@skillcap/gdh 0.22.0 → 0.24.0

package/INSTALL-BUNDLE.json

@@ -1,5 +1,5 @@
 {
   "product": "GDH",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "installMode": "packaged_install"
 }

package/RELEASE-SPAN-UPDATE-CONTRACTS.json

@@ -2427,6 +2427,135 @@
           }
         ]
       }
+    },
+    {
+      "version": "0.23.0",
+      "releaseTag": "v0.23.0",
+      "migrationStatus": "required",
+      "summary": "v0.23.0 ships the persistent diagnostics broker for agent-visible Godot LSP feedback. Existing managed targets need `gdh migrate --apply` because GDH_GUIDANCE_UNIT_VERSION moves 16 -> 17 (authoring guidance now teaches the diagnostics broker workflow) and GDH_UPDATE_HOOK_VERSION moves 4 -> 5 (managed post-edit hooks now refresh the broker before the authoring check).",
+      "releaseHighlights": {
+        "summary": "v0.23.0 ships a persistent diagnostics broker for GDH-managed Godot targets. A target/worktree-local broker keeps a live Godot LSP client connected, maintains the current normalized diagnostics snapshot under `.gdh-state`, and exposes that snapshot to CLI, MCP, post-edit hooks, and generated agent guidance. Broker state is local-only, loopback-bound, and token-protected. `gdh authoring check --mode post-edit|final` remains the explicit validation/evidence path with broker fast-path and direct LSP/static fallback.",
+        "operatorChanges": [
+          "**New `gdh authoring diagnostics` CLI surface.** `status`, `current`, `refresh`, `doctor`, and `prune` operations let agents inspect current Godot LSP problems without re-running ad hoc authoring checks. `prune` is intentionally CLI-only and not exposed via MCP.",
+          "**New MCP `authoring.diagnostics` tools.** MCP exposes `status`, `current`, `refresh`, and `doctor` parity for the same broker surface.",
+          "**Post-edit hooks refresh the broker before authoring check.** Managed Codex and Claude post-edit hooks now call `gdh authoring diagnostics refresh --target <root> --changed <path>` before the existing `gdh authoring check --mode post-edit` call. Broker refresh failure is non-fatal; the authoring check falls back to direct LSP collection.",
+          "**Generated agent guidance teaches the broker workflow.** Agent guidance distinguishes diagnostics-broker visibility (`diagnostics current/refresh/doctor`) from explicit evidence runs (`authoring check --mode final` for task handoff, commit, or broad validation).",
+          "**Honest snapshot scope and freshness.** Snapshots default to `opened_files_only` scope and `scope_limited` freshness classification. GDH does not claim whole-project diagnostics unless the Godot LSP emits evidence at that scope.",
+          "**Self-update detects legacy hooks without diagnostics refresh.** Self-update re-renders post-edit hooks that pre-date the broker workflow.",
+          "**Docs-validation tripwires.** `DIAG-BROKER-01` validate-docs checks block regression of the `authoring-dirty.json` ledger and Stop-hook validation patterns."
+        ]
+      },
+      "updateContract": {
+        "summary": "Managed targets need release-specific migration for v0.23.0 because generated authoring guidance and post-edit hook surfaces changed for the diagnostics broker workflow. After self-update, run `gdh migrate --apply`, then validate adapter status, drift, and the new diagnostics broker surfaces.",
+        "steps": [
+          {
+            "id": "self_update_runtime_workflow_package",
+            "kind": "mechanical",
+            "summary": "Install the v0.23.0 GDH package.",
+            "detail": "Run the normal GDH self-update or package update path. This makes the new authoring diagnostics CLI/MCP surfaces, refreshed managed hook renderer, and updated guidance available to the host.",
+            "commands": [
+              "gdh self-update --apply"
+            ],
+            "validationCommands": [
+              "gdh status"
+            ]
+          },
+          {
+            "id": "rebake_diagnostics_broker_surfaces",
+            "kind": "mechanical",
+            "summary": "Re-bake managed authoring guidance and post-edit hook surfaces.",
+            "detail": "Run `gdh migrate --apply` so guidance unit version 17 writes the new diagnostics broker guidance and hook version 5 writes the managed post-edit hooks that refresh the broker before the authoring check.",
+            "commands": [
+              "gdh migrate --apply"
+            ],
+            "validationCommands": [
+              "gdh adapters status",
+              "gdh verify drift",
+              "gdh status"
+            ]
+          },
+          {
+            "id": "verify_diagnostics_broker_visibility",
+            "kind": "agent_reasoning",
+            "summary": "Confirm the diagnostics broker is reachable for the target.",
+            "detail": "Inspect the broker with `gdh authoring diagnostics status` and, if needed, `gdh authoring diagnostics doctor`. On hosts without a configured Godot editor binary, expect honest `unavailable` results and rely on `gdh authoring check --mode final` for explicit evidence runs. Use `gdh authoring diagnostics refresh --changed <path>` after edits to warm the snapshot before reading it.",
+            "commands": [
+              "gdh authoring diagnostics status",
+              "gdh authoring diagnostics doctor",
+              "gdh authoring diagnostics refresh --changed <path>",
+              "gdh authoring diagnostics current"
+            ],
+            "validationCommands": [
+              "gdh authoring diagnostics status",
+              "gdh authoring check --mode final"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "version": "0.24.0",
+      "releaseTag": "v0.24.0",
+      "migrationStatus": "required",
+      "summary": "v0.24.0 ships v1.18 Migration Chain Integrity. Five managed-surface version constants bump (GDH_AGENT_CONTRACT_VERSION 8 -> 9, GDH_GUIDANCE_INDEX_VERSION 4 -> 5, GDH_GUIDANCE_UNIT_VERSION 17 -> 18, GDH_UPDATE_HOOK_VERSION 5 -> 6, GDH_RUNTIME_BRIDGE_SURFACE_VERSION 11 -> 12). The migration registry adds entry s3c8_to_s3c9_register_runtime_bridge_autoload — a class-3 project-native register_autoload op that writes the GDHBridge autoload entry into project.godot deterministically, replacing the pre-v0.24 manual editor plugin-enable detour the chain matrix flagged as compatibility_degraded.",
+      "releaseHighlights": {
