@tacuchi/agent-workflow-cli 25.1.2 → 25.2.0

package/dist/application/doctor/provider-visibility.js

@@ -0,0 +1,149 @@
+import { doctorFindingId } from "../../domain/doctor/model.js";
+/**
+ * Workspace visibility — the declared sources against the ones each host has
+ * registered.
+ *
+ * One finding per drift CLASS that is actually present, driven by the `missing`
+ * and `extra` lists rather than by the aggregate status: a report whose status
+ * is `missing-paths` may also carry extras, and a single finding per host would
+ * hide one of the two.
+ *
+ * With no project block in the current directory there is nothing to compare,
+ * and that is `not-applicable` — not a warning. Someone running the doctor from
+ * a directory that is not a workspace has not misconfigured anything.
+ */
+import { harnessForMcpHost } from "../../domain/harnesses.js";
+import { runVisibilityDoctor } from "../visibility-doctor-service.js";
+import { coverage } from "./types.js";
+const CATEGORY = "workspace-visibility";
+/**
+ * The visibility engine speaks `McpHost` ids and the report speaks catalog ids.
+ *
+ * They differ for exactly one host — `claude` against `claude-code` — and that
+ * one difference is enough to make a report list the same machine twice under
+ * two names. Translated at the boundary, once.
+ */
+function catalogHost(host) {
+    return harnessForMcpHost(host)?.id ?? host;
+}
+export const visibilityProvider = {
+    category: CATEGORY,
+    async run(input) {
+        const result = await runVisibilityDoctor(input.ctx.fs, input.ctx.env, input.ctx.paths, {
+            workspace: input.workspaceDir,
+            global: true,
+        });
+        const reports = [...result.reports, ...result.global_reports];
+        const findings = [];
+        const coverages = [];
+        // The visibility engine always inspects its own hardcoded set of hosts; the
+        // run's selection is the aggregator's answer, and it is the one that counts.
+        // `selectDoctorHosts` already split the participants from the hosts with no
+        // trace here and applied `--only`. Without this filter the report enumerated
+        // a host as absent and, two sections below, declared it `comprobada ✔` with
+        // a healthy finding — and `--only kimi` still diagnosed claude-code, codex
+        // and warp.
+        const participants = new Set(input.hosts.map((host) => host.host));
+        for (const report of reports) {
+            const host = catalogHost(report.host);
+            if (!participants.has(host))
+                continue;
+            if (report.status === "no-project-block") {
+                coverages.push(coverage(CATEGORY, host, "not-applicable", `no hay bloque de proyecto para ${report.host} en ${input.workspaceDir}`));
+                continue;
+            }
+            coverages.push(coverage(CATEGORY, host, "checked"));
+            findings.push(...driftFindings(report));
+        }
+        // Y el complemento: un host participante que este motor NO sabe mirar
+        // declara `not-applicable`, no silencio. El motor sólo inspecciona
+        // claude/codex/warp; filtrar sin decirlo dejaba una máquina cuyo único host
+        // es gemini con CERO filas de esta categoría, y el agregador leía ese
+        // silencio como «no se pudo comprobar» y sacaba el doctor en 1 sobre un
+        // entorno sano. No mirar por diseño y no haber podido mirar son dos estados
+        // distintos, y sólo el segundo escala.
+        const covered = new Set(coverages.map((entry) => entry.host));
+        const uncovered = input.hosts
+            .filter((host) => !covered.has(host.host))
+            .map((host) => coverage(CATEGORY, host.host, "not-applicable", `la visibilidad multiroot no se declara para ${host.label}: sólo Claude Code, Codex y Warp registran rutas del workspace`));
+        return { coverage: [...dedupe(coverages), ...uncovered], findings };
+    },
+};
+function driftFindings(report) {
+    const resource = `${report.scope}:visibilidad`;
+    const host = catalogHost(report.host);
+    const base = {
+        host,
+        category: CATEGORY,
+        resource: {
+            kind: "visibility",
+            name: `${host} (${report.scope})`,
+            locator: report.target,
+        },
+        ownership: "ours",
+    };
+    const findings = [];
+    if (report.missing.length > 0) {
+        findings.push({
+            ...base,
+            id: doctorFindingId(host, CATEGORY, `${resource}:faltantes`),
+            state: "warning",
+            summary: `${host} no tiene registradas ${report.missing.length} ruta(s) declarada(s)`,
+            impact: "el host no ve esas fuentes: sus lecturas y ediciones ahí fallan",
+            evidence: report.missing.map((path) => `falta: ${path}`),
+            remediation: { kind: "manual", action: null, guidance: ["aw attach-multiroot"] },
+            proposal: { op: "multiroot.attach", args: { scope: report.scope } },
+        });
+    }
+    if (report.extra.length > 0) {
+        findings.push({
+            ...base,
+            id: doctorFindingId(host, CATEGORY, `${resource}:sobrantes`),
+            state: "warning",
+            summary: `${host} tiene registradas ${report.extra.length} ruta(s) que nadie declaró`,
+            impact: "el host ve directorios fuera del workspace declarado",
+            evidence: report.extra.map((path) => `sobra: ${path}`),
+            remediation: { kind: "manual", action: null, guidance: ["aw detach-multiroot"] },
+            proposal: { op: "multiroot.detach", args: { scope: report.scope } },
+        });
+    }
+    if (report.status === "no-settings") {
+        findings.push({
+            ...base,
+            id: doctorFindingId(host, CATEGORY, `${resource}:sin-config`),
+            state: "warning",
+            summary: `${host} no tiene el archivo de configuración que declara sus rutas`,
+            impact: "el host no ve ninguna fuente declarada del workspace",
+            evidence: [`archivo esperado: ${report.target}`],
+            remediation: { kind: "manual", action: null, guidance: ["aw attach-multiroot"] },
+            proposal: { op: "multiroot.attach", args: { scope: report.scope } },
+        });
+    }
+    if (findings.length === 0) {
+        findings.push({
+            ...base,
+            id: doctorFindingId(host, CATEGORY, resource),
+            state: "healthy",
+            summary: `${host} tiene registradas exactamente las rutas declaradas (${report.scope})`,
+            impact: "el host ve el workspace completo y nada más",
+            evidence: [
+                `archivo: ${report.target}`,
+                `rutas registradas: ${report.registered_paths.length}`,
+            ],
+            remediation: { kind: "none", action: null, guidance: [] },
+        });
+    }
+    return findings;
+}
+// A host inspected in both scopes reports its coverage twice; the report keeps
+// one row per category and host.
