anypick 1.0.0

package/dist/core/doctor-fixes.js

@@ -0,0 +1,102 @@
+import { pathExists } from "../utils/fs.js";
+import { isProcessRunning, readPidFile } from "../utils/process/pid.js";
+import { isLockStale, readLockInfo } from "../utils/lock.js";
+import { isUnderRoot, walkAnyPickOwned } from "./doctor-utils.js";
+import { recoverIncompleteOperations } from "./activation-executor.js";
+import { join } from "node:path";
+import { chmod, rm, stat } from "node:fs/promises";
+import { tmpdir } from "node:os";
+//#region src/core/doctor-fixes.ts
+async function executeDoctorFix(action, root, deps) {
+	switch (action.kind) {
+		case "delete_stale_lock": return fixDeleteStaleLock(action.target, root);
+		case "delete_stale_pid": return fixDeleteStalePid(action.target, root);
+		case "stop_orphan_proxy": return fixStopOrphanProxy(action, deps);
+		case "delete_temp_overlay": return fixDeleteTempOverlay(action.target);
+		case "repair_permissions": return fixRepairPermissions(root);
+		case "rebuild_caches": return fixRebuildCaches(root);
+		case "complete_journal_rollback": return fixJournal(action, deps);
+		default: {
+			const kind = action.kind;
+			throw new Error(`Unknown fix kind: ${String(kind)}`);
+		}
+	}
+}
+async function fixDeleteStaleLock(target, root) {
+	if (!isUnderRoot(target, root)) throw new Error(`Refusing to delete lock outside anypick root: ${target}`);
+	if (!await pathExists(target)) return `Lock already gone: ${target}`;
+	if (!target.endsWith(".lock")) throw new Error(`Not a lock file: ${target}`);
+	if (!await isLockStale(target)) {
+		const info = await readLockInfo(target);
+		throw new Error(`Lock still held by live process ${info?.pid ?? "?"}; refusing delete: ${target}`);
+	}
+	await rm(target, { force: true });
+	return `Deleted stale lock: ${target}`;
+}
+async function fixDeleteStalePid(target, root) {
+	if (!isUnderRoot(target, root)) throw new Error(`Refusing to delete PID outside anypick root: ${target}`);
+	if (!target.endsWith(".pid") && !target.endsWith("proxy.pid")) throw new Error(`Not a PID record: ${target}`);
+	const pid = await readPidFile(target);
+	if (pid != null && isProcessRunning(pid)) throw new Error(`Process ${pid} still running; refusing to delete PID file ${target}`);
+	await rm(target, { force: true });
+	return `Deleted stale PID record: ${target}`;
+}
+async function fixStopOrphanProxy(action, deps) {
+	const provider = String(action.params?.provider ?? "");
+	const account = String(action.params?.account ?? "");
+	if (!provider || !account) throw new Error("Orphan proxy fix requires provider and account");
+	if (deps.leases?.findByProviderAccount(provider, account)) throw new Error(`Live lease still references ${provider}/${account}; not an orphan`);
+	if (deps.bindings) {
+		for (const b of deps.bindings.listGlobal()) {
+			const s = b.spec.source;
+			if (s.kind === "account" && s.provider === provider && s.name === account) throw new Error(`Global binding for ${b.client} still references ${provider}/${account}`);
+		}
+		for (const b of deps.bindings.listAllProjects()) {
+			const s = b.spec.source;
+			if (s.kind === "account" && s.provider === provider && s.name === account) throw new Error(`Project binding for ${b.client} still references ${provider}/${account}`);
+		}
+	}
+	await deps.proxy.stopProxy(provider, account);
+	return `Stopped orphan proxy ${provider}/${account}`;
+}
+async function fixDeleteTempOverlay(target) {
+	if (!isUnderRoot(target, tmpdir())) throw new Error(`Refusing to delete overlay outside system temp: ${target}`);
+	const base = target.split(/[/\\]/).pop() ?? "";
+	if (!/^anypick-(claude|codex|kiro|client)-/.test(base)) throw new Error(`Not a AnyPick-owned temp overlay: ${target}`);
+	const st = await stat(target);
+	const ageMs = Date.now() - st.mtimeMs;
+	if (ageMs < 3600 * 1e3) throw new Error(`Overlay too recent (${Math.round(ageMs / 1e3)}s); refusing delete`);
+	await rm(target, {
+		recursive: true,
+		force: true
+	});
+	return `Deleted temp overlay: ${target}`;
+}
+async function fixRepairPermissions(root) {
+	let fixed = 0;
+	await walkAnyPickOwned(root, async (path, isDir) => {
+		try {
+			await chmod(path, isDir ? 448 : 384);
+			fixed++;
+		} catch {}
+	});
+	return `Repaired permissions on ${fixed} AnyPick-owned path(s) under ${root}`;
+}
+async function fixRebuildCaches(root) {
+	const { writeFile, mkdir } = await import("node:fs/promises");
+	const cacheDir = join(root, "cache");
+	await mkdir(cacheDir, { recursive: true });
+	await writeFile(join(cacheDir, "doctor-rebuild.json"), `${JSON.stringify({ rebuiltAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)}\n`, { mode: 384 });
+	return `Rebuilt local cache metadata under ${cacheDir}`;
+}
+async function fixJournal(action, deps) {
+	if (!deps.journal) throw new Error("Journal store not available");
+	const id = String(action.params?.checkId ?? action.target).replace(/^journal:/, "");
+	if (!deps.journal.get(id)) return `Journal entry already gone: ${id}`;
+	const result = await recoverIncompleteOperations({ journal: deps.journal });
+	return `Journal recovery: recovered=${result.recovered} failed=${result.failed.length} refused=${result.refused.length}`;
+}
+//#endregion
+export { executeDoctorFix };
+
+//# sourceMappingURL=doctor-fixes.js.map

