devflow-kit 3.0.1 → 3.2.0

package/dist/cli/commands/init.js

@@ -12,7 +12,7 @@ import { getLedgerRoot } from '../../core/ledger-root.js';
 import { installViaFileCopy, composeScripts } from '../../targets/claude-code/installer.js';
 import { formatOverlaySummary, formatSkillScopeSummary, formatTrackerAssetSummary, isPluginListUnchanged } from './install-report.js';
 import { convergeTrackerArtifacts } from '../../targets/claude-code/tracker-install.js';
-import { installSettings, installManagedSettings, installClaudeignore, discoverProjectGitRoots, ensureDevflowGitignore, applyUserSecurityDenyList, detectDenyState, resolveSecurityAction, assertHistoricalDenySuperset, loadTemplateDenyEntries, stripUserSecurityDenyList, } from '../../targets/claude-code/post-install.js';
+import { installSettings, installManagedSettings, installClaudeignore, hasClaudeignore, discoverProjectGitRoots, ensureDevflowGitignore, applyUserSecurityDenyList, detectDenyState, resolveSecurityAction, assertHistoricalDenySuperset, loadTemplateDenyEntries, stripUserSecurityDenyList, } from '../../targets/claude-code/post-install.js';
 import { DEVFLOW_PLUGINS, LEGACY_COMMAND_NAMES, LEGACY_RULE_NAMES, buildAssetMaps, buildScopedSkillsMap, buildRulesMap, partitionSelectablePlugins, WORKFLOW_ORDER, parsePluginSelection, resolveFeatureRedirect } from '../../core/plugins.js';
 import { LEGACY_SKILL_NAMES } from '../../targets/claude-code/legacy.js';
 import { detectPlatform, detectShell, getProfilePath, getSafeDeleteInfo, hasSafeDelete } from '../../core/safe-delete.js';
@@ -22,7 +22,7 @@ import { convergeMemoryHooks, drainMemoryQueue } from './memory.js';
 import { addCaptureHooks, removeCaptureHooks } from './capture.js';
 import { removeDreamHook } from './legacy-hooks.js';
 import { addProxyHooks, removeProxyHooks, applyProxyEnv, stripProxyEnv, runProxyPreflight, buildRealPreflightDeps } from './proxy.js';
-import { reapplyAgentMapping, readAgentMapping } from '../../core/agent-models.js';
+import { reapplyAgentMapping, readAgentMapping, hasAgentMappingEntries } from '../../core/agent-models.js';
 import { readProxyState, writeProxyState, buildProxyState, buildRoutingConfigJson, DEFAULT_PROXY_PORT, proxyJsonExists } from '../../core/proxy-state.js';
 import { stripDevflowTeammateModeFromJson } from '../../core/teammate-mode-cleanup.js';
 // Settings/HookMatcher types used by hook utilities — each in their own module
@@ -34,6 +34,7 @@ import { addContextHook, removeContextHook, hasContextHook } from './context.js'
 import { writeSettingsFileAtomic } from '../../core/fs-atomic.js';
 import { writeManagedConfig, readConfigIfPresent, DEFAULT_CONFIG } from '../../core/feature-config.js';
 import { drainLearningQueue } from '../../core/learning-queue-cleanup.js';
+import { formatRefusedDrain } from '../../core/queue-drain.js';
 import { removeManagedDenyList, describeManagedDenyRemoval } from './security.js';
 import { resolveInitSeed, applyCliToggles, resolveResetGatedInputs, resolvePluginsToInstall } from './init-seed.js';
 import { parseFrameworkList, normalizeFrameworks } from '../../core/compliance.js';
@@ -55,7 +56,7 @@ import { getPackageRoot } from '../../core/paths.js';
 /**
  * D32/D35: Orchestrates the init-level migration-runner seam.
  *
- * Computes the project list with the D37 fallback rule:
+ * Computes the project list with the D37 fallback rule ({@link projectRoots}):
  *   1. Use discoveredProjects when non-empty.
  *   2. Fall back to [gitRoot] when discoveredProjects is empty and gitRoot is set.
  *   3. Run with no per-project targets when both are absent (global-only; per-project
@@ -70,8 +71,7 @@ import { getPackageRoot } from '../../core/paths.js';
  * this helper testable without real filesystem migration state.
