@indigoai-us/hq-cloud 6.14.23 → 6.14.25

package/dist/cli/doctor.d.ts

@@ -0,0 +1,119 @@
+/**
+ * `hq sync doctor` — bounded skill-key dedupe + local farm GC (US-003,
+ * hq-sync-windows-skill-symlink-collision).
+ *
+ * The mixed-version amplifier (see `canonicalVaultKeySpelling` in
+ * local-path-codec.ts) leaves the vault holding several percent-encoded
+ * GENERATIONS of every `.claude/skills/<ns>:<skill>` wrapper key (`:`, `%3A`,
+ * `%253A`, `%25253A`, …) and the local farm holding junk-named wrapper dirs.
+ * US-001/US-002 stop NEW generations from being minted; this doctor is the
+ * one-shot reconcile that collapses the families already in the wild:
+ *
+ *   1. Vault dedupe — list keys under `.claude/skills/`, group them by their
+ *      decode-to-fixpoint canonical form, let the newest-bodied spelling win,
+ *      (re)write the canonical `:` key when it is missing or stale, and delete
+ *      every non-canonical spelling. Deletion is gated hard: only bodies that
+ *      start with the `hq-symlink:` marker, or that are byte-identical to the
+ *      canonical twin, are auto-deleted — anything else is surfaced for manual
+ *      review, never silently removed.
+ *   2. Local farm GC — remove `.claude/skills/` entries whose names decode to
+ *      a canonical wrapper that already exists on disk and whose content is
+ *      exclusively symlink-farm material. A real file anywhere is a refusal.
+ *
+ * Dry-run is the DEFAULT: the full keep/rewrite/tombstone/rm plan is printed
+ * (counts + every key/path) and nothing is written until `--yes`
+ * (`options.yes`). Remote deletes respect the sync-delete-bulk-asymmetry-guard
+ * policy — same thresholds, env override, and refusal semantics as
+ * `computeDeletePlan` in share.ts. Per-item failures are loud warnings, never
+ * process-fatal (hq-sync-deliberate-skip-not-fatal-error-exit2).
+ */
+import { type ObjectIO } from "../object-io.js";
+import type { VaultServiceConfig } from "../types.js";
+/** Vault prefix the doctor is bounded to — the skill wrapper link farm. */
+export declare const SKILLS_KEY_PREFIX = ".claude/skills/";
+/**
+ * The narrow object-store seam the doctor needs. Structurally satisfied by
+ * every `ObjectIO` transport; tests inject an in-memory fake (the same
+ * dependency-injection convention the s3.ts suites use via
+ * `setObjectIOFactory`).
+ */
+export type DoctorStore = Pick<ObjectIO, "listObjects" | "getObject" | "putObject" | "deleteObject">;
+export interface SyncDoctorOptions {
+    /** Entity whose vault to reconcile (prs_/agt_ uid, cmp_ uid, or slug). */
+    entity: string;
+    /** Vault service config (auth + region), as for `sync()`/`share()`. */
+    vaultConfig: VaultServiceConfig;
+    /** HQ root whose local `.claude/skills/` farm the GC pass walks. */
+    hqRoot: string;
+    /** Apply the plan. Default false = dry-run: print the plan, write nothing. */
+    yes?: boolean;
+    /**
+     * Explicit bulk-delete override (the `--force-bulk` CLI flag). Equivalent to
+     * `HQ_SYNC_DELETE_BULK_OVERRIDE=1`; without either, a tombstone plan that
+     * trips the asymmetry thresholds is refused (writes and local GC still run).
+     */
+    bulkDeleteOverride?: boolean;
+    /** DI seam for tests; defaults to the entity's resolved ObjectIO. */
+    store?: DoctorStore;
+    /**
+     * Platform override for local farm-name encoding (local-path-codec
+     * convention). Decode-to-fixpoint always uses win32 semantics — junk
+     * spellings are a key-space phenomenon, not a host one — but the canonical
+     * LOCAL wrapper name a junk dir must collapse into is host-specific
+     * (`ns%3Askill` on win32, `ns:skill` on POSIX).