+        "summary": "v0.24.0 ships the v1.18 Migration Chain Integrity milestone. GDH now guarantees that every supported version listed in `docs/product/SUPPORTED-VERSIONS.md` reaches HEAD through `gdh self-update` without manual editor intervention. The release adds a falsifiable five-condition `release:apply` gate (registry completeness, chain matrix, corpus parity, goldens, migration-verify outcome `pass`), a typed managed-surface drift manifest with module-load `assertClassRegistered` guards, deterministic GDHBridge autoload registration during install/repair/self-update, a single-direction migration registry with paired golden fixtures, durable backup with crash-resilient restore, render-inventory orphan sweeping, and a `bumpAndRebakePin` 12-step orchestrator that composes all of the above.",
+        "operatorChanges": [
+          "**Deterministic GDHBridge autoload registration.** `gdh setup`, `gdh self-update`, and `gdh migrate --apply` now write the GDHBridge autoload entry into `project.godot` directly. Pre-v0.24, agents driving self-update had to instruct the operator to open the Godot editor and enable the GDH Runtime Bridge plugin so it could register the autoload itself. The chain matrix flagged that detour as `compatibility_degraded`; v0.24 closes it as a class-3 project-native `register_autoload` op on the v1.18 manifest allowlist.",
+          "**Migration chain matrix.** `npm run test:migration-chain` exercises every supported version (v0.18.0 through v0.23.0) end-to-end against HEAD via the installed tarball. `release:apply` invokes the matrix in-process and refuses to tag on non-zero exit.",
+          "**Five-condition release-apply gate.** `corepack yarn release:apply` enforces five machine-verifiable conditions before tagging: registry completeness (every `surfaceVersionChange` has a bracketing `MIGRATION_REGISTRY_ENTRIES` entry), chain matrix exit 0, corpus parity (`SUPPORTED-VERSIONS.md` rows match `tests/fixtures/migration-corpus/v<version>/` directories), goldens exit 0, and migration-verify outcome `pass`. There is no env-flag bypass, no `--force`, no skip-attestation file.",
+          "**Managed surface drift classification.** `GDH_MANAGED_SURFACE_CLASSES` from `@gdh/core` is the typed source of truth for the three drift classes (deterministic / user-data / project-native). Every managed-surface renderer carries a module-load `assertClassRegistered` guard that aborts the install pipeline if the manifest and a renderer drift.",
+          "**Local pre-commit and pre-push hooks.** `corepack yarn hooks:install` installs simple-git-hooks. Pre-commit catches schema-affecting diffs without paired migration entries and goldens; pre-push runs the adjacent star-case chain test plus all goldens. Hooks are bypass-able by `git commit --no-verify` and `git push --no-verify` — these are git-level escapes that no hook framework can prevent.",
+          "**Maintainer release skills.** `/gdh-dev:release`, `/gdh-dev:migration-verify`, and `/gdh-dev:publish` (Claude) and the Codex/Cursor equivalents now own the end-to-end release flow. `/gdh-dev:migration-verify` is a thin wrapper around `node scripts/release-lib/migration-verify.mjs` and consumes its locked JSON outcome contract.",
+          "**Durable backup.** `bumpAndRebakePin` step 5 writes a directory-level durable backup at `.gdh-state/backup/` via the staged-rename strategy (`.gdh-state/backup.new/` → atomic `fs.rename`). Restore is byte-equal round-trip; user-edit drift is detected by absence of any KNOWN_GDH_MARKERS and persisted in the manifest's `preservation_notes`.",
+          "**Render-inventory orphan sweeping.** `bumpAndRebakePin` writes `.gdh-state/render-inventory.json` after each successful re-bake; the next run computes set-diff against the previous inventory and deletes orphaned managed files. Symlink-safe (`fs.lstat` existence probe + `fs.rm` unlink semantics) and path-traversal-gated.",
+          "**Migration-verifier JSON outcome contract.** `scripts/release-lib/migration-verify.mjs` returns one of `pass | blocked | incomplete` over six conditions (artifacts, registry completeness, release-note/manifest/verification consistency, corpus parity, chain matrix, goldens). Both `/gdh-dev:migration-verify` and `release:apply` consume the same JSON; `release:apply` passes pre-computed chain + goldens evidence so the helper does not double-spawn."
+        ]
+      },
+      "updateContract": {
+        "summary": "Managed targets need release-specific migration for v0.24.0 because five managed-surface version constants bumped and the migration registry now writes the GDHBridge autoload entry into project.godot deterministically. After self-update, run gdh migrate --apply, then validate adapter status, drift, and the deterministic autoload registration.",
+        "steps": [
+          {
+            "id": "self_update_runtime_workflow_package",
+            "kind": "mechanical",
+            "summary": "Install the v0.24.0 GDH package.",
+            "detail": "Run gdh self-update so the new managed surface contract versions and the s3c8_to_s3c9_register_runtime_bridge_autoload registry entry are available to the host.",
+            "commands": [
+              "gdh self-update --apply"
+            ],
+            "validationCommands": [
+              "gdh status"
+            ]
+          },
+          {
+            "id": "rebake_v118_managed_surfaces",
+            "kind": "mechanical",
+            "summary": "Re-bake managed AGENTS.md, guidance, and hook surfaces; register the GDHBridge autoload in project.godot.",
+            "detail": "Run gdh migrate --apply so agent contract version 9 writes the new AGENTS.md contract block, guidance index version 5 and unit version 18 write the refreshed guidance, hook version 6 writes managed hook scripts, and the v1.18 register_autoload op writes the GDHBridge autoload entry into project.godot if it is missing.",
+            "commands": [
+              "gdh migrate --apply"
+            ],
+            "validationCommands": [
+              "gdh adapters status",
+              "gdh verify drift",
+              "gdh status"
+            ]
+          },
+          {
+            "id": "verify_runtime_bridge_autoload_registered",
+            "kind": "agent_reasoning",
+            "summary": "Confirm the GDHBridge autoload is registered deterministically in project.godot.",
+            "detail": "Open project.godot and confirm an `[autoload]` section contains `GDHBridge=\"*res://addons/gdh_bridge/runtime/gdh_runtime_bridge.gd\"`. Pre-v0.24 targets that relied on the manual editor plugin-enable detour pick up the entry automatically during gdh migrate --apply. No editor session is required.",
+            "commands": [
+              "gdh status"
+            ],
+            "validationCommands": [
+              "gdh status",
+              "gdh authoring check --mode final"
+            ]
+          }
+        ]
+      }
     }
   ]
 }