  */
 export async function runMigrationsWithFallback(discoveredProjects, gitRoot, devflowDir, logger, verbose, runner) {
-    const projectsForMigration = discoveredProjects.length > 0 ? discoveredProjects : (gitRoot ? [gitRoot] : []);
-    const migrationResult = await runner({ devflowDir }, projectsForMigration);
+    const migrationResult = await runner({ devflowDir }, projectRoots(discoveredProjects, gitRoot));
     reportMigrationResult(migrationResult, logger, verbose);
     return migrationResult;
 }
@@ -84,7 +84,7 @@ export async function runMigrationsWithFallback(discoveredProjects, gitRoot, dev
  * or command still loading in Claude Code with no diagnostic at all. Both outcomes
  * have to reach the summary.
  *
- * Pure function — returns lines, logs nothing (applies ADR-013).
+ * Pure function — returns lines, logs nothing.
  */
 export function formatSweepSummary(report) {
     const lines = [];
@@ -119,6 +119,9 @@ export function formatSweepSummary(report) {
 function logSummaryLines(lines) {
     for (const line of lines) {
         switch (line.level) {
+            case 'success':
+                p.log.success(line.message);
+                break;
             case 'info':
                 p.log.info(line.message);
                 break;
@@ -144,6 +147,81 @@ export function classifySafeDeleteState(installedVersion, currentVersion) {
         return 'outdated';
     return 'missing';
 }
+/**
+ * The project roots init writes per-project files into and migrates (D37): every
+ * project discovered from Claude's history, else the current repository, else
+ * none. Pure.
+ */
+export function projectRoots(discoveredProjects, gitRoot) {
+    if (discoveredProjects.length > 0)
+        return [...discoveredProjects];
+    return gitRoot ? [gitRoot] : [];
+}
+/**
+ * The Recommended summary's `.claudeignore` row.
+ *
+ * D-INIT-REAL-OUTCOME: init's summary and status lines state what this run does,
+ * decided from the state it acts on rather than printed whatever happens, and
+ * point only at a step the user can still take. The summary prints before the
+ * install runs, so this row is decided from whether each targeted project
+ * already holds a `.claudeignore` (hasClaudeignore, which matches the install's
+ * exclusive create): one without it gets one, so the row says `created`; when
+ * all have one, `already present`; when the run targets no project, `skipped`.
+ * formatSafeDeleteStatus applies the same rule to safe-delete.
+ *
+ * Pure function.
+ *
+ * @param present - for each project the run targets, whether it already holds a
+ *   `.claudeignore`; empty when the run targets none.
+ */
+export function resolveClaudeignoreOutcome(present) {
+    if (present.length === 0)
+        return 'skipped';
+    return present.every(Boolean) ? 'already present' : 'created';
+}
+/** The Recommended summary's safe-delete row for what the run does to the block; a run that leaves it alone adds none. */
+const SAFE_DELETE_SUMMARY_ROW = {
+    install: 'Safe delete:     installed',
+    upgrade: 'Safe delete:     upgraded',
+    skip: '',
+};
+/**
+ * What init says about safe-delete once the install has run (D-INIT-REAL-OUTCOME).
+ *
+ * The outcome comes first: the block this run installed or upgraded, or the
+ * current block it found in place. Failing an outcome, the one step left to the
+ * user is installing the platform's trash command, which init cannot do for
+ * them. A non-interactive run always takes the Recommended path, which installs
+ * or upgrades the block itself, so its outcome is all there is to report.
+ *
+ * Pure function — returns lines, logs nothing.
+ *
+ * @param state - The profile's block before this run, or null when no profile was
+ *   checked (the trash command is missing, or the shell has no profile init writes).
+ */
+export function formatSafeDeleteStatus(input) {
+    const { profilePath, info } = input;
+    if (profilePath !== null) {
+        const restart = { level: 'info', message: 'Restart your shell or run: ' + color.cyan(`source ${profilePath}`) };
+        if (input.action === 'install')
+            return [{ level: 'success', message: `Safe-delete installed to ${color.dim(profilePath)}` }, restart];
+        if (input.action === 'upgrade')
+            return [{ level: 'success', message: `Safe-delete upgraded in ${color.dim(profilePath)}` }, restart];
+        if (input.state === 'current')
+            return [{ level: 'info', message: `Safe-delete already configured in ${color.dim(profilePath)}` }];
+    }
+    if (input.available || info.installHint === null)
+        return [];
+    if (!input.interactive) {
+        return [{ level: 'info', message: `Protect against accidental ${color.red('rm -rf')}: ${color.cyan(info.installHint)}` }];
+    }
+    if (profilePath === null)
+        return [];
+    return [
+        { level: 'info', message: `Install ${color.cyan(info.command ?? 'trash')} first: ${color.dim(info.installHint)}` },
+        { level: 'info', message: `Then re-run ${color.cyan('devflow init')} to auto-configure safe-delete.` },
+    ];
+}
 export { addContextHook, removeContextHook, hasContextHook };
 /**
  * Combine workflow and language selections into a single plugin list.
