@codyswann/lisa 4.85.0 → 4.86.0

package/dist/cli/doctor-session-manager.js

@@ -1,153 +1,186 @@
 /**
- * Doctor check for the session manager's Telegram isolation (#4448).
+ * Doctor check for the session manager's notification channel (#4448,
+ * #4555).
  *
- * The manager is the only Claude session that may poll the project's Telegram
- * bot. Two sessions polling one bot steal each other's messages, and a worker
- * that inherits the token can impersonate the manager. Setup and `start`
- * enforce isolation when they run; this check catches drift afterwards: a
- * plugin later enabled at user scope, a token copied into the shared default
- * dir, a token exported from a shell profile, a loosened file mode, or managed
- * settings that override the manager's `crossSessionInbound: accept`. Trust
- * findings (a public repo without `trustedAuthorIds`, the plugin enabled in
- * project-scope settings) live in `doctor-session-manager-trust`.
+ * Telegram is optional. With no channel (`notify.provider` `"none"`, or no
+ * `notify` block) there is no bot, token, state dir or plugin to require, so
+ * the check reports "notifications: none" and runs only the findings that
+ * matter either way: a plaintext bot token still lying around (an exported
+ * `TELEGRAM_BOT_TOKEN*` variable, or a token file in the shared Telegram
+ * dir), managed settings that override the manager's
+ * `crossSessionInbound: accept`, and the trust findings (a public repo
+ * without `trustedAuthorIds`). With Telegram it also runs the isolation
+ * findings in `doctor-session-manager-token` (state dir, where the bot token
+ * lives: a leftover plaintext file with a secrets provider configured, or a
+ * plaintext file because none is, and its mode; user-scope plugin, shared
+ * default dir, exported variables) and the
+ * project-scope plugin finding. An unsupported provider, or a `stateDir`
+ * without the telegram provider, fails the way the runtime validator refuses
+ * it.
+ *
+ * Either way it lists the items the manager has waiting on a human and warns
+ * about one recorded but never marked on the tracker
+ * (`doctor-session-manager-pending`, #4555).
  *
  * Gated on a `sessionManager` block in the merged config (the Kane model): a
  * project that never opted in gets `ok` / "not configured" and nothing is read
- * under HOME. Token files are only ever `stat`-ed, never read, so the token
- * value cannot reach the detail text; environment values are reported by name
- * only. HOME, env, file reads and managed-settings paths are injectable so
- * tests never touch the operator's real `~/.claude`.
+ * under HOME. HOME, env, file reads and managed-settings paths are injectable
+ * so tests never touch the operator's real `~/.claude`.
  */
 import { readFile as fsReadFile, stat as fsStat } from "node:fs/promises";
 import * as os from "node:os";
 import * as path from "node:path";
-import { ghRepoVisibility, isRecord, modeOf, projectPluginFindings, readJson, trustFindings, } from "./doctor-session-manager-trust.js";
+import { ghRepoVisibility, isRecord, projectPluginFindings, readJson, trustFindings, } from "./doctor-session-manager-trust.js";
+import { resolveStateDir, plaintextTokenFindings, secretsProviderAt, telegramFindings, telegramSecretNameFor, } from "./doctor-session-manager-token.js";
+import { pendingHumanReport } from "./doctor-session-manager-pending.js";
 import { mergeSessionManagerBlocks } from "./session-manager-config-merge.js";
-const CHECK_NAME = "Session manager Telegram isolation?";
-const PLUGIN_ID = "telegram@claude-plugins-official";
-const TOKEN_FILE = ".env";
-const ENV_NAMES = ["TELEGRAM_BOT_TOKEN", "TELEGRAM_STATE_DIR"];
-/** Group + other permission bits are the low six bits of a file mode. */
-const GROUP_OTHER_SPAN = 0o100;
-/** All permission bits (owner, group, other) are the low nine. */
-const PERMISSION_SPAN = 0o1000;
+const CHECK_NAME = "Session manager notifications?";
+/** Detail for a valid setup with no notification channel. */
+const NO_CHANNEL = "notifications: none";
+const PROVIDERS = ["none", "telegram"];
 /** Managed settings outrank `--settings`, so they can undo the manager's. */
 export const DEFAULT_MANAGED_SETTINGS_PATHS = [
     "/Library/Application Support/ClaudeCode/managed-settings.json",
     "/etc/claude-code/managed-settings.json",
 ];
 /**
- * Resolve the configured state dir to an absolute path, expanding `~`.
