waterplane 0.0.1 → 0.1.6

package/packages/host/dist/clihealth.js

@@ -0,0 +1,301 @@
+/**
+ * The CLI integration's own health, host-side: the file it is kept in, the ten
+ * places the daemon feeds it, and the one alert that makes a degrading
+ * heuristic loud.
+ *
+ * The rule half lives in `@waterplane/shared`'s `clihealth.ts` — the catalog, the
+ * rolling window, the verdict, the redaction and the sentence — pure, unit-
+ * pinned, and shared with the phone so a badge and a notification cannot word
+ * the same fact two ways. This half owns the three things a pure rule cannot:
+ * the JSON on disk, the clock, and the broadcast.
+ *
+ * Three properties of the shape are load-bearing, and each is here because the
+ * obvious version of it is worse:
+ *
+ *   • **Module-level singleton plus a free `noteHealth()`.** The same argument
+ *     `sentlog.ts` and `opendeliveries.ts` make: the observation points are ten
+ *     files deep in the delivery path, the prompt detector and the transcript
+ *     reader, and threading a handle through all of them means call site eleven
+ *     forgets. Unset — a unit import, a test that constructs a manager without
+ *     booting a daemon — is a silent no-op, so nothing here can ever be the
+ *     reason something else fails to run.
+ *   • **Debounced writes, debounced broadcast.** `observe()` is called from a
+ *     delivery and from a prompt check; a file write or a socket frame per
+ *     observation would make the measurement the cost of the thing measured,
+ *     which is exactly the failure `nettraffic.ts` names about itself. The
+ *     persist is flushed on SIGTERM beside `acks.flush()`.
+ *   • **Notify on a verdict TRANSITION, never on an observation.** A signal
+ *     sitting at `broken` is one fact, not one fact per miss. The last verdict
+ *     per signal is seeded from what came off disk, so a restart does not
+ *     re-announce a state the user was already told about.
+ *
+ * On the samples: a `line` capture is TUI chrome the CLI drew — a dialog
+ * footer, a meter row, a block notice — kept as text because "this line no
+ * longer matches" is only actionable with the line in hand. `observe()` applies
+ * the redaction itself, per signal, so a call site cannot leak prose into a
+ * record that was declared to hold none. One of those samples is captured
+ * BLOCK-NOTICE text, and it has exactly one rule attached: it may reach disk,
+ * the wire and the phone, and it must never be routed back into a PTY — printed
+ * on a claude screen it would false-positive the very detector it documents.
+ * Nothing in this file writes to a session, and nothing downstream may make it
+ * do so.
+ */
+import { existsSync, mkdirSync, realpathSync } from "node:fs";
+import { isAbsolute, join, relative, resolve } from "node:path";
+import { clearSeen, cleanHealth, emptyHealth, healthRollup, healthSentence, noteCliVersion, observe, signalSpec, signalVerdict } from "@waterplane/shared";
+import { hostStateDir } from "./branddirs.js";
+import { readJsonGuarded, writeJsonAtomic } from "./jsonstore.js";
+import { FixtureShelf } from "./clifixtures.js";
+/**
+ * How long a write waits for its neighbours.
+ *
+ * A fan-out records a delivery verdict per repo inside a second or two, and a
+ * screen-reading signal can fire twice in a row while a box is drawn and
+ * answered. Two seconds coalesces every one of those into a single rename;
+ * losing the last two seconds of health history to a hard kill costs nothing
+ * anybody can act on.
+ */
+const PERSIST_DEBOUNCE_MS = 2_000;
+/**
+ * …and how long the broadcast waits.
+ *
+ * Longer than the persist on purpose. A health record must not become a frame
+ * source on the link this app spends its life apologising for: nothing on the
+ * phone is time-critical here (a signal that went bad five seconds ago is
+ * equally bad now), and the alert path — which IS time-critical — does not go
+ * through this at all.
+ */
+const CHANGE_DEBOUNCE_MS = 5_000;
+export class CliHealthStore {
+    root;
+    onChange;
+    alert;
+    path;
+    health = emptyHealth();
+    saveTimer = null;
+    changeTimer = null;
+    /**
+     * The verdict each signal was last KNOWN to hold — the thing a transition is
+     * measured against.
+     *
+     * Seeded from the record that came off disk rather than left empty, because
+     * an empty map makes the first observation after every restart look like a
+     * transition. `npm run restart` is routine in this project, so that version
+     * would announce a week-old `broken` every time the daemon came up, which is
+     * the notification nobody reads.
