@cortexkit/aft 0.33.0 → 0.34.0

package/dist/commands/doctor.d.ts

@@ -69,4 +69,5 @@ export declare function shouldSkipDoctorFixConfirmation(argv: string[]): boolean
 export declare function doctorSkewBinaryDownloadDecision(argv: string[]): "prompt" | "proceed" | "skip";
 export declare function formatDoctorStorageStatus(h: DiagnosticReport["harnesses"][number]): string;
 export declare function fixPluginEntries(adapters: HarnessAdapter[]): Promise<void>;
+export declare function deriveIssueTitleFromBody(body: string): string;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAEL,KAAK,gBAAgB,EAKtB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,qBAAqB,CAAC;AAMvE,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,CAAC;AAE9E,eAAO,MAAM,2BAA2B,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,EAapF,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,iBAAiB,EAAqB,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,MAAM,WAAW,CAAC;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA4GvE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAOnE;AA4BD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EAAE,EAC1B,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAgD5B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAgB,gBAAgB,IAAI,sBAAsB,CAsDzD;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EAAE,EAC1B,MAAM,EAAE,gBAAgB,GACvB,iBAAiB,EAAE,CAwDrB;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAIvE;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAK9F;AA4JD,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAK1F;AAsGD,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhF"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAEL,KAAK,gBAAgB,EAKtB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,qBAAqB,CAAC;AAMvE,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,CAAC;AAE9E,eAAO,MAAM,2BAA2B,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,EAapF,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,iBAAiB,EAAqB,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,MAAM,WAAW,CAAC;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA4GvE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAOnE;AA4BD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,cAAc,EAAE,EAC1B,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAgD5B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAgB,gBAAgB,IAAI,sBAAsB,CAsDzD;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EAAE,EAC1B,MAAM,EAAE,gBAAgB,GACvB,iBAAiB,EAAE,CAwDrB;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAIvE;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAK9F;AA4JD,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAK1F;AAsGD,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhF;AA4DD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7D"}

package/dist/index.js

@@ -10929,7 +10929,7 @@ var init_lsp_cache = __esm(() => {
 
 // src/lib/onnx.ts
 import { existsSync as existsSync10, readdirSync as readdirSync5, readlinkSync, realpathSync, statSync as statSync6 } from "node:fs";
-import { isAbsolute, join as join9, resolve as resolve4, win32 } from "node:path";
+import { basename, isAbsolute, join as join9, resolve as resolve4, win32 } from "node:path";
 function getOnnxLibraryName() {
   if (process.platform === "darwin")
     return "libonnxruntime.dylib";
@@ -10992,10 +10992,29 @@ function findSystemOnnxRuntime() {
     searchPaths.push(...pathEntriesForPlatform());
     const programFiles = process.env.ProgramFiles ?? "C:\\Program Files";
     const programFilesX86 = process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)";
-    searchPaths.push(join9(programFiles, "onnxruntime", "lib"), join9(programFiles, "Microsoft ONNX Runtime", "lib"), join9(programFiles, "Microsoft Machine Learning", "lib"), join9(programFilesX86, "onnxruntime", "lib"));
+    searchPaths.push(join9(programFiles, "onnxruntime", "lib"), join9(programFiles, "Microsoft ONNX Runtime", "lib"), join9(programFiles, "Microsoft Machine Learning", "lib"), join9(programFilesX86, "onnxruntime", "lib"), ...(() => {
+      const nugetPaths = [];
+      const userProfile = process.env.USERPROFILE ?? "";
+      if (!userProfile)
+        return nugetPaths;
+      const nugetPackageDir = join9(userProfile, ".nuget", "packages", "microsoft.ml.onnxruntime");
+      if (!existsSync10(nugetPackageDir))
+        return nugetPaths;
+      try {
+        for (const entry of readdirSync5(nugetPackageDir, { withFileTypes: true })) {
+          if (!entry.isDirectory())
+            continue;
+          if (entry.name === "__globalPackagesFolder" || entry.name.startsWith("."))
