @@ function otherHookWarnings(home = process.env.HOME || homedir7()) {
     if (!existsSync46(path)) continue;
     let config;
     try {
-      config = JSON.parse(readFileSync51(path, "utf8"));
+      config = JSON.parse(readFileSync50(path, "utf8"));
     } catch {
       warnings.push(`${agent} hook settings could not be read: ${path}`);
       continue;
@@ -15858,7 +16193,7 @@ program.command("github").description("Explicit GitHub PR integrations").command
     const pr = Number(opts.pr);
     const url = destination(opts.repo, pr);
     const file3 = findReport(root, opts.report);
-    const source = readFileSync52(file3, "utf8");
+    const source = readFileSync51(file3, "utf8");
     const client = `replume-cli ${package_default.version}`;
     let payload;
     if (file3.endsWith(".json")) {
@@ -15906,7 +16241,7 @@ program.command("share").description("Upload one session report to replume.dev a
       return;
     }
     const file3 = findReport(root, reportArg);
-    const payload = reportToPayload(readFileSync52(file3, "utf8"), { repoRoot: root, noDiff: opts.diff === false, client: `replume-cli ${package_default.version}` });
+    const payload = reportToPayload(readFileSync51(file3, "utf8"), { repoRoot: root, noDiff: opts.diff === false, client: `replume-cli ${package_default.version}` });
     console.log(renderPreview(payload, endpoint2));
     if (opts.dryRun) return;
     if (!opts.yes) {
@@ -16094,7 +16429,7 @@ function executeInit(opts) {
       const path = claudeSettingsPath(root);
       let parsed;
       try {
-        parsed = JSON.parse(readFileSync52(path, "utf8"));
+        parsed = JSON.parse(readFileSync51(path, "utf8"));
       } catch {
         throw new Error(`${path} is not valid JSON; nothing was changed. Fix it and run replume init again.`);
       }
@@ -16336,7 +16671,7 @@ program.command("confirm-config").description("Confirm one change to an existing
   let sha2 = opts.sha?.toLowerCase();
   if (!sha2) {
     try {
-      sha2 = contentSha(readFileSync52(join59(root, rel3)));
+      sha2 = contentSha(readFileSync51(join59(root, rel3)));
     } catch {
       fail(`${rel3} does not exist; pass --sha with the hash from Replume's message`);
     }
@@ -16386,7 +16721,7 @@ program.command("report").description("Re-print a saved report. Session report (
   if (!existsSync47(file3)) fail(`no report for ${commit.slice(0, 7)} at ${file3}; run replume verify --commit ${ref}`);
   let report;
   try {
-    report = JSON.parse(readFileSync52(file3, "utf-8"));
+    report = JSON.parse(readFileSync51(file3, "utf-8"));
   } catch (e) {
     fail(`${file3} is not valid JSON: ${e.message}`);
   }
@@ -16418,7 +16753,7 @@ demo.option("--replay <file>", "run a recorded events.jsonl session through the
     const sibling = file3.replace(/\.jsonl?$/, "") + ".contract.yaml";
     const contractFile = opts.contract ? resolve16(opts.contract) : existsSync47(sibling) ? sibling : contractPath(repoRoot());
     const contract = loadContract(contractFile);
-    console.log(renderReplay(replay(readFileSync52(file3, "utf-8"), contract), contract, contract ? contractFile : void 0));
+    console.log(renderReplay(replay(readFileSync51(file3, "utf-8"), contract), contract, contract ? contractFile : void 0));
   } catch (e) {
     fail(e.message);
   }
@@ -16429,8 +16764,8 @@ async function demoReplayHooks(path, contractOpt) {
   const sibling = file3.replace(/\.jsonl?$/, "") + ".contract.yaml";
   const contractFile = contractOpt ? resolve16(contractOpt) : existsSync47(sibling) ? sibling : null;
   try {
-    const r = await replayHooks(readFileSync52(file3, "utf-8"), {
-      contractYaml: contractFile ? readFileSync52(contractFile, "utf-8") : void 0,
+    const r = await replayHooks(readFileSync51(file3, "utf-8"), {
+      contractYaml: contractFile ? readFileSync51(contractFile, "utf-8") : void 0,
       env: process.env
     });
     console.log(REPLAY_HOOKS_BANNER);
@@ -16484,7 +16819,7 @@ hook.hook("preAction", () => {
 hook.command("judge-step").description("Internal: run one model-judge step judgment in the background (started by the supervisor when judge.enabled)").requiredOption("--job <file>", "JSON job file written by the hook").action(async (opts) => {
   let job = null;
   try {
-    job = JSON.parse(readFileSync52(opts.job, "utf8"));
+    job = JSON.parse(readFileSync51(opts.job, "utf8"));
   } catch {
     job = null;
   }