@allstak/wizard 0.1.6 → 0.1.8

package/docs/beta/README.md

@@ -1,17 +0,0 @@
-# `@allstak/wizard@beta` — public beta docs
-
-| Doc | What it covers |
-|-----|----------------|
-| [quickstart](./quickstart.md) | Install + run in five minutes |
-| [react](./react.md) | React (Vite or CRA) integration |
-| [next](./next.md) | Next.js 13+ integration |
-| [node](./node.md) | Vanilla Node.js / TypeScript |
-| [doctor](./doctor.md) | Deterministic diagnostics + `--live-probe` |
-| [restore](./restore.md) | Persistent snapshots + rollback |
-| [config](./config.md) | `allstak.config.*` schema + precedence + migrations |
-| [ci](./ci.md) | Running unattended in CI |
-| [privacy](./privacy.md) | Telemetry contract — what we send and how to disable |
-| [known-limitations](./known-limitations.md) | Honest list of what's NOT supported |
-| [troubleshooting](./troubleshooting.md) | Common errors mapped to fixes |
-| [errors](../errors.md) | Canonical error catalog |
-| [architecture](../architecture/) | Internal design docs (registry, transaction, rollback, etc.) |

package/docs/beta/ci.md

@@ -1,122 +0,0 @@
-# Running in CI
-
-The wizard is designed to run unattended once you've committed an
-`allstak.config.*` and stashed an API key.
-
-## One-shot setup in a CI step
-
-```yaml
-# .github/workflows/setup-allstak.yml (excerpt)
-- name: Configure AllStak
-  env:
-    ALLSTAK_API_KEY: ${{ secrets.ALLSTAK_API_KEY }}
-  run: |
-    npx @allstak/wizard@beta -i react -y \
-      --skip-deps \
-      --release "$GITHUB_SHA"
-```
-
-Why these flags:
-
-- `-y`: skip the confirmation prompt. The wizard refuses with `E_USER_CANCELLED`
-  in non-interactive mode otherwise.
-- `--skip-deps`: don't run a package install — your CI step before this
-  already installed dependencies.
-- `--release "$GITHUB_SHA"`: stamp the deploy commit on every event.
-
-The CLI exits 0 on success, 2 on `WizardError`, and 130 on user cancel
-(impossible in `-y` mode but documented for completeness).
-
-## Doctor in CI (smoke check)
-
-```yaml
-- name: Doctor
-  env:
-    ALLSTAK_API_KEY: ${{ secrets.ALLSTAK_API_KEY }}
-  run: |
-    npx @allstak/wizard@beta --json doctor \
-      --live-probe \
-      --project-id ${{ vars.ALLSTAK_PROJECT_ID }} \
-      > doctor.json
-    jq -e '.outcome == "success"' doctor.json
-```
-
-`--live-probe` sends a real test event and polls for ingestion. Use it as
-a deploy gate — if the ingestion path is broken, fail the deploy before
-users hit it.
-
-## JSON output everywhere
-
-`--json` writes a single JSON object to stdout (status text goes to stderr).
-Pipe it to `jq` or your own parser. Shape:
-
-```json
-{
-  "schemaVersion": 1,
-  "command": "init",
-  "outcome": "success",
-  "errorCode": null,
-  "durationMs": 4200,
-  "events": [...],
-  "diff": [...],
-  "doctor": [...],
-  "data": { ... }
-}
-```
-
-## Telemetry in CI
-
-Telemetry is on by default. To disable:
-
-```bash
-ALLSTAK_WIZARD_TELEMETRY=0 npx @allstak/wizard@beta ...
-# or
-npx @allstak/wizard@beta --no-telemetry ...
-```
-
-See [privacy.md](./privacy.md) for the exact payload shape. Telemetry
-failures NEVER abort the wizard.
-
-## Snapshot retention in CI
-
-Each wizard run writes a snapshot to `.allstak-wizard/backups/`. In CI the
-default retention of 10 is usually fine. To disable pruning entirely
-(useful when you keep a separate audit log):
-
-```bash
-npx @allstak/wizard@beta -i react -y --snapshot-keep 0
-```
-
-To skip persistent snapshots entirely (in-process rollback only) — not
-currently supported. Plans for v0.2.
-
-## Self-hosted in CI
-
-Either pass flags or commit a config:
-
-```bash
-npx @allstak/wizard@beta \
-  --host https://api.allstak.acme.com \
-  --dashboard-host https://app.allstak.acme.com \
-  -i react -y
-```
-
-## Validating the wizard itself
-
-The wizard ships a CI matrix workflow under `.github/workflows/ci.yml` that
-runs install/repair/uninstall/restore cycles against React+Vite, Next, and
-Node fixtures across Node 18/20/22. Fork the workflow if you want to
-gate your own CI on it.
-
-## Recommended pre-deploy chain
-
-```bash
-npm ci
-npm run test
-npx @allstak/wizard@beta config validate
-npx @allstak/wizard@beta -i react -y --release "$GIT_SHA"
-npx @allstak/wizard@beta --json doctor --live-probe \
-  --project-id "$ALLSTAK_PROJECT_ID" \
-  --api-key "$ALLSTAK_API_KEY"
-npm run build
-```