- * @param raw - Configured `notify.stateDir`
- * @param home - Home directory
- * @param projectRoot - Base for a relative path
- * @returns Absolute path, or undefined when unset
- */
-function resolveStateDir(raw, home, projectRoot) {
-    if (typeof raw !== "string" || raw.trim() === "")
-        return undefined;
-    const dir = raw.trim();
-    if (dir === "~")
-        return home;
-    if (dir.startsWith("~/"))
-        return path.resolve(home, dir.slice(2));
-    return path.resolve(projectRoot, dir);
-}
-/**
- * Findings about the configured per-project state dir and its token file.
- * @param ctx - Resolved inputs
- * @param stateDir - Absolute state dir, or undefined when unset
- * @returns Findings
- */
-async function stateDirFindings(ctx, stateDir) {
-    if (stateDir === undefined) {
-        return [
-            {
-                status: "fail",
-                text: "sessionManager.notify.stateDir is not set; run /lisa:setup:session-manager to give this project its own Telegram state dir",
-            },
-        ];
-    }
-    if (stateDir === ctx.sharedDir) {
-        return [
-            {
-                status: "fail",
-                text: `notify.stateDir is the shared default ${ctx.sharedDir}, so every Telegram session on this machine would poll one bot; point it at a per-project dir such as ${ctx.sharedDir}-<project>`,
-            },
-        ];
-    }
-    const tokenFile = path.join(stateDir, TOKEN_FILE);
-    const mode = await modeOf(ctx.statFile, tokenFile);
-    if (mode === undefined) {
-        return [
-            {
-                status: "warn",
-                text: `token file ${tokenFile} is missing, so the manager cannot start; store the bot token with /lisa:setup:session-manager`,
-            },
-        ];
-    }
-    if (mode % GROUP_OTHER_SPAN === 0)
-        return [];
-    const octal = (mode % PERMISSION_SPAN).toString(8).padStart(3, "0");
-    return [
-        {
-            status: "warn",
-            text: `token file ${tokenFile} has mode 0${octal}, open to other users; run chmod 600 ${tokenFile}`,
-        },
-    ];
-}
-/**
- * Findings about the user-scope plugin and the shared default token file.
- * @param ctx - Resolved inputs
- * @returns Findings
+ * Read the notification provider the way the runtime validator does: absent
+ * or `"none"` is no channel, `"telegram"` is the bot, anything else fails, and
+ * a `stateDir` without telegram fails because no bot would use it.
+ * @param notify - The merged `notify` block, or `{}`
+ * @returns The provider (undefined when the block cannot run) and problems
  */
-async function userScopeFindings(ctx) {
-    const settings = await readJson(ctx.read, path.join(ctx.claudeDir, "settings.json"));
-    const plugins = settings?.enabledPlugins;
-    const sharedToken = path.join(ctx.sharedDir, TOKEN_FILE);
-    return [
-        ...(isRecord(plugins) && plugins[PLUGIN_ID] === true
-            ? [
+function notifyMode(notify) {
+    const raw = notify.provider ?? "none";
+    const provider = PROVIDERS.find(name => name === raw);
+    if (provider === undefined) {
+        return {
+            provider,
+            problems: [
                 {
-                    status: "warn",
-                    text: `${PLUGIN_ID} is enabled at user scope, so every Claude session polls the bot; run claude plugin disable ${PLUGIN_ID} -s user (the manager enables it for itself)`,
+                    status: "fail",
+                    text: `sessionManager.notify.provider ${JSON.stringify(raw)} is not supported; use "none" (no notification channel) or "telegram"`,
                 },
-            ]
-            : []),
-        ...((await modeOf(ctx.statFile, sharedToken)) === undefined
-            ? []
-            : [
+            ],
+        };
+    }
+    if (provider === "none" && notify.stateDir !== undefined) {
+        return {
+            provider: undefined,
+            problems: [
                 {
-                    status: "warn",
-                    text: `a token file exists in the shared default dir (${sharedToken}); move it to the per-project state dir and delete it`,
+                    status: "fail",
+                    text: 'sessionManager.notify.stateDir is set, but notify.provider is not "telegram", so no bot would use it; set notify.provider to "telegram" or remove notify.stateDir',
                 },
-            ]),
-    ];
+            ],
+        };
+    }
+    return { provider, problems: [] };
 }
 /**
- * Findings about the shell environment and managed settings.
