@ashlr/hub 2.2.0

package/dist/core/digest/store.js

@@ -0,0 +1,223 @@
+/**
+ * core/digest/store.ts — M29 digest artifact persistence.
+ *
+ * Pure FS layer under `~/.ashlr/digests/`. Mirrors the M26 learn store / M27
+ * quality store: atomic tmp-write + rename, never throws on reads, filename
+ * stems are epoch-ms so lexicographic order == chronological order, and the
+ * read path is bounded by MAX_DIGESTS.
+ *
+ * HARD SAFETY INVARIANTS (M29) enforced here:
+ *  - READ-ONLY AGGREGATION: this module WRITES only under digestsDir()
+ *    (~/.ashlr/digests/). It NEVER writes CONFIG_PATH, never mutates a repo
+ *    working tree, never applies/approves a proposal. The verifier proves it by
+ *    asserting every write target resolves under digestsDir().
+ *  - NO OUTWARD ACTION: persistence is local disk only. ZERO network calls.
+ *  - BOUNDED + NEVER-THROWS: every read/write is wrapped; failures degrade to
+ *    null / []. listDigests reads at most MAX_DIGESTS files.
+ *
+ * Each digest is persisted as TWO sibling artifacts sharing a stem:
+ *   <stem>.json  — the canonical DigestReport (used as the prior for deltas).
+ *   <stem>.md    — the human-readable markdown rendering (renderDigestText).
+ * The markdown is advisory; loadPreviousDigest reads only the JSON.
+ */
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { digestsDir } from '../config.js';
+// ---------------------------------------------------------------------------
+// Caps
+// ---------------------------------------------------------------------------
+/** Max digest snapshots listDigests will read (bounds I/O). */
+const MAX_DIGESTS = 200;
+// ---------------------------------------------------------------------------
+// Path helpers (re-resolved at call time so tests can relocate HOME)
+// ---------------------------------------------------------------------------
+/**
+ * Re-export of {@link digestsDir} for store-local convenience and to mirror the
+ * `reportsDir()` shape of the learn/quality stores. `~/.ashlr/digests`.
+ * Created lazily by {@link saveDigest} — this function does NOT create it.
+ */
+export function digestsDirPath() {
+    return digestsDir();
+}
+/** Ensure a directory exists, silently creating it if needed. Best-effort. */
+function ensureDir(dir) {
+    // TODO(M29): mkdir recursive inside try/catch; a subsequent write fails
+    // gracefully in its own try/catch if this no-ops.
+    try {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+    }
+    catch {
+        // Best-effort.
+    }
+}
+/**
+ * Derive a filename-safe, chronologically-sortable stem from an ISO ts.
+ * Epoch-ms keeps lexicographic order == chronological order; falls back to a
+ * sanitized ISO string when the timestamp is unparseable.
+ */
+function digestStem(generatedAt) {
+    // Mirror reportStem in quality/store.ts: epoch-ms keeps lexicographic order ==
+    // chronological order; fall back to a sanitized ISO string when unparseable.
+    const ms = Date.parse(generatedAt);
+    if (Number.isFinite(ms))
+        return String(ms);
+    return generatedAt.replace(/[^\w.-]+/g, '-');
+}
+/**
+ * Pick a collision-free stem under `dir`: if `<stem>.json` already exists (a
+ * second digest built in the SAME millisecond), append a bounded `-N` suffix so
+ * the second artifact does not silently clobber the first. The first writer in a
+ * fresh dir keeps the plain `<stem>` (preserving chronological lexicographic
+ * ordering). Mirrors uniqueDest() in quality/store.ts. Best-effort: on probe
+ * exhaustion it returns the plain stem (last-writer-wins, as before). Both the
+ * `.json` and its sibling `.md` share the returned stem, so they stay paired.
+ */
+function uniqueStem(dir, stem) {
+    try {
+        if (!existsSync(join(dir, `${stem}.json`)))
+            return stem;
+        for (let i = 1; i <= 1000; i++) {
+            const candidate = `${stem}-${i}`;
+            if (!existsSync(join(dir, `${candidate}.json`)))
+                return candidate;
+        }
+    }
+    catch {
+        // existsSync should not throw, but fall through to the plain stem defensively.
