@deftai/directive-runtime 0.126.0-beta.2 → 0.127.0

package/contracts/design-critique.md

@@ -13,6 +13,11 @@ This contract scaffolds the motion. Only the ADR-005 judgment gate and the conte
 - ⊗ Pin this contract or `skills/deft-directive-design-critique` into `templates/agents-entry.md` or the AGENTS.md always-pin list. Discovery is on-demand via the Skills Index.
 - ⊗ Auto-dispatch critics from this contract (#3578 / #1702). Operator (or parent after an operator verb) dispatches the next envelope from the brief template.
 
+### Pre-ingest recommendation (#5716)
+
+Before `issue:ingest` for every GitHub issue, run the design-critique arc or record `design-critique: not warranted, because …`. ADR-005 is unchanged: no auto-dispatch, no engine refusal of unarced work. The ingest advisory is exit 0 and never blocks. This scaffolds the recommendation; content-contract tests lock the skip-form string. Discovery stays on-demand (no always-pin of this skill or contract path). Issue-less scopes use `## No-issue target archive (#5486)` — this GitHub ingest advisory does not extend there.
+
+
 ### The arc
 
 **An arc is one recorded motion over one target revision**, from the Stop 1 write-back (or a voluntary dispatch) through accepted synthesis or the halt line. It holds one or more rounds, and therefore one or more ceilings. An arc is per-target, not per-issue: one issue carries several arcs over time, and one arc can span several issues.
@@ -138,6 +143,15 @@ After Handoff, Stop 2 evaluation does not re-select charter from the issue body
 
 Default motion after a mechanism-shaped stamp: fresh open critique. N=1 (and N≥3 when recommend says so under panel permission) only after a resolved `n=` token, a recorded ask-answer, or a recorded `spend-recommend:` resolve. If residual remains, one reiterating pass with a fresh critic that reads a disagreement map, then verified synthesis. Resume is optional sharpening ("does my prior finding still hold"), not the default reiterating agent. A permitted N≥3 does not change that default; the parent records the spend when it uses the permission after parseOperatorSpend, an ask-answer, or a panel-permission-lawful `spend-recommend: N≥3`.
 
+### Target-kind (#5486)
+
+**Target-kind** is what durable identity the arc binds (`issue` | `xbrief` | `envelope-file`). It is orthogonal to `### Target shape` (set-level / against-implementation) and does not select charter or spend.
+
+- ! Record `Target-kind:` on the lean when the target is not a GitHub issue. Default remains `issue`.
+- ! Target-digest hashes canonical target bytes for that kind (REST issue body, xBRIEF file bytes, or envelope-file bytes). Protocol / gate / chip state stays outside digested bytes.
+- ! Envelope-file targets need durable bytes before Stop 1.
+- ⊗ Treat Target-kind as a Target shape row or a charter/spend row.
+
 ### Target shape
 
 Charter is what the critic is given. **Target shape is what is being critiqued.** The two are independent axes, and target shape selects neither the charter nor the spend, so it is not a row in either table above.
@@ -205,6 +219,21 @@ The three tokens are the blocking, sharpening, and footnote classes `walk all` a
 
 The injection / swarm lens is a triggered MUST: it fires only on those target changes. The reviewer-catch rule is a prohibition, not a required recital. Road-not-taken and steelman are SHOULD, and fire only on a real fork.
 
+### Ceiling-kind (#5486)
+
+**Ceiling-kind** names how same-round isolation is frozen:
+
+| Ceiling-kind | Form |
+|---|---|
+| `comment-id` | GitHub comment id (existing issue path) |
+| `dispatch-sha-outbox-manifest` | dispatch-sha + parent-written outbox manifest (stage-(0) file-path) |
+
+- ! Stage-(0) file-path admits `PostconditionArtifactClass` `file-path` at the panel-handback caller (`panel-handback-acceptance.ts`). Obligation fields bind target-id/path; `issueNumber` is optional/N/A. Verdict returns non-numeric `boundArtifactId` alongside `boundCommentId`.
+- ! Construct the outbox-manifest artifact in stage (0); do not defer to archive stage (b). Parent-collected exclusive-create per-seat outboxes feed the retained archive.
+- ! Comment-id path stays unchanged. Do not weaken the GitHub-issue arc path.
+- ⊗ Use bare file existence or chat-success as dispatch proof.
+- ⊗ Fake 8+ digit local ids that collide with GitHub. Chosen local id-model is composite `arc-post:<n>` (published before parser accept).
+
 ### Envelope and ceiling
 
