@sentropic/h2a 0.90.2 → 0.91.0

package/dist/hosts/installation-doctor-contract.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Root keys in Claude's native JSON configuration that installation-doctor can
+ * rewrite itself. The owner UAT imports this exact contract before taking its
+ * snapshot, so its relevance boundary evolves with doctor rather than with an
+ * observation of volatile Claude session state.
+ */
+export const CLAUDE_NATIVE_MCP_ROOT_KEY: "mcpServers";
+export const CLAUDE_NATIVE_REPAIRABLE_ROOT_KEYS: readonly string[];
+//# sourceMappingURL=installation-doctor-contract.d.ts.map

package/dist/hosts/installation-doctor-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-doctor-contract.d.ts","sourceRoot":"","sources":["../../src/hosts/installation-doctor-contract.js"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,yCAA0C,YAAY,CAAC;AACvD,mEAA8F"}

package/dist/hosts/installation-doctor-contract.js

@@ -0,0 +1,9 @@
+/**
+ * Root keys in Claude's native JSON configuration that installation-doctor can
+ * rewrite itself. The owner UAT imports this exact contract before taking its
+ * snapshot, so its relevance boundary evolves with doctor rather than with an
+ * observation of volatile Claude session state.
+ */
+export const CLAUDE_NATIVE_MCP_ROOT_KEY = "mcpServers";
+export const CLAUDE_NATIVE_REPAIRABLE_ROOT_KEYS = Object.freeze([CLAUDE_NATIVE_MCP_ROOT_KEY]);
+//# sourceMappingURL=installation-doctor-contract.js.map

package/dist/hosts/installation-doctor-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-doctor-contract.js","sourceRoot":"","sources":["../../src/hosts/installation-doctor-contract.js"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AACvD,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC"}

package/dist/hosts/installation-doctor.d.ts

@@ -40,6 +40,11 @@ export interface HostInstallationDoctorOptions {
         readonly knownGood: HostCommandResult;
         readonly candidate: HostCommandResult;
     };
+    /** Test-only responses from the known-good and candidate Claude configuration probes. */
+    readonly testClaudeConfigurationOracle?: {
+        readonly knownGood: HostCommandResult;
+        readonly candidate: HostCommandResult;
+    };
     /** Injectable for hermetic tests; production writes the durable repair marker. */
     readonly writeRepairMarker?: (path: string, content: string) => void;
     /** Report host repair findings and planned actions without mutating the host. */

package/dist/hosts/installation-doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installation-doctor.d.ts","sourceRoot":"","sources":["../../src/hosts/installation-doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuBH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAIhD,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AACnD,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAChD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AACvD,eAAO,MAAM,uBAAuB,sCAAsC,CAAC;AAC3E,eAAO,MAAM,+BAA+B,+LACkJ,CAAC;AAC/L,eAAO,MAAM,wCAAwC,gbAC0X,CAAC;AAEhb,KAAK,IAAI,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,QAAQ,GAAG,OAAO,EAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,iBAAiB,CAAC;AAEvB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAC5C,oGAAoG;IACpG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;IACxD,wFAAwF;IACxF,QAAQ,CAAC,4BAA4B,CAAC,EAAE;QACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,kFAAkF;IAClF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,iFAAiF;IACjF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,wFAAwF;IACxF,QAAQ,CAAC,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD,6EAA6E;IAC7E,QAAQ,CAAC,sBAAsB,CAAC,EAAE;QAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;QAC9F,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;KACjE,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EACT,kBAAkB,GAClB,gBAAgB,GAChB,qBAAqB,GACrB,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,sBAAsB,GACtB,qBAAqB,GACrB,sBAAsB,GACtB,0BAA0B,GAC1B,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,GACpB,sBAAsB,GACtB,2BAA2B,GAC3B,4BAA4B,GAC5B,8BAA8B,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,uFAAuF;IACvF,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACvD,iGAAiG;IACjG,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,4GAA4G;IAC5G,QAAQ,CAAC,YAAY,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC1D,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,oGAAoG;IACpG,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,iEAAiE;IACjE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAssED,0FAA0F;AAC1F,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,6BAAkC,GAC1C,4BAA4B,CAkE9B;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,SAAS,UAAU,EAAE,EAC/B,KAAK,EAAE,SAAS,sBAAsB,EAAE,GACvC,sBAAsB,EAAE,CA4D1B"}
+{"version":3,"file":"installation-doctor.d.ts","sourceRoot":"","sources":["../../src/hosts/installation-doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAuBH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAKhD,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AACnD,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAChD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AACvD,eAAO,MAAM,uBAAuB,sCAAsC,CAAC;AAC3E,eAAO,MAAM,+BAA+B,+LACkJ,CAAC;AAC/L,eAAO,MAAM,wCAAwC,gbAC0X,CAAC;AAEhb,KAAK,IAAI,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,QAAQ,GAAG,OAAO,EAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,iBAAiB,CAAC;AAEvB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAC5C,oGAAoG;IACpG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;IACxD,wFAAwF;IACxF,QAAQ,CAAC,4BAA4B,CAAC,EAAE;QACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,yFAAyF;IACzF,QAAQ,CAAC,6BAA6B,CAAC,EAAE;QACvC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,kFAAkF;IAClF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,iFAAiF;IACjF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,wFAAwF;IACxF,QAAQ,CAAC,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD,6EAA6E;IAC7E,QAAQ,CAAC,sBAAsB,CAAC,EAAE;QAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;QAC9F,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;KACjE,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EACT,kBAAkB,GAClB,gBAAgB,GAChB,qBAAqB,GACrB,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,sBAAsB,GACtB,qBAAqB,GACrB,sBAAsB,GACtB,0BAA0B,GAC1B,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,GACpB,sBAAsB,GACtB,2BAA2B,GAC3B,4BAA4B,GAC5B,8BAA8B,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,uFAAuF;IACvF,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACvD,iGAAiG;IACjG,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,4GAA4G;IAC5G,QAAQ,CAAC,YAAY,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC1D,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,oGAAoG;IACpG,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;CAC1C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,iEAAiE;IACjE,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AA00ED,0FAA0F;AAC1F,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,6BAAkC,GAC1C,4BAA4B,CA+E9B;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,SAAS,UAAU,EAAE,EAC/B,KAAK,EAAE,SAAS,sBAAsB,EAAE,GACvC,sBAAsB,EAAE,CA4D1B"}

