@codyswann/lisa 4.84.11 → 4.86.0

package/dist/cli/doctor-session-manager-pending.d.ts

@@ -0,0 +1,17 @@
+import { type Finding } from "./doctor-session-manager-trust.js";
+/** What the pending-human scan adds to the check. */
+export interface PendingHumanReport {
+    /** One line listing the waiting items, or undefined when there are none. */
+    readonly note: string | undefined;
+    readonly findings: readonly Finding[];
+}
+/**
+ * List the items pending a human and warn about unmarked ones.
+ * @param targetPath - Project root
+ * @param block - Merged `sessionManager` block
+ * @param read - Text reader
+ * @param now - Clock
+ * @returns The note and findings
+ */
+export declare function pendingHumanReport(targetPath: string, block: Record<string, unknown>, read: (file: string) => Promise<string>, now: () => Date): Promise<PendingHumanReport>;
+//# sourceMappingURL=doctor-session-manager-pending.d.ts.map

package/dist/cli/doctor-session-manager-pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-pending.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-pending.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,KAAK,OAAO,EAGb,MAAM,mCAAmC,CAAC;AAgB3C,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;CACvC;AA0ED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACvC,GAAG,EAAE,MAAM,IAAI,GACd,OAAO,CAAC,kBAAkB,CAAC,CAgC7B"}

