@akanjs/devkit 2.3.9-rc.8 → 2.3.9-rc.9

package/akanMcpContract.ts

@@ -10,7 +10,7 @@ import type {
   WorkflowDiagnostic,
   WorkflowPlanInputs,
 } from "./workflow";
-import { buildAkanModuleContextIndex, toolingRolloutGate } from "./workflow";
+import { buildAkanModuleContextIndex, createWorkflowBaselineSummary, toolingRolloutGate } from "./workflow";
 
 export type McpToolDefinition = {
   name: string;
@@ -158,6 +158,8 @@ export const applyFirstPolicy = {
   mode: "apply-first",
   directSourceEdits: "fallback-only",
   applyRequiredWhen: ["plan_workflow returns planPath", "plan_workflow returns next.tool=apply_workflow"],
+  approvalMeaning:
+    "requiresApproval is an agent/user review signal before apply_workflow mutates files; it is not a separate MCP permission gate.",
   validationRequiredAfterApply: ["validationTarget", "applyReportPath"],
   fallbackAllowedWhen: [
     "list_workflows and explain_workflow show no matching workflow",
@@ -311,7 +313,12 @@ export const readonlyMcpTools: McpToolDefinition[] = [
     description: "Report workspace diagnostics, optionally split into baseline and workflow scopes.",
     inputSchema: {
       type: "object",
-      properties: { strict: booleanProperty, runIdOrPlan: stringProperty, changedFiles: stringArrayProperty },
+      properties: {
+        strict: booleanProperty,
+        runIdOrPlan: stringProperty,
+        changedFiles: stringArrayProperty,
+        includeBaselineDetails: booleanProperty,
+      },
     },
   },
   {
@@ -359,7 +366,7 @@ export const applyMcpTools: McpToolDefinition[] = [
     description: "Validate a plan, apply report, validationTarget, or run artifact.",
     inputSchema: {
       type: "object",
-      properties: { runIdOrPlan: stringProperty },
+      properties: { runIdOrPlan: stringProperty, includeBaselineDetails: booleanProperty },
       required: ["runIdOrPlan"],
     },
   },
@@ -409,7 +416,17 @@ export const createAkanValidationContract = (listTools = listAkanMcpTools) => ({
   validationStatuses: {
     sourceStatus: ["passed", "failed", "unknown"],
     workspaceStatus: ["passed", "failed", "unknown"],
-    overallStatus: ["passed", "failed", "blocked-by-workspace-config", "blocked-by-environment"],
+    validationCommandsStatus: ["passed", "failed", "unknown"],
+    baselineStatus: ["passed", "failed", "unknown"],
+    overallStatus: [
+      "passed",
+      "failed",
+      "passed-with-baseline-blockers",
+      "blocked-by-workspace-config",
+      "blocked-by-environment",
+    ],
+    baselineSummary:
+      "Default MCP validation output summarizes baseline diagnostics; pass includeBaselineDetails=true for full baselineDiagnostics.",
     knownBlockers: "Repeated workspace-config/environment failures are summarized before command output.",
   },
   moduleContextInputs: {
@@ -420,6 +437,7 @@ export const createAkanValidationContract = (listTools = listAkanMcpTools) => ({
   toolingRolloutGate,
   directEditFallbackPolicy: applyFirstPolicy,
   applyReportFields: [
+    "summary",
     "appliedCommands",
     "recommendedValidationCommands",
     "commands",
@@ -484,8 +502,20 @@ export const inspectAkanContext = async (
       strict: true,
       runIdOrPlan: workspacePath(workspace, props.request.runIdOrPlan),
     });
+    const baselineSummary = createWorkflowBaselineSummary(
+      (doctor.baselineDiagnostics ?? []).map(
+        (diagnostic): WorkflowDiagnostic => ({
+          severity: diagnostic.severity,
+          code: diagnostic.code,
+          message: diagnostic.message,
+          scope: diagnostic.scope,
+          context: diagnostic.context,
+        }),
+      ),
+      { detailsIncluded: false },
+    );
     diagnostics.push(
-      ...doctor.diagnostics.map(
+      ...(doctor.workflowDiagnostics ?? doctor.diagnostics).map(
         (diagnostic): WorkflowDiagnostic => ({
           severity: diagnostic.severity,
           code: diagnostic.code,
@@ -516,7 +546,8 @@ export const inspectAkanContext = async (
       },
       {
         status: doctor.status,
-        baselineDiagnostics: doctor.baselineDiagnostics?.length ?? 0,
+        baselineSummary,
+        baselineDiagnostics: 0,
         workflowDiagnostics: doctor.workflowDiagnostics?.length ?? 0,
       },
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/devkit",
-  "version": "2.3.9-rc.8",
+  "version": "2.3.9-rc.9",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -32,7 +32,7 @@
     "@langchain/openai": "^1.4.6",
     "@tailwindcss/node": "^4.3.0",
     "@trapezedev/project": "^7.1.4",
-    "akanjs": "2.3.9-rc.8",
+    "akanjs": "2.3.9-rc.9",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",
     "daisyui": "5.5.23",

