sprag-cli 3.46.0 → 3.46.1

package/examples/statusline-command.ps1

@@ -1,9 +1,9 @@
 # Claude Code statusline (Windows PowerShell version)
 # Mirrors the POSIX sh script — prints "user@host:cwd" then appends
-# claude-token-saver output as a second segment.
+# sprag output as a second segment.
 #
 # Install:
-#   1) npm install -g claude-token-saver
+#   1) npm install -g sprag-cli
 #   2) Save this file as: %USERPROFILE%\.claude\statusline-command.ps1
 #   3) In %USERPROFILE%\.claude\settings.json add:
 #      {
@@ -30,14 +30,20 @@ Write-Host -NoNewline "$esc[01;32m$env:USERNAME@$env:COMPUTERNAME$esc[00m`:$esc[
 # 2) cache monitor (appended). Separator " | ". Falls back silently.
 Write-Host -NoNewline " $esc[90m|$esc[00m "
 
-$cacheMonitor = Get-Command claude-token-saver -ErrorAction SilentlyContinue
+# `claude-token-saver` is the older binary name, still installed by the current
+# package; the npx fallback names `sprag-cli`, since the old package name is
+# deprecated on npm and would fetch a version that stopped receiving releases.
+$cacheMonitor = Get-Command sprag -ErrorAction SilentlyContinue
+if (-not $cacheMonitor) {
+  $cacheMonitor = Get-Command claude-token-saver -ErrorAction SilentlyContinue
+}
 if ($cacheMonitor) {
   try {
-    & claude-token-saver --statusline --icon 2>$null
+    & $cacheMonitor.Name --statusline --icon 2>$null
   } catch { }
 } else {
   # fallback: npx (first run downloads the package; subsequent runs are warm)
   try {
-    & npx --yes claude-token-saver@latest --statusline --icon 2>$null
+    & npx --yes sprag-cli@latest --statusline --icon 2>$null
   } catch { }
 }

package/examples/statusline-command.sh

@@ -1,9 +1,9 @@
 #!/bin/sh
 # Claude Code statusline (POSIX sh — works on macOS, Linux, and WSL)
-# Prints "user@host:cwd" then appends claude-token-saver as a second segment.
+# Prints "user@host:cwd" then appends sprag as a second segment.
 #
 # Install:
-#   1) npm install -g claude-token-saver
+#   1) npm install -g sprag-cli
 #   2) Save this file as: ~/.claude/statusline-command.sh
 #      chmod +x ~/.claude/statusline-command.sh  (optional)
 #   3) In ~/.claude/settings.json:
@@ -29,8 +29,13 @@ printf '\033[01;32m%s@%s\033[00m:\033[01;34m%s\033[00m' "$(whoami)" "$(hostname
 
 # 2) cache monitor (appended). Separator " | ". Falls back silently.
 printf ' \033[90m|\033[00m '
-if command -v claude-token-saver >/dev/null 2>&1; then
+# `claude-token-saver` is the older binary name, still installed by the current
+# package; the npx fallback names `sprag-cli`, since the old package name is
+# deprecated on npm and would fetch a version that stopped receiving releases.
+if command -v sprag >/dev/null 2>&1; then
+  sprag --statusline --icon 2>/dev/null || true
+elif command -v claude-token-saver >/dev/null 2>&1; then
   claude-token-saver --statusline --icon 2>/dev/null || true
 else
-  npx --yes claude-token-saver@latest --statusline --icon 2>/dev/null || true
+  npx --yes sprag-cli@latest --statusline --icon 2>/dev/null || true
 fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sprag-cli",
-  "version": "3.46.0",
+  "version": "3.46.1",
   "description": "Sprag - a quality ratchet harness for AI coding agents: model-fitting delegation, ratchet rules, doc2md, Korean style gate. Same tool as claude-token-saver, under its new name.",
   "type": "module",
   "bin": {
@@ -8,13 +8,14 @@
     "claude-token-saver": "bin/cli.js"
   },
   "scripts": {
-    "test": "node --test",
+    "deploy": "node scripts/deploy.mjs",
     "docs:statusline": "node scripts/docs-statusline.mjs",
     "postinstall": "node bin/cli.js install || true",
+    "prepublishOnly": "node scripts/sync-readme-ko.mjs",
     "publish:legacy": "node scripts/publish-legacy.mjs",
-    "sync:ko": "node scripts/sync-readme-ko.mjs",
     "release:notes": "node scripts/release-notes.mjs",
-    "prepublishOnly": "node scripts/sync-readme-ko.mjs"
+    "sync:ko": "node scripts/sync-readme-ko.mjs",
+    "test": "node --test"
   },
   "files": [
     "bin/",

