@jevitate/cli 0.7.0 → 0.9.0

package/dist/goal-run-flags.d.ts

@@ -30,6 +30,7 @@ export declare const GOAL_RUN_OPTIONS: {
     readonly jobWaitMs: () => Option;
     readonly deny: () => Option;
     readonly paid: () => Option;
+    readonly allowControl: () => Option;
     readonly allowDestructive: () => Option;
     readonly dialogs: () => Option;
     readonly readRpc: () => Option;
@@ -62,6 +63,7 @@ export interface GoalRunFlags extends EmulationFlags, ScreenshotsFlags {
     jobWaitMs?: string | number;
     deny: string[];
     paid: string[];
+    allowControl?: string[];
     allowDestructive?: boolean;
     dialogs?: string;
     readRpc: string[];

package/dist/goal-run-flags.js

@@ -5,7 +5,7 @@
  * validate the same setup and an author run can reproduce what a goal run needed.
  */
 import { Option } from "commander";
-import { parseSecretField, validateDenyPatterns, } from "@jevitate/explore";
+import { parseSecretField, validateAllowControlPatterns, validateDenyPatterns, } from "@jevitate/explore";
 import { intArg, nonNegativeIntArg, positiveIntArg } from "./cli-args.js";
 import { LITERAL_SECRET_WARNING, resolveSecretArgs } from "./secret-args.js";
 import { secretCommandRunner } from "./secret-command.js";
@@ -64,6 +64,11 @@ export const GOAL_RUN_OPTIONS = {
         "vocabulary — the budget guard sees it, hang replays never repeat it, and a goal that asks for it may still click it")
         .default([])
         .argParser(collect),
+    allowControl: () => new Option("--allow-control <regex>", "#428: exempt a control whose accessible name matches this regex (case-sensitive; /src/i for case-insensitive) from the soft " +
+        "built-in 'may cost money' name heuristic only — e.g. --allow-control \"^Generate Your First Key$\" (repeatable). It never lifts " +
+        "--deny, --paid, destructive, session-end, read-only or origin rules; every use is recorded in the result's safetyOverrides")
+        .default([])
+        .argParser(collect),
     allowDestructive: () => new Option("--allow-destructive", "let missions click session-ending, destructive and paid controls (a --deny pattern still holds). A goal run already may click one its goal asks for"),
     dialogs: () => new Option("--dialogs <policy>", "native window.confirm/prompt dialogs: dismiss (default) or accept. accept still dismisses one whose message names a session-ending, " +
         "destructive or paid action the run may not take (without --allow-destructive or a goal asking for it); every dialog is logged"),
@@ -156,6 +161,7 @@ export function targetFlagsFromFlags(o, dialogs) {
         apiPrefixes: o.apiPrefix ?? [],
         deny: o.deny ?? [],
         paid: o.paid ?? [],
+        allowControl: o.allowControl ?? [],
         readRpc: o.readRpc ?? [],
         ...(o.allowDestructive === true ? { allowDestructive: true } : {}),
         ...(dialogs === undefined ? {} : { dialogs }),
@@ -183,6 +189,7 @@ export function resolveGoalRunFlags(o, url, deps = {}) {
         const conversation = conversationFromFlags(o);
         validateDenyPatterns(o.deny);
         validateDenyPatterns(o.paid, "--paid");
+        validateAllowControlPatterns(o.allowControl ?? []);
         const emulation = emulationFromFlags(o);
         const secretFields = secretFieldsFromFlags(o, env);
         const typeFixtures = o.typeFixture.length === 0 ? [] : loadTypeFixtures(o.typeFixture);

