@dzhechkov/harness-cli 0.3.241 → 0.3.243

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "5b07e06ab04301ad1edfa9207b705266b57f3288f474f19ef7f22747237b6e67"
+        "sha256": "5f4e31653970ef6970b6d87c862a1c6ac1f2da92c3f4f913b4be4155284db1f4"
       },
       {
         "path": "coverage/coverage-final.json",
@@ -41,15 +41,15 @@
       },
       {
         "path": "dist/cli.d.ts.map",
-        "sha256": "eb431a9aaed2c853b19a797cd49668bed9fe1e700880a8d18d9a1a4cfe243f55"
+        "sha256": "2bb00d2f42334250ee57b4d0f88d92968cbe3f010ec8d75bb748c0ee6f8de0b8"
       },
       {
         "path": "dist/cli.js",
-        "sha256": "9a46ece09ee1ac72ca3d7715ae86c1b5dc3747b18287c6f558a3c5d6569de7da"
+        "sha256": "d959d7623b68286e440e04f90ee3ae7af0166c1fe506f2cf7e6e9e317439409d"
       },
       {
         "path": "dist/cli.js.map",
-        "sha256": "02dcf19b1e616487f3840482e9af6f9028749b5a8c9d8da143126be5d7ee5779"
+        "sha256": "68e0bbf621169f7bae350a5b723f9425969ab12b6f7dd98ce26bb06d32c77c92"
       },
       {
         "path": "dist/index.d.ts",
@@ -73,7 +73,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "dc78329bbed8510db61dc597124a455a1ce367f4ce1f0258a171ee6207ebb1e6"
+        "sha256": "e26250419d70ec922def52f25f63000b658eec8203b29a2135edad1be98f8d5d"
       },
       {
         "path": "src/bin.ts",
@@ -81,7 +81,7 @@
       },
       {
         "path": "src/cli.ts",
-        "sha256": "8477517b028f8258d5f11a2197167210de2db0acefa901f0f393579dc14bd409"
+        "sha256": "14a3db7155fcc858272439a55bc7a43a09c7f6fd7caa302e5a13c153fe1a6d16"
       },
       {
         "path": "src/index.ts",
@@ -89,7 +89,7 @@
       },
       {
         "path": "test/cli.test.ts",
-        "sha256": "3deb99917f3d8b4a5c9a3b0315bd65a3099ce2b508121cfa2bdeed19b7554d48"
+        "sha256": "a82b15dd9d166764479528e9f9ede45fc39d1b4068a96f19f158aa5a4c03369b"
       },
       {
         "path": "tsconfig.json",
@@ -101,5 +101,5 @@
       }
     ]
   },
-  "signature": "cgLA1on1Innvb62VlQWouPeWuDW5Lo1E0W8Yq6p0N1rZ36HGvOxoLsYAYfFjYSikQ2QhM3NxE1CESshVuPh6Bw=="
+  "signature": "gGmbCW5Q8VH8CPNbUxHMrZBTxa6wqihi7F0bfUw+dyfN09I/hBQJZzhkautvL4TeFLGJGxkzzXVvpBqjoLHEAw=="
 }

package/README.md

@@ -434,6 +434,31 @@ dz parity — codex  (capabilities: shell, skills, mcp)
 **When to use:** before promising a workflow to a teammate on Cursor/Codex/Hermes; when choosing
 a target for a project; as the requirements input for porting a feature to more targets.
 
+### Usage estimates you can act on — `dz usage`
+
+`dz usage` estimates how much of your Claude session (5h block) and week you have spent, from local
+transcripts. It drives feature-adr's pre-emptive "switch to Codex before the limit" routing.
+
+Two things changed to make it mean something:
+
+- **Cost-weighted, not a raw sum.** A flat token sum is 89–99.7% cache-read (MEASURED), which grows
+  with *conversation length*, not with work done — two sessions doing identical work differed by
+  orders of magnitude. Tokens are now **input-equivalents** (input 1x, cache-write 1.25x — 2x for a
+  1-hour TTL write, cache-read 0.1x, output 5x).
+- **Subagent transcripts count.** `<session>/subagents/*.jsonl` carry real, non-duplicated usage and
+  were silently excluded.
+
+```bash
+dz usage                       # session ~13% (resets 10:24) · week ~15% (resets 08:59) · estimated
+dz usage --json                # machine-readable; pct is null when limits are unconfigured
+dz usage --calibrate --session 42 --weekly 61      # teach it YOUR real numbers from claude.ai
+```
+
+**`pct` is `null` until you configure limits — that is deliberate**, an unconfigured estimate is not
+a guess dressed as a number. The authoritative calibration is `--calibrate` with the percentages
+shown on claude.ai/settings/usage; absent that, limits set from your own observed peak mean "unusually
+heavy **for you**", which is exactly what a pre-emptive routing switch needs.
+
 ### Do your skills actually register? — `dz skills-verify`
 
 Shipping a skill pack is not the same as a skill **registering**. A layout test that asserts
@@ -492,6 +517,22 @@ binary, a login prompt, a timeout, or a session that read a *different* project
 missing, so its listing is refused rather than believed.) A layout so broken that nothing is
 registrable fails too, instead of passing vacuously on an empty expectation.
 
