@danypops/pi-packed 0.27.12 → 0.27.13

package/dist/packages/package.d.ts

@@ -0,0 +1,272 @@
+/**
+ * package.ts — the Pkg entity and its two driven ports (Registry, Installer)
+ * that decouple callers (the HTTP service, the CLI, the watcher, tests) from
+ * concrete implementations (registry/registry.ts talks to npm; install.ts
+ * shells out to pi).
+ */
+import type { InstallValidationResult } from "../adoption/install-validation.ts";
+/**
+ * True drift only: `latest` is a real semver step *ahead* of `have`, never
+ * merely different from it. A plain !== check cannot distinguish "have is
+ * behind latest" from "have is already ahead of a stale/wrong latest" --
+ * confirmed live via the watcher's own version of this bug: an installed
+ * package whose version had already passed the daemon's mirrored
+ * dist-tags.latest kept showing a permanent, un-clearable "update
+ * available" badge pointing at an *older* version. Falls back to the old
+ * inequality only when either side isn't parseable semver (a git ref, a
+ * literal "latest" tag, etc.) -- those aren't comparable at all, so
+ * "different" is the only signal left. Lives here (not watcher.ts, its
+ * original home) so both the daemon's watcher and ExecInstaller.update()'s
+ * own out-of-range check share one implementation without packages/
+ * reaching into daemon/ (the dependency already runs the other way).
+ */
+export declare function isNewer(latest: string, have: string): boolean;
+export type PackageVerification = "keyword-only" | "manifest" | "conventional";
+export interface PackageEvidence {
+    shape: PackageVerification;
+    verified: boolean;
+    evidence: string[];
+}
+export interface PublicationEvidence {
+    integrity?: string;
+    provenanceUrl?: string;
+    trustedPublisher: "verified" | "not-verified" | "unknown";
+}
+export interface DownloadObservations {
+    weekly?: number;
+    monthly?: number;
+    observedAt: string;
+}
+export interface Pkg {
+    name: string;
+    version: string;
+    description?: string;
+    date?: string;
+    /** From npm's own search API response (each hit already carries this inline -- no extra
+     * request per result, unlike PkgInfo.downloads, which needs its own dedicated fetch for a
+     * single already-known package). See HttpRegistry.searchPage(). */
+    downloads?: DownloadObservations;
+    packageEvidence?: PackageEvidence;
+    publication?: PublicationEvidence;
+}
+export interface PkgInfo {
+    name: string;
+    version: string;
+    description?: string;
+    homepage?: string;
+    repository?: string;
+    /** Monorepo subdirectory the package lives in, from repository.directory
+     * -- scopes a real commit-history lookup to the package's own path. */
+    repositoryDirectory?: string;
+    license?: string;
+    keywords?: string[];
+    pi?: Record<string, unknown>;
+    /** Declared npm lifecycle scripts (preinstall/install/postinstall/etc.) --
+     * these execute on install, a top supply-chain attack vector. Presence is
+     * surfaced as trust-dimension evidence, never treated as a failure. */
+    scripts?: Record<string, string>;
+    modified?: string;
+    unpackedSize?: number;
+    readme?: string;
+    readmeAvailable?: boolean;
+    bugs?: string;
+    peerDependencies?: Record<string, string>;
+    packageEvidence?: PackageEvidence;
+    publication?: PublicationEvidence;
+    downloads?: DownloadObservations;
+}
+export interface SearchPage {
+    results: Pkg[];
+    total: number;
+}
+/** Driven port: package metadata source (npm registry, or the daemon proxy). */
+export interface Registry {
+    search(query: string, limit: number): Promise<SearchPage>;
+    searchPage(query: string, from: number, size: number): Promise<SearchPage>;
+    searchAll(query: string): Promise<Pkg[]>;
+    info(name: string): Promise<PkgInfo>;
+    downloads?(name: string): Promise<DownloadObservations>;
+    /** Last npm publish date across any version, from the abbreviated
+     * multi-version doc -- the `/latest` endpoint `info()` uses carries no
+     * `time`/`modified` field at all. Optional, like `downloads`; undefined
+     * on any failure, never thrown. */
+    modifiedAt?(name: string): Promise<string | undefined>;
+}
+/**
+ * `pi update --extension <source>` exits 0 and prints "Updated <source>"
+ * whether or not anything actually changed -- verified empirically against
+ * both a pinned, already-current source and an unpinned, already-latest
+ * one. reloadRequired/alreadyUpToDate are ground truth (on-disk resolved
+ * version, before vs. after), not that text. previousVersion/currentVersion
+ * are omitted when unknown (git:/https: sources, or no node_modules entry
+ * to read) -- reloadRequired then conservatively stays true rather than
+ * guessing.
+ */
+export interface UpdateOutcome {
+    output: string;
+    reloadRequired: boolean;
+    alreadyUpToDate: boolean;
+    pinned: boolean;
+    previousVersion?: string;
+    currentVersion?: string;
+    /**
+     * Set only when alreadyUpToDate is true AND a real registry version
+     * newer than currentVersion exists outside the source's own declared
+     * caret/range -- confirmed live: a 0.x package (e.g. ^0.9.8) that
+     * crossed its own minor boundary (0.10.0 published) reported a bare
+     * "already up to date" with no clue a newer version existed at all.
+     * `pi update --extension` is itself bound by the declared range, so
+     * "nothing changed" alone can't distinguish "genuinely current" from
+     * "current within a range that's now stale" -- this cross-checks
+     * against the same registry-mirror source of truth checkUpdates()
+     * already uses, independent of the declared range.
+     */
+    outOfRangeUpdateAvailable?: string;
+    /**
+     * True only when update() was called on an exact npm pin with no
+     * options.target -- `pi update --extension` intentionally leaves an
+     * exact pin unchanged (npm's own documented behavior for a versioned
+     * spec), so alreadyUpToDate/pinned above are already an honest,
+     * non-"false success" result. This is an additional stable,
+     * unambiguous machine-readable signal (kept alongside those existing
+     * fields for back-compat) that a caller wanting to actually MOVE the
+     * pin should retry with options.target set -- see replaced/before/
+     * after/rollback below.
+     */
+    pinnedSourceRequiresTarget?: boolean;
