@kaynooo/cli-doctor 0.6.0 → 0.8.0

package/README.md

@@ -10,16 +10,23 @@ doctor -q        # only the failing checks, nothing when all pass
 doctor --only tea --only bun    # just these checks (a package such as cli-forgejo, tea, hooks, bun, completions)
 doctor --fix --dry-run          # what --fix would run
 doctor --fix     # run the fixes, then check again
+doctor --install # pick the packages to add from a checklist
+doctor --install forgejo check hooks   # or name them: a package, one of its bins, hooks, all
 ```
 
 | Check | Passes when | Fix |
 | --- | --- | --- |
 | each `@kaynooo/cli-*` package | it is installed globally, its bins are on the PATH and it is no older than the version `bun info` serves | `bun install -g <package>@<latest>`, and one line installing every outdated package at once |
-| `tea` | tea is installed, logged in to git.kaynooo.fr and `tea api version` answers, since `ft` goes through it | `tea login add --url https://git.kaynooo.fr --oauth` |
+| `needs` | the system tools the installed packages need are on the PATH: glab for `gl`, docker for `dc`, `dlog`, `dx` and `sf` | install them by hand, doctor never installs a system package |
+| `tea` | `ft` is installed, tea is installed, logged in to git.kaynooo.fr and `tea api version` answers, since `ft` goes through it | `tea login add --url https://git.kaynooo.fr --oauth` |
 | `hooks` | `~/.claude/settings.json` wires the hooks one way: the `cli-hooks@kaynooo-cli` plugin enabled, or the `cli` mod listed in `CLAUDE_CODE_PLUGIN_DIRS`; both at once fails, every call being checked twice | `claude plugin install cli-hooks --marketplace ...`, or `claude plugin disable` for the doubled one |
 | `bun` | Bun satisfies the `engines.bun` range of every installed package | `bun upgrade` |
 
-A registry that does not answer leaves a package passing, with a note. Exit codes: 0 every check passed, 1 one failed, 2 a usage error.
+Only the packages that are installed are checked: a package left out is no failure, and the last line counts them. A registry that does not answer leaves a package passing, with a note. Exit codes: 0 every check passed, 1 one failed, 2 a usage error.
+
+## --install
+
+`--install` adds packages: the names given (a package such as `forgejo`, one of its bins such as `ft`, `hooks` for the Claude Code plugin, or `all`), else a checklist on a terminal that shows each package's bins, what it does and what it needs. Off a terminal, names are required. Before installing, each package is checked against its needs: a missing required tool (tea for `ft`, glab for `gl`, docker for `dc`) leaves the package out unless `--force`, and `hooks` installs `guard` first. The installs run in one `bun install -g`, then the plugin, then the checks and fixes of what was installed. `--list` prints the choices and `--dry-run` what would run. Exits 1 when a package was left out.
 
 ## --fix
 

package/dist/cli-bin.js

@@ -2,7 +2,7 @@
 // @bun
 
 // src/cli-bin.ts
-import process12 from "process";
+import process15 from "process";
 // ../kit/src/args.ts
 import process5 from "process";
 import { parseArgs } from "util";
@@ -274,6 +274,11 @@ function le(i = {}) {
 }
 var t = le();
 
+// ../kit/src/theme.ts
+var STYLES = new Set(["bold", "dim", "italic", "underline", "inverse", "strikethrough", "black", "red", "green", "yellow", "blue", "magenta", "cyan", "white", "gray", "grey", "blackBright", "redBright", "greenBright", "yellowBright", "blueBright", "magentaBright", "cyanBright", "whiteBright"]);
+var MAX_FILE_BYTES = 64 * 1024;
+var warned = new Set;
+
 // ../kit/src/style.ts
 function takesControlCodes(stream, env = process2.env) {
   return stream.isTTY === true && env.NO_COLOR === undefined && env.NODE_DISABLE_COLORS === undefined && env.TERM !== "dumb";
@@ -281,14 +286,14 @@ function takesControlCodes(stream, env = process2.env) {
 function paint(stream, env = process2.env) {
   return le({ stream: { isTTY: takesControlCodes(stream, env) }, env });
 }
-var STATUSES = {
-  passed: { symbol: "\u2713", words: ["passed", "success", "succeeded", "ok"], paint: (colors) => colors.green },
-  failed: { symbol: "\u2717", words: ["failed", "failure", "error", "errored"], paint: (colors) => colors.red },
-  running: { symbol: "\u25CF", words: ["running", "in_progress", "started"], paint: (colors) => colors.cyan },
-  queued: { symbol: "\u25CB", words: ["queued", "waiting", "pending", "created", "blocked", "scheduled"], paint: (colors) => colors.yellow },
-  skipped: { symbol: "-", words: ["skipped", "cancelled", "canceled", "manual"], paint: (colors) => colors.dim }
+var STATUS_WORDS = {
+  passed: ["passed", "success", "succeeded", "ok"],
+  failed: ["failed", "failure", "error", "errored"],
+  running: ["running", "in_progress", "started"],
+  queued: ["queued", "waiting", "pending", "created", "blocked", "scheduled"],
+  skipped: ["skipped", "cancelled", "canceled", "manual"]
 };
-var STATUS_OF = new Map(Object.entries(STATUSES).flatMap(([status, { words }]) => words.map((word) => [word, status])));
+var STATUS_OF = new Map(Object.entries(STATUS_WORDS).flatMap(([status, words]) => words.map((word) => [word, status])));
 
 // ../kit/src/format.ts
 function upTo(text, separator) {
@@ -303,7 +308,7 @@ var ESCAPE = String.fromCharCode(27);
 function textWidth(text) {
   return Bun.stringWidth(text);
 }
-function table(rows, { cellWidth, header = false, align = [], fit } = {}) {
+function table(rows, { cellWidth, header = false, align = [], fit, stream = process3.stdout } = {}) {
   const cells = cellWidth === undefined ? rows : rows.map((row) => row.map((cell) => truncate(cell.replaceAll(LINE_BREAKS, " "), cellWidth)));
   const widths = [];
   for (const row of cells) {
@@ -311,7 +316,7 @@ function table(rows, { cellWidth, header = false, align = [], fit } = {}) {
       widths[index] = Math.max(widths[index] ?? 0, textWidth(cell));
   }
   const shown = fit === undefined ? cells : narrow(cells, widths, fit);
-  const colors = paint(process3.stdout);
+  const colors = paint(stream);
   const lines = shown.map((row) => row.map((cell, index) => {
     const width = widths[index] ?? 0;
     const gap = " ".repeat(Math.max(0, width - textWidth(cell)));
@@ -319,7 +324,8 @@ function table(rows, { cellWidth, header = false, align = [], fit } = {}) {
       return `${gap}${cell}`;
     return index === row.length - 1 ? cell : `${cell}${gap}`;
   }).join("  ").trimEnd());
-  return lines.map((line, index) => header && index === 0 ? colors.bold(line) : line).join(`
+  const rule = header && takesControlCodes(stream) && lines.length > 1 ? [colors.dim("\u2500".repeat(Math.max(...lines.map(textWidth))))] : [];
+  return lines.flatMap((line, index) => header && index === 0 ? [colors.bold(line), ...rule] : [line]).join(`
 `);
 }
 function narrow(rows, widths, limit) {
@@ -446,6 +452,10 @@ class Exit extends Error {
     this.hint = hint;
   }
 }
+function fail(message, code = 2, hint) {
+  throw new Exit(message, code, hint);
+}
+
 class UsageError extends Exit {
   constructor(message, hint) {
     super(message, 2, hint);
@@ -1159,12 +1169,46 @@ import process10 from "process";
 // src/checks.ts
 import { existsSync, readFileSync as readFileSync2 } from "fs";
 import { basename, join as join3 } from "path";
+
+// src/catalog.ts
+var HOOKS_REQUIRES = "@kaynooo/cli-guard";
+var ABOUT = {
+  "@kaynooo/cli-base": "run a command at a ref in a throwaway worktree, and prove a test fails before a change",
+  "@kaynooo/cli-changelog": "release notes from conventional commits, published as a Forgejo release",
+  "@kaynooo/cli-check": "the repo's check, lint and test steps, its fixers, error lines from logs and a recipe picker",
+  "@kaynooo/cli-code": "source read by spans, TODO comments and the files worth splitting",
+  "@kaynooo/cli-db": "read-only SQL against Postgres, MySQL and MariaDB, credentials never shown",
+  "@kaynooo/cli-dev": "passwords, JWTs, timestamps, UUIDs, base64 and file hashes",
+  "@kaynooo/cli-docker": "docker compose on the stack found here, service health, shells and Symfony commands",
+  "@kaynooo/cli-doctor": "this install check, and the list of every bin",
+  "@kaynooo/cli-edit": "replace text in files, writing nothing unless every match count is right",
+  "@kaynooo/cli-env": ".env files listed and edited with secrets masked, and a secrets filter for pipes",
+  "@kaynooo/cli-forgejo": "Forgejo CI runs, logs, releases and issue checklists",
