@gaodefa/daocore 2026.5.31 → 2026.5.33

package/dist/doctor-state-integrity-CZdBuNdm.js

@@ -0,0 +1,1231 @@
+import { c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-DyL154ka.js";
+import { o as resolveRequiredHomeDir } from "./home-dir-Bs0GlzoJ.js";
+import { g as resolveOAuthDir, v as resolveStateDir } from "./paths-ZwPDM6zn.js";
+import { t as formatCliCommand } from "./command-format-tWmMYcvZ.js";
+import { g as shortenHomePath } from "./utils-CNnMhEDp.js";
+import { r as normalizeProviderId } from "./provider-id-zTW9Rdln.js";
+import { r as resolveAgentModelFallbackValues } from "./model-input-ChW9XXsQ.js";
+import { u as resolveAgentModelFallbacksOverride } from "./agent-scope-Dx1S0aWX.js";
+import { a as isSubagentSessionKey, c as parseAgentSessionKey } from "./session-key-utils-Ce_xWkNq.js";
+import { d as resolveAgentIdFromSessionKey, l as normalizeAgentId, v as toAgentStoreSessionKey } from "./session-key-Bte0mmcq.js";
+import { c as resolveDefaultAgentId, n as listAgentIds, r as resolveAgentConfig, t as listAgentEntries } from "./agent-scope-config-CJUQxn7u.js";
+import { t as resolveAgentHarnessPolicy } from "./policy-DqVcSoDg.js";
+import { t as asNullableObjectRecord } from "./record-coerce-aMlBWINm.js";
+import { i as resolveMainSessionKey, t as canonicalizeMainSessionAlias } from "./main-session-D3q_5w0B.js";
+import { r as isPrimarySessionTranscriptFileName, t as formatSessionArchiveTimestamp } from "./artifacts-BZhcmsUl.js";
+import { a as resolveSessionFilePathOptions, i as resolveSessionFilePath, l as resolveSessionTranscriptsDirForAgent, u as resolveStorePath } from "./paths-8MFrTNIB.js";
+import { t as loadSessionStore } from "./store-load-B817r-3Z.js";
+import { u as updateSessionStore } from "./store-C4uyNaPD.js";
+import { i as parseModelRef, n as modelKey } from "./model-selection-normalize-DLmoprpp.js";
+import { s as resolveDefaultModelForAgent } from "./model-selection-D1TyOrqK.js";
+import { i as isSubagentRecoveryWedgedEntry, r as formatSubagentRecoveryWedgedReason, t as clearWedgedSubagentRecoveryAbort } from "./subagent-recovery-state-Bz-c9nEo.js";
+import "./selection-44C59Jt6.js";
+import { n as isHeartbeatOkResponse, r as isHeartbeatUserMessage } from "./heartbeat-filter-B0XYZgGB.js";
+import { n as resolveHeartbeatIntervalMs } from "./heartbeat-summary-D4s-V11G.js";
+import { f as listConfiguredChannelIdsForReadOnlyScope } from "./channel-plugin-ids-l7ScZ28F.js";
+import { t as resolveHeartbeatDeliveryTarget } from "./targets-DIYZ3VNP.js";
+import { t as resolveDaoCoreAgentDir } from "./agent-dir-compat-X9XMR4LI.js";
+import { t as note } from "./note-CbITX52o.js";
+import { t as resolveMemoryBackendConfig } from "./backend-config-Dgzzeq8z.js";
+import "./engine-storage-CGtcXK3z.js";
+import { a as listPluginDoctorSessionRouteStateOwners } from "./doctor-contract-registry-DG39WvaV.js";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+//#region src/commands/doctor-heartbeat-main-session-repair.ts
+function countLabel$2(count, singular, plural = `${singular}s`) {
+	return `${count} ${count === 1 ? singular : plural}`;
+}
+function existsFile$1(filePath) {
+	try {
+		return fs.existsSync(filePath) && fs.statSync(filePath).isFile();
+	} catch {
+		return false;
+	}
+}
+function sessionEntryHasSyntheticHeartbeatOwnership(entry) {
+	return typeof entry.heartbeatIsolatedBaseSessionKey === "string" && entry.heartbeatIsolatedBaseSessionKey.trim().length > 0;
+}
+function parseTranscriptMessageLine(line) {
+	let parsed;
+	try {
+		parsed = JSON.parse(line);
+	} catch {
+		return null;
+	}
+	const record = asNullableObjectRecord(parsed);
+	if (!record) return null;
+	const message = asNullableObjectRecord(record.message) ?? record;
+	const role = message.role;
+	if (typeof role !== "string") return null;
+	return {
+		role,
+		content: message.content
+	};
+}
+function summarizeTranscriptHeartbeatMessages(transcriptPath) {
+	let raw;
+	try {
+		raw = fs.readFileSync(transcriptPath, "utf8");
+	} catch {
+		return null;
+	}
+	const summary = {
+		inspectedMessages: 0,
+		userMessages: 0,
+		heartbeatUserMessages: 0,
+		nonHeartbeatUserMessages: 0,
+		assistantMessages: 0,
+		heartbeatOkAssistantMessages: 0
+	};
+	for (const line of raw.split(/\r?\n/)) {
+		const trimmed = line.trim();
+		if (!trimmed) continue;
+		const message = parseTranscriptMessageLine(trimmed);
+		if (!message) continue;
+		summary.inspectedMessages += 1;
+		if (message.role === "user") {
+			summary.userMessages += 1;
+			if (isHeartbeatUserMessage(message)) summary.heartbeatUserMessages += 1;
+			else summary.nonHeartbeatUserMessages += 1;
+		} else if (message.role === "assistant") {
+			summary.assistantMessages += 1;
+			if (isHeartbeatOkResponse(message)) summary.heartbeatOkAssistantMessages += 1;
+		}
+	}
+	return summary.inspectedMessages > 0 ? summary : null;
+}
+function resolveHeartbeatMainSessionRepairCandidate(params) {
+	const { entry, transcriptPath } = params;
+	if (!entry) return null;
+	if (!(entry.lastInteractionAt === void 0)) return null;
+	const hasSyntheticHeartbeatOwnership = sessionEntryHasSyntheticHeartbeatOwnership(entry);
+	if (hasSyntheticHeartbeatOwnership && !transcriptPath) return { reason: "metadata" };
+	if (!transcriptPath) return null;
+	const summary = summarizeTranscriptHeartbeatMessages(transcriptPath);
+	if (!summary) return null;
+	if (summary.heartbeatUserMessages > 0 && summary.userMessages === summary.heartbeatUserMessages && summary.nonHeartbeatUserMessages === 0) return {
+		reason: hasSyntheticHeartbeatOwnership ? "metadata" : "transcript",
+		summary
+	};
+	return null;
+}
+function resolveHeartbeatMainRecoveryKey(params) {
+	const parsed = parseAgentSessionKey(params.mainKey);
+	if (!parsed) return null;
+	const stamp = formatSessionArchiveTimestamp(params.nowMs).toLowerCase();
+	const base = `agent:${parsed.agentId}:heartbeat-recovered-${stamp}`;
+	if (!params.store[base]) return base;
+	for (let index = 2; index <= 100; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!params.store[candidate]) return candidate;
+	}
+	return null;
+}
+function moveHeartbeatMainSessionEntry(params) {
+	const entry = params.store[params.mainKey];
+	if (!entry || params.store[params.recoveredKey]) return false;
+	params.store[params.recoveredKey] = entry;
+	delete params.store[params.mainKey];
+	return true;
+}
+function resolveTuiLastSessionPath(stateDir) {
+	return path.join(stateDir, "tui", "last-session.json");
+}
+function clearTuiLastSessionPointers(params) {
+	if (params.sessionKeys.size === 0 || !existsFile$1(params.filePath)) return 0;
+	let parsed;
+	try {
+		parsed = JSON.parse(fs.readFileSync(params.filePath, "utf8"));
+	} catch {
+		return 0;
+	}
+	const store = asNullableObjectRecord(parsed);
+	if (!store) return 0;