+    /**
+     * True when options.target was given and update() routed to the
+     * supervised replace workflow (remove the old exact source, install
+     * the new one, verify both configured and installed postconditions,
+     * attempt rollback on failure) instead of `pi update --extension`.
+     */
+    replaced?: boolean;
+    before?: {
+        source: string;
+        version?: string;
+    };
+    after?: {
+        source: string;
+        version?: string;
+    };
+    /** Present only on a replace failure -- whether restoring the original
+     * source was attempted and whether that restoration itself succeeded. */
+    rollback?: {
+        attempted: boolean;
+        ok: boolean;
+        message?: string;
+    };
+}
+/** Driven port: pi CLI mutations. */
+export interface Installer {
+    install(source: string, options?: {
+        approved?: boolean;
+        local?: boolean;
+    }): Promise<string>;
+    remove(source: string, options?: {
+        approved?: boolean;
+        local?: boolean;
+    }): Promise<string>;
+    /**
+     * `options.target`, when given, replaces `source` (an exact pin or not)
+     * with `target` through a supervised remove+install workflow instead of
+     * `pi update --extension` -- see ExecInstaller.update()'s own doc
+     * comment and the linked research doc
+     * (pinned-package-update-behavior-and-safe-replacement-research) for
+     * why a plain `pi update` can never move an exact pin by itself.
+     */
+    update(source: string, options?: {
+        approved?: boolean;
+        local?: boolean;
+        target?: string;
+    }): Promise<UpdateOutcome>;
+    /**
+     * Updates a package that is genuinely installed and npm-resolvable but is
+     * NOT itself a pi:-configured extension -- `pi update --extension` can
+     * never find it (pi-core's own "configured packages" notion IS exactly
+     * settings.json's packages[]), confirmed via a real failing-test repro
+     * (service/test/install.test.ts) of pi's own "No matching package found".
+     * `daemon-service.ts`'s `classifyUpdateSource()` decides when this path
+     * applies instead of `update()` -- a real Vehicle-shaped daemon dependency
+     * with no `pi:` manifest of its own (e.g. @danypops/lector, pinned
+     * independently of its pi-lector wrapper). Optional because only a real
+     * npm-backed Installer (ExecInstaller) can perform it; a caller checks for
+     * its presence before using this path, exactly like validate()/
+     * installOnly()/reresolveDependencyTree() below.
+     */
+    updateDaemonDependency?(name: string, options?: {
+        approved?: boolean;
+        version?: string;
+    }): Promise<UpdateOutcome>;
+    /**
+     * Optional batch-oriented split of install(), for a caller installing several packages
+     * together (see SetupManager.apply()) -- a single ad hoc install() still does all three
+     * steps itself and needs none of this; every existing Installer implementation that omits
+     * these three keeps compiling and behaving exactly as before.
+     *
+     * validate() is safe to run CONCURRENTLY across many sources: each call stages into its own
+     * throwaway temp directory (see HeadlessInstallValidator) with zero shared state between
+     * packages. installOnly() does the real `pi install` mutation WITHOUT install()'s own
+     * trailing full-tree reresolve, so a batch caller can defer that to
+     * reresolveDependencyTree(), called ONCE after every package in the batch instead of once
+     * per package.
+     *
+     * installOnly() itself must stay SEQUENTIAL across a batch, never fanned out the way
+     * validate() can be: `pi install` does its own non-atomic read-modify-write of both
+     * settings.json and the npm project's package.json/package-lock.json in the single shared
+     * piHome, with no locking on either side (confirmed empirically -- three concurrent `pi
+     * install` calls against one piHome silently lost two of three entries from settings.json
+     * and npm/package.json, while all three packages' node_modules ended up physically present
+     * but untracked, exactly the state a later reresolveDependencyTree() would then prune).
+     */
+    validate?(source: string): Promise<InstallValidationResult>;
+    installOnly?(source: string, options?: {
+        approved?: boolean;
+        local?: boolean;
+    }): Promise<string>;
+    /**
+     * updateOnly() is update()'s own equivalent split: the real `pi update --extension` mutation
+     * (or replace(), when options.target is given) WITHOUT the trailing reresolveDependencyTree(),
+     * returning the same UpdateOutcome update() itself returns -- a single package's own before/
+     * after version diff is already correct right after its own mutation, reresolveDependencyTree()
+     * exists to fix a DIFFERENT sibling's drift. See updateManyPackages() (install.ts) for the
+     * batch caller. Same SEQUENTIAL-only constraint as installOnly() above.
+     */
+    updateOnly?(source: string, options?: {
+        approved?: boolean;
+        local?: boolean;
+        target?: string;
+    }): Promise<UpdateOutcome>;
+    reresolveDependencyTree?(): Promise<string>;
+}
+export interface InstalledPkg {
+    name: string;
+    pinned?: string;
+    installed?: string;
+    scope?: "global" | "project";
+    /**
+     * "extension" (a real pi:-manifested package, settings.json's own
+     * packages[]) vs. "daemon-dependency" (a Vehicle-shaped daemon Packed
+     * independently detects at piHome/npm's own top level -- e.g.
+     * @danypops/lector -- that is NOT itself pi:-configured). Undefined from
+     * every pre-existing reader (readInstalledPackages/
+     * readInstalledPackagesAcrossScopes); only daemon-service.ts's
+     * listManagedPackages() sets this on every row it returns. See
+     * packed-package-update-restart-service-cant-manage.
+     */
+    kind?: "extension" | "daemon-dependency";
+}
+export interface UpdateEntry {
+    name: string;
+    installed: string;
+    latest: string;
+    detectedAt?: string;
+    scope?: "global" | "project";
+}
+export interface UpdatesSnapshot {
+    checkedAt: string;
+    updates: UpdateEntry[];
+}
+export declare function buildSearchQuery(q: string): string;
+export declare function clampLimit(v: number, def: number, max: number): number;
+//# sourceMappingURL=package.d.ts.map

