@ouro.bot/cli 0.1.0-alpha.55 → 0.1.0-alpha.550

package/dist/heart/daemon/agentic-repair.js

@@ -0,0 +1,554 @@
+"use strict";
+/**
+ * Agentic repair flow for degraded agents detected during `ouro up`.
+ *
+ * Runs known local repair prompts first, then offers AI-assisted diagnosis
+ * when no local repair was attempted and a working LLM provider is available.
+ * This is a lightweight integration: one diagnostic LLM call, not a chat loop.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAgenticDiagnosisProviderRuntime = createAgenticDiagnosisProviderRuntime;
+exports.runAgenticRepair = runAgenticRepair;
+exports.shouldFireRepairGuide = shouldFireRepairGuide;
+exports.loadRepairGuideContent = loadRepairGuideContent;
+exports.parseRepairProposals = parseRepairProposals;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const runtime_1 = require("../../nerves/runtime");
+const interactive_repair_1 = require("./interactive-repair");
+const identity_1 = require("../identity");
+const provider_ping_1 = require("../provider-ping");
+const readiness_repair_1 = require("./readiness-repair");
+function buildSystemPrompt(degraded) {
+    const agentList = degraded
+        .map((d) => `- ${d.agent}: error="${d.errorReason}", hint="${d.fixHint}"`)
+        .join("\n");
+    return [
+        "You are a diagnostic assistant for the Ouroboros agent daemon.",
+        "The daemon detected degraded agents during startup.",
+        "Analyze the errors below and provide a concise diagnosis with suggested fixes.",
+        "",
+        "Degraded agents:",
+        agentList,
+        "",
+        "Keep your response brief and actionable. Focus on the most likely root cause",
+        "and the simplest fix the user can apply.",
+    ].join("\n");
+}
+function buildUserMessage(degraded, logsTail, driftFindings = [], syncFindings = []) {
+    const agentDetails = degraded
+        .map((d) => `Agent: ${d.agent}\n  Error: ${d.errorReason}\n  Fix hint: ${d.fixHint}`)
+        .join("\n\n");
+    const sections = [
+        "Here are the degraded agents and recent daemon logs:",
+        "",
+        agentDetails,
+        "",
+        "Recent daemon logs:",
+        logsTail,
+    ];
+    // Layer 3: thread Layer 4's structured drift findings into the prompt as
+    // a JSON block. The `diagnose-bootstrap-drift` skill (loaded into the
+    // system prompt by `buildSystemPromptWithRepairGuide`) instructs the LLM
+    // how to read this shape and what `ouro use` repair to propose.
+    if (driftFindings.length > 0) {
+        sections.push("", "driftFindings (DriftFinding[]):", "```json", JSON.stringify(driftFindings, null, 2), "```");
+    }
+    // Layer 3: thread Layer 2's structured sync-probe findings into the
+    // prompt as a JSON block. `diagnose-broken-remote` (auth/404/network/
+    // timeout-hard) and `diagnose-sync-blocked` (dirty/non-fast-forward/
+    // merge-conflict/timeout-soft) consume this shape.