package/docs/beta/config.md

@@ -1,124 +0,0 @@
-# `allstak.config.*`
-
-Optional project-level config so you don't repeat `--org`, `--project`,
-`--host`, etc. on every wizard invocation. Discovered from the project root
-upward; the first matching file wins.
-
-Loader order (first match wins):
-
-1. `allstak.config.ts`
-2. `allstak.config.mts`
-3. `allstak.config.mjs`
-4. `allstak.config.js`
-5. `allstak.config.cjs`
-6. `allstak.config.json`
-
-`.ts` / `.mts` configs require running the wizard via a TypeScript-aware
-launcher (`npx tsx`, `bun`, or `deno run`). Plain `.mjs` / `.json` work
-without any toolchain.
-
-## Schema
-
-```ts
-import { defineConfig } from '@allstak/wizard/config';
-
-export default defineConfig({
-  schemaVersion: 1,
-  organization: 'my-org',
-  project: 'my-project',
-  environment: 'production',
-  release: process.env.GIT_SHA,
-  sourceMaps: {
-    enabled: true,
-    ignore: ['node_modules'],
-  },
-  selfHosted: {
-    apiHost: 'https://api.allstak.example',
-    ingestHost: 'https://api.allstak.example',
-    dashboardHost: 'https://app.allstak.example',
-  },
-  snapshotKeep: 10,
-});
-```
-
-All fields are optional. `defineConfig` is a typed-identity helper; at
-runtime it just returns its input.
-
-## Precedence
-
-```
-CLI flag  >  env var  >  config file  >  built-in default
-```
-
-Examples:
-
-| Setting | CLI | Env | Config | Default |
-|---------|-----|-----|--------|---------|
-| organization | `--org` | `ALLSTAK_ORG` | `organization` | — |
-| project | `--project` | `ALLSTAK_PROJECT` | `project` | — |
-| environment | `--environment` | `ALLSTAK_ENVIRONMENT` | `environment` | `production` |
-| release | `--release` | `ALLSTAK_RELEASE` | `release` (string or function) | — |
-| api host | `--host` | `ALLSTAK_HOST` | `selfHosted.apiHost` | `https://api.allstak.sa` |
-| ingest host | `--ingest-host` | `ALLSTAK_INGEST_HOST` | `selfHosted.ingestHost` | matches api host |
-| dashboard host | `--dashboard-host` | `ALLSTAK_DASHBOARD_HOST` | `selfHosted.dashboardHost` | derived from api |
-| source-maps | `--skip-source-maps` | — | `sourceMaps.enabled` | `true` |
-| snapshot-keep | `--snapshot-keep` | `ALLSTAK_SNAPSHOT_KEEP` | `snapshotKeep` | `10` |
-
-## Validation
-
-```bash
-npx @allstak/wizard@beta config validate
-```
-
-Reports the discovered file path, the declared `schemaVersion`, and any
-deprecation warnings.
-
-## Migration
-
-When the wizard ships a new schema, `allstak config migrate` upgrades your
-config in place.
-
-```bash
-npx @allstak/wizard@beta config migrate            # rewrites .json files
-npx @allstak/wizard@beta config migrate --dry-run  # prints planned changes
-```
-
-For `.ts` / `.mjs` configs the wizard prints the migrated shape and asks
-you to apply it manually — we don't roundtrip TypeScript through an AST
-serializer that would mangle your imports and comments.
-
-The wizard treats a missing `schemaVersion` as `1`. Always declaring it
-explicitly future-proofs your config.
-
-## Self-hosted
-
-Wizard never assumes `api.allstak.sa`. For a self-hosted deployment:
-
-```ts
-export default defineConfig({
-  schemaVersion: 1,
-  selfHosted: {
-    apiHost: 'https://api.allstak.acme.com',
-    ingestHost: 'https://api.allstak.acme.com',
-    dashboardHost: 'https://app.allstak.acme.com',
-  },
-});
-```
-
-CLI users can also pass `--host`, `--ingest-host`, `--dashboard-host`
-directly. **Caveat:** the Java SDK currently hardcodes its host; the wizard
-will warn when `-i java` runs against a non-default host until the SDK
-ships a configurable host field.
-
-## Release as a function
-
-Useful for CI:
-
-```ts
-release: process.env.GIT_SHA,                 // string at config-load time
-release: () => process.env.GIT_SHA,           // function evaluated each run
-release: () => execSync('git rev-parse HEAD').toString().trim(),
-```
-
-If the function returns `undefined`, the wizard falls through the precedence
-chain (env, default).