+function dedupe(entries) {
+    const byHost = new Map();
+    for (const entry of entries) {
+        const held = byHost.get(entry.host);
+        if (held === undefined || held.state === "not-applicable")
+            byHost.set(entry.host, entry);
+    }
+    return [...byHost.values()];
+}
+//# sourceMappingURL=provider-visibility.js.map

package/dist/application/doctor/provider-visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-visibility.js","sourceRoot":"","sources":["../../../src/application/doctor/provider-visibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACnF;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAGtE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,QAAQ,GAAG,sBAA+B,CAAC;AAEjD;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,iBAAiB,CAAC,IAA+C,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAmB;IAChD,QAAQ,EAAE,QAAQ;IAClB,KAAK,CAAC,GAAG,CAAC,KAA0B;QAClC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE;YACrF,SAAS,EAAE,KAAK,CAAC,YAAY;YAC7B,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,SAAS,GAAkC,EAAE,CAAC;QACpD,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,YAAY;QACZ,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,CACZ,QAAQ,CACN,QAAQ,EACR,IAAI,EACJ,gBAAgB,EAChB,kCAAkC,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,EAAE,CACzE,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,sEAAsE;QACtE,mEAAmE;QACnE,4EAA4E;QAC5E,sEAAsE;QACtE,wEAAwE;QACxE,4EAA4E;QAC5E,uCAAuC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,QAAQ,CACN,QAAQ,EACR,IAAI,CAAC,IAAI,EACT,gBAAgB,EAChB,+CAA+C,IAAI,CAAC,KAAK,gEAAgE,CAC1H,CACF,CAAC;QAEJ,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtE,CAAC;CACF,CAAC;AAEF,SAAS,aAAa,CAAC,MAA4B;IACjD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,KAAK,cAAc,CAAC;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,YAAqB;YAC3B,IAAI,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,GAAG;YACjC,OAAO,EAAE,MAAM,CAAC,MAAM;SACvB;QACD,SAAS,EAAE,MAAe;KAC3B,CAAC;IACF,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,IAAI;YACP,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,YAAY,CAAC;YAC5D,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG,IAAI,yBAAyB,MAAM,CAAC,OAAO,CAAC,MAAM,uBAAuB;YACrF,MAAM,EAAE,iEAAiE;YACzE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;YACxD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,qBAAqB,CAAC,EAAE;YAChF,QAAQ,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,IAAI;YACP,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,YAAY,CAAC;YAC5D,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG,IAAI,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM,4BAA4B;YACrF,MAAM,EAAE,sDAAsD;YAC9D,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;YACtD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,qBAAqB,CAAC,EAAE;YAChF,QAAQ,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,IAAI;YACP,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,aAAa,CAAC;YAC7D,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG,IAAI,6DAA6D;YAC7E,MAAM,EAAE,sDAAsD;YAC9D,QAAQ,EAAE,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC;YAChD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,qBAAqB,CAAC,EAAE;YAChF,QAAQ,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,IAAI;YACP,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC;YAC7C,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,GAAG,IAAI,wDAAwD,MAAM,CAAC,KAAK,GAAG;YACvF,MAAM,EAAE,6CAA6C;YACrD,QAAQ,EAAE;gBACR,YAAY,MAAM,CAAC,MAAM,EAAE;gBAC3B,sBAAsB,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;aACvD;YACD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,SAAS,MAAM,CAAC,OAA+C;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,gBAAgB;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC"}

package/dist/application/doctor/repair-runner.js

@@ -0,0 +1,169 @@
+import { readMcpConnections } from "../mcp-connections-service.js";
+import { runMcpMigration } from "../mcp-migration-service.js";
+import { runMcpRemove } from "../mcp-remove-service.js";
+import { runMcpSetup } from "../mcp-setup-service.js";
+import { runMultiroot } from "../multiroot-service.js";
+import { selfCleanLegacy } from "../self/clean-legacy.js";
+import { selfInstallHooks } from "../self/install-hooks.js";
+import { selfInstallSkill } from "../self/install-skill.js";
+import { reinstallSkill } from "../self/skills-manager.js";
+import { selfUninstall } from "../self/uninstall.js";
+import { runDoctorAuthFlow } from "./auth-flow.js";
+/** Un `ParsedArgs` explícito: sin comando, sin positional y con los flags que la operación pide. */
+function argsOf(values, flags = []) {
+    return {
+        rest: [],
+        plugin: {},
+        flags: new Set(flags),
+        values: new Map(Object.entries(values)),
+        valuesMulti: new Map(),
+    };
+}
+/** Un `CommandResult` se traduce por su `ok` y su `exitCode`, nunca por su prosa. */
+function fromCommand(result, what) {
+    if (result.ok)
+        return { status: "applied", detail: `${what}: aplicado` };
+    const code = result.error?.code ?? "sin código";
+    // `blocked` es el estado que `install-hooks` usa cuando una entrada inválida
+    // de la persona desarmaría la sección: no es un fallo del doctor, es una
+    // negativa deliberada de la operación, y se respeta como tal.
