abtars 0.3.4-alpha.4 → 0.3.4-alpha.5

package/bundle/{_registry.generated-NTYSLLKQ.js → _registry.generated-VN2OU54H.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
-import {
-  sleep_exports
-} from "./chunk-LGP6TYFI.js";
 import {
   browser_exports
 } from "./chunk-7Z3HBPRY.js";
+import {
+  sleep_exports
+} from "./chunk-LGP6TYFI.js";
 import {
   hotskills_exports,
   init_hotskills
@@ -33,4 +33,4 @@ var capabilities = [
 export {
   capabilities
 };
-//# sourceMappingURL=_registry.generated-NTYSLLKQ.js.map
+//# sourceMappingURL=_registry.generated-VN2OU54H.js.map

package/bundle/abtars-cli.js

@@ -2,8 +2,8 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   update
-} from "./chunk-JQRHSGEA.js";
-import "./chunk-MTTROAAW.js";
+} from "./chunk-44JSAOAU.js";
+import "./chunk-XGLBEDRG.js";
 import {
   rollback
 } from "./chunk-HZDLFLRP.js";
@@ -12,7 +12,7 @@ import {
   renderJson,
   runAllProbes,
   runFixes
-} from "./chunk-5WCURRN3.js";
+} from "./chunk-4MULJ5SS.js";
 import {
   deriveFromPassphrase,
   deriveKey,
@@ -1171,7 +1171,7 @@ async function onboard(opts) {
   process.stdout.write(`
 Running abtars update...
 `);
-  const { update: update2 } = await import("./update-JBTTDVDD.js");
+  const { update: update2 } = await import("./update-EZWBQTLI.js");
   return await update2({ source: opts.source ?? "alpha", localDir: opts.localDir, skipFreshness: true, allowAbmindMismatch: false });
 }
 async function seedDefaultTasks(_chatId, abtarsHome2) {
@@ -1418,7 +1418,7 @@ async function main(argv) {
         });
       }
       case "__deploy": {
-        const { deployActivationCli } = await import("./deploy-C2EYONHC.js");
+        const { deployActivationCli } = await import("./deploy-L6EASMTO.js");
         return await deployActivationCli(flags);
       }
       case "rollback":

package/bundle/abtars.js

@@ -19,10 +19,10 @@ import {
   createSkillStatsFlushTask,
   createUpdateCheckTask,
   phasePipelineDeps
-} from "./chunk-YS47BYOJ.js";
+} from "./chunk-F6VDEYK3.js";
 import {
   loadNLMConfig
-} from "./chunk-DO3A52JX.js";
+} from "./chunk-QZCKZPWF.js";
 import "./chunk-63A7ZRIH.js";
 import "./chunk-OKAQICWY.js";
 import {
@@ -35,7 +35,7 @@ import {
 } from "./chunk-7BSQ5UQO.js";
 import {
   phaseTransport
-} from "./chunk-DM22Z3EJ.js";
+} from "./chunk-7YQGRUXI.js";
 import {
   resetAllCtxStarts
 } from "./chunk-JQDJPUHM.js";
@@ -43,11 +43,11 @@ import "./chunk-ZAA7B5BN.js";
 import {
   loadAndValidateConfig
 } from "./chunk-NDCRWEEJ.js";
-import "./chunk-FALOOWB5.js";
-import "./chunk-QTNVZ4EW.js";
+import "./chunk-V3DZFJZ2.js";
+import "./chunk-5QUTMUIK.js";
 import {
   SubagentRuntime
-} from "./chunk-4JXC3WTP.js";
+} from "./chunk-Q33GFBXL.js";
 import {
   createCapabilityRegistry
 } from "./chunk-XX6BGTPO.js";
@@ -58,7 +58,7 @@ import {
 } from "./chunk-YRSMGJFP.js";
 import {
   setPeerActivityCallback
-} from "./chunk-ZXTNCV5J.js";
+} from "./chunk-56SV72K4.js";
 import "./chunk-AW2FTHQO.js";
 import "./chunk-MV6CJFWR.js";
 import "./chunk-URQPDCK5.js";
@@ -1145,7 +1145,7 @@ async function phasePlatformsConnect(ctx) {
   registry.register("telegram", {
     configured: Boolean(config.telegram.botToken && config.telegram.allowedUserIds.size > 0),
     async create() {
-      const { TelegramAdapter } = await import("./telegram-adapter-7TZN3BEX.js");
+      const { TelegramAdapter } = await import("./telegram-adapter-5O4CJFH5.js");
       const adapter = new TelegramAdapter(
         { botToken: config.telegram.botToken, allowedUserIds: config.telegram.allowedUserIds, pollTimeoutS: config.telegram.pollTimeoutS },
         { pipeline: { handleInbound: (msg) => recovery.handle(msg, adapter) }, conversationBuffer: ctx.conversationBuffer, transport: null, memory: null, sessionManager: ctx.sessionManager, actionGate: ctx.actionGate }
@@ -1177,7 +1177,7 @@ async function phasePlatformsConnect(ctx) {
       if (!config.discord.appId || !isValidSnowflake(config.discord.appId)) {
         throw new Error("DISCORD_APP_ID missing or invalid \u2014 Discord disabled");
       }
-      const { DiscordAdapter } = await import("./discord-adapter-AAY6RVVS.js");
+      const { DiscordAdapter } = await import("./discord-adapter-NUEBQD2T.js");
       const adapter = new DiscordAdapter(
         { botToken: config.discord.botToken, appId: config.discord.appId, allowedUserIds: config.discord.allowedUserIds },
         { pipeline: { handleInbound: (msg) => recovery.handle(msg, adapter) }, transport: null, memory: null, conversationBuffer: ctx.conversationBuffer }
@@ -1255,7 +1255,7 @@ async function phaseCapabilities(ctx) {
   let loaded = [];
   let staticCaps;
   try {
-    ({ capabilities: staticCaps } = await import("./_registry.generated-NTYSLLKQ.js"));
+    ({ capabilities: staticCaps } = await import("./_registry.generated-VN2OU54H.js"));
   } catch (err) {
     logError("capabilities", `Registry import failed: ${err instanceof Error ? err.message : String(err)}. Loading individually.`);
     staticCaps = [];
@@ -1473,7 +1473,7 @@ async function phaseSleep(ctx) {
     return "skipped";
   }
   const { createSleepHandle } = await import("./sleep-36XS6MHJ.js");
-  const { killWakeInhibit } = await import("./commands-CFJML6XV.js");
+  const { killWakeInhibit } = await import("./commands-W4BHW3NM.js");
   const SLEEP_HOUR = parseInt(readEnvWithDefault("BED_TIME", "2", "bedtime hour").split(":")[0] ?? "2", 10);
   let subagent = null;
   const { getEnv: getEnv2 } = await import("./env-schema-4JXQUOH4.js");
@@ -3512,7 +3512,7 @@ async function startBridge() {
     }
   }
   try {
-    const { runFixes } = await import("./doctor-probes-4FAM4PTN.js");
+    const { runFixes } = await import("./doctor-probes-B54JFIW3.js");
     await runFixes();
   } catch {
   }

package/bundle/{agent-registry-GVPWTW77.js → agent-registry-OXFVXBOO.js}

@@ -3,8 +3,8 @@
 import {
   createAgentTransport,
   createSubagentTransport
-} from "./chunk-FALOOWB5.js";
-import "./chunk-QTNVZ4EW.js";
+} from "./chunk-V3DZFJZ2.js";
+import "./chunk-5QUTMUIK.js";
 import "./chunk-GRVWZO4C.js";
 import "./chunk-N5KN3LGD.js";
 import "./chunk-65VCEC32.js";
@@ -17,4 +17,4 @@ export {
   createAgentTransport,
   createSubagentTransport
 };
-//# sourceMappingURL=agent-registry-GVPWTW77.js.map
+//# sourceMappingURL=agent-registry-OXFVXBOO.js.map

package/bundle/{bootstrap-IXSBJZHN.js → bootstrap-XBTZIGKC.js}

@@ -4,7 +4,7 @@ import {
   makeLocalBuildSource,
   makeNpmSource,
   syncSrcRepos
-} from "./chunk-MTTROAAW.js";
+} from "./chunk-XGLBEDRG.js";
 import {
   cleanStaleStaging
 } from "./chunk-5NY2YULC.js";
@@ -60,4 +60,4 @@ async function bootstrap(opts) {
 export {
   bootstrap
 };
-//# sourceMappingURL=bootstrap-IXSBJZHN.js.map
+//# sourceMappingURL=bootstrap-XBTZIGKC.js.map

package/bundle/{chunk-JQRHSGEA.js → chunk-44JSAOAU.js}

@@ -2,7 +2,7 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   deploy
-} from "./chunk-MTTROAAW.js";
+} from "./chunk-XGLBEDRG.js";
 import {
   printBanner
 } from "./chunk-YDY6QVWJ.js";
@@ -27,11 +27,11 @@ Usage: abtars update --dev [dir] | --alpha | --stable
   if (opts.localDir) {
     return deploy({ source: opts.source, localDir: opts.localDir, skipFreshness: opts.skipFreshness });
   }
-  const { bootstrap } = await import("./bootstrap-IXSBJZHN.js");
+  const { bootstrap } = await import("./bootstrap-XBTZIGKC.js");
   return bootstrap({ channel: opts.source });
 }
 
 export {
   update
 };
-//# sourceMappingURL=chunk-JQRHSGEA.js.map
+//# sourceMappingURL=chunk-44JSAOAU.js.map

