@murphai/murph 0.1.1

package/dist/assistant/automation/run-loop.d.ts

@@ -0,0 +1,21 @@
+import { type RunAssistantAutomationInput } from '@murphai/assistant-core/assistant-automation';
+export * from '@murphai/assistant-core/assistant-automation';
+export declare function runAssistantAutomation(input: RunAssistantAutomationInput): Promise<{
+    vault: string;
+    startedAt: string;
+    stoppedAt: string;
+    reason: "error" | "completed" | "signal";
+    daemonStarted: boolean;
+    scans: number;
+    considered: number;
+    routed: number;
+    noAction: number;
+    skipped: number;
+    failed: number;
+    replyConsidered: number;
+    replied: number;
+    replySkipped: number;
+    replyFailed: number;
+    lastError: string | null;
+}>;
+//# sourceMappingURL=run-loop.d.ts.map

package/dist/assistant/automation/run-loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-loop.d.ts","sourceRoot":"","sources":["../../../src/assistant/automation/run-loop.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,8CAA8C,CAAA;AAErD,cAAc,8CAA8C,CAAA;AAE5D,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B;;;;;;;;;;;;;;;;;GA+BnC"}

package/dist/assistant/automation/run-loop.js

@@ -0,0 +1,31 @@
+import { maybeRunAssistantAutomationViaDaemon } from '../../assistant-daemon-client.js';
+import { runAssistantAutomation as runAssistantAutomationLocal, } from '@murphai/assistant-core/assistant-automation';
+export * from '@murphai/assistant-core/assistant-automation';
+export async function runAssistantAutomation(input) {
+    const canUseDaemonClient = input.executionContext === undefined &&
+        input.inboxServices === undefined &&
+        input.onEvent === undefined &&
+        input.onInboxEvent === undefined &&
+        input.signal === undefined &&
+        input.vaultServices === undefined;
+    if (canUseDaemonClient) {
+        const remote = await maybeRunAssistantAutomationViaDaemon({
+            allowSelfAuthored: input.allowSelfAuthored,
+            deliveryDispatchMode: input.deliveryDispatchMode,
+            drainOutbox: input.drainOutbox,
+            maxPerScan: input.maxPerScan,
+            modelSpec: input.modelSpec,
+            once: input.once,
+            requestId: input.requestId ?? null,
+            scanIntervalMs: input.scanIntervalMs,
+            sessionMaxAgeMs: input.sessionMaxAgeMs ?? null,
+            startDaemon: input.startDaemon,
+            vault: input.vault,
+        });
+        if (remote) {
+            return remote;
+        }
+    }
+    return runAssistantAutomationLocal(input);
+}
+//# sourceMappingURL=run-loop.js.map

package/dist/assistant/automation/run-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-loop.js","sourceRoot":"","sources":["../../../src/assistant/automation/run-loop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAA;AACvF,OAAO,EACL,sBAAsB,IAAI,2BAA2B,GAEtD,MAAM,8CAA8C,CAAA;AAErD,cAAc,8CAA8C,CAAA;AAE5D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,MAAM,kBAAkB,GACtB,KAAK,CAAC,gBAAgB,KAAK,SAAS;QACpC,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,KAAK,CAAC,MAAM,KAAK,SAAS;QAC1B,KAAK,CAAC,aAAa,KAAK,SAAS,CAAA;IACnC,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,oCAAoC,CACvD;YACE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;YAC9C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CACF,CAAA;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAA;AAC3C,CAAC"}

package/dist/assistant/automation.d.ts

@@ -0,0 +1,10 @@
+/**
+ * CLI facade over the assistant-core automation surface.
+ * The CLI keeps the daemon-aware run loop locally while delegating the rest.
+ */
+export type { AssistantAutoReplyScanResult, AssistantAutomationScanResult, AssistantInboxScanResult, AssistantRunEvent, } from '@murphai/assistant-core/assistant-automation';
+export { runAssistantAutomation, type RunAssistantAutomationInput, } from './automation/run-loop.js';
+export { scanAssistantAutomationOnce, } from '@murphai/assistant-core/assistant-automation';
+export { scanAssistantAutoReplyOnce, } from '@murphai/assistant-core/assistant-automation';
+export { scanAssistantInboxOnce, } from '@murphai/assistant-core/assistant-automation';
+//# sourceMappingURL=automation.d.ts.map