package/node_modules/@gdh/adapters/dist/authoring-hook-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authoring-hook-render.d.ts","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mCAAmC,yCAAyC,CAAC;AAC1F,eAAO,MAAM,kCAAkC,wCAAwC,CAAC;AACxF,eAAO,MAAM,6BAA6B,uRAC4O,CAAC;AACvR,eAAO,MAAM,4BAA4B,qRAC2O,CAAC;AAErR,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;CACpC,GAAG,MAAM,CA6HT"}
+{"version":3,"file":"authoring-hook-render.d.ts","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mCAAmC,yCAAyC,CAAC;AAC1F,eAAO,MAAM,kCAAkC,wCAAwC,CAAC;AACxF,eAAO,MAAM,6BAA6B,uRAC4O,CAAC;AACvR,eAAO,MAAM,4BAA4B,qRAC2O,CAAC;AAErR,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;CACpC,GAAG,MAAM,CAmIT"}

package/node_modules/@gdh/adapters/dist/authoring-hook-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, assertClassRegistered } from "@gdh/core";
+assertClassRegistered("authoring_hook", "deterministic");
 export const CLAUDE_AUTHORING_HOOK_RELATIVE_PATH = ".claude/hooks/gdh-authoring-guard.js";
 export const CODEX_AUTHORING_HOOK_RELATIVE_PATH = ".codex/hooks/gdh-authoring-guard.js";
 export const CLAUDE_AUTHORING_HOOK_COMMAND = "node -e \"const fs=require('fs'),path=require('path');let d=process.cwd();for(;;){const f=path.join(d,'.claude/hooks/gdh-authoring-guard.js');if(fs.existsSync(f)){require(f);break}const p=path.dirname(d);if(p===d)throw new Error('GDH Claude authoring hook not found');d=p}\"";
@@ -35,7 +36,13 @@ export function renderGdhAuthoringHook(input) {
         "  const changed = collectChangedFiles(input, targetRoot);",
         "  const authoring = changed.filter(isAuthoringValidationPath);",
         "  if (authoring.length === 0) return allow();",
-        "  const result = runGdh(targetRoot, ['authoring', 'check', '--target', targetRoot, '--mode', 'post-edit', '--format', 'compact', ...authoring.flatMap((file) => ['--changed', file])]);",
+        "  const changedArgs = authoring.flatMap((file) => ['--changed', file]);",
+        "  // Attempt to refresh the diagnostics broker for changed files.",
+        "  // Broker refresh failure is non-fatal: the authoring check falls back to direct LSP.",
+        "  runGdh(targetRoot, ['authoring', 'diagnostics', 'refresh', '--target', targetRoot, ...changedArgs]);",
+        "  // Run compact authoring check. When broker was refreshed, this uses the fresh snapshot.",
+        "  // When broker is unavailable, this falls back to direct LSP post-edit collection.",
+        "  const result = runGdh(targetRoot, ['authoring', 'check', '--target', targetRoot, '--mode', 'post-edit', '--format', 'compact', ...changedArgs]);",
         "  if (!result.ok || !/Completion allowed\\./.test(result.output)) {",
         "    return block(`GDH post-edit authoring check needs attention.\\n${result.output || result.error || 'No check output.'}`);",
         "  }",

