mewkit 1.14.0 → 1.15.0

package/README.md

@@ -25,6 +25,7 @@ npx mewkit <command>      # Runtime commands
 | `meowkit status`    | Print version, channel, and config                                |
 | `meowkit task new`  | Create structured task file from template                         |
 | `meowkit task list` | List active tasks with status                                     |
+| `meowkit capabilities` | Resolve installed skills/commands/tools for an intent (`list`, `explain`, `resolve`, `projections`) |
 | `meowkit orchviz`   | Live web visualizer for the active Claude Code session            |
 | `meowkit pack`      | `list` / `add <pack>` / `remove <pack>` — manage installed domains |
 | `meowkit migrate`   | Export the `.claude/` setup to other coding agents (Codex, Cursor, …) |
@@ -59,6 +60,12 @@ What migrates where for Codex:
 | `.claude/hooks/*.cjs`       | `.codex/hooks/` + `hooks.json` (version-gated events) |
 | `.mcp.json` (opt-in)        | `config.toml [mcp_servers]` (`--include-mcp`)       |
 
+For Codex, migration also writes a bounded capability-resolution instruction to
+`AGENTS.md` and a data-only `.codex/capabilities.json` snapshot. This lets an
+agent run `npx mewkit capabilities resolve --intent "..." --provider codex`
+even when the original `.claude/` directory is no longer present. The snapshot
+is resolver data; it is not injected into model context.
+
 Markdown references are rewritten with a fence-aware classifier: inline
 references point at the new locations, runnable fenced commands are only
 rewritten when the referenced asset migrates in the same run (otherwise they

package/dist/commands/capabilities.d.ts

@@ -0,0 +1,13 @@
+import type { AvailabilityProbes } from "../core/availability.js";
+interface CapabilitiesOptions {
+    subcommand?: string;
+    target?: string;
+    json?: boolean;
+    intent?: string;
+    provider?: string;
+    write?: boolean;
+}
+export declare function capabilities(args?: CapabilitiesOptions): Promise<void>;
+export declare function hostProbes(projectRoot: string): AvailabilityProbes;
+export {};
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/commands/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/commands/capabilities.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AASlE,UAAU,mBAAmB;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiFhF;AAoDD,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CA0ClE"}

