patchwork-os 1.2.0-beta.2.canary.849 → 1.2.0-beta.2.canary.850

package/dist/commands/doctorAcceptance.d.ts

@@ -0,0 +1,52 @@
+/**
+ * `patchwork doctor acceptance` — does the INSTALLED package BEHAVE?
+ *
+ * `patchwork doctor` answers "is the running code the installed code?" by
+ * comparing timestamps. That is necessary and not sufficient: deploys were
+ * verified by grepping `dist/` for one symbol, and a deploy that silently did
+ * not happen (a git ref-lock race) was only noticed later. A string being
+ * present in a file is not a behaviour being present in a process.
+ *
+ * This runs the real runtime entrypoints — the flat runner (`runYamlRecipe`),
+ * the policy matrix, the profile-aware kill switch, `http.post`'s uncertain-
+ * outcome contract, `replayFlatMockedRun` and `RecipeRunLog.getByTaskId` —
+ * in-process, and asserts what they DO.
+ *
+ * ## Safe on a live production machine, by construction
+ *
+ * - Every behavioural check runs against a fresh temp `PATCHWORK_HOME` (and a
+ *   temp `HOME`, so anything resolving `os.homedir()` lands in the sandbox
+ *   too). The operator's config, flags and ledgers are never read or written;
+ *   the identity check runs FIRST, before the swap, and reads only lock files
+ *   and one mtime.
+ * - Network is loopback only: a server this command starts on 127.0.0.1.
+ *   No connector, no model call, no git remote.
+ * - Approvals are answered by an in-process recorder, never the bridge queue.
+ * - Everything is restored and the sandbox removed in `finally`, including
+ *   on failure.
+ *
+ * A separate subcommand from `doctor` for the same reason `doctor health` is:
+ * `patchwork doctor && echo deployed` is a real shape, and its exit code must
+ * not change meaning.
+ */
+export interface AcceptanceCheck {
+    name: string;
+    ok: boolean;
+    detail: string;
+}
+export interface AcceptanceReport {
+    ok: boolean;
+    total: number;
+    passed: number;
+    checks: AcceptanceCheck[];
+}
+export interface AcceptanceOptions {
+    /** Lock directory for the identity check (default: the real bridge lock dir). */
+    lockDir?: string;
+    /** Override the installed build time (tests). */
+    buildTimeMs?: number;
+    /** Parent directory for the sandbox (default: os.tmpdir()). */
+    tmpRoot?: string;
+}
+export declare function runAcceptance(opts?: AcceptanceOptions): Promise<AcceptanceReport>;
+export declare function formatAcceptance(r: AcceptanceReport): string;

package/dist/commands/doctorAcceptance.js

@@ -0,0 +1,373 @@
+/**
+ * `patchwork doctor acceptance` — does the INSTALLED package BEHAVE?
+ *
+ * `patchwork doctor` answers "is the running code the installed code?" by
+ * comparing timestamps. That is necessary and not sufficient: deploys were
+ * verified by grepping `dist/` for one symbol, and a deploy that silently did
+ * not happen (a git ref-lock race) was only noticed later. A string being
+ * present in a file is not a behaviour being present in a process.
+ *
+ * This runs the real runtime entrypoints — the flat runner (`runYamlRecipe`),
+ * the policy matrix, the profile-aware kill switch, `http.post`'s uncertain-
+ * outcome contract, `replayFlatMockedRun` and `RecipeRunLog.getByTaskId` —
+ * in-process, and asserts what they DO.
+ *
+ * ## Safe on a live production machine, by construction
+ *
+ * - Every behavioural check runs against a fresh temp `PATCHWORK_HOME` (and a
+ *   temp `HOME`, so anything resolving `os.homedir()` lands in the sandbox
+ *   too). The operator's config, flags and ledgers are never read or written;
+ *   the identity check runs FIRST, before the swap, and reads only lock files
+ *   and one mtime.
+ * - Network is loopback only: a server this command starts on 127.0.0.1.
+ *   No connector, no model call, no git remote.
