@deftai/directive 0.126.0-beta.1 → 0.126.0

package/dist/bin.js

@@ -1,4335 +1,5 @@
 #!/usr/bin/env node
-
-// packages/cli/src/bin.ts
-import { basename } from "node:path";
-
-// packages/cli/src/hook-launcher.ts
-import { existsSync as existsSync3 } from "node:fs";
-import { join as join2 } from "node:path";
-import { spawnSync as spawnSync2 } from "node:child_process";
-
-// packages/cli/src/constants.ts
-var LAUNCHER_PACKAGE_NAME = "@deftai/directive";
-var RUNTIME_PACKAGE_NAME = "@deftai/directive-runtime";
-var CONTRACT_NUMBER = 1;
-var LAUNCHER_MAX_SUPPORTED_CONTRACT = CONTRACT_NUMBER;
-var CONTRACT_PACKAGE_JSON_KEY = "directive";
-var EXIT_CODES = {
-  SUCCESS: 0,
-  FAILURE: 1,
-  USAGE: 2,
-  INTERRUPTED: 130
-};
-var NODE_ENGINES_FLOOR_MAJOR = 20;
-var NODE_SUPPORTED_MAJOR = 22;
-var NODE_EOL_NOTE = "Node 20 reached end of life on 30 April 2026. Directive is tested on Node 22 and 24 and runs on 20 on a best-effort basis.";
-var RECOVERY_GUIDANCE = "npm i -g @deftai/directive, then directive install --repair";
-var ENV_PROJECT_ROOT = "DIRECTIVE_PROJECT_ROOT";
-var ENV_LAUNCHER_VERSION = "DIRECTIVE_LAUNCHER_VERSION";
-var INSTALL_MANAGEMENT_COMMANDS = [
-  "install",
-  "upgrade",
-  "uninstall",
-  "doctor"
-];
-var INSTALL_ALIASES = {
-  init: "install",
-  update: "upgrade",
-  remove: "uninstall"
-};
-var RETIRED_INSTALL_VERBS = /* @__PURE__ */ new Set([
-  "sync",
-  "bootstrap",
-  "migrate",
-  "install-upgrade",
-  "install-uninstall"
-]);
-
-// packages/cli/src/discover.ts
-import { existsSync, realpathSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import { isAbsolute, resolve } from "node:path";
-import { spawnSync } from "node:child_process";
-function realpathOrResolve(path) {
-  const resolved = resolve(path);
-  try {
-    return realpathSync(resolved);
-  } catch {
-    return resolved;
-  }
-}
-function isFilesystemRoot(path) {
-  const resolved = realpathOrResolve(path);
-  let rootReal;
-  try {
-    rootReal = realpathSync("/");
-  } catch {
-    rootReal = resolve("/");
-  }
-  if (resolved === rootReal || resolved === resolve("/")) return true;
-  return /^[A-Za-z]:[\\/]?$/.test(resolved);
-}
-function isUserHome(path) {
-  try {
-    return realpathOrResolve(path) === realpathOrResolve(homedir());
-  } catch {
-    return false;
-  }
-}
-function runGitShowToplevel(cwd) {
-  const result = spawnSync("git", ["-C", cwd, "rev-parse", "--show-toplevel"], {
-    encoding: "utf8",
-    env: process.env
-  });
-  return {
-    code: result.status ?? 1,
-    stdout: (result.stdout ?? "").trim(),
-    stderr: (result.stderr ?? "").trim()
-  };
-}
-function discoverProject(options = {}) {
-  const cwd = resolve(options.cwd ?? process.cwd());
-  const rootFlagLexical = options.rootFlag ? resolve(options.rootFlag) : null;
-  if (rootFlagLexical !== null) {
-    if (!existsSync(rootFlagLexical) || !statSync(rootFlagLexical).isDirectory()) {
-      return {
-        ok: false,
-        kind: "missing_root",
-        message: `--root ${rootFlagLexical} is not an existing directory.`
-      };
-    }
-    const rootFlag = realpathOrResolve(rootFlagLexical);
-    if (!options.allowRootOrHome) {
-      if (isFilesystemRoot(rootFlag)) {
-        return {
-          ok: false,
-          kind: "refused_root",
-          message: "Refusing filesystem root as install destination. Pass a project path deliberately."
-        };
-      }
-      if (isUserHome(rootFlag)) {
-        return {
-          ok: false,
-          kind: "refused_home",
-          message: "Refusing home directory as install destination. Pass a project path deliberately."
-        };
-      }
-    }
-    const git2 = runGitShowToplevel(rootFlagLexical);
-    if (git2.code === 0 && git2.stdout.length > 0) {
-      const toplevel = realpathOrResolve(git2.stdout);
-      if (toplevel !== rootFlag) {
-        return {
-          ok: false,
-          kind: "root_not_git_toplevel",
-          message: `--root must be the Git working-tree root (${toplevel}); got ${rootFlagLexical}.`
-        };
-      }
-    }
-    return {
-      ok: true,
-      root: rootFlag,
-      movedUp: rootFlag !== realpathOrResolve(cwd) && rootFlagLexical !== cwd,
-      viaGit: git2.code === 0
-    };
-  }
-  const git = runGitShowToplevel(cwd);
-  if (git.code === 0 && git.stdout.length > 0) {
-    const root2 = resolve(git.stdout);
-    if (!options.allowRootOrHome) {
-      if (isFilesystemRoot(root2) || isUserHome(root2)) {
-        return {
-          ok: false,
-          kind: isFilesystemRoot(root2) ? "refused_root" : "refused_home",
-          message: `Refusing ${isFilesystemRoot(root2) ? "filesystem root" : "home directory"} as project root.`
-        };
-      }
-    }
-    return {
-      ok: true,
-      root: root2,
-      movedUp: root2 !== cwd,
-      viaGit: true
-    };
-  }
-  if (git.code !== 0 && git.code !== 128 && git.stderr.length > 0) {
-    const missingGit = (git.stderr.includes("ENOENT") || git.code === 127) && !existsSync(resolve(cwd, ".git"));
-    if (!missingGit && git.code !== 128) {
-      if (existsSync(resolve(cwd, ".git"))) {
-        return {
-          ok: false,
-          kind: "git_error",
-          message: `Git error during discovery: ${git.stderr}`
-        };
-      }
-    }
-  }
-  let root = cwd;
-  let probe = cwd;
-  for (let i = 0; i < 8; i++) {
-    if (existsSync(resolve(probe, "package.json"))) {
-      root = probe;
-      break;
-    }
-    const parent = resolve(probe, "..");
-    if (parent === probe) break;
-    probe = parent;
-  }
-  if (!options.allowRootOrHome) {
-    if (isFilesystemRoot(root)) {
-      return {
-        ok: false,
-        kind: "refused_root",
-        message: "Refusing filesystem root as project root."
-      };
-    }
-    if (isUserHome(root)) {
-      return {
-        ok: false,
-        kind: "refused_home",
-        message: "Refusing home directory as project root."
-      };
-    }
-  }
-  return {
-    ok: true,
-    root,
-    movedUp: root !== cwd,
-    viaGit: false
-  };
-}
-function takeRootFlag(argv) {
-  const rest = [];
-  let root = null;
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === "--root") {
-      const next = argv[i + 1];
-      if (next === void 0 || next.startsWith("-")) {
-        root = "";
-        continue;
-      }
-      root = isAbsolute(next) ? next : resolve(next);
-      i++;
-      continue;
-    }
-    if (a.startsWith("--root=")) {
-      root = a.slice("--root=".length);
-      continue;
-    }
-    rest.push(a);
-  }
-  return { root, rest };
-}
-
-// packages/cli/src/node-check.ts
-function checkNodeVersion(version = process.versions.node) {
-  const major = Number.parseInt(version.split(".")[0] ?? "", 10);
-  if (!Number.isFinite(major) || major < NODE_ENGINES_FLOOR_MAJOR) {
-    return {
-      ok: false,
-      warning: null,
-      message: `Directive needs Node ${NODE_ENGINES_FLOOR_MAJOR} or later; you have ${version}.`,
-      exitCode: EXIT_CODES.FAILURE
-    };
-  }
-  if (major < NODE_SUPPORTED_MAJOR) {
-    return {
-      ok: true,
-      warning: NODE_EOL_NOTE,
-      message: null,
-      exitCode: EXIT_CODES.SUCCESS
-    };
-  }
-  return { ok: true, warning: null, message: null, exitCode: EXIT_CODES.SUCCESS };
-}
-
-// packages/cli/src/pin.ts
-import { existsSync as existsSync2, readFileSync, statSync as statSync2 } from "node:fs";
-import { join } from "node:path";
-function readJsonObject(path) {
-  try {
-    const raw = readFileSync(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-      return null;
-    }
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-function depMap(pkg) {
-  const out = {};
-  for (const key of ["dependencies", "devDependencies", "optionalDependencies"]) {
-    const block = pkg[key];
-    if (block !== null && typeof block === "object" && !Array.isArray(block)) {
-      for (const [name, ver] of Object.entries(block)) {
-        if (typeof ver === "string") out[name] = ver;
-      }
-    }
-  }
-  return out;
-}
-function classifyPinVersion(raw) {
-  if (raw === null || raw === void 0 || raw.length === 0) {
-    return { kind: "none", raw: null, version: null };
-  }
-  const trimmed = raw.trim();
-  const exact = trimmed.startsWith("=") ? trimmed.slice(1) : trimmed;
-  if (/^\d+\.\d+\.\d+([-+][0-9A-Za-z.-]+)?$/.test(exact)) {
-    return { kind: "exact", raw: trimmed, version: exact };
-  }
-  if (/^[~^><*x]|workspace:|file:|npm:|\|\|/.test(trimmed) || trimmed.includes(" ")) {
-    return { kind: "range", raw: trimmed, version: null };
-  }
-  return { kind: "invalid", raw: trimmed, version: null };
-}
-function isRegularFile(path) {
-  try {
-    return statSync2(path).isFile();
-  } catch {
-    return false;
-  }
-}
-function hasCopiedCoreEvidence(projectRoot) {
-  const core = join(projectRoot, ".deft", "core");
-  if (isRegularFile(join(core, "VERSION"))) return true;
-  if (isRegularFile(join(core, "main.md"))) return true;
-  const pkgPath = join(core, "package.json");
-  if (!isRegularFile(pkgPath)) return false;
-  const pkg = readJsonObject(pkgPath);
-  return pkg !== null && pkg.deftConsumerDeposit === true;
-}
-function readPin(projectRoot) {
-  const pkgPath = join(projectRoot, "package.json");
-  const pkg = readJsonObject(pkgPath);
-  if (pkg === null) {
-    return { kind: "none", raw: null, version: null, oldStyle: false };
-  }
-  const deps = depMap(pkg);
-  const runtimeRaw = deps[RUNTIME_PACKAGE_NAME];
-  if (runtimeRaw !== void 0) {
-    return { ...classifyPinVersion(runtimeRaw), oldStyle: false };
-  }
-  const legacy = deps[LAUNCHER_PACKAGE_NAME];
-  if (legacy !== void 0) {
-    const classified = classifyPinVersion(legacy);
-    if (classified.kind === "exact" && hasCopiedCoreEvidence(projectRoot)) {
-      return { ...classified, oldStyle: true };
-    }
-    return { kind: "none", raw: null, version: null, oldStyle: false };
-  }
-  return { kind: "none", raw: null, version: null, oldStyle: false };
-}
-function readInstalledRuntime(projectRoot) {
-  const packageJsonPath = join(
-    projectRoot,
-    "node_modules",
-    ...RUNTIME_PACKAGE_NAME.split("/"),
-    "package.json"
-  );
-  if (!existsSync2(packageJsonPath)) return null;
-  const pkg = readJsonObject(packageJsonPath);
-  if (pkg === null) return null;
-  const version = pkg.version;
-  if (typeof version !== "string" || version.length === 0) return null;
-  const directive = pkg[CONTRACT_PACKAGE_JSON_KEY];
-  if (directive === null || typeof directive !== "object" || Array.isArray(directive)) {
-    return null;
-  }
-  const contract = directive.contract;
-  if (typeof contract !== "number" || !Number.isInteger(contract) || contract < 1) {
-    return null;
-  }
-  const entryPath = join(
-    projectRoot,
-    "node_modules",
-    ...RUNTIME_PACKAGE_NAME.split("/"),
-    "dist",
-    "bin.js"
-  );
-  return { version, contract, packageJsonPath, entryPath };
-}
-function isContractSupported(runtimeContract) {
-  return Number.isInteger(runtimeContract) && runtimeContract >= 1 && runtimeContract <= LAUNCHER_MAX_SUPPORTED_CONTRACT;
-}
-function readProjectInstallState(projectRoot) {
-  const pinRead = readPin(projectRoot);
-  const installed = readInstalledRuntime(projectRoot);
-  const pinMatchesInstalled = pinRead.kind === "exact" && pinRead.version !== null && installed !== null && installed.version === pinRead.version;
-  const contractSupported = installed === null ? true : isContractSupported(installed.contract);
-  return {
-    pin: pinRead,
-    installed,
-    pinMatchesInstalled,
-    contractSupported,
-    oldStyle: pinRead.oldStyle
-  };
-}
-
-// packages/cli/src/hook-launcher.ts
-function runHookLauncher(argv) {
-  const node = checkNodeVersion();
-  if (!node.ok) {
-    process.stderr.write(`${node.message}
-`);
-    return node.exitCode;
-  }
-  const discovered = discoverProject({ cwd: process.cwd() });
-  if (!discovered.ok) {
-    process.stderr.write(
-      `deft-hook: no project root. Host hooks should call node node_modules/${RUNTIME_PACKAGE_NAME}/dist/hook-bin.js
-Recovery: ${RECOVERY_GUIDANCE}
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const runtime = readInstalledRuntime(discovered.root);
-  if (runtime === null) {
-    process.stderr.write(
-      `deft-hook: ${RUNTIME_PACKAGE_NAME} not installed in ${discovered.root}.
-Recovery: ${RECOVERY_GUIDANCE}
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const hookEntry = join2(
-    discovered.root,
-    "node_modules",
-    ...RUNTIME_PACKAGE_NAME.split("/"),
-    "dist",
-    "hook-bin.js"
-  );
-  if (!existsSync3(hookEntry)) {
-    process.stderr.write(`deft-hook: missing ${hookEntry}
-Recovery: ${RECOVERY_GUIDANCE}
-`);
-    return EXIT_CODES.FAILURE;
-  }
-  const result = spawnSync2(process.execPath, [hookEntry, ...argv], {
-    cwd: discovered.root,
-    env: process.env,
-    stdio: "inherit"
-  });
-  if (result.error) {
-    process.stderr.write(`deft-hook: failed to start runtime hook: ${result.error.message}
-`);
-    return EXIT_CODES.FAILURE;
-  }
-  if (result.status === null && result.signal) return EXIT_CODES.INTERRUPTED;
-  return result.status ?? EXIT_CODES.FAILURE;
-}
-
-// packages/cli/src/contract-invoke.ts
-import { existsSync as existsSync4 } from "node:fs";
-import { spawnSync as spawnSync3 } from "node:child_process";
-function invokeRuntime(options) {
-  const { projectRoot, launcherVersion, runtime, argv } = options;
-  if (!existsSync4(runtime.entryPath)) {
-    return {
-      exitCode: EXIT_CODES.FAILURE,
-      stdout: "",
-      stderr: "",
-      spawned: false,
-      message: `Runtime entry missing at ${runtime.entryPath}. ${RECOVERY_GUIDANCE}`
-    };
-  }
-  const stdio = options.stdio ?? "inherit";
-  const result = spawnSync3(process.execPath, [runtime.entryPath, ...argv], {
-    cwd: process.cwd(),
-    env: {
-      ...process.env,
-      [ENV_PROJECT_ROOT]: projectRoot,
-      [ENV_LAUNCHER_VERSION]: launcherVersion
-    },
-    encoding: "utf8",
-    stdio: stdio === "inherit" ? "inherit" : ["ignore", "pipe", "pipe"]
-  });
-  if (result.error) {
-    return {
-      exitCode: EXIT_CODES.FAILURE,
-      stdout: "",
-      stderr: String(result.error),
-      spawned: false,
-      message: `Failed to start runtime: ${result.error.message}`
-    };
-  }
-  const status = result.status;
-  if (status === null && result.signal) {
-    return {
-      exitCode: EXIT_CODES.INTERRUPTED,
-      stdout: result.stdout ?? "",
-      stderr: result.stderr ?? "",
-      spawned: true,
-      message: `Runtime interrupted (${result.signal})`
-    };
-  }
-  return {
-    exitCode: status ?? EXIT_CODES.FAILURE,
-    stdout: result.stdout ?? "",
-    stderr: result.stderr ?? "",
-    spawned: true,
-    message: null
-  };
-}
-function setupArgv(operation, from, root) {
-  return ["setup", "--operation", operation, "--from", from, "--root", root];
-}
-function migrateArgv(from, root) {
-  return ["migrate", "--from", from, "--root", root];
-}
-function uninstallArgv(root) {
-  return ["uninstall", "--root", root];
-}
-function doctorArgv() {
-  return ["doctor", "--data-status"];
-}
-function doctorDiagnoseArgv() {
-  return ["doctor"];
-}
-
-// packages/cli/src/bookends.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
-import { join as join6 } from "node:path";
-
-// packages/cli/src/interactive-stdin.ts
-import { readSync } from "node:fs";
-var RETRY_ERRNOS = /* @__PURE__ */ new Set(["EAGAIN", "EWOULDBLOCK", "EINTR"]);
-function defaultSyncWait(ms) {
-  const sab = new SharedArrayBuffer(4);
-  const ia = new Int32Array(sab);
-  Atomics.wait(ia, 0, 0, ms);
-}
-function defaultRead(buffer, offset, length) {
-  return readSync(0, buffer, offset, length, null);
-}
-function readInteractiveLine(options) {
-  const read = options?.read ?? defaultRead;
-  const wait = options?.wait ?? defaultSyncWait;
-  const waitMs = options?.waitMs ?? 15;
-  const chunks = [];
-  const buf = Buffer.alloc(256);
-  for (; ; ) {
-    let n = 0;
-    try {
-      n = read(buf, 0, buf.length);
-    } catch (err) {
-      const code2 = err?.code;
-      if (code2 && RETRY_ERRNOS.has(code2)) {
-        wait(waitMs);
-        continue;
-      }
-      if (code2 === "EIO") {
-        if (chunks.length === 0) return { line: "", eof: true };
-        break;
-      }
-      throw err;
-    }
-    if (n === 0) {
-      if (chunks.length === 0) return { line: "", eof: true };
-      break;
-    }
-    const slice = Buffer.from(buf.subarray(0, n));
-    chunks.push(slice);
-    if (slice.includes(10)) break;
-  }
-  const line = Buffer.concat(chunks).toString("utf8").split(/\r?\n/, 1)[0] ?? "";
-  return { line, eof: false };
-}
-
-// packages/cli/src/pm.ts
-import { createHash } from "node:crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync2, unlinkSync, writeFileSync } from "node:fs";
-import { join as join3 } from "node:path";
-import { spawnSync as spawnSync4 } from "node:child_process";
-var PARTIAL_CHANGES_MAY_REMAIN = "Partial changes may remain.";
-var INSTALL_SCRIPT_POLICY_PLAN_LINE = "install-script policy: PM exact-add uses --ignore-scripts (pin/wiring do not require package lifecycle scripts); project registry, authentication, proxy, and lockfile settings are honoured";
-var EXACT_SEMVER_RE = /^\d+\.\d+\.\d+([-+][0-9A-Za-z.-]+)?$/;
-function isExactSemver(version) {
-  return EXACT_SEMVER_RE.test(version.trim());
-}
-function isPrereleaseVersion(version) {
-  const v = version.trim();
-  if (!isExactSemver(v)) return false;
-  return v.includes("-");
-}
-function readJsonObject2(path) {
-  try {
-    const raw = readFileSync2(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-function parsePmNameToken(raw) {
-  const token = raw.trim();
-  if (token === "") return { kind: "absent" };
-  if (token.startsWith("npm@") || token === "npm") return { kind: "supported", pm: "npm" };
-  if (token.startsWith("pnpm@") || token === "pnpm") return { kind: "supported", pm: "pnpm" };
-  if (token.startsWith("yarn@") || token === "yarn") return { kind: "unsupported", name: "Yarn" };
-  if (token.startsWith("bun@") || token === "bun") return { kind: "unsupported", name: "Bun" };
-  const name = token.split("@")[0]?.trim() || token;
-  return { kind: "unsupported", name };
-}
-function readPackageManagerField(projectRoot) {
-  const pkg = readJsonObject2(join3(projectRoot, "package.json"));
-  if (pkg === null) return { kind: "absent" };
-  const raw = pkg.packageManager;
-  if (typeof raw !== "string" || raw.trim() === "") return { kind: "absent" };
-  return parsePmNameToken(raw);
-}
-function readDevEnginesPackageManager(projectRoot) {
-  const pkg = readJsonObject2(join3(projectRoot, "package.json"));
-  if (pkg === null) return { kind: "absent" };
-  const devEngines = pkg.devEngines;
-  if (devEngines === null || typeof devEngines !== "object" || Array.isArray(devEngines)) {
-    return { kind: "absent" };
-  }
-  const raw = devEngines.packageManager;
-  if (typeof raw === "string") return parsePmNameToken(raw);
-  if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
-    const name = raw.name;
-    if (typeof name !== "string" || name.trim() === "") return { kind: "absent" };
-    return parsePmNameToken(name.trim());
-  }
-  return { kind: "absent" };
-}
-function readDeclaredPackageManagerSlot(projectRoot) {
-  const field = readPackageManagerField(projectRoot);
-  const dev = readDevEnginesPackageManager(projectRoot);
-  if (field.kind === "unsupported") return field;
-  if (dev.kind === "unsupported") return { kind: "unsupported", name: dev.name };
-  if (field.kind === "supported" && dev.kind === "supported") {
-    if (field.pm !== dev.pm) {
-      return {
-        kind: "conflict",
-        message: `packageManager (${field.pm}) and devEngines.packageManager (${dev.pm}) disagree. Pass --package-manager npm|pnpm after aligning the declarations, or remove one.`
-      };
-    }
-    return {
-      kind: "supported",
-      pm: field.pm,
-      evidence: `packageManager/devEngines (${field.pm})`
-    };
-  }
-  if (field.kind === "supported") {
-    return {
-      kind: "supported",
-      pm: field.pm,
-      evidence: `packageManager field (${field.pm})`
-    };
-  }
-  if (dev.kind === "supported") {
-    return {
-      kind: "supported",
-      pm: dev.pm,
-      evidence: `devEngines.packageManager (${dev.pm})`
-    };
-  }
-  return { kind: "absent" };
-}
-function detectPackageManager(projectRoot, flag) {
-  const hasYarn = existsSync5(join3(projectRoot, "yarn.lock"));
-  const hasBun = existsSync5(join3(projectRoot, "bun.lock")) || existsSync5(join3(projectRoot, "bun.lockb"));
-  if (hasYarn) {
-    return {
-      ok: false,
-      message: "Yarn projects are not supported (AC5.7). Use npm or pnpm, or remove yarn.lock."
