@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/cli/doctor/toolchain-parity.js

@@ -1,154 +0,0 @@
-// Toolchain-parity doctor section (task 13919613, doctor companion to
-// `harness session-start toolchain-parity`). Reuses the Collector +
-// Comparator core straight from src/cli/session-start/toolchain-parity.ts
-// (`collectLocalSnapshot`, `compareToPeer`, `parseSnapshotJson`,
-// `formatSnapshotAge`, the real collectors, `sanitizeProfileName`,
-// `defaultMachineStateDir`) — see that module's header for the full
-// rationale of what each collected field means and how a peer comparison
-// is computed. No comparison logic is re-implemented here.
-//
-// Unlike the SessionStart producer, this check is READ-ONLY: it never
-// writes a snapshot file (that stays the producer's job — the thing that
-// actually keeps the machine-state directory populated for every OTHER
-// machine to compare against) and never touches the ledger. It only
-// answers "if I compared my current live toolchain against whatever peer
-// snapshots already exist, right now, what would I see?" — an on-demand
-// read of the same comparison SessionStart runs automatically.
-//
-// Advisory only: drift is always a warning, never an error, and this is
-// not any kind of gate (constraint carried over verbatim from the
-// producer's own contract).
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { collectLocalSnapshot, compareToPeer, defaultMachineStateDir, formatSnapshotAge, parseSnapshotJson, realNodeVersionSpawn, realNpmGlobalsSpawn, realReadMcpServerNames, realReadOwKitVersion, sanitizeProfileName, } from "../session-start/toolchain-parity.js";
-// Same ceilings as the producer's own defaults (see that module's
-// timeout-constants comment for the full budget derivation) — doctor
-// pays the same worst-case spawn cost when it actually collects.
-const DEFAULT_NODE_TIMEOUT_MS = 2_000;
-const DEFAULT_NPM_GLOBALS_TIMEOUT_MS = 4_000;
-/**
- * A peer JSON filename (minus its `.json` suffix) is untrusted,
- * cross-machine-synced content (agent-memory-sync populates this
- * directory from other machines) — the same class of content the
- * producer's `note()` choke point CR/LF-strips before ever reaching a
- * stderr line (task c1b5ade5 R2b). This module hands its section back as
- * STRUCTURED data (profile strings, drift `message` strings assembled by
- * the reused `compareToPeer`), so the equivalent choke point lives at the
- * doctor FORMAT layer (`formatToolchainParitySection` in format.ts) —
- * every string this section produces that could carry a peer-controlled
- * value gets CR/LF-stripped there, at the point it actually becomes
- * terminal output, not here.
- */
-function peerLabelFromFileName(fileName) {
-    return fileName.replace(/\.json$/, "") || fileName;
-}
-export async function runDoctorToolchainParity(manifest, opts = {}) {
-    const config = manifest.toolchain_parity;
-    const now = opts.now ?? new Date();
-    const cwd = opts.cwd ?? process.cwd();
-    const machineStateDir = config.machine_state_dir ?? defaultMachineStateDir();
-    const profile = config.profile ?? sanitizeProfileName(os.hostname());
-    const sanitizedProfile = sanitizeProfileName(profile);
-    const ownFileName = `${sanitizedProfile}.json`;
-    const workspaceRoot = config.workspace_root ?? cwd;
-    const noPeers = (message) => ({
-        status: "no-peers",
-        message,
-        profile,
-        peers: [],
-        driftTotal: 0,
-        unparseablePeers: [],
-    });
-    // Peer-existence check runs BEFORE any collection: there is nothing to
-    // compare the local live snapshot against without at least one peer
-    // file, so this order avoids paying the node/npm spawn cost (and, in
-    // `--shallow` mode, avoids the spawn-skip branch entirely having to be
-    // reached) in the common "first machine, no peer has run session-start
-    // toolchain-parity yet" case.
-    let entries;
-    try {
-        entries = fs.readdirSync(machineStateDir);
-    }
-    catch {
-        return noPeers(`no peer snapshots found (machine-state dir ${machineStateDir} does not exist yet); ` +
-            "normal for the first machine, or before any peer has run `harness session-start toolchain-parity`");
-    }
-    const peerFiles = entries.filter((name) => name.endsWith(".json") && name !== ownFileName).sort();
-    if (peerFiles.length === 0) {
-        return noPeers(`no peer snapshots found in ${machineStateDir}; nothing to compare (normal for the first ` +
-            "machine, or before any peer has run `harness session-start toolchain-parity`)");
-    }
-    if (opts.shallow) {
-        return {
-            status: "skipped",
-            message: "harness doctor --shallow does not collect a live toolchain snapshot to compare",
-            profile,
-            peers: [],
-            driftTotal: 0,
-            unparseablePeers: [],
-        };
-    }
-    const runNodeVersion = opts.runNodeVersion ?? realNodeVersionSpawn;
-    const runNpmGlobals = opts.runNpmGlobals ?? realNpmGlobalsSpawn;
-    const readOwKitVersion = opts.readOwKitVersion ?? realReadOwKitVersion;
-    const readMcpServerNames = opts.readMcpServerNames ?? realReadMcpServerNames;
-    const { snapshot: localSnapshot } = await collectLocalSnapshot({
-        profile,
-        now,
-        workspaceRoot,
-        nodeTimeoutMs: opts.nodeTimeoutMs ?? DEFAULT_NODE_TIMEOUT_MS,
-        npmTimeoutMs: opts.npmTimeoutMs ?? DEFAULT_NPM_GLOBALS_TIMEOUT_MS,
-        runNodeVersion,
-        runNpmGlobals,
-        readOwKitVersion,
-        readMcpServerNames,
-    });
-    const peers = [];
-    const unparseablePeers = [];
-    let driftTotal = 0;
-    for (const fileName of peerFiles) {
-        const filePath = path.join(machineStateDir, fileName);
-        let raw;
-        try {
-            raw = fs.readFileSync(filePath, "utf8");
-        }
-        catch {
-            unparseablePeers.push(peerLabelFromFileName(fileName));
-            continue;
-        }
-        const parsed = parseSnapshotJson(raw);
-        if (!parsed.ok) {
-            unparseablePeers.push(peerLabelFromFileName(fileName));
-            continue;
-        }
-        const comparison = compareToPeer(localSnapshot, parsed.snapshot, now);
-        driftTotal += comparison.drift.length;
-        peers.push({
-            peerProfile: comparison.peerProfile,
-            status: comparison.drift.length === 0 ? "ok" : "drift",
-            driftCount: comparison.drift.length,
-            ageMs: comparison.ageMs,
-            ageLabel: formatSnapshotAge(comparison.ageMs),
-            drift: comparison.drift,
-        });
-    }
-    if (peers.length === 0) {
-        return {
-            ...noPeers(`no comparable peer snapshots (all ${peerFiles.length} peer file(s) in ${machineStateDir} ` +
-                "were unreadable/corrupt)"),
-            unparseablePeers,
-        };
-    }
-    return {
-        status: driftTotal === 0 ? "ok" : "drift",
-        message: driftTotal === 0
-            ? `toolchain parity ok against ${peers.length} peer(s)`
-            : `${driftTotal} drift item(s) found across ${peers.length} peer(s)`,
-        profile,
-        peers,
-        driftTotal,
-        unparseablePeers,
-    };
-}
-//# sourceMappingURL=toolchain-parity.js.map

