feat(869-c5): mosaic doctor surfaces wired-but-unactivatable lease enforcement

Part of #869 (Point-1 C5). Adds runLeaseEnforcementDoctorCheck(), which
detects whether the Claude Code enforcement hooks (mutator-gate.py /
receipt-observer-client.py) are wired in ~/.claude/settings.json and, if so,
reuses C1's leaseEnforcementActivatable() and C3's
checkBrokerSupervisorHealth() to determine whether activation could actually
satisfy enforcement right now. Wired-but-not-activatable/unhealthy reports a
LOUD [mosaic-doctor] [ERROR] (forces mosaic doctor to exit non-zero even if
the underlying bash audit script is green); not-wired or wired-and-healthy
both pass silently, matching this file's existing checkMosaicHome/checkFile
conventions.

Red-first unit tests inject every dependency (settings read, activation
probe, broker-health check) — no real ~/.claude/settings.json or broker is
ever touched.

packages/mosaic/framework/install.sh

@@ -18,33 +18,12 @@ set -Eeuo pipefail
 #   MOSAIC_INSTALL_MODE      — prompt|keep|overwrite (default: prompt)
 #   MOSAIC_ALLOW_MISSING_SEQUENTIAL_THINKING — 1 to bypass MCP check
 #   MOSAIC_SKIP_SKILLS_SYNC  — 1 to skip skill sync
-#
-# Flags (CLI args, NOT environment variables — see #869 Point-1 C2):
-#   --allow-inactive-enforcement  Explicit, per-invocation opt-out that lets the
-#                                 lease-enforcement hooks (mutator-gate.py,
-#                                 receipt-observer-client.py) be wired into
-#                                 ~/.claude/settings.json even when this host
-#                                 cannot confirm it can ACTIVATE them. Loud on
-#                                 use (see mosaic-link-runtime-assets). Default
-#                                 (flag absent) is fail-loud: the enforcement
-#                                 hooks are NOT wired and the framework's
-#                                 runtime-asset-link step reports a failure.
 # ──────────────────────────────────────────────────────────────────────────────
 
 SOURCE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 TARGET_DIR="${MOSAIC_HOME:-$HOME/.config/mosaic}"
 INSTALL_MODE="${MOSAIC_INSTALL_MODE:-prompt}"
 
-# Deliberately parsed from "$@" (a real, explicit, per-invocation argument) —
-# never an environment variable — so this opt-out can never sit silently
-# inherited in a shell profile. See #869 Point-1 C2.
-ALLOW_INACTIVE_ENFORCEMENT=0
-for _arg in "$@"; do
-  case "$_arg" in
-    --allow-inactive-enforcement) ALLOW_INACTIVE_ENFORCEMENT=1 ;;
-  esac
-done
-
 # Shared framework path-ownership manifest reader (#791). Parity with
 # packages/mosaic/src/framework/manifest.ts — both consume framework-manifest.txt.
 # Sourcing does not run its CLI dispatch (guarded by BASH_SOURCE==$0).
@@ -691,15 +670,10 @@ step "Post-install tasks"
 SCRIPTS="$TARGET_DIR/tools/_scripts"
 
 if [[ -x "$SCRIPTS/mosaic-link-runtime-assets" ]]; then
-  link_args=()
-  [[ "$ALLOW_INACTIVE_ENFORCEMENT" == "1" ]] && link_args+=(--allow-inactive-enforcement)
-  # stdout is suppressed as before, but stderr is left connected: the
-  # install-ordering guard's FAIL LOUD message (#869 Point-1 C2) must reach
-  # the operator, not be swallowed silently.
-  if "$SCRIPTS/mosaic-link-runtime-assets" "${link_args[@]}" >/dev/null; then
+  if "$SCRIPTS/mosaic-link-runtime-assets" >/dev/null 2>&1; then
     ok "Runtime assets linked"
   else
-    warn "Runtime asset linking failed (non-fatal) — see message above for details."
+    warn "Runtime asset linking failed (non-fatal)"
   fi
 fi
 

packages/mosaic/framework/tools/_scripts/mosaic-link-runtime-assets

@@ -4,22 +4,6 @@ set -euo pipefail
 MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
 backup_stamp="$(date +%Y%m%d%H%M%S)"
 
-# ─── Install-ordering guard opt-out (#869 Point-1 C2) ───────────────────────
-# Explicit, per-invocation CLI flag ONLY — deliberately NOT read from an
-# environment variable, so it can never sit as a silently-inherited default in
-# a shell profile or CI env. Absent (the default) => hard fail-loud path.
-allow_inactive_enforcement=0
-for arg in "$@"; do
-  case "$arg" in
-    --allow-inactive-enforcement) allow_inactive_enforcement=1 ;;
-  esac
-done
-
-# Tracks whether the Claude settings install-ordering guard (below) reported a
-# degraded (enforcement-not-wired) outcome, so this script's own exit status
-# reflects it even though the rest of the runtime-asset sync must still run.
-guard_degraded=0
-
 copy_file_managed() {
   local src="$1"
   local dst="$2"
@@ -40,103 +24,6 @@ copy_file_managed() {
   cp "$src" "$dst"
 }
 
-# ─── Install-ordering guard for settings.json (#869 Point-1 C2) ─────────────
-#
-# settings.json is where #828's enforcement hooks (PreToolUse mutator-gate.py,
-# Stop receipt-observer-client.py) get wired unconditionally. Before copying
-# it, delegate to `mosaic __link-claude-settings` (packages/mosaic/src/commands/
-# install-ordering-guard.ts) so the wiring decision is made by importing the
-# C1 activation probe (`leaseEnforcementActivatable()`) directly, rather than
-# re-implementing the capability/supervisor checks in shell. That subcommand:
-#   - activatable            -> writes settings.json with hooks intact, exits 0
-#   - NOT activatable        -> writes settings.json with hooks STRIPPED,
-#                                prints an actionable message, exits 1
-#   - NOT activatable + opt-out -> writes settings.json with hooks intact,
-#                                   prints a loud warning, exits 0
-# The `mosaic` CLI is expected on PATH at this point ("No executables are
-# placed on PATH — the mosaic npm CLI is the only binary", per install.sh).
-# If it is not resolvable at all, that is itself strong evidence the
-# activation half is absent, so the same fail-loud default applies via a
-# minimal python3 fallback (this repo already depends on python3 for the
-# lease broker itself).
-copy_claude_settings_guarded() {
-  local src="$1"
-  local dst="$2"
-
-  local guard_args=(__link-claude-settings "$src" "$dst")
-  if [[ "$allow_inactive_enforcement" == "1" ]]; then
-    guard_args+=(--allow-inactive-enforcement)
-  fi
-
-  if command -v mosaic >/dev/null 2>&1; then
-    if mosaic "${guard_args[@]}"; then
-      return 0
-    fi
-    echo "[mosaic-link] Enforcement hooks were NOT wired into $dst (see message above)." >&2
-    guard_degraded=1
-    return 0
-  fi
-
-  echo "[mosaic-link] ERROR: 'mosaic' CLI not found on PATH — cannot confirm lease-enforcement" >&2
-  echo "[mosaic-link] activation capability. enforcement requested but activation half absent —" >&2
-  echo "[mosaic-link] needs a published CLI carrying launch-runtime activation + a broker" >&2
-  echo "[mosaic-link] supervisor; refusing to wire a dead gate (see #869)." >&2
-
-  if [[ "$allow_inactive_enforcement" == "1" ]]; then
-    echo "[mosaic-link] WARNING: --allow-inactive-enforcement set — wiring $dst AS-IS (with" >&2
-    echo "[mosaic-link] enforcement hooks) despite being unable to confirm activation." >&2
-    copy_file_managed "$src" "$dst"
-    return 0
-  fi
-
-  mkdir -p "$(dirname "$dst")"
-  if command -v python3 >/dev/null 2>&1; then
-    python3 - "$src" "$dst" <<'PYEOF'
-import json, sys
-
-src, dest = sys.argv[1], sys.argv[2]
-with open(src) as f:
-    data = json.load(f)
-
-hooks = data.get("hooks", {})
-
-pre = hooks.get("PreToolUse", [])
-hooks["PreToolUse"] = [
-    t for t in pre
-    if not any("mutator-gate.py" in h.get("command", "") for h in t.get("hooks", []))
-]
-if not hooks["PreToolUse"]:
-    del hooks["PreToolUse"]
-
-stop = hooks.get("Stop", [])
-new_stop = []
-for t in stop:
-    kept = [h for h in t.get("hooks", []) if "receipt-observer-client.py" not in h.get("command", "")]
-    if kept:
-        t = dict(t)
-        t["hooks"] = kept
-        new_stop.append(t)
-if new_stop:
-    hooks["Stop"] = new_stop
-elif "Stop" in hooks:
-    del hooks["Stop"]
-
-if hooks:
-    data["hooks"] = hooks
-else:
-    data.pop("hooks", None)
-
-with open(dest, "w") as f:
-    json.dump(data, f, indent=2)
-    f.write("\n")
-PYEOF
-  else
-    cp "$src" "$dst"
-  fi
-  guard_degraded=1
-  return 0
-}
-
 remove_legacy_path() {
   local p="$1"
 
