tldr-experts 0.32.0 → 0.33.0

package/CHANGELOG.md

@@ -1,5 +1,103 @@
 # Changelog
 
+## 0.33.0 — 2026-09-17
+
+### Added
+
+- **A workspace can opt its base pre-flight probe into a story-shaped worktree, so an
+  environmental red that only appears there is caught before the first story (#371).** #363
+  shipped `tree:` provenance on every base-pre-flight row and declined, by measured decision, to
+  move the probe itself into a worktree by default — doing so on every run would pay for the
+  declared command a second time and reopen the `node_modules`-less outage the checkout-only
+  design exists to avoid. `probe_in_worktree: true`, workspace-wide and additive, is the opt-in
+  for a workspace that has actually seen the gap #363 named: a command green in the checkout and
+  red only in a story's own worktree shape (a `.git` FILE vs. a `.git` directory is the measured
+  case). On, every declared base command is ALSO measured, once per repo, in a fresh detached
+  worktree of the base sha — kept beside the checkout row, never instead of it, under the same
+  `tree:` field (`checkout` vs. `worktree`) rather than a third tree constant. Off (the default,
+  and every workspace before this key existed) leaves the base pre-flight measuring the checkout
+  only, exactly as before. Pre-merge review measurement: a session that calls the base pre-flight
+  more than once (a `prepare()` followed by the real call) paid for a `git worktree add`/`remove`
+  on EVERY call, even when every declared command already had a fresh `tree: worktree` reading and
+  nothing was spawned there — fixed by checking every command's cache hit before touching git at
+  all, so a worktree is opened only when at least one command still needs a fresh measurement.
+
+### Fixed
+
+- **The plan sequencing rule (#365) could false-positive two unrelated stories that happened to
+  share a generic single-transition camelCase token (#370).** `fieldsIn`
+  (`src/core/plan/planShape.ts`) captured ANY bare camelCase/PascalCase token with one inner
+  capital as a field candidate, so a story enforcing an invariant near a word like `toString` or
+  `getId` collided with an unrelated story populating a same-named `toString` or `getId`
+  elsewhere, refusing an honest plan for sharing nothing but an incidental identifier. A bare
+  camelCase/PascalCase token with at least two internal capital transitions
+  (`DeliveryAddressText`) still always counts; a one-transition token (`toString`, `getId`) now
+  counts only when the SAME normalized field is ALSO spelled `snake_case` or backtick-quoted
+  somewhere else in the plan — dropping one-transition tokens outright, the first cut at this
+  fix, reopened #365 for a genuine two-word field spelled bare PascalCase on one side and
+  `snake_case` on the other (`order_total` enforced in one story, bare `OrderTotal` populated in
+  another still refuses; `toString` shared by two unrelated stories, with no `snake_case` or
+  backtick sibling anywhere in the plan, still does not). `snake_case` and backtick-quoted
+  identifiers are unaffected either way, and the originating #365 case still refuses.
+- **`task.done`'s `as_is_note` had no size bound, unlike its two siblings on the same event
+  (#368).** `permission_refused` and `budget_death` were clamped by #359 after a ~110-line
+  refused heredoc alone pushed `task.done` past the §2.9 4096-byte payload cap and failed the
+  whole build STAGE, not just the story. `as_is_note` — the operator-typed `--note` on `tldrx
+  story reopen <id> --as-is` — was never given the same treatment, even though nothing stops a
+  long, scripted or pasted note from reaching the exact same shape. It is now passed through the
+  same `clampAgentText` call, the same `TASK_DONE_FIELD_MAX_BYTES` constant and the same
+  `[clamped: N bytes exceeds the M byte cap]` marker convention #359 already set, so an
+  oversized as-is note can no longer fail the build stage.
+- **The Build-entry probe's throwaway worktree ran a repo's `install:` but not its