package/dist/cli/doctor/toolchain-parity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolchain-parity.js","sourceRoot":"","sources":["../../../src/cli/doctor/toolchain-parity.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,oEAAoE;AACpE,0EAA0E;AAC1E,iEAAiE;AACjE,mEAAmE;AACnE,oEAAoE;AACpE,yEAAyE;AACzE,2DAA2D;AAC3D,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,yEAAyE;AACzE,wEAAwE;AACxE,+DAA+D;AAC/D,EAAE;AACF,wEAAwE;AACxE,kEAAkE;AAClE,4BAA4B;AAE5B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,GAIpB,MAAM,sCAAsC,CAAC;AAE9C,kEAAkE;AAClE,qEAAqE;AACrE,iEAAiE;AACjE,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AA2D7C;;;;;;;;;;;;GAYG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAkB,EAClB,OAAwC,EAAE;IAE1C,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,IAAI,sBAAsB,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,GAAG,gBAAgB,OAAO,CAAC;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,IAAI,GAAG,CAAC;IAEnD,MAAM,OAAO,GAAG,CAAC,OAAe,EAA0B,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,UAAU;QAClB,OAAO;QACP,OAAO;QACP,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,CAAC;QACb,gBAAgB,EAAE,EAAE;KACrB,CAAC,CAAC;IAEH,uEAAuE;IACvE,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,8BAA8B;IAC9B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CACZ,8CAA8C,eAAe,wBAAwB;YACnF,mGAAmG,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAClG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CACZ,8BAA8B,eAAe,6CAA6C;YACxF,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,gFAAgF;YACzF,OAAO;YACP,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,EAAE;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,oBAAoB,CAAC;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAChE,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,oBAAoB,CAAC;IACvE,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,sBAAsB,CAAC;IAE7E,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,CAAC;QAC7D,OAAO;QACP,GAAG;QACH,aAAa;QACb,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,uBAAuB;QAC5D,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,8BAA8B;QACjE,cAAc;QACd,aAAa;QACb,gBAAgB;QAChB,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAgC,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,gBAAgB,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtE,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC;YACT,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YACtD,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;YACnC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7C,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,OAAO,CACR,qCAAqC,SAAS,CAAC,MAAM,oBAAoB,eAAe,GAAG;gBACzF,0BAA0B,CAC7B;YACD,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;QACzC,OAAO,EACL,UAAU,KAAK,CAAC;YACd,CAAC,CAAC,+BAA+B,KAAK,CAAC,MAAM,UAAU;YACvD,CAAC,CAAC,GAAG,UAAU,+BAA+B,KAAK,CAAC,MAAM,UAAU;QACxE,OAAO;QACP,KAAK;QACL,UAAU;QACV,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/cli/doctor/ug-auto-approvals.d.ts

