severally-mcp 2.3.1 → 2.4.0

package/src/adapters/codex.mjs

@@ -69,13 +69,29 @@ export const FORBIDDEN_FLAGS = [
 // feature switch that could re-enable what --ignore-user-config drops, and
 // the modes that leave the read-only sandbox.
 export const RESERVED_FLAGS = [
-  '-s', '--sandbox', '--config', '--cd', '--model', '--output-last-message',
-  '--profile', '-p', '--enable', '--full-auto', '--worktree', '--cyber-access-program',
+  '-s',
+  '--sandbox',
+  '--config',
+  '--cd',
+  '--model',
+  '--output-last-message',
+  '--profile',
+  '-p',
+  '--enable',
+  '--full-auto',
+  '--worktree',
+  '--cyber-access-program',
 ];
 
 const PROFILE = 'severally';
 
-const listDir = (dir) => { try { return fs.readdirSync(dir); } catch { return []; } };
+const listDir = (dir) => {
+  try {
+    return fs.readdirSync(dir);
+  } catch {
+    return [];
+  }
+};
 
 /**
  * The profile's filesystem table, as TOML: everything readable, the protected
@@ -90,11 +106,16 @@ export function filesystemPermissions() {
   fs.mkdirSync(path.join(POLICY.home, 'homes'), { recursive: true, mode: 0o700 });
   const codexHome = path.join(os.homedir(), '.codex').replaceAll('\\', '/');
   const denied = protectedRoots().flatMap((p) => {
-    if (p === codexHome) return listDir(codexHome).filter((n) => n !== 'packages').map((n) => `${codexHome}/${n}`);
+    if (p === codexHome)
+      return listDir(codexHome)
+        .filter((n) => n !== 'packages')
+        .map((n) => `${codexHome}/${n}`);
     const star = p.indexOf('/*/');
     if (star === -1) return [p];
     const [parent, rest] = [p.slice(0, star), p.slice(star + 3)];
-    return listDir(parent).map((n) => `${parent}/${n}/${rest}`).filter((q) => fs.existsSync(q));
+    return listDir(parent)
+      .map((n) => `${parent}/${n}/${rest}`)
+      .filter((q) => fs.existsSync(q));
   });
   return `{ ":root" = "read", ${denied.map((p) => `${JSON.stringify(p)} = "none"`).join(', ')} }`;
 }
@@ -106,24 +127,37 @@ export function buildInvocation({ workdir, schemaPath, consultant, network = 'on
   const args = [
     'exec',
     '--json',
-    '--color', 'never',
-    '-m', chosen,
-    '-c', `model_reasoning_effort="${consultant.effort ?? 'high'}"`,
-    '-c', `tools.web_search=${network !== 'off'}`,
+    '--color',
+    'never',
+    '-m',
+    chosen,
+    '-c',
+    `model_reasoning_effort="${consultant.effort ?? 'high'}"`,
+    '-c',
+    `tools.web_search=${network !== 'off'}`,
     ...(network === 'off' ? ['-c', 'web_search="disabled"'] : []),
-    '-c', 'hooks.enabled=false',
-    '-c', 'agents.enabled=false',
-    '-c', 'shell_environment_policy.inherit="core"',
-    '-c', 'shell_environment_policy.set={SEVERALLY_ACTIVE="1"}',
+    '-c',
+    'hooks.enabled=false',
+    '-c',
+    'agents.enabled=false',
+    '-c',
+    'shell_environment_policy.inherit="core"',
+    '-c',
+    'shell_environment_policy.set={SEVERALLY_ACTIVE="1"}',
     '--ignore-user-config',
     '--ignore-rules',
     '--skip-git-repo-check',
     '--ephemeral',
-    '-c', `default_permissions="${PROFILE}"`,
-    '-c', `permissions.${PROFILE}.filesystem=${filesystemPermissions()}`,
-    '-C', workdir,
-    '--output-schema', schemaPath,
-    '-o', lastMessagePath,
+    '-c',
+    `default_permissions="${PROFILE}"`,
+    '-c',
+    `permissions.${PROFILE}.filesystem=${filesystemPermissions()}`,
+    '-C',
+    workdir,
+    '--output-schema',
+    schemaPath,
+    '-o',
+    lastMessagePath,
     '-',
   ];
   return { command: t.cli, args, lastMessagePath, model: chosen };
@@ -146,7 +180,11 @@ export function interpret({ stdout, stderr, code, lastMessageText }) {
   for (const line of (stdout || '').split('\n')) {
     const t = line.trim();
     if (!t.startsWith('{')) continue;
-    try { events.push(JSON.parse(t)); } catch { /* partial line */ }
+    try {
+      events.push(JSON.parse(t));
+    } catch {
+      /* partial line */
+    }
   }
 