+    if (syncFindings.length > 0) {
+        sections.push("", "bootSyncFindings (BootSyncProbeFinding[]):", "```json", JSON.stringify(syncFindings, null, 2), "```");
+    }
+    sections.push("", "What is the most likely cause and how should I fix it?");
+    return sections.join("\n");
+}
+function makeInteractiveRepairDeps(deps) {
+    return {
+        promptInput: deps.promptInput,
+        writeStdout: deps.writeStdout,
+        /* v8 ignore next -- fallback no-op: tests always inject runAuthFlow; default is for production @preserve */
+        runAuthFlow: deps.runAuthFlow ?? (async () => undefined),
+        runVaultUnlock: deps.runVaultUnlock,
+        skipQueueSummary: deps.skipQueueSummary,
+        isTTY: deps.isTTY,
+        stdoutColumns: deps.stdoutColumns,
+    };
+}
+async function runDeterministicRepair(degraded, deps) {
+    return deps.runInteractiveRepair(degraded, makeInteractiveRepairDeps(deps));
+}
+function discoveredProviderModel(provider) {
+    const model = provider.providerConfig.model?.trim();
+    return model ? model : undefined;
+}
+function createAgenticDiagnosisProviderRuntime(provider) {
+    const config = {
+        ...provider.providerConfig,
+        ...provider.credentials,
+    };
+    return (0, provider_ping_1.createProviderRuntimeForConfig)(provider.provider, config, {
+        model: discoveredProviderModel(provider),
+    });
+}
+/**
+ * Layer 3: build the system prompt for the diagnostic call. Prepends
+ * RepairGuide bundle content (`psyche/SOUL.md`, `psyche/IDENTITY.md`, all
+ * skills) when the bundle is present and readable; falls back to today's
+ * pre-RepairGuide prompt when the loader returns null.
+ */
+function buildSystemPromptWithRepairGuide(degraded, repairGuide) {
+    const basePrompt = buildSystemPrompt(degraded);
+    if (repairGuide === null)
+        return basePrompt;
+    const sections = [];
+    if (repairGuide.psyche.soul) {
+        sections.push("# RepairGuide SOUL\n\n" + repairGuide.psyche.soul);
+    }
+    if (repairGuide.psyche.identity) {
+        sections.push("# RepairGuide IDENTITY\n\n" + repairGuide.psyche.identity);
+    }
+    for (const [name, body] of Object.entries(repairGuide.skills)) {
+        sections.push(`# RepairGuide skill: ${name}\n\n${body}`);
+    }
+    if (sections.length === 0)
+        return basePrompt;
+    return [...sections, "---", basePrompt].join("\n\n");
+}
+async function tryAgenticDiagnosis(degraded, provider, deps) {
+    const logsTail = deps.readDaemonLogsTail();
+    const runtime = deps.createProviderRuntime(provider);
+    // Layer 3: prepend RepairGuide bundle content when present. Loader
+    // returns null on missing bundle / I/O error — caller silently falls back
+    // to today's pre-RepairGuide prompt.
+    const repoRoot = deps.repoRootOverride ?? (0, identity_1.getRepoRoot)();
+    const repairGuide = loadRepairGuideContent(repoRoot);
+    const systemPrompt = buildSystemPromptWithRepairGuide(degraded, repairGuide);
+    const userMessage = buildUserMessage(degraded, logsTail, deps.driftFindings, deps.syncFindings);
+    const messages = [
+        { role: "system", content: systemPrompt },
+        { role: "user", content: userMessage },
+    ];
+    /* v8 ignore start -- no-op callbacks: satisfy interface contract, never invoked by diagnostic call @preserve */
+    const noopCallbacks = {
+        onModelStart: () => { },
+        onModelStreamStart: () => { },
+        onTextChunk: () => { },
+        onReasoningChunk: () => { },
+        onToolStart: () => { },
+        onToolEnd: () => { },
+        onError: () => { },
+    };
+    /* v8 ignore stop */
+    const result = await runtime.streamTurn({
+        messages,
+        activeTools: [],
+        callbacks: noopCallbacks,
+    });
+    if (result.content) {
+        // Layer 3: when RepairGuide content was prepended, parse the LLM output
+        // through the typed-action catalog. If actions are extracted, surface
+        // them as structured proposals; otherwise fall back to today's plain
+        // text-blob diagnosis. `parseRepairProposals` handles the unparseable
+        // case by returning `fallbackBlob` set to the raw output.