@@ -223,13 +110,6 @@ for runtime_file in \
   fi
   src="$MOSAIC_HOME/runtime/claude/$runtime_file"
   [[ -f "$src" ]] || continue
-  if [[ "$runtime_file" == "settings.json" ]]; then
-    # Install-ordering guard (#869 Point-1 C2): gate enforcement-hook wiring
-    # on confirmed activation instead of the plain copy_file_managed used for
-    # every other runtime file. See copy_claude_settings_guarded() above.
-    copy_claude_settings_guarded "$src" "$HOME/.claude/$runtime_file"
-    continue
-  fi
   copy_file_managed "$src" "$HOME/.claude/$runtime_file"
 done
 
@@ -287,12 +167,3 @@ fi
 
 echo "[mosaic-link] Runtime assets synced (non-symlink mode)"
 echo "[mosaic-link] Canonical source: $MOSAIC_HOME"
-
-# Propagate the install-ordering guard's outcome (#869 Point-1 C2): every
-# other runtime asset above is best-effort/non-fatal, but a degraded
-# (enforcement-not-wired) settings.json must make THIS script's own exit
-# status non-zero so callers (framework/install.sh, finalize.ts) can surface
-# it — never silently.
-if [[ "$guard_degraded" == "1" ]]; then
-  exit 1
-fi

packages/mosaic/framework/tools/_scripts/test-install-ordering-guard.sh

@@ -1,180 +0,0 @@
-#!/usr/bin/env bash
-# Regression harness for issue #869 Point-1 C2 — the install-ordering guard
-# wired into mosaic-link-runtime-assets.
-#
-# Root cause under test: mosaic-link-runtime-assets copies
-# runtime/claude/settings.json (which embeds the PreToolUse mutator-gate.py
-# hook and the Stop receipt-observer-client.py hook) straight into
-# ~/.claude/settings.json, unconditionally. If the lease-broker activation
-# half cannot be confirmed on this host, wiring those hooks bricks it with a
-# fail-closed gate that can never be satisfied.
-#
-# This harness never invokes a real `mosaic` CLI build — it stubs the
-# `__link-claude-settings` contract with a fake `mosaic` on PATH so the shell
-# WIRING (does mosaic-link-runtime-assets call out correctly? does it
-# propagate a degraded outcome? does it still copy every other runtime file?
-# does --allow-inactive-enforcement forward through?) is exercised
-# independently of the TS guard's own logic (already covered by
-# install-ordering-guard.spec.ts). It also exercises the no-mosaic-on-PATH
-# python3 fallback directly.
-#
-# Scenarios:
-#   1. probe=true (fake mosaic exits 0)  -> settings.json copied, script exits 0.
-#   2. probe=false (fake mosaic exits 1) -> script exits 1 (guard_degraded
-#      propagated), but every OTHER runtime file is still copied.
-#   3. probe=false + --allow-inactive-enforcement -> the flag is forwarded to
-#      the fake mosaic stub.
-#   4. No `mosaic` on PATH at all (activation unconfirmable) -> the python3
-#      fallback strips the enforcement hooks itself and the script exits 1.
-#   5. No `mosaic` on PATH + --allow-inactive-enforcement -> the python3
-#      fallback wires the hooks AS-IS and the script exits 0.
-
-set -uo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-LINK_SCRIPT="$SCRIPT_DIR/mosaic-link-runtime-assets"
-
-TMP_ROOT=$(mktemp -d)
-trap 'rm -rf "$TMP_ROOT"' EXIT
-
-fail=0
-fail_msg() {
-    echo "FAIL: $*" >&2
-    fail=1
-}
-
-FIXTURE_SETTINGS='{
-  "model": "opus",
-  "hooks": {
-    "PreToolUse": [
-      { "matcher": ".*", "hooks": [ { "type": "command", "command": "python3 ~/.config/mosaic/tools/lease-broker/mutator-gate.py --runtime claude" } ] },
-      { "matcher": "Write|Edit|MultiEdit", "hooks": [ { "type": "command", "command": "~/.config/mosaic/tools/qa/prevent-memory-write.sh" } ] }
-    ],
-    "Stop": [
-      { "hooks": [
-        { "type": "command", "command": "python3 ~/.config/mosaic/tools/lease-broker/receipt-observer-client.py --runtime claude" },
-        { "type": "command", "command": "~/.config/mosaic/tools/qa/reflect-stop-hook.sh" }
-      ] }
-    ]
-  }
-}'
-
-# Sets up a fresh $MOSAIC_HOME/runtime/claude/{settings.json,CLAUDE.md,
-# hooks-config.json,context7-integration.md} + fresh $HOME, echoes both paths
-# space-separated for the caller to `read`.
-new_scenario_dirs() {
-    local scenario="$1"
-    local base="$TMP_ROOT/$scenario"
-    local mosaic_home="$base/mosaic-home"
-    local home="$base/home"
-    mkdir -p "$mosaic_home/runtime/claude" "$home"
-    printf '%s' "$FIXTURE_SETTINGS" > "$mosaic_home/runtime/claude/settings.json"
-    echo "claude.md fixture" > "$mosaic_home/runtime/claude/CLAUDE.md"
-    echo '{"hooks":{}}' > "$mosaic_home/runtime/claude/hooks-config.json"
-    echo "context7 fixture" > "$mosaic_home/runtime/claude/context7-integration.md"
-    echo "$mosaic_home" "$home"
-}
-
-settings_has_marker() {
-    local file="$1" marker="$2"
-    [[ -f "$file" ]] && grep -q "$marker" "$file"
-}
-
-# A fake `mosaic` binary implementing only the __link-claude-settings contract
-# this harness needs: writes dest verbatim (fixture is unmodified either way —
-# this stub only exercises the CALL CONTRACT, not the TS strip logic, which
-# has its own vitest coverage) and exits with the code the scenario wants.
-# Records the args it was called with so the harness can assert forwarding.
-make_fake_mosaic() {
-    local bin_dir="$1" exit_code="$2"
-    mkdir -p "$bin_dir"
-    cat > "$bin_dir/mosaic" <<EOF
-#!/usr/bin/env bash
-set -euo pipefail
-echo "\$@" > "$bin_dir/mosaic.args"
-if [[ "\$1" == "__link-claude-settings" ]]; then
-  cp "\$2" "\$3"
-  exit $exit_code
-fi
-exit 0
-EOF
-    chmod +x "$bin_dir/mosaic"
-}
-
-# --- Scenario 1: probe=true (fake mosaic exits 0) ---------------------------
-read -r MOSAIC_HOME_1 HOME_1 < <(new_scenario_dirs scenario1)
-BIN_1="$TMP_ROOT/scenario1/bin"
-make_fake_mosaic "$BIN_1" 0
-
-OUTPUT=$(MOSAIC_HOME="$MOSAIC_HOME_1" HOME="$HOME_1" PATH="$BIN_1:$PATH" "$LINK_SCRIPT" 2>&1)
-STATUS=$?
-[[ "$STATUS" -eq 0 ]] || fail_msg "scenario1 (probe=true): expected exit 0, got $STATUS. Output: $OUTPUT"
-[[ -f "$HOME_1/.claude/settings.json" ]] || fail_msg "scenario1: settings.json was not copied"
-
-# --- Scenario 2: probe=false (fake mosaic exits 1) --------------------------
-read -r MOSAIC_HOME_2 HOME_2 < <(new_scenario_dirs scenario2)
-BIN_2="$TMP_ROOT/scenario2/bin"
-make_fake_mosaic "$BIN_2" 1
-
-OUTPUT=$(MOSAIC_HOME="$MOSAIC_HOME_2" HOME="$HOME_2" PATH="$BIN_2:$PATH" "$LINK_SCRIPT" 2>&1)
-STATUS=$?
-[[ "$STATUS" -ne 0 ]] || fail_msg "scenario2 (probe=false, default): expected non-zero exit, got 0. Output: $OUTPUT"
-[[ -f "$HOME_2/.claude/CLAUDE.md" ]] || fail_msg "scenario2: CLAUDE.md was NOT copied even though it is independent of the settings.json guard"
-[[ -f "$HOME_2/.claude/hooks-config.json" ]] || fail_msg "scenario2: hooks-config.json was NOT copied"
-[[ -f "$HOME_2/.claude/context7-integration.md" ]] || fail_msg "scenario2: context7-integration.md was NOT copied"
-case "$OUTPUT" in
-    *"NOT be wired"*|*"NOT wired"*) ;;
-    *) fail_msg "scenario2: expected an actionable degraded-wiring message in output, got: $OUTPUT" ;;
-esac
-
-# --- Scenario 3: probe=false + --allow-inactive-enforcement forwards the flag
-read -r MOSAIC_HOME_3 HOME_3 < <(new_scenario_dirs scenario3)
-BIN_3="$TMP_ROOT/scenario3/bin"
-make_fake_mosaic "$BIN_3" 0
-
-MOSAIC_HOME="$MOSAIC_HOME_3" HOME="$HOME_3" PATH="$BIN_3:$PATH" "$LINK_SCRIPT" --allow-inactive-enforcement >/dev/null 2>&1
-RECORDED_ARGS="$(cat "$BIN_3/mosaic.args" 2>/dev/null || true)"
-case "$RECORDED_ARGS" in
-    *"--allow-inactive-enforcement"*) ;;
-    *) fail_msg "scenario3: --allow-inactive-enforcement was not forwarded to the mosaic CLI invocation (got: '$RECORDED_ARGS')" ;;
-esac
-
-# --- Scenario 4: no `mosaic` on PATH at all -> python3 fallback strips hooks
-read -r MOSAIC_HOME_4 HOME_4 < <(new_scenario_dirs scenario4)
-EMPTY_BIN="$TMP_ROOT/scenario4/empty-bin"
-mkdir -p "$EMPTY_BIN"
-# A PATH containing only python3 (for the fallback) + core utils, no mosaic.
-FALLBACK_PATH="$EMPTY_BIN:/usr/bin:/bin"
-
-OUTPUT=$(MOSAIC_HOME="$MOSAIC_HOME_4" HOME="$HOME_4" PATH="$FALLBACK_PATH" "$LINK_SCRIPT" 2>&1)
-STATUS=$?
-[[ "$STATUS" -ne 0 ]] || fail_msg "scenario4 (no mosaic on PATH, default): expected non-zero exit, got 0. Output: $OUTPUT"
-if settings_has_marker "$HOME_4/.claude/settings.json" "mutator-gate.py"; then
-    fail_msg "scenario4: mutator-gate.py hook was wired even though mosaic could not be resolved (activation unconfirmable)"
-fi
-if settings_has_marker "$HOME_4/.claude/settings.json" "receipt-observer-client.py"; then
-    fail_msg "scenario4: receipt-observer-client.py hook was wired even though mosaic could not be resolved"
-fi
-if ! settings_has_marker "$HOME_4/.claude/settings.json" "prevent-memory-write.sh"; then
-    fail_msg "scenario4: the unrelated prevent-memory-write.sh hook was incorrectly dropped too"
-fi
-
-# --- Scenario 5: no `mosaic` on PATH + --allow-inactive-enforcement --------
-read -r MOSAIC_HOME_5 HOME_5 < <(new_scenario_dirs scenario5)
-
-OUTPUT=$(MOSAIC_HOME="$MOSAIC_HOME_5" HOME="$HOME_5" PATH="$FALLBACK_PATH" "$LINK_SCRIPT" --allow-inactive-enforcement 2>&1)
-STATUS=$?
-[[ "$STATUS" -eq 0 ]] || fail_msg "scenario5 (no mosaic, opt-out): expected exit 0, got $STATUS. Output: $OUTPUT"
-if ! settings_has_marker "$HOME_5/.claude/settings.json" "mutator-gate.py"; then
-    fail_msg "scenario5: mutator-gate.py hook should have been wired (explicit opt-out set)"
-fi
-case "$OUTPUT" in
-    *"WARNING"*"--allow-inactive-enforcement"*) ;;
-    *) fail_msg "scenario5: expected a loud WARNING mentioning --allow-inactive-enforcement, got: $OUTPUT" ;;
-esac
-
-if [[ "$fail" -eq 0 ]]; then
-    echo "install-ordering-guard regression passed (5/5 scenarios)"
-fi
-
-exit "$fail"

