@opensip-cli/fitness 0.1.0

package/dist/cli/__tests__/report-data.test.js

@@ -0,0 +1,113 @@
+/**
+ * Tests for `collectFitnessReportData` — fitness's contribution to
+ * the cross-tool dashboard composed by the CLI (audit 2026-05-29, L2).
+ *
+ * The collector returns ONLY fitness-owned inputs (check catalog, recipe
+ * catalog, editor protocol) keyed by the field names
+ * `generateDashboardHtml` consumes. It does NOT read sessions, the graph
+ * catalog, write any file, or open a browser — those are the CLI
+ * composition root's job now.
+ */
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { LanguageRegistry, RunScope, ToolRegistry, createCapabilityRegistry, admitTool, loadToolManifest, registerCapabilityDomainsFromManifest, runWithScope, } from '@opensip-cli/core';
+import { describe, expect, it } from 'vitest';
+/** Fresh scope with empty registries — local equivalent of the retired
+ *  `@opensip-cli/core/test-utils` helper. The fitness engine's own tests
+ *  cannot use `@opensip-cli/test-support` (it depends on this package —
+ *  the dev edge would make the package graph cyclic; ADR-0040). */
+const makeTestScope = () => new RunScope({ languages: new LanguageRegistry(), tools: new ToolRegistry() });
+const withScope = runWithScope;
+import { fitnessTool } from '../../tool.js';
+import { collectFitnessReportData } from '../report-data.js';
+/** The fitness engine package root (carries the manifest), 4 dirs up from this test. */
+const ENGINE_DIR = dirname(dirname(dirname(dirname(fileURLToPath(import.meta.url)))));
+/**
+ * Wire fitness's capability plane onto a scope exactly as the CLI host does:
+ * register the manifest-declared domains (fit-pack, fit-recipe) and swap in the
+ * tool's real registrars. `ensureChecksLoaded` drives discovery through this, so
+ * without it the dashboard catalog would be empty.
+ */
+function wireFitnessCapabilities(scope) {
+    const capabilities = createCapabilityRegistry();
+    const manifest = loadToolManifest('bundled', ENGINE_DIR);
+    if (manifest) {
+        const result = admitTool({
+            manifest,
+            source: 'bundled',
+            dir: ENGINE_DIR,
+            explicitlyRequested: true,
+        });
+        if (result.decision === 'admit') {
+            registerCapabilityDomainsFromManifest(result.manifest, capabilities);
+        }
+    }
+    for (const [domainId, registrar] of Object.entries(fitnessTool.capabilityRegistrars ?? {})) {
+        if (capabilities.hasDomain(domainId))
+            capabilities.setRegistrar(domainId, registrar);
+    }
+    Object.assign(scope, { capabilities });
+}
+/**
+ * Build a RunScope carrying fitness's contributed subscope. The collector
+ * reads the check/recipe registries and the `ensureChecksLoaded` lifecycle
+ * slot off the ambient current scope, so test calls must run inside this scope.
+ */
+function makeFitnessScope() {
+    const scope = makeTestScope();
+    Object.assign(scope, fitnessTool.contributeScope?.() ?? {});
+    wireFitnessCapabilities(scope);
+    return scope;
+}
+function collectWithFitnessScope() {
+    const scope = makeFitnessScope();
+    return withScope(scope, () => collectFitnessReportData(scope));
+}
+describe('collectFitnessReportData', () => {
+    it('returns only the fitness-owned dashboard keys', async () => {
+        const result = await collectWithFitnessScope();
+        expect(Object.keys(result).sort()).toEqual(['checkCatalog', 'editorProtocol', 'recipeCatalog']);
+    });
+    it('does NOT contribute sessions or graphCatalog (CLI / graph own those)', async () => {
+        const result = await collectWithFitnessScope();
+        expect(result).not.toHaveProperty('sessions');
+        expect(result).not.toHaveProperty('graphCatalog');
+    });
+    it('builds a non-empty check catalog with the expected entry shape', async () => {
+        const result = await collectWithFitnessScope();
+        const checkCatalog = result.checkCatalog;
+        expect(Array.isArray(checkCatalog)).toBe(true);
+        expect(checkCatalog.length).toBeGreaterThan(0);
+        const entry = checkCatalog[0];
+        expect(entry).toEqual(expect.objectContaining({
+            slug: expect.any(String),
+            name: expect.any(String),
+            icon: expect.any(String),
+            description: expect.any(String),
+            confidence: expect.stringMatching(/^(high|medium|low)$/),
+            source: expect.stringMatching(/^(built-in|community)$/),
+        }));
+    });
+    it('builds a recipe catalog with the expected entry shape', async () => {
+        const result = await collectWithFitnessScope();
+        const recipeCatalog = result.recipeCatalog;
+        expect(Array.isArray(recipeCatalog)).toBe(true);
+        if (recipeCatalog.length > 0) {
+            expect(recipeCatalog[0]).toEqual(expect.objectContaining({
+                name: expect.any(String),
+                displayName: expect.any(String),
+                selectorType: expect.any(String),
+                mode: expect.any(String),
+                timeout: expect.any(Number),
+            }));
+        }
+    });
+    it('degrades editorProtocol to null when no signalers config is present', async () => {
+        // makeTestScope() carries no projectContext, so the collector reads
+        // process.cwd() — which in the test sandbox has no dashboard.editor
+        // config, exercising the graceful-degradation path.
+        const result = await collectWithFitnessScope();
+        expect(result.editorProtocol === null || typeof result.editorProtocol === 'string').toBe(true);
+    });
+});
+//# sourceMappingURL=report-data.test.js.map

