@dzhechkov/p-replicator 1.6.0 → 1.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/p-replicator",
-  "version": "1.6.0",
+  "version": "1.10.0",
   "description": "P-Replicator — Claude Code toolkit for AI-assisted product development (Vibe Coding). Full /replicate pipeline, 10 modular skills (880K+ chars), /harvest knowledge extraction, swarm agents, quality gates, security patterns, cross-project learning.",
   "main": "src/cli.js",
   "bin": {
@@ -19,9 +19,9 @@
     "sbom.json"
   ],
   "scripts": {
-    "prepublishOnly": "node ../../../scripts/prepublish-gate.mjs",
-    "test": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/e2e/lifecycle.test.js tests/snapshot/templates.test.js",
-    "test:unit": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js",
+    "prepublishOnly": "node --test tests/snapshot/templates.test.js && node ../../../scripts/prepublish-gate.mjs",
+    "test": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/e2e/lifecycle.test.js tests/snapshot/templates.test.js",
+    "test:unit": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js",
     "test:e2e": "node --test tests/e2e/lifecycle.test.js",
     "test:snapshot": "node --test tests/snapshot/templates.test.js",
     "test:doctor": "node bin/cli.js doctor",

package/sbom.json

@@ -15,7 +15,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "837815d5116c5e117c1249a414b7ae81927969d74a3b44685e8dc8a8dd3a6d8e"
+          "content": "63092c71ea7153d562c26db68f2774f233b7c5d37e78e4e3cdfaa1546c42668d"
         }
       ]
     },
@@ -55,7 +55,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6b863dbfd298c1788097d53a87425030a341684f67bbb5a81a90c192c0c90d22"
+          "content": "d65437974585200f0db8ef082dfbd0519f61cc29cadf3224732ae7a459a20186"
         }
       ]
     },
@@ -275,7 +275,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8ae12d621050c3a4f992bc853b4ec961af5fbf32bf9c3fee639a182b546992de"
+          "content": "0cc3dc1f4a07a4e5f3ac3f3a1981dc1766302fbbe3ed5818b04c806d4c476059"
         }
       ]
     },
@@ -295,7 +295,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0cbd703649882cca4e484bf696b384291780ba760b7895a3ed2bdc1005ef2e4c"
+          "content": "566a8cf554420fbbb734705de283f04d40048ee3eb38f1877304d2cc5e56a47f"
         }
       ]
     },
@@ -345,7 +345,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e6d56e7471825b1bacd0e9dbc85d6c9428547c08ea604c348247e258a607eca0"
+          "content": "18f5442af9b3a549dfb284cd0d8aef83ba973bd34a3a04e7c656262baebb0e57"
         }
       ]
     },
@@ -355,7 +355,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ec9d1695f4b0ef2ce0b3ee6908e90900ebac0941a32ea48df673f6cd20fc1387"
+          "content": "43f6abbf447478bae423bce742cfbdace1725946621925eb2ffb3a3ab5b3379e"
         }
       ]
     },
@@ -455,7 +455,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2e73e822384f976383d9c3313940888b9853f1781d2c39a2fb89825f221149dc"
+          "content": "93258a3340f99a0f14b374746ae2934b01d7cefe06d575434868eb98da2d854a"
         }
       ]
     },
@@ -485,7 +485,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13f5e2ebe109f33b63cbcd75e3cf1b94224ab066aba1b0cb10cf34f668144a8a"
+          "content": "8862d0dc117815b1c3fc7f6e929996e2458783f1ac443eb70bc2a7ebe63a67c3"
         }
       ]
     },
@@ -539,13 +539,33 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/hooks/check-docs-complete.cjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "27c05c2adcedc806e395b30b455243193a4fbd0968ce96e415679e1f78db951a"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "templates/.claude/hooks/check-growth-trace.cjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "91994fc109c8440306c9dd3d5eea176c533eb0818fcdb09bac2b309397d9908a"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/hooks/check-ports.cjs",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e5f2d2bd8899df27c2dfedf76128467becae1868210eb8525a1bad2869a8c78f"
+          "content": "1813aa60e4d15c5f6ce54a9b3471c3772efe60c332316183c7ad8f5b619f2169"
         }
       ]
     },
@@ -575,7 +595,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1eca683baf67a17874dc5db6dfe38eb11944f550c66f46330bce0f794732245f"
+          "content": "465190ab21610357094fd6eba188ba9f7086dc5a933568f40a7f7c715ccd6745"
