@ashlr/hub 2.2.0

package/dist/core/quality/store.d.ts

@@ -0,0 +1,56 @@
+/**
+ * store.ts — M27 HealthReport snapshot persistence (~/.ashlr/quality/).
+ *
+ * Persists + loads HealthReport snapshots so each `ashlr health` run can compute
+ * per-repo score deltas (trend) against the previous snapshot.
+ *
+ * Layout:
+ *   ~/.ashlr/quality/reports/<generatedAt-ms>.json   — one pretty-printed
+ *                                                       HealthReport per run
+ *   ~/.ashlr/quality/reports/<generatedAt-ms>-N.json  — collision fallback for a
+ *                                                       second run in the SAME ms
+ *
+ * Trend caveat: loadPreviousReport selects the newest snapshot STRICTLY BEFORE
+ * the current report's generatedAt (so a just-saved report is never diffed
+ * against itself). Snapshots are thus effectively at most one-per-ms for trend
+ * purposes: two runs that share an identical ms-resolution generatedAt are both
+ * persisted (distinct `-N` files, no history loss) but the second's delta degrades
+ * gracefully to '—' rather than diffing against the same-ms prior. This is benign
+ * for an interactive CLI; only a sub-ms daemon/cron driver would notice.
+ *
+ * HARD SAFETY INVARIANTS (M27):
+ *  - WRITES ONLY under ~/.ashlr/quality/. NEVER writes CONFIG_PATH /
+ *    saveConfig() / router policy / prompts, and NEVER touches a user repo
+ *    working tree.
+ *  - Atomic-ish write: tmp-write + rename (POSIX-atomic), mirroring
+ *    core/learn/store.ts and core/inbox/store.ts.
+ *  - Bounded: listReports caps how many snapshot files it reads (MAX_REPORTS).
+ *  - Never throws: all exported functions swallow errors and return safe
+ *    defaults (null / []).
+ */
+import type { HealthReport } from '../types.js';
+/**
+ * Absolute path to the reports directory: `~/.ashlr/quality/reports`.
+ * Created lazily by saveReport — this function does NOT create it.
+ */
+export declare function reportsDir(): string;
+/**
+ * Persist a HealthReport snapshot under reportsDir() as
+ * `<generatedAt-ms>.json` via atomic tmp-write + rename. Returns the written
+ * path, or null on any failure. Never throws. The ONLY filesystem destination
+ * is under ~/.ashlr/quality/.
+ */
+export declare function saveReport(report: HealthReport): string | null;
+/**
+ * List persisted HealthReport snapshots, most-recent first by generatedAt,
+ * bounded to MAX_REPORTS files. Read-only. Corrupt files are skipped silently.
+ * Never throws (returns [] on error).
+ */
+export declare function listReports(): HealthReport[];
+/**
+ * Return the newest persisted snapshot strictly BEFORE `before` (the current
+ * report's generatedAt) — so a just-saved report isn't diffed against itself.
+ * When `before` is omitted, returns the newest snapshot. Used to compute the
+ * per-repo score delta trend in the report. Never throws (null on absence).
+ */
+export declare function loadPreviousReport(before?: string): HealthReport | null;

package/dist/core/quality/store.js

@@ -0,0 +1,195 @@
+/**
+ * store.ts — M27 HealthReport snapshot persistence (~/.ashlr/quality/).
+ *
+ * Persists + loads HealthReport snapshots so each `ashlr health` run can compute
+ * per-repo score deltas (trend) against the previous snapshot.
+ *
+ * Layout:
+ *   ~/.ashlr/quality/reports/<generatedAt-ms>.json   — one pretty-printed
+ *                                                       HealthReport per run
+ *   ~/.ashlr/quality/reports/<generatedAt-ms>-N.json  — collision fallback for a
+ *                                                       second run in the SAME ms
+ *
+ * Trend caveat: loadPreviousReport selects the newest snapshot STRICTLY BEFORE
+ * the current report's generatedAt (so a just-saved report is never diffed
+ * against itself). Snapshots are thus effectively at most one-per-ms for trend
+ * purposes: two runs that share an identical ms-resolution generatedAt are both
+ * persisted (distinct `-N` files, no history loss) but the second's delta degrades
+ * gracefully to '—' rather than diffing against the same-ms prior. This is benign
+ * for an interactive CLI; only a sub-ms daemon/cron driver would notice.
