@vibe-agent-toolkit/cli 0.2.0-rc.2 → 0.2.0-rc.4

package/dist/commands/inventory.js

@@ -1,10 +1,12 @@
 import { existsSync } from 'node:fs';
 import { serializeInventory, serializeInventoryShallow, } from '@vibe-agent-toolkit/agent-skills';
-import { crawlSkillLinkRegistry, extractClaudeInstallInventory, extractClaudeMarketplaceInventory, extractClaudePluginInventory, extractClaudeSkillInventory, getClaudeUserPaths, } from '@vibe-agent-toolkit/claude-marketplace';
+import { buildInventoryPopulation, crawlSkillLinkRegistry, extractClaudeInstallInventory, extractClaudeMarketplaceInventory, extractClaudePluginInventory, extractClaudeSkillInventory, getClaudeUserPaths, projectionCrawlSelected, } from '@vibe-agent-toolkit/claude-marketplace';
 import { findProjectRoot, safePath } from '@vibe-agent-toolkit/utils';
 import { Command } from 'commander';
 import { handleCommandError } from '../utils/command-error.js';
 import { createLogger } from '../utils/logger.js';
+import { populationWiring } from '../utils/population-wiring.js';
+import { withPopulationCache } from '../utils/projection-store.js';
 import { gitTrackerForProjectRoot } from './audit/distributed-tree.js';
 /**
  * Create and configure the `vat inventory` command.
@@ -27,7 +29,6 @@ Description:
   detectors — pure structural enumeration.
 
 Output:
-  - schema: vat.inventory/v1alpha
   - kind: marketplace | plugin | skill | install
   - vendor: claude-code
   - declared / discovered / references / unexpected (per kind)
@@ -49,7 +50,7 @@ export async function inventoryCommand(pathArg, options) {
     const logger = createLogger(options.debug === true ? { debug: true } : {});
     const startTime = Date.now();
     try {
-        const inv = await routeInventory(pathArg, options);
+        const inv = await routeInventory(pathArg, options, logger);
         const format = options.format ?? 'yaml';
         const out = options.shallow === true
             ? serializeInventoryShallow(inv, format)
@@ -61,9 +62,28 @@ export async function inventoryCommand(pathArg, options) {
         handleCommandError(error, logger, startTime, 'Inventory');
     }
 }
-export async function routeInventory(pathArg, options) {
+/**
+ * Dispatch to the extractor the subject's shape calls for.
+ *
+ * @param pathArg - The path argument, or undefined under `--user` / `--system`
+ * @param options - The command's flags
+ * @param logger - Where diagnostics go. Defaults to a REPORTING logger, never a
+ *   silent one: the default has to be the loud behaviour, or a caller acquires
+ *   silence by leaving an argument off — which is the exact defect the blob
+ *   stage's refusal counts were lost to in the first place
+ * @returns The extracted inventory
+ */
+export async function routeInventory(pathArg, options, logger = createLogger()) {
     if (options.user === true) {
-        return extractClaudeInstallInventory(getClaudeUserPaths());
+        // The tracker source is REQUIRED here now, and this is the lane it matters
+        // most on: `--user` walks every cached plugin under ~/.claude/plugins/cache,
+        // and until 2026-08-15 every one of those skills answered its gitignore
+        // questions with a `git check-ignore` spawn per link target because the
+        // obligation stopped at `extract-plugin.ts`.
+        return extractClaudeInstallInventory({
+            pathsOrRoot: getClaudeUserPaths(),
+            gitTrackerSource: gitTrackerForProjectRoot,
+        });
     }
     if (options.system === true) {
         throw new Error('--system inventory is not implemented in this version');
@@ -80,8 +100,10 @@ export async function routeInventory(pathArg, options) {
         //
         // A git-tracker source IS worth handing over even for one skill: the saving is per
         // LINK TARGET, not per skill. One `git ls-files` replaces one `git check-ignore`
-        // spawn for every distinct target this skill's link graph reaches.
-        return extractClaudeSkillInventory(absolute, undefined, gitTrackerForProjectRoot);
+        // spawn for every distinct target this skill's link graph reaches. It is also not
+        // optional to hand over: the extractor requires a source, so a lane that wanted
+        // none would have to say `NO_GIT_TRACKER` out loud.