+        if (repairGuide !== null) {
+            const parsed = parseRepairProposals(result.content);
+            if (parsed.actions.length > 0) {
+                deps.writeStdout("");
+                deps.writeStdout("--- RepairGuide proposals ---");
+                for (const action of parsed.actions) {
+                    deps.writeStdout(`  • ${action.kind}: ${action.label}`);
+                }
+                for (const warning of parsed.warnings) {
+                    deps.writeStdout(`  (warning) ${warning}`);
+                }
+                deps.writeStdout("--- End RepairGuide proposals ---");
+                deps.writeStdout("");
+            }
+            else if (parsed.fallbackBlob !== undefined) {
+                deps.writeStdout("");
+                deps.writeStdout("--- AI Diagnosis ---");
+                deps.writeStdout(parsed.fallbackBlob);
+                deps.writeStdout("--- End Diagnosis ---");
+                deps.writeStdout("");
+            }
+        }
+        else {
+            deps.writeStdout("");
+            deps.writeStdout("--- AI Diagnosis ---");
+            deps.writeStdout(result.content);
+            deps.writeStdout("--- End Diagnosis ---");
+            deps.writeStdout("");
+        }
+    }
+    return true;
+}
+async function runAgenticRepair(degraded, deps) {
+    (0, runtime_1.emitNervesEvent)({
+        level: "info",
+        component: "daemon",
+        event: "daemon.agentic_repair_start",
+        message: "agentic repair flow started",
+        meta: { degradedCount: degraded.length },
+    });
+    if (degraded.length === 0) {
+        return { repairsAttempted: false, usedAgentic: false };
+    }
+    const hasLocalRepair = degraded.some(interactive_repair_1.hasRunnableInteractiveRepair);
+    const hasKnownTypedRepair = degraded.some((entry) => (0, readiness_repair_1.isKnownReadinessIssue)(entry.issue));
+    const forceDiagnosis = deps.forceDiagnosis === true;
+    if (hasLocalRepair) {
+        const interactiveResult = await runDeterministicRepair(degraded, deps);
+        if (interactiveResult.repairsAttempted) {
+            return { repairsAttempted: true, usedAgentic: false };
+        }
+        if (hasKnownTypedRepair && !forceDiagnosis) {
+            return { repairsAttempted: false, usedAgentic: false };
+        }
+    }
+    else if (hasKnownTypedRepair && !forceDiagnosis) {
+        return { repairsAttempted: false, usedAgentic: false };
+    }
+    // Try to discover a working provider for agentic diagnosis
+    let discoveredProvider = null;
+    try {
+        discoveredProvider = await deps.discoverWorkingProvider(degraded[0].agent);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "daemon",
+            event: "daemon.agentic_repair_discovery_error",
+            message: `provider discovery failed during agentic repair: ${msg}`,
+            meta: { error: msg },
+        });
+    }
+    if (!discoveredProvider) {
+        // No working provider — fall back to deterministic repair
+        (0, runtime_1.emitNervesEvent)({
+            level: "info",
+            component: "daemon",
+            event: "daemon.agentic_repair_no_provider",
+            message: "no working provider found, falling back to deterministic repair",
+            meta: {},
+        });
+        if (hasLocalRepair) {
+            return { repairsAttempted: false, usedAgentic: false };
+        }
+        const interactiveResult = await runDeterministicRepair(degraded, deps);
+        return { repairsAttempted: interactiveResult.repairsAttempted, usedAgentic: false };
+    }
+    // Offer agentic diagnosis
+    const answer = await deps.promptInput("would you like AI-assisted diagnosis? [y/n] ");
+    if (!(0, interactive_repair_1.isAffirmativeAnswer)(answer)) {
+        // User declined — fall back to deterministic repair
+        (0, runtime_1.emitNervesEvent)({
+            level: "info",
+            component: "daemon",
+            event: "daemon.agentic_repair_declined",
