safeword 0.78.2 → 0.78.4

package/dist/{chunk-V63TSN3C.js → chunk-FOYGZ4MK.js}

@@ -1,12 +1,17 @@
 // src/cli-protocol/review-presentation.ts
 var REVIEW_AGENTS = /* @__PURE__ */ new Set(["claude", "codex"]);
 var REVIEW_AUTHORS = /* @__PURE__ */ new Set(["claude", "codex", "cursor"]);
-var REPLACED_REVIEW_FINDINGS = /* @__PURE__ */ new Set(["REVIEW_INDEPENDENCE", "REVIEW_INDEPENDENCE_DEGRADED"]);
+var REPLACED_REVIEW_FINDINGS = /* @__PURE__ */ new Set([
+  "REVIEW_INDEPENDENCE",
+  "REVIEW_NOT_REQUESTED",
+  "REVIEW_STALE"
+]);
 var RETRYABLE_REVIEW_FAILURES = /* @__PURE__ */ new Set([
   "timed_out",
   "process_failed",
   "invalid_output",
-  "source_changed"
+  "REVIEWER_PROVENANCE_MISSING",
+  "REVIEWER_PROVENANCE_CONTRADICTORY"
 ]);
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -17,7 +22,8 @@ function reviewCoverage(data) {
   if (typeof author !== "string" || !REVIEW_AUTHORS.has(author) || typeof reviewer !== "string") {
     return "incomplete";
   }
-  if (data.independence === "degraded" && reviewer === author) return "standard";
+  if (data.independence === "degraded" && REVIEW_AGENTS.has(reviewer) && reviewer === author)
+    return "standard";
   if (data.independence === "cross-agent" && REVIEW_AGENTS.has(reviewer) && reviewer !== author) {
     return "independent";
   }
@@ -26,7 +32,7 @@ function reviewCoverage(data) {
 function reviewVerdict(data) {
   const output = data.reviewer_output;
   if (!isRecord(output)) return void 0;
-  if (typeof output.reviewer_agent !== "string" || !REVIEW_AUTHORS.has(output.reviewer_agent) || output.reviewer_agent !== data.actual_reviewer) {
+  if (typeof output.reviewer_agent !== "string" || !REVIEW_AGENTS.has(output.reviewer_agent) || output.reviewer_agent !== data.actual_reviewer) {
     return void 0;
   }
   return output.verdict === "approve" || output.verdict === "request_changes" ? output.verdict : void 0;
@@ -58,16 +64,27 @@ function blockedReviewCoverageLine(data, coverage, verdict) {
   }
   return incompleteCoverageLine(data);
 }
+function specialReviewCoverageLine(status, state) {
+  if (status === "existing_route" && state === "healthy") return "Review not requested.";
+  if (status === "pending" && state === "action_required") {
+    return "Review running in the background.";
+  }
+  if (status === "stale" && state === "action_required") {
+    return "Review stale \u2014 sources changed during the check.";
+  }
+  return void 0;
+}
 function reviewCoverageLine(data, state) {
-  const coverage = reviewCoverage(data);
   const status = data.status;
+  const specialLine = specialReviewCoverageLine(status, state);
+  if (specialLine !== void 0) return specialLine;
   const verdict = reviewVerdict(data);
   if (!reviewStateMatchesStatus(state, status)) return incompleteCoverageLine(data);
   if (!reviewPolicyMatchesStatus(data)) return "Review incomplete.";
   if (!reviewVerdictMatchesStatus(status, verdict)) return incompleteCoverageLine(data);
-  if (status === "blocked" && verdict !== void 0) {
-    return blockedReviewCoverageLine(data, coverage, verdict);
-  }
+  if (verdict === void 0) return incompleteCoverageLine(data);
+  const coverage = reviewCoverage(data);
+  if (status === "blocked") return blockedReviewCoverageLine(data, coverage, verdict);
   if (coverage === "incomplete") return "Review incomplete.";
   if (verdict === "request_changes") return `Review changes requested \u2014 ${coverage} coverage.`;
   return `Review complete \u2014 ${coverage} coverage.`;
@@ -90,6 +107,9 @@ function suggestionForFailure(failure, label) {
   if (failure === "not_installed") {
     return `To add independent coverage, install or update ${label}, then retry review.`;
   }
+  if (failure === "untrusted_install") {
+    return `To add independent coverage, move ${label} to a trusted non-writable-by-group directory, then retry review.`;
+  }
   if (failure === "unsupported") {
     return `To add independent coverage, update ${label}, then retry review.`;
   }
@@ -106,9 +126,10 @@ function suggestionForFailure(failure, label) {
 }
 function reviewResultLines(result, options) {
   if (!isRecord(result.data) || result.data.command !== "review run") return void 0;
+  if (result.state === "failed" && result.errors.length > 0) return void 0;
   const messages = result.findings.filter((finding) => !REPLACED_REVIEW_FINDINGS.has(finding.code)).map((finding) => finding.message);
   messages.push(...result.errors.map((error) => error.message));
-  const lines = [reviewCoverageLine(result.data, result.state), ...new Set(messages)];
+  const lines = [reviewCoverageLine(result.data, result.state), ...messages];
   if (options.verbose === true) {
     const suggestion = reviewUpgradeSuggestion(result.data, result.state);
     if (suggestion !== void 0) lines.push(suggestion);
@@ -411,4 +432,4 @@ export {
   renderJsonResult,
   renderHumanStreams
 };
-//# sourceMappingURL=chunk-V63TSN3C.js.map
+//# sourceMappingURL=chunk-FOYGZ4MK.js.map

package/dist/chunk-FOYGZ4MK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli-protocol/review-presentation.ts","../src/cli-protocol/result.ts"],"sourcesContent":["import type { CliResult } from './result.js';\n\ntype ReviewCoverage = 'standard' | 'independent' | 'incomplete';\ntype ReviewVerdict = 'approve' | 'request_changes';\n\nconst REVIEW_AGENTS = new Set(['claude', 'codex']);\nconst REVIEW_AUTHORS = new Set(['claude', 'codex', 'cursor']);\nconst REPLACED_REVIEW_FINDINGS = new Set([\n  'REVIEW_INDEPENDENCE',\n  'REVIEW_NOT_REQUESTED',\n  'REVIEW_STALE',\n]);\nconst RETRYABLE_REVIEW_FAILURES = new Set([\n  'timed_out',\n  'process_failed',\n  'invalid_output',\n  'REVIEWER_PROVENANCE_MISSING',\n  'REVIEWER_PROVENANCE_CONTRADICTORY',\n]);\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction reviewCoverage(data: Record<string, unknown>): ReviewCoverage {\n  const author = data.author_agent;\n  const reviewer = data.actual_reviewer;\n  if (typeof author !== 'string' || !REVIEW_AUTHORS.has(author) || typeof reviewer !== 'string') {\n    return 'incomplete';\n  }\n  if (data.independence === 'degraded' && REVIEW_AGENTS.has(reviewer) && reviewer === author)\n    return 'standard';\n  if (data.independence === 'cross-agent' && REVIEW_AGENTS.has(reviewer) && reviewer !== author) {\n    return 'independent';\n  }\n  return 'incomplete';\n}\n\nfunction reviewVerdict(data: Record<string, unknown>): ReviewVerdict | undefined {\n  const output = data.reviewer_output;\n  if (!isRecord(output)) return undefined;\n  if (\n    typeof output.reviewer_agent !== 'string' ||\n    !REVIEW_AGENTS.has(output.reviewer_agent) ||\n    output.reviewer_agent !