-    };
-  }
-  if (hasBun) {
-    return {
-      ok: false,
-      message: "Bun projects are not supported (AC5.7). Use npm or pnpm, or remove bun.lock."
-    };
-  }
-  const declared = readDeclaredPackageManagerSlot(projectRoot);
-  if (declared.kind === "unsupported") {
-    return {
-      ok: false,
-      message: `${declared.name} projects are not supported (AC5.7). Use npm or pnpm.`
-    };
-  }
-  if (declared.kind === "conflict") {
-    return { ok: false, message: declared.message };
-  }
-  if (flag !== null) {
-    if (flag !== "npm" && flag !== "pnpm") {
-      return {
-        ok: false,
-        message: `--package-manager must be npm or pnpm (got ${flag}).`
-      };
-    }
-  }
-  const hasPnpmLock = existsSync5(join3(projectRoot, "pnpm-lock.yaml"));
-  const hasNpmLock = existsSync5(join3(projectRoot, "package-lock.json"));
-  const fieldPm = declared.kind === "supported" ? declared.pm : null;
-  const fieldEvidence = declared.kind === "supported" ? declared.evidence : null;
-  if (hasPnpmLock && hasNpmLock) {
-    if (flag === "npm" || flag === "pnpm") {
-      return { ok: true, pm: flag, evidence: `--package-manager ${flag} (both lockfiles present)` };
-    }
-    if (fieldPm !== null && fieldEvidence !== null) {
-      return {
-        ok: true,
-        pm: fieldPm,
-        evidence: `${fieldEvidence} with both lockfiles`
-      };
-    }
-    return {
-      ok: false,
-      message: "Both package-lock.json and pnpm-lock.yaml present. Pass --package-manager npm|pnpm."
-    };
-  }
-  if (hasPnpmLock) {
-    if (flag === "npm") {
-      return {
-        ok: false,
-        message: "pnpm-lock.yaml present; refusing --package-manager npm."
-      };
-    }
-    return { ok: true, pm: "pnpm", evidence: "pnpm-lock.yaml" };
-  }
-  if (hasNpmLock) {
-    if (flag === "pnpm") {
-      return {
-        ok: false,
-        message: "package-lock.json present; refusing --package-manager pnpm."
-      };
-    }
-    return { ok: true, pm: "npm", evidence: "package-lock.json" };
-  }
-  if (flag === "npm" || flag === "pnpm") {
-    return { ok: true, pm: flag, evidence: `--package-manager ${flag}` };
-  }
-  if (fieldPm !== null && fieldEvidence !== null) {
-    return { ok: true, pm: fieldPm, evidence: fieldEvidence };
-  }
-  return { ok: true, pm: "npm", evidence: "default (no lockfile / packageManager)" };
-}
-function pnpmRootImporterBlock(text) {
-  const lines = text.split(/\r?\n/);
-  let i = 0;
-  while (i < lines.length && !/^importers:\s*$/.test(lines[i])) i++;
-  if (i >= lines.length) return null;
-  i++;
-  while (i < lines.length && !/^  \.:\s*$/.test(lines[i])) {
-    const line = lines[i];
-    if (line !== "" && !line.startsWith(" ")) return null;
-    i++;
-  }
-  if (i >= lines.length) return null;
-  i++;
-  const block = [];
-  while (i < lines.length) {
-    const line = lines[i];
-    if (line !== "" && (/^  \S/.test(line) || /^[^ \t]/.test(line))) break;
-    block.push(line);
-    i++;
-  }
-  return block.join("\n");
-}
-function pnpmRootRecordsExactPin(text, exactVersion) {
-  const block = pnpmRootImporterBlock(text);
-  if (block === null) return false;
-  const pkg = RUNTIME_PACKAGE_NAME.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const re = new RegExp(
-    `['"]?${pkg}['"]?:\\s*\\n\\s+specifier:\\s*['"]?([^\\s'"]+)['"]?\\s*\\n\\s+version:\\s*['"]?([^\\s'"]+)['"]?`
-  );
-  const match = block.match(re);
-  if (match === null) return false;
-  return match[1] === exactVersion && match[2] === exactVersion;
-}
-function npmRootRequest(packages) {
-  const root = packages[""];
-  if (typeof root !== "object" || root === null || Array.isArray(root)) return null;
-  const rec = root;
-  for (const key of ["devDependencies", "dependencies", "optionalDependencies"]) {
-    const deps = rec[key];
-    if (typeof deps !== "object" || deps === null || Array.isArray(deps)) continue;
-    const v = deps[RUNTIME_PACKAGE_NAME];
-    if (typeof v === "string") return v;
-  }
-  return null;
-}
-function lockfileRecordsExactPin(projectRoot, exactVersion, pm) {
-  if (pm === "pnpm") {
-    const pnpmLock = join3(projectRoot, "pnpm-lock.yaml");
-    if (!existsSync5(pnpmLock)) return false;
-    try {
-      return pnpmRootRecordsExactPin(readFileSync2(pnpmLock, "utf8"), exactVersion);
-    } catch {
-      return false;
-    }
-  }
-  const npmLock = join3(projectRoot, "package-lock.json");
-  if (!existsSync5(npmLock)) return false;
-  const lock = readJsonObject2(npmLock);
-  if (lock === null) return false;
-  const packages = lock.packages;
-  if (typeof packages === "object" && packages !== null && !Array.isArray(packages)) {
-    const pkgs = packages;
-    const request = npmRootRequest(pkgs);
-    if (request !== exactVersion) return false;
-    const entry = pkgs[`node_modules/${RUNTIME_PACKAGE_NAME}`];
-    if (typeof entry === "object" && entry !== null && !Array.isArray(entry)) {
-      return entry.version === exactVersion;
-    }
-    return false;
-  }
-  return false;
-}
-function ensurePackageJson(projectRoot) {
-  const path = join3(projectRoot, "package.json");
-  if (existsSync5(path)) {
-    return { created: false, path };
-  }
-  writeFileSync(path, `${JSON.stringify({ private: true }, null, 2)}
-`);
-  return { created: true, path };
-}
-function versionFromPmToken(raw) {
-  const at = raw.indexOf("@");
-  if (at < 0) return null;
-  const ver = raw.slice(at + 1).trim();
-  return ver.length > 0 ? ver : null;
-}
-function readDeclaredPackageManagerVersion(projectRoot) {
-  const pkg = readJsonObject2(join3(projectRoot, "package.json"));
-  if (pkg === null) return null;
-  if (typeof pkg.packageManager === "string" && pkg.packageManager.trim() !== "") {
-    const fromField = versionFromPmToken(pkg.packageManager.trim());
-    if (fromField !== null) return fromField;
-  }
-  const devEngines = pkg.devEngines;
-  if (devEngines !== null && typeof devEngines === "object" && !Array.isArray(devEngines)) {
-    const raw = devEngines.packageManager;
-    if (typeof raw === "string") {
-      const fromDev = versionFromPmToken(raw.trim());
-      if (fromDev !== null) return fromDev;
-    } else if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
-      const ver = raw.version;
-      if (typeof ver === "string" && ver.trim() !== "") return ver.trim();
-      const name = raw.name;
-      if (typeof name === "string") {
-        const fromName = versionFromPmToken(name.trim());
-        if (fromName !== null) return fromName;
-      }
-    }
-  }
-  return null;
-}
-function formatMissingPmGuidance(pm, declaredVersion = null) {
-  const ver = declaredVersion && declaredVersion.length > 0 ? declaredVersion : "latest";
-  const prepare = pm === "pnpm" ? `corepack enable && corepack prepare pnpm@${ver} --activate` : `corepack enable && corepack prepare npm@${ver} --activate`;
-  return `${pm} is required for this project but was not found on PATH.
-To make ${pm} available:
-  - If your Node install includes Corepack: ${prepare}
-  - Or install ${pm} yourself and ensure its directory is on PATH
-Directive does not install, upgrade, or switch package managers.`;
-}
-function ensurePackageManagerAvailable(pm, env = process.env, declaredVersion = null, projectRoot) {
-  const result = spawnSync4(pm, ["--version"], {
-    ...projectRoot !== void 0 ? { cwd: projectRoot } : {},
-    env,
-    encoding: "utf8",
-    shell: process.platform === "win32"
-  });
-  if (result.error) {
-    const err = result.error;
-    if (err.code === "ENOENT" || /ENOENT/i.test(err.message)) {
-      return { ok: false, message: formatMissingPmGuidance(pm, declaredVersion) };
-    }
-    return {
-      ok: false,
-      message: formatMissingPmGuidance(pm, declaredVersion)
-    };
-  }
-  if (result.status === null && result.signal) {
-    return { ok: false, message: formatMissingPmGuidance(pm, declaredVersion) };
-  }
-  if (result.status !== 0) {
-    return { ok: false, message: formatMissingPmGuidance(pm, declaredVersion) };
-  }
-  return { ok: true };
-}
-function fileDigest(absPath) {
-  if (!existsSync5(absPath)) return null;
-  try {
-    return createHash("sha256").update(readFileSync2(absPath)).digest("hex");
-  } catch {
-    return null;
-  }
-}
-function planCriticalRelPaths(_pm) {
-  return [
-    "package.json",
-    "package-lock.json",
-    "pnpm-lock.yaml",
-    "pnpm-workspace.yaml",
-    "yarn.lock",
-    "bun.lock",
-    "bun.lockb"
-  ];
-}
-function fingerprintPlanCriticalFiles(projectRoot, pm) {
-  const entries = planCriticalRelPaths(pm).map((relPath) => ({
-    relPath,
-    digest: fileDigest(join3(projectRoot, relPath))
-  }));
-  return { entries };
-}
-function planFingerprintChanged(projectRoot, pm, prior) {
-  const now = fingerprintPlanCriticalFiles(projectRoot, pm);
-  if (now.entries.length !== prior.entries.length) return true;
-  for (let i = 0; i < prior.entries.length; i++) {
-    const a = prior.entries[i];
-    const b = now.entries[i];
-    if (a.relPath !== b.relPath || a.digest !== b.digest) return true;
-  }
-  return false;
-}
-function interpretPmSpawnResult(pm, args, result) {
-  if (result.error) {
-    const err = result.error;
-    if (err.code === "ENOENT" || /ENOENT/i.test(String(err.message))) {
-      return {
-        ok: false,
-        message: formatMissingPmGuidance(pm === "pnpm" ? "pnpm" : "npm"),
-        stderr: String(result.error)
-      };
-    }
-    return {
-      ok: false,
-      message: `Failed to spawn ${pm}: ${result.error.message}`,
-      stderr: String(result.error)
-    };
-  }
-  if (result.status === null && result.signal) {
-    const signal = String(result.signal);
-    return {
-      ok: false,
-      interrupted: true,
-      signal,
-      message: `${pm} interrupted (${signal}). ${PARTIAL_CHANGES_MAY_REMAIN}`,
-      stderr: `${result.stderr ?? ""}${result.stdout ?? ""}`
-    };
-  }
-  if (result.status !== 0) {
-    return {
-      ok: false,
-      message: `${pm} ${args.join(" ")} failed (exit ${result.status ?? "?"})`,
-      stderr: `${result.stderr ?? ""}${result.stdout ?? ""}`
-    };
-  }
-  return { ok: true };
-}
-function isPnpmWorkspaceRoot(projectRoot) {
-  return existsSync5(join3(projectRoot, "pnpm-workspace.yaml"));
-}
-function buildPmExactAddArgs(pm, version, projectRoot) {
-  const spec = `${RUNTIME_PACKAGE_NAME}@${version}`;
-  if (pm === "npm") {
-    return [
-      "install",
-      "--save-dev",
-      "--save-exact",
-      "--ignore-scripts",
-      "--include=dev",
-      spec
-    ];
-  }
-  const args = [
-    "add",
-    "-D",
-    "--save-exact",
-    "--ignore-scripts",
-    "--config.production=false"
-  ];
-  if (isPnpmWorkspaceRoot(projectRoot)) {
-    args.push("-w");
-  }
-  args.push(spec);
-  return args;
-}
-function formatPmExactAddCommand(pm, version, projectRoot) {
-  return `${pm} ${buildPmExactAddArgs(pm, version, projectRoot).join(" ")}`;
-}
-var RETIRED_DIRECTIVE_PACKAGE_NAMES = [
-  LAUNCHER_PACKAGE_NAME,
-  "@deftai/directive-core",
-  "@deftai/directive-content",
-  "@deftai/directive-types"
-];
-function removeLegacyDirectivePackages(projectRoot) {
-  const path = join3(projectRoot, "package.json");
-  const pkg = readJsonObject2(path);
-  if (pkg === null) return false;
-  let removed = false;
-  for (const key of ["dependencies", "devDependencies", "optionalDependencies"]) {
-    const block = pkg[key];
-    if (block === null || typeof block !== "object" || Array.isArray(block)) continue;
-    const deps = block;
-    for (const name of RETIRED_DIRECTIVE_PACKAGE_NAMES) {
-      if (!(name in deps)) continue;
-      delete deps[name];
-      removed = true;
-    }
-    if (Object.keys(deps).length === 0) {
-      delete pkg[key];
-    }
-  }
-  if (!removed) return false;
-  writeFileSync(path, `${JSON.stringify(pkg, null, 2)}
-`);
-  return true;
-}
-function removeLegacyDirectivePin(projectRoot) {
-  return removeLegacyDirectivePackages(projectRoot);
-}
-var LOCKFILE_CANDIDATES = ["pnpm-lock.yaml", "package-lock.json", "npm-shrinkwrap.json"];
-function lockfileReferencesRetiredDirective(contents) {
-  for (const name of RETIRED_DIRECTIVE_PACKAGE_NAMES) {
-    if (contents.includes(`"${name}"`) || contents.includes(`${name}@`) || contents.includes(`${name}:`)) {
-      return true;
-    }
-    if (contents.includes(name)) {
-      return true;
-    }
-  }
-  return false;
-}
-function purgeRetiredDirectiveLockfiles(projectRoot) {
-  const purged = [];
-  for (const rel of LOCKFILE_CANDIDATES) {
-    const abs = join3(projectRoot, rel);
-    if (!existsSync5(abs)) continue;
-    let contents;
-    try {
-      contents = readFileSync2(abs, "utf8");
-    } catch {
-      continue;
-    }
-    if (!lockfileReferencesRetiredDirective(contents)) continue;
-    try {
-      unlinkSync(abs);
-      purged.push(rel);
-    } catch {
-    }
-  }
-  return purged;
-}
-function runPmExactAdd(options) {
-  const { projectRoot, pm, version } = options;
-  const args = buildPmExactAddArgs(pm, version, projectRoot);
-  const result = spawnSync4(pm, args, {
-    cwd: projectRoot,
-    env: options.env ?? process.env,
-    encoding: "utf8",
-    shell: process.platform === "win32"
-  });
-  return interpretPmSpawnResult(pm, args, result);
-}
-function buildPmRemoveArgs(pm, packageName, projectRoot) {
-  if (pm === "npm") {
-    return ["uninstall", "--save-dev", packageName];
-  }
-  const args = ["remove", "-D"];
-  if (isPnpmWorkspaceRoot(projectRoot)) {
-    args.push("-w");
-  }
-  args.push(packageName);
-  return args;
-}
-function formatPmRemoveCommand(pm, packageName, projectRoot) {
-  return `${pm} ${buildPmRemoveArgs(pm, packageName, projectRoot).join(" ")}`;
-}
-function runPmRemove(options) {
-  const { projectRoot, pm, packageName } = options;
-  const args = buildPmRemoveArgs(pm, packageName, projectRoot);
-  const result = spawnSync4(pm, args, {
-    cwd: projectRoot,
-    env: options.env ?? process.env,
-    encoding: "utf8",
-    shell: process.platform === "win32"
-  });
-  return interpretPmSpawnResult(pm, args, result);
-}
-
-// packages/cli/src/plan-present.ts
-var WRAP_FLOOR = 40;
-var WRAP_CEILING = 100;
-var WRAP_FALLBACK = 80;
-var HUMAN_INSTALL_SCRIPT_SETTINGS_LINE = "Installation may run scripts allowed by your project's settings.";
-var INSTALL_COMMAND_LABEL = "Install command:";
-var HUMAN_GIT_HOOKS_INACTIVE_LINE = "Incomplete install: this folder is not a git repository yet, so git hooks will not be installed. After you run git init, run directive install --repair so hooks get installed.";
-function lockfileNameFor(pm) {
-  return pm === "pnpm" ? "pnpm-lock.yaml" : "package-lock.json";
-}
-function parseVerbosityFlags(argv) {
-  const rest = [];
-  let verbosity = 0;
-  for (const a of argv) {
-    if (a === "-v" || a === "--verbose") {
-      verbosity = Math.max(verbosity, 1);
-      continue;
-    }
-    if (a === "-vv" || a === "--debug") {
-      verbosity = 2;
-      continue;
-    }
-    if (/^-v{2,}$/.test(a)) {
-      verbosity = 2;
-      continue;
-    }
-    rest.push(a);
-  }
-  return { verbosity, rest };
-}
-function writeBlank(io) {
-  io.writeOut("\n");
-}
-function writeLabeled(io, label, value, width = 18) {
-  const pad = label.length >= width ? `${label} ` : `${label}${" ".repeat(width - label.length)}`;
-  io.writeOut(`${pad}${value}
-`);
-}
-function resolveWrapWidth(opts) {
-  const isTTY = opts?.isTTY ?? Boolean(process.stdout.isTTY);
-  if (!isTTY) return null;
-  let cols = opts?.columns;
-  if (cols == null || !Number.isFinite(cols) || cols <= 0) {
-    const fromStdout = process.stdout.columns;
-    const fromEnv = Number(process.env.COLUMNS);
-    if (typeof fromStdout === "number" && fromStdout > 0) cols = fromStdout;
-    else if (Number.isFinite(fromEnv) && fromEnv > 0) cols = fromEnv;
-    else cols = WRAP_FALLBACK;
-  }
-  return Math.max(WRAP_FLOOR, Math.min(WRAP_CEILING, Math.floor(cols)));
-}
-function wrapWords(text, width) {
-  const normalized = text.replace(/\s+/g, " ").trim();
-  if (normalized.length === 0) return "";
-  if (width < 1) return normalized;
-  const words = normalized.split(" ");
-  const lines = [];
-  let current = "";
-  for (const word of words) {
-    if (current.length === 0) {
-      current = word;
-      continue;
-    }
-    if (current.length + 1 + word.length <= width) {
-      current = `${current} ${word}`;
-    } else {
-      lines.push(current);
-      current = word;
-    }
-  }
-  if (current.length > 0) lines.push(current);
-  return lines.join("\n");
-}
-function writeHumanParagraph(io, text, wrapOpts) {
-  const width = resolveWrapWidth(wrapOpts);
-  const body = width == null ? text.replace(/\s+/g, " ").trim() : wrapWords(text, width);
-  if (body.length === 0) return;
-  io.writeOut(`${body}
-`);
-}
-function writeBullet(io, text) {
-  const width = resolveWrapWidth();
-  if (width == null) {
-    io.writeOut(`  \u2022 ${text}
-`);
-    return;
-  }
-  const inner = Math.max(WRAP_FLOOR - 4, width - 4);
-  const wrapped = wrapWords(text, inner);
-  const parts = wrapped.split("\n");
-  io.writeOut(`  \u2022 ${parts[0]}
-`);
-  for (let i = 1; i < parts.length; i++) {
-    io.writeOut(`    ${parts[i]}
-`);
-  }
-}
-function writeGitHooksDisclosure(io, inactive) {
-  if (!inactive) return;
-  writeHumanParagraph(io, HUMAN_GIT_HOOKS_INACTIVE_LINE);
-}
-function writeNodeWarning(io, warning) {
-  if (!warning) return;
-  writeHumanParagraph(io, warning);
-}
-function writeDisclosures(io, fields) {
-  writeGitHooksDisclosure(io, fields.gitHooksInactive);
-  writeNodeWarning(io, fields.nodeWarning);
-}
-function writeKeyedBlock(io, lines) {
-  io.writeOut("Plan (verbose):\n");
-  for (const line of lines) {
-    io.writeOut(`  ${line}
-`);
-  }
-}
-function writeInstallCommandAndScriptDisclosure(io, command) {
-  if (!command) return;
-  writeBlank(io);
-  io.writeOut(`${INSTALL_COMMAND_LABEL}
-`);
-  io.writeOut(`  ${command}
-`);
-  writeBlank(io);
-  io.writeOut(`${HUMAN_INSTALL_SCRIPT_SETTINGS_LINE}
-`);
-}
-function writePmCommandVerbose(io, label, command, verbosity) {
-  if (verbosity < 1 || !command) return;
-  writeBlank(io);
-  io.writeOut(`${label}
-`);
-  io.writeOut(`  ${command}
-`);
-}
-function presentFirstInstallPlan(io, fields) {
-  const lock = lockfileNameFor(fields.pm);
-  io.writeOut("Set up Deft Directive\n");
-  writeBlank(io);
-  writeLabeled(io, "Project:", fields.projectRoot);
-  writeLabeled(io, "Package manager:", `${fields.pm} (${fields.pmEvidence})`);
-  writeLabeled(io, "Directive version:", fields.version);
-  writeBlank(io);
-  io.writeOut("If you approve, Directive will:\n");
-  if (fields.willCreatePkg) {
-    writeBullet(io, "create a minimal package.json for this project");
-  }
-  writeBullet(
-    io,
-    `add Directive ${fields.version} to this project's development tools with ${fields.pm}`
-  );
-  writeBullet(io, `update ${lock}`);
-  writeBullet(io, "set up Directive's project files");
-  writeBlank(io);
-  writeDisclosures(io, fields);
-  writeInstallCommandAndScriptDisclosure(io, fields.pmCommand);
-  if (fields.verbosity >= 1) {
-    writeBlank(io);
-    const keyed = [
-      `operation: install (first-time)`,
-      `root: ${fields.projectRoot}`,
-      `package manager: ${fields.pm} (${fields.pmEvidence})`,
-      `target: @deftai/directive-runtime@${fields.version}`,
-      fields.willCreatePkg ? `manifest: create package.json { "private": true }` : `manifest: add exact pin to existing package.json`,
-      `PM command: ${fields.pmCommand}`,
-      `expected: package.json pin + lockfile update via PM`,
-      `setup: runtime setup --operation install --from none (wiring, GENERATION.json, readiness; may create missing seed placeholders)`,
-      INSTALL_SCRIPT_POLICY_PLAN_LINE