package/dist/core/doctor-fixes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-fixes.js","names":[],"sources":["../../src/core/doctor-fixes.ts"],"sourcesContent":["import { chmod, rm, stat } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport { pathExists } from '../utils/fs';\nimport { isProcessRunning, readPidFile } from '../utils/process';\nimport { isLockStale, readLockInfo } from '../utils/lock';\nimport { recoverIncompleteOperations } from './activation-executor';\nimport type { DoctorFixAction, DoctorServiceDeps } from './doctor-types';\nimport { isUnderRoot, walkAnyPickOwned } from './doctor-utils';\n\nexport async function executeDoctorFix(\n  action: DoctorFixAction,\n  root: string,\n  deps: DoctorServiceDeps,\n): Promise<string> {\n  switch (action.kind) {\n    case 'delete_stale_lock':\n      return fixDeleteStaleLock(action.target, root);\n    case 'delete_stale_pid':\n      return fixDeleteStalePid(action.target, root);\n    case 'stop_orphan_proxy':\n      return fixStopOrphanProxy(action, deps);\n    case 'delete_temp_overlay':\n      return fixDeleteTempOverlay(action.target);\n    case 'repair_permissions':\n      return fixRepairPermissions(root);\n    case 'rebuild_caches':\n      return fixRebuildCaches(root);\n    case 'complete_journal_rollback':\n      return fixJournal(action, deps);\n    default: {\n      const kind: never = action.kind;\n      throw new Error(`Unknown fix kind: ${String(kind)}`);\n    }\n  }\n}\n\nasync function fixDeleteStaleLock(target: string, root: string): Promise<string> {\n  if (!isUnderRoot(target, root)) {\n    throw new Error(`Refusing to delete lock outside anypick root: ${target}`);\n  }\n  if (!(await pathExists(target))) {\n    return `Lock already gone: ${target}`;\n  }\n  if (!target.endsWith('.lock')) {\n    throw new Error(`Not a lock file: ${target}`);\n  }\n  if (!(await isLockStale(target))) {\n    const info = await readLockInfo(target);\n    throw new Error(\n      `Lock still held by live process ${info?.pid ?? '?'}; refusing delete: ${target}`,\n    );\n  }\n  await rm(target, { force: true });\n  return `Deleted stale lock: ${target}`;\n}\n\nasync function fixDeleteStalePid(target: string, root: string): Promise<string> {\n  if (!isUnderRoot(target, root)) {\n    throw new Error(`Refusing to delete PID outside anypick root: ${target}`);\n  }\n  if (!target.endsWith('.pid') && !target.endsWith('proxy.pid')) {\n    throw new Error(`Not a PID record: ${target}`);\n  }\n  const pid = await readPidFile(target);\n  if (pid != null && isProcessRunning(pid)) {\n    throw new Error(`Process ${pid} still running; refusing to delete PID file ${target}`);\n  }\n  await rm(target, { force: true });\n  return `Deleted stale PID record: ${target}`;\n}\n\nasync function fixStopOrphanProxy(\n  action: DoctorFixAction,\n  deps: DoctorServiceDeps,\n): Promise<string> {\n  const provider = String(action.params?.provider ?? '');\n  const account = String(action.params?.account ?? '');\n  if (!provider || !account) {\n    throw new Error('Orphan proxy fix requires provider and account');\n  }\n\n  if (deps.leases?.findByProviderAccount(provider, account)) {\n    throw new Error(`Live lease still references ${provider}/${account}; not an orphan`);\n  }\n\n  if (deps.bindings) {\n    for (const b of deps.bindings.listGlobal()) {\n      const s = b.spec.source;\n      if (s.kind === 'account' && s.provider === provider && s.name === account) {\n        throw new Error(`Global binding for ${b.client} still references ${provider}/${account}`);\n      }\n    }\n    for (const b of deps.bindings.listAllProjects()) {\n      const s = b.spec.source;\n      if (s.kind === 'account' && s.provider === provider && s.name === account) {\n        throw new Error(`Project binding for ${b.client} still references ${provider}/${account}`);\n      }\n    }\n  }\n\n  await deps.proxy.stopProxy(provider, account);\n  return `Stopped orphan proxy ${provider}/${account}`;\n}\n\nasync function fixDeleteTempOverlay(target: string): Promise<string> {\n  const tmp = tmpdir();\n  if (!isUnderRoot(target, tmp)) {\n    throw new Error(`Refusing to delete overlay outside system temp: ${target}`);\n  }\n  const base = target.split(/[/\\\\]/).pop() ?? '';\n  if (!/^anypick-(claude|codex|kiro|client)-/.test(base)) {\n    throw new Error(`Not a AnyPick-owned temp overlay: ${target}`);\n  }\n  const st = await stat(target);\n  const ageMs = Date.now() - st.mtimeMs;\n  if (ageMs < 60 * 60 * 1000) {\n    throw new Error(`Overlay too recent (${Math.round(ageMs / 1000)}s); refusing delete`);\n  }\n  await rm(target, { recursive: true, force: true });\n  return `Deleted temp overlay: ${target}`;\n}\n\nasync function fixRepairPermissions(root: string): Promise<string> {\n  let fixed = 0;\n  await walkAnyPickOwned(root, async (path, isDir) => {\n    try {\n      await chmod(path, isDir ? 0o700 : 0o600);\n      fixed++;\n    } catch {\n      // ignore unchmodable\n    }\n  });\n  return `Repaired permissions on ${fixed} AnyPick-owned path(s) under ${root}`;\n}\n\nasync function fixRebuildCaches(root: string): Promise<string> {\n  const { writeFile, mkdir } = await import('node:fs/promises');\n  const cacheDir = join(root, 'cache');\n  await mkdir(cacheDir, { recursive: true });\n  await writeFile(\n    join(cacheDir, 'doctor-rebuild.json'),\n    `${JSON.stringify({ rebuiltAt: new Date().toISOString() }, null, 2)}\\n`,\n    { mode: 0o600 },\n  );\n  return `Rebuilt local cache metadata under ${cacheDir}`;\n}\n\nasync function fixJournal(action: DoctorFixAction, deps: DoctorServiceDeps): Promise<string> {\n  if (!deps.journal) {\n    throw new Error('Journal store not available');\n  }\n  const checkId = String(action.params?.checkId ?? action.target);\n  const id = checkId.replace(/^journal:/, '');\n  const entry = deps.journal.get(id);\n  if (!entry) {\n    return `Journal entry already gone: ${id}`;\n  }\n  const result = await recoverIncompleteOperations({ journal: deps.journal });\n  return `Journal recovery: recovered=${result.recovered} failed=${result.failed.length} refused=${result.refused.length}`;\n}\n"],"mappings":";;;;;;;;;AAUA,eAAsB,iBACpB,QACA,MACA,MACiB;CACjB,QAAQ,OAAO,MAAf;EACE,KAAK,qBACH,OAAO,mBAAmB,OAAO,QAAQ,IAAI;EAC/C,KAAK,oBACH,OAAO,kBAAkB,OAAO,QAAQ,IAAI;EAC9C,KAAK,qBACH,OAAO,mBAAmB,QAAQ,IAAI;EACxC,KAAK,uBACH,OAAO,qBAAqB,OAAO,MAAM;EAC3C,KAAK,sBACH,OAAO,qBAAqB,IAAI;EAClC,KAAK,kBACH,OAAO,iBAAiB,IAAI;EAC9B,KAAK,6BACH,OAAO,WAAW,QAAQ,IAAI;EAChC,SAAS;GACP,MAAM,OAAc,OAAO;GAC3B,MAAM,IAAI,MAAM,qBAAqB,OAAO,IAAI,GAAG;EACrD;CACF;AACF;AAEA,eAAe,mBAAmB,QAAgB,MAA+B;CAC/E,IAAI,CAAC,YAAY,QAAQ,IAAI,GAC3B,MAAM,IAAI,MAAM,iDAAiD,QAAQ;CAE3E,IAAI,CAAE,MAAM,WAAW,MAAM,GAC3B,OAAO,sBAAsB;CAE/B,IAAI,CAAC,OAAO,SAAS,OAAO,GAC1B,MAAM,IAAI,MAAM,oBAAoB,QAAQ;CAE9C,IAAI,CAAE,MAAM,YAAY,MAAM,GAAI;EAChC,MAAM,OAAO,MAAM,aAAa,MAAM;EACtC,MAAM,IAAI,MACR,mCAAmC,MAAM,OAAO,IAAI,qBAAqB,QAC3E;CACF;CACA,MAAM,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;CAChC,OAAO,uBAAuB;AAChC;AAEA,eAAe,kBAAkB,QAAgB,MAA+B;CAC9E,IAAI,CAAC,YAAY,QAAQ,IAAI,GAC3B,MAAM,IAAI,MAAM,gDAAgD,QAAQ;CAE1E,IAAI,CAAC,OAAO,SAAS,MAAM,KAAK,CAAC,OAAO,SAAS,WAAW,GAC1D,MAAM,IAAI,MAAM,qBAAqB,QAAQ;CAE/C,MAAM,MAAM,MAAM,YAAY,MAAM;CACpC,IAAI,OAAO,QAAQ,iBAAiB,GAAG,GACrC,MAAM,IAAI,MAAM,WAAW,IAAI,8CAA8C,QAAQ;CAEvF,MAAM,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;CAChC,OAAO,6BAA6B;AACtC;AAEA,eAAe,mBACb,QACA,MACiB;CACjB,MAAM,WAAW,OAAO,OAAO,QAAQ,YAAY,EAAE;CACrD,MAAM,UAAU,OAAO,OAAO,QAAQ,WAAW,EAAE;CACnD,IAAI,CAAC,YAAY,CAAC,SAChB,MAAM,IAAI,MAAM,gDAAgD;CAGlE,IAAI,KAAK,QAAQ,sBAAsB,UAAU,OAAO,GACtD,MAAM,IAAI,MAAM,+BAA+B,SAAS,GAAG,QAAQ,gBAAgB;CAGrF,IAAI,KAAK,UAAU;EACjB,KAAK,MAAM,KAAK,KAAK,SAAS,WAAW,GAAG;GAC1C,MAAM,IAAI,EAAE,KAAK;GACjB,IAAI,EAAE,SAAS,aAAa,EAAE,aAAa,YAAY,EAAE,SAAS,SAChE,MAAM,IAAI,MAAM,sBAAsB,EAAE,OAAO,oBAAoB,SAAS,GAAG,SAAS;EAE5F;EACA,KAAK,MAAM,KAAK,KAAK,SAAS,gBAAgB,GAAG;GAC/C,MAAM,IAAI,EAAE,KAAK;GACjB,IAAI,EAAE,SAAS,aAAa,EAAE,aAAa,YAAY,EAAE,SAAS,SAChE,MAAM,IAAI,MAAM,uBAAuB,EAAE,OAAO,oBAAoB,SAAS,GAAG,SAAS;EAE7F;CACF;CAEA,MAAM,KAAK,MAAM,UAAU,UAAU,OAAO;CAC5C,OAAO,wBAAwB,SAAS,GAAG;AAC7C;AAEA,eAAe,qBAAqB,QAAiC;CAEnE,IAAI,CAAC,YAAY,QADL,OACa,CAAG,GAC1B,MAAM,IAAI,MAAM,mDAAmD,QAAQ;CAE7E,MAAM,OAAO,OAAO,MAAM,OAAO,CAAC,CAAC,IAAI,KAAK;CAC5C,IAAI,CAAC,uCAAuC,KAAK,IAAI,GACnD,MAAM,IAAI,MAAM,qCAAqC,QAAQ;CAE/D,MAAM,KAAK,MAAM,KAAK,MAAM;CAC5B,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG;CAC9B,IAAI,QAAQ,OAAU,KACpB,MAAM,IAAI,MAAM,uBAAuB,KAAK,MAAM,QAAQ,GAAI,EAAE,oBAAoB;CAEtF,MAAM,GAAG,QAAQ;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CACjD,OAAO,yBAAyB;AAClC;AAEA,eAAe,qBAAqB,MAA+B;CACjE,IAAI,QAAQ;CACZ,MAAM,iBAAiB,MAAM,OAAO,MAAM,UAAU;EAClD,IAAI;GACF,MAAM,MAAM,MAAM,QAAQ,MAAQ,GAAK;GACvC;EACF,QAAQ,CAER;CACF,CAAC;CACD,OAAO,2BAA2B,MAAM,+BAA+B;AACzE;AAEA,eAAe,iBAAiB,MAA+B;CAC7D,MAAM,EAAE,WAAW,UAAU,MAAM,OAAO;CAC1C,MAAM,WAAW,KAAK,MAAM,OAAO;CACnC,MAAM,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;CACzC,MAAM,UACJ,KAAK,UAAU,qBAAqB,GACpC,GAAG,KAAK,UAAU,EAAE,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY,EAAE,GAAG,MAAM,CAAC,EAAE,KACpE,EAAE,MAAM,IAAM,CAChB;CACA,OAAO,sCAAsC;AAC/C;AAEA,eAAe,WAAW,QAAyB,MAA0C;CAC3F,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,KADU,OAAO,OAAO,QAAQ,WAAW,OAAO,MAC7C,CAAA,CAAQ,QAAQ,aAAa,EAAE;CAE1C,IAAI,CADU,KAAK,QAAQ,IAAI,EAC1B,GACH,OAAO,+BAA+B;CAExC,MAAM,SAAS,MAAM,4BAA4B,EAAE,SAAS,KAAK,QAAQ,CAAC;CAC1E,OAAO,+BAA+B,OAAO,UAAU,UAAU,OAAO,OAAO,OAAO,WAAW,OAAO,QAAQ;AAClH"}

