truecourse 0.7.0-next.2 → 0.7.0-next.4

package/cli.mjs

@@ -972,8 +972,8 @@ var require_command = __commonJS({
   "node_modules/.pnpm/commander@12.1.0/node_modules/commander/lib/command.js"(exports) {
     var EventEmitter2 = __require("node:events").EventEmitter;
     var childProcess = __require("node:child_process");
-    var path79 = __require("node:path");
-    var fs68 = __require("node:fs");
+    var path80 = __require("node:path");
+    var fs70 = __require("node:fs");
     var process2 = __require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -1905,11 +1905,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path79.resolve(baseDir, baseName);
-          if (fs68.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path79.extname(baseName))) return void 0;
+          const localBin = path80.resolve(baseDir, baseName);
+          if (fs70.existsSync(localBin)) return localBin;
+          if (sourceExt.includes(path80.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
-            (ext2) => fs68.existsSync(`${localBin}${ext2}`)
+            (ext2) => fs70.existsSync(`${localBin}${ext2}`)
           );
           if (foundExt) return `${localBin}${foundExt}`;
           return void 0;
@@ -1921,21 +1921,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs68.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs70.realpathSync(this._scriptPath);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path79.resolve(
-            path79.dirname(resolvedScriptPath),
+          executableDir = path80.resolve(
+            path80.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path79.basename(
+            const legacyName = path80.basename(
               this._scriptPath,
-              path79.extname(this._scriptPath)
+              path80.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1946,7 +1946,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path79.extname(executableFile));
+        launchWithNode = sourceExt.includes(path80.extname(executableFile));
         let proc;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -2786,7 +2786,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path79.basename(filename, path79.extname(filename));
+        this._name = path80.basename(filename, path80.extname(filename));
         return this;
       }
       /**
@@ -2800,9 +2800,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path80) {
-        if (path80 === void 0) return this._executableDir;
-        this._executableDir = path80;
+      executableDir(path81) {
+        if (path81 === void 0) return this._executableDir;
+        this._executableDir = path81;
         return this;
       }
       /**
@@ -5206,8 +5206,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path79, errorMaps, issueData } = params;
-      const fullPath = [...path79, ...issueData.path || []];
+      const { data, path: path80, errorMaps, issueData } = params;
+      const fullPath = [...path80, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -5515,11 +5515,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path79, key4) {
+      constructor(parent, value, path80, key4) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path79;
+        this._path = path80;
         this._key = key4;
       }
       get path() {
@@ -11976,10 +11976,10 @@ var require_src3 = __commonJS({
     var fs_1 = __require("fs");
     var debug_1 = __importDefault(require_src2());
     var log2 = debug_1.default("@kwsites/file-exists");
-    function check(path79, isFile, isDirectory) {
-      log2(`checking %s`, path79);
+    function check(path80, isFile, isDirectory) {
+      log2(`checking %s`, path80);
       try {
-        const stat = fs_1.statSync(path79);
+        const stat = fs_1.statSync(path80);
         if (stat.isFile() && isFile) {
           log2(`[OK] path represents a file`);
           return true;
@@ -11999,8 +11999,8 @@ var require_src3 = __commonJS({
         throw e;
       }
     }
-    function exists2(path79, type2 = exports.READABLE) {
-      return check(path79, (type2 & exports.FILE) > 0, (type2 & exports.FOLDER) > 0);
+    function exists2(path80, type2 = exports.READABLE) {
+      return check(path80, (type2 & exports.FILE) > 0, (type2 & exports.FOLDER) > 0);
     }
     exports.exists = exists2;
     exports.FILE = 1;
@@ -12073,8 +12073,8 @@ function pathspec(...paths) {
   cache.set(key4, paths);
   return key4;
 }
-function isPathSpec(path79) {
-  return path79 instanceof String && cache.has(path79);
+function isPathSpec(path80) {
+  return path80 instanceof String && cache.has(path80);
 }
 function toPaths(pathSpec) {
   return cache.get(pathSpec) || [];
@@ -12118,8 +12118,8 @@ function toLinesWithContent(input = "", trimmed2 = true, separator = "\n") {
 function forEachLineWithContent(input, callback) {
   return toLinesWithContent(input, true).map((line) => callback(line));
 }
-function folderExists(path79) {
-  return (0, import_file_exists.exists)(path79, import_file_exists.FOLDER);
+function folderExists(path80) {
+  return (0, import_file_exists.exists)(path80, import_file_exists.FOLDER);
 }
 function append(target, item) {
   if (Array.isArray(target)) {
@@ -12310,8 +12310,8 @@ function checkIsRepoRootTask() {
     commands,
     format: "utf-8",
     onError,
-    parser(path79) {
-      return /^\.(git)?$/.test(path79.trim());
+    parser(path80) {
+      return /^\.(git)?$/.test(path80.trim());
     }
   };
 }
@@ -12567,11 +12567,11 @@ function parseGrep(grep) {
   const paths = /* @__PURE__ */ new Set();
   const results = {};
   forEachLineWithContent(grep, (input) => {
-    const [path79, line, preview] = input.split(NULL);
-    paths.add(path79);
-    (results[path79] = results[path79] || []).push({
+    const [path80, line, preview] = input.split(NULL);
+    paths.add(path80);
+    (results[path80] = results[path80] || []).push({
       line: asNumber(line),
-      path: path79,
+      path: path80,
       preview
     });
   });
@@ -12868,14 +12868,14 @@ function hashObjectTask(filePath, write) {
   }
   return straightThroughStringTask(commands, true);
 }
-function parseInit(bare, path79, text4) {
+function parseInit(bare, path80, text4) {
   const response = String(text4).trim();
   let result;
   if (result = initResponseRegex.exec(response)) {
-    return new InitSummary(bare, path79, false, result[1]);
+    return new InitSummary(bare, path80, false, result[1]);
   }
   if (result = reInitResponseRegex.exec(response)) {
-    return new InitSummary(bare, path79, true, result[1]);
+    return new InitSummary(bare, path80, true, result[1]);
   }
   let gitDir = "";
   const tokens = response.split(" ");
@@ -12886,12 +12886,12 @@ function parseInit(bare, path79, text4) {
       break;
     }
   }
-  return new InitSummary(bare, path79, /^re/i.test(response), gitDir);
+  return new InitSummary(bare, path80, /^re/i.test(response), gitDir);
 }
 function hasBareCommand(command) {
   return command.includes(bareCommand);
 }
-function initTask(bare = false, path79, customArgs) {
+function initTask(bare = false, path80, customArgs) {
   const commands = ["init", ...customArgs];
   if (bare && !hasBareCommand(commands)) {
     commands.splice(1, 0, bareCommand);
@@ -12900,7 +12900,7 @@ function initTask(bare = false, path79, customArgs) {
     commands,
     format: "utf-8",
     parser(text4) {
-      return parseInit(commands.includes("--bare"), path79, text4);
+      return parseInit(commands.includes("--bare"), path80, text4);
     }
   };
 }
@@ -13179,14 +13179,14 @@ function splitLine(result, lineStr) {
     default:
       return;
   }
-  function data(index, workingDir, path79) {
+  function data(index, workingDir, path80) {
     const raw = `${index}${workingDir}`;
     const handler = parsers6.get(raw);
     if (handler) {
-      handler(result, path79);
+      handler(result, path80);
     }
     if (raw !== "##" && raw !== "!!") {
-      result.files.push(new FileStatusSummary(path79, index, workingDir));
+      result.files.push(new FileStatusSummary(path80, index, workingDir));
     }
   }
 }
@@ -13373,8 +13373,8 @@ function deleteBranchTask(branch, forceDelete = false) {
   return task;
 }
 function toPath(input) {
-  const path79 = input.trim().replace(/^["']|["']$/g, "");
-  return path79 && normalize(path79);
+  const path80 = input.trim().replace(/^["']|["']$/g, "");
+  return path80 && normalize(path80);
 }
 function checkIgnoreTask(paths) {
   return {
@@ -13513,8 +13513,8 @@ function stashListTask(opt = {}, customArgs) {
     parser: parser4
   };
 }
-function addSubModuleTask(repo, path79) {
-  return subModuleTask(["add", repo, path79]);
+function addSubModuleTask(repo, path80) {
+  return subModuleTask(["add", repo, path80]);
 }
 function initSubModuleTask(customArgs) {
   return subModuleTask(["init", ...customArgs]);
@@ -14826,9 +14826,9 @@ var init_esm2 = __esm({
       "src/lib/responses/InitSummary.ts"() {
         "use strict";
         InitSummary = class {
-          constructor(bare, path79, existing, gitDir) {
+          constructor(bare, path80, existing, gitDir) {
             this.bare = bare;
-            this.path = path79;
+            this.path = path80;
             this.existing = existing;
             this.gitDir = gitDir;
           }
@@ -15362,12 +15362,12 @@ var init_esm2 = __esm({
         "use strict";
         fromPathRegex = /^(.+)\0(.+)$/;
         FileStatusSummary = class {
-          constructor(path79, index, working_dir) {
-            this.path = path79;
+          constructor(path80, index, working_dir) {
+            this.path = path80;
             this.index = index;
             this.working_dir = working_dir;
             if (index === "R" || working_dir === "R") {
-              const detail = fromPathRegex.exec(path79) || [null, path79, path79];
+              const detail = fromPathRegex.exec(path80) || [null, path80, path80];
               this.from = detail[2] || "";
               this.path = detail[1] || "";
             }
@@ -15630,9 +15630,9 @@ var init_esm2 = __esm({
               next
             );
           }
-          hashObject(path79, write) {
+          hashObject(path80, write) {
             return this._runTask(
-              hashObjectTask(path79, write === true),
+              hashObjectTask(path80, write === true),
               trailingFunctionArgument(arguments)
             );
           }
@@ -16269,8 +16269,8 @@ var init_esm2 = __esm({
           }
           return this._runTask(straightThroughStringTask2(command, this._trimmed), next);
         };
-        Git2.prototype.submoduleAdd = function(repo, path79, then) {
-          return this._runTask(addSubModuleTask2(repo, path79), trailingFunctionArgument2(arguments));
+        Git2.prototype.submoduleAdd = function(repo, path80, then) {
+          return this._runTask(addSubModuleTask2(repo, path80), trailingFunctionArgument2(arguments));
         };
         Git2.prototype.submoduleUpdate = function(args, then) {
           return this._runTask(
@@ -16896,7 +16896,7 @@ var require_ignore = __commonJS({
       //   path matching.
       // - check `string` either `MODE_IGNORE` or `MODE_CHECK_IGNORE`
       // @returns {TestResult} true if a file is ignored
-      test(path79, checkUnignored, mode) {
+      test(path80, checkUnignored, mode) {
         let ignored = false;
         let unignored = false;
         let matchedRule;
@@ -16905,7 +16905,7 @@ var require_ignore = __commonJS({
           if (unignored === negative && ignored !== unignored || negative && !ignored && !unignored && !checkUnignored) {
             return;
           }
-          const matched = rule[mode].test(path79);
+          const matched = rule[mode].test(path80);
           if (!matched) {
             return;
           }
@@ -16926,17 +16926,17 @@ var require_ignore = __commonJS({
     var throwError2 = (message, Ctor) => {
       throw new Ctor(message);
     };
-    var checkPath = (path79, originalPath, doThrow) => {
-      if (!isString(path79)) {
+    var checkPath = (path80, originalPath, doThrow) => {
+      if (!isString(path80)) {
         return doThrow(
           `path must be a string, but got \`${originalPath}\``,
           TypeError
         );
       }
-      if (!path79) {
+      if (!path80) {
         return doThrow(`path must not be empty`, TypeError);
       }
-      if (checkPath.isNotRelative(path79)) {
+      if (checkPath.isNotRelative(path80)) {
         const r = "`path.relative()`d";
         return doThrow(
           `path should be a ${r} string, but got "${originalPath}"`,
@@ -16945,7 +16945,7 @@ var require_ignore = __commonJS({
       }
       return true;
     };
-    var isNotRelative = (path79) => REGEX_TEST_INVALID_PATH.test(path79);
+    var isNotRelative = (path80) => REGEX_TEST_INVALID_PATH.test(path80);
     checkPath.isNotRelative = isNotRelative;
     checkPath.convert = (p2) => p2;
     var Ignore = class {
@@ -16975,19 +16975,19 @@ var require_ignore = __commonJS({
       }
       // @returns {TestResult}
       _test(originalPath, cache3, checkUnignored, slices) {
-        const path79 = originalPath && checkPath.convert(originalPath);
+        const path80 = originalPath && checkPath.convert(originalPath);
         checkPath(
-          path79,
+          path80,
           originalPath,
           this._strictPathCheck ? throwError2 : RETURN_FALSE
         );
-        return this._t(path79, cache3, checkUnignored, slices);
+        return this._t(path80, cache3, checkUnignored, slices);
       }
-      checkIgnore(path79) {
-        if (!REGEX_TEST_TRAILING_SLASH.test(path79)) {
-          return this.test(path79);
+      checkIgnore(path80) {
+        if (!REGEX_TEST_TRAILING_SLASH.test(path80)) {
+          return this.test(path80);
         }
-        const slices = path79.split(SLASH).filter(Boolean);
+        const slices = path80.split(SLASH).filter(Boolean);
         slices.pop();
         if (slices.length) {
           const parent = this._t(
@@ -17000,18 +17000,18 @@ var require_ignore = __commonJS({
             return parent;
           }
         }
-        return this._rules.test(path79, false, MODE_CHECK_IGNORE);
+        return this._rules.test(path80, false, MODE_CHECK_IGNORE);
       }
-      _t(path79, cache3, checkUnignored, slices) {
-        if (path79 in cache3) {
-          return cache3[path79];
+      _t(path80, cache3, checkUnignored, slices) {
+        if (path80 in cache3) {
+          return cache3[path80];
         }
         if (!slices) {
-          slices = path79.split(SLASH).filter(Boolean);
+          slices = path80.split(SLASH).filter(Boolean);
         }
         slices.pop();
         if (!slices.length) {
-          return cache3[path79] = this._rules.test(path79, checkUnignored, MODE_IGNORE);
+          return cache3[path80] = this._rules.test(path80, checkUnignored, MODE_IGNORE);
         }
         const parent = this._t(
           slices.join(SLASH) + SLASH,
@@ -17019,29 +17019,29 @@ var require_ignore = __commonJS({
           checkUnignored,
           slices
         );
-        return cache3[path79] = parent.ignored ? parent : this._rules.test(path79, checkUnignored, MODE_IGNORE);
+        return cache3[path80] = parent.ignored ? parent : this._rules.test(path80, checkUnignored, MODE_IGNORE);
       }
-      ignores(path79) {
-        return this._test(path79, this._ignoreCache, false).ignored;
+      ignores(path80) {
+        return this._test(path80, this._ignoreCache, false).ignored;
       }
       createFilter() {
-        return (path79) => !this.ignores(path79);
+        return (path80) => !this.ignores(path80);
       }
       filter(paths) {
         return makeArray(paths).filter(this.createFilter());
       }
       // @returns {TestResult}
-      test(path79) {
-        return this._test(path79, this._testCache, true);
+      test(path80) {
+        return this._test(path80, this._testCache, true);
       }
     };
     var factory = (options) => new Ignore(options);
-    var isPathValid = (path79) => checkPath(path79 && checkPath.convert(path79), path79, RETURN_FALSE);
+    var isPathValid = (path80) => checkPath(path80 && checkPath.convert(path80), path80, RETURN_FALSE);
     var setupWindows = () => {
       const makePosix = (str2) => /^\\\\\?\\/.test(str2) || /["<>|\u0000-\u001F]+/u.test(str2) ? str2 : str2.replace(/\\/g, "/");
       checkPath.convert = makePosix;
       const REGEX_TEST_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
-      checkPath.isNotRelative = (path79) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path79) || isNotRelative(path79);
+      checkPath.isNotRelative = (path80) => REGEX_TEST_WINDOWS_PATH_ABSOLUTE.test(path80) || isNotRelative(path80);
     };
     if (
       // Detect `process` so that it can run in browsers.
@@ -18782,18 +18782,18 @@ function extractRouterMount(callNode, filePath) {
   const routerName = args[0]?.type === "identifier" ? args[0].text : null;
   if (!routerName)
     return null;
-  let path79 = "/";
+  let path80 = "/";
   for (const arg of args) {
     if (arg.type === "keyword_argument") {
       const key4 = arg.childForFieldName("name")?.text;
       const value = arg.childForFieldName("value");
       if ((key4 === "url_prefix" || key4 === "prefix") && value) {
-        path79 = value.text.replace(/^["']|["']$/g, "");
+        path80 = value.text.replace(/^["']|["']$/g, "");
       }
     }
   }
   return {
-    path: path79,
+    path: path80,
     routerName,
     location: {
       filePath,
@@ -18817,11 +18817,11 @@ function extractChainedRoute(outerCall, filePath) {
   const innerArgs = innerCall.childForFieldName("arguments");
   if (!innerArgs)
     return null;
-  let path79 = null;
+  let path80 = null;
   let httpMethod = methodName3 === "route" ? "GET" : methodName3.toUpperCase();
   for (const arg of innerArgs.namedChildren) {
-    if (!path79 && arg.type === "string") {
-      path79 = arg.text.replace(/^["']|["']$/g, "");
+    if (!path80 && arg.type === "string") {
+      path80 = arg.text.replace(/^["']|["']$/g, "");
     }
     if (arg.type === "keyword_argument") {
       const key4 = arg.childForFieldName("name")?.text;
@@ -18833,14 +18833,14 @@ function extractChainedRoute(outerCall, filePath) {
       }
     }
   }
-  if (!path79)
+  if (!path80)
     return null;
   const outerArgs = outerCall.childForFieldName("arguments");
   const handlerArg = outerArgs?.namedChildren[0];
   const handlerName = handlerArg?.type === "identifier" ? handlerArg.text : "anonymous";
   return {
     httpMethod,
-    path: path79,
+    path: path80,
     handlerName,
     location: {
       filePath,
@@ -18902,11 +18902,11 @@ function collectGroupPrefixes(root2) {
         const fn = child.childForFieldName("function");
         if (fn?.type === "member_access_expression" && fn.childForFieldName("name")?.text === "MapGroup") {
           const args = child.childForFieldName("arguments");
-          const path79 = args ? extractFirstStringArg(args) : null;
-          if (name && path79) {
+          const path80 = args ? extractFirstStringArg(args) : null;
+          if (name && path80) {
             const receiver = fn.childForFieldName("expression")?.text ?? "";
             const parentPrefix = prefixes.get(receiver) ?? "";
-            prefixes.set(name, joinRoute(parentPrefix, path79));
+            prefixes.set(name, joinRoute(parentPrefix, path80));
           }
         }
       }
@@ -18930,9 +18930,9 @@ function extractClassRoutePrefix(classNode) {
         continue;
       const args = childOfType(attr, "attribute_argument_list");
       if (args) {
-        const path79 = extractFirstStringArg(args);
-        if (path79)
-          return path79;
+        const path80 = extractFirstStringArg(args);
+        if (path80)
+          return path80;
       }
     }
   }
@@ -18955,16 +18955,16 @@ function extractAttributeRoute(methodNode, filePath, classContext) {
         httpMethod = method;
         const args = childOfType(attr, "attribute_argument_list");
         if (args) {
-          const path79 = extractFirstStringArg(args);
-          if (path79)
-            routePath = path79;
+          const path80 = extractFirstStringArg(args);
+          if (path80)
+            routePath = path80;
         }
       } else if (name === "Route" && !routePath) {
         const args = childOfType(attr, "attribute_argument_list");
         if (args) {
-          const path79 = extractFirstStringArg(args);
-          if (path79)
-            routePath = path79;
+          const path80 = extractFirstStringArg(args);
+          if (path80)
+            routePath = path80;
         }
       }
     }
@@ -18998,12 +18998,12 @@ function extractMinimalApiRoute(callNode, filePath, groupPrefixes) {
   const argsNode = callNode.childForFieldName("arguments");
   if (!argsNode)
     return null;
-  const path79 = extractFirstStringArg(argsNode);
-  if (path79 === null)
+  const path80 = extractFirstStringArg(argsNode);
+  if (path80 === null)
     return null;
   const receiver = funcNode.childForFieldName("expression")?.text ?? "";
   const prefix = groupPrefixes.get(receiver) ?? "";
-  let fullPath = joinRoute(prefix, path79);
+  let fullPath = joinRoute(prefix, path80);
   if (!fullPath.startsWith("/"))
     fullPath = "/" + fullPath;
   let handlerName = "anonymous";
@@ -19030,11 +19030,11 @@ function childOfType(node2, type2) {
   }
   return null;
 }
-function joinRoute(prefix, path79) {
+function joinRoute(prefix, path80) {
   const p2 = prefix.replace(/\/$/, "");
-  const s = path79.replace(/^\//, "");
+  const s = path80.replace(/^\//, "");
   if (!p2)
-    return path79;
+    return path80;
   if (!s)
     return p2;
   return `${p2}/${s}`;
@@ -19143,8 +19143,8 @@ function extractRoute(methodName3, argsNode, filePath, callNode) {
   const firstArg = argsNode.namedChild(0);
   if (!firstArg)
     return null;
-  const path79 = extractStringLiteral(firstArg);
-  if (!path79)
+  const path80 = extractStringLiteral(firstArg);
+  if (!path80)
     return null;
   const argCount = argsNode.namedChildCount;
   if (argCount < 2)
@@ -19157,7 +19157,7 @@ function extractRoute(methodName3, argsNode, filePath, callNode) {
     return null;
   return {
     httpMethod: methodName3.toUpperCase(),
-    path: path79,
+    path: path80,
     handlerName,
     location: {
       filePath,
@@ -19174,8 +19174,8 @@ function extractMount(argsNode, filePath, callNode) {
   const firstArg = argsNode.namedChild(0);
   if (!firstArg)
     return null;
-  const path79 = extractStringLiteral(firstArg);
-  if (!path79)
+  const path80 = extractStringLiteral(firstArg);
+  if (!path80)
     return null;
   const secondArg = argsNode.namedChild(1);
   if (!secondArg)
@@ -19184,7 +19184,7 @@ function extractMount(argsNode, filePath, callNode) {
   if (!routerName)
     return null;
   return {
-    path: path79,
+    path: path80,
     routerName,
     location: {
       filePath,
@@ -21715,11 +21715,11 @@ function buildCSharpSymbolIndex(files, rootPath) {
     byFullName.get(full).push(decl);
   }
   const stats = { resolvedRefs: 0, ambiguousRefs: 0 };
-  function resolveQualified(path79) {
-    const exact = byFullName.get(path79);
+  function resolveQualified(path80) {
+    const exact = byFullName.get(path80);
     if (exact)
       return exact;
-    const parts = path79.split(".");
+    const parts = path80.split(".");
     for (let i = parts.length - 1; i > 0; i--) {
       const prefix = parts.slice(0, i).join(".");
       const found = byFullName.get(prefix);
@@ -21733,8 +21733,8 @@ function buildCSharpSymbolIndex(files, rootPath) {
       const firstDot = ref.name.indexOf(".");
       const head = ref.name.slice(0, firstDot);
       const aliasTarget2 = aliases.get(head);
-      const path79 = aliasTarget2 ? `${aliasTarget2}${ref.name.slice(firstDot)}` : ref.name;
-      return resolveQualified(path79).filter((d3) => isDeclVisibleFrom(d3, ctx.project, fileProjects.get(d3.filePath)));
+      const path80 = aliasTarget2 ? `${aliasTarget2}${ref.name.slice(firstDot)}` : ref.name;
+      return resolveQualified(path80).filter((d3) => isDeclVisibleFrom(d3, ctx.project, fileProjects.get(d3.filePath)));
     }
     const aliasTarget = aliases.get(ref.name);
     if (aliasTarget) {
@@ -24858,9 +24858,9 @@ function detectDockerComposeServices(rootPath, allFiles) {
   ];
   let composePath2 = null;
   for (const file of composeFiles) {
-    const path79 = join8(rootPath, file);
-    if (existsSync7(path79)) {
-      composePath2 = path79;
+    const path80 = join8(rootPath, file);
+    if (existsSync7(path80)) {
+      composePath2 = path80;
       break;
     }
   }
@@ -28067,9 +28067,9 @@ function findSimpleCycles(component, componentSet, adjacency) {
       for (const next of successors) {
         if (!componentSet.has(next))
           continue;
-        if (next === start && path79.length >= 2) {
-          const chain = [...path79, start];
-          const minNode = path79.reduce((a, b) => a < b ? a : b);
+        if (next === start && path80.length >= 2) {
+          const chain = [...path80, start];
+          const minNode = path80.reduce((a, b) => a < b ? a : b);
           if (minNode === start) {
             cycles.push(chain);
           }
@@ -28077,15 +28077,15 @@ function findSimpleCycles(component, componentSet, adjacency) {
         }
         if (!visited.has(next) && !seen.has(next)) {
           visited.add(next);
-          path79.push(next);
+          path80.push(next);
           dfs2(next);
-          path79.pop();
+          path80.pop();
           visited.delete(next);
         }
       }
     };
     var dfs = dfs2;
-    const path79 = [start];
+    const path80 = [start];
     const visited = /* @__PURE__ */ new Set([start]);
     dfs2(start);
     seen.add(start);
@@ -28107,7 +28107,7 @@ function findShortestCycle(start, componentSet, adjacency) {
     visited.add(next);
   }
   while (queue.length > 0) {
-    const { node: node2, path: path79 } = queue.shift();
+    const { node: node2, path: path80 } = queue.shift();
     const nexts = adjacency.get(node2);
     if (!nexts)
       continue;
@@ -28115,11 +28115,11 @@ function findShortestCycle(start, componentSet, adjacency) {
       if (!componentSet.has(next))
         continue;
       if (next === start) {
-        return [...path79, start];
+        return [...path80, start];
       }
       if (!visited.has(next)) {
         visited.add(next);
-        queue.push({ node: next, path: [...path79, next] });
+        queue.push({ node: next, path: [...path80, next] });
       }
     }
   }
@@ -105218,7 +105218,7 @@ function parseBlockedOnCapabilities(reason) {
     return [];
   return m[1].split(",").map((s) => s.trim()).filter(Boolean);
 }
-var GuardWrittenScenarioSchema, GuardCoverageGapKindSchema, GuardCoverageGapSchema, GuardBirthFindingSchema, GuardGenerateErrorSchema, GuardEntryPreflightSchema, GuardExtractionFailureSchema, GuardOrphanedSectionSchema, GuardRecipeReportSchema, GuardGenerateUsageSchema, GuardGenerateReportSchema;
+var GuardWrittenScenarioSchema, GuardCoverageGapKindSchema, GuardCoverageGapSchema, GuardBirthFindingSchema, GuardGenerateErrorSchema, GuardReadyScenarioSchema, GuardHeldSectionSchema, GuardEntryPreflightSchema, GuardExtractionFailureSchema, GuardOrphanedDismissalSchema, GuardOrphanedSectionSchema, GuardRecipeReportSchema, GuardGenerateUsageSchema, GuardGenerateReportSchema;
 var init_report = __esm({
   "packages/shared/dist/guard/report.js"() {
     "use strict";
@@ -105236,7 +105236,8 @@ var init_report = __esm({
       "awaiting-driver",
       "untestable",
       "no-claim",
-      "blocked-on"
+      "blocked-on",
+      "dismissed"
     ]);
     GuardCoverageGapSchema = external_exports.object({
       doc: external_exports.string(),
@@ -105258,6 +105259,22 @@ var init_report = __esm({
       actual: external_exports.string(),
       /** Repo-relative pointer into `guard/evidence/`, when a transcript was written. */
       evidencePath: external_exports.string().optional(),
+      /**
+       * The failed candidate's authored YAML, serialized inline AT FINDING CREATION
+       * (same serialize-at-creation as heldSections' readyScenarios). The finding
+       * detail renders it in the scenario-source code block so the user can judge
+       * "defect or drift" with the exact commands the scenario ran on-screen.
+       * Optional so older `result.json` files keep parsing.
+       */
+      yaml: external_exports.string().optional(),
+      /**
+       * The EXTRACTED CLAIM's stable text — the claim identity a dismissal keys on
+       * (anchor + this). The finding detail's Dismiss action writes it into
+       * `scenarios/decisions.json`; generate then skips a matching claim before
+       * authoring. Distinct from `title` (the scenario title). Optional so older
+       * reports (and the internal retry-evidence findings) parse.
+       */
+      claim: external_exports.string().optional(),
       /**
        * The bound section's human heading, joined SERVER-SIDE at report read time
        * (never written to `result.json` — the enrichment is read-side). A finding's
@@ -105271,6 +105288,18 @@ var init_report = __esm({
       anchor: external_exports.string(),
       message: external_exports.string()
     }).strict();
+    GuardReadyScenarioSchema = external_exports.object({
+      id: external_exports.string(),
+      title: external_exports.string(),
+      /** The committed YAML the scenario would have been written as. */
+      yaml: external_exports.string()
+    }).strict();
+    GuardHeldSectionSchema = external_exports.object({
+      doc: external_exports.string(),
+      anchor: external_exports.string(),
+      headingText: external_exports.string().optional(),
+      readyScenarios: external_exports.array(GuardReadyScenarioSchema)
+    }).strict();
     GuardEntryPreflightSchema = external_exports.object({
       /** Display form of the entry argv, e.g. `node tools/cli/dist/index.js`. */
       entry: external_exports.string(),
@@ -105283,6 +105312,11 @@ var init_report = __esm({
       doc: external_exports.string(),
       reason: external_exports.string()
     }).strict();
+    GuardOrphanedDismissalSchema = external_exports.object({
+      doc: external_exports.string(),
+      anchor: external_exports.string(),
+      title: external_exports.string()
+    }).strict();
     GuardOrphanedSectionSchema = external_exports.object({
       doc: external_exports.string(),
       anchor: external_exports.string(),
@@ -105323,6 +105357,19 @@ var init_report = __esm({
        * `written.length` when a passing scenario's section didn't settle.
        */
       birthPassed: external_exports.number().int().nonnegative().optional(),
+      /**
+       * Unsettled sections whose birth-passed candidates were withheld — the
+       * ready-but-held scenarios, each carrying its authored YAML inline. Optional so
+       * older reports (written before this field existed) keep parsing; absent reads
+       * as "no held work".
+       */
+      heldSections: external_exports.array(GuardHeldSectionSchema).optional(),
+      /**
+       * Dismissals whose claim text matched nothing in a doc this run re-extracted —
+       * stale entries in `scenarios/decisions.json`, surfaced (never silently
+       * honored). Optional so older reports parse; absent reads as "none".
+       */
+      orphanedDismissals: external_exports.array(GuardOrphanedDismissalSchema).optional(),
       manifestPath: external_exports.string().optional(),
       usage: GuardGenerateUsageSchema.optional(),
       /**
@@ -105373,6 +105420,35 @@ var init_manifest = __esm({
   }
 });
 
