@ritualai/cli 0.7.10 → 0.7.12

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAEA,yCAAoC;AACpC,4CAAgD;AAChD,8CAAkD;AAClD,8CAAkD;AAClD,gDAAoD;AACpD,0CAA8C;AAC9C,8CAAkD;AAClD,4CAAsD;AACtD,qDAA4D;AAE5D,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACL,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CACX,yDAAyD;IACxD,yDAAyD,CAC1D;KACA,OAAO,CAAC,IAAA,qCAAsB,GAAE,CAAC,CAAC;AAEpC,oEAAoE;AACpE,+DAA+D;AAC/D,OAAO;KACL,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kFAAkF,CAAC;KAC/F,MAAM,CAAC,cAAc,EAAE,wDAAwD,CAAC;KAChF,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC;KAC9C,MAAM,CACN,gBAAgB,EAChB,kFAAkF,CAClF;KACA,MAAM,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;KACvE,MAAM,CAAC,OAAO,EAAE,iFAAiF,CAAC;KAClG,MAAM,CACN,gBAAgB,EAChB,wHAAwH,CACxH;KACA,MAAM,CACN,kBAAkB,EAClB,kMAAkM,CAClM;KACA,MAAM,CACN,OAAO,EACP,wFAAwF,CACxF;KACA,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEtB,OAAO;KACL,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CACN,gBAAgB,EAChB,iGAAiG,CACjG;KACA,MAAM,CACN,kBAAkB,EAClB,4EAA4E,CAC5E;KACA,MAAM,CAAC,OAAO,EAAE,iFAAiF,CAAC;KAClG,MAAM,CACN,kBAAkB,EAClB,oIAAoI,CACpI;KACA,MAAM,CACN,OAAO,EACP,wFAAwF,CACxF;KACA,MAAM,CAAC,oBAAY,CAAC,CAAC;AAEvB,OAAO;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iFAAiF,CAAC;KAC9F,MAAM,CACN,OAAO,EACP,6IAA6I,CAC7I;KACA,MAAM,CAAC,sBAAa,CAAC,CAAC;AAExB,OAAO;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,sBAAa,CAAC,CAAC;AAExB,OAAO;KACL,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,sEAAsE,CAAC;KACnF,MAAM,CAAC,wBAAc,CAAC,CAAC;AAEzB,OAAO;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2EAA2E,CAAC;KACxF,MAAM,CAAC,sBAAa,CAAC,CAAC;AAExB,iEAAiE;AACjE,+DAA+D;AAC/D,kDAAkD;AAClD,MAAM,KAAK,GAAG,OAAO;KACnB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,oEAAoE,CAAC,CAAC;AAEpF,KAAK;KACH,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,mEAAmE,CAAC;KAChF,MAAM,CACN,kBAAkB,EAClB,0FAA0F,CAC1F;KACA,MAAM,CAAC,aAAa,EAAE,8DAA8D,CAAC;KACrF,MAAM,CAAC,0BAAkB,CAAC,CAAC;AAE7B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACrD,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAEA,yCAAoC;AACpC,4CAAgD;AAChD,8CAAkD;AAClD,8CAAkD;AAClD,gDAAoD;AACpD,0CAA8C;AAC9C,8CAAkD;AAClD,4CAAsD;AACtD,qDAA4D;AAE5D,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACL,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CACX,yDAAyD;IACxD,yDAAyD,CAC1D;KACA,OAAO,CAAC,IAAA,qCAAsB,GAAE,CAAC,CAAC;AAEpC,oEAAoE;AACpE,+DAA+D;AAC/D,OAAO;KACL,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kFAAkF,CAAC;KAC/F,MAAM,CAAC,cAAc,EAAE,wDAAwD,CAAC;KAChF,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC;KAC9C,MAAM,CACN,gBAAgB,EAChB,kFAAkF,CAClF;KACA,MAAM,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;KACvE,MAAM,CAAC,OAAO,EAAE,iFAAiF,CAAC;KAClG,MAAM,CACN,gBAAgB,EAChB,wHAAwH,CACxH;KACA,MAAM,CACN,kBAAkB,EAClB,kMAAkM,CAClM;KACA,MAAM,CACN,OAAO,EACP,wFAAwF,CACxF;KACA,MAAM,CACN,eAAe,EACf,oOAAoO,CACpO;KACA,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEtB,OAAO;KACL,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CACN,gBAAgB,EAChB,iGAAiG,CACjG;KACA,MAAM,CACN,kBAAkB,EAClB,4EAA4E,CAC5E;KACA,MAAM,CAAC,OAAO,EAAE,iFAAiF,CAAC;KAClG,MAAM,CACN,kBAAkB,EAClB,oIAAoI,CACpI;KACA,MAAM,CACN,OAAO,EACP,wFAAwF,CACxF;KACA,MAAM,CAAC,oBAAY,CAAC,CAAC;AAEvB,OAAO;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iFAAiF,CAAC;KAC9F,MAAM,CACN,OAAO,EACP,6IAA6I,CAC7I;KACA,MAAM,CAAC,sBAAa,CAAC,CAAC;AAExB,OAAO;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,sBAAa,CAAC,CAAC;AAExB,OAAO;KACL,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,sEAAsE,CAAC;KACnF,MAAM,CAAC,wBAAc,CAAC,CAAC;AAEzB,OAAO;KACL,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2EAA2E,CAAC;KACxF,MAAM,CAAC,sBAAa,CAAC,CAAC;AAExB,iEAAiE;AACjE,+DAA+D;AAC/D,kDAAkD;AAClD,MAAM,KAAK,GAAG,OAAO;KACnB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,oEAAoE,CAAC,CAAC;AAEpF,KAAK;KACH,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,mEAAmE,CAAC;KAChF,MAAM,CACN,kBAAkB,EAClB,0FAA0F,CAC1F;KACA,MAAM,CAAC,aAAa,EAAE,8DAA8D,CAAC;KACrF,MAAM,CAAC,0BAAkB,CAAC,CAAC;AAE7B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACrD,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC"}

package/dist/lib/agents/configure-mcp.js

@@ -55,6 +55,33 @@ function configureMcpForAgent(provider, registration) {
  * We re-register idempotently by removing-then-adding (the CLI errors
  * on a duplicate name). The `try/catch` around remove is intentional —
  * "not found" is fine; we just want a clean slate.