== data.actual_reviewer\n  ) {\n    return undefined;\n  }\n  return output.verdict === 'approve' || output.verdict === 'request_changes'\n    ? output.verdict\n    : undefined;\n}\n\nfunction reviewVerdictMatchesStatus(status: unknown, verdict: ReviewVerdict | undefined): boolean {\n  if (status === 'approved') return verdict === 'approve';\n  if (status === 'changes_requested') return verdict === 'request_changes';\n  return status === 'blocked' && verdict !== undefined;\n}\n\nfunction reviewPolicyMatchesStatus(data: Record<string, unknown>): boolean {\n  if (data.status === 'blocked') {\n    return data.review_policy === 'prefer' || data.review_policy === 'require';\n  }\n  return (\n    (data.status === 'approved' || data.status === 'changes_requested') &&\n    data.review_policy === undefined\n  );\n}\n\nfunction reviewStateMatchesStatus(state: CliResult['state'], status: unknown): boolean {\n  if (status === 'approved') return state === 'healthy';\n  return (status === 'changes_requested' || status === 'blocked') && state === 'action_required';\n}\n\nfunction isConsistentReviewResult(\n  data: Record<string, unknown>,\n  state: CliResult['state'],\n  verdict: ReviewVerdict | undefined,\n): boolean {\n  return (\n    reviewStateMatchesStatus(state, data.status) &&\n    reviewPolicyMatchesStatus(data) &&\n    reviewVerdictMatchesStatus(data.status, verdict)\n  );\n}\n\nfunction incompleteCoverageLine(data: Record<string, unknown>): string {\n  return data.status === 'blocked' && data.review_policy === 'require'\n    ? 'Review incomplete — required independent coverage is unsatisfied.'\n    : 'Review incomplete.';\n}\n\nfunction blockedReviewCoverageLine(\n  data: Record<string, unknown>,\n  coverage: ReviewCoverage,\n  verdict: ReviewVerdict,\n): string {\n  if (coverage === 'standard' && data.review_policy === 'require') {\n    return verdict === 'request_changes'\n      ? 'Review blocked — changes requested with standard coverage; required independent coverage is unsatisfied.'\n      : 'Review blocked — standard coverage achieved; required independent coverage is unsatisfied.';\n  }\n  return incompleteCoverageLine(data);\n}\n\nfunction specialReviewCoverageLine(status: unknown, state: CliResult['state']): string | undefined {\n  if (status === 'existing_route' && state === 'healthy') return 'Review not requested.';\n  if (status === 'pending' && state === 'action_required') {\n    return 'Review running in the background.';\n  }\n  if (status === 'stale' && state === 'action_required') {\n    return 'Review stale — sources changed during the check.';\n  }\n  return undefined;\n}\n\nfunction reviewCoverageLine(data: Record<string, unknown>, state: CliResult['state']): string {\n  const status = data.status;\n  const specialLine = specialReviewCoverageLine(status, state);\n  if (specialLine !== undefined) return specialLine;\n\n  const verdict = reviewVerdict(data);\n  if (!reviewStateMatchesStatus(state, status)) return incompleteCoverageLine(data);\n  if (!reviewPolicyMatchesStatus(data)) return 'Review incomplete.';\n  if (!reviewVerdictMatchesStatus(status, verdict)) return incompleteCoverageLine(data);\n  // Preserve an explicit narrowing guard for blockedReviewCoverageLine below.\n  if (verdict === undefined) return incompleteCoverageLine(data);\n  const coverage = reviewCoverage(data);\n  if (status === 'blocked') return blockedReviewCoverageLine(data, coverage, verdict);\n  if (coverage === 'incomplete') return 'Review incomplete.';\n  if (verdict === 'request_changes') return `Review changes requested — ${coverage} coverage.`;\n  return `Review complete — ${coverage} coverage.`;\n}\n\nfunction isCompletedStandardReview(\n  data: Record<string, unknown>,\n  state: CliResult['state'],\n): boolean {\n  const verdict = reviewVerdict(data);\n  return (\n    data.status === 'approved' &&\n    isConsistentReviewResult(data, state, verdict) &&\n    reviewCoverage(data) === 'standard'\n  );\n}\n\nfunction reviewUpgradeSuggestion(\n  data: Record<string, unknown>,\n  state: CliResult['state'],\n): string | undefined {\n  if (!isCompletedStandardReview(data, state)) return undefined;\n  const author = data.author_agent;\n  const reviewer = data.assigned_reviewer;\n  if (\n    typeof author !== 'string' ||\n    typeof reviewer !== 'string' ||\n    !REVIEW_AGENTS.has(reviewer) ||\n    reviewer === author\n  ) {\n    return undefined;\n  }\n  const label = `${reviewer.charAt(0).toUpperCase()}${reviewer.slice(1)}`;\n  return suggestionForFailure(data.preferred_failure, label);\n}\n\nfunction suggestionForFailure(failure: unknown, label: string): string | undefined {\n  if (failure === 'not_installed') {\n    return `To add independent coverage, install or update ${label}, then retry review.`;\n  }\n  if (failure === 'untrusted_install') {\n    return `To add independent coverage, move ${label} to a trusted non-writable-by-group directory, then retry review.`;\n  }\n  if (failure === 'unsupported') {\n    return `To add independent coverage, update ${label}, then retry review.`;\n  }\n  if (failure === 'probe_timed_out' || failure === 'launch_failed') {\n    return `To add independent coverage, run ${label} --help to diagnose it, then retry review.`;\n  }\n  if (failure === 'not_authenticated') {\n    return `To add independent coverage, sign in to ${label}, then retry review.`;\n  }\n  if (RETRYABLE_REVIEW_FAILURES.has(String(failure))) {\n    return `To add independent coverage, retry ${label} review.`;\n  }\n  return undefined;\n}\n\nexport function reviewResultLines(\n  result: CliResult,\n  options: { verbose?: boolean },\n): string[] | undefined {\n  if (!isRecord(result.data) || result.data.command !== 'review run') return undefined;\n  if (result.state === 'failed' && result.errors.length > 0) return undefined;\n  const messages = result.findings\n    .filter(finding => !REPLACED_REVIEW_FINDINGS.has(finding.code))\n    .map(finding => finding.message);\n  messages.push(...result.errors.map(error => error.message));\n  const lines = [reviewCoverageLine(result.data, result.state), ...messages];\n  if (options.verbose === true) {\n    const suggestion = reviewUpgradeSuggestion(result.data, result.state);\n    if (suggestion !