+    const blocked = code === "HOOKS_BLOCKED" || code.endsWith("_BLOCKED");
+    return {
+        status: blocked ? "blocked" : "failed",
+        detail: `${what}: ${code}`,
+    };
+}
+export async function runDoctorRepair(action, ctx) {
+    switch (action.op) {
+        case "self.install-skill":
+            return fromCommand(await selfInstallSkill(argsOf({ target: target(action) }), ctx), "instalar el bundle");
+        case "self.uninstall":
+            return fromCommand(await selfUninstall(argsOf({ target: target(action) }), ctx), "retirar la configuración residual");
+        case "self.install-hooks":
+            return fromCommand(await selfInstallHooks(argsOf({ target: target(action) }), ctx), "armar los hooks");
+        case "self.clean-legacy":
+            return fromCommand(await selfCleanLegacy(argsOf({ target: target(action) }), ctx), "limpiar el resto legacy");
+        case "skills.reinstall":
+            return fromCommand(await reinstallSkill(ctx, action.args.name ?? ""), "reinstalar la skill");
+        case "mcp.setup":
+            return mcpOutcome(runMcpSetup(ctx.env, mcpInput(ctx, action)), "registrar la entrada MCP");
+        case "mcp.remove":
+            return mcpOutcome(runMcpRemove(ctx.env, mcpInput(ctx, action)), "retirar la entrada MCP");
+        case "mcp.migrate":
+            return migrateOutcome(action, ctx);
+        case "auth.flow":
+            return runDoctorAuthFlow(action, ctx);
+        case "multiroot.attach":
+        case "multiroot.detach":
+            return multirootOutcome(await runMultiroot(ctx.fs, ctx.env, ctx.paths, action.op === "multiroot.attach" ? "attach" : "detach", {
+                fromSources: true,
+                useGlobal: action.args.scope === "global",
+            }));
+        default:
+            // Una operación que el catálogo declara y este adaptador no sabe correr es
+            // un fallo declarado, no un `applied` optimista: el recurso queda como
+            // estaba y la recomprobación lo va a confirmar.
+            return { status: "failed", detail: `no hay adaptador para la operación '${action.op}'` };
+    }
+}
+function target(action) {
+    return (action.args.target ?? "");
+}
+/**
+ * El scope global exige su propia autorización, y acá la hay.
+ *
+ * `globalApproval: "explicit-self-action"` es exactamente lo que este caso es:
+ * una persona leyó la vista previa de este lote y aprobó su digest. Sin ese
+ * valor `runMcpSetup` se niega a escribir una configuración global, y con razón
+ * — tocarla afecta todos los proyectos de la máquina.
+ */
+function mcpInput(ctx, action) {
+    const host = (action.args.host ?? "");
+    const instance = action.args.instance ?? "";
+    const connections = readMcpConnections(ctx.paths, ctx.env).filter((connection) => connection.name === instance);
+    const scope = action.args.scope === "global" ? "global" : "workspace";
+    return {
+        hosts: [host],
+        connections,
+        ...(scope === "global"
+            ? { scope: "global", globalApproval: "explicit-self-action" }
+            : { scope: "workspace", workspace: ctx.paths.workspaceDir() }),
+    };
+}
+/**
+ * Los servicios de MCP no lanzan: acumulan y devuelven parcial.
+ *
+ * Así que el resultado se lee de sus listas, no de una excepción. Un conflicto
+ * es una entrada ajena homónima que el servicio PRESERVÓ, y eso no es un fallo
+ * del doctor sino la protección funcionando: se reporta como fallo de la acción
+ * porque el recurso no quedó reparado, con la razón a la vista.
