remoteclaw 0.1.0-next.2abd2fa → 0.1.0-next.2e9a6cd

package/dist/config-cli-Cu79BThx.js

@@ -0,0 +1,242 @@
+import { Ct as theme, _ as defaultRuntime, dt as danger, ft as info, ot as shortenHomePath } from "./entry.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-BupC6eiJ.js";
+import "./host-env-security-CbiODGvQ.js";
+import "./shell-env-hZW9j-Uc.js";
+import "./env-vars-C8WMB8Ix.js";
+import { _ as isBlockedObjectKey } from "./session-key-BF-9YzxC.js";
+import "./zod-schema-B9RGngMW.js";
+import "./agent-scope-DxqtYjuJ.js";
+import { t as formatCliCommand } from "./command-format-KkslAzwV.js";
+import { t as formatDocsLink } from "./links-gse8sWn-.js";
+import { t as redactConfigObject } from "./redact-snapshot-CD36XSYE.js";
+import JSON5 from "json5";
+
+//#region src/cli/config-cli.ts
+function isIndexSegment(raw) {
+	return /^[0-9]+$/.test(raw);
+}
+function parsePath(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return [];
+	const parts = [];
+	let current = "";
+	let i = 0;
+	while (i < trimmed.length) {
+		const ch = trimmed[i];
+		if (ch === "\\") {
+			const next = trimmed[i + 1];
+			if (next) current += next;
+			i += 2;
+			continue;
+		}
+		if (ch === ".") {
+			if (current) parts.push(current);
+			current = "";
+			i += 1;
+			continue;
+		}
+		if (ch === "[") {
+			if (current) parts.push(current);
+			current = "";
+			const close = trimmed.indexOf("]", i);
+			if (close === -1) throw new Error(`Invalid path (missing "]"): ${raw}`);
+			const inside = trimmed.slice(i + 1, close).trim();
+			if (!inside) throw new Error(`Invalid path (empty "[]"): ${raw}`);
+			parts.push(inside);
+			i = close + 1;
+			continue;
+		}
+		current += ch;
+		i += 1;
+	}
+	if (current) parts.push(current);
+	return parts.map((part) => part.trim()).filter(Boolean);
+}
+function parseValue(raw, opts) {
+	const trimmed = raw.trim();
+	if (opts.strictJson) try {
+		return JSON5.parse(trimmed);
+	} catch (err) {
+		throw new Error(`Failed to parse JSON5 value: ${String(err)}`, { cause: err });
+	}
+	try {
+		return JSON5.parse(trimmed);
+	} catch {
+		return raw;
+	}
+}
+function hasOwnPathKey(value, key) {
+	return Object.prototype.hasOwnProperty.call(value, key);
+}
+function validatePathSegments(path) {
+	for (const segment of path) if (!isIndexSegment(segment) && isBlockedObjectKey(segment)) throw new Error(`Invalid path segment: ${segment}`);
+}
+function getAtPath(root, path) {
+	let current = root;
+	for (const segment of path) {
+		if (!current || typeof current !== "object") return { found: false };
+		if (Array.isArray(current)) {
+			if (!isIndexSegment(segment)) return { found: false };
+			const index = Number.parseInt(segment, 10);
+			if (!Number.isFinite(index) || index < 0 || index >= current.length) return { found: false };
+			current = current[index];
+			continue;
+		}
+		const record = current;
+		if (!hasOwnPathKey(record, segment)) return { found: false };
+		current = record[segment];
+	}
+	return {
+		found: true,
+		value: current
+	};
+}
+function setAtPath(root, path, value) {
+	let current = root;
+	for (let i = 0; i < path.length - 1; i += 1) {
+		const segment = path[i];
+		const next = path[i + 1];
+		const nextIsIndex = Boolean(next && isIndexSegment(next));
+		if (Array.isArray(current)) {
+			if (!isIndexSegment(segment)) throw new Error(`Expected numeric index for array segment "${segment}"`);
+			const index = Number.parseInt(segment, 10);
+			const existing = current[index];
+			if (!existing || typeof existing !== "object") current[index] = nextIsIndex ? [] : {};
+			current = current[index];
+			continue;
+		}
+		if (!current || typeof current !== "object") throw new Error(`Cannot traverse into "${segment}" (not an object)`);
+		const record = current;