package/dist/cli/__tests__/report-data.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-data.test.js","sourceRoot":"","sources":["../../../src/cli/__tests__/report-data.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,wBAAwB,EACxB,SAAS,EACT,gBAAgB,EAChB,qCAAqC,EACrC,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C;;;mEAGmE;AACnE,MAAM,aAAa,GAAG,GAAa,EAAE,CACnC,IAAI,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,EAAE,CAAC,CAAC;AACjF,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAI7D,wFAAwF;AACxF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,KAAuC;IACtE,MAAM,YAAY,GAAG,wBAAwB,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,SAAS,CAAC;YACvB,QAAQ;YACR,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,UAAU;YACf,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,qCAAqC,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3F,IAAI,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB;IAC9B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,OAAO,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAE/C,MAAM,YAAY,GAAG,MAAM,CAAC,YAA4C,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CACnB,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,qBAAqB,CAAC;YACxD,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,wBAAwB,CAAC;SACxD,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAE/C,MAAM,aAAa,GAAG,MAAM,CAAC,aAA8C,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAC9B,MAAM,CAAC,gBAAgB,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBACxB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC/B,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBACxB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,oEAAoE;QACpE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/fit/__tests__/display-fold.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview The §5.3 display fold: display (icon + name) travels ON each
+ * check (`check.config.icon`/`displayName`), folded from a pack's authoring map
+ * via `applyCheckDisplay`; `getDisplayName`/`getIcon` resolve a slug against the
+ * CURRENT scope's check registry — there is NO merged-display singleton (F3).
+ */
+export {};
+//# sourceMappingURL=display-fold.test.d.ts.map

package/dist/cli/fit/__tests__/display-fold.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"display-fold.test.d.ts","sourceRoot":"","sources":["../../../../src/cli/fit/__tests__/display-fold.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/cli/fit/__tests__/display-fold.test.js

