@event4u/agent-config 14.13.0 → 14.14.1

package/dist/mcp/server.mjs

@@ -18969,6 +18969,11 @@ var init_dashboard_mode = __esm({
 import * as fs23 from "node:fs";
 import * as path22 from "node:path";
 import { fileURLToPath as fileURLToPath17, pathToFileURL as pathToFileURL9 } from "node:url";
+function is_blocked_quickwin(design_validated, capability_gap, blocker_class2) {
+  if (design_validated === null || design_validated === "") return false;
+  if (capability_gap !== "none") return false;
+  return QUICKWIN_BLOCKER_CLASSES.includes(blocker_class2 ?? "");
+}
 function _isDir8(p) {
   try {
     return fs23.statSync(p).isDirectory();
@@ -19063,9 +19068,27 @@ function _parseIso(s) {
   return Number.isNaN(d.getTime()) ? null : d;
 }
 function scan(root, today) {
-  return scan_dir(path22.join(root, STUB_DIR), today);
+  return scan_dir(path22.join(root, STUB_DIR), today, release_dates(root));
 }
-function scan_dir(base, today) {
+function release_dates(root) {
+  const out = [];
+  for (const rel of CHANGELOG_ERAS) {
+    let text;
+    try {
+      text = fs23.readFileSync(path22.join(root, rel), "utf8");
+    } catch {
+      continue;
+    }
+    for (const m of text.matchAll(RELEASE_HEADING)) {
+      if (m[1] !== void 0) out.push(m[1]);
+    }
+  }
+  return out;
+}
+function releases_since(opened, dates) {
+  return dates.filter((d) => d > opened).length;
+}
+function scan_dir(base, today, releaseDates = []) {
   if (!_isDir8(base)) return [];
   const now = _parseIso(today);
   const out = [];
@@ -19086,6 +19109,10 @@ function scan_dir(base, today) {
     const review_by = _scalar(front, "review_by");
     const reviewed_at = _scalar(front, "reviewed_at");
     const probeVal = _scalar(front, "probe");
+    const design_validated = _scalar(front, "design_validated");
+    const capability_gap = _scalar(front, "capability_gap");
+    const blocker_class2 = _scalar(front, "blocker_class");
+    const blocker_opened = _scalar(front, "blocker_opened");
     const shape = text.includes(TRANSFER_MARKER) ? "transfer" : "orgmode";
     let overdue = false;
     let days_overdue = null;
@@ -19105,7 +19132,13 @@ function scan_dir(base, today) {
       has_probe_heading: /^#{1,4} *(Probe|Promotion)/m.test(text),
       owner_decisions: count_owner_decisions(text),
       overdue,
-      days_overdue
+      days_overdue,
+      design_validated,
+      capability_gap,
+      blocker_class: blocker_class2,
+      blocker_opened,
+      releases_since_blocked: blocker_opened === null ? null : releases_since(blocker_opened, releaseDates),
+      blocked_quickwin: is_blocked_quickwin(design_validated, capability_gap, blocker_class2)
     });
   }
   return out;
@@ -19115,6 +19148,7 @@ function counts(records) {
     overdue: records.filter((r) => r.overdue).length,
     owner_decisions: records.reduce((s, r) => s + r.owner_decisions, 0),
     missing_review_by: records.filter((r) => r.review_by === null).length,
+    blocked_quickwin: records.filter((r) => r.blocked_quickwin).length,
     total: records.length
   };
 }
@@ -19178,6 +19212,20 @@ function main9(argv = process.argv.slice(2)) {
     process.stdout.write(":\n");
     for (const r of withDecisions) {
       process.stdout.write(`      ${r.file}  (${r.owner_decisions})
+`);
+    }
+  }
+  const quickwins = records.filter((r) => r.blocked_quickwin);
+  if (quickwins.length > 0) {
+    process.stdout.write(
+      `
+  \u{1F513}  ${quickwins.length} BLOCKED QUICK-WIN(S) \u2014 design validated, no capability gap,
+      held by an estate or budget decision rather than a product one:
+`
+    );
+    for (const r of quickwins) {
+      const since = r.releases_since_blocked === null ? "no `blocker_opened:`" : `${String(r.releases_since_blocked)} release(s) since ${r.blocker_opened}`;
+      process.stdout.write(`      ${r.file}  (${r.blocker_class}, ${since})
 `);
     }
   }
@@ -19227,7 +19275,7 @@ function headerFragment(stubsDir, today) {
   }
   return ` \xB7 **${overdue}** overdue stub${overdue !== 1 ? "s" : ""}, **${decisions}** owner decision${decisions !== 1 ? "s" : ""} \u2192 \`agent-config stubs:due\``;