+	let removed = 0;
+	const next = {};
+	for (const [key, value] of Object.entries(store)) {
+		const sessionKey = asNullableObjectRecord(value)?.sessionKey;
+		if (typeof sessionKey === "string" && params.sessionKeys.has(sessionKey)) {
+			removed += 1;
+			continue;
+		}
+		next[key] = value;
+	}
+	if (removed === 0) return 0;
+	try {
+		fs.writeFileSync(params.filePath, `${JSON.stringify(next, null, 2)}\n`, { mode: 384 });
+	} catch {
+		return 0;
+	}
+	return removed;
+}
+async function repairHeartbeatPoisonedMainSession(params) {
+	const mainKey = resolveMainSessionKey(params.cfg);
+	const mainEntry = params.store[mainKey];
+	if (!mainEntry?.sessionId) return;
+	let transcriptPath;
+	try {
+		transcriptPath = resolveSessionFilePath(mainEntry.sessionId, mainEntry, params.sessionPathOpts);
+	} catch {
+		transcriptPath = void 0;
+	}
+	const candidate = resolveHeartbeatMainSessionRepairCandidate({
+		entry: mainEntry,
+		transcriptPath
+	});
+	if (!candidate) return;
+	const recoveredKey = resolveHeartbeatMainRecoveryKey({
+		mainKey,
+		store: params.store
+	});
+	if (!recoveredKey) {
+		params.warnings.push(`- Main session ${mainKey} appears heartbeat-owned, but doctor could not choose a safe recovery key.`);
+		return;
+	}
+	const reason = candidate.reason === "metadata" ? "heartbeat metadata" : `${candidate.summary?.heartbeatUserMessages ?? 0} heartbeat-only user message(s)`;
+	params.warnings.push([`- Main session ${mainKey} appears to be a heartbeat-owned session (${reason}).`, `  Doctor can move it to ${recoveredKey} and let the next interactive launch create a fresh main session.`].join("\n"));
+	if (!await params.prompter.confirmRuntimeRepair({
+		message: `Move heartbeat-owned main session ${mainKey} to ${recoveredKey} and clear stale TUI restore pointers?`,
+		initialValue: true
+	})) return;
+	let movedEntry;
+	await updateSessionStore(params.absoluteStorePath, (currentStore) => {
+		const currentEntry = currentStore[mainKey];
+		if (!resolveHeartbeatMainSessionRepairCandidate({
+			entry: currentEntry,
+			transcriptPath
+		})) return;
+		if (moveHeartbeatMainSessionEntry({
+			store: currentStore,
+			mainKey,
+			recoveredKey
+		})) movedEntry = currentEntry;
+	});
+	if (!movedEntry) {
+		params.warnings.push(`- Main session ${mainKey} changed before repair could move it.`);
+		return;
+	}
+	params.store[recoveredKey] = movedEntry;
+	delete params.store[mainKey];
+	const clearedPointers = clearTuiLastSessionPointers({
+		filePath: resolveTuiLastSessionPath(params.stateDir),
+		sessionKeys: new Set([mainKey])
+	});
+	params.changes.push(`- Moved heartbeat-owned main session ${mainKey} to ${recoveredKey}.`);
+	if (clearedPointers > 0) params.changes.push(`- Cleared ${countLabel$2(clearedPointers, "stale TUI last-session pointer")} for ${mainKey}.`);
+}
+//#endregion
+//#region src/commands/doctor-heartbeat-session-target.ts
+function hasExplicitHeartbeatAgents(cfg) {
+	return listAgentEntries(cfg).some((entry) => Boolean(entry?.heartbeat));
+}
+function resolveHeartbeatConfig(cfg, agentId) {
+	const defaults = cfg.agents?.defaults?.heartbeat;
+	const overrides = resolveAgentConfig(cfg, agentId)?.heartbeat;
+	if (!defaults && !overrides) return overrides;
+	return {
+		...defaults,
+		...overrides
+	};
+}
+function listHeartbeatDoctorAgents(cfg) {
+	if (hasExplicitHeartbeatAgents(cfg)) return listAgentEntries(cfg).filter((entry) => entry?.heartbeat).map((entry) => normalizeAgentId(entry.id)).filter((agentId) => agentId);
+	if (cfg.agents?.defaults?.heartbeat) return listAgentIds(cfg);
+	return [];
+}
+/**
+* Detect heartbeat configs that pin a non-existent session. The runtime
+* resolves `heartbeat.session` to a sessionKey via `resolveHeartbeatSession`;
+* if the entry is missing, `resolveHeartbeatDeliveryTarget` falls back to
+* `{channel:"none", reason:"no-target"}` and the heartbeat fires a model
+* call whose reply has nowhere to land. Common cause: the configured Slack
+* channel ID does not match any channel the agent has ever joined (e.g.,
+* heartbeat pins channel `c0b2eddpw95` but the agent only has sessions in
+* `c0ag7jag35g`, or the agent has no Slack bot at all).
+*
+* Warning only — repair would mean rewriting the config, which is the
+* operator's intent to express.
+*/
+function describeHeartbeatSessionTargetIssues(cfg) {
+	const warnings = [];
+	const sessionScope = cfg.session?.scope ?? "per-sender";
+	for (const agentId of listHeartbeatDoctorAgents(cfg)) {
+		if (!agentId) continue;
+		const resolvedAgentId = normalizeAgentId(agentId);
+		const heartbeatConfig = resolveHeartbeatConfig(cfg, resolvedAgentId);
+		if (!heartbeatConfig) continue;
+		if (!resolveHeartbeatIntervalMs(cfg, void 0, heartbeatConfig)) continue;
+		const configuredSession = normalizeOptionalString(heartbeatConfig.session);
+		if (!configuredSession) continue;
+		const normalizedSession = configuredSession.toLowerCase();
+		if (normalizedSession === "main" || normalizedSession === "global") continue;
+		if (isSubagentSessionKey(configuredSession)) continue;
+		if (sessionScope === "global") continue;
+		const target = normalizeOptionalString(heartbeatConfig.target);
+		if (!target || target === "none") continue;
+		const deliveryWithoutSession = resolveHeartbeatDeliveryTarget({
+			cfg,
+			heartbeat: heartbeatConfig
+		});
+		if (deliveryWithoutSession.channel !== "none" && deliveryWithoutSession.to) continue;
+		const candidateSession = toAgentStoreSessionKey({
+			agentId: resolvedAgentId,
+			requestKey: configuredSession,
+			mainKey: cfg.session?.mainKey
+		});
+		if (isSubagentSessionKey(candidateSession)) continue;
+		const canonicalSession = canonicalizeMainSessionAlias({
+			cfg,
+			agentId: resolvedAgentId,
+			sessionKey: candidateSession
+		});
+		if (canonicalSession === "global" || isSubagentSessionKey(canonicalSession) || resolveAgentIdFromSessionKey(canonicalSession) !== resolvedAgentId) continue;
+		const storeAgentId = resolvedAgentId;
+		const storePath = resolveStorePath(cfg.session?.store, { agentId: storeAgentId });
+		if (loadSessionStore(storePath)[canonicalSession]) continue;
+		warnings.push([
+			`- Agent ${agentId} heartbeat.session pins ${configuredSession} (resolved to ${canonicalSession}) but that session has no entry in ${storePath}.`,
+			`  Heartbeats will run but resolve delivery to channel="none"/reason="no-target", so replies are dropped silently.`,
+			`  Fix: point heartbeat.session at a session the agent actually owns, set heartbeat.target="none" to suppress delivery, or remove the heartbeat.session field to fall back to the agent main session.`
+		].join("\n"));
+	}
+	return warnings;
+}
+//#endregion
+//#region src/commands/doctor-session-state-providers.ts
+function countLabel$1(count, singular, plural = `${singular}s`) {