package/node_modules/@gdh/adapters/dist/authoring-hook-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"authoring-hook-render.js","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,CAAC,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AAC1F,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC;AACxF,MAAM,CAAC,MAAM,6BAA6B,GACxC,oRAAoR,CAAC;AACvR,MAAM,CAAC,MAAM,4BAA4B,GACvC,kRAAkR,CAAC;AAErR,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACC,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,8DAA8D;QAC9D,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG;QAChE,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG;QAC3E,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;QAC/C,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,iDAAiD;QACjD,EAAE;QACF,kEAAkE;QAClE,yBAAyB;QACzB,EAAE;QACF,SAAS;QACT,EAAE;QACF,mBAAmB;QACnB,kCAAkC;QAClC,gDAAgD;QAChD,0DAA0D;QAC1D,8BAA8B;QAC9B,oCAAoC;QACpC,6GAA6G;QAC7G,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,8CAA8C;QAC9C,2DAA2D;QAC3D,gEAAgE;QAChE,+CAA+C;QAC/C,yLAAyL;QACzL,qEAAqE;QACrE,8HAA8H;QAC9H,KAAK;QACL,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,yFAAyF;QACzF,sBAAsB;QACtB,uBAAuB;QACvB,wBAAwB;QACxB,sBAAsB;QACtB,OAAO;QACP,yEAAyE;QACzE,wHAAwH;QACxH,GAAG;QACH,EAAE;QACF,mDAAmD;QACnD,uFAAuF;QACvF,qBAAqB;QACrB,yDAAyD;QACzD,qEAAqE;QACrE,wEAAwE;QACxE,8HAA8H;QAC9H,+FAA+F;QAC/F,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,oEAAoE;QACpE,wDAAwD;QACxD,2DAA2D;QAC3D,0DAA0D;QAC1D,sDAAsD;QACtD,4HAA4H;QAC5H,kHAAkH;QAClH,GAAG;QACH,EAAE;QACF,yCAAyC;QACzC,qBAAqB;QACrB,qEAAqE;QACrE,cAAc;QACd,iFAAiF;QACjF,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,uDAAuD;QACvD,iEAAiE;QACjE,oFAAoF;QACpF,2CAA2C;QAC3C,GAAG;QACH,EAAE;QACF,kEAAkE;QAClE,wEAAwE;QACxE,0DAA0D;QAC1D,kEAAkE;QAClE,2GAA2G;QAC3G,kEAAkE;QAClE,iJAAiJ;QACjJ,4GAA4G;QAC5G,sIAAsI;QACtI,KAAK;QACL,4EAA4E;QAC5E,8CAA8C;QAC9C,GAAG;QACH,yKAAyK;QACzK,yKAAyK;QACzK,EAAE;QACF,4CAA4C;QAC5C,iFAAiF;QACjF,sEAAsE;QACtE,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,qDAAqD;QACrD,uEAAuE;QACvE,qDAAqD;QACrD,iEAAiE;QACjE,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,iFAAiF;QACjF,kHAAkH;QAClH,EAAE;QACF,uCAAuC;QACvC,0BAA0B;QAC1B,kDAAkD;QAClD,oHAAoH;QACpH,0DAA0D;QAC1D,oBAAoB;QACpB,GAAG;QACH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"authoring-hook-render.js","sourceRoot":"","sources":["../src/authoring-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,qBAAqB,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,mCAAmC,GAAG,sCAAsC,CAAC;AAC1F,MAAM,CAAC,MAAM,kCAAkC,GAAG,qCAAqC,CAAC;AACxF,MAAM,CAAC,MAAM,6BAA6B,GACxC,oRAAoR,CAAC;AACvR,MAAM,CAAC,MAAM,4BAA4B,GACvC,kRAAkR,CAAC;AAErR,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACC,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,8DAA8D;QAC9D,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG;QAChE,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG;QAC3E,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;QAC/C,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,iDAAiD;QACjD,EAAE;QACF,kEAAkE;QAClE,yBAAyB;QACzB,EAAE;QACF,SAAS;QACT,EAAE;QACF,mBAAmB;QACnB,kCAAkC;QAClC,gDAAgD;QAChD,0DAA0D;QAC1D,8BAA8B;QAC9B,oCAAoC;QACpC,6GAA6G;QAC7G,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,8CAA8C;QAC9C,2DAA2D;QAC3D,gEAAgE;QAChE,+CAA+C;QAC/C,yEAAyE;QACzE,mEAAmE;QACnE,yFAAyF;QACzF,wGAAwG;QACxG,4FAA4F;QAC5F,sFAAsF;QACtF,oJAAoJ;QACpJ,qEAAqE;QACrE,8HAA8H;QAC9H,KAAK;QACL,mBAAmB;QACnB,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,yFAAyF;QACzF,sBAAsB;QACtB,uBAAuB;QACvB,wBAAwB;QACxB,sBAAsB;QACtB,OAAO;QACP,yEAAyE;QACzE,wHAAwH;QACxH,GAAG;QACH,EAAE;QACF,mDAAmD;QACnD,uFAAuF;QACvF,qBAAqB;QACrB,yDAAyD;QACzD,qEAAqE;QACrE,wEAAwE;QACxE,8HAA8H;QAC9H,+FAA+F;QAC/F,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,oEAAoE;QACpE,wDAAwD;QACxD,2DAA2D;QAC3D,0DAA0D;QAC1D,sDAAsD;QACtD,4HAA4H;QAC5H,kHAAkH;QAClH,GAAG;QACH,EAAE;QACF,yCAAyC;QACzC,qBAAqB;QACrB,qEAAqE;QACrE,cAAc;QACd,iFAAiF;QACjF,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,uDAAuD;QACvD,iEAAiE;QACjE,oFAAoF;QACpF,2CAA2C;QAC3C,GAAG;QACH,EAAE;QACF,kEAAkE;QAClE,wEAAwE;QACxE,0DAA0D;QAC1D,kEAAkE;QAClE,2GAA2G;QAC3G,kEAAkE;QAClE,iJAAiJ;QACjJ,4GAA4G;QAC5G,sIAAsI;QACtI,KAAK;QACL,4EAA4E;QAC5E,8CAA8C;QAC9C,GAAG;QACH,yKAAyK;QACzK,yKAAyK;QACzK,EAAE;QACF,4CAA4C;QAC5C,iFAAiF;QACjF,sEAAsE;QACtE,GAAG;QACH,EAAE;QACF,qCAAqC;QACrC,qDAAqD;QACrD,uEAAuE;QACvE,qDAAqD;QACrD,iEAAiE;QACjE,yBAAyB;QACzB,GAAG;QACH,EAAE;QACF,iFAAiF;QACjF,kHAAkH;QAClH,EAAE;QACF,uCAAuC;QACvC,0BAA0B;QAC1B,kDAAkD;QAClD,oHAAoH;QACpH,0DAA0D;QAC1D,oBAAoB;QACpB,GAAG;QACH,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/claude-statusline-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-statusline-render.d.ts","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oCACT,CAAC;AAEpC;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CA4B5E"}
+{"version":3,"file":"claude-statusline-render.d.ts","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oCACT,CAAC;AAEpC;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CA4B5E"}