@@ -194,7 +272,8 @@ export function resolveComplianceInitState(complianceOption, seedFrameworks) {
     return undefined;
 }
 // Re-export formatComplianceSummary from compliance-prompts.ts so existing test imports
-// (tests/init-logic.test.ts:1615 — imports from '../src/cli/commands/init.js') keep resolving.
+// (the 'formatComplianceSummary' suite in tests/init-logic.test.ts imports it from
+// '../src/cli/commands/init.js') keep resolving.
 export { formatComplianceSummary } from './compliance-prompts.js';
 /**
  * Parse the --tracker CLI option into a tracker override.
@@ -222,7 +301,7 @@ export function resolveTrackerInitState(trackerOption) {
 /**
  * The outcome line for a provider that arrived as `--tracker <id>`.
  *
- * D-TRACKER-CLI-SURFACE [PF-029]: the Advanced path prints no end-of-wizard
+ * D-TRACKER-CLI-SURFACE: the Advanced path prints no end-of-wizard
  * summary, and `--tracker` suppresses the wizard step that would otherwise
  * print one, so the CLI-override arm is the only place the selection can
  * surface there. Without this line `devflow init --advanced --tracker jira`
@@ -255,7 +334,7 @@ export function buildTrackerLifecycleIO() {
  *
  * D-TRACKER-CONVERGE: the manifest write and the tracker file-lifecycle owners
  * are ONE unit because their relative order is the invariant, not an
- * implementation detail (PF-015). The manifest write is explicitly failable —
+ * implementation detail. The manifest write is explicitly failable —
  * init must not abort on it — so converging the sentinel ahead of it leaves the
  * two disagreeing in both directions: github→jira writes a sentinel naming a
  * provider the manifest never records, and jira→github removes the sentinel while
@@ -268,7 +347,7 @@ export function buildTrackerLifecycleIO() {
  * taken as a separate argument, so there is exactly one binding and the sentinel
  * cannot name a value other than the one on disk.
  *
- * Every step reports rather than aborts (PF-009's isolation posture): a
+ * Every step reports rather than aborts: a
  * feature-state change must never fail `devflow init`.
  */
 export async function persistManifestThenConvergeTracker(opts) {
@@ -302,7 +381,7 @@ export async function persistManifestThenConvergeTracker(opts) {
         messages.push({ level: 'warn', text });
     // D-TRACKER-PARALLEL: the two owners touch disjoint files — the attempt
     // counters and the sentinel — depend on nothing the other writes, and both
-    // report through TrackerResult instead of throwing (PF-014), so they run
+    // report through TrackerResult instead of throwing, so they run
     // concurrently and their warnings are pushed in a fixed order regardless of
     // which settles first.
     const [rearm, sentinel] = await Promise.all([
@@ -343,14 +422,25 @@ export async function persistManifestThenConvergeTracker(opts) {
  * D-LEDGER-MAIN-WORKTREE: each queue drains where the hooks write it — memory at
  * this checkout's toplevel (`gitRoot`), learning at the ledger root (`ledgerRoot`,
  * getLedgerRoot), which in a linked worktree is the main checkout.
+ *
+ * Returns one warning for each drain refused because a folder on the way to its
+ * queue is a symbolic link (D-CLI-NO-SYMLINK); the caller prints them.
  */
 export async function drainDisabledFeatureQueues(opts, io = { drainMemoryQueue, drainLearningQueue }) {
     if (!opts.manifestWritten)
-        return;
-    if (!opts.memoryEnabled && opts.gitRoot !== null)
-        await io.drainMemoryQueue(opts.gitRoot);
-    if (!opts.learningEnabled && opts.ledgerRoot !== null)
-        await io.drainLearningQueue(opts.ledgerRoot);
+        return [];
+    const refused = [];
+    if (!opts.memoryEnabled && opts.gitRoot !== null) {
+        const memory = await io.drainMemoryQueue(opts.gitRoot);
+        if (!memory.drained)
+            refused.push(formatRefusedDrain('memory', memory.linkedFolder));
+    }
+    if (!opts.learningEnabled && opts.ledgerRoot !== null) {
+        const learning = await io.drainLearningQueue(opts.ledgerRoot);
+        if (!learning.drained)
+            refused.push(formatRefusedDrain('learning', learning.linkedFolder));
+    }
+    return refused;
 }
 /**
  * The manifest `devflow init --hud-only` writes. Pure — never mutates `existing`.