 }
-var STUB_DIR, CADENCE_DAYS, TRANSFER_MARKER, _HERE6;
+var STUB_DIR, CADENCE_DAYS, TRANSFER_MARKER, _HERE6, QUICKWIN_BLOCKER_CLASSES, CHANGELOG_ERAS, RELEASE_HEADING;
 var init_stubs_due = __esm({
   "src/agent-src/scripts/stubs_due.ts"() {
     "use strict";
@@ -19235,6 +19283,9 @@ var init_stubs_due = __esm({
     CADENCE_DAYS = { transfer: 30, orgmode: 120 };
     TRANSFER_MARKER = "drain-run transfer";
     _HERE6 = path22.resolve(fileURLToPath17(import.meta.url));
+    QUICKWIN_BLOCKER_CLASSES = ["estate", "budget"];
+    CHANGELOG_ERAS = ["CHANGELOG.md", "docs/archive/CHANGELOG-pre-14.12.0.md"];
+    RELEASE_HEADING = /^## \[\d+\.\d+\.\d+\][^\n]*\((\d{4}-\d{2}-\d{2})\)\s*$/gm;
     if (_isCliEntry9() || process.argv[1] === _HERE6) {
       process.exitCode = main9();
     }
@@ -19348,15 +19399,21 @@ function guardedBaselineStaleness(items, repo_root2) {
     if (trigger === "") {
       continue;
     }
-    for (const token of trigger.split(/[\s,]+/).filter((t) => t !== "")) {
-      if (!token.includes("/")) {
-        unverifiable.push(`line ${it.line} (${it.label}): recheck_when \`${token}\``);
-      } else if (fs24.existsSync(path23.join(repo_root2, token))) {
+    const tokens = trigger.split(/[\s,]+/).filter((t) => t !== "");
+    const paths = tokens.filter((t) => t.includes("/"));
+    for (const token of paths) {
+      if (fs24.existsSync(path23.join(repo_root2, token))) {
         stale.push(
           `line ${it.line} (${it.label}): recheck_when \`${token}\` now exists \u2014 re-verify against the real mechanism`
         );
       }
     }
+    if (paths.length > 0) {
+      continue;
+    }
+    for (const token of tokens) {
+      unverifiable.push(`line ${it.line} (${it.label}): recheck_when \`${token}\``);
+    }
   }
   return { stale, unverifiable };
 }
@@ -19435,8 +19492,8 @@ __export(update_roadmap_progress_exports, {
   collect: () => collect,
   collect_bundles: () => collect_bundles,
   count_checkboxes: () => count_checkboxes,
-  is_draft: () => is_draft,
   is_roadmap_candidate: () => is_roadmap_candidate,
+  is_unscheduled: () => is_unscheduled,
   main: () => main10,
   merge_gated_pending: () => merge_gated_pending,
   parse_blockers: () => parse_blockers,
@@ -19492,8 +19549,8 @@ function _stripQuotes2(s) {
   out = out.replace(/^'+/, "").replace(/'+$/, "");
   return out;
 }
-function is_draft(fm) {
-  return DRAFT_VALUES.has((fm["status"] ?? "").toLowerCase());
+function is_unscheduled(fm) {
+  return UNSCHEDULED_VALUES.has((fm["status"] ?? "").toLowerCase());
 }
 function is_roadmap_name(name) {
   if (EXCLUDE_NAMES.has(name)) {
@@ -19785,7 +19842,7 @@ function collect(roadmap_root) {
       continue;
     }
     const text = fs25.readFileSync(p, { encoding: "utf-8" });
-    if (is_draft(parse_frontmatter2(text))) {
+    if (is_unscheduled(parse_frontmatter2(text))) {
       continue;
     }
     const stats = parse_roadmap(p, roadmap_root);
@@ -19815,7 +19872,7 @@ function collect_parked(roadmap_root) {
     } catch {
       continue;
     }
-    if (is_draft(parse_frontmatter2(text))) {
+    if (is_unscheduled(parse_frontmatter2(text))) {
       continue;
     }
     const cell = resume_cell(text);
@@ -20270,7 +20327,7 @@ function _isCliEntry10() {
     return false;
   }
 }
-var _HERE7, _require3, CHECKBOX_RE, PHASE_RE, TITLE_RE, EXCLUDE_NAMES, EXCLUDE_PREFIXES, EXCLUDE_DIRS, FRONTMATTER_RE, DRAFT_VALUES, MERGE_GATED_RE, PR_NUM_RE, PhaseStats, RoadmapStats, FENCED_CODE_RE, BLOCKERS_SECTION_RE, BLOCKER_HEADING_RE, NEXT_H2_RE, LEGACY_BLOCKED_UNTIL_RE, BLOCKER_FIELD_RE, RESUME_STATEMENT, RESUME_LOOSE, ArgparseExit, _PROG5;
+var _HERE7, _require3, CHECKBOX_RE, PHASE_RE, TITLE_RE, EXCLUDE_NAMES, EXCLUDE_PREFIXES, EXCLUDE_DIRS, FRONTMATTER_RE, UNSCHEDULED_VALUES, MERGE_GATED_RE, PR_NUM_RE, PhaseStats, RoadmapStats, FENCED_CODE_RE, BLOCKERS_SECTION_RE, BLOCKER_HEADING_RE, NEXT_H2_RE, LEGACY_BLOCKED_UNTIL_RE, BLOCKER_FIELD_RE, RESUME_STATEMENT, RESUME_LOOSE, ArgparseExit, _PROG5;
