@gaodefa/daocore 2026.5.85 → 2026.5.87

package/dist/doctor-health-contributions-CeAx5c5L.js

@@ -0,0 +1,696 @@
+import { a as isLegacyParentWritableUpdateDoctorPass } from "./update-phase-BZswmyl9.js";
+import fs from "node:fs";
+//#region src/flows/doctor-health-contributions.ts
+function isUpdateDoctorRun(env) {
+	const value = env.DAOCORE_UPDATE_IN_PROGRESS;
+	return value === "1" || value === "true";
+}
+function resolveDoctorMode(cfg) {
+	return cfg.gateway?.mode === "remote" ? "remote" : "local";
+}
+function isTruthyEnvValue(value) {
+	if (!value) return false;
+	const normalized = value.trim().toLowerCase();
+	return normalized !== "" && normalized !== "0" && normalized !== "false" && normalized !== "no";
+}
+function shouldSkipLegacyUpdateDoctorConfigWrite(params) {
+	if (!isTruthyEnvValue(params.env.DAOCORE_UPDATE_IN_PROGRESS)) return false;
+	if (isTruthyEnvValue(params.env["DAOCORE_UPDATE_PARENT_SUPPORTS_DOCTOR_CONFIG_WRITE"])) return false;
+	return true;
+}
+function createDoctorHealthContribution(params) {
+	return {
+		id: params.id,
+		kind: "core",
+		surface: "health",
+		option: {
+			value: params.id,
+			label: params.label,
+			...params.hint ? { hint: params.hint } : {}
+		},
+		source: "doctor",
+		healthCheckIds: params.healthCheckIds ?? [],
+		run: params.run
+	};
+}
+async function runGatewayConfigHealth(ctx) {
+	const { formatCliCommand } = await import("./command-format-CJf8eAcd.js");
+	const { hasAmbiguousGatewayAuthModeConfig } = await import("./auth-mode-policy-CE1sd1qs.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	if (!ctx.cfg.gateway?.mode) {
+		const lines = [
+			"gateway.mode is unset; gateway start will be blocked.",
+			`Fix: run ${formatCliCommand("daocore configure")} and set Gateway mode (local/remote).`,
+			`Or set directly: ${formatCliCommand("daocore config set gateway.mode local")}`
+		];
+		if (!fs.existsSync(ctx.configPath)) lines.push(`Missing config: run ${formatCliCommand("daocore setup")} first.`);
+		note(lines.join("\n"), "Gateway");
+	}
+	if (resolveDoctorMode(ctx.cfg) === "local" && hasAmbiguousGatewayAuthModeConfig(ctx.cfg)) note([
+		"gateway.auth.token and gateway.auth.password are both configured while gateway.auth.mode is unset.",
+		"Set an explicit mode to avoid ambiguous auth selection and startup/runtime failures.",
+		`Set token mode: ${formatCliCommand("daocore config set gateway.auth.mode token")}`,
+		`Set password mode: ${formatCliCommand("daocore config set gateway.auth.mode password")}`
+	].join("\n"), "Gateway auth");
+}
+async function runAuthProfileHealth(ctx) {
+	const { maybeRepairLegacyFlatAuthProfileStores } = await import("./doctor-auth-flat-profiles-Dt2UzyFu.js");
+	const { maybeRepairLegacyOAuthProfileIds } = await import("./doctor-auth-legacy-oauth-Ce0ic7C5.js");
+	const { maybeRepairLegacyOAuthSidecarProfiles } = await import("./doctor-auth-oauth-sidecar-C94mxf9m.js");
+	const { noteAuthProfileHealth, noteLegacyCodexProviderOverride } = await import("./doctor-auth-L4YVxHcl.js");
+	const { buildGatewayConnectionDetails } = await import("./call-CaUAwaaB.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	await maybeRepairLegacyFlatAuthProfileStores({
+		cfg: ctx.cfg,
+		prompter: ctx.prompter
+	});
+	await maybeRepairLegacyOAuthSidecarProfiles({
+		cfg: ctx.cfg,
+		prompter: ctx.prompter
+	});
+	ctx.cfg = await maybeRepairLegacyOAuthProfileIds(ctx.cfg, ctx.prompter);
+	await noteAuthProfileHealth({
+		cfg: ctx.cfg,
+		prompter: ctx.prompter,