package/src/changelog.js

@@ -1,5 +1,6 @@
 /**
- * changelog — read one version's section out of CHANGELOG.md.
+ * changelog — read one version's section out of CHANGELOG.md, and say whether a
+ * notes draft is still waiting on a person.
  *
  * Separate from scripts/release-notes.mjs, which is a CLI: importing that file
  * runs its argument parsing and exits, so the extraction it depends on cannot be
@@ -7,6 +8,12 @@
  * pulled one line short drops the release's last item, and one line long carries
  * the previous release's first, and the upgrade offer shows either without
  * complaint.
+ *
+ * The draft marker lives here for a reason. Two scripts gate on it — the one that
+ * writes drafts and the one that deploys — and they used to carry the string
+ * separately. Renaming it in one left the other looking for text that no longer
+ * existed, and a gate that greps for an absent string does not fail: it passes,
+ * and an unreviewed draft goes out as the release. One definition, imported.
  */
 
 /**
@@ -32,3 +39,32 @@ export function sectionFor(changelog, version) {
   }
   return out.join('\n').trim();
 }
+
+/**
+ * The line `release-notes.mjs` writes at the top of a fresh draft, and the line
+ * every gate refuses on. A draft still carrying it has not been through a person.
+ */
+export const DRAFT_MARKER =
+  '<!-- REVIEW: edit this draft, add the English half, then delete this line -->';
+
+/** Heading that opens the Korean half of a bilingual release body. */
+export const KO_HEADING = '## 한국어';
+
+/**
+ * The opening of the marker, which is what the gate actually matches. Spelled out
+ * rather than sliced off `DRAFT_MARKER`, so that editing the marker's front does
+ * not silently change what is being tested for.
+ */
+const REVIEW_OPENING = '<!-- REVIEW:';
+
+/**
+ * Whether a draft still needs review. Matches on the `<!-- REVIEW:` opening
+ * rather than the whole line, so editing the wording of the instruction does not
+ * quietly disarm the gate.
+ *
+ * @param {string} draft - the draft file's contents
+ * @returns {boolean} true while the draft is unreviewed
+ */
+export function needsReview(draft) {
+  return String(draft || '').includes(REVIEW_OPENING);
+}

package/src/cli-name.js

@@ -0,0 +1,25 @@
+/**
+ * cli-name — the name this tool tells the user to type.
+ *
+ * One definition, because the alternative was measured: the marker string in the
+ * release scripts lived in two files, one was renamed, and the gate that grepped
+ * for the other silently stopped gating. A command name printed for the user to
+ * copy fails more quietly still — nothing errors, the user simply types a name
+ * that is not the package they installed.
+ *
+ * `sprag-cli` is the package; `claude-token-saver` is the deprecated name it
+ * shipped under, and both binaries are still in `package.json`'s `bin`, so the
+ * old name keeps working for anyone whose settings or notes carry it.
+ *
+ * NOT the same thing as the on-disk identifiers. The state directory, the harness
+ * block markers, and the skill directory are all still spelled with the old name
+ * on purpose: renaming those would orphan existing users' ledgers and stop the
+ * harness markers matching text already in their CLAUDE.md. Those are addresses,
+ * not instructions, and an address only has to be stable.
+ */
+
+/** The command name to print in anything a user is expected to type or read. */
+export const CLI_NAME = 'sprag';
+
+/** The deprecated name. Still a working binary; recognised, never printed. */
+export const LEGACY_CLI_NAME = 'claude-token-saver';

