zelari-code 2.30.0 → 2.31.0

package/dist/cli/main.bundled.js

@@ -37549,7 +37549,7 @@ var CORE_VERSION;
 var init_version = __esm({
   "packages/core/dist/version.js"() {
     "use strict";
-    CORE_VERSION = "2.30.0";
+    CORE_VERSION = "2.31.0";
   }
 });
 
@@ -57039,6 +57039,113 @@ var init_claudeProvider = __esm({
   }
 });
 
+// src/cli/costBudget.ts
+var costBudget_exports = {};
+__export(costBudget_exports, {
+  SessionBudgetTracker: () => SessionBudgetTracker,
+  budgetChip: () => budgetChip,
+  processSessionBudget: () => processSessionBudget,
+  resetProcessSessionBudget: () => resetProcessSessionBudget,
+  resolveSessionBudget: () => resolveSessionBudget,
+  sessionBudgetHoldNotice: () => sessionBudgetHoldNotice
+});
+function resolveSessionBudget(env = process.env) {
+  const maxUsd = parsePositiveFloat(env.ZELARI_SESSION_BUDGET_USD);
+  const maxTokens = parsePositiveInt(env.ZELARI_SESSION_BUDGET_TOKENS);
+  if (maxUsd === void 0 && maxTokens === void 0) return {};
+  return { ...maxUsd !== void 0 ? { maxUsd } : {}, ...maxTokens !== void 0 ? { maxTokens } : {} };
+}
+function parsePositiveFloat(raw) {
+  if (!raw) return void 0;
+  const n = Number.parseFloat(raw);
+  return Number.isFinite(n) && n > 0 ? n : void 0;
+}
+function parsePositiveInt(raw) {
+  if (!raw) return void 0;
+  const n = Number.parseInt(raw, 10);
+  return Number.isFinite(n) && n > 0 ? n : void 0;
+}
+function round6(value) {
+  return Math.round(value * 1e6) / 1e6;
+}
+function processSessionBudget(env = process.env) {
+  if (!processTracker) processTracker = new SessionBudgetTracker(resolveSessionBudget(env));
+  return processTracker;
+}
+function resetProcessSessionBudget() {
+  processTracker = void 0;
+}
+function sessionBudgetHoldNotice(env = process.env) {
+  const budget = processSessionBudget(env);
+  if (!budget.isHold()) return null;
+  const s = budget.status();
+  return `[budget] HOLD \u2014 session budget exhausted (${s.usedUsd.toFixed(2)} USD \xB7 ${s.usedTokens} tokens). Raise ZELARI_SESSION_BUDGET_USD / ZELARI_SESSION_BUDGET_TOKENS or start /new. State preserved; no provider call was made.`;
+}
+function budgetChip(status) {
+  if (status.state === "off") return null;
+  const pct = Math.max(status.pctUsd ?? 0, status.pctTokens ?? 0);
+  const label = status.state === "hold" ? "budget HOLD" : `budget ${Math.min(999, Math.round(pct * 100))}%`;
+  const tone = status.state === "hold" ? "red" : status.state === "warn" ? "yellow" : "green";
+  return { label, tone };
+}
+var SessionBudgetTracker, processTracker;
+var init_costBudget = __esm({
+  "src/cli/costBudget.ts"() {
+    "use strict";
+    SessionBudgetTracker = class {
+      constructor(budget = {}) {
+        this.budget = budget;
+      }
+      usedUsd = 0;
+      usedTokens = 0;
+      get enabled() {
+        return this.budget.maxUsd !== void 0 || this.budget.maxTokens !== void 0;
+      }
+      /** Idempotent per-turn accumulation; ignores NaN/negative inputs. */
+      record(delta) {
+        if (Number.isFinite(delta.costUsd) && (delta.costUsd ?? 0) > 0) this.usedUsd += delta.costUsd ?? 0;
+        if (Number.isFinite(delta.tokens) && (delta.tokens ?? 0) > 0) this.usedTokens += Math.round(delta.tokens ?? 0);
+      }
+      status() {
+        if (!this.enabled) return { state: "off", usedUsd: this.usedUsd, usedTokens: this.usedTokens, pctUsd: null, pctTokens: null };
+        const pctUsd = this.budget.maxUsd !== void 0 ? this.usedUsd / this.budget.maxUsd : null;
+        const pctTokens = this.budget.maxTokens !== void 0 ? this.usedTokens / this.budget.maxTokens : null;
+        const worst = Math.max(pctUsd ?? 0, pctTokens ?? 0);
+        const state3 = worst >= 1 ? "hold" : worst >= 0.8 ? "warn" : "ok";