@@ -1,40 +0,0 @@
-/** Default doctor window when `--recent-sessions` is not passed. */
-export declare const DEFAULT_RECENT_SESSIONS = 20;
-export interface AutoApprovalListingEntry {
-    sessionId: string;
-    mode: string;
-    harness: string;
-    approvedAt: string;
-}
-export interface UgAutoApprovalsSection {
-    /** Whether `<generatedDir>/.approvals/` exists at all. */
-    approvalsDirPresent: boolean;
-    /** The `recentSessions` window that was applied. */
-    windowSize: number;
-    /** Auto approvals among the newest `windowSize` session markers. */
-    autoApprovedCount: number;
-    /** Per-mode breakdown of `autoApprovedCount` (e.g. `{bypassPermissions: 3}`). */
-    byMode: Record<string, number>;
-    /** Per-harness breakdown of `autoApprovedCount` (e.g. `{"claude-code": 3}`). */
-    byHarness: Record<string, number>;
-    /** `(sessionId, mode, approvedAt)` for each auto approval in the window, newest first. */
-    entries: AutoApprovalListingEntry[];
-    /**
-     * Session markers whose body could not be read as JSON with a
-     * parseable `approvedAt` (corrupt file, non-JSON content, missing
-     * `approvedAt`). Excluded from the window (there is no timestamp to
-     * sort them by) and never counted as auto approvals; surfaced as a
-     * single summary count instead of per-file noise.
-     */
-    unreadableCount: number;
-}
-/**
- * Build the auto-approval listing + last-N metric. Pure filesystem read;
- * never throws for ordinary "nothing to see" states (missing
- * `.approvals/`, empty directory, every marker unreadable) — those all
- * resolve to an empty-ish section rather than an exception, mirroring
- * the rest of doctor's read-only checks.
- */
-export declare function buildUgAutoApprovals(generatedDir: string, opts: {
-    recentSessions: number;
-}): UgAutoApprovalsSection;