package/docs/beta/doctor.md

@@ -1,79 +0,0 @@
-# `allstak doctor`
-
-Deterministic diagnostic with named stages. Read-only by default;
-`--live-probe` adds a real test event roundtrip.
-
-## Stages
-
-The doctor runs all stages in this fixed order, even when an early stage
-fails (so you see the whole picture):
-
-| Stage | What it checks |
-|-------|----------------|
-| `auth` | Credentials present + accepted (`--api-key` or stored JWT). Auto-refreshes JWT if it expires soon. |
-| `reachability` | Configured host responds (HTTP-level only — no `/health` exists, so it probes `/api/v1/auth/me` and treats `401` as "alive"). |
-| `config` | `allstak.config.*` discovered (or absent — both fine). Reports the source path. |
-| `integration` | Delegates to the integration's own doctor — env present? entry patched? imports wired? |
-| `event-ingest` | (only with `--live-probe`) Sends a real event to `/ingest/v1/errors`, polls `/api/v1/errors` for ingestion. |
-| `release-linkage` | Confirms the configured release is attached to the test event. |
-| `source-maps` | Asks each registered source-map provider for its wired/drifted/missing state. |
-
-## Output
-
-Each stage emits exactly one line: `pass`, `warn`, `fail`, or `skip`, plus
-a fix hint when applicable. `--json` produces a structured array under
-`data.stages` for programmatic consumption.
-
-```bash
-npx @allstak/wizard@beta doctor
-```
-
-```
-» Doctor
-✓ [auth] Authenticated as me@example.com.
-✓ [reachability] Reached https://api.allstak.sa.
-✓ [config] Loaded config from /repo/allstak.config.ts.
-✓ [integration] react: ok (4 checks)
-- [event-ingest] Skipped (pass --live-probe to enable).
-- [release-linkage] Skipped: live probe required to verify release linkage end-to-end.
-✓ [source-maps] Wired: vite
-✓ Doctor: setup looks good.
-```
-
-## Live probe
-
-Requires both:
-
-- `--api-key` (project-scoped — sends the test event),
-- `--project-id <uuid>` (the project UUID, visible in the dashboard URL).
-
-```bash
-npx @allstak/wizard@beta doctor --live-probe \
-  --api-key ask_live_... \
-  --project-id 7e8e... \
-  --live-probe-timeout 60000
-```
-
-Flow:
-
-1. Wizard generates a random fingerprint (`wizard-probe-<6-hex>`).
-2. POSTs an event to `/ingest/v1/errors` with that fingerprint in metadata.
-3. Polls `/api/v1/errors?projectId=&from=&query=<fingerprint>` every 2.5s.
-4. Reports the dashboard URL of the captured event when found.
-
-If polling times out, the doctor returns `E_INGEST_VERIFY_FAILED` with the
-event id you can hand to support.
-
-## JSON mode
-
-```bash
-npx @allstak/wizard@beta --json doctor | jq '.data.stages'
-```
-
-Each entry is `{ stage, status, detail, fix?, data? }`.
-
-## When stages fail
-
-The CLI exits non-zero (code 2) on any `fail`. `warn` and `skip` do not
-change exit code. See [errors.md](../errors.md) for the canonical error
-codes each stage can emit.