 var init_update_roadmap_progress = __esm({
   "src/agent-src/scripts/update_roadmap_progress.ts"() {
     "use strict";
@@ -20292,7 +20349,7 @@ var init_update_roadmap_progress = __esm({
     EXCLUDE_PREFIXES = ["open-questions"];
     EXCLUDE_DIRS = /* @__PURE__ */ new Set(["archive", "skipped", "stubs", "later"]);
     FRONTMATTER_RE = /^---\n([\s\S]*?)\n---[ \t\n\r\f\v]*\n/;
-    DRAFT_VALUES = /* @__PURE__ */ new Set(["draft"]);
+    UNSCHEDULED_VALUES = /* @__PURE__ */ new Set(["draft", "carrier"]);
     MERGE_GATED_RE = /merge-gated/i;
     PR_NUM_RE = /pr[ \t\n\r\f\v]*[=#:]?[ \t\n\r\f\v]*#?[ \t\n\r\f\v]*(\d+)/gi;
     PhaseStats = class {
@@ -20432,6 +20489,7 @@ __export(archive_completed_roadmaps_exports, {
   _git_mv: () => _git_mv,
   _inbound_ref_rewrite: () => _inbound_ref_rewrite,
   _is_frozen_record: () => _is_frozen_record,
+  _relatesTo: () => _relatesTo,
   _repo_root: () => _repo_root,
   archive_completed: () => archive_completed,
   deferralProblems: () => deferralProblems,
@@ -33689,6 +33747,115 @@ var init_rule_scope = __esm({
   }
 });
 
+// src/scripts/_cli/_doctor_strict.ts
+function eprint(msg) {
+  process.stderr.write(`${msg}
+`);
+}
+function strictTripping(level) {
+  return level === "warn" ? /* @__PURE__ */ new Set(["fail", "warn"]) : /* @__PURE__ */ new Set(["fail"]);
+}
+function canProceed(driftPresent, checks) {
+  return !driftPresent && !checks.some((c) => c["status"] === "fail");
+}
+function validateStrictLevel(level) {
+  if (!STRICT_LEVELS.has(level)) {
+    throw new StrictLevelError(
+      `argument --strict-level: invalid choice: '${level}' (choose from 'fail', 'warn')`
+    );
+  }
+}
+function strictExit(opts, checks, driftPresent) {
+  if (!opts.strict) {
+    return null;
+  }
+  const tripping = strictTripping(opts.strict_level);
+  const tripped = checks.filter((c) => tripping.has(c["status"]));
+  if (!driftPresent && tripped.length === 0) {
+    return 0;
+  }
+  if (process.env[STRICT_KILL_SWITCH] === "1") {
+    eprint(
+      `\u26A0\uFE0F  doctor --strict: ${String(tripped.length)} finding(s) at or above '${opts.strict_level}'` + (driftPresent ? " plus manifest drift" : "") + `, but ${STRICT_KILL_SWITCH}=1 suppressed the failing exit. The findings above still stand; unset it to restore the gate.`
+    );
+    return 0;
+  }
+  return 1;
+}
+function attachProceedFields(payload, driftPresent, checks) {
+  const proceed = canProceed(driftPresent, checks);
+  payload["can_proceed"] = proceed;
+  payload["status"] = proceed ? checks.some((c) => c["status"] === "warn") ? "warn" : "ok" : "fail";
+}
+function validateStrictLevelOr(level, onError) {
+  try {
+    validateStrictLevel(level);
+  } catch (e) {
+    if (e instanceof StrictLevelError) onError(e.message);
+    throw e;
+  }
+}
+var StrictLevelError, STRICT_DEFAULT_LEVEL, STRICT_LEVELS, STRICT_KILL_SWITCH, STRICT_STORE_TRUE, STRICT_VALUE_FLAGS, STRICT_DEFAULTS, STRICT_USAGE;
+var init_doctor_strict = __esm({
+  "src/scripts/_cli/_doctor_strict.ts"() {
+    "use strict";
+    StrictLevelError = class extends Error {
+    };
+    STRICT_DEFAULT_LEVEL = "fail";
+    STRICT_LEVELS = /* @__PURE__ */ new Set(["fail", "warn"]);
+    STRICT_KILL_SWITCH = "AGENT_CONFIG_DOCTOR_NO_FAIL";
+    STRICT_STORE_TRUE = { "--strict": "strict" };
+    STRICT_VALUE_FLAGS = { "--strict-level": "strict_level" };
+    STRICT_DEFAULTS = { strict: false, strict_level: STRICT_DEFAULT_LEVEL };
+    STRICT_USAGE = "                           [--strict] [--strict-level {fail,warn}]\n";
+  }
+});
+
+// src/scripts/_cli/_doctor_emit.ts
+function print(line = "") {
+  process.stdout.write(`${line}
+`);
+}
+function _emit_text(project_root, missing, modified, foreign, tag_drift) {
+  const total = missing.length + modified.length + foreign.length + tag_drift.length;
+  if (total === 0) {
+    print(`\u2705  doctor: manifest matches filesystem under ${project_root}`);
+    return;
+  }
+  print(`\u26A0\uFE0F   doctor: ${total} drift item(s) under ${project_root}`);
+  const groups = [