package/dist/cli/doctor/ug-auto-approvals.js

@@ -1,91 +0,0 @@
-// Doctor visibility half of ADR docs/decisions/2026-08-27-ug-auto-mode-approval.md
-// slice 1 (agent-tasks 74b4b17d): the "auto approvals in the last N
-// sessions" listing named in the ADR's "Audit and doctor" section and
-// slice 1 acceptance criterion 7.
-//
-// Scans `<generatedDir>/.approvals/` for SESSION markers (skips the
-// per-task markers named `task-<id>` and the branch-protection markers
-// named `branch-protection-<sid>`, neither of which is a session
-// approval), sorts the readable ones newest-first by `approvedAt`,
-// takes the newest `recentSessions` of them, and reports how many of
-// THOSE were minted by the auto path (`approvedBy` starting with
-// `auto-mode:`, see auto-approve.ts's `parseAutoApprovedBy`).
-//
-// This is an AUDIT SURFACE, not a security check: it never verifies a
-// marker's HMAC signature (that is `checkApprovalMarker`'s job at gate
-// time; a forged marker still gets rejected there regardless of what
-// this listing shows) and it never blocks or writes anything.
-import * as path from "node:path";
-import { readJsonDirEntriesRejectingSymlinks } from "../../io/read-json-dir-entries.js";
-import { BRANCH_PROTECTION_MARKER_PREFIX } from "../../policy-packs/builtin/branch-protection-runtime.js";
-import { APPROVAL_MARKER_DIRNAME, APPROVAL_MARKER_TASK_PREFIX, parseAutoApprovedBy, } from "../../policy-packs/builtin/understanding-before-execution/index.js";
-/** Default doctor window when `--recent-sessions` is not passed. */
-export const DEFAULT_RECENT_SESSIONS = 20;
-function emptySection(windowSize) {
-    return {
-        approvalsDirPresent: false,
-        windowSize,
-        autoApprovedCount: 0,
-        byMode: {},
-        byHarness: {},
-        entries: [],
-        unreadableCount: 0,
-    };
-}
-/**
- * Build the auto-approval listing + last-N metric. Pure filesystem read;
- * never throws for ordinary "nothing to see" states (missing
- * `.approvals/`, empty directory, every marker unreadable) — those all
- * resolve to an empty-ish section rather than an exception, mirroring
- * the rest of doctor's read-only checks.
- */
-export function buildUgAutoApprovals(generatedDir, opts) {
-    const windowSize = opts.recentSessions;
-    const dir = path.join(generatedDir, APPROVAL_MARKER_DIRNAME);
-    // A symlink / non-regular / raced-away entry is not a session marker this
-    // listing owns an opinion about; the shared reader skips it silently
-    // rather than counting it as "unreadable" (that count is for a FILE we
-    // expected to be a marker but could not parse).
-    const { dirPresent, entries: readable, unreadableCount } = readJsonDirEntriesRejectingSymlinks(dir, {
-        skip: (name) => name.startsWith(APPROVAL_MARKER_TASK_PREFIX) || name.startsWith(BRANCH_PROTECTION_MARKER_PREFIX),
-        parse: (raw, name) => {
-            if (raw === null || typeof raw !== "object" || Array.isArray(raw))
-                return null;
-            const obj = raw;
-            const approvedAt = obj["approvedAt"];
-            if (typeof approvedAt !== "string" || Number.isNaN(Date.parse(approvedAt)))
-                return null;
-            return { sessionId: name, approvedAt, approvedBy: obj["approvedBy"] };
-        },
-    });
-    if (!dirPresent)
-        return emptySection(windowSize);
-    readable.sort((a, b) => Date.parse(b.approvedAt) - Date.parse(a.approvedAt));
-    const windowed = readable.slice(0, windowSize);
-    const byMode = {};
-    const byHarness = {};
-    const entries = [];
-    for (const m of windowed) {
-        const parsedAuto = parseAutoApprovedBy(m.approvedBy);
-        if (parsedAuto === null)
-            continue;
-        byMode[parsedAuto.mode] = (byMode[parsedAuto.mode] ?? 0) + 1;
-        byHarness[parsedAuto.harness] = (byHarness[parsedAuto.harness] ?? 0) + 1;
-        entries.push({
-            sessionId: m.sessionId,
-            mode: parsedAuto.mode,
-            harness: parsedAuto.harness,
-            approvedAt: m.approvedAt,
-        });
-    }
-    return {
-        approvalsDirPresent: true,
-        windowSize,
-        autoApprovedCount: entries.length,
-        byMode,
-        byHarness,
-        entries,
-        unreadableCount,
-    };
-}
-//# sourceMappingURL=ug-auto-approvals.js.map