+            continue;
+          nugetPaths.push(join9(nugetPackageDir, entry.name, "runtimes", "win-x64", "native"), join9(nugetPackageDir, entry.name, "runtimes", "win-arm64", "native"));
+        }
+      } catch {}
+      return nugetPaths;
+    })());
   }
   const normalizeCase = process.platform === "win32" || process.platform === "darwin";
   const seen = new Set;
+  const unknownVersionPaths = [];
   for (const dir of searchPaths) {
     let key = resolve4(dir).replace(/[/\\]+$/, "");
     if (normalizeCase)
@@ -11003,14 +11022,44 @@ function findSystemOnnxRuntime() {
     if (seen.has(key))
       continue;
     seen.add(key);
-    if (directoryContainsLibrary(dir, libName))
-      return dir;
+    if (!directoryContainsLibrary(dir, libName))
+      continue;
+    const version = detectOrtVersion(dir);
+    if (!version) {
+      unknownVersionPaths.push(dir);
+      continue;
+    }
+    if (!isOrtVersionCompatible(version))
+      continue;
+    return dir;
   }
-  return null;
+  return unknownVersionPaths[0] ?? null;
 }
 function findCachedOnnxRuntime(storageDir) {
   const ortDir = join9(storageDir, "onnxruntime", ONNX_RUNTIME_VERSION);
-  return existsSync10(join9(ortDir, getOnnxLibraryName())) ? ortDir : null;
+  const libName = getOnnxLibraryName();
+  if (existsSync10(join9(ortDir, libName)))
+    return ortDir;
+  const libSubdir = join9(ortDir, "lib");
+  if (existsSync10(join9(libSubdir, libName)))
+    return libSubdir;
+  return null;
+}
+function parseOrtVersionFromPath(value) {
+  const name = basename(value);
+  const semverish = name.match(/(?:^|[._-])(\d+\.\d+\.\d+(?:[-+][A-Za-z0-9.-]+)?)(?:\.(?:dylib|dll))?$/);
+  if (semverish)
+    return semverish[1].split(/[-+]/, 1)[0];
+  return /\d+\.\d+\.\d+/.test(name) ? INVALID_ORT_VERSION : null;
+}
+function parseOrtVersionFromDirectoryPath(value) {
+  const parts = value.split(/[\\/]+/).filter(Boolean).reverse();
+  for (const part of parts) {
+    const version = parseOrtVersionFromPath(part);
+    if (version)
+      return version;
+  }
+  return null;
 }
 function detectOrtVersion(libDir) {
   if (!existsSync10(libDir))
@@ -11018,28 +11067,32 @@ function detectOrtVersion(libDir) {
   const libName = getOnnxLibraryName();
   try {
     const entries = readdirSync5(libDir);
+    const barePrefix = libName.replace(/\.(so|dylib|dll)$/, "");
+    const expectedPrefix = process.platform === "win32" ? barePrefix.toLowerCase() : barePrefix;
     for (const entry of entries) {
-      if (!entry.startsWith(libName))
+      const comparable = process.platform === "win32" ? entry.toLowerCase() : entry;
+      if (!comparable.startsWith(expectedPrefix))
         continue;
-      const match = entry.match(/\.(\d+\.\d+\.\d+)$/);
-      if (match)
-        return match[1];
+      const version = parseOrtVersionFromPath(entry);
+      if (version)
+        return version;
     }
     const base = join9(libDir, libName);
     if (existsSync10(base)) {
       try {
         const real = realpathSync(base);
-        const suffix = real.match(/\.(\d+\.\d+\.\d+)$/);
-        if (suffix)
-          return suffix[1];
+        const version = parseOrtVersionFromPath(real) ?? parseOrtVersionFromDirectoryPath(real);
+        if (version)
+          return version;
       } catch {}
       try {
         const target = readlinkSync(base);