== undefined) lines.push(suggestion);\n  }\n  return lines;\n}\n","import { reviewResultLines } from './review-presentation.js';\n\ntype ResultState = 'healthy' | 'changed' | 'action_required' | 'failed';\n\nexport interface Finding {\n  readonly code: string;\n  readonly message: string;\n  readonly severity: 'info' | 'warning' | 'error';\n  readonly detail?: string;\n  readonly metadata?: Readonly<Record<string, unknown>>;\n}\n\ninterface ResultError {\n  readonly code: string;\n  readonly message: string;\n  readonly retryable: boolean;\n  readonly detail?: string;\n}\n\ninterface CommandNextAction {\n  readonly command: string;\n  readonly mutates: boolean;\n  readonly requiresHuman: boolean;\n}\n\ninterface HumanNextAction {\n  readonly kind: 'human';\n  readonly instruction: string;\n  readonly mutates: false;\n  readonly requiresHuman: true;\n}\n\nexport type NextAction = CommandNextAction | HumanNextAction;\n\ninterface RecoveryAction {\n  readonly command: string;\n  readonly description: string;\n  readonly requiresHuman: boolean;\n}\n\nexport interface Effect {\n  readonly kind: string;\n  readonly target: string;\n  readonly operation?: string;\n}\n\nexport interface Effects {\n  readonly files: readonly Effect[];\n  readonly packages: readonly Effect[];\n  readonly configuration: readonly Effect[];\n  readonly network: readonly Effect[];\n  readonly destructive: readonly Effect[];\n}\n\nexport interface CliResult {\n  readonly schemaVersion: 1;\n  readonly ok: boolean;\n  readonly state: ResultState;\n  readonly changed: boolean;\n  readonly findings: readonly Finding[];\n  readonly effects: Effects;\n  readonly errors: readonly ResultError[];\n  readonly recovery: readonly RecoveryAction[];\n  readonly nextActions: readonly NextAction[];\n  /** Process status for commands that must preserve a delegated program's exit. */\n  readonly exitCode?: number;\n  readonly presentation?: {\n    readonly kind: 'raw';\n    readonly body: string;\n  };\n  readonly data?: unknown;\n}\n\ninterface ResultInput {\n  readonly state: ResultState;\n  readonly changed?: boolean;\n  readonly findings?: readonly Finding[];\n  readonly effects?: Partial<Effects>;\n  readonly errors?: readonly ResultError[];\n  readonly recovery?: readonly RecoveryAction[];\n  readonly nextActions?: readonly NextAction[];\n  readonly exitCode?: number;\n  readonly presentation?: NonNullable<CliResult['presentation']>;\n  readonly data?: unknown;\n}\n\nconst EMPTY_EFFECTS: Effects = {\n  files: [],\n  packages: [],\n  configuration: [],\n  network: [],\n  destructive: [],\n};\n\nexport function combineEffects(groups: readonly Partial<Effects>[]): Effects {\n  return {\n    files: groups.flatMap(effects => effects.files ?? []),\n    packages: groups.flatMap(effects => effects.packages ?? []),\n    configuration: groups.flatMap(effects => effects.configuration ?? []),\n    network: groups.flatMap(effects => effects.network ?? []),\n    destructive: groups.flatMap(effects => effects.destructive ?? []),\n  };\n}\n\n/** Aggregate state precedence shared by commands that combine several results. */\nexport function combinedResultState(results: readonly CliResult[]): CliResult['state'] {\n  if (results.some(result => result.state === 'failed')) return 'failed';\n  if (results.some(result => result.state === 'action_required')) return 'action_required';\n  if (results.some(result => result.state === 'changed')) return 'changed';\n  return 'healthy';\n}\n\nexport function createResult(input: ResultInput): CliResult {\n  return {\n    schemaVersion: 1,\n    ok: input.state !== 'failed',\n    state: input.state,\n    changed: input.changed ?? input.state === 'changed',\n    findings: input.findings ?? [],\n    effects: { ...EMPTY_EFFECTS, ...input.effects },\n    errors: input.errors ?? [],\n    recovery: input.recovery ?? [],\n    nextActions: input.nextActions ?? [],\n    ...(input.exitCode !== undefined && { exitCode: input.exitCode }),\n    ...(input.presentation !== undefined && { presentation: input.presentation }),\n    ...(input.data !== undefined && { data: input.data }),\n  };\n}\n\nexport function withDeprecation(\n  result: CliResult,\n  legacy: string,\n  replacement: string,\n  compatibility: {\n    readonly introducedIn: string;\n    readonly retention: 'indefinite';\n    readonly redundantOptions?: readonly {\n      readonly key: string;\n      readonly flag: string;\n      readonly replacement: string;\n    }[];\n  },\n  options: Readonly<Record<string, unknown>> = {},\n): CliResult {\n  const redundantOptionFindings: Finding[] = (compatibility.redundantOptions ?? [])\n    .filter(option => options[option.key] === true)\n    .map(option => ({\n      code: 'CLI_OPTION_REDUNDANT',\n      message: `\\`${option.flag}\\` is accepted for compatibility but has no effect; use \\`${option.replacement}\\`.`,\n      severity: 'warning',\n      metadata: {\n        option: option.flag,\n        replacement: option.replacement,\n        retention: compatibility.retention,\n      },\n    }));\n  return {\n    ...result,\n    findings: [\n      ...result.findings,\n      {\n        code: 'CLI_ALIAS_DEPRECATED',\n        message: `\\`${legacy}\\` is deprecated; use \\`${replacement}\\`.`,\n        severity: 'warning',\n        metadata: {\n          replacement,\n          introduced_in: compatibility.introducedIn,\n          retention: compatibility.retention,\n        },\n      },\n      ...redundantOptionFindings,\n    ],\n  };\n}\n\nexport function exitStatusFor(result: CliResult): number {\n  if (result.exitCode !== undefined) return result.exitCode;\n  if (result.state === 'failed') return 1;\n  if (result.state === 'action_required') return 2;\n  return 0;\n}\n\nfunction toWireResult(result: CliResult): Record<string, unknown> {\n  return {\n    schema_version: result.schemaVersion,\n    ok: result.ok,\n    state: result.state,\n    changed: result.changed,\n    findings: result.findings.map(({ code, message, severity, detail, metadata }) => ({\n      code,\n      message,\n      severity,\n      ...(detail !== undefined && { detail }),\n      ...(metadata !== undefined && { metadata }),\n    })),\n    effects: result.effects,\n    errors: result.errors.map(({ code, message, retryable, detail }) => ({\n      code,\n      message,\n      retryable,\n      ...(detail !== undefined && { detail }),\n    })),\n    recovery: result.recovery.map(({ command, description, requiresHuman }) => ({\n      command,\n      description,\n      requires_human: requiresHuman,\n    })),\n    next_actions: result.nextActions.map(action =>\n      'command' in action\n        ? {\n            command: action.command,\n            mutates: action.mutates,\n            requires_human: action.requiresHuman,\n          }\n        : {\n            kind: action.kind,\n            instruction: action.instruction,\n            mutates: action.mutates,\n            requires_human: action.requiresHuman,\n          },\n    ),\n    ...(result.data !