+ * - Approvals are answered by an in-process recorder, never the bridge queue.
+ * - Everything is restored and the sandbox removed in `finally`, including
+ *   on failure.
+ *
+ * A separate subcommand from `doctor` for the same reason `doctor health` is:
+ * `patchwork doctor && echo deployed` is a real shape, and its exit code must
+ * not change meaning.
+ */
+import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync, } from "node:fs";
+import { createServer } from "node:http";
+import os from "node:os";
+import path from "node:path";
+const RECIPE_PREFIX = "acceptance-probe";
+async function startTarget() {
+    const t = { received: 0, sockets: new Set() };
+    t.server = createServer((req, res) => {
+        t.sockets.add(req.socket);
+        req.resume();
+        req.on("end", () => {
+            t.received++;
+            if (req.url === "/lost") {
+                // Accepted the write, then the response is lost.
+                req.socket.destroy();
+                return;
+            }
+            res.writeHead(200, { "content-type": "application/json" });
+            res.end('{"id":"acc-0001"}');
+        });
+    });
+    await new Promise((resolve) => t.server.listen(0, "127.0.0.1", () => resolve()));
+    t.url = `http://127.0.0.1:${t.server.address().port}`;
+    return t;
+}
+async function stopTarget(t) {
+    if (!t)
+        return;
+    for (const s of t.sockets)
+        s.destroy();
+    await new Promise((resolve) => t.server.close(() => resolve()));
+}
+async function identityCheck(opts) {
+    const { assessDeploymentFreshness, discoverLocks, installedBuildTimeMs } = await import("../deploymentFreshness.js");
+    const { PACKAGE_VERSION } = await import("../version.js");
+    const buildTimeMs = opts.buildTimeMs ?? installedBuildTimeMs();
+    if (buildTimeMs === undefined) {
+        return {
+            name: "identity",
+            ok: false,
+            detail: `version ${PACKAGE_VERSION}; no installed build could be located`,
+        };
+    }
+    const report = assessDeploymentFreshness({
+        locks: discoverLocks(opts.lockDir),
+        buildTimeMs,
+        isAlive: (pid) => {
+            try {
+                process.kill(pid, 0);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+    });
+    const stale = report.findings.filter((f) => f.state === "stale-code").length;
+    const live = report.findings.filter((f) => f.state === "fresh" || f.state === "stale-code").length;
+    const detail = `version ${PACKAGE_VERSION}; built ${new Date(buildTimeMs).toISOString()}; ` +
+        "commit not recorded (the package carries no build commit); " +
+        `${live} live bridge(s), ${stale} predating the install`;
+    return { name: "identity", ok: !report.unhealthy, detail };
+}
+export async function runAcceptance(opts = {}) {
+    const checks = [];
+    const record = (name, ok, detail) => checks.push({ name, ok, detail });
+    const guard = async (name, fn) => {
+        try {
+            const [ok, detail] = await fn();
+            record(name, ok, detail);
+        }
+        catch (err) {
+            record(name, false, `threw: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    };
+    // 1. Identity — BEFORE the sandbox swap, since it reads real lock files.