+  `tool_restore:`, so a command whose resolution depended on the restore having run could be
+  refused there even though the checkout door — which does run `tool_restore:` since #363 —
+  would have been fine (part of #371).** `entryProbe.ts`'s per-repo declaration now also reads
+  `tool_restore:` (`toolRestoreCommandFor`, the same slot `prepBaseTree` already runs at the
+  checkout door) and runs it in the fresh worktree before that worktree's `install:` and before
+  any Definition-of-Done command's binary is resolved there, refusing Build by name on a
+  nonzero exit — the same shape the checkout door already uses, never a second copy of the
+  restore logic.
+
+### Changed
+
+- **`settleAskedNoDiff` and `settleRedDod` now share one requeue-settle helper instead of each
+  hand-building the same shape (#369).** Both settled a "requeue this attempt, attempts remain"
+  turn by constructing an identical eight-field n-a-review object and `keepWorktree: true` by
+  hand — copied verbatim in two places, the AGENTS.md §12 duplication the file's own
+  decomposition precedent exists to avoid. `settleRequeue` now holds that shape once, taking the
+  fields that actually vary (`dod`, `reason`, `askedNoDiff`) as data; both call sites are
+  unchanged in behavior — `test/build-golden.test.ts` stays byte-identical.
+- **AGENTS.md §11 now names the negated-closing-verb trap and widens its own verification
+  grep to catch it.** Measured 2026-09-16: commit `d8f90f9`'s sentence `reported not fixed:
+  #359` auto-closed #359 anyway — GitHub's closing-keyword parser matches `fixed` (any
+  inflection) followed by an optional colon/punctuation and `#N`, and does not parse the
+  negation three tokens earlier; #359 needed a reopen before its real fix (`24f1324`) closed
+  it a second time, legitimately. §11's own documented verification command,
+  `grep -iE '(clos|fix|resolv)[a-z]* #'`, had the identical blind spot — it does not allow a
+  colon between the verb and the number, so it read `fixed: #359` as a non-match (measured
+  exit 1) and would have let this exact sentence through. The grep is widened to
+  `(clos|fix|resolv)[a-z]*[[:punct:]]* #` (measured exit 0 on the same sentence); the real
+  discipline stays "never write a closing-shaped phrase near a `#N` that should not close" —
+  the grep is a tripwire, not the fix (closes #372).
+- **`ci.yml` now keeps `test/merge-wave.test.ts`'s tmp sandbox as a build artifact when the
+  job fails.** This is an INSTRUMENT change, not a fix for the still-undiagnosed #237 flake
+  (interrupted-merge case expects a SIGTERM exit of 143, sometimes sees 0 after ~92s): every
+  #237 data point so far recorded the same second wall on top of the first — "no merge.log is
+  available from the CI sandbox" — because the sandbox that file plants was discarded with
+  the runner. The `bun test` step's `TMPDIR` now points at `${{ runner.temp }}/mw` instead of
+  the OS default, and a new `if: failure()` step uploads a scoped subset of it on failure
+  (`actions/upload-artifact@v4`, `retention-days: 14`). Review caught a second wall in the
+  first cut (closes #372's own class of bug, an instrument that cannot observe the thing):
+  `afterEach` `rmSync`s every sandbox unconditionally, pass or fail, INSIDE the bun process,
+  before that upload step ever runs — so the artifact would have been empty on the exact run
+  it exists for. `test/merge-wave.test.ts` now mkdtemps its sandboxes under the recognisable
+  `mw-sandbox-` prefix and skips its own cleanup when `MERGE_WAVE_KEEP_SANDBOX` is set (the
+  decision lives in one small, unit-tested function, `keepSandbox`/`cleanupSandbox` in
+  `test/fixtures/mergeWaveSandbox.ts` — local runs stay hermetic and self-cleaning per §8
+  unless that var is set); ci.yml sets it on the `bun test` step and scopes the upload's
+  `path:` to exactly that prefix, so the next red leaves a `merge.log` and lock state an
+  agent can actually read (see #237, closes #373).
+
 ## 0.32.0 — 2026-09-16
 
