{
  "checker": {
    "details": {
      "argv": [
        "/usr/local/bin/tandem-engine",
        "tool",
        "--json",
        "{\"tool\":\"glob\",\"args\":{\"pattern\":\"docs/ENGINE_CLI*.md\"}}"
      ],
      "kind": "cli",
      "needs_browser": false,
      "needs_credentials": false,
      "returncode": 0,
      "scope": "product operation",
      "stderr": "",
      "stdout": "{\n  \"metadata\": {\n    \"count\": 2,\n    \"effective_cwd\": \"/workspace\",\n    \"effective_pattern\": \"/workspace/docs/ENGINE_CLI*.md\",\n    \"pattern\": \"docs/ENGINE_CLI*.md\",\n    \"workspace_root\": null\n  },\n  \"output\": \"/workspace/docs/ENGINE_CLI.md\\n/workspace/docs/ENGINE_CLI_AWESOME_EXAMPLES.md\"\n}",
      "working": true
    },
    "status": "PASS"
  },
  "deviations": [
    "Ubuntu default nodejs is v18; README requires Node 20+. Installed Node 22 via n.",
    "npm install -g @frumu/tandem left the native binary missing: postinstall fetch hit api.github.com EAI_AGAIN under Node 20 (fetch ignores the proxy). Re-ran scripts/install.js under Node 22 with NODE_USE_ENV_PROXY=1, which succeeded.",
    "Tried tandem-engine tool write/read/workspace_list_files: denied by policy (approval required / outside workspace root). Used glob instead, which is allowed read-only.",
    "Session API (/session) requires the engine's local token at /root/.local/share/tandem/security/engine_api_token; not used in the probe because the probe is a CLI operation."
  ],
  "main_blocker": null,
  "operation": "Ran the built-in glob tool via `tandem-engine tool --json` (documented in docs/ENGINE_CLI.md) against the repo and got back docs/ENGINE_CLI.md and docs/ENGINE_CLI_AWESOME_EXAMPLES.md. Also started the headless engine (`tandem-engine serve --hostname 127.0.0.1 --port 39731`) and confirmed /global/health returns healthy:true, ready:true.",
  "operation_scope": "Read-only glob tool only. The write, read, and workspace_list_files tools fail closed in non-interactive CLI mode (requires approval / path outside workspace_root), so no file create-and-read-back was performed. Session/prompt API and provider-backed runs were not exercised (no provider credentials; not supplied).",
  "outcome": "working",
  "steps": [
    "apt-get install nodejs npm curl (Ubuntu Node was v18)",
    "npm install -g n && n 20 && n 22 (Node 22 needed so NODE_USE_ENV_PROXY is honored by the postinstall downloader)",
    "npm install -g @frumu/tandem (README: Programmatic API / Headless engine)",
    "node scripts/install.js in the installed package (postinstall retry; downloaded tandem-engine-linux-x64 v0.7.2 from GitHub)",
    "tandem-engine serve --hostname 127.0.0.1 --port 39731 (background); curl /global/health",
    "tandem-engine tool --json '{\"tool\":\"glob\",\"args\":{\"pattern\":\"docs/ENGINE_CLI*.md\"}}'"
  ],
  "stuck_step": null,
  "suggested_fix": null
}