packages/mosaic/package.json

@@ -25,7 +25,7 @@
     "lint": "eslint src",
     "typecheck": "tsc --noEmit",
     "test": "vitest run --passWithNoTests && pnpm run test:framework-shell",
-    "test:framework-shell": "python3 src/lease-broker/daemon_deadline_unittest.py && python3 src/lease-broker/normative_fragments_unittest.py && python3 src/lease-broker/receipt_challenge_unittest.py && python3 src/lease-broker/context_recovery_unittest.py && python3 src/lease-broker/recovery_runtime_unittest.py && python3 src/lease-broker/recovery_b1_adversarial_unittest.py && python3 src/lease-broker/framework_skill_portability_unittest.py && python3 src/mutator-gate/runtime_tools_unittest.py && python3 src/mutator-gate/runtime_launch_guard_unittest.py && python3 framework/tools/lease-broker/check-runtime-launches.py --root ../.. && bash framework/tools/codex/test-pr-diff-context.sh && bash framework/tools/qa/test-deps-preflight.sh && bash framework/tools/git/test-pr-review-gitea-comment.sh && bash framework/tools/git/test-ci-queue-wait-branch-absent.sh && bash framework/tools/git/test-git-credential-mosaic.sh && bash framework/tools/git/test-gitea-token-identity.sh && bash framework/tools/_scripts/test-install-ordering-guard.sh"
+    "test:framework-shell": "python3 src/lease-broker/daemon_deadline_unittest.py && python3 src/lease-broker/normative_fragments_unittest.py && python3 src/lease-broker/receipt_challenge_unittest.py && python3 src/lease-broker/context_recovery_unittest.py && python3 src/lease-broker/recovery_runtime_unittest.py && python3 src/lease-broker/recovery_b1_adversarial_unittest.py && python3 src/lease-broker/framework_skill_portability_unittest.py && python3 src/mutator-gate/runtime_tools_unittest.py && python3 src/mutator-gate/runtime_launch_guard_unittest.py && python3 framework/tools/lease-broker/check-runtime-launches.py --root ../.. && bash framework/tools/codex/test-pr-diff-context.sh && bash framework/tools/qa/test-deps-preflight.sh && bash framework/tools/git/test-pr-review-gitea-comment.sh && bash framework/tools/git/test-ci-queue-wait-branch-absent.sh && bash framework/tools/git/test-git-credential-mosaic.sh && bash framework/tools/git/test-gitea-token-identity.sh"
   },
   "dependencies": {
     "@mosaicstack/brain": "workspace:*",

packages/mosaic/src/cli.ts

@@ -22,7 +22,6 @@ import { registerSkillCommand } from './commands/skill.js';
 // prdy is registered via launch.ts
 import { registerLaunchCommands } from './commands/launch.js';
 import { registerLeaseCapabilityProbe } from './commands/lease-activation-probe.js';
-import { registerInstallOrderingGuardCommand } from './commands/install-ordering-guard.js';
 import { registerAuthCommand } from './commands/auth.js';
 import { registerFederationCommand } from './commands/federation.js';
 import { registerGatewayCommand } from './commands/gateway.js';
@@ -84,10 +83,6 @@ registerLaunchCommands(program);
 
 registerLeaseCapabilityProbe(program);
 
-// ─── install-ordering guard (hidden; #869 Point-1 C2) ───────────────────
-
-registerInstallOrderingGuardCommand(program);
-
 // ─── login ──────────────────────────────────────────────────────────────
 