package/dist/cli/doctor-session-manager-pending.js

@@ -0,0 +1,130 @@
+/**
+ * Items waiting on a human, for the session-manager doctor check
+ * (CodySwannGT/lisa#4555, part 3).
+ *
+ * The manager marks an item that needs a person and keeps dispatching others.
+ * Doctor lists what is waiting so an operator sees it without the tracker, and
+ * warns about one failure only it can see from outside: a question recorded in
+ * the ledger more than one cycle `interval` ago whose tracker mark was never
+ * read back (`markedAt: null`). The manager records the question before it
+ * writes the mark, so this is a cycle that crashed or was stopped mid-way and
+ * has not finished the job since, and nobody on the tracker knows the item is
+ * waiting.
+ *
+ * Only the ref, kind and age are printed, never the question text: it came
+ * from a worker or a ticket and could carry anything.
+ */
+import * as path from "node:path";
+import { isRecord, readJson, } from "./doctor-session-manager-trust.js";
+/** The cycle interval when `sessionManager.interval` is absent. */
+const DEFAULT_INTERVAL_MS = 5 * 60_000;
+const MINUTE_MS = 60_000;
+const HOUR_MS = 60 * MINUTE_MS;
+const DAY_MS = 24 * HOUR_MS;
+const UNIT_MS = {
+    s: 1000,
+    m: MINUTE_MS,
+    h: HOUR_MS,
+    d: DAY_MS,
+};
+/**
+ * Parse a cycle interval such as `5m`; anything else is the default.
+ * @param value - `sessionManager.interval`
+ * @returns Interval in milliseconds
+ */
+function intervalMs(value) {
+    const match = typeof value === "string" ? /^(\d+)([smhd])$/.exec(value) : null;
+    if (!match)
+        return DEFAULT_INTERVAL_MS;
+    return Number(match[1]) * (UNIT_MS[match[2] ?? "m"] ?? MINUTE_MS);
+}
+/**
+ * A short age such as `3h` or `20m`.
+ * @param ms - Age in milliseconds
+ * @returns Age text
+ */
+function age(ms) {
+    if (ms >= DAY_MS)
+        return `${Math.floor(ms / DAY_MS)}d`;
+    if (ms >= HOUR_MS)
+        return `${Math.floor(ms / HOUR_MS)}h`;
+    return `${Math.max(0, Math.floor(ms / MINUTE_MS))}m`;
+}
+/**
+ * The waiting items in a parsed ledger, oldest first.
+ * @param ledger - Parsed ledger.json
+ * @param now - Current time in ms
+ * @returns Waiting items
+ */
+function waitingItems(ledger, now) {
+    const items = isRecord(ledger.items) ? ledger.items : {};
+    const rows = Object.entries(items).flatMap(([ref, item]) => {
+        const question = isRecord(item) ? item.pendingQuestion : undefined;
+        if (!isRecord(question))
+            return [];
+        const asked = Date.parse(String(question.askedAt ?? ""));
+        return [
+            {
+                ref,
+                kind: typeof question.kind === "string" ? question.kind : "worker-question",
+                ageMs: Number.isNaN(asked) ? 0 : now - asked,
+                marked: typeof question.markedAt === "string",
+            },
+        ];
+    });
+    return [...rows].sort((a, b) => b.ageMs - a.ageMs);
+}
+/**
+ * Why the ledger could not be loaded: unparseable JSON, or a read that
+ * failed (permissions, a directory in its place), told apart so the
+ * operator fixes the right thing. Only the error code is shown.
+ * @param error - What reading or parsing threw
+ * @returns Phrase completing "<file> …"
+ */
+function ledgerProblem(error) {
+    if (error instanceof SyntaxError)
+        return "is not valid JSON";
+    const code = isRecord(error) && typeof error.code === "string" ? error.code : undefined;
+    return code === undefined
+        ? "could not be read"
+        : `could not be read (${code})`;
+}
+/**
+ * List the items pending a human and warn about unmarked ones.
+ * @param targetPath - Project root
+ * @param block - Merged `sessionManager` block
+ * @param read - Text reader
+ * @param now - Clock
+ * @returns The note and findings
+ */
+export async function pendingHumanReport(targetPath, block, read, now) {
+    const file = path.join(targetPath, ".lisa", "session-manager", "ledger.json");
+    const loaded = await readJson(read, file).then(value => ({ ledger: value, problem: undefined }), (error) => ({ ledger: undefined, problem: ledgerProblem(error) }));
+    if (loaded.problem !== undefined) {
+        return {
+            note: undefined,
+            findings: [
+                {
+                    status: "warn",
+                    text: `${file} ${loaded.problem}, so doctor cannot list the items waiting on a human; the manager also refuses it until it is repaired`,
+                },
+            ],
+        };
+    }
+    const ledger = loaded.ledger;
+    const waiting = ledger === undefined ? [] : waitingItems(ledger, now().getTime());
+    if (waiting.length === 0)
+        return { note: undefined, findings: [] };
+    const limit = intervalMs(block.interval);
+    const unmarked = waiting.filter(item => !item.marked && item.ageMs > limit);
+    return {
+        note: `${waiting.length} pending a human: ${waiting
+            .map(item => `${item.ref} (${item.kind}, ${age(item.ageMs)})`)
+            .join(", ")}`,
+        findings: unmarked.map(item => ({
+            status: "warn",
+            text: `${item.ref} has waited ${age(item.ageMs)} for a human but was never marked human-needed on the tracker, so nobody there knows; check the manager is running (session-manager.mjs status) and let its next cycle mark it`,
+        })),
+    };
+}
+//# sourceMappingURL=doctor-session-manager-pending.js.map

package/dist/cli/doctor-session-manager-pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-pending.js","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-pending.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEL,QAAQ,EACR,QAAQ,GACT,MAAM,mCAAmC,CAAC;AAE3C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,CAAC,GAAG,MAAM,CAAC;AAEvC,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC;AAC/B,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC;AAE5B,MAAM,OAAO,GAAqC;IAChD,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,OAAO;IACV,CAAC,EAAE,MAAM;CACV,CAAC;AASF;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GACT,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,mBAAmB,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAS,GAAG,CAAC,EAAU;IACrB,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;IACvD,IAAI,EAAE,IAAI,OAAO;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACzD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC;AACvD,CAAC;AAUD;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAA+B,EAAE,GAAW;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO;YACL;gBACE,GAAG;gBACH,IAAI,EACF,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB;gBACvE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK;gBAC5C,MAAM,EAAE,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;aAC9C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,mBAAmB,CAAC;IAC7D,MAAM,IAAI,GACR,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO,IAAI,KAAK,SAAS;QACvB,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,sBAAsB,IAAI,GAAG,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,KAA8B,EAC9B,IAAuC,EACvC,GAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAC5C,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAChD,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAC3E,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE;gBACR;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,wGAAwG;iBACxI;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GACX,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC5E,OAAO;QACL,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,qBAAqB,OAAO;aAChD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,EAAE,MAAe;YACvB,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,eAAe,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gLAAgL;SAChO,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-session-manager-token.d.ts