package/workflow/artifacts.ts

@@ -7,6 +7,7 @@ import type {
   RepairReport,
   WorkflowApplyCommand,
   WorkflowApplyReport,
+  WorkflowBaselineSummary,
   WorkflowDiagnostic,
   WorkflowFailureScope,
   WorkflowKnownBlocker,
@@ -30,6 +31,12 @@ const sourceChangeBlocked = (diagnostics: readonly WorkflowDiagnostic[]) =>
         diagnostic.failureScope === "unknown"),
   );
 
+export const workflowPlanApproval = {
+  required: true,
+  meaning: "Review this read-only plan before apply_workflow mutates files.",
+  applyTool: "apply_workflow",
+} as const;
+
 const inferNextActionCode = (
   action: { action?: WorkflowNextActionCode; command: string },
   diagnostics: readonly WorkflowDiagnostic[],
@@ -72,6 +79,7 @@ export const createWorkflowApplyReport = ({
   | "applyReportPath"
   | "validationTarget"
   | "status"
+  | "summary"
   | "appliedCommands"
   | "recommendedValidationCommands"
   | "commands"
@@ -99,13 +107,19 @@ export const createWorkflowApplyReport = ({
   const orderedNextActions = uniqueBy(nextActionsWithIntent, (action) => action.command).sort(
     (left, right) => nextActionPriority(left, diagnostics) - nextActionPriority(right, diagnostics),
   );
+  const sourceFilesChanged = uniqueBy(changedFiles, (file) => `${file.action}:${file.path}:${file.reason}`);
+  const generatedFilesSynced = uniqueBy(generatedFiles, (file) => `${file.action}:${file.path}:${file.reason}`);
   return {
     schemaVersion: 1,
     workflow,
     mode,
     status: workflowStatus(diagnostics),
-    changedFiles: uniqueBy(changedFiles, (file) => `${file.action}:${file.path}:${file.reason}`),
-    generatedFiles: uniqueBy(generatedFiles, (file) => `${file.action}:${file.path}:${file.reason}`),
+    summary: {
+      sourceFilesChanged,
+      generatedFilesSynced,
+    },
+    changedFiles: sourceFilesChanged,
+    generatedFiles: generatedFilesSynced,
     appliedCommands: uniqueBy(appliedCommands, (command) => command.command),
     recommendedValidationCommands: uniqueBy(validationCommands, (command) => command.command),
     commands: uniqueBy(validationCommands, (command) => command.command),
@@ -246,6 +260,58 @@ const statusForValidationKind = (
   return matching.some((command) => command.status === "failed") ? "failed" : "passed";
 };
 