+    ["missing", missing],
+    ["modified", modified],
+    ["foreign", foreign],
+    ["tag-drift", tag_drift]
+  ];
+  for (const [label, items] of groups) {
+    if (items.length === 0) {
+      continue;
+    }
+    print(`
+  ${label} (${items.length}):`);
+    for (const it of items) {
+      const tool = it["tool"] || "?";
+      print(`    \xB7 [${tool}] ${it["path"]}`);
+      if (label === "tag-drift") {
+        const found = it["found"] || "(missing)";
+        const expected = "expected" in it ? it["expected"] : PACKAGE_TAG_ID;
+        print(`        expected: ${expected}`);
+        print(`        found:    ${found}`);
+      }
+      print(`        fix: ${it["fix"]}`);
+    }
+  }
+}
+var PACKAGE_TAG_ID;
+var init_doctor_emit = __esm({
+  "src/scripts/_cli/_doctor_emit.ts"() {
+    "use strict";
+    PACKAGE_TAG_ID = "event4u/agent-config";
+  }
+});
+
 // src/scripts/_cli/cmd_doctor.ts
 var cmd_doctor_exports = {};
 __export(cmd_doctor_exports, {
@@ -33700,7 +33867,7 @@ __export(cmd_doctor_exports, {
   MCP_BETA_GATES: () => MCP_BETA_GATES,
   MIN_PYTHON: () => MIN_PYTHON,
   NO_FRONTMATTER: () => NO_FRONTMATTER,
-  PACKAGE_TAG_ID: () => PACKAGE_TAG_ID,
+  PACKAGE_TAG_ID: () => PACKAGE_TAG_ID2,
   REPAIR_IDS: () => REPAIR_IDS,
   STATUS_SYMBOLS: () => STATUS_SYMBOLS,
   _check_bridge_drift: () => _check_bridge_drift,
@@ -33898,10 +34065,10 @@ function yamlSafeLoad2(text) {
     return void 0;
   }
 }
-function print(line = "") {
+function print2(line = "") {
   process16.stdout.write(line + "\n");
 }
-function eprint(line = "") {
+function eprint2(line = "") {
   process16.stderr.write(line + "\n");
 }
 function _resolve_project_root(arg) {
@@ -33953,22 +34120,22 @@ function _detect_wrapper(project_root) {
   };
 }
 function _emit_trace_text(root, anchor, trace, origin) {
-  print(`  \u{1F4CD}  start: ${process16.cwd()}`);
-  print(`  \u{1F4CD}  origin: ${origin}`);
+  print2(`  \u{1F4CD}  start: ${process16.cwd()}`);
+  print2(`  \u{1F4CD}  origin: ${origin}`);
   if (trace.length > 0) {
-    print("  trace:");
+    print2("  trace:");
     for (const record of trace) {
       const hit = record.hit;
       const symbol = hit ? "\u2705" : "\xB7";
       const tag = `[${record.pass}]`;
       const anchor_str = hit ? ` \u2192 ${hit}` : "";
-      print(`    ${symbol} ${tag} ${record.ancestor}${anchor_str}  (${record.reason})`);
+      print2(`    ${symbol} ${tag} ${record.ancestor}${anchor_str}  (${record.reason})`);
     }
   }
   if (root !== null) {
-    print(`  \u{1F4CD}  resolved root: ${root} (anchor: ${anchor || "n/a"})`);
+    print2(`  \u{1F4CD}  resolved root: ${root} (anchor: ${anchor || "n/a"})`);
   } else {
-    print("  \u26A0\uFE0F   no anchor found in chain");
+    print2("  \u26A0\uFE0F   no anchor found in chain");
   }
 }
 function _emit_trace_json(root, anchor, trace, origin) {
@@ -33979,32 +34146,32 @@ function _emit_trace_json(root, anchor, trace, origin) {
     anchor,
     trace
   };
-  print(_jsonDumpsIndentAscii(payload, 2));
+  print2(_jsonDumpsIndentAscii(payload, 2));
 }
 function _emit_context_text(ctx) {
-  print(`  \u{1F4CD}  project_root: ${ctx["project_root"]}  (origin: ${ctx["origin"]})`);
-  print(`  \u{1F4E6}  install_mode: ${ctx["install_mode"]}  (source: ${ctx["install_mode_source"]})`);
+  print2(`  \u{1F4CD}  project_root: ${ctx["project_root"]}  (origin: ${ctx["origin"]})`);
+  print2(`  \u{1F4E6}  install_mode: ${ctx["install_mode"]}  (source: ${ctx["install_mode_source"]})`);
   const env_pin = ctx["env_pin"];
   if (env_pin) {
     const marker = ctx["root_override"] ? " (--root override)" : "";
-    print(`  \u{1F512}  env_pin: ${env_pin}${marker}`);
+    print2(`  \u{1F512}  env_pin: ${env_pin}${marker}`);
   } else {
-    print("  \u{1F512}  env_pin: (unset)");
+    print2("  \u{1F512}  env_pin: (unset)");
   }
   const layers = ctx["settings_layers"] || [];
   if (layers.length > 0) {
-    print(`  \u{1F4D1}  settings layers (${layers.length}):`);
+    print2(`  \u{1F4D1}  settings layers (${layers.length}):`);