package/dist/core/doctor-format.d.ts

@@ -0,0 +1,10 @@
+import type { DoctorFixPlan } from './doctor-types.js';
+/**
+ * Format forbidden findings for human output (spec §18.5 example).
+ */
+export declare function formatForbiddenManual(item: DoctorFixPlan['manual'][number]): string;
+/**
+ * Re-plan orphan proxy actions with provider/account params from check ids.
+ */
+export declare function enrichFixPlan(plan: DoctorFixPlan): DoctorFixPlan;
+//# sourceMappingURL=doctor-format.d.ts.map

package/dist/core/doctor-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-format.d.ts","sourceRoot":"","sources":["../../src/core/doctor-format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CASnF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CA4BhE"}

package/dist/core/doctor-format.js

@@ -0,0 +1,45 @@
+//#region src/core/doctor-format.ts
+/**
+* Format forbidden findings for human output (spec §18.5 example).
+*/
+function formatForbiddenManual(item) {
+	const lines = [
+		item.message,
+		"",
+		"Doctor will not perform this change automatically.",
+		""
+	];
+	if (item.suggestions.length) {
+		lines.push("Review / fix manually:");
+		for (const s of item.suggestions) lines.push(`  ${s}`);
+	}
+	return lines.join("\n");
+}
+/**
+* Re-plan orphan proxy actions with provider/account params from check ids.
+*/
+function enrichFixPlan(plan) {
+	return {
+		...plan,
+		actions: plan.actions.map((a) => {
+			if (a.kind === "stop_orphan_proxy") {
+				const m = a.id.match(/orphan-proxy:([^/]+)\/(.+)$/);
+				if (m) return {
+					...a,
+					params: {
+						...a.params,
+						provider: m[1],
+						account: m[2]
+					}
+				};
+			}
+			if (a.kind === "delete_stale_pid" && a.target.endsWith("proxy.pid")) return a;
+			if (a.kind === "delete_temp_overlay" || a.kind === "delete_stale_lock" || a.kind === "delete_stale_pid") return a;
+			return a;
+		})
+	};
+}
+//#endregion
+export { enrichFixPlan, formatForbiddenManual };
+
+//# sourceMappingURL=doctor-format.js.map

package/dist/core/doctor-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-format.js","names":[],"sources":["../../src/core/doctor-format.ts"],"sourcesContent":["import type { DoctorFixPlan } from './doctor-types';\n\n/**\n * Format forbidden findings for human output (spec §18.5 example).\n */\nexport function formatForbiddenManual(item: DoctorFixPlan['manual'][number]): string {\n  const lines = [item.message, '', 'Doctor will not perform this change automatically.', ''];\n  if (item.suggestions.length) {\n    lines.push('Review / fix manually:');\n    for (const s of item.suggestions) {\n      lines.push(`  ${s}`);\n    }\n  }\n  return lines.join('\\n');\n}\n\n/**\n * Re-plan orphan proxy actions with provider/account params from check ids.\n */\nexport function enrichFixPlan(plan: DoctorFixPlan): DoctorFixPlan {\n  return {\n    ...plan,\n    actions: plan.actions.map((a) => {\n      if (a.kind === 'stop_orphan_proxy') {\n        // id: stop_orphan_proxy:orphan-proxy:provider/account\n        const m = a.id.match(/orphan-proxy:([^/]+)\\/(.+)$/);\n        if (m) {\n          return {\n            ...a,\n            params: { ...a.params, provider: m[1], account: m[2] },\n          };\n        }\n      }\n      if (a.kind === 'delete_stale_pid' && a.target.endsWith('proxy.pid')) {\n        return a;\n      }\n      if (\n        a.kind === 'delete_temp_overlay' ||\n        a.kind === 'delete_stale_lock' ||\n        a.kind === 'delete_stale_pid'\n      ) {\n        // ensure target is the detail path when available\n        return a;\n      }\n      return a;\n    }),\n  };\n}\n"],"mappings":";;;;AAKA,SAAgB,sBAAsB,MAA+C;CACnF,MAAM,QAAQ;EAAC,KAAK;EAAS;EAAI;EAAsD;CAAE;CACzF,IAAI,KAAK,YAAY,QAAQ;EAC3B,MAAM,KAAK,wBAAwB;EACnC,KAAK,MAAM,KAAK,KAAK,aACnB,MAAM,KAAK,KAAK,GAAG;CAEvB;CACA,OAAO,MAAM,KAAK,IAAI;AACxB;;;;AAKA,SAAgB,cAAc,MAAoC;CAChE,OAAO;EACL,GAAG;EACH,SAAS,KAAK,QAAQ,KAAK,MAAM;GAC/B,IAAI,EAAE,SAAS,qBAAqB;IAElC,MAAM,IAAI,EAAE,GAAG,MAAM,6BAA6B;IAClD,IAAI,GACF,OAAO;KACL,GAAG;KACH,QAAQ;MAAE,GAAG,EAAE;MAAQ,UAAU,EAAE;MAAI,SAAS,EAAE;KAAG;IACvD;GAEJ;GACA,IAAI,EAAE,SAAS,sBAAsB,EAAE,OAAO,SAAS,WAAW,GAChE,OAAO;GAET,IACE,EAAE,SAAS,yBACX,EAAE,SAAS,uBACX,EAAE,SAAS,oBAGX,OAAO;GAET,OAAO;EACT,CAAC;CACH;AACF"}

package/dist/core/doctor-report.d.ts

@@ -0,0 +1,3 @@
+import type { DoctorReport, DoctorServiceDeps } from './doctor-types.js';
+export declare function runDoctorReport(deps: DoctorServiceDeps, target?: string): Promise<DoctorReport>;
+//# sourceMappingURL=doctor-report.d.ts.map

package/dist/core/doctor-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-report.d.ts","sourceRoot":"","sources":["../../src/core/doctor-report.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAe,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnF,wBAAsB,eAAe,CACnC,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CA8NvB"}