+ *
+ * Scope reconciliation (added 2026-05-14, CLI 0.7.12):
+ *
+ * Claude Code stores MCP entries in three scopes:
+ *   - `user`    → top-level `mcpServers.<name>` in ~/.claude.json
+ *   - `local`   → `projects["<cwd>"].mcpServers.<name>` in ~/.claude.json
+ *   - `project` → a separate `.mcp.json` file in the project root
+ *                 (typically checked into git)
+ *
+ * Claude Code's in-session lookup prefers `local` over `user` when
+ * working inside a project. Before this commit we only removed from
+ * `--scope user` before re-adding — which meant any stale `local`
+ * entry (left behind by a manual `claude mcp add` or by an older
+ * version of this CLI) would survive every `ritual init`, silently
+ * shadow the fresh user-scope entry, and leave in-project sessions
+ * 401-ing on a revoked token. Mike hit this on 2026-05-14: a fresh
+ * `ritual init` minted a working user-scope token, but his
+ * django-oscar Claude Code session kept failing because the local
+ * scope still held the revoked predecessor.
+ *
+ * We now sweep BOTH writable scopes (`local` + `user`) before adding.
+ * `project` scope (the on-disk `.mcp.json`) is deliberately left
+ * alone — that file is often committed to the repo, and silently
+ * deleting from it would be a surprise change to a tracked file. If
+ * a project-scoped entry exists, `ritual doctor` surfaces it (see
+ * lib/claude-code-scopes.ts + the doctor sections that consume it)
+ * so the user knows where to look manually.
  */
 function configureViaCliCommand(_provider, registration) {
     const config = {
@@ -62,17 +89,20 @@ function configureViaCliCommand(_provider, registration) {
         url: registration.url,
         headers: { Authorization: `Bearer ${registration.token}` },
     };
-    // 1. Remove any existing entry, swallowing errors.
-    try {
-        (0, node_child_process_1.execSync)(`claude mcp remove ${SERVER_NAME} --scope user`, { stdio: 'pipe' });
-    }
-    catch {
-        /* not found — fine */
+    // 1. Remove from every writable scope. Skip `project` scope —
+    // .mcp.json is typically a tracked file.
+    for (const scope of ['local', 'user']) {
+        try {
+            (0, node_child_process_1.execSync)(`claude mcp remove ${SERVER_NAME} --scope ${scope}`, { stdio: 'pipe' });
+        }
+        catch {
+            /* not found in that scope — fine */
+        }
     }
-    // 2. Add the fresh entry. Escape the JSON for the shell.
-    // Using single-quote wrap is safe because the JSON contains no
-    // single quotes (object keys + string values are all double-quoted
-    // in JSON-stringify output).
+    // 2. Add the fresh entry under user scope. Escape the JSON for
+    // the shell. Using single-quote wrap is safe because the JSON
+    // contains no single quotes (object keys + string values are all
+    // double-quoted in JSON-stringify output).
