agentix-cli 0.27.0 → 0.29.0

package/dist/chunk-JKYMXLYL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/doctor.ts"],"sourcesContent":["import { Command } from \"commander\"\nimport chalk from \"chalk\"\nimport { execFileSync } from \"child_process\"\nimport { existsSync, readFileSync, readdirSync, statSync } from \"fs\"\nimport { resolve } from \"path\"\nimport { createRequire } from \"module\"\nimport { loadDaemonConfig } from \"@/daemon/config\"\n\n// --- agentx doctor ---\n//\n// Pre-flight health check. Catches the common \"why isn't it working\" reasons\n// before the operator hits them at runtime:\n//   - wrong Node version\n//   - invalid / missing agentx.json\n//   - agents with claude-code tier but no claude CLI installed\n//   - ${FOO} references in agentx.json that have no matching env var\n//   - agent workspace dirs that don't exist\n//   - daemon reachable? (when --check-running, default true)\n//\n// Exit code: 0 if clean, 1 if any error, 0 if only warnings (so CI won't block\n// on advisory checks).\n\nexport type Severity = \"ok\" | \"warn\" | \"fail\"\n\nexport interface Check {\n  severity: Severity\n  group: string\n  title: string\n  detail?: string\n  fix?: string\n}\n\n/** Run every preflight check and return the result as data. Exposed so\n *  the dashboard's /admin/doctor route can render the same checks the\n *  `agentx doctor` CLI prints — without spawning a child process. */\nexport async function runDoctorChecks(\n  opts: { running?: boolean } = {},\n): Promise<{ checks: Check[]; summary: { errors: number; warnings: number; ok: number } }> {\n  const checks: Check[] = []\n  await runEnvChecks(checks)\n  const cfg = runConfigChecks(checks)\n  if (cfg) runReferenceChecks(checks, cfg)\n  if (cfg) runWorkspaceChecks(checks, cfg)\n  if (cfg) runWorkspaceSettingsChecks(checks, cfg)\n  if (cfg) runRoutingChecks(checks, cfg)\n  if (cfg) runCodegraphChecks(checks, cfg)\n  if (opts.running !== false && cfg) await runRuntimeChecks(checks, cfg)\n  return { checks, summary: summarize(checks) }\n}\n\nexport const doctor = new Command()\n  .name(\"doctor\")\n  .description(\"pre-flight health check: Node, config, credentials, daemon\")\n  .option(\"--no-running\", \"skip the live daemon probe\")\n  .option(\"--json\", \"emit machine-readable JSON (stable shape for CI)\")\n  .action(async (opts) => {\n    const { checks, summary } = await runDoctorChecks({ running: opts.running !== false })\n    if (opts.json) {\n      process.stdout.write(JSON.stringify({ checks, summary }, null, 2) + \"\\n\")\n    } else {\n      printHumanReport(checks)\n    }\n    process.exit(summary.errors > 0 ? 1 : 0)\n  })\n\n// ---------------------------------------------------------------------------\n// Checks\n// ---------------------------------------------------------------------------\n\nasync function runEnvChecks(checks: Check[]): Promise<void> {\n  const nodeMajor = Number(process.versions.node.split(\".\")[0])\n  checks.push({\n    severity: nodeMajor == 22 ? \"ok\" : \"fail\",\n    group: \"Environment\",\n    title: `Node.js ${process.versions.node}`,\n    detail: nodeMajor == 22 ? undefined : \"AgentX requires Node 22.x.\",\n    fix: nodeMajor == 22 ? undefined : \"Install Node 22 (nvm install 22 && nvm use 22)\",\n  })\n\n  const which = (bin: string): string | null => {\n    try { return execFileSync(process.platform === \"win32\" ? \"where\" : \"which\", [bin], { encoding: \"utf-8\" }).trim().split(\"\\n\")[0] }\n    catch { return null }\n  }\n  const npmPath = which(\"npm\")\n  checks.push({\n    severity: npmPath ? \"ok\" : \"fail\",\n    group: \"Environment\",\n    title: npmPath ? \"npm on PATH\" : \"npm not found\",\n    detail: npmPath || undefined,\n  })\n\n  // Claude CLI is only required if the config references claude-code agents;\n  // we report it advisory here and promote to fail in the config step below.\n  const claudePath = which(\"claude\")\n  if (claudePath) {\n    let ver: string | undefined\n    try { ver = execFileSync(\"claude\", [\"--version\"], { encoding: \"utf-8\", timeout: 3000 }).trim() } catch { /* */ }\n    checks.push({ severity: \"ok\", group: \"Environment\", title: `claude CLI ${ver || \"installed\"}`, detail: claudePath })\n  } else {\n    checks.push({\n      severity: \"warn\",\n      group: \"Environment\",\n      title: \"claude CLI not on PATH\",\n      detail: \"Only required for agents on the claude-code tier.\",\n      fix: \"See https://docs.anthropic.com/en/docs/claude-code\",\n    })\n  }\n\n  const codexPath = which(\"codex\")\n  if (codexPath) {\n    let ver: string | undefined\n    try { ver = execFileSync(\"codex\", [\"--version\"], { encoding: \"utf-8\", timeout: 3000 }).trim() } catch { /* */ }\n    checks.push({ severity: \"ok\", group: \"Environment\", title: `codex CLI ${ver || \"installed\"}`, detail: codexPath })\n  } else {\n    checks.push({\n      severity: \"warn\",\n      group: \"Environment\",\n      title: \"codex CLI not on PATH\",\n      detail: \"Only required for agents on the codex-cli tier.\",\n      fix: \"Install with `npm i -g @openai/codex`.\",\n    })\n  }\n\n  const openCodePath = which(\"opencode\")\n  if (openCodePath) {\n    let ver: string | undefined\n    try { ver = execFileSync(\"opencode\", [\"--version\"], { encoding: \"utf-8\", timeout: 3000 }).trim() } catch { /* */ }\n    checks.push({ severity: \"ok\", group: \"Environment\", title: `opencode CLI ${ver || \"installed\"}`, detail: openCodePath })\n  } else {\n    checks.push({\n      severity: \"warn\",\n      group: \"Environment\",\n      title: \"opencode CLI not on PATH\",\n      detail: \"Only required for agents on the opencode tier.\",\n      fix: \"Install from https://opencode.ai/docs/.\",\n    })\n  }\n\n  try {\n    createRequire(import.meta.url)(\"better-sqlite3\")\n    checks.push({\n      severity: \"ok\",\n      group: \"Environment\",\n      title: `better-sqlite3 loads for Node ${process.version}`,\n      detail: `NODE_MODULE_VERSION ${process.versions.modules}`,\n    })\n  } catch (e: any) {\n    checks.push({\n      severity: \"fail\",\n      group: \"Environment\",\n      title: \"better-sqlite3 native binding does not load\",\n      detail: e?.message ?? String(e),\n      fix: `Run \"pnpm rebuild better-sqlite3\" with the same Node used by the daemon (${process.version}, modules ${process.versions.modules}).