+ */
+function mcpOutcome(result, what) {
+    if ("error" in result)
+        return { status: "failed", detail: `${what}: ${result.error}` };
+    const conflicts = result.conflicts?.length ?? 0;
+    const errors = result.errors?.length ?? 0;
+    if (conflicts > 0) {
+        return {
+            status: "blocked",
+            detail: `${what}: hay una entrada homónima ajena y se preservó`,
+        };
+    }
+    if (errors > 0)
+        return { status: "failed", detail: `${what}: ${errors} error(es) del host` };
+    const applied = result.applied?.length ?? 0;
+    return applied > 0
+        ? { status: "applied", detail: `${what}: aplicado` }
+        : { status: "failed", detail: `${what}: el servicio no escribió nada` };
+}
+/**
+ * La migración habla otro idioma: sus pasos son `items` con su propia acción.
+ *
+ * Y su `apply` es explícito — sin él la corrida es una vista previa. El doctor
+ * ya trae la aprobación del digest, así que acá aplica; el `globalApproval` de
+ * este servicio es un booleano y no la etiqueta que usa `setup`, otro caso donde
+ * dos servicios hermanos no comparten firma y el adaptador es el único lugar que
+ * lo sabe.
+ */
+function migrateOutcome(action, ctx) {
+    const host = (action.args.host ?? "");
+    const instance = action.args.instance ?? "";
+    const connections = readMcpConnections(ctx.paths, ctx.env).filter((connection) => connection.name === instance);
+    const result = action.args.scope === "global"
+        ? runMcpMigration(ctx.env, {
+            scope: "global",
+            hosts: [host],
+            connections,
+            apply: true,
+            globalApproval: true,
+        })
+        : runMcpMigration(ctx.env, {
+            scope: "workspace",
+            workspace: ctx.paths.workspaceDir(),
+            hosts: [host],
+            connections,
+            apply: true,
+        });
+    if ("error" in result)
+        return { status: "failed", detail: `migrar: ${String(result.error)}` };
+    const blocked = result.items.filter((item) => item.action === "blocked");
+    if (blocked.length > 0) {
+        return { status: "blocked", detail: "migrar: el servicio declaró el paso bloqueado" };
+    }
+    const failed = result.items.filter((item) => item.action === "failed");
+    if (failed.length > 0)
+        return { status: "failed", detail: "migrar: el servicio reportó un fallo" };
+    const moved = result.items.filter((item) => item.action === "install" || item.action === "replace-known-legacy");
+    return moved.length > 0
+        ? { status: "applied", detail: "migrar: aplicado" }
+        : { status: "failed", detail: "migrar: no había nada que mover" };
+}
+function multirootOutcome(result) {
+    const error = result !== null && typeof result === "object" && "error" in result
+        ? String(result.error)
+        : null;
+    return error === null
+        ? { status: "applied", detail: "visibilidad multiroot: aplicada" }
+        : { status: "failed", detail: `visibilidad multiroot: ${error}` };
+}
+//# sourceMappingURL=repair-runner.js.map

package/dist/application/doctor/repair-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-runner.js","sourceRoot":"","sources":["../../../src/application/doctor/repair-runner.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGnD,oGAAoG;AACpG,SAAS,MAAM,CAAC,MAA8B,EAAE,QAAkB,EAAE;IAClE,OAAO;QACL,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;QACrB,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,WAAW,EAAE,IAAI,GAAG,EAAE;KACvB,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,MAA8B,EAAE,IAAY;IAC/D,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,YAAY,CAAC;IAChD,6EAA6E;IAC7E,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,OAAO,GAAG,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QACtC,MAAM,EAAE,GAAG,IAAI,KAAK,IAAI,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB,EACzB,GAAe;IAEf,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,oBAAoB;YACvB,OAAO,WAAW,CAChB,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAC/D,oBAAoB,CACrB,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO,WAAW,CAChB,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAC5D,mCAAmC,CACpC,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO,WAAW,CAChB,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAC/D,iBAAiB,CAClB,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO,WAAW,CAChB,MAAM,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAC9D,yBAAyB,CAC1B,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC/F,KAAK,WAAW;YACd,OAAO,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC7F,KAAK,YAAY;YACf,OAAO,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC5F,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,KAAK,WAAW;YACd,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,KAAK,kBAAkB,CAAC;QACxB,KAAK,kBAAkB;YACrB,OAAO,gBAAgB,CACrB,MAAM,YAAY,CAChB,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,KAAK,EACT,MAAM,CAAC,EAAE,KAAK,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EACtD;gBACE,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;aAC1C,CACF,CACF,CAAC;QACJ;YACE,2EAA2E;YAC3E,uEAAuE;YACvE,gDAAgD;YAChD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,uCAAuC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB;IACvC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAkB,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,GAAe,EAAE,MAAyB;IAC1D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAY,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/D,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAC7C,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;IACtE,OAAO;QACL,KAAK,EAAE,CAAC,IAAI,CAAC;QACb,WAAW;QACX,GAAG,CAAC,KAAK,KAAK,QAAQ;YACpB,CAAC,CAAC,EAAE,KAAK,EAAE,QAAiB,EAAE,cAAc,EAAE,sBAA+B,EAAE;YAC/E,CAAC,CAAC,EAAE,KAAK,EAAE,WAAoB,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,MAA8F,EAC9F,IAAY;IAEZ,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IACvF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,GAAG,IAAI,gDAAgD;SAChE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,MAAM,qBAAqB,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,GAAG,CAAC;QAChB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,YAAY,EAAE;QACpD,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,gCAAgC,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,MAAyB,EAAE,GAAe;IAChE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAY,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/D,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,CAC7C,CAAC;IACF,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC5B,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE;YACvB,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,CAAC,IAAI,CAAC;YACb,WAAW;YACX,KAAK,EAAE,IAAI;YACX,cAAc,EAAE,IAAI;SACrB,CAAC;QACJ,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE;YACvB,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE;YACnC,KAAK,EAAE,CAAC,IAAI,CAAC;YACb,WAAW;YACX,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACT,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAsB,CAC9E,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACnD,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,MAAM,KAAK,GACT,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM;QAChE,CAAC,CAAC,MAAM,CAAE,MAA6B,CAAC,KAAK,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,EAAE;QAClE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,KAAK,EAAE,EAAE,CAAC;AACtE,CAAC"}

package/dist/application/doctor/report.js

@@ -0,0 +1,155 @@
+/**
+ * The aggregate: run every provider, consolidate, redact, and let the verdict
+ * fall out of what was found.