+ *
+ * HARD SAFETY INVARIANTS (M27):
+ *  - WRITES ONLY under ~/.ashlr/quality/. NEVER writes CONFIG_PATH /
+ *    saveConfig() / router policy / prompts, and NEVER touches a user repo
+ *    working tree.
+ *  - Atomic-ish write: tmp-write + rename (POSIX-atomic), mirroring
+ *    core/learn/store.ts and core/inbox/store.ts.
+ *  - Bounded: listReports caps how many snapshot files it reads (MAX_REPORTS).
+ *  - Never throws: all exported functions swallow errors and return safe
+ *    defaults (null / []).
+ */
+import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync, } from 'node:fs';
+import { join } from 'node:path';
+import { qualityDir } from '../config.js';
+// ---------------------------------------------------------------------------
+// Bounds
+// ---------------------------------------------------------------------------
+/** Never read more than this many snapshot files at once (bounds I/O). */
+const MAX_REPORTS = 200;
+// ---------------------------------------------------------------------------
+// Path helpers (re-resolved at call time so tests can relocate HOME)
+// ---------------------------------------------------------------------------
+/**
+ * Absolute path to the reports directory: `~/.ashlr/quality/reports`.
+ * Created lazily by saveReport — this function does NOT create it.
+ */
+export function reportsDir() {
+    return join(qualityDir(), 'reports');
+}
+/** Ensure a directory exists, silently creating it if needed. */
+function ensureDir(dir) {
+    try {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+    }
+    catch {
+        // Best-effort; a subsequent write will fail gracefully in its try/catch.
+    }
+}
+/** Derive a filename-safe, chronologically-sortable stem from an ISO ts. */
+function reportStem(generatedAt) {
+    // Epoch-ms keeps lexicographic order == chronological order. Fall back to a
+    // sanitized ISO string if the timestamp is unparseable.
+    const ms = Date.parse(generatedAt);
+    if (Number.isFinite(ms))
+        return String(ms);
+    return generatedAt.replace(/[^\w.-]+/g, '-');
+}
+/**
+ * Pick a destination path under `dir` for `stem` that does NOT already exist,
+ * so two runs in the same millisecond (identical epoch-ms stem) do not collide
+ * and overwrite each other's snapshot. The first run in a fresh dir gets the
+ * plain `<stem>.json` (preserving chronological lexicographic ordering and the
+ * documented filename), and a same-ms collision falls back to `<stem>-1.json`,
+ * `<stem>-2.json`, … (a tiny bounded suffix probe). Best-effort: on the rare
+ * exhaustion of the probe it returns the plain path (last-writer-wins, as before).
+ */
+function uniqueDest(dir, stem) {
+    const plain = join(dir, `${stem}.json`);
+    try {
+        if (!existsSync(plain))
+            return plain;
+        for (let i = 1; i <= 1000; i++) {
+            const candidate = join(dir, `${stem}-${i}.json`);
+            if (!existsSync(candidate))
+                return candidate;
+        }
+    }
+    catch {
+        // existsSync should not throw, but fall through to the plain path defensively.
+    }
+    return plain;
+}
+/** Light type-guard so we never return garbage from the store. */
+function isValidReport(parsed) {
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return false;
+    }
+    const r = parsed;
+    return (typeof r['generatedAt'] === 'string' &&
+        Array.isArray(r['repos']) &&
+        Array.isArray(r['scores']) &&
+        typeof r['averageScore'] === 'number');
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Persist a HealthReport snapshot under reportsDir() as
+ * `<generatedAt-ms>.json` via atomic tmp-write + rename. Returns the written
+ * path, or null on any failure. Never throws. The ONLY filesystem destination
+ * is under ~/.ashlr/quality/.
+ */
+export function saveReport(report) {
+    try {
+        const dir = reportsDir();
+        ensureDir(dir);
+        // Collision-resistant: a second run in the SAME millisecond (identical
+        // epoch-ms stem) gets a `-N` suffix instead of overwriting the first snapshot.
+        const dest = uniqueDest(dir, reportStem(report.generatedAt));
+        const tmp = dest + '.tmp';
+        writeFileSync(tmp, JSON.stringify(report, null, 2) + '\n', 'utf8');
+        renameSync(tmp, dest);
+        return dest;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * List persisted HealthReport snapshots, most-recent first by generatedAt,
+ * bounded to MAX_REPORTS files. Read-only. Corrupt files are skipped silently.
