@akanjs/cli 2.3.9-rc.8 → 2.3.9-rc.9

package/incrementalBuilder.proc.js

@@ -4799,6 +4799,11 @@ var compactDiagnostics = (diagnostics) => diagnostics.filter((diagnostic) => !!d
 
 // pkgs/@akanjs/devkit/workflow/artifacts.ts
 var sourceChangeBlocked = (diagnostics) => diagnostics.some((diagnostic) => diagnostic.severity === "error" && (diagnostic.failureScope === "source-change" || !diagnostic.failureScope || diagnostic.failureScope === "unknown"));
+var workflowPlanApproval = {
+  required: true,
+  meaning: "Review this read-only plan before apply_workflow mutates files.",
+  applyTool: "apply_workflow"
+};
 var inferNextActionCode = (action, diagnostics) => {
   if (action.action)
     return action.action;
@@ -4843,13 +4848,19 @@ var createWorkflowApplyReport = ({
     });
   }
   const orderedNextActions = uniqueBy(nextActionsWithIntent, (action) => action.command).sort((left, right) => nextActionPriority(left, diagnostics) - nextActionPriority(right, diagnostics));
+  const sourceFilesChanged = uniqueBy(changedFiles, (file) => `${file.action}:${file.path}:${file.reason}`);
+  const generatedFilesSynced = uniqueBy(generatedFiles, (file) => `${file.action}:${file.path}:${file.reason}`);
   return {
     schemaVersion: 1,
     workflow,
     mode,
     status: workflowStatus(diagnostics),
-    changedFiles: uniqueBy(changedFiles, (file) => `${file.action}:${file.path}:${file.reason}`),
-    generatedFiles: uniqueBy(generatedFiles, (file) => `${file.action}:${file.path}:${file.reason}`),
+    summary: {
+      sourceFilesChanged,
+      generatedFilesSynced
+    },
+    changedFiles: sourceFilesChanged,
+    generatedFiles: generatedFilesSynced,
     appliedCommands: uniqueBy(appliedCommands, (command) => command.command),
     recommendedValidationCommands: uniqueBy(validationCommands, (command) => command.command),
     commands: uniqueBy(validationCommands, (command) => command.command),
@@ -4927,6 +4938,52 @@ var statusForValidationKind = (commands, kind) => {
     return "unknown";
   return matching.some((command) => command.status === "failed") ? "failed" : "passed";
 };
+var statusForCommands = (commands) => {
+  if (commands.length === 0)
+    return "unknown";
+  return commandStatus(commands) === "failed" ? "failed" : "passed";
+};
+var statusForDiagnostics = (diagnostics) => {
+  if (diagnostics.length === 0)
+    return "unknown";
+  return workflowStatus(diagnostics) === "failed" ? "failed" : "passed";
+};
+var workflowDiagnosticContextPaths = (diagnostics) => uniqueBy(diagnostics.flatMap((diagnostic) => diagnostic.context?.paths ?? []), (filePath) => filePath);
+var createWorkflowBaselineSummary = (diagnostics, { detailsIncluded = true, knownBlockerCount = 0 } = {}) => {
+  const grouped = new Map;
+  let totalErrors = 0;
+  let totalWarnings = 0;
+  for (const diagnostic of diagnostics) {
+    if (diagnostic.severity === "error")
+      totalErrors += 1;
+    else
+      totalWarnings += 1;
+    const existing = grouped.get(diagnostic.code);
+    if (existing) {
+      existing.count += 1;
+      if (existing.severity !== diagnostic.severity)
+        existing.severity = "mixed";
+    } else {
+      grouped.set(diagnostic.code, {
+        code: diagnostic.code,
+        severity: diagnostic.severity,
+        count: 1,
+        sampleMessage: diagnostic.message
+      });
+    }
+  }
+  const contextPaths = workflowDiagnosticContextPaths(diagnostics);
+  return {
+    status: totalErrors > 0 ? "failed" : diagnostics.length > 0 ? "passed" : "unknown",
+    total: diagnostics.length,
+    totalErrors,
+    totalWarnings,
+    detailsIncluded,
+    knownBlockerCount,
+    byCode: [...grouped.values()],
+    ...contextPaths.length ? { contextPaths } : {}
+  };
+};
 var createKnownBlockers = (commands, diagnostics) => {
   const commandBlockers = commands.filter((command) => command.status === "failed" && (command.failureScope === "workspace-config" || command.failureScope === "environment")).map((command) => ({
     code: `workflow-validation-${command.failureScope}`,
@@ -4955,18 +5012,28 @@ var createKnownBlockers = (commands, diagnostics) => {
   }
   return [...grouped.values()];
 };
-var createValidationStatuses = (commands, diagnostics) => {
+var createValidationStatuses = (commands, reportDiagnostics, baselineDiagnostics, workflowDiagnostics) => {
+  const diagnostics = [...reportDiagnostics, ...baselineDiagnostics, ...workflowDiagnostics];
   const scopes = [...failedCommandScopes(commands), ...errorDiagnosticScopes(diagnostics)];
-  const sourceStatus = statusForScope(commands, diagnostics, scopes, "source-change");
+  const sourceDiagnostics = [...reportDiagnostics, ...workflowDiagnostics].filter((diagnostic) => diagnostic.failureScope === "source-change" || diagnostic.scope === "workflow" || !diagnostic.failureScope && diagnostic.scope !== "baseline");
+  const sourceScopes = [...failedCommandScopes(commands), ...errorDiagnosticScopes(sourceDiagnostics)];
+  const sourceStatus = statusForScope(commands, sourceDiagnostics, sourceScopes, "source-change");
+  const validationCommandsStatus = statusForCommands(commands);
+  const baselineStatus = statusForDiagnostics(baselineDiagnostics);
+  const nonBaselineDiagnostics = [...reportDiagnostics, ...workflowDiagnostics];
   const workspaceStatus = hasScopeFailure(scopes, "workspace-config", diagnostics) || hasScopeFailure(scopes, "environment", diagnostics) ? "failed" : commands.length || diagnostics.length ? "passed" : "unknown";
-  const overallStatus = hasScopeFailure(scopes, "source-change", diagnostics) ? "failed" : hasScopeFailure(scopes, "workspace-config", diagnostics) ? "blocked-by-workspace-config" : hasScopeFailure(scopes, "environment", diagnostics) ? "blocked-by-environment" : workflowStatus(diagnostics) === "failed" || commandStatus(commands) === "failed" ? "failed" : "passed";
+  const overallStatus = hasScopeFailure(scopes, "source-change", diagnostics) ? "failed" : validationCommandsStatus === "passed" && baselineStatus === "failed" && workflowStatus(nonBaselineDiagnostics) !== "failed" ? "passed-with-baseline-blockers" : hasScopeFailure(scopes, "workspace-config", diagnostics) ? "blocked-by-workspace-config" : hasScopeFailure(scopes, "environment", diagnostics) ? "blocked-by-environment" : workflowStatus(diagnostics) === "failed" || commandStatus(commands) === "failed" ? "failed" : "passed";
   return {
     sourceStatus,
     workspaceStatus,
+    validationCommandsStatus,
+    baselineStatus,
     overallStatus,
     summary: {
       sourceChange: sourceStatus,
       generatedSync: statusForValidationKind(commands, "sync"),
+      validationCommands: validationCommandsStatus,
+      baseline: baselineStatus,
       workspaceConfig: statusForScope(commands, diagnostics, scopes, "workspace-config"),
       environment: statusForScope(commands, diagnostics, scopes, "environment")
     }
@@ -5000,7 +5067,8 @@ var createWorkflowValidationRunReport = async ({
   ] : []);
   const reportDiagnostics = [...diagnostics, ...commandDiagnostics];
   const scopedDiagnostics = [...reportDiagnostics, ...baselineDiagnostics, ...workflowDiagnostics];
-  const statuses = createValidationStatuses(results, scopedDiagnostics);
+  const knownBlockers = createKnownBlockers(results, scopedDiagnostics);
+  const statuses = createValidationStatuses(results, reportDiagnostics, baselineDiagnostics, workflowDiagnostics);
   return {
     schemaVersion: 1,
     runId,
@@ -5009,9 +5077,12 @@ var createWorkflowValidationRunReport = async ({
     source,
     status: statuses.overallStatus === "passed" ? "passed" : "failed",
     ...statuses,
-    knownBlockers: createKnownBlockers(results, scopedDiagnostics),
+    knownBlockers,
     commands: results,
     diagnostics: reportDiagnostics,
+    baselineSummary: createWorkflowBaselineSummary(baselineDiagnostics, {
+      knownBlockerCount: knownBlockers.filter((blocker) => blocker.failureScope === "workspace-config").length
+    }),
     baselineDiagnostics,
     workflowDiagnostics,
     repairActions: uniqueBy(repairActions, (action) => action.command),
@@ -6327,7 +6398,7 @@ var checkTypeScriptSyntax = async (workspace, filePath) => {
     return null;
   const content = await workspace.readFile(filePath);