+// packages/shared/dist/guard/decisions.js
+function dismissedClaimKey(doc, anchor, title) {
+  return `${doc}\0${anchor}\0${title}`;
+}
+var GuardDismissedClaimSchema, GuardDecisionsSchema, EMPTY_GUARD_DECISIONS;
+var init_decisions = __esm({
+  "packages/shared/dist/guard/decisions.js"() {
+    "use strict";
+    init_zod();
+    GuardDismissedClaimSchema = external_exports.object({
+      /** Repo-relative doc path the claim's section lives in. */
+      doc: external_exports.string().min(1),
+      /** The section anchor (slug) the claim was extracted under. */
+      anchor: external_exports.string().min(1),
+      /** The extracted claim's stable text — the identity, with `anchor`. */
+      title: external_exports.string().min(1),
+      /** ISO timestamp the dismissal was recorded. */
+      dismissedAt: external_exports.string(),
+      /** Optional free-text rationale ("flaky", "won't fix", …). */
+      note: external_exports.string().optional()
+    });
+    GuardDecisionsSchema = external_exports.object({
+      version: external_exports.literal(1),
+      dismissedClaims: external_exports.array(GuardDismissedClaimSchema).default([])
+    });
+    EMPTY_GUARD_DECISIONS = { version: 1, dismissedClaims: [] };
+  }
+});
+
 // packages/shared/dist/guard/dashboard.js
 var init_dashboard = __esm({
   "packages/shared/dist/guard/dashboard.js"() {
@@ -105423,6 +105499,11 @@ function summarizeGenerate(r) {
       }
     }
   }
+  const heldSections = r.heldSections ?? [];
+  const heldKeys = new Set(heldSections.map((h) => `${h.doc}\0${h.anchor}`));
+  const readyButHeld = heldSections.reduce((n, h) => n + h.readyScenarios.length, 0);
+  const heldByFindings = r.birthFindings.filter((f2) => heldKeys.has(`${f2.doc}\0${f2.anchor}`)).length;
+  const heldByErrors = r.errors.filter((e) => heldKeys.has(`${e.doc}\0${e.anchor}`)).length;
   return {
     generatedAt: r.generatedAt,
     status: r.status,
@@ -105433,6 +105514,9 @@ function summarizeGenerate(r) {
     blockedOnCapabilities,
     birthFindings: r.birthFindings.length,
     errors: r.errors.length,
+    readyButHeld,
+    heldByFindings,
+    heldByErrors,
     ...r.usage ? { usage: r.usage } : {}
   };
 }
@@ -105464,6 +105548,7 @@ var init_guard = __esm({
     init_result();
     init_report();
     init_manifest();
+    init_decisions();
     init_dashboard();
     init_summary();
   }
@@ -111875,14 +111960,14 @@ var init_missing_error_status_code = __esm({
 });
 