package/dist/core/doctor-report.js

@@ -0,0 +1,174 @@
+import { pathExists } from "../utils/fs.js";
+import { anypickDbPath, getAnyPickRoot } from "./paths.js";
+import { displayRef } from "./refs.js";
+import { scanPermissions, scanProxyPids, scanStaleLocks, scanTempOverlays } from "./doctor-scan.js";
+import { mkdir } from "node:fs/promises";
+//#region src/core/doctor-report.ts
+async function runDoctorReport(deps, target) {
+	const root = getAnyPickRoot(deps.root);
+	const checks = [];
+	const filter = target?.trim().toLowerCase();
+	const push = (c) => {
+		if (filter && !c.id.toLowerCase().includes(filter) && filter !== "all") {
+			if (!c.message.toLowerCase().includes(filter) && !c.id.toLowerCase().startsWith(filter)) return;
+		}
+		checks.push(c);
+	};
+	push({
+		id: "root",
+		ok: true,
+		message: `Data root: ${root}`
+	});
+	const dbFile = anypickDbPath(root);
+	const dbExists = await pathExists(dbFile);
+	push({
+		id: "sqlite",
+		ok: dbExists,
+		message: dbExists ? `SQLite: ${dbFile}` : `SQLite missing (expected ${dbFile})`
+	});
+	for (const p of deps.accounts.listProviders()) try {
+		const live = await p.detectLive();
+		push({
+			id: `auth:${p.id}`,
+			ok: true,
+			message: `${p.id}: ${live.present ? "live auth present" : "no live auth"}`,
+			detail: live.identity
+		});
+	} catch (err) {
+		push({
+			id: `auth:${p.id}`,
+			ok: false,
+			message: `${p.id}: detectLive failed`,
+			detail: err instanceof Error ? err.message : String(err),
+			forbidden: "modify_native_auth",
+			suggestions: [`anypick current ${deps.clients.has(p.id) ? p.id : ""}`.trim(), `anypick add account ${p.id} --current --name <name>`]
+		});
+	}
+	push({
+		id: "catalog",
+		ok: deps.catalog.list().length > 0,
+		message: `Catalog providers: ${deps.catalog.ids().join(", ") || "(none)"}`
+	});
+	const profiles = await deps.profiles.list();
+	push({
+		id: "profiles",
+		ok: true,
+		message: `Gateways (profiles): ${profiles.length}`,
+		detail: profiles.map((p) => p.meta.name).join(", ") || void 0
+	});
+	for (const profile of profiles) {
+		if (!deps.catalog.has(profile.meta.provider)) push({
+			id: `profile:${profile.meta.name}:provider`,
+			ok: false,
+			message: `Gateway "${profile.meta.name}" references unknown provider "${profile.meta.provider}"`,
+			forbidden: "change_gateway_endpoint",
+			suggestions: [`anypick edit gateway/${profile.meta.name}`, `anypick remove @preset or anypick list gateways`]
+		});
+		if (!profile.secrets.apiKey) push({
+			id: `profile:${profile.meta.name}:key`,
+			ok: true,
+			message: `Gateway "${profile.meta.name}" has no API key (ok if proxy ignores it)`
+		});
+	}
+	for (const c of deps.clients.list()) try {
+		const inspect = await c.inspect();
+		const state = await deps.runtime.which(c.id);
+		const binding = deps.bindings?.getGlobal(c.id);
+		push({
+			id: `client:${c.id}`,
+			ok: true,
+			message: binding ? `${c.id}: binding ${displayRef(binding.spec.source)}` : `${c.id}: mode=${state?.mode ?? "none"}${state?.profileName ? ` profile=${state.profileName}` : ""}`,
+			detail: inspect.summary
+		});
+		if (inspect.issues?.length) for (const issue of inspect.issues) push({
+			id: `client:${c.id}:issue`,
+			ok: false,
+			message: `${c.id}: ${issue}`,
+			forbidden: "modify_unmanaged_client_config",
+			suggestions: [`anypick current ${c.id} --verbose`, `anypick reset ${c.id}`]
+		});
+	} catch (err) {
+		push({
+			id: `client:${c.id}`,
+			ok: false,
+			message: `${c.id}: inspect failed`,
+			detail: err instanceof Error ? err.message : String(err)
+		});
+	}
+	await scanProxyPids(root, deps, push);
+	await scanStaleLocks(root, push);
+	if (deps.journal) {
+		const incomplete = deps.journal.listIncomplete();
+		for (const entry of incomplete) push({
+			id: `journal:${entry.id}`,
+			ok: false,
+			message: `Incomplete operation journal: ${entry.type} (${entry.state})`,
+			detail: entry.affectedResources.join(", "),
+			fixable: "complete_journal_rollback"
+		});
+	}
+	if (deps.bindings) for (const pb of deps.bindings.listAllProjects()) {
+		const src = pb.spec.source;
+		if (src.kind === "gateway") {
+			if (!new Set((await deps.profiles.list()).map((p) => p.meta.name)).has(src.name)) push({
+				id: `project-binding:${pb.projectRoot}:${pb.client}`,
+				ok: false,
+				message: `Project binding ${pb.client} → gateway/${src.name} references missing gateway`,
+				forbidden: "mutate_binding",
+				suggestions: [`anypick unlink ${pb.client}`, `anypick link ${pb.client} --with <source>`]
+			});
+		} else if (src.kind === "account") {
+			if (!await deps.accounts.get(src.provider, src.name)) push({
+				id: `project-binding:${pb.projectRoot}:${pb.client}`,
+				ok: false,
+				message: `Project binding ${pb.client} → ${src.provider}/${src.name} references missing account`,
+				forbidden: "mutate_binding",
+				suggestions: [`anypick unlink ${pb.client}`, `anypick add account ${src.provider} --current --name ${src.name}`]
+			});
+		}
+	}
+	if (deps.plugins) {
+		const { loadedNames, failures } = deps.plugins;
+		const records = deps.plugins.installed();
+		const enabled = records.filter((r) => r.enabled);
+		push({
+			id: "plugins",
+			ok: true,
+			message: `Plugins: ${loadedNames.length} loaded, ${records.length - enabled.length} disabled`,
+			detail: loadedNames.length > 0 ? loadedNames.join(", ") : void 0
+		});
+		for (const f of failures) push({
+			id: `plugin:${f.name}`,
+			ok: false,
+			message: f.untrusted ? `Plugin ${f.name} was refused: its code changed since you trusted it` : `Plugin ${f.name} failed to load`,
+			detail: f.reason,
+			suggestions: f.untrusted ? [`anypick plugin trust ${f.name}`, `anypick plugin remove ${f.name}`] : [`anypick plugin disable ${f.name}`]
+		});
+	}
+	await scanTempOverlays(push);
+	await scanPermissions(root, push);
+	try {
+		await mkdir(root, { recursive: true });
+		push({
+			id: "writable",
+			ok: await pathExists(root),
+			message: "Data root is writable"
+		});
+	} catch (err) {
+		push({
+			id: "writable",
+			ok: false,
+			message: "Data root is not writable",
+			detail: err instanceof Error ? err.message : String(err)
+		});
+	}
+	return {
+		ok: checks.every((c) => c.ok),
+		root,
+		checks
+	};
+}
+//#endregion
+export { runDoctorReport };
+
+//# sourceMappingURL=doctor-report.js.map