package/dist/assistant/automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.d.ts","sourceRoot":"","sources":["../../src/assistant/automation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,YAAY,EACV,4BAA4B,EAC5B,6BAA6B,EAC7B,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,8CAA8C,CAAA;AACrD,OAAO,EACL,sBAAsB,EACtB,KAAK,2BAA2B,GACjC,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,2BAA2B,GAC5B,MAAM,8CAA8C,CAAA;AACrD,OAAO,EACL,0BAA0B,GAC3B,MAAM,8CAA8C,CAAA;AACrD,OAAO,EACL,sBAAsB,GACvB,MAAM,8CAA8C,CAAA"}

package/dist/assistant/automation.js

@@ -0,0 +1,5 @@
+export { runAssistantAutomation, } from './automation/run-loop.js';
+export { scanAssistantAutomationOnce, } from '@murphai/assistant-core/assistant-automation';
+export { scanAssistantAutoReplyOnce, } from '@murphai/assistant-core/assistant-automation';
+export { scanAssistantInboxOnce, } from '@murphai/assistant-core/assistant-automation';
+//# sourceMappingURL=automation.js.map

package/dist/assistant/automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.js","sourceRoot":"","sources":["../../src/assistant/automation.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,sBAAsB,GAEvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,2BAA2B,GAC5B,MAAM,8CAA8C,CAAA;AACrD,OAAO,EACL,0BAA0B,GAC3B,MAAM,8CAA8C,CAAA;AACrD,OAAO,EACL,sBAAsB,GACvB,MAAM,8CAA8C,CAAA"}

package/dist/assistant/cron.d.ts

@@ -0,0 +1,19 @@
+import { getAssistantCronStatus as getAssistantCronStatusLocal, processDueAssistantCronJobsLocal, setAssistantCronJobTarget as setAssistantCronJobTargetLocal } from '@murphai/assistant-core/assistant-cron';
+import type { AssistantCronJob, AssistantCronRunRecord, AssistantCronTargetSnapshot } from '@murphai/assistant-core/assistant-cli-contracts';
+export * from '@murphai/assistant-core/assistant-cron';
+export type { AssistantCronJob, AssistantCronRunRecord, AssistantCronTargetSnapshot, } from '@murphai/assistant-core/assistant-cli-contracts';
+export declare function listAssistantCronJobs(vault: string): Promise<AssistantCronJob[]>;
+export declare function getAssistantCronJob(vault: string, job: string): Promise<AssistantCronJob>;
+export declare function getAssistantCronJobTarget(vault: string, job: string): Promise<AssistantCronTargetSnapshot>;
+export declare function setAssistantCronJobTarget(input: Parameters<typeof setAssistantCronJobTargetLocal>[0]): Promise<Awaited<ReturnType<typeof setAssistantCronJobTargetLocal>>>;
+export declare function getAssistantCronStatus(vault: string): Promise<Awaited<ReturnType<typeof getAssistantCronStatusLocal>>>;
+export declare function listAssistantCronRuns(input: {
+    job: string;
+    limit?: number;
+    vault: string;
+}): Promise<{
+    jobId: string;
+    runs: AssistantCronRunRecord[];
+}>;
+export declare function processDueAssistantCronJobs(input: Parameters<typeof processDueAssistantCronJobsLocal>[0]): Promise<Awaited<ReturnType<typeof processDueAssistantCronJobsLocal>>>;
+//# sourceMappingURL=cron.d.ts.map

package/dist/assistant/cron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../src/assistant/cron.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,sBAAsB,IAAI,2BAA2B,EAGrD,gCAAgC,EAChC,yBAAyB,IAAI,8BAA8B,EAC5D,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACtB,2BAA2B,EAC5B,MAAM,iDAAiD,CAAA;AAExD,cAAc,wCAAwC,CAAA;AACtD,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,iDAAiD,CAAA;AAExD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAO7B;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,gBAAgB,CAAC,CAU3B;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,2BAA2B,CAAC,CAUtC;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAC,CAAC,CAAC,GAC1D,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAC,CAAC,CAOrE;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAOlE;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,sBAAsB,EAAE,CAAA;CAC/B,CAAC,CAOD;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAAC,CAAC,CAOvE"}