+		allowKeychainPrompt: ctx.options.nonInteractive !== true && process.stdin.isTTY
+	});
+	noteLegacyCodexProviderOverride(ctx.cfg);
+	ctx.gatewayDetails = buildGatewayConnectionDetails({ config: ctx.cfg });
+	if (ctx.gatewayDetails.remoteFallbackNote) note(ctx.gatewayDetails.remoteFallbackNote, "Gateway");
+}
+async function runGatewayAuthHealth(ctx) {
+	const { resolveSecretInputRef } = await import("./types.secrets-DnO6G5Le.js");
+	const { resolveGatewayAuth } = await import("./auth-Bm0rnCsN.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const { randomToken } = await import("./onboard-helpers-D8gae6Q_.js");
+	if (resolveDoctorMode(ctx.cfg) !== "local" || !ctx.sourceConfigValid) return;
+	const gatewayTokenRef = resolveSecretInputRef({
+		value: ctx.cfg.gateway?.auth?.token,
+		defaults: ctx.cfg.secrets?.defaults
+	}).ref;
+	const auth = resolveGatewayAuth({
+		authConfig: ctx.cfg.gateway?.auth,
+		tailscaleMode: ctx.cfg.gateway?.tailscale?.mode ?? "off"
+	});
+	if (!(auth.mode !== "password" && auth.mode !== "none" && auth.mode !== "trusted-proxy" && (auth.mode !== "token" || !auth.token))) return;
+	if (gatewayTokenRef) {
+		note([
+			"Gateway token is managed via SecretRef and is currently unavailable.",
+			"Doctor will not overwrite gateway.auth.token with a plaintext value.",
+			"Resolve/rotate the external secret source, then rerun doctor."
+		].join("\n"), "Gateway auth");
+		return;
+	}
+	note("Gateway auth is off or missing a token. Token auth is now the recommended default (including loopback).", "Gateway auth");
+	if (!(ctx.options.generateGatewayToken === true ? true : ctx.options.nonInteractive === true ? false : await ctx.prompter.confirmAutoFix({
+		message: "Generate and configure a gateway token now?",
+		initialValue: true
+	}))) return;
+	const nextToken = randomToken();
+	ctx.cfg = {
+		...ctx.cfg,
+		gateway: {
+			...ctx.cfg.gateway,
+			auth: {
+				...ctx.cfg.gateway?.auth,
+				mode: "token",
+				token: nextToken
+			}
+		}
+	};
+	note("Gateway token configured.", "Gateway auth");
+}
+async function runCommandOwnerHealth(ctx) {
+	const { noteCommandOwnerHealth } = await import("./doctor-command-owner-BcT47XAR.js");
+	noteCommandOwnerHealth(ctx.cfg);
+}
+async function runStructuredHealthRepairs(ctx) {
+	if (!ctx.prompter.shouldRepair) return;
+	const { registerCoreHealthChecks } = await import("./doctor-core-checks-DPugZhrT.js");
+	const { registerBundledHealthChecks } = await import("./bundled-health-checks-B1eAaQuK.js");
+	const { runDoctorHealthRepairs } = await import("./doctor-repair-flow-CnWLirhO.js");
+	const { resolveAgentWorkspaceDir, resolveDefaultAgentId } = await import("./agent-scope-CTltHWxx.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	registerCoreHealthChecks();
+	const workspaceDir = resolveAgentWorkspaceDir(ctx.cfg, resolveDefaultAgentId(ctx.cfg));
+	registerBundledHealthChecks({
+		cfg: ctx.cfg,
+		cwd: workspaceDir
+	});
+	const result = await runDoctorHealthRepairs({
+		mode: "fix",
+		runtime: ctx.runtime,
+		cfg: ctx.cfg,
+		cwd: workspaceDir,
+		configPath: ctx.configPath
+	});
+	ctx.cfg = result.config;
+	if (result.changes.length > 0) note(result.changes.join("\n"), "Doctor changes");
+	if (result.warnings.length > 0) note(result.warnings.join("\n"), "Doctor warnings");
+}
+async function runClaudeCliHealth(ctx) {
+	const { noteClaudeCliHealth } = await import("./doctor-claude-cli-DLNzXs7-.js");
+	noteClaudeCliHealth(ctx.cfg);
+}
+async function runLegacyStateHealth(ctx) {