package/dist/core/doctor-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-report.js","names":[],"sources":["../../src/core/doctor-report.ts"],"sourcesContent":["import { mkdir } from 'node:fs/promises';\nimport { getAnyPickRoot, anypickDbPath } from './paths';\nimport { pathExists } from '../utils/fs';\nimport { displayRef } from './refs';\nimport { scanPermissions, scanProxyPids, scanStaleLocks, scanTempOverlays } from './doctor-scan';\nimport type { DoctorCheck, DoctorReport, DoctorServiceDeps } from './doctor-types';\n\nexport async function runDoctorReport(\n  deps: DoctorServiceDeps,\n  target?: string,\n): Promise<DoctorReport> {\n  const root = getAnyPickRoot(deps.root);\n  const checks: DoctorCheck[] = [];\n  const filter = target?.trim().toLowerCase();\n\n  const push = (c: DoctorCheck) => {\n    if (filter && !c.id.toLowerCase().includes(filter) && filter !== 'all') {\n      if (!c.message.toLowerCase().includes(filter) && !c.id.toLowerCase().startsWith(filter)) {\n        return;\n      }\n    }\n    checks.push(c);\n  };\n\n  push({\n    id: 'root',\n    ok: true,\n    message: `Data root: ${root}`,\n  });\n\n  const dbFile = anypickDbPath(root);\n  const dbExists = await pathExists(dbFile);\n  push({\n    id: 'sqlite',\n    ok: dbExists,\n    message: dbExists ? `SQLite: ${dbFile}` : `SQLite missing (expected ${dbFile})`,\n  });\n\n  for (const p of deps.accounts.listProviders()) {\n    try {\n      const live = await p.detectLive();\n      push({\n        id: `auth:${p.id}`,\n        ok: true,\n        message: `${p.id}: ${live.present ? 'live auth present' : 'no live auth'}`,\n        detail: live.identity,\n      });\n    } catch (err) {\n      push({\n        id: `auth:${p.id}`,\n        ok: false,\n        message: `${p.id}: detectLive failed`,\n        detail: err instanceof Error ? err.message : String(err),\n        forbidden: 'modify_native_auth',\n        suggestions: [\n          `anypick current ${deps.clients.has(p.id) ? p.id : ''}`.trim(),\n          `anypick add account ${p.id} --current --name <name>`,\n        ],\n      });\n    }\n  }\n\n  push({\n    id: 'catalog',\n    ok: deps.catalog.list().length > 0,\n    message: `Catalog providers: ${deps.catalog.ids().join(', ') || '(none)'}`,\n  });\n\n  const profiles = await deps.profiles.list();\n  push({\n    id: 'profiles',\n    ok: true,\n    message: `Gateways (profiles): ${profiles.length}`,\n    detail: profiles.map((p) => p.meta.name).join(', ') || undefined,\n  });\n\n  for (const profile of profiles) {\n    if (!deps.catalog.has(profile.meta.provider)) {\n      push({\n        id: `profile:${profile.meta.name}:provider`,\n        ok: false,\n        message: `Gateway \"${profile.meta.name}\" references unknown provider \"${profile.meta.provider}\"`,\n        forbidden: 'change_gateway_endpoint',\n        suggestions: [\n          `anypick edit gateway/${profile.meta.name}`,\n          `anypick remove @preset or anypick list gateways`,\n        ],\n      });\n    }\n    if (!profile.secrets.apiKey) {\n      push({\n        id: `profile:${profile.meta.name}:key`,\n        ok: true,\n        message: `Gateway \"${profile.meta.name}\" has no API key (ok if proxy ignores it)`,\n      });\n    }\n  }\n\n  for (const c of deps.clients.list()) {\n    try {\n      const inspect = await c.inspect();\n      const state = await deps.runtime.which(c.id);\n      const binding = deps.bindings?.getGlobal(c.id);\n      push({\n        id: `client:${c.id}`,\n        ok: true,\n        message: binding\n          ? `${c.id}: binding ${displayRef(binding.spec.source)}`\n          : `${c.id}: mode=${state?.mode ?? 'none'}${state?.profileName ? ` profile=${state.profileName}` : ''}`,\n        detail: inspect.summary,\n      });\n      if (inspect.issues?.length) {\n        for (const issue of inspect.issues) {\n          push({\n            id: `client:${c.id}:issue`,\n            ok: false,\n            message: `${c.id}: ${issue}`,\n            forbidden: 'modify_unmanaged_client_config',\n            suggestions: [`anypick current ${c.id} --verbose`, `anypick reset ${c.id}`],\n          });\n        }\n      }\n    } catch (err) {\n      push({\n        id: `client:${c.id}`,\n        ok: false,\n        message: `${c.id}: inspect failed`,\n        detail: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  await scanProxyPids(root, deps, push);\n  await scanStaleLocks(root, push);\n\n  if (deps.journal) {\n    const incomplete = deps.journal.listIncomplete();\n    for (const entry of incomplete) {\n      push({\n        id: `journal:${entry.id}`,\n        ok: false,\n        message: `Incomplete operation journal: ${entry.type} (${entry.state})`,\n        detail: entry.affectedResources.join(', '),\n        fixable: 'complete_journal_rollback',\n      });\n    }\n  }\n\n  if (deps.bindings) {\n    for (const pb of deps.bindings.listAllProjects()) {\n      const src = pb.spec.source;\n      if (src.kind === 'gateway') {\n        const names = new Set((await deps.profiles.list()).map((p) => p.meta.name));\n        if (!names.has(src.name)) {\n          push({\n            id: `project-binding:${pb.projectRoot}:${pb.client}`,\n            ok: false,\n            message: `Project binding ${pb.client} → gateway/${src.name} references missing gateway`,\n            forbidden: 'mutate_binding',\n            suggestions: [\n              `anypick unlink ${pb.client}`,\n              `anypick link ${pb.client} --with <source>`,\n            ],\n          });\n        }\n      } else if (src.kind === 'account') {\n        const acc = await deps.accounts.get(src.provider, src.name);\n        if (!acc) {\n          push({\n            id: `project-binding:${pb.projectRoot}:${pb.client}`,\n            ok: false,\n            message: `Project binding ${pb.client} → ${src.provider}/${src.name} references missing account`,\n            forbidden: 