@@ -0,0 +1,87 @@
+/**
+ * @fileoverview The §5.3 display fold: display (icon + name) travels ON each
+ * check (`check.config.icon`/`displayName`), folded from a pack's authoring map
+ * via `applyCheckDisplay`; `getDisplayName`/`getIcon` resolve a slug against the
+ * CURRENT scope's check registry — there is NO merged-display singleton (F3).
+ */
+import { RunScope, runWithScopeSync } from '@opensip-cli/core';
+import { describe, expect, it } from 'vitest';
+import { applyCheckDisplay } from '../../../check-utils/display.js';
+import { defineCheck } from '../../../framework/define-check.js';
+import { currentCheckRegistry } from '../../../framework/scope-registry.js';
+import { fitnessTool } from '../../../tool.js';
+import { getDisplayName, getIcon } from '../display-registry.js';
+let nextId = 0;
+function stubCheck(slug) {
+    nextId++;
+    return defineCheck({
+        id: `00000000-0000-4000-8000-${nextId.toString(16).padStart(12, '0')}`,
+        slug,
+        description: slug,
+        tags: ['demo'],
+        analyze: () => [],
+    });
+}
+/** A RunScope carrying fitness's contributed subscope (fresh check registry). */
+function fitnessScope() {
+    const scope = new RunScope();
+    Object.assign(scope, fitnessTool.contributeScope?.() ?? {});
+    return scope;
+}
+describe('applyCheckDisplay', () => {
+    it('folds icon + displayName onto a check whose slug has a map entry', () => {
+        const map = { 'my-check': ['🚀', 'My Check'] };
+        const [folded] = applyCheckDisplay([stubCheck('my-check')], map);
+        expect(folded?.config.icon).toBe('🚀');
+        expect(folded?.config.displayName).toBe('My Check');
+    });
+    it('passes a check with no map entry through unchanged (no display set)', () => {
+        const [plain] = applyCheckDisplay([stubCheck('no-entry')], {});
+        expect(plain?.config.icon).toBeUndefined();
+        expect(plain?.config.displayName).toBeUndefined();
+    });
+    it('does not mutate the original check (returns a new object)', () => {
+        const original = stubCheck('immutable');
+        const [folded] = applyCheckDisplay([original], { immutable: ['🔒', 'Immutable'] });
+        expect(original.config.icon).toBeUndefined();
+        expect(folded).not.toBe(original);
+    });
+});
+describe('getDisplayName / getIcon read from the scope check registry (no singleton)', () => {
+    it('returns the folded display for a registered check', () => {
+        runWithScopeSync(fitnessScope(), () => {
+            const [folded] = applyCheckDisplay([stubCheck('rocket-check')], {
+                'rocket-check': ['🚀', 'Rocket Check'],
+            });
+            currentCheckRegistry().register(folded);
+            expect(getDisplayName('rocket-check')).toBe('Rocket Check');
+            expect(getIcon('rocket-check')).toBe('🚀');
+        });
+    });
+    it('falls back to kebab-title-case name + default icon for an unknown slug', () => {
+        runWithScopeSync(fitnessScope(), () => {
+            expect(getDisplayName('some-unknown-slug')).toBe('Some Unknown Slug');
+            expect(getIcon('some-unknown-slug')).toBe('🔍');
+        });
+    });
+    it('two concurrent scopes resolve display independently (F3: no shared singleton)', () => {
+        const scopeA = fitnessScope();
+        const scopeB = fitnessScope();
+        runWithScopeSync(scopeA, () => {
+            const [a] = applyCheckDisplay([stubCheck('shared-slug')], {
+                'shared-slug': ['🅰️', 'From A'],
+            });
+            currentCheckRegistry().register(a);
+        });
+        runWithScopeSync(scopeB, () => {
+            const [b] = applyCheckDisplay([stubCheck('shared-slug')], {
+                'shared-slug': ['🅱️', 'From B'],
+            });
+            currentCheckRegistry().register(b);
+        });
+        // Each scope sees only its own registration — no cross-scope leakage.
+        runWithScopeSync(scopeA, () => expect(getDisplayName('shared-slug')).toBe('From A'));
+        runWithScopeSync(scopeB, () => expect(getDisplayName('shared-slug')).toBe('From B'));
+    });
+});
+//# sourceMappingURL=display-fold.test.js.map

package/dist/cli/fit/__tests__/display-fold.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"display-fold.test.js","sourceRoot":"","sources":["../../../../src/cli/fit/__tests__/display-fold.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAKjE,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,EAAE,CAAC;IACT,OAAO,WAAW,CAAC;QACjB,EAAE,EAAE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACtE,IAAI;QACJ,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAsC,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,iBAAiB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4EAA4E,EAAE,GAAG,EAAE;IAC1F,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,gBAAgB,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,EAAE;gBAC9D,cAAc,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC;aACvC,CAAC,CAAC;YACH,oBAAoB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,gBAAgB,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE;gBACxD,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC;aACjC,CAAC,CAAC;YACH,oBAAoB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE;gBACxD,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC;aACjC,CAAC,CAAC;YACH,oBAAoB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,sEAAsE;QACtE,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/fit/__tests__/gate-resolved-config.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * gate-resolved-config — proves fit's findings policy (ADR-0035) reads its
+ * `failOnErrors` / `failOnWarnings` thresholds off the host-RESOLVED config block
+ * (`scope.toolConfig.fitness`), NOT the re-parsed `signalersConfig.fitness.*`
+ * (ADR-0023, Phase 4), and falls back to `signalersConfig` (then `{1,0}`) when no
+ * toolConfig is present (config-less / off-CLI).
+ *
+ * Post-ADR-0035, this resolution lives in `resolveFitVerdictPolicy` and feeds
+ * `envelope.verdict.passed` — the single exit driver. The declared env bindings
+ * OPENSIP_FIT_FAIL_ON_ERRORS / OPENSIP_FIT_FAIL_ON_WARNINGS resolve into
+ * `scope.toolConfig.fitness`; these tests pin that they drive the policy
+ * (overriding the file source) and that the fallback chain holds. This is the
+ * regression guard that env bindings are no longer no-ops at the gate.
+ */
+export {};
+//# sourceMappingURL=gate-resolved-config.test.d.ts.map

package/dist/cli/fit/__tests__/gate-resolved-config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-resolved-config.test.d.ts","sourceRoot":"","sources":["../../../../src/cli/fit/__tests__/gate-resolved-config.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/cli/fit/__tests__/gate-resolved-config.test.js

