@namzu/cli 10.0.0 → 12.0.0

package/dist/doctor/checks/telemetry.js

@@ -1,5 +1,4 @@
-import { createRequire } from 'node:module';
-import { pathToFileURL } from 'node:url';
+import { probeOptionalPackage } from '../../context/capabilities.js';
 const TELEMETRY = '@namzu/telemetry';
 /**
  * Telemetry presence probe.
@@ -10,64 +9,45 @@ const TELEMETRY = '@namzu/telemetry';
  * deferred to a follow-up check that the consumer can register
  * themselves once their telemetry config is known.
  *
- * ## Resolving and loading are asked separately, on purpose
- *
- * This used to be one `import()` in a `try`, and every rejection was reported
- * as `not installed (optional package)`. A package that IS installed and throws
- * on load — a broken build, a native binding that will not open, a dependency
- * of its own that cannot resolve — was reported as absent. One word, two facts,
- * and the reader is told the reassuring one.
- *
- * Splitting the question is what makes each answer honest, and a code check on
- * the thrown error is not enough to do it: a transitive dependency that cannot
- * resolve raises `ERR_MODULE_NOT_FOUND` exactly as a missing `@namzu/telemetry`
- * does, so matching on the code would report a broken installation as no
- * installation. `resolve` asks only about THIS specifier, so it separates the
- * two by construction rather than by reading a message that may be reworded.
- *
- *   - cannot resolve  → the package is not here          → `skipped`
- *   - resolves, import throws → it is here and unusable  → `fail`
+ * The three-state resolve-then-import probe this used to do inline now
+ * lives at `context/capabilities.ts` as `probeOptionalPackage` (NZ-BOOT-02),
+ * extracted so the boot path can report the SAME answer about
+ * `@namzu/sandbox`, `@namzu/files` and `@namzu/computer-use` that this file
+ * has always given about telemetry, instead of inventing its own. What
+ * stays here is the one thing the doctor still owns: turning that answer
+ * into the prose and remediation a `DoctorCheckResult` carries.
  */
 /**
- * Whether `specifier` is installed, and whether it loads.
+ * `specifier`'s `CapabilityProbe`, read as a `DoctorCheckResult`.
  *
  * Exported separately from the `DoctorCheck` so all three outcomes can be
- * driven with a specifier the test controls — there is no way to uninstall or
- * break the real optional package from inside a test run. The check itself is
- * still exercised through `telemetryInstalledCheck.run`, because a helper
- * proven in isolation says nothing about whether the check reaches it. Same
- * arrangement, and the same reason, as `describeProviderChain`.
- *
- * The import goes through the RESOLVED path rather than the specifier, so one
- * code path serves a package name and a file, which is what lets the
- * present-but-broken case be reached at all. Resolution has already applied the
- * package's export map by that point.
+ * asserted directly — there is no way to uninstall or break a real optional
+ * package from inside a test run, so `capabilities.test.ts` drives
+ * `probeOptionalPackage` with fixtures and this function's own tests only
+ * need to check the mapping. The check itself is still exercised through
+ * `telemetryInstalledCheck.run`, because a helper proven in isolation says
+ * nothing about whether the check reaches it. Same arrangement, and the
+ * same reason, as `describeProviderChain`.
  */
 export async function describeInstalledPackage(specifier) {
-    const require = createRequire(import.meta.url);
-    let resolved;
-    try {
-        resolved = require.resolve(specifier);
-    }
-    catch {
-        return {
-            status: 'skipped',
-            message: `${specifier} not installed (optional package)`,
-        };
-    }
-    try {
-        await import(pathToFileURL(resolved).href);
-        return { status: 'pass', message: `${specifier} is installed` };
-    }
-    catch (err) {
-        return {
-            status: 'fail',
-            // The reason is the whole value of separating these: "installed but
-            // will not load" sends the reader somewhere, and "not installed" would
-            // have sent them to install what is already there.
-            message: `${specifier} is installed but failed to load: ${err instanceof Error ? err.message : String(err)}`,
-            remediation: `Reinstall ${specifier}, or remove it if you are not using telemetry — it is optional and namzu runs without it.`,
-        };
+    const probe = await probeOptionalPackage(specifier);
+    switch (probe.state) {
+        case 'absent':
+            return {
+                status: 'skipped',
+                message: `${specifier} not installed (optional package)`,
+            };
+        case 'present':
+            return { status: 'pass', message: `${specifier} is installed` };
+        case 'broken':
+            return {
+                status: 'fail',
+                // The reason is the whole value of separating these: "installed but
+                // will not load" sends the reader somewhere, and "not installed" would
+                // have sent them to install what is already there.
+                message: `${specifier} is installed but failed to load: ${probe.error.message}`,
+                remediation: `Reinstall ${specifier}, or remove it if you are not using it — it is optional and namzu runs without it.`,
+            };
     }
 }
 export const telemetryInstalledCheck = {