== undefined && { data: result.data }),\n  };\n}\n\nexport function renderJsonResult(result: CliResult): string {\n  return JSON.stringify(toWireResult(result));\n}\n\nconst VERDICTS: Readonly<Record<ResultState, string>> = {\n  healthy: 'Healthy',\n  changed: 'Complete',\n  action_required: 'Needs attention',\n  failed: 'Failed',\n};\n\nfunction uniqueMessages(result: CliResult): string[] {\n  const messages = result.findings.map(finding => finding.message);\n  messages.push(...result.errors.map(error => error.message));\n  return [...new Set(messages)];\n}\n\nfunction suppressHumanOutput(result: CliResult, options: { quiet?: boolean }): boolean {\n  return options.quiet === true && result.state === 'healthy';\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction effectLines(category: string, effects: unknown): string[] {\n  if (!Array.isArray(effects)) return [];\n  return effects.flatMap(effect =>\n    isRecord(effect) && typeof effect.kind === 'string' && typeof effect.target === 'string'\n      ? [`${category}: ${effect.kind} ${effect.target}`]\n      : [],\n  );\n}\n\nfunction nextActionLabel(action: NextAction): string {\n  return 'command' in action ? action.command : action.instruction;\n}\n\nfunction plannedEffectLines(data: unknown): string[] {\n  if (!isRecord(data)) return [];\n  const plan = data.plan;\n  if (!isRecord(plan)) return [];\n  const effects = plan.effects;\n  if (!isRecord(effects)) return [];\n  const categories = ['files', 'packages', 'configuration', 'network', 'destructive'];\n  const lines = categories.flatMap(category => effectLines(category, effects[category]));\n  return lines.length === 0 ? [] : ['Planned effects:', ...lines];\n}\n\nconst SURFACE_LABELS: Readonly<Record<string, string>> = {\n  project: 'Project',\n  claude: 'Claude',\n  codex: 'Codex',\n  cursor: 'Cursor',\n};\n\nconst SURFACE_OUTCOMES: Readonly<Record<string, string>> = {\n  healthy: 'ready',\n  changed: 'updated',\n  action_required: 'needs attention',\n  failed: 'failed',\n};\n\n/** Labelled surfaces of a `command`-tagged result payload, or [] when it is not that command. */\nfunction labelledSurfaces(\n  data: unknown,\n  command: string,\n): { readonly label: string; readonly surface: Record<string, unknown> }[] {\n  if (!isRecord(data) || data.command !== command || !Array.isArray(data.surfaces)) return [];\n  return data.surfaces.flatMap(surface => {\n    if (!isRecord(surface) || typeof surface.name !== 'string') return [];\n    const label = SURFACE_LABELS[surface.name];\n    return label === undefined ? [] : [{ label, surface }];\n  });\n}\n\nfunction installSurfaceLines(data: unknown): string[] {\n  return labelledSurfaces(data, 'install').flatMap(({ label, surface }) => {\n    if (surface.selected === false) return [`${label}: not selected`];\n    const outcome = typeof surface.state === 'string' ? SURFACE_OUTCOMES[surface.state] : undefined;\n    return outcome === undefined ? [] : [`${label}: ${outcome}`];\n  });\n}\n\nfunction installActivationLines(data: unknown): string[] {\n  return labelledSurfaces(data, 'install').flatMap(({ label, surface }) => {\n    if (!Array.isArray(surface.activation_actions)) return [];\n    return surface.activation_actions.flatMap(action =>\n      typeof action === 'string' ? [`${label} activation: ${action}`] : [],\n    );\n  });\n}\n\nfunction doctorDiagnosticCauses(data: unknown): ReadonlySet<string> {\n  if (!isRecord(data) || data.command !== 'doctor' || !Array.isArray(data.diagnostics)) {\n    return new Set();\n  }\n  return new Set(\n    data.diagnostics.flatMap(diagnostic =>\n      isRecord(diagnostic) && typeof diagnostic.cause === 'string' ? [diagnostic.cause] : [],\n    ),\n  );\n}\n\nfunction doctorDiagnosticLines(data: unknown): string[] {\n  if (!isRecord(data) || data.command !== 'doctor' || !Array.isArray(data.coverage)) return [];\n\n  const coverage = data.coverage.flatMap(item => {\n    if (!isRecord(item) || typeof item.surface !== 'string') return [];\n    const label = SURFACE_LABELS[item.surface] ?? item.surface;\n    const outcome = typeof item.state === 'string' ? SURFACE_OUTCOMES[item.state] : undefined;\n    const evidence = isRecord(item.evidence)\n      ? Object.entries(item.evidence)\n          .filter((entry): entry is [string, string | number | boolean] =>\n            ['string', 'number', 'boolean'].includes(typeof entry[1]),\n          )\n          .map(([key, value]) => `${key.replaceAll('_', ' ')}=${String(value)}`)\n      : [];\n    const evidenceSuffix = evidence.length === 0 ? '' : ` (${evidence.join(', ')})`;\n    return [`- ${label}: ${outcome ?? 'unknown'}${evidenceSuffix}`];\n  });\n  const diagnostics = Array.isArray(data.diagnostics)\n    ? data.diagnostics.flatMap(item => {\n        if (\n          !isRecord(item) ||\n          typeof item.surface !== 'string' ||\n          typeof item.code !== 'string' ||\n          typeof item.cause !== 'string'\n        ) {\n          return [];\n        }\n        const label = SURFACE_LABELS[item.surface] ?? item.surface;\n        return [`- ${label} [${item.code}]: ${item.cause}`];\n      })\n    : [];\n\n  return [\n    ...(coverage.length === 0 ? [] : ['Diagnostic coverage:', ...coverage]),\n    ...(diagnostics.length === 0 ? [] : ['Causes:', ...diagnostics]),\n  ];\n}\n\nconst EFFECT_LABELS: Readonly<Record<string, string>> = {\n  create: 'Created',\n  update: 'Updated',\n  delete: 'Deleted',\n  install: 'Installed',\n  uninstall: 'Uninstalled',\n  remove: 'Removed',\n  write: 'Written',\n};\n\nfunction completedEffectLines(result: CliResult): string[] {\n  const visibleCategories = [\n    result.effects.files,\n    result.effects.packages,\n    result.effects.configuration,\n    result.effects.destructive,\n  ];\n  const lines = visibleCategories.flatMap(effects =>\n    effects.map(effect => `${EFFECT_LABELS[effect.kind] ?? 'Changed'}: ${effect.target}`),\n  );\n  lines.push(\n    ...result.effects.network.map(\n      effect => `Network: ${effect.operation ?? effect.kind} ${effect.target}`,\n    ),\n  );\n  return lines;\n}\n\nexport function renderHumanResult(\n  result: CliResult,\n  options: { quiet?: boolean; verbose?: boolean } = {},\n): string {\n  const rendered = renderHumanStreams(result, options);\n  return rendered.stdout || rendered.stderr;\n}\n\nexport interface HumanResultStreams {\n  readonly stdout: string;\n  readonly stderr: string;\n}\n\nfunction resultBodyLines(result: CliResult, options: { verbose?: boolean }): string[] {\n  const reviewLines = reviewResultLines(result, options);\n  if (reviewLines !