agentic-workflow-manager 9.11.2 → 9.11.4

package/dist/src/commands/job/gate.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeGate = computeGate;
 exports.computeTrackGate = computeTrackGate;
+const store_1 = require("../../core/journal/store");
 const LIVE = ['received', 'spawn-intent', 'claimed', 'running', 'cancel-requested'];
 function sameSelection(left, right) {
     return left.selector.kind === right.selector.kind && left.selector.id === right.selector.id && left.effort.kind === right.effort.kind && left.effort.value === right.effort.value;
@@ -149,9 +150,19 @@ function evaluateEvidence(state, fingerprintNow, scope) {
     }
     return { pass: reasons.length === 0, reasons };
 }
-function computeGate(state, corrupt, fingerprintNow) {
+/**
+ * `absent` defaults to false so every existing caller keeps today's behaviour
+ * exactly: an unreadable journal fails closed either way. What changes is the
+ * REASON an absent one reports — it used to claim corruption, sending operators
+ * to look for damage in a healthy repository (#173). The exit code does not
+ * change: this interlock has no plan binding to read an execution mode from when
+ * the journal is missing, so it stays fail-closed and names the remedy instead.
+ */
+function computeGate(state, corrupt, fingerprintNow, absent = false) {
     if (corrupt || state === null) {
-        return { pass: false, reasons: [{ category: 'corrupt', detail: 'state.json corrupto o ilegible: la corrupcion jamas certifica' }] };
+        return absent && !corrupt
+            ? { pass: false, reasons: [{ category: 'absent', detail: store_1.ABSENT_JOURNAL_DETAIL }] }
+            : { pass: false, reasons: [{ category: 'corrupt', detail: 'state.json corrupto o ilegible: la corrupcion jamas certifica' }] };
     }
     return evaluateEvidence(state, fingerprintNow, { requireGlobalKinds: true });
 }
@@ -161,9 +172,12 @@ function computeGate(state, corrupt, fingerprintNow) {
  *  ahi) y rechaza cualquier tarea que aparezca en el journal pero no en la
  *  asignacion del track (R2.3) — nunca certifica por una tarea ajena que se
  *  haya colado. */
-function computeTrackGate(state, corruptState, fingerprintNow) {
-    if (corruptState || state === null)
-        return { pass: false, reasons: [{ category: 'corrupt-state', detail: 'journal ausente o corrupto' }] };
+function computeTrackGate(state, corruptState, fingerprintNow, absent = false) {
+    if (corruptState || state === null) {
+        return absent && !corruptState
+            ? { pass: false, reasons: [{ category: 'absent-state', detail: store_1.ABSENT_JOURNAL_DETAIL }] }
+            : { pass: false, reasons: [{ category: 'corrupt-state', detail: 'journal corrupto o ilegible' }] };
+    }
     if (state.trackContext === undefined)
         return { pass: false, reasons: [{ category: 'wrong-context', detail: 'gate local requiere trackContext' }] };
     const assigned = new Set(state.trackContext.taskIds);

package/dist/src/commands/job/index.js

@@ -219,8 +219,13 @@ function registerJobCommand(program) {
         const branch = branchOf(repo);
         assertAuthenticatedCwd(repo, branch);
         const r = (0, store_1.readJournal)(repo, branch);
-        if (r.corrupt || r.state === null) {
-            process.stdout.write(JSON.stringify({ corruptState: true }, null, 2) + '\n');
+        const presence = (0, store_1.journalPresence)(r);
+        if (presence !== 'present' || r.state === null) {
+            // Absence and corruption need different responses, so they are
+            // reported as different facts. Both still fail closed (#173).
+            process.stdout.write(JSON.stringify(presence === 'absent'
+                ? { journal: 'absent', corruptState: false, remedy: store_1.ABSENT_JOURNAL_DETAIL }
+                : { journal: 'corrupt', corruptState: true }, null, 2) + '\n');
             process.exit(1);
         }
         try {
@@ -257,7 +262,7 @@ function registerJobCommand(program) {
                 process.exit(1);
             }
         }
-        const g = (0, gate_1.computeGate)(r.state, r.corrupt, realFingerprintNow(repo));
+        const g = (0, gate_1.computeGate)(r.state, r.corrupt, realFingerprintNow(repo), r.absent);
         process.stdout.write(JSON.stringify(g, null, 2) + '\n');
         if (!g.pass)
             process.exit(1); // falla cerrado (R3.2)
@@ -270,8 +275,9 @@ function registerJobCommand(program) {
         const branch = branchOf(repo);
         assertAuthenticatedCwd(repo, branch);
         const r = (0, store_1.readJournal)(repo, branch);
-        if (r.corrupt || r.state === null) {
-            process.stdout.write(JSON.stringify({ corruptState: true }) + '\n');
+        const presence = (0, store_1.journalPresence)(r);
+        if (presence !== 'present' || r.state === null) {
+            process.stdout.write(JSON.stringify({ journal: presence, corruptState: presence === 'corrupt' }) + '\n');
             process.exit(1);
             return;
         }
@@ -287,7 +293,7 @@ function registerJobCommand(program) {
         assertAuthenticatedCwd(repo, branch);
         const r = (0, store_1.readJournal)(repo, branch);
         if (r.corrupt || r.state === null) {
-            process.stderr.write('journal corrupto o ausente\n');
+            process.stderr.write(`${r.absent && !r.corrupt ? store_1.ABSENT_JOURNAL_DETAIL : 'journal corrupto o ilegible'}\n`);
             process.exit(1);
         }
         const plan = (0, reap_1.planReap)(r.state);
@@ -308,7 +314,7 @@ function registerJobCommand(program) {
         assertAuthenticatedCwd(repo, branch);
         const r = (0, store_1.readJournal)(repo, branch);
         if (r.corrupt || r.state === null) {
-            process.stderr.write('journal corrupto\n');
+            process.stderr.write(`${r.absent && !r.corrupt ? store_1.ABSENT_JOURNAL_DETAIL : 'journal corrupto o ilegible'}\n`);
             process.exit(1);
         }
         let baseline = null;

package/dist/src/commands/job/query.js

@@ -6,23 +6,27 @@ exports.queryShow = queryShow;
 const store_1 = require("../../core/journal/store");
 const process_1 = require("../../core/journal/process");
 /** Fuente unica de "que hay corriendo": cruza identidad completa contra
- *  procesos vivos. corrupt es VISIBLE, nunca descartado (R1.6). */
+ *  procesos vivos. corrupt es VISIBLE, nunca descartado (R1.6), y un journal
+ *  que nunca existio se reporta como `absent`, no como corrupcion (#173). */
 function queryPs(repoRoot, branch) {
     const r = (0, store_1.readJournal)(repoRoot, branch);
-    if (r.corrupt)
-        return { corruptState: true, jobs: [] };
+    const journal = (0, store_1.journalPresence)(r);
+    if (journal !== 'present')
+        return { corruptState: journal === 'corrupt', journal, jobs: [] };
     const jobs = Object.values(r.state.jobs).map((j) => ({
         id: j.id, executionState: j.executionState, observationState: j.observationState, verdict: j.verdict,
         alive: j.processRef ? (0, process_1.refIsAlive)(j.processRef) : 'sin-pid',
     }));
-    return { corruptState: false, jobs };
+    return { corruptState: false, journal, jobs };
 }
 function queryList(repoRoot, branch) {
     const r = (0, store_1.readJournal)(repoRoot, branch);
-    if (r.corrupt)
-        return { corruptState: true, cycleStatus: null, jobs: [] };
+    const journal = (0, store_1.journalPresence)(r);
+    if (journal !== 'present')
+        return { corruptState: journal === 'corrupt', journal, cycleStatus: null, jobs: [] };
     return {
         corruptState: false,
+        journal,
         cycleStatus: r.state.cycle.status,
         jobs: Object.values(r.state.jobs).map((j) => ({
             id: j.id, executionState: j.executionState, verdict: j.verdict, argv: j.argv, satisfies: j.satisfies,
@@ -31,7 +35,8 @@ function queryList(repoRoot, branch) {
 }
 function queryShow(repoRoot, branch, jobId) {
     const r = (0, store_1.readJournal)(repoRoot, branch);
-    if (r.corrupt)
-        return { corruptState: true, job: null };
-    return { corruptState: false, job: r.state.jobs[jobId] ?? null };
+    const journal = (0, store_1.journalPresence)(r);
+    if (journal !== 'present')
+        return { corruptState: journal === 'corrupt', journal, job: null };
+    return { corruptState: false, journal, job: r.state.jobs[jobId] ?? null };
 }

