@namzu/cli 35.0.0 → 36.0.0

package/dist/doctor/checks/chain.js

@@ -1,211 +0,0 @@
-import { hasApiCredential, requiresCredentialForModel, } from '../../integrations/providers/access.js';
-import { chainCapabilityDisagreements, unresolvedMembers, } from '../../integrations/providers/chain-capabilities.js';
-import { discoverProviders } from '../../integrations/providers/discover.js';
-import { preferencesPath, readPreferences } from '../../integrations/providers/preferences.js';
-import { resolveChainCapabilities } from '../../integrations/providers/register.js';
-import { PROVIDER_REGISTRY } from '../../integrations/providers/registry.js';
-/**
- * The configured provider chain, in the operator's declared order.
- *
- * Two jobs, and the second is the one that earns this check.
- *
- * First, the order has to be readable without launching the TUI. A chain that
- * can only be seen by opening an interactive picker is not something an
- * operator can check on a server, paste into an issue, or diff after an edit.
- *
- * Second — and this is why it reports per MEMBER rather than a count — a
- * fallback is only worth having if it works, and a broken one is invisible by
- * construction: nothing exercises it until the primary is already down, which
- * is the worst moment to find out the key was never set. So every member's
- * credential is resolved here, on a day when nothing is broken.
- *
- * ## Two ways a chain is unusable, and this reports both
- *
- * A credential is the obvious one. The other is a capability DISAGREEMENT: a
- * run negotiates tools, vision and documents once, against the primary, and
- * keeps that answer across a swap — so a chain whose members declare different
- * abilities would land a turn on a member holding a request shaped for someone
- * else. `createAgentSession` refuses such a chain outright, which means an
- * operator who has one learns about it by trying to start a session.
- *
- * That check used to be unreachable from here. Reading what a provider declares
- * requires its package to be registered, and the only registration path lived
- * inside the interactive session module — so `doctor` could report which
- * members had keys and not whether the chain it was describing could run at
- * all. A diagnostic that cannot see what the thing it diagnoses sees is
- * checking the wrong thing. `ensureRegistered` now lives beside the registry
- * (`integrations/providers/register.ts`) and both reach it.
- *
- * The cost is real and worth naming: this check dynamically imports the driver
- * package of every member in the chain. That is the price of reading a
- * declaration, and it is paid on a command whose entire job is to look.
- *
- * Exported separately from the `DoctorCheck` so it can be driven with an
- * explicit home and environment. The check itself is still exercised through
- * `providerChainCheck.run`, because a helper proven in isolation says nothing
- * about whether the check reaches it.
- */
-export async function describeProviderChain(options = {}) {
-    const path = preferencesPath(options.home);
-    let read;
-    try {
-        read = readPreferences(options.home);
-    }
-    catch (err) {
-        return {
-            status: 'fail',
-            message: `could not read ${path}: ${err instanceof Error ? err.message : String(err)}`,
-            remediation: 'Fix or delete the file, then run `namzu` to pick a provider again.',
-        };
-    }
-    if (read.status === 'missing') {
-        // `skipped`: this check LOOKED and there is no chain here to describe.
-        // Not `inconclusive`, which now means the check could not answer — the
-        // answer was reached, and it is "there is none".
-        //
-        // Not `warn` either, which in this file means namzu is usable but
-        // degraded. A machine with no preferences file and a key in the
-        // environment is an ordinary working namzu: `exec` builds a default chain
-        // from what it detects, and whether a credential exists at all is
-        // `providers.credentials`' question, answered there and not restated
-        // here.
-        return {
-            status: 'skipped',
-            message: `no provider chain configured (${path} does not exist)`,
-            remediation: 'Run `namzu` and pick a provider; the choice is saved to that file.',
-        };
-    }
-    if (read.status === 'needs-repick') {
-        return {
-            status: 'fail',
-            message: `provider chain unusable: ${read.reason}`,
-            remediation: 'Run `namzu` to pick again, or edit that file by hand.',
-        };
-    }
-    let detected;
-    try {
-        detected = await discoverProviders({
-            ...(options.env ? { env: options.env } : {}),
-            ...(options.home ? { home: options.home } : {}),
-            ...(options.skipKeychain ? { skipKeychain: true } : {}),
-            ...(options.skipProbes ? { skipProbes: true } : {}),
-        });
-    }
-    catch (err) {
-        // Name the step that failed. Reporting "no credentials" when discovery
-        // itself broke would send the operator looking for a key that is
-        // already there.
-        return {
-            status: 'inconclusive',
-            message: `provider chain read, but credential discovery failed: ${err instanceof Error ? err.message : String(err)}`,
-        };
-    }
-    const members = read.prefs.providers;
-    const lines = [];
-    let unusable = 0;
-    let primaryUnusable = false;
-    let anonymousZen = false;
-    for (const [index, member] of members.entries()) {
-        const entry = PROVIDER_REGISTRY[member.id];
-        const position = index === 0 ? 'primary' : `fallback ${index}`;
-        // `(namzu default)`, not `(default)`. The value comes from namzu's own