+	const { detectLegacyStateMigrations, runLegacyStateMigrations } = await import("./doctor-state-migrations-DzxJPcIt.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const legacyState = await detectLegacyStateMigrations({ cfg: ctx.cfg });
+	if (legacyState.preview.length === 0) return;
+	note(legacyState.preview.join("\n"), "Legacy state detected");
+	if (!(ctx.options.nonInteractive === true ? true : await ctx.prompter.confirm({
+		message: "Migrate legacy state (sessions/agent/WhatsApp auth) now?",
+		initialValue: true
+	}))) return;
+	const migrated = await runLegacyStateMigrations({ detected: legacyState });
+	if (migrated.changes.length > 0) note(migrated.changes.join("\n"), "Doctor changes");
+	if (migrated.warnings.length > 0) note(migrated.warnings.join("\n"), "Doctor warnings");
+}
+async function runLegacyPluginManifestHealth(ctx) {
+	const { maybeRepairLegacyPluginManifestContracts } = await import("./doctor-plugin-manifests-eMW3cmZE.js");
+	await maybeRepairLegacyPluginManifestContracts({
+		config: ctx.cfg,
+		env: process.env,
+		runtime: ctx.runtime,
+		prompter: ctx.prompter
+	});
+}
+async function runPluginRegistryHealth(ctx) {
+	const { maybeRepairPluginRegistryState } = await import("./doctor-plugin-registry-aKo9dp7b.js");
+	ctx.cfg = await maybeRepairPluginRegistryState({
+		config: ctx.cfg,
+		env: process.env,
+		prompter: ctx.prompter
+	});
+}
+async function runReleaseConfiguredPluginInstallsHealth(ctx) {
+	if (!ctx.sourceConfigValid) return;
+	if (!ctx.prompter.shouldRepair) return;
+	const { maybeRunConfiguredPluginInstallReleaseStep } = await import("./release-configured-plugin-installs-CnTnL4cV.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const { VERSION } = await import("./version-CGrH6B8X.js");
+	const result = await maybeRunConfiguredPluginInstallReleaseStep({
+		cfg: ctx.cfg,
+		env: ctx.env ?? process.env,
+		touchedVersion: ctx.configResult.sourceLastTouchedVersion ?? ctx.cfg.meta?.lastTouchedVersion
+	});
+	if (result.changes.length > 0) note(result.changes.join("\n"), "Doctor changes");
+	if (result.warnings.length > 0) note(result.warnings.join("\n"), "Doctor warnings");
+	if (!result.touchedConfig) return;
+	const lastTouchedVersion = isLegacyParentWritableUpdateDoctorPass(ctx.env ?? process.env) ? ctx.configResult.sourceLastTouchedVersion?.trim() || ctx.cfg.meta?.lastTouchedVersion || VERSION : VERSION;
+	ctx.cfg = {
+		...ctx.cfg,
+		meta: {
+			...ctx.cfg.meta,
+			lastTouchedVersion,
+			lastTouchedAt: (/* @__PURE__ */ new Date()).toISOString()
+		}
+	};
+}
+async function runStateIntegrityHealth(ctx) {
+	const { noteStateIntegrity } = await import("./doctor-state-integrity-B5aQjl2y.js");
+	await noteStateIntegrity(ctx.cfg, ctx.prompter, ctx.configPath);
+}
+async function runCodexSessionRouteHealth(ctx) {
+	const { maybeRepairCodexSessionRoutes } = await import("./codex-route-warnings-B-u0uXjg.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const result = await maybeRepairCodexSessionRoutes({
+		cfg: ctx.cfg,
+		env: ctx.env ?? process.env,
+		shouldRepair: ctx.prompter.shouldRepair
+	});
+	if (result.changes.length > 0) note(result.changes.join("\n"), "Doctor changes");
+	if (result.warnings.length > 0) note(result.warnings.join("\n"), "Doctor warnings");
+}
+async function runSessionLocksHealth(ctx) {
+	const { noteSessionLockHealth } = await import("./doctor-session-locks-CMeeXEBL.js");
+	await noteSessionLockHealth({
+		shouldRepair: ctx.prompter.shouldRepair,
+		config: ctx.cfg,
+		env: ctx.env