package/dist/src/commands/preflight/checks.js

@@ -155,11 +155,18 @@ function checkManifest(status) {
             remedy: `registry has no pack for '${manifest.pack}': run \`awm update\` or add a registry that has it`,
         };
     }
+    // An applicable sensor the project cannot initialize is a real gap, so it is
+    // named here rather than left as an absence. It does not flip `ok`: whether an
+    // uninitialized sensor should block a handoff is a gate-policy decision, and
+    // flipping it would restore the dead end #172 is about — a project whose only
+    // gap is one missing tool could then configure sensors and still never pass.
+    const uninitialized = Object.keys(status.uninitialized ?? {});
+    const gap = uninitialized.length === 0 ? '' : `; ${uninitialized.length} applicable sensor(s) not initialized: ${uninitialized.join(', ')}`;
     return {
         id: 'manifest',
         ok: true,
-        detail: enabled === 0 ? `pack ${manifest.pack}, all ${total} sensors disabled (deliberate opt-out)`
-            : `pack ${manifest.pack}, ${enabled}/${total} sensors enabled`,
+        detail: (enabled === 0 ? `pack ${manifest.pack}, all ${total} sensors disabled (deliberate opt-out)`
+            : `pack ${manifest.pack}, ${enabled}/${total} sensors enabled`) + gap,
     };
 }
 /** Every enabled sensor's command must resolve. This is the check nothing was calling. */

package/dist/src/commands/sensors/bootstrap.js

@@ -20,8 +20,8 @@ const safe_file_1 = require("./compatibility/safe-file");
 const fs_1 = __importDefault(require("fs"));
 const crypto_1 = require("crypto");
 const path_1 = __importDefault(require("path"));
-function blocked(projectRoot, manifestPath, dryRun, reason, remedy, candidates) {
-    return { kind: 'blocked', projectRoot, manifestPath, changes: [], dryRun, reason, remedy, ...(candidates ? { candidates } : {}) };
+function blocked(projectRoot, manifestPath, dryRun, reason, remedy, candidates, unresolved) {
+    return { kind: 'blocked', projectRoot, manifestPath, changes: [], dryRun, reason, remedy, ...(candidates ? { candidates } : {}), ...(unresolved && unresolved.length > 0 ? { unresolved } : {}) };
 }
 function options(input) {
     if (input === undefined)
@@ -84,21 +84,40 @@ async function projectSensors(projectRoot, registryRoot, requestedPack, packageR
         return { reason: 'compatibility-unresolvable', remedy: 'repair-project-tools-or-select-another-mode' };
     }
     const sensors = {};
+    const unresolved = [];
+    let applicable = 0;
     for (const [name, packSensor] of Object.entries(live.pack.sensors)) {
         const evidence = live.sensors[name];
         if (evidence.state === 'not-applicable')
             continue;
+        applicable += 1;
         const variant = evidence.variantId === null ? undefined : packSensor.variants.find(item => item.id === evidence.variantId);
-        if (!variant)
-            return { reason: 'sensor-variant-unresolvable', remedy: 'repair-project-tools-or-select-another-mode' };
+        // One applicable sensor whose tool is absent used to abort the whole
+        // manifest, including the sensors that DID resolve, so a project whose
+        // only gap was (say) semgrep could not configure sensors at all — and so
+        // could not pass preflight, and so could not be handed off. A missing tool
+        // is a gap in one sensor, not grounds to refuse the pack. It is skipped
+        // and REPORTED by name; nothing is invented for it, because the v3 entry
+        // shape requires a real variant, command and probe evidence. See #172.
+        if (!variant) {
+            unresolved.push({ sensor: name, state: evidence.state, reason: evidence.reason });
+            continue;
+        }
         sensors[name] = { enabled: true, ...(packSensor.fast === undefined ? {} : { fast: packSensor.fast }), ...(packSensor.timeout === undefined ? {} : { timeout: packSensor.timeout }), variantId: variant.id, command: variant.command, ...(variant.assets.length === 0 ? {} : { assets: variant.assets }), ...(variant.policyRef ? { policyRef: variant.policyRef } : {}), initializedCompatibility: evidence };
     }
+    // A pack with NO applicable sensor still writes an honest empty manifest: that
+    // is the distinct "the registry has no pack for this stack" signal preflight
+    // already reports. But a pack where sensors apply and none of them resolve is
+    // a different condition, and writing an empty manifest would collide with it.
+    if (applicable > 0 && Object.keys(sensors).length === 0) {
+        return { reason: 'no-sensor-resolvable', remedy: 'repair-project-tools-or-select-another-mode', unresolved };
+    }
     const manifest = (0, manifest_1.parseSensorManifest)({ schemaVersion: 3, mode: 'project-sensors', pack, source: { registry: source.registry.name }, ...(packageRoot ? { packageRoot } : {}), sensors }, 'bootstrap candidate');
     if (manifest.kind !== 'v3' || manifest.pack.mode !== 'project-sensors')
         throw new Error('bootstrap project-sensors candidate is invalid');
     (0, manifest_1.serializeManifestV3)(manifest.pack);
     const assets = [...new Set(Object.values(sensors).flatMap(sensor => sensor.assets ?? []))].sort();
-    return { manifest: manifest.pack, source, changes: [{ path: '.awm/sensors.json', action: 'create' }, ...assets.map(asset => ({ path: packageRoot ? `${packageRoot}/${asset}` : asset, action: 'create' }))] };
+    return { manifest: manifest.pack, source, changes: [{ path: '.awm/sensors.json', action: 'create' }, ...assets.map(asset => ({ path: packageRoot ? `${packageRoot}/${asset}` : asset, action: 'create' }))], unresolved };
 }
 /** Plan a one-time portable bootstrap. This function never writes project or machine state. */
 async function planSensorBootstrap(cwd = process.cwd(), input = {}) {
@@ -125,7 +144,7 @@ async function planSensorBootstrap(cwd = process.cwd(), input = {}) {
             // activate v2 sensors which require an explicit project opt-in.
             const planned = await projectSensors(project.projectRoot, opts.registryRoot, project.manifest.pack.pack, undefined, false);
             if ('reason' in planned)
-                return blocked(project.projectRoot, project.manifestPath, opts.dryRun, planned.reason, planned.remedy, 'candidates' in planned ? planned.candidates : undefined);
+                return blocked(project.projectRoot, project.manifestPath, opts.dryRun, planned.reason, planned.remedy, 'candidates' in planned ? planned.candidates : undefined, planned.unresolved);
             try {
                 const original = fs_1.default.readFileSync(project.manifestPath);
                 return {
@@ -133,6 +152,7 @@ async function planSensorBootstrap(cwd = process.cwd(), input = {}) {
                     changes: planned.changes.map((change, index) => index === 0 ? { ...change, action: 'replace' } : change),
                     dryRun: opts.dryRun, migration: { kind: 'legacy-v1', manifest: planned.manifest }, source: planned.source,
                     originalDigest: digest(original),
+                    ...(planned.unresolved.length > 0 ? { unresolved: planned.unresolved } : {}),
                 };
             }
             catch {
@@ -165,8 +185,8 @@ async function planSensorBootstrap(cwd = process.cwd(), input = {}) {
     }
     const planned = await projectSensors(project.projectRoot, opts.registryRoot, opts.pack, opts.packageRoot);
     if ('reason' in planned)
-        return blocked(project.projectRoot, project.manifestPath, opts.dryRun, planned.reason, planned.remedy, 'candidates' in planned ? planned.candidates : undefined);
-    return { kind: 'create', projectRoot: project.projectRoot, manifestPath: project.manifestPath, changes: planned.changes, dryRun: opts.dryRun, manifest: planned.manifest, source: planned.source, configure: opts.configure };
+        return blocked(project.projectRoot, project.manifestPath, opts.dryRun, planned.reason, planned.remedy, 'candidates' in planned ? planned.candidates : undefined, planned.unresolved);
+    return { kind: 'create', projectRoot: project.projectRoot, manifestPath: project.manifestPath, changes: planned.changes, dryRun: opts.dryRun, manifest: planned.manifest, source: planned.source, configure: opts.configure, ...(planned.unresolved.length > 0 ? { unresolved: planned.unresolved } : {}) };
 }
 /** Apply only a validated, non-dry-run create or migration plan. */
 function applySensorBootstrap(plan) {