@@ -0,0 +1,69 @@
+import { type Finding } from "./doctor-session-manager-trust.js";
+/** Resolved inputs the Telegram findings read. */
+export interface TelegramContext {
+    readonly claudeDir: string;
+    readonly sharedDir: string;
+    readonly env: NodeJS.ProcessEnv;
+    readonly read: (file: string) => Promise<string>;
+    readonly statFile: (file: string) => Promise<{
+        readonly mode: number;
+    }>;
+    /** The configured secrets provider, or undefined when none (or `env`). */
+    readonly secretsProvider: string | undefined;
+    /** The provider secret name for this manager. */
+    readonly secretName: string;
+}
+/**
+ * The provider secret name for a manager: `TELEGRAM_BOT_TOKEN_<NAME>` with
+ * the name upper-snaked. Must agree with the session-manager CLI's
+ * `telegramSecretName` (token-store.mjs); a test pins the two together.
+ * @param managerName - `sessionManager.name`
+ * @returns Secret name
+ */
+export declare function telegramSecretNameFor(managerName: unknown): string;
+/**
+ * The secrets provider the session-manager CLI will use for this project, or
+ * undefined when it uses none (`env`, or no provider at all). Decided exactly
+ * the way the CLI's `loadTokenSecrets` does through `lisa-secrets-access`'s
+ * `readConfig`: only the committed `.lisa.config.json` counts (the local
+ * override is never read for `secrets`), its `secrets.provider` defaulting
+ * to `env`; with no committed file at all, the environment fallback
+ * (`LISA_TENANT` or `LISA_SECRETS_NAMESPACE` names a tenant, and
+ * `LISA_PROVIDER` / `LISA_SECRETS_PROVIDER` its provider, default
+ * `bitwarden`). A test pins this to the CLI. Known gap: with no config file
+ * at the root the CLI also looks under `LISA_PROJECT_DIR` /
+ * `CLAUDE_PROJECT_DIR`; doctor only looks at the project it was pointed at.
+ * @param targetPath - Project root
+ * @param read - Text reader
+ * @param env - Doctor's environment
+ * @returns Provider name, or undefined for none
+ */
+export declare function secretsProviderAt(targetPath: string, read: (file: string) => Promise<string>, env: NodeJS.ProcessEnv): Promise<string | undefined>;
+/**
+ * Resolve the configured state dir to an absolute path, expanding `~`.
+ * @param raw - Configured `notify.stateDir`
+ * @param home - Home directory
+ * @param projectRoot - Base for a relative path
+ * @returns Absolute path, or undefined when unset
+ */
+export declare function resolveStateDir(raw: unknown, home: string, projectRoot: string): string | undefined;
+/**
+ * The plaintext-token findings that hold with no notification channel too
+ * (the spec's "doctor flags any plaintext token file it finds"): an exported
+ * `TELEGRAM_BOT_TOKEN*` variable, by name only, and a token file in the
+ * shared Telegram state dir, by existence only (never read). The Telegram
+ * requirements themselves (state dir, plugin scope, `TELEGRAM_STATE_DIR`)
+ * are skipped, since no bot is configured.
+ * @param ctx - The shared dir, environment and mode reader
+ * @returns Findings
+ */
+export declare function plaintextTokenFindings(ctx: Pick<TelegramContext, "sharedDir" | "env" | "statFile">): Promise<readonly Finding[]>;
+/**
+ * Every Telegram finding: the state dir and its token file, the user-scope
+ * plugin and shared default dir, and exported Telegram variables.
+ * @param ctx - Resolved inputs
+ * @param stateDir - Absolute state dir, or undefined when unset
+ * @returns Findings
+ */
+export declare function telegramFindings(ctx: TelegramContext, stateDir: string | undefined): Promise<readonly Finding[]>;
+//# sourceMappingURL=doctor-session-manager-token.d.ts.map