+	});
+}
+async function runSessionTranscriptsHealth(ctx) {
+	const { noteSessionTranscriptHealth } = await import("./doctor-session-transcripts-n3u1VWMt.js");
+	await noteSessionTranscriptHealth({ shouldRepair: ctx.prompter.shouldRepair });
+}
+async function runSessionSnapshotsHealth(ctx) {
+	const { noteSessionSnapshotHealth } = await import("./doctor-session-snapshots-HYlUEsuo.js");
+	await noteSessionSnapshotHealth({
+		cfg: ctx.cfg,
+		env: ctx.env ?? process.env
+	});
+}
+async function runConfigAuditScrubHealth(ctx) {
+	const { maybeScrubConfigAuditLog } = await import("./doctor-config-audit-scrub-C5ShwcZM.js");
+	await maybeScrubConfigAuditLog({ shouldRepair: ctx.prompter.shouldRepair });
+}
+async function runLegacyCronHealth(ctx) {
+	const { maybeRepairLegacyCronStore, noteLegacyWhatsAppCrontabHealthCheck } = await import("./doctor-cron-M44FCGmW.js");
+	await noteLegacyWhatsAppCrontabHealthCheck();
+	await maybeRepairLegacyCronStore({
+		cfg: ctx.cfg,
+		options: ctx.options,
+		prompter: ctx.prompter
+	});
+}
+async function runSandboxHealth(ctx) {
+	const { maybeRepairSandboxImages, maybeRepairSandboxRegistryFiles, noteSandboxScopeWarnings } = await import("./doctor-sandbox-DyPJ3Tnx.js");
+	await maybeRepairSandboxRegistryFiles(ctx.prompter);
+	ctx.cfg = await maybeRepairSandboxImages(ctx.cfg, ctx.runtime, ctx.prompter);
+	noteSandboxScopeWarnings(ctx.cfg);
+}
+async function runGatewayServicesHealth(ctx) {
+	const { maybeRepairGatewayServiceConfig, maybeScanExtraGatewayServices } = await import("./doctor-gateway-services-D9EfhRuF.js");
+	const { noteMacLaunchAgentOverrides, noteMacLaunchctlGatewayEnvOverrides, noteMacStaleDaoCoreUpdateLaunchdJobs } = await import("./doctor-platform-notes-DJ0MDVP3.js");
+	await maybeScanExtraGatewayServices(ctx.options, ctx.runtime, ctx.prompter);
+	await maybeRepairGatewayServiceConfig(ctx.cfg, resolveDoctorMode(ctx.cfg), ctx.runtime, ctx.prompter);
+	await noteMacLaunchAgentOverrides();
+	await noteMacStaleDaoCoreUpdateLaunchdJobs();
+	await noteMacLaunchctlGatewayEnvOverrides(ctx.cfg);
+}
+async function runStartupChannelMaintenanceHealth(ctx) {
+	const { maybeRunDoctorStartupChannelMaintenance } = await import("./doctor-startup-channel-maintenance-QOOfI6cd.js");
+	await maybeRunDoctorStartupChannelMaintenance({
+		cfg: ctx.cfg,
+		env: process.env,
+		runtime: ctx.runtime,
+		shouldRepair: ctx.prompter.shouldRepair
+	});
+}
+async function runSecurityHealth(ctx) {
+	const { noteSecurityWarnings } = await import("./doctor-security-CNCjKer4.js");
+	await noteSecurityWarnings(ctx.cfg);
+}
+async function runBrowserHealth(ctx) {
+	const { noteChromeMcpBrowserReadiness } = await import("./doctor-browser-Cbdik9Fg.js");
+	await noteChromeMcpBrowserReadiness(ctx.cfg);
+}
+async function runOpenAIOAuthTlsHealth(ctx) {
+	const { noteOpenAIOAuthTlsPrerequisites } = await import("./oauth-tls-preflight-BX57P6bt.js");
+	await noteOpenAIOAuthTlsPrerequisites({
+		cfg: ctx.cfg,
+		deep: ctx.options.deep === true
+	});
+}
+async function runHooksModelHealth(ctx) {
+	if (!ctx.cfg.hooks?.gmail?.model?.trim()) return;
+	const { DEFAULT_MODEL, DEFAULT_PROVIDER } = await import("./defaults-RurGC76M.js");
+	const { loadModelCatalog } = await import("./model-catalog-DqrkKYXR.js");
+	const { getModelRefStatus, resolveConfiguredModelRef, resolveHooksGmailModel } = await import("./model-selection-BDu9Yt1m.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const hooksModelRef = resolveHooksGmailModel({
+		cfg: ctx.cfg,
