@wasmsoft/fantastic 1.0.0

package/dist/doctor/checks/environment.check.js

@@ -0,0 +1,70 @@
+import { accessSync, constants, existsSync } from "node:fs";
+import { join } from "node:path";
+import { BUNDLE_DIRS, SHIM_FILES } from "../../packaging/layout.js";
+// AR: فحوص البيئة. كلّها محلّية بالكامل: نسخة العُقدة، ملفّ التشغيل، وقابلية الكتابة في مجلد
+//     البيانات. لا نداء شبكة هنا، فتعمل هذه الفحوص والنواة ميّتة — وهي الحالة التي يُستدعى فيها
+//     ‎doctor‎ غالبًا.
+// EN: Environment checks. Entirely local: runtime version, resolved profile, and whether the data
+//     directory can be written. No network call here, so these work with the core dead — which is
+//     the state `doctor` is usually called in.
+/** أدنى نسخة عُقدة يعلنها ‎engines‎ في كل مساحات العمل. */
+const MIN_NODE_MAJOR = 20;
+function majorOf(version) {
+    return Number.parseInt(version.replace(/^v/, "").split(".")[0] ?? "0", 10);
+}
+export const nodeVersionCheck = {
+    id: "env.node",
+    category: "environment",
+    title: "Node runtime",
+    async run() {
+        const major = majorOf(process.version);
+        return {
+            status: major >= MIN_NODE_MAJOR ? "pass" : "fail",
+            detail: process.version,
+            evidence: `requires >= ${MIN_NODE_MAJOR}`,
+        };
+    },
+    // AR: العلاج يختلف باختلاف الأرض. **على جهاز العميل «ثبّت Node» نصيحة خاطئة** منذ ٠١٨: الجهاز لا
+    //     يُطالَب بتثبيت شيء، والحزمة تشحن زمن تشغيلها. فإصدارٌ قديم هناك يعني أن الأمر لم يمرّ بالشيمة،
+    //     وهو ما يُصلَح باستعمالها لا بتثبيت Node على آلة العميل.
+    // EN: The remedy differs by ground. **On a customer's appliance "install Node" is wrong advice** as
+    //     of 018: the appliance is asked to install nothing, and the bundle ships its own runtime. So an
+    //     old version there means the command did not go through the shim, which is fixed by using it
+    //     rather than by installing Node on a customer's machine.
+    remedy: (result, { profile }) => profile.kind === "appliance"
+        ? `The appliance never needs Node installed — the bundle ships its own. Run the command through ${join(profile.root, BUNDLE_DIRS.bin, SHIM_FILES.command)} instead of a globally installed CLI.`
+        : `Install Node ${MIN_NODE_MAJOR} or newer; this process is running ${result.detail ?? "an unknown version"}.`,
+};
+export const profileCheck = {
+    id: "env.profile",
+    category: "environment",
+    title: "Profile",
+    async run({ profile }) {
+        return { status: "pass", detail: profile.kind, evidence: profile.root };
+    },
+    // يمرّ دائمًا: لو تعذّر الاستنتاج لخرج الأمر بالرمز 5 قبل أن يصل أي فحص إلى هنا.
+    remedy: () => "Pass --profile dev or --profile appliance explicitly.",
+};
+export const dataDirCheck = {
+    id: "env.data-dir",
+    category: "environment",
+    title: "Data directory writable",
+    async run({ profile }) {
+        if (!existsSync(profile.dataDir)) {
+            // غيابه ليس فشلًا: أول تشغيل لم يُنشئه بعد، و‎setup‎ هو من يُنشئه.
+            return { status: "warn", detail: "missing", evidence: profile.dataDir };
+        }
+        try {
+            accessSync(profile.dataDir, constants.W_OK);
+            return { status: "pass", detail: "writable", evidence: profile.dataDir };
+        }
+        catch {
+            return { status: "fail", detail: "not writable", evidence: profile.dataDir };
+        }
+    },
+    remedy: (result, { profile }) => result.detail === "missing"
+        ? `Run: fantastic setup — it creates ${profile.dataDir} and applies migrations.`
+        : `Grant write access to ${profile.dataDir}, or run the terminal as an administrator.`,
+};
+export const environmentChecks = [nodeVersionCheck, profileCheck, dataDirCheck];
+//# sourceMappingURL=environment.check.js.map