package/dist/goal-run-flags.js.map

@@ -1 +1 @@
-{"version":3,"file":"goal-run-flags.js","sourceRoot":"","sources":["../src/goal-run-flags.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GAKrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAwB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,EAAuC,MAAM,oBAAoB,CAAC;AAClI,OAAO,EAAE,kBAAkB,EAA8C,MAAM,iBAAiB,CAAC;AAGjG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,IAAc,EAAY,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtE,yFAAyF;AACzF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,uBAAuB,EACvB,8KAA8K;QAC5K,sKAAsK,CACzK;IACH,kBAAkB,EAAE,GAAG,EAAE,CACvB,IAAI,MAAM,CACR,wBAAwB,EACxB,2KAA2K;QACzK,6IAA6I,CAChJ;IACH,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CACR,iBAAiB,EACjB,2JAA2J;QACzJ,wPAAwP;QACxP,+KAA+K,CAClL;IACH,MAAM,EAAE,GAAG,EAAE,CACX,IAAI,MAAM,CACR,0BAA0B,EAC1B,mTAAmT,CACpT;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,0BAA0B,EAC1B,uQAAuQ;QACrQ,2KAA2K,CAC9K;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,MAAM,CACR,kBAAkB,EAClB,kQAAkQ,CACnQ;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,0BAA0B,EAC1B,4VAA4V,CAC7V;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,kBAAkB,EAAE,+FAA+F,CAAC;IAC9I,gBAAgB,EAAE,GAAG,EAAE,CACrB,IAAI,MAAM,CACR,6BAA6B,EAC7B,wHAAwH;QACtH,oHAAoH;QACpH,oGAAoG;QACpG,8GAA8G;QAC9G,8GAA8G;QAC9G,2DAA2D,CAC9D;IACH,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,sBAAsB,EACtB,4GAA4G;QAC1G,iHAAiH;QACjH,4EAA4E,CAC/E,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CACR,uBAAuB,EACvB,mHAAmH;QACjH,sIAAsI,CACzI,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,cAAc,EAAE,GAAG,EAAE,CACnB,IAAI,MAAM,CACR,yBAAyB,EACzB,oIAAoI;QAClI,2KAA2K,CAC9K,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,aAAa,EAAE,GAAG,EAAE,CAClB,IAAI,MAAM,CAAC,uBAAuB,EAAE,4FAA4F,CAAC,CAAC,SAAS,CACzI,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAC/B;IACH,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,MAAM,CACR,oBAAoB,EACpB,qHAAqH;QACnH,iIAAiI;QACjI,wHAAwH;QACxH,yEAAyE,CAC5E,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,MAAM,CACR,kBAAkB,EAClB,0IAA0I;QACxI,uJAAuJ,CAC1J;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,MAAM,CACR,kBAAkB,EAClB,sJAAsJ;QACpJ,qHAAqH,CACxH;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,gBAAgB,EAAE,GAAG,EAAE,CACrB,IAAI,MAAM,CACR,qBAAqB,EACrB,qJAAqJ,CACtJ;IACH,OAAO,EAAE,GAAG,EAAE,CACZ,IAAI,MAAM,CACR,oBAAoB,EACpB,sIAAsI;QACpI,+HAA+H,CAClI;IACH,OAAO,EAAE,GAAG,EAAE,CACZ,IAAI,MAAM,CACR,mBAAmB,EACnB,mIAAmI;QACjI,oKAAoK,CACvK;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CAAC,oBAAoB,EAAE,2GAA2G,CAAC,CAAC,SAAS,CACrJ,iBAAiB,CAClB;IACH,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CAAC,2BAA2B,EAAE,mGAAmG,CAAC;SACzI,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,UAAU,EAAE,GAAG,EAAE,CACf,IAAI,MAAM,CAAC,oBAAoB,EAAE,kFAAkF,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC;IACnJ,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,MAAM,CAAC,qBAAqB,EAAE,+FAA+F,CAAC;SAC/H,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,gBAAgB,EAAE,GAAG,EAAE,CACrB,IAAI,MAAM,CAAC,gCAAgC,EAAE,mGAAmG,CAAC;SAC9I,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,cAAc,EAAE,GAAG,EAAE,CACnB,IAAI,MAAM,CACR,oBAAoB,EACpB,iLAAiL,CAClL,CAAC,OAAO,CAAC,KAAK,CAAC;IAClB,iBAAiB,EAAE,GAAG,EAAE,CACtB,IAAI,MAAM,CACR,2BAA2B,EAC3B,6MAA6M,CAC9M,CAAC,SAAS,CAAC,cAAc,CAAC;CACrB,CAAC;AAqCX,2FAA2F;AAC3F,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,6IAA6I;AAC7I,MAAM,OAAO,GAAG,CAAC,GAAY,EAAoB,EAAE,CACjD,GAAG,YAAY,gBAAgB;IAC7B,CAAC,CAAC,GAAG;IACL,CAAC,CAAC,IAAI,gBAAgB,CAClB,GAAG,YAAY,yBAAyB,IAAI,GAAG,YAAY,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAC1G,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;AAER,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,CAAgC;IAC/D,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,4CAA4C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,CAAC,CAAC,OAAO,CAAC;AACnB,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAAC,CAAoC;IACvE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACtF,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,yDAAyD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,CAAC;AACvB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,CAAwG;IAC5I,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,IACE,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QACzH,CAAC,YAAY,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAClI,CAAC,YAAY,CAAC,aAAa,KAAK,SAAS;YACvC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,aAAa,IAAI,EAAE,IAAI,YAAY,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,EAC5H,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,4GAA4G,CAAC,CAAC;IAC7J,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0CAA0C,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,qBAAqB,CACnC,CAAgE,EAChE,MAAoD,OAAO,CAAC,GAAG;IAE/D,IAAI,CAAC;QACH,OAAO;YACL,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC,CAAC;YACvG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,CAAwB,EAAE,OAAiC;IAC9F,OAAO;QACL,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;QAClC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,EAAE;QAC1C,WAAW,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;QACxB,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;QAC9B,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AA4BD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAe,EAAE,GAAW,EAAE,OAA2B,EAAE;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,+BAA+B,CAAC,CAAC,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;QAClH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,sBAAsB,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvF,IAAI,MAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gEAAgE;YAChE,IAAI,CAAC,CAAC,GAAG,YAAY,SAAS,CAAC;gBAAE,MAAM,GAAG,CAAC;QAC7C,CAAC;QACD,OAAO;YACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvE,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACtD,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;YAC5F,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACrF,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}