-        // provider registry, and a bare "default" reads as the provider's current
-        // one — so an operator seeing a model they did not expect concludes the
-        // provider changed it, when the thing to do is pin `model` on this member.
-        // The picker already says it this way; this line is the same value.
-        const model = member.model ?? `${entry.defaultModel} (namzu default)`;
-        const det = detected.find((d) => d.entry.id === member.id);
-        const needsKey = requiresCredentialForModel(entry, member.model ?? entry.defaultModel);
-        const usable = needsKey ? hasApiCredential(entry, det?.apiKey) : Boolean(det);
-        if (entry.id === 'zen' && usable && !hasApiCredential(entry, det?.apiKey))
-            anonymousZen = true;
-        if (!usable) {
-            unusable++;
-            if (index === 0)
-                primaryUnusable = true;
-        }
-        const state = needsKey
-            ? usable
-                ? 'credential found'
-                : 'NO CREDENTIAL'
-            : entry.id === 'zen' && usable
-                ? hasApiCredential(entry, det?.apiKey)
-                    ? 'credential found'
-                    : 'experimental free models (gateway may refuse)'
-                : usable
-                    ? 'reachable'
-                    : 'NOT REACHABLE';
-        lines.push(`${index + 1}. ${position} · ${entry.label} · ${model} · ${state}`);
-    }
-    const chain = lines.join('\n');
-    // What each member DECLARES. Type-level, so no credential is needed — which
-    // is what makes it answerable about the fallback nobody has configured yet,
-    // the member most worth asking about.
-    const resolved = await resolveChainCapabilities(members);
-    const disagreements = chainCapabilityDisagreements(members, resolved);
-    const accepted = read.prefs.allowCapabilityMismatch === true;
-    const unreadable = unresolvedMembers(members, resolved);
-    const primaryUnreadable = resolved[0]?.kind === 'unresolved';
-    const sections = [chain];
-    if (disagreements.length > 0) {
-        sections.push(accepted
-            ? 'The members declare different capabilities, and you have accepted that:'
-            : 'The members declare different capabilities, so a session will be REFUSED:', ...disagreements.map((d) => `  - ${d.sentence}`));
-    }
-    if (unreadable.length > 0) {
-        // Kept separate from the disagreements above, for the reason the session
-        // keeps them separate: a member whose declaration could not be read is not
-        // a member that disagrees, and reporting it as one would name a conflict
-        // nobody established.
-        sections.push('Could not read what these members declare:', ...unreadable.map((line) => `  - ${line}`));
-    }
-    const message = sections.join('\n');
-    // Ordered by what stops a turn. An unaccepted disagreement and an unusable
-    // primary both mean no session starts at all; everything else leaves namzu
-    // working with less than the operator declared.
-    if (disagreements.length > 0 && !accepted) {
-        return {
-            status: 'fail',
-            message: `provider chain cannot be honoured as written:\n${message}`,
-            remediation: 'Drop the member that disagrees, or set "allowCapabilityMismatch": true in your preferences to accept the limitation. namzu will not choose between advertising abilities a fallback lacks and costing your primary a capability on every turn.',
-        };
-    }
-    if (primaryUnusable || primaryUnreadable) {
-        return {
-            status: 'fail',
-            message: `${unusable} of ${members.length} chain member(s) cannot be used:\n${message}`,
-            remediation: primaryUnusable
-                ? 'The primary provider has no usable credential, so no turn can start. Set its key, or run `namzu` to pick a provider that has one.'
-                : 'The primary provider could not be loaded, so no turn can start. Run `namzu` to pick a provider that can.',
-        };
-    }
-    if (unusable > 0 || unreadable.length > 0 || disagreements.length > 0 || anonymousZen) {
-        return {
-            // Anonymous Zen may be refused at inference time even when its model
-            // catalogue answers. That is unverified, not a failed credential check.
-            status: 'warn',
-            message: unusable > 0
-                ? `${unusable} of ${members.length} chain member(s) cannot be used:\n${message}`
-                : anonymousZen
-                    ? `provider chain configured, with experimental free-model access:\n${message}`
-                    : `provider chain usable, with limitations:\n${message}`,
-            remediation: anonymousZen
-                ? 'Zen free models are experimental; the gateway may refuse direct Namzu requests. OpenCode installation is recommended for its own client. If a turn is refused, configure OPENCODE_API_KEY or choose another provider.'
-                : unusable > 0
-                    ? 'The primary still works, so turns will start. But a fallback with no credential is not a fallback — set its key, or take it out of the chain.'
-                    : 'The primary still works. A fallback that declares less than your primary will serve shorter or less capable turns if the chain ever falls over to it.',
-        };
-    }
-    return {
-        status: 'pass',
-        message: members.length === 1
-            ? `1 provider configured (no fallback):\n${message}`
-            : `${members.length} providers configured, in order:\n${message}`,
-    };
-}
-export const providerChainCheck = {
-    id: 'providers.chain',
-    category: 'providers',
-    run: (ctx) => describeProviderChain({ env: ctx.env }),
-};
-//# sourceMappingURL=chain.js.map