   const errorEvents = events.filter((e) => e.type === 'error' || e.type === 'turn.failed');
@@ -167,9 +205,7 @@ export function interpret({ stdout, stderr, code, lastMessageText }) {
     }
   }
 
-  const errorMsg = errorEvents
-    .map((e) => e.message ?? e.error?.message ?? JSON.stringify(e))
-    .join(' | ');
+  const errorMsg = errorEvents.map((e) => e.message ?? e.error?.message ?? JSON.stringify(e)).join(' | ');
   // An error the turn recovered from (the stream still ends in
   // turn.completed, with an answer) does not throw the answer away; the lead
   // is told about it instead. A turn that ends in turn.failed has failed,
@@ -210,7 +246,9 @@ export function progress({ stdout }) {
     try {
       const e = JSON.parse(t);
       if (typeof e?.type === 'string' && e.type.startsWith('item.')) items.push(e);
-    } catch { /* a partial line, e.g. when the child was killed mid-write */ }
+    } catch {
+      /* a partial line, e.g. when the child was killed mid-write */
+    }
   }
   if (!items.length) return null;
   const last = items[items.length - 1];
@@ -229,7 +267,11 @@ export function toolCalls({ stdout }) {
     const t = line.trim();
     if (!t.startsWith('{')) continue;
     let e;
-    try { e = JSON.parse(t); } catch { continue; }
+    try {
+      e = JSON.parse(t);
+    } catch {
+      continue;
+    }
     const item = e?.item;
     if (!item?.type || !['item.started', 'item.completed'].includes(e.type)) continue;
     if (['agent_message', 'reasoning', 'error'].includes(item.type)) continue;
@@ -269,9 +311,9 @@ export function boundary({ args }) {
     writes: false,
     mcp: false,
     protected_paths: args.some((a) => a.startsWith(`permissions.${PROFILE}.filesystem=`))
-      ? 'denied by path (permission profile), as the paths stood at launch: ~/.codex entries other than packages/, '
-        + 'and legacy job homes, created later are not covered; file names such as .env anywhere are not; on Linux a '
-        + 'protected file replaced by rename during the run is readable'
+      ? 'denied by path (permission profile), as the paths stood at launch: ~/.codex entries other than packages/, ' +
+        'and legacy job homes, created later are not covered; file names such as .env anywhere are not; on Linux a ' +
+        'protected file replaced by rename during the run is readable'
       : 'not enforced',
     tools: null,
   };

package/src/adapters/opencode-sandbox.mjs

@@ -49,7 +49,11 @@ import { sandboxHome } from '../store.mjs';
 // allows older runtimes, where credential seeding degrades to a no-op and the
 // job fails with the CLI's own auth error instead.
 let DatabaseSync = null;
-try { ({ DatabaseSync } = sqliteRequire(import.meta.url)('node:sqlite')); } catch { /* unavailable */ }
+try {
+  ({ DatabaseSync } = sqliteRequire(import.meta.url)('node:sqlite'));
+} catch {
+  /* unavailable */
+}
 
 // Reading is allowed, not denied: every consultant is an equal reader (Codex
 // runs a read-only shell; Claude Code and Antigravity can read the whole
@@ -93,10 +97,7 @@ const SANDBOX_TOOLS_OFF = Object.freeze({ edit: false, write: false, patch: fals
 // workdir, and a run that cannot ask refuses -- so this consultant read less
 // than the others. The last matching rule wins, so "*" comes first.
 function readRules() {
-  const deny = [
-    ...protectedRoots().flatMap((r) => [r, `${r}/**`]),
-    ...PROTECTED_FILE_NAMES.flatMap((n) => [n, `**/${n}`]),
-  ];
+  const deny = [...protectedRoots().flatMap((r) => [r, `${r}/**`]), ...PROTECTED_FILE_NAMES.flatMap((n) => [n, `**/${n}`])];
   return { '*': 'allow', ...Object.fromEntries(deny.map((p) => [p, 'deny'])) };
 }
 