@@ -361,7 +451,7 @@ export async function drainDisabledFeatureQueues(opts, io = { drainMemoryQueue,
  * earlier shape rewrote the whole record as a HUD-only fresh install (ambient,
  * memory, learning, knowledge, rules and proxy all `false`, plugins `[]`) while
  * leaving those features' artifacts on disk: the record stopped describing the
- * machine, the next re-init seeded every feature off (ADR-014), and with
+ * machine, the next re-init seeded every feature off, and with
  * memory/learning/knowledge switched by the manifest alone
  * (D-FEATURES-NARROW-ONLY) a HUD install would have really disabled them
  * everywhere. `version` is kept too: --hud-only reinstalls no plugin, and a
@@ -759,7 +849,7 @@ export const initCommand = new Command('init')
     // modePromptShown: true only when the Setup-mode p.select actually ran (i.e. the user
     // was shown a live interactive prompt and made an active choice). Used by
     // shouldRunComplianceStep to preserve the promptless contracts of --recommended and !isTTY
-    // without re-checking the mode name (per PF-029).
+    // without re-checking the mode name.
     let modePromptShown = false;
     let useRecommended;
     if (options.recommended) {
@@ -821,6 +911,8 @@ export const initCommand = new Command('init')
     let claudeignoreEnabled = !!gitRoot;
     let discoveredProjects = [];
     let safeDeleteAction = 'skip';
+    // The profile's block before this run; null when no profile was checked.
+    let safeDeleteState = null;
     let safeDeleteBlock = null;
     // Security mode is resolved from flag + manifest + detected reality via resolveSecurityAction.
     // The final value is written to the manifest and consumed by the dedicated security step.
@@ -877,7 +969,7 @@ export const initCommand = new Command('init')
         // ── Recommended path ──
         // B4: compliance wizard step — runs only when the Setup-mode prompt actually ran
         // (modePromptShown=true), preserving the promptless contracts of --recommended and !isTTY.
-        // shouldRunComplianceStep gates on modePromptShown rather than the mode name (PF-029).
+        // shouldRunComplianceStep gates on modePromptShown rather than the mode name.
         // Re-init never routes here (seedManifest !== null → banner path → Advanced), so this path
         // always sees fresh-install defaults.
         let wizardCompliance;
@@ -949,14 +1041,17 @@ export const initCommand = new Command('init')
         ]);
         discoveredProjects = discoveredResult;
         if (needsVersionCheck) {
-            const state = classifySafeDeleteState(installedVersionResult, SAFE_DELETE_BLOCK_VERSION);
-            if (state === 'current')
+            safeDeleteState = classifySafeDeleteState(installedVersionResult, SAFE_DELETE_BLOCK_VERSION);
+            if (safeDeleteState === 'current')
                 safeDeleteAction = 'skip';
-            else if (state === 'outdated')
+            else if (safeDeleteState === 'outdated')
                 safeDeleteAction = 'upgrade';
             else
                 safeDeleteAction = 'install';
         }
+        // D-INIT-REAL-OUTCOME: the summary prints before the install runs, so its
+        // .claudeignore row comes from what each project the install targets holds.
+        const claudeignorePresent = await Promise.all((claudeignoreEnabled ? projectRoots(discoveredProjects, gitRoot) : []).map(hasClaudeignore));
         // Print summary
         const defaultFlagCount = countActiveFlags(enabledFlags);
         const complianceSummary = formatComplianceSummary(complianceEnabled, complianceFrameworks);
@@ -975,8 +1070,8 @@ export const initCommand = new Command('init')
             `Tracker:         ${formatTrackerSummary(trackerProvider)}`,
             `View mode:       ${readViewMode(enabledFlags)}`,
             `Claude Code flags: ${defaultFlagCount} configured`,
-            `${claudeignoreEnabled ? '.claudeignore:   created' : ''}`,
-            `${safeDeleteAction !== 'skip' ? 'Safe delete:     installed' : ''}`,
+            `.claudeignore:   ${resolveClaudeignoreOutcome(claudeignorePresent)}`,
+            SAFE_DELETE_SUMMARY_ROW[safeDeleteAction],
         ].filter(l => l.trim()).join('\n');
         p.note(summaryLines + `\n\nCustomize later: ${color.cyan('devflow init --advanced')}`, 'Recommended settings applied');
     }
@@ -1131,9 +1226,9 @@ export const initCommand = new Command('init')
             isTTY: process.stdin.isTTY,
             hasCliOverride: cliComplianceOverride !== undefined,
         })) {
-            // runComplianceStep: note with "Current setting:" header (legible on re-init per PF-029),
+            // runComplianceStep: note with "Current setting:" header (legible on re-init),
             // labeled Yes/No select (immune to Enter-through muscle memory), and framework multiselect.