== undefined) return reviewLines;\n  const diagnosticCauses = doctorDiagnosticCauses(result.data);\n  const messages = uniqueMessages(result).filter(message => !diagnosticCauses.has(message));\n  const lines = [\n    VERDICTS[result.state],\n    `Changed: ${result.changed ? 'yes' : 'no'}`,\n    ...installSurfaceLines(result.data),\n    ...installActivationLines(result.data),\n    ...doctorDiagnosticLines(result.data),\n    ...messages,\n    ...plannedEffectLines(result.data),\n  ];\n\n  if (options.verbose === true) {\n    const details = [\n      ...result.findings.map(finding => finding.detail),\n      ...result.errors.map(error => error.detail),\n    ].filter((detail): detail is string => detail !== undefined);\n    lines.push(...completedEffectLines(result), ...details);\n  }\n  return lines;\n}\n\nexport function renderHumanStreams(\n  result: CliResult,\n  options: { quiet?: boolean; verbose?: boolean } = {},\n): HumanResultStreams {\n  if (result.presentation?.kind === 'raw') {\n    return {\n      stdout: result.presentation.body.replace(/\\n$/, ''),\n      stderr: options.quiet === true ? '' : uniqueMessages(result).join('\\n'),\n    };\n  }\n  if (suppressHumanOutput(result, options)) return { stdout: '', stderr: '' };\n\n  const lines = resultBodyLines(result, options);\n\n  const primaryAction = result.nextActions[0];\n  if (primaryAction !== undefined) lines.push(`Next: ${nextActionLabel(primaryAction)}`);\n  const body = lines.join('\\n');\n  return result.state === 'failed' ? { stdout: '', stderr: body } : { stdout: body, stderr: '' };\n}\n"],"mappings":";AAKA,IAAM,gBAAgB,oBAAI,IAAI,CAAC,UAAU,OAAO,CAAC;AACjD,IAAM,iBAAiB,oBAAI,IAAI,CAAC,UAAU,SAAS,QAAQ,CAAC;AAC5D,IAAM,2BAA2B,oBAAI,IAAI;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,IAAM,4BAA4B,oBAAI,IAAI;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,eAAe,MAA+C;AACrE,QAAM,SAAS,KAAK;AACpB,QAAM,WAAW,KAAK;AACtB,MAAI,OAAO,WAAW,YAAY,CAAC,eAAe,IAAI,MAAM,KAAK,OAAO,aAAa,UAAU;AAC7F,WAAO;AAAA,EACT;AACA,MAAI,KAAK,iBAAiB,cAAc,cAAc,IAAI,QAAQ,KAAK,aAAa;AAClF,WAAO;AACT,MAAI,KAAK,iBAAiB,iBAAiB,cAAc,IAAI,QAAQ,KAAK,aAAa,QAAQ;AAC7F,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAA0D;AAC/E,QAAM,SAAS,KAAK;AACpB,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,MACE,OAAO,OAAO,mBAAmB,YACjC,CAAC,cAAc,IAAI,OAAO,cAAc,KACxC,OAAO,mBAAmB,KAAK,iBAC/B;AACA,WAAO;AAAA,EACT;AACA,SAAO,OAAO,YAAY,aAAa,OAAO,YAAY,oBACtD,OAAO,UACP;AACN;AAEA,SAAS,2BAA2B,QAAiB,SAA6C;AAChG,MAAI,WAAW,WAAY,QAAO,YAAY;AAC9C,MAAI,WAAW,oBAAqB,QAAO,YAAY;AACvD,SAAO,WAAW,aAAa,YAAY;AAC7C;AAEA,SAAS,0BAA0B,MAAwC;AACzE,MAAI,KAAK,WAAW,WAAW;AAC7B,WAAO,KAAK,kBAAkB,YAAY,KAAK,kBAAkB;AAAA,EACnE;AACA,UACG,KAAK,WAAW,cAAc,KAAK,WAAW,wBAC/C,KAAK,kBAAkB;AAE3B;AAEA,SAAS,yBAAyB,OAA2B,QAA0B;AACrF,MAAI,WAAW,WAAY,QAAO,UAAU;AAC5C,UAAQ,WAAW,uBAAuB,WAAW,cAAc,UAAU;AAC/E;AAEA,SAAS,yBACP,MACA,OACA,SACS;AACT,SACE,yBAAyB,OAAO,KAAK,MAAM,KAC3C,0BAA0B,IAAI,KAC9B,2BAA2B,KAAK,QAAQ,OAAO;AAEnD;AAEA,SAAS,uBAAuB,MAAuC;AACrE,SAAO,KAAK,WAAW,aAAa,KAAK,kBAAkB,YACvD,2EACA;AACN;AAEA,SAAS,0BACP,MACA,UACA,SACQ;AACR,MAAI,aAAa,cAAc,KAAK,kBAAkB,WAAW;AAC/D,WAAO,YAAY,oBACf,kHACA;AAAA,EACN;AACA,SAAO,uBAAuB,IAAI;AACpC;AAEA,SAAS,0BAA0B,QAAiB,OAA+C;AACjG,MAAI,WAAW,oBAAoB,UAAU,UAAW,QAAO;AAC/D,MAAI,WAAW,aAAa,UAAU,mBAAmB;AACvD,WAAO;AAAA,EACT;AACA,MAAI,WAAW,WAAW,UAAU,mBAAmB;AACrD,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAA+B,OAAmC;AAC5F,QAAM,SAAS,KAAK;AACpB,QAAM,cAAc,0BAA0B,QAAQ,KAAK;AAC3D,MAAI,gBAAgB,OAAW,QAAO;AAEtC,QAAM,UAAU,cAAc,IAAI;AAClC,MAAI,CAAC,yBAAyB,OAAO,MAAM,EAAG,QAAO,uBAAuB,IAAI;AAChF,MAAI,CAAC,0BAA0B,IAAI,EAAG,QAAO;AAC7C,MAAI,CAAC,2BAA2B,QAAQ,OAAO,EAAG,QAAO,uBAAuB,IAAI;AAEpF,MAAI,YAAY,OAAW,QAAO,uBAAuB,IAAI;AAC7D,QAAM,WAAW,eAAe,IAAI;AACpC,MAAI,WAAW,UAAW,QAAO,0BAA0B,MAAM,UAAU,OAAO;AAClF,MAAI,aAAa,aAAc,QAAO;AACtC,MAAI,YAAY,kBAAmB,QAAO,mCAA8B,QAAQ;AAChF,SAAO,0BAAqB,QAAQ;AACtC;AAEA,SAAS,0BACP,MACA,OACS;AACT,QAAM,UAAU,cAAc,IAAI;AAClC,SACE,KAAK,WAAW,cAChB,yBAAyB,MAAM,OAAO,OAAO,KAC7C,eAAe,IAAI,MAAM;AAE7B;AAEA,SAAS,wBACP,MACA,OACoB;AACpB,MAAI,CAAC,0BAA0B,MAAM,KAAK,EAAG,QAAO;AACpD,QAAM,SAAS,KAAK;AACpB,QAAM,WAAW,KAAK;AACtB,MACE,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,CAAC,cAAc,IAAI,QAAQ,KAC3B,aAAa,QACb;AACA,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,GAAG,SAAS,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,SAAS,MAAM,CAAC,CAAC;AACrE,SAAO,qBAAqB,KAAK,mBAAmB,KAAK;AAC3D;AAEA,SAAS,qBAAqB,SAAkB,OAAmC;AACjF,MAAI,YAAY,iBAAiB;AAC/B,WAAO,kDAAkD,KAAK;AAAA,EAChE;AACA,MAAI,YAAY,qBAAqB;AACnC,WAAO,qCAAqC,KAAK;AAAA,EACnD;AACA,MAAI,YAAY,eAAe;AAC7B,WAAO,uCAAuC,KAAK;AAAA,EACrD;AACA,MAAI,YAAY,qBAAqB,YAAY,iBAAiB;AAChE,WAAO,oCAAoC,KAAK;AAAA,EAClD;AACA,MAAI,YAAY,qBAAqB;AACnC,WAAO,2CAA2C,KAAK;AAAA,EACzD;AACA,MAAI,0BAA0B,IAAI,OAAO,OAAO,CAAC,GAAG;AAClD,WAAO,sCAAsC,KAAK;AAAA,EACpD;AACA,SAAO;AACT;AAEO,SAAS,kBACd,QACA,SACsB;AACtB,MAAI,CAAC,SAAS,OAAO,IAAI,KAAK,OAAO,KAAK,YAAY,aAAc,QAAO;AAC3E,MAAI,OAAO,UAAU,YAAY,OAAO,OAAO,SAAS,EAAG,QAAO;AAClE,QAAM,WAAW,OAAO,SACrB,OAAO,aAAW,CAAC,yBAAyB,IAAI,QAAQ,IAAI,CAAC,EAC7D,IAAI,aAAW,QAAQ,OAAO;AACjC,WAAS,KAAK,GAAG,OAAO,OAAO,IAAI,WAAS,MAAM,OAAO,CAAC;AAC1D,QAAM,QAAQ,CAAC,mBAAmB,OAAO,MAAM,OAAO,KAAK,GAAG,GAAG,QAAQ;AACzE,MAAI,QAAQ,YAAY,MAAM;AAC5B,UAAM,aAAa,wBAAwB,OAAO,MAAM,OAAO,KAAK;AACpE,QAAI,eAAe,OAAW,OAAM,KAAK,UAAU;AAAA,EACrD;AACA,SAAO;AACT;;;ACrHA,IAAM,gBAAyB;AAAA,EAC7B,OAAO,CAAC;AAAA,EACR,UAAU,CAAC;AAAA,EACX,eAAe,CAAC;AAAA,EAChB,SAAS,CAAC;AAAA,EACV,aAAa,CAAC;AAChB;AAEO,SAAS,eAAe,QAA8C;AAC3E,SAAO;AAAA,IACL,OAAO,OAAO,QAAQ,aAAW,QAAQ,SAAS,CAAC,CAAC;AAAA,IACpD,UAAU,OAAO,QAAQ,aAAW,QAAQ,YAAY,CAAC,CAAC;AAAA,IAC1D,eAAe,OAAO,QAAQ,aAAW,QAAQ,iBAAiB,CAAC,CAAC;AAAA,IACpE,SAAS,OAAO,QAAQ,aAAW,QAAQ,WAAW,CAAC,CAAC;AAAA,IACxD,aAAa,OAAO,QAAQ,aAAW,QAAQ,eAAe,CAAC,CAAC;AAAA,EAClE;AACF;AAGO,SAAS,oBAAoB,SAAmD;AACrF,MAAI,QAAQ,KAAK,YAAU,OAAO,UAAU,QAAQ,EAAG,QAAO;AAC9D,MAAI,QAAQ,KAAK,YAAU,OAAO,UAAU,iBAAiB,EAAG,QAAO;AACvE,MAAI,QAAQ,KAAK,YAAU,OAAO,UAAU,SAAS,EAAG,QAAO;AAC/D,SAAO;AACT;AAEO,SAAS,aAAa,OAA+B;AAC1D,SAAO;AAAA,IACL,eAAe;AAAA,IACf,IAAI,MAAM,UAAU;AAAA,IACpB,OAAO,MAAM;AAAA,IACb,SAAS,MAAM,WAAW,MAAM,UAAU;AAAA,IAC1C,UAAU,MAAM,YAAY,CAAC;AAAA,IAC7B,SAAS,EAAE,GAAG,eAAe,GAAG,MAAM,QAAQ;AAAA,IAC9C,QAAQ,MAAM,UAAU,CAAC;AAAA,IACzB,UAAU,MAAM,YAAY,CAAC;AAAA,IAC7B,aAAa,MAAM,eAAe,CAAC;AAAA,IACnC,GAAI,MAAM,aAAa,UAAa,EAAE,UAAU,MAAM,SAAS;AAAA,IAC/D,GAAI,MAAM,iBAAiB,UAAa,EAAE,cAAc,MAAM,aAAa;AAAA,IAC3E,GAAI,MAAM,SAAS,UAAa,EAAE,MAAM,MAAM,KAAK;AAAA,EACrD;AACF;AAEO,SAAS,gBACd,QACA,QACA,aACA,eASA,UAA6C,CAAC,GACnC;AACX,QAAM,2BAAsC,cAAc,oBAAoB,CAAC,GAC5E,OAAO,YAAU,QAAQ,OAAO,GAAG,MAAM,IAAI,EAC7C,IAAI,aAAW;AAAA,IACd,MAAM;AAAA,IACN,SAAS,KAAK,OAAO,IAAI,6DAA6D,OAAO,WAAW;AAAA,IACxG,UAAU;AAAA,IACV,UAAU;AAAA,MACR,QAAQ,OAAO;AAAA,MACf,aAAa,OAAO;AAAA,MACpB,WAAW,cAAc;AAAA,IAC3B;AAAA,EACF,EAAE;AACJ,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU;AAAA,MACR,GAAG,OAAO;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