package/dist/packages/package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../service/src/packages/package.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAGjF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAG7D;AAED,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;CAC1D;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,GAAG;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;uEAEmE;IACnE,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,WAAW,OAAO;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;2EACuE;IACvE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B;;2EAEuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,SAAS,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,GAAG,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACd;AAED,gFAAgF;AAChF,MAAM,WAAW,QAAQ;IACxB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxD;;;uCAGmC;IACnC,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;OAWG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;OAUG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C;6EACyE;IACzE,QAAQ,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AAED,qCAAqC;AACrC,MAAM,WAAW,SAAS;IACzB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACnH;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAClH;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC5D,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjG;;;;;;;OAOG;IACH,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACxH,uBAAuB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,mBAAmB,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;CACvB;AAKD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAIlD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGtE"}

package/dist/public/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../service/src/public/client.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGX,yBAAyB,EACzB,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,aAAa,EACb,MAAM,eAAe,CAAC;AAEvB,6NAA6N;AAC7N,qBAAa,mBAAoB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO;gBAD7B,OAAO,EAAE,MAAM,EACN,UAAU,CAAC,EAAE,OAAO,YAAA;CAK9B;AAED,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAGD,MAAM,WAAW,iBAAiB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B;AACD,MAAM,WAAW,qBAAqB;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC,CAAC;IAC9H,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,SAAS,IAAI,OAAO,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACrE,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClC,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAC3G,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpF,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjG,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC,CAAC;IAC1G,cAAc,CACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,iBAAsB,GAAG,iBAAiB,CAiB3F;AAED,MAAM,WAAW,yBAAyB;IACzC;;;4CAGwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,oBAA6B,GAAG,yBAAyB,GAAG,SAAS,CAWpH;AAOD,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAMrE,qBAAa,YAAa,YAAW,qBAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsG;gBAC9G,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,cAAsB;IAG1E,OAAO,CAAC,IAAI;IAMZ,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAG1B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,UAAQ;;;;;;IAGpD,IAAI,CAAC,IAAI,EAAE,MAAM;IAGjB,SAAS;IAGH,OAAO;IAGb,QAAQ;IAGR,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,QAAQ,UAAQ;IAGtF,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ;IAKxC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ;;;;IAK/C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,UAAQ;IAKrC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAkBvF,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,UAAQ;IAG7C,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,UAAQ,EAAE,KAAK,UAAQ;IAGhE,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM;;;;IAG5B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,UAAQ;IAKjI,QAAQ;CAGR;AAED,wBAAsB,mBAAmB,CAAC,KAAK,oBAA6B,EAAE,SAAS,GAAE,cAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAatI;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC;;mCAE+B;IAC/B,kBAAkB,IAAI,OAAO,CAAC;IAC9B;yDACqD;IACrD,KAAK,IAAI,IAAI,CAAC;IACd,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBhF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAgB7F;AAED,wBAAsB,kBAAkB,CAAC,KAAK,oBAA6B,EAAE,SAAS,GAAE,cAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAuBrI"}