package/dist/src/commands/sensors/index.js

@@ -16,6 +16,7 @@ const render_1 = require("./coverage/render");
 const registries_1 = require("../../core/registries");
 const verdict_1 = require("./verdict");
 const bootstrap_1 = require("./bootstrap");
+const unresolved_1 = require("./unresolved");
 /** Commander coercion for coverage recurrence emphasis. It deliberately runs
  * before the action, so an invalid value cannot trigger ledger I/O. */
 function parsePositiveSafeInteger(value) {
@@ -72,8 +73,10 @@ function registerSensorsCommand(program) {
         const registryRoot = opts.registryRoot ?? (0, registries_1.capabilityRoot)('sensor-packs') ?? undefined;
         try {
             const plan = await (0, bootstrap_1.planSensorBootstrap)(process.cwd(), { mode: 'project-sensors', registryRoot, configure: opts.configure, pack: opts.pack, packageRoot: opts.packageRoot });
-            if (plan.kind === 'blocked')
-                throw new Error(`${plan.reason}: ${plan.remedy}`);
+            if (plan.kind === 'blocked') {
+                const detail = (0, unresolved_1.describeUnresolved)(plan.unresolved);
+                throw new Error(`${plan.reason}: ${plan.remedy}${detail === '' ? '' : ` (${detail})`}`);
+            }
             if (plan.kind === 'noop') {
                 prompts_1.log.info('already-configured');
                 return;
@@ -83,8 +86,12 @@ function registerSensorsCommand(program) {
             const result = (0, bootstrap_1.applySensorBootstrap)(plan);
             const detected = plan.manifest.mode === 'project-sensors' ? plan.manifest.pack : 'none';
             prompts_1.log.success(`Detected: ${detected}`);
-            // Said BEFORE "Wrote .awm/sensors.json": the manifest about to be
-            // reported as written is not the one the detection implied.
+            // Said BEFORE "Wrote .awm/sensors.json": a partially resolved pack
+            // must not be reported as a clean write, and the manifest about to
+            // be reported as written is not the one the detection implied.
+            const skipped = (0, unresolved_1.describeUnresolved)(plan.unresolved);
+            if (skipped !== '')
+                prompts_1.log.warn(`not initialized (tool unavailable here): ${skipped}`);
             prompts_1.log.success(`${result} .awm/sensors.json`);
         }
         catch (e) {
@@ -102,7 +109,8 @@ function registerSensorsCommand(program) {
         try {
             const plan = await (0, bootstrap_1.planSensorBootstrap)(process.cwd(), { mode: opts.mode, reason: opts.reason, dryRun: opts.dryRun });
             if (plan.kind === 'blocked') {
-                prompts_1.log.error(`${plan.reason}: ${plan.remedy}`);
+                const detail = (0, unresolved_1.describeUnresolved)(plan.unresolved);
+                prompts_1.log.error(`${plan.reason}: ${plan.remedy}${detail === '' ? '' : ` (${detail})`}`);
                 process.exitCode = 1;
                 return;
             }
@@ -154,6 +162,12 @@ function registerSensorsCommand(program) {
             const mark = check.ok ? picocolors_1.default.green('✔') : picocolors_1.default.red('✘');
             console.log(`  ${mark}  ${name.padEnd(12)} ${check.detail}`);
         }
+        // A pack sensor that applies here but has no manifest entry is otherwise
+        // indistinguishable from one the pack never applied. It does not change
+        // the verdict; it is named so the gap is attributable. See #172.
+        for (const [name, gap] of Object.entries(status.uninitialized ?? {})) {
+            console.log(`  ${picocolors_1.default.yellow('–')}  ${name.padEnd(12)} not initialized: ${gap.state}/${gap.reason}`);
+        }
         console.log('');
         if (status.overall !== 'READY')
             process.exit(1);

package/dist/src/commands/sensors/init.js

@@ -11,6 +11,7 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const pack_source_1 = require("./compatibility/pack-source");
 const bootstrap_1 = require("./bootstrap");
+const unresolved_1 = require("./unresolved");
 /** Read a pack only through the shared source resolver.  Init is a registry
  * boundary: a pack path that is absent is harmless, but a symlink or escaping
  * claimed source is never silently downgraded to an empty manifest. */
@@ -155,8 +156,10 @@ async function initSensors(opts = {}) {
         mode: 'project-sensors', registryRoot: opts.registryRoot, configure: opts.configure,
         pack: opts.pack, packageRoot: opts.packageRoot,
     });
-    if (plan.kind === 'blocked')
-        throw new Error(`${plan.reason}: ${plan.remedy}`);
+    if (plan.kind === 'blocked') {
+        const detail = (0, unresolved_1.describeUnresolved)(plan.unresolved);
+        throw new Error(`${plan.reason}: ${plan.remedy}${detail === '' ? '' : ` (${detail})`}`);
+    }
     if (plan.kind === 'migrate')
         throw new Error('initSensors does not migrate existing v2 manifests; run awm sensors bootstrap');
     if (plan.kind === 'noop')
@@ -166,5 +169,5 @@ async function initSensors(opts = {}) {
             manifest: {}, detection: detectStack(detectionCwd), configured: [], status: 'already-configured',
         };
     (0, bootstrap_1.applySensorBootstrap)(plan);
-    return { manifest: plan.manifest, detection: detectStack(detectionCwd), configured: [], status: 'created' };
+    return { manifest: plan.manifest, detection: detectStack(detectionCwd), configured: [], status: 'created', ...(plan.unresolved && plan.unresolved.length > 0 ? { unresolved: plan.unresolved } : {}) };
 }

package/dist/src/commands/sensors/status.js

@@ -124,9 +124,40 @@ function resolveStaticV2Compatibility(cwd, manifest, source) {
                 : (0, resolve_1.resolveSensorCompatibility)(sensor, { ...resolutionEvidence, probe: { status: probeStatus } }, { pack: executionPack.name, sensor: name })];
     }));
 }
+/** Applicable pack sensors with no manifest entry, so the gap is attributable in
+ *  every `awm sensors status`, not only in the output of the `init` that skipped it. */
+function uninitializedSensors(manifest, compatibility) {
+    const entries = Object.entries(compatibility)
+        .filter(([name, evidence]) => evidence !== undefined && evidence.state !== 'not-applicable' && !Object.prototype.hasOwnProperty.call(manifest.sensors, name))
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([name, evidence]) => [name, { state: evidence.state, reason: evidence.reason }]);
+    return entries.length === 0 ? undefined : Object.fromEntries(entries);
+}
+/**
+ * Status never executes, so `discoverProjectEvidence` is called here without
+ * `pathToolVersion` and a `resolution: 'path'` tool is structurally invisible to
+ * it: `npm` on PATH resolves as `missing-tool`/`tool-not-found` whether it is
+ * installed or not. Reporting that as "compatibility drift" asserts something
+ * this command did not measure. `checkStructuredCommand` DOES consult PATH for
+ * exactly these commands, so defer to it rather than claim drift. Any other live
+ * state, or a genuinely different resolved variant, is still real drift.
+ *
+ * Today `missing-tool`/`tool-not-found` is the ONLY verdict a `path` tool can
+ * receive here, because discovery cannot see its version at all — so the state
+ * and reason conditions are unreachable as written. They are kept because every
+ * one of them can only make this guard NARROWER: a combination they reject falls
+ * through to the drift report, never past it. A future discovery that does read
+ * PATH would make them load-bearing rather than silently permissive.
+ */
+function unobservableOnPath(sensor, live) {
+    return sensor.command.resolution === 'path' && live.variantId === null
+        && live.state === 'missing-tool' && live.reason === 'tool-not-found';
+}
 function staticCompatibilityCheck(sensor, live) {
     if (!live)
         return { ok: false, detail: 'live compatibility unavailable' };
+    if (unobservableOnPath(sensor, live))
+        return null;
     if (live.variantId !== sensor.variantId) {
         return { ok: false, detail: `compatibility drift: initialized ${sensor.variantId}, resolved ${live.variantId ?? live.state}` };
     }
@@ -226,9 +257,11 @@ async function computeSensorStatus(cwd = process.cwd()) {
             checks[name] = sensor.enabled === false ? { ok: true, detail: 'disabled' }
                 : staticCompatibilityCheck(sensor, compatibility[name]) ?? checkStructuredCommand(sensor.command, packageRoot, sensor.assets);
         }
+        const uninitialized = uninitializedSensors(manifest, compatibility);
         return {
             overall: Object.keys(checks).length > 0 && Object.values(checks).every(check => check.ok) ? 'READY' : 'DEGRADED',
             pack: manifest.pack, checks,
+            ...(uninitialized ? { uninitialized } : {}),
             ...projectMetadata(project, 'project-sensors', sourceMeta.reason, { ...sourceMeta }),
         };
     }