,SAAS,KAAK,MAAM,2BAA2B,WAAW;AAAA,QAC1D,UAAU;AAAA,QACV,UAAU;AAAA,UACR;AAAA,UACA,eAAe,cAAc;AAAA,UAC7B,WAAW,cAAc;AAAA,QAC3B;AAAA,MACF;AAAA,MACA,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAEO,SAAS,cAAc,QAA2B;AACvD,MAAI,OAAO,aAAa,OAAW,QAAO,OAAO;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,OAAO,UAAU,kBAAmB,QAAO;AAC/C,SAAO;AACT;AAEA,SAAS,aAAa,QAA4C;AAChE,SAAO;AAAA,IACL,gBAAgB,OAAO;AAAA,IACvB,IAAI,OAAO;AAAA,IACX,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,UAAU,OAAO,SAAS,IAAI,CAAC,EAAE,MAAM,SAAS,UAAU,QAAQ,SAAS,OAAO;AAAA,MAChF;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,WAAW,UAAa,EAAE,OAAO;AAAA,MACrC,GAAI,aAAa,UAAa,EAAE,SAAS;AAAA,IAC3C,EAAE;AAAA,IACF,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO,OAAO,IAAI,CAAC,EAAE,MAAM,SAAS,WAAW,OAAO,OAAO;AAAA,MACnE;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,WAAW,UAAa,EAAE,OAAO;AAAA,IACvC,EAAE;AAAA,IACF,UAAU,OAAO,SAAS,IAAI,CAAC,EAAE,SAAS,aAAa,cAAc,OAAO;AAAA,MAC1E;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,IAClB,EAAE;AAAA,IACF,cAAc,OAAO,YAAY;AAAA,MAAI,YACnC,aAAa,SACT;AAAA,QACE,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,MACzB,IACA;AAAA,QACE,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,QACpB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,MACzB;AAAA,IACN;AAAA,IACA,GAAI,OAAO,SAAS,UAAa,EAAE,MAAM,OAAO,KAAK;AAAA,EACvD;AACF;AAEO,SAAS,iBAAiB,QAA2B;AAC1D,SAAO,KAAK,UAAU,aAAa,MAAM,CAAC;AAC5C;AAEA,IAAM,WAAkD;AAAA,EACtD,SAAS;AAAA,EACT,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,QAAQ;AACV;AAEA,SAAS,eAAe,QAA6B;AACnD,QAAM,WAAW,OAAO,SAAS,IAAI,aAAW,QAAQ,OAAO;AAC/D,WAAS,KAAK,GAAG,OAAO,OAAO,IAAI,WAAS,MAAM,OAAO,CAAC;AAC1D,SAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC;AAC9B;AAEA,SAAS,oBAAoB,QAAmB,SAAuC;AACrF,SAAO,QAAQ,UAAU,QAAQ,OAAO,UAAU;AACpD;AAEA,SAASA,UAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,UAAkB,SAA4B;AACjE,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO,CAAC;AACrC,SAAO,QAAQ;AAAA,IAAQ,YACrBA,UAAS,MAAM,KAAK,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,WAAW,WAC5E,CAAC,GAAG,QAAQ,KAAK,OAAO,IAAI,IAAI,OAAO,MAAM,EAAE,IAC/C,CAAC;AAAA,EACP;AACF;AAEA,SAAS,gBAAgB,QAA4B;AACnD,SAAO,aAAa,SAAS,OAAO,UAAU,OAAO;AACvD;AAEA,SAAS,mBAAmB,MAAyB;AACnD,MAAI,CAACA,UAAS,IAAI,EAAG,QAAO,CAAC;AAC7B,QAAM,OAAO,KAAK;AAClB,MAAI,CAACA,UAAS,IAAI,EAAG,QAAO,CAAC;AAC7B,QAAM,UAAU,KAAK;AACrB,MAAI,CAACA,UAAS,OAAO,EAAG,QAAO,CAAC;AAChC,QAAM,aAAa,CAAC,SAAS,YAAY,iBAAiB,WAAW,aAAa;AAClF,QAAM,QAAQ,WAAW,QAAQ,cAAY,YAAY,UAAU,QAAQ,QAAQ,CAAC,CAAC;AACrF,SAAO,MAAM,WAAW,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,KAAK;AAChE;AAEA,IAAM,iBAAmD;AAAA,EACvD,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AACV;AAEA,IAAM,mBAAqD;AAAA,EACzD,SAAS;AAAA,EACT,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,QAAQ;AACV;AAGA,SAAS,iBACP,MACA,SACyE;AACzE,MAAI,CAACA,UAAS,IAAI,KAAK,KAAK,YAAY,WAAW,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAAG,QAAO,CAAC;AAC1F,SAAO,KAAK,SAAS,QAAQ,aAAW;AACtC,QAAI,CAACA,UAAS,OAAO,KAAK,OAAO,QAAQ,SAAS,SAAU,QAAO,CAAC;AACpE,UAAM,QAAQ,eAAe,QAAQ,IAAI;AACzC,WAAO,UAAU,SAAY,CAAC,IAAI,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA,EACvD,CAAC;AACH;AAEA,SAAS,oBAAoB,MAAyB;AACpD,SAAO,iBAAiB,MAAM,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,QAAQ,MAAM;AACvE,QAAI,QAAQ,aAAa,MAAO,QAAO,CAAC,GAAG,KAAK,gBAAgB;AAChE,UAAM,UAAU,OAAO,QAAQ,UAAU,WAAW,iBAAiB,QAAQ,KAAK,IAAI;AACtF,WAAO,YAAY,SAAY,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE;AAAA,EAC7D,CAAC;AACH;AAEA,SAAS,uBAAuB,MAAyB;AACvD,SAAO,iBAAiB,MAAM,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,QAAQ,MAAM;AACvE,QAAI,CAAC,MAAM,QAAQ,QAAQ,kBAAkB,EAAG,QAAO,CAAC;AACxD,WAAO,QAAQ,mBAAmB;AAAA,MAAQ,YACxC,OAAO,WAAW,WAAW,CAAC,GAAG,KAAK,gBAAgB,MAAM,EAAE,IAAI,CAAC;AAAA,IACrE;AAAA,EACF,CAAC;AACH;AAEA,SAAS,uBAAuB,MAAoC;AAClE,MAAI,CAACA,UAAS,IAAI,KAAK,KAAK,YAAY,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAAG;AACpF,WAAO,oBAAI,IAAI;AAAA,EACjB;AACA,SAAO,IAAI;AAAA,IACT,KAAK,YAAY;AAAA,MAAQ,gBACvBA,UAAS,UAAU,KAAK,OAAO,WAAW,UAAU,WAAW,CAAC,WAAW,KAAK,IAAI,CAAC;AAAA,IACvF;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,MAAyB;AACtD,MAAI,CAACA,UAAS,IAAI,KAAK,KAAK,YAAY,YAAY,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAAG,QAAO,CAAC;AAE3F,QAAM,WAAW,KAAK,SAAS,QAAQ,UAAQ;AAC7C,QAAI,CAACA,UAAS,IAAI,KAAK,OAAO,KAAK,YAAY,SAAU,QAAO,CAAC;AACjE,UAAM,QAAQ,eAAe,KAAK,OAAO,KAAK,KAAK;AACnD,UAAM,UAAU,OAAO,KAAK,UAAU,WAAW,iBAAiB,KAAK,KAAK,IAAI;AAChF,UAAM,WAAWA,UAAS,KAAK,QAAQ,IACnC,OAAO,QAAQ,KAAK,QAAQ,EACzB;AAAA,MAAO,CAAC,UACP,CAAC,UAAU,UAAU,SAAS,EAAE,SAAS,OAAO,MAAM,CAAC,CAAC;AAAA,IAC1D,EACC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,IACvE,CAAC;AACL,UAAM,iBAAiB,SAAS,WAAW,IAAI,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC;AAC5E,WAAO,CAAC,KAAK,KAAK,KAAK,WAAW,SAAS,GAAG,cAAc,EAAE;AAAA,EAChE,CAAC;AACD,QAAM,cAAc,MAAM,QAAQ,KAAK,WAAW,IAC9C,KAAK,YAAY,QAAQ,UAAQ;AAC/B,QACE,CAACA,UAAS,IAAI,KACd,OAAO,KAAK,YAAY,YACxB,OAAO,KAAK,SAAS,YACrB,OAAO,KAAK,UAAU,UACtB;AACA,aAAO,CAAC;AAAA,IACV;AACA,UAAM,QAAQ,eAAe,KAAK,OAAO,KAAK,KAAK;AACnD,WAAO,CAAC,KAAK,KAAK,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,EAAE;AAAA,EACpD,CAAC,IACD,CAAC;AAEL,SAAO;AAAA,IACL,GAAI,SAAS,WAAW,IAAI,CAAC,IAAI,CAAC,wBAAwB,GAAG,QAAQ;AAAA,IACrE,GAAI,YAAY,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,WAAW;AAAA,EAChE;AACF;AAEA,IAAM,gBAAkD;AAAA,EACtD,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,OAAO;AACT;AAEA,SAAS,qBAAqB,QAA6B;AACzD,QAAM,oBAAoB;AAAA,IACxB,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,OAAO,QAAQ;AAAA,EACjB;AACA,QAAM,QAAQ,kBAAkB;AAAA,IAAQ,aACtC,QAAQ,IAAI,YAAU,GAAG,cAAc,OAAO,IAAI,KAAK,SAAS,KAAK,OAAO,MAAM,EAAE;AAAA,EACtF;AACA,QAAM;AAAA,IACJ,GAAG,OAAO,QAAQ,QAAQ;AAAA,MACxB,YAAU,YAAY,OAAO,aAAa,OAAO,IAAI,IAAI,OAAO,MAAM;AAAA,IACxE;AAAA,EACF;AACA,SAAO;AACT;AAeA,SAAS,gBAAgB,QAAmB,SAA0C;AACpF,QAAM,cAAc,kBAAkB,QAAQ,OAAO;AACrD,MAAI,gBAAgB,OAAW,QAAO;AACtC,QAAM,mBAAmB,uBAAuB,OAAO,IAAI;AAC3D,QAAM,WAAW,eAAe,MAAM,EAAE,OAAO,aAAW,CAAC,iBAAiB,IAAI,OAAO,CAAC;AACxF,QAAM,QAAQ;AAAA,IACZ,SAAS,OAAO,KAAK;AAAA,IACrB,YAAY,OAAO,UAAU,QAAQ,IAAI;AAAA,IACzC,GAAG,oBAAoB,OAAO,IAAI;AAAA,IAClC,GAAG,uBAAuB,OAAO,IAAI;AAAA,IACrC,GAAG,sBAAsB,OAAO,IAAI;AAAA,IACpC,GAAG;AAAA,IACH,GAAG,mBAAmB,OAAO,IAAI;AAAA,EACnC;AAEA,MAAI,QAAQ,YAAY,MAAM;AAC5B,UAAM,UAAU;AAAA,MACd,GAAG,OAAO,SAAS,IAAI,aAAW,QAAQ,MAAM;AAAA,MAChD,GAAG,OAAO,OAAO,IAAI,WAAS,MAAM,MAAM;AAAA,IAC5C,EAAE,OAAO,CAAC,WAA6B,WAAW,MAAS;AAC3D,UAAM,KAAK,GAAG,qBAAqB,MAAM,GAAG,GAAG,OAAO;AAAA,EACxD;AACA,SAAO;AACT;AAEO,SAAS,mBACd,QACA,UAAkD,CAAC,GAC/B;AACpB,MAAI,OAAO,cAAc,SAAS,OAAO;AACvC,WAAO;AAAA,MACL,QAAQ,OAAO,aAAa,KAAK,QAAQ,OAAO,EAAE;AAAA,MAClD,QAAQ,QAAQ,UAAU,OAAO,KAAK,eAAe,MAAM,EAAE,KAAK,IAAI;AAAA,IACxE;AAAA,EACF;AACA,MAAI,oBAAoB,QAAQ,OAAO,EAAG,QAAO,EAAE,QAAQ,IAAI,QAAQ,GAAG;AAE1E,QAAM,QAAQ,gBAAgB,QAAQ,OAAO;AAE7C,QAAM,gBAAgB,OAAO,YAAY,CAAC;AAC1C,MAAI,kBAAkB,OAAW,OAAM,KAAK,SAAS,gBAAgB,aAAa,CAAC,EAAE;AACrF,QAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,SAAO,OAAO,UAAU,WAAW,EAAE,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,QAAQ,MAAM,QAAQ,GAAG;AAC/F;","names":["isRecord"]}