 // packages/analyzer/dist/rules/architecture/visitors/javascript/route-without-auth-middleware.js
-function isPublicPath(path79) {
-  return PUBLIC_PATH_PATTERNS.some((re2) => re2.test(path79));
+function isPublicPath(path80) {
+  return PUBLIC_PATH_PATTERNS.some((re2) => re2.test(path80));
 }
-function isUrlCredentialAuthedPath(path79) {
-  return URL_CREDENTIAL_PARAMS.test(path79);
+function isUrlCredentialAuthedPath(path80) {
+  return URL_CREDENTIAL_PARAMS.test(path80);
 }
-function isApiDocsPath(path79) {
-  return API_DOCS_PATH.test(path79);
+function isApiDocsPath(path80) {
+  return API_DOCS_PATH.test(path80);
 }
 function isFrameworkRequestHandler(arg) {
   if (!arg)
@@ -112031,14 +112116,14 @@ var init_route_without_auth_middleware = __esm({
           return null;
         const firstArg = args.namedChildren[0];
         if (firstArg?.type === "string" || firstArg?.type === "template_string") {
-          const path79 = firstArg.text.replace(/^['"`]|['"`]$/g, "");
-          if (isPublicPath(path79))
+          const path80 = firstArg.text.replace(/^['"`]|['"`]$/g, "");
+          if (isPublicPath(path80))
             return null;
-          if (isUrlCredentialAuthedPath(path79))
+          if (isUrlCredentialAuthedPath(path80))
             return null;
-          if (isApiDocsPath(path79))
+          if (isApiDocsPath(path80))
             return null;
-          if (path79 === "*" || path79 === "(.*)" || path79 === "/*") {
+          if (path80 === "*" || path80 === "(.*)" || path80 === "/*") {
             if (isFrameworkRequestHandler(args.namedChildren[args.namedChildren.length - 1])) {
               return null;
             }
@@ -146609,8 +146694,8 @@ var require_windows = __commonJS({
   "node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/windows.js"(exports, module) {
     module.exports = isexe;
     isexe.sync = sync;
-    var fs68 = __require("fs");
-    function checkPathExt(path79, options) {
+    var fs70 = __require("fs");
+    function checkPathExt(path80, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -146621,25 +146706,25 @@ var require_windows = __commonJS({
       }
       for (var i = 0; i < pathext.length; i++) {
         var p2 = pathext[i].toLowerCase();
-        if (p2 && path79.substr(-p2.length).toLowerCase() === p2) {
+        if (p2 && path80.substr(-p2.length).toLowerCase() === p2) {
           return true;
         }
       }
       return false;
     }
-    function checkStat(stat, path79, options) {
+    function checkStat(stat, path80, options) {
       if (!stat.isSymbolicLink() && !stat.isFile()) {
         return false;
       }
-      return checkPathExt(path79, options);
+      return checkPathExt(path80, options);
     }
-    function isexe(path79, options, cb) {
-      fs68.stat(path79, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, path79, options));
+    function isexe(path80, options, cb) {
+      fs70.stat(path80, function(er, stat) {
+        cb(er, er ? false : checkStat(stat, path80, options));
       });
     }
-    function sync(path79, options) {
-      return checkStat(fs68.statSync(path79), path79, options);
+    function sync(path80, options) {
+      return checkStat(fs70.statSync(path80), path80, options);
     }
   }
 });
@@ -146649,14 +146734,14 @@ var require_mode = __commonJS({
   "node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/mode.js"(exports, module) {
     module.exports = isexe;
     isexe.sync = sync;
-    var fs68 = __require("fs");
-    function isexe(path79, options, cb) {
-      fs68.stat(path79, function(er, stat) {
+    var fs70 = __require("fs");
+    function isexe(path80, options, cb) {
+      fs70.stat(path80, function(er, stat) {
         cb(er, er ? false : checkStat(stat, options));
       });
     }
-    function sync(path79, options) {
-      return checkStat(fs68.statSync(path79), options);
+    function sync(path80, options) {
+      return checkStat(fs70.statSync(path80), options);
     }
     function checkStat(stat, options) {
       return stat.isFile() && checkMode(stat, options);
@@ -146680,7 +146765,7 @@ var require_mode = __commonJS({
 // node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js
 var require_isexe = __commonJS({
   "node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports, module) {
-    var fs68 = __require("fs");
+    var fs70 = __require("fs");
     var core2;
     if (process.platform === "win32" || global.TESTING_WINDOWS) {
       core2 = require_windows();
@@ -146689,7 +146774,7 @@ var require_isexe = __commonJS({
     }
     module.exports = isexe;
     isexe.sync = sync;
-    function isexe(path79, options, cb) {
+    function isexe(path80, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -146699,7 +146784,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve12, reject) {
-          isexe(path79, options || {}, function(er, is) {
+          isexe(path80, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -146708,7 +146793,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core2(path79, options || {}, function(er, is) {
+      core2(path80, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -146718,9 +146803,9 @@ var require_isexe = __commonJS({
         cb(er, is);
       });
     }
-    function sync(path79, options) {
+    function sync(path80, options) {
       try {
-        return core2.sync(path79, options || {});
+        return core2.sync(path80, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -146736,7 +146821,7 @@ var require_isexe = __commonJS({
 var require_which = __commonJS({
   "node_modules/.pnpm/which@2.0.2/node_modules/which/which.js"(exports, module) {
     var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path79 = __require("path");
+    var path80 = __require("path");
     var COLON = isWindows ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -146774,7 +146859,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve12(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path79.join(pathPart, cmd);
+        const pCmd = path80.join(pathPart, cmd);
         const p2 = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve12(subStep(p2, i, 0));
       });
@@ -146801,7 +146886,7 @@ var require_which = __commonJS({
       for (let i = 0; i < pathEnv.length; i++) {
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path79.join(pathPart, cmd);
+        const pCmd = path80.join(pathPart, cmd);
         const p2 = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j2 = 0; j2 < pathExt.length; j2++) {
           const cur = p2 + pathExt[j2];
@@ -146849,7 +146934,7 @@ var require_path_key = __commonJS({
 var require_resolveCommand = __commonJS({
   "node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports, module) {
     "use strict";
-    var path79 = __require("path");
+    var path80 = __require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -146867,7 +146952,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env[getPathKey({ env })],
-          pathExt: withoutPathExt ? path79.delimiter : void 0
+          pathExt: withoutPathExt ? path80.delimiter : void 0
         });
       } catch (e) {
       } finally {
@@ -146876,7 +146961,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path79.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path80.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -146930,8 +147015,8 @@ var require_shebang_command = __commonJS({
       if (!match4) {
         return null;
       }
-      const [path79, argument] = match4[0].replace(/#! ?/, "").split(" ");
-      const binary2 = path79.split("/").pop();
+      const [path80, argument] = match4[0].replace(/#! ?/, "").split(" ");
+      const binary2 = path80.split("/").pop();
       if (binary2 === "env") {
         return argument;
       }
@@ -146944,16 +147029,16 @@ var require_shebang_command = __commonJS({
 var require_readShebang = __commonJS({
   "node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js"(exports, module) {
     "use strict";
-    var fs68 = __require("fs");
+    var fs70 = __require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd;
       try {
-        fd = fs68.openSync(command, "r");
-        fs68.readSync(fd, buffer, 0, size, 0);
-        fs68.closeSync(fd);
+        fd = fs70.openSync(command, "r");
+        fs70.readSync(fd, buffer, 0, size, 0);
+        fs70.closeSync(fd);
       } catch (e) {
       }
       return shebangCommand(buffer.toString());
@@ -146966,7 +147051,7 @@ var require_readShebang = __commonJS({
 var require_parse = __commonJS({
   "node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports, module) {
     "use strict";
-    var path79 = __require("path");
+    var path80 = __require("path");
     var resolveCommand = require_resolveCommand();
     var escape2 = require_escape();
     var readShebang = require_readShebang();
@@ -146991,7 +147076,7 @@ var require_parse = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path79.normalize(parsed.command);
+        parsed.command = path80.normalize(parsed.command);
         parsed.command = escape2.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape2.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -147357,8 +147442,8 @@ var require_package = __commonJS({
 // node_modules/.pnpm/dotenv@16.6.1/node_modules/dotenv/lib/main.js
 var require_main = __commonJS({
   "node_modules/.pnpm/dotenv@16.6.1/node_modules/dotenv/lib/main.js"(exports, module) {
-    var fs68 = __require("fs");
-    var path79 = __require("path");
+    var fs70 = __require("fs");
+    var path80 = __require("path");
     var os15 = __require("os");
     var crypto6 = __require("crypto");
     var packageJson = require_package();
@@ -147466,7 +147551,7 @@ var require_main = __commonJS({
       if (options && options.path && options.path.length > 0) {
         if (Array.isArray(options.path)) {
           for (const filepath of options.path) {
-            if (fs68.existsSync(filepath)) {
+            if (fs70.existsSync(filepath)) {
               possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
             }
           }
@@ -147474,15 +147559,15 @@ var require_main = __commonJS({
           possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
         }
       } else {
-        possibleVaultPath = path79.resolve(process.cwd(), ".env.vault");
+        possibleVaultPath = path80.resolve(process.cwd(), ".env.vault");
       }
-      if (fs68.existsSync(possibleVaultPath)) {
+      if (fs70.existsSync(possibleVaultPath)) {
         return possibleVaultPath;
       }
       return null;
     }
     function _resolveHome(envPath) {
-      return envPath[0] === "~" ? path79.join(os15.homedir(), envPath.slice(1)) : envPath;
+      return envPath[0] === "~" ? path80.join(os15.homedir(), envPath.slice(1)) : envPath;
     }
     function _configVault(options) {
       const debug2 = Boolean(options && options.debug);
@@ -147499,7 +147584,7 @@ var require_main = __commonJS({
       return { parsed };
     }
     function configDotenv(options) {
-      const dotenvPath = path79.resolve(process.cwd(), ".env");
+      const dotenvPath = path80.resolve(process.cwd(), ".env");
       let encoding = "utf8";
       const debug2 = Boolean(options && options.debug);
       const quiet = options && "quiet" in options ? options.quiet : true;
@@ -147523,13 +147608,13 @@ var require_main = __commonJS({
       }
       let lastError;
       const parsedAll = {};
-      for (const path80 of optionPaths) {
+      for (const path81 of optionPaths) {
         try {
-          const parsed = DotenvModule.parse(fs68.readFileSync(path80, { encoding }));
+          const parsed = DotenvModule.parse(fs70.readFileSync(path81, { encoding }));
           DotenvModule.populate(parsedAll, parsed, options);
         } catch (e) {
           if (debug2) {
-            _debug(`Failed to load ${path80} ${e.message}`);
+            _debug(`Failed to load ${path81} ${e.message}`);
           }
           lastError = e;
         }
@@ -147544,7 +147629,7 @@ var require_main = __commonJS({
         const shortPaths = [];
         for (const filePath of optionPaths) {
           try {
-            const relative2 = path79.relative(process.cwd(), filePath);
+            const relative2 = path80.relative(process.cwd(), filePath);
             shortPaths.push(relative2);
           } catch (e) {
             if (debug2) {
@@ -148403,8 +148488,8 @@ var init_cli_provider = __esm({
         this._repoId = repoId;
       }
       /** Set target repo path — used as cwd when spawning CLI so Read tool accesses the right files. */
-      setRepoPath(path79) {
-        this._repoPath = path79;
+      setRepoPath(path80) {
+        this._repoPath = path80;
       }
       flushUsage() {
         if (this._usageRecords.length === 0)
@@ -160505,11 +160590,11 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup(path79) {
-      if (!path79 || typeof path79 !== "string") {
+    function lookup(path80) {
+      if (!path80 || typeof path80 !== "string") {
         return false;
       }
-      var extension2 = extname("x." + path79).toLowerCase().substr(1);
+      var extension2 = extname("x." + path80).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -161614,11 +161699,11 @@ var require_form_data = __commonJS({
     "use strict";
     var CombinedStream = require_combined_stream();
     var util2 = __require("util");
-    var path79 = __require("path");
+    var path80 = __require("path");
     var http = __require("http");
     var https = __require("https");
     var parseUrl = __require("url").parse;
-    var fs68 = __require("fs");
+    var fs70 = __require("fs");
     var Stream = __require("stream").Stream;
     var crypto6 = __require("crypto");
     var mime = require_mime_types();
@@ -161685,7 +161770,7 @@ var require_form_data = __commonJS({
         if (value.end != void 0 && value.end != Infinity && value.start != void 0) {
           callback(null, value.end + 1 - (value.start ? value.start : 0));
         } else {
-          fs68.stat(value.path, function(err, stat) {
+          fs70.stat(value.path, function(err, stat) {
             if (err) {
               callback(err);
               return;
@@ -161742,11 +161827,11 @@ var require_form_data = __commonJS({
     FormData2.prototype._getContentDisposition = function(value, options) {
       var filename;
       if (typeof options.filepath === "string") {
-        filename = path79.normalize(options.filepath).replace(/\\/g, "/");
+        filename = path80.normalize(options.filepath).replace(/\\/g, "/");
       } else if (options.filename || value && (value.name || value.path)) {
-        filename = path79.basename(options.filename || value && (value.name || value.path));
+        filename = path80.basename(options.filename || value && (value.name || value.path));
       } else if (value && value.readable && hasOwn(value, "httpVersion")) {
-        filename = path79.basename(value.client._httpMessage.path || "");
+        filename = path80.basename(value.client._httpMessage.path || "");
       }
       if (filename) {
         return 'filename="' + filename + '"';
@@ -162303,8 +162388,8 @@ var require_node2 = __commonJS({
           }
           break;
         case "FILE":
-          var fs68 = __require("fs");
-          stream2 = new fs68.SyncWriteStream(fd2, { autoClose: false });
+          var fs70 = __require("fs");
+          stream2 = new fs70.SyncWriteStream(fd2, { autoClose: false });
           stream2._type = "fs";
           break;
         case "PIPE":
@@ -163400,9 +163485,9 @@ var require_axios = __commonJS({
     function removeBrackets(key4) {
       return utils$1.endsWith(key4, "[]") ? key4.slice(0, -2) : key4;
     }
-    function renderKey(path79, key4, dots) {
-      if (!path79) return key4;
-      return path79.concat(key4).map(function each(token, i) {
+    function renderKey(path80, key4, dots) {
+      if (!path80) return key4;
+      return path80.concat(key4).map(function each(token, i) {
         token = removeBrackets(token);
         return !dots && i ? "[" + token + "]" : token;
       }).join(dots ? "." : "");
@@ -163450,13 +163535,13 @@ var require_axios = __commonJS({
         }
         return value;
       }
-      function defaultVisitor(value, key4, path79) {
+      function defaultVisitor(value, key4, path80) {
         let arr = value;
         if (utils$1.isReactNative(formData) && utils$1.isReactNativeBlob(value)) {
-          formData.append(renderKey(path79, key4, dots), convertValue(value));
+          formData.append(renderKey(path80, key4, dots), convertValue(value));
           return false;
         }
-        if (value && !path79 && typeof value === "object") {
+        if (value && !path80 && typeof value === "object") {
           if (utils$1.endsWith(key4, "{}")) {
             key4 = metaTokens ? key4 : key4.slice(0, -2);
             value = JSON.stringify(value);
@@ -163475,7 +163560,7 @@ var require_axios = __commonJS({
         if (isVisitable(value)) {
           return true;
         }
-        formData.append(renderKey(path79, key4, dots), convertValue(value));
+        formData.append(renderKey(path80, key4, dots), convertValue(value));
         return false;
       }
       const stack2 = [];
@@ -163484,16 +163569,16 @@ var require_axios = __commonJS({
         convertValue,
         isVisitable
       });
-      function build8(value, path79) {
+      function build8(value, path80) {
         if (utils$1.isUndefined(value)) return;
         if (stack2.indexOf(value) !== -1) {
-          throw Error("Circular reference detected in " + path79.join("."));
+          throw Error("Circular reference detected in " + path80.join("."));
         }
         stack2.push(value);
         utils$1.forEach(value, function each(el, key4) {
-          const result = !(utils$1.isUndefined(el) || el === null) && visitor.call(formData, el, utils$1.isString(key4) ? key4.trim() : key4, path79, exposedHelpers);
+          const result = !(utils$1.isUndefined(el) || el === null) && visitor.call(formData, el, utils$1.isString(key4) ? key4.trim() : key4, path80, exposedHelpers);
           if (result === true) {
-            build8(el, path79 ? path79.concat(key4) : [key4]);
+            build8(el, path80 ? path80.concat(key4) : [key4]);
           }
         });
         stack2.pop();
@@ -163682,7 +163767,7 @@ var require_axios = __commonJS({
     };
     function toURLEncodedForm(data, options) {
       return toFormData(data, new platform.classes.URLSearchParams(), {
-        visitor: function(value, key4, path79, helpers) {
+        visitor: function(value, key4, path80, helpers) {
           if (platform.isNode && utils$1.isBuffer(value)) {
             this.append(key4, value.toString("base64"));
             return false;
@@ -163710,11 +163795,11 @@ var require_axios = __commonJS({
       return obj;
     }
     function formDataToJSON(formData) {
-      function buildPath(path79, value, target, index) {
-        let name = path79[index++];
+      function buildPath(path80, value, target, index) {
+        let name = path80[index++];
         if (name === "__proto__") return true;
         const isNumericKey = Number.isFinite(+name);
-        const isLast = index >= path79.length;
+        const isLast = index >= path80.length;
         name = !name && utils$1.isArray(target) ? target.length : name;
         if (isLast) {
           if (utils$1.hasOwnProp(target, name)) {
@@ -163727,7 +163812,7 @@ var require_axios = __commonJS({
         if (!target[name] || !utils$1.isObject(target[name])) {
           target[name] = [];
         }
-        const result = buildPath(path79, value, target[name], index);
+        const result = buildPath(path80, value, target[name], index);
         if (result && utils$1.isArray(target[name])) {
           target[name] = arrayToObject(target[name]);
         }
@@ -165045,9 +165130,9 @@ var require_axios = __commonJS({
           auth = urlUsername + ":" + urlPassword;
         }
         auth && headers.delete("authorization");
-        let path79;
+        let path80;
         try {
-          path79 = buildURL(parsed.pathname + parsed.search, config2.params, config2.paramsSerializer).replace(/^\?/, "");
+          path80 = buildURL(parsed.pathname + parsed.search, config2.params, config2.paramsSerializer).replace(/^\?/, "");
         } catch (err) {
           const customErr = new Error(err.message);
           customErr.config = config2;
@@ -165057,7 +165142,7 @@ var require_axios = __commonJS({
         }
         headers.set("Accept-Encoding", "gzip, compress, deflate" + (isBrotliSupported ? ", br" : ""), false);
         const options = {
-          path: path79,
+          path: path80,
           method,
           headers: headers.toJSON(),
           agents: {
@@ -165263,14 +165348,14 @@ var require_axios = __commonJS({
     var cookies = platform.hasStandardBrowserEnv ? (
       // Standard browser envs support document.cookie
       {
-        write(name, value, expires, path79, domain, secure, sameSite) {
+        write(name, value, expires, path80, domain, secure, sameSite) {
           if (typeof document === "undefined") return;
           const cookie = [`${name}=${encodeURIComponent(value)}`];
           if (utils$1.isNumber(expires)) {
             cookie.push(`expires=${new Date(expires).toUTCString()}`);
           }
-          if (utils$1.isString(path79)) {
-            cookie.push(`path=${path79}`);
+          if (utils$1.isString(path80)) {
+            cookie.push(`path=${path80}`);
           }
           if (utils$1.isString(domain)) {
             cookie.push(`domain=${domain}`);
@@ -166791,8 +166876,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? dirname10(proc
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path79) {
-  return path79.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path80) {
+  return path80.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 async function addSourceContext(frames) {
   const filesToLines = {};
@@ -166837,9 +166922,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path79, ranges, output) {
+function getContextLinesFromFile(path80, ranges, output) {
   return new Promise((resolve12) => {
-    const stream = createReadStream(path79);
+    const stream = createReadStream(path80);
     const lineReaded = createInterface2({
       input: stream
     });
@@ -166857,7 +166942,7 @@ function getContextLinesFromFile(path79, ranges, output) {
     let rangeStart = range2[0];
     let rangeEnd = range2[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path79, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path80, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -166934,8 +167019,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path79) {
-  return path79.startsWith("node:") || path79.endsWith(".min.js") || path79.endsWith(".min.cjs") || path79.endsWith(".min.mjs") || path79.startsWith("data:");
+function shouldSkipContextLinesForFile(path80) {
+  return path80.startsWith("node:") || path80.endsWith(".min.js") || path80.endsWith(".min.cjs") || path80.endsWith(".min.mjs") || path80.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (frame.lineno !== void 0 && frame.lineno > MAX_CONTEXTLINES_LINENO) {
@@ -170284,7 +170369,7 @@ function readToolVersion() {
   if (cachedVersion)
     return cachedVersion;
   if (true) {
-    cachedVersion = "0.7.0-next.2";
+    cachedVersion = "0.7.0-next.4";
     return cachedVersion;
   }
   try {
@@ -172690,13 +172775,13 @@ var init_pexprs_toFailure = __esm({
       return new Failure(this, "a Unicode [" + this.categoryOrProp + "] character", "description");
     };
     Alt.prototype.toFailure = function(grammar2) {
-      const fs68 = this.terms.map((t2) => t2.toFailure(grammar2));
-      const description = "(" + fs68.join(" or ") + ")";
+      const fs70 = this.terms.map((t2) => t2.toFailure(grammar2));
+      const description = "(" + fs70.join(" or ") + ")";
       return new Failure(this, description, "description");
     };
     Seq.prototype.toFailure = function(grammar2) {
-      const fs68 = this.factors.map((f2) => f2.toFailure(grammar2));
-      const description = "(" + fs68.join(" ") + ")";
+      const fs70 = this.factors.map((f2) => f2.toFailure(grammar2));
+      const description = "(" + fs70.join(" ") + ")";
       return new Failure(this, description, "description");
     };
     Iter.prototype.toFailure = function(grammar2) {
@@ -174533,9 +174618,9 @@ function buildGrammar2(match4, namespace, optOhmGrammarForTesting, options) {
         decl.withSuperGrammar(namespace[superGrammarName]);
       }
     },
-    Rule_define(n, fs68, d3, _2, b) {
+    Rule_define(n, fs70, d3, _2, b) {
       currentRuleName = n.visit();
-      currentRuleFormals = fs68.children.map((c2) => c2.visit())[0] || [];
+      currentRuleFormals = fs70.children.map((c2) => c2.visit())[0] || [];
       if (!decl.defaultStartRule && decl.ensureSuperGrammar() !== Grammar.ProtoBuiltInRules) {
         decl.withDefaultStartRule(currentRuleName);
       }
@@ -174544,9 +174629,9 @@ function buildGrammar2(match4, namespace, optOhmGrammarForTesting, options) {
       const source = this.source.trimmed();
       return decl.define(currentRuleName, currentRuleFormals, body, description, source);
     },
-    Rule_override(n, fs68, _2, b) {
+    Rule_override(n, fs70, _2, b) {
       currentRuleName = n.visit();
-      currentRuleFormals = fs68.children.map((c2) => c2.visit())[0] || [];
+      currentRuleFormals = fs70.children.map((c2) => c2.visit())[0] || [];
       const source = this.source.trimmed();
       decl.ensureSuperGrammarRuleForOverriding(currentRuleName, source);
       overriding = true;
@@ -174554,9 +174639,9 @@ function buildGrammar2(match4, namespace, optOhmGrammarForTesting, options) {
       overriding = false;
       return decl.override(currentRuleName, currentRuleFormals, body, null, source);
     },
-    Rule_extend(n, fs68, _2, b) {
+    Rule_extend(n, fs70, _2, b) {
       currentRuleName = n.visit();
-      currentRuleFormals = fs68.children.map((c2) => c2.visit())[0] || [];
+      currentRuleFormals = fs70.children.map((c2) => c2.visit())[0] || [];
       const body = b.visit();
       const source = this.source.trimmed();
       return decl.extend(currentRuleName, currentRuleFormals, body, null, source);
@@ -174583,8 +174668,8 @@ function buildGrammar2(match4, namespace, optOhmGrammarForTesting, options) {
         return builder.alt(...args).withSource(this.source);
       }
     },
-    Formals(opointy, fs68, cpointy) {
-      return fs68.visit();
+    Formals(opointy, fs70, cpointy) {
+      return fs70.visit();
     },
     Params(opointy, ps, cpointy) {
       return ps.visit();
@@ -174746,8 +174831,8 @@ function initPrototypeParser(grammar2) {
         formals: optFormals.children.map((c2) => c2.parse())[0] || []
       };
     },
-    Formals(oparen, fs68, cparen) {
-      return fs68.asIteration().children.map((c2) => c2.parse());
+    Formals(oparen, fs70, cparen) {
+      return fs70.asIteration().children.map((c2) => c2.parse());
     },
     name(first2, rest) {
       return this.sourceString;
@@ -178068,8 +178153,8 @@ function parseAndResolve(files) {
   const parsed = files.map((f2) => parseOne(f2.path, f2.source));
   return resolve10(parsed);
 }
-function parseTcFile(path79, source) {
-  return parseOne(path79, source);
+function parseTcFile(path80, source) {
+  return parseOne(path80, source);
 }
 var LineMap, OP_VALUES;
 var init_parser_ohm = __esm({
@@ -179458,13 +179543,13 @@ function extractStarletteRoutesFromFile(filePath, source, tree) {
     const identities = starletteIdentitiesForPath(rawPath);
     const line = node2.startPosition.row + 1;
     for (const method of methods) {
-      for (const path79 of identities) {
+      for (const path80 of identities) {
         out.push({
-          identity: `${method} ${path79}`,
+          identity: `${method} ${path80}`,
           contract: {
             protocol: "http",
             method,
-            path: path79,
+            path: path80,
             responses: [],
             tags: []
           },
@@ -179641,14 +179726,14 @@ function parseRouteDecorator(dec, source, stringVars) {
   const args = call.childForFieldName("arguments");
   if (!args)
     return null;
-  let path79 = null;
+  let path80 = null;
   let successStatus = "200";
   for (let i = 0; i < args.namedChildCount; i++) {
     const a = args.namedChild(i);
     if (!a)
       continue;
-    if (path79 === null && a.type === "string")
-      path79 = pyStr(a, source);
+    if (path80 === null && a.type === "string")
+      path80 = pyStr(a, source);
     else if (a.type === "keyword_argument") {
       const name = a.childForFieldName("name");
       const value = a.childForFieldName("value");
@@ -179657,17 +179742,17 @@ function parseRouteDecorator(dec, source, stringVars) {
       }
     }
   }
-  if (path79 === null) {
+  if (path80 === null) {
     const firstArg = args.namedChild(0);
     if (firstArg?.type === "identifier") {
       const resolved = stringVars.get(source.slice(firstArg.startIndex, firstArg.endIndex));
       if (resolved !== void 0)
-        path79 = resolved;
+        path80 = resolved;
     }
   }
-  if (path79 === null)
+  if (path80 === null)
     return null;
-  return { method, path: path79, routerVar, successStatus };
+  return { method, path: path80, routerVar, successStatus };
 }
 function extractResponses2(body, source, successStatus) {
   const byStatus = /* @__PURE__ */ new Map();
@@ -179800,9 +179885,9 @@ function looksLikeModel(p2, source) {
   const text4 = source.slice(type2.startIndex, type2.endIndex);
   return /^[A-Z]/.test(text4);
 }
-function joinPath(prefix, path79) {
+function joinPath(prefix, path80) {
   const a = prefix.replace(/\/$/, "");
-  const b = path79.startsWith("/") ? path79 : `/${path79}`;
+  const b = path80.startsWith("/") ? path80 : `/${path80}`;
   return a + b || "/";
 }
 function callName(call, source) {
@@ -196095,8 +196180,8 @@ async function runRulesReset({ ruleKey }) {
 