package/dist/doctor/checks/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../../src/doctor/checks/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAIxC,MAAM,SAAS,GAAG,kBAAkB,CAAA;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACJ,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,GAAG,SAAS,mCAAmC;SACxD,CAAA;IACF,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,eAAe,EAAE,CAAA;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,MAAM,EAAE,MAAM;YACd,oEAAoE;YACpE,uEAAuE;YACvE,mDAAmD;YACnD,OAAO,EAAE,GAAG,SAAS,qCACpB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChD,EAAE;YACF,WAAW,EAAE,aAAa,SAAS,2FAA2F;SAC9H,CAAA;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAgB;IACnD,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,GAA+B,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC;CAC1E,CAAA"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../../src/doctor/checks/telemetry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEpE,MAAM,SAAS,GAAG,kBAAkB,CAAA;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IAC/D,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAA;IACnD,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACZ,OAAO;gBACN,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,GAAG,SAAS,mCAAmC;aACxD,CAAA;QACF,KAAK,SAAS;YACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,eAAe,EAAE,CAAA;QAChE,KAAK,QAAQ;YACZ,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,oEAAoE;gBACpE,uEAAuE;gBACvE,mDAAmD;gBACnD,OAAO,EAAE,GAAG,SAAS,qCAAqC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC/E,WAAW,EAAE,aAAa,SAAS,oFAAoF;aACvH,CAAA;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAgB;IACnD,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,GAA+B,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC;CAC1E,CAAA"}

package/dist/doctor/checks/vault.d.ts

@@ -1,22 +1,6 @@
-import type { DoctorCheck } from '@namzu/sdk';
-/**
- * Built-in vault probe is intentionally `skipped`.
- *
- * `CredentialVault` is an interface, not a globally-discoverable
- * registry — consumers instantiate their own (`InMemoryCredentialVault`,
- * file-backed, env-backed, KMS-backed, …). The doctor cannot enumerate
- * vaults it doesn't know about. To get a real vault healthcheck, the
- * consumer registers a custom check via `registerDoctorCheck` that
- * exercises their specific vault wiring.
- *
- * `skipped`, not `inconclusive`, and the difference is the whole point of the
- * split: `inconclusive` means a check tried and could not answer, which is a
- * gap in the report and now carries a non-zero exit code. This check has no
- * subject to answer about — there is no discovery mechanism to fail — and that
- * is true on every machine, permanently, by design. Reporting a permanent
- * design decision as an unanswered question would make `namzu doctor` non-zero
- * on every healthy machine, and a diagnostic that always complains is one
- * nobody reads.
- */
+import type { CredentialProvider, DoctorCheck } from '@namzu/sdk';
+export declare function registerCredentialProvider(provider: CredentialProvider, label: string, refs: readonly string[]): () => void;
+/** For tests, and for a host rebuilding its wiring. */
+export declare function clearRegisteredCredentialProviders(): void;
 export declare const vaultRegisteredCheck: DoctorCheck;
 //# sourceMappingURL=vault.d.ts.map

package/dist/doctor/checks/vault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAA;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAQlC,CAAA"}
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAA;AAmBpF,wBAAgB,0BAA0B,CACzC,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,SAAS,MAAM,EAAE,GACrB,MAAM,IAAI,CAOZ;AAED,uDAAuD;AACvD,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAED,eAAO,MAAM,oBAAoB,EAAE,WA0ClC,CAAA"}

package/dist/doctor/checks/vault.js

@@ -1,28 +1,67 @@
 /**
- * Built-in vault probe is intentionally `skipped`.
+ * What this machine can answer about its credentials.
  *
- * `CredentialVault` is an interface, not a globally-discoverable
- * registry — consumers instantiate their own (`InMemoryCredentialVault`,
- * file-backed, env-backed, KMS-backed, …). The doctor cannot enumerate
- * vaults it doesn't know about. To get a real vault healthcheck, the
- * consumer registers a custom check via `registerDoctorCheck` that
- * exercises their specific vault wiring.
+ * This check used to return `skipped` unconditionally, with the message
+ * "no vault auto-discovery in v1" — an answer that was the same on every
+ * machine, forever, which is the shape `a-check-that-cannot-fail` warns
+ * about. It was honest about the world at the time: `CredentialVault` was
+ * an interface nobody registered, so there was nothing to enumerate.
  *
- * `skipped`, not `inconclusive`, and the difference is the whole point of the
- * split: `inconclusive` means a check tried and could not answer, which is a
- * gap in the report and now carries a non-zero exit code. This check has no
- * subject to answer about — there is no discovery mechanism to fail — and that
- * is true on every machine, permanently, by design. Reporting a permanent
- * design decision as an unanswered question would make `namzu doctor` non-zero
- * on every healthy machine, and a diagnostic that always complains is one
- * nobody reads.
+ * There is now. The check reads what the registered providers report and
+ * returns `skipped` only when NONE is registered — which is a real state a
+ * host can be in, and now the only one that produces it.
  */
+/** Providers this process knows about. Registered by whoever builds them. */
+const registered = [];
+export function registerCredentialProvider(provider, label, refs) {
+    const entry = { provider, label, refs };
+    registered.push(entry);
+    return () => {
+        const i = registered.indexOf(entry);
+        if (i >= 0)
+            registered.splice(i, 1);
+    };
+}
+/** For tests, and for a host rebuilding its wiring. */
+export function clearRegisteredCredentialProviders() {
+    registered.length = 0;
+}
 export const vaultRegisteredCheck = {
     id: 'vault.registered',
     category: 'vault',
-    run: async () => ({
-        status: 'skipped',
-        message: 'no vault auto-discovery in v1; register a vault check via registerDoctorCheck for your specific vault setup',
-    }),
+    run: async () => {
+        if (registered.length === 0) {
+            // `skipped`, not `inconclusive`, and the difference is the whole
+            // point of the split: `inconclusive` means a check tried and could
+            // not answer, which is a gap in the report and carries a non-zero
+            // exit. A host that registered no provider has no subject here,
+            // and reporting that as an unanswered question would make
+            // `namzu doctor` non-zero on a perfectly healthy machine.
+            return {
+                status: 'skipped',
+                message: 'No credential provider is registered, so there is nothing to report on.',
+            };
+        }
+        const lines = [];
+        let anyConfigured = false;
+        for (const entry of registered) {
+            for (const ref of entry.refs) {
+                // `describe`, never `resolve`. This runs in a diagnostic whose
+                // output an operator pastes into an issue, and a check that
+                // read the value to report on it would be the leak.
+                const described = await entry.provider.describe(ref);
+                if (described.configured)
+                    anyConfigured = true;
+                lines.push(`${entry.label}: ${ref} — ${described.configured ? 'configured' : 'not set'}${described.source ? ` (${described.source})` : ''}, ${described.writable ? 'writable' : 'read-only'}`);
+            }
+        }
+        return {
+            // A provider registered and nothing configured is a real answer,
+            // not a failure: an operator who has not logged in yet is in a
+            // state the doctor should describe rather than complain about.
+            status: anyConfigured ? 'pass' : 'warn',
+            message: lines.join('\n'),
+        };
+    },
 };
 //# sourceMappingURL=vault.js.map