@@ -104,7 +105,7 @@ const AUTH_REL = path.join('.local', 'share', 'opencode', 'auth.json');
 
 /**
  * Build the synthesised HOME for one consultation.
- * @param {{workdir: string}} opts workdir is <jobdir>/work; the home is store.sandboxHome(<job id>).
+ * @param {{workdir: string, network?: 'on' | 'off'}} opts workdir is <jobdir>/work; the home is store.sandboxHome(<job id>).
  */
 export function prepareSandbox({ workdir, network = 'on' }) {
   const root = sandboxHome(path.basename(path.dirname(workdir)));
@@ -180,16 +181,22 @@ export function prepareSandbox({ workdir, network = 'on' }) {
       // parent directories of the (empty) working directory.
       OPENCODE_DISABLE_AUTOUPDATE: '1',
       OPENCODE_DISABLE_PROJECT_CONFIG: '1',
-      ...(process.platform === 'win32' ? {
-        USERPROFILE: root,
-        HOMEDRIVE: path.parse(root).root.replace(/[\\/]$/, ''),
-        HOMEPATH: root.slice(path.parse(root).root.length - 1),
-        APPDATA: path.join(root, 'AppData', 'Roaming'),
-        LOCALAPPDATA: path.join(root, 'AppData', 'Local'),
-      } : {}),
+      ...(process.platform === 'win32'
+        ? {
+            USERPROFILE: root,
+            HOMEDRIVE: path.parse(root).root.replace(/[\\/]$/, ''),
+            HOMEPATH: root.slice(path.parse(root).root.length - 1),
+            APPDATA: path.join(root, 'AppData', 'Roaming'),
+            LOCALAPPDATA: path.join(root, 'AppData', 'Local'),
+          }
+        : {}),
     },
     cleanup() {
-      try { fs.rmSync(root, { recursive: true, force: true }); } catch { /* best effort */ }
+      try {
+        fs.rmSync(root, { recursive: true, force: true });
+      } catch {
+        /* best effort */
+      }
     },
   };
   sandbox.seed = (provider) => seedCredentialFromAuth(sandbox, provider);
@@ -231,7 +238,9 @@ export function seedCredentialFromAuth(sandbox, provider) {
     try {
       const db = new DatabaseSync(operatorDb, { readOnly: true });
       try {
-        const found = db.prepare('SELECT label, value FROM credential WHERE integration_id = ? ORDER BY time_updated DESC LIMIT 1').get(provider);
+        const found = db
+          .prepare('SELECT label, value FROM credential WHERE integration_id = ? ORDER BY time_updated DESC LIMIT 1')
+          .get(provider);
         if (found && typeof found.value === 'string') {
           const parsed = JSON.parse(found.value);
           if (parsed && typeof parsed === 'object' && typeof parsed.key === 'string' && parsed.key) {
@@ -241,23 +250,33 @@ export function seedCredentialFromAuth(sandbox, provider) {
       } finally {
         db.close();
       }
-    } catch { /* unreadable or reshaped: try the auth.json source */ }
+    } catch {
+      /* unreadable or reshaped: try the auth.json source */
+    }
   }
   if (!row && fs.existsSync(authPath)) {
     try {
       const entry = JSON.parse(fs.readFileSync(authPath, 'utf8'))[provider];
-      if (entry && typeof entry === 'object' && typeof entry.key === 'string' && entry.key
-        && (!entry.type || entry.type === 'api')) {
+      if (
+        entry &&
+        typeof entry === 'object' &&
+        typeof entry.key === 'string' &&
+        entry.key &&
+        (!entry.type || entry.type === 'api')
+      ) {
         row = { label: 'API key', value: JSON.stringify({ type: 'key', key: entry.key }) };
       }
-    } catch { /* unreadable auth.json: nothing seedable */ }
+    } catch {
+      /* unreadable auth.json: nothing seedable */
+    }
   }
   if (!row) return false;
   try {
     const db = new DatabaseSync(dbPath);
     try {
-      db.prepare('INSERT INTO credential (id, integration_id, label, value, time_created, time_updated) VALUES (?, ?, ?, ?, ?, ?)')
-        .run(`cred_${crypto.randomBytes(18).toString('base64url')}`, provider, row.label, row.value, Date.now(), Date.now());
+      db.prepare(
+        'INSERT INTO credential (id, integration_id, label, value, time_created, time_updated) VALUES (?, ?, ?, ?, ?, ?)',
+      ).run(`cred_${crypto.randomBytes(18).toString('base64url')}`, provider, row.label, row.value, Date.now(), Date.now());
     } finally {
       db.close();
     }