-            // Returns {kind:'cancelled'} on Escape — caller owns the cancel idiom (PF-014).
+            // Returns {kind:'cancelled'} on Escape — caller owns the cancel idiom.
             const complianceStep = await runComplianceStep({
                 seed: { enabled: complianceEnabled, frameworks: complianceFrameworks },
                 prompts: buildClackCompliancePrompts(),
@@ -1187,19 +1282,19 @@ export const initCommand = new Command('init')
         // silently carries the seeded value. The gate stays an explicit predicate call so the
         // documented gate table in attribution-prompts.ts remains the single authority.
         // isTTY is guaranteed true here (the non-TTY guard above exit-1'd); passing it keeps
-        // the promptless contract enforced at the predicate rather than by position (PF-029).
+        // the promptless contract enforced at the predicate rather than by position.
         if (shouldRunAttributionStep({
             // D27-GATE: bind to the resolved mode so all four documented gate-table rows
             // are reachable and the predicate — not lexical placement — enforces Advanced-only.
             // Using useRecommended ? 'recommended' : 'advanced' makes the gate testable from
             // both sides and prevents the Recommended path from accidentally running the step
-            // if this block is ever repositioned (applies PF-029).
+            // if this block is ever repositioned.
             mode: useRecommended ? 'recommended' : 'advanced',
             isTTY: process.stdin.isTTY,
         })) {
             const attributionStep = await runAttributionStep({
                 // attributionSeedFrom keeps the seed a real boolean regardless of the stored
-                // FlagsRecord value type — undefined/null/false all map to false (PF-018).
+                // FlagsRecord value type — undefined/null/false all map to false.
                 seed: attributionSeedFrom(enabledFlags),
                 prompts: buildClackAttributionPrompts(),
             });
@@ -1220,7 +1315,7 @@ export const initCommand = new Command('init')
         /**
          * D40: init applies seeded flag defaults non-interactively. Flags are customized
          * exclusively via `devflow flags`; re-init preserves existing values and adopts
-         * registry defaults only for absent flags (ADR-014). No TUI is opened during init.
+         * registry defaults only for absent flags. No TUI is opened during init.
          */
         {
             const activeCount = countActiveFlags(enabledFlags);
@@ -1270,11 +1365,11 @@ export const initCommand = new Command('init')
             safeDeleteBlock = generateSafeDeleteBlock(shell, process.platform, trashCmd);
             if (safeDeleteBlock) {
                 const installedVersion = await getInstalledVersion(profilePath);
-                const state = classifySafeDeleteState(installedVersion, SAFE_DELETE_BLOCK_VERSION);
-                if (state === 'current') {
+                safeDeleteState = classifySafeDeleteState(installedVersion, SAFE_DELETE_BLOCK_VERSION);
+                if (safeDeleteState === 'current') {
                     safeDeleteAction = 'skip';
                 }
-                else if (state === 'outdated') {
+                else if (safeDeleteState === 'outdated') {
                     safeDeleteAction = 'upgrade';
                 }
                 else {
@@ -1474,10 +1569,10 @@ export const initCommand = new Command('init')
         p.log.error(`${error}`);
         process.exit(1);
     }
-    // Converge compliance artifacts (PF-015: always converge, never short-circuit).
+    // Converge compliance artifacts (always converge, never short-circuit).
     // Called unconditionally so that enabling/disabling compliance during init
     // is reflected in the installed artifacts without a separate devflow compliance run.
-    // Wrapped in its own try/catch (PF-009: warn-not-abort).