+    }
+    return stem;
+}
+// ---------------------------------------------------------------------------
+// Persist
+// ---------------------------------------------------------------------------
+/**
+ * Persist a DigestReport (JSON) + its markdown rendering under
+ * `~/.ashlr/digests/`. Atomic tmp-write + rename for each artifact.
+ *
+ * MUST NOT write anywhere outside digestsDir(). Returns the absolute paths of
+ * the artifacts written (null on failure). Never throws.
+ *
+ * @param report   the digest to persist.
+ * @param markdown the pre-rendered markdown body (from renderDigestText).
+ */
+export function saveDigest(report, markdown) {
+    const dir = digestsDir();
+    ensureDir(dir);
+    // Collision-resistant: a second digest built in the SAME millisecond gets a
+    // `-N` suffix rather than overwriting the first artifact. The json + md share
+    // this one resolved stem so the pair stays together.
+    const stem = uniqueStem(dir, digestStem(report.generatedAt));
+    // Each artifact is written atomically (tmp-write + rename) and independently —
+    // a failure on one degrades that path to null without affecting the other.
+    // Both targets resolve under digestsDir(); nothing is written elsewhere.
+    let jsonPath = null;
+    try {
+        const dest = join(dir, `${stem}.json`);
+        const tmp = dest + '.tmp';
+        writeFileSync(tmp, JSON.stringify(report, null, 2) + '\n', 'utf8');
+        renameSync(tmp, dest);
+        jsonPath = dest;
+    }
+    catch {
+        jsonPath = null;
+    }
+    let markdownPath = null;
+    try {
+        const dest = join(dir, `${stem}.md`);
+        const tmp = dest + '.tmp';
+        writeFileSync(tmp, markdown, 'utf8');
+        renameSync(tmp, dest);
+        markdownPath = dest;
+    }
+    catch {
+        markdownPath = null;
+    }
+    return { jsonPath, markdownPath };
+}
+// ---------------------------------------------------------------------------
+// Load
+// ---------------------------------------------------------------------------
+/** Light structural guard so we never return garbage from the store. */
+function isDigest(parsed) {
+    // Mirror isReport in learn/store.ts — validate generatedAt:string, date:string,
+    // window in {'7d','30d'}, portfolio:object.
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return false;
+    }
+    const r = parsed;
+    return (typeof r['generatedAt'] === 'string' &&
+        typeof r['date'] === 'string' &&
+        (r['window'] === '7d' || r['window'] === '30d') &&
+        typeof r['portfolio'] === 'object' &&
+        r['portfolio'] !== null);
+}
+/**
+ * List persisted DigestReport snapshots, most-recent first by `generatedAt`.
+ * Reads at most MAX_DIGESTS JSON files. Never throws; returns [] on any error
+ * and silently skips unreadable/malformed files.
+ */
+export function listDigests() {
+    try {
+        const dir = digestsDir();
+        if (!existsSync(dir))
+            return [];
+        let files;
+        try {
+            // Filename stems are epoch-ms, so a lexicographic descending sort of the
+            // filenames already orders newest-first; sort here so the slice keeps the
+            // MOST-RECENT MAX_DIGESTS rather than an arbitrary directory order. We read
+            // ONLY *.json artifacts (skip the sibling *.md and any *.tmp leftovers).
+            files = readdirSync(dir)
+                .filter((f) => f.endsWith('.json') && !f.endsWith('.tmp'))
+                .sort((a, b) => (a < b ? 1 : a > b ? -1 : 0))
+                .slice(0, MAX_DIGESTS);
+        }
+        catch {
+            return [];
+        }
+        const digests = [];
+        for (const file of files) {
+            try {
+                const raw = readFileSync(join(dir, file), 'utf8');
+                const parsed = JSON.parse(raw);
+                if (isDigest(parsed))
+                    digests.push(parsed);
+            }
+            catch {
+                // Unreadable or malformed — skip silently.
+            }
+        }
+        // Most-recent first by generatedAt (ISO strings sort lexicographically).
+        digests.sort((a, b) => a.generatedAt < b.generatedAt ? 1 : a.generatedAt > b.generatedAt ? -1 : 0);
+        return digests;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Load the most recent previously-persisted digest (the prior used to compute
+ * day-over-day deltas), or null when none exists.