package/src/commands/uninstall.js

@@ -1,8 +1,8 @@
 /**
  * Subcommand: uninstall — take the integration back out of ~/.claude.
  *
- *   claude-token-saver uninstall           # hooks, statusline, skill
- *   claude-token-saver uninstall --purge   # the above plus recorded state
+ *   sprag uninstall           # hooks, statusline, skill
+ *   sprag uninstall --purge   # the above plus recorded state
  *
  * Recorded savings are kept by default. Someone removing an integration is
  * usually not asking to throw away the ledger that says what it saved, and
@@ -12,6 +12,7 @@
 export async function run({ hasFlag, args = [] }) {
   const { uninstallAll } = await import('../installer.js');
   const { userLanguage } = await import('../config.js');
+  const { CLI_NAME } = await import('../cli-name.js');
   const lang = userLanguage();
   const purge = hasFlag('--purge') || args.includes('--purge');
 
@@ -36,7 +37,7 @@ export async function run({ hasFlag, args = [] }) {
   }
   if (!purge) {
     console.log(lang === 'ko'
-      ? '  기록된 절감액과 설정까지 지우려면 `claude-token-saver uninstall --purge` 를 실행하십시오.'
-      : '  To remove recorded savings and settings too: `claude-token-saver uninstall --purge`.');
+      ? `  기록된 절감액과 설정까지 지우려면 \`${CLI_NAME} uninstall --purge\` 를 실행하십시오.`
+      : `  To remove recorded savings and settings too: \`${CLI_NAME} uninstall --purge\`.`);
   }
 }

package/src/formatters/table.js

@@ -2,6 +2,7 @@
  * Terminal table formatter — zero dependencies.
  */
 import { ISSUE_MESSAGES } from '../advice.js';
+import { CLI_NAME } from '../cli-name.js';
 import { formatResetIn, formatResetClock } from '../format-time.js';
 import { labelForKey } from '../window-labels.js';
 
@@ -139,7 +140,7 @@ function renderSpikeSection(spikes, contextWindow) {
       lines.push('');
     }
   }
-  lines.push(rbl('  ▶ 상세 처치법: ') + rb('claude-token-saver last'));
+  lines.push(rbl('  ▶ 상세 처치법: ') + rb(`${CLI_NAME} last`));
   lines.push('');
   return lines;
 }
@@ -165,10 +166,10 @@ function renderCapWarnSection(caps) {
   }
   lines.push('');
   lines.push(r('  Back up work before the cap hits:'));
-  lines.push(rb('    claude-token-saver handoff'));
+  lines.push(rb(`    ${CLI_NAME} handoff`));
   lines.push(r('  (writes a HANDOFF-*.md so a fresh session can pick up.)'));
   lines.push('');
-  lines.push(rbl('  ▶ 상세 처치법: ') + rb('claude-token-saver last'));
+  lines.push(rbl('  ▶ 상세 처치법: ') + rb(`${CLI_NAME} last`));
   lines.push('');
   return lines;
 }
@@ -179,7 +180,7 @@ export function formatReport({ summary: sum, trend, ttl, anomalies, cost, option
   // Header
   lines.push('');
   lines.push(`  Claude Token Saver — Last ${options.days} day${options.days === 1 ? '' : 's'}`);
-  lines.push(`  (claude-token-saver v${options.version || ''})`.trimEnd());
+  lines.push(`  (${CLI_NAME} v${options.version || ''})`.trimEnd());
   lines.push(`  ${'═'.repeat(50)}`);
   lines.push('');
 

package/src/hook-manager.js

@@ -12,6 +12,7 @@
 import { readFile, writeFile, rm } from 'node:fs/promises';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
+import { CLI_NAME } from './cli-name.js';
 