`,\n    })\n  }\n}\n\nfunction runConfigChecks(checks: Check[]): any {\n  const cfgPath = resolve(process.cwd(), \"agentx.json\")\n  if (!existsSync(cfgPath)) {\n    checks.push({\n      severity: \"fail\",\n      group: \"Config\",\n      title: \"agentx.json not found\",\n      detail: `Looked in ${cfgPath}`,\n      fix: \"Run `agentx setup` to create one via the web wizard.\",\n    })\n    return null\n  }\n  let cfg: any\n  try { cfg = JSON.parse(readFileSync(cfgPath, \"utf-8\")) }\n  catch (e: any) {\n    checks.push({ severity: \"fail\", group: \"Config\", title: \"agentx.json is not valid JSON\", detail: e.message })\n    return null\n  }\n  try {\n    // Full schema validation — catches missing required fields.\n    loadDaemonConfig(cfgPath)\n    checks.push({ severity: \"ok\", group: \"Config\", title: `agentx.json valid (${Object.keys(cfg.agents || {}).length} agents, ${Object.keys(cfg.crons || {}).length} schedules)` })\n  } catch (e: any) {\n    checks.push({\n      severity: \"fail\",\n      group: \"Config\",\n      title: \"agentx.json failed schema validation\",\n      detail: e.message,\n      fix: \"Open /admin → Advanced tab to edit and re-save.\",\n    })\n  }\n  const claudeCodeAgents = Object.entries(cfg.agents || {}).filter(([, a]: [string, any]) => a.tier === \"claude-code\")\n  if (claudeCodeAgents.length > 0) {\n    const hasClaude = (() => {\n      try { execFileSync(process.platform === \"win32\" ? \"where\" : \"which\", [\"claude\"], { stdio: \"ignore\" }); return true } catch { return false }\n    })()\n    if (!hasClaude) {\n      checks.push({\n        severity: \"fail\",\n        group: \"Config\",\n        title: `${claudeCodeAgents.length} agent(s) use claude-code tier but claude CLI is missing`,\n        detail: claudeCodeAgents.map(([id]) => id).join(\", \"),\n        fix: \"Install Claude Code (https://docs.anthropic.com/en/docs/claude-code) or switch these agents to tier=sdk.\",\n      })\n    }\n  }\n  const codexCliAgents = Object.entries(cfg.agents || {}).filter(([, a]: [string, any]) => a.tier === \"codex-cli\")\n  if (codexCliAgents.length > 0) {\n    const hasCodex = (() => {\n      try { execFileSync(process.platform === \"win32\" ? \"where\" : \"which\", [\"codex\"], { stdio: \"ignore\" }); return true } catch { return false }\n    })()\n    if (!hasCodex) {\n      checks.push({\n        severity: \"fail\",\n        group: \"Config\",\n        title: `${codexCliAgents.length} agent(s) use codex-cli tier but codex CLI is missing`,\n        detail: codexCliAgents.map(([id]) => id).join(\", \"),\n        fix: \"Install Codex CLI with `npm i -g @openai/codex` or switch these agents to tier=claude-code.\",\n      })\n    }\n  }\n  const openCodeAgents = Object.entries(cfg.agents || {}).filter(([, a]: [string, any]) => a.tier === \"opencode\")\n  if (openCodeAgents.length > 0) {\n    const hasOpenCode = (() => {\n      try { execFileSync(process.platform === \"win32\" ? \"where\" : \"which\", [\"opencode\"], { stdio: \"ignore\" }); return true } catch { return false }\n    })()\n    if (!hasOpenCode) {\n      checks.push({\n        severity: \"fail\",\n        group: \"Config\",\n        title: `${openCodeAgents.length} agent(s) use opencode tier but OpenCode CLI is missing`,\n        detail: openCodeAgents.map(([id]) => id).join(\", \"),\n        fix: \"Install OpenCode from https://opencode.ai/docs/ or switch these agents to another tier.\",\n      })\n    }\n  }\n  return cfg\n}\n\nfunction runReferenceChecks(checks: Check[], cfg: any): void {\n  // Parse ${VAR} references out of the config (recursively) and verify each\n  // one has a matching value in .env or process.env.\n  const refs = new Set<string>()\n  collectEnvRefs(cfg, refs)\n  if (refs.size === 0) {\n    checks.push({ severity: \"ok\", group: \"Secrets\", title: \"No ${VAR} references in agentx.json\" })\n    return\n  }\n  const envFile = resolve(process.cwd(), \".env\")\n  const envFromFile: Record<string, string> = {}\n  if (existsSync(envFile)) {\n    for (const line of readFileSync(envFile, \"utf-8\").split(/\\r?\\n/)) {\n      const m = line.match(/^\\s*([A-Z_][A-Z0-9_]*)\\s*=\\s*(.*)$/i)\n      if (m) envFromFile[m[1]] = m[2]\n    }\n  }\n  const missing: string[] = []\n  const empty: string[] = []\n  for (const name of refs) {\n    const raw = process.env[name] ?? envFromFile[name]\n    if (raw === undefined) missing.push(name)\n    else if (!raw.trim() || /^[\"']?\\s*[\"']?$/.test(raw)) empty.push(name)\n  }\n  if (missing.length === 0 && empty.length === 0) {\n    checks.push({ severity: \"ok\", group: \"Secrets\", title: `${refs.size} env reference(s) resolved` })\n  } else {\n    if (missing.length > 0) {\n      checks.push({\n        severity: \"fail\",\n        group: \"Secrets\",\n        title: `${missing.length} env var(s) referenced in agentx.json but missing`,\n        detail: missing.join(\", \"),\n        fix: `Add to .env — e.g. ${missing[0]}=<value>`,\n      })\n    }\n    if (empty.length > 0) {\n      checks.push({\n        severity: \"warn\",\n        group: \"Secrets\",\n        title: `${empty.length} env var(s) set but empty`,\n        detail: empty.join(\", \"),\n      })\n    }\n  }\n}\n\nfunction collectEnvRefs(node: unknown, into: Set<string>): void {\n  if (typeof node === \"string\") {\n    for (const m of node.matchAll(/\\$\\{([A-Z_][A-Z0-9_]*)\\}/g)) into.add(m[1])\n  } else if (Array.isArray(node)) {\n    for (const item of node) collectEnvRefs(item, into)\n  } else if (node && typeof node === \"object\") {\n    for (const v of Object.values(node)) collectEnvRefs(v, into)\n  }\n}\n\nfunction runWorkspaceChecks(checks: Check[], cfg: any): void {\n  const missing: string[] = []\n  for (const [id, a] of Object.entries(cfg.agents || {}) as [string, any][]) {\n    if (!a.workspace) continue\n    const abs = a.workspace.startsWith(\"/\") ? a.workspace : resolve(process.cwd(), a.workspace)\n    try {\n      const st = statSync(abs)\n      if (!st.isDirectory()) missing.push(`${id}: ${abs} (exists but not a directory)`)\n    } catch { missing.push(`${id}: ${abs}`) }\n  }\n  if (missing.length === 0) {\n    checks.push({ severity: \"ok\", group: \"Workspaces\", title: \"All agent workspace folders exist\" })\n  } else {\n    checks.push({\n      severity: \"warn\",\n      group: \"Workspaces\",\n      title: `${missing.length} agent workspace(s) missing`,\n      detail: missing.join(\"\\n    \"),\n      fix: \"The daemon will create missing folders on first task, but you won't see CLAUDE.md / skills until you populate them.