+        return extractClaudeSkillInventory(absolute, { gitTrackerSource: gitTrackerForProjectRoot });
     }
     const claudePluginDir = safePath.join(absolute, '.claude-plugin');
     // eslint-disable-next-line security/detect-non-literal-fs-filename -- absolute is caller-resolved, used for presence check only
@@ -92,17 +114,100 @@ export async function routeInventory(pathArg, options) {
     // When both are present, the plugin extractor takes precedence (plugin is installed,
     // marketplace.json is a cached metadata artifact alongside it).
     if (hasMarketplace && !hasPlugin) {
-        // No shared registry here: `extractClaudeMarketplaceInventory` (like
-        // `extractClaudeInstallInventory` above) takes no `sharedRegistry` parameter,
-        // so every plugin it fans out to still re-crawls. Threading one through those
-        // two extractors is a claude-marketplace change, not a CLI one.
-        return extractClaudeMarketplaceInventory(absolute);
+        // A tracker source but deliberately NO shared registry: that extractor accepts
+        // only the former, because a marketplace fans out to plugins that each sit in
+        // their own directory, so one registry matches none of their skills' project
+        // roots and was measured 1.5x SLOWER than the N+1 crawl. The tracker source is
+        // the opposite case — asked per skill about its own root, `undefined` where it
+        // cannot serve — so it costs nothing where it does not apply.
+        //
+        // ⚠️ NO shared POPULATION either, and that is the same decision rather than an
+        // oversight: a population is rooted, and `membersOf` refuses any root that is not
+        // the one the extractor derives per skill. Rooted at the marketplace it would
+        // match no skill and answer nothing; rooted per plugin it is not shared. So this
+        // subject shape keeps the walk, and **the flip is plugin-directory-only** — as are
+        // the `--user` and single-`SKILL.md` lanes above, for the same rootedness reason.
+        // Measured 2026-08-15 on three real marketplace roots (35/51/29 skills): both arms
+        // filed only the walker's `crawl` stratum, no `base`/`closure`, so their identical
+        // output is the two arms agreeing about ONE lane, not evidence about the flip.
+        return extractClaudeMarketplaceInventory(absolute, {
+            gitTrackerSource: gitTrackerForProjectRoot,
+        });
     }
     // Lazy, not eager: the extractor calls this only when it is about to walk its first
     // skill, so a plugin of commands/ and agents/ alone crawls nothing. The tracker source
     // is unconditional — it is asked per skill, about that skill's own root, and answers
     // `undefined` for any root it cannot serve.
-    return extractClaudePluginInventory(absolute, linkRegistryProviderFor(absolute), gitTrackerForProjectRoot);
+    const sharedRegistry = linkRegistryProviderFor(absolute);
+    // Root discovery at the CLI boundary, once, and then handed down — both the
+    // population provider and the store key are rooted, and deriving the root
+    // twice is how two rules drift into disagreeing about which corpus this is.
+    const projectRoot = findProjectRoot(absolute);
+    // The store scopes the whole extraction, not the provider call: the extractor
+    // MEMOIZES `sharedPopulation` and reaches it when it is about to walk its
+    // first skill, which is after this frame would otherwise have closed it.
+    return withPopulationCache({ root: projectRoot ?? absolute }, async (cache) => {
+        const sharedPopulation = populationProviderFor(projectRoot, cache, logger);
+        return extractClaudePluginInventory(absolute, {
+            ...(sharedRegistry !== undefined && { sharedRegistry }),
+            ...(sharedPopulation !== undefined && { sharedPopulation }),
+            gitTrackerSource: gitTrackerForProjectRoot,
+        });
+    });
+}
+/**
+ * The projection-backed membership lane — **now the default for this command** —
+ * or `undefined` to fall back to the incumbent link walk.
+ *
+ * Gated on two things, in this order:
+ *
+ * 1. **Not `VAT_INVENTORY_CRAWL=walker`.** The projection answers this command's
+ *    membership question unless a caller asks for the walk back. It shipped the
+ *    other way round, gated off, while it was a second implementation being
+ *    measured against the first; it is now the implementation, with the walk kept
+ *    reachable as an escape hatch and as the lab's B arm. ⚠️ It is ~5.3× slower on
+ *    a real adopter and that was a deliberate, accepted trade — see
+ *    {@link projectionCrawlSelected} for the measurement and for why neither half
+ *    of the cost can be trimmed without changing the answer.
+ * 2. **A discoverable project root**, exactly as {@link linkRegistryProviderFor}
+ *    requires and for the identical reason: membership is resolved relative to a
+ *    root, and where `findProjectRoot` finds none the extractor falls back to each
+ *    skill's OWN directory — so one population rooted at the plugin would answer a
+ *    different question for every skill. No root, no provider.
+ *
+ * Root discovery belongs at this CLI boundary; this function takes the root the
+ * caller already discovered rather than discovering a second one.
+ *
+ * The tracker is resolved here too, and its absence is not cosmetic: with no
+ * tracker `resource_realizations.gitignored` is `false` on every row, and the
+ * declaration correspondingly drops its gitignore refusal rather than claiming a
+ * branch that cannot run.