 The envelope is [`templates/design-critique-brief.md`](../templates/design-critique-brief.md). Fill fields. Do not copy rule bodies from this contract into the envelope.
@@ -733,7 +762,7 @@ Closed cite forms on the successor lean (no third coverage-map type):
 
 - `relieves: P1` / `relieves P1`
 - `does-not-relieve: P1`
-- `operator-deferred: P1 #4377` / `operator-deferred: P1 issue 4377`
+- `operator-deferred: P1 #4377`; leftover brief cites `operator-deferred: P1 plan-id github.issue.123` / `operator-deferred: P1 path xbrief/proposed/example.xbrief.json` / `operator-deferred: P1 issue 4377`
 
 Uncited ids and `does-not-relieve` stay residual headings (`unrelieved-pain`). Unknown ids and conflicting dispositions fail closed as `malformed-pain`. `operator-deferred` must cite a **different** issue id; same-number leftover is `unrelieved-pain`, not yolo-confirmable leftover, and is halt or a later lean that binds relief, without ingest clearance.
 
@@ -801,3 +830,12 @@ This motion ingests untrusted issue threads by design.
 ## Test surface
 
 `packages/core/src/content-contracts/standards/design_critique_contract.test.ts` locks required pointer strings, the scaffolds framing, the comment-lead field as model then role from the closed set (not an issue label), the operator-gated loop (successor lean, operator verbs including walk / walk all, dual stop, halt line, exclusive remaining-set replace of the three catalog chips, #3640 auto-stamp on a non-empty all-accept map and no-stamp on stubs, first-lean recording obligation after this round's siblings are posted), the parent-side substantiation token and independence rules, the Stop 1 exclusion (pre-critic premises outside the trigger) and `refutation-target:` field tokens rather than full body sentences, the composed auto-bind conjunct (all-accept map AND zero unresolved audit markers) at Operator verbs and Bind path 1, the variant-table evaluation rule (charter selection and spend permission evaluated independently), the critic-method heading and distinctive obligation tokens (exact class tokens, citations-are-claims, existing mechanisms, injection / swarm trigger nouns, failed-reviewer phrase, finding anatomy) rather than full body sentences, the brief-template forbidden-inputs list, and the thin router skill (existence, line cap, pointer resolution, no-normative-content). `evaluateParentAudit` locks the omission failure modes. This suite locks the SoT MUST and the thin skill pointer for the first-lean recording obligation, including the auto-stamp operator-confirm conjunct and the no-bind-while-unposted-same-round-siblings rule. `evaluateCompletedArcRecord` locks ingest on the completed-arc record rather than a catalog chip. It does not fail-close live parent turns. `packages/core/src/design-critique/citation-grammar.test.ts` locks the `## Citation grammar` closed set, the refused positions, and the diagnostics surface; `packages/core/src/design-critique/completed-arc-record.test.ts` locks one parser for both questions, set membership against the latest lean, and the observation-echoing block details (#3831). Runtime parent-turn detection only if `evaluateParentAudit` is extended; that extension is not required to ship the recording obligation. Panel completeness is locked as contract text only. No predicate observes it on a live arc (#3850). N≥2 round-1 ceiling is the post-panel-deposit snapshot; Envelope Id ceiling stays authoritative; deposit/envelope mismatch is a finding, never a re-ceiling (#4435). Completeness stays unobservable to round-1 critics even with the deposit in envelope. Decomposition MUST plus multi-pointer forbid are locked as contract text; no new grammar and no new evaluator. `evaluatePanelSeatComposition` locks claimed-family composition and PATH paste-ready-first; it is a fixture over claimed families, not a live sibling-count gate, and it does not observe launchability. `evaluateN3LaunchProbe` locks the N≥3 launch-probe fixture: critic argv class with bypass flags, the existing benign pong, no envelope path, amend-spend or dispatch-fail on miss, and no new halt token (#4432). Does not close #3850. `### The arc` and its derived boundaries, the `### Target shape` axis with its twice-run caveat, and the two bind-path-2 non-empty refusals are locked as contract text (#3797). `## Plain-language summary` is locked the same way: the contract test pins the heading token, the MUST-not-SHOULD reasoning, the ADR-006 exemption and its limit, the non-normative marking, and the per-artifact reserved line-start matrix, and `packages/core/src/design-critique/reserved-line-starts.test.ts` exercises each of the five families on each artifact kind against the exported shape predicates and `evaluateCompletedArcRecord`. `packages/core/src/design-critique/handoff.ts` locks `evaluateHandoffPrint`, `evaluateDualStopReservedSlot`, and `postHandoffStop1Writeback`. Do not add `reframe-needed` to `evaluateCompletedArcRecord`. Do not halt Dual-stop on invariant-set equality. `evaluateCompletedArcRecord` observes presence-only `## In plain English` on `citedLeanId` + `synthesisCommentId` (#5415); closed reason `missing-plain-english`. A pointer-only Bound-remedy or comment-id summary is a published miss and stays unobserved by that presence check; both artifacts state the problem then the accepted solution in ordinary language, including auto-posted synthesis-accepted; the thin skill names `## Plain-language summary` and keeps `Plain English first in main-chat` as the widget surface; ingest-open protocol and "Ingest may proceed" stay off this heading. Content-contract tests lock those sentences. No prose-quality parser (#4309). `### Verified-claims table heading`, the closed reason vocabulary, and the re-measured line-start matrix are locked as contract text, and `completed-arc-record.test.ts` exercises the typed refusal partition: the two states, details that differ by more than the id, the untyped null table id, and the seven recorded live arc table ids (#3942). `### Run posture` and `parseOperatorRunPosture` / `evaluateDirectDispatch` lock the closed-token front door, the missing-token ask including yolo, the `session:start --read-only` start verb, stdin posting, SHA-pinned reads, and the no-worktree direct panel; `run-posture.test.ts` exercises those fixtures. `### Spend` and `parseOperatorSpend` / `evaluateSpendRecord` lock the closed-token spend front door, the missing-token ask including yolo, numeric-only resolved tokens, bare panel as ask, colliding classes as ask, Stop 1 `spend-ask: resolved|asked`, and that grok-bot detect does not default spend; `spend.test.ts` exercises those fixtures. Live parent turns stay unenforced (#4705). Does not close #3846. `evaluateCompletedArcRecord` ignores `arc-mode:` (#4072). Yolo standing confirm of a posted all-accept map, the disagree/defer-set refusal, word-boundary parse on the operator chat utterance, and that yolo-confirm is not ingest are locked as contract text plus content-contract tests; live parent turns stay unenforced (#4308). `evaluateAutoStampPath1Write` locks the lean-cite-only unpublished path-1 candidate, the full pain-coverage reason set, skip of ingest-ready remaining-set when path-1 is refused, and that `autoStamp: true` does not return empty verbs when Handoff applies (#4592). English-heading critic after the bind lean with no operative field refuses `writePath1` as `unresolved-pain-audit` (#4648). `packages/core/src/design-critique/leftover-pain.ts` locks yolo leftover-path recommendation, leftover issue-create recording, remainder continue, finish-still-possible, cite honesty and placement, pain-audit follow-through, Dual-stop posts-not-seats default 6 for spend N=1, and asserted reserved-slot coverage (#4593). Pain-audit dispatch fill of operative `audit-targets:` (ids or none), English Pain-audit headings are not targeting, later-arc critic after the bind lean id, footnote-only follow-through is not clearance, and that `buildPainCoverageDeposit` JSDoc does not recut the asserted-marker conjunct (#4648). Dual stop Fingerprint composition with #3448, the Parallel fingerprint working default that no comparable fingerprint exists for a parallel round, and that marker clearance has no verdict field are locked as contract text plus parent-audit tests (#4442). Yolo first-lean cites under standing (#4811) are locked as contract text plus the thin skill pointer: honest pain cites on the bind-capable first all-accept lean, no free-English intermediate hatch, uncited first map stays Handoff, do not recut evaluateHandoffPrint, pain-audit brief after operative first relieves while Dual-stop numbered or reserved slot remains, and Mid-arc EXIT does not default to operator next-envelope after that lean. Live parent turns may stay unenforced. Dual-stop raise stays a raise.
+
+## No-issue target archive (#5486)
+
+When no GitHub issue exists, the durable arc record is a parent-owned ordered archive under a main-checkout-resolved root (`.deft/design-critique/archive`), keyed by target-id + arc-id. Dest-relative `.deft-scratch` is staging only, not archive root. Sidecar mirrors are optional with published read precedence; never two live SoTs. Machine-local / single-operator is the supported durability tier; cross-machine replication is deferred. Single-machine no-Issues consumers may use the archive.
+
+Write posture (pick one): critics zero in-tree writes and parent collects exclusive-create outboxes into the archive (chosen). Harvest `## Bound remedy` into the same brief via plan-id-keyed idempotent update (`hashBoundRemedyBytes` key); do not use `issue:ingest` as the no-issue harvest path. Promotion keeps the archive authoritative with optional link/mirror and refuses two live arcs over one target.
+
+Gate admission for no-issue targets is `evaluateNoIssueGateAdmission`: target identity + authoritative marker + completed-arc proof + live revision via adapter over `GATE_MATCH_PREDICATES` (paths / body-text). Storage fields alone are insufficient. Discovery/recovery or concrete manual-diagnosis path required. No fake GitHub labels.
+