+    // Wrapped in its own try/catch (warn-not-abort).
     let convergeResult = null;
     try {
         convergeResult = await convergeFromManifest({
@@ -1525,7 +1620,7 @@ export const initCommand = new Command('init')
     }
     // Sweep orphaned *-teams.md workflow command variants left by the Agent Teams
     // refactor. None are ever re-installed, so a blanket sweep is safe on any
-    // install type (the full-install dir wipe only covers full installs). (PF-009)
+    // install type (the full-install dir wipe only covers full installs).
     try {
         for (const f of await fs.readdir(commandsDir)) {
             if (f.endsWith('-teams.md')) {
@@ -1598,6 +1693,7 @@ export const initCommand = new Command('init')
         'dream-procedure.md',
         'lib/staleness.cjs',
         'dream-lock',
+        'decisions-usage-scan.cjs',
     ];
     const hooksDir = path.join(devflowDir, 'scripts', 'hooks');
     for (const legacy of LEGACY_HOOK_FILES) {
@@ -1613,7 +1709,7 @@ export const initCommand = new Command('init')
     const settingsPath = path.join(claudeDir, 'settings.json');
     // === Proxy preflight (when enabled) ===
     // Runs before the settings mutation pass so that proxyEnabled reflects reality
-    // (preflight failure forces it off without aborting init — avoids PF-009).
+    // (preflight failure forces it off without aborting init).
     //
     // Read existing proxy state once to recover the remembered port.
     // Init has no --port option; the remembered port from proxy.json always
@@ -1660,7 +1756,7 @@ export const initCommand = new Command('init')
                     'Routing disabled for this init — run `devflow proxy --enable` after signing in.');
                 proxyEnabled = false;
                 // Write proxy.json disabled so runtime authority converges with the
-                // failed preflight outcome (avoids PF-015). Without this write,
+                // failed preflight outcome. Without this write,
                 // proxy.json stays enabled:true from the prior run, causing
                 // reapplyAgentMapping to write GPT model IDs into agent frontmatter
                 // with no relay — a dormancy inversion.
@@ -1695,7 +1791,7 @@ export const initCommand = new Command('init')
     }
     else {
         // Proxy disabled at entry: if proxy.json exists and is enabled, mark it disabled.
-        // avoids PF-015: runtime authority (proxy.json) must converge with proxyEnabled=false.
+        // Runtime authority (proxy.json) must converge with proxyEnabled=false.
         // Check the Result — write errors are surfaced rather than silently ignored
         // (consistent with the enable branch above).
         if (priorProxyStateResult.ok && priorProxyStateResult.value.enabled) {
@@ -1716,7 +1812,7 @@ export const initCommand = new Command('init')
     // MUST run AFTER the proxy preflight block above: preflight can force proxyEnabled=false
     // on failure, and reapply's dormancy (GPT models materialize only while proxy enabled)
     // depends on the FINAL proxyEnabled value — running earlier would leave GPT model lines
-    // in agent frontmatter after a preflight failure. Per-item failures are non-fatal (avoids PF-009).
+    // in agent frontmatter after a preflight failure. Per-item failures are non-fatal.
     //
     // Init-only optimization: skip reapply when mapping is empty AND proxy is off.
     // An empty mapping means every agent uses its shipped default; the file copy already
@@ -1725,7 +1821,9 @@ export const initCommand = new Command('init')
     {
         const agentInstallDir = path.join(claudeDir, 'agents', 'devflow');
         const preCheckMapping = await readAgentMapping(devflowDir);
-        const hasMappingEntries = preCheckMapping.ok && Object.keys(preCheckMapping.value.agents).length > 0;
+        // hasAgentMappingEntries counts agent entries only: an agents.memory-only
+        // mapping names no installed file, so it keeps this gate closed (D-WORKER-AGENTS).
+        const hasMappingEntries = preCheckMapping.ok && hasAgentMappingEntries(preCheckMapping.value);
         if (hasMappingEntries || proxyEnabled) {
             const reapplyResult = await reapplyAgentMapping({
                 proxyEnabled,
@@ -1776,7 +1874,7 @@ export const initCommand = new Command('init')
         // Strip Devflow-managed teammateMode ("auto"). User-set values (e.g. "tmux") are preserved.
         content = stripDevflowTeammateModeFromJson(content);
         // Claude Code flags — convergeFlagsIntoSettings is the single pipeline entry point
-        // (ARCH-H1, applies PF-015/PF-017/ADR-014): fold valued flags and view-mode from
+        // (ARCH-H1): fold valued flags and view-mode from
         // existing settings before strip, then strip all managed keys and apply the folded
         // record. ownedRecord=existingManifest?.features.flags??null distinguishes keys
         // devflow previously wrote (must not be overridden by fold) from keys newly adopted
@@ -1806,7 +1904,7 @@ export const initCommand = new Command('init')
         // would silently delete both their URL and the window-enforcement var.
