@attalabs/vinaya 0.19.3 → 0.21.0

package/dist/checks/bin/check-registry-gates.js

@@ -6,17 +6,17 @@ import { existsSync as existsSync3, readdirSync, readFileSync, statSync } from "
 import matter2 from "gray-matter";
 // ../../packages/aeg-core/src/gate-audience.ts
 var GATE_AUDIENCE = {
-  "check-branch-topology": { shippedAs: "branch-topology" },
-  "check-first-push-dispatch": { shippedAs: "first-push-dispatch" },
-  "check-no-disk-state": { shippedAs: "no-disk-state" },
-  "verify-brief": { shippedAs: "brief-shape" },
-  "verify-coherence": { shippedAs: "coherence" },
-  "verify-dispatch": { shippedAs: "dispatch-readiness" },
-  "verify-docs": { shippedAs: ["doc-coverage", "doc-coverage-push"] },
-  "verify-registry": { shippedAs: "registry-gates" },
-  "verify-review-gate": { shippedAs: "review-gate" },
-  "verify-single-plan-pr": { shippedAs: "single-plan-pr" },
-  "verify-test-plan": { shippedAs: "test-plan" },
+  "check-branch-topology": { shippedAs: "branch-topology", ring: 0 },
+  "check-first-push-dispatch": { shippedAs: "first-push-dispatch", ring: 0 },
+  "check-no-disk-state": { shippedAs: "no-disk-state", ring: 0 },
+  "verify-brief": { shippedAs: "brief-shape", ring: 0 },
+  "verify-coherence": { shippedAs: "coherence", ring: 0 },
+  "verify-dispatch": { shippedAs: "dispatch-readiness", ring: 0 },
+  "verify-docs": { shippedAs: ["doc-coverage", "doc-coverage-push"], ring: 0 },
+  "verify-registry": { shippedAs: "registry-gates", ring: 0 },
+  "verify-review-gate": { shippedAs: "review-gate", ring: 1 },
+  "verify-single-plan-pr": { shippedAs: "single-plan-pr", ring: 0 },
+  "verify-test-plan": { shippedAs: "test-plan", ring: 1 },
   "check-direct-main-push": {
     internal: "Reaches adopters through `vinaya audit --only=direct-push`, not the check registry: it is a ring-2 sweep over merge history keyed on `GITHUB_SHA`, run by the generated archivist job on push to the default branch. It has no diff to key on, so there is nothing for `vinaya check` to run it against."
   },
@@ -191,6 +191,12 @@ var NEXT_HEADER = /\*\*[A-Z][^*]*\*\*/;
 var FIELD_LABEL = /^(Depends-on|Conflicts-with)\s*:\s*(.*)$/i;
 var ID_TOKEN = /^(?:[\w.-]+\s+)?#?\d+[a-z]?$/i;
 var SLUG_QUALIFIED_ID = /^([\w.-]+)\s+(#?\d+[a-z]?)$/i;
+function splitSlugQualifiedEdge(edge) {
+  const m = edge.trim().match(SLUG_QUALIFIED_ID);
+  if (!m)
+    return null;
+  return { slug: m[1], bareId: m[2] };
+}
 function isEmptyMarker(s) {
   const t = s.trim();
   return t === "" || t === "—" || t === "-" || t === "–";
@@ -328,6 +334,13 @@ var LABELS = [
     form: "literal",
     carries: "Execution is halted pending an external unblock; wins over every other derived status."
   },
+  {
+    key: "backlog",
+    id: "vinaya/backlog",
+    category: "state",
+    form: "literal",
+    carries: "The Issue is deliberately unplanned — belongs to no tranche and is excluded from dispatch, until a Planner promotes it."
