@dzhechkov/p-replicator 1.9.0 → 1.10.0

package/.dz-manifest.json

@@ -5,7 +5,7 @@
     "files": [
       {
         "path": "CHANGELOG.md",
-        "sha256": "57b20e3bfd20ed2a97f783d77af52bb6c74ceff5466cacb20ddb058c0a344c48"
+        "sha256": "63092c71ea7153d562c26db68f2774f233b7c5d37e78e4e3cdfaa1546c42668d"
       },
       {
         "path": "KNOWN_LIMITATIONS.md",
@@ -109,7 +109,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "195281e31da3a3e5ecde1b7087ec5904f35d8f2639e6270f2d8ae685adcfa0c5"
+        "sha256": "0cc3dc1f4a07a4e5f3ac3f3a1981dc1766302fbbe3ed5818b04c806d4c476059"
       },
       {
         "path": "src/cli.js",
@@ -117,7 +117,7 @@
       },
       {
         "path": "src/commands/doctor.js",
-        "sha256": "0cbd703649882cca4e484bf696b384291780ba760b7895a3ed2bdc1005ef2e4c"
+        "sha256": "566a8cf554420fbbb734705de283f04d40048ee3eb38f1877304d2cc5e56a47f"
       },
       {
         "path": "src/commands/init.js",
@@ -137,11 +137,11 @@
       },
       {
         "path": "src/commands/verify.js",
-        "sha256": "e6d56e7471825b1bacd0e9dbc85d6c9428547c08ea604c348247e258a607eca0"
+        "sha256": "18f5442af9b3a549dfb284cd0d8aef83ba973bd34a3a04e7c656262baebb0e57"
       },
       {
         "path": "src/utils.js",
-        "sha256": "d4fc297e21682290c15aa64499190ee49b7aa62e69d527c2b5332fffad02f401"
+        "sha256": "43f6abbf447478bae423bce742cfbdace1725946621925eb2ffb3a3ab5b3379e"
       },
       {
         "path": "templates/.claude/agents/doc-validator.md",
@@ -181,7 +181,7 @@
       },
       {
         "path": "templates/.claude/commands/myinsights.md",
-        "sha256": "2e73e822384f976383d9c3313940888b9853f1781d2c39a2fb89825f221149dc"
+        "sha256": "93258a3340f99a0f14b374746ae2934b01d7cefe06d575434868eb98da2d854a"
       },
       {
         "path": "templates/.claude/commands/next.md",
@@ -217,7 +217,7 @@
       },
       {
         "path": "templates/.claude/hooks/check-docs-complete.cjs",
-        "sha256": "13eca8ab8f18325031ca707baa2f7068f8c05484f8e4b12d4129a1023cc7a478"
+        "sha256": "27c05c2adcedc806e395b30b455243193a4fbd0968ce96e415679e1f78db951a"
       },
       {
         "path": "templates/.claude/hooks/check-growth-trace.cjs",
@@ -225,7 +225,7 @@
       },
       {
         "path": "templates/.claude/hooks/check-ports.cjs",
-        "sha256": "e5f2d2bd8899df27c2dfedf76128467becae1868210eb8525a1bad2869a8c78f"
+        "sha256": "1813aa60e4d15c5f6ce54a9b3471c3772efe60c332316183c7ad8f5b619f2169"
       },
       {
         "path": "templates/.claude/hooks/session-insights.cjs",
@@ -237,7 +237,7 @@
       },
       {
         "path": "templates/.claude/hooks/statusline.cjs",
-        "sha256": "948edf98ccabaa4e2dc59078435fb444639aa740baa08967d3a78067e4de3416"
+        "sha256": "465190ab21610357094fd6eba188ba9f7086dc5a933568f40a7f7c715ccd6745"
       },
       {