+ *
+ * @param projectRoot - The discovered project root, or `null` when there is none
+ * @param cache - The run's projection store, or `undefined` to re-derive. A
+ *   SEPARATE selector from the one above: which crawler answers membership and
+ *   whether the answer is cached are independent choices, and conflating them
+ *   would make the cache unmeasurable against the lane it is supposed to speed up
+ * @param logger - Where the blob stage's refusals are reported. stderr, never
+ *   stdout: this command's stdout is the YAML document a caller parses, and a
+ *   diagnostic in the middle of it would break every consumer
+ * @returns A population source, or `undefined` to use the walk
+ */
+function populationProviderFor(projectRoot, cache, logger) {
+    if (!projectionCrawlSelected())
+        return undefined;
+    if (projectRoot === null)
+        return undefined;
+    return async (skillMdPaths) => {
+        const gitTracker = await gitTrackerForProjectRoot(projectRoot);
+        return buildInventoryPopulation({
+            root: projectRoot,
+            skillMdPaths,
+            // The observer this lane went without — see `populationWiring` for why
+            // the reporting half is written once rather than per lane.
+            ...populationWiring(logger, gitTracker, cache, projectRoot),
+        });
+    };
 }
 /**
  * A way to obtain the ONE markdown registry every skill under `subjectDir` link-walks

package/dist/commands/inventory.js.map

@@ -1 +1 @@
-{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/commands/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACN,kBAAkB,EAClB,yBAAyB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACN,sBAAsB,EACtB,6BAA6B,EAC7B,iCAAiC,EACjC,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAUvE;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO;SACL,WAAW,CAAC,+EAA+E,CAAC;SAC5F,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC/D,MAAM,CAAC,QAAQ,EAAE,6DAA6D,CAAC;SAC/E,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC;SAC/D,MAAM,CAAC,sBAAsB,EAAE,eAAe,EAAE,MAAM,CAAC;SACvD,MAAM,CAAC,WAAW,EAAE,sCAAsC,CAAC;SAC3D,MAAM,CAAC,SAAS,EAAE,2BAA2B,CAAC;SAC9C,MAAM,CAAC,gBAAgB,CAAC;SACxB,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;CAmBvB,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,OAA2B,EAC3B,OAAgC;IAEhC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI;YACnC,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC;YACxC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAA2B,EAC3B,OAAgC;IAEhC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,6BAA6B,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,mFAAmF;QACnF,iFAAiF;QACjF,mFAAmF;QACnF,uBAAuB;QACvB,EAAE;QACF,mFAAmF;QACnF,iFAAiF;QACjF,mEAAmE;QACnE,OAAO,2BAA2B,CAAC,QAAQ,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAClE,gIAAgI;IAChI,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtF,gIAAgI;IAChI,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5E,8EAA8E;IAC9E,qFAAqF;IACrF,gEAAgE;IAChE,IAAI,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,qEAAqE;QACrE,8EAA8E;QAC9E,8EAA8E;QAC9E,gEAAgE;QAChE,OAAO,iCAAiC,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,oFAAoF;IACpF,uFAAuF;IACvF,qFAAqF;IACrF,4CAA4C;IAC5C,OAAO,4BAA4B,CAClC,QAAQ,EACR,uBAAuB,CAAC,QAAQ,CAAC,EACjC,wBAAwB,CACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,uBAAuB,CAC/B,UAAkB;IAElB,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,GAAG,EAAE,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../../src/commands/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACN,kBAAkB,EAClB,yBAAyB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACN,wBAAwB,EACxB,sBAAsB,EACtB,6BAA6B,EAC7B,iCAAiC,EACjC,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,GAEvB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAe,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAUvE;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO;SACL,WAAW,CAAC,+EAA+E,CAAC;SAC5F,QAAQ,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC/D,MAAM,CAAC,QAAQ,EAAE,6DAA6D,CAAC;SAC/E,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC;SAC/D,MAAM,CAAC,sBAAsB,EAAE,eAAe,EAAE,MAAM,CAAC;SACvD,MAAM,CAAC,WAAW,EAAE,sCAAsC,CAAC;SAC3D,MAAM,CAAC,SAAS,EAAE,2BAA2B,CAAC;SAC9C,MAAM,CAAC,gBAAgB,CAAC;SACxB,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;CAkBvB,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,OAA2B,EAC3B,OAAgC;IAEhC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI;YACnC,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC;YACxC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAA2B,EAC3B,OAAgC,EAChC,SAAiB,YAAY,EAAE;IAE/B,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,