package/dist/assistant/cron.js

@@ -0,0 +1,59 @@
+import { maybeGetAssistantCronJobViaDaemon, maybeGetAssistantCronTargetViaDaemon, maybeGetAssistantCronStatusViaDaemon, maybeListAssistantCronJobsViaDaemon, maybeListAssistantCronRunsViaDaemon, maybeProcessDueAssistantCronViaDaemon, maybeSetAssistantCronTargetViaDaemon, } from '../assistant-daemon-client.js';
+import { getAssistantCronJob as getAssistantCronJobLocal, getAssistantCronJobTarget as getAssistantCronJobTargetLocal, getAssistantCronStatus as getAssistantCronStatusLocal, listAssistantCronJobs as listAssistantCronJobsLocal, listAssistantCronRuns as listAssistantCronRunsLocal, processDueAssistantCronJobsLocal, setAssistantCronJobTarget as setAssistantCronJobTargetLocal, } from '@murphai/assistant-core/assistant-cron';
+export * from '@murphai/assistant-core/assistant-cron';
+export async function listAssistantCronJobs(vault) {
+    const remote = await maybeListAssistantCronJobsViaDaemon({ vault });
+    if (remote !== null) {
+        return remote;
+    }
+    return listAssistantCronJobsLocal(vault);
+}
+export async function getAssistantCronJob(vault, job) {
+    const remote = await maybeGetAssistantCronJobViaDaemon({
+        job,
+        vault,
+    });
+    if (remote) {
+        return remote;
+    }
+    return getAssistantCronJobLocal(vault, job);
+}
+export async function getAssistantCronJobTarget(vault, job) {
+    const remote = await maybeGetAssistantCronTargetViaDaemon({
+        job,
+        vault,
+    });
+    if (remote) {
+        return remote;
+    }
+    return getAssistantCronJobTargetLocal(vault, job);
+}
+export async function setAssistantCronJobTarget(input) {
+    const remote = await maybeSetAssistantCronTargetViaDaemon(input);
+    if (remote) {
+        return remote;
+    }
+    return setAssistantCronJobTargetLocal(input);
+}
+export async function getAssistantCronStatus(vault) {
+    const remote = await maybeGetAssistantCronStatusViaDaemon({ vault });
+    if (remote) {
+        return remote;
+    }
+    return getAssistantCronStatusLocal(vault);
+}
+export async function listAssistantCronRuns(input) {
+    const remote = await maybeListAssistantCronRunsViaDaemon(input);
+    if (remote !== null) {
+        return remote;
+    }
+    return listAssistantCronRunsLocal(input);
+}
+export async function processDueAssistantCronJobs(input) {
+    const remote = await maybeProcessDueAssistantCronViaDaemon(input);
+    if (remote) {
+        return remote;
+    }
+    return processDueAssistantCronJobsLocal(input);
+}
+//# sourceMappingURL=cron.js.map

package/dist/assistant/cron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.js","sourceRoot":"","sources":["../../src/assistant/cron.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,mCAAmC,EACnC,mCAAmC,EACnC,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,mBAAmB,IAAI,wBAAwB,EAC/C,yBAAyB,IAAI,8BAA8B,EAC3D,sBAAsB,IAAI,2BAA2B,EACrD,qBAAqB,IAAI,0BAA0B,EACnD,qBAAqB,IAAI,0BAA0B,EACnD,gCAAgC,EAChC,yBAAyB,IAAI,8BAA8B,GAC5D,MAAM,wCAAwC,CAAA;AAO/C,cAAc,wCAAwC,CAAA;AAOtD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACnE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC;QACrD,GAAG;QACH,KAAK;KACN,CAAC,CAAA;IACF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC;QACxD,GAAG;QACH,KAAK;KACN,CAAC,CAAA;IACF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,8BAA8B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAA2D;IAE3D,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC,KAAK,CAAC,CAAA;IAChE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,oCAAoC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACpE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAA;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAI3C;IAIC,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,KAAK,CAAC,CAAA;IAC/D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAA6D;IAE7D,MAAM,MAAM,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,CAAA;IACjE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,gCAAgC,CAAC,KAAK,CAAC,CAAA;AAChD,CAAC"}

package/dist/assistant/doctor-security.d.ts

@@ -0,0 +1,15 @@
+import type { AssistantStatePaths, AssistantStatePermissionAudit } from '@murphai/runtime-state/node';
+export interface AssistantStateSecrecyAudit {
+    malformedSessionSecretSidecars: number;
+    orphanSessionSecretSidecars: number;
+    permissionAudit: AssistantStatePermissionAudit;
+    repairedSessionFiles: number;
+    sessionFilesScanned: number;
+    sessionInlineSecretFiles: number;
+    sessionInlineSecretHeaders: number;
+    sessionSecretSidecarFiles: number;
+}
+export declare function inspectAndRepairAssistantStateSecrecy(paths: AssistantStatePaths, input?: {
+    repair?: boolean;
+}): Promise<AssistantStateSecrecyAudit>;
+//# sourceMappingURL=doctor-security.d.ts.map