 // tools/cli/src/commands/contracts.ts
 init_dist4();
-import fs65 from "node:fs";
-import path72 from "node:path";
+import fs67 from "node:fs";
+import path73 from "node:path";
 
 // packages/spec-consolidator/dist/types.js
 init_zod();
@@ -197486,12 +197571,12 @@ function prefilterDocs(docs, manualIncludes = []) {
     if (reason)
       reasons.set(doc.path, reason);
   }
-  for (const { path: path79, reason } of dedupeNearDuplicates(docs.filter((d3) => !manualSet.has(d3.path) && !reasons.has(d3.path)))) {
-    reasons.set(path79, reason);
+  for (const { path: path80, reason } of dedupeNearDuplicates(docs.filter((d3) => !manualSet.has(d3.path) && !reasons.has(d3.path)))) {
+    reasons.set(path80, reason);
   }
   return {
     toClassify: docs.filter((d3) => !reasons.has(d3.path)),
-    skipped: [...reasons].map(([path79, reason]) => ({ path: path79, reason }))
+    skipped: [...reasons].map(([path80, reason]) => ({ path: path80, reason }))
   };
 }
 async function planRelevanceWork(repoRoot5, docs, manualIncludes = []) {
@@ -198057,8 +198142,8 @@ function canonicalIdentity(_kind, identity) {
   let id = identity.trim().replace(/\s+/g, " ");
   const op = HTTP_METHOD.exec(id);
   if (op) {
-    const path79 = op[2].replace(/\/+$/, "").replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, "{$1}");
-    id = `${op[1].toUpperCase()} ${path79}`;
+    const path80 = op[2].replace(/\/+$/, "").replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, "{$1}");
+    id = `${op[1].toUpperCase()} ${path80}`;
   }
   return id;
 }
@@ -204900,6 +204985,7 @@ var HISTORY_FILE2 = "history.json";
 var RESULT_FILE = "result.json";
 var RECIPE_FILE = "recipe.json";
 var MANIFEST_FILE = "manifest.json";
+var DECISIONS_FILE = "decisions.json";
 function guardDir(repoRoot5) {
   return path54.join(repoRoot5, TRUECOURSE_DIR3, GUARD_DIR);
 }
@@ -204927,6 +205013,9 @@ function recipePath(repoRoot5) {
 function manifestPath2(repoRoot5) {
   return path54.join(scenariosDir(repoRoot5), MANIFEST_FILE);
 }
+function guardDecisionsPath(repoRoot5) {
+  return path54.join(scenariosDir(repoRoot5), DECISIONS_FILE);
+}
 function evidenceRunDir(repoRoot5, runId) {
   return path54.join(guardDir(repoRoot5), EVIDENCE_DIR, runId);
 }
@@ -205070,6 +205159,10 @@ ${err.message}`;
   });
 }
 
+// packages/guard-runner/dist/preflight.js
+import fs51 from "node:fs";
+import path57 from "node:path";
+
 // packages/guard-runner/dist/sandbox.js
 import fs50 from "node:fs";
 import os11 from "node:os";
@@ -205215,24 +205308,25 @@ function executeStep(opts) {
 // packages/guard-runner/dist/preflight.js
 var ENTRY_PROBE_ARGVS = [[], ["--help"]];
 var ENTRY_PREFLIGHT_TIMEOUT_MS = 2e4;
-var defaultEntryProbeExecutor = async (fullArgv, recipeEnv, timeoutMs) => {
-  const sandbox = createSandbox({ recipeEnv });
-  try {
-    return await executeStep({ argv: fullArgv, cwd: sandbox.cwd, env: sandbox.env, timeoutMs });
-  } finally {
-    sandbox.cleanup();
-  }
-};
+var defaultEntryProbeExecutor = (fullArgv, world, timeoutMs) => executeStep({ argv: fullArgv, cwd: world.cwd, env: world.env, timeoutMs });
 async function preflightEntry(opts) {
   const exec3 = opts.exec ?? defaultEntryProbeExecutor;
   const timeoutMs = opts.timeoutMs ?? ENTRY_PREFLIGHT_TIMEOUT_MS;
   const entry = opts.displayEntry.join(" ");
-  const probes = await Promise.all(ENTRY_PROBE_ARGVS.map(async (argv) => ({
-    argv: [...argv],
-    capture: await exec3([...opts.resolvedEntry, ...argv], opts.recipeEnv, timeoutMs)
-  })));
+  const sandbox = createSandbox({ recipeEnv: opts.recipeEnv });
+  const probes = [];
+  try {
+    for (const argv of ENTRY_PROBE_ARGVS) {
+      probes.push({
+        argv: [...argv],
+        capture: await exec3([...opts.resolvedEntry, ...argv], { cwd: sandbox.cwd, env: sandbox.env }, timeoutMs)
+      });
+    }
+  } finally {
+    sandbox.cleanup();
+  }
   const ok = entryStarts(probes);
-  return { ok, entry, stderr: ok ? "" : startupOutput(probes[0].capture, timeoutMs), probes };
+  return { ok, entry, stderr: ok ? "" : deadEntryOutput(opts, probes[0].capture, timeoutMs), probes };
 }
 function entryStarts(probes) {
   if (probes.some((p2) => startedCleanly(p2.capture)))
@@ -205253,6 +205347,15 @@ function failureShape(c2) {
     stderr: c2.stderr
   });
 }
+function deadEntryOutput(opts, bare, timeoutMs) {
+  const parts = [startupOutput(bare, timeoutMs)];
+  if (opts.repoRoot) {
+    const missing = missingEntryScript(opts.repoRoot, opts.displayEntry);
+    if (missing)
+      parts.push(formatMissingEntryScript(missing));
+  }
+  return parts.join("\n\n");
+}
 function startupOutput(c2, timeoutMs) {
   const parts = [];
   const primary = c2.stderr || c2.stdout;
@@ -205267,6 +205370,47 @@ function startupOutput(c2, timeoutMs) {
   }
   return parts.join("\n");
 }
+var MAX_SIBLINGS = 25;
+function missingEntryScript(repoRoot5, entry) {
+  const [command, ...rest] = entry;
+  const candidates = [];
+  if (command && isPathLike(command))
+    candidates.push(command);
+  for (const arg of rest) {
+    if (!arg.startsWith("-") && isPathLike(arg))
+      candidates.push(arg);
+  }
+  for (const arg of candidates) {
+    const resolved = path57.isAbsolute(arg) ? arg : path57.resolve(repoRoot5, arg);
+    if (fs51.existsSync(resolved))
+      continue;
+    const parent = path57.dirname(resolved);
+    const siblings = fs51.existsSync(parent) ? fs51.readdirSync(parent).sort() : null;
+    return {
+      arg,
+      resolved,
+      parentDir: path57.isAbsolute(arg) ? parent : path57.relative(repoRoot5, parent) || ".",
+      siblings
+    };
+  }
+  return null;
+}
+function formatMissingEntryScript(m) {
+  const head = `entry file not found: ${m.arg} (resolved: ${m.resolved})`;
+  if (m.siblings === null)
+    return `${head}
+its directory ${m.parentDir}/ does not exist`;
+  if (m.siblings.length === 0)
+    return `${head}
+${m.parentDir}/ is empty`;
+  const shown = m.siblings.slice(0, MAX_SIBLINGS).join(", ");
+  const more = m.siblings.length - MAX_SIBLINGS;
+  return `${head}
+${m.parentDir}/ contains: ${shown}${more > 0 ? ` \u2026 and ${more} more` : ""}`;
+}
+function isPathLike(arg) {
+  return arg.includes("/") || arg.includes(path57.sep) || arg.startsWith(".");
+}
 function entryPreflightHeadline(entry, buildCommand) {
   return `The recipe entry \`${entry}\` failed to start \u2014 it crashes before it runs, so every scenario would fail identically. Rebuild it with \`${buildCommand}\` (its build output is likely stale or incomplete), then retry.`;
 }
@@ -205276,8 +205420,8 @@ function formatEntryPreflightError(opts) {
 
 // packages/guard-runner/dist/capabilities/git.js
 import { spawnSync as spawnSync2 } from "node:child_process";
-import fs51 from "node:fs";
-import path57 from "node:path";
+import fs52 from "node:fs";
+import path58 from "node:path";
 var GIT_IDENTITY = {
   GIT_AUTHOR_NAME: "TrueCourse Guard",
   GIT_AUTHOR_EMAIL: "guard@truecourse.dev",
@@ -205309,11 +205453,11 @@ function materializeGit(declaration, ctx) {
 }
 function requireFiles(files, ctx) {
   for (const rel of files) {
-    const target = path57.resolve(ctx.cwd, rel);
-    if (target !== ctx.cwd && !target.startsWith(ctx.cwd + path57.sep)) {
+    const target = path58.resolve(ctx.cwd, rel);
+    if (target !== ctx.cwd && !target.startsWith(ctx.cwd + path58.sep)) {
       throw new CapabilityError("git", `path escapes the sandbox: ${rel}`);
     }
-    if (!fs51.existsSync(target)) {
+    if (!fs52.existsSync(target)) {
       throw new CapabilityError("git", `declared file does not exist in the sandbox: ${rel} (seed it via setup.files or an earlier commit)`);
     }
   }
@@ -205401,8 +205545,8 @@ function normalize7(text4, normalizers, ctx) {
 }
 
 // packages/guard-runner/dist/expect.js
-import fs52 from "node:fs";
-import path58 from "node:path";
+import fs53 from "node:fs";
+import path59 from "node:path";
 function evaluateExpect(params) {
   const { expect } = params;
   if (expect.exit !== void 0 && params.exitCode !== expect.exit) {
@@ -205473,8 +205617,8 @@ function matchStream(subject, matcher, value) {
   };
 }
 function matchFile3(rel, matcher, sandboxCwd, normalizeText) {
-  const target = path58.resolve(sandboxCwd, rel);
-  const exists2 = fs52.existsSync(target) && fs52.statSync(target).isFile();
+  const target = path59.resolve(sandboxCwd, rel);
+  const exists2 = fs53.existsSync(target) && fs53.statSync(target).isFile();
   if (matcher.exists === true || matcher.absent === false) {
     if (!exists2)
       return fileMiss(rel, "to exist", "missing");
@@ -205486,7 +205630,7 @@ function matchFile3(rel, matcher, sandboxCwd, normalizeText) {
   if (matcher.equals !== void 0 || matcher.contains !== void 0) {
     if (!exists2)
       return fileMiss(rel, "to exist for a content check", "missing");
-    const content = normalizeText(fs52.readFileSync(target, "utf-8"));
+    const content = normalizeText(fs53.readFileSync(target, "utf-8"));
     if (matcher.equals !== void 0 && content !== matcher.equals) {
       return {
         subject: "files",
@@ -205516,11 +205660,11 @@ function fileMiss(rel, expectedPhrase, actualState) {
 }
 