package/dist/doctor/checks/chain.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../../src/doctor/checks/chain.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,wCAAwC,CAAA;AAC/C,OAAO,EACN,4BAA4B,EAC5B,iBAAiB,GACjB,MAAM,oDAAoD,CAAA;AAC3D,OAAO,EAAwB,iBAAiB,EAAE,MAAM,0CAA0C,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAA;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAA;AAY5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,UAAqC,EAAE;IAEvC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1C,IAAI,IAAwC,CAAA;IAC5C,IAAI,CAAC;QACJ,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kBAAkB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YACtF,WAAW,EAAE,oEAAoE;SACjF,CAAA;IACF,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,EAAE;QACF,kEAAkE;QAClE,gEAAgE;QAChE,0EAA0E;QAC1E,kEAAkE;QAClE,qEAAqE;QACrE,QAAQ;QACR,OAAO;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,iCAAiC,IAAI,kBAAkB;YAChE,WAAW,EAAE,oEAAoE;SACjF,CAAA;IACF,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,4BAA4B,IAAI,CAAC,MAAM,EAAE;YAClD,WAAW,EAAE,uDAAuD;SACpE,CAAA;IACF,CAAC;IAED,IAAI,QAAuD,CAAA;IAC3D,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,iBAAiB,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uEAAuE;QACvE,iEAAiE;QACjE,iBAAiB;QACjB,OAAO;YACN,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,yDACR,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChD,EAAE;SACF,CAAA;IACF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAA;IACpC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,eAAe,GAAG,KAAK,CAAA;IAC3B,IAAI,YAAY,GAAG,KAAK,CAAA;IAExB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1C,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAA;QAC9D,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,YAAY,kBAAkB,CAAA;QACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;QACtF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7E,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;YAAE,YAAY,GAAG,IAAI,CAAA;QAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,QAAQ,EAAE,CAAA;YACV,IAAI,KAAK,KAAK,CAAC;gBAAE,eAAe,GAAG,IAAI,CAAA;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ;YACrB,CAAC,CAAC,MAAM;gBACP,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,eAAe;YAClB,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,MAAM;gBAC7B,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;oBACrC,CAAC,CAAC,kBAAkB;oBACpB,CAAC,CAAC,+CAA+C;gBAClD,CAAC,CAAC,MAAM;oBACP,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,eAAe,CAAA;QACpB,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,KAAK,QAAQ,MAAM,KAAK,CAAC,KAAK,MAAM,KAAK,MAAM,KAAK,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE9B,4EAA4E;IAC5E,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAA;IACxD,MAAM,aAAa,GAAG,4BAA4B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,KAAK,IAAI,CAAA;IAC5D,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACvD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,YAAY,CAAA;IAE5D,MAAM,QAAQ,GAAa,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CACZ,QAAQ;YACP,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,2EAA2E,EAC9E,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAChD,CAAA;IACF,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,sBAAsB;QACtB,QAAQ,CAAC,IAAI,CACZ,4CAA4C,EAC5C,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAC1C,CAAA;IACF,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEnC,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kDAAkD,OAAO,EAAE;YACpE,WAAW,EACV,gPAAgP;SACjP,CAAA;IACF,CAAC;IACD,IAAI,eAAe,IAAI,iBAAiB,EAAE,CAAC;QAC1C,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,OAAO,OAAO,CAAC,MAAM,qCAAqC,OAAO,EAAE;YACvF,WAAW,EAAE,eAAe;gBAC3B,CAAC,CAAC,mIAAmI;gBACrI,CAAC,CAAC,0GAA0G;SAC7G,CAAA;IACF,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;QACvF,OAAO;YACN,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EACN,QAAQ,GAAG,CAAC;gBACX,CAAC,CAAC,GAAG,QAAQ,OAAO,OAAO,CAAC,MAAM,qCAAqC,OAAO,EAAE;gBAChF,CAAC,CAAC,YAAY;oBACb,CAAC,CAAC,oEAAoE,OAAO,EAAE;oBAC/E,CAAC,CAAC,6CAA6C,OAAO,EAAE;YAC3D,WAAW,EAAE,YAAY;gBACxB,CAAC,CAAC,uNAAuN;gBACzN,CAAC,CAAC,QAAQ,GAAG,CAAC;oBACb,CAAC,CAAC,+IAA+I;oBACjJ,CAAC,CAAC,uJAAuJ;SAC3J,CAAA;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,MAAM;QACd,OAAO,EACN,OAAO,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,CAAC,yCAAyC,OAAO,EAAE;YACpD,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,qCAAqC,OAAO,EAAE;KACnE,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAgB;IAC9C,EAAE,EAAE,iBAAiB;IACrB,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,CAAC,GAAG,EAA8B,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;CACjF,CAAA"}