package/node_modules/@gdh/adapters/dist/claude-statusline-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, assertClassRegistered } from "@gdh/core";
+assertClassRegistered("claude_statusline", "deterministic");
 /**
  * Relative path of the optional managed Claude statusline renderer script.
  * GDH bakes this file so projects can opt into it manually, but adapter

package/node_modules/@gdh/adapters/dist/claude-statusline-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-statusline-render.js","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iCAAiC,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAuB;IAClE,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gGAAgG;QAChG,wFAAwF;QACxF,qFAAqF;QACrF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,EAAE;QACF,+BAA+B;QAC/B,6EAA6E;QAC7E,EAAE;QACF,qBAAqB;QACrB,iCAAiC;QACjC,SAAS;QACT,mEAAmE;QACnE,2CAA2C;QAC3C,wDAAwD;QACxD,OAAO;QACP,kBAAkB;QAClB,GAAG;QACH,EAAE;QACF,kCAAkC;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"claude-statusline-render.js","sourceRoot":"","sources":["../src/claude-statusline-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,qBAAqB,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,iCAAiC,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAuB;IAClE,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gGAAgG;QAChG,wFAAwF;QACxF,qFAAqF;QACrF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,EAAE;QACF,+BAA+B;QAC/B,6EAA6E;QAC7E,EAAE;QACF,qBAAqB;QACrB,iCAAiC;QACjC,SAAS;QACT,mEAAmE;QACnE,2CAA2C;QAC3C,wDAAwD;QACxD,OAAO;QACP,kBAAkB;QAClB,GAAG;QACH,EAAE;QACF,kCAAkC;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/claude-update-hook-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-hook-render.d.ts","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,sCACd,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,wCAAwC,6CACT,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAwCzE"}
+{"version":3,"file":"claude-update-hook-render.d.ts","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,sCACd,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,wCAAwC,6CACT,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAwCzE"}

package/node_modules/@gdh/adapters/dist/claude-update-hook-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, assertClassRegistered } from "@gdh/core";
+assertClassRegistered("claude_update_hook", "deterministic");
 /**
  * Relative path of the managed Claude SessionStart parent hook script.
  * This is the .js file Claude Code invokes when a session opens on a