-    ];
-    if (fields.gitHooksInactive) {
-      keyed.push(
-        "Git hooks: not installed until git init + directive install --repair (cannot set core.hooksPath=.githooks yet)"
-      );
-    }
-    if (fields.nodeWarning) keyed.push(`node: ${fields.nodeWarning}`);
-    writeKeyedBlock(io, keyed);
-    writeBlank(io);
-  }
-}
-function presentRepairPlan(io, fields) {
-  io.writeOut("Repair Directive\n");
-  writeBlank(io);
-  writeLabeled(io, "Project:", fields.projectRoot);
-  writeLabeled(io, "Package manager:", `${fields.pm} (${fields.pmEvidence})`);
-  writeLabeled(io, "Directive version:", `${fields.version} (unchanged)`);
-  writeBlank(io);
-  if (!fields.needsPmRestore) {
-    writeHumanParagraph(io, "The installed package is healthy. No reinstall is needed.");
-    writeBlank(io);
-    io.writeOut("If you approve, Directive will:\n");
-    writeBullet(io, `rerun setup using Directive ${fields.version}`);
-    writeBullet(io, "recreate missing managed project files as needed");
-    writeBlank(io);
-    writeHumanParagraph(io, "Your existing settings and other files will be preserved.");
-  } else {
-    writeHumanParagraph(
-      io,
-      `The installed package needs restoration (${fields.restoreReason ?? "mismatch"}).`
-    );
-    writeBlank(io);
-    io.writeOut("If you approve, Directive will:\n");
-    writeBullet(io, `restore the Directive ${fields.version} pin with ${fields.pm}`);
-    writeBullet(io, "rerun project setup");
-    writeBlank(io);
-    writeHumanParagraph(io, "Your existing settings and other files will be preserved.");
-  }
-  writeBlank(io);
-  writeDisclosures(io, fields);
-  writeInstallCommandAndScriptDisclosure(io, fields.pmCommand);
-  if (fields.verbosity >= 1) {
-    writeBlank(io);
-    const keyed = [
-      `operation: repair`,
-      `root: ${fields.projectRoot}`,
-      `package manager: ${fields.pm} (${fields.pmEvidence})`,
-      `pin (unchanged): @deftai/directive-runtime@${fields.version}`,
-      fields.needsPmRestore ? `PM: restore pin via exact add (${fields.restoreReason ?? "needed"})` : `PM: none (lockfile records pin; installed package matches)`,
-      fields.needsPmRestore && fields.pmCommand ? `PM command: ${fields.pmCommand}` : `PM command: (none)`,
-      `setup: runtime setup --operation repair --from ${fields.version} (wiring/GENERATION/readiness; does not create seed files; never migrates xbrief)`,
-      INSTALL_SCRIPT_POLICY_PLAN_LINE
-    ];
-    if (fields.gitHooksInactive) {
-      keyed.push(
-        "Git hooks: not installed until git init + directive install --repair (cannot set core.hooksPath=.githooks yet)"
-      );
-    }
-    if (fields.nodeWarning) keyed.push(`node: ${fields.nodeWarning}`);
-    writeKeyedBlock(io, keyed);
-    writeBlank(io);
-  }
-}
-function presentUpgradePlan(io, fields) {
-  const lock = lockfileNameFor(fields.pm);
-  io.writeOut("Upgrade Directive\n");
-  writeBlank(io);
-  writeLabeled(io, "Project:", fields.projectRoot);
-  writeLabeled(io, "Package manager:", `${fields.pm} (${fields.pmEvidence})`);
-  writeLabeled(io, "Current version:", fields.currentVersion);
-  writeLabeled(io, "Target version:", fields.targetVersion);
-  writeBlank(io);
-  if (fields.oldStyle) {
-    writeHumanParagraph(io, "This project uses an older Directive layout (old-style).");
-  } else if (fields.convertShapeId) {
-    writeHumanParagraph(
-      io,
-      `This project uses a historical Directive layout ('${fields.convertShapeId}').`
-    );
-  }
-  io.writeOut("If you approve, Directive will:\n");
-  if (fields.oldStyle) {
-    writeBullet(io, "remove the legacy `.deft/core` content copy (including any local edits)");
-    writeBullet(
-      io,
-      `replace the legacy launcher pin with Directive ${fields.targetVersion}`
-    );
-    writeBullet(io, `update ${lock}`);
-    writeBullet(io, "run setup and any required project-data migrations");
-  } else if (fields.convertShapeId) {
-    writeBullet(
-      io,
-      "remove the legacy install footprint (keeping xbrief/ and your files)"
-    );
-    writeBullet(io, `add Directive ${fields.targetVersion} with ${fields.pm}`);
-    writeBullet(io, `update ${lock}`);
-    writeBullet(io, "run setup and any required project-data migrations");
-  } else if (fields.versionChange) {
-    writeBullet(io, `update the exact version in package.json to ${fields.targetVersion}`);
-    writeBullet(io, `update ${lock}`);
-    writeBullet(io, "run project setup and any required project-data migrations");
-  } else {
-    writeBullet(
-      io,
-      `finish equal-version work for Directive ${fields.targetVersion}` + (fields.needSetup ? " (setup, then migration as needed)" : " (migration as needed)")
-    );
-  }
-  writeBlank(io);
-  writeHumanParagraph(io, "Your existing project settings will be preserved.");
-  writeBlank(io);
-  writeDisclosures(io, fields);
-  if (fields.versionChange) {
-    writeInstallCommandAndScriptDisclosure(io, fields.pmCommand);
-  }
-  if (fields.verbosity >= 1) {
-    writeBlank(io);
-    const keyed = [
-      `operation: upgrade`,
-      `root: ${fields.projectRoot}`,
-      `package manager: ${fields.pm} (${fields.pmEvidence})`,
-      `current: @deftai/directive-runtime@${fields.currentVersion}${fields.oldStyle ? " (old-style)" : ""}`,
-      `target: @deftai/directive-runtime@${fields.targetVersion}`,
-      fields.versionChange ? `PM: exact add target (pin + lockfile change)` : `PM: none (equal version; package already matches pin)`,
-      fields.versionChange && fields.pmCommand ? `PM command: ${fields.pmCommand}` : `PM command: (none)`,
-      fields.needSetup ? `setup: runtime setup --operation upgrade --from ${fields.currentVersion}` : `setup: none (wiring current for pin)`,
-      fields.needMigrate ? `migrate: runtime migrate --from ${fields.currentVersion}` : `migrate: none`,
-      `disclosure: target runtime performs required setup/migrations; project settings/data preserved`,
-      `global launcher: unchanged`,
-      INSTALL_SCRIPT_POLICY_PLAN_LINE
-    ];
-    if (fields.oldStyle) {
-      keyed.splice(
-        5,
-        0,
-        `remove: .deft/core (legacy content copy, even if edited)`,
-        `replace: @deftai/directive pin \u2192 @deftai/directive-runtime@${fields.targetVersion}`
-      );
-    }
-    if (fields.gitHooksInactive) {
-      keyed.push(
-        "Git hooks: not installed until git init + directive install --repair (cannot set core.hooksPath=.githooks yet)"
-      );
-    }
-    if (fields.nodeWarning) keyed.push(`node: ${fields.nodeWarning}`);
-    writeKeyedBlock(io, keyed);
-    writeBlank(io);
-  }
-}
-function classifyUninstallPath(pathLabel) {
-  const p = pathLabel.replace(/\s*\(.*\)$/, "");
-  if (p === ".deft/core" || p.startsWith(".deft/core/")) return "legacy-core";
-  if (p.includes("/skills/") || /\/SKILL\.md$/i.test(p)) return "skill";
-  if (p === ".claude/settings.json" || p === ".cursor/hooks.json" || p === ".codex/hooks.json" || p === ".grok/hooks/deft.json" || p.endsWith("/hooks.json") || p.includes("/hooks/")) {
-    return "host-hook";
-  }
-  if (p.startsWith(".githooks/") || p.includes("githooks")) return "git-hook";
-  if (p === ".deft/GENERATION.json" || p.startsWith(".deft/directive/") || p === "AGENTS.md" || p.startsWith("AGENTS.md") || p === "Taskfile.yml" || p.startsWith("Taskfile.yml") || p === ".gitignore") {
-    return "wiring";
-  }
-  return "other";
-}
-function summarizeUninstallRemovals(pathInventory, opts) {
-  let skillPointers = 0;
-  let hostHooks = 0;
-  let gitHooks = 0;
-  let projectWiring = 0;
-  let other = 0;
-  let legacyCore = Boolean(opts.legacyCore);
-  for (const p of pathInventory) {
-    switch (classifyUninstallPath(p)) {
-      case "skill":
-        skillPointers += 1;
-        break;
-      case "host-hook":
-        hostHooks += 1;
-        break;
-      case "git-hook":
-        gitHooks += 1;
-        break;
-      case "wiring":
-        projectWiring += 1;
-        break;
-      case "legacy-core":
-        legacyCore = true;
-        break;
-      default:
-        other += 1;
-        break;
-    }
-  }
-  return {
-    skillPointers,
-    hostHooks,
-    gitHooks,
-    projectWiring,
-    other,
-    legacyCore,
-    willRemovePin: opts.willRemovePin,
-    pathInventory: [...pathInventory],
-    preserveLabels: [...opts.preserveLabels ?? []]
-  };
-}
-function writeUninstallActionBullets(io, removal, pm) {
-  io.writeOut("If you approve, Directive will:\n");
-  if (removal.skillPointers > 0) {
-    writeBullet(
-      io,
-      `remove ${removal.skillPointers} skill pointer${removal.skillPointers === 1 ? "" : "s"} across agent hosts`
-    );
-  }
-  if (removal.hostHooks > 0) {
-    writeBullet(
-      io,
-      `clear Directive entries from ${removal.hostHooks} host hook config${removal.hostHooks === 1 ? "" : "s"}`
-    );
-  }
-  const wiringBits = [];
-  if (removal.gitHooks > 0) wiringBits.push("git hooks");
-  if (removal.projectWiring > 0) wiringBits.push("GENERATION and project wiring");
-  if (removal.legacyCore) wiringBits.push("legacy .deft/core");
-  if (wiringBits.length > 0) {
-    writeBullet(io, `remove ${wiringBits.join(", ")}`);
-  } else if (removal.other > 0) {
-    writeBullet(io, `remove ${removal.other} other Directive-owned path${removal.other === 1 ? "" : "s"}`);
-  }
-  if (removal.willRemovePin) {
-    writeBullet(
-      io,
-      pm ? `remove the Directive runtime pin with ${pm}` : "remove the Directive runtime pin from package.json"
-    );
-  }
-  if (removal.skillPointers === 0 && removal.hostHooks === 0 && wiringBits.length === 0 && !removal.willRemovePin && removal.other === 0) {
-    writeBullet(io, "remove remaining Directive-owned wiring from this project");
-  }
-}
-function presentUninstallPlan(io, fields) {
-  io.writeOut("Uninstall Directive\n");
-  writeBlank(io);
-  writeLabeled(io, "Project:", fields.projectRoot);
-  if (fields.pm && fields.pmEvidence) {
-    writeLabeled(io, "Package manager:", `${fields.pm} (${fields.pmEvidence})`);
-  }
-  if (fields.pinVersion) {
-    writeLabeled(io, "Pinned version:", fields.pinVersion);
-  }
-  writeBlank(io);
-  if (fields.removal) {
-    writeUninstallActionBullets(io, fields.removal, fields.pm);
-    writeBlank(io);
-    const keep = fields.removal.preserveLabels.length > 0 ? fields.removal.preserveLabels.join(", ") : "xbrief/ project data and unrelated files";
-    writeHumanParagraph(io, `Your ${keep} stay in place.`);
-  } else {
-    writeHumanParagraph(
-      io,
-      "I'll remove Directive-owned wiring and the runtime pin from this project. Your xbrief/ project data and unrelated files stay in place."
-    );
-  }
-  writeBlank(io);
-  writePmCommandVerbose(
-    io,
-    "Package manager command (Directive runs this):",
-    fields.pmCommand,
-    fields.verbosity
-  );
-  if (fields.verbosity >= 1) {
-    writeBlank(io);
-    if (fields.removal && fields.removal.pathInventory.length > 0) {
-      io.writeOut("Remove paths:\n");
-      for (const p of fields.removal.pathInventory) {
-        io.writeOut(`  ${p}
-`);
-      }
-      writeBlank(io);
-    }
-    if (fields.extraHumanLines) {
-      for (const line of fields.extraHumanLines) {
-        io.writeOut(`${line}
-`);
-      }
-      writeBlank(io);
-    }
-    const keyed = [
-      `operation: uninstall`,
-      `root: ${fields.projectRoot}`,
-      fields.pm ? `package manager: ${fields.pm} (${fields.pmEvidence})` : `package manager: (none)`,
-      fields.pinVersion ? `pin: ${fields.pinVersion}` : `pin: (none)`,
-      fields.pmCommand ? `PM command: ${fields.pmCommand}` : `PM command: (none)`
-    ];
-    if (fields.removal) {
-      keyed.push(
-        `counts: skills=${fields.removal.skillPointers} hostHooks=${fields.removal.hostHooks} gitHooks=${fields.removal.gitHooks} wiring=${fields.removal.projectWiring} other=${fields.removal.other}`
-      );
-    }
-    writeKeyedBlock(io, keyed);
-    writeBlank(io);
-  }
-}
-function presentPathSummary(io, label, summary, verbosity) {
-  const created = summary.created ?? [];
-  const modified = summary.modified ?? [];
-  const removed = summary.removed ?? [];
-  const migrated = summary.migrated ?? [];
-  const archived = summary.archived ?? [];
-  if (verbosity >= 2) {
-    io.writeOut(
-      `${label}: created=${JSON.stringify(created)} modified=${JSON.stringify(modified)} removed=${JSON.stringify(removed)}` + (migrated.length > 0 ? ` migrated=${JSON.stringify(migrated)}` : "") + (archived.length > 0 ? ` archived=${JSON.stringify(archived)}` : "") + (summary.conflicts && summary.conflicts.length > 0 ? ` conflicts=${JSON.stringify(summary.conflicts)}` : "") + "\n"
-    );
-  } else if (verbosity >= 1) {
-    io.writeOut(
-      `${label}: created=${created.length} modified=${modified.length} removed=${removed.length}` + (migrated.length > 0 ? ` migrated=${migrated.length}` : "") + (archived.length > 0 ? ` archived=${archived.length}` : "") + "\n"
-    );
-  }
-  if (summary.message && verbosity >= 1) {
-    io.writeOut(`${summary.message}
-`);
-  }
-}
-function gitHooksInactiveFromSummary(summary) {
-  const msg = summary?.message ?? "";
-  return /Git hooks inactive/i.test(msg);
-}
-function presentInstallSuccess(io, opts) {
-  const lock = lockfileNameFor(opts.pm);
-  const hooksInactive = gitHooksInactiveFromSummary(opts.summary);
-  io.writeOut(`\u2713 Installed Directive ${opts.version}
-`);
-  io.writeOut(`\u2713 Created Directive's project files
-`);
-  if (hooksInactive) {
-    io.writeOut(`\u2713 Verified the project-local installation (git hooks not installed yet)
-`);
-  } else {
-    io.writeOut(`\u2713 Verified the project-local installation
-`);
-  }
-  writeBlank(io);
-  if (hooksInactive) {
-    writeHumanParagraph(io, `Directive ${opts.version} is installed in ${opts.projectRoot}.`);
-    writeHumanParagraph(io, HUMAN_GIT_HOOKS_INACTIVE_LINE);
-  } else {
-    writeHumanParagraph(io, `Directive ${opts.version} is ready in ${opts.projectRoot}.`);
-  }
-  writeBlank(io);
-  io.writeOut("Next:\n");
-  if (hooksInactive) {
-    io.writeOut("  git init\n");
-    io.writeOut("  directive install --repair\n");
-  } else {
-    io.writeOut("  directive --help\n");
-  }
-  writeBlank(io);
-  io.writeOut("Review and commit:\n");
-  io.writeOut("  package.json\n");
-  io.writeOut(`  ${lock}
-`);
-  const review = collectReviewPaths(opts.summary);
-  for (const p of review) {
-    io.writeOut(`  ${p}
-`);
-  }
-  writeBlank(io);
-  writeHumanParagraph(io, "Commands in this project use its pinned Directive version.");
-  writeHumanParagraph(io, "Updating the global launcher will not upgrade this project.");
-  if (opts.verbosity >= 1 && opts.summary) {
-    writeBlank(io);
-    presentPathSummary(io, "setup install", opts.summary, opts.verbosity);
-  }
-}
-function presentRepairSuccess(io, opts) {
-  const hooksInactive = gitHooksInactiveFromSummary(opts.summary);
-  if (opts.restoredPackage) {
-    io.writeOut(`\u2713 Restored the installed Directive ${opts.version} package
-`);
-  } else {
-    io.writeOut(`\u2713 Verified the installed Directive ${opts.version} package
-`);
-  }
-  io.writeOut(`\u2713 Reran project setup
-`);
-  if (opts.summary && opts.summary.created.length + opts.summary.modified.length > 0) {
-    io.writeOut(`\u2713 Restored managed project files
-`);
-  }
-  writeBlank(io);
-  if (hooksInactive) {
-    writeHumanParagraph(io, `Directive ${opts.version} setup finished.`);
-    writeHumanParagraph(io, HUMAN_GIT_HOOKS_INACTIVE_LINE);
-    writeBlank(io);
-    io.writeOut("Next:\n");
-    io.writeOut("  git init\n");
-    io.writeOut("  directive install --repair\n");
-  } else {
-    writeHumanParagraph(io, `Directive ${opts.version} is ready.`);
-  }
-  writeHumanParagraph(io, "The project version has not changed.");
-  const review = collectReviewPaths(opts.summary);
-  if (opts.restoredPackage && opts.pm) {
-    const lock = lockfileNameFor(opts.pm);
-    if (!review.includes("package.json")) review.unshift("package.json");
-    if (!review.includes(lock)) review.splice(1, 0, lock);
-  }
-  if (review.length > 0) {
-    writeBlank(io);
-    io.writeOut("Review and commit:\n");
-    for (const p of review) {
-      io.writeOut(`  ${p}
-`);
-    }
-  }
-  if (opts.verbosity >= 1 && opts.summary) {
-    writeBlank(io);
-    presentPathSummary(io, "setup repair", opts.summary, opts.verbosity);
-  }
-}
-function presentUpgradeSuccess(io, opts) {
-  if (opts.versionChange) {
-    io.writeOut(`\u2713 Installed Directive ${opts.version}
-`);
-  }
-  io.writeOut(`\u2713 Completed project setup
-`);
-  io.writeOut(`\u2713 Verified the project-local installation
-`);
-  writeBlank(io);
-  if (opts.versionChange) {
-    writeHumanParagraph(io, `This project now uses Directive ${opts.version}.`);
-    writeHumanParagraph(io, "The global launcher was not changed.");
-  } else {
-    writeHumanParagraph(io, `Directive ${opts.version} is ready.`);
-    writeHumanParagraph(io, "The project version has not changed.");
-  }
-  writeBlank(io);
-  io.writeOut("Review and commit:\n");
-  if (opts.versionChange) {
-    io.writeOut("  package.json\n");
-    io.writeOut(`  ${lockfileNameFor(opts.pm)}
-`);
-  }
-  const review = [
-    ...collectReviewPaths(opts.summary),
-    ...collectReviewPaths(opts.migrateSummary)
-  ];
-  const seen = /* @__PURE__ */ new Set();
-  for (const p of review) {
-    if (seen.has(p)) continue;
-    seen.add(p);
-    io.writeOut(`  ${p}
-`);
-  }
-  if (opts.verbosity >= 1) {
-    writeBlank(io);
-    if (opts.summary) presentPathSummary(io, "setup upgrade", opts.summary, opts.verbosity);
-    if (opts.migrateSummary) {
-      presentPathSummary(io, "migrate", opts.migrateSummary, opts.verbosity);
-    }
-  }
-}
-function presentUninstallSuccess(io, opts) {
-  if (opts.complete) {
-    io.writeOut(`\u2713 Uninstalled Directive from ${opts.projectRoot}
-`);
-  } else {
-    io.writeOut(`\u26A0 Uninstall partially finished in ${opts.projectRoot}
-`);
-  }
-  writeBlank(io);
-  const parts = [];
-  if (opts.removal) {
-    if (opts.removal.skillPointers > 0) parts.push("skill pointers");
-    if (opts.removal.hostHooks > 0) parts.push("host hooks");
-    if (opts.removal.gitHooks > 0 || opts.removal.projectWiring > 0) parts.push("project wiring");
-    if (opts.removal.legacyCore) parts.push("legacy core");
-    if (opts.removal.willRemovePin) parts.push("the runtime pin");
-  }
-  if (parts.length > 0) {
-    writeHumanParagraph(io, `Removed ${parts.join(", ")}.`);
-  } else {
-    writeHumanParagraph(io, "Removed Directive-owned wiring from this project.");
-  }
-  const preserved = opts.preserved ?? opts.removal?.preserveLabels ?? [];
-  if (preserved.length > 0) {
-    writeHumanParagraph(io, `Preserved: ${preserved.join(", ")}.`);
-  } else {
-    writeHumanParagraph(io, "Preserved xbrief/ project data and unrelated files.");
-  }
-  if (!opts.complete && opts.leftovers && opts.leftovers.length > 0) {
-    writeBlank(io);
-    writeHumanParagraph(io, `Known leftovers: ${opts.leftovers.join(", ")}.`);
-  }
-  writeBlank(io);
-  writeHumanParagraph(
-    io,
-    "To uninstall the global launcher (other repos may still need it), run: npm uninstall -g @deftai/directive"
-  );
-  if (opts.verbosity >= 1) {
-    writeBlank(io);
-    const paths = opts.removedPaths ?? opts.removal?.pathInventory ?? [];
-    if (paths.length > 0) {
-      io.writeOut("Removed paths:\n");
-      for (const p of paths) io.writeOut(`  ${p}
-`);
-    }
-    if (preserved.length > 0) {
-      io.writeOut(`preserved: ${JSON.stringify(preserved)}
-`);
-    }
-  }
-}
-function presentAmbiguousYes(io, pinVersion) {
-  io.writeErr(
-    `Directive is already configured at version ${pinVersion}.