+            message: "user declined agentic diagnosis",
+            meta: {},
+        });
+        if (hasLocalRepair) {
+            return { repairsAttempted: false, usedAgentic: false };
+        }
+        const interactiveResult = await runDeterministicRepair(degraded, deps);
+        return { repairsAttempted: interactiveResult.repairsAttempted, usedAgentic: false };
+    }
+    // User accepted — run agentic diagnosis then fall through to deterministic repair
+    let usedAgentic = false;
+    try {
+        usedAgentic = await tryAgenticDiagnosis(degraded, discoveredProvider, deps);
+        (0, runtime_1.emitNervesEvent)({
+            level: "info",
+            component: "daemon",
+            event: "daemon.agentic_repair_diagnosis_complete",
+            message: "agentic diagnosis completed, proceeding to deterministic repair",
+            meta: { provider: discoveredProvider.provider },
+        });
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        deps.writeStdout(`AI diagnosis failed: ${msg}`);
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "daemon",
+            event: "daemon.agentic_repair_diagnosis_error",
+            message: `agentic diagnosis failed: ${msg}`,
+            meta: { error: msg, provider: discoveredProvider.provider },
+        });
+    }
+    // Always fall through to deterministic repair for actionable fixes
+    const interactiveResult = hasLocalRepair
+        ? { repairsAttempted: false }
+        : await runDeterministicRepair(degraded, deps);
+    (0, runtime_1.emitNervesEvent)({
+        level: "info",
+        component: "daemon",
+        event: "daemon.agentic_repair_end",
+        message: "agentic repair flow completed",
+        meta: { usedAgentic, repairsAttempted: interactiveResult.repairsAttempted },
+    });
+    return { repairsAttempted: interactiveResult.repairsAttempted, usedAgentic };
+}
+// ──────────────────────────────────────────────────────────────────────
+// Layer 3: RepairGuide activation contract
+// ──────────────────────────────────────────────────────────────────────
+/**
+ * Threshold for compound typed-degraded findings to activate RepairGuide.
+ * Set to 3 (not 2) so that common pairs — vault-locked + provider-auth-needed,
+ * for example — do NOT trigger the new path on every boot. Encoded once here;
+ * never duplicate at call sites.
+ */
+const REPAIR_GUIDE_TYPED_THRESHOLD = 3;
+/**
+ * Single decision function for whether to fire the RepairGuide-driven
+ * diagnostic flow.
+ *
+ * Contract (LOCKED, planning O4):
+ * - `noRepair: true` → false unconditionally (escape hatch).
+ * - `untypedDegraded.length > 0` → true (preserves today's gate at
+ *   `cli-exec.ts:6706`).
+ * - `typedDegraded.length >= REPAIR_GUIDE_TYPED_THRESHOLD` → true (compound
+ *   stack of typed issues; the new behavior this PR introduces).
+ * - Otherwise → false.
+ */
+function shouldFireRepairGuide(input) {
+    if (input.noRepair)
+        return false;
+    if (input.untypedDegraded.length > 0)
+        return true;
+    if (input.typedDegraded.length >= REPAIR_GUIDE_TYPED_THRESHOLD)
+        return true;
+    return false;
+}
+/**
+ * Read `RepairGuide.ouro/{psyche,skills}/*.md` from the given repo root and
+ * return a structured shape suitable for prepending to a diagnostic LLM call.
+ *
+ * Behavior:
+ * - Returns `null` if `RepairGuide.ouro/` does not exist at all (graceful: caller
+ *   should fall back to today's pre-RepairGuide pipeline).
+ * - Returns `null` on any I/O error (`readdirSync`/`readFileSync` throws).
+ * - Returns a populated `RepairGuideContent` when the bundle exists, even if
+ *   psyche or skills are partially populated.
+ * - Skips files that are not `.md`, are not regular files, or have empty
+ *   contents.
+ * - `skills` map is iterated in alphabetical order so callers can rely on
+ *   deterministic prompt assembly.
+ *
+ * The loader is intentionally inline in `agentic-repair.ts` per the planning
+ * O5 lock — splitting into its own module is allowed only if the validator
+ * grows large.