+  "@kaynooo/cli-git": "repository state in one line, commits of exact paths, a branch picker",
+  "@kaynooo/cli-gitlab": "GitLab pipelines and their failed tests",
+  "@kaynooo/cli-guard": "the safety rules a Claude Code Bash call is held to",
+  "@kaynooo/cli-out": "shortens a noisy command's output, keeping the errors",
+  "@kaynooo/cli-pick": "a fuzzy selector for pipes",
+  "@kaynooo/cli-pkg": "vets npm packages before they are added, and bumps a lib in its consumers",
+  "@kaynooo/cli-probe": "a site's HTTP version, redirects, timings and TLS",
+  "@kaynooo/cli-proc": "what a process is, who listens on a port, leftover dev processes",
+  "@kaynooo/cli-stack": "a stable port per service name, and a compose release audit",
+  "@kaynooo/cli-view": "markdown, source and git diffs in the colours of the other bins",
+  "@kaynooo/cli-wait": "wait for a line, a port, a URL or a process; a machine-wide slot for heavy jobs",
+  "@kaynooo/cli-workspace": "the repositories under a root needing attention, reclaimable folders and known vulnerabilities"
+};
+var NEEDS = {
+  "@kaynooo/cli-forgejo": [{ bin: "tea", why: "ft goes through it", how: "https://gitea.com/gitea/tea/releases" }],
+  "@kaynooo/cli-gitlab": [{ bin: "glab", why: "gl goes through it", how: "https://gitlab.com/gitlab-org/cli" }],
+  "@kaynooo/cli-docker": [{ bin: "docker", why: "dc, dlog, dx and sf run docker compose", how: "https://docs.docker.com/engine/install/" }]
+};
+
+// src/checks.ts
 var TOOLS = {
-  "@kaynooo/cli-audit": ["audit"],
   "@kaynooo/cli-base": ["base", "proof"],
   "@kaynooo/cli-changelog": ["changelog"],
   "@kaynooo/cli-check": ["check", "fix", "errs", "j"],
-  "@kaynooo/cli-code": ["peek", "todo-scan", "hotspots"],
+  "@kaynooo/cli-code": ["src", "peek", "todo-scan", "hotspots"],
   "@kaynooo/cli-db": ["db"],
   "@kaynooo/cli-docker": ["dc", "dlog", "dx", "sf"],
   "@kaynooo/cli-doctor": ["doctor", "cli"],
@@ -1179,12 +1223,11 @@ var TOOLS = {
   "@kaynooo/cli-pick": ["pick"],
   "@kaynooo/cli-pkg": ["pkg"],
   "@kaynooo/cli-probe": ["probe"],
-  "@kaynooo/cli-proc": ["pid", "ports", "procs"],
-  "@kaynooo/cli-repos": ["repos"],
+  "@kaynooo/cli-proc": ["proc", "pid", "ports", "procs"],
   "@kaynooo/cli-stack": ["stack"],
-  "@kaynooo/cli-sweep": ["sweep"],
   "@kaynooo/cli-view": ["view"],
-  "@kaynooo/cli-wait": ["waitfor", "slot"]
+  "@kaynooo/cli-wait": ["waitfor", "slot"],
+  "@kaynooo/cli-workspace": ["ws", "repos", "sweep", "audit"]
 };
 var FORGE = "git.kaynooo.fr";
 var FORGE_HOSTS = new Set([FORGE, "git.kevyn.fr"]);
@@ -1212,6 +1255,9 @@ function firstLine(text) {
 function installed(host, name) {
   return readJson(join3(host.globalModules, name, "package.json"));
 }
+function isInstalled(host, name) {
+  return installed(host, name)?.version !== undefined;
+}
 function ownBin(host, name, bin) {
   const declared = installed(host, name)?.bin;
   const file = typeof declared === "string" ? declared : declared?.[bin];
@@ -1250,10 +1296,16 @@ async function checkTea(host) {
     return { check: "tea", ok: false, detail: `${forge} did not answer: ${firstLine(version.stderr || version.stdout)}`, fix: `tea login edit ${login.name} --token <token>, or check the network` };
   return { check: "tea", ok: true, detail: `logged in to ${forge} as ${login.name}, Forgejo ${served}` };
 }
-function checkHooks(host) {
+function hooksWiring(host) {
   const settings = readJson(join3(host.home, ".claude", "settings.json")) ?? {};
   const plugin = settings.enabledPlugins?.[PLUGIN] === true;
   const mod = (settings.env?.CLAUDE_CODE_PLUGIN_DIRS ?? "").split(":").map((dir) => dir.replace(LEADING_TILDE, host.home)).find((dir) => basename(dir) === "cli" && existsSync(join3(dir, "hooks", "hooks.json")));
+  return { plugin, mod };
+}
+function checkHooks(host) {
+  const { plugin, mod } = hooksWiring(host);
+  if ((plugin || mod !== undefined) && !isInstalled(host, HOOKS_REQUIRES))
+    return { check: "hooks", ok: false, detail: `wired, but ${HOOKS_REQUIRES} is not installed, so every hook finds no guard`, fix: `bun install -g ${HOOKS_REQUIRES}` };
   if (plugin && mod !== undefined)
     return { check: "hooks", ok: false, detail: `both the ${PLUGIN} plugin and the mod in ${mod} run guard, so every call is checked twice`, fix: `claude plugin disable ${PLUGIN}` };
   if (plugin)
@@ -1278,19 +1330,29 @@ function checkCompletions(host) {
     return { check: "completions", ok: false, detail: `no fish completion in ${dir} for ${missing.join(", ")}`, fix: "cli completions fish --install" };
   return { check: "completions", ok: true, detail: dir };
 }
+function checkNeeds(host) {
+  const missing = Object.entries(NEEDS).flatMap(([name, needs]) => isInstalled(host, name) ? needs.filter((need) => need.bin !== "tea" && host.which(need.bin) === null) : []);
+  if (missing.length > 0)
+    return { check: "needs", ok: false, detail: `missing ${missing.map((need) => `${need.bin} (${need.why})`).join(", ")}`, fix: `install ${missing.map((need) => `${need.bin}: ${need.how}`).join("; ")}` };
+  return { check: "needs", ok: true, detail: "every tool the installed packages need is on the PATH" };
+}
 var toolCheck = (name) => name.slice(name.indexOf("/") + 1);
-var OTHER_CHECKS = ["tea", "hooks", "bun", "completions"];
+var OTHER_CHECKS = ["tea", "hooks", "needs", "bun", "completions"];
+var FORGEJO = "@kaynooo/cli-forgejo";
 var CHECK_NAMES = [...Object.keys(TOOLS).map(toolCheck), ...OTHER_CHECKS];
 async function runChecks(host, only = []) {
   const wanted = (check) => only.length === 0 || only.includes(check);
-  const entries = Object.entries(TOOLS).filter(([name]) => wanted(toolCheck(name)));
+  const entries = Object.entries(TOOLS).filter(([name]) => only.length === 0 ? isInstalled(host, name) : wanted(toolCheck(name)));
+  const { plugin, mod } = hooksWiring(host);
+  const hooks = only.length > 0 || plugin || mod !== undefined || isInstalled(host, HOOKS_REQUIRES);
   const tools = [];
   for (let at = 0;at < entries.length; at += INFO_AT_ONCE)
     tools.push(...await Promise.all(entries.slice(at, at + INFO_AT_ONCE).map(async ([name, bins]) => checkTool(host, name, bins))));
   return [
     ...tools,
-    ...wanted("tea") ? [await checkTea(host)] : [],
-    ...wanted("hooks") ? [checkHooks(host)] : [],
+    ...wanted("tea") && (only.length > 0 || isInstalled(host, FORGEJO)) ? [await checkTea(host)] : [],
+    ...wanted("hooks") && hooks ? [checkHooks(host)] : [],
+    ...wanted("needs") ? [checkNeeds(host)] : [],
     ...wanted("bun") ? [checkBun(host)] : [],
     ...wanted("completions") ? [checkCompletions(host)] : []
   ];
@@ -1355,6 +1417,46 @@ function missingCompletions(host, dir) {
   return installedBins(host).filter((bin) => !existsSync2(join4(dir, `${bin}.fish`)));
 }
 
+// src/doctor.ts
+import process14 from "process";
+
+// src/fix.ts
+var INSTALL = /^bun install -g (\S+)$/;
+var RUNNABLE = /^(?:cli completions fish --install|claude plugin (?:install \S+ --marketplace \S+|disable \S+))$/;
+function planFixes(results) {
+  const steps = [];
+  const installs = [];
+  for (const { ok, fix } of results) {
+    if (ok || fix === undefined)
+      continue;
+    const install = INSTALL.exec(fix);
+    if (install !== null)
+      installs.push(install[1] ?? "");
+    else
+      steps.push({ command: fix, argv: RUNNABLE.test(fix) ? fix.split(" ") : undefined });
+  }
+  if (installs.length === 0)
+    return steps;
+  const command = `bun install -g ${installs.join(" ")}`;
+  return [{ command, argv: command.split(" ") }, ...steps];
+}
+async function applyFixes(host, steps, dry) {
+  const outcomes = [];
+  for (const { command, argv } of steps) {
+    if (argv === undefined) {
+      outcomes.push({ command, status: "not run", detail: "not a command doctor runs: do it by hand" });
+      continue;
+    }
+    if (dry) {
+      outcomes.push({ command, status: "dry-run" });
+      continue;
+    }
+    const ran = await host.run(argv);
+    outcomes.push(ran.code === 0 ? { command, status: "ran" } : { command, status: "failed", detail: `exit ${ran.code}: ${firstLine(ran.stderr || ran.stdout)}` });
+  }
+  return outcomes;
+}
+
 // src/host.ts
 import { homedir as homedir2 } from "os";
 import { join as join5 } from "path";
@@ -1377,6 +1479,356 @@ function hostHere() {
   };
 }
 
+// src/install.ts
+import process13 from "process";
+
+// ../kit/src/prompt.ts
