devflow-kit 3.0.1 → 3.2.0

package/dist/cli/commands/memory.js

@@ -7,7 +7,9 @@ import { getClaudeDirectory, getDevFlowDirectory } from '../../targets/claude-co
 import { writeSettingsFileAtomic } from '../../core/fs-atomic.js';
 import { discoverProjectGitRoots } from '../../targets/claude-code/post-install.js';
 import { getGitRoot } from '../../core/git.js';
+import { firstSymbolicLink } from '../../core/linked-path.js';
 import { getMemoryDir, getPendingTurnsPath, getPendingTurnsProcessingPath, } from '../../core/project-paths.js';
+import { drainQueueFiles, formatRefusedDrain } from '../../core/queue-drain.js';
 import { HOOKS_DIR_SUFFIX, devflowHookOwner, endsWithAny, ensureHook, hasHook, removeHooks, runHookCommand, runHookSuffix, } from '../../targets/claude-code/hooks.js';
 import { readMachineFeature, writeMachineFeature } from '../../core/feature-switch.js';
 import { loadSettingsModule, narrowedSwitchLabel, personalConfigTrackedWarning } from '../../core/evidence-policy.js';
@@ -83,7 +85,7 @@ export function addMemoryHooks(settingsJson, devflowDir) {
 export function removeMemoryHooks(input) {
     const settingsJson = typeof input === 'string' ? input : JSON.stringify(input);
     const settings = typeof input === 'string' ? JSON.parse(input) : structuredClone(input);
-    // Evaluate every removal into a local — never short-circuit (PF-015).
+    // Evaluate every removal into a local — never short-circuit.
     let changed = false;
     for (const [hookType, marker] of Object.entries(MEMORY_HOOK_CONFIG)) {
         const removed = removeHooks(settings, hookType, isMemoryHook(marker));
@@ -142,15 +144,16 @@ export function convergeMemoryHooks(settingsJson, enabled, devflowDir) {
 /**
  * Drain a project's pending memory queue (and a claimed batch) so stale turns
  * are not processed when memory is next switched on. Shared by `devflow init
- * --no-memory` and `devflow memory --disable`. ENOENT-tolerant; any other
- * error propagates to the command boundary, like drainLearningQueue.
+ * --no-memory` and `devflow memory --disable`. Refused, deleting nothing, when
+ * `.devflow` or `.devflow/memory` under `projectRoot` is a symbolic link
+ * (D-CLI-NO-SYMLINK). ENOENT-tolerant; any other error propagates to the command
+ * boundary, like drainLearningQueue.
  */
 export async function drainMemoryQueue(projectRoot) {
-    const ignoreMissing = (e) => { if (e.code !== 'ENOENT')
-        throw e; };
-    await Promise.all([
-        fs.unlink(getPendingTurnsPath(projectRoot)).catch(ignoreMissing),
-        fs.unlink(getPendingTurnsProcessingPath(projectRoot)).catch(ignoreMissing),
+    const memoryDir = getMemoryDir(projectRoot);
+    return drainQueueFiles([path.dirname(memoryDir), memoryDir], [
+        getPendingTurnsPath(projectRoot),
+        getPendingTurnsProcessingPath(projectRoot),
     ]);
 }
 /**
@@ -181,12 +184,24 @@ export async function filterProjectsWithMemory(gitRoots) {
 }
 /**
  * Clean up memory queue files from the given project paths.
- * Skips projects where the background updater lock is held to avoid data loss.
- * Returns the count of projects from which at least one file was removed.
+ * Skips projects where the background updater lock is held to avoid data loss,
+ * and refuses, deleting nothing there, a project whose `.devflow` or
+ * `.devflow/memory` is a symbolic link (D-CLI-NO-SYMLINK); `refused` names each
+ * such link. Returns the count of projects from which at least one file was removed.
  */
 export async function cleanQueueFiles(projectPaths) {
     const results = await Promise.all(projectPaths.map(async (project) => {
         const memDir = getMemoryDir(project);
+        let linkedFolder;
+        try {
+            linkedFolder = await firstSymbolicLink([path.dirname(memDir), memDir]);
+        }
+        catch {
+            // The folders cannot be checked: delete nothing there, and go on to the others.