+  },
   {
     key: "tier-0",
     id: "vinaya/tier:0",
@@ -1780,6 +1793,151 @@ var DERIVED_STATUSES = [
   "incoherent"
 ];
 var DERIVABLE_STATUSES = DERIVED_STATUSES.filter((s) => s !== "backlog");
+// ../../packages/aeg-core/src/report-tokens.ts
+var DASH_LOOKALIKES = {
+  "-": "‑",
+  "–": "‒",
+  "—": "―"
+};
+var DASH_CHARS = new Set(Object.keys(DASH_LOOKALIKES));
+// ../../packages/aeg-core/src/claude-code-transcript.ts
+function summarizeTranscript(jsonl) {
+  const seen = new Set;
+  const components = {
+    inputTokens: 0,
+    outputTokens: 0,
+    cacheCreationInputTokens: 0,
+    cacheReadInputTokens: 0
+  };
+  let model = null;
+  let messageCount = 0;
+  for (const rawLine of jsonl.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line)
+      continue;
+    let entry2;
+    try {
+      entry2 = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (!entry2 || typeof entry2 !== "object")
+      continue;
+    const obj = entry2;
+    if (obj.type !== "assistant")
+      continue;
+    const message = obj.message;
+    const id = message?.id;
+    const usage = message?.usage;
+    if (typeof id !== "string" || !id || !usage || seen.has(id))
+      continue;
+    seen.add(id);
+    messageCount++;
+    components.inputTokens += numberOr(usage.input_tokens, 0);
+    components.outputTokens += numberOr(usage.output_tokens, 0);
+    components.cacheCreationInputTokens += numberOr(usage.cache_creation_input_tokens, 0);
+    components.cacheReadInputTokens += numberOr(usage.cache_read_input_tokens, 0);
+    const messageModel = message?.model;
+    if (typeof messageModel === "string" && messageModel)
+      model = messageModel;
+  }
+  return { components, model, messageCount };
+}
+function numberOr(value, fallback) {
+  return typeof value === "number" && Number.isFinite(value) ? value : fallback;
+}
+function sanitizeKey(value) {
+  return value.replace(/[^A-Za-z0-9]+/g, "-");
+}
+function transcriptPointerPath(projectDir, tmpDir) {
+  return `${tmpDir}/claude-transcript-${sanitizeKey(projectDir)}.txt`;
+}
+function resolvePointer(explicitTranscriptPath, deps) {
+  if (explicitTranscriptPath)
+    return { path: explicitTranscriptPath, corroborated: true };
+  const projectDir = deps.env.CLAUDE_PROJECT_DIR ?? deps.cwd;
+  const tmpDir = deps.env.TMPDIR ?? "/tmp";
+  const pointerPath = transcriptPointerPath(projectDir, tmpDir);
+  const currentSessionId = deps.env.CLAUDE_CODE_SESSION_ID;
+  if (!deps.exists(pointerPath)) {
+    return {
+      pointerExisted: false,
+      corroborated: false,
+      error: `No transcript pointer at ${pointerPath} and no --transcript given. ` + "Either this repo installs no track-transcript.sh Stop hook (lacking one is not a defect — " + "name the transcript directly instead), or no session has completed a turn yet."
+    };
+  }
+  let contents;
+  try {
+    contents = deps.readFile(pointerPath).replace(/\r?\n+$/, "");
+  } catch (err) {
+    return {
+      pointerExisted: true,
+      oursByLocation: true,
+      error: `Transcript pointer at ${pointerPath} could not be read: ${err.message}. ` + "Remove that file to clear this — the Stop hook rewrites it on the next turn."
+    };
+  }
+  const [pointerSessionId, transcriptPath] = contents.split("\t");
+  if (!transcriptPath) {
+    return {
+      pointerExisted: true,
+      oursByLocation: true,
+      error: `Transcript pointer file ${pointerPath} is malformed: "${contents.slice(0, 120)}${contents.length > 120 ? "…" : ""}". ` + "Remove that file to clear this — the Stop hook rewrites it on the next turn."
+    };
+  }
+  if (currentSessionId && pointerSessionId && currentSessionId !== pointerSessionId) {
+    return {
+      pointerExisted: true,
+      corroborated: false,
+      error: `Transcript pointer at ${pointerPath} is stale: written for session ${pointerSessionId}, ` + `but this session is ${currentSessionId}. Name your own transcript with --transcript instead of ` + "reporting another session's figures as yours."