\",\n    })\n  }\n}\n\n// Audit each agent's .claude/settings.json for known traps:\n//   - unexpanded ${VAR} literals in env values (Claude Code does NOT expand them)\n//   - env.PATH missing /usr/bin or /bin (basic utils unreachable)\n//   - JSON syntax errors\n//   - permissions.allow: [] explicitly empty alongside non-empty deny\n// Each finding is FAIL severity for the ${VAR} / PATH cases (these break the\n// agent's Bash tool entirely), WARN for the lockdown case.\nfunction runWorkspaceSettingsChecks(checks: Check[], cfg: any): void {\n  const VAR_RE = /\\$\\{[A-Za-z_][A-Za-z0-9_]*\\}/g\n  const findings: Array<{ severity: Severity; agent: string; msg: string }> = []\n\n  for (const [agentId, a] of Object.entries(cfg.agents || {}) as [string, any][]) {\n    if (!a.workspace) continue\n    const wsAbs = a.workspace.startsWith(\"/\") ? a.workspace : resolve(process.cwd(), a.workspace)\n    for (const fname of [\"settings.json\", \"settings.local.json\"]) {\n      const p = resolve(wsAbs, \".claude\", fname)\n      if (!existsSync(p)) continue\n      let data: any\n      try {\n        data = JSON.parse(readFileSync(p, \"utf-8\"))\n      } catch (e: any) {\n        findings.push({ severity: \"fail\", agent: agentId, msg: `${fname}: JSON parse error — ${e.message}` })\n        continue\n      }\n      const env = (data.env || {}) as Record<string, unknown>\n      for (const [k, v] of Object.entries(env)) {\n        if (typeof v !== \"string\") continue\n        const unexpanded = v.match(VAR_RE)\n        if (unexpanded) {\n          findings.push({\n            severity: \"fail\",\n            agent: agentId,\n            msg: `${fname} env.${k} contains unexpanded ${[...new Set(unexpanded)].join(\",\")} — Claude Code does NOT expand \\${VAR} in settings.json (use a fully-literal value)`,\n          })\n        }\n      }\n      const pathVal = env.PATH\n      if (typeof pathVal === \"string\") {\n        const parts = pathVal.split(\":\").filter(Boolean)\n        if (!parts.includes(\"/usr/bin\")) {\n          findings.push({ severity: \"fail\", agent: agentId, msg: `${fname} env.PATH missing /usr/bin — cat/head/sh/which will fail` })\n        }\n        if (!parts.includes(\"/bin\")) {\n          findings.push({ severity: \"fail\", agent: agentId, msg: `${fname} env.PATH missing /bin — ls/cp/mv will fail` })\n        }\n      }\n      const perms = data.permissions\n      if (perms && typeof perms === \"object\" && \"allow\" in perms) {\n        const allow = perms.allow\n        const deny = perms.deny\n        if (Array.isArray(allow) && allow.length === 0 && Array.isArray(deny) && deny.length > 0) {\n          findings.push({\n            severity: \"warn\",\n            agent: agentId,\n            msg: `${fname} permissions.allow is explicitly [] with ${deny.length} deny rules — agent may be locked out (omit the key to use defaults instead)`,\n          })\n        }\n      }\n    }\n  }\n\n  if (findings.length === 0) {\n    checks.push({ severity: \"ok\", group: \"Workspace settings\", title: `All ${Object.keys(cfg.agents || {}).length} agent .claude/settings.json files clean` })\n    return\n  }\n  for (const f of findings) {\n    checks.push({\n      severity: f.severity,\n      group: \"Workspace settings\",\n      title: `${f.agent}: ${f.msg}`,\n      fix: f.severity === \"fail\" ? \"Edit .claude/settings.json — replace ${VAR} with the literal value or omit the key to inherit.\" : \"Either remove the empty allow list or populate it.\",\n    })\n  }\n}\n\n// Surface routing / dispatch fragilities the recurring-patches plan\n// cataloged: webhook entries that route many event-types to a single\n// handler (github, gitlab), trigger maps pointing at workflow ids that\n// don't exist, mesh `node` fields naming peers that aren't configured,\n// gitlab agentMappings referencing unknown agents, and the very common\n// \"I edited agentx.json but didn't reload\" pitfall.\nfunction runRoutingChecks(checks: Check[], cfg: any): void {\n  const webhooks = (cfg.webhooks ?? []) as Array<{\n    id: string\n    source: string\n    agentId: string\n    enabled: boolean\n    node?: string\n    secretEnv?: string\n    triggers?: Record<string, string>\n    defaultWorkflow?: string\n  }>\n  const findings: Array<{ severity: Severity; title: string; fix?: string }> = []\n\n  // Build the set of known workflow ids. Workflows live as JSON files under\n  // `workflows.dir` (default .agentx/workflows/). The id is the filename\n  // sans extension; we don't need to parse the contents for this check.\n  const workflowDir = resolve(process.cwd(), cfg.workflows?.dir || \".agentx/workflows\")\n  const knownWorkflows = new Set<string>()\n  try {\n    if (existsSync(workflowDir)) {\n      for (const f of readdirSync(workflowDir)) {\n        if (f.endsWith(\".json\") && !f.startsWith(\"_\") && !f.endsWith(\".disabled.json\")) {\n          knownWorkflows.add(f.replace(/\\.json$/, \"\"))\n        }\n      }\n    }\n  } catch { /* directory not yet populated; checks below tolerate empty set */ }\n\n  // 1. Multi-event-type sources (github, gitlab) without a triggers map.\n  //    Without it, every inbound event hits the same agent and the\n  //    duplicate-firing class of bug returns. Surface as REVIEW (warn) —\n  //    operators may genuinely want a single-handler setup, but they\n  //    should opt in by setting `defaultWorkflow` explicitly.\n  const multiEventSources = new Set([\"github\", \"gitlab\"])\n  for (const w of webhooks) {\n    if (!w.enabled) continue\n    if (!multiEventSources.has(w.source)) continue\n    const hasTriggers = w.triggers && Object.keys(w.triggers).length > 0\n    if (!hasTriggers && !w.defaultWorkflow) {\n      findings.push({\n        severity: \"warn\",\n        title: `webhook \"${w.id}\" (${w.source} -> ${w.agentId}) has no triggers map; every event-type collapses to the bound agent`,\n        fix: `Add a triggers map: { \"issues.opened\": \"wf-id\", \"pull_request.synchronize\": \"wf-id\" } — or set defaultWorkflow.