+            return null;
+        }
+        if (linkedFolder !== null)
+            return { refused: linkedFolder };
         const lockDir = path.join(memDir, '.working-memory.lock');
         try {
             await fs.access(lockDir);
@@ -200,10 +215,11 @@ export async function cleanQueueFiles(projectPaths) {
             fs.unlink(getPendingTurnsPath(project)).then(() => true).catch(() => false),
             fs.unlink(getPendingTurnsProcessingPath(project)).then(() => true).catch(() => false),
         ]);
-        return (q || pr) ? project : null;
+        return (q || pr) ? { cleaned: project } : null;
     }));
-    const cleanedProjects = results.filter((p) => p !== null);
-    return { cleaned: cleanedProjects.length, projects: cleanedProjects };
+    const cleanedProjects = results.flatMap((r) => (r !== null && 'cleaned' in r ? [r.cleaned] : []));
+    const refused = results.flatMap((r) => (r !== null && 'refused' in r ? [r.refused] : []));
+    return { cleaned: cleanedProjects.length, projects: cleanedProjects, refused };
 }
 export const memoryCommand = new Command('memory')
     .description('Enable, disable, or clean up working memory (session context preservation)')
@@ -263,10 +279,13 @@ export const memoryCommand = new Command('memory')
             }
             targets = scope === 'local' && currentProject ? [currentProject] : allProjects;
         }
-        const { cleaned, projects: cleanedProjects } = await cleanQueueFiles(targets);
+        const { cleaned, projects: cleanedProjects, refused } = await cleanQueueFiles(targets);
         for (const project of cleanedProjects) {
             p.log.info(color.dim(`Cleaned: ${project}`));
         }
+        for (const linkedFolder of refused) {
+            p.log.warn(formatRefusedDrain('memory', linkedFolder));
+        }
         p.log.success(cleaned > 0
             ? `Cleaned queue files from ${cleaned} project${cleaned > 1 ? 's' : ''}`
             : 'No queue files found to clean');
@@ -341,7 +360,9 @@ export const memoryCommand = new Command('memory')
     // there is no project queue to drain, and the switch itself still applies.
     const gitRoot = await getGitRoot();
     if (gitRoot) {
-        await drainMemoryQueue(gitRoot);
+        const drain = await drainMemoryQueue(gitRoot);
+        if (!drain.drained)
+            p.log.warn(formatRefusedDrain('memory', drain.linkedFolder));
     }
     p.log.success('Working memory disabled in every project');
 });

package/dist/cli/commands/proxy.js

@@ -2,11 +2,11 @@
  * devflow proxy — Enable, disable, and check status of external model routing
  * (GPT models via your OpenAI/Codex subscription).
  *
- * applies ADR-013: CLI-layer module; all core logic lives in src/core/proxy-state.ts
+ * CLI-layer module; all core logic lives in src/core/proxy-state.ts
  *   and src/core/agent-models.ts.
- * avoids PF-014: never process.exit() inside a finally-guarded scope; use return
- *   from the async action handler for all early-exit paths.
- * avoids PF-001: hook output strings use fixed templates; port number interpolation
+ * Never process.exit() inside a finally-guarded scope (it would skip the finally);
+ *   use return from the async action handler for all early-exit paths.
+ * Hook output strings use fixed templates; port number interpolation
  *   is acceptable (digit-validated integer, not user-controlled content).
  *
  * Branding note: "subswitch" must NEVER appear in user-visible strings. Internal
@@ -117,7 +117,7 @@ const UNKNOWN_MODEL_WINDOW_ENV = 'CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFOR
  * Mutate a parsed Settings object in place: set ANTHROPIC_BASE_URL to our relay
  * and set UNKNOWN_MODEL_WINDOW_ENV to '1'.
  *
- * D-P4-1: Each condition is evaluated independently (PF-015 — no short-circuit that
+ * D-P4-1: Each condition is evaluated independently (no short-circuit that
  * skips the second write when the first reports no change).
  *
  * Returns true when the object was changed by either assignment.