package/dist/src/commands/sensors/unresolved.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeUnresolved = describeUnresolved;
+/**
+ * `sensor-a: missing-tool/tool-not-found; sensor-b: incompatible/...` — which
+ * sensor and why. Before #172 an unresolvable sensor produced one code for the
+ * whole pack, so an operator could not tell that the other sensors were fine.
+ *
+ * Its own module so the command wiring and `initSensors` share one formatting,
+ * and so neither has to import the other to get it.
+ */
+function describeUnresolved(unresolved) {
+    if (!unresolved || unresolved.length === 0)
+        return '';
+    return [...unresolved]
+        .sort((left, right) => left.sensor.localeCompare(right.sensor))
+        .map(item => `${item.sensor}: ${item.state}/${item.reason}`)
+        .join('; ');
+}

package/dist/src/commands/track/status.js

@@ -56,7 +56,7 @@ function aggregateTrackStatus(planRoot, plan) {
         const observed = (0, store_1.readJournal)(ref.worktreePath, ref.branch);
         tracks[ref.trackId] = {
             phase: ref.phase,
-            gate: (0, gate_1.computeTrackGate)(observed.state, observed.corrupt, fingerprintFor(ref.worktreePath)),
+            gate: (0, gate_1.computeTrackGate)(observed.state, observed.corrupt, fingerprintFor(ref.worktreePath), observed.absent),
         };
     }
     return { cohort: deriveCohortPhase(refs), tracks };

package/dist/src/commands/watch/supervisor.js

@@ -464,7 +464,7 @@ class Supervisor {
         if (freezing)
             return this.attemptFreeze();
         const r = (0, store_1.readJournal)(this.repoRoot, this.branch);
-        const gate = (0, gate_1.computeGate)(r.state, r.corrupt, this.fingerprintNow);
+        const gate = (0, gate_1.computeGate)(r.state, r.corrupt, this.fingerprintNow, r.absent);
         const liveJobs = r.state === null ? 1 : Object.values(r.state.jobs).filter((j) => LIVE.includes(j.executionState)).length;
         // R7/C3/C4 (Task 12): un journal de PLAN con cohorte de tracks NUNCA
         // declara `cycle.status = COMPLETE` por este camino genérico mientras
@@ -640,8 +640,11 @@ exports.Supervisor = Supervisor;
  *  generacion propia (cero huerfanos). */
 async function runSupervisorLoop(repoRoot, branch, cfg, spawner = (0, runner_1.defaultWrapperSpawner)(), trackRuntime, dispatchAdmission) {
     const r = (0, store_1.readJournal)(repoRoot, branch);
-    if (r.corrupt || r.state === null)
-        throw new Error('journal ausente o corrupto: corre `awm watch --init` primero');
+    if (r.corrupt || r.state === null) {
+        throw new Error(r.absent && !r.corrupt
+            ? 'journal ausente: corre `awm watch --init --plan <plan>` primero'
+            : 'journal corrupto o ilegible: inspecciona .awm/journal antes de continuar');
+    }
     if (r.state.schema !== 2 || !r.state.planBinding) {
         throw new Error('journal legacy o sin binding compacto: `awm watch` no puede ejecutar ni despachar trabajo');
     }

package/dist/src/core/journal/store.js

@@ -3,6 +3,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ABSENT_JOURNAL_DETAIL = void 0;
+exports.journalPresence = journalPresence;
 exports.assertJournalInitPaths = assertJournalInitPaths;
 exports.initJournal = initJournal;
 exports.initBoundJournal = initBoundJournal;
@@ -18,6 +20,16 @@ const types_1 = require("./types");
 const paths_1 = require("./paths");
 const identity_1 = require("../plan/identity");
 const validate_1 = require("../plan/validate");
+function journalPresence(read) {
+    if (read.corrupt)
+        return 'corrupt';
+    if (read.absent || read.state === null)
+        return 'absent';
+    return 'present';
+}
+/** What an absent journal actually needs, naming the command rather than leaving
+ *  the operator to infer it — and saying who this interlock is for. */
+exports.ABSENT_JOURNAL_DETAIL = 'journal ausente (no corrupto): el interlock desatendido exige un journal ligado — corre `awm watch --init --plan <plan>`. Un ciclo interactivo no requiere journal.';
 /** Schema 1 evoluciono de forma aditiva durante R1/R5. Normalizamos solamente
  * campos que antes no existian; evidencia legacy queda deliberadamente con
  * fingerprint vacio para que el gate la considere stale, nunca certificada.
@@ -188,28 +200,35 @@ function initBoundJournal(repoRoot, branch, binding, report) {
     }
 }
 /** Lectura corrupt-aware (R1.6): sintaxis invalida O shape invalido => corrupt:true.
- *  Los CONSUMIDORES deciden: consultas muestran 'corrupt'; gate/reconcile bloquean. */
+ *  Un journal que nunca se creo es `absent`, jamas `corrupt`.
+ *  Los CONSUMIDORES deciden: consultas muestran el estado; gate/reconcile bloquean. */
 function readJournal(repoRoot, branch) {
     const sp = (0, paths_1.statePath)(repoRoot, branch);
     let raw;
     try {
+        // Both tree assertions RETURN on ENOENT and throw a plain Error for an
+        // unsafe or linked segment, so the only ENOENT that can reach here comes
+        // from the state file itself. An unsafe tree is therefore never reported
+        // as absence — the same rule `watchJournalStatus` already states.
         assertJournalTree(repoRoot, branch);
         assertJournalFileNotSymlink(sp);
         raw = fs_1.default.readFileSync(sp, 'utf8');
     }
-    catch {
-        return { state: null, corrupt: true };
+    catch (error) {
+        return error.code === 'ENOENT'
+            ? { state: null, corrupt: false, absent: true }
+            : { state: null, corrupt: true, absent: false };
     }
     let parsed;
     try {
         parsed = normalizeSchemaOne(JSON.parse(raw));
     }
     catch {
-        return { state: null, corrupt: true, raw };
+        return { state: null, corrupt: true, absent: false, raw };
     }
     if (!(0, types_1.isWellFormedState)(parsed))
-        return { state: null, corrupt: true, raw };
-    return { state: parsed, corrupt: false, raw };
+        return { state: null, corrupt: true, absent: false, raw };
+    return { state: parsed, corrupt: false, absent: false, raw };
 }
 /** Escritura canonica: SOLO el supervisor la invoca (single-writer). CAS por
  *  revision monotonica: el snapshot que traes debe ser el vigente. */
@@ -219,6 +238,11 @@ function writeJournal(repoRoot, branch, state) {
     const current = readJournal(repoRoot, branch);
     if (current.corrupt)
         throw new Error('journal corrupto: no se escribe sobre corrupcion (R1.6)');
+    // Absence used to arrive here as `corrupt`, and this guard is what kept
+    // initialization create-only. Naming it explicitly preserves that exactly:
+    // only initJournal/initBoundJournal may bring a journal into existence.
+    if (current.absent)
+        throw new Error('journal inexistente: la creacion es de initJournal/initBoundJournal, no de writeJournal');
     if (current.state !== null && current.state.revision !== state.revision) {
         throw new Error(`revision desactualizada: disco=${current.state.revision} propuesta=${state.revision}`);
     }