+ */
+function loadRepairGuideContent(repoRoot) {
+    const bundleRoot = path.join(repoRoot, "RepairGuide.ouro");
+    if (!fs.existsSync(bundleRoot))
+        return null;
+    try {
+        const psyche = {};
+        const skills = {};
+        const psycheDir = path.join(bundleRoot, "psyche");
+        if (fs.existsSync(psycheDir)) {
+            const psycheEntries = fs.readdirSync(psycheDir, { withFileTypes: true });
+            for (const entry of psycheEntries) {
+                if (!entry.isFile() || !entry.name.endsWith(".md"))
+                    continue;
+                const content = fs.readFileSync(path.join(psycheDir, entry.name), "utf-8");
+                if (entry.name === "SOUL.md")
+                    psyche.soul = content;
+                else if (entry.name === "IDENTITY.md")
+                    psyche.identity = content;
+            }
+        }
+        const skillsDir = path.join(bundleRoot, "skills");
+        if (fs.existsSync(skillsDir)) {
+            const skillEntries = fs.readdirSync(skillsDir, { withFileTypes: true });
+            const sorted = skillEntries
+                .filter((e) => e.isFile() && e.name.endsWith(".md"))
+                .sort((a, b) => a.name.localeCompare(b.name));
+            for (const entry of sorted) {
+                const content = fs.readFileSync(path.join(skillsDir, entry.name), "utf-8");
+                if (content.length === 0)
+                    continue;
+                skills[entry.name] = content;
+            }
+        }
+        return { psyche, skills };
+    }
+    catch {
+        // Best-effort: any I/O error in the bundle leads to null and the caller
+        // falls back to today's pre-RepairGuide diagnostic prompt.
+        return null;
+    }
+}
+// ──────────────────────────────────────────────────────────────────────
+// Layer 3: RepairGuide LLM output parser → typed `RepairAction[]`
+// ──────────────────────────────────────────────────────────────────────
+/**
+ * The set of `RepairActionKind` literals the typed catalog recognizes.
+ * Encoded once here; the parser uses this for membership checks. Any other
+ * kind in the LLM output is dropped with a warning.
+ */
+const KNOWN_REPAIR_ACTION_KINDS = new Set([
+    "vault-create",
+    "vault-unlock",
+    "vault-replace",
+    "vault-recover",
+    "provider-auth",
+    "provider-retry",
+    "provider-use",
+]);
+function extractFirstJsonBlock(text) {
+    // Look for a triple-backtick fence labeled `json` and grab its body.
+    const fenceMatch = text.match(/```(?:json)?\s*\n([\s\S]*?)\n```/);
+    if (fenceMatch)
+        return fenceMatch[1];
+    // Fallback: the LLM may have emitted a bare JSON object (no fence).
+    const objectMatch = text.match(/\{[\s\S]*\}/);
+    if (objectMatch)
+        return objectMatch[0];
+    return null;
+}
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Parse a single LLM-emitted action object into a typed `RepairAction`. Returns
+ * `null` when the entry is shaped wrong — the caller logs a warning and drops
+ * it. The parser backfills `label`, `command`, and `actor` so the result plugs
+ * into the existing interactive-repair surface without further massaging.
+ */
+function buildRepairAction(entry) {
+    const kind = entry.kind;
+    if (typeof kind !== "string")
+        return null;
+    if (!KNOWN_REPAIR_ACTION_KINDS.has(kind))
+        return null;
+    const reason = typeof entry.reason === "string" ? entry.reason : "(no reason given)";
+    const agent = typeof entry.agent === "string" ? entry.agent : "(unknown agent)";
+    const label = `RepairGuide: ${kind} for ${agent}`;
+    const command = `# ${kind} (${agent}): ${reason}`;
+    switch (kind) {
+        case "provider-auth": {
+            const provider = typeof entry.provider === "string" ? entry.provider : "anthropic";
+            return {
+                kind: "provider-auth",
+                label,
+                command,
+                actor: "human-required",
+                provider: provider,
+            };
+        }
+        case "provider-use": {
+            // `provider-use` may carry an optional `lane` — pass it through when
+            // present and validly typed (`outward` or `inner`).
