@dadado/agent-kit-cli 5.16.0 → 5.17.0

package/dist/doctor-TA2FWREU.js

@@ -1,497 +0,0 @@
-import {
-  executeSafeReadinessFixes,
-  refreshRepositoryProfile
-} from "./chunk-KI6ZHBPV.js";
-import {
-  writeReadinessSnapshot
-} from "./chunk-ZXKZBTXE.js";
-import {
-  CLAUDE_SETTINGS_REL,
-  GUARD_SHELL_HOOK_MARKER,
-  RESOLVE_AGENT_KIT_REL,
-  SESSION_START_HOOK_MARKER
-} from "./chunk-CGTE7DHN.js";
-import "./chunk-MAPOQEA2.js";
-import {
-  withCliProgress
-} from "./chunk-QTON2GQX.js";
-import {
-  createReadinessReport
-} from "./chunk-PNFF6OU3.js";
-import {
-  runScanner
-} from "./chunk-ZCTSUQRR.js";
-import "./chunk-F6C3GFKV.js";
-import {
-  logger
-} from "./chunk-ZB43YMHW.js";
-import {
-  assessEnvironment
-} from "./chunk-4IWG5CVE.js";
-import {
-  warnIfRunningCliBehindNpm
-} from "./chunk-XZZAVHH4.js";
-import "./chunk-NQ7IQ5XT.js";
-import "./chunk-YGBBHKBE.js";
-import "./chunk-6QV2BFGA.js";
-import "./chunk-VS2JD2XC.js";
-import "./chunk-5VCOWTTP.js";
-import {
-  KIT_VERSION
-} from "./chunk-7HDQEK6T.js";
-import {
-  readJson
-} from "./chunk-77V75A7O.js";
-
-// src/commands/doctor.ts
-import path2 from "path";
-import { defineCommand } from "citty";
-
-// src/invariants/hooks-health.ts
-import { execFile } from "child_process";
-import { constants, access, readFile, readdir, stat } from "fs/promises";
-import path from "path";
-import { promisify } from "util";
-var execFileAsync = promisify(execFile);
-var GIT_HOOK_CANONICAL_NAMES = ["pre-commit", "pre-push", "prepare-commit-msg"];
-var EXPECTED_EVENTS = [
-  "sessionStart",
-  "preCompact",
-  "beforeShellExecution",
-  "afterFileEdit",
-  "beforeSubmitPrompt"
-];
-async function exists(p) {
-  try {
-    await access(p);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function isExecutable(p) {
-  try {
-    await access(p, constants.X_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function resolveAgentKitCli(rootDir) {
-  const root = path.resolve(rootDir);
-  const candidates = [
-    path.join(root, "node_modules", ".bin", "agent-kit"),
-    path.join(root, "packages", "cli", "dist", "index.js")
-  ];
-  for (const c of candidates) {
-    if (await exists(c)) return c;
-  }
-  try {
-    const { stdout } = await execFileAsync("which", ["agent-kit"], { encoding: "utf8" });
-    const hit = stdout.trim().split("\n")[0]?.trim();
-    if (hit) return hit;
-  } catch {
-  }
-  return null;
-}
-function commandLooksLikeAdapter(command) {
-  const trimmed = command.trim();
-  if (!trimmed) return null;
-  const m = trimmed.match(/(\.cursor\/hooks\/agent\/[A-Za-z0-9._-]+\.sh)\b/);
-  return m?.[1] ?? null;
-}
-async function assessGitHooksInstallDrift(rootDir) {
-  const root = path.resolve(rootDir);
-  const canonicalDir = path.join(root, "git-hooks");
-  if (!await exists(canonicalDir)) return [];
-  let hooksPathCfg = "";
-  try {
-    const { stdout } = await execFileAsync(
-      "git",
-      ["-C", root, "config", "--get", "core.hooksPath"],
-      { encoding: "utf8" }
-    );
-    hooksPathCfg = stdout.trim();
-  } catch {
-  }
-  if (hooksPathCfg) {
-    const resolved = path.isAbsolute(hooksPathCfg) ? path.normalize(hooksPathCfg) : path.normalize(path.join(root, hooksPathCfg));