'mutate_binding',\n            suggestions: [\n              `anypick unlink ${pb.client}`,\n              `anypick add account ${src.provider} --current --name ${src.name}`,\n            ],\n          });\n        }\n      }\n    }\n  }\n\n  if (deps.plugins) {\n    const { loadedNames, failures } = deps.plugins;\n    const records = deps.plugins.installed();\n    const enabled = records.filter((r) => r.enabled);\n    push({\n      id: 'plugins',\n      ok: true,\n      message: `Plugins: ${loadedNames.length} loaded, ${records.length - enabled.length} disabled`,\n      detail: loadedNames.length > 0 ? loadedNames.join(', ') : undefined,\n    });\n    for (const f of failures) {\n      push({\n        id: `plugin:${f.name}`,\n        ok: false,\n        message: f.untrusted\n          ? `Plugin ${f.name} was refused: its code changed since you trusted it`\n          : `Plugin ${f.name} failed to load`,\n        detail: f.reason,\n        suggestions: f.untrusted\n          ? [`anypick plugin trust ${f.name}`, `anypick plugin remove ${f.name}`]\n          : [`anypick plugin disable ${f.name}`],\n      });\n    }\n  }\n\n  await scanTempOverlays(push);\n  await scanPermissions(root, push);\n\n  try {\n    await mkdir(root, { recursive: true });\n    push({\n      id: 'writable',\n      ok: await pathExists(root),\n      message: 'Data root is writable',\n    });\n  } catch (err) {\n    push({\n      id: 'writable',\n      ok: false,\n      message: 'Data root is not writable',\n      detail: err instanceof Error ? err.message : String(err),\n    });\n  }\n\n  return {\n    ok: checks.every((c) => c.ok),\n    root,\n    checks,\n  };\n}\n"],"mappings":";;;;;;AAOA,eAAsB,gBACpB,MACA,QACuB;CACvB,MAAM,OAAO,eAAe,KAAK,IAAI;CACrC,MAAM,SAAwB,CAAC;CAC/B,MAAM,SAAS,QAAQ,KAAK,CAAC,CAAC,YAAY;CAE1C,MAAM,QAAQ,MAAmB;EAC/B,IAAI,UAAU,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,SAAS,MAAM,KAAK,WAAW;OAC3D,CAAC,EAAE,QAAQ,YAAY,CAAC,CAAC,SAAS,MAAM,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,WAAW,MAAM,GACpF;EAAA;EAGJ,OAAO,KAAK,CAAC;CACf;CAEA,KAAK;EACH,IAAI;EACJ,IAAI;EACJ,SAAS,cAAc;CACzB,CAAC;CAED,MAAM,SAAS,cAAc,IAAI;CACjC,MAAM,WAAW,MAAM,WAAW,MAAM;CACxC,KAAK;EACH,IAAI;EACJ,IAAI;EACJ,SAAS,WAAW,WAAW,WAAW,4BAA4B,OAAO;CAC/E,CAAC;CAED,KAAK,MAAM,KAAK,KAAK,SAAS,cAAc,GAC1C,IAAI;EACF,MAAM,OAAO,MAAM,EAAE,WAAW;EAChC,KAAK;GACH,IAAI,QAAQ,EAAE;GACd,IAAI;GACJ,SAAS,GAAG,EAAE,GAAG,IAAI,KAAK,UAAU,sBAAsB;GAC1D,QAAQ,KAAK;EACf,CAAC;CACH,SAAS,KAAK;EACZ,KAAK;GACH,IAAI,QAAQ,EAAE;GACd,IAAI;GACJ,SAAS,GAAG,EAAE,GAAG;GACjB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACvD,WAAW;GACX,aAAa,CACX,mBAAmB,KAAK,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,KAAK,KAAK,GAC7D,uBAAuB,EAAE,GAAG,yBAC9B;EACF,CAAC;CACH;CAGF,KAAK;EACH,IAAI;EACJ,IAAI,KAAK,QAAQ,KAAK,CAAC,CAAC,SAAS;EACjC,SAAS,sBAAsB,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK;CAClE,CAAC;CAED,MAAM,WAAW,MAAM,KAAK,SAAS,KAAK;CAC1C,KAAK;EACH,IAAI;EACJ,IAAI;EACJ,SAAS,wBAAwB,SAAS;EAC1C,QAAQ,SAAS,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,KAAA;CACzD,CAAC;CAED,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,GACzC,KAAK;GACH,IAAI,WAAW,QAAQ,KAAK,KAAK;GACjC,IAAI;GACJ,SAAS,YAAY,QAAQ,KAAK,KAAK,iCAAiC,QAAQ,KAAK,SAAS;GAC9F,WAAW;GACX,aAAa,CACX,wBAAwB,QAAQ,KAAK,QACrC,iDACF;EACF,CAAC;EAEH,IAAI,CAAC,QAAQ,QAAQ,QACnB,KAAK;GACH,IAAI,WAAW,QAAQ,KAAK,KAAK;GACjC,IAAI;GACJ,SAAS,YAAY,QAAQ,KAAK,KAAK;EACzC,CAAC;CAEL;CAEA,KAAK,MAAM,KAAK,KAAK,QAAQ,KAAK,GAChC,IAAI;EACF,MAAM,UAAU,MAAM,EAAE,QAAQ;EAChC,MAAM,QAAQ,MAAM,KAAK,QAAQ,MAAM,EAAE,EAAE;EAC3C,MAAM,UAAU,KAAK,UAAU,UAAU,EAAE,EAAE;EAC7C,KAAK;GACH,IAAI,UAAU,EAAE;GAChB,IAAI;GACJ,SAAS,UACL,GAAG,EAAE,GAAG,YAAY,WAAW,QAAQ,KAAK,MAAM,MAClD,GAAG,EAAE,GAAG,SAAS,OAAO,QAAQ,SAAS,OAAO,cAAc,YAAY,MAAM,gBAAgB;GACpG,QAAQ,QAAQ;EAClB,CAAC;EACD,IAAI,QAAQ,QAAQ,QAClB,KAAK,MAAM,SAAS,QAAQ,QAC1B,KAAK;GACH,IAAI,UAAU,EAAE,GAAG;GACnB,IAAI;GACJ,SAAS,GAAG,EAAE,GAAG,IAAI;GACrB,WAAW;GACX,aAAa,CAAC,mBAAmB,EAAE,GAAG,aAAa,iBAAiB,EAAE,IAAI;EAC5E,CAAC;CAGP,SAAS,KAAK;EACZ,KAAK;GACH,IAAI,UAAU,EAAE;GAChB,IAAI;GACJ,SAAS,GAAG,EAAE,GAAG;GACjB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EACzD,CAAC;CACH;CAGF,MAAM,cAAc,MAAM,MAAM,IAAI;CACpC,MAAM,eAAe,MAAM,IAAI;CAE/B,IAAI,KAAK,SAAS;EAChB,MAAM,aAAa,KAAK,QAAQ,eAAe;EAC/C,KAAK,MAAM,SAAS,YAClB,KAAK;GACH,IAAI,WAAW,MAAM;GACrB,IAAI;GACJ,SAAS,iCAAiC,MAAM,KAAK,IAAI,MAAM,MAAM;GACrE,QAAQ,MAAM,kBAAkB,KAAK,IAAI;GACzC,SAAS;EACX,CAAC;CAEL;CAEA,IAAI,KAAK,UACP,KAAK,MAAM,MAAM,KAAK,SAAS,gBAAgB,GAAG;EAChD,MAAM,MAAM,GAAG,KAAK;EACpB,IAAI,IAAI,SAAS;OAEX,CAAC,IADa,KAAK,MAAM,KAAK,SAAS,KAAK,EAAA,CAAG,KAAK,MAAM,EAAE,KAAK,IAAI,CACpE,CAAA,CAAM,IAAI,IAAI,IAAI,GACrB,KAAK;IACH,IAAI,mBAAmB,GAAG,YAAY,GAAG,GAAG;IAC5C,IAAI;IACJ,SAAS,mBAAmB,GAAG,OAAO,aAAa,IAAI,KAAK;IAC5D,WAAW;IACX,aAAa,CACX,kBAAkB,GAAG,UACrB,gBAAgB,GAAG,OAAO,iBAC5B;GACF,CAAC;EAAA,OAEE,IAAI,IAAI,SAAS;OAElB,CAAC,MADa,KAAK,SAAS,IAAI,IAAI,UAAU,IAAI,IAAI,GAExD,KAAK;IACH,IAAI,mBAAmB,GAAG,YAAY,GAAG,GAAG;IAC5C,IAAI;IACJ,SAAS,mBAAmB,GAAG,OAAO,KAAK,IAAI,SAAS,GAAG,IAAI,KAAK;IACpE,WAAW;IACX,aAAa,CACX,kBAAkB,GAAG,UACrB,uBAAuB,IAAI,SAAS,oBAAoB,IAAI,MAC9D;GACF,CAAC;EAAA;CAGP;CAGF,IAAI,KAAK,SAAS;EAChB,MAAM,EAAE,aAAa,aAAa,KAAK;EACvC,MAAM,UAAU,KAAK,QAAQ,UAAU;EACvC,MAAM,UAAU,QAAQ,QAAQ,MAAM,EAAE,OAAO;EAC/C,KAAK;GACH,IAAI;GACJ,IAAI;GACJ,SAAS,YAAY,YAAY,OAAO,WAAW,QAAQ,SAAS,QAAQ,OAAO;GACnF,QAAQ,YAAY,SAAS,IAAI,YAAY,KAAK,IAAI,IAAI,KAAA;EAC5D,CAAC;EACD,KAAK,MAAM,KAAK,UACd,KAAK;GACH,IAAI,UAAU,EAAE;GAChB,IAAI;GACJ,SAAS,EAAE,YACP,UAAU,EAAE,KAAK,uDACjB,UAAU,EAAE,KAAK;GACrB,QAAQ,EAAE;GACV,aAAa,EAAE,YACX,CAAC,wBAAwB,EAAE,QAAQ,yBAAyB,EAAE,MAAM,IACpE,CAAC,0BAA0B,EAAE,MAAM;EACzC,CAAC;CAEL;CAEA,MAAM,iBAAiB,IAAI;CAC3B,MAAM,gBAAgB,MAAM,IAAI;CAEhC,IAAI;EACF,MAAM,MAAM,MAAM,EAAE,WAAW,KAAK,CAAC;EACrC,KAAK;GACH,IAAI;GACJ,IAAI,MAAM,WAAW,IAAI;GACzB,SAAS;EACX,CAAC;CACH,SAAS,KAAK;EACZ,KAAK;GACH,IAAI;GACJ,IAAI;GACJ,SAAS;GACT,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EACzD,CAAC;CACH;CAEA,OAAO;EACL,IAAI,OAAO,OAAO,MAAM,EAAE,EAAE;EAC5B;EACA;CACF;AACF"}