+ *
+ * A provider that throws does not take the report down with it. Its category
+ * becomes `unavailable` WITH THE REASON on every participating host, and the
+ * verdict turns non-zero — because a doctor that answers 0 after failing to look
+ * is read as "healthy", which is the one thing it must never say by accident.
+ */
+import { DOCTOR_SCHEMA_VERSION, doctorFindingId, doctorVerdict, sortDoctorCoverage, sortDoctorFindings, summarizeDoctorFindings, } from "../../domain/doctor/model.js";
+import { redactSensitiveValue } from "../../domain/redaction.js";
+import { readPackageVersion } from "../../runtime/version.js";
+import { annotateRepairs } from "./actions.js";
+import { DOCTOR_HOST_ORDER, selectDoctorHosts } from "./hosts.js";
+import { installationProvider } from "./provider-installation.js";
+import { createMcpsProvider } from "./provider-mcps.js";
+import { pluginsHooksProvider } from "./provider-plugins-hooks.js";
+import { skillsProvider } from "./provider-skills.js";
+import { toolsAuthProvider } from "./provider-tools-auth.js";
+import { visibilityProvider } from "./provider-visibility.js";
+import { coverage } from "./types.js";
+export function defaultDoctorProviders(deps = {}) {
+    return [
+        installationProvider,
+        createMcpsProvider(deps),
+        skillsProvider,
+        toolsAuthProvider,
+        pluginsHooksProvider,
+        visibilityProvider,
+    ];
+}
+export async function runDoctor(ctx, options = {}, deps = {}) {
+    const currentHost = normalizeHost(options.host ?? null);
+    const only = [...(options.only ?? [])];
+    const selection = await selectDoctorHosts(ctx, { currentHost, only });
+    const workspaceDir = ctx.paths.workspaceDir();
+    const input = {
+        ctx,
+        hosts: selection.hosts,
+        hostStates: selection.states,
+        currentHost,
+        workspaceDir,
+        skipNative: options.skipNative === true,
+        ...(options.verify === undefined ? {} : { verifyAuthorization: options.verify }),
+    };
+    // Un `--only` mal escrito se denuncia ANTES de mirar nada: es lo único que
+    // explica por qué la corrida no cubrió lo que la persona creía haber pedido.
+    const findings = selection.unknownOnly.map(unknownOnlyFinding);
+    const coverages = [];
+    for (const provider of deps.providers ?? defaultDoctorProviders(deps.mcps)) {
+        try {
+            const output = await provider.run(input);
+            findings.push(...output.findings);
+            // Silencio NO es cobertura: una categoría que desaparece del informe deja
+            // a `doctorVerdict` sin nada que ver y el doctor sale 0 después de no
+            // haber mirado (AC-02, AC-14). Pero el estado del relleno es
+            // `not-applicable`, NO `unavailable`: un proveedor calla cuando la corrida
+            // no le dio ningún host que le corresponda —una máquina sin ningún host de
+            // agente, o un `--only` que no dejó participantes—, y eso es «no había
+            // nada que comprobar», no «no se pudo comprobar». Marcarlo caído ponía en
+            // rojo un entorno sano; lo que sí escala es el proveedor que LANZA, abajo,
+            // y un `--only` que nombra lo que el catálogo no declara, que ya viaja
+            // como hallazgo bloqueante.
+            coverages.push(...(output.coverage.length > 0
+                ? output.coverage
+                : [coverage(provider.category, "workspace", "not-applicable", silenceReason(selection))]));
+        }
+        catch (error) {
+            const reason = `el proveedor falló: ${messageOf(error)}`;
+            const scopes = selection.hosts.length > 0 ? selection.hosts.map((h) => h.host) : ["workspace"];
+            for (const host of scopes) {
+                coverages.push(coverage(provider.category, host, "unavailable", reason));
+            }
+        }
+    }
+    const hostOrder = [...DOCTOR_HOST_ORDER, "workspace"];
+    // El gate de propiedad, en un solo lugar y sobre el conjunto consolidado: acá
+    // es donde una sugerencia de proveedor se vuelve acción, o no. También es
+    // donde `proposal` se consume: el informe emitido no la lleva.