package/dist/tests/commands/job/absent-vs-corrupt-journal.test.js

@@ -0,0 +1,134 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const gate_1 = require("../../../src/commands/job/gate");
+const query_1 = require("../../../src/commands/job/query");
+const store_1 = require("../../../src/core/journal/store");
+const paths_1 = require("../../../src/core/journal/paths");
+const types_1 = require("../../../src/core/journal/types");
+// #173. A journal that was never created is a different FACT from a damaged
+// one, and needs a different response: absence is resolved by
+// `awm watch --init --plan`, corruption by inspecting the file. `readJournal`
+// collapsed both into `corrupt: true`, so a healthy repository with no journal
+// told the operator its state file was unreadable.
+//
+// These are two separate cases with two separate assertions on purpose: a single
+// test on "not pass" would not distinguish them, which is how this survived.
+const BRANCH = 'main';
+describe('an absent journal is not a corrupt one', () => {
+    let repo;
+    let previous;
+    beforeEach(() => {
+        repo = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-173-'));
+        previous = { home: process.env.HOME, awmHome: process.env.AWM_HOME };
+        process.env.HOME = path_1.default.join(repo, 'operator-home');
+        process.env.AWM_HOME = path_1.default.join(repo, 'awm-home');
+    });
+    afterEach(() => {
+        for (const [key, value] of [['HOME', previous.home], ['AWM_HOME', previous.awmHome]]) {
+            if (value === undefined)
+                delete process.env[key];
+            else
+                process.env[key] = value;
+        }
+        fs_1.default.rmSync(repo, { recursive: true, force: true });
+    });
+    function writeState(body) {
+        fs_1.default.mkdirSync((0, paths_1.journalDir)(repo, BRANCH), { recursive: true });
+        fs_1.default.writeFileSync((0, paths_1.statePath)(repo, BRANCH), body);
+    }
+    it('reports a repository that never had a journal as absent, never corrupt', () => {
+        const read = (0, store_1.readJournal)(repo, BRANCH);
+        expect(read).toEqual({ state: null, corrupt: false, absent: true });
+        expect((0, store_1.journalPresence)(read)).toBe('absent');
+    });
+    it.each([
+        ['truncated JSON', '{"schema":2,"branch":"'],
+        ['well-formed JSON of the wrong shape', '{"nope":1}'],
+        ['an empty file', ''],
+    ])('still reports %s as corrupt, not absent', (_case, body) => {
+        writeState(body);
+        const read = (0, store_1.readJournal)(repo, BRANCH);
+        expect(read.corrupt).toBe(true);
+        expect(read.absent).toBe(false);
+        expect((0, store_1.journalPresence)(read)).toBe('corrupt');
+    });
+    // The adversarial case this change had to survive: `readFileSync` on a
+    // dangling symlink raises ENOENT, so a naive ENOENT check would report an
+    // attacker-placed link as an innocent absence. The symlink assertion runs
+    // first and throws without an errno, which is what keeps that impossible.
+    it('never reports a symlinked state file as absence, even a dangling one', () => {
+        fs_1.default.mkdirSync((0, paths_1.journalDir)(repo, BRANCH), { recursive: true });
+        fs_1.default.symlinkSync(path_1.default.join(repo, 'no-such-target'), (0, paths_1.statePath)(repo, BRANCH));
+        const read = (0, store_1.readJournal)(repo, BRANCH);
+        expect(read.corrupt).toBe(true);
+        expect(read.absent).toBe(false);
+    });
+    it('never reports a symlinked journal directory as absence', () => {
+        fs_1.default.mkdirSync(path_1.default.join(repo, 'elsewhere'), { recursive: true });
+        fs_1.default.mkdirSync(path_1.default.join(repo, '.awm'), { recursive: true });
+        fs_1.default.symlinkSync(path_1.default.join(repo, 'elsewhere'), path_1.default.join(repo, '.awm', 'journal'));
+        const read = (0, store_1.readJournal)(repo, BRANCH);
+        expect(read.corrupt).toBe(true);
+        expect(read.absent).toBe(false);
+    });
+    // Absence used to arrive at writeJournal as `corrupt`, and that is what kept
+    // journal creation exclusive to initJournal/initBoundJournal. Naming it must
+    // not have loosened that.
+    it('still refuses to create a journal through the write path', () => {
+        expect(() => (0, store_1.writeJournal)(repo, BRANCH, (0, types_1.emptyState)(BRANCH)))
+            .toThrow(/journal inexistente: la creacion es de initJournal/);
+        expect(fs_1.default.existsSync((0, paths_1.statePath)(repo, BRANCH))).toBe(false);
+    });
+    it('reports absence through the job queries without dereferencing a null state', () => {
+        expect((0, query_1.queryPs)(repo, BRANCH)).toEqual({ corruptState: false, journal: 'absent', jobs: [] });
+        expect((0, query_1.queryList)(repo, BRANCH)).toEqual({ corruptState: false, journal: 'absent', cycleStatus: null, jobs: [] });
+        expect((0, query_1.queryShow)(repo, BRANCH, 'j1')).toEqual({ corruptState: false, journal: 'absent', job: null });
+    });
+    it('reports corruption through the job queries with corruptState still true', () => {
+        writeState('{"schema":2,"branch":"');
+        expect((0, query_1.queryPs)(repo, BRANCH)).toEqual({ corruptState: true, journal: 'corrupt', jobs: [] });
+        expect((0, query_1.queryList)(repo, BRANCH)).toEqual({ corruptState: true, journal: 'corrupt', cycleStatus: null, jobs: [] });
+        expect((0, query_1.queryShow)(repo, BRANCH, 'j1')).toEqual({ corruptState: true, journal: 'corrupt', job: null });
+    });
+});
+describe('the gates name absence and still fail closed', () => {
+    const fingerprint = () => 'fp';
+    it('reports an absent journal as absent, and names the command that creates one', () => {
+        const gate = (0, gate_1.computeGate)(null, false, fingerprint, true);
+        expect(gate.pass).toBe(false);
+        expect(gate.reasons).toEqual([{ category: 'absent', detail: store_1.ABSENT_JOURNAL_DETAIL }]);
+        expect(gate.reasons[0].detail).toContain('awm watch --init --plan');
+        // The interlock has no plan binding to read an execution mode from when
+        // the journal is missing, so it does not certify on absence either.
+        expect(gate.reasons[0].detail).toContain('interactivo');
+    });
+    it('reports a corrupt journal as corrupt even when absence is also claimed', () => {
+        expect((0, gate_1.computeGate)(null, true, fingerprint, true).reasons)
+            .toEqual([expect.objectContaining({ category: 'corrupt' })]);
+    });
+    // Proves the 60 existing call sites are unchanged: without the new argument a
+    // null state still fails closed exactly as before.
+    it('keeps every caller that omits the new argument failing closed as corrupt', () => {
+        expect((0, gate_1.computeGate)(null, false, fingerprint).pass).toBe(false);
+        expect((0, gate_1.computeGate)(null, false, fingerprint).reasons)
+            .toEqual([expect.objectContaining({ category: 'corrupt' })]);
+    });
+    it('distinguishes the same two facts for a track gate', () => {
+        expect((0, gate_1.computeTrackGate)(null, false, fingerprint, true).reasons)
+            .toEqual([{ category: 'absent-state', detail: store_1.ABSENT_JOURNAL_DETAIL }]);
+        expect((0, gate_1.computeTrackGate)(null, true, fingerprint, true).reasons)
+            .toEqual([expect.objectContaining({ category: 'corrupt-state' })]);
+        expect((0, gate_1.computeTrackGate)(null, false, fingerprint).reasons)
+            .toEqual([expect.objectContaining({ category: 'corrupt-state' })]);
+    });
+    it('does not report absence for a journal that is present', () => {
+        const gate = (0, gate_1.computeGate)((0, types_1.emptyState)('main'), false, fingerprint, false);
+        expect(gate.reasons).not.toContainEqual(expect.objectContaining({ category: 'absent' }));
+    });
+});