-To repair this installation, select repair explicitly:
-
-  directive install --repair --yes
-
-For a deliberate version or data upgrade, use directive upgrade --yes.
-No project files were changed.
-`
-  );
-}
-function presentSetupFailedAfterInstall(io, opts) {
-  if (opts.operation === "install" || opts.operation === "upgrade") {
-    io.writeErr(
-      `Directive ${opts.version} is installed, but project setup did not finish.
-`
-    );
-  } else {
-    io.writeErr(`Directive ${opts.version} repair ran, but project setup did not finish.
-`);
-  }
-  writeBlankErr(io);
-  if (opts.failedPaths && opts.failedPaths.length > 0) {
-    io.writeErr("Setup could not update:\n");
-    for (const p of opts.failedPaths) {
-      io.writeErr(`  ${p}
-`);
-    }
-    writeBlankErr(io);
-  }
-  if (opts.reason) {
-    io.writeErr("Reason:\n");
-    io.writeErr(`  ${opts.reason}
-`);
-    writeBlankErr(io);
-  }
-  if (opts.operation === "install" || opts.operation === "upgrade") {
-    io.writeErr(
-      `The project pin and lockfile now reference Directive ${opts.version}.
-`
-    );
-    writeBlankErr(io);
-  }
-  io.writeErr("Correct the cause, then run:\n");
-  io.writeErr("  directive install --repair\n");
-  if (opts.operation === "upgrade") {
-    io.writeErr("  (or directive upgrade again for data migration)\n");
-  }
-  writeBlankErr(io);
-  io.writeErr("Review the existing changes before committing.\n");
-}
-function presentMigrateFailedAfterUpgrade(io, opts) {
-  if (opts.versionChange) {
-    io.writeErr(
-      `Directive ${opts.version} is installed, but project data migration did not finish.
-`
-    );
-  } else {
-    io.writeErr(
-      `Directive ${opts.version} data migration did not finish.
-`
-    );
-  }
-  writeBlankErr(io);
-  const failed = opts.summary?.conflicts ?? [];
-  const migrated = opts.summary?.migrated ?? [];
-  if (failed.length > 0) {
-    io.writeErr("Migration could not update:\n");
-    for (const p of failed) {
-      io.writeErr(`  ${p}
-`);
-    }
-    writeBlankErr(io);
-  }
-  if (migrated.length > 0) {
-    io.writeErr("Migrated:\n");
-    for (const p of migrated) {
-      io.writeErr(`  ${p}
-`);
-    }
-    writeBlankErr(io);
-  }
-  const reason = opts.reason ?? opts.summary?.message ?? null;
-  if (reason) {
-    io.writeErr("Reason:\n");
-    io.writeErr(`  ${reason}
-`);
-    writeBlankErr(io);
-  }
-  if (opts.versionChange) {
-    io.writeErr(
-      `The project pin and lockfile now reference Directive ${opts.version}.
-`
-    );
-    writeBlankErr(io);
-  }
-  io.writeErr("Correct the cause, then run:\n");
-  io.writeErr("  directive upgrade\n");
-  writeBlankErr(io);
-  io.writeErr("Review the existing changes before committing.\n");
-}
-function writeBlankErr(io) {
-  io.writeErr("\n");
-}
-function collectReviewPaths(summary) {
-  if (!summary) return [];
-  const prefer = [
-    "AGENTS.md",
-    ".gitignore",
-    "Taskfile.yml",
-    ".deft/GENERATION.json"
-  ];
-  const migrated = summary.migrated ?? [];
-  const archived = summary.archived ?? [];
-  const all = [...summary.created, ...summary.modified, ...migrated, ...archived];
-  const out = [];
-  for (const p of prefer) {
-    if (all.includes(p)) out.push(p);
-  }
-  for (const p of [...migrated, ...archived]) {
-    if (!out.includes(p)) out.push(p);
-  }
-  for (const p of all) {
-    if (out.includes(p)) continue;
-    if (p === ".claude/settings.json" || p === ".cursor/hooks.json" || p === ".codex/hooks.json" || p === ".grok/hooks/deft.json") {
-      out.push(p);
-    }
-  }
-  return out.slice(0, 16);
-}
-function tryParseSetupSummary(stdout) {
-  const trimmed = stdout.trim();
-  if (!trimmed) return null;
-  try {
-    const last = trimmed.split("\n").filter(Boolean).pop() ?? "";
-    const parsed = JSON.parse(last);
-    if (!parsed || typeof parsed !== "object") return null;
-    const rec = parsed;
-    return {
-      created: Array.isArray(rec.created) ? rec.created : [],
-      modified: Array.isArray(rec.modified) ? rec.modified : [],
-      removed: Array.isArray(rec.removed) ? rec.removed : [],
-      migrated: Array.isArray(rec.migrated) ? rec.migrated : void 0,
-      archived: Array.isArray(rec.archived) ? rec.archived : void 0,
-      conflicts: Array.isArray(rec.conflicts) ? rec.conflicts : void 0,
-      message: typeof rec.message === "string" ? rec.message : void 0
-    };
-  } catch {
-    return null;
-  }
-}
-
-// packages/cli/src/registry.ts
-import { spawnSync as spawnSync5 } from "node:child_process";
-function parseExactVersionParts(version) {
-  const trimmed = version.trim();
-  const plus = trimmed.indexOf("+");
-  const noBuild = plus === -1 ? trimmed : trimmed.slice(0, plus);
-  if (plus !== -1) {
-    const build = trimmed.slice(plus + 1);
-    if (!/^[0-9A-Za-z.-]+$/.test(build)) return null;
-  }
-  if (noBuild.length === 0 || !isExactSemver(noBuild)) return null;
-  const dash = noBuild.indexOf("-");
-  const core = dash === -1 ? noBuild : noBuild.slice(0, dash);
-  const pre = dash === -1 ? null : noBuild.slice(dash + 1).split(".");
-  const [majS, minS, patS] = core.split(".");
-  const major = Number(majS);
-  const minor = Number(minS);
-  const patch = Number(patS);
-  if (![major, minor, patch].every((n) => Number.isInteger(n) && n >= 0)) return null;
-  return { major, minor, patch, pre };
-}
-function comparePreParts(a, b) {
-  const len = Math.max(a.length, b.length);
-  for (let i = 0; i < len; i++) {
-    const left = a[i];
-    const right = b[i];
-    if (left === void 0) return -1;
-    if (right === void 0) return 1;
-    const leftNum = /^\d+$/.test(left) ? Number(left) : null;
-    const rightNum = /^\d+$/.test(right) ? Number(right) : null;
-    if (leftNum !== null && rightNum !== null) {
-      if (leftNum !== rightNum) return leftNum < rightNum ? -1 : 1;
-      continue;
-    }
-    if (leftNum !== null) return -1;
-    if (rightNum !== null) return 1;
-    if (left !== right) return left < right ? -1 : 1;
-  }
-  return 0;
-}
-function compareExactVersions(a, b) {
-  const left = parseExactVersionParts(a);
-  const right = parseExactVersionParts(b);
-  if (left === null || right === null) {
-    throw new Error(
-      `compareExactVersions: invalid exact SemVer (${JSON.stringify(a)} vs ${JSON.stringify(b)})`
-    );
-  }
-  if (left.major !== right.major) return left.major < right.major ? -1 : 1;
-  if (left.minor !== right.minor) return left.minor < right.minor ? -1 : 1;
-  if (left.patch !== right.patch) return left.patch < right.patch ? -1 : 1;
-  if (left.pre === null && right.pre === null) return 0;
-  if (left.pre === null) return 1;
-  if (right.pre === null) return -1;
-  return comparePreParts(left.pre, right.pre);
-}
-function validateTargetVersionSpec(raw) {
-  const trimmed = raw.trim();
-  if (trimmed.length === 0) {
-    return { ok: false, message: "--target-version requires an exact version." };
-  }
-  if (trimmed === "latest" || trimmed === "next" || trimmed === "canary") {
-    return {
-      ok: false,
-      message: `--target-version rejects tags (${trimmed}); pass an exact version.`
-    };
-  }
-  if (!isExactSemver(trimmed)) {
-    return {
-      ok: false,
-      message: `--target-version must be an exact SemVer (got ${trimmed}). Ranges and tags are rejected.`
-    };
-  }
-  return { ok: true, version: trimmed };
-}
-function resolveLatestStableVersion(env = process.env, projectRoot) {
-  const result = spawnSync5(
-    "npm",
-    ["view", RUNTIME_PACKAGE_NAME, "version", "--json"],
-    {
-      encoding: "utf8",
-      env,
-      cwd: projectRoot,
-      shell: process.platform === "win32"
-    }
-  );
-  if (result.error) {
-    return {
-      ok: false,
-      message: `Failed to query registry for ${RUNTIME_PACKAGE_NAME}: ${result.error.message}`
-    };
-  }
-  if (result.status !== 0) {
-    return {
-      ok: false,
-      message: `npm view ${RUNTIME_PACKAGE_NAME} version failed` + (result.stderr ? `: ${result.stderr.trim()}` : "")
-    };
-  }
-  let version = (result.stdout ?? "").trim();
-  if (version.startsWith('"') && version.endsWith('"')) {
-    try {
-      version = JSON.parse(version);
-    } catch {
-    }
-  }
-  if (!isExactSemver(version)) {
-    return {
-      ok: false,
-      message: `Registry latest is not an exact SemVer (${version}).`
-    };
-  }
-  if (isPrereleaseVersion(version)) {
-    return {
-      ok: false,
-      message: `Registry latest (${version}) is a prerelease. Pass --target-version <exact> to install it (AC6.1).`
-    };
-  }
-  return { ok: true, version };
-}
-function resolvePublishedContract(version, env = process.env, projectRoot) {
-  const result = spawnSync5(
-    "npm",
-    ["view", `${RUNTIME_PACKAGE_NAME}@${version}`, "directive", "--json"],
-    {
-      encoding: "utf8",
-      env,
-      cwd: projectRoot,
-      shell: process.platform === "win32"
-    }
-  );
-  if (result.error) {
-    return {
-      ok: false,
-      message: `Failed to query published contract for ${RUNTIME_PACKAGE_NAME}@${version}: ${result.error.message}`
-    };
-  }
-  if (result.status !== 0) {
-    return {
-      ok: false,
-      message: `npm view ${RUNTIME_PACKAGE_NAME}@${version} directive failed` + (result.stderr ? `: ${result.stderr.trim()}` : "")
-    };
-  }
-  let raw = (result.stdout ?? "").trim();
-  if (raw.length === 0) {
-    return {
-      ok: false,
-      message: `Published ${RUNTIME_PACKAGE_NAME}@${version} has no directive.contract metadata.`
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return {
-      ok: false,
-      message: `Could not parse directive metadata for ${RUNTIME_PACKAGE_NAME}@${version}.`
-    };
-  }
-  let directive = parsed;
-  if (directive !== null && typeof directive === "object" && !Array.isArray(directive) && !("contract" in directive)) {
-    const values = Object.values(directive);
-    if (values.length === 1) directive = values[0];
-  }
-  if (directive === null || typeof directive !== "object" || Array.isArray(directive)) {
-    return {
-      ok: false,
-      message: `Published ${RUNTIME_PACKAGE_NAME}@${version} directive metadata is not an object.`
-    };
-  }
-  const contract = directive.contract;
-  if (typeof contract !== "number" || !Number.isInteger(contract) || contract < 1) {
-    return {
-      ok: false,
-      message: `Published ${RUNTIME_PACKAGE_NAME}@${version} has invalid directive.contract.`
-    };
-  }
-  return { ok: true, contract };
-}
-
-// packages/cli/src/uninstall-map.ts
-import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync3, realpathSync as realpathSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname, isAbsolute as isAbsolute2, join as join4, normalize, relative, resolve as resolve2, sep } from "node:path";
-import { execFileSync } from "node:child_process";
-var MANAGED_OPEN = "<!-- deft:managed-section";
-var MANAGED_CLOSE = "<!-- /deft:managed-section -->";
-var RUNTIME_PREFIX = "node_modules/@deftai/directive-runtime/";
-var SKILL_HOST_ROOTS = [
-  ".agents/skills",
-  ".claude/skills",
-  ".cursor/skills",
-  ".codex/skills",
-  ".github/skills"
-];
-var SKILL_DIRS = [
-  "deft",
-  "deft-directive-setup",
-  "deft-directive-build",
-  "deft-directive-swarm",
-  "deft-directive-sync"
-];
-var GITHOOK_RELS = [
-  ".githooks/pre-commit",
-  ".githooks/pre-push",
-  ".githooks/_directive-run.sh",
-  ".githooks/_deft-run.sh"
-];
-var HOST_HOOK_RELS = [
-  ".claude/settings.json",
-  ".cursor/hooks.json",
-  ".codex/hooks.json",
-  ".grok/hooks/deft.json"
-];
-function readText(path) {
-  try {
-    return readFileSync3(path, "utf8");
-  } catch {
-    return null;
-  }
-}
-function readJsonObject3(path) {
-  try {
-    const raw = readFileSync3(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-function pkgHasDep(projectRoot, name) {
-  const pkg = readJsonObject3(join4(projectRoot, "package.json"));
-  if (pkg === null) return false;
-  for (const key of ["dependencies", "devDependencies", "optionalDependencies"]) {
-    const block = pkg[key];
-    if (block !== null && typeof block === "object" && !Array.isArray(block)) {
-      if (name in block) return true;
-    }
-  }
-  return false;
-}
-function isSafeOwnershipRelPath(rel) {
-  if (typeof rel !== "string" || !rel.trim()) return false;
-  const trimmed = rel.trim();
-  if (isAbsolute2(trimmed)) return false;
-  if (/^[A-Za-z]:[\\/]/.test(trimmed) || trimmed.startsWith("\\\\")) return false;
-  const rawParts = trimmed.replace(/\\/g, "/").split("/");
-  if (rawParts.some((p) => p === "..")) return false;
-  const norm = normalize(trimmed).replace(/\\/g, "/");
-  if (norm === "" || norm === "." || norm === "..") return false;
-  if (norm.startsWith("../") || norm.split("/").includes("..")) return false;
-  if (norm.startsWith("/")) return false;
-  return true;
-}
-function isPathInsideProjectRoot(projectRoot, absCandidate) {
-  const rootAbs = resolve2(projectRoot);
-  const candAbs = resolve2(absCandidate);
-  const rel = relative(rootAbs, candAbs);
-  if (rel === "" || rel === "." || rel.startsWith("..") || isAbsolute2(rel)) return false;
-  try {
-    const rootReal = realpathSync2(rootAbs);
-    let candReal;
-    try {
-      candReal = realpathSync2(candAbs);
-    } catch {
-      return true;
-    }
-    const relReal = relative(rootReal, candReal);
-    if (relReal === "" || relReal === "." || relReal.startsWith("..") || isAbsolute2(relReal)) {
-      return false;
-    }
-    const rootPrefix = rootReal.endsWith(sep) ? rootReal : rootReal + sep;
-    if (!candReal.startsWith(rootPrefix)) return false;
-    return true;
-  } catch {
-    return false;
-  }
-}
-function safeWriteText(projectRoot, rel, body) {
-  if (!isSafeOwnershipRelPath(rel)) return false;
-  const abs = resolve2(projectRoot, rel);
-  if (!isPathInsideProjectRoot(projectRoot, abs)) return false;
-  try {
-    writeFileSync2(abs, body);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function parseOwnershipArtifacts(projectRoot) {
-  const path = join4(projectRoot, ".deft", "GENERATION.json");
-  if (!existsSync6(path)) return { inspection: "absent", artifacts: [], rejected: [] };
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync3(path, "utf8"));
-  } catch {
-    return { inspection: "unreadable", artifacts: [], rejected: [] };
-  }
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    return { inspection: "unreadable", artifacts: [], rejected: [] };
-  }
-  const ownership = parsed.ownership;
-  if (!Array.isArray(ownership)) {
-    return { inspection: "unreadable", artifacts: [], rejected: [] };
-  }
-  const artifacts = [];
-  const rejected = [];
-  for (const entry of ownership) {
-    if (entry === null || typeof entry !== "object" || Array.isArray(entry)) continue;
-    const rec = entry;
-    if (typeof rec.path !== "string" || !rec.path.trim()) continue;
-    const kind = rec.kind;
-    if (kind !== "whole-file" && kind !== "marked-section" && kind !== "structured-entry" && kind !== "retained") {
-      continue;
-    }
-    const normalized = rec.path.replace(/\\/g, "/").replace(/^\.\//, "");
-    if (!isSafeOwnershipRelPath(normalized)) {
-      rejected.push(normalized);
-      continue;
-    }
-    const art = {
-      path: normalized,
-      kind,
-      source: "ownership-record",
-      ...typeof rec.entryKey === "string" && rec.entryKey.trim() ? { entryKey: rec.entryKey.trim() } : {},
-      ...typeof rec.markerId === "string" && rec.markerId.trim() ? { markerId: rec.markerId.trim() } : kind === "marked-section" ? { markerId: "deft:managed-section" } : {}
-    };
-    artifacts.push(art);
-  }
-  return { inspection: "valid", artifacts, rejected };
-}
-function skillPointerRels() {
-  const out = [];
-  for (const host of SKILL_HOST_ROOTS) {
-    for (const dir of SKILL_DIRS) {
-      out.push(`${host}/${dir}/SKILL.md`);
-    }
-  }
-  return out;
-}
-function isOurSkillPointer(body) {
-  return body.includes(RUNTIME_PREFIX) || body.includes("npm i -g @deftai/directive") || body.includes(".deft/core/");
-}
-function isOurGitHook(rel, body) {
-  const base = rel.split("/").pop() ?? rel;
-  if (base === "_directive-run.sh" || base === "_deft-run.sh") {
-    return body.includes(RUNTIME_PREFIX) || body.includes("run_directive") || body.includes("run_deft") || body.includes(".deft/core") || body.includes("packages/cli/dist/bin.js");
-  }
-  return body.includes("_directive-run.sh") || body.includes("_deft-run.sh") || body.includes(RUNTIME_PREFIX) || /\brun_deft\s+(verify:|preflight)/.test(body);
-}
-function listWiringReady(projectRoot) {
-  const dir = join4(projectRoot, ".deft", "directive");
-  if (!existsSync6(dir)) return [];
-  try {
-    return readdirSync(dir).filter((n) => n.startsWith("wiring-ready.") && n.endsWith(".json")).map((n) => `.deft/directive/${n}`);
-  } catch {
-    return [];
-  }
-}
-function discoverKnownArtifacts(projectRoot) {
-  const out = [];
-  const push = (art) => {
-    if (!out.some((a) => a.path === art.path && a.kind === art.kind && a.entryKey === art.entryKey)) {
-      out.push(art);
-    }
-  };
-  if (existsSync6(join4(projectRoot, ".deft", "GENERATION.json"))) {
-    push({ path: ".deft/GENERATION.json", kind: "whole-file", source: "known-map" });
-  }
-  for (const rel of listWiringReady(projectRoot)) {
-    push({ path: rel, kind: "whole-file", source: "known-map" });
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "directive", "data-schema.json"))) {
-    push({
-      path: ".deft/directive/data-schema.json",
-      kind: "whole-file",
-      source: "known-map"
-    });
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "core"))) {
-    push({ path: ".deft/core", kind: "whole-file", source: "known-map" });
-  }
-  for (const rel of GITHOOK_RELS) {
-    const body = readText(join4(projectRoot, rel));
-    if (body !== null && isOurGitHook(rel, body)) {
-      push({ path: rel, kind: "whole-file", source: "known-map" });
-    }
-  }
-  for (const rel of skillPointerRels()) {
-    const body = readText(join4(projectRoot, rel));
-    if (body !== null && isOurSkillPointer(body)) {
-      push({ path: rel, kind: "whole-file", source: "known-map" });
-    }
-  }
-  const agents = readText(join4(projectRoot, "AGENTS.md"));
-  if (agents !== null && agents.includes(MANAGED_OPEN)) {
-    push({
-      path: "AGENTS.md",
-      kind: "marked-section",
-      markerId: "deft:managed-section",
-      source: "known-map"
-    });
-  }
-  for (const rel of HOST_HOOK_RELS) {
-    if (existsSync6(join4(projectRoot, rel))) {