+    const orderedFindings = sortDoctorFindings(annotateRepairs(findings), hostOrder);
+    const orderedCoverage = sortDoctorCoverage(coverages, hostOrder);
+    const report = {
+        schema_version: DOCTOR_SCHEMA_VERSION,
+        cli_version: readPackageVersion(),
+        scope: { workspace_dir: workspaceDir, current_host: currentHost, only },
+        hosts: selection.hosts.map(({ mcp_host: _mcpHost, ...view }) => view),
+        hosts_absent: selection.absent,
+        coverage: orderedCoverage,
+        findings: orderedFindings,
+        summary: summarizeDoctorFindings(orderedFindings),
+        verdict: doctorVerdict(orderedFindings, orderedCoverage),
+    };
+    // Last line of defence, over the WHOLE object and once: the same redaction the
+    // CLI already applies to every command's output. A provider that reads a file
+    // holding a credential cannot leak it past here.
+    return redactSensitiveValue(report);
+}
+/**
+ * Por qué una categoría no declaró ni una fila de cobertura.
+ *
+ * Las tres razones son distintas y la persona necesita la suya: un filtro que
+ * no existe, una selección sin hosts, o un proveedor que miró y no dijo nada.
+ */
+function silenceReason(selection) {
+    if (selection.unknownOnly.length > 0) {
+        return `no había nada que comprobar: --only nombra hosts que el catálogo no declara (${selection.unknownOnly.join(", ")})`;
+    }
+    if (selection.hosts.length === 0) {
+        return "no había nada que comprobar: ningún host participa en esta corrida";
+    }
+    return "el proveedor no declaró cobertura para ningún host de la corrida";
+}
+/**
+ * El hallazgo de un `--only` que el catálogo no conoce.
+ *
+ * Bloqueante a propósito: la corrida NO miró el host que se pidió, y un cero
+ * ahí se lee como «tu entorno está sano». La sugerencia sale del catálogo, así
+ * que `--only claude` apunta a `claude-code` sin que este módulo cablee ningún
+ * alias propio.
+ */
+function unknownOnlyFinding(name) {
+    const near = DOCTOR_HOST_ORDER.filter((id) => id.includes(name) || name.includes(id));
+    const evidence = [`el catálogo declara: ${DOCTOR_HOST_ORDER.join(", ")}`];
+    if (near.length > 0)
+        evidence.push(`el nombre más parecido del catálogo: ${near.join(", ")}`);
+    return {
+        id: doctorFindingId("workspace", "installation-hosts", `--only=${name}`),
+        host: "workspace",
+        category: "installation-hosts",
+        resource: { kind: "filtro", name: `--only=${name}`, locator: null },
+        state: "blocking",
+        summary: `--only nombra «${name}», que el catálogo de hosts no declara`,
+        impact: "el diagnóstico no cubrió el host que pediste y no puede hablar por él",
+        evidence,
+        ownership: "n/a",
+        remediation: {
+            kind: "manual",
+            action: null,
+            guidance: [
+                near.length > 0
+                    ? `repetí la corrida con --only ${near[0]}`
+                    : "repetí la corrida con un id del catálogo, o sin --only para mirar todos los hosts",
+            ],
+        },
+    };
+}
+function normalizeHost(host) {
+    if (host === null)
+        return null;
+    return DOCTOR_HOST_ORDER.includes(host) ? host : null;
+}
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=report.js.map

package/dist/application/doctor/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/application/doctor/report.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,OAAO,EACL,qBAAqB,EAIrB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAA4B,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAyB,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAiD,QAAQ,EAAE,MAAM,YAAY,CAAC;AAwBrF,MAAM,UAAU,sBAAsB,CAAC,OAAyB,EAAE;IAChE,OAAO;QACL,oBAAoB;QACpB,kBAAkB,CAAC,IAAI,CAAC;QACxB,cAAc;QACd,iBAAiB;QACjB,oBAAoB;QACpB,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,UAA4B,EAAE,EAC9B,OAAsB,EAAE;IAExB,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAwB;QACjC,GAAG;QACH,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,UAAU,EAAE,SAAS,CAAC,MAAM;QAC5B,WAAW;QACX,YAAY;QACZ,UAAU,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;QACvC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACjF,CAAC;IAEF,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,QAAQ,GAAoB,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClC,0EAA0E;YAC1E,sEAAsE;YACtE,6DAA6D;YAC7D,2EAA2E;YAC3E,2EAA2E;YAC3E,uEAAuE;YACvE,0EAA0E;YAC1E,2EAA2E;YAC3E,uEAAuE;YACvE,4BAA4B;YAC5B,SAAS,CAAC,IAAI,CACZ,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC5B,CAAC,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,uBAAuB,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,MAAM,GACV,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAClF,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,iBAAiB,EAAE,WAAW,CAAC,CAAC;IACtD,8EAA8E;IAC9E,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,eAAe,GAAG,kBAAkB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAiB;QAC3B,cAAc,EAAE,qBAAqB;QACrC,WAAW,EAAE,kBAAkB,EAAE;QACjC,KAAK,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE;QACvE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;QACrE,YAAY,EAAE,SAAS,CAAC,MAAM;QAC9B,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