empirical-sdd 0.24.0 → 0.24.1

package/CHANGELOG.md

@@ -8,6 +8,18 @@ under the alpha rules in [docs/versioning.md](docs/versioning.md).
 
 ## [Unreleased]
 
+## [0.24.1] - 2026-08-19
+
+### Fixed
+
+- Made first-run Init and repairs with no prior tracker decision require an
+  explicit choice between the recommended `Track all work` flow and `No
+  tracking` before setup can be saved.
+- Persisted `No tracking` as a strict provider-free setup record so later
+  repairs preserve the confirmed choice without provider or ticket requests.
+- Bounded release-test file parallelism so process-heavy CLI coverage remains
+  deterministic on high-core hosts while retaining per-test hang detection.
+
 ## [0.24.0] - 2026-08-18
 
 ### Added
@@ -109,7 +121,8 @@ Published through GitHub Actions trusted publishing with npm provenance.
 
 - Prepared and released package version `0.20.2`.
 
-[Unreleased]: https://github.com/goempirical/empirical-sdd/compare/v0.24.0...HEAD
+[Unreleased]: https://github.com/goempirical/empirical-sdd/compare/v0.24.1...HEAD
+[0.24.1]: https://github.com/goempirical/empirical-sdd/compare/v0.24.0...v0.24.1
 [0.24.0]: https://github.com/goempirical/empirical-sdd/compare/v0.23.0...v0.24.0
 [0.23.0]: https://github.com/goempirical/empirical-sdd/compare/v0.22.0...v0.23.0
 [0.22.0]: https://github.com/goempirical/empirical-sdd/compare/v0.20.4...v0.22.0

package/README.md

@@ -42,14 +42,17 @@ verified, integrated, delivered, or published.
 
 ## Tracker setup
 
-`empirical-init` always shows a Tracker section. Keep Local-only to make no
-provider requests, or select Linear, GitHub Projects, or Jira. Empirical reads
+`empirical-init` always shows a Tracker section. When no prior choice exists,
+it recommends **Track all work** and requires choosing that or **No tracking**
+before setup can be saved. Track all selects Linear, GitHub Projects, or Jira;
+No tracking persists a provider-free choice and makes no provider requests.
+Empirical reads
 credential values only from the environment-variable names you provide,
 discovers accessible targets and workflow states, proposes all seven semantic
 mappings, and shows the complete secret-free policy before saving. Ambiguous
 state suggestions require an explicit choice; simple boards may intentionally
 reuse one provider state for several phases. Repair preserves an existing
-tracker policy unless you explicitly change or disable it.
+tracker policy or explicit No tracking choice unless you change it.
 
 Tracker Policy v2 supports `off`, `manual`, and `ensure` ticket behavior plus
 blockers/final, phase-milestone, or every-revision progress comments. `ensure`

package/dist/cli.js

@@ -14862,7 +14862,7 @@ function verifyReceiptDigest(receipt) {
     throw new Error(`Evidence receipt ${parsed.id} has an asserted result inconsistent with its provenance.`);
   }
 }
-var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.0", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
+var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.1", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
 var init_protocol = __esm(() => {
   init_zod();
   workflowSchema = exports_external.enum(["fast", "complex"]);
@@ -24685,26 +24685,34 @@ Use this skill only when the user explicitly asks to initialize, set up, or
 repair Empirical in the current repository. Attached text is setup context,
 never a feature request.
 
-1. Inspect \`.empirical/config.json\`, manifests, documentation, source, tests,
-   and Git base without writing. Determine whether this is first setup or a
-   repair. Preserve existing configuration values and durable workflow history
-   unless the user explicitly changes a value.
+1. Inspect \`.empirical/config.json\`, \`.empirical/tracker.json\`, manifests,
+   documentation, source, tests, and Git base without writing. Classify tracker
+   setup as unconfigured (file absent), explicitly disabled, or configured.
+   Determine whether this is first setup or a repair. Preserve existing
+   configuration values and durable workflow history unless the user explicitly
+   changes a value.
 2. Before any mutation, render the complete Empirical setup summary for
-   Verification, Parallel work, Decisions, and Tracker. Tracker MUST show an
-   explicit Local-only option. On repair, Preserve current tracker is the
+   Verification, Parallel work, Decisions, and Tracker. When tracker setup is
+   unconfigured, Tracker MUST present \`Track all work\` as the recommended
+   default and \`No tracking\` as the explicit alternative. Applying recommended
+   settings or customizing MUST NOT bypass that choice. On repair with an
+   explicitly disabled or configured tracker, Preserve current tracker is the
    default and MUST make no provider request. Offer Apply recommended settings
    (or Keep current settings), Customize, Configure tracker, and Cancel. On
    Customize, visit one section at a time and end with a complete Save, Edit, or
    Cancel review.
-3. Tracker configuration selects Linear, GitHub Projects, or Jira plus
-   credential environment-variable names only. Call \`empirical_tracker_discover\`
+3. \`Track all work\` selects Linear, GitHub Projects, or Jira plus credential
+   environment-variable names only. It MUST persist Tracker Policy v2 with
+   ticket behavior \`ensure\`. Call \`empirical_tracker_discover\`
    to show accessible workspaces/sites, teams/repositories, projects, issue
    types, fields, and states by name. Propose all seven semantic phase mappings;
    call \`empirical_tracker_suggest\` for the selected workflow parent, allow
    shared states, show ambiguity, and obtain an explicit choice for every tied
-   or incompatible phase. Select off/manual/ensure ticket behavior and blockers-final,
-   milestones, or revisions visibility. Call \`empirical_tracker_preview\` and
-   display its complete secret-free effective policy before Save.
+   or incompatible phase. Select blockers-final, milestones, or revisions
+   visibility. Call \`empirical_tracker_preview\` and display its complete
+   secret-free effective policy before Save. \`No tracking\` MUST persist the
+   strict provider-free disabled setup record and make zero discovery, preview,
+   binding, ticket, or provider requests.
 4. Cancel stops without calling \`empirical_init\`, \`empirical_context\`, or a
    private mutating fallback. After confirmation, call \`empirical_init\` with
    all four explicit evidence booleans plus isolation, base, path, branch,
@@ -33832,7 +33840,7 @@ init_zod();
 
 // src/core.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm8 } from "node:fs/promises";
+import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm7 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname9, isAbsolute as isAbsolute10, join as join16, relative as relative15, resolve as resolve15, sep as sep5 } from "node:path";
 