package/bundle/{chunk-5WCURRN3.js → chunk-4MULJ5SS.js}

@@ -56,17 +56,59 @@ async function timedProbe(fn) {
   }
 }
 async function probePlatforms() {
-  const env = readEnv();
-  const parts = [];
-  if (env.get("TELEGRAM_BOT_TOKEN") || env.get("TELEGRAM_TOKEN")) parts.push("telegram");
-  if (env.get("DISCORD_TOKEN") || env.get("DISCORD_BOT_TOKEN")) parts.push("discord");
-  if (env.get("IRC_SERVER")) parts.push("irc");
-  if (parts.length === 0) return { name: "platforms", status: "failed", detail: "no platform configured" };
-  const lock = readJson(join(home, "bridge.lock"));
-  if (lock?.pid && pidAlive(lock.pid)) {
-    return { name: "platforms", status: "ok", detail: parts.map((p) => `${p} \u2713`).join(", ") };
+  const { readSecret, initSecretsKey } = await import("./secrets-F3IBPUD2.js");
+  initSecretsKey();
+  const results = [];
+  const telegramToken = readSecret("TELEGRAM_BOT_TOKEN") ?? readSecret("TELEGRAM_TOKEN");
+  if (telegramToken) {
+    const r = await verifyTelegram(telegramToken);
+    results.push({ name: "telegram", ...r });
+  }
+  const discordToken = readSecret("DISCORD_BOT_TOKEN") ?? readSecret("DISCORD_TOKEN");
+  if (discordToken) {
+    const r = await verifyDiscord(discordToken);
+    results.push({ name: "discord", ...r });
+  }
+  const ircServer = readSecret("IRC_SERVER");
+  if (ircServer) {
+    results.push({ name: "irc", status: "ok", detail: "server configured (connection not verified)" });
+  }
+  if (results.length === 0) return { name: "platforms", status: "skipped", detail: "no platform configured" };
+  const failed = results.filter((r) => r.status === "failed");
+  const skipped = results.filter((r) => r.status === "skipped");
+  const allOk = failed.length === 0 && skipped.length === 0;
+  const status = allOk ? "ok" : failed.length > 0 ? "failed" : "ok";
+  const detail = results.map((r) => `${r.name}: ${r.status}${r.detail ? ` (${r.detail})` : ""}`).join(", ");
+  return { name: "platforms", status, detail };
+}
+async function verifyTelegram(token) {
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5e3);
+    const res = await fetch(`https://api.telegram.org/bot${token}/getMe`, { signal: controller.signal });
+    clearTimeout(timeout);
+    if (res.ok) return { status: "ok", detail: "getMe ok" };
+    if (res.status === 401 || res.status === 403) return { status: "failed", detail: "invalid token" };
+    return { status: "skipped", detail: `http ${res.status}` };
+  } catch {
+    return { status: "skipped", detail: "unreachable" };
+  }
+}
+async function verifyDiscord(token) {
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5e3);
+    const res = await fetch("https://discord.com/api/v10/users/@me", {
+      headers: { "Authorization": `Bot ${token}` },
+      signal: controller.signal
+    });
+    clearTimeout(timeout);
+    if (res.ok) return { status: "ok", detail: "gateway ok" };
+    if (res.status === 401 || res.status === 403) return { status: "failed", detail: "invalid token" };
+    return { status: "skipped", detail: `http ${res.status}` };
+  } catch {
+    return { status: "skipped", detail: "unreachable" };
   }
-  return { name: "platforms", status: "ok", detail: `configured: ${parts.join(", ")} (bridge not running)` };
 }
 async function probeDashboard() {
   const env = readEnv();
@@ -116,6 +158,14 @@ async function probeHeartbeat() {
   if (ageMs > 12e4) return { name: "heartbeat", status: "failed", detail: `stale (${ago(ageMs)})` };
   return { name: "heartbeat", status: "ok", detail: ago(ageMs) };
 }
+async function probeSingleBridge() {
+  const { spawnSync } = await import("node:child_process");
+  const pgrep = spawnSync("pgrep", ["-f", "app/bundle/abtars.js"], { encoding: "utf-8" });
+  const pids = pgrep.stdout ? pgrep.stdout.trim().split("\n").filter(Boolean) : [];
+  if (pids.length === 0) return { name: "single-bridge", status: "skipped", detail: "no bridge running" };
+  if (pids.length === 1) return { name: "single-bridge", status: "ok", detail: `pid:${pids[0]}` };
+  return { name: "single-bridge", status: "failed", detail: `${pids.length} bridges running: ${pids.join(",")}` };
+}
 async function probeTransport() {
   const tPath = join(configDir, "transport.json");
   const t = readJson(tPath);
@@ -258,7 +308,7 @@ async function probeMind() {
 async function runAllProbes() {
   const start = Date.now();
   const [body, heart, brain, soul, tribe] = await Promise.all([
-    Promise.all([probePlatforms(), probeDashboard(), probeSecurity(), probeWatchdog()].map((p) => timedProbe(() => p))),
+    Promise.all([probePlatforms(), probeDashboard(), probeSecurity(), probeWatchdog(), probeSingleBridge()].map((p) => timedProbe(() => p))),
     Promise.all([probeHeartbeat()].map((p) => timedProbe(() => p))),
     Promise.all([probeTransport(), probeSpin(), probeKanban(), probeSkills(), probeSha()].map((p) => timedProbe(() => p))),
     Promise.all([probeMind()].map((p) => timedProbe(() => p))),
@@ -451,4 +501,4 @@ export {
   renderHuman,
   renderJson
 };
-//# sourceMappingURL=chunk-5WCURRN3.js.map
+//# sourceMappingURL=chunk-4MULJ5SS.js.map

