@codyswann/lisa 4.85.0 → 4.86.1

package/dist/cli/doctor-session-manager-token.js

@@ -0,0 +1,264 @@
+/**
+ * Telegram findings for the session-manager notifications doctor check
+ * (#4448), split out of `doctor-session-manager` when Telegram became optional
+ * (#4555). With no notification channel only {@link plaintextTokenFindings}
+ * runs: a plaintext token is worth flagging whether or not a bot is set up.
+ *
+ * The manager is the only Claude session that may poll the project's Telegram
+ * bot. Two sessions polling one bot steal each other's messages, and a worker
+ * that inherits the token can impersonate the manager. Setup and `start`
+ * enforce isolation when they run; these findings catch drift afterwards: a
+ * plugin later enabled at user scope, a token copied into the shared default
+ * dir, a token exported from a shell profile, or a loosened file mode.
+ *
+ * Where the token lives (#4555): with a secrets provider configured
+ * (`secrets.provider` set and not `env`) it belongs in the provider as
+ * `TELEGRAM_BOT_TOKEN_<NAME>`, so a plaintext token file in the state dir is
+ * a leftover that `store-token` migrates (and `start` refuses to run while
+ * it holds a `TELEGRAM_BOT_TOKEN` line; doctor only stats it, so it says so
+ * rather than claiming the file is refused outright). With no provider that file is still how the token is stored, and
+ * it is flagged as plaintext. Doctor never reads the vault: it cannot prove
+ * the secret exists, only that no plaintext copy is left.
+ *
+ * Token files are only ever `stat`-ed, never read, so the token value cannot
+ * reach the detail text; environment values are reported by name only.
+ */
+import * as path from "node:path";
+import { isRecord, modeOf, readJson, } from "./doctor-session-manager-trust.js";
+const PLUGIN_ID = "telegram@claude-plugins-official";
+const TOKEN_FILE = ".env";
+/** The plugin's token variable; any `TELEGRAM_BOT_TOKEN*` name is flagged. */
+const TOKEN_VAR = "TELEGRAM_BOT_TOKEN";
+const STATE_DIR_VAR = "TELEGRAM_STATE_DIR";
+/** Group + other permission bits are the low six bits of a file mode. */
+const GROUP_OTHER_SPAN = 0o100;
+/** All permission bits (owner, group, other) are the low nine. */
+const PERMISSION_SPAN = 0o1000;
+/**
+ * The provider secret name for a manager: `TELEGRAM_BOT_TOKEN_<NAME>` with
+ * the name upper-snaked. Must agree with the session-manager CLI's
+ * `telegramSecretName` (token-store.mjs); a test pins the two together.
+ * @param managerName - `sessionManager.name`
+ * @returns Secret name
+ */
+export function telegramSecretNameFor(managerName) {
+    const suffix = String(managerName)
+        .toUpperCase()
+        .replaceAll(/[^A-Z0-9]+/g, "_");
+    return `${TOKEN_VAR}_${suffix}`;
+}
+/**
+ * The secrets provider the session-manager CLI will use for this project, or
+ * undefined when it uses none (`env`, or no provider at all). Decided exactly
+ * the way the CLI's `loadTokenSecrets` does through `lisa-secrets-access`'s
+ * `readConfig`: only the committed `.lisa.config.json` counts (the local
+ * override is never read for `secrets`), its `secrets.provider` defaulting
+ * to `env`; with no committed file at all, the environment fallback
+ * (`LISA_TENANT` or `LISA_SECRETS_NAMESPACE` names a tenant, and
+ * `LISA_PROVIDER` / `LISA_SECRETS_PROVIDER` its provider, default
+ * `bitwarden`). A test pins this to the CLI. Known gap: with no config file
+ * at the root the CLI also looks under `LISA_PROJECT_DIR` /
+ * `CLAUDE_PROJECT_DIR`; doctor only looks at the project it was pointed at.