     const json = JSON.stringify(config);
     (0, node_child_process_1.execSync)(`claude mcp add-json --scope user ${SERVER_NAME} '${json}'`, {
         stdio: 'pipe',

package/dist/lib/agents/configure-mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"configure-mcp.js","sourceRoot":"","sources":["../../../src/lib/agents/configure-mcp.ts"],"names":[],"mappings":";;AA0DA,oDAkBC;AA5ED,qCAMiB;AACjB,yCAAoC;AACpC,2DAA8C;AAG9C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,GAAG,QAAQ,CAAC;AAoB7B;;;;;;GAMG;AACH,SAAgB,oBAAoB,CACnC,QAAuB,EACvB,YAA6B;IAE7B,IAAI,CAAC;QACJ,IAAI,QAAQ,CAAC,eAAe,KAAK,aAAa,EAAE,CAAC;YAChD,sBAAsB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACP,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,QAAQ;YACR,OAAO,EAAE,KAAK;YACd,MAAM,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC9B,SAAwB,EACxB,YAA6B;IAE7B,MAAM,MAAM,GAAG;QACd,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,YAAY,CAAC,GAAG;QACrB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;IAEF,mDAAmD;IACnD,IAAI,CAAC;QACJ,IAAA,6BAAQ,EAAC,qBAAqB,WAAW,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACR,sBAAsB;IACvB,CAAC;IAED,yDAAyD;IACzD,+DAA+D;IAC/D,mEAAmE;IACnE,6BAA6B;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,IAAA,6BAAQ,EAAC,oCAAoC,WAAW,KAAK,IAAI,GAAG,EAAE;QACrE,KAAK,EAAE,MAAM;KACb,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC5B,QAAuB,EACvB,YAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,wCAAwC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,IAAI,YAAY,CAAC;IAEzD,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACR,mDAAmD;YACnD,IAAA,uBAAa,EAAC,GAAG,QAAQ,MAAM,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,GAAG,EAAE,CAAC;QACb,CAAC;IACF,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAA4B,CAAC;IAC9D,OAAO,CAAC,WAAW,CAAC,GAAG;QACtB,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,YAAY,CAAC,GAAG;QACrB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;IAEF,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAA,uBAAa,EAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,6DAA6D;IAC7D,+CAA+C;IAC/C,IAAI,CAAC;QACJ,IAAA,mBAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,YAAY;IACb,CAAC;AACF,CAAC"}
+{"version":3,"file":"configure-mcp.js","sourceRoot":"","sources":["../../../src/lib/agents/configure-mcp.ts"],"names":[],"mappings":";;AA0DA,oDAkBC;AA5ED,qCAMiB;AACjB,yCAAoC;AACpC,2DAA8C;AAG9C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,GAAG,QAAQ,CAAC;AAoB7B;;;;;;GAMG;AACH,SAAgB,oBAAoB,CACnC,QAAuB,EACvB,YAA6B;IAE7B,IAAI,CAAC;QACJ,IAAI,QAAQ,CAAC,eAAe,KAAK,aAAa,EAAE,CAAC;YAChD,sBAAsB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACP,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,QAAQ;YACR,OAAO,EAAE,KAAK;YACd,MAAM,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,SAAS,sBAAsB,CAC9B,SAAwB,EACxB,YAA6B;IAE7B,MAAM,MAAM,GAAG;QACd,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,YAAY,CAAC,GAAG;QACrB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;IAEF,8DAA8D;IAC9D,yCAAyC;IACzC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;QAChD,IAAI,CAAC;YACJ,IAAA,6BAAQ,EAAC,qBAAqB,WAAW,YAAY,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACR,oCAAoC;QACrC,CAAC;IACF,CAAC;IAED,+DAA+D;IAC/D,8DAA8D;IAC9D,iEAAiE;IACjE,2CAA2C;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,IAAA,6BAAQ,EAAC,oCAAoC,WAAW,KAAK,IAAI,GAAG,EAAE;QACrE,KAAK,EAAE,MAAM;KACb,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC5B,QAAuB,EACvB,YAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,wCAAwC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,IAAI,YAAY,CAAC;IAEzD,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACR,mDAAmD;YACnD,IAAA,uBAAa,EAAC,GAAG,QAAQ,MAAM,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,GAAG,EAAE,CAAC;QACb,CAAC;IACF,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAA4B,CAAC;IAC9D,OAAO,CAAC,WAAW,CAAC,GAAG;QACtB,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,YAAY,CAAC,GAAG;QACrB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;IAEF,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAA,uBAAa,EAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,6DAA6D;IAC7D,+CAA+C;IAC/C,IAAI,CAAC;QACJ,IAAA,mBAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,YAAY;IACb,CAAC;AACF,CAAC"}

package/dist/lib/claude-code-scopes.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RITUAL_SERVER_NAME = void 0;
+exports.findRitualScopeEntries = findRitualScopeEntries;
+exports.findShadowingEntries = findShadowingEntries;
+exports.fixCommandFor = fixCommandFor;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+/**
+ * Server name used by `ritual init`. Kept in sync with
+ * `agents/configure-mcp.ts`'s SERVER_NAME constant.
+ */
+exports.RITUAL_SERVER_NAME = 'ritual';
+/**
+ * Pull a Bearer token out of an MCP entry's Authorization header.
+ * Defensive — entries can have absent / lower-cased / mis-prefixed
+ * headers; we return null and let the caller surface "non-bearer".
+ */
+function extractBearer(entry) {
+    const headers = entry.headers ?? {};
+    // Try the conventional casing first, then case-insensitive fallback.
+    const authRaw = headers['Authorization'] ??
+        Object.entries(headers).find(([k]) => k.toLowerCase() === 'authorization')?.[1];
+    if (typeof authRaw !== 'string')
+        return null;
+    const m = authRaw.match(/^Bearer\s+(\S+)$/);
+    return m ? m[1] : null;
+}
+/**
+ * Read and JSON.parse a file, returning null on absent/corrupt.