6EAA6E;QAC7E,wEAAwE;QACxE,wEAAwE;QACxE,6CAA6C;QAC7C,OAAO,6BAA6B,CAAC;YACpC,WAAW,EAAE,kBAAkB,EAAE;YACjC,gBAAgB,EAAE,wBAAwB;SAC1C,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,mFAAmF;QACnF,iFAAiF;QACjF,mFAAmF;QACnF,uBAAuB;QACvB,EAAE;QACF,mFAAmF;QACnF,iFAAiF;QACjF,kFAAkF;QAClF,gFAAgF;QAChF,oDAAoD;QACpD,OAAO,2BAA2B,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAClE,gIAAgI;IAChI,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtF,gIAAgI;IAChI,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5E,8EAA8E;IAC9E,qFAAqF;IACrF,gEAAgE;IAChE,IAAI,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,+EAA+E;QAC/E,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,+EAA+E;QAC/E,8DAA8D;QAC9D,EAAE;QACF,+EAA+E;QAC/E,kFAAkF;QAClF,8EAA8E;QAC9E,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,mFAAmF;QACnF,mFAAmF;QACnF,+EAA+E;QAC/E,OAAO,iCAAiC,CAAC,QAAQ,EAAE;YAClD,gBAAgB,EAAE,wBAAwB;SAC1C,CAAC,CAAC;IACJ,CAAC;IACD,oFAAoF;IACpF,uFAAuF;IACvF,qFAAqF;IACrF,4CAA4C;IAC5C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACzD,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,8EAA8E;IAC9E,0EAA0E;IAC1E,yEAAyE;IACzE,OAAO,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,IAAI,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,OAAO,4BAA4B,CAAC,QAAQ,EAAE;YAC7C,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,CAAC;YACvD,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC3D,gBAAgB,EAAE,wBAAwB;SAC1C,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,SAAS,qBAAqB,CAC7B,WAA0B,EAC1B,KAAkC,EAClC,MAAc;IAEd,IAAI,CAAC,uBAAuB,EAAE;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,EAAE;QAC7B,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC/D,OAAO,wBAAwB,CAAC;YAC/B,IAAI,EAAE,WAAW;YACjB,YAAY;YACZ,uEAAuE;YACvE,2DAA2D;YAC3D,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC;SAC3D,CAAC,CAAC;IACJ,CAAC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,uBAAuB,CAC/B,UAAkB;IAElB,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,GAAG,EAAE,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC"}

package/dist/commands/mcp/collections.d.ts

@@ -9,7 +9,7 @@
  * Phase 1: Dynamic loading from npm packages or file paths
  * Phase 2+: Global discovery registry
  */
-import type { Agent, OneShotAgentOutput } from '@vibe-agent-toolkit/agent-schema';
+import type { Agent, OneShotAgentOutput } from '@vibe-agent-toolkit/schema';
 export interface AgentRegistration {
     name: string;
     agent: Agent<unknown, OneShotAgentOutput<unknown, string>>;

package/dist/commands/mcp/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../../src/commands/mcp/collections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAElF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC9C,iBAAiB,CAAC,EAAE,eAAe,CAAC;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CASvF;AA+HD;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAOhF"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../../src/commands/mcp/collections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC9C,iBAAiB,CAAC,EAAE,eAAe,CAAC;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CASvF;AA+HD;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAOhF"}

package/dist/commands/phase-utils.d.ts

@@ -1,12 +1,54 @@
 /**
  * Shared utilities for top-level phase orchestration commands (vat build, vat verify, vat validate).
  */
-import { type SeverityCounts } from '@vibe-agent-toolkit/agent-schema';
+import { type SeverityCounts } from '@vibe-agent-toolkit/schema';
 import { type Command } from 'commander';
 import { createLogger } from '../utils/logger.js';
+/**
+ * What one phase produced: the document it publishes, and the exit code it
+ * claims for itself.
+ *
+ * This pair is the whole of what an orchestrator needs from a phase: an exit
+ * code, and the document the phase publishes. Naming it as a value is what lets
+ * a phase run in the orchestrator's own process — stderr streams directly either
+ * way, so nothing else has to cross.
+ *
+ * `document` is the object the phase PRINTS, not the internal summary it is
+ * built from. The distinction is load-bearing: `vat skills build` renders its
+ * summary in two pieces and publishes `skillsWithErrors` as a COUNT while the
+ * summary object holds an ARRAY under that name.
+ *
+ * ⚠️ This field is `unknown`, so nothing typechecks it. Handing back the summary
+ * object instead of the printed document changes the emitted contract silently.
+ */
+export interface PhaseOutcome {
+    document: unknown;
+    exitCode: number;
+    /**
+     * The phase failed UNEXPECTEDLY, so `document` is the shared error envelope
+     * (`{status, error, duration}`) rather than the command's own report.