package/bundle/chunk-4MULJ5SS.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/commands/doctor-probes.ts"],
+  "sourcesContent": ["/**\n * doctor-probes.ts \u2014 structured health probes grouped by subsystem layer.\n * Replaces scripts/doctor.sh entirely.\n */\n\nimport { existsSync, readFileSync, readdirSync, statSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport { abtarsHome } from \"../../paths.js\";\n\n// \u2500\u2500 Types \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface ProbeResult {\n  name: string;\n  status: \"ok\" | \"failed\" | \"skipped\";\n  detail?: string;\n  ms?: number;\n}\n\nexport interface FixResult {\n  probe: string;\n  action: string;\n  success: boolean;\n}\n\nexport type LayerName = \"body\" | \"heart\" | \"brain\" | \"soul\" | \"tribe\";\n\nexport interface DoctorOutput {\n  version: \"1.0\";\n  totalMs: number;\n  layers: Record<LayerName, ProbeResult[]>;\n  fixes?: FixResult[];\n}\n\n// \u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst home = abtarsHome();\nconst configDir = join(home, \"config\");\n\nfunction readJson(path: string): any | null {\n  try { return JSON.parse(readFileSync(path, \"utf-8\")); } catch { return null; }\n}\n\nfunction readEnv(): Map<string, string> {\n  const envPath = join(configDir, \".env\");\n  const map = new Map<string, string>();\n  if (!existsSync(envPath)) return map;\n  for (const line of readFileSync(envPath, \"utf-8\").split(\"\\n\")) {\n    const m = line.match(/^([A-Z_]+)=(.*)$/);\n    if (m) map.set(m[1]!, m[2]!.replace(/^[\"']|[\"']$/g, \"\"));\n  }\n  return map;\n}\n\nfunction pidAlive(pid: number): boolean {\n  try { process.kill(pid, 0); return true; } catch { return false; }\n}\n\nfunction ago(ms: number): string {\n  const s = Math.round(ms / 1000);\n  if (s < 60) return `${s}s ago`;\n  return `${Math.round(s / 60)}m ago`;\n}\n\nasync function timedProbe(fn: () => Promise<ProbeResult>): Promise<ProbeResult> {\n  const start = Date.now();\n  try {\n    const r = await fn();\n    r.ms = r.ms ?? (Date.now() - start);\n    return r;\n  } catch (err) {\n    return { name: \"unknown\", status: \"failed\", detail: String(err), ms: Date.now() - start };\n  }\n}\n\n// \u2500\u2500 Body Probes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function probePlatforms(): Promise<ProbeResult> {\n  const { readSecret, initSecretsKey } = await import(\"../../components/secrets.js\");\n  initSecretsKey();\n\n  const results: Array<{ name: string; status: \"ok\" | \"failed\" | \"skipped\"; detail: string }> = [];\n\n  // Telegram: read token, call getMe\n  const telegramToken = readSecret(\"TELEGRAM_BOT_TOKEN\") ?? readSecret(\"TELEGRAM_TOKEN\");\n  if (telegramToken) {\n    const r = await verifyTelegram(telegramToken);\n    results.push({ name: \"telegram\", ...r });\n  }\n\n  // Discord: read token, call gateway\n  const discordToken = readSecret(\"DISCORD_BOT_TOKEN\") ?? readSecret(\"DISCORD_TOKEN\");\n  if (discordToken) {\n    const r = await verifyDiscord(discordToken);\n    results.push({ name: \"discord\", ...r });\n  }\n\n  // IRC: skip real verification (connection-based), just check if configured\n  const ircServer = readSecret(\"IRC_SERVER\");\n  if (ircServer) {\n    results.push({ name: \"irc\", status: \"ok\", detail: \"server configured (connection not verified)\" });\n  }\n\n  if (results.length === 0) return { name: \"platforms\", status: \"skipped\", detail: \"no platform configured\" };\n\n  const failed = results.filter(r => r.status === \"failed\");\n  const skipped = results.filter(r => r.status === \"skipped\");\n  const allOk = failed.length === 0 && skipped.length === 0;\n  const status = allOk ? \"ok\" : failed.length > 0 ? \"failed\" : \"ok\";\n  const detail = results.map(r => `${r.name}: ${r.status}${r.detail ? ` (${r.detail})` : \"\"}`).join(\", \");\n  return { name: \"platforms\", status, detail };\n}\n\nasync function verifyTelegram(token: string): Promise<{ status: \"ok\" | \"failed\" | \"skipped\"; detail: string }> {\n  try {\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), 5000);\n    const res = await fetch(`https://api.telegram.org/bot${token}/getMe`, { signal: controller.signal });\n    clearTimeout(timeout);\n    if (res.ok) return { status: \"ok\", detail: \"getMe ok\" };\n    if (res.status === 401 || res.status === 403) return { status: \"failed\", detail: \"invalid token\" };\n    return { status: \"skipped\", detail: `http ${res.status}` };\n  } catch {\n    return { status: \"skipped\", detail: \"unreachable\" };\n  }\n}\n\nasync function verifyDiscord(token: string): Promise<{ status: \"ok\" | \"failed\" | \"skipped\"; detail: string }> {\n  try {\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), 5000);\n    const res = await fetch(\"https://discord.com/api/v10/users/@me\", {\n      headers: { \"Authorization\": `Bot ${token}` },\n      signal: controller.signal,\n    });\n    clearTimeout(timeout);\n    if (res.ok) return { status: \"ok\", detail: \"gateway ok\" };\n    if (res.status === 401 || res.status === 403) return { status: \"failed\", detail: \"invalid token\" };\n    return { status: \"skipped\", detail: `http ${res.status}` };\n  } catch {\n    return { status: \"skipped\", detail: \"unreachable\" };\n  }\n}\n\nasync function probeDashboard(): Promise<ProbeResult> {\n  const env = readEnv();\n  if (env.get(\"ENABLE_DASHBOARD\") !== \"true\") return { name: \"dashboard\", status: \"skipped\", detail: \"not enabled\" };\n  const port = env.get(\"DASHBOARD_PORT\") || env.get(\"WEB_PORT\") || \"3000\";\n  try {\n    const res = await fetch(`http://127.0.0.1:${port}/`, { signal: AbortSignal.timeout(3000) });\n    return { name: \"dashboard\", status: res.ok ? \"ok\" : \"failed\", detail: `:${port}` };\n  } catch {\n    return { name: \"dashboard\", status: \"failed\", detail: `:${port} unreachable` };\n  }\n}\n\nasync function probeSecurity(): Promise<ProbeResult> {\n  const env = readEnv();\n  const mode = env.get(\"SECURITY_MODE\") || \"off\";\n  const validModes = [\"off\", \"guardrails\", \"seatbelt\", \"docker\"];\n  if (!validModes.includes(mode)) return { name: \"security\", status: \"failed\", detail: `invalid mode: ${mode}` };\n\n  // Check secret file perms\n  const secretDir = join(home, \"secret\");\n  let permIssues = 0;\n  if (existsSync(secretDir)) {\n    for (const f of readdirSync(secretDir)) {\n      const st = statSync(join(secretDir, f));\n      if (st.isFile() && (st.mode & 0o777) !== 0o600) permIssues++;\n    }\n  }\n\n  const parts = [mode];\n  if (existsSync(join(home, \"auth\", \"rules.json\"))) parts.push(\"ActionGate\");\n  if (permIssues > 0) return { name: \"security\", status: \"failed\", detail: `${mode}, ${permIssues} file(s) not 600` };\n  return { name: \"security\", status: \"ok\", detail: parts.join(\", \") };\n}\n\nasync function probeWatchdog(): Promise<ProbeResult> {\n  const lock = readJson(join(home, \"bridge.lock\"));\n  if (!lock) return { name: \"watchdog\", status: \"failed\", detail: \"bridge.lock missing\" };\n\n  const bridgePid = lock.pid ?? 0;\n  const wdPid = lock.watchdogPid ?? 0;\n  const bridgeAlive = bridgePid > 0 && pidAlive(bridgePid);\n  const wdAlive = wdPid > 0 && pidAlive(wdPid);\n\n  if (bridgeAlive && wdAlive) return { name: \"watchdog\", status: \"ok\", detail: `bridge:${bridgePid}, wd:${wdPid}` };\n  if (!bridgeAlive && !wdAlive) return { name: \"watchdog\", status: \"failed\", detail: `bridge:${bridgePid} dead, wd:${wdPid} dead` };\n  if (!wdAlive) return { name: \"watchdog\", status: \"failed\", detail: `bridge:${bridgePid} alive, wd:${wdPid} dead (unprotected)` };\n  return { name: \"watchdog\", status: \"failed\", detail: `bridge:${bridgePid} dead, wd:${wdPid} alive (will restart)` };\n}\n\n// \u2500\u2500 Heart Probes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function probeHeartbeat(): Promise<ProbeResult> {\n  const lock = readJson(join(home, \"bridge.lock\"));\n  if (!lock?.lastHeartbeat) return { name: \"heartbeat\", status: \"skipped\", detail: \"no bridge.lock\" };\n  const ageMs = Date.now() - lock.lastHeartbeat;\n  if (ageMs > 120_000) return { name: \"heartbeat\", status: \"failed\", detail: `stale (${ago(ageMs)})` };\n  return { name: \"heartbeat\", status: \"ok\", detail: ago(ageMs) };\n}\n\n// #1261: single-bridge invariant \u2014 catches duplicate-bridge regressions at runtime.\n// pgrep counts the bridge processes. >1 means a second bridge is running (likely orphaned).