package/dist/doctor/checks/vault.js.map

@@ -1 +1 @@
-{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,OAAO;IACjB,GAAG,EAAE,KAAK,IAAgC,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,SAAS;QACjB,OAAO,EACN,6GAA6G;KAC9G,CAAC;CACF,CAAA"}
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,6EAA6E;AAC7E,MAAM,UAAU,GAA+E,EAAE,CAAA;AAEjG,MAAM,UAAU,0BAA0B,CACzC,QAA4B,EAC5B,KAAa,EACb,IAAuB;IAEvB,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACvC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,OAAO,GAAG,EAAE;QACX,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACpC,CAAC,CAAA;AACF,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,kCAAkC;IACjD,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,OAAO;IACjB,GAAG,EAAE,KAAK,IAAgC,EAAE;QAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,gEAAgE;YAChE,0DAA0D;YAC1D,0DAA0D;YAC1D,OAAO;gBACN,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,yEAAyE;aAClF,CAAA;QACF,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,aAAa,GAAG,KAAK,CAAA;QACzB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,+DAA+D;gBAC/D,4DAA4D;gBAC5D,oDAAoD;gBACpD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;gBACpD,IAAI,SAAS,CAAC,UAAU;oBAAE,aAAa,GAAG,IAAI,CAAA;gBAC9C,KAAK,CAAC,IAAI,CACT,GAAG,KAAK,CAAC,KAAK,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,GAC1E,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAC/C,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CACpD,CAAA;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,iEAAiE;YACjE,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACvC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACzB,CAAA;IACF,CAAC;CACD,CAAA"}

package/dist/doctor/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,WAAW,EAEX,iBAAiB,EAEjB,YAAY,EAEZ,MAAM,EACN,MAAM,YAAY,CAAA;AAKnB,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,WAAW,CAAC,UAAU,CAAC,EAAE,CAAA;IACxD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAA;IACpD;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAA;IAC9D;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,GAAG,CAAC,CAAQ;IAEpB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI5B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IASlC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,SAAS,WAAW,EAAE;IAIxB,GAAG,CAAC,IAAI,GAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAyH/E;;;;;OAKG;IACH,OAAO,CAAC,cAAc;CAQtB;AAED,eAAO,MAAM,MAAM,EAAE,cAAqC,CAAA;AAE1D,wBAAgB,oBAAoB,IAAI,cAAc,CAErD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAE5D;AAED,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CAc5E"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,WAAW,EAEX,iBAAiB,EAEjB,YAAY,EAEZ,MAAM,EACN,MAAM,YAAY,CAAA;AAMnB,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,WAAW,CAAC,UAAU,CAAC,EAAE,CAAA;IACxD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;IAClC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAA;IACpD;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAA;IAC9D;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,GAAG,CAAC,CAAQ;IAEpB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI5B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IASlC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,SAAS,WAAW,EAAE;IAIxB,GAAG,CAAC,IAAI,GAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA4H/E;;;;;OAKG;IACH,OAAO,CAAC,cAAc;CAWtB;AAED,eAAO,MAAM,MAAM,EAAE,cAAqC,CAAA;AAE1D,wBAAgB,oBAAoB,IAAI,cAAc,CAErD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAE5D;AAED,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CAc5E"}

