@wasmsoft/fantastic 1.0.0

package/dist/doctor/checks/licence.check.js

@@ -0,0 +1,172 @@
+import { fetchLicenseStatus } from "../../probes/internal.client.js";
+// AR: فحوص الترخيص (P4.4). ثلاثة أسئلة يفصلها **اختلاف العلاج** لا اختلاف الصياغة:
+//
+//     1. هل على هذا الجهاز رخصة أصلًا؟          → علاجه ‎fantastic activate‎
+//     2. هل هي صالحة لهذا الجهاز وسارية؟        → علاجه يختلف بسبب البطلان
+//     3. هل يبلغ الجهازُ المركزَ ليجدّد فحصه؟     → علاجه الشبكة لا الشركة
+//
+//     جمعها في فحص واحد «الترخيص» كان يعطي المالكَ سطرًا أحمر بلا خطوة تالية يفهمها؛ وهذا
+//     بالضبط ما تمنعه قاعدةُ ‎remedy‎ الإلزامية في ‎check.types.ts‎.
+//
+//     **والنواة المتوقّفة ‎unknown‎ لا ‎fail‎**، كما في ‎core.check.ts‎: ‎doctor‎ يُستدعى وقت العطل،
+//     وصبغُ هذه الفحوص حمراء يُغرق التقرير بفشلٍ مشتقّ يخفي السبب الواحد الحقيقي.
+//
+// EN: The licensing checks (P4.4). Three questions separated by **a difference in remedy**, not in
+//     wording:
+//
+//     1. Is there a licence on this machine at all?   → the remedy is `fantastic activate`
+//     2. Is it valid for this machine and in date?    → the remedy depends on why it is not
+//     3. Is the machine reaching the centre?          → the remedy is the network, not the company
+//
+//     Folding them into one "Licensing" check gave the owner a red line with no next step he could
+//     act on — exactly what the mandatory `remedy` rule in `check.types.ts` exists to prevent.
+//
+//     **And a stopped core is `unknown`, not `fail`**, as in `core.check.ts`: `doctor` runs when
+//     something is broken, and painting these red floods the report with derived failures that hide
+//     the one real cause.
+let cached;
+function statusOnce(context) {
+    if (!cached) {
+        cached = {
+            promise: fetchLicenseStatus(context.profile).then((result) => result.ok ? { device: result.data } : { reason: result.reason }),
+        };
+    }
+    return cached.promise;
+}
+/** يُفرَغ بين التشغيلات في الاختبارات، مثل مخبأ فحوص النواة. */
+export function resetLicenceCheckCache() {
+    cached = undefined;
+}
+const unknownFromCore = (reason) => ({
+    status: "unknown",
+    detail: "core unreachable",
+    evidence: reason,
+});
+export const licencePresentCheck = {
+    id: "licence.present",
+    category: "integrity",
+    title: "Licence file",
+    async run(context) {
+        const { device, reason } = await statusOnce(context);
+        if (!device)
+            return unknownFromCore(reason);
+        if (device.status === "none") {
+            return { status: "fail", detail: "no licence on this machine" };
+        }
+        return {
+            status: "pass",
+            detail: device.code ?? "present",
+            evidence: device.deviceId ? `device ${device.deviceId.slice(0, 12)}` : undefined,
+        };
+    },
+    remedy: (result) => result.status === "fail"
+        ? "Activate this appliance: fantastic activate <code>"
+        : "Start the core so licensing can be checked: fantastic start",
+};
+export const licenceValidCheck = {
+    id: "licence.valid",
+    category: "integrity",
+    title: "Licence validity",
+    async run(context) {
+        const { device, reason } = await statusOnce(context);
+        if (!device)
+            return unknownFromCore(reason);
+        switch (device.status) {
+            case "active":
+                return { status: "pass", detail: `expires ${isoDate(device.expiresAt)}` };
+            // AR: المهلة **تحذير لا فشل**: الخدمة تعمل بالكامل لضيوف الاستراحة الآن، والفشل الأحمر
+            //     كان يقول للمالك إن نظامه متوقّف وهو يعمل — فيوقفه بنفسه ليصلح ما ليس معطوبًا.
+            // EN: Grace is a **warning, not a failure**: the service is fully working for the
+            //     rest-house's guests right now, and a red failure told the owner his system was down
+            //     while it was up — so he would stop it himself to fix what was not broken.
+            case "grace":
+                return {
+                    status: "warn",
+                    detail: `working offline · ${device.graceDaysLeft ?? "?"} days left`,
+                    evidence: "the centre has not been reached since the last due check",
+                };
+            case "expired":
+                return {
+                    status: "fail",
+                    detail: device.expiredReason === "grace" ? "offline grace exhausted" : "licence expired",
+                    evidence: device.expiresAt ? `valid until ${isoDate(device.expiresAt)}` : undefined,
+                };
+            case "invalid":
+                return { status: "fail", detail: `invalid file (${device.reason ?? "unknown"})` };
+            // AR: **فشلٌ بعلاجٍ مختلف تمامًا عن ‎invalid‎.** الملفّ سليم والتوقيع صحيح والبصمة
+            //     مطابقة؛ القرار في لوحة الإدارة. و‎remedy‎ أدناه يقول «تواصل مع الدعم» لا «أعد
+            //     التفعيل» — لأن إعادة التفعيل تُقابَل بنفس الرفض، فتضيّع ساعةً وتنتهي حيث بدأت.
+            // EN: **A failure whose remedy is nothing like `invalid`'s.** The file is sound, the
+            //     signature valid, the fingerprint matching; the decision is in the dashboard. The
+            //     `remedy` below says "contact support" rather than "re-activate" — re-activating meets
+            //     the same refusal, wasting an hour to end where it started.
+            case "refused":
+                return {
+                    status: "fail",
+                    detail: `refused by the centre (${device.reason ?? "unknown"})`,
+                    evidence: device.message,
+                };
+            case "none":
+                // يخصّه الفحص السابق؛ هذا لا يكرّر سطرًا أحمر عن السبب نفسه.
+                return { status: "unknown", detail: "not activated" };
+        }
+    },
+    remedy: (result) => {
+        if (result.detail === "offline grace exhausted") {
+            return "Connect this machine to the internet, then run: fantastic activate <code>";
+        }
+        if (result.detail === "licence expired") {
+            return "Contact Fantastic support to renew, then run: fantastic activate <code>";
+        }
+        // AR: **الرفض قبل البطلان، وعلاجه معاكس له.** المركز رفض هذا الجهاز والملفّ سليم، فلا
+        //     شيء على الجهاز يغيّر القرار — وإعادةُ التفعيل تُقابَل بنفس الرفض حرفيًّا.
+        // EN: **Refusal before invalidity, and its remedy is the opposite.** The centre refused this
+        //     appliance while its file is sound, so nothing on the machine changes the decision — and
+        //     re-activating meets literally the same refusal.
+        if (result.detail?.startsWith("refused by the centre")) {
+            return "The centre refused this appliance. Contact Fantastic support — re-activating will not help.";
+        }
+        if (result.detail?.startsWith("invalid file (fingerprint")) {
+            return "This licence belongs to another machine. Re-activate here: fantastic activate <code>";
+        }
+        if (result.detail?.startsWith("invalid file")) {
+            return "The licence file is damaged. Re-activate: fantastic activate <code>";
+        }
+        if (result.status === "warn") {
+            return "Restore internet access; the appliance re-checks on its own within six hours.";
+        }
+        return "Start the core so licensing can be checked: fantastic start";
+    },
+};
+export const licenceCheckInCheck = {
+    id: "licence.checkin",
+    category: "integrity",
+    title: "Licence check-in",
+    async run(context) {
+        const { device, reason } = await statusOnce(context);
+        if (!device)
+            return unknownFromCore(reason);
+        if (device.status === "grace") {
+            return { status: "warn", detail: "overdue — the centre was not reached" };
+        }
+        if (device.status === "active") {
+            return { status: "pass", detail: "up to date" };
+        }
+        return { status: "unknown", detail: "no active licence to check in" };
+    },
+    remedy: (result) => result.status === "warn"
+        ? "Restore internet access; run `fantastic activate <code>` to re-check immediately."
+        : "Activate this appliance first: fantastic activate <code>",
+};
+export const licenceChecks = [
+    licencePresentCheck,
+    licenceValidCheck,
+    licenceCheckInCheck,
+];
+function isoDate(iso) {
+    if (!iso)
+        return "unknown";
+    const date = new Date(iso);
+    return Number.isNaN(date.getTime()) ? iso : date.toISOString().slice(0, 10);
+}
+//# sourceMappingURL=licence.check.js.map