package/dist/assistant/doctor-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-security.d.ts","sourceRoot":"","sources":["../../src/assistant/doctor-security.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,mBAAmB,EACnB,6BAA6B,EAC9B,MAAM,6BAA6B,CAAA;AAsBpC,MAAM,WAAW,0BAA0B;IACzC,8BAA8B,EAAE,MAAM,CAAA;IACtC,2BAA2B,EAAE,MAAM,CAAA;IACnC,eAAe,EAAE,6BAA6B,CAAA;IAC9C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;IAChC,0BAA0B,EAAE,MAAM,CAAA;IAClC,yBAAyB,EAAE,MAAM,CAAA;CAClC;AAED,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,mBAAmB,EAC1B,KAAK,GAAE;IACL,MAAM,CAAC,EAAE,OAAO,CAAA;CACZ,GACL,OAAO,CAAC,0BAA0B,CAAC,CA+BrC"}

package/dist/assistant/doctor-security.js

@@ -0,0 +1,172 @@
+import { access, readdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { assistantSessionSchema, assistantSessionSecretsSchema, parseAssistantSessionRecord, } from '@murphai/assistant-core/assistant-cli-contracts';
+import { normalizeAssistantSessionSnapshot } from '@murphai/assistant-core/assistant-provider';
+import { mergeAssistantHeaders } from '@murphai/assistant-core/assistant-runtime';
+import { auditAssistantStatePermissions, isMissingFileError, writeJsonFileAtomic, } from '@murphai/assistant-core/assistant-runtime';
+import { extractAssistantSessionSecretsForPersistence, persistAssistantSessionSecrets, readAssistantSessionSecrets, } from '@murphai/assistant-core/assistant-state';
+import { resolveAssistantSessionPath } from '@murphai/assistant-core/assistant-state';
+export async function inspectAndRepairAssistantStateSecrecy(paths, input = {}) {
+    const repair = input.repair === true;
+    let repairedSessionFiles = 0;
+    if (repair) {
+        repairedSessionFiles = await repairLegacyAssistantSessionSecrets(paths);
+    }
+    const [permissionAudit, sessionInlineSecrets, sessionSecretSidecars,] = await Promise.all([
+        auditAssistantStatePermissions({
+            repair,
+            rootPath: paths.assistantStateRoot,
+        }),
+        scanAssistantSessionInlineSecrets(paths),
+        auditAssistantSessionSecretSidecars(paths),
+    ]);
+    return {
+        malformedSessionSecretSidecars: sessionSecretSidecars.malformedSidecars,
+        orphanSessionSecretSidecars: sessionSecretSidecars.orphanSidecars,
+        permissionAudit,
+        repairedSessionFiles,
+        sessionFilesScanned: sessionInlineSecrets.filesScanned,
+        sessionInlineSecretFiles: sessionInlineSecrets.inlineSecretFiles,
+        sessionInlineSecretHeaders: sessionInlineSecrets.inlineSecretHeaders,
+        sessionSecretSidecarFiles: sessionSecretSidecars.filesScanned,
+    };
+}
+async function repairLegacyAssistantSessionSecrets(paths) {
+    let repairedFiles = 0;
+    for (const fileName of await readDirectoryFiles(paths.sessionsDirectory)) {
+        if (!fileName.endsWith('.json')) {
+            continue;
+        }
+        const sessionPath = path.join(paths.sessionsDirectory, fileName);
+        try {
+            const raw = await readFile(sessionPath, 'utf8');
+            const session = normalizeAssistantSessionSnapshot(parseAssistantSessionRecord(JSON.parse(raw)));
+            const extracted = extractAssistantSessionSecretsForPersistence(session);
+            if (extracted.migratedHeaderNames.length === 0) {
+                continue;
+            }
+            const existingSecrets = await readAssistantSessionSecrets({
+                paths,
+                sessionId: session.sessionId,
+            });
+            const mergedSecrets = mergeAssistantSessionSecretsForRepair({
+                existingSecrets,
+                extractedSecrets: extracted.secrets,
+                session,
+            });
+            const persistedSession = assistantSessionSchema.parse(normalizeAssistantSessionSnapshot(extracted.persisted));
+            await persistAssistantSessionSecrets({