+const statusForCommands = (commands: readonly WorkflowValidationCommandResult[]): WorkflowValidationStatus => {
+  if (commands.length === 0) return "unknown";
+  return commandStatus(commands) === "failed" ? "failed" : "passed";
+};
+
+const statusForDiagnostics = (diagnostics: readonly WorkflowDiagnostic[]): WorkflowValidationStatus => {
+  if (diagnostics.length === 0) return "unknown";
+  return workflowStatus(diagnostics) === "failed" ? "failed" : "passed";
+};
+
+const workflowDiagnosticContextPaths = (diagnostics: readonly WorkflowDiagnostic[]) =>
+  uniqueBy(
+    diagnostics.flatMap((diagnostic) => diagnostic.context?.paths ?? []),
+    (filePath) => filePath,
+  );
+
+export const createWorkflowBaselineSummary = (
+  diagnostics: readonly WorkflowDiagnostic[],
+  { detailsIncluded = true, knownBlockerCount = 0 }: { detailsIncluded?: boolean; knownBlockerCount?: number } = {},
+): WorkflowBaselineSummary => {
+  const grouped = new Map<string, WorkflowBaselineSummary["byCode"][number]>();
+  let totalErrors = 0;
+  let totalWarnings = 0;
+  for (const diagnostic of diagnostics) {
+    if (diagnostic.severity === "error") totalErrors += 1;
+    else totalWarnings += 1;
+    const existing = grouped.get(diagnostic.code);
+    if (existing) {
+      existing.count += 1;
+      if (existing.severity !== diagnostic.severity) existing.severity = "mixed";
+    } else {
+      grouped.set(diagnostic.code, {
+        code: diagnostic.code,
+        severity: diagnostic.severity,
+        count: 1,
+        sampleMessage: diagnostic.message,
+      });
+    }
+  }
+  const contextPaths = workflowDiagnosticContextPaths(diagnostics);
+  return {
+    status: totalErrors > 0 ? "failed" : diagnostics.length > 0 ? "passed" : "unknown",
+    total: diagnostics.length,
+    totalErrors,
+    totalWarnings,
+    detailsIncluded,
+    knownBlockerCount,
+    byCode: [...grouped.values()],
+    ...(contextPaths.length ? { contextPaths } : {}),
+  };
+};
+
 const createKnownBlockers = (
   commands: readonly WorkflowValidationCommandResult[],
   diagnostics: readonly WorkflowDiagnostic[],
@@ -292,20 +358,37 @@ const createKnownBlockers = (
 
 const createValidationStatuses = (
   commands: readonly WorkflowValidationCommandResult[],
-  diagnostics: readonly WorkflowDiagnostic[],
+  reportDiagnostics: readonly WorkflowDiagnostic[],
+  baselineDiagnostics: readonly WorkflowDiagnostic[],
+  workflowDiagnostics: readonly WorkflowDiagnostic[],
 ): {
   sourceStatus: WorkflowValidationStatus;
   workspaceStatus: WorkflowValidationStatus;
+  validationCommandsStatus: WorkflowValidationStatus;
+  baselineStatus: WorkflowValidationStatus;
   overallStatus: WorkflowOverallStatus;
   summary: {
     sourceChange: WorkflowValidationStatus;
     generatedSync: WorkflowValidationStatus;
+    validationCommands: WorkflowValidationStatus;
+    baseline: WorkflowValidationStatus;
     workspaceConfig: WorkflowValidationStatus;
     environment: WorkflowValidationStatus;
   };
 } => {
+  const diagnostics = [...reportDiagnostics, ...baselineDiagnostics, ...workflowDiagnostics];
   const scopes = [...failedCommandScopes(commands), ...errorDiagnosticScopes(diagnostics)];
-  const sourceStatus = statusForScope(commands, diagnostics, scopes, "source-change");
+  const sourceDiagnostics = [...reportDiagnostics, ...workflowDiagnostics].filter(
+    (diagnostic) =>
+      diagnostic.failureScope === "source-change" ||
+      diagnostic.scope === "workflow" ||
+      (!diagnostic.failureScope && diagnostic.scope !== "baseline"),
+  );
+  const sourceScopes = [...failedCommandScopes(commands), ...errorDiagnosticScopes(sourceDiagnostics)];
+  const sourceStatus = statusForScope(commands, sourceDiagnostics, sourceScopes, "source-change");
+  const validationCommandsStatus = statusForCommands(commands);
+  const baselineStatus = statusForDiagnostics(baselineDiagnostics);
+  const nonBaselineDiagnostics = [...reportDiagnostics, ...workflowDiagnostics];
   const workspaceStatus =
     hasScopeFailure(scopes, "workspace-config", diagnostics) || hasScopeFailure(scopes, "environment", diagnostics)
       ? "failed"
@@ -314,20 +397,28 @@ const createValidationStatuses = (
         : "unknown";
   const overallStatus = hasScopeFailure(scopes, "source-change", diagnostics)
     ? "failed"
-    : hasScopeFailure(scopes, "workspace-config", diagnostics)
-      ? "blocked-by-workspace-config"
-      : hasScopeFailure(scopes, "environment", diagnostics)
-        ? "blocked-by-environment"
-        : workflowStatus(diagnostics) === "failed" || commandStatus(commands) === "failed"
-          ? "failed"
-          : "passed";
+    : validationCommandsStatus === "passed" &&
+        baselineStatus === "failed" &&
+        workflowStatus(nonBaselineDiagnostics) !== "failed"
+      ? "passed-with-baseline-blockers"
+      : hasScopeFailure(scopes, "workspace-config", diagnostics)
+        ? "blocked-by-workspace-config"
+        : hasScopeFailure(scopes, "environment", diagnostics)
+          ? "blocked-by-environment"
+          : workflowStatus(diagnostics) === "failed" || commandStatus(commands) === "failed"
+            ? "failed"
+            : "passed";
   return {
     sourceStatus,
     workspaceStatus,
+    validationCommandsStatus,
+    baselineStatus,
     overallStatus,
     summary: {
       sourceChange: sourceStatus,
       generatedSync: statusForValidationKind(commands, "sync"),
+      validationCommands: validationCommandsStatus,
+      baseline: baselineStatus,
       workspaceConfig: statusForScope(commands, diagnostics, scopes, "workspace-config"),
       environment: statusForScope(commands, diagnostics, scopes, "environment"),
     },
@@ -377,7 +468,8 @@ export const createWorkflowValidationRunReport = async ({
   );
   const reportDiagnostics = [...diagnostics, ...commandDiagnostics];
   const scopedDiagnostics = [...reportDiagnostics, ...baselineDiagnostics, ...workflowDiagnostics];
-  const statuses = createValidationStatuses(results, scopedDiagnostics);
+  const knownBlockers = createKnownBlockers(results, scopedDiagnostics);
+  const statuses = createValidationStatuses(results, reportDiagnostics, baselineDiagnostics, workflowDiagnostics);
   return {
     schemaVersion: 1,
     runId,
@@ -386,9 +478,12 @@ export const createWorkflowValidationRunReport = async ({
     source,
     status: statuses.overallStatus === "passed" ? "passed" : "failed",
     ...statuses,
-    knownBlockers: createKnownBlockers(results, scopedDiagnostics),
+    knownBlockers,
     commands: results,
     diagnostics: reportDiagnostics,
+    baselineSummary: createWorkflowBaselineSummary(baselineDiagnostics, {
+      knownBlockerCount: knownBlockers.filter((blocker) => blocker.failureScope === "workspace-config").length,
+    }),
     baselineDiagnostics,
     workflowDiagnostics,
     repairActions: uniqueBy(repairActions, (action) => action.command),