+{"version":3,"file":"goal-run-flags.js","sourceRoot":"","sources":["../src/goal-run-flags.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,oBAAoB,GAKrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAwB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,EAAuC,MAAM,oBAAoB,CAAC;AAClI,OAAO,EAAE,kBAAkB,EAA8C,MAAM,iBAAiB,CAAC;AAGjG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,IAAc,EAAY,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtE,yFAAyF;AACzF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,uBAAuB,EACvB,8KAA8K;QAC5K,sKAAsK,CACzK;IACH,kBAAkB,EAAE,GAAG,EAAE,CACvB,IAAI,MAAM,CACR,wBAAwB,EACxB,2KAA2K;QACzK,6IAA6I,CAChJ;IACH,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CACR,iBAAiB,EACjB,2JAA2J;QACzJ,wPAAwP;QACxP,+KAA+K,CAClL;IACH,MAAM,EAAE,GAAG,EAAE,CACX,IAAI,MAAM,CACR,0BAA0B,EAC1B,mTAAmT,CACpT;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,0BAA0B,EAC1B,uQAAuQ;QACrQ,2KAA2K,CAC9K;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,MAAM,CACR,kBAAkB,EAClB,kQAAkQ,CACnQ;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,0BAA0B,EAC1B,4VAA4V,CAC7V;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,kBAAkB,EAAE,+FAA+F,CAAC;IAC9I,gBAAgB,EAAE,GAAG,EAAE,CACrB,IAAI,MAAM,CACR,6BAA6B,EAC7B,wHAAwH;QACtH,oHAAoH;QACpH,oGAAoG;QACpG,8GAA8G;QAC9G,8GAA8G;QAC9G,2DAA2D,CAC9D;IACH,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CACR,sBAAsB,EACtB,4GAA4G;QAC1G,iHAAiH;QACjH,4EAA4E,CAC/E,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CACR,uBAAuB,EACvB,mHAAmH;QACjH,sIAAsI,CACzI,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,cAAc,EAAE,GAAG,EAAE,CACnB,IAAI,MAAM,CACR,yBAAyB,EACzB,oIAAoI;QAClI,2KAA2K,CAC9K,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,aAAa,EAAE,GAAG,EAAE,CAClB,IAAI,MAAM,CAAC,uBAAuB,EAAE,4FAA4F,CAAC,CAAC,SAAS,CACzI,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAC/B;IACH,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,MAAM,CACR,oBAAoB,EACpB,qHAAqH;QACnH,iIAAiI;QACjI,wHAAwH;QACxH,yEAAyE,CAC5E,CAAC,SAAS,CAAC,cAAc,CAAC;IAC7B,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,MAAM,CACR,kBAAkB,EAClB,0IAA0I;QACxI,uJAAuJ,CAC1J;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,MAAM,CACR,kBAAkB,EAClB,sJAAsJ;QACpJ,qHAAqH,CACxH;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CACR,yBAAyB,EACzB,8HAA8H;QAC5H,kIAAkI;QAClI,4HAA4H,CAC/H;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,gBAAgB,EAAE,GAAG,EAAE,CACrB,IAAI,MAAM,CACR,qBAAqB,EACrB,qJAAqJ,CACtJ;IACH,OAAO,EAAE,GAAG,EAAE,CACZ,IAAI,MAAM,CACR,oBAAoB,EACpB,sIAAsI;QACpI,+HAA+H,CAClI;IACH,OAAO,EAAE,GAAG,EAAE,CACZ,IAAI,MAAM,CACR,mBAAmB,EACnB,mIAAmI;QACjI,oKAAoK,CACvK;SACE,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,GAAG,EAAE,CAChB,IAAI,MAAM,CAAC,oBAAoB,EAAE,2GAA2G,CAAC,CAAC,SAAS,CACrJ,iBAAiB,CAClB;IACH,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,MAAM,CAAC,2BAA2B,EAAE,mGAAmG,CAAC;SACzI,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,UAAU,EAAE,GAAG,EAAE,CACf,IAAI,MAAM,CAAC,oBAAoB,EAAE,kFAAkF,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC;IACnJ,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,MAAM,CAAC,qBAAqB,EAAE,+FAA+F,CAAC;SAC/H,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,gBAAgB,EAAE,GAAG,EAAE,CACrB,IAAI,MAAM,CAAC,gCAAgC,EAAE,mGAAmG,CAAC;SAC9I,OAAO,CAAC,EAAc,CAAC;SACvB,SAAS,CAAC,OAAO,CAAC;IACvB,cAAc,EAAE,GAAG,EAAE,CACnB,IAAI,MAAM,CACR,oBAAoB,EACpB,iLAAiL,CAClL,CAAC,OAAO,CAAC,KAAK,CAAC;IAClB,iBAAiB,EAAE,GAAG,EAAE,CACtB,IAAI,MAAM,CACR,2BAA2B,EAC3B,6MAA6M,CAC9M,CAAC,SAAS,CAAC,cAAc,CAAC;CACrB,CAAC;AAsCX,2FAA2F;AAC3F,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,6IAA6I;AAC7I,MAAM,OAAO,GAAG,CAAC,GAAY,EAAoB,EAAE,CACjD,GAAG,YAAY,gBAAgB;IAC7B,CAAC,CAAC,GAAG;IACL,CAAC,CAAC,IAAI,gBAAgB,CAClB,GAAG,YAAY,yBAAyB,IAAI,GAAG,YAAY,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAC1G,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;AAER,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,CAAgC;IAC/D,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,4CAA4C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,CAAC,CAAC,OAAO,CAAC;AACnB,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAAC,CAAoC;IACvE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACtF,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,yDAAyD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,CAAC;AACvB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,CAAwG;IAC5I,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,IACE,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QACzH,CAAC,YAAY,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAClI,CAAC,YAAY,CAAC,aAAa,KAAK,SAAS;YACvC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,aAAa,IAAI,EAAE,IAAI,YAAY,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,EAC5H,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,4GAA4G,CAAC,CAAC;IAC7J,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,0CAA0C,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,qBAAqB,CACnC,CAAgE,EAChE,MAAoD,OAAO,CAAC,GAAG;IAE/D,IAAI,CAAC;QACH,OAAO;YACL,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC,CAAC;YACvG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,CAAwB,EAAE,OAAiC;IAC9F,OAAO;QACL,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;QAClC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,EAAE;QAC1C,WAAW,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;QAClC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;QACxB,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;QAC9B,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AA4BD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAe,EAAE,GAAW,EAAE,OAA2B,EAAE;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,+BAA+B,CAAC,CAAC,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;QAClH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,sBAAsB,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,4BAA4B,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,qBAAqB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvF,IAAI,MAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gEAAgE;YAChE,IAAI,CAAC,CAAC,GAAG,YAAY,SAAS,CAAC;gBAAE,MAAM,GAAG,CAAC;QAC7C,CAAC;QACD,OAAO;YACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvE,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACtD,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;YAC5F,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACrF,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/heal-probe-guard.d.ts