+		const existing = hasOwnPathKey(record, segment) ? record[segment] : void 0;
+		if (!existing || typeof existing !== "object") record[segment] = nextIsIndex ? [] : {};
+		current = record[segment];
+	}
+	const last = path[path.length - 1];
+	if (Array.isArray(current)) {
+		if (!isIndexSegment(last)) throw new Error(`Expected numeric index for array segment "${last}"`);
+		const index = Number.parseInt(last, 10);
+		current[index] = value;
+		return;
+	}
+	if (!current || typeof current !== "object") throw new Error(`Cannot set "${last}" (parent is not an object)`);
+	current[last] = value;
+}
+function unsetAtPath(root, path) {
+	let current = root;
+	for (let i = 0; i < path.length - 1; i += 1) {
+		const segment = path[i];
+		if (!current || typeof current !== "object") return false;
+		if (Array.isArray(current)) {
+			if (!isIndexSegment(segment)) return false;
+			const index = Number.parseInt(segment, 10);
+			if (!Number.isFinite(index) || index < 0 || index >= current.length) return false;
+			current = current[index];
+			continue;
+		}
+		const record = current;
+		if (!hasOwnPathKey(record, segment)) return false;
+		current = record[segment];
+	}
+	const last = path[path.length - 1];
+	if (Array.isArray(current)) {
+		if (!isIndexSegment(last)) return false;
+		const index = Number.parseInt(last, 10);
+		if (!Number.isFinite(index) || index < 0 || index >= current.length) return false;
+		current.splice(index, 1);
+		return true;
+	}
+	if (!current || typeof current !== "object") return false;
+	const record = current;
+	if (!hasOwnPathKey(record, last)) return false;
+	delete record[last];
+	return true;
+}
+async function loadValidConfig(runtime = defaultRuntime) {
+	const snapshot = await readConfigFileSnapshot();
+	if (snapshot.valid) return snapshot;
+	runtime.error(`Config invalid at ${shortenHomePath(snapshot.path)}.`);
+	for (const issue of snapshot.issues) runtime.error(`- ${issue.path || "<root>"}: ${issue.message}`);
+	runtime.error(`Run \`${formatCliCommand("remoteclaw doctor")}\` to repair, then retry.`);
+	runtime.exit(1);
+	return snapshot;
+}
+function parseRequiredPath(path) {
+	const parsedPath = parsePath(path);
+	if (parsedPath.length === 0) throw new Error("Path is empty.");
+	validatePathSegments(parsedPath);
+	return parsedPath;
+}
+async function runConfigGet(opts) {
+	const runtime = opts.runtime ?? defaultRuntime;
+	try {
+		const parsedPath = parseRequiredPath(opts.path);
+		const res = getAtPath(redactConfigObject((await loadValidConfig(runtime)).config), parsedPath);
+		if (!res.found) {
+			runtime.error(danger(`Config path not found: ${opts.path}`));
+			runtime.exit(1);
+			return;
+		}
+		if (opts.json) {
+			runtime.log(JSON.stringify(res.value ?? null, null, 2));
+			return;
+		}
+		if (typeof res.value === "string" || typeof res.value === "number" || typeof res.value === "boolean") {
+			runtime.log(String(res.value));
+			return;
+		}
+		runtime.log(JSON.stringify(res.value ?? null, null, 2));
+	} catch (err) {
+		runtime.error(danger(String(err)));
+		runtime.exit(1);
+	}
+}
+async function runConfigUnset(opts) {
+	const runtime = opts.runtime ?? defaultRuntime;
+	try {
+		const parsedPath = parseRequiredPath(opts.path);
+		const snapshot = await loadValidConfig(runtime);
+		const next = structuredClone(snapshot.resolved);
+		if (!unsetAtPath(next, parsedPath)) {
+			runtime.error(danger(`Config path not found: ${opts.path}`));
+			runtime.exit(1);
+			return;
+		}
+		await writeConfigFile(next, { unsetPaths: [parsedPath] });
+		runtime.log(info(`Removed ${opts.path}. Restart the gateway to apply.`));
+	} catch (err) {
+		runtime.error(danger(String(err)));
+		runtime.exit(1);
+	}
+}
+function registerConfigCli(program) {