package/workflow/executor.ts

@@ -97,8 +97,8 @@ const checkTypeScriptSyntax = async (workspace: Workspace, filePath: string) =>
   if (!scriptKind) return null;
   const content = await workspace.readFile(filePath);
   const source = ts.createSourceFile(filePath, content, ts.ScriptTarget.Latest, true, scriptKind);
-  const diagnostic =
-    ((source as ts.SourceFile & { parseDiagnostics?: readonly ts.DiagnosticWithLocation[] }).parseDiagnostics ?? [])[0];
+  const diagnostic = ((source as ts.SourceFile & { parseDiagnostics?: readonly ts.DiagnosticWithLocation[] })
+    .parseDiagnostics ?? [])[0];
   if (!diagnostic) return null;
   const position = diagnostic.file?.getLineAndCharacterOfPosition(diagnostic.start ?? 0);
   const location = position ? `:${position.line + 1}:${position.character + 1}` : "";
@@ -381,10 +381,10 @@ const addFieldUiSurfaceInspection = (plan: WorkflowPlan): WorkflowStepResult =>
         kind: "manual-action",
         target,
         action: templateRequested
-          ? `Template was requested for ${field}. If no Template file changed, auto-edit was skipped because the file was missing, the generated ${module}Form/Layout.Template pattern was not found, or ${policy.component} needs option binding. Candidate position: inside Layout.Template near the existing Field components.`
-          : `Template was not selected, so UI files are intentionally left unchanged. Candidate positions if you expose it later: Layout.Template field list for editing, Light${moduleClassName} projection for list/card data, and Unit/View card sections for display.`,
+          ? `Template was requested for ${field}. If no Template file changed, users will not see the field in the form yet because the file was missing, the generated ${module}Form/Layout.Template pattern was not found, or ${policy.component} needs option binding. Add it inside Layout.Template near existing Field components.`
+          : `Template was not selected, so users will not see ${field} in the form from this apply. If list/card display is needed, include ${field} in Light${moduleClassName} projection data and place it in the local Unit/View card layout.`,
         confidence: "medium",
-        message: `Review UI surfaces for ${module}.${field}; recommended component is ${policy.component}, with manual reasons and candidate positions in action.`,
+        message: `Review user-visible UI for ${module}.${field}; recommended component is ${policy.component}.`,
       },
     ],
     nextActions: [