package/src/adapters/opencode.mjs

@@ -110,12 +110,17 @@ export async function prepare() {
         // STUB_* observables (a stubbed CLI cannot tell it ran), keeping the
         // STUB_HELP knobs so a test can still shape the advertised flag list
         // and the probe's latency.
-        const env = Object.fromEntries(Object.entries(process.env)
-          .filter(([k]) => !k.startsWith('STUB_') || k === 'STUB_HELP' || k === 'STUB_HELP_DELAY_MS'));
+        const env = Object.fromEntries(
+          Object.entries(process.env).filter(([k]) => !k.startsWith('STUB_') || k === 'STUB_HELP' || k === 'STUB_HELP_DELAY_MS'),
+        );
         const child = spawnCommand(POLICY.clis.opencode.cli, ['run', '--help'], { env, stdio: ['ignore', 'pipe', 'pipe'] });
         let out = '';
-        child.stdout.on('data', (c) => { out += c; });
-        child.stderr.on('data', (c) => { out += c; });
+        child.stdout.on('data', (c) => {
+          out += c;
+        });
+        child.stderr.on('data', (c) => {
+          out += c;
+        });
         child.on('error', () => finishProbe(false, false));
         child.on('close', (code) => {
           // A nonzero exit proves nothing either way -- a diagnostic that
@@ -123,7 +128,14 @@ export async function prepare() {
           if (code !== 0) return finishProbe(false, false);
           finishProbe(out.includes('--standalone'), true);
         });
-        timer = setTimeout(() => { try { child.kill('SIGKILL'); } catch { /* gone */ } finishProbe(false, false); }, 10_000);
+        timer = setTimeout(() => {
+          try {
+            child.kill('SIGKILL');
+          } catch {
+            /* gone */
+          }
+          finishProbe(false, false);
+        }, 10_000);
         timer.unref();
       } catch {
         finishProbe(false, false);
@@ -170,7 +182,8 @@ export function buildInvocation({ consultant }) {
   const effort = consultant.effort ?? 'high';
   const args = [
     'run',
-    '--format', 'json',
+    '--format',
+    'json',
     ...(standaloneSupport ? ['--standalone'] : []),
     // A failing 2.x run can exit nonzero with no error event and an empty
     // stderr (observed on GLM after ~5 min), leaving nothing to say why. Its
@@ -183,8 +196,10 @@ export function buildInvocation({ consultant }) {
     // name the operator wrote with its own `#variant` is passed as is, and a
     // bare trailing `#` means "no variant", for models that have none
     // ("Variant unavailable for opencode/nemotron-3-ultra-free: high").
-    '-m', chosen.endsWith('#') ? chosen.slice(0, -1) : chosen.includes('#') ? chosen : `${chosen}#${effort}`,
-    '--title', 'severally',
+    '-m',
+    chosen.endsWith('#') ? chosen.slice(0, -1) : chosen.includes('#') ? chosen : `${chosen}#${effort}`,
+    '--title',
+    'severally',
   ];
   return { command: t.cli, args, model: chosen };
 }
@@ -198,7 +213,9 @@ export function events(stdout) {
     try {
       const parsed = JSON.parse(t);
       if (parsed && typeof parsed === 'object') out.push(parsed);
-    } catch { /* a partial line, e.g. when the child was killed mid-write */ }
+    } catch {
+      /* a partial line, e.g. when the child was killed mid-write */
+    }
   }
   return out;
 }
@@ -216,7 +233,10 @@ export function compactLine(line) {
   try {
     const e = JSON.parse(line);
     if (e?.type !== 'tool_use') return line;
-    return JSON.stringify({ type: e.type, part: { type: e.part?.type, tool: e.part?.tool, state: { status: e.part?.state?.status } } });
+    return JSON.stringify({
+      type: e.type,
+      part: { type: e.part?.type, tool: e.part?.tool, state: { status: e.part?.state?.status } },
+    });
   } catch {
     return line;
   }
@@ -230,9 +250,7 @@ function errorMessage(error) {
   // message are joined, as before. A CLI upgrade must degrade the wording and
   // never the classification.
   if (typeof error.message === 'string' && error.message) return error.message;
-  const detail = error.data && typeof error.data === 'object' && error.data.message
-    ? String(error.data.message)
-    : '';
+  const detail = error.data && typeof error.data === 'object' && error.data.message ? String(error.data.message) : '';
   return [error.name, detail].filter(Boolean).join(': ') || JSON.stringify(error);
 }
 