+	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset). Run without subcommand for the setup wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.remoteclaw.org/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
+		const { configureCommandFromSectionsArg } = await import("./configure-B25UEQnQ.js").then((n) => n.t);
+		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
+	});
+	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {
+		await runConfigGet({
+			path,
+			json: Boolean(opts.json)
+		});
+	});
+	cmd.command("set").description("Set a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").argument("<value>", "Value (JSON5 or raw string)").option("--strict-json", "Strict JSON5 parsing (error instead of raw string fallback)", false).option("--json", "Legacy alias for --strict-json", false).action(async (path, value, opts) => {
+		try {
+			const parsedPath = parseRequiredPath(path);
+			const parsedValue = parseValue(value, { strictJson: Boolean(opts.strictJson || opts.json) });
+			const snapshot = await loadValidConfig();
+			const next = structuredClone(snapshot.resolved);
+			setAtPath(next, parsedPath, parsedValue);
+			await writeConfigFile(next);
+			defaultRuntime.log(info(`Updated ${path}. Restart the gateway to apply.`));
+		} catch (err) {
+			defaultRuntime.error(danger(String(err)));
+			defaultRuntime.exit(1);
+		}
+	});
+	cmd.command("unset").description("Remove a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").action(async (path) => {
+		await runConfigUnset({ path });
+	});
+}
+
+//#endregion
+export { registerConfigCli, runConfigGet, runConfigUnset };

package/dist/config-cli-DrJtiyW-.js

@@ -0,0 +1,247 @@
+import "./paths-BTaH3rLn.js";
+import { E as info, L as theme, T as danger, b as shortenHomePath } from "./utils-C5daYcFn.js";
+import "./subsystem-BgxIzx7w.js";
+import { n as defaultRuntime } from "./runtime-Ds3E9SqF.js";
+import "./ansi-aRwLYlzD.js";
+import { _ as isBlockedObjectKey } from "./session-key-C2n-VILA.js";
+import "./agent-scope-BrDeaWWf.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-CHDaGquZ.js";
+import "./env-DUb5GiQe.js";
+import "./host-env-security-Bms2_EMV.js";
+import "./shell-env-CsV_IkJj.js";
+import "./env-vars-CLGbxdpL.js";
+import "./zod-schema-D3hQ5SKe.js";
+import { t as formatCliCommand } from "./command-format-D0vKipG9.js";
+import { t as formatDocsLink } from "./links-CIHbVNO_.js";
+import { t as redactConfigObject } from "./redact-snapshot-B-2V56Yb.js";
+import JSON5 from "json5";
+
+//#region src/cli/config-cli.ts
+function isIndexSegment(raw) {
+	return /^[0-9]+$/.test(raw);
+}
+function parsePath(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return [];
+	const parts = [];
+	let current = "";
+	let i = 0;
+	while (i < trimmed.length) {
+		const ch = trimmed[i];
+		if (ch === "\\") {
+			const next = trimmed[i + 1];
+			if (next) current += next;
+			i += 2;
+			continue;
+		}
+		if (ch === ".") {
+			if (current) parts.push(current);
+			current = "";
+			i += 1;
+			continue;
+		}
+		if (ch === "[") {
+			if (current) parts.push(current);
+			current = "";
+			const close = trimmed.indexOf("]", i);
+			if (close === -1) throw new Error(`Invalid path (missing "]"): ${raw}`);
+			const inside = trimmed.slice(i + 1, close).trim();
+			if (!inside) throw new Error(`Invalid path (empty "[]"): ${raw}`);
+			parts.push(inside);
+			i = close + 1;
+			continue;
+		}
+		current += ch;
+		i += 1;
+	}
+	if (current) parts.push(current);
+	return parts.map((part) => part.trim()).filter(Boolean);
+}
+function parseValue(raw, opts) {
+	const trimmed = raw.trim();
+	if (opts.strictJson) try {
+		return JSON5.parse(trimmed);
+	} catch (err) {
+		throw new Error(`Failed to parse JSON5 value: ${String(err)}`, { cause: err });
+	}
+	try {