+        return { state: state3, usedUsd: round6(this.usedUsd), usedTokens: this.usedTokens, pctUsd, pctTokens };
+      }
+      /** True when no further provider turn should start. */
+      isHold() {
+        return this.status().state === "hold";
+      }
+    };
+  }
+});
+
+// src/cli/workspace/planDetect.ts
+var planDetect_exports = {};
+__export(planDetect_exports, {
+  hasWorkspacePlan: () => hasWorkspacePlan
+});
+import { existsSync as existsSync35, readFileSync as readFileSync25 } from "node:fs";
+import { join as join23 } from "node:path";
+function hasWorkspacePlan(projectRoot = process.cwd()) {
+  const planPath = join23(resolveWorkspaceRoot(projectRoot), "plan.json");
+  if (!existsSync35(planPath)) return false;
+  try {
+    const parsed = JSON.parse(readFileSync25(planPath, "utf8"));
+    return Array.isArray(parsed.phases) && parsed.phases.length > 0;
+  } catch {
+    return false;
+  }
+}
+var init_planDetect = __esm({
+  "src/cli/workspace/planDetect.ts"() {
+    "use strict";
+    init_paths3();
+  }
+});
+
 // src/cli/memory/legacyImport.ts
 import { createHash as createHash18 } from "node:crypto";
 import { promises as fs27 } from "node:fs";
@@ -57241,7 +57348,7 @@ var init_sqliteCodec = __esm({
 });
 
 // src/cli/memory/sqliteRpc.ts
-import { existsSync as existsSync35 } from "node:fs";
+import { existsSync as existsSync36 } from "node:fs";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
 import * as path67 from "node:path";
 import { Worker } from "node:worker_threads";
@@ -57254,7 +57361,7 @@ function isBusy(error51) {
 function resolveWorkerUrl() {
   const here = path67.dirname(fileURLToPath2(import.meta.url));
   const direct = path67.join(here, "sqliteWorker.mjs");
-  if (existsSync35(direct)) return pathToFileURL2(direct);
+  if (existsSync36(direct)) return pathToFileURL2(direct);
   return pathToFileURL2(path67.join(here, "memory", "sqliteWorker.mjs"));
 }
 var SqliteWorkerRpc;
@@ -58261,14 +58368,14 @@ var init_serviceFactory = __esm({
 });
 
 // src/cli/workspace/projectInstructions.ts
-import { existsSync as existsSync36, readFileSync as readFileSync25 } from "node:fs";
-import { join as join26 } from "node:path";
+import { existsSync as existsSync37, readFileSync as readFileSync26 } from "node:fs";
+import { join as join27 } from "node:path";
 function loadProjectInstructions(projectRoot = process.cwd(), maxChars = MAX_CHARS) {
   for (const name of CANDIDATES) {
-    const full = join26(projectRoot, name);
-    if (!existsSync36(full)) continue;
+    const full = join27(projectRoot, name);
+    if (!existsSync37(full)) continue;
     try {
-      let raw = readFileSync25(full, "utf8");
+      let raw = readFileSync26(full, "utf8");
       raw = raw.replace(/\r\n/g, "\n").trim();
       if (!raw) continue;
       if (raw.length <= maxChars) {
@@ -58312,8 +58419,8 @@ __export(workspaceSummary_exports, {
   buildWorkspaceSummary: () => buildWorkspaceSummary,
   buildZelariReadHint: () => buildZelariReadHint
 });
-import { existsSync as existsSync37, readFileSync as readFileSync26, readdirSync as readdirSync7, statSync as statSync5 } from "node:fs";
-import { join as join27, relative as relative2 } from "node:path";
+import { existsSync as existsSync38, readFileSync as readFileSync27, readdirSync as readdirSync7, statSync as statSync5 } from "node:fs";
+import { join as join28, relative as relative2 } from "node:path";
 function buildWorkspaceSummary(projectRoot = process.cwd(), options = {}) {
   const { maxEntries = 30, maxChars = 3500, maxDeps = 24, maxScripts = 16 } = options;
   const name = safeProjectName(projectRoot);
@@ -58346,11 +58453,11 @@ function formatTaskLine(t) {
 }
 function buildPlanSummary(projectRoot = process.cwd(), options) {
   const zelariRoot = resolveWorkspaceRoot(projectRoot);