package/workflow/plan.ts

@@ -1,4 +1,5 @@
 import { capitalize } from "akanjs/common";
+import { workflowPlanApproval } from "./artifacts";
 import { coerceFieldDefault, moduleSourcePaths } from "./source";
 import type {
   WorkflowDiagnostic,
@@ -91,11 +92,59 @@ const createAddFieldDefaultRecommendations = (inputs: Record<string, WorkflowInp
       kind: "manual-action",
       confidence: "high",
       message: `Default for ${field} will be normalized to ${coercion.normalizedType} literal ${coercion.expression}.`,
-      action: "Review the normalized default in the apply report if this value should stay unset.",
+      action:
+        "Review the normalized default in the apply report. To leave the field without a default, omit the default input.",
     },
   ];
 };
 
+const moneyLikeFieldPattern = /(budget|price|amount|cost|rate|fee|salary|balance)/i;
+const wholeNumberFieldPattern = /(count|quantity|total|number|index|rank|order|age)/i;
+
+const createAddFieldInputRecommendations = (inputs: Record<string, WorkflowInputValue>): WorkflowRecommendation[] => {
+  const field = typeof inputs.field === "string" ? inputs.field : "<field>";
+  const typeName = typeof inputs.type === "string" ? inputs.type : null;
+  const recommendations: WorkflowRecommendation[] = [];
+  if (!typeName) return recommendations;
+  if (typeName.toLowerCase() === "number" || typeName.toLowerCase() === "numeric") {
+    const recommendedType = moneyLikeFieldPattern.test(field)
+      ? "Float"
+      : wholeNumberFieldPattern.test(field)
+        ? "Int"
+        : null;
+    recommendations.push({
+      code: "add-field-type-choice",
+      kind: "input-guidance",
+      confidence: recommendedType ? "high" : "medium",
+      message: recommendedType
+        ? `Use ${recommendedType} for ${field}; Float is recommended for money-like decimal values and Int for whole-number values.`
+        : `Choose Int for whole-number ${field} values or Float for decimal ${field} values.`,
+      action: recommendedType
+        ? `Re-run plan_workflow with type="${recommendedType}".`
+        : 'Re-run plan_workflow with type="Int" or type="Float".',
+    });
+  }
+  if (typeName.toLowerCase() === "enum" && !Array.isArray(inputs.values)) {
+    recommendations.push({
+      code: "add-field-enum-values",
+      kind: "input-guidance",
+      confidence: "high",
+      message: `Enum field ${field} needs values before apply can choose valid dictionary and default behavior.`,
+      action: 'Pass values as an array or comma-separated string, for example values=["draft","done"].',
+    });
+  }
+  if (inputs.default === undefined) {
+    recommendations.push({
+      code: "add-field-default-optional",
+      kind: "input-guidance",
+      confidence: "medium",
+      message: `No default will be written for ${field} because default is omitted.`,
+      action: "Keep default omitted when the field should have no default value.",
+    });
+  }
+  return recommendations;
+};
+
 const createAddFieldRecommendations = (inputs: Record<string, WorkflowInputValue>): WorkflowRecommendation[] => {
   const app = typeof inputs.app === "string" ? inputs.app : "<app-or-lib>";
   const module = typeof inputs.module === "string" ? inputs.module : "<module>";
@@ -163,9 +212,11 @@ const createAddFieldRecommendations = (inputs: Record<string, WorkflowInputValue
             code: "add-field-light-projection-choice",
             kind: "manual-action" as const,
             target: paths.constant,
-            action: `Pass includeInLight=true when ${field} should appear in Light${capitalize(module)} list/card projections.`,
+            action: `Pass includeInLight=true when users should see ${field} in list/card data. Without it, the field can exist on ${capitalize(
+              module,
+            )}Input but stay absent from Light${capitalize(module)} projections.`,
             confidence: "medium" as const,
-            message: `Light projection exposure for ${module}.${field} is not selected yet.`,
+            message: `${module}.${field} is not selected for list/card projection data.`,
           },
         ]
       : []),
@@ -187,7 +238,8 @@ const createAddFieldRecommendations = (inputs: Record<string, WorkflowInputValue
             kind: "manual-action" as const,
             target: paths.template,
             confidence: "medium" as const,
-            message: `Template is not included in surfaces, so ${module}.${field} will not be auto-rendered there.`,
+            message: `Template form auto-edit is skipped for ${module}.${field} because surfaces does not include "template".`,
+            action: `Pass surfaces=["template"] when users should enter ${field} in the Template form.`,
           },
         ]
       : []),
@@ -195,13 +247,14 @@ const createAddFieldRecommendations = (inputs: Record<string, WorkflowInputValue
       code: "add-field-ui-manual-review",
       kind: "manual-action",
       target: paths.template,
-      action: `Review ${app}:${module} UI after apply. Template auto-edit requires a generated ${module}Form hook and Layout.Template field list; Unit/View are not auto-edited because list/card placement depends on local layout. Candidate positions: Layout.Template before the closing tag, Light${capitalize(
+      action: `After apply, verify what users can see: Template form auto-edit only runs when a generated ${module}Form hook and Layout.Template field list are present. Unit/View cards are not auto-edited, so ${field} may be stored on ${capitalize(
         module,
-      )} projection array for list data, and Unit/View card sections for display.`,
+      )} but not shown in list/card UI until you place it in the local card layout.`,
       confidence: "medium",
-      message: "UI manual review includes the reason auto-edit may be skipped and candidate insertion positions.",
+      message: `${app}:${module}.${field} may need UI review for user-visible Template, Unit, and View behavior.`,
     },
     ...createAddFieldDefaultRecommendations(inputs),
+    ...createAddFieldInputRecommendations(inputs),
   ];
 };
 