+     */
+    lastVerdict = new Map();
+    shelf;
+    src;
+    constructor(root, onChange, alert) {
+        this.root = root;
+        this.onChange = onChange;
+        this.alert = alert;
+        this.path = join(hostStateDir(root), "clihealth.json");
+        this.shelf = new FixtureShelf(join(hostStateDir(root), "clifixtures"));
+        try {
+            if (existsSync(this.path))
+                this.health = cleanHealth(readJsonGuarded(this.path, null));
+        }
+        catch {
+            // Corrupt or unreadable ⇒ start empty, which reads `unknown` everywhere.
+            // The alternative is a boot that throws inside a readout whose whole job
+            // is to be the reliable thing on the screen.
+            this.health = emptyHealth();
+        }
+        const now = Date.now();
+        for (const [id, sig] of Object.entries(this.health.signals)) {
+            this.lastVerdict.set(id, signalVerdict(sig, now).verdict);
+        }
+    }
+    get() { return this.health; }
+    /** The checkout this host runs from, when it is one (`devSource`) — asked
+     *  once: neither the install nor the root moves under a running daemon. */
+    source() {
+        if (this.src === undefined)
+            this.src = devSource(this.root);
+        return this.src ?? undefined;
+    }
+    rollup(now = Date.now()) { return healthRollup(this.health, now); }
+    /**
+     * Record one observation, and say something if it changed the verdict.
+     *
+     * Every caller of this is EDGE-TRIGGERED — a box became published, a session
+     * became hooked, a block began, a delivery finished. That rule lives at the
+     * call sites rather than here on purpose: this function cannot tell a
+     * transition from a poll, and a `good` recorded twice a second by a detector
+     * that runs twice a second would fill the twenty-slot window with successes
+     * in ten seconds and make the misses mathematically invisible. Which is the
+     * precise failure the feature exists to prevent.
+     */
+    observe(id, outcome, opts = {}) {
+        const now = Date.now();
+        const { fixture, ...rest } = opts;
+        const sig = observe(this.health, id, outcome, { at: now, ...rest });
+        if (outcome === "good" && fixture)
+            this.shelf.offer(id, this.health.version, fixture);
+        this.schedulePersist();
+        this.scheduleChange();
+        const verdict = signalVerdict(sig, now).verdict;
+        const was = this.lastVerdict.get(id);
+        this.lastVerdict.set(id, verdict);
+        if (verdict === was)
+            return;
+        // Into trouble only. Recovering is worth a broadcast (the badge clears) and
+        // is not worth a buzz: nobody needs waking to be told a thing works.
+        if (verdict !== "degraded" && verdict !== "broken")
+            return;
+        this.alert("cli", {
+            title: `Claude CLI: ${signalSpec(id).name.toLowerCase()}`,
+            body: healthSentence(sig, now),
+            // Per signal, so two signals failing say two things and one signal
+            // failing twice replaces its own row rather than stacking.
+            tag: `clihealth-${id}`,
+        });
+    }
+    /** Is a fixture of this signal still wanted on the installed CLI? (`clifixtures.ts`) */
+    wantsFixture(id) { return this.shelf.wants(id, this.health.version); }
+    /**
+     * Tell the record which `claude` is installed — driven by `update.ts`'s
+     * existing `claude --version` reading.
+     *
+     * A null or empty reading is IGNORED rather than recorded. `UpdateInfo.current`
+     * is absent until the first `brew`/version probe answers and can go absent
+     * again on a failed one, and `noteCliVersion` treats any difference as a
+     * change: passing the gap through would re-arm every heuristic — wiping the
+     * history this whole file exists to keep — because a subprocess did not
+     * answer. A version we could not read is not a version change.
+     */
+    noteVersion(version) {
+        if (!version)
+            return;
+        const now = Date.now();
+        const { changed, from } = noteCliVersion(this.health, version, now);
+        this.schedulePersist();
+        this.scheduleChange();
+        if (!changed)
+            return;
+        for (const id of this.lastVerdict.keys())
+            this.lastVerdict.set(id, "unknown");
+        // Said ONCE, before the readout goes grey, because it is the most likely
+        // explanation for whatever the readout says next — and working that out
+        // afterwards from ten signals that all went unknown in the same minute is
+        // strictly harder than being told.