         "path": "templates/.claude/rules/docker-ports.md",
@@ -293,11 +293,11 @@
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/scripts/assess-code.sh",
-        "sha256": "7e9722c1533f1b7d1a9d11a7add13ac12a2a5f0acfc0ed2cdede2bcf0dab788f"
+        "sha256": "2b10d2972b1379adde9a68ddf8bcdb399b7d65075e458a54523ffd8d99ddc746"
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/scripts/assess-tests.sh",
-        "sha256": "8c6444bdb5ce97e49223cdaa6b1c58ac8fcec710cd6ee8d56de9bc677379bd88"
+        "sha256": "d33e760a0739e9291f6087adf189f01eb7c4a1136d9128390dd6e3ad8eadda6f"
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/scripts/validate-config.json",
@@ -377,7 +377,7 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-hooks-commands.md",
-        "sha256": "d70a0c4977d322602c35c53bf04880177b5dd8f0de2b339d68a0f55993903745"
+        "sha256": "8398f2493434db101476300e514a34bf8124a51eb732cf81923f9a5b5a3d5db4"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-skills.md",
@@ -701,7 +701,7 @@
       },
       {
         "path": "tests/snapshot/baseline.json",
-        "sha256": "0d5af8aadd98bf1f5f07a02b9d6d7a5dd243d4263a5b03de1a249fdaa5111a56"
+        "sha256": "333e554a3840fd02e0e230efe4852bb490beded41f6024c65849060780eebdee"
       },
       {
         "path": "tests/snapshot/templates.test.js",
@@ -711,6 +711,10 @@
         "path": "tests/snapshot/update-baseline.js",
         "sha256": "1f50d0c2ec86f1c865ee6ed8c59725e57c397d487b7a24baf051dc5d4b294459"
       },
+      {
+        "path": "tests/unit/absence-is-not-emptiness.test.js",
+        "sha256": "6c7c1c8086461eac16415ebcccea081d3169212826f23e835cf109d741dd6ac3"
+      },
       {
         "path": "tests/unit/adr-decision-coverage.test.js",
         "sha256": "34f9bf0700b4c45fb905f606567f2a6d3ba152f8f1db29f479963667b298ede4"
@@ -719,13 +723,17 @@
         "path": "tests/unit/adr-scanner-contract.test.js",
         "sha256": "08c8b7d862ae0ddcd72116462458b71d3fe29b09cbaf08fa6a824e22ad6985c8"
       },
+      {
+        "path": "tests/unit/assess-scripts.test.js",
+        "sha256": "b16b015dc28cd5b1d85a8ec0ae54768af1787d2d26e9e5b495c8f791aaa2043f"
+      },
       {
         "path": "tests/unit/autocommit-deletion.test.js",
         "sha256": "87ebe50e164cfa3aeda3d4f04e6b6aa98ab8af44711cbeb94252d770c07ad8ad"
       },
       {
         "path": "tests/unit/check-docs-complete.test.js",
-        "sha256": "0dbc15c1077c9c02766cfa9b1eb357b30b59639f2fa91003e44e3c6485da3e7b"
+        "sha256": "2c6f16a61f0876f637ac492d5fb2af1ea35ad00161fd1468446ea0d08cd97f4b"
       },
       {
         "path": "tests/unit/check-growth-trace.test.js",
@@ -733,7 +741,7 @@
       },
       {
         "path": "tests/unit/check-ports.test.js",
-        "sha256": "72d9eeaa8c47d83fba867722f4b8efc8d079e2d9649e1a20abff46571c2f6f15"
+        "sha256": "d8e2e1f22dadb40fbb03ffbd25ed945fa85fe7b5d49fe0f3597cfc3facc2c118"