+	return `${count} ${count === 1 ? singular : plural}`;
+}
+function normalizeString(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function normalizeIdSet(values) {
+	return new Set((values ?? []).map((value) => normalizeProviderId(value)));
+}
+function normalizePrefixList(values) {
+	return (values ?? []).map((value) => value.trim().toLowerCase()).filter(Boolean);
+}
+function ownsPrefixedValue(prefixes, value) {
+	const normalized = normalizeString(value)?.toLowerCase();
+	return normalized !== void 0 && prefixes.some((prefix) => normalized.startsWith(prefix));
+}
+function countSessionLabel(count) {
+	return countLabel$1(count, "session");
+}
+function repairExample(repair) {
+	return `${repair.key} (${repair.reasons.join(", ")})`;
+}
+function resolveSessionAgentId(cfg, sessionKey) {
+	return parseAgentSessionKey(sessionKey)?.agentId ?? resolveDefaultAgentId(cfg);
+}
+function resolveConfiguredDoctorSessionStateRoute(params) {
+	const agentId = resolveSessionAgentId(params.cfg, params.sessionKey);
+	const primary = resolveDefaultModelForAgent({
+		cfg: params.cfg,
+		agentId
+	});
+	const configuredModelRefs = /* @__PURE__ */ new Set();
+	const addRef = (provider, model) => {
+		configuredModelRefs.add(modelKey(provider, model));
+	};
+	addRef(primary.provider, primary.model);
+	const fallbacks = resolveAgentModelFallbacksOverride(params.cfg, agentId) ?? resolveAgentModelFallbackValues(params.cfg.agents?.defaults?.model);
+	for (const fallback of fallbacks) {
+		const parsed = parseModelRef(fallback, primary.provider, { allowPluginNormalization: false });
+		if (parsed) addRef(parsed.provider, parsed.model);
+	}
+	const runtime = resolveAgentHarnessPolicy({
+		provider: primary.provider,
+		modelId: primary.model,
+		config: params.cfg,
+		agentId,
+		sessionKey: params.sessionKey
+	}).runtime;
+	return {
+		defaultProvider: primary.provider,
+		configuredModelRefs: [...configuredModelRefs],
+		runtime
+	};
+}
+function resolvePluginDoctorSessionRouteStateOwners(params) {
+	return listPluginDoctorSessionRouteStateOwners({
+		config: params.cfg,
+		env: params.env
+	});
+}
+function entryMayContainPluginSessionRouteState(entry) {
+	const record = entry;
+	return normalizeString(record.providerOverride) !== void 0 || normalizeString(record.modelOverride) !== void 0 || normalizeString(record.modelOverrideSource) !== void 0 || record.liveModelSwitchPending !== void 0 || normalizeString(record.modelProvider) !== void 0 || normalizeString(record.model) !== void 0 || normalizeString(record.agentHarnessId) !== void 0 || normalizeString(record.agentRuntimeOverride) !== void 0 || record.cliSessionBindings !== void 0 || record.cliSessionIds !== void 0 || normalizeString(record.authProfileOverride) !== void 0 || normalizeString(record.authProfileOverrideSource) !== void 0;
+}
+function storeMayContainPluginSessionRouteState(store) {
+	return Object.values(store).some((entry) => entryMayContainPluginSessionRouteState(entry));
+}
+function resolvePersistedOverrideModelRef(params) {
+	const overrideModel = normalizeString(params.overrideModel);
+	if (!overrideModel) return null;
+	const overrideProvider = normalizeString(params.overrideProvider);
+	return parseModelRef(overrideProvider ? `${overrideProvider}/${overrideModel}` : overrideModel, params.defaultProvider, { allowPluginNormalization: false });
+}
+function addReason(reasons, reason) {
+	if (!reasons.includes(reason)) reasons.push(reason);
+}
+function routeAllowsOwnerState(params) {
+	const providerIds = normalizeIdSet(params.owner.providerIds);
+	const runtimeIds = normalizeIdSet(params.owner.runtimeIds);
+	const routeRuntime = normalizeString(params.route?.runtime);
+	if (routeRuntime && runtimeIds.has(normalizeProviderId(routeRuntime))) return true;
+	return params.route?.configuredModelRefs.some((ref) => {
+		const slash = ref.indexOf("/");
+		return slash > 0 && providerIds.has(normalizeProviderId(ref.slice(0, slash)));
+	}) ?? false;
+}
+function hasOwnedCliSession(params) {
+	const bindings = params.entry.cliSessionBindings;
+	const ids = params.entry.cliSessionIds;
+	return params.cliSessionKeys.some((key) => {
+		const normalized = normalizeProviderId(key);
+		return bindings !== null && typeof bindings === "object" && normalized in bindings && bindings[normalized] !== void 0 || ids !== null && typeof ids === "object" && normalized in ids && ids[normalized] !== void 0;
+	});
+}
+function modelRefKey(provider, model) {
+	return modelKey(provider, model).toLowerCase();
+}
+function scanEntryForOwner(params) {
+	const providerIds = normalizeIdSet(params.owner.providerIds);
+	const runtimeIds = normalizeIdSet(params.owner.runtimeIds);
+	const cliSessionKeys = [...normalizeIdSet(params.owner.cliSessionKeys)];
+	const authProfilePrefixes = normalizePrefixList(params.owner.authProfilePrefixes);
+	const routeAllowsOwner = routeAllowsOwnerState({
+		owner: params.owner,
+		route: params.route
+	});
+	const routeRuntime = normalizeString(params.route?.runtime);
+	const routeAllowsOwnerRuntime = routeRuntime !== void 0 && runtimeIds.has(normalizeProviderId(routeRuntime));
+	const reasons = [];
+	const pinnedRuntimeKeys = [];
+	const directOverride = resolvePersistedOverrideModelRef({
+		defaultProvider: params.route?.defaultProvider ?? "",
+		overrideProvider: params.entry.providerOverride,
+		overrideModel: params.entry.modelOverride
+	});
+	const directOverrideKey = directOverride ? modelRefKey(directOverride.provider, directOverride.model) : void 0;
+	const directOverrideIsOwned = directOverride !== null && providerIds.has(normalizeProviderId(directOverride.provider));
+	const directOverrideIsConfigured = directOverrideKey !== void 0 && (params.route?.configuredModelRefs.some((ref) => ref.toLowerCase() === directOverrideKey) ?? false);
+	const directOverrideSource = params.entry.modelOverrideSource === "user" ? "user" : params.entry.modelOverrideSource === "auto" ? "auto" : params.entry.modelOverride ? "legacy" : void 0;
+	if (directOverrideIsOwned && !directOverrideIsConfigured) {
+		if (directOverrideSource === "auto") addReason(reasons, "auto model override");
+		else if (!routeAllowsOwner && directOverride) return { manualReview: {
+			key: params.key,
+			ownerLabel: params.owner.label,
+			message: `${params.key} (${modelRefKey(directOverride.provider, directOverride.model)}, ${directOverrideSource === "user" ? "user" : "legacy"})`
+		} };
+	}
+	const explicitOwnedOverride = directOverrideIsOwned && directOverrideSource !== void 0 && directOverrideSource !== "auto";
+	if (!routeAllowsOwnerRuntime && !explicitOwnedOverride) {
+		const harnessId = normalizeString(params.entry.agentHarnessId);
+		if (harnessId && runtimeIds.has(normalizeProviderId(harnessId))) {
+			addReason(reasons, "pinned runtime");