+import process12 from "process";
+var KEY_SEQUENCES = /\x1B\[[0-9;]*[A-Z~]|\x1BO[A-Z]|[\s\S]/giu;
+var CONTROL = /^[\x00-\x1F\x7F]/;
+var WORDS = /\s+/;
+var MAX_ROWS = 10;
+var KEYS = { "\x1B[A": "up", "\x1BOA": "up", "\x1B[B": "down", "\x1BOB": "down", "\r": "enter", "\n": "enter", "\x03": "cancel", "\x1B": "cancel", "\x7F": "erase", "\b": "erase" };
+function readKeys(input) {
+  return (input.match(KEY_SEQUENCES) ?? []).flatMap((sequence) => KEYS[sequence] ?? (CONTROL.test(sequence) ? [] : [{ text: sequence }]));
+}
+function flip(checked, value) {
+  const next = new Set(checked);
+  if (!next.delete(value))
+    next.add(value);
+  return next;
+}
+async function checklist(question, choices, { initial = new Set, min = 0, toggle = flip, ...settings } = {}) {
+  const list = new List(choices, 0);
+  let checked = initial;
+  let invalid;
+  const accepted = await ask(question, settings, (colors, state, rows) => state === "asking" ? [asking(colors, question, list.query, "type to filter, space toggles, enter accepts"), ...list.rows(colors, rows, (choice) => checked.has(choice.value) ? `${colors.cyan("\u25C9")} ` : `${colors.dim("\u25EF")} `), ...invalid === undefined ? [] : [`  ${colors.red(invalid)}`]] : [answer(colors, question, state, choices.filter((choice) => checked.has(choice.value)).map((choice) => choice.label).join(", ") || "none")], (key) => {
+    if (key === "cancel")
+      return key;
+    invalid = undefined;
+    if (key === "enter") {
+      invalid = checked.size < min ? `pick at least ${min}` : undefined;
+      return invalid === undefined ? "enter" : undefined;
+    }
+    const current = list.current();
+    if (typeof key === "object" && key.text === " ") {
+      if (current !== undefined)
+        checked = toggle(checked, current.value);
+      return;
+    }
+    list.press(key);
+    return;
+  });
+  return accepted ? checked : undefined;
+}
+class List {
+  choices;
+  query = "";
+  matches;
+  cursor;
+  top = 0;
+  width;
+  constructor(choices, initial) {
+    this.choices = choices;
+    this.matches = choices;
+    this.cursor = Math.min(Math.max(initial, 0), choices.length - 1);
+    this.width = Math.max(0, ...choices.map((choice) => choice.label.length));
+  }
+  current() {
+    return this.matches[this.cursor];
+  }
+  press(key) {
+    if (key === "up" || key === "down") {
+      if (this.matches.length > 0)
+        this.cursor = (this.cursor + (key === "up" ? this.matches.length - 1 : 1)) % this.matches.length;
+      return;
+    }
+    if (key === "erase")
+      this.filter([...this.query].slice(0, -1).join(""));
+    else if (typeof key === "object")
+      this.filter(this.query + key.text);
+  }
+  filter(query) {
+    const words = query.toLowerCase().split(WORDS).filter((word) => word !== "");
+    const current = this.current();
+    this.query = query;
+    this.matches = this.choices.filter(({ label, hint }) => words.every((word) => `${label} ${hint}`.toLowerCase().includes(word)));
+    this.cursor = current === undefined ? 0 : Math.max(this.matches.indexOf(current), 0);
+    this.top = 0;
+  }
+  rows(colors, { columns, rows }, marker) {
+    if (this.matches.length === 0)
+      return [colors.dim("  no match")];
+    const height = Math.max(1, Math.min(MAX_ROWS, rows - 3, this.matches.length));
+    this.top = Math.min(Math.max(this.top, this.cursor - height + 1), this.cursor);
+    const shown = this.matches.slice(this.top, this.top + height).map((choice, index) => {
+      const here = this.top + index === this.cursor;
+      const mark = marker(choice);
+      const head = `${here ? "\u276F" : " "} ${mark}`;
+      const label = choice.label.padEnd(this.width);
+      const room = columns - 5 - (mark === "" ? 0 : 2) - this.width;
+      return `${here ? colors.cyan(head) : head}${here ? colors.cyan(label) : label}  ${colors.dim(truncate(choice.hint, Math.max(room, 0)))}`;
+    });
+    const below = this.matches.length - this.top - height;
+    return [...this.top > 0 ? [colors.dim(`  \u2026 ${this.top} more`)] : [], ...shown, ...below > 0 ? [colors.dim(`  \u2026 ${below} more`)] : []];
+  }
+}
+function asking(colors, question, typed, keys) {
+  return `${colors.cyan("?")} ${question} ${typed === "" ? colors.dim(`(${keys})`) : typed}`;
+}
+function answer(colors, question, state, picked) {
+  return state === "enter" ? `${colors.green("\u2713")} ${question} ${colors.cyan(picked)}` : `${colors.red("\u2717")} ${question} ${colors.dim("cancelled")}`;
+}
+async function ask(question, { hint, terminal = process12 }, render, press) {
+  const { stdin, stderr } = terminal;
+  if (stdin.isTTY !== true || stderr.isTTY !== true)
+    fail(`cannot ask "${question}" off a terminal`, 2, hint);
+  const colors = paint(stderr);
+  let drawn = 0;
+  let outcome;
+  const draw = (state) => {
+    const frame = render(colors, state, { columns: stderr.columns || 80, rows: stderr.rows || 24 });
+    stderr.write(`${drawn > 1 ? `\x1B[${drawn - 1}A` : ""}\r\x1B[0J${frame.join(`
+`)}`);
+    drawn = frame.length;
+  };
+  try {
+    stdin.setRawMode(true);
+    stdin.resume();
+    stderr.write("\x1B[?25l");
+    draw("asking");
+    return await new Promise((resolve) => {
+      function onData(data) {
+        for (const key of readKeys(data.toString())) {
+          const pressed = press(key);
+          if (pressed !== undefined) {
+            settle(pressed);
+            return;
+          }
+        }
+        draw("asking");
+      }
+      function onEnd() {
+        settle("cancel");
+      }
+      function settle(settled) {
+        outcome = settled;
+        stdin.off("data", onData);
+        stdin.off("end", onEnd);
+        resolve(settled === "enter");
+      }
+      stdin.on("data", onData);
+      stdin.on("end", onEnd);
+    });
+  } finally {
+    draw(outcome ?? "cancel");
+    stderr.write(`
+\x1B[?25h`);
+    stdin.setRawMode(false);
+    stdin.pause();
+  }
+}
+
+// src/install.ts
+var HOOKS = "hooks";
+var PLUGIN_INSTALL = ["claude", "plugin", "install", "cli-hooks", "--marketplace", `https://${FORGE}/kaynooo/cli.git`];
+var CLI_PREFIX = /^cli-/;
+var shortName = (name) => name.slice(name.indexOf("/") + 1).replace(CLI_PREFIX, "");
+function candidates2(host) {
+  const packages = Object.entries(TOOLS).filter(([name]) => !isInstalled(host, name)).map(([name, bins]) => {
+    const needs = (NEEDS[name] ?? []).map((need) => need.bin);
+    return { id: name, names: [shortName(name), name, `cli-${shortName(name)}`, ...bins], label: shortName(name), hint: `${bins.join(" ")}: ${ABOUT[name] ?? ""}${needs.length === 0 ? "" : `, needs ${needs.join(", ")}`}`, packages: [name] };
+  });
+  const { plugin, mod } = hooksWiring(host);
+  if (plugin || mod !== undefined)
+    return packages;
+  return [...packages, { id: HOOKS, names: [HOOKS, "plugin", "cli-hooks"], label: "hooks", hint: `the Claude Code plugin running guard on every tool call, needs ${HOOKS_REQUIRES}`, packages: isInstalled(host, HOOKS_REQUIRES) ? [] : [HOOKS_REQUIRES] }];
+}
+function choose(pool, names) {
+  const chosen = new Set;
+  for (const name of names) {
+    if (name === "all") {
+      for (const each of pool)
+        chosen.add(each);
+      continue;
+    }
+    const found = pool.find((each) => each.names.includes(name));
+    if (found !== undefined)
+      chosen.add(found);
+  }
+  return [...chosen];
+}
+function plan(host, picked, force) {
+  const blocked = [];
+  const warnings = [];
+  const packages = [];
+  for (const name of new Set(picked.flatMap((each) => each.packages))) {
+    const lacking = (NEEDS[name] ?? []).filter((need) => host.which(need.bin) === null);
+    if (lacking.length > 0 && !force) {
+      for (const need of lacking)
+        blocked.push({ package: shortName(name), need: need.bin, why: need.why, how: need.how });
+      continue;
+    }
+    for (const need of lacking)
+      warnings.push({ package: shortName(name), need: need.bin, why: need.why });
+    packages.push(name);
+  }
+  const guardBlocked = blocked.some((each) => `@kaynooo/cli-${each.package}` === HOOKS_REQUIRES);
+  return { packages, plugin: picked.some((each) => each.id === HOOKS) && !guardBlocked, blocked, warnings };
+}
+function checksFor(packages, plugin) {
+  return [...packages.map((name) => name.slice(name.indexOf("/") + 1)), ...plugin ? ["hooks"] : [], "needs", "completions", ...packages.includes("@kaynooo/cli-forgejo") ? ["tea"] : []];