+     *
+     * The orchestrated lane does not need this — it folds any document under
+     * `phases[].report` the same way. The command-line lane does: each command
+     * renders its own report with its own renderer (streamed YAML, `--format
+     * json`, a hand-built header), and none of those renderers understand an
+     * envelope. Handing one to them silently changes both the channel and the
+     * shape of the failure document every `vat … | jq` consumer depends on.
+     */
+    failed?: boolean;
+}
+/**
+ * One orchestrated phase: a name, and the work to run for it.
+ *
+ * `run` is a bound closure rather than an argv array because the phase executes
+ * in this process. An argv array would mean re-entering Commander to
+ * parse arguments this process has already parsed — a second, weaker copy of the
+ * orchestrator's own options, and the exact seam through which `vat validate`'s
+ * `--verbose` could be forwarded to one phase and dropped by another.
+ */
 export interface Phase {
     name: string;
-    args: string[];
+    run: () => Promise<PhaseOutcome>;
 }
 /**
  * Declare `--only` on a command that has RETIRED it, solely so the command can
@@ -44,16 +86,18 @@ export declare function rejectRetiredOnly(only: string | undefined, command: str
  * Outcome of one orchestrated phase.
  *
  * `system-error` is a value of its own because **a phase that could not RUN is
- * not a phase that found problems.** Collapsing it into `error` (which is what
- * `result.status === 0 ? 'passed' : 'failed'` did) made the documented exit
- * code 2 unreachable from every orchestrator, so a CI script could not tell an
- * invalid config or a killed child from a broken link.
+ * not a phase that found problems.**
+ *
+ * ⚠️ Any two-valued mapping — `status === 0 ? 'passed' : 'failed'` and its
+ * relatives — collapses it into `error` and makes the documented exit code 2
+ * unreachable from every orchestrator, leaving a CI script unable to tell an
+ * invalid config from a broken link.
  *
- * `warning` reaches a subprocess phase through the child's own reported
- * `status`, NOT through its exit code — `vat skills validate` exits 0 while
- * reporting `status: warning`, so an exit-code-only mapping answered `success`
- * on the very tree where the child said otherwise. In-process phases (e.g.
- * verify's consistency check) emit it directly.
+ * `warning` reaches a phase through its own reported `status`, NOT through its
+ * exit code — `vat skills validate` exits 0 while reporting `status: warning`,
+ * so an exit-code-only mapping answered `success` on the very tree where the
+ * phase said otherwise. Phases that hold their own findings (e.g. verify's
+ * consistency check) emit it directly.
  */
 export type PhaseStatus = 'success' | 'warning' | 'error' | 'system-error';
 /** The phase outcome for "we did not learn what this phase would have said". */
@@ -61,58 +105,44 @@ export declare const SYSTEM_ERROR: PhaseStatus;
 export interface PhaseResult {
     name: string;
     status: PhaseStatus;
-    /** Child exit code, when the child ran and exited on its own. */
+    /** The exit code the phase claimed for itself. */
     exitCode?: number;
-    /** POSIX signal that killed the child, when one did (then `exitCode` is absent). */
-    signal?: string;
-    /** Why the phase could not run at all (the spawn itself failed). */
+    /** Why the phase could not run at all (it threw past its own error handling). */
     error?: string;
     /**
-     * Per-severity distribution for in-process phases that hold their own
-     * findings. Absent for subprocess phases: the child owns its own findings,
-     * and inventing counts here would be a second, weaker answer — the child's
-     * are carried verbatim in {@link PhaseResult.report} instead.
+     * Per-severity distribution for phases that hold their own findings and
+     * publish no document of their own. Absent for phases that DO publish one:
+     * those own their findings, and inventing counts here would be a second,
+     * weaker answer — theirs are carried verbatim in {@link PhaseResult.report}.
      */
     issueCounts?: SeverityCounts;
     /**
-     * The child's own YAML document, parsed and folded in.
+     * The phase's own document, folded in under its name.
      *
-     * The child used to write this straight onto the parent's stdout (`stdio:
-     * 'inherit'`), which concatenated N documents with no `---` between them: two
-     * phases produced one map carrying `status:` and `durationSecs:` twice, and
-     * `YAML.parse()` threw "Map keys must be unique". Nesting each child's
-     * document under its own phase makes the parent's stdout one parseable
-     * document again and loses nothing.
+     * Nested under the phase's own entry so the orchestrator's stdout stays ONE
+     * parseable document.
+     *
+     * ⚠️ Phase documents written onto a shared stdout concatenate with no `---`
+     * between them: two phases each carrying `status:` and `durationSecs:` become
+     * a single map with duplicate keys, and `YAML.parse()` throws "Map keys must
+     * be unique".
