harnessed 3.7.0 → 3.9.0

package/dist/cli.mjs

@@ -3,11 +3,12 @@ import { execSync, spawnSync, spawn } from 'child_process';
 import { existsSync, mkdirSync, renameSync, writeFileSync, readFileSync, readdirSync } from 'fs';
 import { join, dirname, resolve, relative } from 'path';
 import { homedir } from 'os';
+import { readFile, readdir, unlink, writeFile, stat, rm, cp, mkdir, access, rename } from 'fs/promises';
 import { Type } from '@sinclair/typebox';
 import { Value } from '@sinclair/typebox/value';
 import { LineCounter, parseDocument, parse, isSeq, isScalar } from 'yaml';
-import { readFile, readdir, unlink, writeFile, stat, rm, cp, mkdir, access, rename } from 'fs/promises';
 import lockfile from 'proper-lockfile';
+import * as p from '@clack/prompts';
 import { Command } from 'commander';
 import { Ajv } from 'ajv';
 import * as ajvFormatsNs from 'ajv-formats';
@@ -15,7 +16,6 @@ import { fileURLToPath } from 'url';
 import { createHash } from 'crypto';
 import { Parser } from 'expr-eval';
 import { query } from '@anthropic-ai/claude-agent-sdk';
-import * as p from '@clack/prompts';
 import { createPatch } from 'diff';
 import pc from 'picocolors';
 import { stdout, stdin } from 'process';
@@ -119,6 +119,89 @@ var init_harnessedRoot = __esm({
   "src/installers/lib/harnessedRoot.ts"() {
   }
 });
+function checkNodeVersion() {
+  const v = process.versions.node;
+  const major = Number.parseInt(v.split(".")[0] ?? "0", 10);
+  return major >= 22 ? { name: "node \u2265 22", status: "pass", message: `node ${v}` } : {
+    name: "node \u2265 22",
+    status: "fail",
+    message: `node ${v} (need \u2265 22)`,
+    fix: "nvm install 22 && nvm use 22"
+  };
+}
+async function checkMcpScope() {
+  const projectMcp = join(process.cwd(), ".mcp.json");
+  const userClaude = join(homedir(), ".claude.json");
+  let projectExists = false;
+  try {
+    await readFile(projectMcp, "utf8");
+    projectExists = true;
+  } catch {
+  }
+  let userHasMcp = false;
+  try {
+    const raw = await readFile(userClaude, "utf8");
+    const parsed = JSON.parse(raw);
+    userHasMcp = !!parsed.mcpServers && Object.keys(parsed.mcpServers).length > 0;
+  } catch {
+  }
+  if (userHasMcp) {
+    return {
+      name: "mcp scope = project",
+      status: "fail",
+      message: `~/.claude.json has user-scope mcpServers (CC #54803 risk)`,
+      fix: "remove user-scope entries; re-add via `claude mcp add --scope project ...`"
+    };
+  }
+  return {
+    name: "mcp scope = project",
+    status: "pass",
+    message: projectExists ? "project .mcp.json present" : "no MCP servers installed"
+  };
+}
+function checkJq() {
+  const finder = process.platform === "win32" ? "where" : "which";
+  const r = spawnSync(finder, ["jq"], { encoding: "utf8" });
+  if (r.status === 0 && r.stdout.trim().length > 0) {
+    return {
+      name: "jq present",
+      status: "pass",
+      message: r.stdout.split(/\r?\n/)[0]?.trim() ?? "jq found"
+    };
+  }
+  const fix = process.platform === "win32" ? "winget install jqlang.jq  (or: scoop install jq)" : process.platform === "darwin" ? "brew install jq" : "apt-get install jq  (or: dnf install jq)";
+  return { name: "jq present", status: "fail", message: "jq not found in PATH", fix };
+}
+function checkWinBash() {
+  if (process.platform !== "win32") {