package/dist/doctor/checks/credentials.js

@@ -1,98 +0,0 @@
-import { hasApiCredential } from '../../integrations/providers/access.js';
-import { discoverProviders } from '../../integrations/providers/discover.js';
-import { claudeCredentialSearchPaths as sessionSearchPaths, wslWindowsHome, } from '../../integrations/providers/harness-credentials.js';
-import { KEYCHAIN_SERVICE } from '../../integrations/providers/keychain.js';
-function missingClaudeSessionNote(env, windowsHome) {
-    const paths = sessionSearchPaths(undefined, env, windowsHome);
-    const keychain = process.platform === 'darwin' && !env.CLAUDE_CONFIG_DIR
-        ? ` and macOS Keychain service ${KEYCHAIN_SERVICE}`
-        : '';
-    return `Claude Code session not detected; checked ${paths.join(', ')}${keychain}. Desktop sign-in does not guarantee a reusable Claude Code CLI session; Namzu does not read Desktop's credential store. Sign in to the standalone Claude Code CLI, or run \`namzu login claude\`.`;
-}
-/**
- * Which credential sources namzu actually scanned, and what each yielded.
- *
- * This check exists because a source was *removed*. namzu used to read the
- * secrets file of an external peer daemon it integrated with, and a user could
- * have a working namzu with no environment variable set anywhere. When that
- * integration went, their credential stopped being found — and the failure is
- * an absence, not an error: the picker simply opens as though they never had
- * one.
- *
- * `doctor` is the command someone runs when a credential stops being found, so
- * the sentence explaining it does work here. Anywhere else it would sit where
- * nobody looks.
- *
- * The list below is not written down twice: it is derived from what discovery
- * returned, so it cannot drift from what discovery does.
- */
-export const credentialSourcesCheck = {
-    id: 'providers.credentials',
-    category: 'providers',
-    run: async (ctx) => {
-        const env = ctx.env;
-        // Use one paired Windows home for discovery and its diagnostic, so the
-        // reported paths are exactly the paths the credential readers checked.
-        const windowsHome = wslWindowsHome(env);
-        let detected;
-        try {
-            detected = await discoverProviders({ env, windowsHome });
-        }
-        catch (err) {
-            // Discovery is documented as non-throwing; if that ever stops being
-            // true, say which step failed rather than reporting "no credentials".
-            return {
-                status: 'inconclusive',
-                message: `credential discovery failed: ${err instanceof Error ? err.message : String(err)}`,
-            };
-        }
-        const missingClaude = !detected.some((provider) => provider.entry.id === 'anthropic');
-        const missingNote = missingClaude ? missingClaudeSessionNote(env, windowsHome) : '';
-        if (detected.length === 0) {
-            return {
-                status: 'warn',
-                message: `no LLM credential found\n${missingNote}`,
-                remediation: 'Namzu no longer reads the secrets file. It first reuses current Claude and Codex sessions on this device, then subscriptions signed in with `namzu login claude|codex`. API keys remain optional alternatives through ANTHROPIC_API_KEY or OPENAI_API_KEY; local Ollama and LM Studio servers are also detected.',
-            };
-        }
-        const lines = detected.map((d) => {
-            switch (d.source.kind) {
-                case 'env':
-                    if (d.entry.id === 'zen' && !hasApiCredential(d.entry, d.apiKey))
-                        return `${d.entry.id} (env · ${d.source.envName}=public; free models experimental)`;
-                    return `${d.entry.id} (env · ${d.source.envName})`;
-                case 'public':
-                    return `${d.entry.id} (experimental free models · gateway may refuse)`;
-                case 'opencode-file':
-                    return `${d.entry.id} (OpenCode API key · ${d.source.path})`;
-                case 'keychain':
-                    return `${d.entry.id} (keychain · ${d.source.service})`;
-                case 'claude-file':
-                    return `${d.entry.id} (Claude session · ${d.source.path})`;
-                case 'gemini-file':
-                    return `${d.entry.id} (Gemini session · ${d.source.path})`;
-                case 'stored-gemini-key':
-                    return `${d.entry.id} (saved Gemini API key · ${d.source.path})`;
-                case 'codex-file':
-                    return `${d.entry.id} (Codex session · ${d.source.path})`;
-                case 'stored':
-                    return `${d.entry.id} (signed in · ${d.source.path})`;
-                case 'probe':
-                    return `${d.entry.id} (local · ${d.source.url.replace(/^https?:\/\//, '')})`;
-                case 'session':
-                    return `${d.entry.id} (typed · current session)`;
-            }
-        });
-        const onlyAnonymousZen = detected.every((d) => d.entry.id === 'zen' && !hasApiCredential(d.entry, d.apiKey));
-        return {
-            status: onlyAnonymousZen ? 'warn' : 'pass',
-            message: `${detected.length} provider source(s) discovered: ${lines.join(', ')}${missingNote ? `\n${missingNote}` : ''}`,
-            ...(onlyAnonymousZen
-                ? {
-                    remediation: 'Zen free models are experimental; the gateway may refuse direct Namzu requests. OpenCode installation is recommended for its own client. If a turn is refused, configure OPENCODE_API_KEY or choose another provider.',
-                }
-                : {}),
-        };
-    },
-};
-//# sourceMappingURL=credentials.js.map