\nasync function probeSingleBridge(): Promise<ProbeResult> {\n  const { spawnSync } = await import(\"node:child_process\");\n  const pgrep = spawnSync(\"pgrep\", [\"-f\", \"app/bundle/abtars.js\"], { encoding: \"utf-8\" });\n  const pids = pgrep.stdout ? pgrep.stdout.trim().split(\"\\n\").filter(Boolean) : [];\n  if (pids.length === 0) return { name: \"single-bridge\", status: \"skipped\", detail: \"no bridge running\" };\n  if (pids.length === 1) return { name: \"single-bridge\", status: \"ok\", detail: `pid:${pids[0]}` };\n  return { name: \"single-bridge\", status: \"failed\", detail: `${pids.length} bridges running: ${pids.join(\",\")}` };\n}\n\n// \u2500\u2500 Brain Probes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function probeTransport(): Promise<ProbeResult> {\n  const tPath = join(configDir, \"transport.json\");\n  const t = readJson(tPath);\n  if (!t) return { name: \"transport\", status: \"failed\", detail: \"transport.json missing or invalid\" };\n  const agents = Object.keys(t.agents ?? {});\n  if (agents.length === 0) return { name: \"transport\", status: \"failed\", detail: \"no agents configured\" };\n  return { name: \"transport\", status: \"ok\", detail: `${agents.length} agent(s): ${agents.join(\", \")}` };\n}\n\nasync function probeSpin(): Promise<ProbeResult> {\n  const lock = readJson(join(home, \"bridge.lock\"));\n  if (!lock?.pid || !pidAlive(lock.pid)) return { name: \"spin\", status: \"failed\", detail: \"bridge not running\" };\n  return { name: \"spin\", status: \"ok\", detail: \"bridge alive\" };\n}\n\nasync function probeKanban(): Promise<ProbeResult> {\n  const dbPath = join(home, \"kanban\", \"kanban.db\");\n  if (!existsSync(dbPath)) return { name: \"kanban\", status: \"skipped\", detail: \"kanban.db not found\" };\n  const sharedNm = join(homedir(), \".local\", \"lib\", \"node_modules\", \"better-sqlite3\");\n  if (!existsSync(sharedNm)) return { name: \"kanban\", status: \"skipped\", detail: \"better-sqlite3 not installed (run: abtars deps install)\" };\n  let Db: any;\n  try {\n    const { createRequire } = await import(\"node:module\");\n    const _require = createRequire(import.meta.url);\n    Db = _require(sharedNm);\n  } catch (err) {\n    return { name: \"kanban\", status: \"skipped\", detail: `better-sqlite3 not loadable: ${err instanceof Error ? err.message : String(err)}` };\n  }\n  try {\n    const db = new Db(dbPath, { readonly: true });\n    const row = db.prepare(\"SELECT COUNT(*) as cnt FROM kanban_board\").get() as { cnt: number };\n    const stuck = db.prepare(\"SELECT COUNT(*) as cnt FROM kanban_board WHERE status='running' AND updated_at < datetime('now', '-10 minutes')\").get() as { cnt: number };\n    db.close();\n    const detail = stuck.cnt > 0 ? `${row.cnt} cards, ${stuck.cnt} stuck` : `${row.cnt} cards`;\n    return { name: \"kanban\", status: stuck.cnt > 0 ? \"failed\" : \"ok\", detail };\n  } catch (err) {\n    return { name: \"kanban\", status: \"skipped\", detail: `kanban.db query failed: ${err instanceof Error ? err.message : String(err)}` };\n  }\n}\n\nasync function probeSkills(): Promise<ProbeResult> {\n  const catalog = join(home, \"skills\", \"skills_catalog.md\");\n  if (!existsSync(catalog)) return { name: \"skills\", status: \"failed\", detail: \"skills_catalog.md missing\" };\n  const content = readFileSync(catalog, \"utf-8\");\n  const count = (content.match(/^## /gm) || []).length;\n  if (count === 0) return { name: \"skills\", status: \"failed\", detail: \"catalog empty\" };\n  return { name: \"skills\", status: \"ok\", detail: `${count} loaded` };\n}\n\nasync function probeSha(): Promise<ProbeResult> {\n  // Check if healer skill exists in catalog\n  const catalog = join(home, \"skills\", \"skills_catalog.md\");\n  if (!existsSync(catalog)) return { name: \"sha\", status: \"skipped\", detail: \"no catalog\" };\n  const content = readFileSync(catalog, \"utf-8\");\n  if (/self.heal|healer|auto.fix/i.test(content)) return { name: \"sha\", status: \"ok\", detail: \"rules loaded\" };\n  // Check sha-policy.json\n  if (existsSync(join(configDir, \"sha-policy.json\"))) return { name: \"sha\", status: \"ok\", detail: \"rules loaded\" };\n  return { name: \"sha\", status: \"skipped\", detail: \"no healer rules configured\" };\n}\n\n// \u2500\u2500 Tribe Probes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function probeAgentApi(): Promise<ProbeResult> {\n  const env = readEnv();\n  if (env.get(\"ENABLE_AGENT_API\") !== \"true\") return { name: \"agent-api\", status: \"skipped\", detail: \"not enabled\" };\n  const port = parseInt(env.get(\"AGENT_API_PORT\") || \"7100\", 10);\n  try {\n    const { createConnection } = await import(\"node:net\");\n    await new Promise<void>((resolve, reject) => {\n      const sock = createConnection({ port, host: \"127.0.0.1\" }, () => { sock.destroy(); resolve(); });\n      sock.on(\"error\", reject);\n      sock.setTimeout(2000, () => { sock.destroy(); reject(new Error(\"timeout\")); });\n    });\n    return { name: \"agent-api\", status: \"ok\", detail: `:${port}` };\n  } catch {\n    return { name: \"agent-api\", status: \"failed\", detail: `:${port} not listening` };\n  }\n}\n\nasync function probePeers(): Promise<ProbeResult> {\n  const peersPath = join(configDir, \"peers.json\");\n  const peers = readJson(peersPath);\n  if (!peers) return { name: \"peers\", status: \"skipped\", detail: \"peers.json missing\" };\n  const peerCount = Object.keys(peers.peers ?? {}).length;\n  if (peerCount === 0) return { name: \"peers\", status: \"ok\", detail: \"no peers configured\" };\n\n  const lock = readJson(join(home, \"bridge.lock\"));\n  const gossipAge = lock?.lastGossipBroadcast ? ago(Date.now() - lock.lastGossipBroadcast) : \"unknown\";\n  return { name: \"peers\", status: \"ok\", detail: `${peerCount} configured, gossip: ${gossipAge}` };\n}\n\nasync function probeTls(): Promise<ProbeResult> {\n  const env = readEnv();\n  if (env.get(\"ENABLE_AGENT_API\") !== \"true\") return { name: \"tls\", status: \"skipped\", detail: \"agent-api disabled\" };\n  const certExists = existsSync(join(configDir, \"identity.crt\"));\n  const keyExists = existsSync(join(configDir, \"identity.tls.key\"));\n  if (certExists && keyExists) return { name: \"tls\", status: \"ok\", detail: \"certs present\" };\n  const missing = [!certExists && \"identity.crt\", !keyExists && \"identity.tls.key\"].filter(Boolean);\n  return { name: \"tls\", status: \"failed\", detail: `missing: ${missing.join(\", \")}` };\n}\n\nasync function probeA2a(): Promise<ProbeResult> {\n  const peersPath = join(configDir, \"peers.json\");\n  const peers = readJson(peersPath) as { gossipSecret?: string; peers?: Record<string, { token?: string }>; self?: { udpPort?: number } } | null;\n  if (!peers?.self?.udpPort) return { name: \"a2a\", status: \"skipped\", detail: \"no gossip port configured\" };\n\n  const port = peers.self.udpPort;\n  try {\n    const dgram = await import(\"node:dgram\");\n    const { createHmac } = await import(\"node:crypto\");\n    const key = peers.gossipSecret ?? Object.values(peers.peers ?? {})[0]?.token ?? \"default\";\n    const payload = JSON.stringify({ type: \"ping\", name: \"__doctor__\" });\n    const sig = createHmac(\"sha256\", key).update(payload).digest(\"base64url\").slice(0, 16);\n    const ping = Buffer.from(`${payload}|${sig}`);\n\n    const alive = await new Promise<boolean>((resolve) => {\n      const sock = dgram.createSocket(\"udp4\");\n      const timer = setTimeout(() => { sock.close(); resolve(false); }, 500);\n      sock.on(\"message\", () => { clearTimeout(timer); sock.close(); resolve(true); });\n      sock.on(\"error\", () => { clearTimeout(timer); sock.close(); resolve(false); });\n      sock.send(ping, port, \"127.0.0.1\");\n    });\n    return { name: \"a2a\", status: alive ? \"ok\" : \"failed\", detail: alive ? `UDP :${port} alive` : `UDP :${port} no response` };\n  } catch {\n    return { name: \"a2a\", status: \"failed\", detail: \"UDP probe error\" };\n  }\n}\n\n// \u2500\u2500 Soul Probes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function probeMind(): Promise<ProbeResult> {\n  try {\n    const { loadAbmind } = await import(\"../../utils/abmind-lazy.js\");\n    const mod = await loadAbmind();\n    if (!mod) return { name: \"mind\", status: \"skipped\", detail: \"abmind not installed\" };\n    return { name: \"mind\", status: \"ok\", detail: \"abmind loaded (in-process)\" };\n  } catch {\n    return { name: \"mind\", status: \"skipped\", detail: \"abmind load failed\" };\n  }\n}\n\n// \u2500\u2500 Runner \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function runAllProbes(): Promise<DoctorOutput> {\n  const start = Date.now();\n\n  const [body, heart, brain, soul, tribe] = await Promise.all([\n    Promise.all([probePlatforms(), probeDashboard(), probeSecurity(), probeWatchdog(), probeSingleBridge()].map(p => timedProbe(() => p))),\n    Promise.all([probeHeartbeat()].map(p => timedProbe(() => p))),\n    Promise.all([probeTransport(), probeSpin(), probeKanban(), probeSkills(), probeSha()].map(p => timedProbe(() => p))),\n    Promise.all([probeMind()].map(p => timedProbe(() => p))),\n    Promise.all([probeAgentApi(), probePeers(), probeTls(), probeA2a()].map(p => timedProbe(() => p))),\n  ]);\n\n  return { version: \"1.0\", totalMs: Date.now() - start, layers: { body, heart, brain, soul, tribe } };\n}\n\n// \u2500\u2500 Fix Logic \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function runFixes(): Promise<FixResult[]> {\n  const { chmodSync, unlinkSync, mkdirSync, existsSync: ex, readdirSync: rd, statSync: st, readFileSync: rf, writeFileSync: wf } = await import(\"node:fs\");\n  const { spawnSync } = await import(\"node:child_process\");\n  const fixes: FixResult[] = [];\n\n  function fix(probe: string, action: string, fn: () => void): void {\n    try { fn(); fixes.push({ probe, action, success: true }); }\n    catch { fixes.push({ probe, action, success: false }); }\n  }\n\n  // 1. chmod 700 sensitive dirs\n  for (const dir of [\"config\", \"secret\", \"auth\", \"hooks\"]) {\n    const p = join(home, dir);\n    if (ex(p) && (st(p).mode & 0o777) !