 const SETTINGS_PATH = join(homedir(), '.claude', 'settings.json');
 // Legacy copied-file location — removed on install/uninstall so machines that
@@ -48,7 +49,7 @@ export async function installHook({ threshold = 0.7 } = {}) {
     hooks: [
       {
         type: 'command',
-        command: `claude-token-saver --hook-run --threshold ${threshold}`,
+        command: `${CLI_NAME} --hook-run --threshold ${threshold}`,
         timeout: 10,
       },
     ],
@@ -59,7 +60,7 @@ export async function installHook({ threshold = 0.7 } = {}) {
   // Clean up the legacy copy left by older versions.
   await rm(LEGACY_HOOK_DEST, { force: true }).catch(() => {});
 
-  console.log('✓ Hook installed (PostToolUse → claude-token-saver --hook-run)');
+  console.log(`✓ Hook installed (PostToolUse → ${CLI_NAME} --hook-run)`);
   console.log(`  Settings updated: ${SETTINGS_PATH}`);
   console.log(`  Threshold: ${(threshold * 100).toFixed(0)}%`);
   console.log(`  Stats file: ~/.claude/cache-stats.jsonl`);

package/src/installer.js

@@ -14,10 +14,64 @@
  */
 
 import { writeFileSync, mkdirSync, existsSync, unlinkSync, readFileSync, rmSync } from 'node:fs';
+import { CLI_NAME, LEGACY_CLI_NAME } from './cli-name.js';
 import { join } from 'node:path';
 import { claudeUserDir, userDataDir } from './paths.js';
 
-const STATUSLINE_COMMAND = 'claude-token-saver --statusline --icon';
+/**
+ * The command every entry we write invokes.
+ *
+ * Both binaries ship in `package.json`'s `bin`, so either name works — but the
+ * package is `sprag-cli`, and a fresh install writing `claude-token-saver` into
+ * the user's settings puts a name they never typed in a file they read.
+ *
+ * The reverse direction is not symmetrical: entries ALREADY on disk carry the
+ * old name, so anything that recognises our own work has to accept both. That is
+ * what `isOurCommand` is for — narrowing it to the new name would make install
+ * miss an existing hook and add a second one beside it.
+ */
+const CLI = CLI_NAME;
+const LEGACY_CLI = LEGACY_CLI_NAME;
+
+/**
+ * Whether a settings command belongs to this tool, under either name.
+ *
+ * The name has to sit where the executable goes, not just appear somewhere in the
+ * string. `sprag` is five characters, and `uninstall` deletes what this returns
+ * true for: a substring test claims `node ~/.claude/probe/sprag-probe.mjs` and
+ * anyone's `my-sprag-wrapper`, then removes them as ours. That is not
+ * hypothetical — the probe entry is on this machine.
+ *
+ * A wrapper is allowed in front, because the entry may legitimately be run
+ * through one: `npx sprag-cli brief --hook` and `/usr/local/bin/sprag doc2md`
+ * are both ours. So the executable is taken as the last path segment of the
+ * first token — or of the token after a runner like `npx` or `yarn dlx` — and
+ * matched whole, with `sprag-cli` accepted there since that is what npx resolves.
+ *
+ * The runner list follows `upgradeCommand`, which already prints npm, pnpm, bun
+ * and yarn instructions. Missing one is the duplicate-hook failure rather than
+ * the deletion one: an entry we do not recognise gets a second hook added beside
+ * it, and both then run on every prompt.
+ */
+const RUNNERS = /^(npx|bunx|pnpx)$/;
+const RUNNER_SUBCOMMANDS = { pnpm: ['dlx', 'exec'], yarn: ['dlx', 'run'], bun: ['x', 'run'], npm: ['exec'] };
+
+function isOurCommand(command) {
+  if (typeof command !== 'string') return false;
+  const tokens = command.trim().split(/\s+/).filter(Boolean);
+  if (!tokens.length) return false;
+  // `npx <pkg>` puts the package one token in, `yarn dlx <pkg>` two.
+  let i = 0;
+  if (RUNNERS.test(tokens[0])) i = 1;
+  else if (RUNNER_SUBCOMMANDS[tokens[0]]?.includes(tokens[1])) i = 2;
+  const token = tokens[i];
+  if (!token) return false;
+  // A path invokes the binary by its last segment; strip a Windows .cmd/.exe too.
+  const exe = token.split(/[/\\]/).pop().replace(/\.(cmd|exe|ps1)$/i, '');
+  return exe === CLI || exe === LEGACY_CLI || exe === `${CLI}-cli`;
+}
+
+const STATUSLINE_COMMAND = `${CLI} --statusline --icon`;
 const STATUSLINE_REFRESH_INTERVAL = 5;
 