+                paths,
+                secrets: mergedSecrets,
+                sessionId: session.sessionId,
+            });
+            await writeJsonFileAtomic(sessionPath, persistedSession);
+            repairedFiles += 1;
+        }
+        catch {
+            // Let the main doctor parse checks surface malformed primary records.
+        }
+    }
+    return repairedFiles;
+}
+async function scanAssistantSessionInlineSecrets(paths) {
+    let filesScanned = 0;
+    let inlineSecretFiles = 0;
+    let inlineSecretHeaders = 0;
+    for (const fileName of await readDirectoryFiles(paths.sessionsDirectory)) {
+        if (!fileName.endsWith('.json')) {
+            continue;
+        }
+        try {
+            const raw = await readFile(path.join(paths.sessionsDirectory, fileName), 'utf8');
+            const session = parseAssistantSessionRecord(JSON.parse(raw));
+            const extracted = extractAssistantSessionSecretsForPersistence(session);
+            filesScanned += 1;
+            if (extracted.migratedHeaderNames.length > 0) {
+                inlineSecretFiles += 1;
+                inlineSecretHeaders += extracted.migratedHeaderNames.length;
+            }
+        }
+        catch {
+            // Main doctor checks already report malformed session files.
+        }
+    }
+    return {
+        filesScanned,
+        inlineSecretFiles,
+        inlineSecretHeaders,
+    };
+}
+async function auditAssistantSessionSecretSidecars(paths) {
+    let filesScanned = 0;
+    let malformedSidecars = 0;
+    let orphanSidecars = 0;
+    for (const fileName of await readDirectoryFiles(paths.sessionSecretsDirectory)) {
+        if (!fileName.endsWith('.json')) {
+            continue;
+        }
+        filesScanned += 1;
+        const secretPath = path.join(paths.sessionSecretsDirectory, fileName);
+        try {
+            const raw = await readFile(secretPath, 'utf8');
+            const sidecar = assistantSessionSecretsSchema.parse(JSON.parse(raw));
+            const expectedSessionId = fileName.replace(/\.json$/u, '');
+            if (sidecar.sessionId !== expectedSessionId) {
+                malformedSidecars += 1;
+                continue;
+            }
+            if (!(await pathExists(resolveAssistantSessionPath(paths, sidecar.sessionId)))) {
+                orphanSidecars += 1;
+            }
+        }
+        catch {
+            malformedSidecars += 1;
+        }
+    }
+    return {
+        filesScanned,
+        malformedSidecars,
+        orphanSidecars,
+    };
+}
+function mergeAssistantSessionSecretsForRepair(input) {
+    const providerHeaders = mergeAssistantHeaders(input.existingSecrets?.providerHeaders, input.extractedSecrets?.providerHeaders);
+    const providerBindingHeaders = mergeAssistantHeaders(input.existingSecrets?.providerBindingHeaders, input.extractedSecrets?.providerBindingHeaders);
+    if (!providerHeaders && !providerBindingHeaders) {
+        return null;
+    }
+    return assistantSessionSecretsSchema.parse({
+        schema: 'murph.assistant-session-secrets.v1',
+        sessionId: input.session.sessionId,
+        updatedAt: input.session.updatedAt,
+        providerHeaders,
+        providerBindingHeaders,
+    });
+}
+async function pathExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch (error) {
+        if (isMissingFileError(error)) {
+            return false;
+        }
+        throw error;
+    }
+}
+async function readDirectoryFiles(directory) {
+    try {
+        const entries = await readdir(directory, {
+            withFileTypes: true,
+        });
+        return entries.filter((entry) => entry.isFile()).map((entry) => entry.name);
+    }
+    catch (error) {
+        if (isMissingFileError(error)) {
+            return [];
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=doctor-security.js.map