- * @param ctx - Resolved inputs
+ * Findings about managed settings, which outrank the manager's `--settings`
+ * whether or not it has a notification channel.
+ * @param read - Text reader
+ * @param managedPaths - Managed-settings files, in precedence order
  * @returns Findings
  */
-async function environmentFindings(ctx) {
-    const exported = ENV_NAMES.filter(name => (ctx.env[name] ?? "") !== "").map(name => ({
-        status: "warn",
-        text: `${name} is set in this shell's environment, so workers may inherit it; remove the export from your shell profile`,
-    }));
-    const managed = await Promise.all(ctx.managedPaths.map(async (file) => ({
+async function managedFindings(read, managedPaths) {
+    const managed = await Promise.all(managedPaths.map(async (file) => ({
         file,
-        inbound: (await readJson(ctx.read, file))?.crossSessionInbound,
+        inbound: (await readJson(read, file))?.crossSessionInbound,
     })));
-    const held = managed
+    return managed
         .filter(({ inbound }) => inbound !== undefined && inbound !== "accept")
         .map(({ file, inbound }) => ({
         status: "warn",
         text: `managed settings ${file} set crossSessionInbound to ${JSON.stringify(inbound)}, which outranks the manager's "accept", so worker messages would be held`,
     }));
-    return [...exported, ...held];
 }
 /**
- * Check Telegram isolation for a configured session manager.
+ * The home directory doctor resolves `~` against.
+ * @param deps - Injected environment and HOME
+ * @returns Home directory
+ */
+function homeOf(deps) {
+    return deps.home ?? deps.env.HOME ?? os.homedir();
+}
+/**
+ * The Claude config dir doctor inspects: `CLAUDE_CONFIG_DIR`, else
+ * `<home>/.claude`.
+ * @param deps - Injected environment and HOME
+ * @returns Absolute dir
+ */
+function claudeDirOf(deps) {
+    return deps.env.CLAUDE_CONFIG_DIR
+        ? path.resolve(deps.env.CLAUDE_CONFIG_DIR)
+        : path.join(homeOf(deps), ".claude");
+}
+/**
+ * The Telegram-only findings, run only when Telegram is the channel.
+ * @param targetPath - Project root
+ * @param block - Merged `sessionManager` block
+ * @param deps - Injected environment, HOME and file access
+ * @param read - Text reader
+ * @param secretsProvider - Configured secrets provider, undefined for none
+ * @returns Findings
+ */
+async function channelFindings(targetPath, block, deps, read, secretsProvider) {
+    const home = homeOf(deps);
+    const claudeDir = claudeDirOf(deps);
+    const notify = isRecord(block.notify) ? block.notify : {};
+    const stateDir = resolveStateDir(notify.stateDir, home, targetPath);
+    return [
+        ...(await telegramFindings({
+            claudeDir,
+            sharedDir: path.join(claudeDir, "channels", "telegram"),
+            env: deps.env,
+            read,
+            statFile: deps.stat ?? fsStat,
+            secretsProvider,
+            secretName: telegramSecretNameFor(block.name),
+        }, stateDir)),
+        ...(await projectPluginFindings(targetPath, block, read)),
+    ];
+}
+/**
+ * The ok detail for a clean Telegram setup. With a provider, doctor can only
+ * say no plaintext copy is left: it never reads the vault (#4555).