package/docs/beta/expo.md

@@ -1,69 +0,0 @@
-# Expo (React Native)
-
-**Stability:** internal experimental. Managed workflow only. The wizard refuses to run on
-projects that have already prebuilt to native (i.e. an `ios/` or `android/`
-directory at the project root) — bare-via-prebuild has too many failure
-modes for an unattended patcher and remains `unsupported` in v0.1.
-
-## What you get
-
-- `@allstak/react-native` installed.
-- `.env` populated with `ALLSTAK_API_KEY` (and the standard companions).
-- `app.json` gets the AllStak Expo plugin appended to `expo.plugins[]`
-  (idempotent — re-running does not duplicate the entry).
-- `App.tsx` gets:
-  - An AST-injected `import { AllStakProvider } from '@allstak/react-native'`.
-  - A managed-block hint reminding you to wrap your root component in
-    `<AllStakProvider>…</AllStakProvider>`.
-- `app.config.{js,ts}` gets the same managed-block hint if it exists.
-
-## Run
-
-```bash
-npx @allstak/wizard@beta -i expo
-```
-
-## Compatibility
-
-- `expo >= 50`. Older versions refused with `E_UNSUPPORTED_VERSION`.
-- `react-native >= 0.73`.
-- **Managed workflow only.** Bare/prebuilt projects (`ios/` or `android/`
-  present) are refused with a clear error. To use AllStak in a bare RN
-  app, follow the SDK README directly — the wizard will not patch native
-  Xcode/Gradle config in v0.1.
-
-## Wiring `<AllStakProvider>`
-
-The wizard cannot safely AST-edit your component tree (App.tsx shapes
-vary too much — function/class/forwardRef/HOC). It places a managed-block
-hint and you wire the provider yourself:
-
-```tsx
-import { AllStakProvider } from '@allstak/react-native';
-
-export default function App() {
-  return (
-    <AllStakProvider apiKey={process.env.EXPO_PUBLIC_ALLSTAK_API_KEY}>
-      {/* your app */}
-    </AllStakProvider>
-  );
-}
-```
-
-`doctor` reports `warn` on `provider-wired` until the live call is detected
-(comments inside the managed-block hint are stripped before matching, so
-the example above does not produce a false positive).
-
-## Capabilities the wizard does NOT claim
-
-- **No source-map upload wiring.** Metro source-maps are deferred to v0.2
-  (no-op `skip` in `doctor`).
-- **No native edits.** No Podfile / Gradle / Info.plist / AndroidManifest
-  changes. EAS Build users get the plugin reference in `app.json` and Expo
-  takes care of the rest.
-
-## Verify
-
-```bash
-npx @allstak/wizard@beta doctor -i expo
-```

package/docs/beta/fastify.md

@@ -1,62 +0,0 @@
-# Fastify
-
-**Stability:** internal experimental. AST-safe import (ESM only) + managed-block hint.
-The wizard branches on module system: ESM entries get an AST-injected
-`import { allstakFastify }`; CJS entries get the managed-block hint only
-(the wizard does NOT inject `require()` calls, which interact badly with
-top-of-file conditional/dynamic require patterns).
-
-## What you get
-
-- `@allstak/fastify` installed.
-- `.env` populated with `ALLSTAK_API_KEY`.
-- Entry file (resolved from `package.json:scripts.start`,
-  `package.json:main`, or conventional `src/server.{ts,js,mjs}` /
-  `src/index.{ts,js,mjs}`):
-  - **ESM** (`type: module` / `.mjs` / `import` syntax in the file):
-    AST-injected import.
-  - **CJS**: import skipped, hint-only.
-  - Both: a managed-block hint demonstrating
-    `app.register(allstakFastify, { ... })`.
-
-## Run
-
-```bash
-npx @allstak/wizard@beta -i fastify
-```
-
-## Compatibility
-
-- `fastify >= 4`. Older versions refused with `E_UNSUPPORTED_VERSION`.
-
-## Wiring `app.register`
-
-```ts
-import Fastify from 'fastify';
-import { allstakFastify } from '@allstak/fastify';
-
-const app = Fastify({ logger: true });
-await app.register(allstakFastify, {
-  apiKey: process.env.ALLSTAK_API_KEY,
-});
-// … your routes
-await app.listen({ port: 3000 });
-```
-
-`doctor` reports `warn` on `plugin-registered` until a non-comment
-`app.register(allstakFastify, ...)` call is detected (line comments
-are stripped before matching so the wizard's own hint does not satisfy
-the check).
-
-## Capabilities the wizard does NOT claim
-
-- **No source-map upload wiring.** Deferred to v0.2.
-- **No CJS AST patching.** CJS users wire the `require(...)` and
-  `app.register(...)` calls per the managed-block hint.
-- **No bundler integration** (esbuild/tsup/etc.) — out of scope for v0.1.
-
-## Verify
-
-```bash
-npx @allstak/wizard@beta doctor -i fastify
-```