`,\n      })\n    }\n  }\n\n  // 2. Trigger map references workflow ids that don't exist on disk.\n  //    Hard-fails the dispatch at runtime (and silently — dispatcher just\n  //    logs \"workflow not found\" and bails). Surface here as FAIL.\n  for (const w of webhooks) {\n    if (!w.enabled || !w.triggers) continue\n    for (const [eventType, workflowId] of Object.entries(w.triggers)) {\n      if (knownWorkflows.size > 0 && !knownWorkflows.has(workflowId)) {\n        findings.push({\n          severity: \"fail\",\n          title: `webhook \"${w.id}\".triggers[\"${eventType}\"] -> \"${workflowId}\" — no such workflow under ${cfg.workflows?.dir || \".agentx/workflows\"}`,\n          fix: `Create the workflow file or fix the id in agentx.json`,\n        })\n      }\n    }\n    if (w.defaultWorkflow && knownWorkflows.size > 0 && !knownWorkflows.has(w.defaultWorkflow)) {\n      findings.push({\n        severity: \"fail\",\n        title: `webhook \"${w.id}\".defaultWorkflow -> \"${w.defaultWorkflow}\" — no such workflow`,\n        fix: `Create the workflow file or fix the id in agentx.json`,\n      })\n    }\n  }\n\n  // 2b. Incoherent workflow lifecycle: status=active says \"reviewed, ship\n  //     it\" while state=quarantined means the runtime refuses to dispatch\n  //     it (conflict detector parked it). The two axes are independent\n  //     (state is the only dispatch gate — see workflowSchema), so this\n  //     combo silently looks live while never firing.\n  try {\n    if (existsSync(workflowDir)) {\n      for (const f of readdirSync(workflowDir)) {\n        if (!f.endsWith(\".json\") || f.startsWith(\"_\") || f.endsWith(\".disabled.json\")) continue\n        try {\n          const wf = JSON.parse(readFileSync(resolve(workflowDir, f), \"utf-8\"))\n          if (wf?.status === \"active\" && wf?.state === \"quarantined\") {\n            findings.push({\n              severity: \"warn\",\n              title: `workflow \"${wf.id ?? f}\" is status=active but state=quarantined — it looks live but will never dispatch`,\n              fix: `Resolve the conflict the detector flagged, then set state back to \"active\" (or set status to \"review\" while parked).`,\n            })\n          }\n        } catch { /* unparseable file is caught by workflow validate */ }\n      }\n    }\n  } catch { /* directory races are non-fatal for doctor */ }\n\n  // 3. Mesh-routed webhooks naming peers that don't exist.\n  const peers = new Set<string>(((cfg.mesh?.peers ?? []) as Array<{ name: string }>).map(p => p.name))\n  for (const w of webhooks) {\n    if (!w.enabled || !w.node) continue\n    if (!peers.has(w.node)) {\n      findings.push({\n        severity: \"fail\",\n        title: `webhook \"${w.id}\" routes to mesh peer \"${w.node}\" which is not in mesh.peers`,\n        fix: `Add the peer to mesh.peers or remove the node field on the webhook.`,\n      })\n    }\n  }\n\n  // 4. Two enabled webhook entries collide on (source, agentId): the\n  //    Phase 3 dispatcher takes the first match, the second is silently\n  //    ignored — operators rarely realize.\n  const seen = new Map<string, string>()\n  for (const w of webhooks) {\n    if (!w.enabled) continue\n    const key = `${w.source}:${w.agentId}`\n    const prior = seen.get(key)\n    if (prior) {\n      findings.push({\n        severity: \"warn\",\n        title: `webhook entries \"${prior}\" and \"${w.id}\" both enabled for ${w.source} -> ${w.agentId}; only the first is dispatched`,\n        fix: `Disable one entry, or merge their triggers maps into a single entry.`,\n      })\n    } else {\n      seen.set(key, w.id)\n    }\n  }\n\n  // 5. GitLab agentMappings referencing agent ids that aren't in agents.\n  //    A mapping with `node:` set is a cross-mesh route — the agent lives\n  //    on a remote peer, not locally — so missing-from-agents is correct\n  //    and not a finding. We still warn when `node` names a peer that\n  //    isn't configured (caught by check #3 above for webhooks; same\n  //    invariant should hold for agentMappings).\n  const agentIds = new Set(Object.keys(cfg.agents ?? {}))\n  for (const m of (cfg.channels?.gitlab?.agentMappings ?? [])) {\n    if (!m?.agentId) continue\n    if (m.node) {\n      // Cross-mesh route — verify the named peer exists.\n      if (!peers.has(m.node)) {\n        findings.push({\n          severity: \"fail\",\n          title: `gitlab.agentMappings entry agentId=\"${m.agentId}\" routes to mesh peer \"${m.node}\" which is not in mesh.peers`,\n          fix: `Add the peer to mesh.peers or drop the node field on the mapping.`,\n        })\n      }\n      continue\n    }\n    if (!agentIds.has(m.agentId)) {\n      findings.push({\n        severity: \"warn\",\n        title: `gitlab.agentMappings entry agentId=\"${m.agentId}\" — no such agent in agents.* (and no node field, so it's not a cross-mesh route)`,\n        fix: `Add the agent to agents.*, set node:\"<peer>\" if the agent lives remotely, or remove the mapping.`,\n      })\n    }\n  }\n\n  // 6. Telegram accounts without an agentBinding silently drop every DM.\n  for (const [acctId, acct] of Object.entries((cfg.channels?.telegram?.accounts ?? {}) as Record<string, { agentBinding?: string }>)) {\n    if (!acct.agentBinding) {\n      findings.push({\n        severity: \"fail\",\n        title: `telegram account \"${acctId}\" has no agentBinding; every DM to this bot will drop`,\n        fix: `Set agentBinding to a valid agent id.`,\n      })\n    } else if (!agentIds.has(acct.agentBinding)) {\n      findings.push({\n        severity: \"fail\",\n        title: `telegram account \"${acctId}\".agentBinding -> \"${acct.agentBinding}\" — no such agent in agents.*`,\n        fix: `Fix the agentBinding or define the agent in agents.*.`,\n      })\n    }\n  }\n\n  // 7. Per-agent integrations: missing env vars + unknown kinds + duplicates.