package/dist/doctor/registry.js

@@ -1,10 +1,11 @@
+import { SCOPE_ATTRIBUTE } from '@namzu/sdk';
 const DEFAULT_PER_CHECK_TIMEOUT_MS = 5_000;
 const DEFAULT_WALL_CLOCK_TIMEOUT_MS = 10_000;
 export class DoctorRegistry {
     checks = new Map();
     log;
     setLogger(log) {
-        this.log = log.child({ component: 'DoctorRegistry' });
+        this.log = log.child({ [SCOPE_ATTRIBUTE]: 'doctor' });
     }
     register(check) {
         if (this.checks.has(check.id)) {
@@ -66,7 +67,10 @@ export class DoctorRegistry {
             }
             catch (error) {
                 const message = error instanceof Error ? error.message : String(error);
-                this.log?.warn('doctor check threw', { id: check.id, message });
+                this.log?.warn('doctor check threw', {
+                    'namzu.doctor.id': check.id,
+                    'namzu.doctor.message': message,
+                });
                 result = { status: 'fail', message: `check threw: ${message}` };
             }
             recordCompletion({
@@ -87,9 +91,9 @@ export class DoctorRegistry {
                 : `wall-clock timeout (${wall}ms) reached before this check completed`;
             const unfinished = filteredChecks.filter((c) => !completed.has(c.id));
             this.log?.warn(raceWinner === 'aborted' ? 'doctor aborted by signal' : 'doctor wall-clock timeout', {
-                wall,
-                total: filteredChecks.length,
-                unfinished: unfinished.length,
+                'namzu.doctor.wall': wall,
+                'namzu.doctor.total': filteredChecks.length,
+                'namzu.doctor.unfinished': unfinished.length,
             });
             records = filteredChecks.map((check) => {
                 const existing = completed.get(check.id);
@@ -143,7 +147,10 @@ export class DoctorRegistry {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            this.log?.warn('doctor callback threw', { phase, message });
+            this.log?.warn('doctor callback threw', {
+                'namzu.doctor.phase': phase,
+                'namzu.doctor.message': message,
+            });
         }
     }
 }

