@driftless-sh/cli 0.1.38 → 0.1.42

package/dist/index.js

@@ -39,8 +39,38 @@ __export(api_client_exports, {
   api: () => api,
   formatError: () => formatError,
   getApiKey: () => getApiKey,
-  getApiUrl: () => getApiUrl
+  getApiUrl: () => getApiUrl,
+  getCachedWorkspace: () => getCachedWorkspace,
+  saveWorkspaceToConfig: () => saveWorkspaceToConfig
 });
+function readConfig() {
+  try {
+    if ((0, import_node_fs.existsSync)(CONFIG_PATH)) {
+      return JSON.parse((0, import_node_fs.readFileSync)(CONFIG_PATH, "utf8"));
+    }
+  } catch {
+  }
+  return {};
+}
+function getCachedWorkspace() {
+  const c = readConfig();
+  return { slug: c.workspace_slug, workspaceId: c.workspace_id };
+}
+function saveWorkspaceToConfig(slug, workspaceId) {
+  if (!slug) return;
+  try {
+    const c = readConfig();
+    if (c.workspace_slug === slug && (workspaceId === void 0 || c.workspace_id === workspaceId)) {
+      return;
+    }
+    c.workspace_slug = slug;
+    if (workspaceId !== void 0) c.workspace_id = workspaceId;
+    const dir = (0, import_node_path.dirname)(CONFIG_PATH);
+    if (!(0, import_node_fs.existsSync)(dir)) (0, import_node_fs.mkdirSync)(dir, { recursive: true });
+    (0, import_node_fs.writeFileSync)(CONFIG_PATH, JSON.stringify(c, null, 2) + "\n");
+  } catch {
+  }
+}
 function loadApiKey() {
   const envKey = process.env["DRIFTLESS_API_KEY"];
   if (envKey) return envKey;
@@ -94,7 +124,7 @@ function parseError(e) {
   }
   return msg;
 }
-function request(method, path, body) {
+function singleRequest(method, path, body, timeoutMs) {
   return new Promise((resolve8, reject) => {
     const baseUrl = getBaseUrl();
     const fullUrl = `${baseUrl}${path}`;
@@ -128,11 +158,42 @@ function request(method, path, body) {
         });
       }
     );
+    if (timeoutMs && timeoutMs > 0) {
+      req.setTimeout(timeoutMs, () => {
+        req.destroy(new Error(`Request timed out after ${timeoutMs}ms`));
+      });
+    }
     req.on("error", (e) => reject(new Error(`Connection failed: ${e.message}`)));
     if (body) req.write(JSON.stringify(body));
     req.end();
   });
 }
+function isTransient(err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  return !/HTTP 4\d\d:/.test(msg);
+}
+function defaultsFor(method) {
+  const isGet = method === "GET";
+  return {
+    timeoutMs: isGet ? 15e3 : 2e4,
+    retries: isGet ? 1 : 0
+  };
+}
+async function request(method, path, body, opts) {
+  const d = defaultsFor(method);
+  const timeoutMs = opts?.timeoutMs ?? d.timeoutMs;
+  const retries = opts?.retries ?? d.retries;
+  let lastErr;
+  for (let attempt = 0; attempt <= retries; attempt++) {
+    try {
+      return await singleRequest(method, path, body, timeoutMs);
+    } catch (e) {
+      lastErr = e;
+      if (attempt === retries || !isTransient(e)) break;
+    }
+  }
+  throw lastErr;
+}
 function getApiUrl() {
   return getBaseUrl();
 }
@@ -154,11 +215,11 @@ var init_api_client = __esm({
     CONFIG_PATH = (0, import_node_path.resolve)((0, import_node_os.homedir)(), ".driftless", "config.json");
     DEFAULT_URL = "http://localhost:3000/api/v1";
     api = {
-      get: (path) => request("GET", path),
-      post: (path, body) => request("POST", path, body),
-      put: (path, body) => request("PUT", path, body),
-      patch: (path, body) => request("PATCH", path, body),
-      delete: (path) => request("DELETE", path)
+      get: (path, opts) => request("GET", path, void 0, opts),
+      post: (path, body, opts) => request("POST", path, body, opts),
+      put: (path, body, opts) => request("PUT", path, body, opts),
+      patch: (path, body, opts) => request("PATCH", path, body, opts),
+      delete: (path, opts) => request("DELETE", path, void 0, opts)
     };
   }
 });
