generate: plan, tune, and accept exactly like live

The lane's variants were tamer than the ones a live session makes on the
same element: its poll instructions replaced live.md's planning method
with a cheat sheet, its reference forbade knobs, told the agent to copy
the markup verbatim and to treat DESIGN.md as a hard boundary, and its
accept appended anchored overrides instead of integrating the design.
Measured on the same page with Opus, live runs promoted a tier, broke the
grid, and declared knobs; lane runs restyled three equal boxes.

Now a Go the generate verb fires gets the same _instructions as a user's
Go (the action's reference, section 4 planning, knobs per section 7),
generate.md hands the design work to live.md's Handle generate and its
Required after accept, Setup runs as for any command, the Tune chip
behaves as in any session, and the mechanical bake is opt-in (--bake)
instead of the lane's default. The start verdict points at live.md, and
`browser` (the config key the opener reads) is a recognized key.
Goldens re-recorded for the accept help and the recognized-keys line.

Written with AI assistance (Claude).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

tests/live-browser-source.test.mjs

@@ -846,15 +846,15 @@ describe('live-browser source contracts', () => {
     );
   });
 
-  it('never shows a pending Tune chip for a session the generate verb started', () => {
-    // The generate lane declares no knobs, so the chip that spins between
-    // the variants mounting and the done reply is noise there; a user's Go
-    // keeps the chip exactly as before (origin null).
+  it('shows the pending Tune chip for a lane session exactly as for any other', () => {
+    // A Go the generate verb fired plans and declares knobs like a user's Go,
+    // so the chip that spins between the variants mounting and the done
+    // reply is gated on the parameter state and nothing else.
     assert.equal((SOURCE.match(/parameterGenerationState = 'pending';\s*sessionOrigin = agentTargetForGo \? 'agent' : null;/g) || []).length, 2, 'every Go records who fired it');
     assert.match(
       SOURCE,
-      /const paramsPending = !hasParams && sessionOrigin !== 'agent' && \(parameterGenerationState === 'pending' \|\| parameterGenerationState === 'loading'\);/,
-      'the pending chip is gated on the origin and nothing else changed',
+      /const paramsPending = !hasParams && \(parameterGenerationState === 'pending' \|\| parameterGenerationState === 'loading'\);/,
+      'the pending chip is not gated on the origin',
     );
     assert.match(SOURCE, /origin: sessionOrigin \|\| undefined,/, 'the origin is saved with the session');
     assert.match(SOURCE, /sessionOrigin = saved\.origin === 'agent' \? 'agent' : null;/, 'and restored across a reload');

tests/oracle/golden/doctor-config-local-and-shared.json

@@ -1,5 +1,5 @@
 {
-  "stdout": "Impeccable doctor: <WS>\n\nworth saying (2):\n  config-unknown-keys  [.impeccable/config.local.json]\n    .impeccable/config.local.json has top-level key(s) nothing reads: `nope`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.local.json]\n    .impeccable/config.local.json sets `buildPath` to \"maybe\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n\n",
+  "stdout": "Impeccable doctor: <WS>\n\nworth saying (2):\n  config-unknown-keys  [.impeccable/config.local.json]\n    .impeccable/config.local.json has top-level key(s) nothing reads: `nope`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `browser`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.local.json]\n    .impeccable/config.local.json sets `buildPath` to \"maybe\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n\n",
   "stderr": "",
   "exit": 0,
   "signal": null,