+**Registration is not usability — `--live-content`.** A skill can be in the session listing and still
+be unusable content. That was the third, manual step of the health-advisor verification: invoke it and
+check the model really loaded its `SKILL.md`. `--live-content` automates it — an extra turn that asks a
+live model to name the expected skills and **quote a heading verbatim** from one:
+
+```
+$ dz skills-verify --expect api-design,debugging,explore --live-content
+dz skills-verify: PASS — all 3 expected skill(s) are registered
+  content probe (ADVISORY, model-mediated — never a gate): coherent — every probed skill was named and one was quoted
+    quoted: "## When to use"
+```
+
+It is **advisory by construction and always will be**: the answer comes from a model, so it never
+changes the exit code and never promotes a verdict. Naming a skill without quoting anything is
+`partial` (naming is not proof the content loaded); an empty answer is `unreadable`, not a pass.
+
 **Use it when:** publishing a package that installs skills, after `dz setup` in a new project, or in
 CI (`--static` needs no Claude session at all).
 

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqRH,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAgvL9E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAoJ5E"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwRH,2EAA2E;AAC3E,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KACvD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AA20L9E,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,KAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAoJ5E"}

package/dist/cli.js

@@ -9,7 +9,7 @@ import { fileURLToPath } from 'node:url';
 import { execSync, spawn } from 'node:child_process';
 import { homedir, tmpdir } from 'node:os';
 import { createRequire } from 'node:module';
-import { createSkill, getSkillInfo, getWorkflow, isTargetName, listSkills, runDoctor, runInit, benchmarkSkill, benchmarkSkills, scanMcp, reconcileCapabilities, RECONCILE_BANNER, buildRegistry, discoverSkillPackDirs, checkUpstream, compareSkills, checkAllUpstream, sweepSkillDrift, syncCanonicalSkill, checkUpgrades, discoverPackages, discoverSourcePackages, fetchAllDownloads, filterByCategory, pretrain, recommend, generatePlugin, publishPackages, runSetup, runMigrate, searchRegistry, runSync, runVerify, runInitAgentsMd, runInitGeminiMd, TARGET_NAMES, buildParityMatrix, TARGET_CAPABILITIES, TARGET_SHORT_LABELS, WORKFLOW_NAMES, importEcc, recordPattern, resolveLearningBackend, storeStats, consolidateSessions, pruneNoisePatterns, lessonDeltaReport, removePatternsByIds, snapshotStore, recallHybrid, teachGuard, mirrorPatternsToVector, mirrorEntriesToVector, patternVectorEntry, readMemoryLearningConfig, promotePatterns, quarantineExpiryCandidates, pruneQuarantinePatterns, clearAgentdbQuarantine, vectorMirrorEnabled, vectorTierStatus, resolveVectorEngine, reindexVectorStore, harmonizeVectorStore, importRvfCheckpoint, statuslineData, writeFeatureAdrState, computeUsage, deriveUsageCalibration, normalizeClaudeUsageModelKey, readUsageLimits, claimCheck, summarize, queryBookKnowledge, loadStorePatternsSync, patternRecordId, loadStoreRecords, recordToPattern, bundleSkills, brainHome, listBrain, promoteProjectToBrain, updateBrainSource, queryBrain, groundPrompt, expandKu, reindexBrainVectors, buildPrimer, exportBrainSlice, importBrainSlice, registerKusToBrain, RECALL_USAGE_LOG_RELATIVE, RECALL_USAGE_LOG_MAX_BYTES, parseRecallUsageLog, buildRecallUsageReport, buildManifest, buildSbom, resolveTrustRoot, decideVerifyPolicy, generateSigningKeypair, evaluateGuard, resolveRules, auditRecord, guardExitCode, DEFAULT_RULES, decideProvenance, isInsideTree, signManifest, verifyManifest, listSignablePackFiles, assertKeyOutsideTree, decidePublishGate, collectPackageFacts, planReleaseGates, selectAffectedPackages, classifyGateExecutions, buildFailureIssue, buildReleaseNotes, releaseTagName, firstOutputLine, formatPublishError, MANIFEST_NAME, SBOM_NAME, buildArchitectureMap, renderMapHuman, findArchitectureDrift, renderDriftReport, scanWorkspacePackages, loadSubsystemManifest, loadProductVision