+    try {
+        checks.push(await identityCheck(opts));
+    }
+    catch (err) {
+        record("identity", false, `threw: ${String(err)}`);
+    }
+    const root = mkdtempSync(path.join(opts.tmpRoot ?? os.tmpdir(), "patchwork-acceptance-"));
+    const home = path.join(root, "patchwork-home");
+    const osHome = path.join(root, "os-home");
+    const ws = path.join(root, "workspace");
+    for (const d of [home, osHome, ws, path.join(home, "config")]) {
+        mkdirSync(d, { recursive: true });
+    }
+    const ENV_KEYS = [
+        "PATCHWORK_HOME",
+        "HOME",
+        "CLAUDE_CONFIG_DIR",
+        "PATCHWORK_FLAG_KILL_SWITCH_WRITES",
+    ];
+    const savedEnv = new Map(ENV_KEYS.map((k) => [k, process.env[k]]));
+    process.env.PATCHWORK_HOME = home;
+    process.env.HOME = osHome;
+    process.env.CLAUDE_CONFIG_DIR = path.join(osHome, ".claude");
+    delete process.env.PATCHWORK_FLAG_KILL_SWITCH_WRITES;
+    const profileMod = await import("../governance/profile.js");
+    const flags = await import("../featureFlags.js");
+    const prevProfile = profileMod.activeProfile();
+    const flagsFile = path.join(home, "config", "flags.json");
+    const setKillSwitch = (engaged) => {
+        writeFileSync(flagsFile, JSON.stringify({ [flags.KILL_SWITCH_WRITES]: engaged }));
+        flags.loadFlags();
+    };
+    let target;
+    try {
+        setKillSwitch(false);
+        writeFileSync(path.join(home, "config.json"), JSON.stringify({
+            profile: "governed",
+            privacy: {
+                destinations: {
+                    "acceptance-local": {
+                        type: "local",
+                        classifications: ["public", "internal"],
+                        drivers: ["ollama"],
+                    },
+                },
+            },
+        }));
+        const forbiddenDir = path.join(ws, "forbidden");
+        writeFileSync(path.join(ws, "patchwork.policy.yml"), `version: 1\ndefaults:\n  forbiddenPaths:\n    - "${forbiddenDir.replace(/\\/g, "/")}/**"\n`);
+        const { loadConfig } = await import("../patchworkConfig.js");
+        const config = loadConfig(path.join(home, "config.json"));
+        const profile = profileMod.resolveProfile(config);
+        profileMod.setActiveProfile(profile);
+        const { runYamlRecipe } = await import("../recipes/yamlRunner.js");
+        await import("../recipes/tools/http.js");
+        const { replayFlatMockedRun } = await import("../recipes/replayRun.js");
+        const { RecipeRunLog } = await import("../runLog.js");
+        const runLog = new RecipeRunLog({ dir: home });
+        target = await startTarget();
+        const tgt = target;
+        const approvals = [];
+        const approve = async (input) => {
+            approvals.push(input.toolId);
+            return true;
+        };
+        const deps = () => ({
+            workdir: ws,
+            logDir: home,
+            runLog,
+            testMode: false,
+            governance: profile,
+            requireApprovalFn: approve,
+        });
+        const recipe = (name, steps) => ({
+            name: `${RECIPE_PREFIX}-${name}`,
+            trigger: { type: "manual" },
+            steps,
+        });
+        // 2. Effective policy.
+        await guard("effective-policy", async () => {
+            const { governanceReport } = await import("../governance/doctorReport.js");
+            const r = governanceReport({
+                config,
+                isFlagOn: flags.isEnabled,
+                recipesDir: path.join(home, "recipes"),
+                workersDir: path.join(home, "workers"),
+            });
+            return [
+                r.governed && profile.mode === "governed",
+                r.governed
+                    ? "temp governed config reports GOVERNED"
+                    : `NOT GOVERNED: ${r.reasons.join("; ")}`,
+            ];
+        });
+        // 3. Refusal by the policy matrix.
+        await guard("policy-refusal", async () => {
+            const file = path.join(forbiddenDir, "probe.txt");
+            const res = await runYamlRecipe(recipe("policy", [{ tool: "file.write", path: file, content: "x" }]), deps());
+            const err = res.stepResults[0]?.error ?? "";
+            const refused = /policy_denied/.test(err);
+            const exists = existsSync(file);
+            return [
+                refused && !exists,
+                `step ${res.stepResults[0]?.status ?? "missing"}${refused ? " (policy_denied)" : ` (${err || "no error"})`}; file ${exists ? "WRITTEN" : "absent"}`,
+            ];
+        });
+        // 4. Kill switch.