 program

packages/mosaic/src/commands/install-ordering-guard.spec.ts

@@ -1,301 +0,0 @@
-import { describe, it, expect, afterEach } from 'vitest';
-import { mkdtempSync, rmSync, writeFileSync, readFileSync, existsSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { leaseEnforcementActivatable } from './lease-activation-probe.js';
-import {
-  ENFORCEMENT_HOOK_MARKERS,
-  FAIL_LOUD_MESSAGE,
-  guardClaudeSettingsWiring,
-  loudOptOutMessage,
-  runInstallOrderingGuard,
-  settingsHasEnforcementHooks,
-  stripEnforcementHooks,
-} from './install-ordering-guard.js';
-
-/**
- * Red-first tests for issue #869 Point-1 C2 — the install-ordering guard.
- *
- * Root cause under test: `mosaic-link-runtime-assets` copies
- * `runtime/claude/settings.json` (which embeds the PreToolUse
- * `mutator-gate.py` hook and the Stop `receipt-observer-client.py` hook)
- * straight into `~/.claude/settings.json`, unconditionally. If the
- * activation half (C1: `leaseEnforcementActivatable()`) cannot be confirmed,
- * wiring those hooks bricks the host with a fail-closed gate that can never
- * be satisfied. This guard must refuse to wire in that case by default, and
- * only wire anyway on an explicit, loud opt-out.
- *
- * All fixtures use temp directories — this suite never reads or writes the
- * real `~/.claude/settings.json`.
- */
-
-const FIXTURE_SETTINGS = {
-  model: 'opus',
-  hooks: {
-    PreCompact: [
-      {
-        matcher: '.*',
-        hooks: [{ type: 'command', command: 'python3 revoke-lease.py --reason pre-compact' }],
-      },
-    ],
-    PreToolUse: [
-      {
-        matcher: '.*',
-        hooks: [
-          {
-            type: 'command',
-            command: 'python3 ~/.config/mosaic/tools/lease-broker/mutator-gate.py --runtime claude',
-            timeout: 3,
-          },
-        ],
-      },
-      {
-        matcher: 'Write|Edit|MultiEdit',
-        hooks: [{ type: 'command', command: '~/.config/mosaic/tools/qa/prevent-memory-write.sh' }],
-      },
-    ],
-    PostToolUse: [
-      {
-        matcher: 'Edit|MultiEdit|Write',
-        hooks: [{ type: 'command', command: '~/.config/mosaic/tools/qa/qa-hook-stdin.sh' }],
-      },
-    ],
-    Stop: [
-      {
-        hooks: [
-          {
-            type: 'command',
-            command:
-              'python3 ~/.config/mosaic/tools/lease-broker/receipt-observer-client.py --runtime claude',
-            timeout: 3,
-          },
-          { type: 'command', command: '~/.config/mosaic/tools/qa/reflect-stop-hook.sh' },
-        ],
-      },
-    ],
-  },
-  enabledPlugins: { 'feature-dev@claude-plugins-official': true },
-};
-
-function fixtureJson(): string {
-  return JSON.stringify(FIXTURE_SETTINGS, null, 2) + '\n';
-}
-
-describe('stripEnforcementHooks', () => {
-  it('removes the PreToolUse mutator-gate trigger entirely', () => {
-    const { settings } = stripEnforcementHooks(FIXTURE_SETTINGS);
-    const hooks = settings['hooks'] as Record<string, unknown[]>;
-    const preToolUse = hooks['PreToolUse'] as Array<{ hooks: Array<{ command: string }> }>;
-    expect(preToolUse.some((t) => t.hooks.some((h) => h.command.includes('mutator-gate.py')))).toBe(
-      false,
-    );
-  });
-
-  it('preserves the sibling prevent-memory-write.sh PreToolUse trigger', () => {
-    const { settings } = stripEnforcementHooks(FIXTURE_SETTINGS);
-    const hooks = settings['hooks'] as Record<string, unknown[]>;
-    const preToolUse = hooks['PreToolUse'] as Array<{ hooks: Array<{ command: string }> }>;
-    expect(
-      preToolUse.some((t) => t.hooks.some((h) => h.command.includes('prevent-memory-write.sh'))),
-    ).toBe(true);
-  });
-
-  it('removes only the receipt-observer-client.py hook from Stop, keeping reflect-stop-hook.sh', () => {
-    const { settings } = stripEnforcementHooks(FIXTURE_SETTINGS);
-    const hooks = settings['hooks'] as Record<string, unknown[]>;
-    const stop = hooks['Stop'] as Array<{ hooks: Array<{ command: string }> }>;
-    const commands = stop.flatMap((t) => t.hooks.map((h) => h.command));
-    expect(commands.some((c) => c.includes('receipt-observer-client.py'))).toBe(false);
-    expect(commands.some((c) => c.includes('reflect-stop-hook.sh'))).toBe(true);
-  });
-
-  it('leaves PreCompact/PostToolUse hooks byte-identical', () => {
-    const { settings } = stripEnforcementHooks(FIXTURE_SETTINGS);
-    const hooks = settings['hooks'] as Record<string, unknown>;
-    expect(hooks['PreCompact']).toEqual(FIXTURE_SETTINGS.hooks.PreCompact);
-    expect(hooks['PostToolUse']).toEqual(FIXTURE_SETTINGS.hooks.PostToolUse);
-  });
-
-  it('reports what it removed', () => {
-    const { removed } = stripEnforcementHooks(FIXTURE_SETTINGS);
-    expect(removed).toContain(`PreToolUse:${ENFORCEMENT_HOOK_MARKERS.preToolUse}`);
-    expect(removed).toContain(`Stop:${ENFORCEMENT_HOOK_MARKERS.stop}`);
-  });
-});
-
-describe('settingsHasEnforcementHooks', () => {
-  it('is true for the unmodified fixture', () => {
-    expect(settingsHasEnforcementHooks(FIXTURE_SETTINGS)).toBe(true);
-  });
-
-  it('is false after stripping', () => {
-    const { settings } = stripEnforcementHooks(FIXTURE_SETTINGS);
-    expect(settingsHasEnforcementHooks(settings)).toBe(false);
-  });
-
-  it('is false for settings with no hooks key at all', () => {
-    expect(settingsHasEnforcementHooks({ model: 'opus' })).toBe(false);
-  });
-});
-
-describe('guardClaudeSettingsWiring', () => {
-  it('probe=false (default, no opt-out): strips enforcement hooks and reports non-zero with a loud, actionable message', () => {
-    const outcome = guardClaudeSettingsWiring(fixtureJson(), {}, { activatable: () => false });
-
-    expect(outcome.exitCode).toBe(1);
-    expect(outcome.wired).toBe(false);
-    expect(settingsHasEnforcementHooks(JSON.parse(outcome.json) as Record<string, unknown>)).toBe(
-      false,
-    );
-    expect(outcome.logs).toHaveLength(1);
-    expect(outcome.logs[0]?.level).toBe('error');
-    expect(outcome.logs[0]?.message).toBe(FAIL_LOUD_MESSAGE);
-    expect(outcome.logs[0]?.message).toMatch(/refusing to wire a dead gate/i);
-    expect(outcome.logs[0]?.message).toMatch(/#869/);
-    expect(outcome.logs[0]?.message).toMatch(/--allow-inactive-enforcement/);
-  });
-
-  it('probe=false + explicit opt-out flag: wires hooks as-is and emits a loud warning', () => {
-    const outcome = guardClaudeSettingsWiring(
-      fixtureJson(),
-      { allowInactiveEnforcement: true },
-      { activatable: () => false },
-    );
-
-    expect(outcome.exitCode).toBe(0);
-    expect(outcome.wired).toBe(true);
-    expect(settingsHasEnforcementHooks(JSON.parse(outcome.json) as Record<string, unknown>)).toBe(
-      true,
-    );
-    expect(outcome.logs).toHaveLength(1);
-    expect(outcome.logs[0]?.level).toBe('warn');
-    expect(outcome.logs[0]?.message).toBe(loudOptOutMessage());
-    expect(outcome.logs[0]?.message).toMatch(/WITHOUT confirmed activation/);
-  });
-
-  it('probe=true: wires hooks normally with no logs, regardless of opt-out', () => {
-    const outcome = guardClaudeSettingsWiring(fixtureJson(), {}, { activatable: () => true });
-
-    expect(outcome.exitCode).toBe(0);
-    expect(outcome.wired).toBe(true);
-    expect(outcome.logs).toHaveLength(0);
-    expect(JSON.parse(outcome.json)).toEqual(FIXTURE_SETTINGS);
-  });
-
-  it('probe=true + opt-out flag set anyway: still wires normally, no spurious warning', () => {
-    const outcome = guardClaudeSettingsWiring(
-      fixtureJson(),
-      { allowInactiveEnforcement: true },
-      { activatable: () => true },
-    );
-
-    expect(outcome.exitCode).toBe(0);
-    expect(outcome.wired).toBe(true);
-    expect(outcome.logs).toHaveLength(0);
-  });
-
-  it('defaults to the real leaseEnforcementActivatable() when no activatable dep is injected', () => {
-    // Deliberately does not assume a fixed true/false value for the real
-    // probe (whether dist/cli.js happens to be built varies by environment —
-    // asserting a hardcoded expectation here would make the test flaky, not
-    // red-first). Instead it proves the wiring is genuinely delegated: the
-    // no-deps call must agree with an explicit call to the same real
-    // predicate, not some other hardcoded value.
-    const reallyActivatable = leaseEnforcementActivatable();
-    const outcome = guardClaudeSettingsWiring(fixtureJson());
-
-    if (reallyActivatable) {
-      expect(outcome.exitCode).toBe(0);
-      expect(outcome.wired).toBe(true);
-    } else {
-      expect(outcome.exitCode).toBe(1);
-      expect(outcome.wired).toBe(false);
-    }
-  });
-});
-
-describe('runInstallOrderingGuard (file-level, temp dirs only)', () => {
-  let dir: string;
-
-  afterEach(() => {
-    if (dir) rmSync(dir, { recursive: true, force: true });
-  });
-
-  function makeSrc(): string {
-    dir = mkdtempSync(join(tmpdir(), 'mosaic-install-ordering-guard-'));
-    const src = join(dir, 'settings.json');
-    writeFileSync(src, fixtureJson());
-    return src;
-  }
-
-  it('probe=false: writes a dest settings.json with hooks stripped and returns exitCode 1', () => {
-    const src = makeSrc();
-    const dest = join(dir, 'claude-settings.json');
-
-    const result = runInstallOrderingGuard(src, dest, {}, { activatable: () => false });
-
-    expect(result.exitCode).toBe(1);
-    expect(result.destWritten).toBe(true);
-    expect(existsSync(dest)).toBe(true);
-    const written = JSON.parse(readFileSync(dest, 'utf-8')) as Record<string, unknown>;
-    expect(settingsHasEnforcementHooks(written)).toBe(false);
-  });
-
-  it('probe=false + opt-out: writes dest with hooks intact and returns exitCode 0', () => {
-    const src = makeSrc();
-    const dest = join(dir, 'claude-settings.json');
-
-    const result = runInstallOrderingGuard(
-      src,
-      dest,
-      { allowInactiveEnforcement: true },
-      { activatable: () => false },
-    );
-
-    expect(result.exitCode).toBe(0);
-    const written = JSON.parse(readFileSync(dest, 'utf-8')) as Record<string, unknown>;
-    expect(settingsHasEnforcementHooks(written)).toBe(true);
-  });
-
-  it('probe=true: writes dest with hooks intact and returns exitCode 0', () => {
-    const src = makeSrc();
-    const dest = join(dir, 'claude-settings.json');
-
-    const result = runInstallOrderingGuard(src, dest, {}, { activatable: () => true });
-
-    expect(result.exitCode).toBe(0);
-    const written = JSON.parse(readFileSync(dest, 'utf-8')) as Record<string, unknown>;
-    expect(settingsHasEnforcementHooks(written)).toBe(true);
-  });
-
-  it('backs up a pre-existing divergent dest before overwriting (copy_file_managed parity)', () => {
-    const src = makeSrc();
-    const dest = join(dir, 'claude-settings.json');
-    writeFileSync(dest, JSON.stringify({ preexisting: true }));
-
-    const result = runInstallOrderingGuard(src, dest, {}, { activatable: () => true });
-
-    expect(result.destWritten).toBe(true);
-    expect(result.backupPath).toBeDefined();
-    expect(existsSync(result.backupPath!)).toBe(true);
-    expect(JSON.parse(readFileSync(result.backupPath!, 'utf-8'))).toEqual({ preexisting: true });
-  });
-
-  it('is a no-op write when dest already matches the guarded content (idempotent)', () => {
-    const src = makeSrc();
-    const dest = join(dir, 'claude-settings.json');
-
-    const first = runInstallOrderingGuard(src, dest, {}, { activatable: () => true });
-    expect(first.destWritten).toBe(true);
-
-    const second = runInstallOrderingGuard(src, dest, {}, { activatable: () => true });
-    expect(second.destWritten).toBe(false);
-    expect(second.backupPath).toBeUndefined();
-  });
-
-  it('never touches the real home directory settings path used by this test file', () => {
-    // Sanity guard for the suite itself: every dest path used above lives
-    // under the mkdtemp() scratch dir, never under homedir()/.claude.
-    expect(dir).toContain('mosaic-install-ordering-guard-');
-  });
-});