+ * Doctor's job is to surface state, not to be the file repair tool —
+ * if `~/.claude.json` is corrupt the user has bigger problems and
+ * Claude Code itself would be broken; we just report nothing here.
+ */
+function readJsonSafely(path) {
+    if (!(0, node_fs_1.existsSync)(path))
+        return null;
+    try {
+        return JSON.parse((0, node_fs_1.readFileSync)(path, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Build the full list of ritual entries across all three scopes for
+ * a given project context. `cwd` is the project we want `local` and
+ * `project` scopes resolved against — usually `process.cwd()` from
+ * the caller, but parameterized for testability.
+ *
+ * Returned in precedence order: `project` first, then `local`, then
+ * `user`. Callers that just want "what's actually being used right
+ * now" can take the first entry. Callers that want to detect drift
+ * (doctor) iterate all of them.
+ */
+function findRitualScopeEntries(cwd = process.cwd(), home = (0, node_os_1.homedir)()) {
+    const out = [];
+    // 1. Project scope — .mcp.json at the project root.
+    const projectMcpPath = (0, node_path_1.join)(cwd, '.mcp.json');
+    const projectMcp = readJsonSafely(projectMcpPath);
+    const projectEntry = projectMcp?.mcpServers?.[exports.RITUAL_SERVER_NAME];
+    if (projectEntry?.url) {
+        out.push({
+            scope: 'project',
+            configPath: projectMcpPath,
+            projectPath: cwd,
+            url: projectEntry.url,
+            bearerToken: extractBearer(projectEntry),
+        });
+    }
+    // 2. Local + user scope — both live inside ~/.claude.json.
+    const claudeJsonPath = (0, node_path_1.join)(home, '.claude.json');
+    const claudeJson = readJsonSafely(claudeJsonPath);
+    // On macOS, `process.cwd()` may return a symlink-resolved path
+    // (`/private/var/...`) while Claude Code's stored project key may
+    // be the user-facing form (`/var/...`) — or vice versa. Try both
+    // forms before giving up. In production this almost never matters
+    // (real project paths like `/Users/<name>/Development/<repo>` have
+    // no symlinks in the prefix) but tempdir-based tests exercise it.
+    let realCwd = cwd;
+    try {
+        realCwd = (0, node_fs_1.realpathSync)(cwd);
+    }
+    catch {
+        /* cwd doesn't exist or unreadable — fall back to literal */
+    }
+    const localEntry = claudeJson?.projects?.[cwd]?.mcpServers?.[exports.RITUAL_SERVER_NAME] ??
+        (realCwd !== cwd
+            ? claudeJson?.projects?.[realCwd]?.mcpServers?.[exports.RITUAL_SERVER_NAME]
+            : undefined);
+    if (localEntry?.url) {
+        out.push({
+            scope: 'local',
+            configPath: claudeJsonPath,
+            projectPath: cwd,
+            url: localEntry.url,
+            bearerToken: extractBearer(localEntry),
+        });
+    }
+    const userEntry = claudeJson?.mcpServers?.[exports.RITUAL_SERVER_NAME];
+    if (userEntry?.url) {
+        out.push({
+            scope: 'user',
+            configPath: claudeJsonPath,
+            url: userEntry.url,
+            bearerToken: extractBearer(userEntry),
+        });
+    }
+    return out;
+}
+/**
+ * Detect shadow drift: more than one entry exists across scopes AND
+ * the higher-precedence entry's bearer differs from the user-scope
+ * entry's. Returns the offending higher-precedence entries (which
+ * is what doctor surfaces as actionable).
+ *
+ * If only `user` is present, returns []. If `project` or `local`
+ * holds the SAME token as `user`, returns [] (no drift — just a
+ * scope-redundancy, harmless). If they hold different tokens, the
+ * shadowing entry is returned for cleanup.
+ */
+function findShadowingEntries(entries) {
+    const userEntry = entries.find((e) => e.scope === 'user');
+    if (!userEntry || !userEntry.bearerToken)
+        return [];
+    return entries.filter((e) => e.scope !== 'user' &&
+        e.bearerToken !== null &&
+        e.bearerToken !== userEntry.bearerToken);
+}
+/**
+ * Convenience: the `claude mcp remove ritual -s <scope>` line a user
+ * should run to clean up a specific entry. Returns the literal
+ * command string so doctor can render it inline in the actionable
+ * fix-it text.