+ * Never throws (returns [] on error).
+ */
+export function listReports() {
+    try {
+        const dir = reportsDir();
+        if (!existsSync(dir))
+            return [];
+        let files;
+        try {
+            // Filename stems are epoch-ms, so a lexicographic descending sort of the
+            // filenames already orders newest-first; sort here so the slice keeps the
+            // MOST-RECENT MAX_REPORTS rather than an arbitrary directory order.
+            files = readdirSync(dir)
+                .filter((f) => f.endsWith('.json') && !f.endsWith('.tmp'))
+                .sort((a, b) => (a < b ? 1 : a > b ? -1 : 0))
+                .slice(0, MAX_REPORTS);
+        }
+        catch {
+            return [];
+        }
+        const reports = [];
+        for (const file of files) {
+            try {
+                const raw = readFileSync(join(dir, file), 'utf8');
+                const parsed = JSON.parse(raw);
+                if (isValidReport(parsed))
+                    reports.push(parsed);
+            }
+            catch {
+                // Unreadable or malformed — skip silently.
+            }
+        }
+        // Most-recent first by generatedAt (ISO strings sort lexicographically).
+        reports.sort((a, b) => a.generatedAt < b.generatedAt ? 1 : a.generatedAt > b.generatedAt ? -1 : 0);
+        return reports;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Return the newest persisted snapshot strictly BEFORE `before` (the current
+ * report's generatedAt) — so a just-saved report isn't diffed against itself.
+ * When `before` is omitted, returns the newest snapshot. Used to compute the
+ * per-repo score delta trend in the report. Never throws (null on absence).
+ */
+export function loadPreviousReport(before) {
+    try {
+        const all = listReports();
+        if (all.length === 0)
+            return null;
+        if (before === undefined)
+            return all[0] ?? null;
+        for (const r of all) {
+            if (r.generatedAt < before)
+                return r;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/core/quality/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/core/quality/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,iEAAiE;AACjE,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,UAAU,CAAC,WAAmB;IACrC,4EAA4E;IAC5E,wDAAwD;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kEAAkE;AAClE,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,OAAO,CACL,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ;QACpC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,CACtC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAoB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,uEAAuE;QACvE,+EAA+E;QAC/E,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;QAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,yEAAyE;YACzE,0EAA0E;YAC1E,oEAAoE;YACpE,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;iBACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,aAAa,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpB,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3E,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,WAAW,GAAG,MAAM;gBAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/readiness.d.ts

@@ -0,0 +1,112 @@
+/**
+ * readiness.ts — SHARED, READ-ONLY first-activation readiness model (H7).
+ *
+ * Single source of truth consumed by BOTH `ashlr preflight` (src/cli/preflight.ts)
+ * AND the five new read-only `ashlr doctor` probes (src/core/doctor.ts), so there
+ * is no drift and no double maintenance. See docs/contracts/CONTRACT-H7.md
+ * (BUILD ITEM 1 + BUILD ITEM 2).
+ *
+ * H7 ABSOLUTE RULES (proven by test/h7.*):
+ *  - READ-ONLY: composes only read-only primitives — probeEndpoint (local GET,
+ *    never throws), listEnrolled, killSwitchOn, loadDaemonState (H5 self-heal),
+ *    listSandboxes. It MUTATES NOTHING and adds NO outward capability.
+ *  - The ONE write is the `~/.ashlr` writeable probe — it writes then UNLINKS a
+ *    private sentinel under the (HOME-relative, isolated-in-tests) ~/.ashlr dir;
+ *    it touches no repo, no enrollment, no kill, no daemon state, and leaves no
+ *    persistent artifact.
+ *  - NEVER throws — every facet degrades to a typed result on error.
+ *  - No new runtime deps; node builtins + existing core modules only.
+ *
+ * NOTE: paths are resolved at CALL TIME via homedir() (matching policy.ts /
+ * daemon/state.ts) so a test that relocates process.env.HOME gets an ISOLATED
+ * ~/.ashlr — never the real one. (config.ts CONFIG_DIR is captured at import
+ * time, so we do NOT use it here for the writeable sentinel.)