-        const suffix = target.match(/\.(\d+\.\d+\.\d+)$/);
-        if (suffix)
-          return suffix[1];
+        const version = parseOrtVersionFromPath(target);
+        if (version)
+          return version;
       } catch {}
     }
+    return parseOrtVersionFromDirectoryPath(libDir);
   } catch {}
   return null;
 }
@@ -11052,18 +11105,50 @@ function isOrtVersionCompatible(version) {
     return false;
   return minor >= REQUIRED_ORT_MIN_MINOR;
 }
-var ONNX_RUNTIME_VERSION = "1.24.4", REQUIRED_ORT_MAJOR = 1, REQUIRED_ORT_MIN_MINOR = 20;
+var ONNX_RUNTIME_VERSION = "1.24.4", INVALID_ORT_VERSION = "<invalid>", REQUIRED_ORT_MAJOR = 1, REQUIRED_ORT_MIN_MINOR = 20;
 var init_onnx = () => {};
 
 // src/lib/sanitize.ts
+import { realpathSync as realpathSync2 } from "node:fs";
 import { homedir as homedir6, userInfo } from "node:os";
 function escapeRegex(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+function safeRealpath(p2) {
+  try {
+    return realpathSync2(p2);
+  } catch {
+    return null;
+  }
+}
+function isSensitiveKeyName(keyName) {
+  return SENSITIVE_KEY_WORD.test(keyName) || SEGMENTED_KEY_WORD.test(keyName) || CAMEL_CASE_KEY_WORD.test(keyName);
+}
+function redactSecrets(content) {
+  let sanitized = content;
+  sanitized = sanitized.replace(/\b((?:Proxy-)?Authorization[^\S\r\n]*:[^\S\r\n]*(?:Bearer|Basic)[^\S\r\n]+)[A-Za-z0-9._~+/-]+=*/gi, `$1${SECRET_PLACEHOLDER}`);
+  sanitized = sanitized.replace(/\bgithub_pat_[A-Za-z0-9_]+\b/g, SECRET_PLACEHOLDER);
+  sanitized = sanitized.replace(/\bgh(?:p|o|s)_[A-Za-z0-9_]{16,}\b/g, SECRET_PLACEHOLDER);
+  sanitized = sanitized.replace(/\bsk-(?:live-)?[A-Za-z0-9][A-Za-z0-9_-]{7,}\b/g, SECRET_PLACEHOLDER);
+  sanitized = sanitized.replace(JWT_PATTERN, SECRET_PLACEHOLDER);
+  sanitized = sanitized.replace(AWS_ACCESS_KEY_ID_PATTERN, SECRET_PLACEHOLDER);
+  sanitized = sanitized.replace(quotedSensitiveKeyValuePattern, (match, prefix, _keyQuote, keyName, valueQuote) => isSensitiveKeyName(keyName) ? `${prefix}${valueQuote}${SECRET_PLACEHOLDER}${valueQuote}` : match);
+  sanitized = sanitized.replace(unquotedSensitiveKeyValuePattern, (match, prefix, keyName, valueQuote) => isSensitiveKeyName(keyName) ? `${prefix}${valueQuote}${SECRET_PLACEHOLDER}${valueQuote}` : match);
+  sanitized = sanitized.replace(bareSensitiveKeyValuePattern, (match, prefix, keyName) => isSensitiveKeyName(keyName) ? `${prefix}${SECRET_PLACEHOLDER}` : match);
+  sanitized = sanitized.replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^@\s/?#]+@/gi, `$1${URL_CREDENTIAL_PLACEHOLDER}@`);
+  sanitized = sanitized.replace(/\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi, "<EMAIL>");
+  return sanitized;
+}
 function sanitizeContent(content) {
   const username = userInfo().username;
   const home = homedir6();
-  let sanitized = content;
+  let sanitized = redactSecrets(content);
+  const cwd = process.cwd();
+  for (const candidate of new Set([cwd, safeRealpath(cwd)])) {
+    if (candidate && candidate !== "/" && candidate !== home) {
+      sanitized = sanitized.replace(new RegExp(escapeRegex(candidate), "g"), "<PROJECT>");
+    }
+  }
   if (home) {
     sanitized = sanitized.replace(new RegExp(escapeRegex(home), "g"), "~");
   }
@@ -11088,7 +11173,17 @@ function sanitizeValue(value) {
   }
   return value;
 }
-var init_sanitize = () => {};