         }
       ]
     },
@@ -625,7 +645,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b65e802d32a1e50bdfcd0cfc79c78e9234eac48a94f0cd1f5647cf4fea6c0162"
+          "content": "99289f711c34cfddddbef5328b74749fc63d1f74636c6a4e4d61caa202fad05d"
         }
       ]
     },
@@ -635,7 +655,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "fe18fcb9217002572f462f3a7f38de22cdd7ba0dd4e906fdcd0c0e8cfed9f2aa"
+          "content": "7669309b0ae4330bc6cf6b26bd9cfc01d7b99a8e70c1f056a52574430db9378e"
         }
       ]
     },
@@ -715,7 +735,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7e9722c1533f1b7d1a9d11a7add13ac12a2a5f0acfc0ed2cdede2bcf0dab788f"
+          "content": "2b10d2972b1379adde9a68ddf8bcdb399b7d65075e458a54523ffd8d99ddc746"
         }
       ]
     },
@@ -725,7 +745,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8c6444bdb5ce97e49223cdaa6b1c58ac8fcec710cd6ee8d56de9bc677379bd88"
+          "content": "d33e760a0739e9291f6087adf189f01eb7c4a1136d9128390dd6e3ad8eadda6f"
         }
       ]
     },
@@ -775,7 +795,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b093a5d66663e2dfd6415afef7c7444409f03379f857001b811685ded410038b"
+          "content": "e1ae2dd69db0d68fe276c1d0e57bd19921bf98fe91fe054716add76338442891"
         }
       ]
     },
@@ -825,7 +845,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1deedef5ee5c7ef1f7fd8a8fb84732d82f872724fc96697bf530c6dbd6d0850a"
+          "content": "683b254e400414b432827bedf4153a122322125eff053da4ccfeb3a62bab2a77"
         }
       ]
     },
@@ -925,7 +945,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d70a0c4977d322602c35c53bf04880177b5dd8f0de2b339d68a0f55993903745"
+          "content": "8398f2493434db101476300e514a34bf8124a51eb732cf81923f9a5b5a3d5db4"
         }
       ]
     },
@@ -965,7 +985,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c537b47e7a4ff2d692767f4aac130e2ae9b1923782106750218696e87f515feb"
+          "content": "7b01140a304c060fb085ded8711189ac3f259f999df1cb42380d0274191f1b25"
         }
       ]
     },
@@ -1495,7 +1515,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e50c5269ad181966a81c14ef596946cea67cbf4b8f8f648c90fd66ecad948933"
+          "content": "d2b8e71f4053c642f455a0f245ae18471ab25b7a21e0658f0fe410912a47bf8b"
         }
       ]
     },
@@ -1585,7 +1605,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4af16873637c26baba0d30728748108c79f5b96765de08d54fc65fe1008f4280"
+          "content": "0770bd63a6a1eeb34e873cb101e2ba0cf88d507e9bc03242046eaa837b9f587c"
         }
       ]
     },
@@ -1595,7 +1615,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b614e43359ffe88c07d6f45abdb2d3c523fc7779052757ed95bbd31b5ce9408d"
+          "content": "499bbded50ddd368a62301083e828a42bd0223aa58322b6a952f00086b462972"
         }
       ]
     },
@@ -1605,7 +1625,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0ca044b769a70bcc89bdb5af496471b59104428770d49735e8255fc22da48207"
+          "content": "11e2e101c99d42306ac1d0931475c5a8899e929514e41a393b6173e03856cfc3"
         }
       ]
     },
@@ -1615,7 +1635,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6c5c802ee558b5e13c80eb05e64a8197bad34192416df81ea32f3b0e1b04b259"
+          "content": "7c2e7164463371239d92f28153777e40ee0d6dad293d59886a4cf5b306fa3627"
         }
       ]
     },
@@ -1625,7 +1645,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "19d25e9fe9a732d963f2359748ef2c7793bd6282183f84b938351feccea88075"
+          "content": "dd08226391d498a82f111f0da665ea7cea1fa8a97683fab11070f879142727f7"
         }
       ]
     },
@@ -1635,7 +1655,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "98e8577aa5a5472574ac9bac590b76a4a3d16f99bc67ebec2b09b604c7c1faab"
+          "content": "84658390dc7beb590f70164b391ace915e42926660bc1015e4be300752b74a37"
         }
       ]
     },
@@ -1645,7 +1665,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f72841226f929cea2c3a414f74b3f1e933e3952f1b55e6eea38081dd804a87cd"
+          "content": "3cd76a218aa9f94e0ff8ff2fc257647540674f68df3883f0de5e76e1cea26d9b"
         }
       ]
     },
@@ -1685,7 +1705,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "50e829635b828b444487e4b04219518a595dbd4b94f91b66fb03ddf4a7b21712"