+     */
+    win32?: boolean;
+    /**
+     * The doctor takes the same per-root operation lock as `sync()`. Set when a
+     * caller (runner/daemon) already holds it for this root.
+     */
+    operationLockAlreadyHeld?: boolean;
+}
+/** One canonical key the doctor will (re)write, and the spelling it copies. */
+export interface SkillKeyRewrite {
+    key: string;
+    /** Winning (newest-bodied) spelling whose body becomes the canonical body. */
+    fromSpelling: string;
+}
+export interface DoctorManualReviewItem {
+    key: string;
+    reason: string;
+}
+export interface LocalGcManualReviewItem {
+    path: string;
+    reason: string;
+}
+export interface SyncDoctorPlan {
+    /** Every listed `.claude/skills/` key (the bulk-guard denominator). */
+    inScopeKeys: number;
+    /** Canonical-spelling keys that need no action. */
+    keep: string[];
+    /** Canonical keys to (re)write from their winning spelling's body. */
+    rewrites: SkillKeyRewrite[];
+    /** Non-canonical spellings safe to delete (marker body or byte-identical). */
+    tombstones: string[];
+    /** Keys the safety gate refused to auto-delete — surfaced, never removed. */
+    manualReview: DoctorManualReviewItem[];
+    /** Junk-named local farm entries (symlink-farm content only) to remove. */
+    localRemovals: string[];
+    /** Junk-named local entries the GC refused to touch — surfaced only. */
+    localManualReview: LocalGcManualReviewItem[];
+    /** True when the tombstone plan tripped the bulk-asymmetry breaker. */
+    bulkRefused: boolean;
+}
+export interface SyncDoctorResult {
+    plan: SyncDoctorPlan;
+    /** False on dry-run (the default) and when `--yes` was absent. */
+    applied: boolean;
+    keysRewritten: number;
+    keysDeleted: number;
+    dirsRemoved: number;
+    /** Loud non-fatal warnings emitted during plan + apply. */
+    warnings: number;
+}
+/**
+ * Run the doctor: build the dedupe + GC plan, print it in full, and — only
+ * with `yes: true` — apply it. See the module doc for semantics.
+ */
+export declare function syncDoctor(options: SyncDoctorOptions): Promise<SyncDoctorResult>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AASjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AAqBnD;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,CAC5B,QAAQ,EACR,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAC3D,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,WAAW,EAAE,kBAAkB,CAAC;IAChC,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qEAAqE;IACrE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,sEAAsE;IACtE,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6EAA6E;IAC7E,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,2EAA2E;IAC3E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,wEAAwE;IACxE,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;IAC7C,uEAAuE;IACvE,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAwMD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/cli/doctor.js

@@ -0,0 +1,485 @@
+/**
+ * `hq sync doctor` — bounded skill-key dedupe + local farm GC (US-003,
+ * hq-sync-windows-skill-symlink-collision).
+ *
+ * The mixed-version amplifier (see `canonicalVaultKeySpelling` in
+ * local-path-codec.ts) leaves the vault holding several percent-encoded
+ * GENERATIONS of every `.claude/skills/<ns>:<skill>` wrapper key (`:`, `%3A`,
+ * `%253A`, `%25253A`, …) and the local farm holding junk-named wrapper dirs.
+ * US-001/US-002 stop NEW generations from being minted; this doctor is the
+ * one-shot reconcile that collapses the families already in the wild:
+ *
+ *   1. Vault dedupe — list keys under `.claude/skills/`, group them by their
+ *      decode-to-fixpoint canonical form, let the newest-bodied spelling win,
+ *      (re)write the canonical `:` key when it is missing or stale, and delete
+ *      every non-canonical spelling. Deletion is gated hard: only bodies that
+ *      start with the `hq-symlink:` marker, or that are byte-identical to the
+ *      canonical twin, are auto-deleted — anything else is surfaced for manual
+ *      review, never silently removed.
+ *   2. Local farm GC — remove `.claude/skills/` entries whose names decode to
+ *      a canonical wrapper that already exists on disk and whose content is
+ *      exclusively symlink-farm material. A real file anywhere is a refusal.