package/dist/doctor/checks/credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../src/doctor/checks/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAA;AAC5E,OAAO,EACN,2BAA2B,IAAI,kBAAkB,EACjD,cAAc,GACd,MAAM,qDAAqD,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAA;AAE3E,SAAS,wBAAwB,CAAC,GAAsB,EAAE,WAA0B;IACnF,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IAC7D,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,iBAAiB;QACtD,CAAC,CAAC,+BAA+B,gBAAgB,EAAE;QACnD,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,oMAAoM,CAAA;AACpR,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAgB;IAClD,EAAE,EAAE,uBAAuB;IAC3B,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,KAAK,EAAE,GAAG,EAA8B,EAAE;QAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAwB,CAAA;QACxC,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,QAAuD,CAAA;QAC3D,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,oEAAoE;YACpE,sEAAsE;YACtE,OAAO;gBACN,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC3F,CAAA;QACF,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,WAAW,CAAC,CAAA;QACrF,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,4BAA4B,WAAW,EAAE;gBAClD,WAAW,EACV,kTAAkT;aACnT,CAAA;QACF,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACvB,KAAK,KAAK;oBACT,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;wBAC/D,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,oCAAoC,CAAA;oBACpF,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,CAAA;gBACnD,KAAK,QAAQ;oBACZ,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,kDAAkD,CAAA;gBACvE,KAAK,eAAe;oBACnB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;gBAC7D,KAAK,UAAU;oBACd,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,CAAA;gBACxD,KAAK,aAAa;oBACjB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;gBAC3D,KAAK,aAAa;oBACjB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;gBAC3D,KAAK,mBAAmB;oBACvB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;gBACjE,KAAK,YAAY;oBAChB,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;gBAC1D,KAAK,QAAQ;oBACZ,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;gBACtD,KAAK,OAAO;oBACX,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,GAAG,CAAA;gBAC7E,KAAK,SAAS;oBACb,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,4BAA4B,CAAA;YAClD,CAAC;QACF,CAAC,CAAC,CAAA;QACF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CACnE,CAAA;QACD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC1C,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,mCAAmC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACxH,GAAG,CAAC,gBAAgB;gBACnB,CAAC,CAAC;oBACA,WAAW,EACV,uNAAuN;iBACxN;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CAAA;IACF,CAAC;CACD,CAAA"}