package/dist/cli/doctor-session-manager-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-token.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-token.ts"],"names":[],"mappings":"AA0BA,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,mCAAmC,CAAC;AAY3C,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM,CAKlE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACvC,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAyBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS,CAMpB;AAuID;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC,GAC3D,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAa7B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAM7B"}

package/dist/cli/doctor-session-manager-token.js

@@ -0,0 +1,264 @@
+/**
+ * Telegram findings for the session-manager notifications doctor check
+ * (#4448), split out of `doctor-session-manager` when Telegram became optional
+ * (#4555). With no notification channel only {@link plaintextTokenFindings}
+ * runs: a plaintext token is worth flagging whether or not a bot is set up.
+ *
+ * The manager is the only Claude session that may poll the project's Telegram
+ * bot. Two sessions polling one bot steal each other's messages, and a worker
+ * that inherits the token can impersonate the manager. Setup and `start`
+ * enforce isolation when they run; these findings catch drift afterwards: a
+ * plugin later enabled at user scope, a token copied into the shared default
+ * dir, a token exported from a shell profile, or a loosened file mode.
+ *
+ * Where the token lives (#4555): with a secrets provider configured
+ * (`secrets.provider` set and not `env`) it belongs in the provider as
+ * `TELEGRAM_BOT_TOKEN_<NAME>`, so a plaintext token file in the state dir is
+ * a leftover that `store-token` migrates (and `start` refuses to run while
+ * it holds a `TELEGRAM_BOT_TOKEN` line; doctor only stats it, so it says so
+ * rather than claiming the file is refused outright). With no provider that file is still how the token is stored, and
+ * it is flagged as plaintext. Doctor never reads the vault: it cannot prove
+ * the secret exists, only that no plaintext copy is left.
+ *
+ * Token files are only ever `stat`-ed, never read, so the token value cannot
+ * reach the detail text; environment values are reported by name only.
+ */
+import * as path from "node:path";
+import { isRecord, modeOf, readJson, } from "./doctor-session-manager-trust.js";
+const PLUGIN_ID = "telegram@claude-plugins-official";
+const TOKEN_FILE = ".env";
+/** The plugin's token variable; any `TELEGRAM_BOT_TOKEN*` name is flagged. */
+const TOKEN_VAR = "TELEGRAM_BOT_TOKEN";
+const STATE_DIR_VAR = "TELEGRAM_STATE_DIR";
+/** Group + other permission bits are the low six bits of a file mode. */
+const GROUP_OTHER_SPAN = 0o100;
+/** All permission bits (owner, group, other) are the low nine. */
+const PERMISSION_SPAN = 0o1000;
+/**
+ * The provider secret name for a manager: `TELEGRAM_BOT_TOKEN_<NAME>` with
+ * the name upper-snaked. Must agree with the session-manager CLI's
+ * `telegramSecretName` (token-store.mjs); a test pins the two together.
+ * @param managerName - `sessionManager.name`
+ * @returns Secret name
+ */
+export function telegramSecretNameFor(managerName) {
+    const suffix = String(managerName)
+        .toUpperCase()
+        .replaceAll(/[^A-Z0-9]+/g, "_");
+    return `${TOKEN_VAR}_${suffix}`;
+}
+/**
+ * The secrets provider the session-manager CLI will use for this project, or
+ * undefined when it uses none (`env`, or no provider at all). Decided exactly
+ * the way the CLI's `loadTokenSecrets` does through `lisa-secrets-access`'s
+ * `readConfig`: only the committed `.lisa.config.json` counts (the local
+ * override is never read for `secrets`), its `secrets.provider` defaulting
+ * to `env`; with no committed file at all, the environment fallback
+ * (`LISA_TENANT` or `LISA_SECRETS_NAMESPACE` names a tenant, and
+ * `LISA_PROVIDER` / `LISA_SECRETS_PROVIDER` its provider, default
+ * `bitwarden`). A test pins this to the CLI. Known gap: with no config file
+ * at the root the CLI also looks under `LISA_PROJECT_DIR` /
+ * `CLAUDE_PROJECT_DIR`; doctor only looks at the project it was pointed at.
+ * @param targetPath - Project root
+ * @param read - Text reader
+ * @param env - Doctor's environment
+ * @returns Provider name, or undefined for none
+ */
+export async function secretsProviderAt(targetPath, read, env) {
+    const committed = await readJson(read, path.join(targetPath, ".lisa.config.json"));
+    const provider = committed === undefined
+        ? providerFromEnvironment(env)
+        : committedProvider(committed);
+    return provider === "env" ? undefined : provider;
+}
+/**
+ * `secrets.provider` in the committed config, defaulting to `env`.
+ * @param committed - Parsed `.lisa.config.json`
+ * @returns Provider name
+ */
+function committedProvider(committed) {
+    const secrets = committed.secrets;
+    const provider = isRecord(secrets) ? secrets.provider : undefined;
+    return typeof provider === "string" ? provider : "env";
+}
+/**
+ * The provider `readConfig` falls back to with no config file.
+ * @param env - Environment
+ * @returns Provider name (`env` when no tenant is named)
+ */
+function providerFromEnvironment(env) {
+    const tenant = (env.LISA_TENANT ?? env.LISA_SECRETS_NAMESPACE ?? "").trim();
+    if (tenant === "")
+        return "env";
+    const named = (env.LISA_PROVIDER ?? env.LISA_SECRETS_PROVIDER ?? "").trim();
+    return named === "" ? "bitwarden" : named;
+}
+/**
+ * Resolve the configured state dir to an absolute path, expanding `~`.
+ * @param raw - Configured `notify.stateDir`
+ * @param home - Home directory
+ * @param projectRoot - Base for a relative path
+ * @returns Absolute path, or undefined when unset
+ */
+export function resolveStateDir(raw, home, projectRoot) {
+    if (typeof raw !== "string" || raw.trim() === "")
+        return undefined;
+    const dir = raw.trim();
+    if (dir === "~")
+        return home;
+    if (dir.startsWith("~/"))
+        return path.resolve(home, dir.slice(2));
+    return path.resolve(projectRoot, dir);
+}
+/**
+ * Findings about the configured per-project state dir and its token file.