+		return JSON5.parse(trimmed);
+	} catch {
+		return raw;
+	}
+}
+function hasOwnPathKey(value, key) {
+	return Object.prototype.hasOwnProperty.call(value, key);
+}
+function validatePathSegments(path) {
+	for (const segment of path) if (!isIndexSegment(segment) && isBlockedObjectKey(segment)) throw new Error(`Invalid path segment: ${segment}`);
+}
+function getAtPath(root, path) {
+	let current = root;
+	for (const segment of path) {
+		if (!current || typeof current !== "object") return { found: false };
+		if (Array.isArray(current)) {
+			if (!isIndexSegment(segment)) return { found: false };
+			const index = Number.parseInt(segment, 10);
+			if (!Number.isFinite(index) || index < 0 || index >= current.length) return { found: false };
+			current = current[index];
+			continue;
+		}
+		const record = current;
+		if (!hasOwnPathKey(record, segment)) return { found: false };
+		current = record[segment];
+	}
+	return {
+		found: true,
+		value: current
+	};
+}
+function setAtPath(root, path, value) {
+	let current = root;
+	for (let i = 0; i < path.length - 1; i += 1) {
+		const segment = path[i];
+		const next = path[i + 1];
+		const nextIsIndex = Boolean(next && isIndexSegment(next));
+		if (Array.isArray(current)) {
+			if (!isIndexSegment(segment)) throw new Error(`Expected numeric index for array segment "${segment}"`);
+			const index = Number.parseInt(segment, 10);
+			const existing = current[index];
+			if (!existing || typeof existing !== "object") current[index] = nextIsIndex ? [] : {};
+			current = current[index];
+			continue;
+		}
+		if (!current || typeof current !== "object") throw new Error(`Cannot traverse into "${segment}" (not an object)`);
+		const record = current;
+		const existing = hasOwnPathKey(record, segment) ? record[segment] : void 0;
+		if (!existing || typeof existing !== "object") record[segment] = nextIsIndex ? [] : {};
+		current = record[segment];
+	}
+	const last = path[path.length - 1];
+	if (Array.isArray(current)) {
+		if (!isIndexSegment(last)) throw new Error(`Expected numeric index for array segment "${last}"`);
+		const index = Number.parseInt(last, 10);
+		current[index] = value;
+		return;
+	}
+	if (!current || typeof current !== "object") throw new Error(`Cannot set "${last}" (parent is not an object)`);
+	current[last] = value;
+}
+function unsetAtPath(root, path) {
+	let current = root;
+	for (let i = 0; i < path.length - 1; i += 1) {
+		const segment = path[i];
+		if (!current || typeof current !== "object") return false;
+		if (Array.isArray(current)) {
+			if (!isIndexSegment(segment)) return false;
+			const index = Number.parseInt(segment, 10);
+			if (!Number.isFinite(index) || index < 0 || index >= current.length) return false;
+			current = current[index];
+			continue;
+		}
+		const record = current;
+		if (!hasOwnPathKey(record, segment)) return false;
+		current = record[segment];
+	}
+	const last = path[path.length - 1];
+	if (Array.isArray(current)) {
+		if (!isIndexSegment(last)) return false;
+		const index = Number.parseInt(last, 10);
+		if (!Number.isFinite(index) || index < 0 || index >= current.length) return false;
+		current.splice(index, 1);
+		return true;
+	}
+	if (!current || typeof current !== "object") return false;
+	const record = current;
+	if (!hasOwnPathKey(record, last)) return false;
+	delete record[last];
+	return true;
+}
+async function loadValidConfig(runtime = defaultRuntime) {
+	const snapshot = await readConfigFileSnapshot();
+	if (snapshot.valid) return snapshot;
+	runtime.error(`Config invalid at ${shortenHomePath(snapshot.path)}.`);
+	for (const issue of snapshot.issues) runtime.error(`- ${issue.path || "<root>"}: ${issue.message}`);
+	runtime.error(`Run \`${formatCliCommand("remoteclaw doctor")}\` to repair, then retry.`);