package/dist/commands/capabilities.js

@@ -0,0 +1,230 @@
+// `mewkit capabilities list|explain` — read-only inspection of the model-agnostic
+// capability manifest. The manifest is on-disk CLI data; it is NEVER injected into a
+// model session and does not constitute agent discovery (that is Phase 3's projection).
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { validateCapabilities } from "../core/validate-capabilities.js";
+import { resolveWithHost } from "../core/resolve-capabilities.js";
+import { renderCapabilityView } from "../core/generate-capability-view.js";
+import { renderBootstrap, BOOTSTRAP_FILENAME } from "../core/bootstrap.js";
+import { PROVIDER_PROJECTIONS, isProjectedProvider } from "../core/provider-projection.js";
+import { findCapabilitySource } from "../core/capability-snapshot.js";
+import { commandExists } from "./setup.js";
+function findClaudeDir() {
+    const candidate = path.join(process.cwd(), ".claude");
+    return fs.existsSync(candidate) && fs.statSync(candidate).isDirectory() ? candidate : null;
+}
+export async function capabilities(args = {}) {
+    const sub = args.subcommand ?? "list";
+    // `projections` reports how the capability surface reaches each provider — static.
+    if (sub === "projections") {
+        projections(args.json ?? false);
+        return;
+    }
+    // `bootstrap` is a static trusted constant — no `.claude/` scan required.
+    if (sub === "bootstrap") {
+        const provider = args.provider ?? "claude-code";
+        if (!isProjectedProvider(provider)) {
+            console.error(pc.red(`No bootstrap projection for provider "${provider}" (report-only). Projected: ${Object.keys(PROVIDER_PROJECTIONS).join(", ")}.`));
+            process.exit(1);
+        }
+        const text = renderBootstrap(provider);
+        if (args.write) {
+            // Regenerate the committed file the SessionStart hook emits. Requires .claude/.
+            const dir = findClaudeDir();
+            if (!dir) {
+                console.error(pc.red("Could not find .claude/ directory to write the bootstrap file."));
+                process.exit(1);
+            }
+            const dest = path.join(dir, BOOTSTRAP_FILENAME);
+            fs.writeFileSync(dest, text + "\n", "utf-8");
+            console.log(pc.green(`Wrote ${path.relative(process.cwd(), dest)}`));
+            return;
+        }
+        console.log(text);
+        return;
+    }
+    const source = findCapabilitySource();
+    if (!source) {
+        console.error(pc.red("Could not find a capability source. Expected .claude/ or a Codex projection at .codex/capabilities.json. Run `npx mewkit init` or `npx mewkit migrate codex`."));
+        process.exit(1);
+    }
+    const entries = source.entries;
+    if (sub === "explain") {
+        explain(entries, args.target, args.json ?? false);
+        return;
+    }
+    if (sub === "resolve") {
+        resolve(entries, args.intent ?? args.target, args.provider ?? null, process.cwd(), args.json ?? false);
+        return;
+    }
+    if (sub === "view") {
+        // Generated compatible portion of the trigger registry (maintainer/CI diffs it in).
+        console.log(renderCapabilityView(entries));
+        return;
+    }
+    if (sub !== "list") {
+        console.error(pc.red(`Unknown capabilities subcommand "${sub}". Expected list|explain|resolve|view|bootstrap|projections.`));
+        process.exit(1);
+    }
+    if (args.json) {
+        console.log(JSON.stringify({ schemaVersion: "1.0", entries }, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan("MeowKit Capabilities")));
+    const issues = source.kind === "claude-directory" ? validateCapabilities(source.path) : [];
+    const errors = issues.filter((i) => i.level === "error");
+    const warns = issues.filter((i) => i.level === "warn");
+    console.log(pc.dim(`${entries.length} capabilities — ${errors.length} error(s), ${warns.length} warning(s)\n`));
+    const byKind = new Map();
+    for (const e of entries)
+        byKind.set(e.kind, [...(byKind.get(e.kind) ?? []), e]);
+    for (const [kind, list] of [...byKind].sort((a, b) => (a[0] < b[0] ? -1 : 1))) {
+        console.log(pc.bold(kind));
+        for (const e of list)
+            console.log(`  ${e.id}${e.description ? pc.dim(` — ${e.description}`) : ""}`);
+        console.log();
+    }
+    for (const i of errors)
+        console.log(`  [${pc.red("ERROR")}] ${i.capabilityId ?? "-"}: ${i.message}`);
+    for (const i of warns)
+        console.log(`  [${pc.yellow("WARN")}] ${i.capabilityId ?? "-"}: ${i.message}`);
+    if (errors.length > 0)
+        process.exit(1);
+}
+function explain(entries, target, json) {
+    if (!target) {
+        console.error(pc.red("`capabilities explain` requires a capability id."));
+        process.exit(1);
+    }
+    const entry = entries.find((e) => e.id === target);
+    if (!entry) {
+        console.error(pc.red(`No capability with id "${target}".`));
+        process.exit(1);
+    }
+    if (json) {
+        console.log(JSON.stringify(entry, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan(`Capability: ${entry.id}`)));
+    console.log(`  kind:        ${entry.kind}`);
+    console.log(`  description: ${entry.description || pc.dim("(none)")}`);
+    console.log(`  source:      ${entry.sourcePath ?? pc.dim("(authored, no disk artifact)")}`);
