Drop internal tracker ids from the public repository

README.md

@@ -183,9 +183,9 @@ receive the skills as files. Add `--json` for a machine-readable report, and
 | Cursor · Gemini CLI · GitHub Copilot · Windsurf | copied files | not yet |
 
 "Not yet" means the skills directory for that assistant comes from its
-documentation and has not been confirmed by a verification run of our own
-(REPLY-51268): the install works, but we cannot promise the assistant reads
-from where we put the files. Those hosts are marked `(paths not yet verified)`
+documentation and has not been confirmed by a verification run of our own: the
+install works, but we cannot promise the assistant reads from where we put the
+files. Those hosts are marked `(paths not yet verified)`
 in the report and carry `"verified": false` in `--json`.
 
 Installing skills is not the same as connecting Reply: `reply-adapter` needs a

src/auth/oauth-flow.ts

@@ -12,7 +12,7 @@ import {
 } from './token';
 import type {Oauth_record} from '../credentials/types';
 
-// Public PKCE client registered in IdentityServer (REPLY-51291 / REPLY-50627).
+// Public PKCE client registered in IdentityServer.
 const CLIENT_ID = 'Reply.Cli';
 const SCOPE = 'openid profile email reply-web-api offline_access';
 const DEFAULT_TIMEOUT_MS = 300_000;   // 5 minutes to complete the browser step

src/skills/hosts.ts

@@ -4,7 +4,7 @@ import type {Host_cli, Host_def} from './types';
 
 // One entry per assistant. Adding a host is a data change plus a verification
 // run — never a branch inside an adapter. `verified: false` means the paths come
-// from documentation we have not confirmed by installing (see REPLY-51268).
+// from documentation we have not confirmed by installing ourselves.
 //
 // {home} in binary_paths is expanded by detect.ts; a leading '~/' is not used
 // so the strings stay platform-agnostic.

src/skills/report.ts

@@ -61,7 +61,7 @@ const host_line = (host: Host_outcome, report_action: Operation): string=>{
     const mark = host.status === 'ok' ? pc.green('✓') : pc.yellow('⚠');
     // A confident tick on a host whose skills directory we have never
     // confirmed the assistant reads from would overstate what we know
-    // (REPLY-51268). Only said where a claim is actually being made.
+    // Only said where a claim is actually being made.
     const note = host.verified === false ? pc.dim(' (paths not yet verified)') : '';
     return `${mark} ${label}· ${parts.join('; ')}${note}`;
 };

src/skills/types.ts

@@ -89,7 +89,7 @@ type Host_outcome = {
     commit?: string;
     // Mirrors Host_def.verified: false means this assistant's paths come from
     // its documentation and have not been confirmed by a verification run of
-    // our own (REPLY-51268). Stamped by the orchestrator for every host it
+    // our own. Stamped by the orchestrator for every host it
     // reports, so no adapter can forget it and a --json consumer can tell a
     // confirmed success from an unconfirmed one.
     verified?: boolean;

src/utils/client.ts

@@ -80,7 +80,7 @@ const request = async<T = unknown>(
     const headers: Record<string, string> = {
         'Authorization': `Bearer ${token}`,
         'Content-Type': 'application/json',
-        'User-Agent': user_agent(),   // identifies CLI traffic for telemetry (REPLY-51325)
+        'User-Agent': user_agent(),   // identifies CLI traffic for telemetry
         ...(opts.headers ?? {}),
     };
     const init: RequestInit = {method, headers};