+    };
+  }
+  return { path: transcriptPath, corroborated: Boolean(currentSessionId && pointerSessionId) };
+}
+function resolveMeteringCapability(deps, explicitTranscriptPath) {
+  const resolved = resolvePointer(explicitTranscriptPath, deps);
+  if ("error" in resolved) {
+    const ours = resolved.pointerExisted && (resolved.corroborated || resolved.oursByLocation);
+    if (ours)
+      return { capable: false, reason: "pointer-unusable", detail: resolved.error };
+    return {
+      capable: false,
+      reason: "no-transcript-resolved",
+      detail: resolved.pointerExisted ? `A transcript pointer exists but belongs to another session, so this session has no wiring of its own to use. (Underlying condition, for diagnosis only: ${resolved.error})` : resolved.error
+    };
+  }
+  const downstream = (r, detail) => resolved.corroborated ? { reason: r, detail } : {
+    reason: "no-transcript-resolved",
+    detail: `A transcript pointer was found but could not be shown to belong to this session, so it is not treated as this session's wiring. (Underlying condition, for diagnosis only: ${detail})`
+  };
+  if (!deps.exists(resolved.path)) {
+    return {
+      capable: false,
+      ...downstream("transcript-unreadable", `Resolved transcript path ${resolved.path} is not readable as a regular file owned by this user.`)
+    };
+  }
+  let jsonl;
+  try {
+    jsonl = deps.readFile(resolved.path);
+  } catch (err) {
+    return {
+      capable: false,
+      ...downstream("transcript-unreadable", `Transcript at ${resolved.path} could not be read: ${err.message}`)
+    };
+  }
+  const summary = summarizeTranscript(jsonl);
+  if (summary.messageCount === 0) {
+    return {
+      capable: false,
+      ...downstream("transcript-empty", `Transcript at ${resolved.path} yielded zero assistant messages with usage data — ` + "it's empty, unparseable, or not yet flushed to disk.")
+    };
+  }
+  return { capable: true, transcriptPath: resolved.path, summary };
+}
+function isTokenCollectionWiringBroken(capability) {
+  if (capability.capable)
+    return false;
+  return capability.reason !== "no-transcript-resolved";
+}
 // ../../packages/aeg-core/src/file-classify.ts
 function isCodeFile(p) {
   if (p.endsWith(".md"))
@@ -1986,7 +2144,59 @@ function overrideActive(opts) {
   return false;
 }
 // ../../packages/aeg-core/src/premise-check.ts
+import { createHash } from "node:crypto";
 var ASSERTION_KINDS = new Set(["contains", "absent", "sha256"]);
+function isPremiseHeader(line) {
+  const stripped = line.replace(/[*#]/g, "").trim();
+  return /^premise\s*:?$/i.test(stripped);
+}
+var PREMISE_LINE = /^[-*]\s*(\S+)\s+(contains|absent|sha256)\s*:\s*(.+)$/i;
+function parsePremiseBlock(prBody) {
+  const searchIn = anchoredRegion(prBody, "PREMISE") ?? prBody;
+  const lines = searchIn.split(/\r?\n/);
+  const assertions = [];
+  let inBlock = false;
+  for (const raw of lines) {
+    const line = raw.trim();
+    if (!inBlock) {
+      if (isPremiseHeader(line))
+        inBlock = true;
+      continue;
+    }
+    if (line === "")
+      break;
+    const m = line.match(PREMISE_LINE);
+    if (!m)
+      break;
+    const [, path, kindRaw, value] = m;
+    const kind = kindRaw.toLowerCase();
+    if (!ASSERTION_KINDS.has(kind))
+      continue;
+    assertions.push({ kind, path, value: value.trim() });
+  }
+  return assertions;
+}
+function checkPremises(assertions, fileReader) {
+  const failures = [];
+  for (const a of assertions) {
+    const content = fileReader(a.path);
+    if (content === null) {
+      failures.push(`premise-check: ${a.path} does not exist on disk (premise asserted \`${a.kind}: ${a.value}\`) — the surface moved since this brief was authored; re-dig before proceeding.`);
+      continue;
+    }
+    if (a.kind === "contains" && !content.includes(a.value)) {
+      failures.push(`premise-check: ${a.path} no longer contains "${a.value}" — the premise this brief pinned has moved; re-dig before proceeding.`);
+    } else if (a.kind === "absent" && content.includes(a.value)) {