package/dist/doctor/checks/index.js

@@ -1,72 +0,0 @@
-import { capabilityCheckId } from '../../context/capabilities.js';
-import { browserEngineCheck } from './browser.js';
-import { providerChainCheck } from './chain.js';
-import { credentialSourcesCheck } from './credentials.js';
-import { invariantsCheck } from './invariants.js';
-import { loggingPipelineCheck } from './logging.js';
-import { providersRegisteredCheck } from './providers.js';
-import { cwdWritableCheck, tmpdirWritableCheck } from './runtime.js';
-import { sandboxPlatformCheck } from './sandbox.js';
-import { schedulerCheck } from './scheduler.js';
-import { describeInstalledPackage, telemetryInstalledCheck } from './telemetry.js';
-import { vaultRegisteredCheck } from './vault.js';
-/**
- * Build an `installed` check for one optional package, over the same
- * absent/present/broken mapping `telemetryInstalledCheck` already used.
- *
- * `telemetryInstalledCheck` keeps its own hand-written definition below
- * rather than being rebuilt through this factory — it shipped first, and
- * `doctor/checks/__tests__/telemetry.test.ts` already exercises that exact
- * object with zero edits required by NZ-BOOT-02. A fifth optional package
- * needs one call to this factory, not a fourth hand-written check that can
- * drift from the other three.
- */
-function installedCheck(specifier, category) {
-    return {
-        id: capabilityCheckId(specifier),
-        category,
-        run: () => describeInstalledPackage(specifier),
-    };
-}
-// `sandboxPlatformCheck` already owns the `sandbox` category for a different
-// question (does THIS PLATFORM enforce isolation); this check asking IS THE
-// PACKAGE HERE fits the same category. `DoctorCategory` has no `files` or
-// `computer-use` member, and widening that union is an SDK type change this
-// task does not make, so those two register under `custom` — the category
-// the registry's own tests already use for exactly this situation.
-export const sandboxInstalledCheck = installedCheck('@namzu/sandbox', 'sandbox');
-export const filesInstalledCheck = installedCheck('@namzu/files', 'custom');
-export const computerUseInstalledCheck = installedCheck('@namzu/computer-use', 'custom');
-export const browserInstalledCheck = installedCheck('@namzu/browser', 'custom');
-// NOTE the fix versus the original submission: sandboxInstalledCheck /
-// filesInstalledCheck / computerUseInstalledCheck are NOT repeated here.
-// They already carry their own `export` keyword above; naming them again in
-// this aggregation block is a duplicate-export declaration and fails
-// `tsc --build` with TS2323/TS2484 (confirmed by building this exact file).
-export { browserEngineCheck, credentialSourcesCheck, providerChainCheck, providersRegisteredCheck, cwdWritableCheck, tmpdirWritableCheck, invariantsCheck, loggingPipelineCheck, sandboxPlatformCheck, schedulerCheck, telemetryInstalledCheck, vaultRegisteredCheck, };
-export const builtInDoctorChecks = [
-    sandboxPlatformCheck,
-    cwdWritableCheck,
-    tmpdirWritableCheck,
-    providersRegisteredCheck,
-    credentialSourcesCheck,
-    // After the credential scan: this one reports which of the credentials that
-    // found are actually WIRED INTO the chain, which only reads sensibly once
-    // the operator has seen what was found.
-    providerChainCheck,
-    vaultRegisteredCheck,
-    sandboxInstalledCheck,
-    filesInstalledCheck,
-    computerUseInstalledCheck,
-    browserInstalledCheck,
-    // After the package check: which browser it would drive here, and how.
-    browserEngineCheck,
-    telemetryInstalledCheck,
-    schedulerCheck,
-    // Last, deliberately: it reports what the pipeline did to the records
-    // every check above it just produced, so running it first would report a
-    // process that had barely logged anything yet.
-    loggingPipelineCheck,
-    invariantsCheck,
-];
-//# sourceMappingURL=index.js.map

package/dist/doctor/checks/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/doctor/checks/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAE,QAAiC;IAC3E,OAAO;QACN,EAAE,EAAE,iBAAiB,CAAC,SAAS,CAAC;QAChC,QAAQ;QACR,GAAG,EAAE,GAA+B,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC;KAC1E,CAAA;AACF,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAgB,cAAc,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAgB,cAAc,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;AACxF,MAAM,CAAC,MAAM,yBAAyB,GAAgB,cAAc,CACnE,qBAAqB,EACrB,QAAQ,CACR,CAAA;AACD,MAAM,CAAC,MAAM,qBAAqB,GAAgB,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;AAE5F,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAC5E,OAAO,EACN,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,uBAAuB,EACvB,oBAAoB,GACpB,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IAC1D,oBAAoB;IACpB,gBAAgB;IAChB,mBAAmB;IACnB,wBAAwB;IACxB,sBAAsB;IACtB,4EAA4E;IAC5E,0EAA0E;IAC1E,wCAAwC;IACxC,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,yBAAyB;IACzB,qBAAqB;IACrB,uEAAuE;IACvE,kBAAkB;IAClB,uBAAuB;IACvB,cAAc;IACd,sEAAsE;IACtE,yEAAyE;IACzE,+CAA+C;IAC/C,oBAAoB;IACpB,eAAe;CACf,CAAA"}