package/node_modules/@gdh/adapters/dist/claude-update-hook-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-hook-render.js","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,mCAAmC,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,0CAA0C,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gEAAgE;QAChE,qEAAqE;QACrE,uFAAuF;QACvF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,6CAA6C;QAC7C,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,qHAAqH;QACrH,4EAA4E;QAC5E,EAAE;QACF,iCAAiC;QACjC,yDAAyD;QACzD,+DAA+D;QAC/D,EAAE;QACF,qEAAqE;QACrE,EAAE;QACF,0EAA0E;QAC1E,yDAAyD;QACzD,sBAAsB;QACtB,wBAAwB;QACxB,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,kCAAkC;QAClC,6BAA6B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG;QAC7D,QAAQ;QACR,OAAO;QACP,EAAE;QACF,kBAAkB;QAClB,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"claude-update-hook-render.js","sourceRoot":"","sources":["../src/claude-update-hook-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,qBAAqB,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,mCAAmC,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,0CAA0C,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,gEAAgE;QAChE,qEAAqE;QACrE,uFAAuF;QACvF,EAAE;QACF,2BAA2B;QAC3B,+BAA+B;QAC/B,2BAA2B;QAC3B,6CAA6C;QAC7C,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,qHAAqH;QACrH,4EAA4E;QAC5E,EAAE;QACF,iCAAiC;QACjC,yDAAyD;QACzD,+DAA+D;QAC/D,EAAE;QACF,qEAAqE;QACrE,EAAE;QACF,0EAA0E;QAC1E,yDAAyD;QACzD,sBAAsB;QACtB,wBAAwB;QACxB,qBAAqB;QACrB,YAAY;QACZ,uBAAuB;QACvB,kCAAkC;QAClC,6BAA6B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG;QAC7D,QAAQ;QACR,OAAO;QACP,EAAE;QACF,kBAAkB;QAClB,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/claude-update-worker-render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-worker-render.d.ts","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAsER"}
+{"version":3,"file":"claude-update-worker-render.d.ts","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAsER"}

package/node_modules/@gdh/adapters/dist/claude-update-worker-render.js

@@ -1,4 +1,5 @@
-import { GDH_UPDATE_HOOK_VERSION, GDH_UPDATE_REGISTRY_URL, } from "@gdh/core";
+import { GDH_UPDATE_HOOK_VERSION, GDH_UPDATE_REGISTRY_URL, assertClassRegistered, } from "@gdh/core";
+assertClassRegistered("claude_update_worker", "deterministic");
 /**
  * Render the background worker source that is spawned (detached + unref) by
  * the SessionStart parent hook. The worker performs the HTTPS probe against

package/node_modules/@gdh/adapters/dist/claude-update-worker-render.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-update-worker-render.js","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAuB;IAEvB,wEAAwE;IACxE,0EAA0E;IAC1E,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,mEAAmE;QACnE,0EAA0E;QAC1E,oEAAoE;QACpE,kEAAkE;QAClE,EAAE;QACF,eAAe;QACf,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,wDAAwD;QACxD,oFAAoF;QACpF,0BAA0B;QAC1B,gFAAgF;QAChF,gFAAgF;QAChF,iCAAiC;QACjC,qCAAqC;QACrC,sCAAsC;QACtC,KAAK;QACL,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,+FAA+F;QAC/F,4EAA4E;QAC5E,EAAE;QACF,kDAAkD;QAClD,wBAAwB;QACxB,EAAE;QACF,iDAAiD;QACjD,2BAA2B;QAC3B,EAAE;QACF,mBAAmB;QACnB,SAAS;QACT,yBAAyB,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK;QACrE,2CAA2C;QAC3C,SAAS;QACT,kBAAkB;QAClB,EAAE;QACF,sBAAsB;QACtB,wBAAwB;QACxB,WAAW;QACX,sCAAsC;QACtC,+CAA+C;QAC/C,gCAAgC;QAChC,SAAS;QACT,oBAAoB;QACpB,KAAK;QACL,EAAE;QACF,qEAAqE;QACrE,gCAAgC;QAChC,EAAE;QACF,oBAAoB;QACpB,aAAa;QACb,aAAa;QACb,0CAA0C;QAC1C,oCAAoC;QACpC,+CAA+C;QAC/C,MAAM;QACN,EAAE;QACF,sFAAsF;QACtF,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"claude-update-worker-render.js","sourceRoot":"","sources":["../src/claude-update-worker-render.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAEnB,qBAAqB,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAuB;IAEvB,wEAAwE;IACxE,0EAA0E;IAC1E,OAAO;QACL,qBAAqB;QACrB,wBAAwB,uBAAuB,EAAE;QACjD,mEAAmE;QACnE,0EAA0E;QAC1E,oEAAoE;QACpE,kEAAkE;QAClE,EAAE;QACF,eAAe;QACf,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,wDAAwD;QACxD,oFAAoF;QACpF,0BAA0B;QAC1B,gFAAgF;QAChF,gFAAgF;QAChF,iCAAiC;QACjC,qCAAqC;QACrC,sCAAsC;QACtC,KAAK;QACL,iBAAiB;QACjB,GAAG;QACH,EAAE;QACF,gBAAgB;QAChB,gGAAgG;QAChG,+FAA+F;QAC/F,4EAA4E;QAC5E,EAAE;QACF,kDAAkD;QAClD,wBAAwB;QACxB,EAAE;QACF,iDAAiD;QACjD,2BAA2B;QAC3B,EAAE;QACF,mBAAmB;QACnB,SAAS;QACT,yBAAyB,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK;QACrE,2CAA2C;QAC3C,SAAS;QACT,kBAAkB;QAClB,EAAE;QACF,sBAAsB;QACtB,wBAAwB;QACxB,WAAW;QACX,sCAAsC;QACtC,+CAA+C;QAC/C,gCAAgC;QAChC,SAAS;QACT,oBAAoB;QACpB,KAAK;QACL,EAAE;QACF,qEAAqE;QACrE,gCAAgC;QAChC,EAAE;QACF,oBAAoB;QACpB,aAAa;QACb,aAAa;QACb,0CAA0C;QAC1C,oCAAoC;QACpC,+CAA+C;QAC/C,MAAM;QACN,EAAE;QACF,sFAAsF;QACtF,OAAO;QACP,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.d.ts