     for (const layer of layers) {
-      print(`        - ${layer}`);
+      print2(`        - ${layer}`);
     }
   } else {
-    print("  \u{1F4D1}  settings layers: (none)");
+    print2("  \u{1F4D1}  settings layers: (none)");
   }
   const wrapper = ctx["wrapper"] || {};
   if (wrapper["exists"]) {
-    print(`  \u{1F9E9}  wrapper: ${wrapper["path"]}  (embedded root: ${wrapper["embedded_root"]})`);
+    print2(`  \u{1F9E9}  wrapper: ${wrapper["path"]}  (embedded root: ${wrapper["embedded_root"]})`);
   } else {
-    print(`  \u{1F9E9}  wrapper: (not present at ${wrapper["path"]})`);
+    print2(`  \u{1F9E9}  wrapper: (not present at ${wrapper["path"]})`);
   }
 }
 function _resolve_path(project_root, raw) {
@@ -34187,12 +34354,12 @@ function _classify2(records) {
       continue;
     }
     const tag = _read_inline_package_tag(target);
-    if (!(tag instanceof _Sentinel) && tag !== PACKAGE_TAG_ID) {
+    if (!(tag instanceof _Sentinel) && tag !== PACKAGE_TAG_ID2) {
       tag_drift.push({
         tool: tool_id,
         path: String(target),
         kind,
-        expected: PACKAGE_TAG_ID,
+        expected: PACKAGE_TAG_ID2,
         found: tag === null ? "" : tag,
         fix: _fix_hint("tag-drift", kind)
       });
@@ -34799,7 +34966,7 @@ function _check_stale_orphans() {
           continue;
         }
         const tag = _read_inline_package_tag(md);
-        if (tag instanceof _Sentinel || tag !== PACKAGE_TAG_ID) {
+        if (tag instanceof _Sentinel || tag !== PACKAGE_TAG_ID2) {
           continue;
         }
         orphan_count += 1;
@@ -35827,17 +35994,17 @@ function _run_no_manifest(opts, project_root, origin, bridge_present) {
   if (opts.json) {
     _emit_json(project_root, [], [], [], [], checks, origin);
   } else if (opts.check === null) {
-    print(`  \u{1F4CD}  project_root: ${project_root} (origin: ${origin})`);
+    print2(`  \u{1F4CD}  project_root: ${project_root} (origin: ${origin})`);
     if (bridge_present) {
-      print(
+      print2(
         "  \u2139\uFE0F   global-only consumer: install marker present, no project lockfile (expected under ADR-020)"
       );
-      print(
+      print2(
         "      project-manifest checks are skipped \u2014 they apply only to project-local distributed tools"
       );
     } else {
-      eprint(`  \u26A0\uFE0F   no project lockfile and no consumer install marker at ${project_root}`);
-      eprint(
+      eprint2(`  \u26A0\uFE0F   no project lockfile and no consumer install marker at ${project_root}`);
+      eprint2(
         "      run `agent-config init` (project install) or `agent-config refresh --project` (global-only consumer)"
       );
     }
@@ -35853,6 +36020,8 @@ function _run_no_manifest(opts, project_root, origin, bridge_present) {
     }
     return fail_check ? 1 : 0;
   }
+  const sx = strictExit(opts, checks, false);
+  if (sx !== null) return bridge_present ? sx : 2;
   if (opts.ci && bridge_present) {
     return fail_check ? 1 : 0;
   }
@@ -35871,66 +36040,36 @@ function _emit_json(project_root, missing, modified, foreign, tag_drift, checks
   }
   if (checks !== null) {
     payload["checks"] = checks;
+    const drift = missing.length + modified.length + foreign.length + tag_drift.length;
+    attachProceedFields(payload, drift > 0, checks);
     if (checks.some((c) => c["id"] === "detection")) {
       payload["detection"] = detectionJson(_detection_report(project_root));
     }
   }
-  print(_jsonDumpsIndentAscii(payload, 2));
+  print2(_jsonDumpsIndentAscii(payload, 2));
 }
 function _emit_checks_text(checks) {
   if (checks.length === 0) {
     return;
   }
-  print("checks:");
+  print2("checks:");
   for (const c of checks) {
     const sym = STATUS_SYMBOLS[c["status"]] ?? "?";
-    print(`  ${sym} ${c["id"]}: ${c["message"]}`);
+    print2(`  ${sym} ${c["id"]}: ${c["message"]}`);
     if (c["status"] !== "ok" && c["remedy"]) {
-      print(`      fix: ${c["remedy"]}`);
+      print2(`      fix: ${c["remedy"]}`);
     }
   }
-  print("");
+  print2("");
 }