, checkFeatureAgainstArchitecture, renderArchCheck, planProjectSkills, guidanceForStage, renderInjectionReport, analyzeCorpus, renderRakeReport, renderCriticSection, rakeAsLesson, rakeReward, DEFAULT_RAKE_THRESHOLDS, streamSessionEvents, findLatestTranscript, detectProcessRakes, buildRetro, renderRetro, retroLessonText, PROCESS_SIGNATURES, RETRO_DOMAIN, scanForSetup, buildSetupPlan, scaffoldFromSpec, renderScaffoldPreview, readExistingForScaffold, assembleChallengeContext, buildChallengeBrief, planDiscriminationCheck, classifyDiscrimination, pickAdversaryModel, CHALLENGE_QUESTIONS, loadOutcomes, renderOutcomes, statsForKey, selectAutoCost, recordProvisional, finalizeOutcome, COST_LADDER, splitScenarios, budgetPlan, selectWinner, proseScopeOk, renderProseDiff, readScenarioIds, DEFAULT_MAX_JUDGE_RUNS, collectDeliveryFacts, planDeliveryCheck, renderDeliveryBrief, classifyDelivery, isUsablePlaneResult, renderDeliveryReview, scanSkillsLayout, parseInitFacts, verifyRegistration, findNonRegistrableSkillDirs, registrationExitCode, renderRegistrationReport, } from '@dzhechkov/harness-core';
+import { createSkill, getSkillInfo, getWorkflow, isTargetName, listSkills, runDoctor, runInit, benchmarkSkill, benchmarkSkills, scanMcp, reconcileCapabilities, RECONCILE_BANNER, buildRegistry, discoverSkillPackDirs, checkUpstream, compareSkills, checkAllUpstream, sweepSkillDrift, syncCanonicalSkill, checkUpgrades, discoverPackages, discoverSourcePackages, fetchAllDownloads, filterByCategory, pretrain, recommend, generatePlugin, publishPackages, runSetup, runMigrate, searchRegistry, runSync, runVerify, runInitAgentsMd, runInitGeminiMd, TARGET_NAMES, buildParityMatrix, TARGET_CAPABILITIES, TARGET_SHORT_LABELS, WORKFLOW_NAMES, importEcc, recordPattern, resolveLearningBackend, storeStats, consolidateSessions, pruneNoisePatterns, lessonDeltaReport, removePatternsByIds, snapshotStore, recallHybrid, teachGuard, mirrorPatternsToVector, mirrorEntriesToVector, patternVectorEntry, readMemoryLearningConfig, promotePatterns, quarantineExpiryCandidates, pruneQuarantinePatterns, clearAgentdbQuarantine, vectorMirrorEnabled, vectorTierStatus, resolveVectorEngine, reindexVectorStore, harmonizeVectorStore, importRvfCheckpoint, statuslineData, writeFeatureAdrState, computeUsage, deriveUsageCalibration, normalizeClaudeUsageModelKey, readUsageLimits, claimCheck, summarize, queryBookKnowledge, loadStorePatternsSync, patternRecordId, loadStoreRecords, recordToPattern, bundleSkills, brainHome, listBrain, promoteProjectToBrain, updateBrainSource, queryBrain, groundPrompt, expandKu, reindexBrainVectors, buildPrimer, exportBrainSlice, importBrainSlice, registerKusToBrain, RECALL_USAGE_LOG_RELATIVE, RECALL_USAGE_LOG_MAX_BYTES, parseRecallUsageLog, buildRecallUsageReport, buildManifest, buildSbom, resolveTrustRoot, decideVerifyPolicy, generateSigningKeypair, evaluateGuard, resolveRules, auditRecord, guardExitCode, DEFAULT_RULES, decideProvenance, isInsideTree, signManifest, verifyManifest, listSignablePackFiles, assertKeyOutsideTree, decidePublishGate, collectPackageFacts, planReleaseGates, selectAffectedPackages, classifyGateExecutions, buildFailureIssue, buildReleaseNotes, releaseTagName, firstOutputLine, formatPublishError, MANIFEST_NAME, SBOM_NAME, buildArchitectureMap, renderMapHuman, findArchitectureDrift, renderDriftReport, scanWorkspacePackages, loadSubsystemManifest, loadProductVision, checkFeatureAgainstArchitecture, renderArchCheck, planProjectSkills, guidanceForStage, renderInjectionReport, analyzeCorpus, renderRakeReport, renderCriticSection, rakeAsLesson, rakeReward, DEFAULT_RAKE_THRESHOLDS, streamSessionEvents, findLatestTranscript, detectProcessRakes, buildRetro, renderRetro, retroLessonText, PROCESS_SIGNATURES, RETRO_DOMAIN, scanForSetup, buildSetupPlan, scaffoldFromSpec, renderScaffoldPreview, readExistingForScaffold, assembleChallengeContext, buildChallengeBrief, planDiscriminationCheck, classifyDiscrimination, pickAdversaryModel, CHALLENGE_QUESTIONS, loadOutcomes, renderOutcomes, statsForKey, selectAutoCost, recordProvisional, finalizeOutcome, COST_LADDER, splitScenarios, budgetPlan, selectWinner, proseScopeOk, renderProseDiff, readScenarioIds, DEFAULT_MAX_JUDGE_RUNS, collectDeliveryFacts, planDeliveryCheck, renderDeliveryBrief, classifyDelivery, isUsablePlaneResult, renderDeliveryReview, scanSkillsLayout, parseInitFacts, verifyRegistration, buildContentProbePrompt, classifyContentProbe, renderContentProbe, findNonRegistrableSkillDirs, registrationExitCode, renderRegistrationReport, } from '@dzhechkov/harness-core';