+}
+async function ask2(pool) {
+  if (process13.stdin.isTTY !== true || process13.stderr.isTTY !== true)
+    badUsage("name what to install, or all: doctor --install forgejo check hooks (doctor --install --list shows the choices)");
+  const choices = pool.map((each) => ({ value: each, label: each.label, hint: each.hint }));
+  const picked = await checklist("install which?", choices, { hint: "name them instead: doctor --install forgejo check" });
+  return picked === undefined ? [] : [...picked];
+}
+async function install(host, options, recheck) {
+  const pool = candidates2(host);
+  const { dim, green, red, yellow } = paint(process13.stdout);
+  if (options.list) {
+    for (const each of pool)
+      console.log(`${each.label.padEnd(12)} ${dim(each.hint)}`);
+    if (pool.length === 0)
+      console.log("everything is installed");
+    return 0;
+  }
+  if (pool.length === 0) {
+    console.log("everything is installed");
+    return 0;
+  }
+  const unknown = options.names.filter((name) => name !== "all" && !Object.values(candidatesAll(host)).some((each) => each.names.includes(name)));
+  if (unknown.length > 0)
+    badUsage(`nothing to install is named ${unknown.join(", ")}: doctor --install --list`);
+  const picked = options.names.length === 0 ? await ask2(pool) : choose(pool, options.names);
+  const skipped = options.names.filter((name) => name !== "all" && !pool.some((each) => each.names.includes(name)));
+  for (const name of skipped)
+    console.log(`${dim("already")}  ${name} is installed`);
+  if (picked.length === 0) {
+    if (skipped.length === 0)
+      console.log("nothing picked");
+    return 0;
+  }
+  const planned = plan(host, picked, options.force);
+  for (const each of planned.blocked)
+    console.log(`${red("blocked")}  ${each.package} needs ${each.need} (${each.why}): ${each.how}; --force installs it anyway`);
+  for (const each of planned.warnings)
+    console.log(`${yellow("warn   ")}  ${each.package}: ${each.need} is missing, ${each.why}`);
+  if (planned.packages.length === 0 && !planned.plugin)
+    return 1;
+  const command = ["bun", "install", "-g", ...planned.packages];
+  if (planned.packages.length > 0)
+    console.log(`${options.dryRun ? dim("would  ") : green("install")}  ${command.join(" ")}`);
+  if (planned.plugin)
+    console.log(`${options.dryRun ? dim("would  ") : green("install")}  ${PLUGIN_INSTALL.join(" ")}`);
+  if (options.dryRun)
+    return planned.blocked.length > 0 ? 1 : 0;
+  if (planned.packages.length > 0) {
+    const ran = await host.run(command);
+    if (ran.code !== 0) {
+      console.error(`${red("failed")}   bun install -g: exit ${ran.code}: ${firstLine(ran.stderr || ran.stdout)}`);
+      return 1;
+    }
+  }
+  if (planned.plugin) {
+    if (host.which("claude") === null) {
+      console.log(`${dim("not run")}  claude is not on the PATH: ${PLUGIN_INSTALL.join(" ")}`);
+    } else {
+      const ran = await host.run(PLUGIN_INSTALL);
+      if (ran.code !== 0)
+        console.error(`${red("failed")}   ${PLUGIN_INSTALL.join(" ")}: exit ${ran.code}: ${firstLine(ran.stderr || ran.stdout)}`);
+    }
+  }
+  console.log(`
+after the install:`);
+  const code = await recheck(checksFor(planned.packages, planned.plugin));
+  return planned.blocked.length > 0 ? 1 : code;
+}
+function candidatesAll(host) {
+  const open = candidates2(host);
+  const done = Object.entries(TOOLS).filter(([name]) => isInstalled(host, name)).map(([name, bins]) => ({ id: name, names: [shortName(name), name, `cli-${shortName(name)}`, ...bins], label: shortName(name), hint: "", packages: [name] }));
+  return [...open, ...done];
+}
+
+// src/doctor.ts
+var USAGE = `doctor [--only <check>] [--quiet] [--fix | --install [<name>...|all]] [--list] [--dry-run] [--force] [--json]: checks this host's @kaynooo/cli-* install, one line per check, the command that fixes a failing one beside it, and installs the packages it picks
+
+Each @kaynooo/cli-* package installed globally with its bins on the PATH and no older than the registry's latest; tea logged in to git.kaynooo.fr and reaching it when ft is installed; the system tools the installed packages need (glab, docker); the Claude Code hooks wired through the cli-hooks plugin or the cli mod, not both, with guard installed; Bun at least the version the tools ask for; fish completions for every bin. A package not installed is no failure, the last line counts them.
+--fix runs the printed fix: lines it may (global installs of the packages, the completions, the hooks plugin), the installs in one call, then checks again; a line that installs a system package or only describes a step is printed as not run. --dry-run shows what --fix would run.
+--install adds packages: the names given (a package such as forgejo, one of its bins such as ft, hooks for the Claude Code plugin, or all), else a checklist on a terminal. Each is checked against what it needs first: a missing required tool (tea for ft, glab for gl, docker for dc) leaves that package out unless --force, and hooks brings guard along. doctor never installs a system package. Then it checks and fixes what it installed. --list prints the choices, --dry-run what would be installed.
+--quiet prints only the failing checks, nothing when all pass. --only limits the run to the checks named, e.g. --only tea --only bun.`;
+var EXITS = [[0, "every check passes (after --fix, the ones it fixed too)"], [1, "a check fails"], [2, "a usage error"]];
+var INSTALL2 = "bun install -g ";
+var OPTIONS = {
+  json: jsonOption("[{check, ok, detail, fix?}], as the checks stand after --fix; the fixes it ran go to stderr"),
+  only: { type: "string", multiple: true, choices: CHECK_NAMES, description: "run only this check (a package such as cli-forgejo, tea, hooks, bun or completions), repeatable" },
+  quiet: { type: "boolean", short: "q", description: "print only the failing checks" },
+  fix: { type: "boolean", description: "run the fix: lines doctor may run, then check again" },
+  "dry-run": { type: "boolean", description: "with --fix or --install, show what would run without running it (alone, it implies --fix)" },
+  install: { type: "boolean", description: "install the packages named, or picked from a checklist: forgejo, ft, hooks, all" },
+  list: { type: "boolean", description: "with --install, print the choices" },
+  force: { type: "boolean", description: "with --install, install a package even though a tool it requires is missing" }
+};
+function print(results) {
+  if (results.length === 0)
+    return;
+  const { green, red, dim } = paint(process14.stdout);
+  const width = Math.max(...results.map((result) => result.check.length));
+  for (const { check, ok, detail, fix } of results)
+    console.log(`${ok ? green("ok  ") : red("FAIL")}  ${check.padEnd(width)}  ${detail}${fix === undefined ? "" : `  ${dim("fix:")} ${fix}`}`);
+  const installs = results.flatMap((result) => result.fix?.startsWith(INSTALL2) === true ? [result.fix.slice(INSTALL2.length)] : []);
+  if (installs.length > 1)
+    console.log(`
+${dim("fix them all:")} ${INSTALL2}${installs.join(" ")}`);
+}
+function printOutcomes(outcomes, log) {
+  const { green, red, dim } = paint(process14.stdout);
+  const marks = { ran: green("ran    "), failed: red("failed "), "dry-run": dim("would  "), "not run": dim("not run") };
+  for (const { command, status, detail } of outcomes)
+    log(`${marks[status]}  ${command}${detail === undefined ? "" : `  ${dim(detail)}`}`);
+}
+async function main(args, host = hostHere()) {
+  const { values, positionals } = parse(args, USAGE, OPTIONS, { positionals: ["[name...]"], exits: EXITS, replaces: "checking each bin's version, tea's login and the hooks by hand", examples: ["doctor", ["doctor --json", "the checks for a script"], ["doctor -q", "silent unless something fails"], ["doctor --fix --dry-run", "what --fix would run"], ["doctor --install", "pick the packages to add"], ["doctor --install forgejo check hooks", "three named ones"], ["doctor --install all --dry-run", "what installing everything would run"]] });
+  const only = values.only ?? [];
+  if (values.install !== true && (positionals.length > 0 || values.list === true || values.force === true))
+    badUsage("names, --list and --force go with --install");
+  if (values.install === true) {
+    if (values.fix === true || only.length > 0 || values.json === true || values.quiet === true)