@@ -0,0 +1,62 @@
+/**
+ * gate-resolved-config — proves fit's findings policy (ADR-0035) reads its
+ * `failOnErrors` / `failOnWarnings` thresholds off the host-RESOLVED config block
+ * (`scope.toolConfig.fitness`), NOT the re-parsed `signalersConfig.fitness.*`
+ * (ADR-0023, Phase 4), and falls back to `signalersConfig` (then `{1,0}`) when no
+ * toolConfig is present (config-less / off-CLI).
+ *
+ * Post-ADR-0035, this resolution lives in `resolveFitVerdictPolicy` and feeds
+ * `envelope.verdict.passed` — the single exit driver. The declared env bindings
+ * OPENSIP_FIT_FAIL_ON_ERRORS / OPENSIP_FIT_FAIL_ON_WARNINGS resolve into
+ * `scope.toolConfig.fitness`; these tests pin that they drive the policy
+ * (overriding the file source) and that the fallback chain holds. This is the
+ * regression guard that env bindings are no longer no-ops at the gate.
+ */
+import { LanguageRegistry, RunScope, ToolRegistry, policyPasses, runWithScopeSync, } from '@opensip-cli/core';
+import { describe, expect, it } from 'vitest';
+import { resolveFitVerdictPolicy } from '../result-builders.js';
+/** Fresh scope with empty registries — local equivalent of the retired
+ *  `@opensip-cli/core/test-utils` helper. The fitness engine's own tests
+ *  cannot use `@opensip-cli/test-support` (it depends on this package —
+ *  the dev edge would make the package graph cyclic; ADR-0040). */
+const makeTestScope = () => new RunScope({ languages: new LanguageRegistry(), tools: new ToolRegistry() });
+/** The minimal `signalersConfig` shape `resolveFitVerdictPolicy` reads as the FALLBACK source. */
+function makeSignalersConfig(failOnErrors, failOnWarnings) {
+    return {
+        fitness: { failOnErrors, failOnWarnings, disabledChecks: [] },
+        cli: {},
+    };
+}
+/** Resolve fit's policy inside a scope carrying the given resolved toolConfig. */
+function policyWith(signalers, toolConfig) {
+    const scope = makeTestScope();
+    if (toolConfig !== undefined)
+        Object.assign(scope, { toolConfig });
+    return runWithScopeSync(scope, () => resolveFitVerdictPolicy(signalers));
+}
+describe('fit findings policy reads thresholds off scope.toolConfig.fitness (ADR-0023 / ADR-0035)', () => {
+    it('OPENSIP_FIT_FAIL_ON_ERRORS=0 (resolved) → an error-emitting run does NOT fail, even though the file says failOnErrors:1', () => {
+        // File source says fail-on-errors:1 — the OLD behaviour would fail here.
+        const policy = policyWith(makeSignalersConfig(1, 0), {
+            fitness: { failOnErrors: 0, failOnWarnings: 0 },
+        });
+        expect(policy.failOnErrors).toBe(0);
+        // 0 = never fail on errors → a 3-error run passes.
+        expect(policyPasses({ errors: 3, warnings: 0 }, policy)).toBe(true);
+    });
+    it('OPENSIP_FIT_FAIL_ON_WARNINGS=1 (resolved) → a warning-only run FAILs, even though the file says failOnWarnings:0', () => {
+        // File source says fail-on-warnings:0 — the OLD behaviour would pass here.
+        const policy = policyWith(makeSignalersConfig(1, 0), {
+            fitness: { failOnErrors: 1, failOnWarnings: 1 },
+        });
+        expect(policy.failOnWarnings).toBe(1);
+        expect(policyPasses({ errors: 0, warnings: 2 }, policy)).toBe(false);
+    });
+    it('falls back to signalersConfig when the scope carries no toolConfig (config-less / off-CLI)', () => {
+        // No resolved block on the scope → the file source drives the policy.
+        const policy = policyWith(makeSignalersConfig(1, 0), undefined);
+        expect(policy.failOnErrors).toBe(1);
+        expect(policyPasses({ errors: 2, warnings: 0 }, policy)).toBe(false);
+    });
+});
+//# sourceMappingURL=gate-resolved-config.test.js.map