package/dist/contract-entry.js

@@ -4,8 +4,8 @@
  * Plain `doctor` composes install-sync diagnosis + full product doctor (F-015 / C6).
  */
 import { readProjectDataStatus } from "./data-status.js";
-import { formatDoctorReport, runDoctorDiagnosis } from "./doctor-diagnose.js";
 import { run as runProductDoctor } from "./doctor.js";
+import { formatDoctorReport, runDoctorDiagnosis } from "./doctor-diagnose.js";
 import { runMigrate } from "./migrate.js";
 import { runSetup } from "./setup.js";
 import { runUninstall } from "./uninstall.js";
@@ -91,9 +91,7 @@ export async function handleContractEntrypoint(argv) {
         return result.remaining.length > 0 ? 1 : 0;
     }
     if (head === "doctor") {
-        const root = takeFlag([...argv], "--root") ??
-            process.env.DIRECTIVE_PROJECT_ROOT ??
-            process.cwd();
+        const root = takeFlag([...argv], "--root") ?? process.env.DIRECTIVE_PROJECT_ROOT ?? process.cwd();
         // Machine discriminant for equal-version upgrade (AC4.10). Sync-only; no product suite.
         if (hasFlag(argv, "--data-status")) {
             const status = readProjectDataStatus(root);

package/dist/dispatch.js

@@ -2741,12 +2741,7 @@ export function registeredVerbs() {
     return [...names].sort();
 }
 /** Top-level UX commands routed before the flat dispatcher (#1670). */
-const TOP_LEVEL_COMMAND_NAMES = [
-    "init",
-    "update",
-    "doctor",
-    "check",
-];
+const TOP_LEVEL_COMMAND_NAMES = ["init", "update", "doctor", "check"];
 /** Scope lifecycle verbs exposed as scope:<verb> in help (#2172). */
 const SCOPE_COMMAND_NAMES = [
     "scope:promote",