   const source = ts6.createSourceFile(filePath, content, ts6.ScriptTarget.Latest, true, scriptKind);
-  const diagnostic = source.parseDiagnostics[0];
+  const diagnostic = (source.parseDiagnostics ?? [])[0];
   if (!diagnostic)
     return null;
   const position = diagnostic.file?.getLineAndCharacterOfPosition(diagnostic.start ?? 0);
@@ -6525,9 +6596,9 @@ var addFieldUiSurfaceInspection = (plan) => {
         code: "add-field-ui-surface-review",
         kind: "manual-action",
         target,
-        action: templateRequested ? `Template was requested for ${field}. If no Template file changed, auto-edit was skipped because the file was missing, the generated ${module}Form/Layout.Template pattern was not found, or ${policy.component} needs option binding. Candidate position: inside Layout.Template near the existing Field components.` : `Template was not selected, so UI files are intentionally left unchanged. Candidate positions if you expose it later: Layout.Template field list for editing, Light${moduleClassName} projection for list/card data, and Unit/View card sections for display.`,
+        action: templateRequested ? `Template was requested for ${field}. If no Template file changed, users will not see the field in the form yet because the file was missing, the generated ${module}Form/Layout.Template pattern was not found, or ${policy.component} needs option binding. Add it inside Layout.Template near existing Field components.` : `Template was not selected, so users will not see ${field} in the form from this apply. If list/card display is needed, include ${field} in Light${moduleClassName} projection data and place it in the local Unit/View card layout.`,
         confidence: "medium",
-        message: `Review UI surfaces for ${module}.${field}; recommended component is ${policy.component}, with manual reasons and candidate positions in action.`
+        message: `Review user-visible UI for ${module}.${field}; recommended component is ${policy.component}.`
       }
     ],
     nextActions: [
@@ -6782,10 +6853,48 @@ var createAddFieldDefaultRecommendations = (inputs) => {
       kind: "manual-action",
       confidence: "high",
       message: `Default for ${field} will be normalized to ${coercion.normalizedType} literal ${coercion.expression}.`,
-      action: "Review the normalized default in the apply report if this value should stay unset."
+      action: "Review the normalized default in the apply report. To leave the field without a default, omit the default input."
     }
   ];
 };
+var moneyLikeFieldPattern = /(budget|price|amount|cost|rate|fee|salary|balance)/i;
+var wholeNumberFieldPattern = /(count|quantity|total|number|index|rank|order|age)/i;
+var createAddFieldInputRecommendations = (inputs) => {
+  const field = typeof inputs.field === "string" ? inputs.field : "<field>";
+  const typeName = typeof inputs.type === "string" ? inputs.type : null;
+  const recommendations = [];
+  if (!typeName)
+    return recommendations;
+  if (typeName.toLowerCase() === "number" || typeName.toLowerCase() === "numeric") {
+    const recommendedType = moneyLikeFieldPattern.test(field) ? "Float" : wholeNumberFieldPattern.test(field) ? "Int" : null;
+    recommendations.push({
+      code: "add-field-type-choice",
+      kind: "input-guidance",
+      confidence: recommendedType ? "high" : "medium",
+      message: recommendedType ? `Use ${recommendedType} for ${field}; Float is recommended for money-like decimal values and Int for whole-number values.` : `Choose Int for whole-number ${field} values or Float for decimal ${field} values.`,
+      action: recommendedType ? `Re-run plan_workflow with type="${recommendedType}".` : 'Re-run plan_workflow with type="Int" or type="Float".'
+    });
+  }
+  if (typeName.toLowerCase() === "enum" && !Array.isArray(inputs.values)) {
+    recommendations.push({
+      code: "add-field-enum-values",
+      kind: "input-guidance",
+      confidence: "high",
+      message: `Enum field ${field} needs values before apply can choose valid dictionary and default behavior.`,
+      action: 'Pass values as an array or comma-separated string, for example values=["draft","done"].'
+    });
+  }
+  if (inputs.default === undefined) {
+    recommendations.push({
+      code: "add-field-default-optional",
+      kind: "input-guidance",
+      confidence: "medium",
+      message: `No default will be written for ${field} because default is omitted.`,
+      action: "Keep default omitted when the field should have no default value."
+    });
+  }
+  return recommendations;
+};
 var createAddFieldRecommendations = (inputs) => {
   const app = typeof inputs.app === "string" ? inputs.app : "<app-or-lib>";
   const module = typeof inputs.module === "string" ? inputs.module : "<module>";
@@ -6846,9 +6955,9 @@ var createAddFieldRecommendations = (inputs) => {
         code: "add-field-light-projection-choice",
         kind: "manual-action",
         target: paths.constant,
-        action: `Pass includeInLight=true when ${field} should appear in Light${capitalize2(module)} list/card projections.`,
+        action: `Pass includeInLight=true when users should see ${field} in list/card data. Without it, the field can exist on ${capitalize2(module)}Input but stay absent from Light${capitalize2(module)} projections.`,
         confidence: "medium",
-        message: `Light projection exposure for ${module}.${field} is not selected yet.`
+        message: `${module}.${field} is not selected for list/card projection data.`
       }
     ] : [],
     ...includeInLight ? [
@@ -6866,18 +6975,20 @@ var createAddFieldRecommendations = (inputs) => {
         kind: "manual-action",
         target: paths.template,
         confidence: "medium",
-        message: `Template is not included in surfaces, so ${module}.${field} will not be auto-rendered there.`
+        message: `Template form auto-edit is skipped for ${module}.${field} because surfaces does not include "template".`,
+        action: `Pass surfaces=["template"] when users should enter ${field} in the Template form.`
       }
     ] : [],
     {
       code: "add-field-ui-manual-review",
       kind: "manual-action",
       target: paths.template,
-      action: `Review ${app}:${module} UI after apply. Template auto-edit requires a generated ${module}Form hook and Layout.Template field list; Unit/View are not auto-edited because list/card placement depends on local layout. Candidate positions: Layout.Template before the closing tag, Light${capitalize2(module)} projection array for list data, and Unit/View card sections for display.`,
+      action: `After apply, verify what users can see: Template form auto-edit only runs when a generated ${module}Form hook and Layout.Template field list are present. Unit/View cards are not auto-edited, so ${field} may be stored on ${capitalize2(module)} but not shown in list/card UI until you place it in the local card layout.`,
       confidence: "medium",
-      message: "UI manual review includes the reason auto-edit may be skipped and candidate insertion positions."
+      message: `${app}:${module}.${field} may need UI review for user-visible Template, Unit, and View behavior.`
     },
-    ...createAddFieldDefaultRecommendations(inputs)
+    ...createAddFieldDefaultRecommendations(inputs),
+    ...createAddFieldInputRecommendations(inputs)
   ];
 };
 var createWorkflowPlanPredictedChanges = (spec, inputs) => {
@@ -7020,7 +7131,8 @@ var createWorkflowPlan = (spec, rawInputs) => {
     validation: spec.validation,
     diagnostics,
     recommendations: createWorkflowPlanRecommendations(spec, inputs),
-    requiresApproval: true
+    requiresApproval: true,
+    approval: workflowPlanApproval
   };
 };
 // pkgs/@akanjs/devkit/workflow/render.ts
@@ -7058,6 +7170,7 @@ var renderWorkflowPlan = (plan) => [
   "",
   `- Mode: ${plan.mode}`,
   `- Requires approval: ${plan.requiresApproval}`,
+  `- Approval: ${plan.approval?.meaning ?? "Review this read-only plan before applying workflow mutations."}`,
   "",
   "## Inputs",
   ...Object.entries(plan.inputs).map(([name, value]) => `- \`${name}\`: ${Array.isArray(value) ? value.join(", ") : value}`),
@@ -7094,6 +7207,10 @@ var renderDiagnostic = (diagnostic) => `- [${diagnostic.severity}] ${diagnostic.