@@ -0,0 +1,9 @@
+import type { Page } from "playwright";
+import type { HealWriteGuard } from "@jevitate/runtime";
+export interface HealProbeGuard {
+    readonly guard: HealWriteGuard;
+    /** Unroutes the HTTP handler (the WebSocket proxy stays transparent until the context closes). */
+    dispose(): Promise<void>;
+}
+/** Installs the guard on the page's BrowserContext (HTTP routes + WebSocket proxy), unarmed. */
+export declare function installHealProbeGuard(page: Page): Promise<HealProbeGuard>;

package/dist/heal-probe-guard.js

@@ -0,0 +1,113 @@
+import { monitorFor } from "@jevitate/explore";
+/**
+ * #453 (Q2, review): the write guard a guarded click/fill heal probe runs under. Stricter than the
+ * find-out `ReadOnlyGuard` on purpose — a probe clicks a control the model or the change evidence
+ * PROPOSED, so nothing it sends may reach a server:
+ *  - NO exemptions: every request whose method is not GET/HEAD/OPTIONS is aborted while a probe is
+ *    armed — whatever its origin (third-party, credential-free included) and whatever its path
+ *    (`/token`, `/oauth/…`, `/refresh` included). A navigation with a body is such a request.
+ *  - BrowserContext level: `context.route` sees every page of the context, so a popup or new tab the
+ *    click opens is guarded too.
+ *  - WebSockets: every socket of the context is proxied (`context.routeWebSocket`, installed before
+ *    the run so sockets opened earlier are covered); a frame the page sends while a probe is armed is
+ *    dropped and counted as a blocked write.
+ *  - Service workers: a request a service worker answers or sends itself may never reach
+ *    `context.route`. The simplest fail-closed rule: a probe is never run while a service worker is
+ *    registered for the page (`unguardable`), and one registered DURING the probe rejects it.
+ * Any blocked request rejects the candidate `write-attempted` (the runner adjudicates). Outside an
+ * armed probe every request and frame passes through untouched.
+ */
+const READ_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
+/** How long an armed probe's window stays open for the writes its action triggers (network settle). */
+const SETTLE_MS = 5_000;
+/** Origin + path of a URL (never its query — it can carry a token). */
+function endpoint(url) {
+    try {
+        const u = new URL(url);
+        return u.origin === "null" ? u.protocol : `${u.origin}${u.pathname}`;
+    }
+    catch {
+        return url.split(/[?#]/)[0] ?? url;
+    }
+}
+/** Service workers registered for the page (their scopes), read in the page. */
+async function registeredServiceWorkers(page, context) {
+    const scopes = new Set(context.serviceWorkers().map((w) => endpoint(w.url())));
+    if (!page.isClosed()) {
+        // BROWSER CODE
+        const inPage = await page.evaluate(async () => {
+            const sw = navigator.serviceWorker;
+            if (sw === undefined)
+                return [];
+            const regs = await sw.getRegistrations();
+            return regs.map((r) => r.scope);
+        });
+        for (const s of inPage)
+            scopes.add(endpoint(s));
+    }
+    return [...scopes];
+}
+/** Installs the guard on the page's BrowserContext (HTTP routes + WebSocket proxy), unarmed. */
+export async function installHealProbeGuard(page) {
+    const context = page.context();
+    const monitor = monitorFor(page);
+    let armed = false;
+    let blocked = [];
+    const onRequest = async (route, request) => {
+        const method = request.method().toUpperCase();
+        if (!armed || READ_METHODS.has(method)) {
+            await route.fallback().catch(() => undefined);
+            return;
+        }
+        blocked.push({ method, url: endpoint(request.url()) });
+        await route.abort("blockedbyclient").catch(() => undefined);
+    };
+    const onSocket = (ws) => {
+        const server = ws.connectToServer();
+        ws.onMessage((message) => {
+            if (armed) {
+                blocked.push({ method: "WEBSOCKET", url: endpoint(ws.url()) });
+                return;
+            }
+            server.send(message);
+        });
+        server.onMessage((message) => ws.send(message));
+    };
+    await context.route("**/*", onRequest);
+    await context.routeWebSocket(/.*/, onSocket);
+    const guard = {
+        unguardable: async () => {
+            const workers = await registeredServiceWorkers(page, context);
+            return workers.length === 0 ? null : `a service worker is registered for this page (${workers.join(", ")}) — requests it handles may bypass the write guard`;
+        },
+        armAt: async () => {
+            blocked = [];
+            await monitor.instrument().catch(() => undefined);
+            armed = true;
+        },
+        disarm: async () => {
+            if (!armed)
+                return [];
+            try {
+                await monitor.waitSettled({ ceilingMs: SETTLE_MS }).catch(() => undefined);
+                const workers = await registeredServiceWorkers(page, context).catch(() => ["(unknown)"]);
+                for (const w of workers)
+                    blocked.push({ method: "SERVICE-WORKER", url: w });
+            }
+            finally {
+                armed = false;
+            }
+            const out = blocked;
+            blocked = [];
+            return out;
+        },
+    };
+    return {
+        guard,
+        dispose: async () => {
+            armed = false;
+            await context.unroute("**/*", onRequest).catch(() => undefined);
+        },
+    };
+}
+//# sourceMappingURL=heal-probe-guard.js.map

package/dist/heal-probe-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heal-probe-guard.js","sourceRoot":"","sources":["../src/heal-probe-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9E,uGAAuG;AACvG,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,uEAAuE;AACvE,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACrC,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,wBAAwB,CAAC,IAAU,EAAE,OAAuB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrB,eAAe;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC5C,MAAM,EAAE,GAAI,SAAoE,CAAC,aAAa,CAAC;YAC/F,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAQD,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAsB,EAAE,CAAC;IAEpC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAY,EAAE,OAAgB,EAAiB,EAAE;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,EAAkB,EAAQ,EAAE;QAC5C,MAAM,MAAM,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACvB,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAmB;QAC5B,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9D,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iDAAiD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC;QAC/J,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3E,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;gBACzF,KAAK,MAAM,CAAC,IAAI,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC;oBAAS,CAAC;gBACT,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;IACF,OAAO;QACL,KAAK;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,KAAK,GAAG,KAAK,CAAC;YACd,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/host-health-run.d.ts