+ */
+function fixCommandFor(entry) {
+    return `claude mcp remove ${exports.RITUAL_SERVER_NAME} -s ${entry.scope}`;
+}
+//# sourceMappingURL=claude-code-scopes.js.map

package/dist/lib/claude-code-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-scopes.js","sourceRoot":"","sources":["../../src/lib/claude-code-scopes.ts"],"names":[],"mappings":";;;AAqHA,wDA8DC;AAaD,oDAUC;AAQD,sCAEC;AApND,qCAAiE;AACjE,qCAAkC;AAClC,yCAAiC;AAoDjC;;;GAGG;AACU,QAAA,kBAAkB,GAAG,QAAQ,CAAC;AAiB3C;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAe;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,qEAAqE;IACrE,MAAM,OAAO,GACZ,OAAO,CAAC,eAAe,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAI,IAAY;IACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB,CACrC,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,OAAe,IAAA,iBAAO,GAAE;IAExB,MAAM,GAAG,GAAuB,EAAE,CAAC;IAEnC,oDAAoD;IACpD,MAAM,cAAc,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,cAAc,CAAsB,cAAc,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC,0BAAkB,CAAC,CAAC;IAClE,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,cAAc;YAC1B,WAAW,EAAE,GAAG;YAChB,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,WAAW,EAAE,aAAa,CAAC,YAAY,CAAC;SACxC,CAAC,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,MAAM,cAAc,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,cAAc,CAAkB,cAAc,CAAC,CAAC;IAEnE,+DAA+D;IAC/D,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI,OAAO,GAAW,GAAG,CAAC;IAC1B,IAAI,CAAC;QACJ,OAAO,GAAG,IAAA,sBAAY,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,4DAA4D;IAC7D,CAAC;IACD,MAAM,UAAU,GACf,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,0BAAkB,CAAC;QAC7D,CAAC,OAAO,KAAK,GAAG;YACf,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,0BAAkB,CAAC;YACnE,CAAC,CAAC,SAAS,CAAC,CAAC;IACf,IAAI,UAAU,EAAE,GAAG,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,OAAO;YACd,UAAU,EAAE,cAAc;YAC1B,WAAW,EAAE,GAAG;YAChB,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC;SACtC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,UAAU,EAAE,CAAC,0BAAkB,CAAC,CAAC;IAC/D,IAAI,SAAS,EAAE,GAAG,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,cAAc;YAC1B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,WAAW,EAAE,aAAa,CAAC,SAAS,CAAC;SACrC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,oBAAoB,CAAC,OAA2B;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAEpD,OAAO,OAAO,CAAC,MAAM,CACpB,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,CAAC,KAAK,KAAK,MAAM;QAClB,CAAC,CAAC,WAAW,KAAK,IAAI;QACtB,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CACxC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,KAAuB;IACpD,OAAO,qBAAqB,0BAAkB,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;AACpE,CAAC"}

package/dist/lib/node-managers.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reportNodeManagers = reportNodeManagers;
+exports.findDeadHyphenatedInstalls = findDeadHyphenatedInstalls;
+exports.findShadowedInstalls = findShadowedInstalls;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+/**
+ * Read a single `package.json` and extract `{ name, version }`.
+ * Returns null on any read/parse failure — caller treats absence as
+ * "no install at this path", not as an error.
+ */
+function readPackageInfo(path) {
+    try {
+        const raw = (0, node_fs_1.readFileSync)(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.name !== 'string' || typeof parsed.version !== 'string')
+            return null;
+        return { name: parsed.name, version: parsed.version };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Given a directory we believe contains one or more Node version
+ * installations as immediate subdirectories, probe each for the two
+ * ritual packages. `nodeVersionDirPattern` describes how to derive the
+ * `lib/node_modules` location from each version dir.
+ *
+ * fnm layout:     ~/.local/share/fnm/node-versions/v20.19.2/installation/lib/node_modules
+ * nvm layout:     ~/.nvm/versions/node/v20.19.2/lib/node_modules
+ * asdf layout:    ~/.asdf/installs/nodejs/20.19.2/.npm/lib/node_modules
+ */
+function scanVersionRoot(manager, versionsRoot, libPathFromVersion) {
+    if (!(0, node_fs_1.existsSync)(versionsRoot))
+        return [];
+    let versionDirs;
+    try {
+        versionDirs = (0, node_fs_1.readdirSync)(versionsRoot, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    const packageNames = ['@ritualai/cli', '@ritual-ai/cli'];
+    for (const versionDir of versionDirs) {
+        const nodeModules = libPathFromVersion((0, node_path_1.join)(versionsRoot, versionDir));
+        for (const pkg of packageNames) {
+            const pkgJson = (0, node_path_1.join)(nodeModules, ...pkg.split('/'), 'package.json');
+            const info = readPackageInfo(pkgJson);
+            if (!info)
+                continue;
+            if (info.name !== pkg)
+                continue;
+            out.push({
+                manager,
+                nodeVersion: versionDir,
+                packageName: pkg,
+                version: info.version,
+                packageJsonPath: pkgJson,
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Build the full report. Each manager is probed at its canonical
+ * install root; absence of a root is treated as "manager not used,"
+ * not an error. The aggregate `anyManagerPresent` is true if at least
+ * one root existed (whether or not it had ritual installs).
+ *
+ * NB: this does NOT probe the currently-active Node's global path —
+ * that's already reflected in `process.version` and the doctor reports
+ * it separately. The point of this report is shadowing detection: what
+ * other Node versions exist that you might silently fall through to.