+    return { name: "bash flavor (win)", status: "pass", message: "skipped (non-Windows)" };
+  }
+  const where = spawnSync("where", ["bash"], { encoding: "utf8" });
+  const firstBash = (where.stdout ?? "").split(/\r?\n/)[0]?.trim() ?? "(not found)";
+  if (where.status !== 0 || !firstBash || firstBash === "(not found)") {
+    return {
+      name: "bash flavor (win)",
+      status: "fail",
+      message: "no bash on PATH",
+      fix: "install Git for Windows (Git Bash) and ensure it is on PATH"
+    };
+  }
+  const probe = spawnSync("bash", ["-c", "echo $WSL_DISTRO_NAME"], { encoding: "utf8" });
+  const distro = (probe.stdout ?? "").trim();
+  if (distro.length > 0) {
+    return {
+      name: "bash flavor (win)",
+      status: "fail",
+      message: `WSL bash (${distro}) \u2014 ralph-loop subagent fork breaks under WSL`,
+      fix: "reorder PATH so Git Bash precedes WSL bash.exe (Settings \u2192 System \u2192 Environment Variables)"
+    };
+  }
+  return { name: "bash flavor (win)", status: "pass", message: `${firstBash} (Git Bash / native)` };
+}
+var init_check_builtin = __esm({
+  "src/cli/lib/check-builtin.ts"() {
+  }
+});
 
 // src/cli/lib/probe-gstack.ts
 var probe_gstack_exports = {};
@@ -720,6 +803,36 @@ var init_check_mcp_availability = __esm({
     TARGET_SERVERS = ["tavily-mcp", "exa-mcp", "chrome-devtools"];
   }
 });
+
+// src/cli/lib/doctor-registry.ts
+var CHECKS;
+var init_doctor_registry = __esm({
+  "src/cli/lib/doctor-registry.ts"() {
+    init_check_builtin();
+    CHECKS = [
+      async () => checkNodeVersion(),
+      checkMcpScope,
+      async () => checkJq(),
+      async () => checkWinBash(),
+      async () => {
+        const { checkOrigin: checkOrigin2 } = await Promise.resolve().then(() => (init_origin_check(), origin_check_exports));
+        const r = checkOrigin2(process.cwd(), { allowFork: true });
+        return { name: "origin URL", status: r.status, message: r.detail, fix: r.fix };
+      },
+      async () => {
+        const { probeGstackPrefix: probeGstackPrefix2 } = await Promise.resolve().then(() => (init_probe_gstack(), probe_gstack_exports));
+        const r = probeGstackPrefix2();
+        return { name: "gstack prefix", status: r.status, message: r.detail, fix: r.fix };
+      },
+      async () => (await Promise.resolve().then(() => (init_check_deprecations(), check_deprecations_exports))).checkDeprecations(),
+      async () => (await Promise.resolve().then(() => (init_check_token_budget(), check_token_budget_exports))).checkTokenBudget(),
+      async () => (await Promise.resolve().then(() => (init_check_agent_teams_doctor(), check_agent_teams_doctor_exports))).checkAgentTeamsDoctor(),
+      async () => (await Promise.resolve().then(() => (init_check_planning_with_files(), check_planning_with_files_exports))).checkPlanningWithFiles(),
+      async () => (await Promise.resolve().then(() => (init_check_mattpocock_skills(), check_mattpocock_skills_exports))).checkMattpocockSkills(),
+      async () => (await Promise.resolve().then(() => (init_check_mcp_availability(), check_mcp_availability_exports))).checkMcpAvailability()
+    ];
+  }
+});
 function statePath() {
   return harnessedFile("current-workflow.json");
 }
@@ -950,9 +1063,71 @@ var init_resume = __esm({
   }
 });
 
+// src/cli/lib/auto-install.ts
+var auto_install_exports = {};