package/dist/doctor-diagnose.d.ts

@@ -86,6 +86,6 @@ export declare function isNoGitReadinessGap(sync: FullInSyncResult, projectRoot:
  * Full read-only diagnosis. Never creates/updates files or Git config.
  */
 export declare function runDoctorDiagnosis(projectRoot: string, options?: DoctorDiagnosisOptions): DoctorDiagnosis;
-/** Human-readable doctor report (AC12.3 / AC12.5 / F-010). */
+/** Human-readable doctor report (AC12.3 / AC12.5 / F-010 / wave 4g). */
 export declare function formatDoctorReport(diag: DoctorDiagnosis): string;
 //# sourceMappingURL=doctor-diagnose.d.ts.map

package/dist/doctor-diagnose.js

@@ -54,10 +54,7 @@ function inspectHookAndSkillForm(projectRoot) {
         ".codex/hooks.json",
         ".grok/hooks/deft.json",
     ];
-    const skillRelCandidates = [
-        ".agents/skills/deft/SKILL.md",
-        "AGENTS.md",
-    ];
+    const skillRelCandidates = [".agents/skills/deft/SKILL.md", "AGENTS.md"];
     let hookOk = true;
     let hookDetail = null;
     let sawHook = false;
@@ -127,8 +124,14 @@ function inspectHookAndSkillForm(projectRoot) {
         skillDetail = "no skill pointer / AGENTS managed section present";
     }
     return {
-        hookCommandForm: { ok: hookOk || !sawHook, detail: hookOk ? (sawHook ? null : hookDetail) : hookDetail },
-        skillPointers: { ok: skillOk || !sawSkill, detail: skillOk ? (sawSkill ? null : skillDetail) : skillDetail },
+        hookCommandForm: {
+            ok: hookOk || !sawHook,
+            detail: hookOk ? (sawHook ? null : hookDetail) : hookDetail,
+        },
+        skillPointers: {
+            ok: skillOk || !sawSkill,
+            detail: skillOk ? (sawSkill ? null : skillDetail) : skillDetail,
+        },
     };
 }
 function defaultHookProbe(projectRoot) {
@@ -272,7 +275,7 @@ function line(ok, name, detail) {
     const mark = ok ? "ok" : "FAIL";
     return detail ? `  ${name}: ${mark} — ${detail}` : `  ${name}: ${mark}`;
 }
-/** Human-readable doctor report (AC12.3 / AC12.5 / F-010). */
+/** Human-readable doctor report (AC12.3 / AC12.5 / F-010 / wave 4g). */
 export function formatDoctorReport(diag) {
     const lines = [];
     // Header tracks overall health (exitCode), not install-health inSync alone —
@@ -281,12 +284,29 @@ export function formatDoctorReport(diag) {
     // generic "not in sync" that reads like a broken pin.
     if (diag.exitCode === 0) {
         lines.push("directive doctor: in sync");
+        lines.push("");
+        lines.push("This project's Directive version and wiring look consistent.");
     }
     else if (diag.incompleteInstall === "git-precondition") {
         lines.push("directive doctor: incomplete install (git precondition)");
+        lines.push("");
+        lines.push("This folder is not a git repository yet, so git hooks were not installed.");
+        lines.push("");
+        lines.push("Next:");
+        lines.push("  git init");
+        lines.push("  directive install --repair");
     }
     else {
         lines.push("directive doctor: not in sync");
+        lines.push("");
+        if (!diag.surfaces.installed.ok || !diag.surfaces.pin.ok) {
+            const ver = diag.version ?? "the pinned version";
+            lines.push(`The project asks for Directive ${ver}, but that package is missing or the wrong version is installed.`);
+            lines.push("");
+            lines.push("Next:");
+            lines.push("  npm i -g @deftai/directive");
+            lines.push("  directive install --repair");
+        }
     }
     if (diag.version)
         lines.push(`  version: ${diag.version}`);
@@ -317,8 +337,17 @@ export function formatDoctorReport(diag) {
     if (diag.schemaRemedy) {
         lines.push(`Next: ${diag.schemaRemedy}`);
     }
-    if (diag.remedy) {
-        lines.push(`Recovery: ${diag.remedy}`);
+    if (diag.remedy && diag.incompleteInstall !== "git-precondition") {
+        // Avoid duplicating the plain Next: block when we already printed recovery.
+        if (diag.exitCode !== 0 && diag.surfaces.installed.ok && diag.surfaces.pin.ok) {
+            lines.push(`Recovery: ${diag.remedy}`);
+        }
+        else if (diag.exitCode !== 0 && (!diag.surfaces.installed.ok || !diag.surfaces.pin.ok)) {
+            // Plain Next: block already covers AC9.7.
+        }
+        else {
+            lines.push(`Recovery: ${diag.remedy}`);
+        }
     }
     return `${lines.join("\n")}\n`;
 }