package/dist/cli/doctor/ug-auto-approvals.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ug-auto-approvals.js","sourceRoot":"","sources":["../../../src/cli/doctor/ug-auto-approvals.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,oEAAoE;AACpE,sEAAsE;AACtE,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,iEAAiE;AACjE,mEAAmE;AACnE,qEAAqE;AACrE,iEAAiE;AACjE,8DAA8D;AAC9D,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,8DAA8D;AAE9D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,yDAAyD,CAAC;AAC1G,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,oEAAoE,CAAC;AAE5E,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAgC1C,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO;QACL,mBAAmB,EAAE,KAAK;QAC1B,UAAU;QACV,iBAAiB,EAAE,CAAC;QACpB,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,eAAe,EAAE,CAAC;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,IAAgC;IAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,mCAAmC,CAI3F,GAAG,EAAE;QACN,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC;QAClG,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACnB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/E,MAAM,GAAG,GAAG,GAA8B,CAAC;YAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACxE,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU;QAAE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;IAEjD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAE/C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,IAAI;YAAE,SAAS;QAClC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7D,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,mBAAmB,EAAE,IAAI;QACzB,UAAU;QACV,iBAAiB,EAAE,OAAO,CAAC,MAAM;QACjC,MAAM;QACN,SAAS;QACT,OAAO;QACP,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/cli/doctor/ug-delegations.d.ts

@@ -1,26 +0,0 @@
-export interface UgDelegationsSection {
-    /** Whether `<generatedDir>/.delegations/` exists at all. */
-    delegationsDirPresent: boolean;
-    /** Delegation files found in `.delegations/`, readable or not. */
-    total: number;
-    /** Of `total`, how many parsed with an `expires` segment in the past. */
-    expired: number;
-    /** Of `total`, how many were not valid JSON, or failed `parseDelegationApprovedBy`. */
-    unreadable: number;
-}
-/**
- * Build the delegations-on-disk doctor metric. Pure filesystem read;
- * never throws for "nothing to see" states (missing `.delegations/`,
- * empty directory, every file unreadable), those all resolve to a
- * zero-ish section, mirroring `buildUgAutoApprovals`. `total`/`expired`/
- * `unreadable` read `0` for both an EMPTY and a MISSING directory; only
- * `delegationsDirPresent` tells them apart, the same way
- * `approvalsDirPresent` does for `buildUgAutoApprovals`, doctor's
- * render layer uses it to stay silent when there is truly nothing on
- * disk (`format.ts`'s own "no line for a check that found nothing"
- * convention) while still rendering the zero-count line for a
- * `harness delegate`-touched, now-empty directory.
- */
-export declare function buildUgDelegations(generatedDir: string, opts?: {
-    now?: Date;
-}): UgDelegationsSection;