+        this.alert("info", {
+            title: "Claude CLI updated",
+            body: `claude is now ${version}${from ? ` (was ${from})` : ""}. Every screen-reading heuristic has been re-armed: each one reads “not checked yet” until it has been seen to work against this build.`,
+            tag: "clihealth-version",
+        });
+    }
+    /**
+     * A person cleared the warnings they read: per signal, the newest miss their
+     * board showed (`clearSeen`). Unknown ids and non-numbers are ignored.
+     *
+     * The verdict it leaves is the new baseline for `lastVerdict`, so the next
+     * miss that tips a signal back into trouble alerts again — that is the way
+     * back, and it needs no button.
+     */
+    clear(through) {
+        const now = Date.now();
+        let touched = false;
+        for (const [id, at] of Object.entries(through ?? {})) {
+            const sig = this.health.signals[id];
+            if (!sig || typeof at !== "number" || !Number.isFinite(at))
+                continue;
+            const next = clearSeen(sig, Math.min(at, now));
+            this.health.signals[id] = next;
+            this.lastVerdict.set(id, signalVerdict(next, now).verdict);
+            touched = true;
+        }
+        if (!touched)
+            return;
+        this.schedulePersist();
+        this.scheduleChange();
+    }
+    /** Write now — SIGTERM, beside the other flushes. */
+    flush() {
+        if (this.saveTimer) {
+            clearTimeout(this.saveTimer);
+            this.saveTimer = null;
+        }
+        this.persist();
+    }
+    schedulePersist() {
+        if (this.saveTimer)
+            return;
+        this.saveTimer = setTimeout(() => { this.saveTimer = null; this.persist(); }, PERSIST_DEBOUNCE_MS);
+        if (typeof this.saveTimer.unref === "function")
+            this.saveTimer.unref();
+    }
+    scheduleChange() {
+        if (this.changeTimer)
+            return;
+        this.changeTimer = setTimeout(() => {
+            this.changeTimer = null;
+            try {
+                this.onChange(this.health, this.rollup());
+            }
+            catch { /* a broadcast that threw is not worth a delivery */ }
+        }, CHANGE_DEBOUNCE_MS);
+        if (typeof this.changeTimer.unref === "function")
+            this.changeTimer.unref();
+    }
+    persist() {
+        try {
+            mkdirSync(join(this.path, ".."), { recursive: true });
+            writeJsonAtomic(this.path, this.health, { space: 2 });
+        }
+        catch { /* best-effort — the in-memory record still answers for this boot */ }
+    }
+}
+/**
+ * Module-level singleton, set once at boot by `main.ts`.
+ *
+ * See the note at the top: the observation points are spread across the prompt
+ * detector, the delivery path, the transcript reader and the limit scheduler,
+ * and a handle threaded through all of them is a handle the eleventh call site
+ * omits. A forgotten one here is a heuristic that quietly stops being watched,
+ * which is the same shape as the bug this feature is about.
+ */
+/**
+ * A developer's install: this module sits in a git checkout that still has
+ * its sources (`<repo>/packages/host/{src,dist}/clihealth.*`), and that
+ * checkout is under the root, so a session can be opened in it. An npm or
+ * tarball install has neither, so the phone never offers to inspect code that
+ * is not on this desktop. Null on any doubt.
+ */
+export function devSource(root, here = import.meta.dirname) {
+    try {
+        const repo = realpathSync(resolve(here, "../../.."));
+        if (!existsSync(join(repo, ".git")) || !existsSync(join(repo, "packages/host/src/clihealth.ts")))
+            return null;
+        const rel = relative(realpathSync(root), repo);
+        if (rel.startsWith("..") || isAbsolute(rel))
+            return null;
+        return { repo, stateDir: hostStateDir(root) };
+    }
+    catch {
+        return null;
+    }
+}
+let current = null;
+export function setCliHealth(store) { current = store; }
+export function cliHealth() { return current; }
+/**
+ * Record one observation against a signal, or do nothing if no store is
+ * installed.
+ *
+ * **Call this on a state TRANSITION, never from inside a polling body.** Every
+ * call site in this repo is one, and the comment above each says which
+ * transition it is. See `CliHealthStore.observe`.