+__export(auto_install_exports, {
+  extractPluginName: () => extractPluginName,
+  runAutoInstall: () => runAutoInstall
+});
+function extractPluginName(fix) {
+  const m = fix.match(/claude\s+plugin\s+install\s+([\w@\-/.]+)/);
+  return m?.[1] ?? null;
+}
+async function runAutoInstall(opts) {
+  const out = { installed: [], skipped: [], failed: [] };
+  if (!opts.autoInstall) {
+    return out;
+  }
+  const results = await Promise.all(CHECKS.map((c) => c()));
+  const installables = results.filter((r) => r.status === "warn" && typeof r.fix === "string").map((r) => ({ check: r, plugin: extractPluginName(r.fix ?? "") })).filter((entry) => entry.plugin !== null);
+  if (installables.length === 0) {
+    return out;
+  }
+  console.log(
+    `
+\u{1F4A1} ${installables.length} optional plugin(s) missing \u2014 harnessed can install them now:`
+  );
+  for (const { check, plugin } of installables) {
+    if (opts.nonInteractive) {
+      out.skipped.push(plugin);
+      continue;
+    }
+    const ans = await p.confirm({
+      message: `Install "${plugin}" via \`claude plugin install\`? (${check.name})`,
+      initialValue: true
+    });
+    if (p.isCancel(ans) || ans !== true) {
+      out.skipped.push(plugin);
+      continue;
+    }
+    const r = spawnSync("claude", ["plugin", "install", plugin], {
+      encoding: "utf8",
+      stdio: "inherit"
+    });
+    if (r.status === 0) {
+      out.installed.push(plugin);
+      console.log(`  \u2713 installed ${plugin}`);
+    } else {
+      const reason = r.error !== void 0 ? `spawn error: ${r.error.message}` : `exit code ${r.status ?? "<unknown>"}`;
+      out.failed.push({ name: plugin, reason });
+      console.error(`  \u2717 failed ${plugin} \u2014 ${reason}`);
+    }
+  }
+  console.log(
+    `
+Auto-install summary: ${out.installed.length} installed / ${out.skipped.length} skipped / ${out.failed.length} failed`
+  );
+  return out;
+}
+var init_auto_install = __esm({
+  "src/cli/lib/auto-install.ts"() {
+    init_doctor_registry();
+  }
+});
+
 // package.json
 var package_default = {
-  version: "3.7.0"};
+  version: "3.9.0"};
 
 // src/manifest/errors.ts
 function instancePathToKeyPath(instancePath) {
@@ -1442,8 +1617,8 @@ function checkSecurityViolations(doc, filename, lineCounter) {
     ["spec", "verify", "cmd"],
     ["spec", "uninstall", "cmd"]
   ];
-  for (const p4 of cmdPaths) {
-    const err2 = checkScalarCmd(doc, lineCounter, p4, filename);
+  for (const p5 of cmdPaths) {
+    const err2 = checkScalarCmd(doc, lineCounter, p5, filename);
     if (err2) errors.push(err2);
   }
   const cleanupNode = doc.getIn(["spec", "uninstall", "cleanup_paths"], true);
@@ -2024,111 +2199,9 @@ function registerBackupList(program2) {
     console.log(t("backup.total_snapshots", { count: dirs.length }));
   });
 }
-function checkNodeVersion() {
-  const v = process.versions.node;
-  const major = Number.parseInt(v.split(".")[0] ?? "0", 10);
-  return major >= 22 ? { name: "node \u2265 22", status: "pass", message: `node ${v}` } : {
-    name: "node \u2265 22",
-    status: "fail",
-    message: `node ${v} (need \u2265 22)`,
-    fix: "nvm install 22 && nvm use 22"
-  };
-}
-async function checkMcpScope() {
-  const projectMcp = join(process.cwd(), ".mcp.json");
-  const userClaude = join(homedir(), ".claude.json");