-  const planPath = join27(zelariRoot, "plan.json");
-  if (!existsSync37(planPath)) return null;
+  const planPath = join28(zelariRoot, "plan.json");
+  if (!existsSync38(planPath)) return null;
   let plan;
   try {
-    plan = JSON.parse(readFileSync26(planPath, "utf8"));
+    plan = JSON.parse(readFileSync27(planPath, "utf8"));
   } catch {
     return null;
   }
@@ -58489,8 +58596,8 @@ function pickNextTask(open2) {
   )[0];
 }
 function buildZelariReadHint(projectRoot = process.cwd()) {
-  const planPath = join27(resolveWorkspaceRoot(projectRoot), "plan.json");
-  if (!existsSync37(planPath)) return "";
+  const planPath = join28(resolveWorkspaceRoot(projectRoot), "plan.json");
+  if (!existsSync38(planPath)) return "";
   return [
     "# Council workspace detected (.zelari/) \u2014 DRAFT vault",
     "`.zelari/plan.json` and `.zelari/docs/` hold **design hypotheses**, not verified product state.",
@@ -58505,10 +58612,10 @@ function safeProjectName(root) {
   }
 }
 function readPackageJson2(projectRoot) {
-  const p3 = join27(projectRoot, "package.json");
-  if (!existsSync37(p3)) return null;
+  const p3 = join28(projectRoot, "package.json");
+  if (!existsSync38(p3)) return null;
   try {
-    return JSON.parse(readFileSync26(p3, "utf8"));
+    return JSON.parse(readFileSync27(p3, "utf8"));
   } catch {
     return null;
   }
@@ -58558,11 +58665,11 @@ function listShallow(projectRoot, maxEntries) {
         out.push(`\u2026 (+${top.length - count} more)`);
         break;
       }
-      const rel2 = relative2(projectRoot, join27(projectRoot, entry.name));
+      const rel2 = relative2(projectRoot, join28(projectRoot, entry.name));
       if (entry.isDirectory()) {
         let inner = "";
         try {
-          const sub = readdirSync7(join27(projectRoot, entry.name), {
+          const sub = readdirSync7(join28(projectRoot, entry.name), {
             withFileTypes: true
           }).filter((e) => !e.name.startsWith(".")).slice(0, 4).map((e) => e.name);
           if (sub.length > 0)
@@ -58610,12 +58717,12 @@ var init_workspaceSummary = __esm({
 });
 
 // src/cli/workspace/buildLessonsSummary.ts
-import { existsSync as existsSync38 } from "node:fs";
-import { join as join28 } from "node:path";
+import { existsSync as existsSync39 } from "node:fs";
+import { join as join29 } from "node:path";
 function buildLessonsSummary(projectRoot = process.cwd(), taskText) {
   if (process.env["ZELARI_LESSONS"] === "0") return null;
   const zelariRoot = resolveWorkspaceRoot(projectRoot);
-  if (!existsSync38(join28(zelariRoot, "lessons.jsonl"))) return null;
+  if (!existsSync39(join29(zelariRoot, "lessons.jsonl"))) return null;
   const lessons = recallLessons(zelariRoot, {
     maxLessons: 5,
     maxBytes: 2048,
@@ -58636,8 +58743,8 @@ var composeContext_exports = {};
 __export(composeContext_exports, {
   composeProjectContext: () => composeProjectContext
 });
-import { existsSync as existsSync39, readdirSync as readdirSync8, readFileSync as readFileSync27 } from "node:fs";
-import { join as join29 } from "node:path";
+import { existsSync as existsSync40, readdirSync as readdirSync8, readFileSync as readFileSync28 } from "node:fs";
+import { join as join30 } from "node:path";
 function cap2(text, max, label) {
   if (!text || text.length <= max) return { text: text || "", truncated: false };
   return {
@@ -58649,13 +58756,13 @@ function cap2(text, max, label) {
 }
 function buildDesignIndex(projectRoot, maxChars) {
   const root = resolveWorkspaceRoot(projectRoot);
-  if (!existsSync39(root)) return "";
+  if (!existsSync40(root)) return "";
   const lines = [
     "# Design vault index (.zelari/) \u2014 HYPOTHESES only",
     "Full design docs are NOT product source of truth. Open with list_files / read_file / searchDocuments if needed."