@@ -3184,7 +3245,7 @@ var require_typescript = __commonJS({
         forEachYieldExpression: () => forEachYieldExpression,
         formatColorAndReset: () => formatColorAndReset,
         formatDiagnostic: () => formatDiagnostic,
-        formatDiagnostics: () => formatDiagnostics,
+        formatDiagnostics: () => formatDiagnostics2,
         formatDiagnosticsWithColorAndContext: () => formatDiagnosticsWithColorAndContext,
         formatGeneratedName: () => formatGeneratedName,
         formatGeneratedNamePart: () => formatGeneratedNamePart,
@@ -138049,7 +138110,7 @@ ${lanes.join("\n")}
         }
         return sortAndDeduplicateDiagnostics(diagnostics || emptyArray);
       }
-      function formatDiagnostics(diagnostics, host) {
+      function formatDiagnostics2(diagnostics, host) {
         let output = "";
         for (const diagnostic of diagnostics) {
           output += formatDiagnostic(diagnostic, host);
@@ -198687,7 +198748,7 @@ ${options.prefix}` : "\n" : options.prefix
         forEachYieldExpression: () => forEachYieldExpression,
         formatColorAndReset: () => formatColorAndReset,
         formatDiagnostic: () => formatDiagnostic,
-        formatDiagnostics: () => formatDiagnostics,
+        formatDiagnostics: () => formatDiagnostics2,
         formatDiagnosticsWithColorAndContext: () => formatDiagnosticsWithColorAndContext,
         formatGeneratedName: () => formatGeneratedName,
         formatGeneratedNamePart: () => formatGeneratedNamePart,
@@ -214581,7 +214642,7 @@ async function installSkillCommand() {
 // src/commands/init.ts
 function getVersion() {
   try {
-    return "0.1.38";
+    return "0.1.42";
   } catch {
     return "0.0.0";
   }
@@ -214922,6 +214983,7 @@ async function initCommand(args) {
     process.exit(1);
   }
   const workspaceSlug = workspace.slug;
+  if (workspaceSlug) saveWorkspaceToConfig(workspaceSlug, workspace.workspace_id);
   console.log(`Repository: ${remote.org}/${remote.repo}`);
   console.log(`Workspace:  ${workspaceSlug} \u2713`);
   if (srcOverride) console.log(`Scan root:  ${srcOverride}`);
@@ -215103,16 +215165,27 @@ async function scanCommand(args) {
     process.exit(1);
   }
   const isJSON = args.includes("--json");
-  let workspace;
+  let workspaceSlug;
+  let workspaceId;
   try {
-    workspace = await api.get("/me");
+    const me = await api.get("/me", { timeoutMs: 8e3, retries: 1 });
+    workspaceSlug = me?.slug;
+    workspaceId = me?.workspace_id;
+    if (workspaceSlug) saveWorkspaceToConfig(workspaceSlug, workspaceId);
   } catch {
+  }
+  if (!workspaceSlug) {
+    const cached = getCachedWorkspace();
+    workspaceSlug = cached.slug;
+    workspaceId = workspaceId ?? cached.workspaceId;
+  }
+  if (!workspaceSlug) {
     console.error("Could not resolve workspace. Run driftless login first.");
     process.exit(1);
   }
-  const repos = await api.get(`/workspaces/${workspace.slug}/repos`);
+  const repos = await api.get(`/workspaces/${workspaceSlug}/repos`);
   if (!Array.isArray(repos)) {
-    console.error(`Error: Could not fetch repos for workspace '${workspace.slug}'.`);
+    console.error(`Error: Could not fetch repos for workspace '${workspaceSlug}'.`);
     console.error(`Response:`, JSON.stringify(repos).slice(0, 200));
     console.error("\nTip: Make sure your API key belongs to this workspace.");
     console.error("Run: driftless login --key <key>");
@@ -215156,7 +215229,7 @@ async function scanCommand(args) {
     }
   }
   const result = await api.post("/scan", {
-    workspace_id: workspace.workspace_id,
+    workspace_id: workspaceId,
     repo_id: repo.id,
     diff,
     commit_hash: commitHash,
@@ -215164,7 +215237,7 @@ async function scanCommand(args) {
   });
   const rulesEvaluated = result.rules_evaluated || 0;