 function _emit_detection_text(project_root, checks) {
   if (!checks.some((c) => c["id"] === "detection")) {
     return;
   }
   for (const line of renderDetectionLines(_detection_report(project_root))) {
-    print(line);
-  }
-  print("");
-}
-function _emit_text(project_root, missing, modified, foreign, tag_drift) {
-  const total = missing.length + modified.length + foreign.length + tag_drift.length;
-  if (total === 0) {
-    print(`\u2705  doctor: manifest matches filesystem under ${project_root}`);
-    return;
-  }
-  print(`\u26A0\uFE0F   doctor: ${total} drift item(s) under ${project_root}`);
-  const groups = [
-    ["missing", missing],
-    ["modified", modified],
-    ["foreign", foreign],
-    ["tag-drift", tag_drift]
-  ];
-  for (const [label, items] of groups) {
-    if (items.length === 0) {
-      continue;
-    }
-    print(`
-  ${label} (${items.length}):`);
-    for (const it of items) {
-      const tool = it["tool"] || "?";
-      print(`    \xB7 [${tool}] ${it["path"]}`);
-      if (label === "tag-drift") {
-        const found = it["found"] || "(missing)";
-        const expected = "expected" in it ? it["expected"] : PACKAGE_TAG_ID;
-        print(`        expected: ${expected}`);
-        print(`        found:    ${found}`);
-      }
-      print(`        fix: ${it["fix"]}`);
-    }
+    print2(line);
   }
+  print2("");
 }
 function _argError9(msg) {
   process16.stderr.write(USAGE2);
@@ -35943,6 +36082,7 @@ function _parse3(argv) {
     project: null,
     json: false,
     ci: false,
+    ...STRICT_DEFAULTS,
     check: null,
     trace_root: false,
     context: false,
@@ -36040,7 +36180,7 @@ function _run_context(opts) {
     [project_root, origin] = _resolve_project_root(opts.project);
   } catch (exc) {
     if (exc instanceof ProjectRootError) {
-      eprint(`\u274C  doctor: ${exc.message}`);
+      eprint2(`\u274C  doctor: ${exc.message}`);
       return 2;
     }
     throw exc;
@@ -36057,7 +36197,7 @@ function _run_context(opts) {
     wrapper: _detect_wrapper(project_root)
   };
   if (opts.json) {
-    print(_jsonDumpsIndentAscii(ctx, 2));
+    print2(_jsonDumpsIndentAscii(ctx, 2));
   } else {
     _emit_context_text(ctx);
   }
@@ -36079,7 +36219,7 @@ function _run_anatomy(opts) {
     economyError = err instanceof Error ? err.message : String(err);
   }
   if (opts.json) {
-    print(
+    print2(
       _jsonDumpsIndentAscii(
         {
           preamble_byte_census: byteCensus,
@@ -36091,10 +36231,10 @@ function _run_anatomy(opts) {
     );
     return 0;
   }
-  print("\u2500\u2500 injection anatomy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
-  print(census.renderText(byteCensus));
-  print("");
-  print(
+  print2("\u2500\u2500 injection anatomy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  print2(census.renderText(byteCensus));
+  print2("");
+  print2(
     economyReport !== null ? economy.renderText(economyReport) : `dispatch-economy report unavailable: ${economyError}`
   );
   return 0;
@@ -36116,29 +36256,30 @@ function _run_repair(opts) {
         payload["action"] = "error";
         payload["error"] = osErrorStr2(exc);
         if (opts.json) {
-          print(_jsonDumpsIndentAscii(payload, 2));
+          print2(_jsonDumpsIndentAscii(payload, 2));
         } else {
-          eprint(`\u274C  doctor: could not remove ${state_pth}: ${osErrorStr2(exc)}`);
+          eprint2(`\u274C  doctor: could not remove ${state_pth}: ${osErrorStr2(exc)}`);
         }
         return 2;
       }
     }
     if (opts.json) {
-      print(_jsonDumpsIndentAscii(payload, 2));
+      print2(_jsonDumpsIndentAscii(payload, 2));
     } else {
       if (payload["action"] === "remove") {
-        print(`\u2705  doctor: reset wizard-state (${state_pth})`);
+        print2(`\u2705  doctor: reset wizard-state (${state_pth})`);
       } else {
-        print(`\u2705  doctor: nothing to repair (no wizard-state at ${state_pth})`);
+        print2(`\u2705  doctor: nothing to repair (no wizard-state at ${state_pth})`);
       }
     }
     return 0;
   }