 ### Fixed

package/README.md

@@ -335,6 +335,7 @@ back on the registry is 0.3.0.
 
 | Version | Date | Status | Contains |
 |---|---|---|---|
+| 0.33.0 | 2026-09-17 | `beta` | Six follow-ups from the 0.32.0 cycle, each measured on the second unattended run (run #42) or on the review that shipped it. The plan sequencing rule counts a bare camelCase field only when it is unambiguous or the plan spells it elsewhere as snake_case or in backticks, so unrelated stories sharing a word like `toString` no longer refuse each other (#370); `task.done` clamps an oversized `as_is_note` the way it clamps `permission_refused` (#368); the asked-no-diff and red-DoD requeues settle through one helper that takes data (#369); a workspace can opt its base pre-flight probe into a story-shaped worktree with `probe_in_worktree: true`, and the Build-entry probe runs `tool_restore:` first (#371, the remainder of #363); AGENTS §11 names the negated closing verb that still auto-closes and widens the pre-wave grep (#372); and CI keeps merge-wave's sandboxes on failure so the next #237 red carries its `merge.log` (#373). Minor release: a new workspace field and a new plan refusal shape. |
 | 0.32.0 | 2026-09-16 | `beta` | Seven framework defects measured on the second unattended run (run #42), where every one of nine operator stalls was the framework's, not the code's. A refused compound shell line is a rework note for the developer instead of a human stop (#360); a dependency hold is re-evaluated the moment the dependency lands (#361) and a rescued story is written back to `todo` the instant the release is decided (#366); an event payload over the size cap is clamped to a bounded head instead of failing the whole build stage (#359); a headless developer is told it is unattended, that `## Inputs` is where to start and not an allowlist, and a turn that asks instead of deciding is a named `asked_no_diff` failure (#364); the rate-limit park waits for 90% of the window, not the provider's first warning at half of it (#367); the plan refuses a story that enforces an invariant on a field before the story that populates it, matching the field across spellings (#365); and the preflight restores workspace tools before its first probe and names the tree it ran in (#363, in part). Minor release: a new plan refusal, a changed park threshold and a new failure kind. |
 | 0.31.1 | 2026-09-16 | `beta` | One fix, measured on the first unattended run under 0.31.0: a seed placed at the documented `.tldrx/seeds/` location was invisible to the seed-solution detector, because the filter that drops the `what` stage's own framework inputs dropped every `.tldrx/` path, so `how` ran at full price for exactly the seeds #346 was written to skip (#358). |
 | 0.31.0 | 2026-09-16 | `beta` | Ten efficiency adjustments, ranked from a measured audit of 48 runs, so an unattended run spends less and stalls less. `how` is skipped when the seed already declares its own solution, and runs on `sonnet` when it does run (#346); `risks.md` is no longer generated (#350); `watch` follows `build`'s gate policy, so an all-auto run signs itself (#349); a Watch card's `[src:]` punctuation slip is repaired locally instead of costing a turn (#345); a fix list with zero open findings settles the round, an unreadable one holds it by name (#218); `run status` warns NO-RETRY before a retry the budget refuses (#232); a failed headless turn carries a named `failure_kind`, so the loop stops buying the same retry for every death (#348); an orphaned turn is banked as unmetered instead of a confident zero (#337); a relaunch resumes its own epic branch instead of restarting it (#347); the base-tree DoD refusal names the workspace `install:` (#343) and `run auto` names `--wait-gates` (#342). |

package/dist/hooks/answer-capture.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 import {
   conflictOf
-} from "./chunk-04kpbhvk.js";
+} from "./chunk-px7swzs1.js";
 import {
   FactsStore,
   formatJaccard
-} from "./chunk-f9d2efhb.js";
+} from "./chunk-bfvcebn6.js";
 import {
   parseHookInput,
   readStdin
-} from "./chunk-zyz0fbz5.js";
+} from "./chunk-jfaarcb1.js";
 import"./chunk-ae6bkfs5.js";
 import {
   EventLog,
   PHASE_ID_RE
-} from "./chunk-akemhezh.js";
+} from "./chunk-5wh26b5f.js";
 import {
   PHASE_IDS
-} from "./chunk-yyhwf3bp.js";
-import"./chunk-5kv2vtha.js";
+} from "./chunk-vhy24kv6.js";
+import"./chunk-7ypyp8xk.js";
 import {
   ADVISORY_KEY,
   MAX_FACT_CHARS,
@@ -28,7 +28,7 @@ import {
   renderQuestionBlock,
   replaceBlock,
   serializeQuestions
-} from "./chunk-x1f4dxwk.js";
+} from "./chunk-sjykymar.js";
 import {
   ITERATION_ONLY_SLOT,
   PROJECT_FRAMEWORK_DIR,
@@ -38,7 +38,7 @@ import {
   isScopedTemplate,
   parseYaml,
   scopedSlotOf
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/answer-capture.ts
 import { existsSync as existsSync5 } from "fs";
@@ -157,6 +157,7 @@ function loadWorkspace(root) {
   const scopedTemplates = new Set;
   const defaultBranches = new Map;
   let seedTriageThresholdTokens = null;
+  let probeInWorktree = false;
   const empty = () => ({
     root,
     repos,
@@ -168,7 +169,8 @@ function loadWorkspace(root) {
     scopedCommands,
     scopedTemplates,
     defaultBranches,
-    seedTriageThresholdTokens
+    seedTriageThresholdTokens,
+    probeInWorktree
   });
   const path = join(root, PROJECT_FRAMEWORK_DIR, "workspace.yml");
   if (!existsSync(path))
@@ -186,6 +188,8 @@ function loadWorkspace(root) {
       seedTriageThresholdTokens = tokens;
     }
   }
+  if (doc?.probe_in_worktree === true)
+    probeInWorktree = true;
   const list = doc?.repos;
   if (!Array.isArray(list))
     return empty();