+          "content": "71f97e269e8b1807550a4ef91b2f0ac4dd892a074781504890d33db8f32685d2"
         }
       ]
     },
@@ -1735,7 +1755,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "cb6c08b5c5fb7ea837fb6c054d1094f8c4878a88ac866ec67a3862f8c7fb2a07"
+          "content": "333e554a3840fd02e0e230efe4852bb490beded41f6024c65849060780eebdee"
         }
       ]
     },
@@ -1759,6 +1779,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/absence-is-not-emptiness.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "6c7c1c8086461eac16415ebcccea081d3169212826f23e835cf109d741dd6ac3"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/adr-decision-coverage.test.js",
@@ -1779,6 +1809,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/assess-scripts.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b16b015dc28cd5b1d85a8ec0ae54768af1787d2d26e9e5b495c8f791aaa2043f"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/autocommit-deletion.test.js",
@@ -1789,13 +1829,33 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/check-docs-complete.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "2c6f16a61f0876f637ac492d5fb2af1ea35ad00161fd1468446ea0d08cd97f4b"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/check-growth-trace.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "733d87fe8eca897fcfc5cad9342d4db2085270c21d0d8866d817a9b9418511c2"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/check-ports.test.js",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "72d9eeaa8c47d83fba867722f4b8efc8d079e2d9649e1a20abff46571c2f6f15"
+          "content": "d8e2e1f22dadb40fbb03ffbd25ed945fa85fe7b5d49fe0f3597cfc3facc2c118"
         }
       ]
     },
@@ -1829,13 +1889,63 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/generated-guard-templates.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "928ddb625cc1bbc7dd145992c9a37373da93ae314f39391c67ad7ed064e2c940"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/growth-axes-and-compliance.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "88e4d8c7ae278c46dfce4d89fcbd1dee49c0b545ebc07e459306bfdc70567048"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/growth-gate-conditional.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bff4149b339294ac822d1a8fe732d21560ea8d70bcb80b10f3491105a4a9b75c"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/growth-module-b2b-gate.test.js",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7bb5b39a637becbea9813744a5d649b19c6bd8a9b18045c971bcfd842852ea84"
+          "content": "05ce46882984905ba41983c34b8d983e9fa9bf5eb4b1af988841a46e78142098"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/growth-requirements-bridge.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "2f560a16f1757df46d5d52e5d29a7aad3e4c327cd07ea9cc69240c7dd1c93f2a"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/guard-forms.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "61a219a7748e0b56bc4207eee107815a4b4111fbebd41b68f6d390130506cd42"
         }
       ]
     },
@@ -1859,6 +1969,26 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/insights-docs-tell-the-truth.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d73ebce2f729911cad452897883b3d55d69e19613c7c1fc7c9bcfa3b5569fc1b"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/module-copy-identity.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "69a63e511cef4d6cb7ea5669b61746f2fc8af22273bc76539cb304bd27e49de9"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/pipeline-file-ownership.test.js",
@@ -1879,6 +2009,26 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/shipped-suite-context.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "fd6128505f3272aa7349d21d18a2494eaa8e5e2397ee85047f9828471c99d721"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/skill-paths-prebaked.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "efb13ca5d2fa68f3186e5af4142509d260d7cf63c902f59e915110bb550887df"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/sparc-reconciliation.test.js",
@@ -1925,7 +2075,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "75e8e0d0d2dfc16f14c586d399b5c9c075cc3a0494c558fe39d8528516185cfe"
+          "content": "e4fc7687dcf37d17bf2a059d3248c8c00526c104f6a0f6e104fa9ca6e00039ae"
         }
       ]
     },