\n  //    The new agents[].integrations[] block declares third-party credentials\n  //    (telegram-bot, hubspot, gitlab-user, gmail, ...). Doctor scans for:\n  //      - duplicate (kind, label) on the same agent (config integrity)\n  //      - tokenEnv refs that don't exist in process.env (latent failure)\n  //      - kinds outside the canonical INTEGRATION_KINDS set (typos)\n  //    Failures are warnings, not blocking — credentials may be set on the\n  //    daemon process and absent from the doctor's local shell.\n  const KNOWN_KINDS = new Set([\n    \"telegram-bot\", \"whatsapp\", \"slack-bot\", \"discord-bot\",\n    \"gitlab-user\", \"github-user\",\n    \"gmail\", \"hotmail\", \"smtp\",\n    \"hubspot\", \"salesforce\", \"pipedrive\", \"odoo\",\n    \"trello\", \"linear\", \"asana\", \"jira\", \"notion\",\n    \"stripe\", \"sentry\", \"vercel\", \"twilio\", \"custom\",\n  ])\n  for (const [agentId, a] of Object.entries((cfg.agents ?? {}) as Record<string, any>)) {\n    const list = (a.integrations as any[] | undefined) ?? []\n    if (!list.length) continue\n    const seen = new Set<string>()\n    for (const i of list) {\n      const key = `${i.kind}::${i.label}`\n      if (seen.has(key)) {\n        findings.push({\n          severity: \"warn\",\n          title: `agents.${agentId}.integrations: duplicate (${i.kind}, ${i.label})`,\n          fix: `Remove the duplicate or rename one. (kind, label) must be unique per agent.`,\n        })\n      }\n      seen.add(key)\n      if (!KNOWN_KINDS.has(i.kind)) {\n        findings.push({\n          severity: \"warn\",\n          title: `agents.${agentId}.integrations: unknown kind \"${i.kind}\" on integration \"${i.label}\"`,\n          fix: `Use a canonical kind from INTEGRATION_KINDS, or \"custom\" for ad-hoc services.`,\n        })\n      }\n      const creds = (i.credentials || {}) as Record<string, unknown>\n      for (const [k, v] of Object.entries(creds)) {\n        if (typeof v === \"string\" && /^[A-Z][A-Z0-9_]*$/.test(v) && !process.env[v]) {\n          findings.push({\n            severity: \"warn\",\n            title: `agents.${agentId}.integrations[${i.kind}/${i.label}].${k} -> $${v} but env var is unset (in this shell)`,\n            fix: `Set ${v} on the daemon environment. The daemon's process.env is what matters; this warning fires from your local shell.`,\n          })\n        }\n      }\n    }\n  }\n\n  // (Removed: the \"agentx.json newer than daemon pid\" check produced\n  //  false positives because the pid file is only rewritten on start,\n  //  not on hot-reload. The signal-to-noise was too low. A future check\n  //  can query /reload's `lastReload` timestamp via the daemon API\n  //  instead of using filesystem mtimes.)\n\n  if (findings.length === 0) {\n    checks.push({\n      severity: \"ok\",\n      group: \"Routing\",\n      title: `${webhooks.length} webhook(s), ${Object.keys(cfg.channels?.telegram?.accounts ?? {}).length} telegram account(s) — all routing references resolve`,\n    })\n    return\n  }\n  for (const f of findings) {\n    checks.push({ severity: f.severity, group: \"Routing\", title: f.title, fix: f.fix })\n  }\n}\n\nasync function runRuntimeChecks(checks: Check[], cfg: any): Promise<void> {\n  const url = cfg.dashboard?.daemonUrl?.replace(/\\/+$/, \"\") || \"http://127.0.0.1:18800\"\n  const headers: Record<string, string> = {}\n  if (cfg.dashboard?.token) headers[\"Authorization\"] = `Bearer ${cfg.dashboard.token}`\n  try {\n    const ac = new AbortController()\n    const timer = setTimeout(() => ac.abort(), 2000)\n    const r = await fetch(url + \"/health\", { headers, signal: ac.signal })\n    clearTimeout(timer)\n    if (!r.ok) {\n      checks.push({ severity: \"warn\", group: \"Runtime\", title: `Daemon responded ${r.status}`, detail: url })\n      return\n    }\n    const body: any = await r.json()\n    checks.push({\n      severity: \"ok\",\n      group: \"Runtime\",\n      title: `Daemon healthy — ${body.agents?.length ?? 0} agents live, uptime ${Math.round((body.uptime ?? 0) / 60)}m`,\n      detail: url,\n    })\n  } catch {\n    checks.push({\n      severity: \"warn\",\n      group: \"Runtime\",\n      title: \"Daemon not reachable (not running?)\",\n      detail: url,\n      fix: \"Run `agentx daemon start`. Skip this check with `agentx doctor --no-running`.\",\n    })\n  }\n}\n\nfunction runCodegraphChecks(checks: Check[], cfg: any): void {\n  const optedIn = Object.entries(cfg.agents || {})\n    .filter(([, a]: [string, any]) =>\n      a?.codegraph === true && (a.tier === \"claude-code\" || a.tier === \"codex-cli\"),\n    ) as Array<[string, any]>\n\n  if (optedIn.length === 0) return // No agent uses codegraph — skip silently.\n\n  // Binary on PATH.\n  let cgPath: string | null = null\n  try {\n    cgPath = execFileSync(process.platform === \"win32\" ? \"where\" : \"which\", [\"codegraph\"], { encoding: \"utf-8\" })\n      .trim().split(\"\\n\")[0] || null\n  } catch { cgPath = null }\n\n  if (cgPath) {\n    let ver: string | undefined\n    try { ver = execFileSync(\"codegraph\", [\"--version\"], { encoding: \"utf-8\", timeout: 3000 }).trim() } catch { /* */ }\n    checks.push({\n      severity: \"ok\",\n      group: \"CodeGraph\",\n      title: `codegraph CLI ${ver || \"installed\"}`,\n      detail: cgPath,\n    })\n  } else {\n    checks.push({\n      severity: \"fail\",\n      group: \"CodeGraph\",\n      title: \"codegraph CLI not on PATH\",\n      detail: `${optedIn.length} agent(s) have codegraph:true but the binary isn't available.`,\n      fix: \"Install with `npm i -g @colbymchenry/codegraph`.\",\n    })\n  }\n\n  // Per-workspace index presence.\n  for (const [agentId, def] of optedIn) {\n    if (!def.workspace || !existsSync(def.workspace)) {\n      checks.push({\n        severity: \"warn\",\n        group: \"CodeGraph\",\n        title: `${agentId}: workspace missing`,\n        detail: `Workspace path ${def.workspace} does not exist — codegraph will skip this agent.`,\n      })\n      continue\n    }\n    const dbPath = resolve(def.workspace, \".codegraph\", \"codegraph.db\")\n    if (existsSync(dbPath)) {\n      checks.push({\n        severity: \"ok\",\n        group: \"CodeGraph\",\n        title: `${agentId}: index present`,\n        detail: dbPath,\n      })\n    } else {\n      checks.push({\n        severity: \"warn\",\n        group: \"CodeGraph\",\n        title: `${agentId}: index not built yet`,\n        detail: \".codegraph/ missing — daemon will background-index this workspace on next boot.