packages/mosaic/src/commands/install-ordering-guard.ts

@@ -1,327 +0,0 @@
-/**
- * Install-ordering guard (issue #869, Point-1 card C2).
- *
- * Root cause this exists to guard against (#828 version skew, restated): the
- * framework reseed / install path (`framework/install.sh` →
- * `mosaic-link-runtime-assets` → copies `runtime/claude/settings.json` to
- * `~/.claude/settings.json`) wires the ENFORCEMENT half of the lease broker —
- * the `PreToolUse` `mutator-gate.py` hook and the `Stop`
- * `receipt-observer-client.py` hook — unconditionally. If the ACTIVATION half
- * (a CLI build advertising launch-runtime activation + a running broker
- * supervisor — see `lease-activation-probe.ts`, C1) is absent, the fail-closed
- * gate then denies every tool call with GATE_UNAVAILABLE: a bricked host.
- *
- * This module is the WIRING gate, not the enforcement gate: it decides
- * whether the enforcement hook entries are written into the settings.json
- * that ships to `~/.claude/`. It never touches `mutator-gate.py`'s own
- * fail-closed-on-absent-identity runtime behavior (test-locked in
- * `runtime_tools_unittest.py` / `fail-closed-regression.spec.ts`).
- *
- * Default (no opt-out): NOT activatable → strip the enforcement hook entries
- * from the written settings.json and report a non-zero outcome with a loud,
- * actionable message (see FAIL_LOUD_MESSAGE below).
- *
- * Opt-out: `--allow-inactive-enforcement` (an explicit, per-invocation CLI
- * flag — deliberately NOT an environment variable, so it can never sit as a
- * silently-inherited default in a shell profile). When set on a NOT
- * activatable host, the hooks ARE wired but a loud warning is emitted saying
- * so, and the outcome is reported ok (this is a conscious, informed choice).
- */
-
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname } from 'node:path';
-import type { Command } from 'commander';
-import { leaseEnforcementActivatable } from './lease-activation-probe.js';
-
-// ─── Enforcement hook identification ────────────────────────────────────────
-
-/** Substrings that identify the two enforcement hook commands #828 wired
- * unconditionally. Matches the marker strings documented in
- * `lease-activation-probe.ts`. */
-export const ENFORCEMENT_HOOK_MARKERS = {
-  preToolUse: 'mutator-gate.py',
-  stop: 'receipt-observer-client.py',
-} as const;
-
-interface HookEntry {
-  command?: string;
-  [key: string]: unknown;
-}
-
-interface HookTrigger {
-  matcher?: string;
-  hooks?: HookEntry[];
-  [key: string]: unknown;
-}
-
-type HooksMap = Record<string, HookTrigger[]>;
-
-function cloneJson<T>(value: T): T {
-  return JSON.parse(JSON.stringify(value)) as T;
-}
-
-function commandIncludes(hook: HookEntry, marker: string): boolean {
-  return String(hook.command ?? '').includes(marker);
-}
-
-/**
- * Return a deep clone of `settings` with the enforcement hook entries removed:
- *  - Any `PreToolUse` trigger group containing a `mutator-gate.py` command is
- *    dropped in full (that trigger exists solely to run the gate).
- *  - Within `Stop` trigger groups, only the individual `receipt-observer-client.py`
- *    hook entry is dropped; sibling hooks in the same trigger (e.g.
- *    `reflect-stop-hook.sh`) are preserved.
- * Every other hook (PreCompact/SessionStart revoke-lease, the
- * `prevent-memory-write.sh` PreToolUse trigger, PostToolUse qa/typecheck
- * hooks) is left byte-identical — this function only ever removes the two
- * markers above.
- */
-export function stripEnforcementHooks(settings: Record<string, unknown>): {
-  settings: Record<string, unknown>;
-  removed: string[];
-} {
-  const cloned = cloneJson(settings);
-  const removed: string[] = [];
-  const hooks = cloned['hooks'] as HooksMap | undefined;
-  if (!hooks || typeof hooks !== 'object') {
-    return { settings: cloned, removed };
-  }
-
-  const preToolUse = hooks['PreToolUse'];
-  if (Array.isArray(preToolUse)) {
-    const kept = preToolUse.filter((trigger) => {
-      const hasGate = (trigger.hooks ?? []).some((h) =>
-        commandIncludes(h, ENFORCEMENT_HOOK_MARKERS.preToolUse),
-      );
-      if (hasGate) removed.push('PreToolUse:mutator-gate.py');
-      return !hasGate;
-    });
-    if (kept.length > 0) hooks['PreToolUse'] = kept;
-    else delete hooks['PreToolUse'];
-  }
-
-  const stop = hooks['Stop'];
-  if (Array.isArray(stop)) {
-    const rebuilt: HookTrigger[] = [];
-    for (const trigger of stop) {
-      const innerHooks = trigger.hooks ?? [];
-      const keptHooks = innerHooks.filter((h) => {
-        const isReceiptObserver = commandIncludes(h, ENFORCEMENT_HOOK_MARKERS.stop);
-        if (isReceiptObserver) removed.push('Stop:receipt-observer-client.py');
-        return !isReceiptObserver;
-      });
-      if (keptHooks.length > 0) {
-        rebuilt.push({ ...trigger, hooks: keptHooks });
-      }
-    }
-    if (rebuilt.length > 0) hooks['Stop'] = rebuilt;
-    else delete hooks['Stop'];
-  }
-
-  if (Object.keys(hooks).length === 0) {
-    delete cloned['hooks'];
-  } else {
-    cloned['hooks'] = hooks;
-  }
-
-  return { settings: cloned, removed };
-}
-
-/** True iff `settings` currently wires either enforcement hook. */
-export function settingsHasEnforcementHooks(settings: Record<string, unknown>): boolean {
-  const hooks = settings['hooks'] as HooksMap | undefined;
-  if (!hooks || typeof hooks !== 'object') return false;
-
-  const preToolUse = hooks['PreToolUse'] ?? [];
-  const preHit = preToolUse.some((trigger) =>
-    (trigger.hooks ?? []).some((h) => commandIncludes(h, ENFORCEMENT_HOOK_MARKERS.preToolUse)),
-  );
-  if (preHit) return true;
-
-  const stop = hooks['Stop'] ?? [];
-  return stop.some((trigger) =>
-    (trigger.hooks ?? []).some((h) => commandIncludes(h, ENFORCEMENT_HOOK_MARKERS.stop)),
-  );
-}
-
-// ─── Guard predicate ────────────────────────────────────────────────────────
-
-export const FAIL_LOUD_MESSAGE =
-  '[mosaic] ERROR: enforcement requested but activation half absent — needs a published CLI ' +
-  'carrying launch-runtime activation + a broker supervisor; refusing to wire a dead gate (see #869). ' +
-  'The PreToolUse mutator-gate.py hook and Stop receipt-observer-client.py hook were NOT written to ' +
-  'settings.json. Fix by installing/updating the CLI and broker, then re-run the framework reseed. ' +
-  'To wire anyway (NOT recommended — the fail-closed gate will deny every tool call with ' +
-  'GATE_UNAVAILABLE until activation is restored), re-run with --allow-inactive-enforcement.';
-
-export function loudOptOutMessage(): string {
-  return (
-    '[mosaic] WARNING: wiring lease-enforcement hooks (mutator-gate.py / receipt-observer-client.py) ' +
-    'WITHOUT confirmed activation — --allow-inactive-enforcement was set explicitly. The fail-closed ' +
-    'gate will deny every tool call (GATE_UNAVAILABLE) until the activation half (launch-runtime ' +
-    'activation capability + a running broker supervisor) is present on this host (see #869).'
-  );
-}
-
-export type GuardLogLevel = 'error' | 'warn';
-
-export interface GuardLogLine {
-  level: GuardLogLevel;
-  message: string;
-}
-
-export interface InstallOrderingGuardOptions {
-  /** Explicit, per-invocation opt-out. Never source this from an environment
-   * variable — see module doc. */
-  allowInactiveEnforcement?: boolean;
-}
-
-export interface InstallOrderingGuardDeps {
-  /** Defaults to {@link leaseEnforcementActivatable}. Injectable for tests. */
-  activatable?: () => boolean;
-}
-
-export interface InstallOrderingGuardOutcome {
-  /** The settings.json content to write (pretty-printed, trailing newline). */
-  json: string;
-  /** Whether the enforcement hooks are present in `json`. */
-  wired: boolean;
-  /** 0 = proceed normally; 1 = enforcement was refused (fail-loud default path). */
-  exitCode: 0 | 1;
-  logs: GuardLogLine[];
-}
-
-/**
- * The install-ordering guard: decide whether the enforcement hooks embedded
- * in the Claude settings.json template may be wired into the settings.json
- * actually shipped to `~/.claude/`.
- *
- *   - activatable            → wire as-is. exitCode 0, no logs.
- *   - NOT activatable, no opt-out → strip enforcement hooks. exitCode 1,
- *     one 'error' log with the actionable FAIL_LOUD_MESSAGE.
- *   - NOT activatable, opt-out set → wire as-is anyway. exitCode 0, one
- *     'warn' log making the risk explicit and loud.
- *
- * Pure function: takes the raw settings.json text, returns the text to write
- * plus metadata. No filesystem access — callers (the hidden CLI subcommand
- * below, or a test) own reading/writing so this stays trivially testable with
- * fakes/temp files and never risks touching a real `~/.claude/settings.json`.
- */
-export function guardClaudeSettingsWiring(
-  rawSettingsJson: string,
-  options: InstallOrderingGuardOptions = {},
-  deps: InstallOrderingGuardDeps = {},
-): InstallOrderingGuardOutcome {
-  const parsed = JSON.parse(rawSettingsJson) as Record<string, unknown>;
-  const activatable = deps.activatable ?? leaseEnforcementActivatable;
-  const isActivatable = activatable();
-
-  const serialize = (settings: Record<string, unknown>): string =>
-    JSON.stringify(settings, null, 2) + '\n';
-
-  if (isActivatable) {
-    return {
-      json: serialize(parsed),
-      wired: settingsHasEnforcementHooks(parsed),
-      exitCode: 0,
-      logs: [],
-    };
-  }
-
-  if (options.allowInactiveEnforcement === true) {
-    return {
-      json: serialize(parsed),
-      wired: settingsHasEnforcementHooks(parsed),
-      exitCode: 0,
-      logs: [{ level: 'warn', message: loudOptOutMessage() }],
-    };
-  }
-
-  const { settings: stripped } = stripEnforcementHooks(parsed);
-  return {
-    json: serialize(stripped),
-    wired: settingsHasEnforcementHooks(stripped),
-    exitCode: 1,
-    logs: [{ level: 'error', message: FAIL_LOUD_MESSAGE }],
-  };
-}
-
-// ─── File-level runner (shared by the CLI action + tests) ──────────────────
-
-export interface RunInstallOrderingGuardResult extends InstallOrderingGuardOutcome {
-  destWritten: boolean;
-  backupPath?: string;
-}
-
-/**
- * Read `src`, guard it, and write the result to `dest` — mirroring
- * `copy_file_managed`'s backup-on-change semantics from
- * `mosaic-link-runtime-assets` (skip the write if content is unchanged;
- * back up an existing divergent file once, timestamped). Exported standalone
- * (not only reachable via the CLI action closure) so tests can exercise real
- * file I/O against temp directories without ever touching `~/.claude/`.
- */
-export function runInstallOrderingGuard(
-  src: string,
-  dest: string,
-  options: InstallOrderingGuardOptions = {},
-  deps: InstallOrderingGuardDeps = {},
-): RunInstallOrderingGuardResult {
-  const raw = readFileSync(src, 'utf-8');
-  const outcome = guardClaudeSettingsWiring(raw, options, deps);
-
-  mkdirSync(dirname(dest), { recursive: true });
-
-  const existing = existsSync(dest) ? readFileSync(dest, 'utf-8') : null;
-  let destWritten = false;
-  let backupPath: string | undefined;
-
-  if (existing !== outcome.json) {
-    if (existing !== null) {
-      const stamp = new Date()
-        .toISOString()
-        .replace(/[-:]/g, '')
-        .replace(/\..+$/, '')
-        .replace('T', '');
-      backupPath = `${dest}.mosaic-bak-${stamp}`;
-      writeFileSync(backupPath, existing);
-    }
-    writeFileSync(dest, outcome.json);
-    destWritten = true;
-  }
-
-  return { ...outcome, destWritten, backupPath };
-}
-
-// ─── Hidden CLI bridge (bash → TS) ──────────────────────────────────────────
-
-/** Hidden CLI subcommand name. `mosaic-link-runtime-assets` (bash) invokes
- * this instead of its generic `copy_file_managed` for the settings.json
- * runtime file specifically, so the guard's decision is made by importing
- * `leaseEnforcementActivatable()` directly rather than re-implementing the
- * capability/supervisor probes in shell. Deliberately undocumented (hidden
- * from `--help`) — internal wiring, not a user-facing command. */
-export const INSTALL_ORDERING_GUARD_COMMAND = '__link-claude-settings';
-
-export function registerInstallOrderingGuardCommand(program: Command): void {
-  program
-    .command(`${INSTALL_ORDERING_GUARD_COMMAND} <src> <dest>`, { hidden: true })
-    .description(
-      'Internal: copy the Claude settings.json template, gating enforcement-hook ' +
-        'wiring on lease-activation capability (#869 Point-1 C2)',
-    )
-    .option(
-      '--allow-inactive-enforcement',
-      'Wire enforcement hooks even when activation cannot be confirmed on this host ' +
-        '(explicit, loud, non-default opt-out — see #869)',
-    )
-    .action((src: string, dest: string, opts: { allowInactiveEnforcement?: boolean }) => {
-      const result = runInstallOrderingGuard(src, dest, {
-        allowInactiveEnforcement: opts.allowInactiveEnforcement === true,
-      });
-      for (const line of result.logs) {
-        (line.level === 'error' ? console.error : console.warn)(line.message);
-      }
-      process.exit(result.exitCode);
-    });
-}