package/dist/hooks/budget-gate.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   budgetGateDeny
-} from "./chunk-q1ge3nex.js";
+} from "./chunk-vhn2vz83.js";
 import {
   allow,
   deny,
   readPayload,
   runHook,
   toolInput
-} from "./chunk-27v2rwa9.js";
-import"./chunk-zyz0fbz5.js";
+} from "./chunk-d3jrf6yy.js";
+import"./chunk-jfaarcb1.js";
 import {
   REBALANCE_SOURCE,
   applyRebalance,
@@ -27,10 +27,10 @@ import {
   validateRunBudget,
   wouldExceed,
   wouldExceedHostTokens
-} from "./chunk-5at77jx8.js";
+} from "./chunk-s4kz5nn2.js";
 import {
   EventLog
-} from "./chunk-akemhezh.js";
+} from "./chunk-5wh26b5f.js";
 import {
   cursorStage,
   hostTokensIn,
@@ -39,20 +39,20 @@ import {
   newestActiveRun,
   renderRunEconomies,
   runSpend
-} from "./chunk-8ds2ret8.js";
+} from "./chunk-57s4mdhy.js";
 import {
   buildStageDefaults
-} from "./chunk-yyhwf3bp.js";
+} from "./chunk-vhy24kv6.js";
 import {
   noteDeprecations
-} from "./chunk-x1f4dxwk.js";
+} from "./chunk-sjykymar.js";
 import {
   PROJECT_WORK_DIR,
   findWorkspaceRoot,
   locateWork,
   parseYaml,
   stageYamlPath
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/budget-gate.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, statSync } from "node:fs";

package/dist/hooks/{chunk-9bd6b3xf.js → chunk-0a3b8w1c.js}

@@ -8818,6 +8818,7 @@ function loadWorkspace(root) {
   const scopedTemplates = new Set;
   const defaultBranches = new Map;
   let seedTriageThresholdTokens = null;
+  let probeInWorktree = false;
   const empty = () => ({
     root,
     repos,
@@ -8829,7 +8830,8 @@ function loadWorkspace(root) {
     scopedCommands,
     scopedTemplates,
     defaultBranches,
-    seedTriageThresholdTokens
+    seedTriageThresholdTokens,
+    probeInWorktree
   });
   const path = join3(root, PROJECT_FRAMEWORK_DIR, "workspace.yml");
   if (!existsSync3(path))
@@ -8847,6 +8849,8 @@ function loadWorkspace(root) {
       seedTriageThresholdTokens = tokens;
     }
   }
+  if (doc?.probe_in_worktree === true)
+    probeInWorktree = true;
   const list = doc?.repos;
   if (!Array.isArray(list))
     return empty();

package/dist/hooks/{chunk-whvae1vw.js → chunk-4w2e56zw.js}

@@ -11,7 +11,7 @@ import {
   storyDependsOn,
   tallyOf,
   validateRunBudget
-} from "./chunk-5at77jx8.js";
+} from "./chunk-s4kz5nn2.js";
 import {
   EventLog,
   OUTCOME_NOT_RECORDED,
@@ -24,12 +24,12 @@ import {
   isTerminal,
   stageAt,
   validateRunFile
-} from "./chunk-akemhezh.js";
+} from "./chunk-5wh26b5f.js";
 import {
   cursorStage,
   isAttendedByHostView,
   openRunViews
-} from "./chunk-8ds2ret8.js";
+} from "./chunk-57s4mdhy.js";
 import {
   backupPathFor,
   isAlive,
@@ -38,13 +38,13 @@ import {
   workspaceRootOfRunDir,
   writeAtomic,
   yamlScalar
-} from "./chunk-5kv2vtha.js";
+} from "./chunk-7ypyp8xk.js";
 import {
   isAdvisory,
   noteDeprecations,
   openBlocks,
   parseQuestions
-} from "./chunk-x1f4dxwk.js";
+} from "./chunk-sjykymar.js";
 import {
   FRAMEWORK_ROOT,
   MAX_ITEM_CHARS,
@@ -55,7 +55,7 @@ import {
   parseYaml,
   parseYamlRepairing,
   withoutSrcToken
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/statusline/runSnapshot.ts
 import { existsSync as existsSync4, readFileSync as readFileSync5 } from "node:fs";

package/dist/hooks/{chunk-8ds2ret8.js → chunk-57s4mdhy.js}

@@ -1,7 +1,7 @@
 import {
   listRunDirs,
   parseYaml
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/lib/runFile.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-akemhezh.js → chunk-5wh26b5f.js}