package/src/commands/doctor.js

@@ -6,7 +6,7 @@ const { execFileSync } = require('child_process');
 const {
   green, red, yellow, cyan, bold, dim,
   info, success, warn, error: logError,
-  readManifest, fileExists,
+  readManifest, fileExists, artifactState,
   MANIFEST_FILE, COMPONENTS,
 } = require('../utils');
 
@@ -29,6 +29,22 @@ function run(options) {
   function fail(msg) { console.log(`  ${red('\u2717')} ${msg}`); issues++; }
   function hint(msg) { console.log(`  ${yellow('!')} ${msg}`); warnings++; }
 
+  /**
+   * One reporter for every component, because a two-way branch cannot say three things.
+   *
+   * The first version of this change swapped the CONDITION to artifactState and left the else
+   * branch intact, so a whitespace-only artifact was reported as "missing" — the exact collapse
+   * AR-4 forbids. And settings.json and the hooks were still on fileExists, so a ZERO-BYTE
+   * settings.json (no hooks wired at all) and a zero-byte hook both received a checkmark.
+   */
+  function reportArtifact(label, filePath, missingNote) {
+    const state = artifactState(filePath);
+    if (state === 'present') { pass(label); return; }
+    if (state === 'empty') { fail(`${label} \u2014 EMPTY, cannot load`); return; }
+    fail(`${label} \u2014 missing${missingNote ? ' (' + missingNote + ')' : ''}`);
+  }
+
+
   console.log(bold('P-Replicator \u2014 Health Check'));
   console.log('');
 
@@ -59,11 +75,7 @@ function run(options) {
   console.log(bold(`Skills (expected ${EXPECTED_SKILLS.length}):`));
   for (const skill of EXPECTED_SKILLS) {
     const skillPath = path.join(claudeDir, 'skills', skill, 'SKILL.md');
-    if (fileExists(skillPath)) {
-      pass(skill);
-    } else {
-      fail(`${skill} \u2014 SKILL.md missing`);
-    }
+    reportArtifact(skill, skillPath, 'SKILL.md');
   }
   console.log('');
 
@@ -71,11 +83,7 @@ function run(options) {
   console.log(bold(`Commands (expected ${EXPECTED_COMMANDS.length}):`));
   for (const cmd of EXPECTED_COMMANDS) {
     const cmdPath = path.join(claudeDir, 'commands', `${cmd}.md`);
-    if (fileExists(cmdPath)) {
-      pass(`/${cmd}`);
-    } else {
-      fail(`/${cmd} \u2014 ${cmd}.md missing`);
-    }
+    reportArtifact(`/${cmd}`, cmdPath, undefined);
   }
   console.log('');
 
@@ -83,11 +91,7 @@ function run(options) {
   console.log(bold(`Agents (expected ${EXPECTED_AGENTS.length}):`));
   for (const agent of EXPECTED_AGENTS) {
     const agentPath = path.join(claudeDir, 'agents', `${agent}.md`);
-    if (fileExists(agentPath)) {
-      pass(agent);
-    } else {
-      fail(`${agent} \u2014 ${agent}.md missing`);
-    }
+    reportArtifact(agent, agentPath, undefined);
   }
   console.log('');
 
@@ -95,22 +99,14 @@ function run(options) {
   console.log(bold(`Rules (expected ${EXPECTED_RULES.length}):`));
   for (const rule of EXPECTED_RULES) {
     const rulePath = path.join(claudeDir, 'rules', `${rule}.md`);
-    if (fileExists(rulePath)) {
-      pass(rule);
-    } else {
-      fail(`${rule} \u2014 ${rule}.md missing`);
-    }
+    reportArtifact(rule, rulePath, undefined);
   }
   console.log('');
 
   // ── 6b) Settings (hooks config) ─────────────────────────────────────────
   console.log(bold('Hooks (settings.json):'));
   const settingsPath = path.join(claudeDir, 'settings.json');
-  if (fileExists(settingsPath)) {
-    pass('settings.json');
-  } else {
-    fail('settings.json — missing (SessionStart + Stop hooks not configured)');
-  }
+  reportArtifact('settings.json', settingsPath, 'SessionStart + Stop hooks not configured');
   console.log('');
 