+ *
+ * `before` (optional ISO ts) excludes digests at/after it so a freshly-saved
+ * current digest is not compared against itself.
+ */
+export function loadPreviousDigest(before) {
+    try {
+        const all = listDigests();
+        if (all.length === 0)
+            return null;
+        if (before === undefined)
+            return all[0] ?? null;
+        for (const d of all) {
+            if (d.generatedAt < before)
+                return d;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/core/digest/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/core/digest/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,+DAA+D;AAC/D,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,SAAS,SAAS,CAAC,GAAW;IAC5B,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,WAAmB;IACrC,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY;IAC3C,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,MAAoB,EACpB,QAAgB;IAEhB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,4EAA4E;IAC5E,8EAA8E;IAC9E,qDAAqD;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAE7D,+EAA+E;IAC/E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;QAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;QAC1B,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,wEAAwE;AACxE,SAAS,QAAQ,CAAC,MAAe;IAC/B,gFAAgF;IAChF,4CAA4C;IAC5C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,OAAO,CACL,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ;QACpC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;QAC7B,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;QAC/C,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;QAClC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,CACxB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,yEAAyE;YACzE,0EAA0E;YAC1E,4EAA4E;YAC5E,yEAAyE;YACzE,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;iBACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpB,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3E,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,WAAW,GAAG,MAAM;gBAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/doctor-fix.d.ts

@@ -0,0 +1,21 @@
+/**
+ * core/doctor-fix.ts — self-healing `ashlr doctor --fix`.
+ *
+ * fixDoctor(cfg): run runDoctor, then for each failing/warn check whose id
+ * is in the SAFE-FIXABLE set, apply ONE safe, local, non-destructive
+ * remediation and record a FixAction. Every other failing/warn check gets a
+ * FixAction with applied:false, manual:true and a one-line guidance detail.
+ *
+ * GUARDRAILS (non-negotiable):
+ *  - ONLY safe, local, non-destructive fixes.
+ *  - NEVER delete or overwrite existing user data.
+ *  - NEVER auto-download models (pull stays explicit).
+ *  - NEVER modify secrets or shell profiles.
+ *  - NEVER do anything outward/network.
+ *  - Editor-config writes are backup-first + idempotent (M18 wireEditor).
+ *  - Each fix is reversible-ish and logged in FixAction.detail.
+ *  - Ambiguous → leave as manual.
+ *  - Never throws.
+ */
+import type { AshlrConfig, FixAction } from './types.js';
+export declare function fixDoctor(cfg: AshlrConfig): Promise<FixAction[]>;

package/dist/core/doctor-fix.js

@@ -0,0 +1,440 @@
+/**
+ * core/doctor-fix.ts — self-healing `ashlr doctor --fix`.
+ *
+ * fixDoctor(cfg): run runDoctor, then for each failing/warn check whose id
+ * is in the SAFE-FIXABLE set, apply ONE safe, local, non-destructive
+ * remediation and record a FixAction. Every other failing/warn check gets a
+ * FixAction with applied:false, manual:true and a one-line guidance detail.
+ *
+ * GUARDRAILS (non-negotiable):
+ *  - ONLY safe, local, non-destructive fixes.
+ *  - NEVER delete or overwrite existing user data.
+ *  - NEVER auto-download models (pull stays explicit).
+ *  - NEVER modify secrets or shell profiles.
+ *  - NEVER do anything outward/network.
+ *  - Editor-config writes are backup-first + idempotent (M18 wireEditor).
+ *  - Each fix is reversible-ish and logged in FixAction.detail.
+ *  - Ambiguous → leave as manual.
+ *  - Never throws.
+ */
+import { existsSync, mkdirSync, symlinkSync, lstatSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { runDoctor } from './doctor.js';
+import { defaultConfig, saveConfig } from './config.js';
+import { buildIndex, writeIndex } from './index-engine.js';
+import { detectEditors, wireEditor } from './integrations/editors.js';
+// ---------------------------------------------------------------------------
+// SAFE-FIXABLE check ids
+// ---------------------------------------------------------------------------
+const SAFE_FIXABLE = new Set([
+    'config',
+    'index',
+    'local-bin',
+    'genome-memory',
+    'mcp-plugin',
+]);
+// ---------------------------------------------------------------------------
+// Individual fix helpers — each returns a FixAction, never throws
+// ---------------------------------------------------------------------------
+/**
+ * Fix: config — create missing ~/.ashlr/config.json from defaultConfig().