package/dist/cli/doctor/ug-delegations.js

@@ -1,121 +0,0 @@
-// Doctor visibility for slice 3 delegations (ADR
-// docs/decisions/2026-08-27-ug-auto-mode-approval.md, "Audit and
-// doctor", agent-tasks 37ad0b05): "delegations on disk: <count>
-// (<count> expired)" from `<generatedDir>/.delegations/`, distinct from
-// the `.approvals/` auto-approval listing in `ug-auto-approvals.ts`.
-//
-// SEPARATE DIRECTORY, DELIBERATELY: a delegation never lands in
-// `.approvals/` (delegation-markers.ts's module header), so this scan
-// reads `DELEGATION_MARKER_DIRNAME` (".delegations") only and never
-// touches the approvals directory `ug-auto-approvals.ts` owns. Mirrors
-// that module's read-only-audit shape (no signature verification here
-// either; a forged delegation still gets rejected by the dedicated
-// verifier at gate time, `delegation-markers.ts`'s `verifyDelegation`)
-// but does not share its code: the two scans read different
-// directories, filter differently (no task-marker / branch-protection
-// prefix skip here), and count differently (an approval count vs. an
-// expiry count), so a shared helper would mostly be parameters threading
-// through an otherwise-empty shell. `npm run check:duplication` is the
-// backstop if that stops being true.
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { readRegularFileRejectingSymlink } from "../../io/read-regular-file.js";
-import { safeJsonParse } from "../../io/safe-json-parse.js";
-import { DELEGATION_MARKER_DIRNAME, parseDelegationApprovedBy, } from "../../policy-packs/builtin/understanding-before-execution/index.js";
-function emptySection() {
-    return { delegationsDirPresent: false, total: 0, expired: 0, unreadable: 0 };
-}
-/**
- * A delegation filename is always a session id: a UUID handed out by
- * Claude Code or Codex, or (in this repo's own test fixtures) a short
- * alnum/hyphen placeholder. Neither ever contains a literal `.` or
- * starts with one. Filtering on that BEFORE the read is what keeps
- * filesystem debris that happens to sit next to `.delegations/` files
- * (macOS's `.DS_Store`, a stray `foo.txt`) from counting toward `total`
- * at all: without it, such a file reads as valid-but-not-JSON and rolls
- * into `unreadable`, which flips this metric's doctor line from
- * informational (ℹ) straight to a WARNING (⚠) for debris that was never
- * a delegation to begin with. Mirrors the same non-empty/no-traversal
- * shape family `rejectMalformedSessionId` pins for a delegation's own
- * filename on the write side (`delegationMarkerPathFor`), tightened to
- * additionally exclude a dot, which is the part that actually
- * discriminates a stray dotfile from a real session id.
- */
-const SESSION_ID_BASENAME_RE = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
-/**
- * Build the delegations-on-disk doctor metric. Pure filesystem read;
- * never throws for "nothing to see" states (missing `.delegations/`,
- * empty directory, every file unreadable), those all resolve to a
- * zero-ish section, mirroring `buildUgAutoApprovals`. `total`/`expired`/
- * `unreadable` read `0` for both an EMPTY and a MISSING directory; only
- * `delegationsDirPresent` tells them apart, the same way
- * `approvalsDirPresent` does for `buildUgAutoApprovals`, doctor's
- * render layer uses it to stay silent when there is truly nothing on
- * disk (`format.ts`'s own "no line for a check that found nothing"
- * convention) while still rendering the zero-count line for a
- * `harness delegate`-touched, now-empty directory.
- */
-export function buildUgDelegations(generatedDir, opts = {}) {
-    const now = opts.now ?? new Date();
-    const dir = path.join(generatedDir, DELEGATION_MARKER_DIRNAME);
-    let dirStat;
-    try {
-        dirStat = fs.lstatSync(dir);
-    }
-    catch {
-        return emptySection();
-    }
-    if (!dirStat.isDirectory())
-        return emptySection();
-    let dirents;
-    try {
-        dirents = fs.readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return emptySection();
-    }
-    let total = 0;
-    let expired = 0;
-    let unreadable = 0;
-    for (const d of dirents) {
-        // Not a session-id-shaped basename: never a delegation file (a
-        // stray dotfile, an extensioned file, a directory, ...), skip
-        // before even reading it. The once-per-session adoption ledger is
-        // never nested under here: `.delegation-adoptions/` is a SIBLING of
-        // `.delegations/` (see delegation-markers.ts's module header), so
-        // this filter has no ledger-shaped entry to reason about; an
-        // ordinary session-id-named directory would still fall through to
-        // the `not-regular` skip below, same as any other directory would.
-        if (!SESSION_ID_BASENAME_RE.test(d.name))
-            continue;
-        const full = path.join(dir, d.name);
-        const read = readRegularFileRejectingSymlink(full);
-        // A symlink / non-regular / raced-away entry is not a delegation
-        // file this metric owns an opinion about; skip silently, same
-        // reasoning as `buildUgAutoApprovals`.
-        if (read.kind === "symlink" || read.kind === "not-regular" || read.kind === "missing") {
-            continue;
-        }
-        total++;
-        if (read.kind === "unreadable") {
-            unreadable++;
-            continue;
-        }
-        const parsed = safeJsonParse(read.content);
-        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-            unreadable++;
-            continue;
-        }
-        const obj = parsed;
-        const segments = parseDelegationApprovedBy(obj["approvedBy"]);
-        if (!segments.ok) {
-            unreadable++;
-            continue;
-        }
-        if (Date.parse(segments.value.expiresAt) <= now.getTime()) {
-            expired++;
-        }
-    }
-    return { delegationsDirPresent: true, total, expired, unreadable };
-}
-//# sourceMappingURL=ug-delegations.js.map

package/dist/cli/doctor/ug-delegations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ug-delegations.js","sourceRoot":"","sources":["../../../src/cli/doctor/ug-delegations.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,iEAAiE;AACjE,gEAAgE;AAChE,wEAAwE;AACxE,qEAAqE;AACrE,EAAE;AACF,gEAAgE;AAChE,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,uEAAuE;AACvE,qCAAqC;AAErC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,oEAAoE,CAAC;AAa5E,SAAS,YAAY;IACnB,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,OAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAE/D,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;QAAE,OAAO,YAAY,EAAE,CAAC;IAElD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,+DAA+D;QAC/D,8DAA8D;QAC9D,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,6DAA6D;QAC7D,kEAAkE;QAClE,mEAAmE;QACnE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAEnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;QACnD,iEAAiE;QACjE,8DAA8D;QAC9D,uCAAuC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtF,SAAS;QACX,CAAC;QACD,KAAK,EAAE,CAAC;QACR,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACrE,CAAC"}