+var SECRET_PLACEHOLDER = "<REDACTED_SECRET>", URL_CREDENTIAL_PLACEHOLDER = "***", KEY_NAME = "[A-Za-z_][A-Za-z0-9_.-]*", SENSITIVE_KEY_WORD, SEGMENTED_KEY_WORD, CAMEL_CASE_KEY_WORD, JWT_PATTERN, AWS_ACCESS_KEY_ID_PATTERN, quotedSensitiveKeyValuePattern, unquotedSensitiveKeyValuePattern, bareSensitiveKeyValuePattern;
+var init_sanitize = __esm(() => {
+  SENSITIVE_KEY_WORD = /(?:token|password|secret|api[_-]?key|passwd|pwd|credential)/i;
+  SEGMENTED_KEY_WORD = /(?:^|[_.-])key(?:$|[_.-])/i;
+  CAMEL_CASE_KEY_WORD = /[a-z0-9]Key(?:$|[A-Z_.-])/;
+  JWT_PATTERN = /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g;
+  AWS_ACCESS_KEY_ID_PATTERN = /\b(?:AKIA|ASIA|AGPA|AIDA|AROA)[A-Z0-9]{16}\b/g;
+  quotedSensitiveKeyValuePattern = new RegExp(String.raw`((['"])(${KEY_NAME})\2[^\S\r\n]*:[^\S\r\n]*)(['"])([^'"\r\n]+)\4`, "gi");
+  unquotedSensitiveKeyValuePattern = new RegExp(String.raw`\b((${KEY_NAME})[^\S\r\n]*[=:][^\S\r\n]*)(['"])([^'"\r\n]+)\3`, "gi");
+  bareSensitiveKeyValuePattern = new RegExp(String.raw`\b((${KEY_NAME})[^\S\r\n]*[=:][^\S\r\n]*)([^\s,;&'"]+)`, "gi");
+});
 
 // src/lib/diagnostics.ts
 import {
@@ -11640,13 +11735,25 @@ __export(exports_doctor, {
   formatDoctorStorageStatus: () => formatDoctorStorageStatus,
   fixPluginEntries: () => fixPluginEntries,
   doctorSkewBinaryDownloadDecision: () => doctorSkewBinaryDownloadDecision,
+  deriveIssueTitleFromBody: () => deriveIssueTitleFromBody,
   clearOldBinaries: () => clearOldBinaries,
   clearDoctorCaches: () => clearDoctorCaches,
   buildDoctorFixPlan: () => buildDoctorFixPlan,
   DOCTOR_FORCE_CLEAR_TARGETS: () => DOCTOR_FORCE_CLEAR_TARGETS,
   DOCTOR_CLEAR_TARGET_OPTIONS: () => DOCTOR_CLEAR_TARGET_OPTIONS
 });
-import { existsSync as existsSync13, mkdirSync as mkdirSync2, rmSync as rmSync4, statSync as statSync8, writeFileSync as writeFileSync2 } from "node:fs";
+import {
+  chmodSync,
+  existsSync as existsSync13,
+  mkdirSync as mkdirSync2,
+  mkdtempSync,
+  readFileSync as readFileSync4,
+  realpathSync as realpathSync3,
+  rmSync as rmSync4,
+  statSync as statSync8,
+  writeFileSync as writeFileSync2
+} from "node:fs";
+import { tmpdir as tmpdir2 } from "node:os";
 import { join as join11 } from "node:path";
 async function runDoctor(options) {
   if (options.issue) {
@@ -12100,8 +12207,75 @@ function formatStorageSizes(sizes) {
   const parts = Object.entries(sizes).filter(([, size]) => size > 0).map(([key, size]) => `${key}: ${formatBytes(size)}`);
   return parts.length > 0 ? parts.join(", ") : "empty";
 }
+function isInteractiveTerminal() {
+  return process.stdin.isTTY === true && process.stdout.isTTY === true;
+}
+function issueDescriptionSummaryFromBody(body) {
+  const lines = body.split(/\r?\n/);
+  const descriptionStart = lines.findIndex((line) => line.trim() === "## Description");
+  if (descriptionStart !== -1) {
+    const parts = [];
+    for (let i = descriptionStart + 1;i < lines.length; i += 1) {
+      const trimmed = lines[i].trim();
+      if (trimmed.startsWith("## "))
+        break;
+      if (!trimmed)
+        continue;
+      parts.push(trimmed);
+      if (parts.join(" ").length >= 72)
+        break;
+    }
+    const summary = parts.join(" ").replace(/\s+/g, " ").trim();
+    if (summary)
+      return summary;
+  }