+ * ONLY when ABSENT; never overwrites an existing config (even a broken one —
+ * that's a manual fix to preserve user data).
+ */
+async function fixConfig(_cfg, checkDetail) {
+    const base = {
+        checkId: 'config',
+        label: 'Create missing config file',
+    };
+    // Resolve the config path from homedir() at call time so a moving HOME (e.g.
+    // in tests, or a relocated home dir) is honored — must match the path that
+    // saveConfig() actually writes to. The exported CONFIG_PATH constant is
+    // resolved once at module load and would point at a stale home here.
+    const configPath = join(homedir(), '.ashlr', 'config.json');
+    // If the file exists (even if unreadable/malformed), do NOT overwrite.
+    if (existsSync(configPath)) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Config file exists but may be invalid (${checkDetail}). Fix JSON syntax errors manually in ${configPath}.`,
+        };
+    }
+    try {
+        const defaults = defaultConfig();
+        saveConfig(defaults);
+        return {
+            ...base,
+            applied: true,
+            manual: false,
+            detail: `Created ${configPath} from defaults.`,
+        };
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not create ${configPath}: ${String(err)}. Create it manually by running: ashlr init`,
+        };
+    }
+}
+/**
+ * Fix: index — rebuild a stale/missing ~/.ashlr/index.json.
+ * buildIndex + writeIndex is non-destructive (regenerates derived data only).
+ */
+async function fixIndex(cfg) {
+    const base = {
+        checkId: 'index',
+        label: 'Rebuild stale/missing index',
+    };
+    try {
+        const index = buildIndex(cfg);
+        writeIndex(index);
+        return {
+            ...base,
+            applied: true,
+            manual: false,
+            detail: `Rebuilt index (${index.items.length} item${index.items.length !== 1 ? 's' : ''}) and wrote to ~/.ashlr/index.json.`,
+        };
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not rebuild index: ${String(err)}. Run: ashlr index`,
+        };
+    }
+}
+/**
+ * Fix: local-bin — create the ashlr → ~/.local/bin/ashlr symlink when missing
+ * and the source binary resolves. Never modifies shell profiles.
+ *
+ * If ~/.local/bin/ashlr already exists (broken symlink or stale file), we
+ * do NOT overwrite it — that's a manual decision.
+ *
+ * PATH presence is a separate concern — always manual (shell profile edit).
+ */
+async function fixLocalBin() {
+    const base = {
+        checkId: 'local-bin',
+        label: 'Create ~/.local/bin/ashlr symlink',
+    };
+    const localBinDir = join(homedir(), '.local', 'bin');
+    const symlinkPath = join(localBinDir, 'ashlr');
+    // If something already exists at the symlink path (any kind), leave it.
+    if (existsSync(symlinkPath)) {
+        // Symlink exists and resolves — check PATH separately (manual).
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `${symlinkPath} already exists. If ashlr is not on PATH, add to your shell profile: export PATH="$HOME/.local/bin:$PATH"`,
+        };
+    }
+    // Also check lstat: catches broken symlinks that existsSync misses.
+    try {
+        lstatSync(symlinkPath);
+        // lstat succeeded but existsSync returned false → broken symlink exists.
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `${symlinkPath} is a broken symlink. Remove it manually then re-run: ashlr doctor --fix`,
+        };
+    }
+    catch {
+        // lstatSync threw → path truly does not exist, safe to create.
+    }
+    // Resolve the source binary path from this module's location.
+    // __filename → <repo>/dist/core/doctor-fix.js → source is <repo>/bin/ashlr
+    let sourceBin;
+    try {
+        const thisFile = fileURLToPath(import.meta.url);
+        // dist/core/doctor-fix.js → repo root is two levels up
+        const repoRoot = resolve(dirname(thisFile), '..', '..');
+        sourceBin = join(repoRoot, 'bin', 'ashlr');
+        if (!existsSync(sourceBin)) {
+            return {
+                ...base,
+                applied: false,
+                manual: true,
+                detail: `Could not locate bin/ashlr (expected at ${sourceBin}). Run install.sh to create the symlink manually.`,
+            };
+        }
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not resolve bin/ashlr path: ${String(err)}. Run install.sh to create the symlink manually.`,
+        };
+    }
+    // Ensure ~/.local/bin exists.