   ];
-  const docsDir = join29(root, "docs");
-  if (existsSync39(docsDir)) {
+  const docsDir = join30(root, "docs");
+  if (existsSync40(docsDir)) {
     try {
       const docs = readdirSync8(docsDir).filter((n) => n.endsWith(".md")).slice(0, 12);
       if (docs.length > 0) {
@@ -58669,12 +58776,12 @@ function buildDesignIndex(projectRoot, maxChars) {
     }
   }
   for (const name of ["risks.md", "plan.json", "nfr-spec.json"]) {
-    if (existsSync39(join29(root, name))) {
+    if (existsSync40(join30(root, name))) {
       lines.push(`- .zelari/${name} present`);
     }
   }
-  const decisionsDir = join29(root, "decisions");
-  if (existsSync39(decisionsDir)) {
+  const decisionsDir = join30(root, "decisions");
+  if (existsSync40(decisionsDir)) {
     try {
       const n = readdirSync8(decisionsDir).filter((f) => f.endsWith(".md")).length;
       if (n > 0) lines.push(`- .zelari/decisions/ (${n} ADR file(s) \u2014 treat proposed as non-binding)`);
@@ -58775,17 +58882,17 @@ function composeProjectContext(input) {
 }
 function readDurableHeadSync(projectRoot) {
   try {
-    const headPath = join29(projectRoot, ".zelari", "state", "HEAD.json");
-    if (!existsSync39(headPath)) return "";
-    const head = JSON.parse(readFileSync27(headPath, "utf8"));
+    const headPath = join30(projectRoot, ".zelari", "state", "HEAD.json");
+    if (!existsSync40(headPath)) return "";
+    const head = JSON.parse(readFileSync28(headPath, "utf8"));
     if (!head?.id) return "";
-    const metaPath = join29(projectRoot, ".zelari", "state", "commits", `${head.id}.json`);
-    if (!existsSync39(metaPath)) return "";
-    const meta3 = JSON.parse(readFileSync27(metaPath, "utf8"));
-    const discPath = meta3.artifactDir ? join29(projectRoot, ".zelari", "state", meta3.artifactDir, "discoveries.json") : join29(projectRoot, ".zelari", "state", "artifacts", head.id, "discoveries.json");
+    const metaPath = join30(projectRoot, ".zelari", "state", "commits", `${head.id}.json`);
+    if (!existsSync40(metaPath)) return "";
+    const meta3 = JSON.parse(readFileSync28(metaPath, "utf8"));
+    const discPath = meta3.artifactDir ? join30(projectRoot, ".zelari", "state", meta3.artifactDir, "discoveries.json") : join30(projectRoot, ".zelari", "state", "artifacts", head.id, "discoveries.json");
     let discoveries = [];
-    if (existsSync39(discPath)) {
-      discoveries = JSON.parse(readFileSync27(discPath, "utf8"));
+    if (existsSync40(discPath)) {
+      discoveries = JSON.parse(readFileSync28(discPath, "utf8"));
     }
     const reusable = discoveries.filter((d) => d.reusable !== false);
     const lines = [
@@ -58813,30 +58920,6 @@ var init_composeContext = __esm({
   }
 });
 
-// src/cli/workspace/planDetect.ts
-var planDetect_exports = {};
-__export(planDetect_exports, {
-  hasWorkspacePlan: () => hasWorkspacePlan
-});
-import { existsSync as existsSync40, readFileSync as readFileSync28 } from "node:fs";
-import { join as join30 } from "node:path";
-function hasWorkspacePlan(projectRoot = process.cwd()) {
-  const planPath = join30(resolveWorkspaceRoot(projectRoot), "plan.json");
-  if (!existsSync40(planPath)) return false;
-  try {
-    const parsed = JSON.parse(readFileSync28(planPath, "utf8"));
-    return Array.isArray(parsed.phases) && parsed.phases.length > 0;
-  } catch {
-    return false;
-  }
-}
-var init_planDetect = __esm({
-  "src/cli/workspace/planDetect.ts"() {
-    "use strict";
-    init_paths3();
-  }
-});
-
 // src/cli/state/loadDurableContext.ts
 var loadDurableContext_exports = {};
 __export(loadDurableContext_exports, {
@@ -60499,82 +60582,6 @@ var init_mcpManager = __esm({
   }
 });
 
-// src/cli/costBudget.ts
-var costBudget_exports = {};
