peaks-loop 4.0.50 → 4.0.52

package/dist/services/dispatch/sub-agent-dispatcher.d.ts

@@ -139,22 +139,13 @@ export declare const claudeCodeSubAgentDispatcher: SubAgentDispatcher;
  * stays the same; only the per-IDE wiring breaks (intentionally).
  */
 export declare const traeSubAgentDispatcher: SubAgentDispatcher;
-/**
- * Trae-CN dispatcher. Mirrors Trae's shape with a separate label so
- * the CLI's IDE detection can distinguish a Trae install region
- * (Trae-CN differs in skill install path / log location only;
- * dispatch surface is identical per slice #011 framework rule).
- *
- * Slice 1.3: real `awaitBatch` — same polling core as Trae.
- */
-export declare const traeCnSubAgentDispatcher: SubAgentDispatcher;
 /**
  * Codex (OpenAI CLI IDE) dispatcher.
  *
  * Slice #13 noted Codex's sub-agent tool name is TBD; per slice #009
  * rationale, the dispatcher mirrors Claude Code's shape so the
- * adapter contract stays uniform. Slice 1.3 promotes Codex from
- * `awaitByLlmFallback` to a real `awaitBatch` (file-based polling,
+ * adapter contract stays uniform. Slice 1.3 promotes Codex from the
+ * 1.2 marker to a real `awaitBatch` (file-based polling,
  * Codex default 45s — Codex's documented heartbeat is slightly
  * slower per slice #13 R-3).
  */
@@ -201,36 +192,26 @@ export declare class SubAgentNotSupportedError extends Error {
  */
 export declare function awaitClaudeCodeBatch(input: SubAgentAwaitBatchInput): Promise<readonly SubAgentBatchResult[]>;
 /**
- * Slice 1.3 — shared per-IDE polling core for trae / trae-cn / codex /
- * cursor. Same polling loop shape as `awaitClaudeCodeBatch`, with
- * per-IDE default timeout + note prefix. The 4 IDEs differ only in
- * (a) `defaultTimeoutMs` (Trae / Trae-CN / Cursor = 30s, Codex = 45s
- * per slice #13 R-3) and (b) the `note` label surfaced when an IDE
- * times out (so 1.4 dogfood can attribute a timeout to the right
- * IDE).
+ * Slice 1.3 — shared per-IDE polling core for trae / codex / cursor.
+ * Same polling loop shape as `awaitClaudeCodeBatch`, with per-IDE
+ * default timeout + note prefix. The 3 IDEs differ only in
+ * (a) `defaultTimeoutMs` (Trae / Cursor = 30s, Codex = 45s per slice
+ * #13 R-3) and (b) the `note` label surfaced when an IDE times out
+ * (so 1.4 dogfood can attribute a timeout to the right IDE).
  *
- * MVP rationale (per Karpathy §2 Simplicity First): the 4 IDEs
+ * MVP rationale (per Karpathy §2 Simplicity First): the 3 IDEs
  * currently share the same file-based polling transport. The only
  * per-IDE distinction is the timeout + label. Future per-IDE
  * divergence (real IPC / shell hooks) is a 1.4 dogfood concern —
  * here we keep the dispatcher interface uniform while each IDE's
- * `awaitBatch` is now a real implementation rather than the 1.2
- * `awaitByLlmFallback` marker.
+ * `awaitBatch` is a real implementation.
  */
 export interface PollDispatchRecordsOptions {
-    readonly ide: 'trae' | 'trae-cn' | 'codex' | 'cursor';
+    readonly ide: 'trae' | 'codex' | 'cursor';
     readonly defaultTimeoutMs: number;
     readonly notePrefix: string;
 }
 export declare function pollDispatchRecords(input: SubAgentAwaitBatchInput, opts: PollDispatchRecordsOptions): Promise<readonly SubAgentBatchResult[]>;
-/**
- * 1.2 fallback for trae / trae-cn / codex / cursor. Deprecated by
- * slice 1.3 — kept exported for legacy callers + back-compat tests
- * (the 1.2 marker is still a valid envelope shape; the 1.4 dogfood
- * tests can compare the marker note vs the 1.3 real note to verify
- * per-IDE attribution).
- */
-export declare function awaitByLlmFallback(input: SubAgentAwaitBatchInput, ide: string): Promise<readonly SubAgentBatchResult[]>;
 /**
  * In-process awaiter registration hook (used by `peaks sub-agent dispatch`
  * to attach a resolver; not part of the dispatcher public surface).