 var renderNextAction = (action) => `- \`${action.command}\`: ${action.reason}`;
 var applySourceStatus = (report) => report.diagnostics.some((diagnostic) => diagnostic.severity === "error" && (diagnostic.failureScope === "source-change" || !diagnostic.failureScope || diagnostic.failureScope === "unknown")) ? "failed" : "passed";
 var renderWorkflowApplyReport = (report) => {
+  const applySummary = {
+    sourceFilesChanged: report.summary?.sourceFilesChanged ?? report.changedFiles,
+    generatedFilesSynced: report.summary?.generatedFilesSynced ?? report.generatedFiles
+  };
   const manualReviewItems = [
     ...report.diagnostics.filter((diagnostic) => diagnostic.severity === "warning").map(renderDiagnostic),
     ...report.recommendations.filter((recommendation) => recommendation.kind === "manual-action").map(renderRecommendation)
@@ -7107,6 +7224,8 @@ var renderWorkflowApplyReport = (report) => {
     `- Status: ${report.status}`,
     `- Source-change status: ${applySourceStatus(report)}`,
     `- Workspace status: ${validationBlockers.length ? "blocked" : "not blocked during apply"}`,
+    `- Source files changed: ${applySummary.sourceFilesChanged.length}`,
+    `- Generated files queued for sync: ${applySummary.generatedFilesSynced.length}`,
     ...report.validationTarget ? [`- Validation target: ${report.validationTarget}`] : [],
     "",
     "## Apply Checks",
@@ -7116,10 +7235,10 @@ var renderWorkflowApplyReport = (report) => {
     ...sourceBlockers.length ? sourceBlockers : ["- none"],
     "",
     "## Automatically Modified",
-    ...report.changedFiles.length ? report.changedFiles.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
+    ...applySummary.sourceFilesChanged.length ? applySummary.sourceFilesChanged.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
     "",
     "## Generated Sync",
-    ...report.generatedFiles.length ? report.generatedFiles.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
+    ...applySummary.generatedFilesSynced.length ? applySummary.generatedFilesSynced.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
     "",
     "## Applied Commands",
     ...report.appliedCommands.length ? report.appliedCommands.map((command) => `- \`${command.command}\`: ${command.reason}`) : ["- none"],
@@ -7146,52 +7265,76 @@ var renderWorkflowApplyReport = (report) => {
 `);
 };
 var renderWorkflowApply = (report, format = "markdown") => format === "json" ? jsonText(report) : renderWorkflowApplyReport(report);
-var renderWorkflowValidationRunReport = (report) => [
-  `# Workflow Validation: ${report.workflow}`,
-  "",
-  `- Run: ${report.runId}`,
-  `- Status: ${report.status}`,
-  `- Source status: ${report.sourceStatus}`,
-  `- Workspace status: ${report.workspaceStatus}`,
-  `- Overall status: ${report.overallStatus}`,
-  "",
-  "## Status Summary",
-  `- Source-change: ${report.summary.sourceChange}`,
-  `- Generated sync: ${report.summary.generatedSync}`,
-  `- Workspace config: ${report.summary.workspaceConfig}`,
-  `- Environment: ${report.summary.environment}`,
-  "",
-  "## Source Change Diagnostics",
-  ...report.workflowDiagnostics?.length ? report.workflowDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
-  "",
-  "## Existing Workspace Blockers",
-  ...report.baselineDiagnostics?.length ? report.baselineDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
-  "",
-  "## Known Blockers",
-  ...report.knownBlockers.length ? report.knownBlockers.map((blocker) => {
-    const command = blocker.command ? ` \`${blocker.command}\`` : "";
-    const count = blocker.count > 1 ? ` (${blocker.count}x)` : "";
-    const known = blocker.known ? " known" : "";
-    return `- [${blocker.failureScope}${known}]${command}${count}: ${blocker.message}`;
-  }) : ["- none"],
-  "",
-  "## Commands",
-  ...report.commands.length ? report.commands.map((command) => {
-    const scope = command.failureScope ? ` (${command.failureScope})` : "";
-    return `- [${command.status}] \`${command.command}\`${scope}: ${command.reason}`;
-  }) : ["- none"],
-  "",
-  "## Diagnostics",
-  ...report.diagnostics.length ? report.diagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
-  "",
-  "## Repair Actions",
-  ...report.repairActions.length ? report.repairActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
-  "",
-  "## Next Actions",
-  ...report.nextActions.length ? report.nextActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
-  ""
-].join(`
+var renderWorkflowValidationRunReport = (report) => {
+  const baselineSummary = report.baselineSummary ?? {
+    status: report.baselineDiagnostics?.some((diagnostic) => diagnostic.severity === "error") ? "failed" : "unknown",
+    total: report.baselineDiagnostics?.length ?? 0,
+    totalErrors: report.baselineDiagnostics?.filter((diagnostic) => diagnostic.severity === "error").length ?? 0,
+    totalWarnings: report.baselineDiagnostics?.filter((diagnostic) => diagnostic.severity === "warning").length ?? 0,
+    detailsIncluded: true,
+    knownBlockerCount: report.knownBlockers.filter((blocker) => blocker.known).length,
+    byCode: []
+  };
+  return [
+    `# Workflow Validation: ${report.workflow}`,
+    "",
+    `- Run: ${report.runId}`,
+    `- Status: ${report.status}`,
+    `- Source status: ${report.sourceStatus}`,
+    `- Workspace status: ${report.workspaceStatus}`,
+    `- Validation commands status: ${report.validationCommandsStatus ?? "unknown"}`,
+    `- Baseline status: ${report.baselineStatus ?? baselineSummary.status}`,
+    `- Overall status: ${report.overallStatus}`,
+    "",
+    "## Status Summary",
+    `- Source-change: ${report.summary.sourceChange}`,
+    `- Generated sync: ${report.summary.generatedSync}`,
+    `- Validation commands: ${report.summary.validationCommands ?? "unknown"}`,
+    `- Baseline: ${report.summary.baseline ?? baselineSummary.status}`,
+    `- Workspace config: ${report.summary.workspaceConfig}`,
+    `- Environment: ${report.summary.environment}`,
+    "",
+    "## Source Change Diagnostics",
+    ...report.workflowDiagnostics?.length ? report.workflowDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
+    "",
+    "## Existing Workspace Blockers",
+    `- Status: ${baselineSummary.status}`,
+    `- Errors: ${baselineSummary.totalErrors}`,
+    `- Warnings: ${baselineSummary.totalWarnings}`,
+    ...baselineSummary.byCode.length ? baselineSummary.byCode.map((item) => `- [${item.severity}] ${item.code} (${item.count}x): ${item.sampleMessage}`) : ["- none"],
+    ...baselineSummary.detailsIncluded ? [] : [
+      "- Baseline details are summarized by default. Re-run validation with includeBaselineDetails=true for full baselineDiagnostics."
+    ],
+    "",
+    "## Existing Workspace Blocker Details",
+    ...report.baselineDiagnostics?.length ? report.baselineDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : baselineSummary.detailsIncluded ? ["- none"] : ["- omitted"],
+    "",
+    "## Known Blockers",
+    ...report.knownBlockers.length ? report.knownBlockers.map((blocker) => {
+      const command = blocker.command ? ` \`${blocker.command}\`` : "";
+      const count = blocker.count > 1 ? ` (${blocker.count}x)` : "";
+      const known = blocker.known ? " known" : "";
+      return `- [${blocker.failureScope}${known}]${command}${count}: ${blocker.message}`;
+    }) : ["- none"],
+    "",
+    "## Commands",
+    ...report.commands.length ? report.commands.map((command) => {
+      const scope = command.failureScope ? ` (${command.failureScope})` : "";
+      return `- [${command.status}] \`${command.command}\`${scope}: ${command.reason}`;
+    }) : ["- none"],
+    "",
+    "## Diagnostics",
+    ...report.diagnostics.length ? report.diagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
+    "",
+    "## Repair Actions",
+    ...report.repairActions.length ? report.repairActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
+    "",
+    "## Next Actions",
+    ...report.nextActions.length ? report.nextActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
+    ""
+  ].join(`
 `);
+};
 var renderWorkflowValidation = (report, format = "markdown") => format === "json" ? jsonText(report) : renderWorkflowValidationRunReport(report);
 var renderRepairReportMarkdown = (report) => [
   `# Akan Repair: ${report.kind}`,
@@ -7280,7 +7423,11 @@ var toolingRolloutGate = {
   candidates: toolingRolloutCandidates
 };
 var isRestrictedCandidate = (candidate) => candidate.status !== "allowed";
-var restrictedCandidates = new Map(toolingRolloutCandidates.filter(isRestrictedCandidate).map((candidate) => [candidate.packageName, candidate]));
+var restrictedCandidates = new Map;
+for (const candidate of toolingRolloutCandidates) {
+  if (isRestrictedCandidate(candidate))
+    restrictedCandidates.set(candidate.packageName, candidate);
+}
 // pkgs/@akanjs/devkit/akanContext.ts
 var resourceList = [
   { uri: "akan://docs/framework", name: "Akan framework guide", mimeType: "text/markdown" },
@@ -7849,6 +7996,7 @@ var applyFirstPolicy = {
   mode: "apply-first",
   directSourceEdits: "fallback-only",
   applyRequiredWhen: ["plan_workflow returns planPath", "plan_workflow returns next.tool=apply_workflow"],
+  approvalMeaning: "requiresApproval is an agent/user review signal before apply_workflow mutates files; it is not a separate MCP permission gate.",
   validationRequiredAfterApply: ["validationTarget", "applyReportPath"],
   fallbackAllowedWhen: [
     "list_workflows and explain_workflow show no matching workflow",
@@ -7984,7 +8132,12 @@ var readonlyMcpTools = [
     description: "Report workspace diagnostics, optionally split into baseline and workflow scopes.",
     inputSchema: {
       type: "object",
-      properties: { strict: booleanProperty, runIdOrPlan: stringProperty, changedFiles: stringArrayProperty }
+      properties: {
+        strict: booleanProperty,
+        runIdOrPlan: stringProperty,
+        changedFiles: stringArrayProperty,
+        includeBaselineDetails: booleanProperty
+      }
     }
   },
   {
@@ -8029,7 +8182,7 @@ var applyMcpTools = [
     description: "Validate a plan, apply report, validationTarget, or run artifact.",
     inputSchema: {
       type: "object",
-      properties: { runIdOrPlan: stringProperty },
+      properties: { runIdOrPlan: stringProperty, includeBaselineDetails: booleanProperty },
       required: ["runIdOrPlan"]
     }
   },
@@ -8079,7 +8232,16 @@ var createAkanValidationContract = (listTools = listAkanMcpTools) => ({
   validationStatuses: {
     sourceStatus: ["passed", "failed", "unknown"],
     workspaceStatus: ["passed", "failed", "unknown"],
-    overallStatus: ["passed", "failed", "blocked-by-workspace-config", "blocked-by-environment"],
+    validationCommandsStatus: ["passed", "failed", "unknown"],
+    baselineStatus: ["passed", "failed", "unknown"],
+    overallStatus: [
+      "passed",
+      "failed",
+      "passed-with-baseline-blockers",
+      "blocked-by-workspace-config",
+      "blocked-by-environment"
+    ],
+    baselineSummary: "Default MCP validation output summarizes baseline diagnostics; pass includeBaselineDetails=true for full baselineDiagnostics.",
     knownBlockers: "Repeated workspace-config/environment failures are summarized before command output."
   },
   moduleContextInputs: {
@@ -8090,6 +8252,7 @@ var createAkanValidationContract = (listTools = listAkanMcpTools) => ({
   toolingRolloutGate,
   directEditFallbackPolicy: applyFirstPolicy,
   applyReportFields: [
+    "summary",
     "appliedCommands",
     "recommendedValidationCommands",
     "commands",
@@ -8131,7 +8294,14 @@ var inspectAkanContext = async (workspace, args) => {
       strict: true,
       runIdOrPlan: workspacePath(workspace, props.request.runIdOrPlan)
     });
-    diagnostics.push(...doctor.diagnostics.map((diagnostic) => ({
+    const baselineSummary = createWorkflowBaselineSummary((doctor.baselineDiagnostics ?? []).map((diagnostic) => ({
+      severity: diagnostic.severity,
+      code: diagnostic.code,
+      message: diagnostic.message,
+      scope: diagnostic.scope,
+      context: diagnostic.context
+    })), { detailsIncluded: false });
+    diagnostics.push(...(doctor.workflowDiagnostics ?? doctor.diagnostics).map((diagnostic) => ({
       severity: diagnostic.severity,
       code: diagnostic.code,
       message: diagnostic.message,
@@ -8152,7 +8322,8 @@ var inspectAkanContext = async (workspace, args) => {
       reason: doctor.status === "passed" ? "No strict workspace diagnostics were found for the workflow context." : "Review diagnostics before applying or manually editing source files."
     }, {
       status: doctor.status,
-      baselineDiagnostics: doctor.baselineDiagnostics?.length ?? 0,
+      baselineSummary,
+      baselineDiagnostics: 0,
       workflowDiagnostics: doctor.workflowDiagnostics?.length ?? 0
     });
   }

package/index.js

@@ -4797,6 +4797,11 @@ var compactDiagnostics = (diagnostics) => diagnostics.filter((diagnostic) => !!d
 
 // pkgs/@akanjs/devkit/workflow/artifacts.ts
 var sourceChangeBlocked = (diagnostics) => diagnostics.some((diagnostic) => diagnostic.severity === "error" && (diagnostic.failureScope === "source-change" || !diagnostic.failureScope || diagnostic.failureScope === "unknown"));
+var workflowPlanApproval = {
+  required: true,
+  meaning: "Review this read-only plan before apply_workflow mutates files.",
+  applyTool: "apply_workflow"
+};
 var inferNextActionCode = (action, diagnostics) => {
   if (action.action)
     return action.action;
@@ -4841,13 +4846,19 @@ var createWorkflowApplyReport = ({
     });
   }
   const orderedNextActions = uniqueBy(nextActionsWithIntent, (action) => action.command).sort((left, right) => nextActionPriority(left, diagnostics) - nextActionPriority(right, diagnostics));
+  const sourceFilesChanged = uniqueBy(changedFiles, (file) => `${file.action}:${file.path}:${file.reason}`);
+  const generatedFilesSynced = uniqueBy(generatedFiles, (file) => `${file.action}:${file.path}:${file.reason}`);
   return {
     schemaVersion: 1,
     workflow,
     mode,
     status: workflowStatus(diagnostics),
-    changedFiles: uniqueBy(changedFiles, (file) => `${file.action}:${file.path}:${file.reason}`),
-    generatedFiles: uniqueBy(generatedFiles, (file) => `${file.action}:${file.path}:${file.reason}`),
+    summary: {
+      sourceFilesChanged,
+      generatedFilesSynced
+    },
+    changedFiles: sourceFilesChanged,
+    generatedFiles: generatedFilesSynced,
     appliedCommands: uniqueBy(appliedCommands, (command) => command.command),
     recommendedValidationCommands: uniqueBy(validationCommands, (command) => command.command),
     commands: uniqueBy(validationCommands, (command) => command.command),
@@ -4925,6 +4936,52 @@ var statusForValidationKind = (commands, kind) => {
     return "unknown";
   return matching.some((command) => command.status === "failed") ? "failed" : "passed";
 };
+var statusForCommands = (commands) => {
+  if (commands.length === 0)
+    return "unknown";
+  return commandStatus(commands) === "failed" ? "failed" : "passed";
+};
+var statusForDiagnostics = (diagnostics) => {
+  if (diagnostics.length === 0)
+    return "unknown";
+  return workflowStatus(diagnostics) === "failed" ? "failed" : "passed";
+};
+var workflowDiagnosticContextPaths = (diagnostics) => uniqueBy(diagnostics.flatMap((diagnostic) => diagnostic.context?.paths ?? []), (filePath) => filePath);
+var createWorkflowBaselineSummary = (diagnostics, { detailsIncluded = true, knownBlockerCount = 0 } = {}) => {
+  const grouped = new Map;
+  let totalErrors = 0;
+  let totalWarnings = 0;
+  for (const diagnostic of diagnostics) {
+    if (diagnostic.severity === "error")
+      totalErrors += 1;
+    else