package/dist/doctor/checks/environment.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/environment.check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGpE,6FAA6F;AAC7F,gGAAgG;AAChG,uBAAuB;AACvB,kGAAkG;AAClG,kGAAkG;AAClG,+CAA+C;AAE/C,2DAA2D;AAC3D,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,EAAE,EAAE,UAAU;IACd,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,cAAc;IACrB,KAAK,CAAC,GAAG;QACP,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEvC,OAAO;YACL,MAAM,EAAE,KAAK,IAAI,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACjD,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,QAAQ,EAAE,eAAe,cAAc,EAAE;SAC1C,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,qGAAqG;IACrG,8DAA8D;IAC9D,oGAAoG;IACpG,qGAAqG;IACrG,kGAAkG;IAClG,8DAA8D;IAC9D,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,KAAK,WAAW;QAC1B,CAAC,CAAC,gGAAgG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,uCAAuC;QAChM,CAAC,CAAC,gBAAgB,cAAc,sCAAsC,MAAM,CAAC,MAAM,IAAI,oBAAoB,GAAG;CACnH,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,EAAE,EAAE,aAAa;IACjB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,SAAS;IAChB,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACnB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,iFAAiF;IACjF,MAAM,EAAE,GAAG,EAAE,CAAC,uDAAuD;CACtE,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,yBAAyB;IAChC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,mEAAmE;YACnE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,qCAAqC,OAAO,CAAC,OAAO,0BAA0B;QAChF,CAAC,CAAC,yBAAyB,OAAO,CAAC,OAAO,4CAA4C;CAC3F,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,gBAAgB,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC"}

package/dist/doctor/checks/integrity.check.d.ts

@@ -0,0 +1,4 @@
+import type { DiagnosticCheck } from "../check.types.js";
+export declare const manifestIntegrityCheck: DiagnosticCheck;
+export declare const integrityChecks: DiagnosticCheck[];
+//# sourceMappingURL=integrity.check.d.ts.map

package/dist/doctor/checks/integrity.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.check.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/integrity.check.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAe,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAqCtE,eAAO,MAAM,sBAAsB,EAAE,eAwDpC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,eAAe,EAA6B,CAAC"}

package/dist/doctor/checks/integrity.check.js

@@ -0,0 +1,89 @@
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { BUNDLE_DIRS } from "../../packaging/layout.js";
+import { hashDirectory } from "../../packaging/manifest.js";
+// AR: فحص السلامة مقابل ‎updates/versions.json‎.
+//
+//     **نطاقه معلَن بصراحة داخل رسالته: يكشف التلف والعبث، ولا يثبت الأصالة.** ما دام الحقل
+//     ‎signature‎ فارغًا (وهو كذلك حتى تصل ميزة التحديثات)، فمن يستطيع تعديل ملف يستطيع تعديل بصمته
+//     المسجَّلة معه. ادّعاء «سليم» هنا بمعنى «موثوق» سيكون كذبًا مريحًا، ونحن نرفضه صراحةً بدل أن
+//     نتركه ضمنيًا.
+//
+//     لا وجود لبيان الإصدارات في المستودع، وهذا **ليس فشلًا**: البيان يُكتب عند التغليف وحده.
+// EN: Integrity against updates/versions.json.
+//
+//     **Its scope is stated inside its own message: it detects corruption and tampering, and does
+//     not prove authenticity.** While `signature` is null — and it is, until the update feature
+//     lands — whoever can alter a file can alter the fingerprint recorded beside it. Claiming "ok"
+//     here in the sense of "trusted" would be a comfortable lie, and we reject it explicitly rather
+//     than leaving it implied.
+//
+//     A repository has no manifest, and that is **not a failure**: it is written at bundle time.
+const MANIFEST_RELATIVE = join("updates", "versions.json");
+// AR: **البصمة تُستورَد ولا تُستنسَخ.** كانت هنا نسخة ثانية من الخوارزمية «بنفس المنطق»، وقد انحرفت:
+//     كاتب البيان يضمّ **المسار النسبي** لكل ملف (فنقلُ ملفٍّ بلا تغيير محتواه يُكشَف)، وهذه النسخة
+//     كانت تضمّ **اسمه فقط**. فالبصمتان مختلفتان لأي شجرة فيها مجلد واحد، وفحص السلامة كان يعلن
+//     «تغيّرت المكوّنات» على كل جهاز مركّب سليم — إنذارٌ كاذب دائم يُدرَّب الفنّي على تجاهله، وهو أسوأ
+//     من غياب الفحص لأنه يُبطل الفحص الحقيقي معه يوم يقع تلفٌ فعليّ.
+//     مصدرٌ واحد يجعل الانحراف مستحيلًا بالبنية لا بالانتباه.
+// EN: **The fingerprint is imported, never re-implemented.** A second copy of the algorithm lived
+//     here "with the same logic", and it had drifted: the manifest writer folds in each file's
+//     **relative path** (so moving a file without changing its content is detected), while this copy
+//     folded in **its name alone**. The two digests differ for any tree containing a directory, and
+//     the integrity check therefore reported "components changed" on every sound installation — a
+//     permanent false alarm that trains a technician to ignore it, which is worse than no check at
+//     all, because it disables the real one on the day damage actually occurs.
+//     One source makes the drift structurally impossible rather than a matter of vigilance.
+export const manifestIntegrityCheck = {
+    id: "integrity.manifest",
+    category: "integrity",
+    title: "Installed components",
+    async run({ profile }) {
+        const manifestPath = join(profile.root, MANIFEST_RELATIVE);
+        if (!existsSync(manifestPath)) {
+            return {
+                status: profile.kind === "appliance" ? "warn" : "pass",
+                detail: profile.kind === "appliance" ? "no manifest" : "not applicable in a repository",
+                evidence: manifestPath,
+            };
+        }
+        let manifest;
+        try {
+            manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+        }
+        catch {
+            return { status: "fail", detail: "manifest is unreadable", evidence: manifestPath };
+        }
+        const mismatched = [];
+        let compared = 0;
+        for (const [name, component] of Object.entries(manifest.components)) {
+            if (!("sha256" in component) || !("files" in component))
+                continue;
+            // الواجهة وحدها بصمتها على ‎interface\client‎ لا على ‎interface‎: هكذا كتبها البيان، فهكذا تُقرأ.
+            const relative = name === "interface" ? BUNDLE_DIRS.interfaceClient : name;
+            const dir = join(profile.root, relative);
+            if (!existsSync(dir) || !statSync(dir).isDirectory()) {
+                mismatched.push(`${name} (missing)`);
+                continue;
+            }
+            compared += 1;
+            if (hashDirectory(dir).sha256 !== component.sha256)
+                mismatched.push(name);
+        }
+        if (mismatched.length > 0) {
+            return { status: "fail", detail: `${mismatched.length} changed`, evidence: mismatched.join(", ") };
+        }
+        return {
+            status: "pass",
+            // النطاق مكتوب في القيمة المعروضة نفسها، لا في حاشية يتخطّاها القارئ.
+            detail: `${compared} match · detects damage, not authenticity`,
+            evidence: manifest.bundle.unverified ? "this bundle was produced without a smoke boot" : undefined,
+        };
+    },
+    remedy: (result) => result.detail === "manifest is unreadable"
+        ? "The bundle manifest is corrupt. Reinstall from the original archive."
+        : `Components differ from what was installed (${result.evidence ?? "unknown"}). ` +
+            "Reinstall from the original archive; do not patch files in place.",
+};
+export const integrityChecks = [manifestIntegrityCheck];
+//# sourceMappingURL=integrity.check.js.map