package/docs/beta/known-limitations.md

@@ -1,93 +0,0 @@
-# Known limitations
-
-This page is the **honest** list of what the wizard does and doesn't do
-today. Read it before making the wizard part of a critical onboarding
-path.
-
-## Supported integrations
-
-| Integration | Stability | Notes |
-|-------------|-----------|-------|
-| `react` (Vite or CRA) | ✅ stable | Validated end-to-end; dogfooded against `admin-web` and `web`. |
-| `next` (13/14/15, app + pages router) | ✅ stable | Disposable live-backend certification passed for App Router 15 and pages-router onboarding; Edge Runtime and Server Actions are not certified. |
-| `js` (vanilla Node) | ✅ stable | Validated end-to-end. |
-| `expo` (managed workflow, ≥50) | internal experimental | Hidden from normal public setup; requires `--experimental`. Real device/emulator runtime proof is incomplete. |
-| `nestjs` (≥9) | internal experimental | Runtime SDK fail-open is verified, but wizard auto-wiring is not Stable. Requires `--experimental`. |
-| `fastify` (≥4) | internal experimental | Runtime SDK fail-open is verified, but wizard auto-wiring is not Stable. Requires `--experimental`. |
-
-Everything else is `experimental` (refuses without `--experimental`) or
-`unsupported` (refuses always).
-
-## Explicitly NOT supported
-
-| Target | Why |
-|--------|-----|
-| **Astro** | The wizard's framework detector falls through to `js`, which writes env vars but does not wire Astro middleware. Real Astro support is on the v0.2 roadmap. Until then: do the setup manually following the SDK README. |
-| **Bare React Native** | Podfile + Gradle patching cannot be validated without iOS sim + Android emulator builds. The wizard refuses with `E_UNSUPPORTED_FRAMEWORK`. Use the Expo managed path if you can; otherwise follow the manual setup. |
-| **Expo prebuilt / bare-via-prebuild** | If `ios/` or `android/` already exist, the wizard refuses (same reason as bare RN). Run `expo prebuild --clean` later if you need native edits, but the wizard will not patch the native projects in v0.1. |
-| **NestJS / Fastify auto-registration** | Wizard injects the import + a managed-block hint. It does NOT mutate `bootstrap()` to call `useGlobalFilters` or `app.register` — entry-point shapes vary too widely (factories, hybrid apps, custom adapters) and the blast radius is too high. `doctor` reports `warn` until you wire the call yourself. |
-| **Flutter source maps** | The Flutter SDK itself does not yet ship source-map upload tooling. Wizard's Flutter integration is `experimental` and only writes env vars. |
-| **Backend SDK auto-wiring** (OTel, Spring Boot, Django, Flask, Rails, .NET, Go, PHP) | Each is `experimental`. Install + env-var writing is supported under `--experimental`; framework wiring is NOT — too many entry-point shapes to AST-patch safely without per-framework fixture validation. v0.2 roadmap. |
-
-## Auth specifics
-
-- Login uses email-OTP (no OAuth device-flow). Rate-limited; 4–8 digit
-  codes valid for ~10 minutes.
-- Two-factor (TOTP) is supported but not unit-tested end-to-end (the test
-  matrix doesn't include accounts with 2FA enabled).
-- JWT refresh has a 60-second early-refresh window; the access token TTL
-  is 15 minutes, the refresh token rotates on each `/refresh` call.
-
-## Source-maps
-
-- **Vite**: AST-injects the plugin import + managed-block hint.
-- **Next.js**: managed-block hint only (next.config shapes vary too much
-  for safe AST mutation).
-- **Webpack**: managed-block hint only.
-- **Metro / Hermes (RN)**: provider registered but inert in v0.1 — `detect()`
-  returns `false` and `wire()` is a no-op. Real validation needs device
-  builds.
-- End-to-end **upload roundtrip** (POST `/api/v1/sourcemaps/upload` →
-  symbolicate) is NOT verified by `doctor` in v0.1.x. The wizard wires the
-  plugin; the upload + dashboard symbolication are the SDK + dashboard's
-  responsibility.
-
-## Other gaps
-
-- **Windows Credential Manager** is not yet a credential store backend on
-  Windows — Windows users get the AES-256-GCM encrypted-file fallback.
-- **CRA + standalone Webpack** are detected but the wizard does not AST-mutate
-  Webpack configs.
-- **Multi-package monorepos** are detected (pnpm/turbo/nx/lerna/npm-workspaces)
-  but the wizard operates on the cwd's nearest manifest. There is no
-  "which package?" prompt yet.
-- **`allstak login`** is the only path to a user JWT in beta. There is no
-  PAT (personal access token) flow, because the backend doesn't expose one.
-
-## What's safe to use in production
-
-- React + Vite onboarding flows.
-- React + CRA onboarding flows (without source-map upload — manual wiring).
-- Vanilla Node entry-point patching.
-- Next.js with manual `next.config.js` follow-up.
-- Expo managed workflow (`app.json` plugin entry + provider hint).
-- NestJS / Fastify install + env wiring + managed-block hint, with a manual
-  `useGlobalFilters` / `app.register` call as documented in the per-framework
-  beta page.
-- All commands in their `--dry-run` form (no disk writes anywhere).
-- `restore` / snapshot inspection (read-only ops).
-
-## What to avoid
-
-- Running `--experimental` integrations in CI without manual review.
-- Deploying based on `doctor --live-probe` for Java integrations until the
-  host-config fix lands.
-- Treating Astro / bare-RN as "the wizard handles it."
-
-## Reporting an issue
-
-Re-run with `--debug` and grab the canonical `errorCode` + `subcode` from
-the output. Snapshot directory contents (under `.allstak-wizard/backups/`)
-are useful for support. Do **not** paste your full env file or
-`allstak.config.*` to a public issue — redact `apiKey` / DSN / refresh
-token values first.