package/dist/services/dispatch/sub-agent-dispatcher.js

@@ -106,38 +106,13 @@ export const traeSubAgentDispatcher = {
         notePrefix: 'trae 1.3 real awaitBatch'
     })
 };
-/**
- * Trae-CN dispatcher. Mirrors Trae's shape with a separate label so
- * the CLI's IDE detection can distinguish a Trae install region
- * (Trae-CN differs in skill install path / log location only;
- * dispatch surface is identical per slice #011 framework rule).
- *
- * Slice 1.3: real `awaitBatch` — same polling core as Trae.
- */
-export const traeCnSubAgentDispatcher = {
-    label: 'trae-cn',
-    supportsRole: (role) => role.length > 0,
-    buildToolCall: ({ role, prompt, requestId }) => ({
-        name: 'Task',
-        args: {
-            subagent_type: 'general-purpose',
-            description: `${role} for rid=${requestId}`,
-            prompt,
-        },
-    }),
-    awaitBatch: async (input) => pollDispatchRecords(input, {
-        ide: 'trae-cn',
-        defaultTimeoutMs: 30_000,
-        notePrefix: 'trae-cn 1.3 real awaitBatch'
-    })
-};
 /**
  * Codex (OpenAI CLI IDE) dispatcher.
  *
  * Slice #13 noted Codex's sub-agent tool name is TBD; per slice #009
  * rationale, the dispatcher mirrors Claude Code's shape so the
- * adapter contract stays uniform. Slice 1.3 promotes Codex from
- * `awaitByLlmFallback` to a real `awaitBatch` (file-based polling,
+ * adapter contract stays uniform. Slice 1.3 promotes Codex from the
+ * 1.2 marker to a real `awaitBatch` (file-based polling,
  * Codex default 45s — Codex's documented heartbeat is slightly
  * slower per slice #13 R-3).
  */
@@ -245,14 +220,14 @@ export async function awaitClaudeCodeBatch(input) {
     // service. The back-compat envelope shape is preserved (one
     // `SubAgentBatchResult` per record path) so the S3 characterization
     // test stays green; the underlying loop is identical to the trae /
-    // trae-cn / codex / cursor wrappers below. The new typed outcome
+    // codex / cursor wrappers below. The new typed outcome
     // lives on the unified service; the S4 fail-fast test pins it.
     //
     // Slice 2026-07-30-nightshift: claude-code does NOT use a
     // per-IDE note prefix. The 1.4 dogfood contract says the done
     // note is `null` (raw outcome) and the failed note is the raw
-    // `outcome` string with no prefix. The 4 non-Claude IDEs
-    // (trae / trae-cn / codex / cursor) prefix the note with their
+    // `outcome` string with no prefix. The 3 non-Claude IDEs
+    // (trae / codex / cursor) prefix the note with their
     // per-IDE label so cross-IDE attribution is visible to the LLM.
     // Passing no `notePrefix` here keeps the legacy contract.
     const unified = await awaitBatchUnified(input.dispatchCount, input.recordPaths, input.timeoutMs, { defaultTimeoutMs: 60_000 });
@@ -299,24 +274,6 @@ export async function pollDispatchRecords(input, opts) {
     });
     return unified.results;
 }
-/**
- * 1.2 fallback for trae / trae-cn / codex / cursor. Deprecated by
- * slice 1.3 — kept exported for legacy callers + back-compat tests
- * (the 1.2 marker is still a valid envelope shape; the 1.4 dogfood
- * tests can compare the marker note vs the 1.3 real note to verify
- * per-IDE attribution).
- */
-export async function awaitByLlmFallback(input, ide) {
-    const startedAt = Date.now();
-    return input.recordPaths.map((p, i) => ({
-        dispatchIndex: i,
-        recordPath: p,
-        status: 'timeout',
-        durationMs: 0,
-        note: `awaitByLlm: ${ide} 1.2 fallback (real impl in 1.3)`
-    }));
-    void startedAt;
-}
 /**
  * In-process awaiter registration hook (used by `peaks sub-agent dispatch`
  * to attach a resolver; not part of the dispatcher public surface).