+ * @param ctx - Resolved inputs
+ * @param stateDir - Absolute state dir, or undefined when unset
+ * @returns Findings
+ */
+async function stateDirFindings(ctx, stateDir) {
+    if (stateDir === undefined) {
+        return [
+            {
+                status: "fail",
+                text: "sessionManager.notify.stateDir is not set; run /lisa:setup:session-manager to give this project its own Telegram state dir",
+            },
+        ];
+    }
+    if (stateDir === ctx.sharedDir) {
+        return [
+            {
+                status: "fail",
+                text: `notify.stateDir is the shared default ${ctx.sharedDir}, so every Telegram session on this machine would poll one bot; point it at a per-project dir such as ${ctx.sharedDir}-<project>`,
+            },
+        ];
+    }
+    return tokenFileFindings(ctx, path.join(stateDir, TOKEN_FILE));
+}
+/**
+ * Findings about the plaintext token file, which means different things with
+ * and without a secrets provider.
+ * @param ctx - Resolved inputs
+ * @param tokenFile - The token file in the state dir
+ * @returns Findings
+ */
+async function tokenFileFindings(ctx, tokenFile) {
+    const mode = await modeOf(ctx.statFile, tokenFile);
+    const provider = ctx.secretsProvider;
+    if (provider !== undefined) {
+        return mode === undefined
+            ? []
+            : [
+                {
+                    status: "warn",
+                    text: `a plaintext token file ${tokenFile} is left over, but the token belongs in ${provider} as ${ctx.secretName}; run session-manager.mjs store-token to move it there (it verifies the copy, then deletes the file), because start refuses to run while that file holds a TELEGRAM_BOT_TOKEN line`,
+                },
+            ];
+    }
+    if (mode === undefined) {
+        return [
+            {
+                status: "warn",
+                text: `token file ${tokenFile} is missing, so the manager cannot start; store the bot token with /lisa:setup:session-manager`,
+            },
+        ];
+    }
+    const plaintext = {
+        status: "warn",
+        text: `token file ${tokenFile} holds the bot token in plaintext because no secrets provider is configured; configure secrets.provider (see lisa-secrets-access), then run session-manager.mjs store-token to move it into the provider`,
+    };
+    if (mode % GROUP_OTHER_SPAN === 0)
+        return [plaintext];
+    const octal = (mode % PERMISSION_SPAN).toString(8).padStart(3, "0");
+    return [
+        plaintext,
+        {
+            status: "warn",
+            text: `token file ${tokenFile} has mode 0${octal}, open to other users; run chmod 600 ${tokenFile}`,
+        },
+    ];
+}
+/**
+ * Findings about the user-scope plugin and the shared default token file.
+ * @param ctx - Resolved inputs
+ * @returns Findings
+ */
+async function userScopeFindings(ctx) {
+    const settings = await readJson(ctx.read, path.join(ctx.claudeDir, "settings.json"));
+    const plugins = settings?.enabledPlugins;
+    const sharedToken = path.join(ctx.sharedDir, TOKEN_FILE);
+    return [
+        ...(isRecord(plugins) && plugins[PLUGIN_ID] === true
+            ? [
+                {
+                    status: "warn",
+                    text: `${PLUGIN_ID} is enabled at user scope, so every Claude session polls the bot; run claude plugin disable ${PLUGIN_ID} -s user (the manager enables it for itself)`,
+                },
+            ]
+            : []),
+        ...((await modeOf(ctx.statFile, sharedToken)) === undefined
+            ? []
+            : [
+                {
+                    status: "warn",
+                    text: `a token file exists in the shared default dir (${sharedToken}); move it to the per-project state dir and delete it`,
+                },
+            ]),
+    ];
+}
+/**
+ * Findings for Telegram variables exported in doctor's own shell.
+ * @param env - Doctor's environment
+ * @param includeStateDir - Also flag `TELEGRAM_STATE_DIR` (Telegram only)
+ * @returns Findings, naming each variable but never its value
+ */
+function exportedFindings(env, includeStateDir = true) {
+    return Object.keys(env)
+        .filter(name => (includeStateDir && name === STATE_DIR_VAR) ||
+        name.startsWith(TOKEN_VAR))
+        .filter(name => (env[name] ?? "") !== "")
+        .sort((a, b) => a.localeCompare(b))
+        .map(name => ({
+        status: "warn",
+        text: `${name} is set in this shell's environment, so workers may inherit it; remove the export from your shell profile`,
+    }));
+}
+/**
+ * The plaintext-token findings that hold with no notification channel too
+ * (the spec's "doctor flags any plaintext token file it finds"): an exported
+ * `TELEGRAM_BOT_TOKEN*` variable, by name only, and a token file in the
+ * shared Telegram state dir, by existence only (never read). The Telegram
+ * requirements themselves (state dir, plugin scope, `TELEGRAM_STATE_DIR`)
+ * are skipped, since no bot is configured.
+ * @param ctx - The shared dir, environment and mode reader
+ * @returns Findings
+ */
+export async function plaintextTokenFindings(ctx) {
+    const sharedToken = path.join(ctx.sharedDir, TOKEN_FILE);
+    return [
+        ...exportedFindings(ctx.env, false),
+        ...((await modeOf(ctx.statFile, sharedToken)) === undefined
+            ? []
+            : [
+                {
+                    status: "warn",
+                    text: `a plaintext Telegram token file exists in the shared dir (${sharedToken}); no notification channel is configured, so nothing needs it: delete it`,
+                },
+            ]),
+    ];
+}
+/**
+ * Every Telegram finding: the state dir and its token file, the user-scope
+ * plugin and shared default dir, and exported Telegram variables.
+ * @param ctx - Resolved inputs
+ * @param stateDir - Absolute state dir, or undefined when unset
+ * @returns Findings
+ */
+export async function telegramFindings(ctx, stateDir) {
+    return [
+        ...(await stateDirFindings(ctx, stateDir)),
+        ...(await userScopeFindings(ctx)),
+        ...exportedFindings(ctx.env),
+    ];
+}
+//# sourceMappingURL=doctor-session-manager-token.js.map