@@ -0,0 +1,71 @@
+import { type GdhDeferredActionStatus, type GdhEnvelopePendingAdvisory, type GdhHostHarnessIntrospect, type GdhProcessRestartProbe } from "@gdh/core";
+/**
+ * Adapters consumed by {@link computeDeferredActionsAdvisory} (and threaded
+ * through `buildGdhStatusResult`). Both fields default to `null` so unit tests
+ * (which cannot introspect a real host harness) see probe results degrade to
+ * `pending` and the advisory remains correctly gated.
+ */
+export interface GdhStatusBuildAdapters {
+    readonly hostHarnessIntrospect: GdhHostHarnessIntrospect;
+    readonly processProbe: GdhProcessRestartProbe;
+}
+/**
+ * Probed deferred-action entry surfaced through `gdh status`.
+ *
+ * Mirrors the `GdhDeferredAction` shape minus the on-disk-only fields; carries
+ * the live probe result so consumers can rebuild rendering without re-running
+ * the probes.
+ */
+export interface GdhDeferredActionStatusEntry {
+    readonly id: string;
+    readonly description: string;
+    readonly status: GdhDeferredActionStatus;
+    readonly reason?: string;
+}
+/**
+ * Backup-cleanup advisory shape (D-17). Emitted ONLY when:
+ *   1. every probed deferred action returns `clean` (or there are zero), AND
+ *   2. `.gdh-state/backup/` exists (a manifest was readable), AND
+ *   3. `.gdh-state/backup.new/` does NOT exist (no in-progress migration).
+ *
+ * The `command` literal is the verbatim CLI invocation users run.
+ */
+export interface GdhBackupAdvisory {
+    readonly command: "gdh migration clear-backups";
+    readonly reason: "all_deferred_actions_clean";
+    readonly from_pin: string;
+    readonly to_pin: string;
+}
+export interface GdhDeferredActionsAdvisoryResult {
+    readonly deferredActions: readonly GdhDeferredActionStatusEntry[];
+    readonly backupAdvisory: GdhBackupAdvisory | null;
+    /**
+     * Phase 73 D-12: envelope-pending advisory. `null` unless
+     * `migration.json.pending_envelope_resume` is non-null. Mutually exclusive
+     * with {@link GdhBackupAdvisory} — when this is non-null, `backupAdvisory`
+     * is `null` because clearing the durable backup while a chain is paused
+     * destroys the rollback substrate.
+     */
+    readonly envelopeAdvisory: GdhEnvelopePendingAdvisory | null;
+}
+/**
+ * Read `migration.json`, run the probe per deferred action, and decide whether
+ * to emit the backup-cleanup advisory.
+ *
+ * Threat mitigations:
+ * - T-72-05-03 (TOCTOU): re-reads migration.json AND backup state freshly
+ *   inside this function; no cached probe results are consumed across calls.
+ * - T-72-05-04 (malformed migration.json): `readMigrationState` returns null
+ *   on parse/shape failure → `deferredActions` is `[]` and the advisory is
+ *   gated through the standard truth table.
+ * - T-72-05-06 (stale probe → clean): the gate requires `status === "clean"`
+ *   for every probe; `stale` and `pending` both block the advisory.
+ * - T-72-05-07 (interrupted migration): staging-dir check forces the advisory
+ *   to null whenever `.gdh-state/backup.new/` exists.
+ *
+ * Defaults: `adapters.hostHarnessIntrospect = null` and `adapters.processProbe
+ * = null` (every probe degrades to `pending`, so the advisory does not spuriously
+ * fire when a host cannot evaluate the deferred conditions).
+ */
+export declare function computeDeferredActionsAdvisory(targetPath: string, adapters?: GdhStatusBuildAdapters): Promise<GdhDeferredActionsAdvisoryResult>;
+//# sourceMappingURL=deferred-actions-advisory.d.ts.map

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-actions-advisory.d.ts","sourceRoot":"","sources":["../src/deferred-actions-advisory.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC5B,MAAM,WAAW,CAAC;AAOnB;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,qBAAqB,EAAE,wBAAwB,CAAC;IACzD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAClE,QAAQ,CAAC,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClD;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;CAC9D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,sBAAsB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CA0E3C"}