+ * @param targetPath - Project root
+ * @param read - Text reader
+ * @param env - Doctor's environment
+ * @returns Provider name, or undefined for none
+ */
+export async function secretsProviderAt(targetPath, read, env) {
+    const committed = await readJson(read, path.join(targetPath, ".lisa.config.json"));
+    const provider = committed === undefined
+        ? providerFromEnvironment(env)
+        : committedProvider(committed);
+    return provider === "env" ? undefined : provider;
+}
+/**
+ * `secrets.provider` in the committed config, defaulting to `env`.
+ * @param committed - Parsed `.lisa.config.json`
+ * @returns Provider name
+ */
+function committedProvider(committed) {
+    const secrets = committed.secrets;
+    const provider = isRecord(secrets) ? secrets.provider : undefined;
+    return typeof provider === "string" ? provider : "env";
+}
+/**
+ * The provider `readConfig` falls back to with no config file.
+ * @param env - Environment
+ * @returns Provider name (`env` when no tenant is named)
+ */
+function providerFromEnvironment(env) {
+    const tenant = (env.LISA_TENANT ?? env.LISA_SECRETS_NAMESPACE ?? "").trim();
+    if (tenant === "")
+        return "env";
+    const named = (env.LISA_PROVIDER ?? env.LISA_SECRETS_PROVIDER ?? "").trim();
+    return named === "" ? "bitwarden" : named;
+}
+/**
+ * Resolve the configured state dir to an absolute path, expanding `~`.
+ * @param raw - Configured `notify.stateDir`
+ * @param home - Home directory
+ * @param projectRoot - Base for a relative path
+ * @returns Absolute path, or undefined when unset
+ */
+export function resolveStateDir(raw, home, projectRoot) {
+    if (typeof raw !== "string" || raw.trim() === "")
+        return undefined;
+    const dir = raw.trim();
+    if (dir === "~")
+        return home;
+    if (dir.startsWith("~/"))
+        return path.resolve(home, dir.slice(2));
+    return path.resolve(projectRoot, dir);
+}
+/**
+ * Findings about the configured per-project state dir and its token file.
+ * @param ctx - Resolved inputs
+ * @param stateDir - Absolute state dir, or undefined when unset
+ * @returns Findings
+ */
+async function stateDirFindings(ctx, stateDir) {
+    if (stateDir === undefined) {
+        return [
+            {
+                status: "fail",
+                text: "sessionManager.notify.stateDir is not set; run /lisa:setup:session-manager to give this project its own Telegram state dir",
+            },
+        ];
+    }
+    if (stateDir === ctx.sharedDir) {
+        return [
+            {
+                status: "fail",
+                text: `notify.stateDir is the shared default ${ctx.sharedDir}, so every Telegram session on this machine would poll one bot; point it at a per-project dir such as ${ctx.sharedDir}-<project>`,
+            },
+        ];
+    }
+    return tokenFileFindings(ctx, path.join(stateDir, TOKEN_FILE));
+}
+/**
+ * Findings about the plaintext token file, which means different things with
+ * and without a secrets provider.
+ * @param ctx - Resolved inputs
+ * @param tokenFile - The token file in the state dir
+ * @returns Findings
+ */
+async function tokenFileFindings(ctx, tokenFile) {
+    const mode = await modeOf(ctx.statFile, tokenFile);
+    const provider = ctx.secretsProvider;
+    if (provider !== undefined) {
+        return mode === undefined
+            ? []
+            : [
+                {
+                    status: "warn",
+                    text: `a plaintext token file ${tokenFile} is left over, but the token belongs in ${provider} as ${ctx.secretName}; run session-manager.mjs store-token to move it there (it verifies the copy, then deletes the file), because start refuses to run while that file holds a TELEGRAM_BOT_TOKEN line`,
+                },
+            ];
+    }
+    if (mode === undefined) {
+        return [
+            {
+                status: "warn",
+                text: `token file ${tokenFile} is missing, so the manager cannot start; store the bot token with /lisa:setup:session-manager`,
+            },
+        ];
+    }
+    const plaintext = {
+        status: "warn",
+        text: `token file ${tokenFile} holds the bot token in plaintext because no secrets provider is configured; configure secrets.provider (see lisa-secrets-access), then run session-manager.mjs store-token to move it into the provider`,
+    };
+    if (mode % GROUP_OTHER_SPAN === 0)
+        return [plaintext];
+    const octal = (mode % PERMISSION_SPAN).toString(8).padStart(3, "0");
+    return [
+        plaintext,
+        {
+            status: "warn",
+            text: `token file ${tokenFile} has mode 0${octal}, open to other users; run chmod 600 ${tokenFile}`,
+        },
+    ];
+}
+/**
+ * Findings about the user-scope plugin and the shared default token file.