@@ -371,5 +424,6 @@ export const createWorkflowPlan = (spec: WorkflowSpec, rawInputs: Record<string,
     diagnostics,
     recommendations: createWorkflowPlanRecommendations(spec, inputs),
     requiresApproval: true,
+    approval: workflowPlanApproval,
   };
 };

package/workflow/render.ts

@@ -51,6 +51,7 @@ export const renderWorkflowPlan = (plan: WorkflowPlan) =>
     "",
     `- Mode: ${plan.mode}`,
     `- Requires approval: ${plan.requiresApproval}`,
+    `- Approval: ${plan.approval?.meaning ?? "Review this read-only plan before applying workflow mutations."}`,
     "",
     "## Inputs",
     ...Object.entries(plan.inputs).map(
@@ -108,6 +109,10 @@ const applySourceStatus = (report: WorkflowApplyReport) =>
     : "passed";
 
 export const renderWorkflowApplyReport = (report: WorkflowApplyReport) => {
+  const applySummary = {
+    sourceFilesChanged: report.summary?.sourceFilesChanged ?? report.changedFiles,
+    generatedFilesSynced: report.summary?.generatedFilesSynced ?? report.generatedFiles,
+  };
   const manualReviewItems = [
     ...report.diagnostics.filter((diagnostic) => diagnostic.severity === "warning").map(renderDiagnostic),
     ...report.recommendations
@@ -137,6 +142,8 @@ export const renderWorkflowApplyReport = (report: WorkflowApplyReport) => {
     `- Status: ${report.status}`,
     `- Source-change status: ${applySourceStatus(report)}`,
     `- Workspace status: ${validationBlockers.length ? "blocked" : "not blocked during apply"}`,
+    `- Source files changed: ${applySummary.sourceFilesChanged.length}`,
+    `- Generated files queued for sync: ${applySummary.generatedFilesSynced.length}`,
     ...(report.validationTarget ? [`- Validation target: ${report.validationTarget}`] : []),
     "",
     "## Apply Checks",
@@ -148,13 +155,13 @@ export const renderWorkflowApplyReport = (report: WorkflowApplyReport) => {
     ...(sourceBlockers.length ? sourceBlockers : ["- none"]),
     "",
     "## Automatically Modified",
-    ...(report.changedFiles.length
-      ? report.changedFiles.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`)
+    ...(applySummary.sourceFilesChanged.length
+      ? applySummary.sourceFilesChanged.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`)
       : ["- none"]),
     "",
     "## Generated Sync",
-    ...(report.generatedFiles.length
-      ? report.generatedFiles.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`)
+    ...(applySummary.generatedFilesSynced.length
+      ? applySummary.generatedFilesSynced.map((file) => `- \`${file.action}\` ${file.path}: ${file.reason}`)
       : ["- none"]),
     "",
     "## Applied Commands",
@@ -192,19 +199,32 @@ export const renderWorkflowApplyReport = (report: WorkflowApplyReport) => {
 export const renderWorkflowApply = (report: WorkflowApplyReport, format: WorkflowFormat = "markdown") =>
   format === "json" ? jsonText(report) : renderWorkflowApplyReport(report);
 