+ *
+ * Dry-run is the DEFAULT: the full keep/rewrite/tombstone/rm plan is printed
+ * (counts + every key/path) and nothing is written until `--yes`
+ * (`options.yes`). Remote deletes respect the sync-delete-bulk-asymmetry-guard
+ * policy — same thresholds, env override, and refusal semantics as
+ * `computeDeletePlan` in share.ts. Per-item failures are loud warnings, never
+ * process-fatal (hq-sync-deliberate-skip-not-fatal-error-exit2).
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { resolveEntityContext } from "../context.js";
+import { resolveObjectIO } from "../object-io.js";
+import { SYMLINK_BODY_PREFIX } from "../s3.js";
+import { canonicalVaultKeySpelling, canonicalVaultSegmentSpelling, encodeLocalVaultSegment, } from "../local-path-codec.js";
+import { withOperationLock } from "../operation-lock.js";
+/** Vault prefix the doctor is bounded to — the skill wrapper link farm. */
+export const SKILLS_KEY_PREFIX = ".claude/skills/";
+/**
+ * Bulk-asymmetry circuit-breaker, per the sync-delete-bulk-asymmetry-guard
+ * policy: any new delete-propagation site must ship the guard inline with the
+ * SAME threshold defaults and env-var name as the reference implementation
+ * (share.ts `BULK_ASYMMETRY_*` + `isBulkAsymmetryOverride`). Here the
+ * numerator is the planned tombstone count and the denominator is every
+ * in-scope `.claude/skills/` key — a dedupe pass that wants to delete a large
+ * slice of the farm at once must be explicitly confirmed, because that shape
+ * is indistinguishable from a planner bug eating the vault.
+ */
+const BULK_ASYMMETRY_RATIO = 0.10;
+const BULK_ASYMMETRY_MIN_ABS = 10;
+function isBulkDeleteOverride(explicit) {
+    if (explicit)
+        return true;
+    const v = (process.env.HQ_SYNC_DELETE_BULK_OVERRIDE ?? "").toLowerCase();
+    return v === "1" || v === "true" || v === "yes";
+}
+function isSymlinkMarkerBody(body) {
+    return (body.subarray(0, SYMLINK_BODY_PREFIX.length).toString("utf-8") ===
+        SYMLINK_BODY_PREFIX);
+}
+/** Exhaustively page the skills prefix (the transport caps pages at ~1000). */
+async function listSkillObjects(store) {
+    const objects = [];
+    let continuationToken;
+    do {
+        const page = await store.listObjects({
+            prefix: SKILLS_KEY_PREFIX,
+            continuationToken,
+        });
+        objects.push(...page.objects);
+        continuationToken = page.nextContinuationToken;
+    } while (continuationToken);
+    return objects;
+}
+/**
+ * Winner ordering: newest lastModified first ("newest-bodied spelling wins");
+ * ties prefer the canonical spelling, then the lexicographically smallest key
+ * so the plan is deterministic under equal timestamps.
+ */
+function pickWinner(members, canonicalKey) {
+    return members.reduce((best, m) => {
+        if (m.lastModified.getTime() !== best.lastModified.getTime()) {
+            return m.lastModified.getTime() > best.lastModified.getTime() ? m : best;
+        }
+        if ((m.key === canonicalKey) !== (best.key === canonicalKey)) {
+            return m.key === canonicalKey ? m : best;
+        }
+        return m.key < best.key ? m : best;
+    });
+}
+/**
+ * True when every entry under `dir` (recursively) is symlink-farm material:
+ * symlinks, or directories that themselves contain only symlink-farm
+ * material. Any regular file — or anything that is neither a symlink nor a
+ * directory (fifo, socket) — makes the tree untouchable.
+ */
+function containsOnlySymlinkFarmContent(dir) {
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (entry.isSymbolicLink())
+            continue;
+        if (entry.isDirectory()) {
+            if (!containsOnlySymlinkFarmContent(path.join(dir, entry.name))) {
+                return false;
+            }
+            continue;
+        }
+        return false;
+    }
+    return true;
+}
+/** lstat-based existence probe — a broken symlink wrapper still "exists". */
+function entryExists(p) {
+    try {
+        fs.lstatSync(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Plan the local `.claude/skills/` farm GC. Pure planning — no removal here.