+        await guard("kill-switch", async () => {
+            const file = path.join(ws, "allowed", "ks.txt");
+            setKillSwitch(true);
+            let res;
+            try {
+                res = await runYamlRecipe(recipe("killswitch", [
+                    { tool: "file.write", path: file, content: "x" },
+                ]), deps());
+            }
+            finally {
+                setKillSwitch(false);
+            }
+            const text = `${res.errorMessage ?? ""} ${res.stepResults.map((s) => s.error ?? "").join(" ")}`;
+            const blocked = /kill_switch_blocked|kill switch/i.test(text);
+            const exists = existsSync(file);
+            return [
+                blocked && !exists,
+                `${blocked ? "refused (kill_switch_blocked)" : `NOT refused (${text.trim() || "ran"})`}; file ${exists ? "WRITTEN" : "absent"}`,
+            ];
+        });
+        // 5. Uncertain delivery (row 6): accepted, response lost, never resent.
+        await guard("uncertain-delivery", async () => {
+            tgt.received = 0;
+            const res = await runYamlRecipe(recipe("uncertain", [
+                {
+                    tool: "http.post",
+                    url: `${tgt.url}/lost`,
+                    body: '{"probe":1}',
+                    allowPrivate: true,
+                    timeoutMs: 2000,
+                    retry: 2,
+                    retryDelay: 1,
+                },
+            ]), deps());
+            const step = res.stepResults[0];
+            const uncertain = /outcome_uncertain/.test(step?.error ?? "");
+            return [
+                step?.status === "error" && uncertain && tgt.received === 1,
+                `step ${step?.status ?? "missing"}${uncertain ? " (outcome_uncertain)" : ""}; server received ${tgt.received} request(s), expected 1`,
+            ];
+        });
+        // 6 + 7. Replay by taskId, and the lookup the HTTP route uses.
+        let originalTaskId;
+        await guard("run-lookup", async () => {
+            tgt.received = 0;
+            approvals.length = 0;
+            const name = "replay";
+            const res = await runYamlRecipe(recipe(name, [
+                {
+                    tool: "http.post",
+                    url: `${tgt.url}/ok`,
+                    body: '{"probe":2}',
+                    into: "posted",
+                    allowPrivate: true,
+                    timeoutMs: 2000,
+                },
+            ]), deps());
+            if (res.stepResults[0]?.status !== "ok" || tgt.received !== 1) {
+                return [
+                    false,
+                    `original run did not complete (step ${res.stepResults[0]?.status}: ${res.stepResults[0]?.error ?? ""})`,
+                ];
+            }
+            const listed = runLog.query({ recipe: `${RECIPE_PREFIX}-${name}` });
+            originalTaskId = listed[0]?.taskId;
+            const found = originalTaskId ? runLog.getByTaskId(originalTaskId) : null;
+            return [
+                found !== null && found.taskId === originalTaskId,
+                found ? "original run resolves by taskId" : "run NOT found by taskId",
+            ];
+        });
+        await guard("replay", async () => {
+            if (!originalTaskId)
+                return [false, "no original run to replay"];
+            const original = runLog.getByTaskId(originalTaskId);
+            if (!original)
+                return [false, "original run not found by taskId"];
+            const before = tgt.received;
+            approvals.length = 0;
+            const r = await replayFlatMockedRun({
+                originalRun: original,
+                recipe: recipe("replay", [
+                    {
+                        tool: "http.post",
+                        url: `${tgt.url}/ok`,
+                        body: '{"probe":2}',
+                        into: "posted",
+                        allowPrivate: true,
+                        timeoutMs: 2000,
+                    },
+                ]),
+                deps: {
+                    runLog,
+                    runnerDeps: {
+                        workdir: ws,
+                        logDir: home,
+                        governance: profile,
+                        requireApprovalFn: approve,
+                    },
+                },
+            });
+            const newRequests = tgt.received - before;
+            const rows = runLog.query({ recipe: `${RECIPE_PREFIX}-replay` });
+            const replayRow = rows.find((row) => row.taskId !== originalTaskId &&
+                row.replay === true);
+            return [
+                r.ok && newRequests === 0 && approvals.length === 0 && !!replayRow,
+                `replay ${r.ok ? "ok" : `failed (${r.error ?? "?"})`}; ${newRequests} new request(s); ${approvals.length} approval(s) requested; replay row ${replayRow ? "stamped replay: true" : "MISSING"}`,
+            ];
+        });
+    }
+    finally {
+        await stopTarget(target).catch(() => { });
+        try {
+            setKillSwitch(false);
+        }
+        catch {
+            // sandbox may already be unusable; env restore below still runs
+        }
+        profileMod.setActiveProfile(prevProfile);
+        for (const [k, v] of savedEnv) {
+            if (v === undefined)
+                delete process.env[k];
+            else
+                process.env[k] = v;
+        }
+        rmSync(root, { recursive: true, force: true });
+    }
+    // Order the report as documented: identity, policy, refusal, kill switch,
+    // uncertain, replay, lookup.