tests/oracle/golden/doctor-legacy-fix-no-overwrite.json

@@ -1,5 +1,5 @@
 {
-  "stdout": "Impeccable doctor: <WS>\n\nneeds a command (1):\n  product-schema-legacy  [PRODUCT.md]\n    PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\n    → Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\n\nworth saying (8):\n  product-deprecated-register  [PRODUCT.md]\n    PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\n    → Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\n  design-md-coverage  [DESIGN.md]\n    DESIGN.md has no components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\n    → Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\n  config-unknown-keys  [.impeccable/config.json]\n    .impeccable/config.json has top-level key(s) nothing reads: `theme`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.json]\n    .impeccable/config.json sets `buildPath` to \"fast\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n  config-unknown-detector-keys  [.impeccable/config.json]\n    .impeccable/config.json has `detector` key(s) nothing reads: `mode`. Recognized keys are `ignoreRules`, `ignoreFiles`, `ignoreValues`, `designSystem`, `extensions`.\n    → Report the exact keys. `ignoreRule` for `ignoreRules` is the common one, and it silences nothing.\n  detector-ignore-rules-unknown  [.impeccable/config.json]\n    .impeccable/config.json ignores rule id(s) the detector does not have: `not-a-real-rule`. Either the rule was renamed or removed, or the id was mistyped and has never suppressed anything.\n    → Report the exact ids. Removing them is safe; keeping a dead ignore hides that the rule is gone.\n  detector-ignore-files-missing  [.impeccable/config.json]\n    .impeccable/config.json ignores file path(s) that no longer exist: `src/vendor/missing.css`.\n    → Ask whether the file moved (repoint the entry) or was deleted (drop it). A stale entry silently stops covering the file that replaced it.\n  surface-brief-orphaned  [.impeccable/surfaces/src-old-astro.md]\n    1 persisted surface brief(s) name a primary target that no longer exists: .impeccable/surfaces/src-old-astro.md → src/old.astro.\n    → Ask whether the surface moved (repoint the brief) or was removed (delete the brief). Until then the brief is authority for a file that is gone.\n\nautomatic (1):\n  legacy-live-state  [.impeccable-live.json]\n    Live-mode state sits in retired location(s): `.impeccable-live.json`. Current live mode writes under `.impeccable/live/`.\n    → These are read only through backward-compatible fallbacks and are safe to delete once no live session is running. No user decision is needed.\n\nApplied nothing.\nLeft alone:\n  legacy-live-state: delete by hand once no live session is running\n",
+  "stdout": "Impeccable doctor: <WS>\n\nneeds a command (1):\n  product-schema-legacy  [PRODUCT.md]\n    PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\n    → Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\n\nworth saying (8):\n  product-deprecated-register  [PRODUCT.md]\n    PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\n    → Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\n  design-md-coverage  [DESIGN.md]\n    DESIGN.md has no components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\n    → Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\n  config-unknown-keys  [.impeccable/config.json]\n    .impeccable/config.json has top-level key(s) nothing reads: `theme`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `browser`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.json]\n    .impeccable/config.json sets `buildPath` to \"fast\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n  config-unknown-detector-keys  [.impeccable/config.json]\n    .impeccable/config.json has `detector` key(s) nothing reads: `mode`. Recognized keys are `ignoreRules`, `ignoreFiles`, `ignoreValues`, `designSystem`, `extensions`.\n    → Report the exact keys. `ignoreRule` for `ignoreRules` is the common one, and it silences nothing.\n  detector-ignore-rules-unknown  [.impeccable/config.json]\n    .impeccable/config.json ignores rule id(s) the detector does not have: `not-a-real-rule`. Either the rule was renamed or removed, or the id was mistyped and has never suppressed anything.\n    → Report the exact ids. Removing them is safe; keeping a dead ignore hides that the rule is gone.\n  detector-ignore-files-missing  [.impeccable/config.json]\n    .impeccable/config.json ignores file path(s) that no longer exist: `src/vendor/missing.css`.\n    → Ask whether the file moved (repoint the entry) or was deleted (drop it). A stale entry silently stops covering the file that replaced it.\n  surface-brief-orphaned  [.impeccable/surfaces/src-old-astro.md]\n    1 persisted surface brief(s) name a primary target that no longer exists: .impeccable/surfaces/src-old-astro.md → src/old.astro.\n    → Ask whether the surface moved (repoint the brief) or was removed (delete the brief). Until then the brief is authority for a file that is gone.\n\nautomatic (1):\n  legacy-live-state  [.impeccable-live.json]\n    Live-mode state sits in retired location(s): `.impeccable-live.json`. Current live mode writes under `.impeccable/live/`.\n    → These are read only through backward-compatible fallbacks and are safe to delete once no live session is running. No user decision is needed.\n\nApplied nothing.\nLeft alone:\n  legacy-live-state: delete by hand once no live session is running\n",
   "stderr": "",
   "exit": 0,
   "signal": null,