+ * An entry qualifies when its name percent-decodes (to fixpoint) to a
+ * canonical wrapper name DIFFERENT from its own spelling, that canonical
+ * wrapper already exists on disk, and the entry is a symlink or a directory
+ * of exclusively symlink-farm content. Everything else that is junk-named is
+ * listed for manual review with the reason it was refused.
+ */
+function planLocalSkillFarmGc(skillsDir, win32, warn) {
+    const removals = [];
+    const manualReview = [];
+    if (!entryExists(skillsDir))
+        return { removals, manualReview };
+    let entries;
+    try {
+        entries = fs.readdirSync(skillsDir, { withFileTypes: true });
+    }
+    catch (err) {
+        warn(`local GC skipped — cannot read ${skillsDir}: ${String(err)}`);
+        return { removals, manualReview };
+    }
+    for (const entry of entries) {
+        // Fixpoint-decode the name (win32 key-space semantics unconditionally —
+        // a mac's literal `ns%3Askill` junk dir is junk too), then re-encode for
+        // THIS host to get the canonical local wrapper spelling.
+        const canonicalName = canonicalVaultSegmentSpelling(entry.name);
+        // A no-op canonicalization means this name is NOT an amplifier
+        // generation: generated wrapper generations always decode back to a
+        // `<ns>:<skill>` name, and canonicalVaultSegmentSpelling deliberately
+        // returns colon-free names unchanged (`foo%25bar` is a legitimate
+        // wrapper for the canonical skill name `foo%bar`, distinct from a
+        // literal `foo%bar` dir). Encoding such a name for the host would
+        // re-escape it into a different spelling (`foo%2525bar` on win32) and,
+        // if that double-encoded sibling happens to exist, `--yes` would delete
+        // the legitimate wrapper. Bail before the host encode — the amplifier
+        // family this GC exists to collapse always changes spelling here.
+        if (canonicalName === entry.name)
+            continue;
+        const canonicalLocalName = encodeLocalVaultSegment(canonicalName, win32);
+        if (entry.name === canonicalLocalName)
+            continue; // already canonical
+        const fullPath = path.join(skillsDir, entry.name);
+        if (!entryExists(path.join(skillsDir, canonicalLocalName))) {
+            manualReview.push({
+                path: fullPath,
+                reason: `canonical wrapper '${canonicalLocalName}' missing on disk — junk-named entry may be the only copy`,
+            });
+            continue;
+        }
+        if (entry.isSymbolicLink()) {
+            removals.push(fullPath);
+            continue;
+        }
+        if (entry.isDirectory()) {
+            let farmOnly = false;
+            try {
+                farmOnly = containsOnlySymlinkFarmContent(fullPath);
+            }
+            catch (err) {
+                warn(`local GC cannot inspect ${fullPath}: ${String(err)}`);
+                manualReview.push({ path: fullPath, reason: "unreadable — not inspected" });
+                continue;
+            }
+            if (farmOnly) {
+                removals.push(fullPath);
+            }
+            else {
+                manualReview.push({
+                    path: fullPath,
+                    reason: "contains real (non-symlink) files — never auto-deleted",
+                });
+            }
+            continue;
+        }
+        manualReview.push({
+            path: fullPath,
+            reason: "junk-named regular file — never auto-deleted",
+        });
+    }
+    return { removals, manualReview };
+}
+/** Remove one farm entry: unlink symlinks (rmdir for win32 dir links), rm dirs. */
+function removeFarmEntry(fullPath) {
+    const st = fs.lstatSync(fullPath);
+    if (st.isSymbolicLink()) {
+        try {
+            fs.unlinkSync(fullPath);
+        }
+        catch (err) {
+            const code = err.code;
+            // A Windows directory symlink is a directory reparse point; unlink()
+            // refuses it (EPERM/EISDIR) and rmdir removes the LINK, not the target.
+            if (code === "EPERM" || code === "EISDIR") {
+                fs.rmdirSync(fullPath);
+            }
+            else {
+                throw err;
+            }
+        }
+        return;
+    }
+    fs.rmSync(fullPath, { recursive: true });
+}
+/**
+ * Run the doctor: build the dedupe + GC plan, print it in full, and — only
+ * with `yes: true` — apply it. See the module doc for semantics.