-      push({
-        path: rel,
-        kind: "structured-entry",
-        entryKey: "hooks",
-        source: "known-map"
-      });
-    }
-  }
-  const taskfile = readText(join4(projectRoot, "Taskfile.yml"));
-  if (taskfile !== null && (taskfile.includes(`${RUNTIME_PREFIX}Taskfile.yml`) || taskfile.includes(".deft/core/Taskfile.yml") || /(^|\n)[ \t]*deft:\s*(\n|$)/.test(taskfile))) {
-    push({
-      path: "Taskfile.yml",
-      kind: "structured-entry",
-      entryKey: "includes.deft",
-      source: "known-map"
-    });
-  }
-  if (existsSync6(join4(projectRoot, "xbrief"))) {
-    push({ path: "xbrief", kind: "retained", source: "known-map" });
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "settings.json"))) {
-    push({ path: ".deft/settings.json", kind: "retained", source: "known-map" });
-  }
-  return out;
-}
-function mergeArtifacts(fromRecord, fromKnown) {
-  const out = [...fromRecord];
-  for (const art of fromKnown) {
-    const overlap = out.find(
-      (a) => a.path === art.path && (a.kind === art.kind || art.kind === "retained")
-    );
-    if (overlap) continue;
-    const samePath = out.find((a) => a.path === art.path);
-    if (samePath) continue;
-    out.push(art);
-  }
-  return out;
-}
-function discoverUninstallFootprint(projectRoot) {
-  const {
-    inspection,
-    artifacts: fromRecord,
-    rejected
-  } = parseOwnershipArtifacts(projectRoot);
-  const fromKnown = discoverKnownArtifacts(projectRoot);
-  const artifacts = mergeArtifacts(fromRecord, fromKnown);
-  const hasRuntimePin = pkgHasDep(projectRoot, RUNTIME_PACKAGE_NAME);
-  const hasLegacyLauncherPin = pkgHasDep(projectRoot, LAUNCHER_PACKAGE_NAME);
-  const hasLegacyCore = existsSync6(join4(projectRoot, ".deft", "core"));
-  const removable = artifacts.some((a) => a.kind !== "retained");
-  const hasFootprint = removable || hasRuntimePin || hasLegacyLauncherPin || hasLegacyCore || existsSync6(join4(projectRoot, ".deft", "GENERATION.json"));
-  return {
-    artifacts,
-    ownershipInspection: inspection,
-    rejectedOwnershipPaths: rejected,
-    hasRuntimePin,
-    hasLegacyLauncherPin,
-    hasLegacyCore,
-    hasFootprint
-  };
-}
-function removeManagedSection(body) {
-  const start = body.indexOf(MANAGED_OPEN);
-  if (start < 0) return { next: body, removed: false };
-  const openEnd = body.indexOf("-->", start);
-  if (openEnd < 0) return { next: body, removed: false };
-  const end = body.indexOf(MANAGED_CLOSE, openEnd);
-  if (end < 0) return { next: body, removed: false };
-  const closeEnd = end + MANAGED_CLOSE.length;
-  let next = body.slice(0, start) + body.slice(closeEnd);
-  next = next.replace(/\n{3,}/g, "\n\n");
-  if (next.trim().length === 0) next = "";
-  return { next, removed: true };
-}
-function isManagedHookCommand(command) {
-  return command.includes("directive-runtime/dist/hook-bin.js") || command.includes(".deft/core/") || /(^|[\s"`'])deft-hook([\s"`']|$)/.test(command) || command.includes("deft hook:dispatch");
-}
-function object(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
-function stripHostHooks(cfg) {
-  const hooks = object(cfg.hooks);
-  if (hooks === null) return cfg;
-  const nextHooks = {};
-  for (const [key, value] of Object.entries(hooks)) {
-    if (!Array.isArray(value)) {
-      nextHooks[key] = value;
-      continue;
-    }
-    const filtered = value.filter((entry) => {
-      const e = object(entry);
-      if (e === null) return true;
-      if (typeof e.command === "string" && isManagedHookCommand(e.command)) return false;
-      if (Array.isArray(e.hooks)) {
-        const nestedManaged = e.hooks.some((h) => {
-          const hook = object(h);
-          return typeof hook?.command === "string" && isManagedHookCommand(hook.command);
-        });
-        if (nestedManaged) return false;
-      }
-      return true;
-    });
-    if (filtered.length > 0) nextHooks[key] = filtered;
-  }
-  if (Object.keys(nextHooks).length === 0) {
-    const { hooks: _h, ...rest } = cfg;
-    if ("version" in rest && Object.keys(rest).length === 1) {
-      const { version: _v, ...rest2 } = rest;
-      return rest2;
-    }
-    return rest;
-  }
-  return { ...cfg, hooks: nextHooks };
-}
-function stripTaskfileDeftInclude(body) {
-  const blockRe = /(^|\n)([ \t]*)deft:\s*(?:#.*)?\n(?:\2[ \t]+[^\n]*\n)*/;
-  if (blockRe.test(body)) {
-    const next = body.replace(blockRe, "$1");
-    return { next: next.replace(/\n{3,}/g, "\n\n"), removed: next !== body };
-  }
-  return { next: body, removed: false };
-}
-function safeUnlink(projectRoot, rel) {
-  if (!isSafeOwnershipRelPath(rel)) return false;
-  const abs = resolve2(projectRoot, rel);
-  if (!isPathInsideProjectRoot(projectRoot, abs)) return false;
-  if (!existsSync6(abs)) return false;
-  try {
-    if (!isPathInsideProjectRoot(projectRoot, abs)) return false;
-    rmSync(abs, { recursive: true, force: true });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function maybeRemoveEmptyParents(projectRoot, relFile) {
-  const removed = [];
-  let dir = dirname(relFile);
-  while (dir && dir !== "." && dir !== "/") {
-    const abs = join4(projectRoot, dir);
-    if (!existsSync6(abs)) break;
-    try {
-      const entries = readdirSync(abs);
-      if (entries.length > 0) break;
-      rmSync(abs, { recursive: false, force: true });
-      removed.push(dir);
-    } catch {
-      break;
-    }
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return removed;
-}
-function applyLauncherCleanup(projectRoot, discovery) {
-  const removed = [];
-  const modified = [];
-  const preserved = [];
-  const leftovers = [];
-  const uncertainty = [];
-  if (discovery.ownershipInspection === "unreadable") {
-    uncertainty.push("GENERATION.json ownership record was unreadable; used known-artifact map");
-  } else if (discovery.ownershipInspection === "absent") {
-    uncertainty.push("GENERATION.json absent; used known-artifact map");
-  }
-  for (const bad of discovery.rejectedOwnershipPaths) {
-    uncertainty.push(
-      `rejected unsafe ownership path (escape/absolute): ${bad}`
-    );
-  }
-  const ordered = [...discovery.artifacts].sort((a, b) => {
-    const rank = (k) => k === "structured-entry" ? 0 : k === "marked-section" ? 1 : k === "whole-file" ? 2 : 3;
-    return rank(a.kind) - rank(b.kind);
-  });
-  for (const art of ordered) {
-    if (art.kind === "retained") {
-      if (existsSync6(join4(projectRoot, art.path))) preserved.push(art.path);
-      continue;
-    }
-    if (art.kind === "marked-section") {
-      const abs = resolve2(projectRoot, art.path);
-      if (!isPathInsideProjectRoot(projectRoot, abs)) {
-        uncertainty.push(`skipped marked-section outside project: ${art.path}`);
-        continue;
-      }
-      const body = readText(abs);
-      if (body === null) continue;
-      const { next, removed: did } = removeManagedSection(body);
-      if (!did) {
-        if (body.includes(MANAGED_OPEN)) {
-          leftovers.push(`${art.path} (managed section markers incomplete)`);
-          uncertainty.push(`could not safely remove marked section from ${art.path}`);
-        }
-        continue;
-      }
-      if (next.trim().length === 0) {
-        if (safeUnlink(projectRoot, art.path)) removed.push(art.path);
-        else leftovers.push(art.path);
-      } else if (safeWriteText(projectRoot, art.path, next.endsWith("\n") ? next : `${next}
-`)) {
-        modified.push(`${art.path}#marked-section`);
-      } else {
-        leftovers.push(art.path);
-        uncertainty.push(`refused write outside project: ${art.path}`);
-      }
-      continue;
-    }
-    if (art.kind === "structured-entry") {
-      const abs = resolve2(projectRoot, art.path);
-      if (!isPathInsideProjectRoot(projectRoot, abs) || !existsSync6(abs)) {
-        if (existsSync6(abs)) {
-          uncertainty.push(`skipped structured-entry outside project: ${art.path}`);
-        }
-        continue;
-      }
-      if (art.path === "Taskfile.yml" || art.entryKey === "includes.deft") {
-        const body = readText(abs);
-        if (body === null) continue;
-        const { next: next2, removed: did } = stripTaskfileDeftInclude(body);
-        if (did) {
-          if (safeWriteText(projectRoot, art.path, next2.endsWith("\n") ? next2 : `${next2}
-`)) {
-            modified.push(`${art.path}#${art.entryKey ?? "includes.deft"}`);
-          } else {
-            uncertainty.push(`refused write outside project: ${art.path}`);
-          }
-        }
-        continue;
-      }
-      const cfg = readJsonObject3(abs);
-      if (cfg === null) {
-        uncertainty.push(`${art.path} is not valid JSON; left untouched`);
-        leftovers.push(art.path);
-        continue;
-      }
-      const stripped = stripHostHooks(cfg);
-      const prior = readText(abs) ?? "";
-      const next = `${JSON.stringify(stripped, null, 2)}
-`;
-      if (next !== prior) {
-        if (safeWriteText(projectRoot, art.path, next)) {
-          modified.push(`${art.path}#${art.entryKey ?? "hooks"}`);
-        } else {
-          uncertainty.push(`refused write outside project: ${art.path}`);
-        }
-      }
-      continue;
-    }
-    if (art.path === "Taskfile.yml") {
-      const body = readText(join4(projectRoot, art.path));
-      if (body !== null) {
-        const { next, removed: did } = stripTaskfileDeftInclude(body);
-        if (did) {
-          if (safeWriteText(
-            projectRoot,
-            art.path,
-            next.endsWith("\n") ? next : `${next}
-`
-          )) {
-            modified.push(`${art.path}#includes.deft`);
-          } else {
-            uncertainty.push(`refused write outside project: ${art.path}`);
-          }
-        }
-      }
-      continue;
-    }
-    if (HOST_HOOK_RELS.includes(art.path)) {
-      const abs = resolve2(projectRoot, art.path);
-      if (!isPathInsideProjectRoot(projectRoot, abs)) {
-        uncertainty.push(`skipped host-hook rewrite outside project: ${art.path}`);
-        continue;
-      }
-      const cfg = readJsonObject3(abs);
-      if (cfg !== null) {
-        const stripped = stripHostHooks(cfg);
-        const prior = readText(abs) ?? "";
-        const next = `${JSON.stringify(stripped, null, 2)}
-`;
-        if (next !== prior) {
-          if (safeWriteText(projectRoot, art.path, next)) {
-            modified.push(`${art.path}#hooks`);
-          } else {
-            uncertainty.push(`refused write outside project: ${art.path}`);
-          }
-        }
-      } else {
-        uncertainty.push(`${art.path} is not valid JSON; left untouched`);
-        leftovers.push(art.path);
-      }
-      continue;
-    }
-    if (safeUnlink(projectRoot, art.path)) {
-      removed.push(art.path);
-      if (art.path.includes("/")) {
-        removed.push(...maybeRemoveEmptyParents(projectRoot, art.path));
-      }
-    }
-  }
-  for (const rel of [...GITHOOK_RELS, ...skillPointerRels(), ...listWiringReady(projectRoot)]) {
-    if (removed.includes(rel)) continue;
-    const body = rel.includes("SKILL.md") ? readText(join4(projectRoot, rel)) : rel.startsWith(".githooks/") ? readText(join4(projectRoot, rel)) : existsSync6(join4(projectRoot, rel)) ? "yes" : null;
-    if (body === null) continue;
-    if (rel.includes("SKILL.md") && !isOurSkillPointer(body)) continue;
-    if (rel.startsWith(".githooks/") && !isOurGitHook(rel, body)) continue;
-    if (safeUnlink(projectRoot, rel)) {
-      removed.push(rel);
-      removed.push(...maybeRemoveEmptyParents(projectRoot, rel));
-    }
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "core"))) {
-    if (safeUnlink(projectRoot, ".deft/core")) removed.push(".deft/core");
-    else leftovers.push(".deft/core");
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "directive", "data-schema.json"))) {
-    if (safeUnlink(projectRoot, ".deft/directive/data-schema.json")) {
-      removed.push(".deft/directive/data-schema.json");
-    }
-  }
-  const directiveDir = join4(projectRoot, ".deft", "directive");
-  if (existsSync6(directiveDir)) {
-    try {
-      const left = readdirSync(directiveDir);
-      if (left.length === 0) {
-        if (safeUnlink(projectRoot, ".deft/directive")) removed.push(".deft/directive");
-      } else {
-        leftovers.push(
-          ...left.map((n) => `.deft/directive/${n}`)
-        );
-        uncertainty.push(
-          `.deft/directive retains unrecognized entries; not removed wholesale`
-        );
-      }
-    } catch {
-    }
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "GENERATION.json"))) {
-    if (safeUnlink(projectRoot, ".deft/GENERATION.json")) removed.push(".deft/GENERATION.json");
-  }
-  if (existsSync6(join4(projectRoot, "xbrief")) && !preserved.includes("xbrief")) {
-    preserved.push("xbrief");
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "settings.json")) && !preserved.includes(".deft/settings.json")) {
-    preserved.push(".deft/settings.json");
-  }
-  return {
-    removed: [...new Set(removed)],
-    modified: [...new Set(modified)],
-    preserved: [...new Set(preserved)],
-    leftovers: [...new Set(leftovers)],
-    uncertainty: [...new Set(uncertainty)],
-    hooksPath: "unchanged"
-  };
-}
-function listLinkedWorktreePaths(projectRoot) {
-  try {
-    const out = execFileSync("git", ["-C", projectRoot, "worktree", "list", "--porcelain"], {
-      encoding: "utf8"
-    });
-    const paths = [];
-    for (const line of out.split(/\r?\n/)) {
-      if (line.startsWith("worktree ")) paths.push(line.slice("worktree ".length).trim());
-    }
-    return paths;
-  } catch {
-    return [];
-  }
-}
-function siblingNeedsHooksPath(projectRoot) {
-  const rootResolved = join4(projectRoot);
-  for (const wt of listLinkedWorktreePaths(projectRoot)) {
-    if (join4(wt) === rootResolved) continue;
-    if (existsSync6(join4(wt, ".githooks", "_directive-run.sh"))) return true;
-    if (existsSync6(join4(wt, ".deft", "GENERATION.json"))) return true;
-  }
-  return false;
-}
-function cleanupHooksPath(projectRoot) {
-  let current = null;
-  try {
-    current = execFileSync("git", ["-C", projectRoot, "config", "--get", "core.hooksPath"], {
-      encoding: "utf8"
-    }).trim();
-  } catch {
-    return "absent";
-  }
-  if (current === null || current === "") return "absent";
-  if (current !== ".githooks" && current !== ".githooks/") {
-    return "preserved-foreign";
-  }
-  if (siblingNeedsHooksPath(projectRoot)) {
-    return "preserved-sibling";
-  }
-  try {
-    execFileSync("git", ["-C", projectRoot, "config", "--unset", "core.hooksPath"], {
-      encoding: "utf8"
-    });
-    return "unset";
-  } catch {
-    return "unchanged";
-  }
-}
-function verifyUninstallComplete(projectRoot) {
-  const leftovers = [];
-  if (existsSync6(join4(projectRoot, ".deft", "GENERATION.json"))) {
-    leftovers.push(".deft/GENERATION.json");
-  }
-  if (existsSync6(join4(projectRoot, ".deft", "core"))) {
-    leftovers.push(".deft/core");
-  }
-  for (const rel of GITHOOK_RELS) {
-    const body = readText(join4(projectRoot, rel));
-    if (body !== null && isOurGitHook(rel, body)) leftovers.push(rel);
-  }
-  const agents = readText(join4(projectRoot, "AGENTS.md"));
-  if (agents !== null && agents.includes(MANAGED_OPEN)) {
-    leftovers.push("AGENTS.md#marked-section");
-  }
-  if (pkgHasDep(projectRoot, RUNTIME_PACKAGE_NAME)) {
-    leftovers.push(`package.json#${RUNTIME_PACKAGE_NAME}`);
-  }
-  if (pkgHasDep(projectRoot, LAUNCHER_PACKAGE_NAME)) {
-    leftovers.push(`package.json#${LAUNCHER_PACKAGE_NAME}`);
-  }
-  for (const rel of listWiringReady(projectRoot)) leftovers.push(rel);
-  return { complete: leftovers.length === 0, leftovers };
-}
-
-// packages/cli/src/legacy-shapes/detect.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { readFileSync as readFileSync4, statSync as statSync3 } from "node:fs";
-import { join as join5 } from "node:path";
-
-// packages/cli/src/legacy-shapes/registry.ts
-var DECISION_BY_SHAPE_ID = {
-  "ovpr-runtime-pin": "l0-current",
-  "npm-hybrid-pin-copied-core": "l0-latest-legacy-convert",
-  "vendored-core-go": "convert-via-removals",
-  "go-tarball-deft-root": "convert-via-removals",
-  "submodule-deft": "convert-via-removals",
-  "dual-layout-deft-and-core": "convert-via-removals",
-  "orphan-deft-version": "convert-via-removals"
-};
-function decisionForShapeId(shapeId) {
-  return DECISION_BY_SHAPE_ID[shapeId];
-}
-
-// packages/cli/src/legacy-shapes/detect.ts
-function isFile(path) {
-  try {
-    return statSync3(path).isFile();
-  } catch {
-    return false;
-  }
-}
-function isDir(path) {
-  try {
-    return statSync3(path).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function readText2(path) {
-  try {
-    return readFileSync4(path, "utf8");
-  } catch {
-    return null;
-  }
-}
-var LEGACY_DEFT_DIR = "deft";
-function isFrameworkDeftDir(projectRoot) {
-  const deftDir = join5(projectRoot, LEGACY_DEFT_DIR);
-  if (!isDir(deftDir)) return false;
-  return isFile(join5(deftDir, "VERSION")) || isFile(join5(deftDir, "main.md")) || isFile(join5(deftDir, "Taskfile.yml")) || isDir(join5(deftDir, "skills"));
-}
-function gitmodulesReferencesFramework(text) {
-  const normalized = text.replace(/\r\n/g, "\n").toLowerCase();
-  if (normalized.includes("deftai/directive")) return true;
-  return /(^|\n)\s*path\s*=\s*\.?deft(\/|\s|$)/.test(normalized);
-}
-function isUnsafeSubmoduleGitlink(projectRoot) {
-  try {
-    const out = execFileSync2("git", ["-C", projectRoot, "ls-files", "-s", "--", "deft"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    for (const line of out.split(/\r?\n/)) {
-      if (/^160000\s/.test(line.trim())) return true;
-    }
-  } catch {
-  }
-  return false;
-}
-function resolution(shapeId, evidence, decisionOverride) {
-  return {
-    shapeId,
-    decision: decisionOverride ?? decisionForShapeId(shapeId),
-    evidence
-  };
-}
-function resolveInstallShape(projectRoot) {
-  const pin = readPin(projectRoot);
-  if (pin.kind === "exact" && !pin.oldStyle && pin.version !== null) {
-    return resolution("ovpr-runtime-pin", [`package.json#@deftai/directive-runtime@${pin.version}`]);
-  }
-  if (pin.oldStyle) {
-    return resolution("npm-hybrid-pin-copied-core", [
-      "package.json#@deftai/directive (exact)",
-      ".deft/core (copied-core evidence)"
-    ]);
-  }
-  const hasCore = hasCopiedCoreEvidence(projectRoot);
-  const frameworkDeft = isFrameworkDeftDir(projectRoot);
-  if (hasCore && frameworkDeft) {