+    console.log(`  owner:       ${entry.owner || pc.dim("(unknown)")} / ${entry.installedState}`);
+    console.log(`  invocation:  ${entry.invocation.kind}:${entry.invocation.id}`);
+    console.log(`  intents:     ${entry.intents.length ? entry.intents.join(", ") : pc.dim("(none)")}`);
+    console.log(`  requires:    ${entry.requirements.length ? entry.requirements.map((r) => `${r.type}:${r.id}`).join(", ") : pc.dim("(none)")}`);
+    console.log(`  verify:      ${entry.verification.kind}${entry.verification.id ? `:${entry.verification.id}` : ""}`);
+    console.log(`  provenance:  ${Object.entries(entry.provenance).map(([k, v]) => `${k}=${v}`).join(", ") || pc.dim("(none)")}`);
+}
+/**
+ * Real host-availability probes for the CLI. External binaries via PATH; MCP/apps via
+ * `.mcp.json` presence (no secrets read); files via a containment-checked existence probe
+ * that returns `null` for a bare, absent id (a logical name we can't resolve to a path),
+ * so it surfaces as `unknown` rather than a false `unavailable`.
+ */
+/** Report how the capability surface projects into each provider + the four support levels. */
+function projections(json) {
+    const all = Object.values(PROVIDER_PROJECTIONS);
+    if (json) {
+        console.log(JSON.stringify(all, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan("Capability provider projections")));
+    console.log(pc.dim("Four independent levels; `enforceable` is claimed only where a real gating hook exists.\n"));
+    for (const p of all) {
+        console.log(`${pc.bold(p.provider)} ${pc.dim(`(${p.status}, placement: ${p.bootstrapPlacement})`)}`);
+        const l = p.levels;
+        console.log(`  discoverable=${l.discoverable}  selectable=${l.selectable}  invocable=${l.invocable}  enforceable=${l.enforceable}`);
+        console.log(pc.dim(`  ${p.evidence}\n`));
+    }
+    console.log(pc.dim("Providers not listed are report-only — no capability behavior is claimed for them."));
+}
+export function hostProbes(projectRoot) {
+    return {
+        // NOTE: PATH-only binary detection under-reports package-local CLIs (e.g. a `mewkit`
+        // runnable via `npx`/workspace bin but not on global PATH reads as not-found). The
+        // per-requirement evidence stays truthful ("PATH lookup: not found").
+        commandExists: (cmd) => commandExists(cmd),
+        containedFileExists: (id) => {
+            if (!id || id === ".")
+                return null; // not a concrete requirement path
+            const abs = path.resolve(projectRoot, id);
+            const escapes = (from, to) => {
+                const rel = path.relative(from, to);
+                return rel === ".." || rel.startsWith(".." + path.sep) || path.isAbsolute(rel);
+            };
+            if (escapes(projectRoot, abs))
+                return false; // lexical escape
+            if (fs.existsSync(abs)) {
+                // True containment: resolve symlinks so an in-root link pointing outside the
+                // tree is rejected, not followed (a lexical check alone would pass it).
+                try {
+                    if (escapes(fs.realpathSync(projectRoot), fs.realpathSync(abs)))
+                        return false;
+                }
+                catch {
+                    return false;
+                }
+                return true;
+            }
+            // Absent: a path-shaped id is definitively absent; a bare logical id is undetermined
+            // (→ unknown). Extensionless real-file names (Makefile, .gitignore) also read as bare
+            // here — an accepted bias toward `unknown` over a false `unavailable`.
+            const looksLikePath = id.includes("/") || id.includes("\\") || path.extname(id) !== "";
+            return looksLikePath ? false : null;
+        },
+        mcpServerConfigured: (id) => {
+            const mcpPath = path.join(projectRoot, ".mcp.json");
+            if (!fs.existsSync(mcpPath))
+                return null;
+            try {
+                const parsed = JSON.parse(fs.readFileSync(mcpPath, "utf-8"));
+                const servers = parsed.mcpServers ?? parsed.servers ?? {};
+                return Object.prototype.hasOwnProperty.call(servers, id);
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+function resolve(entries, intent, provider, projectRoot, json) {
+    if (!intent) {
+        console.error(pc.red("`capabilities resolve` requires an intent (--intent \"…\" or a positional phrase)."));
+        process.exit(1);
+    }
+    const ctx = { provider: provider ?? "claude-code", checkedAt: new Date().toISOString(), probes: hostProbes(projectRoot) };
+    const result = resolveWithHost(entries, intent, ctx);
+    if (json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(pc.bold(pc.cyan(`Resolve: "${intent}" (host: ${ctx.provider}) — status: ${result.status}`)));
+    if (result.candidates.length === 0) {
+        console.log(pc.yellow("  No capability matched this intent."));
+        return;
+    }
+    for (const c of result.candidates) {
+        console.log(`  ${c.id} ${pc.dim(`(${c.kind}, score ${c.score})`)} — ${c.reason}`);
+        console.log(pc.dim(`      invocable: ${c.invocable}; verify: ${c.verification.kind}`));
+        for (const a of c.availability) {
+            console.log(pc.dim(`      • ${a.requirementType}:${a.id} → ${a.status}`));
+        }
+    }