\",\n        fix: `Run \\`codegraph init --index ${def.workspace}\\` to build it now.`,\n      })\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Output\n// ---------------------------------------------------------------------------\n\nfunction summarize(checks: Check[]): { errors: number; warnings: number; ok: number } {\n  return {\n    errors: checks.filter((c) => c.severity === \"fail\").length,\n    warnings: checks.filter((c) => c.severity === \"warn\").length,\n    ok: checks.filter((c) => c.severity === \"ok\").length,\n  }\n}\n\nfunction printHumanReport(checks: Check[]): void {\n  console.log()\n  console.log(chalk.bold(\"  agentx doctor\"))\n  console.log()\n\n  const groups = new Map<string, Check[]>()\n  for (const c of checks) {\n    if (!groups.has(c.group)) groups.set(c.group, [])\n    groups.get(c.group)!.push(c)\n  }\n  for (const [group, items] of groups) {\n    console.log(chalk.bold(\"  \" + group))\n    for (const c of items) {\n      const marker = c.severity === \"ok\" ? chalk.green(\"✓\")\n        : c.severity === \"warn\" ? chalk.yellow(\"!\")\n        : chalk.red(\"✗\")\n      console.log(`    ${marker} ${c.title}`)\n      if (c.detail) console.log(chalk.dim(\"      \" + c.detail.replace(/\\n/g, \"\\n      \")))\n      if (c.fix) console.log(chalk.dim(\"      → \" + c.fix))\n    }\n    console.log()\n  }\n\n  const s = summarize(checks)\n  if (s.errors > 0) {\n    console.log(chalk.red.bold(`  ${s.errors} error${s.errors === 1 ? \"\" : \"s\"}`) +\n      (s.warnings ? chalk.yellow(`, ${s.warnings} warning${s.warnings === 1 ? \"\" : \"s\"}`) : \"\") +\n      `. Fix the error${s.errors === 1 ? \"\" : \"s\"} and rerun.`)\n  } else if (s.warnings > 0) {\n    console.log(chalk.yellow.bold(`  ${s.warnings} warning${s.warnings === 1 ? \"\" : \"s\"}.`) + chalk.dim(\" Review but not blocking.\"))\n  } else {\n    console.log(chalk.green.bold(`  All checks passed (${s.ok}).`))\n  }\n  console.log()\n}\n"],"mappings":"+CAMAA,IANA,OAAS,WAAAC,MAAe,YACxB,OAAOC,MAAW,QAClB,OAAS,gBAAAC,MAAoB,gBAC7B,OAAS,cAAAC,EAAY,gBAAAC,EAAc,eAAAC,EAAa,YAAAC,MAAgB,KAChE,OAAS,WAAAC,MAAe,OACxB,OAAS,iBAAAC,MAAqB,SA8B9B,eAAsBC,EACpBC,EAA8B,CAAC,EAC0D,CACzF,IAAMC,EAAkB,CAAC,EACzB,MAAMC,EAAaD,CAAM,EACzB,IAAME,EAAMC,EAAgBH,CAAM,EAClC,OAAIE,GAAKE,EAAmBJ,EAAQE,CAAG,EACnCA,GAAKG,EAAmBL,EAAQE,CAAG,EACnCA,GAAKI,EAA2BN,EAAQE,CAAG,EAC3CA,GAAKK,EAAiBP,EAAQE,CAAG,EACjCA,GAAKM,EAAmBR,EAAQE,CAAG,EACnCH,EAAK,UAAY,IAASG,GAAK,MAAMO,EAAiBT,EAAQE,CAAG,EAC9D,CAAE,OAAAF,EAAQ,QAASU,EAAUV,CAAM,CAAE,CAC9C,CAEO,IAAMW,EAAS,IAAItB,EAAQ,EAC/B,KAAK,QAAQ,EACb,YAAY,4DAA4D,EACxE,OAAO,eAAgB,4BAA4B,EACnD,OAAO,SAAU,kDAAkD,EACnE,OAAO,MAAOU,GAAS,CACtB,GAAM,CAAE,OAAAC,EAAQ,QAAAY,CAAQ,EAAI,MAAMd,EAAgB,CAAE,QAASC,EAAK,UAAY,EAAM,CAAC,EACjFA,EAAK,KACP,QAAQ,OAAO,MAAM,KAAK,UAAU,CAAE,OAAAC,EAAQ,QAAAY,CAAQ,EAAG,KAAM,CAAC,EAAI;AAAA,CAAI,EAExEC,EAAiBb,CAAM,EAEzB,QAAQ,KAAKY,EAAQ,OAAS,EAAI,EAAI,CAAC,CACzC,CAAC,EAMH,eAAeX,EAAaD,EAAgC,CAC1D,IAAMc,EAAY,OAAO,QAAQ,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,EAC5Dd,EAAO,KAAK,CACV,SAAUc,GAAa,GAAK,KAAO,OACnC,MAAO,cACP,MAAO,WAAW,QAAQ,SAAS,OACnC,OAAQA,GAAa,GAAK,OAAY,6BACtC,IAAKA,GAAa,GAAK,OAAY,gDACrC,CAAC,EAED,IAAMC,EAASC,GAA+B,CAC5C,GAAI,CAAE,OAAOzB,EAAa,QAAQ,WAAa,QAAU,QAAU,QAAS,CAACyB,CAAG,EAAG,CAAE,SAAU,OAAQ,CAAC,EAAE,KAAK,EAAE,MAAM;AAAA,CAAI,EAAE,CAAC,CAAE,MAChI,CAAQ,OAAO,IAAK,CACtB,EACMC,EAAUF,EAAM,KAAK,EAC3Bf,EAAO,KAAK,CACV,SAAUiB,EAAU,KAAO,OAC3B,MAAO,cACP,MAAOA,EAAU,cAAgB,gBACjC,OAAQA,GAAW,MACrB,CAAC,EAID,IAAMC,EAAaH,EAAM,QAAQ,EACjC,GAAIG,EAAY,CACd,IAAIC,EACJ,GAAI,CAAEA,EAAM5B,EAAa,SAAU,CAAC,WAAW,EAAG,CAAE,SAAU,QAAS,QAAS,GAAK,CAAC,EAAE,KAAK,CAAE,MAAE,CAAc,CAC/GS,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,cAAe,MAAO,cAAcmB,GAAO,cAAe,OAAQD,CAAW,CAAC,OAEnHlB,EAAO,KAAK,CACV,SAAU,OACV,MAAO,cACP,MAAO,yBACP,OAAQ,oDACR,IAAK,oDACP,CAAC,EAGH,IAAMoB,EAAYL,EAAM,OAAO,EAC/B,GAAIK,EAAW,CACb,IAAID,EACJ,GAAI,CAAEA,EAAM5B,EAAa,QAAS,CAAC,WAAW,EAAG,CAAE,SAAU,QAAS,QAAS,GAAK,CAAC,EAAE,KAAK,CAAE,MAAE,CAAc,CAC9GS,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,cAAe,MAAO,aAAamB,GAAO,cAAe,OAAQC,CAAU,CAAC,OAEjHpB,EAAO,KAAK,CACV,SAAU,OACV,MAAO,cACP,MAAO,wBACP,OAAQ,kDACR,IAAK,wCACP,CAAC,EAGH,IAAMqB,EAAeN,EAAM,UAAU,EACrC,GAAIM,EAAc,CAChB,IAAIF,EACJ,GAAI,CAAEA,EAAM5B,EAAa,WAAY,CAAC,WAAW,EAAG,CAAE,SAAU,QAAS,QAAS,GAAK,CAAC,EAAE,KAAK,CAAE,MAAE,CAAc,CACjHS,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,cAAe,MAAO,gBAAgBmB,GAAO,cAAe,OAAQE,CAAa,CAAC,OAEvHrB,EAAO,KAAK,CACV,SAAU,OACV,MAAO,cACP,MAAO,2BACP,OAAQ,iDACR,IAAK,yCACP,CAAC,EAGH,GAAI,CACFH,EAAc,YAAY,GAAG,EAAE,gBAAgB,EAC/CG,EAAO,KAAK,CACV,SAAU,KACV,MAAO,cACP,MAAO,iCAAiC,QAAQ,UAChD,OAAQ,uBAAuB,QAAQ,SAAS,SAClD,CAAC,CACH,OAASsB,EAAP,CACAtB,EAAO,KAAK,CACV,SAAU,OACV,MAAO,cACP,MAAO,8CACP,OAAQsB,GAAG,SAAW,OAAOA,CAAC,EAC9B,IAAK,4EAA4E,QAAQ,oBAAoB,QAAQ,SAAS,WAChI,CAAC,CACH,CACF,CAEA,SAASnB,EAAgBH,EAAsB,CAC7C,IAAMuB,EAAU3B,EAAQ,QAAQ,IAAI,EAAG,aAAa,EACpD,GAAI,CAACJ,EAAW+B,CAAO,EACrB,OAAAvB,EAAO,KAAK,CACV,SAAU,OACV,MAAO,SACP,MAAO,wBACP,OAAQ,aAAauB,IACrB,IAAK,sDACP,CAAC,EACM,KAET,IAAIrB,EACJ,GAAI,CAAEA,EAAM,KAAK,MAAMT,EAAa8B,EAAS,OAAO,CAAC,CAAE,OAChDD,EAAP,CACE,OAAAtB,EAAO,KAAK,CAAE,SAAU,OAAQ,MAAO,SAAU,MAAO,gCAAiC,OAAQsB,EAAE,OAAQ,CAAC,EACrG,IACT,CACA,GAAI,CAEFE,EAAiBD,CAAO,EACxBvB,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,SAAU,MAAO,sBAAsB,OAAO,KAAKE,EAAI,QAAU,CAAC,CAAC,EAAE,kBAAkB,OAAO,KAAKA,EAAI,OAAS,CAAC,CAAC,EAAE,mBAAoB,CAAC,CAChL,OAASoB,EAAP,CACAtB,EAAO,KAAK,CACV,SAAU,OACV,MAAO,SACP,MAAO,uCACP,OAAQsB,EAAE,QACV,IAAK,sDACP,CAAC,CACH,CACA,IAAMG,EAAmB,OAAO,QAAQvB,EAAI,QAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAEwB,CAAC,IAAqBA,EAAE,OAAS,aAAa,EAC/GD,EAAiB,OAAS,KACT,IAAM,CACvB,GAAI,CAAE,OAAAlC,EAAa,QAAQ,WAAa,QAAU,QAAU,QAAS,CAAC,QAAQ,EAAG,CAAE,MAAO,QAAS,CAAC,EAAU,EAAK,MAAE,CAAQ,MAAO,EAAM,CAC5I,GAAG,GAEDS,EAAO,KAAK,CACV,SAAU,OACV,MAAO,SACP,MAAO,GAAGyB,EAAiB,iEAC3B,OAAQA,EAAiB,IAAI,CAAC,CAACE,CAAE,IAAMA,CAAE,EAAE,KAAK,IAAI,EACpD,IAAK,0GACP,CAAC,GAGL,IAAMC,EAAiB,OAAO,QAAQ1B,EAAI,QAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAEwB,CAAC,IAAqBA,EAAE,OAAS,WAAW,EAC3GE,EAAe,OAAS,KACR,IAAM,CACtB,GAAI,CAAE,OAAArC,EAAa,QAAQ,WAAa