+      failures.push(`premise-check: ${a.path} now contains "${a.value}", but the brief pinned it absent — the premise has moved; re-dig before proceeding.`);
+    } else if (a.kind === "sha256") {
+      const actual = createHash("sha256").update(content).digest("hex");
+      if (actual !== a.value.toLowerCase()) {
+        failures.push(`premise-check: ${a.path} sha256 mismatch (brief pinned ${a.value}, file is now ${actual}) — the file changed since this brief was authored; re-dig before proceeding.`);
+      }
+    }
+  }
+  return { pass: failures.length === 0, failures };
+}
 
 // ../../packages/aeg-core/src/test-plan-section.ts
 var HEADING_FORM_RE = /^#{1,4}[ \t]*(?:\d+[a-z]?\.[ \t]*)?\*{0,2}Test Plan\*{0,2}[ \t]*$/im;
@@ -2790,6 +3000,7 @@ function checkG1(rows, existsFn) {
   }
   return { check: "G1", status: findings.length > 0 ? "fail" : "pass", findings };
 }
+var SCAFFOLD_PLACEHOLDER = "[undocumented — fill in why]";
 function checkG2(rows, candidateFiles) {
   const implementations = new Set(rows.map((r) => r.implementation).filter((p) => p !== ""));
   const findings = [];
@@ -2801,6 +3012,16 @@ function checkG2(rows, candidateFiles) {
       });
     }
   }
+  for (const row of rows) {
+    const carriesPlaceholder = [row.summary, row.description, row.spec].some((cell) => cell === SCAFFOLD_PLACEHOLDER);
+    if (carriesPlaceholder) {
+      findings.push({
+        row: row.action,
+        path: row.implementation,
+        reason: `${row.ring} row "${row.action}" still carries the scaffold placeholder marker — the why is owed`
+      });
+    }
+  }
   return { check: "G2", status: findings.length > 0 ? "info" : "pass", findings };
 }
 function checkG3(ring0Rows, crossingFiles) {
@@ -3148,6 +3369,100 @@ function parseGlossaryTerms(glossaryContent) {
   }
   return terms;
 }
+// ../../packages/aeg-core/src/quoted-command.ts
+var QUOTED_COMMAND_SHIPS_PREFIX = "aeg-root/";
+var QUOTED_COMMAND_SWEPT_CLASSES = new Set(["ships", "reader-facing"]);
+var START_PATTERN = /<!--\s*AEG:QUOTES-FILE:START:(\S+?)\s*-->/g;
+var END_PATTERN = /<!--\s*AEG:QUOTES-FILE:END\s*-->/;
+function isValidCitedFilePath(path) {
+  if (path.length === 0)
+    return false;
+  if (path.startsWith("/") || path.startsWith("\\"))
+    return false;
+  if (/^[A-Za-z]:[\\/]/.test(path))
+    return false;
+  return !path.split(/[\\/]+/).includes("..");
+}
+function quotedCommandLineAt(content, index) {
+  let line = 1;
+  for (let i = 0;i < index; i++) {
+    if (content.charCodeAt(i) === 10)
+      line++;
+  }
+  return line;
+}
+function extractQuotedText(raw) {
+  const trimmed = raw.trim();
+  const fenced = /^(?:`{3,}|~{3,})[^\n]*\n([\s\S]*?)\n?(?:`{3,}|~{3,})$/.exec(trimmed);
+  if (fenced)
+    return (fenced[1] ?? "").trim();
+  const inline = /^`([^`]+)`$/.exec(trimmed);
+  if (inline)
+    return (inline[1] ?? "").trim();
+  return trimmed;
+}
+function findQuotesInFile(path, content) {
+  const masked = maskCode(content);
+  const quotes = [];
+  START_PATTERN.lastIndex = 0;
+  let start = START_PATTERN.exec(masked);
+  while (start !== null) {
+    const citedFile = start[1];
+    const innerStart = start.index + start[0].length;
+    const end = END_PATTERN.exec(masked.slice(innerStart));
+    if (end === null) {
+      START_PATTERN.lastIndex = innerStart;
+      start = START_PATTERN.exec(masked);
+      continue;
+    }
+    const innerEnd = innerStart + end.index;
+    if (isValidCitedFilePath(citedFile)) {
+      const quotedText = extractQuotedText(content.slice(innerStart, innerEnd));
+      if (quotedText.length > 0) {
+        quotes.push({ file: path, line: quotedCommandLineAt(content, innerStart), quotedText, citedFile });
+      }
+    }
+    START_PATTERN.lastIndex = innerEnd + end[0].length;
+    start = START_PATTERN.exec(masked);
+  }
+  return quotes;
+}
+function findCitedQuotes(files, readerFacingPrefix, readerFacingSuffix, shipsPrefix = QUOTED_COMMAND_SHIPS_PREFIX) {
+  const quotes = [];
+  for (const file of files) {
+    const cls = classifyProseFile(file.path, readerFacingPrefix, readerFacingSuffix, shipsPrefix);