@@ -127,7 +127,7 @@ function _applyProxyEnvToObject(settings, port) {
     s.env = s.env ?? {};
     const env = s.env;
     const newUrl = proxyBaseUrl(port);
-    // D-P4-1: evaluate each condition independently before combining (avoids PF-015 short-circuit)
+    // D-P4-1: evaluate each condition independently before combining (no short-circuit)
     const urlChanged = env.ANTHROPIC_BASE_URL !== newUrl;
     const windowVarChanged = env[UNKNOWN_MODEL_WINDOW_ENV] !== '1';
     env.ANTHROPIC_BASE_URL = newUrl;
@@ -149,8 +149,8 @@ function _applyProxyEnvToObject(settings, port) {
  *   - uninstall     → proxy.json.port (or DEFAULT_PROXY_PORT)
  *
  * D-P4-1: URL ownership gates the URL delete only; the window var is always ours to
- * remove (applies PF-015, ADR-003). Each outcome is evaluated into a local and OR-ed
- * afterwards — never short-circuit composed inline (PF-015).
+ * remove. Each outcome is evaluated into a local and OR-ed
+ * afterwards — never short-circuit composed inline.
  *
  * Returns true when the object was changed by either deletion.
  */
@@ -163,7 +163,7 @@ function _stripProxyEnvFromObject(settings, managedPort) {
     // managed the proxy — `proxyJsonExists()` — and the enable caller is taking ownership
     // of the key anyway, so reaching this line means the value is Devflow's to remove.
     // Removal is therefore unconditional: unlike ANTHROPIC_BASE_URL (port-scoped below),
-    // this key has no foreign value to protect. (applies PF-015, ADR-003)
+    // this key has no foreign value to protect.
     const hadWindowVar = env[UNKNOWN_MODEL_WINDOW_ENV] !== undefined;
     delete env[UNKNOWN_MODEL_WINDOW_ENV];
     let removedUrl = false;
@@ -174,7 +174,7 @@ function _stripProxyEnvFromObject(settings, managedPort) {
     }
     if (Object.keys(env).length === 0)
         delete s.env;
-    return removedUrl || hadWindowVar; // OR the locals — never compose with || inline (PF-015)
+    return removedUrl || hadWindowVar; // OR the locals — never compose with || inline
 }
 // ─── Pure env functions (exported for testing and cross-module reuse) ─────────
 /**
@@ -234,7 +234,7 @@ export function readProxyEnvState(settingsJson, port) {
  */
 export function addProxyHooks(settings, devflowDir) {
     const command = runHookCommand(devflowDir, PROXY_HOOK_MARKER);
-    // Evaluate each event into its own local — never short-circuit (PF-015).
+    // Evaluate each event into its own local — never short-circuit.
     const [addedSession, addedPrompt] = PROXY_HOOK_EVENTS.map((event) => ensureHook(settings, event, isProxyHook, { hooks: [{ type: 'command', command, timeout: 15 }] }));
     return addedSession || addedPrompt;
 }
@@ -246,7 +246,7 @@ export function addProxyHooks(settings, devflowDir) {
  * Mutates settings in place. Returns true when any hook was removed.
  */
 export function removeProxyHooks(settings) {
-    // Evaluate each event into its own local — never short-circuit (PF-015).
+    // Evaluate each event into its own local — never short-circuit.
     const [removedSession, removedPrompt] = PROXY_HOOK_EVENTS.map((event) => removeHooks(settings, event, isProxyHook));
     return removedSession || removedPrompt;
 }
@@ -503,7 +503,7 @@ export async function realHttpGet(url, timeoutMs) {
 /** Production doctor subprocess implementation. */
 async function realSpawnDoctor(binPath, env, timeoutMs, logFile) {
     // openProxyLog: 0700 parent dir + 0600 file creation + best-effort chmod for
-    // pre-existing wider modes (SEC-2). Non-fatal on chmod failure per PF-009.
+    // pre-existing wider modes (SEC-2). Non-fatal on chmod failure.
     const logFd = await openProxyLog(logFile);
     try {
         return await new Promise((resolve) => {
@@ -558,7 +558,7 @@ async function realSpawnDoctor(binPath, env, timeoutMs, logFile) {
  * Centralises the three private implementations so both runEnable and init.ts
  * can consume them without byte-identical inline copies.
  *
- * applies ADR-013: pure configuration factory; I/O implementations factored once.
+ * Pure configuration factory; I/O implementations factored once.
  */
 export function buildRealPreflightDeps(opts) {
     const { settingsPath, onWarn, swallowSettingsReadError = false } = opts;
@@ -599,7 +599,7 @@ export function buildRealPreflightDeps(opts) {
  *   - OS-level spawn error (EMFILE, ENOMEM, EAGAIN) — always handled via the
  *     injected onError callback, never an uncaught exception
  *
- * avoids PF-014: no process.exit() — returns Result; caller decides error handling.