package/dist/hosts/installation-doctor.js

@@ -15,9 +15,10 @@
 import { spawnSync } from "node:child_process";
 import { closeSync, existsSync, fsyncSync, lstatSync, mkdtempSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
-import { delimiter, dirname, join } from "node:path";
+import { delimiter, dirname, join, relative } from "node:path";
 import { resolveHostConfigCompanionBase, resolveHostConfigRoot } from "../runtime/host-config-root.js";
 import { currentCliVersion } from "../runtime/upgrade/index.js";
+import { CLAUDE_NATIVE_MCP_ROOT_KEY } from "./installation-doctor-contract.js";
 export const H2A_PLUGIN_SELECTOR = "h2a@sentropic";
 export const H2A_MARKETPLACE_NAME = "sentropic";
 export const H2A_MARKETPLACE_REPOSITORY = "rhanka/h2a";
@@ -1222,7 +1223,7 @@ function jsonObjectProperties(raw, objectStart) {
 }
 function removeOwnedJsonMcpEntries(raw) {
     const root = jsonObjectProperties(raw, skipJsonWhitespace(raw, 0));
-    const mcpServers = root?.find((property) => property.key === "mcpServers");
+    const mcpServers = root?.find((property) => property.key === CLAUDE_NATIVE_MCP_ROOT_KEY);
     if (!mcpServers || raw[mcpServers.valueStart] !== "{")
         return raw;
     const servers = jsonObjectProperties(raw, mcpServers.valueStart);
@@ -1709,6 +1710,106 @@ function verifyCodexConfiguration(home, report, nativeCliReachable, testOracle)
     report.unrepaired.push(finding("config-invalid", `Codex rejected its configuration while running codex mcp list: ${result.message ?? "unknown error"}`, configPath));
     return false;
 }
+/**
+ * Claude rewrites even a valid configuration while listing MCP servers.  The
+ * oracle therefore receives a byte-for-byte copy under a disposable home;
+ * the owner's files must never be an argument to the native command.
+ */
+function claudeOracleContext(claudeHome) {
+    return {
+        cwd: claudeHome,
+        env: {
+            ...process.env,
+            HOME: claudeHome,
+            CLAUDE_CONFIG_DIR: claudeHome,
+            XDG_CONFIG_HOME: join(claudeHome, ".config"),
+            XDG_CACHE_HOME: join(claudeHome, ".cache"),
+            XDG_DATA_HOME: join(claudeHome, ".local", "share")
+        }
+    };
+}
+function verifyClaudeOracleKnownGood(testOracle) {
+    if (testOracle)
+        return testOracle.knownGood;
+    let oracleHome;
+    let oracleResult;
+    try {
+        oracleHome = mkdtempSync(join(tmpdir(), "h2a-claude-config-oracle-"));
+        writeFileSync(join(oracleHome, ".claude.json"), "{}\n");
+        oracleResult = defaultHostCommand("claude", ["mcp", "list"], claudeOracleContext(oracleHome));
+    }
+    catch (error) {
+        oracleResult = { ok: false, message: error.message };
+    }
+    if (oracleHome) {
+        try {
+            rmSync(oracleHome, { recursive: true, force: true });
+        }
+        catch (error) {
+            return { ok: false, message: `cannot remove disposable oracle root: ${error.message}` };
+        }
+    }
+    return oracleResult;
+}
+function verifyClaudeConfiguration(home, report, nativeCliReachable, testOracle) {
+    if (!nativeCliReachable)
+        return false;
+    const configPaths = claudeConfigPaths(home);
+    const configBase = resolveHostConfigCompanionBase("claude", home);
+    const configPath = configPaths[0] ?? join(configBase, ".claude.json");
+    const oracleSelfTest = verifyClaudeOracleKnownGood(testOracle);
+    if (!oracleSelfTest.ok) {