+    const order = [
+        "identity",
+        "effective-policy",
+        "policy-refusal",
+        "kill-switch",
+        "uncertain-delivery",
+        "replay",
+        "run-lookup",
+    ];
+    checks.sort((a, b) => order.indexOf(a.name) - order.indexOf(b.name));
+    const passed = checks.filter((c) => c.ok).length;
+    return {
+        ok: passed === checks.length && checks.length === order.length,
+        total: checks.length,
+        passed,
+        checks,
+    };
+}
+export function formatAcceptance(r) {
+    const out = [`${r.total} checks`];
+    for (const c of r.checks) {
+        out.push(`  ${c.ok ? "PASS" : "FAIL"}  ${c.name.padEnd(20)}${c.detail}`);
+    }
+    out.push(r.ok
+        ? `ACCEPTED: ${r.passed}/${r.total} passed`
+        : `NOT ACCEPTED: ${r.total - r.passed} of ${r.total} failed`);
+    return out.join("\n");
+}
+//# sourceMappingURL=doctorAcceptance.js.map

package/dist/commands/doctorAcceptance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctorAcceptance.js","sourceRoot":"","sources":["../../src/commands/doctorAcceptance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAwB7B,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAUzC,KAAK,UAAU,WAAW;IACxB,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAU,EAAY,CAAC;IAChE,CAAC,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,GAAG,CAAC,MAAM,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,CAAC,CAAC,QAAQ,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBACxB,iDAAiD;gBACjD,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAClC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CACjD,CAAC;IACF,CAAC,CAAC,GAAG,GAAG,oBAAqB,CAAC,CAAC,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IACvE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAqB;IAC7C,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAuB;IAEvB,MAAM,EAAE,yBAAyB,EAAE,aAAa,EAAE,oBAAoB,EAAE,GACtE,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC5C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,EAAE,CAAC;IAC/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,WAAW,eAAe,uCAAuC;SAC1E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,yBAAyB,CAAC;QACvC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,WAAW;QACX,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACf,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,CACvD,CAAC,MAAM,CAAC;IACT,MAAM,MAAM,GACV,WAAW,eAAe,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,IAAI;QAC5E,6DAA6D;QAC7D,GAAG,IAAI,oBAAoB,KAAK,wBAAwB,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA0B,EAAE;IAE5B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAW,EAAE,MAAc,EAAE,EAAE,CAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,EAAoC,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CACJ,IAAI,EACJ,KAAK,EACL,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAChE,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9D,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,gBAAgB;QAChB,MAAM;QACN,mBAAmB;QACnB,mCAAmC;KAC3B,CAAC;IACX,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC;IAErD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAE,EAAE;QACzC,aAAa,CACX,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CACxD,CAAC;QACF,KAAK,CAAC,SAAS,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE;gBACP,YAAY,EAAE;oBACZ,kBAAkB,EAAE;wBAClB,IAAI,EAAE,OAAO;wBACb,eAAe,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;wBACvC,OAAO,EAAE,CAAC,QAAQ,CAAC;qBACpB;iBACF;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAChD,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,CAAC,EACrC,oDAAoD,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAC7F,CAAC;QAEF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACzC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC;QAEnB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,EAAE,KAAyB,EAAE,EAAE;YAClD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;YAClB,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,IAAI;YACZ,MAAM;YACN,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,OAAO;YACnB,iBAAiB,EAAE,OAAO;SAC3B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAgB,EAAU,EAAE,CACxD,CAAC;YACC,IAAI,EAAE,GAAG,aAAa,IAAI,IAAI,EAAE;YAChC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,KAAK;SACN,CAAsB,CAAC;QAE1B,uBAAuB;QACvB,MAAM,KAAK,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CACvC,+BAA+B,CAChC,CAAC;YACF,MAAM,CAAC,GAAG,gBAAgB,CAAC;gBACzB,MAAM;gBACN,QAAQ,EAAE,KAAK,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;gBACtC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;aACvC,CAAC,CAAC;YACH,OAAO;gBACL,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;gBACzC,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,uCAAuC;oBACzC,CAAC,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,KAAK,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EACpE,IAAI,EAAE,CACP,CAAC;