+	runtime.exit(1);
+	return snapshot;
+}
+function parseRequiredPath(path) {
+	const parsedPath = parsePath(path);
+	if (parsedPath.length === 0) throw new Error("Path is empty.");
+	validatePathSegments(parsedPath);
+	return parsedPath;
+}
+async function runConfigGet(opts) {
+	const runtime = opts.runtime ?? defaultRuntime;
+	try {
+		const parsedPath = parseRequiredPath(opts.path);
+		const res = getAtPath(redactConfigObject((await loadValidConfig(runtime)).config), parsedPath);
+		if (!res.found) {
+			runtime.error(danger(`Config path not found: ${opts.path}`));
+			runtime.exit(1);
+			return;
+		}
+		if (opts.json) {
+			runtime.log(JSON.stringify(res.value ?? null, null, 2));
+			return;
+		}
+		if (typeof res.value === "string" || typeof res.value === "number" || typeof res.value === "boolean") {
+			runtime.log(String(res.value));
+			return;
+		}
+		runtime.log(JSON.stringify(res.value ?? null, null, 2));
+	} catch (err) {
+		runtime.error(danger(String(err)));
+		runtime.exit(1);
+	}
+}
+async function runConfigUnset(opts) {
+	const runtime = opts.runtime ?? defaultRuntime;
+	try {
+		const parsedPath = parseRequiredPath(opts.path);
+		const snapshot = await loadValidConfig(runtime);
+		const next = structuredClone(snapshot.resolved);
+		if (!unsetAtPath(next, parsedPath)) {
+			runtime.error(danger(`Config path not found: ${opts.path}`));
+			runtime.exit(1);
+			return;
+		}
+		await writeConfigFile(next, { unsetPaths: [parsedPath] });
+		runtime.log(info(`Removed ${opts.path}. Restart the gateway to apply.`));
+	} catch (err) {
+		runtime.error(danger(String(err)));
+		runtime.exit(1);
+	}
+}
+function registerConfigCli(program) {
+	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset). Run without subcommand for the setup wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.remoteclaw.org/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
+		const { configureCommandFromSectionsArg } = await import("./configure-CqMUE4Zw.js").then((n) => n.t);
+		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
+	});
+	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {
+		await runConfigGet({
+			path,
+			json: Boolean(opts.json)
+		});
+	});
+	cmd.command("set").description("Set a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").argument("<value>", "Value (JSON5 or raw string)").option("--strict-json", "Strict JSON5 parsing (error instead of raw string fallback)", false).option("--json", "Legacy alias for --strict-json", false).action(async (path, value, opts) => {
+		try {
+			const parsedPath = parseRequiredPath(path);
+			const parsedValue = parseValue(value, { strictJson: Boolean(opts.strictJson || opts.json) });
+			const snapshot = await loadValidConfig();
+			const next = structuredClone(snapshot.resolved);
+			setAtPath(next, parsedPath, parsedValue);
+			await writeConfigFile(next);
+			defaultRuntime.log(info(`Updated ${path}. Restart the gateway to apply.`));
+		} catch (err) {
+			defaultRuntime.error(danger(String(err)));
+			defaultRuntime.exit(1);
+		}
+	});
+	cmd.command("unset").description("Remove a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").action(async (path) => {
+		await runConfigUnset({ path });
+	});
+}
+
+//#endregion
+export { registerConfigCli };

package/dist/config-guard-BLsqW1qt.js

@@ -0,0 +1,98 @@
+import "./paths-BTaH3rLn.js";
+import { F as colorize, I as isRich, L as theme, b as shortenHomePath } from "./utils-C5daYcFn.js";
+import "./subsystem-BgxIzx7w.js";
+import "./runtime-Ds3E9SqF.js";
+import "./ansi-aRwLYlzD.js";
+import "./agent-scope-BrDeaWWf.js";
+import "./message-channel-DF4I2vOK.js";
+import { o as readConfigFileSnapshot } from "./config-CHDaGquZ.js";
+import "./env-DUb5GiQe.js";