+ */
+export function noteHealth(id, outcome, opts = {}) {
+    current?.observe(id, outcome, opts);
+}
+/** Whether a `fixture` passed with the next `good` of this signal would be
+ *  kept — false with no store. Lets a call site read an input that will not
+ *  last (the composer) only when it is wanted, once per CLI version. */
+export function fixtureWanted(id) {
+    return current?.wantsFixture(id) ?? false;
+}
+//# sourceMappingURL=clihealth.js.map

package/packages/host/dist/clihealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clihealth.js","sourceRoot":"","sources":["../src/clihealth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EACL,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EACN,MAAM,oBAAoB,CAAC;AAC5I,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAsB,MAAM,kBAAkB,CAAC;AAUpE;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,KAAK,CAAC;AASjC,MAAM,OAAO,cAAc;IAoBf;IACA;IACA;IArBF,IAAI,CAAS;IACb,MAAM,GAAc,WAAW,EAAE,CAAC;IAClC,SAAS,GAA0B,IAAI,CAAC;IACxC,WAAW,GAA0B,IAAI,CAAC;IAClD;;;;;;;;;OASG;IACK,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,KAAK,CAAe;IACpB,GAAG,CAAqC;IAEhD,YACU,IAAY,EACZ,QAA2D,EAC3D,KAAkB;QAFlB,SAAI,GAAJ,IAAI,CAAQ;QACZ,aAAQ,GAAR,QAAQ,CAAmD;QAC3D,UAAK,GAAL,KAAK,CAAa;QAE1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,eAAe,CAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,yEAAyE;YACzE,6CAA6C;YAC7C,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,GAAG,KAAgB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAExC;+EAC2E;IAC3E,MAAM;QACJ,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAkB,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAEjF;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAe,EAAE,OAAsB,EAAE,OAAmB,EAAE;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtF,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO;QAC5B,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO;QAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;YAChB,KAAK,EAAE,eAAe,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE;YACzD,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC;YAC9B,mEAAmE;YACnE,2DAA2D;YAC3D,GAAG,EAAE,aAAa,EAAE,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED,wFAAwF;IACxF,YAAY,CAAC,EAAe,IAAa,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE5F;;;;;;;;;;OAUG;IACH,WAAW,CAAC,OAAkC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,mCAAmC;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YACjB,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,iBAAiB,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,yIAAyI;YACtM,GAAG,EAAE,mBAAmB;SACzB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAA+B;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,SAAS;YACrE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;YAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED,qDAAqD;IACrD,KAAK;QACH,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACnG,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzE,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;QACnH,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvB,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC7E,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC,CAAC,oEAAoE,CAAC,CAAC;IAClF,CAAC;CACF;AAED;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe,MAAM,CAAC,IAAI,CAAC,OAAO;IACxE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9G,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,IAAI,OAAO,GAA0B,IAAI,CAAC;AAC1C,MAAM,UAAU,YAAY,CAAC,KAA4B,IAAU,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;AACrF,MAAM,UAAU,SAAS,KAA4B,OAAO,OAAO,CAAC,CAAC,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,EAAe,EACf,OAAsB,EACtB,OAAmB,EAAE;IAErB,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;wEAEwE;AACxE,MAAM,UAAU,aAAa,CAAC,EAAe;IAC3C,OAAO,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;AAC5C,CAAC"}

package/packages/host/dist/clisuggest.d.ts

@@ -0,0 +1,13 @@
+/** Longer than any proposal measured (they are one short line); a cap so a
+ *  misread screen can never publish a paragraph as one tap. */
+export declare const CLI_SUGGESTION_MAX = 300;
+/**
+ * The proposal the composer is showing, or null.
+ *
+ * `plainRows` is the rendered grid as text; `undimmedRows` is the same grid
+ * with dim cells blanked. Both are read with claude's composer anchors.
+ */
+export declare function cliSuggestionOf(plainRows: readonly string[], undimmedRows: readonly string[]): string | null;
+/** The cheap gate: what the plain grid's composer holds, before paying for a
+ *  render with attributes. Null = empty box or no box. */
+export declare function composerPlain(plainRows: readonly string[]): string | null;

package/packages/host/dist/clisuggest.js

@@ -0,0 +1,54 @@
+/**
+ * The CLI's own proposal for the next prompt, read off the rendered grid.
+ *
+ * After a turn, claude draws a suggested next prompt in its EMPTY composer, in
+ * DIM (SGR 2) — the text Tab accepts at the desk. Measured on 2.1.x across
+ * ~40 live panes: `❯ \e[2mwatch CI and report when it finishes\e[0m`, the whole
+ * proposal dim, nothing else on the row. The phone has no Tab-and-look, so the
+ * host publishes it (`SessionInfo.cliSuggestion`) and the phone offers it as
+ * one tap.
+ *
+ * Two reads of the same composer decide it, the way `deliverscreen.ts` tells a
+ * typed word from a hint: the PLAIN render holds the words, the render with dim
+ * cells blanked (`RenderRow.undimmed`) holds nothing. Words that survive the
+ * blanking were typed by somebody, and are never a proposal.