package/dist/doctor/checks/integrity.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/integrity.check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAG5D,iDAAiD;AACjD,EAAE;AACF,4FAA4F;AAC5F,oGAAoG;AACpG,kGAAkG;AAClG,oBAAoB;AACpB,EAAE;AACF,8FAA8F;AAC9F,+CAA+C;AAC/C,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,mGAAmG;AACnG,oGAAoG;AACpG,+BAA+B;AAC/B,EAAE;AACF,iGAAiG;AAEjG,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAE3D,qGAAqG;AACrG,oGAAoG;AACpG,gGAAgG;AAChG,uGAAuG;AACvG,qEAAqE;AACrE,8DAA8D;AAC9D,kGAAkG;AAClG,+FAA+F;AAC/F,qGAAqG;AACrG,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,+EAA+E;AAC/E,4FAA4F;AAE5F,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,EAAE,EAAE,oBAAoB;IACxB,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,sBAAsB;IAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACtD,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gCAAgC;gBACvF,QAAQ,EAAE,YAAY;aACvB,CAAC;QACJ,CAAC;QAED,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAmB,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC;gBAAE,SAAS;YAElE,kGAAkG;YAClG,MAAM,QAAQ,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrD,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrG,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM;YACd,sEAAsE;YACtE,MAAM,EAAE,GAAG,QAAQ,2CAA2C;YAC9D,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,SAAS;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,MAAM,KAAK,wBAAwB;QACxC,CAAC,CAAC,sEAAsE;QACxE,CAAC,CAAC,8CAA8C,MAAM,CAAC,QAAQ,IAAI,SAAS,KAAK;YAC/E,mEAAmE;CAC1E,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,sBAAsB,CAAC,CAAC"}