+    // When the selected candidate needs task-scoped repo context, show HOW this provider acquires
+    // it (Phase 5). The agent runs these host-native tools, then records via `context record`.
+    const top = result.candidates[0];
+    if (top?.contextRequirement) {
+        const acq = result.acquisition;
+        console.log(pc.bold(`  needs repo context (${top.contextRequirement.reason}) — acquire via ${acq.provider} [${acq.status}]:`));
+        console.log(pc.dim(`      read:   ${acq.read ? `${acq.read.tool} — ${acq.read.note}` : "(no read surface — host-provided paths only)"}`));
+        console.log(pc.dim(`      search: ${acq.search ? `${acq.search.tool} — ${acq.search.note}` : "(no search surface — report-only)"}`));
+    }
+    // Self-auditing: cite the adapter + evidence behind this result's provider claims (Phase 6).
+    const cite = result.adapterCitation;
+    console.log(pc.dim(`  adapter: ${cite.provider} [${cite.projectionStatus}] — ${cite.projectionEvidence}`));
+    console.log(pc.dim(`  can gate on: ${cite.gatingEvents.length ? cite.gatingEvents.join(", ") : "no events (advisory host)"}`));
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/commands/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/commands/capabilities.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,qFAAqF;AACrF,wFAAwF;AACxF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAA0B,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,SAAS,aAAa;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAEtC,mFAAmF;IACnF,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QAChC,OAAO;IACR,CAAC;IAED,0EAA0E;IAC1E,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,yCAAyC,QAAQ,+BAA+B,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACvJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,QAA6B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,gFAAgF;YAChF,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;gBACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAChD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,OAAO;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,+JAA+J,CAAC,CAAC,CAAC;QACvL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAE/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QAClD,OAAO;IACR,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QACvG,OAAO;IACR,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,oFAAoF;QACpF,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO;IACR,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oCAAoC,GAAG,8DAA8D,CAAC,CAAC,CAAC;QAC7H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO;IACR,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,mBAAmB,MAAM,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC;IAEhH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,EAAE,CAAC;IACf,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrG,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,OAA0B,EAAE,MAA0B,EAAE,IAAa;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,0BAA0B,MAAM,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9I,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpH,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED;;;;;GAKG;AACH,+FAA+F;AAC/F,SAAS,WAAW,CAAC,IAAa;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,YAAY,gBAAgB,CAAC,CAAC,UAAU,eAAe,CAAC,CAAC,SAAS,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC7C,OAAO;QACN,qFAAqF;QACrF,mFAAmF;QACnF,sEAAsE;QACtE,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC;QAC1C,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE;YAC3B,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAW,EAAE;gBACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACpC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAChF,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,iBAAiB;YAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,6EAA6E;gBAC7E,wEAAwE;gBACxE,IAAI,CAAC;oBACJ,IAAI,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;wBAAE,OAAO,KAAK,CAAC;gBAC/E,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,OAAO,IAAI,CAAC;YACb,CAAC;YACD,qFAAqF;YACrF,sFAAsF;YACtF,uEAAuE;YACvE,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACvF,OAAO,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QACD,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAgF,CAAC;gBAC5I,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1D,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAA0B,EAAE,MAA0B,EAAE,QAAuB,EAAE,WAAmB,EAAE,IAAa;IACnI,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,QAAQ,IAAI,aAAa,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;IAC1H,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACR,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,MAAM,YAAY,GAAG,CAAC,QAAQ,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC/D,OAAO;IACR,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,SAAS,aAAa,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,8FAA8F;IAC9F,2FAA2F;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,GAAG,EAAE,kBAAkB,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,kBAAkB,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC/H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;QAC1I,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;IACtI,CAAC;IACD,6FAA6F;IAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,gBAAgB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAC3G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAChI,CAAC"}