+ *
+ * claude's other dim text in that box is its generic first-run placeholder,
+ * `Try "how does <filepath> work?"` — an example, not a proposal about THIS
+ * conversation — so it is refused by shape.
+ *
+ * Degrades to null: no box in either read, a box holding typed words, a
+ * placeholder. Never a guess.
+ */
+import { CLAUDE_COMPOSER, composerHeld } from "./composer.js";
+/** Longer than any proposal measured (they are one short line); a cap so a
+ *  misread screen can never publish a paragraph as one tap. */
+export const CLI_SUGGESTION_MAX = 300;
+/** claude's generic empty-composer example, not a proposal. */
+const PLACEHOLDER_RE = /^Try "/;
+/**
+ * The proposal the composer is showing, or null.
+ *
+ * `plainRows` is the rendered grid as text; `undimmedRows` is the same grid
+ * with dim cells blanked. Both are read with claude's composer anchors.
+ */
+export function cliSuggestionOf(plainRows, undimmedRows) {
+    const plain = composerHeld(plainRows, CLAUDE_COMPOSER);
+    if (!plain)
+        return null;
+    // "" = the same box, empty once the dim cells are gone. null = no box in
+    // that read at all (a torn frame), which proves nothing either way.
+    if (composerHeld(undimmedRows, CLAUDE_COMPOSER) !== "")
+        return null;
+    if (PLACEHOLDER_RE.test(plain))
+        return null;
+    if (plain.length > CLI_SUGGESTION_MAX)
+        return null;
+    return plain;
+}
+/** The cheap gate: what the plain grid's composer holds, before paying for a
+ *  render with attributes. Null = empty box or no box. */
+export function composerPlain(plainRows) {
+    return composerHeld(plainRows, CLAUDE_COMPOSER) || null;
+}
+//# sourceMappingURL=clisuggest.js.map

package/packages/host/dist/clisuggest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clisuggest.js","sourceRoot":"","sources":["../src/clisuggest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9D;+DAC+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,+DAA+D;AAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA4B,EAAE,YAA+B;IAC3F,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,YAAY,CAAC,YAAY,EAAE,eAAe,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;0DAC0D;AAC1D,MAAM,UAAU,aAAa,CAAC,SAA4B;IACxD,OAAO,YAAY,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,IAAI,CAAC;AAC1D,CAAC"}

package/packages/host/dist/commitmsg.d.ts

@@ -0,0 +1,17 @@
+export interface CommitSuggestion {
+    /** The message, cleaned. Absent whenever there is not a real one. */
+    readonly message?: string;
+    /** Why there is none, in words a person reads. Absent on success. */
+    readonly reason?: string;
+    /** The ACCOUNT is out of quota — not an error, and a different sentence. */
+    readonly limited?: boolean;
+}
+/**
+ * Draft a commit message for what is waiting in this worktree.
+ *
+ * Reads git, spends one cheap call, returns words. The diff it reads is the one
+ * `Commit all` would record — tracked changes against HEAD plus the untracked
+ * names `git add -A` sweeps in — never the branch's delta against main, which
+ * would describe work that is already committed.
+ */
+export declare function suggestCommitMessage(wt: string): Promise<CommitSuggestion>;

package/packages/host/dist/commitmsg.js

@@ -0,0 +1,98 @@
+/**
+ * The commit message a person asked this desktop to draft for them.
+ *
+ * ── What this is, and what it deliberately is not ──────────────────────────
+ *
+ * It is `sessions/record.ts`'s tab-name call (`nameTab`) wearing a different prompt: one
+ * toolless headless call, no thinking, the cheapest model, its whole input in
+ * the prompt. CLAUDE.md's rule for a new unattended `claude -p` is that it
+ * starts from `nameTab`'s flags and justifies every one it drops — this one
+ * drops none, because `runCommitTask` IS `runNameTask`'s argv (`sidecar.ts`).
+ *
+ * It is NOT unattended: nothing here fires on a turn boundary, a schedule or a
+ * tick. One tap, one call, and the call is the whole of it — **nothing applies
+ * itself**. The answer is a sentence that lands in the commit box for a person
+ * to read, edit and commit by hand; this module never commits, never stages and
+ * never writes a file.