package/dist/cli/fit/__tests__/gate-resolved-config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-resolved-config.test.js","sourceRoot":"","sources":["../../../../src/cli/fit/__tests__/gate-resolved-config.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAKhE;;;mEAGmE;AACnE,MAAM,aAAa,GAAG,GAAa,EAAE,CACnC,IAAI,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,EAAE,CAAC,CAAC;AAEjF,kGAAkG;AAClG,SAAS,mBAAmB,CAAC,YAAoB,EAAE,cAAsB;IACvE,OAAO;QACL,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE;QAC7D,GAAG,EAAE,EAAE;KACsB,CAAC;AAClC,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CACjB,SAA0B,EAC1B,UAA0C;IAE1C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,OAAO,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,QAAQ,CAAC,yFAAyF,EAAE,GAAG,EAAE;IACvG,EAAE,CAAC,yHAAyH,EAAE,GAAG,EAAE;QACjI,yEAAyE;QACzE,MAAM,MAAM,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACnD,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,mDAAmD;QACnD,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kHAAkH,EAAE,GAAG,EAAE;QAC1H,2EAA2E;QAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACnD,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,sEAAsE;QACtE,MAAM,MAAM,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/fit/check-loader.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Plugin/check discovery + registration for the `fit` command.
+ *
+ * Owns the fit-lifecycle state (`loadedFor`, `pluginLoadErrors`,
+ * `loadWarnings`) — a single unit of state, written exactly once per RUN
+ * by `ensureChecksLoaded()` and read by the phase helpers downstream
+ * (`buildFitEnvelope`, `buildFitDoneResult`) plus the public
+ * `getPluginLoadErrors()` / `getDisplayName()` / `getIcon()` accessors
+ * that `FitView` and `report-data.ts` consume.
+ *
+ * As of the scope-owned-registries refactor (2.10.0) this state lives on
+ * the RunScope (`scope.fitness.load`), NOT module singletons — two
+ * concurrent fit runs (different scopes) carry independent load state.
+ * The accessors read the current scope's slot via
+ * `currentFitnessLoadState()`.
+ *
+ * Invariant: each binding is set by `ensureChecksLoaded()` and read by
+ * the phase helpers; `executeFit`'s phase ordering is sequenced so the
+ * readers always run after the setter completes.
+ */
+/** Warnings collected during the most recent ensureChecksLoaded() call.
+ * Returned alongside plugin errors and run-time validation warnings via
+ * executeFit's result so the live renderer and JSON output both see them. */
+export declare function getLoadWarnings(): readonly string[];
+/**
+ * Plugin load errors recorded during the most recent ensureChecksLoaded() call.
+ * Read by runFit to fail the run if any plugin failed to import — otherwise a
+ * malicious or broken plugin could silently suppress its own checks while the
+ * CLI exits 0, masking a compliance failure or a supply-chain compromise.
+ */
+export declare function getPluginLoadErrors(): readonly string[];
+/** Get the number of enabled checks (available after ensureChecksLoaded). */
+export declare function getEnabledCheckCount(): number;
+/** Lazily discovers and registers all check packs for the given project
+ * (idempotent per project, scoped to the current RunScope). */
+export declare function ensureChecksLoaded(projectDir?: string): Promise<void>;
+//# sourceMappingURL=check-loader.d.ts.map

package/dist/cli/fit/check-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-loader.d.ts","sourceRoot":"","sources":["../../../src/cli/fit/check-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAgBH;;6EAE6E;AAC7E,wBAAgB,eAAe,IAAI,SAAS,MAAM,EAAE,CAEnD;AAED;;;;;GAKG;AAEH,wBAAgB,mBAAmB,IAAI,SAAS,MAAM,EAAE,CAEvD;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAMD;+DAC+D;AAC/D,wBAAsB,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA+D3E"}