package/dist/doctor/checks/licence.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"licence.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/licence.check.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,mFAAmF;AACnF,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,0FAA0F;AAC1F,qEAAqE;AACrE,EAAE;AACF,qGAAqG;AACrG,kFAAkF;AAClF,EAAE;AACF,mGAAmG;AACnG,eAAe;AACf,EAAE;AACF,2FAA2F;AAC3F,4FAA4F;AAC5F,mGAAmG;AACnG,EAAE;AACF,mGAAmG;AACnG,+FAA+F;AAC/F,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,0BAA0B;AAE1B,IAAI,MAAkF,CAAC;AAEvF,SAAS,UAAU,CAAC,OAAqB;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG;YACP,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3D,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAChE;SACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,MAA0B,EAAe,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,MAAM;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,EAAE,EAAE,iBAAiB;IACrB,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,cAAc;IACrB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAClE,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACjF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,MAAM,KAAK,MAAM;QACtB,CAAC,CAAC,oDAAoD;QACtD,CAAC,CAAC,6DAA6D;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,EAAE,EAAE,eAAe;IACnB,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,kBAAkB;IACzB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QAE5C,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAE5E,uFAAuF;YACvF,oFAAoF;YACpF,kFAAkF;YAClF,0FAA0F;YAC1F,gFAAgF;YAChF,KAAK,OAAO;gBACV,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,qBAAqB,MAAM,CAAC,aAAa,IAAI,GAAG,YAAY;oBACpE,QAAQ,EAAE,0DAA0D;iBACrE,CAAC;YAEJ,KAAK,SAAS;gBACZ,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,iBAAiB;oBACxF,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;iBACpF,CAAC;YAEJ,KAAK,SAAS;gBACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG,EAAE,CAAC;YAEpF,mFAAmF;YACnF,oFAAoF;YACpF,qFAAqF;YACrF,qFAAqF;YACrF,uFAAuF;YACvF,4FAA4F;YAC5F,iEAAiE;YACjE,KAAK,SAAS;gBACZ,OAAO;oBACL,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,0BAA0B,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG;oBAC/D,QAAQ,EAAE,MAAM,CAAC,OAAO;iBACzB,CAAC;YAEJ,KAAK,MAAM;gBACT,6DAA6D;gBAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;YAChD,OAAO,2EAA2E,CAAC;QACrF,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACxC,OAAO,yEAAyE,CAAC;QACnF,CAAC;QACD,sFAAsF;QACtF,gFAAgF;QAChF,6FAA6F;QAC7F,8FAA8F;QAC9F,sDAAsD;QACtD,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACvD,OAAO,6FAA6F,CAAC;QACvG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;YAC3D,OAAO,sFAAsF,CAAC;QAChG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9C,OAAO,qEAAqE,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,+EAA+E,CAAC;QACzF,CAAC;QACD,OAAO,6DAA6D,CAAC;IACvE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,EAAE,EAAE,iBAAiB;IACrB,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,kBAAkB;IACzB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,MAAM,KAAK,MAAM;QACtB,CAAC,CAAC,mFAAmF;QACrF,CAAC,CAAC,0DAA0D;CACjE,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,mBAAmB;IACnB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAEF,SAAS,OAAO,CAAC,GAAuB;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/doctor/checks/ports.check.d.ts