 const SKILL_BODY = `---
@@ -181,7 +235,7 @@ export function installStatusline({ force = false } = {}) {
   }
 
   const cur = settings.statusLine;
-  const targetsUs = cur && typeof cur.command === 'string' && cur.command.includes('claude-token-saver');
+  const targetsUs = !!cur && isOurCommand(cur.command);
 
   if (!cur) {
     settings.statusLine = {
@@ -221,7 +275,7 @@ export function installStatusline({ force = false } = {}) {
 // candidates as session context (startup + /clear). Idempotent: skips when a
 // sprag route-scan hook is already present; never touches other
 // hooks the user configured.
-const ROUTE_SCAN_HOOK_COMMAND = 'claude-token-saver route-scan --hook';
+const ROUTE_SCAN_HOOK_COMMAND = `${CLI} route-scan --hook`;
 
 export function installSessionStartHook() {
   const dir = claudeUserDir();
@@ -273,7 +327,7 @@ export function installSessionStartHook() {
  * produce identical output; a delegation is precisely the event that changes it,
  * so this hook rescans on the spot. Detached, so the tool call does not wait.
  */
-const ROUTE_SCAN_DELEGATED_HOOK_COMMAND = 'claude-token-saver route-scan --hook-delegated';
+const ROUTE_SCAN_DELEGATED_HOOK_COMMAND = `${CLI} route-scan --hook-delegated`;
 
 export function installDelegationHook() {
   const dir = claudeUserDir();
@@ -311,7 +365,7 @@ export function installDelegationHook() {
   return { path: file, action: 'created' };
 }
 
-const BRIEF_HOOK_COMMAND = 'claude-token-saver brief --hook';
+const BRIEF_HOOK_COMMAND = `${CLI} brief --hook`;
 
 export function installBriefHook() {
   const dir = claudeUserDir();
@@ -353,7 +407,7 @@ export function installBriefHook() {
 // drift surfaces only when a human reads the artifact. This hook closes that
 // gap: it runs on the file the model just wrote, while it can still fix it.
 // Installed by `korean on`, removed by `korean off`. Idempotent.
-const KOREAN_LINT_HOOK_COMMAND = 'claude-token-saver korean --hook';
+const KOREAN_LINT_HOOK_COMMAND = `${CLI} korean --hook`;
 // Bash belongs on this matcher because a heredoc, a `tee`, or a `sed -i` puts
 // Korean on disk exactly like Write does. A subagent without the Write tool
 // reaches for `cat > file` first, so leaving Bash off the list exempted every
@@ -436,8 +490,8 @@ export function removeKoreanLintHook() {
 // workbook adding a minute on top. The row cap inside the converter is what
 // actually bounds the work; the timeout is only a backstop.
 // Installed by `doc2md on`, removed by `doc2md off`. Idempotent.
-const DOC2MD_HOOK_COMMAND = 'claude-token-saver doc2md --hook';
-const DOC2MD_PROMPT_HOOK_COMMAND = 'claude-token-saver doc2md --hook-prompt';
+const DOC2MD_HOOK_COMMAND = `${CLI} doc2md --hook`;
+const DOC2MD_PROMPT_HOOK_COMMAND = `${CLI} doc2md --hook-prompt`;
 