 import { getPreset, PRESET_NAMES } from '@dzhechkov/harness-presets';
 import { scanGitHub, analyzeRepo, generateReport, deepAnalyze, scanAllSources, ScoutMemory } from '@dzhechkov/scout';
 const USAGE = `dz - DZ cross-platform harness CLI
@@ -4047,7 +4047,52 @@ function cmdClaimCheck(options, _optionLists, flags, cwd, write) {
             break;
         paths.push(p);
     }
-    const scanSet = paths.length > 0 ? paths.map((p) => resolve(root, p)) : defaultClaimScanSet(root);
+    // A DIRECTORY argument used to hit EISDIR, be counted as "skipped", and still exit 0 — the gate
+    // reported PASS having scanned nothing (MEASURED: `dz claim-check docs` said "1 skipped" and exited
+    // 0 while `dz claim-check docs/*.md` found 7). Expand a directory into its markdown instead.
+    const expandDir = (dir, depth = 0) => {
+        if (depth > 6)
+            return [];
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return [];
+        }
+        const out = [];
+        for (const name of entries) {
+            if (name.startsWith('.') || name === 'node_modules' || name === 'dist')
+                continue;
+            const full = join(dir, name);
+            try {
+                const st = statSync(full);
+                if (st.isDirectory())
+                    out.push(...expandDir(full, depth + 1));
+                else if (st.isFile() && name.toLowerCase().endsWith('.md'))
+                    out.push(full);
+            }
+            catch {
+                /* unreadable entry — nothing to scan */
+            }
+        }
+        return out;
+    };
+    const requested = paths.length > 0 ? paths.map((p) => resolve(root, p)) : defaultClaimScanSet(root);
+    const scanSet = [];
+    for (const p of requested) {
+        let isDir = false;
+        try {
+            isDir = statSync(p).isDirectory();
+        }
+        catch {
+            /* missing path stays in the set so it is reported as skipped, never silently dropped */
+        }
+        if (isDir)
+            scanSet.push(...expandDir(p));
+        else
+            scanSet.push(p);
+    }
     const findings = [];
     const scanned = [];
     for (const abs of scanSet) {
@@ -4088,6 +4133,13 @@ function cmdClaimCheck(options, _optionLists, flags, cwd, write) {
     write(`\n  ${scanned.length} file(s) in scan set, ${skipped.length} skipped.`);
     for (const s of skipped)
         write(`    skipped ${s.path} (${s.reason})`);
+    // A gate that examined NOTHING must never report a pass. Previously an unreadable argument was
+    // counted as "skipped" and the command still exited 0 — a clean bill of health over zero evidence.
+    const readCount = scanned.filter((s) => s.status === 'scanned').length;
+    if (readCount === 0 && scanned.length > 0) {
+        write('  NOTHING was read — this is not a pass. Check the paths above.');
+        return 1;
+    }
     // Additive per-group rollup (ADR-001 C4): the widened default set can produce thousands of
     // findings; this summarizes WHERE they land (root README, packages/…, features/<slug>,
     // docs/<subdir>) WITHOUT hiding any — display-only, so `--json` shape and exit codes are
@@ -5392,6 +5444,44 @@ function probeInitStream(projectDir, timeoutMs) {
         });
     });
 }
+/** Run a full `claude -p` turn and return its text. Unlike the init probe this NEEDS the answer. */
+function probeContent(projectDir, prompt, timeoutMs) {
+    return new Promise((resolveProbe) => {
+        const env = { ...process.env };
+        for (const key of PROBE_SCRUB_ENV)
+            delete env[key];
+        env.CLAUDE_PROJECT_DIR = projectDir;
+        let out = '';
+        let err = '';
+        let settled = false;