+ * No process.exit() — returns Result; caller decides error handling.
  */
 export async function spawnRelayAndWaitForPort(port, binPath, configPath, logPath, pidPath, adopted, deps) {
     if (adopted) {
@@ -784,7 +784,7 @@ async function applyEnableSettingsPass(settingsPath, devflowDir, port) {
  *   -n  no host-name resolution  -P  no port-name resolution
  *   -sTCP:LISTEN  only LISTEN-state sockets  -t  PIDs only
  *
- * avoids PF-001: fixed argument array — port is validated as a safe integer
+ * Fixed argument array — port is validated as a safe integer
  *   by the caller before this function is invoked; it is never interpolated
  *   into a shell string.
  *
@@ -855,8 +855,8 @@ async function readPidFile(pidPath) {
  *
  * applies D-EFR-5: signal 0 and health check are independent facts; lsof
  *   binds the pid-file PID to the port owner before any signal is sent.
- * avoids PF-009: all sub-operations are non-fatal; a kill failure never aborts disable.
- * avoids PF-014: never process.exit() inside a finally-guarded scope.
+ * All sub-operations are non-fatal; a kill failure never aborts disable.
+ * Never process.exit() inside a finally-guarded scope (it would skip the finally).
  *
  * @param deps  Optional injectable dependencies (default: real lsof implementation).
  *              Provide a stub in tests to exercise every branch without a real binary.
@@ -1211,7 +1211,7 @@ async function runStatus() {
         }
     }
     // External models registry (cache-only, zero spawns — avoids multi-second silent pause in --status)
-    const cacheDir = modelCacheDir(devflowDir); // authoritative path from cache.ts (avoids PF-013)
+    const cacheDir = modelCacheDir(devflowDir); // authoritative path from cache.ts
     const catalog = getExternalModelsCached(cacheDir);
     p.log.info(formatExternalModelsLine(catalog, logPath));
     // Log path
@@ -1236,7 +1236,7 @@ async function runEnable(portOption) {
     const configPath = path.join(devflowDir, 'proxy-routing.json');
     const logPath = path.join(devflowDir, 'logs', 'proxy.log');
     const pidPath = path.join(devflowDir, 'proxy.pid');
-    const cacheDir = modelCacheDir(devflowDir); // authoritative path from cache.ts (avoids PF-013)
+    const cacheDir = modelCacheDir(devflowDir); // authoritative path from cache.ts
     // Step 1: Read prior proxy.json (remembered port); --port flag overrides
     const priorStateResult = await readProxyState(devflowDir);
     const priorPort = priorStateResult.ok ? priorStateResult.value.port : DEFAULT_PROXY_PORT;
@@ -1260,7 +1260,7 @@ async function runEnable(portOption) {
     await rotateProxyLogIfLarge(logPath);
     // Read existing routing config to preserve user-added anthropic/limits/logLevel/providers
     // blocks. A missing or malformed file falls back to clean defaults inside
-    // buildRoutingConfigJson (non-fatal; avoids PF-009).
+    // buildRoutingConfigJson (non-fatal).
     let existingRoutingContent;
     try {
         existingRoutingContent = await fs.readFile(configPath, 'utf-8');
@@ -1389,7 +1389,7 @@ async function runEnable(portOption) {
     s.message('Warming model cache...');
     await discoverExternalModels(cacheDir, logPath).catch(() => { });
     s.stop(color.green('External model routing enabled'));
-    // D-P4-1 / PF-022: applies-on-restart — env var takes effect only for new sessions
+    // D-P4-1: applies-on-restart — env var takes effect only for new sessions
     p.log.info(color.dim('Context-window enforcement disabled for relay-routed models — applies to new Claude Code sessions'));
     if (adopted) {
         p.log.info(`Relay already running on port ${port} — adopted`);
@@ -1476,7 +1476,7 @@ async function runDisable() {
     p.log.success('External model routing disabled');
     // Step 5: Terminate the relay process.
     // Identity is confirmed via TCP + health before signalling — a recycled PID
-    // must never be killed. avoids PF-009: all sub-operations are non-fatal.