 // packages/guard-runner/dist/evidence.js
-import fs53 from "node:fs";
-import path59 from "node:path";
+import fs54 from "node:fs";
+import path60 from "node:path";
 function writeEvidence(params) {
   const dir = evidenceScenarioDir(params.repoRoot, params.runId, params.scenarioId);
-  fs53.mkdirSync(dir, { recursive: true });
+  fs54.mkdirSync(dir, { recursive: true });
   const failing = params.steps.find((s) => s.index === params.failingStep);
   const invocation = {
     scenarioId: params.scenarioId,
@@ -205599,11 +205743,19 @@ function indent(text4) {
   return body.split("\n").map((l) => `     ${l}`).join("\n");
 }
 function writeFile(dir, name, content) {
-  fs53.writeFileSync(path59.join(dir, name), content);
+  fs54.writeFileSync(path60.join(dir, name), content);
 }
 
 // packages/guard-runner/dist/run-scenario.js
 var ENV_PINS = DETERMINISM_PINS;
+var SANDBOX_SETUP_EXPECTED = "sandbox setup to succeed";
+var CAPABILITY_SETUP_EXPECTED = "setup capabilities to materialize";
+function isSetupDefectResult(result) {
+  if (result.outcome !== "error")
+    return false;
+  const expected = result.failure?.expected;
+  return expected === SANDBOX_SETUP_EXPECTED || expected === CAPABILITY_SETUP_EXPECTED;
+}
 async function runScenario(scenario, ctx) {
   const start = Date.now();
   const base2 = {
@@ -205624,7 +205776,7 @@ async function runScenario(scenario, ctx) {
       ...base2,
       outcome: "error",
       durationMs: Date.now() - start,
-      failure: { step: 1, expected: "sandbox setup to succeed", actual: message }
+      failure: { step: 1, expected: SANDBOX_SETUP_EXPECTED, actual: message }
     };
   }
   const normCtx = { sandboxRoot: sandbox.root, repoRoot: ctx.repoRoot };
@@ -205639,7 +205791,7 @@ async function runScenario(scenario, ctx) {
         ...base2,
         outcome: "error",
         durationMs: Date.now() - start,
-        failure: { step: 1, expected: "setup capabilities to materialize", actual: message }
+        failure: { step: 1, expected: CAPABILITY_SETUP_EXPECTED, actual: message }
       };
     }
     for (let i = 0; i < scenario.steps.length; i++) {
@@ -205748,15 +205900,15 @@ function toRecord(index, argv, stdin, repeat3, iterationsRun, capture, normText)
 
 // packages/guard-runner/dist/doc-index.js
 init_zod();
-import fs54 from "node:fs";
-import path61 from "node:path";
+import fs55 from "node:fs";
+import path62 from "node:path";
 
 // packages/guard-runner/dist/section-index.js
-import path60 from "node:path";
+import path61 from "node:path";
 import crypto4 from "node:crypto";
 var MARKDOWN_EXTENSIONS = /* @__PURE__ */ new Set([".md", ".markdown", ".mdown", ".mkd"]);
 function isMarkdownDoc(docPath) {
-  return MARKDOWN_EXTENSIONS.has(path60.extname(docPath).toLowerCase());
+  return MARKDOWN_EXTENSIONS.has(path61.extname(docPath).toLowerCase());
 }
 function slugifyHeading(text4) {
   return text4.replace(/[`*_~]/g, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
@@ -205809,7 +205961,7 @@ function sectionEndLine(headings, index, totalLines) {
 }
 function deriveSections(doc, content) {
   if (!isMarkdownDoc(doc)) {
-    const base2 = path60.basename(doc);
+    const base2 = path61.basename(doc);
     return [
       {
         anchor: slugifyHeading(base2) || "document",
@@ -205910,11 +206062,11 @@ function resolveBinding(index, anchor, fingerprint2) {
 // packages/guard-runner/dist/doc-index.js
 var CorpusShape = external_exports.object({ docs: external_exports.array(external_exports.object({ ref: external_exports.string() }).passthrough()).optional() }).passthrough();
 function corpusKeptDocs(repoRoot5) {
-  const file = path61.join(repoRoot5, ".truecourse", "specs", "corpus.json");
-  if (!fs54.existsSync(file))
+  const file = path62.join(repoRoot5, ".truecourse", "specs", "corpus.json");
+  if (!fs55.existsSync(file))
     return [];
   try {
-    const parsed = CorpusShape.safeParse(JSON.parse(fs54.readFileSync(file, "utf-8")));
+    const parsed = CorpusShape.safeParse(JSON.parse(fs55.readFileSync(file, "utf-8")));
     if (!parsed.success)
       return [];
     return (parsed.data.docs ?? []).map((d3) => d3.ref);
@@ -205929,25 +206081,25 @@ function indexRepoDocs(repoRoot5, boundDocs) {
   const indexes = /* @__PURE__ */ new Map();
   const missing = /* @__PURE__ */ new Set();
   for (const doc of wanted) {
-    const abs = path61.resolve(repoRoot5, doc);
-    if (!fs54.existsSync(abs) || !fs54.statSync(abs).isFile()) {
+    const abs = path62.resolve(repoRoot5, doc);
+    if (!fs55.existsSync(abs) || !fs55.statSync(abs).isFile()) {
       missing.add(doc);
       continue;
     }
-    indexes.set(doc, buildDocSectionIndex(doc, fs54.readFileSync(abs, "utf-8")));
+    indexes.set(doc, buildDocSectionIndex(doc, fs55.readFileSync(abs, "utf-8")));
   }
   return { indexes, missing };
 }
 
 // packages/guard-runner/dist/manifest.js
 init_dist5();
-import fs55 from "node:fs";
+import fs56 from "node:fs";
 function readManifest2(repoRoot5) {
   const file = manifestPath2(repoRoot5);
-  if (!fs55.existsSync(file))
+  if (!fs56.existsSync(file))
     return null;
   try {
-    const parsed = GuardManifestSchema.safeParse(JSON.parse(fs55.readFileSync(file, "utf-8")));
+    const parsed = GuardManifestSchema.safeParse(JSON.parse(fs56.readFileSync(file, "utf-8")));
     return parsed.success ? parsed.data : null;
   } catch {
     return null;
@@ -205996,7 +206148,8 @@ async function runGuard(opts) {
     const preflight = await preflightEntry({
       resolvedEntry,
       displayEntry: loaded.recipe.entry,
-      recipeEnv: loaded.recipe.env
+      recipeEnv: loaded.recipe.env,
+      repoRoot: repoRoot5
     });
     if (!preflight.ok) {
       return { status: "entry-preflight-failed", preflight, buildCommand: loaded.recipe.build, loadErrors };
@@ -206118,13 +206271,28 @@ async function mapWithConcurrency(items, limit, fn) {
   return results;
 }
 
+// packages/guard-runner/dist/decisions.js
+init_dist5();
+import fs57 from "node:fs";
+function readGuardDecisions(repoRoot5) {
+  const file = guardDecisionsPath(repoRoot5);
+  if (!fs57.existsSync(file))
+    return EMPTY_GUARD_DECISIONS;
+  try {
+    const parsed = GuardDecisionsSchema.safeParse(JSON.parse(fs57.readFileSync(file, "utf-8")));
+    return parsed.success ? parsed.data : EMPTY_GUARD_DECISIONS;
+  } catch {
+    return EMPTY_GUARD_DECISIONS;
+  }
+}
+
 // packages/guard-generator/dist/generate.js
 init_dist5();
 
 // packages/guard-generator/dist/section-plan.js
 init_zod();
-import fs56 from "node:fs";
-import path62 from "node:path";
+import fs58 from "node:fs";
+import path63 from "node:path";
 import { createHash as createHash15 } from "node:crypto";
 init_dist5();
 
@@ -206439,12 +206607,12 @@ var CorpusShape2 = external_exports.object({
   docs: external_exports.array(external_exports.object({ ref: external_exports.string(), areaTags: external_exports.array(external_exports.string()).optional() }).passthrough()).optional()
 }).passthrough();
 function readCorpusAreaTags(repoRoot5) {
-  const file = path62.join(repoRoot5, ".truecourse", "specs", "corpus.json");
+  const file = path63.join(repoRoot5, ".truecourse", "specs", "corpus.json");
   const map2 = /* @__PURE__ */ new Map();
-  if (!fs56.existsSync(file))
+  if (!fs58.existsSync(file))
     return map2;
   try {
-    const parsed = CorpusShape2.safeParse(JSON.parse(fs56.readFileSync(file, "utf-8")));
+    const parsed = CorpusShape2.safeParse(JSON.parse(fs58.readFileSync(file, "utf-8")));
     if (!parsed.success)
       return map2;
     for (const d3 of parsed.data.docs ?? [])
@@ -206463,17 +206631,17 @@ function generationInputsHash(fingerprint2, recipeFingerprint) {
   ].join("\0")).digest("hex");
 }
 function hasGuardUniverse(repoRoot5) {
-  return fs56.existsSync(path62.join(repoRoot5, ".truecourse", "specs", "corpus.json"));
+  return fs58.existsSync(path63.join(repoRoot5, ".truecourse", "specs", "corpus.json"));
 }
 function planGuardWork(repoRoot5, recipeFingerprint) {
   const recipeFp = recipeFingerprint ?? computeRecipeFingerprint(repoRoot5);
-  const recipeMissing = !fs56.existsSync(recipePath(repoRoot5));
+  const recipeMissing = !fs58.existsSync(recipePath(repoRoot5));
   const hasUniverse = hasGuardUniverse(repoRoot5);
   const { indexes } = indexRepoDocs(repoRoot5, []);
   const areaTags = readCorpusAreaTags(repoRoot5);
   const sections = [];
   for (const [doc, index] of indexes) {
-    const texts = extractSectionTexts(doc, fs56.readFileSync(path62.resolve(repoRoot5, doc), "utf-8"));
+    const texts = extractSectionTexts(doc, fs58.readFileSync(path63.resolve(repoRoot5, doc), "utf-8"));
     for (const s of index.sections) {
       const t2 = texts.get(s.anchor);
       sections.push({
@@ -206518,7 +206686,7 @@ function collectWorkDocs(repoRoot5, plan) {
   }
   return [...byDoc].map(([doc, sections]) => ({
     doc,
-    content: fs56.readFileSync(path62.resolve(repoRoot5, doc), "utf-8"),
+    content: fs58.readFileSync(path63.resolve(repoRoot5, doc), "utf-8"),
     sections
   }));
 }
@@ -206766,7 +206934,7 @@ function snap(raw, sections) {
 
 // packages/guard-generator/dist/ground.js
 init_zod();
-import path63 from "node:path";
+import path64 from "node:path";
 import { createHash as createHash17 } from "node:crypto";
 var GROUND_CACHE_NAME = "guard/ground";
 var PROBE_TIMEOUT_MS = 2e4;
@@ -206822,7 +206990,7 @@ function toProbeArgv(fragment, programNames) {
   const tokens = fragment.trim().split(/\s+/).filter(Boolean);
   if (tokens.length === 0)
     return null;
-  if (programNames.has(tokens[0]) || programNames.has(path63.basename(tokens[0])))
+  if (programNames.has(tokens[0]) || programNames.has(path64.basename(tokens[0])))
     tokens.shift();
   if (tokens.length === 0)
     return [];
@@ -206843,7 +207011,7 @@ function programNamesOf(entry) {
   return names;
 }
 function addName(set2, arg) {
-  const base2 = path63.basename(arg);
+  const base2 = path64.basename(arg);
   if (base2)
     set2.add(base2);
   const stem = base2.replace(/\.[^.]+$/, "");
@@ -206905,9 +207073,9 @@ function truncate3(text4) {
 }
 
 // packages/guard-generator/dist/recipe-discovery.js
-import fs57 from "node:fs";
+import fs59 from "node:fs";
 import os13 from "node:os";
-import path64 from "node:path";
+import path65 from "node:path";
 import { createHash as createHash18 } from "node:crypto";
 var RECIPE_CACHE_NAME = "guard/recipe";
 var DISCOVERY_INPUTS = ["package.json", "pnpm-lock.yaml", "package-lock.json", "yarn.lock", "turbo.json"];
@@ -206944,6 +207112,14 @@ async function discoverRecipe(repoRoot5, runner) {
       proposal
     };
   }
+  const missing = missingEntryScript(repoRoot5, proposal.entry);
+  if (missing) {
+    return {
+      status: "verify-failed",
+      reason: `after \`${proposal.build}\`, ${formatMissingEntryScript(missing)}`,
+      proposal
+    };
+  }
   const probe = await probeEntry(repoRoot5, proposal.entry);
   if (!probe.ok)
     return { status: "verify-failed", reason: probe.reason, proposal };
@@ -206953,13 +207129,13 @@ async function discoverRecipe(repoRoot5, runner) {
     ...proposal.env ? { env: proposal.env } : {}
   };
   const target = recipePath(repoRoot5);
-  fs57.mkdirSync(path64.dirname(target), { recursive: true });
-  fs57.writeFileSync(target, JSON.stringify(recipe, null, 2) + "\n");
+  fs59.mkdirSync(path65.dirname(target), { recursive: true });
+  fs59.writeFileSync(target, JSON.stringify(recipe, null, 2) + "\n");
   return {
     status: "discovered",
     recipe,
     fingerprint: computeRecipeFingerprint(repoRoot5),
-    wrotePath: path64.relative(repoRoot5, target)
+    wrotePath: path65.relative(repoRoot5, target)
   };
 }
 async function proposeRecipeWithReask(input, runner) {
@@ -206984,14 +207160,14 @@ async function proposeRecipeWithReask(input, runner) {
   return { error: `recipe proposal invalid after re-ask: ${flattenZodError(reParsed.error)}` };
 }
 function readDiscoveryInputs(repoRoot5) {
-  const pkgPath = path64.join(repoRoot5, "package.json");
-  const packageJson = fs57.existsSync(pkgPath) ? fs57.readFileSync(pkgPath, "utf-8") : "(no package.json)";
-  const presentInputs = DISCOVERY_INPUTS.filter((f2) => fs57.existsSync(path64.join(repoRoot5, f2)));
+  const pkgPath = path65.join(repoRoot5, "package.json");
+  const packageJson = fs59.existsSync(pkgPath) ? fs59.readFileSync(pkgPath, "utf-8") : "(no package.json)";
+  const presentInputs = DISCOVERY_INPUTS.filter((f2) => fs59.existsSync(path65.join(repoRoot5, f2)));
   return { packageJson, presentInputs };
 }
 async function probeEntry(repoRoot5, entry) {
   const resolved = resolveEntry(repoRoot5, entry);
-  const cwd = fs57.mkdtempSync(path64.join(os13.tmpdir(), "tc-guard-probe-"));
+  const cwd = fs59.mkdtempSync(path65.join(os13.tmpdir(), "tc-guard-probe-"));
   try {
     for (const args of [["--help"], []]) {
       const capture = await executeStep({
@@ -207008,7 +207184,7 @@ async function probeEntry(repoRoot5, entry) {
       reason: `entrypoint ${JSON.stringify(entry)} did not answer to \`--help\` or a bare invocation`
     };
   } finally {
-    fs57.rmSync(cwd, { recursive: true, force: true });
+    fs59.rmSync(cwd, { recursive: true, force: true });
   }
 }
 
@@ -207055,8 +207231,8 @@ async function birthValidate(repoRoot5, candidates, opts = {}) {
 }
 
 // packages/guard-generator/dist/serialize.js
-import fs58 from "node:fs";
-import path65 from "node:path";
+import fs60 from "node:fs";
+import path66 from "node:path";
 init_dist5();
 function anchorLeaf(anchor) {
   const segs = anchor.split("/").filter(Boolean);
@@ -207075,7 +207251,7 @@ function assignScenarioId(anchor, used) {
 function areaOrDocSlug(section) {
   if (section.areaTags.length > 0)
     return slugifyHeading(section.areaTags[0]) || "area";
-  const base2 = path65.basename(section.doc).replace(/\.[^.]+$/, "");
+  const base2 = path66.basename(section.doc).replace(/\.[^.]+$/, "");
   return slugifyHeading(base2) || "doc";
 }
 function buildScenario(section, raw, id) {
@@ -207098,15 +207274,15 @@ function scenarioFileIndex(repoRoot5) {
   const root2 = scenariosDir(repoRoot5);
   const map2 = /* @__PURE__ */ new Map();
   const walk20 = (dir) => {
-    if (!fs58.existsSync(dir))
+    if (!fs60.existsSync(dir))
       return;
-    for (const entry of fs58.readdirSync(dir, { withFileTypes: true })) {
-      const full = path65.join(dir, entry.name);
+    for (const entry of fs60.readdirSync(dir, { withFileTypes: true })) {
+      const full = path66.join(dir, entry.name);
       if (entry.isDirectory())
         walk20(full);
       else if (entry.isFile() && /\.ya?ml$/i.test(entry.name)) {
         try {
-          const doc = jsYaml.load(fs58.readFileSync(full, "utf-8"));
+          const doc = jsYaml.load(fs60.readFileSync(full, "utf-8"));
           if (doc && typeof doc.id === "string")
             map2.set(doc.id, full);
         } catch {
@@ -207120,19 +207296,22 @@ function scenarioFileIndex(repoRoot5) {
 function existingScenarioIds(repoRoot5) {
   return new Set(loadScenarios(repoRoot5).scenarios.map((s) => s.id));
 }
+function serializeScenarioYaml(scenario) {
+  return jsYaml.dump(scenario, { lineWidth: -1, noRefs: true });
+}
 function writeScenarioFile(repoRoot5, slug2, scenario) {
-  const dir = path65.join(scenariosDir(repoRoot5), slug2);
-  fs58.mkdirSync(dir, { recursive: true });
-  const file = path65.join(dir, `${scenario.id}.yaml`);
-  fs58.writeFileSync(file, jsYaml.dump(scenario, { lineWidth: -1, noRefs: true }));
-  return path65.relative(repoRoot5, file);
+  const dir = path66.join(scenariosDir(repoRoot5), slug2);
+  fs60.mkdirSync(dir, { recursive: true });
+  const file = path66.join(dir, `${scenario.id}.yaml`);
+  fs60.writeFileSync(file, serializeScenarioYaml(scenario));
+  return path66.relative(repoRoot5, file);
 }
 function deleteScenarioFiles(repoRoot5, ids) {
   const index = scenarioFileIndex(repoRoot5);
   for (const id of ids) {
     const file = index.get(id);
-    if (file && fs58.existsSync(file))
-      fs58.rmSync(file);
+    if (file && fs60.existsSync(file))
+      fs60.rmSync(file);
   }
 }
 