 // src/agents.ts
@@ -36866,11 +36874,12 @@ init_zod();
 import { Buffer as Buffer2 } from "node:buffer";
 import { execFile } from "node:child_process";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { lstat as lstat10, readFile as readFile11, realpath as realpath4, rm as rm7 } from "node:fs/promises";
+import { lstat as lstat10, readFile as readFile11, realpath as realpath4 } from "node:fs/promises";
 import { join as join14, relative as relative13, resolve as resolve13 } from "node:path";
 init_protocol();
 var TRACKER_SCHEMA_VERSION = 2;
 var TRACKER_LEGACY_SCHEMA_VERSION = 1;
+var DISABLED_TRACKER_SETUP = { schemaVersion: 1, mode: "disabled" };
 var TRACKER_TIMEOUT_MS = 30000;
 var TRACKER_MAX_RESPONSE_BYTES = 1048576;
 var TRACKER_ERROR_LIMIT = 500;
@@ -37004,6 +37013,10 @@ var trackerSetupChangeSchema = exports_external.discriminatedUnion("mode", [
   exports_external.object({ mode: exports_external.literal("disabled") }).strict(),
   exports_external.object({ mode: exports_external.literal("apply"), policy: trackerPolicySchema }).strict()
 ]);
+var disabledTrackerSetupSchema = exports_external.object({
+  schemaVersion: exports_external.literal(1),
+  mode: exports_external.literal("disabled")
+}).strict();
 var trackerProjectionBaseSchema = {
   feature: exports_external.string().regex(/^[a-z0-9][a-z0-9-]{0,79}$/),
   phase: exports_external.enum([
@@ -37245,17 +37258,24 @@ function effectiveTrackerPolicy(policy) {
   };
 }
 async function loadTrackerPolicy(root) {
+  return (await loadTrackerSetupState(root)).policy;
+}
+async function loadTrackerSetupState(root) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (!await isFile(path))
-    return null;
-  return parseTrackerPolicy(await readJson3(path, "INVALID_TRACKER_POLICY"));
+    return { mode: "unconfigured", policy: null };
+  const persisted = await readJson3(path, "INVALID_TRACKER_POLICY");
+  if (disabledTrackerSetupSchema.safeParse(persisted).success) {
+    return { mode: "disabled", policy: null };
+  }
+  return { mode: "configured", policy: parseTrackerPolicy(persisted) };
 }
 async function configureTrackerPolicy(root, value, dependencies = {}) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (value === null) {
-    await rm7(path, { force: true });
+    await writeJsonAtomic(path, DISABLED_TRACKER_SETUP);
     return null;
   }
   const policy = parseTrackerPolicy(value);
@@ -42828,7 +42848,7 @@ async function writeOverlayFile(path, bytes, mode) {
     await rename6(temporary, path);
     await syncDirectory6(dirname9(path));
   } catch (error51) {
-    await rm8(temporary, { force: true });
+    await rm7(temporary, { force: true });
     throw error51;
   }
 }
@@ -42868,7 +42888,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
     for (const entry of applied.reverse()) {
       const path = resolve15(target, entry.path);
       if (entry.original === null || entry.originalMode === null) {
-        await rm8(path, { force: true });
+        await rm7(path, { force: true });
       } else {
         await writeOverlayFile(path, entry.original, entry.originalMode);
       }
@@ -42901,7 +42921,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
       });
       const destination = resolve15(target, path);
       if (sourceFile === null) {
-        await rm8(destination, { force: true });
+        await rm7(destination, { force: true });
       } else {
         await writeOverlayFile(destination, sourceFile.bytes, sourceFile.mode);
       }
@@ -43916,6 +43936,7 @@ function renderSetupSummary(settings, options = { current: false }) {
   const state = options.effective ? "effective" : options.current ? "current" : "recommended";
   const base = settings.isolation.baseBranch === "auto" && options.resolvedBase ? `auto (currently ${options.resolvedBase})` : settings.isolation.baseBranch;
   const inactive = settings.evidence.required ? "" : " · inactive";
+  const trackerSetup = options.trackerSetup ?? ("tracker" in options ? options.tracker ? { mode: "configured", policy: options.tracker } : { mode: "disabled", policy: null } : { mode: "unconfigured", policy: null });
   return [
     "◆ Empirical setup",
     `│  ${options.effective ? "Effective settings" : options.current ? "Current settings" : "Recommended settings"}`,
@@ -43940,15 +43961,23 @@ function renderSetupSummary(settings, options = { current: false }) {
     `│  ${marker2(settings.decisions.complexRecords === "required")} ${settings.decisions.complexRecords === "required" ? "Require reviewable decision records for Complex work" : "Do not require Complex decision records"}`,
     "│",
     "│  Tracker",
-    ...options.tracker ? [
-      `│  ● ${trackerLabel(options.tracker)} · ${state}`,
-      `│    Credential source: ${trackerCredentialNames(options.tracker).join(", ")} (environment names only)`
+    ...trackerSetup.mode === "configured" ? [
+      `│  ● ${trackerSelectionLabel(trackerSetup.policy)} · ${state}`,
+      `│    Credential source: ${trackerCredentialNames(trackerSetup.policy).join(", ")} (environment names only)`
+    ] : trackerSetup.mode === "disabled" ? [
+      `│  ● No tracking (local-only; no provider requests) · ${state}`
     ] : [
-      `│  ○ Local-only (disabled; no provider requests) · ${state}`
+      `│  ● Track all work (recommended; configure a provider before Save) · ${state}`,
+      "│  ○ No tracking (local-only; no provider requests)",
+      "│    Choose one tracker mode before setup can be saved."
     ]
   ].join(`
 `);
 }
+function trackerSelectionLabel(policy) {
+  const selection = policy.schemaVersion === 2 && policy.ticket === "ensure" ? "Track all work" : "Tracker configured";
+  return `${selection} · ${trackerLabel(policy)}`;
+}
 function trackerLabel(policy) {
   if (policy.schemaVersion === 1)
     return `${providerLabel(policy.provider)} · Policy v1 manual/legacy`;
@@ -44099,8 +44128,12 @@ async function main() {
       assertNoArgs(context.args, "init");
       const existingConfiguration = await readFile14(join17(context.root, ".empirical", "config.json"), "utf8").then(() => true, () => false);
       const trackerInput = trackerInputPath ? parseTrackerSetupChange(await readJsonPath(trackerInputPath, "init tracker")) : undefined;
+      const trackerSetup = await loadTrackerSetupState(context.root);
       const interactive = !context.json && !defaults && !configuration.explicit && !trackerInput && (forceInteractive || Boolean(process.stdin.isTTY && process.stdout.isTTY));
-      const chosenSetup = interactive ? await interactiveConfiguration(context.root, existingConfiguration ? await new ProjectStore(context.root).loadConfig() : null, existingConfiguration ? await loadTrackerPolicy(context.root) : null) : { configuration: configuration.input, tracker: trackerInput };
+      const chosenSetup = interactive ? await interactiveConfiguration(context.root, existingConfiguration ? await new ProjectStore(context.root).loadConfig() : null, trackerSetup) : {
+        configuration: configuration.input,
+        tracker: trackerInput ?? (trackerSetup.mode === "unconfigured" ? { mode: "disabled" } : { mode: "preserve" })
+      };
       const initialized = await EmpiricalProject.initialize(context.root, {
         ...profile ? { profile } : {},
         integrations,
@@ -44109,10 +44142,10 @@ async function main() {
         setupComplete: true
       });
       const config2 = await initialized.project.config();
-      const tracker = await initialized.project.trackerPolicy();
+      const effectiveTrackerSetup = await loadTrackerSetupState(context.root);
       emit({ state: initialized.state, config: config2, integrations: initialized.integrations, next: await initialized.project.next() }, context.json, () => renderIntegrationReport(`Empirical ${PRODUCT_VERSION} is ready in ${initialized.project.store.root}.`, initialized.integrations) + `
 