@@ -0,0 +1,4 @@
+import type { CheckContext, DiagnosticCheck } from "../check.types.js";
+/** يبني فحصًا لكل خدمة في ملفّ التشغيل، فيبقى المصدر واحدًا ولا يُكتب رقم منفذ هنا. */
+export declare function portChecks(context: CheckContext): DiagnosticCheck[];
+//# sourceMappingURL=ports.check.d.ts.map

package/dist/doctor/checks/ports.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.check.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/ports.check.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAwDvE,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,EAAE,CAEnE"}

package/dist/doctor/checks/ports.check.js

@@ -0,0 +1,52 @@
+import { findPortHolder, isPortFree } from "../../probes/port.probe.js";
+import { probeService } from "../../probes/service.probe.js";
+// AR: فحص المنافذ. **منفذ محجوز ليس بالضرورة خطأً**: إن كانت خدمتنا هي من تحجزه فالنظام يعمل، وصبغُ
+//     ذلك أحمر إنذارٌ كاذب يدفع المستخدم إلى قتل نظام سليم.
+//
+//     ونميّز الحالتين بسؤال الخدمة نفسها لا بمطابقة الـ PID. جُرِّبت المطابقة أوّلًا ففشلت فعليًا:
+//     ‎nest start --watch‎ و‎vite‎ يولّدان عمليةً ابنة هي التي تستمع، بينما سجلّ الـ PID يحمل الأب
+//     الذي أطلقناه — فظهرت خدمتان تعملان بصحّة تامّة على أنهما تعارضٌ حاجب. المسبار يجيب عن السؤال
+//     الحقيقي: «هل ما يحجز هذا المنفذ هو Fantastic يعمل؟»، وهو نفس ما يفعله ‎status‎.
+// EN: Port checks. **A busy port is not necessarily wrong**: if our own service holds it the system
+//     is up, and painting that red is a false alarm that pushes someone to kill a healthy system.
+//
+//     We tell them apart by asking the service, not by matching PIDs. Matching was tried first and
+//     failed in practice: `nest start --watch` and `vite` spawn a child that does the listening,
+//     while the PID record holds the parent we launched — so two perfectly healthy services were
+//     reported as blocking conflicts. The probe answers the real question: "is the thing holding
+//     this port a working Fantastic service?" — which is what `status` already does.
+function portCheckFor(definition) {
+    return {
+        id: `port.${definition.name}`,
+        category: "ports",
+        title: `${definition.port}  ${definition.label}`,
+        async run(_context) {
+            if (await isPortFree(definition.port, definition.host)) {
+                return { status: "pass", detail: "free" };
+            }
+            const probe = await probeService(definition);
+            if (probe.reachable) {
+                return { status: "pass", detail: "in use by this service", evidence: "it answered its readiness probe" };
+            }
+            const holder = await findPortHolder(definition.port);
+            return {
+                status: "fail",
+                detail: holder ? `held by ${holder.name}` : "busy",
+                evidence: holder
+                    ? `pid ${holder.pid} — it did not answer this service's readiness probe`
+                    : "the holding process could not be identified",
+            };
+        },
+        remedy: (result) => {
+            const pid = result.evidence?.match(/pid (\d+)/)?.[1];
+            const who = pid ? ` (pid ${pid})` : "";
+            return (`Stop whatever holds ${definition.port}${who} — "fantastic stop" if it is ours — ` +
+                `or move the service: fantastic config set ${definition.name}Port <free-port>`);
+        },
+    };
+}
+/** يبني فحصًا لكل خدمة في ملفّ التشغيل، فيبقى المصدر واحدًا ولا يُكتب رقم منفذ هنا. */
+export function portChecks(context) {
+    return context.profile.services.map(portCheckFor);
+}
+//# sourceMappingURL=ports.check.js.map

package/dist/doctor/checks/ports.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/ports.check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAI7D,oGAAoG;AACpG,4DAA4D;AAC5D,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,sFAAsF;AACtF,oGAAoG;AACpG,kGAAkG;AAClG,EAAE;AACF,mGAAmG;AACnG,iGAAiG;AACjG,iGAAiG;AACjG,iGAAiG;AACjG,qFAAqF;AAErF,SAAS,YAAY,CAAC,UAA6B;IACjD,OAAO;QACL,EAAE,EAAE,QAAQ,UAAU,CAAC,IAAI,EAAE;QAC7B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK,EAAE;QAChD,KAAK,CAAC,GAAG,CAAC,QAAsB;YAC9B,IAAI,MAAM,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,iCAAiC,EAAE,CAAC;YAC3G,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAErD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM;gBAClD,QAAQ,EAAE,MAAM;oBACd,CAAC,CAAC,OAAO,MAAM,CAAC,GAAG,qDAAqD;oBACxE,CAAC,CAAC,6CAA6C;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YACjB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvC,OAAO,CACL,uBAAuB,UAAU,CAAC,IAAI,GAAG,GAAG,sCAAsC;gBAClF,6CAA6C,UAAU,CAAC,IAAI,kBAAkB,CAC/E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,OAAqB;IAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACpD,CAAC"}