+ */
+function reportNodeManagers(home = (0, node_os_1.homedir)()) {
+    const fnmRoot = (0, node_path_1.join)(home, '.local', 'share', 'fnm', 'node-versions');
+    const nvmRoot = (0, node_path_1.join)(home, '.nvm', 'versions', 'node');
+    const asdfRoot = (0, node_path_1.join)(home, '.asdf', 'installs', 'nodejs');
+    const anyManagerPresent = (0, node_fs_1.existsSync)(fnmRoot) || (0, node_fs_1.existsSync)(nvmRoot) || (0, node_fs_1.existsSync)(asdfRoot);
+    const installs = [
+        ...scanVersionRoot('fnm', fnmRoot, (v) => (0, node_path_1.join)(v, 'installation', 'lib', 'node_modules')),
+        ...scanVersionRoot('nvm', nvmRoot, (v) => (0, node_path_1.join)(v, 'lib', 'node_modules')),
+        // asdf's node plugin uses npm's per-version prefix under `.npm`.
+        // This is the path npm itself writes to when you `npm i -g`
+        // under an asdf-managed Node.
+        ...scanVersionRoot('asdf', asdfRoot, (v) => (0, node_path_1.join)(v, '.npm', 'lib', 'node_modules')),
+    ];
+    return { anyManagerPresent, installs };
+}
+/**
+ * Pull just the dead-package installs out of a report. Used by doctor
+ * to render a louder warning — having `@ritual-ai/cli` installed
+ * anywhere is always a problem (it's the dead 0.1.x legacy), regardless
+ * of whether the *current* shell picks it up.
+ */
+function findDeadHyphenatedInstalls(report) {
+    return report.installs.filter((i) => i.packageName === '@ritual-ai/cli');
+}
+/**
+ * Pull installs that are NOT the version of `currentVersion` (and not
+ * the dead hyphenated package — that's a separate, louder warning).
+ * These are "you've got a stale install on another Node version that
+ * will surface when fnm switches under you" candidates.
+ */
+function findShadowedInstalls(report, currentVersion) {
+    return report.installs.filter((i) => i.packageName === '@ritualai/cli' && i.version !== currentVersion);
+}
+//# sourceMappingURL=node-managers.js.map

package/dist/lib/node-managers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-managers.js","sourceRoot":"","sources":["../../src/lib/node-managers.ts"],"names":[],"mappings":";;AAiIA,gDAiBC;AAQD,gEAEC;AAQD,oDAOC;AA3KD,qCAAgE;AAChE,qCAAkC;AAClC,yCAAiC;AAoDjC;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACpC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwC,CAAC;QACtE,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CACvB,OAAoB,EACpB,YAAoB,EACpB,kBAAkD;IAElD,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,IAAI,WAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,WAAW,GAAG,IAAA,qBAAW,EAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC9D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,YAAY,GAAmC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAEzF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAA,gBAAI,EAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YAChC,GAAG,CAAC,IAAI,CAAC;gBACR,OAAO;gBACP,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,eAAe,EAAE,OAAO;aACxB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB,CAAC,IAAI,GAAG,IAAA,iBAAO,GAAE;IAClD,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE3D,MAAM,iBAAiB,GAAG,IAAA,oBAAU,EAAC,OAAO,CAAC,IAAI,IAAA,oBAAU,EAAC,OAAO,CAAC,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,CAAC;IAE7F,MAAM,QAAQ,GAAoB;QACjC,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QACzF,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QACzE,iEAAiE;QACjE,4DAA4D;QAC5D,8BAA8B;QAC9B,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;KACnF,CAAC;IAEF,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,MAAyB;IACnE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,gBAAgB,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CACnC,MAAyB,EACzB,cAAsB;IAEtB,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,eAAe,IAAI,CAAC,CAAC,OAAO,KAAK,cAAc,CACxE,CAAC;AACH,CAAC"}

package/dist/lib/npm-registry.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLatestNpmVersion = getLatestNpmVersion;
+exports.isNewerVersion = isNewerVersion;
+const node_https_1 = require("node:https");
+/**
+ * Fetch the latest published version of an npm package from the public
+ * registry. Used by `ritual doctor` to surface "you're on 0.7.10 but
+ * 0.7.11 is available."
+ *
+ * Pure HTTPS — no dependency on a registry client library. We hit the
+ * package metadata endpoint and read `dist-tags.latest`, which is what
+ * `npm view <pkg> version` returns.
+ *
+ * Hard timeout because `ritual doctor` runs synchronously in the user's
+ * terminal and a hung network call would hang the diagnostic. Caller
+ * should treat null as "couldn't determine" (e.g. offline, registry
+ * down, corporate proxy) rather than "package doesn't exist."
+ *
+ * Why we don't use `child_process.execSync('npm view ...')`:
+ *   - Shells out to `npm`, which loads ~600ms of Node startup just for
+ *     the registry round-trip.
+ *   - Adds an implicit dependency on `npm` being on PATH (we don't
+ *     enforce that — a user could be on pnpm or yarn).
+ *   - Surfaces npm's stderr noise (deprecation warnings, etc.) to the
+ *     diagnostic output.
+ */
+async function getLatestNpmVersion(packageName, timeoutMs = 2000) {
+    return new Promise((resolve) => {
+        // Encode scoped package names (`@scope/name`) for the URL path.