      */
     report?: unknown;
 }
-/** The subset of a `spawnSync` return that decides a phase's outcome. */
-export interface PhaseSpawnOutcome {
-    status: number | null;
-    signal: NodeJS.Signals | null;
-    error?: Error | undefined;
-    /** The child's captured stdout, when it was piped rather than inherited. */
-    stdout?: string | null | undefined;
-}
-/**
- * Resolve the absolute path to the vat binary.
- * This file lives in commands/, one level above bin/.
- */
-export declare function resolveBinPath(): string;
 export interface PhaseContext {
     logger: ReturnType<typeof createLogger>;
     startTime: number;
-    binPath: string;
 }
 /**
  * Create the shared phase command context: logger, startTime, and bin path.
  *
- * It used to THROW when the phase list came out empty — and it was called
- * before the command's try block, so an unroutable `--only` reached the user as
- * a raw Node stack trace with zero bytes of stdout and an exit 1 that looked
- * like "validation errors". `--only` routing is decided by
- * {@link decidePhaseSelection} and reported by {@link applyPhaseSelection} now,
- * which emit the command's normal structured document.
+ * Total by design: it builds the context and decides nothing.
+ *
+ * ⚠️ This runs BEFORE the command's try block, so anything that throws here
+ * reaches the user as a raw Node stack trace with zero bytes of stdout and an
+ * exit 1 indistinguishable from "validation errors". Phase routing therefore
+ * belongs to {@link decidePhaseSelection} and {@link applyPhaseSelection}, which
+ * emit the command's normal structured document.
  */
 export declare function createPhaseContext(debugFlag: boolean | undefined): PhaseContext;
 /**
@@ -156,30 +186,26 @@ export interface PhaseVocabulary {
  * Decide what an orchestrator should do with its `--only` value and the phase
  * list its config produced.
  *
- * Shared by all three orchestrators because they used to disagree: `vat verify`
- * built its phase list without consulting the config at all, so `vat verify
- * --only skills` in a project with no `skills:` block exited 0 while `vat
- * validate --only skills` on the same project exited 1 — opposite verdicts on
- * the same question. (`vat verify` has since retired `--only` entirely and now
- * always passes `only: undefined`; `vat validate` and `vat build` still route
- * their own `--only` through here.)
+ * THE single decision site for all three orchestrators, so they cannot answer
+ * the same question differently. An orchestrator that builds its phase list
+ * without consulting the config exits 0 on `--only skills` in a project with no
+ * `skills:` block while another exits 1 — opposite verdicts on one question.
+ * `vat verify` has retired `--only` and always passes `only: undefined`;
+ * `vat validate` and `vat build` route their own `--only` through here.
  *
- * There used to be a third option, `emptyIsValid`, which existed solely so
- * `vat verify --only consistency` could run with an empty SUBPROCESS list
- * (consistency runs in-process). It was checked BEFORE `unreadableConfig`, so
- * `vat verify --only consistency` against an unparseable config answered the
- * confidently-wrong "no skills: block" instead of reporting the config error.
- * `--only` is gone from verify, `emptyIsValid` went with it, and that ordering
- * hazard cannot recur: nothing short-circuits ahead of the config-error arm.
+ * ⚠️ **Nothing may short-circuit ahead of the config-error arm.** A check
+ * evaluated before `unreadableConfig` answers a confident "not configured" for a
+ * tree whose config could not be parsed — which is the one answer this function
+ * must never give, because it is indistinguishable from a correct one.
  *
  * @param unreadableConfig - The config-load error, when the config exists but
  *   could not be parsed. A broken config is NOT "the phase is unconfigured":
  *   we do not know what it declares, so we must not answer with a confident
  *   "not configured". Only `vat verify` passes it, and only defensively — its
- *   phase builder pushes every subprocess phase when the config is unreadable
- *   (so the CHILD reports the real error), which makes the list non-empty and
- *   this arm unreachable by construction today. It is kept because the arm that
- *   would otherwise catch an empty list is the "not configured" lie.
+ *   phase builder pushes every configured phase when the config is unreadable
+ *   (so the phase itself reports the real error), which makes the list non-empty
+ *   and this arm unreachable by construction today. It is kept because the arm
+ *   that would otherwise catch an empty list is the "not configured" lie.
  */
 export declare function decidePhaseSelection(only: string | undefined, phases: Phase[], vocab: PhaseVocabulary, options?: {
     unreadableConfig?: string | undefined;
@@ -188,46 +214,71 @@ export declare function decidePhaseSelection(only: string | undefined, phases: P
  * Act on a {@link PhaseSelection}: return the phases to run, or emit the
  * command's normal structured document and exit.