== 0o700) {\n      fix(\"security\", `${dir}/ \u2192 700`, () => chmodSync(p, 0o700));\n    }\n  }\n\n  // 2. chmod 600 secret files\n  const secretDir = join(home, \"secret\");\n  if (ex(secretDir)) {\n    for (const f of rd(secretDir)) {\n      const fp = join(secretDir, f);\n      if (st(fp).isFile() && (st(fp).mode & 0o777) !== 0o600) {\n        fix(\"security\", `${f} \u2192 600`, () => chmodSync(fp, 0o600));\n      }\n    }\n  }\n\n  // 3. chmod 600 config files\n  if (ex(configDir)) {\n    for (const f of rd(configDir)) {\n      const fp = join(configDir, f);\n      if (st(fp).isFile() && (st(fp).mode & 0o777) !== 0o600) {\n        fix(\"security\", `config/${f} \u2192 600`, () => chmodSync(fp, 0o600));\n      }\n    }\n  }\n\n  // 4. Stale deploy.lock\n  const deployLock = join(home, \"deploy.lock\");\n  if (ex(deployLock)) {\n    const lock = readJson(deployLock);\n    const lockAge = lock?.startedAt ? (Date.now() - new Date(lock.startedAt).getTime()) / 1000 : 9999;\n    const lockPid = lock?.pid ?? 0;\n    if (lockAge > 300 && (lockPid === 0 || !pidAlive(lockPid))) {\n      fix(\"watchdog\", \"removed stale deploy.lock\", () => unlinkSync(deployLock));\n    }\n  }\n\n  // 5. Stale .start-reason\n  const startReason = join(home, \".start-reason\");\n  if (ex(startReason)) {\n    const age = (Date.now() - st(startReason).mtimeMs) / 1000;\n    if (age > 300) fix(\"watchdog\", \"removed stale .start-reason\", () => unlinkSync(startReason));\n  }\n\n  // 6. Create missing dirs\n  for (const dir of [\"logs\", \"workspace\", \"overflow\", \"received\"]) {\n    const p = join(home, dir);\n    if (!ex(p)) fix(\"watchdog\", `created ${dir}/`, () => mkdirSync(p, { recursive: true }));\n  }\n\n  // 7. Kill orphan CLI processes\n  try {\n    const lock = readJson(join(home, \"bridge.lock\"));\n    const bridgePid = lock?.pid ?? 0;\n    const wdPid = lock?.watchdogPid ?? 0;\n\n    // Orphan kiro-cli\n    const kiro = spawnSync(\"pgrep\", [\"-f\", \"kiro-cli.*acp\"], { encoding: \"utf-8\" });\n    if (kiro.stdout) {\n      for (const pid of kiro.stdout.trim().split(\"\\n\").filter(Boolean).map(Number)) {\n        if (pid > 0 && pid !== bridgePid && pid !== wdPid && pid !== process.pid) {\n          fix(\"brain\", `killed orphan kiro-cli ${pid}`, () => process.kill(pid, \"SIGTERM\"));\n        }\n      }\n    }\n\n    // Orphan abtars-sleep\n    const sleep = spawnSync(\"pgrep\", [\"-f\", \"abtars-sleep\"], { encoding: \"utf-8\" });\n    if (sleep.stdout) {\n      for (const pid of sleep.stdout.trim().split(\"\\n\").filter(Boolean).map(Number)) {\n        if (pid > 0 && pid !== bridgePid) {\n          fix(\"brain\", `killed orphan abtars-sleep ${pid}`, () => process.kill(pid, \"SIGTERM\"));\n        }\n      }\n    }\n  } catch { /* pgrep not available or no orphans */ }\n\n  // 8. Stale locks/sockets\n  for (const f of [\"sleep.lock\", \"memory.sock\"]) {\n    const p = join(home, f);\n    if (ex(p)) {\n      const age = (Date.now() - st(p).mtimeMs) / 1000;\n      const lock = readJson(join(home, \"bridge.lock\"));\n      if (age > 600 && (!lock?.pid || !pidAlive(lock.pid))) {\n        fix(\"watchdog\", `removed stale ${f}`, () => unlinkSync(p));\n      }\n    }\n  }\n\n  // 9. Retention: delete old logs/overflow/media\n  const LOGS_KEEP_DAYS = 7;\n  const DATA_KEEP_DAYS = 30;\n  try {\n    const cutoffLogs = Date.now() - LOGS_KEEP_DAYS * 86400_000;\n    const cutoffData = Date.now() - DATA_KEEP_DAYS * 86400_000;\n\n    for (const [dir, cutoff] of [[join(home, \"logs\"), cutoffLogs], [join(home, \"overflow\"), cutoffData], [join(home, \"received\", \"media\"), cutoffLogs]] as const) {\n      if (!ex(dir)) continue;\n      let deleted = 0;\n      for (const f of rd(dir)) {\n        const fp = join(dir, f);\n        if (st(fp).isFile() && st(fp).mtimeMs < cutoff) { unlinkSync(fp); deleted++; }\n      }\n      if (deleted > 0) fixes.push({ probe: \"retention\", action: `deleted ${deleted} stale file(s) from ${dir.split(\"/\").pop()}`, success: true });\n    }\n\n    // Truncate audit.jsonl if >10MB\n    const auditPath = join(home, \"auth\", \"audit.jsonl\");\n    if (ex(auditPath) && st(auditPath).size > 10_000_000) {\n      const lines = rf(auditPath, \"utf-8\").split(\"\\n\");\n      wf(auditPath, lines.slice(-1000).join(\"\\n\"));\n      fixes.push({ probe: \"retention\", action: \"truncated audit.jsonl\", success: true });\n    }\n  } catch { /* retention errors non-fatal */ }\n\n  // 10. Kill duplicate bridges\n  try {\n    const lock = readJson(join(home, \"bridge.lock\"));\n    const expectedPid = lock?.pid ?? 0;\n    const pgrep = spawnSync(\"pgrep\", [\"-f\", \"abtars.*main\"], { encoding: \"utf-8\" });\n    if (pgrep.stdout) {\n      for (const pid of pgrep.stdout.trim().split(\"\\n\").filter(Boolean).map(Number)) {\n        if (pid > 0 && pid !== expectedPid && pid !== process.pid) {\n          fix(\"watchdog\", `killed duplicate bridge ${pid}`, () => process.kill(pid, \"SIGTERM\"));\n        }\n      }\n    }\n  } catch { /* non-fatal */ }\n\n  // 11. Hooks dir perms\n  const hooksDir = join(home, \"hooks\");\n  if (ex(hooksDir) && (st(hooksDir).mode & 0o777) !== 0o700) {\n    fix(\"security\", \"hooks/ \u2192 700\", () => chmodSync(hooksDir, 0o700));\n  }\n\n  // 12. Install watchdog service if missing\n  try {\n    const manifest = readJson(join(home, \"manifest.json\"));\n    if (manifest?.installMode === \"daemon\") {\n      const { platform } = await import(\"node:os\");\n      if (platform() === \"darwin\") {\n        const plist = `${home}/com.abtars.watchdog.plist`;\n        const dst = `${process.env[\"HOME\"]}/Library/LaunchAgents/com.abtars.watchdog.plist`;\n        if (ex(plist) && !ex(dst)) {\n          fix(\"watchdog\", \"installed LaunchAgent\", () => {\n            const { copyFileSync } = require(\"node:fs\");\n            copyFileSync(plist, dst);\n            spawnSync(\"launchctl\", [\"load\", dst]);\n          });\n        }\n      } else {\n        const svc = `${home}/abtars-watchdog.service`;\n        const dst = `${process.env[\"HOME\"]}/.config/systemd/user/abtars-watchdog.service`;\n        if (ex(svc) && !ex(dst)) {\n          fix(\"watchdog\", \"installed systemd unit\", () => {\n            mkdirSync(join(process.env[\"HOME\"]!, \".config\", \"systemd\", \"user\"), { recursive: true });\n            const { copyFileSync } = require(\"node:fs\");\n            copyFileSync(svc, dst);\n            spawnSync(\"systemctl\", [\"--user\", \"enable\", \"--now\", \"abtars-watchdog.service\"]);\n          });\n        }\n      }\n    }\n  } catch { /* non-fatal */ }\n\n  return fixes;\n}\n\n// \u2500\u2500 Renderer \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst ICON = { ok: \"\u2713\", failed: \"\u2717\", skipped: \"~\" } as const;\n\nexport function renderHuman(output: DoctorOutput): string {\n  const lines: string[] = [];\n  for (const [layer, probes] of Object.entries(output.layers) as [string, ProbeResult[]][]) {\n    lines.push(`${layer.charAt(0).toUpperCase() + layer.slice(1)}:`);\n    for (const p of probes) {\n      const ms = p.ms && p.ms > 500 ? ` (${p.ms}ms)` : \"\";\n      const detail = p.detail ? ` \u2014 ${p.detail}` : \"\";\n      lines.push(`  ${ICON[p.status]} ${p.name}${ms}${detail}`);\n    }\n  }\n  const total = Object.values(output.layers).flat();\n  const okCount = total.filter(r => r.status === \"ok\").length;\n  lines.push(`\\n${okCount}/${total.length} ok (${(output.totalMs / 1000).toFixed(1)}s)`);\n  return lines.join(\"\\n\");\n}\n\nexport function renderJson(output: DoctorOutput): string {\n  return JSON.stringify(output, null, 2);\n}\n"],