+import "./host-env-security-Bms2_EMV.js";
+import "./shell-env-CsV_IkJj.js";
+import "./env-vars-CLGbxdpL.js";
+import "./zod-schema-D3hQ5SKe.js";
+import "./dock-D038fZZl.js";
+import { t as formatCliCommand } from "./command-format-D0vKipG9.js";
+import "./plugins-D6-JJ1il.js";
+import "./accounts-A8jZK_v9.js";
+import "./accounts-BegPt5VR.js";
+import "./accounts-BmiimLpP.js";
+import "./bindings-B6icMMUx.js";
+import "./chat-envelope-BEDutlnF.js";
+import "./store-Dv76bGHg.js";
+import "./strip-inbound-meta-BNXRYvmY.js";
+import { c as shouldMigrateStateFromPath } from "./argv-neJY_Hxm.js";
+import "./catalog-CUY_iTaG.js";
+import "./prompt-style-CYEpbwXH.js";
+import "./note-BVerR3D5.js";
+import "./plugin-auto-enable-BnCQKkIK.js";
+import { t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-DJ1nWCTZ.js";
+
+//#region src/cli/program/config-guard.ts
+const ALLOWED_INVALID_COMMANDS = new Set([
+	"doctor",
+	"logs",
+	"health",
+	"help",
+	"status"
+]);
+const ALLOWED_INVALID_GATEWAY_SUBCOMMANDS = new Set([
+	"status",
+	"probe",
+	"health",
+	"discover",
+	"call",
+	"install",
+	"uninstall",
+	"start",
+	"stop",
+	"restart"
+]);
+let didRunDoctorConfigFlow = false;
+let configSnapshotPromise = null;
+function formatConfigIssues(issues) {
+	return issues.map((issue) => `- ${issue.path || "<root>"}: ${issue.message}`);
+}
+async function getConfigSnapshot() {
+	if (process.env.VITEST === "true") return readConfigFileSnapshot();
+	configSnapshotPromise ??= readConfigFileSnapshot();
+	return configSnapshotPromise;
+}
+async function ensureConfigReady(params) {
+	const commandPath = params.commandPath ?? [];
+	if (!didRunDoctorConfigFlow && shouldMigrateStateFromPath(commandPath)) {
+		didRunDoctorConfigFlow = true;
+		await loadAndMaybeMigrateDoctorConfig({
+			options: { nonInteractive: true },
+			confirm: async () => false
+		});
+	}
+	const snapshot = await getConfigSnapshot();
+	const commandName = commandPath[0];
+	const subcommandName = commandPath[1];
+	const allowInvalid = commandName ? ALLOWED_INVALID_COMMANDS.has(commandName) || commandName === "gateway" && subcommandName && ALLOWED_INVALID_GATEWAY_SUBCOMMANDS.has(subcommandName) : false;
+	const issues = snapshot.exists && !snapshot.valid ? formatConfigIssues(snapshot.issues) : [];
+	const legacyIssues = snapshot.legacyIssues.length > 0 ? snapshot.legacyIssues.map((issue) => `- ${issue.path}: ${issue.message}`) : [];
+	if (!(snapshot.exists && !snapshot.valid)) return;
+	const rich = isRich();
+	const muted = (value) => colorize(rich, theme.muted, value);
+	const error = (value) => colorize(rich, theme.error, value);
+	const heading = (value) => colorize(rich, theme.heading, value);
+	const commandText = (value) => colorize(rich, theme.command, value);
+	params.runtime.error(heading("Config invalid"));
+	params.runtime.error(`${muted("File:")} ${muted(shortenHomePath(snapshot.path))}`);
+	if (issues.length > 0) {
+		params.runtime.error(muted("Problem:"));
+		params.runtime.error(issues.map((issue) => `  ${error(issue)}`).join("\n"));
+	}
+	if (legacyIssues.length > 0) {
+		params.runtime.error(muted("Legacy config keys detected:"));
+		params.runtime.error(legacyIssues.map((issue) => `  ${error(issue)}`).join("\n"));
+	}
+	params.runtime.error("");
+	params.runtime.error(`${muted("Run:")} ${commandText(formatCliCommand("remoteclaw doctor --fix"))}`);
+	if (!allowInvalid) params.runtime.exit(1);
+}
+
+//#endregion
+export { ensureConfigReady };

package/dist/config-guard-NQ7jaYM4.js

@@ -0,0 +1,75 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { Ct as theme, St as isRich, cn as shouldMigrateStateFromPath, ot as shortenHomePath, xt as colorize } from "./entry.js";
+import { o as readConfigFileSnapshot } from "./config-BupC6eiJ.js";