+ *
+ * ── Why the recent subjects are in the prompt ──────────────────────────────
+ *
+ * `--setting-sources user` drops the project's own `CLAUDE.md`, which is where
+ * a repo's commit style would be written down — 12k characters of it here, to
+ * answer "how does this repo word a commit". Ten subject lines off `git log`
+ * are ~400 characters and say the same thing by example, which is the cheap
+ * half of that trade and the reason the flag can stay.
+ *
+ * ── Every failure is a SENTENCE ────────────────────────────────────────────
+ *
+ * Never a throw, never an empty box, and never an approximate message. The
+ * caller puts the reason on screen and the box keeps whatever was typed in it —
+ * a draft is the last copy of somebody's words, and a suggestion that could not
+ * be made must not also be a delete.
+ */
+import { cleanCommitMessage, MAX_COMMIT_SUBJECT } from "@waterplane/shared";
+import { gitPendingDiff, gitRecentSubjects } from "./git.js";
+import { runCommitTask } from "./sidecar.js";
+import { env } from "./env.js";
+import { promptText } from "./prompts.js";
+/** The model that writes it. Same default as every other cheap call here. */
+const COMMIT_MODEL = env("COMMIT_MODEL") || env("SUMMARY_MODEL") || "haiku";
+/** How long one draft may take before the answer is "it did not come back". */
+const COMMIT_TIMEOUT_MS = Number(env("COMMIT_TIMEOUT_MS") || 90_000);
+const COMMIT_SYSTEM_DEFAULT = "You write git commit messages. Output only the message — no preamble, no code fence, no explanation.";
+const COMMIT_PROMPT = `Write the commit message for the change below.\n` +
+    `One subject line of at most ${MAX_COMMIT_SUBJECT} characters saying what the change DOES, ` +
+    `then, only if the subject cannot carry it, a blank line and at most three short lines of body.\n` +
+    `Match the wording and mood of the recent subjects from this repo — they are the house style.\n` +
+    `Describe the change, never the process: no "as requested", no file inventory, no attribution or co-author lines.\n` +
+    `If the change is too unclear to describe, output exactly: (none).`;
+/** The empty verdict, worded once. */
+const no = (reason, limited = false) => ({ reason, limited });
+/**
+ * Draft a commit message for what is waiting in this worktree.
+ *
+ * Reads git, spends one cheap call, returns words. The diff it reads is the one
+ * `Commit all` would record — tracked changes against HEAD plus the untracked
+ * names `git add -A` sweeps in — never the branch's delta against main, which
+ * would describe work that is already committed.
+ */
+export async function suggestCommitMessage(wt) {
+    const { diff, stat, untracked, empty } = await gitPendingDiff(wt);
+    if (empty)
+        return no("Nothing is waiting to be committed here.");
+    const subjects = await gitRecentSubjects(wt, 10);
+    const parts = [COMMIT_PROMPT];
+    if (subjects.length) {
+        parts.push(`----- RECENT SUBJECTS IN THIS REPO (newest first) -----\n${subjects.map((s) => `- ${s}`).join("\n")}`);
+    }
+    if (stat)
+        parts.push(`----- FILES CHANGED -----\n${stat}`);
+    if (untracked.length) {
+        // Names, never contents — `gitPendingDiff`'s rule, restated where it is
+        // read so the model does not describe a file it was never shown.
+        parts.push(`----- NEW FILES (not yet tracked; contents not shown) -----\n${untracked.slice(0, 200).map((u) => `- ${u}`).join("\n")}`);
+    }
+    if (diff.trim())
+        parts.push(`----- DIFF -----\n${diff}`);
+    const run = await runCommitTask({
+        cwd: wt,
+        prompt: parts.join("\n\n"),
+        system: promptText("commit-message", COMMIT_SYSTEM_DEFAULT),
+        model: COMMIT_MODEL,
+        timeoutMs: COMMIT_TIMEOUT_MS,
+    });
+    if (run.limited)
+        return no(run.detail || "The account is out of quota — no message was written.", true);
+    if (run.failed)
+        return no(run.detail || "No message came back.");
+    if (run.text.trim() === "(none)")
+        return no("The model could not tell what this change does.");
+    const message = cleanCommitMessage(run.text);
+    // A refused answer is refused ALOUD: silently leaving the box empty reads as
+    // a button that does nothing, and the words that came back are not shown
+    // because they are the thing this just decided not to write into a commit.