package/src/brief.mjs

@@ -38,20 +38,21 @@ const GUARDRAILS_HEAD = [
 
 // After the web bullet.
 const GUARDRAILS_RULES = [
-  '- When the question concerns security, it is a defensive review of the lead\'s own code or system: analyse the weaknesses and how to fix them.',
-  '- The Constraints section is fixed. Design notes, drafts and internal documents among the facts and artifacts are the lead\'s current direction, not a specification, and you may question them.',
+  "- When the question concerns security, it is a defensive review of the lead's own code or system: analyse the weaknesses and how to fix them.",
+  "- The Constraints section is fixed. Design notes, drafts and internal documents among the facts and artifacts are the lead's current direction, not a specification, and you may question them.",
 ];
 
 // The web bullet follows the request: with the network off the consultant has
 // no web tools, and telling it otherwise would have it look for them.
 const WEB_ON = '- You may search and browse the web freely; cite what you actually opened in `references`.';
-const WEB_OFF = '- Web search and browsing are switched off for this consultation. Answer from the brief, and record what you would have looked up under `unknowns`.';
+const WEB_OFF =
+  '- Web search and browsing are switched off for this consultation. Answer from the brief, and record what you would have looked up under `unknowns`.';
 
 // The one bullet that depends on the request: a consultation that exposed
 // paths has files, and telling it otherwise would have it record everything
 // it can plainly read under `unknowns`.
 const WORKDIR_EMPTY =
-  '- You are running in an empty working directory and do not have the lead\'s repository; everything you are meant to have is in the brief below. If something is missing, record it under `unknowns` instead of guessing or substituting an assumption.';
+  "- You are running in an empty working directory and do not have the lead's repository; everything you are meant to have is in the brief below. If something is missing, record it under `unknowns` instead of guessing or substituting an assumption.";
 const WORKDIR_EXPOSED =
   '- Your working directory is not empty: the lead exposed specific paths, listed under "Files available to you" below and copied read-only under ./workspace. Those are the only part of the lead\'s repository you have. If something you need is missing, record it under `unknowns` instead of guessing or substituting an assumption.';
 
@@ -70,8 +71,13 @@ const GUARDRAILS_TAIL = [
 ];
 
 export function renderGuardrails(hasExposedPaths = false, network = 'on') {
-  return [...GUARDRAILS_HEAD, network === 'off' ? WEB_OFF : WEB_ON, ...GUARDRAILS_RULES,
-    hasExposedPaths ? WORKDIR_EXPOSED : WORKDIR_EMPTY, ...GUARDRAILS_TAIL].join('\n');
+  return [
+    ...GUARDRAILS_HEAD,
+    network === 'off' ? WEB_OFF : WEB_ON,
+    ...GUARDRAILS_RULES,
+    hasExposedPaths ? WORKDIR_EXPOSED : WORKDIR_EMPTY,
+    ...GUARDRAILS_TAIL,
+  ].join('\n');
 }
 