-    return resolution("dual-layout-deft-and-core", [".deft/core", "deft/"]);
-  }
-  if (hasCore) {
-    return resolution("vendored-core-go", [".deft/core (copied-core evidence, no exact pin)"]);
-  }
-  if (isFile(join5(projectRoot, ".deft", "VERSION")) && !isDir(join5(projectRoot, ".deft", "core"))) {
-    return resolution("orphan-deft-version", [".deft/VERSION"]);
-  }
-  const deftDir = join5(projectRoot, LEGACY_DEFT_DIR);
-  if (frameworkDeft) {
-    const submoduleGit = isFile(join5(deftDir, ".git")) || isDir(join5(deftDir, ".git"));
-    if (submoduleGit) {
-      if (isUnsafeSubmoduleGitlink(projectRoot)) {
-        return resolution(
-          "submodule-deft",
-          ["deft/", "deft/.git", "gitlink mode 160000"],
-          "unsupported-honest"
-        );
-      }
-      return resolution("submodule-deft", ["deft/", "deft/.git"]);
-    }
-    return resolution("go-tarball-deft-root", ["deft/"]);
-  }
-  const gitmodulesPath = join5(projectRoot, ".gitmodules");
-  if (isFile(gitmodulesPath)) {
-    const text = readText2(gitmodulesPath);
-    if (text !== null && gitmodulesReferencesFramework(text)) {
-      if (isUnsafeSubmoduleGitlink(projectRoot)) {
-        return resolution(
-          "submodule-deft",
-          [".gitmodules", "gitlink mode 160000"],
-          "unsupported-honest"
-        );
-      }
-      return resolution("submodule-deft", [".gitmodules"]);
-    }
-  }
-  return null;
-}
-
-// packages/cli/src/legacy-shapes/messages.ts
-function formatShapeRecoveryMessage(shape, command) {
-  const evidence = shape.evidence.length > 0 ? ` Evidence: ${shape.evidence.join(", ")}.` : "";
-  if (shape.decision === "uninstall-reinstall") {
-    return `directive ${command}: detected historical Directive layout '${shape.shapeId}'.${evidence} In-place convert is not supported for this shape. Run \`directive uninstall\` then \`directive install\` to move to the current layout (xbrief/ and user-owned shared content follow uninstall keep-lists).`;
-  }
-  if (shape.decision === "unsupported-honest") {
-    return `directive ${command}: detected unsupported Directive layout '${shape.shapeId}'.${evidence} Automatic recovery is not supported. Inspect the tree, remove orphan markers if safe, then run \`directive install\`, or ask for support.`;
-  }
-  if (shape.decision === "convert-via-removals") {
-    return `directive ${command}: layout '${shape.shapeId}' converts via removal strategy (handled by the upgrade/install convert path).`;
-  }
-  return `directive ${command}: layout '${shape.shapeId}' uses decision '${shape.decision}' (handled by the current L0 path).`;
-}
-function isL2RefusalDecision(decision) {
-  return decision === "uninstall-reinstall" || decision === "unsupported-honest";
-}
-
-// packages/cli/src/bookends.ts
-var CANCELLED_NO_CHANGES = "Cancelled. No project files were changed.";
-function defaultIo() {
-  return {
-    writeOut: (t) => {
-      process.stdout.write(t);
-    },
-    writeErr: (t) => {
-      process.stderr.write(t);
-    }
-  };
-}
-function flagValueMissing(next) {
-  return next === void 0 || next.startsWith("-");
-}
-function parseFlags(argv) {
-  const { verbosity, rest: afterVerbosity } = parseVerbosityFlags(argv);
-  const rest = [];
-  let dryRun = false;
-  let yes = false;
-  let repair = false;
-  let targetVersion = null;
-  let packageManager = null;
-  let usageError = null;
-  for (let i = 0; i < afterVerbosity.length; i++) {
-    const a = afterVerbosity[i];
-    if (a === "--dry-run") {
-      dryRun = true;
-      continue;
-    }
-    if (a === "--yes" || a === "-y") {
-      yes = true;
-      continue;
-    }
-    if (a === "--repair") {
-      repair = true;
-      continue;
-    }
-    if (a === "--target-version") {
-      const next = afterVerbosity[i + 1];
-      if (flagValueMissing(next)) {
-        usageError = "--target-version requires a value.";
-        continue;
-      }
-      targetVersion = afterVerbosity[++i];
-      continue;
-    }
-    if (a.startsWith("--target-version=")) {
-      targetVersion = a.slice("--target-version=".length);
-      if (targetVersion.length === 0) {
-        usageError = "--target-version requires a value.";
-      }
-      continue;
-    }
-    if (a === "--package-manager") {
-      const next = afterVerbosity[i + 1];
-      if (flagValueMissing(next)) {
-        usageError = "--package-manager requires a value.";
-        continue;
-      }
-      packageManager = afterVerbosity[++i];
-      continue;
-    }
-    if (a.startsWith("--package-manager=")) {
-      packageManager = a.slice("--package-manager=".length);
-      if (packageManager.length === 0) {
-        usageError = "--package-manager requires a value.";
-      }
-      continue;
-    }
-    rest.push(a);
-  }
-  return {
-    flags: { dryRun, yes, repair, targetVersion, packageManager, verbosity },
-    rest,
-    usageError
-  };
-}
-function preflightPmAvailable(projectRoot, pm, deps, io) {
-  const declaredVersion = readDeclaredPackageManagerVersion(projectRoot);
-  const check = deps.checkPmAvailable?.(pm) ?? ensurePackageManagerAvailable(pm, deps.env ?? process.env, declaredVersion, projectRoot);
-  if (check.ok) return null;
-  io.writeErr(`${check.message}
-`);
-  return EXIT_CODES.FAILURE;
-}
-function assertPlanStillValid(projectRoot, pm, fingerprint, io) {
-  if (!planFingerprintChanged(projectRoot, pm, fingerprint)) return null;
-  io.writeErr(
-    "Plan invalidated: relevant project files changed after the plan was shown. Re-run the command.\n"
-  );
-  return EXIT_CODES.FAILURE;
-}
-function reportPmFailure(io, add) {
-  io.writeErr(`${add.message}
-`);
-  if (add.stderr) io.writeErr(`${add.stderr}
-`);
-  if (add.interrupted) {
-    if (!/partial changes may remain/i.test(add.message)) {
-      io.writeErr(`${PARTIAL_CHANGES_MAY_REMAIN}
-`);
-    }
-    return EXIT_CODES.INTERRUPTED;
-  }
-  return EXIT_CODES.FAILURE;
-}
-function parseYesNo(answer) {
-  const trimmed = answer.trim().toLowerCase();
-  return trimmed === "y" || trimmed === "yes";
-}
-function resolveLineReader(deps) {
-  return deps.readInteractiveLine ?? readInteractiveLine;
-}
-function shouldDefaultToRepair(projectRoot, state) {
-  if (state.installed === null) return true;
-  return !existsSync7(join6(projectRoot, ".deft", "GENERATION.json"));
-}
-function printConfiguredMenu(io, opts) {
-  const repairMarker = opts.defaultChoice === "repair" ? ">" : " ";
-  const cancelMarker = opts.defaultChoice === "cancel" ? ">" : " ";
-  io.writeOut("Directive is already configured in this project.\n\n");
-  io.writeOut(`Project:         ${opts.projectRoot}
-`);
-  io.writeOut(`Pinned version:  ${opts.pinVersion}
-
-`);
-  io.writeOut("What would you like to do?\n\n");
-  io.writeOut(`${repairMarker} Repair ${opts.pinVersion}
-`);
-  io.writeOut("    Restore the current version and rerun project setup.\n\n");
-  io.writeOut(`${cancelMarker} Cancel
-`);
-  io.writeOut("    Leave the project unchanged.\n\n");
-}
-function parseMenuChoice(answer, defaultChoice) {
-  const trimmed = answer.trim().toLowerCase();
-  if (trimmed.length === 0) return defaultChoice;
-  if (trimmed === "1" || trimmed === "r" || trimmed === "repair") return "repair";
-  if (trimmed === "2" || trimmed === "c" || trimmed === "cancel") return "cancel";
-  return "cancel";
-}
-function defaultChooseMenu(io, opts, readLine) {
-  printConfiguredMenu(io, opts);
-  const defaultLabel = opts.defaultChoice === "repair" ? "Repair" : "Cancel";
-  io.writeOut(`Choice [Repair/Cancel] (default: ${defaultLabel}): `);
-  const result = readLine();
-  if (result.eof) return "eof";
-  return parseMenuChoice(result.line, opts.defaultChoice);
-}
-function requireApproval(flags, deps, io, prompt) {
-  if (flags.dryRun) return null;
-  if (flags.yes) return null;
-  const tty = deps.stdinIsTTY ?? Boolean(process.stdin.isTTY);
-  if (!tty) {
-    io.writeErr(`Non-interactive session requires --yes to approve: ${prompt}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  if (deps.confirm) {
-    io.writeOut(`${prompt} [y/N]
-`);
-    if (deps.confirm(prompt)) return null;
-    io.writeOut(`${CANCELLED_NO_CHANGES}
-`);
-    return EXIT_CODES.SUCCESS;
-  }
-  io.writeOut(`${prompt} [y/N] `);
-  const result = resolveLineReader(deps)();
-  if (result.eof) {
-    io.writeErr(`Non-interactive session requires --yes to approve: ${prompt}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  if (parseYesNo(result.line)) return null;
-  io.writeOut(`${CANCELLED_NO_CHANGES}
-`);
-  return EXIT_CODES.SUCCESS;
-}
-function runInstall(projectRoot, state, argv, launcherVersion, io = defaultIo(), deps = {}) {
-  const { flags, rest, usageError } = parseFlags(argv);
-  const env = deps.env ?? process.env;
-  if (usageError !== null) {
-    io.writeErr(`${usageError}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  if (rest.length > 0) {
-    io.writeErr(`Unknown argument(s): ${rest.join(" ")}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  if (flags.repair && flags.targetVersion !== null) {
-    io.writeErr(
-      "Cannot combine --repair with --target-version. Repair keeps the existing pin; use directive upgrade to change versions.\n"
-    );
-    return EXIT_CODES.USAGE;
-  }
-  const installShape = resolveInstallShape(projectRoot);
-  if (installShape !== null && isL2RefusalDecision(installShape.decision)) {
-    io.writeErr(`${formatShapeRecoveryMessage(installShape, "install")}
-`);
-    return EXIT_CODES.FAILURE;
-  }
-  if (state.oldStyle || installShape?.decision === "l0-latest-legacy-convert") {
-    io.writeErr("This project uses an older Directive layout. Run `directive upgrade`.\n");
-    return EXIT_CODES.FAILURE;
-  }
-  const convertShapeId = installShape?.decision === "convert-via-removals" ? installShape.shapeId : null;
-  const configuredExact = state.pin.kind === "exact" && state.pin.version !== null;
-  if (configuredExact && !flags.repair) {
-    const pinVersion = state.pin.version;
-    if (flags.dryRun) {
-      const defaultChoice = shouldDefaultToRepair(projectRoot, state) ? "repair" : "cancel";
-      io.writeOut(
-        `Directive is already configured. Pinned version: ${pinVersion}.
-[dry-run] would present Repair ${pinVersion} / Cancel (default: ${defaultChoice === "repair" ? "Repair" : "Cancel"}; use --repair to select repair).
-`
-      );
-      return EXIT_CODES.SUCCESS;
-    }
-    if (flags.yes) {
-      presentAmbiguousYes(io, pinVersion);
-      return EXIT_CODES.USAGE;
-    }
-    const tty = deps.stdinIsTTY ?? Boolean(process.stdin.isTTY);
-    if (!tty) {
-      io.writeErr(
-        `Directive is already configured (pin ${pinVersion}). Pass --repair --yes to repair, or run interactively.
-  directive install --repair --yes
-  directive upgrade --yes
-`
-      );
-      return EXIT_CODES.USAGE;
-    }
-    const menuOpts = {
-      projectRoot,
-      pinVersion,
-      defaultChoice: shouldDefaultToRepair(projectRoot, state) ? "repair" : "cancel"
-    };
-    let choice;
-    if (deps.chooseMenu) {
-      printConfiguredMenu(io, menuOpts);
-      choice = deps.chooseMenu(menuOpts);
-    } else {
-      choice = defaultChooseMenu(io, menuOpts, resolveLineReader(deps));
-    }
-    if (choice === "eof") {
-      io.writeErr(
-        `Non-interactive session requires --yes to approve. Pass --repair --yes to repair, or run interactively.
-  directive install --repair --yes
-  directive upgrade --yes
-`
-      );
-      return EXIT_CODES.USAGE;
-    }
-    if (choice === "cancel") {
-      io.writeOut(`${CANCELLED_NO_CHANGES}
-`);
-      return EXIT_CODES.SUCCESS;
-    }
-    return runRepair(projectRoot, state, flags, launcherVersion, io, deps, env);
-  }
-  if (flags.repair) {
-    return runRepair(projectRoot, state, flags, launcherVersion, io, deps, env);
-  }
-  return runFirstInstall(
-    projectRoot,
-    state,
-    flags,
-    launcherVersion,
-    io,
-    deps,
-    env,
-    convertShapeId
-  );
-}
-function runFirstInstall(projectRoot, state, flags, launcherVersion, io, deps, env, convertShapeId = null) {
-  if (state.pin.kind === "range" || state.pin.kind === "invalid") {
-    io.writeErr(
-      `Runtime pin is ${state.pin.kind} (${state.pin.raw}). Rectify package.json to an exact @deftai/directive-runtime version, then retry.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const pmDetect = detectPackageManager(projectRoot, flags.packageManager);
-  if (!pmDetect.ok) {
-    io.writeErr(`${pmDetect.message}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  const pmMissing = preflightPmAvailable(projectRoot, pmDetect.pm, deps, io);
-  if (pmMissing !== null) return pmMissing;
-  let targetVersion;
-  if (flags.targetVersion !== null) {
-    const validated = validateTargetVersionSpec(flags.targetVersion);
-    if (!validated.ok) {
-      io.writeErr(`${validated.message}
-`);
-      return EXIT_CODES.USAGE;
-    }
-    targetVersion = validated.version;
-  } else {
-    const resolver = deps.resolveLatest ?? (() => resolveLatestStableVersion(env, projectRoot));
-    const resolved = resolver();
-    if (resolved instanceof Promise) {
-      io.writeErr("Internal error: async resolveLatest is not supported in sync install path.\n");
-      return EXIT_CODES.FAILURE;
-    }
-    if (!resolved.ok) {
-      io.writeErr(`${resolved.message}
-`);
-      return EXIT_CODES.FAILURE;
-    }
-    targetVersion = resolved.version;
-  }
-  const willCreatePkg = !existsSync7(join6(projectRoot, "package.json"));
-  const pmCmd = formatPmExactAddCommand(pmDetect.pm, targetVersion, projectRoot);
-  presentFirstInstallPlan(io, {
-    projectRoot,
-    pm: pmDetect.pm,
-    pmEvidence: pmDetect.evidence,
-    version: targetVersion,
-    pmCommand: pmCmd,
-    willCreatePkg,
-    gitHooksInactive: !existsSync7(join6(projectRoot, ".git")),
-    nodeWarning: checkNodeVersion(deps.nodeVersion).warning ?? null,
-    verbosity: flags.verbosity
-  });
-  const planFp = fingerprintPlanCriticalFiles(projectRoot, pmDetect.pm);
-  if (flags.dryRun) {
-    io.writeOut("[dry-run] no changes made.\n");
-    return EXIT_CODES.SUCCESS;
-  }
-  const approval = requireApproval(
-    flags,
-    deps,
-    io,
-    "Set up Directive in this project?"
-  );
-  if (approval !== null) return approval;
-  const stale = assertPlanStillValid(projectRoot, pmDetect.pm, planFp, io);
-  if (stale !== null) return stale;
-  if (willCreatePkg) {
-    ensurePackageJson(projectRoot);
-    io.writeOut('Created package.json { "private": true }\n');
-  }
-  const add = deps.runPmAdd?.({ projectRoot, pm: pmDetect.pm, version: targetVersion }) ?? runPmExactAdd({ projectRoot, pm: pmDetect.pm, version: targetVersion, env });
-  if (!add.ok) {
-    return reportPmFailure(io, add);
-  }
-  const after = readProjectInstallState(projectRoot);
-  if (after.pin.kind !== "exact" || after.pin.version !== targetVersion) {
-    io.writeErr(
-      `Pin verification failed: expected ${targetVersion}, got ${after.pin.raw ?? "(none)"}.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const installed = readInstalledRuntime(projectRoot);
-  if (installed === null || installed.version !== targetVersion) {
-    io.writeErr(
-      `Installed package verification failed: expected ${RUNTIME_PACKAGE_NAME}@${targetVersion}, found ${installed?.version ?? "nothing"}.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (installed.contract > 1) {
-  }
-  const verified = readProjectInstallState(projectRoot);
-  if (!verified.contractSupported) {
-    io.writeErr(
-      "This launcher is too old for the installed runtime. `npm i -g @deftai/directive@latest`.\n"
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  return handOffSetup({
-    projectRoot,
-    launcherVersion,
-    runtime: installed,
-    operation: "install",
-    from: convertShapeId ?? "none",
-    io,
-    deps,
-    verbosity: flags.verbosity,
-    pm: pmDetect.pm
-  }).exitCode;
-}
-function runRepair(projectRoot, state, flags, launcherVersion, io, deps, env) {
-  if (state.pin.kind !== "exact" || state.pin.version === null) {
-    io.writeErr(
-      `Repair requires an existing unambiguous exact ${RUNTIME_PACKAGE_NAME} pin (found ${state.pin.kind}: ${state.pin.raw ?? "none"}). Rectify package.json; repair does not guess a version.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const pinVersion = state.pin.version;
-  const pmDetect = detectPackageManager(projectRoot, flags.packageManager);
-  if (!pmDetect.ok) {
-    io.writeErr(`${pmDetect.message}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  const lockOk = lockfileRecordsExactPin(projectRoot, pinVersion, pmDetect.pm);
-  const installedOk = state.installed !== null && state.installed.version === pinVersion && state.contractSupported;
-  const needsPmRestore = !lockOk || !installedOk;
-  if (needsPmRestore) {
-    const pmMissing = preflightPmAvailable(projectRoot, pmDetect.pm, deps, io);
-    if (pmMissing !== null) return pmMissing;
-  }
-  const pmCmd = formatPmExactAddCommand(pmDetect.pm, pinVersion, projectRoot);
-  const restoreReason = lockOk ? "installed package mismatch/missing" : "lockfile missing/unusable/disagree";
-  presentRepairPlan(io, {
-    projectRoot,
-    pm: pmDetect.pm,
-    pmEvidence: pmDetect.evidence,
-    version: pinVersion,
-    needsPmRestore,
-    pmCommand: needsPmRestore ? pmCmd : null,
-    restoreReason: needsPmRestore ? restoreReason : null,
-    gitHooksInactive: !existsSync7(join6(projectRoot, ".git")),
-    nodeWarning: checkNodeVersion(deps.nodeVersion).warning ?? null,
-    verbosity: flags.verbosity
-  });
-  const planFp = fingerprintPlanCriticalFiles(projectRoot, pmDetect.pm);
-  if (flags.dryRun) {
-    io.writeOut("[dry-run] no changes made.\n");
-    return EXIT_CODES.SUCCESS;
-  }
-  const approval = requireApproval(
-    flags,
-    deps,
-    io,
-    `Repair Directive ${pinVersion} in this project?`
-  );
-  if (approval !== null) return approval;
-  const stale = assertPlanStillValid(projectRoot, pmDetect.pm, planFp, io);
-  if (stale !== null) return stale;
-  if (needsPmRestore) {
-    const add = deps.runPmAdd?.({ projectRoot, pm: pmDetect.pm, version: pinVersion }) ?? runPmExactAdd({ projectRoot, pm: pmDetect.pm, version: pinVersion, env });
-    if (!add.ok) {
-      return reportPmFailure(io, add);
-    }
-  }
-  const after = readProjectInstallState(projectRoot);
-  if (after.pin.version !== pinVersion) {
-    io.writeErr(`Repair changed the pin unexpectedly (${after.pin.raw}). Aborting.