+ */
+export async function syncDoctor(options) {
+    if (options.operationLockAlreadyHeld) {
+        return syncDoctorWithOperationLockHeld(options);
+    }
+    return withOperationLock(options.hqRoot, "sync-doctor", () => syncDoctorWithOperationLockHeld(options));
+}
+async function syncDoctorWithOperationLockHeld(options) {
+    let warnings = 0;
+    const warn = (message) => {
+        warnings++;
+        console.error(`  ! ${message}`);
+    };
+    const win32 = options.win32 ?? process.platform === "win32";
+    const store = options.store ??
+        resolveObjectIO(await resolveEntityContext(options.entity, options.vaultConfig));
+    // ── Vault leg: plan ────────────────────────────────────────────────────────
+    const listed = await listSkillObjects(store);
+    const groups = new Map();
+    for (const obj of listed) {
+        const canonicalKey = canonicalVaultKeySpelling(obj.key);
+        const members = groups.get(canonicalKey);
+        if (members) {
+            members.push(obj);
+        }
+        else {
+            groups.set(canonicalKey, [obj]);
+        }
+    }
+    const keep = [];
+    const rewrites = [];
+    const rewritePayloads = [];
+    const tombstones = [];
+    const manualReview = [];
+    for (const [canonicalKey, members] of groups) {
+        // Fast path: one spelling and it is already canonical — nothing to do,
+        // and no body fetch (the common case must stay O(list), not O(get)).
+        if (members.length === 1 && members[0].key === canonicalKey) {
+            keep.push(canonicalKey);
+            continue;
+        }
+        // Actionable family: fetch every member's body. A fetch failure demotes
+        // that spelling to manual review (unknown bytes are never deleted) and
+        // never aborts the run.
+        const fetched = [];
+        for (const member of members) {
+            try {
+                const res = await store.getObject(member.key);
+                fetched.push({
+                    key: member.key,
+                    lastModified: member.lastModified,
+                    body: res.body,
+                    metadata: res.metadata,
+                });
+            }
+            catch (err) {
+                warn(`body fetch failed for ${member.key}: ${String(err)} — left for manual review`);
+                manualReview.push({
+                    key: member.key,
+                    reason: "body fetch failed — bytes unknown, not touched",
+                });
+            }
+        }
+        if (fetched.length === 0)
+            continue; // every member failed; all warned above
+        // A canonical spelling that is LISTED but whose body fetch failed means
+        // the canonical bytes are unknown — rewriting from a junk sibling could
+        // overwrite a non-marker object behind a transient read fault. Park the
+        // whole family: no rewrite, no deletes; re-run once the read recovers.
+        const canonicalListed = members.some((m) => m.key === canonicalKey);
+        const canonicalMember = fetched.find((m) => m.key === canonicalKey);
+        if (canonicalListed && canonicalMember === undefined) {
+            for (const member of fetched) {
+                manualReview.push({
+                    key: member.key,
+                    reason: "canonical body unknown (fetch failed) — family not touched",
+                });
+            }
+            continue;
+        }
+        const winner = pickWinner(fetched, canonicalKey);
+        // The body the canonical key will hold after this pass: the newest-bodied
+        // spelling's. (Re)write when the canonical key is missing entirely or its
+        // bytes are stale relative to the winner.
+        const finalBody = winner.body;
+        if (!canonicalMember || !canonicalMember.body.equals(finalBody)) {
+            rewrites.push({ key: canonicalKey, fromSpelling: winner.key });
+            // CAS fence (same contract as the push path): if the canonical key was
+            // listed, the PUT lands only while its ETag is unchanged; if it was
+            // absent, only while it is still absent. A concurrent upload from
+            // another machine turns the rewrite into a 412 warning (and the
+            // failed-rewrite guard below keeps the family's tombstones), never a
+            // clobber of bytes this run has not seen.