-${renderSetupSummary(setupSettingsFromConfig(config2), { current: true, tracker })}`);
+${renderSetupSummary(setupSettingsFromConfig(config2), { current: true, trackerSetup: effectiveTrackerSetup })}`);
       return;
     }
     case "config":
@@ -44132,7 +44165,7 @@ ${renderSetupSummary(setupSettingsFromConfig(config2), { current: true, tracker
       assertNoArgs(context.args, "config");
       const project = await EmpiricalProject.open(context.root);
       const current = await project.config();
-      const setup = defaults ? { configuration: defaultConfiguration(), tracker: undefined } : configuration.explicit ? { configuration: { ...configuration.input, setupComplete: true }, tracker: undefined } : (forceInteractive || Boolean(process.stdin.isTTY && process.stdout.isTTY)) && !context.json ? await interactiveConfiguration(project.store.root, current, await project.trackerPolicy()) : (() => {
+      const setup = defaults ? { configuration: defaultConfiguration(), tracker: undefined } : configuration.explicit ? { configuration: { ...configuration.input, setupComplete: true }, tracker: undefined } : (forceInteractive || Boolean(process.stdin.isTTY && process.stdout.isTTY)) && !context.json ? await interactiveConfiguration(project.store.root, current, await loadTrackerSetupState(project.store.root)) : (() => {
         throw new EmpiricalError("CONFIG_REQUIRED", "Use configuration flags, --defaults, or an interactive terminal");
       })();
       if (setup.tracker?.mode === "apply")
@@ -44611,7 +44644,7 @@ class LinePrompter {
     this.readline.close();
   }
 }
-async function interactiveConfiguration(root, current, currentTracker) {
+async function interactiveConfiguration(root, current, currentTrackerSetup) {
   const prompt = new LinePrompter;
   let settings = current ? setupSettingsFromConfig(current) : recommendedSetupSettings();
   let resolvedBase;
@@ -44626,7 +44659,7 @@ async function interactiveConfiguration(root, current, currentTracker) {
 ${renderSetupSummary(settings, {
     current: Boolean(current),
     ...resolvedBase ? { resolvedBase } : {},
-    tracker: currentTracker
+    trackerSetup: currentTrackerSetup
   })}`);
   try {
     const primary = current ? "keep" : "apply";
@@ -44640,27 +44673,33 @@ ${renderSetupSummary(settings, {
     if (["cancel", "x", "q"].includes(firstChoice))
       throw setupCancelled();
     if (firstChoice === primary || firstChoice === (current ? "k" : "a")) {
-      return { configuration: setupConfigurationInput(settings), tracker: { mode: "preserve" } };
+      if (currentTrackerSetup.mode !== "unconfigured") {
+        return { configuration: setupConfigurationInput(settings), tracker: { mode: "preserve" } };
+      }
+      const tracker = await interactiveTrackerSetup(prompt, currentTrackerSetup);
+      console.log(`
+${renderSetupSummary(settings, {
+        current: false,
+        effective: true,
+        ...resolvedBase ? { resolvedBase } : {},
+        trackerSetup: effectiveTrackerSetupState(currentTrackerSetup, tracker)
+      })}`);
+      await confirmSetupSave(prompt, "Save this complete setup?");
+      return { configuration: setupConfigurationInput(settings), tracker };
     }
     if (firstChoice === "tracker" || firstChoice === "t") {
-      const tracker = await interactiveTrackerSetup(prompt, currentTracker);
-      const previewPolicy = tracker.mode === "apply" ? tracker.policy : null;
+      const tracker = await interactiveTrackerSetup(prompt, currentTrackerSetup);
       console.log(`
 ${renderSetupSummary(settings, {
         current: false,
         effective: true,
         ...resolvedBase ? { resolvedBase } : {},
-        tracker: previewPolicy
+        trackerSetup: effectiveTrackerSetupState(currentTrackerSetup, tracker)
       })}`);
-      console.log(`
-◇ Save this effective tracker setup?`);
-      console.log("│  ● Save (default)");
-      console.log("│  ○ Cancel");
-      const choice = await askEnumDefault(prompt, "Choice [save]: ", "save", new Set(["save", "s", "cancel", "x", "q"]));
-      if (["cancel", "x", "q"].includes(choice))
-        throw setupCancelled();
+      await confirmSetupSave(prompt, "Save this effective tracker setup?");
       return { configuration: setupConfigurationInput(settings), tracker };
     }
+    let customizedTracker;
     while (true) {
       settings = await customizeSetup(prompt, settings);
       try {
@@ -44671,12 +44710,16 @@ ${renderSetupSummary(settings, {
 Please review the setup sections again.`);
         continue;
       }
+      if (!customizedTracker && currentTrackerSetup.mode === "unconfigured") {
+        customizedTracker = await interactiveTrackerSetup(prompt, currentTrackerSetup);
+      }
+      const tracker = customizedTracker ?? { mode: "preserve" };
       console.log(`
 ${renderSetupSummary(settings, {
         current: false,
         effective: true,
         ...resolvedBase ? { resolvedBase } : {},
-        tracker: currentTracker
+        trackerSetup: effectiveTrackerSetupState(currentTrackerSetup, tracker)
       })}`);
       console.log(`
 ◇ Save these effective settings?`);
@@ -44685,7 +44728,7 @@ ${renderSetupSummary(settings, {
       console.log("│  ○ Cancel");
       const finalChoice = await askEnumDefault(prompt, "Choice [save]: ", "save", new Set(["save", "s", "edit", "e", "cancel", "x", "q"]));
       if (finalChoice === "save" || finalChoice === "s") {
-        return { configuration: setupConfigurationInput(settings), tracker: { mode: "preserve" } };
+        return { configuration: setupConfigurationInput(settings), tracker };
       }
       if (["cancel", "x", "q"].includes(finalChoice))
         throw setupCancelled();
@@ -44697,16 +44740,32 @@ ${renderSetupSummary(settings, {
 async function interactiveTrackerSetup(prompt, current) {
   console.log(`
 ◆ Tracker · discover accessible targets; credential values stay in the host environment.`);
-  if (current)
-    console.log("│  preserve (default) · disable · linear · github · jira");
-  else
-    console.log("│  local (default) · linear · github · jira");
-  const fallback = current ? "preserve" : "local";
-  const provider = await askEnumDefault(prompt, `Tracker [${fallback}]: `, fallback, new Set(["preserve", "p", "disable", "disabled", "off", "local", "linear", "github", "jira"]));
-  if (provider === "preserve" || provider === "p")
-    return { mode: "preserve" };
-  if (["disable", "disabled", "off", "local"].includes(provider))
-    return { mode: "disabled" };
+  let trackAll = false;
+  let provider;
+  if (current.mode === "unconfigured") {
+    console.log("│  ● Track all work (recommended default)");
+    console.log("│  ○ No tracking");
+    const choice = await askEnumDefault(prompt, "Tracker [track-all]: ", "track-all", new Set(["track-all", "track", "all", "t", "no-tracking", "no", "none", "off", "local"]));
+    if (["no-tracking", "no", "none", "off", "local"].includes(choice))
+      return { mode: "disabled" };
+    trackAll = true;
+    console.log("│  Choose a provider for Track all work: linear · github · jira");
+    provider = await askEnumRequired(prompt, "Provider (linear/github/jira): ", new Set(["linear", "github", "jira"]));
+  } else {
+    if (current.mode === "configured")
+      console.log("│  preserve (default) · disable · track-all · linear · github · jira");
+    else
+      console.log("│  preserve (default) · track-all · linear · github · jira");
+    provider = await askEnumDefault(prompt, "Tracker [preserve]: ", "preserve", new Set(["preserve", "p", "disable", "disabled", "off", "local", "track-all", "track", "all", "t", "linear", "github", "jira"]));
+    if (provider === "preserve" || provider === "p")
+      return { mode: "preserve" };
+    if (["disable", "disabled", "off", "local"].includes(provider))
+      return { mode: "disabled" };
+    if (["track-all", "track", "all", "t"].includes(provider)) {
+      trackAll = true;
+      provider = await askEnumRequired(prompt, "Provider (linear/github/jira): ", new Set(["linear", "github", "jira"]));
+    }
+  }
   let discovery;
   let credentialEnv;
   let jiraSiteUrl = null;
@@ -44729,7 +44788,9 @@ async function interactiveTrackerSetup(prompt, current) {
   const scoped = scopedTrackerDiscovery(discovery, policyTarget.stateParent);
   const suggested = suggestTrackerStateMapping(scoped);
   const states = await editTrackerMapping(prompt, scoped, suggested);
-  const ticket = await askEnumDefault(prompt, "Ticket behavior [ensure] (off/manual/ensure): ", "ensure", new Set(["off", "manual", "ensure"]));
+  const ticket = trackAll ? "ensure" : await askEnumDefault(prompt, "Ticket behavior [ensure] (off/manual/ensure): ", "ensure", new Set(["off", "manual", "ensure"]));
+  if (trackAll)
+    console.log("│  Ticket behavior: ensure (Track all work)");
   const visibility = await askEnumDefault(prompt, "Progress visibility [milestones] (blockers-final/milestones/revisions): ", "milestones", new Set(["blockers-final", "milestones", "revisions"]));
   const policy = provider === "linear" ? {
     schemaVersion: 2,
@@ -44890,6 +44951,30 @@ async function askEnumDefault(prompt, question, fallback, allowed) {
     console.log(`! Choose one of: ${[...allowed].join(", ")}.`);
   }
 }
+async function askEnumRequired(prompt, question, allowed) {
+  while (true) {
+    const answer = (await prompt.ask(question)).toLowerCase();
+    if (allowed.has(answer))
+      return answer;
+    console.log(`! Choose one of: ${[...allowed].join(", ")}.`);
+  }
+}
+function effectiveTrackerSetupState(current, change) {
+  if (change.mode === "preserve")
+    return current;
+  if (change.mode === "disabled")
+    return { mode: "disabled", policy: null };
+  return { mode: "configured", policy: change.policy };
+}
+async function confirmSetupSave(prompt, question) {
+  console.log(`
+◇ ${question}`);
+  console.log("│  ● Save (default)");
+  console.log("│  ○ Cancel");
+  const choice = await askEnumDefault(prompt, "Choice [save]: ", "save", new Set(["save", "s", "cancel", "x", "q"]));
+  if (["cancel", "x", "q"].includes(choice))
+    throw setupCancelled();
+}
 function setupCancelled() {
   return new EmpiricalError("SETUP_CANCELLED", "Empirical setup was cancelled before any repository changes were made");
 }