package/dist/commands/context.d.ts

@@ -0,0 +1,10 @@
+export interface ContextOptions {
+    subcommand?: string;
+    target?: string;
+    root?: string;
+    /** `context record`: the active durable task id to merge the envelope's evidence into. */
+    task?: string;
+    json?: boolean;
+}
+export declare function context(args?: ContextOptions): Promise<void>;
+//# sourceMappingURL=context.d.ts.map

package/dist/commands/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,cAAc;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,OAAO,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkHtE"}

package/dist/commands/context.js

@@ -0,0 +1,125 @@
+// `mewkit context resolve|check|record` — inspect + record the repository-context evidence
+// ledger (Phase 5). `resolve` builds an evidence ref for a path (owning repo, revision, hash,
+// redaction); `check` re-hashes a recorded envelope's evidence and reports per-path freshness;
+// `record` merges an envelope's owning repos + evidence paths into an active durable task record
+// (advisory, best-effort). MeowKit records + verifies evidence; the host's own tools acquire it.
+import fs from "node:fs";
+import path from "node:path";
+import pc from "picocolors";
+import { buildEvidenceRef, checkEvidenceFreshness, ContextEnvelopeSchema, distinctRepos, isWithinBoundary, } from "../core/repo-context.js";
+import { recordContextEvidence } from "../core/task-record.js";
+export async function context(args = {}) {
+    const sub = args.subcommand ?? "resolve";
+    const boundary = args.root ? path.resolve(args.root) : process.cwd();
+    if (sub === "resolve") {
+        if (!args.target) {
+            console.error(pc.red("`context resolve` requires a path."));
+            process.exit(1);
+        }
+        const abs = path.resolve(boundary, args.target);
+        if (!isWithinBoundary(boundary, abs)) {
+            console.error(pc.red(`Path escapes the boundary root: ${args.target}`));
+            process.exit(1);
+        }
+        const ref = buildEvidenceRef(abs, boundary);
+        if (args.json) {
+            console.log(JSON.stringify(ref, null, 2));
+            return;
+        }
+        console.log(pc.bold(pc.cyan(`Evidence: ${path.relative(boundary, abs) || abs}`)));
+        console.log(`  owning repo: ${ref.owningRepoIdentity}`);
+        console.log(`  revision:    ${ref.revision ?? pc.dim("(non-git / unresolved)")}`);
+        console.log(`  content:     ${ref.contentHash ?? pc.yellow("(missing)")}`);
+        console.log(`  redacted:    ${ref.redacted ? pc.yellow("yes (secret-shaped path)") : "no"}`);
+        return;
+    }
+    if (sub === "check") {
+        if (!args.target) {
+            console.error(pc.red("`context check` requires an envelope JSON path."));
+            process.exit(1);
+        }
+        const envPath = path.resolve(boundary, args.target);
+        if (!fs.existsSync(envPath)) {
+            console.error(pc.red(`Envelope not found: ${args.target}`));
+            process.exit(1);
+        }
+        let envelope;
+        try {
+            envelope = ContextEnvelopeSchema.parse(JSON.parse(fs.readFileSync(envPath, "utf-8")));
+        }
+        catch (err) {
+            console.error(pc.red(`Invalid context envelope: ${err.message.split("\n")[0]}`));
+            process.exit(1);
+        }
+        // Boundary-scope the freshness check: an untrusted envelope's evidence paths are never
+        // stat-ed/hashed outside the boundary (no arbitrary-path existence/hash oracle).
+        const results = checkEvidenceFreshness(envelope.evidence, boundary);
+        // Pair each result with its evidence ref (1:1, same order) to group BY OWNING REPO.
+        const paired = results.map((r, i) => ({ ...r, ref: envelope.evidence[i] }));
+        if (args.json) {
+            console.log(JSON.stringify({ boundaryRoot: envelope.boundaryRoot, repos: distinctRepos(envelope.evidence), results }, null, 2));
+            return;
+        }
+        const tagFor = (s) => s === "fresh" ? pc.green("fresh") : s === "stale" ? pc.yellow("stale") : s === "out-of-scope" ? pc.red("out-of-scope") : pc.red("missing");
+        console.log(pc.bold(pc.cyan(`Context freshness — scope: ${envelope.boundaryRoot}`)));
+        // Per-repo grouping: each owning repo (with its own revision) is reported separately, so a
+        // multi-repo task never loses which repo an evidence file — and its freshness — belongs to.
+        for (const repo of distinctRepos(envelope.evidence)) {
+            console.log(pc.bold(`  ${repo.identity} ${pc.dim(`@ ${repo.revision ?? "(non-git)"}`)}`));
+            for (const p of paired.filter((x) => x.ref.owningRepoIdentity === repo.identity)) {
+                console.log(`    [${tagFor(p.status)}] ${p.ref.path}`);
+            }
+        }
+        const needsAction = results.filter((r) => r.status !== "fresh");
+        if (needsAction.length > 0) {
+            console.log(pc.dim(`\n  ${needsAction.length} evidence path(s) need reacquisition or are out of scope.`));
+            process.exit(1);
+        }
+        return;
+    }
+    if (sub === "record") {
+        if (!args.task) {
+            console.error(pc.red("`context record` requires --task <id> (the active durable task to record into)."));
+            process.exit(1);
+        }
+        if (!args.target) {
+            console.error(pc.red("`context record` requires an envelope JSON path."));
+            process.exit(1);
+        }
+        const envPath = path.resolve(boundary, args.target);
+        if (!fs.existsSync(envPath)) {
+            console.error(pc.red(`Envelope not found: ${args.target}`));
+            process.exit(1);
+        }
+        let envelope;
+        try {
+            envelope = ContextEnvelopeSchema.parse(JSON.parse(fs.readFileSync(envPath, "utf-8")));
+        }
+        catch (err) {
+            console.error(pc.red(`Invalid context envelope: ${err.message.split("\n")[0]}`));
+            process.exit(1);
+        }
+        // Advisory + best-effort (task-state-emission Rule 3): merge the envelope's owning repos +
+        // evidence paths into the CONSUMER PROJECT's task record (cwd-keyed, per task-record.ts).
+        // A missing/incompatible record surfaces non-zero but is never fatal to the caller's flow.
+        try {
+            const rec = await recordContextEvidence(process.cwd(), args.task, envelope, new Date().toISOString());
+            if (args.json) {
+                console.log(JSON.stringify({ taskId: rec.taskId, repos: rec.repos, evidenceRefs: rec.evidenceRefs }, null, 2));
+                return;
+            }
+            console.log(pc.bold(pc.cyan(`Recorded context evidence → task ${rec.taskId}`)));
+            for (const r of rec.repos)
+                console.log(`  repo: ${r.identity} ${pc.dim(`@ ${r.revision ?? "(non-git)"}`)}`);
+            console.log(pc.dim(`  ${rec.evidenceRefs.length} evidence path(s) tracked`));
+            return;
+        }
+        catch (err) {
+            console.error(pc.yellow(`context record skipped (advisory): ${err.message}`));
+            process.exit(1);
+        }
+    }
+    console.error(pc.red(`Unknown context subcommand "${sub}". Expected resolve|check|record.`));
+    process.exit(1);
+}
+//# sourceMappingURL=context.js.map