package/dist/tests/commands/sensors/bootstrap.test.js

@@ -128,12 +128,16 @@ describe('planSensorBootstrap', () => {
         await (0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors', packageRoot: 'packages/web' });
         expect(live_1.resolveParsedPackCompatibility).toHaveBeenCalledWith(path_1.default.resolve(root, 'packages/web'), pack);
     });
-    it('blocks project-sensors when compatibility cannot select every declared sensor variant', async () => {
+    // #172 narrowed this: one unresolvable sensor no longer aborts a pack whose
+    // other sensors resolved (see partial-pack-bootstrap.test.ts). What still
+    // blocks is a pack where sensors apply and NONE of them resolve, which is a
+    // different condition from a pack with no applicable sensor at all.
+    it('blocks project-sensors when sensors apply and compatibility can select no variant at all', async () => {
         const variant = { id: 'eslint-9', command: { executable: 'eslint', resolution: 'node-modules-bin', args: ['.'] }, assets: [] };
         pack_source_1.listPackSources.mockReturnValue([source]);
         contract_1.parseSensorPack.mockReturnValue({ kind: 'v2', pack: { schemaVersion: 2, name: 'js-ts', sensors: { lint: { variants: [variant] } } } });
-        live_1.resolveParsedPackCompatibility.mockResolvedValue({ pack: { schemaVersion: 2, name: 'js-ts', sensors: { lint: { variants: [variant] } } }, sensors: { lint: { variantId: null } } });
-        await expect((0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' })).resolves.toMatchObject({ kind: 'blocked', reason: 'sensor-variant-unresolvable', changes: [] });
+        live_1.resolveParsedPackCompatibility.mockResolvedValue({ pack: { schemaVersion: 2, name: 'js-ts', sensors: { lint: { variants: [variant] } } }, sensors: { lint: { state: 'missing-tool', reason: 'tool-not-found', variantId: null } } });
+        await expect((0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' })).resolves.toMatchObject({ kind: 'blocked', reason: 'no-sensor-resolvable', changes: [] });
     });
     it('omits explicit-opt-in sensors that are not applicable while retaining mandatory gates', async () => {
         const variant = { id: 'main', command: { executable: 'tool', resolution: 'path', args: ['run'] }, assets: [] };

package/dist/tests/commands/sensors/index.test.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-jest.mock('@clack/prompts', () => ({ log: { success: jest.fn(), info: jest.fn(), error: jest.fn() } }));
+jest.mock('@clack/prompts', () => ({ log: { success: jest.fn(), info: jest.fn(), error: jest.fn(), warn: jest.fn() } }));
 jest.mock('picocolors', () => ({ green: (s) => s, yellow: (s) => s, red: (s) => s }));
 jest.mock('../../../src/commands/sensors/run', () => ({ runSensors: jest.fn() }));
 jest.mock('../../../src/commands/sensors/init', () => ({ initSensors: jest.fn() }));

package/dist/tests/commands/sensors/partial-pack-bootstrap.test.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+jest.mock('../../../src/commands/sensors/project', () => ({ resolveSensorProject: jest.fn() }));
+jest.mock('../../../src/commands/sensors/detection', () => ({ detectStack: jest.fn() }));
+jest.mock('../../../src/core/registries', () => ({ listRegistries: jest.fn(() => []) }));
+jest.mock('../../../src/commands/sensors/compatibility/pack-source', () => ({ listPackSources: jest.fn() }));
+jest.mock('../../../src/commands/sensors/compatibility/contract', () => ({ ...jest.requireActual('../../../src/commands/sensors/compatibility/contract'), parseSensorPack: jest.fn() }));
+jest.mock('../../../src/commands/sensors/compatibility/live', () => ({ resolveParsedPackCompatibility: jest.fn() }));
+jest.mock('../../../src/commands/sensors/compatibility/materialize', () => ({ materializePortableSensors: jest.fn() }));
+jest.mock('../../../src/commands/sensors/compatibility/safe-file', () => ({ writeProjectFile: jest.fn(), withProjectLease: jest.fn((_root, operation) => operation()) }));
+const bootstrap_1 = require("../../../src/commands/sensors/bootstrap");
+const unresolved_1 = require("../../../src/commands/sensors/unresolved");
+const project_1 = require("../../../src/commands/sensors/project");
+const detection_1 = require("../../../src/commands/sensors/detection");
+const pack_source_1 = require("../../../src/commands/sensors/compatibility/pack-source");
+const contract_1 = require("../../../src/commands/sensors/compatibility/contract");
+const live_1 = require("../../../src/commands/sensors/compatibility/live");
+// #172. One applicable sensor whose tool is absent used to abort the entire
+// manifest, including the sensors that DID resolve — so a project whose only gap
+// was semgrep could not configure sensors, could not pass preflight, and could
+// not be handed off. A missing tool is a gap in one sensor, not grounds to refuse
+// the pack.
+const root = '/project';
+const missing = { state: 'missing', projectRoot: root, manifestPath: `${root}/.awm/sensors.json` };
+const source = { path: '/registry/sensor-packs/js-ts/pack.json', content: '{}', registry: { name: 'baseline', remote: 'local', contentRoot: '/registry' } };
+const lintVariant = { id: 'eslint-10', command: { executable: 'eslint', resolution: 'node-modules-bin', args: ['.'] }, assets: [] };
+const securityVariant = { id: 'semgrep-js-ts', command: { executable: 'semgrep', resolution: 'path', args: ['--config', '.semgrep.awm.yml'] }, assets: ['.semgrep.awm.yml'] };
+function resolvedLint() {
+    return { state: 'certified', reason: 'range-and-probe', variantId: 'eslint-10', toolVersion: '10.4.1', runtimeVersion: '24.0.0', certifiedRange: '>=10 <11', evidence: [] };
+}
+function unresolvedSensor(state, reason) {
+    return { state, reason, variantId: null, toolVersion: null, runtimeVersion: null, certifiedRange: null, evidence: [] };
+}
+/** Wire the mocked pack + live resolution for one planning run. */
+function pack(sensors, live) {
+    const parsed = { schemaVersion: 2, name: 'js-ts', sensors };
+    pack_source_1.listPackSources.mockReturnValue([source]);
+    contract_1.parseSensorPack.mockReturnValue({ kind: 'v2', pack: parsed });
+    live_1.resolveParsedPackCompatibility.mockResolvedValue({ pack: parsed, sensors: live });
+}
+describe('project-sensors bootstrap with a partially resolvable pack', () => {
+    beforeEach(() => {
+        jest.clearAllMocks();
+        project_1.resolveSensorProject.mockReturnValue(missing);
+        detection_1.detectStack.mockReturnValue({ pack: 'js-ts', indicators: ['package.json'] });
+    });
+    it('writes the sensors that resolved and reports by name the applicable one that did not', async () => {
+        pack({ lint: { variants: [lintVariant] }, security: { variants: [securityVariant] } }, { lint: resolvedLint(), security: unresolvedSensor('missing-tool', 'tool-not-found') });
+        const plan = await (0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' });
+        expect(plan.kind).toBe('create');
+        const created = plan;
+        const manifest = created.manifest;
+        // The manifest contents are the assertion, not the exit code.
+        expect(Object.keys(manifest.sensors)).toEqual(['lint']);
+        expect(manifest.sensors.lint.variantId).toBe('eslint-10');
+        expect(created.unresolved).toEqual([{ sensor: 'security', state: 'missing-tool', reason: 'tool-not-found' }]);
+        // Nothing is invented for the skipped sensor: no entry, and none of its assets.
+        expect(created.changes.map(change => change.path)).toEqual(['.awm/sensors.json']);
+    });
+    it('carries a sensor with no manifest entry rather than a disabled entry with fabricated evidence', async () => {
+        pack({ lint: { variants: [lintVariant] }, security: { variants: [securityVariant] } }, { lint: resolvedLint(), security: unresolvedSensor('incompatible', 'no-operational-variant') });
+        const plan = await (0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' });
+        const manifest = plan.manifest;
+        expect(manifest.sensors).not.toHaveProperty('security');
+        expect(JSON.stringify(manifest)).not.toContain('semgrep');
+    });
+    it('still blocks, naming every sensor, when sensors apply and none of them resolve', async () => {
+        pack({ lint: { variants: [lintVariant] }, security: { variants: [securityVariant] } }, { lint: unresolvedSensor('missing-tool', 'tool-not-found'), security: unresolvedSensor('missing-tool', 'tool-not-found') });
+        const plan = await (0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' });
+        expect(plan).toMatchObject({ kind: 'blocked', reason: 'no-sensor-resolvable', changes: [] });
+        expect(plan.unresolved).toEqual([
+            { sensor: 'lint', state: 'missing-tool', reason: 'tool-not-found' },
+            { sensor: 'security', state: 'missing-tool', reason: 'tool-not-found' },
+        ]);
+    });
+    it('keeps the distinct honest-empty manifest when the pack declares no applicable sensor', async () => {
+        // This is NOT the same condition as "nothing resolved": it is the registry
+        // having no sensor for this stack, which preflight reports with its own
+        // remedy. Writing an empty manifest for an unresolvable pack would collide
+        // with that signal.
+        pack({ lint: { variants: [lintVariant] } }, { lint: unresolvedSensor('not-applicable', 'applicability-not-met') });
+        const plan = await (0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' });
+        const manifest = plan.manifest;
+        expect(plan.kind).toBe('create');
+        expect(manifest.sensors).toEqual({});
+        expect(plan.unresolved).toBeUndefined();
+    });
+    it('omits the unresolved field entirely when every applicable sensor resolved', async () => {
+        pack({ lint: { variants: [lintVariant] } }, { lint: resolvedLint() });
+        const plan = await (0, bootstrap_1.planSensorBootstrap)(root, { mode: 'project-sensors' });
+        expect(plan.unresolved).toBeUndefined();
+    });
+});
+describe('describeUnresolved', () => {
+    it('names each sensor with its state and reason, in a stable order', () => {
+        expect((0, unresolved_1.describeUnresolved)([
+            { sensor: 'security', state: 'missing-tool', reason: 'tool-not-found' },
+            { sensor: 'depcheck', state: 'incompatible', reason: 'no-operational-variant' },
+        ])).toBe('depcheck: incompatible/no-operational-variant; security: missing-tool/tool-not-found');
+    });
+    it('is empty for nothing unresolved, so callers add no punctuation for an empty gap', () => {
+        expect((0, unresolved_1.describeUnresolved)(undefined)).toBe('');
+        expect((0, unresolved_1.describeUnresolved)([])).toBe('');
+    });
+});