package/dist/services/doctor/doctor-service/checks/codegraph-exclude-integrity.js

@@ -30,8 +30,23 @@ import { inspectCodegraphExcludeIntegrity, isCodegraphExcludeConfigPresent } fro
 const CHECK_ID = 'capability:codegraph-exclude-integrity';
 /** How many rules / offending files the message names before eliding. */
 const MAX_NAMED = 5;
-function defaultProbe() {
-    const projectRoot = process.cwd();
+/**
+ * 2026-09-17 — `projectRoot` is the doctor's resolved L3 root, NOT
+ * `process.cwd()`. Same defect as the sibling `codegraph-index-integrity`
+ * probe (see its note): with `projectRootResolver` injected, every other
+ * check inspected the caller's root while this one inspected the operator's
+ * checkout, so its verdict depended on which repository you ran the doctor
+ * in. This one is read-only — it reads `.codegraph/config.json` and
+ * `git ls-files`, never the sqlite index — so unlike its sibling it did not
+ * also materialise `-shm`/`-wal` sidecars; the wrong-root defect was the
+ * same either way.
+ */
+function defaultProbe(projectRoot) {
+    // An unresolved root is not a project — see the sibling probe's note: a
+    // relative lookup here would resolve against `cwd` and inspect the
+    // operator's checkout.
+    if (projectRoot.length === 0)
+        return null;
     // No config → codegraph was never initialized here, so no exclude
     // list is in play and there is nothing to report.
     return isCodegraphExcludeConfigPresent(projectRoot)
@@ -48,8 +63,8 @@ function renderGapMessage(excludedTrackedCount, trackedSourceCount, rulesToRemov
     const elidedFiles = violations.length > MAX_NAMED ? `; … (+${violations.length - MAX_NAMED})` : '';
     return `codegraph index is incomplete: ${excludedTrackedCount} of ${trackedSourceCount} tracked source files are blocked by ${rulesToRemove.length} exclude rule(s) [${namedRules}${elidedRules}]. Blocked: ${namedFiles}${elidedFiles}. Run \`peaks codegraph repair-exclude --project <root>\` to drop them and rebuild the index.`;
 }
-function run({ options }) {
-    const probe = options.codegraphIntegrityProbe ?? defaultProbe;
+function run({ options, resolvedL3Root }) {
+    const probe = options.codegraphIntegrityProbe ?? (() => defaultProbe(resolvedL3Root));
     let report;
     try {
         report = probe();