-export const renderWorkflowValidationRunReport = (report: WorkflowValidationRunReport) =>
-  [
+export const renderWorkflowValidationRunReport = (report: WorkflowValidationRunReport) => {
+  const baselineSummary = report.baselineSummary ?? {
+    status: report.baselineDiagnostics?.some((diagnostic) => diagnostic.severity === "error") ? "failed" : "unknown",
+    total: report.baselineDiagnostics?.length ?? 0,
+    totalErrors: report.baselineDiagnostics?.filter((diagnostic) => diagnostic.severity === "error").length ?? 0,
+    totalWarnings: report.baselineDiagnostics?.filter((diagnostic) => diagnostic.severity === "warning").length ?? 0,
+    detailsIncluded: true,
+    knownBlockerCount: report.knownBlockers.filter((blocker) => blocker.known).length,
+    byCode: [],
+  };
+  return [
     `# Workflow Validation: ${report.workflow}`,
     "",
     `- Run: ${report.runId}`,
     `- Status: ${report.status}`,
     `- Source status: ${report.sourceStatus}`,
     `- Workspace status: ${report.workspaceStatus}`,
+    `- Validation commands status: ${report.validationCommandsStatus ?? "unknown"}`,
+    `- Baseline status: ${report.baselineStatus ?? baselineSummary.status}`,
     `- Overall status: ${report.overallStatus}`,
     "",
     "## Status Summary",
     `- Source-change: ${report.summary.sourceChange}`,
     `- Generated sync: ${report.summary.generatedSync}`,
+    `- Validation commands: ${report.summary.validationCommands ?? "unknown"}`,
+    `- Baseline: ${report.summary.baseline ?? baselineSummary.status}`,
     `- Workspace config: ${report.summary.workspaceConfig}`,
     `- Environment: ${report.summary.environment}`,
     "",
@@ -216,11 +236,28 @@ export const renderWorkflowValidationRunReport = (report: WorkflowValidationRunR
       : ["- none"]),
     "",
     "## Existing Workspace Blockers",
+    `- Status: ${baselineSummary.status}`,
+    `- Errors: ${baselineSummary.totalErrors}`,
+    `- Warnings: ${baselineSummary.totalWarnings}`,
+    ...(baselineSummary.byCode.length
+      ? baselineSummary.byCode.map(
+          (item) => `- [${item.severity}] ${item.code} (${item.count}x): ${item.sampleMessage}`,
+        )
+      : ["- none"]),
+    ...(baselineSummary.detailsIncluded
+      ? []
+      : [
+          "- Baseline details are summarized by default. Re-run validation with includeBaselineDetails=true for full baselineDiagnostics.",
+        ]),
+    "",
+    "## Existing Workspace Blocker Details",
     ...(report.baselineDiagnostics?.length
       ? report.baselineDiagnostics.map(
           (diagnostic) => `- [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`,
         )
-      : ["- none"]),
+      : baselineSummary.detailsIncluded
+        ? ["- none"]
+        : ["- omitted"]),
     "",
     "## Known Blockers",
     ...(report.knownBlockers.length
@@ -256,6 +293,7 @@ export const renderWorkflowValidationRunReport = (report: WorkflowValidationRunR
       : ["- none"]),
     "",
   ].join("\n");
+};
 
 export const renderWorkflowValidation = (report: WorkflowValidationRunReport, format: WorkflowFormat = "markdown") =>
   format === "json" ? jsonText(report) : renderWorkflowValidationRunReport(report);

package/workflow/rolloutGate.ts

@@ -23,6 +23,10 @@ export interface ToolingRolloutViolation {
   reason: string;
 }
 
+type RestrictedToolingRolloutCandidate = ToolingRolloutCandidate & {
+  status: Exclude<ToolingRolloutCandidateStatus, "allowed">;
+};
+
 const dependencySections = [
   "dependencies",
   "devDependencies",
@@ -90,14 +94,13 @@ export const toolingRolloutGate = {
   candidates: toolingRolloutCandidates,
 };
 
-const isRestrictedCandidate = (
-  candidate: ToolingRolloutCandidate,
-): candidate is ToolingRolloutCandidate & { status: Exclude<ToolingRolloutCandidateStatus, "allowed"> } =>
+const isRestrictedCandidate = (candidate: ToolingRolloutCandidate): candidate is RestrictedToolingRolloutCandidate =>
   candidate.status !== "allowed";
 