+    if (!cls || !QUOTED_COMMAND_SWEPT_CLASSES.has(cls))
+      continue;
+    quotes.push(...findQuotesInFile(file.path, file.content));
+  }
+  return quotes;
+}
+function evaluateCitedQuotes(citedQuotes, citedFileContents) {
+  const findings = [];
+  for (const quote of citedQuotes) {
+    const content = citedFileContents.get(quote.citedFile);
+    if (content === undefined) {
+      findings.push({
+        file: quote.file,
+        line: quote.line,
+        citedFile: quote.citedFile,
+        quotedText: quote.quotedText,
+        message: `${quote.file}:${quote.line} quotes "${quote.quotedText}" as citing \`${quote.citedFile}\`, but that file could not be read`
+      });
+      continue;
+    }
+    if (!content.includes(quote.quotedText)) {
+      findings.push({
+        file: quote.file,
+        line: quote.line,
+        citedFile: quote.citedFile,
+        quotedText: quote.quotedText,
+        message: `${quote.file}:${quote.line} quotes "${quote.quotedText}" as citing \`${quote.citedFile}\`, but \`${quote.citedFile}\` no longer contains that text verbatim`
+      });
+    }
+  }
+  return findings;
+}
 // ../../packages/aeg-core/src/retired-vocabulary.ts
 var RETIRED_PATTERNS = [
   String.raw`\bD-[0-9]{3}\b`,
@@ -3261,6 +3576,10 @@ function checkDispatchReadiness(input) {
     blockers.push(`dispatch-gate rationale: Issue #${input.issue.number} for ${taskLabel} fails the rationale gate (checkIssueRationale) — the Planner must complete the eight-field rationale before this task is dispatchable.`);
   }
   for (const dep of input.dependsOn) {
+    if (dep.resolved === false) {
+      blockers.push(`dispatch-gate depends-on: ${taskLabel} depends on "${dep.id}", which is UNRESOLVABLE — the resolver could not find a matching tranche/task/Issue for this edge (not a claim about merge status). Not dispatchable until the edge is corrected.`);
+      continue;
+    }
     if (!dep.merged && !isHandClosedByRecognizedPrincipal(dep, principalAllowlist)) {
       const issueStr = dep.issue !== null ? ` (#${dep.issue})` : "";
       blockers.push(`dispatch-gate depends-on: ${taskLabel} depends on ${dep.id}${issueStr}, whose PR is not merged yet — not dispatchable, it serializes behind it.`);
@@ -3320,6 +3639,29 @@ function isNewDiskStateFile(path, status) {
     return false;
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
+// ../../packages/aeg-core/src/main-branch-refusal.ts
+function checkMainBranchRefusal(facts) {
+  const { currentSymbolicBranch, defaultBranch } = facts;
+  if (currentSymbolicBranch === null)
+    return null;
+  if (defaultBranch === null) {
+    return {
+      reason: "default-branch-undetermined",
+      severity: "warning",
+      currentBranch: currentSymbolicBranch,
+      defaultBranch: null
+    };
+  }
+  if (currentSymbolicBranch === defaultBranch) {
+    return {
+      reason: "on-default-branch",
+      severity: "error",
+      currentBranch: currentSymbolicBranch,
+      defaultBranch
+    };
+  }
+  return null;
+}
 // ../../packages/aeg-core/src/branch-topology-gate.ts
 function taskBranchTopologyFields(branch) {
   if (!/^task\/.*\/.*$/.test(branch))
@@ -3609,8 +3951,8 @@ var BIN_EXT = BIN_DIR === DIST_BIN_DIR ? ".js" : ".ts";
 function bin(name) {
   return join2(BIN_DIR, `${name}${BIN_EXT}`);
 }
-function coreCheckRegistry() {
-  return [
+var REGISTRY = [
+  [
     {
       name: "brief-shape",
       run: bin("check-brief-shape"),
@@ -3621,6 +3963,9 @@ function coreCheckRegistry() {
         BRANCH: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "doc-coverage",
       run: bin("check-doc-coverage"),
@@ -3636,6 +3981,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "coherence",
       run: bin("check-coherence"),
@@ -3648,6 +3996,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "dispatch-readiness",
       run: bin("check-dispatch-readiness"),
@@ -3657,9 +4008,13 @@ function coreCheckRegistry() {
         AEG_REPO: { optional: true },
         BRANCH: { optional: true },
         GITHUB_TOKEN: { optional: true },
-        GH_TOKEN: { optional: true }