@@ -8,6 +8,30 @@ import { type ResourceGovernor } from "@jevitate/playwright";
  * result's `hostHealth`. `injected` is the test seam (a deterministic fake host).
  */
 export declare function startHostHealth(injected?: HostHealthSampler): Promise<HostHealthSampler>;
+/** The browser handle a run's CDP probe needs (structurally a Playwright `Page`). */
+interface CdpPage {
+    context(): {
+        browser(): {
+            newBrowserCDPSession(): Promise<{
+                send(method: string): Promise<unknown>;
+            }>;
+        } | null;
+    };
+}
+/**
+ * #452: gives the run's sampler its CDP probe — the round-trip of a cheap browser-level command
+ * (`Browser.getVersion`, answered by the browser process itself, so it measures the browser being
+ * scheduled, not the page's JS). Measured in REAL time (`process.hrtime`): it is a latency of the real
+ * pipe, so a skipped test clock must not inflate it. A browser that cannot give a CDP session simply
+ * contributes no reading.
+ */
+export declare function attachCdpProbe(health: HostHealthSampler, page: CdpPage): void;
+/** The failure to report: a `host-starved` verdict (#452) explains the stall before the engine's own failure does. */
+export declare function failureWithHostStarved<F extends {
+    kind: string;
+}>(host: {
+    readonly failure?: F | undefined;
+}, own: F | undefined): F | undefined;
 /** What every result carries from the sampler, and the degraded-environment verdict rule applied. */
 export interface HostHealthVerdict<O extends string> {
     readonly outcome: O | "inconclusive";
@@ -22,4 +46,11 @@ export interface HostHealthVerdict<O extends string> {
  * Takes the closing sample and applies the run-level rule: most steps starved → `inconclusive`
  * (`degraded-environment`), never `clean` (see `degradedEnvironmentOutcome`).
  */
-export declare function finishHostHealth<O extends string>(health: HostHealthSampler, outcome: O, opts?: Parameters<typeof degradedEnvironmentOutcome>[2], governor?: ResourceGovernor): Promise<HostHealthVerdict<O>>;
+export declare function finishHostHealth<O extends string>(health: HostHealthSampler, outcome: O, opts?: Parameters<typeof degradedEnvironmentOutcome>[2] & {
+    /** #452: the run's own engine failure, so a stall on a starved host is classified `host-starved`. */
+    readonly failure?: {
+        readonly kind: string;
+        readonly message: string;
+    };
+}, governor?: ResourceGovernor): Promise<HostHealthVerdict<O>>;
+export {};

package/dist/host-health-run.js

@@ -1,4 +1,4 @@
-import { HostHealthSampler, degradedEnvironmentOutcome } from "@jevitate/explore";
+import { HostHealthSampler, degradedEnvironmentOutcome, hostStarvedFailure } from "@jevitate/explore";
 import { sharedResourceGovernor } from "@jevitate/playwright";
 import { clock } from "@jevitate/domain";
 /** When each run's sampler started (#205: the window the governor's summary covers). */
@@ -15,6 +15,32 @@ export async function startHostHealth(injected) {
     await health.sample();
     return health;
 }
+/**
+ * #452: gives the run's sampler its CDP probe — the round-trip of a cheap browser-level command
+ * (`Browser.getVersion`, answered by the browser process itself, so it measures the browser being
+ * scheduled, not the page's JS). Measured in REAL time (`process.hrtime`): it is a latency of the real
+ * pipe, so a skipped test clock must not inflate it. A browser that cannot give a CDP session simply
+ * contributes no reading.
+ */
+export function attachCdpProbe(health, page) {
+    let session;
+    health.attachCdpProbe(async () => {
+        const browser = page.context().browser();
+        if (browser == null)
+            return undefined;
+        session ??= browser.newBrowserCDPSession().catch(() => undefined);
+        const s = await session;
+        if (s === undefined)
+            return undefined;
+        const t0 = process.hrtime.bigint();
+        await s.send("Browser.getVersion");
+        return Number(process.hrtime.bigint() - t0) / 1e6;
+    });
+}
+/** The failure to report: a `host-starved` verdict (#452) explains the stall before the engine's own failure does. */
+export function failureWithHostStarved(host, own) {
+    return host.failure !== undefined && host.failure.kind === "host-starved" ? host.failure : own;
+}
 /**
  * Takes the closing sample and applies the run-level rule: most steps starved → `inconclusive`
  * (`degraded-environment`), never `clean` (see `degradedEnvironmentOutcome`).
@@ -23,6 +49,17 @@ export async function finishHostHealth(health, outcome, opts = {}, governor = sh
     await health.sample();
     // #205: what resource governance did during this run (cap, slot, throttling, memory) rides along.
     const hostHealth = { ...health.summary(), resources: governor.snapshot(runStarts.get(health) ?? 0) };
+    // #452: a run that STALLED while the host showed starvation is `inconclusive` / `host-starved`, with the
+    // measurements; a confirmed finding (defects-found, a hang) keeps its outcome.
+    const starved = hostStarvedFailure(opts.failure, hostHealth);
+    if (starved !== undefined) {
+        const keeps = outcome === "defects-found" || outcome === "hang" || outcome === "intermittent";
+        return {
+            outcome: keeps ? outcome : "inconclusive",
+            failure: starved,
+            fields: { hostHealth, environmentDegraded: health.findings() },
+        };
+    }
     const verdict = degradedEnvironmentOutcome(outcome, hostHealth, opts);
     return {
         outcome: verdict.outcome,