,uBAAuB,CAAC,eAAe,CAAC;QACjD,OAAO,EAAE,aAAa,CAAC,eAAe,EAAE,eAAe,CAAC;KACzD,CAAC;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,iDAAiD;IACjD,OAAO,oBAAoB,CAAC,MAAM,CAAiB,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,SAA8B;IACnD,IAAI,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,gFAAgF,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC7H,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,oEAAoE,CAAC;IAC9E,CAAC;IACD,OAAO,kEAAkE,CAAC;AAC5E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,CAAC,wBAAwB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,wCAAwC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,OAAO;QACL,EAAE,EAAE,eAAe,CAAC,WAAW,EAAE,oBAAoB,EAAE,UAAU,IAAI,EAAE,CAAC;QACxE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACnE,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,kBAAkB,IAAI,wCAAwC;QACvE,MAAM,EAAE,uEAAuE;QAC/E,QAAQ;QACR,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE;gBACR,IAAI,CAAC,MAAM,GAAG,CAAC;oBACb,CAAC,CAAC,gCAAgC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAC3C,CAAC,CAAC,mFAAmF;aACxF;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAmB;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/application/doctor/types.js

@@ -0,0 +1,5 @@
+/** `checked` carries no reason; everything else must say why. */
+export function coverage(category, host, state, reason = null) {
+    return { category, host, state, reason };
+}
+//# sourceMappingURL=types.js.map

package/dist/application/doctor/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/application/doctor/types.ts"],"names":[],"mappings":"AAgEA,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CACtB,QAAwB,EACxB,IAAY,EACZ,KAA8B,EAC9B,SAAwB,IAAI;IAE5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC"}

package/dist/application/flow/advance.js

@@ -30,24 +30,31 @@ import { authorizeTransition, effectApprovalDigest, } from "../../domain/flow/au
 import { PAUSE_LABEL, STOP_LABEL, buildFlowDirective, skippedStepOf, stepOf, } from "../../domain/flow/directive.js";
 import { ROUTE_ACCEPT_LABEL, ROUTE_ADJUST_LABEL, dispositionOf } from "../../domain/flow/route.js";
 import { bindAction, docsBoundaryBreach, skipReason, } from "../../domain/flow/rules.js";
-import { MAX_BOUNDARY_ATTEMPTS, applyTransition, attemptAccountingAt, attemptsAt, checkAgainstJourney, currentBatchIteration, degradeTransition, positionDigest, skipTransition, withBoundary, withPendingAction, withPlanExecBatchStageForTransition, } from "../../domain/flow/run-state.js";
+import { MAX_BOUNDARY_ATTEMPTS, applyAttemptReconciliation, applyTransition, attemptAccountingAt, attemptsAt, checkAgainstJourney, currentBatchIteration, degradeTransition, positionDigest, reconcileAttemptsAt, skipTransition, withBoundary, withPendingAction, withPlanExecBatchStageForTransition, } from "../../domain/flow/run-state.js";
 import { buildSemanticRequest, semanticDigest, } from "../semantic-operation/protocol.js";
 import { sessionSlug } from "../session-resolver.js";
 export function advanceFlowRun(input) {
     const incoherent = checkAgainstJourney(input.state, input.journey);
     if (incoherent !== null)
         return { ok: false, failure: incoherent };
+    // The run repairs its OWN bookkeeping first, and only when the mismatch has
+    // exactly one reading. No boundary is opened, no attempt is charged, no
+    // degradation is asked for and nothing is added to the directive: what the
+    // caller sees is the boundary they were going to see anyway, answerable. The
+    // repair survives as a line in the run's sealed trace, which is what makes
+    // "it is not notified" different from "it cannot be audited".
+    const reconciled = reconcileRun(input.state, input.journey);
     // A handoff is terminal for this run even though the linear journey still has
     // rows after the gate. Letting `advance` walk those rows would build the
     // escalation package and then continue toward commits, which is exactly the
     // contradictory route the typed choice closes.
-    if (input.state.handoff !== null && input.state.handoff !== undefined) {
-        const stopped = input.journey[input.state.applied.length] ?? null;
-        let state = withBoundary(input.state, stopped?.id ?? null);
+    if (reconciled.handoff !== null && reconciled.handoff !== undefined) {
+        const stopped = input.journey[reconciled.applied.length] ?? null;
+        let state = withBoundary(reconciled, stopped?.id ?? null);
         state = withPendingAction(state, null);
         return directiveFor(state, resolveBoundary(state, input.journey), input.applied ?? []);
     }
-    const walked = walk(input.state, input.journey);
+    const walked = walk(reconciled, input.journey);
     let state = walked.state;
     const appliedNow = [...(input.applied ?? []), ...walked.applied];
     // The boundary and the pending action are written into the state BEFORE its seal
@@ -68,6 +75,19 @@ export function advanceFlowRun(input) {
         : { transition: stopped.id, digest: actionDigest(emitted) });
     return directiveFor(state, resolveBoundary(state, input.journey), appliedNow);
 }
+/**
+ * Reconcile the boundary the run is standing at, or hand the state back untouched.