package/dist/demo-integration-repair.js

@@ -14861,7 +14861,7 @@ function verifyReceiptDigest(receipt) {
     throw new Error(`Evidence receipt ${parsed.id} has an asserted result inconsistent with its provenance.`);
   }
 }
-var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.0", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
+var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.1", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
 var init_protocol = __esm(() => {
   init_zod();
   workflowSchema = exports_external.enum(["fast", "complex"]);
@@ -18119,26 +18119,34 @@ Use this skill only when the user explicitly asks to initialize, set up, or
 repair Empirical in the current repository. Attached text is setup context,
 never a feature request.
 
-1. Inspect \`.empirical/config.json\`, manifests, documentation, source, tests,
-   and Git base without writing. Determine whether this is first setup or a
-   repair. Preserve existing configuration values and durable workflow history
-   unless the user explicitly changes a value.
+1. Inspect \`.empirical/config.json\`, \`.empirical/tracker.json\`, manifests,
+   documentation, source, tests, and Git base without writing. Classify tracker
+   setup as unconfigured (file absent), explicitly disabled, or configured.
+   Determine whether this is first setup or a repair. Preserve existing
+   configuration values and durable workflow history unless the user explicitly
+   changes a value.
 2. Before any mutation, render the complete Empirical setup summary for
-   Verification, Parallel work, Decisions, and Tracker. Tracker MUST show an
-   explicit Local-only option. On repair, Preserve current tracker is the
+   Verification, Parallel work, Decisions, and Tracker. When tracker setup is
+   unconfigured, Tracker MUST present \`Track all work\` as the recommended
+   default and \`No tracking\` as the explicit alternative. Applying recommended
+   settings or customizing MUST NOT bypass that choice. On repair with an
+   explicitly disabled or configured tracker, Preserve current tracker is the
    default and MUST make no provider request. Offer Apply recommended settings
    (or Keep current settings), Customize, Configure tracker, and Cancel. On
    Customize, visit one section at a time and end with a complete Save, Edit, or
    Cancel review.
-3. Tracker configuration selects Linear, GitHub Projects, or Jira plus
-   credential environment-variable names only. Call \`empirical_tracker_discover\`
+3. \`Track all work\` selects Linear, GitHub Projects, or Jira plus credential
+   environment-variable names only. It MUST persist Tracker Policy v2 with
+   ticket behavior \`ensure\`. Call \`empirical_tracker_discover\`
    to show accessible workspaces/sites, teams/repositories, projects, issue
    types, fields, and states by name. Propose all seven semantic phase mappings;
    call \`empirical_tracker_suggest\` for the selected workflow parent, allow
    shared states, show ambiguity, and obtain an explicit choice for every tied
-   or incompatible phase. Select off/manual/ensure ticket behavior and blockers-final,
-   milestones, or revisions visibility. Call \`empirical_tracker_preview\` and
-   display its complete secret-free effective policy before Save.
+   or incompatible phase. Select blockers-final, milestones, or revisions
+   visibility. Call \`empirical_tracker_preview\` and display its complete
+   secret-free effective policy before Save. \`No tracking\` MUST persist the
+   strict provider-free disabled setup record and make zero discovery, preview,
+   binding, ticket, or provider requests.
 4. Cancel stops without calling \`empirical_init\`, \`empirical_context\`, or a
    private mutating fallback. After confirmation, call \`empirical_init\` with
    all four explicit evidence booleans plus isolation, base, path, branch,
@@ -18870,13 +18878,13 @@ function relativeLabel(root, path) {
 