package/dist/public/doctor-format.d.ts

@@ -0,0 +1,57 @@
+/**
+ * doctor.run's report shape and its own human-readable formatter (the CLI's `packed doctor`
+ * non-JSON path) -- kept as its own leaf module, imported back by adoption/doctor.ts rather than
+ * defined there and re-exported, specifically so this file's only real (non-type) dependency is
+ * its own formatDoctorReport/formatClaimant bodies. Every field type below crosses module
+ * boundaries as `import type` only (fully erased at compile time), so a consumer needing just the
+ * formatter -- e.g. pi-packed's own extension, rendering a Pi tool result -- never pulls in
+ * runDoctor's own real runtime dependencies (subprocess-based extension smoke-testing, npm-tree
+ * scanning, systemd status shell-outs, ...) just to format a report it already has.
+ */
+import type { DuplicateDependencyDiagnostic } from "../adoption/duplicate-dependency-doctor.ts";
+import type { ModuleFreshnessDiagnostic } from "../adoption/module-freshness.ts";
+import type { ServiceUnitDiagnostic } from "../adoption/service-doctor.ts";
+import type { SmokeRegistrations } from "../adoption/smoke.ts";
+export interface DoctorClaim {
+    name: string;
+    source: string;
+    scope: "global" | "project";
+    extension: string;
+}
+export interface DoctorConflict {
+    kind: "tool" | "command" | "shortcut" | "flag";
+    name: string;
+    claimants: DoctorClaim[];
+}
+export interface DoctorExtensionResult {
+    name: string;
+    source: string;
+    scope: "global" | "project";
+    extension: string;
+    status: string;
+    registrations: SmokeRegistrations;
+    message?: string;
+}
+export interface DoctorReport {
+    ok: boolean;
+    conflicts: DoctorConflict[];
+    extensions: DoctorExtensionResult[];
+    scanned: number;
+    truncated: boolean;
+    /** A daemon-backed package's systemd --user unit referencing a path that no longer exists on disk -- see service-doctor.ts. Empty (not omitted) on a platform without systemd --user coverage. */
+    serviceUnits: ServiceUnitDiagnostic[];
+    /** Any @danypops/* package resolved to more than one distinct version anywhere in piHome's own npm tree -- see duplicate-dependency-doctor.ts's own doc comment for why this stays out of `ok`. */
+    duplicateDependencies: DuplicateDependencyDiagnostic[];
+    /**
+     * Whether THIS running process still holds a stale in-memory copy of one
+     * of its own runtime dependencies, loaded once at startup -- see
+     * module-freshness.ts. Only meaningful for a long-running daemon process
+     * (the one thing that can actually go stale); omitted entirely for a
+     * standalone `packed doctor` invocation (a fresh CLI process has nothing
+     * of its own to compare against). Populated by the daemon's own
+     * doctor.run route, never by runDoctor() itself.
+     */
+    moduleFreshness?: ModuleFreshnessDiagnostic[];
+}
+export declare function formatDoctorReport(report: DoctorReport, json: boolean): string;
+//# sourceMappingURL=doctor-format.d.ts.map

package/dist/public/doctor-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-format.d.ts","sourceRoot":"","sources":["../../service/src/public/doctor-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,4CAA4C,CAAC;AAChG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,kBAAkB,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,kMAAkM;IAClM,YAAY,EAAE,qBAAqB,EAAE,CAAC;IACtC,mMAAmM;IACnM,qBAAqB,EAAE,6BAA6B,EAAE,CAAC;IACvD;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,yBAAyB,EAAE,CAAC;CAC9C;AAMD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAwB9E"}