@@ -2,7 +2,7 @@ import {
   GATE_POLICIES,
   validateGatesPolicy,
   validateStagePolicy
-} from "./chunk-yyhwf3bp.js";
+} from "./chunk-vhy24kv6.js";
 import {
   asDocument,
   isRecord,
@@ -15,7 +15,7 @@ import {
   requireString,
   requireVersion,
   result
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/events/EventLog.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";

package/dist/hooks/{chunk-72et1xzx.js → chunk-6jd4dnyg.js}

@@ -1,6 +1,6 @@
 import {
   toolInput
-} from "./chunk-27v2rwa9.js";
+} from "./chunk-d3jrf6yy.js";
 
 // src/hooks/lib/wouldBe.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-5kv2vtha.js → chunk-7ypyp8xk.js}

@@ -1,7 +1,7 @@
 import {
   PROJECT_FRAMEWORK_DIR,
   PROJECT_WORK_DIR
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/lock/workspaceLock.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, rmSync as rmSync2, writeSync, closeSync } from "node:fs";

package/dist/hooks/{chunk-f9d2efhb.js → chunk-bfvcebn6.js}

@@ -3,7 +3,7 @@ import {
   withWorkspaceLock,
   workspaceRootOfFactsPath,
   writeAtomic
-} from "./chunk-5kv2vtha.js";
+} from "./chunk-7ypyp8xk.js";
 import {
   FACT_CONFIDENCES,
   FACT_DECIDERS,
@@ -15,7 +15,7 @@ import {
   isLive,
   isRetired,
   noteDeprecations
-} from "./chunk-x1f4dxwk.js";
+} from "./chunk-sjykymar.js";
 import {
   SRC_PATTERNS,
   asDocument,
@@ -28,7 +28,7 @@ import {
   requireString,
   requireVersion,
   result
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/facts/FactsStore.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-27v2rwa9.js → chunk-d3jrf6yy.js}

@@ -1,7 +1,7 @@
 import {
   parseHookInput,
   readStdin
-} from "./chunk-zyz0fbz5.js";
+} from "./chunk-jfaarcb1.js";
 
 // src/hooks/lib/decide.ts
 function deny(reason) {

package/dist/hooks/{chunk-zyz0fbz5.js → chunk-jfaarcb1.js}

@@ -1,6 +1,6 @@
 import {
   runtime
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/hooks/passthrough.ts
 async function readStdin() {

package/dist/hooks/{chunk-04kpbhvk.js → chunk-px7swzs1.js}

@@ -1,15 +1,15 @@
 import {
   findDuplicate
-} from "./chunk-f9d2efhb.js";
+} from "./chunk-bfvcebn6.js";
 import {
   evidencePath,
   gateEvidencePath,
   parseEvidence
-} from "./chunk-akemhezh.js";
+} from "./chunk-5wh26b5f.js";
 import {
   openBlocks,
   parseQuestions
-} from "./chunk-x1f4dxwk.js";
+} from "./chunk-sjykymar.js";
 
 // src/core/distill/distill.ts
 var CONFLICT_THRESHOLD = 0.6;

package/dist/hooks/{chunk-5at77jx8.js → chunk-s4kz5nn2.js}

@@ -1,6 +1,6 @@
 import {
   STAGE_TUNING_DEFAULTS
-} from "./chunk-yyhwf3bp.js";
+} from "./chunk-vhy24kv6.js";
 import {
   MAX_PLAN_STORIES,
   MAX_STORIES_PER_WAVE,
@@ -26,7 +26,7 @@ import {
   requireVersion,
   requireVersion1,
   result
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/lib/actor.ts
 function currentActor() {