+    // must never be killed. All sub-operations are non-fatal.
     const spawnLockPath = path.join(devflowDir, '.proxy-spawn.lock');
     const terminateResult = await terminateRelay(pidPath, spawnLockPath, managedPort);
     switch (terminateResult) {

package/dist/cli/commands/rules.js

@@ -114,7 +114,7 @@ async function printRulesList(claudeDir, devflowDir) {
  * Returns which tier seeded: 'installed' | 'source' | 'none'.
  * Creates the shadow directory before copying.
  *
- * D35 — seedRuleShadow tiers (applies ADR-010):
+ * D35 — seedRuleShadow tiers:
  *   Tier 1 — installed rule at rulesTarget/{name}.md (fastest path when rules are enabled).
  *             SKIPPED for FEATURE_OWNED_RULES: the installed file is already stamped
  *             (${DEVFLOW_COMPLIANCE_FRAMEWORKS} replaced with label text), so seeding from
@@ -198,9 +198,10 @@ async function handleRuleUnshadow(name, allRules, devflowDir) {
  * Compliance convergence runs unconditionally — convergeComplianceArtifacts handles the
  * disabled case by removing stale artifacts, so no enabled-gate is needed here. Running
  * converge regardless of the rules-install outcome ensures that a rules-install failure
- * cannot leave compliance artifacts in a half-converged state (avoids PF-015 violation).
+ * cannot leave compliance artifacts in a half-converged state.
  *
- * Applies PF-009: warn-not-throw on per-item compliance convergence failure.
+ * Warn-not-throw on per-item compliance convergence failure, so a convergence
+ * failure never undoes the rules install.
  */
 export async function runRulesEnable(claudeDir, devflowDir) {
     const rulesTarget = path.join(claudeDir, 'rules', 'devflow');
@@ -241,7 +242,7 @@ export async function runRulesEnable(claudeDir, devflowDir) {
     // disabled case itself (removes stale artifacts). Running this regardless of installFailed
     // prevents a rules-install failure from leaving the compliance rule in a stale state.
     // rulesEnabledOverride reflects the actual settled state: false when install failed so the
-    // compliance rule is not installed into a wiped, rules-disabled directory (avoids PF-015).
+    // compliance rule is not installed into a wiped, rules-disabled directory.
     try {
         await convergeFromManifest({
             claudeDir,
@@ -252,7 +253,7 @@ export async function runRulesEnable(claudeDir, devflowDir) {
         });
     }
     catch (err) {
-        // PF-009: warn-not-abort — compliance convergence failure does not undo rules install
+        // Warn-not-abort — compliance convergence failure does not undo rules install
         p.log.warn(`Compliance rule convergence failed — rules installed but compliance rule may be stale: ${err instanceof Error ? err.message : String(err)}`);
     }
 }

package/dist/cli/commands/tracker-prompts.js

@@ -1,13 +1,13 @@
 /**
  * Tracker prompt helpers for devflow init.
  *
- * CLI-layer module (ADR-013): prompt-rendering logic lives in src/cli/commands/,
+ * CLI-layer module: prompt-rendering logic lives in src/cli/commands/,
  * core business logic stays in src/core/tracker.ts.
  *
- * avoids PF-029: the wizard gate keys on `modePromptShown` (was the Setup-mode
+ * The wizard gate keys on `modePromptShown` (was the Setup-mode
  * p.select prompt actually shown?), never on the mode name, so --recommended
  * (flag, no prompt) and the non-TTY fallback preserve their promptless contracts.
- * avoids PF-014: runTrackerStep never calls process.exit() or throws — callers
+ * runTrackerStep never calls process.exit() or throws — callers
  * own the cancel idiom (p.cancel + process.exit(0)), keeping try/finally safe.
  * The shared DI seam (PromptOutcome, WizardPromptIO, clackNote, clackSelect) is
  * defined once in prompt-io.ts and imported here, never re-declared.
@@ -55,7 +55,7 @@ export function formatTrackerSummary(provider) {
 /**
  * Determines whether the tracker wizard step should run for a given init invocation.
  *
- * Gate table (per PF-029: key on modePromptShown, never on the mode name):
+ * Gate table (key on modePromptShown, never on the mode name):
  *
  *   --recommended flag / !isTTY fallback             → no (promptless contract preserved)
  *   Interactive mode-prompt → Recommended            → yes (modePromptShown=true)
@@ -102,14 +102,14 @@ export function buildClackTrackerPrompts() {
  *   1. Note — "Current setting: …" header then the provider catalogue.