+  "mappings": ";;;;;;;;;;;AAQA;AAHA,SAAS,YAAY,cAAc,aAAa,gBAAgB;AAChE,SAAS,YAAY;AACrB,SAAS,eAAe;AA6BxB,IAAM,OAAO,WAAW;AACxB,IAAM,YAAY,KAAK,MAAM,QAAQ;AAErC,SAAS,SAAS,MAA0B;AAC1C,MAAI;AAAE,WAAO,KAAK,MAAM,aAAa,MAAM,OAAO,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAM;AAC/E;AAEA,SAAS,UAA+B;AACtC,QAAM,UAAU,KAAK,WAAW,MAAM;AACtC,QAAM,MAAM,oBAAI,IAAoB;AACpC,MAAI,CAAC,WAAW,OAAO,EAAG,QAAO;AACjC,aAAW,QAAQ,aAAa,SAAS,OAAO,EAAE,MAAM,IAAI,GAAG;AAC7D,UAAM,IAAI,KAAK,MAAM,kBAAkB;AACvC,QAAI,EAAG,KAAI,IAAI,EAAE,CAAC,GAAI,EAAE,CAAC,EAAG,QAAQ,gBAAgB,EAAE,CAAC;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAsB;AACtC,MAAI;AAAE,YAAQ,KAAK,KAAK,CAAC;AAAG,WAAO;AAAA,EAAM,QAAQ;AAAE,WAAO;AAAA,EAAO;AACnE;AAEA,SAAS,IAAI,IAAoB;AAC/B,QAAM,IAAI,KAAK,MAAM,KAAK,GAAI;AAC9B,MAAI,IAAI,GAAI,QAAO,GAAG,CAAC;AACvB,SAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;AAC9B;AAEA,eAAe,WAAW,IAAsD;AAC9E,QAAM,QAAQ,KAAK,IAAI;AACvB,MAAI;AACF,UAAM,IAAI,MAAM,GAAG;AACnB,MAAE,KAAK,EAAE,MAAO,KAAK,IAAI,IAAI;AAC7B,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,WAAO,EAAE,MAAM,WAAW,QAAQ,UAAU,QAAQ,OAAO,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,MAAM;AAAA,EAC1F;AACF;AAIA,eAAe,iBAAuC;AACpD,QAAM,EAAE,YAAY,eAAe,IAAI,MAAM,OAAO,uBAA6B;AACjF,iBAAe;AAEf,QAAM,UAAwF,CAAC;AAG/F,QAAM,gBAAgB,WAAW,oBAAoB,KAAK,WAAW,gBAAgB;AACrF,MAAI,eAAe;AACjB,UAAM,IAAI,MAAM,eAAe,aAAa;AAC5C,YAAQ,KAAK,EAAE,MAAM,YAAY,GAAG,EAAE,CAAC;AAAA,EACzC;AAGA,QAAM,eAAe,WAAW,mBAAmB,KAAK,WAAW,eAAe;AAClF,MAAI,cAAc;AAChB,UAAM,IAAI,MAAM,cAAc,YAAY;AAC1C,YAAQ,KAAK,EAAE,MAAM,WAAW,GAAG,EAAE,CAAC;AAAA,EACxC;AAGA,QAAM,YAAY,WAAW,YAAY;AACzC,MAAI,WAAW;AACb,YAAQ,KAAK,EAAE,MAAM,OAAO,QAAQ,MAAM,QAAQ,8CAA8C,CAAC;AAAA,EACnG;AAEA,MAAI,QAAQ,WAAW,EAAG,QAAO,EAAE,MAAM,aAAa,QAAQ,WAAW,QAAQ,yBAAyB;AAE1G,QAAM,SAAS,QAAQ,OAAO,OAAK,EAAE,WAAW,QAAQ;AACxD,QAAM,UAAU,QAAQ,OAAO,OAAK,EAAE,WAAW,SAAS;AAC1D,QAAM,QAAQ,OAAO,WAAW,KAAK,QAAQ,WAAW;AACxD,QAAM,SAAS,QAAQ,OAAO,OAAO,SAAS,IAAI,WAAW;AAC7D,QAAM,SAAS,QAAQ,IAAI,OAAK,GAAG,EAAE,IAAI,KAAK,EAAE,MAAM,GAAG,EAAE,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI;AACtG,SAAO,EAAE,MAAM,aAAa,QAAQ,OAAO;AAC7C;AAEA,eAAe,eAAe,OAAiF;AAC7G,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,UAAU,WAAW,MAAM,WAAW,MAAM,GAAG,GAAI;AACzD,UAAM,MAAM,MAAM,MAAM,+BAA+B,KAAK,UAAU,EAAE,QAAQ,WAAW,OAAO,CAAC;AACnG,iBAAa,OAAO;AACpB,QAAI,IAAI,GAAI,QAAO,EAAE,QAAQ,MAAM,QAAQ,WAAW;AACtD,QAAI,IAAI,WAAW,OAAO,IAAI,WAAW,IAAK,QAAO,EAAE,QAAQ,UAAU,QAAQ,gBAAgB;AACjG,WAAO,EAAE,QAAQ,WAAW,QAAQ,QAAQ,IAAI,MAAM,GAAG;AAAA,EAC3D,QAAQ;AACN,WAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAAA,EACpD;AACF;AAEA,eAAe,cAAc,OAAiF;AAC5G,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,UAAU,WAAW,MAAM,WAAW,MAAM,GAAG,GAAI;AACzD,UAAM,MAAM,MAAM,MAAM,yCAAyC;AAAA,MAC/D,SAAS,EAAE,iBAAiB,OAAO,KAAK,GAAG;AAAA,MAC3C,QAAQ,WAAW;AAAA,IACrB,CAAC;AACD,iBAAa,OAAO;AACpB,QAAI,IAAI,GAAI,QAAO,EAAE,QAAQ,MAAM,QAAQ,aAAa;AACxD,QAAI,IAAI,WAAW,OAAO,IAAI,WAAW,IAAK,QAAO,EAAE,QAAQ,UAAU,QAAQ,gBAAgB;AACjG,WAAO,EAAE,QAAQ,WAAW,QAAQ,QAAQ,IAAI,MAAM,GAAG;AAAA,EAC3D,QAAQ;AACN,WAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAAA,EACpD;AACF;AAEA,eAAe,iBAAuC;AACpD,QAAM,MAAM,QAAQ;AACpB,MAAI,IAAI,IAAI,kBAAkB,MAAM,OAAQ,QAAO,EAAE,MAAM,aAAa,QAAQ,WAAW,QAAQ,cAAc;AACjH,QAAM,OAAO,IAAI,IAAI,gBAAgB,KAAK,IAAI,IAAI,UAAU,KAAK;AACjE,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,oBAAoB,IAAI,KAAK,EAAE,QAAQ,YAAY,QAAQ,GAAI,EAAE,CAAC;AAC1F,WAAO,EAAE,MAAM,aAAa,QAAQ,IAAI,KAAK,OAAO,UAAU,QAAQ,IAAI,IAAI,GAAG;AAAA,EACnF,QAAQ;AACN,WAAO,EAAE,MAAM,aAAa,QAAQ,UAAU,QAAQ,IAAI,IAAI,eAAe;AAAA,EAC/E;AACF;AAEA,eAAe,gBAAsC;AACnD,QAAM,MAAM,QAAQ;AACpB,QAAM,OAAO,IAAI,IAAI,eAAe,KAAK;AACzC,QAAM,aAAa,CAAC,OAAO,cAAc,YAAY,QAAQ;AAC7D,MAAI,CAAC,WAAW,SAAS,IAAI,EAAG,QAAO,EAAE,MAAM,YAAY,QAAQ,UAAU,QAAQ,iBAAiB,IAAI,GAAG;AAG7G,QAAM,YAAY,KAAK,MAAM,QAAQ;AACrC,MAAI,aAAa;AACjB,MAAI,WAAW,SAAS,GAAG;AACzB,eAAW,KAAK,YAAY,SAAS,GAAG;AACtC,YAAM,KAAK,SAAS,KAAK,WAAW,CAAC,CAAC;AACtC,UAAI,GAAG,OAAO,MAAM,GAAG,OAAO,SAAW,IAAO;AAAA,IAClD;AAAA,EACF;AAEA,QAAM,QAAQ,CAAC,IAAI;AACnB,MAAI,WAAW,KAAK,MAAM,QAAQ,YAAY,CAAC,EAAG,OAAM,KAAK,YAAY;AACzE,MAAI,aAAa,EAAG,QAAO,EAAE,MAAM,YAAY,QAAQ,UAAU,QAAQ,GAAG,IAAI,KAAK,UAAU,mBAAmB;AAClH,SAAO,EAAE,MAAM,YAAY,QAAQ,MAAM,QAAQ,MAAM,KAAK,IAAI,EAAE;AACpE;AAEA,eAAe,gBAAsC;AACnD,QAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,MAAI,CAAC,KAAM,QAAO,EAAE,MAAM,YAAY,QAAQ,UAAU,QAAQ,sBAAsB;AAEtF,QAAM,YAAY,KAAK,OAAO;AAC9B,QAAM,QAAQ,KAAK,eAAe;AAClC,QAAM,cAAc,YAAY,KAAK,SAAS,SAAS;AACvD,QAAM,UAAU,QAAQ,KAAK,SAAS,KAAK;AAE3C,MAAI,eAAe,QAAS,QAAO,EAAE,MAAM,YAAY,QAAQ,MAAM,QAAQ,UAAU,SAAS,QAAQ,KAAK,GAAG;AAChH,MAAI,CAAC,eAAe,CAAC,QAAS,QAAO,EAAE,MAAM,YAAY,QAAQ,UAAU,QAAQ,UAAU,SAAS,aAAa,KAAK,QAAQ;AAChI,MAAI,CAAC,QAAS,QAAO,EAAE,MAAM,YAAY,QAAQ,UAAU,QAAQ,UAAU,SAAS,cAAc,KAAK,sBAAsB;AAC/H,SAAO,EAAE,MAAM,YAAY,QAAQ,UAAU,QAAQ,UAAU,SAAS,aAAa,KAAK,wBAAwB;AACpH;AAIA,eAAe,iBAAuC;AACpD,QAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,MAAI,CAAC,MAAM,cAAe,QAAO,EAAE,MAAM,aAAa,QAAQ,WAAW,QAAQ,iBAAiB;AAClG,QAAM,QAAQ,KAAK,IAAI,IAAI,KAAK;AAChC,MAAI,QAAQ,KAAS,QAAO,EAAE,MAAM,aAAa,QAAQ,UAAU,QAAQ,UAAU,IAAI,KAAK,CAAC,IAAI;AACnG,SAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,IAAI,KAAK,EAAE;AAC/D;AAIA,eAAe,oBAA0C;AACvD,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,oBAAoB;AACvD,QAAM,QAAQ,UAAU,SAAS,CAAC,MAAM,sBAAsB,GAAG,EAAE,UAAU,QAAQ,CAAC;AACtF,QAAM,OAAO,MAAM,SAAS,MAAM,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO,IAAI,CAAC;AAC/E,MAAI,KAAK,WAAW,EAAG,QAAO,EAAE,MAAM,iBAAiB,QAAQ,WAAW,QAAQ,oBAAoB;AACtG,MAAI,KAAK,WAAW,EAAG,QAAO,EAAE,MAAM,iBAAiB,QAAQ,MAAM,QAAQ,OAAO,KAAK,CAAC,CAAC,GAAG;AAC9F,SAAO,EAAE,MAAM,iBAAiB,QAAQ,UAAU,QAAQ,GAAG,KAAK,MAAM,qBAAqB,KAAK,KAAK,GAAG,CAAC,GAAG;AAChH;AAIA,eAAe,iBAAuC;AACpD,QAAM,QAAQ,KAAK,WAAW,gBAAgB;AAC9C,QAAM,IAAI,SAAS,KAAK;AACxB,MAAI,CAAC,EAAG,QAAO,EAAE,MAAM,aAAa,QAAQ,UAAU,QAAQ,oCAAoC;AAClG,QAAM,SAAS,OAAO,KAAK,EAAE,UAAU,CAAC,CAAC;AACzC,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,MAAM,aAAa,QAAQ,UAAU,QAAQ,uBAAuB;AACtG,SAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,GAAG,OAAO,MAAM,cAAc,OAAO,KAAK,IAAI,CAAC,GAAG;AACtG;AAEA,eAAe,YAAkC;AAC/C,QAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,MAAI,CAAC,MAAM,OAAO,CAAC,SAAS,KAAK,GAAG,EAAG,QAAO,EAAE,MAAM,QAAQ,QAAQ,UAAU,QAAQ,qBAAqB;AAC7G,SAAO,EAAE,MAAM,QAAQ,QAAQ,MAAM,QAAQ,eAAe;AAC9D;AAEA,eAAe,cAAoC;AACjD,QAAM,SAAS,KAAK,MAAM,UAAU,WAAW;AAC/C,MAAI,CAAC,WAAW,MAAM,EAAG,QAAO,EAAE,MAAM,UAAU,QAAQ,WAAW,QAAQ,sBAAsB;AACnG,QAAM,WAAW,KAAK,QAAQ,GAAG,UAAU,OAAO,gBAAgB,gBAAgB;AAClF,MAAI,CAAC,WAAW,QAAQ,EAAG,QAAO,EAAE,MAAM,UAAU,QAAQ,WAAW,QAAQ,0DAA0D;AACzI,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,aAAa;AACpD,UAAM,WAAW,cAAc,YAAY,GAAG;AAC9C,SAAK,SAAS,QAAQ;AAAA,EACxB,SAAS,KAAK;AACZ,WAAO,EAAE,MAAM,UAAU,QAAQ,WAAW,QAAQ,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG;AAAA,EACzI;AACA,MAAI;AACF,UAAM,KAAK,IAAI,GAAG,QAAQ,EAAE,UAAU,KAAK,CAAC;AAC5C,UAAM,MAAM,GAAG,QAAQ,0CAA0C,EAAE,IAAI;AACvE,UAAM,QAAQ,GAAG,QAAQ,iHAAiH,EAAE,IAAI;AAChJ,OAAG,MAAM;AACT,UAAM,SAAS,MAAM,MAAM,IAAI,GAAG,IAAI,GAAG,WAAW,MAAM,GAAG,WAAW,GAAG,IAAI,GAAG;AAClF,WAAO,EAAE,MAAM,UAAU,QAAQ,MAAM,MAAM,IAAI,WAAW,MAAM,OAAO;AAAA,EAC3E,SAAS,KAAK;AACZ,WAAO,EAAE,MAAM,UAAU,QAAQ,WAAW,QAAQ,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG;AAAA,EACpI;AACF;AAEA,eAAe,cAAoC;AACjD,QAAM,UAAU,KAAK,MAAM,UAAU,mBAAmB;AACxD,MAAI,CAAC,WAAW,OAAO,EAAG,QAAO,EAAE,MAAM,UAAU,QAAQ,UAAU,QAAQ,4BAA4B;AACzG,QAAM,UAAU,aAAa,SAAS,OAAO;AAC7C,QAAM,SAAS,QAAQ,MAAM,QAAQ,KAAK,CAAC,GAAG;AAC9C,MAAI,UAAU,EAAG,QAAO,EAAE,MAAM,UAAU,QAAQ,UAAU,QAAQ,gBAAgB;AACpF,SAAO,EAAE,MAAM,UAAU,QAAQ,MAAM,QAAQ,GAAG,KAAK,UAAU;AACnE;AAEA,eAAe,WAAiC;AAE9C,QAAM,UAAU,KAAK,MAAM,UAAU,mBAAmB;AACxD,MAAI,CAAC,WAAW,OAAO,EAAG,QAAO,EAAE,MAAM,OAAO,QAAQ,WAAW,QAAQ,aAAa;AACxF,QAAM,UAAU,aAAa,SAAS,OAAO;AAC7C,MAAI,6BAA6B,KAAK,OAAO,EAAG,QAAO,EAAE,MAAM,OAAO,QAAQ,MAAM,QAAQ,eAAe;AAE3G,MAAI,WAAW,KAAK,WAAW,iBAAiB,CAAC,EAAG,QAAO,EAAE,MAAM,OAAO,QAAQ,MAAM,QAAQ,eAAe;AAC/G,SAAO,EAAE,MAAM,OAAO,QAAQ,WAAW,QAAQ,6BAA6B;AAChF;AAIA,eAAe,gBAAsC;AACnD,QAAM,MAAM,QAAQ;AACpB,MAAI,IAAI,IAAI,kBAAkB,MAAM,OAAQ,QAAO,EAAE,MAAM,aAAa,QAAQ,WAAW,QAAQ,cAAc;AACjH,QAAM,OAAO,SAAS,IAAI,IAAI,gBAAgB,KAAK,QAAQ,EAAE;AAC7D,MAAI;AACF,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,UAAU;AACpD,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,YAAM,OAAO,iBAAiB,EAAE,MAAM,MAAM,YAAY,GAAG,MAAM;AAAE,aAAK,QAAQ;AAAG,gBAAQ;AAAA,MAAG,CAAC;AAC/F,WAAK,GAAG,SAAS,MAAM;AACvB,WAAK,WAAW,KAAM,MAAM;AAAE,aAAK,QAAQ;AAAG,eAAO,IAAI,MAAM,SAAS,CAAC;AAAA,MAAG,CAAC;AAAA,IAC/E,CAAC;AACD,WAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,IAAI,IAAI,GAAG;AAAA,EAC/D,QAAQ;AACN,WAAO,EAAE,MAAM,aAAa,QAAQ,UAAU,QAAQ,IAAI,IAAI,iBAAiB;AAAA,EACjF;AACF;AAEA,eAAe,aAAmC;AAChD,QAAM,YAAY,KAAK,WAAW,YAAY;AAC9C,QAAM,QAAQ,SAAS,SAAS;AAChC,MAAI,CAAC,MAAO,QAAO,EAAE,MAAM,SAAS,QAAQ,WAAW,QAAQ,qBAAqB;AACpF,QAAM,YAAY,OAAO,KAAK,MAAM,SAAS,CAAC,CAAC,EAAE;AACjD,MAAI,cAAc,EAAG,QAAO,EAAE,MAAM,SAAS,QAAQ,MAAM,QAAQ,sBAAsB;AAEzF,QAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,QAAM,YAAY,MAAM,sBAAsB,IAAI,KAAK,IAAI,IAAI,KAAK,mBAAmB,IAAI;AAC3F,SAAO,EAAE,MAAM,SAAS,QAAQ,MAAM,QAAQ,GAAG,SAAS,wBAAwB,SAAS,GAAG;AAChG;AAEA,eAAe,WAAiC;AAC9C,QAAM,MAAM,QAAQ;AACpB,MAAI,IAAI,IAAI,kBAAkB,MAAM,OAAQ,QAAO,EAAE,MAAM,OAAO,QAAQ,WAAW,QAAQ,qBAAqB;AAClH,QAAM,aAAa,WAAW,KAAK,WAAW,cAAc,CAAC;AAC7D,QAAM,YAAY,WAAW,KAAK,WAAW,kBAAkB,CAAC;AAChE,MAAI,cAAc,UAAW,QAAO,EAAE,MAAM,OAAO,QAAQ,MAAM,QAAQ,gBAAgB;AACzF,QAAM,UAAU,CAAC,CAAC,cAAc,gBAAgB,CAAC,aAAa,kBAAkB,EAAE,OAAO,OAAO;AAChG,SAAO,EAAE,MAAM,OAAO,QAAQ,UAAU,QAAQ,YAAY,QAAQ,KAAK,IAAI,CAAC,GAAG;AACnF;AAEA,eAAe,WAAiC;AAC9C,QAAM,YAAY,KAAK,WAAW,YAAY;AAC9C,QAAM,QAAQ,SAAS,SAAS;AAChC,MAAI,CAAC,OAAO,MAAM,QAAS,QAAO,EAAE,MAAM,OAAO,QAAQ,WAAW,QAAQ,4BAA4B;AAExG,QAAM,OAAO,MAAM,KAAK;AACxB,MAAI;AACF,UAAM,QAAQ,MAAM,OAAO,YAAY;AACvC,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,aAAa;AACjD,UAAM,MAAM,MAAM,gBAAgB,OAAO,OAAO,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS;AAChF,UAAM,UAAU,KAAK,UAAU,EAAE,MAAM,QAAQ,MAAM,aAAa,CAAC;AACnE,UAAM,MAAM,WAAW,UAAU,GAAG,EAAE,OAAO,OAAO,EAAE,OAAO,WAAW,EAAE,MAAM,GAAG,EAAE;AACrF,UAAM,OAAO,OAAO,KAAK,GAAG,OAAO,IAAI,GAAG,EAAE;AAE5C,UAAM,QAAQ,MAAM,IAAI,QAAiB,CAAC,YAAY;AACpD,YAAM,OAAO,MAAM,aAAa,MAAM;AACtC,YAAM,QAAQ,WAAW,MAAM;AAAE,aAAK,MAAM;AAAG,gBAAQ,KAAK;AAAA,MAAG,GAAG,GAAG;AACrE,WAAK,GAAG,WAAW,MAAM;AAAE,qBAAa,KAAK;AAAG,aAAK,MAAM;AAAG,gBAAQ,IAAI;AAAA,MAAG,CAAC;AAC9E,WAAK,GAAG,SAAS,MAAM;AAAE,qBAAa,KAAK;AAAG,aAAK,MAAM;AAAG,gBAAQ,KAAK;AAAA,MAAG,CAAC;AAC7E,WAAK,KAAK,MAAM,MAAM,WAAW;AAAA,IACnC,CAAC;AACD,WAAO,EAAE,MAAM,OAAO,QAAQ,QAAQ,OAAO,UAAU,QAAQ,QAAQ,QAAQ,IAAI,WAAW,QAAQ,IAAI,eAAe;AAAA,EAC3H,QAAQ;AACN,WAAO,EAAE,MAAM,OAAO,QAAQ,UAAU,QAAQ,kBAAkB;AAAA,EACpE;AACF;AAIA,eAAe,YAAkC;AAC/C,MAAI;AACF,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,2BAA4B;AAChE,UAAM,MAAM,MAAM,WAAW;AAC7B,QAAI,CAAC,IAAK,QAAO,EAAE,MAAM,QAAQ,QAAQ,WAAW,QAAQ,uBAAuB;AACnF,WAAO,EAAE,MAAM,QAAQ,QAAQ,MAAM,QAAQ,6BAA6B;AAAA,EAC5E,QAAQ;AACN,WAAO,EAAE,MAAM,QAAQ,QAAQ,WAAW,QAAQ,qBAAqB;AAAA,EACzE;AACF;AAIA,eAAsB,eAAsC;AAC1D,QAAM,QAAQ,KAAK,IAAI;AAEvB,QAAM,CAAC,MAAM,OAAO,OAAO,MAAM,KAAK,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC1D,QAAQ,IAAI,CAAC,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,kBAAkB,CAAC,EAAE,IAAI,OAAK,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IACrI,QAAQ,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,OAAK,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IAC5D,QAAQ,IAAI,CAAC,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC,EAAE,IAAI,OAAK,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IACnH,QAAQ,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,OAAK,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IACvD,QAAQ,IAAI,CAAC,cAAc,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC,EAAE,IAAI,OAAK,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,EACnG,CAAC;AAED,SAAO,EAAE,SAAS,OAAO,SAAS,KAAK,IAAI,IAAI,OAAO,QAAQ,EAAE,MAAM,OAAO,OAAO,MAAM,MAAM,EAAE;AACpG;AAIA,eAAsB,WAAiC;AACrD,QAAM,EAAE,WAAW,YAAY,WAAW,YAAY,IAAI,aAAa,IAAI,UAAU,IAAI,cAAc,IAAI,eAAe,GAAG,IAAI,MAAM,OAAO,SAAS;AACvJ,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,oBAAoB;AACvD,QAAM,QAAqB,CAAC;AAE5B,WAAS,IAAI,OAAe,QAAgB,IAAsB;AAChE,QAAI;AAAE,SAAG;AAAG,YAAM,KAAK,EAAE,OAAO,QAAQ,SAAS,KAAK,CAAC;AAAA,IAAG,QACpD;AAAE,YAAM,KAAK,EAAE,OAAO,QAAQ,SAAS,MAAM,CAAC;AAAA,IAAG;AAAA,EACzD;AAGA,aAAW,OAAO,CAAC,UAAU,UAAU,QAAQ,OAAO,GAAG;AACvD,UAAM,IAAI,KAAK,MAAM,GAAG;AACxB,QAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,SAAW,KAAO;AAC3C,UAAI,YAAY,GAAG,GAAG,gBAAW,MAAM,UAAU,GAAG,GAAK,CAAC;AAAA,IAC5D;AAAA,EACF;AAGA,QAAM,YAAY,KAAK,MAAM,QAAQ;AACrC,MAAI,GAAG,SAAS,GAAG;AACjB,eAAW,KAAK,GAAG,SAAS,GAAG;AAC7B,YAAM,KAAK,KAAK,WAAW,CAAC;AAC5B,UAAI,GAAG,EAAE,EAAE,OAAO,MAAM,GAAG,EAAE,EAAE,OAAO,SAAW,KAAO;AACtD,YAAI,YAAY,GAAG,CAAC,eAAU,MAAM,UAAU,IAAI,GAAK,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAGA,MAAI,GAAG,SAAS,GAAG;AACjB,eAAW,KAAK,GAAG,SAAS,GAAG;AAC7B,YAAM,KAAK,KAAK,WAAW,CAAC;AAC5B,UAAI,GAAG,EAAE,EAAE,OAAO,MAAM,GAAG,EAAE,EAAE,OAAO,SAAW,KAAO;AACtD,YAAI,YAAY,UAAU,CAAC,eAAU,MAAM,UAAU,IAAI,GAAK,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAGA,QAAM,aAAa,KAAK,MAAM,aAAa;AAC3C,MAAI,GAAG,UAAU,GAAG;AAClB,UAAM,OAAO,SAAS,UAAU;AAChC,UAAM,UAAU,MAAM,aAAa,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,QAAQ,KAAK,MAAO;AAC7F,UAAM,UAAU,MAAM,OAAO;AAC7B,QAAI,UAAU,QAAQ,YAAY,KAAK,CAAC,SAAS,OAAO,IAAI;AAC1D,UAAI,YAAY,6BAA6B,MAAM,WAAW,UAAU,CAAC;AAAA,IAC3E;AAAA,EACF;AAGA,QAAM,cAAc,KAAK,MAAM,eAAe;AAC9C,MAAI,GAAG,WAAW,GAAG;AACnB,UAAM,OAAO,KAAK,IAAI,IAAI,GAAG,WAAW,EAAE,WAAW;AACrD,QAAI,MAAM,IAAK,KAAI,YAAY,+BAA+B,MAAM,WAAW,WAAW,CAAC;AAAA,EAC7F;AAGA,aAAW,OAAO,CAAC,QAAQ,aAAa,YAAY,UAAU,GAAG;AAC/D,UAAM,IAAI,KAAK,MAAM,GAAG;AACxB,QAAI,CAAC,GAAG,CAAC,EAAG,KAAI,YAAY,WAAW,GAAG,KAAK,MAAM,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC,CAAC;AAAA,EACxF;AAGA,MAAI;AACF,UAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,UAAM,YAAY,MAAM,OAAO;AAC/B,UAAM,QAAQ,MAAM,eAAe;AAGnC,UAAM,OAAO,UAAU,SAAS,CAAC,MAAM,eAAe,GAAG,EAAE,UAAU,QAAQ,CAAC;AAC9E,QAAI,KAAK,QAAQ;AACf,iBAAW,OAAO,KAAK,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,IAAI,MAAM,GAAG;AAC5E,YAAI,MAAM,KAAK,QAAQ,aAAa,QAAQ,SAAS,QAAQ,QAAQ,KAAK;AACxE,cAAI,SAAS,0BAA0B,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAK,SAAS,CAAC;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AAGA,UAAM,QAAQ,UAAU,SAAS,CAAC,MAAM,cAAc,GAAG,EAAE,UAAU,QAAQ,CAAC;AAC9E,QAAI,MAAM,QAAQ;AAChB,iBAAW,OAAO,MAAM,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,IAAI,MAAM,GAAG;AAC7E,YAAI,MAAM,KAAK,QAAQ,WAAW;AAChC,cAAI,SAAS,8BAA8B,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAK,SAAS,CAAC;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAA0C;AAGlD,aAAW,KAAK,CAAC,cAAc,aAAa,GAAG;AAC7C,UAAM,IAAI,KAAK,MAAM,CAAC;AACtB,QAAI,GAAG,CAAC,GAAG;AACT,YAAM,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,WAAW;AAC3C,YAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,UAAI,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,SAAS,KAAK,GAAG,IAAI;AACpD,YAAI,YAAY,iBAAiB,CAAC,IAAI,MAAM,WAAW,CAAC,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAGA,QAAM,iBAAiB;AACvB,QAAM,iBAAiB;AACvB,MAAI;AACF,UAAM,aAAa,KAAK,IAAI,IAAI,iBAAiB;AACjD,UAAM,aAAa,KAAK,IAAI,IAAI,iBAAiB;AAEjD,eAAW,CAAC,KAAK,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,KAAK,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,KAAK,MAAM,YAAY,OAAO,GAAG,UAAU,CAAC,GAAY;AAC5J,UAAI,CAAC,GAAG,GAAG,EAAG;AACd,UAAI,UAAU;AACd,iBAAW,KAAK,GAAG,GAAG,GAAG;AACvB,cAAM,KAAK,KAAK,KAAK,CAAC;AACtB,YAAI,GAAG,EAAE,EAAE,OAAO,KAAK,GAAG,EAAE,EAAE,UAAU,QAAQ;AAAE,qBAAW,EAAE;AAAG;AAAA,QAAW;AAAA,MAC/E;AACA,UAAI,UAAU,EAAG,OAAM,KAAK,EAAE,OAAO,aAAa,QAAQ,WAAW,OAAO,uBAAuB,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,IAAI,SAAS,KAAK,CAAC;AAAA,IAC5I;AAGA,UAAM,YAAY,KAAK,MAAM,QAAQ,aAAa;AAClD,QAAI,GAAG,SAAS,KAAK,GAAG,SAAS,EAAE,OAAO,KAAY;AACpD,YAAM,QAAQ,GAAG,WAAW,OAAO,EAAE,MAAM,IAAI;AAC/C,SAAG,WAAW,MAAM,MAAM,IAAK,EAAE,KAAK,IAAI,CAAC;AAC3C,YAAM,KAAK,EAAE,OAAO,aAAa,QAAQ,yBAAyB,SAAS,KAAK,CAAC;AAAA,IACnF;AAAA,EACF,QAAQ;AAAA,EAAmC;AAG3C,MAAI;AACF,UAAM,OAAO,SAAS,KAAK,MAAM,aAAa,CAAC;AAC/C,UAAM,cAAc,MAAM,OAAO;AACjC,UAAM,QAAQ,UAAU,SAAS,CAAC,MAAM,cAAc,GAAG,EAAE,UAAU,QAAQ,CAAC;AAC9E,QAAI,MAAM,QAAQ;AAChB,iBAAW,OAAO,MAAM,OAAO,KAAK,EAAE,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,IAAI,MAAM,GAAG;AAC7E,YAAI,MAAM,KAAK,QAAQ,eAAe,QAAQ,QAAQ,KAAK;AACzD,cAAI,YAAY,2BAA2B,GAAG,IAAI,MAAM,QAAQ,KAAK,KAAK,SAAS,CAAC;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAkB;AAG1B,QAAM,WAAW,KAAK,MAAM,OAAO;AACnC,MAAI,GAAG,QAAQ,MAAM,GAAG,QAAQ,EAAE,OAAO,SAAW,KAAO;AACzD,QAAI,YAAY,qBAAgB,MAAM,UAAU,UAAU,GAAK,CAAC;AAAA,EAClE;AAGA,MAAI;AACF,UAAM,WAAW,SAAS,KAAK,MAAM,eAAe,CAAC;AACrD,QAAI,UAAU,gBAAgB,UAAU;AACtC,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,SAAS;AAC3C,UAAI,SAAS,MAAM,UAAU;AAC3B,cAAM,QAAQ,GAAG,IAAI;AACrB,cAAM,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC;AAClC,YAAI,GAAG,KAAK,KAAK,CAAC,GAAG,GAAG,GAAG;AACzB,cAAI,YAAY,yBAAyB,MAAM;AAC7C,kBAAM,EAAE,aAAa,IAAI,UAAQ,SAAS;AAC1C,yBAAa,OAAO,GAAG;AACvB,sBAAU,aAAa,CAAC,QAAQ,GAAG,CAAC;AAAA,UACtC,CAAC;AAAA,QACH;AAAA,MACF,OAAO;AACL,cAAM,MAAM,GAAG,IAAI;AACnB,cAAM,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC;AAClC,YAAI,GAAG,GAAG,KAAK,CAAC,GAAG,GAAG,GAAG;AACvB,cAAI,YAAY,0BAA0B,MAAM;AAC9C,sBAAU,KAAK,QAAQ,IAAI,MAAM,GAAI,WAAW,WAAW,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACvF,kBAAM,EAAE,aAAa,IAAI,UAAQ,SAAS;AAC1C,yBAAa,KAAK,GAAG;AACrB,sBAAU,aAAa,CAAC,UAAU,UAAU,SAAS,yBAAyB,CAAC;AAAA,UACjF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAkB;AAE1B,SAAO;AACT;AAIA,IAAM,OAAO,EAAE,IAAI,UAAK,QAAQ,UAAK,SAAS,IAAI;AAE3C,SAAS,YAAY,QAA8B;AACxD,QAAM,QAAkB,CAAC;AACzB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,OAAO,MAAM,GAAgC;AACxF,UAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC,CAAC,GAAG;AAC/D,eAAW,KAAK,QAAQ;AACtB,YAAM,KAAK,EAAE,MAAM,EAAE,KAAK,MAAM,KAAK,EAAE,EAAE,QAAQ;AACjD,YAAM,SAAS,EAAE,SAAS,WAAM,EAAE,MAAM,KAAK;AAC7C,YAAM,KAAK,KAAK,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE;AAAA,IAC1D;AAAA,EACF;AACA,QAAM,QAAQ,OAAO,OAAO,OAAO,MAAM,EAAE,KAAK;AAChD,QAAM,UAAU,MAAM,OAAO,OAAK,EAAE,WAAW,IAAI,EAAE;AACrD,QAAM,KAAK;AAAA,EAAK,OAAO,IAAI,MAAM,MAAM,SAAS,OAAO,UAAU,KAAM,QAAQ,CAAC,CAAC,IAAI;AACrF,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,WAAW,QAA8B;AACvD,SAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;",
+  "names": []
+}