+            const lane = entry.lane === "outward" || entry.lane === "inner" ? entry.lane : undefined;
+            const action = {
+                kind: "provider-use",
+                label,
+                command,
+                actor: "human-choice",
+                ...(lane ? { lane } : {}),
+            };
+            return action;
+        }
+        case "vault-create":
+        case "vault-unlock":
+        case "vault-replace":
+        case "vault-recover":
+        case "provider-retry": {
+            return {
+                kind: kind,
+                label,
+                command,
+                actor: "human-required",
+            };
+        }
+        /* v8 ignore next 4 -- exhaustiveness guard: unreachable since membership
+         * was checked above; left in place to satisfy `never` on future
+         * RepairActionKind extensions. @preserve */
+        default: {
+            return null;
+        }
+    }
+}
+/**
+ * Parse RepairGuide LLM output. The persona content (`SOUL.md`) instructs the
+ * model to emit exactly one ```json fenced block containing
+ * `{ actions: RepairAction[], notes?: string[] }`. The parser extracts that
+ * block, walks `actions[]`, drops entries with unknown kinds (with warnings),
+ * and falls back to the raw output when no JSON can be extracted at all
+ * (preserving today's text-blob behavior).
+ */
+function parseRepairProposals(llmOutput) {
+    const block = extractFirstJsonBlock(llmOutput);
+    if (block === null) {
+        return { actions: [], warnings: [], fallbackBlob: llmOutput };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(block);
+    }
+    catch {
+        return { actions: [], warnings: [], fallbackBlob: llmOutput };
+    }
+    if (!isPlainObject(parsed)) {
+        return { actions: [], warnings: [] };
+    }
+    const rawActions = parsed.actions;
+    if (!Array.isArray(rawActions)) {
+        return { actions: [], warnings: [] };
+    }
+    const actions = [];
+    const warnings = [];
+    for (const entry of rawActions) {
+        if (!isPlainObject(entry)) {
+            warnings.push(`dropped non-object entry from actions[]: ${JSON.stringify(entry)}`);
+            continue;
+        }
+        const built = buildRepairAction(entry);
+        if (built === null) {
+            const kindLabel = typeof entry.kind === "string" ? entry.kind : "(no kind)";
+            warnings.push(`dropped action with unknown or missing kind: ${kindLabel}`);
+            continue;
+        }
+        actions.push(built);
+    }
+    return { actions, warnings };
+}

package/dist/heart/daemon/bluebubbles-health-diagnostics.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stringifyBlueBubblesHealthError = stringifyBlueBubblesHealthError;
+exports.redactBlueBubblesHealthDetailForNerves = redactBlueBubblesHealthDetailForNerves;
+exports.formatBlueBubblesHealthcheckFailure = formatBlueBubblesHealthcheckFailure;
+exports.probeBlueBubblesHealth = probeBlueBubblesHealth;
+const runtime_1 = require("../../nerves/runtime");
+const error_classification_1 = require("../providers/error-classification");
+function buildBlueBubblesApiUrl(baseUrl, endpoint, password) {
+    const root = baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`;
+    const url = new URL(endpoint.replace(/^\//, ""), root);
+    url.searchParams.set("password", password);
+    return url.toString();
+}
+function stringifyBlueBubblesHealthError(error) {
+    if (error instanceof Error) {
+        const message = error.message.trim();
+        if (message)
+            return message;
+        return error.name || "unknown";
+    }
+    const value = String(error).trim();
+    return value || "unknown";
+}
+function redactBlueBubblesHealthDetailForNerves(detail) {
+    return detail
+        .replace(/\bbluebubbles\.password\b/gi, "bluebubbles credential")
+        .replace(/\bpassword\b/gi, "credential");
+}
+function blueBubblesHealthStatus(error) {
+    return error instanceof Error && typeof error.status === "number"