       },
       {
         "path": "tests/unit/db-port-rule.test.js",
@@ -747,6 +755,10 @@
         "path": "tests/unit/external-dependency-check.test.js",
         "sha256": "d85109f8e86648d61fc17d0128e9d4881950a70641c246e667d7e54ffc1f0273"
       },
+      {
+        "path": "tests/unit/generated-guard-templates.test.js",
+        "sha256": "928ddb625cc1bbc7dd145992c9a37373da93ae314f39391c67ad7ed064e2c940"
+      },
       {
         "path": "tests/unit/growth-axes-and-compliance.test.js",
         "sha256": "88e4d8c7ae278c46dfce4d89fcbd1dee49c0b545ebc07e459306bfdc70567048"
@@ -763,6 +775,10 @@
         "path": "tests/unit/growth-requirements-bridge.test.js",
         "sha256": "2f560a16f1757df46d5d52e5d29a7aad3e4c327cd07ea9cc69240c7dd1c93f2a"
       },
+      {
+        "path": "tests/unit/guard-forms.test.js",
+        "sha256": "61a219a7748e0b56bc4207eee107815a4b4111fbebd41b68f6d390130506cd42"
+      },
       {
         "path": "tests/unit/hooks-project-anchored.test.js",
         "sha256": "2fa5b44982d72701d7a8486ac24ee3a91c6fa6123ef7303a0e065bf1e60987d7"
@@ -771,9 +787,13 @@
         "path": "tests/unit/hooks-report-failures.test.js",
         "sha256": "35d3fca74c22e1bc88b6fbb25f172b66a21561a947e2b6e90a366d5a854376b8"
       },
+      {
+        "path": "tests/unit/insights-docs-tell-the-truth.test.js",
+        "sha256": "d73ebce2f729911cad452897883b3d55d69e19613c7c1fc7c9bcfa3b5569fc1b"
+      },
       {
         "path": "tests/unit/module-copy-identity.test.js",
-        "sha256": "a1269ad9f68a38faa7710fc63ce850feacb2304996b85ef38237b222815a3532"
+        "sha256": "69a63e511cef4d6cb7ea5669b61746f2fc8af22273bc76539cb304bd27e49de9"
       },
       {
         "path": "tests/unit/pipeline-file-ownership.test.js",
@@ -783,6 +803,10 @@
         "path": "tests/unit/roadmap-one-schema.test.js",
         "sha256": "3e7ac9dbc9796a791fc95c43b4346c6da2455f3c0ace45bbc440502c5957d3dc"
       },
+      {
+        "path": "tests/unit/shipped-suite-context.test.js",
+        "sha256": "fd6128505f3272aa7349d21d18a2494eaa8e5e2397ee85047f9828471c99d721"
+      },
       {
         "path": "tests/unit/skill-paths-prebaked.test.js",
         "sha256": "efb13ca5d2fa68f3186e5af4142509d260d7cf63c902f59e915110bb550887df"
@@ -805,7 +829,7 @@
       },
       {
         "path": "tests/unit/sync-templates-guard.test.js",
-        "sha256": "75e8e0d0d2dfc16f14c586d399b5c9c075cc3a0494c558fe39d8528516185cfe"
+        "sha256": "e4fc7687dcf37d17bf2a059d3248c8c00526c104f6a0f6e104fa9ca6e00039ae"
       },
       {
         "path": "tests/unit/utils.test.js",
@@ -817,5 +841,5 @@
       }
     ]
   },
-  "signature": "OMtz2uZJ+oSOZn3pdPDukLfw/5FD68SgFh/weBKRMzNGQyuBjh7L0durZEyaLu1T0pbbQ+WTQ1eEAi48cGCjBg=="
+  "signature": "ZKPYreIIzuZR6WoZ0J8IBCnwHmSC51tyVihIl3MfZKhVry+nKGokIl0bLu6eKxzGSI0rfDwKfBUPZKHv0iMbDg=="
 }