package/dist/services/doctor/doctor-service/checks/codegraph-index-integrity.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Check: codegraph index integrity (`capability:codegraph-index-integrity`).
+ *
+ * The third codegraph check, and the one that stops `[OK]` from being a
+ * self-consistency assertion:
+ *   - `capability:codegraph` answers "is upstream resolvable";
+ *   - `capability:codegraph-exclude-integrity` answers "do the `exclude`
+ *     rules drop tracked files";
+ *   - this one answers "does the INDEX ITSELF cover the repository" —
+ *     files the extractor supports that `include` never admitted, and rows
+ *     the index still holds for paths that are gone.
+ *
+ * Why the exclude gate structurally cannot answer it: that gate runs the
+ * `include` filter FIRST and reconciles `exclude` against the survivors, so
+ * a file dropped by `include` is not "a tracked source file" as far as it is
+ * concerned; and it never reads the index at all, so dead rows are invisible
+ * to it. Both defects were present while `peaks codegraph status` printed
+ * `[OK] Index is up to date`.
+ *
+ * Read-only by construction — it consumes the same read-only inspector
+ * `peaks codegraph status` gates on. It never writes `.codegraph/config.json`
+ * and never invokes the upstream binary.
+ *
+ * Failure posture:
+ *   - codegraph not initialized in the inspected root (no
+ *     `.codegraph/codegraph.db`) → `ok: true`; there is no index to be
+ *     incomplete or stale, and a fresh clone must not fail the doctor.
+ *   - a confirmed gap on either axis → `ok: false`. ADVISORY by default
+ *     (`severity: 'warning'`, the doctor exit code is left alone), and
+ *     blocking (no severity tag) when the project opts in with
+ *     `PEAKS_CODEGRAPH_INDEX_STRICT=1` — the user's option C decision.
+ *     The finding is `ok: false` either way; only its severity moves.
+ *   - could not evaluate (not a git work tree, missing/malformed config,
+ *     unreadable index) → `ok: false, severity: 'warning'` so the doctor
+ *     reports the blind spot without flipping the exit code on an
+ *     unrelated failure. Kept non-blocking in BOTH modes: "could not
+ *     evaluate" is not a finding about the project, and it is
+ *     distinguishable from the `ok: true` "covers the repository"
+ *     verdict by its `ok` value.
+ *
+ * R12-2 — the partial collapse that remains, stated rather than implied:
+ * this branch and the advisory `gap` branch below BOTH emit `ok: false`
+ * with `severity: 'warning'`, and `DoctorCheck` has no third field, so in
+ * the doctor envelope they are separated by message text alone. Not fixed,
+ * deliberately: the shape is legacy (`runDoctor` compatibility is a
+ * stated constraint), neither state is `ok: true` — so the invariant that
+ * a non-measurement may never read as "verified clean" holds — and in the
+ * mode where they are collapsed neither state moves the exit code.
+ * Under `PEAKS_CODEGRAPH_INDEX_STRICT=1` they ARE separated in the
+ * machine fields: the advisory `gap` branch drops its tag, this one keeps
+ * it. Pinned by the "(severity policy)" and "(unevaluable)" tests.
+ */
+import type { DoctorCheckPlugin } from '../types.js';
+export declare const check: DoctorCheckPlugin;