package/dist/tests/commands/sensors/partial-pack-status.test.js

@@ -0,0 +1,174 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const status_1 = require("../../../src/commands/sensors/status");
+const checks_1 = require("../../../src/commands/preflight/checks");
+// #172. `checks` only ever covered what the manifest declares, so a pack sensor
+// that applies to this project and could not be initialized was simply absent —
+// indistinguishable from one the pack never applied. These tests hold the gap
+// visible and attributable in every `awm sensors status`, not only in the output
+// of the `init` that skipped it.
+//
+// Isolated HOME/AWM_HOME per test: nothing here may read or write the real
+// `~/.awm`, which belongs to the installer.
+const ESLINT_VARIANT = {
+    id: 'eslint-10',
+    priority: 100,
+    requirements: { tool: 'eslint', toolRange: '>=10.0.0 <12.0.0', runtime: 'node', runtimeRange: '>=20.0.0' },
+    certifiedRange: '>=10.0.0 <11.0.0',
+    command: { executable: 'eslint', resolution: 'node-modules-bin', args: ['.'] },
+    assets: [],
+    formatter: 'eslint',
+    probe: { kind: 'config-present' },
+};
+const SEMGREP_VARIANT = {
+    id: 'semgrep-js-ts',
+    priority: 10,
+    requirements: { tool: 'semgrep', toolRange: '>=1.0.0', runtime: 'node', runtimeRange: '>=20.0.0' },
+    certifiedRange: '>=1.0.0',
+    command: { executable: 'semgrep', resolution: 'path', args: ['--config', '.semgrep.awm.yml'] },
+    assets: [],
+    formatter: 'semgrep',
+    probe: { kind: 'version' },
+};
+function packJson(sensors) {
+    const detector = Object.keys(sensors)[0];
+    return JSON.stringify({
+        schemaVersion: 2, name: 'js-ts', description: '#172 fixture', detects: ['package.json'], sensors,
+        coverage: {
+            schemaVersion: 1,
+            classes: { 'lint-errors': { description: 'Findings', detectors: [{ sensor: detector }], remedy: { summary: 'Configure', command: 'awm sensors init --pack js-ts' } } },
+        },
+    });
+}
+function lintEntry() {
+    return {
+        enabled: true, variantId: 'eslint-10',
+        command: { executable: 'eslint', resolution: 'node-modules-bin', args: ['.'] },
+        initializedCompatibility: { state: 'certified', reason: 'range-and-probe', variantId: 'eslint-10', toolVersion: '10.4.1', runtimeVersion: '24.0.0', certifiedRange: '>=10.0.0 <11.0.0', evidence: [] },
+    };
+}
+function semgrepEntry() {
+    return {
+        enabled: true, variantId: 'semgrep-js-ts',
+        command: { executable: 'semgrep', resolution: 'path', args: ['--config', '.semgrep.awm.yml'] },
+        initializedCompatibility: { state: 'compatible-unverified', reason: 'operational-range-and-probe', variantId: 'semgrep-js-ts', toolVersion: '1.173.0', runtimeVersion: '24.0.0', certifiedRange: '>=1.0.0', evidence: [] },
+    };
+}
+describe('sensor status for a partially initialized pack', () => {
+    let root;
+    let project;
+    let pathDir;
+    let previous;
+    beforeEach(() => {
+        root = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-172-'));
+        project = path_1.default.join(root, 'project');
+        pathDir = path_1.default.join(root, 'bin');
+        const registry = path_1.default.join(root, 'awm-home', 'registries', 'baseline', 'sensor-packs', 'js-ts');
+        fs_1.default.mkdirSync(registry, { recursive: true });
+        fs_1.default.mkdirSync(path_1.default.join(project, '.awm'), { recursive: true });
+        fs_1.default.mkdirSync(pathDir, { recursive: true });
+        fs_1.default.writeFileSync(path_1.default.join(root, 'awm-home', 'registries.json'), JSON.stringify([{ name: 'baseline', remote: 'fixture' }]));
+        fs_1.default.writeFileSync(path_1.default.join(project, 'package.json'), JSON.stringify({ name: 'fixture-172', private: true }));
+        fs_1.default.writeFileSync(path_1.default.join(project, 'eslint.config.mjs'), 'export default [];\n');
+        fs_1.default.mkdirSync(path_1.default.join(project, 'node_modules', 'eslint'), { recursive: true });
+        fs_1.default.writeFileSync(path_1.default.join(project, 'node_modules', 'eslint', 'package.json'), JSON.stringify({ name: 'eslint', version: '10.4.1' }));
+        fs_1.default.mkdirSync(path_1.default.join(project, 'node_modules', '.bin'), { recursive: true });
+        fs_1.default.writeFileSync(path_1.default.join(project, 'node_modules', '.bin', 'eslint'), '');
+        fs_1.default.writeFileSync(path_1.default.join(registry, 'pack.json'), packJson({
+            lint: { applicability: { allFiles: ['package.json'] }, variants: [ESLINT_VARIANT] },
+            security: { applicability: { allFiles: ['package.json'] }, variants: [SEMGREP_VARIANT] },
+        }));
+        previous = { home: process.env.HOME, awmHome: process.env.AWM_HOME, path: process.env.PATH };
+        process.env.HOME = path_1.default.join(root, 'operator-home');
+        process.env.AWM_HOME = path_1.default.join(root, 'awm-home');
+        process.env.PATH = pathDir;
+    });
+    afterEach(() => {
+        for (const [key, value] of [['HOME', previous.home], ['AWM_HOME', previous.awmHome], ['PATH', previous.path]]) {
+            if (value === undefined)
+                delete process.env[key];
+            else
+                process.env[key] = value;
+        }
+        fs_1.default.rmSync(root, { recursive: true, force: true });
+    });
+    function writeManifest(sensors) {
+        fs_1.default.writeFileSync(path_1.default.join(project, '.awm', 'sensors.json'), JSON.stringify({
+            schemaVersion: 3, mode: 'project-sensors', pack: 'js-ts', source: { registry: 'baseline' }, sensors,
+        }));
+    }
+    function installOnPath(tool) {
+        const file = path_1.default.join(pathDir, tool);
+        fs_1.default.writeFileSync(file, '#!/bin/sh\nexit 0\n');
+        fs_1.default.chmodSync(file, 0o755);
+    }
+    it('names the applicable sensor that has no manifest entry, with its live reason', async () => {
+        writeManifest({ lint: lintEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(Object.keys(status.checks)).toEqual(['lint']);
+        expect(status.uninitialized).toEqual({ security: { state: 'missing-tool', reason: 'tool-not-found' } });
+    });
+    it('does not let an uninitialized sensor change the verdict, which stays a gate-policy decision', async () => {
+        writeManifest({ lint: lintEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(status.overall).toBe('READY');