package/dist/doctor/checks/isolation.check.d.ts

@@ -0,0 +1,49 @@
+import type { DiagnosticCheck } from "../check.types.js";
+/**
+ * AR: أي ‎node.exe‎ يشغّل هذه العملية الآن، وأين هو. حين يشتكي فنّي يومًا يُقطع السؤال بسطر بدل
+ *     تخمين: زمن تشغيل الحزمة أم زمن تشغيل الجهاز؟ والسؤال ليس نظريًّا — أربعة أعطال ميدانية سببها
+ *     كان بالضبط أن الواجهة تعمل بـNode الجهاز.
+ * EN: Which `node.exe` is running this process right now, and where it lives. When a technician one
+ *     day reports trouble, this settles in a line what would otherwise be guesswork: the bundle's
+ *     runtime or the machine's? The question is not theoretical — four field failures came down to
+ *     exactly this, the CLI running on the machine's Node.
+ */
+export declare const runtimeCheck: DiagnosticCheck;
+/**
+ * AR: **يمسك خرق القاعدة I آليًّا.** ‎bin\‎ على PATH هو ما يجعل الأمر ‎fantastic‎ متاحًا؛ و‎runtime\‎
+ *     على PATH هو ما يُبطل الميزة كلّها، لأن ‎node‎ المجرّدة تصير نسختَنا فتُكسَر مشاريع العميل.
+ *     الأول غيابه إزعاج، والثاني وجوده عطبٌ جسيم — فيُصنَّفان تبعًا لذلك: تحذير وفشل.
+ * EN: **Catches a breach of rule I automatically.** `bin\` on PATH is what makes the `fantastic`
+ *     command available; `runtime\` on PATH is what defeats the entire feature, because a bare `node`
+ *     then resolves to our copy and the customer's projects break. Missing the first is an
+ *     inconvenience; the presence of the second is serious damage — and they are graded accordingly:
+ *     a warning and a failure.
+ */
+export declare const pathIsolationCheck: DiagnosticCheck;
+/**
+ * AR: **أيّ ‎fantastic‎ يعمل حين تُكتب الكلمة مجرّدة؟**
+ *
+ *     التثبيت يُلحق ‎bin\‎ في **آخر** PATH عمدًا (القاعدة I: لا نحجب شيئًا على جهاز لا نملكه). ونتيجته
+ *     أن تثبيتًا قديمًا بـ‎npm install -g‎ — إن بقي على الجهاز — يسبقنا فيفوز، فيكتب الفنّي
+ *     ‎fantastic‎ ويصل إلى الواجهة القديمة تعمل بـNode الجهاز. وهذا يُعيد بالضبط العطب الذي وُجدت
+ *     هذه الميزة لإسقاطه: على Node 16 تنهار عند التحليل بـ‎Invalid regular expression flags‎ قبل أن
+ *     تنفّذ سطرًا.
+ *
+ *     رُصد على جهاز عميل حقيقي: النظام مثبَّت وسليم ويعمل، والفنّي يرى شاشة أخطاء لأنه يخاطب نسخة
+ *     أخرى تمامًا. ولا شيء في النظام يشتكي، لأن لا شيء فيه معطوب.
+ * EN: **Which `fantastic` runs when the bare word is typed?**
+ *
+ *     The installer appends `bin\` to the **end** of PATH deliberately (rule I: we shadow nothing on a
+ *     machine we do not own). The consequence is that an older `npm install -g` — if it is still on
+ *     the machine — comes first and wins, so the technician types `fantastic` and reaches the old CLI
+ *     running on the machine's Node. That reinstates precisely the defect this feature exists to
+ *     remove: on Node 16 it dies at parse time with `Invalid regular expression flags` before running
+ *     a line.
+ *
+ *     Observed on a real customer machine: the system installed, sound and running, while the
+ *     technician read a screen of errors because they were addressing an entirely different copy. And
+ *     nothing in the system complains, because nothing in it is broken.
+ */
+export declare const commandShadowCheck: DiagnosticCheck;
+export declare const isolationChecks: DiagnosticCheck[];
+//# sourceMappingURL=isolation.check.d.ts.map

package/dist/doctor/checks/isolation.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation.check.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/isolation.check.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAyCzD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,EAAE,eAgD1B,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAmChC,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAmDhC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,eAAe,EAA2D,CAAC"}