package/dist/services/doctor/doctor-service/checks/codegraph-index-integrity.js

@@ -0,0 +1,151 @@
+/**
+ * Check: codegraph index integrity (`capability:codegraph-index-integrity`).
+ *
+ * The third codegraph check, and the one that stops `[OK]` from being a
+ * self-consistency assertion:
+ *   - `capability:codegraph` answers "is upstream resolvable";
+ *   - `capability:codegraph-exclude-integrity` answers "do the `exclude`
+ *     rules drop tracked files";
+ *   - this one answers "does the INDEX ITSELF cover the repository" —
+ *     files the extractor supports that `include` never admitted, and rows
+ *     the index still holds for paths that are gone.
+ *
+ * Why the exclude gate structurally cannot answer it: that gate runs the
+ * `include` filter FIRST and reconciles `exclude` against the survivors, so
+ * a file dropped by `include` is not "a tracked source file" as far as it is
+ * concerned; and it never reads the index at all, so dead rows are invisible
+ * to it. Both defects were present while `peaks codegraph status` printed
+ * `[OK] Index is up to date`.
+ *
+ * Read-only by construction — it consumes the same read-only inspector
+ * `peaks codegraph status` gates on. It never writes `.codegraph/config.json`
+ * and never invokes the upstream binary.
+ *
+ * Failure posture:
+ *   - codegraph not initialized in the inspected root (no
+ *     `.codegraph/codegraph.db`) → `ok: true`; there is no index to be
+ *     incomplete or stale, and a fresh clone must not fail the doctor.
+ *   - a confirmed gap on either axis → `ok: false`. ADVISORY by default
+ *     (`severity: 'warning'`, the doctor exit code is left alone), and
+ *     blocking (no severity tag) when the project opts in with
+ *     `PEAKS_CODEGRAPH_INDEX_STRICT=1` — the user's option C decision.
+ *     The finding is `ok: false` either way; only its severity moves.
+ *   - could not evaluate (not a git work tree, missing/malformed config,
+ *     unreadable index) → `ok: false, severity: 'warning'` so the doctor
+ *     reports the blind spot without flipping the exit code on an
+ *     unrelated failure. Kept non-blocking in BOTH modes: "could not
+ *     evaluate" is not a finding about the project, and it is
+ *     distinguishable from the `ok: true` "covers the repository"
+ *     verdict by its `ok` value.
+ *
+ * R12-2 — the partial collapse that remains, stated rather than implied:
+ * this branch and the advisory `gap` branch below BOTH emit `ok: false`
+ * with `severity: 'warning'`, and `DoctorCheck` has no third field, so in
+ * the doctor envelope they are separated by message text alone. Not fixed,
+ * deliberately: the shape is legacy (`runDoctor` compatibility is a
+ * stated constraint), neither state is `ok: true` — so the invariant that
+ * a non-measurement may never read as "verified clean" holds — and in the
+ * mode where they are collapsed neither state moves the exit code.
+ * Under `PEAKS_CODEGRAPH_INDEX_STRICT=1` they ARE separated in the
+ * machine fields: the advisory `gap` branch drops its tag, this one keeps
+ * it. Pinned by the "(severity policy)" and "(unevaluable)" tests.
+ */
+import { getErrorMessage } from 'peaks-loop-shared/result';
+import { isCodegraphInitialized } from '../../../codegraph/codegraph-service.js';
+import { CODEGRAPH_INDEX_STRICT_ENV_VAR, CODEGRAPH_REPAIR_INDEX_COMMAND, inspectCodegraphIndexIntegrity, isCodegraphIndexStrictMode } from '../../../codegraph/codegraph-index-integrity.js';
+const CHECK_ID = 'capability:codegraph-index-integrity';
+/** How many offending paths the message names per axis before eliding. */
+const MAX_NAMED = 5;
+function elide(paths) {
+    const named = paths.slice(0, MAX_NAMED).join(', ');
+    return paths.length > MAX_NAMED ? `${named}, … (+${paths.length - MAX_NAMED})` : named;
+}
+/**
+ * 2026-09-17 — `projectRoot` is the doctor's resolved L3 root, NOT
+ * `process.cwd()`. It used to read `process.cwd()`, which is a different
+ * thing from the root the rest of the doctor was pointed at: a caller that
+ * injects `projectRootResolver` (e.g.
+ * `tests/unit/doctor/doctor-exit-code-warn-only.test.ts`) got every other