package/dist/public/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../service/src/public/protocol.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,cAAc,GAAG,UAAU,GAAG,cAAc,CAAC;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AACD,MAAM,WAAW,mBAAmB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;CAC1D;AACD,MAAM,WAAW,oBAAoB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,mBAAmB,CAAC;CAClC;AACD,MAAM,WAAW,WAAY,SAAQ,cAAc;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AACD,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,QAAQ,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AACD,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AACD,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,GAAG,gBAAgB,CAAC;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AACD,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC1B;AACD,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrH,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC1B;AACD,MAAM,WAAW,gBAAgB;IAChC,gBAAgB,EAAE,QAAQ,GAAG,OAAO,CAAC;CACrC;AACD,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC3E,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CACjB;AACD,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GAAG,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;AAErI,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;oFAEoF;AACpF,eAAO,MAAM,eAAe,oCAAoC,CAAC;AAEjE,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,sBAAsB,GAC/B,gBAAgB,GAChB,cAAc,GACd,mBAAmB,GACnB,iBAAiB,GACjB,sBAAsB,GACtB,sBAAsB,GACtB,iBAAiB,GACjB,yBAAyB,GACzB,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,WAAW,CAAC;AACf,MAAM,WAAW,wBAAwB;IACxC,gBAAgB,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACtE,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,sBAAsB,EAAE;QAAE,gBAAgB,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvG,iBAAiB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1D,yBAAyB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAClE,gBAAgB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACvD,gBAAgB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,YAAY,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACxD,aAAa,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7E,gBAAgB,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,kBAAkB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACvI;AACD,MAAM,WAAW,yBAAyB;IACzC,gBAAgB,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjG,cAAc,EAAE,WAAW,CAAC;IAC5B,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;IACxC,iBAAiB,EAAE;QAAE,OAAO,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC;IAC9C,sBAAsB,EAAE,gBAAgB,CAAC;IACzC,sBAAsB,EAAE,gBAAgB,CAAC;IACzC,iBAAiB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,yBAAyB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5G,gBAAgB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,EAAE;QACjB,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,0BAA0B,CAAC,EAAE,OAAO,CAAC;QACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9C,KAAK,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,QAAQ,CAAC,EAAE;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,EAAE,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjE,CAAC;IACF,YAAY,EAAE,SAAS,CAAC;IACxB,aAAa,EAAE,gBAAgB,CAAC;IAChC,gBAAgB,EAAE;QAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAC9E,kBAAkB,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,WAAW,EAAE,QAAQ,CAAC;CACtB"}