package/CHANGELOG.md

@@ -5,6 +5,55 @@ All notable changes to `@dzhechkov/p-replicator` are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.10.0] - 2026-08-27
+
+**Every guard in this package can now be shown to fail — and three that could not, now can.**
+MINOR: no pre-shipped contract change, but the exit-code semantics of two shipped scripts changed.
+
+### Fixed — guards that could not refuse
+
+- **`check-ports.cjs` resolved one path in two frames of reference.** A relative argument was
+  re-applied by docker, so `check-ports.cjs projects/01` reported
+  `…/projects/01/projects/01/docker-compose.yml`. Worse, it fired BEFORE docker parsed the file and
+  so MASKED real config errors, and the cure it printed was the invocation that SUCCEEDS. Two edits:
+  absolutise at the boundary, and delete the `cwd:` override — measured to buy nothing on Compose v2+.
+- **The generated aggregate guard was false-green on 3 of 4 inputs**, and the generator writes it
+  into every bootstrapped project. Four declarations minified onto ONE line reported OK; so did a
+  missing file; so did an **unsubstituted `{{…}}` placeholder — forever**. Now 0/1/2, counting
+  occurrences rather than lines.
+- **`assess-code.sh` and `assess-tests.sh` printed red verdicts and exited 0**, while a nonexistent
+  path exited 1 — blindness outranked findings. Now 1 on findings, 2 on could-not-check. Detection
+  unchanged.
+- **`verify` and `doctor` were blind to an EMPTY file.** 31 artifacts truncated to zero bytes and
+  both reported clean; a zero-byte `settings.json` — no hooks wired at all — got a checkmark.
+  Three states now, reported as three.
+
+### Added
+
+- **`dz mutation-gate` enrolment** — `test/mutation-registry.json`, six entries, every mutation
+  demonstrated red by hand before the registry was trusted. Gate: 6/6 PROVEN.
+- **`tests/unit/guard-forms.test.js`** — a layer-1 refusal of five shell shapes that make a guard
+  unable to fail. It caught the aggregate guard, and later confirmed its own fix: inventory 2 → 0.
+- **`check-docs-complete.cjs`** at the Phase 1→2 boundary, with a confidence split: `{{…}}` and
+  TODO/TBD/XXX block; bracketed prose is NAMED but never blocks, because it cannot be told from a
+  mermaid label — and blocking on it refused every project the bundled skill generates.
+
+### Changed — honesty in shipped documents
+
+- `myinsights.md` no longer claims insights are injected "when their tags match the current task".
+  The hook runs at `SessionStart`, before anything has been said, so there is no task to match
+  against; it injects the three most recent entries. The reason and the consequence are both stated,
+  and a test pins the document to the code.
+- The insights carrier now reports THREE states — not started / zero entries / N recorded — in
+  `doctor`, `verify` and the statusline. Absent and empty rendering identically is what let 27
+  recorded insights become 0 across four real projects with every surface reporting fine.
+
+### Verified differently this time
+
+The shipped suite now runs from a TARBALL, not only locally: **288/296 exit 1 → 311/311 exit 0**.
+Two tests are monorepo-only by construction and skip loudly outside it — permitted only because a
+guard asserts they RUN inside, so the skip is provably not taken where it matters.
+
 ## [1.9.0] - 2026-08-27
 
 **MINOR — hooks 8 → 9** (`check-docs-complete`). After `update`, `doctor` and `verify` expect the new count.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/p-replicator",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "P-Replicator — Claude Code toolkit for AI-assisted product development (Vibe Coding). Full /replicate pipeline, 10 modular skills (880K+ chars), /harvest knowledge extraction, swarm agents, quality gates, security patterns, cross-project learning.",
   "main": "src/cli.js",
   "bin": {
@@ -20,8 +20,8 @@
   ],
   "scripts": {
     "prepublishOnly": "node --test tests/snapshot/templates.test.js && node ../../../scripts/prepublish-gate.mjs",
-    "test": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/e2e/lifecycle.test.js tests/snapshot/templates.test.js",
-    "test:unit": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js",
+    "test": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/e2e/lifecycle.test.js tests/snapshot/templates.test.js",
+    "test:unit": "node --test tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js",
     "test:e2e": "node --test tests/e2e/lifecycle.test.js",
     "test:snapshot": "node --test tests/snapshot/templates.test.js",
     "test:doctor": "node bin/cli.js doctor",