+ */
+import type { AshlrConfig } from './types.js';
+/** Severity of a single readiness finding. */
+export type ReadinessSeverity = 'blocker' | 'warning' | 'info';
+/** One readiness finding (model/enrollment/kill/daemon/writeable/sandbox/git/phantom). */
+export interface ReadinessFinding {
+    /** Stable facet id, e.g. 'model' | 'enrollment' | 'kill-switch' | 'daemon' |
+     *  'ashlr-writeable' | 'sandbox' | 'git' | 'phantom'. */
+    id: string;
+    /** Severity. 'blocker' forces ready=false; 'warning'/'info' do not. */
+    severity: ReadinessSeverity;
+    /** Human-readable detail line (metadata only — never a secret). */
+    detail: string;
+    /** Optional remediation hint. */
+    fix?: string;
+}
+/** Full readiness report. `ready` is true iff there are zero 'blocker' findings. */
+export interface ReadinessReport {
+    /** True iff no finding has severity 'blocker'. */
+    ready: boolean;
+    /** Findings that BLOCK a safe first activation (ready=false). */
+    blockers: ReadinessFinding[];
+    /** Non-blocking warnings (surfaced, do not block). */
+    warnings: ReadinessFinding[];
+    /** Informational notes (e.g. empty-enrollment on a fresh install — fine). */
+    info: ReadinessFinding[];
+    /** ISO timestamp the report was built. */
+    generatedAt: string;
+}
+/** Orphan-sandbox count threshold at/above which sandbox health warns. */
+export declare const SANDBOX_ORPHAN_WARN_THRESHOLD = 3;
+/**
+ * READ-ONLY writeable probe for ~/.ashlr. Writes then immediately UNLINKS a
+ * private sentinel under the (call-time, HOME-relative) ~/.ashlr dir. Returns
+ * true when writeable, false otherwise. Leaves NO persistent artifact. Never
+ * throws.
+ */
+export declare function checkAshlrWriteable(): boolean;
+/** READ-ONLY enrollment snapshot: { count } via listEnrolled(). Never throws. */
+export declare function readEnrollmentState(): {
+    count: number;
+};
+/** READ-ONLY kill-switch snapshot: { on } via killSwitchOn(). Never throws. */
+export declare function readKillState(): {
+    on: boolean;
+};
+/**
+ * READ-ONLY daemon-health snapshot via loadDaemonState() (which applies the H5
+ * reconcileDaemonState self-heal at the load chokepoint). Returns whether the
+ * daemon is reported running, its recorded pid, and whether the recorded pid is
+ * still alive (a still-running flag with a live pid is a healthy live daemon; a
+ * dead-pid running flag is already self-healed to running:false by the load).
+ * Never throws.
+ */
+export declare function readDaemonHealth(): {
+    running: boolean;
+    pid: number | null;
+    selfHealed: boolean;
+    pidAlive: boolean;
+};
+/**
+ * READ-ONLY sandbox-health snapshot via listSandboxes(): total on-disk sandboxes
+ * + an orphan estimate. A sandbox is counted as an orphan when its owner pid is
+ * no longer alive AND it is older than ORPHAN_STALE_MS (mirrors the sweep's two
+ * guards — a LIVE owner pid is NEVER counted as an orphan regardless of age).
+ * Read-only; removes NOTHING. Never throws.
+ */
+export declare function readSandboxHealth(): {
+    total: number;
+    orphans: number;
+};
+/**
+ * Build the full first-activation readiness report (READ-ONLY).
+ *
+ * Composes (all read-only, all degrade gracefully):
+ *  - local model reachable via probeEndpoint (down => WARNING, never a blocker)
+ *  - enrollment count via readEnrollmentState (0 => INFO, never a blocker)
+ *  - kill-switch via readKillState (on => WARNING)
+ *  - daemon not stuck via readDaemonHealth (self-heal already applied)
+ *  - ~/.ashlr writeable via checkAshlrWriteable (not writeable => BLOCKER)
+ *  - sandbox health via readSandboxHealth (high orphan count => WARNING)
+ *  - git present (absent => BLOCKER); phantom present (absent => WARNING)
+ *
+ * `ready` is true iff blockers.length === 0. Never throws.
+ *
+ * MUST NOT mutate any enrollment/kill/daemon/sandbox/repo state; the ONLY write
+ * is the self-cleaning sentinel inside checkAshlrWriteable.
+ */
+export declare function buildReadiness(cfg: AshlrConfig): Promise<ReadinessReport>;