+ * @param token - Where the token lives
+ * @returns Detail text
+ */
+function telegramOkDetail(token) {
+    const where = token.secretsProvider === undefined
+        ? "token file mode 0600 or tighter"
+        : `bot token kept in ${token.secretsProvider} as ${token.secretName} with no plaintext copy (doctor never reads the vault, so the secret itself is not checked)`;
+    return `isolated: per-project state dir ${String(token.stateDir)}, ${where}, plugin not enabled at user scope`;
+}
+/**
+ * The check's verdict once every finding is in. `note` (the items waiting on
+ * a human) is appended to the detail without changing the status.
+ * @param provider - Notification provider, undefined when unsupported
+ * @param findings - Every finding
+ * @param token - Where the bot token lives, for the telegram ok detail
+ * @param note - Extra detail, or undefined
+ * @returns Doctor check result
+ */
+function verdict(provider, findings, token, note) {
+    const withNote = (detail) => note === undefined ? detail : `${detail}; ${note}`;
+    if (findings.length === 0) {
+        return {
+            name: CHECK_NAME,
+            status: "ok",
+            detail: withNote(provider === "none" ? NO_CHANNEL : telegramOkDetail(token)),
+        };
+    }
+    const text = findings.map(f => f.text).join("; ");
+    return {
+        name: CHECK_NAME,
+        status: findings.some(f => f.status === "fail") ? "fail" : "warn",
+        detail: withNote(provider === "none" ? `${NO_CHANNEL}; ${text}` : text),
+    };
+}
+/**
+ * Check the notification channel of a configured session manager.
  * @param targetPath - Project root
  * @param deps - Injected environment, HOME and file access
  * @param options - Doctor options; `offline` skips the visibility probe
@@ -162,47 +195,36 @@ export async function checkSessionManagerIsolation(targetPath, deps, options = {
         if (block === undefined) {
             return { name: CHECK_NAME, status: "ok", detail: "not configured" };
         }
-        const home = deps.home ?? deps.env.HOME ?? os.homedir();
-        const claudeDir = deps.env.CLAUDE_CONFIG_DIR
-            ? path.resolve(deps.env.CLAUDE_CONFIG_DIR)
-            : path.join(home, ".claude");
-        const ctx = {
-            claudeDir,
-            sharedDir: path.join(claudeDir, "channels", "telegram"),
-            env: deps.env,
-            read,
-            statFile: deps.stat ?? fsStat,
-            managedPaths: deps.managedSettingsPaths ?? DEFAULT_MANAGED_SETTINGS_PATHS,
-        };
         const notify = isRecord(block.notify) ? block.notify : {};
-        const stateDir = resolveStateDir(notify.stateDir, home, targetPath);
+        const mode = notifyMode(notify);
+        const secretsProvider = await secretsProviderAt(targetPath, read, deps.env);
+        const pending = await pendingHumanReport(targetPath, block, read, deps.now ?? (() => new Date()));
         const findings = [
-            ...(await stateDirFindings(ctx, stateDir)),
-            ...(await userScopeFindings(ctx)),
-            ...(await environmentFindings(ctx)),
-            ...(await projectPluginFindings(targetPath, block, read)),
+            ...mode.problems,
+            ...(mode.provider === "telegram"
+                ? await channelFindings(targetPath, block, deps, read, secretsProvider)
+                : await plaintextTokenFindings({
+                    sharedDir: path.join(claudeDirOf(deps), "channels", "telegram"),
+                    env: deps.env,
+                    statFile: deps.stat ?? fsStat,
+                })),
+            ...(await managedFindings(read, deps.managedSettingsPaths ?? DEFAULT_MANAGED_SETTINGS_PATHS)),
             ...(await trustFindings({ ...committed, ...local }, block, options.offline === true
                 ? undefined
                 : (deps.probeRepoVisibility ?? ghRepoVisibility))),
+            ...pending.findings,
         ];
-        if (findings.length === 0) {
-            return {
-                name: CHECK_NAME,
-                status: "ok",
-                detail: `isolated: per-project state dir ${String(stateDir)}, token file mode 0600 or tighter, plugin not enabled at user scope`,
-            };
-        }
-        return {
-            name: CHECK_NAME,
-            status: findings.some(f => f.status === "fail") ? "fail" : "warn",
-            detail: findings.map(f => f.text).join("; "),
-        };
+        return verdict(mode.provider, findings, {
+            stateDir: resolveStateDir(notify.stateDir, homeOf(deps), targetPath),
+            secretsProvider,
+            secretName: telegramSecretNameFor(block.name),
+        }, pending.note);
     }