package/dist/commands/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,8FAA8F;AAC9F,+FAA+F;AAC/F,iGAAiG;AACjG,iGAAiG;AACjG,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACN,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAW/D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAErE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,OAAO;IACR,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,6BAA8B,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,uFAAuF;QACvF,iFAAiF;QACjF,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,oFAAoF;QACpF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChI,OAAO;QACR,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CACpC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5I,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,2FAA2F;QAC3F,4FAA4F;QAC5F,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClF,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;QACF,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QAChE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,WAAW,CAAC,MAAM,2DAA2D,CAAC,CAAC,CAAC;YAC1G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,OAAO;IACR,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACJ,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,6BAA8B,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,2FAA2F;QAC3F,0FAA0F;QAC1F,2FAA2F;QAC3F,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACtG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/G,OAAO;YACR,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC;YAC7E,OAAO;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,sCAAuC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,GAAG,mCAAmC,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC"}

package/dist/commands/doctor.d.ts

@@ -3,5 +3,32 @@ export declare function doctor(args?: {
     providers?: boolean;
     state?: boolean;
     hardGates?: boolean;
+    provenance?: boolean;
+    explain?: boolean;
+    consolidation?: boolean;
 }): Promise<void>;
+/** A file's provenance verifiability, decided only from locally available evidence. */
+type ProvenanceClass = "verified" | "known-modified" | "unknown";
+/**
+ * Classify one installed entry's provenance from metadata alone (no fetching).
+ * `trustedBaseline` is true only when the `baseChecksum` is a real as-shipped hash
+ * (canonical `new` metadata). Legacy sources reconstruct `baseChecksum` from the disk
+ * itself, so a `checksum === baseChecksum` match proves nothing about what shipped —
+ * such kit files are `unknown`, never `verified`.
+ */
+export declare function classifyProvenance(entry: {
+    owner: string;
+    checksum: string;
+    baseChecksum: string;
+}, trustedBaseline: boolean): ProvenanceClass;
+/**
+ * Read-only `doctor provenance --explain`. Reports what provenance can and cannot be
+ * proven from locally available evidence, in three honest classes: verified (as-shipped
+ * identity provable), known-modified (diverged from a KNOWN baseline), and unknown (no
+ * baseline recorded). It NEVER fetches a release, and it proposes a repair only when an
+ * exact trusted payload is locally available — doctor has none on disk, so it proposes
+ * none and says so, rather than relabeling or reconstructing silently.
+ */
+export declare function explainProvenance(root: string | null, explain: boolean): void;
+export {};
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AA8DA,wBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoGhB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AA+DA,wBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6GhB;AA4CD,uFAAuF;AACvF,KAAK,eAAe,GAAG,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAChE,eAAe,EAAE,OAAO,GACtB,eAAe,CASjB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CA0E7E"}