,QAAU,QAAU,QAAS,CAAC,OAAO,EAAG,CAAE,MAAO,QAAS,CAAC,EAAU,EAAK,MAAE,CAAQ,MAAO,EAAM,CAC3I,GAAG,GAEDS,EAAO,KAAK,CACV,SAAU,OACV,MAAO,SACP,MAAO,GAAG4B,EAAe,8DACzB,OAAQA,EAAe,IAAI,CAAC,CAACD,CAAE,IAAMA,CAAE,EAAE,KAAK,IAAI,EAClD,IAAK,6FACP,CAAC,GAGL,IAAME,EAAiB,OAAO,QAAQ3B,EAAI,QAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAEwB,CAAC,IAAqBA,EAAE,OAAS,UAAU,EAC9G,OAAIG,EAAe,OAAS,KACL,IAAM,CACzB,GAAI,CAAE,OAAAtC,EAAa,QAAQ,WAAa,QAAU,QAAU,QAAS,CAAC,UAAU,EAAG,CAAE,MAAO,QAAS,CAAC,EAAU,EAAK,MAAE,CAAQ,MAAO,EAAM,CAC9I,GAAG,GAEDS,EAAO,KAAK,CACV,SAAU,OACV,MAAO,SACP,MAAO,GAAG6B,EAAe,gEACzB,OAAQA,EAAe,IAAI,CAAC,CAACF,CAAE,IAAMA,CAAE,EAAE,KAAK,IAAI,EAClD,IAAK,yFACP,CAAC,GAGEzB,CACT,CAEA,SAASE,EAAmBJ,EAAiBE,EAAgB,CAG3D,IAAM4B,EAAO,IAAI,IAEjB,GADAC,EAAe7B,EAAK4B,CAAI,EACpBA,EAAK,OAAS,EAAG,CACnB9B,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,UAAW,MAAO,qCAAsC,CAAC,EAC9F,OAEF,IAAMgC,EAAUpC,EAAQ,QAAQ,IAAI,EAAG,MAAM,EACvCqC,EAAsC,CAAC,EAC7C,GAAIzC,EAAWwC,CAAO,EACpB,QAAWE,KAAQzC,EAAauC,EAAS,OAAO,EAAE,MAAM,OAAO,EAAG,CAChE,IAAMG,EAAID,EAAK,MAAM,qCAAqC,EACtDC,IAAGF,EAAYE,EAAE,CAAC,CAAC,EAAIA,EAAE,CAAC,GAGlC,IAAMC,EAAoB,CAAC,EACrBC,EAAkB,CAAC,EACzB,QAAWC,KAAQR,EAAM,CACvB,IAAMS,EAAM,QAAQ,IAAID,CAAI,GAAKL,EAAYK,CAAI,EAC7CC,IAAQ,OAAWH,EAAQ,KAAKE,CAAI,GAC/B,CAACC,EAAI,KAAK,GAAK,kBAAkB,KAAKA,CAAG,IAAGF,EAAM,KAAKC,CAAI,EAElEF,EAAQ,SAAW,GAAKC,EAAM,SAAW,EAC3CrC,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,UAAW,MAAO,GAAG8B,EAAK,gCAAiC,CAAC,GAE7FM,EAAQ,OAAS,GACnBpC,EAAO,KAAK,CACV,SAAU,OACV,MAAO,UACP,MAAO,GAAGoC,EAAQ,0DAClB,OAAQA,EAAQ,KAAK,IAAI,EACzB,IAAK,2BAAsBA,EAAQ,CAAC,WACtC,CAAC,EAECC,EAAM,OAAS,GACjBrC,EAAO,KAAK,CACV,SAAU,OACV,MAAO,UACP,MAAO,GAAGqC,EAAM,kCAChB,OAAQA,EAAM,KAAK,IAAI,CACzB,CAAC,EAGP,CAEA,SAASN,EAAeS,EAAeC,EAAyB,CAC9D,GAAI,OAAOD,GAAS,SAClB,QAAWL,KAAKK,EAAK,SAAS,2BAA2B,EAAGC,EAAK,IAAIN,EAAE,CAAC,CAAC,UAChE,MAAM,QAAQK,CAAI,EAC3B,QAAWE,KAAQF,EAAMT,EAAeW,EAAMD,CAAI,UACzCD,GAAQ,OAAOA,GAAS,SACjC,QAAWG,KAAK,OAAO,OAAOH,CAAI,EAAGT,EAAeY,EAAGF,CAAI,CAE/D,CAEA,SAASpC,EAAmBL,EAAiBE,EAAgB,CAC3D,IAAMkC,EAAoB,CAAC,EAC3B,OAAW,CAACT,EAAID,CAAC,IAAK,OAAO,QAAQxB,EAAI,QAAU,CAAC,CAAC,EAAsB,CACzE,GAAI,CAACwB,EAAE,UAAW,SAClB,IAAMkB,EAAMlB,EAAE,UAAU,WAAW,GAAG,EAAIA,EAAE,UAAY9B,EAAQ,QAAQ,IAAI,EAAG8B,EAAE,SAAS,EAC1F,GAAI,CACS/B,EAASiD,CAAG,EACf,YAAY,GAAGR,EAAQ,KAAK,GAAGT,MAAOiB,gCAAkC,CAClF,MAAE,CAAQR,EAAQ,KAAK,GAAGT,MAAOiB,GAAK,CAAE,EAEtCR,EAAQ,SAAW,EACrBpC,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,aAAc,MAAO,mCAAoC,CAAC,EAE/FA,EAAO,KAAK,CACV,SAAU,OACV,MAAO,aACP,MAAO,GAAGoC,EAAQ,oCAClB,OAAQA,EAAQ,KAAK;AAAA,KAAQ,EAC7B,IAAK,qHACP,CAAC,CAEL,CASA,SAAS9B,EAA2BN,EAAiBE,EAAgB,CACnE,IAAM2C,EAAS,gCACTC,EAAsE,CAAC,EAE7E,OAAW,CAACC,EAASrB,CAAC,IAAK,OAAO,QAAQxB,EAAI,QAAU,CAAC,CAAC,EAAsB,CAC9E,GAAI,CAACwB,EAAE,UAAW,SAClB,IAAMsB,EAAQtB,EAAE,UAAU,WAAW,GAAG,EAAIA,EAAE,UAAY9B,EAAQ,QAAQ,IAAI,EAAG8B,EAAE,SAAS,EAC5F,QAAWuB,IAAS,CAAC,gBAAiB,qBAAqB,EAAG,CAC5D,IAAMC,EAAItD,EAAQoD,EAAO,UAAWC,CAAK,EACzC,GAAI,CAACzD,EAAW0D,CAAC,EAAG,SACpB,IAAIC,EACJ,GAAI,CACFA,EAAO,KAAK,MAAM1D,EAAayD,EAAG,OAAO,CAAC,CAC5C,OAAS5B,EAAP,CACAwB,EAAS,KAAK,CAAE,SAAU,OAAQ,MAAOC,EAAS,IAAK,GAAGE,8BAA6B3B,EAAE,SAAU,CAAC,EACpG,QACF,CACA,IAAM8B,EAAOD,EAAK,KAAO,CAAC,EAC1B,OAAW,CAACE,EAAGV,CAAC,IAAK,OAAO,QAAQS,CAAG,EAAG,CACxC,GAAI,OAAOT,GAAM,SAAU,SAC3B,IAAMW,EAAaX,EAAE,MAAME,CAAM,EAC7BS,GACFR,EAAS,KAAK,CACZ,SAAU,OACV,MAAOC,EACP,IAAK,GAAGE,SAAaI,yBAAyB,CAAC,GAAG,IAAI,IAAIC,CAAU,CAAC,EAAE,KAAK,GAAG,2FACjF,CAAC,EAGL,IAAMC,EAAUH,EAAI,KACpB,GAAI,OAAOG,GAAY,SAAU,CAC/B,IAAMC,EAAQD,EAAQ,MAAM,GAAG,EAAE,OAAO,OAAO,EAC1CC,EAAM,SAAS,UAAU,GAC5BV,EAAS,KAAK,CAAE,SAAU,OAAQ,MAAOC,EAAS,IAAK,GAAGE,gEAAgE,CAAC,EAExHO,EAAM,SAAS,MAAM,GACxBV,EAAS,KAAK,CAAE,SAAU,OAAQ,MAAOC,EAAS,IAAK,GAAGE,mDAAmD,CAAC,EAGlH,IAAMQ,EAAQN,EAAK,YACnB,GAAIM,GAAS,OAAOA,GAAU,UAAY,UAAWA,EAAO,CAC1D,IAAMC,EAAQD,EAAM,MACdE,EAAOF,EAAM,KACf,MAAM,QAAQC,CAAK,GAAKA,EAAM,SAAW,GAAK,MAAM,QAAQC,CAAI,GAAKA,EAAK,OAAS,GACrFb,EAAS,KAAK,CACZ,SAAU,OACV,MAAOC,EACP,IAAK,GAAGE,6CAAiDU,EAAK,yFAChE,CAAC,IAMT,GAAIb,EAAS,SAAW,EAAG,CACzB9C,EAAO,KAAK,CAAE,SAAU,KAAM,MAAO,qBAAsB,MAAO,OAAO,OAAO,KAAKE,EAAI,QAAU,CAAC,CAAC,EAAE,gDAAiD,CAAC,EACzJ,OAEF,QAAW0D,KAAKd,EACd9C,EAAO,KAAK,CACV,SAAU4D,EAAE,SACZ,MAAO,qBACP,MAAO,GAAGA,EAAE,UAAUA,EAAE,MACxB,IAAKA,EAAE,WAAa,OAAS,sGAAmG,oDAClI,CAAC,CAEL,CAQA,SAASrD,EAAiBP,EAAiBE,EAAgB,CACzD,IAAM2D,EAAY3D,EAAI,UAAY,CAAC,EAU7B4C,EAAuE,CAAC,EAKxEgB,EAAclE,EAAQ,QAAQ,IAAI,EAAGM,EAAI,WAAW,KAAO,mBAAmB,EAC9E6D,EAAiB,IAAI,IAC3B,GAAI,CACF,GAAIvE,EAAWsE,CAAW,EACxB,QAAWF,KAAKlE,EAAYoE,CAAW,EACjCF,EAAE,SAAS,OAAO,GAAK,CAACA,EAAE,WAAW,GAAG,GAAK,CAACA,EAAE,SAAS,gBAAgB,GAC3EG,EAAe,IAAIH,EAAE,QAAQ,UAAW,EAAE,CAAC,CAInD,MAAE,CAA2E,CAO7E,IAAMI,EAAoB,IAAI,IAAI,CAAC,SAAU,QAAQ,CAAC,EACtD,QAAWC,KAAKJ,EAAU,CAExB,GADI,CAACI,EAAE,SACH,CAACD,EAAkB,IAAIC,EAAE,MAAM,EAAG,SAElC,EADgBA,EAAE,UAAY,OAAO,KAAKA,EAAE,QAAQ,EAAE,OAAS,IAC/C,CAACA,EAAE,iBACrBnB,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,YAAYmB,EAAE,QAAQA,EAAE,aAAaA,EAAE,8EAC9C,IAAK,sHACP,CAAC,EAOL,QAAWA,KAAKJ,EACd,GAAI,GAACI,EAAE,SAAW,CAACA,EAAE,UACrB,QAAW,CAACC,EAAWC,CAAU,IAAK,OAAO,QAAQF,EAAE,QAAQ,EACzDF,EAAe,KAAO,GAAK,CAACA,EAAe,IAAII,CAAU,GAC3DrB,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,YAAYmB,EAAE,iBAAiBC,WAAmBC,oCAAwCjE,EAAI,WAAW,KAAO,sBACvH,IAAK,uDACP,CAAC,EAGD+D,EAAE,iBAAmBF,EAAe,KAAO,GAAK,CAACA,EAAe,IAAIE,EAAE,eAAe,GACvFnB,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,YAAYmB,EAAE,2BAA2BA,EAAE,2CAClD,IAAK,uDACP,CAAC,EASL,GAAI,CACF,GAAIzE,EAAWsE,CAAW,GACxB,QAAWF,KAAKlE,EAAYoE,CAAW,EACrC,GAAI,GAACF,EAAE,SAAS,OAAO,GAAKA,EAAE,WAAW,GAAG,GAAKA,EAAE,SAAS,gBAAgB,GAC5E,GAAI,CACF,IAAMQ,EAAK,KAAK,MAAM3E,EAAaG,EAAQkE,EAAaF,CAAC,EAAG,OAAO,CAAC,EAChEQ,GAAI,SAAW,UAAYA,GAAI,QAAU,eAC3CtB,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,aAAasB,EAAG,IAAMR,yFAC7B,IAAK,sHACP,CAAC,CAEL,MAAE,CAA8D,EAGtE,MAAE,CAAuD,CAGzD,IAAMS,EAAQ,IAAI,KAAcnE,EAAI,MAAM,OAAS,CAAC,GAA+B,IAAIgD,GAAKA,EAAE,IAAI,CAAC,EACnG,QAAWe,KAAKJ,EACV,CAACI,EAAE,SAAW,CAACA,EAAE,MAChBI,EAAM,IAAIJ,EAAE,IAAI,GACnBnB,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,YAAYmB,EAAE,4BAA4BA,EAAE,mCACnD,IAAK,qEACP,CAAC,EAOL,IAAMK,EAAO,IAAI,IACjB,QAAWL,KAAKJ,EAAU,CACxB,GAAI,CAACI,EAAE,QAAS,SAChB,IAAMM,EAAM,GAAGN,EAAE,UAAUA,EAAE,UACvBO,EAAQF,EAAK,IAAIC,CAAG,EACtBC,EACF1B,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,oBAAoB0B,WAAeP,EAAE,wBAAwBA,EAAE,