packages/mosaic/src/commands/launch.ts

@@ -28,6 +28,7 @@ import { readRegularFileSecure } from '../fleet/secure-file.js';
 import { readPersonaContractBlock } from '../fleet/persona-contract.js';
 import { canonicalizeRoleClass } from './fleet-personas.js';
 import { launchClaudex, type ClaudexHarnessAdapter } from './claudex.js';
+import { runLeaseEnforcementDoctorCheck } from './lease-doctor-check.js';
 
 const MOSAIC_HOME = process.env['MOSAIC_HOME'] ?? join(homedir(), '.config', 'mosaic');
 const MAX_INSTALLED_TOOLS_BYTES = 256 * 1024;
@@ -1237,7 +1238,6 @@ export function registerLaunchCommands(program: Command): void {
   // Direct framework script delegates
   const directCommands: Record<string, { desc: string; script: string }> = {
     init: { desc: 'Generate SOUL.md (agent identity contract)', script: 'mosaic-init' },
-    doctor: { desc: 'Health audit — detect drift and missing files', script: 'mosaic-doctor' },
     sync: { desc: 'Sync skills from canonical source', script: 'mosaic-sync-skills' },
     bootstrap: {
       desc: 'Bootstrap a repo with Mosaic standards',
@@ -1256,4 +1256,67 @@ export function registerLaunchCommands(program: Command): void {
         delegateToScript(fwScript(script), cmd.args);
       });
   }
+
+  // `doctor` — the framework drift audit (bash script) PLUS the #869
+  // Point-1 C5 lease-enforcement activation check (TS, reusing C1's
+  // `leaseEnforcementActivatable()` and C3's `checkBrokerSupervisorHealth()`).
+  // Kept out of the generic `directCommands` loop above because this check
+  // must run and report BEFORE the bash script's own exit, and must be able
+  // to force a non-zero exit on its own — a silent pass on "enforcement
+  // hooks wired but activation absent" would leave a bricked host
+  // undiagnosed (see lease-doctor-check.ts docstring).
+  program
+    .command('doctor')
+    .description('Health audit — detect drift, missing files, and #869 lease-activation gaps')
+    .allowUnknownOption(true)
+    .allowExcessArguments(true)
+    .action(async (_opts: unknown, cmd: Command) => {
+      checkMosaicHome();
+      const leaseCheck = await runLeaseEnforcementDoctorCheck();
+      const leaseCheckFailed = printLeaseDoctorCheck(leaseCheck);
+      runDoctorScriptAndExit(fwScript('mosaic-doctor'), cmd.args, leaseCheckFailed);
+    });
+}
+
+/**
+ * Print the #869 C5 lease-enforcement doctor result using the same
+ * `[mosaic-doctor]` prefix the bash audit script uses, but with a distinct
+ * `[ERROR]` severity token (louder than the script's own `[WARN]`) — this is
+ * a hard, actionable brick warning, not a soft drift warning, and must never
+ * read as just one more line among the script's routine warnings. Silent on
+ * an `ok` result, matching this file's other pre-flight checks
+ * (`checkMosaicHome`, `checkFile`, `checkRuntime`) which only print on
+ * failure. Returns whether the check failed, so the caller can force a
+ * non-zero exit regardless of the bash script's own exit code.
+ */
+function printLeaseDoctorCheck(
+  result: Awaited<ReturnType<typeof runLeaseEnforcementDoctorCheck>>,
+): boolean {
+  if (result.status === 'error') {
+    console.error(`[mosaic-doctor] [ERROR] ${result.message}`);
+    return true;
+  }
+  return false;
+}
+
+/**
+ * Run the bash `mosaic-doctor` audit script (inheriting stdio, same as
+ * {@link delegateToScript}) and exit with a non-zero code if EITHER the
+ * script itself reported failure OR the lease-enforcement check above did —
+ * so `--fail-on-warn` and other script-level exit semantics are preserved,
+ * but the lease-enforcement ERROR can never be masked by an otherwise-green
+ * script run.
+ */
+function runDoctorScriptAndExit(scriptPath: string, args: string[], forceFailure: boolean): never {
+  if (!existsSync(scriptPath)) {
+    console.error(`[mosaic] Script not found: ${scriptPath}`);
+    process.exit(1);
+  }
+  let scriptExitCode = 0;
+  try {
+    execFileSync('bash', [scriptPath, ...args], { stdio: 'inherit', env: process.env });
+  } catch (err) {
+    scriptExitCode = (err as { status?: number }).status ?? 1;
+  }
+  process.exit(forceFailure ? 1 : scriptExitCode);
 }