package/dist/assistant/doctor-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-security.js","sourceRoot":"","sources":["../../src/assistant/doctor-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAA;AAK5B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,GAG5B,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,2CAA2C,CAAA;AAClD,OAAO,EACL,4CAA4C,EAC5C,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,yCAAyC,CAAA;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAA;AAarF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAA0B,EAC1B,QAEI,EAAE;IAEN,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAA;IACpC,IAAI,oBAAoB,GAAG,CAAC,CAAA;IAE5B,IAAI,MAAM,EAAE,CAAC;QACX,oBAAoB,GAAG,MAAM,mCAAmC,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,CACJ,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACtB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,8BAA8B,CAAC;YAC7B,MAAM;YACN,QAAQ,EAAE,KAAK,CAAC,kBAAkB;SACnC,CAAC;QACF,iCAAiC,CAAC,KAAK,CAAC;QACxC,mCAAmC,CAAC,KAAK,CAAC;KAC3C,CAAC,CAAA;IAEF,OAAO;QACL,8BAA8B,EAAE,qBAAqB,CAAC,iBAAiB;QACvE,2BAA2B,EAAE,qBAAqB,CAAC,cAAc;QACjE,eAAe;QACf,oBAAoB;QACpB,mBAAmB,EAAE,oBAAoB,CAAC,YAAY;QACtD,wBAAwB,EAAE,oBAAoB,CAAC,iBAAiB;QAChE,0BAA0B,EAAE,oBAAoB,CAAC,mBAAmB;QACpE,yBAAyB,EAAE,qBAAqB,CAAC,YAAY;KAC9D,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,KAA0B;IAE1B,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,KAAK,MAAM,QAAQ,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,SAAQ;QACV,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAA;QAChE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,iCAAiC,CAC/C,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CACxD,CAAA;YACD,MAAM,SAAS,GAAG,4CAA4C,CAAC,OAAO,CAAC,CAAA;YAEvE,IAAI,SAAS,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,SAAQ;YACV,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC;gBACxD,KAAK;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAA;YACF,MAAM,aAAa,GAAG,qCAAqC,CAAC;gBAC1D,eAAe;gBACf,gBAAgB,EAAE,SAAS,CAAC,OAAO;gBACnC,OAAO;aACR,CAAC,CAAA;YACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CACnD,iCAAiC,CAAC,SAAS,CAAC,SAAS,CAAC,CACvD,CAAA;YAED,MAAM,8BAA8B,CAAC;gBACnC,KAAK;gBACL,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAA;YACF,MAAM,mBAAmB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;YACxD,aAAa,IAAI,CAAC,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,KAA0B;IAM1B,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,IAAI,mBAAmB,GAAG,CAAC,CAAA;IAE3B,KAAK,MAAM,QAAQ,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,SAAQ;QACV,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;YAChF,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAA;YACvE,MAAM,SAAS,GAAG,4CAA4C,CAAC,OAAO,CAAC,CAAA;YACvE,YAAY,IAAI,CAAC,CAAA;YAEjB,IAAI,SAAS,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,iBAAiB,IAAI,CAAC,CAAA;gBACtB,mBAAmB,IAAI,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAA;YAC7D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY;QACZ,iBAAiB;QACjB,mBAAmB;KACpB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CAChD,KAA0B;IAM1B,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,IAAI,cAAc,GAAG,CAAC,CAAA;IAEtB,KAAK,MAAM,QAAQ,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,SAAQ;QACV,CAAC;QAED,YAAY,IAAI,CAAC,CAAA;QACjB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAA;QACrE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YAC9C,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAA;YAC/E,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;YAC1D,IAAI,OAAO,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;gBAC5C,iBAAiB,IAAI,CAAC,CAAA;gBACtB,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,cAAc,IAAI,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,IAAI,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY;QACZ,iBAAiB;QACjB,cAAc;KACf,CAAA;AACH,CAAC;AAED,SAAS,qCAAqC,CAAC,KAI9C;IACC,MAAM,eAAe,GAAG,qBAAqB,CAC3C,KAAK,CAAC,eAAe,EAAE,eAAe,EACtC,KAAK,CAAC,gBAAgB,EAAE,eAAe,CACxC,CAAA;IACD,MAAM,sBAAsB,GAAG,qBAAqB,CAClD,KAAK,CAAC,eAAe,EAAE,sBAAsB,EAC7C,KAAK,CAAC,gBAAgB,EAAE,sBAAsB,CAC/C,CAAA;IAED,IAAI,CAAC,eAAe,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,6BAA6B,CAAC,KAAK,CAAC;QACzC,MAAM,EAAE,oCAAoC;QAC5C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,eAAe;QACf,sBAAsB;KACvB,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAA;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/assistant/doctor.d.ts

@@ -0,0 +1,5 @@
+import { type AssistantDoctorResult } from '@murphai/assistant-core/assistant-cli-contracts';
+export declare function runAssistantDoctor(vault: string, input?: {
+    repair?: boolean;
+}): Promise<AssistantDoctorResult>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/assistant/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/assistant/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,EAeL,KAAK,qBAAqB,EAG3B,MAAM,iDAAiD,CAAA;AAgBxD,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,KAAK,GAAE;IACL,MAAM,CAAC,EAAE,OAAO,CAAA;CACZ,GACL,OAAO,CAAC,qBAAqB,CAAC,CAUhC"}