package/dist/cli/fit/check-loader.js

@@ -0,0 +1,154 @@
+/**
+ * Plugin/check discovery + registration for the `fit` command.
+ *
+ * Owns the fit-lifecycle state (`loadedFor`, `pluginLoadErrors`,
+ * `loadWarnings`) — a single unit of state, written exactly once per RUN
+ * by `ensureChecksLoaded()` and read by the phase helpers downstream
+ * (`buildFitEnvelope`, `buildFitDoneResult`) plus the public
+ * `getPluginLoadErrors()` / `getDisplayName()` / `getIcon()` accessors
+ * that `FitView` and `report-data.ts` consume.
+ *
+ * As of the scope-owned-registries refactor (2.10.0) this state lives on
+ * the RunScope (`scope.fitness.load`), NOT module singletons — two
+ * concurrent fit runs (different scopes) carry independent load state.
+ * The accessors read the current scope's slot via
+ * `currentFitnessLoadState()`.
+ *
+ * Invariant: each binding is set by `ensureChecksLoaded()` and read by
+ * the phase helpers; `executeFit`'s phase ordering is sequenced so the
+ * readers always run after the setter completes.
+ */
+import { dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { currentScope, loadCapabilityDomain, logger } from '@opensip-cli/core';
+import { currentCheckRegistry, currentFitnessLoadState } from '../../framework/scope-registry.js';
+import { readCheckPackagePreferences } from '../../plugins/check-package-discovery.js';
+import { loadAllPlugins } from '../../plugins/loader.js';
+// ---------------------------------------------------------------------------
+// Public accessors — all read the current RunScope's fitness load state
+// (`scope.fitness.load`), set once per run by `ensureChecksLoaded()`.
+// ---------------------------------------------------------------------------
+/** Warnings collected during the most recent ensureChecksLoaded() call.
+ * Returned alongside plugin errors and run-time validation warnings via
+ * executeFit's result so the live renderer and JSON output both see them. */
+export function getLoadWarnings() {
+    return currentFitnessLoadState().loadWarnings;
+}
+/**
+ * Plugin load errors recorded during the most recent ensureChecksLoaded() call.
+ * Read by runFit to fail the run if any plugin failed to import — otherwise a
+ * malicious or broken plugin could silently suppress its own checks while the
+ * CLI exits 0, masking a compliance failure or a supply-chain compromise.
+ */
+// @fitness-ignore-next-line duplicate-utility-functions -- intentionally parallel per-tool scope accessor: fit reads scope.fitness.load, sim reads scope.simulation.load; they cannot consolidate (different registries) and mirror getLoadWarnings.
+export function getPluginLoadErrors() {
+    return currentFitnessLoadState().pluginLoadErrors;
+}
+/** Get the number of enabled checks (available after ensureChecksLoaded). */
+export function getEnabledCheckCount() {
+    return currentCheckRegistry().listEnabled().length;
+}
+// ---------------------------------------------------------------------------
+// Lazy-load fitness checks
+// ---------------------------------------------------------------------------
+/** Lazily discovers and registers all check packs for the given project
+ * (idempotent per project, scoped to the current RunScope). */
+export async function ensureChecksLoaded(projectDir) {
+    const key = projectDir ?? '';
+    // Per-run lifecycle state lives on the scope (`scope.fitness.load`), so
+    // two concurrent fit runs (different scopes) load independently.
+    const load = currentFitnessLoadState();
+    if (load.loadedFor === key)
+        return;
+    // Reset per-run warning buffer. Its lifetime mirrors loadedFor —
+    // a fresh load (new projectDir or first call) starts with no warnings.
+    load.loadWarnings = [];
+    // 1. Load fit plugins — discovers .mjs files in
+    //    <projectDir>/opensip-cli/fit/{checks,recipes}/ and any
+    //    npm packages declared in plugins.fit in the project config.
+    //
+    //    Bundled language adapters (TypeScript, Rust, Python, etc.)
+    //    are registered separately by the CLI bootstrap; fitness
+    //    doesn't take direct deps on @opensip-cli/lang-* packages,
+    //    and there's no project-local 'lang' plugin discovery path
+    //    (the lang adapter set is fixed and shipped with the CLI).
+    const pluginResult = await loadAllPlugins('fit', projectDir);
+    load.pluginLoadErrors = pluginResult.errors;
+    if (pluginResult.errors.length > 0) {
+        // Plugin load errors go to loadWarnings (rendered via the result) and
+        // logger.warn (structured logs). Direct stderr writes are forbidden
+        // during live-view runs — they desync Ink's frame tracking.
+        for (const err of pluginResult.errors) {
+            load.loadWarnings.push(`plugin failed to load — ${err}`);
+            logger.warn({ evt: 'cli.plugin.warning', module: 'cli:fit', message: err });
+        }
+    }
+    // 2. Discover + load fit-pack check packages through the GENERIC capability
+    //    substrate (§5.3): marker discovery, the `@opensip-cli` built-in split,
+    //    explicit `plugins.checkPackages` (augmented onto markers), and the
+    //    single-core guard all live in core now — fitness no longer carries a
+    //    bespoke loader. The fit-pack registrar registers each check; co-located
+    //    `recipes` route to the fit-recipe domain. Memoized per (domain, project)
+    //    on the scope capability registry, so the CLI pre-action hook and this
+    //    call don't double-load. Discovery errors (incl. the single-core guard's
+    //    foreign-core skips) surface as load warnings.
+    for (const err of await loadFitCheckPackages(projectDir ?? cliInstallDir())) {
+        load.loadWarnings.push(err);
+    }
+    // 3. No-checks-loaded guard. Silent zero-checks would let a misconfig or
+    //    missing dep produce a green run that scanned nothing — the failure mode
+    //    the CLI exists to prevent. Checks the TOTAL registry count (the load may
+    //    have been memoized by the pre-action hook, so a per-call delta is wrong).
+    if (currentCheckRegistry().listEnabled().length === 0) {
+        load.loadWarnings.push('no check packages were loaded. ' +
+            'Install at least one package declaring opensipTools.kind: "fit-pack", ' +
+            'or declare plugins.checkPackages in opensip-cli.config.yml.');
+        logger.warn({
+            evt: 'cli.check_packages.empty',
+            module: 'cli:fit',
+            msg: 'no check packages loaded',
+        });
+    }
+    load.loadedFor = key;
+}
+/**
+ * Drive the generic capability loader for the `fit-pack` domain. Returns any
+ * discovery/routing errors (foreign-core skips, load failures) as warning
+ * strings. A no-op when the run carries no capability registry (a programmatic
+ * fitness use that never wired the host capability plane) or the fit-pack domain
+ * is unregistered. Preferences come from fitness's own `plugins.checkPackages`
+ * reader — no dependency on `@opensip-cli/config`.
+ */
+async function loadFitCheckPackages(projectDir) {
+    const registry = currentScope()?.capabilities;
+    if (!registry?.hasDomain('fit-pack'))
+        return [];
+    const prefs = readCheckPackagePreferences(projectDir);
+    const preferences = prefs.checkPackages === undefined ? {} : { packages: prefs.checkPackages };
+    return registry.isDomainLoaded('fit-pack', projectDir)
+        ? registry.domainLoadErrors('fit-pack')
+        : loadCapabilityDomain({
+            registry,
+            domainId: 'fit-pack',
+            projectDir,
+            cliDir: cliInstallDir(),
+            preferences,
+        });
+}
+/**
+ * Resolve the directory the CLI was installed into. Built-in check packs
+ * (the @opensip-cli/* fit-packs declared as deps in cli/package.json) always
+ * resolve from here, so a globally-installed CLI runs ITS OWN bundled checks at
+ * its own version — a project pinning an older @opensip-cli/checks-* cannot
+ * shadow them. Also the discovery fallback when no projectDir is supplied.
+ * Walks up from this module's URL to the opensip-cli package root so
+ * node_modules lookup sees the CLI's own dependency tree.
+ */
+function cliInstallDir() {
+    // import.meta.url points at this file inside the CLI's dist/. The CLI
+    // package root is two levels up from dist/commands/. Resolve via the
+    // Node URL → path bridge to keep this OS-agnostic.
+    const thisFile = fileURLToPath(import.meta.url);
+    return dirname(dirname(dirname(thisFile)));
+}
+//# sourceMappingURL=check-loader.js.map