packages/mosaic/src/commands/lease-doctor-check.spec.ts

@@ -0,0 +1,196 @@
+import { describe, expect, it } from 'vitest';
+import {
+  detectEnforcementHooksWired,
+  runLeaseEnforcementDoctorCheck,
+} from './lease-doctor-check.js';
+
+/**
+ * Red-first tests for issue #869 Point-1 C5 — the `mosaic doctor`
+ * lease-enforcement surfacing check.
+ *
+ * Root cause under test: enforcement hooks (`mutator-gate.py`,
+ * `receipt-observer-client.py`) can be wired into `~/.claude/settings.json`
+ * on a host where C1's `leaseEnforcementActivatable()` is false and/or C3's
+ * `checkBrokerSupervisorHealth()` reports unhealthy. That combination fails
+ * closed correctly, but must be surfaced LOUDLY by `mosaic doctor` rather
+ * than silently passing — this test suite exercises the three primary
+ * branches (wired+not-activatable, wired+healthy, not-wired) plus the
+ * broker-unhealthy variant.
+ *
+ * Every dependency is injected — no real `~/.claude/settings.json` and no
+ * real broker are ever touched.
+ */
+
+const WIRED_SETTINGS_JSON = JSON.stringify({
+  hooks: {
+    PreToolUse: [
+      {
+        matcher: '.*',
+        hooks: [
+          {
+            type: 'command',
+            command: 'python3 ~/.config/mosaic/tools/lease-broker/mutator-gate.py --runtime claude',
+          },
+        ],
+      },
+    ],
+    Stop: [
+      {
+        hooks: [
+          {
+            type: 'command',
+            command:
+              'python3 ~/.config/mosaic/tools/lease-broker/receipt-observer-client.py --runtime claude --latest-entry',
+          },
+        ],
+      },
+    ],
+  },
+});
+
+const UNWIRED_SETTINGS_JSON = JSON.stringify({
+  hooks: {
+    PostToolUse: [
+      {
+        matcher: 'Edit|MultiEdit|Write',
+        hooks: [{ type: 'command', command: '~/.config/mosaic/tools/qa/qa-hook-stdin.sh' }],
+      },
+    ],
+  },
+});
+
+describe('detectEnforcementHooksWired', () => {
+  it('detects the mutator-gate + receipt-observer markers when wired', () => {
+    const result = detectEnforcementHooksWired(JSON.parse(WIRED_SETTINGS_JSON));
+    expect(result.wired).toBe(true);
+    expect(result.matchedMarkers).toEqual(
+      expect.arrayContaining(['mutator-gate.py', 'receipt-observer-client.py']),
+    );
+  });
+
+  it('reports not wired when no enforcement markers are present', () => {
+    const result = detectEnforcementHooksWired(JSON.parse(UNWIRED_SETTINGS_JSON));
+    expect(result.wired).toBe(false);
+    expect(result.matchedMarkers).toEqual([]);
+  });
+
+  it('reports not wired for an empty settings object', () => {
+    expect(detectEnforcementHooksWired({}).wired).toBe(false);
+  });
+
+  it('detects wiring from just ONE marker (partial wiring is still dangerous)', () => {
+    const onlyMutatorGate = JSON.stringify({
+      hooks: {
+        PreToolUse: [
+          {
+            hooks: [{ type: 'command', command: 'python3 .../mutator-gate.py --runtime claude' }],
+          },
+        ],
+      },
+    });
+    const result = detectEnforcementHooksWired(JSON.parse(onlyMutatorGate));
+    expect(result.wired).toBe(true);
+    expect(result.matchedMarkers).toEqual(['mutator-gate.py']);
+  });
+});
+
+describe('runLeaseEnforcementDoctorCheck', () => {
+  it('RED: wired + not-activatable ⇒ LOUD error (not a silent pass)', async () => {
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => WIRED_SETTINGS_JSON,
+      isActivatable: () => false,
+      isBrokerHealthy: async () => true,
+    });
+
+    expect(result.status).toBe('error');
+    expect(result.wired).toBe(true);
+    expect(result.activatable).toBe(false);
+    expect(result.message).toMatch(/activation absent/);
+    expect(result.message).toMatch(/#869/);
+    expect(result.message.toLowerCase()).toMatch(/brick/);
+  });
+
+  it('wired + activatable + broker-unhealthy ⇒ LOUD error', async () => {
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => WIRED_SETTINGS_JSON,
+      isActivatable: () => true,
+      isBrokerHealthy: async () => false,
+    });
+
+    expect(result.status).toBe('error');
+    expect(result.wired).toBe(true);
+    expect(result.brokerHealthy).toBe(false);
+    expect(result.message).toMatch(/broker not healthy/);
+  });
+
+  it('wired + not-activatable + broker-unhealthy ⇒ LOUD error citing both reasons', async () => {
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => WIRED_SETTINGS_JSON,
+      isActivatable: () => false,
+      isBrokerHealthy: async () => false,
+    });
+
+    expect(result.status).toBe('error');
+    expect(result.message).toMatch(/activation absent/);
+    expect(result.message).toMatch(/broker not healthy/);
+  });
+
+  it('GREEN: wired + activatable + broker-healthy ⇒ ok', async () => {
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => WIRED_SETTINGS_JSON,
+      isActivatable: () => true,
+      isBrokerHealthy: async () => true,
+    });
+
+    expect(result.status).toBe('ok');
+    expect(result.wired).toBe(true);
+    expect(result.activatable).toBe(true);
+    expect(result.brokerHealthy).toBe(true);
+  });
+
+  it('GREEN: not-wired ⇒ ok, no false alarm (activation/broker never probed)', async () => {
+    let activatableCalled = false;
+    let brokerCalled = false;
+
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => UNWIRED_SETTINGS_JSON,
+      isActivatable: () => {
+        activatableCalled = true;
+        return false;
+      },
+      isBrokerHealthy: async () => {
+        brokerCalled = true;
+        return false;
+      },
+    });
+
+    expect(result.status).toBe('ok');
+    expect(result.wired).toBe(false);
+    expect(result.activatable).toBeNull();
+    expect(result.brokerHealthy).toBeNull();
+    // Not wired must short-circuit — never even consult activation/broker.
+    expect(activatableCalled).toBe(false);
+    expect(brokerCalled).toBe(false);
+  });
+
+  it('GREEN: settings.json absent ⇒ ok (never touches a real file — readSettingsRaw is injected)', async () => {
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => null,
+      isActivatable: () => false,
+      isBrokerHealthy: async () => false,
+    });
+
+    expect(result.status).toBe('ok');
+    expect(result.wired).toBe(false);
+  });
+
+  it('GREEN: malformed settings.json ⇒ ok (parse errors are not this card’s failure class)', async () => {
+    const result = await runLeaseEnforcementDoctorCheck({
+      readSettingsRaw: () => '{ not valid json',
+      isActivatable: () => false,
+      isBrokerHealthy: async () => false,
+    });
+
+    expect(result.status).toBe('ok');
+  });
+});