package/sbom.json

@@ -15,7 +15,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "57b20e3bfd20ed2a97f783d77af52bb6c74ceff5466cacb20ddb058c0a344c48"
+          "content": "63092c71ea7153d562c26db68f2774f233b7c5d37e78e4e3cdfaa1546c42668d"
         }
       ]
     },
@@ -275,7 +275,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "195281e31da3a3e5ecde1b7087ec5904f35d8f2639e6270f2d8ae685adcfa0c5"
+          "content": "0cc3dc1f4a07a4e5f3ac3f3a1981dc1766302fbbe3ed5818b04c806d4c476059"
         }
       ]
     },
@@ -295,7 +295,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0cbd703649882cca4e484bf696b384291780ba760b7895a3ed2bdc1005ef2e4c"
+          "content": "566a8cf554420fbbb734705de283f04d40048ee3eb38f1877304d2cc5e56a47f"
         }
       ]
     },
@@ -345,7 +345,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e6d56e7471825b1bacd0e9dbc85d6c9428547c08ea604c348247e258a607eca0"
+          "content": "18f5442af9b3a549dfb284cd0d8aef83ba973bd34a3a04e7c656262baebb0e57"
         }
       ]
     },
@@ -355,7 +355,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d4fc297e21682290c15aa64499190ee49b7aa62e69d527c2b5332fffad02f401"
+          "content": "43f6abbf447478bae423bce742cfbdace1725946621925eb2ffb3a3ab5b3379e"
         }
       ]
     },
@@ -455,7 +455,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2e73e822384f976383d9c3313940888b9853f1781d2c39a2fb89825f221149dc"
+          "content": "93258a3340f99a0f14b374746ae2934b01d7cefe06d575434868eb98da2d854a"
         }
       ]
     },
@@ -545,7 +545,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13eca8ab8f18325031ca707baa2f7068f8c05484f8e4b12d4129a1023cc7a478"
+          "content": "27c05c2adcedc806e395b30b455243193a4fbd0968ce96e415679e1f78db951a"
         }
       ]
     },
@@ -565,7 +565,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e5f2d2bd8899df27c2dfedf76128467becae1868210eb8525a1bad2869a8c78f"
+          "content": "1813aa60e4d15c5f6ce54a9b3471c3772efe60c332316183c7ad8f5b619f2169"
         }
       ]
     },
@@ -595,7 +595,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "948edf98ccabaa4e2dc59078435fb444639aa740baa08967d3a78067e4de3416"
+          "content": "465190ab21610357094fd6eba188ba9f7086dc5a933568f40a7f7c715ccd6745"
         }
       ]
     },
@@ -735,7 +735,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7e9722c1533f1b7d1a9d11a7add13ac12a2a5f0acfc0ed2cdede2bcf0dab788f"
+          "content": "2b10d2972b1379adde9a68ddf8bcdb399b7d65075e458a54523ffd8d99ddc746"
         }
       ]
     },
@@ -745,7 +745,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8c6444bdb5ce97e49223cdaa6b1c58ac8fcec710cd6ee8d56de9bc677379bd88"
+          "content": "d33e760a0739e9291f6087adf189f01eb7c4a1136d9128390dd6e3ad8eadda6f"
         }
       ]
     },
@@ -945,7 +945,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d70a0c4977d322602c35c53bf04880177b5dd8f0de2b339d68a0f55993903745"
+          "content": "8398f2493434db101476300e514a34bf8124a51eb732cf81923f9a5b5a3d5db4"
         }
       ]
     },
@@ -1755,7 +1755,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0d5af8aadd98bf1f5f07a02b9d6d7a5dd243d4263a5b03de1a249fdaa5111a56"
+          "content": "333e554a3840fd02e0e230efe4852bb490beded41f6024c65849060780eebdee"
         }
       ]
     },
@@ -1779,6 +1779,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/absence-is-not-emptiness.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "6c7c1c8086461eac16415ebcccea081d3169212826f23e835cf109d741dd6ac3"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/adr-decision-coverage.test.js",
@@ -1799,6 +1809,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/assess-scripts.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b16b015dc28cd5b1d85a8ec0ae54768af1787d2d26e9e5b495c8f791aaa2043f"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/autocommit-deletion.test.js",
@@ -1815,7 +1835,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0dbc15c1077c9c02766cfa9b1eb357b30b59639f2fa91003e44e3c6485da3e7b"
+          "content": "2c6f16a61f0876f637ac492d5fb2af1ea35ad00161fd1468446ea0d08cd97f4b"
         }
       ]
     },
@@ -1835,7 +1855,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "72d9eeaa8c47d83fba867722f4b8efc8d079e2d9649e1a20abff46571c2f6f15"
+          "content": "d8e2e1f22dadb40fbb03ffbd25ed945fa85fe7b5d49fe0f3597cfc3facc2c118"
         }
       ]
     },
@@ -1869,6 +1889,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/generated-guard-templates.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "928ddb625cc1bbc7dd145992c9a37373da93ae314f39391c67ad7ed064e2c940"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/growth-axes-and-compliance.test.js",
@@ -1909,6 +1939,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/guard-forms.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "61a219a7748e0b56bc4207eee107815a4b4111fbebd41b68f6d390130506cd42"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/hooks-project-anchored.test.js",
@@ -1929,13 +1969,23 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/insights-docs-tell-the-truth.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d73ebce2f729911cad452897883b3d55d69e19613c7c1fc7c9bcfa3b5569fc1b"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/module-copy-identity.test.js",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a1269ad9f68a38faa7710fc63ce850feacb2304996b85ef38237b222815a3532"
+          "content": "69a63e511cef4d6cb7ea5669b61746f2fc8af22273bc76539cb304bd27e49de9"
         }
       ]
     },
@@ -1959,6 +2009,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/shipped-suite-context.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "fd6128505f3272aa7349d21d18a2494eaa8e5e2397ee85047f9828471c99d721"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/skill-paths-prebaked.test.js",
@@ -2015,7 +2075,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "75e8e0d0d2dfc16f14c586d399b5c9c075cc3a0494c558fe39d8528516185cfe"
+          "content": "e4fc7687dcf37d17bf2a059d3248c8c00526c104f6a0f6e104fa9ca6e00039ae"
         }
       ]
     },