+    if (!message)
+        return no("What came back was not a commit message — nothing was written into the box.");
+    return { message };
+}
+//# sourceMappingURL=commitmsg.js.map

package/packages/host/dist/commitmsg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitmsg.js","sourceRoot":"","sources":["../src/commitmsg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,6EAA6E;AAC7E,MAAM,YAAY,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,CAAC;AAErE,MAAM,qBAAqB,GACzB,sGAAsG,CAAC;AAEzG,MAAM,aAAa,GACjB,kDAAkD;IAClD,+BAA+B,kBAAkB,2CAA2C;IAC5F,kGAAkG;IAClG,gGAAgG;IAChG,oHAAoH;IACpH,mEAAmE,CAAC;AAWtE,sCAAsC;AACtC,MAAM,EAAE,GAAG,CAAC,MAAc,EAAE,OAAO,GAAG,KAAK,EAAoB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAExF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAU;IACnD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK;QAAE,OAAO,EAAE,CAAC,0CAA0C,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,GAAa,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,4DAA4D,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,wEAAwE;QACxE,iEAAiE;QACjE,KAAK,CAAC,IAAI,CAAC,gEAAgE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAEzD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;QAC9B,GAAG,EAAE,EAAE;QACP,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,UAAU,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;QAC3D,KAAK,EAAE,YAAY;QACnB,SAAS,EAAE,iBAAiB;KAC7B,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,uDAAuD,EAAE,IAAI,CAAC,CAAC;IACxG,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,iDAAiD,CAAC,CAAC;IAE/F,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC,6EAA6E,CAAC,CAAC;IACvG,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/packages/host/dist/compliance.d.ts

@@ -0,0 +1,121 @@
+import type { AutoCompactResolution, BuildCandidate, ComplianceCheck, ComplianceFixResult, ComplianceIgnoreResult, ComplianceLimitsResult, ComplianceReport, ContextLimitsView, RepoTarget, RepoSetupState } from "@waterplane/shared";
+import { probeAndroidEnv } from "./androidenv.js";
+/**
+ * The thresholds in force for one worktree, and where each came from: this
+ * repo's own override > this host's env > the shipped default.
+ *
+ * Exported because the sheet has to be able to SAY it. The row used to quote a
+ * number as one "you asked to be warned at" when nobody had asked and nobody
+ * could — that sentence is now attributed, and the editor needs the same view
+ * to open on the stored override rather than on the resolved number.
+ */
+export declare function contextLimitsFor(worktree: string): ContextLimitsView;
+/**
+ * The `autoCompactWindow` a claude session the daemon spawns in this worktree would
+ * see, and where it comes from. The env layer is THIS daemon's environment,
+ * because a spawned PTY starts from `ptyEnv()` = `process.env` plus a floor,
+ * and the claude backend's `spawnEnv` carries only `DISABLE_AUTOUPDATER`. (A pane in an already-running
+ * tmux server takes the SERVER's environment instead — a
+ * value exported only there is invisible to this read.) The precedence and how
+ * much of it was verified against the CLI bundle is `@waterplane/shared`'s
+ * `autocompact.ts`. The user layer honours `CLAUDE_CONFIG_DIR` like the CLI.
+ */
+export declare function autoCompactFor(worktree: string): AutoCompactResolution;
+/**
+ * How many capture targets this repo has configured, read DEFENSIVELY.
+ *
+ * Parsed by shape rather than through a type, on purpose: this file is written
+ * by a client that may be older or newer than this daemon, and the only question
+ * asked here is "is there at least one target" — the narrowest fact that can be
+ * true. Anything unreadable, half-written, or shaped differently answers 0,
+ * which means the row below is simply not offered. A checklist that threw on a
+ * malformed config would take the whole setup sheet down with it.
+ */
+export declare function captureTargetCount(worktree: string): number;
+/** The two git questions the checklist asks, so an inspection can be answered from facts fetched beforehand. */
+interface GitProbe {
+    isIgnored(path: string): boolean;
+    trackedUnder(dir: string): string[];
+}
+/** The three tree walks the checklist makes, done beforehand — see `inspectRepoAsync`. */
+export interface RepoWalks {
+    android: boolean;
+    appModules: string[];
+    builds: {
+        candidates: BuildCandidate[];
+        total: number;
+    };
+}
+/**
+ * `inspectRepo` with its git and its tree walks done in the background first — what the
+ * unattended sweep runs (`setupwatch.ts`), so a boot that checks a dozen repos never holds the
+ * event loop for a git or a walk. Measured on WSL over a Windows drive: the Android, APK and
+ * build-scan walks alone held it ~9 s for a vcpkg checkout. One walk at a time, so the sweep adds
+ * one stream of calls to a slow disk, not three. What is left synchronous is single-file reads.