package/dist/cli/fit/check-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-loader.js","sourceRoot":"","sources":["../../../src/cli/fit/check-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAClG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,8EAA8E;AAC9E,wEAAwE;AACxE,sEAAsE;AACtE,8EAA8E;AAE9E;;6EAE6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,OAAO,uBAAuB,EAAE,CAAC,YAAY,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,qPAAqP;AACrP,MAAM,UAAU,mBAAmB;IACjC,OAAO,uBAAuB,EAAE,CAAC,gBAAgB,CAAC;AACpD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB;IAClC,OAAO,oBAAoB,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;+DAC+D;AAC/D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAmB;IAC1D,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7B,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG;QAAE,OAAO;IAEnC,iEAAiE;IACjE,uEAAuE;IACvE,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IAEvB,gDAAgD;IAChD,4DAA4D;IAC5D,iEAAiE;IACjE,EAAE;IACF,gEAAgE;IAChE,6DAA6D;IAC7D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;IAC5C,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,sEAAsE;QACtE,oEAAoE;QACpE,4DAA4D;QAC5D,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,mDAAmD;IACnD,KAAK,MAAM,GAAG,IAAI,MAAM,oBAAoB,CAAC,UAAU,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,oBAAoB,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,IAAI,CACpB,iCAAiC;YAC/B,wEAAwE;YACxE,6DAA6D,CAChE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,0BAA0B;YAC/B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,0BAA0B;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IACpD,MAAM,QAAQ,GAAG,YAAY,EAAE,EAAE,YAAY,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;IAC/F,OAAO,QAAQ,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC;QACpD,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC;QACvC,CAAC,CAAC,oBAAoB,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,UAAU;YACpB,UAAU;YACV,MAAM,EAAE,aAAa,EAAE;YACvB,WAAW;SACZ,CAAC,CAAC;AACT,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa;IACpB,sEAAsE;IACtE,qEAAqE;IACrE,mDAAmD;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/cli/fit/config-loader.d.ts