package/dist/doctor/checks/isolation.check.js

@@ -0,0 +1,220 @@
+import { existsSync } from "node:fs";
+import { delimiter, join, relative, resolve } from "node:path";
+import { BUNDLE_DIRS, RUNTIME_FILES } from "../../packaging/layout.js";
+import { SHIM_FILES } from "../../packaging/layout.js";
+// AR: فحوص العزل (٠١٨/P4). **تُثبت ما تدّعيه الوثيقة بدل أن يبقى ادّعاءً.**
+//
+//     الميزة كلّها قائمة على أن زمنَي تشغيل يتعايشان على آلة واحدة بلا أن يعرف أحدهما بالآخر. وهذه
+//     فرضيّة تنكسر بصمت: تعديلٌ مستقبليّ حسن النيّة يضيف ‎runtime\‎ إلى PATH «ليسهل التشخيص»، فيحجب
+//     Node العميل ويعطّل مشاريعه — ولا شيء يشتكي عندنا لأن نظامنا يعمل. الفحصان هنا يجعلان الكسر
+//     مرئيًّا في السطر الأول من ‎doctor‎ بدل أن يُكتشَف عند عميل.
+// EN: Isolation checks (018/P4). **They prove what the document claims instead of leaving it a
+//     claim.**
+//
+//     The whole feature rests on two runtimes coexisting on one machine without either knowing about
+//     the other. That premise breaks silently: a well-meaning future change adds `runtime\` to PATH
+//     "to make diagnosis easier", shadowing the customer's Node and breaking their projects — and
+//     nothing complains on our side, because our system works. These two checks make the break
+//     visible in `doctor`'s first screen rather than at a customer site.
+function pathEntries() {
+    return (process.env.PATH ?? process.env.Path ?? "")
+        .split(delimiter)
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+}
+/** ويندوز لا يفرّق بين حالتَي الأحرف ولا يبالي بشرطة أخيرة؛ المقارنة النصّية الخام تكذب هنا. */
+function isSameDirectory(a, b) {
+    const normalise = (value) => resolve(value).replace(/[\\/]+$/, "").toLowerCase();
+    return normalise(a) === normalise(b);
+}
+/** ملفّان بنفس المسار الفعليّ. نفس قاعدة حالة الأحرف، بلا حذف شرطة أخيرة (المسار ملفّ لا مجلد). */
+function isSameFile(a, b) {
+    return resolve(a).toLowerCase() === resolve(b).toLowerCase();
+}
+/** هل ‎directory‎ داخل ‎parent‎ (أو هو نفسه)؟ يُستعمل لمعرفة إن كان مسارٌ ما تحت جذر التثبيت. */
+function isInside(parent, directory) {
+    const step = relative(resolve(parent), resolve(directory));
+    return step === "" || (!step.startsWith("..") && !/^[a-z]:/i.test(step));
+}
+/**
+ * AR: أي ‎node.exe‎ يشغّل هذه العملية الآن، وأين هو. حين يشتكي فنّي يومًا يُقطع السؤال بسطر بدل
+ *     تخمين: زمن تشغيل الحزمة أم زمن تشغيل الجهاز؟ والسؤال ليس نظريًّا — أربعة أعطال ميدانية سببها
+ *     كان بالضبط أن الواجهة تعمل بـNode الجهاز.
+ * EN: Which `node.exe` is running this process right now, and where it lives. When a technician one
+ *     day reports trouble, this settles in a line what would otherwise be guesswork: the bundle's
+ *     runtime or the machine's? The question is not theoretical — four field failures came down to
+ *     exactly this, the CLI running on the machine's Node.
+ */
+export const runtimeCheck = {
+    id: "isolation.runtime",
+    category: "environment",
+    title: "Runtime in use",
+    async run({ profile }) {
+        const bundled = join(profile.root, BUNDLE_DIRS.runtime, RUNTIME_FILES.node);
+        const running = process.execPath;
+        if (profile.kind !== "appliance") {
+            // على جهاز التطوير لا حزمة ولا ‎runtime\‎؛ الإبلاغ عمّا يعمل يكفي ولا شيء يُشترط.
+            return { status: "pass", detail: `${process.version} (development)`, evidence: running };
+        }
+        const usingBundled = isSameDirectory(running, bundled);
+        // AR: **الفحص انقلب في ٠٢٦، ولم يُحذف.**
+        //
+        //     كان يحذّر حين لا تعمل هذه العملية على ‎runtime\‎ المشحون، وكان محقًّا: الواجهة كانت
+        //     تُشحن داخل الحزمة، وعملُها على Node الجهاز هو ما تسبّب في أربعة أعطالٍ ميدانية.
+        //
+        //     وقد خرجت الواجهة إلى سِجلّ الحزم، فصار عملُها على Node العميل **هو الحالة الطبيعية**
+        //     — وهو الاستثناء الوحيد المنصوص عليه في فقرة النطاق بالمبدأ الأول. وتحذيرٌ يظهر في كل
+        //     تشخيصٍ سليم يُدرَّب الفنّي على تجاهله، فيتجاهل معه التحذير الحقيقيّ يوم يظهر.
+        //
+        //     **وما يُحرَس بقي محروسًا**: الخدمات. ‎doctor‎ يبقى يفحص أن النواة وخدمة البثّ تعملان
+        //     على البيئة المشحونة (‎core.check‎ و‎supervisor.check‎)، وهناك يقع الخطر الذي كُتب هذا
+        //     الفحص لأجله — لا هنا.
+        // EN: **This check inverted in 026; it was not deleted.**
+        //
+        //     It used to warn when this process was not running on the shipped `runtime\`, and it was