+        // `encodeURIComponent` turns `@` into `%40` and `/` into `%2F`,
+        // which is the registry's expected form for scoped packages.
+        const encoded = encodeURIComponent(packageName);
+        const url = `https://registry.npmjs.org/${encoded}`;
+        const req = (0, node_https_1.request)(url, {
+            method: 'GET',
+            headers: {
+                // Slim metadata response — full doc is megabytes for
+                // packages with long publish histories. `abbreviated`
+                // returns only the fields we need (~5KB).
+                Accept: 'application/vnd.npm.install-v1+json',
+                'User-Agent': '@ritualai/cli (doctor)',
+            },
+        }, (res) => {
+            if (res.statusCode !== 200) {
+                res.resume(); // drain and discard
+                resolve(null);
+                return;
+            }
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                try {
+                    const body = Buffer.concat(chunks).toString('utf-8');
+                    const parsed = JSON.parse(body);
+                    const latest = parsed['dist-tags']?.latest;
+                    resolve(typeof latest === 'string' ? latest : null);
+                }
+                catch {
+                    resolve(null);
+                }
+            });
+            res.on('error', () => resolve(null));
+        });
+        req.setTimeout(timeoutMs, () => {
+            req.destroy();
+            resolve(null);
+        });
+        req.on('error', () => resolve(null));
+        req.end();
+    });
+}
+/**
+ * Loose semver compare: return true iff `latest` is strictly newer than
+ * `installed`. Tolerates `0.0.0-unknown` (used when we can't read our
+ * own version) by treating it as "always outdated" — which surfaces a
+ * loud error in doctor rather than silently passing.
+ *
+ * We deliberately don't pull in `semver` as a dep here — the cost
+ * (parse error handling, prerelease semantics, range syntax) isn't
+ * justified for a one-call compare. Splitting on '.' and comparing as
+ * numeric tuples is sufficient for our 0.X.Y release line.
+ */
+function isNewerVersion(installed, latest) {
+    if (installed === latest)
+        return false;
+    if (installed === '0.0.0-unknown')
+        return true;
+    const parse = (v) => v
+        .split('-')[0] // strip prerelease (e.g. -beta.1)
+        .split('.')
+        .map((s) => Number.parseInt(s, 10))
+        .map((n) => (Number.isFinite(n) ? n : 0));
+    const a = parse(installed);
+    const b = parse(latest);
+    const len = Math.max(a.length, b.length);
+    for (let i = 0; i < len; i++) {
+        const ai = a[i] ?? 0;
+        const bi = b[i] ?? 0;
+        if (bi > ai)
+            return true;
+        if (bi < ai)
+            return false;
+    }
+    return false;
+}
+//# sourceMappingURL=npm-registry.js.map

package/dist/lib/npm-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry.js","sourceRoot":"","sources":["../../src/lib/npm-registry.ts"],"names":[],"mappings":";;AAwBA,kDAsDC;AAaD,wCAqBC;AAhHD,2CAAqD;AAErD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACI,KAAK,UAAU,mBAAmB,CACxC,WAAmB,EACnB,SAAS,GAAG,IAAI;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,gEAAgE;QAChE,gEAAgE;QAChE,6DAA6D;QAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,8BAA8B,OAAO,EAAE,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAA,oBAAY,EACvB,GAAG,EACH;YACC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACR,qDAAqD;gBACrD,sDAAsD;gBACtD,0CAA0C;gBAC1C,MAAM,EAAE,qCAAqC;gBAC7C,YAAY,EAAE,wBAAwB;aACtC;SACD,EACD,CAAC,GAAG,EAAE,EAAE;YACP,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,oBAAoB;gBAClC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACR,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAClB,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAE7B,CAAC;oBACF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;oBAC3C,OAAO,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;YACF,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC,CACD,CAAC;QAEF,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE;YAC9B,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,GAAG,CAAC,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,SAAiB,EAAE,MAAc;IAC/D,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,KAAK,GAAG,CAAC,CAAS,EAAY,EAAE,CACrC,CAAC;SACC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC;SAChD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/lib/skill-bundles.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findLocalSkillBundles = findLocalSkillBundles;
+exports.findStaleBundles = findStaleBundles;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const providers_1 = require("./agents/providers");
+const skill_manifest_1 = require("./skill-manifest");
+/**
+ * Walk every known provider's `projectSkillDir` under `projectDir` and
+ * collect each child directory as a candidate skill bundle. Reads each
+ * manifest and compares to `cliVersion`.
+ *
+ * Hidden directories (those starting with `.`) are skipped — they're
+ * either dotfiles or our own manifest companions, never skill dirs.
+ *
+ * `cliVersion` is passed in (rather than read from package-info here)
+ * so tests can inject a fixed value.
+ */
+function findLocalSkillBundles(projectDir, cliVersion) {
+    const found = [];
+    for (const provider of providers_1.PROVIDERS) {
+        const skillRoot = (0, node_path_1.join)(projectDir, provider.projectSkillDir);
+        if (!(0, node_fs_1.existsSync)(skillRoot))
+            continue;
+        let entries;
+        try {
+            entries = (0, node_fs_1.readdirSync)(skillRoot, { withFileTypes: true })
+                .filter((d) => d.isDirectory() && !d.name.startsWith('.'))