   if (result.status === "clean") {
-    analyticsEvent("cli_scan_run", workspace.slug, { violations_found: false, count: 0 });
+    analyticsEvent("cli_scan_run", workspaceSlug, { violations_found: false, count: 0 });
     if (isJSON) {
       emitJSON({ status: "clean", files: changedFiles, rules_evaluated: rulesEvaluated, violations: [] });
     } else {
@@ -215173,7 +215246,7 @@ async function scanCommand(args) {
     process.exit(0);
   }
   if (!result.violations || result.violations.length === 0) {
-    analyticsEvent("cli_scan_run", workspace.slug, { violations_found: false, count: 0 });
+    analyticsEvent("cli_scan_run", workspaceSlug, { violations_found: false, count: 0 });
     if (isJSON) {
       emitJSON({ status: "clean", files: changedFiles, rules_evaluated: rulesEvaluated, violations: [] });
     } else {
@@ -215181,7 +215254,7 @@ async function scanCommand(args) {
     }
     process.exit(0);
   }
-  analyticsEvent("cli_scan_run", workspace.slug, { violations_found: true, count: result.violations.length });
+  analyticsEvent("cli_scan_run", workspaceSlug, { violations_found: true, count: result.violations.length });
   if (isJSON) {
     emitJSON({ status: "violated", files: changedFiles, rules_evaluated: rulesEvaluated, violations: result.violations });
   } else {
@@ -215251,11 +215324,13 @@ function renderSummaryHuman(items) {
   const topicWidth = Math.max(...items.map((i) => i.topic.length), 12) + 2;
   const badgeWidth = Math.max(...items.map((i) => formatBadges(i.badges).length), 8) + 2;
   const statusWidth = Math.max(...items.map((i) => (i.classification?.status || "").length), 8) + 2;
+  const kindWidth = Math.max(...items.map((i) => (i.classification?.kind || "").length), 8) + 2;
   for (const item of items) {
     const topic = pad(item.topic, topicWidth);
     const badges = pad(formatBadges(item.badges), badgeWidth);
     const status = pad(item.classification?.status || "", statusWidth);
-    console.log(`${topic}${status}${badges}${item.summary}`);
+    const kind = pad(item.classification?.kind || "", kindWidth);
+    console.log(`${topic}${status}${kind}${badges}${item.summary}`);
   }
   console.log(`
 ${items.length} topic${items.length === 1 ? "" : "s"}.`);
@@ -215379,10 +215454,15 @@ function countLocalFilesMatching(pattern) {
 }
 async function resolveWorkspaceSlug() {
   try {
-    const me = await api.get("/me");
-    if (me?.slug) return me.slug;
+    const me = await api.get("/me", { timeoutMs: 8e3, retries: 1 });
+    if (me?.slug) {
+      saveWorkspaceToConfig(me.slug, me.workspace_id);
+      return me.slug;
+    }
   } catch {
   }
+  const cached = getCachedWorkspace().slug;
+  if (cached) return cached;
   const remote = getGitRemote();
   if (!remote) {
     console.error("Error: no git remote found.");
@@ -215399,6 +215479,41 @@ async function contextCommand(args) {
   const { flags, positional } = parseArgs(args);
   const subCommand = positional[0];
   const isJSON = !!flags["json"];
+  if (subCommand === "doctor") {
+    let audit;
+    try {
+      audit = await api.get(`/workspaces/${workspaceSlug}/watchers/audit`);
+    } catch (e) {
+      console.error(`Failed to audit context: ${formatError(e)}`);
+      process.exit(1);
+    }
+    if (isJSON) {
+      emitJSON2(audit);
+      const blocking2 = audit.orphaned.length + audit.repo_leak.length;
+      process.exit(blocking2 > 0 ? 1 : 0);
+    }
+    const section = (label, items) => {
+      if (items.length === 0) return;
+      console.log(`
+${label} (${items.length}):`);
+      for (const it of items) {
+        console.log(`  ${it.slug}${it.reason ? `  \u2014 ${it.reason}` : ""}`);
+      }
+    };
+    console.log(`Context audit \u2014 ${audit.total} topic${audit.total === 1 ? "" : "s"}`);