+		defaultProvider: DEFAULT_PROVIDER
+	});
+	if (!hooksModelRef) {
+		note(`- hooks.gmail.model "${ctx.cfg.hooks.gmail.model}" could not be resolved`, "Hooks");
+		return;
+	}
+	const { provider: defaultProvider, model: defaultModel } = resolveConfiguredModelRef({
+		cfg: ctx.cfg,
+		defaultProvider: DEFAULT_PROVIDER,
+		defaultModel: DEFAULT_MODEL
+	});
+	const catalog = await loadModelCatalog({ config: ctx.cfg });
+	const status = getModelRefStatus({
+		cfg: ctx.cfg,
+		catalog,
+		ref: hooksModelRef,
+		defaultProvider,
+		defaultModel
+	});
+	const warnings = [];
+	if (!status.allowed) warnings.push(`- hooks.gmail.model "${status.key}" not in agents.defaults.models allowlist (will use primary instead)`);
+	if (!status.inCatalog) warnings.push(`- hooks.gmail.model "${status.key}" not in the model catalog (may fail at runtime)`);
+	if (warnings.length > 0) note(warnings.join("\n"), "Hooks");
+}
+async function runSystemdLingerHealth(ctx) {
+	if (ctx.options.nonInteractive === true || process.platform !== "linux" || resolveDoctorMode(ctx.cfg) !== "local") return;
+	const { resolveGatewayService } = await import("./service-ESYtBZmg.js");
+	const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-DBiy9sCa.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const service = resolveGatewayService();
+	let loaded = false;
+	try {
+		loaded = await service.isLoaded({ env: process.env });
+	} catch {
+		loaded = false;
+	}
+	if (!loaded) return;
+	await ensureSystemdUserLingerInteractive({
+		runtime: ctx.runtime,
+		prompter: {
+			confirm: async (p) => ctx.prompter.confirm(p),
+			note
+		},
+		reason: "Gateway runs as a systemd user service. Without lingering, systemd stops the user session on logout/idle and kills the Gateway.",
+		requireConfirm: true
+	});
+}
+async function runWorkspaceStatusHealth(ctx) {
+	const { noteWorkspaceStatus } = await import("./doctor-workspace-status-B1JAVcg3.js");
+	noteWorkspaceStatus(ctx.cfg);
+}
+async function runSkillsHealth(ctx) {
+	const { maybeRepairSkillReadiness } = await import("./doctor-skills-C7cEvSpf.js");
+	ctx.cfg = await maybeRepairSkillReadiness({
+		cfg: ctx.cfg,
+		prompter: ctx.prompter
+	});
+}
+async function runBootstrapSizeHealth(ctx) {
+	const { noteBootstrapFileSize } = await import("./doctor-bootstrap-size-Pn1ATP2O.js");
+	await noteBootstrapFileSize(ctx.cfg);
+}
+async function runShellCompletionHealth(ctx) {
+	const { doctorShellCompletion } = await import("./doctor-completion-CcafTr81.js");
+	await doctorShellCompletion(ctx.runtime, ctx.prompter, { nonInteractive: ctx.options.nonInteractive });
+}
+async function runGatewayHealthChecks(ctx) {
+	const { checkGatewayHealth, probeGatewayMemoryStatus } = await import("./doctor-gateway-health-CiLSb9wC.js");
+	const { healthOk, status } = await checkGatewayHealth({
+		runtime: ctx.runtime,
+		cfg: ctx.cfg,
+		timeoutMs: ctx.options.nonInteractive === true ? 3e3 : 1e4
+	});
+	ctx.healthOk = healthOk;
+	ctx.gatewayStatus = status;
+	ctx.gatewayMemoryProbe = healthOk ? await probeGatewayMemoryStatus({
+		cfg: ctx.cfg,
+		timeoutMs: ctx.options.nonInteractive === true ? 3e3 : 1e4
+	}) : {
+		checked: false,
+		ready: false,
+		skipped: false
+	};
+}
+async function runWhatsappResponsivenessHealth(ctx) {
+	const { noteWhatsappResponsivenessHealth } = await import("./doctor-whatsapp-responsiveness-BjT0szEZ.js");
+	await noteWhatsappResponsivenessHealth({
+		cfg: ctx.cfg,
+		status: ctx.gatewayStatus,
+		shouldRepair: ctx.prompter.shouldRepair