-__export(costBudget_exports, {
-  SessionBudgetTracker: () => SessionBudgetTracker,
-  budgetChip: () => budgetChip,
-  processSessionBudget: () => processSessionBudget,
-  resetProcessSessionBudget: () => resetProcessSessionBudget,
-  resolveSessionBudget: () => resolveSessionBudget
-});
-function resolveSessionBudget(env = process.env) {
-  const maxUsd = parsePositiveFloat(env.ZELARI_SESSION_BUDGET_USD);
-  const maxTokens = parsePositiveInt(env.ZELARI_SESSION_BUDGET_TOKENS);
-  if (maxUsd === void 0 && maxTokens === void 0) return {};
-  return { ...maxUsd !== void 0 ? { maxUsd } : {}, ...maxTokens !== void 0 ? { maxTokens } : {} };
-}
-function parsePositiveFloat(raw) {
-  if (!raw) return void 0;
-  const n = Number.parseFloat(raw);
-  return Number.isFinite(n) && n > 0 ? n : void 0;
-}
-function parsePositiveInt(raw) {
-  if (!raw) return void 0;
-  const n = Number.parseInt(raw, 10);
-  return Number.isFinite(n) && n > 0 ? n : void 0;
-}
-function round6(value) {
-  return Math.round(value * 1e6) / 1e6;
-}
-function processSessionBudget(env = process.env) {
-  if (!processTracker) processTracker = new SessionBudgetTracker(resolveSessionBudget(env));
-  return processTracker;
-}
-function resetProcessSessionBudget() {
-  processTracker = void 0;
-}
-function budgetChip(status) {
-  if (status.state === "off") return null;
-  const pct = Math.max(status.pctUsd ?? 0, status.pctTokens ?? 0);
-  const label = status.state === "hold" ? "budget HOLD" : `budget ${Math.min(999, Math.round(pct * 100))}%`;
-  const tone = status.state === "hold" ? "red" : status.state === "warn" ? "yellow" : "green";
-  return { label, tone };
-}
-var SessionBudgetTracker, processTracker;
-var init_costBudget = __esm({
-  "src/cli/costBudget.ts"() {
-    "use strict";
-    SessionBudgetTracker = class {
-      constructor(budget = {}) {
-        this.budget = budget;
-      }
-      usedUsd = 0;
-      usedTokens = 0;
-      get enabled() {
-        return this.budget.maxUsd !== void 0 || this.budget.maxTokens !== void 0;
-      }
-      /** Idempotent per-turn accumulation; ignores NaN/negative inputs. */
-      record(delta) {
-        if (Number.isFinite(delta.costUsd) && (delta.costUsd ?? 0) > 0) this.usedUsd += delta.costUsd ?? 0;
-        if (Number.isFinite(delta.tokens) && (delta.tokens ?? 0) > 0) this.usedTokens += Math.round(delta.tokens ?? 0);
-      }
-      status() {
-        if (!this.enabled) return { state: "off", usedUsd: this.usedUsd, usedTokens: this.usedTokens, pctUsd: null, pctTokens: null };
-        const pctUsd = this.budget.maxUsd !== void 0 ? this.usedUsd / this.budget.maxUsd : null;
-        const pctTokens = this.budget.maxTokens !== void 0 ? this.usedTokens / this.budget.maxTokens : null;
-        const worst = Math.max(pctUsd ?? 0, pctTokens ?? 0);
-        const state3 = worst >= 1 ? "hold" : worst >= 0.8 ? "warn" : "ok";
-        return { state: state3, usedUsd: round6(this.usedUsd), usedTokens: this.usedTokens, pctUsd, pctTokens };
-      }
-      /** True when no further provider turn should start. */
-      isHold() {
-        return this.status().state === "hold";
-      }
-    };
-  }
-});
-
 // src/cli/councilConfig.ts
 function resolveCouncilTier(opts) {
   const env = opts?.env ?? process.env;
@@ -69025,7 +69032,10 @@ ${ragContext}` : slicePrompt;
               userMessage: opts.task,
               synthesisText: synthesisText || void 0,
               degradedRun: d.degraded,
-              degradedReasons: d.reasons
+              degradedReasons: d.reasons,
+              // 2.31 A1: without sessionId the spine-evidence gate in the hook
+              // never fires, leaving headless with the legacy lint heuristic.