+    section("\u26A0 stale (code changed, context not updated)", audit.stale);
+    section("\u2717 orphaned (repo deleted \u2014 hidden from agents)", audit.orphaned);
+    section("\u2022 draft (suggested, never confirmed)", audit.draft);
+    section("\u2022 docs-pending (doc anchored, never synced)", audit.docs_pending);
+    section("\u2717 repo-leak (references unknown repo ids)", audit.repo_leak);
+    const blocking = audit.orphaned.length + audit.repo_leak.length;
+    if (audit.stale.length + audit.draft.length + audit.docs_pending.length + blocking === 0) {
+      console.log("\nAll context is healthy.");
+    } else if (blocking > 0) {
+      console.log("\nResolve orphaned / repo-leak topics \u2014 they indicate deleted-repo fallout.");
+    }
+    process.exit(blocking > 0 ? 1 : 0);
+  }
   if (subCommand === "list") {
     const query = [];
     if (flags["stale"]) query.push("stale=true");
@@ -216045,45 +216160,92 @@ init_api_client();
 function notLinkedMessage(remote, workspaceSlug) {
   return `Repo '${remote.org}/${remote.repo}' is not registered in workspace '${workspaceSlug}'. Run \`driftless init\` to register it.`;
 }
+function formatDiagnostics(d) {
+  const lines = [];
+  if (d.remote) lines.push(`  repo:        ${d.remote.org}/${d.remote.repo}`);
+  lines.push(`  tried slugs: ${d.triedSlugs.length ? d.triedSlugs.join(", ") : "(none)"}`);
+  lines.push(`  config slug: ${d.configSlug ?? "(not cached \u2014 run `driftless login` or `driftless init`)"}`);
+  if (!d.meAttempted) {
+    lines.push("  /me:         not attempted");
+  } else if (d.meReturned) {
+    lines.push(`  /me:         returned slug=${d.meSlug ?? "(none)"} workspace_id=${d.meWorkspaceId ?? "(none)"}`);
+  } else {
+    lines.push(`  /me:         FAILED \u2014 ${d.meError ?? "unknown error"}`);
+  }
+  if (d.failedEndpoint) lines.push(`  last endpoint: ${d.failedEndpoint} (rejected)`);
+  return lines.join("\n");
+}
 async function fetchRepos(slug) {
   try {
     const raw = await api.get(`/workspaces/${slug}/repos`);
-    return Array.isArray(raw) ? raw : null;
-  } catch {
-    return null;
+    if (Array.isArray(raw)) return { repos: raw };
+    return { error: "unexpected response shape" };
+  } catch (e) {
+    return { error: e instanceof Error ? e.message : String(e) };
   }
 }
 async function resolveRepo() {
   const remote = getGitRemote();
   if (!remote) return { ok: false, reason: "no_remote" };
+  const configSlug = getCachedWorkspace().slug;
   let meSlug;
+  let meWorkspaceId;
+  let meReturned = false;
+  let meError;
   try {
-    const me = await api.get("/me");
+    const me = await api.get("/me", { timeoutMs: 8e3, retries: 1 });
+    meReturned = true;
     meSlug = me?.slug;
-  } catch {
+    meWorkspaceId = me?.workspace_id;
+    if (meSlug) saveWorkspaceToConfig(meSlug, meWorkspaceId);
+  } catch (e) {
+    meError = e instanceof Error ? e.message : String(e);
   }
-  const candidates = [...new Set([meSlug, remote.org].filter(Boolean))];
+  const candidates = [...new Set([configSlug, meSlug, remote.org].filter(Boolean))];
   let lastLinkedSlug;
+  let failedEndpoint;
   for (const slug of candidates) {
-    const repos = await fetchRepos(slug);
-    if (!repos) continue;
-    const repo = repos.find((r) => r.github_org === remote.org && r.github_repo === remote.repo);
+    const result = await fetchRepos(slug);
+    if ("error" in result) {
+      failedEndpoint = `/workspaces/${slug}/repos`;
+      continue;
+    }
+    const repo = result.repos.find((r) => r.github_org === remote.org && r.github_repo === remote.repo);
     if (repo) {
+      saveWorkspaceToConfig(slug, meWorkspaceId);
+      const source = slug === configSlug ? "config" : slug === meSlug ? "me" : "git-org";