+        let child;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            try {
+                child?.kill('SIGTERM');
+            }
+            catch {
+                /* already gone */
+            }
+            resolveProbe({ text: out, error });
+        };
+        const timer = setTimeout(() => finish(`content probe timed out after ${Math.round(timeoutMs / 1000)}s`), timeoutMs);
+        try {
+            child = spawn('claude', ['-p', prompt, '--output-format', 'text'], { cwd: projectDir, env, stdio: ['ignore', 'pipe', 'pipe'] });
+        }
+        catch (error) {
+            finish(`cannot run \`claude\`: ${error instanceof Error ? error.message : String(error)}`);
+            return;
+        }
+        child.stdout?.on('data', (c) => { out += c.toString(); });
+        child.stderr?.on('data', (c) => { err += c.toString(); });
+        child.on('error', (error) => finish(`cannot run \`claude\`: ${error.message}`));
+        child.on('close', () => finish(out.trim() === '' ? err.trim() || 'the content probe produced no output' : null));
+    });
+}
 /**
  * `dz skills-verify` — does this project's `.claude/skills/` actually REGISTER? (feature
  * skills-verify, ADR-001.) L1 static scan is instant and CI-safe; the live layer reads the
@@ -5403,13 +5493,15 @@ async function cmdSkillsVerify(options, flags, cwd, write) {
         write('dz skills-verify [--dir <project>] [--expect a,b] [--static] [--strict] [--timeout <s>] [--json]');
         write('  Verifies that a project\'s .claude/skills/ actually register in Claude Code.');
         write('  --static  layout scan only (no Claude session, CI-safe): flags dirs that can never register');
+        write('  --live-content  ADVISORY extra turn: ask a live model to name the skills and quote one, proving');
+        write('                  the CONTENT is usable — registration is not usability. Never changes the exit code.');
         write('  default   also starts a real session and reads the authoritative system/init listing');
         write('  exit: 0 pass · 1 fail · 2 inconclusive (--strict makes inconclusive exit 1)');
         return 0;
     }
-    const allowedFlags = new Set(['json', 'help', 'static', 'strict']);
+    const allowedFlags = new Set(['json', 'help', 'static', 'strict', 'live-content']);
     const allowedOptions = new Set(['dir', 'expect', 'timeout']);
-    const usage = '  allowed: --dir <project>, --expect a,b, --timeout <s>, --static, --strict, --json';
+    const usage = '  allowed: --dir <project>, --expect a,b, --timeout <s>, --static, --strict, --live-content, --json';
     if (options.has('_positional_0')) {
         const message = `unexpected argument "${options.get('_positional_0')}"`;
         write(json ? JSON.stringify({ error: message, exitCode: 1 }) : `dz skills-verify: ${message}\n${usage}`);
@@ -5483,10 +5575,20 @@ async function cmdSkillsVerify(options, flags, cwd, write) {
         ...(options.has('expect') ? { expected } : {}),
     }, { resolvePath: canonical });
     const exitCode = registrationExitCode(result.verdict, flags.has('strict'));
+    // ADVISORY layer: registration is not usability. Costs a real model turn, so it is opt-in, and it
+    // can never change the exit code — a model-mediated signal must not gate anything.
+    let content = null;
+    if (flags.has('live-content') && result.verdict === 'pass' && expected.length > 0) {
+        const probe = await probeContent(projectDir, buildContentProbePrompt(expected), timeoutMs);
+        content = classifyContentProbe(probe.error === null ? probe.text : '', expected.slice(0, 6));
+    }
     if (json)
-        write(JSON.stringify({ mode: 'live', ...result, skillsRoot: scan.skillsRoot, exitCode }, null, 2));
-    else
+        write(JSON.stringify({ mode: 'live', ...result, ...(content ? { contentProbe: content } : {}), skillsRoot: scan.skillsRoot, exitCode }, null, 2));
+    else {
         write(renderRegistrationReport(result, scan));
+        if (content)
+            write(renderContentProbe(content));
+    }
     return exitCode;
 }
 function cmdDeliveryCheck(options, flags, cwd, write) {