@@ -207202,7 +207381,9 @@ async function generateGuards(options) {
       errors: [],
       extractionFailures: [],
       orphaned,
-      birthPassed: 0
+      birthPassed: 0,
+      heldSections: [],
+      orphanedDismissals: []
     };
   }
   const limit = pLimit(Math.max(1, options.concurrency ?? defaultConcurrency3()));
@@ -207217,6 +207398,10 @@ async function generateGuards(options) {
   const coverageGaps = [];
   const errors = [];
   const extractionFailures = [];
+  const decisions = readGuardDecisions(repoRoot5);
+  const dismissalByKey = new Map(decisions.dismissedClaims.map((d3) => [dismissedClaimKey(d3.doc, d3.anchor, d3.title), d3]));
+  const extractedClaimKeys = /* @__PURE__ */ new Set();
+  const extractedDocs = /* @__PURE__ */ new Set();
   const workDocs = collectWorkDocs(repoRoot5, plan);
   const workKeys = new Set(plan.work.map(key2));
   const workDocByPath = new Map(workDocs.map((d3) => [d3.doc, d3]));
@@ -207246,34 +207431,47 @@ async function generateGuards(options) {
         reason: `${result.failedViews} extraction view(s) failed \u2014 re-run to complete coverage for affected sections`
       });
     }
+    extractedDocs.add(doc.doc);
+    for (const c2 of result.data.claims) {
+      extractedClaimKeys.add(dismissedClaimKey(doc.doc, c2.sectionAnchor, c2.claim));
+    }
     const { claimsByAnchor, noteByAnchor } = groupExtraction(result.data);
     for (const s of doc.sections) {
       if (!workKeys.has(key2(s)))
         continue;
       const claims = claimsByAnchor.get(s.anchor) ?? [];
-      const cli = claims.filter((c2) => isRunnableDriver(c2.driver));
+      const cliAll = claims.filter((c2) => isRunnableDriver(c2.driver));
       const others = claims.filter((c2) => !isRunnableDriver(c2.driver));
       const note = noteByAnchor.get(s.anchor);
+      const cli = cliAll.filter((c2) => !dismissalByKey.has(dismissedClaimKey(s.doc, s.anchor, c2.claim)));
+      const dismissed = cliAll.filter((c2) => dismissalByKey.has(dismissedClaimKey(s.doc, s.anchor, c2.claim)));
+      for (const d3 of dismissed) {
+        const entry = dismissalByKey.get(dismissedClaimKey(s.doc, s.anchor, d3.claim));
+        coverageGaps.push({ doc: s.doc, anchor: s.anchor, kind: "dismissed", reason: dismissedReason(d3.claim, entry?.note) });
+      }
       for (const o of others) {
         coverageGaps.push({ doc: s.doc, anchor: s.anchor, kind: "awaiting-driver", driver: o.driver, reason: o.reason });
       }
       if (cli.length === 0 && others.length === 0) {
-        if (!result.complete && !note) {
-          extractFailedKeys.add(key2(s));
-          continue;
+        if (dismissed.length === 0) {
+          if (!result.complete && !note) {
+            extractFailedKeys.add(key2(s));
+            continue;
+          }
+          coverageGaps.push({
+            doc: s.doc,
+            anchor: s.anchor,
+            kind: note ? "untestable" : "no-claim",
+            reason: note?.reason ?? "the section states no CLI-assertable claim"
+          });
         }
-        coverageGaps.push({
-          doc: s.doc,
-          anchor: s.anchor,
-          kind: note ? "untestable" : "no-claim",
-          reason: note?.reason ?? "the section states no CLI-assertable claim"
-        });
       }
       classificationByKey.set(key2(s), deriveClassification(cli, others, note));
       for (const c2 of cli)
         authTasks.push({ ref: `c${refSeq++}`, section: s, claim: c2 });
     }
   }
+  const orphanedDismissals = decisions.dismissedClaims.filter((d3) => extractedDocs.has(d3.doc) && !extractedClaimKeys.has(dismissedClaimKey(d3.doc, d3.anchor, d3.title))).map((d3) => ({ doc: d3.doc, anchor: d3.anchor, title: d3.title }));
   const buildPromise = runBuild(repoRoot5, recipe.build, recipe.env);
   let buildAnnounced = false;
   const awaitBuild = async () => {
@@ -207311,7 +207509,7 @@ async function generateGuards(options) {
       if (!build8.ok)
         return null;
       resolvedEntryMemo ??= resolveEntry(repoRoot5, recipe.entry);
-      return preflightEntry({ resolvedEntry: resolvedEntryMemo, displayEntry: recipe.entry, recipeEnv: recipe.env });
+      return preflightEntry({ resolvedEntry: resolvedEntryMemo, displayEntry: recipe.entry, recipeEnv: recipe.env, repoRoot: repoRoot5 });
     })();
     return entryPreflightMemo;
   };
@@ -207342,6 +207540,7 @@ async function generateGuards(options) {
   };
   const written = [];
   const birthFindings = [];
+  const heldSections = [];
   let entryPreflightFailure = null;
   let birthTotal = 0;
   let birthSettled = 0;
@@ -207449,9 +207648,9 @@ async function generateGuards(options) {
           pushInto(r1ByRef, o.candidate.ref, o);
         const retryEntries = [];
         for (const [ref, outcomes] of r1ByRef) {
-          const fail4 = outcomes.find((o) => o.result.outcome === "fail");
-          if (fail4) {
-            retryEntries.push({ task: taskByRef.get(ref), evidence: toFinding(fail4) });
+          const retriable2 = outcomes.find((o) => o.result.outcome === "fail" || isSetupDefectResult(o.result));
+          if (retriable2) {
+            retryEntries.push({ task: taskByRef.get(ref), evidence: toFinding(retriable2) });
             continue;
           }
           for (const o of outcomes) {
@@ -207510,6 +207709,16 @@ async function generateGuards(options) {
         ids.push(c2.scenario.id);
       }
       upsertSection(section, ids);
+    } else if (persistedHere.length > 0) {
+      heldSections.push({
+        doc: section.doc,
+        anchor: section.anchor,
+        readyScenarios: persistedHere.map((c2) => ({
+          id: c2.scenario.id,
+          title: c2.scenario.title,
+          yaml: serializeScenarioYaml(c2.scenario)
+        }))
+      });
     }
   }
   const authorTotal = authTasks.length;
@@ -207588,6 +207797,8 @@ async function generateGuards(options) {
     extractionFailures,
     orphaned,
     birthPassed,
+    heldSections,
+    orphanedDismissals,
     manifestPath: manifestPath2(repoRoot5),
     ...entryPreflightFailure ? { entryPreflight: entryPreflightFailure } : {}
   };
@@ -207634,7 +207845,9 @@ function emptyResult(status, extra) {
     errors: [],
     extractionFailures: [],
     orphaned: [],
-    birthPassed: 0
+    birthPassed: 0,
+    heldSections: [],
+    orphanedDismissals: []
   };
 }
 function readPriorManifest(repoRoot5) {
@@ -207729,9 +207942,18 @@ function toFinding(o) {
     step: f2?.step ?? 1,
     expected: f2?.expected ?? "",
     actual: f2?.actual ?? "",
-    ...o.result.evidencePath ? { evidencePath: o.result.evidencePath } : {}
+    ...o.result.evidencePath ? { evidencePath: o.result.evidencePath } : {},
+    // Judge-on-one-screen (item 19): the failed candidate's exact YAML rides inline
+    // so the finding detail shows the commands it ran; `claim` is the dismissal
+    // identity (item 20) so the detail's Dismiss action can key on it.
+    yaml: serializeScenarioYaml(o.candidate.scenario),
+    claim: o.candidate.claim.claim
   };
 }
+function dismissedReason(claim, note) {
+  const base2 = `dismissed: ${oneLine(claim)}`;
+  return note ? `${base2} \u2014 ${oneLine(note)}` : base2;
+}
 function errorFrom(o) {
   return {
     doc: o.candidate.section.doc,
@@ -207794,8 +208016,8 @@ init_context_router();
 
 // packages/core/dist/services/llm/model-prices.js
 init_paths();
-import fs59 from "node:fs";
-import path66 from "node:path";
+import fs61 from "node:fs";
+import path67 from "node:path";
 var OPENROUTER_URL = "https://openrouter.ai/api/v1/models";
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 8e3;
@@ -207811,11 +208033,11 @@ function tierOf(id) {
   return s.includes("opus") ? "opus" : s.includes("sonnet") ? "sonnet" : s.includes("haiku") ? "haiku" : null;
 }
 function cacheFilePath() {
-  return path66.join(getGlobalDir(), "cache", CACHE_FILE);
+  return path67.join(getGlobalDir(), "cache", CACHE_FILE);
 }
 function readCache7() {
   try {
-    const t2 = JSON.parse(fs59.readFileSync(cacheFilePath(), "utf-8"));
+    const t2 = JSON.parse(fs61.readFileSync(cacheFilePath(), "utf-8"));
     if (t2 && t2.tiers && t2.byId && typeof t2.fetchedAt === "number")
       return t2;
   } catch {
@@ -207824,8 +208046,8 @@ function readCache7() {
 }
 function writeCache7(t2) {
   try {
-    fs59.mkdirSync(path66.dirname(cacheFilePath()), { recursive: true });
-    fs59.writeFileSync(cacheFilePath(), JSON.stringify(t2));
+    fs61.mkdirSync(path67.dirname(cacheFilePath()), { recursive: true });
+    fs61.writeFileSync(cacheFilePath(), JSON.stringify(t2));
   } catch {
   }
 }
@@ -208204,16 +208426,16 @@ function changedSubject(total, changed, noun) {
 
 // packages/core/dist/commands/spec-in-process.js
 init_dist8();
-import fs64 from "node:fs";
-import path71 from "node:path";
+import fs66 from "node:fs";
+import path72 from "node:path";
 init_git();
 import { createHash as createHash20, randomUUID as randomUUID27 } from "node:crypto";
 
 // packages/core/dist/lib/verify-store.js
 init_atomic_write();
 init_analysis_store();
-import fs60 from "node:fs";
-import path67 from "node:path";
+import fs62 from "node:fs";
+import path68 from "node:path";
 
 // packages/core/dist/types/verify-snapshot.js
 function driftKey(d3) {
@@ -208261,23 +208483,23 @@ var LATEST_FILE3 = "LATEST.json";
 var HISTORY_FILE3 = "history.json";
 var DIFF_FILE2 = "diff.json";
 function verifierDir(repoPath) {
-  return path67.join(repoPath, TRUECOURSE_DIR4, VERIFIER_DIR);
+  return path68.join(repoPath, TRUECOURSE_DIR4, VERIFIER_DIR);
 }
 function runsDir(repoPath) {
-  return path67.join(verifierDir(repoPath), RUNS_DIR2);
+  return path68.join(verifierDir(repoPath), RUNS_DIR2);
 }
 function verifyRunPath(repoPath, filename) {
-  return path67.join(runsDir(repoPath), filename);
+  return path68.join(runsDir(repoPath), filename);
 }
 function verifyLatestPath(repoPath) {
-  return path67.join(verifierDir(repoPath), LATEST_FILE3);
+  return path68.join(verifierDir(repoPath), LATEST_FILE3);
 }
 function verifyHistoryPath(repoPath) {
-  return path67.join(verifierDir(repoPath), HISTORY_FILE3);
+  return path68.join(verifierDir(repoPath), HISTORY_FILE3);
 }
 function verifyDiffPath(repoPath, scope) {
   const file = scope ? `diff-${sanitizeScope(scope)}.json` : DIFF_FILE2;
-  return path67.join(verifierDir(repoPath), file);
+  return path68.join(verifierDir(repoPath), file);
 }
 function sanitizeScope(scope) {
   return scope.replace(/[^a-zA-Z0-9._-]/g, "_");
@@ -208311,7 +208533,7 @@ var FileVerifyStore = class {
     const file = verifyLatestPath(repoPath);
     let mtime;
     try {
-      mtime = fs60.statSync(file).mtimeMs;
+      mtime = fs62.statSync(file).mtimeMs;
     } catch (err) {
       if (err.code === "ENOENT") {
         latestCache2.delete(repoPath);
@@ -208322,7 +208544,7 @@ var FileVerifyStore = class {
     const cached = latestCache2.get(repoPath);
     if (cached && cached.mtime === mtime)
       return cached.data;
-    const data = JSON.parse(fs60.readFileSync(file, "utf-8"));
+    const data = JSON.parse(fs62.readFileSync(file, "utf-8"));
     latestCache2.set(repoPath, { mtime, data });
     return data;
   }
@@ -208332,7 +208554,7 @@ var FileVerifyStore = class {
   }
   async deleteVerifyLatest(repoPath) {
     try {
-      fs60.unlinkSync(verifyLatestPath(repoPath));
+      fs62.unlinkSync(verifyLatestPath(repoPath));
     } catch (err) {
       if (err.code !== "ENOENT")
         throw err;
@@ -208346,21 +208568,21 @@ var FileVerifyStore = class {
   }
   async readVerifyRun(repoPath, filename) {
     const file = verifyRunPath(repoPath, filename);
-    if (!fs60.existsSync(file))
+    if (!fs62.existsSync(file))
       return null;
-    return JSON.parse(fs60.readFileSync(file, "utf-8"));
+    return JSON.parse(fs62.readFileSync(file, "utf-8"));
   }
   async listVerifyRuns(repoPath) {
     const dir = runsDir(repoPath);
-    if (!fs60.existsSync(dir))
+    if (!fs62.existsSync(dir))
       return [];
-    return fs60.readdirSync(dir).filter((n) => n.endsWith(".json")).sort();
+    return fs62.readdirSync(dir).filter((n) => n.endsWith(".json")).sort();
   }
   async readVerifyHistory(repoPath) {
     const file = verifyHistoryPath(repoPath);
-    if (!fs60.existsSync(file))
+    if (!fs62.existsSync(file))
       return { runs: [] };
-    return JSON.parse(fs60.readFileSync(file, "utf-8"));
+    return JSON.parse(fs62.readFileSync(file, "utf-8"));
   }
   async appendVerifyHistory(repoPath, entry) {
     const history = await this.readVerifyHistory(repoPath);
@@ -208373,7 +208595,7 @@ var FileVerifyStore = class {
     if (!entry)
       return false;
     try {
-      fs60.unlinkSync(verifyRunPath(repoPath, entry.filename));
+      fs62.unlinkSync(verifyRunPath(repoPath, entry.filename));
     } catch (err) {
       if (err.code !== "ENOENT")
         throw err;
@@ -208395,16 +208617,16 @@ var FileVerifyStore = class {
   }
   async readVerifyDiff(repoPath, scope) {
     const file = verifyDiffPath(repoPath, scope);
-    if (!fs60.existsSync(file))
+    if (!fs62.existsSync(file))
       return null;
-    return JSON.parse(fs60.readFileSync(file, "utf-8"));
+    return JSON.parse(fs62.readFileSync(file, "utf-8"));
   }
   async writeVerifyDiff(repoPath, diff, scope) {
     atomicWriteJson(verifyDiffPath(repoPath, scope), diff);
   }
   async deleteVerifyDiff(repoPath, scope) {
     try {
-      fs60.unlinkSync(verifyDiffPath(repoPath, scope));
+      fs62.unlinkSync(verifyDiffPath(repoPath, scope));
     } catch (err) {
       if (err.code !== "ENOENT")
         throw err;
@@ -208438,8 +208660,8 @@ async function repoRef(repoRoot5, commitOverride) {
 }
 