     catch (error) {
         return {
             name: CHECK_NAME,
             status: "warn",
-            detail: `could not evaluate session-manager isolation: ${error instanceof Error ? error.message : String(error)}`,
+            detail: `could not evaluate the session-manager notifications: ${error instanceof Error ? error.message : String(error)}`,
         };
     }
 }

package/dist/cli/doctor-session-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-session-manager.js","sourceRoot":"","sources":["../../src/cli/doctor-session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAGL,gBAAgB,EAChB,QAAQ,EACR,MAAM,EACN,qBAAqB,EACrB,QAAQ,EACR,aAAa,GACd,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,SAAS,GAAG,CAAC,oBAAoB,EAAE,oBAAoB,CAAU,CAAC;AACxE,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,kEAAkE;AAClE,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,+DAA+D;IAC/D,wCAAwC;CACzC,CAAC;AAkCF;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,GAAY,EACZ,IAAY,EACZ,WAAmB;IAEnB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAY,EACZ,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,4HAA4H;aACnI;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,yCAAyC,GAAG,CAAC,SAAS,yGAAyG,GAAG,CAAC,SAAS,YAAY;aAC/L;SACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc,SAAS,gGAAgG;aAC9H;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,gBAAgB,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc,SAAS,cAAc,KAAK,wCAAwC,SAAS,EAAE;SACpG;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAY;IAC3C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,GAAG,CAAC,IAAI,EACR,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAC1C,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,EAAE,cAAc,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;YAClD,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,GAAG,SAAS,+FAA+F,SAAS,8CAA8C;iBACzK;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,kDAAkD,WAAW,uDAAuD;iBAC3H;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAY;IAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CACzE,IAAI,CAAC,EAAE,CAAC,CAAC;QACP,MAAM,EAAE,MAAe;QACvB,IAAI,EAAE,GAAG,IAAI,2GAA2G;KACzH,CAAC,CACH,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC;QAClC,IAAI;QACJ,OAAO,EAAE,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,mBAAmB;KAC/D,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,OAAO;SACjB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,CAAC;SACtE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAe;QACvB,IAAI,EAAE,oBAAoB,IAAI,+BAA+B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,2EAA2E;KAChK,CAAC,CAAC,CAAC;IACN,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkB,EAClB,IAAsC,EACtC,UAAuC,EAAE;IAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAC9B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAC3C,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACjD,CAAC;QACF,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB;YAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAY;YACnB,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;YACvD,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;YAC7B,YAAY,EAAE,IAAI,CAAC,oBAAoB,IAAI,8BAA8B;SAC1E,CAAC;QACF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1C,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACjC,GAAG,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACnC,GAAG,CAAC,MAAM,qBAAqB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACzD,GAAG,CAAC,MAAM,aAAa,CACrB,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,EAC1B,KAAK,EACL,OAAO,CAAC,OAAO,KAAK,IAAI;gBACtB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,gBAAgB,CAAC,CACnD,CAAC;SACH,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,mCAAmC,MAAM,CAAC,QAAQ,CAAC,qEAAqE;aACjI,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACjE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,iDACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"doctor-session-manager.js","sourceRoot":"","sources":["../../src/cli/doctor-session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAGL,gBAAgB,EAChB,QAAQ,EACR,qBAAqB,EACrB,QAAQ,EACR,aAAa,GACd,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,6DAA6D;AAC7D,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,UAAU,CAAU,CAAC;AAEhD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,+DAA+D;IAC/D,wCAAwC;CACzC,CAAC;AAiCF;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,MAA+B;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ;YACR,QAAQ,EAAE;gBACR;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,kCAAkC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,uEAAuE;iBACnI;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzD,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE;gBACR;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,mKAAmK;iBAC1K;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAuC,EACvC,YAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC;QAC9B,IAAI;QACJ,OAAO,EAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,mBAAmB;KAC3D,CAAC,CAAC,CACJ,CAAC;IACF,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,CAAC;SACtE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE,MAAe;QACvB,IAAI,EAAE,oBAAoB,IAAI,+BAA+B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,2EAA2E;KAChK,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,IAAsC;IACpD,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAsC;IACzD,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB;QAC/B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,KAA8B,EAC9B,IAAsC,EACtC,IAAuC,EACvC,eAAmC;IAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACpE,OAAO;QACL,GAAG,CAAC,MAAM,gBAAgB,CACxB;YACE,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;YACvD,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;YAC7B,eAAe;YACf,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9C,EACD,QAAQ,CACT,CAAC;QACF,GAAG,CAAC,MAAM,qBAAqB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;KAC1D,CAAC;AACJ,CAAC;AASD;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAgB;IACxC,MAAM,KAAK,GACT,KAAK,CAAC,eAAe,KAAK,SAAS;QACjC,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,qBAAqB,KAAK,CAAC,eAAe,OAAO,KAAK,CAAC,UAAU,6FAA6F,CAAC;IACrK,OAAO,mCAAmC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,oCAAoC,CAAC;AACjH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,OAAO,CACd,QAAgC,EAChC,QAA4B,EAC5B,KAAgB,EAChB,IAAwB;IAExB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAU,EAAE,CAC1C,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,QAAQ,CACd,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAC3D;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACjE,MAAM,EAAE,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACxE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkB,EAClB,IAAsC,EACtC,UAAuC,EAAE;IAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAC9B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAC3C,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACjD,CAAC;QACF,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC,UAAU,EACV,KAAK,EACL,IAAI,EACJ,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAC/B,CAAC;QACF,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,CAAC,QAAQ;YAChB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAC9B,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC;gBACvE,CAAC,CAAC,MAAM,sBAAsB,CAAC;oBAC3B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC;oBAC/D,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;iBAC9B,CAAC,CAAC;YACP,GAAG,CAAC,MAAM,eAAe,CACvB,IAAI,EACJ,IAAI,CAAC,oBAAoB,IAAI,8BAA8B,CAC5D,CAAC;YACF,GAAG,CAAC,MAAM,aAAa,CACrB,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,EAC1B,KAAK,EACL,OAAO,CAAC,OAAO,KAAK,IAAI;gBACtB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,IAAI,gBAAgB,CAAC,CACnD,CAAC;YACF,GAAG,OAAO,CAAC,QAAQ;SACpB,CAAC;QACF,OAAO,OAAO,CACZ,IAAI,CAAC,QAAQ,EACb,QAAQ,EACR;YACE,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;YACpE,eAAe;YACf,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;SAC9C,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,yDACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/nightly-e2e-guard-behavior-certificate.js

@@ -41,9 +41,9 @@ export const NIGHTLY_E2E_GUARD_BEHAVIOR_CERTIFICATES = Object.freeze({
     }),
     d1b26caeaf65950e3b60ff41964d234c032c50470072e7643310b1f6722e34e6: Object.freeze({
         contractVersion: "1.9.0",
-        packageVersions: Object.freeze(["4.85.0"]),
+        packageVersions: Object.freeze(["4.86.0"]),
         provenances: Object.freeze([
-            "workspace package @codyswann/lisa@4.85.0 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
+            "workspace package @codyswann/lisa@4.86.0 (typescript/copy-overwrite/scripts/check-nightly-e2e-health.mjs)",
         ]),
     }),
     dfd2fef680de5ef03e63075e8a61c62ca4d95cdfdff6201939b79c748d3397f6: Object.freeze({

package/dist/core/upstream-evidence-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA87FpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAynUjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}
+{"version":3,"file":"upstream-evidence-manifest.d.ts","sourceRoot":"","sources":["../../src/core/upstream-evidence-manifest.ts"],"names":[],"mappings":"AACA,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAw9FpE,CAAC;AAEL,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAsvUjE,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAk6I/D,CAAC"}