package/dist/commands/doctor.js

@@ -7,6 +7,7 @@ import { checkHardGates } from "./doctor-hard-gates.js";
 import { collectProviderContractDiagnostics, summarizeProviderContractDiagnostics, } from "../migrate/provider-contract-diagnostics.js";
 import { readInstallMetadata, CorruptInstallMetadataError } from "../core/install-metadata.js";
 import { readPortableRegistry } from "../migrate/reconcile/portable-registry.js";
+import { getConsolidationLedger } from "../core/consolidation-ledger.js";
 function statusIcon(status) {
     switch (status) {
         case "pass":
@@ -39,6 +40,10 @@ function findProjectRoot() {
     return null;
 }
 export async function doctor(args) {
+    if (args?.provenance) {
+        explainProvenance(findProjectRoot(), args.explain ?? false);
+        return;
+    }
     console.log(pc.bold(pc.cyan("MeowKit Doctor")));
     console.log(pc.dim("Diagnosing common issues...\n"));
     const root = findProjectRoot();
@@ -88,6 +93,9 @@ export async function doctor(args) {
     if (args?.hardGates) {
         results.push(...(await checkHardGates(root)));
     }
+    if (args?.consolidation) {
+        results.push(...checkConsolidation());
+    }
     for (const r of results) {
         console.log(`  [${statusIcon(r.status)}] ${r.name}`);
         console.log(`         ${pc.dim(r.detail)}`);
@@ -168,6 +176,98 @@ function checkInstalledMetadata(root) {
         throw err;
     }
 }
+/**
+ * Classify one installed entry's provenance from metadata alone (no fetching).
+ * `trustedBaseline` is true only when the `baseChecksum` is a real as-shipped hash
+ * (canonical `new` metadata). Legacy sources reconstruct `baseChecksum` from the disk
+ * itself, so a `checksum === baseChecksum` match proves nothing about what shipped —
+ * such kit files are `unknown`, never `verified`.
+ */
+export function classifyProvenance(entry, trustedBaseline) {
+    // No as-shipped baseline recorded ⇒ we cannot prove what shipped.
+    if (!entry.baseChecksum)
+        return "unknown";
+    if (entry.owner === "user")
+        return "verified"; // user-owned by design, not a kit claim
+    if (entry.owner === "meowkit-modified")
+        return "known-modified";
+    // Kit-owned pristine match is provable ONLY against a trusted (release-sourced)
+    // baseline; a disk-reconstructed legacy baseline cannot attest as-shipped identity.
+    if (entry.checksum !== entry.baseChecksum)
+        return "known-modified";
+    return trustedBaseline ? "verified" : "unknown";
+}
+/**
+ * Read-only `doctor provenance --explain`. Reports what provenance can and cannot be
+ * proven from locally available evidence, in three honest classes: verified (as-shipped
+ * identity provable), known-modified (diverged from a KNOWN baseline), and unknown (no
+ * baseline recorded). It NEVER fetches a release, and it proposes a repair only when an
+ * exact trusted payload is locally available — doctor has none on disk, so it proposes
+ * none and says so, rather than relabeling or reconstructing silently.
+ */
+export function explainProvenance(root, explain) {
+    console.log(pc.bold(pc.cyan("MeowKit Provenance")));
+    console.log(pc.dim("Read-only: reports what can and cannot be proven locally. No fetch, no relabel.\n"));
+    if (!root) {
+        console.log(pc.yellow("  Project root not found — nothing to explain."));
+        return;
+    }
+    let source;
+    let files;
+    try {
+        const result = readInstallMetadata(path.join(root, ".claude"));
+        if (result.source === "none" || !result.meta) {
+            console.log(pc.yellow("  No installed metadata found — provenance cannot be established."));
+            console.log(pc.dim("  Run `mewkit upgrade` to write canonical metadata, then re-run this command."));
+            return;
+        }
+        source = result.source;
+        files = result.meta.files;
+    }
+    catch (err) {
+        if (err instanceof CorruptInstallMetadataError) {
+            console.log(pc.red(`  Canonical metadata.json is corrupt: ${err.detail}`));
+            console.log(pc.dim("  Provenance is unprovable until it is regenerated (`mewkit upgrade`)."));