+        //     right: the CLI shipped inside the bundle, and running it on the machine's Node is what
+        //     caused four field failures.
+        //
+        //     The CLI has since moved to a package registry, so running on the customer's Node **is the
+        //     normal state** — the single stated exception in principle I's scope paragraph. And a
+        //     warning appearing in every sound diagnosis teaches the technician to ignore it, and with it
+        //     the real warning on the day it appears.
+        //
+        //     **What was guarded stays guarded**: the services. `doctor` still checks that the core and
+        //     the live service run on the shipped runtime (`core.check`, `supervisor.check`), and that is
+        //     where the danger this check was written for actually lives — not here.
+        return {
+            status: "pass",
+            detail: `${process.version} · ${usingBundled ? "bundled" : "the machine's own (expected since 026)"}`,
+            evidence: `running: ${running}\nbundled: ${bundled}`,
+        };
+    },
+    remedy: () => "",
+};
+/**
+ * AR: **يمسك خرق القاعدة I آليًّا.** ‎bin\‎ على PATH هو ما يجعل الأمر ‎fantastic‎ متاحًا؛ و‎runtime\‎
+ *     على PATH هو ما يُبطل الميزة كلّها، لأن ‎node‎ المجرّدة تصير نسختَنا فتُكسَر مشاريع العميل.
+ *     الأول غيابه إزعاج، والثاني وجوده عطبٌ جسيم — فيُصنَّفان تبعًا لذلك: تحذير وفشل.
+ * EN: **Catches a breach of rule I automatically.** `bin\` on PATH is what makes the `fantastic`
+ *     command available; `runtime\` on PATH is what defeats the entire feature, because a bare `node`
+ *     then resolves to our copy and the customer's projects break. Missing the first is an
+ *     inconvenience; the presence of the second is serious damage — and they are graded accordingly:
+ *     a warning and a failure.
+ */
+export const pathIsolationCheck = {
+    id: "isolation.path",
+    category: "environment",
+    title: "PATH isolation",
+    async run({ profile }) {
+        if (profile.kind !== "appliance") {
+            return { status: "pass", detail: "not applicable in development", evidence: "no bundle root" };
+        }
+        const binDir = join(profile.root, BUNDLE_DIRS.bin);
+        const runtimeDir = join(profile.root, BUNDLE_DIRS.runtime);
+        const entries = pathEntries();
+        // أي مُدخَل داخل ‎runtime\‎ لا المجلد بعينه فقط: مجلد فرعي منه على PATH يكفي لحجب ‎node‎.
+        const leaked = entries.filter((entry) => isInside(runtimeDir, entry));
+        if (leaked.length > 0) {
+            return { status: "fail", detail: "the bundled runtime is exposed", evidence: leaked.join("\n") };
+        }
+        const hasBin = entries.some((entry) => isSameDirectory(entry, binDir));
+        if (!hasBin) {
+            const installed = existsSync(join(binDir, SHIM_FILES.command));
+            return {
+                status: "warn",
+                detail: installed ? "bin\\ is not on this process's PATH" : "bin\\ is missing",
+                evidence: binDir,
+            };
+        }
+        return { status: "pass", detail: "bin\\ exposed · runtime\\ hidden", evidence: binDir };
+    },
+    remedy: (result, { profile }) => result.status === "fail"
+        ? `Remove every entry under ${join(profile.root, BUNDLE_DIRS.runtime)} from the machine PATH. Exposing it makes a bare "node" resolve to the appliance's copy and breaks the customer's own projects. Only ${join(profile.root, BUNDLE_DIRS.bin)} belongs on PATH.`
+        : `Add ${join(profile.root, BUNDLE_DIRS.bin)} to the machine PATH, or open a new terminal if it was added during this session — PATH is read once when a process starts.`,
+};
+/** أول ما يجده ويندوز حين تُكتب الكلمة مجرّدة: أوّل مجلد على PATH فيه ملفّ بهذا الاسم وامتداد تنفيذي. */
+function resolveOnPath(command) {
+    const extensions = (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean);
+    for (const entry of pathEntries()) {
+        for (const extension of extensions) {
+            const candidate = join(entry, `${command}${extension.toLowerCase()}`);
+            if (existsSync(candidate))
+                return candidate;
+        }
+    }
+    return undefined;
+}
+/**
+ * AR: **أيّ ‎fantastic‎ يعمل حين تُكتب الكلمة مجرّدة؟**
+ *
+ *     التثبيت يُلحق ‎bin\‎ في **آخر** PATH عمدًا (القاعدة I: لا نحجب شيئًا على جهاز لا نملكه). ونتيجته
+ *     أن تثبيتًا قديمًا بـ‎npm install -g‎ — إن بقي على الجهاز — يسبقنا فيفوز، فيكتب الفنّي