+ *
+ * It asks the domain and applies nothing of its own: which mismatches have one
+ * reading is {@link reconcileAttemptsAt}'s call, and repairing-plus-recording is
+ * a single function so a repair can never happen unrecorded.
+ */
+function reconcileRun(state, journey) {
+    const stopped = journey[state.applied.length] ?? null;
+    if (stopped === null)
+        return state;
+    return applyAttemptReconciliation(state, reconcileAttemptsAt(state, stopped.id));
+}
 /**
  * Every consecutive transition the CLI owns AND can apply itself, in one go.
  *
@@ -253,13 +273,10 @@ function blockedCause(state, stopped, emitted) {
         // matters: one continues on the next advance, the other cannot. Reporting the
         // stricter message for both would tell somebody their run is stuck when it is
         // about to move on.
-        const degradable = exhaustionSkip(state, stopped) !== null;
         return {
             code: "FLOW_BOUNDARY_EXHAUSTED",
             message: `'${stopped.id}' agotó sus ${MAX_BOUNDARY_ATTEMPTS} intentos: contestarlo otra vez sería el bucle que la regla evita${conflictClause(accounting)}`,
-            action: degradable
-                ? `${DEGRADE_ACTION}; el próximo 'aw flow advance' lo pasa por alto dejando dicho por qué y sigue con el resto`
-                : `${DEGRADE_ACTION}, y resolvé este paso fuera de la corrida antes de seguir: saltearlo daría por aprobado un efecto que nadie aprobó, o por hecho algo que nada corrió. Si lo que hay que rehacer es el intento, '${recoverInvocation(state)}' le devuelve los intentos a esta frontera conservando todo lo aplicado`,
+            action: exhaustedAction(state, stopped),
         };
     }
     // Not exhausted, and still not answerable: the rows this run persisted cannot
@@ -281,6 +298,35 @@ function blockedCause(state, stopped, emitted) {
     }
     return null;
 }
+/**
+ * What to do about an exhausted boundary — decided by WHAT is broken.
+ *
+ * Degrading the gap is the chassis' destination for a gap that cannot close, and
+ * it was read first no matter the cause: with the accounting in conflict it
+ * repairs nothing, and being the first thing offered is what sent a mechanical
+ * mismatch to a refinement nobody needed. A conflict that reaches here is one the
+ * automatic reconciliation refused because its reading is NOT unique, so the exit
+ * is the verb that recovers — and degradation is not offered at all, because the
+ * gap is not the problem.
+ */
+function exhaustedAction(state, stopped) {
+    // Reaching here means the automatic reconciliation did NOT repair the mismatch,
+    // so what is left is a count nobody can reconstruct. Not every unrepaired
+    // mismatch belongs to the accounting: a boundary that already moved the world
+    // is refused BY the recovery too, and there degrading the gap is the honest
+    // exit. That is why the scope decides, and not the mere presence of a conflict
+    // — a forgiven counter excess keeps reporting its difference forever, and
+    // reading that as "broken accounting" would deny degradation to a boundary
+    // whose cap was reached legitimately.
+    const ambiguous = reconcileAttemptsAt(state, stopped.id).ambiguous;
+    if (ambiguous?.scope === "accounting") {
+        return `lo roto es la contabilidad de la corrida, no el gap: ${ambiguous.reason}. '${recoverInvocation(state)}' le devuelve los intentos a esta frontera conservando todo lo aplicado; degradar el gap no arregla una cuenta`;
+    }
+    if (exhaustionSkip(state, stopped) !== null) {
+        return `${DEGRADE_ACTION}; el próximo 'aw flow advance' lo pasa por alto dejando dicho por qué y sigue con el resto`;
+    }
+    return `${DEGRADE_ACTION}, y resolvé este paso fuera de la corrida antes de seguir: saltearlo daría por aprobado un efecto que nadie aprobó, o por hecho algo que nada corrió. Si lo que hay que rehacer es el intento, '${recoverInvocation(state)}' le devuelve los intentos a esta frontera conservando todo lo aplicado`;
+}
 /**
  * The disagreeing representations, said inline — or nothing.
  *
@@ -372,6 +418,13 @@ function exhaustionSkip(state, decision) {
         return null;
     if (!owned(decision))
         return null;
+    // Degradation is what a GAP that cannot close deserves. When the exhaustion
+    // comes from a bookkeeping mismatch the automatic reconciliation could not
+    // read, passing the step over would skip real work because two counters
+    // disagree — the same mistake as sending it to a refinement, one notch worse.
+    // So it is not offered at all: the boundary blocks and names the recovery.
+    if (reconcileAttemptsAt(state, decision.id).ambiguous?.scope === "accounting")
+        return null;
     const failure = executionFailure(state, decision.id);
     if (actionOf(decision) !== null && failure === null)
         return null;