package/dist/doctor/checks/supervisor.check.d.ts

@@ -0,0 +1,19 @@
+import type { DiagnosticCheck } from "../check.types.js";
+export declare const supervisorAliveCheck: DiagnosticCheck;
+export declare const bootTaskCheck: DiagnosticCheck;
+export declare const restartLoopCheck: DiagnosticCheck;
+/**
+ * AR: «يعمل لكنه محجوب» (٠٢٠/FR-027). الحالة التي يعالجها هذا الفحص لا يمكن لأيّ طرف وحده أن
+ *     يراها: النواة تعرف أن المستمع مفتوح ولا تعرف حال الجدار من منظور من يتصل، ونظام التشغيل
+ *     يعرف القاعدة ولا يعرف إن كان الـ FTP مشغَّلًا أصلًا. فيُجمَع النصفان هنا.
+ *     ولا شيء يُقال حين يكون الـ FTP مطفأً: إنذارٌ عن ميزة لم تُشغَّل يعلّم قارئه تجاهل الإنذارات.
+ * EN: "Running but blocked" (020/FR-027). The state this check catches is invisible to either side
+ *     alone: the core knows its listener is open but not how the firewall looks from a client's
+ *     side, and the operating system knows the rule but not whether FTP is even switched on. The two
+ *     halves are joined here.
+ *     And nothing is said while FTP is off: an alert about a feature nobody enabled teaches its
+ *     reader to ignore alerts.
+ */
+export declare const ftpReachableCheck: DiagnosticCheck;
+export declare const supervisorChecks: DiagnosticCheck[];
+//# sourceMappingURL=supervisor.check.d.ts.map

package/dist/doctor/checks/supervisor.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.check.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/supervisor.check.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAA6B,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA0CpF,eAAO,MAAM,oBAAoB,EAAE,eA0BlC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,eAmB3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,eAqB9B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,EAAE,eAgC/B,CAAC;AAKF,eAAO,MAAM,gBAAgB,EAAE,eAAe,EAK7C,CAAC"}