package/dist/cli/doctor-session-manager-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-token.js","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEL,QAAQ,EACR,MAAM,EACN,QAAQ,GACT,MAAM,mCAAmC,CAAC;AAE3C,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,8EAA8E;AAC9E,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,kEAAkE;AAClE,MAAM,eAAe,GAAG,MAAM,CAAC;AAe/B;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAoB;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;SAC/B,WAAW,EAAE;SACb,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,IAAuC,EACvC,GAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAC9B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAC3C,CAAC;IACF,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC;QAC9B,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,SAAkC;IAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,GAAsB;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAY,EACZ,IAAY,EACZ,WAAmB;IAEnB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAoB,EACpB,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,4HAA4H;aACnI;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,yCAAyC,GAAG,CAAC,SAAS,yGAAyG,GAAG,CAAC,SAAS,YAAY;aAC/L;SACF,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAoB,EACpB,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,0BAA0B,SAAS,2CAA2C,QAAQ,OAAO,GAAG,CAAC,UAAU,oLAAoL;iBACtS;aACF,CAAC;IACR,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc,SAAS,gGAAgG;aAC9H;SACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAY;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc,SAAS,0MAA0M;KACxO,CAAC;IACF,IAAI,IAAI,GAAG,gBAAgB,KAAK,CAAC;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO;QACL,SAAS;QACT;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc,SAAS,cAAc,KAAK,wCAAwC,SAAS,EAAE;SACpG;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,GAAG,CAAC,IAAI,EACR,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAC1C,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,EAAE,cAAc,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;YAClD,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,GAAG,SAAS,+FAA+F,SAAS,8CAA8C;iBACzK;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,kDAAkD,WAAW,uDAAuD;iBAC3H;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,GAAsB,EACtB,eAAe,GAAG,IAAI;IAEtB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACpB,MAAM,CACL,IAAI,CAAC,EAAE,CACL,CAAC,eAAe,IAAI,IAAI,KAAK,aAAa,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAC7B;SACA,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SAClC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,EAAE,MAAe;QACvB,IAAI,EAAE,GAAG,IAAI,2GAA2G;KACzH,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA4D;IAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QACnC,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,6DAA6D,WAAW,0EAA0E;iBACzJ;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAoB,EACpB,QAA4B;IAE5B,OAAO;QACL,GAAG,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACjC,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-session-manager.d.ts