+        GH_TOKEN: { optional: true },
+        PREMISE_FILE: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "closes-n",
       run: bin("check-closes-n"),
@@ -3674,6 +4029,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    1
+  ],
+  [
     {
       name: "single-plan-pr",
       run: bin("check-single-plan-pr"),
@@ -3686,6 +4044,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "test-plan",
       run: bin("check-test-plan"),
@@ -3697,6 +4058,9 @@ function coreCheckRegistry() {
         BRANCH: { optional: true }
       }
     },
+    1
+  ],
+  [
     {
       name: "body-bare-digits",
       run: bin("check-body-bare-digits"),
@@ -3712,6 +4076,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    1
+  ],
+  [
     {
       name: "no-disk-state",
       run: bin("check-no-disk-state"),
@@ -3719,6 +4086,9 @@ function coreCheckRegistry() {
       timeoutMs: 15000,
       env: { BASE_SHA: { optional: true } }
     },
+    0
+  ],
+  [
     {
       name: "registry-gates",
       run: bin("check-registry-gates"),
@@ -3730,6 +4100,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "review-gate",
       run: bin("check-review-gate"),
@@ -3743,6 +4116,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    1
+  ],
+  [
     {
       name: "branch-topology",
       run: bin("check-branch-topology"),
@@ -3755,6 +4131,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "dead-branch-push",
       run: bin("check-dead-branch-push"),
@@ -3766,6 +4145,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "first-push-dispatch",
       run: bin("check-first-push-dispatch"),
@@ -3778,6 +4160,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "doc-coverage-push",
       run: bin("check-doc-coverage-push"),
@@ -3795,6 +4180,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "issue-assignment",
       run: bin("check-issue-assignment"),
@@ -3807,6 +4195,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    0
+  ],
+  [
     {
       name: "evidence-fresh",
       run: bin("check-evidence-fresh"),
@@ -3821,6 +4212,9 @@ function coreCheckRegistry() {
         GH_TOKEN: { optional: true }
       }
     },
+    1
+  ],
+  [
     {
       name: "reader-resolvable-prose",
       run: bin("check-reader-resolvable-prose"),
@@ -3828,6 +4222,9 @@ function coreCheckRegistry() {
       timeoutMs: 30000,
       env: {}
     },
+    0
+  ],
+  [
     {
       name: "retired-vocabulary",
       run: bin("check-retired-vocabulary"),
@@ -3835,6 +4232,9 @@ function coreCheckRegistry() {
       timeoutMs: 30000,
       env: {}
     },
+    0
+  ],
+  [
     {
       name: "doctrine-portability",
       run: bin("check-doctrine-portability"),
@@ -3842,15 +4242,66 @@ function coreCheckRegistry() {
       timeoutMs: 30000,
       env: { BASE_SHA: { optional: true } }
     },
+    0
+  ],
+  [
     {
       name: "workspace-escape",
       run: bin("check-workspace-escape"),
       scope: "full",
       timeoutMs: 30000,
       env: {}
-    }
-  ];
+    },
+    0
+  ],
+  [
+    {
+      name: "changeset-coverage",
+      run: bin("check-changeset-coverage"),
+      scope: "diff",
+      timeoutMs: 15000,
+      env: {}
+    },
+    0
+  ],
+  [
+    {
+      name: "quoted-command",
+      run: bin("check-quoted-command"),
+      scope: "diff",
+      timeoutMs: 15000,
+      env: {}
+    },
+    0
+  ],
+  [
+    {
+      name: "main-branch-refusal",
+      run: bin("check-main-branch-refusal"),
+      scope: "full",
+      timeoutMs: 15000,
+      env: {}
+    },
+    0
+  ],
+  [
+    {
+      name: "token-collection-wired",
+      run: bin("check-token-collection-wired"),
+      scope: "full",
+      timeoutMs: 15000,
+      env: {
+        CLAUDE_PROJECT_DIR: { optional: true },
+        CLAUDE_CODE_SESSION_ID: { optional: true }
+      }
+    },
+    0
+  ]
+];
+function coreCheckRegistry() {
+  return REGISTRY.map(([spec]) => spec);
 }
+var CORE_CHECK_RING = Object.fromEntries(REGISTRY.map(([spec, ring]) => [spec.name, ring]));
 
 // src/checks/bin/check-registry-gates.ts
 var CHECK_NAME = "registry-gates";