package/dist/host-health-run.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-health-run.js","sourceRoot":"","sources":["../src/host-health-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAyB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,wFAAwF;AACxF,MAAM,SAAS,GAAG,IAAI,OAAO,EAA6B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA4B;IAChE,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,IAAI,iBAAiB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC7D,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,OAAU,EACV,OAAyD,EAAE,EAC3D,WAA6B,sBAAsB,EAAE;IAErD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,kGAAkG;IAClG,MAAM,UAAU,GAAsB,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACxH,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;KAC/D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"host-health-run.js","sourceRoot":"","sources":["../src/host-health-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEtG,OAAO,EAAE,sBAAsB,EAAyB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,wFAAwF;AACxF,MAAM,SAAS,GAAG,IAAI,OAAO,EAA6B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA4B;IAChE,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,IAAI,iBAAiB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC7D,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,EAAE,IAAa;IACrE,IAAI,OAAoF,CAAC;IACzF,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,OAAO,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC;QACxB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,sBAAsB,CAA6B,IAA0C,EAAE,GAAkB;IAC/H,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACjG,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,OAAU,EACV,OAGI,EAAE,EACN,WAA6B,sBAAsB,EAAE;IAErD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,kGAAkG;IAClG,MAAM,UAAU,GAAsB,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACxH,yGAAyG;IACzG,+EAA+E;IAC/E,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,cAAc,CAAC;QAC9F,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;YACzC,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;SAC/D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;KAC/D,CAAC;AACJ,CAAC"}

package/dist/http-5xx-outcome.d.ts

@@ -1,6 +1,11 @@
-import type { GoalBasedOutcome, Http5xxDefect } from "@jevitate/explore";
-export declare function applyHttp5xxGoalOutcome(outcome: GoalBasedOutcome, defects: readonly Http5xxDefect[]): GoalBasedOutcome;
+import type { Http5xxDefect } from "@jevitate/explore";
+/**
+ * How an HTTP 5xx hard-signal defect (#208, `Http5xxOracle`) is worded on a run's `reason`. It
+ * counts like every other defect: coverage/exploratory and feature runs with their own defects, and
+ * a goal run through `defectOutcome` — `goalMissionOutcome` (#423) makes a `succeeded` goal
+ * `defects-found` while its `goalOutcome` stays the goal's own (`assertionPassed`/`checks` too).
+ */
 /** `PUT /api/profile → 500` for each defect (first three), for a one-line `reason`. */
 export declare function describeHttp5xx(defects: readonly Http5xxDefect[]): string;
-/** The `reason` of a goal run that `applyHttp5xxGoalOutcome` turned into `defects-found`. */
+/** The `reason` of a goal run whose only finding is an HTTP 5xx (#208). */
 export declare function http5xxGoalReason(defects: readonly Http5xxDefect[], assertionPassed: boolean): string;

package/dist/http-5xx-outcome.js

@@ -1,19 +1,9 @@
 /**
- * How an HTTP 5xx hard-signal defect (#208, `Http5xxOracle`) folds into a run's outcome — the same
- * rule a `server-log` defect follows (#142):
- *
- *  - coverage/exploratory and feature runs count it with their own defects (a found defect wins
- *    over a thin run's `inconclusive`, exactly like a declared-invariant defect);
- *  - a goal run's own `GoalBasedOutcome`: `defects-found` over `succeeded` / `exhausted` /
- *    `blocked`. A goal whose checks held but whose run hit a server error is NOT a success: the
- *    checks' verdict stays on the result (`assertionPassed`, `checks`), and `reason` says both.
- *    A broken run (`inconclusive` / `crashed`) and a hang keep their outcome; the defect is still
- *    listed in `defects`, and `reason` names it.
+ * How an HTTP 5xx hard-signal defect (#208, `Http5xxOracle`) is worded on a run's `reason`. It
+ * counts like every other defect: coverage/exploratory and feature runs with their own defects, and
+ * a goal run through `defectOutcome` — `goalMissionOutcome` (#423) makes a `succeeded` goal
+ * `defects-found` while its `goalOutcome` stays the goal's own (`assertionPassed`/`checks` too).
  */
-const BROKEN_GOAL_OUTCOMES = new Set(["inconclusive", "crashed", "hang", "intermittent"]);
-export function applyHttp5xxGoalOutcome(outcome, defects) {
-    return defects.length > 0 && !BROKEN_GOAL_OUTCOMES.has(outcome) ? "defects-found" : outcome;
-}
 /** `PUT /api/profile → 500` for each defect (first three), for a one-line `reason`. */
 export function describeHttp5xx(defects) {
     const shown = defects.slice(0, 3).map((d) => {
@@ -30,7 +20,7 @@ export function describeHttp5xx(defects) {
     const more = defects.length > 3 ? ` (+${defects.length - 3} more)` : "";
     return `${shown.join(", ")}${more}`;
 }
-/** The `reason` of a goal run that `applyHttp5xxGoalOutcome` turned into `defects-found`. */
+/** The `reason` of a goal run whose only finding is an HTTP 5xx (#208). */
 export function http5xxGoalReason(defects, assertionPassed) {
     const n = defects.length;
     const found = `${n} HTTP 5xx defect${n === 1 ? "" : "s"} found: ${describeHttp5xx(defects)}`;

package/dist/http-5xx-outcome.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-5xx-outcome.js","sourceRoot":"","sources":["../src/http-5xx-outcome.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAkC,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzH,MAAM,UAAU,uBAAuB,CAAC,OAAyB,EAAE,OAAiC;IAClG,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9F,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,OAAiC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,MAAM,CAAC,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,OAAiC,EAAE,eAAwB;IAC3F,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7F,OAAO,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,6EAA6E,CAAC,CAAC,CAAC,KAAK,CAAC;AACzH,CAAC"}
+{"version":3,"file":"http-5xx-outcome.js","sourceRoot":"","sources":["../src/http-5xx-outcome.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,OAAiC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,MAAM,CAAC,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,OAAiC,EAAE,eAAwB;IAC3F,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7F,OAAO,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,6EAA6E,CAAC,CAAC,CAAC,KAAK,CAAC;AACzH,CAAC"}