package/dist/doctor/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AAUA,MAAM,4BAA4B,GAAG,KAAK,CAAA;AAC1C,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAmC5C,MAAM,OAAO,cAAc;IACT,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAA;IACrD,GAAG,CAAS;IAEpB,SAAS,CAAC,GAAW;QACpB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,QAAQ,CAAC,KAAkB;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,yBAAyB,KAAK,CAAC,EAAE,qEAAqE,CACtG,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,UAAU,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,IAAI;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA2C,EAAE;QACtD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,4BAA4B,CAAA;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,IAAI,6BAA6B,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU;YACrC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,SAAS,GAAmC,IAAI,GAAG,EAAE,CAAA;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAuB,CAAC,CAAA;QAEjE,sDAAsD;QACtD,MAAM,YAAY,GAAuB,MAAM;YAC9C,CAAC,CAAC,MAAM,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;oBACxB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;wBAC1D,IAAI,EAAE,IAAI;qBACV,CAAC,CAAA;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAC,iBAAiB;QAE1C,MAAM,gBAAgB,GAAG,CAAC,MAAyB,EAAQ,EAAE;YAC5D,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,OAAM;YACpC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAChC,mEAAmE;YACnE,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7E,CAAC,CAAA;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAiB,EAAE;YAClE,oEAAoE;YACpE,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;YAErE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACrB,MAAM,YAAY,GAAG,CAAC,KAAK,IAAgC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;YAC/E,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1C,GAAsB,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,+BAA+B,QAAQ,IAAI;aACpD,CAAC,CACF,CAAA;YACD,IAAI,MAAyB,CAAA;YAC7B,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC/D,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,OAAO,EAAE,EAAE,CAAA;YAChE,CAAC;YACD,gBAAgB,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAChD,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;QAE3E,IAAI,OAA4B,CAAA;QAChC,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,MAAM,GACX,UAAU,KAAK,SAAS;gBACvB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,uBAAuB,IAAI,yCAAyC,CAAA;YACxE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG,EAAE,IAAI,CACb,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,EACnF;gBACC,IAAI;gBACJ,KAAK,EAAE,cAAc,CAAC,MAAM;gBAC5B,UAAU,EAAE,UAAU,CAAC,MAAM;aAC7B,CACD,CAAA;YACD,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,MAAM,MAAM,GAAsB;oBACjC,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;gBACD,4DAA4D;gBAC5D,2DAA2D;gBAC3D,6DAA6D;gBAC7D,wCAAwC;gBACxC,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBACxB,OAAO,MAAM,CAAA;YACd,CAAC,CAAC,CAAA;QACH,CAAC;aAAM,CAAC;YACP,sEAAsE;YACtE,+DAA+D;YAC/D,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,8DAA8D;gBAC9D,gEAAgE;gBAChE,qCAAqC;gBACrC,OAAO;oBACN,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,sDAAsD;oBAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;YACF,CAAC,CAAC,CAAA;QACH,CAAC;QAED,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,CAAA;IACvD,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,KAAyC,EAAE,EAAc;QAC/E,IAAI,CAAC;YACJ,EAAE,EAAE,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5D,CAAC;IACF,CAAC;CACD;AAED,MAAM,CAAC,MAAM,MAAM,GAAmB,IAAI,cAAc,EAAE,CAAA;AAE1D,MAAM,UAAU,oBAAoB;IACnC,OAAO,IAAI,cAAc,EAAE,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAA;IACxC,OAAO,QAAQ,CAAC,GAAG,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAwC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;KACrC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAqC,EAAE,OAAe;IAC1E,MAAM,OAAO,GAAG;QACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;QACvE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC7D,KAAK,EAAE,OAAO,CAAC,MAAM;KACrB,CAAA;IACD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,IAAI,GACT,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO;QACf,OAAO;QACP,IAAI;KACJ,CAAC,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC7E,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,4BAA4B,GAAG,KAAK,CAAA;AAC1C,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAmC5C,MAAM,OAAO,cAAc;IACT,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAA;IACrD,GAAG,CAAS;IAEpB,SAAS,CAAC,GAAW;QACpB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,QAAQ,CAAC,KAAkB;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,yBAAyB,KAAK,CAAC,EAAE,qEAAqE,CACtG,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,UAAU,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,IAAI;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA2C,EAAE;QACtD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,4BAA4B,CAAA;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,IAAI,6BAA6B,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU;YACrC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,SAAS,GAAmC,IAAI,GAAG,EAAE,CAAA;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAuB,CAAC,CAAA;QAEjE,sDAAsD;QACtD,MAAM,YAAY,GAAuB,MAAM;YAC9C,CAAC,CAAC,MAAM,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC5B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;oBACxB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;wBAC1D,IAAI,EAAE,IAAI;qBACV,CAAC,CAAA;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAC,iBAAiB;QAE1C,MAAM,gBAAgB,GAAG,CAAC,MAAyB,EAAQ,EAAE;YAC5D,kEAAkE;YAClE,oEAAoE;YACpE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,OAAM;YACpC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAChC,mEAAmE;YACnE,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7E,CAAC,CAAA;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAiB,EAAE;YAClE,oEAAoE;YACpE,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;YAErE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACrB,MAAM,YAAY,GAAG,CAAC,KAAK,IAAgC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;YAC/E,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1C,GAAsB,EAAE,CAAC,CAAC;gBACzB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,+BAA+B,QAAQ,IAAI;aACpD,CAAC,CACF,CAAA;YACD,IAAI,MAAyB,CAAA;YAC7B,IAAI,CAAC;gBACJ,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE;oBACpC,iBAAiB,EAAE,KAAK,CAAC,EAAE;oBAC3B,sBAAsB,EAAE,OAAO;iBAC/B,CAAC,CAAA;gBACF,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,OAAO,EAAE,EAAE,CAAA;YAChE,CAAC;YACD,gBAAgB,CAAC;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAChD,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;QAE3E,IAAI,OAA4B,CAAA;QAChC,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,MAAM,GACX,UAAU,KAAK,SAAS;gBACvB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,uBAAuB,IAAI,yCAAyC,CAAA;YACxE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG,EAAE,IAAI,CACb,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,EACnF;gBACC,mBAAmB,EAAE,IAAI;gBACzB,oBAAoB,EAAE,cAAc,CAAC,MAAM;gBAC3C,yBAAyB,EAAE,UAAU,CAAC,MAAM;aAC5C,CACD,CAAA;YACD,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,MAAM,MAAM,GAAsB;oBACjC,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;gBACD,4DAA4D;gBAC5D,2DAA2D;gBAC3D,6DAA6D;gBAC7D,wCAAwC;gBACxC,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBACxB,OAAO,MAAM,CAAA;YACd,CAAC,CAAC,CAAA;QACH,CAAC;aAAM,CAAC;YACP,sEAAsE;YACtE,+DAA+D;YAC/D,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAqB,EAAE;gBACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAA;gBAC7B,8DAA8D;gBAC9D,gEAAgE;gBAChE,qCAAqC;gBACrC,OAAO;oBACN,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,cAA8B;oBACtC,OAAO,EAAE,sDAAsD;oBAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAClC,CAAA;YACF,CAAC,CAAC,CAAA;QACH,CAAC;QAED,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,CAAA;IACvD,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,KAAyC,EAAE,EAAc;QAC/E,IAAI,CAAC;YACJ,EAAE,EAAE,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,uBAAuB,EAAE;gBACvC,oBAAoB,EAAE,KAAK;gBAC3B,sBAAsB,EAAE,OAAO;aAC/B,CAAC,CAAA;QACH,CAAC;IACF,CAAC;CACD;AAED,MAAM,CAAC,MAAM,MAAM,GAAmB,IAAI,cAAc,EAAE,CAAA;AAE1D,MAAM,UAAU,oBAAoB;IACnC,OAAO,IAAI,cAAc,EAAE,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAA;IACxC,OAAO,QAAQ,CAAC,GAAG,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAwC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;KACrC,CAAC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAqC,EAAE,OAAe;IAC1E,MAAM,OAAO,GAAG;QACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;QACvE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC7D,KAAK,EAAE,OAAO,CAAC,MAAM;KACrB,CAAA;IACD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,IAAI,GACT,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO;QACf,OAAO;QACP,IAAI;KACJ,CAAC,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC7E,CAAC"}