package/bundle/{chunk-ZXTNCV5J.js → chunk-56SV72K4.js}

@@ -1142,26 +1142,9 @@ var secretGetTool = {
     const name = args.name?.trim();
     if (!name) return JSON.stringify({ error: "name is required" });
     try {
-      const { join: join3 } = await import("node:path");
-      const { homedir: homedir2 } = await import("node:os");
-      const { readFileSync: readFileSync2, existsSync: existsSync2 } = await import("node:fs");
-      const { createDecipheriv, hkdfSync } = await import("node:crypto");
-      const { loadKey } = await import("abmind");
-      const secretPath = join3(homedir2(), ".abtars", "secret", name);
-      if (!existsSync2(secretPath)) return JSON.stringify({ error: `secret '${name}' not found` });
-      const raw = readFileSync2(secretPath, "utf-8").trim();
-      if (!raw) return JSON.stringify({ error: `secret '${name}' is empty` });
-      let value;
-      if (raw.startsWith("ENC:")) {
-        const master = loadKey();
-        const key = Buffer.from(hkdfSync("sha256", master, "", "abtars-secrets-files-v1", 32));
-        const buf = Buffer.from(raw.slice(4), "base64");
-        const d = createDecipheriv("aes-256-gcm", key, buf.subarray(1, 13));
-        d.setAuthTag(buf.subarray(buf.length - 16));
-        value = d.update(buf.subarray(13, buf.length - 16), void 0, "utf-8") + d.final("utf-8");
-      } else {
-        value = raw;
-      }
+      const { readSecret } = await import("./secrets-F3IBPUD2.js");
+      const value = readSecret(name);
+      if (value === void 0) return JSON.stringify({ error: `secret '${name}' not found or could not be decrypted` });
       if (!name.includes(".")) {
         process.env[name] = value;
         return JSON.stringify({ ok: true, env_var: `$${name}`, hint: `Use $${name} in commands. NEVER print or echo the value.` });
@@ -1243,4 +1226,4 @@ export {
   getToolSchemas,
   executeToolCall
 };
-//# sourceMappingURL=chunk-ZXTNCV5J.js.map
+//# sourceMappingURL=chunk-56SV72K4.js.map