package/dist/init-cli.d.ts

@@ -1,4 +1,11 @@
 import { Command } from "commander";
+import { type InstallReport, type UninstallReport } from "./init-skills.js";
 import { type CliDeps } from "./cli-shared.js";
 /** Registers `jevitate init` (API keys, skills/MCP wiring, the repo's .jevitate/). */
 export declare function registerInitCommands(program: Command, deps: CliDeps): void;
+/**
+ * #431: the skill-install/uninstall actions a person must see — a file left alone because they
+ * edited it, or refused because its markers are broken (with the fix) — and, for uninstall, what
+ * was removed. `create`/`update`/`unchanged` stay in the count line above (and in --json).
+ */
+export declare function skillReportLines(reports: readonly (InstallReport | UninstallReport)[]): string[];

package/dist/init-cli.js

@@ -1,4 +1,4 @@
-import { envCredentialStore, FEATURE_KEYS } from "@jevitate/ai-core";
+import { envCredentialStore, FEATURE_KEYS, featureReady, jevProviderOverride } from "@jevitate/ai-core";
 import { loadLocalCredentials } from "./credentials-file.js";
 import { ok, fail } from "./envelope.js";
 import { initProjectDir } from "./project-dir.js";
@@ -6,7 +6,9 @@ import { KeyCheckError, credentialInputs, enteredKeyCheck, realSecureIO } from "
 import { keySources, realVerifyFetch, shadowWarnings, verifyFeatureKeys } from "./key-report.js";
 import { collectAllMissingKeys } from "./init-keys.js";
 import { formatInitKeysHuman } from "./cli-output.js";
-import { detectRuntimes, resolveInstallTargetPaths, installSkills } from "./init-skills.js";
+import { detectRuntimes, resolveInstallTargetPaths, installSkills, uninstallSkills } from "./init-skills.js";
+import { currentEngineInfo } from "./engine.js";
+import { CodeownersArgsError, installCodeowners, parseOwners } from "./init-codeowners.js";
 import { registerMcp, resolveMcpTargetPaths } from "./init-mcp.js";
 import { initNextSteps, environmentHint } from "./init-next-steps.js";
 import { loadManifest } from "@jevitate/skills";
@@ -27,14 +29,48 @@ export function registerInitCommands(program, deps) {
         .option("--force", "overwrite a user-modified installed skill file/block or MCP config entry")
         .option("--dry-run", "report planned skill-install/mcp-register actions without writing")
         .option("--skip-project", "skip creating the repo's .jevitate/ (journeys, regressions, baselines, logs)")
+        .option("--claude-md", "#431: also keep a marked jevitate block in the project's CLAUDE.md pointing at the installed skills (Claude Code only)")
+        .option("--codeowners <owners>", "#437: write/merge a marked CODEOWNERS block (.github/CODEOWNERS, or the repo's existing one) making .jevitate/journeys/, personas.json and jobs.json need these owners' review (\"@org/team @user\"); enable code-owner review in branch protection")
+        .option("--uninstall", "#431: remove the skill files and marked AGENTS.md/CLAUDE.md blocks jevitate installed (user-modified ones are skipped unless --force); keys, MCP registration and .jevitate/ are left alone")
         .action(async function () {
-        const { json, skipKeys, skipSkills, skipMcp, skipProject, targets, force, dryRun, replaceKeys, verify } = this.opts();
+        const { json, skipKeys, skipSkills, skipMcp, skipProject, targets, force, dryRun, replaceKeys, verify, claudeMd, uninstall, codeowners } = this.opts();
         try {
+            // #431: --uninstall only removes what the skill installer wrote, with the same never-clobber
+            // rules; it never touches keys, MCP configs or the repo's .jevitate/.
+            if (uninstall === true) {
+                const runtimes = targets
+                    ? targets.split(",").map((t) => t.trim()).filter((t) => t.length > 0)
+                    : detectRuntimes(deps.init?.detection);
+                const paths = resolveInstallTargetPaths(deps.init?.detection);
+                const statePath = deps.init?.statePath ?? resolveDataDir(["skills-install-state.json"]);
+                const removed = await uninstallSkills(runtimes, loadManifest(), paths, statePath, {
+                    ...(force === true ? { force: true } : {}),
+                    ...(dryRun === true ? { dryRun: true } : {}),
+                    ...(claudeMd === true ? { claudeMd: true } : {}),
+                });
+                if (json) {
+                    emitJson(program, ok({ uninstalled: removed }));
+                }
+                else {
+                    const out = program.configureOutput().writeOut;
+                    out?.(dryRun === true ? "jevitate: dry run — nothing was removed\n" : "jevitate skills uninstalled\n");
+                    for (const line of skillReportLines(removed))
+                        out?.(`${line}\n`);
+                    process.exitCode = 0;
+                }
+                return;
+            }
+            if (codeowners !== undefined)
+                parseOwners(codeowners); // refused (exit 64) before anything is written
             const data = { initialized: true };
             // The repo's own .jevitate/ (0.2.0 layout): Journeys, regressions and baselines live with the
             // app's code; logs stay local. Secrets and machine state stay in ~/.jevitate.
             if (!skipProject)
                 data.project = initProjectDir(deps.init?.detection?.cwd?.() ?? process.cwd(), { ...(dryRun === true ? { dryRun: true } : {}) });
+            // #437: the enforcement layer for approvals — code-owner review of .jevitate/ (with branch protection on the forge).
+            if (codeowners !== undefined) {
+                data.codeowners = await installCodeowners(deps.init?.detection?.cwd?.() ?? process.cwd(), codeowners, { ...(dryRun === true ? { dryRun: true } : {}) });
+            }
             if (!skipKeys) {
                 // SECURITY: reuses the existing, already-guardrailed credential
                 // collection. The report holds only key NAMES (required/collected/missing),
@@ -51,8 +87,11 @@ export function registerInitCommands(program, deps) {
                 const fetchFn = deps.ai?.verifyFetch ?? realVerifyFetch;
                 // #291: each entered key is checked with its provider BEFORE it is stored.
                 const gate = enteredKeyCheck(fetchFn);