 // packages/core/dist/lib/contract-store.js
-import fs61 from "node:fs";
-import path68 from "node:path";
+import fs63 from "node:fs";
+import path69 from "node:path";
 var KIND_REL = {
   contracts: [".truecourse", "contracts"],
   // The inferred tree lives at contracts/_inferred (matches `writeInferred`).
@@ -208449,13 +208671,13 @@ function countTcFiles(dir) {
   let n = 0;
   let entries;
   try {
-    entries = fs61.readdirSync(dir, { withFileTypes: true });
+    entries = fs63.readdirSync(dir, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const e of entries) {
     if (e.isDirectory())
-      n += countTcFiles(path68.join(dir, e.name));
+      n += countTcFiles(path69.join(dir, e.name));
     else if (e.isFile() && e.name.endsWith(".tc"))
       n += 1;
   }
@@ -208466,7 +208688,7 @@ function walkTcRel(dir, excludeInferred) {
   const walk20 = (rel) => {
     let entries;
     try {
-      entries = fs61.readdirSync(path68.join(dir, rel), { withFileTypes: true });
+      entries = fs63.readdirSync(path69.join(dir, rel), { withFileTypes: true });
     } catch {
       return;
     }
@@ -208490,50 +208712,50 @@ function safeResolve(root2, rel) {
     return null;
   if (norm.split("/").some((s) => s === ".." || s === "." || s === ""))
     return null;
-  const base2 = path68.resolve(root2);
-  const dest = path68.resolve(base2, norm);
-  if (dest !== base2 && !dest.startsWith(base2 + path68.sep))
+  const base2 = path69.resolve(root2);
+  const dest = path69.resolve(base2, norm);
+  if (dest !== base2 && !dest.startsWith(base2 + path69.sep))
     return null;
   return dest;
 }
 var FileContractStore = class {
   materializesInPlace = true;
   async saveContracts(ref, kind, _sourceDir) {
-    const dir = path68.join(ref.repoKey, ...KIND_REL[kind]);
+    const dir = path69.join(ref.repoKey, ...KIND_REL[kind]);
     return { manifest: {}, fileCount: countTcFiles(dir), objectsWritten: 0, manifestHash: "" };
   }
   async loadContracts(ref, kind) {
-    const dir = path68.join(ref.repoKey, ...KIND_REL[kind]);
-    if (!fs61.existsSync(dir))
+    const dir = path69.join(ref.repoKey, ...KIND_REL[kind]);
+    if (!fs63.existsSync(dir))
       return null;
     return { dir, cleanup: async () => {
     } };
   }
   async hasContracts(ref, kind) {
-    return fs61.existsSync(path68.join(ref.repoKey, ...KIND_REL[kind]));
+    return fs63.existsSync(path69.join(ref.repoKey, ...KIND_REL[kind]));
   }
   // The file impl reads the live repo tree, which is whatever is checked out —
   // there is no per-commit history, so `commitSha` is ignored (OSS is latest).
   async listContractFiles(repoKey, kind, _commitSha) {
-    return walkTcRel(path68.join(repoKey, ...KIND_REL[kind]), kind === "contracts");
+    return walkTcRel(path69.join(repoKey, ...KIND_REL[kind]), kind === "contracts");
   }
   async readContractFile(repoKey, kind, relPath, _commitSha) {
-    const dest = safeResolve(path68.join(repoKey, ...KIND_REL[kind]), relPath);
-    if (!dest || !fs61.existsSync(dest) || !fs61.statSync(dest).isFile())
+    const dest = safeResolve(path69.join(repoKey, ...KIND_REL[kind]), relPath);
+    if (!dest || !fs63.existsSync(dest) || !fs63.statSync(dest).isFile())
       return null;
-    return fs61.readFileSync(dest, "utf-8");
+    return fs63.readFileSync(dest, "utf-8");
   }
   async putContractFile(ref, kind, relPath, content) {
-    const dest = safeResolve(path68.join(ref.repoKey, ...KIND_REL[kind]), relPath);
+    const dest = safeResolve(path69.join(ref.repoKey, ...KIND_REL[kind]), relPath);
     if (!dest)
       throw new Error(`[contract-store] unsafe contract path: ${relPath}`);
-    fs61.mkdirSync(path68.dirname(dest), { recursive: true });
-    fs61.writeFileSync(dest, content);
+    fs63.mkdirSync(path69.dirname(dest), { recursive: true });
+    fs63.writeFileSync(dest, content);
   }
   async deleteContractFile(ref, kind, relPath) {
-    const dest = safeResolve(path68.join(ref.repoKey, ...KIND_REL[kind]), relPath);
+    const dest = safeResolve(path69.join(ref.repoKey, ...KIND_REL[kind]), relPath);
     if (dest)
-      fs61.rmSync(dest, { force: true });
+      fs63.rmSync(dest, { force: true });
   }
   // OSS/local has no workspace concept (mirrors the spec store). Writing throws
   // (fail loud — a caller that reached here is mis-wired); reads are empty so an
@@ -208560,10 +208782,10 @@ var loadWorkspaceContracts = (ref, kind) => active8.loadWorkspaceContracts(ref,
 var contractsMaterializeInPlace = () => active8.materializesInPlace;
 
 // packages/core/dist/lib/spec-store.js
-import fs62 from "node:fs";
-import path69 from "node:path";
+import fs64 from "node:fs";
+import path70 from "node:path";
 function specPath(repoKey, artifact) {
-  return path69.join(repoKey, ".truecourse", "specs", `${artifact}.json`);
+  return path70.join(repoKey, ".truecourse", "specs", `${artifact}.json`);
 }
 function isPrDecisionsRef(commitSha) {
   return /^_pr\/\d+$/.test(commitSha ?? "");
@@ -208576,18 +208798,18 @@ var FileSpecStore = class {
       throw new Error(PR_DECISIONS_FILE_ERROR);
     }
     const file = specPath(ref.repoKey, artifact);
-    fs62.mkdirSync(path69.dirname(file), { recursive: true });
-    fs62.writeFileSync(file, JSON.stringify(json2, null, 2) + "\n", "utf-8");
+    fs64.mkdirSync(path70.dirname(file), { recursive: true });
+    fs64.writeFileSync(file, JSON.stringify(json2, null, 2) + "\n", "utf-8");
   }
   async loadSpec(ref, artifact) {
     if (artifact === "decisions" && isPrDecisionsRef(ref.commitSha)) {
       throw new Error(PR_DECISIONS_FILE_ERROR);
     }
     const file = specPath(ref.repoKey, artifact);
-    if (!fs62.existsSync(file))
+    if (!fs64.existsSync(file))
       return null;
     try {
-      return JSON.parse(fs62.readFileSync(file, "utf-8"));
+      return JSON.parse(fs64.readFileSync(file, "utf-8"));
     } catch {
       return null;
     }
@@ -208597,8 +208819,8 @@ var FileSpecStore = class {
       throw new Error(PR_DECISIONS_FILE_ERROR);
     }
     const file = specPath(ref.repoKey, artifact);
-    if (fs62.existsSync(file))
-      fs62.rmSync(file);
+    if (fs64.existsSync(file))
+      fs64.rmSync(file);
   }
   // The file impl is single-document-per-repo, so "latest" === read the file.
   async loadLatest(repoKey, artifact) {
@@ -208625,23 +208847,23 @@ var loadLatestSpec = (repoKey, artifact) => active9.loadLatest(repoKey, artifact
 var specsMaterializeInPlace = () => active9.materializesInPlace;
 
 // packages/core/dist/lib/inferred-action-store.js
-import fs63 from "node:fs";
-import path70 from "node:path";
+import fs65 from "node:fs";
+import path71 from "node:path";
 function actionsFile(repoKey) {
-  return path70.join(repoKey, ".truecourse", "specs", "inferred-actions.json");
+  return path71.join(repoKey, ".truecourse", "specs", "inferred-actions.json");
 }
 var FileInferredActionStore = class {
   read(repoKey) {
     try {
-      return JSON.parse(fs63.readFileSync(actionsFile(repoKey), "utf-8"));
+      return JSON.parse(fs65.readFileSync(actionsFile(repoKey), "utf-8"));
     } catch {
       return [];
     }
   }
   write(repoKey, actions) {
     const file = actionsFile(repoKey);
-    fs63.mkdirSync(path70.dirname(file), { recursive: true });
-    fs63.writeFileSync(file, JSON.stringify(actions, null, 2) + "\n", "utf-8");
+    fs65.mkdirSync(path71.dirname(file), { recursive: true });
+    fs65.writeFileSync(file, JSON.stringify(actions, null, 2) + "\n", "utf-8");
   }
   async setAction(repoKey, action) {
     const next = this.read(repoKey).filter((a) => !(a.kind === action.kind && a.identity === action.identity));
@@ -208770,13 +208992,13 @@ function resolveTransport(options) {
   }
   return getDefaultTransport();
 }
-var GENERATED_MARKER_REL = path71.join(".truecourse", "contracts", "result.json");
+var GENERATED_MARKER_REL = path72.join(".truecourse", "contracts", "result.json");
 function generatedMarkerPath(repoRoot5) {
-  return path71.join(repoRoot5, GENERATED_MARKER_REL);
+  return path72.join(repoRoot5, GENERATED_MARKER_REL);
 }
 function stampGeneratedMarker(repoRoot5, summary) {
   const file = generatedMarkerPath(repoRoot5);
-  fs64.mkdirSync(path71.dirname(file), { recursive: true });
+  fs66.mkdirSync(path72.dirname(file), { recursive: true });
   const body = {
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     written: summary?.written ?? 0,
@@ -208784,7 +209006,7 @@ function stampGeneratedMarker(repoRoot5, summary) {
     validationIssues: summary?.validationIssues ?? [],
     enumerateFailures: summary?.enumerateFailures ?? []
   };
-  fs64.writeFileSync(file, JSON.stringify(body, null, 2) + "\n");
+  fs66.writeFileSync(file, JSON.stringify(body, null, 2) + "\n");
 }
 function resolveCurateModels(repoRoot5) {
   return {
@@ -208908,22 +209130,22 @@ async function curateInProcess(repoRoot5, options = {}) {
   }
 }
 function buildPriorContracts(repoRoot5) {
-  const dir = path71.join(repoRoot5, ".truecourse", "contracts");
-  if (!fs64.existsSync(dir))
+  const dir = path72.join(repoRoot5, ".truecourse", "contracts");
+  if (!fs66.existsSync(dir))
     return void 0;
   const targets = [];
   const bodyByKey = /* @__PURE__ */ new Map();
   const walk20 = (d3) => {
-    for (const e of fs64.readdirSync(d3, { withFileTypes: true })) {
+    for (const e of fs66.readdirSync(d3, { withFileTypes: true })) {
       if (e.isDirectory()) {
         if (e.name === "_inferred")
           continue;
-        walk20(path71.join(d3, e.name));
+        walk20(path72.join(d3, e.name));
       } else if (e.name.endsWith(".tc")) {
-        const abs = path71.join(d3, e.name);
-        const src = fs64.readFileSync(abs, "utf-8");
+        const abs = path72.join(d3, e.name);
+        const src = fs66.readFileSync(abs, "utf-8");
         try {
-          const file = parser_ohm_exports.parseTcFile(path71.relative(dir, abs), src);
+          const file = parser_ohm_exports.parseTcFile(path72.relative(dir, abs), src);
           for (const key4 of resolver_exports.resolve([file]).index.keys()) {
             const colon = key4.indexOf(":");
             if (colon < 0)
@@ -209083,18 +209305,18 @@ function resolverHardError(result) {
   const detail = reasons.length ? reasons.slice(0, 3).join("; ") : "duplicate or conflicting artifact identities";
   return new Error(`Contract corpus failed to resolve \u2014 ${detail}`);
 }
-var LEGACY_VERIFY_STATE_REL = path71.join(".truecourse", ".cache", "verifier", "verify-state.json");
+var LEGACY_VERIFY_STATE_REL = path72.join(".truecourse", ".cache", "verifier", "verify-state.json");
 function legacyVerifyStatePath(repoRoot5) {
-  return path71.join(repoRoot5, LEGACY_VERIFY_STATE_REL);
+  return path72.join(repoRoot5, LEGACY_VERIFY_STATE_REL);
 }
 async function withContracts(repoRoot5, options, tracker, fn) {
-  const fallbackPath = path71.join(repoRoot5, ".truecourse", "contracts");
+  const fallbackPath = path72.join(repoRoot5, ".truecourse", "contracts");
   const wsMat = options.workspaceOrgId ? await loadWorkspaceContracts({ workspaceOrgId: options.workspaceOrgId }, "contracts") : null;
   let repoMat = null;
   try {
     let recorded;
     if (options.contractsDir) {
-      if (!fs64.existsSync(options.contractsDir)) {
+      if (!fs66.existsSync(options.contractsDir)) {
         const err = new Error(`Contracts directory not found at ${options.contractsDir}. Run \`truecourse contracts generate\` first.`);
         tracker?.error("load", err.message);
         throw err;
@@ -209139,7 +209361,7 @@ async function verifyInProcess(repoRoot5, options = {}) {
     tracker?.start("compare");
     tracker?.done("compare", `${result.drifts.length} drift${result.drifts.length === 1 ? "" : "s"}`);
     if (options.ref) {
-      result.drifts = result.drifts.map((d3) => d3.filePath && path71.isAbsolute(d3.filePath) ? { ...d3, filePath: path71.relative(repoRoot5, d3.filePath).split(path71.sep).join("/") } : d3);
+      result.drifts = result.drifts.map((d3) => d3.filePath && path72.isAbsolute(d3.filePath) ? { ...d3, filePath: path72.relative(repoRoot5, d3.filePath).split(path72.sep).join("/") } : d3);
     }
     const verifiedAt = (/* @__PURE__ */ new Date()).toISOString();
     const { branch, commitHash } = await gitMeta(repoRoot5);
@@ -209183,7 +209405,7 @@ async function verifyInProcess(repoRoot5, options = {}) {
         bySeverity: summary.bySeverity
       });
       await deleteVerifyDiff(storeKey);
-      fs64.rmSync(legacyVerifyStatePath(repoRoot5), { force: true });
+      fs66.rmSync(legacyVerifyStatePath(repoRoot5), { force: true });
     }
     const state = {
       verifiedAt,
@@ -209231,7 +209453,7 @@ async function runWithStash(repoRoot5, skipStash, tracker, fn) {
       const status = await stashGit.status();
       if (!status.isClean()) {
         const gitRoot = (await stashGit.revparse(["--show-toplevel"])).trim();
-        if (path71.resolve(repoRoot5) === path71.resolve(gitRoot)) {
+        if (path72.resolve(repoRoot5) === path72.resolve(gitRoot)) {
           tracker?.detail?.("load", "Stashing pending changes...");
           const res = await stashGit.stash(["push", "--include-untracked", "-m", "truecourse-verify-stash"]);
           didStash = !res.includes("No local changes");
@@ -209333,7 +209555,7 @@ async function verifyDiffInProcess(repoRoot5, options = {}) {
 async function inferInProcess(repoRoot5, options = {}) {
   const startedAt = Date.now();
   const codeDir = options.codeDir ?? autodetectCodeDir(repoRoot5);
-  let contractsDir = options.contractsDir ?? path71.join(repoRoot5, ".truecourse", "contracts");
+  let contractsDir = options.contractsDir ?? path72.join(repoRoot5, ".truecourse", "contracts");
   let releaseContracts = async () => {
   };
   if (!options.contractsDir && options.ref) {
@@ -209377,7 +209599,7 @@ async function persistInferred(repoRoot5, options, contractsDir, codeDir, starte
     });
   }
   if (!options.dryRun && options.ref) {
-    await saveContracts(options.ref, "contracts_inferred", path71.join(contractsDir, "_inferred"));
+    await saveContracts(options.ref, "contracts_inferred", path72.join(contractsDir, "_inferred"));
   }
   const rendered = result.decisions.map((d3) => renderDecision(d3));
   const decisionPaths = rendered.map((r) => r.relPath);
@@ -209400,8 +209622,8 @@ async function persistInferred(repoRoot5, options, contractsDir, codeDir, starte
   return { infer: result, written, proposed, decisionPaths, summaries };
 }
 function autodetectCodeDir(repoRoot5) {
-  const codeSubdir = path71.join(repoRoot5, "code");
-  if (fs64.existsSync(codeSubdir) && fs64.statSync(codeSubdir).isDirectory()) {
+  const codeSubdir = path72.join(repoRoot5, "code");
+  if (fs66.existsSync(codeSubdir) && fs66.statSync(codeSubdir).isDirectory()) {
     return codeSubdir;
   }
   return repoRoot5;
@@ -209721,8 +209943,8 @@ async function runContractsGenerate(options = {}) {
 }
 async function runContractsList(options = {}) {
   const repoRoot5 = options.cwd ?? process.cwd();
-  const contractsDir = path72.join(repoRoot5, ".truecourse", "contracts");
-  if (!fs65.existsSync(contractsDir)) {
+  const contractsDir = path73.join(repoRoot5, ".truecourse", "contracts");
+  if (!fs67.existsSync(contractsDir)) {
     O2.info("No contracts found. Run `truecourse contracts generate` first.");
     return;
   }
@@ -209730,12 +209952,12 @@ async function runContractsList(options = {}) {
   const fileNodes = [];
   let parseErrors = 0;
   const visit = (dir) => {
-    for (const entry of fs65.readdirSync(dir, { withFileTypes: true })) {
-      const full = path72.join(dir, entry.name);
+    for (const entry of fs67.readdirSync(dir, { withFileTypes: true })) {
+      const full = path73.join(dir, entry.name);
       if (entry.isDirectory()) visit(full);
       else if (entry.isFile() && entry.name.endsWith(".tc")) {
         try {
-          fileNodes.push(parserOhm.parseTcFile(full, fs65.readFileSync(full, "utf-8")));
+          fileNodes.push(parserOhm.parseTcFile(full, fs67.readFileSync(full, "utf-8")));
         } catch {
           parseErrors += 1;
         }
@@ -209762,7 +209984,7 @@ async function runContractsList(options = {}) {
   mt(`Contracts \u2014 ${artifacts.length} ${scope}artifact${artifacts.length === 1 ? "" : "s"}`);
   for (const a of artifacts) {
     const conf = a.confidence ? `[${a.confidence}] ` : "";
-    const loc = a.origin ? a.origin.lines[0] >= 0 ? `${a.origin.source}:${a.origin.lines[0]}` : a.origin.source : `${path72.relative(repoRoot5, a.declarationLoc.filePath)}:${a.declarationLoc.lineStart}`;
+    const loc = a.origin ? a.origin.lines[0] >= 0 ? `${a.origin.source}:${a.origin.lines[0]}` : a.origin.source : `${path73.relative(repoRoot5, a.declarationLoc.filePath)}:${a.declarationLoc.lineStart}`;
     console.log(`  ${conf}${a.ref.type}:${a.ref.identity}  ${loc}`);
   }
   if (parseErrors > 0) {
@@ -209774,8 +209996,8 @@ async function runContractsList(options = {}) {
 }
 async function runContractsValidate(options = {}) {
   const repoRoot5 = options.cwd ?? process.cwd();
-  const contractsDir = path72.join(repoRoot5, ".truecourse", "contracts");
-  if (!fs65.existsSync(contractsDir)) {
+  const contractsDir = path73.join(repoRoot5, ".truecourse", "contracts");
+  if (!fs67.existsSync(contractsDir)) {
     O2.error("No .truecourse/contracts/ directory found.");
     process.exit(1);
   }
@@ -209783,14 +210005,14 @@ async function runContractsValidate(options = {}) {
   const fileNodes = [];
   const issues = [];
   const visit = (dir) => {
-    for (const entry of fs65.readdirSync(dir, { withFileTypes: true })) {
-      const full = path72.join(dir, entry.name);
+    for (const entry of fs67.readdirSync(dir, { withFileTypes: true })) {
+      const full = path73.join(dir, entry.name);
       if (entry.isDirectory()) visit(full);
       else if (entry.isFile() && entry.name.endsWith(".tc")) {
         try {
-          fileNodes.push(parserOhm.parseTcFile(full, fs65.readFileSync(full, "utf-8")));
+          fileNodes.push(parserOhm.parseTcFile(full, fs67.readFileSync(full, "utf-8")));
         } catch (e) {
-          issues.push(`${path72.relative(repoRoot5, full)}: parse error: ${e instanceof Error ? e.message : e}`);
+          issues.push(`${path73.relative(repoRoot5, full)}: parse error: ${e instanceof Error ? e.message : e}`);
         }
       }
     }
@@ -209798,11 +210020,11 @@ async function runContractsValidate(options = {}) {
   visit(contractsDir);
   const resolution = resolver.resolve(fileNodes);
   for (const err of resolution.errors) {
-    issues.push(`${path72.relative(repoRoot5, err.filePath)}:${err.line} ${err.message}`);
+    issues.push(`${path73.relative(repoRoot5, err.filePath)}:${err.line} ${err.message}`);
   }
   const trulyUnresolved = resolution.unresolvedRefs.filter((u2) => u2.ref.type !== "Unknown");
   for (const u2 of trulyUnresolved) {
-    issues.push(`${path72.relative(repoRoot5, u2.usedAt.filePath)}:${u2.usedAt.lineStart} unresolved ${u2.ref.type}:${u2.ref.identity}`);
+    issues.push(`${path73.relative(repoRoot5, u2.usedAt.filePath)}:${u2.usedAt.lineStart} unresolved ${u2.ref.type}:${u2.ref.identity}`);
   }
   if (issues.length === 0) {
     O2.success(`Validated ${resolution.index.size} artifact${resolution.index.size === 1 ? "" : "s"} \u2014 no issues.`);
@@ -209816,7 +210038,7 @@ async function runContractsValidate(options = {}) {
 
