@lannguyensi/harness 0.64.0 → 1.0.0

package/dist/cli/doctor/types.d.ts

@@ -1,23 +1,11 @@
 import type { McpProbeResult } from "../../probes/mcp.js";
 import type { MemoryReport, StaleMemory } from "../../probes/memory.js";
 import type { Manifest } from "../../schema/index.js";
-import type { Diagnostic } from "../validate/types.js";
 import type { ClaudeMcpRegistrationSection } from "./claude-mcp.js";
 import type { CodexTargetReport } from "./codex.js";
 import type { OpencodeTargetReport } from "./opencode.js";
 import type { NpmBinReport } from "./npm-bin-path.js";
-import type { RogueLedgerDb } from "./rogue-ledger.js";
-import type { UnderstandingModeEnvDivergence } from "./understanding-mode-env.js";
-import type { ToolchainParitySection } from "./toolchain-parity.js";
-import type { UgAutoApprovalsSection } from "./ug-auto-approvals.js";
-import type { UgDelegationsSection } from "./ug-delegations.js";
-import type { UgInflightSection } from "./ug-inflight.js";
-import type { SettingsDriftSection } from "./settings-drift.js";
-import type { AutoApproveModeWarning } from "./auto-approve-mode.js";
-import type { ExpireOnToolMatchWarning } from "./expire-on-tool-match.js";
-import type { BypassWithoutAutoApproveFinding } from "./bypass-without-auto-approve.js";
-import type { SessionStartPreflightSetupVersionFinding } from "./session-start-preflight-setup-version.js";
-import type { CodexConfigDriftSection } from "./codex-config-drift.js";
+import type { HookLivenessSection } from "./hook-liveness.js";
 /**
  * Phase 6 #6 follow-up — doctor target identifier. Distinct from
  * `Runtime` (which gates `harness apply --runtime`): doctor only adds
@@ -79,11 +67,9 @@ export type HookVersionReport = {
 } | {
     status: "warn";
     /**
-     * Which outcome the probe hit, mirroring `PolicyPackVersionGapKind`
-     * (`src/policy-packs/version-check.ts`) so both hook-level and
-     * pack-level gaps share one warning vocabulary. Required on
-     * `warn`: every warn-producing branch of `checkHookVersion`
-     * classifies its outcome, so there is no warn case without one.
+     * Which outcome the probe hit. Required on `warn`: every
+     * warn-producing branch of `checkHookVersion` classifies its
+     * outcome, so there is no warn case without one.
      */
     kind: "below_floor" | "probe_failed" | "parse_failed";
     /**
@@ -112,40 +98,6 @@ export interface HookEntryReport {
     message?: string;
     version?: HookVersionReport;
 }
-/**
- * A `block`-enforcement policy whose required ledger tag carries a
- * `within` freshness window, but no manifest hook produces that tag
- * AND the policy itself declares no `producers:` array. The gate will
- * wall off whatever it triggers on until the tag is supplied
- * out-of-band, with no in-manifest way to keep it satisfied or any
- * recovery path visible to the agent. Policies that document the
- * recovery in `producers:` (e.g. dogfood-before-release deliberately
- * wanting an operator-driven manual smoke summary) are NOT flagged
- * here, since that producer is the schema-blessed manual path. See
- * tasks ce50df99 (initial check) and f97e152f (producers-respect
- * refinement).
- */
-export interface PolicyProducerGap {
-    /** The unresolved `requires.ledger_tag`, e.g. `preflight:${REPO}`. */
-    ledgerTag: string;
-    /** The `requires.within` window the tag must stay fresh inside. */
-    within: string;
-}
-export interface PolicyEntryReport {
-    name: string;
-    schemaValid: boolean;
-    caveat: string;
-    /** Present when this policy has an unproduced freshness-gated tag. */
-    producerGap?: PolicyProducerGap;
-    /**
-     * True when this policy object was derived from `workflows[]`
-     * (`isDerivedPolicy`, F7, review round 2) rather than hand-authored
-     * under `policies:`. Rendered as "(derived from workflows[])" so an
-     * operator reading `harness doctor` output can tell provenance apart
-     * without cross-referencing `workflows:` themselves.