 export function installDoc2mdHook() {
   const dir = claudeUserDir();
@@ -576,7 +630,7 @@ export function uninstallAll({ purge = false } = {}) {
     // Only our own statusline command goes. Someone else's stays exactly
     // where they put it.
     const cur = settings.statusLine;
-    if (cur && typeof cur.command === 'string' && cur.command.includes('claude-token-saver')) {
+    if (cur && isOurCommand(cur.command)) {
       delete settings.statusLine;
       result.removed.push('statusLine');
     } else if (cur) {
@@ -586,15 +640,28 @@ export function uninstallAll({ purge = false } = {}) {
     // Every event, every entry whose command is this CLI. Matching on the
     // binary name rather than a list of exact commands means a hook added by
     // an older version is still removed by a newer one.
+    //
+    // Removal is per hook, not per matcher group. Dropping whole groups was
+    // taking other tools' hooks with them whenever Claude Code had merged them
+    // into one group — which it does for entries sharing a matcher, so a user who
+    // installed us second lost the first tool's hook on uninstall. A group is
+    // deleted only once nothing of anyone else's is left in it.
+    const isOurs = (h) => isOurCommand(h?.command)
+      || (typeof h?.command === 'string' && h.command.includes('cache-monitor-hook'));
     for (const event of Object.keys(settings.hooks || {})) {
       const list = settings.hooks[event];
       if (!Array.isArray(list)) continue;
-      const kept = list.filter((m) => !(
-        Array.isArray(m?.hooks)
-        && m.hooks.some((h) => typeof h?.command === 'string'
-          && (h.command.includes('claude-token-saver') || h.command.includes('cache-monitor-hook')))
-      ));
-      if (kept.length === list.length) continue;
+      let touched = false;
+      const kept = [];
+      for (const m of list) {
+        if (!Array.isArray(m?.hooks)) { kept.push(m); continue; }
+        const hooks = m.hooks.filter((h) => !isOurs(h));
+        if (hooks.length === m.hooks.length) { kept.push(m); continue; }
+        touched = true;
+        // The group survives if it still carries someone else's hook.
+        if (hooks.length) kept.push({ ...m, hooks });
+      }
+      if (!touched) continue;
       result.removed.push(`hooks.${event}`);
       if (kept.length === 0) delete settings.hooks[event];
       else settings.hooks[event] = kept;
@@ -652,7 +719,7 @@ export function migrateLegacyCacheMonitorHook() {
     for (const h of m.hooks) {
       if (typeof h?.command !== 'string' || !h.command.includes('cache-monitor-hook')) continue;
       const th = h.command.match(/--threshold\s+([\d.]+)/);
-      h.command = `claude-token-saver --hook-run --threshold ${th ? th[1] : '0.7'}`;
+      h.command = `${CLI} --hook-run --threshold ${th ? th[1] : '0.7'}`;
       migrated = true;
     }
   }