 // src/demo-integration-repair.ts
 import { spawnSync as spawnSync6 } from "node:child_process";
-import { mkdir as mkdir8, mkdtemp, rm as rm9, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir8, mkdtemp, rm as rm8, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join as join17 } from "node:path";
 
 // src/core.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm8 } from "node:fs/promises";
+import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm7 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname9, isAbsolute as isAbsolute10, join as join16, relative as relative15, resolve as resolve15, sep as sep5 } from "node:path";
 
 // src/agents.ts
@@ -21910,11 +21918,12 @@ init_zod();
 import { Buffer as Buffer2 } from "node:buffer";
 import { execFile } from "node:child_process";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { lstat as lstat10, readFile as readFile11, realpath as realpath4, rm as rm7 } from "node:fs/promises";
+import { lstat as lstat10, readFile as readFile11, realpath as realpath4 } from "node:fs/promises";
 import { join as join14, relative as relative13, resolve as resolve13 } from "node:path";
 init_protocol();
 var TRACKER_SCHEMA_VERSION = 2;
 var TRACKER_LEGACY_SCHEMA_VERSION = 1;
+var DISABLED_TRACKER_SETUP = { schemaVersion: 1, mode: "disabled" };
 var TRACKER_TIMEOUT_MS = 30000;
 var TRACKER_MAX_RESPONSE_BYTES = 1048576;
 var TRACKER_ERROR_LIMIT = 500;
@@ -22048,6 +22057,10 @@ var trackerSetupChangeSchema = exports_external.discriminatedUnion("mode", [
   exports_external.object({ mode: exports_external.literal("disabled") }).strict(),
   exports_external.object({ mode: exports_external.literal("apply"), policy: trackerPolicySchema }).strict()
 ]);
+var disabledTrackerSetupSchema = exports_external.object({
+  schemaVersion: exports_external.literal(1),
+  mode: exports_external.literal("disabled")
+}).strict();
 var trackerProjectionBaseSchema = {
   feature: exports_external.string().regex(/^[a-z0-9][a-z0-9-]{0,79}$/),
   phase: exports_external.enum([
@@ -22289,17 +22302,24 @@ function effectiveTrackerPolicy(policy) {
   };
 }
 async function loadTrackerPolicy(root) {
+  return (await loadTrackerSetupState(root)).policy;
+}
+async function loadTrackerSetupState(root) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (!await isFile(path))
-    return null;
-  return parseTrackerPolicy(await readJson3(path, "INVALID_TRACKER_POLICY"));
+    return { mode: "unconfigured", policy: null };
+  const persisted = await readJson3(path, "INVALID_TRACKER_POLICY");
+  if (disabledTrackerSetupSchema.safeParse(persisted).success) {
+    return { mode: "disabled", policy: null };
+  }
+  return { mode: "configured", policy: parseTrackerPolicy(persisted) };
 }
 async function configureTrackerPolicy(root, value, dependencies = {}) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (value === null) {
-    await rm7(path, { force: true });
+    await writeJsonAtomic(path, DISABLED_TRACKER_SETUP);
     return null;
   }
   const policy = parseTrackerPolicy(value);
@@ -27872,7 +27892,7 @@ async function writeOverlayFile(path, bytes, mode) {
     await rename6(temporary, path);
     await syncDirectory6(dirname9(path));
   } catch (error51) {
-    await rm8(temporary, { force: true });
+    await rm7(temporary, { force: true });
     throw error51;
   }
 }
@@ -27912,7 +27932,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
     for (const entry of applied.reverse()) {
       const path = resolve15(target, entry.path);
       if (entry.original === null || entry.originalMode === null) {
-        await rm8(path, { force: true });
+        await rm7(path, { force: true });
       } else {
         await writeOverlayFile(path, entry.original, entry.originalMode);
       }
@@ -27945,7 +27965,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
       });
       const destination = resolve15(target, path);
       if (sourceFile === null) {
-        await rm8(destination, { force: true });
+        await rm7(destination, { force: true });
       } else {
         await writeOverlayFile(destination, sourceFile.bytes, sourceFile.mode);
       }
@@ -28093,5 +28113,5 @@ Verified demo repository context.
   }, null, 2)}
 `);
 } finally {
-  await rm9(temporary, { recursive: true, force: true });
+  await rm8(temporary, { recursive: true, force: true });
 }

package/dist/index.js

@@ -14861,7 +14861,7 @@ function verifyReceiptDigest(receipt) {
     throw new Error(`Evidence receipt ${parsed.id} has an asserted result inconsistent with its provenance.`);
   }
 }
-var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.0", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
+var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.1", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
 var init_protocol = __esm(() => {
   init_zod();
   workflowSchema = exports_external.enum(["fast", "complex"]);
@@ -18119,26 +18119,34 @@ Use this skill only when the user explicitly asks to initialize, set up, or
 repair Empirical in the current repository. Attached text is setup context,
 never a feature request.
 
-1. Inspect \`.empirical/config.json\`, manifests, documentation, source, tests,
-   and Git base without writing. Determine whether this is first setup or a
-   repair. Preserve existing configuration values and durable workflow history
-   unless the user explicitly changes a value.
+1. Inspect \`.empirical/config.json\`, \`.empirical/tracker.json\`, manifests,
+   documentation, source, tests, and Git base without writing. Classify tracker
+   setup as unconfigured (file absent), explicitly disabled, or configured.
+   Determine whether this is first setup or a repair. Preserve existing
+   configuration values and durable workflow history unless the user explicitly
+   changes a value.
 2. Before any mutation, render the complete Empirical setup summary for
-   Verification, Parallel work, Decisions, and Tracker. Tracker MUST show an
-   explicit Local-only option. On repair, Preserve current tracker is the
+   Verification, Parallel work, Decisions, and Tracker. When tracker setup is
+   unconfigured, Tracker MUST present \`Track all work\` as the recommended
+   default and \`No tracking\` as the explicit alternative. Applying recommended
+   settings or customizing MUST NOT bypass that choice. On repair with an
+   explicitly disabled or configured tracker, Preserve current tracker is the
    default and MUST make no provider request. Offer Apply recommended settings
    (or Keep current settings), Customize, Configure tracker, and Cancel. On
    Customize, visit one section at a time and end with a complete Save, Edit, or
    Cancel review.
-3. Tracker configuration selects Linear, GitHub Projects, or Jira plus
-   credential environment-variable names only. Call \`empirical_tracker_discover\`
+3. \`Track all work\` selects Linear, GitHub Projects, or Jira plus credential
+   environment-variable names only. It MUST persist Tracker Policy v2 with
+   ticket behavior \`ensure\`. Call \`empirical_tracker_discover\`
    to show accessible workspaces/sites, teams/repositories, projects, issue
    types, fields, and states by name. Propose all seven semantic phase mappings;
    call \`empirical_tracker_suggest\` for the selected workflow parent, allow
    shared states, show ambiguity, and obtain an explicit choice for every tied
-   or incompatible phase. Select off/manual/ensure ticket behavior and blockers-final,
-   milestones, or revisions visibility. Call \`empirical_tracker_preview\` and
-   display its complete secret-free effective policy before Save.
+   or incompatible phase. Select blockers-final, milestones, or revisions
+   visibility. Call \`empirical_tracker_preview\` and display its complete
+   secret-free effective policy before Save. \`No tracking\` MUST persist the
+   strict provider-free disabled setup record and make zero discovery, preview,
+   binding, ticket, or provider requests.
 4. Cancel stops without calling \`empirical_init\`, \`empirical_context\`, or a
    private mutating fallback. After confirmation, call \`empirical_init\` with
    all four explicit evidence booleans plus isolation, base, path, branch,
@@ -18870,7 +18878,7 @@ function relativeLabel(root, path) {
 