-     */
-    derived?: boolean;
-}
 /**
  * A declared policy pack whose `source` or builtin name does not
  * resolve. The pack appears in `manifest.policy_packs[]` (so the
@@ -173,31 +125,27 @@ export interface PolicyPackUnresolved {
  */
 export interface PolicyPackConfigIssue {
     name: string;
-    /** Dotted path inside `pack.config`, e.g. `mode`, `approval_lifecycle.mode`. */
+    /** Dotted path inside `pack.config`, e.g. `protected_branches`, `ux.cannot`. */
     configPath: string;
     message: string;
 }
 /**
- * Doctor surface for the pack-level `min_version` floor. Mirrors the
- * hook-level `HookEntryReport.version` shape so operators see a
- * consistent warning vocabulary regardless of which layer raised the
- * gap. Always warn-not-error: a below-floor pack still runs in degraded
- * mode; the operator just loses any feature gated on the newer release.
+ * Doctor surface for the pack-level `min_version` floor: a declared floor on
+ * a pack that has no version probe, so it cannot be enforced. Always
+ * warn-not-error.
  */
 export interface PolicyPackVersionGapReport {
     name: string;
     declaredMinVersion: string;
     /**
-     * Numeric run only (never the prerelease or build suffix), so a
-     * `below_floor` gap from a prerelease of the floor shows an
-     * `actualVersion` equal to `declaredMinVersion`; `message` carries the
-     * full probed token. Same trap as `HookVersionReport.actualVersion`.
+     * Always null: a builtin pack has no probe, so no installed version is
+     * known. Kept so the doctor JSON shape of `versionGaps` is unchanged.
      */
     actualVersion: string | null;
     message: string;
 }
 /**
- * A pack's declared `config.ux` / `config.producers` that textually
+ * A pack's declared `config.ux` that textually
  * diverges from the shipped builtin template for that pack (task
  * 68b9ad9c). Unlike `PolicyPackConfigIssue`, the value is still SCHEMA-
  * valid — the gap is that it teaches stale wording (e.g. a pre-fix
@@ -208,7 +156,7 @@ export interface PolicyPackVersionGapReport {
  */
 export interface PolicyPackUxDriftReport {
     name: string;
-    /** Which sub-field(s) diverge: `ux`, `producers`, or both. */
+    /** Which sub-field(s) diverge (today only `ux`). */
     fields: string[];
     message: string;
 }
@@ -222,105 +170,16 @@ export interface PackExpansionRuntimeReport {
     /** Set when the last apply's `.last-apply` could not be read; names the file. */
     warning?: string;
 }
-/**
- * Doctor surface for the HOOK-level `min_version` floor on a
- * policy-pack-EXPANDED hook (task ab634898). Distinct from
- * `PolicyPackVersionGapReport` (the pack-level `policy_packs[].min_version`
- * floor, a different mechanism checked by `checkPolicyPackVersions`):
- * this covers an individual hook a builtin pack contributes, e.g.
- * understanding-before-execution's UserPromptSubmit/Stop hooks, each
- * declaring its own `min_version` + `version_command`
- * (`src/policy-packs/builtin/understanding-before-execution.ts`).
- * `expandPolicyPacks` produces the hooks Claude Code actually runs, but
- * `manifest.hooks[]` (what `HookEntryReport`/`checkHooks` walk) never
- * includes them, so without this section an operator below a pack
- * hook's floor saw a clean doctor report. Always warn, never error;
- * mirrors the manifest-hook floor (`HookVersionReport`) and the
- * pack-level floor. Empty array when every pack-expanded hook that
- * declares a floor meets it (or none declare one).
- */
-export interface PolicyPackHookVersionGapReport {
-    /** The pack-expanded hook's name, e.g. `policy-pack:understanding-before-execution:user-prompt-submit`. */
-    name: string;
-    event: string;
-    declaredMinVersion: string;
-    /**
-     * Which outcome the probe hit; mirrors `PolicyPackVersionGapKind`
-     * (`src/policy-packs/version-check.ts`) so the hook-level and
-     * pack-level sections classify gaps the same way instead of the
-     * renderer having to regex `message` back apart.