       return {
         ok: true,
         workspaceSlug: slug,
         repoId: repo.id,
         remote,
-        hasScanBaseline: !!repo.scan_summary
+        hasScanBaseline: !!repo.scan_summary,
+        source
       };
     }
     lastLinkedSlug = slug;
   }
+  const diagnostics = {
+    remote,
+    triedSlugs: candidates,
+    configSlug,
+    meAttempted: true,
+    meReturned,
+    meSlug,
+    meWorkspaceId,
+    meError,
+    failedEndpoint
+  };
   if (lastLinkedSlug) {
-    return { ok: false, reason: "not_linked", workspaceSlug: lastLinkedSlug, remote };
+    return { ok: false, reason: "not_linked", workspaceSlug: lastLinkedSlug, remote, diagnostics };
   }
-  const triedSlugs = candidates.join(", ");
-  return { ok: false, reason: "no_workspace", remote, detail: `tried slugs: ${triedSlugs}` };
+  return {
+    ok: false,
+    reason: "no_workspace",
+    remote,
+    detail: formatDiagnostics(diagnostics),
+    diagnostics
+  };
 }
 
 // src/commands/sync.ts
@@ -216113,32 +216275,54 @@ async function syncCommand(args) {
   const isJSON = !!flags["json"];
   const resolution = await resolveRepo();
   if (!resolution.ok) {
-    const base = resolution.reason === "no_remote" ? "Error: no git remote configured." : resolution.reason === "no_workspace" ? "Error: could not resolve workspace." : notLinkedMessage(resolution.remote, resolution.workspaceSlug);
-    const detail = resolution.reason === "no_workspace" && resolution.detail ? ` (${resolution.detail})` : "";
-    const msg = base + detail;
+    if (resolution.reason === "no_remote") {
+      if (!isJSON) console.log("\u26A0 Error: no git remote configured.");
+      else emitJSON3({ error: "no_remote", message: "no git remote configured" });
+      process.exit(1);
+    }
+    if (resolution.reason === "not_linked") {
+      const msg = notLinkedMessage(resolution.remote, resolution.workspaceSlug);
+      if (!isJSON) {
+        console.log(`\u26A0 ${msg}`);
+        console.log("  Run `driftless doctor` to diagnose.");
+      } else {
+        emitJSON3({ error: "not_linked", message: msg, diagnostics: resolution.diagnostics });
+      }
+      process.exit(1);
+    }
     if (!isJSON) {
-      console.log(`\u26A0 ${msg}`);
-      if (resolution.reason !== "no_remote") console.log("  Run `driftless doctor` to diagnose.");
+      console.log("\u26A0 Error: could not resolve workspace.");
+      if (resolution.detail) console.log(resolution.detail);
+      console.log("  Run `driftless doctor` to diagnose.");
     } else {
-      emitJSON3({ error: resolution.reason, message: msg });
+      emitJSON3({
+        error: "no_workspace",
+        message: "could not resolve workspace",
+        diagnostics: resolution.diagnostics
+      });
     }
     process.exit(1);
   }
-  const { workspaceSlug, repoId, remote } = resolution;
-  const [eventsRes, staleTopics, violations, suggestedTopics] = await Promise.allSettled([
+  const { workspaceSlug, repoId, remote, source } = resolution;
+  const [eventsRes, staleTopics, violations, suggestedTopics, prActivity] = await Promise.allSettled([
     api.get(`/workspaces/${workspaceSlug}/watchers/events?repo_id=${repoId}&limit=20`),
     api.get(`/workspaces/${workspaceSlug}/watchers?stale=true&repo=${repoId}`),
     api.get(`/workspaces/${workspaceSlug}/violations?repo_id=${repoId}&status=open&limit=20`),
-    api.get(`/workspaces/${workspaceSlug}/watchers?suggested=true&repo=${repoId}`)
+    api.get(`/workspaces/${workspaceSlug}/watchers?suggested=true&repo=${repoId}`),
+    api.get(`/workspaces/${workspaceSlug}/pr-activity?repo_id=${repoId}&limit=5`)
   ]);
   const events = eventsRes.status === "fulfilled" ? eventsRes.value.events ?? [] : [];