+			pinnedRuntimeKeys.push("agentHarnessId");
+		}
+		const runtimeOverride = normalizeString(params.entry.agentRuntimeOverride);
+		if (runtimeOverride && runtimeIds.has(normalizeProviderId(runtimeOverride))) {
+			addReason(reasons, "pinned runtime");
+			pinnedRuntimeKeys.push("agentRuntimeOverride");
+		}
+	}
+	if (!routeAllowsOwner && !explicitOwnedOverride) {
+		const runtimeModel = normalizeString(params.entry.model);
+		const runtimeRef = runtimeModel ? parseModelRef(runtimeModel, normalizeString(params.entry.modelProvider) ?? "", { allowPluginNormalization: false }) : null;
+		if (runtimeRef && providerIds.has(normalizeProviderId(runtimeRef.provider))) addReason(reasons, "runtime model state");
+		if (hasOwnedCliSession({
+			entry: params.entry,
+			cliSessionKeys
+		})) addReason(reasons, "CLI session binding");
+		if (params.entry.authProfileOverrideSource === "auto" && ownsPrefixedValue(authProfilePrefixes, params.entry.authProfileOverride)) addReason(reasons, "auto auth profile override");
+	}
+	if (reasons.length === 0) return {};
+	return { repair: {
+		key: params.key,
+		ownerId: params.owner.id,
+		ownerLabel: params.owner.label,
+		reasons,
+		pinnedRuntimeKeys,
+		cliSessionKeys
+	} };
+}
+function scanSessionRouteStateOwners(params) {
+	const repairs = [];
+	const manualReview = [];
+	for (const [key, entry] of Object.entries(params.store)) {
+		if (!entry || typeof entry !== "object") continue;
+		for (const owner of params.owners) {
+			const scan = scanEntryForOwner({
+				key,
+				entry,
+				owner,
+				route: params.routes[key]
+			});
+			if (scan.repair) repairs.push(scan.repair);
+			if (scan.manualReview) manualReview.push(scan.manualReview);
+		}
+	}
+	return {
+		repairs,
+		manualReview
+	};
+}
+function clearEntryKey(entry, key) {
+	if (entry[key] !== void 0) {
+		delete entry[key];
+		return true;
+	}
+	return false;
+}
+function clearRecordKeys(entry, recordKey, ownedKeys) {
+	const value = entry[recordKey];
+	if (value === null || typeof value !== "object") return false;
+	const record = value;
+	let changed = false;
+	const next = { ...record };
+	for (const key of ownedKeys) {
+		const normalized = normalizeProviderId(key);
+		if (next[normalized] !== void 0) {
+			delete next[normalized];
+			changed = true;
+		}
+	}
+	if (!changed) return false;
+	entry[recordKey] = Object.keys(next).length > 0 ? next : void 0;
+	return true;
+}
+function applySessionRouteStateRepair(params) {
+	let changed = false;
+	const clear = (key) => {
+		changed = clearEntryKey(params.entry, key) || changed;
+	};
+	if (params.repair.reasons.includes("auto model override")) {
+		clear("providerOverride");
+		clear("modelOverride");
+		clear("modelOverrideSource");
+		clear("liveModelSwitchPending");
+	}
+	if (params.repair.reasons.includes("runtime model state")) {
+		clear("model");
+		clear("modelProvider");
+		clear("contextTokens");
+		clear("systemPromptReport");
+		clear("fallbackNoticeSelectedModel");
+		clear("fallbackNoticeActiveModel");
+		clear("fallbackNoticeReason");
+	}
+	if (params.repair.reasons.includes("pinned runtime")) for (const key of params.repair.pinnedRuntimeKeys) clear(key);
+	if (params.repair.reasons.includes("CLI session binding")) {
+		changed = clearRecordKeys(params.entry, "cliSessionBindings", params.repair.cliSessionKeys) || changed;
+		changed = clearRecordKeys(params.entry, "cliSessionIds", params.repair.cliSessionKeys) || changed;
+	}
+	if (params.repair.reasons.includes("auto auth profile override")) {
+		clear("authProfileOverride");
+		clear("authProfileOverrideSource");
+		clear("authProfileOverrideCompactionCount");
+	}
+	if (changed) params.entry.updatedAt = params.now;
+	return changed;
+}
+function groupRepairsByOwner(repairs) {
+	const grouped = /* @__PURE__ */ new Map();
+	for (const repair of repairs) {
+		const key = repair.ownerLabel;
+		grouped.set(key, [...grouped.get(key) ?? [], repair]);
+	}
+	return grouped;
+}
+async function runPluginSessionStateDoctorRepairs(params) {
+	if (!storeMayContainPluginSessionRouteState(params.store)) return;
+	const owners = resolvePluginDoctorSessionRouteStateOwners({
+		cfg: params.cfg,
+		env: params.env
+	});
+	if (owners.length === 0) return;
+	const routes = Object.fromEntries(Object.keys(params.store).map((sessionKey) => [sessionKey, resolveConfiguredDoctorSessionStateRoute({
+		cfg: params.cfg,
+		sessionKey,
+		env: params.env
+	})]));
+	const store = params.store;
+	const scan = scanSessionRouteStateOwners({
+		owners,
+		store,
+		routes
+	});
+	if (scan.repairs.length > 0) for (const [ownerLabel, repairs] of groupRepairsByOwner(scan.repairs)) {
+		const staleCount = countSessionLabel(repairs.length);
+		params.warnings.push([
+			`- Found stale ${ownerLabel} session routing state in ${staleCount} outside the current configured model/runtime route.`,
+			"  This can keep later message-channel runs pinned to an old runtime/provider after defaults move elsewhere.",
+			`  Examples: ${repairs.slice(0, 3).map(repairExample).join(", ")}`
+		].join("\n"));
+		if (await params.prompter.confirmRuntimeRepair({
+			message: `Clear stale ${ownerLabel} session routing state for ${staleCount}?`,
+			initialValue: true
+		})) {
+			let repaired = 0;
+			const repairedAt = Date.now();
+			const repairsByKey = new Map(repairs.map((repair) => [repair.key, repair]));
+			await updateSessionStore(params.absoluteStorePath, (currentStore) => {
+				const currentMutableStore = currentStore;
+				for (const [key, repair] of repairsByKey) {
+					const current = currentMutableStore[key];
+					if (current && applySessionRouteStateRepair({
+						entry: current,
+						repair,
+						now: repairedAt
+					})) repaired += 1;
+				}
+			});
+			if (repaired > 0) params.changes.push(`- Cleared stale ${ownerLabel} session routing state for ${countSessionLabel(repaired)}.`);
+		}
+	}
+	if (scan.manualReview.length > 0) {
+		const grouped = /* @__PURE__ */ new Map();
+		for (const hit of scan.manualReview) grouped.set(hit.ownerLabel, [...grouped.get(hit.ownerLabel) ?? [], hit]);
+		for (const [ownerLabel, hits] of grouped) params.warnings.push([
+			`- Found explicit ${ownerLabel} model overrides in ${countSessionLabel(hits.length)} outside the current configured route.`,
+			"  Doctor leaves explicit or legacy user selections untouched; switch them with /model or reset the session if that provider is no longer intended.",
+			`  Examples: ${hits.slice(0, 3).map((hit) => hit.message).join(", ")}`
+		].join("\n"));
+	}
+}
+//#endregion
+//#region src/commands/doctor-state-integrity.ts
+function countLabel(count, singular, plural = `${singular}s`) {
+	return `${count} ${count === 1 ? singular : plural}`;
+}
+function formatFilePreview(paths, limit = 3) {