package/dist/publish/publish.d.ts

@@ -0,0 +1,120 @@
+import type { Diagnostic } from "../adoption/check.ts";
+import type { Registry } from "../packages/package.ts";
+export declare const TRUST_NPM_VERSION = "11.15.0";
+/** Derives the per-package staged-publish workflow filename from a package
+ * name, so sibling packages in one workspace never collide on one file. */
+export declare function stageWorkflowSlug(packageName: string): string;
+export declare function stageWorkflowFile(packageName: string): string;
+export interface PackageManagerSelection {
+    name: "bun" | "npm" | "pnpm" | "yarn";
+    version?: string;
+}
+export interface WorkflowInput {
+    packageManager: PackageManagerSelection;
+    scripts: string[];
+    /** Relative package directory to build/test from, when the workflow lives
+     * at a monorepo root rather than the package root itself. */
+    packageDir?: string;
+    /** Sibling workspace packages (name -> declared range) that must already
+     * be published on npm before this package's own stage can succeed. */
+    coreFirst?: Record<string, string>;
+    /** Package name slug used to scope this package's own release tag
+     * ($tagPrefix-v*), so two workspace siblings never share one trigger. */
+    tagPrefix?: string;
+}
+export interface VersionCommandResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export type VersionCommand = () => Promise<VersionCommandResult>;
+export type TrustStatusCommand = (packageName: string) => Promise<VersionCommandResult>;
+export interface PublishSetupReport {
+    root: string;
+    ok: boolean;
+    wrote: boolean;
+    workflowPath: string;
+    packageName?: string;
+    repository?: string;
+    trustCommand?: string;
+    statusCommand?: string;
+    webUrl?: string;
+    diagnostics: Diagnostic[];
+}
+export interface PublishStatusReport {
+    root: string;
+    ready: boolean;
+    packageName?: string;
+    repository?: string;
+    workflowPath: string;
+    checks: {
+        packageExists: boolean;
+        repository: boolean;
+        workflow: boolean;
+        lockfile: boolean;
+        node: boolean;
+        npm: boolean;
+        trustedPublisher: "verified" | "not-verified" | "unknown";
+        /** true when every internal (workspace-sibling) dependency this package
+         * declares is already published on npm at a satisfying version. */
+        coreFirst: boolean;
+        /** Local machine login state (npm whoami) -- informative only, never
+         * blocks ready: CI publishes over OIDC trusted-publisher config, not
+         * local login. Surfaced so an interactive caller knows what to offer. */
+        loggedIn: boolean;
+    };
+    diagnostics: Diagnostic[];
+    nextSteps: string[];
+}
+export declare function renderStageWorkflow(input: WorkflowInput): string;
+export declare function versionAtLeast(actual: string, minimum: string): boolean;
+/** Supports the two range shapes this workspace actually uses (exact, ^, ~);
+ * returns undefined rather than guessing for anything broader. */
+export declare function satisfiesRange(version: string, range: string): boolean | undefined;
+export declare function runBounded(command: string[]): Promise<VersionCommandResult>;
+export declare const readNpmVersion: VersionCommand;
+export declare const readTrustStatus: TrustStatusCommand;
+export declare const readNpmWhoami: VersionCommand;
+export interface InteractiveRunResult {
+    ok: boolean;
+    code: number;
+}
+export declare function runInherited(command: string[]): Promise<InteractiveRunResult>;
+/** Runs the real, interactive `npm login --auth-type=web`. npm's own
+ * process polls for completion and writes ~/.npmrc itself -- no token ever
+ * passes through Packed. Headless by default (`--no-browser`, npm's own
+ * documented config: print the URL, never auto-launch anything); pass
+ * `openBrowserAuto: true` only when a human on their own desktop terminal
+ * explicitly opted in. Only ever invoked after the caller's own explicit
+ * confirmation; never from a non-TTY or scripted context. */
+export declare function runNpmLoginWeb(openBrowserAuto?: boolean): Promise<InteractiveRunResult>;
+/** Pure command construction, kept separate from the actual spawn so tests
+ * never risk invoking a real browser. */
+export declare function browserOpenCommand(url: string): string[];
+/** Best-effort browser open for a human-driven web handoff (npm's own
+ * Trusted Publisher configuration UI, not a CLI command Packed constructs
+ * itself). Only ever called when a human explicitly opted in -- the default
+ * interactive path never spawns this, it only prints the URL. Failure is
+ * silent and non-fatal -- the caller always prints the URL too, so a
+ * missing/unknown opener never blocks the human. */
+export declare function openBrowser(url: string): Promise<InteractiveRunResult>;
+export declare function githubRepository(value: unknown): string | undefined;
+export declare function npmWebUrl(packageName: string): string;
+export declare class PublishManager {
+    private readonly registry;
+    private readonly versionCommand;
+    private readonly trustStatusCommand;
+    private readonly whoamiCommand;
+    constructor(registry: Registry, versionCommand?: VersionCommand, trustStatusCommand?: TrustStatusCommand, whoamiCommand?: VersionCommand);
+    setup(projectPath: string, options?: {
+        force?: boolean;
+    }): Promise<PublishSetupReport>;
+    status(projectPath: string): Promise<PublishStatusReport>;
+    /** Local, informative mirror of the CI-side ordering guard: every internal
+     * (workspace-sibling) dependency must already be published on npm at a
+     * version its declared range accepts. Empty when there are none. */
+    private coreFirstStatus;
+    private trustedPublisherStatus;
+}
+export declare function formatPublishReport(report: PublishSetupReport | PublishStatusReport, json?: boolean): string;
+//# sourceMappingURL=publish.d.ts.map

package/dist/publish/publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../service/src/publish/publish.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAS3C;2EAC2E;AAC3E,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAO7D;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC7B,cAAc,EAAE,uBAAuB,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;iEAC6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;0EACsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC;6EACyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf;AACD,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACjE,MAAM,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAExF,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACP,aAAa,EAAE,OAAO,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;QACpB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,IAAI,EAAE,OAAO,CAAC;QACd,GAAG,EAAE,OAAO,CAAC;QACb,gBAAgB,EAAE,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;QAC1D;2EACmE;QACnE,SAAS,EAAE,OAAO,CAAC;QACnB;;iFAEyE;QACzE,QAAQ,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,EAAE,CAAC;CACpB;AAiED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoDhE;AAOD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CASvE;AAED;kEACkE;AAClE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAmBlF;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAMjF;AAED,eAAO,MAAM,cAAc,EAAE,cAAuD,CAAC;AACrF,eAAO,MAAM,eAAe,EAAE,kBAAiG,CAAC;AAChI,eAAO,MAAM,aAAa,EAAE,cAAoD,CAAC;AAEjF,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACb;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAUnF;AAED;;;;;;6DAM6D;AAC7D,wBAAgB,cAAc,CAAC,eAAe,UAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAIrF;AAED;yCACyC;AACzC,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAExD;AAED;;;;;oDAKoD;AACpD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAEtE;AA8ED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAkBnE;AAoCD,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAErD;AAoCD,qBAAa,cAAc;IAEzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAHb,QAAQ,EAAE,QAAQ,EAClB,cAAc,GAAE,cAA+B,EAC/C,kBAAkB,GAAE,kBAAoC,EACxD,aAAa,GAAE,cAA8B;IAGzD,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiI1F,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgJ/D;;wEAEoE;YACtD,eAAe;YA8Cf,sBAAsB;CA6BpC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,mBAAmB,EAAE,IAAI,UAAQ,GAAG,MAAM,CAgB1G"}