   const stale = staleTopics.status === "fulfilled" ? staleTopics.value : [];
   const rawViolations = violations.status === "fulfilled" ? violations.value : [];
   const openViolations = Array.isArray(rawViolations) ? rawViolations : rawViolations.violations ?? rawViolations.items ?? [];
   const suggested = suggestedTopics.status === "fulfilled" ? suggestedTopics.value : [];
+  const rawPr = prActivity.status === "fulfilled" ? prActivity.value : [];
+  const prs = Array.isArray(rawPr) ? rawPr : rawPr.items ?? [];
   if (isJSON) {
     emitJSON3({
       repo: `${remote.org}/${remote.repo}`,
+      workspace: workspaceSlug,
+      resolved_via: source,
       stale_topics: stale.map((t) => ({ topic: t.topic, reason: t.stale?.reason ?? null })),
       recent_events: events.slice(0, 10).map((e) => ({
         type: e.event_type,
@@ -216152,11 +216336,20 @@ async function syncCommand(args) {
         status: v.status,
         author: v.author
       })),
-      suggested_pending: suggested.length
+      suggested_pending: suggested.length,
+      pr_activity: prs.slice(0, 5).map((p) => ({
+        pr_number: p.pr_number,
+        title: p.pr_title,
+        author: p.pr_author,
+        risk: p.risk ?? null,
+        topics: p.watcher_slugs ?? [],
+        observed_at: p.observed_at
+      }))
     });
     process.exit(0);
   }
-  console.log(`\u258C ${remote.org}/${remote.repo}
+  console.log(`\u258C ${remote.org}/${remote.repo}`);
+  console.log(`  workspace: ${workspaceSlug}  (resolved via ${source})
 `);
   if (stale.length > 0) {
     console.log(`\u26A0  ${stale.length} stale topic${stale.length === 1 ? "" : "s"} \u2014 code changed, context not updated:`);
@@ -216184,12 +216377,21 @@ async function syncCommand(args) {
     if (openViolations.length > 5) console.log(`   ... and ${openViolations.length - 5} more`);
     console.log("");
   }
+  if (prs.length > 0) {
+    console.log(`PR activity (${prs.length}, via GitHub App \u2014 remote, not local):`);
+    for (const p of prs.slice(0, 5)) {
+      const risk = p.risk ? `[${p.risk}] ` : "";
+      const topics = (p.watcher_slugs ?? []).length ? `  \u2192 ${(p.watcher_slugs ?? []).join(", ")}` : "";
+      console.log(`  ${risk}#${p.pr_number} ${String(p.pr_title ?? "").slice(0, 70)}${topics}`);
+    }
+    console.log("");
+  }
   if (suggested.length > 0) {
     console.log(`${suggested.length} suggested topic${suggested.length === 1 ? "" : "s"} from init \u2014 review and confirm:`);
     console.log(`  driftless context list --suggested`);
     console.log("");
   }
-  if (stale.length === 0 && events.length === 0 && openViolations.length === 0 && suggested.length === 0) {
+  if (stale.length === 0 && events.length === 0 && openViolations.length === 0 && suggested.length === 0 && prs.length === 0) {
     console.log("Cloud context is up to date. Nothing to sync.");
   } else {
     console.log("Review stale topics, then update context before touching code.");
@@ -216203,6 +216405,7 @@ var import_node_path6 = require("node:path");
 var import_node_readline = require("node:readline");
 var import_node_child_process2 = require("node:child_process");
 var import_node_os2 = require("node:os");
+init_api_client();
 var CONFIG_DIR = (0, import_node_path6.resolve)((0, import_node_os2.homedir)(), ".driftless");
 var CONFIG_PATH2 = (0, import_node_path6.resolve)(CONFIG_DIR, "config.json");
 function openBrowser(url) {
@@ -216214,7 +216417,7 @@ async function loginCommand(args) {
   const keyIndex = args.indexOf("--key");
   if (keyIndex !== -1 && args[keyIndex + 1]) {
     const apiKey2 = args[keyIndex + 1];
-    saveConfig(apiKey2);
+    await saveConfig(apiKey2);
     return;
   }
   const apiUrl = process.env["DRIFTLESS_API_URL"] || "https://api.driftless.icu/api/v1";