+ *     ‎fantastic‎ ويصل إلى الواجهة القديمة تعمل بـNode الجهاز. وهذا يُعيد بالضبط العطب الذي وُجدت
+ *     هذه الميزة لإسقاطه: على Node 16 تنهار عند التحليل بـ‎Invalid regular expression flags‎ قبل أن
+ *     تنفّذ سطرًا.
+ *
+ *     رُصد على جهاز عميل حقيقي: النظام مثبَّت وسليم ويعمل، والفنّي يرى شاشة أخطاء لأنه يخاطب نسخة
+ *     أخرى تمامًا. ولا شيء في النظام يشتكي، لأن لا شيء فيه معطوب.
+ * EN: **Which `fantastic` runs when the bare word is typed?**
+ *
+ *     The installer appends `bin\` to the **end** of PATH deliberately (rule I: we shadow nothing on a
+ *     machine we do not own). The consequence is that an older `npm install -g` — if it is still on
+ *     the machine — comes first and wins, so the technician types `fantastic` and reaches the old CLI
+ *     running on the machine's Node. That reinstates precisely the defect this feature exists to
+ *     remove: on Node 16 it dies at parse time with `Invalid regular expression flags` before running
+ *     a line.
+ *
+ *     Observed on a real customer machine: the system installed, sound and running, while the
+ *     technician read a screen of errors because they were addressing an entirely different copy. And
+ *     nothing in the system complains, because nothing in it is broken.
+ */
+export const commandShadowCheck = {
+    id: "isolation.command",
+    category: "environment",
+    title: "The `fantastic` command",
+    async run({ profile }) {
+        if (profile.kind !== "appliance") {
+            return { status: "pass", detail: "not applicable in development", evidence: "no installed shim" };
+        }
+        // AR: **السؤال انقلب في ٠٢٦.** كان: «هل يصل ‎fantastic‎ إلى شيمتنا أم إلى نسخةٍ عالميةٍ قديمة
+        //     تسبقها على PATH؟» — وكان الجواب الصحيح وقتها «شيمتنا».
+        //
+        //     واليوم النسخة العالمية **هي** الصحيحة، والشيمة صارت طريق مهمّة الإقلاع لا طريق الفنّي.
+        //     فما يُفحَص هو ما بقي خطِرًا فعلًا: **أن تكون الشيمة موجودة** — غيابها يعني جهازًا لا
+        //     تعود خدماته بعد انقطاع كهرباء — و**ألّا يبقى مُدخَل PATH قديمٌ** يشير إليها ويسبق
+        //     الحزمة العالمية، فيصل الفنّي إلى مُشرِفٍ لا يفهم أوامره.
+        // EN: **The question inverted in 026.** It used to be: "does `fantastic` reach our shim, or an
+        //     older global copy that precedes it on PATH?" — and the right answer then was "our shim".
+        //
+        //     Today the global copy **is** the right one, and the shim has become the boot task's route
+        //     rather than the technician's. So what is checked is what remains genuinely dangerous: **that
+        //     the shim exists** — its absence means an appliance whose services never return after a power
+        //     cut — and **that no stale PATH entry** still points at it ahead of the global package, which
+        //     would land the technician on a supervisor that understands none of their commands.
+        const ours = join(profile.root, BUNDLE_DIRS.bin, SHIM_FILES.command);
+        if (!existsSync(ours)) {
+            return { status: "fail", detail: "the supervisor shim is missing", evidence: ours };
+        }
+        const found = resolveOnPath("fantastic");
+        if (!found)
+            return { status: "pass", detail: "the shim is in place; the command comes from npm", evidence: ours };
+        if (isSameFile(found, ours)) {
+            return {
+                status: "warn",
+                detail: "a stale PATH entry reaches the shim",
+                evidence: `resolves to: ${found}\nshim:        ${ours}`,
+            };
+        }
+        return { status: "pass", detail: "resolves to the global package", evidence: found };
+    },
+    remedy: (result, { profile }) => {
+        if (result.status === "pass")
+            return "";
+        if (result.detail === "the supervisor shim is missing") {
+            return `The boot task calls ${join(profile.root, BUNDLE_DIRS.bin, SHIM_FILES.command)} to bring the services back after a power cut, and it is not there. Reinstall the product to restore it: fantastic install`;
+        }
+        return `Typing "fantastic" reaches this appliance's supervisor shim through an old PATH entry left by a pre-026 installation — it takes no commands. Clear it: fantastic migrate-cli`;
+    },
+};
+export const isolationChecks = [runtimeCheck, pathIsolationCheck, commandShadowCheck];
+//# sourceMappingURL=isolation.check.js.map