+      badUsage("--install does not combine with --fix, --only, --json or --quiet");
+    return install(host, { names: positionals, list: values.list === true, dryRun: values["dry-run"] === true, force: values.force === true }, async (checks) => main(["--fix", ...checks.flatMap((check) => ["--only", check])], host));
+  }
+  const dry = values["dry-run"] === true;
+  const json = values.json === true;
+  let results = await runChecks(host, only);
+  let fixed = false;
+  if ((values.fix === true || dry) && results.some((result) => !result.ok)) {
+    if (!json)
+      print(values.quiet === true ? results.filter((result) => !result.ok) : results);
+    const steps = planFixes(results);
+    printOutcomes(await applyFixes(host, steps, dry), json ? console.error : console.log);
+    if (dry)
+      return 1;
+    results = await runChecks(host, only);
+    fixed = true;
+  }
+  const shown = values.quiet === true ? results.filter((result) => !result.ok) : results;
+  if (fixed && !json && shown.length > 0)
+    console.log(`
+after the fixes:`);
+  if (json)
+    printJson(shown);
+  else
+    print(shown);
+  const absent = Object.keys(TOOLS).filter((name) => !isInstalled(host, name)).length;
+  if (!json && only.length === 0 && absent > 0)
+    console.log(`
+${paint(process14.stdout).dim(`${absent} packages not installed: doctor --install`)}`);
+  return results.every((result) => result.ok) ? 0 : 1;
+}
+
 // src/list.ts
 var USAGE_WORD = /^Usage:\s*/;
 async function describeBin(host, bin, name) {
@@ -1401,8 +1853,8 @@ Exits 0 when it printed the list, 2 on a usage error.`;
 var LIST_OPTIONS = {
   json: jsonOption("[{bin, package, installed, synopsis?, summary?, replaces?, examples?}]")
 };
-function print(listed) {
-  const { cyan, dim } = paint(process12.stdout);
+function print2(listed) {
+  const { cyan, dim } = paint(process15.stdout);
   const width = Math.max(...listed.map((each) => each.bin.length));
   for (const each of listed) {
     const what = !each.installed ? dim(`not installed: bun install -g ${each.package}`) : `${each.summary ?? ""}${each.replaces === undefined ? "" : dim(`; instead of ${each.replaces}`)}`;
@@ -1415,7 +1867,7 @@ async function list(args, host = hostHere()) {
   if (values.json === true)
     printJson(listed);
   else
-    print(listed);
+    print2(listed);
   return 0;
 }
 var COMPLETIONS_USAGE = `cli completions <fish|bash> [--install] [--dir <folder>]: shell completions for every installed bin of the @kaynooo/cli-* packages
@@ -1485,12 +1937,13 @@ ${table(summary.usageErrors.map((each) => [`${each.bin}${each.command === undefi
   return 0;
 }
 if (import.meta.main) {
-  process12.exitCode = await runCli({
+  process15.exitCode = await runCli({
     name: "cli",
     about: "the bins of the @kaynooo/cli-* packages, described by their own help",
     replaces: "running each bin's --help to find the one that fits",
     examples: ["cli list", ["cli list --json", "with each bin's synopsis and examples"]],
     commands: {
+      doctor: { summary: "checks this host's install of the bins, one line per check, the command that fixes a failing one beside it", run: async (args) => main(args) },
       list: { summary: "every bin in one line: what it does and what it is reached for instead of", run: async (args) => list(args) },
       stats: { summary: "how often each bin ran and the options usage errors did not know", run: async (args) => stats(args) },
       completions: { summary: "fish completions for every installed bin, printed or written to the folder fish reads", run: async (args) => completions(args) }

package/dist/cli.js

@@ -2,7 +2,7 @@
 // @bun
 
 // src/cli.ts
-import process12 from "process";
+import process15 from "process";
 // ../kit/src/args.ts
 import process5 from "process";
 import { parseArgs } from "util";
@@ -274,6 +274,11 @@ function le(i = {}) {
 }
 var t = le();
 
+// ../kit/src/theme.ts
+var STYLES = new Set(["bold", "dim", "italic", "underline", "inverse", "strikethrough", "black", "red", "green", "yellow", "blue", "magenta", "cyan", "white", "gray", "grey", "blackBright", "redBright", "greenBright", "yellowBright", "blueBright", "magentaBright", "cyanBright", "whiteBright"]);
+var MAX_FILE_BYTES = 64 * 1024;
+var warned = new Set;
+
 // ../kit/src/style.ts
 function takesControlCodes(stream, env = process2.env) {
   return stream.isTTY === true && env.NO_COLOR === undefined && env.NODE_DISABLE_COLORS === undefined && env.TERM !== "dumb";
@@ -281,14 +286,14 @@ function takesControlCodes(stream, env = process2.env) {
 function paint(stream, env = process2.env) {
   return le({ stream: { isTTY: takesControlCodes(stream, env) }, env });
 }
-var STATUSES = {
-  passed: { symbol: "\u2713", words: ["passed", "success", "succeeded", "ok"], paint: (colors) => colors.green },
-  failed: { symbol: "\u2717", words: ["failed", "failure", "error", "errored"], paint: (colors) => colors.red },
-  running: { symbol: "\u25CF", words: ["running", "in_progress", "started"], paint: (colors) => colors.cyan },
-  queued: { symbol: "\u25CB", words: ["queued", "waiting", "pending", "created", "blocked", "scheduled"], paint: (colors) => colors.yellow },
-  skipped: { symbol: "-", words: ["skipped", "cancelled", "canceled", "manual"], paint: (colors) => colors.dim }
+var STATUS_WORDS = {
+  passed: ["passed", "success", "succeeded", "ok"],
+  failed: ["failed", "failure", "error", "errored"],
+  running: ["running", "in_progress", "started"],
+  queued: ["queued", "waiting", "pending", "created", "blocked", "scheduled"],
+  skipped: ["skipped", "cancelled", "canceled", "manual"]
 };
-var STATUS_OF = new Map(Object.entries(STATUSES).flatMap(([status, { words }]) => words.map((word) => [word, status])));
+var STATUS_OF = new Map(Object.entries(STATUS_WORDS).flatMap(([status, words]) => words.map((word) => [word, status])));
 
 // ../kit/src/format.ts
 function upTo(text, separator) {
@@ -303,7 +308,7 @@ var ESCAPE = String.fromCharCode(27);
 function textWidth(text) {
   return Bun.stringWidth(text);
 }
-function table(rows, { cellWidth, header = false, align = [], fit } = {}) {
+function table(rows, { cellWidth, header = false, align = [], fit, stream = process3.stdout } = {}) {
   const cells = cellWidth === undefined ? rows : rows.map((row) => row.map((cell) => truncate(cell.replaceAll(LINE_BREAKS, " "), cellWidth)));
   const widths = [];
   for (const row of cells) {
@@ -311,7 +316,7 @@ function table(rows, { cellWidth, header = false, align = [], fit } = {}) {
       widths[index] = Math.max(widths[index] ?? 0, textWidth(cell));
   }
   const shown = fit === undefined ? cells : narrow(cells, widths, fit);
-  const colors = paint(process3.stdout);
+  const colors = paint(stream);
   const lines = shown.map((row) => row.map((cell, index) => {
     const width = widths[index] ?? 0;
     const gap = " ".repeat(Math.max(0, width - textWidth(cell)));
@@ -319,7 +324,8 @@ function table(rows, { cellWidth, header = false, align = [], fit } = {}) {
       return `${gap}${cell}`;
     return index === row.length - 1 ? cell : `${cell}${gap}`;
   }).join("  ").trimEnd());
-  return lines.map((line, index) => header && index === 0 ? colors.bold(line) : line).join(`
+  const rule = header && takesControlCodes(stream) && lines.length > 1 ? [colors.dim("\u2500".repeat(Math.max(...lines.map(textWidth))))] : [];
+  return lines.flatMap((line, index) => header && index === 0 ? [colors.bold(line), ...rule] : [line]).join(`
 `);
 }
 function narrow(rows, widths, limit) {
@@ -446,6 +452,10 @@ class Exit extends Error {
     this.hint = hint;
   }
 }
+function fail(message, code = 2, hint) {
+  throw new Exit(message, code, hint);
+}
+
 class UsageError extends Exit {
   constructor(message, hint) {
     super(message, 2, hint);
@@ -1151,10 +1161,46 @@ var SECRET_WORDS = new Set(["key", "pass", "pwd", "auth", "salt", "cookie", "ses
 var {Glob } = globalThis.Bun;
 var SESSION_FILES = new Glob("*.json");
 var ACCOUNT_DIRS = new Glob("*/sessions");
+// src/doctor.ts
+import process14 from "process";
+
 // src/checks.ts
 import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
 import { basename, join as join4 } from "path";
 
+// src/catalog.ts
+var HOOKS_REQUIRES = "@kaynooo/cli-guard";
+var ABOUT = {
+  "@kaynooo/cli-base": "run a command at a ref in a throwaway worktree, and prove a test fails before a change",