@@ -216245,9 +216448,9 @@ async function loginCommand(args) {
     console.error("Get a valid key from your Driftless Dashboard \u2192 Settings \u2192 API Keys.");
     process.exit(1);
   }
-  saveConfig(apiKey, apiUrl);
+  await saveConfig(apiKey, apiUrl);
 }
-function saveConfig(apiKey, apiUrl) {
+async function saveConfig(apiKey, apiUrl) {
   const url = apiUrl || "https://api.driftless.icu/api/v1";
   try {
     if (!(0, import_node_fs6.existsSync)(CONFIG_DIR)) {
@@ -216257,16 +216460,24 @@ function saveConfig(apiKey, apiUrl) {
       CONFIG_PATH2,
       JSON.stringify({ api_key: apiKey, api_url: url }, null, 2) + "\n"
     );
-    console.log();
-    console.log("Logged in successfully.");
-    console.log(`  Config: ${CONFIG_PATH2}`);
-    console.log();
-    console.log("Try: driftless scan --diff");
-    process.exit(0);
   } catch (err) {
     console.error("Failed to save config:", err);
     process.exit(1);
   }
+  console.log();
+  console.log("Logged in successfully.");
+  console.log(`  Config: ${CONFIG_PATH2}`);
+  try {
+    const me = await api.get("/me", { timeoutMs: 8e3, retries: 1 });
+    if (me?.slug) {
+      saveWorkspaceToConfig(me.slug, me.workspace_id);
+      console.log(`  Workspace: ${me.slug}`);
+    }
+  } catch {
+  }
+  console.log();
+  console.log("Try: driftless scan --diff");
+  process.exit(0);
 }
 
 // src/commands/doctor.ts
@@ -216298,33 +216509,27 @@ async function doctorCommand() {
   async function getMe() {
     if (meCache) return meCache;
     try {
-      meCache = await api.get("/me");
+      meCache = await api.get("/me", { timeoutMs: 8e3, retries: 1 });
     } catch {
       meCache = null;
     }
     return meCache;
   }
-  let reposCache = null;
-  async function getRepos(slug) {
-    if (reposCache) return reposCache;
-    try {
-      reposCache = await api.get(`/workspaces/${slug}/repos`);
-    } catch {
-      reposCache = null;
-    }
-    return reposCache;
-  }
-  if (apiKey && apiUrl !== "http://localhost:3000/api/v1") {
-    const me = await getMe();
-    if (me?.slug) {
-      checks.push({ name: "Workspace", status: "ok", detail: me.slug });
-    } else {
-      checks.push({ name: "Workspace", status: "warn", detail: "API returned no workspace. Run `driftless init`" });
-    }
-  } else {
+  const resolution = await resolveRepo();
+  const localOrNoKey = !apiKey || apiUrl === "http://localhost:3000/api/v1";
+  if (localOrNoKey) {
     checks.push({ name: "Workspace", status: "warn", detail: "Skipped (local API or no key)" });
+  } else if (resolution.ok) {
+    checks.push({ name: "Workspace", status: "ok", detail: `${resolution.workspaceSlug} (source: ${resolution.source})` });
+  } else if (resolution.reason === "not_linked" && resolution.workspaceSlug) {
+    checks.push({ name: "Workspace", status: "ok", detail: resolution.workspaceSlug });
+  } else if (resolution.reason === "no_workspace" && resolution.diagnostics) {
+    const d = resolution.diagnostics;
+    const detail = !d.meReturned && d.meError ? `/me failed (${d.meError}); cached=${d.configSlug ?? "none"}` : "Could not resolve. Run `driftless init`";
+    checks.push({ name: "Workspace", status: "warn", detail });
+  } else {
+    checks.push({ name: "Workspace", status: "warn", detail: "Could not resolve (no git remote)" });
   }
-  const resolution = await resolveRepo();
   if (resolution.ok) {
     checks.push({ name: "Repo linked", status: "ok", detail: `${resolution.remote.org}/${resolution.remote.repo}` });
     checks.push({
@@ -216358,18 +216563,23 @@ async function doctorCommand() {
     if (me?.slug) {
       try {
         const integrations = await api.get(`/workspaces/${me.slug}/integrations`);
-        const ghApp = integrations.find((i) => i.type === "github_app" && i.active);