package/dist/cli/doctor/ug-inflight.d.ts

@@ -1,35 +0,0 @@
-export interface UgInflightSection {
-    /** Whether `<generatedDir>/.inflight/` exists at all. */
-    inflightDirPresent: boolean;
-    /** Records found and readable, across every session directory. */
-    total: number;
-    /**
-     * Of `total`, how many have an `approvedAt` older than the staleness
-     * window, or dated implausibly far in the future (clock skew or
-     * tampering — this is an audit listing, not a trust decision, so
-     * either counts as stale, mirroring `listInflightRecords`'s own doc).
-     */
-    stale: number;
-    /** Entries gc/doctor could not make sense of (debris, unreadable, missing/bad approvedAt). */
-    skipped: number;
-}
-/**
- * Build the in-flight-records-on-disk doctor metric. Pure filesystem
- * read, never throws: a missing or empty `.inflight/` resolves to a
- * zero-ish section, mirroring `buildUgDelegations`. `inflightDirPresent`
- * is the only field that tells "missing" and "present but empty" apart,
- * same convention `delegationsDirPresent` follows — doctor's render
- * layer uses it to stay silent when there is truly nothing on disk.
- *
- * lstat, not `existsSync` (which follows a symlink to whatever it
- * points at): a symlinked `.inflight/` reads as absent here, the same
- * way a symlinked record file already reads as absent one level down.
- * Still needed even though `listInflightRecords` now applies the same
- * lstat guard internally: this function's own check is what decides
- * `inflightDirPresent`, a flag `listInflightRecords`'s return shape has
- * no room for, and that doctor's render layer needs to tell "absent"
- * apart from "present but empty".
- */
-export declare function buildUgInflight(generatedDir: string, opts?: {
-    now?: Date;
-}): UgInflightSection;

package/dist/cli/doctor/ug-inflight.js

@@ -1,57 +0,0 @@
-// Doctor visibility for in-flight subagent records (subagent-gate
-// slice 1, docs/decisions/2026-08-27-ug-auto-mode-approval.md
-// "Invariants", "Threat model", "Delegation marker shape"): "in-flight
-// subagent records on disk: <count> (<count> stale)" from
-// `<generatedDir>/.inflight/`, distinct from the `.delegations/`
-// listing in `ug-delegations.ts` and the `.approvals/` one in
-// `ug-auto-approvals.ts`.
-//
-// Thin wrapper around `listInflightRecords`, which already owns the
-// filesystem walk, the staleness computation and the tolerant-of-
-// debris posture; this file only shapes that result into the section
-// `harness doctor`'s report type expects, mirroring how
-// `ug-delegations.ts` sits beside `delegation-markers.ts`'s own reader.
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { INFLIGHT_RECORD_DIRNAME, listInflightRecords, } from "../../policy-packs/builtin/understanding-before-execution/index.js";
-function emptySection() {
-    return { inflightDirPresent: false, total: 0, stale: 0, skipped: 0 };
-}
-/**
- * Build the in-flight-records-on-disk doctor metric. Pure filesystem
- * read, never throws: a missing or empty `.inflight/` resolves to a
- * zero-ish section, mirroring `buildUgDelegations`. `inflightDirPresent`
- * is the only field that tells "missing" and "present but empty" apart,
- * same convention `delegationsDirPresent` follows — doctor's render
- * layer uses it to stay silent when there is truly nothing on disk.
- *
- * lstat, not `existsSync` (which follows a symlink to whatever it
- * points at): a symlinked `.inflight/` reads as absent here, the same
- * way a symlinked record file already reads as absent one level down.
- * Still needed even though `listInflightRecords` now applies the same
- * lstat guard internally: this function's own check is what decides
- * `inflightDirPresent`, a flag `listInflightRecords`'s return shape has
- * no room for, and that doctor's render layer needs to tell "absent"
- * apart from "present but empty".
- */
-export function buildUgInflight(generatedDir, opts = {}) {
-    const dir = path.join(generatedDir, INFLIGHT_RECORD_DIRNAME);
-    let stat;
-    try {
-        stat = fs.lstatSync(dir);
-    }
-    catch {
-        return emptySection();
-    }
-    if (!stat.isDirectory()) {
-        return emptySection();
-    }
-    const result = listInflightRecords(generatedDir, opts.now);
-    return {
-        inflightDirPresent: true,
-        total: result.total,
-        stale: result.stale,
-        skipped: result.skipped.length,
-    };
-}
-//# sourceMappingURL=ug-inflight.js.map