+  "@kaynooo/cli-changelog": "release notes from conventional commits, published as a Forgejo release",
+  "@kaynooo/cli-check": "the repo's check, lint and test steps, its fixers, error lines from logs and a recipe picker",
+  "@kaynooo/cli-code": "source read by spans, TODO comments and the files worth splitting",
+  "@kaynooo/cli-db": "read-only SQL against Postgres, MySQL and MariaDB, credentials never shown",
+  "@kaynooo/cli-dev": "passwords, JWTs, timestamps, UUIDs, base64 and file hashes",
+  "@kaynooo/cli-docker": "docker compose on the stack found here, service health, shells and Symfony commands",
+  "@kaynooo/cli-doctor": "this install check, and the list of every bin",
+  "@kaynooo/cli-edit": "replace text in files, writing nothing unless every match count is right",
+  "@kaynooo/cli-env": ".env files listed and edited with secrets masked, and a secrets filter for pipes",
+  "@kaynooo/cli-forgejo": "Forgejo CI runs, logs, releases and issue checklists",
+  "@kaynooo/cli-git": "repository state in one line, commits of exact paths, a branch picker",
+  "@kaynooo/cli-gitlab": "GitLab pipelines and their failed tests",
+  "@kaynooo/cli-guard": "the safety rules a Claude Code Bash call is held to",
+  "@kaynooo/cli-out": "shortens a noisy command's output, keeping the errors",
+  "@kaynooo/cli-pick": "a fuzzy selector for pipes",
+  "@kaynooo/cli-pkg": "vets npm packages before they are added, and bumps a lib in its consumers",
+  "@kaynooo/cli-probe": "a site's HTTP version, redirects, timings and TLS",
+  "@kaynooo/cli-proc": "what a process is, who listens on a port, leftover dev processes",
+  "@kaynooo/cli-stack": "a stable port per service name, and a compose release audit",
+  "@kaynooo/cli-view": "markdown, source and git diffs in the colours of the other bins",
+  "@kaynooo/cli-wait": "wait for a line, a port, a URL or a process; a machine-wide slot for heavy jobs",
+  "@kaynooo/cli-workspace": "the repositories under a root needing attention, reclaimable folders and known vulnerabilities"
+};
+var NEEDS = {
+  "@kaynooo/cli-forgejo": [{ bin: "tea", why: "ft goes through it", how: "https://gitea.com/gitea/tea/releases" }],
+  "@kaynooo/cli-gitlab": [{ bin: "glab", why: "gl goes through it", how: "https://gitlab.com/gitlab-org/cli" }],
+  "@kaynooo/cli-docker": [{ bin: "docker", why: "dc, dlog, dx and sf run docker compose", how: "https://docs.docker.com/engine/install/" }]
+};
+
 // src/completions.ts
 import { existsSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, rmSync } from "fs";
 import { join as join3 } from "path";
@@ -1219,11 +1265,10 @@ function missingCompletions(host, dir) {
 
 // src/checks.ts
 var TOOLS = {
-  "@kaynooo/cli-audit": ["audit"],
   "@kaynooo/cli-base": ["base", "proof"],
   "@kaynooo/cli-changelog": ["changelog"],
   "@kaynooo/cli-check": ["check", "fix", "errs", "j"],
-  "@kaynooo/cli-code": ["peek", "todo-scan", "hotspots"],
+  "@kaynooo/cli-code": ["src", "peek", "todo-scan", "hotspots"],
   "@kaynooo/cli-db": ["db"],
   "@kaynooo/cli-docker": ["dc", "dlog", "dx", "sf"],
   "@kaynooo/cli-doctor": ["doctor", "cli"],
@@ -1238,12 +1283,11 @@ var TOOLS = {
   "@kaynooo/cli-pick": ["pick"],
   "@kaynooo/cli-pkg": ["pkg"],
   "@kaynooo/cli-probe": ["probe"],
-  "@kaynooo/cli-proc": ["pid", "ports", "procs"],
-  "@kaynooo/cli-repos": ["repos"],
+  "@kaynooo/cli-proc": ["proc", "pid", "ports", "procs"],
   "@kaynooo/cli-stack": ["stack"],
-  "@kaynooo/cli-sweep": ["sweep"],
   "@kaynooo/cli-view": ["view"],
-  "@kaynooo/cli-wait": ["waitfor", "slot"]
+  "@kaynooo/cli-wait": ["waitfor", "slot"],
+  "@kaynooo/cli-workspace": ["ws", "repos", "sweep", "audit"]
 };
 var FORGE = "git.kaynooo.fr";
 var FORGE_HOSTS = new Set([FORGE, "git.kevyn.fr"]);
@@ -1271,6 +1315,9 @@ function firstLine(text) {
 function installed(host, name) {
   return readJson(join4(host.globalModules, name, "package.json"));
 }
+function isInstalled(host, name) {
+  return installed(host, name)?.version !== undefined;
+}
 function ownBin(host, name, bin) {
   const declared = installed(host, name)?.bin;
   const file = typeof declared === "string" ? declared : declared?.[bin];
@@ -1309,10 +1356,16 @@ async function checkTea(host) {
     return { check: "tea", ok: false, detail: `${forge} did not answer: ${firstLine(version.stderr || version.stdout)}`, fix: `tea login edit ${login.name} --token <token>, or check the network` };
   return { check: "tea", ok: true, detail: `logged in to ${forge} as ${login.name}, Forgejo ${served}` };
 }
-function checkHooks(host) {
+function hooksWiring(host) {
   const settings = readJson(join4(host.home, ".claude", "settings.json")) ?? {};
   const plugin = settings.enabledPlugins?.[PLUGIN] === true;
   const mod = (settings.env?.CLAUDE_CODE_PLUGIN_DIRS ?? "").split(":").map((dir) => dir.replace(LEADING_TILDE, host.home)).find((dir) => basename(dir) === "cli" && existsSync2(join4(dir, "hooks", "hooks.json")));
+  return { plugin, mod };
+}
+function checkHooks(host) {
+  const { plugin, mod } = hooksWiring(host);
+  if ((plugin || mod !== undefined) && !isInstalled(host, HOOKS_REQUIRES))
+    return { check: "hooks", ok: false, detail: `wired, but ${HOOKS_REQUIRES} is not installed, so every hook finds no guard`, fix: `bun install -g ${HOOKS_REQUIRES}` };
   if (plugin && mod !== undefined)
     return { check: "hooks", ok: false, detail: `both the ${PLUGIN} plugin and the mod in ${mod} run guard, so every call is checked twice`, fix: `claude plugin disable ${PLUGIN}` };
   if (plugin)
@@ -1337,19 +1390,29 @@ function checkCompletions(host) {
     return { check: "completions", ok: false, detail: `no fish completion in ${dir} for ${missing.join(", ")}`, fix: "cli completions fish --install" };
   return { check: "completions", ok: true, detail: dir };
 }
+function checkNeeds(host) {
+  const missing = Object.entries(NEEDS).flatMap(([name, needs]) => isInstalled(host, name) ? needs.filter((need) => need.bin !== "tea" && host.which(need.bin) === null) : []);
+  if (missing.length > 0)
+    return { check: "needs", ok: false, detail: `missing ${missing.map((need) => `${need.bin} (${need.why})`).join(", ")}`, fix: `install ${missing.map((need) => `${need.bin}: ${need.how}`).join("; ")}` };
+  return { check: "needs", ok: true, detail: "every tool the installed packages need is on the PATH" };
+}
 var toolCheck = (name) => name.slice(name.indexOf("/") + 1);
-var OTHER_CHECKS = ["tea", "hooks", "bun", "completions"];
+var OTHER_CHECKS = ["tea", "hooks", "needs", "bun", "completions"];
+var FORGEJO = "@kaynooo/cli-forgejo";
 var CHECK_NAMES = [...Object.keys(TOOLS).map(toolCheck), ...OTHER_CHECKS];
 async function runChecks(host, only = []) {
   const wanted = (check) => only.length === 0 || only.includes(check);
-  const entries = Object.entries(TOOLS).filter(([name]) => wanted(toolCheck(name)));
+  const entries = Object.entries(TOOLS).filter(([name]) => only.length === 0 ? isInstalled(host, name) : wanted(toolCheck(name)));
+  const { plugin, mod } = hooksWiring(host);
+  const hooks = only.length > 0 || plugin || mod !== undefined || isInstalled(host, HOOKS_REQUIRES);
   const tools = [];
   for (let at = 0;at < entries.length; at += INFO_AT_ONCE)
     tools.push(...await Promise.all(entries.slice(at, at + INFO_AT_ONCE).map(async ([name, bins]) => checkTool(host, name, bins))));
   return [
     ...tools,
-    ...wanted("tea") ? [await checkTea(host)] : [],
-    ...wanted("hooks") ? [checkHooks(host)] : [],
+    ...wanted("tea") && (only.length > 0 || isInstalled(host, FORGEJO)) ? [await checkTea(host)] : [],
+    ...wanted("hooks") && hooks ? [checkHooks(host)] : [],
+    ...wanted("needs") ? [checkNeeds(host)] : [],
     ...wanted("bun") ? [checkBun(host)] : [],
     ...wanted("completions") ? [checkCompletions(host)] : []
   ];
@@ -1414,11 +1477,286 @@ function hostHere() {
   };
 }
 
-// src/cli.ts
-var USAGE = `doctor [--only <check>] [--quiet] [--fix [--dry-run]] [--json]: checks this host's @kaynooo/cli-* install, one line per check, the command that fixes a failing one beside it
+// src/install.ts
+import process13 from "process";
 
-Each @kaynooo/cli-* package installed globally with its bins on the PATH and no older than the registry's latest; tea logged in to git.kaynooo.fr and reaching it; the Claude Code hooks wired through the cli-hooks plugin or the cli mod, not both; Bun at least the version the tools ask for; fish completions for every bin.