tests/oracle/golden/doctor-legacy-fix.json

@@ -1,5 +1,5 @@
 {
-  "stdout": "Impeccable doctor: <WS>\n\nneeds a command (2):\n  product-schema-legacy  [PRODUCT.md]\n    PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\n    → Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\n  design-sidecar-schema-outdated  [DESIGN.json]\n    DESIGN.json is schemaVersion 1; the current sidecar is 2. Token primitives moved to the DESIGN.md frontmatter, so the old shape carries values that are now read from two places.\n    → Offer `document` to regenerate the sidecar. It reads the existing DESIGN.md, so no interview is needed.\n\nworth saying (9):\n  product-deprecated-register  [PRODUCT.md]\n    PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\n    → Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\n  design-sidecar-stale  [DESIGN.json]\n    DESIGN.md was edited after DESIGN.json was generated, so the sidecar's ramps, shadows, motion tokens, and component snippets may contradict it.\n    → Offer `document` to refresh the sidecar, preserving DESIGN.md.\n  design-md-coverage  [DESIGN.md]\n    DESIGN.md has no components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\n    → Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\n  config-unknown-keys  [.impeccable/config.json]\n    .impeccable/config.json has top-level key(s) nothing reads: `theme`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.json]\n    .impeccable/config.json sets `buildPath` to \"fast\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n  config-unknown-detector-keys  [.impeccable/config.json]\n    .impeccable/config.json has `detector` key(s) nothing reads: `mode`. Recognized keys are `ignoreRules`, `ignoreFiles`, `ignoreValues`, `designSystem`, `extensions`.\n    → Report the exact keys. `ignoreRule` for `ignoreRules` is the common one, and it silences nothing.\n  detector-ignore-rules-unknown  [.impeccable/config.json]\n    .impeccable/config.json ignores rule id(s) the detector does not have: `not-a-real-rule`. Either the rule was renamed or removed, or the id was mistyped and has never suppressed anything.\n    → Report the exact ids. Removing them is safe; keeping a dead ignore hides that the rule is gone.\n  detector-ignore-files-missing  [.impeccable/config.json]\n    .impeccable/config.json ignores file path(s) that no longer exist: `src/vendor/missing.css`.\n    → Ask whether the file moved (repoint the entry) or was deleted (drop it). A stale entry silently stops covering the file that replaced it.\n  surface-brief-orphaned  [.impeccable/surfaces/src-old-astro.md]\n    1 persisted surface brief(s) name a primary target that no longer exists: .impeccable/surfaces/src-old-astro.md → src/old.astro.\n    → Ask whether the surface moved (repoint the brief) or was removed (delete the brief). Until then the brief is authority for a file that is gone.\n\nautomatic (2):\n  design-sidecar-legacy-path  [DESIGN.json]\n    The design sidecar sits at DESIGN.json, a location kept only for backward compatibility.\n    → Move it to .impeccable/design.json the next time the sidecar is written. No user decision is needed.\n  legacy-live-state  [.impeccable-live.json]\n    Live-mode state sits in retired location(s): `.impeccable-live.json`. Current live mode writes under `.impeccable/live/`.\n    → These are read only through backward-compatible fallbacks and are safe to delete once no live session is running. No user decision is needed.\n\nApplied:\n  Moved DESIGN.json to .impeccable/design.json.\nLeft alone:\n  legacy-live-state: delete by hand once no live session is running\n",
+  "stdout": "Impeccable doctor: <WS>\n\nneeds a command (2):\n  product-schema-legacy  [PRODUCT.md]\n    PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\n    → Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\n  design-sidecar-schema-outdated  [DESIGN.json]\n    DESIGN.json is schemaVersion 1; the current sidecar is 2. Token primitives moved to the DESIGN.md frontmatter, so the old shape carries values that are now read from two places.\n    → Offer `document` to regenerate the sidecar. It reads the existing DESIGN.md, so no interview is needed.\n\nworth saying (9):\n  product-deprecated-register  [PRODUCT.md]\n    PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\n    → Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\n  design-sidecar-stale  [DESIGN.json]\n    DESIGN.md was edited after DESIGN.json was generated, so the sidecar's ramps, shadows, motion tokens, and component snippets may contradict it.\n    → Offer `document` to refresh the sidecar, preserving DESIGN.md.\n  design-md-coverage  [DESIGN.md]\n    DESIGN.md has no components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\n    → Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\n  config-unknown-keys  [.impeccable/config.json]\n    .impeccable/config.json has top-level key(s) nothing reads: `theme`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `browser`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.json]\n    .impeccable/config.json sets `buildPath` to \"fast\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n  config-unknown-detector-keys  [.impeccable/config.json]\n    .impeccable/config.json has `detector` key(s) nothing reads: `mode`. Recognized keys are `ignoreRules`, `ignoreFiles`, `ignoreValues`, `designSystem`, `extensions`.\n    → Report the exact keys. `ignoreRule` for `ignoreRules` is the common one, and it silences nothing.\n  detector-ignore-rules-unknown  [.impeccable/config.json]\n    .impeccable/config.json ignores rule id(s) the detector does not have: `not-a-real-rule`. Either the rule was renamed or removed, or the id was mistyped and has never suppressed anything.\n    → Report the exact ids. Removing them is safe; keeping a dead ignore hides that the rule is gone.\n  detector-ignore-files-missing  [.impeccable/config.json]\n    .impeccable/config.json ignores file path(s) that no longer exist: `src/vendor/missing.css`.\n    → Ask whether the file moved (repoint the entry) or was deleted (drop it). A stale entry silently stops covering the file that replaced it.\n  surface-brief-orphaned  [.impeccable/surfaces/src-old-astro.md]\n    1 persisted surface brief(s) name a primary target that no longer exists: .impeccable/surfaces/src-old-astro.md → src/old.astro.\n    → Ask whether the surface moved (repoint the brief) or was removed (delete the brief). Until then the brief is authority for a file that is gone.\n\nautomatic (2):\n  design-sidecar-legacy-path  [DESIGN.json]\n    The design sidecar sits at DESIGN.json, a location kept only for backward compatibility.\n    → Move it to .impeccable/design.json the next time the sidecar is written. No user decision is needed.\n  legacy-live-state  [.impeccable-live.json]\n    Live-mode state sits in retired location(s): `.impeccable-live.json`. Current live mode writes under `.impeccable/live/`.\n    → These are read only through backward-compatible fallbacks and are safe to delete once no live session is running. No user decision is needed.\n\nApplied:\n  Moved DESIGN.json to .impeccable/design.json.\nLeft alone:\n  legacy-live-state: delete by hand once no live session is running\n",
   "stderr": "",
   "exit": 0,
   "signal": null,