package/dist/{chunk-ZRV7TOCX.js → chunk-G5AFQXXW.js}

@@ -1,6 +1,6 @@
 import {
   createResult
-} from "./chunk-V63TSN3C.js";
+} from "./chunk-FOYGZ4MK.js";
 
 // src/cli-protocol/plan.ts
 import { createHash } from "crypto";
@@ -61,4 +61,4 @@ export {
   createPlan,
   toWirePlan
 };
-//# sourceMappingURL=chunk-ZRV7TOCX.js.map
+//# sourceMappingURL=chunk-G5AFQXXW.js.map

package/dist/{chunk-AXAGJLMP.js → chunk-G757F3EU.js}

@@ -1,6 +1,3 @@
-import {
-  CODEX_MIGRATION_SCHEMA
-} from "./chunk-AVAUUIDB.js";
 import {
   durableRename,
   writeDurableFile
@@ -8,6 +5,9 @@ import {
 import {
   CodexMigrationError
 } from "./chunk-CDWNLTHY.js";
+import {
+  CODEX_MIGRATION_SCHEMA
+} from "./chunk-AVAUUIDB.js";
 
 // src/codex-plugin/finalization.ts
 import { createHash, randomUUID } from "crypto";
@@ -492,4 +492,4 @@ export {
   observeCodexRecoveryPlan,
   applyCodexFinalization
 };
-//# sourceMappingURL=chunk-AXAGJLMP.js.map
+//# sourceMappingURL=chunk-G757F3EU.js.map

package/dist/{chunk-KXHVFCDT.js → chunk-GFDINP7M.js}

@@ -16,47 +16,54 @@ import {
   findFeatureLineageIssues
 } from "./chunk-XROROJLI.js";
 import {
+  collectExecutableFeatureFiles,
   createPhaseAnchorEnvironment,
+  featureSourceFileName,
   findFeatureSourcePath,
   hasDefaultExecutableFeatureFiles,
   readFrontmatterScalar
-} from "./chunk-USPVNZ63.js";
+} from "./chunk-BZWO3BVD.js";
 import {
   createProjectContext,
   getMissingPacks,
   reconcile
-} from "./chunk-NOTBZCKG.js";
+} from "./chunk-2XR7J5WL.js";
+import {
+  WORKSPACE_ROOTS
+} from "./chunk-OKPRQGFG.js";
 import {
   legacyObservationIsEmpty,
   observeClaudeLegacy
-} from "./chunk-4CKCRZDO.js";
+} from "./chunk-7ULZND56.js";
 import {
   hasLegacyClaudePluginMode,
   readClaudePluginMode
-} from "./chunk-FDHJ63FZ.js";
+} from "./chunk-WVA4Q6BX.js";
+import {
+  codexFinalizationIsComplete
+} from "./chunk-G757F3EU.js";
+import {
+  findDanglingDependencies,
+  findTicketsInCycles,
+  formatTicketReference,
+  inspectTicketIndexConflicts,
+  readTickets
+} from "./chunk-MVFHTUQ3.js";
 import {
   BDD_LANE_FILE_PATHS,
   BDD_LANE_SCRIPT,
   SAFEWORD_SCHEMA,
-  getMissingPythonToolDependencies,
   hasImportLinterScaffoldTarget,
   isCursorProjectPath,
   schemaForProjectSurfaces,
   typescriptPackages
-} from "./chunk-BSOUMHMQ.js";
+} from "./chunk-IPTM5VE7.js";
 import {
-  codexFinalizationIsComplete
-} from "./chunk-AXAGJLMP.js";
-import {
-  findDanglingDependencies,
-  findTicketsInCycles,
-  formatTicketReference,
-  inspectTicketIndexConflicts,
-  readTickets
-} from "./chunk-KFVEPQ7X.js";
+  getPythonToolDependencyGaps
+} from "./chunk-JSR3HXFT.js";
 import {
   createResult
-} from "./chunk-V63TSN3C.js";
+} from "./chunk-FOYGZ4MK.js";
 import {
   VERSION
 } from "./chunk-UAFM77KW.js";
@@ -67,15 +74,16 @@ import {
   resolveConfiguredPath,
   resolveTicketsDirectory,
   toRepoRelativePath
-} from "./chunk-GKR44BCH.js";
+} from "./chunk-RVDXBHUG.js";
 import {
   exists,
   isDirectory,
   readFileSafe,
   readJson
-} from "./chunk-S2T356DA.js";
+} from "./chunk-HF3DXZEA.js";
 
 // src/health.ts
+import { execFileSync } from "child_process";
 import { readdirSync as readdirSync2 } from "fs";
 import nodePath2 from "path";
 
@@ -531,6 +539,11 @@ function findGlossaryIssues(cwd) {
 function findCucumberHarnessAdvisories(cwd, { existingCucumberHarness, scaffoldBddLane }) {
   if (existingCucumberHarness === void 0) return [];
   if (scaffoldBddLane) {
+    if (isWorkspaceCucumberHarness(existingCucumberHarness)) {
+      return [
+        `A workspace Cucumber harness (${existingCucumberHarness}) is preserved alongside Safeword's root starter lane. This is informational: Safeword does not remove or modify project test infrastructure. The starter lane reads the default workspace features directories; set paths.features / paths.steps only when this harness uses nonstandard locations.`
+      ];
+    }
     return [buildLeftoverLaneAdvisory(cwd, existingCucumberHarness)];
   }
   if (readConfiguredPath(cwd, "features") !== void 0 || hasDefaultExecutableFeatureFiles(cwd)) {
@@ -540,6 +553,9 @@ function findCucumberHarnessAdvisories(cwd, { existingCucumberHarness, scaffoldB
     `Detected a cucumber harness (${existingCucumberHarness}) but paths.features is not set in .safeword/config.json \u2014 project codify, project lint-gherkin, and doctor cannot see your suite. Add e.g. "paths": { "features": "tests/behaviors", "steps": "tests/steps" } (paths.steps only matters when the scaffolded runner reads relocated TypeScript steps).`
   ];
 }
+function isWorkspaceCucumberHarness(evidence) {
+  return WORKSPACE_ROOTS.some((root) => evidence.startsWith(`${root}/`));
+}
 function buildLeftoverLaneAdvisory(cwd, evidence) {
   const leftovers = BDD_LANE_FILE_PATHS.filter(
     (filePath) => exists(nodePath2.join(cwd, filePath))
@@ -607,13 +623,119 @@ function archAlignmentHasContent(implPlanContent) {
 function emptyCoverageDiagnostics() {
   return { issues: [], advisories: [] };
 }
+var CURRENT_WORK_BASE_REFS = [
+  "refs/remotes/origin/HEAD",
+  "refs/remotes/origin/main",
+  "refs/remotes/origin/master",
+  "refs/heads/main",
+  "refs/heads/master"
+];
+function readGit(cwd, args) {
+  try {
+    return execFileSync("git", args, {
+      cwd,
+      encoding: "utf8",
+      maxBuffer: 10 * 1024 * 1024,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+  } catch {
+    return void 0;
+  }
+}
+function addNulSeparatedPaths(target, output) {
+  for (const path of output.split("\0")) {
+    if (path !== "") target.add(path);
+  }
+}
+function currentWorkPathsWithHead(cwd) {
+  const baseReference = CURRENT_WORK_BASE_REFS.find(
+    (candidate) => readGit(cwd, ["rev-parse", "--verify", "--quiet", candidate]) !== void 0
+  );
+  if (baseReference === void 0) return void 0;
+  const mergeBase = readGit(cwd, ["merge-base", "HEAD", baseReference])?.trim();
+  if (mergeBase === void 0 || mergeBase === "") return void 0;
+  const committed = readGit(cwd, [
+    "diff",
+    "--relative",
+    "--name-only",
+    "-z",
+    `${mergeBase}...HEAD`
+  ]);
+  const working = readGit(cwd, ["diff", "--relative", "--name-only", "-z", "HEAD"]);
+  if (committed === void 0 || working === void 0) return void 0;
+  const paths = /* @__PURE__ */ new Set();