package/src/commands/doctor.js

@@ -6,7 +6,7 @@ const { execFileSync } = require('child_process');
 const {
   green, red, yellow, cyan, bold, dim,
   info, success, warn, error: logError,
-  readManifest, fileExists,
+  readManifest, fileExists, artifactState,
   MANIFEST_FILE, COMPONENTS,
 } = require('../utils');
 
@@ -29,6 +29,22 @@ function run(options) {
   function fail(msg) { console.log(`  ${red('\u2717')} ${msg}`); issues++; }
   function hint(msg) { console.log(`  ${yellow('!')} ${msg}`); warnings++; }
 
+  /**
+   * One reporter for every component, because a two-way branch cannot say three things.
+   *
+   * The first version of this change swapped the CONDITION to artifactState and left the else
+   * branch intact, so a whitespace-only artifact was reported as "missing" — the exact collapse
+   * AR-4 forbids. And settings.json and the hooks were still on fileExists, so a ZERO-BYTE
+   * settings.json (no hooks wired at all) and a zero-byte hook both received a checkmark.
+   */
+  function reportArtifact(label, filePath, missingNote) {
+    const state = artifactState(filePath);
+    if (state === 'present') { pass(label); return; }
+    if (state === 'empty') { fail(`${label} \u2014 EMPTY, cannot load`); return; }
+    fail(`${label} \u2014 missing${missingNote ? ' (' + missingNote + ')' : ''}`);
+  }
+
+
   console.log(bold('P-Replicator \u2014 Health Check'));
   console.log('');
 
@@ -59,11 +75,7 @@ function run(options) {
   console.log(bold(`Skills (expected ${EXPECTED_SKILLS.length}):`));
   for (const skill of EXPECTED_SKILLS) {
     const skillPath = path.join(claudeDir, 'skills', skill, 'SKILL.md');
-    if (fileExists(skillPath)) {
-      pass(skill);
-    } else {
-      fail(`${skill} \u2014 SKILL.md missing`);
-    }
+    reportArtifact(skill, skillPath, 'SKILL.md');
   }
   console.log('');
 