@@ -18,6 +18,8 @@ export interface SessionManagerDoctorDependencies {
     readonly managedSettingsPaths?: readonly string[];
     /** Repo visibility probe; defaults to `gh repo view --json visibility`. */
     readonly probeRepoVisibility?: RepoVisibilityProbe;
+    /** Clock for the age of items waiting on a human; defaults to now. */
+    readonly now?: () => Date;
 }
 /** The doctor options this check honours. */
 export interface SessionManagerDoctorOptions {
@@ -25,7 +27,7 @@ export interface SessionManagerDoctorOptions {
     readonly offline?: boolean;
 }
 /**
- * Check Telegram isolation for a configured session manager.
+ * Check the notification channel of a configured session manager.
  * @param targetPath - Project root
  * @param deps - Injected environment, HOME and file access
  * @param options - Doctor options; `offline` skips the visibility probe

package/dist/cli/doctor-session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-session-manager.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAEL,KAAK,mBAAmB,EAOzB,MAAM,mCAAmC,CAAC;AAY3C,6EAA6E;AAC7E,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAG3D,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,gCAAgC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,8DAA8D;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CACpD;AAED,6CAA6C;AAC7C,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAwID;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gCAAgC,EACtC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,WAAW,CAAC,CA+DtB"}
+{"version":3,"file":"doctor-session-manager.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAEL,KAAK,mBAAmB,EAMzB,MAAM,mCAAmC,CAAC;AAgB3C,6EAA6E;AAC7E,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAG3D,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,gCAAgC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,8DAA8D;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,sEAAsE;IACtE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,6CAA6C;AAC7C,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAsLD;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gCAAgC,EACtC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,WAAW,CAAC,CAiEtB"}