+  return lines.map((line) => line.trim()).find((line) => line.length > 0 && !line.startsWith("#") && !line.startsWith("```")) ?? "diagnostic report";
+}
+function deriveIssueTitleFromBody(body) {
+  const summary = issueDescriptionSummaryFromBody(sanitizeContent(body));
+  return sanitizeContent(`AFT issue: ${summary.slice(0, 72)}`);
+}
+function writeIssueReviewFile(body) {
+  let reviewDir = null;
+  try {
+    reviewDir = mkdtempSync(join11(tmpdir2(), "aft-issue-"));
+    if (process.platform !== "win32") {
+      chmodSync(reviewDir, 448);
+    }
+    const outPath = join11(reviewDir, "issue.md");
+    writeFileSync2(outPath, `${body}
+`, { encoding: "utf8", mode: 384, flag: "wx" });
+    return { path: outPath, realPath: realpathSync3(outPath) };
+  } catch (err) {
+    if (reviewDir) {
+      try {
+        rmSync4(reviewDir, { recursive: true, force: true });
+      } catch {}
+    }
+    O2.error(`Failed to write sanitized issue report: ${err instanceof Error ? err.message : String(err)}`);
+    return null;
+  }
+}
+function readReviewedIssueFile(reviewFile) {
+  try {
+    const realPath = realpathSync3(reviewFile.path);
+    if (realPath !== reviewFile.realPath) {
+      O2.error(`Review file path changed before filing; refusing to read ${reviewFile.path}.`);
+      return null;
+    }
+    return readFileSync4(reviewFile.path, "utf8");
+  } catch (err) {
+    O2.error(`Failed to read reviewed issue report: ${err instanceof Error ? err.message : String(err)}`);
+    return null;
+  }
+}
 async function runIssueFlow(argv) {
   mt("AFT doctor --issue");
+  if (!isInteractiveTerminal()) {
+    wt("Non-interactive terminal — not collecting or filing automatically. Run `aft doctor --issue` from an interactive terminal so you can describe and review the report before filing.", "Manual filing");
+    gt("Done.");
+    return 0;
+  }
   const adapters = await resolveAdaptersForCommand(argv, {
     allowMulti: true,
     verb: "include in the issue"
@@ -12153,14 +12327,35 @@ ${tail || "<no log output>"}
   ].join(`
 `);
   const body = capBodyToGithubLimit(sanitizeContent(rawBody));
-  const title = sanitizeContent(`AFT issue: ${description.slice(0, 72)}`);
-  const outPath = join11(process.cwd(), `aft-issue-${Date.now()}.md`);
-  writeFileSync2(outPath, `${body}
-`);
+  const reviewFile = writeIssueReviewFile(body);
+  if (!reviewFile) {
+    gt("Done — could not write the issue report.");
+    return 1;
+  }
+  const outPath = reviewFile.path;
   O2.success(`Wrote sanitized issue body to ${outPath}`);
+  wt(`Open and review the report before filing:
+  ${outPath}
+
+Home paths and your username have been stripped, but it still contains log lines and file paths from your project. Edit the file to remove anything you don't want public — your edits are used when you confirm below.`, "Review before filing");
+  const proceed = await confirm("Have you reviewed the report above? File it as a GitHub issue now?", false);
+  if (!proceed) {
+    wt(`No issue filed. When ready, file manually at
+https://github.com/cortexkit/aft/issues/new and paste the contents of ${outPath}.`, "Skipped");
+    gt("Done.");
+    return 0;
+  }
+  const reviewedBody = readReviewedIssueFile(reviewFile);
+  if (reviewedBody === null) {
+    wt("No issue filed. Please review the report path above and file manually if needed.", "Skipped");
+    gt("Done.");