-        if (ghApp) {
+        const ghApp = integrations.find((i) => i.type === "github_app");
+        if (ghApp && ghApp.active) {
           checks.push({ name: "GitHub App", status: "ok", detail: "Installed and active" });
+        } else if (ghApp && !ghApp.active) {
+          checks.push({ name: "GitHub App", status: "warn", detail: "Installed, activating \u2014 wait ~60s then re-run doctor" });
         } else {
-          checks.push({ name: "GitHub App", status: "warn", detail: "Not installed \u2014 driftless.icu/ecosystem \u2192 Settings \u2192 Integrations (if just installed, wait ~60s)" });
+          checks.push({ name: "GitHub App", status: "warn", detail: "Not installed \u2014 driftless.icu/ecosystem \u2192 Settings \u2192 Integrations" });
         }
       } catch (err) {
-        const isNotFound = err?.status === 404 || String(err?.message ?? "").includes("404");
+        const msg = String(err?.message ?? "");
+        const isNotFound = err?.status === 404 || /HTTP 404|404/.test(msg);
         if (isNotFound) {
           checks.push({ name: "GitHub App", status: "warn", detail: "Not installed \u2014 driftless.icu/ecosystem \u2192 Settings \u2192 Integrations" });
+        } else if (/timed out|Connection failed|ENOTFOUND|ECONNREFUSED/i.test(msg)) {
+          checks.push({ name: "GitHub App", status: "warn", detail: "Could not verify \u2014 API unreachable (network/timeout)" });
         } else {
-          checks.push({ name: "GitHub App", status: "warn", detail: "Could not verify \u2014 check your connection or API key" });
+          checks.push({ name: "GitHub App", status: "warn", detail: "Could not verify \u2014 API key may lack permission for this workspace" });
         }
       }
     } else {
@@ -216393,6 +216603,10 @@ async function doctorCommand() {
   }
   console.log(`
 ${okCount} ok, ${warnCount} warnings, ${failCount} failures`);
+  if (!resolution.ok && resolution.reason === "no_workspace" && resolution.diagnostics) {
+    console.log("\nWorkspace resolution diagnostics:");
+    console.log(formatDiagnostics(resolution.diagnostics));
+  }
   if (failCount > 0) {
     console.log("\nFix failures before running `driftless init` or `driftless scan`.");
     process.exit(1);
@@ -216405,7 +216619,7 @@ function pad2(s, n) {
 }
 
 // src/index.ts
-var VERSION = "0.1.38";
+var VERSION = "0.1.42";
 var HELP_TEXT = `Driftless CLI v${VERSION} \u2014 Living repo context for humans and coding agents
 
 Install:  npm install -g @driftless-sh/cli
@@ -216450,6 +216664,7 @@ Context subcommands:
   update <topic> --invariant ".." Append an invariant
   update <topic> --check "..."  Append a required check
   delete <topic>                Delete a topic
+  doctor                        Audit context health (stale/orphaned/draft/docs-pending/repo-leak)
   load --files "p1,p2"          Match topics by file paths
 
 Flags:
@@ -216550,6 +216765,7 @@ Subcommands:
   sync <topic> --note "..."     Add a note to a topic
   update <topic> [opts]         Update topic fields
   delete <topic>                Delete a topic
+  doctor                        Audit context health (stale/orphaned/draft/docs-pending/repo-leak)
   load --files "p1,p2,..."      Match topics for given file paths
 
 List filters:
@@ -216687,7 +216903,11 @@ async function main() {
   }
 }
 main().catch((err) => {
-  console.error("Error:", err.message);
+  const msg = err?.message ?? String(err);
+  console.error("Error:", msg);
+  if (/Connection failed|timed out|ENOTFOUND|ECONNREFUSED|Unauthorized|HTTP 401|HTTP 403|resolve workspace/i.test(msg)) {
+    console.error("\nNext: run `driftless doctor` to diagnose auth/connectivity/workspace.");
+  }
   process.exit(1);
 });
 /*! Bundled license information: