@namzu/cli 35.0.0 → 36.0.0

package/dist/doctor/checks/runtime.js

@@ -1,40 +0,0 @@
-import { constants, access } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-export const cwdWritableCheck = {
-    id: 'runtime.cwd-writable',
-    category: 'runtime',
-    run: async (ctx) => {
-        try {
-            await access(ctx.cwd, constants.W_OK);
-            return { status: 'pass', message: `cwd writable: ${ctx.cwd}` };
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            return {
-                status: 'fail',
-                message: `cwd not writable: ${ctx.cwd} (${message})`,
-                remediation: 'Run from a directory you have write access to, or pass an explicit cwd.',
-            };
-        }
-    },
-};
-export const tmpdirWritableCheck = {
-    id: 'runtime.tmpdir-writable',
-    category: 'runtime',
-    run: async () => {
-        const dir = tmpdir();
-        try {
-            await access(dir, constants.W_OK);
-            return { status: 'pass', message: `tmpdir writable: ${dir}` };
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            return {
-                status: 'fail',
-                message: `tmpdir not writable: ${dir} (${message})`,
-                remediation: 'Set TMPDIR / TMP / TEMP to a writable location.',
-            };
-        }
-    },
-};
-//# sourceMappingURL=runtime.js.map

package/dist/doctor/checks/runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/doctor/checks/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAIhC,MAAM,CAAC,MAAM,gBAAgB,GAAgB;IAC5C,EAAE,EAAE,sBAAsB;IAC1B,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,KAAK,EAAE,GAAuB,EAA8B,EAAE;QAClE,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,CAAC,GAAG,EAAE,EAAE,CAAA;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,qBAAqB,GAAG,CAAC,GAAG,KAAK,OAAO,GAAG;gBACpD,WAAW,EAAE,yEAAyE;aACtF,CAAA;QACF,CAAC;IACF,CAAC;CACD,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAgB;IAC/C,EAAE,EAAE,yBAAyB;IAC7B,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,KAAK,IAAgC,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;QACpB,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAA;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,wBAAwB,GAAG,KAAK,OAAO,GAAG;gBACnD,WAAW,EAAE,iDAAiD;aAC9D,CAAA;QACF,CAAC;IACF,CAAC;CACD,CAAA"}

package/dist/doctor/checks/sandbox.js

@@ -1,76 +0,0 @@
-import { LocalSandboxProvider, SANDBOX_ISOLATION_CONTROLS, isolationOf } from '@namzu/sdk';
-/**
- * Report the confinement this host will ACTUALLY give, by asking the
- * thing that decides.
- *
- * The check used to switch on `process.platform` and answer from a table
- * written beside it. That table drifted from the runtime in both
- * directions: it called the Linux probe unimplemented when the provider
- * has probed real `unshare` flags for some time, and it told a Windows
- * operator that sandboxing "is not supported" full stop — true of the
- * in-process tier, and silent about the container tier that does run
- * there. An operator reading a health check is deciding whether to trust
- * the boundary, and a second opinion derived from the OS name is the
- * wrong thing to hand them.
- *
- * Constructing the provider is the probe: it runs the real spawn
- * arguments and reports which controls survived. No isolation is
- * REQUIRED here, so the construction cannot refuse — this asks what is
- * available, it does not ask for anything.
- */
-/** A logger that says nothing: the check reports, the probe should not. */
-const quietLogger = (() => {
-    const noop = () => { };
-    const self = { info: noop, warn: noop, error: noop, debug: noop };
-    return { ...self, child: () => self };
-})();
-const listControls = (report, want) => SANDBOX_ISOLATION_CONTROLS.filter((control) => report[control] === want).join(', ');
-/**
- * Turn a detected environment into the verdict an operator reads.
- *
- * Separate from the probe because the probe answers for THIS host, and
- * every branch below is about a host the machine running the tests is
- * not. Asserting on the check as a whole can only ever exercise the one
- * outcome the developer's own machine produces, which is how a report
- * for the other tiers rots unnoticed.
- */
-export function describeIsolationHealth(environment) {
-    const report = isolationOf(environment);
-    const enforced = listControls(report, true);
-    const missing = listControls(report, false);
-    if (missing.length === 0) {
-        return { status: 'pass', message: `${environment} enforces ${enforced}` };
-    }
-    if (enforced.length === 0) {
-        // Not `fail`: nothing is broken. The host simply has no in-process
-        // confinement, which is a fact an operator has to decide about
-        // rather than an error to fix.
-        return {
-            status: 'warn',
-            message: `${environment} enforces nothing — commands run unconfined`,
-            remediation: 'Run the agent inside a container per task (@namzu/sandbox, container tier), or pass requireIsolation so a turn refuses rather than proceeding unconfined.',
-        };
-    }
-    return {
-        status: 'warn',
-        message: `${environment} enforces ${enforced} but not ${missing}`,
-        remediation: 'Pass requireIsolation with the controls you depend on, so a host that cannot enforce one refuses instead of downgrading quietly.',
-    };
-}
-export const sandboxPlatformCheck = {
-    id: 'sandbox.platform',
-    category: 'sandbox',
-    run: async () => {
-        try {
-            return describeIsolationHealth(new LocalSandboxProvider(quietLogger).environment);
-        }
-        catch (error) {
-            return {
-                status: 'fail',
-                message: `sandbox probe failed: ${error instanceof Error ? error.message : String(error)}`,
-                remediation: 'The local sandbox provider could not determine what this host enforces. Treat commands as unconfined until this is resolved.',
-            };
-        }
-    },
-};
-//# sourceMappingURL=sandbox.js.map

package/dist/doctor/checks/sandbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/doctor/checks/sandbox.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE1F;;;;;;;;;;;;;;;;;;GAkBG;AAEH,2EAA2E;AAC3E,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;IACzB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACrB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACjE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAuB,CAAA;AAC3D,CAAC,CAAC,EAAE,CAAA;AAEJ,MAAM,YAAY,GAAG,CAAC,MAAgD,EAAE,IAAa,EAAE,EAAE,CACxF,0BAA0B,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEpF;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA+B;IACtE,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,aAAa,QAAQ,EAAE,EAAE,CAAA;IAC1E,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,mEAAmE;QACnE,+DAA+D;QAC/D,+BAA+B;QAC/B,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,WAAW,6CAA6C;YACpE,WAAW,EACV,2JAA2J;SAC5J,CAAA;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,GAAG,WAAW,aAAa,QAAQ,YAAY,OAAO,EAAE;QACjE,WAAW,EACV,kIAAkI;KACnI,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,SAAS;IACnB,GAAG,EAAE,KAAK,IAAgC,EAAE;QAC3C,IAAI,CAAC;YACJ,OAAO,uBAAuB,CAAC,IAAI,oBAAoB,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC1F,WAAW,EACV,8HAA8H;aAC/H,CAAA;QACF,CAAC;IACF,CAAC;CACD,CAAA"}

package/dist/doctor/checks/scheduler.js

@@ -1,74 +0,0 @@
-import { readFileSync, realpathSync } from 'node:fs';
-import { resolveNamzuHome } from '../../integrations/state/home.js';
-import { schedulePaths } from '../../schedule/paths.js';
-import { readManifest } from '../../schedule/service/manifest.js';
-import { listJobs } from '../../schedule/store/jobs.js';
-/**
- * The scheduler, as far as files can tell without asking a service manager:
- * whether jobs exist without a scheduler to run them, whether the installed
- * service points at a node and a CLI that still exist, and how long ago the
- * daemon last wrote its heartbeat. `namzu schedule status` asks the service
- * manager too.
- */
-export const schedulerCheck = {
-    id: 'scheduler.service',
-    category: 'runtime',
-    async run(ctx) {
-        const paths = schedulePaths(resolveNamzuHome({ env: ctx.env }));
-        let jobs = 0;
-        try {
-            jobs = listJobs(paths).jobs.filter((j) => j.state === 'active').length;
-        }
-        catch {
-            jobs = 0;
-        }
-        let manifest;
-        try {
-            manifest = readManifest(paths);
-        }
-        catch (error) {
-            return { status: 'fail', message: error instanceof Error ? error.message : String(error) };
-        }
-        if (!manifest) {
-            return jobs > 0
-                ? {
-                    status: 'warn',
-                    message: `${jobs} active scheduled job(s) and no scheduler installed; they will not run`,
-                    remediation: 'namzu schedule install',
-                }
-                : { status: 'skipped', message: 'no scheduled jobs and no scheduler installed' };
-        }
-        for (const path of [manifest.nodePath, manifest.binPath]) {
-            try {
-                realpathSync(path);
-            }
-            catch {
-                return {
-                    status: 'fail',
-                    message: `the scheduler service starts ${path}, which no longer exists`,
-                    remediation: 'namzu schedule install',
-                };
-            }
-        }
-        let age;
-        try {
-            const beat = JSON.parse(readFileSync(paths.heartbeat, 'utf8'));
-            age = beat.at ? Date.now() - Date.parse(beat.at) : undefined;
-        }
-        catch {
-            age = undefined;
-        }
-        if (age === undefined || age > 90_000) {
-            return {
-                status: 'warn',
-                message: `${manifest.name} (${manifest.platform}) is installed but the daemon has not been seen ${age === undefined ? 'yet' : `for ${Math.round(age / 1000)} s`}`,
-                remediation: 'namzu schedule status',
-            };
-        }
-        return {
-            status: 'pass',
-            message: `${manifest.name} (${manifest.platform}) running; ${jobs} active job(s)`,
-        };
-    },
-};
-//# sourceMappingURL=scheduler.js.map

package/dist/doctor/checks/scheduler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../../src/doctor/checks/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAEpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAA;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IAC1C,EAAE,EAAE,mBAAmB;IACvB,QAAQ,EAAE,SAAS;IACnB,KAAK,CAAC,GAAG,CAAC,GAAG;QACZ,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAwB,EAAE,CAAC,CAAC,CAAA;QACpF,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,CAAC;YACJ,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAA;QACvE,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,GAAG,CAAC,CAAA;QACT,CAAC;QACD,IAAI,QAAyC,CAAA;QAC7C,IAAI,CAAC;YACJ,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QAC3F,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,IAAI,GAAG,CAAC;gBACd,CAAC,CAAC;oBACA,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,GAAG,IAAI,wEAAwE;oBACxF,WAAW,EAAE,wBAAwB;iBACrC;gBACF,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAA;QAClF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACJ,YAAY,CAAC,IAAI,CAAC,CAAA;YACnB,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO;oBACN,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,gCAAgC,IAAI,0BAA0B;oBACvE,WAAW,EAAE,wBAAwB;iBACrC,CAAA;YACF,CAAC;QACF,CAAC;QACD,IAAI,GAAuB,CAAA;QAC3B,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAoB,CAAA;YACjF,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC;YACR,GAAG,GAAG,SAAS,CAAA;QAChB,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;YACvC,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,mDAAmD,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;gBACjK,WAAW,EAAE,uBAAuB;aACpC,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,cAAc,IAAI,gBAAgB;SACjF,CAAA;IACF,CAAC;CACD,CAAA"}

package/dist/doctor/checks/session-export.js

@@ -1,62 +0,0 @@
-import { describeSessionExportOff, } from '../../integrations/telemetry/session-export.js';
-/**
- * Is this machine sending conversation content anywhere?
- *
- * A doctor row rather than only a boot line, because the two answer for
- * different people at different moments: the boot narrative tells whoever
- * started the turn, and `namzu doctor` is what somebody runs when they are
- * asked "does this tool send our transcripts off the box" and need an answer
- * they can paste.
- *
- * The row is a `pass` in both directions on purpose. Export being ON is not
- * a fault — it is a configuration somebody chose — so reporting it as a
- * warning would train a reader to ignore the one row that describes their
- * data leaving. What the row owes them is the destination and the redactor
- * count, which is exactly what `describeSessionExport` already builds.
- */
-export async function describeSessionExportStatus(config, loader) {
-    const configured = config.telemetry?.sessionExport;
-    if (!configured) {
-        const off = await describeSessionExportOff(loader);
-        return {
-            status: 'pass',
-            message: off ?? 'Session export is off: telemetry.sessionExport is not configured.',
-        };
-    }
-    // The disclosure is built from the config, not from a live listener: a
-    // doctor run must be able to answer this without starting a session, and
-    // starting one to find out what it would export would be the check
-    // causing the thing it reports on.
-    const off = await describeSessionExportOff(loader);
-    if (off === null) {
-        // Configured, but the package that would do it is not installed. The
-        // run itself refuses in this state (`attachSessionExport`), and saying
-        // so here is what stops an operator discovering it at run time.
-        return {
-            status: 'fail',
-            message: `telemetry.sessionExport is configured (destination: ${configured.destination}) but "@namzu/telemetry" is not installed, so nothing would be recorded.`,
-            remediation: 'Install @namzu/telemetry, or remove telemetry.sessionExport from your config. namzu refuses to start a session in this state rather than run one whose export silently does not exist.',
-        };
-    }
-    const redactorCount = configured.redactors?.length ?? 1;
-    const typePhrase = configured.eventTypes
-        ? `${configured.eventTypes.length} event type(s)`
-        : 'every session event';
-    return {
-        status: 'pass',
-        message: `Session export is ON: ${typePhrase} is written to ${configured.destination}, with ${redactorCount} redactor(s) installed.`,
-        ...(redactorCount === 0
-            ? {
-                remediation: '`redactors: []` turns redaction off entirely — credential-shaped values in tool results will be written verbatim. Remove the key to install the shipped `secrets` redactor.',
-            }
-            : {}),
-    };
-}
-export function sessionExportCheck(config, loader) {
-    return {
-        id: 'telemetry.session-export',
-        category: 'telemetry',
-        run: () => describeSessionExportStatus(config, loader),
-    };
-}
-//# sourceMappingURL=session-export.js.map

package/dist/doctor/checks/session-export.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-export.js","sourceRoot":"","sources":["../../../src/doctor/checks/session-export.ts"],"names":[],"mappings":"AAGA,OAAO,EAEN,wBAAwB,GACxB,MAAM,gDAAgD,CAAA;AAEvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,MAAsB,EACtB,MAAwB;IAExB,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,aAAa,CAAA;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAA;QAClD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,IAAI,mEAAmE;SACnF,CAAA;IACF,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,mEAAmE;IACnE,mCAAmC;IACnC,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAClB,qEAAqE;QACrE,uEAAuE;QACvE,gEAAgE;QAChE,OAAO;YACN,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uDAAuD,UAAU,CAAC,WAAW,0EAA0E;YAChK,WAAW,EACV,wLAAwL;SACzL,CAAA;IACF,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAA;IACvD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU;QACvC,CAAC,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,gBAAgB;QACjD,CAAC,CAAC,qBAAqB,CAAA;IACxB,OAAO;QACN,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,yBAAyB,UAAU,kBAAkB,UAAU,CAAC,WAAW,UAAU,aAAa,yBAAyB;QACpI,GAAG,CAAC,aAAa,KAAK,CAAC;YACtB,CAAC,CAAC;gBACA,WAAW,EACV,6KAA6K;aAC9K;YACF,CAAC,CAAC,EAAE,CAAC;KACN,CAAA;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,MAAwB;IAClF,OAAO;QACN,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,WAAW;QACrB,GAAG,EAAE,GAA+B,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC;KAClF,CAAA;AACF,CAAC"}

package/dist/doctor/checks/telemetry.js

@@ -1,58 +0,0 @@
-import { probeOptionalPackage } from '../../context/capabilities.js';
-const TELEMETRY = '@namzu/telemetry';
-/**
- * Telemetry presence probe.
- *
- * Per ses_004 D1=B, `@namzu/telemetry` is a separate optional package.
- * This check reports whether it is installed; absence is informational
- * (not a failure). Endpoint reachability + dry-turn span export are
- * deferred to a follow-up check that the consumer can register
- * themselves once their telemetry config is known.
- *
- * The three-state resolve-then-import probe this used to do inline now
- * lives at `context/capabilities.ts` as `probeOptionalPackage` (NZ-BOOT-02),
- * extracted so the boot path can report the SAME answer about
- * `@namzu/sandbox`, `@namzu/files` and `@namzu/computer-use` that this file
- * has always given about telemetry, instead of inventing its own. What
- * stays here is the one thing the doctor still owns: turning that answer
- * into the prose and remediation a `DoctorCheckResult` carries.
- */
-/**
- * `specifier`'s `CapabilityProbe`, read as a `DoctorCheckResult`.
- *
- * Exported separately from the `DoctorCheck` so all three outcomes can be
- * asserted directly — there is no way to uninstall or break a real optional
- * package from inside a test run, so `capabilities.test.ts` drives
- * `probeOptionalPackage` with fixtures and this function's own tests only
- * need to check the mapping. The check itself is still exercised through
- * `telemetryInstalledCheck.run`, because a helper proven in isolation says
- * nothing about whether the check reaches it. Same arrangement, and the
- * same reason, as `describeProviderChain`.
- */
-export async function describeInstalledPackage(specifier) {
-    const probe = await probeOptionalPackage(specifier);
-    switch (probe.state) {
-        case 'absent':
-            return {
-                status: 'skipped',
-                message: `${specifier} not installed (optional package)`,
-            };
-        case 'present':
-            return { status: 'pass', message: `${specifier} is installed` };
-        case 'broken':
-            return {
-                status: 'fail',
-                // The reason is the whole value of separating these: "installed but
-                // will not load" sends the reader somewhere, and "not installed" would
-                // have sent them to install what is already there.
-                message: `${specifier} is installed but failed to load: ${probe.error.message}`,
-                remediation: `Reinstall ${specifier}, or remove it if you are not using it — it is optional and namzu runs without it.`,
-            };
-    }
-}
-export const telemetryInstalledCheck = {
-    id: 'telemetry.installed',
-    category: 'telemetry',
-    run: () => describeInstalledPackage(TELEMETRY),
-};
-//# sourceMappingURL=telemetry.js.map

package/dist/doctor/checks/telemetry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../../src/doctor/checks/telemetry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEpE,MAAM,SAAS,GAAG,kBAAkB,CAAA;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IAC/D,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAA;IACnD,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACZ,OAAO;gBACN,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,GAAG,SAAS,mCAAmC;aACxD,CAAA;QACF,KAAK,SAAS;YACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,eAAe,EAAE,CAAA;QAChE,KAAK,QAAQ;YACZ,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,oEAAoE;gBACpE,uEAAuE;gBACvE,mDAAmD;gBACnD,OAAO,EAAE,GAAG,SAAS,qCAAqC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC/E,WAAW,EAAE,aAAa,SAAS,oFAAoF;aACvH,CAAA;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAgB;IACnD,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,GAA+B,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC;CAC1E,CAAA"}

package/dist/doctor/checks/vault.js

@@ -1,67 +0,0 @@
-/**
- * What this machine can answer about its credentials.
- *
- * This check used to return `skipped` unconditionally, with the message
- * "no vault auto-discovery in v1" — an answer that was the same on every
- * machine, forever, which is the shape `a-check-that-cannot-fail` warns
- * about. It was honest about the world at the time: `CredentialVault` was
- * an interface nobody registered, so there was nothing to enumerate.
- *
- * There is now. The check reads what the registered providers report and
- * returns `skipped` only when NONE is registered — which is a real state a
- * host can be in, and now the only one that produces it.
- */
-/** Providers this process knows about. Registered by whoever builds them. */
-const registered = [];
-export function registerCredentialProvider(provider, label, refs) {
-    const entry = { provider, label, refs };
-    registered.push(entry);
-    return () => {
-        const i = registered.indexOf(entry);
-        if (i >= 0)
-            registered.splice(i, 1);
-    };
-}
-/** For tests, and for a host rebuilding its wiring. */
-export function clearRegisteredCredentialProviders() {
-    registered.length = 0;
-}
-export const vaultRegisteredCheck = {
-    id: 'vault.registered',
-    category: 'vault',
-    run: async () => {
-        if (registered.length === 0) {
-            // `skipped`, not `inconclusive`, and the difference is the whole
-            // point of the split: `inconclusive` means a check tried and could
-            // not answer, which is a gap in the report and carries a non-zero
-            // exit. A host that registered no provider has no subject here,
-            // and reporting that as an unanswered question would make
-            // `namzu doctor` non-zero on a perfectly healthy machine.
-            return {
-                status: 'skipped',
-                message: 'No credential provider is registered, so there is nothing to report on.',
-            };
-        }
-        const lines = [];
-        let anyConfigured = false;
-        for (const entry of registered) {
-            for (const ref of entry.refs) {
-                // `describe`, never `resolve`. This runs in a diagnostic whose
-                // output an operator pastes into an issue, and a check that
-                // read the value to report on it would be the leak.
-                const described = await entry.provider.describe(ref);
-                if (described.configured)
-                    anyConfigured = true;
-                lines.push(`${entry.label}: ${ref} — ${described.configured ? 'configured' : 'not set'}${described.source ? ` (${described.source})` : ''}, ${described.writable ? 'writable' : 'read-only'}`);
-            }
-        }
-        return {
-            // A provider registered and nothing configured is a real answer,
-            // not a failure: an operator who has not logged in yet is in a
-            // state the doctor should describe rather than complain about.
-            status: anyConfigured ? 'pass' : 'warn',
-            message: lines.join('\n'),
-        };
-    },
-};
-//# sourceMappingURL=vault.js.map

package/dist/doctor/checks/vault.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/doctor/checks/vault.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,6EAA6E;AAC7E,MAAM,UAAU,GAA+E,EAAE,CAAA;AAEjG,MAAM,UAAU,0BAA0B,CACzC,QAA4B,EAC5B,KAAa,EACb,IAAuB;IAEvB,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACvC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,OAAO,GAAG,EAAE;QACX,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACpC,CAAC,CAAA;AACF,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,kCAAkC;IACjD,UAAU,CAAC,MAAM,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,OAAO;IACjB,GAAG,EAAE,KAAK,IAAgC,EAAE;QAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,gEAAgE;YAChE,0DAA0D;YAC1D,0DAA0D;YAC1D,OAAO;gBACN,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,yEAAyE;aAClF,CAAA;QACF,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,aAAa,GAAG,KAAK,CAAA;QACzB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,+DAA+D;gBAC/D,4DAA4D;gBAC5D,oDAAoD;gBACpD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;gBACpD,IAAI,SAAS,CAAC,UAAU;oBAAE,aAAa,GAAG,IAAI,CAAA;gBAC9C,KAAK,CAAC,IAAI,CACT,GAAG,KAAK,CAAC,KAAK,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,GAC1E,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAC/C,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CACpD,CAAA;YACF,CAAC;QACF,CAAC;QAED,OAAO;YACN,iEAAiE;YACjE,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACvC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACzB,CAAA;IACF,CAAC;CACD,CAAA"}

package/dist/doctor/index.js

@@ -1,3 +0,0 @@
-export { createDoctorRegistry, doctor, DoctorRegistry, registerDoctorCheck, runDoctor, } from './registry.js';
-export { builtInDoctorChecks, cwdWritableCheck, providersRegisteredCheck, sandboxPlatformCheck, telemetryInstalledCheck, tmpdirWritableCheck, vaultRegisteredCheck, } from './checks/index.js';
-//# sourceMappingURL=index.js.map

package/dist/doctor/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/doctor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,oBAAoB,EACpB,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,SAAS,GACT,MAAM,eAAe,CAAA;AAGtB,OAAO,EACN,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,mBAAmB,CAAA"}

package/dist/doctor/registry.js

@@ -1,230 +0,0 @@
-import { SCOPE_ATTRIBUTE } from '@namzu/sdk';
-const DEFAULT_PER_CHECK_TIMEOUT_MS = 5_000;
-const DEFAULT_WALL_CLOCK_TIMEOUT_MS = 10_000;
-export class DoctorRegistry {
-    checks = new Map();
-    log;
-    setLogger(log) {
-        this.log = log.child({ [SCOPE_ATTRIBUTE]: 'doctor' });
-    }
-    register(check) {
-        if (this.checks.has(check.id)) {
-            throw new Error(`Doctor check with id "${check.id}" is already registered. Pick a different id or call clear() first.`);
-        }
-        this.checks.set(check.id, check);
-    }
-    unregister(id) {
-        return this.checks.delete(id);
-    }
-    clear() {
-        this.checks.clear();
-    }
-    list() {
-        return Array.from(this.checks.values());
-    }
-    async run(opts = {}) {
-        const ctx = buildContext(opts);
-        const perCheck = opts.perCheckTimeoutMs ?? DEFAULT_PER_CHECK_TIMEOUT_MS;
-        const wall = opts.wallClockTimeoutMs ?? DEFAULT_WALL_CLOCK_TIMEOUT_MS;
-        const signal = opts.signal;
-        const filteredChecks = opts.categories
-            ? this.list().filter((c) => opts.categories?.includes(c.category))
-            : this.list();
-        const startedAt = Date.now();
-        const completed = new Map();
-        const wallTimer = sleep(wall).then(() => 'wall-timeout');
-        // Fast-fail if already aborted before any check runs.
-        const abortPromise = signal
-            ? signal.aborted
-                ? Promise.resolve('aborted')
-                : new Promise((resolve) => {
-                    signal.addEventListener('abort', () => resolve('aborted'), {
-                        once: true,
-                    });
-                })
-            : new Promise(() => { }); // never resolves
-        const recordCompletion = (record) => {
-            // Defend against double-fire: per-check timeout race vs the check
-            // resolving, or signal-abort racing the same id. First record wins.
-            if (completed.has(record.id))
-                return;
-            completed.set(record.id, record);
-            // Fire onCheckComplete exactly once per id, isolated from the turn.
-            this.invokeCallback('onCheckComplete', () => opts.onCheckComplete?.(record));
-        };
-        const inFlight = filteredChecks.map(async (check) => {
-            // onCheckStart fires before the check's run() is invoked. Isolated.
-            this.invokeCallback('onCheckStart', () => opts.onCheckStart?.(check));
-            const t0 = Date.now();
-            const checkPromise = (async () => check.run(ctx))();
-            const timeoutPromise = sleep(perCheck).then(() => ({
-                status: 'inconclusive',
-                message: `check did not return within ${perCheck}ms`,
-            }));
-            let result;
-            try {
-                result = await Promise.race([checkPromise, timeoutPromise]);
-            }
-            catch (error) {
-                const message = error instanceof Error ? error.message : String(error);
-                this.log?.warn('doctor check threw', {
-                    'namzu.doctor.id': check.id,
-                    'namzu.doctor.message': message,
-                });
-                result = { status: 'fail', message: `check threw: ${message}` };
-            }
-            recordCompletion({
-                id: check.id,
-                category: check.category,
-                status: result.status,
-                message: result.message,
-                remediation: result.remediation,
-                durationMs: result.durationMs ?? Date.now() - t0,
-            });
-        });
-        const allChecks = Promise.all(inFlight);
-        const raceWinner = await Promise.race([allChecks, wallTimer, abortPromise]);
-        let records;
-        if (raceWinner === 'wall-timeout' || raceWinner === 'aborted') {
-            const reason = raceWinner === 'aborted'
-                ? 'aborted by signal before this check completed'
-                : `wall-clock timeout (${wall}ms) reached before this check completed`;
-            const unfinished = filteredChecks.filter((c) => !completed.has(c.id));
-            this.log?.warn(raceWinner === 'aborted' ? 'doctor aborted by signal' : 'doctor wall-clock timeout', {
-                'namzu.doctor.wall': wall,
-                'namzu.doctor.total': filteredChecks.length,
-                'namzu.doctor.unfinished': unfinished.length,
-            });
-            records = filteredChecks.map((check) => {
-                const existing = completed.get(check.id);
-                if (existing)
-                    return existing;
-                const record = {
-                    id: check.id,
-                    category: check.category,
-                    status: 'inconclusive',
-                    message: reason,
-                    durationMs: Date.now() - startedAt,
-                };