tests/oracle/golden/doctor-legacy-text.json

@@ -1,5 +1,5 @@
 {
-  "stdout": "Impeccable doctor: <WS>\n\nneeds a command (2):\n  product-schema-legacy  [PRODUCT.md]\n    PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\n    → Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\n  design-sidecar-schema-outdated  [DESIGN.json]\n    DESIGN.json is schemaVersion 1; the current sidecar is 2. Token primitives moved to the DESIGN.md frontmatter, so the old shape carries values that are now read from two places.\n    → Offer `document` to regenerate the sidecar. It reads the existing DESIGN.md, so no interview is needed.\n\nworth saying (9):\n  product-deprecated-register  [PRODUCT.md]\n    PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\n    → Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\n  design-sidecar-stale  [DESIGN.json]\n    DESIGN.md was edited after DESIGN.json was generated, so the sidecar's ramps, shadows, motion tokens, and component snippets may contradict it.\n    → Offer `document` to refresh the sidecar, preserving DESIGN.md.\n  design-md-coverage  [DESIGN.md]\n    DESIGN.md has no components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\n    → Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\n  config-unknown-keys  [.impeccable/config.json]\n    .impeccable/config.json has top-level key(s) nothing reads: `theme`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.json]\n    .impeccable/config.json sets `buildPath` to \"fast\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n  config-unknown-detector-keys  [.impeccable/config.json]\n    .impeccable/config.json has `detector` key(s) nothing reads: `mode`. Recognized keys are `ignoreRules`, `ignoreFiles`, `ignoreValues`, `designSystem`, `extensions`.\n    → Report the exact keys. `ignoreRule` for `ignoreRules` is the common one, and it silences nothing.\n  detector-ignore-rules-unknown  [.impeccable/config.json]\n    .impeccable/config.json ignores rule id(s) the detector does not have: `not-a-real-rule`. Either the rule was renamed or removed, or the id was mistyped and has never suppressed anything.\n    → Report the exact ids. Removing them is safe; keeping a dead ignore hides that the rule is gone.\n  detector-ignore-files-missing  [.impeccable/config.json]\n    .impeccable/config.json ignores file path(s) that no longer exist: `src/vendor/missing.css`.\n    → Ask whether the file moved (repoint the entry) or was deleted (drop it). A stale entry silently stops covering the file that replaced it.\n  surface-brief-orphaned  [.impeccable/surfaces/src-old-astro.md]\n    1 persisted surface brief(s) name a primary target that no longer exists: .impeccable/surfaces/src-old-astro.md → src/old.astro.\n    → Ask whether the surface moved (repoint the brief) or was removed (delete the brief). Until then the brief is authority for a file that is gone.\n\nautomatic (2):\n  design-sidecar-legacy-path  [DESIGN.json]\n    The design sidecar sits at DESIGN.json, a location kept only for backward compatibility.\n    → Move it to .impeccable/design.json the next time the sidecar is written. No user decision is needed.\n  legacy-live-state  [.impeccable-live.json]\n    Live-mode state sits in retired location(s): `.impeccable-live.json`. Current live mode writes under `.impeccable/live/`.\n    → These are read only through backward-compatible fallbacks and are safe to delete once no live session is running. No user decision is needed.\n\nRun `<IMPECCABLE> doctor --fix` to apply the automatic migrations, or `/impeccable doctor` to work through all of them.\n",