package/dist/index.d.ts

@@ -5,12 +5,13 @@
  */
 export { createDoctorRegistry, doctor, DoctorRegistry, registerDoctorCheck, runDoctor, } from './doctor/registry.js';
 export type { RunDoctorOptions } from './doctor/registry.js';
-export { builtInDoctorChecks, credentialSourcesCheck, cwdWritableCheck, providerChainCheck, providersRegisteredCheck, sandboxPlatformCheck, telemetryInstalledCheck, tmpdirWritableCheck, vaultRegisteredCheck, } from './doctor/checks/index.js';
+export { builtInDoctorChecks, computerUseInstalledCheck, credentialSourcesCheck, cwdWritableCheck, filesInstalledCheck, providerChainCheck, providersRegisteredCheck, sandboxInstalledCheck, sandboxPlatformCheck, telemetryInstalledCheck, tmpdirWritableCheck, vaultRegisteredCheck, } from './doctor/checks/index.js';
+export { type CapabilityProbe, NAMZU_OPTIONAL_CAPABILITIES, probeCapabilities, probeOptionalPackage, } from './context/capabilities.js';
 export { runDoctorCommand } from './commands/doctor.js';
 export { runCli, type RunCliOptions } from './cli.js';
 export type { CommandContext, CommandDef, CommandHandler, CommandHandlerArgs, } from './commands/types.js';
 export { registerAll, registerCommand, type RegisterOptions, } from './commands/registry.js';
 export { createFormatter, type FormatName, type Formatter, type FormatterOptions, isFormatName, } from './output/index.js';
-export { ConfigLoadError, loadConfig, type LoadConfigOptions } from './config/load.js';
+export { ConfigLoadError, loadConfig, loadConfigWithProvenance, type ConfigProvenance, type ConfigSource, type LoadConfigOptions, } from './config/load.js';
 export { DEFAULT_CONFIG, type NamzuCliConfig } from './config/schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACN,oBAAoB,EACpB,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,SAAS,GACT,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAGvD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AACrD,YAAY,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,kBAAkB,GAClB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACN,WAAW,EACX,eAAe,EACf,KAAK,eAAe,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACN,eAAe,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,YAAY,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACN,oBAAoB,EACpB,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,SAAS,GACT,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5D,OAAO,EACN,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACN,KAAK,eAAe,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAGvD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AACrD,YAAY,EACX,cAAc,EACd,UAAU,EACV,cAAc,EACd,kBAAkB,GAClB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACN,WAAW,EACX,eAAe,EACf,KAAK,eAAe,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACN,eAAe,EACf,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,YAAY,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACN,eAAe,EACf,UAAU,EACV,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACtB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -5,12 +5,13 @@
  */
 // Doctor library API (pre-M0; preserved for embedded consumers).
 export { createDoctorRegistry, doctor, DoctorRegistry, registerDoctorCheck, runDoctor, } from './doctor/registry.js';
-export { builtInDoctorChecks, credentialSourcesCheck, cwdWritableCheck, providerChainCheck, providersRegisteredCheck, sandboxPlatformCheck, telemetryInstalledCheck, tmpdirWritableCheck, vaultRegisteredCheck, } from './doctor/checks/index.js';
+export { builtInDoctorChecks, computerUseInstalledCheck, credentialSourcesCheck, cwdWritableCheck, filesInstalledCheck, providerChainCheck, providersRegisteredCheck, sandboxInstalledCheck, sandboxPlatformCheck, telemetryInstalledCheck, tmpdirWritableCheck, vaultRegisteredCheck, } from './doctor/checks/index.js';
+export { NAMZU_OPTIONAL_CAPABILITIES, probeCapabilities, probeOptionalPackage, } from './context/capabilities.js';
 export { runDoctorCommand } from './commands/doctor.js';
 // Shell + extension surface for the CLI.
 export { runCli } from './cli.js';
 export { registerAll, registerCommand, } from './commands/registry.js';
 export { createFormatter, isFormatName, } from './output/index.js';
-export { ConfigLoadError, loadConfig } from './config/load.js';
+export { ConfigLoadError, loadConfig, loadConfigWithProvenance, } from './config/load.js';
 export { DEFAULT_CONFIG } from './config/schema.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,iEAAiE;AACjE,OAAO,EACN,oBAAoB,EACpB,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,SAAS,GACT,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEvD,yCAAyC;AACzC,OAAO,EAAE,MAAM,EAAsB,MAAM,UAAU,CAAA;AAOrD,OAAO,EACN,WAAW,EACX,eAAe,GAEf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACN,eAAe,EAIf,YAAY,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,eAAe,EAAE,UAAU,EAA0B,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,cAAc,EAAuB,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,iEAAiE;AACjE,OAAO,EACN,oBAAoB,EACpB,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,SAAS,GACT,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EACN,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EAEN,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEvD,yCAAyC;AACzC,OAAO,EAAE,MAAM,EAAsB,MAAM,UAAU,CAAA;AAOrD,OAAO,EACN,WAAW,EACX,eAAe,GAEf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACN,eAAe,EAIf,YAAY,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACN,eAAe,EACf,UAAU,EACV,wBAAwB,GAIxB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,cAAc,EAAuB,MAAM,oBAAoB,CAAA"}