-  let projectExists = false;
-  try {
-    await readFile(projectMcp, "utf8");
-    projectExists = true;
-  } catch {
-  }
-  let userHasMcp = false;
-  try {
-    const raw = await readFile(userClaude, "utf8");
-    const parsed = JSON.parse(raw);
-    userHasMcp = !!parsed.mcpServers && Object.keys(parsed.mcpServers).length > 0;
-  } catch {
-  }
-  if (userHasMcp) {
-    return {
-      name: "mcp scope = project",
-      status: "fail",
-      message: `~/.claude.json has user-scope mcpServers (CC #54803 risk)`,
-      fix: "remove user-scope entries; re-add via `claude mcp add --scope project ...`"
-    };
-  }
-  return {
-    name: "mcp scope = project",
-    status: "pass",
-    message: projectExists ? "project .mcp.json present" : "no MCP servers installed"
-  };
-}
-function checkJq() {
-  const finder = process.platform === "win32" ? "where" : "which";
-  const r = spawnSync(finder, ["jq"], { encoding: "utf8" });
-  if (r.status === 0 && r.stdout.trim().length > 0) {
-    return {
-      name: "jq present",
-      status: "pass",
-      message: r.stdout.split(/\r?\n/)[0]?.trim() ?? "jq found"
-    };
-  }
-  const fix = process.platform === "win32" ? "winget install jqlang.jq  (or: scoop install jq)" : process.platform === "darwin" ? "brew install jq" : "apt-get install jq  (or: dnf install jq)";
-  return { name: "jq present", status: "fail", message: "jq not found in PATH", fix };
-}
-function checkWinBash() {
-  if (process.platform !== "win32") {
-    return { name: "bash flavor (win)", status: "pass", message: "skipped (non-Windows)" };
-  }
-  const where = spawnSync("where", ["bash"], { encoding: "utf8" });
-  const firstBash = (where.stdout ?? "").split(/\r?\n/)[0]?.trim() ?? "(not found)";
-  if (where.status !== 0 || !firstBash || firstBash === "(not found)") {
-    return {
-      name: "bash flavor (win)",
-      status: "fail",
-      message: "no bash on PATH",
-      fix: "install Git for Windows (Git Bash) and ensure it is on PATH"
-    };
-  }
-  const probe = spawnSync("bash", ["-c", "echo $WSL_DISTRO_NAME"], { encoding: "utf8" });
-  const distro = (probe.stdout ?? "").trim();
-  if (distro.length > 0) {
-    return {
-      name: "bash flavor (win)",
-      status: "fail",
-      message: `WSL bash (${distro}) \u2014 ralph-loop subagent fork breaks under WSL`,
-      fix: "reorder PATH so Git Bash precedes WSL bash.exe (Settings \u2192 System \u2192 Environment Variables)"
-    };
-  }
-  return { name: "bash flavor (win)", status: "pass", message: `${firstBash} (Git Bash / native)` };
-}
-
-// src/cli/lib/doctor-registry.ts
-var CHECKS = [
-  async () => checkNodeVersion(),
-  checkMcpScope,
-  async () => checkJq(),
-  async () => checkWinBash(),
-  async () => {
-    const { checkOrigin: checkOrigin2 } = await Promise.resolve().then(() => (init_origin_check(), origin_check_exports));
-    const r = checkOrigin2(process.cwd(), { allowFork: true });
-    return { name: "origin URL", status: r.status, message: r.detail, fix: r.fix };
-  },
-  async () => {
-    const { probeGstackPrefix: probeGstackPrefix2 } = await Promise.resolve().then(() => (init_probe_gstack(), probe_gstack_exports));
-    const r = probeGstackPrefix2();
-    return { name: "gstack prefix", status: r.status, message: r.detail, fix: r.fix };
-  },