+              sessionId: spine.sessionId
             });
             completionOk = hook.completion?.completion?.ok ?? false;
             if (completionOk) {
@@ -69131,7 +69141,9 @@ ${ragContext}` : slicePrompt;
               userMessage: opts.task,
               synthesisText: synthesisText || void 0,
               degradedRun: d.degraded,
-              degradedReasons: d.reasons
+              degradedReasons: d.reasons,
+              // 2.31 A1: same fix as the council path — evidence gate needs it.
+              sessionId: spine.sessionId
             });
             if (hook.completion?.completion?.ok) {
               emit(`[zelari] slice completion ok`);
@@ -72138,6 +72150,7 @@ var init_contextGrowthSummary = __esm({
 // src/cli/utils/doctor.ts
 var doctor_exports = {};
 __export(doctor_exports, {
+  collectDoctorReport: () => collectDoctorReport,
   runDoctor: () => runDoctor
 });
 import { execSync as execSync2 } from "node:child_process";
@@ -72403,10 +72416,8 @@ async function checkContextGrowth() {
     return WARN(`metrics unreadable: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
-async function runDoctor() {
-  const pkg = readPackageJson4();
-  const pkgName = pkg?.name ?? "zelari-code";
-  const checks = [
+function buildDoctorChecks(pkg, pkgName) {
+  return [
     // --- install-health checks (main-process probes) ---
     { name: "node", run: () => checkNode(pkg) },
     { name: "bin shim", run: () => checkShim(pkgName) },
@@ -72485,6 +72496,34 @@ async function runDoctor() {
     // --- optional desktop computer-use (Cua Driver, trycua) ---
     { name: "cua-driver", run: () => checkCuaDriver() }
   ];
+}
+async function collectDoctorReport() {
+  const pkg = readPackageJson4();
+  const checks = buildDoctorChecks(pkg, pkg?.name ?? "zelari-code");
+  const entries = [];
+  for (const c of checks) {
+    let result;
+    try {
+      result = await c.run();
+    } catch (err) {
+      result = FAIL(
+        `unexpected error: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    entries.push({
+      name: c.name,
+      ok: result.ok,
+      severity: result.ok ? "none" : result.severity ?? "warn",
+      message: result.message
+    });
+  }
+  const firstRed = entries.find((e) => !e.ok) ?? null;
+  return { entries, firstRed, healthy: entries.every((e) => e.ok) };
+}
+async function runDoctor() {
+  const pkg = readPackageJson4();
+  const pkgName = pkg?.name ?? "zelari-code";
+  const checks = buildDoctorChecks(pkg, pkgName);
   console.log(`zelari-code doctor (v${pkg?.version ?? "unknown"})`);
   console.log("platform:", process.platform, process.arch);
   console.log("node:    ", process.version);
@@ -73657,6 +73696,10 @@ function formatStrictBlockExplanation(evaluation) {
       if (unsatisfied.length > 8) {
         lines.push(`  \u2022 \u2026 e altri ${unsatisfied.length - 8}`);
       }
+      const first = byId.get(unsatisfied[0].criterionId) ?? unsatisfied[0].criterionId;
+      lines.push(
+        state3 === "blocked" ? `Prossimo comando: /verify \u2014 poi porta evidenza per \xAB${first}\xBB e riprova.` : `Prossimo comando: ripara \xAB${first}\xBB, poi /verify per ricontrollare.`
+      );
     }
   }
   lines.push(
@@ -76468,6 +76511,28 @@ function useChatTurn(params) {
             return;
           }
         }
+        {
+          const { sessionBudgetHoldNotice: sessionBudgetHoldNotice2 } = await Promise.resolve().then(() => (init_costBudget(), costBudget_exports));