+        ? error.status
+        : null;
+}
+function blueBubblesHealthClassification(error) {
+    return error instanceof Error ? (0, error_classification_1.classifyHttpError)(error) : "unknown";
+}
+function formatBlueBubblesHealthcheckFailure(serverUrlInput, error) {
+    const serverUrl = serverUrlInput.trim() || "configured BlueBubbles server";
+    const rawReason = stringifyBlueBubblesHealthError(error);
+    const status = blueBubblesHealthStatus(error);
+    if (!(error instanceof Error)) {
+        return `BlueBubbles health check failed at ${serverUrl}. Check \`bluebubbles.serverUrl\`, confirm the BlueBubbles app/API is running, and inspect daemon logs. Raw error: ${rawReason}`;
+    }
+    switch (blueBubblesHealthClassification(error)) {
+        case "network-error":
+            return `Cannot reach BlueBubbles at ${serverUrl}. Check \`bluebubbles.serverUrl\`, confirm the BlueBubbles app/API is running, and verify this machine can reach it. Raw error: ${rawReason}`;
+        case "auth-failure":
+            return `BlueBubbles auth failed at ${serverUrl} (HTTP ${status}). Check this machine's BlueBubbles attachment with \`ouro connect bluebubbles --agent <agent>\` and confirm the server accepts the password. Raw error: ${rawReason}`;
+        case "server-error":
+            return `BlueBubbles upstream returned HTTP ${status} at ${serverUrl}. Check the BlueBubbles app/server logs and confirm the upstream API is healthy. Raw error: ${rawReason}`;
+        default:
+            return `BlueBubbles health check failed at ${serverUrl}${status === null ? "" : ` (HTTP ${status})`}. Check \`bluebubbles.serverUrl\`, the BlueBubbles server configuration, and daemon logs. Raw error: ${rawReason}`;
+    }
+}
+async function probeBlueBubblesHealth(input) {
+    try {
+        const url = buildBlueBubblesApiUrl(input.serverUrl, "/api/v1/message/count", input.password);
+        const response = await input.fetchImpl(url, {
+            method: "GET",
+            signal: AbortSignal.timeout(input.requestTimeoutMs),
+        });
+        if (!response.ok) {
+            const errorText = await response.text().catch(() => "");
+            const error = new Error(errorText || "unknown");
+            error.status = response.status;
+            throw error;
+        }
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.bluebubbles_health_probe_checked",
+            message: "checked bluebubbles upstream health",
+            meta: {
+                serverUrl: input.serverUrl,
+                ok: true,
+                status: response.status,
+            },
+        });
+        return {
+            ok: true,
+            detail: "upstream reachable",
+            reason: null,
+            status: response.status,
+            classification: null,
+        };
+    }
+    catch (error) {
+        const detail = formatBlueBubblesHealthcheckFailure(input.serverUrl, error);
+        const reason = stringifyBlueBubblesHealthError(error);
+        const status = blueBubblesHealthStatus(error);
+        const classification = blueBubblesHealthClassification(error);
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "daemon",
+            event: "daemon.bluebubbles_health_probe_checked",
+            message: "checked bluebubbles upstream health",
+            meta: {
+                serverUrl: input.serverUrl,
+                ok: false,
+                status,
+                reason,
+                classification,
+                detail: redactBlueBubblesHealthDetailForNerves(detail),
+            },
+        });
+        return {
+            ok: false,
+            detail,
+            reason,
+            status,
+            classification,
+        };
+    }
+}
+/* v8 ignore start -- module load observability event */
+(0, runtime_1.emitNervesEvent)({
+    component: "daemon",
+    event: "daemon.bluebubbles_health_diagnostics_loaded",
+    message: "bluebubbles health diagnostics loaded",
+    meta: {},
+});
+/* v8 ignore stop */