+// ../kit/src/prompt.ts
+import process12 from "process";
+var KEY_SEQUENCES = /\x1B\[[0-9;]*[A-Z~]|\x1BO[A-Z]|[\s\S]/giu;
+var CONTROL = /^[\x00-\x1F\x7F]/;
+var WORDS = /\s+/;
+var MAX_ROWS = 10;
+var KEYS = { "\x1B[A": "up", "\x1BOA": "up", "\x1B[B": "down", "\x1BOB": "down", "\r": "enter", "\n": "enter", "\x03": "cancel", "\x1B": "cancel", "\x7F": "erase", "\b": "erase" };
+function readKeys(input) {
+  return (input.match(KEY_SEQUENCES) ?? []).flatMap((sequence) => KEYS[sequence] ?? (CONTROL.test(sequence) ? [] : [{ text: sequence }]));
+}
+function flip(checked, value) {
+  const next = new Set(checked);
+  if (!next.delete(value))
+    next.add(value);
+  return next;
+}
+async function checklist(question, choices, { initial = new Set, min = 0, toggle = flip, ...settings } = {}) {
+  const list = new List(choices, 0);
+  let checked = initial;
+  let invalid;
+  const accepted = await ask(question, settings, (colors, state, rows) => state === "asking" ? [asking(colors, question, list.query, "type to filter, space toggles, enter accepts"), ...list.rows(colors, rows, (choice) => checked.has(choice.value) ? `${colors.cyan("\u25C9")} ` : `${colors.dim("\u25EF")} `), ...invalid === undefined ? [] : [`  ${colors.red(invalid)}`]] : [answer(colors, question, state, choices.filter((choice) => checked.has(choice.value)).map((choice) => choice.label).join(", ") || "none")], (key) => {
+    if (key === "cancel")
+      return key;
+    invalid = undefined;
+    if (key === "enter") {
+      invalid = checked.size < min ? `pick at least ${min}` : undefined;
+      return invalid === undefined ? "enter" : undefined;
+    }
+    const current = list.current();
+    if (typeof key === "object" && key.text === " ") {
+      if (current !== undefined)
+        checked = toggle(checked, current.value);
+      return;
+    }
+    list.press(key);
+    return;
+  });
+  return accepted ? checked : undefined;
+}
+class List {
+  choices;
+  query = "";
+  matches;
+  cursor;
+  top = 0;
+  width;
+  constructor(choices, initial) {
+    this.choices = choices;
+    this.matches = choices;
+    this.cursor = Math.min(Math.max(initial, 0), choices.length - 1);
+    this.width = Math.max(0, ...choices.map((choice) => choice.label.length));
+  }
+  current() {
+    return this.matches[this.cursor];
+  }
+  press(key) {
+    if (key === "up" || key === "down") {
+      if (this.matches.length > 0)
+        this.cursor = (this.cursor + (key === "up" ? this.matches.length - 1 : 1)) % this.matches.length;
+      return;
+    }
+    if (key === "erase")
+      this.filter([...this.query].slice(0, -1).join(""));
+    else if (typeof key === "object")
+      this.filter(this.query + key.text);
+  }
+  filter(query) {
+    const words = query.toLowerCase().split(WORDS).filter((word) => word !== "");
+    const current = this.current();
+    this.query = query;
+    this.matches = this.choices.filter(({ label, hint }) => words.every((word) => `${label} ${hint}`.toLowerCase().includes(word)));
+    this.cursor = current === undefined ? 0 : Math.max(this.matches.indexOf(current), 0);
+    this.top = 0;
+  }
+  rows(colors, { columns, rows }, marker) {
+    if (this.matches.length === 0)
+      return [colors.dim("  no match")];
+    const height = Math.max(1, Math.min(MAX_ROWS, rows - 3, this.matches.length));
+    this.top = Math.min(Math.max(this.top, this.cursor - height + 1), this.cursor);
+    const shown = this.matches.slice(this.top, this.top + height).map((choice, index) => {
+      const here = this.top + index === this.cursor;
+      const mark = marker(choice);
+      const head = `${here ? "\u276F" : " "} ${mark}`;
+      const label = choice.label.padEnd(this.width);
+      const room = columns - 5 - (mark === "" ? 0 : 2) - this.width;
+      return `${here ? colors.cyan(head) : head}${here ? colors.cyan(label) : label}  ${colors.dim(truncate(choice.hint, Math.max(room, 0)))}`;
+    });
+    const below = this.matches.length - this.top - height;
+    return [...this.top > 0 ? [colors.dim(`  \u2026 ${this.top} more`)] : [], ...shown, ...below > 0 ? [colors.dim(`  \u2026 ${below} more`)] : []];
+  }
+}
+function asking(colors, question, typed, keys) {
+  return `${colors.cyan("?")} ${question} ${typed === "" ? colors.dim(`(${keys})`) : typed}`;
+}
+function answer(colors, question, state, picked) {
+  return state === "enter" ? `${colors.green("\u2713")} ${question} ${colors.cyan(picked)}` : `${colors.red("\u2717")} ${question} ${colors.dim("cancelled")}`;
+}
+async function ask(question, { hint, terminal = process12 }, render, press) {
+  const { stdin, stderr } = terminal;
+  if (stdin.isTTY !== true || stderr.isTTY !== true)
+    fail(`cannot ask "${question}" off a terminal`, 2, hint);
+  const colors = paint(stderr);
+  let drawn = 0;
+  let outcome;
+  const draw = (state) => {
+    const frame = render(colors, state, { columns: stderr.columns || 80, rows: stderr.rows || 24 });
+    stderr.write(`${drawn > 1 ? `\x1B[${drawn - 1}A` : ""}\r\x1B[0J${frame.join(`
+`)}`);
+    drawn = frame.length;
+  };
+  try {
+    stdin.setRawMode(true);
+    stdin.resume();
+    stderr.write("\x1B[?25l");
+    draw("asking");
+    return await new Promise((resolve) => {
+      function onData(data) {
+        for (const key of readKeys(data.toString())) {
+          const pressed = press(key);
+          if (pressed !== undefined) {
+            settle(pressed);
+            return;
+          }
+        }
+        draw("asking");
+      }
+      function onEnd() {
+        settle("cancel");
+      }
+      function settle(settled) {
+        outcome = settled;
+        stdin.off("data", onData);
+        stdin.off("end", onEnd);
+        resolve(settled === "enter");
+      }
+      stdin.on("data", onData);
+      stdin.on("end", onEnd);
+    });
+  } finally {
+    draw(outcome ?? "cancel");
+    stderr.write(`
+\x1B[?25h`);
+    stdin.setRawMode(false);
+    stdin.pause();
+  }
+}
+
+// src/install.ts
+var HOOKS = "hooks";
+var PLUGIN_INSTALL = ["claude", "plugin", "install", "cli-hooks", "--marketplace", `https://${FORGE}/kaynooo/cli.git`];
+var CLI_PREFIX = /^cli-/;
+var shortName = (name) => name.slice(name.indexOf("/") + 1).replace(CLI_PREFIX, "");
+function candidates2(host) {
+  const packages = Object.entries(TOOLS).filter(([name]) => !isInstalled(host, name)).map(([name, bins]) => {
+    const needs = (NEEDS[name] ?? []).map((need) => need.bin);
+    return { id: name, names: [shortName(name), name, `cli-${shortName(name)}`, ...bins], label: shortName(name), hint: `${bins.join(" ")}: ${ABOUT[name] ?? ""}${needs.length === 0 ? "" : `, needs ${needs.join(", ")}`}`, packages: [name] };
+  });
+  const { plugin, mod } = hooksWiring(host);
+  if (plugin || mod !== undefined)
+    return packages;
+  return [...packages, { id: HOOKS, names: [HOOKS, "plugin", "cli-hooks"], label: "hooks", hint: `the Claude Code plugin running guard on every tool call, needs ${HOOKS_REQUIRES}`, packages: isInstalled(host, HOOKS_REQUIRES) ? [] : [HOOKS_REQUIRES] }];
+}
+function choose(pool, names) {
+  const chosen = new Set;
+  for (const name of names) {
+    if (name === "all") {
+      for (const each of pool)
+        chosen.add(each);
+      continue;
+    }
+    const found = pool.find((each) => each.names.includes(name));
+    if (found !== undefined)
+      chosen.add(found);
+  }
+  return [...chosen];
+}
+function plan(host, picked, force) {
+  const blocked = [];
+  const warnings = [];
+  const packages = [];
+  for (const name of new Set(picked.flatMap((each) => each.packages))) {
+    const lacking = (NEEDS[name] ?? []).filter((need) => host.which(need.bin) === null);
+    if (lacking.length > 0 && !force) {
+      for (const need of lacking)
+        blocked.push({ package: shortName(name), need: need.bin, why: need.why, how: need.how });
+      continue;
+    }
+    for (const need of lacking)
+      warnings.push({ package: shortName(name), need: need.bin, why: need.why });
+    packages.push(name);
+  }
+  const guardBlocked = blocked.some((each) => `@kaynooo/cli-${each.package}` === HOOKS_REQUIRES);
+  return { packages, plugin: picked.some((each) => each.id === HOOKS) && !guardBlocked, blocked, warnings };
+}
+function checksFor(packages, plugin) {
+  return [...packages.map((name) => name.slice(name.indexOf("/") + 1)), ...plugin ? ["hooks"] : [], "needs", "completions", ...packages.includes("@kaynooo/cli-forgejo") ? ["tea"] : []];
+}
+async function ask2(pool) {
+  if (process13.stdin.isTTY !== true || process13.stderr.isTTY !== true)
+    badUsage("name what to install, or all: doctor --install forgejo check hooks (doctor --install --list shows the choices)");
+  const choices = pool.map((each) => ({ value: each, label: each.label, hint: each.hint }));
+  const picked = await checklist("install which?", choices, { hint: "name them instead: doctor --install forgejo check" });
+  return picked === undefined ? [] : [...picked];
+}
+async function install(host, options, recheck) {
+  const pool = candidates2(host);
+  const { dim, green, red, yellow } = paint(process13.stdout);
+  if (options.list) {
+    for (const each of pool)
+      console.log(`${each.label.padEnd(12)} ${dim(each.hint)}`);
+    if (pool.length === 0)
+      console.log("everything is installed");
+    return 0;
+  }
+  if (pool.length === 0) {
+    console.log("everything is installed");
+    return 0;
+  }