package/src/seed-rules.js

@@ -24,6 +24,7 @@
  */
 
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { CLI_NAME } from './cli-name.js';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createHash } from 'node:crypto';
@@ -242,7 +243,7 @@ export function seedOfferBlock({ lang = userLanguage(), root = findProjectRoot()
   const fixes = pending.filter((s) => s.kind === 'ratchet');
   const lines = [];
   if (lang === 'ko') {
-    lines.push(`[claude-token-saver seed] 아직 등록되지 않은 추천 룰이 ${pending.length}건 있습니다 (패키지 동봉 프리셋).`);
+    lines.push(`[${CLI_NAME} seed] 아직 등록되지 않은 추천 룰이 ${pending.length}건 있습니다 (패키지 동봉 프리셋).`);
     lines.push('**이 세션의 첫 응답에서 다른 작업보다 먼저 물어보십시오.** 사용자가 먼저 꺼낸 용건이 있으면 그 답변을 마친 직후에 이어서 묻고, 용건이 끝나기를 기다리지 마십시오. 사용자가 이 안내 문구에 대해 질문할 때까지 미루면 안 됩니다.');
     lines.push(`첫 질문에서 다음 네 선택지를 **이 순서대로** 제시하십시오. ${pending.length}건을 한 건씩 답하는 것은 대부분의 사용자에게 과한 부담이므로, 일괄 등록이 맨 앞에 옵니다.`);
     lines.push('  1. 전부 글로벌로 등록 — `seed accept all --global`');
@@ -263,11 +264,11 @@ export function seedOfferBlock({ lang = userLanguage(), root = findProjectRoot()
       lines.push(`  · 래칫 룰 ${fixes.length}건 — 같은 실수를 반복하지 않도록 세션마다 읽히는 규칙입니다.`);
       for (const s of fixes) lines.push(`    [${s.id}] ${s.ruleText}`);
     }
-    lines.push('  일괄: claude-token-saver seed accept all --global|--project   # 적용 범위는 반드시 사용자에게 확인');
-    lines.push('  개별: claude-token-saver seed accept <id> --global|--project');
-    lines.push('  거절: claude-token-saver seed skip <id>|all                    # 다시 묻지 않습니다');
+    lines.push(`  일괄: ${CLI_NAME} seed accept all --global|--project   # 적용 범위는 반드시 사용자에게 확인`);
+    lines.push(`  개별: ${CLI_NAME} seed accept <id> --global|--project`);
+    lines.push(`  거절: ${CLI_NAME} seed skip <id>|all                    # 다시 묻지 않습니다`);
   } else {
-    lines.push(`[claude-token-saver seed] ${pending.length} recommended rule(s) from the bundled presets are not registered yet.`);
+    lines.push(`[${CLI_NAME} seed] ${pending.length} recommended rule(s) from the bundled presets are not registered yet.`);
     lines.push('**Ask in your very first reply of this session, before anything else.** If the user opened with their own request, answer it and then ask right away; do not wait for their task to finish, and never wait until they ask about this notice.');
     lines.push(`Offer these four choices, **in this order**. Answering ${pending.length} rules one by one is more than most users want to do, so registering them all comes first.`);
     lines.push('  1. Register all, globally — `seed accept all --global`');
@@ -288,9 +289,9 @@ export function seedOfferBlock({ lang = userLanguage(), root = findProjectRoot()
       lines.push(`  · ${fixes.length} ratchet rule(s) — read at the start of every session so the same mistake is not repeated.`);
       for (const s of fixes) lines.push(`    [${s.id}] ${s.ruleText}`);
     }
-    lines.push('  all:      claude-token-saver seed accept all --global|--project   # ALWAYS confirm the scope with the user');
-    lines.push('  one:      claude-token-saver seed accept <id> --global|--project');
-    lines.push('  decline:  claude-token-saver seed skip <id>|all                    # never offered again');
+    lines.push(`  all:      ${CLI_NAME} seed accept all --global|--project   # ALWAYS confirm the scope with the user`);
+    lines.push(`  one:      ${CLI_NAME} seed accept <id> --global|--project`);
+    lines.push(`  decline:  ${CLI_NAME} seed skip <id>|all                    # never offered again`);
   }
   return lines.join('\n');
 }

package/src/update-check.js

@@ -112,7 +112,9 @@ export function updateStatus(currentVersion) {
     dismissed: available && s.dismissedVersion === latest,
     stale: age >= CHECK_INTERVAL_MS,
     // Only when they describe THIS version. A cache written for an earlier
-    // release would otherwise sell the wrong upgrade.
+    // release would otherwise sell the wrong upgrade. Language is not checked
+    // here: a mismatch is corrected by the next refresh, and showing the other
+    // language in the meantime beats showing nothing.
     highlights: Array.isArray(s.highlights) && s.highlightsFor === latest ? s.highlights : [],
   };
 }
@@ -163,6 +165,28 @@ const RELEASES_API = 'https://api.github.com/repos/rootstudioyaml/sprag/releases
 const MAX_HIGHLIGHTS = 3;
 const MAX_HIGHLIGHT_LEN = 110;
 