+    return 1;
+  }
+  const finalBody = capBodyToGithubLimit(sanitizeContent(reviewedBody));
+  const finalTitle = deriveIssueTitleFromBody(finalBody);
   if (isGhInstalled()) {
     O2.info("Opening GitHub issue via `gh`…");
-    const result = createGitHubIssue("cortexkit/aft", title, body);
+    const result = createGitHubIssue("cortexkit/aft", finalTitle, finalBody);
     if (result.url) {
       O2.success(`Issue filed: ${result.url}`);
       openBrowser(result.url);
@@ -12169,7 +12364,7 @@ ${tail || "<no log output>"}
     }
     O2.warn(`gh failed: ${result.stderr ?? "unknown error"}. Falling back to browser.`);
   }
-  const fallback = `https://github.com/cortexkit/aft/issues/new?title=${encodeURIComponent(title)}&body=${encodeURIComponent(body)}`;
+  const fallback = `https://github.com/cortexkit/aft/issues/new?title=${encodeURIComponent(finalTitle)}&body=${encodeURIComponent(finalBody)}`;
   O2.info("Opening GitHub issue form in your browser…");
   openBrowser(fallback);
   wt(`If the browser didn't open, the sanitized body is at ${outPath}. Copy it into a new issue at https://github.com/cortexkit/aft/issues/new.`, "Fallback");

package/dist/lib/onnx.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onnx.d.ts","sourceRoot":"","sources":["../../src/lib/onnx.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAkB7C;AA8BD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CA0CrD;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmC9D;AAED,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM/D;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB,CAQA"}
+{"version":3,"file":"onnx.d.ts","sourceRoot":"","sources":["../../src/lib/onnx.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAkB7C;AA8BD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAoErD;AACD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUvE;AAyBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwC9D;AAED,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM/D;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB,CAQA"}

package/dist/lib/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/lib/sanitize.ts"],"names":[],"mappings":"AAEA,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBvD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAarD"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/lib/sanitize.ts"],"names":[],"mappings":"AAGA,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAmFD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA4BvD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAarD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/aft",
-  "version": "0.33.0",
+  "version": "0.34.0",
   "type": "module",
   "description": "Unified CLI for Agent File Tools (AFT) — setup, doctor, and diagnostics across supported agent harnesses (OpenCode, Pi)",
   "license": "MIT",
@@ -19,11 +19,12 @@
     "build": "bun build src/index.ts --outfile dist/index.js --target node --format esm && tsc --emitDeclarationOnly",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
-    "prepublishOnly": "bun run build"
+    "prepublishOnly": "bun run build",
+    "test:unit": "bun test"
   },
   "dependencies": {
     "@clack/prompts": "^1.2.0",
-    "@cortexkit/aft-bridge": "0.33.0",
+    "@cortexkit/aft-bridge": "0.34.0",
     "comment-json": "^4.6.2"
   },
   "devDependencies": {