 // tools/cli/src/commands/spec.ts
 init_dist4();
-import path73 from "node:path";
+import path74 from "node:path";
 init_progress();
 init_registry();
 var repoRoot = (opts = {}) => opts.cwd ?? process.cwd();
@@ -209942,7 +210164,7 @@ async function runVerify(opts = {}) {
       O2.message("");
       O2.message("Drifts:");
       for (const d3 of verify2.drifts.slice(0, 20)) {
-        const loc = d3.filePath ? ` ${path73.relative(root2, d3.filePath)}:${d3.lineStart ?? "?"}` : "";
+        const loc = d3.filePath ? ` ${path74.relative(root2, d3.filePath)}:${d3.lineStart ?? "?"}` : "";
         O2.message(`  [${d3.severity}] ${d3.obligationKey}${loc}`);
         O2.message(`    \u2192 ${d3.message}`);
       }
@@ -209976,7 +210198,7 @@ async function runVerifyDiff(opts) {
       O2.message("");
       O2.message(`${label}:`);
       for (const d3 of drifts.slice(0, 20)) {
-        const loc = d3.filePath ? ` ${path73.relative(root2, d3.filePath)}:${d3.lineStart ?? "?"}` : "";
+        const loc = d3.filePath ? ` ${path74.relative(root2, d3.filePath)}:${d3.lineStart ?? "?"}` : "";
         O2.message(`  [${d3.severity}] ${d3.obligationKey}${loc}`);
       }
       if (drifts.length > 20) O2.message(`  \u2026 (+${drifts.length - 20} more)`);
@@ -210031,8 +210253,8 @@ async function runInfer(opts = {}) {
 
 // tools/cli/src/commands/spec-conflicts.ts
 init_dist4();
-import fs66 from "node:fs";
-import path74 from "node:path";
+import fs68 from "node:fs";
+import path75 from "node:path";
 var root = (opts) => opts.cwd ?? process.cwd();
 var base = (ref) => ref.split("/").pop() ?? ref;
 function effectiveRelations2(corpus, repoRoot5) {
@@ -210079,7 +210301,7 @@ async function runSpecConflictsList(opts = {}) {
 function excerpt(repoRoot5, ref, note, max = 20) {
   let text4;
   try {
-    text4 = fs66.readFileSync(path74.join(repoRoot5, ref), "utf-8");
+    text4 = fs68.readFileSync(path75.join(repoRoot5, ref), "utf-8");
   } catch {
     return `    (could not read ${ref})`;
   }
@@ -210304,7 +210526,7 @@ function fail3(msg) {
 
 // tools/cli/src/commands/drifts.ts
 init_dist4();
-import path75 from "node:path";
+import path76 from "node:path";
 var DRIFT_SEVERITIES = [
   "critical",
   "high",
@@ -210341,7 +210563,7 @@ async function runDriftsList(opts = {}) {
   O2.message("");
   O2.message("Drifts:");
   for (const d3 of page) {
-    const loc = d3.filePath ? ` ${path75.relative(root2, d3.filePath)}:${d3.lineStart ?? "?"}` : "";
+    const loc = d3.filePath ? ` ${path76.relative(root2, d3.filePath)}:${d3.lineStart ?? "?"}` : "";
     O2.message(`  [${d3.severity}] ${d3.obligationKey}${loc}`);
     O2.message(`    \u2192 ${d3.message}`);
   }
@@ -210372,7 +210594,7 @@ function parseDriftSeverityFlag(raw) {
 
 // tools/cli/src/commands/guard.ts
 init_dist4();
-import path76 from "node:path";
+import path77 from "node:path";
 init_progress();
 
 // packages/core/dist/commands/guard-in-process.js
@@ -210772,7 +210994,7 @@ async function runGuardGenerate(opts = {}) {
     return;
   }
   const report4 = readGuardResult(repoRoot5) ?? { ...guard, generatedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  printGuardGenerateSummary(report4, path76.relative(repoRoot5, guardResultPath(repoRoot5)));
+  printGuardGenerateSummary(report4, path77.relative(repoRoot5, guardResultPath(repoRoot5)));
   if (guard.written.length === 0 && guard.birthFindings.length === 0 && guard.errors.length === 0) {
     gt("No scenarios written.");
     return;
@@ -210791,6 +211013,11 @@ function printGuardGenerateSummary(report4, reportPath) {
   O2.step(`sections    ${report4.sectionsChanged} changed \xB7 ${settled} settled \xB7 ${unsettled.size} unsettled \xB7 ${report4.skippedUnchanged} unchanged`);
   const birth = g.birthPassed !== null ? ` \xB7 ${g.birthPassed} passed birth` : "";
   O2.step(`scenarios   ${g.written} written${birth}`);
+  if (g.readyButHeld > 0) {
+    O2.step(
+      `held        ${g.readyButHeld} ready but held (${g.heldByFindings} finding${g.heldByFindings === 1 ? "" : "s"} \xB7 ${g.heldByErrors} error${g.heldByErrors === 1 ? "" : "s"})`
+    );
+  }
   const gapTotal = Object.values(g.coverageGapsByKind).reduce((a, b) => a + b, 0);
   if (gapTotal > 0) {
     const kinds = Object.entries(g.coverageGapsByKind).filter(([, n]) => n > 0).map(([k, n]) => k === "blocked-on" ? `${n} blocked-on${blockedOnBreakdown(g.blockedOnCapabilities)}` : `${n} ${k}`);
@@ -210802,6 +211029,10 @@ function printGuardGenerateSummary(report4, reportPath) {
   if (report4.extractionFailures.length > 0) {
     O2.step(`extraction  ${report4.extractionFailures.length} document${report4.extractionFailures.length === 1 ? "" : "s"} failed \u2014 re-run to retry`);
   }
+  if (report4.orphanedDismissals && report4.orphanedDismissals.length > 0) {
+    const n = report4.orphanedDismissals.length;
+    O2.step(`dismissals  ${n} orphaned \u2014 the dismissed claim no longer exists; re-dismiss the new text or drop it from decisions.json`);
+  }
   if (g.birthFindings > 0) O2.step(`findings    ${g.birthFindings} birth finding${g.birthFindings === 1 ? "" : "s"}`);
   if (g.errors > 0) O2.step(`errors      ${g.errors} authoring error${g.errors === 1 ? "" : "s"}`);
   if (g.usage) O2.step(`cost        ${g.usage.calls} call${g.usage.calls === 1 ? "" : "s"} \xB7 $${g.usage.costUsd.toFixed(2)}`);
@@ -210881,6 +211112,7 @@ async function runGuardStatus(opts = {}) {
         const kinds = Object.entries(g.coverageGapsByKind).filter(([, n]) => n > 0).map(([k, n]) => k === "blocked-on" ? `${n} blocked-on${blockedOnBreakdown(g.blockedOnCapabilities)}` : `${n} ${k}`);
         detail.push(`${gapTotal} gap${gapTotal === 1 ? "" : "s"} (${kinds.join(", ")})`);
       }
+      if (g.readyButHeld > 0) detail.push(`${g.readyButHeld} ready but held`);
       if (g.birthFindings > 0) detail.push(`${g.birthFindings} birth finding${g.birthFindings === 1 ? "" : "s"}`);
       if (g.errors > 0) detail.push(`${g.errors} error${g.errors === 1 ? "" : "s"}`);
       if (detail.length > 0) O2.message(`    ${detail.join(" \xB7 ")}`);
@@ -210970,7 +211202,7 @@ function printLoadErrors(loadErrors) {
 
 // tools/cli/src/commands/config.ts
 init_dist4();
-import path77 from "node:path";
+import path78 from "node:path";
 var STAGE_LABEL = {
   "spec.relevance": "Spec   \xB7 doc relevance",
   "spec.areaTag": "Spec   \xB7 area tag",
@@ -211001,7 +211233,7 @@ async function runConfigLlmShow(options = {}) {
   const repoRoot5 = options.cwd ?? process.cwd();
   const { stages, fallbackModel } = describeStageResolutions(repoRoot5);
   mt("LLM model resolution");
-  O2.info(`repoRoot   ${path77.relative(process.cwd(), repoRoot5) || "."}`);
+  O2.info(`repoRoot   ${path78.relative(process.cwd(), repoRoot5) || "."}`);
   O2.info(`fallback   ${fallbackModel ?? "(not configured)"}`);
   for (const stage of stages) {
     const label = STAGE_LABEL[stage.stageId];
@@ -211017,8 +211249,8 @@ async function runConfigLlmShow(options = {}) {
 
 // tools/cli/src/commands/hooks.ts
 import { execSync as execSync4 } from "node:child_process";
-import fs67 from "node:fs";
-import path78 from "node:path";
+import fs69 from "node:fs";
+import path79 from "node:path";
 init_dist4();
 init_paths();
 init_registry();
@@ -211052,17 +211284,17 @@ pre-commit:
 function findGitDir(from) {
   let dir = from;
   while (true) {
-    const gitPath = path78.join(dir, ".git");
-    if (fs67.existsSync(gitPath)) {
-      const stat = fs67.statSync(gitPath);
+    const gitPath = path79.join(dir, ".git");
+    if (fs69.existsSync(gitPath)) {
+      const stat = fs69.statSync(gitPath);
       if (stat.isDirectory()) return gitPath;
       if (stat.isFile()) {
-        const content = fs67.readFileSync(gitPath, "utf-8").trim();
+        const content = fs69.readFileSync(gitPath, "utf-8").trim();
         const match4 = content.match(/^gitdir:\s*(.+)$/);
-        if (match4) return path78.resolve(dir, match4[1]);
+        if (match4) return path79.resolve(dir, match4[1]);
       }
     }
-    const parent = path78.dirname(dir);
+    const parent = path79.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -211070,18 +211302,18 @@ function findGitDir(from) {
 function findProjectRoot(from) {
   let dir = from;
   while (true) {
-    if (fs67.existsSync(path78.join(dir, ".git"))) return dir;
-    const parent = path78.dirname(dir);
+    if (fs69.existsSync(path79.join(dir, ".git"))) return dir;
+    const parent = path79.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
 }
 function loadConfig(projectRoot) {
-  const configPath = path78.join(projectRoot, ".truecourse", "hooks.yaml");
-  if (!fs67.existsSync(configPath)) return null;
+  const configPath = path79.join(projectRoot, ".truecourse", "hooks.yaml");
+  if (!fs69.existsSync(configPath)) return null;
   let parsed;
   try {
-    const raw = fs67.readFileSync(configPath, "utf-8");
+    const raw = fs69.readFileSync(configPath, "utf-8");
     parsed = jsYaml.load(raw) || {};
   } catch (err) {
     console.error(`Error parsing ${configPath}: ${err.message}`);
@@ -211132,11 +211364,11 @@ async function runHooksInstall() {
   } else {
     console.log(INSTALL_WARNING);
   }
-  const hooksDir = path78.join(gitDir, "hooks");
-  fs67.mkdirSync(hooksDir, { recursive: true });
-  const hookPath = path78.join(hooksDir, "pre-commit");
-  if (fs67.existsSync(hookPath)) {
-    const existing = fs67.readFileSync(hookPath, "utf-8");
+  const hooksDir = path79.join(gitDir, "hooks");
+  fs69.mkdirSync(hooksDir, { recursive: true });
+  const hookPath = path79.join(hooksDir, "pre-commit");
+  if (fs69.existsSync(hookPath)) {
+    const existing = fs69.readFileSync(hookPath, "utf-8");
     if (!existing.includes(HOOK_IDENTIFIER)) {
       console.error(
         "Error: A pre-commit hook already exists and was not installed by TrueCourse."
@@ -211146,16 +211378,16 @@ async function runHooksInstall() {
       process.exit(1);
     }
   }
-  fs67.writeFileSync(hookPath, HOOK_SCRIPT, { mode: 493 });
+  fs69.writeFileSync(hookPath, HOOK_SCRIPT, { mode: 493 });
   console.log("TrueCourse pre-commit hook installed.");
   console.log(`  ${hookPath}`);
   const projectRoot = findProjectRoot(process.cwd());
   if (projectRoot) {
-    const cfgDir = path78.join(projectRoot, ".truecourse");
-    const cfgPath = path78.join(cfgDir, "hooks.yaml");
-    if (!fs67.existsSync(cfgPath)) {
-      fs67.mkdirSync(cfgDir, { recursive: true });
-      fs67.writeFileSync(cfgPath, HOOKS_YAML_TEMPLATE);
+    const cfgDir = path79.join(projectRoot, ".truecourse");
+    const cfgPath = path79.join(cfgDir, "hooks.yaml");
+    if (!fs69.existsSync(cfgPath)) {
+      fs69.mkdirSync(cfgDir, { recursive: true });
+      fs69.writeFileSync(cfgPath, HOOKS_YAML_TEMPLATE);
       console.log(`  ${cfgPath} (starter config \u2014 edit to customize, commit to share with the team)`);
     }
   }
@@ -211166,17 +211398,17 @@ function runHooksUninstall() {
     console.error("Error: Not a git repository.");
     process.exit(1);
   }
-  const hookPath = path78.join(gitDir, "hooks", "pre-commit");
-  if (!fs67.existsSync(hookPath)) {
+  const hookPath = path79.join(gitDir, "hooks", "pre-commit");
+  if (!fs69.existsSync(hookPath)) {
     console.log("No pre-commit hook installed.");
     return;
   }
-  const content = fs67.readFileSync(hookPath, "utf-8");
+  const content = fs69.readFileSync(hookPath, "utf-8");
   if (!content.includes(HOOK_IDENTIFIER)) {
     console.error("Error: The pre-commit hook was not installed by TrueCourse. Leaving it in place.");
     process.exit(1);
   }
-  fs67.unlinkSync(hookPath);
+  fs69.unlinkSync(hookPath);
   console.log("TrueCourse pre-commit hook removed.");
 }
 function runHooksStatus() {
@@ -211185,8 +211417,8 @@ function runHooksStatus() {
     console.error("Error: Not a git repository.");
     process.exit(1);
   }
-  const hookPath = path78.join(gitDir, "hooks", "pre-commit");
-  const installed = fs67.existsSync(hookPath) && fs67.readFileSync(hookPath, "utf-8").includes(HOOK_IDENTIFIER);
+  const hookPath = path79.join(gitDir, "hooks", "pre-commit");
+  const installed = fs69.existsSync(hookPath) && fs69.readFileSync(hookPath, "utf-8").includes(HOOK_IDENTIFIER);
   if (installed) {
     console.log("TrueCourse pre-commit hook: installed");
     console.log(`  ${hookPath}`);
@@ -211295,7 +211527,7 @@ async function runHooksRun() {
 
 // tools/cli/src/index.ts
 var program2 = new Command();
-program2.name("truecourse").version("0.7.0-next.2").description("TrueCourse CLI \u2014 analyze your repository and open the dashboard");
+program2.name("truecourse").version("0.7.0-next.4").description("TrueCourse CLI \u2014 analyze your repository and open the dashboard");
 var dashboardCmd = program2.command("dashboard").description("Start the TrueCourse dashboard and open it in your browser").option("--reconfigure", "Re-prompt for console vs background service mode").option("--service", "Run as a background service (skips mode prompt)").option("--console", "Run in this terminal (skips mode prompt)").action(async (options) => {
   if (options.service && options.console) {
     console.error("error: --service and --console are mutually exclusive");