@@ -71,11 +83,7 @@ function run(options) {
   console.log(bold(`Commands (expected ${EXPECTED_COMMANDS.length}):`));
   for (const cmd of EXPECTED_COMMANDS) {
     const cmdPath = path.join(claudeDir, 'commands', `${cmd}.md`);
-    if (fileExists(cmdPath)) {
-      pass(`/${cmd}`);
-    } else {
-      fail(`/${cmd} \u2014 ${cmd}.md missing`);
-    }
+    reportArtifact(`/${cmd}`, cmdPath, undefined);
   }
   console.log('');
 
@@ -83,11 +91,7 @@ function run(options) {
   console.log(bold(`Agents (expected ${EXPECTED_AGENTS.length}):`));
   for (const agent of EXPECTED_AGENTS) {
     const agentPath = path.join(claudeDir, 'agents', `${agent}.md`);
-    if (fileExists(agentPath)) {
-      pass(agent);
-    } else {
-      fail(`${agent} \u2014 ${agent}.md missing`);
-    }
+    reportArtifact(agent, agentPath, undefined);
   }
   console.log('');
 
@@ -95,22 +99,14 @@ function run(options) {
   console.log(bold(`Rules (expected ${EXPECTED_RULES.length}):`));
   for (const rule of EXPECTED_RULES) {
     const rulePath = path.join(claudeDir, 'rules', `${rule}.md`);
-    if (fileExists(rulePath)) {
-      pass(rule);
-    } else {
-      fail(`${rule} \u2014 ${rule}.md missing`);
-    }
+    reportArtifact(rule, rulePath, undefined);
   }
   console.log('');
 
   // ── 6b) Settings (hooks config) ─────────────────────────────────────────
   console.log(bold('Hooks (settings.json):'));
   const settingsPath = path.join(claudeDir, 'settings.json');
-  if (fileExists(settingsPath)) {
-    pass('settings.json');
-  } else {
-    fail('settings.json — missing (SessionStart + Stop hooks not configured)');
-  }
+  reportArtifact('settings.json', settingsPath, 'SessionStart + Stop hooks not configured');
   console.log('');
 
   // ── 6c) Hook scripts (cross-platform Node, v1.4.1+) ─────────────────────
@@ -119,11 +115,7 @@ function run(options) {
     console.log(bold(`Hook scripts (expected ${hookKeys.length}):`));
     for (const hook of hookKeys) {
       const hookPath = path.join(claudeDir, 'hooks', `${hook}.cjs`);
-      if (fileExists(hookPath)) {
-        pass(`${hook}.cjs`);
-      } else {
-        fail(`${hook}.cjs — missing (referenced by settings.json)`);
-      }
+      reportArtifact(`${hook}.cjs`, hookPath, 'referenced by settings.json');
     }
     console.log('');
   }
@@ -148,6 +140,26 @@ function run(options) {
   }
   console.log('');
 
+  // ── The insights carrier: THREE states, and none of them fails ───────────
+  //
+  // A project that has recorded no insight is a NEW project, and a check that refuses a new project
+  // is a check people disable — taking the real signal with it. The defect was never the emptiness:
+  // it was that ABSENT and EMPTY rendered identically, so a carrier that had never been created
+  // looked exactly like one being used and found empty. MEASURED across four real projects on one
+  // machine: 11 -> 10 -> 6 -> 0 insights, with every surface reporting OK throughout.
+  const insightsIndex = path.join(claudeDir, 'insights', 'index.md');
+  const insightsState = artifactState(insightsIndex);
+  if (insightsState === 'missing') {
+    hint('insights carrier: NOT STARTED — no .claude/insights/index.md. Record one with /myinsights');
+  } else if (insightsState === 'empty') {
+    hint('insights carrier: EXISTS but holds ZERO entries — nothing is injected at SessionStart');
+  } else {
+    const entries = (fs.readFileSync(insightsIndex, 'utf-8')
+      .match(/^##\s+\d{4}-\d{2}-\d{2}/gm) || []).length;
+    pass('insights carrier: ' + entries + ' entr' + (entries === 1 ? 'y' : 'ies') + ' recorded');
+  }
+  console.log('');
+
   // ── 8) Summary ──────────────────────────────────────────────────────────
   console.log(bold('\u2500'.repeat(50)));
   if (issues === 0 && warnings === 0) {