-  async () => (await Promise.resolve().then(() => (init_check_deprecations(), check_deprecations_exports))).checkDeprecations(),
-  async () => (await Promise.resolve().then(() => (init_check_token_budget(), check_token_budget_exports))).checkTokenBudget(),
-  async () => (await Promise.resolve().then(() => (init_check_agent_teams_doctor(), check_agent_teams_doctor_exports))).checkAgentTeamsDoctor(),
-  async () => (await Promise.resolve().then(() => (init_check_planning_with_files(), check_planning_with_files_exports))).checkPlanningWithFiles(),
-  async () => (await Promise.resolve().then(() => (init_check_mattpocock_skills(), check_mattpocock_skills_exports))).checkMattpocockSkills(),
-  async () => (await Promise.resolve().then(() => (init_check_mcp_availability(), check_mcp_availability_exports))).checkMcpAvailability()
-];
 
 // src/cli/doctor.ts
+init_doctor_registry();
 function registerDoctor(program2) {
   program2.command("doctor").description(
     "Preflight checks (Node / MCP scope / jq / Win bash / origin URL / gstack prefix / deprecations / token budget / Agent Teams / planning-with-files / mattpocock-skills / MCP availability)"
@@ -2378,7 +2451,7 @@ var V3_4_3_SIGNATURE_MASTER_RX = /\*\*Preferred path\*\*[\s\S]*dispatch to the p
 function shouldOverwriteFile(content) {
   return HARNESSED_MARKER_RX.test(content) || V3_4_3_SIGNATURE_SUB_RX.test(content) || V3_4_3_SIGNATURE_MASTER_RX.test(content);
 }
-async function writeAllCommands(slashNames, commandsDir, rolePrompts, capabilities, installedPlugins, installedUserSkills, writer, fileExists2 = existsSync, readFileSync9 = (p4) => readFileSync(p4, "utf8")) {
+async function writeAllCommands(slashNames, commandsDir, rolePrompts, capabilities, installedPlugins, installedUserSkills, writer, fileExists2 = existsSync, readFileSync9 = (p5) => readFileSync(p5, "utf8")) {
   const results = [];
   const aggregatedWarnings = /* @__PURE__ */ new Set();
   for (const name of slashNames) {
@@ -3035,8 +3108,15 @@ var WorkflowPhaseV3 = Type.Object(
       // numeric literal OR jinja '{{ defaults.x.y }}'
     ),
     artifacts_expected: Type.Optional(Type.Array(Type.String())),
-    invokes_tools: Type.Optional(Type.Array(InvokeToolClause))
+    invokes_tools: Type.Optional(Type.Array(InvokeToolClause)),
     // NEW v3 D-05 phase-level conditional fire
+    // v3.8.0 P1 — Conditional RULES inject. Empty/absent → DEFAULT_INJECTS_RULES
+    // (escalation + transparent-skip, ~470 tokens). Declare full list
+    // ['escalation', 'transparent-skip', 'agent-teams-prevention'] on phases
+    // that genuinely involve Agent Teams escalation (task-deliver / task-test /
+    // verify-multispec). Unknown rule names silently filtered at runtime
+    // (forward-compat for future RULES additions).
+    injects_rules: Type.Optional(Type.Array(Type.String()))
   },
   { additionalProperties: false }
 );
@@ -3311,18 +3391,24 @@ var AGENT_TEAMS_PREVENTION_RULES = `If you signal needs_teams_escalation=true, A
 3. **Token cost estimation**: Before creating a team, estimate \`team_cost \u2248 N_teammates \xD7 N_rounds \xD7 avg_tokens_per_round + N_teammates \xD7 initial_brief_tokens\`. Compare to subagent fan-out cost (\`\u2248 N_subagents \xD7 (initial_brief + summary_tokens)\`). Only open a team when \`team_cost < 2 \xD7 subagent_cost\` \u2014 otherwise prefer fan-out.