package/dist/core/doctor-scan.d.ts

@@ -0,0 +1,7 @@
+import type { DoctorCheck, DoctorServiceDeps } from './doctor-types.js';
+export type DoctorPush = (c: DoctorCheck) => void;
+export declare function scanProxyPids(root: string, deps: DoctorServiceDeps, push: DoctorPush): Promise<void>;
+export declare function scanStaleLocks(root: string, push: DoctorPush): Promise<void>;
+export declare function scanTempOverlays(push: DoctorPush): Promise<void>;
+export declare function scanPermissions(root: string, push: DoctorPush): Promise<void>;
+//# sourceMappingURL=doctor-scan.d.ts.map

package/dist/core/doctor-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-scan.d.ts","sourceRoot":"","sources":["../../src/core/doctor-scan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGrE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;AAElD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAmCf;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBlF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCtE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCnF"}

package/dist/core/doctor-scan.js

@@ -0,0 +1,139 @@
+import { pathExists } from "../utils/fs.js";
+import { isProcessRunning, readPidFile } from "../utils/process/pid.js";
+import { isLockStale, readLockInfo } from "../utils/lock.js";
+import { walkAnyPickOwned } from "./doctor-utils.js";
+import { join, relative } from "node:path";
+import { readdir, stat } from "node:fs/promises";
+import { tmpdir } from "node:os";
+//#region src/core/doctor-scan.ts
+async function scanProxyPids(root, deps, push) {
+	if (!deps.accountStore) {
+		const providersRoot = join(root, "providers");
+		if (!await pathExists(providersRoot)) return;
+		try {
+			const providers = await readdir(providersRoot);
+			for (const provider of providers) {
+				const accountsRoot = join(providersRoot, provider, "accounts");
+				if (!await pathExists(accountsRoot)) continue;
+				const accounts = await readdir(accountsRoot);
+				for (const account of accounts) await checkPidFile(join(accountsRoot, account, "runtime", "proxy.pid"), provider, account, deps, push);
+			}
+		} catch {}
+		return;
+	}
+	for (const p of deps.accounts.listProviders()) {
+		if (typeof p.startProxy !== "function") continue;
+		const accounts = await deps.accountStore.listAccounts(p.id);
+		for (const a of accounts) await checkPidFile(deps.accountStore.pidPath(p.id, a.meta.name), p.id, a.meta.name, deps, push);
+	}
+}
+async function scanStaleLocks(root, push) {
+	await walkAnyPickOwned(root, async (path, isDir) => {
+		if (isDir || !path.endsWith(".lock")) return;
+		if (!await isLockStale(path)) return;
+		const info = await readLockInfo(path);
+		push({
+			id: `stale-lock:${relative(root, path)}`,
+			ok: false,
+			message: info ? `Stale AnyPick lock (dead pid ${info.pid}): ${relative(root, path)}` : `Stale or corrupt AnyPick lock: ${relative(root, path)}`,
+			detail: path,
+			fixable: "delete_stale_lock"
+		});
+	});
+}
+async function scanTempOverlays(push) {
+	const tmp = tmpdir();
+	try {
+		const entries = await readdir(tmp);
+		for (const name of entries) {
+			if (!/^anypick-(claude|codex|kiro|client)-/.test(name)) continue;
+			const full = join(tmp, name);
+			try {
+				const st = await stat(full);
+				if (!st.isDirectory()) continue;
+				if (Date.now() - st.mtimeMs < 3600 * 1e3) continue;
+				push({
+					id: `overlay:${name}`,
+					ok: false,
+					message: `Leftover temporary client overlay: ${name}`,
+					detail: full,
+					fixable: "delete_temp_overlay"
+				});
+			} catch {}
+		}
+	} catch {}
+}
+async function scanPermissions(root, push) {
+	let bad = 0;
+	try {
+		await walkAnyPickOwned(root, async (path, isDir) => {
+			try {
+				const mode = (await stat(path)).mode & 511;
+				if (isDir) {
+					if (mode & 18) bad++;
+				} else if (mode & 63) bad++;
+			} catch {}
+		});
+	} catch {}
+	if (bad > 0) push({
+		id: "permissions",
+		ok: false,
+		message: `${bad} AnyPick-owned path(s) have overly permissive mode`,
+		detail: root,
+		fixable: "repair_permissions"
+	});
+	else push({
+		id: "permissions",
+		ok: true,
+		message: "AnyPick-owned permissions look restrictive"
+	});
+}
+async function checkPidFile(pidPath, provider, account, deps, push) {
+	if (!await pathExists(pidPath)) return;
+	const pid = await readPidFile(pidPath);
+	if (pid == null) {
+		push({
+			id: `pid:${provider}/${account}`,
+			ok: false,
+			message: `Corrupt proxy PID file for ${provider}/${account}`,
+			detail: pidPath,
+			fixable: "delete_stale_pid"
+		});
+		return;
+	}
+	if (!isProcessRunning(pid)) {
+		push({
+			id: `pid:${provider}/${account}`,
+			ok: false,
+			message: `Stale proxy PID ${pid} for ${provider}/${account}`,
+			detail: pidPath,
+			fixable: "delete_stale_pid"
+		});
+		return;
+	}
+	const hasLease = Boolean(deps.leases?.findByProviderAccount(provider, account));
+	let hasBinding = false;
+	if (deps.bindings) for (const b of [...deps.bindings.listGlobal(), ...deps.bindings.listAllProjects()]) {
+		const s = b.spec.source;
+		if (s.kind === "account" && s.provider === provider && s.name === account) {
+			hasBinding = true;
+			break;
+		}
+	}
+	if (!hasLease && !hasBinding) push({
+		id: `orphan-proxy:${provider}/${account}`,
+		ok: false,
+		message: `Orphan proxy running for ${provider}/${account} (pid ${pid})`,
+		detail: pidPath,
+		fixable: "stop_orphan_proxy"
+	});
+	else push({
+		id: `proxy:${provider}/${account}`,
+		ok: true,
+		message: `Proxy ${provider}/${account} running (pid ${pid})`
+	});
+}
+//#endregion
+export { scanPermissions, scanProxyPids, scanStaleLocks, scanTempOverlays };
+
+//# sourceMappingURL=doctor-scan.js.map