  *
- * Both terminal arms go through `writeYamlOutput` deliberately. A `--only`
- * failure used to be an uncaught throw, so the one output a scripted caller
- * parses — the YAML document on stdout — was never written at all.
+ * Both terminal arms go through `writeYamlOutput` deliberately: the YAML
+ * document on stdout is the one output a scripted caller parses, so a routing
+ * failure has to publish one rather than throw past it.
  */
 export declare function applyPhaseSelection(selection: PhaseSelection, logger: ReturnType<typeof createLogger>, startTime: number): Phase[];
 /** The worse of two phase statuses, per {@link PHASE_STATUS_ORDER}. */
 export declare function worseOf(a: PhaseStatus, b: PhaseStatus): PhaseStatus;
 /**
- * Map a spawn outcome to a phase outcome. The pure core of {@link runPhase}.
+ * Map what a phase produced to its outcome. The pure core of {@link runPhase}.
  *
- * Every branch that is NOT "the child ran and told us what it found" is a
- * system error, because the orchestrator learned nothing about the artifact:
+ * | exit code             | phase status   | why                                     |
+ * |-----------------------|----------------|-----------------------------------------|
+ * | 0                     | `success`      | ran, found nothing actionable           |
+ * | 1                     | `error`        | ran, found validation errors            |
+ * | 2 (or any other)      | `system-error` | the phase itself reported a system error |
  *
- * | spawn outcome            | phase status   | why                                        |
- * |--------------------------|----------------|--------------------------------------------|
- * | `error` set              | `system-error` | the child never ran                        |
- * | killed by a signal       | `system-error` | the child was cut off mid-answer           |
- * | no exit code, no signal  | `system-error` | there is no answer to read                 |
- * | stdout not parseable     | `system-error` | the child's answer cannot be read          |
- * | exit 0                   | `success`      | ran, found nothing actionable              |
- * | exit 1                   | `error`        | ran, found validation errors               |
- * | exit 2 (or any other)    | `system-error` | the child itself reported a system error    |
+ * The exit code is then reconciled with the phase's OWN reported `status`,
+ * worst-wins. An exit code has three values and cannot express `warning`:
+ * `vat skills validate` exits 0 while reporting `status: warning`, so its exit
+ * code alone reads as `success` — including on the tree VAT's CI dogfoods on
+ * VAT itself.
  *
- * The exit code is then reconciled with the child's OWN reported `status`,
- * worst-wins. An exit code has three values and cannot express `warning`, so
- * `vat skills validate` — which exits 0 while reporting `status: warning` —
- * was being recorded as `success` by every orchestrator, including the one
- * VAT's CI dogfoods on VAT itself.
+ * The table has no row for a signal kill, a missing status code, or a document
+ * that fails to parse, and that is the design rather than an omission. A phase
+ * runs in this process: there is no serialization step in which to lose a
+ * document, and no signal that could take a phase without taking the
+ * orchestrator with it.
  */
-export declare function phaseResultFromSpawn(name: string, outcome: PhaseSpawnOutcome): PhaseResult;
+export declare function phaseResultFromOutcome(name: string, outcome: PhaseOutcome): PhaseResult;
 /**
- * Run a single phase by spawning the vat binary with the phase args.
+ * End a command-line run from a phase outcome: publish the document, then exit.
+ *
+ * THE single place the two lanes diverge, so they cannot diverge anywhere else.
+ * A phase hands back the same `{ document, exitCode }` either way; this decides
+ * what a *command* does with it, while an orchestrator folds it into
+ * `phases[].report` instead.
+ *
+ * Three cases, and the middle one is the one to get right:
+ *   - an unexpected failure publishes the shared envelope through
+ *     `writeYamlOutput`, matching `handleCommandError`;
+ *   - a command's own report goes through the command's own `render`;
+ *   - no document at all (an unconfigured run, a dry run) publishes nothing.
  *
- * stdout is CAPTURED, not inherited: the child's YAML document belongs in this
- * phase's `report`, and letting it stream onto the parent's stdout is what made
- * `vat validate`'s output a run of documents with no `---` between them.
- * stderr stays inherited — progress output is on stderr by design and must keep
- * streaming live rather than arriving in one lump at the end.
+ * @param outcome - What the phase produced
+ * @param render - How this command publishes its OWN report shape
  */
-export declare function runPhase(binPath: string, phase: Phase): PhaseResult;
+export declare function finishCommand(outcome: PhaseOutcome, render: (document: unknown) => void): never;
+/**
+ * Run a single phase in THIS process and fold its outcome into a result.