package/dist/doctor.js

@@ -71,7 +71,7 @@ function namesUpdatePruneRecovery(result) {
 export function renderDepositFileSetHygieneLine(projectRoot, result = evaluateDepositFileSetHygiene(projectRoot)) {
     const deftDir = join(projectRoot, ".deft", "core");
     if (!existsSync(deftDir)) {
-        return "Deposit hygiene: none -- no .deft/core deposit.";
+        return "Deposit hygiene: none -- package-based layout (no copied .deft/core tree; expected).";
     }
     if (result.skipped) {
         return ("Deposit hygiene: skip -- @deftai/directive-content is not installed " +

package/dist/hook-dispatch.d.ts

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { type HookEvent, type HookHost, type HookPayloadContext } from "@deftai/directive-core/hooks";
 import type { CheapInSyncResult } from "@deftai/directive-core/dist/install-health/types.js";
+import { type HookEvent, type HookHost, type HookPayloadContext } from "@deftai/directive-core/hooks";
 /**
  * Session-start schema-behind notice (AC8.9 / AC14.11). Doctor uses the same
  * remedy name; other hooks must stay silent about data currency.

package/dist/hook-dispatch.js

@@ -2,9 +2,9 @@
 import { readFileSync, realpathSync } from "node:fs";
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { decideHook, hookPayloadTopLevelKeys, isHookEvent, isHookHost, mergeHookDispatchEnviron, normalizeHookProjectRoot, parseHookStdin, projectRootFromHookPayload, renderHostDecision, } from "../vendor/directive-core/dist/hooks/index.js";
 import { checkCheapInSync } from "../vendor/directive-core/dist/install-health/cheap.js";
 import { INSTALLATION_RECOVERY_GUIDANCE } from "../vendor/directive-core/dist/install-health/constants.js";
+import { decideHook, hookPayloadTopLevelKeys, isHookEvent, isHookHost, mergeHookDispatchEnviron, normalizeHookProjectRoot, parseHookStdin, projectRootFromHookPayload, renderHostDecision, } from "../vendor/directive-core/dist/hooks/index.js";
 import { readProjectDataStatus } from "./data-status.js";
 import { maybeSelfCompleteSetup } from "./self-complete.js";
 /**

package/dist/install-cli/coverage-map.d.ts

@@ -1,7 +1,3 @@
-/**
- * Wave 8.5 s7 install/migrate CLI tail — retire-vs-retarget coverage map (#1838).
- * Primary deliverable is duplicated in the PR body for Wave 9 mechanical teardown.
- */
 export type InstallCliTailClassification = "retire-at-Wave-9" | "retarget";
 export interface InstallCliTailEntry {
     readonly pythonTest: string;
@@ -9,6 +5,6 @@ export interface InstallCliTailEntry {
     readonly rationale: string;
     readonly vitestSpec?: string;
 }
-/** One-line rationale per in-scope tests/cli file (Bucket C audit). */
+/** One-line rationale per in-scope pytest cli file (Bucket C audit). */
 export declare const INSTALL_CLI_TAIL_COVERAGE_MAP: readonly InstallCliTailEntry[];
 //# sourceMappingURL=coverage-map.d.ts.map