package/dist/core/doctor-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-scan.js","names":[],"sources":["../../src/core/doctor-scan.ts"],"sourcesContent":["import { readdir, stat } from 'node:fs/promises';\nimport { join, relative } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport { pathExists } from '../utils/fs';\nimport { isProcessRunning, readPidFile } from '../utils/process';\nimport { isLockStale, readLockInfo } from '../utils/lock';\nimport type { DoctorCheck, DoctorServiceDeps } from './doctor-types';\nimport { walkAnyPickOwned } from './doctor-utils';\n\nexport type DoctorPush = (c: DoctorCheck) => void;\n\nexport async function scanProxyPids(\n  root: string,\n  deps: DoctorServiceDeps,\n  push: DoctorPush,\n): Promise<void> {\n  if (!deps.accountStore) {\n    const providersRoot = join(root, 'providers');\n    if (!(await pathExists(providersRoot))) {\n      return;\n    }\n    try {\n      const providers = await readdir(providersRoot);\n      for (const provider of providers) {\n        const accountsRoot = join(providersRoot, provider, 'accounts');\n        if (!(await pathExists(accountsRoot))) {\n          continue;\n        }\n        const accounts = await readdir(accountsRoot);\n        for (const account of accounts) {\n          const pidPath = join(accountsRoot, account, 'runtime', 'proxy.pid');\n          await checkPidFile(pidPath, provider, account, deps, push);\n        }\n      }\n    } catch {\n      // ignore scan errors\n    }\n    return;\n  }\n\n  for (const p of deps.accounts.listProviders()) {\n    if (typeof p.startProxy !== 'function') {\n      continue;\n    }\n    const accounts = await deps.accountStore.listAccounts(p.id);\n    for (const a of accounts) {\n      const pidPath = deps.accountStore.pidPath(p.id, a.meta.name);\n      await checkPidFile(pidPath, p.id, a.meta.name, deps, push);\n    }\n  }\n}\n\nexport async function scanStaleLocks(root: string, push: DoctorPush): Promise<void> {\n  await walkAnyPickOwned(root, async (path, isDir) => {\n    if (isDir || !path.endsWith('.lock')) {\n      return;\n    }\n    if (!(await isLockStale(path))) {\n      return;\n    }\n    const info = await readLockInfo(path);\n    push({\n      id: `stale-lock:${relative(root, path)}`,\n      ok: false,\n      message: info\n        ? `Stale AnyPick lock (dead pid ${info.pid}): ${relative(root, path)}`\n        : `Stale or corrupt AnyPick lock: ${relative(root, path)}`,\n      detail: path,\n      fixable: 'delete_stale_lock',\n    });\n  });\n}\n\nexport async function scanTempOverlays(push: DoctorPush): Promise<void> {\n  const tmp = tmpdir();\n  try {\n    const entries = await readdir(tmp);\n    for (const name of entries) {\n      if (!/^anypick-(claude|codex|kiro|client)-/.test(name)) {\n        continue;\n      }\n      const full = join(tmp, name);\n      try {\n        const st = await stat(full);\n        if (!st.isDirectory()) {\n          continue;\n        }\n        const ageMs = Date.now() - st.mtimeMs;\n        if (ageMs < 60 * 60 * 1000) {\n          continue;\n        }\n        push({\n          id: `overlay:${name}`,\n          ok: false,\n          message: `Leftover temporary client overlay: ${name}`,\n          detail: full,\n          fixable: 'delete_temp_overlay',\n        });\n      } catch {\n        // ignore\n      }\n    }\n  } catch {\n    // ignore tmp unreadable\n  }\n}\n\nexport async function scanPermissions(root: string, push: DoctorPush): Promise<void> {\n  let bad = 0;\n  try {\n    await walkAnyPickOwned(root, async (path, isDir) => {\n      try {\n        const st = await stat(path);\n        const mode = st.mode & 0o777;\n        if (isDir) {\n          if (mode & 0o022) {\n            bad++;\n          }\n        } else if (mode & 0o077) {\n          bad++;\n        }\n      } catch {\n        // ignore\n      }\n    });\n  } catch {\n    // ignore\n  }\n  if (bad > 0) {\n    push({\n      id: 'permissions',\n      ok: false,\n      message: `${bad} AnyPick-owned path(s) have overly permissive mode`,\n      detail: root,\n      fixable: 'repair_permissions',\n    });\n  } else {\n    push({\n      id: 'permissions',\n      ok: true,\n      message: 'AnyPick-owned permissions look restrictive',\n    });\n  }\n}\n\nasync function checkPidFile(\n  pidPath: string,\n  provider: string,\n  account: string,\n  deps: DoctorServiceDeps,\n  push: DoctorPush,\n): Promise<void> {\n  if (!(await pathExists(pidPath))) {\n    return;\n  }\n  const pid = await readPidFile(pidPath);\n  if (pid == null) {\n    push({\n      id: `pid:${provider}/${account}`,\n      ok: false,\n      message: `Corrupt proxy PID file for ${provider}/${account}`,\n      detail: pidPath,\n      fixable: 'delete_stale_pid',\n    });\n    return;\n  }\n  if (!isProcessRunning(pid)) {\n    push({\n      id: `pid:${provider}/${account}`,\n      ok: false,\n      message: `Stale proxy PID ${pid} for ${provider}/${account}`,\n      detail: pidPath,\n      fixable: 'delete_stale_pid',\n    });\n    return;\n  }\n\n  const hasLease = Boolean(deps.leases?.findByProviderAccount(provider, account));\n  let hasBinding = false;\n  if (deps.bindings) {\n    for (const b of [...deps.bindings.listGlobal(), ...deps.bindings.listAllProjects()]) {\n      const s = b.spec.source;\n      if (s.kind === 'account' && s.provider === provider && s.name === account) {\n        hasBinding = true;\n        break;\n      }\n    }\n  }\n  if (!hasLease && !hasBinding) {\n    push({\n      id: `orphan-proxy:${provider}/${account}`,\n      ok: false,\n      message: `Orphan proxy running for ${provider}/${account} (pid ${pid})`,\n      detail: pidPath,\n      fixable: 'stop_orphan_proxy',\n    });\n  } else {\n    push({\n      id: `proxy:${provider}/${account}`,\n      ok: true,\n      message: `Proxy ${provider}/${account} running (pid ${pid})`,\n    });\n  }\n}\n"],"mappings":";;;;;;;;AAWA,eAAsB,cACpB,MACA,MACA,MACe;CACf,IAAI,CAAC,KAAK,cAAc;EACtB,MAAM,gBAAgB,KAAK,MAAM,WAAW;EAC5C,IAAI,CAAE,MAAM,WAAW,aAAa,GAClC;EAEF,IAAI;GACF,MAAM,YAAY,MAAM,QAAQ,aAAa;GAC7C,KAAK,MAAM,YAAY,WAAW;IAChC,MAAM,eAAe,KAAK,eAAe,UAAU,UAAU;IAC7D,IAAI,CAAE,MAAM,WAAW,YAAY,GACjC;IAEF,MAAM,WAAW,MAAM,QAAQ,YAAY;IAC3C,KAAK,MAAM,WAAW,UAEpB,MAAM,aADU,KAAK,cAAc,SAAS,WAAW,WACpC,GAAS,UAAU,SAAS,MAAM,IAAI;GAE7D;EACF,QAAQ,CAER;EACA;CACF;CAEA,KAAK,MAAM,KAAK,KAAK,SAAS,cAAc,GAAG;EAC7C,IAAI,OAAO,EAAE,eAAe,YAC1B;EAEF,MAAM,WAAW,MAAM,KAAK,aAAa,aAAa,EAAE,EAAE;EAC1D,KAAK,MAAM,KAAK,UAEd,MAAM,aADU,KAAK,aAAa,QAAQ,EAAE,IAAI,EAAE,KAAK,IACpC,GAAS,EAAE,IAAI,EAAE,KAAK,MAAM,MAAM,IAAI;CAE7D;AACF;AAEA,eAAsB,eAAe,MAAc,MAAiC;CAClF,MAAM,iBAAiB,MAAM,OAAO,MAAM,UAAU;EAClD,IAAI,SAAS,CAAC,KAAK,SAAS,OAAO,GACjC;EAEF,IAAI,CAAE,MAAM,YAAY,IAAI,GAC1B;EAEF,MAAM,OAAO,MAAM,aAAa,IAAI;EACpC,KAAK;GACH,IAAI,cAAc,SAAS,MAAM,IAAI;GACrC,IAAI;GACJ,SAAS,OACL,gCAAgC,KAAK,IAAI,KAAK,SAAS,MAAM,IAAI,MACjE,kCAAkC,SAAS,MAAM,IAAI;GACzD,QAAQ;GACR,SAAS;EACX,CAAC;CACH,CAAC;AACH;AAEA,eAAsB,iBAAiB,MAAiC;CACtE,MAAM,MAAM,OAAO;CACnB,IAAI;EACF,MAAM,UAAU,MAAM,QAAQ,GAAG;EACjC,KAAK,MAAM,QAAQ,SAAS;GAC1B,IAAI,CAAC,uCAAuC,KAAK,IAAI,GACnD;GAEF,MAAM,OAAO,KAAK,KAAK,IAAI;GAC3B,IAAI;IACF,MAAM,KAAK,MAAM,KAAK,IAAI;IAC1B,IAAI,CAAC,GAAG,YAAY,GAClB;IAGF,IADc,KAAK,IAAI,IAAI,GAAG,UAClB,OAAU,KACpB;IAEF,KAAK;KACH,IAAI,WAAW;KACf,IAAI;KACJ,SAAS,sCAAsC;KAC/C,QAAQ;KACR,SAAS;IACX,CAAC;GACH,QAAQ,CAER;EACF;CACF,QAAQ,CAER;AACF;AAEA,eAAsB,gBAAgB,MAAc,MAAiC;CACnF,IAAI,MAAM;CACV,IAAI;EACF,MAAM,iBAAiB,MAAM,OAAO,MAAM,UAAU;GAClD,IAAI;IAEF,MAAM,QAAO,MADI,KAAK,IAAI,EAAA,CACV,OAAO;IACvB,IAAI;SACE,OAAO,IACT;IAAA,OAEG,IAAI,OAAO,IAChB;GAEJ,QAAQ,CAER;EACF,CAAC;CACH,QAAQ,CAER;CACA,IAAI,MAAM,GACR,KAAK;EACH,IAAI;EACJ,IAAI;EACJ,SAAS,GAAG,IAAI;EAChB,QAAQ;EACR,SAAS;CACX,CAAC;MAED,KAAK;EACH,IAAI;EACJ,IAAI;EACJ,SAAS;CACX,CAAC;AAEL;AAEA,eAAe,aACb,SACA,UACA,SACA,MACA,MACe;CACf,IAAI,CAAE,MAAM,WAAW,OAAO,GAC5B;CAEF,MAAM,MAAM,MAAM,YAAY,OAAO;CACrC,IAAI,OAAO,MAAM;EACf,KAAK;GACH,IAAI,OAAO,SAAS,GAAG;GACvB,IAAI;GACJ,SAAS,8BAA8B,SAAS,GAAG;GACnD,QAAQ;GACR,SAAS;EACX,CAAC;EACD;CACF;CACA,IAAI,CAAC,iBAAiB,GAAG,GAAG;EAC1B,KAAK;GACH,IAAI,OAAO,SAAS,GAAG;GACvB,IAAI;GACJ,SAAS,mBAAmB,IAAI,OAAO,SAAS,GAAG;GACnD,QAAQ;GACR,SAAS;EACX,CAAC;EACD;CACF;CAEA,MAAM,WAAW,QAAQ,KAAK,QAAQ,sBAAsB,UAAU,OAAO,CAAC;CAC9E,IAAI,aAAa;CACjB,IAAI,KAAK,UACP,KAAK,MAAM,KAAK,CAAC,GAAG,KAAK,SAAS,WAAW,GAAG,GAAG,KAAK,SAAS,gBAAgB,CAAC,GAAG;EACnF,MAAM,IAAI,EAAE,KAAK;EACjB,IAAI,EAAE,SAAS,aAAa,EAAE,aAAa,YAAY,EAAE,SAAS,SAAS;GACzE,aAAa;GACb;EACF;CACF;CAEF,IAAI,CAAC,YAAY,CAAC,YAChB,KAAK;EACH,IAAI,gBAAgB,SAAS,GAAG;EAChC,IAAI;EACJ,SAAS,4BAA4B,SAAS,GAAG,QAAQ,QAAQ,IAAI;EACrE,QAAQ;EACR,SAAS;CACX,CAAC;MAED,KAAK;EACH,IAAI,SAAS,SAAS,GAAG;EACzB,IAAI;EACJ,SAAS,SAAS,SAAS,GAAG,QAAQ,gBAAgB,IAAI;CAC5D,CAAC;AAEL"}