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.js

@@ -0,0 +1,89 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { readMigrationState, runDeferredActionProbe, } from "@gdh/core";
+import { BACKUP_STAGING_RELATIVE_PATH, readBackupManifest, } from "./durable-backup.js";
+/**
+ * Read `migration.json`, run the probe per deferred action, and decide whether
+ * to emit the backup-cleanup advisory.
+ *
+ * Threat mitigations:
+ * - T-72-05-03 (TOCTOU): re-reads migration.json AND backup state freshly
+ *   inside this function; no cached probe results are consumed across calls.
+ * - T-72-05-04 (malformed migration.json): `readMigrationState` returns null
+ *   on parse/shape failure → `deferredActions` is `[]` and the advisory is
+ *   gated through the standard truth table.
+ * - T-72-05-06 (stale probe → clean): the gate requires `status === "clean"`
+ *   for every probe; `stale` and `pending` both block the advisory.
+ * - T-72-05-07 (interrupted migration): staging-dir check forces the advisory
+ *   to null whenever `.gdh-state/backup.new/` exists.
+ *
+ * Defaults: `adapters.hostHarnessIntrospect = null` and `adapters.processProbe
+ * = null` (every probe degrades to `pending`, so the advisory does not spuriously
+ * fire when a host cannot evaluate the deferred conditions).
+ */
+export async function computeDeferredActionsAdvisory(targetPath, adapters) {
+    const hostHarnessIntrospect = adapters?.hostHarnessIntrospect ?? null;
+    const processProbe = adapters?.processProbe ?? null;
+    const migrationState = await readMigrationState(targetPath);
+    const probedActions = [];
+    for (const action of migrationState?.deferred_actions ?? []) {
+        const result = await runDeferredActionProbe(action, {
+            targetPath,
+            hostHarnessIntrospect,
+            processProbe,
+        });
+        const entry = result.reason !== undefined
+            ? {
+                id: action.id,
+                description: action.description,
+                status: result.status,
+                reason: result.reason,
+            }
+            : {
+                id: action.id,
+                description: action.description,
+                status: result.status,
+            };
+        probedActions.push(entry);
+    }
+    // Phase 73 D-12 — envelope-pending fourth gate. The marker is the in-flight
+    // resume substrate (D-11); clearing the durable backup while a chain is
+    // paused mid-bump destroys the rollback substrate. The two advisories are
+    // mutually exclusive: when the envelope marker is set, the backup advisory
+    // MUST be null, regardless of whether the other backup-cleanup gates pass.
+    const pendingEnvelope = migrationState?.pending_envelope_resume ?? null;
+    const noEnvelopePending = pendingEnvelope === null;
+    // Gate evaluation (advisory truth table):
+    //  (a) every probed action is clean (zero is trivially true)
+    //  (b) `.gdh-state/backup/` is present (manifest readable)
+    //  (c) `.gdh-state/backup.new/` is NOT present (no interrupted migration)
+    //  (d) Phase 73 D-12: no envelope is pending (mutually exclusive with
+    //      envelopeAdvisory)
+    const allClean = probedActions.every((a) => a.status === "clean");
+    const manifest = await readBackupManifest(targetPath);
+    const backupExists = manifest !== null;
+    const stagingPath = path.join(targetPath, BACKUP_STAGING_RELATIVE_PATH);
+    const stagingExists = await fs
+        .stat(stagingPath)
+        .then(() => true)
+        .catch(() => false);
+    const noMigrationInProgress = !stagingExists;
+    const backupAdvisory = allClean && backupExists && noMigrationInProgress && noEnvelopePending
+        ? {
+            command: "gdh migration clear-backups",
+            reason: "all_deferred_actions_clean",
+            from_pin: manifest.from_pin,
+            to_pin: manifest.to_pin,
+        }
+        : null;
+    const envelopeAdvisory = pendingEnvelope !== null
+        ? {
+            envelope_ref: pendingEnvelope.envelope_ref,
+            from_pin: pendingEnvelope.from_pin,
+            to_pin: pendingEnvelope.to_pin,
+            command: `gdh migration record-envelope-result ${pendingEnvelope.envelope_ref} --result-file <path>`,
+        }
+        : null;
+    return { deferredActions: probedActions, backupAdvisory, envelopeAdvisory };
+}
+//# sourceMappingURL=deferred-actions-advisory.js.map

package/node_modules/@gdh/adapters/dist/deferred-actions-advisory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-actions-advisory.js","sourceRoot":"","sources":["../src/deferred-actions-advisory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GAKvB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAuD7B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAAkB,EAClB,QAAiC;IAEjC,MAAM,qBAAqB,GACzB,QAAQ,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAC1C,MAAM,YAAY,GAA2B,QAAQ,EAAE,YAAY,IAAI,IAAI,CAAC;IAE5E,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,aAAa,GAAmC,EAAE,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE;YAClD,UAAU;YACV,qBAAqB;YACrB,YAAY;SACb,CAAC,CAAC;QACH,MAAM,KAAK,GAAiC,MAAM,CAAC,MAAM,KAAK,SAAS;YACrE,CAAC,CAAC;gBACE,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;YACH,CAAC,CAAC;gBACE,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACN,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,eAAe,GAAG,cAAc,EAAE,uBAAuB,IAAI,IAAI,CAAC;IACxE,MAAM,iBAAiB,GAAG,eAAe,KAAK,IAAI,CAAC;IAEnD,0CAA0C;IAC1C,6DAA6D;IAC7D,2DAA2D;IAC3D,0EAA0E;IAC1E,sEAAsE;IACtE,yBAAyB;IACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,qBAAqB,GAAG,CAAC,aAAa,CAAC;IAE7C,MAAM,cAAc,GAClB,QAAQ,IAAI,YAAY,IAAI,qBAAqB,IAAI,iBAAiB;QACpE,CAAC,CAAC;YACE,OAAO,EAAE,6BAA6B;YACtC,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,gBAAgB,GACpB,eAAe,KAAK,IAAI;QACtB,CAAC,CAAC;YACE,YAAY,EAAE,eAAe,CAAC,YAAY;YAC1C,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,OAAO,EAAE,wCAAwC,eAAe,CAAC,YAAY,uBAAuB;SACrG;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AAC9E,CAAC"}