+    });
+    it('omits the field when every applicable pack sensor has an entry', async () => {
+        installOnPath('semgrep');
+        writeManifest({ lint: lintEntry(), security: semgrepEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(status.uninitialized).toBeUndefined();
+    });
+    it('reports a not-applicable pack sensor as neither a check nor a gap', async () => {
+        const registry = path_1.default.join(root, 'awm-home', 'registries', 'baseline', 'sensor-packs', 'js-ts');
+        fs_1.default.writeFileSync(path_1.default.join(registry, 'pack.json'), packJson({
+            lint: { applicability: { allFiles: ['package.json'] }, variants: [ESLINT_VARIANT] },
+            security: { applicability: { allFiles: ['never-present.toml'] }, variants: [SEMGREP_VARIANT] },
+        }));
+        writeManifest({ lint: lintEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(status.uninitialized).toBeUndefined();
+        expect(status.checks).not.toHaveProperty('security');
+    });
+    it('preflight names the gap and still passes the manifest check, so one missing tool is not a dead end', async () => {
+        fs_1.default.mkdirSync(path_1.default.join(project, '.git'));
+        writeManifest({ lint: lintEntry() });
+        const report = await (0, checks_1.preflight)(project);
+        const manifest = report.checks.find(check => check.id === 'manifest');
+        expect(manifest).toMatchObject({ ok: true });
+        expect(manifest?.detail).toContain('1 applicable sensor(s) not initialized: security');
+    });
+    // `discoverProjectEvidence` is called here without `pathToolVersion` because
+    // status never executes, so a `resolution: 'path'` tool is invisible to it.
+    // Calling that "drift" asserts something this command did not measure.
+    it('does not claim drift for a PATH tool it cannot observe, and defers to the PATH check', async () => {
+        installOnPath('semgrep');
+        fs_1.default.writeFileSync(path_1.default.join(project, '.semgrep.awm.yml'), 'rules: []\n');
+        writeManifest({ security: semgrepEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(status.checks.security).toEqual({ ok: true, detail: 'semgrep' });
+        expect(status.overall).toBe('READY');
+    });
+    it('still fails a PATH sensor whose executable is genuinely absent from PATH', async () => {
+        writeManifest({ security: semgrepEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(status.checks.security.ok).toBe(false);
+        expect(status.checks.security.detail).toMatch(/semgrep not found in PATH/);
+    });
+    it('still reports real drift when the live resolution selects a different variant', async () => {
+        const registry = path_1.default.join(root, 'awm-home', 'registries', 'baseline', 'sensor-packs', 'js-ts');
+        fs_1.default.writeFileSync(path_1.default.join(registry, 'pack.json'), packJson({
+            lint: { applicability: { allFiles: ['package.json'] }, variants: [{ ...ESLINT_VARIANT, id: 'eslint-10-flat' }] },
+        }));
+        writeManifest({ lint: lintEntry() });
+        const status = await (0, status_1.computeSensorStatus)(project);
+        expect(status.checks.lint.ok).toBe(false);
+        expect(status.checks.lint.detail).toMatch(/compatibility drift: initialized eslint-10, resolved eslint-10-flat/);
+    });
+});

package/dist/tests/commands/track/status.test.js

@@ -83,7 +83,7 @@ describe('aggregateTrackStatus — agregado read-only (R9.5, R9.6)', () => {
         expect(currentPlanState.tracks[0]).not.toHaveProperty('gate');
         expect(fs_1.default.readFileSync((0, paths_1.statePath)(planRoot, planBranch), 'utf8')).toBe(planBefore);
     });
-    test('journal de track corrupto/ausente nunca se descarta en silencio: gate rojo con corrupt-state', () => {
+    test('journal de track ausente nunca se descarta en silencio: gate rojo con absent-state', () => {
         // ni siquiera se inicializa el journal del segundo track: readJournal
         // sobre un directorio sin state.json => corrupt:true (R1.6).
         const missingTrackRoot = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-status-missing-'));
@@ -93,7 +93,10 @@ describe('aggregateTrackStatus — agregado read-only (R9.5, R9.6)', () => {
             (0, store_1.writeJournal)(planRoot, planBranch, planState);
             const out = (0, status_1.aggregateTrackStatus)(planRoot, (0, store_1.readJournal)(planRoot, planBranch).state);
             expect(out.tracks.ghost.gate.pass).toBe(false);
-            expect(out.tracks.ghost.gate.reasons).toEqual([{ category: 'corrupt-state', detail: expect.any(String) }]);
+            // #173: the track journal here is ABSENT, not damaged. The gate is
+            // still red — it is never discarded in silence — but it now names the
+            // fact it observed instead of claiming corruption.
+            expect(out.tracks.ghost.gate.reasons).toEqual([{ category: 'absent-state', detail: expect.any(String) }]);
         }
         finally {
             fs_1.default.rmSync(missingTrackRoot, { recursive: true, force: true });

package/dist/tests/commands/watch/watch-init.test.js

@@ -180,7 +180,10 @@ describe('watch --init: plan-vs-repo mecanico', () => {
     test('watch --init --plan bloquea un plan no valido antes de crear journal', () => {
         const invalid = { state: 'invalid', diagnostics: [{ code: 'PLAN_SHAPE', message: 'bad' }] };
         expect(() => (0, init_1.initWatch)(repo, 'rama', { path: 'docs/plan.md', report: invalid })).toThrow(/válido/i);
-        expect((0, store_1.readJournal)(repo, 'rama').corrupt).toBe(true);
+        // #173: this asserted `.corrupt` as a proxy for "no journal was created",
+        // which is the exact confusion that issue is about. The fact it means is
+        // absence, and that is now what it says.
+        expect((0, store_1.readJournal)(repo, 'rama')).toMatchObject({ state: null, corrupt: false, absent: true });
     });
     test('watch --init --plan rechaza un plan interactivo antes de crear un binding desatendido', () => {
         const interactive = { ...validPlan('a'), executionMode: 'interactivo' };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-workflow-manager",
-  "version": "9.11.2",
+  "version": "9.11.4",
   "main": "dist/src/index.js",
   "bin": {
     "awm": "./dist/src/index.js"