tickmarkr 1.90.3 → 1.90.4

package/dist/cli/commands/doctor.d.ts

@@ -40,4 +40,19 @@ export declare function packageManagerFinding(cwd: string, probe?: (pm: string)
     verdict: "pass" | "fail";
     detail: string;
 } | undefined;
+/**
+ * Q142s: tickmarkr guarded every binary except its own. Exhibit (operator machine,
+ * 2026-08-12): an orphaned npm-prefix root at ~/.local held tickmarkr AND tkr at
+ * 1.85.0 beside the live 1.90.3 — two seats disagreed about the tool's version and
+ * were BOTH right about their own PATH order (a consultant reported "no verify
+ * command" — verify shipped in 1.90.0 — while the overseer saw it present). Checks
+ * EVERY bin name the package declares: the first sweep of that machine missed `tkr`.
+ */
+export declare function selfShadowFinding(ownVersion: string, cwd?: string, resolve?: (bin: string, cwd: string) => {
+    resolved?: string;
+    all: string[];
+}, versionOf?: (path: string) => string | undefined): {
+    verdict: "pass" | "fail";
+    detail: string;
+} | undefined;
 export declare function doctor(_argv: string[], cwd?: string, adapters?: WorkerAdapter[], opts?: DoctorOpts): Promise<string>;

package/dist/cli/commands/doctor.js

@@ -3,7 +3,8 @@ import { spawnSync } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { detectPackageManager } from "../../gates/baseline.js";
-import { allAdapters, binaryShadowWarnings, detectCandidateClis, flagDriftWarnings, modelAliasExclusions, modelAliasLine, probeAll, probeModels, servableExclusions, servabilityLine, writeDoctor } from "../../adapters/registry.js";
+import { version } from "./version.js";
+import { allAdapters, binaryShadowWarnings, detectCandidateClis, flagDriftWarnings, modelAliasExclusions, modelAliasLine, probeAll, probeModels, resolveShellBinary, servableExclusions, servabilityLine, writeDoctor } from "../../adapters/registry.js";
 import { CLAUDE_ALIAS_IDENTITY_STAMPS, claudeCode, resolveClaudeAliasIdentity } from "../../adapters/claude-code.js";
 import { BANNER, dim, fail, kvRow, legend, ok, rule, statusRow, title } from "../../brand.js";
 import { tickmarkrDir, stateDirName } from "../../graph/graph.js";
@@ -170,6 +171,40 @@ export function packageManagerFinding(cwd, probe = (pm) => spawnSync(pm, ["--ver
         detail: `repo uses ${pm} but the binary does not resolve in this environment — every auto-detected gate command will die before running any suite (fix: corepack enable, or install ${pm} on the daemon's PATH)`,
     };
 }
+/**
+ * Q142s: tickmarkr guarded every binary except its own. Exhibit (operator machine,
+ * 2026-08-12): an orphaned npm-prefix root at ~/.local held tickmarkr AND tkr at
+ * 1.85.0 beside the live 1.90.3 — two seats disagreed about the tool's version and
+ * were BOTH right about their own PATH order (a consultant reported "no verify
+ * command" — verify shipped in 1.90.0 — while the overseer saw it present). Checks
+ * EVERY bin name the package declares: the first sweep of that machine missed `tkr`.
+ */
+export function selfShadowFinding(ownVersion, cwd = process.cwd(), resolve = resolveShellBinary, versionOf = (p) => {
+    const r = spawnSync(p, ["version"], { encoding: "utf8", timeout: 5_000, shell: false });
+    return r.status === 0 ? r.stdout.trim().split("\n")[0] : undefined;
+}) {
+    const hits = new Map(); // path -> version
+    for (const bin of ["tickmarkr", "tkr"]) {
+        for (const p of resolve(bin, cwd).all) {
+            if (!hits.has(p))
+                hits.set(p, versionOf(p) ?? "?");
+        }
+    }
+    if (hits.size === 0)
+        return undefined; // no install on PATH (repo checkout) — nothing to shadow
+    const stale = [...hits].filter(([, v]) => v !== ownVersion);
+    if (stale.length === 0) {
+        return { verdict: "pass", detail: `single install root at ${ownVersion} (${[...hits.keys()].join(", ")})` };
+    }
+    const listing = stale.map(([p, v]) => `${p} → ${v}`).join(", ");
+    // One mismatched hit and it's the one running? Impossible — it would report ownVersion.
+    // Mismatch therefore means a SECOND root: a shell or daemon with a different PATH
+    // order runs a different tickmarkr than this one, silently.
+    return {
+        verdict: "fail",
+        detail: `stale tickmarkr/tkr binaries on PATH: ${listing} (running ${ownVersion}) — a seat with different PATH order silently runs the old binary; remove the stale install root`,
+    };
+}
 export async function doctor(_argv, cwd = process.cwd(), adapters = allAdapters(), opts = {}) {
     if (_argv.length === 1 && _argv[0] === "--refresh-catalog") {
         const refreshed = await refreshCatalogCommand({ repoRoot: cwd, now: opts.catalogNow });
@@ -265,6 +300,10 @@ export async function doctor(_argv, cwd = process.cwd(), adapters = allAdapters(
     const pmRow = packageManagerFinding(cwd);
     if (pmRow)
         rows.push(alignedStatusRow(pmRow.verdict, "package-manager", pmRow.detail));
+    // Q142s: tickmarkr's own binary gets the shadow check every adapter binary already had.
+    const shadowRow = selfShadowFinding(await version(), cwd);
+    if (shadowRow)
+        rows.push(alignedStatusRow(shadowRow.verdict, "tickmarkr-binary", shadowRow.detail));
     // v1.22 T5: workspace-trust pre-flight — per installed adapter: trusted | seeded | action-required | n/a.
     // action-required names the exact one-time command (or dialog) the operator must run once.
     rows.push(legend("workspace trust:"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tickmarkr",
-  "version": "1.90.3",
+  "version": "1.90.4",
   "description": "Spec in, verified work out.",
   "type": "module",
   "license": "MIT",