-                // Fire onCheckComplete for unfinished checks too — TUI rows
-                // flip from 'running' to 'inconclusive' instead of staying
-                // stuck. recordCompletion handles double-fire defense if the
-                // inFlight promise eventually resolves.
-                recordCompletion(record);
-                return record;
-            });
-        }
-        else {
-            // All checks finished within wall-clock budget. Read from `completed`
-            // in registration order so the report layout is deterministic.
-            records = filteredChecks.map((check) => {
-                const existing = completed.get(check.id);
-                if (existing)
-                    return existing;
-                // Belt + suspenders: if an inFlight callback somehow finished
-                // without populating `completed` (shouldn't happen), surface as
-                // inconclusive rather than throwing.
-                return {
-                    id: check.id,
-                    category: check.category,
-                    status: 'inconclusive',
-                    message: 'check resolved without producing a record (internal)',
-                    durationMs: Date.now() - startedAt,
-                };
-            });
-        }
-        return buildReport(records, opts.version ?? 'unknown');
-    }
-    /**
-     * Invoke a consumer callback (onCheckStart / onCheckComplete) with
-     * try/catch isolation. Per ses_013 C3: a throwing callback must not
-     * affect the doctor run or the final DoctorReport. Logged but
-     * swallowed.
-     */
-    invokeCallback(phase, fn) {
-        try {
-            fn();
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            this.log?.warn('doctor callback threw', {
-                'namzu.doctor.phase': phase,
-                'namzu.doctor.message': message,
-            });
-        }
-    }
-}
-export const doctor = new DoctorRegistry();
-export function createDoctorRegistry() {
-    return new DoctorRegistry();
-}
-export function registerDoctorCheck(check) {
-    doctor.register(check);
-}
-export function runDoctor(opts = {}) {
-    const registry = opts.registry ?? doctor;
-    return registry.run({
-        categories: opts.categories,
-        perCheckTimeoutMs: opts.perCheckTimeoutMs,
-        wallClockTimeoutMs: opts.wallClockTimeoutMs,
-        cwd: opts.cwd,
-        env: opts.env,
-        projectRoot: opts.projectRoot,
-        version: opts.version,
-        onCheckStart: opts.onCheckStart,
-        onCheckComplete: opts.onCheckComplete,
-        signal: opts.signal,
-    });
-}
-function buildContext(opts) {
-    return Object.freeze({
-        cwd: opts.cwd ?? process.cwd(),
-        env: opts.env ?? process.env,
-        projectRoot: opts.projectRoot ?? null,
-    });
-}
-function buildReport(records, version) {
-    const summary = {
-        pass: records.filter((r) => r.status === 'pass').length,
-        fail: records.filter((r) => r.status === 'fail').length,
-        inconclusive: records.filter((r) => r.status === 'inconclusive').length,
-        warn: records.filter((r) => r.status === 'warn').length,
-        skipped: records.filter((r) => r.status === 'skipped').length,
-        total: records.length,
-    };
-    /**
-     * What this command's exit code means, decided here because here is where
-     * the codes are.
-     *
-     * `inconclusive` used not to appear in this expression at all, so a check
-     * that COULD NOT ANSWER exited `0` — the same number as a machine where
-     * everything passed. A script could not tell "namzu is healthy" from "namzu
-     * did not manage to look", in the one command whose entire job is to report
-     * state it read.
-     *
-     * The order is the ranking, and it is deliberate:
-     *
-     * - `fail` outranks `inconclusive`. A definite failure is the actionable
-     *   fact, and `1` does not claim health, so nothing is lost by reporting it
-     *   even when part of the turn is also unknown.
-     * - `2` stays above `inconclusive` because an empty run has no checks to be
-     *   inconclusive about; the two cannot both be true.
-     * - `skipped` never moves this off `0`. A skipped check is an ordinary state
-     *   of a healthy machine — an optional package absent, a registry with
-     *   nothing to discover — and a diagnostic that went non-zero on every
-     *   healthy machine would be turned off within a week, which is the failure
-     *   mode of a check that fires where nothing is wrong.
-     */
-    const exit = summary.fail > 0 ? 1 : summary.total === 0 ? 2 : summary.inconclusive > 0 ? 69 : 0;
-    return Object.freeze({
-        version,
-        timestamp: new Date().toISOString(),
-        checks: records,
-        summary,
-        exit,
-    });
-}
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(() => resolve('sleep-done'), ms));
-}
-//# sourceMappingURL=registry.js.map