+	const names = paths.slice(0, limit).map((filePath) => path.basename(filePath));
+	const remaining = paths.length - names.length;
+	if (remaining > 0) return `${names.join(", ")}, and ${remaining} more`;
+	return names.join(", ");
+}
+function existsDir(dir) {
+	try {
+		return fs.existsSync(dir) && fs.statSync(dir).isDirectory();
+	} catch {
+		return false;
+	}
+}
+function existsFile(filePath) {
+	try {
+		return fs.existsSync(filePath) && fs.statSync(filePath).isFile();
+	} catch {
+		return false;
+	}
+}
+function tryResolveNativeRealPath(targetPath) {
+	try {
+		return fs.realpathSync.native(targetPath);
+	} catch {
+		return null;
+	}
+}
+function resolveComparableTranscriptPath(filePath) {
+	return tryResolveNativeRealPath(filePath) ?? path.resolve(filePath);
+}
+function areComparablePathsEqual(leftPath, rightPath) {
+	const leftRealPath = tryResolveNativeRealPath(leftPath);
+	const rightRealPath = tryResolveNativeRealPath(rightPath);
+	return leftRealPath !== null && leftRealPath === rightRealPath;
+}
+function isReachableConfiguredAgentDir(params) {
+	if (params.dirName === params.agentId) return true;
+	const rawDir = path.join(params.agentsRoot, params.dirName, "agent");
+	const normalizedDir = path.join(params.agentsRoot, params.agentId, "agent");
+	const rawRealPath = tryResolveNativeRealPath(rawDir);
+	const normalizedRealPath = tryResolveNativeRealPath(normalizedDir);
+	return rawRealPath !== null && rawRealPath === normalizedRealPath;
+}
+function formatOrphanAgentDirLabel(entry) {
+	return entry.dirName === entry.agentId ? entry.agentId : `${entry.dirName} (id ${entry.agentId})`;
+}
+function formatOrphanAgentDirPreview(entries, limit = 3) {
+	const labels = entries.slice(0, limit).map(formatOrphanAgentDirLabel);
+	const remaining = entries.length - labels.length;
+	if (remaining > 0) return `${labels.join(", ")}, and ${remaining} more`;
+	return labels.join(", ");
+}
+function listOrphanAgentDirs(cfg, stateDir) {
+	const configuredIds = /* @__PURE__ */ new Set();
+	configuredIds.add(normalizeAgentId(resolveDefaultAgentId(cfg)));
+	for (const entry of listAgentEntries(cfg)) configuredIds.add(normalizeAgentId(entry.id));
+	const agentsRoot = path.join(stateDir, "agents");
+	const liveCompatibilityAgentDir = resolveDaoCoreAgentDir();
+	try {
+		return fs.readdirSync(agentsRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => ({
+			dirName: entry.name,
+			agentId: normalizeAgentId(entry.name)
+		})).filter(({ dirName, agentId }) => {
+			const nestedAgentDir = path.join(agentsRoot, dirName, "agent");
+			if (!existsDir(nestedAgentDir)) return false;
+			if (areComparablePathsEqual(nestedAgentDir, liveCompatibilityAgentDir)) return false;
+			if (!configuredIds.has(agentId)) return true;
+			return !isReachableConfiguredAgentDir({
+				agentsRoot,
+				dirName,
+				agentId
+			});
+		}).toSorted((left, right) => left.agentId.localeCompare(right.agentId) || left.dirName.localeCompare(right.dirName));
+	} catch {
+		return [];
+	}
+}
+function canWriteDir(dir) {
+	try {
+		fs.accessSync(dir, fs.constants.W_OK);
+		return true;
+	} catch {
+		return false;
+	}
+}
+function ensureDir(dir) {
+	try {
+		fs.mkdirSync(dir, { recursive: true });
+		return { ok: true };
+	} catch (err) {
+		return {
+			ok: false,
+			error: String(err)
+		};
+	}
+}
+function dirPermissionHint(dir) {
+	const uid = typeof process.getuid === "function" ? process.getuid() : null;
+	const gid = typeof process.getgid === "function" ? process.getgid() : null;
+	try {
+		const stat = fs.statSync(dir);
+		if (uid !== null && stat.uid !== uid) return `Owner mismatch (uid ${stat.uid}). Run: sudo chown -R $USER "${dir}"`;
+		if (gid !== null && stat.gid !== gid) return `Group mismatch (gid ${stat.gid}). If access fails, run: sudo chown -R $USER "${dir}"`;
+	} catch {
+		return null;
+	}
+	return null;
+}
+function addUserRwx(mode) {
+	return mode & 511 | 448;
+}
+function countJsonlLines(filePath) {
+	try {
+		const raw = fs.readFileSync(filePath, "utf-8");
+		if (!raw) return 0;
+		let count = 0;
+		for (let i = 0; i < raw.length; i += 1) if (raw[i] === "\n") count += 1;
+		if (!raw.endsWith("\n")) count += 1;
+		return count;
+	} catch {
+		return 0;
+	}
+}
+function findOtherStateDirs(stateDir) {
+	const resolvedState = path.resolve(stateDir);
+	const roots = process.platform === "darwin" ? ["/Users"] : process.platform === "linux" ? ["/home"] : [];
+	const found = [];
+	for (const root of roots) {
+		let entries = [];
+		try {
+			entries = fs.readdirSync(root, { withFileTypes: true });
+		} catch {
+			continue;
+		}
+		for (const entry of entries) {
+			if (!entry.isDirectory()) continue;
+			if (entry.name.startsWith(".")) continue;
+			const candidates = [".daocore"].map((dir) => path.resolve(root, entry.name, dir));
+			for (const candidate of candidates) {
+				if (candidate === resolvedState) continue;
+				if (existsDir(candidate)) found.push(candidate);
+			}
+		}
+	}
+	return found;
+}
+function isPathUnderRoot(targetPath, rootPath) {
+	const normalizedTarget = path.resolve(targetPath);
+	const normalizedRoot = path.resolve(rootPath);
+	const rootToken = path.parse(normalizedRoot).root;
+	if (normalizedRoot === rootToken) return normalizedTarget.startsWith(rootToken);
+	return normalizedTarget === normalizedRoot || normalizedTarget.startsWith(`${normalizedRoot}${path.sep}`);
+}
+function tryResolveRealPath(targetPath) {
+	try {
+		return fs.realpathSync(targetPath);
+	} catch {
+		return null;
+	}
+}
+function decodeMountInfoPath(value) {
+	return value.replace(/\\([0-7]{3})/g, (_, octal) => String.fromCharCode(Number.parseInt(octal, 8)));
+}
+function escapeControlCharsForTerminal(value) {
+	let escaped = "";
+	for (const char of value) {
+		if (char === "\x1B") {
+			escaped += "\\x1b";
+			continue;
+		}
+		if (char === "\r") {
+			escaped += "\\r";
+			continue;
+		}
+		if (char === "\n") {
+			escaped += "\\n";
+			continue;
+		}
+		if (char === "	") {
+			escaped += "\\t";
+			continue;
+		}
+		const code = char.charCodeAt(0);
+		if (code >= 0 && code <= 8 || code === 11 || code === 12 || code >= 14 && code <= 31) {
+			escaped += `\\x${code.toString(16).padStart(2, "0")}`;
+			continue;
+		}
+		if (code === 127) {
+			escaped += "\\x7f";
+			continue;
+		}
+		escaped += char;
+	}
+	return escaped;
+}
+function parseLinuxMountInfo(rawMountInfo) {
+	const entries = [];
+	for (const line of rawMountInfo.split("\n")) {
+		const trimmed = line.trim();
+		if (!trimmed) continue;
+		const separatorIndex = trimmed.indexOf(" - ");
+		if (separatorIndex === -1) continue;
+		const left = trimmed.slice(0, separatorIndex);
+		const right = trimmed.slice(separatorIndex + 3);
+		const leftFields = left.split(" ");
+		const rightFields = right.split(" ");
+		if (leftFields.length < 5 || rightFields.length < 2) continue;