+      totalWarnings += 1;
+    const existing = grouped.get(diagnostic.code);
+    if (existing) {
+      existing.count += 1;
+      if (existing.severity !== diagnostic.severity)
+        existing.severity = "mixed";
+    } else {
+      grouped.set(diagnostic.code, {
+        code: diagnostic.code,
+        severity: diagnostic.severity,
+        count: 1,
+        sampleMessage: diagnostic.message
+      });
+    }
+  }
+  const contextPaths = workflowDiagnosticContextPaths(diagnostics);
+  return {
+    status: totalErrors > 0 ? "failed" : diagnostics.length > 0 ? "passed" : "unknown",
+    total: diagnostics.length,
+    totalErrors,
+    totalWarnings,
+    detailsIncluded,
+    knownBlockerCount,
+    byCode: [...grouped.values()],
+    ...contextPaths.length ? { contextPaths } : {}
+  };
+};
 var createKnownBlockers = (commands, diagnostics) => {
   const commandBlockers = commands.filter((command) => command.status === "failed" && (command.failureScope === "workspace-config" || command.failureScope === "environment")).map((command) => ({
     code: `workflow-validation-${command.failureScope}`,
@@ -4953,18 +5010,28 @@ var createKnownBlockers = (commands, diagnostics) => {
   }
   return [...grouped.values()];
 };
-var createValidationStatuses = (commands, diagnostics) => {
+var createValidationStatuses = (commands, reportDiagnostics, baselineDiagnostics, workflowDiagnostics) => {
+  const diagnostics = [...reportDiagnostics, ...baselineDiagnostics, ...workflowDiagnostics];
   const scopes = [...failedCommandScopes(commands), ...errorDiagnosticScopes(diagnostics)];
-  const sourceStatus = statusForScope(commands, diagnostics, scopes, "source-change");
+  const sourceDiagnostics = [...reportDiagnostics, ...workflowDiagnostics].filter((diagnostic) => diagnostic.failureScope === "source-change" || diagnostic.scope === "workflow" || !diagnostic.failureScope && diagnostic.scope !== "baseline");
+  const sourceScopes = [...failedCommandScopes(commands), ...errorDiagnosticScopes(sourceDiagnostics)];
+  const sourceStatus = statusForScope(commands, sourceDiagnostics, sourceScopes, "source-change");
+  const validationCommandsStatus = statusForCommands(commands);
+  const baselineStatus = statusForDiagnostics(baselineDiagnostics);
+  const nonBaselineDiagnostics = [...reportDiagnostics, ...workflowDiagnostics];
   const workspaceStatus = hasScopeFailure(scopes, "workspace-config", diagnostics) || hasScopeFailure(scopes, "environment", diagnostics) ? "failed" : commands.length || diagnostics.length ? "passed" : "unknown";
-  const overallStatus = hasScopeFailure(scopes, "source-change", diagnostics) ? "failed" : hasScopeFailure(scopes, "workspace-config", diagnostics) ? "blocked-by-workspace-config" : hasScopeFailure(scopes, "environment", diagnostics) ? "blocked-by-environment" : workflowStatus(diagnostics) === "failed" || commandStatus(commands) === "failed" ? "failed" : "passed";
+  const overallStatus = hasScopeFailure(scopes, "source-change", diagnostics) ? "failed" : validationCommandsStatus === "passed" && baselineStatus === "failed" && workflowStatus(nonBaselineDiagnostics) !== "failed" ? "passed-with-baseline-blockers" : hasScopeFailure(scopes, "workspace-config", diagnostics) ? "blocked-by-workspace-config" : hasScopeFailure(scopes, "environment", diagnostics) ? "blocked-by-environment" : workflowStatus(diagnostics) === "failed" || commandStatus(commands) === "failed" ? "failed" : "passed";
   return {
     sourceStatus,
     workspaceStatus,
+    validationCommandsStatus,
+    baselineStatus,
     overallStatus,
     summary: {
       sourceChange: sourceStatus,
       generatedSync: statusForValidationKind(commands, "sync"),
+      validationCommands: validationCommandsStatus,
+      baseline: baselineStatus,
       workspaceConfig: statusForScope(commands, diagnostics, scopes, "workspace-config"),
       environment: statusForScope(commands, diagnostics, scopes, "environment")
     }
@@ -4998,7 +5065,8 @@ var createWorkflowValidationRunReport = async ({
   ] : []);
   const reportDiagnostics = [...diagnostics, ...commandDiagnostics];
   const scopedDiagnostics = [...reportDiagnostics, ...baselineDiagnostics, ...workflowDiagnostics];
-  const statuses = createValidationStatuses(results, scopedDiagnostics);
+  const knownBlockers = createKnownBlockers(results, scopedDiagnostics);
+  const statuses = createValidationStatuses(results, reportDiagnostics, baselineDiagnostics, workflowDiagnostics);
   return {
     schemaVersion: 1,
     runId,
@@ -5007,9 +5075,12 @@ var createWorkflowValidationRunReport = async ({
     source,
     status: statuses.overallStatus === "passed" ? "passed" : "failed",
     ...statuses,
-    knownBlockers: createKnownBlockers(results, scopedDiagnostics),
+    knownBlockers,
     commands: results,
     diagnostics: reportDiagnostics,
+    baselineSummary: createWorkflowBaselineSummary(baselineDiagnostics, {
+      knownBlockerCount: knownBlockers.filter((blocker) => blocker.failureScope === "workspace-config").length
+    }),
     baselineDiagnostics,
     workflowDiagnostics,
     repairActions: uniqueBy(repairActions, (action) => action.command),
@@ -6325,7 +6396,7 @@ var checkTypeScriptSyntax = async (workspace, filePath) => {
     return null;
   const content = await workspace.readFile(filePath);
   const source = ts6.createSourceFile(filePath, content, ts6.ScriptTarget.Latest, true, scriptKind);
-  const diagnostic = source.parseDiagnostics[0];
+  const diagnostic = (source.parseDiagnostics ?? [])[0];
   if (!diagnostic)
     return null;
   const position = diagnostic.file?.getLineAndCharacterOfPosition(diagnostic.start ?? 0);
@@ -6523,9 +6594,9 @@ var addFieldUiSurfaceInspection = (plan) => {
         code: "add-field-ui-surface-review",
         kind: "manual-action",
         target,
-        action: templateRequested ? `Template was requested for ${field}. If no Template file changed, auto-edit was skipped because the file was missing, the generated ${module}Form/Layout.Template pattern was not found, or ${policy.component} needs option binding. Candidate position: inside Layout.Template near the existing Field components.` : `Template was not selected, so UI files are intentionally left unchanged. Candidate positions if you expose it later: Layout.Template field list for editing, Light${moduleClassName} projection for list/card data, and Unit/View card sections for display.`,
+        action: templateRequested ? `Template was requested for ${field}. If no Template file changed, users will not see the field in the form yet because the file was missing, the generated ${module}Form/Layout.Template pattern was not found, or ${policy.component} needs option binding. Add it inside Layout.Template near existing Field components.` : `Template was not selected, so users will not see ${field} in the form from this apply. If list/card display is needed, include ${field} in Light${moduleClassName} projection data and place it in the local Unit/View card layout.`,
         confidence: "medium",
-        message: `Review UI surfaces for ${module}.${field}; recommended component is ${policy.component}, with manual reasons and candidate positions in action.`
+        message: `Review user-visible UI for ${module}.${field}; recommended component is ${policy.component}.`
       }
     ],
     nextActions: [
@@ -6780,10 +6851,48 @@ var createAddFieldDefaultRecommendations = (inputs) => {
       kind: "manual-action",
       confidence: "high",
       message: `Default for ${field} will be normalized to ${coercion.normalizedType} literal ${coercion.expression}.`,
-      action: "Review the normalized default in the apply report if this value should stay unset."
+      action: "Review the normalized default in the apply report. To leave the field without a default, omit the default input."
     }
   ];
 };
+var moneyLikeFieldPattern = /(budget|price|amount|cost|rate|fee|salary|balance)/i;
+var wholeNumberFieldPattern = /(count|quantity|total|number|index|rank|order|age)/i;
+var createAddFieldInputRecommendations = (inputs) => {
+  const field = typeof inputs.field === "string" ? inputs.field : "<field>";
+  const typeName = typeof inputs.type === "string" ? inputs.type : null;
+  const recommendations = [];
+  if (!typeName)
+    return recommendations;
+  if (typeName.toLowerCase() === "number" || typeName.toLowerCase() === "numeric") {
+    const recommendedType = moneyLikeFieldPattern.test(field) ? "Float" : wholeNumberFieldPattern.test(field) ? "Int" : null;
+    recommendations.push({
+      code: "add-field-type-choice",
+      kind: "input-guidance",
+      confidence: recommendedType ? "high" : "medium",
+      message: recommendedType ? `Use ${recommendedType} for ${field}; Float is recommended for money-like decimal values and Int for whole-number values.` : `Choose Int for whole-number ${field} values or Float for decimal ${field} values.`,
+      action: recommendedType ? `Re-run plan_workflow with type="${recommendedType}".` : 'Re-run plan_workflow with type="Int" or type="Float".'