aAAaA,EAAE,wCACrF,IAAK,sEACP,CAAC,EAEDK,EAAK,IAAIC,EAAKN,EAAE,EAAE,EAUtB,IAAMQ,EAAW,IAAI,IAAI,OAAO,KAAKvE,EAAI,QAAU,CAAC,CAAC,CAAC,EACtD,QAAWiC,KAAMjC,EAAI,UAAU,QAAQ,eAAiB,CAAC,EACvD,GAAKiC,GAAG,QACR,IAAIA,EAAE,KAAM,CAELkC,EAAM,IAAIlC,EAAE,IAAI,GACnBW,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,uCAAuCX,EAAE,iCAAiCA,EAAE,mCACnF,IAAK,mEACP,CAAC,EAEH,SAEGsC,EAAS,IAAItC,EAAE,OAAO,GACzBW,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,uCAAuCX,EAAE,gGAChD,IAAK,kGACP,CAAC,EAKL,OAAW,CAACuC,EAAQC,CAAI,IAAK,OAAO,QAASzE,EAAI,UAAU,UAAU,UAAY,CAAC,CAA+C,EAC1HyE,EAAK,aAMEF,EAAS,IAAIE,EAAK,YAAY,GACxC7B,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,qBAAqB4B,uBAA4BC,EAAK,iDAC7D,IAAK,uDACP,CAAC,EAVD7B,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,qBAAqB4B,yDAC5B,IAAK,uCACP,CAAC,EAkBL,IAAME,EAAc,IAAI,IAAI,CAC1B,eAAgB,WAAY,YAAa,cACzC,cAAe,cACf,QAAS,UAAW,OACpB,UAAW,aAAc,YAAa,OACtC,SAAU,SAAU,QAAS,OAAQ,SACrC,SAAU,SAAU,SAAU,SAAU,QAC1C,CAAC,EACD,OAAW,CAAC7B,EAASrB,CAAC,IAAK,OAAO,QAASxB,EAAI,QAAU,CAAC,CAAyB,EAAG,CACpF,IAAM2E,EAAQnD,EAAE,cAAsC,CAAC,EACvD,GAAI,CAACmD,EAAK,OAAQ,SAClB,IAAMP,EAAO,IAAI,IACjB,QAAWQ,KAAKD,EAAM,CACpB,IAAMN,EAAM,GAAGO,EAAE,SAASA,EAAE,QACxBR,EAAK,IAAIC,CAAG,GACdzB,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,UAAUC,8BAAoC+B,EAAE,SAASA,EAAE,SAClE,IAAK,6EACP,CAAC,EAEHR,EAAK,IAAIC,CAAG,EACPK,EAAY,IAAIE,EAAE,IAAI,GACzBhC,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,UAAUC,iCAAuC+B,EAAE,yBAAyBA,EAAE,SACrF,IAAK,+EACP,CAAC,EAEH,IAAMC,EAASD,EAAE,aAAe,CAAC,EACjC,OAAW,CAACzB,EAAG,CAAC,IAAK,OAAO,QAAQ0B,CAAK,EACnC,OAAO,GAAM,UAAY,oBAAoB,KAAK,CAAC,GAAK,CAAC,QAAQ,IAAI,CAAC,GACxEjC,EAAS,KAAK,CACZ,SAAU,OACV,MAAO,UAAUC,kBAAwB+B,EAAE,QAAQA,EAAE,UAAUzB,SAAS,yCACxE,IAAK,OAAO,kHACd,CAAC,GAYT,GAAIP,EAAS,SAAW,EAAG,CACzB9C,EAAO,KAAK,CACV,SAAU,KACV,MAAO,UACP,MAAO,GAAG6D,EAAS,sBAAsB,OAAO,KAAK3D,EAAI,UAAU,UAAU,UAAY,CAAC,CAAC,EAAE,kEAC/F,CAAC,EACD,OAEF,QAAW0D,KAAKd,EACd9C,EAAO,KAAK,CAAE,SAAU4D,EAAE,SAAU,MAAO,UAAW,MAAOA,EAAE,MAAO,IAAKA,EAAE,GAAI,CAAC,CAEtF,CAEA,eAAenD,EAAiBT,EAAiBE,EAAyB,CACxE,IAAM8E,EAAM9E,EAAI,WAAW,WAAW,QAAQ,OAAQ,EAAE,GAAK,yBACvD+E,EAAkC,CAAC,EACrC/E,EAAI,WAAW,QAAO+E,EAAQ,cAAmB,UAAU/E,EAAI,UAAU,SAC7E,GAAI,CACF,IAAMgF,EAAK,IAAI,gBACTC,EAAQ,WAAW,IAAMD,EAAG,MAAM,EAAG,GAAI,EACzCE,EAAI,MAAM,MAAMJ,EAAM,UAAW,CAAE,QAAAC,EAAS,OAAQC,EAAG,MAAO,CAAC,EAErE,GADA,aAAaC,CAAK,EACd,CAACC,EAAE,GAAI,CACTpF,EAAO,KAAK,CAAE,SAAU,OAAQ,MAAO,UAAW,MAAO,oBAAoBoF,EAAE,SAAU,OAAQJ,CAAI,CAAC,EACtG,OAEF,IAAMK,EAAY,MAAMD,EAAE,KAAK,EAC/BpF,EAAO,KAAK,CACV,SAAU,KACV,MAAO,UACP,MAAO,yBAAoBqF,EAAK,QAAQ,QAAU,yBAAyB,KAAK,OAAOA,EAAK,QAAU,GAAK,EAAE,KAC7G,OAAQL,CACV,CAAC,CACH,MAAE,CACAhF,EAAO,KAAK,CACV,SAAU,OACV,MAAO,UACP,MAAO,sCACP,OAAQgF,EACR,IAAK,+EACP,CAAC,CACH,CACF,CAEA,SAASxE,EAAmBR,EAAiBE,EAAgB,CAC3D,IAAMoF,EAAU,OAAO,QAAQpF,EAAI,QAAU,CAAC,CAAC,EAC5C,OAAO,CAAC,CAAC,CAAEwB,CAAC,IACXA,GAAG,YAAc,KAASA,EAAE,OAAS,eAAiBA,EAAE,OAAS,YACnE,EAEF,GAAI4D,EAAQ,SAAW,EAAG,OAG1B,IAAIC,EAAwB,KAC5B,GAAI,CACFA,EAAShG,EAAa,QAAQ,WAAa,QAAU,QAAU,QAAS,CAAC,WAAW,EAAG,CAAE,SAAU,OAAQ,CAAC,EACzG,KAAK,EAAE,MAAM;AAAA,CAAI,EAAE,CAAC,GAAK,IAC9B,MAAE,CAAQgG,EAAS,IAAK,CAExB,GAAIA,EAAQ,CACV,IAAIpE,EACJ,GAAI,CAAEA,EAAM5B,EAAa,YAAa,CAAC,WAAW,EAAG,CAAE,SAAU,QAAS,QAAS,GAAK,CAAC,EAAE,KAAK,CAAE,MAAE,CAAc,CAClHS,EAAO,KAAK,CACV,SAAU,KACV,MAAO,YACP,MAAO,iBAAiBmB,GAAO,cAC/B,OAAQoE,CACV,CAAC,OAEDvF,EAAO,KAAK,CACV,SAAU,OACV,MAAO,YACP,MAAO,4BACP,OAAQ,GAAGsF,EAAQ,sEACnB,IAAK,kDACP,CAAC,EAIH,OAAW,CAACvC,EAASyC,CAAG,IAAKF,EAAS,CACpC,GAAI,CAACE,EAAI,WAAa,CAAChG,EAAWgG,EAAI,SAAS,EAAG,CAChDxF,EAAO,KAAK,CACV,SAAU,OACV,MAAO,YACP,MAAO,GAAG+C,uBACV,OAAQ,kBAAkByC,EAAI,iEAChC,CAAC,EACD,SAEF,IAAMC,EAAS7F,EAAQ4F,EAAI,UAAW,aAAc,cAAc,EAC9DhG,EAAWiG,CAAM,EACnBzF,EAAO,KAAK,CACV,SAAU,KACV,MAAO,YACP,MAAO,GAAG+C,mBACV,OAAQ0C,CACV,CAAC,EAEDzF,EAAO,KAAK,CACV,SAAU,OACV,MAAO,YACP,MAAO,GAAG+C,yBACV,OAAQ,uFACR,IAAK,gCAAgCyC,EAAI,8BAC3C,CAAC,EAGP,CAMA,SAAS9E,EAAUV,EAAmE,CACpF,MAAO,CACL,OAAQA,EAAO,OAAQ0F,GAAMA,EAAE,WAAa,MAAM,EAAE,OACpD,SAAU1F,EAAO,OAAQ0F,GAAMA,EAAE,WAAa,MAAM,EAAE,OACtD,GAAI1F,EAAO,OAAQ0F,GAAMA,EAAE,WAAa,IAAI,EAAE,MAChD,CACF,CAEA,SAAS7E,EAAiBb,EAAuB,CAC/C,QAAQ,IAAI,EACZ,QAAQ,IAAIV,EAAM,KAAK,iBAAiB,CAAC,EACzC,QAAQ,IAAI,EAEZ,IAAMqG,EAAS,IAAI,IACnB,QAAWD,KAAK1F,EACT2F,EAAO,IAAID,EAAE,KAAK,GAAGC,EAAO,IAAID,EAAE,MAAO,CAAC,CAAC,EAChDC,EAAO,IAAID,EAAE,KAAK,EAAG,KAAKA,CAAC,EAE7B,OAAW,CAACE,EAAOC,CAAK,IAAKF,EAAQ,CACnC,QAAQ,IAAIrG,EAAM,KAAK,KAAOsG,CAAK,CAAC,EACpC,QAAWF,KAAKG,EAAO,CACrB,IAAMC,EAASJ,EAAE,WAAa,KAAOpG,EAAM,MAAM,QAAG,EAChDoG,EAAE,WAAa,OAASpG,EAAM,OAAO,GAAG,EACxCA,EAAM,IAAI,QAAG,EACjB,QAAQ,IAAI,OAAOwG,KAAUJ,EAAE,OAAO,EAClCA,EAAE,QAAQ,QAAQ,IAAIpG,EAAM,IAAI,SAAWoG,EAAE,OAAO,QAAQ,MAAO;AAAA,OAAU,CAAC,CAAC,EAC/EA,EAAE,KAAK,QAAQ,IAAIpG,EAAM,IAAI,gBAAaoG,EAAE,GAAG,CAAC,EAEtD,QAAQ,IAAI,EAGd,IAAMK,EAAIrF,EAAUV,CAAM,EACtB+F,EAAE,OAAS,EACb,QAAQ,IAAIzG,EAAM,IAAI,KAAK,KAAKyG,EAAE,eAAeA,EAAE,SAAW,EAAI,GAAK,KAAK,GACzEA,EAAE,SAAWzG,EAAM,OAAO,KAAKyG,EAAE,mBAAmBA,EAAE,WAAa,EAAI,GAAK,KAAK,EAAI,IACtF,kBAAkBA,EAAE,SAAW,EAAI,GAAK,gBAAgB,EACjDA,EAAE,SAAW,EACtB,QAAQ,IAAIzG,EAAM,OAAO,KAAK,KAAKyG,EAAE,mBAAmBA,EAAE,WAAa,EAAI,GAAK,MAAM,EAAIzG,EAAM,IAAI,2BAA2B,CAAC,EAEhI,QAAQ,IAAIA,EAAM,MAAM,KAAK,wBAAwByG,EAAE,MAAM,CAAC,EAEhE,QAAQ,IAAI,CACd","names":["init_config","Command","chalk","execFileSync","existsSync","readFileSync","readdirSync","statSync","resolve","createRequire","runDoctorChecks","opts","checks","runEnvChecks","cfg","runConfigChecks","runReferenceChecks","runWorkspaceChecks","runWorkspaceSettingsChecks","runRoutingChecks","runCodegraphChecks","runRuntimeChecks","summarize","doctor","summary","printHumanReport","nodeMajor","which","bin","npmPath","claudePath","ver","codexPath","openCodePath","e","cfgPath","loadDaemonConfig","claudeCodeAgents","a","id","codexCliAgents","openCodeAgents","refs","collectEnvRefs","envFile","envFromFile","line","m","missing","empty","name","raw","node","into","item","v","abs","VAR_RE","findings","agentId","wsAbs","fname","p","data","env","k","unexpanded","pathVal","parts","perms","allow","deny","f","webhooks","workflowDir","knownWorkflows","multiEventSources","w","eventType","workflowId","wf","peers","seen","key","prior","agentIds","acctId","acct","KNOWN_KINDS","list","i","creds","url","headers","ac","timer","r","body","optedIn","cgPath","def","dbPath","c","groups","group","items","marker","s"]}