-`);
-    return EXIT_CODES.FAILURE;
-  }
-  const installed = readInstalledRuntime(projectRoot);
-  if (installed === null || installed.version !== pinVersion) {
-    io.writeErr(
-      `Repair verification failed: expected installed ${pinVersion}, found ${installed?.version ?? "nothing"}. ${RECOVERY_GUIDANCE}
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (!after.contractSupported) {
-    io.writeErr(
-      "This launcher is too old for this project. `npm i -g @deftai/directive@latest`.\n"
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  return handOffSetup({
-    projectRoot,
-    launcherVersion,
-    runtime: installed,
-    operation: "repair",
-    from: pinVersion,
-    io,
-    deps,
-    verbosity: flags.verbosity,
-    pm: pmDetect.pm,
-    restoredPackage: needsPmRestore
-  }).exitCode;
-}
-function reportInvokeStderr(io, result) {
-  if (result.message) io.writeErr(`${result.message}
-`);
-  if (result.stderr) {
-    io.writeErr(result.stderr.endsWith("\n") ? result.stderr : `${result.stderr}
-`);
-  }
-}
-function reportJsonSummary(io, label, result, verbosity) {
-  reportInvokeStderr(io, result);
-  if (!result.stdout) return null;
-  const summary = tryParseSetupSummary(result.stdout);
-  if (summary) {
-    if (verbosity >= 1) {
-      presentPathSummary(io, label, summary, verbosity);
-    } else if (summary.message) {
-      io.writeOut(`${summary.message}
-`);
-    }
-    return summary;
-  }
-  io.writeOut(result.stdout.endsWith("\n") ? result.stdout : `${result.stdout}
-`);
-  return null;
-}
-function handOffSetup(opts) {
-  const argv = setupArgv(opts.operation, opts.from, opts.projectRoot);
-  const result = opts.deps.invokeSetup?.(argv) ?? invokeRuntime({
-    projectRoot: opts.projectRoot,
-    launcherVersion: opts.launcherVersion,
-    runtime: opts.runtime,
-    argv,
-    stdio: "pipe"
-  });
-  const suppressPathDump = result.exitCode === 0 && (opts.operation === "install" || opts.operation === "repair" || opts.operation === "upgrade");
-  let summary = null;
-  if (suppressPathDump) {
-    reportInvokeStderr(opts.io, result);
-    summary = tryParseSetupSummary(result.stdout);
-  } else {
-    summary = reportJsonSummary(opts.io, `setup ${opts.operation}`, result, opts.verbosity);
-  }
-  if (result.exitCode === 0) {
-    if (opts.operation === "install") {
-      presentInstallSuccess(opts.io, {
-        version: opts.runtime.version,
-        projectRoot: opts.projectRoot,
-        pm: opts.pm,
-        summary,
-        verbosity: opts.verbosity
-      });
-    } else if (opts.operation === "repair") {
-      presentRepairSuccess(opts.io, {
-        version: opts.runtime.version,
-        restoredPackage: opts.restoredPackage ?? false,
-        summary,
-        verbosity: opts.verbosity,
-        pm: opts.pm
-      });
-    }
-  } else if (opts.operation === "install" || opts.operation === "upgrade" || opts.operation === "repair") {
-    presentSetupFailedAfterInstall(opts.io, {
-      version: opts.runtime.version,
-      operation: opts.operation,
-      failedPaths: summary?.conflicts,
-      reason: result.message ?? summary?.message ?? null
-    });
-  }
-  return { exitCode: result.exitCode, summary };
-}
-function handOffMigrate(opts) {
-  const argv = migrateArgv(opts.from, opts.projectRoot);
-  const result = opts.deps.invokeMigrate?.(argv) ?? invokeRuntime({
-    projectRoot: opts.projectRoot,
-    launcherVersion: opts.launcherVersion,
-    runtime: opts.runtime,
-    argv,
-    stdio: "pipe"
-  });
-  reportInvokeStderr(opts.io, result);
-  const summary = tryParseSetupSummary(result.stdout);
-  if (result.exitCode !== 0 && opts.verbosity >= 1 && summary) {
-    presentPathSummary(opts.io, "migrate", summary, opts.verbosity);
-  } else if (result.exitCode !== 0 && !summary && result.stdout) {
-    opts.io.writeOut(result.stdout.endsWith("\n") ? result.stdout : `${result.stdout}
-`);
-  }
-  return { exitCode: result.exitCode, summary };
-}
-function isWiringCurrentForVersion(projectRoot, version) {
-  try {
-    const genPath = join6(projectRoot, ".deft", "GENERATION.json");
-    if (!existsSync7(genPath)) return false;
-    const genRaw = JSON.parse(readFileSync5(genPath, "utf8"));
-    if (genRaw === null || typeof genRaw !== "object" || Array.isArray(genRaw)) return false;
-    if (genRaw.runtimeVersion !== version) return false;
-    const ready = join6(projectRoot, ".deft", "directive", `wiring-ready.${version}.json`);
-    if (!existsSync7(ready)) return false;
-    const bodyRaw = JSON.parse(readFileSync5(ready, "utf8"));
-    if (bodyRaw === null || typeof bodyRaw !== "object" || Array.isArray(bodyRaw)) return false;
-    const bodyVersion = bodyRaw.runtimeVersion;
-    if (bodyVersion !== void 0 && bodyVersion !== version) return false;
-    return true;
-  } catch {
-    return false;
-  }
-}
-function parseDoctorDataStatusResponse(result) {
-  if (result.exitCode !== 0) {
-    return {
-      ok: false,
-      message: result.message ?? `doctor diagnostic failed (exit ${result.exitCode})`
-    };
-  }
-  try {
-    const line = result.stdout.trim().split("\n").filter(Boolean).pop() ?? "";
-    const parsed = JSON.parse(line);
-    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-      return { ok: false, message: "doctor data-status JSON malformed" };
-    }
-    const obj = parsed;
-    if (obj.contract !== CONTRACT_NUMBER) {
-      return {
-        ok: false,
-        message: `doctor data-status unsupported contract: ${String(obj.contract)}`
-      };
-    }
-    const status = obj.dataStatus;
-    if (status !== "current" && status !== "migration_needed" && status !== "diagnosis_failed") {
-      return { ok: false, message: `doctor data-status unknown: ${String(status)}` };
-    }
-    return { ok: true, dataStatus: status };
-  } catch {
-    return {
-      ok: false,
-      message: result.message ?? "doctor data-status parse failed"
-    };
-  }
-}
-function obtainDataStatus(projectRoot, launcherVersion, runtime, deps) {
-  if (deps.invokeDoctorDataStatus) return deps.invokeDoctorDataStatus();
-  const result = invokeRuntime({
-    projectRoot,
-    launcherVersion,
-    runtime,
-    argv: doctorArgv(),
-    stdio: "pipe"
-  });
-  return parseDoctorDataStatusResponse(result);
-}
-function runUpgrade(projectRoot, state, argv, launcherVersion, io = defaultIo(), deps = {}) {
-  const { flags, rest, usageError } = parseFlags(argv);
-  const env = deps.env ?? process.env;
-  if (usageError !== null) {
-    io.writeErr(`${usageError}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  if (rest.length > 0) {
-    io.writeErr(`Unknown argument(s): ${rest.join(" ")}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  const upgradeShape = resolveInstallShape(projectRoot);
-  if (upgradeShape !== null && isL2RefusalDecision(upgradeShape.decision)) {
-    io.writeErr(`${formatShapeRecoveryMessage(upgradeShape, "upgrade")}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  const convertViaRemovals = upgradeShape !== null && upgradeShape.decision === "convert-via-removals";
-  const exactPin = state.pin.kind === "exact" && state.pin.version !== null;
-  if (!exactPin && !state.oldStyle && !convertViaRemovals) {
-    io.writeErr(
-      `Upgrade requires an exact ${RUNTIME_PACKAGE_NAME} pin or a supported old-style layout. Run \`directive install\`.
-`
-    );
-    return EXIT_CODES.USAGE;
-  }
-  const currentPin = state.pin.version ?? "none";
-  const fromLabel = state.oldStyle ? "old-style" : convertViaRemovals ? upgradeShape.shapeId : currentPin;
-  let targetVersion;
-  if (flags.targetVersion !== null) {
-    const validated = validateTargetVersionSpec(flags.targetVersion);
-    if (!validated.ok) {
-      io.writeErr(`${validated.message}
-`);
-      return EXIT_CODES.USAGE;
-    }
-    targetVersion = validated.version;
-  } else {
-    const resolver = deps.resolveLatest ?? (() => resolveLatestStableVersion(env, projectRoot));
-    const resolved = resolver();
-    if (resolved instanceof Promise) {
-      io.writeErr("Internal error: async resolveLatest is not supported in sync upgrade path.\n");
-      return EXIT_CODES.FAILURE;
-    }
-    if (!resolved.ok) {
-      io.writeErr(`${resolved.message}
-`);
-      return EXIT_CODES.FAILURE;
-    }
-    targetVersion = resolved.version;
-  }
-  let versionOrd;
-  try {
-    versionOrd = state.oldStyle || convertViaRemovals ? 1 : compareExactVersions(targetVersion, currentPin);
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    io.writeErr(`${msg}
-`);
-    return EXIT_CODES.FAILURE;
-  }
-  if (!state.oldStyle && !convertViaRemovals && versionOrd < 0) {
-    io.writeErr(
-      `Target ${targetVersion} is older than pin ${currentPin}; upgrade rejects downgrades.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const contractResolver = deps.resolvePublishedContract ?? ((version) => resolvePublishedContract(version, env, projectRoot));
-  const published = contractResolver(targetVersion);
-  if (!published.ok) {
-    io.writeErr(`${published.message}
-`);
-    return EXIT_CODES.FAILURE;
-  }
-  if (!isContractSupported(published.contract)) {
-    io.writeErr(
-      `This launcher is too old for target ${RUNTIME_PACKAGE_NAME}@${targetVersion} (contract ${published.contract} > ${LAUNCHER_MAX_SUPPORTED_CONTRACT}). \`npm i -g @deftai/directive@latest\`.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const versionChange = state.oldStyle || convertViaRemovals || versionOrd !== 0;
-  const pmDetect = detectPackageManager(projectRoot, flags.packageManager);
-  if (!pmDetect.ok) {
-    io.writeErr(`${pmDetect.message}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  let needSetup = versionChange;
-  let needMigrate = versionChange;
-  let dataStatus = null;
-  if (!versionChange) {
-    if (state.installed === null || !state.pinMatchesInstalled || !state.contractSupported) {
-      io.writeErr(
-        `Equal-version upgrade requires the pinned runtime installed and contract-supported. ${RECOVERY_GUIDANCE}
-`
-      );
-      return EXIT_CODES.FAILURE;
-    }
-    const status = obtainDataStatus(projectRoot, launcherVersion, state.installed, deps);
-    if (!status.ok) {
-      io.writeErr(`Data-status diagnostic failed: ${status.message}
-`);
-      return EXIT_CODES.FAILURE;
-    }
-    if (status.dataStatus === "diagnosis_failed") {
-      io.writeErr("Data-status diagnostic reported diagnosis_failed; refusing no-op.\n");
-      return EXIT_CODES.FAILURE;
-    }
-    dataStatus = status.dataStatus;
-    const wiringCurrent = isWiringCurrentForVersion(projectRoot, currentPin);
-    needSetup = !wiringCurrent;
-    needMigrate = dataStatus === "migration_needed" || needSetup;
-    if (!needSetup && !needMigrate) {
-      io.writeOut(
-        `directive upgrade: already current (${RUNTIME_PACKAGE_NAME}@${currentPin}; wiring + data current). No-op.
-`
-      );
-      return EXIT_CODES.SUCCESS;
-    }
-  }
-  if (versionChange) {
-    const pmMissing = preflightPmAvailable(projectRoot, pmDetect.pm, deps, io);
-    if (pmMissing !== null) return pmMissing;
-  }
-  const pmCmd = versionChange ? formatPmExactAddCommand(pmDetect.pm, targetVersion, projectRoot) : null;
-  presentUpgradePlan(io, {
-    projectRoot,
-    pm: pmDetect.pm,
-    pmEvidence: pmDetect.evidence,
-    version: targetVersion,
-    currentVersion: currentPin,
-    targetVersion,
-    versionChange,
-    pmCommand: pmCmd,
-    needSetup,
-    needMigrate,
-    oldStyle: state.oldStyle,
-    convertShapeId: convertViaRemovals ? upgradeShape.shapeId : null,
-    gitHooksInactive: !existsSync7(join6(projectRoot, ".git")),
-    nodeWarning: checkNodeVersion(deps.nodeVersion).warning ?? null,
-    verbosity: flags.verbosity
-  });
-  const planFp = fingerprintPlanCriticalFiles(projectRoot, pmDetect.pm);
-  if (flags.dryRun) {
-    io.writeOut("[dry-run] no changes made.\n");
-    return EXIT_CODES.SUCCESS;
-  }
-  const approval = requireApproval(
-    flags,
-    deps,
-    io,
-    versionChange ? `Upgrade Directive from ${currentPin} to ${targetVersion}?` : `Finish equal-version upgrade work for ${currentPin}?`
-  );
-  if (approval !== null) return approval;
-  const stale = assertPlanStillValid(projectRoot, pmDetect.pm, planFp, io);
-  if (stale !== null) return stale;
-  if (versionChange) {
-    if (state.oldStyle || convertViaRemovals) {
-      for (const packageName of RETIRED_DIRECTIVE_PACKAGE_NAMES) {
-        const rm = deps.runPmRemove?.({ projectRoot, pm: pmDetect.pm, packageName }) ?? runPmRemove({ projectRoot, pm: pmDetect.pm, packageName, env });
-        if (!rm.ok && rm.interrupted) {
-          return reportPmFailure(io, rm);
-        }
-      }
-      removeLegacyDirectivePackages(projectRoot);
-      const purged = purgeRetiredDirectiveLockfiles(projectRoot);
-      if (purged.length > 0 && flags.verbosity >= 1) {
-        io.writeOut(`Purged lockfile(s) referencing retired Directive packages: ${purged.join(", ")}
-`);
-      }
-    }
-    if (convertViaRemovals && !existsSync7(join6(projectRoot, "package.json"))) {
-      ensurePackageJson(projectRoot);
-    }
-    const add = deps.runPmAdd?.({ projectRoot, pm: pmDetect.pm, version: targetVersion }) ?? runPmExactAdd({ projectRoot, pm: pmDetect.pm, version: targetVersion, env });
-    if (!add.ok) {
-      return reportPmFailure(io, add);
-    }
-    const after = readProjectInstallState(projectRoot);
-    if (after.pin.kind !== "exact" || after.pin.version !== targetVersion) {
-      io.writeErr(
-        `Pin verification failed: expected ${targetVersion}, got ${after.pin.raw ?? "(none)"}.
-`
-      );
-      return EXIT_CODES.FAILURE;
-    }
-    const installed = readInstalledRuntime(projectRoot);
-    if (installed === null || installed.version !== targetVersion) {
-      io.writeErr(
-        `Installed package verification failed: expected ${RUNTIME_PACKAGE_NAME}@${targetVersion}, found ${installed?.version ?? "nothing"}.
-`
-      );
-      return EXIT_CODES.FAILURE;
-    }
-    if (!isContractSupported(installed.contract)) {
-      io.writeErr(
-        "This launcher is too old for the installed runtime. `npm i -g @deftai/directive@latest`.\n"
-      );
-      return EXIT_CODES.FAILURE;
-    }
-    const setupResult = handOffSetup({
-      projectRoot,
-      launcherVersion,
-      runtime: installed,
-      operation: "upgrade",
-      from: fromLabel,
-      io,
-      deps,
-      verbosity: flags.verbosity,
-      pm: pmDetect.pm
-    });
-    if (setupResult.exitCode !== 0) {
-      return setupResult.exitCode;
-    }
-    if (convertViaRemovals) {
-      const pkgPath = join6(projectRoot, "package.json");
-      if (!existsSync7(pkgPath)) {
-        io.writeErr(
-          `Convert upgrade lost package.json after setup (shape ${upgradeShape.shapeId}). Expected exact ${RUNTIME_PACKAGE_NAME}@${targetVersion}. Fix the cause, then run: directive upgrade --yes.
-`
-        );
-        return EXIT_CODES.FAILURE;
-      }
-      const pinAfterSetup = readProjectInstallState(projectRoot).pin;
-      if (pinAfterSetup.kind !== "exact" || pinAfterSetup.version !== targetVersion) {
-        io.writeErr(
-          `Convert upgrade lost runtime pin after setup (shape ${upgradeShape.shapeId}): expected ${RUNTIME_PACKAGE_NAME}@${targetVersion}, got ${pinAfterSetup.raw ?? "(none)"}. Fix the cause, then run: directive upgrade --yes.
-`
-        );
-        return EXIT_CODES.FAILURE;
-      }
-    }
-    const migrateResult = handOffMigrate({
-      projectRoot,
-      launcherVersion,
-      runtime: installed,
-      from: fromLabel,
-      io,
-      deps,
-      verbosity: flags.verbosity
-    });
-    if (migrateResult.exitCode !== 0) {
-      presentMigrateFailedAfterUpgrade(io, {
-        version: targetVersion,
-        versionChange: true,
-        summary: migrateResult.summary
-      });
-      return migrateResult.exitCode;
-    }
-    presentUpgradeSuccess(io, {
-      version: targetVersion,
-      versionChange: true,
-      pm: pmDetect.pm,
-      summary: setupResult.summary,
-      migrateSummary: migrateResult.summary,
-      verbosity: flags.verbosity
-    });
-    return EXIT_CODES.SUCCESS;
-  }
-  const runtime = state.installed;
-  let setupSummary = null;
-  if (needSetup) {
-    const setupResult = handOffSetup({
-      projectRoot,
-      launcherVersion,
-      runtime,
-      operation: "upgrade",
-      from: fromLabel,
-      io,
-      deps,
-      verbosity: flags.verbosity,
-      pm: pmDetect.pm
-    });
-    if (setupResult.exitCode !== 0) {
-      return setupResult.exitCode;
-    }
-    setupSummary = setupResult.summary;
-  }
-  let migrateSummary = null;
-  if (needMigrate) {
-    const migrateResult = handOffMigrate({
-      projectRoot,
-      launcherVersion,
-      runtime,
-      from: fromLabel,
-      io,
-      deps,
-      verbosity: flags.verbosity
-    });
-    if (migrateResult.exitCode !== 0) {
-      presentMigrateFailedAfterUpgrade(io, {
-        version: currentPin,
-        versionChange: false,
-        summary: migrateResult.summary
-      });
-      return migrateResult.exitCode;
-    }
-    migrateSummary = migrateResult.summary;
-  }
-  presentUpgradeSuccess(io, {
-    version: currentPin,
-    versionChange: false,
-    pm: pmDetect.pm,
-    summary: setupSummary,
-    migrateSummary,
-    verbosity: flags.verbosity
-  });
-  return EXIT_CODES.SUCCESS;
-}
-function runUninstall(projectRoot, state, argv, launcherVersion, io = defaultIo(), deps = {}) {
-  const { flags, usageError } = parseFlags(argv);
-  const env = deps.env ?? process.env;
-  if (usageError !== null) {
-    io.writeErr(`${usageError}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  const discovery = discoverUninstallFootprint(projectRoot);
-  if (!discovery.hasFootprint) {
-    io.writeOut("No Directive installation footprint found in this project. Nothing to uninstall.\n");
-    return EXIT_CODES.SUCCESS;
-  }
-  const removePaths = discovery.artifacts.filter((a) => a.kind !== "retained").map(
-    (a) => a.kind === "whole-file" ? a.path : a.kind === "marked-section" ? `${a.path} (marked section)` : `${a.path} (${a.entryKey ?? "structured entry"})`
-  );
-  const keepPaths = discovery.artifacts.filter((a) => a.kind === "retained").map((a) => a.path);
-  if (!keepPaths.includes("xbrief") && existsSync7(join6(projectRoot, "xbrief"))) {
-    keepPaths.push("xbrief");
-  }
-  if (!keepPaths.includes(".deft/settings.json") && existsSync7(join6(projectRoot, ".deft", "settings.json"))) {
-    keepPaths.push(".deft/settings.json");
-  }
-  keepPaths.push("user content in AGENTS.md / host configs", "global launcher");
-  const pmDetect = detectPackageManager(projectRoot, flags.packageManager);
-  const pmEvidence = pmDetect.ok ? pmDetect.evidence : "default (detection failed; will skip PM remove)";
-  const packagesToRemove = [];
-  if (discovery.hasRuntimePin) packagesToRemove.push(RUNTIME_PACKAGE_NAME);
-  if (discovery.hasLegacyLauncherPin || state.oldStyle) {
-    packagesToRemove.push(LAUNCHER_PACKAGE_NAME);
-  }
-  const pinRaw = state.pin.version ?? state.pin.raw;
-  const pinVersion = pinRaw != null ? `${pinRaw}${state.oldStyle ? " (old-style)" : ""}` : state.oldStyle ? "(none) (old-style)" : null;
-  const pmCommand = packagesToRemove.length > 0 && pmDetect.ok ? packagesToRemove.map((p) => formatPmRemoveCommand(pmDetect.pm, p, projectRoot)).join("; ") : null;
-  const removal = summarizeUninstallRemovals(removePaths, {
-    willRemovePin: packagesToRemove.length > 0,
-    legacyCore: discovery.hasLegacyCore,
-    preserveLabels: keepPaths
-  });
-  const extraHumanLines = flags.verbosity >= 1 ? [
-    `Ownership record: ${discovery.ownershipInspection}`,
-    `Installed runtime: ${state.installed?.version ?? "(missing/unavailable)"}`,
-    state.installed && state.contractSupported ? "Repository uninstaller: invoke when available, then launcher fallback" : "Repository uninstaller: unavailable \u2014 launcher fallback only (no repair/upgrade required)",
-    "hooksPath: unset .githooks only when safe for sibling worktrees"
-  ] : void 0;
-  presentUninstallPlan(io, {
-    projectRoot,
-    pm: pmDetect.ok ? pmDetect.pm : null,
-    pmEvidence: pmDetect.ok ? pmDetect.evidence : pmEvidence,
-    pinVersion,
-    pmCommand,
-    verbosity: flags.verbosity,
-    removal,
-    extraHumanLines
-  });
-  if (flags.dryRun) {
-    io.writeOut("[dry-run] no changes made.\n");
-    return EXIT_CODES.SUCCESS;
-  }
-  const approval = requireApproval(
-    flags,
-    {
-      stdinIsTTY: deps.stdinIsTTY,
-      confirm: deps.confirm,
-      readInteractiveLine: deps.readInteractiveLine
-    },
-    io,
-    "Uninstall Directive from this project?"