+                .map((d) => d.name);
+        }
+        catch {
+            continue;
+        }
+        for (const skillName of entries) {
+            const path = (0, node_path_1.join)(skillRoot, skillName);
+            // Defensive: a non-directory slipping through (race, symlink
+            // loop) just gets skipped.
+            try {
+                if (!(0, node_fs_1.statSync)(path).isDirectory())
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            const manifest = (0, skill_manifest_1.readSkillManifest)(path);
+            const drift = (0, skill_manifest_1.compareToCliVersion)(manifest, cliVersion);
+            found.push({ provider, skillName, path, drift });
+        }
+    }
+    return found;
+}
+/**
+ * Subset of bundles whose drift status indicates a refresh would help.
+ * Both `drift` (manifest present, version mismatch) AND `unknown`
+ * (manifest missing — pre-0.7.11 bundle) are considered actionable:
+ * running `ritual init --skills-only` is the same fix for either case.
+ */
+function findStaleBundles(bundles) {
+    return bundles.filter((b) => b.drift.kind === 'drift' || b.drift.kind === 'unknown');
+}
+//# sourceMappingURL=skill-bundles.js.map

package/dist/lib/skill-bundles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-bundles.js","sourceRoot":"","sources":["../../src/lib/skill-bundles.ts"],"names":[],"mappings":";;AAqCA,sDAgCC;AAQD,4CAEC;AA/ED,qCAA4D;AAC5D,yCAAiC;AACjC,kDAAmE;AACnE,qDAA4F;AAuB5F;;;;;;;;;;GAUG;AACH,SAAgB,qBAAqB,CAAC,UAAkB,EAAE,UAAkB;IAC3E,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,KAAK,MAAM,QAAQ,IAAI,qBAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC;YAAE,SAAS;QAErC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,OAAO,GAAG,IAAA,qBAAW,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBACvD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;iBACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACxC,6DAA6D;YAC7D,2BAA2B;YAC3B,IAAI,CAAC;gBACJ,IAAI,CAAC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAS;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,IAAA,kCAAiB,EAAC,IAAI,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAA,oCAAmB,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,OAA2B;IAC3D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;AACtF,CAAC"}

package/dist/lib/skill-manifest.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANIFEST_FILENAME = void 0;
+exports.writeSkillManifest = writeSkillManifest;
+exports.readSkillManifest = readSkillManifest;
+exports.compareToCliVersion = compareToCliVersion;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.MANIFEST_FILENAME = '.ritual-bundle.json';
+/**
+ * Write a manifest into `dir`. Used by the build-skills script.
+ *
+ * Always overwrites. `dir` must exist — caller is responsible for
+ * mkdir.
+ */
+function writeSkillManifest(dir, manifest) {
+    const path = (0, node_path_1.join)(dir, exports.MANIFEST_FILENAME);
+    (0, node_fs_1.writeFileSync)(path, JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
+}
+/**
+ * Read a manifest from `dir`. Returns `null` if absent or unparseable.
+ *
+ * Never throws — drift checks are best-effort and an unreadable
+ * manifest just means "we can't tell," not "crash the doctor."
+ */
+function readSkillManifest(dir) {
+    const path = (0, node_path_1.join)(dir, exports.MANIFEST_FILENAME);
+    if (!(0, node_fs_1.existsSync)(path))
+        return null;
+    try {
+        const raw = (0, node_fs_1.readFileSync)(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.cliVersion !== 'string' || parsed.cliVersion.length === 0) {
+            return null;
+        }
+        if (typeof parsed.builtAt !== 'string' || parsed.builtAt.length === 0) {
+            return null;
+        }
+        return { cliVersion: parsed.cliVersion, builtAt: parsed.builtAt };
+    }
+    catch {
+        return null;
+    }
+}
+function compareToCliVersion(manifest, cliVersion) {
+    if (!manifest)
+        return { kind: 'unknown' };
+    if (manifest.cliVersion === cliVersion) {
+        return { kind: 'in-sync', bundleVersion: manifest.cliVersion };
+    }
+    return { kind: 'drift', bundleVersion: manifest.cliVersion, cliVersion };
+}
+//# sourceMappingURL=skill-manifest.js.map

package/dist/lib/skill-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-manifest.js","sourceRoot":"","sources":["../../src/lib/skill-manifest.ts"],"names":[],"mappings":";;;AA0CA,gDAGC;AAQD,8CAgBC;AAkBD,kDASC;AAhGD,qCAAkE;AAClE,yCAAiC;AAiCpB,QAAA,iBAAiB,GAAG,qBAAqB,CAAC;AAEvD;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,GAAW,EAAE,QAA6B;IAC5E,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,yBAAiB,CAAC,CAAC;IAC1C,IAAA,uBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,yBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiC,CAAC;QAC/D,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAkBD,SAAgB,mBAAmB,CAClC,QAAoC,EACpC,UAAkB;IAElB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;AAC1E,CAAC"}