+/**
+ * A release body may carry both languages, English first and Korean under a
+ * heading of its own. Read only the half that matches the reader: mixing them
+ * would put the same change on two of the three lines the notice has room for,
+ * and showing English to someone who set `lang=ko` wastes the notice entirely.
+ *
+ * The Korean half starts at a heading whose text is Korean; everything before
+ * that first Korean heading is the English half. A body in one language only has
+ * no such heading, so English readers get all of it and Korean readers fall back
+ * to the same text rather than to nothing.
+ *
+ * @param {string} body
+ * @param {string} lang - 'ko' | 'en'
+ * @returns {string} the half to read
+ */
+function sectionForLang(body, lang) {
+  const lines = body.split(/\r?\n/);
+  const at = lines.findIndex((l) => /^#{1,6}\s/.test(l) && /[가-힣]/.test(l));
+  if (at < 0) return body;
+  return lang === 'ko' ? lines.slice(at + 1).join('\n') : lines.slice(0, at).join('\n');
+}
+
 /**
  * The headline items of a release body, as short single lines.
  *
@@ -174,10 +198,11 @@ const MAX_HIGHLIGHT_LEN = 110;
  * rather than truncated into nonsense.
  *
  * @param {string} body - the release body as published
+ * @param {string} [lang] - 'ko' | 'en'; picks the half of a bilingual body
  * @returns {string[]} at most MAX_HIGHLIGHTS lines, or [] when nothing fits
  */
-export function releaseHighlights(body) {
-  const text = String(body || '');
+export function releaseHighlights(body, lang = 'en') {
+  const text = sectionForLang(String(body || ''), lang);
   if (!text.trim()) return [];
   const out = [];
   for (const raw of text.split(/\r?\n/)) {
@@ -246,7 +271,7 @@ export function releaseHighlights(body) {
  * is worth showing with a bare version number, so a missing release, a rate
  * limit, or an offline machine must not cost the user the notice itself.
  */
-export async function fetchHighlights(version, { timeoutMs = FETCH_TIMEOUT_MS } = {}) {
+export async function fetchHighlights(version, { timeoutMs = FETCH_TIMEOUT_MS, lang = 'en' } = {}) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   try {
@@ -256,7 +281,7 @@ export async function fetchHighlights(version, { timeoutMs = FETCH_TIMEOUT_MS }
     });
     if (!res.ok) throw new Error(`releases responded ${res.status}`);
     const body = await res.json();
-    return releaseHighlights(body && body.body);
+    return releaseHighlights(body && body.body, lang);
   } catch (e) {
     debug('update-check:highlights', e);
     return [];
@@ -293,16 +318,31 @@ export async function refreshUpdateState(currentVersion) {
     // What the new version adds, so the notice can answer "why would I".
     // Only worth a second request when there is actually an upgrade to describe,
     // and only when we do not already hold the notes for that exact version.
-    if (isNewer(latest, currentVersion) && prev.highlightsFor !== latest) {
-      const highlights = await fetchHighlights(latest);
+    // The reader's own language: a release body carries both halves, and the
+    // notice has room for three lines in one of them.
+    let lang = 'en';
+    try {
+      const { userLanguage } = await import('./config.js');
+      lang = userLanguage();
+    } catch (e) { debug('update-check:lang', e); }
+    // Fetch when the version is new, and also when the reader switched language
+    // since these notes were cached — otherwise they keep reading the half they
+    // left behind.
+    const staleLang = prev.highlightsFor === latest && prev.highlightsLang !== lang;
+    if (isNewer(latest, currentVersion) && (prev.highlightsFor !== latest || staleLang)) {
+      const highlights = await fetchHighlights(latest, { lang });
       if (highlights.length) {
         next.highlights = highlights;
         next.highlightsFor = latest;
+        // Which language these are in. Someone who switches `lang` afterwards
+        // would otherwise keep reading the notes in the language they left.
+        next.highlightsLang = lang;
       } else {
         // Drop notes belonging to an older version rather than showing them
         // against this one.
         delete next.highlights;
         delete next.highlightsFor;
+        delete next.highlightsLang;
       }
     }
     writeUpdateState(next);