+    });
+  }
+  if (typeName.toLowerCase() === "enum" && !Array.isArray(inputs.values)) {
+    recommendations.push({
+      code: "add-field-enum-values",
+      kind: "input-guidance",
+      confidence: "high",
+      message: `Enum field ${field} needs values before apply can choose valid dictionary and default behavior.`,
+      action: 'Pass values as an array or comma-separated string, for example values=["draft","done"].'
+    });
+  }
+  if (inputs.default === undefined) {
+    recommendations.push({
+      code: "add-field-default-optional",
+      kind: "input-guidance",
+      confidence: "medium",
+      message: `No default will be written for ${field} because default is omitted.`,
+      action: "Keep default omitted when the field should have no default value."
+    });
+  }
+  return recommendations;
+};
 var createAddFieldRecommendations = (inputs) => {
   const app = typeof inputs.app === "string" ? inputs.app : "<app-or-lib>";
   const module = typeof inputs.module === "string" ? inputs.module : "<module>";
@@ -6844,9 +6953,9 @@ var createAddFieldRecommendations = (inputs) => {
         code: "add-field-light-projection-choice",
         kind: "manual-action",
         target: paths.constant,
-        action: `Pass includeInLight=true when ${field} should appear in Light${capitalize2(module)} list/card projections.`,
+        action: `Pass includeInLight=true when users should see ${field} in list/card data. Without it, the field can exist on ${capitalize2(module)}Input but stay absent from Light${capitalize2(module)} projections.`,
         confidence: "medium",
-        message: `Light projection exposure for ${module}.${field} is not selected yet.`
+        message: `${module}.${field} is not selected for list/card projection data.`
       }
     ] : [],
     ...includeInLight ? [
@@ -6864,18 +6973,20 @@ var createAddFieldRecommendations = (inputs) => {
         kind: "manual-action",
         target: paths.template,
         confidence: "medium",
-        message: `Template is not included in surfaces, so ${module}.${field} will not be auto-rendered there.`
+        message: `Template form auto-edit is skipped for ${module}.${field} because surfaces does not include "template".`,
+        action: `Pass surfaces=["template"] when users should enter ${field} in the Template form.`
       }
     ] : [],
     {
       code: "add-field-ui-manual-review",
       kind: "manual-action",
       target: paths.template,
-      action: `Review ${app}:${module} UI after apply. Template auto-edit requires a generated ${module}Form hook and Layout.Template field list; Unit/View are not auto-edited because list/card placement depends on local layout. Candidate positions: Layout.Template before the closing tag, Light${capitalize2(module)} projection array for list data, and Unit/View card sections for display.`,
+      action: `After apply, verify what users can see: Template form auto-edit only runs when a generated ${module}Form hook and Layout.Template field list are present. Unit/View cards are not auto-edited, so ${field} may be stored on ${capitalize2(module)} but not shown in list/card UI until you place it in the local card layout.`,
       confidence: "medium",
-      message: "UI manual review includes the reason auto-edit may be skipped and candidate insertion positions."
+      message: `${app}:${module}.${field} may need UI review for user-visible Template, Unit, and View behavior.`
     },
-    ...createAddFieldDefaultRecommendations(inputs)
+    ...createAddFieldDefaultRecommendations(inputs),
+    ...createAddFieldInputRecommendations(inputs)
   ];
 };
 var createWorkflowPlanPredictedChanges = (spec, inputs) => {
@@ -7018,7 +7129,8 @@ var createWorkflowPlan = (spec, rawInputs) => {
     validation: spec.validation,
     diagnostics,
     recommendations: createWorkflowPlanRecommendations(spec, inputs),
-    requiresApproval: true
+    requiresApproval: true,
+    approval: workflowPlanApproval
   };
 };
 // pkgs/@akanjs/devkit/workflow/render.ts
@@ -7056,6 +7168,7 @@ var renderWorkflowPlan = (plan) => [
   "",
   `- Mode: ${plan.mode}`,
   `- Requires approval: ${plan.requiresApproval}`,
+  `- Approval: ${plan.approval?.meaning ?? "Review this read-only plan before applying workflow mutations."}`,
   "",
   "## Inputs",
   ...Object.entries(plan.inputs).map(([name, value]) => `- \`${name}\`: ${Array.isArray(value) ? value.join(", ") : value}`),
@@ -7092,6 +7205,10 @@ var renderDiagnostic = (diagnostic) => `- [${diagnostic.severity}] ${diagnostic.
 var renderNextAction = (action) => `- \`${action.command}\`: ${action.reason}`;
 var applySourceStatus = (report) => report.diagnostics.some((diagnostic) => diagnostic.severity === "error" && (diagnostic.failureScope === "source-change" || !diagnostic.failureScope || diagnostic.failureScope === "unknown")) ? "failed" : "passed";
 var renderWorkflowApplyReport = (report) => {
+  const applySummary = {
+    sourceFilesChanged: report.summary?.sourceFilesChanged ?? report.changedFiles,
+    generatedFilesSynced: report.summary?.generatedFilesSynced ?? report.generatedFiles
+  };
   const manualReviewItems = [
     ...report.diagnostics.filter((diagnostic) => diagnostic.severity === "warning").map(renderDiagnostic),
     ...report.recommendations.filter((recommendation) => recommendation.kind === "manual-action").map(renderRecommendation)
@@ -7105,6 +7222,8 @@ var renderWorkflowApplyReport = (report) => {
     `- Status: ${report.status}`,
     `- Source-change status: ${applySourceStatus(report)}`,
     `- Workspace status: ${validationBlockers.length ? "blocked" : "not blocked during apply"}`,
+    `- Source files changed: ${applySummary.sourceFilesChanged.length}`,
+    `- Generated files queued for sync: ${applySummary.generatedFilesSynced.length}`,
     ...report.validationTarget ? [`- Validation target: ${report.validationTarget}`] : [],
     "",
     "## Apply Checks",
@@ -7114,10 +7233,10 @@ var renderWorkflowApplyReport = (report) => {
     ...sourceBlockers.length ? sourceBlockers : ["- none"],
     "",
     "## Automatically Modified",
-    ...report.changedFiles.length ? report.changedFiles.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
+    ...applySummary.sourceFilesChanged.length ? applySummary.sourceFilesChanged.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
     "",
     "## Generated Sync",
-    ...report.generatedFiles.length ? report.generatedFiles.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
+    ...applySummary.generatedFilesSynced.length ? applySummary.generatedFilesSynced.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`) : ["- none"],
     "",
     "## Applied Commands",
     ...report.appliedCommands.length ? report.appliedCommands.map((command) => `- \`${command.command}\`: ${command.reason}`) : ["- none"],
@@ -7144,52 +7263,76 @@ var renderWorkflowApplyReport = (report) => {
 `);
 };
 var renderWorkflowApply = (report, format = "markdown") => format === "json" ? jsonText(report) : renderWorkflowApplyReport(report);
-var renderWorkflowValidationRunReport = (report) => [
-  `# Workflow Validation: ${report.workflow}`,
-  "",
-  `- Run: ${report.runId}`,
-  `- Status: ${report.status}`,
-  `- Source status: ${report.sourceStatus}`,
-  `- Workspace status: ${report.workspaceStatus}`,
-  `- Overall status: ${report.overallStatus}`,
-  "",
-  "## Status Summary",
-  `- Source-change: ${report.summary.sourceChange}`,
-  `- Generated sync: ${report.summary.generatedSync}`,
-  `- Workspace config: ${report.summary.workspaceConfig}`,
-  `- Environment: ${report.summary.environment}`,
-  "",
-  "## Source Change Diagnostics",
-  ...report.workflowDiagnostics?.length ? report.workflowDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
-  "",
-  "## Existing Workspace Blockers",
-  ...report.baselineDiagnostics?.length ? report.baselineDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
-  "",