package/dist/cli/doctor/ug-inflight.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ug-inflight.js","sourceRoot":"","sources":["../../../src/cli/doctor/ug-inflight.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,8DAA8D;AAC9D,uEAAuE;AACvE,0DAA0D;AAC1D,iEAAiE;AACjE,8DAA8D;AAC9D,0BAA0B;AAC1B,EAAE;AACF,oEAAoE;AACpE,kEAAkE;AAClE,qEAAqE;AACrE,wDAAwD;AACxD,wEAAwE;AAExE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,oEAAoE,CAAC;AAkB5E,SAAS,YAAY;IACnB,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,OAAuB,EAAE;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC7D,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO;QACL,kBAAkB,EAAE,IAAI;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC"}

package/dist/cli/doctor/understanding-mode-env.d.ts

@@ -1,51 +0,0 @@
-import { type Mode } from "../../policy-packs/builtin/understanding-before-execution.js";
-import type { Manifest } from "../../schema/index.js";
-import type { PolicyPack } from "../../schema/policy-packs.js";
-export interface UnderstandingModeEnvDivergence {
-    /** `UNDERSTANDING_GATE_MODE`, normalised (trim + lowercase, mirrors `resolveMode`'s own normalisation). */
-    envMode: Mode;
-    /** `policy_packs[understanding-before-execution].config.mode`, resolved via the config-only (GENERATION-path) resolver. */
-    configMode: Mode;
-    /**
-     * Short headline, rendered as the `⚠` line itself. Mirrors the
-     * npm-global-bin-off-PATH advisory's rendering idiom (`format.ts`'s
-     * Environment section): a one-line headline plus indented {@link detail}
-     * lines underneath, instead of one long sentence crammed onto the `⚠`
-     * line.
-     */
-    message: string;
-    /**
-     * 2-3 indented lines rendered directly under {@link message} by
-     * `format.ts`. Carries the explanation and remediation the old
-     * single-line `message` used to carry inline.
-     */
-    detail: string[];
-}
-/**
- * Pure: manifest + env in, a divergence report out (or `undefined` when
- * there is nothing to flag). Only fires when:
- *   - the `understanding-before-execution` pack is declared AND enabled
- *     (a pack that never runs has no live mode for the env to diverge
- *     from — mirrors the enabled-gate other doctor sections use, e.g.
- *     `buildGrounding`'s `groundingServer` lookup in `index.ts`);
- *   - `UNDERSTANDING_GATE_MODE` is set to a non-empty value AND, once
- *     trimmed/lower-cased the same way `resolveMode` normalises it,
- *     resolves to a recognised {@link Mode}. An env value the live
- *     runtime would itself reject (unset, empty, or unrecognised) cannot
- *     diverge from anything — the live resolver falls back to
- *     `config.mode` in that case too, so there is no enforcement gap to
- *     warn about.
- *   - the normalised env mode differs from the resolved `config.mode`.
- */
-/**
- * Shared gate for the understanding-gate doctor sub-checks that only
- * make sense when the pack is actually live: this divergence advisory,
- * and (ADR docs/decisions/2026-08-27-ug-auto-mode-approval.md slice 1,
- * agent-tasks 74b4b17d) the auto-approval listing and settings-drift
- * checks. Declared-but-disabled counts as not enabled, mirroring the
- * `p.enabled !== false` gate `checkUnderstandingModeEnvDivergence` uses
- * inline below.
- */
-export declare function findEnabledUnderstandingPack(manifest: Manifest): PolicyPack | undefined;
-export declare function isUnderstandingPackEnabled(manifest: Manifest): boolean;
-export declare function checkUnderstandingModeEnvDivergence(manifest: Manifest, env: NodeJS.ProcessEnv): UnderstandingModeEnvDivergence | undefined;