-const restrictedCandidates = new Map(
-  toolingRolloutCandidates.filter(isRestrictedCandidate).map((candidate) => [candidate.packageName, candidate]),
-);
+const restrictedCandidates = new Map<string, RestrictedToolingRolloutCandidate>();
+for (const candidate of toolingRolloutCandidates) {
+  if (isRestrictedCandidate(candidate)) restrictedCandidates.set(candidate.packageName, candidate);
+}
 
 const blockedTypeScriptVersion = (version: string) =>
   /(?:^|[^\w])(?:rc|next|beta|canary|insiders)(?:[^\w]|$)/i.test(version) || /typescript@rc/i.test(version);

package/workflow/types.ts

@@ -14,10 +14,17 @@ export type WorkflowValidationStatus = "passed" | "failed" | "unknown";
 export interface WorkflowValidationSummary {
   sourceChange: WorkflowValidationStatus;
   generatedSync: WorkflowValidationStatus;
+  validationCommands: WorkflowValidationStatus;
+  baseline: WorkflowValidationStatus;
   workspaceConfig: WorkflowValidationStatus;
   environment: WorkflowValidationStatus;
 }
-export type WorkflowOverallStatus = "passed" | "failed" | "blocked-by-workspace-config" | "blocked-by-environment";
+export type WorkflowOverallStatus =
+  | "passed"
+  | "failed"
+  | "passed-with-baseline-blockers"
+  | "blocked-by-workspace-config"
+  | "blocked-by-environment";
 
 export interface PrimitiveTargetInput {
   app: string | null;
@@ -102,12 +109,19 @@ export interface WorkflowDiagnostic {
 export interface WorkflowRecommendation {
   code: string;
   message: string;
-  kind: "auto-apply" | "validation" | "manual-action" | "import" | "placement" | "ui-component";
+  kind: "auto-apply" | "validation" | "manual-action" | "input-guidance" | "import" | "placement" | "ui-component";
   target?: string;
   action?: string;
   confidence?: "high" | "medium" | "low";
 }
 
+export interface WorkflowPlanApproval {
+  required: true;
+  meaning: string;
+  applyTool: "apply_workflow";
+  canApplyWith?: Record<string, string>;
+}
+
 export interface AkanSourceSpan {
   file: string;
   startLine: number;
@@ -247,6 +261,7 @@ export interface WorkflowPlan {
   diagnostics: WorkflowDiagnostic[];
   recommendations: WorkflowRecommendation[];
   requiresApproval: true;
+  approval?: WorkflowPlanApproval;
 }
 
 export interface WorkflowReport {
@@ -291,6 +306,24 @@ export interface WorkflowKnownBlocker {
   known?: boolean;
 }
 
+export interface WorkflowBaselineSummaryCode {
+  code: string;
+  severity: "warning" | "error" | "mixed";
+  count: number;
+  sampleMessage: string;
+}
+
+export interface WorkflowBaselineSummary {
+  status: WorkflowValidationStatus;
+  total: number;
+  totalErrors: number;
+  totalWarnings: number;
+  detailsIncluded: boolean;
+  knownBlockerCount: number;
+  byCode: WorkflowBaselineSummaryCode[];
+  contextPaths?: string[];
+}
+
 export interface RepairAction {
   command: string;
   reason: string;
@@ -351,6 +384,10 @@ export interface WorkflowApplyReport {
   workflow: string;
   mode: "dry-run" | "apply";
   status: "passed" | "failed";
+  summary: {
+    sourceFilesChanged: PrimitiveChangedFile[];
+    generatedFilesSynced: PrimitiveGeneratedFile[];
+  };
   changedFiles: PrimitiveChangedFile[];
   generatedFiles: PrimitiveGeneratedFile[];
   appliedCommands: WorkflowApplyCommand[];
@@ -372,11 +409,14 @@ export interface WorkflowValidationRunReport {
   status: "passed" | "failed";
   sourceStatus: WorkflowValidationStatus;
   workspaceStatus: WorkflowValidationStatus;
+  validationCommandsStatus: WorkflowValidationStatus;
+  baselineStatus: WorkflowValidationStatus;
   summary: WorkflowValidationSummary;
   overallStatus: WorkflowOverallStatus;
   knownBlockers: WorkflowKnownBlocker[];
   commands: WorkflowValidationCommandResult[];
   diagnostics: WorkflowDiagnostic[];
+  baselineSummary: WorkflowBaselineSummary;
   baselineDiagnostics?: WorkflowDiagnostic[];
   workflowDiagnostics?: WorkflowDiagnostic[];
   repairActions: RepairAction[];