+ *
+ * In THIS process, because everything an orchestrator reads back from a phase is
+ * the {@link PhaseOutcome} pair. A process per phase buys neither half of it and
+ * charges, on every phase, a full Node startup and the whole module graph again
+ * (~730 ms of remark per isolate), a parse cache whose miss counters restart
+ * from zero, and a worker pool built and torn down before the next phase begins.
+ * Phases run sequentially, so none of that cost is ever overlapped with work.
+ *
+ * The `catch` is a BACKSTOP, not the error path. Every phase function reports
+ * its own failures through `reportCommandError` and returns them as a document.
+ *
+ * ⚠️ This arm exists for a throw that escaped that handling. Sharing the
+ * orchestrator's process is what makes it load-bearing: an escaped throw aborts
+ * the orchestrator itself and silently skips every later phase.
+ */
+export declare function runPhase(phase: Phase): Promise<PhaseResult>;
 /**
  * Worst-wins aggregate across phases. `system-error` outranks `error`: "we could
  * not determine the answer" must never be filed under "we determined it is bad".
@@ -236,26 +287,26 @@ export declare function aggregatePhaseStatus(results: readonly PhaseResult[]): P
 /**
  * One phase's per-severity distribution, wherever that phase keeps it.
  *
- * An in-process phase holds its own findings and publishes {@link
- * PhaseResult.issueCounts}. A subprocess phase deliberately does not — the child
- * owns its findings, and its document rides verbatim in {@link
- * PhaseResult.report}. Reading only the former is why an orchestrator's header
- * could report `{0, 0, 0}` over children that had just reported 12 warnings.
+ * A phase that holds its own findings publishes {@link PhaseResult.issueCounts}.
+ * A phase that publishes its own document deliberately does not — it owns its
+ * findings, and its document rides verbatim in {@link PhaseResult.report}.
+ *
+ * ⚠️ Both places must be read. Reading only `issueCounts` makes an
+ * orchestrator's header report `{0, 0, 0}` over phases that just reported 12
+ * warnings.
  *
  * Absent or malformed counts read as zero rather than throwing: a phase that
- * published no distribution contributes nothing to the total, which is the same
- * answer as before this function existed — just no longer the answer for phases
- * that DID publish one.
+ * publishes no distribution contributes nothing to the total.
  */
 export declare function phaseIssueCounts(result: PhaseResult): SeverityCounts;
 /**
  * Sum every phase's distribution, so an orchestrator's header total reconciles
  * against the phases printed beneath it.
  *
- * The companion to {@link aggregatePhaseStatus}: status has always been
- * worst-wins ACROSS phases, and a header whose `status` can see the children
- * while its `issueCounts` cannot is the same contradiction in one document —
- * `status: warning` beside `warnings: 0`.
+ * The companion to {@link aggregatePhaseStatus}: status is worst-wins ACROSS
+ * phases, so a header whose `status` can see the phases while its `issueCounts`
+ * cannot publishes a contradiction in one document — `status: warning` beside
+ * `warnings: 0`.
  */
 export declare function aggregatePhaseIssueCounts(results: readonly PhaseResult[]): SeverityCounts;
 /**

package/dist/commands/phase-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"phase-utils.d.ts","sourceRoot":"","sources":["../../src/commands/phase-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,KAAK,OAAO,EAAU,MAAM,WAAW,CAAC;AAGjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAI9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAclG;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC;AAE3E,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,WAA4B,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,KAAK,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAC1B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAKvC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,CAM/E;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,EAAE,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,2EAA2E;IAC3E,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,MAAM,EAAE,KAAK,EAAE,EACf,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GACtD,cAAc,CA4BhB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,SAAS,EAAE,MAAM,GAChB,KAAK,EAAE,CAwBT;AAKD,uEAAuE;AACvE,wBAAgB,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,GAAG,WAAW,CAEnE;AAmED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAmC1F;AAUD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,WAAW,CAYnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,CAMjF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,cAAc,CAUpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,cAAc,CASzF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAI5E"}
+{"version":3,"file":"phase-utils.d.ts","sourceRoot":"","sources":["../../src/commands/phase-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,KAAK,OAAO,EAAU,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAI9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAclG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC;AAE3E,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,WAA4B,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,CAK/E;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,EAAE,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,2EAA2E;IAC3E,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,MAAM,EAAE,KAAK,EAAE,EACf,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GACtD,cAAc,CA4BhB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,SAAS,EAAE,MAAM,GAChB,KAAK,EAAE,CAwBT;AAKD,uEAAuE;AACvE,wBAAgB,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,GAAG,WAAW,CAEnE;AAqBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,WAAW,CAevF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,GAAG,KAAK,CAO/F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAWjE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,CAMjF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,cAAc,CAUpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,cAAc,CASzF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAI5E"}