+	});
+}
+async function runMemorySearchHealthContribution(ctx) {
+	const { maybeRepairMemoryRecallHealth, noteMemoryRecallHealth, noteMemorySearchHealth } = await import("./doctor-memory-search-dc82Rhpl.js");
+	if (ctx.prompter.shouldRepair) await maybeRepairMemoryRecallHealth({
+		cfg: ctx.cfg,
+		prompter: ctx.prompter
+	});
+	await noteMemorySearchHealth(ctx.cfg, { gatewayMemoryProbe: ctx.gatewayMemoryProbe ?? {
+		checked: false,
+		ready: false,
+		skipped: false
+	} });
+	if (ctx.options.deep === true) await noteMemoryRecallHealth(ctx.cfg);
+}
+async function runDevicePairingHealth(ctx) {
+	const { noteDevicePairingHealth } = await import("./doctor-device-pairing-DD1xbkYr.js");
+	await noteDevicePairingHealth({
+		cfg: ctx.cfg,
+		healthOk: ctx.healthOk ?? false
+	});
+}
+async function runGatewayDaemonHealth(ctx) {
+	const { maybeRepairGatewayDaemon } = await import("./doctor-gateway-daemon-flow-CFbOX2Gk.js");
+	await maybeRepairGatewayDaemon({
+		cfg: ctx.cfg,
+		runtime: ctx.runtime,
+		prompter: ctx.prompter,
+		options: ctx.options,
+		gatewayDetailsMessage: ctx.gatewayDetails?.message ?? "",
+		healthOk: ctx.healthOk ?? false
+	});
+}
+async function runWriteConfigHealth(ctx) {
+	const { formatCliCommand } = await import("./command-format-CJf8eAcd.js");
+	const { applyWizardMetadata } = await import("./onboard-helpers-D8gae6Q_.js");
+	const { replaceConfigFile } = await import("./config/config.js");
+	const { logConfigUpdated } = await import("./logging-qL8SMmqL.js");
+	const { shortenHomePath } = await import("./utils-sA6IjDTq.js");
+	if (ctx.configResult.shouldWriteConfig || JSON.stringify(ctx.cfg) !== JSON.stringify(ctx.cfgForPersistence)) {
+		const updateDoctorRun = isUpdateDoctorRun(ctx.env ?? process.env);
+		ctx.cfg = applyWizardMetadata(ctx.cfg, {
+			command: "doctor",
+			mode: resolveDoctorMode(ctx.cfg)
+		});
+		if (shouldSkipLegacyUpdateDoctorConfigWrite({ env: ctx.env ?? process.env })) {
+			ctx.runtime.log("Skipping doctor config write during legacy update handoff.");
+			return;
+		}
+		const legacyParentVersionOverride = isLegacyParentWritableUpdateDoctorPass(ctx.env ?? process.env) ? ctx.configResult.sourceLastTouchedVersion?.trim() || ctx.cfg.meta?.lastTouchedVersion : void 0;
+		await replaceConfigFile({
+			nextConfig: ctx.cfg,
+			afterWrite: { mode: "auto" },
+			writeOptions: {
+				allowConfigSizeDrop: ctx.configResult.shouldWriteConfig === true || updateDoctorRun,
+				skipPluginValidation: ctx.configResult.skipPluginValidationOnWrite === true || updateDoctorRun,
+				preservedLegacyRootKeys: ctx.configResult.preservedLegacyRootKeys,
+				...legacyParentVersionOverride ? { lastTouchedVersionOverride: legacyParentVersionOverride } : {}
+			}
+		});
+		logConfigUpdated(ctx.runtime);
+		const preUpdateSnapshotPath = `${ctx.configPath}.pre-update`;
+		if (updateDoctorRun && fs.existsSync(preUpdateSnapshotPath)) ctx.runtime.log(`Update changed config; pre-update backup: ${shortenHomePath(preUpdateSnapshotPath)}`);
+		const backupPath = `${ctx.configPath}.bak`;
+		if (fs.existsSync(backupPath)) ctx.runtime.log(`Backup: ${shortenHomePath(backupPath)}`);
+		return;
+	}
+	if (!ctx.prompter.shouldRepair) ctx.runtime.log(`Run "${formatCliCommand("daocore doctor --fix")}" to apply changes.`);
+}
+async function runWorkspaceSuggestionsHealth(ctx) {
+	if (ctx.options.workspaceSuggestions === false) return;
+	const { resolveAgentWorkspaceDir, resolveDefaultAgentId } = await import("./agent-scope-CTltHWxx.js");