+ * check aimed at its temp root while THIS one opened the operator's real
+ * `.codegraph/codegraph.db`. Opening that database materialises its
+ * `-shm`/`-wal` sidecars, so a unit run mutated the operator's checkout and
+ * the check's result depended on which repository you happened to run it
+ * in. Every other L3 check reads `resolvedL3Root` from `DoctorContext`;
+ * this one now does too.
+ */
+function defaultProbe(projectRoot) {
+    // An unresolved root is not a project. It must NOT fall through to a
+    // relative lookup (`join('', '.codegraph', …)` resolves against `cwd`),
+    // because that fallback IS the defect this signature was changed to close:
+    // a caller that never resolved a root would silently inspect the operator's
+    // checkout. `runDoctor` always resolves one; only a hand-built test context
+    // can pass ''.
+    if (projectRoot.length === 0)
+        return null;
+    // No index → nothing to be incomplete or stale.
+    return isCodegraphInitialized(projectRoot) ? inspectCodegraphIndexIntegrity(projectRoot) : null;
+}
+function renderGapMessage(includeGap, admittedTrackedCount, trackedSourceCount, deadRows, indexedFileCount) {
+    const parts = [];
+    if (includeGap.length > 0) {
+        parts.push(`${includeGap.length} of ${trackedSourceCount} extractor-supported tracked file(s) are not admitted by the config's include globs (admitted: ${admittedTrackedCount}) [${elide(includeGap)}]`);
+    }
+    if (deadRows.length > 0) {
+        parts.push(`${deadRows.length} of ${indexedFileCount} indexed file(s) are gone from disk [${elide(deadRows)}]`);
+    }
+    return `codegraph index does not cover the repository: ${parts.join('; ')}.`;
+}
+// The remediation clause, in both modes. Naming the command is the
+// slice-002 half of slice-001's design decision 4 (which deliberately named
+// none while none existed); the command name is a shared constant, so this
+// message cannot drift from the CLI surface it points at.
+function remediation() {
+    return `Run \`${CODEGRAPH_REPAIR_INDEX_COMMAND}\` to add the missing include pattern(s) and rebuild the index without the stale rows.`;
+}
+function run({ options, resolvedL3Root }) {
+    const probe = options.codegraphIndexIntegrityProbe ?? (() => defaultProbe(resolvedL3Root));
+    const strict = isCodegraphIndexStrictMode();
+    let report;
+    try {
+        report = probe();
+    }
+    catch (error) {
+        return [{
+                id: CHECK_ID,
+                ok: false,
+                severity: 'warning',
+                message: `codegraph index integrity could not be evaluated: ${getErrorMessage(error)}`
+            }];
+    }
+    if (report === null) {
+        return [{
+                id: CHECK_ID,
+                ok: true,
+                message: 'codegraph is not initialized in this project (no .codegraph/codegraph.db); there is no index to be incomplete or stale'
+            }];
+    }
+    if (!report.gap) {
+        return [{
+                id: CHECK_ID,
+                ok: true,
+                message: `codegraph index covers the repository (${report.admittedTrackedCount} extractor-supported tracked file(s) admitted, ${report.indexedFileCount} indexed row(s), none stale)`
+            }];
+    }
+    const gapMessage = renderGapMessage(report.includeGap, report.admittedTrackedCount, report.trackedSourceCount, report.deadRows, report.indexedFileCount);
+    // Option C: advisory by default, blocking on opt-in. `ok: false` in both
+    // modes — the finding is reported either way; only `severity` (and with
+    // it the doctor exit code) moves. The advisory suffix is the discovery
+    // path for the switch, so an operator who wants blocking is told how.
+    return strict
+        ? [{ id: CHECK_ID, ok: false, message: `${gapMessage} ${remediation()}` }]
+        : [{
+                id: CHECK_ID,
+                ok: false,
+                severity: 'warning',
+                message: `${gapMessage} ${remediation()} Advisory: set ${CODEGRAPH_INDEX_STRICT_ENV_VAR}=1 to make this blocking.`
+            }];
+}
+export const check = {
+    name: 'codegraph-index-integrity',
+    run
+};