-  eprint(`\u274C  doctor: unknown repair target ${pyRepr2(target)}`);
+  eprint2(`\u274C  doctor: unknown repair target ${pyRepr2(target)}`);
   return 2;
 }
 function main21(argv = null) {
   const opts = _parse3(argv !== null ? Array.from(argv) : process16.argv.slice(2));
+  validateStrictLevelOr(opts.strict_level, _argError9);
   if (opts.ci) {
     opts.json = true;
   }
@@ -36160,7 +36301,7 @@ function main21(argv = null) {
     [project_root, origin] = _resolve_project_root(opts.project);
   } catch (exc) {
     if (exc instanceof ProjectRootError) {
-      eprint(`\u274C  doctor: ${exc.message}`);
+      eprint2(`\u274C  doctor: ${exc.message}`);
       return 2;
     }
     throw exc;
@@ -36186,7 +36327,7 @@ function main21(argv = null) {
     _emit_json(project_root, missing, modified, foreign, tag_drift, checks, origin);
   } else {
     if (opts.check === null) {
-      print(`  \u{1F4CD}  project_root: ${project_root} (origin: ${origin})`);
+      print2(`  \u{1F4CD}  project_root: ${project_root} (origin: ${origin})`);
     }
     _emit_checks_text(checks);
     _emit_detection_text(project_root, checks);
@@ -36203,6 +36344,8 @@ function main21(argv = null) {
   if (opts.ci) {
     return drift_present || fail_check ? 1 : 0;
   }
+  const strict = strictExit(opts, checks, drift_present);
+  if (strict !== null) return strict;
   return drift_present ? 1 : 0;
 }
 function _isCliEntry17() {
@@ -36231,7 +36374,7 @@ function _isCliEntry17() {
     return false;
   }
 }
-var YAML6, _HERE18, ArgparseExit4, _Sentinel, NO_FRONTMATTER, _INSTALL_MODE_MARKER_REL, PACKAGE_TAG_ID, _FRONTMATTER_PACKAGE_RE, CHECK_IDS, GLOBAL_CHECK_IDS, MANIFEST_REQUIRED_CHECK_IDS, REPAIR_IDS, MCP_BETA_GATES, STATUS_SYMBOLS, MIN_PYTHON, _PLACEHOLDER_EMAIL_RE, _PLACEHOLDER_NAME_RE, _RULE_PROJECTION_DIRS, _check_python_runtime, _check_humanizer_runtime, _CLI_PROVIDER_META, _detection_memo, PROG4, USAGE2, _STORE_TRUE_FLAGS, _VALUE_FLAGS;
+var YAML6, _HERE18, ArgparseExit4, _Sentinel, NO_FRONTMATTER, _INSTALL_MODE_MARKER_REL, PACKAGE_TAG_ID2, _FRONTMATTER_PACKAGE_RE, CHECK_IDS, GLOBAL_CHECK_IDS, MANIFEST_REQUIRED_CHECK_IDS, REPAIR_IDS, MCP_BETA_GATES, STATUS_SYMBOLS, MIN_PYTHON, _PLACEHOLDER_EMAIL_RE, _PLACEHOLDER_NAME_RE, _RULE_PROJECTION_DIRS, _check_python_runtime, _check_humanizer_runtime, _CLI_PROVIDER_META, _detection_memo, PROG4, USAGE2, _STORE_TRUE_FLAGS, _VALUE_FLAGS;
 var init_cmd_doctor = __esm({
   "src/scripts/_cli/cmd_doctor.ts"() {
     "use strict";
@@ -36262,6 +36405,8 @@ var init_cmd_doctor = __esm({
     init_review_gate();
     init_package_root();
     init_rule_scope();
+    init_doctor_strict();
+    init_doctor_emit();
     _HERE18 = fileURLToPath31(import.meta.url);
     ArgparseExit4 = class extends Error {
       constructor(code) {
@@ -36274,7 +36419,7 @@ var init_cmd_doctor = __esm({
     };
     NO_FRONTMATTER = new _Sentinel();
     _INSTALL_MODE_MARKER_REL = "agents/.agent-state/install-mode.txt";
-    PACKAGE_TAG_ID = "event4u/agent-config";
+    PACKAGE_TAG_ID2 = "event4u/agent-config";
     _FRONTMATTER_PACKAGE_RE = /^package:\s*(.+?)\s*$/m;
     CHECK_IDS = [
       "scope",
@@ -36369,17 +36514,17 @@ var init_cmd_doctor = __esm({
     _detection_memo = null;
     PROG4 = "agent-config doctor";
     USAGE2 = `usage: ${PROG4} [-h] [--project PROJECT] [--json] [--ci] [--check ID]
-                           [--trace-root] [--context] [--anatomy]
-                           [--repair ID]
-`;
+` + STRICT_USAGE + "                           [--trace-root] [--context] [--anatomy]\n                           [--repair ID]\n";
     _STORE_TRUE_FLAGS = {
       "--json": "json",
       "--ci": "ci",
+      ...STRICT_STORE_TRUE,
       "--trace-root": "trace_root",
       "--context": "context",
       "--anatomy": "anatomy"
     };
     _VALUE_FLAGS = {
+      ...STRICT_VALUE_FLAGS,
       "--project": "project",
       "--check": "check",
       "--repair": "repair"
@@ -36552,11 +36697,48 @@ function humanAuthoredLead(text) {
   }
   return kept.join("\n");
 }
-var DOCUMENT_HEAD;