-     */
-    kind: "below_floor" | "probe_failed" | "parse_failed";
-    /** Parsed installed version when the probe succeeded; null for `probe_failed` / `parse_failed`, where it is unknown. */
-    actualVersion: string | null;
-    /** The `version_command` that was probed, e.g. `["understanding-gate", "--version"]`. */
-    versionCommand: readonly string[];
-    message: string;
-}
 export interface PolicyPacksSection {
     unresolved: PolicyPackUnresolved[];
     configIssues: PolicyPackConfigIssue[];
     versionGaps: PolicyPackVersionGapReport[];
     uxDrift: PolicyPackUxDriftReport[];
-    solutionAcceptance: Diagnostic[];
-}
-export interface WorkflowEntryReport {
-    name: string;
-    steps: number;
-    reviewSpawn: "required" | "optional" | "skip" | null;
-    reviewTemplate: string | null;
-    mergeGate: "solo" | "agent_tasks_label" | "none" | null;
-    taskLabels: string[];
-}
-export interface WorkflowsSectionReport {
-    declared: number;
-    templates: number;
-    entries: WorkflowEntryReport[];
-    /**
-     * `checkWorkflowGateWiring` errors (F3, review round 2, 99f47307 Slice
-     * 1): a `spawn: "required"` review-then-merge workflow whose runtime
-     * merge gate is not correctly wired (a missing evidence hook, or one
-     * declared under the right name but the wrong trigger surface/command).
-     * `harness doctor` previously imported checks selectively and never ran
-     * this one, so it showed green on exactly this misconfiguration.
-     * Delegates to the shared validate check, mirroring `templateDrift`.
-     * Each rolls into `errorCount`.
-     */
-    errors: string[];
-    /**
-     * `checkWorkflowGateWeakOverlap` warnings (F1, review round 2): a
-     * hand-authored policy sharing a derived gate's trigger surface but
-     * weaker than it (does not suppress the derived gate, just worth
-     * flagging). Each rolls into `warningCount`.
-     */
-    warnings: string[];
-}
-/**
- * Phase 7 #6 — Risk Gate wiring health. Reports whether the three Risk
- * Gate surfaces (`risk.classifiers[]`, `environments.resolvers[]`, and
- * policies carrying a `when:` block) compose coherently. The `warnings`
- * catch the inert / fail-closed misconfigurations: `when:`-policies with
- * no classifier (every action unclassified), `when:`-policies with no
- * resolver (every environment `unknown`), or classifiers / resolvers
- * declared but no policy consuming them. The per-decision audit log
- * lives in `harness audit` (`policy_decision` rows carry the classifier
- * + environment as of Phase 7 #5); doctor reports wiring, not history.
- */
-export interface RiskGateSection {
-    /** Count of `risk.classifiers[]`. */
-    classifiers: number;
-    /** Count of `environments.resolvers[]`. */
-    resolvers: number;
-    /** Count of policies that declare a `when:` block. */
-    whenPolicies: number;
-    /** Coherence warnings; each rolls into the doctor `warningCount`. */
-    warnings: string[];
 }
 /**
  * Grounding wiring health (task 129e1b94). Present only when the manifest
  * declares an enabled `tools.mcp[grounding-mcp]` entry — without one there
- * is no consumer to check (validate's checkPolicyGroundingMcp owns the
- * "policies without grounding-mcp" warning). Doctor verifies the projected
+ * is no consumer to check. Doctor verifies the projected
  * evidence-ledger path is usable and that an operator env override does
  * not silently diverge from `grounding.evidence_ledger.path`.
  */
@@ -334,66 +193,6 @@ export interface GroundingSection {
     /** Wiring warnings; each rolls into the doctor `warningCount`. */
     warnings: string[];
 }
-/**
- * Template-policy drift (task adf037c1). `errors` names shipped
- * `operator_only` (kill-switch / security) policies this installed
- * manifest either lacks entirely or carries in a DOWNGRADED (no longer
- * operator_only) shape — a defense an aged manifest never received or
- * silently weakened, since `harness apply` does not retroactively add or
- * repair default policies. Each rolls into `errorCount` (a real defense
- * gap, doctor-convention exit failure). `warnings` names stale
- * `doctor.ignore_template_drift` entries that match no shipped policy and
- * therefore suppress nothing; each rolls into `warningCount`. Names
- * acknowledged via a valid `doctor.ignore_template_drift` entry are
- * filtered out of `errors` upstream.
- */
-export interface TemplateDriftSection {
-    /** Missing-or-downgraded shipped operator_only policies (each → errorCount). */
-    errors: string[];
-    /** Stale/typo'd ignore_template_drift entries that suppress nothing (each → warningCount). */
-    warnings: string[];
-}
-/**
- * Trigger-boundary drift (task 037cfb7c, follow-up to adf037c1):
- * shipped-by-name `bash_match` triggers (hook-level `hooks[].bash_match`
- * or policy-level `policies[].trigger.bash_match`) missing a boundary
- * alternative the template has, or missing a boundary group entirely.