         // Invariant: proxy.json always reflects the final settled state after the
         // preflight block above — all paths that force proxyEnabled=false also write
-        // proxy.json enabled:false (avoids PF-015), so managedPort == effectivePort.
+        // proxy.json enabled:false, so managedPort == effectivePort.
         if (await proxyJsonExists(devflowDir)) {
             const proxyStateForStrip = await readProxyState(devflowDir);
             const managedPort = proxyStateForStrip.ok ? proxyStateForStrip.value.port : DEFAULT_PROXY_PORT;
@@ -1838,14 +1936,14 @@ export const initCommand = new Command('init')
     // read-modify-write, not a whole-file write: init owns only reviewPublication,
     // and every other key in the file — the hand-written per-repo `tracker`
     // override first among them — is carried from disk, under --reset too
-    // (D-CONFIG-PRESERVE-UNMANAGED in feature-config.ts, avoids PF-071).
+    // (D-CONFIG-PRESERVE-UNMANAGED in feature-config.ts).
     // A malformed or unreadable file is left untouched and named (D-CONFIG-NO-REPAIR).
     if (gitRoot) {
         const configWrite = await writeManagedConfig(gitRoot, {
             // reviewPublication has no prompt, so it is carried over from the
             // reset-gated snapshot rather than re-read from disk: seedConfig is null
             // under --reset, which is what collapses the field back to 'auto' with
-            // every other feature (PF-015 — read the post-gate binding, not the file).
+            // every other feature (read the post-gate binding, not the file).
             reviewPublication: seedConfig?.reviewPublication ?? DEFAULT_CONFIG.reviewPublication,
         });
         if (!configWrite.ok)
@@ -1854,10 +1952,10 @@ export const initCommand = new Command('init')
     // Configure HUD
     const existingHud = loadHudConfig();
     saveHudConfig({ enabled: hudEnabled, detail: existingHud.detail });
-    // File extras
+    // File extras — into the projects the Recommended summary's .claudeignore row checked.
     if (claudeignoreEnabled) {
+        const results = await Promise.all(projectRoots(discoveredProjects, gitRoot).map(root => installClaudeignore(root, rootDir, verbose)));
         if (discoveredProjects.length > 0) {
-            const results = await Promise.all(discoveredProjects.map(root => installClaudeignore(root, rootDir, verbose)));
             const created = results.filter(Boolean).length;
             if (created > 0) {
                 p.log.success(`.claudeignore created in ${created} project(s)`);
@@ -1866,14 +1964,11 @@ export const initCommand = new Command('init')
                 p.log.info(`.claudeignore already exists in all ${discoveredProjects.length} project(s)`);
             }
         }
-        else if (gitRoot) {
-            await installClaudeignore(gitRoot, rootDir, verbose);
-        }
     }
     // Deterministically ensure .devflow/ is gitignored at the repo root — independent
     // of every feature toggle. The always-on ensure-root-gitignore
     // hook covers projects that never re-run init; this covers the init-time path so a
-    // fresh install never tracks .devflow/. Decoupled from memory (avoids PF-014).
+    // fresh install never tracks .devflow/. Decoupled from memory.
     if (gitRoot) {
         await ensureDevflowGitignore(gitRoot, verbose);
     }
@@ -1932,7 +2027,7 @@ export const initCommand = new Command('init')
                 s.start('Finalizing installation...');
             }
             else {
-                // applies ADR-010: user declined sudo and chose the settings.json fallback.
+                // User declined sudo and chose the settings.json fallback.
                 // securityMode is 'managed' (from resolveSecurityAction or interactive choice) but
                 // managedSettingsConfirmed is false — honor the "fall back to settings.json" label
                 // by writing to user settings. Manifest will record 'user' to match reality.
@@ -1987,7 +2082,7 @@ export const initCommand = new Command('init')
         }
         else {
             // Exhaustive guard — if TypeScript reaches here, a new SecurityMode variant was added
-            // without a matching branch. avoids PF-009 (stale references after rename/refactor).
+            // without a matching branch — guards against stale references after rename/refactor.
             const _exhaustive = securityMode;
             void _exhaustive;
         }
@@ -2038,7 +2133,7 @@ export const initCommand = new Command('init')
     // devflow:compliance is never swept here — no suppression predicate is needed.
     logSummaryLines(formatSweepSummary(installReport));
     // Reference-overlay reporting: the overlay rewrites files inside an installed skill
-    // the user may have shadowed, and reports any unit it had to leave alone (PF-015).