package/dist/services/doctor/doctor-service/checks/l3-orphan-sessions.js

@@ -18,16 +18,16 @@
 import { existsSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { getErrorMessage } from 'peaks-loop-shared/result';
-/**
- * Canonical system subdirs that intentionally live under
- * `.peaks/_runtime/` and must NOT be flagged as orphan sessions.
- *
- * `change/` is the routing target for change-id reviewable
- * artifacts per F3 audit-p1. Adding a new entry here requires
- * also updating `RUNTIME_SYSTEM_SUBDIRS_DOC` in the comments
- * below so the next maintainer knows why each entry is listed.
- */
-const RUNTIME_SYSTEM_SUBDIRS = new Set(['change']);
+import { RUNTIME_SYSTEM_SUBDIRS } from '../../../workspace/runtime-layout.js';
+// The exclude-list moved to `src/services/workspace/runtime-layout.ts`.
+// It is imported above, not re-declared here: the local literal
+// (`new Set(['change'])`) had already drifted — `callers/` is a designed
+// location written by `caller-binding-service.ts` and was never added, so
+// this check reported `4 orphan session(s) …: callers, cli, unknown-sid, x`
+// and `peaks doctor` exited 1 on a clean workspace, permanently.
+// `tests/unit/workspace/runtime-layout-drift-guard.test.ts` now fails when
+// the code writes a `.peaks/_runtime/` child the registry does not know, so
+// the set can no longer drift silently.
 function run({ resolvedL3Root, isValidSessionId }) {
     try {
         const runtimeDir = join(resolvedL3Root, '.peaks/_runtime');

package/dist/services/doctor/doctor-service/plugin-registry.js

@@ -43,6 +43,7 @@ import { check as statuslineInstall } from './checks/statusline-install.js';
 import { check as statuslineRuntime } from './checks/statusline-runtime.js';
 import { check as codegraphCapability } from './checks/codegraph-capability.js';
 import { check as codegraphExcludeIntegrity } from './checks/codegraph-exclude-integrity.js';
+import { check as codegraphIndexIntegrity } from './checks/codegraph-index-integrity.js';
 import { check as distSourceVersion } from './checks/dist-source-version.js';
 import { check as multiBinaryDrift } from './checks/multi-binary-drift.js';
 import { check as workspaceLayout } from './checks/workspace-layout.js';
@@ -72,6 +73,7 @@ export const PLUGINS = [
     statuslineRuntime, // id "statusline:runtime"
     codegraphCapability, // id "capability:codegraph"
     codegraphExcludeIntegrity, // id "capability:codegraph-exclude-integrity"
+    codegraphIndexIntegrity, // id "capability:codegraph-index-integrity"
     distSourceVersion, // id "build:dist-version-matches-source"
     multiBinaryDrift, // id "build:multi-binary-drift"
     workspaceLayout, // id "build:workspace-layout-canonical"

package/dist/services/doctor/doctor-service/types.d.ts

@@ -94,6 +94,23 @@ export type CodegraphExcludeIntegrityProbe = {
         readonly matchedRule: string;
     }[];
 };
+/**
+ * Structural shape of the codegraph index-integrity report the
+ * `capability:codegraph-index-integrity` check gates on. Declared
+ * structurally (rather than imported from the codegraph service) to
+ * keep this type module dependency-free — the default probe returns a
+ * `CodegraphIndexIntegrityReport`, which is assignable here.
+ */
+export type CodegraphIndexIntegrityProbe = {
+    readonly gap: boolean;
+    readonly trackedSourceCount: number;
+    readonly admittedTrackedCount: number;
+    /** Class ① — extractor-supported tracked files `include` does not admit. */
+    readonly includeGap: readonly string[];
+    readonly indexedFileCount: number;
+    /** Class ② — index rows whose path is gone from disk. */
+    readonly deadRows: readonly string[];
+};
 export type DistVersionComparison = {
     dist: string | null;
     source: string;
@@ -256,6 +273,14 @@ export type DoctorOptions = {
      * and reported as a non-blocking warning.
      */
     codegraphIntegrityProbe?: () => CodegraphExcludeIntegrityProbe | null;
+    /**
+     * Optional override for the `capability:codegraph-index-integrity`
+     * check. Returns the report, or `null` when codegraph is not
+     * initialized in the inspected root (no index to inspect). When
+     * omitted, the check inspects `process.cwd()`. Throwing is allowed
+     * and reported as a non-blocking warning.
+     */
+    codegraphIndexIntegrityProbe?: () => CodegraphIndexIntegrityProbe | null;
     skillPresenceProbe?: () => DoctorSkillPresence | null;
     skillPresenceFreshnessThresholdMs?: number;
     statusLineInstalledProbe?: () => boolean;