+		entries.push({
+			mountPoint: decodeMountInfoPath(leftFields[4]),
+			fsType: rightFields[0],
+			source: decodeMountInfoPath(rightFields[1])
+		});
+	}
+	return entries;
+}
+function isPathUnderRootWithPathOps(targetPath, rootPath, pathOps) {
+	const normalizedTarget = pathOps.resolve(targetPath);
+	const normalizedRoot = pathOps.resolve(rootPath);
+	const rootToken = pathOps.parse(normalizedRoot).root;
+	if (normalizedRoot === rootToken) return normalizedTarget.startsWith(rootToken);
+	return normalizedTarget === normalizedRoot || normalizedTarget.startsWith(`${normalizedRoot}${pathOps.sep}`);
+}
+function findLinuxMountInfoEntryForPath(targetPath, entries, pathOps) {
+	const normalizedTarget = pathOps.resolve(targetPath);
+	let bestMatch = null;
+	for (const entry of entries) {
+		if (!isPathUnderRootWithPathOps(normalizedTarget, entry.mountPoint, pathOps)) continue;
+		if (!bestMatch || pathOps.resolve(entry.mountPoint).length > pathOps.resolve(bestMatch.mountPoint).length) bestMatch = entry;
+	}
+	return bestMatch;
+}
+function isMmcDevicePath(devicePath, pathOps) {
+	const name = pathOps.basename(devicePath);
+	return /^mmcblk\d+(?:p\d+)?$/.test(name);
+}
+function tryReadLinuxMountInfo() {
+	try {
+		return fs.readFileSync("/proc/self/mountinfo", "utf8");
+	} catch {
+		return null;
+	}
+}
+function detectLinuxSdBackedStateDir(stateDir, deps) {
+	if ((deps?.platform ?? process.platform) !== "linux") return null;
+	const linuxPath = path.posix;
+	const resolvedStatePath = (deps?.resolveRealPath ?? tryResolveRealPath)(stateDir) ?? linuxPath.resolve(stateDir);
+	const mountInfo = deps?.mountInfo ?? tryReadLinuxMountInfo();
+	if (!mountInfo) return null;
+	const mountEntry = findLinuxMountInfoEntryForPath(resolvedStatePath, parseLinuxMountInfo(mountInfo), linuxPath);
+	if (!mountEntry) return null;
+	const sourceCandidates = [mountEntry.source];
+	if (mountEntry.source.startsWith("/dev/")) {
+		const resolvedDevicePath = (deps?.resolveDeviceRealPath ?? tryResolveRealPath)(mountEntry.source);
+		if (resolvedDevicePath) sourceCandidates.push(linuxPath.resolve(resolvedDevicePath));
+	}
+	if (!sourceCandidates.some((candidate) => isMmcDevicePath(candidate, linuxPath))) return null;
+	return {
+		path: linuxPath.resolve(resolvedStatePath),
+		mountPoint: linuxPath.resolve(mountEntry.mountPoint),
+		fsType: mountEntry.fsType,
+		source: mountEntry.source
+	};
+}
+function formatLinuxSdBackedStateDirWarning(displayStateDir, linuxSdBackedStateDir) {
+	const displayMountPoint = linuxSdBackedStateDir.mountPoint === "/" ? "/" : shortenHomePath(linuxSdBackedStateDir.mountPoint);
+	return [
+		`- State directory appears to be on SD/eMMC storage (${displayStateDir}; device ${escapeControlCharsForTerminal(linuxSdBackedStateDir.source)}, fs ${escapeControlCharsForTerminal(linuxSdBackedStateDir.fsType)}, mount ${escapeControlCharsForTerminal(displayMountPoint)}).`,
+		"- SD/eMMC media can be slower for random I/O and wear faster under session/log churn.",
+		"- For better startup and state durability, prefer SSD/NVMe (or USB SSD on Raspberry Pi) for DAOCORE_STATE_DIR."
+	].join("\n");
+}
+function detectMacCloudSyncedStateDir(stateDir, deps) {
+	if ((deps?.platform ?? process.platform) !== "darwin") return null;
+	const homedir = deps?.homedir ?? os.homedir();
+	const roots = [{
+		storage: "iCloud Drive",
+		root: path.join(homedir, "Library", "Mobile Documents", "com~apple~CloudDocs")
+	}, {
+		storage: "CloudStorage provider",
+		root: path.join(homedir, "Library", "CloudStorage")
+	}];
+	const realPath = (deps?.resolveRealPath ?? tryResolveRealPath)(stateDir);
+	const candidates = realPath ? [path.resolve(realPath)] : [path.resolve(stateDir)];
+	for (const candidate of candidates) for (const { storage, root } of roots) if (isPathUnderRoot(candidate, root)) return {
+		path: candidate,
+		storage
+	};
+	return null;
+}
+function isPairingPolicy(value) {
+	return normalizeOptionalLowercaseString(value) === "pairing";
+}
+function hasPairingPolicy(value) {
+	const record = asNullableObjectRecord(value);
+	if (!record) return false;
+	if (isPairingPolicy(record.dmPolicy)) return true;
+	const dm = asNullableObjectRecord(record.dm);
+	if (dm && isPairingPolicy(dm.policy)) return true;
+	const accounts = asNullableObjectRecord(record.accounts);
+	if (!accounts) return false;
+	for (const accountCfg of Object.values(accounts)) if (hasPairingPolicy(accountCfg)) return true;
+	return false;
+}
+function isSlashRoutingSessionKey(sessionKey) {
+	const raw = normalizeOptionalLowercaseString(sessionKey);
+	if (!raw) return false;
+	const scoped = parseAgentSessionKey(raw)?.rest ?? raw;
+	return /^[^:]+:slash:[^:]+(?:$|:)/.test(scoped);
+}
+function shouldRequireOAuthDir(cfg, env) {
+	if (env.DAOCORE_OAUTH_DIR?.trim()) return true;
+	const channels = asNullableObjectRecord(cfg.channels);
+	if (!channels) return false;
+	const withPersistedAuth = new Set(listConfiguredChannelIdsForReadOnlyScope({
+		config: cfg,
+		env
+	}));
+	const withoutPersistedAuth = new Set(listConfiguredChannelIdsForReadOnlyScope({
+		config: cfg,
+		env,
+		includePersistedAuthState: false
+	}));
+	if ([...withPersistedAuth].some((channelId) => !withoutPersistedAuth.has(channelId))) return true;
+	for (const [channelId, channelCfg] of Object.entries(channels)) {
+		if (channelId === "defaults" || channelId === "modelByChannel") continue;
+		if (hasPairingPolicy(channelCfg)) return true;
+	}
+	return false;
+}
+function shouldSuppressOrphanTranscriptWarning(cfg, agentId) {
+	const backendConfig = resolveMemoryBackendConfig({
+		cfg,
+		agentId
+	});
+	return backendConfig?.backend === "qmd" && backendConfig.qmd?.sessions.enabled === true;
+}
+async function noteStateIntegrity(cfg, prompter, configPath) {
+	const warnings = [];
+	const changes = [];
+	const noteFn = prompter.note ?? note;
+	const env = process.env;
+	const homedir = () => resolveRequiredHomeDir(env, os.homedir);
+	const stateDir = resolveStateDir(env, homedir);
+	const defaultStateDir = path.join(homedir(), ".daocore");
+	const oauthDir = resolveOAuthDir(env, stateDir);
+	const agentId = resolveDefaultAgentId(cfg);
+	const sessionsDir = resolveSessionTranscriptsDirForAgent(agentId, env, homedir);
+	const storePath = resolveStorePath(cfg.session?.store, { agentId });
+	const storeDir = path.dirname(storePath);
+	const absoluteStorePath = path.resolve(storePath);
+	const displayStateDir = shortenHomePath(stateDir);
+	const displayOauthDir = shortenHomePath(oauthDir);
+	const displaySessionsDir = shortenHomePath(sessionsDir);
+	const displayStoreDir = shortenHomePath(storeDir);
+	const displayConfigPath = configPath ? shortenHomePath(configPath) : void 0;
+	const requireOAuthDir = shouldRequireOAuthDir(cfg, env);