package/dist/doctor/checks/isolation.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/isolation.check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,4EAA4E;AAC5E,EAAE;AACF,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,kEAAkE;AAClE,+FAA+F;AAC/F,eAAe;AACf,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,kGAAkG;AAClG,+FAA+F;AAC/F,yEAAyE;AAEzE,SAAS,WAAW;IAClB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SAChD,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,gGAAgG;AAChG,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjG,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,mGAAmG;AACnG,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,iGAAiG;AACjG,SAAS,QAAQ,CAAC,MAAc,EAAE,SAAiB;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,EAAE,EAAE,mBAAmB;IACvB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,gBAAgB;IACvB,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;QAEjC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,kFAAkF;YAClF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvD,yCAAyC;QACzC,EAAE;QACF,0FAA0F;QAC1F,sFAAsF;QACtF,EAAE;QACF,2FAA2F;QAC3F,2FAA2F;QAC3F,oFAAoF;QACpF,EAAE;QACF,2FAA2F;QAC3F,4FAA4F;QAC5F,4BAA4B;QAC5B,0DAA0D;QAC1D,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,kCAAkC;QAClC,EAAE;QACF,gGAAgG;QAChG,2FAA2F;QAC3F,kGAAkG;QAClG,8CAA8C;QAC9C,EAAE;QACF,gGAAgG;QAChG,kGAAkG;QAClG,6EAA6E;QAC7E,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,MAAM,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wCAAwC,EAAE;YACrG,QAAQ,EAAE,YAAY,OAAO,cAAc,OAAO,EAAE;SACrD,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;CACjB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,EAAE,EAAE,gBAAgB;IACpB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,gBAAgB;IACvB,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACnB,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QACjG,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAE9B,0FAA0F;QAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnG,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,kBAAkB;gBAC9E,QAAQ,EAAE,MAAM;aACjB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,KAAK,MAAM;QACtB,CAAC,CAAC,4BAA4B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,wIAAwI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,mBAAmB;QACnQ,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,6HAA6H;CAC9K,CAAC;AAEF,yGAAyG;AACzG,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE7F,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,EAAE,CAAC;QAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACtE,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,EAAE,EAAE,mBAAmB;IACvB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,yBAAyB;IAChC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACnB,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;QACpG,CAAC;QAED,8FAA8F;QAC9F,6DAA6D;QAC7D,EAAE;QACF,6FAA6F;QAC7F,2FAA2F;QAC3F,wFAAwF;QACxF,+DAA+D;QAC/D,+FAA+F;QAC/F,+FAA+F;QAC/F,EAAE;QACF,gGAAgG;QAChG,mGAAmG;QACnG,mGAAmG;QACnG,mGAAmG;QACnG,yFAAyF;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAElH,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,qCAAqC;gBAC7C,QAAQ,EAAE,gBAAgB,KAAK,kBAAkB,IAAI,EAAE;aACxD,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAExC,IAAI,MAAM,CAAC,MAAM,KAAK,gCAAgC,EAAE,CAAC;YACvD,OAAO,uBAAuB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,4HAA4H,CAAC;QACpN,CAAC;QAED,OAAO,8KAA8K,CAAC;IACxL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC"}

package/dist/doctor/checks/licence.check.d.ts

@@ -0,0 +1,8 @@
+import type { DiagnosticCheck } from "../check.types.js";
+/** يُفرَغ بين التشغيلات في الاختبارات، مثل مخبأ فحوص النواة. */
+export declare function resetLicenceCheckCache(): void;
+export declare const licencePresentCheck: DiagnosticCheck;
+export declare const licenceValidCheck: DiagnosticCheck;
+export declare const licenceCheckInCheck: DiagnosticCheck;
+export declare const licenceChecks: DiagnosticCheck[];
+//# sourceMappingURL=licence.check.d.ts.map

package/dist/doctor/checks/licence.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licence.check.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/licence.check.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA6B,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA0CpF,gEAAgE;AAChE,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAQD,eAAO,MAAM,mBAAmB,EAAE,eAsBjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,eA+E/B,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,eAqBjC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,eAAe,EAI1C,CAAC"}