 // src/core.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm8 } from "node:fs/promises";
+import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm7 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname9, isAbsolute as isAbsolute10, join as join16, relative as relative15, resolve as resolve15, sep as sep5 } from "node:path";
 
 // src/agents.ts
@@ -21904,11 +21912,12 @@ init_zod();
 import { Buffer as Buffer2 } from "node:buffer";
 import { execFile } from "node:child_process";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { lstat as lstat10, readFile as readFile11, realpath as realpath4, rm as rm7 } from "node:fs/promises";
+import { lstat as lstat10, readFile as readFile11, realpath as realpath4 } from "node:fs/promises";
 import { join as join14, relative as relative13, resolve as resolve13 } from "node:path";
 init_protocol();
 var TRACKER_SCHEMA_VERSION = 2;
 var TRACKER_LEGACY_SCHEMA_VERSION = 1;
+var DISABLED_TRACKER_SETUP = { schemaVersion: 1, mode: "disabled" };
 var TRACKER_TIMEOUT_MS = 30000;
 var TRACKER_MAX_RESPONSE_BYTES = 1048576;
 var TRACKER_ERROR_LIMIT = 500;
@@ -22042,6 +22051,10 @@ var trackerSetupChangeSchema = exports_external.discriminatedUnion("mode", [
   exports_external.object({ mode: exports_external.literal("disabled") }).strict(),
   exports_external.object({ mode: exports_external.literal("apply"), policy: trackerPolicySchema }).strict()
 ]);
+var disabledTrackerSetupSchema = exports_external.object({
+  schemaVersion: exports_external.literal(1),
+  mode: exports_external.literal("disabled")
+}).strict();
 var trackerProjectionBaseSchema = {
   feature: exports_external.string().regex(/^[a-z0-9][a-z0-9-]{0,79}$/),
   phase: exports_external.enum([
@@ -22283,17 +22296,24 @@ function effectiveTrackerPolicy(policy) {
   };
 }
 async function loadTrackerPolicy(root) {
+  return (await loadTrackerSetupState(root)).policy;
+}
+async function loadTrackerSetupState(root) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (!await isFile(path))
-    return null;
-  return parseTrackerPolicy(await readJson3(path, "INVALID_TRACKER_POLICY"));
+    return { mode: "unconfigured", policy: null };
+  const persisted = await readJson3(path, "INVALID_TRACKER_POLICY");
+  if (disabledTrackerSetupSchema.safeParse(persisted).success) {
+    return { mode: "disabled", policy: null };
+  }
+  return { mode: "configured", policy: parseTrackerPolicy(persisted) };
 }
 async function configureTrackerPolicy(root, value, dependencies = {}) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (value === null) {
-    await rm7(path, { force: true });
+    await writeJsonAtomic(path, DISABLED_TRACKER_SETUP);
     return null;
   }
   const policy = parseTrackerPolicy(value);
@@ -27866,7 +27886,7 @@ async function writeOverlayFile(path, bytes, mode) {
     await rename6(temporary, path);
     await syncDirectory6(dirname9(path));
   } catch (error51) {
-    await rm8(temporary, { force: true });
+    await rm7(temporary, { force: true });
     throw error51;
   }
 }
@@ -27906,7 +27926,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
     for (const entry of applied.reverse()) {
       const path = resolve15(target, entry.path);
       if (entry.original === null || entry.originalMode === null) {
-        await rm8(path, { force: true });
+        await rm7(path, { force: true });
       } else {
         await writeOverlayFile(path, entry.original, entry.originalMode);
       }
@@ -27939,7 +27959,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
       });
       const destination = resolve15(target, path);
       if (sourceFile === null) {
-        await rm8(destination, { force: true });
+        await rm7(destination, { force: true });
       } else {
         await writeOverlayFile(destination, sourceFile.bytes, sourceFile.mode);
       }

package/dist/integrations.js

@@ -14861,7 +14861,7 @@ function verifyReceiptDigest(receipt) {
     throw new Error(`Evidence receipt ${parsed.id} has an asserted result inconsistent with its provenance.`);
   }
 }
-var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.0", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
+var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.1", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
 var init_protocol = __esm(() => {
   init_zod();
   workflowSchema = exports_external.enum(["fast", "complex"]);
@@ -18119,26 +18119,34 @@ Use this skill only when the user explicitly asks to initialize, set up, or
 repair Empirical in the current repository. Attached text is setup context,
 never a feature request.
 
-1. Inspect \`.empirical/config.json\`, manifests, documentation, source, tests,
-   and Git base without writing. Determine whether this is first setup or a
-   repair. Preserve existing configuration values and durable workflow history
-   unless the user explicitly changes a value.
+1. Inspect \`.empirical/config.json\`, \`.empirical/tracker.json\`, manifests,
+   documentation, source, tests, and Git base without writing. Classify tracker
+   setup as unconfigured (file absent), explicitly disabled, or configured.
+   Determine whether this is first setup or a repair. Preserve existing
+   configuration values and durable workflow history unless the user explicitly
+   changes a value.
 2. Before any mutation, render the complete Empirical setup summary for
-   Verification, Parallel work, Decisions, and Tracker. Tracker MUST show an
-   explicit Local-only option. On repair, Preserve current tracker is the
+   Verification, Parallel work, Decisions, and Tracker. When tracker setup is
+   unconfigured, Tracker MUST present \`Track all work\` as the recommended
+   default and \`No tracking\` as the explicit alternative. Applying recommended
+   settings or customizing MUST NOT bypass that choice. On repair with an
+   explicitly disabled or configured tracker, Preserve current tracker is the
    default and MUST make no provider request. Offer Apply recommended settings
    (or Keep current settings), Customize, Configure tracker, and Cancel. On
    Customize, visit one section at a time and end with a complete Save, Edit, or
    Cancel review.
-3. Tracker configuration selects Linear, GitHub Projects, or Jira plus
-   credential environment-variable names only. Call \`empirical_tracker_discover\`
+3. \`Track all work\` selects Linear, GitHub Projects, or Jira plus credential
+   environment-variable names only. It MUST persist Tracker Policy v2 with
+   ticket behavior \`ensure\`. Call \`empirical_tracker_discover\`
    to show accessible workspaces/sites, teams/repositories, projects, issue
    types, fields, and states by name. Propose all seven semantic phase mappings;
    call \`empirical_tracker_suggest\` for the selected workflow parent, allow
    shared states, show ambiguity, and obtain an explicit choice for every tied
-   or incompatible phase. Select off/manual/ensure ticket behavior and blockers-final,
-   milestones, or revisions visibility. Call \`empirical_tracker_preview\` and
-   display its complete secret-free effective policy before Save.
+   or incompatible phase. Select blockers-final, milestones, or revisions
+   visibility. Call \`empirical_tracker_preview\` and display its complete
+   secret-free effective policy before Save. \`No tracking\` MUST persist the
+   strict provider-free disabled setup record and make zero discovery, preview,
+   binding, ticket, or provider requests.
 4. Cancel stops without calling \`empirical_init\`, \`empirical_context\`, or a
    private mutating fallback. After confirmation, call \`empirical_init\` with
    all four explicit evidence booleans plus isolation, base, path, branch,