+            return;
+        }
+        throw err;
+    }
+    // Only canonical `new` metadata carries a trusted as-shipped baseline. Legacy
+    // sources reconstruct baselines from disk, so their "matches" prove nothing.
+    const trustedBaseline = source === "new";
+    const buckets = { verified: [], "known-modified": [], unknown: [] };
+    for (const f of files)
+        buckets[classifyProvenance(f, trustedBaseline)].push(f.path);
+    console.log(`  ${pc.dim("Metadata source:")} ${source}`);
+    if (!trustedBaseline) {
+        console.log(pc.yellow(`  Baseline is reconstructed from disk (source=${source}), not a trusted release payload —\n` +
+            "  as-shipped identity is NOT provable for these files. Run `mewkit upgrade` to write\n" +
+            "  canonical metadata with real baselines."));
+    }
+    if (files.length === 0) {
+        console.log(pc.red("  No file-level provenance recorded — nothing can be proven. Run `mewkit upgrade`."));
+        return;
+    }
+    console.log(`  ${pc.green("verified")}       ${buckets.verified.length} — as-shipped identity provable`);
+    console.log(`  ${pc.yellow("known-modified")} ${buckets["known-modified"].length} — diverged from a known baseline`);
+    console.log(`  ${pc.red("unknown")}        ${buckets.unknown.length} — as-shipped identity not provable\n`);
+    if (explain) {
+        const sample = (paths) => paths.length === 0 ? "(none)" : paths.slice(0, 10).join(", ") + (paths.length > 10 ? `, …(+${paths.length - 10})` : "");
+        console.log(`  ${pc.yellow("known-modified")}: ${sample(buckets["known-modified"])}`);
+        console.log(`  ${pc.red("unknown")}: ${sample(buckets.unknown)}\n`);
+    }
+    // Repair proposal is gated on a locally-available trusted payload. doctor never
+    // downloads a release, so it cannot repair here — it says so instead of guessing.
+    const repairable = buckets["known-modified"].length + buckets.unknown.length;
+    if (repairable === 0) {
+        console.log(pc.green("  All tracked files have provable provenance. No repair needed."));
+    }
+    else {
+        console.log(pc.dim(`  ${repairable} file(s) are modified or lack a baseline. No repair is proposed here: doctor has no\n` +
+            "  trusted release payload on disk. Exact historical repair requires the matching release\n" +
+            "  payload and a separately-approved repair flow — it is never reconstructed silently."));
+    }
+}
 async function checkMetadataHealth(root) {
     const results = [checkInstalledMetadata(root)];
     // The portable registry is global (~/.mewkit/), not per-project, so it is
@@ -189,6 +289,29 @@ async function checkMetadataHealth(root) {
     }
     return results;
 }
+/**
+ * Phase-7 consolidation ledger surfacing. Reports each candidate's deprecation/experimental/
+ * authoring-only status HONESTLY: the status label is NOT a runtime-availability claim (a
+ * deprecated or authoring-only artifact may be fully functional at runtime). Every candidate is
+ * `deletionThisPhase:false`, so nothing here is a failure — statuses map to pass/na/warn, never
+ * fail. The `detail` always names the outstanding gates so a reader sees WHY nothing is removed.
+ */
+function checkConsolidation() {
+    const statusToDiag = {
+        canonical: "pass",
+        "keep-legacy": "pass",
+        "authoring-only": "na",
+        experimental: "na",
+        deprecated: "warn",
+        undecided: "na",
+    };
+    return getConsolidationLedger().map((c) => ({
+        status: statusToDiag[c.status],
+        name: `Consolidation: ${c.id} [${c.status}]`,
+        // Honest: status is a classification, not a runtime-availability verdict. Gates say why it stays.
+        detail: `${c.purpose} — status is a classification, not a runtime-availability claim; not removed this phase. Gates: ${c.remainingGates.join("; ")}`,
+    }));
+}
 function checkStateTaxonomy(root) {
     if (!root) {
         return [{ status: "warn", name: "State taxonomy", detail: "Project root not found; skipped state path checks." }];