+	const { noteWorkspaceBackupTip } = await import("./doctor-state-integrity-B5aQjl2y.js");
+	const { MEMORY_SYSTEM_PROMPT, shouldSuggestMemorySystem } = await import("./doctor-workspace-C0GCl6xH.js");
+	const { note } = await import("./note-j3TK3Q9E.js");
+	const workspaceDir = resolveAgentWorkspaceDir(ctx.cfg, resolveDefaultAgentId(ctx.cfg));
+	noteWorkspaceBackupTip(workspaceDir);
+	if (await shouldSuggestMemorySystem(workspaceDir)) note(MEMORY_SYSTEM_PROMPT, "Workspace");
+}
+async function runFinalConfigValidationHealth(ctx) {
+	const { readConfigFileSnapshot } = await import("./config/config.js");
+	const finalSnapshot = await readConfigFileSnapshot({
+		skipPluginValidation: isUpdateDoctorRun(ctx.env ?? process.env),
+		preservedLegacyRootKeys: ctx.configResult.preservedLegacyRootKeys
+	});
+	if (finalSnapshot.exists && !finalSnapshot.valid) {
+		ctx.runtime.error("Invalid config:");
+		for (const issue of finalSnapshot.issues) {
+			const path = issue.path || "<root>";
+			ctx.runtime.error(`- ${path}: ${issue.message}`);
+		}
+	}
+}
+function resolveDoctorHealthContributions() {
+	return [
+		createDoctorHealthContribution({
+			id: "doctor:gateway-config",
+			label: "Gateway config",
+			healthCheckIds: ["core/doctor/gateway-config"],
+			run: runGatewayConfigHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:auth-profiles",
+			label: "Auth profiles",
+			run: runAuthProfileHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:claude-cli",
+			label: "Claude CLI",
+			healthCheckIds: ["core/doctor/claude-cli"],
+			run: runClaudeCliHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:gateway-auth",
+			label: "Gateway auth",
+			healthCheckIds: ["core/doctor/gateway-auth"],
+			run: runGatewayAuthHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:command-owner",
+			label: "Command owner",
+			healthCheckIds: ["core/doctor/command-owner"],
+			run: runCommandOwnerHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:structured-health-repairs",
+			label: "Structured health repairs",
+			run: runStructuredHealthRepairs
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:legacy-state",
+			label: "Legacy state",
+			healthCheckIds: ["core/doctor/legacy-state"],
+			run: runLegacyStateHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:legacy-plugin-manifests",
+			label: "Legacy plugin manifests",
+			run: runLegacyPluginManifestHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:release-configured-plugin-installs",
+			label: "Configured plugin repair",
+			run: runReleaseConfiguredPluginInstallsHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:plugin-registry",
+			label: "Plugin registry",
+			run: runPluginRegistryHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:state-integrity",
+			label: "State integrity",
+			run: runStateIntegrityHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:codex-session-routes",
+			label: "Codex session routes",
+			run: runCodexSessionRouteHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:session-locks",
+			label: "Session locks",
+			run: runSessionLocksHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:session-transcripts",
+			label: "Session transcripts",
+			run: runSessionTranscriptsHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:session-snapshots",
+			label: "Session snapshots",
+			run: runSessionSnapshotsHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:config-audit-scrub",
+			label: "Config audit",