package/dist/services/ide/adapters/claude-code-adapter.js

@@ -591,7 +591,6 @@ export const CLAUDE_CODE_ADAPTER = {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.claude', 'settings.json');
         },
-        supportsScope: () => true,
     },
     envVar: 'CLAUDE_PROJECT_DIR',
     hookEvent: 'PreToolUse',

package/dist/services/ide/adapters/codex-adapter.js

@@ -54,8 +54,7 @@ export const CODEX_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.codex', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'CODEX_PROJECT_DIR', // UNVERIFIED — see slice #13 PRD R-3; fallback path still works
     hookEvent: 'pre_tool_use', // UNVERIFIED — Codex lowercase snake_case pattern; re-verify against Codex docs

package/dist/services/ide/adapters/cursor-adapter.js

@@ -44,8 +44,7 @@ export const CURSOR_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.cursor', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'CURSOR_PROJECT_DIR', // UNVERIFIED — see slice #12 PRD R-2; fallback path still works
     hookEvent: 'beforeShellExecution', // UNVERIFIED — see slice #12 PRD R-1; re-verify against Cursor's published hook schema

package/dist/services/ide/adapters/hermes-adapter.js

@@ -29,8 +29,7 @@ export const HERMES_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.hermes', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'HERMES_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/openclaw-adapter.js

@@ -22,8 +22,7 @@ export const OPENCLAW_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.openclaw', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'OPENCLAW_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/qoder-adapter.js

@@ -33,8 +33,7 @@ export const QODER_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.qoder', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'QODER_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/tongyi-lingma-adapter.js

@@ -24,8 +24,7 @@ export const TONGYI_LINGMA_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.lingma', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'TONGYI_LINGMA_PROJECT_DIR', // UNVERIFIED
     hookEvent: 'PreToolUse', // UNVERIFIED

package/dist/services/ide/adapters/trae-adapter.js

@@ -50,8 +50,7 @@ export const TRAE_ADAPTER = {
         resolveSettingsFile: (scope, projectRoot) => {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.trae', 'settings.json');
-        },
-        supportsScope: (scope) => scope === 'project' || scope === 'global'
+        }
     },
     envVar: 'TRAE_PROJECT_DIR',
     hookEvent: 'beforeToolCall', // VERIFIED against Trae 1.x fixture — slice 009-009-2026-06-07-trae-dogfood (2026-06-07); fixture at tests/fixtures/trae/trae-1x-payload.json

package/dist/services/ide/adapters/zcode-adapter.js

@@ -159,7 +159,6 @@ export const ZCODE_ADAPTER = {
             const root = scope === 'global' ? homedir() : resolve(projectRoot ?? homedir());
             return join(root, '.zcode', 'settings.json');
         },
-        supportsScope: (scope) => scope === 'project' || scope === 'global',
     },
     // UNVERIFIED — z-code 桌面应用未公开 `ZCODE_PROJECT_DIR` env var,这里
     // 用占位符,RD 阶段假设 z-code 借用了 Anthropic-compatible 协议并可能

package/dist/services/ide/ide-types.d.ts

@@ -41,8 +41,6 @@ export interface IdeSettingsLocation {
     readonly localSettingsFileName?: string;
     /** 解析出 settings.json 绝对路径 */
     resolveSettingsFile(scope: 'project' | 'global', projectRoot: string | undefined): string;
-    /** 该 IDE 是否支持此 scope(用于清晰报错) */
-    supportsScope(scope: 'project' | 'global'): boolean;
 }
 /**
  * Slim IDE adapter 描述。每 IDE 一个静态常量(无需 DI)。