   // ── 6c) Hook scripts (cross-platform Node, v1.4.1+) ─────────────────────
@@ -119,11 +115,7 @@ function run(options) {
     console.log(bold(`Hook scripts (expected ${hookKeys.length}):`));
     for (const hook of hookKeys) {
       const hookPath = path.join(claudeDir, 'hooks', `${hook}.cjs`);
-      if (fileExists(hookPath)) {
-        pass(`${hook}.cjs`);
-      } else {
-        fail(`${hook}.cjs — missing (referenced by settings.json)`);
-      }
+      reportArtifact(`${hook}.cjs`, hookPath, 'referenced by settings.json');
     }
     console.log('');
   }
@@ -148,6 +140,26 @@ function run(options) {
   }
   console.log('');
 
+  // ── The insights carrier: THREE states, and none of them fails ───────────
+  //
+  // A project that has recorded no insight is a NEW project, and a check that refuses a new project
+  // is a check people disable — taking the real signal with it. The defect was never the emptiness:
+  // it was that ABSENT and EMPTY rendered identically, so a carrier that had never been created
+  // looked exactly like one being used and found empty. MEASURED across four real projects on one
+  // machine: 11 -> 10 -> 6 -> 0 insights, with every surface reporting OK throughout.
+  const insightsIndex = path.join(claudeDir, 'insights', 'index.md');
+  const insightsState = artifactState(insightsIndex);
+  if (insightsState === 'missing') {
+    hint('insights carrier: NOT STARTED — no .claude/insights/index.md. Record one with /myinsights');
+  } else if (insightsState === 'empty') {
+    hint('insights carrier: EXISTS but holds ZERO entries — nothing is injected at SessionStart');
+  } else {
+    const entries = (fs.readFileSync(insightsIndex, 'utf-8')
+      .match(/^##\s+\d{4}-\d{2}-\d{2}/gm) || []).length;
+    pass('insights carrier: ' + entries + ' entr' + (entries === 1 ? 'y' : 'ies') + ' recorded');
+  }
+  console.log('');
+
   // ── 8) Summary ──────────────────────────────────────────────────────────
   console.log(bold('\u2500'.repeat(50)));
   if (issues === 0 && warnings === 0) {

package/src/commands/verify.js

@@ -4,7 +4,7 @@ const path = require('path');
 const {
   green, red, yellow, cyan, bold, dim,
   info, success, error: logError,
-  readManifest, fileExists,
+  readManifest, fileExists, artifactState,
   COMPONENTS, getItemRelativePath,
 } = require('../utils');
 
@@ -44,8 +44,14 @@ function run(options) {
       const label = groupKey === 'commands'
         ? `/${itemKey}`
         : `${groupKey}: ${itemKey}`;
-      if (fileExists(full)) {
+      const state = artifactState(full);
+      if (state === 'present') {
         pass(`${label} ${dim('— ' + desc)}`);
+      } else if (state === 'empty') {
+        // NOT "missing". The cures differ: missing -> run `update`; empty -> something truncated
+        // your file, and `update` would silently repair it without you ever learning that. Naming
+        // both "missing" moves the silence up one level instead of removing it.
+        fail(`${label} — EMPTY, cannot load (${rel})`);
       } else {
         fail(`${label} — missing (${rel})`);
       }
@@ -91,6 +97,25 @@ function run(options) {
   console.log('');
 
   // ── Summary ─────────────────────────────────────────────────────────────
+  // The insights carrier: three states, none of them failing.
+  //
+  // FR-5 asks for three SURFACES, and the first pass shipped two — doctor and the statusline —
+  // leaving verify producing identical output for absent, empty and populated. Cross-family review
+  // caught it. A carrier that never existed must not read like one being used and found empty:
+  // that indistinguishability is what let 27 recorded insights become 0 across four real projects.
+  const insightsIndex = path.join(targetDir, '.claude', 'insights', 'index.md');
+  const insightsState = artifactState(insightsIndex);
+  if (insightsState === 'missing') {
+    hint('insights carrier: NOT STARTED — no .claude/insights/index.md. Record one with /myinsights');
+  } else if (insightsState === 'empty') {
+    hint('insights carrier: EXISTS but holds ZERO entries — nothing is injected at SessionStart');
+  } else {
+    const entries = (require('fs').readFileSync(insightsIndex, 'utf-8')
+      .match(/^##\s+\d{4}-\d{2}-\d{2}/gm) || []).length;
+    pass(`insights carrier: ${entries} entr${entries === 1 ? 'y' : 'ies'} recorded`);
+  }
+  console.log('');
+
   console.log(bold('─'.repeat(60)));
   if (issues === 0 && warnings === 0) {
     success(bold('All artifacts verified.'));