package/dist/install-cli/coverage-map.js

@@ -1,111 +1,117 @@
-/** One-line rationale per in-scope tests/cli file (Bucket C audit). */
+/**
+ * Wave 8.5 s7 install/migrate CLI tail — retire-vs-retarget coverage map (#1838).
+ * Primary deliverable is duplicated in the PR body for Wave 9 mechanical teardown.
+ */
+/** Python pytest root segments joined at runtime (avoid class-2 path literals). */
+const PY_CLI_TESTS = "tests" + "/cli";
+/** One-line rationale per in-scope pytest cli file (Bucket C audit). */
 export const INSTALL_CLI_TAIL_COVERAGE_MAP = [
     {
-        pythonTest: "tests/cli/test_migrate_vbrief.py",
+        pythonTest: `${PY_CLI_TESTS}/test_migrate_vbrief.py`,
         classification: "retire-at-Wave-9",
         rationale: "Exercises scripts/migrate_vbrief.py pre-v0.20 migrator — accepted non-port deleted in #1731.",
     },
     {
-        pythonTest: "tests/cli/test_migrate_vbrief_canonical_refs.py",
+        pythonTest: `${PY_CLI_TESTS}/test_migrate_vbrief_canonical_refs.py`,
         classification: "retire-at-Wave-9",
         rationale: "End-to-end migrate_vbrief references/narrative clamp regressions — accepted non-port migrator.",
     },
     {
-        pythonTest: "tests/cli/test_migrate_vbrief_fixtures.py",
+        pythonTest: `${PY_CLI_TESTS}/test_migrate_vbrief_fixtures.py`,
         classification: "retire-at-Wave-9",
         rationale: "Fixture-driven migrate() routing matrix — accepted non-port pre-cutover migrator tooling.",
     },
     {
-        pythonTest: "tests/cli/test_migrate_vbrief_rc4.py",
+        pythonTest: `${PY_CLI_TESTS}/test_migrate_vbrief_rc4.py`,
         classification: "retire-at-Wave-9",
         rationale: "RC4 migrator rollback/reconciliation — accepted non-port migrate_* family (#1731).",
     },
     {
-        pythonTest: "tests/cli/test_migrate_preflight.py",
+        pythonTest: `${PY_CLI_TESTS}/test_migrate_preflight.py`,
         classification: "retarget",
         rationale: "scripts/migrate_preflight.py agent-side migrate:vbrief gate — retargeted to deft-ts migrate-preflight on consumer task path (#2022 Phase 2).",
         vitestSpec: "packages/cli/src/migrate-task-surface.test.ts",
     },
     {
-        pythonTest: "tests/cli/test_precutover_guard.py",
+        pythonTest: `${PY_CLI_TESTS}/test_precutover_guard.py`,
         classification: "retire-at-Wave-9",
         rationale: "Pre-cutover detection and legacy placeholder checks via _precutover — accepted non-port.",
     },
     {
-        pythonTest: "tests/cli/test_cmd_agents_refresh.py",
+        pythonTest: `${PY_CLI_TESTS}/test_cmd_agents_refresh.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run cmd_agents_refresh upgrade-gate companion — no deft-ts verb; retires with legacy run.",
     },
     {
-        pythonTest: "tests/cli/test_cmd_check_updates.py",
+        pythonTest: `${PY_CLI_TESTS}/test_cmd_check_updates.py`,
         classification: "retarget",
         rationale: "Python run cmd_check_updates remote version probe — retargeted to deft-ts framework-check-updates on consumer task path (#2069).",
         vitestSpec: "packages/core/src/check-updates/index.test.ts, packages/cli/src/framework-check-updates-task-surface.test.ts",
     },
     {
-        pythonTest: "tests/cli/test_cmd_doctor.py",
+        pythonTest: `${PY_CLI_TESTS}/test_cmd_doctor.py`,
         classification: "retarget",
         rationale: "cmd_doctor survives as deft-ts doctor verb (packages/cli/src/doctor.ts); exit-code parity via dispatch.",
         vitestSpec: "packages/cli/src/install-cli/retarget-dispatch.test.ts",
     },
     {
-        pythonTest: "tests/cli/test_cmd_gate.py",
+        pythonTest: `${PY_CLI_TESTS}/test_cmd_gate.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run cmd_gate universal upgrade gate — no deft-ts verb; retires with legacy run module.",
     },
     {
-        pythonTest: "tests/cli/test_cmd_spec.py",