package/docs/beta/nestjs.md

@@ -1,69 +0,0 @@
-# NestJS
-
-**Stability:** internal experimental. AST-safe import + managed-block hint. The wizard
-does NOT auto-mutate `bootstrap()` to call `app.useGlobalFilters(...)` —
-Nest entry shapes vary too much (factory functions, custom adapters,
-hybrid microservice apps) and registration mid-bootstrap has high blast
-radius. The wizard places the import and a hint; you wire the call.
-
-## What you get
-
-- `@allstak/nestjs` installed.
-- `.env` populated with `ALLSTAK_API_KEY`.
-- `src/main.ts` (or the entry pointed to by `package.json:scripts.start`)
-  gets:
-  - An AST-injected
-    `import { AllStakNestExceptionFilter, AllStakNestInterceptor } from '@allstak/nestjs'`.
-  - A managed-block hint demonstrating the registration call inside
-    a `//`-comment block. `doctor` strips line comments before
-    matching the live registration, so the hint itself does not
-    produce a false-positive `pass`.
-
-## Run
-
-```bash
-npx @allstak/wizard@beta -i nestjs
-```
-
-## Compatibility
-
-- `@nestjs/core >= 9`. Older versions refused with `E_UNSUPPORTED_VERSION`.
-
-## Wiring `useGlobalFilters` / `useGlobalInterceptors`
-
-Inside your `bootstrap()` after `NestFactory.create(...)`:
-
-```ts
-import { NestFactory } from '@nestjs/core';
-import {
-  AllStakNestExceptionFilter,
-  AllStakNestInterceptor,
-} from '@allstak/nestjs';
-import { AppModule } from './app.module';
-
-async function bootstrap() {
-  const app = await NestFactory.create(AppModule);
-  app.useGlobalFilters(new AllStakNestExceptionFilter());
-  app.useGlobalInterceptors(new AllStakNestInterceptor());
-  await app.listen(3000);
-}
-bootstrap();
-```
-
-`doctor` reports `warn` on `filter-registered` until at least one of
-`useGlobalFilters(...AllStakNestExceptionFilter` or
-`useGlobalInterceptors(...AllStakNestInterceptor` is detected in
-non-comment source.
-
-## Capabilities the wizard does NOT claim
-
-- **No source-map upload wiring.** Deferred to v0.2.
-- **No registration-call auto-injection.** See the rationale above.
-- **No microservice / hybrid-app wiring.** The hint targets the standard
-  HTTP bootstrap; for hybrid apps register filters per-microservice.
-
-## Verify
-
-```bash
-npx @allstak/wizard@beta doctor -i nestjs
-```