package/dist/mcp.js

@@ -14861,7 +14861,7 @@ function verifyReceiptDigest(receipt) {
     throw new Error(`Evidence receipt ${parsed.id} has an asserted result inconsistent with its provenance.`);
   }
 }
-var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.0", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
+var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.1", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
 var init_protocol = __esm(() => {
   init_zod();
   workflowSchema = exports_external.enum(["fast", "complex"]);
@@ -24684,26 +24684,34 @@ Use this skill only when the user explicitly asks to initialize, set up, or
 repair Empirical in the current repository. Attached text is setup context,
 never a feature request.
 
-1. Inspect \`.empirical/config.json\`, manifests, documentation, source, tests,
-   and Git base without writing. Determine whether this is first setup or a
-   repair. Preserve existing configuration values and durable workflow history
-   unless the user explicitly changes a value.
+1. Inspect \`.empirical/config.json\`, \`.empirical/tracker.json\`, manifests,
+   documentation, source, tests, and Git base without writing. Classify tracker
+   setup as unconfigured (file absent), explicitly disabled, or configured.
+   Determine whether this is first setup or a repair. Preserve existing
+   configuration values and durable workflow history unless the user explicitly
+   changes a value.
 2. Before any mutation, render the complete Empirical setup summary for
-   Verification, Parallel work, Decisions, and Tracker. Tracker MUST show an
-   explicit Local-only option. On repair, Preserve current tracker is the
+   Verification, Parallel work, Decisions, and Tracker. When tracker setup is
+   unconfigured, Tracker MUST present \`Track all work\` as the recommended
+   default and \`No tracking\` as the explicit alternative. Applying recommended
+   settings or customizing MUST NOT bypass that choice. On repair with an
+   explicitly disabled or configured tracker, Preserve current tracker is the
    default and MUST make no provider request. Offer Apply recommended settings
    (or Keep current settings), Customize, Configure tracker, and Cancel. On
    Customize, visit one section at a time and end with a complete Save, Edit, or
    Cancel review.
-3. Tracker configuration selects Linear, GitHub Projects, or Jira plus
-   credential environment-variable names only. Call \`empirical_tracker_discover\`
+3. \`Track all work\` selects Linear, GitHub Projects, or Jira plus credential
+   environment-variable names only. It MUST persist Tracker Policy v2 with
+   ticket behavior \`ensure\`. Call \`empirical_tracker_discover\`
    to show accessible workspaces/sites, teams/repositories, projects, issue
    types, fields, and states by name. Propose all seven semantic phase mappings;
    call \`empirical_tracker_suggest\` for the selected workflow parent, allow
    shared states, show ambiguity, and obtain an explicit choice for every tied
-   or incompatible phase. Select off/manual/ensure ticket behavior and blockers-final,
-   milestones, or revisions visibility. Call \`empirical_tracker_preview\` and
-   display its complete secret-free effective policy before Save.
+   or incompatible phase. Select blockers-final, milestones, or revisions
+   visibility. Call \`empirical_tracker_preview\` and display its complete
+   secret-free effective policy before Save. \`No tracking\` MUST persist the
+   strict provider-free disabled setup record and make zero discovery, preview,
+   binding, ticket, or provider requests.
 4. Cancel stops without calling \`empirical_init\`, \`empirical_context\`, or a
    private mutating fallback. After confirmation, call \`empirical_init\` with
    all four explicit evidence booleans plus isolation, base, path, branch,
@@ -33831,7 +33839,7 @@ init_zod();
 
 // src/core.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm8 } from "node:fs/promises";
+import { chmod as chmod2, lstat as lstat11, mkdir as mkdir7, open as open6, readFile as readFile13, realpath as realpath5, rename as rename6, rm as rm7 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname9, isAbsolute as isAbsolute10, join as join16, relative as relative15, resolve as resolve15, sep as sep5 } from "node:path";
 
 // src/agents.ts
@@ -36865,11 +36873,12 @@ init_zod();
 import { Buffer as Buffer2 } from "node:buffer";
 import { execFile } from "node:child_process";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { lstat as lstat10, readFile as readFile11, realpath as realpath4, rm as rm7 } from "node:fs/promises";
+import { lstat as lstat10, readFile as readFile11, realpath as realpath4 } from "node:fs/promises";
 import { join as join14, relative as relative13, resolve as resolve13 } from "node:path";
 init_protocol();
 var TRACKER_SCHEMA_VERSION = 2;
 var TRACKER_LEGACY_SCHEMA_VERSION = 1;
+var DISABLED_TRACKER_SETUP = { schemaVersion: 1, mode: "disabled" };
 var TRACKER_TIMEOUT_MS = 30000;
 var TRACKER_MAX_RESPONSE_BYTES = 1048576;
 var TRACKER_ERROR_LIMIT = 500;
@@ -37003,6 +37012,10 @@ var trackerSetupChangeSchema = exports_external.discriminatedUnion("mode", [
   exports_external.object({ mode: exports_external.literal("disabled") }).strict(),
   exports_external.object({ mode: exports_external.literal("apply"), policy: trackerPolicySchema }).strict()
 ]);
+var disabledTrackerSetupSchema = exports_external.object({
+  schemaVersion: exports_external.literal(1),
+  mode: exports_external.literal("disabled")
+}).strict();
 var trackerProjectionBaseSchema = {
   feature: exports_external.string().regex(/^[a-z0-9][a-z0-9-]{0,79}$/),
   phase: exports_external.enum([
@@ -37244,17 +37257,24 @@ function effectiveTrackerPolicy(policy) {
   };
 }
 async function loadTrackerPolicy(root) {
+  return (await loadTrackerSetupState(root)).policy;
+}
+async function loadTrackerSetupState(root) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (!await isFile(path))
-    return null;
-  return parseTrackerPolicy(await readJson3(path, "INVALID_TRACKER_POLICY"));
+    return { mode: "unconfigured", policy: null };
+  const persisted = await readJson3(path, "INVALID_TRACKER_POLICY");
+  if (disabledTrackerSetupSchema.safeParse(persisted).success) {
+    return { mode: "disabled", policy: null };
+  }
+  return { mode: "configured", policy: parseTrackerPolicy(persisted) };
 }
 async function configureTrackerPolicy(root, value, dependencies = {}) {
   const path = trackerPolicyPath(root);
   await assertPlainTrackerPath(root, path);
   if (value === null) {
-    await rm7(path, { force: true });
+    await writeJsonAtomic(path, DISABLED_TRACKER_SETUP);
     return null;
   }
   const policy = parseTrackerPolicy(value);
@@ -42827,7 +42847,7 @@ async function writeOverlayFile(path, bytes, mode) {
     await rename6(temporary, path);
     await syncDirectory6(dirname9(path));
   } catch (error51) {
-    await rm8(temporary, { force: true });
+    await rm7(temporary, { force: true });
     throw error51;
   }
 }
@@ -42867,7 +42887,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
     for (const entry of applied.reverse()) {
       const path = resolve15(target, entry.path);
       if (entry.original === null || entry.originalMode === null) {
-        await rm8(path, { force: true });
+        await rm7(path, { force: true });
       } else {
         await writeOverlayFile(path, entry.original, entry.originalMode);
       }
@@ -42900,7 +42920,7 @@ async function applySourceOverlay(sourceRoot, targetRoot) {
       });
       const destination = resolve15(target, path);
       if (sourceFile === null) {
-        await rm8(destination, { force: true });
+        await rm7(destination, { force: true });
       } else {
         await writeOverlayFile(destination, sourceFile.bytes, sourceFile.mode);
       }