+			run: runConfigAuditScrubHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:legacy-cron",
+			label: "Legacy cron",
+			healthCheckIds: ["core/doctor/legacy-whatsapp-crontab"],
+			run: runLegacyCronHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:sandbox",
+			label: "Sandbox",
+			run: runSandboxHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:gateway-services",
+			label: "Gateway services",
+			healthCheckIds: ["core/doctor/gateway-services/platform-notes"],
+			run: runGatewayServicesHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:startup-channel-maintenance",
+			label: "Startup channel maintenance",
+			run: runStartupChannelMaintenanceHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:security",
+			label: "Security",
+			healthCheckIds: ["core/doctor/security"],
+			run: runSecurityHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:browser",
+			label: "Browser",
+			healthCheckIds: ["core/doctor/browser"],
+			run: runBrowserHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:oauth-tls",
+			label: "OAuth TLS",
+			healthCheckIds: ["core/doctor/oauth-tls"],
+			run: runOpenAIOAuthTlsHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:hooks-model",
+			label: "Hooks model",
+			healthCheckIds: ["core/doctor/hooks-model"],
+			run: runHooksModelHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:systemd-linger",
+			label: "systemd linger",
+			run: runSystemdLingerHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:workspace-status",
+			label: "Workspace status",
+			healthCheckIds: ["core/doctor/workspace-status"],
+			run: runWorkspaceStatusHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:skills",
+			label: "Skills",
+			healthCheckIds: ["core/doctor/skills-readiness"],
+			run: runSkillsHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:bootstrap-size",
+			label: "Bootstrap size",
+			healthCheckIds: ["core/doctor/bootstrap-size"],
+			run: runBootstrapSizeHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:shell-completion",
+			label: "Shell completion",
+			run: runShellCompletionHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:gateway-health",
+			label: "Gateway health",
+			run: runGatewayHealthChecks
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:whatsapp-responsiveness",
+			label: "WhatsApp responsiveness",
+			run: runWhatsappResponsivenessHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:memory-search",
+			label: "Memory search",
+			run: runMemorySearchHealthContribution
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:device-pairing",
+			label: "Device pairing",
+			run: runDevicePairingHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:gateway-daemon",
+			label: "Gateway daemon",
+			run: runGatewayDaemonHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:write-config",
+			label: "Write config",
+			run: runWriteConfigHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:workspace-suggestions",
+			label: "Workspace suggestions",
+			healthCheckIds: ["core/doctor/workspace-suggestions"],
+			run: runWorkspaceSuggestionsHealth
+		}),
+		createDoctorHealthContribution({
+			id: "doctor:final-config-validation",
+			label: "Final config validation",
+			healthCheckIds: ["core/doctor/final-config-validation"],
+			run: runFinalConfigValidationHealth
+		})
+	];
+}
+async function runDoctorHealthContributions(ctx) {
+	for (const contribution of resolveDoctorHealthContributions()) await contribution.run(ctx);
+}
+//#endregion
+export { runDoctorHealthContributions };