package/dist/shared/constants.d.ts

@@ -0,0 +1,51 @@
+/**
+ * constants.ts — every magic value in one place, named.
+ * (lexicon: replace-magic-number-with-symbolic-constant)
+ */
+export declare const NPM_REGISTRY_BASE = "https://registry.npmjs.org";
+export declare const SEARCH_DEFAULT_LIMIT = 10;
+export declare const SEARCH_MAX_LIMIT = 50;
+export declare const SEARCH_PAGE_SIZE = 250;
+export declare const PI_PACKAGE_KEYWORD = "keywords:pi-package";
+export declare const TOOL_MODEL_CONTENT_MAX_CHARACTERS = 2000;
+export declare const TOOL_DETAILS_MAX_SERIALIZED_CHARACTERS = 32000;
+export declare const TOOL_DETAILS_MAX_PACKAGES = 50;
+export declare const TOOL_DETAILS_MAX_DESCRIPTION_CHARACTERS = 240;
+export declare const TOOL_DETAILS_MAX_OUTPUT_CHARACTERS = 1000;
+export declare const TOOL_DETAILS_MAX_KEYWORDS = 20;
+export declare const TOOL_DETAILS_MAX_CAPABILITIES = 12;
+export declare const TOOL_COLLAPSED_PACKAGE_PREVIEW = 3;
+export declare const RETRY_MAX_ATTEMPTS = 6;
+export declare const RETRY_BASE_DELAY_MS = 2000;
+export declare const PAGE_DELAY_MS = 100;
+export declare const MIRROR_PAGE_DELAY_MS = 400;
+export declare const GITHUB_RETRY_MAX_ATTEMPTS = 4;
+export declare const GITHUB_MAX_TOTAL_BACKOFF_MS = 60000;
+export declare const GITHUB_SECONDARY_RATE_LIMIT_FALLBACK_MS = 60000;
+export declare const GITHUB_TRANSIENT_BASE_DELAY_MS = 1000;
+export declare const CACHE_TTL_MS: number;
+export declare const PROBE_TIMEOUT_MS = 800;
+export declare const REGISTRY_FETCH_TIMEOUT_MS = 15000;
+export declare const MIRROR_OPERATION_TIMEOUT_MS: number;
+export declare const INDEX_OPERATION_TIMEOUT_MS: number;
+export declare const WATCH_INTERVAL_DEFAULT_MS: number;
+export declare const CATALOG_INTERVAL_DEFAULT_MS: number;
+export declare const INDEX_INTERVAL_DEFAULT_MS: number;
+export declare const RECONCILE_INTERVAL_DEFAULT_MS: number;
+export declare const IDLE_BUDGET_DEFAULT_MS: number;
+export declare const WATCHDOG_TICK_MS = 15000;
+export declare const UPDATES_FILE = "updates.json";
+export declare const DB_FILE = "packed.db";
+export declare const INDEX_FILE = "index.json";
+export declare const SETTINGS_FILE = "settings.json";
+export declare const SECURITY_FILE = "security.json";
+export declare const ENV: {
+    readonly HOME: "PI_PACKED_HOME";
+    readonly PI_HOME: "PI_PACKED_PI_HOME";
+    readonly WATCH_SECS: "PI_PACKED_WATCH_SECS";
+    readonly CATALOG_SECS: "PI_PACKED_CATALOG_SECS";
+    readonly INDEX_SECS: "PI_PACKED_INDEX_SECS";
+    readonly RECONCILE_SECS: "PI_PACKED_RECONCILE_SECS";
+    readonly IDLE_SECS: "PI_PACKED_IDLE_SECS";
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/shared/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../service/src/shared/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,eAAO,MAAM,iBAAiB,+BAA+B,CAAC;AAG9D,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAGxD,eAAO,MAAM,iCAAiC,OAAQ,CAAC;AACvD,eAAO,MAAM,sCAAsC,QAAS,CAAC;AAC7D,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,uCAAuC,MAAM,CAAC;AAC3D,eAAO,MAAM,kCAAkC,OAAQ,CAAC;AACxD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAGhD,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AACzC,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAOxC,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAC9D,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAGpD,eAAO,MAAM,YAAY,QAAa,CAAC;AACvC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,eAAO,MAAM,2BAA2B,QAAa,CAAC;AAItD,eAAO,MAAM,0BAA0B,QAAc,CAAC;AAGtD,eAAO,MAAM,yBAAyB,QAAc,CAAC;AACrD,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,eAAO,MAAM,yBAAyB,QAAgB,CAAC;AAWvD,eAAO,MAAM,6BAA6B,QAAa,CAAC;AACxD,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAClD,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAGvC,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,OAAO,cAAc,CAAC;AACnC,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAG7C,eAAO,MAAM,GAAG;;;;;;;;CAQN,CAAC"}