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;gBACL,OAAO,IAAI,CAAC,MAAM;gBAClB,QAAQ,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,UAAU,GAAG,UAAU,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;aACpJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChD,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,GAA8C,CAAC;YACnD,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,aAAa,CACvB,MAAM,CAAC,YAAY,EAAE;oBACnB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE;iBACjD,CAAC,EACF,IAAI,EAAE,CACP,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChG,MAAM,OAAO,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;gBACL,OAAO,IAAI,CAAC,MAAM;gBAClB,GAAG,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,GAAG,UAAU,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;aAChI,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,MAAM,KAAK,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC3C,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,MAAM,CAAC,WAAW,EAAE;gBAClB;oBACE,IAAI,EAAE,WAAW;oBACjB,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,OAAO;oBACtB,IAAI,EAAE,aAAa;oBACnB,YAAY,EAAE,IAAI;oBAClB,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC;oBACR,UAAU,EAAE,CAAC;iBACd;aACF,CAAC,EACF,IAAI,EAAE,CACP,CAAC;YACF,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC9D,OAAO;gBACL,IAAI,EAAE,MAAM,KAAK,OAAO,IAAI,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;gBAC3D,QAAQ,IAAI,EAAE,MAAM,IAAI,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,qBAAqB,GAAG,CAAC,QAAQ,yBAAyB;aACtI,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,+DAA+D;QAC/D,IAAI,cAAkC,CAAC;QACvC,MAAM,KAAK,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YACnC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;YACjB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,QAAQ,CAAC;YACtB,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,MAAM,CAAC,IAAI,EAAE;gBACX;oBACE,IAAI,EAAE,WAAW;oBACjB,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,KAAK;oBACpB,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,QAAQ;oBACd,YAAY,EAAE,IAAI;oBAClB,SAAS,EAAE,IAAI;iBAChB;aACF,CAAC,EACF,IAAI,EAAE,CACP,CAAC;YACF,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC9D,OAAO;oBACL,KAAK;oBACL,uCAAuC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,GAAG;iBACzG,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,aAAa,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACpE,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YACnC,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,OAAO;gBACL,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc;gBACjD,KAAK,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,yBAAyB;aACtE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC/B,IAAI,CAAC,cAAc;gBAAE,OAAO,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC5B,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC;gBAClC,WAAW,EAAE,QAAQ;gBACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACvB;wBACE,IAAI,EAAE,WAAW;wBACjB,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,KAAK;wBACpB,IAAI,EAAE,aAAa;wBACnB,IAAI,EAAE,QAAQ;wBACd,YAAY,EAAE,IAAI;wBAClB,SAAS,EAAE,IAAI;qBAChB;iBACF,CAAmE;gBACpE,IAAI,EAAE;oBACJ,MAAM;oBACN,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE;wBACX,MAAM,EAAE,IAAI;wBACZ,UAAU,EAAE,OAAO;wBACnB,iBAAiB,EAAE,OAAO;qBAC3B;iBACF;aACF,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,aAAa,SAAS,EAAE,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,cAAc;gBAC5B,GAAyB,CAAC,MAAM,KAAK,IAAI,CAC7C,CAAC;YACF,OAAO;gBACL,CAAC,CAAC,EAAE,IAAI,WAAW,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS;gBAClE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,WAAW,oBAAoB,SAAS,CAAC,MAAM,sCAAsC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,EAAE;aAC/L,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,UAAU,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;gBACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,KAAK,GAAG;QACZ,UAAU;QACV,kBAAkB;QAClB,gBAAgB;QAChB,aAAa;QACb,oBAAoB;QACpB,QAAQ;QACR,YAAY;KACb,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC9D,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,GAAG,CAAC,IAAI,CACN,CAAC,CAAC,EAAE;QACF,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,SAAS;QAC3C,CAAC,CAAC,iBAAiB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,KAAK,SAAS,CAC/D,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/index.js

@@ -4138,6 +4138,40 @@ if (process.argv[2] === "doctor" && process.argv[3] === "health") {
         }
     })();
 }
+// `doctor acceptance` — does the INSTALLED package BEHAVE? Runs the real
+// runtime entrypoints in-process against a throwaway PATCHWORK_HOME and
+// asserts refusals, kill switch, no-resend on uncertain delivery, replay and
+// run lookup. A separate subcommand for the reason `doctor health` is: plain
+// `doctor`'s exit code is load-bearing and must not change meaning.