+            const listedCanonical = members.find((m) => m.key === canonicalKey);
+            rewritePayloads.push({
+                key: canonicalKey,
+                body: finalBody,
+                metadata: winner.metadata,
+                ...(listedCanonical
+                    ? { ifMatch: listedCanonical.etag }
+                    : { ifNoneMatch: "*" }),
+            });
+        }
+        else {
+            keep.push(canonicalKey);
+        }
+        // Safety gate, per spelling: auto-delete ONLY symlink-marker bodies or
+        // bodies byte-identical to the canonical twin's final content.
+        for (const member of fetched) {
+            if (member.key === canonicalKey)
+                continue;
+            if (isSymlinkMarkerBody(member.body) || member.body.equals(finalBody)) {
+                tombstones.push(member.key);
+            }
+            else {
+                manualReview.push({
+                    key: member.key,
+                    reason: "body is neither a symlink marker nor byte-identical to the canonical key — not auto-deleted",
+                });
+            }
+        }
+    }
+    // ── Bulk-asymmetry decision (policy: sync-delete-bulk-asymmetry-guard) ────
+    const bulkRefused = !isBulkDeleteOverride(options.bulkDeleteOverride) &&
+        tombstones.length >= BULK_ASYMMETRY_MIN_ABS &&
+        listed.length > 0 &&
+        tombstones.length / listed.length >= BULK_ASYMMETRY_RATIO;
+    // ── Local leg: plan ───────────────────────────────────────────────────────
+    const skillsDir = path.join(options.hqRoot, ".claude", "skills");
+    const localGc = planLocalSkillFarmGc(skillsDir, win32, warn);
+    const plan = {
+        inScopeKeys: listed.length,
+        keep,
+        rewrites,
+        tombstones,
+        manualReview,
+        localRemovals: localGc.removals,
+        localManualReview: localGc.manualReview,
+        bulkRefused,
+    };
+    printPlan(plan);
+    const result = {
+        plan,
+        applied: false,
+        keysRewritten: 0,
+        keysDeleted: 0,
+        dirsRemoved: 0,
+        warnings,
+    };
+    // ── Dry-run is the default: full plan printed, nothing written. ───────────
+    if (!options.yes) {
+        console.log("\nDry-run (default): nothing written. Re-run with --yes to apply.");
+        result.warnings = warnings;
+        return result;
+    }
+    // ── Apply: canonical rewrites first (additive), then gated deletes, then
+    //    local GC. Per-item failures warn and continue — never fatal. ─────────
+    // Canonical keys whose rewrite failed: their families' tombstones must NOT
+    // be deleted below — when the canonical body was missing or stale, the junk
+    // spelling may hold the newest (or only) remote copy, and deleting it after
+    // a failed rewrite would drop that body permanently.
+    const failedRewriteCanonicals = new Set();
+    for (const payload of rewritePayloads) {
+        try {
+            await store.putObject({
+                key: payload.key,
+                body: payload.body,
+                // Content-type is not consulted by the engine's read path; marker
+                // records upload as octet-stream (s3.ts uploadSymlink convention).
+                contentType: "application/octet-stream",
+                metadata: payload.metadata,
+                ifMatch: payload.ifMatch,
+                ifNoneMatch: payload.ifNoneMatch,
+            });
+            result.keysRewritten++;
+        }
+        catch (err) {
+            failedRewriteCanonicals.add(payload.key);
+            warn(`canonical rewrite failed for ${payload.key}: ${String(err)}`);
+        }
+    }
+    if (bulkRefused) {
+        // Refusal is event-only (policy req #4): nothing deleted, nothing
+        // journaled away — re-run with the override once the plan is reviewed.