+	const cloudSyncedStateDir = detectMacCloudSyncedStateDir(stateDir);
+	const linuxSdBackedStateDir = detectLinuxSdBackedStateDir(stateDir);
+	const suppressOrphanTranscriptWarning = shouldSuppressOrphanTranscriptWarning(cfg, agentId);
+	if (cloudSyncedStateDir) warnings.push([
+		`- State directory is under macOS cloud-synced storage (${displayStateDir}; ${cloudSyncedStateDir.storage}).`,
+		"- This can cause slow I/O and sync/lock races for sessions and credentials.",
+		"- Prefer a local non-synced state dir (for example: ~/.daocore).",
+		`  Set locally: DAOCORE_STATE_DIR=~/.daocore ${formatCliCommand("daocore doctor")}`
+	].join("\n"));
+	if (linuxSdBackedStateDir) warnings.push(formatLinuxSdBackedStateDirWarning(displayStateDir, linuxSdBackedStateDir));
+	let stateDirExists = existsDir(stateDir);
+	if (!stateDirExists) {
+		warnings.push(`- CRITICAL: state directory missing (${displayStateDir}). Sessions, credentials, logs, and config are stored there.`);
+		if (cfg.gateway?.mode === "remote") warnings.push("- Gateway is in remote mode; run doctor on the remote host where the gateway runs.");
+		if (await prompter.confirmRuntimeRepair({
+			message: `Create ${displayStateDir} now?`,
+			initialValue: false
+		})) {
+			const created = ensureDir(stateDir);
+			if (created.ok) {
+				changes.push(`- Created ${displayStateDir}`);
+				stateDirExists = true;
+			} else warnings.push(`- Failed to create ${displayStateDir}: ${created.error}`);
+		}
+	}
+	if (stateDirExists && !canWriteDir(stateDir)) {
+		warnings.push(`- State directory not writable (${displayStateDir}).`);
+		const hint = dirPermissionHint(stateDir);
+		if (hint) warnings.push(`  ${hint}`);
+		if (await prompter.confirmRuntimeRepair({
+			message: `Repair permissions on ${displayStateDir}?`,
+			initialValue: true
+		})) try {
+			const target = addUserRwx(fs.statSync(stateDir).mode);
+			fs.chmodSync(stateDir, target);
+			changes.push(`- Repaired permissions on ${displayStateDir}`);
+		} catch (err) {
+			warnings.push(`- Failed to repair ${displayStateDir}: ${String(err)}`);
+		}
+	}
+	if (stateDirExists && process.platform !== "win32") try {
+		const dirLstat = fs.lstatSync(stateDir);
+		const isDirSymlink = dirLstat.isSymbolicLink();
+		const stat = isDirSymlink ? fs.statSync(stateDir) : dirLstat;
+		if (!(isDirSymlink ? fs.realpathSync(stateDir) : stateDir).startsWith("/nix/store/") && (stat.mode & 63) !== 0) {
+			warnings.push(`- State directory permissions are too open (${displayStateDir}). Recommend chmod 700.`);
+			if (await prompter.confirmRuntimeRepair({
+				message: `Tighten permissions on ${displayStateDir} to 700?`,
+				initialValue: true
+			})) {
+				fs.chmodSync(stateDir, 448);
+				changes.push(`- Tightened permissions on ${displayStateDir} to 700`);
+			}
+		}
+	} catch (err) {
+		warnings.push(`- Failed to read ${displayStateDir} permissions: ${String(err)}`);
+	}
+	if (configPath && existsFile(configPath) && process.platform !== "win32") try {
+		const configLstat = fs.lstatSync(configPath);
+		const isSymlink = configLstat.isSymbolicLink();
+		const stat = isSymlink ? fs.statSync(configPath) : configLstat;
+		if (!(isSymlink ? fs.realpathSync(configPath) : configPath).startsWith("/nix/store/") && (stat.mode & 63) !== 0) {
+			warnings.push(`- Config file is group/world readable (${displayConfigPath ?? configPath}). Recommend chmod 600.`);
+			if (await prompter.confirmRuntimeRepair({
+				message: `Tighten permissions on ${displayConfigPath ?? configPath} to 600?`,
+				initialValue: true
+			})) {
+				fs.chmodSync(configPath, 384);
+				changes.push(`- Tightened permissions on ${displayConfigPath ?? configPath} to 600`);
+			}
+		}
+	} catch (err) {
+		warnings.push(`- Failed to read config permissions (${displayConfigPath ?? configPath}): ${String(err)}`);
+	}
+	if (stateDirExists) {
+		const dirCandidates = /* @__PURE__ */ new Map();
+		dirCandidates.set(sessionsDir, "Sessions dir");
+		dirCandidates.set(storeDir, "Session store dir");
+		if (requireOAuthDir) dirCandidates.set(oauthDir, "OAuth dir");
+		else if (!existsDir(oauthDir)) warnings.push(`- OAuth dir not present (${displayOauthDir}). Skipping create because no WhatsApp/pairing channel config is active.`);
+		const displayDirFor = (dir) => {
+			if (dir === sessionsDir) return displaySessionsDir;
+			if (dir === storeDir) return displayStoreDir;
+			if (dir === oauthDir) return displayOauthDir;
+			return shortenHomePath(dir);
+		};
+		for (const [dir, label] of dirCandidates) {
+			const displayDir = displayDirFor(dir);
+			if (!existsDir(dir)) {
+				warnings.push(`- CRITICAL: ${label} missing (${displayDir}).`);
+				if (await prompter.confirmRuntimeRepair({
+					message: `Create ${label} at ${displayDir}?`,
+					initialValue: true
+				})) {
+					const created = ensureDir(dir);
+					if (created.ok) changes.push(`- Created ${label}: ${displayDir}`);
+					else warnings.push(`- Failed to create ${displayDir}: ${created.error}`);
+				}
+				continue;
+			}
+			if (!canWriteDir(dir)) {
+				warnings.push(`- ${label} not writable (${displayDir}).`);
+				const hint = dirPermissionHint(dir);
+				if (hint) warnings.push(`  ${hint}`);
+				if (await prompter.confirmRuntimeRepair({
+					message: `Repair permissions on ${label}?`,
+					initialValue: true
+				})) try {
+					const target = addUserRwx(fs.statSync(dir).mode);
+					fs.chmodSync(dir, target);
+					changes.push(`- Repaired permissions on ${label}: ${displayDir}`);
+				} catch (err) {
+					warnings.push(`- Failed to repair ${displayDir}: ${String(err)}`);
+				}
+			}
+		}
+	}
+	const extraStateDirs = /* @__PURE__ */ new Set();
+	if (path.resolve(stateDir) !== path.resolve(defaultStateDir)) {
+		if (existsDir(defaultStateDir)) extraStateDirs.add(defaultStateDir);
+	}
+	for (const other of findOtherStateDirs(stateDir)) extraStateDirs.add(other);
+	if (extraStateDirs.size > 0) warnings.push([
+		"- Multiple state directories detected. This can split session history.",
+		...Array.from(extraStateDirs).map((dir) => `  - ${shortenHomePath(dir)}`),
+		`  Active state dir: ${displayStateDir}`
+	].join("\n"));
+	const orphanAgentDirs = listOrphanAgentDirs(cfg, stateDir);
+	if (orphanAgentDirs.length > 0) warnings.push([
+		`- Found ${countLabel(orphanAgentDirs.length, "agent directory", "agent directories")} on disk without a matching agents.list entry.`,
+		"  These agents can still have sessions/auth state on disk, but config-driven routing, identity, and model selection will ignore them.",
+		`  Examples: ${formatOrphanAgentDirPreview(orphanAgentDirs)}`,
+		`  Restore the missing agents.list entries or remove stale dirs after confirming they are no longer needed: ${shortenHomePath(path.join(stateDir, "agents"))}`
+	].join("\n"));
+	const store = loadSessionStore(storePath);