- * Rule and rationale live on `checkTriggerBoundaryDrift` in
- * `validate/checks.ts`; the measured incident that motivated this check
- * is in the `CHANGELOG.md:#0.49.0` entry for task 037cfb7c. Shape
- * mirrors `TemplateDriftSection` immediately above: every `error`
- * diagnostic rolls into `errorCount`, every `warning` diagnostic (none
- * emitted today; the field exists so a future non-error diagnostic from
- * `checkTriggerBoundaryDrift` surfaces here instead of being silently
- * dropped by `buildTriggerBoundaryDrift`) rolls into `warningCount`.
- * Always present; both arrays empty when every shipped-named trigger's
- * boundary covers the template's (or the manifest has none of those
- * triggers, or every drift is acknowledged via
- * doctor.ignore_template_drift).
- */
-export interface TriggerBoundaryDriftSection {
-    /** Stale-boundary bash_match triggers, hook- or policy-level (each → errorCount). */
-    errors: string[];
-    /** Reserved for a future non-error diagnostic shape (each → warningCount); empty today. */
-    warnings: string[];
-}
-/**
- * Hook-budget-vs-ledger-timeout margin (task d20a7e0c, follow-up to
- * f1aea826/7bf47554): blocking, ledger-consulting hooks (both directly
- * declared `harness policy intercept` hooks and enabled policy-pack
- * blockers) whose `budget_ms` does not clear
- * `requiredHookBudgetMs(health.timeout_ms)` — see
- * `checkHookBudgetLedgerMargin` in `validate/checks.ts` for the full
- * derivation. Every entry is a real fail-open gap (a merely SLOW ledger
- * can get the hook killed before it can write its fail-closed verdict),
- * so each rolls into `errorCount`, mirroring `templateDrift.errors`
- * above. Always present; empty when every such hook clears the margin
- * (or none exist, or grounding-mcp is not wired).
- */
-export interface HookBudgetLedgerMarginSection {
-    /** Each entry names an under-budgeted hook; rolls into errorCount. */
-    errors: string[];
-}
 export interface DoctorReport {
     manifestPath: string;
     manifestVersion: number;
@@ -409,116 +208,15 @@ export interface DoctorReport {
      * doctor / harness probes. See task 4ddd78ed.
      */
     npmGlobalBin?: NpmBinReport;
-    /**
-     * Understanding-gate mode env/config divergence (task 24abdecb).
-     * Present only when `UNDERSTANDING_GATE_MODE` is set in the operator
-     * environment AND diverges from
-     * `policy_packs[understanding-before-execution].config.mode`. Always
-     * advisory (rolls into `warningCount`, never `errorCount`) — see
-     * `understanding-mode-env.ts` for the full rationale.
-     */
-    understandingModeEnv?: UnderstandingModeEnvDivergence;
-    /**
-     * Auto-approval listing + last-N metric (ADR
-     * docs/decisions/2026-08-27-ug-auto-mode-approval.md slice 1,
-     * agent-tasks 74b4b17d, "Audit and doctor"). Present only when the
-     * `understanding-before-execution` pack is declared and enabled
-     * (mirrors `understandingModeEnv`'s gate) — a manifest that never
-     * uses the pack has no `.approvals/` markers this listing owns an
-     * opinion about. Purely informational (`ℹ`); never rolls into
-     * `warningCount`.
-     */
-    ugAutoApprovals?: UgAutoApprovalsSection;
-    /**
-     * Delegations-on-disk metric (same ADR, slice 3, "Audit and doctor",
-     * agent-tasks 37ad0b05): `total`/`expired`/`unreadable` counts
-     * from `harness.generated/.delegations/`, distinct from
-     * `ugAutoApprovals` (which reads `.approvals/` only). Present only
-     * when the `understanding-before-execution` pack is declared and
-     * enabled (mirrors `ugAutoApprovals`'s gate). `delegationsDirPresent`
-     * mirrors `ugAutoApprovals`'s `approvalsDirPresent`: the rendered line
-     * stays silent when `.delegations/` does not exist at all, and shows
-     * the zero-count line when it exists but is empty (both cases resolve
-     * `total`/`expired`/`unreadable` to `0`). Informational (`ℹ`) unless
-     * `unreadable > 0`, in which case it rolls one warning into
-     * `warningCount`.
-     */
-    ugDelegations?: UgDelegationsSection;
-    /**
-     * In-flight subagent records (subagent-gate slice 1) from
-     * `harness.generated/.inflight/`, distinct from both `ugDelegations`
-     * (`.delegations/`) and `ugAutoApprovals` (`.approvals/`). Present
-     * only when the `understanding-before-execution` pack is declared and
-     * enabled (mirrors `ugDelegations`'s gate). `inflightDirPresent`
-     * mirrors `ugDelegations`'s `delegationsDirPresent`: the rendered
-     * line stays silent when `.inflight/` does not exist at all, and
-     * shows the zero-count line when it exists but is empty. Purely
-     * informational (`ℹ`) — an unreadable/skipped entry never rolls a
-     * warning here, since a record aging out unread is exactly what
-     * `harness gc` is for, not a signal of tampering.
-     */
-    ugInflight?: UgInflightSection;
-    /**
-     * `bypassPermissions` observed (hook-side, `.permission-mode-
-     * observations/`) but `auto_approve` does not cover it (task 8f637efd,
-     * "Amendment: install default"). Present only when the pack is
-     * declared and enabled AND at least one qualifying observation exists
-     * in the window; always a warning (`⚠`) when present, see
-     * bypass-without-auto-approve.ts.
-     */
-    ugBypassWithoutAutoApprove?: BypassWithoutAutoApproveFinding;
-    /**
-     * `session_start_preflight.setup: true` against a `preflight` binary
-     * below the build-capable release (task 6993d9b5). Present only when
-     * `setup` is enabled AND the probed/parsed version is below
-     * `SESSION_START_PREFLIGHT_SETUP_BUILD_MIN_VERSION` (or the probe
-     * failed/could not be parsed); always a warning (`⚠`) when present,
-     * see session-start-preflight-setup-version.ts.
-     */
-    sessionStartPreflightSetupVersion?: SessionStartPreflightSetupVersionFinding;
-    /**
-     * `auto_approve` configured without `mode: grill_me` (agent-tasks
-     * abfad738, follow-up of ADR
-     * docs/decisions/2026-08-27-ug-auto-mode-approval.md slice 1).
-     * Present only when the pack is declared and enabled AND
-     * `config.auto_approve` parses as a valid opt-in block. Always
-     * advisory (rolls into `warningCount`, never `errorCount`). See
-     * `auto-approve-mode.ts` for the full rationale.
-     */
-    ugAutoApproveMode?: AutoApproveModeWarning;
-    /**
-     * Explicit `approval_lifecycle.expire_on_tool_match` that lists
-     * `task_finish` but not `task_merge` (task 0c6b2cb9). Always advisory
-     * (rolls into `warningCount`, never `errorCount`). See
-     * `expire-on-tool-match.ts`.
-     */
-    ugExpireOnToolMatch?: ExpireOnToolMatchWarning;
-    /**
-     * Settings-drift compensating control (same ADR, threat model (c)): a
-     * `permissions.defaultMode` or hook entry present in a live Claude
-     * Code settings file but absent from harness's own last-apply
-     * snapshot. Present only when the understanding-gate pack is enabled
-     * AND `harness apply` has run at least once for this manifest
-     * (`harness.generated/` exists) — otherwise there is no baseline to
-     * compare against and nothing to say. `warnings` roll into
-     * `warningCount`; `notes` never do.
-     */
-    settingsDrift?: SettingsDriftSection;
-    /**
-     * Codex counterpart of `settingsDrift` (follow-up of slice 2 of the
-     * same ADR, agent-tasks f59ea0eb): a live `approval_policy = "never"`
-     * or full-access `default_permissions` selection in `$CODEX_HOME
-     * /config.toml` or `<repo>/.codex/config.toml`. Present only when the
-     * understanding-gate pack's `auto_approve.harnesses` lists `codex`;
-     * a repo that never opted Codex into the auto path has no live signal
-     * for this key to pre-set. Unlike `settingsDrift`, this always warns
-     * while the key is present and the repo is opted in (not gated on
-     * drift since the last apply); `warnings` roll into `warningCount`.
-     */
-    codexConfigDrift?: CodexConfigDriftSection;
     memory: MemoryReport;
     hooks: HookEntryReport[];
-    policies: PolicyEntryReport[];
+    /**
+     * Generated hooks compared with the live runtime config (Claude Code
+     * `settings.json`, Codex `config.toml`). Missing or differing entries are
+     * errors, a gate disabled through `harness gate disable` is a warning, and
+     * extra live hooks are info only. See `hook-liveness.ts`.
+     */
+    hookLiveness?: HookLivenessSection;
     /**
      * Declared-but-not-live policy packs. Each entry is a pack the
      * operator listed in `policy_packs[]` whose `source` or builtin
@@ -526,15 +224,6 @@ export interface DoctorReport {
      * surfaced loudly here. Errors count toward `errorCount`.
      */
     policyPacks: PolicyPacksSection;
-    /**
-     * Hook-level `min_version` floors on policy-pack-expanded hooks (task
-     * ab634898). See `PolicyPackHookVersionGapReport` for why this is
-     * separate from both `hooks[].version` (manifest-declared hooks only)
-     * and `policyPacks.versionGaps` (the pack-level floor). Always
-     * present; empty when every pack-expanded hook that declares a floor
-     * meets it.
-     */
-    policyPackHookVersions: PolicyPackHookVersionGapReport[];
     /**
      * The runtime policy packs were expanded against for the pack checks:
      * the one a plain `harness apply` would select (recorded in
@@ -542,31 +231,6 @@ export interface DoctorReport {
      * 04b8abcf). Always present.
      */
     packExpansionRuntime: PackExpansionRuntimeReport;
-    workflows: WorkflowsSectionReport;
-    /** Phase 7 #6 — Risk Gate wiring health (classifiers / resolvers / `when:`). */
-    riskGate: RiskGateSection;
-    /**
-     * Template-policy drift (task adf037c1): shipped operator_only security
-     * policies missing-or-downgraded in this installed manifest (`errors`)
-     * and stale `doctor.ignore_template_drift` entries (`warnings`). Always
-     * present; both arrays empty when the manifest carries every shipped
-     * kill-switch policy in operator_only form (or has acknowledged the gap
-     * via a valid doctor.ignore_template_drift entry).
-     */
-    templateDrift: TemplateDriftSection;
-    /**
-     * Trigger-boundary drift (task 037cfb7c). Always present; `errors`
-     * empty when every shipped-named `bash_match` trigger's boundary
-     * matches the template (or every drift is acknowledged via
-     * doctor.ignore_template_drift).
-     */
-    triggerBoundaryDrift: TriggerBoundaryDriftSection;
-    /**
-     * Hook-budget-vs-ledger-timeout margin (task d20a7e0c). Always
-     * present; `errors` empty when every blocking, ledger-consulting hook
-     * clears the derived margin.
-     */
-    hookBudgetLedgerMargin: HookBudgetLedgerMarginSection;
     /**
      * Grounding wiring health (task 129e1b94). Absent when no enabled
      * grounding-mcp entry is declared.
@@ -581,17 +245,6 @@ export interface DoctorReport {
      * isn't further scoped by runtime.
      */
     claudeMcp?: ClaudeMcpRegistrationSection;
-    /**
-     * On-demand toolchain-parity comparison (task 13919613), reusing the
-     * Collector/Comparator core from `harness session-start
-     * toolchain-parity` (src/cli/doctor/toolchain-parity.ts). Present only
-     * when `toolchain_parity.enabled` is true in the manifest — absent
-     * otherwise, mirroring `grounding`'s "only when the feature is in use"
-     * gating. Always read-only: never writes a snapshot file or a ledger
-     * fact. Only `"drift"`-status peers roll into `warningCount`; the
-     * section is never an `errorCount` source (advisory, not a gate).
-     */
-    toolchainParity?: ToolchainParitySection;
     /**
      * Phase 6 #6 follow-up: present when `--target codex` is passed.
      * Aggregates harness-side codex adapter health checks (binary
@@ -608,28 +261,9 @@ export interface DoctorReport {
      * warningCount, same as `codexTarget`.
      */
     opencodeTarget?: OpencodeTargetReport;
-    /**
-     * Leftover `<parent>/~/.evidence-ledger/ledger.db` files from the
-     * literal-tilde `EVIDENCE_LEDGER_DB` env leak (agent-tasks/42d224a6,
-     * harness PR #101). Always scanned; harmless when empty. Each entry
-     * rolls into `warningCount`. The scan walks `$HOME`, `$HOME/git/*`
-     * (one level deep), and `$PWD`; see `rogue-ledger.ts` for rationale.
-     */
-    rogueLedgerDbs: RogueLedgerDb[];
     errorCount: number;
     warningCount: number;
 }
 export type { NpmBinReport } from "./npm-bin-path.js";
-export type { SessionStartPreflightSetupVersionFinding } from "./session-start-preflight-setup-version.js";
 export type { ClaudeMcpRegistrationSection, ClaudeMcpEntryReport, } from "./claude-mcp.js";
-export type { UnderstandingModeEnvDivergence } from "./understanding-mode-env.js";
-export type { UgAutoApprovalsSection, AutoApprovalListingEntry, } from "./ug-auto-approvals.js";
-export type { UgDelegationsSection } from "./ug-delegations.js";
-export type { UgInflightSection } from "./ug-inflight.js";
-export type { AutoApproveModeWarning } from "./auto-approve-mode.js";
-export type { ExpireOnToolMatchWarning } from "./expire-on-tool-match.js";
-export type { BypassWithoutAutoApproveFinding } from "./bypass-without-auto-approve.js";
-export type { SettingsDriftSection } from "./settings-drift.js";
-export type { CodexConfigDriftSection } from "./codex-config-drift.js";
-export type { ToolchainParitySection, ToolchainParityPeerReport, } from "./toolchain-parity.js";
-export type { Manifest, McpProbeResult, MemoryReport, StaleMemory, CodexTargetReport, RogueLedgerDb, };
+export type { Manifest, McpProbeResult, MemoryReport, StaleMemory, CodexTargetReport, };

package/dist/cli/doctor/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/cli/doctor/types.ts"],"names":[],"mappings":"AAqBA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAU,CAAC;AAGnE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/cli/doctor/types.ts"],"names":[],"mappings":"AASA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAU,CAAC;AAGnE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC5D,CAAC;AACJ,CAAC"}

package/dist/cli/drain-stdio.d.ts

@@ -0,0 +1,31 @@
+/**
+ * How long the process waits for stdout and stderr to accept what is queued
+ * before it exits anyway, in ms. A hook runs under a host budget and a hook
+ * killed at its budget counts as an allow, so the wait is short and fixed; a
+ * reader that is slower than this loses the tail, which is the lesser harm.
+ */
+export declare const STDIO_DRAIN_TIMEOUT_MS = 500;
+type FlushableStream = Pick<NodeJS.WriteStream, "write" | "destroyed" | "writable"> & Partial<Pick<NodeJS.WriteStream, "on">>;
+/**
+ * Put a no-op 'error' listener on each stream, once. A write to a pipe whose
+ * reader has gone fails with EPIPE, and a stream with no listener turns that
+ * event into an uncaught exception: the process exits 1, which a hook host
+ * reads as allow. A hook calls this at its entry, before its first write, so
+ * an error emitted while the hook is still awaiting (git, for example) cannot
+ * change its exit code; drainStdio only covers errors emitted after the hook
+ * has settled. The decision is already made by the time a write fails, so the
+ * error carries nothing the caller could act on.
+ */
+export declare function tolerateClosedStdio(streams?: readonly {
+    on?(event: "error", listener: () => void): unknown;
+}[]): void;
+/**
+ * Resolve once everything written to stdout and stderr so far has been handed
+ * to the OS, or after `timeoutMs`. `process.exit` drops writes still queued
+ * for a pipe whose reader is behind (macOS cuts at the 64 KiB pipe buffer),
+ * so the entry point awaits this before it exits. A stream whose reader has
+ * gone (EPIPE) counts as flushed and its error is swallowed, so the exit code
+ * is the one the caller passed.
+ */
+export declare function drainStdio(timeoutMs?: number, streams?: readonly FlushableStream[]): Promise<void>;
+export {};

package/dist/cli/drain-stdio.js

@@ -0,0 +1,76 @@
+/**
+ * How long the process waits for stdout and stderr to accept what is queued
+ * before it exits anyway, in ms. A hook runs under a host budget and a hook
+ * killed at its budget counts as an allow, so the wait is short and fixed; a
+ * reader that is slower than this loses the tail, which is the lesser harm.