package/dist/hooks/{chunk-x1f4dxwk.js → chunk-sjykymar.js}

@@ -3,7 +3,7 @@ import {
   parseSrcToken,
   srcToken,
   withoutSrcToken
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/text/questions.ts
 var REQUIRED_METADATA_KEYS = ["id", "status", "area", "asked_by", "asked_at"];

package/dist/hooks/{chunk-q1ge3nex.js → chunk-vhn2vz83.js}

@@ -3,7 +3,7 @@ import {
   EMPTY_SECTION_RULE,
   noneBullet,
   srcRule
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/lib/messages.ts
 var GRAMMAR = "[src: <repo:path:line> | https://… | Q<n> | F<n> | $ <cmd> → exit <n> | graph:<node> | absent:<path>]";

package/dist/hooks/{chunk-yyhwf3bp.js → chunk-vhy24kv6.js}

@@ -6,7 +6,7 @@ import {
   isRecord,
   loadWorkspace,
   parseYaml
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/core/run/workflowPreset.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/claim-sources.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   wouldBeContent
-} from "./chunk-72et1xzx.js";
+} from "./chunk-6jd4dnyg.js";
 import {
   claimSourcesDeny,
   claimSourcesEmptySectionDeny,
   claimSourcesMalformedDeny,
   claimSourcesUnresolvedDeny
-} from "./chunk-q1ge3nex.js";
+} from "./chunk-vhn2vz83.js";
 import {
   allow,
   deny,
@@ -16,8 +16,8 @@ import {
   postContext,
   readPayload,
   runHook
-} from "./chunk-27v2rwa9.js";
-import"./chunk-zyz0fbz5.js";
+} from "./chunk-d3jrf6yy.js";
+import"./chunk-jfaarcb1.js";
 import {
   isHandoff,
   loadWorkspace,
@@ -25,7 +25,7 @@ import {
   toSrcContext,
   validateCitations,
   validateHandoff
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/claim-sources.ts
 await runHook("claim-sources", async () => {

package/dist/hooks/dod-gate.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   wouldBeContent
-} from "./chunk-72et1xzx.js";
+} from "./chunk-6jd4dnyg.js";
 import {
   dodGateDeny,
   dodGateInternalErrorDeny,
   dodGateMissingBlockDeny,
   dodGateRefusedCommandDeny
-} from "./chunk-q1ge3nex.js";
+} from "./chunk-vhn2vz83.js";
 import {
   allow,
   deny,
@@ -15,15 +15,15 @@ import {
   filePathOf,
   isWriteOrEdit,
   readPayload
-} from "./chunk-27v2rwa9.js";
-import"./chunk-zyz0fbz5.js";
+} from "./chunk-d3jrf6yy.js";
+import"./chunk-jfaarcb1.js";
 import {
   loadRunView
-} from "./chunk-8ds2ret8.js";
+} from "./chunk-57s4mdhy.js";
 import {
   DEFAULT_TIMEOUT_S,
   buildStageDefaults
-} from "./chunk-yyhwf3bp.js";
+} from "./chunk-vhy24kv6.js";
 import {
   DodCommandRefused,
   loadWorkspace,
@@ -31,7 +31,7 @@ import {
   readStory,
   repoPath,
   runDodCommand
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/dod-gate.ts
 import { basename, join } from "node:path";

package/dist/hooks/no-reask.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   wouldBeContent
-} from "./chunk-72et1xzx.js";
+} from "./chunk-6jd4dnyg.js";
 import {
   noReAskDeny
-} from "./chunk-q1ge3nex.js";
+} from "./chunk-vhn2vz83.js";
 import {
   FactsStore
-} from "./chunk-f9d2efhb.js";
+} from "./chunk-bfvcebn6.js";
 import {
   allow,
   deny,
@@ -15,17 +15,17 @@ import {
   isWriteOrEdit,
   readPayload,
   runHook
-} from "./chunk-27v2rwa9.js";
-import"./chunk-zyz0fbz5.js";
-import"./chunk-5kv2vtha.js";
+} from "./chunk-d3jrf6yy.js";
+import"./chunk-jfaarcb1.js";
+import"./chunk-7ypyp8xk.js";
 import {
   openBlocks,
   parseQuestions
-} from "./chunk-x1f4dxwk.js";
+} from "./chunk-sjykymar.js";
 import {
   factsPath,
   locateWork
-} from "./chunk-9bd6b3xf.js";
+} from "./chunk-0a3b8w1c.js";
 
 // src/hooks/no-reask.ts
 import { existsSync, readFileSync } from "node:fs";