+	const sessionPathOpts = resolveSessionFilePathOptions({
+		agentId,
+		storePath
+	});
+	const entries = Object.entries(store).filter(([, entry]) => entry && typeof entry === "object");
+	if (entries.length > 0) {
+		const recentTranscriptCandidates = entries.slice().toSorted((a, b) => {
+			const aUpdated = typeof a[1].updatedAt === "number" ? a[1].updatedAt : 0;
+			return (typeof b[1].updatedAt === "number" ? b[1].updatedAt : 0) - aUpdated;
+		}).slice(0, 5).filter(([key]) => !isSlashRoutingSessionKey(key));
+		const missing = recentTranscriptCandidates.filter(([, entry]) => {
+			const sessionId = entry.sessionId;
+			if (!sessionId) return false;
+			return !existsFile(resolveSessionFilePath(sessionId, entry, sessionPathOpts));
+		});
+		if (missing.length > 0) warnings.push([
+			`- ${missing.length}/${recentTranscriptCandidates.length} recent sessions are missing transcripts.`,
+			`  Verify sessions in store: ${formatCliCommand(`daocore sessions --store "${absoluteStorePath}"`)}`,
+			`  Preview cleanup impact: ${formatCliCommand(`daocore sessions cleanup --store "${absoluteStorePath}" --dry-run`)}`,
+			`  Prune missing entries: ${formatCliCommand(`daocore sessions cleanup --store "${absoluteStorePath}" --enforce --fix-missing`)}`
+		].join("\n"));
+		const wedgedSubagentSessions = entries.filter(([, entry]) => isSubagentRecoveryWedgedEntry(entry));
+		if (wedgedSubagentSessions.length > 0) {
+			const wedgedCount = countLabel(wedgedSubagentSessions.length, "wedged subagent session");
+			warnings.push([
+				`- Found ${wedgedCount} with automatic restart recovery tombstoned.`,
+				"  DaoCore will not auto-resume these child sessions on restart; reconcile their task records instead.",
+				`  Examples: ${wedgedSubagentSessions.slice(0, 3).map(([key]) => key).join(", ")}`,
+				`  Fix: ${formatCliCommand("daocore tasks maintenance --apply")}`
+			].join("\n"));
+			if (await prompter.confirmRuntimeRepair({
+				message: `Clear stale aborted recovery flags for ${wedgedCount}?`,
+				initialValue: true
+			})) {
+				let repaired = 0;
+				const repairedAt = Date.now();
+				await updateSessionStore(absoluteStorePath, (currentStore) => {
+					for (const [key] of wedgedSubagentSessions) {
+						const current = currentStore[key];
+						if (current && clearWedgedSubagentRecoveryAbort(current, repairedAt)) {
+							repaired += 1;
+							currentStore[key] = current;
+						}
+					}
+				});
+				if (repaired > 0) changes.push(`- Cleared aborted restart-recovery flags for ${countLabel(repaired, "wedged subagent session")}.`);
+			}
+			const wedgedReasons = wedgedSubagentSessions.map(([, entry]) => formatSubagentRecoveryWedgedReason(entry)).filter((reason, index, all) => all.indexOf(reason) === index).slice(0, 2);
+			if (wedgedReasons.length > 0) warnings.push(wedgedReasons.map((reason) => `  Reason: ${reason}`).join("\n"));
+		}
+		await runPluginSessionStateDoctorRepairs({
+			cfg,
+			store,
+			absoluteStorePath,
+			prompter,
+			env,
+			warnings,
+			changes
+		});
+		await repairHeartbeatPoisonedMainSession({
+			cfg,
+			store,
+			absoluteStorePath,
+			stateDir,
+			sessionPathOpts,
+			prompter,
+			warnings,
+			changes
+		});
+		for (const warning of describeHeartbeatSessionTargetIssues(cfg)) warnings.push(warning);
+		const mainEntry = store[resolveMainSessionKey(cfg)];
+		if (mainEntry?.sessionId) {
+			const transcriptPath = resolveSessionFilePath(mainEntry.sessionId, mainEntry, sessionPathOpts);
+			if (!existsFile(transcriptPath)) warnings.push(`- Main session transcript missing (${shortenHomePath(transcriptPath)}). History will appear to reset.`);
+			else {
+				const lineCount = countJsonlLines(transcriptPath);
+				if (lineCount <= 1) warnings.push(`- Main session transcript has only ${lineCount} line. Session history may not be appending.`);
+			}
+		}
+	}
+	if (existsDir(sessionsDir)) {
+		const referencedTranscriptPaths = /* @__PURE__ */ new Set();
+		for (const [, entry] of entries) {
+			if (!entry?.sessionId) continue;
+			try {
+				referencedTranscriptPaths.add(resolveComparableTranscriptPath(resolveSessionFilePath(entry.sessionId, entry, sessionPathOpts)));
+			} catch {}
+		}
+		const orphanTranscriptPaths = fs.readdirSync(sessionsDir, { withFileTypes: true }).filter((entry) => entry.isFile() && isPrimarySessionTranscriptFileName(entry.name)).map((entry) => path.join(sessionsDir, entry.name)).filter((filePath) => !referencedTranscriptPaths.has(resolveComparableTranscriptPath(filePath)));
+		if (orphanTranscriptPaths.length > 0 && !suppressOrphanTranscriptWarning) {
+			const orphanCount = countLabel(orphanTranscriptPaths.length, "orphan transcript file");
+			const orphanPreview = formatFilePreview(orphanTranscriptPaths);
+			warnings.push([
+				`- Found ${orphanCount} in ${displaySessionsDir}.`,
+				"  These .jsonl files are no longer referenced by sessions.json, so they are not part of any active session history.",
+				"  Doctor can archive them safely by renaming each file to *.deleted.<timestamp>.",
+				`  Examples: ${orphanPreview}`
+			].join("\n"));
+			if (await prompter.confirmRuntimeRepair({
+				message: `Archive ${orphanCount} in ${displaySessionsDir}? This only renames them to *.deleted.<timestamp>.`,
+				initialValue: false,
+				requiresInteractiveConfirmation: true
+			})) {
+				let archived = 0;
+				const archivedAt = formatSessionArchiveTimestamp();
+				for (const orphanPath of orphanTranscriptPaths) {
+					const archivedPath = `${orphanPath}.deleted.${archivedAt}`;
+					try {
+						fs.renameSync(orphanPath, archivedPath);
+						archived += 1;
+					} catch (err) {
+						warnings.push(`- Failed to archive orphan transcript ${shortenHomePath(orphanPath)}: ${String(err)}`);
+					}
+				}
+				if (archived > 0) changes.push(`- Archived ${countLabel(archived, "orphan transcript file")} in ${displaySessionsDir} as .deleted timestamped backups.`);
+			}
+		}
+	}
+	if (warnings.length > 0) noteFn(warnings.join("\n"), "State integrity");
+	if (changes.length > 0) noteFn(changes.join("\n"), "Doctor changes");
+}
+function collectWorkspaceBackupTip(workspaceDir) {
+	if (!existsDir(workspaceDir)) return null;
+	const gitMarker = path.join(workspaceDir, ".git");
+	if (fs.existsSync(gitMarker)) return null;
+	return [
+		"- Tip: back up the workspace in a private git repo (GitHub or GitLab).",
+		"- Keep ~/.daocore out of git; it contains credentials and session history.",
+		"- Details: /concepts/agent-workspace#git-backup-recommended"
+	].join("\n");
+}
+function noteWorkspaceBackupTip(workspaceDir) {
+	const tip = collectWorkspaceBackupTip(workspaceDir);
+	if (tip) note(tip, "Workspace");
+}
+//#endregion
+export { collectWorkspaceBackupTip, noteStateIntegrity, noteWorkspaceBackupTip };