package/dist/doctor/checks/supervisor.check.js

@@ -0,0 +1,152 @@
+import { existsSync } from "node:fs";
+import { isBootTaskInstalled } from "../../packaging/boot-task.js";
+import { getInternal } from "../../probes/internal.client.js";
+import { INTERNAL_PATHS } from "../../probes/internal-paths.js";
+import { REMOTE_STATE_FILES, readStateJson, stateFilePath } from "../../supervisor/state-files.js";
+// AR: فحوص المشرف (٠٢٠/US1، T016).
+//
+//     ثلاثة أسئلة يجيب عنها ‎doctor‎ ولا يجيبها أحد سواه:
+//     ١ — **هل هناك مشرف حيّ؟** بدونه لا شيء يُحيي خدمةً ماتت ولا ينفّذ جدولًا ولا يستهلك طلب إعادة
+//         تشغيل. النظام يبدو سليمًا تمامًا وهو بلا شبكة أمان.
+//     ٢ — **هل تعود الآلة بعد انقطاع الكهرباء؟** أي: هل مهمة الإقلاع مسجّلة. الجواب لا يُعرف إلّا
+//         بسؤال ويندوز، ولذلك يعيش هنا لا في النواة (النواة ممنوعة من تشغيل عملية).
+//     ٣ — **هل توقّف الإحياء عند دورة متكرّرة؟** وجود ‎restart-loop.json‎ يعني خدمةً ماتت ثلاث مرّات
+//         في عشر دقائق فتُركت. هذا **فشل حاجب**: الجهاز يعمل ناقصًا، وصمتُنا عنه يحوّل عطلًا واضحًا
+//         إلى لغز.
+//
+//     **والقِدَم غياب.** نبضٌ عمره ساعة يقول «حيّ» بينما لا أحد هناك. الطابع هو الدليل، لا الملفّ.
+//
+// EN: The supervisor checks (020/US1, T016).
+//
+//     Three questions `doctor` answers and nothing else does:
+//     1 — **Is a supervisor alive?** Without one nothing revives a dead service, runs a schedule, or
+//         consumes a restart request. The system looks entirely healthy while having no safety net.
+//     2 — **Will the machine come back after a power cut?** That is: is the boot task registered.
+//         The answer can only be had by asking Windows, which is why it lives here and not in the
+//         core (the core may not run a process).
+//     3 — **Did revival stop on a repeating loop?** The presence of `restart-loop.json` means a
+//         service died three times in ten minutes and was left alone. That is a **blocking
+//         failure**: the appliance is running incomplete, and staying quiet about it turns an
+//         obvious fault into a mystery.
+//
+//     **And staleness is absence.** An hour-old heartbeat says "alive" while nobody is there. The
+//     stamp is the evidence, not the file.
+/** بعده يُعدّ النبض قديمًا. نفس القيمة التي تقرأ بها النواة الملفّ — ولا يجوز أن تتباعدا. */
+const HEARTBEAT_STALE_MS = 90_000;
+function readSupervisor(context) {
+    const status = readStateJson(context.profile, REMOTE_STATE_FILES.supervisor);
+    if (!status)
+        return null;
+    const age = Date.now() - Date.parse(status.updatedAt);
+    return Number.isFinite(age) && age <= HEARTBEAT_STALE_MS ? status : null;
+}
+export const supervisorAliveCheck = {
+    id: "supervisor.alive",
+    category: "data",
+    title: "Supervisor",
+    async run(context) {
+        const status = readSupervisor(context);
+        if (status) {
+            const uptime = Math.max(0, Math.round((Date.now() - Date.parse(status.startedAt)) / 60_000));
+            return { status: "pass", detail: `running · pid ${status.pid}`, evidence: `up for ${uptime} minute(s)` };
+        }
+        const path = stateFilePath(context.profile, REMOTE_STATE_FILES.supervisor);
+        // AR: **تحذير لا فشل.** الجهاز يقدّم المحتوى للضيوف بلا مشرف تمامًا؛ ما يفقده هو التعافي
+        //     الذاتي والجدول. صبغُه أحمر كان سيجعل كل تشغيل تطويريّ يبدو معطوبًا.
+        // EN: **A warning, not a failure.** The appliance serves guests perfectly well with no
+        //     supervisor; what it loses is self-healing and the schedule. Painting it red would make
+        //     every development run look broken.
+        return {
+            status: "warn",
+            detail: existsSync(path) ? "not running (stale heartbeat)" : "not running",
+            evidence: "nothing will revive a stopped service or run the restart schedule",
+        };
+    },
+    remedy: () => "Start it: fantastic watch   ·   it is registered to start at boot by: fantastic install",
+};
+export const bootTaskCheck = {
+    id: "supervisor.boot-task",
+    category: "environment",
+    title: "Restart after power loss",
+    async run() {
+        if (process.platform !== "win32") {
+            return { status: "unknown", detail: "only on Windows" };
+        }
+        return (await isBootTaskInstalled())
+            ? { status: "pass", detail: "the boot task is registered" }
+            : {
+                status: "warn",
+                detail: "no boot task",
+                evidence: "after a power cut the appliance stays dark until someone starts it by hand",
+            };
+    },
+    remedy: () => "Register it by reinstalling from an administrator terminal: fantastic install --from <bundle>   ·   until then, the machine-restart action stays disabled",
+};
+export const restartLoopCheck = {
+    id: "supervisor.restart-loop",
+    category: "integrity",
+    title: "Restart loop",
+    async run(context) {
+        const loop = readStateJson(context.profile, REMOTE_STATE_FILES.restartLoop);
+        if (!loop)
+            return { status: "pass", detail: "none" };
+        return {
+            status: "fail",
+            detail: `${loop.service} was left stopped`,
+            evidence: `it failed ${loop.attempts} times in ${loop.windowMinutes} minutes, last at ${loop.stoppedAt}`,
+        };
+    },
+    remedy: (result, context) => {
+        const service = result.detail?.split(" ")[0] ?? "the service";
+        return (`Read why it dies: fantastic logs ${service} -n 80   ·   fix the cause, then: fantastic start   ` +
+            `·   the alert clears itself once it answers again (or delete ${stateFilePath(context.profile, REMOTE_STATE_FILES.restartLoop)})`);
+    },
+};
+/**
+ * AR: «يعمل لكنه محجوب» (٠٢٠/FR-027). الحالة التي يعالجها هذا الفحص لا يمكن لأيّ طرف وحده أن
+ *     يراها: النواة تعرف أن المستمع مفتوح ولا تعرف حال الجدار من منظور من يتصل، ونظام التشغيل
+ *     يعرف القاعدة ولا يعرف إن كان الـ FTP مشغَّلًا أصلًا. فيُجمَع النصفان هنا.
+ *     ولا شيء يُقال حين يكون الـ FTP مطفأً: إنذارٌ عن ميزة لم تُشغَّل يعلّم قارئه تجاهل الإنذارات.
+ * EN: "Running but blocked" (020/FR-027). The state this check catches is invisible to either side
+ *     alone: the core knows its listener is open but not how the firewall looks from a client's
+ *     side, and the operating system knows the rule but not whether FTP is even switched on. The two
+ *     halves are joined here.
+ *     And nothing is said while FTP is off: an alert about a feature nobody enabled teaches its
+ *     reader to ignore alerts.
+ */
+export const ftpReachableCheck = {
+    id: "remote.ftp",
+    category: "ports",
+    title: "FTP server",
+    async run(context) {
+        const state = await getInternal(context.profile, INTERNAL_PATHS.REMOTE_FTP);
+        // النواة متوقّفة: «غير معروف» لا فشل — نفس قاعدة فحوص النواة، فلا يغرق التقرير بفشل مشتقّ.
+        if (!state.ok)
+            return { status: "unknown", detail: "core unreachable" };
+        if (!state.data.enabled)
+            return { status: "pass", detail: "off" };
+        if (state.data.status === "failed") {
+            return { status: "fail", detail: "enabled but not listening", evidence: "the dashboard shows the reason" };
+        }
+        if (process.platform === "win32" && !state.data.firewallRule) {
+            return {
+                status: "fail",
+                detail: `listening on ${state.data.port} but the firewall rule is missing`,
+                evidence: "clients on the LAN will time out while the panel says it is running",
+            };
+        }
+        return { status: "pass", detail: `listening on ${state.data.port}` };
+    },
+    remedy: (result) => result.detail?.includes("firewall")
+        ? `Re-save the FTP settings from the dashboard to re-add the rule, or add it by hand from an administrator terminal: netsh advfirewall firewall add rule name="${FIREWALL_RULE}" dir=in action=allow protocol=TCP localport=<port> profile=private`
+        : "Open the Remote screen in the dashboard — the FTP card states why it did not start.",
+};
+/** نفس اسم القاعدة التي تكتبها النواة. مكتوب هنا لأن الـ CLI لا يستورد من النواة. */
+const FIREWALL_RULE = "Fantastic FTP";
+export const supervisorChecks = [
+    supervisorAliveCheck,
+    bootTaskCheck,
+    restartLoopCheck,
+    ftpReachableCheck,
+];
+//# sourceMappingURL=supervisor.check.js.map