+        console.error(`  ! bulk-asymmetry circuit-breaker tripped: ${tombstones.length}/${listed.length} in-scope skill keys planned for deletion.\n` +
+            `    Refusing the delete leg — review the plan above, then re-run with --force-bulk (or HQ_SYNC_DELETE_BULK_OVERRIDE=1) to apply it.`);
+    }
+    else {
+        for (const key of tombstones) {
+            if (failedRewriteCanonicals.has(canonicalVaultKeySpelling(key))) {
+                warn(`skipping delete of ${key} — its canonical rewrite failed; re-run the doctor once the write path recovers`);
+                continue;
+            }
+            try {
+                await store.deleteObject(key);
+                result.keysDeleted++;
+            }
+            catch (err) {
+                warn(`delete failed for ${key}: ${String(err)}`);
+            }
+        }
+    }
+    for (const fullPath of plan.localRemovals) {
+        try {
+            // Re-verify at apply time: the entry may have changed between plan and
+            // apply (sync pass, user edit). Positive check — remove ONLY what is
+            // still a symlink or a farm-only directory; anything else (a regular
+            // file that replaced the planned entry, a dir that grew real files) is
+            // refused rather than trusted from the plan.
+            const st = fs.lstatSync(fullPath);
+            const stillFarmEntry = st.isSymbolicLink() ||
+                (st.isDirectory() && containsOnlySymlinkFarmContent(fullPath));
+            if (!stillFarmEntry) {
+                warn(`skipped ${fullPath} — no longer symlink-farm content (changed since planning)`);
+                continue;
+            }
+            removeFarmEntry(fullPath);
+            result.dirsRemoved++;
+        }
+        catch (err) {
+            warn(`local removal failed for ${fullPath}: ${String(err)}`);
+        }
+    }
+    result.applied = true;
+    result.warnings = warnings;
+    console.log(`\nApplied: ${result.keysRewritten} canonical key(s) written, ${result.keysDeleted} spelling(s) deleted, ${result.dirsRemoved} local entr(ies) removed.`);
+    return result;
+}
+/** Print the full plan: counts plus every key/path in each bucket. */
+function printPlan(plan) {
+    console.log(`hq sync doctor — skill-key dedupe plan (${SKILLS_KEY_PREFIX})`);
+    console.log(`  in-scope keys: ${plan.inScopeKeys}`);
+    console.log(`  keep (canonical, no action): ${plan.keep.length}`);
+    for (const key of plan.keep)
+        console.log(`    = ${key}`);
+    console.log(`  rewrite canonical: ${plan.rewrites.length}`);
+    for (const r of plan.rewrites) {
+        console.log(`    + ${r.key}  (body from ${r.fromSpelling})`);
+    }
+    console.log(`  tombstone (delete non-canonical spelling): ${plan.tombstones.length}`);
+    for (const key of plan.tombstones)
+        console.log(`    - ${key}`);
+    console.log(`  manual review (NOT deleted): ${plan.manualReview.length}`);
+    for (const item of plan.manualReview) {
+        console.log(`    ? ${item.key} — ${item.reason}`);
+    }
+    console.log(`  local farm GC — remove: ${plan.localRemovals.length}`);
+    for (const p of plan.localRemovals)
+        console.log(`    - ${p}`);
+    console.log(`  local farm GC — manual review: ${plan.localManualReview.length}`);
+    for (const item of plan.localManualReview) {
+        console.log(`    ? ${item.path} — ${item.reason}`);
+    }
+    if (plan.bulkRefused) {
+        console.log(`  bulk-asymmetry: delete leg WOULD BE REFUSED (${plan.tombstones.length}/${plan.inScopeKeys} keys; override with --force-bulk or HQ_SYNC_DELETE_BULK_OVERRIDE=1)`);
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,eAAe,EAAiB,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,SAAS,oBAAoB,CAAC,QAA6B;IACzD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,CAAC;AAClD,CAAC;AA+GD,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9D,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,gBAAgB,CAC7B,KAAkB;IAElB,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,IAAI,iBAAqC,CAAC;IAC1C,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YACnC,MAAM,EAAE,iBAAiB;YACzB,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAAC;IACjD,CAAC,QAAQ,iBAAiB,EAAE;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,OAA0B,EAC1B,YAAoB;IAEpB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,8BAA8B,CAAC,GAAW;IACjD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,SAAS;QACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAChE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,SAAiB,EACjB,KAAc,EACd,IAA+B;IAE/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,YAAY,GAA8B,EAAE,CAAC;IACnD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAE/D,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,kCAAkC,SAAS,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,wEAAwE;QACxE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,aAAa,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,+DAA+D;QAC/D,oEAAoE;QACpE,sEAAsE;QACtE,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,kEAAkE;QAClE,IAAI,aAAa,KAAK,KAAK,CAAC,IAAI;YAAE,SAAS;QAC3C,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