 
 4. **Brief must be self-contained**: Each teammate launches WITHOUT main-session context. The Agent() prompt must include enough background, file paths, success criteria, and counter-positions so the teammate can work independently. Generic prompts produce shallow output.`;
-var CRITICAL_SYSTEM_REMINDER = `${ESCALATION_RULES}
-
-${TRANSPARENT_SKIP_RULES}
-
-${AGENT_TEAMS_PREVENTION_RULES}`;
-function buildAgentDef(skillName, rolePrompts, workflowName, modelTierOverride) {
+var RULES_MAP = {
+  escalation: ESCALATION_RULES,
+  "transparent-skip": TRANSPARENT_SKIP_RULES,
+  "agent-teams-prevention": AGENT_TEAMS_PREVENTION_RULES
+};
+var DEFAULT_INJECTS_RULES = ["escalation", "transparent-skip"];
+function buildCriticalReminder(injectsRules) {
+  const rules = injectsRules ?? DEFAULT_INJECTS_RULES;
+  return rules.map((name) => RULES_MAP[name]).filter((rule) => rule !== void 0).join("\n\n");
+}
+function buildAgentDef(skillName, rolePrompts, workflowName, modelTierOverride, injectsRules) {
   const rp = rolePrompts?.[skillName] ?? (workflowName ? rolePrompts?.[workflowName] : void 0);
+  const criticalReminder = buildCriticalReminder(injectsRules);
   if (!rp) {
     return {
       description: `harnessed workflow phase: ${skillName}`,
       prompt: `You are executing the '${skillName}' workflow phase. Follow the phase intent and emit a structured COMPLETE signal when done.`,
-      criticalSystemReminder_EXPERIMENTAL: CRITICAL_SYSTEM_REMINDER,
+      criticalSystemReminder_EXPERIMENTAL: criticalReminder,
       ...modelTierOverride ? { model: modelTierOverride } : {}
     };
   }
@@ -3343,16 +3429,16 @@ ${rp.checklist.map((c, i) => `  ${i + 1}. ${c}`).join("\n")}` : "";
   return {
     description: rp.description,
     prompt,
-    criticalSystemReminder_EXPERIMENTAL: CRITICAL_SYSTEM_REMINDER,
+    criticalSystemReminder_EXPERIMENTAL: criticalReminder,
     ...modelTierOverride ? { model: modelTierOverride } : {}
   };
 }
 function isRalphLoopOptIn(phase) {
   if (!phase || typeof phase !== "object") return false;
-  const p4 = phase;
-  if (p4.max_iterations !== void 0 && p4.max_iterations !== null) return true;
-  if (p4.upstream === "ralph-loop") return true;
-  const fb = p4.fallback;
+  const p5 = phase;
+  if (p5.max_iterations !== void 0 && p5.max_iterations !== null) return true;
+  if (p5.upstream === "ralph-loop") return true;
+  const fb = p5.fallback;
   if (fb?.max_iterations_exceeded !== void 0) return true;
   return false;
 }
@@ -3373,14 +3459,23 @@ function resolveMaxIterations(phase, gateContext) {
 var _dispatchSkillStub = {
   fn: async (skillName, phase, opts) => {
     const optIn = isRalphLoopOptIn(phase);
-    const spawnOnce = async (resumeSessionId, onSessionId) => sdkSpawn(
-      buildAgentDef(skillName, opts?.rolePrompts, opts?.workflowName, opts?.modelTierOverride),
-      {
-        expertName: skillName,
-        ...resumeSessionId ? { resumeSessionId } : {},
-        ...onSessionId ? { onSessionId } : {}
-      }
-    );
+    const spawnOnce = async (resumeSessionId, onSessionId) => {
+      const injectsRules = phase && typeof phase === "object" && "injects_rules" in phase && Array.isArray(phase.injects_rules) ? phase.injects_rules : void 0;
+      return sdkSpawn(
+        buildAgentDef(
+          skillName,
+          opts?.rolePrompts,
+          opts?.workflowName,
+          opts?.modelTierOverride,
+          injectsRules
+        ),
+        {
+          expertName: skillName,