 // The material the lead handed over, kept in the shape it was sent in. The
@@ -100,22 +106,22 @@ export function briefRecord(req, exposeManifest = null) {
     // frozen duplicate of a repository that has moved on since.
     expose_paths: exposeManifest
       ? {
-        entries: exposeManifest.entries.map((e) => ({
-          index: e.index,
-          source: e.source,
-          exposed_as: e.exposedAs,
-          kind: e.kind,
-          files: e.files,
-          bytes: e.bytes,
-          // What every member was handed, so a reader can check they all got the same.
-          sha256: e.sha256 ?? null,
-          ...(e.base ? { base: e.base, changes: e.changes } : {}),
-          // A follow-up's copy of a path the parent round exposed: whether its bytes changed since.
-          ...(e.changed === undefined ? {} : { changed_since_parent: e.changed }),
-        })),
-        totals: exposeManifest.totals,
-        skipped: exposeManifest.skipped,
-      }
+          entries: exposeManifest.entries.map((e) => ({
+            index: e.index,
+            source: e.source,
+            exposed_as: e.exposedAs,
+            kind: e.kind,
+            files: e.files,
+            bytes: e.bytes,
+            // What every member was handed, so a reader can check they all got the same.
+            sha256: e.sha256 ?? null,
+            ...(e.base ? { base: e.base, changes: e.changes } : {}),
+            // A follow-up's copy of a path the parent round exposed: whether its bytes changed since.
+            ...(e.changed === undefined ? {} : { changed_since_parent: e.changed }),
+          })),
+          totals: exposeManifest.totals,
+          skipped: exposeManifest.skipped,
+        }
       : null,
   });
 }
@@ -151,21 +157,24 @@ function deletedLines(changes = []) {
   const gone = changes.filter((c) => c.endsWith(' (deleted)')).map((c) => c.slice(0, -' (deleted)'.length));
   if (!gone.length) return [];
   const shown = gone.slice(0, 50);
-  return [`  - deleted by the change, so not copied: ${shown.join(', ')}${gone.length > shown.length ? `, and ${gone.length - shown.length} more` : ''}`];
+  return [
+    `  - deleted by the change, so not copied: ${shown.join(', ')}${gone.length > shown.length ? `, and ${gone.length - shown.length} more` : ''}`,
+  ];
 }
 