package/dist/integrations/files/attachment-store.d.ts

@@ -0,0 +1,44 @@
+import type { BlobStore } from '@namzu/files';
+import type { AttachmentStore, StoredBytes } from '@namzu/sdk';
+/**
+ * The CLI's attachment store, content-addressed, over a real blob driver.
+ *
+ * `@namzu/files` shipped six drivers and had no consumer in this repo — a
+ * package the estate could import and nothing here could point at. This is
+ * the pointing: the local driver, wired to the seam the SDK added for
+ * attachments, in the one host that actually attaches things.
+ *
+ * **Addressed by content AND media type**, not by content alone. The same
+ * bytes declared `image/png` once and `application/pdf` later are two
+ * different claims about what they are, and the SDK's resolver refuses a
+ * ref whose stored media type disagrees with the message. Keying on bytes
+ * alone would make the second `put` return the first ref, and every message
+ * using it would then be refused — a dedup that manufactures the exact
+ * mismatch the resolver exists to catch. Folding the media type into the
+ * digest keeps dedup for the common case (the same file attached twice) and
+ * gives an honest ref for the uncommon one.
+ */
+/** `<home>/.namzu/attachments`, beside the credential store. */
+export declare function attachmentsDir(home?: string): string;
+export interface BlobAttachmentStoreOptions {
+    /** Injectable for tests; defaults to the local driver under `~/.namzu`. */
+    readonly blobs?: BlobStore;
+    readonly home?: string;
+}
+export declare class BlobAttachmentStore implements AttachmentStore {
+    private readonly blobs;
+    constructor(options?: BlobAttachmentStoreOptions);
+    /**
+     * The key for these bytes under this media type.
+     *
+     * Two files rather than one: the bytes, and a sibling holding the media
+     * type. The blob store stores bytes and nothing else, and the SDK's
+     * resolver needs the store to be able to REPORT what it holds — a store
+     * that could only echo back what the caller claimed could never catch a
+     * mismatch, which is the check that keeps a PDF from being sent as a PNG.
+     */
+    private key;
+    put(bytes: StoredBytes): Promise<string>;
+    get(ref: string): Promise<StoredBytes | undefined>;
+}
+//# sourceMappingURL=attachment-store.d.ts.map

package/dist/integrations/files/attachment-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-store.d.ts","sourceRoot":"","sources":["../../../src/integrations/files/attachment-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE9D;;;;;;;;;;;;;;;;;GAiBG;AAEH,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAE/D;AAED,MAAM,WAAW,0BAA0B;IAC1C,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,qBAAa,mBAAoB,YAAW,eAAe;IAC1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;gBAErB,OAAO,GAAE,0BAA+B;IAIpD;;;;;;;;OAQG;IACH,OAAO,CAAC,GAAG;IAOL,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBxC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;CAoBxD"}

package/dist/integrations/files/attachment-store.js

@@ -0,0 +1,86 @@
+import { createHash } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { LocalFsBlobStore } from '@namzu/files/local';
+/**
+ * The CLI's attachment store, content-addressed, over a real blob driver.
+ *
+ * `@namzu/files` shipped six drivers and had no consumer in this repo — a
+ * package the estate could import and nothing here could point at. This is
+ * the pointing: the local driver, wired to the seam the SDK added for
+ * attachments, in the one host that actually attaches things.
+ *
+ * **Addressed by content AND media type**, not by content alone. The same
+ * bytes declared `image/png` once and `application/pdf` later are two
+ * different claims about what they are, and the SDK's resolver refuses a
+ * ref whose stored media type disagrees with the message. Keying on bytes
+ * alone would make the second `put` return the first ref, and every message
+ * using it would then be refused — a dedup that manufactures the exact
+ * mismatch the resolver exists to catch. Folding the media type into the
+ * digest keeps dedup for the common case (the same file attached twice) and
+ * gives an honest ref for the uncommon one.
+ */
+/** `<home>/.namzu/attachments`, beside the credential store. */
+export function attachmentsDir(home = homedir()) {
+    return join(home, '.namzu', 'attachments');
+}
+export class BlobAttachmentStore {
+    blobs;
+    constructor(options = {}) {
+        this.blobs = options.blobs ?? new LocalFsBlobStore({ root: attachmentsDir(options.home) });
+    }
+    /**
+     * The key for these bytes under this media type.
+     *
+     * Two files rather than one: the bytes, and a sibling holding the media
+     * type. The blob store stores bytes and nothing else, and the SDK's
+     * resolver needs the store to be able to REPORT what it holds — a store
+     * that could only echo back what the caller claimed could never catch a
+     * mismatch, which is the check that keeps a PDF from being sent as a PNG.
+     */
+    key(mediaType, data) {
+        const digest = createHash('sha256').update(mediaType).update('\0').update(data).digest('hex');
+        // Two levels, because a flat directory of every attachment a machine
+        // has ever seen is a directory nothing enumerates twice.
+        return `${digest.slice(0, 2)}/${digest.slice(2)}`;
+    }
+    async put(bytes) {
+        const key = this.key(bytes.mediaType, bytes.data);
+        // Written every time rather than checked first. A `get` before every
+        // `put` doubles the syscalls to avoid rewriting identical bytes to an
+        // identical path, and the write is what makes the ref valid — skipping
+        // it on a stale "exists" answer is how a ref points at nothing.
+        await this.blobs.put({
+            key: `${key}.bin`,
+            bytes: Buffer.from(bytes.data, 'base64'),
+            mimeType: bytes.mediaType,
+        });
+        await this.blobs.put({
+            key: `${key}.type`,
+            bytes: Buffer.from(bytes.mediaType, 'utf-8'),
+            mimeType: 'text/plain',
+        });
+        return key;
+    }
+    async get(ref) {
+        // The blob store validates the key against path traversal, and this
+        // passes the caller's ref through unchanged so that check is the one
+        // that runs. Sanitising here as well would mean two rules that can
+        // disagree, and the weaker one would be the one nobody reads.
+        const [blob, type] = await Promise.all([
+            this.blobs.get({ provider: 'local-fs', key: `${ref}.bin` }),
+            this.blobs.get({ provider: 'local-fs', key: `${ref}.type` }),
+        ]);
+        if (!blob || !type) {
+            // BOTH, or nothing. A ref with bytes and no media type is a
+            // half-written attachment, and answering with a guessed type is how
+            // a PDF reaches a provider labelled as an image.
+            return undefined;
+        }
+        return {
+            data: Buffer.from(blob.bytes).toString('base64'),
+            mediaType: Buffer.from(type.bytes).toString('utf-8'),
+        };
+    }
+}
+//# sourceMappingURL=attachment-store.js.map