,SAAS,CAAC,oBAAoB;QAErE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC;YAC3D,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,sBAAsB,kBAAkB,2DAA2D;aAC5G,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,2BAA2B,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5D,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,wDAAwD;iBACjE,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,8CAA8C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,qEAAqE;YACrE,wEAAwE;YACxE,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1C,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAA0B;IAE1B,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACrC,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,CAC3D,+BAA+B,CAAC,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAA0B;IAE1B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC5D,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,eAAe,CACb,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAChE,CAAC;IAEJ,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,eAAe,GAAqB,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,YAAY,GAA6B,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QAC7C,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,uEAAuE;QACvE,wBAAwB;QACxB,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,yBAAyB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACrF,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,MAAM,EAAE,gDAAgD;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,wCAAwC;QAE5E,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;QACpE,IAAI,eAAe,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACrD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,uEAAuE;YACvE,oEAAoE;YACpE,kEAAkE;YAClE,gEAAgE;YAChE,qEAAqE;YACrE,0CAA0C;YAC1C,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;YACpE,eAAe,CAAC,IAAI,CAAC;gBACnB,GAAG,EAAE,YAAY;gBACjB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,eAAe;oBACjB,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE;oBACnC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAY,EAAE,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAC/D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,GAAG,KAAK,YAAY;gBAAE,SAAS;YAC1C,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,MAAM,EAAE,6FAA6F;iBACtG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,WAAW,GACf,CAAC,oBAAoB,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACjD,UAAU,CAAC,MAAM,IAAI,sBAAsB;QAC3C,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,oBAAoB,CAAC;IAE5D,6EAA6E;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAmB;QAC3B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,YAAY;QACZ,aAAa,EAAE,OAAO,CAAC,QAAQ;QAC/B,iBAAiB,EAAE,OAAO,CAAC,YAAY;QACvC,WAAW;KACZ,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAqB;QAC/B,IAAI;QACJ,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,QAAQ;KACT,CAAC;IAEF,6EAA6E;IAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,SAAS,CAAC;gBACpB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,kEAAkE;gBAClE,mEAAmE;gBACnE,WAAW,EAAE,0BAA0B;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,gCAAgC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,kEAAkE;QAClE,uEAAuE;QACvE,OAAO,CAAC,KAAK,CACX,+CAA+C,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,8CAA8C;YAC7H,qIAAqI,CACxI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,uBAAuB,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChE,IAAI,CACF,sBAAsB,GAAG,iFAAiF,CAC3G,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC9B,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,qBAAqB,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,6CAA6C;YAC7C,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM,cAAc,GAClB,EAAE,CAAC,cAAc,EAAE;gBACnB,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC,WAAW,QAAQ,4DAA4D,CAAC,CAAC;gBACtF,SAAS;YACX,CAAC;YACD,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,4BAA4B,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,OAAO,CAAC,GAAG,CACT,cAAc,MAAM,CAAC,aAAa,8BAA8B,MAAM,CAAC,WAAW,yBAAyB,MAAM,CAAC,WAAW,2BAA2B,CACzJ,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,IAAoB;IACrC,OAAO,CAAC,GAAG,CAAC,2CAA2C,iBAAiB,GAAG,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,kDAAkD,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,sEAAsE,CACnK,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/doctor.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Unit tests for `hq sync doctor` (US-003,
+ * hq-sync-windows-skill-symlink-collision): skill-key family dedupe in the
+ * vault + junk-wrapper GC in the local `.claude/skills/` farm.
+ *
+ * The object store is dependency-injected (`SyncDoctorOptions.store`) with an
+ * in-memory fake, so no test touches a network or a real vault. Local-farm
+ * cases run against a mkdtemp root with real symlinks (the same approach as
+ * s3.symlink-materialize.test.ts) and pin win32 naming via the injectable
+ * `win32` option rather than the host platform.
+ */
+export {};
+//# sourceMappingURL=doctor.test.d.ts.map

package/dist/cli/doctor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.test.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}