-    if (resolved === path.normalize(canonicalDir)) {
-      return [];
-    }
-  }
-  const gitDir = path.join(root, ".git");
-  if (!await exists(gitDir)) return [];
-  try {
-    const st = await stat(gitDir);
-    if (!st.isDirectory()) return [];
-  } catch {
-    return [];
-  }
-  const installedDir = path.join(gitDir, "hooks");
-  const advisories = [];
-  const installHint = "Install or refresh with: `cp git-hooks/<name> .git/hooks/<name> && chmod +x .git/hooks/<name>` (see git-hooks/README.md)";
-  let names = [...GIT_HOOK_CANONICAL_NAMES];
-  try {
-    const listed = await readdir(canonicalDir);
-    const fromDisk = listed.filter(
-      (n) => GIT_HOOK_CANONICAL_NAMES.includes(n)
-    );
-    if (fromDisk.length > 0) names = fromDisk;
-  } catch {
-  }
-  for (const name of names) {
-    const canonical = path.join(canonicalDir, name);
-    const installed = path.join(installedDir, name);
-    if (!await exists(canonical)) continue;
-    if (!await exists(installed)) {
-      advisories.push(
-        `git-hooks drift: \`.git/hooks/${name}\` missing (canonical \`git-hooks/${name}\` present). ${installHint}`
-      );
-      continue;
-    }
-    try {
-      const [a, b] = await Promise.all([readFile(canonical, "utf8"), readFile(installed, "utf8")]);
-      if (a !== b) {
-        advisories.push(
-          `git-hooks drift: \`.git/hooks/${name}\` differs from \`git-hooks/${name}\`. ${installHint}`
-        );
-      }
-    } catch {
-      advisories.push(
-        `git-hooks drift: could not compare \`git-hooks/${name}\` with \`.git/hooks/${name}\`. ${installHint}`
-      );
-    }
-  }
-  return advisories;
-}
-async function assessSignatureGateHook(rootDir) {
-  const root = path.resolve(rootDir);
-  if (!await exists(path.join(root, "autogit", "gitupdate.md"))) return [];
-  if (await exists(path.join(root, "git-hooks", "prepare-commit-msg"))) return [];
-  return [
-    "signature gate hook missing: `git-hooks/prepare-commit-msg` (/git-staging runs `sh git-hooks/prepare-commit-msg --check -`; a missing file exits 127 and reads as red). Run `agent-kit update` to restore it."
-  ];
-}
-async function resolveGuardProbeArgv(root) {
-  const hookBin = process.env.AGENT_KIT_HOOK_BIN;
-  if (hookBin && await isExecutable(hookBin)) return [hookBin];
-  const local = path.join(root, "node_modules", ".bin", "agent-kit");
-  if (await isExecutable(local)) return [local];
-  const dist = path.join(root, "packages", "cli", "dist", "index.js");
-  if (await exists(dist)) return [process.execPath, dist];
-  try {
-    const { stdout } = await execFileAsync("which", ["agent-kit"], { encoding: "utf8" });
-    const hit = stdout.trim().split("\n")[0]?.trim();
-    if (hit) return [hit];
-  } catch {
-  }
-  return null;
-}
-async function assessClaudeGuardProbe(rootDir) {
-  const root = path.resolve(rootDir);
-  let text;
-  try {
-    text = await readFile(path.join(root, CLAUDE_SETTINGS_REL), "utf8");
-  } catch {
-    return [];
-  }
-  if (!text.includes(GUARD_SHELL_HOOK_MARKER)) {
-    return text.includes(SESSION_START_HOOK_MARKER) ? [
-      "Claude SessionStart hook is installed but the PreToolUse guard hook is absent from `.claude/settings.json`. Run `agent-kit install --claude`."