+ * @param ctx - Resolved inputs
+ * @returns Findings
+ */
+async function userScopeFindings(ctx) {
+    const settings = await readJson(ctx.read, path.join(ctx.claudeDir, "settings.json"));
+    const plugins = settings?.enabledPlugins;
+    const sharedToken = path.join(ctx.sharedDir, TOKEN_FILE);
+    return [
+        ...(isRecord(plugins) && plugins[PLUGIN_ID] === true
+            ? [
+                {
+                    status: "warn",
+                    text: `${PLUGIN_ID} is enabled at user scope, so every Claude session polls the bot; run claude plugin disable ${PLUGIN_ID} -s user (the manager enables it for itself)`,
+                },
+            ]
+            : []),
+        ...((await modeOf(ctx.statFile, sharedToken)) === undefined
+            ? []
+            : [
+                {
+                    status: "warn",
+                    text: `a token file exists in the shared default dir (${sharedToken}); move it to the per-project state dir and delete it`,
+                },
+            ]),
+    ];
+}
+/**
+ * Findings for Telegram variables exported in doctor's own shell.
+ * @param env - Doctor's environment
+ * @param includeStateDir - Also flag `TELEGRAM_STATE_DIR` (Telegram only)
+ * @returns Findings, naming each variable but never its value
+ */
+function exportedFindings(env, includeStateDir = true) {
+    return Object.keys(env)
+        .filter(name => (includeStateDir && name === STATE_DIR_VAR) ||
+        name.startsWith(TOKEN_VAR))
+        .filter(name => (env[name] ?? "") !== "")
+        .sort((a, b) => a.localeCompare(b))
+        .map(name => ({
+        status: "warn",
+        text: `${name} is set in this shell's environment, so workers may inherit it; remove the export from your shell profile`,
+    }));
+}
+/**
+ * The plaintext-token findings that hold with no notification channel too
+ * (the spec's "doctor flags any plaintext token file it finds"): an exported
+ * `TELEGRAM_BOT_TOKEN*` variable, by name only, and a token file in the
+ * shared Telegram state dir, by existence only (never read). The Telegram
+ * requirements themselves (state dir, plugin scope, `TELEGRAM_STATE_DIR`)
+ * are skipped, since no bot is configured.
+ * @param ctx - The shared dir, environment and mode reader
+ * @returns Findings
+ */
+export async function plaintextTokenFindings(ctx) {
+    const sharedToken = path.join(ctx.sharedDir, TOKEN_FILE);
+    return [
+        ...exportedFindings(ctx.env, false),
+        ...((await modeOf(ctx.statFile, sharedToken)) === undefined
+            ? []
+            : [
+                {
+                    status: "warn",
+                    text: `a plaintext Telegram token file exists in the shared dir (${sharedToken}); no notification channel is configured, so nothing needs it: delete it`,
+                },
+            ]),
+    ];
+}
+/**
+ * Every Telegram finding: the state dir and its token file, the user-scope
+ * plugin and shared default dir, and exported Telegram variables.