package/dist/integrations/files/attachment-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-store.js","sourceRoot":"","sources":["../../../src/integrations/files/attachment-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAGrD;;;;;;;;;;;;;;;;;GAiBG;AAEH,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,OAAe,OAAO,EAAE;IACtD,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;AAC3C,CAAC;AAQD,MAAM,OAAO,mBAAmB;IACd,KAAK,CAAW;IAEjC,YAAY,UAAsC,EAAE;QACnD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3F,CAAC;IAED;;;;;;;;OAQG;IACK,GAAG,CAAC,SAAiB,EAAE,IAAY;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7F,qEAAqE;QACrE,yDAAyD;QACzD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAkB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACjD,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB,GAAG,EAAE,GAAG,GAAG,MAAM;YACjB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;YACxC,QAAQ,EAAE,KAAK,CAAC,SAAS;SACzB,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB,GAAG,EAAE,GAAG,GAAG,OAAO;YAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC;YAC5C,QAAQ,EAAE,YAAY;SACtB,CAAC,CAAA;QACF,OAAO,GAAG,CAAA;IACX,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACpB,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,8DAA8D;QAC9D,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,EAAE,CAAC;SAC5D,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,4DAA4D;YAC5D,oEAAoE;YACpE,iDAAiD;YACjD,OAAO,SAAS,CAAA;QACjB,CAAC;QACD,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;SACpD,CAAA;IACF,CAAC;CACD"}

package/dist/integrations/providers/credential-provider.d.ts

@@ -0,0 +1,39 @@
+import type { CredentialDescription, CredentialProvider, ResolvedCredential } from '@namzu/sdk';
+/**
+ * The CLI's hardened credential file, as a writable `CredentialProvider`.
+ *
+ * The seam had no writable implementation, so `describe()` reported
+ * `writable: false` everywhere and nothing could rotate a credential
+ * through it — the OAuth refresh wrote straight into this store, invisibly
+ * to the kernel.
+ *
+ * **This adapter adds no file logic of its own.** The store already owns
+ * the `wx` open, the `0600`, the read-back that proves the mode landed and
+ * the refusal that leaves no file when it did not. Reimplementing any of
+ * that here would be a second, weaker copy of a guarantee this repo has a
+ * ratified rule about, and the copy is the one that would drift.
+ */
+/**
+ * The one credential this store holds.
+ *
+ * A single ref rather than a namespace, because the file has exactly one
+ * subscription credential in it. A provider that accepted any name would
+ * report `configured: false` for every other one — indistinguishable from
+ * "this name is not set here" — while quietly answering only for this one.
+ */
+export declare const SUBSCRIPTION_CREDENTIAL_REF = "namzu.subscription.accessToken";
+export interface FileCredentialProviderOptions {
+    /** Home directory the store resolves its path under. Injectable for tests. */
+    readonly home?: string;
+}
+export declare class FileCredentialProvider implements CredentialProvider {
+    private readonly options;
+    constructor(options?: FileCredentialProviderOptions);
+    private get source();
+    private refused;
+    resolve(ref: string): Promise<ResolvedCredential | undefined>;
+    describe(ref: string): Promise<CredentialDescription>;
+    set(ref: string, value: string): Promise<void>;
+    unset(ref: string): Promise<void>;
+}
+//# sourceMappingURL=credential-provider.d.ts.map

package/dist/integrations/providers/credential-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-provider.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/credential-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAU/F;;;;;;;;;;;;;GAaG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,mCAAmC,CAAA;AAE3E,MAAM,WAAW,6BAA6B;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,qBAAa,sBAAuB,YAAW,kBAAkB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,6BAAkC;IAExE,OAAO,KAAK,MAAM,GAEjB;IAED,OAAO,CAAC,OAAO;IAST,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ7D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAYrD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMvC"}