+    try {
+        mkdirSync(localBinDir, { recursive: true });
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not create ${localBinDir}: ${String(err)}.`,
+        };
+    }
+    // Create the symlink.
+    try {
+        symlinkSync(sourceBin, symlinkPath);
+        // Success detail intentionally does NOT mention shell-profile PATH edits —
+        // creating the symlink is the safe local fix; ensuring ~/.local/bin is on
+        // PATH stays a manual shell-profile concern surfaced by the doctor report.
+        return {
+            ...base,
+            applied: true,
+            manual: false,
+            detail: `Created symlink: ${symlinkPath} -> ${sourceBin}.`,
+        };
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not create symlink at ${symlinkPath}: ${String(err)}. Run install.sh manually.`,
+        };
+    }
+}
+/**
+ * Fix: genome-memory — create ~/.ashlr/genome/ directory when missing.
+ * mkdir-only; never seeds or edits entries.
+ */
+async function fixGenomeMemory() {
+    const base = {
+        checkId: 'genome-memory',
+        label: 'Create genome memory directory',
+    };
+    const genomeDir = join(homedir(), '.ashlr', 'genome');
+    if (existsSync(genomeDir)) {
+        // Dir exists but genome is empty — that's a content issue, not a structural one.
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Genome directory exists at ${genomeDir} but is empty. Run: ashlr learn  to seed memory.`,
+        };
+    }
+    try {
+        mkdirSync(genomeDir, { recursive: true });
+        return {
+            ...base,
+            applied: true,
+            manual: false,
+            detail: `Created genome directory at ${genomeDir}.`,
+        };
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not create genome directory at ${genomeDir}: ${String(err)}.`,
+        };
+    }
+}
+/**
+ * Fix: mcp-plugin — register the ashlr MCP gateway into a detected editor
+ * config via wireEditor (backup-first, idempotent — M18 pattern).
+ *
+ * Tries each detected editor in order; stops at the first successful wire.
+ * If no editor is detected, leaves as manual.
+ */
+async function fixMcpPlugin() {
+    const base = {
+        checkId: 'mcp-plugin',
+        label: 'Register ashlr MCP gateway in editor config',
+    };
+    let detectedEditors;
+    try {
+        detectedEditors = detectEditors();
+    }
+    catch (err) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: `Could not detect editors: ${String(err)}. Run: ashlr init --wire`,
+        };
+    }
+    if (detectedEditors.length === 0) {
+        return {
+            ...base,
+            applied: false,
+            manual: true,
+            detail: 'No supported editors detected (claude/codex/cursor). Install one and run: ashlr init --wire',
+        };
+    }
+    const errors = [];
+    for (const editor of detectedEditors) {
+        // wireEditor only accepts the three known targets; skip unknown values.
+        if (editor !== 'claude' && editor !== 'codex' && editor !== 'cursor')
+            continue;
+        try {
+            const result = await wireEditor(editor, {});
+            if (result.ok) {
+                return {
+                    ...base,
+                    applied: true,
+                    manual: false,
+                    detail: `Wired ashlr MCP gateway into ${editor} config: ${result.detail}`,
+                };
+            }
+            errors.push(`${editor}: ${result.detail}`);
+        }
+        catch (err) {
+            errors.push(`${editor}: ${String(err)}`);
+        }
+    }
+    // All attempts failed.
+    return {
+        ...base,
+        applied: false,
+        manual: true,
+        detail: `Could not auto-wire MCP plugin (${errors.join('; ')}). Run: ashlr init --wire`,
+    };
+}
+/**
+ * Produce a manual-only FixAction for a check that has no safe auto-fix.
+ * Uses the check's existing `fix` hint as guidance.
+ */
+function manualAction(checkId, label, fix) {
+    return {
+        checkId,
+        label,
+        applied: false,
+        manual: true,
+        detail: fix ?? `Manual action required — see: ashlr doctor for details.`,
+    };
+}
+// ---------------------------------------------------------------------------
+// fixDoctor
+// ---------------------------------------------------------------------------
+/**
+ * Run runDoctor(cfg), then for each failing or warn check:
+ *  - If the check id is in SAFE_FIXABLE: apply the safe automated remediation.