-  "## Known Blockers",
-  ...report.knownBlockers.length ? report.knownBlockers.map((blocker) => {
-    const command = blocker.command ? ` \`${blocker.command}\`` : "";
-    const count = blocker.count > 1 ? ` (${blocker.count}x)` : "";
-    const known = blocker.known ? " known" : "";
-    return `- [${blocker.failureScope}${known}]${command}${count}: ${blocker.message}`;
-  }) : ["- none"],
-  "",
-  "## Commands",
-  ...report.commands.length ? report.commands.map((command) => {
-    const scope = command.failureScope ? ` (${command.failureScope})` : "";
-    return `- [${command.status}] \`${command.command}\`${scope}: ${command.reason}`;
-  }) : ["- none"],
-  "",
-  "## Diagnostics",
-  ...report.diagnostics.length ? report.diagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
-  "",
-  "## Repair Actions",
-  ...report.repairActions.length ? report.repairActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
-  "",
-  "## Next Actions",
-  ...report.nextActions.length ? report.nextActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
-  ""
-].join(`
+var renderWorkflowValidationRunReport = (report) => {
+  const baselineSummary = report.baselineSummary ?? {
+    status: report.baselineDiagnostics?.some((diagnostic) => diagnostic.severity === "error") ? "failed" : "unknown",
+    total: report.baselineDiagnostics?.length ?? 0,
+    totalErrors: report.baselineDiagnostics?.filter((diagnostic) => diagnostic.severity === "error").length ?? 0,
+    totalWarnings: report.baselineDiagnostics?.filter((diagnostic) => diagnostic.severity === "warning").length ?? 0,
+    detailsIncluded: true,
+    knownBlockerCount: report.knownBlockers.filter((blocker) => blocker.known).length,
+    byCode: []
+  };
+  return [
+    `# Workflow Validation: ${report.workflow}`,
+    "",
+    `- Run: ${report.runId}`,
+    `- Status: ${report.status}`,
+    `- Source status: ${report.sourceStatus}`,
+    `- Workspace status: ${report.workspaceStatus}`,
+    `- Validation commands status: ${report.validationCommandsStatus ?? "unknown"}`,
+    `- Baseline status: ${report.baselineStatus ?? baselineSummary.status}`,
+    `- Overall status: ${report.overallStatus}`,
+    "",
+    "## Status Summary",
+    `- Source-change: ${report.summary.sourceChange}`,
+    `- Generated sync: ${report.summary.generatedSync}`,
+    `- Validation commands: ${report.summary.validationCommands ?? "unknown"}`,
+    `- Baseline: ${report.summary.baseline ?? baselineSummary.status}`,
+    `- Workspace config: ${report.summary.workspaceConfig}`,
+    `- Environment: ${report.summary.environment}`,
+    "",
+    "## Source Change Diagnostics",
+    ...report.workflowDiagnostics?.length ? report.workflowDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
+    "",
+    "## Existing Workspace Blockers",
+    `- Status: ${baselineSummary.status}`,
+    `- Errors: ${baselineSummary.totalErrors}`,
+    `- Warnings: ${baselineSummary.totalWarnings}`,
+    ...baselineSummary.byCode.length ? baselineSummary.byCode.map((item) => `- [${item.severity}] ${item.code} (${item.count}x): ${item.sampleMessage}`) : ["- none"],
+    ...baselineSummary.detailsIncluded ? [] : [
+      "- Baseline details are summarized by default. Re-run validation with includeBaselineDetails=true for full baselineDiagnostics."
+    ],
+    "",
+    "## Existing Workspace Blocker Details",
+    ...report.baselineDiagnostics?.length ? report.baselineDiagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : baselineSummary.detailsIncluded ? ["- none"] : ["- omitted"],
+    "",
+    "## Known Blockers",
+    ...report.knownBlockers.length ? report.knownBlockers.map((blocker) => {
+      const command = blocker.command ? ` \`${blocker.command}\`` : "";
+      const count = blocker.count > 1 ? ` (${blocker.count}x)` : "";
+      const known = blocker.known ? " known" : "";
+      return `- [${blocker.failureScope}${known}]${command}${count}: ${blocker.message}`;
+    }) : ["- none"],
+    "",
+    "## Commands",
+    ...report.commands.length ? report.commands.map((command) => {
+      const scope = command.failureScope ? ` (${command.failureScope})` : "";
+      return `- [${command.status}] \`${command.command}\`${scope}: ${command.reason}`;
+    }) : ["- none"],
+    "",
+    "## Diagnostics",
+    ...report.diagnostics.length ? report.diagnostics.map((diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`) : ["- none"],
+    "",
+    "## Repair Actions",
+    ...report.repairActions.length ? report.repairActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
+    "",
+    "## Next Actions",
+    ...report.nextActions.length ? report.nextActions.map((action) => `- \`${action.command}\`: ${action.reason}`) : ["- none"],
+    ""
+  ].join(`
 `);
+};
 var renderWorkflowValidation = (report, format = "markdown") => format === "json" ? jsonText(report) : renderWorkflowValidationRunReport(report);
 var renderRepairReportMarkdown = (report) => [
   `# Akan Repair: ${report.kind}`,
@@ -7278,7 +7421,11 @@ var toolingRolloutGate = {
   candidates: toolingRolloutCandidates
 };
 var isRestrictedCandidate = (candidate) => candidate.status !== "allowed";
-var restrictedCandidates = new Map(toolingRolloutCandidates.filter(isRestrictedCandidate).map((candidate) => [candidate.packageName, candidate]));
+var restrictedCandidates = new Map;
+for (const candidate of toolingRolloutCandidates) {
+  if (isRestrictedCandidate(candidate))
+    restrictedCandidates.set(candidate.packageName, candidate);
+}
 // pkgs/@akanjs/devkit/akanContext.ts
 var resourceList = [
   { uri: "akan://docs/framework", name: "Akan framework guide", mimeType: "text/markdown" },
@@ -7847,6 +7994,7 @@ var applyFirstPolicy = {
   mode: "apply-first",
   directSourceEdits: "fallback-only",
   applyRequiredWhen: ["plan_workflow returns planPath", "plan_workflow returns next.tool=apply_workflow"],
+  approvalMeaning: "requiresApproval is an agent/user review signal before apply_workflow mutates files; it is not a separate MCP permission gate.",
   validationRequiredAfterApply: ["validationTarget", "applyReportPath"],
   fallbackAllowedWhen: [
     "list_workflows and explain_workflow show no matching workflow",
@@ -7982,7 +8130,12 @@ var readonlyMcpTools = [
     description: "Report workspace diagnostics, optionally split into baseline and workflow scopes.",
     inputSchema: {
       type: "object",
-      properties: { strict: booleanProperty, runIdOrPlan: stringProperty, changedFiles: stringArrayProperty }
+      properties: {
+        strict: booleanProperty,
+        runIdOrPlan: stringProperty,
+        changedFiles: stringArrayProperty,
+        includeBaselineDetails: booleanProperty
+      }
     }
   },
   {
@@ -8027,7 +8180,7 @@ var applyMcpTools = [
     description: "Validate a plan, apply report, validationTarget, or run artifact.",
     inputSchema: {
       type: "object",
-      properties: { runIdOrPlan: stringProperty },
+      properties: { runIdOrPlan: stringProperty, includeBaselineDetails: booleanProperty },
       required: ["runIdOrPlan"]
     }
   },
@@ -8077,7 +8230,16 @@ var createAkanValidationContract = (listTools = listAkanMcpTools) => ({
   validationStatuses: {
     sourceStatus: ["passed", "failed", "unknown"],
     workspaceStatus: ["passed", "failed", "unknown"],
-    overallStatus: ["passed", "failed", "blocked-by-workspace-config", "blocked-by-environment"],
+    validationCommandsStatus: ["passed", "failed", "unknown"],
+    baselineStatus: ["passed", "failed", "unknown"],
+    overallStatus: [
+      "passed",
+      "failed",
+      "passed-with-baseline-blockers",
+      "blocked-by-workspace-config",
+      "blocked-by-environment"
+    ],
+    baselineSummary: "Default MCP validation output summarizes baseline diagnostics; pass includeBaselineDetails=true for full baselineDiagnostics.",
     knownBlockers: "Repeated workspace-config/environment failures are summarized before command output."