+import { t as formatCliCommand } from "./command-format-KkslAzwV.js";
+import { t as loadAndMaybeMigrateDoctorConfig } from "./doctor-config-flow-DYhXUwEq.js";
+
+//#region src/cli/program/config-guard.ts
+var config_guard_exports = /* @__PURE__ */ __exportAll({ ensureConfigReady: () => ensureConfigReady });
+const ALLOWED_INVALID_COMMANDS = new Set([
+	"doctor",
+	"logs",
+	"health",
+	"help",
+	"status"
+]);
+const ALLOWED_INVALID_GATEWAY_SUBCOMMANDS = new Set([
+	"status",
+	"probe",
+	"health",
+	"discover",
+	"call",
+	"install",
+	"uninstall",
+	"start",
+	"stop",
+	"restart"
+]);
+let didRunDoctorConfigFlow = false;
+let configSnapshotPromise = null;
+function formatConfigIssues(issues) {
+	return issues.map((issue) => `- ${issue.path || "<root>"}: ${issue.message}`);
+}
+async function getConfigSnapshot() {
+	if (process.env.VITEST === "true") return readConfigFileSnapshot();
+	configSnapshotPromise ??= readConfigFileSnapshot();
+	return configSnapshotPromise;
+}
+async function ensureConfigReady(params) {
+	const commandPath = params.commandPath ?? [];
+	if (!didRunDoctorConfigFlow && shouldMigrateStateFromPath(commandPath)) {
+		didRunDoctorConfigFlow = true;
+		await loadAndMaybeMigrateDoctorConfig({
+			options: { nonInteractive: true },
+			confirm: async () => false
+		});
+	}
+	const snapshot = await getConfigSnapshot();
+	const commandName = commandPath[0];
+	const subcommandName = commandPath[1];
+	const allowInvalid = commandName ? ALLOWED_INVALID_COMMANDS.has(commandName) || commandName === "gateway" && subcommandName && ALLOWED_INVALID_GATEWAY_SUBCOMMANDS.has(subcommandName) : false;
+	const issues = snapshot.exists && !snapshot.valid ? formatConfigIssues(snapshot.issues) : [];
+	const legacyIssues = snapshot.legacyIssues.length > 0 ? snapshot.legacyIssues.map((issue) => `- ${issue.path}: ${issue.message}`) : [];
+	if (!(snapshot.exists && !snapshot.valid)) return;
+	const rich = isRich();
+	const muted = (value) => colorize(rich, theme.muted, value);
+	const error = (value) => colorize(rich, theme.error, value);
+	const heading = (value) => colorize(rich, theme.heading, value);
+	const commandText = (value) => colorize(rich, theme.command, value);
+	params.runtime.error(heading("Config invalid"));
+	params.runtime.error(`${muted("File:")} ${muted(shortenHomePath(snapshot.path))}`);
+	if (issues.length > 0) {
+		params.runtime.error(muted("Problem:"));
+		params.runtime.error(issues.map((issue) => `  ${error(issue)}`).join("\n"));
+	}
+	if (legacyIssues.length > 0) {
+		params.runtime.error(muted("Legacy config keys detected:"));
+		params.runtime.error(legacyIssues.map((issue) => `  ${error(issue)}`).join("\n"));
+	}
+	params.runtime.error("");
+	params.runtime.error(`${muted("Run:")} ${commandText(formatCliCommand("remoteclaw doctor --fix"))}`);
+	if (!allowInvalid) params.runtime.exit(1);
+}
+
+//#endregion
+export { ensureConfigReady as n, config_guard_exports as t };

package/dist/config-validation-BLllMW0t.js

@@ -0,0 +1,18 @@
+import { o as readConfigFileSnapshot } from "./config-BupC6eiJ.js";
+import { t as formatCliCommand } from "./command-format-KkslAzwV.js";
+
+//#region src/commands/config-validation.ts
+async function requireValidConfigSnapshot(runtime) {
+	const snapshot = await readConfigFileSnapshot();
+	if (snapshot.exists && !snapshot.valid) {
+		const issues = snapshot.issues.length > 0 ? snapshot.issues.map((issue) => `- ${issue.path}: ${issue.message}`).join("\n") : "Unknown validation issue.";
+		runtime.error(`Config invalid:\n${issues}`);
+		runtime.error(`Fix the config or run ${formatCliCommand("remoteclaw doctor")}.`);
+		runtime.exit(1);
+		return null;
+	}
+	return snapshot.config;
+}
+
+//#endregion
+export { requireValidConfigSnapshot as t };