+  const unknown = options.names.filter((name) => name !== "all" && !Object.values(candidatesAll(host)).some((each) => each.names.includes(name)));
+  if (unknown.length > 0)
+    badUsage(`nothing to install is named ${unknown.join(", ")}: doctor --install --list`);
+  const picked = options.names.length === 0 ? await ask2(pool) : choose(pool, options.names);
+  const skipped = options.names.filter((name) => name !== "all" && !pool.some((each) => each.names.includes(name)));
+  for (const name of skipped)
+    console.log(`${dim("already")}  ${name} is installed`);
+  if (picked.length === 0) {
+    if (skipped.length === 0)
+      console.log("nothing picked");
+    return 0;
+  }
+  const planned = plan(host, picked, options.force);
+  for (const each of planned.blocked)
+    console.log(`${red("blocked")}  ${each.package} needs ${each.need} (${each.why}): ${each.how}; --force installs it anyway`);
+  for (const each of planned.warnings)
+    console.log(`${yellow("warn   ")}  ${each.package}: ${each.need} is missing, ${each.why}`);
+  if (planned.packages.length === 0 && !planned.plugin)
+    return 1;
+  const command = ["bun", "install", "-g", ...planned.packages];
+  if (planned.packages.length > 0)
+    console.log(`${options.dryRun ? dim("would  ") : green("install")}  ${command.join(" ")}`);
+  if (planned.plugin)
+    console.log(`${options.dryRun ? dim("would  ") : green("install")}  ${PLUGIN_INSTALL.join(" ")}`);
+  if (options.dryRun)
+    return planned.blocked.length > 0 ? 1 : 0;
+  if (planned.packages.length > 0) {
+    const ran = await host.run(command);
+    if (ran.code !== 0) {
+      console.error(`${red("failed")}   bun install -g: exit ${ran.code}: ${firstLine(ran.stderr || ran.stdout)}`);
+      return 1;
+    }
+  }
+  if (planned.plugin) {
+    if (host.which("claude") === null) {
+      console.log(`${dim("not run")}  claude is not on the PATH: ${PLUGIN_INSTALL.join(" ")}`);
+    } else {
+      const ran = await host.run(PLUGIN_INSTALL);
+      if (ran.code !== 0)
+        console.error(`${red("failed")}   ${PLUGIN_INSTALL.join(" ")}: exit ${ran.code}: ${firstLine(ran.stderr || ran.stdout)}`);
+    }
+  }
+  console.log(`
+after the install:`);
+  const code = await recheck(checksFor(planned.packages, planned.plugin));
+  return planned.blocked.length > 0 ? 1 : code;
+}
+function candidatesAll(host) {
+  const open = candidates2(host);
+  const done = Object.entries(TOOLS).filter(([name]) => isInstalled(host, name)).map(([name, bins]) => ({ id: name, names: [shortName(name), name, `cli-${shortName(name)}`, ...bins], label: shortName(name), hint: "", packages: [name] }));
+  return [...open, ...done];
+}
+
+// src/doctor.ts
+var USAGE = `doctor [--only <check>] [--quiet] [--fix | --install [<name>...|all]] [--list] [--dry-run] [--force] [--json]: checks this host's @kaynooo/cli-* install, one line per check, the command that fixes a failing one beside it, and installs the packages it picks
+
+Each @kaynooo/cli-* package installed globally with its bins on the PATH and no older than the registry's latest; tea logged in to git.kaynooo.fr and reaching it when ft is installed; the system tools the installed packages need (glab, docker); the Claude Code hooks wired through the cli-hooks plugin or the cli mod, not both, with guard installed; Bun at least the version the tools ask for; fish completions for every bin. A package not installed is no failure, the last line counts them.
 --fix runs the printed fix: lines it may (global installs of the packages, the completions, the hooks plugin), the installs in one call, then checks again; a line that installs a system package or only describes a step is printed as not run. --dry-run shows what --fix would run.
+--install adds packages: the names given (a package such as forgejo, one of its bins such as ft, hooks for the Claude Code plugin, or all), else a checklist on a terminal. Each is checked against what it needs first: a missing required tool (tea for ft, glab for gl, docker for dc) leaves that package out unless --force, and hooks brings guard along. doctor never installs a system package. Then it checks and fixes what it installed. --list prints the choices, --dry-run what would be installed.
 --quiet prints only the failing checks, nothing when all pass. --only limits the run to the checks named, e.g. --only tea --only bun.`;
 var EXITS = [[0, "every check passes (after --fix, the ones it fixed too)"], [1, "a check fails"], [2, "a usage error"]];
 var INSTALL2 = "bun install -g ";
@@ -1427,12 +1765,15 @@ var OPTIONS = {
   only: { type: "string", multiple: true, choices: CHECK_NAMES, description: "run only this check (a package such as cli-forgejo, tea, hooks, bun or completions), repeatable" },
   quiet: { type: "boolean", short: "q", description: "print only the failing checks" },
   fix: { type: "boolean", description: "run the fix: lines doctor may run, then check again" },
-  "dry-run": { type: "boolean", description: "with --fix, show what would run without running it (alone, it implies --fix)" }
+  "dry-run": { type: "boolean", description: "with --fix or --install, show what would run without running it (alone, it implies --fix)" },
+  install: { type: "boolean", description: "install the packages named, or picked from a checklist: forgejo, ft, hooks, all" },
+  list: { type: "boolean", description: "with --install, print the choices" },
+  force: { type: "boolean", description: "with --install, install a package even though a tool it requires is missing" }
 };
 function print(results) {
   if (results.length === 0)
     return;
-  const { green, red, dim } = paint(process12.stdout);
+  const { green, red, dim } = paint(process14.stdout);
   const width = Math.max(...results.map((result) => result.check.length));
   for (const { check, ok, detail, fix } of results)
     console.log(`${ok ? green("ok  ") : red("FAIL")}  ${check.padEnd(width)}  ${detail}${fix === undefined ? "" : `  ${dim("fix:")} ${fix}`}`);
@@ -1442,14 +1783,21 @@ function print(results) {
 ${dim("fix them all:")} ${INSTALL2}${installs.join(" ")}`);
 }
 function printOutcomes(outcomes, log) {
-  const { green, red, dim } = paint(process12.stdout);
+  const { green, red, dim } = paint(process14.stdout);
   const marks = { ran: green("ran    "), failed: red("failed "), "dry-run": dim("would  "), "not run": dim("not run") };
   for (const { command, status, detail } of outcomes)
     log(`${marks[status]}  ${command}${detail === undefined ? "" : `  ${dim(detail)}`}`);
 }
 async function main(args, host = hostHere()) {
-  const { values } = parse(args, USAGE, OPTIONS, { positionals: [], exits: EXITS, replaces: "checking each bin's version, tea's login and the hooks by hand", examples: ["doctor", ["doctor --json", "the checks for a script"], ["doctor -q", "silent unless something fails"], ["doctor --fix --dry-run", "what --fix would run"]] });
+  const { values, positionals } = parse(args, USAGE, OPTIONS, { positionals: ["[name...]"], exits: EXITS, replaces: "checking each bin's version, tea's login and the hooks by hand", examples: ["doctor", ["doctor --json", "the checks for a script"], ["doctor -q", "silent unless something fails"], ["doctor --fix --dry-run", "what --fix would run"], ["doctor --install", "pick the packages to add"], ["doctor --install forgejo check hooks", "three named ones"], ["doctor --install all --dry-run", "what installing everything would run"]] });
   const only = values.only ?? [];
+  if (values.install !== true && (positionals.length > 0 || values.list === true || values.force === true))
+    badUsage("names, --list and --force go with --install");
+  if (values.install === true) {
+    if (values.fix === true || only.length > 0 || values.json === true || values.quiet === true)
+      badUsage("--install does not combine with --fix, --only, --json or --quiet");
+    return install(host, { names: positionals, list: values.list === true, dryRun: values["dry-run"] === true, force: values.force === true }, async (checks) => main(["--fix", ...checks.flatMap((check) => ["--only", check])], host));
+  }
   const dry = values["dry-run"] === true;
   const json = values.json === true;
   let results = await runChecks(host, only);
@@ -1472,10 +1820,12 @@ after the fixes:`);
     printJson(shown);
   else
     print(shown);
+  const absent = Object.keys(TOOLS).filter((name) => !isInstalled(host, name)).length;
+  if (!json && only.length === 0 && absent > 0)
+    console.log(`
+${paint(process14.stdout).dim(`${absent} packages not installed: doctor --install`)}`);
   return results.every((result) => result.ok) ? 0 : 1;
 }
-if (import.meta.main)
-  process12.exitCode = await runMain({ name: "doctor", run: async (args) => main(args) });
-export {
-  main
-};
+
+// src/cli.ts
+process15.exitCode = await runMain({ name: "doctor", run: async (args) => main(args) });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kaynooo/cli-doctor",
   "type": "module",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "doctor: checks the @kaynooo/cli-* install of a host: each bin's version against the registry, tea's login to Forgejo, the Claude Code hooks and the Bun floor; cli list: every bin in one line, read from its own help.",
   "author": "Kaynooo <contact@kaynooo.fr>",
   "license": "MIT",
@@ -33,6 +33,7 @@
   },
   "scripts": {
     "build": "$npm_execpath build src/cli.ts src/cli-bin.ts --target bun --outdir dist",
+    "cli": "$npm_execpath src/cli-bin.ts",
     "doctor": "$npm_execpath src/cli.ts"
   },
   "devDependencies": {