 function renderExposeManifest(manifest) {
   if (!manifest || (manifest.entries.length === 0 && manifest.skipped.length === 0)) return null;
   let room = EXPOSE_LISTING_MAX;
   const lines = manifest.entries.flatMap((e) => {
-    const shape = (e.kind === 'diff'
-      ? `the files the lead's change touches, against ${e.base}, at their paths in the repository; ${e.files} copied, ${humanSize(e.bytes)}; the diff itself is among the artifacts`
-      : e.kind === 'change_files'
-        ? `the files the lead's change touched in the earlier round, at their paths in the repository, copied again as they are now; ${e.files} copied, ${humanSize(e.bytes)}; the diff is not repeated`
-        : e.kind === 'directory'
-          ? `directory, ${e.files} file(s), ${humanSize(e.bytes)}`
-          : `file, ${humanSize(e.bytes)}`)
-      + (e.changed === undefined ? '' : e.changed ? '; changed since the earlier round' : '; unchanged since the earlier round');
+    const shape =
+      (e.kind === 'diff'
+        ? `the files the lead's change touches, against ${e.base}, at their paths in the repository; ${e.files} copied, ${humanSize(e.bytes)}; the diff itself is among the artifacts`
+        : e.kind === 'change_files'
+          ? `the files the lead's change touched in the earlier round, at their paths in the repository, copied again as they are now; ${e.files} copied, ${humanSize(e.bytes)}; the diff is not repeated`
+          : e.kind === 'directory'
+            ? `directory, ${e.files} file(s), ${humanSize(e.bytes)}`
+            : `file, ${humanSize(e.bytes)}`) +
+      (e.changed === undefined ? '' : e.changed ? '; changed since the earlier round' : '; unchanged since the earlier round');
     // Not where it was copied from: the consultant is never told where the
     // lead's repository is, and Codex, Antigravity and OpenCode could read
     // the unmasked original there. The source path stays in the history.
@@ -180,12 +189,21 @@ function renderExposeManifest(manifest) {
     ];
   });
   const count = (reason) => manifest.skipped.filter((x) => x.reason === reason).length;
-  const named = (reason) => manifest.skipped.filter((x) => x.reason === reason).map((x) => x.exposed_as).slice(0, 50).join(', ');
+  const named = (reason) =>
+    manifest.skipped
+      .filter((x) => x.reason === reason)
+      .map((x) => x.exposed_as)
+      .slice(0, 50)
+      .join(', ');
   const skipped = [
     count('symlink') ? `${count('symlink')} symlink(s), or path(s) through one, were skipped, not followed.` : null,
     count('protected') ? `${count('protected')} credential or history path(s) were left out on purpose.` : null,
-    count('ignored') ? `${count('ignored')} path(s) (.git, node_modules, whatever .gitignore excludes) were left out as not source.` : null,
-    count('submodule') ? `${count('submodule')} submodule(s) or nested repositor(ies) were left out; their files are not copied.` : null,
+    count('ignored')
+      ? `${count('ignored')} path(s) (.git, node_modules, whatever .gitignore excludes) were left out as not source.`
+      : null,
+    count('submodule')
+      ? `${count('submodule')} submodule(s) or nested repositor(ies) were left out; their files are not copied.`
+      : null,
     count('gone') ? `No longer there, so not copied again: ${named('gone')}.` : null,
     count('masked') ? `Not copied again, because the record of the earlier round masked the path: ${named('masked')}.` : null,
     count('replaced') ? `The earlier round's change is replaced by the diff given in this round: ${named('replaced')}.` : null,
@@ -193,7 +211,7 @@ function renderExposeManifest(manifest) {
   if (skipped.length) skipped.unshift('');
   return [
     'The lead exposed these paths; they are copied under ./workspace in your working directory and you may read',
-    'them directly. They are the only part of the lead\'s repository you have -- if you need something that is',
+    "them directly. They are the only part of the lead's repository you have -- if you need something that is",
     'not here, record it under `unknowns` rather than guessing. Text files were passed through the same',
     'credential masking as this brief; binary files were copied unchanged.',
     '',
@@ -219,11 +237,16 @@ function renderRound(p) {
     `### Round ${p.round} (${p.mode})`,
     `Question asked: ${p.question}`,
     `Your answer, summarised: ${p.summary}`,
-    list('Points you raised:', p.findings,
-      (f) => `- ${tag(f.id)}: ${clip(f.point)}${verdict(f)}${f.grounds ? `\n  grounds: ${clip(f.grounds)}` : ''}`),
+    list(
+      'Points you raised:',
+      p.findings,
+      (f) => `- ${tag(f.id)}: ${clip(f.point)}${verdict(f)}${f.grounds ? `\n  grounds: ${clip(f.grounds)}` : ''}`,
+    ),
     list('Unknowns you named:', p.unknowns, (u) => `- ${tag(u.id)}: ${clip(u.point)}${verdict(u)}`),
     list('Checks you proposed:', p.next_checks, (c) => `- ${tag(c.id)}: ${clip(c.point)}${verdict(c)}`),
-  ].filter(Boolean).join('\n');
+  ]
+    .filter(Boolean)
+    .join('\n');
 }
 
 /**
@@ -262,8 +285,8 @@ export function renderBrief(req, chain = { round: 1, priorRounds: [] }, exposeMa
     parts.push('');
     parts.push('## Earlier rounds of this same consultation');
     parts.push(
-      'Each point carries the lead\'s own check where there is one -- confirmed: it held; not_applicable: checked, and'
-      + ' it does not apply here; unverifiable: could not be checked; unverified, or no verdict: not checked yet.',
+      "Each point carries the lead's own check where there is one -- confirmed: it held; not_applicable: checked, and" +
+        ' it does not apply here; unverifiable: could not be checked; unverified, or no verdict: not checked yet.',
     );
     const blocks = chain.priorRounds.map(renderRound);
     let kept = 0;
@@ -274,7 +297,8 @@ export function renderBrief(req, chain = { round: 1, priorRounds: [] }, exposeMa
       kept += 1;
     }
     const left = chain.priorRounds.slice(0, blocks.length - kept).map((p) => p.round);
-    if (left.length) parts.push(`(Round${left.length > 1 ? 's' : ''} ${left.join(', ')} left out to keep this brief within its size.)`);
+    if (left.length)
+      parts.push(`(Round${left.length > 1 ? 's' : ''} ${left.join(', ')} left out to keep this brief within its size.)`);
     parts.push(...blocks.slice(blocks.length - kept));
     parts.push('');
     parts.push(