+          const hold = sessionBudgetHoldNotice2();
+          if (hold) {
+            appendSystem(setMessages, hold, Date.now());
+            return;
+          }
+        }
+        {
+          const { hasWorkspacePlan: hasWorkspacePlan2 } = await Promise.resolve().then(() => (init_planDetect(), planDetect_exports));
+          const phaseMod = await Promise.resolve().then(() => (init_phaseState(), phaseState_exports));
+          const g = globalThis;
+          if (phaseMod.getPhase() === "build" && !hasWorkspacePlan2(process.cwd()) && !g.__zelariPlanFirstNotice) {
+            g.__zelariPlanFirstNotice = true;
+            phaseMod.setPhase("plan");
+            appendSystem(
+              setMessages,
+              `[permessi] No workspace plan found \u2014 first turn forced to PLAN (no surprise writes). Type /build to switch to BUILD explicitly.`,
+              Date.now()
+            );
+          }
+        }
         setBusy(true);
         const workPhase = getPhase();
         try {
@@ -83913,19 +83978,57 @@ function main() {
     });
     return;
   }
-  const { waitUntilExit, unmount } = render(picked.element);
-  process.on("SIGINT", () => {
-    unmount();
-    void shutdown();
-  });
-  process.on("SIGTERM", () => {
-    unmount();
-    void shutdown();
-  });
-  void backgroundUpdateCheck();
-  waitUntilExit().then(() => {
-    void shutdown();
+  void (async () => {
+    await runFirstRunDoctorGate();
+    const { waitUntilExit, unmount } = render(picked.element);
+    process.on("SIGINT", () => {
+      unmount();
+      void shutdown();
+    });
+    process.on("SIGTERM", () => {
+      unmount();
+      void shutdown();
+    });
+    void backgroundUpdateCheck();
+    waitUntilExit().then(() => {
+      void shutdown();
+    });
+  })();
+}
+async function runFirstRunDoctorGate() {
+  try {
+    const { getActiveProvider: getActiveProvider2 } = await Promise.resolve().then(() => (init_providerConfig(), providerConfig_exports));
+    const { resolveApiKey: resolveApiKey2, getOAuthToken: getOAuthToken2 } = await Promise.resolve().then(() => (init_keyStore(), keyStore_exports));
+    const active = getActiveProvider2();
+    if (resolveApiKey2(active.id) || getOAuthToken2(active.id)) return;
+  } catch {
+    return;
+  }
+  const { collectDoctorReport: collectDoctorReport2 } = await Promise.resolve().then(() => (init_doctor(), doctor_exports));
+  const report = await collectDoctorReport2();
+  if (report.healthy) return;
+  const red = report.firstRed;
+  const line = (s) => process.stderr.write(s + "\n");
+  line("");
+  line("\u250C\u2500 first run: doctor");
+  line(`\u2502 \u2717 ${red.name} \u2014 ${red.message.replace(/\n/g, "\n\u2502   ")}`);
+  line("\u2502 Fix the red above (its message names the exact command), then re-run:");
+  line("\u2502   zelari-code --doctor");
+  line("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  if (!process.stdin.isTTY) {
+    line("[wizard] non-interactive session: continuing with a RED doctor (dichiarato).");
+    return;
+  }
+  const rl = (await import("node:readline/promises")).createInterface({
+    input: process.stdin,
+    output: process.stdout
   });
+  const answer = (await rl.question('Continue anyway with a RED doctor? Type "si" to continue: ')).trim().toLowerCase();
+  rl.close();
+  if (answer !== "si" && answer !== "s\xEC" && answer !== "yes" && answer !== "y") {
+    process.exit(1);
+  }
+  line("[wizard] continue-anyway dichiarato \u2014 doctor is still red.");
 }
 main();
 export {