-    ] : [];
-  }
-  const stale = "Claude guard hook active but resolved CLI is too old or stale dist; update the CLI / rebuild.";
-  const argv = await resolveGuardProbeArgv(root);
-  if (!argv) return [`${stale} (agent-kit CLI not resolvable)`];
-  const [bin, ...lead] = argv;
-  try {
-    const { stdout } = await execFileAsync(
-      bin,
-      [
-        ...lead,
-        "guard",
-        "shell",
-        "--format",
-        "claude",
-        "--command",
-        "git push --force origin main"
-      ],
-      {
-        cwd: root,
-        encoding: "utf8",
-        timeout: 1e4,
-        env: { ...process.env, ALLOW_MAIN_PUSH: "" }
-      }
-    );
-    const decision = JSON.parse(stdout).hookSpecificOutput?.permissionDecision;
-    return decision === "deny" ? [] : [stale];
-  } catch {
-    return [stale];
-  }
-}
-async function assessHooksHealth(rootDir) {
-  const root = path.resolve(rootDir);
-  const hooksJsonPath = ".cursor/hooks.json";
-  const hooksJsonAbs = path.join(root, hooksJsonPath);
-  const reasons = [];
-  const wiredEvents = [];
-  const advisories = [
-    ...await assessGitHooksInstallDrift(root),
-    ...await assessSignatureGateHook(root),
-    ...await assessClaudeGuardProbe(root)
-  ];
-  if (!await exists(hooksJsonAbs)) {
-    return {
-      status: "missing",
-      reasons: ["`.cursor/hooks.json` not found"],
-      advisories,
-      hooksJsonPath,
-      expectedEvents: [...EXPECTED_EVENTS],
-      wiredEvents
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(await readFile(hooksJsonAbs, "utf8"));
-  } catch {
-    return {
-      status: "degraded",
-      reasons: ["`.cursor/hooks.json` is not valid JSON"],
-      advisories,
-      hooksJsonPath,
-      expectedEvents: [...EXPECTED_EVENTS],
-      wiredEvents
-    };
-  }
-  const hooks = parsed.hooks ?? {};
-  const adapterRels = /* @__PURE__ */ new Set();
-  for (const event of EXPECTED_EVENTS) {
-    const list = hooks[event];
-    if (Array.isArray(list) && list.length > 0) {
-      wiredEvents.push(event);
-      for (const entry of list) {
-        if (!entry || typeof entry !== "object") continue;
-        const command = String(entry.command ?? "");
-        if (command.endsWith(".py") || command.includes("python")) {
-          reasons.push(`${event} still points at a Python script (${command})`);
-        }
-        const rel = commandLooksLikeAdapter(command);
-        if (rel) adapterRels.add(rel);
-      }
-    } else {
-      reasons.push(`missing hook event: ${event}`);
-    }
-  }
-  const resolveLib = path.join(root, RESOLVE_AGENT_KIT_REL);
-  if (!await exists(resolveLib)) {
-    reasons.push(`missing \`${RESOLVE_AGENT_KIT_REL}\` (thin adapter resolver)`);
-  } else if (!await isExecutable(resolveLib)) {
-    reasons.push(`\`${RESOLVE_AGENT_KIT_REL}\` is not executable (chmod +x)`);
-  }
-  for (const rel of adapterRels) {
-    const abs = path.join(root, rel);
-    if (!await exists(abs)) {
-      reasons.push(`missing adapter script: \`${rel}\``);
-      continue;
-    }
-    try {
-      const st = await stat(abs);
-      if (!st.isFile()) {
-        reasons.push(`adapter path is not a file: \`${rel}\``);
-        continue;
-      }
-    } catch {
-      reasons.push(`unreadable adapter script: \`${rel}\``);
-      continue;
-    }
-    if (!await isExecutable(abs)) {
-      reasons.push(`adapter not executable: \`${rel}\` (chmod +x)`);