+          ...resumeSessionId ? { resumeSessionId } : {},
+          ...onSessionId ? { onSessionId } : {}
+        }
+      );
+    };
     let envelopeJson;
     try {
       if (optIn) {
@@ -3691,19 +3786,19 @@ async function listWorkflowNames(workflowsDir) {
   const names = [];
   const entries = await readdir(workflowsDir);
   for (const e of entries.sort()) {
-    const p4 = join(workflowsDir, e);
-    const s = await stat(p4).catch(() => null);
+    const p5 = join(workflowsDir, e);
+    const s = await stat(p5).catch(() => null);
     if (!s?.isDirectory()) continue;
-    if (await fileExists(join(p4, "workflow.yaml"))) {
+    if (await fileExists(join(p5, "workflow.yaml"))) {
       names.push(e);
       continue;
     }
-    if (await fileExists(join(p4, "auto", "workflow.yaml"))) {
+    if (await fileExists(join(p5, "auto", "workflow.yaml"))) {
       names.push(e);
-      const subs = await readdir(p4).catch(() => []);
+      const subs = await readdir(p5).catch(() => []);
       for (const sub of subs.sort()) {
         if (sub === "auto") continue;
-        if (await fileExists(join(p4, sub, "workflow.yaml"))) {
+        if (await fileExists(join(p5, sub, "workflow.yaml"))) {
           names.push(`${e}-${sub}`);
         }
       }
@@ -3837,10 +3932,10 @@ async function dirSizeKb(dir) {
     if (!cur) break;
     const entries = await readdir(cur, { withFileTypes: true });
     for (const e of entries) {
-      const p4 = join(cur, e.name);
-      if (e.isDirectory()) stack.push(p4);
+      const p5 = join(cur, e.name);
+      if (e.isDirectory()) stack.push(p5);
       else if (e.isFile()) {
-        const st = await stat(p4);
+        const st = await stat(p5);
         total += st.size;
       }
     }
@@ -6007,7 +6102,7 @@ function registerSetup(program2) {
   ).option("--dry-run", "preview only \u2014 do not write to disk (opt-in for advanced users)").option(
     "--user-lang <code>",
     "override detected OS locale for env.HARNESSED_USER_LANG (en | zh-Hans / zh-CN / zh-TW)"
-  ).action(async (raw) => {
+  ).option("--non-interactive", "skip all confirm prompts (CI / scripted setup)").option("--no-auto-install", "do not prompt to auto-install missing plugins (advisory only)").action(async (raw) => {
     const dryRun = raw.dryRun === true;
     const pkgRoot = getPackageRoot();
     const workflowsDir = resolve(pkgRoot, "workflows");
@@ -6090,7 +6185,7 @@ function registerSetup(program2) {
       capabilitiesMap,
       installedPlugins,
       installedUserSkills,
-      async (p4, c) => writeFile(p4, c, "utf8")
+      async (p5, c) => writeFile(p5, c, "utf8")
     );
     const writtenCount = cmdResult.results.filter((r) => r.written).length;
     const skippedCount = cmdResult.results.filter((r) => !r.written && r.warning).length;
@@ -6165,6 +6260,16 @@ function registerSetup(program2) {
     }
     console.log(t("setup.bundled_summary"));
     console.log(t("setup.bundled_location"));
+    console.log(t("setup.doctor_hint"));
+    if (!dryRun) {
+      const isTty = process.stdin.isTTY === true && process.stdout.isTTY === true;
+      const { runAutoInstall: runAutoInstall2 } = await Promise.resolve().then(() => (init_auto_install(), auto_install_exports));
+      await runAutoInstall2({
+        nonInteractive: raw.nonInteractive === true || !isTty,
+        autoInstall: raw.autoInstall !== false
+        // commander default = true; --no-auto-install flips
+      });
+    }
     process.exit(0);
   });
 }