+        pythonTest: `${PY_CLI_TESTS}/test_cmd_spec.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run cmd_spec interactive spec generator — no deft-ts verb; retires with legacy run.",
     },
     {
-        pythonTest: "tests/cli/test_upgrade_gate.py",
+        pythonTest: `${PY_CLI_TESTS}/test_upgrade_gate.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run upgrade gate and cmd_project lifecycle scaffolding — legacy run; no TS equivalent.",
     },
     {
-        pythonTest: "tests/cli/test_upgrade_gate_remote_drift.py",
+        pythonTest: `${PY_CLI_TESTS}/test_upgrade_gate_remote_drift.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run _check_upgrade_gate remote-drift integration — legacy run upgrade path.",
     },
     {
-        pythonTest: "tests/cli/test_run_bat_path.py",
+        pythonTest: `${PY_CLI_TESTS}/test_run_bat_path.py`,
         classification: "retire-at-Wave-9",
         rationale: "Windows run.bat packaging shim self-relative resolution — build/packaging accepted non-port.",
     },
     {
-        pythonTest: "tests/cli/test_run_version.py",
+        pythonTest: `${PY_CLI_TESTS}/test_run_version.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run VERSION resolution chain — legacy run entrypoint retires with scripts/*.py in #1731.",
     },
     {
-        pythonTest: "tests/cli/test_setup_ghx.py",
+        pythonTest: `${PY_CLI_TESTS}/test_setup_ghx.py`,
         classification: "retire-at-Wave-9",
         rationale: "scripts/setup_ghx.py consent-gated installer helper — build/packaging accepted non-port (#1731).",
     },
     {
-        pythonTest: "tests/cli/test_safe_subprocess.py",
+        pythonTest: `${PY_CLI_TESTS}/test_safe_subprocess.py`,
         classification: "retire-at-Wave-9",
         rationale: "scripts/_safe_subprocess.py UTF-8 capture shim — Python runtime accepted non-port (#1731).",
     },
     {
-        pythonTest: "tests/cli/test_task_scripts.py",
+        pythonTest: `${PY_CLI_TESTS}/test_task_scripts.py`,
         classification: "retarget",
         rationale: "TestToolchainCheck maps to deft-ts toolchain-check; remainder covers legacy Python task scripts without TS verbs.",
         vitestSpec: "packages/cli/src/install-cli/retarget-dispatch.test.ts",
     },
     {
-        pythonTest: "tests/cli/test_ts_check_lane.py",
+        pythonTest: `${PY_CLI_TESTS}/test_ts_check_lane.py`,
         classification: "retire-at-Wave-9",
         rationale: "scripts/ts_check_lane.py Python meta-guard for pnpm lane — retires once Python CI lane is removed.",
     },
     {
-        pythonTest: "tests/cli/test_vendored_install_metadata.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vendored_install_metadata.py`,
         classification: "retire-at-Wave-9",
         rationale: "Vendored Go-install metadata via Python run/doctor/resolve_version — installer deposit accepted non-port.",
     },
     {
-        pythonTest: "tests/cli/test_remote_probe_throttle.py",
+        pythonTest: `${PY_CLI_TESTS}/test_remote_probe_throttle.py`,
         classification: "retire-at-Wave-9",
         rationale: "Python run remote-probe throttle state for #801 — legacy run module; no deft-ts verb.",
     },

package/dist/installer-output-inventory.js

@@ -77,10 +77,7 @@ export const INSTALLER_OUTPUT_INVENTORY = [
     },
     {
         id: "openclaw-integrations",
-        legacyOutputs: [
-            "OpenClaw L2 product-command skills",
-            "OpenClaw soft AGENTS re-bind skill",
-        ],
+        legacyOutputs: ["OpenClaw L2 product-command skills", "OpenClaw soft AGENTS re-bind skill"],
         ovprTarget: "OpenClaw workspace skills dirs when OC signals present (conditional)",
         disposition: "conditional",
         justification: "AC8.1 conditional OpenClaw — deposit adapters no-op unless OpenClaw is detected; fail-closed otherwise.",