+ */
+export declare function inspectRepoAsync(worktree: string): Promise<ComplianceCheck[]>;
+/** Inspect a worktree and return the setup checklist. Pure read — no writes. */
+export declare function inspectRepo(worktree: string, git?: GitProbe, walks?: RepoWalks): ComplianceCheck[];
+/**
+ * The `fix` id the `android-toolchain` row offers: `toolchain.ts`'s user-local install. It is
+ * `CONFIRM_GATED_FIXES` (two taps, never in "Fix all") because the second tap IS the licence consent.
+ */
+export declare const ANDROID_TOOLCHAIN_FIX = "android-toolchain";
+/**
+ * The `android-toolchain` row: a JDK and the Android SDK, found on this desktop. Absent for a repo
+ * that is not Android (a Node repo is never told about a JDK). A warn naming what is missing and
+ * about how much an install would download; never a fail, nothing applies itself. The probe is
+ * read-only (`androidenv.ts`).
+ */
+export declare function androidToolchainRow(worktree: string, probe?: typeof probeAndroidEnv, android?: boolean): ComplianceCheck | null;
+/** The `fix` id of the `builds-configured` row: write the shared `builds.json` from what `buildscan` found. */
+export declare const BUILDS_CONFIGURED_FIX = "builds-configured";
+/**
+ * The `builds-configured` row: this repo describes something buildable (`buildscan.ts`' detection)
+ * and has no `builds.json`, so the Build sheet is empty. Absent when nothing buildable is found.
+ * Pass when either file — the committed shared one or this desktop's own — parses to a list, and
+ * the count is the MERGED list the Build sheet shows (`builds.ts`' `mergeBuilds`). The fix writes
+ * the SHARED file, so the buttons reach every checkout. Warn with `fix` when the scan has ordinary
+ * candidates to write; warn WITHOUT a fix (an agent's job, `setupRemedy.ts` GUIDANCE) when the file
+ * exists but is unreadable, or the scan found only commands it flags (publishing). The fix never
+ * overwrites: it writes with `wx`, and a file that appeared meanwhile is left alone.
+ */
+export declare function buildsConfiguredRow(worktree: string, scan?: RepoWalks["builds"]): ComplianceCheck | null;
+/**
+ * Boil a checklist down to the repo-row rollup. HOST-scope rows are excluded on
+ * purpose: `ok` here answers "is THIS repo wired right", and a fact about the
+ * daemon (the retired Gemini-key row was one) would otherwise flag every repo
+ * on the machine at once — a badge that is always on says nothing.
+ * `checkedAt`/`firstSeenAt` are stamped by the caller that owns the store.
+ *
+ * **What counts as a finding is `@waterplane/shared`'s `isSetupFinding`, not a
+ * predicate written here.** The number below is a badge and the phone cuts the
+ * same checklist down to the rows behind it; two spellings of "host-scope rows
+ * do not count" drift the moment either end gains a scope, and the failure is
+ * silent — a badge that counts 3 over a list showing 4, with no way to tell
+ * from either screen which one is lying. One predicate, imported by both.
+ */
+export declare function summarize(checks: ComplianceCheck[]): Pick<RepoSetupState, "ok" | "issues" | "fixable">;
+/** Build the full report (adds repo id/name + pass rollup). */
+export declare function checkRepoCompliance(target: RepoTarget): ComplianceReport;
+/**
+ * Ignore (or stop ignoring) one advisory row in this repo, and hand back the
+ * re-run report so the row folds or unfolds without a second read. Refuses in
+ * words for any id outside `ADVISORY_CHECKS` — a finding is not something a
+ * person can switch off.
+ */
+export declare function setCheckIgnored(target: RepoTarget, id: string, ignore: boolean): ComplianceIgnoreResult;
+/**
+ * Write (or clear) this repo's threshold override and hand back the re-run
+ * report, so the row the user was looking at re-states itself against the line
+ * they just set rather than requiring a second read to believe it.
+ *
+ * Refuses in words and writes NOTHING when a value is out of range — a stored
+ * repaired number is a number the user did not choose, quoted back at them in a
+ * sentence that claims they did.
+ */
+export declare function setRepoContextLimits(target: RepoTarget, patch: unknown, opts?: {
+    reset?: boolean;
+}): ComplianceLimitsResult;
+export declare function fixRepoCompliance(target: RepoTarget, fixes: string[]): ComplianceFixResult;
+export {};