package/dist/doctor/checks/supervisor.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/supervisor.check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGnG,mCAAmC;AACnC,EAAE;AACF,0DAA0D;AAC1D,oGAAoG;AACpG,8DAA8D;AAC9D,kGAAkG;AAClG,oFAAoF;AACpF,qGAAqG;AACrG,oGAAoG;AACpG,mBAAmB;AACnB,EAAE;AACF,mGAAmG;AACnG,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,8DAA8D;AAC9D,qGAAqG;AACrG,oGAAoG;AACpG,kGAAkG;AAClG,kGAAkG;AAClG,iDAAiD;AACjD,gGAAgG;AAChG,2FAA2F;AAC3F,8FAA8F;AAC9F,wCAAwC;AACxC,EAAE;AACF,kGAAkG;AAClG,2CAA2C;AAE3C,6FAA6F;AAC7F,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,cAAc,CAAC,OAAqB;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAuB,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACnG,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACnD,EAAE,EAAE,kBAAkB;IACtB,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,YAAY;IACnB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAEvC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;YAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,MAAM,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,UAAU,MAAM,YAAY,EAAE,CAAC;QAC3G,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAE3E,yFAAyF;QACzF,0EAA0E;QAC1E,uFAAuF;QACvF,6FAA6F;QAC7F,yCAAyC;QACzC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,aAAa;YAC1E,QAAQ,EAAE,mEAAmE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,yFAAyF;CACxG,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,EAAE,EAAE,sBAAsB;IAC1B,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,0BAA0B;IACjC,KAAK,CAAC,GAAG;QACP,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC1D,CAAC;QAED,OAAO,CAAC,MAAM,mBAAmB,EAAE,CAAC;YAClC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE;YAC3D,CAAC,CAAC;gBACE,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,cAAc;gBACtB,QAAQ,EAAE,4EAA4E;aACvF,CAAC;IACR,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CACX,2JAA2J;CAC9J,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,EAAE,EAAE,yBAAyB;IAC7B,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,cAAc;IACrB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,IAAI,GAAG,aAAa,CAAkB,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAErD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB;YAC1C,QAAQ,EAAE,aAAa,IAAI,CAAC,QAAQ,aAAa,IAAI,CAAC,aAAa,qBAAqB,IAAI,CAAC,SAAS,EAAE;SACzG,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;QAC9D,OAAO,CACL,oCAAoC,OAAO,sDAAsD;YACjG,gEAAgE,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAClI,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAoB;IAChD,EAAE,EAAE,YAAY;IAChB,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,YAAY;IACnB,KAAK,CAAC,GAAG,CAAC,OAAO;QACf,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,OAAO,CAAC,OAAO,EACf,cAAc,CAAC,UAAU,CAC1B,CAAC;QAEF,2FAA2F;QAC3F,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAElE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC;QAC7G,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7D,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,mCAAmC;gBAC1E,QAAQ,EAAE,qEAAqE;aAChF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC;QACjC,CAAC,CAAC,+JAA+J,aAAa,qEAAqE;QACnP,CAAC,CAAC,qFAAqF;CAC5F,CAAC;AAEF,qFAAqF;AACrF,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,oBAAoB;IACpB,aAAa;IACb,gBAAgB;IAChB,iBAAiB;CAClB,CAAC"}

package/dist/doctor/checks/tooling.check.d.ts

@@ -0,0 +1,3 @@
+import type { DiagnosticCheck } from "../check.types.js";
+export declare const toolingChecks: DiagnosticCheck[];
+//# sourceMappingURL=tooling.check.d.ts.map

package/dist/doctor/checks/tooling.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tooling.check.d.ts","sourceRoot":"","sources":["../../../src/doctor/checks/tooling.check.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAe,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA8DtE,eAAO,MAAM,aAAa,EAAE,eAAe,EAAgD,CAAC"}