package/extension/src/doctor-render.ts

@@ -0,0 +1,32 @@
+/**
+ * doctor.run's own curated presenter -- its DoctorReport output shape (five array fields, several
+ * with nested arrays/objects per row: duplicateDependencies' own locations array, extensions'
+ * own registrations object) defeats every heuristic in vehicle-render's generic shape-probing
+ * chain, so without this it fell all the way through to a raw JSON.stringify dump -- a real, live
+ * incident, not a hypothetical. Reuses formatDoctorReport, the exact same human-readable text the
+ * CLI's own `packed doctor` (non-JSON) path already renders, so the tool and the CLI never drift
+ * into two different descriptions of the same report.
+ */
+import { type DoctorReport, formatDoctorReport } from "@danypops/pi-packed/doctor-format";
+import type { VehiclePresenter } from "@danypops/vehicle-client-pi/vehicle-render";
+import { asciiTextMeasure, CollapsibleText } from "malevich-tui-components";
+
+const DOCTOR_REPORT_COLLAPSED_LINES = 12;
+
+function isDoctorReport(value: unknown): value is DoctorReport {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value as Partial<DoctorReport>;
+	return typeof candidate.ok === "boolean" && Array.isArray(candidate.conflicts) && Array.isArray(candidate.extensions);
+}
+
+export const renderDoctorRunResult: VehiclePresenter = (output, options, theme) => {
+	if (!isDoctorReport(output)) return undefined;
+	const collapsible = new CollapsibleText({
+		text: theme.fg("text", formatDoctorReport(output, false)),
+		collapsedLines: DOCTOR_REPORT_COLLAPSED_LINES,
+		headerStyle: (s) => theme.fg("dim", s),
+		measure: asciiTextMeasure,
+	});
+	if (options.expanded) collapsible.expand();
+	return collapsible;
+};

package/extension/src/vehicle-tools.ts

@@ -35,6 +35,7 @@ import { RemoteVehicleClient } from "@danypops/vehicle-client/http";
 import { registerVehicleTools } from "@danypops/vehicle-client-pi";
 import type { VehicleClient, VehicleManifest } from "@danypops/vehicle-core";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { renderDoctorRunResult } from "./doctor-render.js";
 import { currentVehicleClientTarget } from "./vehicle-target.js";
 
 /** Already covered by their own dedicated, approval-aware tools in tools.ts -- see this file's own doc comment. */
@@ -60,6 +61,19 @@ function withoutExcludedOperations(client: VehicleClient): VehicleClient {
  */
 const CORE_OPERATIONS = ["package.installed", "package.updates", "pi.status"];
 
+/**
+ * Operations whose rendering has actually been reviewed and found acceptable -- either via a
+ * dedicated renderPresenters entry (doctor.run) or by eyeballing the generic Vehicle renderer's
+ * own shape-probing output for a real result and confirming it reads cleanly. Everything NOT
+ * listed here logs a renderCoverage gap warning naming exactly which operations still need that
+ * review, rather than a human discovering an unreviewed one only by stumbling on a raw JSON dump
+ * in the TUI (the live incident doctor.run itself was, before renderDoctorRunResult existed).
+ * Deliberately starts narrow and honest rather than pre-declaring the other ~27 operations
+ * reviewed when they haven't been -- add an operation here only once its own rendering has
+ * actually been checked.
+ */
+const REVIEWED_OPERATIONS = ["doctor.run"];
+
 export async function registerPackedVehicle(pi: ExtensionAPI): Promise<void> {
 	const target = currentVehicleClientTarget();
 	if (!target) return;
@@ -84,6 +98,8 @@ export async function registerPackedVehicle(pi: ExtensionAPI): Promise<void> {
 			// ensureVehicleShellHandle) -- no ownVehicleName/broker option needed here anymore; every
 			// vehicle in the process (including packed's own) is discovered and namespaced uniformly.
 			shell: { coreOperations: CORE_OPERATIONS },
+			renderPresenters: { "doctor.run": renderDoctorRunResult },
+			renderCoverage: { operations: REVIEWED_OPERATIONS },
 		});
 	} catch {
 		// Daemon state is stale/unreachable -- degrade silently, matching