-    }
-  }
-  const cli = await resolveAgentKitCli(root);
-  if (!cli) {
-    reasons.push(
-      "agent-kit CLI not resolvable (node_modules/.bin/agent-kit, packages/cli/dist, or PATH)"
-    );
-  }
-  if (Array.isArray(hooks.stop) && hooks.stop.length > 0) {
-    reasons.push("`stop` hook is registered (forbidden; remove it)");
-  }
-  const status = reasons.length === 0 && wiredEvents.length === EXPECTED_EVENTS.length ? "active" : "degraded";
-  return {
-    status,
-    reasons,
-    advisories,
-    hooksJsonPath,
-    expectedEvents: [...EXPECTED_EVENTS],
-    wiredEvents
-  };
-}
-
-// src/commands/doctor.ts
-async function readDeferredEssentials(rootDir, report) {
-  const config = await readJson(
-    path2.join(rootDir, ".cursor", "context", "config.json")
-  );
-  const deferredItems = config?.onboarding?.deferredItems;
-  if (!Array.isArray(deferredItems)) return [];
-  const essentialIds = new Set(
-    report.pillars.flatMap((pillar) => pillar.checks).filter((check) => check.essential).map((check) => check.id)
-  );
-  return deferredItems.filter(
-    (item) => typeof item?.checkId === "string" && typeof item?.reason === "string" && essentialIds.has(item.checkId)
-  ).map((item) => ({ checkId: item.checkId, reason: item.reason }));
-}
-async function runDoctor(cwd, options = {}) {
-  const rootDir = path2.resolve(cwd);
-  const hooks = await assessHooksHealth(rootDir);
-  const env = await assessEnvironment();
-  if (options.fixSafe) {
-    const execution = await executeSafeReadinessFixes(rootDir, {
-      generatorVersion: KIT_VERSION,
-      generatedAt: options.generatedAt
-    });
-    await writeReadinessSnapshot(rootDir, execution.after);
-    return {
-      report: execution.after,
-      safeChanges: execution.changes,
-      hooks,
-      env,
-      deferredEssentials: await readDeferredEssentials(rootDir, execution.after)
-    };
-  }
-  if (options.refreshProfile) {
-    const refresh = await refreshRepositoryProfile(rootDir, {
-      generatorVersion: KIT_VERSION,
-      generatedAt: options.generatedAt
-    });
-    const scan2 = await runScanner(rootDir);
-    const report2 = createReadinessReport(scan2, {
-      generatorVersion: KIT_VERSION,
-      generatedAt: options.generatedAt
-    });
-    await writeReadinessSnapshot(rootDir, report2);
-    return {
-      report: report2,
-      safeChanges: [],
-      hooks,
-      env,
-      profileRefreshed: refresh.changed,
-      deferredEssentials: await readDeferredEssentials(rootDir, report2)
-    };
-  }
-  const scan = await runScanner(rootDir);
-  const report = createReadinessReport(scan, {
-    generatorVersion: KIT_VERSION,
-    generatedAt: options.generatedAt
-  });
-  await writeReadinessSnapshot(rootDir, report);
-  return {
-    report,
-    safeChanges: [],
-    hooks,
-    env,
-    deferredEssentials: await readDeferredEssentials(rootDir, report)
-  };
-}
-function printDoctorSummary(result) {
-  const { summary, pendingActions } = result.report;
-  const fixed = result.safeChanges.filter((change) => change.status === "applied").length;
-  const nextAction = pendingActions[0];
-  console.log("Repository readiness");
-  console.log(
-    `  ready: ${summary.ready}, choices: ${summary.needs_choice}, manual: ${summary.manual}, blocked: ${summary.blocked}`
-  );
-  console.log(`  safe fixes applied: ${fixed}`);