@@ -0,0 +1,55 @@
+/**
+ * `opensip-cli.config.yml` parsing + validation for the `fit` command.
+ *
+ * Wraps `loadSignalersConfig` and `loadTargetsConfig` so that
+ * `executeFit` gets a single resolve-or-error step. A missing/invalid
+ * config is a HARD error — otherwise file-based checks silently produce
+ * zero findings, the exact failure mode the CLI exists to prevent.
+ */
+import { loadTargetsConfig } from '../../targets/index.js';
+import type { SignalersConfig } from '../../signalers/types.js';
+import type { ErrorResult, FitOptions } from '@opensip-cli/contracts';
+export interface LoadedFitConfig {
+    signalersConfig: SignalersConfig;
+    targetsConfig: ReturnType<typeof loadTargetsConfig>['config'];
+    targetRegistry: ReturnType<typeof loadTargetsConfig>['registry'];
+}
+/**
+ * Resolve `signalersConfig` + `targetsConfig` for this run. Scope-first
+ * (ADR-0023 one-reader): on CLI paths both loaders project from the
+ * host-validated `scope.configDocument`; the file read is the scope-less
+ * fallback (programmatic use, unit tests). Returns an `ErrorResult` instead
+ * of throwing so the caller maps it directly to the public failure shape — a
+ * missing/invalid config is a HARD error (otherwise file-based checks
+ * silently produce zero findings).
+ */
+export declare function loadFitConfig(args: FitOptions): LoadedFitConfig | {
+    error: ErrorResult;
+};
+/**
+ * Warn loudly when the targets config declares a `languages:` tag that is
+ * neither backed by a content-filter adapter NOR a recognized non-code
+ * format — i.e. a likely typo. Silent acceptance would let users ship
+ * configs whose files match no check and skip filtering with no signal.
+ *
+ * `languages:` is a *matching dimension* (it routes files to checks via
+ * `findByScope`). A subset of those tags have a registered
+ * {@link LanguageAdapter} that strips strings/comments; another set are
+ * recognized non-code formats (JSON, YAML, Markdown, …) that are valid
+ * matching tags but intentionally have no adapter — files in those scan
+ * raw, which is correct, so they are NOT warned about. Only genuinely
+ * unrecognized tags (e.g. `pythonn`) warn.
+ *
+ * Returns warning strings (one per unknown-language batch) rather than
+ * writing to stderr — stderr writes during the Ink live view desync the
+ * renderer's frame tracking. `executeFit` collects these and threads
+ * them into `FitDoneResult.warnings`.
+ *
+ * Async only because `currentScope` is imported via dynamic import to
+ * keep the executeFit body free of fitness↔core import arrows beyond
+ * the kernel barrel. The scope is bound by the CLI pre-action-hook.
+ *
+ * @throws {Error} When called outside `runWithScope(...)` (no current scope).
+ */
+export declare function validateLanguagesAgainstAdapters(targetRegistry: LoadedFitConfig['targetRegistry']): Promise<readonly string[]>;
+//# sourceMappingURL=config-loader.d.ts.map

package/dist/cli/fit/config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../../src/cli/fit/config-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9D,cAAc,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,UAAU,CAAC,CAAC;CAClE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,GAAG;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,CAsBxF;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,gCAAgC,CACpD,cAAc,EAAE,eAAe,CAAC,gBAAgB,CAAC,GAChD,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAuC5B"}