+if (process.argv[2] === "doctor" && process.argv[3] === "acceptance") {
+    const args = process.argv.slice(4);
+    if (args.includes("--help") || args.includes("-h")) {
+        process.stdout.write("Usage: patchwork doctor acceptance [--json]\n\n" +
+            "Proves the INSTALLED package behaves, not merely that a symbol is in dist/.\n" +
+            "Seven checks: identity (version, build time, running bridges vs install),\n" +
+            "effective governed policy, policy-matrix refusal, kill switch, uncertain\n" +
+            "delivery is never resent, mocked replay dispatches nothing, run lookup by\n" +
+            "taskId. Exits 1 if any check fails.\n\n" +
+            "Safe on a live machine: every behavioural check runs in-process against a\n" +
+            "fresh temp PATCHWORK_HOME and HOME (removed afterwards), loopback only, no\n" +
+            "connectors, no model calls, and the real ledgers are never read or written.\n");
+        process.exit(0);
+    }
+    (async () => {
+        try {
+            const { formatAcceptance, runAcceptance } = await import("./commands/doctorAcceptance.js");
+            const report = await runAcceptance();
+            process.stdout.write(args.includes("--json")
+                ? `${JSON.stringify(report, null, 2)}\n`
+                : `${formatAcceptance(report)}\n`);
+            process.exit(report.ok ? 0 : 1);
+        }
+        catch (err) {
+            process.stderr.write(`Error: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.exit(1);
+        }
+    })();
+}
 // `patchwork codex doctor` — diagnose whether ~/.codex/config.toml is
 // correctly (and currently) wired up to this bridge.
 if (process.argv[2] === "codex" && process.argv[3] === "doctor") {
@@ -4939,7 +4973,9 @@ if (process.argv[2] === "members") {
 // installed? Every check in this repo verifies the repository. On 2026-08-19
 // both live bridges were found running neither the privacy code nor `butler`,
 // merged and wired and green throughout.
-if (process.argv[2] === "doctor" && process.argv[3] !== "health") {
+if (process.argv[2] === "doctor" &&
+    process.argv[3] !== "health" &&
+    process.argv[3] !== "acceptance") {
     const args = process.argv.slice(3);
     if (args.includes("--help") || args.includes("-h")) {
         // Previously this block had no --help of its own, so the OTHER doctor
@@ -4957,7 +4993,8 @@ if (process.argv[2] === "doctor" && process.argv[3] !== "health") {
             "  --require-governed    ALSO exit 1 when the governance posture is NOT GOVERNED\n" +
             "                        (the posture is always printed; see `patchwork profile`)\n\n" +
             "For workspace / git / lock-file / automation-policy checks, use\n" +
-            "`patchwork doctor health`.\n");
+            "`patchwork doctor health`. For 'does the installed package behave?',\n" +
+            "use `patchwork doctor acceptance` (safe on a live machine).\n");
         process.exit(0);
     }
     (async () => {