  *   2. Provider select — labelled GitHub / Jira / Linear with hints, seeded from
  *      the prior state. `p.select`, never `p.confirm`: Enter-through must be an
- *      INFORMED keep of a named provider, not a y/N reflex (PF-029).
+ *      INFORMED keep of a named provider, not a y/N reflex.
  *
  * Returns:
  *   {kind:'resolved', state, messages} — step completed; `state` is the chosen
  *     TrackerFeatureState; `messages` are emitted by the caller.
  *   {kind:'cancelled'} — user pressed Escape; caller runs p.cancel + process.exit(0).
  *
- * Invariants (PF-014):
+ * Invariants:
  *   - Never calls process.exit(), never throws.
  *   - The returned state is always a fresh object, never the seed.
  *   - All I/O is routed through the `prompts` parameter (injectable for tests).

package/dist/cli/commands/tracker.js

@@ -3,19 +3,19 @@
  *
  * D-TRACKER-PAIR [DR-25]: `src/core/tracker.ts` (domain) +
  *   `src/cli/commands/tracker.ts` (CLI) mirrors the `compliance.ts` pair
- *   exactly; ADR-013's pure-core / I/O-target split is the reason both names
- *   exist. A reviewer meeting several `tracker*` files in one commit otherwise
- *   has no signal that the duplication is deliberate.
+ *   exactly; the split of pure core logic (src/core/) from the I/O layer is the
+ *   reason both names exist. A reviewer meeting several `tracker*` files in one
+ *   commit otherwise has no signal that the duplication is deliberate.
  *
- * Applies ADR-013: CLI-layer module; the provider domain, the strict parser and
+ * CLI-layer module; the provider domain, the strict parser and
  *   the ~/.devflow file lifecycle all live in src/core/tracker.ts.
  * The manifest holds the MACHINE default. A repository may select its own
  *   provider in its committed `.devflow/project.json` (resolved by
  *   resolve-settings.cjs); `--status` names it on an `Effective:` line when one
  *   does, and `--set` never touches it.
- * Avoids PF-015: --set converges the sentinel in BOTH directions, so flipping
+ * --set converges the sentinel in BOTH directions, so flipping
  *   back to github removes what flipping away wrote.
- * Avoids PF-009: a failed re-arm or sentinel step warns, it never aborts.
+ * A failed re-arm or sentinel step warns, it never aborts.
  */
 import { Command } from 'commander';
 import { promises as fs } from 'fs';
@@ -31,7 +31,7 @@ import { prefixSkillName } from '../../core/plugins.js';
 /**
  * Read the provenance header of `~/.devflow/tracker/{provider}.md`.
  *
- * Never throws (PF-014): an absent, unreadable, or non-regular path is `absent`.
+ * Never throws: an absent, unreadable, or non-regular path is `absent`.
  * Only the bounded head of the file is read and only the leading frontmatter
  * block is scanned — through the one frontmatter parser the migration also uses —
  * and nothing read here is trusted: every value is rendered through
@@ -52,7 +52,7 @@ export async function readTrackerProvenance(devflowDir, provider) {
  * every install carries them all (D-INSTALL-ALL-PROVIDERS) — rather than listing
  * the directory: the question a user asks `--status` is "can the agent load what
  * it is told to load?", and a stray file in the tree is not an answer to it.
- * Never throws (PF-014).
+ * Never throws.
  */
 export async function readTrackerMechanics(claudeDir) {
     const root = path.join(claudeDir, 'skills', prefixSkillName(SKILL_REFS_SKILL_NAME), 'references');
@@ -227,7 +227,7 @@ export const trackerCommand = new Command('tracker')
         // undocumented dotfile. Every other --status in this CLI is a pure read,
         // so this one reports the write it makes as a line of the note below — a
         // machine-state change the output does not mention is a change the user
-        // cannot audit. Non-fatal exactly as on the --set path (avoids PF-009): a
+        // cannot audit. Non-fatal exactly as on the --set path: a
         // failed re-arm warns, it never aborts the report the user asked for.
         const statusRearm = await rearmTrackerInference(devflowDir);
         const inference = statusRearm.ok