+  addNulSeparatedPaths(paths, committed);
+  addNulSeparatedPaths(paths, working);
+  return [...paths];
+}
+function currentWorkPathsWithoutHead(cwd) {
+  const staged = readGit(cwd, ["diff", "--cached", "--name-only", "-z"]);
+  if (staged === void 0) return void 0;
+  const paths = /* @__PURE__ */ new Set();
+  addNulSeparatedPaths(paths, staged);
+  return [...paths];
+}
+function currentWorkPaths(cwd) {
+  if (readGit(cwd, ["rev-parse", "--is-inside-work-tree"])?.trim() !== "true") return void 0;
+  const hasHead = readGit(cwd, ["rev-parse", "--verify", "--quiet", "HEAD^{commit}"]);
+  const changedPaths = hasHead === void 0 ? currentWorkPathsWithoutHead(cwd) : currentWorkPathsWithHead(cwd);
+  if (changedPaths === void 0) return void 0;
+  const untracked = readGit(cwd, ["ls-files", "--others", "--exclude-standard", "-z"]);
+  if (untracked === void 0) return void 0;
+  const paths = new Set(changedPaths);
+  addNulSeparatedPaths(paths, untracked);
+  return [...paths];
+}
+function ticketIdsFromChangedPaths(paths, ticketPrefix) {
+  const ticketIds = /* @__PURE__ */ new Set();
+  for (const path of paths) {
+    if (!path.startsWith(ticketPrefix)) continue;
+    const [ticketId] = path.slice(ticketPrefix.length).split("/", 1);
+    if (ticketId !== void 0 && ticketId !== "") ticketIds.add(ticketId);
+  }
+  return ticketIds;
+}
+function addTicketsForChangedFeatureSources(cwd, ticketsRoot, featureFiles, changedFeatures, ticketIds) {
+  for (const ticketId of listTicketIds(ticketsRoot)) {
+    const featurePath = findFeatureSourcePath(cwd, ticketId, featureFiles);
+    if (featurePath !== void 0 && changedFeatures.paths.has(featurePath) || featurePath === void 0 && changedFeatures.fileNames.has(featureSourceFileName(cwd, ticketId))) {
+      ticketIds.add(ticketId);
+    }
+  }
+}
+function currentWorkCoverageTicketIds(cwd, ticketsRoot, featureFiles) {
+  const paths = currentWorkPaths(cwd);
+  if (paths === void 0) return listTicketIds(ticketsRoot);
+  if (paths.length === 0) return [];
+  const ticketsRelative = toRepoRelativePath(cwd, ticketsRoot).split(nodePath2.sep).join("/");
+  if (ticketsRelative === ".." || ticketsRelative.startsWith("../")) return [];
+  const ticketPrefix = `${ticketsRelative}/`;
+  const changedFeatures = {
+    paths: new Set(
+      paths.filter((path) => path.endsWith(".feature")).map((path) => nodePath2.resolve(cwd, path))
+    ),
+    fileNames: new Set(
+      paths.filter((path) => path.endsWith(".feature")).map((path) => nodePath2.basename(path))
+    )
+  };
+  const ticketIds = ticketIdsFromChangedPaths(paths, ticketPrefix);
+  if (changedFeatures.paths.size === 0) return [...ticketIds];
+  addTicketsForChangedFeatureSources(cwd, ticketsRoot, featureFiles, changedFeatures, ticketIds);
+  return [...ticketIds];
+}
 function findCoverageDiagnostics(cwd) {
   const ticketsRoot = resolveTicketsDirectory(cwd);
   const all = emptyCoverageDiagnostics();
   const configuredFeatures = readConfiguredPath(cwd, "features");
   const anchorEnvironment = createPhaseAnchorEnvironment(cwd, configuredFeatures);
-  for (const ticketId of listTicketIds(ticketsRoot)) {
-    const ticketDiagnostics = coverageDiagnosticsForTicket(cwd, ticketsRoot, ticketId);
+  const featureFiles = collectExecutableFeatureFiles(cwd);
+  for (const ticketId of currentWorkCoverageTicketIds(cwd, ticketsRoot, featureFiles)) {
+    const ticketDiagnostics = coverageDiagnosticsForTicket(
+      cwd,
+      ticketsRoot,
+      ticketId,
+      featureFiles
+    );
     all.issues.push(...ticketDiagnostics.issues);
     all.advisories.push(...ticketDiagnostics.advisories);
     const anchorAdvisory = phaseAnchorAdvisoryForTicket(
@@ -640,14 +762,14 @@ function phaseAnchorAdvisoryForTicket(cwd, ticketsRoot, ticketId, anchorEnvironm
   if (verdict.kind !== "unanchored") return void 0;
   return `${formatCoverageTicketLabel(ticketId, content)}: ${verdict.reason} The anchor is the exited phase's artifact \u2014 boundary checks verify it against the tree.`;
 }
-function coverageDiagnosticsForTicket(cwd, ticketsRoot, ticketId) {
+function coverageDiagnosticsForTicket(cwd, ticketsRoot, ticketId, featureFiles) {
   const ticketDirectory = nodePath2.join(ticketsRoot, ticketId);
   const ticketContent = readFileSafe(nodePath2.join(ticketDirectory, "ticket.md"));
   if (ticketContent === void 0 || !isInProgress(ticketContent))
     return emptyCoverageDiagnostics();
   const specContent = readFileSafe(nodePath2.join(ticketDirectory, "spec.md"));
   if (specContent === void 0) return emptyCoverageDiagnostics();
-  const featureSource = readFeatureSource(cwd, ticketId);
+  const featureSource = readFeatureSource(cwd, ticketId, featureFiles);
   try {
     const report = featureSource === void 0 ? buildCoverageReport(
       specContent,
@@ -694,8 +816,8 @@ function formatFeatureLineageIssues(cwd, ticketId, featureSource, ticketContent)
     (issue) => `${label}: ${relativePath}: ${issue}`
   );
 }
-function readFeatureSource(cwd, ticketFolder) {
-  const featurePath = findFeatureSourcePath(cwd, ticketFolder);
+function readFeatureSource(cwd, ticketFolder, featureFiles) {
+  const featurePath = findFeatureSourcePath(cwd, ticketFolder, featureFiles);
   const content = featurePath === void 0 ? void 0 : readFileSafe(featurePath);
   return featurePath === void 0 || content === void 0 ? void 0 : { path: featurePath, content };
 }
@@ -806,7 +928,11 @@ function findMissingPatches(cwd, actions) {
 }
 function findMissingPythonToolDeclarations(cwd, context) {
   if (!context.languages?.python) return [];
-  return getMissingPythonToolDependencies(cwd, hasImportLinterScaffoldTarget(cwd));
+  return [
+    ...new Set(
+      getPythonToolDependencyGaps(cwd, hasImportLinterScaffoldTarget).flatMap((gap) => gap.tools)
+    )
+  ];
 }
 async function checkHealth(cwd, options = {}) {
   const safewordDirectory = nodePath2.join(cwd, ".safeword");
@@ -844,7 +970,7 @@ async function checkHealth(cwd, options = {}) {
     ...missingClaudeSettingsIssues(cwd, healthSchema)
   ];
   const missingPacks = options.skipPackageChecks ? [] : getMissingPacks(cwd);
-  const missingPythonTools = findMissingPythonToolDeclarations(cwd, ctx);
+  const missingPythonTools = options.skipPythonToolChecks ? [] : findMissingPythonToolDeclarations(cwd, ctx);
   const coverageDiagnostics = findCoverageDiagnostics(cwd);
   const ticketIndexConflicts = inspectTicketIndexConflicts(cwd);
   issues.push(...coverageDiagnostics.issues);
@@ -962,4 +1088,4 @@ export {
   observeCursorProject,
   unselectedCursorFinding
 };
-//# sourceMappingURL=chunk-KXHVFCDT.js.map
+//# sourceMappingURL=chunk-GFDINP7M.js.map