package/dist/doctor/checks/tooling.check.js

@@ -0,0 +1,43 @@
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { execa } from "execa";
+/**
+ * أين يقع الثنائي في كل ملفّ تشغيل. في الجهاز المركّب تُنسَخ الأدوات إلى ‎runtime/‎ باسم ثابت،
+ * وفي المستودع تأتي من حزمة المُثبِّت.
+ */
+function candidatePaths(profile, tool) {
+    if (profile.kind === "appliance")
+        return [join(profile.root, "runtime", `${tool}.exe`)];
+    const installer = tool === "ffmpeg" ? "@ffmpeg-installer" : "@ffprobe-installer";
+    return [join(profile.root, "node_modules", installer, "win32-x64", `${tool}.exe`)];
+}
+async function probeTool(profile, tool) {
+    const candidates = candidatePaths(profile, tool);
+    const found = candidates.find((candidate) => existsSync(candidate));
+    if (!found) {
+        return { status: "fail", detail: "missing", evidence: `looked in: ${candidates.join(", ")}` };
+    }
+    try {
+        const { stdout } = await execa(found, ["-version"], { timeout: 10_000 });
+        // أول رمز بعد "ffmpeg version" هو رقم النسخة؛ نأخذه للعرض ولا نحلّله أكثر.
+        const version = stdout.split(/\s+/)[2] ?? "unknown";
+        return { status: "pass", detail: version, evidence: found };
+    }
+    catch {
+        // موجود ولا يعمل: أسوأ من الغياب لأنه يمرّ بفحص الوجود ويفشل وقت التشغيل.
+        return { status: "fail", detail: "present but does not run", evidence: found };
+    }
+}
+function toolCheck(tool) {
+    return {
+        id: `tooling.${tool}`,
+        category: "tooling",
+        title: tool,
+        run: ({ profile }) => probeTool(profile, tool),
+        remedy: (_result, { profile }) => profile.kind === "appliance"
+            ? `Reinstall the bundle — ${tool}.exe ships inside it at runtime\\${tool}.exe and must not be removed.`
+            : `Run "npm install" at the repository root; ${tool} ships as a prebuilt installer package.`,
+    };
+}
+export const toolingChecks = [toolCheck("ffmpeg"), toolCheck("ffprobe")];
+//# sourceMappingURL=tooling.check.js.map

package/dist/doctor/checks/tooling.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tooling.check.js","sourceRoot":"","sources":["../../../src/doctor/checks/tooling.check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAoB9B;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAgB,EAAE,IAAU;IAClD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC;IAExF,MAAM,SAAS,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAgB,EAAE,IAAU;IACnD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAEpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAU;IAC3B,OAAO;QACL,EAAE,EAAE,WAAW,IAAI,EAAE;QACrB,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;QAC9C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAC/B,OAAO,CAAC,IAAI,KAAK,WAAW;YAC1B,CAAC,CAAC,0BAA0B,IAAI,oCAAoC,IAAI,+BAA+B;YACvG,CAAC,CAAC,6CAA6C,IAAI,yCAAyC;KACjG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/dist/doctor/registry.d.ts

@@ -0,0 +1,15 @@
+import type { CheckContext, CheckOutcome, DiagnosticCheck } from "./check.types.js";
+export declare function buildRegistry(context: CheckContext): DiagnosticCheck[];
+export interface DoctorReport {
+    outcomes: CheckOutcome[];
+    /** عدد الفحوص الحاجبة. يقرّر رمز الخروج. */
+    blocking: number;
+    warnings: number;
+    unknown: number;
+}
+/**
+ * ينفّذ الفحوص **بالتتابع** لا بالتوازي. الأمر قصير أصلًا، والتتابع يبقي المخرَج مرتّبًا كما كُتب
+ * ويمنع ازدحام عدّة استعلامات PowerShell على المنافذ في آنٍ واحد.
+ */
+export declare function runDoctor(context: CheckContext): Promise<DoctorReport>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/doctor/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAmBpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,EAAE,CAetE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAmB5E"}

package/dist/doctor/registry.js

@@ -0,0 +1,53 @@
+import { isBlocking } from "./check.types.js";
+import { environmentChecks } from "./checks/environment.check.js";
+import { isolationChecks } from "./checks/isolation.check.js";
+import { portChecks } from "./checks/ports.check.js";
+import { toolingChecks } from "./checks/tooling.check.js";
+import { dataChecks } from "./checks/data.check.js";
+import { coreChecks, resetCoreCheckCache } from "./checks/core.check.js";
+import { supervisorChecks } from "./checks/supervisor.check.js";
+import { integrityChecks } from "./checks/integrity.check.js";
+import { licenceChecks, resetLicenceCheckCache } from "./checks/licence.check.js";
+// AR: يجمّع الفحوص وينفّذها. الترتيب مقصود: البيئة ثم المنافذ ثم الأدوات ثم البيانات ثم السلامة —
+//     من الأقرب إلى المستخدم إلى الأعمق، فيقرأ السبب الجذري قبل أعراضه.
+//     داخل فئة البيانات يأتي «هل النواة تعمل» أوّلًا لأن ما بعده مشتقّ منه.
+// EN: Assembles and runs the checks. The order is deliberate: environment, ports, tooling, data,
+//     integrity — nearest to the user first, so a root cause is read before its symptoms. Inside the
+//     data category "is the core up" comes first because everything after it derives from that.
+export function buildRegistry(context) {
+    return [
+        ...environmentChecks,
+        // العزل ضمن البيئة وبعدها مباشرة: هو أيضًا سؤال «على أي أرض نقف»، وجوابه يسبق كل ما بعده.
+        ...isolationChecks,
+        ...portChecks(context),
+        ...toolingChecks,
+        ...dataChecks,
+        ...coreChecks,
+        // بعد فحوص النواة: «من يُحييها إن ماتت» سؤالٌ يلي «هل هي حيّة»، لا يسبقه (٠٢٠/T016).
+        ...supervisorChecks,
+        ...integrityChecks,
+        // الترخيص آخرًا (P4.4): جوابه مشتقّ من كون النواة حيّة، فلا يسبق الفحص الذي يقرّر ذلك.
+        ...licenceChecks,
+    ];
+}
+/**
+ * ينفّذ الفحوص **بالتتابع** لا بالتوازي. الأمر قصير أصلًا، والتتابع يبقي المخرَج مرتّبًا كما كُتب
+ * ويمنع ازدحام عدّة استعلامات PowerShell على المنافذ في آنٍ واحد.
+ */
+export async function runDoctor(context) {
+    resetCoreCheckCache();
+    resetLicenceCheckCache();
+    const outcomes = [];
+    for (const check of buildRegistry(context)) {
+        const result = await check.run(context);
+        const remedy = result.status === "pass" ? undefined : check.remedy(result, context) || undefined;
+        outcomes.push({ check, result, remedy });
+    }
+    return {
+        outcomes,
+        blocking: outcomes.filter((outcome) => isBlocking(outcome.result)).length,
+        warnings: outcomes.filter((outcome) => outcome.result.status === "warn").length,
+        unknown: outcomes.filter((outcome) => outcome.result.status === "unknown").length,
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/doctor/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doctor/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAElF,kGAAkG;AAClG,wEAAwE;AACxE,4EAA4E;AAC5E,iGAAiG;AACjG,qGAAqG;AACrG,gGAAgG;AAEhG,MAAM,UAAU,aAAa,CAAC,OAAqB;IACjD,OAAO;QACL,GAAG,iBAAiB;QACpB,0FAA0F;QAC1F,GAAG,eAAe;QAClB,GAAG,UAAU,CAAC,OAAO,CAAC;QACtB,GAAG,aAAa;QAChB,GAAG,UAAU;QACb,GAAG,UAAU;QACb,qFAAqF;QACrF,GAAG,gBAAgB;QACnB,GAAG,eAAe;QAClB,uFAAuF;QACvF,GAAG,aAAa;KACjB,CAAC;AACJ,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAqB;IACnD,mBAAmB,EAAE,CAAC;IACtB,sBAAsB,EAAE,CAAC;IAEzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC;QAEjG,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACzE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QAC/E,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;KAClF,CAAC;AACJ,CAAC"}

package/dist/exit-codes.d.ts

@@ -0,0 +1,18 @@
+export declare const EXIT: {
+    /** نجاح. */
+    readonly OK: 0;
+    /** فشل عام لا يندرج تحت ما بعده. */
+    readonly FAILURE: 1;
+    /** خطأ استخدام: عَلَم مجهول أو وسيط ناقص. يولّده oclif نفسه. */
+    readonly USAGE: 2;
+    /** تعارض منفذ: المنفذ محجوز ومن يحجزه معروف. */
+    readonly PORT_CONFLICT: 3;
+    /** الخدمة لا تستجيب: حيّة كعملية، غير جاهزة كخدمة. الفرق يغيّر العلاج. */
+    readonly UNREACHABLE: 4;
+    /** لم يُحلّ ملفّ التشغيل: لا مستودع هنا ولا جهاز مركّب. */
+    readonly NO_PROFILE: 5;
+    /** ‎doctor‎ وجد عائقًا حاجبًا. مميَّز عن الفشل العام: التشخيص **نجح** ووجد مشكلة. */
+    readonly DIAGNOSTIC_BLOCKED: 6;
+};
+export type ExitCode = (typeof EXIT)[keyof typeof EXIT];
+//# sourceMappingURL=exit-codes.d.ts.map

package/dist/exit-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,IAAI;IACf,YAAY;;IAEZ,oCAAoC;;IAEpC,gEAAgE;;IAEhE,gDAAgD;;IAEhD,0EAA0E;;IAE1E,2DAA2D;;IAE3D,qFAAqF;;CAE7E,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC"}

package/dist/exit-codes.js

@@ -0,0 +1,23 @@
+// AR: عقد رموز الخروج (017/FR-032). ليست تفصيلًا داخليًا بل **واجهة**: سكربت بوّابة يفرّق بها بين
+//     «المنفذ محجوز» و«التشخيص وجد عائقًا» دون أن يحلّل نصًّا إنجليزيًا. لذلك تعيش في ملف مستقلّ
+//     يستورده الأمر والعارضة معًا، لا داخل أحدهما.
+// EN: The exit-code contract (017/FR-032). Not an internal detail but an **interface**: a gate
+//     script distinguishes "the port was busy" from "diagnosis found a blocker" without parsing
+//     English prose. Hence its own file, imported by commands and renderers alike.
+export const EXIT = {
+    /** نجاح. */
+    OK: 0,
+    /** فشل عام لا يندرج تحت ما بعده. */
+    FAILURE: 1,
+    /** خطأ استخدام: عَلَم مجهول أو وسيط ناقص. يولّده oclif نفسه. */
+    USAGE: 2,
+    /** تعارض منفذ: المنفذ محجوز ومن يحجزه معروف. */
+    PORT_CONFLICT: 3,
+    /** الخدمة لا تستجيب: حيّة كعملية، غير جاهزة كخدمة. الفرق يغيّر العلاج. */
+    UNREACHABLE: 4,
+    /** لم يُحلّ ملفّ التشغيل: لا مستودع هنا ولا جهاز مركّب. */
+    NO_PROFILE: 5,
+    /** ‎doctor‎ وجد عائقًا حاجبًا. مميَّز عن الفشل العام: التشخيص **نجح** ووجد مشكلة. */
+    DIAGNOSTIC_BLOCKED: 6,
+};
+//# sourceMappingURL=exit-codes.js.map