+ * @param ctx - Resolved inputs
+ * @param stateDir - Absolute state dir, or undefined when unset
+ * @returns Findings
+ */
+export async function telegramFindings(ctx, stateDir) {
+    return [
+        ...(await stateDirFindings(ctx, stateDir)),
+        ...(await userScopeFindings(ctx)),
+        ...exportedFindings(ctx.env),
+    ];
+}
+//# sourceMappingURL=doctor-session-manager-token.js.map

package/dist/cli/doctor-session-manager-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-session-manager-token.js","sourceRoot":"","sources":["../../src/cli/doctor-session-manager-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEL,QAAQ,EACR,MAAM,EACN,QAAQ,GACT,MAAM,mCAAmC,CAAC;AAE3C,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,8EAA8E;AAC9E,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,kEAAkE;AAClE,MAAM,eAAe,GAAG,MAAM,CAAC;AAe/B;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAoB;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;SAC/B,WAAW,EAAE;SACb,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,IAAuC,EACvC,GAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAC9B,IAAI,EACJ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAC3C,CAAC;IACF,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC;QAC9B,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,SAAkC;IAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,GAAsB;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAY,EACZ,IAAY,EACZ,WAAmB;IAEnB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAoB,EACpB,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,4HAA4H;aACnI;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,yCAAyC,GAAG,CAAC,SAAS,yGAAyG,GAAG,CAAC,SAAS,YAAY;aAC/L;SACF,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAoB,EACpB,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,0BAA0B,SAAS,2CAA2C,QAAQ,OAAO,GAAG,CAAC,UAAU,oLAAoL;iBACtS;aACF,CAAC;IACR,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc,SAAS,gGAAgG;aAC9H;SACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAY;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc,SAAS,0MAA0M;KACxO,CAAC;IACF,IAAI,IAAI,GAAG,gBAAgB,KAAK,CAAC;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO;QACL,SAAS;QACT;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc,SAAS,cAAc,KAAK,wCAAwC,SAAS,EAAE;SACpG;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,GAAG,CAAC,IAAI,EACR,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAC1C,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,EAAE,cAAc,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI;YAClD,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,GAAG,SAAS,+FAA+F,SAAS,8CAA8C;iBACzK;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,kDAAkD,WAAW,uDAAuD;iBAC3H;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,GAAsB,EACtB,eAAe,GAAG,IAAI;IAEtB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACpB,MAAM,CACL,IAAI,CAAC,EAAE,CACL,CAAC,eAAe,IAAI,IAAI,KAAK,aAAa,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAC7B;SACA,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SAClC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,EAAE,MAAe;QACvB,IAAI,EAAE,GAAG,IAAI,2GAA2G;KACzH,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA4D;IAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QACnC,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,SAAS;YACzD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAe;oBACvB,IAAI,EAAE,6DAA6D,WAAW,0EAA0E;iBACzJ;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAoB,EACpB,QAA4B;IAE5B,OAAO;QACL,GAAG,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACjC,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/cli/doctor-session-manager.d.ts

@@ -18,6 +18,8 @@ export interface SessionManagerDoctorDependencies {
     readonly managedSettingsPaths?: readonly string[];
     /** Repo visibility probe; defaults to `gh repo view --json visibility`. */
     readonly probeRepoVisibility?: RepoVisibilityProbe;
+    /** Clock for the age of items waiting on a human; defaults to now. */
+    readonly now?: () => Date;
 }
 /** The doctor options this check honours. */
 export interface SessionManagerDoctorOptions {
@@ -25,7 +27,7 @@ export interface SessionManagerDoctorOptions {
     readonly offline?: boolean;
 }
 /**
- * Check Telegram isolation for a configured session manager.
+ * Check the notification channel of a configured session manager.
  * @param targetPath - Project root
  * @param deps - Injected environment, HOME and file access
  * @param options - Doctor options; `offline` skips the visibility probe

package/dist/cli/doctor-session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-session-manager.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAEL,KAAK,mBAAmB,EAOzB,MAAM,mCAAmC,CAAC;AAY3C,6EAA6E;AAC7E,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAG3D,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,gCAAgC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,8DAA8D;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CACpD;AAED,6CAA6C;AAC7C,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAwID;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gCAAgC,EACtC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,WAAW,CAAC,CA+DtB"}
+{"version":3,"file":"doctor-session-manager.d.ts","sourceRoot":"","sources":["../../src/cli/doctor-session-manager.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAEL,KAAK,mBAAmB,EAMzB,MAAM,mCAAmC,CAAC;AAgB3C,6EAA6E;AAC7E,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAG3D,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,gCAAgC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,8DAA8D;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,sEAAsE;IACtE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,6CAA6C;AAC7C,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAsLD;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gCAAgC,EACtC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,WAAW,CAAC,CAiEtB"}