+                // #429: JEVITATE_JEV_PROVIDER pins which key judgment needs (an unknown value fails init).
+                const jevProvider = jevProviderOverride(deps.ai?.env ?? process.env);
                 const keys = await collectAllMissingKeys(store, io, {
                     interactive,
+                    ...(jevProvider === undefined ? {} : { jevProvider }),
                     ...(replaceKeys === true ? { replace: true } : {}),
                     ...(verify ? { check: gate.check } : {}),
                 });
@@ -62,11 +101,11 @@ export function registerInitCommands(program, deps) {
                 const nowStore = envCredentialStore(env, nowLocal);
                 for (const feature of Object.keys(keys)) {
                     const r = keys[feature];
-                    const sources = keySources(feature, env, verify ? nowLocal : { ...localConfig, ...Object.fromEntries(r.collected.map((k) => [k, "set"])) });
+                    const sources = keySources(feature, env, verify ? nowLocal : { ...localConfig, ...Object.fromEntries(r.collected.map((k) => [k, "set"])) }, jevProvider);
                     const warnings = shadowWarnings(r.collected, sources);
                     r.sources = sources;
                     if (verify)
-                        r.verification = await verifyFeatureKeys(feature, nowStore, fetchFn, gate.verdicts);
+                        r.verification = await verifyFeatureKeys(feature, nowStore, fetchFn, gate.verdicts, jevProvider);
                     if (warnings.length > 0)
                         r.warnings = warnings;
                 }
@@ -83,7 +122,12 @@ export function registerInitCommands(program, deps) {
                 const paths = resolveInstallTargetPaths(deps.init?.detection);
                 const statePath = deps.init?.statePath ?? resolveDataDir(["skills-install-state.json"]);
                 const skills = loadManifest();
-                data.skills = await installSkills(runtimes, skills, paths, statePath, { force, dryRun });
+                data.skills = await installSkills(runtimes, skills, paths, statePath, {
+                    force,
+                    dryRun,
+                    jevitateVersion: currentEngineInfo().version,
+                    ...(claudeMd === true ? { claudeMd: true } : {}),
+                });
             }
             if (!skipMcp) {
                 // Register the `jevitate mcp` server for each detected/selected
@@ -108,7 +152,8 @@ export function registerInitCommands(program, deps) {
                 ? Object.values(data.keys).every((r) => (r.missing ?? []).length === 0 && !(r.verification ?? []).some((v) => v.status === "invalid"))
                 : (() => {
                     const store = envCredentialStore(deps.ai?.env ?? process.env, deps.ai?.localConfig ?? loadLocalCredentials());
-                    return Object.keys(FEATURE_KEYS).every((f) => FEATURE_KEYS[f].every((k) => store.detect(k)));
+                    const jevProvider = jevProviderOverride(deps.ai?.env ?? process.env);
+                    return Object.keys(FEATURE_KEYS).every((f) => featureReady(f, store, jevProvider));
                 })();
             const projectDir = data.project?.dir ?? null;
             data.nextSteps = initNextSteps({
@@ -131,8 +176,11 @@ export function registerInitCommands(program, deps) {
                 // []` that reads as "missing" when every key was already set.
                 if (data.keys)
                     out?.(`${formatInitKeysHuman(data.keys)}\n`);
-                if (data.skills)
+                if (data.skills) {
                     out?.(`skills: ${data.skills.length} target/skill pairs ${dryRun === true ? "would be processed" : "processed"}\n`);
+                    for (const line of skillReportLines(data.skills))
+                        out?.(`${line}\n`);
+                }
                 if (data.mcp)
                     out?.(`mcp: ${data.mcp.length} harness config(s) ${dryRun === true ? "would be processed" : "processed"}\n`);
                 const project = data.project;
@@ -141,6 +189,11 @@ export function registerInitCommands(program, deps) {
                         ? `project: ${project.reason ?? "none"}\n`
                         : `project: ${project.dir} (${project.created.length} ${dryRun === true ? "would create" : "created"})\n`);
                 }
+                const owners = data.codeowners;
+                if (owners !== undefined) {
+                    out?.(`codeowners: ${owners.path} (${dryRun === true && owners.action !== "unchanged" ? `would ${owners.action}` : owners.action}) — ${owners.owners.join(" ")}\n`);
+                    out?.(`  note: ${owners.note}\n`);
+                }
                 out?.(`next steps${data.project?.dir == null ? "" : " (app URLs: .jevitate/environments.json)"}:\n`);
                 for (const line of data.nextSteps)
                     out?.(`  ${line}\n`);
@@ -148,9 +201,26 @@ export function registerInitCommands(program, deps) {
             }
         }
         catch (err) {
-            const code = err instanceof KeyCheckError ? err.code : "E_INIT";
+            const code = err instanceof KeyCheckError || err instanceof CodeownersArgsError ? err.code : "E_INIT";
             emitCommandResult(program, fail(code, String(err instanceof Error ? err.message : err)), { json: json === true, command: "init" });
         }
     });
 }
+/**
+ * #431: the skill-install/uninstall actions a person must see — a file left alone because they
+ * edited it, or refused because its markers are broken (with the fix) — and, for uninstall, what
+ * was removed. `create`/`update`/`unchanged` stay in the count line above (and in --json).
+ */
+export function skillReportLines(reports) {
+    const lines = [];
+    for (const r of reports) {
+        if (r.action === "skip-user-modified")
+            lines.push(`  skipped ${r.path}: you edited it (re-run with --force to replace it)`);
+        else if (r.action === "refuse-malformed")
+            lines.push(`  refused ${r.path}: ${r.reason ?? "its JEVITATE SKILLS markers are malformed"}`);
+        else if (r.action === "remove" || r.action === "force-remove")
+            lines.push(`  removed ${r.path}`);
+    }
+    return lines;
+}
 //# sourceMappingURL=init-cli.js.map