+        report.unrepaired.push(finding("host-config-unverifiable", `Claude configuration oracle could not validate a known-good minimal configuration; it did not judge ${configPath}: ${oracleSelfTest.message ?? "unknown error"}`, configPath));
+        return false;
+    }
+    if (testOracle) {
+        if (testOracle.candidate.ok)
+            return true;
+        report.unrepaired.push(finding("config-invalid", `Claude rejected its configuration while running claude mcp list: ${testOracle.candidate.message ?? "unknown error"}`, configPath));
+        return false;
+    }
+    let oracleHome;
+    let oracleResult;
+    let verificationError;
+    const sources = [];
+    try {
+        oracleHome = mkdtempSync(join(tmpdir(), "h2a-claude-config-oracle-"));
+        for (const path of configPaths) {
+            const destination = join(oracleHome, relative(configBase, path));
+            const raw = readFileSync(path);
+            mkdirSync(dirname(destination), { recursive: true });
+            writeFileSync(destination, raw);
+            sources.push({ path, raw });
+        }
+        oracleResult = defaultHostCommand("claude", ["mcp", "list"], claudeOracleContext(oracleHome));
+        for (const source of sources) {
+            const current = readFileSync(source.path);
+            if (!current.equals(source.raw)) {
+                verificationError = `configuration changed while the Claude oracle inspected its disposable copy: ${source.path}`;
+                break;
+            }
+        }
+    }
+    catch (error) {
+        verificationError = error.message;
+    }
+    if (oracleHome) {
+        try {
+            rmSync(oracleHome, { recursive: true, force: true });
+        }
+        catch (error) {
+            verificationError ??= `cannot remove disposable oracle root: ${error.message}`;
+        }
+    }
+    if (verificationError) {
+        report.unrepaired.push(finding("host-config-unverifiable", `Claude configuration oracle could not safely inspect ${configPath}: ${verificationError}`, configPath));
+        return false;
+    }
+    if (oracleResult?.ok)
+        return true;
+    report.unrepaired.push(finding("config-invalid", `Claude rejected its configuration while running claude mcp list: ${oracleResult?.message ?? "unknown error"}`, configPath));
+    return false;
+}
 function reportAcceptedOpaqueCodexRegions(home, report) {
     const path = codexConfigPath(home);
     try {
@@ -1993,6 +2094,14 @@ export function doctorHostInstallations(options = {}) {
             report = repair
                 ? repairClaude(home, version, runner, writeMarker, dryRun, options.testClaudePluginUninstalls ?? [], options.testConfigurationWrite, cliReachable)
                 : inspectClaude(home, version);
+            // `testHostCliReachable` deliberately models only CLI presence for
+            // hermetic fixture tests. It must not accidentally query a developer's
+            // configured Claude installation; the production path has no such
+            // override and always asks Claude through a disposable configuration
+            // copy because `claude mcp list` rewrites its input.
+            if (cliReachable && (options.testHostCliReachable === undefined || options.testClaudeConfigurationOracle !== undefined)) {
+                verifyClaudeConfiguration(home, report, cliReachable, options.testClaudeConfigurationOracle);
+            }
         }
         else {
             report = repair