+ */
+export const STDIO_DRAIN_TIMEOUT_MS = 500;
+function flushed(stream) {
+    return new Promise((resolve) => {
+        try {
+            // A write to a pipe whose reader has gone fails with EPIPE, and the
+            // stream emits that as an 'error' event. With no listener the event is
+            // an uncaught exception: the process exits 1, which a hook host reads
+            // as allow. The listener goes on before the empty write below, and it
+            // also catches an earlier write's error that is emitted after run() has
+            // settled. An error emitted while run() is still awaiting I/O (before
+            // drainStdio is called) is covered only for a stream that
+            // tolerateClosedStdio already gave a listener. A failed stream has
+            // nothing left to wait for, so the error also settles the flush,
+            // whether or not the stream calls the write callback. The exit code is
+            // already decided.
+            stream.on?.("error", () => resolve());
+            if (stream.destroyed || !stream.writable) {
+                resolve();
+                return;
+            }
+            // An empty write completes after every earlier write has, or with an
+            // error when the reader has gone; either way nothing is left to wait for.
+            stream.write("", () => resolve());
+        }
+        catch {
+            resolve();
+        }
+    });
+}
+const tolerated = new WeakSet();
+/**
+ * Put a no-op 'error' listener on each stream, once. A write to a pipe whose
+ * reader has gone fails with EPIPE, and a stream with no listener turns that
+ * event into an uncaught exception: the process exits 1, which a hook host
+ * reads as allow. A hook calls this at its entry, before its first write, so
+ * an error emitted while the hook is still awaiting (git, for example) cannot
+ * change its exit code; drainStdio only covers errors emitted after the hook
+ * has settled. The decision is already made by the time a write fails, so the
+ * error carries nothing the caller could act on.
+ */
+export function tolerateClosedStdio(streams = [process.stdout, process.stderr]) {
+    for (const stream of streams) {
+        if (typeof stream.on !== "function" || tolerated.has(stream))
+            continue;
+        tolerated.add(stream);
+        stream.on("error", () => undefined);
+    }
+}
+/**
+ * Resolve once everything written to stdout and stderr so far has been handed
+ * to the OS, or after `timeoutMs`. `process.exit` drops writes still queued
+ * for a pipe whose reader is behind (macOS cuts at the 64 KiB pipe buffer),
+ * so the entry point awaits this before it exits. A stream whose reader has
+ * gone (EPIPE) counts as flushed and its error is swallowed, so the exit code
+ * is the one the caller passed.
+ */
+export async function drainStdio(timeoutMs = STDIO_DRAIN_TIMEOUT_MS, streams = [process.stdout, process.stderr]) {
+    let timer;
+    const limit = new Promise((resolve) => {
+        timer = setTimeout(resolve, timeoutMs);
+    });
+    try {
+        await Promise.race([Promise.all(streams.map(flushed)), limit]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=drain-stdio.js.map

package/dist/cli/drain-stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drain-stdio.js","sourceRoot":"","sources":["../../src/cli/drain-stdio.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAK1C,SAAS,OAAO,CAAC,MAAuB;IACtC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,oEAAoE;YACpE,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,0DAA0D;YAC1D,mEAAmE;YACnE,iEAAiE;YACjE,uEAAuE;YACvE,mBAAmB;YACnB,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,qEAAqE;YACrE,0EAA0E;YAC1E,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,OAAO,EAAU,CAAC;AAExC;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA6E,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;IAE7G,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,UAAU,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACvE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,YAAoB,sBAAsB,EAC1C,UAAsC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;IAEtE,IAAI,KAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC1C,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/cli/export.d.ts

@@ -10,6 +10,8 @@ export interface ExportResult {
     manifest: Manifest;
     sanitized: boolean;
     wroteTo: string | null;
+    /** Manifest posture warnings (removed keys, removed hook fields, removed packs, removed commands), one formatted line each; the CLI prints them on stderr. */
+    warnings: string[];
 }
 export declare const SANITIZE_FOOTER: string;
 export declare function exportManifest(opts?: ExportOptions): ExportResult;
@@ -17,7 +19,7 @@ export declare function exportManifest(opts?: ExportOptions): ExportResult;
  * Best-effort sanitiser. Walks the manifest, replaces `/home/<user>/...` paths
  * with `~/...` and redacts env values whose key looks credential-shaped. Does
  * NOT touch command:[] entries (they often contain absolute paths that are
- * intentional and not secret) and does NOT inspect policy ledger_tag values.
+ * intentional and not secret).
  */
 export declare function sanitize(value: unknown, homeDir: string): unknown;
 declare function isInsideEnvBlock(pathSegs: (string | number)[]): boolean;