package/dist/doctor/checks/invariants.js

@@ -1,79 +0,0 @@
-import { invariants } from '@namzu/sdk';
-function label(row) {
-    return `${row.id} (${row.violations} violation${row.violations === 1 ? '' : 's'})`;
-}
-/**
- * Evaluate every invariant `registry` holds and fold the outcomes, plus each
- * invariant's own violation counter, into one doctor row.
- *
- * Exported separately from the `DoctorCheck` — same reasoning as
- * `describeInstalledPackage` on the telemetry check — so a test can drive a
- * SCOPED registry directly, rather than mutating the process-wide singleton
- * every other test also reads. The check itself is still exercised through
- * `invariantsCheck.run`, because a helper proven in isolation says nothing
- * about whether the check reaches it.
- *
- * Every invariant is evaluated with `ctx: undefined`. `namzu doctor` runs
- * with no live turn and no candidate compaction reduction — there is nothing
- * a real invariant's check could read that is specific to one turn — so
- * `undefined` is the honest context, not a shortcut: each check registered
- * against it is written to answer `unknown` rather than guess (see
- * `compaction.ts` and `claim-disk.ts` in `@namzu/sdk`), and this row reports
- * that state rather than papering over it as a pass.
- */
-export async function describeInvariants(registry) {
-    const ids = registry.listIds();
-    if (ids.length === 0) {
-        return { status: 'skipped', message: 'no invariants registered' };
-    }
-    const rows = await Promise.all(ids.map(async (id) => ({
-        id,
-        outcome: await registry.evaluate(id, undefined),
-        violations: registry.violationCount(id),
-    })));
-    const violated = rows.filter((r) => r.outcome.state === 'violated');
-    const unknown = rows.filter((r) => r.outcome.state === 'unknown');
-    if (violated.length > 0) {
-        const detail = violated
-            .map((r) => (r.outcome.state === 'violated' ? `${label(r)}: ${r.outcome.detail}` : label(r)))
-            .join('; ');
-        return {
-            status: 'fail',
-            message: `${violated.length}/${ids.length} invariant(s) violated — ${detail}`,
-            remediation: 'Check the warn/error logs at the module that registered the violated invariant.',
-        };
-    }
-    if (unknown.length > 0) {
-        const names = unknown.map(label).join(', ');
-        // `skipped`, not `inconclusive`, and the difference is the whole
-        // behaviour of this row. `inconclusive` maps to exit 69 in
-        // `doctor/registry.ts` and means "I asked and could not establish an
-        // answer" — a real signal that something is wrong with the check
-        // itself. A runtime invariant outside a live turn is a different thing:
-        // the question has no subject yet, every registered check is written
-        // to answer `unknown` here on purpose, and so this state is reached on
-        // EVERY doctor run. Reporting it as inconclusive made `namzu doctor`
-        // exit 69 unconditionally, which retires the one code that was
-        // supposed to mean something.
-        //
-        // `skipped` is not "satisfied" either — the summary counts it
-        // separately from `pass`, and the message still names which invariants
-        // went unevaluated and how many violations each has accumulated. The
-        // violation counters above are what actually carry a live turn's
-        // findings back to this row.
-        return {
-            status: 'skipped',
-            message: `${unknown.length}/${ids.length} invariant(s) have no subject outside a live turn: ${names}`,
-        };
-    }
-    return {
-        status: 'pass',
-        message: `${ids.length} invariant(s) hold: ${rows.map(label).join(', ')}`,
-    };
-}
-export const invariantsCheck = {
-    id: 'runtime.invariants',
-    category: 'runtime',
-    run: () => describeInvariants(invariants),
-};
-//# sourceMappingURL=invariants.js.map

package/dist/doctor/checks/invariants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invariants.js","sourceRoot":"","sources":["../../../src/doctor/checks/invariants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAQvC,SAAS,KAAK,CAAC,GAAiB;IAC/B,OAAO,GAAG,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;AACnF,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAA2B;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAA;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,GAAmB,MAAM,OAAO,CAAC,GAAG,CAC7C,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE;QACF,OAAO,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;QAC/C,UAAU,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC,CACH,CAAA;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IAEjE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5F,IAAI,CAAC,IAAI,CAAC,CAAA;QACZ,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,4BAA4B,MAAM,EAAE;YAC7E,WAAW,EACV,iFAAiF;SAClF,CAAA;IACF,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,iEAAiE;QACjE,2DAA2D;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,8BAA8B;QAC9B,EAAE;QACF,8DAA8D;QAC9D,uEAAuE;QACvE,qEAAqE;QACrE,iEAAiE;QACjE,6BAA6B;QAC7B,OAAO;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,sDAAsD,KAAK,EAAE;SACrG,CAAA;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,uBAAuB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACzE,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAgB;IAC3C,EAAE,EAAE,oBAAoB;IACxB,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,GAA+B,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC;CACrE,CAAA"}