+function stripInjectedRegions(text) {
+  const lines = text.split("\n");
+  const kept = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? "";
+    const open = REGION_OPEN.exec(line);
+    if (open === null) {
+      kept.push(line);
+      continue;
+    }
+    const close = new RegExp(`^\\s*</${open[1] ?? ""}>\\s*$`);
+    let end = -1;
+    for (let j = i + 1; j < lines.length; j++) {
+      if (close.test(lines[j] ?? "")) {
+        end = j;
+        break;
+      }
+    }
+    if (end === -1) {
+      kept.push(line);
+      continue;
+    }
+    if (kept.length > 0 && REGION_NOTE.test(kept[kept.length - 1] ?? "")) {
+      kept.pop();
+    }
+    i = end;
+    while (i + 1 < lines.length && (lines[i + 1] ?? "").trim() !== "") {
+      if (!REGION_NOTE.test(lines[i + 1] ?? "")) {
+        break;
+      }
+      i++;
+    }
+  }
+  return kept.join("\n");
+}
+var DOCUMENT_HEAD, REGION_OPEN, REGION_NOTE;
 var init_prompt_shape = __esm({
   "src/scripts/_lib/prompt_shape.ts"() {
     "use strict";
     DOCUMENT_HEAD = /^\s*(#{1,6}\s|-{3,}\s*$|={3,}\s*$|<[A-Za-z][\w-]*>\s*$)/;
+    REGION_OPEN = /^\s*<([A-Za-z][\w-]*)>\s*$/;
+    REGION_NOTE = /\b(content (above|below) is from|treat (it|this|that|the (content|text|above|following)) as data)\b/i;
   }
 });
 
@@ -36599,7 +36781,7 @@ function instructionText(prompt) {
   return kept.join("\n");
 }
 function classify(prompt) {
-  const text = instructionText(prompt);
+  const text = instructionText(stripInjectedRegions(prompt));
   const lead = humanAuthoredLead(text);
   const leadVerdict = _score2(lead);
   if (leadVerdict.language !== "und") {
@@ -42066,11 +42248,11 @@ import * as path80 from "node:path";
 import process21 from "node:process";
 import { spawnSync as spawnSync12 } from "node:child_process";
 import { fileURLToPath as fileURLToPath46, pathToFileURL as pathToFileURL36 } from "node:url";
-function print2(s = "") {
+function print3(s = "") {
   process21.stdout.write(`${s}
 `);
 }
-function eprint2(s = "") {
+function eprint3(s = "") {
   process21.stderr.write(`${s}
 `);
 }
@@ -42454,14 +42636,14 @@ function _parse4(argv) {
 function main36(argv = null) {
   const opts = _parse4(argv !== null ? Array.from(argv) : process21.argv.slice(2));
   if (opts.funnel) {
-    print2(render6(buildFunnel()));
+    print3(render6(buildFunnel()));
     return 0;
   }
   let project_root;
   try {
     [project_root] = _resolve_project_root(opts.project);
   } catch (exc) {
-    eprint2(`\u274C  conformance: ${exc.message}`);
+    eprint3(`\u274C  conformance: ${exc.message}`);
     return 2;
   }
   const manifest_pth = manifest_path(project_root);
@@ -42490,7 +42672,7 @@ function main36(argv = null) {
   const failed = allChecks.some((c) => c["status"] === "fail") || driftCount > 0;
   appendConformanceReport(conformanceChecks, project_root);
   if (opts.json) {
-    print2(
+    print3(
       _jsonDumpsIndentAscii(
         {
           project_root,
@@ -42503,20 +42685,20 @@ function main36(argv = null) {
       )
     );
   } else {
-    print2(`  \u{1F4CD}  project_root: ${project_root}`);
-    print2("conformance:");
+    print3(`  \u{1F4CD}  project_root: ${project_root}`);
+    print3("conformance:");
     for (const c of allChecks) {
       const sym = STATUS_SYMBOLS[c["status"]] ?? "?";
-      print2(`  ${sym} ${c["id"]}: ${c["message"]}`);
+      print3(`  ${sym} ${c["id"]}: ${c["message"]}`);
       if (c["status"] !== "ok" && c["remedy"]) {
-        print2(`      fix: ${c["remedy"]}`);
+        print3(`      fix: ${c["remedy"]}`);
       }
     }
     if (driftCount > 0) {
-      print2(`  \u274C drift: ${driftCount} drifted file(s) \u2014 run \`agent-config doctor\` for detail`);
+      print3(`  \u274C drift: ${driftCount} drifted file(s) \u2014 run \`agent-config doctor\` for detail`);
     }
-    print2("");
-    print2(
+    print3("");
+    print3(
       failed ? "\u274C  conformance: red \u2014 the OS is not fully installed/firing here" : "\u2705  conformance: green \u2014 installed and firing"
     );
   }