+  "stdout": "Impeccable doctor: <WS>\n\nneeds a command (2):\n  product-schema-legacy  [PRODUCT.md]\n    PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\n    → Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\n  design-sidecar-schema-outdated  [DESIGN.json]\n    DESIGN.json is schemaVersion 1; the current sidecar is 2. Token primitives moved to the DESIGN.md frontmatter, so the old shape carries values that are now read from two places.\n    → Offer `document` to regenerate the sidecar. It reads the existing DESIGN.md, so no interview is needed.\n\nworth saying (9):\n  product-deprecated-register  [PRODUCT.md]\n    PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\n    → Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\n  design-sidecar-stale  [DESIGN.json]\n    DESIGN.md was edited after DESIGN.json was generated, so the sidecar's ramps, shadows, motion tokens, and component snippets may contradict it.\n    → Offer `document` to refresh the sidecar, preserving DESIGN.md.\n  design-md-coverage  [DESIGN.md]\n    DESIGN.md has no components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\n    → Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\n  config-unknown-keys  [.impeccable/config.json]\n    .impeccable/config.json has top-level key(s) nothing reads: `theme`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `browser`, `$schema`, `version`.\n    → Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\n  config-invalid-build-path  [.impeccable/config.json]\n    .impeccable/config.json sets `buildPath` to \"fast\", which nothing reads. The values are `comp` and `code`.\n    → Report the value. An unread `buildPath` does not fall back to the other path; it falls back to the default, so a project meaning `code` has been building comp-led.\n  config-unknown-detector-keys  [.impeccable/config.json]\n    .impeccable/config.json has `detector` key(s) nothing reads: `mode`. Recognized keys are `ignoreRules`, `ignoreFiles`, `ignoreValues`, `designSystem`, `extensions`.\n    → Report the exact keys. `ignoreRule` for `ignoreRules` is the common one, and it silences nothing.\n  detector-ignore-rules-unknown  [.impeccable/config.json]\n    .impeccable/config.json ignores rule id(s) the detector does not have: `not-a-real-rule`. Either the rule was renamed or removed, or the id was mistyped and has never suppressed anything.\n    → Report the exact ids. Removing them is safe; keeping a dead ignore hides that the rule is gone.\n  detector-ignore-files-missing  [.impeccable/config.json]\n    .impeccable/config.json ignores file path(s) that no longer exist: `src/vendor/missing.css`.\n    → Ask whether the file moved (repoint the entry) or was deleted (drop it). A stale entry silently stops covering the file that replaced it.\n  surface-brief-orphaned  [.impeccable/surfaces/src-old-astro.md]\n    1 persisted surface brief(s) name a primary target that no longer exists: .impeccable/surfaces/src-old-astro.md → src/old.astro.\n    → Ask whether the surface moved (repoint the brief) or was removed (delete the brief). Until then the brief is authority for a file that is gone.\n\nautomatic (2):\n  design-sidecar-legacy-path  [DESIGN.json]\n    The design sidecar sits at DESIGN.json, a location kept only for backward compatibility.\n    → Move it to .impeccable/design.json the next time the sidecar is written. No user decision is needed.\n  legacy-live-state  [.impeccable-live.json]\n    Live-mode state sits in retired location(s): `.impeccable-live.json`. Current live mode writes under `.impeccable/live/`.\n    → These are read only through backward-compatible fallbacks and are safe to delete once no live session is running. No user decision is needed.\n\nRun `<IMPECCABLE> doctor --fix` to apply the automatic migrations, or `/impeccable doctor` to work through all of them.\n",
   "stderr": "",
   "exit": 0,
   "signal": null,