+ *  - Otherwise: return a manual FixAction with the check's fix hint.
+ *
+ * Pass-status checks produce no FixAction.
+ * Returns FixAction[] in check display order.
+ * Never throws.
+ */
+/**
+ * H5 CHANGE 1 — `doctor --fix` orphan-sweep hook. Reclaims STALE crash-leftover
+ * sandbox worktrees (the same primitive the daemon runs at start + `sandbox gc`
+ * exposes). LOCAL + non-destructive: sweepOrphanSandboxes routes every removal
+ * through removeSandbox's containment guards (re-derived safe path + branch; a
+ * tampered/out-of-namespace entry is refused git ops, local-dir cleanup only)
+ * and the conservative ORPHAN_STALE_MS guard means a LIVE in-flight worktree is
+ * NEVER reclaimed — only genuine crash leftovers. Pushes nothing, opens no PR,
+ * applies no proposal. Lazy-imports the build-optional worktree module and never
+ * throws (degrades to a manual note). Returns a synthetic FixAction.
+ */
+async function fixSandboxOrphans() {
+    const checkId = 'sandbox-orphans';
+    const label = 'Reclaim stale orphan sandboxes';
+    try {
+        const wt = await import('./sandbox/worktree.js');
+        const swept = wt.sweepOrphanSandboxes({ staleMs: wt.ORPHAN_STALE_MS });
+        return {
+            checkId,
+            label,
+            applied: swept.length > 0,
+            manual: false,
+            detail: swept.length === 0
+                ? 'No stale orphan sandboxes to reclaim.'
+                : `Reclaimed ${swept.length} stale orphan sandbox(es): ${swept.join(', ')}`,
+        };
+    }
+    catch (err) {
+        return {
+            checkId,
+            label,
+            applied: false,
+            manual: true,
+            detail: `Could not sweep orphan sandboxes: ${String(err)}. Try: ashlr sandbox gc`,
+        };
+    }
+}
+export async function fixDoctor(cfg) {
+    let report;
+    try {
+        report = await runDoctor(cfg);
+    }
+    catch (err) {
+        // runDoctor itself is documented to never throw, but belt-and-suspenders.
+        return [
+            {
+                checkId: '_internal',
+                label: 'Run doctor',
+                applied: false,
+                manual: true,
+                detail: `Could not run doctor: ${String(err)}. Try: ashlr doctor`,
+            },
+        ];
+    }
+    const actions = [];
+    for (const check of report.checks) {
+        // Pass checks need no action.
+        if (check.status === 'pass')
+            continue;
+        if (!SAFE_FIXABLE.has(check.id)) {
+            // Not in the safe-fixable set → always manual.
+            actions.push(manualAction(check.id, check.label, check.fix));
+            continue;
+        }
+        // Apply the appropriate safe fix.
+        let action;
+        try {
+            switch (check.id) {
+                case 'config':
+                    action = await fixConfig(cfg, check.detail);
+                    break;
+                case 'index':
+                    action = await fixIndex(cfg);
+                    break;
+                case 'local-bin':
+                    action = await fixLocalBin();
+                    break;
+                case 'genome-memory':
+                    action = await fixGenomeMemory();
+                    break;
+                case 'mcp-plugin':
+                    action = await fixMcpPlugin();
+                    break;
+                default:
+                    // Should not be reachable given the SAFE_FIXABLE guard above.
+                    action = manualAction(check.id, check.label, check.fix);
+            }
+        }
+        catch (err) {
+            // Belt-and-suspenders: individual fix helpers should never throw,
+            // but if one does, degrade to manual rather than crashing.
+            action = {
+                checkId: check.id,
+                label: check.label,
+                applied: false,
+                manual: true,
+                detail: `Fix failed unexpectedly: ${String(err)}. Manual action: ${check.fix ?? 'see ashlr doctor'}`,
+            };
+        }
+        actions.push(action);
+    }
+    // H5 CHANGE 1 — always-run orphan sweep (independent of doctor checks): reclaim
+    // stale crash-leftover sandboxes. Safe + local + non-destructive (see helper).
+    actions.push(await fixSandboxOrphans());
+    return actions;
+}
+//# sourceMappingURL=doctor-fix.js.map