package/dist/doctor/checks/logging.js

@@ -1,69 +0,0 @@
-import { getLogCounters } from '@namzu/sdk';
-/**
- * What the log pipeline actually did to this process's records.
- *
- * `LogSinkCounters` has counted five things on every record since the sink
- * seam landed — dropped, redacted, attributes shed, values truncated,
- * records shrunk — and until this check nothing read any of them. That is
- * `declared-but-undriven` with an unusually direct tell: the comment above
- * `createLogger` promised "a caller that wants to observe the pipeline — a
- * test, `namzu doctor` later — reads `.counters` off the same reference",
- * and `namzu doctor` did not. This file is that comment coming true.
- *
- * The counters only became readable as part of this change. They lived on
- * whatever logger `createLogger` happened to build, and `getRootLogger`
- * builds a new one on every call, so each count died with the expression
- * that produced it. `installProcessSink` now owns one set for the process
- * and every logger routed through it adds to those totals.
- */
-/** Field-by-field, so a new counter cannot be silently left unreported. */
-const FIELDS = [
-    'dropped',
-    'redacted',
-    'attributesDropped',
-    'valuesTruncated',
-    'recordsTruncated',
-];
-function summarise(counters) {
-    return FIELDS.map((f) => `${f}=${counters[f]}`).join(' ');
-}
-/**
- * Exported separately from the check so all three outcomes can be driven
- * directly, the same arrangement `describeInstalledPackage` uses: a check
- * whose only entry point is `run` can be tested for the state the machine
- * happens to be in and nothing else.
- */
-export function describeLogPipeline(counters) {
-    if (counters === undefined) {
-        // NOT `pass`, and not five zeros dressed up as one. Nothing measured
-        // these records, so "nothing was dropped" is a claim this check has no
-        // standing to make — and it is the claim a reader would take from a
-        // green row. The CLI installs a sink during boot, so reaching here at
-        // all means that boot step did not run.
-        return {
-            status: 'inconclusive',
-            message: 'no log sink installed — records reach stderr through the legacy path, where nothing is counted, redacted or size-capped',
-            remediation: 'A host owns its log destination: call installProcessSink(sink, level) during boot. The CLI does this itself, so seeing this from `namzu doctor` means that step did not run.',
-        };
-    }
-    if (counters.dropped > 0) {
-        return {
-            status: 'fail',
-            message: `${counters.dropped} log record(s) never reached the sink — ${summarise(counters)}`,
-            remediation: 'A record is counted dropped when the installed sink threw, or when the sink is NOOP_SINK. Check the sink passed to installProcessSink: a sink that throws is caught so one bad record cannot fail a turn, which is exactly why the count is the only place this shows up.',
-        };
-    }
-    return {
-        status: 'pass',
-        message: `log pipeline live, nothing dropped — ${summarise(counters)}`,
-    };
-}
-export const loggingPipelineCheck = {
-    id: 'logging.pipeline',
-    // `DoctorCategory` has no `logging` member, and widening that union is an
-    // SDK type change this check does not need — the same call the optional
-    // package probes made for `files` and `computer-use`.
-    category: 'custom',
-    run: () => Promise.resolve(describeLogPipeline(getLogCounters())),
-};
-//# sourceMappingURL=logging.js.map

package/dist/doctor/checks/logging.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../src/doctor/checks/logging.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C;;;;;;;;;;;;;;;;GAgBG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,GAAuC;IAClD,SAAS;IACT,UAAU;IACV,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;CAClB,CAAA;AAED,SAAS,SAAS,CAAC,QAAyB;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAqC;IACxE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,sEAAsE;QACtE,wCAAwC;QACxC,OAAO;YACN,MAAM,EAAE,cAAc;YACtB,OAAO,EACN,yHAAyH;YAC1H,WAAW,EACV,8KAA8K;SAC/K,CAAA;IACF,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,2CAA2C,SAAS,CAAC,QAAQ,CAAC,EAAE;YAC5F,WAAW,EACV,2QAA2Q;SAC5Q,CAAA;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,wCAAwC,SAAS,CAAC,QAAQ,CAAC,EAAE;KACtE,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,0EAA0E;IAC1E,wEAAwE;IACxE,sDAAsD;IACtD,QAAQ,EAAE,QAAQ;IAClB,GAAG,EAAE,GAA+B,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,cAAc,EAAE,CAAC,CAAC;CAC7F,CAAA"}

package/dist/doctor/checks/providers.js

@@ -1,30 +0,0 @@
-/**
- * Built-in provider probe is intentionally `skipped` in v1.
- *
- * `skipped` rather than `inconclusive` for the reason spelled out on
- * `vault.registered`: there is no discovery mechanism here to fail, so this is
- * a permanent absence of a subject rather than a question that went unanswered,
- * and only the latter is worth an exit code.
- *
- * Provider auto-discovery requires walking `ProviderRegistry`, which is
- * a module-private map populated by side-effecting calls in consumer
- * code. Standalone `runDoctor()` invoked from a different process won't
- * see those registrations. Two consumer paths:
- *
- * 1. Consumers running doctor in their own process via `runDoctor()`
- *    can register a custom provider check that iterates their
- *    `ProviderRegistry.getAll()` and calls `provider.doctorCheck?.()`
- *    on each.
- * 2. The standalone `namzu doctor` CLI command (Phase 5) inherits
- *    this same behavior — it can only check providers that are visible
- *    to its process. Plugin-registered providers ARE visible.
- */
-export const providersRegisteredCheck = {
-    id: 'providers.registered',
-    category: 'providers',
-    run: async () => ({
-        status: 'skipped',
-        message: 'no provider auto-discovery in v1; register a provider check via registerDoctorCheck for your specific provider configuration (call provider.doctorCheck?() per registered provider)',
-    }),
-};
-//# sourceMappingURL=providers.js.map

package/dist/doctor/checks/providers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../src/doctor/checks/providers.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgB;IACpD,EAAE,EAAE,sBAAsB;IAC1B,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,KAAK,IAAgC,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,SAAS;QACjB,OAAO,EACN,qLAAqL;KACtL,CAAC;CACF,CAAA"}