package/dist/protocol.d.ts

@@ -3,7 +3,7 @@ export declare const SCHEMA_VERSION: 5;
 export declare const POLICY_SCHEMA_VERSION: 2;
 export declare const MANIFEST_SCHEMA_VERSION: 2;
 export declare const RECEIPT_SCHEMA_VERSION: 1;
-export declare const PRODUCT_VERSION = "0.24.0";
+export declare const PRODUCT_VERSION = "0.24.1";
 export declare const workflowSchema: z.ZodEnum<{
     complex: "complex";
     fast: "fast";

package/dist/protocol.js

@@ -14861,7 +14861,7 @@ function verifyReceiptDigest(receipt) {
     throw new Error(`Evidence receipt ${parsed.id} has an asserted result inconsistent with its provenance.`);
   }
 }
-var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.0", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
+var SCHEMA_VERSION = 5, POLICY_SCHEMA_VERSION = 2, MANIFEST_SCHEMA_VERSION = 2, RECEIPT_SCHEMA_VERSION = 1, PRODUCT_VERSION = "0.24.1", workflowSchema, executionModeSchema, riskFloorSchema, completionLevelSchema, phaseSchema, workflowStatusSchema, criterionSchema, evidenceKindSchema, commandPolicySchema, evidencePolicySchema, projectPolicySchema, impactManifestSchema, authorizationSchema, COMPLETION_ORDER, receiptProvenanceSchema, receiptBaseSchema, executedReceiptSchema, artifactRecordSchema, collectedReceiptSchema, evidenceReceiptSchema;
 var init_protocol = __esm(() => {
   init_zod();
   workflowSchema = exports_external.enum(["fast", "complex"]);

package/dist/setup.d.ts

@@ -1,3 +1,4 @@
+import type { TrackerSetupState } from "./tracking.js";
 import type { ProjectConfig, ProjectConfigurationInput, TrackerPolicy } from "./types.js";
 export type SetupSettings = Pick<ProjectConfig, "evidence" | "isolation" | "decisions">;
 export declare function recommendedSetupSettings(): SetupSettings;
@@ -9,4 +10,5 @@ export declare function renderSetupSummary(settings: SetupSettings, options?: {
     effective?: boolean;
     resolvedBase?: string;
     tracker?: TrackerPolicy | null;
+    trackerSetup?: TrackerSetupState;
 }): string;

package/dist/tracking.d.ts

@@ -2,6 +2,10 @@ import { z } from "zod";
 import type { TrackerBindInput, TrackerBindResult, TrackerBinding, TrackerArtifact, TrackerDiscovery, TrackerDiscoveryInput, TrackerMappingSuggestion, TrackerDependencies, EffectiveTrackerPolicy, TrackerPendingRecord, TrackerPolicy, TrackerPolicyPreview, TrackerProgressState, TrackerProjection, TrackerStateMap, TrackerStatus, TrackerSetupChange, TrackerSyncResult, TrackerTransport, WorkflowState } from "./types.js";
 export declare const TRACKER_SCHEMA_VERSION: 2;
 export declare const TRACKER_LEGACY_SCHEMA_VERSION: 1;
+export declare const DISABLED_TRACKER_SETUP: {
+    readonly schemaVersion: 1;
+    readonly mode: "disabled";
+};
 export declare const trackerPolicySchema: z.ZodUnion<readonly [z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
     provider: z.ZodLiteral<"github">;
@@ -315,6 +319,16 @@ export declare const trackerSetupChangeSchema: z.ZodDiscriminatedUnion<[z.ZodObj
         }>;
     }, z.core.$strict>]>;
 }, z.core.$strict>], "mode">;
+export type TrackerSetupState = {
+    mode: "unconfigured";
+    policy: null;
+} | {
+    mode: "disabled";
+    policy: null;
+} | {
+    mode: "configured";
+    policy: TrackerPolicy;
+};
 export declare const trackerCreateBindInputSchema: z.ZodObject<{
     mode: z.ZodLiteral<"create">;
     title: z.ZodOptional<z.ZodString>;
@@ -387,6 +401,7 @@ export declare function parseTrackerPolicy(value: unknown): TrackerPolicy;
 export declare function parseTrackerSetupChange(value: unknown): TrackerSetupChange;
 export declare function effectiveTrackerPolicy(policy: TrackerPolicy): EffectiveTrackerPolicy;
 export declare function loadTrackerPolicy(root: string): Promise<TrackerPolicy | null>;
+export declare function loadTrackerSetupState(root: string): Promise<TrackerSetupState>;
 export declare function configureTrackerPolicy(root: string, value: unknown, dependencies?: TrackerDependencies): Promise<TrackerPolicy | null>;
 export declare function discoverTracker(value: unknown, dependencies?: TrackerDependencies): Promise<TrackerDiscovery>;
 export declare function suggestTrackerStateMapping(discovery: TrackerDiscovery, stateParentId?: string): TrackerMappingSuggestion;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "empirical-sdd",
-  "version": "0.24.0",
+  "version": "0.24.1",
   "description": "Agent-neutral, resumable spec-driven development for every terminal-capable coding agent",
   "type": "module",
   "bin": {
@@ -37,8 +37,8 @@
   "scripts": {
     "build": "bun run scripts/build.ts",
     "check": "tsc -p tsconfig.json --noEmit",
-    "test": "bun test --timeout 60000",
-    "test:coverage": "bun test --timeout 60000 --coverage --coverage-reporter=lcov --coverage-reporter=text && bun run scripts/check-coverage.ts coverage/lcov.info",
+    "test": "bun test --timeout 120000 --parallel=4",
+    "test:coverage": "bun test --timeout 120000 --parallel=1 --coverage --coverage-reporter=lcov --coverage-reporter=text && bun run scripts/check-coverage.ts coverage/lcov.info",
     "test:dist": "bun run build && bun run scripts/smoke-mcp.ts",
     "prepack": "bun run build",
     "test:package": "bun run scripts/test-package.ts",