+    // the user may have shadowed, and reports any unit it had to leave alone.
     logSummaryLines(formatOverlaySummary(installReport));
     // Skill-scoping reporting: a deselected skill is deleted and a dormant shadow
     // is inert, and neither is distinguishable from "never installed" on disk.
@@ -2060,34 +2155,14 @@ export const initCommand = new Command('init')
         p.note(commandsNote, 'Available commands');
     }
     // Safe-delete status messages (after spinner)
-    if (process.stdin.isTTY && profilePath) {
-        if (safeDeleteAction === 'install') {
-            p.log.success(`Safe-delete installed to ${color.dim(profilePath)}`);
-            p.log.info('Restart your shell or run: ' + color.cyan(`source ${profilePath}`));
-        }
-        else if (safeDeleteAction === 'upgrade') {
-            p.log.success(`Safe-delete upgraded in ${color.dim(profilePath)}`);
-            p.log.info('Restart your shell or run: ' + color.cyan(`source ${profilePath}`));
-        }
-        else if (safeDeleteAvailable && safeDeleteBlock) {
-            const installedVersion = await getInstalledVersion(profilePath);
-            if (classifySafeDeleteState(installedVersion, SAFE_DELETE_BLOCK_VERSION) === 'current') {
-                p.log.info(`Safe-delete already configured in ${color.dim(profilePath)}`);
-            }
-        }
-        else if (!safeDeleteAvailable && safeDeleteInfo.installHint) {
-            p.log.info(`Install ${color.cyan(safeDeleteInfo.command ?? 'trash')} first: ${color.dim(safeDeleteInfo.installHint)}`);
-            p.log.info(`Then re-run ${color.cyan('devflow init')} to auto-configure safe-delete.`);
-        }
-    }
-    else if (!process.stdin.isTTY) {
-        if (safeDeleteAvailable && safeDeleteInfo.command) {
-            p.log.info(`Safe-delete available (${safeDeleteInfo.command}). Run interactively to auto-install.`);
-        }
-        else if (safeDeleteInfo.installHint) {
-            p.log.info(`Protect against accidental ${color.red('rm -rf')}: ${color.cyan(safeDeleteInfo.installHint)}`);
-        }
-    }
+    logSummaryLines(formatSafeDeleteStatus({
+        interactive: process.stdin.isTTY === true,
+        action: safeDeleteAction,
+        state: safeDeleteState,
+        available: safeDeleteAvailable,
+        profilePath,
+        info: safeDeleteInfo,
+    }));
     // Verbose mode: show details
     if (verbose) {
         const pluginsList = pluginsToInstall
@@ -2120,7 +2195,7 @@ export const initCommand = new Command('init')
             knowledge: knowledgeEnabled,
             learning: learningEnabled,
             rules: rulesEnabled,
-            // FlagsRecord written directly — key-presence encodes "known" (ADR-014).
+            // FlagsRecord written directly — key-presence encodes "known".
             // view-mode is encoded as flags['view-mode'] (the resolved final value).
             flags: enabledFlags,
             security: securityMode,
@@ -2141,7 +2216,7 @@ export const initCommand = new Command('init')
     // ── Manifest write + tracker selection lifecycle (the ONE call site) ──────
     // persistManifestThenConvergeTracker owns the ordering invariant: the
     // tracker file-lifecycle owners in src/core/tracker.ts converge only against
-    // a provider the manifest actually persisted (D-TRACKER-CONVERGE, PF-015).
+    // a provider the manifest actually persisted (D-TRACKER-CONVERGE).
     const trackerLifecycle = await persistManifestThenConvergeTracker({
         devflowDir,
         claudeDir,
@@ -2155,13 +2230,15 @@ export const initCommand = new Command('init')
             p.log.info(msg.text);
     }
     // Only now that the machine-wide switch is on disk (D-INIT-DRAIN-AFTER-SWITCH).
-    await drainDisabledFeatureQueues({
+    const refusedDrains = await drainDisabledFeatureQueues({
         gitRoot,
         ledgerRoot: learningEnabled || gitRoot === null ? null : await getLedgerRoot(),
         memoryEnabled,
         learningEnabled,
         manifestWritten: trackerLifecycle.manifestWritten,
     });
+    for (const line of refusedDrains)
+        p.log.warn(line);
     // The hooks' per-directory log folders, capped (D-LOG-DIR-CAP): one pass
     // clears every folder it scans beyond the cap; only a backlog beyond the
     // scan bound (MAX_LOG_DIRS_SCANNED, 100,000) waits for the next init.