tests/oracle/golden/doctor-order-boot-and-deep.json

@@ -1,5 +1,5 @@
 {
-  "stdout": "{\n  \"projectRoot\": \"<WS>\",\n  \"repoRoot\": \"<WS>\",\n  \"isMonorepo\": false,\n  \"productPath\": \"PRODUCT.md\",\n  \"designPath\": \"DESIGN.md\",\n  \"platform\": null,\n  \"ruleRegistryAvailable\": true,\n  \"findings\": [\n    {\n      \"id\": \"product-deprecated-register\",\n      \"artifact\": \"PRODUCT.md\",\n      \"path\": \"PRODUCT.md\",\n      \"severity\": \"mention\",\n      \"summary\": \"PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\",\n      \"fix\": \"Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\"\n    },\n    {\n      \"id\": \"product-schema-legacy\",\n      \"artifact\": \"PRODUCT.md\",\n      \"path\": \"PRODUCT.md\",\n      \"severity\": \"route\",\n      \"summary\": \"PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\",\n      \"fix\": \"Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\"\n    },\n    {\n      \"id\": \"design-sidecar-schema-outdated\",\n      \"artifact\": \"design.json\",\n      \"path\": \".impeccable/design.json\",\n      \"severity\": \"route\",\n      \"summary\": \".impeccable/design.json is schemaVersion 1; the current sidecar is 2. Token primitives moved to the DESIGN.md frontmatter, so the old shape carries values that are now read from two places.\",\n      \"fix\": \"Offer `document` to regenerate the sidecar. It reads the existing DESIGN.md, so no interview is needed.\"\n    },\n    {\n      \"id\": \"design-md-coverage\",\n      \"artifact\": \"DESIGN.md\",\n      \"path\": \"DESIGN.md\",\n      \"severity\": \"mention\",\n      \"summary\": \"DESIGN.md has no colors, typography, components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\",\n      \"fix\": \"Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\"\n    },\n    {\n      \"id\": \"config-unknown-keys\",\n      \"artifact\": \"config.json\",\n      \"path\": \".impeccable/config.json\",\n      \"severity\": \"mention\",\n      \"summary\": \".impeccable/config.json has top-level key(s) nothing reads: `unknownSetting`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `$schema`, `version`.\",\n      \"fix\": \"Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\"\n    }\n  ],\n  \"workspaces\": []\n}\n",
+  "stdout": "{\n  \"projectRoot\": \"<WS>\",\n  \"repoRoot\": \"<WS>\",\n  \"isMonorepo\": false,\n  \"productPath\": \"PRODUCT.md\",\n  \"designPath\": \"DESIGN.md\",\n  \"platform\": null,\n  \"ruleRegistryAvailable\": true,\n  \"findings\": [\n    {\n      \"id\": \"product-deprecated-register\",\n      \"artifact\": \"PRODUCT.md\",\n      \"path\": \"PRODUCT.md\",\n      \"severity\": \"mention\",\n      \"summary\": \"PRODUCT.md still carries a `## Register` section. v4 replaced the brand/product register axis with the four visitor modes (Persuade, Operate, Read, Experience), which are chosen per surface and persisted in that surface's brief. Nothing reads `## Register` any more.\",\n      \"fix\": \"Treat `## Register` as absent for every decision this session. Offer to delete the section; do not let its value influence the work either way.\"\n    },\n    {\n      \"id\": \"product-schema-legacy\",\n      \"artifact\": \"PRODUCT.md\",\n      \"path\": \"PRODUCT.md\",\n      \"severity\": \"route\",\n      \"summary\": \"PRODUCT.md has no schema stamp and none of the sections the current record adds (Positioning, Operating Context, Evidence on Hand, Product Principles), so it predates this version of the product record.\",\n      \"fix\": \"Offer `init`, which preserves confirmed answers and fills the gaps by interview. Do not rewrite the file from inference.\"\n    },\n    {\n      \"id\": \"design-sidecar-schema-outdated\",\n      \"artifact\": \"design.json\",\n      \"path\": \".impeccable/design.json\",\n      \"severity\": \"route\",\n      \"summary\": \".impeccable/design.json is schemaVersion 1; the current sidecar is 2. Token primitives moved to the DESIGN.md frontmatter, so the old shape carries values that are now read from two places.\",\n      \"fix\": \"Offer `document` to regenerate the sidecar. It reads the existing DESIGN.md, so no interview is needed.\"\n    },\n    {\n      \"id\": \"design-md-coverage\",\n      \"artifact\": \"DESIGN.md\",\n      \"path\": \"DESIGN.md\",\n      \"severity\": \"mention\",\n      \"summary\": \"DESIGN.md has no colors, typography, components section. Agents generating new screens get no normative guidance for those, and the live design panel renders generic approximations in their place.\",\n      \"fix\": \"Ask whether the section never applied or was never written. `document` fills it from the code if the project has the answer in its CSS.\"\n    },\n    {\n      \"id\": \"config-unknown-keys\",\n      \"artifact\": \"config.json\",\n      \"path\": \".impeccable/config.json\",\n      \"severity\": \"mention\",\n      \"summary\": \".impeccable/config.json has top-level key(s) nothing reads: `unknownSetting`. Recognized keys are `hook`, `detector`, `updateCheck`, `stalenessCheck`, `projectRoots`, `buildPath`, `browser`, `$schema`, `version`.\",\n      \"fix\": \"Report the exact keys to the user. A near-miss of a real key is a setting that has never applied.\"\n    }\n  ],\n  \"workspaces\": []\n}\n",
   "stderr": "",
   "exit": 0,
   "signal": null,