-  console.log(`  pending actions: ${pendingActions.length}`);
-  if (result.profileRefreshed !== void 0) {
-    console.log(
-      `  profile refreshed: ${result.profileRefreshed ? "yes (facts changed)" : "no (already current)"}`
-    );
-  }
-  for (const item of result.deferredEssentials) {
-    console.log(`  Deferred essential: ${item.checkId} \u2014 ${item.reason}`);
-  }
-  console.log(`hooks: ${result.hooks.status}`);
-  if (result.hooks.reasons.length > 0) {
-    for (const reason of result.hooks.reasons.slice(0, 5)) {
-      console.log(`  - ${reason}`);
-    }
-  }
-  if (result.hooks.advisories.length > 0) {
-    console.log("hooks advisories (soft; install via cp, see git-hooks/README.md):");
-    for (const tip of result.hooks.advisories.slice(0, 5)) {
-      console.log(`  - ${tip}`);
-    }
-  }
-  console.log("environment:");
-  const pathLabel = result.env.binOnPath ? `ok (v${result.env.binVersion ?? "unknown"} at ${result.env.binPath})` : "MISSING";
-  console.log(`  - bin on PATH (agent-kit): ${pathLabel}`);
-  console.log(
-    `  - npm prefix writable: ${result.env.npmPrefixWritable ? "ok" : "BLOCKED"}${result.env.npmPrefix.prefix ? ` (${result.env.npmPrefix.prefix})` : ""}`
-  );
-  if (!result.env.npmPrefixWritable && result.env.npmPrefix.reason) {
-    console.log(`    - ${result.env.npmPrefix.reason}`);
-  }
-  console.log(
-    `  - node version >= 20: ${result.env.nodeVersionOk ? "ok" : "TOO OLD"} (${result.env.nodeVersion})`
-  );
-  console.log(
-    `  - shell profile: ${result.env.shellProfile ?? "not detected (zsh/bash only)"}${result.env.shell ? ` (shell: ${result.env.shell})` : ""}`
-  );
-  if (process.env.ALLOW_MAIN_PUSH === "1") {
-    console.log("\u26A0\uFE0F  WARNING: ALLOW_MAIN_PUSH=1 is set in environment");
-    console.log("   This disables main-push protection for agent Shell commands.");
-    console.log("   Consider unsetting it: unset ALLOW_MAIN_PUSH");
-  }
-  console.log(
-    nextAction ? `Next: ${nextAction.recommendation}` : "Next: repository readiness checks are complete"
-  );
-}
-var doctorCommand = defineCommand({
-  meta: {
-    name: "doctor",
-    description: "Diagnose repository readiness; optional --fix-safe local repairs."
-  },
-  args: {
-    cwd: {
-      type: "string",
-      default: process.cwd()
-    },
-    json: {
-      type: "boolean",
-      description: "Print deterministic machine-readable JSON without status messages",
-      default: false
-    },
-    "fix-safe": {
-      type: "boolean",
-      description: "Apply only local, reversible, merge-safe readiness fixes",
-      default: false
-    },
-    "refresh-profile": {
-      type: "boolean",
-      description: "Reconcile .cursor/agent-kit.config.json with current scanner facts: fresh values win on shared keys, unrecognized existing keys are preserved",
-      default: false
-    }
-  },
-  async run({ args }) {
-    if (!args.json) {
-      await warnIfRunningCliBehindNpm(args.cwd, { warn: (message) => logger.warn(message) });
-    }
-    const run = () => runDoctor(args.cwd, {
-      fixSafe: args["fix-safe"],
-      refreshProfile: args["refresh-profile"]
-    });
-    const result = args.json ? await run() : await withCliProgress("doctor", run);
-    if (args.json) {
-      console.log(JSON.stringify(result, null, 2));
-      return;
-    }
-    printDoctorSummary(result);
-  }
-});
-export {
-  doctorCommand,
-  runDoctor
-};