-  );
-  if (approval !== null) return approval;
-  let runtimeUninstallAttempted = false;
-  let runtimeUninstallFailed = false;
-  if (state.installed && state.contractSupported) {
-    runtimeUninstallAttempted = true;
-    const result = deps.invokeUninstall?.(uninstallArgv(projectRoot)) ?? invokeRuntime({
-      projectRoot,
-      launcherVersion,
-      runtime: state.installed,
-      argv: uninstallArgv(projectRoot),
-      stdio: "pipe"
-    });
-    reportJsonSummary(io, "repository uninstall", result, flags.verbosity);
-    if (result.exitCode !== 0) {
-      runtimeUninstallFailed = true;
-      io.writeOut(
-        "Repository uninstaller reported failure or partial removal; continuing launcher fallback cleanup.\n"
-      );
-    }
-  } else {
-    io.writeOut(
-      "Runtime unavailable or incompatible; continuing launcher fallback cleanup (R11).\n"
-    );
-  }
-  const cleanup = deps.applyCleanup?.(projectRoot, discovery) ?? applyLauncherCleanup(projectRoot, discovery);
-  if (flags.verbosity >= 1) {
-    io.writeOut(
-      `launcher cleanup: removed=${JSON.stringify(cleanup.removed)} modified=${JSON.stringify(cleanup.modified)} preserved=${JSON.stringify(cleanup.preserved)}
-`
-    );
-    if (cleanup.leftovers.length > 0) {
-      io.writeOut(`leftovers: ${JSON.stringify(cleanup.leftovers)}
-`);
-    }
-    if (cleanup.uncertainty.length > 0) {
-      io.writeOut(`uncertainty: ${JSON.stringify(cleanup.uncertainty)}
-`);
-    }
-  }
-  if (packagesToRemove.length > 0) {
-    if (!pmDetect.ok) {
-      io.writeErr(`${pmDetect.message}
-`);
-      io.writeErr("Could not remove package dependency via PM; pin may remain.\n");
-    } else {
-      for (const packageName of packagesToRemove) {
-        if (packageName === LAUNCHER_PACKAGE_NAME) {
-          removeLegacyDirectivePin(projectRoot);
-        }
-        const rm = deps.runPmRemove?.({ projectRoot, pm: pmDetect.pm, packageName }) ?? runPmRemove({ projectRoot, pm: pmDetect.pm, packageName, env });
-        if (!rm.ok) {
-          if (rm.interrupted) {
-            return reportPmFailure(io, rm);
-          }
-          io.writeErr(`${rm.message}
-`);
-          if (rm.stderr) io.writeErr(`${rm.stderr}
-`);
-          io.writeErr(
-            `PM remove of ${packageName} failed; continuing remaining uninstall steps.
-`
-          );
-        } else if (flags.verbosity >= 1) {
-          io.writeOut(`Removed ${packageName} via ${pmDetect.pm}.
-`);
-        }
-      }
-    }
-  }
-  const hooksPathResult = deps.cleanupHooksPath?.(projectRoot) ?? cleanupHooksPath(projectRoot);
-  if (flags.verbosity >= 1) {
-    io.writeOut(`core.hooksPath: ${hooksPathResult}
-`);
-  }
-  const verification = verifyUninstallComplete(projectRoot);
-  const filteredLeftovers = verification.leftovers.filter((l) => {
-    if (l === `package.json#${LAUNCHER_PACKAGE_NAME}` && !state.oldStyle && !discovery.hasLegacyLauncherPin) {
-      return false;
-    }
-    return true;
-  });
-  const complete = filteredLeftovers.length === 0;
-  presentUninstallSuccess(io, {
-    projectRoot,
-    complete,
-    removal,
-    removedPaths: cleanup.removed,
-    preserved: cleanup.preserved.length > 0 ? cleanup.preserved : keepPaths,
-    leftovers: filteredLeftovers,
-    verbosity: flags.verbosity
-  });
-  if (runtimeUninstallAttempted && runtimeUninstallFailed && complete) {
-    io.writeOut(
-      "Repository uninstaller failed earlier, but launcher fallback verified complete removal.\n"
-    );
-  }
-  if (!complete) {
-    return EXIT_CODES.FAILURE;
-  }
-  return EXIT_CODES.SUCCESS;
-}
-function runDoctor(projectRoot, state, argv, launcherVersion, io = defaultIo()) {
-  const { flags } = parseFlags(argv);
-  const node = checkNodeVersion();
-  if (node.warning) io.writeOut(`${node.warning}
-`);
-  if (projectRoot === null || state === null) {
-    io.writeErr("No Directive project here. Run `directive install`.\n");
-    return EXIT_CODES.FAILURE;
-  }
-  if (state.oldStyle) {
-    io.writeOut(
-      "This project uses an older Directive layout. Run `directive upgrade`.\n"
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (state.pin.kind === "none") {
-    io.writeErr("No Directive project here. Run `directive install`.\n");
-    return EXIT_CODES.FAILURE;
-  }
-  const pinLabel = state.pin.version ?? state.pin.raw ?? "(none)";
-  const installedLabel = state.installed?.version ?? "(missing)";
-  if (state.installed === null || !state.pinMatchesInstalled) {
-    if (state.installed === null) {
-      io.writeOut(
-        `directive doctor: project ${projectRoot}
-  launcher: ${launcherVersion}
-  pin: ${pinLabel} (${state.pin.kind})
-  installed: missing
-Recovery: ${RECOVERY_GUIDANCE}
-`
-      );
-    } else {
-      io.writeOut(
-        `directive doctor: project ${projectRoot}
-  launcher: ${launcherVersion}
-  pin: ${pinLabel} (${state.pin.kind})
-  installed: ${installedLabel} (\u2260 pin)
-Recovery: ${RECOVERY_GUIDANCE}
-`
-      );
-    }
-    return EXIT_CODES.FAILURE;
-  }
-  if (!state.contractSupported) {
-    io.writeErr(
-      "This launcher is too old for this project. `npm i -g @deftai/directive@latest`.\n"
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (flags.dryRun) {
-    io.writeOut(
-      `directive doctor: project ${projectRoot}
-  launcher: ${launcherVersion}
-  pin: ${pinLabel}
-  installed: ${installedLabel}
-  (dry-run: runtime diagnosis not invoked)
-`
-    );
-    return EXIT_CODES.SUCCESS;
-  }
-  const result = invokeRuntime({
-    projectRoot,
-    launcherVersion,
-    runtime: state.installed,
-    argv: doctorDiagnoseArgv(),
-    stdio: "pipe"
-  });
-  if (result.stdout) {
-    io.writeOut(result.stdout.endsWith("\n") ? result.stdout : `${result.stdout}
-`);
-  }
-  if (result.stderr) {
-    io.writeErr(result.stderr.endsWith("\n") ? result.stderr : `${result.stderr}
-`);
-  }
-  if (result.message) io.writeErr(`${result.message}
-`);
-  return result.exitCode;
-}
-var runDoctorStub = runDoctor;
-
-// packages/cli/src/version.ts
-import { readFileSync as readFileSync6 } from "node:fs";
-import { dirname as dirname2, join as join7 } from "node:path";
-import { fileURLToPath } from "node:url";
-var FALLBACK = "0.0.0";
-function readLauncherVersion() {
-  try {
-    const pkgPath = join7(dirname2(fileURLToPath(import.meta.url)), "..", "package.json");
-    const parsed = JSON.parse(readFileSync6(pkgPath, "utf8"));
-    if (parsed !== null && typeof parsed === "object") {
-      const version = parsed.version;
-      if (typeof version === "string" && version.length > 0) return version;
-    }
-  } catch {
-  }
-  return FALLBACK;
-}
-
-// packages/cli/src/launcher.ts
-function defaultIo2() {
-  return {
-    writeOut: (t) => {
-      process.stdout.write(t);
-    },
-    writeErr: (t) => {
-      process.stderr.write(t);
-    }
-  };
-}
-function printHelp(version, io) {
-  io.writeOut(
-    `@deftai/directive ${version} \u2014 launcher
-
-Usage: directive <command> [options]
-
-Installation management:
-  install [--repair] [--target-version <exact>] [--package-manager npm|pnpm]
-          [--dry-run] [--yes] [--root <path>]
-  upgrade [--target-version <ver>] [--dry-run] [--yes] [--root <path>]
-  uninstall [--dry-run] [--yes] [--root <path>]
-  doctor [--root <path>]
-
-Aliases: init\u2192install, update\u2192upgrade, remove\u2192uninstall
-
-Ordinary product commands pass through to the pinned ${RUNTIME_PACKAGE_NAME}.
-
-First-time: npm i -g @deftai/directive && directive install
-Repair:     ${RECOVERY_GUIDANCE}
-Upgrade:    directive upgrade
-Uninstall:  directive uninstall
-
-Automation examples:
-  directive install --yes
-  directive install --repair --yes
-  directive upgrade --yes
-  directive uninstall --dry-run
-
-Options:
-  --version, -V              Show launcher / pin status
-  --help, -h                 Show this help
-  --root <path>              Project root (must be Git toplevel when in a repo)
-  --target-version <exact>   Exact runtime version (required for prereleases)
-  --package-manager npm|pnpm Force PM when lockfile evidence is absent
-  --repair                  Restore the existing exact pin + wiring
-  --dry-run                  Show plan; change nothing
-  --yes, -y                  Approve a fully resolved bookend plan
-`
-  );
-}
-function printVersion(launcherVersion, projectRoot, state, io) {
-  if (projectRoot === null || state === null) {
-    io.writeOut(`launcher ${launcherVersion} \xB7 no project
-`);
-    return;
-  }
-  const pin = state.pin.version ?? state.pin.raw ?? "(none)";
-  let status;
-  if (state.pin.kind === "none") {
-    status = "no pin";
-  } else if (state.oldStyle) {
-    status = "older layout \u2014 run directive upgrade";
-  } else if (state.installed === null) {
-    status = "not installed";
-  } else if (!state.pinMatchesInstalled) {
-    status = `installed ${state.installed.version} (does not match pin)`;
-  } else if (!state.contractSupported) {
-    status = `installed ${state.installed.version} (contract too new for this launcher)`;
-  } else {
-    status = "installed (metadata verified)";
-  }
-  io.writeOut(`launcher ${launcherVersion} \xB7 project pins ${pin} (${status})
-`);
-}
-function resolveCommand(raw) {
-  if (raw === void 0) return null;
-  if (INSTALL_ALIASES[raw]) return INSTALL_ALIASES[raw];
-  return raw;
-}
-function isInstallManagement(cmd) {
-  return INSTALL_MANAGEMENT_COMMANDS.includes(cmd);
-}
-function runLauncher(argv, io = defaultIo2()) {
-  const node = checkNodeVersion();
-  if (!node.ok) {
-    io.writeErr(`${node.message}
-`);
-    return node.exitCode;
-  }
-  if (node.warning) {
-    io.writeErr(`${node.warning}
-`);
-  }
-  const launcherVersion = readLauncherVersion();
-  const { root: rootFlag, rest } = takeRootFlag(argv);
-  if (rootFlag === "") {
-    io.writeErr("directive: --root requires a path\n");
-    return EXIT_CODES.USAGE;
-  }
-  const wantsVersion = rest.includes("--version") || rest.includes("-V");
-  const commandIndex = rest.findIndex((a) => a !== "--help" && a !== "-h" && a !== "--version" && a !== "-V" && !a.startsWith("-"));
-  const rawCmd = commandIndex >= 0 ? rest[commandIndex] : void 0;
-  const forwardArgv = commandIndex >= 0 ? rest.filter((a, i) => i === commandIndex || a !== "--version" && a !== "-V") : rest.filter((a) => a !== "--version" && a !== "-V");
-  const cmdArgv = commandIndex >= 0 ? forwardArgv.slice(1) : [];
-  const wantsLauncherHelp = rest.length === 0 || rawCmd === void 0 && (rest.includes("--help") || rest.includes("-h"));
-  const discovered = discoverProject({
-    rootFlag,
-    cwd: process.cwd()
-  });
-  let projectRoot = null;
-  let state = null;
-  if (discovered.ok) {
-    projectRoot = discovered.root;
-    if (discovered.movedUp && rootFlag === null && rawCmd !== void 0) {
-      io.writeErr(`Using project root ${projectRoot} (moved up from ${process.cwd()})
-`);
-    }
-    state = readProjectInstallState(projectRoot);
-  } else if (rootFlag !== null) {
-    io.writeErr(`${discovered.message}
-`);
-    return EXIT_CODES.USAGE;
-  }
-  if (wantsVersion && rawCmd === void 0) {
-    printVersion(launcherVersion, projectRoot, state, io);
-    return EXIT_CODES.SUCCESS;
-  }
-  if (wantsLauncherHelp) {
-    printHelp(launcherVersion, io);
-    return EXIT_CODES.SUCCESS;
-  }
-  if (rawCmd !== void 0 && /^(install|upgrade|uninstall|doctor)--/.test(rawCmd)) {
-    const verb = rawCmd.slice(0, rawCmd.indexOf("--"));
-    const restFlag = rawCmd.slice(rawCmd.indexOf("--"));
-    io.writeErr(
-      `Unknown command '${rawCmd}'. Did you mean: ${verb} ${restFlag} \u2026?
-Known installation commands: install, upgrade, uninstall, doctor.
-`
-    );
-    return EXIT_CODES.USAGE;
-  }
-  const cmd = resolveCommand(rawCmd);
-  if (cmd === null) {
-    printHelp(launcherVersion, io);
-    return EXIT_CODES.SUCCESS;
-  }
-  if (RETIRED_INSTALL_VERBS.has(cmd) || rawCmd !== void 0 && RETIRED_INSTALL_VERBS.has(rawCmd)) {
-    const suggestion = rawCmd === "migrate" || cmd === "migrate" || rawCmd === "install-upgrade" ? "Did you mean: upgrade?\n" : rawCmd === "sync" || rawCmd === "bootstrap" ? "Did you mean: install?\n" : rawCmd === "install-uninstall" ? "Did you mean: uninstall?\n" : "";
-    io.writeErr(
-      `Unknown command '${rawCmd}'. Known installation commands: install, upgrade, uninstall, doctor.
-` + suggestion
-    );
-    return EXIT_CODES.USAGE;
-  }
-  if (cmd === "doctor") {
-    const positional = cmdArgv.find((a) => !a.startsWith("-"));
-    if (positional === "fix") {
-      io.writeErr(
-        "Unknown command 'doctor fix'. Doctor is read-only. Known installation commands: install, upgrade, uninstall, doctor.\nDid you mean: install --repair?\n"
-      );
-      return EXIT_CODES.USAGE;
-    }
-  }
-  const cmdWantsHelp = cmdArgv.includes("--help") || cmdArgv.includes("-h");
-  if (projectRoot === null || state === null) {
-    if (cmd === "install") {
-      if (cmdWantsHelp) {
-        printHelp(launcherVersion, io);
-        return EXIT_CODES.SUCCESS;
-      }
-      io.writeErr(
-        `${discovered.ok === false ? discovered.message : "No project root found."}
-Run from inside a repository, or pass --root <path>.
-`
-      );
-      return EXIT_CODES.FAILURE;
-    }
-    if (cmd === "doctor") {
-      if (cmdWantsHelp) {
-        printHelp(launcherVersion, io);
-        return EXIT_CODES.SUCCESS;
-      }
-      return runDoctorStub(null, null, cmdArgv, launcherVersion, io);
-    }
-    io.writeErr(
-      `No Directive project here. Run \`directive install\` inside a repository.
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (state.oldStyle) {
-    const oldStyleAllowed = /* @__PURE__ */ new Set(["upgrade", "uninstall"]);
-    if (!oldStyleAllowed.has(cmd)) {
-      io.writeErr(
-        "This project uses an older Directive layout. Run `directive upgrade`.\n"
-      );
-      return EXIT_CODES.FAILURE;
-    }
-  }
-  if (state.installed !== null && !state.contractSupported && cmd !== "uninstall") {
-    io.writeErr(
-      "This launcher is too old for this project. `npm i -g @deftai/directive@latest`.\n"
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (isInstallManagement(cmd)) {
-    if (cmdWantsHelp) {
-      printHelp(launcherVersion, io);
-      return EXIT_CODES.SUCCESS;
-    }
-    switch (cmd) {
-      case "install":
-        return runInstall(projectRoot, state, cmdArgv, launcherVersion, io);
-      case "upgrade":
-        return runUpgrade(projectRoot, state, cmdArgv, launcherVersion, io);
-      case "uninstall":
-        return runUninstall(projectRoot, state, cmdArgv, launcherVersion, io);
-      case "doctor":
-        return runDoctorStub(projectRoot, state, cmdArgv, launcherVersion, io);
-    }
-  }
-  if (!state.pinMatchesInstalled || state.installed === null) {
-    io.writeErr(
-      `Pinned ${RUNTIME_PACKAGE_NAME}@${state.pin.version ?? state.pin.raw ?? "?"} is not installed (found ${state.installed?.version ?? "nothing"}).
-Recovery: ${RECOVERY_GUIDANCE}
-`
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  if (!state.contractSupported) {
-    io.writeErr(
-      "This launcher is too old for this project. `npm i -g @deftai/directive@latest`.\n"
-    );
-    return EXIT_CODES.FAILURE;
-  }
-  const result = invokeRuntime({
-    projectRoot,
-    launcherVersion,
-    runtime: state.installed,
-    argv: forwardArgv
-  });
-  if (result.message) io.writeErr(`${result.message}
-`);
-  return result.exitCode;
-}
-
-// packages/cli/src/bin.ts
-function isHookInvocation() {
-  const mode = (process.env.DEFT_LAUNCHER_MODE || "").trim().toLowerCase();
-  if (mode === "hook") return true;
-  if (mode === "launcher" || mode === "directive" || mode === "deft") return false;
-  const argv1 = (process.argv[1] ?? "").replace(/\\/g, "/");
-  const inv = basename(argv1).toLowerCase().replace(/\.(js|mjs|cjs|cmd|ps1|exe)$/i, "");
-  if (inv === "deft-hook" || inv.startsWith("deft-hook.")) return true;
-  if (/(^|\/)deft-hook(\.[^/]+)?$/i.test(argv1)) return true;
-  return false;
-}
-var code = isHookInvocation() ? runHookLauncher(process.argv.slice(2)) : runLauncher(process.argv.slice(2));
+import { routeAndDispatch } from "./cli-router/index.js";
+const code = await routeAndDispatch(process.argv.slice(2));
 process.exit(code);
+//# sourceMappingURL=bin.js.map