tests/oracle/golden/live-accept-help.json

@@ -1,5 +1,5 @@
 {
-  "stdout": "Usage: impeccable live-accept [options]\n\nDeterministic accept/discard for live variant sessions.\n\nModes:\n  --discard          Remove variants, restore original\n  --variant N        Accept variant N, discard the rest\n\nRequired:\n  --id SESSION_ID    Session ID of the variant wrapper\n\nOptions:\n  --page-url URL     Current browser page URL; scopes staged copy-edit cleanup\n  --bake             Bake a knob-free HTML/JSX accept mechanically (rules to the\n                     owning stylesheet, wrapper unwrapped) instead of leaving\n                     the carbonize block; the default for sessions the\n                     generate verb started (origin \"agent\")\n  --no-bake          Never bake; always leave the carbonize block\n  --defer-source-write\n                     Deprecated compatibility flag. Svelte component accepts\n                     now write the real source immediately.\n\nOutput (JSON):\n  { handled, file, carbonize, baked?, css?, bakeSkipped? }\n",
+  "stdout": "Usage: impeccable live-accept [options]\n\nDeterministic accept/discard for live variant sessions.\n\nModes:\n  --discard          Remove variants, restore original\n  --variant N        Accept variant N, discard the rest\n\nRequired:\n  --id SESSION_ID    Session ID of the variant wrapper\n\nOptions:\n  --page-url URL     Current browser page URL; scopes staged copy-edit cleanup\n  --bake             Bake a knob-free HTML/JSX accept mechanically (rules to the\n                     owning stylesheet, wrapper unwrapped) instead of leaving\n                     the carbonize block; opt-in, never the default\n  --no-bake          Never bake; always leave the carbonize block\n  --defer-source-write\n                     Deprecated compatibility flag. Svelte component accepts\n                     now write the real source immediately.\n\nOutput (JSON):\n  { handled, file, carbonize, baked?, css?, bakeSkipped? }\n",
   "stderr": "",
   "exit": 0,
   "signal": null,