   },
   moduleContextInputs: {
@@ -8088,6 +8250,7 @@ var createAkanValidationContract = (listTools = listAkanMcpTools) => ({
   toolingRolloutGate,
   directEditFallbackPolicy: applyFirstPolicy,
   applyReportFields: [
+    "summary",
     "appliedCommands",
     "recommendedValidationCommands",
     "commands",
@@ -8129,7 +8292,14 @@ var inspectAkanContext = async (workspace, args) => {
       strict: true,
       runIdOrPlan: workspacePath(workspace, props.request.runIdOrPlan)
     });
-    diagnostics.push(...doctor.diagnostics.map((diagnostic) => ({
+    const baselineSummary = createWorkflowBaselineSummary((doctor.baselineDiagnostics ?? []).map((diagnostic) => ({
+      severity: diagnostic.severity,
+      code: diagnostic.code,
+      message: diagnostic.message,
+      scope: diagnostic.scope,
+      context: diagnostic.context
+    })), { detailsIncluded: false });
+    diagnostics.push(...(doctor.workflowDiagnostics ?? doctor.diagnostics).map((diagnostic) => ({
       severity: diagnostic.severity,
       code: diagnostic.code,
       message: diagnostic.message,
@@ -8150,7 +8320,8 @@ var inspectAkanContext = async (workspace, args) => {
       reason: doctor.status === "passed" ? "No strict workspace diagnostics were found for the workflow context." : "Review diagnostics before applying or manually editing source files."
     }, {
       status: doctor.status,
-      baselineDiagnostics: doctor.baselineDiagnostics?.length ?? 0,
+      baselineSummary,
+      baselineDiagnostics: 0,
       workflowDiagnostics: doctor.workflowDiagnostics?.length ?? 0
     });
   }
@@ -17316,7 +17487,8 @@ var failedPlan = (workflow2, diagnostics) => ({
   validation: [],
   diagnostics,
   recommendations: [],
-  requiresApproval: true
+  requiresApproval: true,
+  approval: workflowPlanApproval
 });
 var failedApplyReport = (workflow2, diagnostics, plan2) => createWorkflowApplyReport({
   workflow: workflow2,
@@ -17428,17 +17600,33 @@ var applyBaselineBlockerCache = async (workspace, report) => {
     });
   }
   await workspace.writeFile(cachePath, jsonText({ schemaVersion: 1, workflow: report.workflow, blockers: [...blockers.values()] }), { silent: true });
+  const knownBlockers = report.knownBlockers.map((blocker) => {
+    if (!knownFingerprints.has(blockerFingerprint(blocker)))
+      return blocker;
+    return {
+      ...blocker,
+      known: true,
+      message: `Known baseline blocker, unrelated to this source change: ${blocker.message}`
+    };
+  });
   return {
     ...report,
-    knownBlockers: report.knownBlockers.map((blocker) => {
-      if (!knownFingerprints.has(blockerFingerprint(blocker)))
-        return blocker;
-      return {
-        ...blocker,
-        known: true,
-        message: `Known baseline blocker, unrelated to this source change: ${blocker.message}`
-      };
-    })
+    knownBlockers,
+    baselineSummary: {
+      ...report.baselineSummary,
+      knownBlockerCount: knownBlockers.filter((blocker) => blocker.known).length
+    }
+  };
+};
+var withBaselineDetailsPolicy = (report, includeBaselineDetails) => {
+  const baselineDiagnostics = report.baselineDiagnostics ?? [];
+  return {
+    ...report,
+    baselineSummary: createWorkflowBaselineSummary(baselineDiagnostics, {
+      detailsIncluded: includeBaselineDetails,
+      knownBlockerCount: report.knownBlockers.filter((blocker) => blocker.known).length
+    }),
+    baselineDiagnostics: includeBaselineDetails ? baselineDiagnostics : []
   };
 };
 
@@ -17534,7 +17722,8 @@ class WorkflowRunner extends runner("workflow") {
   async validate(runIdOrPlan, {
     format = "markdown",
     workspace,
-    execute
+    execute,
+    includeBaselineDetails = false
   }) {
     const loaded = await this.loadValidationTarget(runIdOrPlan, workspace);
     const doctor = await AkanContextAnalyzer.doctor(workspace, {
@@ -17542,7 +17731,7 @@ class WorkflowRunner extends runner("workflow") {
       runIdOrPlan,
       changedFiles: loaded.changedFiles
     });
-    const report = await applyBaselineBlockerCache(workspace, await createWorkflowValidationRunReport({
+    const report = withBaselineDetailsPolicy(await applyBaselineBlockerCache(workspace, await createWorkflowValidationRunReport({
       workflow: loaded.plan?.workflow ?? loaded.workflow,
       source: loaded.source,
       plan: loaded.plan,
@@ -17552,7 +17741,7 @@ class WorkflowRunner extends runner("workflow") {
       baselineDiagnostics: (doctor.baselineDiagnostics ?? []).map((diagnostic) => workflowDiagnosticFromDoctor(diagnostic, "baseline")),
       workflowDiagnostics: (doctor.workflowDiagnostics ?? []).map((diagnostic) => workflowDiagnosticFromDoctor(diagnostic, "workflow")),
       repairActions: loaded.repairActions
-    }));
+    })), includeBaselineDetails);
     await writeWorkflowRunArtifact(workspace, report);
     return renderWorkflowValidation(report, format);
   }
@@ -18814,6 +19003,32 @@ var createCliWorkflowStepRegistry = (workspace) => createWorkflowStepRegistry({
 });
 
 // pkgs/@akanjs/cli/context/context.runner.ts
+var workflowDiagnosticFromContext = (diagnostic) => ({
+  severity: diagnostic.severity,
+  code: diagnostic.code,
+  message: diagnostic.message,
+  scope: diagnostic.scope,
+  context: diagnostic.context
+});
+var compactDoctorWorkspaceResult = (result, includeBaselineDetails) => {
+  const baselineDiagnostics = result.baselineDiagnostics ?? [];
+  if (baselineDiagnostics.length === 0) {
+    return {
+      ...result,
+      baselineSummary: createWorkflowBaselineSummary([], { detailsIncluded: includeBaselineDetails })
+    };
+  }
+  const baselineSummary = createWorkflowBaselineSummary(baselineDiagnostics.map(workflowDiagnosticFromContext), {
+    detailsIncluded: includeBaselineDetails
+  });
+  return {
+    ...result,
+    baselineSummary,
+    diagnostics: includeBaselineDetails ? result.diagnostics : result.diagnostics.filter((diagnostic) => diagnostic.scope !== "baseline"),
+    baselineDiagnostics: includeBaselineDetails ? baselineDiagnostics : []
+  };
+};
+
 class ContextRunner extends runner("context") {
   async getContext(workspace, {
     format = "markdown",
@@ -18903,11 +19118,11 @@ class ContextRunner extends runner("context") {
     if (name === "get_guideline")
       return await Prompter.getInstruction(stringArg(args, "name"));
     if (name === "doctor_workspace")
-      return await AkanContextAnalyzer.doctor(workspace, {
+      return compactDoctorWorkspaceResult(await AkanContextAnalyzer.doctor(workspace, {
         strict: !!args.strict,
         runIdOrPlan: typeof args.runIdOrPlan === "string" ? workspacePath(workspace, args.runIdOrPlan) : null,
         changedFiles: Array.isArray(args.changedFiles) ? args.changedFiles.filter((file) => typeof file === "string") : []
-      });
+      }), !!args.includeBaselineDetails);
     if (name === "explain_command")
       return this.explainCommand(stringArg(args, "command"));
     if (name === "get_validation_contract")
@@ -18927,6 +19142,7 @@ class ContextRunner extends runner("context") {
       return {
         ...plan2,
         planPath,
+        approval: typeof plan2 === "object" && plan2 && "approval" in plan2 ? { ...plan2.approval, canApplyWith: { planPath } } : undefined,
         next: { tool: "apply_workflow", args: { planPath } },
         policy: applyFirstPolicy
       };
@@ -18949,7 +19165,8 @@ class ContextRunner extends runner("context") {
     if (name === "run_validation")
       return parseJsonOutput(await new WorkflowRunner().validate(workspacePath(workspace, stringArg(args, "runIdOrPlan")), {
         format: "json",
-        workspace
+        workspace,
+        includeBaselineDetails: !!args.includeBaselineDetails
       }));
     if (name === "repair_generated") {
       const report = parseJsonOutput(await new RepairRunner().repair("generated", { workspace, app: stringArg(args, "app"), format: "json" }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/cli",
-  "version": "2.3.9-rc.8",
+  "version": "2.3.9-rc.9",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -34,7 +34,7 @@
     "@langchain/openai": "^1.4.6",
     "@tailwindcss/node": "^4.3.0",
     "@trapezedev/project": "^7.1.4",
-    "akanjs": "2.3.9-rc.8",
+    "akanjs": "2.3.9-rc.9",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",
     "daisyui": "5.5.23",