packages/mosaic/src/commands/lease-doctor-check.ts

@@ -0,0 +1,210 @@
+/**
+ * Lease-enforcement doctor check (issue #869, Point-1 card C5).
+ *
+ * Root cause this guards against (#828 version skew, the same one C1/C3
+ * exist for): the Claude Code enforcement hooks (`mutator-gate.py` gating
+ * PreToolUse, `receipt-observer-client.py` observing Stop) can be WIRED into
+ * `~/.claude/settings.json` on a host where the ACTIVATION half is absent —
+ * no compatible CLI build (C1's `leaseEnforcementActivatable()`), or no
+ * healthy broker supervisor (C3's `checkBrokerSupervisorHealth()`). That
+ * combination is a silent brick: every gated tool call denies with
+ * GATE_UNAVAILABLE, and the fail-closed behavior is *correct* — but nothing
+ * surfaces it to an operator running `mosaic doctor` on an already-bricked
+ * host.
+ *
+ * This module answers one question — "if I ran right now, would I be
+ * bricked?" — by combining:
+ *
+ *   1. wiring detection: does `~/.claude/settings.json` reference either
+ *      enforcement-hook marker (`mutator-gate.py` / `receipt-observer-client.py`)?
+ *   2. C1's `leaseEnforcementActivatable()` — could activation satisfy
+ *      enforcement if it were exercised right now?
+ *   3. C3's `checkBrokerSupervisorHealth()` — is the broker supervisor
+ *      actually healthy?
+ *
+ * Not wired ⇒ ok (nothing to activate, no false alarm). Wired AND activatable
+ * AND broker-healthy ⇒ ok. Wired AND (NOT activatable OR broker unhealthy) ⇒
+ * a LOUD, actionable error — this module never silently passes that state.
+ *
+ * Every dependency (settings read, activation probe, broker-health check) is
+ * injectable so tests can drive every branch without ever touching a real
+ * `~/.claude/settings.json` or a real broker.
+ */
+
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { leaseEnforcementActivatable, type ActivationProbeDeps } from './lease-activation-probe.js';
+import {
+  checkBrokerSupervisorHealth,
+  resolveBrokerSupervisorPaths,
+} from '../lease-broker/broker-supervisor.js';
+import { DEFAULT_MOSAIC_HOME } from '../constants.js';
+
+/** Markers identifying the two enforcement-hook halves wired via the
+ * framework reseed. Either marker's presence in `settings.json` means
+ * enforcement is wired — a host can be bricked with just one half present. */
+const ENFORCEMENT_HOOK_MARKERS = ['mutator-gate.py', 'receipt-observer-client.py'] as const;
+
+export interface EnforcementHooksWiredResult {
+  readonly wired: boolean;
+  readonly matchedMarkers: readonly string[];
+}
+
+/**
+ * Detect whether the Claude Code enforcement hooks (mutator-gate /
+ * receipt-observer) are wired into an already-parsed `settings.json`.
+ * Pure/testable — takes parsed JSON, never touches the filesystem itself.
+ */
+export function detectEnforcementHooksWired(settings: unknown): EnforcementHooksWiredResult {
+  const serialized = JSON.stringify(settings ?? {});
+  const matchedMarkers = ENFORCEMENT_HOOK_MARKERS.filter((marker) => serialized.includes(marker));
+  return { wired: matchedMarkers.length > 0, matchedMarkers };
+}
+
+export interface LeaseDoctorCheckDeps {
+  /**
+   * Read raw `settings.json` text; return `null` if the file is absent.
+   * Defaults to reading the real `~/.claude/settings.json`. ALWAYS inject a
+   * fake in tests — never point this at a real host's settings file.
+   */
+  readSettingsRaw?: () => string | null;
+  /** Defaults to {@link leaseEnforcementActivatable} (C1). Inject for tests. */
+  isActivatable?: (deps?: ActivationProbeDeps) => boolean;
+  /**
+   * Defaults to a real broker-supervisor health check (C3) rooted at
+   * `mosaicHome`. Inject for tests — never point this at a real broker.
+   */
+  isBrokerHealthy?: () => Promise<boolean>;
+  /** Mosaic home used to resolve default broker-supervisor paths. Defaults to
+   * `$MOSAIC_HOME` or `~/.config/mosaic`. */
+  mosaicHome?: string;
+}
+
+export type LeaseDoctorCheckStatus = 'ok' | 'error';
+
+export interface LeaseDoctorCheckResult {
+  readonly status: LeaseDoctorCheckStatus;
+  readonly wired: boolean;
+  /** `null` when hooks are not wired (activation/broker were never probed). */
+  readonly activatable: boolean | null;
+  /** `null` when hooks are not wired (activation/broker were never probed). */
+  readonly brokerHealthy: boolean | null;
+  readonly message: string;
+}
+
+function defaultReadSettingsRaw(): string | null {
+  const settingsPath = join(homedir(), '.claude', 'settings.json');
+  try {
+    return readFileSync(settingsPath, 'utf8');
+  } catch (error) {
+    if (isEnoent(error)) return null;
+    throw error;
+  }
+}
+
+function isEnoent(error: unknown): boolean {
+  return (
+    typeof error === 'object' &&
+    error !== null &&
+    'code' in error &&
+    (error as NodeJS.ErrnoException).code === 'ENOENT'
+  );
+}
+
+function defaultMosaicHome(): string {
+  return process.env['MOSAIC_HOME'] ?? DEFAULT_MOSAIC_HOME;
+}
+
+async function defaultIsBrokerHealthy(mosaicHome: string): Promise<boolean> {
+  // `frameworkRoot` only feeds SOURCE paths (unit/wrapper/daemon file
+  // locations for `applyBrokerSupervisor`); the health check only reads
+  // TARGET paths (`unitTargetPath`, `socketPath`), both derived from
+  // `mosaicHome`/`homeDir`/`env` alone. Passing `mosaicHome` again here is
+  // therefore safe and never resolves or touches a framework checkout.
+  const paths = resolveBrokerSupervisorPaths({ mosaicHome, frameworkRoot: mosaicHome });
+  return (await checkBrokerSupervisorHealth(paths)).healthy;
+}
+
+/**
+ * Surface the #869 fail-closed brick scenario as a LOUD `mosaic doctor`
+ * error. See module docstring for the full decision table.
+ */
+export async function runLeaseEnforcementDoctorCheck(
+  deps: LeaseDoctorCheckDeps = {},
+): Promise<LeaseDoctorCheckResult> {
+  const readSettingsRaw = deps.readSettingsRaw ?? defaultReadSettingsRaw;
+  const mosaicHome = deps.mosaicHome ?? defaultMosaicHome();
+  const isActivatable = deps.isActivatable ?? leaseEnforcementActivatable;
+  const isBrokerHealthy = deps.isBrokerHealthy ?? (() => defaultIsBrokerHealthy(mosaicHome));
+
+  const raw = readSettingsRaw();
+  if (raw === null) {
+    return {
+      status: 'ok',
+      wired: false,
+      activatable: null,
+      brokerHealthy: null,
+      message: 'Claude Code settings.json not found — lease-enforcement hooks not wired.',
+    };
+  }
+
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    // Malformed settings.json is a different failure class than this card
+    // owns (C2 guards install-time writes); report ok rather than
+    // misattributing a parse error to the #869 activation gap.
+    return {
+      status: 'ok',
+      wired: false,
+      activatable: null,
+      brokerHealthy: null,
+      message:
+        'Claude Code settings.json could not be parsed — skipping lease-enforcement wiring check.',
+    };
+  }
+
+  const { wired, matchedMarkers } = detectEnforcementHooksWired(parsed);
+  if (!wired) {
+    return {
+      status: 'ok',
+      wired: false,
+      activatable: null,
+      brokerHealthy: null,
+      message:
+        'Lease-enforcement hooks not wired in ~/.claude/settings.json — nothing to activate.',
+    };
+  }
+
+  const activatable = isActivatable();
+  const brokerHealthy = await isBrokerHealthy();
+
+  if (activatable && brokerHealthy) {
+    return {
+      status: 'ok',
+      wired: true,
+      activatable,
+      brokerHealthy,
+      message: `Lease-enforcement hooks wired (${matchedMarkers.join(', ')}) — activation capability present and broker healthy.`,
+    };
+  }
+
+  const reasons: string[] = [];
+  if (!activatable) reasons.push('activation absent (leaseEnforcementActivatable() is false)');
+  if (!brokerHealthy) {
+    reasons.push('broker not healthy (checkBrokerSupervisorHealth() reports unhealthy)');
+  }
+
+  return {
+    status: 'error',
+    wired: true,
+    activatable,
+    brokerHealthy,
+    message:
+      `Lease-enforcement hooks (${matchedMarkers.join(', ')}) are wired in ~/.claude/settings.json, but ${reasons.join(' and ')}. ` +
+      'Every gated tool call will fail closed and BRICK this agent (see #869). ' +
+      'Remediate by activating the lease-broker supervisor (systemd unit + socket) or by removing the enforcement hooks from ~/.claude/settings.json.',
+  };
+}

packages/mosaic/src/stages/finalize.ts

@@ -13,37 +13,22 @@ import {
   type SkillSyncResult as ClaudeSkillSyncResult,
 } from '../commands/skill.js';
 
-/**
- * Link runtime assets. Returns a warning string when the install-ordering
- * guard (#869 Point-1 C2) reported a degraded outcome — i.e. the
- * lease-enforcement hooks were NOT wired into ~/.claude/settings.json because
- * this host could not confirm it can activate them — so the caller can
- * surface it via `p.warn(...)` instead of it being swallowed by `stdio:
- * 'pipe'`. Non-fatal either way: the wizard always continues.
- */
-function linkRuntimeAssets(mosaicHome: string, skipClaudeHooks: boolean): string | undefined {
+function linkRuntimeAssets(mosaicHome: string, skipClaudeHooks: boolean): void {
   const script = join(mosaicHome, 'bin', 'mosaic-link-runtime-assets');
-  if (!existsSync(script)) return undefined;
-  try {
-    const result = spawnSync('bash', [script], {
-      timeout: 30000,
-      stdio: 'pipe',
-      encoding: 'utf-8',
-      env: {
-        ...process.env,
-        ...(skipClaudeHooks ? { MOSAIC_SKIP_CLAUDE_HOOKS: '1' } : {}),
-      },
-    });
-    if (result.status !== 0) {
-      const stderr = (result.stderr ?? '').trim();
-      return (
-        stderr || 'Runtime asset linking reported a non-zero exit (see mosaic doctor for details).'
-      );
+  if (existsSync(script)) {
+    try {
+      spawnSync('bash', [script], {
+        timeout: 30000,
+        stdio: 'pipe',
+        env: {
+          ...process.env,
+          ...(skipClaudeHooks ? { MOSAIC_SKIP_CLAUDE_HOOKS: '1' } : {}),
+        },
+      });
+    } catch {
+      // Non-fatal: wizard continues
     }
-  } catch {
-    // Non-fatal: wizard continues
   }
-  return undefined;
 }
 
 interface SyncSkillsResult {
@@ -216,7 +201,7 @@ export async function finalizeStage(
   // copied into ~/.claude/ while still linking the other runtime files.
   spin.update('Linking runtime assets...');
   const skipClaudeHooks = state.hooks?.accepted === false;
-  const linkWarning = linkRuntimeAssets(state.mosaicHome, skipClaudeHooks);
+  linkRuntimeAssets(state.mosaicHome, skipClaudeHooks);
 
   // 4. Sync skills (only installs the user-selected subset)
   let skillsResult: SyncSkillsResult = { success: true, installedCount: 0 };
@@ -251,10 +236,6 @@ export async function finalizeStage(
 
   spin.stop('Installation complete');
 
-  // Surface the install-ordering guard's outcome (#869 Point-1 C2) — never
-  // silent, even though the wizard continues either way.
-  if (linkWarning) p.warn(linkWarning);
-
   // Report skill install failure clearly (non-fatal but user should know)
   if (!skillsResult.success && skillsResult.failureReason) {
     p.warn(skillsResult.failureReason);